Inventel Livebox 1
This is an adsl wifi router mainly distributed by Orange. The board is manufactured by Inventel-Thomson. The main difference with other bcm6348 boards is the bootloader, the liveboxes use redboot whereas others use CFE.
More info about this platform at bcm63xx
Supported Versions
These are the differences between several board models. In any case DSP and ADSL aren't supported by OpenWrt.
| router version | board model | PCMCIA | DSP | mini-pci | BCM5325 |
|---|---|---|---|---|---|
| DV4210 | blue5g9 | ✔ | |||
| DV4210 | blue5g4 | ✔ | ✔ | ✔ | |
| DV3210 | blue5g6 | ✔ | ✔ | ||
| DV4410 | blue5g6.3 | ✔ | ✔ | ✔ | ✔ |
The Livebox DV4410 (AKA Livebox Pro v1) is supported, however the BCM5325 switch doesn't work. Only 1 ethernet port not belonging to the switch works. Maybe it isn't correctly activated when booting the board. It seems the switch should be configured via SPI, in this case the SPI Slave Select (SS) is the GPIO_29.
NOTE: About board models see notes.
Hardware Highlights
| SoC | CPU speed | Ram | Flash | Network | USB | Serial | JTag |
|---|---|---|---|---|---|---|---|
| Broadcom 6348 | 256MHz | 16MiB | 8MiB | 1 x 2 | Yes | Yes | Yes |
Installation
→ obtain.firmware
→ Install OpenWrt
 |
Currently there are no firmwares for downloads at Openwrt, thus you will need to build it yourself. However you can use the danitool's precompiled firmware if you are too lazy for building your own. Use it at your own risk: OpenWrt_Backfire_10.03.x_r33081_luci.zip (LuCI 0.10 Branch (0.10+svn9138)) OpenWrt_Backfire_10.03.x_r33081.zip OpenWrt_Backfire_10.03.1_luci.zip (LuCI 0.10 Branch (0.10+svn8244)) |
- Characteristics of Inventel DV4210 (AKA Livebox):
- the OEM firmware doesn't allow flashing over it's WebUI
- the OEM RedBoot isn't accessible, you cannot stop the RedBoot while loading the system with CTL+C using a serial console.
- the OEM RedBoot only flash their encrypted firmwares.
- Solution:
- Use RGWRepair.exe to replace OEM firmware with elder OEM firmware, this allows to access via telnet to the command line interface.
- replace the OEM RedBoot with an alternative RedBoot without the restrictions.
- Once we have the alternative new RedBoot installed we are ready to install OpenWrt:
- Backup whole flash memory if you want to have the possibility to restore it later. Or continue with the next step, older Inventel's firmwares still can be found elsewhere in the web.
- Replace your current firmware with an old OEM firmware. Firmware versions < 5.04 have a backdoor which allows telnet access . There are howtos elsewhere for gaining access via telnet with this old firmware.
- Once we have telnet access we can replace the original redboot by this one modified by danitool.
redbootelnet04.rom md5sum: d372f28fa4dab7c48a171507565eab3e
In the command line inside the livebox just execute this commands
# /etc/init.d/ramdisk start 16 # cd /mnt/ramdisk/rd1 # wget ftp://your_local_ftp_server/redbootelnet04.rom # fcp -v redbootelnet04.rom /dev/mtd0 Erasing blocks: 3/3 (100%) Writing data: 192k/192k (100%) Verifying data: 192k/192k (100%) # reboot
Ok now we don't have restrictions and can flash unencrypted firmwares, like OpenWrt.
- Compile your own firmware
svn co svn://svn.openwrt.org/openwrt/trunk/ make menuconfig make kernel_menuconfig make V=99 .....
If you want to use the stable backfire version replace the patch 170-board_livebox.patch to this one:
170-board_livebox.patch Backfire 10.03.1svn co svn://svn.openwrt.org/openwrt/branches/backfire
- Once the compilation has finished use the wrtgenimage.sh script for generating the scripted firmware. This is the script:
#!/bin/bash OPENWRT=bin cp -v $OPENWRT/brcm63xx/openwrt-livebox-vmlinux.gz openwrt-kernel.gz cp -v $OPENWRT/brcm63xx/openwrt-brcm63xx-root.squashfs openwrt-root.squashfs kernlength=`ls -l openwrt-kernel.gz |awk '{printf("%x\n",$5)}'` rootfladdr=`printf '%x\n' $[0xBE430000+0x00$kernlength]` rootlength=`ls -l openwrt-root.squashfs |awk '{printf("%x\n",$5)}'` rfdataaddr=`printf '%x\n' $[0x$rootfladdr+0x00$rootlength]` rfdataleng=`printf '%x\n' $[0xBEBF0000-0x00$rfdataaddr]` offset2=`printf '%x\n' $[0x1000+0x$kernlength]` echo "fis init -f fconfig boot_script true fconfig boot_script_data fis load -b 0x80010000 -d kernel exec -c \"noinitrd mem=16M\" 0x80010000 fconfig boot_script_timeout 20 fis create -f 0x$rfdataaddr -r 0x$rfdataaddr -l 0x00$rfdataleng -n rootfs_data fis create -o 0x1000 -f 0xBE430000 -l 0x00$kernlength kernel fis create -o 0x$offset2 -f 0x$rootfladdr -l 0x00$rootlength user_fs reset" > redbootscript.tmp dd if=redbootscript.tmp of=redbootscriptpad.tmp bs=4096 conv=sync cat redbootscriptpad.tmp openwrt-kernel.gz openwrt-root.squashfs > openwrt-livebox.bin rm redbootscript.tmp redbootscriptpad.tmp openwrt-kernel.gz openwrt-root.squashfs echo " Instructions: - Before flashing be sure you have redbootelnet04.rom installed and a tftp server running in your PC. Also you need to have the 10.7.58.114 IP in your PC (it can be a virtual interface) - Put openwrt-livebox.bin into your tftp server - Press button1, plug the power cord, wait 5 seconds and release the button - Watch at your tftpd log to check if the livebox has loaded openwrt-livebox.bin - Wait 2 minutes or more until the flashing process is complete and telnet openwrt (192.168.1.1) "Execute it in the current build directory, it will generate openwrt-livebox.bin
- Now put the firmware into your tftp server.
- Your ip must be
10.7.58.114 - The ethernet cable is connected to the yellow port.
- Start your tftp server!.
- Unplug the livebox, press the button 1 and plug the power cord again, wait 5 seconds and release the button. Wait until the flashing process finish.
- Telnet to 192.168.1.1 and set a root password, or browse to http://192.168.1.1 if LuCI is installed.
Flash Layout
First let's have a quick view at the Flash Layout with the stock firmware and after OpenWrt has been installed.
RedBoot> fis list Name FLASH addr Mem addr Length Entry point RedBoot 0xBE400000 0xBE400000 0x00030000 0x00000000 user_fs 0xBE430000 0xBE430000 0x00720000 0x80545FB0 jffs_system 0xBEB50000 0xBEB50000 0x000A0000 0x80545FB0 FIS directory 0xBEBF0000 0xBEBF0000 0x0000F000 0x00000000 RedBoot config 0xBEBFF000 0xBEBFF000 0x00001000 0x00000000But for versions > 5.06.2 (squashfs partitions)
Name FLASH addr Mem addr Length Entry point RedBoot 0xBE400000 0xBE400000 0x00030000 0x00000000 user_fs 0xBE430000 0xBE430000 0x00390000 0x80800000 user_2_fs 0xBE7C0000 0xBE7C0000 0x00390000 0x80800000 jffs_system 0xBEB50000 0xBEB50000 0x000A0000 0x80800000 FIS directory 0xBEBF0000 0xBEBF0000 0x0000F000 0x00000000 RedBoot config 0xBEBFF000 0xBEBFF000 0x00001000 0x00000000For flashing Openwrt we can use this more appropriate flash layout. The size of partitions depends on the size of the images we will flash.
RedBoot> fis list Name FLASH addr Mem addr Length Entry point RedBoot 0xBE400000 0xBE400000 0x00030000 0x00000000 kernel 0xBE430000 0xBE430000 0x00120000 0x80010000 user_fs 0xBE550000 0xBE550000 0x001A0000 0x80800000 rootfs_data 0xBE6F0000 0xBE6F0000 0x00500000 0x80800000 FIS directory 0xBEBF0000 0xBEBF0000 0x0000F000 0x00000000 RedBoot config 0xBEBFF000 0xBEBFF000 0x00001000 0x00000000When you later want to understand, what the programs
mtd and sysupgrade do, have a second look here:
- cf. → flash.layout or Flash Layout
- Obtain the data:
cat /proc/mtd,dmesg,df -h,df,mount
Flash device in physical memory map
The flash chip is mapped physically into the CPU's memory with this addresses and size:
(0x1e400000) Physical start address of flash mapping (0xbfc00000) Physical start address of the lowest 4MBytes (0xbe400000) Physical start address of the highest 4MBytes (0x800000) Physical length of flash mapping
Flash-chip info
NOR 56/48-Pin Standard TSOP
Query identification string:
Primary Algorithm Command Set and Control Interface ID Code: 0x0002 (AMD/Fujitsu Standard Command Set)
16-bit: Manufacturer ID 0x000001 Chip ID 0x001000
Alternate Algorithm Command Set and Control Interface ID Code: 0x0000 (null)
Query system interface information:
Vcc Logic Supply Minimum Write/Erase or Write voltage: 2700 mV
Vcc Logic Supply Maximum Write/Erase or Write voltage: 3600 mV
Vpp [Programming] Supply Minimum Write/Erase voltage: 0 mV
Vpp [Programming] Supply Maximum Write/Erase voltage: 0 mV
Typical timeout per single byte/word program: 128 us
Typical timeout for maximum-size multi-byte program: 128 us
Typical timeout per individual block erase: 1024 ms
Typical timeout for full chip erase: 0 ms
Maximum timeout for byte/word program: 1024 us
Maximum timeout for multi-byte program: 4096 us
Maximum timeout per individual block erase: 16384 ms
Maximum timeout for chip erase: 0 ms
Device geometry definition:
Device Size: 8388608 B (8192 KiB, 8 MiB)
Flash Device Interface Code description: 0x0002 (x8/x16)
Maximum number of bytes in multi-byte program: 32
Number of Erase Block Regions within device: 2
Erase Block Region Information:
Region 0:
Erase Block Size: 8192 B (8 KiB)
Number of Erase Blocks: 8
Region 1:
Erase Block Size: 65536 B (64 KiB)
Number of Erase Blocks: 127
Primary Vendor-Specific Extended Query:
Major version number: 1
Minor version number: 3
Address Sensitive Unlock: Required
Process Technology: CS99
Erase Suspend: Read/write
Sector Protect: 1 sectors per group
Sector Temporary Unprotect: Not supported
Sector Protect/Unprotect Scheme: 29BDS640 mode (Software Command Locking)
Simultaneous Operation: Not supported
Burst Mode Type: Supported
Page Mode Type: 4 word Page
ACC (Acceleration) Supply Minimum: 11500 mV
ACC (Acceleration) Supply Maximum: 12500 mV
Top/Bottom Sector Flag: Bottom boot device
Bootlogs
OEM bootlog
96432SDRAM16bit_5GX101201234
Hardware version 0x90 BLUE5G.9
56+678ESA: 30:78:30:30:3a:30
WEP KEY : FFFFFFFFFFFFFFFFFFFFFFFFFF
Auto-negotiation timed-out
10 MB Half-Duplex (assumed)
Ethernet eth0: MAC address 30:78:30:30:3a:30
IP: 10.7.58.112, Default server: 10.7.58.114
Hardware version 0x10 BLUE5G.9 WITHOUT_OPTION
Factory Settings Recovery Switch OFF High
Register : 1f
RedBoot(tm) bootstrap and debug environment [ROM]
Non-certified release, version release-wanadoo-fr - built 16:25:10, Jun 20 2006
Platform: Blue_5g (MIPS32 4Kc)
Copyright (C) 2000, 2001, 2002, Red Hat, Inc.
RAM: 0x80000000-0x81000000, [0x80445fb0-0x80fe2000] available
FLASH: 0xbe400000 - 0xbec00000, 128 blocks of 0x00010000 bytes each.
== Executing boot script in 0.050 seconds - enter ^C twice to abort
hit '
' (0x0A)
== Executing boot script in 0.040 seconds - enter ^C twice to abort
RedBoot> fis load -b 0x80010000 -m cramfs -f Image user_fs
Partition is : 0xbe430000 - 0x390000
mlen : 0x36d038
begin_tag : 0xbe79d000, end : 0xbe79d038
Verif OK
Looking for Image in cramfs user_fs partition
cramfs_load : b 0x80010000, c 0xBE430000, s 0x00390000, f Image
unable to find magic
Found a valid SQUASHFS superblock on user_fs.
Inodes are compressed
Data is compressed
Fragments are compressed
Check data is not present in the filesystem
Fragments are present in the filesystem
Always_use_fragments option is not specified
Duplicates are removed
Filesystem size 3590371 bytes
Block size 65536
Number of fragments 32
Number of inodes 702
Number of uids 1
Number of gids 0
Scanning existing filesystem...
Read existing filesystem, 701 inodes scanned
Return with root_try==0
RedBoot> exec -c "boot_loader=RedBoot root=1F01 mem=16M" 0x80010000
root_try == 0 : leave boot cmd alone
Now booting linux kernel:
Base address 0x8000fc00 Entry 0x80010000
Cmdline : boot_loader=RedBoot root=1F01 mem=16M hwversion=BLUE5G.9-WITHOUT_OPTION redbootversion="release-wanadoo-fr-Jun 20 2006-16:25:10"
Linux version 2.6.12.6 (lenerk@rennslxcomp25) (gcc version 3.4.2) #1 Tue Jan 18 16:19:04 CET 2011
C0 config : 2147516544x
CPU revision is: 00029107
mpi: No Card is in the PCMCIA slot
Determined physical RAM map:
memory: 00fa0000 @ 00000000 (usable)
memory: 00060000 @ 00fa0000 (reserved)
On node 0 totalpages: 4000
DMA zone: 4000 pages, LIFO batch:1
Normal zone: 0 pages, LIFO batch:1
HighMem zone: 0 pages, LIFO batch:1
Built 1 zonelists
Kernel command line: boot_loader=RedBoot root=1F01 hwversion=BLUE5G.9-WITHOUT_OPTION redbootversion="release-wanadoo-fr-Jun 20 2006-16:25:10"
brcm mips: enabling icache and dcache...
Primary instruction cache 16kB, physically tagged, 2-way, linesize 16 bytes.
Primary data cache 8kB, 2-way, linesize 16 bytes.
Synthesized TLB refill handler (19 instructions).
Synthesized TLB load handler fastpath (31 instructions).
Synthesized TLB store handler fastpath (31 instructions).
Synthesized TLB modify handler fastpath (30 instructions).
PID hash table entries: 64 (order: 6, 1024 bytes)
Using 128.000 MHz high precision timer.
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 13092k/16000k available (1861k kernel code, 2888k reserved, 251k data, 340k init, 0k highmem)
Calibrating delay loop... (HZ=200) 255.59 BogoMIPS (lpj=638976)
Mount-cache hash table entries: 512
Checking for 'wait' instruction... unavailable.
NET: Registered protocol family 16
Squashfs 2.2 (released 2005/07/03) (C) 2002-2005 Phillip Lougher
devfs: 2004-01-31 Richard Gooch (rgooch@atnf.csiro.au)
devfs: boot_options: 0x1
JFFS2 version 2.2. (C) 2001-2003 Red Hat, Inc.
io scheduler noop registered
lo:register_netdevice:2847
PPP generic driver version 2.4.2
NET: Registered protocol family 24
initialize redboot parser
Found: AMD AM29LV640MB
Inventel Blue5G Flash: Found 1 x16 devices at 0x0 in 16-bit bank
number of JEDEC chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
parse_redboot_partitions
Searching for RedBoot partition table in Inventel Blue5G Flash at offset 0x7f0000
6 RedBoot partitions found on MTD device Inventel Blue5G Flash
Creating 6 MTD partitions on "Inventel Blue5G Flash":
0x00000000-0x00030000 : "RedBoot"
0x00030000-0x003c0000 : "user_fs"
0x003c0000-0x00750000 : "user_2_fs"
0x00750000-0x007f0000 : "jffs_system"
0x007f0000-0x007ff000 : "FIS directory"
0x007ff000-0x00800000 : "RedBoot config"
bcm963xx_serial driver v2.0
u32 classifier
OLD policer on
input device check on
NET: Registered protocol family 2
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
ip_conntrack version 2.1 (125 buckets, 1000 max) - 212 bytes per conntrack
ip_tables: (C) 2000-2002 Netfilter core team
NET: Registered protocol family 1
NET: Registered protocol family 17
Ebtables v2.0 registered
NET: Registered protocol family 8
NET: Registered protocol family 20
VFS: Mounted root (squashfs filesystem) readonly.
Mounted devfs on /dev
Freeing unused kernel memory: 340k freed
init started: BusyBox v1.1.3 (2011.01.18-15:26+0000) multi-call binary
init started: BusyBox v1.1.3 (2011.01.18-15:26+0000) multi-call binary
Starting pid 15, console /dev/tts/0: '/etc_ro_fs/init.d/sysinit'
Algorithmics/MIPS FPU Emulator v1.5
SYSINIT
INVENTEL version : v5.11.13-sip-sp
Mounting proc filesystem ...
Mounting tmpfs filesystem ...
> NORMAL BOOT <
+ [ -f /etc_ro_fs/autoconf.conf ]
+ . /etc_ro_fs/autoconf.conf
+ CONFIG_TARGET_NAME=WANADOO
+ CONFIG_TARGET_NAME_ALTERNATE=y
+ CONFIG_TARGET_NAME_ALTERNATE_NAME=Livebox
+ CONFIG_GENERATION_5G=y
+ CONFIG_GATEWAY_RESIDENTIAL=y
+ CONFIG_BCM_VARIANT=6348
+ CONFIG_LINUX_2_6=y
+ CONFIG_LB2_NONE=y
+ CONFIG_RELEASE=y
+ CONFIG_STRIP_LIBS=y
+ CONFIG_DEFAULT_KERNEL_CONFIG_FILE=Config-LiveBox1-5G
+ CONFIG_DEFAULT_BUSYBOX_CONFIG_FILE=Config-Wanadoo-Release
+ CONFIG_ROOT_SQUASHFS=y
+ CONFIG_ROOT_SPLIT=y
+ CONFIG_RELEASE_BASE_DIR_HOME=y
+ CONFIG_GENERATE_WEBUPDATE=y
+ CONFIG_GENERATE_WEBUPDATE_COMPLETEUPGRADECLONE=y
+ CONFIG_GENERATE_WEBUPDATE_PARTIALUPGRADECLONE=y
+ CONFIG_DEFAULT_UPDATE_DIRECTORY=inventel/blue_5g/wanadoo-sp/release-d
+ CONFIG_DEFAULT_UPDATE_DIRECTORY_FORCE=y
+ CONFIG_DEFAULT_UPDATE_MACHINE=developers.inventel.com
+ CONFIG_DEFAULT_UPDATE_USERNAME=inventel
+ CONFIG_DEFAULT_UPDATE_PASSWORD=inventel
+ CONFIG_UPDATE_ALERT=y
+ CONFIG_UPDATE_AUTOUPDATE_DELAY=1
+ CONFIG_UPDATE_AUTOUPDATE_ON_FIRST_PPP=y
+ CONFIG_AUTOUPDATE_CRON=y
+ CONFIG_UPDATE_AUTOUPDATE_CRON_DELAY=864000
+ CONFIG_VERSION_NAME_MAJOR=5.11
+ CONFIG_VERSION_NAME_MINOR_TYPE=.
+ CONFIG_VERSION_NAME_MINOR=13
+ CONFIG_VERSION_NAME_SUFFIX=-sip-sp
+ CONFIG_VERSION_FQN=v5.11.13-sip-sp
+ CONFIG_HW_VERSION=1.0
+ CONFIG_INCLUDE_PUBKEY=y
+ CONFIG_PUBKEY_FILENAME=release-wanadoo-fr
+ CONFIG_ADDRESS_192_168=y
+ CONFIG_ADDRESS_IP_0=192.168.1.1
+ CONFIG_ADDRESS_NETMASK_0=255.255.255.0
+ CONFIG_ADDRESS_BROADCAST_0=192.168.1.255
+ ADVANCE_MEMORY_CONFIGURATION=y
+ CONFIG_FLASH_64MBIT=y
+ CONFIG_SDRAM_128MBIT=y
+ CONFIG_PAIRABLE_TIMEOUT=600
+ CONFIG_STACK_BLUEZ=y
+ CONFIG_BLUEZ_RFCOMM=y
+ CONFIG_BLUEZ_SDPD=y
+ CONFIG_BLUEZ_PAN=y
+ CONFIG_BT_WATCHDOG=y
+ CONFIG_BLUETOOTH=y
+ CONFIG_BTNAME_HOSTNAME=y
+ CONFIG_BLUETOOTH_OFF=y
+ CONFIG_BLUETOOTH_ALTERNATE=y
+ CONFIG_BLUETOOTH_ALTERNATE_VERSION=0x34313832
+ CONFIG_DECT_HCI=y
+ CONFIG_DECT_BUTTON_PAIRING=y
+ CONFIG_DECT_BUTTON_PAGING=y
+ CONFIG_DECT_USB_SERIAL=y
+ CONFIG_DECT_USB=y
+ CONFIG_DECT_USB_API_G=y
+ CONFIG_DECT_DISABLE_UPDATE=y
+ CONFIG_BLUEZ_TEST=y
+ CONFIG_DEVGATEWAY=y
+ CONFIG_INCLUDE_ENGLISH_ORANGE_SP=y
+ CONFIG_INCLUDE_SPANISH_ORANGE=y
+ CONFIG_DEFAULT_SPANISH_ORANGE=y
+ CONFIG_ADSL=y
+ CONFIG_ADSL_RTC=y
+ CONFIG_ADSL_A2pBT009c1=y
+ CONFIG_ADSL_PPP_NAME=orangeuser@orangeadsl
+ CONFIG_ADSL_PPP_PASS=orangeuser123
+ CONFIG_ADSLCTL=y
+ CONFIG_ADSL_MOD_AUTO=y
+ CONFIG_PPPOE_PASSTHRU=y
+ CONFIG_ADSL_SET_MAX_UPLOAD_ON_SYNCHRO=y
+ CONFIG_ADSL_SET_MAX_UPLOAD_ON_SYNCHRO_WOO_SP=y
+ CONFIG_ADSL_BRIDAGE_WOO_SP=y
+ CONFIG_ADSL_DEFAULT_BRIDAGE_PROFILE=2
+ CONFIG_ADSL_VP=8
+ CONFIG_ADSL_VC=35
+ CONFIG_ADSL_PROTOCOL=pppoe
+ CONFIG_ADSL_ENCAPS=LLCMUX
+ CONFIG_ADSL_MAX_CONNECT_TIME=597600
+ CONFIG_BCM_USB=y
+ CONFIG_BCM_USB_PRODUCT_NAME=Inventel Gateway
+ CONFIG_USB_HOST=y
+ CONFIG_USBMGR=y
+ CONFIG_WIRELESS_LAN=y
+ CONFIG_WIRELESS_LAN_WEPONLY_HANDLED_BY_NAS=y
+ CONFIG_WIFI_MAC_FILTER=y
+ CONFIG_WIFI_BLUETOOTH_COEXISTENCE=y
+ CONFIG_WIRELESS_BCMTOOLS=y
+ CONFIG_UPNP=y
+ CONFIG_EBTABLES=y
+ CONFIG_IPROUTE2=y
+ CONFIG_IPROUTE2_IP=y
+ CONFIG_IPROUTE2_TC=y
+ CONFIG_REMOTE_MGT=y
+ CONFIG_COUNTRY_SPAIN=y
+ CONFIG_SUPPORT_TPSL=y
+ CONFIG_DHCP_MONITOR=y
+ CONFIG_SUPPORT_TPSL_ON_DEFAULT=y
+ CONFIG_SUPPORT_VISIO=y
+ CONFIG_WIFI_SECURITY_WPA_ONLY=y
+ CONFIG_DEFINITIVE_PASSWORD=y
+ CONFIG_WANADOO_SERVER_KIT_DB=y
+ CONFIG_WANADOO_DB_UPDATE_DELAY=1
+ CONFIG_FT_SERVER_KIT_URL=http://suivilb.wanadoo.fr/servlets/maj
+ CONFIG_FT_SERVER_KIT_COUNTRY_CODE=1034
+ CONFIG_FT_UPDATE_SOLUTION=y
+ CONFIG_FEATURE_UPDATE_FT=y
+ CONFIG_SUPPORT_FIRMWARE_PUSH=y
+ CONFIG_SUPPORT_HOMELIVE=y
+ CONFIG_GENERIC_SPI=y
+ CONFIG_WEB=y
+ CONFIG_WEB_LEFT_MENU_STYLE=y
+ CONFIG_WEB_LOGIN=admin
+ CONFIG_WEB_PASSWORD=admin
+ CONFIG_WEB_WANADOO_LIVEBOX_2=y
+ CONFIG_WEB_ORANGE=y
+ CONFIG_UPNP_DEFAULT=y
+ CONFIG_VOIP=y
+ CONFIG_VOIP_INVH323_UMA_FT=y
+ CONFIG_VOIP_INVH323_UMA_FT_SECGW=sgw.orange.es
+ CONFIG_VOIP_INVH323_UMA_FT_QOS=y
+ CONFIG_DSCP_REMARKING=y
+ CONFIG_VOIP_RADVISION=y
+ CONFIG_VOIP_RADVISION_SPAIN=y
+ [ ! -f /etc_ro_fs/autoconf.conf ]
+ [ -z y ]
+ cat /proc/mtd
+ grep user.*_fs+ cut -f1 -d:
+ mtdlist=mtd1
mtd2
+ [ -h /dev/root ]
+ ls -al /dev/root
+ sed s/.* -> mtdblock/mtd/
+ mtdroot=mtd1
+ echo mtd1 mtd2
+ sed s/mtd1//
+ mtdlist= mtd2
+ echo mtd2
+ sed s/mtd//
+ mtdlist=2
+ echo 2
2
+ echo Try to mount /dev/mtdblock2 on /usr
Try to mount /dev/mtdblock2 on /usr
+ flash_verify /dev/mtd2 0x29032005
Magic: 29032005
/dev/mtd2: opening...
/dev/mtd2: reading signature...
Signature (48 bytes):
94 00 03 02 00 14 9b 37 26 58 31 f2 32 5a d6 b8
48 1b 13 d1 47 f6 0f b2 6c d4 00 14 69 ec 6d 07
8a a7 b3 34 e9 f1 c3 8a 32 12 34 9a e9 f5 77 a4
/dev/mtd2: hashing...
/dev/mtd2: importing public key...
/dev/mtd2: verifying hash...
/dev/mtd2: verification OK
+ mount -t squashfs /dev/mtdblock2 /usr
+ result=0
+ [ ! 0 -eq 0 ]
+ rm -f /var/run/rescue_boot
+ break
+ [ ! -e /etc/rc.d ]
+ rm -f /tmp/touch.test
+ find /lib/modules// -name prod_test*
+ insmod /lib/modules//2.6.12.6/extra/prod_test.ko
prod_test: module license 'Proprietary' taints kernel.
insmod: cannot insert `/lib/modules//2.6.12.6/extra/prod_test.ko': Success (1): Success
+ [ 1 = 0 ]
+ [ -n mtd0 ]
+ cat /proc/mtd
dev: size erasesize name
mtd0: 00030000 00010000 "RedBoot"
mtd1: 00390000 00010000 "user_fs"
mtd2: 00390000 00010000 "user_2_fs"
mtd3: 000a0000 00010000 "jffs_system"
mtd4: 0000f000 00010000 "FIS directory"
mtd5: 00001000 00010000 "RedBoot config"
+ cat /proc/mtd
+ grep jffs_system
+ sed -n s/\(mtd\)\(.*\):\(.\)*/\2/p
+ mount -t jffs2 -o rw /dev/mtdblock3 /mnt/jffs2/jffs2_3
+ rm -f /tmp/touch.test
+ touch /tmp/touch.test
+ [ ! -e /tmp/touch.test ]
+ rm -f /tmp/touch.test
+ [ -e /tmp/touch.test ]
+ [ ! -f /mnt/jffs2/jffs2_3/etc/issue ]
+ [ ! -f /mnt/jffs2/jffs2_3/etc/finished ]
+ cat /etc/issue.bluedsl
+ grep version
+ x=INVENTEL version : v5.11.13-sip-sp
+ cat /etc_ro_fs/issue.bluedsl
+ grep version
+ y=INVENTEL version : v5.11.13-sip-sp
+ [ INVENTEL version : v5.11.13-sip-sp = INVENTEL version : v5.11.13-sip-sp ]
+ echo Up to date version INVENTEL version : v5.11.13-sip-sp
Up to date version INVENTEL version : v5.11.13-sip-sp
+ [ -f /usr/etc_ro_fs/init.d/usrboot ]
+ /usr/etc_ro_fs/init.d/usrboot
+ rm -f /var/run/rescue_boot
+ [ ! -f /usr/etc/finished ]
+ grep version
+ cat /usr/etc/issue.bluedsl
+ x=INVENTEL version : v5.11.13-sip-sp
+ cat /usr/etc_ro_fs/issue.bluedsl
+ grep version
+ y=INVENTEL version : v5.11.13-sip-sp
+ [ INVENTEL version : v5.11.13-sip-sp = INVENTEL version : v5.11.13-sip-sp ]
+ echo /usr up to date version INVENTEL version : v5.11.13-sip-sp
/usr up to date version INVENTEL version : v5.11.13-sip-sp
+ exit 0
+ exit 0
Starting pid 99, console /dev/tts/0: '/etc_ro_fs/init.d/rc.sysinit'
Mounting other filesystems ...
cp: /etc/crontab_root: No such file or directory
+ echo Switching to RUNLEVEL 1 ...
Switching to RUNLEVEL 1 ...
+ runlevel_manage 1
+ local previous
+ runlevel=1
+ [ -f /var/run/runlevel ]
+ previous=N
+ [ 1 = N ]
+ local scriptlist directorylist
+ directorylist=/etc/rc1.d/:/usr/etc/rc1.d/
+ OLDIFS=
+ IFS=:
+ scriptlist=
+ find /etc/rc1.d/ -name K*
+ sed s,/etc/rc1.d/,,
+ scriptlist=
+ find /usr/etc/rc1.d/ -name K*
+ sed s,/usr/etc/rc1.d/,,
+ scriptlist=
+ sort -u
+ scriptlist=
+ echo 1
+ echo 108
+ scriptlist=
+ find /etc/rc1.d/ -name S*
+ sed s,/etc/rc1.d/,,
+ scriptlist=S84usbdect_apig
S20network
S25update_ft
S10adsl
S26pair
S27http_server
S25wireless
S22backlight
S05hardware
S99printkoff
S25dhcp_dns_server
+ find /usr/etc/rc1.d/+ sed s,/usr/etc/rc1.d/,,
-name S*
+ scriptlist=S22usb-host
S22upnp
S28krtp
S85voip
S27bluetooth
S90post_webupgrade S84usbdect_apig
S20network
S25update_ft
S10adsl
S26pair
S27http_server
S25wireless
S22backlight
S05hardware
S99printkoff
S25dhcp_dns_server
+ echo S22usb-host
+ sort -u
+ echo S22upnp
+ echo S28krtp
+ echo S85voip
+ echo S27bluetooth
+ echo S90post_webupgrade
+ echo S84usbdect_apig
+ echo S20network
+ echo S25update_ft
+ echo S10adsl
+ echo S26pair
+ echo S27http_server
+ echo S25wireless
+ echo S22backlight
+ echo S05hardware
+ echo S99printkoff
+ echo S25dhcp_dns_server
+ scriptlist=S05hardware
S10adsl
S20network
S22backlight
S22upnp
S22usb-host
S25dhcp_dns_server
S25update_ft
S25wireless
S26pair
S27bluetooth
S27http_server
S28krtp
S84usbdect_apig
S85voip
S90post_webupgrade
S99printkoff
+ [ -f /etc/rc1.d/S05hardware ]
+ realscript=/etc/rc1.d/S05hardware
+ [ 1 != N ]
+ number=05hardware
+ echo 05hardware
+ cut -c 1-2
+ number=05
+ echo 05
+ suffix=hardware
+ stop=/etc/rc1.d/K[0-9][0-9]hardware
+ echo /etc/rc1.d/
+ sed s,rc1,rcN,
+ previous_start=/etc/rcN.d/S[0-9][0-9]hardware
+ [ -f /etc/rcN.d/S[0-9][0-9]hardware ]
+ sh /etc/rc1.d/S05hardware start
Starting core drivers...
Watchdog init Build: Jan 18 2011 16:28:01
irq register OK
SPI driver Jan 18 2011 16:28:00
usage: insmod spi.o [debug=1] [tty_low_latency=1]
Broadcom BCM6348B0 Ethernet Network Device v0.3 Jan 18 2011 16:17:14
Config Internal PHY Through MDIO
BCM63xx_ENET: Auto-negotiation timed-out
BCM63xx_ENET: 100 MB Full-Duplex (auto-neg)
eth0:register_netdevice:2847
eth0: MAC Address: 00:07:3A:FF:FF:FF
Broadcom BCM6348B0 Ethernet Network Device v0.3 Jan 18 2011 16:17:14
Config External PHY Through MDIO
eth0 Link UP.
BCM63xx_ENET: Auto-negotiation timed-out
BCM63xx_ENET: 10 MB Half-Duplex (assumed)
eth1:register_netdevice:2847
eth1: MAC Address: 00:07:3A:FF:FF:FF
USB MAC ADDRESS belongs to 30:78:30:30:3A:32
USB HOST MAC ADDRESS belongs to 30:78:30:30:3A:33
Broadcom BCM6348B0 USB Network Device v0.4 Jan 18 2011 16:17:15
usb0: MAC Address: 30 78 30 30 3A 32
usb0: Host MAC Address: 30 78 30 30 3A 33
usb0:register_netdevice:2847
Switch module creating proc entry
dummy0:register_netdevice:2847
dummy1:register_netdevice:2847
+ break
+ [ -f /etc/rc1.d/S10adsl ]
+ realscript=/etc/rc1.d/S10adsl
+ [ 1 != N ]
+ number=10adsl
+ echo 10adsl
+ cut -c 1-2
+ number=10
+ echo 10
+ suffix=adsl
+ stop=/etc/rc1.d/K[0-9][0-9]adsl
+ echo /etc/rc1.d/
+ sed s,rc1,rcN,
+ previous_start=/etc/rcN.d/S[0-9][0-9]adsl
+ [ -f /etc/rcN.d/S[0-9][0-9]adsl ]
+ sh /etc/rc1.d/S10adsl start
Loading ADSL & ATM kernel modules...
Starting ADSL daemon...
+ break
+ [ -f /etc/rc1.d/S20network ]
+ realscript=/etc/rc1.d/S20network
+ [ 1 != N ]
+ number=20network
+ echo 20network
+ cut -c 1-2
+ number=20
+ echo 20
+ suffix=network
+ stop=/etc/rc1.d/K[0-9][0-9]network
+ echo /etc/rc1.d/
+ sed s,rc1,rcN,
+ previous_start=/etc/rcN.d/S[0-9][0-9]network
+ [ -f /etc/rcN.d/S[0-9][0-9]network ]
+ sh /etc/rc1.d/S20network start
BcmAdsl_Initialize=0xC00DF0C8, g_pFnNotifyCallback=0xC00F4034
pSdramPHY=0xA0FFFFF8, 0xD1AA192F 0xDEADDEAD
AdslCoreHwReset: AdslOemDataAddr = 0xA0FFDE10
AdslCoreEcUpdTmr: timeMs=-280130 ecUpdMask=0x40000
Local network configuration ...
Ethernet network configuration ...
Hostname configuration : WANADOO-
br0:register_netdevice:2847
device usb0 entered promiscuous mode
br1:register_netdevice:2847
device eth0 entered promiscuous mode
br1: port 1(eth0) entering learning state
device eth1 entered promiscuous mode
br0: port 2(eth1) entering learning state
br0: port 1(usb0) entering learning state
Killing dhcp-monitor with SIGTERM (1/5)...
br1: topology change detected, propagating
br1: port 1(eth0) entering forwarding state
br0: topology change detected, propagating
br0: port 2(eth1) entering forwarding state
br0: topology change detected, propagating
br0: port 1(usb0) entering forwarding state
device dummy0 is not a slave of br1
device dummy0 entered promiscuous mode
br1: port 2(dummy0) entering learning state
+ break
+ [ -f /etc/rc1.d/S22backlight ]
+ realscript=/etc/rc1.d/S22backlight
+ [ 1 != N ]
+ number=22backlight
+ echo 22backlight
+ cut -cdevice eth0 left promiscuous mode
br1: port 1(eth0) entering disabled state
delif eth0 from br1, result: 0
addif eth0 to br1, result: 16
1-2
+ number=22
+ echo 22
+ suffix=backlight
+ stop=/etc/rc1.d/K[0-9][0-9]backlight
+ echo /etc/rc1.d/
+ sed s,rc1,rcN,
+ previous_start=/etc/rcN.d/S[0-9][0-9]backlight
+ [ -f /etc/rcN.d/S[0-9][0-9]backlight ]
+ sh /etc/rc1.d/S22backlight start
Update Backlight state
On
Advanced
Device open failed: Address family not supported by protocol
+ break
+ [ -f /etc/rc1.d/S22upnp ]
+ [ -f /usr/etc/rc1.d/S22upnp ]
+ realscript=/usr/etc/rc1.d/S22upnp
+ [ 1 != N ]
br1: topology change detected, propagating
br1: port 2(dummy0) entering forwarding state
+ number=22upnp
+ echo 22upnp
+ cut -c 1-2
+ number=22
+ echo 22
+ suffix=upnp
+ stop=/usr/etc/rc1.d/K[0-9][0-9]upnp
+ echo /usr/etc/rc1.d/
+ sed s,rc1,rcN,
+ previous_start=/usr/etc/rcN.d/S[0-9][0-9]upnp
+ [ -f /usr/etc/rcN.d/S[0-9][0-9]upnp ]
device eth0 entered promiscuous mode
br1: port 1(eth0) entering learning state
addif eth0 to br1, result: 0
device eth1 left promiscuous mode
br0: port 2(eth1) entering disabled state
delif eth1 from br0, result: 0
addif eth1 to br0, result: 16
+ sh /usr/etc/rc1.d/S22upnp start
No ADSL, default: abc0
Upnp init ...
br1: topology change detected, propagating
br1: port 1(eth0) entering forwarding state
device eth1 entered promiscuous mode
br0: port 2(eth1) entering learning state
addif eth1 to br0, result: 0
MyConfig in /usr/etc/upnp.conf:
Debug=0
descDocName: gatedesc.xml
xmlPath: /usr/etc/linuxigd
g_iptables: iptables
g_forwardChainName: upnp
g_preroutingChainName: upnp
g_upstreamBitrate: 0
g_downstreamBitrate: 0
TGU: IpAddress: 192.168.1.1
+ break
+ [ -f /etc/rc1.d/S22usb-host ]
+ [ -f /usr/etc/rc1.d/S22usb-host ]
+ realscript=/usr/etc/rc1.d/S22usb-host
+ [ 1 != N ]
+ number=22usb-host
+ echo 22usb-host
+ cut -c 1-2
+ number=22
+ echo 22
+ suffix=usb-host
+ stop=/usr/etc/rc1.d/K[0-9][0-9]usb-host
+ echo /usr/etc/rc1.d/
+ sed s,rc1,rcN,
INFO : IGD root device successfully registered.
+ previous_start=/usr/etc/rcN.d/S[0-9][0-9]usb-host
+ [ -f /usr/etc/rcN.d/S[0-9][0-9]usb-host ]
+ sh /usr/etc/rc1.d/S22usb-host start
br0: topology change detected, propagating
br0: port 2(eth1) entering forwarding state
usbcore: registered new driver usbfs
usbcore: registered new driver hub
ohci-hcd: 2004 Nov 08 USB 1.1 'Open' Host Controller (OHCI) Driver (PCI)
PCI: Enabling device 0000:00:09.0 (0000 -> 0002)
PCI: Setting latency timer of device 0000:00:09.0 to 64
ohci-hcd 0000:00:09.0: PCI device 14e4:6300 (Broadcom Corporation)
ohci-hcd 0000:00:09.0: new USB bus registered, assigned bus number 1
ohci-hcd 0000:00:09.0: irq 20, io mem 0xfffe1b00
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 2 ports detected
usbmgr[448]: start 0.4.8
usbmgr[448]: sleep time -1 micro sec
Name: /usr/etc/usbmgr/usbmgr.conf
Load_from_file: /usr/etc/usbmgr/preload.conf
+ break
+ [ -f /etc/rc1.d/S25dhcp_dns_server ]
+ realscript=/etc/rc1.d/S25dhcp_dns_server
+ [ 1 != N ]
+ number=25dhcp_dns_server
+ echo 25dhcp_dns_server
+ cut -c 1-2
+ number=25
+ echo 25
+ suffix=dhcp_dns_server
+ stop=/etc/rc1.d/K[0-9][0-9]dhcp_dns_server
+ echo /etc/rc1.d/
+ sed s,rc1,rcN,
+ previous_start=/etc/rcN.d/S[0-9][0-9]dhcp_dns_server
+ [ -f /etc/rcN.d/S[0-9][0-9]dhcp_dns_server ]
+ sh /etc/rc1.d/S25dhcp_dns_server start
usbmgr[450]: buffer line: remove T
usbmgr[450]: class:0x9 subclass:0x0 protocol:0x0
usbmgr[450]: try /usr/etc/usbmgr/class/09/00/00/module
usbmgr[450]: try /usr/etc/usbmgr/class/09/00/module
usbmgr[450]: try /usr/etc/usbmgr/class/09/module
usbmgr[450]: try /usr/etc/usbmgr/class/module
usbmgr[450]: USB device isn't matched the configuration
dnsmasq configured as dhcp server
sagem
INFO : Advertisements Sent. Listening for requests ...
sagem
sagem
sagem
sagem
sagem
thomson
thomson
dnsmasq start ( DNS / DHCP server ) ...
dnsmasq -o -r/etc/resolv.dnsmasq -z --dhcp-range=192.168.1.9,192.168.1.200,24h --dhcp-leasefile=/etc/dhcp.leases --dhcp-vendorclass novendor_sagem,sagem --dhcp-vendorclass novendor_thomson,thomson --dhcp-userclass nouser_sagem,IAD5116 --dhcp-userclass nouser_sagem,IAD61-17 --dhcp-userclass nouser_sagem,IAD80-16 --dhcp-userclass nouser_sagem,ITAD80-16 HD --dhcp-userclass nouser_sagem,ITAD81-160 --dhcp-userclass nouser_sagem,ITAD81 FT --dhcp-userclass nouser_thomson,IP921F --dhcp-userclass nouser_thomson,IP2031F --dhcp-userclass nouser_mltv,STB_MLTV --dhcp-userclass nouser_mltv,PC_MLTV --dhcp-ignore=nouser_mltv --dhcp-ignore=novendor_thomson,nouser_thomson --dhcp-ignore=novendor_sagem,nouser_sagem
[p2] iface->name: br0
[p2] iface->name: lo
+ break
+ [ -f /etc/rc1.d/S25update_ft ]
+ realscript=/etc/rc1.d/S25update_ft
+ [ 1 != N ]
+ number=25update_ft
+ echo 25update_ft
+ cut -c 1-2
+ number=25
+ echo 25
+ suffix=update_ft
+ stop=/etc/rc1.d/K[0-9][0-9]update_ft
+ echo+ sed s,rc1,rcN,
/etc/rc1.d/
+ previous_start=/etc/rcN.d/S[0-9][0-9]update_ft
+ [ -f /etc/rcN.d/S[0-9][0-9]update_ft ]
+ sh /etc/rc1.d/S25update_ft start
France Telecom Firmware Update Client v1.12
Copyright Inventel 2005-2006
+ break
+ [ -f /etc/rc1.d/S25wireless ]
+ realscript=/etc/rc1.d/S25wireless
+ [ 1 != N ]
+ number=25wireless
+ echo 25wireless
+ cut -c 1-2
+ number=25
+ echo 25
+ suffix=wireless
+ stop=/etc/rc1.d/K[0-9][0-9]wireless
+ echo /etc/rc1.d/+ sed s,rc1,rcN,
+ previous_start=/etc/rcN.d/S[0-9][0-9]wireless
+ [ -f /etc/rcN.d/S[0-9][0-9]wireless ]
+ sh /etc/rc1.d/S25wireless start
PCI: Setting latency timer of device 0000:00:01.0 to 64
PCI: Enabling device 0000:00:01.0 (0004 -> 0006)
wl0:register_netdevice:2847
wl0: Broadcom BCM4318 802.11 Wireless Controller 3.131.35.0.cpe0.0
[p2] wl_event, bssid idx: 0
[p2] wl_event, dev: 00000000
[p2] dev == NULL, using wl->dev
[p2] wl_event, dev->name: wl0
[p2] wlc_sendup_event, bssid:0
device wl0 entered promiscuous mode
[p2] wl_event, bssid idx: 0
[p2] wl_event, dev: 00000000
[p2] dev == NULL, using wl->dev
[p2] wl_event, dev->name: wl0
[p2] wlc_sendup_event, bssid:0
br0: port 3(wl0) entering learning state
+ break
+ [ -f /etc/rc1.d/S26pair ]
+ realscript=/etc/rc1.d/S26pair
+ [ 1 != N ]
+ number=26pair
+ echo 26pair
+ cut -c 1-2
+ number=26
+ echo 26
+ suffix=pair
+ stop=/etc/rc1.d/K[0-9][0-9]pair
+ sed s,rc1,rcN,
+ echo /etc/rc1.d/
+ previous_start=/etc/rcN.d/S[0-9][0-9]pair
+ [ -f /etc/rcN.d/S[0-9][0-9]pair ]
+ sh /etc/rc1.d/S26pair start
Bad run level ...
+ break
+ [ -f /etc/rc1.d/S27bluetooth ]
+ [ -f /usr/etc/rc1.d/S27bluetooth ]
Starting pairing manager
br0: topology change detected, propagating
br0: port 3(wl0) entering forwarding state
+ realscript=/usr/etc/rc1.d/S27bluetooth
+ [ 1 != N ]
+ number=27bluetooth
+ echo 27bluetooth
+ cut -c 1-2
+ number=27
+ echo 27
+ suffix=bluetooth
+ stop=/usr/etc/rc1.d/K[0-9][0-9]bluetooth
+ echo /usr/etc/rc1.d/
+ sed s,rc1,rcN,
+ previous_start=/usr/etc/rcN.d/S[0-9][0-9]bluetooth
+ [ -f /usr/etc/rcN.d/S[0-9][0-9]bluetooth ]
+ sh /usr/etc/rc1.d/S27bluetooth start
Param:
Update Backlight state
On
Advanced
Device open failed: Address family not supported by protocol
s_backlight : 1
Function cleanup_link_keys
wifi_nb : 0
0 link keys removed
/sbin/iwpriv wl0 del_mac ff:ff:ff:ff:ff:ff
/sbin/iwpriv wl0 maccmd 0
Bluetooth configuration ...
Bluetooth: Core ver 2.7
NET: Registered protocol family 31
Bluetooth: HCI device and connection manager initialized
Bluetooth: HCI socket layer initialized
Bluetooth: L2CAP ver 2.7
Bluetooth: L2CAP socket layer initialized
Bluetooth: RFCOMM ver 1.5
Bluetooth: RFCOMM socket layer initialized
Bluetooth: BNEP (Ethernet Emulation) ver 1.2
Bluetooth: HCI UART driver ver 2.1
Bluetooth: HCI H4 protocol initialized
Bluetooth: HCI BCSP protocol initialized
Bluetooth: SCO (Voice Link) ver 0.4
Bluetooth: SCO socket layer initialized
üttySPI, 391Khz
SPI: use CS0 on hardware that way have CS0 and CS2 linked, GPIOmode_grp1 configured to use PC-Card
ttySPI, 391Khz
ttySPI, 781Khz
ttySPI, 781Khz
ttySPI, 781Khz
Hardware version: 0x31303032 - Software version: 0x34313832
Bluetooth is OFF in this configuration. Disable scan and exit.
+ break
+ [ -f /etc/rc1.d/S27http_server ]
+ realscript=/etc/rc1.d/S27http_server
+ [ 1 != N ]
+ number=27http_server
+ echo 27http_server
+ cut -c 1-2
+ number=27
+ echo 27
+ suffix=http_server
+ stop=/etc/rc1.d/K[0-9][0-9]http_server
+ echo /etc/rc1.d/
+ sed s,rc1,rcN,
+ previous_start=/etc/rcN.d/S[0-9][0-9]http_server
+ [ -f /etc/rcN.d/S[0-9][0-9]http_server ]
+ sh /etc/rc1.d/S27http_server start
Websrv start ...
+ break
+ [ -f /etc/rc1.d/S28krtp ]
+ [ -f /usr/etc/rc1.d/S28krtp ]
+ realscript=/usr/etc/rc1.d/S28krtp
+ [ 1 != N ]
+ number=28krtp
+ echo 28krtp
+ cut -c 1-2
+ number=28
+ echo 28
+ suffix=krtp
+ stop=/usr/etc/rc1.d/K[0-9][0-9]krtp
+ echo /usr/etc/rc1.d/
+ sed s,rc1,rcN,
+ previous_start=/usr/etc/rcN.d/S[0-9][0-9]krtp
+ [ -f /usr/etc/rcN.d/S[0-9][0-9]krtp ]
+ sh /usr/etc/rc1.d/S28krtp start
krtp start ...
+ break
+ [ -f /etc/rc1.d/S84usbdect_apig ]
+ realscript=/etc/rc1.d/S84usbdect_apig
+ [ 1 != N ]
+ number=84usbdect_apig
+ cut -c 1-2
+ echo 84usbdect_apig
+ number=84
+ echo 84
+ suffix=usbdect_apig
+ stop=/etc/rc1.d/K[0-9][0-9]usbdect_apig
+ echo /etc/rc1.d/
+ sed s,rc1,rcN,
+ previous_start=/etc/rcN.d/S[0-9][0-9]usbdect_apig
+ [ -f /etc/rcN.d/S[0-9][0-9]usbdect_apig ]
+ sh /etc/rc1.d/S84usbdect_apig start
USB DECT Upper driver installed
+ break
+ [ -f /etc/rc1.d/S85voip ]
+ [ -f /usr/etc/rc1.d/S85voip ]
+ realscript=/usr/etc/rc1.d/S85voip
+ [ 1 != N ]
+ number=85voip
+ echo 85voip
+ cut -c 1-2
+ number=85
+ echo 85
+ suffix=voip
+ stop=/usr/etc/rc1.d/K[0-9][0-9]voip
+ echo /usr/etc/rc1.d/
+ sed s,rc1,rcN,
+ previous_start=/usr/etc/rcN.d/S[0-9][0-9]voip
+ [ -f /usr/etc/rcN.d/S[0-9][0-9]voip ]
+ sh /usr/etc/rc1.d/S85voip start
Module upper_dect_driver is ready
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
voip start...
+ break
+ [ -f /etc/rc1.d/S90post_webupgrade ]
+ [ -f /usr/etc/rc1.d/S90post_webupgrade ]
+ realscript=/usr/etc/rc1.d/S90post_webupgrade
+ [ 1 != N ]
+ number=90post_webupgrade
+ echo 90post_webupgrade
+ cut -c 1-2
+ number=90
+ echo 90
+ suffix=post_webupgrade
+ stop=/usr/etc/rc1.d/K[0-9][0-9]post_webupgrade
+ echo /usr/etc/rc1.d/
+ sed s,rc1,rcN,
+ previous_start=/usr/etc/rcN.d/S[0-9][0-9]post_webupgrade
+ [ -f /usr/etc/rcN.d/S[0-9][0-9]post_webupgrade ]
+ sh /usr/etc/rc1.d/S90post_webupgrade start
[post_webupgrade] Detected 'start' from rc script during a normal boot. I will not start services now
+ break
+ [ -f /etc/rc1.d/S99printkoff ]
+ realscript=/etc/rc1.d/S99printkoff
+ [ 1 != N ]
+ number=99printkoff
+ echo 99printkoff
+ cut -c 1-2
+ number=99
+ echo 99
+ suffix=printkoff
+ stop=/etc/rc1.d/K[0-9][0-9]printkoff
+ echo /etc/rc1.d/
+ sed s,rc1,rcN,
+ previous_start=/etc/rcN.d/S[0-9][0-9]printkoff
+ [ -f /etc/rcN.d/S[0-9][0-9]printkoff ]
+ sh /etc/rc1.d/S99printkoff start
Setting printk off
+ break
+ rm -f /var/run/rc.pid
+ rm -f /var/run/runlevel_in_progress
+ rm -f /var/run/init_in_progress_stage
+ echo 1
Sysinit done
Please press Enter to activate this console.
Openwrt bootlog
9655432SDRAM16bitX10120123456+678
ESA: 30:78:30:30:3a:30
WEP KEY : FFFFFFFFFFFFFFFFFFFFFFFFFF
Auto-negotiation timed-out
10 MB Half-Duplex (assumed)
Ethernet eth0: MAC address 30:78:30:30:3a:30
IP: 10.7.58.112, Default server: 10.7.58.114
Hardware version 0x90, mask=0x7E
Hardware version 0x10 (masked) BLUE5G.9 DV4210
Factory Settings Recovery Switch OFF
RedBoot(tm) bootstrap and debug environment [ROM]
unlocked release, eCos 2.0b1 - built 01:06:01, Mar 1 2012
Platform: Blue_5g (MIPS32 4Kc)
Copyright (C) 2000, 2001, 2002, Red Hat, Inc.
RAM: 0x80000000-0x81000000, [0x80435e50-0x80fe2000] available
FLASH: 0xbe400000 - 0xbec00000, 128 blocks of 0x00010000 bytes each.
== Executing boot script in 20.000 seconds - enter ^C twice to abort
hit '' (0x01)
== Executing boot script in 19.990 seconds - enter ^C twice to abort
RedBoot> fis load -b 0x80010000 -d kernel
-- Redboot version without crypt_verify --
Image loaded from 0x80010000-0x80275a58
RedBoot> exec -c "noinitrd mem=16M" 0x80010000
Now booting linux kernel:
Base address 0x8000fc00 Entry 0x80010000
Cmdline : noinitrd mem=16M
changing Kseg0 coherency algorithm to write back...
enabling icache and dcache...
Linux version 2.6.32.27 (dani@tool) (gcc version 4.3.3 (GCC) ) #29 Thu Mar 1 01:06:46 CET 2012
Detected Broadcom 0x6348 CPU revision b0
CPU frequency is 256 MHz
16MB of RAM installed
registering 37 GPIOs
board_livebox: Hardware version 0x90 BLUE5G.9
RAC_CR0 = 0x15, RAC_CR1 = 0x2000000
C0 register($16, 0): 0x80008083
C0 register($22, 0): 0xe3880000
board_livebox: resetting gpio6 for eth1...
bootconsole [early0] enabled
CPU revision is: 00029107 (Broadcom BCM6348)
board_livebox: board name: Livebox
Determined physical RAM map:
memory: 01000000 @ 00000000 (usable)
Zone PFN ranges:
Normal 0x00000000 -> 0x00001000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
0: 0x00000000 -> 0x00001000
Built 1 zonelists in Zone order, mobility grouping off. Total pages: 4064
Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200
PID hash table entries: 64 (order: -4, 256 bytes)
Dentry cache hash table entries: 2048 (order: 1, 8192 bytes)
Inode-cache hash table entries: 1024 (order: 0, 4096 bytes)
Primary instruction cache 16kB, VIPT, 2-way, linesize 16 bytes.
Primary data cache 8kB, 2-way, VIPT, no aliases, linesize 16 bytes
Memory: 13564k/16384k available (1980k kernel code, 2820k reserved, 353k data, 120k init, 0k highmem)
Hierarchical RCU implementation.
NR_IRQS:128
Calibrating delay loop... 254.97 BogoMIPS (lpj=509952)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
detected mtd start address 0x1FC00000, but forcing to 0x1e400000...
registering PCI controller with io_map_base unset
bio: create slab
Basic configuration
→ Basic configuration After flashing, proceed with this.
Set up your Internet connection, configure wireless, configure USB port, etc.
Specific Configuration
Interfaces
The default network configuration is:
| Interface Name | Description | Default configuration |
|---|---|---|
| br-lan | LAN & WiFi | 192.168.1.1/24 |
| eth0 | WAN | dhcp |
| eth1 | LAN | bridged |
| wlan0 | WiFi | disabled |
Failsafe mode
Buttons
→ hardware.button on howto use and configure the hardware button(s).
The Livebox has 2 buttons. They are ASSOCIATION BUTTON and PAGE BUTTON. There are no associated events to these buttons in Openwrt by default, you can customize it.
| BUTTON | onboard name | OEM name | Openwrt name | GPIO | SoC pin | action |
|---|---|---|---|---|---|---|
| Button 1 | S2 | ASSOCIATION_BUTTON | BTN_1 | 36 | W25 | not configured |
| Button 2 | S1 | PAGE_BUTTON | BTN_2 | 7 | AD5 | not configured |
| not soldered | S3 | n/a | n/a | n/a | G26 | System Reset |
Leds
The Livebox has 5 leds. Adsl-fail is used as default for indicating the router is on.
| Led | onboard name | GPIO | default trigger | |
|---|---|---|---|---|
| ⚠ | adsl-fail | DS1 | 0 | "default-on" |
| @ | adsl | DS2 | 1 | — |
| ➤➤ | traffic | DS3 | 2 | — |
| ✆ | phone | DS4 | 3 | — |
| ((⚲)) | wifi | DS5 | 4 | — |
| not soldered | DS6 | 5 | — | |
| not soldered | DS7 | 6 | conected to the eth1 phy, then always high | |
Read:
System configuration: Leds
to configure the leds
leds and gpio6 detail
Hardware
Info
| Architecture: | MIPS | |
| Vendor: | Broadcom | |
| Bootloader: | RedBoot | |
| System-On-Chip: | bcm6348 | |
| CPU/Speed | BMIPS3300 V0.7 / 256 MHz | |
| Flash-Chip: | Spansion S29GL064A11TFIR4 (Bottom Boot Sector Addresses) | |
| Flash size: | 8192 KiB | |
| RAM: | Hynix HY57V281620FTP-H / 16 MiB / 133 MHz Samsung K4S281632I-UC75 / 16 MiB / 133 MHz ISSI IS42S16800A-7T / 16 MiB / 143 MHz |
DV4210 WS DV4210 WA DV4410 |
| Wireless: | Broadcom 4318 802.11b/g (mini-pci) PCMCIA |
DV4210 DV3210 |
| Ethernet: | 1 internal phy + 1 external phy Altima ac101L 1 internal phy + BCM5325 |
DV4210, DV3210 DV4410 |
| Internet: | ADSL2+ | |
| USB: | 1x 1.1 host + 1 slave (udc) | |
| FXS: | slic STLC3055N | |
| Digital Signal Processor: | Texas Instruments TMS320VC5402 | DV3210, DV4410 |
| Bluetooth: | bb4g-t10 (NXP PCD80715HL) module connected via SPI | |
| Serial: | Yes | |
| JTAG: | Yes | |
Photos
| Photo of front of the casing, and opening the case | |||
|---|---|---|---|
 |
 |
 |
 |
| Photo of PCB | ||
|---|---|---|
| DV4210 | DV4410 | DV3210 |
 |
 |
 |
Thermal Balls
 |
 |
These are the thermal balls at the board, the bcm6348 SoC has been removed. You can guess how the SoC is wired at the board tracing pins and comparing it with the available bcm6348 pinout. |
Serial
 |
The livebox has an external accesible serial port TTL. It is a DEC MMJ connector. You can build a serial TTL adapter, or use those cheap USB adapters for cellphones. Using a TTL USB serial converter is easier, it only uses TX, RX and GND. |
 |
Sometimes maybe difficult to find the DEC MMJ connector. We can carefully modify a RJ45 ethernet one to fit it perfectly in the serial port |
JTAG
→ port.jtag general information about the JTAG port, JTAG cable, etc.
To use a simple unbuffered cable we only need to connect TDI, TDO, TMS and TCK. We also may connect the nTRST pin if we need it.
 |
The nTRST and nSRST (system reset) are bridged, as a result of this the functionallity of this pin is just acting as a regular system reset. Of course we can separate these pins cutting physically the bridge, but for sure you won't need to do it unless you are experimenting with your JTAG, or if you have a serious brick and you want to use the nTRST functionallity to make a proper TAP reset before flashig |  |
This is the pinout of the 30 pin connector and JTAG testpoints:
Photo of PCB with markings
Use a debrick utility to backup the original firmware, or debrick the device (broken bootloader):
An updated version of debrick on Google Docs
Backup the entire flash
Plug the power cord, wait 4 seconds and enter the command:
nice ./debrick -backup:custom /window:1e400000 /start:1e400000 /length:800000 /silent /notimestampIf we want to extract partitions we need to reverse endianess:
cat CUSTOM.BIN | ./switchend > backup_livebox.binNow for extracting, first we cut the binary accordingly to the flash layout (versions > 5.06.2)
dd if=backup_livebox.bin count=196608 bs=1 skip=0 of=mtd0-Redboot.rom dd if=backup_livebox.bin count=3735552 bs=1 skip=196608 of=mtd1-user_fs.squashfs dd if=backup_livebox.bin count=3735552 bs=1 skip=3932160 of=mtd2-user_2_fs.squashfs dd if=backup_livebox.bin count=655360 bs=1 skip=7667712 of=mtd3-jffs_system.jffs2 dd if=backup_livebox.bin count=61440 bs=1 skip=8323072 of=mtd4-FIS_directory dd if=backup_livebox.bin count=4096 bs=1 skip=8384512 of=mtd5-Redboot.configExtract squash filesystems:
sudo unsquashfs -i -d user_fs mtd1-user_fs.squashfs sudo unsquashfs -i -d user_2_fs mtd2-user_2_fs.squashfsMount the jffs2 filesystem
modprobe mtdram total_size=16384 modprobe mtdblock modprobe jffs2 jffs2dump -b -c -e jffs_system.jffs2 mtd3-jffs_system.jffs2 dd if=jffs_system.jffs2 of=/dev/mtdblock0 mount /dev/mtdblock0 mount/ -t jffs2
Debrick
Debrick the device flashing the redboot:
If your redboot is broken, you can put a new working redboot via JTAG.
First you'll need to do byte reordering with an utility. Use redim (darkfader tool):
./redim *,2,-2 -i redboot.rom -o CUSTOM.BINThe utility and CUSTOM.BIN already reordered:
http://files.myopera.com/danitool/livebox/redboot03_jtag.zip
Now, plug the power and enter the comand:
rmmod lp nice ./debrick -flash:custom /window:1fc00000 /start:1fc00000 /length:30000 /silent /nodmaIf the JTAG utility stops with the message:
Halting Processor ... <Procesor did NOT enter Debug Mode!>
and nothing else happens, then you'll need to deal with System Reset (bridged to nTRST) pin to perform a fast reset before flashing. Also in the BIOS of your PC, you may need to set Parallel Port into ECP, EPP or "Bi-Directional" mode. Read on: IEEE 1284 modes.
Debricking with this method is tested and working fine. This is a successful session of restoring the redboot via JTAG:
[root@tool hairydebrick]# nice ./debrick -flash:custom /window:1fc00000 /start:1fc00000 /length:30000 /silent /nodma
====================================
WRT54G/GS EJTAG Debrick Utility v4.8
====================================
Probing bus ... Done
Instruction Length set to 5
CPU Chip ID: 00000110001101001000000101111111 (0634817F)
*** Found a Broadcom BCM6348 Rev 1 CPU chip ***
- EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
*** DMA Mode Forced Off ***
Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ...
GPIOs
There are 37 GPIOs, probably some of them are unused, these seems to be the pretended use of each one, this may depend of the board version (ie: some boards have pccard, or DSP).
| GPIO | direction | hardware function |
|---|---|---|
| GPIO_00 …………. GPIO_05 | OUT | led |
| GPIO_06 | OUT | AC101L_RESET# and led_DS7 and DSP_RST_N |
| GPIO_07 | IN | button 2 |
| GPIO_08, …………., GPIO_15 | IN | MII BLK |
| GPIO_16, …………., GPIO_27 | IN | PCI PCCARD BLK |
| GPIO_28 | OUT | BT_DECT_RST |
| GPIO_29 | IN | BCM5325_SPI_SS# |
| GPIO_30 | - | NC |
| GPIO_31 | IN | DECT_SPI_SS# |
| GPIO_32 | IN | BCM5325_MDC or AC101L_MDC |
| GPIO_33 | IN | BT_INT |
| GPIO_34 | IN | DECT_INT |
| GPIO_35 | IN | DSP_INT2# |
| GPIO_36 | IN | button 1 |
SPI
| Conected to a bluetooth device bb4g-t10 (no information available) If we remove the paper over the bluetooth IC we can see the exact part number: NXP PCD80715HL - (VEGA THUNDERBIRD BASEBAND IC family bought by DSPG) |
  |
 |
This is the SPI pinout, and some gpios. Note a second twin unsoldered connector, it also has SPI (pads 6, 7, 8, bridged to the bluetooth connector). |
 |
The SPI pins are also located here at these testpoints. |
USB
The livebox has two USBs, they work at full speed using the OHCI module:
 |
One is a host usb 1.1. In the pic you can see the schematic. |
|
There is a known problem with hotplugging, everytime you plug a device in the usb, the board restarts itself. This maybe caused by a faulty hardware design. We can solve it soldering another electrolytic capacitor in parallel with the 10uF one. Use a 470 uF one (see pic) |  |
 |
The second USB port is slave. In OpenWrt this port is totally useless, in fact the preliminary support for UDC has been dropped. You can mod this port to convert it to a host port (see USB Mod), as a result of this you will have two working usb host ports in your board. |
DSP
 |
Some liveboxes boards have a TMS320VC5402 Digital Signal Processor like in the DV4410 or DV3210. In the pic you can see relevant GPIOs used by the DSP when present. BTW, it seems there aren't in any case drivers for DSPs  |
PCMCIA
Bootloader Mods
→ you could read about bootloader in general
 |
There are several Redboot mods for this board, even those redboots can work with other boards. The redboot sourcecode and the patch used to build redboot: redboot-blue5g.tar.gz |
Redboot RAM
For flashing a new Redboot with Redboot we need a RAM redboot version
http://files.myopera.com/danitool/livebox/redbootRAMBL.img
First gain access Redboot through the serial console.
Or if you already are using a modded Redboot with telnet enabled just use the ethernet cable (yellow port). Use the button1, press while powering on, wait 5 seconds and release the button:
telnet 10.7.58.112 9000
put the redbootRAMBL.img into your tftp server. And then:
RedBoot> load -v redbootRAMBL.img ... RedBoot> go ...Open another terminal console and telnet it again
telnet 10.7.58.112 9000
be sure you are now using the RAM version:
RedBoot> version RedBoot(tm) bootstrap and debug environment [RAM]And now flash the new redboot
RedBoot>load -v -r -b 0x80800000 newredboot.rom .... RedBoot>fis create RedBoot -r 0xBE400000 -e 0x00000000 ......
flashcp for flashing a new bootloader
We can also install a new bootloader from inside Openwrt. With the OEM inventel firmware fcp can write the bootloader image to the mtd0 partition. And with Openwrt firmware we can use flashcp (fcp is the old flashcp name).
opkg update opkg install mtd-utils-flashcpNow proceed with flashing:
root@OpenWrt:/# cd /tmp root@OpenWrt:/# wget ftp://ourlocalserver/newbootloader.rom .... root@OpenWrt:/# flashcp -v newbootloader.rom /dev/mtd0 .....
CFE
There exists a fully featured CFE for the livebox. The board IDs are blue5g9 (DV4210) and blue5g6.3 (livebox pro V1). However not (yet) supported officially by Openwrt. It maybe more comfortable for most users since CFE has a web server for updating firmwares.
|
Here the links for the CFE binary, prebuilt firmwares and the patch for Backfire CFE_blue5g9-nvr.zip livebox1_backfire_firmwares-CFE.zip |
The cfe from the NB6Plus4W Rev1 router also works with this board. But it divides the flash chip in two banks, only 4 MiB will be available with this CFE, and the button 1 won't work to use it for stopping CFE and loading firmwares through its web interface. Don't use this bootloader. NB6Plus4W_Rev1_CFE.rom
Hardware mods
- as a beginner, you really should inform yourself about soldering in general and then obtain some practical experience!
64MiB RAM Mod
 |
The RAM and the flash chip are located under the minipci. For this mod you'll need two RAM chips 32 MiB each one. Note this board uses SDR, and each chip is 16bit bus width. Check datasheets before choosing a suitable RAM chip. |
 |
Both chips should be identical. And you'll need a custom bootloader to recognize 64 MB, 2 chips (32 bit bus width). Here the custom Redboot/CFE for this and other RAM sizes/confirgurations CFE_blue5g9-nvr.zip REDBOOT_blue5g.zip |
USB Mod
You can convert your usb slave port to host. See details in the pics:
 |
The mod is very simple, but to isolate the USB1_PWRFLT (AD12) is very difficult since you must cut two layers of copper, making a deep ditch. Don't try to isolate the pin (and thus this mod) if you don't know what are you doing. The 470uF electrolytic capacitor is optional but highly recommendable to avoid problems with hotplugging. The capacitors at the D+ D- lines are already present in the board, thus you won't need to solder them. |
|
 |
    |
|
Now for making it work we need to patch the kernel. This is the patch for Backfire:
--- a/drivers/usb/host/ohci-bcm63xx.c +++ b/drivers/usb/host/ohci-bcm63xx.c @@ -24,7 +24,6 @@ * port 2 can be shared with USB slave, but all boards seem to * have only one host port populated, so we can hardcode it */ - ohci->num_ports = 1; ret = ohci_init(ohci); if (ret < 0) @@ -80,7 +79,7 @@ clk_enable(clk); usb_host_clock = clk; - bcm_rset_writel(RSET_OHCI_PRIV, 0, OHCI_PRIV_REG); + bcm_rset_writel(RSET_OHCI_PRIV, 1, OHCI_PRIV_REG); } else if (BCMCPU_IS_6358()) { reg = bcm_rset_readl(RSET_USBH_PRIV, USBH_PRIV_SWAP_REG);Build Openwrt with this patch and flash the new firmware, or just replace your ohci-hcd.ko module with the new one in the router. This is a log from dmesg with both USBs working as hosts:
....
....
NET: Registered protocol family 24
nf_conntrack version 0.5.0 (213 buckets, 852 max)
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
bcm63xx_ohci
bcm63xx_ohci.0: BCM63XX integrated OHCI controller
bcm63xx_ohci bcm63xx_ohci.0: new USB bus registered, assigned bus number 1
bcm63xx_ohci bcm63xx_ohci.0: irq 20, io mem 0xfffe1b00
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 2 ports detected
Initializing USB Mass Storage driver...
usbcore: registered
new interface driver usb-storage
USB Mass Storage support registered.
usb 1-1: new full speed USB device using bcm63xx_ohci and address 2
usb 1-1: configuration #1 chosen from 1 choice
scsi0 : SCSI emulation for USB Mass Storage devices
scsi 0:0:0:0: CD-ROM Vodafone CD ROM (Huawei) 2.31 PQ: 0 ANSI: 2
usb 1-2: new full speed USB device using bcm63xx_ohci and address 3
usb 1-2: configuration #1 chosen from 1 choice
scsi1 : SCSI emulation for USB Mass Storage devices
scsi 1:0:0:0: Direct-Access M-Sys Dell Memory Key 4.60 PQ: 0 ANSI: 0 CCS
sd 1:0:0:0: [sda] 239872 512-byte logical blocks: (122 MB/117 MiB)
sd 1:0:0:0: [sda] Write Protect is off
sd 1:0:0:0: [sda] Assuming drive cache: write through
sd 1:0:0:0: [sda] Assuming drive cache: write through
sda: sda1
sd 1:0:0:0: [sda] Assuming drive cache: write through
sd 1:0:0:0: [sda] Attached SCSI removable disk
I²C GPIO Mod
I²C Tiny-USB Mod
Firmware mods
Notes
Hardware Versions
With this kernel code we can get the hardware version:
u32 val; unsigned char hw_version; val = bcm_gpio_readl(GPIO_CTL_LO_REG); val &= ~0x000000FF; bcm_gpio_writel(val, GPIO_CTL_LO_REG); hw_version = (unsigned char)bcm_gpio_readl(GPIO_DATA_LO_REG) & 0xFF; printk("Hardware version 0x%02X \n", hw_version);But probably should be masked either with 0x7E or 0xFE
Example:
hardware version = 0x90
masked hardware version = 0x90 & 0x7E = 0x10
Known hardware versions (masked):
| masked hw version (mask=0x7E) |
BLUE 5G name |
|---|---|
| 0x02 | BLUE5G.2 |
| 0x08 | BLUE5G.3 |
| 0x06 | BLUE5G.4 |
| 0x04 | BLUE5G.4_mod1 |
| 0x0A | BLUE5G.6 |
| 0x0A | BLUE5G.8 |
| 0x10 | BLUE5G.9 |
but for BLUE7G boards:
| masked hw version (mask=0xFE) |
BLUE7G name |
|---|---|
| 0x40 | BLUE7G.3/7G.4 AOL |
| 0x42 | BLUE7G.3/7G.4 INVENTEL |
| 0x46 | BLUE7G.3/7G.4 INVENTEL WIFI READY |
| 0x44 | BLUE7G.4 BT |
| 0x48 | BLUE7G.4 FASTWEB |
| 0x4A | BLUE7G.5 AOL |
| 0x4C | BLUE7G.5 INVENTEL |
| 0x4E | BLUE7G.5 INVENTEL WIFI READY |
| 0xA0 | BLUE7G.5 BT |
| 0xA2 | BLUE7G.5 FASTWEB |
Also we can find the hardware version printed on the board
Tags
toh/inventel/dv4210.txt · Last modified: 2013/04/22 00:33 by danitool
This text is licensed under a Creative Commons Attribution-ShareAlike 3.0 Unported License.