[sane-devel] USB recordings MD6190 available

Bertrik Sikken bertrik at zonnet.nl
Sat Sep 24 23:31:16 UTC 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Martin Haag wrote:
>> Hi,
>>
>> I've recorded some USB traffic with SniffUSB from the Medion MD6190
>> scanner tonight. I am going to analyse them in the near future, but if
>> one can't wait the scans are available on
>> http://mibix.de/wiki/index.php/MD6190_USB_Recording .
>>
>> By the way, maybe someone can give me some hints how to analyse such a
>> huge amount of data  :)  I thought about comparing always two of the
>> files with a block orientated compare tool such as beyond compare on
>> wind-ws.  ( hm I can't belive that I sayed this. Ok let's use diff *g*


Using a text editor grep, sort and uniq helps a lot already  :)  ...

It seems to me, that in the USB control messages, the 'value' is some
kind of command or register index.
So far, I've seen commands 0023, 0024, 002b, 002c, 002d, 0040, 0050,
0071, 00b0, 00d0, 00e0, 00e1, 00f0, 00f3 and 00f4.
For some commands, apparently the 'index' is also used, this is the
case for commands 002b, 002c, 00e0 and 00e1.

Command 002d appears to be a status register for button presses:
0 = no button, 1 = print, 2 = mail, 3 = user, 4 = ocr and 5 = scan.

Command 0040 seems to be a generic status inquiry command, which returns
4 bytes. Bytes 2 and 3 of this seem some kind of counter (line
number perhaps? or buffer level?)
(There is also a write to register 0040 that I cannot explain yet)

Commands 00E0 and 00E1 seem to complement each other. Command 00E0
is used for writing data while command 00E1 is used to read data
back. Perhaps some sub-system in the scanner, like the analog
front-end?

I think command 00F0 sets the address for transfer from/to internal
RAM and commands 00F3 and 00F4 prepare the scanner to read or
write bulk data, where the command data encodes the number of
16-bit words to transfer.

I have not been able to identify the command that sets the
scan area settings, although the data sent with command 0050
contains the numbers 2400 and 12000 which looks like some sort
of resolution setting.

Regards,
Bertrik
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDNeHEETD6mlrWxPURAgnHAJ9gmSyMc7P+/ctO9WLhrbUN53LS7wCfTQ69
HzJ74mcVeRjSaSXZ+Ys3jKs=
=ObJQ
-----END PGP SIGNATURE-----



More information about the sane-devel mailing list