Sagem F@ST2504n v.6
The Sagem F@ST2504n router used to be distributed by Sky to their UK broadband customers.
DO NOT flash OpenWrt if you intend to go back to the stock Sky firmware.
The customer-specific configuration is lost when erasing the flash,
so if you intend to ever use it with Sky again, consult
the user forums on how to use a third-party router with the Sky service first.
 To be confirmed. |
(Still to be confirmed, but the end of the stock flash layout contains “PSI” blocks, which should be required for PPPoE access to Sky Broadband. OpenWRT overwrites the end of the flash with the JFFS2 filesystem.)
Supported Versions
Hardware Highlights
Installation
Flash Layout
Please check out the article flash.layout. It contains an example and a couple of explanations.
| Describe stock flash layout. Find out if it's a CFE standard layout. |
| Installing OpenWrt currently deletes data required by the Sky firmware! |
Original 2012 notes on the flash layout:
SW version: 5.23.1a4N CFE version: 5.14.7 Offset Len What ============================================================= 0x000000 4 ? 0x000570 ? cfe version/config string 0x000684 9 Model F@ST2504n 0x00069a 6 ? 0x0006a0 6 Base MAC 0x000808 ? Serial number 0x000848 ? HW version PCBAFAST2504Nv1.0 0x000888 ? Customer name NONE 0x00097c 0xF684 CFE ? 0x010000 0x100 Broadcom rootfs header 0x010100 0x386000 mtdblock0 0x396100 0xd5c14 Linux ? 0x46bd14 -- -- 0x470000 0x92a ??? 0x47092a -- -- 0x7d0010 0xc Serial number 0x7e0000 ? Backup PSI ? 0x7f0000 ? Main PSI ? 0x7fa000 0x2c0 Scratchpad (gOGoBrCm)
Installation using CFE bootloader with serial and TFTP
Unfortunately the stock Sky firmware requires signed firmware binaries.
We thus have to use the bootloader to flash OpenWrt to the router, which is only accessible via the serial interface inside the case.
Note: To flash OpenWrt we need to erase the flash first (not the bootloader though). This will also delete configuration data used by the Sky firmware.
Specific values you need
| Bootloader tftp client IPv4 address | 192.168.1.1 |
|---|---|
| TFTP default image name | Rename file to bcm963xx_fs_kernel |
| TFTP Server default IP Address | 192.168.1.100 |
Here is an example session, first erasing the flash and then writing a new image to it:
HELO CPUI L1CI HELO CPUI L1CI DRAM ---- PHYS ZQDN PHYE DINT LASY USYN MSYN LMBE PASS ---- ZBSS CODE DATA L12F MAIN CFE version 5.14.7 for BCM96362 (32bit,SP,BE) Build Date: Tue Mar 29 15:03:07 CST 2011 (zouchenbo@SZ01007.DONGGUAN.CN) Copyright (C) 2005-2010 SAGEM Corporation. HS Serial flash device: name MX25L64, id 0xc217 size 8192KB Total Flash size: 8192K with 128 sectors Chip ID: BCM6362B0, MIPS: 400MHz, DDR: 333MHz, Bus: 166MHz Main Thread: TP0 Memory Test Passed Total Memory: 67108864 bytes (64MB) Boot Address: 0xb8000000 Board IP address : 192.168.1.1:ffffff00 Host IP address : 192.168.1.100 Gateway IP address : Run from flash/host (f/h) : f Default host run file name : vmlinux Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Board Id (0-2) : F@ST2504n Number of MAC Addresses (1-32) : 11 Base MAC Address : XX:XX:XX:XX:XX:XX PSI Size (1-64) KBytes : 40 Enable Backup PSI [0|1] : 0 System Log Size (0-256) KBytes : 0 Main Thread Number [0|1] : 0 *** Press any key to stop auto run (1 seconds) *** Auto run second count down: 1 web info: Waiting for connection on socket 0. CFE> CFE> e a Erase all flash (except bootrom)? (y/n):y ............................................................................................................................... Resetting board...HELO CPUI L1CI HELO CPUI L1CI DRAM ---- PHYS ZQDN PHYE DINT LASY USYN MSYN LMBE PASS ---- ZBSS CODE DATA L12F MAIN CFE version 5.14.7 for BCM96362 (32bit,SP,BE) Build Date: Tue Mar 29 15:03:07 CST 2011 (zouchenbo@SZ01007.DONGGUAN.CN) Copyright (C) 2005-2010 SAGEM Corporation. HS Serial flash device: name MX25L64, id 0xc217 size 8192KB Total Flash size: 8192K with 128 sectors Chip ID: BCM6362B0, MIPS: 400MHz, DDR: 333MHz, Bus: 166MHz Main Thread: TP0 Memory Test Passed Total Memory: 67108864 bytes (64MB) Boot Address: 0xb8000000 ** Flash image not found. ** Board IP address : 192.168.1.1:ffffff00 Host IP address : 192.168.1.100 Gateway IP address : Run from flash/host (f/h) : f Default host run file name : vmlinux Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Board Id (0-2) : F@ST2504n Number of MAC Addresses (1-32) : 11 Base MAC Address : XX:XX:XX:XX:XX:XX PSI Size (1-64) KBytes : 40 Enable Backup PSI [0|1] : 0 System Log Size (0-256) KBytes : 0 Main Thread Number [0|1] : 0 web info: Waiting for connection on socket 0. CFE> f 192.168.1.100:15.05/openwrt-15.05-brcm63xx-generic-F@ST2504n-squashfs-cfe.bin Loading 192.168.1.100:15.05/openwrt-15.05-brcm63xx-generic-F@ST2504n-squashfs-cfe.bin ... Finished loading 3407876 bytes Flashing root file system and kernel at 0xb8010000: ..................................................... Flashing File Tag.... *** Image flash done *** ! Resetting board...HELO CPUI L1CI HELO CPUI L1CI DRAM ---- PHYS ZQDN PHYE DINT LASY USYN MSYN LMBE PASS ---- ZBSS CODE DATA L12F MAIN CFE version 5.14.7 for BCM96362 (32bit,SP,BE) Build Date: Tue Mar 29 15:03:07 CST 2011 (zouchenbo@SZ01007.DONGGUAN.CN) Copyright (C) 2005-2010 SAGEM Corporation. [...] (OpenWrt is now booting for the first time)
Bootloader command line
The CFE bootloader provides a very stripped down command line via the serial port.
The commands available and their help texts are shown below.
Of particular interest is the possibility to run a kernel (vmlinux) straight from a TFTP server, which allows OpenWrt kernel development without actually flashing it.
HELO CPUI L1CI HELO CPUI L1CI DRAM ---- PHYS ZQDN PHYE DINT LASY USYN MSYN LMBE PASS ---- ZBSS CODE DATA L12F MAIN CFE version 5.14.7 for BCM96362 (32bit,SP,BE) Build Date: Tue Mar 29 15:03:07 CST 2011 (zouchenbo@SZ01007.DONGGUAN.CN) Copyright (C) 2005-2010 SAGEM Corporation. HS Serial flash device: name MX25L64, id 0xc217 size 8192KB Total Flash size: 8192K with 128 sectors Chip ID: BCM6362B0, MIPS: 400MHz, DDR: 333MHz, Bus: 166MHz Main Thread: TP0 Memory Test Passed Total Memory: 67108864 bytes (64MB) Boot Address: 0xb8000000 Board IP address : 192.168.1.1:ffffff00 Host IP address : 192.168.1.100 Gateway IP address : Run from flash/host (f/h) : f Default host run file name : vmlinux Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Board Id (0-2) : F@ST2504n Number of MAC Addresses (1-32) : 11 Base MAC Address : XX:XX:XX:XX:XX:XX PSI Size (1-64) KBytes : 40 Enable Backup PSI [0|1] : 0 System Log Size (0-256) KBytes : 0 Main Thread Number [0|1] : 0 *** Press any key to stop auto run (1 seconds) *** Auto run second count down: 1 web info: Waiting for connection on socket 0. CFE> CFE> help Available commands: u change customer name. d [d]isplay the content of [p]si or [b]ackup or [c]ustomer name or s[e]rial number or h[w] version of the [v]ersion of cfe. w Write the whole image start from beginning of the flash e Erase [n]vram or [a]ll flash except bootrom r Run program from flash image or from host depend on [f/h] flag f Write image to the flash b Change board parameters reset Reset the board help Obtain help for CFE commands For more information about a command, enter 'help command-name' *** command status = 0 CFE> help u SUMMARY change customer name. USAGE *** command status = 0 CFE> help d SUMMARY [d]isplay the content of [p]si or [b]ackup or [c]ustomer name or s[e]rial number or h[w] version of the [v]ersion of cfe. USAGE d [p/b/c/e/w/v] *** command status = 0 CFE> help w SUMMARY Write the whole image start from beginning of the flash USAGE eg. w [hostip:]whole_image_file_name *** command status = 0 CFE> help e SUMMARY Erase [n]vram or [a]ll flash except bootrom USAGE e [n/a] *** command status = 0 CFE> help r SUMMARY Run program from flash image or from host depend on [f/h] flag USAGE eg. r [[hostip:]filenaem]<cr> if no filename, use the file name in 'Default host run file name' *** command status = 0 CFE> help f SUMMARY Write image to the flash USAGE eg. f [[hostip:]filename]<cr> -- if no filename, tftped from host with file name in 'Default host flash file name' *** command status = 0 CFE> help b SUMMARY Change board parameters USAGE *** command status = 0 CFE> help reset SUMMARY Reset the board USAGE *** command status = 0 CFE> help help SUMMARY Obtain help for CFE commands USAGE help [command] Without any parameters, the 'help' command will display a summary of available commands. For more details on a command, type 'help' and the command name. *** command status = 0 CFE>
Basic configuration
→ Basic configuration After flashing, proceed with this.
Set up your Internet connection, configure wireless, configure USB port, etc.
Specific Configuration
Interfaces
The default network configuration is:
| Interface Name | Description | Default configuration |
|---|---|---|
| br-lan | LAN & WiFi | 192.168.1.1/24 |
| vlan0 (eth0.0) | LAN ports (1 to 4) | None |
No WiFi interface is available at this time as an open driver for Broadcom 6361/6362 chips is unavailable.
Switch Ports (for VLANs)
Numbers 0-3 are Ports 1-4 as labeled on the unit, 8 is the internal connection to the router itself.
| Port | Switch port |
|---|---|
| internal (CPU) | 8 |
| LAN 1 | 0 |
| LAN 2 | 1 |
| LAN 3 | 2 |
| LAN 4 | 3 |
Failsafe mode
Buttons
→ hardware.button on howto use and configure the hardware button(s).
| BUTTON | Event |
|---|---|
| Reset | reset |
| Wi-Fi Protected Setup | wps |
Hardware
Info
Photos
DEAD LINK --- tmomas 2019/10/15 19:05
DEAD LINK --- tmomas 2019/10/15 19:05
DEAD LINK --- tmomas 2019/10/15 19:05
Opening the case
Note: This will void your warranty!
To remove the cover, unscrew the four screws holding together the upper and lower plate. They are located underneath the four rubber feet on the bottom of the router.
Serial
→ port.serial general information about the serial port, serial port cable, etc.
There are solder pads for the 3.3V TTL UART on the PCB.
Once connected, set your terminal program to 115200 baud, 8 data bits, no parity, 1 stop bit.
DEAD LINK --- tmomas 2019/10/15 19:05
JTAG
→ port.jtag general information about the JTAG port, JTAG cable, etc.
No JTAG connector has been identified yet!
Photo of PCB with markings
Debricking
As long as the CFE bootloader is not deliberately overwritten, it is easy to erase and reflash the router's flash memory using a serial terminal and a TFTP server.
See the CFE flashing instructions above.
Bootlogs
OEM bootlog
HELO CPUI L1CI HELO CPUI L1CI DRAM ---- PHYS ZQDN PHYE DINT LASY USYN MSYN LMBE PASS ---- ZBSS CODE DATA L12F MAIN CFE version 5.14.7 for BCM96362 (32bit,SP,BE) Build Date: Tue Mar 29 15:03:07 CST 2011 (zouchenbo@SZ01007.DONGGUAN.CN) Copyright (C) 2005-2010 SAGEM Corporation. HS Serial flash device: name MX25L64, id 0xc217 size 8192KB Total Flash size: 8192K with 128 sectors Chip ID: BCM6362B0, MIPS: 400MHz, DDR: 333MHz, Bus: 166MHz Main Thread: TP0 Memory Test Passed Total Memory: 67108864 bytes (64MB) Boot Address: 0xb8000000 Board IP address : 192.168.1.1:ffffff00 Host IP address : 192.168.1.100 Gateway IP address : Run from flash/host (f/h) : f Default host run file name : vmlinux Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Board Id (0-2) : F@ST2504n Number of MAC Addresses (1-32) : 11 Base MAC Address : XX:XX:XX:XX:XX:XX PSI Size (1-64) KBytes : 40 Enable Backup PSI [0|1] : 0 System Log Size (0-256) KBytes : 0 Main Thread Number [0|1] : 0 *** Press any key to stop auto run (1 seconds) *** Auto run second count down: 0 Booting from only image (0xb8010000) ... Code Address: 0x80010000, Entry Address: 0x80014230 Decompression OK! Entry at 0x80014230 Closing network. Disabling Switch ports. Flushing Receive Buffers... 0 buffers found. Closing DMA Channels. Starting program at 0x80014230 Linux version 2.6.30 (cookiechen@SZ01007.DONGGUAN.CN) (gcc version 4.4.2 (Buildroot 2010.02-git) ) #1 T1 HS Serial flash device: name MX25L64, id 0xc217 size 8192KB F@ST2504n prom init CPU revision is: 0002a070 (Broadcom4350) Determined physical RAM map: memory: 03f00000 @ 00000000 (usable) Zone PFN ranges: DMA 0x00000000 -> 0x00001000 Normal 0x00001000 -> 0x00003f00 Movable zone start PFN for each node early_node_map[1] active PFN ranges 0: 0x00000000 -> 0x00003f00 On node 0 totalpages: 16128 free_area_init_node: node 0, pgdat 80273340, node_mem_map 81000000 DMA zone: 32 pages used for memmap DMA zone: 0 pages reserved DMA zone: 4064 pages, LIFO batch:0 Normal zone: 94 pages used for memmap Normal zone: 11938 pages, LIFO batch:1 Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16002 Kernel command line: root=31:0 ro noinitrd console=ttyS0,115200 wait instruction: enabled Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes. Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes RCU-based detection of stalled CPUs is enabled. NR_IRQS:128 PID hash table entries: 256 (order: 8, 1024 bytes) console [ttyS0] enabled Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) Memory: 61080k/64512k available (2027k kernel code, 3412k reserved, 422k data, 116k init, 0k highmem) Calibrating delay loop... 399.36 BogoMIPS (lpj=199680) Mount-cache hash table entries: 512 net_namespace: 812 bytes NET: Registered protocol family 16 Total Flash size: 8192K with 2048 sectors registering PCI controller with io_map_base unset registering PCI controller with io_map_base unset bio: create slab <bio-0> at 0 pci 0000:00:00.0: reg 10 32bit mmio: [0x10004000-0x10013fff] pci 0000:00:00.0: reg 30 32bit mmio: [0x000000-0x0007ff] pci 0000:00:00.0: supports D1 D2 pci 0000:00:00.0: PME# supported from D0 D3hot D3cold pci 0000:00:00.0: PME# disabled pci 0000:01:00.0: PME# supported from D0 D3hot pci 0000:01:00.0: PME# disabled pci 0000:01:00.0: PCI bridge, secondary bus 0000:02 pci 0000:01:00.0: IO window: disabled pci 0000:01:00.0: MEM window: disabled pci 0000:01:00.0: PREFETCH window: disabled PCI: Setting latency timer of device 0000:01:00.0 to 64 BLOG v2.1 Initialized NET: Registered protocol family 8 NET: Registered protocol family 20 NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 2048 (order: 2, 16384 bytes) TCP bind hash table entries: 2048 (order: 1, 8192 bytes) TCP: Hash tables configured (established 2048 bind 2048) TCP reno registered NET: Registered protocol family 1 squashfs: version 4.0 (2009/01/31) Phillip Lougher squashfs: version 4.0 with LZMA457 ported by BRCM msgmni has been set to 119 io scheduler noop registered (default) PCI: Setting latency timer of device 0000:01:00.0 to 64 PPP generic driver version 2.4.2 PPP Deflate Compression module registered PPP BSD Compression module registered NET: Registered protocol family 24 bcm963xx_mtd driver v1.0 File system address: 0xb8010100 brcmboard: brcm_board_init entry kerSysScreenPciDevices: 0x14e4:0x435f:(slot 0) detected kerSysScreenPciDevices: 0x14e4:0x6362:(slot 0) detected SES: Button Interrupt 0x1 is enabled PCIe: No device found - Powering down Serial: BCM63XX driver $Revision: 3.00 $ ttyS0 at MMIO 0xb0000100 (irq = 11) is a BCM63XX ttyS1 at MMIO 0xb0000120 (irq = 12) is a BCM63XX bcmxtmrt: Broadcom BCM6362B0 ATM/PTM Network Device v0.3 Jul 5 2011 17:41:30 Broadcom Logger v0.1 Jul 5 2011 17:39:50 TCP cubic registered Initializing XFRM netlink socket NET: Registered protocol family 17 NET: Registered protocol family 15 Initializing MCPD Module Ebtables v2.0 registered ebt_time registered ebt_ftos registered ebt_wmm_mark registered 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> VFS: Mounted root (squashfs filesystem) readonly on device 31:0. Freeing unused kernel memory: 116k freed init started: BusyBox v1.00 (2011.07.05-09:46+0000) multi-call binary mount: Mounting none on /proc/bus BusyBox v1.00 (2011.07.05-09:46+0000) Built-in shell (msh) Enter 'help' for a list of built-in commands. Loading drivers and kernel modules... pktflow: module license 'Proprietary' taints kernel. Disabling lock debugging due to kernel taint Broadcom Packet Flow Cache Char Driver v2.1 Mar 18 2010 21:11:34 Registered<242> NBUFF v1.0 Initialized Broadcom Packet Flow Cache learning via BLOG enabled. Created Proc FS /procfs/fcache Broadcom Packet Flow Cache registered with netdev chain Constructed Broadcom Packet Flow Cache v2.1 Mar 18 2010 21:11:33 bcmxtmcfg: bcmxtmcfg_init entry adsl: adsl_init entry Broadcom BCM6362B0 Ethernet Network Device v0.1 Jul 5 2011 17:39:58 dgasp: kerSysRegisterDyingGaspHandler: bcmsw registered eth0: MAC Address: XX:XX:XX:XX:XX:XX eth1: MAC Address: XX:XX:XX:XX:XX:XX eth2: MAC Address: XX:XX:XX:XX:XX:XX eth3: MAC Address: XX:XX:XX:XX:XX:XX eth0 Link UP 100 mbps full duplex message received before monitor task is initialized kerSysSendtoMonitorTask PCI: Setting latency timer of device 0000:00:00.0 to 64 wl:srom strapped wl:(srom strapped) probe/present=0 wl:srom not detected,using main memory mapped srom info(wombo board) wl:loading /etc/wlan/bcm6362_map.bin wl0: Broadcom BCM435f 802.11 Wireless Controller 5.60.120.11.cpe4.406.4 dgasp: kerSysRegisterDyingGaspHandler: wl0 registered Broadcom 802.1Q VLAN Interface, v0.1 ===== Release Version 5.23.1 (build timestamp 110705_1744) ===== Got primary config file from flash (len=34191), validating.... ip_tables: (C) 2000-2006 Netfilter Core Team nf_conntrack version 0.5.0 (1008 buckets, 4032 max) device eth0 entered promiscuous mode br0: port 1(eth0) entering forwarding state device eth1 entered promiscuous mode device eth2 entered promiscuous mode device eth3 entered promiscuous mode BcmAdsl_Initialize=0xC00B7100, g_pFnNotifyCallback=0xC00DD334 pSdramPHY=0xA3FFFFF8, 0x1B77B5 0xDEADBEEF WLmngr Daemon is running optarg=0 shmId=0 wlevt_init@107: opened loopback socket 4 wlevt is ready for new msg... AdslCoreSharedMemInit: shareMemAvailable=491424 AdslCoreHwReset: AdslOemDataAddr = 0xXXXXXXXX dgasp: kerSysRegisterDyingGaspHandler: dsl0 registered Netfilter messages via NETLINK v0.30. monitor task is initialized pid= 193 rupgrade:error:10.831:ruReadMessageFromSmd:22:got SYSTEM_BOOT msg rupgrade:error:10.832:ruUpdateWaitHour:1074:update wait hour: 0 rupgrade:error:11.464:ruGetConfig:174:The remote server is http://fast2504n.skyfirmware.com 32 rupgrade:error:11.465:ruGetConfig:198:The post server is http://fast2504n.skyfirmware.com device wl0 is not a slave of br0 wl0.1 (): not using net_device_ops yet wl0.2 (): not using net_device_ops yet wl0.3 (): not using net_device_ops yet WLMNGR-DAEMON:error:14.750:rcl_l2BridgingFilterObject:329:unexpected change in bridge ref, from -1 to -1 WLMNGR-DAEMON:error:14.754:rcl_l2BridgingFilterObject:329:unexpected change in bridge ref, from -1 to -1 WLMNGR-DAEMON:error:14.757:rcl_l2BridgingFilterObject:329:unexpected change in bridge ref, from -1 to -1 WLMNGR-DAEMON:error:14.761:rcl_l2BridgingFilterObject:329:unexpected change in bridge ref, from -1 to -1 sagemGetApPinFromConfig: get pin from config: XXXXXXXX. get device pin: ret:0, value:XXXXXXXX. Setting SSID: "XXXXXXXX" Setting SSID: "wl0_Guest1" Setting SSID: "wl0_Guest2" Setting SSID: "wl0_Guest3" wlmngr_wlIfcDown: reset wifi_up_time wlmngr_wlIfcDown: reset wifi_up_time wlmngr_wlIfcDown: reset wifi_up_time wlmngr_wlIfcDown: reset wifi_up_time BCM96362 Broadband Router Login:
OpenWrt 14.07 bootlog
CPUI L1CI HELO CPUI L1CI DRAM ---- PHYS ZQDN PHYE DINT LASY USYN MSYN LMBE PASS ---- ZBSS CODE DATA L12F MAIN CFE version 5.14.7 for BCM96362 (32bit,SP,BE) Build Date: Tue Mar 29 15:03:07 CST 2011 (zouchenbo@SZ01007.DONGGUAN.CN) Copyright (C) 2005-2010 SAGEM Corporation. HS Serial flash device: name MX25L64, id 0xc217 size 8192KB Total Flash size: 8192K with 128 sectors Chip ID: BCM6362B0, MIPS: 400MHz, DDR: 333MHz, Bus: 166MHz Main Thread: TP0 Memory Test Passed Total Memory: 67108864 bytes (64MB) Boot Address: 0xb8000000 Board IP address : 192.168.1.1:ffffff00 Host IP address : 192.168.1.100 Gateway IP address : Run from flash/host (f/h) : f Default host run file name : vmlinux Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Board Id (0-2) : F@ST2504n Number of MAC Addresses (1-32) : 11 Base MAC Address : XX:XX:XX:XX:XX:XX PSI Size (1-64) KBytes : 40 Enable Backup PSI [0|1] : 0 System Log Size (0-256) KBytes : 0 Main Thread Number [0|1] : 0 *** Press any key to stop auto run (1 seconds) *** Auto run second count down: 0 Booting from only image (0xb8010000) ... Code Address: 0x80010000, Entry Address: 0x80010000 LZMA: Prossible old LZMA format, trying to decompress.. Decompression OK! Entry at 0x80010000 Closing network. Disabling Switch ports. Flushing Receive Buffers... 0 buffers found. Closing DMA Channels. Starting program at 0x80010000 [ 0.000000] Linux version 3.10.49 (bb@builder1) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 r42625) ) #3 Wed Oct 1 15:07:11 CEST 2014 [ 0.000000] Detected Broadcom 0x6362 CPU revision b0 [ 0.000000] CPU frequency is 400 MHz [ 0.000000] 64MB of RAM installed [ 0.000000] registering 48 GPIOs [ 0.000000] board_bcm963xx: Boot address 0xb8000000 [ 0.000000] board_bcm963xx: CFE version: 53.46.49-52.46-55 [ 0.000000] bootconsole [early0] enabled [ 0.000000] CPU revision is: 0002a070 (Broadcom BMIPS4350) [ 0.000000] board: board name: F@ST2504n [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 04000000 @ 00000000 (usable) [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x00000000-0x03ffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x00000000-0x03ffffff] [ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes. [ 0.000000] Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16256 [ 0.000000] Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200 [ 0.000000] PID hash table entries: 256 (order: -2, 1024 bytes) [ 0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) [ 0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) [ 0.000000] Memory: 61144k/65536k available (2485k kernel code, 4392k reserved, 725k data, 308k init, 0k highmem) [ 0.000000] NR_IRQS:256 [ 0.000000] Calibrating delay loop... 397.82 BogoMIPS (lpj=795648) [ 0.032000] pid_max: default: 32768 minimum: 301 [ 0.036000] Mount-cache hash table entries: 512 [ 0.044000] NET: Registered protocol family 16 [ 0.060000] bio: create slab <bio-0> at 0 [ 0.068000] Switching to clocksource MIPS [ 0.076000] NET: Registered protocol family 2 [ 0.080000] TCP established hash table entries: 512 (order: 0, 4096 bytes) [ 0.088000] TCP bind hash table entries: 512 (order: -1, 2048 bytes) [ 0.096000] TCP: Hash tables configured (established 512 bind 512) [ 0.100000] TCP: reno registered [ 0.104000] UDP hash table entries: 256 (order: 0, 4096 bytes) [ 0.112000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) [ 0.116000] NET: Registered protocol family 1 [ 0.124000] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.132000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.140000] msgmni has been set to 119 [ 0.148000] io scheduler noop registered [ 0.152000] io scheduler deadline registered (default) [ 0.164000] console [ttyS0] enabled, bootconsole disabled= 11) is a bcm63xx_uart [ 0.164000] console [ttyS0] enabled, bootconsole disabled [ 0.180000] bcm63xx-spi bcm63xx-spi: at 0xb0000800 (irq 10, FIFOs size 542) [ 0.188000] m25p80 spi1.0: found mx25l6405d, expected m25p80 [ 0.196000] m25p80 spi1.0: mx25l6405d (8192 Kbytes) [ 0.200000] bcm63xxpart: CFE boot tag found with version 6 and board type F@ST2504n [ 0.208000] bcm63xxpart: Partition 0 is CFE offset 0 and length 10000 [ 0.216000] bcm63xxpart: Partition 1 is kernel offset 10100 and length 11ff00 [ 0.224000] bcm63xxpart: Partition 2 is rootfs offset 130000 and length 6c0000 [ 0.228000] bcm63xxpart: Partition 3 is nvram offset 7f0000 and length 10000 [ 0.236000] bcm63xxpart: Partition 4 is linux offset 10000 and length 7e0000 [ 0.244000] bcm63xxpart: Spare partition is offset 350004 and length 49fffc [ 0.252000] 5 bcm63xxpart partitions found on MTD device spi1.0 [ 0.256000] Creating 5 MTD partitions on "spi1.0": [ 0.264000] 0x000000000000-0x000000010000 : "CFE" [ 0.268000] 0x000000010100-0x000000130000 : "kernel" [ 0.276000] mtd: partition "kernel" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only [ 0.288000] 0x000000130000-0x0000007f0000 : "rootfs" [ 0.296000] mtd: device 2 (rootfs) set to be root filesystem [ 0.304000] mtd: partition "rootfs_data" created automatically, ofs=0x350000, len=0x4a0000 [ 0.312000] 0x000000350000-0x0000007f0000 : "rootfs_data" [ 0.320000] 0x0000007f0000-0x000000800000 : "nvram" [ 0.324000] 0x000000010000-0x0000007f0000 : "linux" [ 0.372000] b53_common: found switch: BCM63xx, rev 0 [ 0.376000] bcm63xx-wdt bcm63xx-wdt: started, timer margin: 30 sec [ 0.388000] TCP: cubic registered [ 0.392000] NET: Registered protocol family 17 [ 0.396000] Bridge firewalling registered [ 0.400000] 8021q: 802.1Q VLAN Support v1.8 [ 0.416000] VFS: Mounted root (squashfs filesystem) readonly on device 31:2. [ 0.424000] Freeing unused kernel memory: 308K (80333000 - 80380000) procd: Console is alive procd: - watchdog - [ 3.136000] Button Hotplug driver version 0.4.1 [ 3.144000] input: gpio-keys-polled as /devices/platform/gpio-keys-polled.0/input/input0 procd: - preinit - [ 3.816000] bcm63xx_enetsw bcm63xx_enetsw.0: link UP on Port 2, 100Mbps, full-duplex Press the [f] key and hit [enter] to enter failsafe mode Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level jffs2 is ready jffs2 is ready [ 7.368000] jffs2: notice: (210) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 9 of xref (0 dead, 0 orphan) found. switching to overlay procd: - early - procd: - watchdog - procd: - ubus - procd: - init - Please press Enter to activate this console. [ 9.720000] NET: Registered protocol family 10 [ 9.752000] nf_conntrack version 0.5.0 (960 buckets, 3840 max) [ 9.768000] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 9.784000] Loading modules backported from Linux version master-2014-05-22-0-gf2032ea [ 9.792000] Backport generated by backports.git backports-20140320-37-g5c33da0 [ 9.808000] ip_tables: (C) 2000-2006 Netfilter Core Team [ 9.872000] xt_time: kernel timezone is -0000 [ 9.928000] cfg80211: Calling CRDA to update world regulatory domain [ 9.940000] cfg80211: World regulatory domain updated: [ 9.944000] cfg80211: DFS Master region: unset [ 9.948000] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time) [ 9.960000] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A) [ 9.968000] cfg80211: (2457000 KHz - 2482000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A) [ 9.976000] cfg80211: (2474000 KHz - 2494000 KHz @ 20000 KHz), (N/A, 2000 mBm), (N/A) [ 9.984000] cfg80211: (5170000 KHz - 5250000 KHz @ 160000 KHz), (N/A, 2000 mBm), (N/A) [ 9.992000] cfg80211: (5250000 KHz - 5330000 KHz @ 160000 KHz), (N/A, 2000 mBm), (0 s) [ 10.000000] cfg80211: (5490000 KHz - 5730000 KHz @ 160000 KHz), (N/A, 2000 mBm), (0 s) [ 10.008000] cfg80211: (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A) [ 10.016000] cfg80211: (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm), (N/A) [ 10.124000] PPP generic driver version 2.4.2 [ 10.132000] NET: Registered protocol family 24 [ 10.188000] Broadcom 43xx driver loaded [ Features: PNL ] [ 14.344000] bcm63xx_enetsw bcm63xx_enetsw.0: link UP on Port 2, 100Mbps, full-duplex procd: - init complete - [ 21.128000] bcm63xx_enetsw bcm63xx_enetsw.0: link UP on Port 2, 100Mbps, full-duplex [ 21.160000] device eth0.1 entered promiscuous mode [ 21.164000] device eth0 entered promiscuous mode [ 21.172000] br-lan: port 1(eth0.1) entered forwarding state [ 21.176000] br-lan: port 1(eth0.1) entered forwarding state [ 23.180000] br-lan: port 1(eth0.1) entered forwarding state BusyBox v1.22.1 (2014-09-21 03:26:30 CEST) built-in shell (ash) Enter 'help' for a list of built-in commands. _______ ________ __ | |.-----.-----.-----.| | | |.----.| |_ | - || _ | -__| || | | || _|| _| |_______|| __|_____|__|__||________||__| |____| |__| W I R E L E S S F R E E D O M ----------------------------------------------------- BARRIER BREAKER (14.07, r42625) ----------------------------------------------------- * 1/2 oz Galliano Pour all ingredients into * 4 oz cold Coffee an irish coffee mug filled * 1 1/2 oz Dark Rum with crushed ice. Stir. * 2 tsp. Creme de Cacao ----------------------------------------------------- root@OpenWrt:/#