User Tools

Site Tools


toh:cisco:epc3208g

Cisco EPC3208G

This is a Cable Gateway. It uses an eCos operating system.

Hardware

Info

Instruction set: MIPS
Vendor: Broadcom
Bootloader: SA BootLoader - Gnu spiboot reduced DDR drive
System-On-Chip: Broadcom BCM3382
CPU @Frq ?
Flash-Chip: Spansion FL128PIF (SPI) or Numonyx N25Q2813B40 (ID=0x20ba18)
Flash size: 16 MB
RAM: Samsung K4T51163QJ-BCF7 / DDR2-800 6-6-6
RAM size: 32 MiB
Wireless: none
Ethernet: 1 GbE
Internet: DOCSIS 3.0
USB: none
Serial: Yes
JTAG: ?

PCB

EPC3208G PCB - Front EPC3208G PCB - Back

Interfaces

Interface Description J103 J303 / J505
Pictures Unknown Port - J303 TTL Port J303/J505
Grid Dimension
- Soldering Points:
2,54 mm 2,00 mm
Baudrate ? 115200 ; 8N1
Purpose ? TTL
Hint I don't know, for what it is…
feel free to edit.
Don't forget to cross the RX and TX on the TTL device,
otherwise you can damage your reader.

OEM bootlog - Locked

BCM338221 TP0 1 Sync:1 346890 SA BootLoader Version: 2.3.1_R3(S) Pre-release Gnu spiboot reduced DDR drive Build Date: Sep 26 2011 Build Time: 15:31:28 Setting SPI device 0 to clock 0 Setting SPI device 0 to clock 7 SPI flash ID 0x012018, size 16MB, block size 64KB, write buffer 256, flags 0x0 Found image 1 at offset 20000 Found image 2 at offset 800000 eCos - hal_diag_init Init device '/dev/BrcmTelnetIoDriver' Init device '/dev/ttydiag' Init tty channel: 81002218 Init device '/dev/tty0' Init tty channel: 81002238 Init device '/dev/haldiag' HAL/diag SERIAL init Init device '/dev/ser0' BCM 33XX SERIAL init - dev: 0.2 Set output buffer - buf: 0x811cacb0 len: 4096 Set input buffer - buf: 0x811cbcb0 len: 4096 BCM 33XX SERIAL config [00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers: (BFC Target) Configuring/Loading Flash driver... [00:00:00 01/01/1970] [tStartup] BcmSpiFlashDevice::DetectFlash: (SPI Flash Device Factory) WARNING - Detected SPI flash with JEDEC ID =0x12018 [00:00:00 01/01/1970] [tStartup] FlashDeviceDriver::SpiFlashPlaceRegions: (Flash Driver C API) WARNING - Permanent NonVol would fit in the boot block of this flash device, but I found existing NonVol in the following block; using this location instead... [00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers: (BFC Target) Loading BootloaderStore driver... [00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers: (BFC Target) Loading ProgramStore driver... ProgramStoreDeviceDriver::ProgramStoreDriverInit: INFO - Initializing... [00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers: (BFC Target) Loading NonVol driver... [00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers: (BFC Target) Storage drivers initialized successfully. [00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitDeviceAbstractions: (BFC Target) Creating singletons for ProgramStore/BootloaderStore/NonVol devices... Detecting the next image number that we will store to by default... Bootloader indicates we are running image 2 By default, we will dload to image number 1! [00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitDeviceAbstractions: (BFC Target) Device abstraction singletons created successfully. BcmCmDocsisNonVolSettings::GetSingletonInstance: WARNING - the singleton instance is NULL, and someone is accessing it! SAHttpCacheVariables::GetSingletonInstance: WARNING - the singleton instance is NULL, and someone is accessing it! Setting up the SAHttpCacheVariables singleton pointer. CmSnmpNonVolSettings::GetSingletonInstance: WARNING - the singleton instance is NULL, and someone is accessing it! BcmCmSANonVolSettings::GetSingletonInstance: WARNING - the singleton instance is NULL, and someone is accessing it! [00:00:01 01/01/1970] [tStartup] BcmCmSANonVolSettings::BcmCmSANonVolSettings: (CM SA NonVol Settings) WARNING - Current CxC Version is 3.9.21.12mp5 BcmEmtaBlindDataNonVolSettings::GetSingletonInstance: WARNING - the singleton instance is NULL, and someone is accessing it! ERROR: Unable to get GetCountry blind data. (BcmEmtaBlindDataNonVolSettings = NULL) BcmPcpClientServiceAppIf::GetSingletonInstance: WARNING - the singleton is NULL, and someone is accessing it! WARNING: ResetDefaultBlindEmtaData() -Resetting EMTA non-vol data section to default values mtaNvCalcChecksum: checksum= 1273036007 Reading Permanent settings from non-vol... Checksum for permanent settings: 0xdc2ff584 [00:00:01 01/01/1970] [tStartup] BcmCmSANonVolSettings::ReadFromImpl: (CM SA NonVol Settings) WARNING - Read older version of the settings (0.10); they have been upgraded to version 0.11, preserving original settings. [00:00:01 01/01/1970] [tStartup] BcmNonVolSettings::IsDefault: (CM BFC Event Log) Permanent settings are default! [00:00:01 01/01/1970] [tStartup] BcmNonVolSettings::IsDefault: (CWMP Client NonVol Settings) Permanent settings are default! [00:00:01


The Console Output stops abrupt, exactly at this point. (firmware dump not modificated)
At this point he starts to read the nonvol settings - there is a setting inside that will hide the boot process.
Hint: Maybe it's a good idea to break the nvram… :)

OEM bootlog - Unlocked

Glitching the UART lockdown: Solder a little pulse-switch between HOLD# of the Flash-Chip and GND… and pulse it various times in the bootchain (while it's loading image2 and even when the boot progresses). Eventually it will print out alot of information… When you see the "CM>"-prompt it means that you won :) Also attached are two possible scenarios that show you that your pulsings of the switch were not correct.

BCM338221 TP0 1 Sync:1 346890 SA BootLoader Version: 2.3.1_R3(S) Pre-release Gnu spiboot reduced DDR drive Build Date: Sep 26 2011 Build Time: 15:31:28 Setting SPI device 0 to clock 0 Setting SPI device 0 to clock 7 SPI flash ID 0x20ba18, size 16MB, block size 64KB, write buffer 256, flags 0x0 Found image 1 at offset 20000 Found image 2 at offset 800000 eCos - hal_diag_init Init device '/dev/BrcmTelnetIoDriver' Init device '/dev/ttydiag' Init tty channel: 80fc1db8 Init device '/dev/tty0' Init tty channel: 80fc1dd8 Init device '/dev/haldiag' HAL/diag SERIAL init Init device '/dev/ser0' BCM 33XX SERIAL init - dev: 0.2 Set output buffer - buf: 0x81188440 len: 4096 Set input buffer - buf: 0x81189440 len: 4096 BCM 33XX SERIAL config [00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers: (BFC Target) Configuring/Loading Flash driver... [00:00:00 01/01/1970] [tStartup] BcmSpiFlashDevice::DetectFlash: (SPI Flash Device Factory) WARNING - Detected SPI flash with JEDEC ID =0x20ba18 [00:00:00 01/01/1970] [tStartup] FlashDeviceDriver::SpiFlashPlaceRegions: (Flash Driver C API) WARNING - Permanent NonVol would fit in the boot block of this flash device, but I found existing NonVol in the following block; using this location instead... [00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers: (BFC Target) Loading BootloaderStore driver... [00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers: (BFC Target) Loading ProgramStore driver... ProgramStoreDeviceDriver::ProgramStoreDriverInit: INFO - Initializing... [00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers: (BFC Target) Loading NonVol driver... [00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers: (BFC Target) Storage drivers initialized successfully. [00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitDeviceAbstractions: (BFC Target) Creating singletons for ProgramStore/BootloaderStore/NonVol devices... Detecting the next image number that we will store to by default... Bootloader indicates we are running image 1 By default, we will dload to image number 2! [00:00:00 01/01/1970] [tStartup] BcmBfcStdEmbeddedTarget::InitDeviceAbstractions: (BFC Target) Device abstraction singletons created successfully. SAHttpCacheVariables::GetSingletonInstance: WARNING - the singleton instance is NULL, and someone is accessing it! Setting up the SAHttpCacheVariables singleton pointer. CmSnmpNonVolSettings::GetSingletonInstance: WARNING - the singleton instance is NULL, and someone is accessing it! ProgramStoreDeviceDriver::ProgramStoreDriverIsImageValid: WARNING - Image CRC failed! ProgramStoreDeviceDriver::ProgramStoreDriverGetHeader: INFO - Selected image isn't valid (HCS failed); returning NULL! BcmCmSANonVolSettings::GetSingletonInstance: WARNING - the singleton instance is NULL, and someone is accessing it! [00:00:01 01/01/1970] [tStartup] BcmCmSANonVolSettings::BcmCmSANonVolSettings: (CM SA NonVol Settings) WARNING - Current CxC Version is 3.9.21.11.83.mp3 BcmEmtaBlindDataNonVolSettings::GetSingletonInstance: WARNING - the singleton instance is NULL, and someone is accessing it! ERROR: Unable to get GetCountry blind data. (BcmEmtaBlindDataNonVolSettings = NULL) WARNING: ResetDefaultBlindEmtaData() -Resetting EMTA non-vol data section to default values mtaNvCalcChecksum: checksum= 1273036007 Reading Permanent settings from non-vol... NonVolDeviceDriver::ReadTrueSegmentSizeBytes: WARNING - Segment Size in segment control word not valid; returning 0! NonVolDeviceDriver::NonVolDriverRead: ERROR - Failed to query the segment size (returned 0 bytes)! There is no valid data to read. [00:00:01 01/01/1970] [tStartup] BcmNonVolDeviceDriverBridge::ReadImpl: (NonVol Device) ERROR - Failed to read the length from the settings data! [00:00:01 01/01/1970] [tStartup] BcmNonVolDeviceDriverBridge::Read: (NonVol Device) ERROR - Failed to read the buffer from the device! Resetting the entire section to defaults. Default Mode! reset RG settings to factory default! [00:00:01 01/01/1970] [tStartup] BcmHalIfNonVolSettings::ResetDefaults: (HalIf NonVol Settings) WARNING - Resetting Permanent Settings to defaults! MAC addresses and other settings are now invalid! [00:00:01 01/01/1970] [tStartup] BcmCmBpiNonVolSettings::ResetDefaults: (CM BPI NonVol Settings) WARNING - Permanent settings (BPI Keys and other unique values) are being reset to their default values! [00:00:01 01/01/1970] [tStartup] CmSnmpNonVolSettings::ResetDefaults: (CM SNMP NonVol Settings) WARNING - Resetting all Permanent Settings! The serial number and other Sys Info items are probably invalid! [00:00:01 01/01/1970] [tStartup] BcmCmpNonVolSettings::ResetDefaults: (Cmp NonVol Settings) WARNING - Resetting all Permanent Settings! The serial number and other Sys Info items are probably invalid! * * * Failed to read non-vol settings from the device! * * Reading Dynamic settings from non-vol... NonVolDeviceDriver::ReadTrueSegmentSizeBytes: WARNING - Segment Size in segment control word not valid; returning 0! NonVolDeviceDriver::NonVolDriverRead: ERROR - Failed to query the segment size (returned 0 bytes)! There is no valid data to read. [00:00:01 01/01/1970] [tStartup] BcmNonVolDeviceDriverBridge::ReadImpl: (NonVol Device) ERROR - Failed to read the length from the settings data! [00:00:01 01/01/1970] [tStartup] BcmNonVolDeviceDriverBridge::Read: (NonVol Device) ERROR - Failed to read the buffer from the device! Resetting the entire section to defaults. [00:00:01 01/01/1970] [tStartup] BcmNonVolDeviceDriverBridge::Read: (NonVol Device) WARNING - * * Unable to read dynamic nonvol! Trying to read a backup one... (backupHandle = 0) * NonVolDeviceDriver::ReadTrueSegmentSizeBytes: WARNING - Segment Size in segment control word not valid; returning 0! [00:00:01 01/01/1970] [tStartup] BcmNonVolDeviceDriverBridge::ReadBackupImpl: (NonVol Device) ERROR - Length field is invalid (0xffffffff)! Bad settings... [00:00:01 01/01/1970] [tStartup] BcmNonVolDeviceDriverBridge::Read: (NonVol Device) ERROR - Failed to read the buffer from the device! Resetting the entire section to defaults. [00:00:01 01/01/1970] [tStartup] BcmNonVolDeviceDriverBridge::Read: (NonVol Device) WARNING - * * Unable to read dynamic nonvol! Trying to read a backup one... (backupHandle = 256) * NonVolDeviceDriver::ReadTrueSegmentSizeBytes: WARNING - Segment Size in segment control word not valid; returning 0! [00:00:01 01/01/1970] [tStartup] BcmNonVolDeviceDriverBridge::ReadBackupImpl: (NonVol Device) ERROR - Length field is invalid (0xffffffff)! Bad settings... [00:00:01 01/01/1970] [tStartup] BcmNonVolDeviceDriverBridge::Read: (NonVol Device) ERROR - Failed to read the buffer from the device! Resetting the entire section to defaults. Default Mode! reset RG settings to factory default! [00:00:01 01/01/1970] [tStartup] CmSnmpNonVolSettings::ResetDefaults: (CM SNMP NonVol Settings) WARNING - Resetting Dynamic Settings! [00:00:01 01/01/1970] [tStartup] BcmCmSANonVolSettings::BcmCmSANonVolSettings: (CM SA NonVol Settings) WARNING - Current CxC Version is 3.9.21.11.83.mp3 mtaNvCalcChecksum: checksum= 1273101532[00:00:01 01/01/1970] [tStartup] BcmParentalCtrlNonVolSettings::ResetDefaults: (Parental Control NonVol Settings) WARNING - Parental Control settings are being reset to defaults! [00:00:01 01/01/1970] [tStartup] BcmCmpNonVolSettings::ResetDefaults: (Cmp NonVol Settings) WARNING - Resetting the event log, admin status, and other Dynamic Settings! [00:00:01 01/01/1970] [tStartup] BcmFirewallNonVolSettings::ResetDefaults: (Firewall NonVol Settings) WARNING - Firewall settings are being reset to defaults! we found one in the table already!!!! WARNING: ResetDefaultBlindEmtaData() -Resetting EMTA non-vol data section to default values mtaNvCalcChecksum: checksum= 1273036007[00:00:01 01/01/1970] [tStartup] BcmIpsecNonVolSettings::ResetDefaults: (IPSEC NonVol Settings) WARNING - Ipsec Permanent settings are being reset to their default values! * * * Failed to read non-vol settings from the device! * * Non-Vol Settings successfully written to the device. [00:00:01 01/01/1970] [tStartup] BcmBfcFpmDriver::Init: Setting FPM Buffer size to: 256 Base Address: 0x839e0900 [00:00:01 01/01/1970] [tStartup] BcmBfcFpmDriver::Init: fFpmLargestBufferSize: 2048 fFpmSizeShiftBits: 0x8 [00:00:01 01/01/1970] [tStartup] BcmBfcFpmDriver::Init: Pool index: 0 pool size: 2048 [00:00:01 01/01/1970] [tStartup] BcmBfcFpmDriver::Init: Pool index: 1 pool size: 1024 [00:00:01 01/01/1970] [tStartup] BcmBfcFpmDriver::Init: Pool index: 2 pool size: 512 [00:00:01 01/01/1970] [tStartup] BcmBfcFpmDriver::Init: Pool index: 3 pool size: 256 [00:00:01 01/01/1970] [tStartup] BcmBfcFpmDriver::Init: Lookup table index: 0 pool size: 3 [00:00:01 01/01/1970] [tStartup] BcmBfcFpmDriver::Init: Lookup table index: 1 pool size: 2 [00:00:01 01/01/1970] [tStartup] BcmBfcFpmDriver::Init: Lookup table index: 2 pool size: 1 [00:00:01 01/01/1970] [tStartup] BcmBfcFpmDriver::Init: Lookup table index: 3 pool size: 1 [00:00:01 01/01/1970] [tStartup] BcmBfcFpmDriver::Init: Lookup table index: 4 pool size: 0 [00:00:01 01/01/1970] [tStartup] BcmBfcFpmDriver::Init: Lookup table index: 5 pool size: 0 [00:00:01 01/01/1970] [tStartup] BcmBfcFpmDriver::Init: Lookup table index: 6 pool size: 0 [00:00:01 01/01/1970] [tStartup] BcmBfcFpmDriver::Init: Lookup table index: 7 pool size: 0 ------------------------------------ Free Pool Manager Configuration ------------------------------------ Buffer size in Bytes............... 256 Number of Tokens................... 16384 Tokens used in 256 byte pool....... 32 Tokens used in 512 byte pool....... 32 Tokens used in 1024 byte pool...... 32 Tokens used in 2048 byte pool...... 33 Base Address of FPM Memory ........ 0xb2020200 Base Address of FPM Mem in DDR2.... 0x839e0900 Total Configured FPM Memory Size... 4194304 Free Fifo Full..................... 0 Free Fifo Empty.................... 1 Alloc Fifo Full.................... 0 Alloc Fifo Empty................... 1 Number of tokens available......... 16384 Number of not valid token frees.... 0 Number of not valid token multi.... 0 Overflow Count..................... 0 Underflow Count.................... 0 [00:00:01 01/01/1970] [tStartup] BcmBfcPacketAlloc::Init: Packet Alloc Header Buffer Start Addr: 0x83860880 Length: 0x180000 Max Buffer Size: 0x60 [00:00:01 01/01/1970] [tStartup] BcmThread::BcmPanasonicSnoop: (BFC Ping Thread) WARNING - Singleton pointer is not NULL! There are multiple BcmParentalCtlThread devices! Leaving the singleton pointer alone... Out of Band Data Path Message Handler Starting... [00:00:01 01/01/1970] [Telnet Thread] BcmTelnetThread::ThreadMain: (Telnet Thread) Telnet server thread running... [00:00:01 01/01/1970] [SSH Thread] BcmThread::ThreadMain: (SSH Thread) SSH server thread running... [00:00:01 01/01/1970] [NonVol Device Async Helper] CwmpClientNonVolSettings::WriteToImpl: Wrote Impl Allowed List size 0 NonVolDeviceDriver::ReadTrueSegmentSizeBytes: WARNING - Segment Size in segment control word not valid; returning 0! NonVolDeviceDriver::NonVolDriverWrite: WARNING - Current segment size < buffer size! Increasing the segment size! Creating SNMP agent cablemodem agent [00:00:01 01/01/1970] [tStartup] BcmCmDocsisApplication::CreateAndRegisterCommandTables: (CM DOCSIS Application) Creating/registering CWMP command table Creating BcmEmtaCommandTable Creating BcmEmtaEndptCommandTable If you pressed the 's' key before this point, we will skip driver initialization... Creating DOCSIS Control Thread... 0x8381da58 0x8381d57c 0x8381d4c4 0x8381d40c 0x8381d354 0x8381d29c 0x8381d1e4 0x8381d12c vvv Interface creation and driver startup beginning vvv -> Begin DOCSIS CM WAN interface Creating HAL object for the DOCSIS CableModem interface Registering DOCSIS CableModem driver Initializing main DTP DQM interrupts. b4201000: 0000004c b4201004: 00000000 b4201008: 00000008 b420100c: 00000000 b4201010: 00000000 b4201014: 00040000 b4201018: 00000000 b420101c: 00000000 Creating a new host FAP DQM manager. Instance: 837ee01c Initializing main FAP DQM interrupts. b4401000: 00000000 b4401004: 00000000 b4401008: 00000008 b440100c: 00000000 b4401010: 00000000 b4401014: 00000000 b4401018: 00000000 b440101c: 00000000 Creating a new host FAP DQM manager. Instance: 837edf30 Creating a new host UTP DQM manager. Instance: 837e9da0 Initializing main UTP DQM interrupts. b4001000: 00000049 b4001004: 00000000 b4001008: 00000008 b400100c: 00000000 b4001010: 00000001 b4001014: 00000000 b4001018: 00000000 b400101c: 00000000 LNA Detected = BCM3413 [00:00:03 01/01/1970] [NonVol Device Async Helper] CwmpClientNonVolSettings::WriteToImpl: Wrote Impl Allowed List size 0 [00:00:03 01/01/1970] [NonVol Device Async Helper] CwmpClientNonVolSettings::WriteToImpl: Wrote Impl Allowed List size 0 Initial Boost Status=0. Tilt Status=0 [00:00:03 01/01/1970] [NonVol Device Async Helper] CwmpClientNonVolSettings::WriteToImpl: Wrote Impl Allowed List size 0 [00:00:03 01/01/1970] [NonVol Device Async Helper] CwmpClientNonVolSettings::WriteToImpl: Wrote Impl Allowed List size 0 (Boost=Tilt=1)LNA Gain = 0x1f Final(Boost/Tilt=1/0) STATUS_READ2_REG=0x101f. Initializing all 8 downstreams - this takes a while. Patience, Grasshopper... 1 2 3 4 5 6 7 8 Fxtal is 48000000 Fclk_us_vco is 2088000000 Fclk_us_pll is 522000000 Fxtal is 48000000 Fclk_us_vco is 2088000000 Fclk_us_pll is 522000000 Fxtal is 48000000 Fclk_us_vco is 2088000000 Fclk_us_pll is 522000000 Fxtal is 48000000 Fclk_us_vco is 2088000000 Fclk_us_pll is 522000000 Fxtal is 48000000 Fclk_us_vco is 2088000000 Fclk_us_pll is 522000000 BcmMacInit: advMapRunAheadTimeMin = 3584 (0x00000e00) 10.24 MHz ticks, 350 usec Initializing DS Docsis 3.0 MAC Initializing CalcPhyPico BcmInitCalcPhyPico:Copying CalcPhy PicoCode rev 1.1.0 : 06/25/07 ...................................................................... Verifying CalcPhy PicoCode. ...................................................................... BcmInitCalcPhyPico:PicoCode verified. Creating a new host UTP DQM manager. Instance: 837a8678 Creating a new host UTP DQM manager. Instance: 837a85a4 [00:00:10 01/01/1970] [tStartup] BcmDocsisCmHalIf::Register: (DOCSIS CableModem HalIf) CM HAL reports h/w support for PHS, bitmask=0x3 [00:00:10 01/01/1970] [tStartup] BcmDocsisCmHalIf::Register: (DOCSIS CableModem HalIf) CM HAL reports h/w support for PHS, US size=64, DS size=256 bytes. -> End DOCSIS CM WAN interface -> Begin Ethernet LAN interfaces Creating HAL object for the Ethernet interface Registering Ethernet driver Creating a new host MPEG PROC DQM manager. Instance: 837a8174 Initializing main MEP_PROC DQM interrupts. b4601000: 00000000 b4601004: 00000000 b4601008: 00000008 b460100c: 00000000 b4601010: 00000000 b4601014: 00000000 b4601018: 00000000 b460101c: 00000000 Creating a new host MPEG PROC DQM manager. Instance: 837a80a0 Enet Config GMACreating a new host MPEG PROC DQM manager. Instance: 837a4e20 Creating a new host MPEG PROC DQM manager. Instance: 837a4d4c C UNIMAC Core: 1 Phy: 0 Ethernet Link Down! -> End Ethernet LAN interfaces -> Begin IP Stack interfaces -> Starting BFC DHCP Client subsystem... -> Starting BFC DHCPv6 Client subsystem... Creating HAL object for IP Stack1 (MAC Addr=###removed value###) DHCPc: Created default DHCP lease for IP Stack1 using client id htype=255, value=###removed value###; auto-config enabled (IP, subnet, router). Registering IP Stack1 driver Tcpip NI: Init - RegisteredStackCount = 1 Creating HAL object for IP Stack2 (MAC Addr=###removed value###) DHCPc: Created default DHCP lease for IP Stack2 using client id htype=255, value=###removed value###; auto-config enabled (IP, subnet, router). Registering IP Stack2 driver Tcpip NI: Init - RegisteredStackCount = 2 Creating HAL object for IP Stack3 (MAC Addr=###removed value###) DHCPc: Created default DHCP lease for IP Stack3 using client id htype=255, value=###removed value###; auto-config enabled (IP, subnet, router). Registering IP Stack3 driver Tcpip NI: Init - RegisteredStackCount = 3 Creating HAL object for IP Stack4 (MAC Addr=###removed value###) DHCPc: Created default DHCP lease for IP Stack4 using client id htype=255, value=###removed value###; auto-config enabled (IP, subnet, router). Registering IP Stack4 driver Tcpip NI: Init - RegisteredStackCount = 4 Creating HAL object for IP Stack5 (MAC Addr=###removed value###) DHCPc: Created default DHCP lease for IP Stack5 using client id htype=255, value=###removed value###; auto-config enabled (IP, subnet, router). Registering IP Stack5 driver Tcpip NI: Init - RegisteredStackCount = 5 Creating HAL object for IP Stack6 (MAC Addr=###removed value###) DHCPc: Created default DHCP lease for IP Stack6 using client id htype=255, value=###removed value###; auto-config enabled (IP, subnet, router). Registering IP Stack6 driver Tcpip NI: Init - RegisteredStackCount = 6 -> End IP Stack interfaces ^^^ Interface creation and driver startup complete ^^^ Creating BcmRgRemoteAccessCommandTable Creating BcmEmtaRemoteAccessCommandTable Forward Assist Manager Starting... Creating a new host FAP DQM manager. Instance: 8378d77c Creating the PacketCable Forwarder... Adding IP Stack6 HalIf to the PacketCable Forwarder Calling BcmEpsCmDocsisSystem::PostDriverInitialization()... Creating the CableHome Forwarder... Adding Ethernet HalIf to the CableHome Forwarder Adding IP Stack3 HalIf to the CableHome Forwarder Adding IP Stack4 HalIf to the CableHome Forwarder Adding IP Stack5 HalIf to the CableHome Forwarder Creating the DOCSIS Forwarder... Adding DOCSIS CableModem HalIf as the default interface to the DOCSIS Forwarder Adding IP Stack1 HalIf to the DOCSIS Forwarder Adding IP Stack2 HalIf to the DOCSIS Forwarder Adding WAN-Man Interface HalIf as the default interface to the CableHome Forwarder Adding eRouter Embedded Interface HalIf to the DOCSIS Forwarder [00:00:11 01/01/1970] [tStartup] BcmEmtaEpsCmDocsisSystem::InstallMiniUsfs: (BFC System) Installing Mini-Usfs snoop Isolating CM IP stack from eRouter Embedded Interface Linking Docsis and PacketCable packet switches... Adding WAN-Man Interface HalIf as the default interface to the PacketCable Forwarder Adding PacketCable Embedded Interface HalIf to the DOCSIS Forwarder [00:00:11 01/01/1970] [tStartup] BcmSled::GlobalEnable: (Singleton Instance) WARNING - eDOCSIS SLED is being disabled. Isolating CM IP stack & EMTA from eRouter Embedded Interface Current IP address is default 0.0.0.0. [00:00:11 01/01/1970] [tStartup] BcmEcosIpHalIf::ConfigureLeaseImpl: (IP Stack2 HalIf) Configuring IP stack 2: IP Address = 192.168.100.1 (primary IP address) Subnet Mask = 255.255.255.0 Router = 192.168.100.254 IsPrimaryInterface = 0 [00:00:12 01/01/1970] [tStartup] BcmEcosIpHalIf::AddIpv6LinkLocalAddress: (IP Stack2 HalIf) Configuring link-local IPv6 address fe80::21c:eaff:fede:ad02/64 Creating Propane Control Thread... Propane version: 2.0.1 (28 Oct 2002) Instantiating CmSnmpAgent object. Starting SNMP subsystem Registering STP Filter Snoop with all interfaces. Registering DOCSIS MIB Filter Snoop with CPE and WAN interfaces. Creating SNMP agent CPE diag agent CPE diag agent disabling management. CPE diag agent defering traps. [00:00:12 01/01/1970] [tStartup] CwmpClientNonVolSettings::WriteToImpl: Wrote Impl Allowed List size 0 BcmSnmpThread starting thread operation. Initializing Net-SNMP transport for IPv4 Initializing Net-SNMP transport for IPv6 IPv6 - register netsnmp_brcmV6_ctor to get our brcm V6 UDP domain IPv6 init_bcmV2SessionAndTransport: Open a session and hook our callbacks [00:00:13 01/01/1970] [tStartup] BcmDocsisCmHalIf::RegisterSnmpObjects: (DOCSIS CableModem HalIf) Interface 10 additional registration w/ SNMP agent OK. [00:00:13 01/01/1970] [tStartup] BcmErouterPacketSwitchBridgingHalIf::RegisterSnmpObjects: (eRouter Embedded Interface HalIf) Interface 39 additional registration w/ SNMP agent OK. [00:00:13 01/01/1970] [tStartup] BcmPacketSwitchBridgingHalIf::RegisterSnmpObjects: (PacketCable Embedded Interface HalIf) Interface 39 additional registration w/ SNMP agent OK. Setting US cal singleton instance to 0 WARNING - Couldn't find table 1.3.6.1.4.1.1429.79.2.1.6 on Vendor CM Agent w/ BRCM Factory Support ===> WARNING: Failed to register TabularMibBridge 1.3.6.1.4.1.1429.79.2.1.6 to agent Vendor CM Agent w/ BRCM Factory Support ===> Object not found on agent. WARNING - Couldn't find table 1.3.6.1.4.1.1429.79.2.1.6 on Vendor CM Agent w/ BRCM Factory Support ===> WARNING: Failed to register TabularMibBridge 1.3.6.1.4.1.1429.79.2.1.6 to agent Vendor CM Agent w/ BRCM Factory Support ===> Object not found on agent. WARNING - Couldn't find table 1.3.6.1.4.1.1429.79.2.1.6 on Vendor CM Agent w/ BRCM Factory Support ===> WARNING: Failed to register TabularMibBridge 1.3.6.1.4.1.1429.79.2.1.6 to agent Vendor CM Agent w/ BRCM Factory Support ===> Object not found on agent. WARNING - Couldn't find table 1.3.6.1.4.1.1429.79.2.1.6 on Vendor CM Agent w/ BRCM Factory Support ===> WARNING: Failed to register TabularMibBridge 1.3.6.1.4.1.1429.79.2.1.6 to agent Vendor CM Agent w/ BRCM Factory Support ===> Object not found on agent. WARNING - Couldn't find table 1.3.6.1.4.1.1429.79.2.9.2 on Vendor CM Agent w/ BRCM Factory Support ===> WARNING: Failed to register TabularMibBridge 1.3.6.1.4.1.1429.79.2.9.2 to agent Vendor CM Agent w/ BRCM Factory Support ===> Object not found on agent. WARNING - Couldn't find table 1.3.6.1.4.1.1429.79.2.9.2 on Vendor CM Agent w/ BRCM Factory Support ===> WARNING: Failed to register TabularMibBridge 1.3.6.1.4.1.1429.79.2.9.2 to agent Vendor CM Agent w/ BRCM Factory Support ===> Object not found on agent. WARNING - Couldn't find table 1.3.6.1.4.1.1429.79.2.9.2 on Vendor CM Agent w/ BRCM Factory Support ===> WARNING: Failed to register TabularMibBridge 1.3.6.1.4.1.1429.79.2.9.2 to agent Vendor CM Agent w/ BRCM Factory Support ===> Object not found on agent. WARNING - Couldn't find table 1.3.6.1.4.1.1429.79.2.9.2 on Vendor CM Agent w/ BRCM Factory Support ===> WARNING: Failed to register TabularMibBridge 1.3.6.1.4.1.1429.79.2.9.2 to agent Vendor CM Agent w/ BRCM Factory Support ===> Object not found on agent. WARNING - Couldn't find table 1.3.6.1.4.1.1429.79.2.9.2 on Vendor CM Agent w/ BRCM Factory Support ===> WARNING: Failed to register TabularMibBridge 1.3.6.1.4.1.1429.79.2.9.2 to agent Vendor CM Agent w/ BRCM Factory Support ===> Object not found on agent. WARNING - Couldn't find table 1.3.6.1.4.1.1429.79.2.9.2 on Vendor CM Agent w/ BRCM Factory Support ===> WARNING: Failed to register TabularMibBridge 1.3.6.1.4.1.1429.79.2.9.2 to agent Vendor CM Agent w/ BRCM Factory Support ===> Object not found on agent. WARNING - Couldn't find table 1.3.6.1.4.1.1429.79.2.9.2 on Vendor CM Agent w/ BRCM Factory Support ===> WARNING: Failed to register TabularMibBridge 1.3.6.1.4.1.1429.79.2.9.2 to agent Vendor CM Agent w/ BRCM Factory Support ===> Object not found on agent. WARNING - Couldn't find table 1.3.6.1.4.1.1429.79.2.9.2 on Vendor CM Agent w/ BRCM Factory Support ===> WARNING: Failed to register TabularMibBridge 1.3.6.1.4.1.1429.79.2.9.2 to agent Vendor CM Agent w/ BRCM Factory Support ===> Object not found on agent. CmSnmpAgent installing views... Vendor CM Agent w/ BRCM Factory Support setting V1/V2 view to unrestricted Vendor CM Agent w/ BRCM Factory Support IpStackEvent Vendor CM Agent w/ BRCM Factory Support installing engine ID... Vendor CM Agent w/ BRCM Factory Support installing context... SNMP startup complete. [00:00:14 01/01/1970] [tStartup] BcmDocsisCmHalIf::AddSnoop: (DOCSIS CableModem HalIf) WARNING - SA Monitor Snoop: unsafe modification of the Snoop lists after the interface is up! [00:00:14 01/01/1970] [tStartup] BcmDocsisCmHalIf::SortSnoops: (DOCSIS CableModem HalIf) WARNING - Unsafe modification of the Snoop lists after the interface is up! [00:00:14 01/01/1970] [tStartup] BcmDocsisCmHalIf::AddSnoop: (DOCSIS CableModem HalIf) WARNING - SA DNS Snoop: unsafe modification of the Snoop lists after the interface is up! [00:00:14 01/01/1970] [tStartup] BcmDocsisCmHalIf::SortSnoops: (DOCSIS CableModem HalIf) WARNING - Unsafe modification of the Snoop lists after the interface is up! [00:00:14 01/01/1970] [tStartup] BcmDocsisCmHalIf::SortSnoops: (DOCSIS CableModem HalIf) WARNING - Unsafe modification of the Snoop lists after the interface is up! *************** Instantiating DOCSIS CWMP Client object. [00:00:15 01/01/1970] [tStartup] CwmpClient::CwmpClient: ****** Constructor called ****** [00:00:15 01/01/1970] [tStartup] CwmpClient::CwmpClient: INFO - Setting up the singleton pointer. [00:00:15 01/01/1970] [tStartup] CwmpClient::Setup: entered GetSingletonInstance: Created DHCP server thread GetSingletonInstance: Created Routed Subnet Table GetSingletonInstance: Created RIP Client Thread [00:00:15 01/01/1970] [tStartup] BcmCableHomeIpStackHelper::CreateLease: DHCP lease already exists, releasing lease clientId = htype=1, value=###removed value### Current IP address is default 0.0.0.0. [00:00:15 01/01/1970] [CableHomeCtlThread] BcmEcosIpHalIf::ConfigureLeaseImpl: (IP Stack4 HalIf) Configuring IP stack 4: IP Address = 192.168.100.5 (primary IP address) Subnet Mask = 255.255.255.0 Router = 192.168.100.254 IsPrimaryInterface = 0 [00:00:15 01/01/1970] [FTP Lite Client Thread for IP Stack1] FtpLiteClientThread::ThreadMain: (FTP Lite Client Thread for IP Stack1) Broadcom FTP Lite Client thread starting... Vendor CM Event Log initializing with stored events. Event log initialization complete. *** FWSTATE: kFwStateFwActive *** Firewall: WAN HalIf is eRouter Embedded Interface(70736231) Creating the firewall thread, now that it is safe... Current IP address is default 0.0.0.0. [00:00:16 01/01/1970] [tStartup] BcmEcosIpHalIf::ConfigureLeaseImpl: (IP Stack5 HalIf) Configuring IP stack 5: IP Address = 192.168.0.1 (primary IP address) Subnet Mask = 255.255.255.0 Router = 192.168.0.254 IsPrimaryInterface = 0 [00:00:17 01/01/1970] [tStartup] BcmEpsCmDocsisApplication::InitializeLanInterface: (EPS-CM DOCSIS Application) Binding 192.168.0.1 ip address to interface. [00:00:17 01/01/1970] [tStartup] BcmeRouterDhcpv6IpHelper::CreateLease: Creating DHCP lease for client id = htype=1, value=###removed value### [00:00:17 01/01/1970] [tStartup] BcmContentFilterSnoop::BcmContentFilterSnoop: (Http Content Filter Snoop) WARNING - Singleton pointer is not NULL! There are multiple instances! Leaving the singleton pointer alone... Creating SNMP agent CH agent Instantiating CableHome SnmpAgent object. ===> WARNING: Failed to register ScalarMibBridge 1.3.6.1.4.1.1429.79.2.3.7 to agent Vendor CH Agent w/ BRCM Factory Support ===> Object not found on agent. CHSnmpAgent installing views... Vendor CH Agent w/ BRCM Factory Support setting V1/V2 view to unrestricted Vendor CH Agent w/ BRCM Factory Support IpStackEvent Vendor CH Agent w/ BRCM Factory Support installing engine ID... Vendor CH Agent w/ BRCM Factory Support installing context... Vendor CM Agent w/ BRCM Factory Support setting master agent to Vendor CH Agent w/ BRCM Factory Support Creating SNMP agent CH diag agent CH diag agent disabling management. CH diag agent defering traps. CH diag agent setting V1/V2 view to unrestricted CH diag agent IpStackEvent CH diag agent enabling management. CH diag agent sending deferred traps... Done w/ deferred traps. CH diag agent installing engine ID... CH diag agent installing context... [00:00:19 01/01/1970] [CableHomePingTool Thread] BcmThread::BcmPanasonicSnoop: (Ping Maintenance Thread) WARNING - Singleton pointer is not NULL! There are multiple BcmParentalCtlThread devices! Leaving the singleton pointer alone... [[00:00:19 01/01/1970] [tStartup] CableHomeDhcpServerIpServiceAppIf::EnableDhcpServerProvisioning: (CableHomeDhcpServerIpServiceAppIf) Setting DHCP server provisioning to (0) [00:00:19 01/01/1970] [tStartup] CableHomeDhcpServerIpServiceAppIf::EnableDhcpServerProvisioning: (CableHomeDhcpServerIpServiceAppIf) Setting DHCP server provisioning to (1) Registering Qos2 Policy Table Registering Qos2 Traffic Class Table Registering Lan Addr Entry Table Registering Dhcp Server Lease Database [00:00:19 01/01/1970] [tStartup] BcmRipClientThread::AuthEnable: (Rip Client Thread) Broadcom V2 RIP Client MD5 Authentication status = 1 [00:00:19 01/01/1970] [tStartup] BcmTracerouteThread::BcmTracerouteThread: (Traceroute Thread) WARNING - Singleton pointer is not NULL! There are multiple BcmTracerouteThread devices! Leaving the singleton pointer alone... [00:00:19 01/01/1970] [IkeThread] IkeThread::Initialize: (IkeThread) INFO - Initializing thread objects... 0[00:00:19 01/01/1970] [tStartup] IkeThread::BcmVpnNonVolSettings: (IkeThread) INFO - Setting up the singleton pointer. Creating BcmVpnCommandTable Dynamic DNS client DISABLED. [00:00:19 01/01/1970] [tStartup] BcmEcosIpHalIf::AddIpv6LinkLocalAddress: (IP Stack5 HalIf) Configuring link-local IPv6 address fe80::21c:eaff:fede:ad05/64 [000:00:19 01/01/1970] [IkeThread] IkeThread::ThreadMain: (IkeThread) Entering... [00:00:19 01/01/1970] [IkeThread] IkeThread::ThreadMain: (IkeThread) Starting IPSEC/IKE initialization : 0:19 1/ 1/1970] [DNS Server Thread] BcmDnsServerThread::ThreadMain: (DNS Server Thread) Broadcom V2 DNS Server starting...waiting for events... CH diag agent IpStackEvent Vendor CH Event Log w/ BRCM Factory Support initializing with stored events. -- Detected (Ethernet) Mask: 0x1 as (primary) network ERROR: BcmEmtaIfSettings singleton is NULL and someone is accessing it! Is the interface enabled? ERROR: BcmEmtaIfSettings singleton is NULL and someone is accessing it! Is the interface enabled? ERROR: BcmEmtaIfSettings singleton is NULL and someone is accessing it! Is the interface enabled? [00:00:20 01/01/1970] [tStartup] BcmRgHttpServerThread::Enable: (HttpServerThread) Broadcom HttpServerThread running status = 1 Residential Gateway HNAP mode enable = 0 ********************************************************** Running as a Residental Gateway Enabled device! ********************************************************** *********************************************** (DHCP) WAN IP Connection Configuration *********************************************** Creating SNMP agent EMTA agent EMTA agent disabling management. EMTA agent defering traps. Event log initialization complete. EmtaSnmpAgent::SoftReset Pausing trap thread EMTA agentResetting to default state. EMTA agent destroying users... EMTA agent destroying notifies... Resuming trap thread EMTA agent destroying views... EMTA agent entering RFC-2576 Coexistence security mode. EMTA agent setting V1/V2 view to coexistenceView EMTA agent entering Basic/Hybrid flow provisioning mode. initBlindData: nvramSize= 712 mtaNvCalcChecksum: checksum= 1273036007Completed Adding New Command for Emta Remote Console: log Completed Adding New Command for Emta Remote Console: diag Completed Adding New Command for Emta Remote Console: reset Completed Adding New Command for Emta Remote Console: set Completed Adding New Command for Emta Remote Console: show EMTA battery callback = 0x80922530 DBG2,BcmEmtaIfSettings(),GetSubOption(0)=Not Found DBG2,BcmEmtaIfSettings(),GetSubOption(1)=Not Found DBG2,BcmEmtaIfSettings(),GetSubOption(2)=Not Found DBG2,BcmEmtaIfSettings(),GetSubOption(3)=Not Found [00:00:21 01/01/1970] [tStartup] BcmThread::BcmPanasonicSnoop: (MTA Ping Thread) WARNING - Singleton pointer is not NULL! There are multiple BcmParentalCtlThread devices! Leaving the singleton pointer alone... 00:00:21.070 01/01/1970 [aoRT] (BOS) bosAppRootTask() - Is it morning already? Spawning app task (epoch #0)... 00:00:21.160 01/01/1970 [aoRT] (BOS) TaskCreate - spawn new task aoAP [00:00:21 01/01/1970] [IpsecTimer] IpsecTimer::ThreadMain: Entering... 00:00:21.160 01/01/1970 (LOG) WARN: Module CALC. Is already registered! 00:00:21.180 01/01/1970 (LOG) WARN: Module NET. Is already registered! 00:00:21.180 01/01/1970 (LOG) WARN: Module UTIL. Is already registered! mtaNvCalcChecksum: checksum= 127310153200:00:21.190 01/01/1970 [aoAP] (BHAL) boardHalInit3380: Initialization started. [00:00:21 01/01/1970] [NonVol Device Async Helper] CwmpClientNonVolSettings::WriteToImpl: Wrote Impl Allowed List size 0 00:00:21.080 01/01/1970 [RESM] (BOS) Created message queue "RESQ", depth 25, id 1 00:00:21.240 01/01/1970 [aoAP] (BOS) TaskCreate - spawn new task SLIC 00:00:21.240 01/01/1970 [aoAP] (BOS) TaskCreate - spawn new task CMT_EXCEPTION_IST ===> WARNING: Can't add esafeMibObjectsGroup @ 0x83422190 to iso, group already exists. 00:00:21.290 01/01/1970 [aoAP] (BOS) TaskCreate - spawn new task Load-balance [00:00:21 01/01/1970] [tStartup] BcmPacketSwitchBridgingHalIf::RegisterSnmpObjects: (WAN-Man Interface HalIf) Interface 40 additional registration w/ SNMP agent OK. emta factory agent IpStackEvent 00:00:21.590 01/01/1970 [aoAP] (BOS) TaskCreate - spawn new task HTSK 00:00:21.590 01/01/1970 [aoAP] (BHAL) boardHalInit3380: Initialization complete. 00:00:21.600 01/01/1970 (CALC) CC: Initialization starting... emta factory agent installing engine ID... emta factory agent installing context... emta factory agent setting V1/V2 view to [00:00:22 01/01/1970] [tStartup] BcmSled::Register: (Singleton Instance) WARNING - PacketCable Embedded Interface is already registered! Checking board manufacturing state... WARNING: Board NV manufacturing incomplete. Check the following settings: IP stack 1 MAC, IP stack 2 MAC, IP stack 3 MAC, IP stack 4 MAC, IP stack 5 MAC, IP stack 6 MAC, USB MAC, BPI public key, BPI private key, BPI+ root public key, BPI+ CM certificate, BPI+ CA certificate, docsDevSerialNumber, CH PS cert private key, CH PS cert, CH man CA cert, CH service provider root CA cert, MTA pvt key exponent Installing temporary factory key. Vendor CPE Agent w/ BRCM Factory Support setting V1/V2 view to unrestricted Vendor CPE Agent w/ BRCM Factory Support IpStackEvent [00:00:23 01/01/1970] [HttpServerThread] BcmRgHttpServerThread::ThreadMain: (HttpServerThread) Recv'd event to resynchronize sockets! Vendor CPE Agent w/ BRCM Factory Support enabling management. Vendor CPE Agent w/ BRCM Factory Support sending deferred traps... Done w/ deferred traps. Vendor CPE Agent w/ BRCM Factory Support installing engine ID... Vendor CPE Agent w/ BRCM Factory Support installing context... Vendor CPE Agent w/ BRCM Factory Support setting V1/V2 view to docsisCpeView [00:00:23 01/01/1970] [tStartup] CwmpClient::Start: CWMP Client starting [00:00:23 01/01/1970] [tStartup] CwmpClient::CreateThread: Starting CWMP Client thread... [00:00:23 01/01/1970] [tStartup] CwmpClientThread::CwmpClientThread: CWMP Client thread constructor [00:00:23 01/01/1970] [tStartup] CwmpClientThreadACT::CwmpClientThreadACT: constructor [00:00:23 01/01/1970] [tStartup] CwmpIpStackEventACT::CwmpIpStackEventACT: constructor [00:00:23 01/01/1970] [CWMP Client Thread] CwmpClientThread::Initialize: ++++++++++++ Setting up message queue and event set [00:00:23 01/01/1970] [CWMP Client Thread] CwmpClientThread::Initialize: ++++++++++++ calling evcpe_setup... [00:00:23 01/01/1970] [CWMP Client Thread] CwmpClient::evcpe_setup: INFO - Entered for setup [00:00:23 01/01/1970] [CWMP Client Thread] CwmpClient::evcpe_setup: INFO - grabbed my class tree [00:00:23 01/01/1970] [CWMP Client Thread] CwmpClient::evcpe_setup: INFO - Object created and initted [00:00:23 01/01/1970] [CWMP Client Thread] CwmpClient::evcpe_setup: INFO - repo created and initted [00:00:23 01/01/1970] [CWMP Client Thread] CwmpClient::libevent: WARNING - select_init: calloc @ 0x80f7e108 [00:00:23 01/01/1970] [CWMP Client Thread] EvutilHelper::EvutilHelper: INFO - constructor [00:00:23 01/01/1970] [CWMP Client Thread] EvutilHelper::Socketpair: listener bound to 127.0.0.1:1024 [00:00:23 01/01/1970] [CWMP Client Thread] EvutilHelper::Socketpair: accepted connection from 127.0.0.1:1024 [00:00:23 01/01/1970] [CWMP Client Thread] EvutilHelper::Socketpair: returning sockets 18 and 19 [00:00:23 01/01/1970] [CWMP Client Thread] EvutilHelper::Socketpair: returning sockets 19 and 18 [00:00:23 01/01/1970] [CWMP Client Thread] CwmpClient::libevent: WARNING - evsig_init: Got socket fds 19 and 18 [00:00:23 01/01/1970] [CWMP Client Thread] CwmpClient::evcpe_setup: INFO - returned from event_init() [00:00:23 01/01/1970] [CWMP Client Thread] CwmpClient::evcpe_repo_nonvolatile_restore: INFO - NVRAM restored, transfer list size 0 [00:00:23 01/01/1970] [CWMP Client Thread] CwmpClient::evcpe_setup: INFO - returned from evcpe_repo_nonvolatile_restore() [00:00:23 01/01/1970] [CWMP Client Thread] EvutilHelper::Socketpair: listener bound to 127.0.0.1:1026 [00:00:23 01/01/1970] [CWMP Client Thread] EvutilHelper::Socketpair: accepted connection from 127.0.0.1:1026 [00:00:24 01/01/1970] [CWMP Client Thread] EvutilHelper::Socketpair: returning sockets 20 and 21 [00:00:24 01/01/1970] [CWMP Client Thread] CwmpClient::evcpe_setup: INFO - returned from events_init_with_base() [00:00:24 01/01/1970] [CWMP Client Thread] CwmpClient::evcpe_setup: INFO - returning rc=0 [00:00:24 01/01/1970] [CWMP Client Thread] CwmpClientThread::Initialize: ++++++++++++ Creating Data Model objects [00:00:24 01/01/1970] [CWMP Client Thread] CwmpClientThread::Initialize: >>> CreateChildren [00:00:24 01/01/1970] [CWMP Client Thread] SystemListObjectCwmpBridge::SystemListObjectCwmpBridge: INFO - SystemListObjectCwmpBridge constructor [00:00:24 01/01/1970] [CWMP Client Thread] SystemListObjectCwmpBridge::SystemListObjectCwmpBridge: INFO - Setting up the singleton pointer. [00:00:24 01/01/1970] [CWMP Client Thread] CwmpClientThread::Initialize: >>> CreateObjects [00:00:24 01/01/1970] [CWMP Client Thread] SystemListObjectCwmpBridge::CreateObjects: INFO - Entered, parent .UserInterface. [00:00:24 01/01/1970] [CWMP Client Thread] SystemListObjectCwmpBridge::CreateObjects: INFO - New Path .UserInterface.X_CLEARACCESS_COM_SystemList. [00:00:24 01/01/1970] [CWMP Client Thread] SystemListObjectCwmpBridge::UpdateCache: INFO - Entered [00:00:24 01/01/1970] [CWMP Client Thread] CwmpClientThread::Initialize: >>> Initialize [00:00:24 01/01/1970] [CWMP Client Thread] CwmpClientThread::Initialize: ++++++++++++ Subscribing to other events [00:00:24 01/01/1970] [CWMP Client Thread] CwmpClientThread::Initialize: ++++++++++++ Subscribing to CABLEHOME cntl thread events [00:00:24 01/01/1970] [tStartup] CwmpClient::CreateThread: Starting Content Filter thread... [00:00:24 01/01/1970] [Content Filter Thread] CntFltThread::Initialize: Creating PBCA Snoop [00:00:24 01/01/1970] [Content Filter Thread] PbcaSnoop::PbcaSnoop: (PBCA CntFlt Snoop) INFO - Content Filter Snoop constructor [00:00:24 01/01/1970] [Content Filter Thread] PbcaSnoop::PbcaSnoop: (PBCA CntFlt Snoop) INFO - Content Filter Snoop complete [00:00:24 01/01/1970] [Content Filter Thread] CntFltThread::Initialize: Installing Snoop using CableHome Forwarder dflt i/f WAN-Man Interface [00:00:24 01/01/1970] [tStartup] CwmpClient::CreateThread: Starting Time Blocking thread... [00:00:24 01/01/1970] [Time Blocking Thread] TmBlkThread::Initialize: PBCA Snoop exists [[00:00:24 01/01/1970] [tStartup] CwmpClient::CreateThread: Starting Captive Portal thread... [00:00:24 01/01/1970] [Captive Portal Thread] CaptPortThread::Initialize: PBCA Snoop exists [[[00:00:24 01/01/1970] [tStartup] CwmpClient::CreateThread: Starting Bandwidth Monitor thread... [00:00:24 01/01/1970] [Bandwidth Monitor Thread] BwMonThread::Initialize: Installing Snoop for eth0 (Ethernet) [00:00:24 01/01/1970] [Bandwidth Monitor Thread] BwMonThread::Initialize: Installing Snoop for wan0 (WAN-Man Interface) 0[0[00:00:24 01/01/1970] [tStartup] CableHomeDhcpServerIpServiceAppIf::ArpServerLeasePool: (CableHomeDhcpServerIpServiceAppIf) Arping Dhcp Server Lease pool to populate Usfs table: (192.168.0.10) --> (192.168.0.128) +-----------------------------------------------------------------------+ | Portions of this product contain open source software and are subject | | to terms of the applicable license as specified in the release notes. | +-----------------------------------------------------------------------+ Cisco VoIP Gateway +-------------------------------------------------------------------+ | | | ** ** | | ** ** | | ** ** ** ** ** ** | | ** ** ** ** ** ** | | ** ** ** ** ** ** ** ** ** | | ** ** ** ** ** ** ** ** ** | | ** ** ** ** ** ** ** ** ** | | ** ** | | | | | | ****** ** ******* ****** ***** | | ******** ** ******** ******** ******* | | ** ** ** ** ** ** | | ** ** ****** ** ** ** | | ** ** ***** ** ** ** | | ** ** ** ** ** ** | | ******** ** ******** ******** ******* | | ****** ** ******* ****** ***** TM | | | | | | Copyright (c) 1999 - 2011 Cisco Systems, Inc. | | Portions are Copyright (c) 1999 - 2011 Broadcom Corporation | | CxC ( v3.9.21.11.83.mp3 ) | | CM ( v5.5.5.83.mp3 ) | | CWMP ( v1.3.23 ) | | | | Revision: ( ) | +-------------------------------------------------------------------+ This software contains software that is part of eCos, the Embedded Configurable Operating System. Copyright c 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc. eCos is free software; you can redistribute it and/or modify it under a modified version of the GNU General Public License as published by the Free Software Foundation. See the eCos License Overview located at http://ecos.sourceware.org/license-overview.html or the link to the GNU General Public License located at such URL for more details. eCos is distributed WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. ====================================================================== VoCM EMTA software Vendor: Cisco Version: Codec: g711_g729a Operation System: eCos Build Date: Mar 29 2012 Build Time: 08:24:44 ====================================================================== Didn't run the system; use 'run_app' to start things... [[00000:00:24 01/01/1970] [Bandwidth Monitor Thread] BwMonThread::ThreadMain: Bandwidth Monitor pre-loading db... [00:00:24 01/01/1970] [Bandwidth Monitor Thread] BwMonThread::ThreadMain: Bandwidth Monitor waiting for events... : 0:24 1/ 1/1970] [Content Filter Thread] CntFltThread::ThreadMain: Content Filter pre-loading db... [00:00:24 01/01/1970] [Content Filter Thread] CntFltThread::ThreadMain: Starting periodic timer... [00:00:24 01/01/1970] [Content Filter Thread] CntFltThread::ThreadMain: Content Filter waiting for events... 0: 0:24 1/ 1/1970] [Time Blocking Thread] TmBlkThread::ThreadMain: Time Blocking pre-loading db... [00:00:24 01/01/1970] [Time Blocking Thread] TmBlkThread::ProcessNonVolSettingsChange: Updating thread [00:00:24 01/01/1970] [Time Blocking Thread] TmBlkThread::ProcessNonVolSettingsChange: Updating hosts [00:00:24 01/01/1970] [Time Blocking Thread] TmBlkThread::ProcessNonVolSettingsChange: Updating Default Windows [00:00:24 01/01/1970] [Time Blocking Thread] TmBlkThread::ThreadMain: Starting periodic timer... [00:00:24 01/01/1970] [Time Blocking Thread] TmBlkThread::ThreadMain: Time Blocking waiting for events... 0: 0:24 1/ 1/1970] [Captive Portal Thread] CaptPortThread::ThreadMain: Captive Portal pre-loading db... [00:00:24 01/01/1970] [Captive Portal Thread] CaptPortThread::ThreadMain: Captive Portal waiting for events... Type 'help' or '?' for a list of commands... CM>


Failed Glitch Attempt N°1

BCM338221 TP0 1 Sync:1 346890 SA BootLoader Version: 2.3.1_R3(S) Pre-release Gnu spiboot reduced DDR drive Build Date: Sep 26 2011 Build Time: 15:31:28 Setting SPI device 0 to clock 0 Setting SPI device 0 to clock 7 SPI flash ID 0x20ba18, size 16MB, block size 64KB, write buffer 256, flags 0x0 Found image 1 at offset 20000 Found image 2 at offset 800000 ******************** CRASH ******************** EXCEPTION TYPE: 10/Reserved instruction TP0 r00/00 = 00000000 r01/at = 83f90000 r02/v0 = 00000001 r03/v1 = 00000002 r04/a0 = 83ffff20 r05/a1 = 00000003 r06/a2 = 00000000 r07/a3 = 04000000 r08/t0 = 83ffff64 r09/t1 = 00000000 r10/t2 = a324e400 r11/t3 = 00000120 r12/t4 = 00000004 r13/t5 = 000000a8 r14/t6 = 00000000 r15/t7 = 00000000 r16/s0 = a2f0005c r17/s1 = 0034e4c4 r18/s2 = 80004000 r19/s3 = 04000000 r20/s4 = 83ffff64 r21/s5 = 00000002 r22/s6 = 00100010 r23/s7 = 000061e4 r24/t8 = 00000002 r25/t9 = 00001021 r26/k0 = a324e400 r27/k1 = 00000120 r28/gp = 9fc00d48 r29/sp = 83ffff20 r30/fp = 00000190 r31/ra = 9fc012f8 pc : 0x9fc013fc sr : 0x00000002 cause: 0x00008028 addr: 0x00000000


Failed Glitch Attempt N°2

BCM338221 TP0 1 Sync:1 346890 SA BootLoader Version: 2.3.1_R3(S) Pre-release Gnu spiboot reduced DDR drive Build Date: Sep 26 2011 Build Time: 15:31:28 Setting SPI device 0 to clock 0 Setting SPI device 0 to clock 7 SPI flash ID 0x20ba18, size 16MB, block size 64KB, write buffer 256, flags 0x0 Found image 1 at offset 20000 Found image 2 at offset 800000 BCM338221 090000008800228C BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 080000008800110800000088002288 BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10 0000 80000000880011CC BBFFCC000000FF40 01 0000 08000000880011CC BBFFCC000000FF04 10


SPI

Don't power on the modem till the firmware read/write out, if you use a external SPI Reader.
SPI flash - numbered contacts SPI flash - described contacts

Tags

toh/cisco/epc3208g.txt · Last modified: 2016/02/08 02:02 by tmomas