User Tools

Site Tools


toh:sercomm:h500s

Sercomm H500-s

Not supported

Hardware Highlights

ModelVersionSoCCPU MHzFlash MBRAM MBWLAN HardwareWLAN2.4WLAN5.0100M portsGbit portsModemUSBTechnical Data
H500-sBroadcom BCM63167400128NAND128Broadcom BCM435f; Quantenna QT3740BCb/g/na/n/ac-4xDSL1x 2.0View/Edit data

Installation

OEM easy install

Use the router's web interface, look for firmware upgrade page, select the *-.bin firmware and proceed.

Flashing via bootloader web

With this procedure you will flash the firmware using the bootloader web interface (foolproof)

  1. Set a static IP on your computer, use 192.168.1.35 (or any compatible), and connect the ethernet cable to the router.
  2. Unplug the router's power cord
  3. Press the button labeled as RESET, don't release it yet!
  4. Plug the power cord
  5. Wait 6 seconds or more until the power LED stays red fixed
  6. Release the RESET button
  7. Browse to http://192.168.1.1 and you should see this screen:
  8. Select .bin firmware
  9. Press Update Software to start the firmware update process
  10. Wait for it to reboot
  11. Telnet / ssh to 192.168.1.1 and set a root password, or browse to http://192.168.1.1 if LuCI is installed.

OEM NAND flash layout

index partition part_name logic_offset logic_size size (KiB)
00 mtd0 cferom 0x0000000 0x0020000 128
01 mtd1 part_map 0x0020000 0x00a0000 640
02 mtd2 cferam1 0x00c0000 0x0140000 1280
03 mtd3 cferam2 0x0200000 0x0140000 1280
04 mtd4 pcba-sn 0x0340000 0x00a0000 640
05 mtd5 protect_data 0x03e0000 0x0140000 1280
06 mtd6 kernel_fs1 0x0520000 0x1e00000 30720
07 mtd12 lib_1 0x2320000 0x1400000 20480
08 mtd7 kernel_fs2 0x3720000 0x1e00000 30720
09 mtd13 lib_2 0x5520000 0x1400000 20480
10 mtd8 boot_flag1 0x6920000 0x0140000 1280
11 mtd9 boot_flag2 0x6a60000 0x0140000 1280
12 mtd10 xml_cfg 0x6ba0000 0x0280000 2560
13 mtd11 app_data 0x6e20000 0x0280000 2560

NAND flash dump: h500s-nand_dump.7z

Experimental support

Openwrt isn't supported. However, we can load a RAM firmware. Apparently the NAND flash is detected, but the bad block table from the OEM firmware seems to be ignored and overwritten by Openwrt. Test it at your own risk!

Hardware

Info

Instruction set MIPS Big Endian
Vendor Broadcom
bootloader CFE
Board ID 963167REF3
System-On-Chip Broadcom BCM63167 VKREBG
CPU @Frq BMIPS4350 V8.0 @400 MHz
Flash-Chip Macronix MX30LF1G18AC-TI (NAND)
Flash size 128 MiB
RAM-Chip Nanya NT5CC64M16GP-DI / DDR3L-1600
RAM size 128 MiB
Wireless 802.11b/g/n: BCM435f (integrated)
802.11ac: Quantenna QT3740BC (onboard SoC)
Switch 4x Gigabit ethernet: BCM53134S,
USB 1x 2.0
FXS/VoIP Le9672WQC
PSU 12 VDC, 2.5 A / PS30W120EUG20-BXK-00
Serial Yes
JTAG No

Photos

Photo of front and back of the casing:

Opening the case

Note: This will void your warranty!

  • There are 2 screws hidden under the rubber pads at the bottom side of the router, they hold the casing together with additional plastic flanges. Just remove the screws, and carefully separate boths parts of the casing.

Main PCB:

Wifi

2.4 GHz

The 2.4 GHz wifi is integrated into the main BCM63167 SoC. No known available FLOSS drivers for this part at the moment — 2020/01/12

Some dumps from the original firmware:

~ # wlctl revinfo vendorid 0x14e4 deviceid 0x435f radiorev 0xc2057000 chipnum 0x6362 chiprev 0x1 chippackage 0x0 corerev 0x16 boardid 0x513 boardvendor 0x14e4 boardrev P230 driverrev 0x70ea413 ucoderev 0x3fc0077 bus 0x0 phytype 0x4 phyrev 0x8 anarev 0x0 nvramrev 0 ~ # wlctl srdump srom[000]: 0x2801 0x0000 0x0566 0x14e4 0x0078 0xedbe 0x0000 0x2bc4 srom[008]: 0x2a64 0x2964 0x2c64 0x3ce7 0x46ff 0x47ff 0x0c00 0x0820 srom[016]: 0x0030 0x1002 0x1f2f 0x7d75 0x8080 0x0032 0x0100 0x8400 srom[024]: 0xd700 0x01c7 0x0083 0x8500 0x2010 0xffff 0x0000 0xffff srom[032]: 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff srom[040]: 0xffff 0xffff 0x1010 0x0005 0xffff 0xffff 0xffff 0xffff srom[048]: 0x4354 0x8000 0x0002 0x0000 0x1f30 0x1800 0x0000 0x0000 srom[056]: 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff srom[064]: 0x5372 0x1230 0x0200 0x0000 0x0000 0x0000 0x0000 0x0000 srom[072]: 0x0000 0x0000 0x0000 0xffff 0xffff 0xffff 0x0303 0x0202 srom[080]: 0xff02 0x0033 0xffff 0xffff 0xffff 0xffff 0xffff 0x0315 srom[088]: 0x0315 0x7800 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff srom[096]: 0x2042 0xff0e 0x153a 0xfb23 0x3e42 0x4242 0xff11 0x11eb srom[104]: 0xfc05 0xfed0 0x1297 0xfbad 0xfebf 0x125f 0xfb9e 0x0000 srom[112]: 0x2042 0xff8c 0x1620 0xfb8c 0x3e42 0x4242 0xfede 0x12cd srom[120]: 0xfbb5 0xfebe 0x1478 0xfb1a 0xfec5 0x1294 0xfba3 0x0000 srom[128]: 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff srom[136]: 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff srom[144]: 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff srom[152]: 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff srom[160]: 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 srom[168]: 0x0000 0x2000 0x4422 0x2000 0x4422 0x2000 0x4422 0x2000 srom[176]: 0x4422 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 srom[184]: 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 srom[192]: 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 0x0000 srom[200]: 0x0000 0x0000 0x0000 0x0000 0x0000 0xffff 0xffff 0xffff srom[208]: 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff 0xffff srom[216]: 0xffff 0xffff 0xffff 0xb908 ~ # wlctl nvram_dump sromrev=8 boardrev=0x1230 boardflags=0x200 boardflags2=0x0 boardtype=0x566 subvid=0x14e4 boardnum=0 regrev=0 pa0b0=0xff0e pa0b1=0x153a pa0b2=0xfb23 pa0itssit=32 pa0maxpwr=66 opo=0 aa2g=3 aa5g=3 ag0=2 ag1=2 ag2=2 ag3=255 pa1b0=0xff11 pa1b1=0x11eb pa1b2=0xfc05 pa1lob0=0xfed0 pa1lob1=0x1297 pa1lob2=0xfbad pa1hib0=0xfebf pa1hib1=0x125f pa1hib2=0xfb9e pa1itssit=62 pa1maxpwr=66 pa1lomaxpwr=66 pa1himaxpwr=66 bxa2g=3 rssisav2g=7 rssismc2g=15 rssismf2g=15 bxa5g=3 rssisav5g=7 rssismc5g=15 rssismf5g=15 tri2g=255 tri5g=255 tri5gl=255 tri5gh=255 rxpo2g=-1 rxpo5g=-1 txchain=3 rxchain=3 antswitch=0 tssipos2g=1 extpagain2g=2 pdetrange2g=2 triso2g=3 antswctl2g=0 tssipos5g=1 extpagain5g=2 pdetrange5g=2 triso5g=3 antswctl5g=0 ccode= macaddr=78:81:02:61:de:ae tempthresh=120 tempoffset=0 rawtempsense=0x1ff measpower=0x7f tempsense_slope=0xff tempcorrx=0x3f tempsense_option=0x3 freqoffset_corr=0xf iqcal_swp_dis=0x1 hw_iqcal_en=0x1 elna2g=255 elna5g=255 phycal_tempdelta=255 temps_period=15 temps_hysteresis=15 measpower1=0x7f measpower2=0x7f cck2gpo=0 ofdm2gpo=0 ofdm5gpo=0 ofdm5glpo=0 ofdm5ghpo=0 mcs2gpo0=8192 mcs2gpo1=17442 mcs2gpo2=8192 mcs2gpo3=17442 mcs2gpo4=8192 mcs2gpo5=17442 mcs2gpo6=8192 mcs2gpo7=17442 mcs5gpo0=0 mcs5gpo1=0 mcs5gpo2=0 mcs5gpo3=0 mcs5gpo4=0 mcs5gpo5=0 mcs5gpo6=0 mcs5gpo7=0 mcs5glpo0=0 mcs5glpo1=0 mcs5glpo2=0 mcs5glpo3=0 mcs5glpo4=0 mcs5glpo5=0 mcs5glpo6=0 mcs5glpo7=0 mcs5ghpo0=0 mcs5ghpo1=0 mcs5ghpo2=0 mcs5ghpo3=0 mcs5ghpo4=0 mcs5ghpo5=0 mcs5ghpo6=0 mcs5ghpo7=0 cddpo=0 stbcpo=0 bw40po=0 bwduppo=0 pcieingress_war=15 eu_edthresh2g=255 eu_edthresh5g=255 rxgainerr2ga0=63 rxgainerr2ga1=31 rxgainerr2ga2=31 rxgainerr5gla0=63 rxgainerr5gla1=31 rxgainerr5gla2=31 rxgainerr5gma0=63 rxgainerr5gma1=31 rxgainerr5gma2=31 rxgainerr5gha0=63 rxgainerr5gha1=31 rxgainerr5gha2=31 rxgainerr5gua0=63 rxgainerr5gua1=31 rxgainerr5gua2=31 noiselvl2ga0=31 noiselvl2ga1=31 noiselvl2ga2=31 noiselvl5gla0=31 noiselvl5gla1=31 noiselvl5gla2=31 noiselvl5gma0=31 noiselvl5gma1=31 noiselvl5gma2=31 noiselvl5gha0=31 noiselvl5gha1=31 noiselvl5gha2=31 noiselvl5gua0=31 noiselvl5gua1=31 noiselvl5gua2=31 noisecaloffset=255 noisecaloffset5g=255 subband5gver=7 maxp2ga0=66 itt2ga0=32 itt5ga0=62 pa2gw0a0=0xff0e pa2gw1a0=0x153a pa2gw2a0=0xfb23 maxp5ga0=66 maxp5gha0=66 maxp5gla0=66 pa5gw0a0=0xff11 pa5gw1a0=0x11eb pa5gw2a0=0xfc05 pa5glw0a0=0xfed0 pa5glw1a0=0x1297 pa5glw2a0=0xfbad pa5ghw0a0=0xfebf pa5ghw1a0=0x125f pa5ghw2a0=0xfb9e maxp2ga1=66 itt2ga1=32 itt5ga1=62 pa2gw0a1=0xff8c pa2gw1a1=0x1620 pa2gw2a1=0xfb8c maxp5ga1=66 maxp5gha1=66 maxp5gla1=66 pa5gw0a1=0xfede pa5gw1a1=0x12cd pa5gw2a1=0xfbb5 pa5glw0a1=0xfebe pa5glw1a1=0x1478 pa5glw2a1=0xfb1a pa5ghw0a1=0xfec5 pa5ghw1a1=0x1294 pa5ghw2a1=0xfba3 maxp2ga2=255 itt2ga2=255 itt5ga2=255 pa2gw0a2=0xffff pa2gw1a2=0xffff pa2gw2a2=0xffff maxp5ga2=255 maxp5gha2=255 maxp5gla2=255 pa5gw0a2=0xffff pa5gw1a2=0xffff pa5gw2a2=0xffff pa5glw0a2=0xffff pa5glw1a2=0xffff pa5glw2a2=0xffff pa5ghw0a2=0xffff pa5ghw1a2=0xffff pa5ghw2a2=0xffff maxp2ga3=255 itt2ga3=255 itt5ga3=255 pa2gw0a3=0xffff pa2gw1a3=0xffff pa2gw2a3=0xffff maxp5ga3=255 maxp5gha3=255 maxp5gla3=255 pa5gw0a3=0xffff pa5gw1a3=0xffff pa5gw2a3=0xffff pa5glw0a3=0xffff pa5glw1a3=0xffff pa5glw2a3=0xffff pa5ghw0a3=0xffff pa5ghw1a3=0xffff pa5ghw2a3=0xffff Inter-| Receive | Transmit face |bytes packets errs drop fifo frame compressed multicast|bytes packets errs drop fifo colls carrier compressed eth3: 844506 11786 0 0 0 0 0 339 6231176 11480 0 0 0 0 0 0 ifb0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 wl0.1: 0 0 0 0 0 4 0 0 0 0 0 0 0 0 0 0 gre0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 eth3.10: 19430 401 0 0 0 0 0 6 36558 417 0 0 0 0 0 0 bcmsw: 889901 11778 0 0 0 0 0 0 6389418 11832 0 0 0 0 0 0 null: 0 0 0 0 0 0 0 0 0 0 0 3 0 0 0 0 eth3.300: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 eth3.100: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 lo: 170490 578 0 0 0 0 0 0 170490 578 0 0 0 0 0 0 br0: 745168 11880 0 0 0 0 0 333 6146010 11057 0 0 0 0 0 0 eth2: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 br10: 19430 401 0 1 0 0 0 6 36090 411 0 0 0 0 0 0 eth1: 0 0 0 0 0 0 0 0 113369 364 0 0 0 0 0 0 wl0: 0 0 0 0 0 4 0 0 0 0 0 0 0 0 0 0 sit0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 wl0.3: 0 0 0 0 0 4 0 0 0 0 0 0 0 0 0 0 eth0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 eth3.200: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 dsl0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 eth4: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ifb1: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 wl0.2: 0 0 0 0 0 4 0 0 0 0 0 0 0 0 0 0 Z� .Z� .Z� .Z� .Z� .Z� .Z� .Z� .Z� .. .�� .�� .�@ .|� .�0 .�0 .�� .�p .|. .- ~ #


Serial

port.serial general information about the serial port, serial port cable, etc.

How to connect to the Serial Port of this specific device:

GND TX VCC RX
2 3 4

Only connect GND, TX and RX

Baud rate: 115200

GPIOs

LEDS

GPIO LED
0 MOBILE red
1 MOBILE green
8 POWER red
9 WIFI green
12 PHONE red
13 WIFI red
14 INTERNET red
15 INTERNET green
16 PHONE green
17 POWER green
23 MOBILE blue

Buttons

GPIO Button
34 WPS
35 RESET

Other

GPIO Location
10 R435 R434
18 R229 (eth switch reset)
19 R23
20 QT3740BC RESET
21 R558 (near main SoC [NAND flash bootstrap])

Bootlogs

OEM Bootlog

HELO CPUI L1CI HELO CPUI L1CI 4.1605-1.0.38-118.3 DRAM ---- PHYS STRF 400H PHYE DDR3 SIZ4 SIZ3 SIZ2 DINT USYN LSYN MFAS LMBE RACE PASS ---- ZBSS CODE DATA L12F MAIN FPS0 FDPM PMOK GFOK F002 F001 RAM1 NAN9 NAN3 RFS0 NAN5 Base: 4.16_05 CFE version 1.0.38-118.3 for BCM963268 (32bit,SP,BE) Build Date: Fri Aug 19 13:10:18 CST 2016 (jeremy@Ubuntu) Copyright (C) 2000-2015 Broadcom Corporation. Boot Strap Register: 0x1ff90bf Chip ID: BCM63167D0, MIPS: 400MHz, DDR: 400MHz, Bus: 200MHz Main Thread: TP0 Memory Test Passed Total Memory: 134217728 bytes (128MB) Boot Address: 0xb8000000 NAND ECC BCH-4, page size 0x800 bytes, spare size used 64 bytes NAND flash device: MXIC MX30LF1G08AA, id 0xc2f1 block 128KB size 131072KB GPIOOverlays is 0x8010 Board IP address : 192.168.1.1:ffffff00 Host IP address : 192.168.1.100 Gateway IP address : Run from flash/host/tftp (f/h/c) : f Default host run file name : vmlinux Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Default host ramdisk file name : Default ramdisk store address : Board Id (0-33) : 963167REF3 Number of MAC Addresses (1-32) : 16 Base MAC Address : 78:81:02:61:de:ad PSI Size (1-128) KBytes : 24 Enable Backup PSI [0|1] : 0 System Log Size (0-256) KBytes : 0 Auxillary File System Size Percent: 0 Main Thread Number [0|1] : 0 WLan Feature : 0x00 Voice Board Configuration (0-19) : LE9672_ZSI Partition 1 Size (MB) : Partition 2 Size (MB) : Partition 3 Size (MB) : Partition 4 Size (MB) (Data) : 4MB External switch id = a750 SC_DEBUG: Nand Partition Table Magic Found at 20000. part 0, logic_offset 00000000, logic_length 00020000, real_offset 00000000, real_length 00020000 part 1, logic_offset 00020000, logic_length 000a0000, real_offset 00020000, real_length 000a0000 part 2, logic_offset 000c0000, logic_length 00140000, real_offset 000c0000, real_length 00140000 part 3, logic_offset 00200000, logic_length 00140000, real_offset 00200000, real_length 00140000 part 4, logic_offset 00340000, logic_length 000a0000, real_offset 00340000, real_length 000a0000 part 5, logic_offset 003e0000, logic_length 00140000, real_offset 003e0000, real_length 00140000 part 6, logic_offset 00520000, logic_length 01e00000, real_offset 00520000, real_length 01e00000 part 7, logic_offset 02320000, logic_length 01400000, real_offset 02320000, real_length 01400000 part 8, logic_offset 03720000, logic_length 01e00000, real_offset 03720000, real_length 01e00000 part 9, logic_offset 05520000, logic_length 01400000, real_offset 05520000, real_length 01400000 part 10, logic_offset 06920000, logic_length 00140000, real_offset 06920000, real_length 00140000 part 11, logic_offset 06a60000, logic_length 00140000, real_offset 06a60000, real_length 00140000 part 12, logic_offset 06ba0000, logic_length 00280000, real_offset 06ba0000, real_length 00280000 part 13, logic_offset 06e20000, logic_length 00280000, real_offset 06e20000, real_length 00280000 *** Press any key to stop auto run (1 seconds) *** Auto run second count down: 0 *************************************************** Sercomm Boot Version 0.0.4.0 *************************************************** Entering Firmware : Everything is OK. Boot Flag's Magic Found at 6920000. Boot Flag's Magic Found at 6a60000. Find bootFlag successfully. BootFlag1: eRcOmM.002 BootFlag2: eRcOmM.001 Booting from first image (0xb8520000) ... Checksum ... OK! Correctable ECC Error detected: addr=0x0052aa00, intrCtrl=0x00000090, accessCtrl=0xE3441010 Correctable ECC Error detected: addr=0x0052aa00, intrCtrl=0x00000090, accessCtrl=0xE3441010 Correctable ECC Error detected: addr=0x005f9000, intrCtrl=0x000000B0, accessCtrl=0xE3441010 Decompression LZMA Image OK! Entry at 0x80455f10 Closing network. Disabling Switch ports. Flushing Receive Buffers... 1 buffers found Closing DMA Channels Starting program at 0x80455f10 Linux version 3.4.11-rt19 (west@ubuntu) (gcc version 4.6.2 (Buildroot 2011.11) ) #3 SMP PREEMPT Thu May 31 16:56:36 CST 2018 963167REF3 prom init CPU revision is: 0002a080 (Broadcom BMIPS4350) DSL SDRAM reserved: 0x132000 Determined physical RAM map: memory: 07ece000 @ 00000000 (usable) Zone PFN ranges: DMA 0x00000000 -> 0x00001000 Normal 0x00001000 -> 0x00007ece Movable zone start PFN for each node Early memory PFN ranges 0: 0x00000000 -> 0x00007ece On node 0 totalpages: 32462 free_area_init_node: node 0, pgdat 8056e6d0, node_mem_map 81000000 DMA zone: 32 pages used for memmap DMA zone: 0 pages reserved DMA zone: 4064 pages, LIFO batch:0 Normal zone: 222 pages used for memmap Normal zone: 28144 pages, LIFO batch:7 PERCPU: Embedded 7 pages/cpu @81103000 s5520 r8192 d14960 u32768 pcpu-alloc: s5520 r8192 d14960 u32768 alloc=8*4096 pcpu-alloc: [0] 0 [0] 1 Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32208 Kernel command line: root=mtd:rootfs rw rootfstype=jffs2 irqaffinity=0 PID hash table entries: 512 (order: -1, 2048 bytes) Dentry cache hash table entries: 16384 (order: 4, 65536 bytes) Inode-cache hash table entries: 8192 (order: 3, 32768 bytes) Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes. Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes Memory: 122632k/129848k available (4432k kernel code, 7216k reserved, 1068k data, 220k init, 0k highmem) Preemptible hierarchical RCU implementation. NR_IRQS:128 console [ttyS0] enabled Allocating memory for DSP module core and initialization code Allocated DSP module memory - CORE=0x0 SIZE=0, INIT=0x0 SIZE=0 Calibrating delay loop... 397.31 BogoMIPS (lpj=198656) pid_max: default: 32768 minimum: 301 Mount-cache hash table entries: 512 --Kernel Config-- SMP=1 PREEMPT=1 DEBUG_SPINLOCK=0 DEBUG_MUTEXES=0 Broadcom Logger v0.1 May 31 2018 16:03:32 CPU revision is: 0002a080 (Broadcom BMIPS4350) Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes. Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes Brought up 2 CPUs NET: Registered protocol family 16 Internal 1P2 VREG will be shutdown if unused...Unused, turn it off (0000845b-00008457=4<300) registering PCI controller with io_map_base unset registering PCI controller with io_map_base unset bio: create slab <bio-0> at 0 SCSI subsystem initialized usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb PCI host bridge to bus 0000:00 pci_bus 0000:00: root bus resource [mem 0xa0f00000-0xa0ffffff] pci_bus 0000:00: root bus resource [io 0xa2000000-0xa200ffff] pci 0000:00:00.0: [14e4:435f] type 00 class 0x028000 pci 0000:00:00.0: reg 10: [mem 0x10004000-0x10005fff] pci 0000:00:09.0: [14e4:6300] type 00 class 0x0c0310 pci 0000:00:09.0: reg 10: [mem 0x10002600-0x100026ff] pci 0000:00:0a.0: [14e4:6300] type 00 class 0x0c0320 pci 0000:00:0a.0: reg 10: [mem 0x10002500-0x100025ff] PCI host bridge to bus 0000:01 pci_bus 0000:01: root bus resource [mem 0x11000000-0x11efffff] pci_bus 0000:01: root bus resource [??? 0x00000000 flags 0x0] pci 0000:01:00.0: [14e4:6326] type 01 class 0x060400 pci 0000:01:00.0: PME# supported from D0 D3hot pci 0000:01:00.0: PCI bridge to [bus 02-02] bcmhs_spi bcmhs_spi.1: master is unqueued, this is deprecated bcmleg_spi bcmleg_spi.0: master is unqueued, this is deprecated skb_free_task created successfully gbpm_do_work scheduled BLOG v3.0 Initialized BLOG Rule v1.0 Initialized Broadcom IQoS v0.1 May 31 2018 16:10:05 initialized Broadcom GBPM v0.1 May 31 2018 16:10:05 initialized NET: Registered protocol family 8 NET: Registered protocol family 20 Switching to clocksource MIPS NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 4096 (order: 3, 32768 bytes) TCP bind hash table entries: 4096 (order: 3, 32768 bytes) TCP: Hash tables configured (established 4096 bind 4096) TCP: reno registered UDP hash table entries: 128 (order: 0, 4096 bytes) UDP-Lite hash table entries: 128 (order: 0, 4096 bytes) NET: Registered protocol family 1 PCI: CLS mismatch (64 != 16), using 16 bytes bcm_tstamp initialized, (hpt_freq=200000000 2us_div=200 2ns_mult=5 2ns_shift=0) squashfs: version 4.0 (2009/01/31) Phillip Lougher NTFS driver 2.1.30 [Flags: R/W]. jffs2: version 2.2. (NAND) (SUMMARY) �� 2001-2006 Red Hat, Inc. fuse init (API version 7.18) msgmni has been set to 239 io scheduler noop registered (default) Broadcom NAND controller (BrcmNand Controller) mtd->oobsize=0, mtd->eccOobSize=0 NAND_CS_NAND_XOR=00000000 B4: NandSelect=40000001, nandConfig=15142200, chipSelect=0 brcmnand_read_id: CS0: dev_id=c2f18095 After: NandSelect=40000001, nandConfig=15142200 DevId c2f18095 may not be supported. Will use config info Spare Area Size = 16B/512B Block size=00020000, erase shift=17 NAND Config: Reg=15142200, chipSize=128 MB, blockSize=128K, erase_shift=11 busWidth=1, pageSize=2048B, page_shift=11, page_mask=000007ff ECC level changed to 4 OOB size changed to 16 BrcmNAND mfg 0 0 UNSUPPORTED NAND CHIP 128MB on CS0 Found NAND on CS0: ACC=e3441010, cfg=15142200, flashId=c2f18095, tim1=6532845b, tim2=00001e94 BrcmNAND version = 0x0400 128MB @00000000 brcmnand_scan: B4 nand_select = 40000001 brcmnand_scan: After nand_select = 40000001 handle_acc_control: default CORR ERR threshold 1 bits ACC: 16 OOB bytes per 512B ECC step; from ID probe: 16 page_shift=11, bbt_erase_shift=17, chip_shift=27, phys_erase_shift=17 Brcm NAND controller version = 4.0 NAND flash size 128MB @18000000 ECC layout=brcmnand_oob_bch4_2k brcmnand_scan: mtd->oobsize=64 brcmnand_scan: oobavail=35, eccsize=512, writesize=2048 brcmnand_scan, eccsize=512, writesize=2048, eccsteps=4, ecclevel=4, eccbytes=7 -->brcmnand_default_bbt brcmnand_default_bbt: bbt_td = bbt_slc_bch4_main_descr Bad block table Bbt0 found at page 0000ffc0, version 0x01 for chip on CS0 Bad block table 1tbB found at page 0000ff80, version 0x01 for chip on CS0 brcmnand_reset_corr_threshold: default CORR ERR threshold 1 bits for CS0 brcmnand_reset_corr_threshold: CORR ERR threshold changed to 3 bits for CS0 brcmnandCET: Status -> Deferred PPP generic driver version 2.4.2 PPP BSD Compression module registered PPP Deflate Compression module registered NET: Registered protocol family 24 ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver PCI: Enabling device 0000:00:0a.0 (0000 -> 0002) ehci_hcd 0000:00:0a.0: setting latency timer to 64 ehci_hcd 0000:00:0a.0: EHCI Host Controller ehci_hcd 0000:00:0a.0: new USB bus registered, assigned bus number 1 ehci_hcd 0000:00:0a.0: Enabling legacy PCI PM ehci_hcd 0000:00:0a.0: irq 18, io mem 0x10002500 ehci_hcd 0000:00:0a.0: USB f.f started, EHCI 1.00 hub 1-0:1.0: USB hub found hub 1-0:1.0: 2 ports detected ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver PCI: Enabling device 0000:00:09.0 (0000 -> 0002) ohci_hcd 0000:00:09.0: setting latency timer to 64 ohci_hcd 0000:00:09.0: OHCI Host Controller ohci_hcd 0000:00:09.0: new USB bus registered, assigned bus number 2 ohci_hcd 0000:00:09.0: irq 17, io mem 0x10002600 hub 2-0:1.0: USB hub found hub 2-0:1.0: 2 ports detected usbcore: registered new interface driver usblp Initializing USB Mass Storage driver... usbcore: registered new interface driver usb-storage USB Mass Storage support registered. brcmboard: brcm_board_init entry DYING GASP IRQ Initialized and Enabled Serial: BCM63XX driver $Revision: 3.00 $ Magic SysRq with Auxilliary trigger char enabled (type ^ h for list of supported commands) ttyS0 at MMIO 0xb0000180 (irq = 13) is a BCM63XX ttyS1 at MMIO 0xb00001a0 (irq = 42) is a BCM63XX Total # RxBds=1448 bcmPktDmaBds_init: Broadcom Packet DMA BDs initialized bcmPktDma_init: Broadcom Packet DMA Library initialized IPSEC SPU: SUCCEEDED GACT probability NOT on Mirror/redirect action on u32 classifier input device check on Actions configured Netfilter messages via NETLINK v0.30. nf_conntrack version 0.5.0 (1916 buckets, 7664 max) ip_tables: (C) 2000-2006 Netfilter Core Team TCP: cubic registered Initializing XFRM netlink socket NET: Registered protocol family 10 ip6_tables: (C) 2000-2006 Netfilter Core Team IPv6 over IPv4 tunneling driver NET: Registered protocol family 17 NET: Registered protocol family 15 Initializing MCPD Module Ebtables v2.0 registered ebt_time registered ebt_tcpmss registered ebt_ftos registered ebt_wmm_mark registered 8021q: 802.1Q VLAN Support v1.8 hub 1-0:1.0: over-current condition on port 2 VFS: Mounted root (jffs2 filesystem) readonly on device 31:6. Freeing unused kernel memory: 220k freed init started: BusyBox v1.15.3 () starting pid 296, tty '': '/etc/rcS' bcm_ingqos: module license 'Proprietary' taints kernel. Disabling lock debugging due to kernel taint Broadcom Ingress QoS Module Char Driver v0.1 May 31 2018 16:06:16 Registered<243> Broadcom Ingress QoS ver 0.1 initialized BPM: tot_mem_size=134217728B (128MB), buf_mem_size <15%> =20132655B (19MB), num of buffers=9986, buf size=2016 Broadcom BPM Module Char Driver v0.1 May 31 2018 16:05:56 Registered<244> bcmxtmrt: Broadcom BCM3167D0 ATM/PTM Network Device v0.9 May 31 2018 16:08:15 NBUFF v1.0 Initialized Initialized fcache state Broadcom Packet Flow Cache Char Driver v3.0 May 31 2018 16:06:16 Registered<242> Created Proc FS /procfs/fcache Broadcom Packet Flow Cache registered with netdev chain Broadcom Packet Flow Cache learning via BLOG enabled. [FHW] pktDbgLvl[0x85d5f040]=0 [FHW] fhw_construct: Initialized Fcache HW accelerator layer state flwStatsThread created Constructed Broadcom Packet Flow Cache v3.0 May 31 2018 16:06:16 chipId 0x631670D0 Broadcom Forwarding Assist Processor (FAP) Char Driver v0.1 May 31 2018 16:06:00 Registered <241> Enabling SMISBUS PHYS_FAP_BASE[0] is 0x10c01000 FAP Soft Reset Done 4ke Reset Done Enabling SMISBUS PHYS_FAP_BASE[1] is 0x10c01000 FAP Soft Reset Done 4ke Reset Done FAP Debug values at 0xa5f246f0 0xa5fa46f0 fapGso_LoopBkThread created successfully Allocated FAP0 SWQ_HOST2FAP_GSO_LOOPBACK_Q mem=a7998000 : 16384 bytes Allocated FAP0 SWQ_FAP2HOST_GSO_LOOPBACK_Q mem=a7aa0000 : 16384 bytes GSO LOOPBACK Cached HOST2FAP Q INFO: Swq =b0825ef8 qStart=a7998000 qEnd=a799c000 msgSize=4 dqm=18 fapId=0 GSO LOOPBACK Cached FAP2HOST Q INFO: Swq =b0825ec8 qStart=a7aa0000 qEnd=a7aa4000 msgSize=2 dqm=19 fapId=0 Allocated FAP0 SWQ_FAP2HOST_WFD_Q mem=a5df4000 : 7200 bytes Allocated FAP1 SWQ_FAP2HOST_WFD_Q mem=a5cfc000 : 7200 bytes Allocated FAP0 SWQ_FAP2HOST_WFD_Q mem=a5cfa000 : 7200 bytes Allocated FAP1 SWQ_FAP2HOST_WFD_Q mem=a5efc000 : 7200 bytes Allocated FAP0 TM SDRAM Queue Storage (a5f35780) : 390144 bytes @ a5400000 Allocated FAP1 TM SDRAM Queue Storage (a5fb5780) : 390144 bytes @ a5480000 [NTC fapProto] fapReset : Reset FAP Protocol layer [FAP0] DSPRAM : stack <0x80000000><1792>, global <0x80000700><4568>, free <1832>, total<8192> [FAP1] DSPRAM : stack <0x80000000><1792>, global <0x80000700><4568>, free <1832>, total<8192> [FAP0] PSM : addr<0x80002000>, used <24472>, free <104>, total <24576> [FAP1] PSM : addr<0x80002000>, used <24472>, free <104>, total <24576> [FAP0] DQM : availableMemory 14668 bytes, nextByteAddress 0xE00048B0 [FAP1] DQM : availableMemory 14668 bytes, nextByteAddress 0xE00048B0 [FAP0] Initializing FAP4KE GSO LOOPBACK on fapIdx=0 ... [FAP1] IC Timer started [FAP0] SWQ: HOST2FAP_GSO_LOOPBACK [FAP1] FAP4KE WFD Init Done... [FAP0] >>>>------------------ [FAP0] swq =80007ef8 msgSize =4 words , maxDepth=1024 [FAP0] qStart =a7998000 qEnd=a799c000 [FAP0] rdPtr =a7998000 wrPtr=a7998000 count=0 [FAP0] swq->interrupts 0 processed =0 dropped =0 [FAP0] Associated DQM=18 dir HOST2FAP [FAP0] ------------------<<<< [FAP0] SWQ: FAP2HOST_GSO_LOOPBACK [FAP0] >>>>------------------ [FAP0] swq =80007ec8 msgSize =2 words , maxDepth=2048 [FAP0] qStart =a7aa0000 qEnd=a7aa4000 [FAP0] rdPtr =a7aa0000 wrPtr=a7aa0000 count=0 [FAP0] swq->interrupts 0 processed =0 dropped =0 [FAP0] Associated DQM=19 dir FAP2HOST [FAP0] ------------------<<<< [FAP0] FAP4KE GSO LOOPBACK Init Done... [FAP0] IC Timer started [FAP0] FAP4KE WFD Init Done... [FAP1] FAP BPM Initialized. [FAP0] FAP BPM Initialized. Broadcom Packet Flow Cache HW acceleration enabled. fapDrv_construct: FAP0: pManagedMemory=b0820650. wastage 8 bytes fapDrv_construct: FAP1: pManagedMemory=b0a20650. wastage 8 bytes bcmPktDma_bind: FAP Driver binding successfull [FAP0] FAP TM: ON [FAP1] FAP TM: ON bcmxtmcfg: bcmxtmcfg_init entry adsl: adsl_init entry Broadcom BCM63167D0 Ethernet Network Device v0.1 May 31 2018 16:07:57 Broadcom GMAC Char Driver v0.1 May 31 2018 16:08:11 Registered<249> Broadcom GMAC Driver v0.1 May 31 2018 16:08:11 Initialized fapDrv_psmAlloc: fapIdx=1, size: 4800, offset=b0a20650 bytes remaining 7000 ETH Init: Ch:0 - 200 tx BDs at 0xb0a20650 fapDrv_psmAlloc: fapIdx=0, size: 4800, offset=b0820650 bytes remaining 7000 ETH Init: Ch:1 - 200 tx BDs at 0xb0820650 fapDrv_psmAlloc: wastage 8 bytes fapDrv_psmAlloc: fapIdx=0, size: 4808, offset=b0821910 bytes remaining 2184 ETH Init: Ch:0 - 600 rx BDs at 0xb0821910 [FAP0] enetRxChannel 0 fapDrv_psmAlloc: wastage 8 bytes fapDrv_psmAlloc: fapIdx=1, size: 4808, offset=b0a21910 bytes remaining 2184 ETH Init: Ch:1 - 600 rx BDs at 0xb0a21910 [FAP1] enetRxChannel 1 dgasp: kerSysRegisterDyingGaspHandler: bcmsw registered eth0: <Ext sw port: 1> <Logical : 09> PHY_ID <0x20180001 : 0x01> MAC : 78:81:02:61:DE:AD eth1: <Ext sw port: 2> <Logical : 10> PHY_ID <0x20180002 : 0x02> MAC : 78:81:02:61:DE:AD eth2: <Ext sw port: 3> <Logical : 11> PHY_ID <0x20180003 : 0x03> MAC : 78:81:02:61:DE:AD eth3: <Ext sw port: 5> <Logical : 13> PHY_ID <0x22600e00 : 0x00> MAC : 78:81:02:61:DE:AD eth4: <Int sw port: 3> <Logical : 03> PHY_ID <0x0010000c : 0x0c> MAC : 78:81:02:61:DE:AD Ethernet Auto Power Down and Sleep: Enabled All Port Bit Map: 0x2e08: eth4,eth0,eth1,eth2,eth3 Chip WAN Only Ports 0000, Defined WAN Only Ports 0000, WAN Only Port Result: 0x0000: Chip WAN Preffered Ports 0008, Defined WAN Preffered Ports 0000, WAN Preffered Port Result: 0x0008:eth4 Chip LAN Only Ports 0000, Defined LAN Only Ports 0000, LAN Only Port Result: 0x0000: WAN/LAN Both Capable Ports 0x2e00:eth0,eth1,eth2,eth3 [NTC arl] arlEnable : Enabled ARL binding to FAP Broadcom Address Resolution Logic Processor (ARL) Char Driver v0.1 May 31 2018 16:05:56 Registered <245> Broadcom 802.1Q VLAN Interface, v0.1 PCIe: No device found - Powering down Endpoint: endpoint_init entry Endpoint: endpoint_init COMPLETED Initializing WLCSM Module WLCSM Module loaded successfully Wifi Forwarding Driver is initialized! gre: GRE over IPv4 demultiplexor driver ip_gre: GRE over IPv4 tunneling driver PPTP driver version 0.8.5 Loading PCM shim driver insmod: can't insert '/lib/modules/qwerpe.ko': No such file or directory --SMP support wl: dsl_tx_pkt_flush_len=338 wl: norm_wmark_tot=3552, pktc_wmark_tot=3552 wl 0000:00:00.0: setting latency timer to 64 wl: passivemode=1 wl0: creating kthread wl0-kthrd wl: napimode=0 Neither SPROM nor OTP has valid image wl:srom/otp not programmed, using main memory mapped srom info(wombo board) wl: ID=sb/0/ wl: ID=sb/0/ wl: loading /etc/wlan/bcm6362_map.bin srom rev:8 wl0: allocskbmode=1 currallocskbsz=1024 wfd_bind: Dev wl%d wfd_idx 0 wl_radio_idx 0 Type skb configured WFD thread wfd0-thrd minQId/maxQId (20/1073741844), status (0) qmask 0x3 Instantiating WFD 0 thread +++++ Added gso loopback support for dev=wl0 <84ce4800> wfd_registerdevice Successfully registered dev wl0 ifidx 0 wfd_idx 0 wl0: Broadcom BCM435f 802.11 Wireless Controller 7.14.164.307.cpe4.16L05.1-kdb dgasp: kerSysRegisterDyingGaspHandler: wl0 registered Success Note: Loading 6300 MDK (default) driver for 63167 chip Note: Forcing 53115 driver for 53134 Switch MDK: num_switches = 2 Switch MDK: unit = 0; phy_pbmp = 0x8; config_pbmp = 0x18 Switch MDK: unit = 1; phy_pbmp = 0xe; config_pbmp = 0x2e Switch MDK link poll thread: unit=0; phypbmp=0x8 config_pbmp=0x18 Switch MDK link poll thread: unit=1; phypbmp=0xe config_pbmp=0x2e Energy Efficient Ethernet: Enabled eth3 (Ext switch port: 5) (Logical Port: 13) Link UP 1000 mbps full duplex [LAN] LAN5 Link UP 1000 mbps full duplex device eth3 entered promiscuous mode br0: port 1(eth3) entered forwarding state br0: port 1(eth3) entered forwarding state device eth3.10 entered promiscuous mode br10: port 1(eth3.10) entered forwarding state br10: port 1(eth3.10) entered forwarding state Vodafone-H-500-s-v3.4.17 br0: port 1(eth3) entered forwarding state Thu May 31 17:00:50 UTC 2018 ap_name=syslogd, action=start ap_name=coredump, action=start ap_name=energy_saving, action=start ap_name=dnsmasq, action=start ap_name=phy, action=start device eth3 is already a member of a bridge; can't enslave it to bridge br0. ap_name=dhcpd, action=create Success Success Success Success ap_name=lanip, action=start ap_name=firewall, action=start ap_name=telnetd, action=start ap_name=sshd, action=start ap_name=httpd, action=start ap_name=redirect, action=start bind: Address already in use bind: Address already in use ap_name=dnsmasq, action=start ap_name=ftpd, action=start ap_name=networkmap, action=start ap_name=srt, action=restart ap_name=rp, action=start ap_name=udpecho, action=start ap_name=ntp, action=start ap_name=wlan, action=start ap_name=ingress_qos, action=start /bin/wlctl: Not Found ap_name=ingress_classify, action=start /bin/wlctl: Not Found ap_name=qos_cls, action=start Setting SSID: "caramelo2" Setting SSID: "_ONOWiFi" Setting SSID: "_AUTO_ONOWiFi" Setting SSID: "Vodafone-H-500-s3" /bin/wlctl: Not In Range /bin/wlctl: Not In Range killall: wifi_radar_2g: no process killed killall: wifi_wd_2g: no process killed acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: selected channel spec: 0x100a acsd: Adjusted channel spec: 0x100a acsd: selected channel spec: 0x100a 7200 sec flags: 0xb index: 0 : Default 5 sec 2 sample period 1 28800 sec killall: wps_det: no process killed ap_name=qos_remark, action=start ap_name=ipv6wd, action=start ap_name=duplexmode, action=start ap_name=cpm, action=start ap_name=wanip, action=stop ap_name=dnsmasq, action=stop ap_name=dnsmasq, action=stop ap_name=igd_upnp, action=start ap_name=dnsr, action=start ap_name=cron, action=start ap_name=cups, action=start ap_name=snmp, action=start ap_name=3g, action=start ap_name=emrd, action=start ap_name=fon, action=start ap_name=tr069, action=start killall: cwmp: no process killed ap_name=voip_qos, action=start starting pid 1467, tty '': '/sbin/getty ttyS0 115200' Vodafone-H-500-s login: complete device eth3.300 is not a slave of br0 complete complete device eth3 is already a member of a bridge; can't enslave it to bridge br0. complete complete complete complete complete complete complete complete complete complete complete complete complete complete complete Invalid QCSAPI option obss_coexist complete complete complete complete complete complete complete complete complete complete complete complete complete complete complete complete complete complete complete complete complete complete complete complete complete complete killall: wifi_radar_5g: no process killed complete could not open /proc/892/statcould not open /proc/893/stat Vodafone-H-500-s login: admin process '/sbin/getty ttyS0 15200' (pid 1467) exited. Scheduling for restart. starting pid 1559, tty '': '/sbin/getty ttyS0 115200' Vodafone-H-500-s login: admin process '/sbin/getty ttyS0 15200' (pid 1559) exited. Scheduling for restart. starting pid 1560, tty '': '/sbin/getty ttyS0 115200' Vodafone-H-500-s login: #


OpenWrt

Experimental RAM firmware (no nand flash installation)

HELO CPUI L1CI HELO CPUI L1CI 4.1605-1.0.38-118.3 DRAM ---- PHYS STRF 400H PHYE DDR3 SIZ4 SIZ3 SIZ2 DINT USYN LSYN MFAS LMBE RACE PASS ---- ZBSS CODE DATA L12F MAIN FPS0 FDPM PMOK GFOK F002 F001 RAM1 NAN9 NAN3 RFS0 NAN5 Base: 4.16_05 CFE version 1.0.38-118.3 for BCM963268 (32bit,SP,BE) Build Date: Fri Aug 19 13:10:18 CST 2016 (jeremy@Ubuntu) Copyright (C) 2000-2015 Broadcom Corporation. Boot Strap Register: 0x1ff90bf Chip ID: BCM63167D0, MIPS: 400MHz, DDR: 400MHz, Bus: 200MHz Main Thread: TP0 Memory Test Passed Total Memory: 134217728 bytes (128MB) Boot Address: 0xb8000000 NAND ECC BCH-4, page size 0x800 bytes, spare size used 64 bytes NAND flash device: MXIC MX30LF1G08AA, id 0xc2f1 block 128KB size 131072KB GPIOOverlays is 0x8010 Board IP address : 192.168.1.1:ffffff00 Host IP address : 192.168.1.100 Gateway IP address : Run from flash/host/tftp (f/h/c) : f Default host run file name : vmlinux Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Default host ramdisk file name : Default ramdisk store address : Board Id (0-33) : 963167REF3 Number of MAC Addresses (1-32) : 16 Base MAC Address : 78:81:02:61:de:ad PSI Size (1-128) KBytes : 24 Enable Backup PSI [0|1] : 0 System Log Size (0-256) KBytes : 0 Auxillary File System Size Percent: 0 Main Thread Number [0|1] : 0 WLan Feature : 0x00 Voice Board Configuration (0-19) : LE9672_ZSI Partition 1 Size (MB) : Partition 2 Size (MB) : Partition 3 Size (MB) : Partition 4 Size (MB) (Data) : 4MB External switch id = a750 SC_DEBUG: Nand Partition Table Magic Found at 20000. part 0, logic_offset 00000000, logic_length 00020000, real_offset 00000000, real_length 00020000 part 1, logic_offset 00020000, logic_length 000a0000, real_offset 00020000, real_length 000a0000 part 2, logic_offset 000c0000, logic_length 00140000, real_offset 000c0000, real_length 00140000 part 3, logic_offset 00200000, logic_length 00140000, real_offset 00200000, real_length 00140000 part 4, logic_offset 00340000, logic_length 000a0000, real_offset 00340000, real_length 000a0000 part 5, logic_offset 003e0000, logic_length 00140000, real_offset 003e0000, real_length 00140000 part 6, logic_offset 00520000, logic_length 01e00000, real_offset 00520000, real_length 01e00000 part 7, logic_offset 02320000, logic_length 01400000, real_offset 02320000, real_length 01400000 part 8, logic_offset 03720000, logic_length 01e00000, real_offset 03720000, real_length 01e00000 part 9, logic_offset 05520000, logic_length 01400000, real_offset 05520000, real_length 01400000 part 10, logic_offset 06920000, logic_length 00140000, real_offset 06920000, real_length 00140000 part 11, logic_offset 06a60000, logic_length 00140000, real_offset 06a60000, real_length 00140000 part 12, logic_offset 06ba0000, logic_length 00280000, real_offset 06ba0000, real_length 00280000 part 13, logic_offset 06e20000, logic_length 00280000, real_offset 06e20000, real_length 00280000 *** Press any key to stop auto run (1 seconds) *** Auto run second count down: 1 web info: Waiting for connection on socket 0. CFE> CFE> r 192.168.1.7:h500s.elf 0x80010000/3732501 Entry at 0x80010000 Closing network. Disabling Switch ports. Flushing Receive Buffers... 0 buffers found Closing DMA Channels Starting program at 0x80010000 OpenWrt kernel loader for BCM63XX Copyright (C) 2011 Gabor Juhos <juhosg@openwrt.org> Copyright (C) 2014 Jonas Gorski <jogo@openwrt.org> Decompressing kernel... done! blasting from 0x80010000 to 0x0078dcef (0x80010000 - 0x8079dcf0) Starting kernel at 80010000... [ 0.000000] Linux version 4.14.162 (dani@tool) (gcc version 8.3.0 (OpenWrt GCC 8.3.0 r11915-52f0b0913d)) #0 SMP Sun Jan 5 18:36:46 2020 [ 0.000000] Detected Broadcom 0x63268 CPU revision d0 [ 0.000000] CPU frequency is 400 MHz [ 0.000000] 128MB of RAM installed [ 0.000000] board_bcm963xx: Boot address 0xb8000000 [ 0.000000] board_bcm963xx: CFE version: unknown [ 0.000000] bcm63xx_nvram: nvram checksum failed, contents may be invalid (expected 02000000, got c4966144) [ 0.000000] bootconsole [early0] enabled [ 0.000000] CPU0 revision is: 0002a080 (Broadcom BMIPS4350) [ 0.000000] board: board name: BXK00C-1.6 [ 0.000000] MIPS: machine is Sercomm H500-s [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 08000000 @ 00000000 (usable) [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes. [ 0.000000] Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x0000000000000000-0x0000000007ffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000000000-0x0000000007ffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff] [ 0.000000] random: get_random_bytes called from start_kernel+0x88/0x4dc with crng_init=0 [ 0.000000] percpu: Embedded 14 pages/cpu s25792 r8192 d23360 u57344 [ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 32480 [ 0.000000] Kernel command line: rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200 [ 0.000000] PID hash table entries: 512 (order: -1, 2048 bytes) [ 0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes) [ 0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes) [ 0.000000] Memory: 120600K/131072K available (4489K kernel code, 199K rwdata, 1004K rodata, 3068K init, 214K bss, 10472K reserved, 0K cma-reserved) [ 0.000000] SLUB: HWalign=16, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 [ 0.000000] Hierarchical RCU implementation. [ 0.000000] NR_IRQS: 256 [ 0.000000] genirq: irq_chip bcm6345-periph-intc did not update eff. affinity mask of irq 52 [ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 9556302233 ns [ 0.000013] sched_clock: 32 bits at 200MHz, resolution 5ns, wraps every 10737418237ns [ 0.008139] Calibrating delay loop... 397.82 BogoMIPS (lpj=795648) [ 0.046462] pid_max: default: 32768 minimum: 301 [ 0.051596] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.058418] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.069412] Hierarchical SRCU implementation. [ 0.075752] smp: Bringing up secondary CPUs ... [ 0.081846] SMP: Booting CPU1... [ 10.804461] Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes. [ 10.804478] Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes [ 10.804815] CPU1 revision is: 0002a080 (Broadcom BMIPS4350) [ 0.117338] Synchronize counters for CPU 1: [ 0.138015] SMP: CPU1 is running [ 0.138019] done. [ 0.147889] smp: Brought up 1 node, 2 CPUs [ 0.162950] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns [ 0.173010] futex hash table entries: 512 (order: 1, 8192 bytes) [ 0.179474] pinctrl core: initialized pinctrl subsystem [ 0.185889] NET: Registered protocol family 16 [ 0.193742] unsupported NAND flash detected [ 0.441132] registering PCI controller with io_map_base unset [ 0.474393] PCI host bridge to bus 0000:00 [ 0.478660] pci_bus 0000:00: root bus resource [mem 0x11000000-0x11efffff] [ 0.485821] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0] [ 0.492780] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0] [ 0.499767] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff] [ 0.508453] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring [ 0.516976] pci 0000:00:00.0: PCI bridge to [bus 01] [ 0.525748] clocksource: Switched to clocksource MIPS [ 0.534922] NET: Registered protocol family 2 [ 0.541393] TCP established hash table entries: 1024 (order: 0, 4096 bytes) [ 0.548638] TCP bind hash table entries: 1024 (order: 1, 8192 bytes) [ 0.555273] TCP: Hash tables configured (established 1024 bind 1024) [ 0.562271] UDP hash table entries: 256 (order: 1, 8192 bytes) [ 0.568374] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes) [ 0.575281] random: fast init done [ 0.575491] NET: Registered protocol family 1 [ 3.426605] Crashlog allocated RAM at address 0x3f00000 [ 3.434706] workingset: timestamp_bits=14 max_order=15 bucket_order=1 [ 3.452434] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 3.458448] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 3.492173] io scheduler noop registered [ 3.496235] io scheduler deadline registered (default) [ 3.505215] bcm63268-pinctrl 100000c0.pin-controller: registered at mmio b00000c0 [ 3.515144] 10000180.serial: ttyS0 at MMIO 0x10000180 (irq = 13, base_baud = 1562500) is a bcm63xx_uart [ 3.524889] console [ttyS0] enabled [ 3.524889] console [ttyS0] enabled [ 3.532027] bootconsole [early0] disabled [ 3.532027] bootconsole [early0] disabled [ 3.545442] nand: device found, Manufacturer ID: 0xc2, Chip ID: 0xf1 [ 3.552069] nand: Macronix MX30LF1G18AC [ 3.555990] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64 [ 3.563816] bcm6368_nand 10000200.nand: detected 128MiB total, 128KiB blocks, 2KiB pages, 16B OOB, 8-bit, BCH-4 [ 3.576575] Bad block table not found for chip 0 [ 3.583416] Bad block table not found for chip 0 [ 3.588138] Scanning device for bad blocks [ 4.217655] Bad block table written to 0x000007fe0000, version 0x01 [ 4.225309] Bad block table written to 0x000007fc0000, version 0x01 [ 4.271645] 1 fixed-partitions partitions found on MTD device brcmnand.0 [ 4.278534] Creating 1 MTD partitions on "brcmnand.0": [ 4.283818] 0x000000000000-0x000008000000 : "nand_flash" [ 4.295175] bcm63xx-spi 10000800.spi: at [mem 0x10000800-0x10000f0b flags 0x200] (irq 88, FIFOs size 542) [ 4.307640] libphy: Fixed MDIO Bus: probed [ 4.355214] bcm63xx-wdt bcm63xx-wdt: started, timer margin: 30 sec [ 4.369415] NET: Registered protocol family 10 [ 4.377421] Segment Routing with IPv6 [ 4.381388] NET: Registered protocol family 17 [ 4.386044] 8021q: 802.1Q VLAN Support v1.8 [ 4.426250] Freeing unused kernel memory: 3068K [ 4.430897] This architecture does not have kernel memory protection. [ 4.463352] init: Console is alive [ 4.467182] init: - watchdog - [ 4.509989] kmodloader: loading kernel modules from /etc/modules-boot.d/* [ 4.547186] usbcore: registered new interface driver usbfs [ 4.553030] usbcore: registered new interface driver hub [ 4.558705] usbcore: registered new device driver usb [ 4.642707] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 4.666117] SCSI subsystem initialized [ 4.678519] ehci-platform: EHCI generic platform driver [ 4.791319] ehci-platform ehci-platform: EHCI Host Controller [ 4.797272] ehci-platform ehci-platform: new USB bus registered, assigned bus number 1 [ 4.805741] ehci-platform ehci-platform: irq 18, io mem 0xb0002500 [ 4.831300] ehci-platform ehci-platform: USB 2.0 started, EHCI 1.00, overcurrent ignored [ 4.840953] hub 1-0:1.0: USB hub found [ 4.844917] hub 1-0:1.0: 2 ports detected [ 4.856309] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver [ 4.864641] ohci-platform: OHCI generic platform driver [ 4.870223] ohci-platform ohci-platform: Generic Platform OHCI controller [ 4.877230] ohci-platform ohci-platform: new USB bus registered, assigned bus number 2 [ 4.885517] ohci-platform ohci-platform: irq 17, io mem 0xb0002600 [ 4.960813] hub 2-0:1.0: USB hub found [ 4.964801] hub 2-0:1.0: 2 ports detected [ 4.978446] usbcore: registered new interface driver usb-storage [ 4.984937] kmodloader: done loading kernel modules from /etc/modules-boot.d/* [ 4.995373] init: - preinit - Bus error [ 5.190576] random: procd: uninitialized urandom read (4 bytes read) Press the [f] key and hit [enter] to enter failsafe mode Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level [ 8.384608] procd: - early - [ 8.387783] procd: - watchdog - [ 8.981245] procd: - watchdog - [ 8.984905] procd: - ubus - [ 9.001059] random: ubusd: uninitialized urandom read (4 bytes read) [ 9.038976] random: ubusd: uninitialized urandom read (4 bytes read) [ 9.046099] random: ubusd: uninitialized urandom read (4 bytes read) [ 9.053976] procd: - init - Please press Enter to activate this console. [ 9.199418] random: crng init done [ 9.202862] random: 5 urandom warning(s) missed due to ratelimiting [ 9.671160] kmodloader: loading kernel modules from /etc/modules.d/* [ 9.707791] ntfs: driver 2.1.32 [Flags: R/O MODULE]. [ 9.739857] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 9.762878] ip_tables: (C) 2000-2006 Netfilter Core Team [ 9.785872] nf_conntrack version 0.5.0 (2048 buckets, 8192 max) [ 9.890699] xt_time: kernel timezone is -0000 [ 9.911124] PPP generic driver version 2.4.2 [ 9.918264] NET: Registered protocol family 24 [ 9.928711] kmodloader: done loading kernel modules from /etc/modules.d/* [ 35.110326] br-lan: port 1(eth0) entered blocking state [ 35.115770] br-lan: port 1(eth0) entered disabled state [ 35.121751] device eth0 entered promiscuous mode [ 35.165989] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready [ 36.107441] br-lan: port 1(eth0) entered blocking state [ 36.112837] br-lan: port 1(eth0) entered forwarding state [ 36.121975] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready BusyBox v1.31.1 () built-in shell (ash) _______ ________ __ | |.-----.-----.-----.| | | |.----.| |_ | - || _ | -__| || | | || _|| _| |_______|| __|_____|__|__||________||__| |____| |__| W I R E L E S S F R E E D O M ----------------------------------------------------- OpenWrt SNAPSHOT, r11915-52f0b0913d ----------------------------------------------------- === WARNING! ===================================== There is no root password defined on this device! Use the "passwd" command to set up a new password in order to prevent unauthorized SSH logins. -------------------------------------------------- root@OpenWrt:/# cat /proc/cpuinfo system type : bcm63xx/BXK00C-1.6 (0x63268/0xD0) machine : Sercomm H500-s processor : 0 cpu model : Broadcom BMIPS4350 V8.0 BogoMIPS : 397.82 wait instruction : yes microsecond timers : yes tlb_entries : 32 extra interrupt vector : yes hardware watchpoint : no isa : mips1 mips2 mips32r1 ASEs implemented : Options implemented : tlb 4kex 4k_cache prefetch mcheck ejtag llsc dc_aliases nan_legacy nan_2008 shadow register sets : 1 kscratch registers : 0 package : 0 core : 0 VCED exceptions : not available VCEI exceptions : not available processor : 1 cpu model : Broadcom BMIPS4350 V8.0 BogoMIPS : 400.38 wait instruction : yes microsecond timers : yes tlb_entries : 32 extra interrupt vector : yes hardware watchpoint : no isa : mips1 mips2 mips32r1 ASEs implemented : Options implemented : tlb 4kex 4k_cache prefetch mcheck ejtag llsc dc_aliases nan_legacy nan_2008 shadow register sets : 1 kscratch registers : 0 package : 0 core : 0 VCED exceptions : not available VCEI exceptions : not available root@OpenWrt:/# cat /proc/iomem 00000000-07ffffff : System RAM 00010000-00472a9f : Kernel code 00472aa0-005a0fff : Kernel data 100000b0-100000bf : nand-int-base 100000c0-100000c7 : dirout 100000c8-100000cf : dat 100000d0-100000d3 : led 100000d8-100000db : mode 100000dc-100000df : ctrl 100000f8-100000fb : basemode 10000180-10000197 : /ubus@10000000/serial@10000180 10000200-1000037f : nand 10000600-100007ff : nand-cache 10000800-10000f0b : /ubus@10000000/spi@10000800 11000000-11efffff : bcm63xx PCIe memory space b000009c-b00000a7 : bcm63xx-wdt b0002500-b00025ff : ehci-platform b0002500-b00025ff : ehci-platform b0002600-b00026ff : ohci-platform b0002600-b00026ff : ohci-platform b000d800-b000d8ff : bcm63xx_enet_shared.0 b000d800-b000d8ff : bcm63xx_enet_shared.0 b000da00-b000dbff : bcm63xx_enet_shared.0 b000da00-b000dbff : bcm63xx_enet_shared.0 b000dc00-b000ddff : bcm63xx_enet_shared.0 b000dc00-b000ddff : bcm63xx_enet_shared.0 b0700000-b070ffff : bcm63xx_enetsw.0 root@OpenWrt:/# cat /proc/interrupts CPU0 CPU1 0: 1937 0 MIPS 0 smp_ipi0 1: 0 1701 MIPS 1 smp_ipi1 7: 47259 47156 MIPS 7 timer 8: 0 0 bcm6345-periph-intc 0 bcm63xx_timer 9: 153 0 bcm6345-periph-intc 1 eth0 13: 478 0 bcm6345-periph-intc 5 10000180.serial 17: 1 0 bcm6345-periph-intc 9 ohci_hcd:usb2 18: 1 0 bcm6345-periph-intc 10 ehci_hcd:usb1 58: 8439 0 bcm6345-periph-intc 50 brcmnand 72: 10 0 bcm6345-periph-intc 64 eth0 88: 0 0 bcm6345-periph-intc 80 10000800.spi ERR: 0 root@OpenWrt:/#


Tags

This website uses cookies. By using the website, you agree with storing cookies on your computer. Also you acknowledge that you have read and understand our Privacy Policy. If you do not agree leave the website.More information about cookies
toh/sercomm/h500s.txt · Last modified: 2020/01/31 22:27 by danitool