Comtrend CT-6373

This device is NOT RECOMMENDED for future use with OpenWrt due to low flash/ram.
DO NOT BUY DEVICES WITH 4MB FLASH / 32MB RAM if you intend to flash an up-to-date and secure OpenWrt version onto it! See 4/32 warning for details.

1) This device does not have sufficient resources (flash and/or RAM) to provide secure and reliable operation.
This means that even setting a password or changing simple network settings might not be possible any more, rendering the device effectively useless. See OpenWrt on 4/32 devices what you can do now.

2) OpenWrt support for this device has ended in 2022.
19.07.10 was the last official build for 4/32 devices.

Devices with Broadcom WiFi chipsets have limited OpenWrt supportability (due to limited FLOSS driver availability for Broadcom chips). Consider this when choosing a device to buy, or when deciding to flash OpenWrt on your device because it is listed as supported. See Broadcom WiFi for details.

DSL will not work at all on devices with BCM63xx DSL chipset (due to unavailability of FLOSS driver for Broadcom chips). Consider this when choosing a device to buy, or when deciding to flash OpenWrt on your device because it is listed as supported.
See Broadcom DSL, Unsupported: DSL modem and Broadcom BCM63xx for details.

Please check out the article flash.layout. It contains an example and a couple of explanations.

  1. Unplug the power cord
  2. Press the reset button, don't release it yet!
  3. Plug the power cord
  4. Wait 10 seconds
  5. Release the reset button
  6. Browse to http://192.168.1.1
  7. Upload lede-17.01.1-brcm63xx-smp-CT-6373-squashfs-cfe.bin file to router
  8. Upgrade the image
  9. Wait for it to reboot
  10. Telnet to 192.168.1.1 and set a root password, or browse to http://192.168.1.1 if LuCI is installed.

If you want to upgrade using TFTP you follow these steps (as an alternative to the above install process.

generic.sysupgrade

If you have already installed OpenWrt and like to reflash for e.g. upgrading to a new OpenWrt version you can upgrade using the mtd command line tool. It is important that you put the firmware image into the ramdisk (/tmp) before you start flashing.

LuCI Web Upgrade Process

  • Browse to http://192.168.1.1/cgi-bin/luci/mini/system/upgrade/ LuCI Upgrade URL
  • Upload image file for sysupgrade to LuCI
  • Wait for reboot

Terminal Upgrade Process

  • Login as root via SSH on 192.168.1.1
  • Use the following commands to upgrade.
cd /tmp/
wget http://downloads.openwrt.org/snapshots/trunk/brcm63xx/openwrt-CT6373-squashfs-cfe.bin
sysupgrade /tmp/openwrt-CT6373-squashfs-cfe.bin
  • If sysupgrade does not support this router, use the following commands.
cd /tmp/
wget http://downloads.openwrt.org/snapshots/trunk/brcm63xx/openwrt-CT6373-squashfs-cfe.bin
mtd write /tmp/openwrt-CT6373-squashfs-cfe.bin linux && reboot

Basic configuration After flashing, proceed with this.
Set up your Internet connection, configure wireless, configure USB port, etc.

The default network configuration is:

Interface Name Description Default configuration
br-lan LAN & WiFi 192.168.1.1/24
eth0 LAN ports (1 to 4) None
wlan0 WiFi Disabled

This is an example to configure the switch: numbers 0-2 will be lan, labeled as Ports 1-3 on the unit, number 3 will be the Internet (WAN), 5 is the internal connection to the router itself. Don't be fooled: vlan0 = eth0.0, vlan1 = eth0.1 and so on.

Port Switch port Mode
LAN 1 0 lan
LAN 2 1 lan
LAN 3 2 lan
LAN 4 3 Internet (WAN)

path: /etc/config/network

# port 4 = WAN

config interface loopback
        option ifname   lo
        option proto    static
        option ipaddr   127.0.0.1
        option netmask  255.0.0.0

config interface lan
        option type     bridge
        option ifname   eth0.0
        option proto    static
        option ipaddr   192.168.1.1
        option netmask  255.255.255.0
        option nat      1

config interface wan
        option ifname 	eth0.1
        option macaddr 	00:11:22:33:44:55
        option proto 	dhcp 
        option defaultroute 1


config switch eth0
	option enable	1
	option reset	1
	option enable_vlan 1

config switch_vlan
	option device 	eth0
	option vlan 	0
	option ports 	"0 1 2 5t"

config switch_vlan
	option device 	eth0
	option vlan 	1
	option ports 	"3 5t"

hardware.button on howto use and configure the hardware button(s).

The Comtrend 6373 has one button: Reset.

BUTTON Event
Reset reset
Instruction set MIPS
Vendor Broadcom
bootloader CFE
System-On-Chip BCM6358
CPU/Speed BMIPS4350 V1.0 / 300 Mhz BMIPS Dual Core
Flash-Chip M29W640FB
Flash size 8 MiB
RAM-Chip MIRA P3S56D40ETP-G5 / DDR-400
RAM size 32 MiB
Wireless Broadcom 4318, newer version: Broadcom 4322 (mini-pci)
Wireless standard 802.11b/g, newer version 802.11b/g/n
Ethernet Broadcom BCM5325 w/ vlan support swconfig
Internet G.DMT/ADSL/ADSL2+
VoIP Zarlink Le88266DLC
USB 1×2.0H + 1×1.1D, not exposed on newer version
Serial Yes
JTAG ?

Model Number

Front Back
ct-6373_front.jpg ct-6373_back.jpg

Note: This will void your warranty!

  • To remove the cover do a/b/c

Main PCB

Top View Bottom View
ct-6373_board.jpg ct-6373_board_back.jpg
LED controller, driven by GPIOs Flash chip
ct-6373_gpioctrl.jpg ct-6373_flash.jpg

port.serial general information about the serial port, serial port cable, etc.

How to connect to the Serial Port of this specific device:

port.jtag general information about the JTAG port, JTAG cable, etc.

How to connect to the JTAG Port of this specific device:

Photo of PCB with markings

  1. you could read about bootloader in general
This is the bootloader backup: CFE-CT-6373.zip --- danitool 2012/02/15 13:34
  1. as a beginner, you really should inform yourself about soldering in general and then obtain some practical experience!

Use a 64MB DDR-400 RAM chip to replace the 32MB RAM chip at the board. Use a RAM chip with the same bus with as the old one. You may also need to modify the bootlader at the offsets 0x010-0x013, a value of 0x6 means 64MB 1 CHIP. → bcm63xx_cfe

CFE version 1.0.37-10.1-1 for BCM96358 (32bit,SP,BE) Build Date: Fri Jun 22 16:26:35 CST 2007 (root@rd4-linux) Copyright (C) 2000-2006 Broadcom Corporation. Boot Address 0xbe000000 Initializing Arena. Initializing Devices. Parallel flash device: name STM29W640FB, id 0x22fd, size 8192KB CPU type 0x2A010: 300MHz, Bus: 133MHz, Ref: 64MHz CPU running TP0 Total memory: 33554432 bytes (32MB) Total memory used by CFE: 0x80401000 - 0x805282D0 (1209040) Initialized Data: 0x8041D950 - 0x8041FB00 (8624) BSS Area: 0x8041FB00 - 0x804262D0 (26576) Local Heap: 0x804262D0 - 0x805262D0 (1048576) Stack Area: 0x805262D0 - 0x805282D0 (8192) Text (code) segment: 0x80401000 - 0x8041D948 (117064) Boot area (physical): 0x00529000 - 0x00569000 Relocation Factor: I:00000000 - D:00000000 Board IP address : 192.168.1.1:ffffff00 Host IP address : 192.168.1.100 Gateway IP address : Run from flash/host (f/h) : f Default host run file name : vmlinux Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Board Id (0-12) : CT6373-1 Number of MAC Addresses (1-32) : 11 Base MAC Address : 64:68:xx:xx:xx PSI Size (1-64) KBytes : 24 Main Thread Number [0|1] : 0 *** Press any key to stop auto run (1 seconds) *** Auto run second count down: 0 Booting from only image (0xbe010000) ... Code Address: 0x80010000, Entry Address: 0x801cc018 Decompression OK! Entry at 0x801cc018 Closing network. Starting program at 0x801cc018 Linux version 2.6.8.1 (adams@rd5-linux) (gcc version 3.4.2) #5 Fri Dec 11 15:11:56 CST 2009 Parallel flash device: name STM29W640FB, id 0x22fd, size 8192KB CT6373-1 prom init CPU revision is: 0002a010 Determined physical RAM map: memory: 01fa0000 @ 00000000 (usable) On node 0 totalpages: 8096 DMA zone: 4096 pages, LIFO batch:1 Normal zone: 4000 pages, LIFO batch:1 HighMem zone: 0 pages, LIFO batch:1 Built 1 zonelists Kernel command line: root=31:0 ro noinitrd console=ttyS0,115200 brcm mips: enabling icache and dcache... Primary instruction cache 32kB, physically tagged, 2-way, linesize 16 bytes. Primary data cache 16kB 2-way, linesize 16 bytes. PID hash table entries: 128 (order 7: 1024 bytes) Using 150.000 MHz high precision timer. Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) Allocating memory for DSP module core and initialization code Allocated DSP module memory - CORE=0x8104ca80 SIZE=609696, INIT=0x0 SIZE=0 Memory: 29404k/32384k available (1540k kernel code, 2936k reserved, 231k data, 72k init, 0k highmem) KLOB Pool 1 Initialized: 1048576 bytes <0x80e00000 ... 0x80f00000> Calibrating delay loop... 299.00 BogoMIPS Mount-cache hash table entries: 512 (order: 0, 4096 bytes) Checking for 'wait' instruction... unavailable. NET: Registered protocol family 16 Total Flash size: 8192K with 135 sectors File system address: 0xbe010100 Can't analyze prologue code at 8018fb64 usbcore: registered new driver hub Initializing Cryptographic API PPP generic driver version 2.4.2 NET: Registered protocol family 24 Using noop io scheduler bcm963xx_mtd driver v1.0 PCI: Enabling device 0000:00:0a.0 (0000 -> 0002) ehci_hcd 0000:00:0a.0: EHCI Host Controller PCI: Setting latency timer of device 0000:00:0a.0 to 64 ehci_hcd 0000:00:0a.0: irq 18, pci mem c0000300 ehci_hcd 0000:00:0a.0: new USB bus registered, assigned bus number 1 PCI: cache line size of 32 is not supported by device 0000:00:0a.0 ehci_hcd 0000:00:0a.0: USB f.f enabled, EHCI 1.00, driver 2004-May-10 hub 1-0:1.0: USB hub found hub 1-0:1.0: 2 ports detected ohci_hcd: 2004 Feb 02 USB 1.1 'Open' Host Controller (OHCI) Driver (PCI) ohci_hcd: block sizes: ed 64 td 64 PCI: Enabling device 0000:00:09.0 (0000 -> 0002) ohci_hcd 0000:00:09.0: OHCI Host Controller PCI: Setting latency timer of device 0000:00:09.0 to 64 ohci_hcd 0000:00:09.0: irq 13, pci mem c0001400 ohci_hcd 0000:00:09.0: new USB bus registered, assigned bus number 2 hub 2-0:1.0: USB hub found hub 2-0:1.0: 2 ports detected usbcore: registered new driver usblp drivers/usb/class/usblp.c: v0.13: USB Printer Device Class driver brcmboard: brcm_board_init entry kerSysScreenPciDevices: 0x14e4:0x4318:(slot 1) detected kerSysScreenPciDevices: 0x14e4:0x6300:(slot 9) detected kerSysScreenPciDevices: 0x14e4:0x6300:(slot 10) detected Invalid External Interrupt definition Serial: BCM63XX driver $Revision: 3.00 $ ttyS0 at MMIO 0xfffe0100 (irq = 10) is a BCM63XX ttyS1 at MMIO 0xfffe0120 (irq = 11) is a BCM63XX NET: Registered protocol family 2 IP: routing cache hash table of 512 buckets, 4Kbytes TCP: Hash tables configured (established 2048 bind 4096) Initializing IPsec netlink socket NET: Registered protocol family 1 NET: Registered protocol family 17 NET: Registered protocol family 15 Ebtables v2.0 registered hub 1-0:1.0: over-current change on port 2 NET: Registered protocol family 8 NET: Registered protocol family 20 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> VFS: Mounted root (squashfs filesystem) readonly. Freeing unused kernel memory: 72k freed init started: BusyBox v1.00 (2009.12.11-03:43+0000) multi-call binary Algorithmics/MIPS FPU Emulator v1.5 BusyBox v1.00 (2009.12.11-03:43+0000) Built-in shell (msh) Enter 'help' for a list of built-in commands. Loading drivers and kernel modules... atmapi: module license 'Proprietary' taints kernel. adsl: adsl_init entry blaadd: blaa_detect entry Broadcom BCMPROCFS v1.0 initialized Broadcom BCM6358A1 Ethernet Network Device v0.3 Dec 11 2009 11:37:53 Config Ethernet Switch Through MDIO Pseudo PHY Interface dgasp: kerSysRegisterDyingGaspHandler: eth0 registered eth0: MAC Address: 64:68:0C:xx:xx:xx Broadcom BCM6358A1 USB Network Device v0.4 Dec 11 2009 11:37:55 usb0: MAC Address: 64 68 0C xx xx xx usb0: Host MAC Address: 64 68 0C xx xx xx PCI: Setting latency timer of device 0000:00:01.0 to 64 PCI: Enabling device 0000:00:01.0 (0004 -> 0006) wl0: Broadcom BCM4318 802.11 Wireless Controller 4.150.10.5.cpe2.0 dgasp: kerSysRegisterDyingGaspHandler: wl0 registered DSP Driver: DSP init stub Endpoint: endpoint_init entry BOS: Enter bosInit Enter bosAppInit Exit bosAppInit BOS: Exit bosInit Endpoint: endpoint_init COMPLETED BcmAdsl_Initialize=0xC006A3F8, g_pFnNotifyCallback=0xC00893F4 AnnexCParam=0x7FFF78E0 AnnexAParam=0x00003980 adsl2=0x00000000 pSdramPHY=0xA1FFFFF8, 0x3024B 0xD68DF64F AdslCoreSharedMemInit: shareMemAvailable=20624 AdslCoreHwReset: AdslOemDataAddr = 0xA1FEFDAC AnnexCParam=0x7FFF78E0 AnnexAParam=0x00003980 adsl2=0x00000000 dgasp: kerSysRegisterDyingGaspHandler: dsl0 registered atmapi: prioritize receive packets ATM proc init !!! Loading boot image .. done Loading target image through HMI: done bind now the file descriptor from IP 0.0.0.0, my port 57665. socket init is now finished vdslctl: Started successfully ==> Bcm963xx VDSL Software Version: 09.07.29, 2009-04-03 <== ==> Comtrend Router Software Version: I131-S310CTL-C03_R02 <== device usb0 entered promiscuous mode br0: port 1(usb0) entering learning state br0: topology change detected, propagating br0: port 1(usb0) entering forwarding state device eth0 entered promiscuous mode br0: port 2(eth0) entering learning state br0: topology change detected, propagating br0: port 2(eth0) entering forwarding state Setting SSID "WLAN" Setting country code using abbreviation: "AT" wlctl: Not Found wlctl: Not Found wlctl: Not Found KLOB extended to 2 pools device wl0 entered promiscuous mode br0: port 3(wl0) entering learning state br0: topology change detected, propagating br0: port 3(wl0) entering forwarding state device usb0 left promiscuous mode br0: port 1(usb0) entering disabled state device eth0 left promiscuous mode br0: port 2(eth0) entering disabled state device wl0 left promiscuous mode br0: port 3(wl0) entering disabled state device usb0 entered promiscuous mode br0: port 1(usb0) entering learning state br0: topology change detected, propagating br0: port 1(usb0) entering forwarding state device eth0 entered promiscuous mode br0: port 2(eth0) entering learning state br0: topology change detected, propagating br0: port 2(eth0) entering forwarding state device wl0 entered promiscuous mode br0: port 3(wl0) entering learning state br0: topology change detected, propagating br0: port 3(wl0) entering forwarding state Voice App. Comparing interface: current br0 (3) - passed br0. Voice App. Comparing interface: current br0 (3) - passed br0. Sorry, rule does not exist. Sorry, rule does not exist. Sorry, rule does not exist. Starting the SIP application with the following parameters: SIP Proxy (IP address or FQDN): SIP Proxy port: 5060 SIP Outbound Proxy (IP address or FQDN): SIP Outbound Proxy port: 5060 SIP Registrar (IP address or FQDN): SIP Registrar Port port: 5060 Enable SIP tag matching: No Log IP address: 192.168.1.4 Log port: 514 Music server address: 0.0.0.0 Music server port: 0 PSTN number of channels: 1 PSTN routing: LINE1 PSTN routing data: 0 Extension 1: Password 1: Extension 2: Disabled Password 2: Disabled Extension 3: Disabled Password 3: Disabled Extension 4: Disabled Password 4: Disabled Max Digits: 24 Interface name: br0 Domain name: Locale name: DEU Pref. codec: none Pref. ptime: 20 Console log level: 5 Register Expire Time: 120 Max Digits: 24 Line 1 call forwarding number: Line 1 call forwarding busy: Disabled Line 1 call forwarding all: Disabled Line 1 call forwarding no answer: Disabled Line 1 call waiting: Enabled Line 2 call forwarding number: Not available Line 2 call forwarding busy: Disabled Line 2 call forwarding all: Disabled Line 2 call forwarding no answer: Disabled Line 2 call waiting: Enabled BOS: Enter bosInit bosTimerInit Enter bosAppInit Exit bosAppInit BOS: Exit bosInit Created queue CFGMGR_Q 00:00:30 Init Configuration Manager: CFGMGR_VOIP_RETCODE_SUCCESS 00:00:30 Setting provisioning default values. option 7, cfx1 = option 5 option A callfwd busy = 0 option A callfwd all = 0 option A callfwd no answer = 0 option A callwaiting = 15 Sip registration timeout = 120Sip transport protocol = 1User line enabled = 10 user line 1 mwi enabled = 1 user line 2 mwi enabled = 1 user line 3 mwi enabled = 1 user line 4 mwi enabled = 1 Codec name = G711A, encoder=0x2, parm=0 Codec name = G711U, encoder=0x1, parm=1 Codec name = G729, encoder=0x4000, parm=2 dtmf relay method = 0 T38 disabled VAD enabled 00:00:30 Process 593 priority is 0 00:00:30 Process 593: old priority 0, new priority -15 Enter TaskCreate VRGCMGR TaskCreate - spawn new task VRGCMGR Exit TaskCreate KLOB extended to 3 pools br0: port 2(eth0) entering disabled state kernel::endpoint_open kernel::endpoint_open COMPLETED 00:00:30 Endpoint Event task started with pid 605... 00:00:30 Endpoint Packet task started with pid 606 ... Enter bosStartApp br0: port 1(usb0) entering disabled state bosAppRootTask() - Is it morning already? Spawning app task (epoch #0)... bosAppRootTask() - Is it morning already? Spawning app task (epoch #0)... Enter TaskCreate aoAP TaskCreate - spawn new task aoAP Exit bosStartApp Exit TaskCreate AppResetDetectionEnable() - Enabled reset detection. PLL init completed. PLL registers set to: PCM->pcm_pll_ctrl1 = 0x00020001 PCM->pcm_pll_ctrl2 = 0x0008492B PCM->pcm_pll_ctrl3 = 0x00001E1C Set up PCM registers Channel 0 assigned to timeslot 0 Channel 1 assigned to timeslot 1 Channel 2 assigned to timeslot 2 Tx Desc (0xA0819000): chan 0, buf 0, sts 0xe000, len 1280, bufp 0xdab000 Tx Desc (0xA0819008): chan 0, buf 1, sts 0x7000, len 1280, bufp 0xdab510 Rx Desc (0xA02AA000): chan 0, buf 0, sts 0x8000, len 1280, bufp 0x2a8000 Rx Desc (0xA02AA008): chan 0, buf 1, sts 0x9000, len 1280, bufp 0x2a8510 initIudma: chan 0, descBase 0xa02aa000, descBaseIudma 0x2aa000 initIudma: chan 1, descBase 0xa0819000, descBaseIudma 0x819000 rm: cannot remove `/var/fyi/sys/gateway': No such file or directory rm: cannot remove `/var/fyi/sys/dns': No such file or directory Clean Up IP Connection Tracking Table PCM ENABLE INFO: DMA0 IRQ STATUS 0x00000000 PCM ENABLE INFO: DMA0 IRQ MASK 0x00000005 PCM ENABLE INFO: DMA1 IRQ STATUS 0x00000000 PCM ENABLE INFO: DMA1 IRQ MASK 0x00000005 PCM ENABLE INFO: PCM IRQ MASK 0x00000003 PCM ENABLE INFO: PCM IRQ PENDING 0x00000007 Enter TaskCreate CMT_EXCEPTION_IST TaskCreate - spawn new task CMT_EXCEPTION_IST cat: /proc/clean_ip_conntrack: No such file or directory Voice QoS: registering interface br0 for voice Exit TaskCreate regStatus (reg 12 sel 0) = 0x10008501 regStatus (reg 12 sel 7) = 0x00000101 regCause (reg 13 sel 0) = 0x00000000 regCause (reg 13 sel 7) = 0x00808000 regCMT (reg 22 sel 0) = 0xe30e1006 regCMT (reg 22 sel 1) = 0x10008001 Kicking off secondary thread processor at entry point 0x8104CAC0... Secondary thread processor entry point at 0x8104cac0 Thread processor handshake. Secondary app initialized properly. Enter TaskCreate HTSK TaskCreate - spawn new task HTSK rm: cannot remove `/var/fyi/sys/gateway': No such file or directory rm: cannot remove `/var/fyi/sys/dns': No such file or directory Clean Up IP Connection Tracking Table cat: /proc/clean_ip_conntrack: No such file or directory Exit TaskCreate SUCCESS: Took semaphore SUCCESS: Gave semaphore INFO: MSPI POLLING MODE INFO: IRQ MASK 0xe0082ca4 INFO: IRQ STATUS 0x420000 INFO: BLOCK ENABLES 0x3e0f20 Read data from Rev ID register: 0x4, 0xb3 OpenSlic: country code = 9 SLIC LE88221 Registers... 0x41: Tx TSlt.........0x0 0x43: Rx TSlt.........0x0 0x45: ClkSlt TxEdge...0x40 0x47: Device Config...0x2 0x4B: ChEna OpMode....0x3 0x4F: Signaling.......0x0 0x0 0x51: Voice Gain......0x10 0x53: I/O Data........0x0 0x55: I/O Direction...0x2 0x57: Sys State.......0x0 0x61: Oper Func.......0xBF 0x69: Sys State Cfg...0x9 0x6D: Int Mask........0x1F 0x71: Oper Cond.......0xFF 0x73: Revision........0x4 0xB3 0x81: GX Filter.......0xA3B3 0x83: GR Filter.......0x3AA1 0x87: B FIR Filter....0x725A22241AA1BB22B32B4AA5BB60 0x89: X Filter........0x4BD0AA44B22DAB2D2AB42AAD 0x8B: R FIR Filter....0x2E12C0A448322B22A1A2BA43B4 0x97: B IIR Filter....0xB4A1 0x99: Z FIR Filter....0x2D51CA325BCBB8FAB363 0x9B: Z IIR Filter....0xAAF3579F1 0xA7: Conv Config.....0x0 0xC3: Loop Super......0x1B84B35 0xC7: DC Feed.........0x138 0xCB: DISN............0xE7 0xD1: Metering........0x213D3C0 0xD3: Gen A/B &Bias...0x00003736460000 0xD5: Gen A/B &Bias...0x177727D4CCD27D4 0xDF: SigGen Ctl......0x0 0xE1: Cadence Tmr.....0x190320 0xE3: Caller ID.......0x0 0xE5: Switch Reg......0x058 0xE7: Sw Reg Ctrl.....0x5 0xEB: CID Parms.......0x3 ---------------- OpenSlic: country code = 9 SLIC LE88221 Registers... 0x41: Tx TSlt.........0x0 0x43: Rx TSlt.........0x0 0x45: ClkSlt TxEdge...0x40 0x47: Device Config...0x2 0x4B: ChEna OpMode....0x3 0x4F: Signaling.......0x0 0x0 0x51: Voice Gain......0x10 0x53: I/O Data........0x0 0x55: I/O Direction...0x2 0x57: Sys State.......0x0 0x61: Oper Func.......0xBF 0x69: Sys State Cfg...0x9 0x6D: Int Mask........0x1F 0x71: Oper Cond.......0xFF 0x73: Revision........0x4 0xB3 0x81: GX Filter.......0xA3B3 0x83: GR Filter.......0x3AA1 0x87: B FIR Filter....0x725A22241AA1BB22B32B4AA5BB60 0x89: X Filter........0x4BD0AA44B22DAB2D2AB42AAD 0x8B: R FIR Filter....0x2E12C0A448322B22A1A2BA43B4 0x97: B IIR Filter....0xB4A1 0x99: Z FIR Filter....0x2D51CA325BCBB8FAB363 0x9B: Z IIR Filter....0xAAF3579F1 0xA7: Conv Config.....0x0 0xC3: Loop Super......0x1B84B35 0xC7: DC Feed.........0x138 0xCB: DISN............0xE7 0xD1: Metering........0x213D3C0 0xD3: Gen A/B &Bias...0x00003736460000 0xD5: Gen A/B &Bias...0x177727D4CCD27D4 0xDF: SigGen Ctl......0x0 0xE1: Cadence Tmr.....0x190320 0xE3: Caller ID.......0x0 0xE5: Switch Reg......0x058 0xE7: Sw Reg Ctrl.....0x5 0xEB: CID Parms.......0x3 ---------------- DAA Device Init reset don't need. DAA DBG: Successful READ!!!! count = 0 DAA DBG: ISOCAP lock count = 0 Si3050 SLAC Initialised, Line side device = Si: Unknown (0x4) System dev rev: 0x4, Line dev rev: 0x6 Line dev status: FDT:0x1, LCS: 0x0 DAA initialized with country code 9 Si3050 Registers Values Reg 0x1. Control 1 - 0x0 (Res 0xba) Reg 0x2. Control 2 - 0x7 (Res 0xdf) Reg 0x3. Int Mask - 0x80 (Res 0xff) Reg 0x4. Int Source - 0x0 (Res 0xff) Reg 0x5. DAA Ctrl 1 - 0x0 (Res 0x6d) Reg 0x6. DAA Ctrl 2 - 0x0 (Res 0x18) Reg 0x7. Smp Rate - 0x0 (Res 0x8) Reg 0x8. Reserved - 0x0 (Res 0x0) Reg 0x9. Reserved - 0x0 (Res 0x0) Reg 0xa. DAA Ctrl 3 - 0x0 (Res 0x1) Reg 0xb. S/LSD Rev - 0x44 (Res 0xff) Reg 0xc. LSD Status - 0x40 (Res 0x5f) Reg 0xd. LSD Rev - 0x58 (Res 0x3c) Reg 0xe. DAA Ctrl 4 - 0x0 (Res 0x2) Reg 0xf. T/R Gain 1 - 0x0 (Res 0x88) Reg 0x10. Int Ctrl 1 - 0x0 (Res 0x53) Reg 0x11. Int Ctrl 2 - 0x0 (Res 0xff) Reg 0x12. Int Ctrl 3 - 0x0 (Res 0x2) Reg 0x13. Int Ctrl 4 - 0x2 (Res 0x7) Reg 0x14. CP Rx Atte - 0x0 (Res 0xff) Reg 0x15. CP Tx Atte - 0x0 (Res 0xff) Reg 0x16. Rg Ctrl 1 - 0x96 (Res 0xff) Reg 0x17. Rg Ctrl 2 - 0x13 (Res 0xff) Reg 0x18. Rg Ctrl 3 - 0x99 (Res 0xbf) Reg 0x19. Res Calib - 0x9 (Res 0xef) Reg 0x1a. DC Ctrl - 0xc2 (Res 0xf3) Reg 0x1b. Reserved - 0x7 (Res 0x0) Reg 0x1c. Loop Sta - 0x0 (Res 0xff) Reg 0x1d. Line V Sta - 0x0 (Res 0xff) Reg 0x1e. AC Ctrl - 0x3 (Res 0xf) Reg 0x1f. DAA Ctrl 5 - 0x28 (Res 0xeb) Reg 0x20. Gd Sta Ctl - 0x7 (Res 0x7) Reg 0x21. PCM/SPI Md - 0x38 (Res 0xfb) Reg 0x22. PCM T St L - 0x21 (Res 0xff) Reg 0x23. PCM T St H - 0x0 (Res 0x3) Reg 0x24. PCM R St L - 0x21 (Res 0xff) Reg 0x25. PCM R St H - 0x0 (Res 0x3) Reg 0x26. T Gain 2 - 0x0 (Res 0x1f) Reg 0x27. R Gain 2 - 0x0 (Res 0x1f) Reg 0x28. T Gain 3 - 0x0 (Res 0x1f) Reg 0x29. R Gain 3 - 0x0 (Res 0x1f) Reg 0x2a. GCI Ctrl - 0x0 (Res 0xf) Reg 0x2b. LV T Int - 0x0 (Res 0xff) Reg 0x2c. LV T IntC - 0x0 (Res 0xf) Reg 0x2d. Prg Hyb 1 - 0x0 (Res 0xff) Reg 0x2e. Prg Hyb 2 - 0x0 (Res 0xff) Reg 0x2f. Prg Hyb 3 - 0x0 (Res 0xff) Reg 0x30. Prg Hyb 4 - 0x0 (Res 0xff) Reg 0x31. Prg Hyb 5 - 0x0 (Res 0xff) Reg 0x32. Prg Hyb 6 - 0x0 (Res 0xff) Reg 0x33. Prg Hyb 7 - 0x0 (Res 0xff) Reg 0x34. Prg Hyb 8 - 0x0 (Res 0xff) Reg 0x35. Reserved - 0x0 (Res 0x0) Reg 0x36. Reserved - 0x0 (Res 0x0) Reg 0x37. Reserved - 0x0 (Res 0x0) Reg 0x38. Reserved - 0xf (Res 0x0) Reg 0x39. Reserved - 0x0 (Res 0x0) Reg 0x3a. Reserved - 0x0 (Res 0x0) Reg 0x3b. SQC - 0x0 (Res 0x50) DAA Device Init completed. boardHalInit completed Enter TaskCreate HRTBEAT TaskCreate - spawn new task HRTBEAT Exit TaskCreate bosMsgQCreate: Created message queue VRGEVQ at address 0x8001 Enter TaskCreate VRGEVPR TaskCreate - spawn new task VRGEVPR Exit TaskCreate Enter TaskCreate HCAS TaskCreate - spawn new task HCAS Exit TaskCreate *** gStartRxDesc[0] = 0xA02AA000 *** gBufferSizeBytes = 1280 *** gStartTxDesc[0] = 0xA0819000 hal6358PcmInit 260 nextTxDesc = 0xA0819000 hal6358PcmInit 260 nextTxDesc = 0xA0819008 hal6358PcmInit 264 Ownership for TX desc not set. Use this buffer. PERF->IrqMask = 0xE0082CA4 PERF->IrqMask1 = 0x00800000 bosMsgQCreate: Created message queue PSTN_CTL_EVQ at address 0x10002 Enter TaskCreate PSTN TaskCreate - spawn new task PSTN Exit TaskCreate dgasp: kerSysRegisterDyingGaspHandler: endpoint registered DAA: Enable on-hook Caller ID receive. routing data index = 0 Setting egress: 0, ingress: 0 kernel: DoVrgEndptGetHookStatus() kernel: DoVrgEndptSetRelayStat() Active relay on channel 0 pin = 256 Active relay on channel 1 pin = 256 kernel: DoVrgEndptGetHookStatus() kernel: DoVrgEndptSetRelayStat() Active relay on channel 0 pin = 256 Active relay on channel 1 pin = 256 00:00:33 RTCP thread started with pid 706


root@OpenWrt:~# dmesg [ 0.000000] Linux version 3.0.18 (dani@tool) (gcc version 4.5.4 20120105 (prerelease) (Linaro GCC 4.5-2012.01) ) #3 Tue Feb 14 12:19:57 CET 2012 [ 0.000000] Detected Broadcom 0x6358 CPU revision a1 [ 0.000000] CPU frequency is 300 MHz [ 0.000000] 32MB of RAM installed [ 0.000000] registering 40 GPIOs [ 0.000000] board_bcm963xx: Boot address 0xbe000000 [ 0.000000] board_bcm963xx: CFE version: 1.0.37-10.1 [ 0.000000] bootconsole [early0] enabled [ 0.000000] CPU revision is: 0002a010 (Broadcom BMIPS4350) [ 0.000000] board_bcm963xx: board name: CT6373-1 [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 02000000 @ 00000000 (usable) [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Zone PFN ranges: [ 0.000000] Normal 0x00000000 -> 0x00002000 [ 0.000000] Movable zone start PFN for each node [ 0.000000] early_node_map[1] active PFN ranges [ 0.000000] 0: 0x00000000 -> 0x00002000 [ 0.000000] On node 0 totalpages: 8192 [ 0.000000] free_area_init_node: node 0, pgdat 8027b600, node_mem_map 81000000 [ 0.000000] Normal zone: 64 pages used for memmap [ 0.000000] Normal zone: 0 pages reserved [ 0.000000] Normal zone: 8128 pages, LIFO batch:0 [ 0.000000] Reserving 0MB of memory at 0MB for crashkernel [ 0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768 [ 0.000000] pcpu-alloc: [0] 0 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 8128 [ 0.000000] Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200 [ 0.000000] PID hash table entries: 128 (order: -3, 512 bytes) [ 0.000000] Dentry cache hash table entries: 4096 (order: 2, 16384 bytes) [ 0.000000] Inode-cache hash table entries: 2048 (order: 1, 8192 bytes) [ 0.000000] Primary instruction cache 32kB, VIPT, 2-way, linesize 16 bytes. [ 0.000000] Primary data cache 16kB, 2-way, VIPT, cache aliases, linesize 16 bytes [ 0.000000] Memory: 29568k/32768k available (2121k kernel code, 3200k reserved, 358k data, 160k init, 0k highmem) [ 0.000000] NR_IRQS:128 [ 0.000000] Calibrating delay loop... 299.26 BogoMIPS (lpj=598528) [ 0.036000] pid_max: default: 32768 minimum: 301 [ 0.040000] Mount-cache hash table entries: 512 [ 0.052000] NET: Registered protocol family 16 [ 0.064000] registering PCI controller with io_map_base unset [ 0.072000] bio: create slab <bio-0> at 0 [ 0.080000] pci 0000:00:01.0: [14e4:4318] type 0 class 0x000280 [ 0.080000] pci 0000:00:01.0: reg 10: [mem 0x00000000-0x00001fff] [ 0.096000] pci 0000:00:01.0: BAR 0: assigned [mem 0x30000000-0x30001fff] [ 0.100000] pci 0000:00:01.0: BAR 0: set to [mem 0x30000000-0x30001fff] (PCI address [0x30000000-0x30001fff]) [ 0.104000] Switching to clocksource MIPS [ 0.116000] PCI: Enabling device 0000:00:01.0 (0000 -> 0002) [ 0.120000] PCI: Setting latency timer of device 0000:00:01.0 to 64 [ 0.144000] ssb: Core 0 found: ChipCommon (cc 0x800, rev 0x0D, vendor 0x4243) [ 0.144000] ssb: Core 1 found: IEEE 802.11 (cc 0x812, rev 0x09, vendor 0x4243) [ 0.144000] ssb: Core 2 found: PCI (cc 0x804, rev 0x0C, vendor 0x4243) [ 0.144000] ssb: Core 3 found: PCMCIA (cc 0x80D, rev 0x07, vendor 0x4243) [ 0.192000] ssb: Sonics Silicon Backplane found on PCI device 0000:00:01.0 [ 0.200000] NET: Registered protocol family 2 [ 0.204000] IP route cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.212000] TCP established hash table entries: 1024 (order: 1, 8192 bytes) [ 0.220000] TCP bind hash table entries: 1024 (order: 0, 4096 bytes) [ 0.228000] TCP: Hash tables configured (established 1024 bind 1024) [ 0.236000] TCP reno registered [ 0.236000] UDP hash table entries: 256 (order: 0, 4096 bytes) [ 0.244000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) [ 0.252000] NET: Registered protocol family 1 [ 0.256000] PCI: CLS 0 bytes, default 32 [ 0.260000] audit: initializing netlink socket (disabled) [ 0.264000] type=2000 audit(0.264:1): initialized [ 0.272000] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.276000] JFFS2 version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.288000] msgmni has been set to 57 [ 0.292000] io scheduler noop registered [ 0.296000] io scheduler deadline registered (default) [ 0.304000] bcm63xx_uart.0: ttyS0 at MMIO 0xfffe0100 (irq = 10) is a bcm63xx_uart [ 0.312000] console [ttyS0] enabled, bootconsole disabled [ 0.324000] gpiodev: gpio device registered with major 254 [ 0.332000] bcm963xx-flash bcm963xx-flash.0: 0x02000000 at 0x1e000000 [ 0.340000] bcm963xx: Found 1 x16 devices at 0x0 in 16-bit bank. Manufacturer ID 0x000020 Chip ID 0x0022fd [ 0.352000] bcm963xx: Found an alias at 0x800000 for the chip at 0x0 [ 0.352000] bcm963xx: Found an alias at 0x1000000 for the chip at 0x0 [ 0.352000] bcm963xx: Found an alias at 0x1800000 for the chip at 0x0 [ 0.352000] Amd/Fujitsu Extended Query Table at 0x0040 [ 0.356000] Amd/Fujitsu Extended Query version 1.3. [ 0.360000] number of CFI chips: 1 [ 0.364000] bcm963xx_flash: Read Signature value of CFE1CFE1 [ 0.372000] bcm963xx-flash bcm963xx-flash.0: CFE bootloader detected [ 0.376000] bcm963xx_flash: CFE boot tag found with version 6 and board type CT6373-1 [ 0.384000] bcm963xx_flash: Partition 0 is CFE offset 0 and length 10000 [ 0.392000] bcm963xx_flash: Partition 1 is kernel offset 10100 and length dff00 [ 0.400000] bcm963xx_flash: Partition 2 is rootfs offset f0000 and length 700000 [ 0.408000] bcm963xx_flash: Partition 3 is nvram offset 7f0000 and length 10000 [ 0.416000] bcm963xx_flash: Partition 4 is linux offset 10000 and length 7e0000 [ 0.424000] bcm963xx_flash: Spare partition is 320000 offset and length 4d0000 [ 0.428000] Creating 5 MTD partitions on "bcm963xx": [ 0.436000] 0x000000000000-0x000000010000 : "CFE" [ 0.444000] 0x000000010100-0x0000000f0000 : "kernel" [ 0.448000] mtd: partition "kernel" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only [ 0.464000] 0x0000000f0000-0x0000007f0000 : "rootfs" [ 0.472000] mtd: partition "rootfs" set to be root filesystem [ 0.480000] mtd: partition "rootfs_data" created automatically, ofs=310000, len=4E0000 [ 0.488000] 0x000000310000-0x0000007f0000 : "rootfs_data" [ 0.496000] 0x0000007f0000-0x000000800000 : "nvram" [ 0.504000] 0x000000010000-0x0000007f0000 : "linux" [ 0.520000] bcm63xx_enet MII bus: probed [ 0.528000] bcm63xx-wdt bcm63xx-wdt.0: started, timer margin: 30 sec [ 0.536000] TCP westwood registered [ 0.540000] NET: Registered protocol family 17 [ 0.544000] 802.1Q VLAN Support v1.8 [ 0.560000] VFS: Mounted root (squashfs filesystem) readonly on device 31:2. [ 0.568000] Freeing unused kernel memory: 160k freed [ 3.240000] eth1: link forced UP - 100/full - flow control off/off [ 3.440000] roboswitch: Probing device eth0: [ 3.444000] roboswitch: [/media/scsi/kamikaze/trunk/build_dir/linux-brcm63xx/kmod-switch/switch-robo.c:121] SIOCGETCPHYRD failed! [ 3.456000] roboswitch: [/media/scsi/kamikaze/trunk/build_dir/linux-brcm63xx/kmod-switch/switch-robo.c:121] SIOCGETCPHYRD failed! [ 3.468000] No Robo switch in managed mode found, phy_id = 0xffffffff [ 3.472000] roboswitch: Probing device eth1: found a 5325! It's a 5350. [ 12.184000] Compat-wireless backport release: compat-wireless-2012-01-16-14-g02166d5 [ 12.192000] Backport based on wireless-testing.git master-2012-02-06 [ 12.252000] cfg80211: Calling CRDA to update world regulatory domain [ 13.008000] cfg80211: World regulatory domain updated: [ 13.012000] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp) [ 13.020000] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) [ 13.028000] cfg80211: (2457000 KHz - 2482000 KHz @ 20000 KHz), (300 mBi, 2000 mBm) [ 13.036000] cfg80211: (2474000 KHz - 2494000 KHz @ 20000 KHz), (300 mBi, 2000 mBm) [ 13.044000] cfg80211: (5170000 KHz - 5250000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) [ 13.052000] cfg80211: (5735000 KHz - 5835000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) [ 13.224000] SCSI subsystem initialized [ 13.520000] usbcore: registered new interface driver usbfs [ 13.528000] usbcore: registered new interface driver hub [ 13.536000] usbcore: registered new device driver usb [ 14.164000] b43-phy0: Broadcom 4318 WLAN found (core revision 9) [ 14.240000] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht' [ 14.240000] Registered led device: b43-phy0::tx [ 14.240000] Registered led device: b43-phy0::rx [ 14.244000] Registered led device: b43-phy0::radio [ 14.244000] Broadcom 43xx driver loaded [ Features: PL ] [ 14.276000] Button Hotplug driver version 0.4.1 [ 15.116000] PPP generic driver version 2.4.2 [ 15.632000] ip_tables: (C) 2000-2006 Netfilter Core Team [ 15.972000] NET: Registered protocol family 24 [ 16.184000] nf_conntrack version 0.5.0 (464 buckets, 1856 max) [ 16.836000] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver [ 16.844000] bcm63xx_ohci bcm63xx_ohci.0: BCM63XX integrated OHCI controller [ 16.852000] bcm63xx_ohci bcm63xx_ohci.0: new USB bus registered, assigned bus number 1 [ 16.860000] bcm63xx_ohci bcm63xx_ohci.0: irq 13, io mem 0xfffe1400 [ 16.924000] hub 1-0:1.0: USB hub found [ 16.928000] hub 1-0:1.0: 1 port detected [ 17.128000] Initializing USB Mass Storage driver... [ 17.136000] usbcore: registered new interface driver usb-storage [ 17.140000] USB Mass Storage support registered. [ 17.724000] hub 1-0:1.0: over-current condition [ 20.100000] bcm63xx_enet bcm63xx_enet.0: attached PHY at address 1 [Broadcom BCM63XX (2)] [ 21.328000] eth1: link forced UP - 100/full - flow control off/off [ 21.952000] device eth1 entered promiscuous mode [ 22.236000] br-lan: port 1(eth1) entering forwarding state [ 22.244000] br-lan: port 1(eth1) entering forwarding state [ 27.336000] device eth1 left promiscuous mode [ 27.340000] br-lan: port 1(eth1) entering forwarding state [ 28.048000] device eth1 entered promiscuous mode [ 28.052000] br-lan: port 1(eth1) entering forwarding state [ 28.056000] br-lan: port 1(eth1) entering forwarding state [ 42.120000] jffs2_scan_eraseblock(): End of filesystem marker found at 0x0 [ 42.136000] jffs2_build_filesystem(): unlocking the mtd device... done. [ 42.140000] jffs2_build_filesystem(): erasing all blocks after the end marker... done. [ 84.396000] JFFS2 notice: (1319) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. root@OpenWrt:~#


The original firmware can have the following login:

user: admin, pass: admin 
user: user, pass: user

It does have SSH enabled by default and it's possible to disable this on the web interface.

This website uses cookies. By using the website, you agree with storing cookies on your computer. Also you acknowledge that you have read and understand our Privacy Policy. If you do not agree leave the website.More information about cookies
  • Last modified: 2024/02/12 08:58
  • by 127.0.0.1