Connection error with Cooplix S7000

[ededu]

Hi,

I have a Nikon Coolpix S7000 camera. This is the first time I use its wi-fi feature. I have the following error:

demo@snoopy:~/airnef$ ./airnefcmd.py –logginglevel debug

airnef v1.1 – Wireless transfer of images/movies for Nikon cameras [GPL v3]
Copyright (c) TestCams.com, Time: 12/09/15 18:17:29, Py: 2.7.11, OS: Linux

Orig cmd line: [‘./airnefcmd.py’, ‘–logginglevel’, ‘debug’]
Processed cmd line: {‘ssdp_addservice’: None, ‘connecttimeout’: 10, ‘printstackframes’: ‘no’, ‘excludefolders’: None, ‘rtd_maxsecsbeforeforceinitialobjlistget’: 5, ‘realtimedownload’: ‘disabled’, ‘outputdir’: ‘./’, ‘extlist’: None, ‘camerasleepwhendone’: ‘yes’, ‘slot’: ‘firstfound’, ‘startdate’: None, ‘filenamespec’: None, ‘downloadhistory’: ‘skipfiles’, ‘rtd_pollingmethod’: None, ‘maxgetobjbuffersizekb’: 32768, ‘sonyuniquecmdsenable’: 1, ‘ssdp_discoverytimeoutsecsperattempt’: 2, ‘ssdp_discoveryattempts’: 3, ‘initcmdreq_guid’: ‘0x7766554433221100-0x0000000000009988’, ‘downloadexec’: None, ‘ssdp_discoveryflags’: None, ‘ssdp_addmulticastif’: None, ‘cameratransferlist’: ‘useifavail’, ‘socketreadwritetimeout’: 5, ‘opensessionid’: None, ‘retrydelaysecs’: 5, ‘downloadexec_options’: [], ‘ifexists’: ‘uniquename’, ‘dirnamespec’: None, ‘logginglevel’: ‘debug’, ‘retrycount’: 9223372036854775807, ‘mtpobjcache_maxagemins’: 0, ‘ipaddress’: ‘192.168.1.1’, ‘maxgetobjtransfersizekb’: 1024, ‘suppressdupconnecterrmsgs’: ‘yes’, ‘onlyfolders’: None, ‘downloadexec_extlist’: None, ‘enddate’: None, ‘realtimepollsecs’: 3, ‘maxclockdeltabeforesync’: ‘5’, ‘initcmdreq_hostver’: 65536, ‘mtpobjcache’: ‘enabled’, ‘action’: ‘getfiles’, ‘transferorder’: ‘oldestfirst’, ‘rtd_mtppollingmethod_newobjdetection’: ‘objlist’, ‘initcmdreq_hostname’: ‘airnef’}
openConnection(): Attempting connection to 192.168.1.1:15740

openConnection(): Attempting connection to 192.168.1.1:15740
Connection established to 192.168.1.1:15740
sendInitCmdReq(): Sending MTP_TCPIP_REQ_INIT_CMD_REQ
0000: 01 00 00 00 00 11 22 33 – 44 55 66 77 88 99 00 00 ……”3 – DUfw….
0010: 00 00 00 00 61 00 69 00 – 72 00 6e 00 65 00 66 00 ….a.i. – r.n.e.f.
0020: 00 00 00 00 01 00 ……
sendInitCmdReq() response:
0000: 05 00 00 00 1d 20 00 00 – ….. .. –

The camera is rejecting the unique identifier (GUID) that airnef is
presenting. Some cameras including most Canon’s associate a given Wifi
configuration to a particular remote application’s GUID. If you have used a
remote application other than airnef with this camera (or a different
version of airnef) then you may need to re-create the WiFi configuration
on the camera to allow it to be associated with airnef’s GUID.

openConnection(): Attempting connection to 192.168.1.1:15740
Connection established to 192.168.1.1:15740
sendInitCmdReq(): Sending MTP_TCPIP_REQ_INIT_CMD_REQ
0000: 01 00 00 00 00 11 22 33 – 44 55 66 77 88 99 00 00 ……”3 – DUfw….
0010: 00 00 00 00 61 00 69 00 – 72 00 6e 00 65 00 66 00 ….a.i. – r.n.e.f.
0020: 00 00 00 00 01 00 ……

Camera is accepting connections but failing to negotiate a session. You may
need to turn the camera’s WiFi off and of or cycle the camera’s power to
recover. You can leave airnefcmd running while doing this.

Kind regards,
—
Eugen

[ededu]

Any idea about the reason of the error?

[kallitokaco]

Hi,

found this forum today, testet my S7000 and sniffed the current Nikon WMU app. It is using a different GUID ‘0x7766554433221100-0xFFEEDDCCBBAA9988’ (can be changed in the default args
and removeLeadingCharsFromStr() cannot handle an empty serialNumberStr which is missing in the GetDeviceInfo-Package or could be in binaryform instead of counted 16 bit unicode string.

I have no idea what my serialNumber should be but the Device Version is followed by:
0000 0e00 0000 0700 0000 0120 d700 0000 and the official serial of my device is: USB\VID_04B0&PID_035B\000041037952

the middle seems to be the MTP_RESP_OK response 0700 0000 0120
(Supported image Formats is 0x3812 undocumented for the S7000)
I hardcoded a ‘1234’ serialstr.

Furthermore the objectHandleRoot of the S7000 seems to be 0x01(D:) instead of 0x00 followed by a 0xFFFF FFFF parent loop also as D:
for this reason
— while (objHandleAncestorDirectory !=0 ):
++ while (objHandleAncestorDirectory > 1 ):

–applog_d(“genFullPathStr(): Unable to locate parent object for {:s}, parent=0x{:08x}”.format(self.mtpObjectInfo.filename, objHandleDirectory))
++applog_d(“genFullPathStr(): Unable to locate parent object for {:s}, parent=0x{:08x}”.format(self.mtpObjectInfo.filename, objHandleAncestorDirectory))

–if fFindAndCreateAntecendentDirs and mtpObjectInfo.parentObject and MtpObject.getByMtpObjectHandle(mtpObjectInfo.parentObject)==None:
++if fFindAndCreateAntecendentDirs and mtpObjectInfo.parentObject and mtpObjectInfo.parentObject < 0xffffffff and mtpObjectInfo.parentObject > 0x01 and MtpObject.getByMtpObjectHandle(mtpObjectInfo.parentObject)==None:

then it worked finde for me 🙂 nicely made tools, btw!

btw did someone try to dump the liveview?

[Author]

Posts