An IN BULK request should be kept pending so the card can send received trafic. Special RIDS: 0x0702: don't know, but it doesn't seam to harm. 0x0800: AUX port related, probably hermes firmware read. data bytes 2,3 are the size in words. 0x0852: Enable download to ram with 2 params (lowaddr, highaddr) 0x0853: set AUXPAGE, AUXOFFSET? or even more. 0x0854: Download firmware? 0x0855: Finish firmware download 0x0860: DO CMD with 3 params (CMD, PARM0, PARM1, PARM2) if cmd==0 also allocates buffer. Expontaneus RIDs: 0x0710: Standard ACK 0x0701: Received Data Frame 0x0821: 0x0860 answer? HFA384x_CMDCODE_DIAG answer? 0x0860 >>> 03 00 23 DC DC 23 00 00 0x0821 <<< 00 00 00 00 0xF101: 0x0860 answer? HFA384x_CMDCODE_INQ answer? HFA384x_IT_SCANRESULTS == F101 0x0860 >>> 11 00 01 F1 00 00 00 00 0xF101 <<< None 0xF200: 0x0860 answer? HFA384x_CMDCODE_DISABLE answer? HFA384x_IT_LINKSTATUS == F200 HFA384x_LINK_DISCONNECTED == 0002 0x0860 >>> 02 00 00 00 00 00 00 00 0xF200 <<< 02 00 Network name: Empty: >>>>>>>> USBDEVFS_URB_TYPE_BULK byte: 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 0x000: 10 02 50 00 02 00 26 00 DC 12 12 00 02 FC 00 00 0x010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <<<<<<<< USBDEVFS_URB_TYPE_BULK byte: 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 0x000: 10 02 00 51 01 00 04 00 A0 0D 01 00 10 07 'claudio' >>>>>>>> USBDEVFS_URB_TYPE_BULK byte: 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 0x000: 10 02 50 00 02 00 26 00 DC 12 12 00 02 FC 07 00 length^--^ 0x010: 63 6C 61 75 64 69 6F 00 00 00 00 00 00 00 00 00 ^---------------------------value 0x020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <<<<<<<< USBDEVFS_URB_TYPE_BULK byte: 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 0x000: 10 02 00 51 01 00 04 00 A0 0D 01 00 10 07 Dialog: >>>>>>>> USBDEVFS_URB_TYPE_BULK byte: 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 0x000: 10 02 50 00 02 00 26 00 DC 12 12 00 02 FC 00 00 ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | +---data | | | | | | | | | | | | | | | | | | | | | | | | | | +--+ RID | | | | | | | | | | | | | | | | | | | | | | +--+ Length in words | | | | | | | | | | +------Data | | | | | | | | | | | | | | | | | | +--+ CRC of bytes 0-7 | | | | | | | | | | | | | | +--+ Data Size | | | | | + Must be 0x00 | | | | + 0x02 for control 0x01 for frames(led?) | | | + seams always 0x00 | | + previous replay count | | +--+ must be 0x10 0x02 0x010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 replay count only increments when 04 is 0x02 <<<<<<<< USBDEVFS_URB_TYPE_BULK byte: 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 0x000: 10 02 00 51 01 00 04 00 A0 0D 01 00 10 07 ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ | | | | | | | | | | | | | | | | | | | | | | | | | | +--+ RID | | | | | | | | | | +--+ Length in words | | | | | | | | | | +------data | | | | | | | | | | | | | | | | | | +--+ CRC of bytes 0-7 | | | | | | | | | | | | | | +--+ data size | | | | | | | | | | +--+ always 0x01 0x00 | | | + increasing counter(replay count) | | + always 0x00 | | +--+ always 0x10 0x02 Ad-hoc channel: channel 1: >>>>>>>> USBDEVFS_URB_TYPE_BULK byte: 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 0x000: 10 02 47 00 02 00 06 00 7C 11 02 00 03 FC 01 00 <<<<<<<< USBDEVFS_URB_TYPE_BULK byte: 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 0x000: 10 02 00 48 01 00 04 00 10 0D 01 00 10 07 channel 2: >>>>>>>> USBDEVFS_URB_TYPE_BULK byte: 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 0x000: 10 02 47 00 02 00 06 00 7C 11 02 00 03 FC 02 00 <<<<<<<< USBDEVFS_URB_TYPE_BULK byte: 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 0x000: 10 02 00 48 01 00 04 00 10 0D 01 00 10 07