TP-Link TD-W8960N v5 / TP-Link TD-W8968 v3

Devices with Broadcom WiFi chipsets have limited OpenWrt supportability (due to limited FLOSS driver availability for Broadcom chips). Consider this when chosing a device to buy, or when deciding to flash OpenWrt on your device because it is listed as supported. See Broadcom WiFi for details.

DSL will not work at all on devices with BCM63xx DSL chipset (due to unavailability of FLOSS driver for Broadcom chips). Consider this when chosing a device to buy, or when deciding to flash OpenWrt on your device because it is listed as supported.
See Broadcom DSL, Unsupported: DSL modem and Broadcom BCM63xx for details.

W8960 v5 W8968 v3.0

These two very similar models, along with the Plusnet FAST 2704N V1, appear to be based around the same BCM6318 reference design. This page covers just the specifics of the TP-LINK models; see the Plusnet page for details common to all three.

TP-LINK calls these:

  • W8960 (blue): “300Mbps Wireless N ADSL2+ Modem Router”
  • W8968 (white): “300Mbps Wireless N USB ADSL2+ Modem Router”

The main difference seems to be that the W8960 ships with no USB port, a lower voltage/wattage PSU, and has WiFi on mini-PCIe rather than integrated (right?).

To make this easily found via search engines, the TD-W8960N may also be called just TD-W8960, and the TD-W8968N may also be called just TD-W8968. The 'N' may relate to regional firmware (WiFi regulatory) differences. There's no source that suggests the 'N' implies any hardware differences.

Under Construction!
This page is currently under construction. You can edit the article to help completing it.

  • Get the multimeter out and:
    • identify which LEDs and buttons are attached to which GPIOs
    • poke around for other accessible GPIOs
  • Write a .dtsi to name these correctly
  • Add to build system as a dedicated target (rather than borrowing FAST2740v1 image)
  • (Would be nice) Work out how to generate an image installable through stock firmware (rather than using CFE web)
  • Desolder EMI shield covering SoC and see what's in there, ideally before…
  • Photos, especially PCB/serial pins and case clip locations
  • Populate and tidy up this page

FIXME Any text with a light background (like this one) provides instructions for creating the Details Page. When you have filled in correct/useful information (instead of any template that's there) remove the instructions, as well as the <WRAP> that encloses it.

Neither device has a dedicated build yet:

  • The TD-W8968 seems to function OK on the Plusnet 2704N V1 image, for now.
  • Forum user Niravsoft may have patches for the TD-W8960N?
ModelVersionSoCCPU MHzFlash MBRAM MBWLAN HardwareWLAN2.4WLAN5.0100M portsGbit portsModemUSB
TD-W8960Nv5Broadcom BCM6318333864Broadcom BCM43217 (mini-PCIe)b/g/n-4-ADSL2+Mod
TD-W8968v3Broadcom BCM6318333864Broadcom BCM43217b/g/n-4-ADSL2+1x 2.0

Here is patch for td-w8968 on trunk version: td-w8968.patch. You can use it to build image or please push to openwrt repo.

Easy way:

Note: LAN LED don't turn on when port is plugged.

Install OpenWrt (generic explanation)

Please read the article flash.layout for a better understanding. It contains a couple of explanations. Then let's have a quick view at flash layout of this particular device:

TP-Link TD-W8968 Flash Layout
Layer0 raw flash, 8192 KiB
Layer1 mtd0
CFE
64 KiB
mtd5
linux
8064 KiB (= FlashSize-(64+64))
mtd4
nvram
64 KiB
Layer2 mtd1
kernel
1301972 Byte
mtd2
rootfs
6955308 Byte
Layer3 /dev/root
2302252 Byte
mtd3
rootfs_data
4544 KiB

FIXME Not yet possible, because there isn't yet any image wrapped in the TP-Link header required by the stock firmware, but the header format is known so someone just needs to find the time.

Should also cover reset to factory defaults.

the generic CFE web server instructions

It's probably the most user friendly way of installing firmware. But sometimes some manufacturers decide to disable it (very uncommon).

The default IP address of CFE is almost always 192.168.1.1. You should use a static IP in your PC since there isn't DHCP server available when running CFE.

For accessing this web interface:

  1. Unplug the power source
  2. Press the RESET button at the router, don't release it yet!
  3. Plug the power source
  4. Wait some seconds
  5. Release the RESET button
  6. Browse to http://192.168.1.1
  7. Send the new firmware and wait some minutes until the firmware upgrade finish.

Note: trunk images have neither LuCI nor USB built in, you'll need to be comfortable with SSH (or serial) access and probably with installing packages via the command line if you want those things.

Specific values needed for tftp

FIXME Enter values for “FILL-IN” below

Bootloader tftp server IPv4 address FILL-IN
Bootloader MAC address (special) FILL-IN
Firmware tftp image Latest OpenWrt release (NOTE: Name must contain “tftp”)
TFTP transfer window FILL-IN seconds
TFTP window start approximately FILL-IN seconds after power on
TFTP client required IP address FILL-IN

If OpenWrt is already installed and you wish to upgrade to a newer version, you have three methods available:

  1. LuCI Web Interface
  2. Flash Overwrite
  3. Generic Sysupgrade
  • Browse to http://192.168.1.1/cgi-bin/luci/admin/system/flashops LuCI Upgrade URL
  • Upload image file for sysupgrade to LuCI
  • Confirm, check MD5 sum, confirm again.
  • Wait for reboot about 2 whole minutes.

If you don't have a GUI (LuCI) available, you can alternatively upgrade via the command line. There are two command line methods for upgrading:

  • sysupgrade
  • mtd

Note: It is important that you put the firmware image into the ramdisk (/tmp) before you start flashing.

  • Download or compile yourself a sysupgrade binary.
  • SCP it to /tmp on your router:
scp [file_name].bin root@192.168.1.1:/tmp

or

PSCP.EXE -p [file_name].bin root@192.168.1.1:/tmp

sysupgrade

You can follow the generic.sysupgrade procedure. Don't forget to populate your /etc/sysupgrade.conf first.

  • Login as root via SSH on 192.168.1.1, then enter the following commands:
cd /tmp
sysupgrade /tmp/[file_name].bin

mtd

If sysupgrade does not support this router, use mtd.

  • Login as root via SSH on 192.168.1.1, then enter the following commands:
cd /tmp
mtd write /tmp/[file_name].bin linux && reboot

generic.debrick

Follow the generic CFE instructions.

The easiest way is reflash firmware via CFE web (http) server.

Basic configuration After flashing, proceed with this.
Set up your Internet connection, configure wireless, configure USB port, etc.

The default network configuration is:

Interface Name Description Default configuration
br-lan LAN & WiFi 192.168.1.1/24
vlan0 (eth0.1) LAN ports (1 to 3) None
vlan1 (eth0.2) WAN port (4) DHCP
wl0 WiFi Disabled

Numbers 1-3 are Ports 3-1 as labeled on the unit, number 0 is the Internet (WAN) on the unit, 8 is the internal connection to the router itself.
The WAN port can be switched to a LAN port via the Web Interface.

Port Switch port
CPU 8
LAN 1 3
LAN 2 2
LAN 3 1
Internet (WAN) 0

port.gpio on howto use and configure the gpio(s).
gpios for GPIOs on bcm63xx boards.

The TP-Link TD-W8968 v3 has the following GPIOs Port:

GPIO Purpose
0 0 ?
0 1 ?
0 2 Led “WPS”
0 4 Led “Lan 1”
0 5 Led “Lan 2”
0 6 Led “Lan 3”
0 7 Led “Lan 4”
0 8 Led “Internet”
0 9 Button “WIFI”
0 10 Led “DSL”
0 11 ?
0 12 ?
0 13 Led “USB”
0 14 - 0 31 ?
1 0 ?
1 1 Button “WPS”
1 2 Reset
1 3 - 1 17 ?
General
Brand TP-Link
Model TD-W8960N
Versions v5
Device Type WiFi Router
Availability Discontinued 2017
Comments - general The Plusnet Fast2704N v1 and TD-W8960N v5 are almost similar.
OpenWrt Support
Supported Since Commit
Supported Since Release
Supported Current Release
Unsupported
Hardware
Bootloader CFE
Target brcm63xx
System-On-Chip Broadcom BCM6318
CPU MHz 333
Flash MB 8
RAM MB 64
Network
Ethernet 100M ports 4
Ethernet Gbit ports -
Switch Broadcom BCM6318
Modem ADSL2+
VLAN Yes
Comments - network ports One LAN port convertible to WAN in settings of stock f/w.
Wireless
WLAN 2.4GHz b/g/n
WLAN 5.0GHz -
WLAN Hardware
Detachable Antennas 2
Comments - WLAN 2
Interfaces
USB ports Mod
SATA ports -
Serial Yes
JTAG ¿
Comments - USB & SATA ports
Misc
LED count 7
Button count 3
Power supply 9 VDC, 0.85 A
Links
Forum Topic URL
WikiDevi URL https://wikidevi.wi-cat.ru/TP-LINK_TD-W8960N_v5.x
OEM device homepage URL http://www.tp-link.com/en/products/details/cat-15_TD-W8960N.html
Firmware OEM Stock URL http://www.tp-link.com/en/download/TD-W8960N_V5.html
Firmware OpenWrt Install URL
Firmware OpenWrt Upgrade URL
Edit the underlying data View/Edit data
General
Brand TP-Link
Model TD-W8968
Versions v3
Device Type WiFi Router
Availability Discontinued 2017
Comments - general
OpenWrt Support
Supported Since Commit
Supported Since Release 17.01.0
Supported Current Release 19.07.7
Unsupported
Hardware
Bootloader CFE
Target brcm63xx
System-On-Chip Broadcom BCM6318
CPU MHz 333
Flash MB 8
RAM MB 64
Network
Ethernet 100M ports 4
Ethernet Gbit ports -
Switch Broadcom BCM6318
Modem ADSL2+
VLAN Yes
Comments - network ports
Wireless
WLAN 2.4GHz b/g/n
WLAN 5.0GHz -
WLAN Hardware
Detachable Antennas 2
Comments - WLAN
Interfaces
USB ports 1x 2.0
SATA ports -
Serial Yes
JTAG No
Comments - USB & SATA ports
Misc
LED count ¿
Button count ¿
Power supply 12 VDC, 1.0 A
Links
Forum Topic URL
WikiDevi URL https://wikidevi.wi-cat.ru/TP-LINK_TD-W8968_v3
OEM device homepage URL http://www.tp-link.com/en/products/details/cat-15_TD-W8968.html
Firmware OEM Stock URL http://www.tp-link.com/en/download/TD-W8968_V3.html
Firmware OpenWrt Install URL http://downloads.openwrt.org/releases/19.07.7/targets/brcm63xx/generic/openwrt-19.07.7-brcm63xx-generic-FAST2704N-squashfs-cfe.bin
Firmware OpenWrt Upgrade URL
Edit the underlying data View/Edit data

Inside, showing serial port access:

Front:
Insert photo of front of the casing

Back:
Insert photo of back of the casing

Backside label:
Insert photo of backside label

Note: This will void your warranty!

The antennae don't prevent opening, but taking them off makes it less likely you'll damage them. (Remember to put them back on before powering the unit on, since operating a device without its antennae is said to damage the WiFi hardware.)

Try to be gentle, since the LEDs are (somewhat unusually) all classic 3mm LEDs on legs rather than surface mount with light pipes, and it's easy to bend the legs if you're rough.

The TD-W8968 has two small Philips screws and 8 plastic clips securing the top of the case. They're roughly:

  • one just to the outer side of each antenna
  • one at the centre-front and one at the centre-back of the case
  • two on each front corner

Main PCB:
Insert photo of PCB

Read the general serial port docs first if you're not familiar with serial connections.

Some basic soldering is required.

TD-W8968

On the TD-W8968 unpopulated through-holes for the serial port are near the LED edge/clock can/EMI shield (see picture):

  • TP7 (attached to R67) is the board's RX
  • TP6 (attached to R68) is the board's TX

You'll need to add some header pins in. The hole spacing is 2mm but 2.54mm header can just about be bent to fit. TP2 nearby makes for a convenient ground reference pin, although it may be tricky to solder to since the surrounding ground plane is an effective heatsink.

TD-W8960n v5

Solder PIN-Headers to J2. Resistors R67 and R68 are unpopulated. Short the Resistor-Pads (see photo).

□ R68 -> TX
◯ R67 -> RX
◯ GND
◯ 3V (don't connect)

Stock CFE and firmware both use 115200, 8N1. CFE will give you a prompt if you interrupt it with a keypress.

It seems unlikely but there just may be a JTAG header under the EMI shield, at least on the TD-W8968.

port.jtag general information about the JTAG port, JTAG cable, etc.

How to connect to the JTAG Port of this specific device:
Insert photo of PCB with markings for JTAG port

The stock bootloader is BCM63xx-flavour CFE and supports web and TFTP flashing. It seemingly doesn't allow full dumping; when you dump flash beyond the first megabyte you get what appear to be page faults. Maybe it just needs a different address, or maybe CFE doesn't fully map the SPI flash?

None so far.

HELO CPUI L1CI DRAM ---- PHYS PHYE DDR1 333H SIZ3 RACE PASS ---- ZBSS CODE DATA L12F MAIN CFE version 1.0.38-114.185 for BCM96318 (32bit,SP,BE) Build Date: Wed Aug 21 10:59:05 HKT 2013 (root@localhost.localdomain) Copyright (C) 2000-2011 Broadcom Corporation. HS Serial flash device: name ID_W25X64, id 0xef17 size 8192KB Total Flash size: 8192K with 128 sectors Flash not used for Auxillary File System Light all CPU's LEDs for LED Test. Chip ID: BCM6318B0, MIPS: 333MHz, DDR: 333MHz, Bus: 167MHz Main Thread: TP0 Total Memory: 67108864 bytes (64MB) Boot Address: 0xb8000000 Board IP address : 192.168.1.1:ffffff00 Host IP address : 192.168.1.100 Gateway IP address : Run from flash/host (f/h) : f Default host run file name : vmlinux Default host flash file name : bcm963xx_fs_kernel Boot delay (0-9 seconds) : 1 Board Id (0-4) : 96318REF Number of MAC Addresses (1-32) : 11 Base MAC Address : 14:cc:20:XX:XX:XX PSI Size (1-64) KBytes : 56 Enable Backup PSI [0|1] : 0 System Log Size (0-256) KBytes : 0 Auxillary File System Size Percent: 0 Main Thread Number [0|1] : 0 Device Pin : "41919392" *** Press any key to stop auto run (1 seconds) *** Auto run second count down: [...] Booting from only image (0xb8010000) ... Code Address: 0x80010000, Entry Address: 0x802cf7f0 Decompression OK! Entry at 0x802cf7f0 Closing network. Disabling Switch ports. Flushing Receive Buffers... 0 buffers found. Closing DMA Channels. Starting program at 0x802cf7f0 Linux version 2.6.30 (root@localhost.localdomain) (gcc version 4.4.2 (Buildroot 2010.02-git) ) #7 Thu Aug 21 14:31:44 CST 2014 HS Serial flash device: name ID_W25X64, id 0xef17 size 8192KB 96318REF prom init CPU revision is: 00029033 (Broadcom BCM3302) DSL SDRAM reserved: 0x100000 Determined physical RAM map: memory: 03f00000 @ 00000000 (usable) Zone PFN ranges: DMA 0x00000000 -> 0x00001000 Normal 0x00001000 -> 0x00003f00 Movable zone start PFN for each node early_node_map[1] active PFN ranges 0: 0x00000000 -> 0x00003f00 On node 0 totalpages: 16128 free_area_init_node: node 0, pgdat 803863d0, node_mem_map 81000000 DMA zone: 32 pages used for memmap DMA zone: 0 pages reserved DMA zone: 4064 pages, LIFO batch:0 Normal zone: 94 pages used for memmap Normal zone: 11938 pages, LIFO batch:1 Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16002 Kernel command line: root=31:0 ro noinitrd console=ttyS0,115200 Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes. Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes NR_IRQS:128 PID hash table entries: 256 (order: 8, 1024 bytes) console [ttyS0] enabled Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) Memory: 60020k/64512k available (2838k kernel code, 4472k reserved, 711k data, 132k init, 0k highmem) Calibrating delay loop... 331.77 BogoMIPS (lpj=165888) Mount-cache hash table entries: 512 --Kernel Config-- SMP=0 PREEMPT=0 DEBUG_SPINLOCK=0 DEBUG_MUTEXES=0 net_namespace: 1076 bytes NET: Registered protocol family 16 Total Flash size: 8192K with 128 sectors Flash not used for Auxillary File System registering PCI controller with io_map_base unset registering PCI controller with io_map_base unset bio: create slab <bio-0> at 0 SCSI subsystem initialized usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb pci 0000:00:09.0: reg 10 32bit mmio: [0x10005100-0x100051ff] pci 0000:00:0a.0: reg 10 32bit mmio: [0x10005000-0x100050ff] pci 0000:01:00.0: PME# supported from D0 D3hot pci 0000:01:00.0: PME# disabled pci 0000:02:00.0: reg 10 64bit mmio: [0x000000-0x007fff] pci 0000:02:00.0: supports D1 D2 pci 0000:01:00.0: PCI bridge, secondary bus 0000:02 pci 0000:01:00.0: IO window: disabled pci 0000:01:00.0: MEM window: 0xa0000000-0xa00fffff pci 0000:01:00.0: PREFETCH window: disabled PCI: Enabling device 0000:01:00.0 (0000 -> 0002) PCI: Setting latency timer of device 0000:01:00.0 to 64 BLOG v3.0 Initialized BLOG Rule v1.0 Initialized Broadcom IQoS v0.1 Aug 20 2014 11:13:57 initialized NET: Registered protocol family 8 NET: Registered protocol family 20 NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 2048 (order: 2, 16384 bytes) TCP bind hash table entries: 2048 (order: 1, 8192 bytes) TCP: Hash tables configured (established 2048 bind 2048) TCP reno registered NET: Registered protocol family 1 squashfs: version 4.0 (2009/01/31) Phillip Lougher squashfs: version 4.0 with LZMA457 ported by BRCM fuse init (API version 7.11) msgmni has been set to 117 io scheduler noop registered (default) pcieport-driver 0000:01:00.0: device [14e4:6318] has invalid IRQ; check vendor BIOS PCI: Setting latency timer of device 0000:01:00.0 to 64 Driver 'sd' needs updating - please use bus_type methods PPP generic driver version 2.4.2 PPP Deflate Compression module registered PPP BSD Compression module registered NET: Registered protocol family 24 bcm963xx_mtd driver v2.0 File system address: 0xb8010100 Registered device mtd[BCM63XX RootFS] dev[0] Flash[0xb8010100,6938624] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver PCI: Enabling device 0000:00:0a.0 (0000 -> 0002) PCI: Setting latency timer of device 0000:00:0a.0 to 64 ehci_hcd 0000:00:0a.0: EHCI Host Controller ehci_hcd 0000:00:0a.0: new USB bus registered, assigned bus number 1 ehci_hcd 0000:00:0a.0: Enabling legacy PCI PM ehci_hcd 0000:00:0a.0: irq 50, io mem 0x10005000 ehci_hcd 0000:00:0a.0: USB f.f started, EHCI 1.00 usb usb1: configuration #1 chosen from 1 choice hub 1-0:1.0: USB hub found hub 1-0:1.0: 1 port detected ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver PCI: Enabling device 0000:00:09.0 (0000 -> 0002) PCI: Setting latency timer of device 0000:00:09.0 to 64 ohci_hcd 0000:00:09.0: OHCI Host Controller ohci_hcd 0000:00:09.0: new USB bus registered, assigned bus number 2 ohci_hcd 0000:00:09.0: irq 49, io mem 0x10005100 usb usb2: configuration #1 chosen from 1 choice hub 2-0:1.0: USB hub found hub 2-0:1.0: 1 port detected Initializing USB Mass Storage driver... usbcore: registered new interface driver usb-storage USB Mass Storage support registered. brcmboard: brcm_board_init entry SES: Button Interrupt 0x0 is enabled sesBtn_mapIntr: is_sesBtn_irq_shared=0, sesBtn_irq=0 SES: LED GPIO 0x8010 is enabled brcm_board_init: isShared=0, rstToDflt_irq=1 ======== Get reg b0005200, value 0x10 ==== ======== Set reg b0005200 to 0x10000010 ==== ======== Get reg b0005200, value 0x10000010 ==== Serial: BCM63XX driver $Revision: 3.00 $ Magic SysRq enabled (type ^ h for list of supported commands) ttyS0 at MMIO 0xb0000100 (irq = 36) is a BCM63XX bcmPktDmaBds_init: Broadcom Packet DMA BDs initialized bcmxtmrt: Broadcom BCM6318B0 ATM/PTM Network Device v0.4 Aug 20 2014 11:11:28 BCM63XX_USB USB Device not present Mirror/redirect action on u32 classifier input device check on Actions configured TCP cubic registered Initializing XFRM netlink socket NET: Registered protocol family 10 IPv6 over IPv4 tunneling driver NET: Registered protocol family 17 NET: Registered protocol family 15 Initializing MCPD Module Ebtables v2.0 registered DST proc init ok... ebt_time registered ebt_ftos registered ebt_wmm_mark registered 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> VFS: Mounted root (squashfs filesystem) readonly on device 31:0. Freeing unused kernel memory: 132k freed init started: BusyBox v1.17.2 (2014-08-20 14:15:25 CST) starting pid 188, tty '': '/etc/init.d/rcS' starting pid 194, tty '': '-/bin/sh' BusyBox v1.17.2 (2014-08-20 14:15:25 CST) built-in shell (ash) Enter 'help' for a list of built-in commands. Loading drivers and kernel modules... chipinfo: module license 'proprietary' taints kernel. Disabling lock debugging due to kernel taint brcmchipinfo: brcm_chipinfo_init entry NBUFF v1.0 Initialized Initialized fcache state Broadcom Packet Flow Cache Char Driver v2.2 Aug 20 2014 11:04:09 Registered<242> Created Proc FS /procfs/fcache Broadcom Packet Flow Cache registered with netdev chain Broadcom Packet Flow Cache learning via BLOG enabled. Constructed Broadcom Packet Flow Cache v2.2 Aug 20 2014 11:04:09 bcmxtmcfg: bcmxtmcfg_init entry adsl: adsl_init entry Broadcom BCM6318B0 Ethernet Network Device v0.1 Aug 20 2014 11:11:05 ETH Init: Ch:0 - 200 tx BDs at 0xa3969000 ETH Init: Ch:0 - 400 rx BDs at 0xa3b6a000 dgasp: kerSysRegisterDyingGaspHandler: bcmsw registered eth3: MAC Address: 14:CC:20:XX:XX:XX eth2: MAC Address: 14:CC:20:XX:XX:XX eth1: MAC Address: 14:CC:20:XX:XX:XX eth0: MAC Address: 14:CC:20:XX:XX:XX Broadcom Address Resolution Logic Processor (ARL) Char Driver v0.1 Aug 20 2014 11:04:06 Registered <245> wl: dsl_tx_pkt_flush_len=338 wl: high_wmark_tot=400 PCI: Enabling device 0000:02:00.0 (0000 -> 0002) PCI: Setting latency timer of device 0000:02:00.0 to 64 wl: passivemode=1 wl: napimode=0 wl0: allocskbmode=1 currallocskbsz=256 Neither SPROM nor OTP has valid image wl:srom/otp not programmed, using main memory mapped srom info(wombo board) wl:loading /etc/wlan/bcm43217_map.bin srom rev:8 wl: reading /etc/wlan/bcmcmn_nvramvars.bin, file size=16 wl0: Broadcom BCMa8db 802.11 Wireless Controller 6.30.102.7.cpe4.12L08.0 dgasp: kerSysRegisterDyingGaspHandler: wl0 registered Broadcom 802.1Q VLAN Interface, v0.1 dns_init ===== Release Version 4.12L.08 (build timestamp 140821_1430) ===== ssk:error:9.951:rutSntp_getOldTZInfo:143:Open TZ file error! ip_tables: (C) 2000-2006 Netfilter Core Team ip6_tables: (C) 2000-2006 Netfilter Core Team ssk:error:10.758:insertModuleByIndex:414:Failed on command . ssk:error:10.758:insertModulesWithDep:345:insmod ip6table_mangle.ko FAILED in insertModuleByIndex() Netfilter messages via NETLINK v0.30. device eth0 entered promiscuous mode ADDRCONF(NETDEV_UP): eth0: link is not ready device eth1 entered promiscuous mode ADDRCONF(NETDEV_UP): eth1: link is not ready device eth2 entered promiscuous mode ADDRCONF(NETDEV_UP): eth2: link is not ready device eth3 entered promiscuous mode ADDRCONF(NETDEV_UP): eth3: link is not ready device wl0 entered promiscuous mode WLmngr Daemon is running optarg=0 shmId=0 br0: port 5(wl0) entering forwarding state wlevt is ready for new msg... ssk:error:14.098:rcl_wlGuestNwkObject:969:newObj BcmAdsl_Initialize=0xC00D60A0, g_pFnNotifyCallback=0xC010A6B4 && currObj != 1 pSdramPHY=0xA3FFFFF8, 0x5A9BEF52 0xE5A186A *** XfaceOffset: 0x1C790 => 0x1C790 *** *** PhySdramSize got adjusted: 0x8F9D8 => 0xA561C *** AdslCoreSharedMemInit: shareMemSize=371133(371136) AdslCoreHwReset: pLocSbSta=832c0000 bkupThreshold=1600 AdslCoreHwReset: AdslOemDataAddr = 0xA3F84590 ***BcmDiagsMgrRegisterClient: 0 *** dgasp: kerSysRegisterDyingGaspHandler: dsl0 registered XTM Init: Ch:0 - 400 rx BDs at 0xa3233000 XTM Init: Ch:1 - 16 rx BDs at 0xa3259980 bcmxtmrt: PTM/ATM Non-Bonding Mode configured in system nf_conntrack version 0.5.0 (1008 buckets, 4032 max) iptables: Bad rule (does a matching rule exist in that chain?) iptables: Bad rule (does a matching rule exist in that chain?) iptables: Bad rule (does a matching rule exist in that chain?) iptables: Bad rule (does a matching rule exist in that chain?) iptables: Bad rule (does a matching rule exist in that chain?) Could not get lock! kcg 323 :GPL NetUSB up! uShare (version 1.1a), a lightweight UPnP A/V and DLNA Media Server. Benjamin Zores (C) 2005-2007, for GeeXboX Team. See http://ushare.geexbox.org/ for updates. kc 90 : run_telnetDBGDServer start kc 227 : init_DebugD end INFO17EA: NetUSB 1.02.40, 0002061E : Oct 31 2013 16:38:27 INFO17EC: AUTH ISOC INFO17ED: usbcore: registered new interface driver KC NetUSB General Driver INFO011A: init proc : PAGE_SIZE 4096 INFO16BE: infomap c0a7b94c INFO16C1: sleep to wait br0 to wake up INFO02D0: use dev Name br0 INFO16CA: sleep to wait br0 end. INFO16E3: UDP_BROAD 7437 tcpPort:625868800 INFO184C: Check mac address INFO02D0: use dev Name br0 INFO15CA: tcpConnector() started... ssk:tplink:19.578:rcl_sysModeObject:568:3G : currSysMode SYS_MODE_DSL, mainConn Down, usb3gBackUp Disable, enable3g False monitor task is initialized pid= 286 WPS Device PIN = 41919392 IPSec VPN daemon running! optarg=0 shmId=0 send msg id[0X1000080A] to smd, (wordData=503) smd:error:20.343:oalMsg_send:209:write failed, errno=9 smd:error:20.343:processMsgSimpleFooter:2724:send response for msg 0x1000080a failed, ret=9002 br0: port 5(wl0) entering disabled state device wl0 left promiscuous mode br0: port 5(wl0) entering disabled state device wl0 entered promiscuous mode br0: port 5(wl0) entering forwarding state br0: port 5(wl0) entering disabled state Setting SSID: "TP-LINK_XXXXXX" Setting SSID: "TP-LINK_GuestXX" Setting SSID: "TP-LINK_XXXXXX_01" Setting SSID: "TP-LINK_XXXXXX_02" wlctl: Unsupported device wl0 left promiscuous mode br0: port 5(wl0) entering disabled state device wl0 entered promiscuous mode br0: port 5(wl0) entering forwarding state INFO14A7: Bind to br0 acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: scan in progress ... acsd: selected channel spec: 0x 0 [hit enter] TD-W8968 3.0 DSL Modem Router Login: admin Password: > help ? help logout exit quit reboot adsl xdslctl xtm brctl cat loglevel logdest virtualserver ddns df dumpcfg dumpmdm meminfo psp kill dumpsysinfo dnsproxy syslog echo ifconfig ping ps pwd sntp sysinfo tftp wlctl arp defaultgateway dhcpserver dns lan lanhosts passwd ppp restoredefault route save swversion uptime cfgupdate swupdate exitOnIdle wan mcpctl utility > ps PID USER VSZ STAT COMMAND 1 admin 1620 S init 2 admin 0 SW< [kthreadd] 3 admin 0 SW [sirq-high/0] 4 admin 0 SW [sirq-timer/0] 5 admin 0 SW [sirq-net-tx/0] 6 admin 0 SW [sirq-net-rx/0] 7 admin 0 SW [sirq-block/0] 8 admin 0 SW [sirq-tasklet/0] 9 admin 0 SW [sirq-sched/0] 10 admin 0 SW [sirq-hrtimer/0] 11 admin 0 SW [sirq-rcu/0] 12 admin 0 SW< [events/0] 13 admin 0 SW< [khelper] 16 admin 0 SW< [async/mgr] 61 admin 0 SW< [kblockd/0] 70 admin 0 SW< [khubd] 99 admin 0 SW [pdflush] 100 admin 0 SW [pdflush] 101 admin 0 SWN [kswapd0] 103 admin 0 SW< [crypto/0] 160 admin 0 SW< [mtdblockd] 182 admin 0 SW< [linkwatch] 194 admin 1636 S -/bin/sh 228 admin 0 SW [dsl0] 247 admin 0 SW [bcmsw] 248 admin 0 SW [bcmsw_timer] 285 admin 3868 S smd 286 admin 4328 S ssk 295 admin 1492 S dnsproxy 296 admin 1444 S sntp -s time.nist.gov -s ntp1.tummy.com -t Greenwich 301 admin 1532 S dhcpd 367 admin 4312 S mcpd 368 admin 3520 S rastatus6 538 admin 5360 S wlmngr -m 0 559 admin 1436 S /bin/wlevt 623 admin 5580 S smbd -D 624 admin 5580 S smbd -D 647 admin 1604 S vsftpd 649 admin 2900 S ushare 655 admin 0 SW [ telnetDBGD ] 656 admin 0 SW [ acktelnetDBGD ] 657 admin 2900 S ushare 658 admin 2900 S ushare 659 admin 2900 S ushare 660 admin 2900 S ushare 662 admin 2900 S ushare 664 admin 2900 S ushare 668 admin 0 SW [NU VM] 669 admin 0 SW [NU UDP] 670 admin 0 SW [NU TCP] 673 admin 2900 S ushare 688 admin 3840 S ipsecVpn -m 0 768 admin 908 S radvd -C /var/radvd.conf 796 admin 1304 S /bin/lld2d br0 800 admin 1240 S /bin/eapd 804 admin 1592 S /bin/nas 872 admin 1312 S /bin/acsd 874 admin 2828 S /bin/wps_monitor 925 admin 4440 S consoled -m 0 932 admin 1616 S sh -c ps 933 admin 1620 R ps > sh BusyBox v1.17.2 (2014-08-20 14:15:25 CST) built-in shell (ash) Enter 'help' for a list of built-in commands. # [hit tab] BIAManufactoryRfTest init sendarp [ insmod setkey [[ ip setmem acs_cli ip6tables sh acsd ipsecVpn sleep adsl iptables smbcontrol adslctl kill smbd arl killall smbpasswd arlctl klogd smd ash lld2d snmpd bash ln sntp brctl logger ssk busybox logread sysinfo cat ls syslogd chat mcp tc chmod mcpctl telnetd consoled mcpd test cp mkdir tftp date mknod tftpd ddnsd modem_scan top deluser mount tr69c df mroute tty dhcp6c nas udhcpd dhcp6s nas4not umount dhcpc nc upnp dhcpd ntfs-3g urlfilterd dmesg nvram usb_modeswitch dnsproxy nvramUpdate ushare dnsspoof openssl vconfig dumpmem pidof vlanctl dumpsysinfo.sh ping vsftpd eapd ping6 wget ebtables poweroff wl echo pppd wl_server ethctl ps wl_server_socket ethswctl pwd wlctl expr racoon wlevt fc radvd wlmngr fcctl rastatus6 wps_monitor ftpget rawSocketTest xdslctl halt reboot xtm handle_card ripd xtmctl hotplug rm zebra httpd rmmod ifconfig route


The following kernel log was capture on a TD-W8968 running OpenWrt Designated Driver r50019 (trunk) before installing USB support or anything else.

[ 0.000000] Linux version 4.4.14 (zxcduc@debian) (gcc version 5.3.0 (OpenWrt GCC 5.3.0 50019) ) #1 Wed Dec 21 11:17:36 UTC 2016 [ 0.000000] strap_override_bus = fffdffff [ 0.000000] Detected Broadcom 0x6318 CPU revision b0 [ 0.000000] CPU frequency is 333 MHz [ 0.000000] 64MB of RAM installed [ 0.000000] board_bcm963xx: Boot address 0xb8000000 [ 0.000000] board_bcm963xx: CFE version: 1.0.38-114.185 [ 0.000000] bootconsole [early0] enabled [ 0.000000] CPU0 revision is: 00029033 (Broadcom BMIPS3300) [ 0.000000] board: board name: TD-W8968 [ 0.000000] MIPS: machine is TP-Link TD-W8968 [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 04000000 @ 00000000 (usable) [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x0000000000000000-0x0000000003ffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000000000-0x0000000003ffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff] [ 0.000000] On node 0 totalpages: 16384 [ 0.000000] free_area_init_node: node 0, pgdat 803ba430, node_mem_map 81002cd0 [ 0.000000] Normal zone: 128 pages used for memmap [ 0.000000] Normal zone: 0 pages reserved [ 0.000000] Normal zone: 16384 pages, LIFO batch:3 [ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes. [ 0.000000] Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes [ 0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768 [ 0.000000] pcpu-alloc: [0] 0 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16256 [ 0.000000] Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200 [ 0.000000] PID hash table entries: 256 (order: -2, 1024 bytes) [ 0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) [ 0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) [ 0.000000] Memory: 59520K/65536K available (2980K kernel code, 145K rwdata, 740K rodata, 1248K init, 197K bss, 6016K reserved, 0K cma-reserved) [ 0.000000] SLUB: HWalign=16, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 [ 0.000000] NR_IRQS:256 [ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 11479041721 ns [ 0.000022] sched_clock: 32 bits at 166MHz, resolution 6ns, wraps every 12897800188ns [ 0.008142] Calibrating delay loop... 332.54 BogoMIPS (lpj=665088) [ 0.042782] pid_max: default: 32768 minimum: 301 [ 0.047897] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.054699] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.071893] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns [ 0.084145] NET: Registered protocol family 16 [ 0.347275] registering PCI controller with io_map_base unset [ 0.378293] PCI host bridge to bus 0000:00 [ 0.382567] pci_bus 0000:00: root bus resource [mem 0x10200000-0x102fffff] [ 0.389633] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0] [ 0.396617] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0] [ 0.403613] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff] [ 0.411873] pci 0000:00:00.0: [14e4:6318] type 01 class 0x060400 [ 0.412051] pci 0000:00:00.0: PME# supported from D0 D3hot [ 0.412579] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring [ 0.421247] pci 0000:01:00.0: [14e4:a8db] type 00 class 0x028000 [ 0.421375] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x00007fff 64bit] [ 0.421604] pci 0000:01:00.0: supports D1 D2 [ 0.422106] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01 [ 0.422158] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated to 01 [ 0.422243] pci 0000:00:00.0: BAR 8: assigned [mem 0x10200000-0x102fffff] [ 0.429298] pci 0000:01:00.0: BAR 0: assigned [mem 0x10200000-0x10207fff 64bit] [ 0.436827] pci 0000:00:00.0: PCI bridge to [bus 01] [ 0.441918] pci 0000:00:00.0: bridge window [mem 0x10200000-0x102fffff] [ 0.450921] clocksource: Switched to clocksource MIPS [ 0.460484] NET: Registered protocol family 2 [ 0.467413] TCP established hash table entries: 1024 (order: 0, 4096 bytes) [ 0.474756] TCP bind hash table entries: 1024 (order: 0, 4096 bytes) [ 0.481390] TCP: Hash tables configured (established 1024 bind 1024) [ 0.488134] UDP hash table entries: 256 (order: 0, 4096 bytes) [ 0.494292] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) [ 0.501631] NET: Registered protocol family 1 [ 0.506436] PCI: CLS 0 bytes, default 16 [ 0.509078] futex hash table entries: 256 (order: -1, 3072 bytes) [ 0.569586] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.575692] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.594122] io scheduler noop registered [ 0.598259] io scheduler deadline registered (default) [ 0.605408] PCI: Enabling device 0000:00:00.0 (0000 -> 0002) [ 0.612613] bcm63xx_uart.0: ttyS0 at MMIO 0xb0000100 (irq = 36, base_baud = 1562500) is a bcm63xx_uart [ 0.622338] console [ttyS0] enabled [ 0.629482] bootconsole [early0] disabled [ 0.651303] m25p80 spi1.0: found s25fl064k, expected m25p80 [ 0.657075] m25p80 spi1.0: s25fl064k (8192 Kbytes) [ 0.662734] bcm63xxpart: CFE boot tag found with version 6 and board type TD-W8968 [ 0.670671] bcm63xxpart: Partition 0 is CFE offset 0 and length 10000 [ 0.677335] bcm63xxpart: Partition 1 is kernel offset 10100 and length 13ddd4 [ 0.684654] bcm63xxpart: Partition 2 is rootfs offset 14ded4 and length 6a212c [ 0.692095] bcm63xxpart: Partition 3 is nvram offset 7f0000 and length 10000 [ 0.699361] bcm63xxpart: Partition 4 is linux offset 10000 and length 7e0000 [ 0.706627] 5 bcm63xxpart partitions found on MTD device spi1.0 [ 0.712722] Creating 5 MTD partitions on "spi1.0": [ 0.717682] 0x000000000000-0x000000010000 : "CFE" [ 0.726518] 0x000000010100-0x00000014ded4 : "kernel" [ 0.736283] 0x00000014ded4-0x0000007f0000 : "rootfs" [ 0.745889] mtd: device 2 (rootfs) set to be root filesystem [ 0.752992] 1 squashfs-split partitions found on MTD device rootfs [ 0.759421] 0x000000380000-0x0000007f0000 : "rootfs_data" [ 0.768785] 0x0000007f0000-0x000000800000 : "nvram" [ 0.778412] 0x000000010000-0x0000007f0000 : "linux" [ 0.828278] b53_common: found switch: BCM63xx, rev 0 [ 0.834237] bcm63xx-wdt bcm63xx-wdt: started, timer margin: 30 sec [ 0.844213] PCI: Enabling device 0000:01:00.0 (0000 -> 0002) [ 0.850194] bcma: bus0: Found chip with id 43217, rev 0x01 and package 0x09 [ 0.857437] bcma: bus0: Core 0 found: ChipCommon (manuf 0x4BF, id 0x800, rev 0x27, class 0x0) [ 0.866244] bcma: bus0: Core 1 found: IEEE 802.11 (manuf 0x4BF, id 0x812, rev 0x1E, class 0x0) [ 0.875148] bcma: bus0: Core 2 found: PCIe (manuf 0x4BF, id 0x820, rev 0x14, class 0x0) [ 0.883556] bcma_fallback_sprom: pci bus/device num mismatch: expected 0/0, but got 1/0 [ 0.906770] bcma: bus0: Bus registered [ 0.914318] NET: Registered protocol family 10 [ 0.927714] NET: Registered protocol family 17 [ 0.932530] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this. [ 0.945574] 8021q: 802.1Q VLAN Support v1.8 [ 0.963444] VFS: Mounted root (squashfs filesystem) readonly on device 31:2. [ 0.997961] Freeing unused kernel memory: 1248K (803d8000 - 80510000) [ 2.978477] init: Console is alive [ 2.982493] init: - watchdog - [ 4.669802] init: - preinit - [ 5.757779] random: procd urandom read with 107 bits of entropy available [ 9.196123] jffs2: notice: (301) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 9.214147] random: nonblocking pool is initialized [ 9.221264] mount_root: switching to jffs2 overlay [ 9.282257] procd: - early - [ 9.285775] procd: - watchdog - [ 10.181019] procd: - ubus - [ 10.384049] procd: - init - [ 12.191923] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 12.231074] Loading modules backported from Linux version wt-2016-05-12-0-g7a54796 [ 12.238907] Backport generated by backports.git backports-20160216-0-ge3c56e4 [ 12.254378] ip_tables: (C) 2000-2006 Netfilter Core Team [ 12.288880] nf_conntrack version 0.5.0 (949 buckets, 3796 max) [ 12.388073] xt_time: kernel timezone is -0000 [ 12.579288] PPP generic driver version 2.4.2 [ 12.590423] NET: Registered protocol family 24 [ 12.674297] b43-phy0: Broadcom 43217 WLAN found (core revision 30) [ 12.682037] b43-phy0: Found PHY: Analog 9, Type 4 (N), Revision 17 [ 12.688472] b43-phy0: Found Radio: Manuf 0x17F, ID 0x2057, Revision 14, Version 0 [ 12.697710] Broadcom 43xx driver loaded [ Features: PNL ] [ 12.858476] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht' [ 25.903457] bcm63xx_enetsw bcm63xx_enetsw.0: link UP on Port 1, 100Mbps, full-duplex [ 25.911883] bcm63xx_enetsw bcm63xx_enetsw.0: link UP on Port 4, 100Mbps, full-duplex [ 25.959847] device eth0.1 entered promiscuous mode [ 25.964831] device eth0 entered promiscuous mode [ 25.989359] br-lan: port 1(eth0.1) entered forwarding state [ 25.995256] br-lan: port 1(eth0.1) entered forwarding state [ 27.998977] br-lan: port 1(eth0.1) entered forwarding state


Space for additional notes, links to forum threads or other resources.

This website uses cookies. By using the website, you agree with storing cookies on your computer. Also you acknowledge that you have read and understand our Privacy Policy. If you do not agree leave the website.More information about cookies
  • Last modified: 2020/12/23 09:44
  • by danitool