nexmon
nexmon copied to clipboard
seemoo-lab
Galaxy Note 3 Nexmon breaks WiFi
Hello. I'm using a Galaxy Note 3 (BCM4339) and I installed the Nexmon firmware via Hijacker (https://github.com/chrisk44/Hijacker), onto Lineage OS (currently using 18.1/Android 11, and this issue also exists on LineageOS 17.1/Android 10).
Monitor mode and packet injection works fine, however it breaks standard Android WiFi functionality entirely. I can scan for networks but I cannot connect to them. I need to manually revert the firmware to the one that LineageOS comes with, each time I want to use the WiFi adapter for normal things.
I have some dmesg output, which I hope can help:
[ 1937.663668] CFG80211-TRACE) wl_escan_handler : SCAN COMPLETED: scanned AP count=8
[ 1937.725429] msm_thermal:msm_therm_temp_log Debug Temp for Sensor:
[ 1937.725464] msm_thermal:msm_therm_temp_log (0 --- 47)(1 --- 46)(2 --- 46)(3 --- 47)(4 --- 47)(5 --- 49)(6 --- 47)(7 --- 47)(8 --- 47)(9 --- 46)(10 --- 45)dhd_wl_ioctl: WLC_IOCTL: cmd: 23, ret = -17
[ 1937.755252] dhd_wl_ioctl: WLC_GET_VAR: mfp, ret = -23
[ 1937.755259] CFG80211-INFO2) wl_set_set_cipher : Get MFP failed! Check MFP support in FW
[ 1937.755267] CFG80211-INFO2) wl_cfg80211_connect : Invalid ciper
ROM source: https://download.lineageos.org/hlte
I hope there's a fix for this, and I am comfortable with modifying/recompiling my kernel if need be. Thanks!
What is the version of your original Wi-Fi firmware? Just run strings on it and look at the last line. Maybe the driver requests more featuers than available in our old firmware version.
On 9. Jun 2021, at 04:25, Lava Git @.***> wrote:
Hello. I'm using a Galaxy Note 3 (BCM4339) and I installed the Nexmon firmware via Hijacker (https://github.com/chrisk44/Hijacker https://github.com/chrisk44/Hijacker), onto Lineage OS (currently using 18.1/Android 11, and this issue also exists on LineageOS 17.1/Android 10).
Monitor mode and packet injection works fine, however it breaks standard Android WiFi functionality entirely. I can scan for networks but I cannot connect to them. I need to manually revert the firmware to the one that LineageOS comes with, each time I want to use the WiFi adapter for normal things.
I have some dmesg output, which I hope can help:
[ 1937.663668] CFG80211-TRACE) wl_escan_handler : SCAN COMPLETED: scanned AP count=8 [ 1937.725429] msm_thermal:msm_therm_temp_log Debug Temp for Sensor: [ 1937.725464] msm_thermal:msm_therm_temp_log (0 --- 47)(1 --- 46)(2 --- 46)(3 --- 47)(4 --- 47)(5 --- 49)(6 --- 47)(7 --- 47)(8 --- 47)(9 --- 46)(10 --- 45)dhd_wl_ioctl: WLC_IOCTL: cmd: 23, ret = -17 [ 1937.755252] dhd_wl_ioctl: WLC_GET_VAR: mfp, ret = -23 [ 1937.755259] CFG80211-INFO2) wl_set_set_cipher : Get MFP failed! Check MFP support in FW [ 1937.755267] CFG80211-INFO2) wl_cfg80211_connect : Invalid ciper ROM source: https://download.lineageos.org/hlte https://download.lineageos.org/hlte I hope there's a fix for this, and I am comfortable with modifying/recompiling my kernel if need be. Thanks!
— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/seemoo-lab/nexmon/issues/480, or unsubscribe https://github.com/notifications/unsubscribe-auth/ACZ773Q77XAHQMT2UN53SNTTR3GLPANCNFSM46LDNTDQ.
Had to do some digging in the /system partition but I think I finally found the firmware file.
/system/vendor/firmware # strings ./bcm4335_V0111.0559.hcd | head -20
BCM4339 4.1+ H-LTE SemcoB67-0111
What confuses me is that the file name starts with bcm4335 but the files header has BCM4339. Not sure if that matters though.
hcd is the bluetooth firmware file.
On 9. Jun 2021, at 11:04, Lava Git @.***> wrote:
Had to do some digging in the /system partition but I think I finally found the firmware file.
/system/vendor/firmware # strings ./bcm4335_V0111.0559.hcd | head -20
BCM4339 4.1+ H-LTE SemcoB67-0111 What confuses me is that the file name starts with bcm4335 but the files header has BCM4339. Not sure if that matters though.— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/seemoo-lab/nexmon/issues/480#issuecomment-857522152, or unsubscribe https://github.com/notifications/unsubscribe-auth/ACZ773UD2ITBYIAPBFNGJKTTR4VBHANCNFSM46LDNTDQ.
In which case, I have no idea where the firmware is. This is all I can find in the firmware directory: n3_vendor_firmware.zip
[lava@LLL firmware]$ ls -1
a330_pfp.fw
a330_pm4.fw
bcm2079xB4_firmware.ncd
bcm2079xB4_pre_firmware.ncd
bcm2079xB5_firmware.ncd
bcm2079xB5_pre_firmware.ncd
bcm4335_V0111.0559.hcd
cmnlib.b00
cmnlib.b01
cmnlib.b02
cmnlib.b03
cmnlib.mdt
cpp_firmware_v1_1_1.fw
cpp_firmware_v1_1_6.fw
cpp_firmware_v1_2_0.fw
keymaster
n3_vendor_firmware.zip
widevine.b00
widevine.b01
widevine.b02
widevine.b03
widevine.mdt
[lava@LLL firmware]$ pwd
/home/lava/Documents/N3Stuff/system/vendor/firmware
[lava@LLL firmware]$
I turned off the WiFi, re-enabled it and took another dmesg output. Some of this looks interesting.
[ 366.447342] init: processing action (wlan.driver.status=ok) from (/vendor/etc/init/hw/init.qcom.rc:378)
[ 366.447560] init: starting service 'macloader'...
[ 366.449998]
[ 366.450000] Dongle Host Driver, version 1.141.64.59 (security_patch)
[ 366.450003] Compiled in drivers/net/wireless/bcmdhd on Jun 9 2021 at 02:35:45
[ 366.450008] wl_android_wifi_on in
[ 366.450014] wifi_platform_set_power = 1
[ 366.450018] ------------------------------------------------
[ 366.450021] ------------------------------------------------
[ 366.450026] brcm_wlan_power Enter: power on
[ 366.450034] [brcm_wlan_power] Bluetooth Power On.
[ 366.453696] msm_pcm_playback_prepare: perf: 1
[ 366.453702] __q6asm_open_write: session[1] wr_format[0x0]
[ 366.453707] __q6asm_open_write: session[1] open.mode_flags:10000000
[ 366.460580] msm_pcm_playback_prepare: session ID 1
[ 366.465236] hostwake line change [BT]
[ 366.467830] bluesleep_sleep_work - uport is null [BT]
[ 366.501810] WL_REG_ON on-step : [0]
[ 366.501822] WL_REG_ON on-step-2 : [1]
[ 366.513781] init: Service 'macloader' (pid 6552) exited with status 0 oneshot service took 0.065000 seconds in background
[ 366.513832] init: Sending signal 9 to service 'macloader' (pid 6552) process group...
[ 366.514003] libprocessgroup: Successfully killed process cgroup uid 1000 pid 6552 in 0ms
[ 366.635150] [brcm_wlan_power] BT_REG_OFF.
[ 366.838532] sdio_reset_comm():
[ 366.865782] mmc0: queuing unknown CIS tuple 0x80 (2 bytes)
[ 366.868739] mmc0: queuing unknown CIS tuple 0x80 (7 bytes)
[ 366.870398] mmc0: queuing unknown CIS tuple 0x80 (3 bytes)
[ 366.932702] msmsdcc_execute_tuning : set tuning_done ture.
[ 366.937199] F1 signature OK, socitype:0x1 chip:0x4339 rev:0x1 pkg:0x0
[ 366.937787] DHD: dongle ram size is set to 786432(orig 786432) at 0x180000
[ 366.938482] dhdsdio_download_firmware: firmware path=/vendor/etc/wifi/bcmdhd_sta.bin, nvram path=/vendor/etc/wifi/nvram_net.txt
[ 367.012443] dhdsdio_write_vars: Download, Upload and compare of NVRAM succeeded.
[ 367.183697] dhd_bus_init: enable 0x06, ready 0x06 (waited 0us)
[ 367.186798] dhd_wl_ioctl: WLC_GET_VAR: cisdump, ret = -23
[ 367.186831] [WIFI_SEC] dhd_check_module_cid: CIS reading failed, ret=-23
[ 367.198484] Firmware up: op_mode=0x0005, MAC=f0:a6:f5
[ 367.198943] [WIFI_SEC] sec_get_param_wfa_cert: File [/data/.roamoff.info] doesn't exist
[ 367.201588] dhd_wl_ioctl: WLC_SET_VAR: const_awake_thresh, ret = -23
[ 367.201597] dhd_preinit_ioctls set const_awake_thresh failed -23
[ 367.205426] dhdcdc_set_ioctl: SET PM to 2
[ 367.205740] [WIFI_SEC] sec_control_pm: /data/.psm.info open failed, so set PM to 2
[ 367.206117] [WIFI_SEC] sec_get_param_wfa_cert: File [/data/.bustxglom.info] doesn't exist
[ 367.208163] [WIFI_SEC] sec_get_param_wfa_cert: File [/data/.frameburst.info] doesn't exist
[ 367.209463] dhd_wl_ioctl: WLC_SET_VAR: aibss_bcn_force_config, ret = -23
[ 367.209473] dhd_preinit_ioctls Set aibss_bcn_force_config to 500, 5000, 5000 returned (-23)
[ 367.210377] dhd_wl_ioctl: WLC_SET_VAR: pspretend_threshold, ret = -23
[ 367.210384] dhd_preinit_ioctls pspretend_threshold for HostAPD returned (-23)
[ 367.223322] Firmware version = wl0: Feb 26 2018 16:58:54 version 6.37.32.48.8 (A0 Station/P2P)
[ 367.224177] type=1400 audit(1623283416.983:181): avc: denied { read } for comm="e.legacy" name=".wifiver.info" dev="mmcblk0p26" ino=16 scontext=u:r:hal_wifi_default:s0 tcontext=u:object_r:system_data_root_file:s0 tclass=file permissive=1
[ 367.224484] [WIFI_SEC] sec_save_wlinfo: .wifiver.info File open failed.
[ 367.225711] [WIFI_SEC] sec_get_param_wfa_cert: File [/data/.proptx.info] doesn't exist
[ 367.227471] type=1400 audit(1623283416.983:181): avc: denied { open } for comm="e.legacy" name=".wifiver.info" dev="mmcblk0p26" ino=16 scontext=u:r:hal_wifi_default:s0 tcontext=u:object_r:system_data_root_file:s0 tclass=file permissive=1
[ 367.229034] dhd_wlfc_hostreorder_init(): successful bdcv2 tlv signaling, 64
[ 367.229592] dhd_wl_ioctl: WLC_GET_VAR: pfnlbest, ret = -23
[ 367.231301] dhd_wl_ioctl: WLC_GET_VAR: cisdump, ret = -23
[ 367.231331] [WIFI_SEC] dhd_check_module_mac: Check module mac by legacy FW : f0:a6:f5
[ 367.231538] [WIFI_SEC] Check Mac address in .mac.info
[ 367.232437] CFG80211-INFO2) wl_cfg80211_attach_post : p2p0: p2p_dev_addr=f2:a6:f5
[ 367.309611] wl_create_event_handler(): thread:wl_event_handler:19ae started
[ 367.309699] CFG80211-INFO2) wl_event_handler : tsk Enter, tsk = 0xea44c5fc
[ 367.312936] audit: audit_lost=280 audit_rate_limit=5 audit_backlog_limit=64
[ 367.312948] audit: rate limit exceeded
[ 367.314811] type=1300 audit(1623283416.983:181): arch=40000028 syscall=54 per=800008 success=yes exit=0 a0=a a1=8914 a2=bef7ac58 a3=bef7ac44 items=8 ppid=1 ppcomm=init auid=4294967295 uid=1010 gid=1010 euid=1010 suid=1010 fsuid=1010 egid=1010 sgid=1010 fsgid=1010 tty=(none) ses=4294967295 comm="e.legacy" exe="/system/vendor/bin/hw/[email protected]" subj=u:r:hal_wifi_default:s0 key=(null)
[ 367.317667] type=1302 audit(1623283416.983:181): item=0 name=(null) inode=4197 dev=b3:17 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=u:object_r:vendor_configs_file:s0
[ 367.321033] type=1302 audit(1623283416.983:181): item=1 name=(null) inode=4204 dev=b3:17 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=u:object_r:vendor_configs_file:s0
[ 367.482875] init: starting service 'wpa_supplicant'...
[ 367.486598] init: Created socket '/dev/socket/wpa_wlan0', mode 660, user 1010, group 1010
[ 367.492943] init: Control message: Processed ctl.interface_start for '[email protected]::ISupplicant/default' from pid: 1078 (/system/bin/hwservicemanager)
[ 367.713589] dhd_set_suspend: Remove extra suspend setting
[ 367.759607] max77803_get_input_current: CHG_CNFG_09(0x12)
[ 367.760115] max77803_get_input_current: CHG_CNFG_09(0x12)
[ 367.761827] CFG80211-TRACE) __wl_cfg80211_scan : START SCAN
[ 367.763276] sec-fuelgauge 19-0036: max17048_get_soc : raw capacity (7594), data(0x0000)
[ 367.790314] sec-battery battery.95: sec_bat_get_temperature_by_adc: Temp(360), Temp-ADC(31640)
[ 367.791339] sec-battery battery.95: sec_bat_get_temperature_by_adc: Temp(292), Temp-ADC(33000)
[ 367.792353] sec-fuelgauge 19-0036: max17048_get_soc : raw capacity (7594), data(0x0000)
[ 367.792372] sec-fuelgauge 19-0036: sec_fg_get_scaled_capacity: scaled capacity (76.8)
[ 367.792395] sec-battery battery.95: sec_bat_get_battery_info:Vnow(4012mV),Inow(450mA),Imax(460mA),SOC(76%),Tbat(360),is_hc_usb(0)
[ 367.792414] sec_bat_check_callback: battery->pdata->bat_irq_gpio(407)
[ 367.792444] sec_bat_check_callback: Battery status(1)
[ 367.792458] sec-battery battery.95: sec_bat_battery_cable_check: Battery Connected
[ 367.793019] max77803_get_health_state: reg_data(0x3)
[ 367.796425] max77803_get_health_state: vbus_state : 0x3, chg_dtls : 0x1
[ 367.796446] sec_bat_calculate_safety_time : EXPIRED_TIME(10792865), IP(2300000), CP(0), CURR(460), STANDARD(2000)
[ 367.796465] sec_bat_calculate_safety_time : CAL_EXPIRED_TIME(46925500) TIME NOW(374) TIME PREV(363)
[ 367.796482] sec_bat_calculate_safety_time : REMAIN_TIME(10790335) CAL_REMAIN_TIME(46914500)
[ 367.796503] sec-battery battery.95: sec_bat_monitor_work: Status(Charging), Mode(Normal), Health(Good), Cable(4), Vendor(SDI SDI), level(100%)
[ 367.802370] healthd: battery l=76 v=4012 t=36.0 h=2 st=2 c=450 chg=u
[ 367.812922] led_blink_store called
[ 368.548881] msm_thermal:msm_therm_temp_log Debug Temp for Sensor:
[ 368.548982] msm_thermal:msm_therm_temp_log (0 --- 49)(1 --- 49)(2 --- 48)(3 --- 49)(4 --- 49)(5 --- 50)(6 --- 50)(7 --- 49)(8 --- 49)(9 --- 48)(10 --- 47)
[ 369.409097] [SSP]: MSG From MCU - AR-0,737,-501,-15831 60, 60
[ 369.617492] MSM8974 LowLatency: dpcm: close FE MSM8974 LowLatency
[ 369.640928] SLIMBUS_0_RX: dpcm: close BE MSM8974 LowLatency
[ 369.696091] speaker_status_put: speaker_status = 0
[ 370.652208] CFG80211-TRACE) wl_escan_handler : SCAN COMPLETED: scanned AP count=8
[ 370.788843] dhd_wl_ioctl: WLC_IOCTL: cmd: 23, ret = -17
[ 370.793866] CFG80211-INFO2) wl_cfg80211_connect : Connectting with44:35:5b channel (3) ssid "L-BT", len (4)
[ 370.793873]
[ 370.838049] CFG80211-INFO2) wl_get_auth_assoc_status : event=3 status 0 reason 0
[ 370.846800] CFG80211-INFO2) wl_get_auth_assoc_status : event=7 status 0 reason 0
[ 370.846810] CFG80211-INFO2) wl_notify_connect_status : wl_bss_connect_done succeeded with 44:35:5b
[ 370.848252] wl_update_bss_info: ctrl ch 3, freq 2422
[ 370.848257] CFG80211-INFO2) wl_update_bss_info : ieee80211_get_channel error
[ 370.848601] dhdcdc_set_ioctl: SET PM to 0
[ 370.849209] regulatory is not upadted via queue_regulatory_request.
[ 370.853983] ETHER_TYPE_802_1X [RX] : M1 of 4way
[ 370.860148] ETHER_TYPE_802_1X [TX] : M2 of 4way
[ 370.876804] ETHER_TYPE_802_1X [RX] : M3 of 4way
[ 370.877468] ETHER_TYPE_802_1X [TX] : M4 of 4way
[ 370.901780] Governor: enter mode 0x1
[ 370.920590] CFG80211-TRACE) wl_cfg80211_set_btcoex_dhcp : DHCP is complete
[ 370.966973] CFG80211-TRACE) wl_cfg80211_set_btcoex_dhcp : DHCP session starts
[ 370.989559] CFG80211-INFO2) wl_notify_connect_status : wl_bss_connect_done succeeded with 44:35:5b
[ 371.046578] dhd_set_suspend: Remove extra suspend setting
[ 371.052395] dhdcdc_set_ioctl: SET PM to 0
[ 371.111549] dhdcdc_set_ioctl: SET PM to 2
[ 371.113775] CFG80211-TRACE) wl_cfg80211_set_btcoex_dhcp : DHCP is complete
[ 371.182611] type=1325 audit(1623283421.716:182): table=mangle family=2 entries=30
[ 371.182857] type=1320 audit(1623283421.716:182):
[ 371.185515] type=1325 audit(1623283421.716:183): table=mangle family=10 entries=29
[ 371.185744] type=1320 audit(1623283421.716:183):
[ 371.202450] audit: audit_lost=288 audit_rate_limit=5 audit_backlog_limit=64
[ 371.202456] audit: rate limit exceeded
[ 371.202477] type=1325 audit(1623283421.736:184): table=raw family=2 entries=18
[ 371.320814] init: starting service 'vendor.nfc_hal_service'...
[ 371.321780] Governor: enter mode 0x3
[ 371.364783] init: Service 'vendor.nfc_hal_service' (pid 6618) exited with status 0
[ 371.364821] init: Sending signal 9 to service 'vendor.nfc_hal_service' (pid 6618) process group...
[ 371.364980] libprocessgroup: Successfully killed process cgroup uid 1027 pid 6618 in 0ms
[ 371.611837] Governor: enter mode 0x2
[ 371.712408] [SSP]: hub_batt_adc_show: adc 1544
[ 371.715142] Governor: exit mode 0x0
[ 371.718613] [SSP]: hub_chg_adc_show: adc 1193
[ 371.727653] reading MSM_THERM_CH [rc = 0] [adc_code = 30080]
/vendor/etc/wifi # strings bcmdhd_sta.bin | tail -1
4339a0-roml/sdio-ag-pool-p2p-pno-pktfilter-keepalive-aoe-sr-mchan-proptxstatus-lpc-wl11u-betdls-autoabn-txbf-rcc-relmcast-fmc-wepso-ve-ccx-okc-clm_4335_ss-txpwr-noccxaka-mfp-ndoe Version: 6.37.32.48.8 (A0 Station/P2P) CRC: 5276f1 Date: Mon 2018-02-26 16:59:20 KST Ucode Ver: 855.10406 FWID: 01-942e430c
It is not too different from 6_37_34_43 regarding the version number. But maybe something important changed and it is not working with your latest driver, or some features are missing. So you need to patch your new firmware version.
On 10. Jun 2021, at 02:16, Lava Git @.***> wrote:
/vendor/etc/wifi # strings bcmdhd_sta.bin | tail -1
4339a0-roml/sdio-ag-pool-p2p-pno-pktfilter-keepalive-aoe-sr-mchan-proptxstatus-lpc-wl11u-betdls-autoabn-txbf-rcc-relmcast-fmc-wepso-ve-ccx-okc-clm_4335_ss-txpwr-noccxaka-mfp-ndoe Version: 6.37.32.48.8 (A0 Station/P2P) CRC: 5276f1 Date: Mon 2018-02-26 16:59:20 KST Ucode Ver: 855.10406 FWID: 01-942e430c — You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/seemoo-lab/nexmon/issues/480#issuecomment-858185616, or unsubscribe https://github.com/notifications/unsubscribe-auth/ACZ773WR2HVL3GBIO7WCRMTTR777VANCNFSM46LDNTDQ.
https://github.com/lavanoid/nexmon/commit/80ccab428c48e82fb6a67d6e6758a84cea479401
I've tried modifying the patches that currently exist for the Nexus 5, but I am unable to run the dump-rom command successfully.
I cannot install dhdutil either. It's not pre-installed on Lineage, and the Nexmon app cannot install it due to Android 11 not allowing the /system partition to be mounted as rw. If I could at least install the utilities and libraries inside of the apps data directory, I could probably do everything via adb root shell.
OK. So I found an older version of Nexutil and extracted the utilities from it ( https://github.com/seemoo-lab/bcm-public/blob/master/androidstudioprojects/Nexmon/app/app-release.apk ) as the Nexutil app from the Nethunter store didn't seem to have any binaries inside of it (?).
I pushed dhdutil to /data, marked it as executable and ran ./dhdutil membytes -r 0x0 0xA0000 > rom.bin
Here is the outputted ROM file: rom.zip
More info that might be useful. I'd super appreciate any help here. Considering the Nexus 5 firmware works fine, and it's just the Android WiFi stack that stops working, I wouldn't think it would be too much work for someone with an understanding. The below output is of the device running the firmware that comes with LineageOS.
95|hlte:/vendor/bin # dhdutil dump
Dongle Host Driver, version 1.141.64.59 (security_patch)
Compiled in drivers/net/wireless/bcmdhd on Jun 5 2021 at 08:11:23
pub.up 1 pub.txoff 0 pub.busstate 2
pub.hdrlen 48 pub.maxctl 10256 pub.rxsz 1738
pub.iswl 1 pub.drv_version 0 pub.mac f0:25:b7:12:a6:f5
pub.bcmerror -23 tickcnt 36600
dongle stats:
tx_packets 1351 tx_bytes 178680 tx_errors 0 tx_dropped 0
rx_packets 14031 rx_bytes 2730708 rx_errors 0 rx_dropped 0
multicast 7540
bus stats:
tx_packets 1351 tx_multicast 140 tx_errors 0
tx_ctlpkts 5034 tx_ctlerrs 0
rx_packets 14031 rx_multicast 7540 rx_errors 0
rx_ctlpkts 5034 rx_ctlerrs 0 rx_dropped 0
rx_readahead_cnt 0 tx_realloc 0
Protocol CDC: reqid 5034
Bus SDIO structure:
hostintmask 0x000000f0 intstatus 0x00000000 sdpcm_ver 4
fcstate 0 qlen 0 tx_seq 130, max 162, rxskip 0 rxlen 0 rx_seq 201
intr 1 intrcount 15331 lastintrs 0 spurious 0
pollrate 0 pollcnt 0 regfails 0
Additional counters:
tx_tailpad_chain 43 tx_tailpad_pktget 0
tx_sderrs 0 fcqueued 1335 rxrtx 0 rx_toolong 0 rxc_errors 0
rx_hdrfail 0 badhdr 0 badseq 27
fc_rcvd 0, fc_xoff 0, fc_xon 0
rxglomfail 0, rxglomframes 686, rxglompkts 1559
f2rx (hdrs/data) 53450 (34536/18914), f2tx 6297 f1regs 30686
Rx: pkts/f2rd 0.26, pkts/f1sd 0.45, pkts/sd 0.16, pkts/int 0.91
Rx: glom pct 11.11, pkts/glom 2.27
Tx: pkts/f2wr 0.21, pkts/f1sd 0.04, pkts/sd 0.03, pkts/int 0.08
Total: pkts/f2rw 0.25, pkts/f1sd 0.50, pkts/sd 0.17, pkts/int 1.00
dpc_sched 0 host interrupt not pending
blocksize 512 roundup 512
clkstate 3 activity 0 idletime 5 idlecount 0 sleeping 1
Kernel source code: https://github.com/LineageOS/android_kernel_samsung_msm8974
Sorry for the spam. I've been updating my repo with stuff that will help with getting this working on the Note 3. https://github.com/lavanoid/nexmon
I believe I have the base project structure there. Now it's just a matter of finding what the addresses are for stuff?
I am having the same problem now, can you tell me if you have a solution?
