@stephenfewer@rapid7 Really appreciate you response so fast and I do test the command in "Protocol Analysis Section" but I can only capture "get auth" or "keepalive" messages🥲.BTY the way you analyze the firmware and diff patches are really heuristical, always feel lucky to learn from the master🥰