NETGEAR N450/CG3000Dv2

The Netgear N450/CG3000Dv2 is a Docsis 3.0 cable modem combined with a four port gigabit switch and a Wi-Fi modem. It is built with the same PCB as the CG3000-2STAUS but is lacking voice over IP capabilities and an RJ45 WAN port. Adding the WAN port may be as easy as soldering in a jack, but the VoIP functionality would require adding multiple parts.

Currently not suppported.

Under Construction!
This page is currently under construction. You can edit the article to help completing it.

Architecture MIPS
Vendor Broadcom
bootloader ?
System-On-Chip Broadcom BCM3383
CPU/Speed BMIPS?? / ? MHz
NAND Flash Spansion S34ML01G200TF100 SLC NAND Flash Memory
NAND Flash size 128 MiB
SPI Flash Macronix MX25L8006E SPI Flash
SPI Flash size 8 MiB
RAM-Chip Samsung K4B1G1646G DDR3 SDRAM
RAM size 128 MiB
Wireless Broadcom 802.11b/g/n
Ethernet Broadcom 10BASE-T, 100/1000BASE-Tx
USB Two USB 2.0
Serial Two 3.3v TTL serial ports
JTAG Probably

Router front

Router rear

Board top

Board bottom

There are two 3.3v TTL serial ports, both connecting at 115200, 8, N, 1, software flow control.

UART0 (J20) gives what appears to be a non-interactive console for the eCos part of the modem/router.

1UART1 (J21) gives an interactive console for the Linux part of the modem/router. Login with username: root, password: broadcom

Notes:
1. UART1 may be disabled on some OEM firmware releases. See below.

Bootlogs are dependent on the currently deployed OEM firmware release which can vary depending on your ISP.

Firmware version 3.01.17 appears to disable the serial port on UART1; therefore there is no accompanying Linux Bootlog seen on that port.

BCM338332 TP0 346890 Reset Switch - Low GPIO-32 50ms MemSize: 128 M Chip ID: BCM3383G-B0 BootLoader Version: 2.4.0beta1R8 Pre-release Gnu spiboot reduced DDR drive linux Build Date: Apr 15 2013 Build Time: 15:17:07 SPI flash ID 0xc22014, size 1MB, block size 64KB, write buffer 256, flags 0x0 NAND flash: Device size 128 MB, Block size 128 KB, Page size 2048 B parameter offset is 40936 Signature/PID: a0df NandFlashRead: Reading offset 0x1f40000, length 0x5c Image 1 Program Header: Signature: a0df Control: 0005 Major Rev: 0003 Minor Rev: 0000 Build Time: 2017/7/3 03:05:14 Z File Length: 4520243 bytes Load Address: 80004000 Filename: 0001N450-100NAS_V3.01.16u.bin HCS: 4922 CRC: 3e86e9ee Found image 1 at offset 2040000 NandFlashRead: Reading offset 0x2840000, length 0x5c Image 2 Program Header: Signature: a0df Control: 0005 Major Rev: 0003 Minor Rev: 0000 Build Time: 2017/9/22 01:17:45 Z File Length: 4521990 bytes Load Address: 80004000 Filename: 0001N450-100NAS_V3.01.17u.bin HCS: 30cf CRC: e23cd806 Found image 2 at offset 2940000 NandFlashRead: Reading offset 0x3140000, length 0x5c Image 3 Program Header: Signature: a0df Control: 0005 Major Rev: 0002 Minor Rev: 0017 Build Time: 2017/9/22 01:01:37 Z File Length: 1507236 bytes Load Address: 84010000 Filename: CG3000D_2TCNAS_K2630V3.01.17nu.bin HCS: 10e4 CRC: 3447f162 Found image 3 at offset 3240000 NandFlashRead: Reading offset 0x3140000, length 0x200 NandFlashRead: Reading offset 0x3140200, length 0x16fe00 Performing CRC on Image 3... CRC time = 219484070 Detected LZMA compressed image... decompressing... Target Address: 0x84010000 decompressSpace is 0x8000000 Elapsed time 729988980 Decompressed length: 6284126 Done Copying Root File System... NandFlashRead: Reading offset 0x2840000, length 0x200 NandFlashRead: Reading offset 0x2840200, length 0x44fe62 NandFlashRead: 1 errors reading buffer at offset 28ee200 Performing CRC on Image 2... CRC time = 321043847 Detected LZMA compressed image... decompressing... Target Address: 0x80004000 decompressSpace is 0x8000000 Elapsed time 3050741930 Decompressed length: 23281496 Copying partition table to 0x83fffc04 240 Copying partition table to 0x80000904 240 Executing Image 2... eCos - hal_diag_init Init device '/dev/BrcmTelnetIoDriver' Init device '/dev/ttydiag' Init tty channel: 816379a8 Init device '/dev/tty0' Init tty channel: 816379c8 Init device '/dev/haldiag' HAL/diag SERIAL init Init device '/dev/ser0' BCM 33XX SERIAL init - dev: b4e00500.2 Set output buffer - buf: 0x81859b50 len: 4096 Set input buffer - buf: 0x8185ab50 len: 4096 BCM 33XX SERIAL config Init device '/dev/ser1' BCM 33XX SERIAL init - dev: b4e00520.3 Set output buffer - buf: 0x8185bb50 len: 4096 Set input buffer - buf: 0x8185cb50 len: 4096 BCM 33XX SERIAL config Init device '/dev/ser2' InitBoard: MIPS frequency 637200000 [00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers: (BFC Target) Configuring/Loading Flash driver... [00:00:00 01/01/1970] [tStartup] BcmSpiFlashDevice::DetectFlash: (SPI Flash Device Factory) WARNING - Detected SPI flash with JEDEC ID =0xc22014 Waited 296 iterations after device ID read NAND flash: Device size 128 MB, Block size 128 KB, Page size 2048 B [00:00:00 01/01/1970] [tStartup] BcmNandFlashDevice::DetectNandFlash: (NAND Flash Device Factory) WARNING - Detected NAND flash with JEDEC ID =0x1f1801d Found bootloader flash map at 0x80000904. [00:00:00 01/01/1970] [tStartup] FlashDeviceDriver::SpiFlashPlaceRegions: (Flash Driver C API) WARNING - Partition falls out of range of device 0. Placing in device 1... [00:00:00 01/01/1970] [tStartup] FlashDeviceDriver::SpiFlashPlaceRegions: (Flash Driver C API) WARNING - Partition falls out of range of device 0. Placing in device 1... [00:00:00 01/01/1970] [tStartup] FlashDeviceDriver::SpiFlashPlaceRegions: (Flash Driver C API) WARNING - Partition falls out of range of device 0. Placing in device 1... [00:00:00 01/01/1970] [tStartup] FlashDeviceDriver::SpiFlashPlaceRegions: (Flash Driver C API) WARNING - Partition falls out of range of device 0. Placing in device 1... [00:00:00 01/01/1970] [tStartup] FlashDeviceDriver::SpiFlashPlaceRegions: (Flash Driver C API) WARNING - Partition falls out of range of device 0. Placing in device 1... [00:00:00 01/01/1970] [tStartup] FlashDeviceDriver::SpiFlashPlaceRegions: (Flash Driver C API) WARNING - Partition falls out of range of device 0. Placing in device 1... [00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers: (BFC Target) Loading BootloaderStore driver... [00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers: (BFC Target) Loading ProgramStore driver... ProgramStoreDeviceDriver::ProgramStoreDriverInit: INFO - Initializing... [00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers: (BFC Target) Loading NonVol driver... [00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers: (BFC Target) Storage drivers initialized successfully. [00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitDeviceAbstractions: (BFC Target) Creating singletons for ProgramStore/BootloaderStore/NonVol devices... Detecting the next image number that we will store to by default... Bootloader indicates we are running image 2 By default, we will dload to image number 1! [00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitDeviceAbstractions: (BFC Target) Device abstraction singletons created successfully. Init TWC US Table 0 Init TWC US Table 1 Init TWC US Table 2 Init TWC US Table 3 BcmPcpClientServiceAppIf::GetSingletonInstance: WARNING - the singleton is NULL, and someone is accessing it! Reading Permanent settings from non-vol... [00:00:00 01/01/1970] [PowerOnTimeKeeperThread Thread] PowerOnTimeKeeperThread::ThreadMain: (PowerOnTimeKeeperThread Thread) PowerOnTimeKeeper Thread is running... Checksum for permanent settings: 0x8e12ed58 [00:00:00 01/01/1970] [tStartup] BcmWiFi80211SromNonVolSettings::ReadFromImpl: (WiFi 802.11 Srom NonVol Settings) WARNING - Read older version of the settings (0.1); they have been upgraded to version 0.2, preserving original settings. Setting downstream calibration signature to '' [00:00:00 01/01/1970] [tStartup] BcmDocsisCmDownstreamCalibrationNonVolSettings::ReadFromImpl: (DOCSIS CM Downstream Calibration NonVol Settings) WARNING - Read older version of the settings (2.0); they have been upgraded to version 2.1, preserving original settings. [00:00:00 01/01/1970] [tStartup] BcmCmVendorNonVolSettings::ReadFromImpl: (CM Netgear NonVol Settings) WARNING - Read older version of the settings (0.9); they have been upgraded to version 0.12, preserving original settings. [00:00:00 01/01/1970] [tStartup] BcmSpectrumAnalyzerNonVolSettings::IsDefault: (Spectrum Analyzer NonVol Settings) Permanent settings are default! * * * One or more of the settings groups was missing, possibly as a result of a code upgrade. * * * * * One or more of the settings groups was upgraded. * * Settings were read and verified. Reading Dynamic settings from non-vol... Checksum for dynamic settings: 0xa87b0979 BcmPcpClientServiceAppIf::GetSingletonInstance: WARNING - the singleton is NULL, and someone is accessing it! Settings were read and verified. Reading Vendor settings from non-vol... Checksum for Vendor settings: 0xd9c2a080 Settings were read and verified. [00:00:00 01/01/1970] [tStartup] BcmEpsCmDocsisSystem::Initialize: (BFC System) ERROR - Disable console port now! [00:00:00 01/01/1970] [Reset/Standby Switch Thread] BcmResetStandbySwitchThread::ProcessResetSwitchEvent: (Reset/Standby Switch Thread) Reset switch released; resetting... [00:00:00 01/01/1970] [Reset/Standby Switch Thread] BcmResetStandbySwitchThread::ProcessResetSwitchEvent: (Reset/Standby Switch Thread) Cant Reset pfCmDocsisCtlThread==NULL... Creating a new host MSG PROC DQM manager. Instance: 83ed148c, DQM_REGS = b8601800, CTRL_REGS = b8601000 Initializing main MSP DQM interrupts. b8601000: 01800008 b8601004: 00000000 b8601008: 00000008 b860100c: 00000000 b8601010: 000c0000 b8601014: 00000000 b8601018: 00000000 b860101c: 00000000 Creating a new host FAP DQM manager. Instance: 83ed4f88 Initializing main FAP DQM interrupts. b8401000: 00000008 b8401004: 00000000 b8401008: 00000008 b840100c: 00000000 b8401010: 00000000 b8401014: 00000000 b8401018: 00000000 b840101c: 00000000 Creating a new host PMC DQM manager. Instance: 83ed2368, DQM_REGS = b8801800, CTRL_REGS = b8801000 Initializing main PMC DQM interrupts. b8801000: 00000000 b8801004: 00000000 b8801008: 00000008 b880100c: 00000000 b8801010: 00000000 b8801014: 00000000 b8801018: 00000000 b880101c: 00000000 Creating a new host PMC DQM manager. Instance: 83ed22e8, DQM_REGS = b8801800, CTRL_REGS = b8801000 Initializing main DTP DQM interrupts. b8201000: 0000004c b8201004: 00000000 b8201008: 00000008 b820100c: 00000000 b8201010: 00000000 b8201014: 00040000 b8201018: 00000000 b820101c: 00000000 Creating a new host FAP DQM manager. Instance: 82f00894 Creating a new host FAP DQM manager. Instance: 82f007ac Creating a new host UTP DQM manager. Instance: 82efc6b0 Initializing main UTP DQM interrupts. b8001000: 00000049 b8001004: 00000000 b8001008: 00000008 b800100c: 00000000 b8001010: 00000001 b8001014: 00000000 b8001018: 00000000 b800101c: 00000000 Initalizing Gfap Hal.. LNA Detected = BCM3413 Positive Saturation Positive Saturation ADC Clocks aligned Initializing all 8 downstreams - this takes a while. Patience, Grasshopper... 1 2 3 4 5 6 7 8 Creating a new host UTP DQM manager. Instance: 82ebf9e4 Creating a new host UTP DQM manager. Instance: 82eaf5f4 Creating a new host UTP DQM manager. Instance: 82eaf52c Powering UP switch. PIN = 14 Creating a new host MSG PROC DQM manager. Instance: 82eaec60, DQM_REGS = b8601800, CTRL_REGS = b8601000 Creating a new host MSG PROC DQM manager. Instance: 82eaeb98, DQM_REGS = b8601800, CTRL_REGS = b8601000 Creating a new host MSG PROC DQM manager. Instance: 82eae9f4, DQM_REGS = b8601800, CTRL_REGS = b8601000 Creating a new host MSG PROC DQM manager. Instance: 82eae7f4, DQM_REGS = b8601800, CTRL_REGS = b8601000 Creating a new host FAP DQM manager. Instance: 82eae5f4 Creating a new host FAP DQM manager. Instance: 82eae3ec Creating a new host MPEG PROC DQM manager. Instance: 82eae1e4, DQM_REGS = b8a01800, CTRL_REGS = b8a01000 Initializing main MEP DQM interrupts. b8a01000: 00000008 b8a01004: 00000000 b8a01008: 00000008 b8a0100c: 00000000 b8a01010: 00000000 b8a01014: 00000000 b8a01018: 00000000 b8a0101c: 00000000 Creating a new host MPEG PROC DQM manager. Instance: 82eadfec, DQM_REGS = b8a01800, CTRL_REGS = b8a01000 Creating a new host MSG PROC DQM manager. Instance: 82e95034, DQM_REGS = b8601800, CTRL_REGS = b8601000 Creating a new host MSG PROC DQM manager. Instance: 82e94e2c, DQM_REGS = b8601800, CTRL_REGS = b8601000 Creating a new host MSG PROC DQM manager. Instance: 82e94d74, DQM_REGS = b8601800, CTRL_REGS = b8601000 Creating a new host MSG PROC DQM manager. Instance: 82e92c90, DQM_REGS = b8601800, CTRL_REGS = b8601000 Creating a new host MSG PROC DQM manager. Instance: 82e92c28, DQM_REGS = b8601800, CTRL_REGS = b8601000 Register Int Handler: busNo = 1, device = 0 Creating a new host PMC DQM manager. Instance: 82d97afc, DQM_REGS = b8801800, CTRL_REGS = b8801000 Creating a new host MPEG PROC DQM manager. Instance: 82a8bc88, DQM_REGS = b8a01800, CTRL_REGS = b8a01000 Creating a new host MPEG PROC DQM manager. Instance: 829211cc, DQM_REGS = b8a01800, CTRL_REGS = b8a01000 Creating a new host MPEG PROC DQM manager. Instance: 8292111c, DQM_REGS = b8a01800, CTRL_REGS = b8a01000 Creating a new host PMC DQM manager. Instance: 82f62be8, DQM_REGS = b8801800, CTRL_REGS = b8801000


BCM338332 TP0 346890 Reset Switch - Low GPIO-32 50ms MemSize: 128 M Chip ID: BCM3383G-B0 BootLoader Version: 2.4.0beta1R8 Pre-release Gnu spiboot reduced DDR drive linux Build Date: Apr 15 2013 Build Time: 15:17:07 SPI flash ID 0xc22014, size 1MB, block size 64KB, write buffer 256, flags 0x0 NAND flash: Device size 128 MB, Block size 128 KB, Page size 2048 B parameter offset is 40936 Signature/PID: a0df NandFlashRead: Reading offset 0x1f40000, length 0x5c Image 1 Program Header: Signature: a0df Control: 0005 Major Rev: 0003 Minor Rev: 0000 Build Time: 2015/12/24 02:45:08 Z File Length: 4460665 bytes Load Address: 80004000 Filename: 0001N450-100NAS_V3.01.06u.bin HCS: 7768 CRC: 8557ad58 Found image 1 at offset 2040000 NandFlashRead: Reading offset 0x2840000, length 0x5c NandFlashRead: Reading offset 0x3140000, length 0x5c Image 3 Program Header: Signature: a0df Control: 0005 Major Rev: 0002 Minor Rev: 0017 Build Time: 2015/12/24 02:38:17 Z File Length: 1507236 bytes Load Address: 84010000 Filename: CG3000D_2TCNAS_K2630V3.01.06nu.bin HCS: 397c CRC: 979a4649 Found image 3 at offset 3240000 NandFlashRead: Reading offset 0x3140000, length 0x200 NandFlashRead: Reading offset 0x3140200, length 0x16fe00 Performing CRC on Image 3... CRC time = 210254496 Detected LZMA compressed image... decompressing... Target Address: 0x84010000 decompressSpace is 0x8000000 Elapsed time 733141540 Decompressed length: 6301023 Done Copying Root File System... NandFlashRead: Reading offset 0x1f40000, length 0x200 NandFlashRead: Reading offset 0x1f40200, length 0x440ed5 Performing CRC on Image 1... CRC time = 310373412 Detected LZMA compressed image... decompressing... Target Address: 0x80004000 decompressSpace is 0x8000000 Elapsed time 3017165660 Decompressed length: 22777536 Copying partition table to 0x83fffc04 240 Copying partition table to 0x80000904 240 Executing Image 1... eCos - hal_diag_init Init device '/dev/BrcmTelnetIoDriver' Init device '/dev/ttydiag' Init tty channel: 815bc910 Init device '/dev/tty0' Init tty channel: 815bc930 Init device '/dev/haldiag' HAL/diag SERIAL init Init device '/dev/ser0' BCM 33XX SERIAL init - dev: b4e00500.2 Set output buffer - buf: 0x817cd790 len: 4096 Set input buffer - buf: 0x817ce790 len: 4096 BCM 33XX SERIAL config Init device '/dev/ser1' BCM 33XX SERIAL init - dev: b4e00520.3 Set output buffer - buf: 0x817cf790 len: 4096 Set input buffer - buf: 0x817d0790 len: 4096 BCM 33XX SERIAL config Init device '/dev/ser2' InitBoard: MIPS frequency 637200000 [00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers: (BFC Target) Configuring/Loading Flash driver... [00:00:00 01/01/1970] [tStartup] BcmSpiFlashDevice::DetectFlash: (SPI Flash Device Factory) WARNING - Detected SPI flash with JEDEC ID =0xc22014 Waited 296 iterations after device ID read NAND flash: Device size 128 MB, Block size 128 KB, Page size 2048 B [00:00:00 01/01/1970] [tStartup] BcmNandFlashDevice::DetectNandFlash: (NAND Flash Device Factory) WARNING - Detected NAND flash with JEDEC ID =0x1f1801d Found bootloader flash map at 0x80000904. [00:00:00 01/01/1970] [tStartup] FlashDeviceDriver::SpiFlashPlaceRegions: (Flash Driver C API) WARNING - Partition falls out of range of device 0. Placing in device 1... [00:00:00 01/01/1970] [tStartup] FlashDeviceDriver::SpiFlashPlaceRegions: (Flash Driver C API) WARNING - Partition falls out of range of device 0. Placing in device 1... [00:00:00 01/01/1970] [tStartup] FlashDeviceDriver::SpiFlashPlaceRegions: (Flash Driver C API) WARNING - Partition falls out of range of device 0. Placing in device 1... [00:00:00 01/01/1970] [tStartup] FlashDeviceDriver::SpiFlashPlaceRegions: (Flash Driver C API) WARNING - Partition falls out of range of device 0. Placing in device 1... [00:00:00 01/01/1970] [tStartup] FlashDeviceDriver::SpiFlashPlaceRegions: (Flash Driver C API) WARNING - Partition falls out of range of device 0. Placing in device 1... [00:00:00 01/01/1970] [tStartup] FlashDeviceDriver::SpiFlashPlaceRegions: (Flash Driver C API) WARNING - Partition falls out of range of device 0. Placing in device 1... [00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers: (BFC Target) Loading BootloaderStore driver... [00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers: (BFC Target) Loading ProgramStore driver... ProgramStoreDeviceDriver::ProgramStoreDriverInit: INFO - Initializing... [00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers: (BFC Target) Loading NonVol driver... [00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers: (BFC Target) Storage drivers initialized successfully. [00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitDeviceAbstractions: (BFC Target) Creating singletons for ProgramStore/BootloaderStore/NonVol devices... Detecting the next image number that we will store to by default... Bootloader indicates we are running image 1 By default, we will dload to image number 2! [00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitDeviceAbstractions: (BFC Target) Device abstraction singletons created successfully. Init TWC US Table 0 Init TWC US Table 1 Init TWC US Table 2 Init TWC US Table 3 BcmPcpClientServiceAppIf::GetSingletonInstance: WARNING - the singleton is NULL, and someone is accessing it! Reading Permanent settings from non-vol... [00:00:00 01/01/1970] [PowerOnTimeKeeperThread Thread] PowerOnTimeKeeperThread::ThreadMain: (PowerOnTimeKeeperThread Thread) PowerOnTimeKeeper Thread is running... Checksum for permanent settings: 0xec8fc5d2 Setting downstream calibration signature to '' Settings were read and verified. Reading Dynamic settings from non-vol... Checksum for dynamic settings: 0xd026364e Settings were read and verified. Reading Vendor settings from non-vol... Checksum for Vendor settings: 0x86725f22 Settings were read and verified. [00:00:00 01/01/1970] [tStartup] BcmEpsCmDocsisSystem::Initialize: (BFC System) ERROR - Disable console port now! [00:00:00 01/01/1970] [Reset/Standby Switch Thread] BcmResetStandbySwitchThread::ProcessResetSwitchEvent: (Reset/Standby Switch Thread) Reset switch released; resetting... [00:00:00 01/01/1970] [Reset/Standby Switch Thread] BcmResetStandbySwitchThread::ProcessResetSwitchEvent: (Reset/Standby Switch Thread) Cant Reset pfCmDocsisCtlThread==NULL... Creating a new host MSG PROC DQM manager. Instance: 83f18724, DQM_REGS = b8601800, CTRL_REGS = b8601000 Initializing main MSP DQM interrupts. b8601000: 01800008 b8601004: 00000000 b8601008: 00000008 b860100c: 00000000 b8601010: 000c0000 b8601014: 00000000 b8601018: 00000000 b860101c: 00000000 Creating a new host FAP DQM manager. Instance: 83f18634 Initializing main FAP DQM interrupts. b8401000: 00000008 b8401004: 00000000 b8401008: 00000008 b840100c: 00000000 b8401010: 00000000 b8401014: 00000000 b8401018: 00000000 b840101c: 00000000 Creating a new host PMC DQM manager. Instance: 83f1a004, DQM_REGS = b8801800, CTRL_REGS = b8801000 Initializing main PMC DQM interrupts. b8801000: 00000000 b8801004: 00000000 b8801008: 00000008 b880100c: 00000000 b8801010: 00000000 b8801014: 00000000 b8801018: 00000000 b880101c: 00000000 Creating a new host PMC DQM manager. Instance: 83f19f84, DQM_REGS = b8801800, CTRL_REGS = b8801000 Initializing main DTP DQM interrupts. b8201000: 0000004c b8201004: 00000000 b8201008: 00000008 b820100c: 00000000 b8201010: 00000000 b8201014: 00040000 b8201018: 00000000 b820101c: 00000000 Creating a new host FAP DQM manager. Instance: 82f13c7c Creating a new host FAP DQM manager. Instance: 82f13b94 Creating a new host UTP DQM manager. Instance: 82f0fa98 Initializing main UTP DQM interrupts. b8001000: 00000049 b8001004: 00000000 b8001008: 00000008 b800100c: 00000000 b8001010: 00000001 b8001014: 00000000 b8001018: 00000000 b800101c: 00000000 Initalizing Gfap Hal.. LNA Detected = BCM3413 ADC Clocks aligned Initializing all 8 downstreams - this takes a while. Patience, Grasshopper... 1 2 3 4 5 6 7 8 Creating a new host UTP DQM manager. Instance: 82ed2dcc Creating a new host UTP DQM manager. Instance: 82ec29dc Creating a new host UTP DQM manager. Instance: 82ec2914 Powering UP switch. PIN = 14 Creating a new host MSG PROC DQM manager. Instance: 82ec2048, DQM_REGS = b8601800, CTRL_REGS = b8601000 Creating a new host MSG PROC DQM manager. Instance: 82ec1f80, DQM_REGS = b8601800, CTRL_REGS = b8601000 Creating a new host MSG PROC DQM manager. Instance: 82ec1ddc, DQM_REGS = b8601800, CTRL_REGS = b8601000 Creating a new host MSG PROC DQM manager. Instance: 82ec1bdc, DQM_REGS = b8601800, CTRL_REGS = b8601000 Creating a new host FAP DQM manager. Instance: 82ec19dc Creating a new host FAP DQM manager. Instance: 82ec17d4 Creating a new host MPEG PROC DQM manager. Instance: 82ec15cc, DQM_REGS = b8a01800, CTRL_REGS = b8a01000 Initializing main MEP DQM interrupts. b8a01000: 00000008 b8a01004: 00000000 b8a01008: 00000008 b8a0100c: 00000000 b8a01010: 00000000 b8a01014: 00000000 b8a01018: 00000000 b8a0101c: 00000000 Creating a new host MPEG PROC DQM manager. Instance: 82ec13d4, DQM_REGS = b8a01800, CTRL_REGS = b8a01000 Creating a new host MSG PROC DQM manager. Instance: 82ea8a18, DQM_REGS = b8601800, CTRL_REGS = b8601000 Creating a new host MSG PROC DQM manager. Instance: 82ea8810, DQM_REGS = b8601800, CTRL_REGS = b8601000 Creating a new host MSG PROC DQM manager. Instance: 82ea8758, DQM_REGS = b8601800, CTRL_REGS = b8601000 Creating a new host MSG PROC DQM manager. Instance: 82ea6694, DQM_REGS = b8601800, CTRL_REGS = b8601000 Creating a new host MSG PROC DQM manager. Instance: 82ea662c, DQM_REGS = b8601800, CTRL_REGS = b8601000 Register Int Handler: busNo = 1, device = 0 Creating a new host PMC DQM manager. Instance: 82dd2458, DQM_REGS = b8801800, CTRL_REGS = b8801000 wps_main: upnp I/F not up yet... Creating a new host MPEG PROC DQM manager. Instance: 82aad404, DQM_REGS = b8a01800, CTRL_REGS = b8a01000 Creating a new host MPEG PROC DQM manager. Instance: 82949cb8, DQM_REGS = b8a01800, CTRL_REGS = b8a01000 Creating a new host MPEG PROC DQM manager. Instance: 82949c08, DQM_REGS = b8a01800, CTRL_REGS = b8a01000 wps_main: upnp I/F not up yet... Creating a new host PMC DQM manager. Instance: 82487e84, DQM_REGS = b8801800, CTRL_REGS = b8801000


[ 0.000000] Linux version 2.6.30-1.0.10mp4 (dennis@Apple) (gcc version 4.2.3) #1 Thu Dec 24 10:29:57 C5 [ 0.000000] BCM93383 reference design prom init [ 0.000000] args: 2 0x87000000 [ 0.000000] CPU revision is: 00019070 (MIPS 4KEc) [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 03e00000 @ 04000000 (usable) [ 0.000000] User-defined physical RAM map: [ 0.000000] memory: 03fd0000 @ 04000000 (usable) [ 0.000000] memory: 00000000 @ 00000000 (usable) [ 0.000000] Zone PFN ranges: [ 0.000000] DMA 0x00004000 -> 0x00001000 [ 0.000000] Normal 0x00001000 -> 0x00007fd0 [ 0.000000] Movable zone start PFN for each node [ 0.000000] early_node_map[1] active PFN ranges [ 0.000000] 0: 0x00004000 -> 0x00007fd0 [ 0.000000] On node 0 totalpages: 16336 [ 0.000000] free_area_init_node: node 0, pgdat 8448b360, node_mem_map 844db000 [ 0.000000] Normal zone: 128 pages used for memmap [ 0.000000] Normal zone: 16208 pages, LIFO batch:3 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16208 [ 0.000000] Kernel command line: console=ttyS0,115200 ubi.mtd=linuxkfs ubi.mtd=linuxapps root=ubi0:rootfs ro noinitr0 [ 0.000000] Primary instruction cache 16kB, VIPT, 4-way, linesize 16 bytes. [ 0.000000] Primary data cache 8kB, 2-way, VIPT, no aliases, linesize 16 bytes [ 0.000000] RCU-based detection of stalled CPUs is enabled. [ 0.000000] NR_IRQS:128 [ 0.000000] PID hash table entries: 256 (order: 8, 1024 bytes) [ 0.000000] console [ttyS0] enabled [ 0.001000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) [ 0.002000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) [ 0.023000] Memory: 59732k/65344k available (3544k kernel code, 5536k reserved, 1048k data, 136k init, 0k highmem) [ 0.025000] Calibrating delay loop... 316.41 BogoMIPS (lpj=158208) [ 0.047000] Mount-cache hash table entries: 512 [ 0.074000] net_namespace: 748 bytes [ 0.077000] NET: Registered protocol family 16 [ 0.089000] Added platform devs for chip ID = 0x33830032! [ 0.169000] bio: create slab <bio-0> at 0 [ 0.182000] SCSI subsystem initialized [ 0.188000] usbcore: registered new interface driver usbfs [ 0.193000] usbcore: registered new interface driver hub [ 0.196000] usbcore: registered new device driver usb [ 0.202000] NET: Registered protocol family 8 [ 0.203000] NET: Registered protocol family 20 [ 0.228000] NET: Registered protocol family 2 [ 0.234000] IP route cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.245000] TCP established hash table entries: 2048 (order: 2, 16384 bytes) [ 0.253000] TCP bind hash table entries: 2048 (order: 1, 8192 bytes) [ 0.259000] TCP: Hash tables configured (established 2048 bind 2048) [ 0.265000] TCP reno registered [ 0.270000] NET: Registered protocol family 1 [ 0.293000] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.299000] squashfs: version 4.0 with LZMA457 ported by BRCM [ 0.308000] NTFS driver 2.1.29 [Flags: R/W]. [ 0.313000] JFFS2 version 2.2. (NAND) �© 2001-2006 Red Hat, Inc. [ 0.321000] fuse init (API version 7.11) [ 0.328000] msgmni has been set to 116 [ 0.335000] alg: No test for cipher_null (cipher_null-generic) [ 0.342000] alg: No test for ecb(cipher_null) (ecb-cipher_null) [ 0.350000] alg: No test for digest_null (digest_null-generic) [ 0.357000] alg: No test for compress_null (compress_null-generic) [ 0.383000] alg: No test for stdrng (krng) [ 0.388000] io scheduler noop registered (default) [ 0.413000] PPP generic driver version 2.4.2 [ 0.422000] NET: Registered protocol family 24 [ 0.443000] <<<<<<<<< rpc_init >>>>>>>>> [ 0.447000] rpc_register_functions registered service 0: 1 functions [ 0.457000] rpc_init send handshake message [ 0.462000] bcm9338x_mtd driver v1.0 [ 0.465000] <<<<<<<<< rpc_init >>>>>>>>> [ 0.469000] Benign Warning: Redundant rpc_init() [ 0.474000] <<<<< dqm_init_func beef0002 >>>>> [ 0.478000] RPC Version 00000003 [ 0.482000] DQM Init complete for dqm tunnel 0 [ 0.486000] <<<<< dqm_init_func beef0001 >>>>> [ 0.491000] cpu_idle CPU 0 [ 0.494000] Flash device 0: Nor 4 partitions bs: 00010000 ps: 00000100 [ 0.501000] 4 partitions [ 0.503000] mtd offset size name [ 0.507000] 0 00000000 00010000 bootloader [ 0.512000] 1 00010000 00010000 permnv [ 0.517000] 2 000c0000 00040000 dynnv [ 0.521000] 3 00020000 00010000 vennv [ 0.526000] Flash device 1: Nand 6 partitions bs: 00020000 ps: 00000800 [ 0.532000] 6 partitions [ 0.535000] mtd offset size name [ 0.539000] 0 01f40000 00900000 image1 [ 0.544000] 1 02840000 00900000 image2 [ 0.612000] 2 03160000 00460000 linux [ 0.616000] 3 00020000 01f20000 linuxapps [ 0.621000] 4 07de0000 00220000 dhtml [ 0.626000] 5 035e0000 047e0000 linuxkfs [ 0.630000] Creating 4 MTD partitions on "bcmmtd_vflash_device": [ 0.636000] 0x000000000000-0x000000010000 : "bootloader" [ 0.652000] 0x000000010000-0x000000020000 : "permnv" [ 0.665000] 0x0000000c0000-0x000000100000 : "dynnv" [ 0.679000] 0x000000020000-0x000000030000 : "vennv" [ 0.691000] Creating 6 MTD partitions on "bcmmtd_vflash_device": [ 0.698000] 0x000001f40000-0x000002840000 : "image1" [ 0.727000] 0x000002840000-0x000003140000 : "image2" [ 0.756000] 0x000003160000-0x0000035c0000 : "linux" [ 0.778000] 0x000000020000-0x000001f40000 : "linuxapps" [ 0.844000] 0x000007de0000-0x000008000000 : "dhtml" [ 0.862000] 0x0000035e0000-0x000007dc0000 : "linuxkfs" [ 0.996000] bcm9338x Linux services init [ 1.000000] rpc_register_functions registered service 1: 10 functions [ 1.012000] UBI: attaching mtd9 to ubi0 [ 1.016000] UBI: physical eraseblock size: 131072 bytes (128 KiB) [ 1.022000] UBI: logical eraseblock size: 126976 bytes [ 1.027000] UBI: smallest flash I/O unit: 2048 [ 1.032000] UBI: VID header offset: 2048 (aligned 2048) [ 1.038000] UBI: data offset: 4096 [ 15.373000] rpc_send_request timeouts 1 total timeouts 1 clean 1596 [ 22.039000] rpc_send_request timeouts 1 total timeouts 2 clean 1849 [ 30.045000] UBI: attached mtd9 to ubi0 [ 30.049000] UBI: MTD device name: "linuxkfs" [ 30.054000] UBI: MTD device size: 71 MiB [ 30.059000] UBI: number of good PEBs: 575 [ 30.064000] UBI: number of bad PEBs: 0 [ 30.068000] UBI: max. allowed volumes: 128 [ 30.072000] UBI: wear-leveling threshold: 4096 [ 30.077000] UBI: number of internal volumes: 1 [ 30.081000] UBI: number of user volumes: 1 [ 30.086000] UBI: available PEBs: 1 [ 30.090000] UBI: total number of reserved PEBs: 574 [ 30.095000] UBI: number of PEBs reserved for bad PEB handling: 5 [ 30.101000] UBI: max/mean erase counter: 1/0 [ 30.105000] UBI: attaching mtd7 to ubi1 [ 30.109000] UBI: physical eraseblock size: 131072 bytes (128 KiB) [ 30.115000] UBI: logical eraseblock size: 126976 bytes [ 30.120000] UBI: smallest flash I/O unit: 2048 [ 30.125000] UBI: VID header offset: 2048 (aligned 2048) [ 30.131000] UBI: data offset: 4096 [ 30.136000] UBI: background thread "ubi_bgt0d" started, PID 168 [ 41.267000] UBI: attached mtd7 to ubi1 [ 41.271000] UBI: MTD device name: "linuxapps" [ 41.277000] UBI: MTD device size: 31 MiB [ 41.281000] UBI: number of good PEBs: 249 [ 41.286000] UBI: number of bad PEBs: 0 [ 41.290000] UBI: max. allowed volumes: 128 [ 41.295000] UBI: wear-leveling threshold: 4096 [ 41.299000] UBI: number of internal volumes: 1 [ 41.304000] UBI: number of user volumes: 1 [ 41.308000] UBI: available PEBs: 0 [ 41.312000] UBI: total number of reserved PEBs: 249 [ 41.317000] UBI: number of PEBs reserved for bad PEB handling: 2 [ 41.323000] UBI: max/mean erase counter: 3/2 [ 41.329000] UBI: background thread "ubi_bgt1d" started, PID 171 [ 41.341000] usbcore: registered new interface driver libusual [ 41.347000] Serial: BCM63XX driver $Revision: 1.1.1.1 $ [ 41.353000] ttyS0 at MMIO 0xb4e00520 (irq = 11) is a BCM63XX [ 41.361000] bcmvenet: bcmvenet_probe [ 41.365000] <<<<<<<<< rpc_init >>>>>>>>> [ 41.369000] Benign Warning: Redundant rpc_init() [ 41.373000] Broadcom Ethernet Network Device v0.1 Dec 24 2015 10:29:13 [ 41.387000] bcmvenet_probe getting rpc nonvols [ 41.392000] bcmvenet_probe getting mac address [ 41.397000] eth0: MAC Address: 10:DA:43:54:D7:AD [ 41.402000] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 41.408000] EHCI-brcm EHCI-brcm.0: Broadcom STB EHCI [ 41.419000] EHCI-brcm EHCI-brcm.0: new USB bus registered, assigned bus number 1 [ 41.458000] EHCI-brcm EHCI-brcm.0: irq 32, io mem 0x12e00000 [ 41.470000] EHCI-brcm EHCI-brcm.0: USB 0.0 started, EHCI 1.00 [ 41.479000] usb usb1: configuration #1 chosen from 1 choice [ 41.488000] hub 1-0:1.0: USB hub found [ 41.492000] hub 1-0:1.0: 2 ports detected [ 41.509000] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver [ 41.516000] OHCI-brcm OHCI-brcm.0: Broadcom STB OHCI [ 41.526000] OHCI-brcm OHCI-brcm.0: new USB bus registered, assigned bus number 2 [ 41.534000] OHCI-brcm OHCI-brcm.0: irq 31, io mem 0x12e00100 [ 41.608000] usb usb2: configuration #1 chosen from 1 choice [ 41.617000] hub 2-0:1.0: USB hub found [ 41.621000] hub 2-0:1.0: 2 ports detected [ 41.641000] rpc_user_init: registered device class brpc [ 41.647000] Mirror/redirect action on [ 41.650000] u32 classifier [ 41.653000] input device check on [ 41.657000] Actions configured [ 41.667000] TCP cubic registered [ 41.670000] Initializing XFRM netlink socket [ 41.675000] NET: Registered protocol family 10 [ 41.711000] IPv6 over IPv4 tunneling driver [ 41.735000] NET: Registered protocol family 17 [ 41.739000] NET: Registered protocol family 15 [ 41.744000] error while creating igmp_snooping proc [ 41.749000] Initializing MCPD Module [ 41.757000] RPC: Registered udp transport module. [ 41.762000] RPC: Registered tcp transport module. [ 41.766000] 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> [ 41.773000] All bugs added by David S. Miller <davem@redhat.com> [ 42.061000] UBIFS: mounted UBI device 0, volume 0, name "rootfs" [ 42.067000] UBIFS: mounted read-only [ 42.071000] UBIFS: file system size: 70344704 bytes (68696 KiB, 67 MiB, 554 LEBs) [ 42.078000] UBIFS: journal size: 9023488 bytes (8812 KiB, 8 MiB, 72 LEBs) [ 42.085000] UBIFS: media format: w4/r0 (latest is w4/r0) [ 42.091000] UBIFS: default compressor: lzo [ 42.095000] UBIFS: reserved for root: 0 bytes (0 KiB) [ 42.221000] VFS: Mounted root (ubifs filesystem) readonly on device 254:1. [ 42.229000] Freeing unused kernel memory: 136k freed init started: BusyBox v1.19.3 (2015-12-24 10:30:08 CST) starting pid 201, tty '': '/etc/init.d/rcS' Loading drivers and kernel modules... [ 47.841000] Driver 'sd' needs updating - please use bus_type methods [ 48.807000] Initializing USB Mass Storage driver... [ 48.827000] usbcore: registered new interface driver usb-storage [ 48.845000] USB Mass Storage support registered. Mounting apps partition [ 50.043000] UBIFS: recovery needed [ 50.268000] UBIFS: recovery completed [ 50.272000] UBIFS: mounted UBI device 1, volume 0, name "linuxapps" [ 50.278000] UBIFS: file system size: 29712384 bytes (29016 KiB, 28 MiB, 234 LEBs) [ 50.286000] UBIFS: journal size: 1523712 bytes (1488 KiB, 1 MiB, 12 LEBs) [ 50.293000] UBIFS: media format: w4/r0 (latest is w4/r0) [ 50.299000] UBIFS: default compressor: lzo [ 50.303000] UBIFS: reserved for root: 1403389 bytes (1370 KiB) starting pid 279, tty '': 'lxginit 2> /dev/ttyS0' starting pid 280, tty '': 'smbapp 2> /dev/ttyS0 ' Please press Enter to activate this console. [ 50.786000] Sending link up message to app. [ 50.799000] Link is up NAS: Network Attached Storage Control Application [Version 1.3 Build Dec 24 2015 10:37:28] SmbApp: 3G enabled? (0) Launching mscapp SmbApp: waiting on port 49182 to recvfrom... [ 51.528000] GPL_NetUSB: is loaded! MSC: Media Server Control Application [Version 1.2 Build Dec 24 2015 10:37:28] MSC: waiting for data on port UDP 49181 [ 51.725000] GPL NetUSB up! [ 51.986000] NetUSB: is loaded! [ 51.999000] NetUSB: module license 'Proprietary' taints kernel. [ 52.005000] Disabling lock debugging due to kernel taint [ 52.285000] kc 86 : run_telnetDBGDServer start [ 52.291000] kc 223 : init_DebugD end [ 52.295000] INFO1773: NetUSB 1.02.17, 0002061E : Sep 4 2012 15:00:00 [ 52.301000] INFO1775: AUTH ISOC [ 52.305000] INFO1776: MOVE_HEAD filterAudio [ 52.310000] INFO0AAB: --- checkSBusTimeoutThread start --- [ 52.337000] usbcore: registered new interface driver KC NetUSB General Driver [ 52.354000] INFO0076: init proc : PAGE_SIZE 4096 [ 52.360000] INFO1647: infomap c035f1bc [ 52.364000] INFO164A: sleep to wait eth0 to wake up [ 52.369000] INFO02D0: use dev Name eth0 [ 52.373000] INFO1653: sleep to wait eth0 end. [ 52.378000] INFO166C: UDP_BROAD 7423 tcpPort:625868800 [ 52.388000] INFO02D0: use dev Name eth0 [ 52.426000] INFO1553: tcpConnector() started... [ 55.424000] INFO1430: Bind to eth0 SmbApp: Cmd SendConfig feature 005f found 0 USB devices SmbApp: Nas Enable SmbApp: launch_smbd smbapp signal SIGALRM SmbApp: lanuched smbd at pid 656 SmbApp: Netbios Enable SmbApp: launch_nmbd SmbApp: lanuched nmbd at pid 677 Launching proftpd SmbApp: HTTP Enable SmbApp: start proftpd Launching proftpd SmbApp: ApprovedAll Enabled SmbApp: ApprovedOnly Disabled SmbApp: DefaultShareAll Enable set netbios name BRCM-LVG set workgroup name WORKGROUP set admin name admin set admin pass 1970-01-01 00:02:02: (log.c.166) server started _none_ proftpd[694] 0.0.0.0: mod_lang/0.9: unable to scan the localised files in '/opt/toolchains/uclibc-crosstools-gccy smbapp: Killing nmbd (pid 677) SmbApp: launch_nmbd SmbApp: lanuched nmbd at pid 762 smbapp: Killing smbd (pid 656) SmbApp: launch_smbd SmbApp: lanuched smbd at pid 766 SmbApp: Cmd SendConfig feature 005f SmbApp: No Feature change SmbApp: Cmd SendConfig feature 005f SmbApp: No Feature change SmbApp: Cmd SendConfig feature 005f SmbApp: No Feature change SmbApp: Cmd SendConfig feature 005f SmbApp: No Feature change SmbApp: Cmd SendConfig feature 005f SmbApp: No Feature change SmbApp: Cmd GetNumDevices = 0 SmbApp: Cmd GetNumDevices = 0 SmbApp: Cmd Disable SmbApp: Killed process smbd SmbApp: Killed process nmbd SmbApp: Cmd Enable SmbApp: executeCmdNasEnable featureBitfield 005f SmbApp: launch_smbd SmbApp: lanuched smbd at pid 969 SmbApp: launch_nmbd SmbApp: lanuched nmbd at pid 970 starting pid 281, tty '': '/bin/cttyhack /bin/login' (none) login:


Command Table: Built-in Commands (built-in) Description: System-wide, built-in commands that are handled by the Console Thread. These commands are always available, regardless of which command table is active. Available Commands: ! ? cd dir find_command help history ls man pwd syntax system_time ------------------------------------------------------------------------------ logout ---- Command Table: CM DOCSIS Commands (CM) Description: CM DOCSIS Commands Available Commands: btcp con_high cpuLoad cpuUtilization exit mbufShow memShow mutex_debug ping read_memory reset routeShow socket_debug stackShow taskSuspendAll usfsShow version ---- Available sub-command tables: [80211_hal] [avs] [cablemedea] [cm_hal] [docsis_ctl] [dtp] [eRouter] [event_log] [fam] [itc_hal] [mso] [pingHelper] [power] [snmp] [spectrum_analyzer] ------------------------------------------------------------------------------ Command Table: 802.11 HAL Commands (80211_hal) Description: Commands to show/change the 802.11 HAL state. Available Commands: acs_cli dumpHotCache envram envrams hal_show led nvram pcieDump pktcToggle rc show wl ---- ------------------------------------------------------------------------------ Command Table: AVS Commands (avs) Description: Commands to show/change AVS-specific information. Available Commands: debug_temp print_level pvt ring48 set_dac ssbrosc step_dac timeAVS ---- ------------------------------------------------------------------------------ Command Table: CableMedea Commands (cablemedea) Description: CableMedea Command Table Available Commands: arp_show arppacket_show capt_show fwr_show igmpShow lan_network_add lan_network_remove lan_network_show lan_route_show nat_show traceroute usfs_show ---- Available sub-command tables: [dhcps] [dns] [dnsproxy] [msc] [nas] [natp] [rip] [route] [upnp] [vpn] ------------------------------------------------------------------------------ Command Table: Dhcps Commands (dhcps) Description: Dhcps Command Table Available Commands: add_lease enable remove_lease show ---- ------------------------------------------------------------------------------ Command Table: Dns Commands (dns) Description: Dns Command Table Available Commands: dns_debug dns_show dnsquery gethostbyaddr gethostbyname ---- ------------------------------------------------------------------------------ Command Table: Dns Proxy Commands (dnsproxy) Description: Dns Proxy Command Table Available Commands: debug dnsproxy_show ---- ------------------------------------------------------------------------------ Command Table: Media Server Control Commands (msc) Description: Media Server Control Command Table Available Commands: enable getscanstatus getstate rescan scaninterval sendconfig servername ---- ------------------------------------------------------------------------------ Command Table: Network Attached Storage Commands (nas) Description: NAS Command Table Available Commands: addshare dumpdevices dumpshares enable getdir getstate numdevices numshares removeshare rescandevices resetshares ---- ------------------------------------------------------------------------------ Command Table: Nat Session Manager Commands (natp) Description: Commands to show the Nat Session Manager object. Available Commands: apiAdd apiQuery apiRemove bins cache counters debug diag_output dma_command dqm_status ffe_inst ffe_pm first_entry flowShow ignore_list msp_call_stack natp_bypass natp_promote perf_counters promotion_threshold psm_hdrs psm_pkts reg_dump scratch_counters sessions show_init stack_query stats timer_enable track_sessions unresolved_dest_macs usage_stats verbose_debug ---- ------------------------------------------------------------------------------ Command Table: Rip Commands (rip) Description: Rip Command Table Available Commands: rip_show ---- ------------------------------------------------------------------------------ Command Table: Route Commands (route) Description: Route Command Table Available Commands: reload_route_service route_show ---- ------------------------------------------------------------------------------ Command Table: Upnp Commands (upnp) Description: Upnp Command Table Available Commands: control_if device_discovery discovery_show enable network_show notify_show show ---- ------------------------------------------------------------------------------ Command Table: VPN Commands (vpn) Description: Commands for the VPN library Available Commands: dump ike_test_connect ike_test_disconnect ike_test_start_keyneg start stop ---- ------------------------------------------------------------------------------ Command Table: CM DOCSIS HAL Commands (cm_hal) Description: Commands to show/change the CM DOCSIS HAL state. Available Commands: D3PowerSave PowerSave ackcel_show add_mcast_dsid add_reseq_dsid cam_dump center_tuner channelizer_state counters cpe_add cpe_del cpe_max cpe_print delete_mcast_dsid dpm drw_show ds_state dsb_reset dsid_helper errors fft fft_dump fft_store fpga_amp hal_show ldaix_read lna_read lna_write locate_maps lock_ds log mac_diag mac_reset map_lead_time_show multicast_table multilock_ds qam_lock qosParms rateshape sc_dpm sc_lock sc_switch scan_ds scan_stop set_drw show show_halif tc_counter transmit tune tune_band tuner_module tuner_read tuner_wideband tuner_write us30_clear_debug_counters us30_debug_counters us30_flowsize us30_set_debug_flow us_burst us_cw_transmit us_debug us_metrics us_multi_burst us_multi_tone us_multi_transmit us_reset us_sweep us_transmit utp_status ---- ------------------------------------------------------------------------------ Command Table: CM DOCSIS Control Thread Commands (docsis_ctl) Description: Commands to change the state of the DOCSIS Control thread. Available Commands: bpiShow cfg_hex_show cfg_tlv_show ch_state cm_ctrl copy_image dbc_msg_inject dload dsdiag dsx_show event_censor goto_ds goto_us igmpShow ip_initialize ip_show link_state log_messages map_debug mdd_modify mdd_sets_show modem_caps nrg_mgmt override_ucd_max_burst publish_event rate_shaping_enable reseq_dsid_regress_test rng_rsp scan_stop showFlows stop_download ucdShow ucddiag up_dis us_phy_oh_show us_target_mset usdiag ---- Available sub-command tables: ------------------------------------------------------------------------------ Command Table: DTP Commands (dtp) Description: Commands to control DTP state. Available Commands: add_dsg_mac change_dsid clstr_lo_wmrk create_dsid del_dsg_mac delete_dsid dsid_hi_wmrk dump_dsg_macs max_tokens ping_dtp read_counter set_dsg_primary_channel show sim_rx stack_check test ---- ------------------------------------------------------------------------------ Command Table: eRouter Commands (eRouter) Description: eRouter Command Table Available Commands: nd_show ra_test solicit ---- Available sub-command tables: [dhcpv6s] ------------------------------------------------------------------------------ Command Table: DHCPv6 Server Commands (dhcpv6s) Description: DHCPv6 Server Command Table Available Commands: DhcpV6Config UpdateServers address_pools pd_test prefix_pool ---- ------------------------------------------------------------------------------ Command Table: Event Log commands (event_log) Description: Commands to manipulate the Event Log Available Commands: log_event show silent stop_stress syslog verbose_show ---- ------------------------------------------------------------------------------ Command Table: Forward Assist Manager Commands (fam) Description: Commands to show the ForwardAssistManager object. Available Commands: api benchmark set show vlan ---- Available sub-command tables: [compilers] [filters] [trees] ------------------------------------------------------------------------------ Command Table: FlexibleFilterCompiler Commands (compilers) Description: Commands to show FlexibleFilterTree objects. Available Commands: show ---- ------------------------------------------------------------------------------ Command Table: FlexibleFilter Commands (filters) Description: Commands to show FlexibleFilterTree objects. Available Commands: show ---- ------------------------------------------------------------------------------ Command Table: FlexibleFilterTree Commands (trees) Description: Commands to show FlexibleFilterTree objects. Available Commands: show ---- ------------------------------------------------------------------------------ Command Table: ITC HAL Commands (itc_hal) Description: Commands to show/change the Ethernet HAL state. Available Commands: down hal_show passwd reboot_linux remoteapi show shutdown_linux thread_debug thread_show up ---- ------------------------------------------------------------------------------ Command Table: Mso Commands (mso) Description: Commands to show/change the MSO specific information. Available Commands: arp_clear arp_show auth_type configurator console_prompt defaults dhcp_enable dhcp_pool dhcp_server dns_server enable_wireless exit_monitor fac_reset firewall_enable host_name lan_switch_enable lan_switch_speed load_config monitor nat_enable pflt_disable pflt_enable pflt_show pfwd_disable pfwd_enable pfwd_show reset rg_mode_switch rip2_debug rip2_interval rip2_keyid rip2_keystr rip2_md5 rip2_server rip_enable routeShow show_all static_ip1 static_ip2 static_ip3 static_ip_mode tac_enable tac_key tac_md5 tac_method tac_server traceroute vpnstatus ---- ------------------------------------------------------------------------------ Command Table: Ping Commands (pingHelper) Description: Ping Helper Thread settings and commands. These commands allow you to set the ping utility up with precise control over packet sizes, timeout values, etc. Available Commands: all_sizes end_size hs_nowait hs_wait ip_address ip_stack ip_sweep number_of_pings ping restore_defaults show_settings start_size stats step_amount stop time_between_pings verbosity verify_enable wait_enable wait_time ---- ------------------------------------------------------------------------------ Command Table: Power Management Commands (power) Description: Commands to show/change power management specific information. Available Commands: client debug level new_client show ---- ------------------------------------------------------------------------------ Command Table: SNMP Commands (snmp) Description: SNMP commands. Available Commands: ch_cfgfile cm_cfgfile cm_filter_test coex_community debug get group_members install_group key_v3 lan_snmpAccess log n2m notify_setup parent_chain reset set severities show test throttle tlv_55 trap view_v1v2 ---- ------------------------------------------------------------------------------ Command Table: Spectrum Analyzer Commands (spectrum_analyzer) Description: Commands to show/change spectrum analyzer specific information. Available Commands: cmp_period cmp_rng debug diag_mode diff_thold enable_measurement ref_cmp ref_ffts ref_iters ref_samples ref_store show window_function ---- ------------------------------------------------------------------------------


COMMAND: ! USAGE: ! [Number{0..15}] [command{31}] DESCRIPTION: Executes the last command that was entered. If a command (or history number) is specified, then it executes that command from the history buffer. This works like the Unix '!' command EXAMPLES: ! -- This repeats the last command that was entered. ! cd -- This repeats the last 'cd' command that was entered. ----------------------------------------------------------------------------- COMMAND: ? USAGE: ? [-t|-l|-s|-i|-a|-lr] [command [...]{126}] DESCRIPTION: Alias for 'help'. Type 'help help' for more information. EXAMPLES: No examples available... ----------------------------------------------------------------------------- COMMAND: cd USAGE: cd [subtable | .. | \ | /{31}] DESCRIPTION: Sets the specified command table as the active table. This works like the DOS or Unix 'cd' command where '..' takes you to the previous table, and '\' or '/' takes you to the root table. If no parameters are specified, then it shows the name of the currently active command table. EXAMPLES: cd classifiers -- Makes the specified subtable the active command table. cd \ -- Makes the main command table active. cd .. -- Makes the previous (parent) command table active. cd -- Shows the name of the active command table. cd \non\doc -- You can specify partial names, and mutliple subdirs. ----------------------------------------------------------------------------- COMMAND: dir USAGE: dir [-t|-l|-s|-i|-a|-lr] [command [...]{126}] DESCRIPTION: Alias for 'help'. Type 'help help' for more information. EXAMPLES: No examples available... ----------------------------------------------------------------------------- COMMAND: find_command USAGE: find_command command{31} DESCRIPTION: Displays the name of all subdirectories which contain the specified command. EXAMPLES: find_command show -- ----------------------------------------------------------------------------- COMMAND: help USAGE: help [-t|-l|-s|-i|-a|-lr] [command [...]{126}] DESCRIPTION: Shows usage information about the specified command(s), or lists the set of commands available in the active table. If no parameters are specified, then an abbreviated list of all commands and subtables is displayed. -t -- Shows the entire tree of command tables and commands (in abbreviated form). -l -- Shows detailed information about all commands and subtables (this can print a LOT of information)! -s -- Shows detailed information on just the subtables. -i -- Shows detailed information on just the registered instances for the active table. -a -- Does everything that the -l, -s, and -i options do. Command is the name (or partial name) of one or more commands and subtables for which you want detailed help to be displayed. EXAMPLES: help -- This shows an abbreviated list of all commands and subtables. help cd -- This shows detailed help on the 'cd' command. help cd ! diag -- This shows detailed help on the 2 commands and subtable listed. help -l -- Shows detailed help on all available commands and subtables. ----------------------------------------------------------------------------- COMMAND: history USAGE: history DESCRIPTION: Shows a list of commands that were previously typed. EXAMPLES: history -- ----------------------------------------------------------------------------- COMMAND: ls USAGE: ls [-t|-l|-s|-i|-a|-lr] [command [...]{126}] DESCRIPTION: Alias for 'help'. Type 'help help' for more information. EXAMPLES: No examples available... ----------------------------------------------------------------------------- COMMAND: man USAGE: man [-t|-l|-s|-i|-a|-lr] [command [...]{126}] DESCRIPTION: Alias for 'help'. Type 'help help' for more information. EXAMPLES: No examples available... ----------------------------------------------------------------------------- COMMAND: pwd USAGE: pwd DESCRIPTION: Shows the name of the currently active command table. This is like the Unix 'pwd' command. EXAMPLES: pwd -- ----------------------------------------------------------------------------- COMMAND: syntax USAGE: syntax DESCRIPTION: Displays detailed information on command line syntax and how the parser works. EXAMPLES: syntax -- ----------------------------------------------------------------------------- COMMAND: system_time USAGE: system_time DESCRIPTION: Displays the current system millisecond tick counter. EXAMPLES: system_time -- ----------------------------------------------------------------------------- COMMAND: logout USAGE: logout DESCRIPTION: For Telnet clients, this lets the user log out cleanly. EXAMPLES: logout -- ----------------------------------------------------------------------------- COMMAND: btcp USAGE: btcp [{31}] [{31}] DESCRIPTION: {No command help available...} EXAMPLES: ----------------------------------------------------------------------------- COMMAND: con_high USAGE: con_high DESCRIPTION: Boosts the console thread priority so that you can use the console while the system is busy. Normally, the console priority is low so that it doesn't interfere with normal system operation. EXAMPLES: con_high -- ----------------------------------------------------------------------------- COMMAND: cpuLoad USAGE: cpuLoad milliseconds{0..10000} DESCRIPTION: Displays current CPU load, averaged over the specified number of milliseconds. Value of 0 will toggle start/stop control of load calculation. EXAMPLES: cpuLoad -- ----------------------------------------------------------------------------- COMMAND: cpuUtilization USAGE: cpuUtilization milliseconds{0..10000} DESCRIPTION: Displays CPU Utilization over the specified number of milliseconds. Value of 0 will toggle start/stop control of utilization calculation. EXAMPLES: cpuUtilization -- ----------------------------------------------------------------------------- COMMAND: exit USAGE: exit DESCRIPTION: For Telnet/ssh clients, this lets the user log out cleanly. EXAMPLES: exit ----------------------------------------------------------------------------- COMMAND: logout USAGE: logout DESCRIPTION: For Telnet clients, this lets the user log out cleanly. EXAMPLES: logout -- ----------------------------------------------------------------------------- COMMAND: mbufShow USAGE: mbufShow DESCRIPTION: Displays current mbuf allocation. EXAMPLES: mbufShow -- ----------------------------------------------------------------------------- COMMAND: memShow USAGE: memShow DESCRIPTION: Displays current memory allocation. EXAMPLES: memShow -- ----------------------------------------------------------------------------- COMMAND: mutex_debug USAGE: mutex_debug DESCRIPTION: Shows mutex debug information for debugging deadlocks. EXAMPLES: mutex_debug ----------------------------------------------------------------------------- COMMAND: ping USAGE: ping IpAddress DESCRIPTION: Pings the specified target IP address, sending 3 64-byte packets, and waiting up to 5 seconds for a response. This is a basic 'standard' ping. For more options or control over ping parameters and behavior, you will need to go to the Ping Command table ('cd pingHelper'). In order for this to work, the CM must either have successfully completed DHCP, or must otherwise have been configured with a valid IP address. Note that this command causes the ping options to be reset to their default state. This may be disabled if the platform doesn't provide an implementation of ping. EXAMPLES: ping 11.24.4.3 -- Ping IP address 11.24.4.3. ----------------------------------------------------------------------------- COMMAND: read_memory USAGE: read_memory [-p] [-c] [-s ElementSize{1..4}] [-n NumberOfBytes{1..16384}] [StartAddress] DESCRIPTION: Displays the contents of memory (in hex and ASCII) to the console. StartAddress : the address to start displaying (can be memory, registers, etc). -s : sets the element size to be read (1, 2, or 4 bytes). Most useful for registers; defaults to 1. -n : sets the number of bytes to be read. Defaults to 16. Note that this will always be padded out to a multiple of the element size. -c : increments the start address by the number of bytes before reading. This is most useful for continuing the previous read (with the same parameters). -p : prints the current options (which would be used if not otherwise supplied). If no parameters are specified, it will perform the last read again. NOTE - the parameters are remembered from one read to the next; e.g. if you set the element size to 4 bytes, then all subsequent reads will use this, unless explicitly overridden. WARNING - it may be possible to make the system hang or crash if you read from an illegal address! EXAMPLES: read_memory -s 4 -n 64 0x80001234 -- Reads 64 bytes as 32-bit values. read_memory -n 32 0x80001234 -- Reads 32 bytes starting with the specified address. read_memory -c -- Reads the next 32 bytes, continuing from the previous read. ----------------------------------------------------------------------------- COMMAND: reset USAGE: reset DESCRIPTION: Causes the application to exit, shutting everything down and cleaning up resources. On embedded platforms, this usually also triggers the internal CPU reset logic, causing the h/w to reboot. EXAMPLES: reset -- ----------------------------------------------------------------------------- COMMAND: routeShow USAGE: routeShow DESCRIPTION: Displays current routing information. EXAMPLES: routeShow -- ----------------------------------------------------------------------------- COMMAND: socket_debug USAGE: socket_debug DESCRIPTION: Shows socket debug information for debugging socket leaks. EXAMPLES: socket_debug ----------------------------------------------------------------------------- COMMAND: stackShow USAGE: stackShow DESCRIPTION: Displays current tasks stack information. EXAMPLES: stackShow -- ----------------------------------------------------------------------------- COMMAND: taskSuspendAll USAGE: taskSuspendAll DESCRIPTION: Suspends all tasks. EXAMPLES: taskSuspendAll -- ----------------------------------------------------------------------------- COMMAND: usfsShow USAGE: usfsShow DESCRIPTION: Displays the current USFS Table. EXAMPLES: usfsShow -- ----------------------------------------------------------------------------- COMMAND: version USAGE: version DESCRIPTION: Displays the current software version and feature codes by printing the startup banner. This allows the user to view the current version information without having to restart the application. EXAMPLES: version -- ----------------------------------------------------------------------------- Command Table: 802.11 HAL Commands (80211_hal) Description: Commands to show/change the 802.11 HAL state. ----------------------------------------------------------------------------- Command Table: HeapManager Commands (HeapManager) Description: Broadcom Heap Manager (malloc/free) settings and commands. ----------------------------------------------------------------------------- Command Table: HostDqm Interface Commands (HostDqm) Description: Commands to show/change the HostDqm IF state. ----------------------------------------------------------------------------- Command Table: AVS Commands (avs) Description: Commands to show/change AVS-specific information. ----------------------------------------------------------------------------- Command Table: CableMedea Commands (cablemedea) Description: CableMedea Command Table ----------------------------------------------------------------------------- Command Table: CM DOCSIS HAL Commands (cm_hal) Description: Commands to show/change the CM DOCSIS HAL state. ----------------------------------------------------------------------------- Command Table: CM DOCSIS Control Thread Commands (docsis_ctl) Description: Commands to change the state of the DOCSIS Control thread. ----------------------------------------------------------------------------- Command Table: DTP Commands (dtp) Description: Commands to control DTP state. ----------------------------------------------------------------------------- Command Table: eRouter Commands (eRouter) Description: eRouter Command Table ----------------------------------------------------------------------------- Command Table: Embedded Target Commands (embedded_target) Description: Commands to control the embedded target platform. ----------------------------------------------------------------------------- Command Table: Ethernet HAL Commands (enet_hal) Description: Commands to show/change the Ethernet HAL state. ----------------------------------------------------------------------------- Command Table: Event Log commands (event_log) Description: Commands to manipulate the Event Log ----------------------------------------------------------------------------- Command Table: Forward Assist Manager Commands (fam) Description: Commands to show the ForwardAssistManager object. ----------------------------------------------------------------------------- Command Table: Flash Driver Commands (flash) Description: Commands to control the flash device driver. ----------------------------------------------------------------------------- Command Table: Forwarder Commands (forwarder) Description: Commands to show/change the Forwarder state. ----------------------------------------------------------------------------- Command Table: FTP Lite Client Commands (ftpLite) Description: FTP Lite Client settings and commands. These commands allows you to configure the FTP Lite Client. ----------------------------------------------------------------------------- Command Table: IP Stack HAL Commands (ip_hal) Description: Commands to manage IP stacks and related tasks. ----------------------------------------------------------------------------- Command Table: ITC HAL Commands (itc_hal) Description: Commands to show/change the Ethernet HAL state. ----------------------------------------------------------------------------- Command Table: Message Log Settings Commands (msgLog) Description: Commands for changing Message Log Settings. These commands allow you enable and disable display fields and severity levels for individual objects or for groups of objects. ----------------------------------------------------------------------------- Command Table: Mso Commands (mso) Description: Commands to show/change the MSO specific information. ----------------------------------------------------------------------------- Command Table: Non-Volatile Settings Commands (non-vol) Description: Commands to change the non-volatile settings for the application. ----------------------------------------------------------------------------- Command Table: Ping Commands (pingHelper) Description: Ping Helper Thread settings and commands. These commands allow you to set the ping utility up with precise control over packet sizes, timeout values, etc. ----------------------------------------------------------------------------- Command Table: Power Management Commands (power) Description: Commands to show/change power management specific information. ----------------------------------------------------------------------------- Command Table: SNMP Commands (snmp) Description: SNMP commands. ----------------------------------------------------------------------------- Command Table: Snoop Commands (snoop) Description: Commands to show/change the state of Snoop objects. ----------------------------------------------------------------------------- Command Table: Spectrum Analyzer Commands (spectrum_analyzer) Description: Commands to show/change spectrum analyzer specific information. -----------------------------------------------------------------------------


Use username: MSO, password: changeme when telneting to the eCos side at 192.168.0.1. To stop scanning once logged in, type /cm_hal/scan_stop.

Mount the Linux file system trick:

http://www.haxorware.com/forums/archive/index.php?thread-3419.html

This website uses cookies. By using the website, you agree with storing cookies on your computer. Also you acknowledge that you have read and understand our Privacy Policy. If you do not agree leave the website.More information about cookies
  • Last modified: 2024/02/19 13:32
  • by rikka0w0