These black boxes were given away with a BT broadband subscription. They comes in two variants labelled Type A and Type B. The two look identical, and although they provide the same functionality, they are very different on the inside.
Both include ADSL2+, 802.11b/g/n wireless, one USB 2.0 host port, 4 10/100 wired ethernet ports, DECT, FXS & FXO ports and VOIP functionality.
Obsolete info:
Some initial work: www.psidoc.com. Following the sad closure of http://psidoc.com, all members of the BT Home Hub Openwrt community are now encouraged to join in ongoing development efforts, concentrated on the Home Hub 2B, at http://openwrt.ebilan.co.uk.
Old firmwares:
Version | Release date | Link | kernel | Tested |
---|---|---|---|---|
OpenWrt 17.01.5 (LEDE Reboot) | 2018-16-06 | lede-17.01.5-brcm63xx-generic-HomeHub2A-squashfs-cfe.bin | 4.4.92 | ✔ |
OpenWrt 15.05.1 (Chaos Calmer) | 2016 | openwrt-15.05.1-brcm63xx-generic-HomeHub2A-squashfs-cfe.bin | 3.18.23 | ✔ |
→ Install OpenWrt (generic explanation)
Installation requires the flashing of a custom CFE first. Since Type A units always had readily identifiable JTAG pins, flashing the new bootloader with JTAG is the tried-and-tested approach on these units, but requires 1mm-pitch soldering and some form of JTAG hardware (although this can be just a Raspberry Pi).
According to a couple of ebilan forum posts, if your BT firmware is older than 8.1.H.J you may be able to avoid JTAG and use the same USB-based installation process as used on the Type B; a full write-up here would be most welcome!
Until then, this page continues to suggest the JTAG-based process.
-anyflash-oxplot-tjtag-pi
CFE image.-anyflash
CFE image.(Technical: the only difference is the byte ordering within 16-bit words.)
CFE_HomeHub2A-anyflash.bin
md5sum=d11b987f17198584a27eb183090609fc
CFE-BTHH2A-anyflash-oxplot-tjtag-pi.bin
md5sum=7f7dcd973ada548d1ebcd9cbcaec17c8
Some users reported after installing the new CFE, if the UART serial port is left disconnected, the bootloader always stops avoiding to load Openwrt. A solution is to pull the UART RX to ground (0V) with a wire. Then OpenWrt will boot automatically without the serial cable connected.
Using the OEM firmware for flashing the new bootloader might be also possible. Please post here or at the forum topic if you work out how to do it.
Installing Openwrt in this router requires two steps:
Please check out the article flash.layout. It contains an example and a couple of explanations.
This section deals with how you install OpenWrt once the OEM bootloader is replaced by a new CFE. With this procedure you will flash the firmware using the bootloader web interface (foolproof):
http://192.168.1.1
http://192.168.1.1
if LuCI is installed.→ generic.flashing.tftp If you want to install a firmware using TFTP, follow these steps (as an alternative to the above install process).
f 192.168.1.35:firmware.bin
This is a session of flashing via TFTP:
CFE> f 192.168.1.35:firmware.bin Loading 192.168.1.35:firmware.bin ... Finished loading 2686980 bytes Flashing root file system and kernel at 200xbe020000: ....................................... . *** Image flash done *** ! Resetting board...\200x1d
If you have already installed OpenWrt and like to reflash for e.g. upgrading to a new OpenWrt version you can upgrade using the mtd command line tool. It is important that you put the firmware image into the ramdisk (/tmp) before you start flashing.
http://192.168.1.1/cgi-bin/luci/mini/system/upgrade/
LuCI Upgrade URLcd /tmp/ wget https://downloads.openwrt.org/releases/17.01.5/targets/brcm63xx/smp/lede-17.01.5-brcm63xx-smp-HomeHub2A-squashfs-cfe.bin sysupgrade /tmp/lede-17.01.5-brcm63xx-smp-HomeHub2A-squashfs-cfe.bin
cd /tmp/ wget http://http://downloads.openwrt.org/snapshots/trunk/XXX/xxx.abc mtd write /tmp/xxx.abc linux && reboot
→ Basic configuration After flashing, proceed with this.
Set up your Internet connection, configure wireless, configure USB port, etc.
The default network configuration is:
Interface Name | Description | Default configuration |
---|---|---|
br-lan | LAN & WiFi | 192.168.1.1/24 |
eth0 | LAN ports (1 to 4) | bridged |
wlan0 | WiFi | disabled |
Instruction set | MIPS |
---|---|
Vendor | Broadcom |
bootloader | unknown (custom Thomson Speedtouch bootloader) Can be replaced by cfe |
System-On-Chip | Broadcom 6358KFBG |
CPU/Speed | BMIPS4350 V1.0 / 300 Mhz |
Flash-Chip | Spansion S29GL128N90TFIR2 or ST/Numonyx/Micron M29W128GL; both are parallel NOR flash, 128KB block size x 128 blocks, TSOP56 |
Flash size | 16 MiB |
RAM | Hynix HY5DU121622DTP or Samsung K4H511638D |
RAM size | 64 MiB |
Wireless | BCM94332MP2D 802.11a/b/g/n Mini PCI card or soldered module |
Ethernet | Broadcom BCM5325 supporting 16 VLANs via swconfig |
Internet | ADSL2+ |
Slic | Silicon Labs Si3216-FM Programmble Wideband SLIC/CODEC with ringing/battery voltage generation |
DECT | Inventel DECT module appearing as Bluetooth HCI on SPI bus |
USB | Yes |
Serial | Yes |
JTAG | Yes |
If the sockets/ports are on the front of the board at the bottom, the unpopulated 2mm pitch serial port header is located near the top of the board to the right (varying slightly between rev1 and rev2). In addition to populating it you need to bridge two absent resistor locations on the front of the board (R105, R106). From the top going downwards, the connections are:
The docs for this JST-SH-8 type of header suggest sources for cables/sockets.
More general information about the JTAG port, JTAG cable, etc can be found on the JTAG hardware page.
We can use any hairydairymaid-based software to flash the required CFE for loading OpenWrt firmware:
UrJTAG or OpenOCD may also work; reports welcomed.
A session of flashing CFE with zjtag using a WIGGLER cable:
# ./zjtag -flash:custom /window:1e000000 /start:1e000000 /length:20000 /wiggler /BE ============================================== zJTAG EJTAG Debrick Utility v1.8 RC3 ============================================== cable=wiggler, cabletype=3 Detected IR chain length = 32 There are 1 device(s) in the JTAG chain IDCODE for device 1 is 200x0635817F (IR length:1) Probing bus ... Done Defined IR Length is 5 bits CPU assumed running under BIG endian CPU Chip ID: 00000110001101011000000101111111 (200x0635817F) *** Found a Broadcom manufactured BCM6358 REV 01 CPU *** - EJTAG IMPCODE ....... : 00000000100000011000100100000100 (200x00818904) - EJTAG Version ....... : 1 or 2.0 - EJTAG DMA Support ... : Yes - EJTAG Implementation flags: R4k MIPS16 MIPS32 Issuing Processor / Peripheral Reset ... Done Enabling Memory Writes ... Done Halting Processor ... <Processor Entered Debug Mode!> ... Done Clearing Watchdog ... Done Loading CPU Configuration Code ... Skipped Detecting Flash Base Address... Read MPI register value : 1E00000C MPI register show Flash Access Base Addr : 1E000000 Probing Flash at Address: 200x1E000000 ... Detected Chip ID (VenID:DevID = C27E : 2101) *** Found a CFI Compatiable Flash Chip from Macronix - Flash Chip Window Start .... : 1E000000 - Flash Chip Window Length ... : 01000000 - Selected Area Start ........ : 1E000000 - Selected Area Length ....... : 00020000 *** You Selected to Flash the CUSTOM.BIN *** ========================= Flashing Routine Started ========================= Total Blocks to Erase: 1 Erasing block: 1 (addr = 1E000000)...Done Loading CUSTOM.BIN to Flash Memory... Done (CUSTOM.BIN loaded into Flash Memory OK) ========================= Flashing Routine Complete ========================= elapsed time: 174 seconds *** REQUESTED OPERATION IS COMPLETE *** #
This board uses an external BCM5325 switch. It's connected to the second internal EMAC at the SoC.
The RESET# pin at the switch is wired to the GPIO15 at the SoC. We must set GPIO15 to HIGH state to pull the switch out of reset. After this operation it seems the switch still doesn't respond, so probably additional configuration is required.
This sequence leaves the switch in a working (ping OK) state:
GPIO 15 output HIGH, wait 1s → set managed mode, wait 300ms → set unmanaged mode, wait 300ms → B53_PORT_CTRL(i)=200×00 0≤i≤8 → ping OK
Both MDIO and SPI pins are wired to the SoC, therefore configuring the switch can be done either by using MDIO bus or else SPI. BCM63xx SPI driver is buggy in Openwrt, then we prefer to always use MDIO.
Label | GPIO | active | Linux code |
---|---|---|---|
Restart | n/a | n/a | n/a |
Find Handset | 1 | low | KEY_PHONE |
Reset to Defaults | 9 | low | KEY_RESTART |
Wireless Association | 11 | low | KEY_WPS_BUTTON |
All buttons are active low.
The LEDs are not connected directly to the GPIO lines, but instead to a couple of shift registers driven by two chained 74HC594. GPIO 7 is data, GPIO 6 is clock, and GPIO 5 is latch. In OpenWrt these GPIOs are controlled by the SPI master driver using generic bitbanged GPIO, allowing to use the 74Hx164 generic serial-in/parallel-out 8-bits shift register GPIO driver.
Led Name | Colour | bit |
---|---|---|
Power | Red | 0 |
Green | 1 | |
Blue | 2 | |
Broadband | Red | 3 |
Green | 4 | |
Blue | 5 | |
Wireless | Red | 6 |
Green | 7 | |
Blue | 8 | |
Phone | Red | 9 |
Green | 10 | |
Blue | 11 | |
Upgrading | Red | 12 |
Green | 13 | |
Blue | 14 | |
n/a | spare:U23:pin7 | 15 |
As a beginner, you really should inform yourself about soldering in general and then obtain some practical experience!
The unpopulated port appears to have been set up to draw its power straight from the board's 5V supply (the same supply as the handset charging) and may have been intended as a charging port (there doesn't appear to be any switch nor current limiting). To restore it you'd need to:
The existing populated single USB port has its power controlled by a Texas Instruments TPS2051B on the underside, a current-limiting switch that manages and reports overcurrent conditions. It only supports one channel (one managed port), and the footprint may or may not allow for the two-channel variant.
DDR2 test.. VCDL test. Decompressing Bootloader................................ Version BL: 1.0.2 Reading cpu info...........bcm96358 tp0 revision 1 MIPS is in Big endian mode Icache : 32Kb Icachelinesize : 16 bytes Dcache : 16Kb Dcachelinesize : 16 bytes BCM config reg CP0 : e30e1006 Instruction cache enabled Data cache enabled Data cache is nonblocking C0_CONFIG reg = 80008083 standard TLB config Cacheable, write-back Multicore enable; Booting Linux kernel pfuncjmp = A0001840 Reading cpu info...........bcm96358 tp0 revision 1 MIPS is in Big endian mode Icache : 16Kb Icachelinesize : 16 bytes Dcache : 16Kb Dcachelinesize : 16 bytes BCM config reg CP0 : 230e1006 Data cache is nonblocking C0_CONFIG reg = 80008082 standard TLB config Noncacheable JTAG select tp1 BOOTING THE THOMSON LINUX KERNEL Starting the kernel @ 200x801df018 memsize=200x3F7D000serial initialized Linux version 2.6.8.1 (buildmgm@dslws-zhangjw.beijing.ap.thmulti.com) (gcc version 3.4.6) #1 Mon Sep 14 12:05:33 CST 2009 CPU revision is: 0002a010 bcm63xx : initiazation of mpi bus ............... Determined physical RAM map: memory: 03f7d000 @ 00002000 (usable) On node 0 totalpages: 16255 DMA zone: 4096 pages, LIFO batch:1 Normal zone: 12159 pages, LIFO batch:2 HighMem zone: 0 pages, LIFO batch:1 Built 1 zonelists Kernel command line: root=/dev/mtdblock1 rootfstype=squashfs brcm mips: enabling icache and dcache... Primary instruction cache 32kB, physically tagged, 2-way, linesize 16 bytes. Primary data cache 16kB 2-way, linesize 16 bytes. PID hash table entries: 256 (order 8: 2048 bytes) Using 150.000 MHz high precision timer. Dentry cache hash table entries: 16384 (order: 4, 65536 bytes) Inode-cache hash table entries: 8192 (order: 3, 32768 bytes) Allocating memory for DSP module core and initialization code Allocated DSP module memory - CORE=200x81099bc0 SIZE=900000, INIT=200x81175760 SIZE=5000 Memory: 61380k/65012k available (1428k kernel code, 3564k reserved, 420k data, 68k init, 0k highmem) Calibrating delay loop... 297.98 BogoMIPS Mount-cache hash table entries: 512 (order: 0, 4096 bytes) Checking for 'wait' instruction... available. NET: Registered protocol family 16 usbcore: registered new driver usbfs usbcore: registered new driver hub Bluetooth: Core ver 2.6 NET: Registered protocol family 31 Bluetooth: HCI device and connection manager initialized Bluetooth: HCI socket layer initialized inotify device minor=63 squashfs: version 3.3 (2007/10/31) Phillip Lougher squashfs: LZMA suppport for slax.org by jro JFFS2 version 2.2. (C) 2001-2003 Red Hat, Inc. bcm963xx_serial driver v2.0 BTHub: initialize parser Using noop io scheduler Thomson Speedtouch flash mapping flash: Found 1 x16 devices at 200x0 in 16-bit bank Amd/Fujitsu Extended Query Table at 200x0040 flash: CFI does not contain boot bank location. Assuming top. number of CFI chips: 1 cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness. flash mapping initialized parse_bthub_partitions (block_size: 131072) bthub: header of CORE partition is detected bthub: kernel is at offset (be1a001a), size (94f1b) corefs_pattern: info is at offset (bea00004), size (4) including a header of (4) corefs_pattern: ds is at offset (bea00008), size (24) including a header of (4) bthub: a signature has been stored bthub: SquashFS is expected at be235000, found magic is 71736873 bthub: SquashFS (start: be235000, size 1eb000) bthub: SquashFS is expected at be420000, found magic is 71736873 bthub: SquashFS (start: be420000, size 5e0000) bthub: user partition is created bthub: no valid extended partition detected. An empty one will be created. bthub mtd: user (be020000, 180000), write(1), sdram(0) bthub mtd: rootfs (be420000, 5e0000), write(0), sdram(0) bthub mtd: modfs (be235000, 1eb000), write(0), sdram(0) bthub mtd: extfs (bea21000, 59f000), write(0), sdram(0) bthub mtd: extended (bea20000, 5e0000), write(1), sdram(0) bthub mtd: flash (be000000, 1000000), write(1), sdram(0) PT: creating a tree under /proc... [ flash ] [ core ] [ corefs ] [ kernel ] [ modfs ] [ rootfs ] [ user ] [ extended ] [ extfs ] PT: done. 6 BTHub partitions found on MTD device flash Creating 6 MTD partitions on "flash": 200x00020000-200x001a0000 : "user" 200x00420000-200x00a00000 : "rootfs" 200x00235000-200x00420000 : "modfs" 200x00a21000-200x00fc0000 : "extfs" 200x00a20000-200x01000000 : "extended" 200x00000000-200x01000000 : "flash" Bluetooth: HCI UART driver ver 2.1 Bluetooth: HCI H4 protocol initialized Bluetooth: HCI BCSP protocol initialized brcmboard: brcm_board_init entry NET: Registered protocol family 2 IP: routing cache hash table of 512 buckets, 4Kbytes TCP: Hash tables configured (established 4096 bind 8192) NET: Registered protocol family 1 NET: Registered protocol family 17 NET: Registered protocol family 15 VFS: Mounted root (squashfs filesystem) readonly. Freeing unused kernel memory: 68k freed init started: BusyBox v1.00 (2009.09.14-04:06+0000) multi-call binary init started: BusyBox v1.00 (2009.09.14-04:06+0000) multi-call binary Starting pid 40, console /dev/ttyS0: '/etc/init.d/rcS' Algorithmics/MIPS FPU Emulator v1.5 SQUASHFS error: Can't find a SQUASHFS superblock on mtdblock3 mount: Mounting /dev/mtdblock3 on /extfs failed: Invalid argument telnetd: starting port: 23; login program: /bin/sh Using /lib/modules/2.6.8.1/kernel/drivers/usb/host/ohci-hcd.ko ohci_hcd: 2004 Feb 02 USB 1.1 'Open' Host Controller (OHCI) Driver (PCI) ohci_hcd: block sizes: ed 64 td 64 PCI: Enabling device 0000:00:09.0 (0000 -> 0002) ohci_hcd 0000:00:09.0: PCI device 14e4:6300 (Broadcom Corporation) PCI: Setting latency timer of device 0000:00:09.0 to 64 ohci_hcd 0000:00:09.0: irq 13, pci mem c00cb400 ohci_hcd 0000:00:09.0: new USB bus registered, assigned bus number 1 hub 1-0:1.0: USB hub found hub 1-0:1.0: 2 ports detected Using /lib/modules/2.6.8.1/kernel/drivers/usb/host/ehci-hcd.ko PCI: Enabling device 0000:00:0a.0 (0000 -> 0002) ehci_hcd 0000:00:0a.0: PCI device 14e4:6300 (Broadcom Corporation) PCI: Setting latency timer of device 0000:00:0a.0 to 64 ehci_hcd 0000:00:0a.0: irq 18, pci mem c00cf300 ehci_hcd 0000:00:0a.0: new USB bus registered, assigned bus number 2 PCI: cache line size of 32 is not supported by device 0000:00:0a.0 ehci_hcd 0000:00:0a.0: USB f.f enabled, EHCI 1.00, driver 2004-May-10 hub 2-0:1.0: USB hub found hub 2-0:1.0: 2 ports detected hub 2-0:1.0: over-current change on port 2 rm: cannot remove `/rw/dl/usbabsent': No such file or directory Using /nmon/nmon.ko nmon: module license 'unspecified' taints kernel. Button: Character device registered successfully. AnnexCParam=200x00000000 AnnexAParam=200x00000000 adsl2=200x00000000 pSdramPHY=200xA3FFFFF8, 200x48000000 200x0 [BCM ADSL] Firmware load : 431156 431156 LMEM=(200xFFF00000, 49488) SDRAM=(200xA3FA0000, 381660) AdslCoreHwReset: AdslOemDataAddr = 200xA3FFC1C4 AnnexCParam=200x00000000 AnnexAParam=200x00000000 adsl2=200x00000000 ADSL PHY version is A2pBT010i.d20h b6w_init mpi: No Card is in the PCMCIA slot mpi: device 200x432c found in PCI slot 1, function 0 IPSecControl Character device registered successfully. NET: Registered protocol family 3 NET: Registered protocol family 9 NET: Registered protocol family 4 NET: Registered protocol family 5 NET: Registered protocol family 18 NET: Registered protocol family 25 Using /lib/modules/tty_spi.ko usage: insmod tty_spi speed n CS=2 date: Sep 14 2009 time: 12:31:13, speed 1 Using /lib/modules/krtp.ko krtp ver 2.8 softdsp-vad-multiline-wb (Sep 14 2009 12:24:47) Using /lib/modules/dspdd.ko load dspdd.ko: core_size=825584, init_size=0 DSP Driver: DSP init stub Using /lib/modules/endpointdd.ko Endpoint: endpoint_init entry Endpoint: endpoint_init COMPLETED Using /lib/modules/bt_reset.ko Using /lib/modules/2.6.8.1/kernel/net/bluetooth/l2cap.ko Bluetooth: L2CAP ver 2.3 Bluetooth: L2CAP socket layer initialized Device ikanos not present. Starting pid 231, console /dev/ttyS0: '/etc/init.d/rc' Switching to RUNLEVEL 1 ... MDG on SPI MDG version: 40-1, expect 40-1 RAD : rad started..... RAD : Reading /etc/rad.conf RAD : found entry 1, path /usr/bin/upnp_dect_ui RAD : found entry 2, path /usr/bin/gw_numberL2C RAD : found entry 3, path /usr/bin/loader_alertL2C RAD : found entry 4, path /usr/bin/TI_number_menu RAD : found entry 5, path /usr/bin/hyper_accept RAD : found entry 6, path /usr/bin/send_base_IP_address RAD : found entry 7, path /usr/bin/osis_channel_conf RAD : found entry 8, path /usr/bin/osis_wizard RAD : found entry 9, path /usr/bin/npab_connect RAD : Reading /etc/hsupd.conf RAD : found entry 1, path /usr/bin/hyper_update RAD : found entry 2, path /usr/bin/hs_eep_update RAD : Waiting for connection on psm : RAD : A01 RAD : A06 Writing /var/run/rad.pid linux application start ... wait for linux_appl to initialize (1) wait for linux_appl to initialize (2) ************* ERROR RECORD ************* 000000:00:00.000000 Application NMON started after POWERON. ****************** END ***************** appl_init: build verified dip_init() : button[FACTORY_RESET] has number[1] wait for linux_appl to initialize (3) End of initialisation start storagepl ... storagepl is started Using /lib/modules/2.6.8.1/kernel/drivers/usb/host/ohci-hcd.ko insmod: cannot insert `/lib/modules/2.6.8.1/kernel/drivers/usb/host/ohci-hcd.ko': Success (17): Success modprobe: failed to load module ohci-hcd Using /lib/modules/2.6.8.1/kernel/drivers/usb/host/ehci-hcd.ko insmod: cannot insert `/lib/modules/2.6.8.1/kernel/drivers/usb/host/ehci-hcd.ko': Success (17): Success modprobe: failed to load module ehci-hcd Using /lib/modules/2.6.8.1/kernel/drivers/usb/class/usblp.ko usblp: falsely claims to have parameter proto_bias usbcore: registered new driver usblp drivers/usb/class/usblp.c: v0.13: USB Printer Device Class driver modprobe: module usbserial not found. modprobe: failed to load module usbserial id: unknown user name: nobody id: unknown user name: nobody Using /lib/modules/2.6.8.1/kernel/drivers/scsi/scsi_mod.ko SCSI subsystem initialized Using /lib/modules/2.6.8.1/kernel/drivers/scsi/sd_mod.ko Using /lib/modules/2.6.8.1/kernel/drivers/usb/storage/usb-storage.ko Initializing USB Mass Storage driver... usbcore: registered new driver usb-storage USB Mass Storage support registered. Using /lib/modules/2.6.8.1/kernel/fs/fat/fat.ko Using /lib/modules/2.6.8.1/kernel/fs/vfat/vfat.ko Using /lib/modules/2.6.8.1/kernel/fs/msdos/msdos.ko Using /lib/modules/2.6.8.1/kernel/fs/nls/nls_cp437.ko Using /lib/modules/2.6.8.1/kernel/fs/nls/nls_iso8859-1.ko mount all usbdisks not implemented ! Name: /etc/usbmgr/usbmgr.conf Load_from_file: /etc/usbmgr/preload.conf checkd start ... checkd: daemonized with blocked parent process checkd: parent process released. S67stopload: wait until configuration load reaches phase 9... linuxappl: start loading after [ 3034ms ] ---- WL firmwarecode (0--1-0-0) kernel::endpoint_open kernel::endpoint_open COMPLETED [adsl] trace = 5 0 [LED] led_drv_init() userspace usb 2-1: new high speed USB device using address 2 scsi0 : SCSI emulation for USB Mass Storage devices Vendor: Kingston Model: DataTraveler G3 Rev: 1.00 Type: Direct-Access ANSI SCSI revision: 02 SCSI device sda: 31272544 512-byte hdwr sectors (16012 MB) sda: assuming Write Enabled sda: assuming drive cache: write through sda: sda1 Attached scsi removable disk sda at scsi0, channel 0, id 0, lun 0 USB Mass Storage device found at 2 ADSL configuration: adslmultimode = adsl2plus syslog = disabled [mlp] Invalid/duplicate username or user database full. [mlp] Invalid/duplicate username or user database full. [mlp] Invalid/duplicate username or user database full. stopping the pureftp-server ... the pureftp-server is stopped stopping the pure-authd ... the pure-authd is stopped HAUSWARE HOST LIBRARY => BUILD DATE = Jul 4 2008, BUILD TIME = 15:17:51 *** gStartRxDesc[0] = 200xA0E2D000 *** gBufferSizeBytes = 1280 *** gStartTxDesc[0] = 200xA0E2F000 hal6358PcmInit 260 nextTxDesc = 200xA0E2F000 hal6358PcmInit 260 nextTxDesc = 200xA0E2F008 hal6358PcmInit 264 Ownership for TX desc not set. Use this buffer. PERF->IrqMask = 200xA8060427 PERF->IrqMask1 = 200x00800000 Starting su_interface ... su_interface: running Starting la_interface ... la_interface: running /extfs/etc/finally.sh: 1: shareroot: not found Load_from_file: /etc/usbmgr/class/08/06/module Start to load end of loop really the end 9 (len 8) Module_load name: þC8 Load_from_file: /etc/usbmgr/class/08/06/script Start to load end of loop really the end 8 (len 7) Path: /etc/usbmgr/storage Cmd2 : storage id: unknown user name: nobody id: unknown user name: nobody Disk dev is sda Mounting all partitions of sda checking sda1 514 Trying to mounting device: SQUASHFS error: Can't find a SQUASHFS superblock on sda1 Mounted /var/usbmount/sda1 succesfully * Determine managed disk based on a marker file on the disk. Could not open marker files Device nr /var/usbmount/sda1/Settings/manageddisk_marker is NOT the managed disk Device 514 is not a managed disk checking sda2 514 open() failed: No such device or address checking sda3 514 starting the upnp av server open() failed: No such device or address checking sda4 514 open() failed: No such device or address Username : checking sda5 514 open() failed: No such device or address samba: stopping ... ILibMediaProfiler: ILibMediaProf_CheckState: Media profiling finished checking sda6 514 killall: smbd: no process killed open() failed: No such device or address checking sda7 514 killall: nmbd: no process killed open() failed: No such device or address checking sda8 514 killall: cifscl: no process killed samba: initializing ... open() failed: No such device or address samba: wait for cifscl to initialize (1) checking sda9 514 open() failed: No such device or address checking sda10 514 open() failed: No such device or address checking sda11 514 open() failed: No such device or address checking sda12 514 open() failed: No such device or address checking sda13 514 open() failed: No such device or address checking sda14 514 open() failed: No such device or address checking sda 514 /etc/usbmgr/usbledctrl: 38: ledctrl: not found envp2 addr 200x7ffe3f18 samba: wait for cifscl to initialize (2) samba: wait for cifscl to initialize (3) samba: wait for cifscl to initialize (4) samba: wait for cifscl to initialize (5) samba: wait for cifscl to initialize (6) samba: wait for cifscl to initialize (7) samba: wait for cifscl to initialize (8) samba: wait for cifscl to initialize (9) samba: wait for cifscl to initialize (10) samba: wait for cifscl to initialize (11) samba: wait for cifscl to initialize (12) samba: wait for cifscl to initialize (13) samba: wait for cifscl to initialize (14) samba: wait for cifscl to initialize (15) samba: wait for cifscl to initialize (16) samba: wait for cifscl to initialize (17) samba: wait for cifscl to initialize (18) samba: wait for cifscl to initialize (19) samba: wait for cifscl to initialize (20) cifscl time out samba: starting ...
Pulling BCM5325 out of reset (GPIO15 ON)......done CFE version 1.0.37-6.4 for BCM96358 (32bit,SP,BE) Build Date: Mon Mar 16 15:29:36 CET 2015 (dani@tool) Copyright (C) 2000-2005 Broadcom Corporation. Boot Address 200xbe000000 Initializing Arena. Initializing Devices. Parallel flash device: name AM29LV320MT, id 200x2201, size 16384KB Now initializing the switch... GPIO_MODE_EMAC2_MII_CLK_INV pinmux enabled Setting BCM5325 managed mode B53_SWITCH_MODE = 200x5 new B53_SWITCH_MODE = 200x7 REG_MII_PORT_CONTROL = 200x20 new REG_MII_PORT_CONTROL = 200x3c B53_GLOBAL_CONFIG = 200x0 new B53_GLOBAL_CONFIG = 200x80 REG_VLAN_CTRL5 = 200x0 new REG_VLAN_CTRL5 = 200x3 done Setting BCM5325 unmanaged mode B53_SWITCH_MODE = 200x7 new B53_SWITCH_MODE = 200x6 B53_GLOBAL_CONFIG = 200x80 new B53_GLOBAL_CONFIG = 200x0 done Clearing B53_PORT_CTRL(i) registers at ports 0, 1, 2, 3, 4, 5, 6, 7, 8, done B53_PORT_OVERRIDE_CTRL = 200x9f ...done CPU type 200x2A010: 300MHz, Bus: 133MHz, Ref: 64MHz Total memory: 67108864 bytes (64MB) Total memory used by CFE: 200x80401000 - 200x80528880 (1210496) Initialized Data: 200x8041D970 - 200x8041FF80 (9744) BSS Area: 200x8041FF80 - 200x80426880 (26880) Local Heap: 200x80426880 - 200x80526880 (1048576) Stack Area: 200x80526880 - 200x80528880 (8192) Text (code) segment: 200x80401000 - 200x8041D970 (117104) Boot area (physical): 200x00529000 - 200x00569000 Relocation Factor: I:00000000 - D:00000000 Board IP address : 192.168.1.1 Host IP address : 192.168.1.100 Gateway IP address : Run from flash/host (f/h) : f Default host run file name : vmlinux Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Board Id Name : HOMEHUB2A Psi size in KB : 24 Number of MAC Addresses (1-32) : 4 Base MAC Address : 00:26:44:ee:53:c6 Ethernet PHY Type : Internal Memory size in MB : 64 CMT Thread Number : 0 *** Press any key to stop auto run (1 seconds) *** Auto run second count down: 1\200x081\200x080 Code Address: 200x80010000, Entry Address: 200x80010000 Decompression OK! Entry at 200x80010000 Closing network. Starting program at 200x80010000 [ 0.000000] Linux version 3.10.49 (dani@tool) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 r44645) ) #15 Mon Mar 16 15:48:28 CET 2015 [ 0.000000] Detected Broadcom 200x6358 CPU revision a1 [ 0.000000] CPU frequency is 300 MHz [ 0.000000] 64MB of RAM installed [ 0.000000] registering 40 GPIOs [ 0.000000] board_bcm963xx: Boot address 200xbe000000 [ 0.000000] board_bcm963xx: CFE version: 1.0.37-6.4 [ 0.000000] bootconsole [early0] enabled [ 0.000000] CPU revision is: 0002a010 (Broadcom BMIPS4350) [ 0.000000] board: board name: HOMEHUB2A [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 04000000 @ 00000000 (usable) [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 200x00000000-200x03ffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 200x00000000-200x03ffffff] [ 0.000000] Primary instruction cache 32kB, VIPT, 2-way, linesize 16 bytes. [ 0.000000] Primary data cache 16kB, 2-way, VIPT, cache aliases, linesize 16 bytes [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16256 [ 0.000000] Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200 [ 0.000000] PID hash table entries: 256 (order: -2, 1024 bytes) [ 0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) [ 0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) [ 0.000000] Memory: 61336k/65536k available (2422k kernel code, 4200k reserved, 703k data, 200k init, 0k highmem) [ 0.000000] NR_IRQS:256 [ 0.000000] Calibrating delay loop... 299.26 BogoMIPS (lpj=598528) [ 0.036000] pid_max: default: 32768 minimum: 301 [ 0.040000] Mount-cache hash table entries: 512 [ 0.048000] NET: Registered protocol family 16 [ 0.064000] registering PCI controller with io_map_base unset [ 0.068000] registering PCI controller with io_map_base unset [ 0.088000] bio: create slab <bio-0> at 0 [ 0.096000] PCI host bridge to bus 0000:00 [ 0.100000] pci_bus 0000:00: root bus resource [mem 200x30000000-200x37ffffff] [ 0.104000] pci_bus 0000:00: root bus resource [io 200x8000000-200x8007fff] [ 0.108000] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff] [ 0.124000] pci 0000:00:01.0: BAR 0: assigned [mem 200x30000000-200x30003fff] [ 0.128000] PCI host bridge to bus 0000:01 [ 0.132000] pci_bus 0000:01: root bus resource [mem 200x38000000-200x3fffffff] [ 0.136000] pci_bus 0000:01: root bus resource [io 200x8008000-200x800ffff] [ 0.140000] pci_bus 0000:01: No busn resource found for root bus, will use [bus 01-ff] [ 0.144000] pci 0000:01:1e.0: bridge configuration invalid ([bus 00-00]), reconfiguring [ 0.148000] pci 0000:01:1e.0: BAR 10: assigned [mem 200x38000000-200x3fffffff] [ 0.152000] pci 0000:01:1e.0: BAR 7: assigned [io 200x8008000-200x80080ff] [ 0.156000] pci 0000:01:1e.0: BAR 8: assigned [io 200x8008400-200x80084ff] [ 0.160000] pci 0000:01:1e.0: CardBus bridge to [bus 02-05] [ 0.164000] pci 0000:01:1e.0: bridge window [io 200x8008000-200x80080ff] [ 0.168000] pci 0000:01:1e.0: bridge window [io 200x8008400-200x80084ff] [ 0.172000] pci 0000:01:1e.0: bridge window [mem 200x38000000-200x3fffffff] [ 0.176000] PCI: Enabling device 0000:01:1e.0 (0000 -> 0003) [ 0.180000] Switching to clocksource MIPS [ 0.192000] PCI: Enabling device 0000:00:01.0 (0000 -> 0002) [ 0.220000] ssb: Found chip with id 200x4322, rev 200x01 and package 200x09 [ 0.292000] ssb: Sonics Silicon Backplane found on PCI device 0000:00:01.0 [ 0.300000] NET: Registered protocol family 2 [ 0.304000] TCP established hash table entries: 512 (order: 0, 4096 bytes) [ 0.312000] TCP bind hash table entries: 512 (order: -1, 2048 bytes) [ 0.320000] TCP: Hash tables configured (established 512 bind 512) [ 0.324000] TCP: reno registered [ 0.328000] UDP hash table entries: 256 (order: 0, 4096 bytes) [ 0.336000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) [ 0.344000] NET: Registered protocol family 1 [ 0.352000] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.360000] jffs2: version 2.2 (NAND) (SUMMARY) (ZLIB) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.368000] msgmni has been set to 119 [ 0.372000] io scheduler noop registered [ 0.376000] io scheduler deadline registered (default) [ 0.384000] bcm63xx_uart.0: ttyS0 at MMIO 200xfffe0100 (irq = 10) is a bcm63xx_uart [ 0.392000] console [ttyS0] enabled, bootconsole disabled [ 0.392000] console [ttyS0] enabled, bootconsole disabled [ 0.408000] physmap platform flash device: 02000000 at 1e000000 [ 0.416000] physmap-flash.0: Found 1 x16 devices at 200x0 in 16-bit bank. Manufacturer ID 200x000001 Chip ID 200x002101 [ 0.424000] Amd/Fujitsu Extended Query Table at 200x0040 [ 0.432000] Amd/Fujitsu Extended Query version 1.3. [ 0.436000] number of CFI chips: 1 [ 0.440000] bcm63xxpart: CFE boot tag found with version 6 and board type HOMEHUB2A [ 0.448000] bcm63xxpart: Partition 0 is CFE offset 0 and length 20000 [ 0.452000] bcm63xxpart: Partition 1 is kernel offset 20100 and length 11ff00 [ 0.460000] bcm63xxpart: Partition 2 is rootfs offset 140000 and length ea0000 [ 0.468000] bcm63xxpart: Partition 3 is nvram offset fe0000 and length 20000 [ 0.476000] bcm63xxpart: Partition 4 is linux offset 20000 and length fc0000 [ 0.484000] bcm63xxpart: Spare partition is offset 4e0004 and length affffc [ 0.492000] 5 bcm63xxpart partitions found on MTD device physmap-flash.0 [ 0.496000] Creating 5 MTD partitions on "physmap-flash.0": [ 0.504000] 200x000000000000-200x000000020000 : "CFE" [ 0.512000] 200x000000020100-200x000000140000 : "kernel" [ 0.516000] mtd: partition "kernel" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only [ 0.532000] 200x000000140000-200x000000fe0000 : "rootfs" [ 0.544000] mtd: device 2 (rootfs) set to be root filesystem [ 0.548000] mtd: partition "rootfs_data" created automatically, ofs=200x4e0000, len=200xb00000 [ 0.556000] 200x0000004e0000-200x000000fe0000 : "rootfs_data" [ 0.564000] 200x000000fe0000-200x000001000000 : "nvram" [ 0.576000] 200x000000020000-200x000000fe0000 : "linux" [ 0.588000] bcm63xx-spi bcm63xx-spi: at 200xfffe0800 (irq 9, FIFOs size 542) [ 0.596000] spi_gpio spi_gpio.1: master is unqueued, this is deprecated [ 0.604000] 74x164 spi1.0: No device tree data available. [ 0.608000] 74x164: probe of spi1.0 failed with error -22 [ 0.624000] libphy: bcm63xx_enet MII bus: probed [ 0.632000] b53_common: found switch: BCM5325, rev 0 [ 0.636000] bcm63xx_enet bcm63xx_enet.1: attached PHY at address 0 [Broadcom B53 (1)] [ 0.648000] bcm63xx-wdt bcm63xx-wdt: started, timer margin: 30 sec [ 0.656000] platform leds-gpio.0: Driver leds-gpio requests probe deferral [ 0.664000] TCP: cubic registered [ 0.668000] NET: Registered protocol family 17 [ 0.672000] Bridge firewalling registered [ 0.676000] 8021q: 802.1Q VLAN Support v1.8 [ 0.684000] platform leds-gpio.0: Driver leds-gpio requests probe deferral [ 0.696000] VFS: Mounted root (squashfs filesystem) readonly on device 31:2. [ 0.708000] Freeing unused kernel memory: 200K (8031e000 - 80350000) procd: Console is alive procd: - watchdog - [ 2.260000] usbcore: registered new interface driver usbfs [ 2.268000] usbcore: registered new interface driver hub [ 2.272000] usbcore: registered new device driver usb [ 2.288000] Button Hotplug driver version 0.4.1 [ 2.384000] SCSI subsystem initialized [ 2.400000] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 2.412000] ehci-platform: EHCI generic platform driver [ 2.416000] ehci-platform ehci-platform: EHCI Host Controller [ 2.420000] ehci-platform ehci-platform: new USB bus registered, assigned bus number 1 [ 2.432000] ehci-platform ehci-platform: irq 18, io mem 200xfffe1300 [ 2.448000] ehci-platform ehci-platform: USB 2.0 started, EHCI 1.00, overcurrent ignored [ 2.456000] hub 1-0:1.0: USB hub found [ 2.460000] hub 1-0:1.0: 1 port detected [ 2.464000] platform leds-gpio.0: Driver leds-gpio requests probe deferral [ 2.480000] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver [ 2.484000] ohci-platform ohci-platform: Generic Platform OHCI Controller [ 2.492000] ohci-platform ohci-platform: new USB bus registered, assigned bus number 2 [ 2.500000] ohci-platform ohci-platform: irq 13, io mem 200xfffe1400 [ 2.568000] hub 2-0:1.0: USB hub found [ 2.572000] hub 2-0:1.0: 1 port detected [ 2.576000] platform leds-gpio.0: Driver leds-gpio requests probe deferral [ 2.600000] usbcore: registered new interface driver usb-storage [ 2.608000] input: gpio-keys-polled as /devices/platform/gpio-keys-polled.0/input/input0 [ 2.616000] platform leds-gpio.0: Driver leds-gpio requests probe deferral procd: - preinit - Press the [f] key and hit [enter] to enter failsafe mode Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level [ 4.680000] eth0: link UP - 100/full - flow control off [ 6.588000] jffs2: notice: (245) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 19 of xref (0 dead, 5 orphan) found. [ 6.604000] block: attempting to load /tmp/jffs_cfg/upper/etc/config/fstab [ 6.612000] block: unable to load configuration (fstab: Entry not found) [ 6.620000] block: attempting to load /tmp/jffs_cfg/etc/config/fstab [ 6.628000] block: extroot: not configured jffs2 is ready No jffs2 marker was found [ 6.684000] jffs2: notice: (242) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 19 of xref (0 dead, 5 orphan) found. [ 6.864000] block: attempting to load /tmp/jffs_cfg/upper/etc/config/fstab [ 6.872000] block: unable to load configuration (fstab: Entry not found) [ 6.876000] block: attempting to load /tmp/jffs_cfg/etc/config/fstab [ 6.888000] block: extroot: not configured switching to overlay procd: - early - procd: - watchdog - procd: - ubus - procd: - init - [ 7.700000] eth0: link DOWN Please press Enter to activate this console. [ 10.024000] NET: Registered protocol family 10 [ 10.112000] nf_conntrack version 0.5.0 (961 buckets, 3844 max) [ 10.140000] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 10.208000] u32 classifier [ 10.208000] input device check on [ 10.212000] Actions configured [ 10.248000] Mirror/redirect action on [ 10.288000] Loading modules backported from Linux version master-2014-05-22-0-gf2032ea [ 10.296000] Backport generated by backports.git backports-20140320-37-g5c33da0 [ 10.328000] ip_tables: (C) 2000-2006 Netfilter Core Team [ 10.532000] xt_time: kernel timezone is -0000 [ 10.612000] cfg80211: Calling CRDA to update world regulatory domain [ 10.660000] cfg80211: World regulatory domain updated: [ 10.664000] cfg80211: DFS Master region: unset [ 10.668000] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time) [ 10.680000] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A) [ 10.688000] cfg80211: (2457000 KHz - 2482000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A) [ 10.696000] cfg80211: (2474000 KHz - 2494000 KHz @ 20000 KHz), (N/A, 2000 mBm), (N/A) [ 10.704000] cfg80211: (5170000 KHz - 5250000 KHz @ 160000 KHz), (N/A, 2000 mBm), (N/A) [ 10.712000] cfg80211: (5250000 KHz - 5330000 KHz @ 160000 KHz), (N/A, 2000 mBm), (0 s) [ 10.720000] cfg80211: (5490000 KHz - 5730000 KHz @ 160000 KHz), (N/A, 2000 mBm), (0 s) [ 10.728000] cfg80211: (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A) [ 10.736000] cfg80211: (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm), (N/A) [ 10.872000] PPP generic driver version 2.4.2 [ 10.880000] NET: Registered protocol family 24 [ 10.972000] b43-phy0: Broadcom 4322 WLAN found (core revision 16) [ 11.012000] b43-phy0: Found PHY: Analog 8, Type 4 (N), Revision 4 [ 11.016000] b43-phy0: Found Radio: Manuf 200x17F, ID 200x2056, Revision 3, Version 0 [ 11.036000] platform leds-gpio.0: Driver leds-gpio requests probe deferral [ 11.044000] Broadcom 43xx driver loaded [ Features: PNL ] [ 14.532000] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready [ 15.852000] eth0: link UP - 100/full - flow control off [ 15.860000] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 23.808000] device eth0.1 entered promiscuous mode [ 23.812000] device eth0 entered promiscuous mode [ 23.828000] br-lan: port 1(eth0.1) entered forwarding state [ 23.832000] br-lan: port 1(eth0.1) entered forwarding state [ 24.912000] eth0: link UP - 100/full - flow control off [ 25.836000] br-lan: port 1(eth0.1) entered forwarding state [ 27.100000] b43-phy0: Loading firmware version 666.2 (2011-02-23 01:15:07) [ 27.236000] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 27.248000] device wlan0 entered promiscuous mode [ 27.296000] br-lan: port 2(wlan0) entered forwarding state [ 27.300000] br-lan: port 2(wlan0) entered forwarding state [ 27.308000] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.304000] br-lan: port 2(wlan0) entered forwarding state procd: - init complete - BusyBox v1.22.1 (2015-03-11 21:32:56 CET) built-in shell (ash) Enter 'help' for a list of built-in commands. _______ ________ __ | |.-----.-----.-----.| | | |.----.| |_ | - || _ | -__| || | | || _|| _| |_______|| __|_____|__|__||________||__| |____| |__| W I R E L E S S F R E E D O M ----------------------------------------------------- BARRIER BREAKER (Barrier Breaker, r44645) ----------------------------------------------------- * 1/2 oz Galliano Pour all ingredients into * 4 oz cold Coffee \200xe0h coffee mug filled * 1 1/2 oz Dark Rum with crushed ice. Stir. * 2 tsp. Creme de Cacao ----------------------------------------------------- root@OpenWrt:/# cat /proc/cpuinfo system type : bcm63xx/HOMEHUB2A (200x6358/200xA1) machine : Unknown processor : 0 cpu model : Broadcom BMIPS4350 V1.0 BogoMIPS : 299.26 wait instruction : yes microsecond timers : yes tlb_entries : 32 extra interrupt vector : yes hardware watchpoint : no isa : mips1 mips2 mips32r1 ASEs implemented : shadow register sets : 1 kscratch registers : 0 core : 0 VCED exceptions : not available VCEI exceptions : not available root@OpenWrt:/#