T-Home Speedport W 303V Typ B
The T-Home Speedport W 303V is a IAD sold by T-Com with a ADSL2+ Annex B Modem, 11n Wifi and two FXS ports as well as a S0 bus connector.
There are 2 models of it, “Typ A” and “Typ B” having completely different hardware. Click here for "Typ A".
Supported Versions
Hardware Highlights
Bugs
Wifi broken - SPROM workaround exists, please scroll down
- Wifi working kernel 3.10.49 (OpenWrt 14.07) → OpenWrt 14.07 bootlog
- Wifi not working since kernel 4.x (OpenWrt 15.05) → OpenWrt snapshot (08.01.2020) bootlog
PCI: Enabling device 0000:00:01.0 (0000 -> 0002) ssb: Found chip with id 0x4322, rev 0x01 and package 0x09 ssb: WARNING: Using fallback SPROM failed (err -2) ssb: Failed to register PCI version of SSB with error -2 b43-pci-bridge: probe of 0000:00:01.0 failed with error -2
tried fixes:
change “nvram” to OpenWrt 14.07 setting in /openwrt/target/linux/brcm63xx/dts/spw303v.dts
did not help.
OpenWrt 14.07
0x0000007e0000-0x000000800000 : "nvram" > 20000 0x000000010000-0x0000007e0000 : "linux"
OpenWrt trunk
0x000000000100-0x0000001d7c5c : "kernel" 0x0000001d7c5c-0x0000007e0000 : "rootfs" mtd: device 3 (rootfs) set to be root filesystem 1 squashfs-split partitions found on MTD device rootfs 0x0000003f0000-0x0000007e0000 : "rootfs_data" 0x0000007f0000-0x000000800000 : "nvram" > 10000 -> smaller
Installation
OEM easy installation
This section deals with how you install OpenWrt from a device freshly opened.
- Configure your PC to use an IP from 192.168.2.0/24 (not .1)
- Press and hold reset, power on the device
- Wait until all leds are lit, then stop pressing reset
- Browse to
http://192.168.2.1/
- Upload openwrt-SPW303V-squashfs-cfe-factory.bin file to router
- Wait for it to reboot
- Telnet to 192.168.1.1 and set a root password, or browse to
http://192.168.1.1/
if LuCI is installed.
NOTE: If you are using this to recover from a non working flash, you have to first upload a stock firmware using the same procedure, then flash OpenWrt.
Upgrading OpenWrt
If you have already installed OpenWrt and like to reflash for e.g. upgrading to a new OpenWrt version you can upgrade using the sysupgrade command line tool. It is important that you put the firmware image into the ramdisk (/tmp) before you start flashing.
Note: You need the -sysupgrade.bin file for upgrading.
LuCI Web Upgrade Process
- Browse to
http://192.168.1.1/cgi-bin/luci/mini/system/upgrade/
LuCI Upgrade URL - Upload image file for sysupgrade to LuCI
- Wait for reboot
Terminal Upgrade Process
- Login as root via SSH on 192.168.1.1
- Use the following commands to upgrade.
cd /tmp/ wget http://downloads.openwrt.org/attitude_adjustment/12.09/brcm63xx/generic/openwrt-SPW303V-squashfs-cfe-sysupgrade.bin sysupgrade openwrt-SPW303V-squashfs-cfe-sysupgrade.bin
Debricking
The bootloader (CFE) has a web interface for uploading firmware images.
Press your reset button while powering up the device, wait ~20seconds, then release the reset button. All LEDs should light.
Your device will be accessible on the http://192.168.2.1/
address with a very simple webpage where you can upload a new image.
The device will not start a DHCP server, you will have to configure your host to the 192.168.2.x subnet.
Ps. do not try to upload images with TFTP using the flashimage command in your CFE prompt, because it does not works.
Hardware
Info
Architecture | MIPS |
---|---|
Vendor | Broadcom |
bootloader | cfe |
Board Id | 96358-502V |
System-On-Chip | BCM6358 |
CPU/Speed | BMIPS4350 V1.0 / 300 MHz BMIPS Dual Core |
Flash-Chip | AM29LV320MT |
Flash size | 8 MiB |
RAM size | 32 MiB |
Wireless | Broadcom BCM4322 |
Wireless standard | 802.11b/g/n |
Ethernet | Internal PHY |
Internet | ADSL2+ Annex B (unsupported) |
USB | No |
Serial | Yes |
JTAG | No |
Opening the case
- To remove the cover you have two remove two screws, then open a total of eight plastic clips. These are very easy to break.
Serial
The Speedport W 303V comes pre equipped with a serial header with 3.3V TTL. The serial console is available on J3
serial connector J3 |---| | o | GND | o | RX | o | TX | o | 3.3V |---| <Ethernet/RJ45 Ports are on this side>
The serial port is the typical 3.3V TTL serial commonly found on router and router-like devices, NOT a PC-style RS-232 serial, with it's different signaling voltages. It's 115200 8-N-1 without hardware or software control.
Basic configuration
→ Basic configuration After flashing, proceed with this.
Set up your Internet connection, configure wireless, configure USB port, etc.
Specific Configuration
Interfaces
The default network configuration is:
Interface Name | Description | Default configuration |
---|---|---|
br-lan | LAN & WiFi | 192.168.1.1/24 |
eth0 | LAN port | None |
wl0/wlan0 | WiFi | Disabled |
WLAN
Installation the proprietary Broadcom drivers
opkg install kmod-brcm-wl wlc nas
Failsafe mode
Buttons
→ hardware.button on howto use and configure the hardware button(s).
The Speedport W 303V has two buttons. They are Reset and Secure Easy Setup. Here, we merely name the buttons, so we can use them in the above Howto:
BUTTON | Event |
---|---|
Reset | reset |
Secure Easy Setup | ses |
there is a problem with the latest trunk - feb 2014 . the router always boot into failsafe - caused by the button config. take a look at https://dev.openwrt.org/ticket/14546
Notes
The Bootloader (CFE) is password protected. To abort autoboot you have to either hold the reset button long enough to enter recovery mode or enter TCO&
when it counts down for autoboot.
OpenWrt fixes
Disable default boot to failsafe mode
OpenWrt snapshot (08.01.2020) boots by default to failsafe mode.
Workaround → build your own image:
modify /openwrt/target/linux/brcm63xx/dts/spw303v.dts
→ set reset: gpios = <&pinctrl 11 0>;
to gpios = <&pinctrl 11 1>;
keys { compatible = "gpio-keys-polled"; #address-cells = <1>; #size-cells = <0>; poll-interval = <20>; reset { label = "reset"; gpios = <&pinctrl 11 1>; linux,code = <KEY_RESTART>; debounce-interval = <60>; };
set pci SPROM fallback to get wifi chip loaded since 21.02.0
see https://github.com/hontz1/openwrt_readme_t-com-w303v-B for settings.
modify /target/linux/bcm63xx/patches-5.10/516-board-bcm6358.patch
modify /target/linux/bcm63xx/patches-5.4/516-board-bcm6358.patch
static struct board_info __initdata board_spw303v = { .name = "96358-502V", .expected_cpu_id = 0x6358, .has_pci = 1, .has_enet0 = 1, .enet0 = { .has_phy = 1, .use_internal_phy = 1, }, .use_fallback_sprom = 1, .fallback_sprom = { .type = SPROM_BCM4322, .pci_bus = 0, .pci_dev = 1, }, };
Bootlogs
OEM bootlog
CFE version 1.0.38-8.19 for BCM96358 (32bit,SP,BE) Build Date: Mon Aug 11 09:50:01 CST 2008 (samuel@ubuntu) Copyright (C) 2000-2006 Broadcom Corporation. Boot Address 0xbe000000 Initializing Arena. Initializing Devices. Parallel flash device: name AM29LV320MT, id 0x2201, size 8192KB Auto-negotiation timed-out 10 MB Half-Duplex (assumed) CPU type 0x2A010: 300MHz, Bus: 133MHz, Ref: 64MHz CPU running TP0 Total memory: 33554432 bytes (32MB) Total memory used by CFE: 0x80401000 - 0x80528600 (1209856) Initialized Data: 0x8041DE90 - 0x8041FDF0 (8032) BSS Area: 0x8041FDF0 - 0x80426600 (26640) Local Heap: 0x80426600 - 0x80526600 (1048576) Stack Area: 0x80526600 - 0x80528600 (8192) Text (code) segment: 0x80401000 - 0x8041DE8C (118412) Boot area (physical): 0x00529000 - 0x00569000 Relocation Factor: I:00000000 - D:00000000 Board IP address : 192.168.2.1:ffffff00 Host IP address : 192.168.2.100 Gateway IP address : Run from flash/host (f/h) : f Default host run file name : vmlinux Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Serial Number : J903002722 Hardware Version : B Default Password : 426968422859318186062740 Board Id (0-7) : 96358-502V Number of MAC Addresses (1-32) : 11 Base MAC Address : xx:xx:xx:xx:xx:xx PSI Size (1-128) KBytes : 128 Main Thread Number [0|1] : 0 *** Press any key to stop auto run (1 seconds) *** Auto run second count down: 1<0x08>1<0x08>0 Code Address: 0x80010000, Entry Address: 0x801d2018 Decompression OK! Entry at 0x801d2018 Closing network. Starting program at 0x801d2018 Linux version 2.6.8.1 (root@samox) (gcc version 3.4.2) #2 Mon Mar 23 16:58:11 CST 2009 Parallel flash device: name AM29LV320MT, id 0x2201, size 8192KB Total Flash size: 8192K with 135 sectors 96358-502V prom init CPU revision is: 0002a010 Determined physical RAM map: memory: 01fa0000 @ 00000000 (usable) On node 0 totalpages: 8096 DMA zone: 8096 pages, LIFO batch:1 Normal zone: 0 pages, LIFO batch:1 HighMem zone: 0 pages, LIFO batch:1 Built 1 zonelists Kernel command line: root=31:0 ro noinitrd console=ttyS0,115200 brcm mips: enabling icache and dcache... Primary instruction cache 32kB, physically tagged, 2-way, linesize 16 bytes. Primary data cache 16kB 2-way, linesize 16 bytes. PID hash table entries: 128 (order 7: 1024 bytes) Using 150.000 MHz high precision timer. Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) Allocating memory for DSP module core and initialization code Allocated DSP module memory - CORE=0x8104c9c0 SIZE=668960, INIT=0x0 SIZE=0 Memory: 29384k/32384k available (1478k kernel code, 2980k reserved, 318k data, 72k init, 0k highmem) Calibrating delay loop... 299.82 BogoMIPS Mount-cache hash table entries: 512 (order: 0, 4096 bytes) Checking for 'wait' instruction... unavailable. NET: Registered protocol family 16 Can't analyze prologue code at 80180024 PPP generic driver version 2.4.2 NET: Registered protocol family 24 Using noop io scheduler bcm963xx_mtd driver v1.0 brcmboard: brcm_board_init entry SES: Button Interrupt 0x8025 is enabled Invalid External Interrupt definition SES: LED GPIO 0x8000 is enabled Invalid External Interrupt definition Ayecom init mutex for flash writing.... Serial: BCM63XX driver $Revision: 3.00 $ ttyS0 at MMIO 0xfffe0100 (irq = 10) is a BCM63XX ttyS1 at MMIO 0xfffe0120 (irq = 11) is a BCM63XX blaadd: blaa_detect entry Broadcom BCM6358A1 USB Network Device v0.4 Mar 23 2009 16:53:47 usb0: MAC Address: xx xx xx xx xx xx usb0: Host MAC Address: xx xx xx xx xx xx u32 classifier OLD policer on NET: Registered protocol family 2 IP: routing cache hash table of 512 buckets, 4Kbytes TCP: Hash tables configured (established 2048 bind 4096) NET: Registered protocol family 1 NET: Registered protocol family 17 Ebtables v2.0 registered NET: Registered protocol family 8 NET: Registered protocol family 20 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> VFS: Mounted root (squashfs filesystem) readonly. Freeing unused kernel memory: 72k freed init started: BusyBox v1.00 (2009.03.23-09:14+0000) multi-call binary Algorithmics/MIPS FPU Emulator v1.5 BusyBox v1.00 (2009.03.23-09:14+0000) Built-in shell (msh) Enter 'help' for a list of built-in commands. Loading drivers and kernel modules... adsldd: module license 'Proprietary' taints kernel. adsl: adsl_init entry Broadcom BCMPROCFS v1.0 initialized Broadcom BCM6358A1 Ethernet Network Device v0.3 Mar 23 2009 16:53:45 Config Internal PHY Through MDIO BCM63xx_ENET: Auto-negotiation timed-out BCM63xx_ENET: 10 MB Half-Duplex (assumed) eth0: MAC Address: xx:xx:xx:xx:xx:xx DSP Driver: DSP init stub Endpoint: endpoint_init entry BOS: Enter bosInit Enter bosAppInit Exit bosAppInit BOS: Exit bosInit Endpoint: endpoint_init COMPLETED wlctl: wl driver adapter not found wlctl: wl driver adapter not found wlctl: wl driver adapter not found wlctl: wl driver adapter not found BcmAdsl_Initialize=0xC003E3C8, g_pFnNotifyCallback=0xC005CC54 AnnexCParam=0x7FFF7EB8 AnnexAParam=0x00000980 adsl2=0x00000000 pSdramPHY=0xA1FFFFF8, 0xFFFFFFFF 0xFFFFFFFF AdslCoreHwReset: AdslOemDataAddr = 0xA1FF9C34 AnnexCParam=0x7FFF7EB8 AnnexAParam=0x00000980 adsl2=0x00000000 dgasp: kerSysRegisterDyingGaspHandler: dsl0 registered atmapi: prioritize receive packets ATM proc init !!! Sun Jan 23 15:07:00 UTC 2011 /var/mutexFlag = 0 /var/webAccessTime= /var/tr064AccessTime = /var/tr064ConfigurationStarted = 0 /var/pppAccountDefault = 0 /var/webIndexFlag = 0 https 887 tr64 887 tr69 887 filesmap 2 ==> Bcm963xx Software Version: 1.10.000 <== device usb0 entered promiscuous mode br0: port 1(usb0) entering learning state br0: topology change detected, propagating br0: port 1(usb0) entering forwarding state device eth0 entered promiscuous mode br0: port 2(eth0) entering learning state br0: topology change detected, propagating br0: port 2(eth0) entering forwarding state security logd starts running! read log from flash! head: 0 tail: 65414 size: 65516 ###########service = true pvc2684d: Interface "nas_1_32" created sucessfully cmd == ATM_SETBACKEND br2684_attachvcc 1. vcc=81f82e00, encaps=1, brvcc=81f9c958, brdev=81580e20 pvc2684d: Communicating over ATM 0.1.32, encapsulation: LLC ######################################ip externsion = false device nas_1_32 entered promiscuous mode br0: port 3(nas_1_32) entering learning state br0: topology change detected, propagating br0: port 3(nas_1_32) entering forwarding state <<udhcp server (v0.9.6) started>> leasetime = 1814400can't open the PcListFile Elliot-Debug:reservedListInit! Elliot-Debug:reservedListInit OK! 1814400PCI: Setting latency timer of device 0000:00:01.0 to 64 PCI: Enabling device 0000:00:01.0 (0004 -> 0006) wl: srom not detected, using main memory mapped srom info (wombo board) wl0: wlc_attach: use mac addr from the system pool by id: 0x776c0000 wl0: MAC Address: xx:xx:xx:xx:xx:xx wl0: Broadcom BCM4322 802.11 Wireless Controller 4.174.64.18.cpe1.0 dgasp: kerSysRegisterDyingGaspHandler: wl0 registered killall: lld2d: no process killed killall: wsccmd: no process killed Setting SSID "anetz" Setting country code using abbreviation: "DE" Chanspec set to 0x2e09 Chanspec set to 0x2e0b device wl0 entered promiscuous mode br0: port 4(wl0) entering learning state br0: topology change detected, propagating br0: port 4(wl0) entering forwarding state EngDbg:- PSI Retrieve Status for PortMirrorStatus = 3 EngDbg:- In Effect Port Mirror Cfg ENGDBG :- In Effect Port Mirroring, status = 0 count = 0 getCurrentState: len = 0 https 887 tr64 887 tr69 887 filesmap 2 brctl delif br0 usb0 device usb0 left promiscuous mode br0: port 1(usb0) entering disabled state ip_tables: (C) 2000-2002 Netfilter core team ip_conntrack version 2.1 (253 buckets, 0 max) - 384 bytes per conntrack ip_conntrack_pptp version 2.1 loaded ip_nat_pptp version 2.0 loaded ip_ct_h323: init success ip_nat_h323: init success BRCM NAT Caching v1.0 Sep 25 2008 11:45:09 BRCM NAT Cache: Hooking hit function @ c00ec07c >>>>>>>>>>>rtp_main >>>>>>>>>>>>>TecomRtpMonitor_Init<<<<<<<<<< initDialPlanConfig tecom_voipcfg_api.cpp -- 56 -----startVoice BOS: Enter bosInit bosTimerInit Enter bosAppInit Exit bosAppInit BOS: Exit bosInit Created queue CFGMGR_Q 15:07:32 Init Configuration Manager: CFGMGR_VOIP_RETCODE_SUCCESS 15:07:32 Setting provisioning default values. voipqosapi: sendto returned 2 15:07:32 Process 709 priority is 0 15:07:32 Process 709: old priority 0, new priority -15 Enter TaskCreate VRGCMGR TaskCreate - spawn new task VRGCMGR Exit TaskCreate 15:07:32 Broadcom Canada, VoIP Call Manager. Version: 1.8.2 Release: Build Date: Mar 23 2009 17:07:26 15:07:32 Initializing endpoint with country code 8 kernel::endpoint_open kernel::endpoint_open COMPLETED 15:07:32 Endpoint Event task started with pid 713... 15:07:32 Endpoint Packet task started with pid 714 ... Enter bosStartApp bosAppRootTask() - Is it morning already? Spawning app task (epoch #0)... bosAppRootTask() - Is it morning already? Spawning app task (epoch #0)... Enter TaskCreate aoAP TaskCreate - spawn new task aoAP Exit bosStartApp Exit TaskCreate AppResetDetectionEnable() - Enabled reset detection. Set up PCM registers Channel 0 assigned to timeslot 4 Channel 1 assigned to timeslot 0 Channel 2 assigned to timeslot 1 Channel 3 assigned to timeslot 11 Channel 4 assigned to timeslot 10 Tx Desc (0xA18DD000): chan 0, buf 0, sts 0xe000, len 320, bufp 0x18ee000 Tx Desc (0xA18DD008): chan 0, buf 1, sts 0x7000, len 320, bufp 0x18ee150 Rx Desc (0xA1917000): chan 0, buf 0, sts 0x8000, len 320, bufp 0x18ea000 Rx Desc (0xA1917008): chan 0, buf 1, sts 0x9000, len 320, bufp 0x18ea150 initIudma: chan 0, descBase 0xa1917000, descBaseIudma 0x1917000 initIudma: chan 1, descBase 0xa18dd000, descBaseIudma 0x18dd000 PCM ENABLE INFO: DMA0 IRQ STATUS 0x00000000 PCM ENABLE INFO: DMA0 IRQ MASK 0x00000005 PCM ENABLE INFO: DMA1 IRQ STATUS 0x00000000 PCM ENABLE INFO: DMA1 IRQ MASK 0x00000005 PCM ENABLE INFO: PCM IRQ MASK 0x00000003 PCM ENABLE INFO: PCM IRQ PENDING 0x00000007 Enter TaskCreate CMT_EXCEPTION_IST TaskCreate - spawn new task CMT_EXCEPTION_IST Exit TaskCreate regStatus (reg 12 sel 0) = 0x10008501 regStatus (reg 12 sel 7) = 0x00000101 regCause (reg 13 sel 0) = 0x00000000 regCause (reg 13 sel 7) = 0x00808000 regCMT (reg 22 sel 0) = 0xe30e1006 regCMT (reg 22 sel 1) = 0x10008001 Kicking off secondary thread processor at entry point 0x8104CA00... Secondary thread processor entry point at 0x8104ca00 Thread processor handshake. Secondary app initialized properly. Enter TaskCreate HTSK TaskCreate - spawn new task HTSK Exit TaskCreate SUCCESS: Took semaphore SUCCESS: Gave semaphore INFO: MSPI POLLING MODE INFO: IRQ MASK 0xe000aa84 INFO: IRQ STATUS 0x400000 INFO: BLOCK ENABLES 0x3e0720 MSPI INITIALIZED Le88111: Read data from Rev ID register: 0x2, 0xa SLAC: timeslot 4 SLAC: country 8 SLIC LE88111 Registers... 0x41: Tx TSlt.........0x4 0x43: Rx TSlt.........0x4 0x45: ClkSlt TxEdge...0x40 0x47: Device Config...0x2 0x4B: ChEna OpMode....0x1 0x4F: Signaling.......0x0 0x0 0x51: Voice Gain......0x0 0x53: I/O Data........0x1 0x55: I/O Direction...0x2 0x57: Sys State.......0x0 0x61: Oper Func.......0x3F 0x69: Sys State Cfg...0x9 0x6D: Int Mask........0x1F 0x71: Oper Cond.......0xFF 0x73: Revision........0x2 0xA 0x81: GX Filter.......0xA9F0 0x83: GR Filter.......0xA871 0x87: B FIR Filter....0x235232441AA1BB2AA3AA4AA5FB60 0x89: X Filter........0xC450A2AC2AACBAA7A9F532BD 0x8B: R FIR Filter....0x2DD0F510BB382AE2BAADB87E2397 0x97: B IIR Filter....0xDBA1 0x99: Z FIR Filter....0xA4A02BE22ECA2D2A4AA2 0x9B: Z IIR Filter....0x98A2979F1 0xA7: Conv Config.....0x0 0xC3: Loop Super......0x1B84B35 0xC7: DC Feed.........0x138 0xCB: DISN............0xDD 0xD1: Metering........0x213D3C0 0xD3: Gen A/B &Bias...0x0 0 0 0 44 3D EF 0 0 0 0 0xD5: Gen A/B &Bias...0x177727D4CCD27D4 0xDF: SigGen Ctl......0x0 0xE1: Cadence Tmr.....0x190320 0xE3: Caller ID.......0x0 0xE5: Switch Reg......0x0 4 16 0xE7: Sw Reg Ctrl.....0x1 0xEB: CID Parms.......0x3 ---------------- Read data from DAA (ID 1) Rev ID register: 0x2, 0x6 SLIC LE88010 Registers... 0x41: Tx TSlt.........0xB 0x43: Rx TSlt.........0xB 0x45: ClkSlt TxEdge...0x40 0x47: Device Config...0x2 0x4B: ChEna OpMode....0x1 0x4F: Signaling.......0x0 0x0 0x51: Voice Gain......0x40 0x53: I/O Data........0x1 0x55: I/O Direction...0x9 0x57: Sys State.......0x2F 0x61: Oper Func.......0x3F 0x69: Sys State Cfg...0x2 0x6D: Int Mask........0xFF 0x71: Oper Cond.......0xFF 0x73: Revision........0x2 0x6 0x81: GX Filter.......0xAA0 0x83: GR Filter.......0x25A1 0x87: B FIR Filter....0x22CAD9A4AAA2A26225A8FB87B870 0x89: X Filter........0xF221B322AA2442CCB3A42D4E 0x8B: R FIR Filter....0x1D1A22022A9BA3D2AA3AEAB2AA5 0x97: B IIR Filter....0x2E1 0x99: Z FIR Filter....0xBAD2ABA3D2ACA22C97B4 0x9B: Z IIR Filter....0x3E62979F1 0xA7: Conv Config.....0x0 0xC3: Loop Super......0x108490B0 0xCB: DISN............0xFE 0xD3: Gen A/B &Bias...0x0000374AA40000 0xDF: SigGen Ctl......0x0 0xE1: Cadence Tmr.....0x190320 ---------------- 88010 DAA Device Init completed. country is 0 boardHalInit6358: Initialization complete. boardHalInit completed insmod stollmann isdn module.... stollmann_isdn: falsely claims to have parameter IInit stollmann_isdn: loading module Stollmann E+V GmbH ISDN-Stack V1.020 Oct 6 2008 (c) Copyright Stollmann E+V GmbH isdn_tvr.lnxhwInit (c0356fc4): enter .. isdn_tvrlnxhwInit chipID = 6358 isdn_tvr.lnxhwInit : GPIO_CONFIG=884036ef isdn_tvr.lnxhwInit : GPIO_DATA=fffffffa isdn_tvr.lnxhwTVRDoPostInit/hwCheckInterrupt() start isdn_tvr.hwRequestInterruptVector: BcmHalMapInterrupt; idx=0, lvl=33, intHandler=c0319268 hwCheckInterruptISTR: InterruptActive[0]=1 hwRestoreInterruptVector: isdnBoardInt[0]=33 hwInterruptLevel[0]=33 hwRestoreInterruptVector: hwInterruptLevel[0]=33 isdn_tvr.lnxhwTVRDoPostInit/hwCheckInterrupt() end isdn_tvr.lnxhwTVRDoPostInit/firmwareStart() start isdn_tvr.hwRequestInterruptVector: BcmHalMapInterrupt; idx=0, lvl=33, intHandler=c0319268 isdn_tvr.lnxhwTVRDoPostInit/firmwareStart() OK. isdn_tvr.lnxhwInit: retVal=0 insmod capi module....... capi20: Rev 1.1.2.7: started up with major 68 (no middleware) Enter TaskCreate HRTBEAT TaskCreate - spawn new task HRTBEAT Exit TaskCreate HEARTBEAT: Initialized! bosMsgQCreate: Created message queue VRGEVQ at address 0x8001 Enter TaskCreate VRGEVPR TaskCreate - spawn new task VRGEVPR Exit TaskCreate Enter TaskCreate HCAS TaskCreate - spawn new task HCAS Exit TaskCreate *** gStartRxDesc[0] = 0xA1917000 *** gBufferSizeBytes = 320 *** gStartTxDesc[0] = 0xA18DD000 hal6358PcmInit 293 nextTxDesc = 0xA18DD000 hal6358PcmInit 293 nextTxDesc = 0xA18DD008 hal6358PcmInit 297 Ownership for TX desc not set. Use this buffer. PERF->IrqMask = 0xE200AA84 PERF->IrqMask1 = 0x00800000 Default value for provItemId '224' did not exist ENDPT: hdspVhdOpen Secondary Connection VHD success. DSP 0, VHD (0x50) of type: 0x0 ENDPT: Setting T.38 error correction mode for vhd 80 to 0x104 ENDPT: hdspVhdOpen Secondary Connection VHD success. DSP 0, VHD (0x51) of type: 0x0 ENDPT: Setting T.38 error correction mode for vhd 81 to 0x104 ENDPT: hdspVhdOpen Secondary Connection VHD success. DSP 0, VHD (0x52) of type: 0x0 ENDPT: Setting T.38 error correction mode for vhd 82 to 0x104 ENDPT: hdspVhdOpen Secondary Connection VHD success. DSP 0, VHD (0x53) of type: 0x3 ENDPT: Setting T.38 error correction mode for vhd 83 to 0x104 ENDPT: hdspVhdOpen Secondary Connection VHD success. DSP 0, VHD (0x54) of type: 0x3 ENDPT: Setting T.38 error correction mode for vhd 84 to 0x104 bosMsgQCreate: Created message queue PSTN_CTL_EVQ at address 0x10002 Enter TaskCreate PSTN TaskCreate - spawn new task PSTN Exit TaskCreate pstnCtlInit successful dgasp: kerSysRegisterDyingGaspHandler: endpoint registered ENDPT: EPTYPE_FXS ENDPT: hdspVhdOpen Line VHD success. DSP 0, VHD (0x55) of type: 0x7 Default value for provItemId '74' did not exist Default value for provItemId '75' did not exist Default value for provItemId '215' did not exist boardHalCasGetDriver: chan = 0 Default value for provItemId '43' did not exist Default value for provItemId '68' did not exist Default value for provItemId '60' did not exist Default value for provItemId '217' did not exist ENDPT: Initialization completed successfully for endpt 0 ENDPT: DELETE CNX: endpt 0, cnx -1 ENDPT: EPTYPE_NOSIG muteMask = 0x00020000 ENDPT: hdspVhdOpen Line VHD success. DSP 0, VHD (0x56) of type: 0x7 Default value for provItemId '74' did not exist Default value for provItemId '75' did not exist Default value for provItemId '215' did not exist Default value for provItemId '68' did not exist Default value for provItemId '60' did not exist Default value for provItemId '217' did not exist ENDPT: Initialization completed successfully for endpt 1 ENDPT: DELETE CNX: endpt 1, cnx -1 ENDPT: EPTYPE_NOSIG muteMask = 0x00060000 ENDPT: 'HAPI_RM_DSP_EGRESS_UNDERRUN_EVT' (0x80c4), hdl:0x30, op1:0x0, op2:0x1511 ENDPT: 'HAPI_RM_DSP_EGRESS_UNDERRUN_EVT' (0x80c4), hdl:0x30, op1:0x1, op2:0x1511 ENDPT: hdspVhdOpen Line VHD success. DSP 0, VHD (0x57) of type: 0x7 Default value for provItemId '74' did not exist Default value for provItemId '75' did not exist Default value for provItemId '215' did not exist Default value for provItemId '68' did not exist Default value for provItemId '60' did not exist Default value for provItemId '217' did not exist ENDPT: Initialization completed successfully for endpt 2 ENDPT: DELETE CNX: endpt 2, cnx -1 ENDPT: EPTYPE_PSTN ENDPT: hdspVhdOpen PSTN VHD success. DSP 0, VHD (0x58) of type: 0x6 ENDPT: hdspVhdOpen Line VHD success. DSP 0, VHD (0x59) of type: 0x7 Default value for provItemId '74' did not exist Default value for provItemId '75' did not exist Default value for provItemId '215' did not exist Default value for provItemId '68' did not exist Default value for provItemId '60' did not exist Default value for provItemId '217' did not exist DAA: Enable on-hook Caller ID receive. ENDPT: Initialization completed successfully for endpt 3 ENDPT: DELETE CNX: endpt 3, cnx -1 15:07:38 cmAssociatePhysEndpt: Associating physEndpt 0 to cmEndpt 0 15:07:38 cmAssociatePhysEndpt: Associating physEndpt 1 to cmEndpt 1 15:07:38 cmAssociatePhysEndpt: Associating physEndpt 2 to cmEndpt 2 15:07:38 cmAssociatePhysEndpt: Associating physEndpt 3 to cmEndpt 3 15:07:38 cmMapCmEndptToPhys: Assigning cmEndpt 3 to physEndpt 3 15:07:38 CDR collection started on 14/7/1978 2:53:32 15:07:38 pstnDialPlan = 911|102, pstnRouting = , pstnRoutingData = 0 15:07:38 ccPstnInit: Init PSTN module with dial-plan = 911|102 15:07:38 *** Number of Active Lines = 4 *** 15:07:38 *** WAN Interface No = 0 *** 15:07:38 *** WAN IP address = 192.168.2.1 *** 15:07:38 *** WAN Subnet Mask = 255.255.255.0 *** *** cmCallConfig 480 parm.protcfg.timer.htmr = 3200 15:07:38 User-Agent control: 0 15:07:38 User-Agent header: 15:07:38 Server header: 15:07:38 Accept-Language header: 15:07:38 Proxy-Require header: 15:07:38 Supported methods: 13 15:07:38 Failover: Enabled *** SIP Transport protocol: 1 15:07:40 Call Control SIP v1.8.2 MxSF 3.6.4.8 15:07:40 Major version: 1 Minor version: 8 15:07:40 Patch version: 2 15:07:40 Protocol: SIP 15:07:40 RTP read thread started with pid 735 15:07:40 RTP read thread started with pid 736 15:07:40 RTP read thread started with pid 737 15:07:40 RTP read thread started with pid 738 15:07:40 RTP read thread started with pid 739 15:07:40 rtpInit: RTCP task created, taskId = 15376 15:07:40 cmSetCfgCodec: Ept 0, codec config invalid. Applying default. ******************** action = 0 codec = 0 pos = 0 total = 2000 ******************** 15:07:40 cmSetCfgCodec: Endpt 0, Total 4 codecs, 1st codec: PCMA, Packet Period: 20ms, GVAD Mode: TRANSPARENT, Fax Enabled: FALSE, DTMF Relay Enabled: FALSE, CNG Mode: HOTHNOISE 15:07:40 cmSetCfgCodec: Ept 1, codec config invalid. Applying default. ******************** action = 0 codec = 0 pos = 0 total = 2000 ******************** 15:07:40 cmSetCfgCodec: Endpt 1, Total 4 codecs, 1st codec: PCMA, Packet Period: 20ms, GVAD Mode: TRANSPARENT, Fax Enabled: FALSE, DTMF Relay ENDPT: 'HAPI_RM_DSP_EGRESS_UNDERRUN_EVT' (0x80c4), hdl:0x30, op1:0x2, op2:0x2ec1 ENDPT: 'HAPI_RM_DSP_EGRESS_UNDERRUN_EVT' (0x80c4), hdl:0x30, op1:0x3, op2:0x2ec1 Enabled: FALSE, CNG Mode: HOTHNOISE 15:07:40 cmSetCfgCodec: Ept 2, codec config invalid. Applying default. ******************** action = 0 codec = 0 pos = 0 total = 2000 ******************** 15:07:40 cmSetCfgCodec: Endpt 2, Total 4 codecs, 1st codec: PCMA, Packet Period: 20ms, GVAD Mode: TRANSPARENT, Fax Enabled: FALSE, DTMF Relay Enabled: FALSE, CNG Mode: HOTHNOISE 15:07:40 cmNatKeepAliveInit: Don't need to start NAT keep alive 15:07:40 Init ISDN module 15:07:40 ccIsdnInit OK!! 15:07:40 CapiPhone 1.019 15:07:40 compiled: root@samox Mon Mar 23 17:09:08 CST 2009 15:07:40 (c) 2003 Stollmann E+V 15:07:40 RTCP thread started with pid 740 packed OK 15:07:40 ### CAPI 2.0 / 1.020 15:07:40 ### Nbr. of ctrls = 1 15:07:40 >>> CAPI_REGISTER (2048/0/8/2048) 15:07:40 , applId1=1 15:07:40 CAPI_PHONE Startup. 15:07:40 publishEventCB: event 12 15:07:40 >>> LISTEN_REQ (CIPMask = 30012, infoMask = 43d4) TCM_GetFXOState, generate cas event = "21" 15:07:40 cmEndptEventCb: op1 3, op2 39, op3 65535, op4.ref 0x0, op4.val 0 15:07:40 evt: 0x1000, op1: 3, op2: 39, class: 0x1000 endpt = 3 ,ua = -1, cid = 269321292 15:07:40 <<< LISTEN_CONF (ctrl = 1, info = 0) 15:07:40 <<< MANUFACTURER_CONF (NCCI = 1) endpoint : 0 primary ua : auto secondary ua: auto third ua : auto last ua : auto primary anonymous : 0 secondary anonymous : 0 https 887 tr64 887 tr69 887 filesmap 2 15:07:44 <<< MANUFACTURER_IND (NCCI = 1) 15:07:44 <<< ctrl = 1 StatusL1: event = d (deactivated) remote=ppp_1_32_1, ntwkPrtcl=0 iptables: Bad rule (does a matching rule exist in that chain?) /proc/sys/net/ipv4/conf/ppp_1_32_1/rp_filter: cannot create TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks Sorry, rule does not exist. br0: port 2(eth0) entering disabled state TecomBcmNtwk_getTr69cStartStatus -- 0 TecomBcmNtwk_getTr69cStartStatus -- 0
OEM bootlog failsafe
reset button pressed during power up
CFE version 1.0.38-8.19 for BCM96358 (32bit,SP,BE) Build Date: Mon Aug 11 09:50:01 CST 2008 (samuel@ubuntu) Copyright (C) 2000-2006 Broadcom Corporation. Boot Address 0xbe000000 Initializing Arena. Initializing Devices. Parallel flash device: name AM29LV320MT, id 0x2201, size 8192KB 100 MB Full-Duplex (auto-neg) CPU type 0x2A010: 300MHz, Bus: 133MHz, Ref: 64MHz CPU running TP0 Total memory: 33554432 bytes (32MB) Total memory used by CFE: 0x80401000 - 0x80528600 (1209856) Initialized Data: 0x8041DE90 - 0x8041FDF0 (8032) BSS Area: 0x8041FDF0 - 0x80426600 (26640) Local Heap: 0x80426600 - 0x80526600 (1048576) Stack Area: 0x80526600 - 0x80528600 (8192) Text (code) segment: 0x80401000 - 0x8041DE8C (118412) Boot area (physical): 0x00529000 - 0x00569000 Relocation Factor: I:00000000 - D:00000000 *** Restore to Factory Default Setting *** *** Break into CFE console *** Board IP address : 192.168.2.1:ffffff00 Host IP address : 192.168.2.100 Gateway IP address : Run from flash/host (f/h) : f Default host run file name : vmlinux Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Serial Number : xxxxxxxxxx Hardware Version : B Default Password : xxxx Board Id (0-7) : xxxxx-xxxx Number of MAC Addresses (1-32) : 11 Base MAC Address : xx:xx:xx:xx:xx:xx PSI Size (1-128) KBytes : 128 Main Thread Number [0|1] : 0 CFE> web info: Waiting for connection on socket 0.<0x1b>[J CFE> help Available commands: x w Write the whole image start from beginning of the flash e Erase [n]vram or [a]ll flash except bootrom r Run program from flash image or from host depend on [f/h] flag p Print boot line and board parameter info c Change booline parameters f Write image to the flash i Erase persistent storage data b Change board parameters reset Reset the board flashimage Flashes a compressed image after the bootloader. help Obtain help for CFE commands For more information about a command, enter 'help command-name' *** command status = 0 CFE> cd /etc/firmware Invalid command: "cd" Available commands: x, w, e, r, p, c, f, i, b, reset, flashimage, help *** command status = -1 CFE>
OpenWrt snapshot (08.01.2020)
OpenWrt GCC 8.3.0 r11931-41c19dd542, SMP, factory.bin
Bugs:
- “default boot to failsafe mode”
- wifi not working → bootlog: [0.511808] b43-pci-bridge: probe of 0000:00:01.0 failed with error -2
CFE version 1.0.38-8.19 for BCM96358 (32bit,SP,BE) Build Date: Mon Aug 11 09:50:01 CST 2008 (samuel@ubuntu) Copyright (C) 2000-2006 Broadcom Corporation. Boot Address 0xbe000000 Initializing Arena. Initializing Devices. Parallel flash device: name AM29LV320MT, id 0x2201, size 8192KB 100 MB Full-Duplex (auto-neg) CPU type 0x2A010: 300MHz, Bus: 133MHz, Ref: 64MHz CPU running TP0 Total memory: 33554432 bytes (32MB) Total memory used by CFE: 0x80401000 - 0x80528600 (1209856) Initialized Data: 0x8041DE90 - 0x8041FDF0 (8032) BSS Area: 0x8041FDF0 - 0x80426600 (26640) Local Heap: 0x80426600 - 0x80526600 (1048576) Stack Area: 0x80526600 - 0x80528600 (8192) Text (code) segment: 0x80401000 - 0x8041DE8C (118412) Boot area (physical): 0x00529000 - 0x00569000 Relocation Factor: I:00000000 - D:00000000 Board IP address : 192.168.2.1:ffffff00 Host IP address : 192.168.2.100 Gateway IP address : Run from flash/host (f/h) : f Default host run file name : vmlinux Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Serial Number : xxxxxxxxxx Hardware Version : B Default Password : xxxx Board Id (0-7) : 96358-502V Number of MAC Addresses (1-32) : 11 Base MAC Address : xx:xx:xx:xx:xx:xx PSI Size (1-128) KBytes : 128 Main Thread Number [0|1] : 0 *** Press any key to stop auto run (1 seconds) *** Auto run second count down: 1<0x08>1<0x08>0 Code Address: 0x80A00000, Entry Address: 0x80a00000 Decompression OK! Entry at 0x80a00000 Closing network. Starting program at 0x80a00000 [ 0.000000] Linux version 4.14.162 (builder@buildhost) (gcc version 8.3.0 (OpenWrt GCC 8.3.0 r11931-41c19dd542)) #0 SMP Tue Jan 7 19:53:31 2020 [ 0.000000] Detected Broadcom 0x6358 CPU revision a1 [ 0.000000] CPU frequency is 300 MHz [ 0.000000] 32MB of RAM installed [ 0.000000] board_bcm963xx: Boot address 0xbe000000 [ 0.000000] board_bcm963xx: CFE version: 1.0.38-8.19 [ 0.000000] bootconsole [early0] enabled [ 0.000000] CPU0 revision is: 0002a010 (Broadcom BMIPS4350) [ 0.000000] board: board name: 96358-502V [ 0.000000] MIPS: machine is T-Com Speedport W303 V [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 02000000 @ 00000000 (usable) [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Primary instruction cache 32kB, VIPT, 2-way, linesize 16 bytes. [ 0.000000] Primary data cache 16kB, 2-way, VIPT, cache aliases, linesize 16 bytes [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x0000000000000000-0x0000000001ffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000000000-0x0000000001ffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000001ffffff] [ 0.000000] random: get_random_bytes called from start_kernel+0x88/0x4e4 with crng_init=0 [ 0.000000] percpu: Embedded 14 pages/cpu s25824 r8192 d23328 u57344 [ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 8120 [ 0.000000] Kernel command line: rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200 [ 0.000000] PID hash table entries: 128 (order: -3, 512 bytes) [ 0.000000] Dentry cache hash table entries: 4096 (order: 2, 16384 bytes) [ 0.000000] Inode-cache hash table entries: 2048 (order: 1, 8192 bytes) [ 0.000000] Memory: 24896K/32768K available (4635K kernel code, 201K rwdata, 1028K rodata, 1296K init, 216K bss, 7872K reserved, 0K cma-reserved) [ 0.000000] SLUB: HWalign=16, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 [ 0.000000] Hierarchical RCU implementation. [ 0.000000] RCU restricting CPUs from NR_CPUS=2 to nr_cpu_ids=1. [ 0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=1 [ 0.000000] NR_IRQS: 256 [ 0.000000] genirq: irq_chip bcm6345-periph-intc did not update eff. affinity mask of irq 33 [ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 12741736309 ns [ 0.000021] sched_clock: 32 bits at 150MHz, resolution 6ns, wraps every 14316557820ns [ 0.008211] Calibrating delay loop... 299.26 BogoMIPS (lpj=598528) [ 0.050748] pid_max: default: 32768 minimum: 301 [ 0.056089] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.063024] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.076640] Hierarchical SRCU implementation. [ 0.083979] smp: Bringing up secondary CPUs ... [ 0.088730] smp: Brought up 1 node, 1 CPU [ 0.101597] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns [ 0.111748] futex hash table entries: 256 (order: 0, 4096 bytes) [ 0.118330] pinctrl core: initialized pinctrl subsystem [ 0.128004] NET: Registered protocol family 16 [ 0.148214] registering PCI controller with io_map_base unset [ 0.154217] registering PCI controller with io_map_base unset [ 0.239964] PCI host bridge to bus 0000:00 [ 0.244442] pci_bus 0000:00: root bus resource [mem 0x30000000-0x37ffffff] [ 0.251586] pci_bus 0000:00: root bus resource [io 0x8000000-0x8007fff] [ 0.258527] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0] [ 0.265549] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff] [ 0.282888] pci 0000:00:01.0: BAR 0: assigned [mem 0x30000000-0x30003fff] [ 0.290798] PCI host bridge to bus 0000:01 [ 0.295094] pci_bus 0000:01: root bus resource [mem 0x38000000-0x3fffffff] [ 0.302214] pci_bus 0000:01: root bus resource [io 0x8008000-0x800ffff] [ 0.309147] pci_bus 0000:01: root bus resource [??? 0x00000000 flags 0x0] [ 0.316169] pci_bus 0000:01: No busn resource found for root bus, will use [bus 01-ff] [ 0.325087] pci 0000:01:1e.0: bridge configuration invalid ([bus 00-00]), reconfiguring [ 0.333857] pci 0000:01:1e.0: BAR 10: assigned [mem 0x38000000-0x3fffffff] [ 0.341027] pci 0000:01:1e.0: BAR 7: assigned [io 0x8008000-0x80080ff] [ 0.347885] pci 0000:01:1e.0: BAR 8: assigned [io 0x8008400-0x80084ff] [ 0.354742] pci 0000:01:1e.0: CardBus bridge to [bus 02-05] [ 0.360510] pci 0000:01:1e.0: bridge window [io 0x8008000-0x80080ff] [ 0.367360] pci 0000:01:1e.0: bridge window [io 0x8008400-0x80084ff] [ 0.374207] pci 0000:01:1e.0: bridge window [mem 0x38000000-0x3fffffff] [ 0.395819] clocksource: Switched to clocksource MIPS [ 0.404965] PCI: Enabling device 0000:00:01.0 (0000 -> 0002) [ 0.440486] ssb: Found chip with id 0x4322, rev 0x01 and package 0x09 [ 0.496291] ssb: WARNING: Using fallback SPROM failed (err -2) [ 0.504559] ssb: Failed to register PCI version of SSB with error -2 [ 0.511808] b43-pci-bridge: probe of 0000:00:01.0 failed with error -2 [ 0.519585] NET: Registered protocol family 2 [ 0.526538] TCP established hash table entries: 1024 (order: 0, 4096 bytes) [ 0.533916] TCP bind hash table entries: 1024 (order: 1, 8192 bytes) [ 0.540635] TCP: Hash tables configured (established 1024 bind 1024) [ 0.547969] UDP hash table entries: 256 (order: 1, 8192 bytes) [ 0.554231] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes) [ 0.561563] NET: Registered protocol family 1 [ 0.571503] Crashlog allocated RAM at address 0x1f00000 [ 0.582527] workingset: timestamp_bits=14 max_order=13 bucket_order=0 [ 0.605994] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.612110] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.678308] io scheduler noop registered [ 0.682487] io scheduler deadline registered (default) [ 0.691062] bcm6358-pinctrl fffe0080.pin-controller: registered at mmio fffe0080 [ 0.701252] fffe0100.serial: ttyS0 at MMIO 0xfffe0100 (irq = 10, base_baud = 1562500) is a bcm63xx_uart [ 0.711122] console [ttyS0] enabled [ 0.711122] console [ttyS0] enabled [ 0.718335] bootconsole [early0] disabled [ 0.718335] bootconsole [early0] disabled [ 0.746137] 1e000000.nor: Found 1 x16 devices at 0x0 in 16-bit bank. Manufacturer ID 0x000001 Chip ID 0x001001 [ 0.756848] Amd/Fujitsu Extended Query Table at 0x0040 [ 0.762222] Amd/Fujitsu Extended Query version 1.3. [ 0.767459] 1e000000.nor: Swapping erase regions for top-boot CFI table. [ 0.774398] number of CFI chips: 1 [ 0.782421] Searching for RedBoot partition table in 1e000000.nor at offset 0x7f0000 [ 0.808528] No RedBoot partition table detected in 1e000000.nor [ 0.814907] 3 fixed-partitions partitions found on MTD device 1e000000.nor [ 0.822068] Creating 3 MTD partitions on "1e000000.nor": [ 0.827594] 0x000000000000-0x000000010000 : "CFE" [ 0.834909] 0x000000010000-0x0000007f0000 : "linux" [ 0.848624] parser_imagetag: rootfs: CFE image tag found at 0x0 with version 6, board type 96358-502V [ 0.858308] parser_imagetag: Partition 0 is kernel offset 100 and length 1d7b5c [ 0.865896] parser_imagetag: Partition 1 is rootfs offset 1d7c5c and length 6083a4 [ 0.873733] parser_imagetag: Spare partition is offset 3f0004 and length 3efffc [ 0.881371] 2 bcm963xx-imagetag partitions found on MTD device linux [ 0.887988] Creating 2 MTD partitions on "linux": [ 0.892893] 0x000000000100-0x0000001d7c5c : "kernel" [ 0.900468] 0x0000001d7c5c-0x0000007e0000 : "rootfs" [ 0.908038] mtd: device 3 (rootfs) set to be root filesystem [ 0.914008] 1 squashfs-split partitions found on MTD device rootfs [ 0.920450] 0x0000003f0000-0x0000007e0000 : "rootfs_data" [ 0.928362] 0x0000007f0000-0x000000800000 : "nvram" [ 0.952883] bcm63xx-spi fffe0800.spi: at [mem 0xfffe0800-0xfffe0f0b flags 0x200] (irq 9, FIFOs size 542) [ 0.965508] libphy: Fixed MDIO Bus: probed [ 0.987838] libphy: bcm63xx_enet MII bus: probed [ 1.064248] Broadcom BCM63XX (2) bcm63xx_enet-0:01: attached PHY driver [Broadcom BCM63XX (2)] (mii_bus:phy_addr=bcm63xx_enet-0:01, irq=17) [ 1.078113] bcm63xx-wdt bcm63xx-wdt: started, timer margin: 30 sec [ 1.091254] NET: Registered protocol family 10 [ 1.117009] Segment Routing with IPv6 [ 1.121101] NET: Registered protocol family 17 [ 1.125965] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. [ 1.139410] 8021q: 802.1Q VLAN Support v1.8 [ 1.159683] VFS: Mounted root (squashfs filesystem) readonly on device 31:3. [ 1.185622] Freeing unused kernel memory: 1296K [ 1.190370] This architecture does not have kernel memory protection. [ 1.251382] random: fast init done [ 2.438735] init: Console is alive [ 2.443115] init: - watchdog - [ 4.177330] kmodloader: loading kernel modules from /etc/modules-boot.d/* [ 4.346202] kmodloader: done loading kernel modules from /etc/modules-boot.d/* [ 4.364803] init: - preinit - [ 5.200572] random: procd: uninitialized urandom read (4 bytes read) [ 6.504534] random: jshn: uninitialized urandom read (4 bytes read) [ 6.609247] random: jshn: uninitialized urandom read (4 bytes read) [ 6.705503] random: jshn: uninitialized urandom read (4 bytes read) [ 6.967011] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready Press the [f] key and hit [enter] to enter failsafe mode Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level [ 8.638890] eth0: link UP - 100/full - flow control rx&tx [ 8.644669] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready - failsafe button reset was pressed - - failsafe - [ 11.683233] urandom_read: 2 callbacks suppressed [ 11.683254] random: dropbearkey: uninitialized urandom read (32 bytes read) Generating 1024 [ 11.700741] random: dropbearkey: uninitialized urandom read (32 bytes read) bit rsa key, this may take a while... [ 18.052473] random: dropbearkey: uninitialized urandom read (32 bytes read) Public key portion is: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQCTJdXbsHLtRqU94khl8Eur/o496AXooNozhfjyuE7RrruibnL8ci8gGOBbpCTPdZaqz8XZCxbvQxYtUI2InmAhRUYRQxSfe3NqrX3udg2tQWBb4RkOaE9Ej9rSWdtjsBo80ma3[ 18.214289] random: dropbear: uninitialized urandom read (32 bytes read) HElv5lJcRPd8o05Rv+y4wmb+M3LKA8bauab73Q== root@(none) Fingerprint: sha1!! 92:bf:8d:bd:00:43:ba:98:c5:62:32:23:02:04:ae:e4:1c:5b:82:ed BusyBox v1.31.1 () built-in shell (ash) ash: can't access tty; job control turned off _______ ________ __ | |.-----.-----.-----.| | | |.----.| |_ | - || _ | -__| || | | || _|| _| |_______|| __|_____|__|__||________||__| |____| |__| W I R E L E S S F R E E D O M ----------------------------------------------------- OpenWrt SNAPSHOT, r11931-41c19dd542 ----------------------------------------------------- ================= FAILSAFE MODE active ================ special commands: * firstboot reset settings to factory defaults * mount_root mount root-partition with config files after mount_root: * passwd change root's password * /etc/config directory with config files for more help see: https://openwrt.org/docs/guide-user/troubleshooting/ - failsafe_and_factory_reset - root_password_reset ======================================================= root@(none):/#
OpenWrt 14.07
OpenWrt/Linaro GCC 4.8-2014.04 r42625, SMP, sysupgrade.bin
Wifi working
[ 0.000000] Linux version 3.10.49 (bb@builder1) (gcc version 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 r42625) ) #3 SMP Wed Oct 1 15:13:13 CEST 2014 [ 0.000000] Detected Broadcom 0x6358 CPU revision a1 [ 0.000000] CPU frequency is 300 MHz [ 0.000000] 32MB of RAM installed [ 0.000000] registering 40 GPIOs [ 0.000000] board_bcm963xx: Boot address 0xbe000000 [ 0.000000] board_bcm963xx: CFE version: 1.0.38-8.19 [ 0.000000] bootconsole [early0] enabled [ 0.000000] CPU revision is: 0002a010 (Broadcom BMIPS4350) [ 0.000000] board: board name: 96358-502V [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 02000000 @ 00000000 (usable) [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x00000000-0x01ffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x00000000-0x01ffffff] [ 0.000000] On node 0 totalpages: 8192 [ 0.000000] free_area_init_node: node 0, pgdat 80351ba0, node_mem_map 81000000 [ 0.000000] Normal zone: 64 pages used for memmap [ 0.000000] Normal zone: 0 pages reserved [ 0.000000] Normal zone: 8192 pages, LIFO batch:0 [ 0.000000] Primary instruction cache 32kB, VIPT, 2-way, linesize 16 bytes. [ 0.000000] Primary data cache 16kB, 2-way, VIPT, cache aliases, linesize 16 bytes [ 0.000000] PERCPU: Embedded 7 pages/cpu @81043000 s6624 r8192 d13856 u32768 [ 0.000000] pcpu-alloc: s6624 r8192 d13856 u32768 alloc=8*4096 [ 0.000000] pcpu-alloc: [0] 0 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 8128 [ 0.000000] Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200 [ 0.000000] PID hash table entries: 128 (order: -3, 512 bytes) [ 0.000000] Dentry cache hash table entries: 4096 (order: 2, 16384 bytes) [ 0.000000] Inode-cache hash table entries: 2048 (order: 1, 8192 bytes) [ 0.000000] Memory: 28460k/32768k available (2667k kernel code, 4308k reserved, 745k data, 296k init, 0k highmem) [ 0.000000] Hierarchical RCU implementation. [ 0.000000] RCU restricting CPUs from NR_CPUS=2 to nr_cpu_ids=1. [ 0.000000] NR_IRQS:256 [ 0.032000] Calibrating delay loop... 299.26 BogoMIPS (lpj=598528) [ 0.036000] pid_max: default: 32768 minimum: 301 [ 0.040000] Mount-cache hash table entries: 512 [ 0.048000] Brought up 1 CPUs [ 0.080000] NET: Registered protocol family 16 [ 0.096000] registering PCI controller with io_map_base unset [ 0.100000] registering PCI controller with io_map_base unset [ 0.128000] bio: create slab <bio-0> at 0 [ 0.136000] PCI host bridge to bus 0000:00 [ 0.140000] pci_bus 0000:00: root bus resource [mem 0x30000000-0x37ffffff] [ 0.144000] pci_bus 0000:00: root bus resource [io 0x8000000-0x8007fff] [ 0.148000] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff] [ 0.152000] pci 0000:00:01.0: [14e4:4322] type 00 class 0x028000 [ 0.152000] pci 0000:00:01.0: reg 10: [mem 0x00000000-0x00003fff] [ 0.164000] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated to 00 [ 0.164000] pci 0000:00:01.0: BAR 0: assigned [mem 0x30000000-0x30003fff] [ 0.168000] PCI host bridge to bus 0000:01 [ 0.172000] pci_bus 0000:01: root bus resource [mem 0x38000000-0x3fffffff] [ 0.176000] pci_bus 0000:01: root bus resource [io 0x8008000-0x800ffff] [ 0.180000] pci_bus 0000:01: No busn resource found for root bus, will use [bus 01-ff] [ 0.184000] pci 0000:01:1e.0: [14e4:6358] type 02 class 0x060700 [ 0.184000] pci 0000:01:1e.0: bridge configuration invalid ([bus 00-00]), reconfiguring [ 0.188000] pci_bus 0000:02: busn_res: [bus 02-ff] end is updated to 05 [ 0.188000] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 05 [ 0.188000] pci 0000:01:1e.0: BAR 10: assigned [mem 0x38000000-0x3fffffff] [ 0.192000] pci 0000:01:1e.0: BAR 7: assigned [io 0x8008000-0x80080ff] [ 0.196000] pci 0000:01:1e.0: BAR 8: assigned [io 0x8008400-0x80084ff] [ 0.200000] pci 0000:01:1e.0: CardBus bridge to [bus 02-05] [ 0.204000] pci 0000:01:1e.0: bridge window [io 0x8008000-0x80080ff] [ 0.208000] pci 0000:01:1e.0: bridge window [io 0x8008400-0x80084ff] [ 0.212000] pci 0000:01:1e.0: bridge window [mem 0x38000000-0x3fffffff] [ 0.216000] PCI: Enabling device 0000:01:1e.0 (0000 -> 0003) [ 0.220000] pci 0000:01:1e.0: setting latency timer to 64 [ 0.224000] Switching to clocksource MIPS [ 0.236000] PCI: Enabling device 0000:00:01.0 (0000 -> 0002) [ 0.244000] b43-pci-bridge 0000:00:01.0: setting latency timer to 64 [ 0.264000] ssb: Found chip with id 0x4322, rev 0x01 and package 0x09 [ 0.272000] ssb: Core 0 found: ChipCommon (cc 0x800, rev 0x17, vendor 0x4243) [ 0.272000] ssb: Core 1 found: IEEE 802.11 (cc 0x812, rev 0x10, vendor 0x4243) [ 0.272000] ssb: Core 2 found: PCI-E (cc 0x820, rev 0x0B, vendor 0x4243) [ 0.272000] ssb: Core 3 found: PCI (cc 0x804, rev 0x0E, vendor 0x4243) [ 0.272000] ssb: Core 4 found: USB 2.0 Device (cc 0x81A, rev 0x05, vendor 0x4243) [ 0.272000] ssb: Core 5 found: ARM Cortex M3 (cc 0x82A, rev 0x00, vendor 0x4243) [ 0.272000] ssb: Core 6 found: Internal Memory (cc 0x80E, rev 0x03, vendor 0x4243) [ 0.336000] ssb: Sonics Silicon Backplane found on PCI device 0000:00:01.0 [ 0.344000] NET: Registered protocol family 2 [ 0.352000] TCP established hash table entries: 512 (order: 0, 4096 bytes) [ 0.356000] TCP bind hash table entries: 512 (order: 0, 4096 bytes) [ 0.364000] TCP: Hash tables configured (established 512 bind 512) [ 0.372000] TCP: reno registered [ 0.376000] UDP hash table entries: 256 (order: 1, 8192 bytes) [ 0.380000] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes) [ 0.388000] NET: Registered protocol family 1 [ 0.392000] PCI: CLS 0 bytes, default 16 [ 0.400000] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.404000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.416000] msgmni has been set to 55 [ 0.420000] io scheduler noop registered [ 0.424000] io scheduler deadline registered (default) [ 0.436000] bcm63xx_uart.0: ttyS0 at MMIO 0xfffe0100 (irq = 10) is a bcm63xx_uart [ 0.444000] console [ttyS0] enabled, bootconsole disabled [ 0.460000] physmap platform flash device: 02000000 at 1e000000 [ 0.468000] physmap-flash.0: Found 1 x16 devices at 0x0 in 16-bit bank. Manufacturer ID 0x000001 Chip ID 0x001001 [ 0.476000] physmap-flash.0: Found an alias at 0x800000 for the chip at 0x0 [ 0.476000] physmap-flash.0: Found an alias at 0x1000000 for the chip at 0x0 [ 0.476000] physmap-flash.0: Found an alias at 0x1800000 for the chip at 0x0 [ 0.476000] Amd/Fujitsu Extended Query Table at 0x0040 [ 0.484000] Amd/Fujitsu Extended Query version 1.3. [ 0.488000] physmap-flash.0: Swapping erase regions for top-boot CFI table. [ 0.496000] number of CFI chips: 1 [ 0.500000] bcm63xxpart: CFE boot tag found with version 6 and board type 96358-502V [ 0.508000] bcm63xxpart: Partition 0 is CFE offset 0 and length 10000 [ 0.516000] bcm63xxpart: Partition 1 is kernel offset 10100 and length 12ff00 [ 0.520000] bcm63xxpart: Partition 2 is rootfs offset 140000 and length 6a0000 [ 0.528000] bcm63xxpart: Partition 3 is nvram offset 7e0000 and length 20000 [ 0.536000] bcm63xxpart: Partition 4 is linux offset 10000 and length 7d0000 [ 0.544000] bcm63xxpart: Spare partition is offset 370004 and length 46fffc [ 0.552000] 5 bcm63xxpart partitions found on MTD device physmap-flash.0 [ 0.556000] Creating 5 MTD partitions on "physmap-flash.0": [ 0.564000] 0x000000000000-0x000000010000 : "CFE" [ 0.572000] 0x000000010100-0x000000140000 : "kernel" [ 0.580000] mtd: partition "kernel" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only [ 0.596000] 0x000000140000-0x0000007e0000 : "rootfs" [ 0.604000] mtd: device 2 (rootfs) set to be root filesystem [ 0.612000] mtd: partition "rootfs_data" created automatically, ofs=0x370000, len=0x470000 [ 0.620000] 0x000000370000-0x0000007e0000 : "rootfs_data" [ 0.628000] 0x0000007e0000-0x000000800000 : "nvram" [ 0.640000] 0x000000010000-0x0000007e0000 : "linux" [ 0.652000] bcm63xx-spi bcm63xx-spi: at 0xfffe0800 (irq 9, FIFOs size 542) [ 0.672000] libphy: bcm63xx_enet MII bus: probed [ 0.676000] bcm63xx_enet bcm63xx_enet.0: attached PHY at address 1 [Broadcom BCM63XX (2)] [ 0.692000] bcm63xx-wdt bcm63xx-wdt: started, timer margin: 30 sec [ 0.708000] TCP: cubic registered [ 0.712000] NET: Registered protocol family 17 [ 0.716000] Bridge firewalling registered [ 0.720000] 8021q: 802.1Q VLAN Support v1.8 [ 0.740000] VFS: Mounted root (squashfs filesystem) readonly on device 31:2. [ 0.752000] Freeing unused kernel memory: 296K (80366000 - 803b0000) [ 4.096000] Button Hotplug driver version 0.4.1 [ 4.108000] input: gpio-keys-polled as /devices/platform/gpio-keys-polled.0/input/input0 [ 7.064000] eth0: link UP - 100/full - flow control off [ 8.724000] jffs2_scan_eraseblock(): End of filesystem marker found at 0x10000 [ 8.728000] jffs2_build_filesystem(): unlocking the mtd device... done. [ 8.736000] jffs2_build_filesystem(): erasing all blocks after the end marker... done. [ 46.136000] jffs2: notice: (230) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 47.216000] eth0: link DOWN [ 50.364000] NET: Registered protocol family 10 [ 50.400000] nf_conntrack version 0.5.0 (449 buckets, 1796 max) [ 50.420000] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 50.444000] Loading modules backported from Linux version master-2014-05-22-0-gf2032ea [ 50.452000] Backport generated by backports.git backports-20140320-37-g5c33da0 [ 50.468000] ip_tables: (C) 2000-2006 Netfilter Core Team [ 50.560000] xt_time: kernel timezone is -0000 [ 50.652000] cfg80211: Calling CRDA to update world regulatory domain [ 50.708000] cfg80211: World regulatory domain updated: [ 50.712000] cfg80211: DFS Master region: unset [ 50.716000] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time) [ 50.728000] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A) [ 50.736000] cfg80211: (2457000 KHz - 2482000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A) [ 50.744000] cfg80211: (2474000 KHz - 2494000 KHz @ 20000 KHz), (N/A, 2000 mBm), (N/A) [ 50.752000] cfg80211: (5170000 KHz - 5250000 KHz @ 160000 KHz), (N/A, 2000 mBm), (N/A) [ 50.760000] cfg80211: (5250000 KHz - 5330000 KHz @ 160000 KHz), (N/A, 2000 mBm), (0 s) [ 50.768000] cfg80211: (5490000 KHz - 5730000 KHz @ 160000 KHz), (N/A, 2000 mBm), (0 s) [ 50.776000] cfg80211: (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A) [ 50.784000] cfg80211: (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm), (N/A) [ 50.824000] PPP generic driver version 2.4.2 [ 50.844000] NET: Registered protocol family 24 [ 50.920000] b43-phy0: Broadcom 4322 WLAN found (core revision 16) [ 50.960000] b43-phy0: Found PHY: Analog 8, Type 4 (N), Revision 4 [ 50.964000] b43-phy0: Found Radio: Manuf 0x17F, ID 0x2056, Revision 3, Version 0 [ 50.988000] Broadcom 43xx driver loaded [ Features: PNL ] [ 50.996000] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht' [ 68.996000] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready [ 69.012000] device eth0 entered promiscuous mode [ 69.024000] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready [ 69.848000] eth0: link UP - 100/full - flow control off [ 69.856000] br-lan: port 1(eth0) entered forwarding state [ 69.860000] br-lan: port 1(eth0) entered forwarding state [ 69.864000] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 69.880000] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready [ 71.864000] br-lan: port 1(eth0) entered forwarding state