Inventel Livebox 1
This is an adsl wifi router mainly distributed by Orange. The board is manufactured by Inventel-Thomson. The main difference with other bcm6348 boards is the bootloader, the liveboxes use redboot whereas others use CFE.
More info about this platform at bcm63xx
Supported Versions
These are the differences between several board models. In any case DSP and ADSL aren't supported by OpenWrt.
| router version | board model | PCMCIA | DSP | mini-pci | BCM5325 |
|---|---|---|---|---|---|
| DV4210 | blue5g9 | ✔ | |||
| DV4210 | blue5g4 | ✔ | ✔ | ✔ | |
| DV3210 | blue5g6 | ✔ | ✔ | ||
| DV4410 | blue5g6.3 | ✔ | ✔ | ✔ | ✔ |
The Livebox DV4410 (AKA Livebox Pro v1) is supported, however the BCM5325 switch doesn't work. Only 1 ethernet port not belonging to the switch works. Maybe it isn't correctly activated when booting the board. It seems the switch should be configured via SPI, in this case the SPI Slave Select (SS) is the GPIO_29.
NOTE: About board models see notes.
Hardware Highlights
| SoC | CPU speed | Ram | Flash | Network | USB | Serial | JTag |
|---|---|---|---|---|---|---|---|
| Broadcom 6348 | 256MHz | 16MiB | 8MiB | 1 x 2 | Yes | Yes | Yes |
Installation
 | Currently there are no firmwares for downloads at Openwrt, thus you will need to build it yourself. However you can use the danitool's precompiled firmware if you are too lazy for building your own. Use it at your own risk: OpenWrt_Backfire_10.03.1-livebox1_redboot.zip OpenWrt_AA_12.09-livebox1_redboot.zip |
- Characteristics of Inventel DV4210 (AKA Livebox):
- the OEM firmware doesn't allow flashing over it's WebUI
- the OEM RedBoot isn't accessible, you cannot stop the RedBoot while loading the system with CTL+C using a serial console.
- the OEM RedBoot only flash their encrypted firmwares.
- Solution:
- Use RGWRepair.exe to replace OEM firmware with elder OEM firmware, this allows to access via telnet to the command line interface.
- replace the OEM RedBoot with an alternative RedBoot without the restrictions.
- Once we have the alternative new RedBoot installed we are ready to install OpenWrt:
- Backup whole flash memory if you want to have the possibility to restore it later. Or continue with the next step, older Inventel's firmwares still can be found elsewhere in the web.
- Replace your current firmware with an old OEM firmware. Firmware versions < 5.04 have a backdoor which allows telnet access . There are howtos elsewhere for gaining access via telnet with this old firmware.
- Once we have telnet access we can replace the original redboot by this one modified by danitool.
REDBOOT_blue5g-16MB_1chip.bin md5sum: 685260e895c891b2fda6b1ab10982b99
In the command line inside the livebox just execute this commands
# /etc/init.d/ramdisk start 16 # cd /mnt/ramdisk/rd1 # wget ftp://your_local_ftp_server/redbootelnet04.rom # fcp -v redbootelnet04.rom /dev/mtd0 Erasing blocks: 3/3 (100%) Writing data: 192k/192k (100%) Verifying data: 192k/192k (100%) # reboot
Ok now we don't have restrictions and can flash unencrypted firmwares, like OpenWrt.
- Get a firmware: you can build it your own or download a precompiled one
OpenWrt_Backfire_10.03.1-livebox1_redboot.zip
OpenWrt_AA_12.09-livebox1_redboot.zip - Now put the firmware into your tftp server.
- Your ip must be
10.7.58.114 - The ethernet cable is connected to the yellow port.
- Start your tftp server!.
- Unplug the livebox, press the button 1 and plug the power cord again, wait 5 seconds and release the button. Wait until the flashing process finish.
- Telnet to 192.168.1.1 and set a root password, or browse to http://192.168.1.1 if LuCI is installed.
Flash Layout
- OEM firmware versions < 5.06.2 (cramfs partitions)
RedBoot> fis list Name FLASH addr Mem addr Length Entry point RedBoot 0xBE400000 0xBE400000 0x00030000 0x00000000 user_fs 0xBE430000 0xBE430000 0x00720000 0x80545FB0 jffs_system 0xBEB50000 0xBEB50000 0x000A0000 0x80545FB0 FIS directory 0xBEBF0000 0xBEBF0000 0x0000F000 0x00000000 RedBoot config 0xBEBFF000 0xBEBFF000 0x00001000 0x00000000
- OEM firmware versions > 5.06.2 (squashfs partitions)
Name FLASH addr Mem addr Length Entry point RedBoot 0xBE400000 0xBE400000 0x00030000 0x00000000 user_fs 0xBE430000 0xBE430000 0x00390000 0x80800000 user_2_fs 0xBE7C0000 0xBE7C0000 0x00390000 0x80800000 jffs_system 0xBEB50000 0xBEB50000 0x000A0000 0x80800000 FIS directory 0xBEBF0000 0xBEBF0000 0x0000F000 0x00000000 RedBoot config 0xBEBFF000 0xBEBFF000 0x00001000 0x00000000
- OpenWrt firmware, the size of partitions depends on the size of the images we will flash.
RedBoot> fis list Name FLASH addr Mem addr Length Entry point RedBoot 0xBE400000 0xBE400000 0x00030000 0x00000000 kernel 0xBE430000 0xBE430000 0x00120000 0x80010000 user_fs 0xBE550000 0xBE550000 0x001A0000 0x80800000 rootfs_data 0xBE6F0000 0xBE6F0000 0x00500000 0x80800000 FIS directory 0xBEBF0000 0xBEBF0000 0x0000F000 0x00000000 RedBoot config 0xBEBFF000 0xBEBFF000 0x00001000 0x00000000
Basic configuration
→ Basic configuration After flashing, proceed with this.
Set up your Internet connection, configure wireless, configure USB port, etc.
Specific Configuration
Interfaces
The default network configuration is:
| Interface Name | Description | Default configuration |
|---|---|---|
| br-lan | LAN & WiFi | 192.168.1.1/24 |
| eth0 | WAN | dhcp |
| eth1 | LAN | bridged |
| wlan0 | WiFi | disabled |
Failsafe mode
Buttons
→ hardware.button on howto use and configure the hardware button(s).
The Livebox has 2 buttons. They are ASSOCIATION BUTTON and PAGE BUTTON. There are no associated events to these buttons in Openwrt by default, you can customize it.
| BUTTON | onboard name | OEM name | Openwrt name | GPIO | SoC pin | action |
|---|---|---|---|---|---|---|
| Button 1 | S2 | ASSOCIATION_BUTTON | BTN_1 | 36 | W25 | not configured |
| Button 2 | S1 | PAGE_BUTTON | BTN_2 | 7 | AD5 | not configured |
| not soldered | S3 | n/a | n/a | n/a | G26 | System Reset |
Leds
The Livebox has 5 leds. Adsl-fail is used as default for indicating the router is on.
| Led | onboard name | GPIO | default trigger | |
|---|---|---|---|---|
| ⚠ | adsl-fail | DS1 | 0 | “default-on” |
| @ | adsl | DS2 | 1 | --- |
| ➤➤ | traffic | DS3 | 2 | --- |
| ✆ | phone | DS4 | 3 | --- |
| ((⚲)) | wifi | DS5 | 4 | --- |
| not soldered | DS6 | 5 | --- | |
| not soldered | DS7 | 6 | conected to the eth1 phy, then always high | |
Read:
System configuration: Leds
to configure the leds
LEDs and gpio6 detail
Hardware
Info
| Instruction set: | MIPS | |
| Vendor: | Broadcom | |
| bootloader: | redboot | |
| System-On-Chip: | Broadcom BCM6348 | |
| CPU/Speed | BMIPS3300 V0.7 / 256 MHz | |
| Flash-Chip: | Spansion S29GL064A11TFIR4 | |
| Flash-Chip Geometry: | 8 KiB block size x 8 bottom boot blocks | |
| 64 KiB block size x 127 main blocks | ||
| Flash size: | 8 MiB | |
| RAM: | Hynix HY57V281620FTP-H / 16 MiB / 133 MHz Samsung K4S281632I-UC75 / 16 MiB / 133 MHz ISSI IS42S16800A-7T / 16 MiB / 143 MHz | DV4210 WS DV4210 WA DV4410 |
| Wireless: | Broadcom 4318 802.11b/g (mini-PCI) PCMCIA | DV4210 DV3210 |
| Ethernet: | 1 internal phy + 1 external phy Altima ac101L 1 internal phy + BCM5325 | DV4210, DV3210 DV4410 |
| Internet: | ADSL2+ | |
| USB: | 1x 1.1 host + 1 slave (udc) | |
| FXS: | slic STLC3055N | |
| Digital Signal Processor: | Texas Instruments TMS320VC5402 | DV3210, DV4410 |
| Bluetooth: | bb4g-t10 (NXP PCD80715HL) module connected via SPI | |
| PSU: | 15V DC 1.2A / Thomson Telecom DSL3594571A | |
| Serial: | Yes | |
| JTAG: | Yes | |
Photos
| Photo of front of the casing, and opening the case | |||
|---|---|---|---|
 |  |  |  |
| Photo of PCB | |||
|---|---|---|---|
| DV4210 | DV4410 | DV3210 | |
 |  |  | |
Thermal Balls
 |  | These are the thermal balls at the board, the bcm6348 SoC has been removed. You can guess how the SoC is wired at the board tracing pins and comparing it with the available bcm6348 pinout. |
Serial
 | The livebox has an external accesible serial port TTL. It is a DEC MMJ connector. You can build a serial TTL adapter, or use those cheap USB adapters for cellphones. Using a TTL USB serial converter is easier, it only uses TX, RX and GND. |
 | Sometimes maybe difficult to find the DEC MMJ connector. We can carefully modify a RJ45 ethernet one to fit it perfectly in the serial port |
Flash-chip
(NOR 56/48-Pin Standard TSOP)
Query identification string:
Primary Algorithm Command Set and Control Interface ID Code: 0x0002 (AMD/Fujitsu Standard Command Set)
16-bit: Manufacturer ID 0x000001 Chip ID 0x001000
Alternate Algorithm Command Set and Control Interface ID Code: 0x0000 (null)
Query system interface information:
Vcc Logic Supply Minimum Write/Erase or Write voltage: 2700 mV
Vcc Logic Supply Maximum Write/Erase or Write voltage: 3600 mV
Vpp [Programming] Supply Minimum Write/Erase voltage: 0 mV
Vpp [Programming] Supply Maximum Write/Erase voltage: 0 mV
Typical timeout per single byte/word program: 128 us
Typical timeout for maximum-size multi-byte program: 128 us
Typical timeout per individual block erase: 1024 ms
Typical timeout for full chip erase: 0 ms
Maximum timeout for byte/word program: 1024 us
Maximum timeout for multi-byte program: 4096 us
Maximum timeout per individual block erase: 16384 ms
Maximum timeout for chip erase: 0 ms
Device geometry definition:
Device Size: 8388608 B (8192 KiB, 8 MiB)
Flash Device Interface Code description: 0x0002 (x8/x16)
Maximum number of bytes in multi-byte program: 32
Number of Erase Block Regions within device: 2
Erase Block Region Information:
Region 0:
Erase Block Size: 8192 B (8 KiB)
Number of Erase Blocks: 8
Region 1:
Erase Block Size: 65536 B (64 KiB)
Number of Erase Blocks: 127
Primary Vendor-Specific Extended Query:
Major version number: 1
Minor version number: 3
Address Sensitive Unlock: Required
Process Technology: CS99
Erase Suspend: Read/write
Sector Protect: 1 sectors per group
Sector Temporary Unprotect: Not supported
Sector Protect/Unprotect Scheme: 29BDS640 mode (Software Command Locking)
Simultaneous Operation: Not supported
Burst Mode Type: Supported
Page Mode Type: 4 word Page
ACC (Acceleration) Supply Minimum: 11500 mV
ACC (Acceleration) Supply Maximum: 12500 mV
Top/Bottom Sector Flag: Bottom boot device
Flash device in physical memory map
BCM6348 SoCs allow only to load a bootloader from the fixed address 0x1FC00000. This restricts the max size of the flash memory to be 4 MB, unless the bootloader makes some trick to allow bigger sizes, like our redboot does:
- The bootloader is first loaded from the physical address 0x1FC00000 (the middle of the flash where the bootloader really lives), and then the bootloader itself remaps whole flash to see the 8MB. The problem is that once remapped the bottom sectors are seen as if they were in the middle of the flash.
JTAG
→ port.jtag general information about the JTAG port, JTAG cable, etc.
To use a simple unbuffered cable we only need to connect TDI, TDO, TMS and TCK. We also may connect the nTRST pin if we need it.
| | The nTRST and nSRST (system reset) are bridged, as a result of this the functionallity of this pin is just acting as a regular system reset. Of course we can separate these pins cutting physically the bridge, but for sure you won't need to do it unless you are experimenting with your JTAG, or if you have a serious brick and you want to use the nTRST functionallity to make a proper TAP reset before flashig |  |
This is the pinout of the 30 pin connector and JTAG testpoints:
Photo of PCB with markings
Use a debrick utility to backup the original firmware, or debrick the device (broken bootloader):
An updated version of debrick on Google Docs
Backup the entire flash
Plug the power cord, wait 4 seconds and enter the command:
nice ./debrick -backup:custom /window:1e400000 /start:1e400000 /length:800000 /silent /notimestamp
If we want to extract partitions we need to reverse endianess:
cat CUSTOM.BIN | ./switchend > backup_livebox.bin
Now for extracting, first we cut the binary accordingly to the flash layout (versions > 5.06.2)
dd if=backup_livebox.bin count=196608 bs=1 skip=0 of=mtd0-Redboot.rom dd if=backup_livebox.bin count=3735552 bs=1 skip=196608 of=mtd1-user_fs.squashfs dd if=backup_livebox.bin count=3735552 bs=1 skip=3932160 of=mtd2-user_2_fs.squashfs dd if=backup_livebox.bin count=655360 bs=1 skip=7667712 of=mtd3-jffs_system.jffs2 dd if=backup_livebox.bin count=61440 bs=1 skip=8323072 of=mtd4-FIS_directory dd if=backup_livebox.bin count=4096 bs=1 skip=8384512 of=mtd5-Redboot.config
Extract squash filesystems:
sudo unsquashfs -i -d user_fs mtd1-user_fs.squashfs sudo unsquashfs -i -d user_2_fs mtd2-user_2_fs.squashfs
Mount the jffs2 filesystem
modprobe mtdram total_size=16384 modprobe mtdblock modprobe jffs2 jffs2dump -b -c -e jffs_system.jffs2 mtd3-jffs_system.jffs2 dd if=jffs_system.jffs2 of=/dev/mtdblock0 mount /dev/mtdblock0 mount/ -t jffs2
Debrick
Debrick the device flashing the redboot:
If your redboot is broken, you can put a new working redboot via JTAG.
First you'll need to do byte reordering with an utility. Use redim (darkfader tool):
./redim *,2,-2 -i redboot.rom -o CUSTOM.BIN
The utility and CUSTOM.BIN already reordered:
http://files.myopera.com/danitool/livebox/redboot03_jtag.zip
Now, plug the power and enter the comand:
rmmod lp nice ./debrick -flash:custom /window:1fc00000 /start:1fc00000 /length:30000 /silent /nodma
If the JTAG utility stops with the message:
Halting Processor ... <Procesor did NOT enter Debug Mode!>
and nothing else happens, then you'll need to deal with System Reset (bridged to nTRST) pin to perform a fast reset before flashing. Also in the BIOS of your PC, you may need to set Parallel Port into ECP, EPP or “Bi-Directional” mode. Read on: IEEE 1284 modes.
Debricking with this method is tested and working fine. This is a successful session of restoring the redboot via JTAG:
[root@tool hairydebrick]# nice ./debrick -flash:custom /window:1fc00000 /start:1fc00000 /length:30000 /silent /nodma ==================================== WRT54G/GS EJTAG Debrick Utility v4.8 ==================================== Probing bus ... Done Instruction Length set to 5 CPU Chip ID: 00000110001101001000000101111111 (0634817F) *** Found a Broadcom BCM6348 Rev 1 CPU chip *** - EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904) - EJTAG Version ....... : 1 or 2.0 - EJTAG DMA Support ... : Yes *** DMA Mode Forced Off *** Issuing Processor / Peripheral Reset ... Done Enabling Memory Writes ... Done Halting Processor ... <Processor Entered Debug Mode!> ... Done Clearing Watchdog ... Done Probing Flash at (Flash Window: 0x1fc00000) ... Done Flash Vendor ID: 00000000000000000000000000000001 (00000001) Flash Device ID: 00000000000000000010001000000000 (00002200) *** Found a AMD 29lv320MB 2Mx16 BotB (4MB) Flash Chip *** - Flash Chip Window Start .... : 1fc00000 - Flash Chip Window Length ... : 00400000 - Selected Area Start ........ : 1fc00000 - Selected Area Length ....... : 00030000 *** You Selected to Flash the CUSTOM.BIN *** ========================= Flashing Routine Started ========================= Total Blocks to Erase: 10 Erasing block: 1 (addr = 1fc00000)...Done Erasing block: 2 (addr = 1fc02000)...Done Erasing block: 3 (addr = 1fc04000)...Done Erasing block: 4 (addr = 1fc06000)...Done Erasing block: 5 (addr = 1fc08000)...Done Erasing block: 6 (addr = 1fc0a000)...Done Erasing block: 7 (addr = 1fc0c000)...Done Erasing block: 8 (addr = 1fc0e000)...Done Erasing block: 9 (addr = 1fc10000)...Done Erasing block: 10 (addr = 1fc20000)...Done Loading CUSTOM.BIN to Flash Memory... Done (CUSTOM.BIN loaded into Flash Memory OK) ========================= Flashing Routine Complete ========================= elapsed time: 4319 seconds *** REQUESTED OPERATION IS COMPLETE *** [root@tool hairydebrick]#
GPIOs
There are 37 GPIOs, but some of them are unused. These seems to be the pretended use of each one, it may depend on the board version (ie: some boards have pccard, or DSP). Depending on the board version, we have plenty of GPIOs exposed on the board, and they can be used freely in OpenWrt.
| GPIO | direction | hardware function | PCB markings |
|---|---|---|---|
| GPIO0 ............. GPIO5 | OUT | leds | livebox_leds.jpg |
| GPIO6 | OUT | AC101L_RESET# and led_DS7 and DSP_RST_N | livebox_gpio6.jpg livebox_dsp.jpg |
| GPIO7 | IN | button 2 | |
| GPIO8, ............., GPIO15 | BI | MII BLK | livebox-gpios-mii.jpg |
| GPIO16, GPIO17, GPIO19 | IN | 1st miniPCI | livebox-pci-gpios.jpg |
| GPIO18, GPIO20 | IN | 2nd miniPCI | livebox-pcmcia_pci2-gpios.jpg |
| GPIO21 | - | NC | |
| GPIO22, ............., GPIO27 | IN | CardBus (PCMCIA) | livebox-pcmcia_pci2-gpios.jpg livebox_pcmcia-gpio-b.jpg |
| GPIO28 | OUT | BT_DECT_RST | livebox_spi_pinout2.jpg |
| GPIO29 | OUT | BCM5325 SPI_SS# | livebox-gpios-mii.jpg |
| GPIO30 | - | NC | |
| GPIO31 | OUT | DECT SPI_SS# | livebox_spi_pinout2.jpg |
| GPIO32 | OUT | BCM5325_MDC or AC101L_MDC | livebox-gpios-mii.jpg |
| GPIO33 | IN | BT_INT | livebox_spi_pinout2.jpg |
| GPIO34 | IN | DECT_INT | |
| GPIO35 | IN | DSP_INT2# | livebox_dsp.jpg |
| GPIO36 | IN | button 1 |
Note: bcm63xx GPIO drivers don't provide IRQs. But GPIO32, GPIO33, GPIO34, GPIO35 can be used as pure IRQs, see → external_irqs
SPI
| Conected to a bluetooth device bb4g-t10 (no information available) If we remove the paper over the bluetooth IC we can see the exact part number: NXP PCD80715HL - (VEGA THUNDERBIRD BASEBAND IC family bought by DSPG) |   |
 | This is the SPI pinout, and some gpios. Note a second twin unsoldered connector, it also has SPI (pads 6, 7, 8, bridged to the bluetooth connector). |
 | The SPI pins are also located here at these testpoints. |
USB
The livebox has two USBs, they work at full speed using the OHCI module:
 | One is a host usb 1.1. In the pic you can see the schematic. |
| | There is a known problem with hotplugging, everytime you plug a device in the usb, the board restarts itself. This maybe caused by a faulty hardware design. We can solve it soldering another electrolytic capacitor in parallel with the 10uF one. Use a 470 uF one (see pic) |  |
 | The second USB port is slave. In OpenWrt this port is totally useless, in fact the preliminary support for UDC has been dropped. You can mod this port to convert it to a host port (see USB Mod), as a result of this you will have two working usb host ports in your board. |
DSP
 | Some liveboxes boards have a TMS320VC5402 Digital Signal Processor like in the DV4410 or DV3210. In the pic you can see relevant GPIOs used by the DSP when present. BTW, it seems there aren't in any case drivers for DSPs  |
CardBus / PCMCIA
On some boards there isn't any CardBus slot soldered leaving 6 exposed GPIOs:
The same pins are also available on the reverse side of the board. There we can also find the second miniPCI slot (unsoldered), with 2 two more GPIOs.
Bootloader Mods
→ you could read about bootloader in general
 | There are several Redboot mods for this board, even those redboots can work with other boards. The redboot sourcecode and the patch used to build redboot: redboot-blue5g.tar.gz |
Redboot RAM
For flashing a new Redboot with Redboot we need a RAM redboot version
redbootRAMBL.img
First gain access Redboot through the serial console.
Or if you already are using a modded Redboot with telnet enabled just use the ethernet cable (yellow port). Use the button1, press while powering on, wait 5 seconds and release the button:
telnet 10.7.58.112 9000
put the redbootRAMBL.img into your tftp server. And then:
RedBoot> load -v redbootRAMBL.img ... RedBoot> go ...
Open another terminal console and telnet it again
telnet 10.7.58.112 9000
be sure you are now using the RAM version:
RedBoot> version RedBoot(tm) bootstrap and debug environment [RAM]
And now flash the new redboot
RedBoot>load -v -r -b 0x80800000 newredboot.rom .... RedBoot>fis create RedBoot -r 0xBE400000 -e 0x00000000 ......
flashcp for flashing a new bootloader
We can also install a new bootloader from inside Openwrt. With the OEM inventel firmware fcp can write the bootloader image to the mtd0 partition. And with Openwrt firmware we can use flashcp (fcp is the old flashcp name).
opkg update opkg install mtd-utils-flashcp
Now proceed with flashing:
root@OpenWrt:/# cd /tmp root@OpenWrt:/# wget ftp://ourlocalserver/newbootloader.rom .... root@OpenWrt:/# flashcp -v newbootloader.rom /dev/mtd0 .....
CFE
There exists a fully featured CFE for the livebox. The board IDs are blue5g9 (DV4210) and blue5g6.3 (livebox pro V1). However not (yet) supported officially by Openwrt. It maybe more comfortable for most users since CFE has a web server for updating firmwares.
| | Here the links for the CFE binary, prebuilt firmwares and the patch for Backfire CFE_blue5g9-nvr.zip livebox1_backfire_firmwares-CFE.zip |
Hardware mods
As a beginner, you really should inform yourself about soldering in general and then obtain some practical experience!
64MiB RAM Mod
 | The RAM and the flash chip are located under the minipci. For this mod you'll need two RAM chips 32 MiB each one. Note this board uses SDR, and each chip is 16bit bus width. Check datasheets before choosing a suitable RAM chip. |
 | Both chips should be identical. And you'll need a custom bootloader to recognize 64 MB, 2 chips (32 bit bus width). Here the custom Redboot/CFE for this and other RAM sizes/confirgurations livebox1-bootloaders-cfe_redboot.zip |
Overclocking
As default the CPU is clocked to 256 MHz. By moving two resistors we can set the frequency to 300 MHz:
 | move R23 to R6, and R1 to R2. After this change you should see these kernel messages: [ 0.000000] CPU frequency is 300 MHz
[ 0.000000] Calibrating delay loop... 297.98 BogoMIPS (lpj=595968) |
5 pull down resistors are used to configure the CPU clock, these resistors are wired to the miniPCI card and also to the flash memory chip. This is the default configuration for 256 MHz:
AD27 -R1 - 4k7 pulldown
AD28 -R2 - NC
AD29 -R6 - NC
AD30 -R23 - 4k7 pulldown
AD31 -R24 - 4k7 pulldown
USB Mod
You can convert your usb slave port to host. See details in the pics:
 | The mod is very simple, but to isolate the USB1_PWRFLT (AD12) is very difficult since you must cut two layers of copper, making a deep ditch. Don't try to isolate the pin (and thus this mod) if you don't know what are you doing. The 470uF electrolytic capacitor is optional but highly recommendable to avoid problems with hotplugging. The capacitors at the D+ D- lines are already present in the board, thus you won't need to solder them. | |
 |     |
|
Now for making it work we need to patch the kernel. This is the patch for Backfire:
--- a/drivers/usb/host/ohci-bcm63xx.c +++ b/drivers/usb/host/ohci-bcm63xx.c @@ -24,7 +24,6 @@ * port 2 can be shared with USB slave, but all boards seem to * have only one host port populated, so we can hardcode it */ - ohci->num_ports = 1; ret = ohci_init(ohci); if (ret < 0) @@ -80,7 +79,7 @@ clk_enable(clk); usb_host_clock = clk; - bcm_rset_writel(RSET_OHCI_PRIV, 0, OHCI_PRIV_REG); + bcm_rset_writel(RSET_OHCI_PRIV, 1, OHCI_PRIV_REG); } else if (BCMCPU_IS_6358()) { reg = bcm_rset_readl(RSET_USBH_PRIV, USBH_PRIV_SWAP_REG);
Build Openwrt with this patch and flash the new firmware, or just replace your ohci-hcd.ko module with the new one in the router. This is a log from dmesg with both USBs working as hosts:
.... .... NET: Registered protocol family 24 nf_conntrack version 0.5.0 (213 buckets, 852 max) ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver bcm63xx_ohci bcm63xx_ohci.0: BCM63XX integrated OHCI controller bcm63xx_ohci bcm63xx_ohci.0: new USB bus registered, assigned bus number 1 bcm63xx_ohci bcm63xx_ohci.0: irq 20, io mem 0xfffe1b00 usb usb1: configuration #1 chosen from 1 choice hub 1-0:1.0: USB hub found hub 1-0:1.0: 2 ports detected Initializing USB Mass Storage driver... usbcore: registered new interface driver usb-storage USB Mass Storage support registered. usb 1-1: new full speed USB device using bcm63xx_ohci and address 2 usb 1-1: configuration #1 chosen from 1 choice scsi0 : SCSI emulation for USB Mass Storage devices scsi 0:0:0:0: CD-ROM Vodafone CD ROM (Huawei) 2.31 PQ: 0 ANSI: 2 usb 1-2: new full speed USB device using bcm63xx_ohci and address 3 usb 1-2: configuration #1 chosen from 1 choice scsi1 : SCSI emulation for USB Mass Storage devices scsi 1:0:0:0: Direct-Access M-Sys Dell Memory Key 4.60 PQ: 0 ANSI: 0 CCS sd 1:0:0:0: [sda] 239872 512-byte logical blocks: (122 MB/117 MiB) sd 1:0:0:0: [sda] Write Protect is off sd 1:0:0:0: [sda] Assuming drive cache: write through sd 1:0:0:0: [sda] Assuming drive cache: write through sda: sda1 sd 1:0:0:0: [sda] Assuming drive cache: write through sd 1:0:0:0: [sda] Attached SCSI removable disk
Firmware mods
Bootlogs
OEM bootlog
96432SDRAM16bit_5GX101201234 Hardware version 0x90 BLUE5G.9 56+678ESA: 30:78:30:30:3a:30 WEP KEY : FFFFFFFFFFFFFFFFFFFFFFFFFF Auto-negotiation timed-out 10 MB Half-Duplex (assumed) Ethernet eth0: MAC address 30:78:30:30:3a:30 IP: 10.7.58.112, Default server: 10.7.58.114 Hardware version 0x10 BLUE5G.9 WITHOUT_OPTION Factory Settings Recovery Switch OFF High Register : 1f RedBoot(tm) bootstrap and debug environment [ROM] Non-certified release, version release-wanadoo-fr - built 16:25:10, Jun 20 2006 Platform: Blue_5g (MIPS32 4Kc) Copyright (C) 2000, 2001, 2002, Red Hat, Inc. RAM: 0x80000000-0x81000000, [0x80445fb0-0x80fe2000] available FLASH: 0xbe400000 - 0xbec00000, 128 blocks of 0x00010000 bytes each. == Executing boot script in 0.050 seconds - enter ^C twice to abort hit ' ' (0x0A) == Executing boot script in 0.040 seconds - enter ^C twice to abort RedBoot> fis load -b 0x80010000 -m cramfs -f Image user_fs Partition is : 0xbe430000 - 0x390000 mlen : 0x36d038 begin_tag : 0xbe79d000, end : 0xbe79d038 Verif OK Looking for Image in cramfs user_fs partition cramfs_load : b 0x80010000, c 0xBE430000, s 0x00390000, f Image unable to find magic Found a valid SQUASHFS superblock on user_fs. Inodes are compressed Data is compressed Fragments are compressed Check data is not present in the filesystem Fragments are present in the filesystem Always_use_fragments option is not specified Duplicates are removed Filesystem size 3590371 bytes Block size 65536 Number of fragments 32 Number of inodes 702 Number of uids 1 Number of gids 0 Scanning existing filesystem... Read existing filesystem, 701 inodes scanned Return with root_try==0 RedBoot> exec -c "boot_loader=RedBoot root=1F01 mem=16M" 0x80010000 root_try == 0 : leave boot cmd alone Now booting linux kernel: Base address 0x8000fc00 Entry 0x80010000 Cmdline : boot_loader=RedBoot root=1F01 mem=16M hwversion=BLUE5G.9-WITHOUT_OPTION redbootversion="release-wanadoo-fr-Jun 20 2006-16:25:10" Linux version 2.6.12.6 (lenerk@rennslxcomp25) (gcc version 3.4.2) #1 Tue Jan 18 16:19:04 CET 2011 C0 config : 2147516544x CPU revision is: 00029107 mpi: No Card is in the PCMCIA slot Determined physical RAM map: memory: 00fa0000 @ 00000000 (usable) memory: 00060000 @ 00fa0000 (reserved) On node 0 totalpages: 4000 DMA zone: 4000 pages, LIFO batch:1 Normal zone: 0 pages, LIFO batch:1 HighMem zone: 0 pages, LIFO batch:1 Built 1 zonelists Kernel command line: boot_loader=RedBoot root=1F01 hwversion=BLUE5G.9-WITHOUT_OPTION redbootversion="release-wanadoo-fr-Jun 20 2006-16:25:10" brcm mips: enabling icache and dcache... Primary instruction cache 16kB, physically tagged, 2-way, linesize 16 bytes. Primary data cache 8kB, 2-way, linesize 16 bytes. Synthesized TLB refill handler (19 instructions). Synthesized TLB load handler fastpath (31 instructions). Synthesized TLB store handler fastpath (31 instructions). Synthesized TLB modify handler fastpath (30 instructions). PID hash table entries: 64 (order: 6, 1024 bytes) Using 128.000 MHz high precision timer. Dentry cache hash table entries: 4096 (order: 2, 16384 bytes) Inode-cache hash table entries: 2048 (order: 1, 8192 bytes) Memory: 13092k/16000k available (1861k kernel code, 2888k reserved, 251k data, 340k init, 0k highmem) Calibrating delay loop... (HZ=200) 255.59 BogoMIPS (lpj=638976) Mount-cache hash table entries: 512 Checking for 'wait' instruction... unavailable. NET: Registered protocol family 16 Squashfs 2.2 (released 2005/07/03) (C) 2002-2005 Phillip Lougher devfs: 2004-01-31 Richard Gooch (rgooch@atnf.csiro.au) devfs: boot_options: 0x1 JFFS2 version 2.2. (C) 2001-2003 Red Hat, Inc. io scheduler noop registered lo:register_netdevice:2847 PPP generic driver version 2.4.2 NET: Registered protocol family 24 initialize redboot parser Found: AMD AM29LV640MB Inventel Blue5G Flash: Found 1 x16 devices at 0x0 in 16-bit bank number of JEDEC chips: 1 cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness. parse_redboot_partitions Searching for RedBoot partition table in Inventel Blue5G Flash at offset 0x7f0000 6 RedBoot partitions found on MTD device Inventel Blue5G Flash Creating 6 MTD partitions on "Inventel Blue5G Flash": 0x00000000-0x00030000 : "RedBoot" 0x00030000-0x003c0000 : "user_fs" 0x003c0000-0x00750000 : "user_2_fs" 0x00750000-0x007f0000 : "jffs_system" 0x007f0000-0x007ff000 : "FIS directory" 0x007ff000-0x00800000 : "RedBoot config" bcm963xx_serial driver v2.0 u32 classifier OLD policer on input device check on NET: Registered protocol family 2 IP: routing cache hash table of 512 buckets, 4Kbytes TCP established hash table entries: 1024 (order: 1, 8192 bytes) TCP bind hash table entries: 1024 (order: 0, 4096 bytes) TCP: Hash tables configured (established 1024 bind 1024) ip_conntrack version 2.1 (125 buckets, 1000 max) - 212 bytes per conntrack ip_tables: (C) 2000-2002 Netfilter core team NET: Registered protocol family 1 NET: Registered protocol family 17 Ebtables v2.0 registered NET: Registered protocol family 8 NET: Registered protocol family 20 VFS: Mounted root (squashfs filesystem) readonly. Mounted devfs on /dev Freeing unused kernel memory: 340k freed init started: BusyBox v1.1.3 (2011.01.18-15:26+0000) multi-call binary init started: BusyBox v1.1.3 (2011.01.18-15:26+0000) multi-call binary Starting pid 15, console /dev/tts/0: '/etc_ro_fs/init.d/sysinit' Algorithmics/MIPS FPU Emulator v1.5 SYSINIT INVENTEL version : v5.11.13-sip-sp Mounting proc filesystem ... Mounting tmpfs filesystem ... > NORMAL BOOT < + [ -f /etc_ro_fs/autoconf.conf ] + . /etc_ro_fs/autoconf.conf + CONFIG_TARGET_NAME=WANADOO + CONFIG_TARGET_NAME_ALTERNATE=y + CONFIG_TARGET_NAME_ALTERNATE_NAME=Livebox + CONFIG_GENERATION_5G=y + CONFIG_GATEWAY_RESIDENTIAL=y + CONFIG_BCM_VARIANT=6348 + CONFIG_LINUX_2_6=y + CONFIG_LB2_NONE=y + CONFIG_RELEASE=y + CONFIG_STRIP_LIBS=y + CONFIG_DEFAULT_KERNEL_CONFIG_FILE=Config-LiveBox1-5G + CONFIG_DEFAULT_BUSYBOX_CONFIG_FILE=Config-Wanadoo-Release + CONFIG_ROOT_SQUASHFS=y + CONFIG_ROOT_SPLIT=y + CONFIG_RELEASE_BASE_DIR_HOME=y + CONFIG_GENERATE_WEBUPDATE=y + CONFIG_GENERATE_WEBUPDATE_COMPLETEUPGRADECLONE=y + CONFIG_GENERATE_WEBUPDATE_PARTIALUPGRADECLONE=y + CONFIG_DEFAULT_UPDATE_DIRECTORY=inventel/blue_5g/wanadoo-sp/release-d + CONFIG_DEFAULT_UPDATE_DIRECTORY_FORCE=y + CONFIG_DEFAULT_UPDATE_MACHINE=developers.inventel.com + CONFIG_DEFAULT_UPDATE_USERNAME=inventel + CONFIG_DEFAULT_UPDATE_PASSWORD=inventel + CONFIG_UPDATE_ALERT=y + CONFIG_UPDATE_AUTOUPDATE_DELAY=1 + CONFIG_UPDATE_AUTOUPDATE_ON_FIRST_PPP=y + CONFIG_AUTOUPDATE_CRON=y + CONFIG_UPDATE_AUTOUPDATE_CRON_DELAY=864000 + CONFIG_VERSION_NAME_MAJOR=5.11 + CONFIG_VERSION_NAME_MINOR_TYPE=. + CONFIG_VERSION_NAME_MINOR=13 + CONFIG_VERSION_NAME_SUFFIX=-sip-sp + CONFIG_VERSION_FQN=v5.11.13-sip-sp + CONFIG_HW_VERSION=1.0 + CONFIG_INCLUDE_PUBKEY=y + CONFIG_PUBKEY_FILENAME=release-wanadoo-fr + CONFIG_ADDRESS_192_168=y + CONFIG_ADDRESS_IP_0=192.168.1.1 + CONFIG_ADDRESS_NETMASK_0=255.255.255.0 + CONFIG_ADDRESS_BROADCAST_0=192.168.1.255 + ADVANCE_MEMORY_CONFIGURATION=y + CONFIG_FLASH_64MBIT=y + CONFIG_SDRAM_128MBIT=y + CONFIG_PAIRABLE_TIMEOUT=600 + CONFIG_STACK_BLUEZ=y + CONFIG_BLUEZ_RFCOMM=y + CONFIG_BLUEZ_SDPD=y + CONFIG_BLUEZ_PAN=y + CONFIG_BT_WATCHDOG=y + CONFIG_BLUETOOTH=y + CONFIG_BTNAME_HOSTNAME=y + CONFIG_BLUETOOTH_OFF=y + CONFIG_BLUETOOTH_ALTERNATE=y + CONFIG_BLUETOOTH_ALTERNATE_VERSION=0x34313832 + CONFIG_DECT_HCI=y + CONFIG_DECT_BUTTON_PAIRING=y + CONFIG_DECT_BUTTON_PAGING=y + CONFIG_DECT_USB_SERIAL=y + CONFIG_DECT_USB=y + CONFIG_DECT_USB_API_G=y + CONFIG_DECT_DISABLE_UPDATE=y + CONFIG_BLUEZ_TEST=y + CONFIG_DEVGATEWAY=y + CONFIG_INCLUDE_ENGLISH_ORANGE_SP=y + CONFIG_INCLUDE_SPANISH_ORANGE=y + CONFIG_DEFAULT_SPANISH_ORANGE=y + CONFIG_ADSL=y + CONFIG_ADSL_RTC=y + CONFIG_ADSL_A2pBT009c1=y + CONFIG_ADSL_PPP_NAME=orangeuser@orangeadsl + CONFIG_ADSL_PPP_PASS=orangeuser123 + CONFIG_ADSLCTL=y + CONFIG_ADSL_MOD_AUTO=y + CONFIG_PPPOE_PASSTHRU=y + CONFIG_ADSL_SET_MAX_UPLOAD_ON_SYNCHRO=y + CONFIG_ADSL_SET_MAX_UPLOAD_ON_SYNCHRO_WOO_SP=y + CONFIG_ADSL_BRIDAGE_WOO_SP=y + CONFIG_ADSL_DEFAULT_BRIDAGE_PROFILE=2 + CONFIG_ADSL_VP=8 + CONFIG_ADSL_VC=35 + CONFIG_ADSL_PROTOCOL=pppoe + CONFIG_ADSL_ENCAPS=LLCMUX + CONFIG_ADSL_MAX_CONNECT_TIME=597600 + CONFIG_BCM_USB=y + CONFIG_BCM_USB_PRODUCT_NAME=Inventel Gateway + CONFIG_USB_HOST=y + CONFIG_USBMGR=y + CONFIG_WIRELESS_LAN=y + CONFIG_WIRELESS_LAN_WEPONLY_HANDLED_BY_NAS=y + CONFIG_WIFI_MAC_FILTER=y + CONFIG_WIFI_BLUETOOTH_COEXISTENCE=y + CONFIG_WIRELESS_BCMTOOLS=y + CONFIG_UPNP=y + CONFIG_EBTABLES=y + CONFIG_IPROUTE2=y + CONFIG_IPROUTE2_IP=y + CONFIG_IPROUTE2_TC=y + CONFIG_REMOTE_MGT=y + CONFIG_COUNTRY_SPAIN=y + CONFIG_SUPPORT_TPSL=y + CONFIG_DHCP_MONITOR=y + CONFIG_SUPPORT_TPSL_ON_DEFAULT=y + CONFIG_SUPPORT_VISIO=y + CONFIG_WIFI_SECURITY_WPA_ONLY=y + CONFIG_DEFINITIVE_PASSWORD=y + CONFIG_WANADOO_SERVER_KIT_DB=y + CONFIG_WANADOO_DB_UPDATE_DELAY=1 + CONFIG_FT_SERVER_KIT_URL=http://suivilb.wanadoo.fr/servlets/maj + CONFIG_FT_SERVER_KIT_COUNTRY_CODE=1034 + CONFIG_FT_UPDATE_SOLUTION=y + CONFIG_FEATURE_UPDATE_FT=y + CONFIG_SUPPORT_FIRMWARE_PUSH=y + CONFIG_SUPPORT_HOMELIVE=y + CONFIG_GENERIC_SPI=y + CONFIG_WEB=y + CONFIG_WEB_LEFT_MENU_STYLE=y + CONFIG_WEB_LOGIN=admin + CONFIG_WEB_PASSWORD=admin + CONFIG_WEB_WANADOO_LIVEBOX_2=y + CONFIG_WEB_ORANGE=y + CONFIG_UPNP_DEFAULT=y + CONFIG_VOIP=y + CONFIG_VOIP_INVH323_UMA_FT=y + CONFIG_VOIP_INVH323_UMA_FT_SECGW=sgw.orange.es + CONFIG_VOIP_INVH323_UMA_FT_QOS=y + CONFIG_DSCP_REMARKING=y + CONFIG_VOIP_RADVISION=y + CONFIG_VOIP_RADVISION_SPAIN=y + [ ! -f /etc_ro_fs/autoconf.conf ] + [ -z y ] + cat /proc/mtd + grep user.*_fs+ cut -f1 -d: + mtdlist=mtd1 mtd2 + [ -h /dev/root ] + ls -al /dev/root + sed s/.* -> mtdblock/mtd/ + mtdroot=mtd1 + echo mtd1 mtd2 + sed s/mtd1// + mtdlist= mtd2 + echo mtd2 + sed s/mtd// + mtdlist=2 + echo 2 2 + echo Try to mount /dev/mtdblock2 on /usr Try to mount /dev/mtdblock2 on /usr + flash_verify /dev/mtd2 0x29032005 Magic: 29032005 /dev/mtd2: opening... /dev/mtd2: reading signature... Signature (48 bytes): 94 00 03 02 00 14 9b 37 26 58 31 f2 32 5a d6 b8 48 1b 13 d1 47 f6 0f b2 6c d4 00 14 69 ec 6d 07 8a a7 b3 34 e9 f1 c3 8a 32 12 34 9a e9 f5 77 a4 /dev/mtd2: hashing... /dev/mtd2: importing public key... /dev/mtd2: verifying hash... /dev/mtd2: verification OK + mount -t squashfs /dev/mtdblock2 /usr + result=0 + [ ! 0 -eq 0 ] + rm -f /var/run/rescue_boot + break + [ ! -e /etc/rc.d ] + rm -f /tmp/touch.test + find /lib/modules// -name prod_test* + insmod /lib/modules//2.6.12.6/extra/prod_test.ko prod_test: module license 'Proprietary' taints kernel. insmod: cannot insert `/lib/modules//2.6.12.6/extra/prod_test.ko': Success (1): Success + [ 1 = 0 ] + [ -n mtd0 ] + cat /proc/mtd dev: size erasesize name mtd0: 00030000 00010000 "RedBoot" mtd1: 00390000 00010000 "user_fs" mtd2: 00390000 00010000 "user_2_fs" mtd3: 000a0000 00010000 "jffs_system" mtd4: 0000f000 00010000 "FIS directory" mtd5: 00001000 00010000 "RedBoot config" + cat /proc/mtd + grep jffs_system + sed -n s/\(mtd\)\(.*\):\(.\)*/\2/p + mount -t jffs2 -o rw /dev/mtdblock3 /mnt/jffs2/jffs2_3 + rm -f /tmp/touch.test + touch /tmp/touch.test + [ ! -e /tmp/touch.test ] + rm -f /tmp/touch.test + [ -e /tmp/touch.test ] + [ ! -f /mnt/jffs2/jffs2_3/etc/issue ] + [ ! -f /mnt/jffs2/jffs2_3/etc/finished ] + cat /etc/issue.bluedsl + grep version + x=INVENTEL version : v5.11.13-sip-sp + cat /etc_ro_fs/issue.bluedsl + grep version + y=INVENTEL version : v5.11.13-sip-sp + [ INVENTEL version : v5.11.13-sip-sp = INVENTEL version : v5.11.13-sip-sp ] + echo Up to date version INVENTEL version : v5.11.13-sip-sp Up to date version INVENTEL version : v5.11.13-sip-sp + [ -f /usr/etc_ro_fs/init.d/usrboot ] + /usr/etc_ro_fs/init.d/usrboot + rm -f /var/run/rescue_boot + [ ! -f /usr/etc/finished ] + grep version + cat /usr/etc/issue.bluedsl + x=INVENTEL version : v5.11.13-sip-sp + cat /usr/etc_ro_fs/issue.bluedsl + grep version + y=INVENTEL version : v5.11.13-sip-sp + [ INVENTEL version : v5.11.13-sip-sp = INVENTEL version : v5.11.13-sip-sp ] + echo /usr up to date version INVENTEL version : v5.11.13-sip-sp /usr up to date version INVENTEL version : v5.11.13-sip-sp + exit 0 + exit 0 Starting pid 99, console /dev/tts/0: '/etc_ro_fs/init.d/rc.sysinit' Mounting other filesystems ... cp: /etc/crontab_root: No such file or directory + echo Switching to RUNLEVEL 1 ... Switching to RUNLEVEL 1 ... + runlevel_manage 1 + local previous + runlevel=1 + [ -f /var/run/runlevel ] + previous=N + [ 1 = N ] + local scriptlist directorylist + directorylist=/etc/rc1.d/:/usr/etc/rc1.d/ + OLDIFS= + IFS=: + scriptlist= + find /etc/rc1.d/ -name K* + sed s,/etc/rc1.d/,, + scriptlist= + find /usr/etc/rc1.d/ -name K* + sed s,/usr/etc/rc1.d/,, + scriptlist= + sort -u + scriptlist= + echo 1 + echo 108 + scriptlist= + find /etc/rc1.d/ -name S* + sed s,/etc/rc1.d/,, + scriptlist=S84usbdect_apig S20network S25update_ft S10adsl S26pair S27http_server S25wireless S22backlight S05hardware S99printkoff S25dhcp_dns_server + find /usr/etc/rc1.d/+ sed s,/usr/etc/rc1.d/,, -name S* + scriptlist=S22usb-host S22upnp S28krtp S85voip S27bluetooth S90post_webupgrade S84usbdect_apig S20network S25update_ft S10adsl S26pair S27http_server S25wireless S22backlight S05hardware S99printkoff S25dhcp_dns_server + echo S22usb-host + sort -u + echo S22upnp + echo S28krtp + echo S85voip + echo S27bluetooth + echo S90post_webupgrade + echo S84usbdect_apig + echo S20network + echo S25update_ft + echo S10adsl + echo S26pair + echo S27http_server + echo S25wireless + echo S22backlight + echo S05hardware + echo S99printkoff + echo S25dhcp_dns_server + scriptlist=S05hardware S10adsl S20network S22backlight S22upnp S22usb-host S25dhcp_dns_server S25update_ft S25wireless S26pair S27bluetooth S27http_server S28krtp S84usbdect_apig S85voip S90post_webupgrade S99printkoff + [ -f /etc/rc1.d/S05hardware ] + realscript=/etc/rc1.d/S05hardware + [ 1 != N ] + number=05hardware + echo 05hardware + cut -c 1-2 + number=05 + echo 05 + suffix=hardware + stop=/etc/rc1.d/K[0-9][0-9]hardware + echo /etc/rc1.d/ + sed s,rc1,rcN, + previous_start=/etc/rcN.d/S[0-9][0-9]hardware + [ -f /etc/rcN.d/S[0-9][0-9]hardware ] + sh /etc/rc1.d/S05hardware start Starting core drivers... Watchdog init Build: Jan 18 2011 16:28:01 irq register OK SPI driver Jan 18 2011 16:28:00 usage: insmod spi.o [debug=1] [tty_low_latency=1] Broadcom BCM6348B0 Ethernet Network Device v0.3 Jan 18 2011 16:17:14 Config Internal PHY Through MDIO BCM63xx_ENET: Auto-negotiation timed-out BCM63xx_ENET: 100 MB Full-Duplex (auto-neg) eth0:register_netdevice:2847 eth0: MAC Address: 00:07:3A:FF:FF:FF Broadcom BCM6348B0 Ethernet Network Device v0.3 Jan 18 2011 16:17:14 Config External PHY Through MDIO eth0 Link UP. BCM63xx_ENET: Auto-negotiation timed-out BCM63xx_ENET: 10 MB Half-Duplex (assumed) eth1:register_netdevice:2847 eth1: MAC Address: 00:07:3A:FF:FF:FF USB MAC ADDRESS belongs to 30:78:30:30:3A:32 USB HOST MAC ADDRESS belongs to 30:78:30:30:3A:33 Broadcom BCM6348B0 USB Network Device v0.4 Jan 18 2011 16:17:15 usb0: MAC Address: 30 78 30 30 3A 32 usb0: Host MAC Address: 30 78 30 30 3A 33 usb0:register_netdevice:2847 Switch module creating proc entry dummy0:register_netdevice:2847 dummy1:register_netdevice:2847 + break + [ -f /etc/rc1.d/S10adsl ] + realscript=/etc/rc1.d/S10adsl + [ 1 != N ] + number=10adsl + echo 10adsl + cut -c 1-2 + number=10 + echo 10 + suffix=adsl + stop=/etc/rc1.d/K[0-9][0-9]adsl + echo /etc/rc1.d/ + sed s,rc1,rcN, + previous_start=/etc/rcN.d/S[0-9][0-9]adsl + [ -f /etc/rcN.d/S[0-9][0-9]adsl ] + sh /etc/rc1.d/S10adsl start Loading ADSL & ATM kernel modules... Starting ADSL daemon... + break + [ -f /etc/rc1.d/S20network ] + realscript=/etc/rc1.d/S20network + [ 1 != N ] + number=20network + echo 20network + cut -c 1-2 + number=20 + echo 20 + suffix=network + stop=/etc/rc1.d/K[0-9][0-9]network + echo /etc/rc1.d/ + sed s,rc1,rcN, + previous_start=/etc/rcN.d/S[0-9][0-9]network + [ -f /etc/rcN.d/S[0-9][0-9]network ] + sh /etc/rc1.d/S20network start BcmAdsl_Initialize=0xC00DF0C8, g_pFnNotifyCallback=0xC00F4034 pSdramPHY=0xA0FFFFF8, 0xD1AA192F 0xDEADDEAD AdslCoreHwReset: AdslOemDataAddr = 0xA0FFDE10 AdslCoreEcUpdTmr: timeMs=-280130 ecUpdMask=0x40000 Local network configuration ... Ethernet network configuration ... Hostname configuration : WANADOO- br0:register_netdevice:2847 device usb0 entered promiscuous mode br1:register_netdevice:2847 device eth0 entered promiscuous mode br1: port 1(eth0) entering learning state device eth1 entered promiscuous mode br0: port 2(eth1) entering learning state br0: port 1(usb0) entering learning state Killing dhcp-monitor with SIGTERM (1/5)... br1: topology change detected, propagating br1: port 1(eth0) entering forwarding state br0: topology change detected, propagating br0: port 2(eth1) entering forwarding state br0: topology change detected, propagating br0: port 1(usb0) entering forwarding state device dummy0 is not a slave of br1 device dummy0 entered promiscuous mode br1: port 2(dummy0) entering learning state + break + [ -f /etc/rc1.d/S22backlight ] + realscript=/etc/rc1.d/S22backlight + [ 1 != N ] + number=22backlight + echo 22backlight + cut -cdevice eth0 left promiscuous mode br1: port 1(eth0) entering disabled state delif eth0 from br1, result: 0 addif eth0 to br1, result: 16 1-2 + number=22 + echo 22 + suffix=backlight + stop=/etc/rc1.d/K[0-9][0-9]backlight + echo /etc/rc1.d/ + sed s,rc1,rcN, + previous_start=/etc/rcN.d/S[0-9][0-9]backlight + [ -f /etc/rcN.d/S[0-9][0-9]backlight ] + sh /etc/rc1.d/S22backlight start Update Backlight state On Advanced Device open failed: Address family not supported by protocol + break + [ -f /etc/rc1.d/S22upnp ] + [ -f /usr/etc/rc1.d/S22upnp ] + realscript=/usr/etc/rc1.d/S22upnp + [ 1 != N ] br1: topology change detected, propagating br1: port 2(dummy0) entering forwarding state + number=22upnp + echo 22upnp + cut -c 1-2 + number=22 + echo 22 + suffix=upnp + stop=/usr/etc/rc1.d/K[0-9][0-9]upnp + echo /usr/etc/rc1.d/ + sed s,rc1,rcN, + previous_start=/usr/etc/rcN.d/S[0-9][0-9]upnp + [ -f /usr/etc/rcN.d/S[0-9][0-9]upnp ] device eth0 entered promiscuous mode br1: port 1(eth0) entering learning state addif eth0 to br1, result: 0 device eth1 left promiscuous mode br0: port 2(eth1) entering disabled state delif eth1 from br0, result: 0 addif eth1 to br0, result: 16 + sh /usr/etc/rc1.d/S22upnp start No ADSL, default: abc0 Upnp init ... br1: topology change detected, propagating br1: port 1(eth0) entering forwarding state device eth1 entered promiscuous mode br0: port 2(eth1) entering learning state addif eth1 to br0, result: 0 MyConfig in /usr/etc/upnp.conf: Debug=0 descDocName: gatedesc.xml xmlPath: /usr/etc/linuxigd g_iptables: iptables g_forwardChainName: upnp g_preroutingChainName: upnp g_upstreamBitrate: 0 g_downstreamBitrate: 0 TGU: IpAddress: 192.168.1.1 + break + [ -f /etc/rc1.d/S22usb-host ] + [ -f /usr/etc/rc1.d/S22usb-host ] + realscript=/usr/etc/rc1.d/S22usb-host + [ 1 != N ] + number=22usb-host + echo 22usb-host + cut -c 1-2 + number=22 + echo 22 + suffix=usb-host + stop=/usr/etc/rc1.d/K[0-9][0-9]usb-host + echo /usr/etc/rc1.d/ + sed s,rc1,rcN, INFO : IGD root device successfully registered. + previous_start=/usr/etc/rcN.d/S[0-9][0-9]usb-host + [ -f /usr/etc/rcN.d/S[0-9][0-9]usb-host ] + sh /usr/etc/rc1.d/S22usb-host start br0: topology change detected, propagating br0: port 2(eth1) entering forwarding state usbcore: registered new driver usbfs usbcore: registered new driver hub ohci-hcd: 2004 Nov 08 USB 1.1 'Open' Host Controller (OHCI) Driver (PCI) PCI: Enabling device 0000:00:09.0 (0000 -> 0002) PCI: Setting latency timer of device 0000:00:09.0 to 64 ohci-hcd 0000:00:09.0: PCI device 14e4:6300 (Broadcom Corporation) ohci-hcd 0000:00:09.0: new USB bus registered, assigned bus number 1 ohci-hcd 0000:00:09.0: irq 20, io mem 0xfffe1b00 hub 1-0:1.0: USB hub found hub 1-0:1.0: 2 ports detected usbmgr[448]: start 0.4.8 usbmgr[448]: sleep time -1 micro sec Name: /usr/etc/usbmgr/usbmgr.conf Load_from_file: /usr/etc/usbmgr/preload.conf + break + [ -f /etc/rc1.d/S25dhcp_dns_server ] + realscript=/etc/rc1.d/S25dhcp_dns_server + [ 1 != N ] + number=25dhcp_dns_server + echo 25dhcp_dns_server + cut -c 1-2 + number=25 + echo 25 + suffix=dhcp_dns_server + stop=/etc/rc1.d/K[0-9][0-9]dhcp_dns_server + echo /etc/rc1.d/ + sed s,rc1,rcN, + previous_start=/etc/rcN.d/S[0-9][0-9]dhcp_dns_server + [ -f /etc/rcN.d/S[0-9][0-9]dhcp_dns_server ] + sh /etc/rc1.d/S25dhcp_dns_server start usbmgr[450]: buffer line: remove T usbmgr[450]: class:0x9 subclass:0x0 protocol:0x0 usbmgr[450]: try /usr/etc/usbmgr/class/09/00/00/module usbmgr[450]: try /usr/etc/usbmgr/class/09/00/module usbmgr[450]: try /usr/etc/usbmgr/class/09/module usbmgr[450]: try /usr/etc/usbmgr/class/module usbmgr[450]: USB device isn't matched the configuration dnsmasq configured as dhcp server sagem INFO : Advertisements Sent. Listening for requests ... sagem sagem sagem sagem sagem thomson thomson dnsmasq start ( DNS / DHCP server ) ... dnsmasq -o -r/etc/resolv.dnsmasq -z --dhcp-range=192.168.1.9,192.168.1.200,24h --dhcp-leasefile=/etc/dhcp.leases --dhcp-vendorclass novendor_sagem,sagem --dhcp-vendorclass novendor_thomson,thomson --dhcp-userclass nouser_sagem,IAD5116 --dhcp-userclass nouser_sagem,IAD61-17 --dhcp-userclass nouser_sagem,IAD80-16 --dhcp-userclass nouser_sagem,ITAD80-16 HD --dhcp-userclass nouser_sagem,ITAD81-160 --dhcp-userclass nouser_sagem,ITAD81 FT --dhcp-userclass nouser_thomson,IP921F --dhcp-userclass nouser_thomson,IP2031F --dhcp-userclass nouser_mltv,STB_MLTV --dhcp-userclass nouser_mltv,PC_MLTV --dhcp-ignore=nouser_mltv --dhcp-ignore=novendor_thomson,nouser_thomson --dhcp-ignore=novendor_sagem,nouser_sagem [p2] iface->name: br0 [p2] iface->name: lo + break + [ -f /etc/rc1.d/S25update_ft ] + realscript=/etc/rc1.d/S25update_ft + [ 1 != N ] + number=25update_ft + echo 25update_ft + cut -c 1-2 + number=25 + echo 25 + suffix=update_ft + stop=/etc/rc1.d/K[0-9][0-9]update_ft + echo+ sed s,rc1,rcN, /etc/rc1.d/ + previous_start=/etc/rcN.d/S[0-9][0-9]update_ft + [ -f /etc/rcN.d/S[0-9][0-9]update_ft ] + sh /etc/rc1.d/S25update_ft start France Telecom Firmware Update Client v1.12 Copyright Inventel 2005-2006 + break + [ -f /etc/rc1.d/S25wireless ] + realscript=/etc/rc1.d/S25wireless + [ 1 != N ] + number=25wireless + echo 25wireless + cut -c 1-2 + number=25 + echo 25 + suffix=wireless + stop=/etc/rc1.d/K[0-9][0-9]wireless + echo /etc/rc1.d/+ sed s,rc1,rcN, + previous_start=/etc/rcN.d/S[0-9][0-9]wireless + [ -f /etc/rcN.d/S[0-9][0-9]wireless ] + sh /etc/rc1.d/S25wireless start PCI: Setting latency timer of device 0000:00:01.0 to 64 PCI: Enabling device 0000:00:01.0 (0004 -> 0006) wl0:register_netdevice:2847 wl0: Broadcom BCM4318 802.11 Wireless Controller 3.131.35.0.cpe0.0 [p2] wl_event, bssid idx: 0 [p2] wl_event, dev: 00000000 [p2] dev == NULL, using wl->dev [p2] wl_event, dev->name: wl0 [p2] wlc_sendup_event, bssid:0 device wl0 entered promiscuous mode [p2] wl_event, bssid idx: 0 [p2] wl_event, dev: 00000000 [p2] dev == NULL, using wl->dev [p2] wl_event, dev->name: wl0 [p2] wlc_sendup_event, bssid:0 br0: port 3(wl0) entering learning state + break + [ -f /etc/rc1.d/S26pair ] + realscript=/etc/rc1.d/S26pair + [ 1 != N ] + number=26pair + echo 26pair + cut -c 1-2 + number=26 + echo 26 + suffix=pair + stop=/etc/rc1.d/K[0-9][0-9]pair + sed s,rc1,rcN, + echo /etc/rc1.d/ + previous_start=/etc/rcN.d/S[0-9][0-9]pair + [ -f /etc/rcN.d/S[0-9][0-9]pair ] + sh /etc/rc1.d/S26pair start Bad run level ... + break + [ -f /etc/rc1.d/S27bluetooth ] + [ -f /usr/etc/rc1.d/S27bluetooth ] Starting pairing manager br0: topology change detected, propagating br0: port 3(wl0) entering forwarding state + realscript=/usr/etc/rc1.d/S27bluetooth + [ 1 != N ] + number=27bluetooth + echo 27bluetooth + cut -c 1-2 + number=27 + echo 27 + suffix=bluetooth + stop=/usr/etc/rc1.d/K[0-9][0-9]bluetooth + echo /usr/etc/rc1.d/ + sed s,rc1,rcN, + previous_start=/usr/etc/rcN.d/S[0-9][0-9]bluetooth + [ -f /usr/etc/rcN.d/S[0-9][0-9]bluetooth ] + sh /usr/etc/rc1.d/S27bluetooth start Param: Update Backlight state On Advanced Device open failed: Address family not supported by protocol s_backlight : 1 Function cleanup_link_keys wifi_nb : 0 0 link keys removed /sbin/iwpriv wl0 del_mac ff:ff:ff:ff:ff:ff /sbin/iwpriv wl0 maccmd 0 Bluetooth configuration ... Bluetooth: Core ver 2.7 NET: Registered protocol family 31 Bluetooth: HCI device and connection manager initialized Bluetooth: HCI socket layer initialized Bluetooth: L2CAP ver 2.7 Bluetooth: L2CAP socket layer initialized Bluetooth: RFCOMM ver 1.5 Bluetooth: RFCOMM socket layer initialized Bluetooth: BNEP (Ethernet Emulation) ver 1.2 Bluetooth: HCI UART driver ver 2.1 Bluetooth: HCI H4 protocol initialized Bluetooth: HCI BCSP protocol initialized Bluetooth: SCO (Voice Link) ver 0.4 Bluetooth: SCO socket layer initialized üttySPI, 391Khz SPI: use CS0 on hardware that way have CS0 and CS2 linked, GPIOmode_grp1 configured to use PC-Card ttySPI, 391Khz ttySPI, 781Khz ttySPI, 781Khz ttySPI, 781Khz Hardware version: 0x31303032 - Software version: 0x34313832 Bluetooth is OFF in this configuration. Disable scan and exit. + break + [ -f /etc/rc1.d/S27http_server ] + realscript=/etc/rc1.d/S27http_server + [ 1 != N ] + number=27http_server + echo 27http_server + cut -c 1-2 + number=27 + echo 27 + suffix=http_server + stop=/etc/rc1.d/K[0-9][0-9]http_server + echo /etc/rc1.d/ + sed s,rc1,rcN, + previous_start=/etc/rcN.d/S[0-9][0-9]http_server + [ -f /etc/rcN.d/S[0-9][0-9]http_server ] + sh /etc/rc1.d/S27http_server start Websrv start ... + break + [ -f /etc/rc1.d/S28krtp ] + [ -f /usr/etc/rc1.d/S28krtp ] + realscript=/usr/etc/rc1.d/S28krtp + [ 1 != N ] + number=28krtp + echo 28krtp + cut -c 1-2 + number=28 + echo 28 + suffix=krtp + stop=/usr/etc/rc1.d/K[0-9][0-9]krtp + echo /usr/etc/rc1.d/ + sed s,rc1,rcN, + previous_start=/usr/etc/rcN.d/S[0-9][0-9]krtp + [ -f /usr/etc/rcN.d/S[0-9][0-9]krtp ] + sh /usr/etc/rc1.d/S28krtp start krtp start ... + break + [ -f /etc/rc1.d/S84usbdect_apig ] + realscript=/etc/rc1.d/S84usbdect_apig + [ 1 != N ] + number=84usbdect_apig + cut -c 1-2 + echo 84usbdect_apig + number=84 + echo 84 + suffix=usbdect_apig + stop=/etc/rc1.d/K[0-9][0-9]usbdect_apig + echo /etc/rc1.d/ + sed s,rc1,rcN, + previous_start=/etc/rcN.d/S[0-9][0-9]usbdect_apig + [ -f /etc/rcN.d/S[0-9][0-9]usbdect_apig ] + sh /etc/rc1.d/S84usbdect_apig start USB DECT Upper driver installed + break + [ -f /etc/rc1.d/S85voip ] + [ -f /usr/etc/rc1.d/S85voip ] + realscript=/usr/etc/rc1.d/S85voip + [ 1 != N ] + number=85voip + echo 85voip + cut -c 1-2 + number=85 + echo 85 + suffix=voip + stop=/usr/etc/rc1.d/K[0-9][0-9]voip + echo /usr/etc/rc1.d/ + sed s,rc1,rcN, + previous_start=/usr/etc/rcN.d/S[0-9][0-9]voip + [ -f /usr/etc/rcN.d/S[0-9][0-9]voip ] + sh /usr/etc/rc1.d/S85voip start Module upper_dect_driver is ready iptables: No chain/target/match by that name iptables: No chain/target/match by that name iptables: No chain/target/match by that name voip start... + break + [ -f /etc/rc1.d/S90post_webupgrade ] + [ -f /usr/etc/rc1.d/S90post_webupgrade ] + realscript=/usr/etc/rc1.d/S90post_webupgrade + [ 1 != N ] + number=90post_webupgrade + echo 90post_webupgrade + cut -c 1-2 + number=90 + echo 90 + suffix=post_webupgrade + stop=/usr/etc/rc1.d/K[0-9][0-9]post_webupgrade + echo /usr/etc/rc1.d/ + sed s,rc1,rcN, + previous_start=/usr/etc/rcN.d/S[0-9][0-9]post_webupgrade + [ -f /usr/etc/rcN.d/S[0-9][0-9]post_webupgrade ] + sh /usr/etc/rc1.d/S90post_webupgrade start [post_webupgrade] Detected 'start' from rc script during a normal boot. I will not start services now + break + [ -f /etc/rc1.d/S99printkoff ] + realscript=/etc/rc1.d/S99printkoff + [ 1 != N ] + number=99printkoff + echo 99printkoff + cut -c 1-2 + number=99 + echo 99 + suffix=printkoff + stop=/etc/rc1.d/K[0-9][0-9]printkoff + echo /etc/rc1.d/ + sed s,rc1,rcN, + previous_start=/etc/rcN.d/S[0-9][0-9]printkoff + [ -f /etc/rcN.d/S[0-9][0-9]printkoff ] + sh /etc/rc1.d/S99printkoff start Setting printk off + break + rm -f /var/run/rc.pid + rm -f /var/run/runlevel_in_progress + rm -f /var/run/init_in_progress_stage + echo 1 Sysinit done Please press Enter to activate this console.
Openwrt bootlog
9655432SDRAM16bitX10120123456+678 ESA: 30:78:30:30:3a:30 WEP KEY : FFFFFFFFFFFFFFFFFFFFFFFFFF Auto-negotiation timed-out 10 MB Half-Duplex (assumed) Ethernet eth0: MAC address 30:78:30:30:3a:30 IP: 10.7.58.112, Default server: 10.7.58.114 Hardware version 0x90, mask=0x7E Hardware version 0x10 (masked) BLUE5G.9 DV4210 Factory Settings Recovery Switch OFF RedBoot(tm) bootstrap and debug environment [ROM] unlocked release, eCos 2.0b1 - built 01:06:01, Mar 1 2012 Platform: Blue_5g (MIPS32 4Kc) Copyright (C) 2000, 2001, 2002, Red Hat, Inc. RAM: 0x80000000-0x81000000, [0x80435e50-0x80fe2000] available FLASH: 0xbe400000 - 0xbec00000, 128 blocks of 0x00010000 bytes each. == Executing boot script in 20.000 seconds - enter ^C twice to abort hit '' (0x01) == Executing boot script in 19.990 seconds - enter ^C twice to abort RedBoot> fis load -b 0x80010000 -d kernel -- Redboot version without crypt_verify -- Image loaded from 0x80010000-0x80275a58 RedBoot> exec -c "noinitrd mem=16M" 0x80010000 Now booting linux kernel: Base address 0x8000fc00 Entry 0x80010000 Cmdline : noinitrd mem=16M changing Kseg0 coherency algorithm to write back... enabling icache and dcache... Linux version 2.6.32.27 (dani@tool) (gcc version 4.3.3 (GCC) ) #29 Thu Mar 1 01:06:46 CET 2012 Detected Broadcom 0x6348 CPU revision b0 CPU frequency is 256 MHz 16MB of RAM installed registering 37 GPIOs board_livebox: Hardware version 0x90 BLUE5G.9 RAC_CR0 = 0x15, RAC_CR1 = 0x2000000 C0 register($16, 0): 0x80008083 C0 register($22, 0): 0xe3880000 board_livebox: resetting gpio6 for eth1... bootconsole [early0] enabled CPU revision is: 00029107 (Broadcom BCM6348) board_livebox: board name: Livebox Determined physical RAM map: memory: 01000000 @ 00000000 (usable) Zone PFN ranges: Normal 0x00000000 -> 0x00001000 Movable zone start PFN for each node early_node_map[1] active PFN ranges 0: 0x00000000 -> 0x00001000 Built 1 zonelists in Zone order, mobility grouping off. Total pages: 4064 Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200 PID hash table entries: 64 (order: -4, 256 bytes) Dentry cache hash table entries: 2048 (order: 1, 8192 bytes) Inode-cache hash table entries: 1024 (order: 0, 4096 bytes) Primary instruction cache 16kB, VIPT, 2-way, linesize 16 bytes. Primary data cache 8kB, 2-way, VIPT, no aliases, linesize 16 bytes Memory: 13564k/16384k available (1980k kernel code, 2820k reserved, 353k data, 120k init, 0k highmem) Hierarchical RCU implementation. NR_IRQS:128 Calibrating delay loop... 254.97 BogoMIPS (lpj=509952) Mount-cache hash table entries: 512 NET: Registered protocol family 16 detected mtd start address 0x1FC00000, but forcing to 0x1e400000... registering PCI controller with io_map_base unset bio: create slab <bio-0> at 0 Switching to clocksource MIPS PCI: Enabling device 0000:00:01.0 (0000 -> 0002) ssb: Sonics Silicon Backplane found on PCI device 0000:00:01.0 NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 512 (order: 0, 4096 bytes) TCP bind hash table entries: 512 (order: -1, 2048 bytes) TCP: Hash tables configured (established 512 bind 512) TCP reno registered NET: Registered protocol family 1 audit: initializing netlink socket (disabled) type=2000 audit(0.328:1): initialized squashfs: version 4.0 (2009/01/31) Phillip Lougher Registering mini_fo version $Id$ JFFS2 version 2.2. (NAND) (SUMMARY) © 2001-2006 Red Hat, Inc. msgmni has been set to 26 io scheduler noop registered io scheduler deadline registered (default) gpiodev: gpio device registered with major 254 gpiodev: gpio platform device registered with access mask FFFFFFFF bcm63xx_uart.0: ttyS0 at MMIO 0xfffe0300 (irq = 10) is a bcm63xx_uart console [ttyS0] enabled, bootconsole disabled console [ttyS0] enabled, bootconsole disabled bcm963xx_flash: 0x00800000 at 0x1e400000 bcm963xx: Found 1 x16 devices at 0x0 in 16-bit bank CFI mfr 0x00000001 CFI id 0x00001000 Amd/Fujitsu Extended Query Table at 0x0040 Amd/Fujitsu Extended Query version 1.3. number of CFI chips: 1 cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness. bcm963xx_flash: Read Signature value of bcm963xx_flash: assuming RedBoot bootloader bcm963xx_flash: Support for extended flash memory size : 0xf1c ; ONLY 64MBIT SUPPORT Searching for RedBoot partition table in bcm963xx at offset 0x7f0000 Creating 6 MTD partitions on "bcm963xx": 0x000000000000-0x000000030000 : "RedBoot" 0x000000030000-0x000000150000 : "kernel" 0x000000150000-0x000000390000 : "user_fs" 0x000000390000-0x0000007f0000 : "rootfs_data" 0x0000007f0000-0x0000007ff000 : "FIS directory" 0x0000007ff000-0x000000800000 : "RedBoot config" bcm63xx_enet MII bus: probed bcm63xx_enet MII bus: probed bcm63xx_wdt started, timer margin: 30 sec Registered led device: adsl-fail Registered led device: adsl Registered led device: traffic Registered led device: phone Registered led device: wifi TCP westwood registered NET: Registered protocol family 17 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> VFS: Mounted root (squashfs filesystem) readonly on device 31:2. Freeing unused kernel memory: 120k freed Please be patient, while OpenWrt loads ... ^@- preinit - Press the [f] key and hit [enter] to enter failsafe mode - regular preinit - switching to jffs2 mini_fo: using base directory: / mini_fo: using storage directory: /overlay - init - Please press Enter to activate this console. bcm63xx_enet bcm63xx_enet.0: attached PHY at address 1 [Broadcom BCM63XX (1)] device eth0 entered promiscuous mode bcm63xx_enet bcm63xx_enet.1: attached PHY at address 31 [Generic PHY] eth0: link UP - 100/full - flow control off br-lan: port 1(eth0) entering forwarding state Compat-wireless backport release: compat-wireless-2011-11-29 Backport based on wireless-testing.git master-2011-12-01 cfg80211: Calling CRDA to update world regulatory domain cfg80211: World regulatory domain updated: cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp) cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) cfg80211: (2457000 KHz - 2482000 KHz @ 20000 KHz), (300 mBi, 2000 mBm) cfg80211: (2474000 KHz - 2494000 KHz @ 20000 KHz), (300 mBi, 2000 mBm) cfg80211: (5170000 KHz - 5250000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) cfg80211: (5735000 KHz - 5835000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) SCSI subsystem initialized usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb b43-phy0: Broadcom 4318 WLAN found (core revision 9) Registered led device: b43-phy0::tx Registered led device: b43-phy0::rx Registered led device: b43-phy0::radio Broadcom 43xx driver loaded [ Features: PL ] PPP generic driver version 2.4.2 ip_tables: (C) 2000-2006 Netfilter Core Team NET: Registered protocol family 24 nf_conntrack version 0.5.0 (213 buckets, 852 max) ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver bcm63xx_ohci bcm63xx_ohci.0: BCM63XX integrated OHCI controller bcm63xx_ohci bcm63xx_ohci.0: new USB bus registered, assigned bus number 1 bcm63xx_ohci bcm63xx_ohci.0: irq 20, io mem 0xfffe1b00 usb usb1: configuration #1 chosen from 1 choice hub 1-0:1.0: USB hub found hub 1-0:1.0: 1 port detected Initializing USB Mass Storage driver... usbcore: registered new interface driver usb-storage USB Mass Storage support registered. BusyBox v1.15.3 (2012-02-15 19:17:10 CET) built-in shell (ash) Enter 'help' for a list of built-in commands. _______ ________ __ | |.-----.-----.-----.| | | |.----.| |_ | - || _ | -__| || | | || _|| _| |_______|| __|_____|__|__||________||__| |____| |__| W I R E L E S S F R E E D O M Backfire (10.03.1, r30365) ------------------------ * 1/3 shot Kahlua In a shot glass, layer Kahlua * 1/3 shot Bailey's on the bottom, then Bailey's, * 1/3 shot Vodka then Vodka. --------------------------------------------------- root@OpenWrt:/#
Notes
Hardware Versions
With this kernel code we can get the hardware version:
u32 val; unsigned char hw_version; val = bcm_gpio_readl(GPIO_CTL_LO_REG); val &= ~0x000000FF; bcm_gpio_writel(val, GPIO_CTL_LO_REG); hw_version = (unsigned char)bcm_gpio_readl(GPIO_DATA_LO_REG) & 0xFF; printk("Hardware version 0x%02X \n", hw_version);
But probably should be masked either with 0x7E or 0xFE
Example:
hardware version = 0x90
masked hardware version = 0x90 & 0x7E = 0x10
Known hardware versions (masked):
| masked hw version (mask=0x7E) | BLUE 5G name |
|---|---|
| 0x02 | BLUE5G.2 |
| 0x08 | BLUE5G.3 |
| 0x06 | BLUE5G.4 |
| 0x04 | BLUE5G.4_mod1 |
| 0x0A | BLUE5G.6 |
| 0x0A | BLUE5G.8 |
| 0x10 | BLUE5G.9 |
but for BLUE7G boards:
| masked hw version (mask=0xFE) | BLUE7G name |
|---|---|
| 0x40 | BLUE7G.3/7G.4 AOL |
| 0x42 | BLUE7G.3/7G.4 INVENTEL |
| 0x46 | BLUE7G.3/7G.4 INVENTEL WIFI READY |
| 0x44 | BLUE7G.4 BT |
| 0x48 | BLUE7G.4 FASTWEB |
| 0x4A | BLUE7G.5 AOL |
| 0x4C | BLUE7G.5 INVENTEL |
| 0x4E | BLUE7G.5 INVENTEL WIFI READY |
| 0xA0 | BLUE7G.5 BT |
| 0xA2 | BLUE7G.5 FASTWEB |
Also we can find the hardware version printed on the board
