Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Next revisionBoth sides next revision | ||
| inbox:toh:arcadyan:astoria:prv3399b-e-lt [2021/09/27 10:27] – [Arcadyan / Astoria prv3399B-E-LT] mandrake-lee | inbox:toh:arcadyan:astoria:prv3399b-e-lt [2021/10/17 08:25] – [Info] mandrake-lee | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | ====== Arcadyan / Astoria prv3399B-E-LT (aka Livebox | + | ====== Arcadyan / Astoria prv3399B-E-LT (aka Livebox |
| ~~NOTOC~~ | ~~NOTOC~~ | ||
| Line 42: | Line 42: | ||
| ===== Hardware highlights ===== | ===== Hardware highlights ===== | ||
| ^ CPU ^ Ram ^ Flash ^ Network | ^ CPU ^ Ram ^ Flash ^ Network | ||
| - | | EXAMPLE RT3052 | + | | BCM68380 |
| Line 110: | Line 110: | ||
| ===== Hardware ===== | ===== Hardware ===== | ||
| ==== Info ==== | ==== Info ==== | ||
| - | ^ Architecture | + | ^ Architecture |
| - | ^ Vendor | + | ^ Vendor |
| - | ^ Bootloader | + | ^ Bootloader |
| - | ^ System-On-Chip | + | ^ System-On-Chip |
| - | ^ CPU/ | + | ^ CPU/ |
| - | ^ Flash-Chip | + | ^ Flash-Chip |
| - | ^ Flash size | + | ^ Flash size |
| - | ^ RAM | EXAMPLE 64 MiB | | + | ^ RAM | 256 MiB | |
| - | ^ Wireless | + | ^ Wireless |
| - | ^ Ethernet | + | ^ Ethernet |
| - | ^ Switch | + | ^ Switch |
| - | ^ USB | EXAMPLE | + | ^ USB | 1x 2.0 | |
| - | ^ Serial | + | ^ Serial |
| - | ^ JTAG | + | ^ JTAG |
| Line 141: | Line 141: | ||
| /* e.g. {{: | /* e.g. {{: | ||
| /* Thanks, your wiki administration - Oct. 2015 */ | /* Thanks, your wiki administration - Oct. 2015 */ | ||
| + | {{ : | ||
| - | **Insert photo of front of the casing** | + | {{ : |
| - | **Insert photo of back of the casing** | + | {{ : |
| - | **Insert photo of backside label** | + | {{ : |
| + | |||
| + | {{ : | ||
| - | **Insert photo of PCB** | ||
| ==== Opening the case ==== | ==== Opening the case ==== | ||
| - | <WRAP BOX> | + | You will need a phillips screwdriver. |
| - | FIXME //Describe what needs to be done to open the device, | + | - Remove 4x screws at the bottom of the device |
| - | </ | + | - Detach from rear to front, the upper case from the bottom case |
| ==== Serial ==== | ==== Serial ==== | ||
| -> [[docs: | -> [[docs: | ||
| - | How to connect to the Serial Port of this specific device:\\ | + | **WARNING** This device has 2 sets of UART, one dedicated to the early boot i.e. bootloader, and the second for the operating system (OS) itself e.g. linux. |
| - | **Insert photo of PCB with markings for serial port** | + | |
| - | <WRAP BOX> | + | The Tx pin for the OS, needed in order to reach Busybox, hasn't been discovered. It might be hard cancelled via resistor or soft cancelled via boot parameter. |
| - | FIXME //Replace EXAMPLE by real values.// | + | |
| - | </ | + | |
| - | ^ Serial connection parameters\\ for Arcadyan / Astoria prv3399B-E-LT | + | See photo below for the pinout of the Serial Port of this specific device:\\ |
| + | {{ : | ||
| + | |||
| + | You will need some soldering skills though to really have access to it. | ||
| + | |||
| + | ^ Serial connection parameters\\ for Arcadyan / Astoria prv3399B-E-LT | 115200, 8N1 | | ||
| ==== JTAG ==== | ==== JTAG ==== | ||
| -> [[docs: | -> [[docs: | ||
| - | How to connect | + | **This is not confirmed** but there' |
| - | **Insert photo of PCB with markings | + | {{ : |
| + | |||
| + | |||
| + | ==== HACKS ==== | ||
| + | === Soft hacks === | ||
| + | |||
| + | == Access to web CFE == | ||
| + | First, you will need to gain access to the bootloader CFE and stop the countdown. | ||
| + | |||
| + | Once there, use your browser to reach: | ||
| + | < | ||
| + | |||
| + | A fancy menu will pop-up as below: | ||
| + | {{ : | ||
| + | |||
| + | |||
| + | == Enable CFE countdown == | ||
| + | - First you need to have access to the CFE. You might need this [[#Access to CFE menu|hack]] | ||
| + | - Now enter command " | ||
| + | - Select "Boot Image" 2 | ||
| + | - Leave the rest of parameters untouched by pressing " | ||
| + | |||
| + | |||
| + | === Hard hacks === | ||
| + | During boot, specific | ||
| + | |||
| + | | {{: | ||
| + | |||
| + | == Access to CFE menu == | ||
| + | This hack will need some training and skill. Don't give up! | ||
| + | Basically, we will let the system jump to CFE bootloader and corrupt the loading of any further image from NAND flash. | ||
| + | |||
| + | - Switch on the device | ||
| + | - Let system jump to the " | ||
| + | - Now shortcircuit pins 8&9. See diagram at the bottom. Use the tip of a needle, thin screwdriver, | ||
| + | - After success, error messages will pop up and you will have access to the CFE command line as follows | ||
| + | |||
| + | <WRAP bootlog> | ||
| + | < | ||
| + | ---- | ||
| + | HELO | ||
| + | ZBSS | ||
| + | RAMI | ||
| + | |||
| + | Copyright (C) 2019 Arcadyan Technology. | ||
| + | |||
| + | NANDFLASH: | ||
| + | DEVICE ID: 0x98f18015f2, | ||
| + | block: 128KB(1024), | ||
| + | nandflash_bbt_scan_block: | ||
| + | |||
| + | NVRAM(0) MAGIC checking passed! | ||
| + | NVRAM(0) CRC checking passed! | ||
| + | total 10 of NVRAM(0) entries loaded | ||
| + | |||
| + | NVRAM(1) MAGIC checking passed! | ||
| + | NVRAM(1) CRC checking passed! | ||
| + | total 10 of NVRAM(1) entries loaded | ||
| + | |||
| + | BOOTLOADER version 1.2.4 for PRV3397B_E_LT | ||
| + | Build Date: Tue Apr 25 13:45:35 2017 (tinghung_chen@buildbed) | ||
| + | |||
| + | Chip ID: BCM68380B0 MIPS: 600MHz, DDR: 533MHz, Bus: 240MHz, RDP: 800MHz | ||
| + | Memory Test Passed! | ||
| + | Total Memory: 268435456 bytes (256MB) | ||
| + | *** Press any key to stop auto run (0 seconds) *** | ||
| + | Auto run second count down: 0 | ||
| + | Loading secondary image ... | ||
| + | ERROR: data is invalid and not correctable at offset 0x2b00000 | ||
| + | Could not read from flash: CFE error -4 | ||
| + | enable IH Wan-Wan forwarding... | ||
| + | data_path_go Done!! | ||
| + | Set EMAC4 as RGMII | ||
| + | Creating CPU ring for queue number 0 with 32 packets descriptor=0x8b58cb60 | ||
| + | Done initializing Ring 0 Base=0xad0141e0K End=0xad0143e0K calculated entries= 32 RDD Base=0x0d0141e0K descriptor=0x8b58cb60 | ||
| + | Open PHY 1 on MAC 0 : link state = Down | ||
| + | Open PHY 2 on MAC 1 : link state = Down | ||
| + | Open PHY 3 on MAC 2 : link state = Down | ||
| + | Open PHY 4 on MAC 3 : link state = Down | ||
| + | Open PHY 0 on MAC 4 : link state = Down | ||
| + | web info: Waiting for connection on socket 0. | ||
| + | PRV3397B_E_LT> | ||
| + | </ | ||
| + | </ | ||
| + | \\ | ||
| + | **Congratulations!** Now you can consider enabling the bootloader countdown and therefore have CFE always reachable. See [[#Enable CFE countdown|this]] | ||
| + | |||
| + | {{ : | ||
| + | |||
| + | ==== CFE menu ==== | ||
| + | Using the CFE hack above, now you can enter the menu of the bootloader: | ||
| + | |||
| + | This is a piece of obscured software; seems an Arcadyan customized version of the CFE with little options. | ||
| + | |||
| + | < | ||
| + | RV3397B_E_LT> | ||
| + | Available commands: | ||
| + | |||
| + | sc Update certificate | ||
| + | show devices | ||
| + | erasepart | ||
| + | m | ||
| + | c | ||
| + | uc Update certificate file | ||
| + | u | ||
| + | br Boot program from 1st/2nd cferam2 | ||
| + | r Reset the board | ||
| + | help Obtain help for CFE commands | ||
| + | |||
| + | </ | ||
| + | |||
| + | ===== Flash partition ===== | ||
| + | ==== OEM partition ==== | ||
| + | As reported by bootloader: | ||
| + | < | ||
| + | PRV3397B_E_LT> | ||
| + | Device Name Description | ||
| + | ------------------- | ||
| + | uart0 BCM63xx DUART channel 0 | ||
| + | nandflash0.bootldr | ||
| + | nandflash0.ca | ||
| + | nandflash0.manufac | ||
| + | nandflash0.nvram | ||
| + | nandflash0.pri_boot | ||
| + | nandflash0.pri_linu | ||
| + | nandflash0.pri_root | ||
| + | nandflash0.sec_boot | ||
| + | nandflash0.sec_linu | ||
| + | nandflash0.sec_root | ||
| + | nandflash0.pri_cfg | ||
| + | nandflash0.sec_cfg | ||
| + | nandflash0.softrip | ||
| + | nandflash0.softuser | ||
| + | nandflash0.ubifs | ||
| + | nandflash0.oops_dat | ||
| + | eth0 | ||
| + | | ||
| + | Yø | ||
| + | *** command status = 0 | ||
| + | PRV3397B_E_LT> | ||
| + | </ | ||
| ===== Bootlogs ===== | ===== Bootlogs ===== | ||
| - | ==== OEM bootlog ==== | + | ==== OEM Early bootlog ==== |
| + | This info is taken from the early UART. | ||
| <WRAP bootlog> | <WRAP bootlog> | ||
| - | < | + | < |
| + | ---- | ||
| + | BTL1 | ||
| + | HELO | ||
| + | CPUI | ||
| + | L1CI | ||
| + | CPUI | ||
| + | L1CI | ||
| + | ZBSS | ||
| + | CODE | ||
| + | DATA | ||
| + | L12F | ||
| + | MAIN | ||
| + | OTP? | ||
| + | OTPP | ||
| + | ROTB | ||
| + | SCBT | ||
| + | NAND | ||
| + | IMG? | ||
| + | IMGL | ||
| + | HDR? | ||
| + | HDRP | ||
| + | MCV? | ||
| + | KEY? | ||
| + | KEYA | ||
| + | MID? | ||
| + | MIDP | ||
| + | MCVA | ||
| + | SBI? | ||
| + | SBIA | ||
| + | PASS | ||
| + | ---- | ||
| + | HELO | ||
| + | CPUI | ||
| + | L1CI | ||
| + | PLLI | ||
| + | PMCB | ||
| + | DRAM | ||
| + | ---- | ||
| + | PHYS | ||
| + | ZQDN | ||
| + | PHYE | ||
| + | DINT | ||
| + | TST1 | ||
| + | TST2 | ||
| + | PASS | ||
| + | ---- | ||
| + | ZBSS | ||
| + | L12F | ||
| + | ROMI | ||
| + | PSRA | ||
| + | PSRB | ||
| + | PSRC | ||
| + | PSRD | ||
| + | PSRE | ||
| + | ---- | ||
| + | HELO | ||
| + | ZBSS | ||
| + | RAMI | ||
| + | |||
| + | Copyright (C) 2017 Arcadyan Technology. | ||
| + | |||
| + | NANDFLASH: | ||
| + | DEVICE ID: 0x98f18015f2, | ||
| + | block: 128KB(1024), | ||
| + | nandflash_bbt_scan_block: | ||
| + | |||
| + | NVRAM(0) MAGIC checking passed! | ||
| + | NVRAM(0) CRC checking passed! | ||
| + | total 10 of NVRAM(0) entries loaded | ||
| + | |||
| + | NVRAM(1) MAGIC checking passed! | ||
| + | NVRAM(1) CRC checking passed! | ||
| + | total 10 of NVRAM(1) entries loaded | ||
| + | |||
| + | BOOTLOADER version 1.2.4 for PRV3397B_E_LT | ||
| + | Build Date: Tue Apr 25 13:45:35 2017 (paul_shih@buildbox1) | ||
| + | |||
| + | Chip ID: BCM68380B0 MIPS: 600MHz, DDR: 533MHz, Bus: 240MHz, RDP: 800MHz | ||
| + | Memory Test Passed! | ||
| + | Total Memory: 268435456 bytes (256MB) | ||
| + | Board IP address | ||
| + | Board IP netmask | ||
| + | Gateway IP address | ||
| + | Server IP address | ||
| + | Boot image (1 or 2) 2 | ||
| + | Temp boot (0, 1 or 2) 0 | ||
| + | Boot countdown delay (0 to 3) 0 | ||
| + | Serial number | ||
| + | MAC address number | ||
| + | MAC address base 4C-1B-86-59-4E-56 | ||
| + | Wireless SSID | ||
| + | Wireless key 2WU2pKex | ||
| + | Wireless WPS pin 53478306 | ||
| + | Admin password | ||
| + | Hardware version | ||
| + | Manufacturing mode (0 or 1) 0 | ||
| + | *** Press any key to stop auto run (0 seconds) *** | ||
| + | Auto run second count down: 0 | ||
| + | Loading secondary bootram ... | ||
| + | Decryption OK! | ||
| + | Decompression OK! | ||
| + | Entry at 0x8b500000 | ||
| + | Starting program at 0x8b500000 | ||
| + | ---- | ||
| + | HELO | ||
| + | ZBSS | ||
| + | RAMI | ||
| + | |||
| + | Copyright (C) 2019 Arcadyan Technology. | ||
| + | |||
| + | NANDFLASH: | ||
| + | DEVICE ID: 0x98f18015f2, | ||
| + | block: 128KB(1024), | ||
| + | nandflash_bbt_scan_block: | ||
| + | |||
| + | NVRAM(0) MAGIC checking passed! | ||
| + | NVRAM(0) CRC checking passed! | ||
| + | total 10 of NVRAM(0) entries loaded | ||
| + | |||
| + | NVRAM(1) MAGIC checking passed! | ||
| + | NVRAM(1) CRC checking passed! | ||
| + | total 10 of NVRAM(1) entries loaded | ||
| + | |||
| + | BOOTLOADER version 1.2.4 for PRV3397B_E_LT | ||
| + | Build Date: Tue Apr 25 13:45:35 2017 (tinghung_chen@buildbed) | ||
| + | |||
| + | Chip ID: BCM68380B0 MIPS: 600MHz, DDR: 533MHz, Bus: 240MHz, RDP: 800MHz | ||
| + | Memory Test Passed! | ||
| + | Total Memory: 268435456 bytes (256MB) | ||
| + | *** Press any key to stop auto run (0 seconds) *** | ||
| + | Auto run second count down: 0 | ||
| + | Loading secondary image ... | ||
| + | Finished loading 5242880 bytes | ||
| + | DATE : Fri Oct 25 18:13:05 2019 | ||
| + | VER : v1.03.05.217 | ||
| + | CRC : 3C183963 | ||
| + | CRC OK! | ||
| + | Signature OK! | ||
| + | Decryption OK! | ||
| + | Decompression OK! | ||
| + | Code Address: 0x80010000, Entry Address: 0x80451a20 | ||
| + | Starting program at 0x80451a20 | ||
| + | |||
| + | |||
| + | </ | ||
| </ | </ | ||
| + | |||
| + | ==== OEM OS bootlog ==== | ||
| + | This info is taken from the OS UART. | ||
| + | <WRAP bootlog> | ||
| + | < | ||
| + | Quantenna Mini U-Boot | ||
| + | Version: v37.4.0.28 Built: Oct 26 2015 at 19:23:50 | ||
| + | br | ||
| + | 1G-FD | ||
| + | Using br device | ||
| + | TFTP from server 1.1.1.1; our IP address is 1.1.1.2 | ||
| + | Filename ' | ||
| + | Load address: 0x88000000 | ||
| + | Loading: T ############## | ||
| + | done | ||
| + | Bytes transferred = 69872 (0x110f0) | ||
| + | Boot reached stage 13 | ||
| + | Boot reached stage 12 | ||
| + | Valid CRC found in flash restoring env... | ||
| + | Boot reached stage 11 | ||
| + | hw_config_id 65535: ' | ||
| + | Cold boot | ||
| + | Reset status: 0x00000001 | ||
| + | |||
| + | Info: data uncached: addr=0xc0000000 size=1024MB | ||
| + | Info: text at 0x88040000, stack at 0x88013ffc(8192), | ||
| + | Info: i-cache is enabled | ||
| + | Info: d-cache is enabled | ||
| + | Info: CPU freq is 500000000, dev freq is 125000000 | ||
| + | |||
| + | Info: Quantenna U-Boot version: | ||
| + | Info: build date 'May 10 2019', time ' | ||
| + | |||
| + | SPI flash info: | ||
| + | name : w25x05 | ||
| + | jedec_id | ||
| + | sector size : 4096 | ||
| + | number of sector : 16 | ||
| + | frequency | ||
| + | flags : 0x2 | ||
| + | lock : | ||
| + | DDR_INIT: type = 16, speed = 2, size = 134217728, rev = 0x43, param = 0x0 | ||
| + | DDR_INIT: replacing invalid param = 0x0 with default 0xe7b | ||
| + | 500MHz | ||
| + | BDA at 0x80002000 | ||
| + | In: serial | ||
| + | Out: | ||
| + | Err: | ||
| + | Boot reached stage 64 | ||
| + | Boot reached stage 65 | ||
| + | br | ||
| + | Hit any key to stop autoboot: | ||
| + | Boot reached stage 80 | ||
| + | 1G-FD | ||
| + | Using br device | ||
| + | TFTP from server 1.1.1.1; our IP address is 1.1.1.2 | ||
| + | Filename ' | ||
| + | Load address: 0x83000000 | ||
| + | Loading: ################################################################# | ||
| + | ################################################################# | ||
| + | ################################################################# | ||
| + | ################################################################# | ||
| + | ################################################################# | ||
| + | ################################################################# | ||
| + | ################################################################# | ||
| + | ################################################################# | ||
| + | ################################################################# | ||
| + | ################################################################# | ||
| + | ################################################################# | ||
| + | ################################################################# | ||
| + | ################################################################# | ||
| + | ################################################################# | ||
| + | ################################################################# | ||
| + | ################################################################# | ||
| + | ################################################################# | ||
| + | ################################## | ||
| + | done | ||
| + | Bytes transferred = 5831576 (0x58fb98) | ||
| + | Boot reached stage 81 | ||
| + | Boot reached stage 84 | ||
| + | Boot reached stage 1 | ||
| + | ## Booting kernel from Legacy Image at 83000000 ... | ||
| + | Boot reached stage 2 | ||
| + | Boot reached stage 3 | ||
| + | Image Name: | ||
| + | Image Type: arc Linux Kernel Image (lzma compressed) | ||
| + | Data Size: 5823384 Bytes = 5.6 MB | ||
| + | Load Address: 8493a000 | ||
| + | Entry Point: | ||
| + | Qtn flags: | ||
| + | | ||
| + | Boot reached stage 4 | ||
| + | Boot reached stage 5 | ||
| + | Boot reached stage 6 | ||
| + | Boot reached stage 14 | ||
| + | | ||
| + | Boot reached stage 7 | ||
| + | Boot reached stage 8 | ||
| + | Command line TAG setup | ||
| + | Params-> | ||
| + | p console=ttyS0, | ||
| + | ## Unset TAG qtn_flags 1 | ||
| + | ## Transferring control to Linux (at address 8493a000) ATAG parameters 88067d94 - 88067dec... | ||
| + | [ 0.000000] Linux version 2.6.35.12 (tinghung_chen@buildbed) (gcc version 4.2.1 (ARC_2.3)) #2 Tue May 28 16:51:36 CST 2019 | ||
| + | [ 0.000000] Parsing ATAG parameters from bootloader | ||
| + | [ 0.000000] ATAG_CORE: successful parsing | ||
| + | [ 0.000000] ATAG_CMDLINE: | ||
| + | [ 0.000000] Board id: 65535 | ||
| + | [ 0.000000] ATAG_HW_CONFIG_ID: | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] Processor Family: ARC 700 [0x33] | ||
| + | [ 0.000000] CPU speed : 500.00 Mhz | ||
| + | [ 0.000000] Timers: | ||
| + | [ 0.000000] Interrupt Vect Base: | ||
| + | [ 0.000000] Peripheral Base: NOT present; assuming 0xCOFC0000 | ||
| + | [ 0.000000] Data UNCACHED Base (I/O): start 0xc0 Sz, 1024 MB | ||
| + | [ 0.000000] ARC700 MMU Ver [2] | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] TLB Refill "will NOT" Flush uTLBs | ||
| + | [ 0.000000] Detected I-cache : | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] Detected D-cache : | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] Extensions: | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] Floating Point Extension: N/A | ||
| + | [ 0.000000] On node 0 totalpages: 16383 | ||
| + | [ 0.000000] free_area_init_node: | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16311 | ||
| + | [ 0.000000] Kernel command line: console=ttyS0, | ||
| + | [ 0.000000] bootconsole [ruby_early0] enabled | ||
| + | [ 0.000000] PID hash table entries: 512 (order: -2, 2048 bytes) | ||
| + | [ 0.000000] Dentry cache hash table entries: 16384 (order: 3, 65536 bytes) | ||
| + | [ 0.000000] Inode-cache hash table entries: 8192 (order: 2, 32768 bytes) | ||
| + | [ 0.000000] Memory: 36088KB available (2165K code,1202K data, 15872K init) | ||
| + | [ 0.000000] Hierarchical RCU implementation. | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] | ||
| + | [ 0.000000] clockevent mode switch to [1] | ||
| + | [ 0.000000] clockevent mode switch to [2] | ||
| + | [ 0.000000] Calibrating delay loop... 249.03 BogoMIPS (lpj=622592) | ||
| + | [ 0.115000] pid_max: default: 4096 minimum: 301 | ||
| + | [ 0.120000] Mount-cache hash table entries: 1024 | ||
| + | [ 0.125000] Starting run_ksoftirqd, | ||
| + | [ 0.130000] NET: Registered protocol family 16 | ||
| + | [ 0.135000] Topaz heap 1 in SRAM 88016360< | ||
| + | [ 0.140000] Topaz heap 2 in SRAM 88011000< | ||
| + | [ 0.150000] bio: create slab < | ||
| + | [ 0.160000] watch64: 2003/08/22 Josef ' | ||
| + | [ 0.165000] watch64: Enabling Watch64 extensions...done. | ||
| + | [ 0.170000] Switching to clocksource ARC Timer1 | ||
| + | [ 0.175000] NET: Registered protocol family 2 | ||
| + | [ 0.180000] IP route cache hash table entries: 2048 (order: 0, 8192 bytes) | ||
| + | [ 0.185000] TCP established hash table entries: 4096 (order: 2, 32768 bytes) | ||
| + | [ 0.195000] TCP bind hash table entries: 4096 (order: 1, 16384 bytes) | ||
| + | [ 0.200000] TCP: Hash tables configured (established 4096 bind 4096) | ||
| + | [ 0.205000] TCP reno registered | ||
| + | [ 0.210000] NET: Registered protocol family 1 | ||
| + | [ 0.815000] JFFS2 version 2.2. (NAND) c 2001-2006 Red Hat, Inc. | ||
| + | [ 0.820000] msgmni has been set to 70 | ||
| + | [ 0.825000] io scheduler noop registered (default) | ||
| + | [ 1.250000] Serial: 8250/16550 driver, 2 ports, IRQ sharing enabled | ||
| + | [ 1.255000] serial8250.0: | ||
| + | [ 1.260000] console [ttyS0] enabled, bootconsole disabled | ||
| + | [ 1.260000] console [ttyS0] enabled, bootconsole disabled | ||
| + | [ 1.265000] brd: module loaded | ||
| + | [ 1.275000] loop: module loaded | ||
| + | [ 1.280000] spi_flash: Force not to support Protect Mode | ||
| + | [ 1.285000] Creating 3 MTD partitions on " | ||
| + | [ 1.290000] 0x000000000000-0x000000005000 : " | ||
| + | [ 1.300000] 0x000000005000-0x00000000b000 : " | ||
| + | [ 1.310000] 0x00000000b000-0x000000010000 : " | ||
| + | [ 1.315000] spi_flash: SPI flash driver initialized successfully! | ||
| + | [ 1.320000] ruby_health loading | ||
| + | [ 1.325000] HBM pool: emac rx 0x0 to 0x8000, wmac rx 0x8000 to 0xa000 | ||
| + | [ 1.720000] HBM meta: emac rx 0x63c040 to 0x6bc040, wmac rx 0x6bc080 to 0x6dc080 | ||
| + | [ 1.725000] topaz_hbm_init_pool_list pool 0 pool_list 0x88000000 bus_range 0x16ec400 to 0x26ec400 sz 2048 count 8192 | ||
| + | [ 1.725000] topaz_hbm_init_pool_list pool 1 pool_list 0x88008000 bus_range 0x26fc400 to 0x48fc400 sz 17408 count 2048 | ||
| + | [ 1.725000] topaz_hbm_init_pool_list pool 3 pool_list 0x8800a000 bus_range 0x0 to 0x0 sz 0 count 4096 | ||
| + | [ 1.730000] topaz_busmon_init success | ||
| + | [ 1.735000] topaz_temp_sens_init success | ||
| + | [ 1.740000] u32 classifier | ||
| + | [ 1.740000] | ||
| + | [ 1.745000] | ||
| + | [ 1.750000] Netfilter messages via NETLINK v0.30. | ||
| + | [ 1.755000] nf_conntrack version 0.5.0 (563 buckets, 2252 max) | ||
| + | [ 1.760000] ip_tables: (C) 2000-2006 Netfilter Core Team | ||
| + | [ 1.765000] TCP cubic registered | ||
| + | [ 1.770000] NET: Registered protocol family 10 | ||
| + | [ 1.775000] NET: Registered protocol family 17 | ||
| + | [ 1.780000] 802.1Q VLAN Support v1.8 Ben Greear < | ||
| + | [ 1.785000] All bugs added by David S. Miller < | ||
| + | [ 1.795000] Freeing unused kernel memory: 15872k freed [8493a000] TO [858ba000] | ||
| + | [ 1.800000] Common mmap addr-space starts 2c0f0000 | ||
| + | init started: BusyBox v1.10.3 (2019-05-28 16:43:09 CST) | ||
| + | starting pid 44, tty '': | ||
| + | [ 2.180000] load_module: | ||
| + | Starting portmap: done | ||
| + | Initializing random number generator... done. | ||
| + | / | ||
| + | restore_wireless_conf | ||
| + | restore_wireless_conf: | ||
| + | restore_wireless_conf: | ||
| + | restore_wireless_conf: | ||
| + | restore_wireless_conf: | ||
| + | restore_wireless_conf: | ||
| + | Starting network... | ||
| + | [ 3.500000] load_module: | ||
| + | [ 3.505000] rtl8367b: module license ' | ||
| + | [ 3.510000] Disabling lock debugging due to kernel taint | ||
| + | [ 3.565000] load_module: | ||
| + | [ 3.685000] load_module: | ||
| + | [ 3.790000] load_module: | ||
| + | [ 3.840000] tqe_descs_alloc: | ||
| + | [ 3.920000] load_module: | ||
| + | [ 3.955000] load_module: | ||
| + | [ 4.010000] load_module: | ||
| + | [ 4.045000] load_module: | ||
| + | [ 4.110000] emac wbsp: 0 | ||
| + | [ 4.115000] enable A2 (single) | ||
| + | [ 4.175000] Random stuff 2D | ||
| + | emac0 is eth1_0, emac1 is unused | ||
| + | Stateless mode. Using temporary ip address: | ||
| + | Using IP address 1.1.1.2 | ||
| + | Netmask is not set | ||
| + | [ 4.445000] emac_lib eth1_0: force link (1000/Full) | ||
| + | [ 4.565000] device eth1_0 entered promiscuous mode | ||
| + | [ 4.570000] br0: port 1(eth1_0) entering forwarding state | ||
| + | [ 4.575000] br0: port 1(eth1_0) entering forwarding state | ||
| + | [ 4.605000] FWT: [00: | ||
| + | /sbin/ifup -a | ||
| + | ifconfig: SIOCGIFFLAGS: | ||
| + | Version of / | ||
| + | Version of / | ||
| + | Selected database version: Regulatory db version: v37.4.0.171 | ||
| + | Using / | ||
| + | Starting qevt_server | ||
| + | Starting inetd ... | ||
| + | / | ||
| + | [ 5.880000] load_module: | ||
| + | Starting wireless... | ||
| + | restore_default_config -nr | ||
| + | restore_wireless_conf ap | ||
| + | restore_wireless_conf: | ||
| + | restore_wireless_conf: | ||
| + | restore_wireless_conf: | ||
| + | restore_wireless_conf: | ||
| + | restore_wireless_conf: | ||
| + | restore_default_config: | ||
| + | restore_default_config: | ||
| + | restore_default_config: | ||
| + | complete | ||
| + | / | ||
| + | / | ||
| + | ' | ||
| + | MAUI service started | ||
| + | / | ||
| + | / | ||
| + | Starting httpd | ||
| + | cp: cannot stat '/ | ||
| + | qharvestd[notice]: | ||
| + | starting pid 691, tty '/ | ||
| + | |||
| + | |||
| + | BusyBox v1.10.3 (2019-05-28 16:43:09 CST) built-in shell (ash) | ||
| + | Enter ' | ||
| + | |||
| + | quantenna # qharvestd[error]: | ||
| + | |||
| + | / | ||
| + | cat: can't open '/ | ||
| + | qharvestd[error]: | ||
| + | |||
| + | qharvestd[error]: | ||
| + | qharvestd[notice]: | ||
| + | Using IP address 1.1.1.2 | ||
| + | Netmask is not set | ||
| + | ifconfig: bad address '' | ||
| + | Loading modules | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | Loading MuC driver (qtn_driver.qtn_ruby.0.bin) | ||
| + | no keyfile specified | ||
| + | unable to load Public Key | ||
| + | Waiting for Wireless Events from interfaces... | ||
| + | Found power table in / | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | start-vap ap | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | bss_tm set to 1 | ||
| + | neigh_repo reset to 0 | ||
| + | radar in 80MHZ mode | ||
| + | Setting mode to 11ac80 | ||
| + | set_region: Setting regulatory region dev_name=wifi0 region=es mode=ap repeater=0 | ||
| + | radar start with[ | ||
| + | | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | ICAC: max_boot_cac is greater than 0, hence the parameter non_dfs_channel is ignored. To avoid doing initial CAC set max_boot_cac to 0. | ||
| + | dfs_s_radio 1 dfs 0 non-dfs 0 scan 0 auto-channel | ||
| + | Configure max_boot_cac to 70 | ||
| + | [ | ||
| + | [ | ||
| + | Beamforming enabled | ||
| + | [ | ||
| + | SCS enabled | ||
| + | QTM: load profile off | ||
| + | QTM enabled: 0 | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | QCS API error 1010: Cannot contact security manager | ||
| + | No core dump generated | ||
| + | QCS API error 34: Parameter value out of range | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | Carrier ID 0, uboot update flag 0 | ||
| + | complete | ||
| + | MU-MIMO is not supported on this device | ||
| + | Starting qrpe daemon... | ||
| + | qtna-rpe(7.0.10-7e833fa) started | ||
| + | PTA request polarity set to 0 | ||
| + | PTA grant polarity set to 0 | ||
| + | PTA disabled | ||
| + | / | ||
| + | qharvestd[notice]: | ||
| + | radar start with regulatory eu | ||
| + | [ | ||
| + | [ | ||
| + | qharvestd[notice]: | ||
| + | qharvestd[info]: | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ | ||
| + | [ 110.560000] RADAR: CAC completed for channel 108 (5540 MHz) | ||
| + | [ 117.810000] channel 52 is removed from non-primary channel list | ||
| + | [ 117.855000] channel 56 is removed from non-primary channel list | ||
| + | [ 117.900000] channel 60 is removed from non-primary channel list | ||
| + | [ 117.945000] channel 64 is removed from non-primary channel list | ||
| + | update_5g_channel: | ||
| + | [ 119.510000] FWT: [00: | ||
| + | [ 126.140000] VAP create succeeded 0.010 seconds | ||
| + | [ 126.170000] device wifi1 entered promiscuous mode | ||
| + | [ 135.350000] br0: port 3(wifi1) entering forwarding state | ||
| + | [ 135.350000] br0: port 3(wifi1) entering forwarding state | ||
| + | [ 137.970000] VAP create succeeded 0.010 seconds | ||
| + | [ 138.000000] device wifi2 entered promiscuous mode | ||
| + | [ 149.465000] VAP create succeeded 0.010 seconds | ||
| + | [ 149.490000] device wifi3 entered promiscuous mode | ||
| + | qharvestd[info]: | ||
| + | qharvestd[info]: | ||
| + | qharvestd[info]: | ||
| + | qharvestd[error]: | ||
| + | |||
| + | qharvestd[info]: | ||
| + | qharvestd[info]: | ||
| + | qharvestd[info]: | ||
| + | qharvestd[info]: | ||
| + | qharvestd[info]: | ||
| + | qharvestd[info]: | ||
| + | qharvestd[info]: | ||
| + | qharvestd[error]: | ||
| + | |||
| + | qharvestd[info]: | ||
| + | qharvestd[info]: | ||
| + | qharvestd[info]: | ||
| + | qharvestd[info]: | ||
| + | iwpriv wifi0 set_owl_beacon 1 | ||
| + | iwpriv wifi0 set_coc_ndfs 0 | ||
| + | update_24g_channel: | ||
| + | [ 182.285000] ARC_24G_CHAN_IN_5G=1 | ||
| + | qharvestd[info]: | ||
| + | qharvestd[info]: | ||
| + | qharvestd[info]: | ||
| + | qharvestd[error]: | ||
| + | |||
| + | qharvestd[info]: | ||
| + | qharvestd[info]: | ||
| + | qharvestd[info]: | ||
| + | qharvestd[info]: | ||
| + | qharvestd[info]: | ||
| + | qharvestd[info]: | ||
| + | qharvestd[info]: | ||
| + | qharvestd[error]: | ||
| + | |||
| + | qharvestd[info]: | ||
| + | qharvestd[info]: | ||
| + | qharvestd[info]: | ||
| + | qharvestd[info]: | ||
| + | qharvestd[info]: | ||
| + | qharvestd[info]: | ||
| + | qharvestd[info]: | ||
| + | qharvestd[error]: | ||
| + | </ | ||
| + | </ | ||
| + | |||
| ==== OpenWrt bootlog ==== | ==== OpenWrt bootlog ==== | ||