Contents
- T-Com Speedport W701V
T-Com Speedport W701V
Speak to hydra or loswillios on #openwrt and #ar7 on freenode for more info.
This page was originally written by Hydra and some of it's contents is used on the W901V page also on this wiki. Any references to 'I', 'me' or 'my' refer to Hydra.
Status
Wifi: loading acx-mac80211 freezes the router (chip: TNETW1350A, it's a chip with features somewhere between the supported TNETW1150 and the TNETW1450)
ADSL: working
Ethernet: working
LEDs: working
Serial Port: working
Hardware Info
Uses TI AR7 chipset, onboard wireless lan, a very nice amount of ram (32MB) and flash (8MB) making it a great device to run OpenWRT on!
Being an AR7 device it also has a built-in ADSL Modem, the Speedport W701V also features as ISDN socket and two telephone sockets for VoIP use.
CPU: TNETD7200ZDW (AR7) @211Mhz Flash: 8 MB Ram: 32 MB WLan Chip: TNETW1350A Ethernet Switch Chip: Infineon ADM6996LC
It also has a single 3.3v serial port, the original T-Com firmware allows you shell access with no password to the device though the serial port.
Bootloader
The bootloader is ADAM2 which provides a console on the serial port and allows flashing via FTP. The W701V's bootloader's default IP address is 192.168.178.1, you should be able to ping it on that address a second or two after the device is rebooted. If not reset the device back to it's defaults using the reset button on the back (see tcom's site for info on how to do this). My router came with a very recent edition, v1.203, from February 2007.
Photos
Serial Port
It has a 3.3v serial port to the lower right of the CPU, near the crystal and the large capacitor. The PCB on my router didn't have a pin header/pin strip attached to it so I bought a pin strip from Maplin Electronics for £0.79p and soldered it carefully to the back of the PCB I then attached my serial port adaptor (see the Addontech ARM8100 page on this wiki for circuit diagram, note the different order of RX and TX signals on the router's pin serial port) to the pin header and to my pc.
The general location of the port and it's pin-out is as follows:
Top right of PCB
_________________________
|
F R A M |
L WIFI |
A CHIP |
S SoC |
H CPU XTal |
4 GND |
3 TX |
2 RX |
1 VCC |
|
ADM6996 |
|
_________________________|
Serial port settings: 38400 8N1
Original Firmware Info
Backing up original firmware
To backup the original firmware you'll need console access to the device, e.g. use a serial cable and minicom to access the root shell.
You can then dump each mtd block to a file and download them via the built in web browser as below.
mkdir /var/backup cp /dev/mtd1 /var/backup/mtd1-rootfs.bin cp /dev/mtd2 /var/backup/mtd2-kernel-and-rootfs.bin cp /dev/mtd3 /var/backup/mtd3-bootloader.bin cp /dev/mtd4 /var/backup/mtd4-nvram1.bin cp /dev/mtd5 /var/backup/mtd5-nvram2.bin kill `pidof websrv` cd /var rm html ln -s backup html websrv
You can then download the files by pointing your webbrowser at http://<your router's ip>/mtd0-rootfs.bin etc.
All being well you should have files like this
# ls -al drwxr-xr-x 2 root root 0 Jan 1 01:10 . drwxrwxr-x 8 root root 0 Jan 1 01:04 .. -rw-r--r-- 1 root root 7158272 Jan 1 01:09 mtd1-rootfs.bin -rw-r--r-- 1 root root 7798784 Jan 1 01:09 mtd2-kernel-and-rootfs.bin -rw-r--r-- 1 root root 65536 Jan 1 01:09 mtd3-bootloader.bin -rw-r--r-- 1 root root 262144 Jan 1 01:10 mtd4-nvram1.bin -rw-r--r-- 1 root root 262144 Jan 1 01:10 mtd5-nvram2.bin
Another way is to do this via a tftp (tftp server eg ip 192.168.178.21):
cat /dev/mtdblock3 | tftp -p -l - -r urlader.image 192.168.178.21 cat /dev/mtdblock7 | tftp -p -l - -r kernel.image 192.168.178.21
this can be easily flashed back via adam2 for recovering
Restoring Original Firmware
Undoing changes to adam2 config
TODO: finish this section, here's some hints for now
flashing my own backup didn't work for me, I had to use speed-to-fritz from ippf. It works with the new Firmware from T-Home also. Use it with "sudo ./sp-to-fritz.sh -m 701" and flash the resulting image with adam2:
ftp 192.168.1.1 (login: adam2/adam2)
binary passiv quote MEDIA FLSH put Firmware.new/kernel.image mtd1 quote SETENV firmware_version tcom quote UNSETENV kernel_args quote UNSETENV mtd5 quote REBOOT bye
Boot log from old firmware
(AVM) EVA Revision: 1.190 Version: 1190
(C) Copyright 2005 AVM Date: Nov 15 2006 Time: 16:53:42 (0) 2 0-11111
[FLASH:] SPANSION Top-MirrorBit-Flash 8MB 32 Bytes WriteBuffer
[FLASH:](Eraseregion [0] 127 sectors a 64kB)
[FLASH:](Eraseregion [1] 8 sectors a 8kB)
[SYSTEM:] OHIO on 211MHz/125MHz
Eva_AVM >AVM decompress Kernel:
............done
start kernel
[ohio_pre_init] System Clk = 62500000 Hz Linux version 2.6.13.1-ohio (jpluschke@EmbeddedVM) (gcc version 3.4.3) #3 Thu Feb 7
YAMON MEMORY DESCRIPTOR dump:
prom_memsize = 0x02000000
memsize=32 MByte
prom_flashsize = 0x00800000
flashsize=8 MByte
&_end=0x9420aec8 PFN_ALIGN(&_end)=0x9420b000 CPHYSADDR(PFN_ALIGN(&_end))=0x1420b000 memsize=0x2000000
[0,941e4fc0]: base<14000000> size<0020b000> type<Dont use memory>
[0,941e4fcc]: base<1420b000> size<01df5000> type<Free memmory>
prom_memsize = 0x02000000
memsize=32 MByte
prom_flashsize = 0x00800000
flashsize=8 MByte
&_end=0x9420aec8 PFN_ALIGN(&_end)=0x9420b000 CPHYSADDR(PFN_ALIGN(&_end))=0x1420b000 memsize=0x2000000
CPU revision is: 00018448
ohio_setup+0x0/0x100
[ohio_clk_init]: dsl xtal 35328000Hz lan xtal 25000000Hz
[ohio_gpio_init]
Determined physical RAM map:
memory: 0020b000 @ 14000000 (reserved)
memory: 01df5000 @ 1420b000 (usable)
On node 0 totalpages: 8192
[alloc_node_mem_map] reduce size from 2883616 Bytes to 262176 Bytes
[alloc_node_mem_map]: (org) sizeof(mem_map) = 262176 mem_map=0x9420e000-0x9424e020
[alloc_node_mem_map]: sizeof(mem_map) = 2883616 mem_map=0x93f8e000-0x9424e020
DMA zone: 8192 pages, LIFO batch:3
Normal zone: 0 pages, LIFO batch:1
HighMem zone: 0 pages, LIFO batch:1
Built 1 zonelists
Kernel command line: idle=4 console=ttyS0,38400n8r
[ld_mmu_r4xx0] memcpy((void *)(CAC_BASE + 0x100), &except_vec2_generic, 0x30)
Primary instruction cache 16kB, physically tagged, 4-way, linesize 16 bytes.
Primary data cache 8kB, 4-way, linesize 16 bytes.
Synthesized TLB refill handler (20 instructions). Base=0x941e2734
TLB synthesizer field overflow (simm)
Synthesized TLB load handler fastpath (34 instructions) Base=0x941e5760.
TLB synthesizer field overflow (simm)
Synthesized TLB store handler fastpath (34 instructions) Base=0x941e5960.
TLB synthesizer field overflow (simm)
Synthesized TLB modify handler fastpath (33 instructions) Base=0x941e5b60.
PID hash table entries: 256 (order: 8, 4096 bytes)
[ohio_set_clock_notify] avm_clock_id_cpu notify disable 0x940013f8 0x9419be18
[ohio_set_clock_notify] avm_clock_id_cpu notify enable 0x940013f8 0x9419be18
CPU frequency 211.97 MHz
Using 105.984 MHz high precision timer.
[setup_irq]: irq 127 irqaction->handler 0x94041a10 (no_action+0x0/0x8 )
[register_console] enable commandline console 0
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 30324k/30676k available (1477k kernel code, 320k reserved, 342k data, 112k init, 0k highmem)
totalram_pages= 7589
Calibrating delay loop... 211.35 BogoMIPS (lpj=1056768)
loops_per_jiffy=1056768
Mount-cache hash table entries: 512
Checking for 'wait' instruction... [speedup] idle_mode = 4
with idle values available.
NET: Registered protocol family 16
Can't analyze prologue code at 9416fc8c
Squashfs 2.2-r2b (released 2006/02/23) (C) 2002-2005 Phillip Lougher
[avm] configured: watchdog eventled enable shift register enable direct gpio
gpio usage: reset=12 clock=13 store=10 data=9
AR7WDT: Watchdog Driver for AR7 Hardware (Version 1.0, build: Feb 8 2007 14:30:44)
Serial: 8250/16550 driver $Revision: 1.90 $ 1 ports, IRQ sharing disabled
[uart_add_one_port]
ttyS0 at MMIO 0x0 (irq = 15) is a OHIO_UART
[uart_add_one_port] dont rigister console port->type = 16
port->cons = 0x941a9680 port->cons->flags = 0x7
[uart_add_one_port] sucess
io scheduler noop registered
(vor) REG_ADM_LC_PHY_CONTROL_PORT(0x200) = 0x3100
(nach) REG_ADM_LC_PHY_CONTROL_PORT(0x200) = 0x3100
(vor) REG_ADM_LC_PHY_CONTROL_PORT(0x220) = 0x3100
(nach) REG_ADM_LC_PHY_CONTROL_PORT(0x220) = 0x3100
(vor) REG_ADM_LC_PHY_CONTROL_PORT(0x240) = 0x3100
(nach) REG_ADM_LC_PHY_CONTROL_PORT(0x240) = 0x3100
(vor) REG_ADM_LC_PHY_CONTROL_PORT(0x260) = 0x3100
(nach) REG_ADM_LC_PHY_CONTROL_PORT(0x260) = 0x3100
(vor) REG_ADM_LC_PHY_CONTROL_PORT(0x280) = 0x3100
(nach) REG_ADM_LC_PHY_CONTROL_PORT(0x280) = 0x3100
cpmac_if_register, dev cpmac0 (phy_id 0) registered
cpmac_if_register, phy_id 0 already registered
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
physmap flash device: 400000 at 10000000
phys_mapped_flash: Found 1 x16 devices at 0x0 in 16-bit bank
Amd/Fujitsu Extended Query Table at 0x0040
phys_mapped_flash: Swapping erase regions for broken CFI table.
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
RedBoot partition parsing not available
Generic platform RAM MTD, (c) 2004 Simtec Electronics
Ohio flash driver (size->0x400000 mem->0x10000000)
flash_size=0x800000
Ohio flash memory: Found 1 x16 devices at 0x0 in 16-bit bank
Amd/Fujitsu Extended Query Table at 0x0040
Ohio flash memory: Swapping erase regions for broken CFI table.
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
[mtd]: set to default: jffs2_size = 0x20 * 64KByte (0x200000 Bytes)
[ohio_find_hidden_filesystem]: super block found: bytes_used: 0x36347f/3552383
[init_ohio_flash] find hidden filesystem size=0x6d3b00 offset=0xac500
[mtd] configure jffs2 partition
[mtd] fs_size=0x400000 max=0x370000 is=0x200000 max jffs2_size value 55
Creating 7 MTD partitions on "Ohio flash memory":
0x000ac500-0x00780000 : "filesystem"
'nor-flash'
'Bits can be cleared (flash)'
'Has an erase function'
mtd: partition "filesystem" doesn't start on an erase block boundary -- force read-only
0x00010000-0x00780000 : "kernel"
'nor-flash'
'Bits can be cleared (flash)'
'Has an erase function'
0x00000000-0x00010000 : "bootloader"
'nor-flash'
'Bits can be cleared (flash)'
'Has an erase function'
'Virtual blocks not allowed'
0x00780000-0x007c0000 : "tffs (1)"
'nor-flash'
'Bits can be cleared (flash)'
'Has an erase function'
'Virtual blocks not allowed'
0x007c0000-0x00800000 : "tffs (2)"
'nor-flash'
'Bits can be cleared (flash)'
'Has an erase function'
'Virtual blocks not allowed'
0x00580000-0x00780000 : "jffs2"
'nor-flash'
'Bits can be cleared (flash)'
'Has an erase function'
'Virtual blocks not allowed'
0x00010000-0x00580000 : "Kernel without jffs2"
'nor-flash'
'Bits can be cleared (flash)'
'Has an erase function'
'Virtual blocks not allowed'
capi20: Rev 1.1.2.7: started up with major 68 (middleware+capifs)
capifs: Rev 1.1.2.3
NET: Registered protocol family 2
IP route cache hash table entries: 512 (order: -1, 2048 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
TCP bic registered
mcfw_init: ok
NET: Registered protocol family 1
NET: Registered protocol family 17
NET: Registered protocol family 8
NET: Registered protocol family 20
[setup_irq]: irq 1 irqaction->handler 0x94001664 (dummy_timer_irq+0x0/0x14 )
[setup_irq]: irq 6 irqaction->handler 0x94001678 (dummy_system_irq_2+0x0/0x18 )
[ohio_late_init]
[ohio_set_clock_notify] avm_clock_id_system notify disable 0x9400169c 0x94279e48
[ohio_set_clock_notify] avm_clock_id_system notify enable 0x9400169c 0x94279e48
[tffs] alloc_chrdev_region() param=mtd4
[tffs] CONFIG_TFFS_MTD_DEVICE_0=4 CONFIG_TFFS_MTD_DEVICE_1=5
[tffs] Character device init successfull
TFFS: tiny flash file system driver. GPL (c) AVM Berlin (Version 2.0)
mount on mtd4 and mtd5 (double buffering)
Adam2 environment variables API installed.
tffsd: wait for events
[prepare_namespace] new mount root /dev/mtdblock1
use lzma compression
VFS: Mounted root (squashfs filesystem) readonly.
Freeing prom memory: 0kb freed
Freeing unused kernel memory: 112k freed (7617 free)
[setup_irq]: irq 15 irqaction->handler 0x940cf534 (serial8250_interrupt+0x0/0x128 )
[setup_irq]: irq 15 irqaction->handler 0x940cf534 (serial8250_interrupt+0x0/0x128 )
[setup_irq]: irq 15 irqaction->handler 0x940cf534 (serial8250_interrupt+0x0/0x128 )
init started: BusyBox v1.1.0 (2006.03.22-15:32+0000) multi-call binary
[setup_irq]: irq 15 irqaction->handler 0x940cf534 (serial8250_interrupt+0x0/0x128 )
AR7WDT: System Init UEberwachung 120 Sekunden
TFFS Name Table 8
HWRevision 101.1.1.0
ProductID Fritz_Box_SpeedportW701V
SerialNumber 0000000000000000
annex B
autoload yes
bootloaderVersion 1.190
bootserport tty0
bluetooth
cpufrequency 211968000
firstfreeaddress 0x946AE878
firmware_version tcom
firmware_info 33.04.26
flashsize 0x00800000
kernel_args idle=4
maca 00:1A:4F:BF:17:C0
macb 00:1A:4F:BF:17:C1
macwlan 00:1A:4F:8D:CB:60
macdsl 00:1A:4F:BF:17:C2
memsize 0x02000000
modetty0 38400,n,8,1,hw
modetty1 38400,n,8,1,hw
mtd0 0x90000000,0x90000000
mtd1 0x90010000,0x90780000
mtd2 0x90000000,0x90010000
mtd3 0x90780000,0x907C0000
mtd4 0x907C0000,0x90800000
my_ipaddress 192.168.178.1
prompt Eva_AVM
ptest
reserved
req_fullrate_freq 125000000
sysfrequency 125000000
urlader-version 1190
usb_board_mac 00:1A:4F:BF:17:C3
usb_rndis_mac 00:1A:4F:BF:17:C4
usb_device_id 0x0000
usb_revision_id 0x0000
usb_device_name USB DSL Device
usb_manufacturer_name AVM
wlan_key 5303946966528549
wlan_cal 03F5,000A,0014,00D6,010A,00DB,010A,02E4,02EC
HWRevision='101'
HWRevision_ATA='1'
HWRevision_BitFileCount='1'
HWRevision_Reserved1='0'
ANNEX='B'
OEM='tcom'
OEM_DEFAULT_INDEX=''
OEM_tmp='tcom'
Language='de'
Country='049'
TZ='CET-1CEST,M3.5.0,M10.5.0'
CONFIG_AB_COUNT='2'
CONFIG_ANNEX='B'
CONFIG_ASSIST='y'
CONFIG_ATA='n'
CONFIG_ATA_FULL='n'
CONFIG_AUDIO='n'
CONFIG_AURA='n'
CONFIG_BLUETOOTH='n'
CONFIG_BLUETOOTH_CTP='n'
CONFIG_BUTTON='y'
CONFIG_CAPI='y'
CONFIG_CAPI_MIPS='n'
CONFIG_CAPI_NT='n'
CONFIG_CAPI_POTS='y'
CONFIG_CAPI_TE='y'
CONFIG_CAPI_UBIK='n'
CONFIG_CAPI_XILINX='y'
CONFIG_CDROM='n'
CONFIG_CDROM_FALLBACK='n'
CONFIG_DECT='n'
CONFIG_DSL='y'
CONFIG_ENVIRONMENT_PATH='/proc/sys/urlader'
CONFIG_ETH_COUNT='4'
CONFIG_FIRMWARE_URL='http://www.telekom.de/faq'
CONFIG_FON='y'
CONFIG_HOMEI2C='n'
CONFIG_HOSTNAME='speedport.ip'
CONFIG_I2C='n'
CONFIG_INSTALL_TYPE='ar7_8MB_xilinx_4eth_2ab_isdn_pots_wlan_13200'
CONFIG_JFFS2='n'
CONFIG_LED_NO_DSL_LED='n'
CONFIG_MAILER='n'
CONFIG_MEDIACLI='n'
CONFIG_MEDIASRV='n'
CONFIG_NAND='n'
CONFIG_NFS='n'
CONFIG_OEM_DEFAULT='tcom'
CONFIG_PRODUKT='Fritz_Box_SpeedportW701V'
CONFIG_PRODUKT_NAME='Speedport W 701V'
CONFIG_RAMSIZE='32'
CONFIG_ROMSIZE='8'
CONFIG_SERVICEPORTAL_URL='none'
CONFIG_STOREUSRCFG='n'
CONFIG_SUBVERSION=''
CONFIG_TAM='n'
CONFIG_TAM_MODE='0'
CONFIG_TR069='y'
CONFIG_UBIK2='n'
CONFIG_UPNP='n'
CONFIG_USB='n'
CONFIG_USB_HOST_AVM='n'
CONFIG_USB_HOST_TI='n'
CONFIG_USB_PRINT_SERV='n'
CONFIG_USB_STORAGE='n'
CONFIG_USB_WLAN_AUTH='n'
CONFIG_VDSL='n'
CONFIG_VERSION='04.26'
CONFIG_VERSION_MAJOR='33'
CONFIG_VLYNQ='y'
CONFIG_VLYNQ0='0'
CONFIG_VLYNQ1='0'
CONFIG_VPN='n'
CONFIG_WLAN='y'
CONFIG_WLAN_1130TNET='n'
CONFIG_WLAN_1350TNET='y'
CONFIG_WLAN_GREEN='n'
CONFIG_WLAN_WDS='y'
CONFIG_XILINX='y'
set 'Activate Wizzard'
mknod: /var/flash/ar7.cfg: File exists
cp /etc/default.049/fx_moh.default /var/fx_moh
checkempty: warning, /var/flash/voip.cfg not found - nop
Piglet: module license '
(C) Copyright 2005 by AVM
' taints kernel.
attempting to load DSL Firmware '/lib/modules/microvoip-dsl.bin'
**** ANNEX: 'B'
*************************************
setting DSL Firmware to Annex B
registered device TI Avalanche SAR
tiatm driver (patch_annex=0xc00519ec)
[tiatm] Set StrictPriority=0
DSP binary filesize = 303784 bytes
[setup_irq]: irq 23 irqaction->handler 0xc003920c (tn7atm_sar_irq+0x0/0x30 [tiatm] )
[setup_irq]: irq 31 irqaction->handler 0xc003923c (tn7atm_dsl_irq+0x0/0x28 [tiatm] )
[tiatm]: Powermanagment (States => 1,3,10) supported!
Texas Instruments ATM driver: version:[4.06.04.30]
ubik2 driver (ubik2 - 0x10=0xc00646b4)
atm_dsp_register_ubik2: ubik2_ToMIPS_notify=0xc0055c00
atm_dsp_register_ubik2: dsp mem pointer 0xa1c0f218
ubik2_init_interface: DSP-Link Version v3 8480
isdn_fbox: Loading...
isdn_fbox: Driver 'isdn_fbox' attached to stack
isdn_fbox: CAPI driver registered.
isdn_fbox: AVM F!Box expected @ port 0x0000, irq 0
isdn_fbox: Loading...
isdn_fbox: Stack version 3.11-07
isdn_fbox: D-channel 0: DSS1
isdn_fbox: D-channel 1: DSS1
isdn_fbox: D-channel 2: DSS1_N
isdn_fbox: D-channel 3: POTS
isdn_fbox: D-channel 4: SIP
isdn_fbox: Loaded.
kdsldmod: init start
kdsld: cache_create(datapipe)
kdsld: cache_create(datapipe_mod)
kdsld: cache_create(ipaccessset)
kdsld: cache_create(ipaccessrule)
kdsld: cache_create(ipfragid)
kdsld: cache_create(ipmasqentry)
kdsld: cache_create(ipmasqfwinfo)
kdsld: cache_create(ipmasqigdpm)
kdsld: cache_create(ipmasqappldata)
kdsld: cache_create(ipmasqmcgroup)
kdsld: cache_create(dnsmasqentry)
kdsld: cache_create(dnsstaticentry)
kdsld: cache_create(pingerentry)
kdsld: cache_create(pingerwaiter)
kdsld: cache_create(iprouteset)
kdsld: DATAPIPE: with header optimization
kdsldmod: init done
kdsld: PPP led: off (value=0)
2000-01-01 01:00:15 cltmgr: csock: using poll
Jan 1 01:00:15 cltmgr[383]: csock: using poll
2000-01-01 01:00:16 cltmgr: avmssl_init: done
Jan 1 01:00:16 cltmgr[383]: avmssl_init: done
2000-01-01 01:00:16 cltmgr: process priority is 19
Jan 1 01:00:16 cltmgr[383]: process priority is 19
MAC WLAN: 00:1A:4F:8D:CB:60
WLAN is not enabled
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
/etc/init.d/rc.net: /etc/init.d/rc.net: 366: igdd: not found
Jan 1 01:00:17 websrv[408]: csock: using poll
Jan 1 01:00:17 cltmgr[385]: /var/flash/voip.cfg: is empty
Jan 1 01:00:17 cltmgr[385]: FactoryDefault=/etc/default/tcom/voip.cfg (voip)
Jan 1 01:00:17 cltmgr[385]: load_config(voip): factory default loaded
Jan 1 01:00:17 cltmgr[385]: TR-069 is NOT ACTIVATED in tr069.cfg
Jan 1 01:00:17 websrv[408]: avmssl_init: done
Jan 1 01:00:17 cltmgr[385]: mapping to info-LED already exist
Jan 1 01:00:17 cltmgr[385]: box init ok
Jan 1 01:00:17 cltmgr[385]: dlopen(/usr/share/ctlmgr/libdect.so) failed: File not found
Jan 1 01:00:17 cltmgr[385]: dlopen(/usr/share/ctlmgr/libtamconf.so) failed: File not found
Jan 1 01:00:17 cltmgr[385]: dlopen(/usr/share/ctlmgr/libvdsl.so) f[speedup] disable
ailed: File not found
Jan 1 01:00:17 cltmgr[385]: WAN (ata) led value = 0
Jan 1 01:00:18 cltmgr[385]: TR069_Init() TR069_Init(assi-only)
Jan 1 01:00:18 cltmgr[385]: TR069_Init returned 0
Jan 1 01:00:18 cltmgr[385]: TR069_Init(lite mode) returned 0
Jan 1 01:00:18 cltmgr[385]: verbose: DISABLED
2000-01-01 01:00:18 multid: startup (Aug 31 2006 17:10:44)
Jan 1 01:00:18 multid[414]: startup (Aug 31 2006 17:10:44)
2000-01-01 01:00:18 multid: csock: using poll
Jan 1 01:00:18 multid[414]: csock: using poll
2000-01-01 01:00:18 multid: avmssl_init: done
Jan 1 01:00:18 multid[414]: avmssl_init: done
Jan 1 01:00:18 multid[418]: new cpmac driver detected
Jan 1 01:0[setup_irq]: irq 27 irqaction->handler 0x940e016c (0:1cpmac_main_isr+0x0/0x78 8 m)
ultid[418]: enabling non-ATA-Mode
Jan 1 01:00:18 multid[418]: normal
Jan 1cpmac_main_ioctl, unknown ioctl 35142
01:device eth0 entered promiscuous mode
00:device cpmac0 entered promiscuous mode
18 mulan: port 1(eth0) entering learning state
ltid[418]: if_setup: lan:0: SIOCSIFADDR failed - No such device (19)
Jan 1 01:00:19 multid[418]: if_setup: usbrndis: SIOCSIFADDR failed - No such device (19)
Jan 1 01:00:19 multid[418]: br_add_if: get index for usbrndis failed - No such device (19)
Jan 1 01:00:19 multid[418]: if_allmulti: usbrndis: SIOCGIFFLAGS failed - No such device (19)
Jan 1 01:00:19 multid[418]: if_setup: tiwlan0: SIOCSIFADDR failed - No such device (19)
Jan 1 01:00:19 multid[418]: br_add_if: get index for tiwlan0 failed - No such device (19)
Jan 1 01:00:19 multid[418]: if_allmulti: tiwlan0: SIOCGIFFLAGS failed - No such device (19)
Jan 1 01:00:19 multid[418]: if_setup: wdsup0: SIOCSIFADDR failed - No such device (19)
Jan 1 01:00:19 multid[418]: br_add_if: get index for wdsup0 failed - No such device (19)
Jan 1 01:00:19 multid[418]: if_allmulti: wdsup0: SIOCGIFFLAGS failed - No such device (19)
Jan 1 01:00:19 multid[418]: if_setup: wdsdw0: SIOCSIFADDR failed - No such device (19)
Jan 1 01:00:19 multid[418]: br_add_if: get index for wdsdw0 failed - No such device (19)
Jan 1 01:00:19 multid[418]: if_allmulti: wdsdw0: SIOCGIFFLAGS failed - No such device (19)
Jan 1 01:00:19 multid[418]: if_setup: wdsdw1: SIOCSIFADDR failed - No such device (19)
Jan 1 01:00:19 multid[418]: br_add_if: get index for wdsdw1 failed - No such device (19)
Jan 1 01:00:19 multid[418]: if_allmulti: wdsdw1: SIOCGIFFLAGS failed - No such device (19)
Jan 1 01:00:19 multid[418]: if_setup: wdsdw2: SIOCSIFADDR failed - No such device (19)
Jan 1 01:00:19 multid[418]: br_add_if: get index for wdsdw2 failed - No such device (19)
Jan 1 01:00:19 multid[418]: if_allmulti: wdsdw2: SIOCGIFFLAGS failed - No such device (19)
Jan 1 01:00:19 multid[418]: if_setup: wdsdw3: SIOCSIFADDR failed - No such device (19)
Jan 1 01:00:19 multid[418]: br_add_if: get index for wdsdw3 failed - No such device (19)
Jan 1 01:00:19 multid[418]: if_allmulti: wdsdw3: SIOCGIFFLAGS failed - No such device (19)
Jan 1 01:00:19 multid[418]: if_setup: eth1: SIOCSIFADDR failed - No such device (19)
Jan 1 01:00:19 multid[418]: br_add_if: get index for eth1 failed - No such device (19)
Jan 1 01:00:19 multid[418]: if_allmulti: eth1: SIOCGIFFLAGS failed - No such device (19)
Jan 1 01:00:19 multid[418]: if_setup: eth2: SIOCSIFADDR failed - No such device (19)
Jan 1 01:00:19 multid[418]: br_add_if: get index for eth2 failed - No such device (19)
Jan 1 01:00:19 multid[418]: if_allmulti: eth2: SIOCGIFFLAGS failed - No such device (19)
Jan 1 01:00:19 multid[418]: if_setup: eth3: SIOCSIFADDR failed - No such device (19)
Jan 1 01:00:19 multid[418]: br_add_if: get index for eth3 failed - No such device (19)
Jan 1 01:00:19 multid[418]: if_allmulti: eth3: SIOCGIFFLAGS failed - No such device (19)
Jan 1 01:00:19 multid[418]: static routes: 0 deleted (0 failed), 0 added (0 failed)
Jan 1 01:00:19 multid[418]: static routes: 0 deleted (0 failed), 0 added (0 failed)
Jan 1 01:00:19 multid[418]: IGMP tos configured to 0x80
Jan 1 01:00:19 multid[418]: mrouter: using IGMPv3 for upstream interface dsl
Jan 1 01:00:19 multid[418]: mrouter: using IGMPv3 for other interfaces
Jan 1 01:00:19 multid[418]: DHCPD on lan:0 skipped, is virtual interface
Jan 1 01:00:19 multid[418]: DDNS: no valid accounts
Jan 1 01:00:19 websrv[408]: startup (Jul 6 2006 15:36:02)
Jan 1 01:00:19 multid[418]: ONLINE: script /bin/onlinechanged not found.
Jan 1 01:00:19 multid[4kdsld: sync lost
18]: verbose: DISABLED
2000-01-01 01:00:19 dsld: csock: using poll
Jan 1 01:00:19 dsld[426]: csock: using poll
2000-01-01 01:00:19 dsld: avmssl_init: done
Jan 1 01:00:19 dsld[426]: avmssl_init: done
2000-01-01 01:00:19 dsld: startup (Jul 6 2006 15:37:07)
Jan 1 01:00:19 dsld[426]: startup (Jul 6 2006 15:37:07)
2000-01-01 01:00:19 dsld: new cpmac driver detected
Jan 1 01:00:19 dsld[426]: new cpmac driver detected
Jan 1 01:00:19 dsld[428]: DSL Mac 00:1a:4f:bf:17:c2
Jan 1 01:00:19 dsld[428]: VOIP Mac 00:1a:4f:bf:17:c3
Jan 1 01:00:19 dsld[428]: voip: ppptarget voip disabled, ignored
Jan 1 01:00:19 dsld[428]: verbose: DISABLED
/etc/init.d/rc.net: /etc/init.d/rc.net: 1: avmike: not found
telefon: use clock_gettime(CLOCK_MONOTONIC)!
telefon: SIGCHLD received!
telefon: SIGCHLD received!
voipd: csock: using poll
voipd: avmssl_init: done
Jan 1 01:00:22 voipd[448]: /var/flash/voip.cfg: is empty
Jan 1 01:00:22 voipd[448]: FactoryDefault=/etc/default/tcom/voip.cfg (voip)
Jan 1 01:00:22 voipd[448]: load_config(voip): factory default loaded
Jan 1 01:00:22 voipd[448]: startup (AVM Speedport W 701V 33.04.26 AVM SIP v5.01.48 Jul 12 2006 16:18:47)
Jan 1 01:00:22 voipd[448]: using capi controller 5
Jan 1 01:00:22 voipd[448]: using b1 protocol 10
Jan 1 01:00:22 voipd[448]: tel: supported
Jan 1 01:00:22 voipd[448]: ENUM NOT enabled
Jan 1 01:00:22 voipd[448]: enumdomain: e164.arpa
Jan 1 01:00:22 voipd[448]: enumdomain: e164.org
Jan 1 01:00:22 voipd[448]: Couldn't load shared library libspeex.so - File not found - Not a directory (20)
Jan 1 01:00:22 voipd[448]: VoIP led value = 0
Jan 1 01:00:22 voipd[448]: no useragent configured
Jan 1 01:00:22 voipd[448]: INFO led: off (value=0)
Jan 1 01:00:22 voipd[448]: priority is -20
Jan 1 01:00:22 voipd[448]: encaplen 32
Jan 1 01:00:22 voipd[448]: brutto speed unknown
Jan 1 01:00:22 voipd[448]: PCMA: 98933 bits/second (encaplen=32,30ms)
Jan 1 01:00:22 voipd[448]: PCMU: 98933 bits/second (encaplen=32,30ms)
Jan 1 01:00:22 voipd[448]: G726-32: 70666 bits/second (encaplen=32,30ms)
Jan 1 01:00:22 voipd[448]: G726-40: 70666 bits/second (encaplen=32,30ms)
Jan 1 01:00:22 AR7WDT: System Init UEberwachung abgeschlossen (100540 ms noch verfuegbar)
voipd[448]: G726-24: 56533 bits/second (encaplen=32,30ms)
Jan 1 01:00:22 voipd[448]: iLBC: 42400 bits/second (encaplen=32,30ms)
Jan 1 01:00:22 voipd[448]: PCMA: 106000 bits/second (encaplen=32,20ms)
Jan 1 01:00:22 voipd[448]: PCMU: 106000 bits/second (encaplen=32,20ms)
Jan 1 01:0SysRq : Changing Loglevel
Loglevel set to 4
0:22 voipd[448]: G72
Please press Enter to activate this console.
Output from various commands on the original firmware
When I logged in to the console for the first time it kindly dumped a bunch of info and kernel configuration values for me to see!
HWRevision='101' HWRevision_ATA='1' HWRevision_BitFileCount='1' HWRevision_Reserved1='0' ANNEX='B' OEM='tcom' OEM_DEFAULT_INDEX='' OEM_tmp='tcom' Language='de' Country='049' TZ='CET-1CEST,M3.5.0,M10.5.0' CONFIG_AB_COUNT='2' CONFIG_ANNEX='B' CONFIG_ASSIST='y' CONFIG_ATA='n' CONFIG_ATA_FULL='n' CONFIG_AUDIO='n' CONFIG_AURA='n' CONFIG_BLUETOOTH='n' CONFIG_BLUETOOTH_CTP='n' CONFIG_BUTTON='y' CONFIG_CAPI='y' CONFIG_CAPI_MIPS='n' CONFIG_CAPI_NT='n' CONFIG_CAPI_POTS='y' CONFIG_CAPI_TE='y' CONFIG_CAPI_UBIK='n' CONFIG_CAPI_XILINX='y' CONFIG_CDROM='n' CONFIG_CDROM_FALLBACK='n' CONFIG_DECT='n' CONFIG_DSL='y' CONFIG_ENVIRONMENT_PATH='/proc/sys/urlader' CONFIG_ETH_COUNT='4' CONFIG_FIRMWARE_URL='http://www.telekom.de/faq' CONFIG_FON='y' CONFIG_HOMEI2C='n' CONFIG_HOSTNAME='speedport.ip' CONFIG_I2C='n' CONFIG_INSTALL_TYPE='ar7_8MB_xilinx_4eth_2ab_isdn_pots_wlan_13200' CONFIG_JFFS2='n' CONFIG_LED_NO_DSL_LED='n' CONFIG_MAILER='n' CONFIG_MEDIACLI='n' CONFIG_MEDIASRV='n' CONFIG_NAND='n' CONFIG_NFS='n' CONFIG_OEM_DEFAULT='tcom' CONFIG_PRODUKT='Fritz_Box_SpeedportW701V' CONFIG_PRODUKT_NAME='Speedport W 701V' CONFIG_RAMSIZE='32' CONFIG_ROMSIZE='8' CONFIG_SERVICEPORTAL_URL='none' CONFIG_STOREUSRCFG='n' CONFIG_SUBVERSION='' CONFIG_TAM='n' CONFIG_TAM_MODE='0' CONFIG_TR069='y' CONFIG_UBIK2='n' CONFIG_UPNP='n' CONFIG_USB='n' CONFIG_USB_HOST_AVM='n' CONFIG_USB_HOST_TI='n' CONFIG_USB_PRINT_SERV='n' CONFIG_USB_STORAGE='n' CONFIG_USB_WLAN_AUTH='n' CONFIG_VDSL='n' CONFIG_VERSION='04.26' CONFIG_VERSION_MAJOR='33' CONFIG_VLYNQ='y' CONFIG_VLYNQ0='0' CONFIG_VLYNQ1='0' CONFIG_VPN='n' CONFIG_WLAN='y' CONFIG_WLAN_1130TNET='n' CONFIG_WLAN_1350TNET='y' CONFIG_WLAN_GREEN='n' CONFIG_WLAN_WDS='y' CONFIG_XILINX='y'
running proccesses
~ # ps ax
PID Uid VmSize Stat Command
1 root 336 S init
2 root SWN [ksoftirqd/0]
3 root SW< [events/0]
4 root SW< [khelper]
5 root SW< [kthread]
6 root SW< [kblockd/0]
24 root SW< [pdflush]
25 root SW< [pdflush]
27 root SW< [aio/0]
26 root SW [kswapd0]
69 root SW [mtdblockd]
128 root SW [tffsd_mtd_0]
352 root SW [capitransp]
411 root 456 S wpa_authenticator
424 root 1656 R N websrv
428 root 1656 S N websrv
429 root 1656 S N websrv
430 root 1656 S N websrv
435 root 1736 S multid
444 root 1920 S dsld -i -n
458 root 724 S telefon a127.0.0.1
463 root 2124 S < voipd
470 root 160 S /bin/run_clock -c /dev/tffs -d
475 root 468 S -sh
561 root 312 R ps ax
free memory
~ # free
total used free shared buffers
Mem: 30468 24024 6444 0 3040
Swap: 0 0 0
Total: 30468 24024 6444
proc directory
~ # ls proc 1 428 69 execdomains meminfo sysrq-trigger 128 429 avalanche filesystems misc sysvipc 2 430 buddyinfo fs modules tffs 24 435 bus interrupts mounts tty 25 444 capi iomem mtd uptime 26 458 clocks ioports net version 27 463 cmdline irq partitions vmstat 3 470 cpmac_sched_cpmac0 kallsyms self wlan 352 475 cpuinfo kcore slabinfo zoneinfo 4 5 devices kmsg stat 411 565 diskstats loadavg sync-on-demand 424 6 driver locks sys
CPU Info
~ # cat /proc/cpuinfo system type : MIPS OHIO processor : 0 cpu model : MIPS 4KEc V4.8 BogoMIPS : 211.35 wait instruction : yes microsecond timers : yes tlb_entries : 16 extra interrupt vector : yes hardware watchpoint : yes VCED exceptions : not available VCEI exceptions : not available
FLASH Map Info
~ # cat /proc/mtd dev: size erasesize name mtd0: 00800000 00010000 "phys_mapped_flash" mtd1: 006d3b00 00010000 "filesystem" mtd2: 00770000 00010000 "kernel" mtd3: 00010000 00010000 "bootloader" mtd4: 00040000 00010000 "tffs (1)" mtd5: 00040000 00010000 "tffs (2)" mtd6: 00200000 00010000 "jffs2" mtd7: 00570000 00010000 "Kernel without jffs2"
~ # cat /proc/partitions major minor #blocks name 31 0 8192 mtdblock0 31 1 6990 mtdblock1 31 2 7616 mtdblock2 31 3 64 mtdblock3 31 4 256 mtdblock4 31 5 256 mtdblock5 31 6 2048 mtdblock6 31 7 5568 mtdblock7 ~ #
ATM Driver Info (TI Avalanche SAR)
~ # cat /proc/avalanche/avsar_ver ATM Driver version:[4.06.04.30] DSL HAL version: [5.00.00.02] DSP Datapump version: [1.35.73.01] SAR HAL version: [01.07.2b] PDSP Firmware version:[0.54]
OS Info
~ # cat /proc/version Linux version 2.6.13.1-ohio (jpluschke@EmbeddedVM) (gcc version 3.4.3) #3 Thu Feb 8 14:32:37 CET 2007
MEMINFO
~ # cat /proc/meminfo MemTotal: 30468 kB MemFree: 6384 kB Buffers: 3040 kB Cached: 10232 kB SwapCached: 0 kB Active: 9600 kB Inactive: 6676 kB HighTotal: 0 kB HighFree: 0 kB LowTotal: 30468 kB LowFree: 6384 kB SwapTotal: 0 kB SwapFree: 0 kB Dirty: 0 kB Writeback: 0 kB Mapped: 5648 kB Slab: 4868 kB CommitLimit: 15232 kB Committed_AS: 4428 kB PageTables: 196 kB VmallocTotal: 1048560 kB VmallocUsed: 2636 kB VmallocChunk: 1044964 kB
Kernel messages
~ # cat /proc/kmsg ify disable 0x940013f8 0x9419be18 <4>[ohio_set_clock_notify] avm_clock_id_cpu notify enable 0x940013f8 0x9419be18 <4>CPU frequency 211.97 MHz <4>Using 105.984 MHz high precision timer. <4>[setup_irq]: irq 127 irqaction->handler 0x94041a10 (no_action+0x0/0x8 ) <4>[register_console] enable commandline console 0 <4>Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) <4>Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) <6>Memory: 30324k/30676k available (1477k kernel code, 320k reserved, 342k data, 112k init, 0k highmem) <6>totalram_pages= 7589 <4>Calibrating delay loop... 211.35 BogoMIPS (lpj=1056768) <4>loops_per_jiffy=1056768 <4>Mount-cache hash table entries: 512 <4>Checking for 'wait' instruction... [speedup] idle_mode = 4 <4> with idle values available. <7>Calling initcall 0x941d6414: helper_init+0x0/0x30() <7>Calling initcall 0x941d6558: ksysfs_init+0x0/0x3c() <7>Calling initcall 0x941d840c: filelock_init+0x0/0x48() <7>Calling initcall 0x941d8c50: init_script_binfmt+0x0/0xc() <7>Calling initcall 0x941d8c5c: init_elf_binfmt+0x0/0xc() <7>Calling initcall 0x941dda7c: netlink_proto_init+0x0/0x2ac() <6>NET: Registered protocol family 16 <7>Calling initcall 0x941d94cc: kobject_uevent_init+0x0/0x50() <7>Calling initcall 0x941d9754: tty_class_init+0x0/0x34() <7>Calling initcall 0x941cd57c: frame_info_init+0x0/0xb4() <4>Can't analyze prologue code at 9416fc8c <7>Calling initcall 0x941d80fc: init_bio+0x0/0x17c() <7>Calling initcall 0x941d9e00: misc_init+0x0/0xc0() <7>Calling initcall 0x941db814: genhd_device_init+0x0/0x44() <7>Calling initcall 0x941dbf2c: init_mtd+0x0/0x48() <7>Calling initcall 0x941dccf0: input_init+0x0/0x1e0() <7>Calling initcall 0x941dd514: proto_init+0x0/0x48() <7>Calling initcall 0x941dd6d8: net_dev_init+0x0/0x1dc() <7>Calling initcall 0x941d8360: init_pipe_fs+0x0/0x6c() <7>Calling initcall 0x941d95e4: chr_dev_init+0x0/0xb4() <7>Calling initcall 0x941d5a94: create_proc_profile+0x0/0x64() <7>Calling initcall 0x941d5b74: ioresources_init+0x0/0x6c() <7>Calling initcall 0x941d5d28: uid_cache_init+0x0/0x88() <7>Calling initcall 0x941d6104: param_sysfs_init+0x0/0x208() <7>Calling initcall 0x941d630c: init_posix_timers+0x0/0x108() <7>Calling initcall 0x941d6444: init_posix_cpu_timers+0x0/0xd4() <7>Calling initcall 0x941d6518: kallsyms_init+0x0/0x40() <7>Calling initcall 0x941d7794: init_per_zone_pages_min+0x0/0x64() <7>Calling initcall 0x941d7bdc: pdflush_init+0x0/0x28() <7>Calling initcall 0x941d7c04: cpucache_init+0x0/0x20() <7>Calling initcall 0x941d7f50: kswapd_init+0x0/0x70() <7>Calling initcall 0x941d8004: init_tmpfs+0x0/0x3c() <7>Calling initcall 0x941d83cc: fasync_init+0x0/0x40() <7>Calling initcall 0x941d8ad0: aio_setup+0x0/0x8c() <7>Calling initcall 0x941d8b5c: inotify_setup+0x0/0xf4() <7>Calling initcall 0x941d9194: init_devpts_fs+0x0/0x48() <7>Calling initcall 0x941d91dc: init_squashfs_fs+0x0/0xe4() <6>Squashfs 2.2-r2b (released 2006/02/23) (C) 2002-2005 Phillip Lougher <7>Calling initcall 0x941d92c0: init_ramfs_fs+0x0/0xc() <7>Calling initcall 0x941d92d8: ipc_init+0x0/0x30() <7>Calling initcall 0x941d9698: rand_initialize+0x0/0x3c() <7>Calling initcall 0x941d9788: tty_init+0x0/0x184() <7>Calling initcall 0x941d990c: pty_init+0x0/0x4f4() <7>Calling initcall 0x941d9ec0: avm_power_init+0x0/0x11c() <7>Calling initcall 0x941d9fdc: avm_sammel_init+0x0/0x158() <4>[avm] configured: watchdog eventled enable shift register enable direct gpio <4> gpio usage: reset=12 clock=13 store=10 data=9 <4>AR7WDT: Watchdog Driver for AR7 Hardware (Version 1.0, build: Feb 8 2007 14:30:44) <7>Calling initcall 0x941dae60: serial8250_init+0x0/0x10c() <6>Serial: 8250/16550 driver $Revision: 1.90 $ 1 ports, IRQ sharing disabled <4>[uart_add_one_port] <4>ttyS0 at MMIO 0x0 (irq = 15) is a OHIO_UART <4>[uart_add_one_port] dont rigister console port->type = 16 <4>port->cons = 0x941a9680 port->cons->flags = 0x7 <4>[uart_add_one_port] sucess <7>Calling initcall 0x941db858: noop_init+0x0/0xc() <6>io scheduler noop registered <7>Calling initcall 0x941db864: cpmac_main_probe+0x0/0xd8() <7>Calling initcall 0x941db93c: cpphy_entry_probe+0x0/0xcc() <7>Calling initcall 0x941dba08: cpphy_entry_probe+0x0/0xe8() <4>(vor) REG_ADM_LC_PHY_CONTROL_PORT(0x200) = 0x3100 <4>(nach) REG_ADM_LC_PHY_CONTROL_PORT(0x200) = 0x3100 <4>(vor) REG_ADM_LC_PHY_CONTROL_PORT(0x220) = 0x3100 <4>(nach) REG_ADM_LC_PHY_CONTROL_PORT(0x220) = 0x3100 <4>(vor) REG_ADM_LC_PHY_CONTROL_PORT(0x240) = 0x3100 <4>(nach) REG_ADM_LC_PHY_CONTROL_PORT(0x240) = 0x3100 <4>(vor) REG_ADM_LC_PHY_CONTROL_PORT(0x260) = 0x3100 <4>(nach) REG_ADM_LC_PHY_CONTROL_PORT(0x260) = 0x3100 <4>(vor) REG_ADM_LC_PHY_CONTROL_PORT(0x280) = 0x3100 <4>(nach) REG_ADM_LC_PHY_CONTROL_PORT(0x280) = 0x3100 <3>cpmac_if_register, dev cpmac0 (phy_id 0) registered <7>Calling initcall 0x941dbaf0: cpphy_entry_probe+0x0/0xcc() <7>Calling initcall 0x941dbbbc: cpphy_entry_probe+0x0/0xe8() <3>cpmac_if_register, phy_id 0 already registered <7>Calling initcall 0x941dbd34: net_olddevs_init+0x0/0x100() <7>Calling initcall 0x941dbe9c: tun_init+0x0/0x90() <6>tun: Universal TUN/TAP device driver, 1.6 <6>tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com> <7>Calling initcall 0x941dbf74: cmdline_parser_init+0x0/0xc() <7>Calling initcall 0x941dbf80: init_mtdchar+0x0/0xc0() <7>Calling initcall 0x941dc040: init_mtdblock+0x0/0xc() <7>Calling initcall 0x941dc04c: cfi_probe_init+0x0/0x24() <7>Calling initcall 0x941dc070: cfi_amdstd_init+0x0/0x30() <7>Calling initcall 0x941dc0a0: cfi_intelext_init+0x0/0x4c() <7>Calling initcall 0x941dc0ec: jedec_probe_init+0x0/0x24() <7>Calling initcall 0x941dc110: map_ram_init+0x0/0x24() <7>Calling initcall 0x941dc134: init_physmap+0x0/0x170() <5>physmap flash device: 400000 at 10000000 <6>phys_mapped_flash: Found 1 x16 devices at 0x0 in 16-bit bank <4> Amd/Fujitsu Extended Query Table at 0x0040 <4>phys_mapped_flash: Swapping erase regions for broken CFI table. <5>number of CFI chips: 1 <5>cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness. <5>RedBoot partition parsing not available <7>Calling initcall 0x941dc2a4: platram_init+0x0/0x30() <4>Generic platform RAM MTD, (c) 2004 Simtec Electronics <7>Calling initcall 0x941dc2d4: init_ohio_flash+0x0/0xa1c() <5>Ohio flash driver (size->0x400000 mem->0x10000000) <4>flash_size=0x800000 <6>Ohio flash memory: Found 1 x16 devices at 0x0 in 16-bit bank <4> Amd/Fujitsu Extended Query Table at 0x0040 <4>Ohio flash memory: Swapping erase regions for broken CFI table. <5>number of CFI chips: 1 <5>cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness. <4>[mtd]: set to default: jffs2_size = 0x20 * 64KByte (0x200000 Bytes) <4>[ohio_find_hidden_filesystem]: super block found: bytes_used: 0x36347f/3552383 <4>[init_ohio_flash] find hidden filesystem size=0x6d3b00 offset=0xac500 <4>[mtd] configure jffs2 partition <4>[mtd] fs_size=0x400000 max=0x370000 is=0x200000 max jffs2_size value 55 <5>Creating 7 MTD partitions on "Ohio flash memory": <5>0x000ac500-0x00780000 : "filesystem" <5> 'nor-flash' <4> 'Bits can be cleared (flash)' <4> 'Has an erase function' <4>mtd: partition "filesystem" doesn't start on an erase block boundary -- force read-only <5>0x00010000-0x00780000 : "kernel" <5> 'nor-flash' <4> 'Bits can be cleared (flash)' <4> 'Has an erase function' <5>0x00000000-0x00010000 : "bootloader" <5> 'nor-flash' <4> 'Bits can be cleared (flash)' <4> 'Has an erase function' <4> 'Virtual blocks not allowed' <5>0x00780000-0x007c0000 : "tffs (1)" <5> 'nor-flash' <4> 'Bits can be cleared (flash)' <4> 'Has an erase function' <4> 'Virtual blocks not allowed' <5>0x007c0000-0x00800000 : "tffs (2)" <5> 'nor-flash' <4> 'Bits can be cleared (flash)' <4> 'Has an erase function' <4> 'Virtual blocks not allowed' <5>0x00580000-0x00780000 : "jffs2" <5> 'nor-flash' <4> 'Bits can be cleared (flash)' <4> 'Has an erase function' <4> 'Virtual blocks not allowed' <5>0x00010000-0x00580000 : "Kernel without jffs2" <5> 'nor-flash' <4> 'Bits can be cleared (flash)' <4> 'Has an erase function' <4> 'Virtual blocks not allowed' <7>Calling initcall 0x941dced0: kcapi_init+0x0/0x9c() <7>Calling initcall 0x941dd014: capi_init+0x0/0x324() <5>capi20: Rev 1.1.2.7: started up with major 68 (middleware+capifs) <7>Calling initcall 0x941dd338: capifs_init+0x0/0x108() <5>capifs: Rev 1.1.2.3 <7>Calling initcall 0x941de72c: inet_init+0x0/0x504() <6>NET: Registered protocol family 2 <4>IP route cache hash table entries: 512 (order: -1, 2048 bytes) <4>TCP established hash table entries: 2048 (order: 2, 16384 bytes) <4>TCP bind hash table entries: 2048 (order: 1, 8192 bytes) <6>TCP: Hash tables configured (established 2048 bind 2048) <6>TCP reno registered <7>Calling initcall 0x941e1168: init+0x0/0x8() <7>Calling initcall 0x941e1170: bictcp_register+0x0/0xc() <6>TCP bic registered <7>Calling initcall 0x941e117c: mcfw_init_module+0x0/0x88() <6>mcfw_init: ok <7>Calling initcall 0x941e1204: af_unix_init+0x0/0xa0() <6>NET: Registered protocol family 1 <7>Calling initcall 0x941e12a4: packet_init+0x0/0x80() <6>NET: Registered protocol family 17 <7>Calling initcall 0x941e1324: br_init+0x0/0x68() <7>Calling initcall 0x941e13e0: atm_init+0x0/0xec() <6>NET: Registered protocol family 8 <6>NET: Registered protocol family 20 <7>Calling initcall 0x941e1584: br2684_init+0x0/0x54() <7>Calling initcall 0x941cc2a0: ohio_install_dummy_irq_functions+0x0/0x58() <4>[setup_irq]: irq 1 irqaction->handler 0x94001664 (dummy_timer_irq+0x0/0x14 ) <4>[setup_irq]: irq 6 irqaction->handler 0x94001678 (dummy_system_irq_2+0x0/0x18 ) <7>Calling initcall 0x9400174c: ohio_late_init+0x0/0x3c() <4>[ohio_late_init] <4>[ohio_set_clock_notify] avm_clock_id_system notify disable 0x9400169c 0x94279e48 <4>[ohio_set_clock_notify] avm_clock_id_system notify enable 0x9400169c 0x94279e48 <7>Calling initcall 0x941cc3f8: ohio_clk_switch_init+0x0/0x60() <7>Calling initcall 0x941cc6ac: speedup_init+0x0/0x2c() <7>Calling initcall 0x941d96d4: seqgen_init+0x0/0x20() <7>Calling initcall 0x940c5b18: avm_event_push_button_init+0x0/0x114() <7>Calling initcall 0x941da610: tffs_init+0x0/0x2e4() <6>[tffs] alloc_chrdev_region() param=mtd4 <6>[tffs] CONFIG_TFFS_MTD_DEVICE_0=4 CONFIG_TFFS_MTD_DEVICE_1=5 <6>[tffs] Character device init successfull <4>TFFS: tiny flash file system driver. GPL (c) AVM Berlin (Version 2.0) <4> mount on mtd4 and mtd5 (double buffering) <6>Adam2 environment variables API installed. <7>Calling initcall 0x941db524: early_uart_console_switch+0x0/0xb8() <7>Calling initcall 0x94113e38: net_random_reseed+0x0/0x34() <7>Calling initcall 0x941dfc50: ip_auto_config+0x0/0x1140() <4>[prepare_namespace] new mount root /dev/mtdblock1 <6>tffsd: wait for events <4>use lzma compression <4>VFS: Mounted root (squashfs filesystem) readonly. <4>Freeing prom memory: 0kb freed <6>Freeing unused kernel memory: 112k freed (7617 free) <4>[setup_irq]: irq 15 irqaction->handler 0x940cf534 (serial8250_interrupt+0x0/0x128 ) <4>[setup_irq]: irq 15 irqaction->handler 0x940cf534 (serial8250_interrupt+0x0/0x128 ) <4>[setup_irq]: irq 15 irqaction->handler 0x940cf534 (serial8250_interrupt+0x0/0x128 ) <4>[setup_irq]: irq 15 irqaction->handler 0x940cf534 (serial8250_interrupt+0x0/0x128 ) <4>AR7WDT: System Init UEberwachung 120 Sekunden <4>TFFS Name Table 8 <4>Piglet: module license ' <4>(C) Copyright 2005 by AVM <4>' taints kernel. <4>registered device TI Avalanche SAR <4>tiatm driver (patch_annex=0xc00519ec) <4>[tiatm] Set StrictPriority=0 <4>DSP binary filesize = 303784 bytes <4>[setup_irq]: irq 23 irqaction->handler 0xc003920c (tn7atm_sar_irq+0x0/0x30 [tiatm] ) <4>[setup_irq]: irq 31 irqaction->handler 0xc003923c (tn7atm_dsl_irq+0x0/0x28 [tiatm] ) <4>[tiatm]: Powermanagment (States => 1,3,10) supported! <4>Texas Instruments ATM driver: version:[4.06.04.30] <4>ubik2 driver (ubik2 - 0x10=0xc00646b4) <4>atm_dsp_register_ubik2: ubik2_ToMIPS_notify=0xc0055c00 <4>atm_dsp_register_ubik2: dsp mem pointer 0xa1c0f218 <3>ubik2_init_interface: DSP-Link Version v3 8480 <6>isdn_fbox: Loading... <6>isdn_fbox: Driver 'isdn_fbox' attached to stack <6>isdn_fbox: CAPI driver registered. <4>isdn_fbox: AVM F!Box expected @ port 0x0000, irq 0 <4>isdn_fbox: Loading... <6>isdn_fbox: Stack version 3.11-07 <6>isdn_fbox: D-channel 0: DSS1 <6>isdn_fbox: D-channel 1: DSS1 <6>isdn_fbox: D-channel 2: DSS1_N <6>isdn_fbox: D-channel 3: POTS <6>isdn_fbox: D-channel 4: SIP <4>isdn_fbox: Loaded. <6>kdsldmod: init start <6>kdsld: cache_create(datapipe) <6>kdsld: cache_create(datapipe_mod) <6>kdsld: cache_create(ipaccessset) <6>kdsld: cache_create(ipaccessrule) <6>kdsld: cache_create(ipfragid) <6>kdsld: cache_create(ipmasqentry) <6>kdsld: cache_create(ipmasqfwinfo) <6>kdsld: cache_create(ipmasqigdpm) <6>kdsld: cache_create(ipmasqappldata) <6>kdsld: cache_create(ipmasqmcgroup) <6>kdsld: cache_create(dnsmasqentry) <6>kdsld: cache_create(dnsstaticentry) <6>kdsld: cache_create(pingerentry) <6>kdsld: cache_create(pingerwaiter) <6>kdsld: cache_create(iprouteset) <6>kdsld: DATAPIPE: with header optimization <6>kdsldmod: init done <6>kdsld: PPP led: off (value=0) <4>[speedup] disable <4>429493936: Configuration succeeded !!! <4>[ohio_vlynq_init] device 0 <4>[ohio_vlynq_startup_link] <4>[setup_irq]: irq 29 irqaction->handler 0x94004f2c (vlynq_interrupt+0x0/0x34 ) <4>[setup_irq]: irq 79 irqaction->handler 0xc02d7a10 (whal_acxIntrHandler+0x0/0x1e8 [tiap] ) <4>429493943: <4>429493966: WDRV_MAINSM: WLAN Driver initialized successfully <4> <4>429493966: FW Watchdog is Enabled <6>dda: tiwlan0 in initializing Succeeded wireless extensions: ret = 0 <6>tiwlan0 device is activated <6>wdsup0 device is activated <6>wdsdw0 device is activated <6>wdsdw1 device is activated <6>wdsdw2 device is activated <6>wdsdw3 device is activated <4>[setup_irq]: irq 27 irqaction->handler 0x940e016c (cpmac_main_isr+0x0/0x78 ) <3>cpmac_main_ioctl, unknown ioctl 35142 <6>device eth0 entered promiscuous mode <6>device cpmac0 entered promiscuous mode <6>lan: port 1(eth0) entering learning state <4>tiwlan_ddaDoIoctl : Unknown ioctl 35142 <6>device tiwlan0 entered promiscuous mode <6>lan: port 2(tiwlan0) entering learning state <4>tiwlan_ddaWdsDoIoctl : Unknown ioctl 35142 <6>device wdsup0 entered promiscuous mode <6>lan: port 3(wdsup0) entering learning state <4>tiwlan_ddaWdsDoIoctl : Unknown ioctl 35142 <6>device wdsdw0 entered promiscuous mode <6>lan: port 4(wdsdw0) entering learning state <4>tiwlan_ddaWdsDoIoctl : Unknown ioctl 35142 <6>device wdsdw1 entered promiscuous mode <6>lan: port 5(wdsdw1) entering learning state <4>tiwlan_ddaWdsDoIoctl : Unknown ioctl 35142 <6>device wdsdw2 entered promiscuous mode <6>lan: port 6(wdsdw2) entering learning state <4>tiwlan_ddaWdsDoIoctl : Unknown ioctl 35142 <6>device wdsdw3 entered promiscuous mode <6>lan: port 7(wdsdw3) entering learning state <6>kdsld: sync lost <4>AR7WDT: System Init UEberwachung abgeschlossen (93030 ms noch verfuegbar) <6>SysRq : Changing Loglevel <4>Loglevel set to 4 <6>lan: topology change detected, propagating <6>lan: port 1(eth0) entering forwarding state <6>lan: topology change detected, propagating <6>lan: port 2(tiwlan0) entering forwarding state <6>lan: topology change detected, propagating <6>lan: port 3(wdsup0) entering forwarding state <6>lan: topology change detected, propagating <6>lan: port 4(wdsdw0) entering forwarding state <6>lan: topology change detected, propagating <6>lan: port 5(wdsdw1) entering forwarding state <6>lan: topology change detected, propagating <6>lan: port 6(wdsdw2) entering forwarding state <6>lan: topology change detected, propagating <6>lan: port 7(wdsdw3) entering forwarding state <6>mcfw_query_sent: tiwlan:0:0.0.0.0 1000 <6>mcfw_query_sent: tiwlan:0:0.0.0.0 1000 <6>mcfw_query_sent: tiwlan:0:0.0.0.0 1000 <6>mcfw_query_sent: tiwlan:0:0.0.0.0 1000 <6>mcfw_query_sent: tiwlan:0:0.0.0.0 1000 <6>mcfw_query_sent: tiwlan:0:0.0.0.0 1000 <6>mcfw_query_sent: tiwlan:0:0.0.0.0 1000 <6>mcfw_query_sent: tiwlan:0:0.0.0.0 1000 <6>mcfw_query_sent: tiwlan:0:0.0.0.0 1000 <6>mcfw_query_sent: tiwlan:0:0.0.0.0 1000 <6>mcfw_query_sent: tiwlan:0:0.0.0.0 1000 <6>mcfw_query_sent: tiwlan:0:0.0.0.0 1000 <4>[tiatm] DSL in training! <6>mcfw_query_sent: tiwlan:0:0.0.0.0 1000 <6>mcfw_query_sent: tiwlan:0:0.0.0.0 1000 <4>[tiatm] DSL in training! <6>mcfw_query_sent: tiwlan:0:0.0.0.0 1000 <6>mcfw_query_sent: tiwlan:0:0.0.0.0 1000 <6>mcfw_query_sent: tiwlan:0:0.0.0.0 1000
IOMEM
~ # cat /proc/iomem 14000000-1420afff : reserved 14000000-141715d3 : Kernel code 141715d4-141c70bf : Kernel data 1420b000-15ffffff : System RAM a8610000-a86107ff : cpmac0
devices
~ # cat /proc/devices Character devices: 1 mem 2 pty 3 ttyp 4 ttyS 5 /dev/tty 5 /dev/console 5 /dev/ptmx 10 misc 13 input 68 capi20 90 mtd 128 ptm 136 pts 191 capi 230 tiatm 240 tffs 241 avm_event 242 watchdog 243 kdsld 244 kdsldptrace 245 ubik2 246 debug 251 avm_led 252 avm_power Block devices: 31 mtdblock
loaded kernel modules
~ # cat /proc/modules tiap 880464 0 - Live 0xc02ab000 kdsldmod 515808 2 - Live 0xc022c000 isdn_fbox 931040 20 - Live 0xc0147000 ubik2 69104 1 isdn_fbox, Live 0xc0055000 tiatm 106560 1 ubik2, Live 0xc0039000 Piglet 7632 0 - Live 0xc000a000
Network Interfaces Configuration
~ # ifconfig
cpmac0 Link encap:Ethernet HWaddr 00:1A:4F:CB:E2:D9
UP BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:256
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
eth0 Link encap:Ethernet HWaddr 00:1A:4F:CB:E2:D9
UP BROADCAST RUNNING ALLMULTI MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:19 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:1026 (1.0 KiB)
lan Link encap:Ethernet HWaddr 00:1A:4F:CB:E2:D9
inet addr:192.168.2.1 Bcast:192.168.2.255 Mask:255.255.255.0
UP BROADCAST RUNNING ALLMULTI MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:21 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:1062 (1.0 KiB)
lan:0 Link encap:Ethernet HWaddr 00:1A:4F:CB:E2:D9
inet addr:192.168.2.254 Bcast:192.168.2.255 Mask:255.255.255.0
UP BROADCAST RUNNING ALLMULTI MULTICAST MTU:1500 Metric:1
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:270 errors:0 dropped:0 overruns:0 frame:0
TX packets:270 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:32574 (31.8 KiB) TX bytes:32574 (31.8 KiB)
tiwlan0 Link encap:Ethernet HWaddr 00:1A:4F:90:5B:9E
UP BROADCAST RUNNING ALLMULTI MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:19 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:950 (950.0 B)
wdsdw0 Link encap:Ethernet HWaddr 00:1A:4F:90:5B:9E
UP BROADCAST RUNNING ALLMULTI MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:19 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:950 (950.0 B)
wdsdw1 Link encap:Ethernet HWaddr 00:1A:4F:90:5B:9E
UP BROADCAST RUNNING ALLMULTI MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:19 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:950 (950.0 B)
wdsdw2 Link encap:Ethernet HWaddr 00:1A:4F:90:5B:9E
UP BROADCAST RUNNING ALLMULTI MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:19 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:950 (950.0 B)
wdsdw3 Link encap:Ethernet HWaddr 00:1A:4F:90:5B:9E
UP BROADCAST RUNNING ALLMULTI MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:19 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:950 (950.0 B)
wdsup0 Link encap:Ethernet HWaddr 00:1A:4F:90:5B:9E
UP BROADCAST RUNNING ALLMULTI MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:19 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:950 (950.0 B)
~ # cat /etc/avm_firmware_public_key1 00d153ab43f587bc891397f763ac18aff92b840cdfd5aeb773c995ae957cd3b992cd48eacc7ac940cb38e0849777010ed41189c986cfbe67b929121934654f3976b2748f8d16059d9a1e518617c4dcfba468ec865c2bae9269b 010001
~ # cat /etc/avm_firmware_public_key2 00e1519e966ee984cdf564825a34cc9beb3c14f720579781e8859eb51f963560979ef16caa6e279376dc9c60a35d67d2b32128ce8f8abb29b2c3aace92bc32607b0b2f09dfcc3c9258d1e6b1daff58fd1f29c410a31ef454e0b 010001
~ # cat /etc/led.conf DEF error,0 = 1,128,0,all DEF error,1 = 3,127,0,all DOUBLE error,0 TO error,1 DEF power,0 = 0,7,0,power DEF power,1 = 0,7,0,power DEF tr69,0 = 2,6,1,tr69 DEF cpmac,3 = 99,0,2,lan4 DEF cpmac,2 = 99,1,3,lan3 DEF cpmac,1 = 99,2,4,lan2 DEF cpmac,0 = 99,3,5,lan DEF wlan,0 = 2,5,6,wlan DEF ab,1 = 2,4,7,festnetz DEF ab,2 = 2,4,7,festnetz DEF ab,3 = 2,4,7,festnetz DEF voip_con,0 = 2,3,8,voip_con DEF pppoe,0 = 2,2,9,dsl DEF pppoe,1 = 2,2,9,dsl DEF adsl,0 = 2,1,10,adsl DEF adsl,1 = 2,1,10,adsl DEF ata,0 = 2,0,11,ata DEF usb,0 = 99,32,12,usb DEF usb,1 = 99,32,12,usb DEF blockring,0 = 99,32,13,blockring DEF missedcall,0 = 99,32,14,missedcall DEF budget,0 = 99,32,15,budget DEF info,0 = 99,32,16,info DEF info,1 = 99,32,16,info DEF info,2 = 99,32,16,info DEF info,3 = 99,32,16,info DEF info,4 = 99,32,16,info DEF internet,0 = 99,32,17,internet DEF internet,1 = 99,32,17,internet DEF isdn,0 = 99,32,18,isdn DEF isdn,1 = 99,32,18,isdn DEF isdn,2 = 99,32,18,isdn DEF stick_surf,0 = 99,32,19,stick_surf DEF stick_surf,1 = 99,32,19,stick_surf DEF stick_surf,2 = 99,32,19,stick_surf DEF stick_surf,3 = 99,32,19,stick_surf DEF null,0 = 99,32,20,null_device MAP budget,0 TO info,1 MAP ab,2 TO null,0 SET power,0 = 1
Output from various ADAM2 commands on original firmware
(AVM) EVA Revision: 1.203 Version: 1203
(C) Copyright 2005 AVM Date: Feb 7 2007 Time: 19:03:32 (3) 2 0-11111
[FLASH:] SPANSION Top-MirrorBit-Flash 8MB 32 Bytes WriteBuffer
[FLASH:](Eraseregion [0] 127 sectors a 64kB)
[FLASH:](Eraseregion [1] 8 sectors a 8kB)
[SYSTEM:] OHIO on 211MHz/125MHz
Eva_AVM >
Commands Description
-------- -----------
help help
dm dump mem <addr> <range>
cm change mem <addr> <value>
erase Erase Flash <mtd>
printenv print Env. Variables
restart reboot Device
setenv set Env. variable <var> <value>
unsetenv unset Env. variable <var>
go load & start kernel from mtd1
setmac set mac addresses <addr> (like 12:23:40)
memtest test memory
Eva_AVM >printenv
HWRevision 101.1.1.0