Investigating custom PTP commands

Started by ø, October 25, 2019, 07:37:04 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

ø

Hi everyone,

I've been playing with a USB analyzer lately with my 60D and some software. I'm trying here to better understand the custom PTP commands involved in service mode.

Here's what I got so far, I hope to have something more exciting to show soon.


OUT#1
14 00 00 00 - Bulk packet length
01 00 - PTP_USB_CONTAINER_COMMAND
52 90 - Vendor (Canon) specific command
01 00 00 00 - Transaction id
00 00 00 00 - ?
00 00 00 00 - ?

OUT#2
67 00 00 00 - Bulk packet length
02 00 - PTP_USB_CONTAINER_DATA
52 90 - Vendor (Canon) specific command
01 00 00 00 - Transaction id
46 41 5f 53 65 74 50 72 6f 70 65 72 74 79 00 - "FA_SetProperty\0"
03 00 00 00 - Number of parameters?
02 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00
00 00 00 02 00 00 00 04 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00
00 01 00 00 00 04 00 00 00 01 00 00 00 01 00 00 00
00 00 00 00

IN#1
10 00 00 00 - Bulk packet length
03 00 - PTP_USB_CONTAINER_RESPONSE
01 20 - PTP_RC_OK
01 00 00 00 - ?
00 00 00 00 - ?

ø

Some quick notes regarding Canon commands:

TftCff: turns off the screen

lorenzo353