Inventel Livebox 1

This is an adsl wifi router mainly distributed by Orange. The board is manufactured by Inventel-Thomson. The main difference with other bcm6348 boards is the bootloader, the liveboxes use redboot whereas others use CFE.

More info about this platform at bcm63xx

Supported Versions

These are the differences between several board models. In any case DSP and ADSL aren't supported by OpenWrt.

router version board model PCMCIA DSP mini-pci BCM5325
DV4210 blue5g9
DV4210 blue5g4
DV3210 blue5g6
DV4410 blue5g6.3

The Livebox DV4410 (AKA Livebox Pro v1) is supported, however the BCM5325 switch doesn't work. Only 1 ethernet port not belonging to the switch works. Maybe it isn't correctly activated when booting the board. It seems the switch should be configured via SPI, in this case the SPI Slave Select (SS) is the GPIO_29.

NOTE: About board models see notes.

Hardware Highlights

SoC CPU speed Ram Flash Network USB Serial JTag
Broadcom 6348 256MHz 16MiB 8MiB 1 x 2 Yes Yes Yes

Installation

obtain.firmware
Install OpenWrt

Currently there are no firmwares for downloads at Openwrt, thus you will need to build it yourself. However you can use the danitool's precompiled firmware if you are too lazy for building your own. Use it at your own risk:

OpenWrt_Backfire_10.03.1-livebox1_redboot.zip
OpenWrt_AA_12.09-livebox1_redboot.zip

  • Characteristics of Inventel DV4210 (AKA Livebox):
    • the OEM firmware doesn't allow flashing over it's WebUI
    • the OEM RedBoot isn't accessible, you cannot stop the RedBoot while loading the system with CTL+C using a serial console.
    • the OEM RedBoot only flash their encrypted firmwares.
  • Solution:
    • Use RGWRepair.exe to replace OEM firmware with elder OEM firmware, this allows to access via telnet to the command line interface.
    • replace the OEM RedBoot with an alternative RedBoot without the restrictions.
    • Once we have the alternative new RedBoot installed we are ready to install OpenWrt:


  1. Backup whole flash memory if you want to have the possibility to restore it later. Or continue with the next step, older Inventel's firmwares still can be found elsewhere in the web.
  2. Replace your current firmware with an old OEM firmware. Firmware versions < 5.04 have a backdoor which allows telnet access . There are howtos elsewhere for gaining access via telnet with this old firmware.
  3. Once we have telnet access we can replace the original redboot by this one modified by danitool.
    REDBOOT_blue5g-16MB_1chip.bin md5sum: 685260e895c891b2fda6b1ab10982b99
    In the command line inside the livebox just execute this commands
    # /etc/init.d/ramdisk start 16 
    # cd /mnt/ramdisk/rd1
    # wget ftp://your_local_ftp_server/redbootelnet04.rom
    # fcp -v redbootelnet04.rom /dev/mtd0
    Erasing blocks: 3/3 (100%)
    Writing data: 192k/192k (100%)
    Verifying data: 192k/192k (100%)
    # reboot
    
    Ok now we don't have restrictions and can flash unencrypted firmwares, like OpenWrt.
  4. Get a firmware: you can build it your own or download a precompiled one
    OpenWrt_Backfire_10.03.1-livebox1_redboot.zip
    OpenWrt_AA_12.09-livebox1_redboot.zip
  5. Now put the firmware into your tftp server.
    • Your ip must be 10.7.58.114
    • The ethernet cable is connected to the yellow port.
    • Start your tftp server!.
  6. Unplug the livebox, press the button 1 and plug the power cord again, wait 5 seconds and release the button. Wait until the flashing process finish.

  7. Telnet to 192.168.1.1 and set a root password, or browse to http://192.168.1.1 if LuCI is installed.

Flash Layout

  • OEM firmware versions < 5.06.2 (cramfs partitions)
    RedBoot> fis list
    Name              FLASH addr  Mem addr    Length      Entry point
    RedBoot           0xBE400000  0xBE400000  0x00030000  0x00000000
    
    user_fs           0xBE430000  0xBE430000  0x00720000  0x80545FB0
    jffs_system       0xBEB50000  0xBEB50000  0x000A0000  0x80545FB0
    
    FIS directory     0xBEBF0000  0xBEBF0000  0x0000F000  0x00000000
    RedBoot config    0xBEBFF000  0xBEBFF000  0x00001000  0x00000000
  • OEM firmware versions > 5.06.2 (squashfs partitions)
    Name              FLASH addr  Mem addr    Length      Entry point
    RedBoot           0xBE400000  0xBE400000  0x00030000  0x00000000 
    
    user_fs           0xBE430000  0xBE430000  0x00390000  0x80800000 
    user_2_fs         0xBE7C0000  0xBE7C0000  0x00390000  0x80800000 
    jffs_system       0xBEB50000  0xBEB50000  0x000A0000  0x80800000 
    
    FIS directory     0xBEBF0000  0xBEBF0000  0x0000F000  0x00000000 
    RedBoot config    0xBEBFF000  0xBEBFF000  0x00001000  0x00000000
  • OpenWrt firmware, the size of partitions depends on the size of the images we will flash.
    RedBoot> fis list                                                                                                                           
    Name              FLASH addr  Mem addr    Length      Entry point                                                                           
    RedBoot           0xBE400000  0xBE400000  0x00030000  0x00000000                                                                            
    
    kernel            0xBE430000  0xBE430000  0x00120000  0x80010000                                                                            
    user_fs           0xBE550000  0xBE550000  0x001A0000  0x80800000                                                                            
    rootfs_data       0xBE6F0000  0xBE6F0000  0x00500000  0x80800000                                                                            
    
    FIS directory     0xBEBF0000  0xBEBF0000  0x0000F000  0x00000000                                                                            
    RedBoot config    0xBEBFF000  0xBEBFF000  0x00001000  0x00000000  
    

Basic configuration

Basic configuration After flashing, proceed with this.
Set up your Internet connection, configure wireless, configure USB port, etc.

Specific Configuration

Interfaces

The default network configuration is:

Interface Name Description Default configuration
br-lan LAN & WiFi 192.168.1.1/24
eth0 WAN dhcp
eth1 LAN bridged
wlan0 WiFi disabled

Failsafe mode

Buttons

hardware.button on howto use and configure the hardware button(s).

The Livebox has 2 buttons. They are ASSOCIATION BUTTON and PAGE BUTTON. There are no associated events to these buttons in Openwrt by default, you can customize it.

BUTTON onboard name OEM name Openwrt name GPIO SoC pin action
Button 1 S2 ASSOCIATION_BUTTON BTN_1 36 W25 not configured
Button 2 S1 PAGE_BUTTON BTN_2 7 AD5 not configured
not soldered S3 n/a n/a n/a G26 System Reset

Leds

The Livebox has 5 leds. Adsl-fail is used as default for indicating the router is on.

Led onboard name GPIO default trigger
adsl-fail DS1 0 "default-on"
@ adsl DS2 1
➤➤ traffic DS3 2
phone DS4 3
((⚲)) wifi DS5 4
not soldered DS6 5
not soldered DS7 6 conected to the eth1 phy, then always high

Read:
System configuration: Leds
to configure the leds

leds and gpio6 detail

Hardware

Info

Instruction set: MIPS
Vendor: Broadcom
Bootloader: RedBoot
System-On-Chip: Broadcom BCM6348
CPU/Speed BMIPS3300 V0.7 / 256 MHz
Flash-Chip: Spansion S29GL064A11TFIR4 (Bottom Boot Sector Addresses)
Flash size: 8192 KiB
RAM: Hynix HY57V281620FTP-H / 16 MiB / 133 MHz
Samsung K4S281632I-UC75 / 16 MiB / 133 MHz
ISSI IS42S16800A-7T / 16 MiB / 143 MHz
DV4210 WS
DV4210 WA
DV4410
Wireless: Broadcom 4318 802.11b/g (mini-pci)
PCMCIA
DV4210
DV3210
Ethernet: 1 internal phy + 1 external phy Altima ac101L
1 internal phy + BCM5325
DV4210, DV3210
DV4410
Internet: ADSL2+
USB: 1x 1.1 host + 1 slave (udc)
FXS: slic STLC3055N
Digital Signal Processor: Texas Instruments TMS320VC5402 DV3210, DV4410
Bluetooth: bb4g-t10 (NXP PCD80715HL) module connected via SPI
Serial: Yes
JTAG: Yes

Photos

Photo of front of the casing, and opening the case
Photo of PCB
DV4210 DV4410 DV3210

Thermal Balls

These are the thermal balls at the board, the bcm6348 SoC has been removed. You can guess how the SoC is wired at the board tracing pins and comparing it with the available bcm6348 pinout.

Serial

port.serial

The livebox has an external accesible serial port TTL. It is a DEC MMJ connector.
You can build a serial TTL adapter, or use those cheap USB adapters for cellphones. Using a TTL USB serial converter is easier, it only uses TX, RX and GND.
rj45 mmj mod Sometimes maybe difficult to find the DEC MMJ connector. We can carefully modify a RJ45 ethernet one to fit it perfectly in the serial port

Flash-chip

(NOR 56/48-Pin Standard TSOP)

Query identification string:
        Primary Algorithm Command Set and Control Interface ID Code: 0x0002 (AMD/Fujitsu Standard Command Set)
	  16-bit: Manufacturer ID 0x000001 Chip ID 0x001000
        Alternate Algorithm Command Set and Control Interface ID Code: 0x0000 (null)
Query system interface information:
        Vcc Logic Supply Minimum Write/Erase or Write voltage: 2700 mV
        Vcc Logic Supply Maximum Write/Erase or Write voltage: 3600 mV
        Vpp [Programming] Supply Minimum Write/Erase voltage: 0 mV
        Vpp [Programming] Supply Maximum Write/Erase voltage: 0 mV
        Typical timeout per single byte/word program: 128 us
        Typical timeout for maximum-size multi-byte program: 128 us
        Typical timeout per individual block erase: 1024 ms
        Typical timeout for full chip erase: 0 ms
        Maximum timeout for byte/word program: 1024 us
        Maximum timeout for multi-byte program: 4096 us
        Maximum timeout per individual block erase: 16384 ms
        Maximum timeout for chip erase: 0 ms
Device geometry definition:
        Device Size: 8388608 B (8192 KiB, 8 MiB)
        Flash Device Interface Code description: 0x0002 (x8/x16)
        Maximum number of bytes in multi-byte program: 32
        Number of Erase Block Regions within device: 2
        Erase Block Region Information:
                Region 0:
                        Erase Block Size: 8192 B (8 KiB)
                        Number of Erase Blocks: 8
                Region 1:
                        Erase Block Size: 65536 B (64 KiB)
                        Number of Erase Blocks: 127
Primary Vendor-Specific Extended Query:
        Major version number: 1
        Minor version number: 3
        Address Sensitive Unlock: Required
        Process Technology: CS99
        Erase Suspend: Read/write
        Sector Protect: 1 sectors per group
        Sector Temporary Unprotect: Not supported
        Sector Protect/Unprotect Scheme: 29BDS640 mode (Software Command Locking)
        Simultaneous Operation: Not supported
        Burst Mode Type: Supported
        Page Mode Type: 4 word Page
        ACC (Acceleration) Supply Minimum: 11500 mV
        ACC (Acceleration) Supply Maximum: 12500 mV
        Top/Bottom Sector Flag: Bottom boot device

Flash device in physical memory map

BCM6348 SoCs allow only to load a bootloader from the fixed address 0x1FC00000. This restricts the max size of the flash memory to be 4 MB, unless the bootloader makes some trick to allow bigger sizes, like our redboot does:

  • The bootloader is first loaded from the physical address 0x1FC00000 (the middle of the flash where the bootloader really lives), and then the bootloader itself remaps whole flash to see the 8MB. The problem is that once remapped the bottom sectors are seen as if they were in the middle of the flash.

JTAG

port.jtag general information about the JTAG port, JTAG cable, etc.

To use a simple unbuffered cable we only need to connect TDI, TDO, TMS and TCK. We also may connect the nTRST pin if we need it.

The nTRST and nSRST (system reset) are bridged, as a result of this the functionallity of this pin is just acting as a regular system reset. Of course we can separate these pins cutting physically the bridge, but for sure you won't need to do it unless you are experimenting with your JTAG, or if you have a serious brick and you want to use the nTRST functionallity to make a proper TAP reset before flashig

This is the pinout of the 30 pin connector and JTAG testpoints:
JTAG-30pin
Photo of PCB with markings

Use a debrick utility to backup the original firmware, or debrick the device (broken bootloader):
An updated version of debrick on Google Docs

Backup the entire flash

Plug the power cord, wait 4 seconds and enter the command:

nice ./debrick -backup:custom /window:1e400000 /start:1e400000 /length:800000 /silent /notimestamp
If we want to extract partitions we need to reverse endianess:
cat CUSTOM.BIN | ./switchend > backup_livebox.bin
Now for extracting, first we cut the binary accordingly to the flash layout (versions > 5.06.2)
dd if=backup_livebox.bin count=196608  bs=1 skip=0       of=mtd0-Redboot.rom
dd if=backup_livebox.bin count=3735552 bs=1 skip=196608  of=mtd1-user_fs.squashfs
dd if=backup_livebox.bin count=3735552 bs=1 skip=3932160 of=mtd2-user_2_fs.squashfs
dd if=backup_livebox.bin count=655360  bs=1 skip=7667712 of=mtd3-jffs_system.jffs2
dd if=backup_livebox.bin count=61440   bs=1 skip=8323072 of=mtd4-FIS_directory
dd if=backup_livebox.bin count=4096    bs=1 skip=8384512 of=mtd5-Redboot.config
Extract squash filesystems:
sudo unsquashfs -i -d user_fs   mtd1-user_fs.squashfs
sudo unsquashfs -i -d user_2_fs mtd2-user_2_fs.squashfs
Mount the jffs2 filesystem
modprobe mtdram total_size=16384 
modprobe mtdblock 
modprobe jffs2 
jffs2dump -b -c -e jffs_system.jffs2 mtd3-jffs_system.jffs2
dd if=jffs_system.jffs2 of=/dev/mtdblock0
mount /dev/mtdblock0 mount/ -t jffs2

Debrick

generic.debrick

Debrick the device flashing the redboot:
If your redboot is broken, you can put a new working redboot via JTAG. First you'll need to do byte reordering with an utility. Use redim (darkfader tool):

./redim *,2,-2 -i redboot.rom -o CUSTOM.BIN
The utility and CUSTOM.BIN already reordered:
http://files.myopera.com/danitool/livebox/redboot03_jtag.zip

Now, plug the power and enter the comand:

rmmod lp
nice ./debrick -flash:custom /window:1fc00000 /start:1fc00000 /length:30000 /silent /nodma
If the JTAG utility stops with the message:
Halting Processor ... <Procesor did NOT enter Debug Mode!>
and nothing else happens, then you'll need to deal with System Reset (bridged to nTRST) pin to perform a fast reset before flashing. Also in the BIOS of your PC, you may need to set Parallel Port into ECP, EPP or "Bi-Directional" mode. Read on: IEEE 1284 modes.

Debricking with this method is tested and working fine. This is a successful session of restoring the redboot via JTAG:

[root@tool hairydebrick]# nice ./debrick -flash:custom /window:1fc00000 /start:1fc00000 /length:30000 /silent /nodma ==================================== WRT54G/GS EJTAG Debrick Utility v4.8 ==================================== Probing bus ... Done Instruction Length set to 5 CPU Chip ID: 00000110001101001000000101111111 (0634817F) *** Found a Broadcom BCM6348 Rev 1 CPU chip *** - EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904) - EJTAG Version ....... : 1 or 2.0 - EJTAG DMA Support ... : Yes *** DMA Mode Forced Off *** Issuing Processor / Peripheral Reset ... Done Enabling Memory Writes ... Done Halting Processor ... ... Done Clearing Watchdog ... Done Probing Flash at (Flash Window: 0x1fc00000) ... Done Flash Vendor ID: 00000000000000000000000000000001 (00000001) Flash Device ID: 00000000000000000010001000000000 (00002200) *** Found a AMD 29lv320MB 2Mx16 BotB (4MB) Flash Chip *** - Flash Chip Window Start .... : 1fc00000 - Flash Chip Window Length ... : 00400000 - Selected Area Start ........ : 1fc00000 - Selected Area Length ....... : 00030000 *** You Selected to Flash the CUSTOM.BIN *** ========================= Flashing Routine Started ========================= Total Blocks to Erase: 10 Erasing block: 1 (addr = 1fc00000)...Done Erasing block: 2 (addr = 1fc02000)...Done Erasing block: 3 (addr = 1fc04000)...Done Erasing block: 4 (addr = 1fc06000)...Done Erasing block: 5 (addr = 1fc08000)...Done Erasing block: 6 (addr = 1fc0a000)...Done Erasing block: 7 (addr = 1fc0c000)...Done Erasing block: 8 (addr = 1fc0e000)...Done Erasing block: 9 (addr = 1fc10000)...Done Erasing block: 10 (addr = 1fc20000)...Done Loading CUSTOM.BIN to Flash Memory... Done (CUSTOM.BIN loaded into Flash Memory OK) ========================= Flashing Routine Complete ========================= elapsed time: 4319 seconds *** REQUESTED OPERATION IS COMPLETE *** [root@tool hairydebrick]#

GPIOs

There are 37 GPIOs, probably some of them are unused, these seems to be the pretended use of each one, this may depend of the board version (ie: some boards have pccard, or DSP).

GPIO direction hardware function
GPIO_00 …………. GPIO_05 OUT led
GPIO_06 OUT AC101L_RESET# and led_DS7 and DSP_RST_N
GPIO_07 IN button 2
GPIO_08, …………., GPIO_15 IN MII BLK
GPIO_16, …………., GPIO_27 IN PCI PCCARD BLK
GPIO_28 OUT BT_DECT_RST
GPIO_29 IN BCM5325_SPI_SS#
GPIO_30 - NC
GPIO_31 IN DECT_SPI_SS#
GPIO_32 IN BCM5325_MDC or AC101L_MDC
GPIO_33 IN BT_INT
GPIO_34 IN DECT_INT
GPIO_35 IN DSP_INT2#
GPIO_36 IN button 1

SPI

Serial Peripheral Interface

Conected to a bluetooth device bb4g-t10 (no information available)
If we remove the paper over the bluetooth IC we can see the exact part number:
NXP PCD80715HL - (VEGA THUNDERBIRD BASEBAND IC family bought by DSPG)
This is the SPI pinout, and some gpios. Note a second twin unsoldered connector, it also has SPI (pads 6, 7, 8, bridged to the bluetooth connector).
SPI testpoints The SPI pins are also located here at these testpoints.

USB

The livebox has two USBs, they work at full speed using the OHCI module:

One is a host usb 1.1. In the pic you can see the schematic.
There is a known problem with hotplugging, everytime you plug a device in the usb, the board restarts itself. This maybe caused by a faulty hardware design. We can solve it soldering another electrolytic capacitor in parallel with the 10uF one. Use a 470 uF one (see pic)
The second USB port is slave. In OpenWrt this port is totally useless, in fact the preliminary support for UDC has been dropped. You can mod this port to convert it to a host port (see USB Mod), as a result of this you will have two working usb host ports in your board.

DSP

Digital Signal Processor

GPIOs DSP Some liveboxes boards have a TMS320VC5402 Digital Signal Processor like in the DV4410 or DV3210.
In the pic you can see relevant GPIOs used by the DSP when present.
BTW, it seems there aren't in any case drivers for DSPs FIXME

PCMCIA

Bootloader Mods

→ you could read about bootloader in general

There are several Redboot mods for this board, even those redboots can work with other boards. The redboot sourcecode and the patch used to build redboot:
redboot-blue5g.tar.gz

Redboot RAM

For flashing a new Redboot with Redboot we need a RAM redboot version
http://files.myopera.com/danitool/livebox/redbootRAMBL.img

First gain access Redboot through the serial console.
Or if you already are using a modded Redboot with telnet enabled just use the ethernet cable (yellow port). Use the button1, press while powering on, wait 5 seconds and release the button:

telnet 10.7.58.112 9000

put the redbootRAMBL.img into your tftp server. And then:

RedBoot> load -v redbootRAMBL.img
...
RedBoot> go
... 
Open another terminal console and telnet it again
telnet 10.7.58.112 9000

be sure you are now using the RAM version:

RedBoot> version
RedBoot(tm) bootstrap and debug environment [RAM]
And now flash the new redboot

RedBoot>load -v -r -b 0x80800000 newredboot.rom
....
RedBoot>fis create RedBoot -r 0xBE400000 -e 0x00000000
......

flashcp for flashing a new bootloader

We can also install a new bootloader from inside Openwrt. With the OEM inventel firmware fcp can write the bootloader image to the mtd0 partition. And with Openwrt firmware we can use flashcp (fcp is the old flashcp name).

opkg update
opkg install mtd-utils-flashcp
Now proceed with flashing:
root@OpenWrt:/# cd /tmp
root@OpenWrt:/# wget ftp://ourlocalserver/newbootloader.rom
....
root@OpenWrt:/# flashcp -v newbootloader.rom /dev/mtd0
.....

CFE

There exists a fully featured CFE for the livebox. The board IDs are blue5g9 (DV4210) and blue5g6.3 (livebox pro V1). However not (yet) supported officially by Openwrt. It maybe more comfortable for most users since CFE has a web server for updating firmwares.

Here the links for the CFE binary, prebuilt firmwares and the patch for Backfire
CFE_blue5g9-nvr.zip
livebox1_backfire_firmwares-CFE.zip

Hardware mods

→ as a beginner, you really should inform yourself about soldering in general and then obtain some practical experience!

64MiB RAM Mod

The RAM and the flash chip are located under the minipci. For this mod you'll need two RAM chips 32 MiB each one. Note this board uses SDR, and each chip is 16bit bus width. Check datasheets before choosing a suitable RAM chip.
Both chips should be identical. And you'll need a custom bootloader to recognize 64 MB, 2 chips (32 bit bus width). Here the custom Redboot/CFE for this and other RAM sizes/confirgurations
livebox1-bootloaders-cfe_redboot.zip

USB Mod

You can convert your usb slave port to host. See details in the pics:

The mod is very simple, but to isolate the USB1_PWRFLT (AD12) is very difficult since you must cut two layers of copper, making a deep ditch. Don't try to isolate the pin (and thus this mod) if you don't know what are you doing.
The 470uF electrolytic capacitor is optional but highly recommendable to avoid problems with hotplugging. The capacitors at the D+ D- lines are already present in the board, thus you won't need to solder them.

Now for making it work we need to patch the kernel. This is the patch for Backfire:

--- a/drivers/usb/host/ohci-bcm63xx.c
+++ b/drivers/usb/host/ohci-bcm63xx.c
@@ -24,7 +24,6 @@
          * port 2 can be shared with USB slave, but all boards seem to
          * have only one host port populated, so we can hardcode it
          */
-	ohci->num_ports = 1;
 
 	ret = ohci_init(ohci);
 	if (ret < 0)
@@ -80,7 +79,7 @@
 
 		clk_enable(clk);
 		usb_host_clock = clk;
-		bcm_rset_writel(RSET_OHCI_PRIV, 0, OHCI_PRIV_REG);
+		bcm_rset_writel(RSET_OHCI_PRIV, 1, OHCI_PRIV_REG);
 
 	} else if (BCMCPU_IS_6358()) {
 		reg = bcm_rset_readl(RSET_USBH_PRIV, USBH_PRIV_SWAP_REG);
Build Openwrt with this patch and flash the new firmware, or just replace your ohci-hcd.ko module with the new one in the router. This is a log from dmesg with both USBs working as hosts:

.... .... NET: Registered protocol family 24 nf_conntrack version 0.5.0 (213 buckets, 852 max) ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver bcm63xx_ohci bcm63xx_ohci.0: BCM63XX integrated OHCI controller bcm63xx_ohci bcm63xx_ohci.0: new USB bus registered, assigned bus number 1 bcm63xx_ohci bcm63xx_ohci.0: irq 20, io mem 0xfffe1b00 usb usb1: configuration #1 chosen from 1 choice hub 1-0:1.0: USB hub found hub 1-0:1.0: 2 ports detected Initializing USB Mass Storage driver... usbcore: registered new interface driver usb-storage USB Mass Storage support registered. usb 1-1: new full speed USB device using bcm63xx_ohci and address 2 usb 1-1: configuration #1 chosen from 1 choice scsi0 : SCSI emulation for USB Mass Storage devices scsi 0:0:0:0: CD-ROM Vodafone CD ROM (Huawei) 2.31 PQ: 0 ANSI: 2 usb 1-2: new full speed USB device using bcm63xx_ohci and address 3 usb 1-2: configuration #1 chosen from 1 choice scsi1 : SCSI emulation for USB Mass Storage devices scsi 1:0:0:0: Direct-Access M-Sys Dell Memory Key 4.60 PQ: 0 ANSI: 0 CCS sd 1:0:0:0: [sda] 239872 512-byte logical blocks: (122 MB/117 MiB) sd 1:0:0:0: [sda] Write Protect is off sd 1:0:0:0: [sda] Assuming drive cache: write through sd 1:0:0:0: [sda] Assuming drive cache: write through sda: sda1 sd 1:0:0:0: [sda] Assuming drive cache: write through sd 1:0:0:0: [sda] Attached SCSI removable disk

Firmware mods

Bootlogs

OEM bootlog

96432SDRAM16bit_5GX101201234 Hardware version 0x90 BLUE5G.9 56+678ESA: 30:78:30:30:3a:30 WEP KEY : FFFFFFFFFFFFFFFFFFFFFFFFFF Auto-negotiation timed-out 10 MB Half-Duplex (assumed) Ethernet eth0: MAC address 30:78:30:30:3a:30 IP: 10.7.58.112, Default server: 10.7.58.114 Hardware version 0x10 BLUE5G.9 WITHOUT_OPTION Factory Settings Recovery Switch OFF High Register : 1f RedBoot(tm) bootstrap and debug environment [ROM] Non-certified release, version release-wanadoo-fr - built 16:25:10, Jun 20 2006 Platform: Blue_5g (MIPS32 4Kc) Copyright (C) 2000, 2001, 2002, Red Hat, Inc. RAM: 0x80000000-0x81000000, [0x80445fb0-0x80fe2000] available FLASH: 0xbe400000 - 0xbec00000, 128 blocks of 0x00010000 bytes each. == Executing boot script in 0.050 seconds - enter ^C twice to abort hit ' ' (0x0A) == Executing boot script in 0.040 seconds - enter ^C twice to abort RedBoot> fis load -b 0x80010000 -m cramfs -f Image user_fs Partition is : 0xbe430000 - 0x390000 mlen : 0x36d038 begin_tag : 0xbe79d000, end : 0xbe79d038 Verif OK Looking for Image in cramfs user_fs partition cramfs_load : b 0x80010000, c 0xBE430000, s 0x00390000, f Image unable to find magic Found a valid SQUASHFS superblock on user_fs. Inodes are compressed Data is compressed Fragments are compressed Check data is not present in the filesystem Fragments are present in the filesystem Always_use_fragments option is not specified Duplicates are removed Filesystem size 3590371 bytes Block size 65536 Number of fragments 32 Number of inodes 702 Number of uids 1 Number of gids 0 Scanning existing filesystem... Read existing filesystem, 701 inodes scanned Return with root_try==0 RedBoot> exec -c "boot_loader=RedBoot root=1F01 mem=16M" 0x80010000 root_try == 0 : leave boot cmd alone Now booting linux kernel: Base address 0x8000fc00 Entry 0x80010000 Cmdline : boot_loader=RedBoot root=1F01 mem=16M hwversion=BLUE5G.9-WITHOUT_OPTION redbootversion="release-wanadoo-fr-Jun 20 2006-16:25:10" Linux version 2.6.12.6 (lenerk@rennslxcomp25) (gcc version 3.4.2) #1 Tue Jan 18 16:19:04 CET 2011 C0 config : 2147516544x CPU revision is: 00029107 mpi: No Card is in the PCMCIA slot Determined physical RAM map: memory: 00fa0000 @ 00000000 (usable) memory: 00060000 @ 00fa0000 (reserved) On node 0 totalpages: 4000 DMA zone: 4000 pages, LIFO batch:1 Normal zone: 0 pages, LIFO batch:1 HighMem zone: 0 pages, LIFO batch:1 Built 1 zonelists Kernel command line: boot_loader=RedBoot root=1F01 hwversion=BLUE5G.9-WITHOUT_OPTION redbootversion="release-wanadoo-fr-Jun 20 2006-16:25:10" brcm mips: enabling icache and dcache... Primary instruction cache 16kB, physically tagged, 2-way, linesize 16 bytes. Primary data cache 8kB, 2-way, linesize 16 bytes. Synthesized TLB refill handler (19 instructions). Synthesized TLB load handler fastpath (31 instructions). Synthesized TLB store handler fastpath (31 instructions). Synthesized TLB modify handler fastpath (30 instructions). PID hash table entries: 64 (order: 6, 1024 bytes) Using 128.000 MHz high precision timer. Dentry cache hash table entries: 4096 (order: 2, 16384 bytes) Inode-cache hash table entries: 2048 (order: 1, 8192 bytes) Memory: 13092k/16000k available (1861k kernel code, 2888k reserved, 251k data, 340k init, 0k highmem) Calibrating delay loop... (HZ=200) 255.59 BogoMIPS (lpj=638976) Mount-cache hash table entries: 512 Checking for 'wait' instruction... unavailable. NET: Registered protocol family 16 Squashfs 2.2 (released 2005/07/03) (C) 2002-2005 Phillip Lougher devfs: 2004-01-31 Richard Gooch (rgooch@atnf.csiro.au) devfs: boot_options: 0x1 JFFS2 version 2.2. (C) 2001-2003 Red Hat, Inc. io scheduler noop registered lo:register_netdevice:2847 PPP generic driver version 2.4.2 NET: Registered protocol family 24 initialize redboot parser Found: AMD AM29LV640MB Inventel Blue5G Flash: Found 1 x16 devices at 0x0 in 16-bit bank number of JEDEC chips: 1 cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness. parse_redboot_partitions Searching for RedBoot partition table in Inventel Blue5G Flash at offset 0x7f0000 6 RedBoot partitions found on MTD device Inventel Blue5G Flash Creating 6 MTD partitions on "Inventel Blue5G Flash": 0x00000000-0x00030000 : "RedBoot" 0x00030000-0x003c0000 : "user_fs" 0x003c0000-0x00750000 : "user_2_fs" 0x00750000-0x007f0000 : "jffs_system" 0x007f0000-0x007ff000 : "FIS directory" 0x007ff000-0x00800000 : "RedBoot config" bcm963xx_serial driver v2.0 u32 classifier OLD policer on input device check on NET: Registered protocol family 2 IP: routing cache hash table of 512 buckets, 4Kbytes TCP established hash table entries: 1024 (order: 1, 8192 bytes) TCP bind hash table entries: 1024 (order: 0, 4096 bytes) TCP: Hash tables configured (established 1024 bind 1024) ip_conntrack version 2.1 (125 buckets, 1000 max) - 212 bytes per conntrack ip_tables: (C) 2000-2002 Netfilter core team NET: Registered protocol family 1 NET: Registered protocol family 17 Ebtables v2.0 registered NET: Registered protocol family 8 NET: Registered protocol family 20 VFS: Mounted root (squashfs filesystem) readonly. Mounted devfs on /dev Freeing unused kernel memory: 340k freed init started: BusyBox v1.1.3 (2011.01.18-15:26+0000) multi-call binary init started: BusyBox v1.1.3 (2011.01.18-15:26+0000) multi-call binary Starting pid 15, console /dev/tts/0: '/etc_ro_fs/init.d/sysinit' Algorithmics/MIPS FPU Emulator v1.5 SYSINIT INVENTEL version : v5.11.13-sip-sp Mounting proc filesystem ... Mounting tmpfs filesystem ... > NORMAL BOOT < + [ -f /etc_ro_fs/autoconf.conf ] + . /etc_ro_fs/autoconf.conf + CONFIG_TARGET_NAME=WANADOO + CONFIG_TARGET_NAME_ALTERNATE=y + CONFIG_TARGET_NAME_ALTERNATE_NAME=Livebox + CONFIG_GENERATION_5G=y + CONFIG_GATEWAY_RESIDENTIAL=y + CONFIG_BCM_VARIANT=6348 + CONFIG_LINUX_2_6=y + CONFIG_LB2_NONE=y + CONFIG_RELEASE=y + CONFIG_STRIP_LIBS=y + CONFIG_DEFAULT_KERNEL_CONFIG_FILE=Config-LiveBox1-5G + CONFIG_DEFAULT_BUSYBOX_CONFIG_FILE=Config-Wanadoo-Release + CONFIG_ROOT_SQUASHFS=y + CONFIG_ROOT_SPLIT=y + CONFIG_RELEASE_BASE_DIR_HOME=y + CONFIG_GENERATE_WEBUPDATE=y + CONFIG_GENERATE_WEBUPDATE_COMPLETEUPGRADECLONE=y + CONFIG_GENERATE_WEBUPDATE_PARTIALUPGRADECLONE=y + CONFIG_DEFAULT_UPDATE_DIRECTORY=inventel/blue_5g/wanadoo-sp/release-d + CONFIG_DEFAULT_UPDATE_DIRECTORY_FORCE=y + CONFIG_DEFAULT_UPDATE_MACHINE=developers.inventel.com + CONFIG_DEFAULT_UPDATE_USERNAME=inventel + CONFIG_DEFAULT_UPDATE_PASSWORD=inventel + CONFIG_UPDATE_ALERT=y + CONFIG_UPDATE_AUTOUPDATE_DELAY=1 + CONFIG_UPDATE_AUTOUPDATE_ON_FIRST_PPP=y + CONFIG_AUTOUPDATE_CRON=y + CONFIG_UPDATE_AUTOUPDATE_CRON_DELAY=864000 + CONFIG_VERSION_NAME_MAJOR=5.11 + CONFIG_VERSION_NAME_MINOR_TYPE=. + CONFIG_VERSION_NAME_MINOR=13 + CONFIG_VERSION_NAME_SUFFIX=-sip-sp + CONFIG_VERSION_FQN=v5.11.13-sip-sp + CONFIG_HW_VERSION=1.0 + CONFIG_INCLUDE_PUBKEY=y + CONFIG_PUBKEY_FILENAME=release-wanadoo-fr + CONFIG_ADDRESS_192_168=y + CONFIG_ADDRESS_IP_0=192.168.1.1 + CONFIG_ADDRESS_NETMASK_0=255.255.255.0 + CONFIG_ADDRESS_BROADCAST_0=192.168.1.255 + ADVANCE_MEMORY_CONFIGURATION=y + CONFIG_FLASH_64MBIT=y + CONFIG_SDRAM_128MBIT=y + CONFIG_PAIRABLE_TIMEOUT=600 + CONFIG_STACK_BLUEZ=y + CONFIG_BLUEZ_RFCOMM=y + CONFIG_BLUEZ_SDPD=y + CONFIG_BLUEZ_PAN=y + CONFIG_BT_WATCHDOG=y + CONFIG_BLUETOOTH=y + CONFIG_BTNAME_HOSTNAME=y + CONFIG_BLUETOOTH_OFF=y + CONFIG_BLUETOOTH_ALTERNATE=y + CONFIG_BLUETOOTH_ALTERNATE_VERSION=0x34313832 + CONFIG_DECT_HCI=y + CONFIG_DECT_BUTTON_PAIRING=y + CONFIG_DECT_BUTTON_PAGING=y + CONFIG_DECT_USB_SERIAL=y + CONFIG_DECT_USB=y + CONFIG_DECT_USB_API_G=y + CONFIG_DECT_DISABLE_UPDATE=y + CONFIG_BLUEZ_TEST=y + CONFIG_DEVGATEWAY=y + CONFIG_INCLUDE_ENGLISH_ORANGE_SP=y + CONFIG_INCLUDE_SPANISH_ORANGE=y + CONFIG_DEFAULT_SPANISH_ORANGE=y + CONFIG_ADSL=y + CONFIG_ADSL_RTC=y + CONFIG_ADSL_A2pBT009c1=y + CONFIG_ADSL_PPP_NAME=orangeuser@orangeadsl + CONFIG_ADSL_PPP_PASS=orangeuser123 + CONFIG_ADSLCTL=y + CONFIG_ADSL_MOD_AUTO=y + CONFIG_PPPOE_PASSTHRU=y + CONFIG_ADSL_SET_MAX_UPLOAD_ON_SYNCHRO=y + CONFIG_ADSL_SET_MAX_UPLOAD_ON_SYNCHRO_WOO_SP=y + CONFIG_ADSL_BRIDAGE_WOO_SP=y + CONFIG_ADSL_DEFAULT_BRIDAGE_PROFILE=2 + CONFIG_ADSL_VP=8 + CONFIG_ADSL_VC=35 + CONFIG_ADSL_PROTOCOL=pppoe + CONFIG_ADSL_ENCAPS=LLCMUX + CONFIG_ADSL_MAX_CONNECT_TIME=597600 + CONFIG_BCM_USB=y + CONFIG_BCM_USB_PRODUCT_NAME=Inventel Gateway + CONFIG_USB_HOST=y + CONFIG_USBMGR=y + CONFIG_WIRELESS_LAN=y + CONFIG_WIRELESS_LAN_WEPONLY_HANDLED_BY_NAS=y + CONFIG_WIFI_MAC_FILTER=y + CONFIG_WIFI_BLUETOOTH_COEXISTENCE=y + CONFIG_WIRELESS_BCMTOOLS=y + CONFIG_UPNP=y + CONFIG_EBTABLES=y + CONFIG_IPROUTE2=y + CONFIG_IPROUTE2_IP=y + CONFIG_IPROUTE2_TC=y + CONFIG_REMOTE_MGT=y + CONFIG_COUNTRY_SPAIN=y + CONFIG_SUPPORT_TPSL=y + CONFIG_DHCP_MONITOR=y + CONFIG_SUPPORT_TPSL_ON_DEFAULT=y + CONFIG_SUPPORT_VISIO=y + CONFIG_WIFI_SECURITY_WPA_ONLY=y + CONFIG_DEFINITIVE_PASSWORD=y + CONFIG_WANADOO_SERVER_KIT_DB=y + CONFIG_WANADOO_DB_UPDATE_DELAY=1 + CONFIG_FT_SERVER_KIT_URL=http://suivilb.wanadoo.fr/servlets/maj + CONFIG_FT_SERVER_KIT_COUNTRY_CODE=1034 + CONFIG_FT_UPDATE_SOLUTION=y + CONFIG_FEATURE_UPDATE_FT=y + CONFIG_SUPPORT_FIRMWARE_PUSH=y + CONFIG_SUPPORT_HOMELIVE=y + CONFIG_GENERIC_SPI=y + CONFIG_WEB=y + CONFIG_WEB_LEFT_MENU_STYLE=y + CONFIG_WEB_LOGIN=admin + CONFIG_WEB_PASSWORD=admin + CONFIG_WEB_WANADOO_LIVEBOX_2=y + CONFIG_WEB_ORANGE=y + CONFIG_UPNP_DEFAULT=y + CONFIG_VOIP=y + CONFIG_VOIP_INVH323_UMA_FT=y + CONFIG_VOIP_INVH323_UMA_FT_SECGW=sgw.orange.es + CONFIG_VOIP_INVH323_UMA_FT_QOS=y + CONFIG_DSCP_REMARKING=y + CONFIG_VOIP_RADVISION=y + CONFIG_VOIP_RADVISION_SPAIN=y + [ ! -f /etc_ro_fs/autoconf.conf ] + [ -z y ] + cat /proc/mtd + grep user.*_fs+ cut -f1 -d: + mtdlist=mtd1 mtd2 + [ -h /dev/root ] + ls -al /dev/root + sed s/.* -> mtdblock/mtd/ + mtdroot=mtd1 + echo mtd1 mtd2 + sed s/mtd1// + mtdlist= mtd2 + echo mtd2 + sed s/mtd// + mtdlist=2 + echo 2 2 + echo Try to mount /dev/mtdblock2 on /usr Try to mount /dev/mtdblock2 on /usr + flash_verify /dev/mtd2 0x29032005 Magic: 29032005 /dev/mtd2: opening... /dev/mtd2: reading signature... Signature (48 bytes): 94 00 03 02 00 14 9b 37 26 58 31 f2 32 5a d6 b8 48 1b 13 d1 47 f6 0f b2 6c d4 00 14 69 ec 6d 07 8a a7 b3 34 e9 f1 c3 8a 32 12 34 9a e9 f5 77 a4 /dev/mtd2: hashing... /dev/mtd2: importing public key... /dev/mtd2: verifying hash... /dev/mtd2: verification OK + mount -t squashfs /dev/mtdblock2 /usr + result=0 + [ ! 0 -eq 0 ] + rm -f /var/run/rescue_boot + break + [ ! -e /etc/rc.d ] + rm -f /tmp/touch.test + find /lib/modules// -name prod_test* + insmod /lib/modules//2.6.12.6/extra/prod_test.ko prod_test: module license 'Proprietary' taints kernel. insmod: cannot insert `/lib/modules//2.6.12.6/extra/prod_test.ko': Success (1): Success + [ 1 = 0 ] + [ -n mtd0 ] + cat /proc/mtd dev: size erasesize name mtd0: 00030000 00010000 "RedBoot" mtd1: 00390000 00010000 "user_fs" mtd2: 00390000 00010000 "user_2_fs" mtd3: 000a0000 00010000 "jffs_system" mtd4: 0000f000 00010000 "FIS directory" mtd5: 00001000 00010000 "RedBoot config" + cat /proc/mtd + grep jffs_system + sed -n s/\(mtd\)\(.*\):\(.\)*/\2/p + mount -t jffs2 -o rw /dev/mtdblock3 /mnt/jffs2/jffs2_3 + rm -f /tmp/touch.test + touch /tmp/touch.test + [ ! -e /tmp/touch.test ] + rm -f /tmp/touch.test + [ -e /tmp/touch.test ] + [ ! -f /mnt/jffs2/jffs2_3/etc/issue ] + [ ! -f /mnt/jffs2/jffs2_3/etc/finished ] + cat /etc/issue.bluedsl + grep version + x=INVENTEL version : v5.11.13-sip-sp + cat /etc_ro_fs/issue.bluedsl + grep version + y=INVENTEL version : v5.11.13-sip-sp + [ INVENTEL version : v5.11.13-sip-sp = INVENTEL version : v5.11.13-sip-sp ] + echo Up to date version INVENTEL version : v5.11.13-sip-sp Up to date version INVENTEL version : v5.11.13-sip-sp + [ -f /usr/etc_ro_fs/init.d/usrboot ] + /usr/etc_ro_fs/init.d/usrboot + rm -f /var/run/rescue_boot + [ ! -f /usr/etc/finished ] + grep version + cat /usr/etc/issue.bluedsl + x=INVENTEL version : v5.11.13-sip-sp + cat /usr/etc_ro_fs/issue.bluedsl + grep version + y=INVENTEL version : v5.11.13-sip-sp + [ INVENTEL version : v5.11.13-sip-sp = INVENTEL version : v5.11.13-sip-sp ] + echo /usr up to date version INVENTEL version : v5.11.13-sip-sp /usr up to date version INVENTEL version : v5.11.13-sip-sp + exit 0 + exit 0 Starting pid 99, console /dev/tts/0: '/etc_ro_fs/init.d/rc.sysinit' Mounting other filesystems ... cp: /etc/crontab_root: No such file or directory + echo Switching to RUNLEVEL 1 ... Switching to RUNLEVEL 1 ... + runlevel_manage 1 + local previous + runlevel=1 + [ -f /var/run/runlevel ] + previous=N + [ 1 = N ] + local scriptlist directorylist + directorylist=/etc/rc1.d/:/usr/etc/rc1.d/ + OLDIFS= + IFS=: + scriptlist= + find /etc/rc1.d/ -name K* + sed s,/etc/rc1.d/,, + scriptlist= + find /usr/etc/rc1.d/ -name K* + sed s,/usr/etc/rc1.d/,, + scriptlist= + sort -u + scriptlist= + echo 1 + echo 108 + scriptlist= + find /etc/rc1.d/ -name S* + sed s,/etc/rc1.d/,, + scriptlist=S84usbdect_apig S20network S25update_ft S10adsl S26pair S27http_server S25wireless S22backlight S05hardware S99printkoff S25dhcp_dns_server + find /usr/etc/rc1.d/+ sed s,/usr/etc/rc1.d/,, -name S* + scriptlist=S22usb-host S22upnp S28krtp S85voip S27bluetooth S90post_webupgrade S84usbdect_apig S20network S25update_ft S10adsl S26pair S27http_server S25wireless S22backlight S05hardware S99printkoff S25dhcp_dns_server + echo S22usb-host + sort -u + echo S22upnp + echo S28krtp + echo S85voip + echo S27bluetooth + echo S90post_webupgrade + echo S84usbdect_apig + echo S20network + echo S25update_ft + echo S10adsl + echo S26pair + echo S27http_server + echo S25wireless + echo S22backlight + echo S05hardware + echo S99printkoff + echo S25dhcp_dns_server + scriptlist=S05hardware S10adsl S20network S22backlight S22upnp S22usb-host S25dhcp_dns_server S25update_ft S25wireless S26pair S27bluetooth S27http_server S28krtp S84usbdect_apig S85voip S90post_webupgrade S99printkoff + [ -f /etc/rc1.d/S05hardware ] + realscript=/etc/rc1.d/S05hardware + [ 1 != N ] + number=05hardware + echo 05hardware + cut -c 1-2 + number=05 + echo 05 + suffix=hardware + stop=/etc/rc1.d/K[0-9][0-9]hardware + echo /etc/rc1.d/ + sed s,rc1,rcN, + previous_start=/etc/rcN.d/S[0-9][0-9]hardware + [ -f /etc/rcN.d/S[0-9][0-9]hardware ] + sh /etc/rc1.d/S05hardware start Starting core drivers... Watchdog init Build: Jan 18 2011 16:28:01 irq register OK SPI driver Jan 18 2011 16:28:00 usage: insmod spi.o [debug=1] [tty_low_latency=1] Broadcom BCM6348B0 Ethernet Network Device v0.3 Jan 18 2011 16:17:14 Config Internal PHY Through MDIO BCM63xx_ENET: Auto-negotiation timed-out BCM63xx_ENET: 100 MB Full-Duplex (auto-neg) eth0:register_netdevice:2847 eth0: MAC Address: 00:07:3A:FF:FF:FF Broadcom BCM6348B0 Ethernet Network Device v0.3 Jan 18 2011 16:17:14 Config External PHY Through MDIO eth0 Link UP. BCM63xx_ENET: Auto-negotiation timed-out BCM63xx_ENET: 10 MB Half-Duplex (assumed) eth1:register_netdevice:2847 eth1: MAC Address: 00:07:3A:FF:FF:FF USB MAC ADDRESS belongs to 30:78:30:30:3A:32 USB HOST MAC ADDRESS belongs to 30:78:30:30:3A:33 Broadcom BCM6348B0 USB Network Device v0.4 Jan 18 2011 16:17:15 usb0: MAC Address: 30 78 30 30 3A 32 usb0: Host MAC Address: 30 78 30 30 3A 33 usb0:register_netdevice:2847 Switch module creating proc entry dummy0:register_netdevice:2847 dummy1:register_netdevice:2847 + break + [ -f /etc/rc1.d/S10adsl ] + realscript=/etc/rc1.d/S10adsl + [ 1 != N ] + number=10adsl + echo 10adsl + cut -c 1-2 + number=10 + echo 10 + suffix=adsl + stop=/etc/rc1.d/K[0-9][0-9]adsl + echo /etc/rc1.d/ + sed s,rc1,rcN, + previous_start=/etc/rcN.d/S[0-9][0-9]adsl + [ -f /etc/rcN.d/S[0-9][0-9]adsl ] + sh /etc/rc1.d/S10adsl start Loading ADSL & ATM kernel modules... Starting ADSL daemon... + break + [ -f /etc/rc1.d/S20network ] + realscript=/etc/rc1.d/S20network + [ 1 != N ] + number=20network + echo 20network + cut -c 1-2 + number=20 + echo 20 + suffix=network + stop=/etc/rc1.d/K[0-9][0-9]network + echo /etc/rc1.d/ + sed s,rc1,rcN, + previous_start=/etc/rcN.d/S[0-9][0-9]network + [ -f /etc/rcN.d/S[0-9][0-9]network ] + sh /etc/rc1.d/S20network start BcmAdsl_Initialize=0xC00DF0C8, g_pFnNotifyCallback=0xC00F4034 pSdramPHY=0xA0FFFFF8, 0xD1AA192F 0xDEADDEAD AdslCoreHwReset: AdslOemDataAddr = 0xA0FFDE10 AdslCoreEcUpdTmr: timeMs=-280130 ecUpdMask=0x40000 Local network configuration ... Ethernet network configuration ... Hostname configuration : WANADOO- br0:register_netdevice:2847 device usb0 entered promiscuous mode br1:register_netdevice:2847 device eth0 entered promiscuous mode br1: port 1(eth0) entering learning state device eth1 entered promiscuous mode br0: port 2(eth1) entering learning state br0: port 1(usb0) entering learning state Killing dhcp-monitor with SIGTERM (1/5)... br1: topology change detected, propagating br1: port 1(eth0) entering forwarding state br0: topology change detected, propagating br0: port 2(eth1) entering forwarding state br0: topology change detected, propagating br0: port 1(usb0) entering forwarding state device dummy0 is not a slave of br1 device dummy0 entered promiscuous mode br1: port 2(dummy0) entering learning state + break + [ -f /etc/rc1.d/S22backlight ] + realscript=/etc/rc1.d/S22backlight + [ 1 != N ] + number=22backlight + echo 22backlight + cut -cdevice eth0 left promiscuous mode br1: port 1(eth0) entering disabled state delif eth0 from br1, result: 0 addif eth0 to br1, result: 16 1-2 + number=22 + echo 22 + suffix=backlight + stop=/etc/rc1.d/K[0-9][0-9]backlight + echo /etc/rc1.d/ + sed s,rc1,rcN, + previous_start=/etc/rcN.d/S[0-9][0-9]backlight + [ -f /etc/rcN.d/S[0-9][0-9]backlight ] + sh /etc/rc1.d/S22backlight start Update Backlight state On Advanced Device open failed: Address family not supported by protocol + break + [ -f /etc/rc1.d/S22upnp ] + [ -f /usr/etc/rc1.d/S22upnp ] + realscript=/usr/etc/rc1.d/S22upnp + [ 1 != N ] br1: topology change detected, propagating br1: port 2(dummy0) entering forwarding state + number=22upnp + echo 22upnp + cut -c 1-2 + number=22 + echo 22 + suffix=upnp + stop=/usr/etc/rc1.d/K[0-9][0-9]upnp + echo /usr/etc/rc1.d/ + sed s,rc1,rcN, + previous_start=/usr/etc/rcN.d/S[0-9][0-9]upnp + [ -f /usr/etc/rcN.d/S[0-9][0-9]upnp ] device eth0 entered promiscuous mode br1: port 1(eth0) entering learning state addif eth0 to br1, result: 0 device eth1 left promiscuous mode br0: port 2(eth1) entering disabled state delif eth1 from br0, result: 0 addif eth1 to br0, result: 16 + sh /usr/etc/rc1.d/S22upnp start No ADSL, default: abc0 Upnp init ... br1: topology change detected, propagating br1: port 1(eth0) entering forwarding state device eth1 entered promiscuous mode br0: port 2(eth1) entering learning state addif eth1 to br0, result: 0 MyConfig in /usr/etc/upnp.conf: Debug=0 descDocName: gatedesc.xml xmlPath: /usr/etc/linuxigd g_iptables: iptables g_forwardChainName: upnp g_preroutingChainName: upnp g_upstreamBitrate: 0 g_downstreamBitrate: 0 TGU: IpAddress: 192.168.1.1 + break + [ -f /etc/rc1.d/S22usb-host ] + [ -f /usr/etc/rc1.d/S22usb-host ] + realscript=/usr/etc/rc1.d/S22usb-host + [ 1 != N ] + number=22usb-host + echo 22usb-host + cut -c 1-2 + number=22 + echo 22 + suffix=usb-host + stop=/usr/etc/rc1.d/K[0-9][0-9]usb-host + echo /usr/etc/rc1.d/ + sed s,rc1,rcN, INFO : IGD root device successfully registered. + previous_start=/usr/etc/rcN.d/S[0-9][0-9]usb-host + [ -f /usr/etc/rcN.d/S[0-9][0-9]usb-host ] + sh /usr/etc/rc1.d/S22usb-host start br0: topology change detected, propagating br0: port 2(eth1) entering forwarding state usbcore: registered new driver usbfs usbcore: registered new driver hub ohci-hcd: 2004 Nov 08 USB 1.1 'Open' Host Controller (OHCI) Driver (PCI) PCI: Enabling device 0000:00:09.0 (0000 -> 0002) PCI: Setting latency timer of device 0000:00:09.0 to 64 ohci-hcd 0000:00:09.0: PCI device 14e4:6300 (Broadcom Corporation) ohci-hcd 0000:00:09.0: new USB bus registered, assigned bus number 1 ohci-hcd 0000:00:09.0: irq 20, io mem 0xfffe1b00 hub 1-0:1.0: USB hub found hub 1-0:1.0: 2 ports detected usbmgr[448]: start 0.4.8 usbmgr[448]: sleep time -1 micro sec Name: /usr/etc/usbmgr/usbmgr.conf Load_from_file: /usr/etc/usbmgr/preload.conf + break + [ -f /etc/rc1.d/S25dhcp_dns_server ] + realscript=/etc/rc1.d/S25dhcp_dns_server + [ 1 != N ] + number=25dhcp_dns_server + echo 25dhcp_dns_server + cut -c 1-2 + number=25 + echo 25 + suffix=dhcp_dns_server + stop=/etc/rc1.d/K[0-9][0-9]dhcp_dns_server + echo /etc/rc1.d/ + sed s,rc1,rcN, + previous_start=/etc/rcN.d/S[0-9][0-9]dhcp_dns_server + [ -f /etc/rcN.d/S[0-9][0-9]dhcp_dns_server ] + sh /etc/rc1.d/S25dhcp_dns_server start usbmgr[450]: buffer line: remove T usbmgr[450]: class:0x9 subclass:0x0 protocol:0x0 usbmgr[450]: try /usr/etc/usbmgr/class/09/00/00/module usbmgr[450]: try /usr/etc/usbmgr/class/09/00/module usbmgr[450]: try /usr/etc/usbmgr/class/09/module usbmgr[450]: try /usr/etc/usbmgr/class/module usbmgr[450]: USB device isn't matched the configuration dnsmasq configured as dhcp server sagem INFO : Advertisements Sent. Listening for requests ... sagem sagem sagem sagem sagem thomson thomson dnsmasq start ( DNS / DHCP server ) ... dnsmasq -o -r/etc/resolv.dnsmasq -z --dhcp-range=192.168.1.9,192.168.1.200,24h --dhcp-leasefile=/etc/dhcp.leases --dhcp-vendorclass novendor_sagem,sagem --dhcp-vendorclass novendor_thomson,thomson --dhcp-userclass nouser_sagem,IAD5116 --dhcp-userclass nouser_sagem,IAD61-17 --dhcp-userclass nouser_sagem,IAD80-16 --dhcp-userclass nouser_sagem,ITAD80-16 HD --dhcp-userclass nouser_sagem,ITAD81-160 --dhcp-userclass nouser_sagem,ITAD81 FT --dhcp-userclass nouser_thomson,IP921F --dhcp-userclass nouser_thomson,IP2031F --dhcp-userclass nouser_mltv,STB_MLTV --dhcp-userclass nouser_mltv,PC_MLTV --dhcp-ignore=nouser_mltv --dhcp-ignore=novendor_thomson,nouser_thomson --dhcp-ignore=novendor_sagem,nouser_sagem [p2] iface->name: br0 [p2] iface->name: lo + break + [ -f /etc/rc1.d/S25update_ft ] + realscript=/etc/rc1.d/S25update_ft + [ 1 != N ] + number=25update_ft + echo 25update_ft + cut -c 1-2 + number=25 + echo 25 + suffix=update_ft + stop=/etc/rc1.d/K[0-9][0-9]update_ft + echo+ sed s,rc1,rcN, /etc/rc1.d/ + previous_start=/etc/rcN.d/S[0-9][0-9]update_ft + [ -f /etc/rcN.d/S[0-9][0-9]update_ft ] + sh /etc/rc1.d/S25update_ft start France Telecom Firmware Update Client v1.12 Copyright Inventel 2005-2006 + break + [ -f /etc/rc1.d/S25wireless ] + realscript=/etc/rc1.d/S25wireless + [ 1 != N ] + number=25wireless + echo 25wireless + cut -c 1-2 + number=25 + echo 25 + suffix=wireless + stop=/etc/rc1.d/K[0-9][0-9]wireless + echo /etc/rc1.d/+ sed s,rc1,rcN, + previous_start=/etc/rcN.d/S[0-9][0-9]wireless + [ -f /etc/rcN.d/S[0-9][0-9]wireless ] + sh /etc/rc1.d/S25wireless start PCI: Setting latency timer of device 0000:00:01.0 to 64 PCI: Enabling device 0000:00:01.0 (0004 -> 0006) wl0:register_netdevice:2847 wl0: Broadcom BCM4318 802.11 Wireless Controller 3.131.35.0.cpe0.0 [p2] wl_event, bssid idx: 0 [p2] wl_event, dev: 00000000 [p2] dev == NULL, using wl->dev [p2] wl_event, dev->name: wl0 [p2] wlc_sendup_event, bssid:0 device wl0 entered promiscuous mode [p2] wl_event, bssid idx: 0 [p2] wl_event, dev: 00000000 [p2] dev == NULL, using wl->dev [p2] wl_event, dev->name: wl0 [p2] wlc_sendup_event, bssid:0 br0: port 3(wl0) entering learning state + break + [ -f /etc/rc1.d/S26pair ] + realscript=/etc/rc1.d/S26pair + [ 1 != N ] + number=26pair + echo 26pair + cut -c 1-2 + number=26 + echo 26 + suffix=pair + stop=/etc/rc1.d/K[0-9][0-9]pair + sed s,rc1,rcN, + echo /etc/rc1.d/ + previous_start=/etc/rcN.d/S[0-9][0-9]pair + [ -f /etc/rcN.d/S[0-9][0-9]pair ] + sh /etc/rc1.d/S26pair start Bad run level ... + break + [ -f /etc/rc1.d/S27bluetooth ] + [ -f /usr/etc/rc1.d/S27bluetooth ] Starting pairing manager br0: topology change detected, propagating br0: port 3(wl0) entering forwarding state + realscript=/usr/etc/rc1.d/S27bluetooth + [ 1 != N ] + number=27bluetooth + echo 27bluetooth + cut -c 1-2 + number=27 + echo 27 + suffix=bluetooth + stop=/usr/etc/rc1.d/K[0-9][0-9]bluetooth + echo /usr/etc/rc1.d/ + sed s,rc1,rcN, + previous_start=/usr/etc/rcN.d/S[0-9][0-9]bluetooth + [ -f /usr/etc/rcN.d/S[0-9][0-9]bluetooth ] + sh /usr/etc/rc1.d/S27bluetooth start Param: Update Backlight state On Advanced Device open failed: Address family not supported by protocol s_backlight : 1 Function cleanup_link_keys wifi_nb : 0 0 link keys removed /sbin/iwpriv wl0 del_mac ff:ff:ff:ff:ff:ff /sbin/iwpriv wl0 maccmd 0 Bluetooth configuration ... Bluetooth: Core ver 2.7 NET: Registered protocol family 31 Bluetooth: HCI device and connection manager initialized Bluetooth: HCI socket layer initialized Bluetooth: L2CAP ver 2.7 Bluetooth: L2CAP socket layer initialized Bluetooth: RFCOMM ver 1.5 Bluetooth: RFCOMM socket layer initialized Bluetooth: BNEP (Ethernet Emulation) ver 1.2 Bluetooth: HCI UART driver ver 2.1 Bluetooth: HCI H4 protocol initialized Bluetooth: HCI BCSP protocol initialized Bluetooth: SCO (Voice Link) ver 0.4 Bluetooth: SCO socket layer initialized üttySPI, 391Khz SPI: use CS0 on hardware that way have CS0 and CS2 linked, GPIOmode_grp1 configured to use PC-Card ttySPI, 391Khz ttySPI, 781Khz ttySPI, 781Khz ttySPI, 781Khz Hardware version: 0x31303032 - Software version: 0x34313832 Bluetooth is OFF in this configuration. Disable scan and exit. + break + [ -f /etc/rc1.d/S27http_server ] + realscript=/etc/rc1.d/S27http_server + [ 1 != N ] + number=27http_server + echo 27http_server + cut -c 1-2 + number=27 + echo 27 + suffix=http_server + stop=/etc/rc1.d/K[0-9][0-9]http_server + echo /etc/rc1.d/ + sed s,rc1,rcN, + previous_start=/etc/rcN.d/S[0-9][0-9]http_server + [ -f /etc/rcN.d/S[0-9][0-9]http_server ] + sh /etc/rc1.d/S27http_server start Websrv start ... + break + [ -f /etc/rc1.d/S28krtp ] + [ -f /usr/etc/rc1.d/S28krtp ] + realscript=/usr/etc/rc1.d/S28krtp + [ 1 != N ] + number=28krtp + echo 28krtp + cut -c 1-2 + number=28 + echo 28 + suffix=krtp + stop=/usr/etc/rc1.d/K[0-9][0-9]krtp + echo /usr/etc/rc1.d/ + sed s,rc1,rcN, + previous_start=/usr/etc/rcN.d/S[0-9][0-9]krtp + [ -f /usr/etc/rcN.d/S[0-9][0-9]krtp ] + sh /usr/etc/rc1.d/S28krtp start krtp start ... + break + [ -f /etc/rc1.d/S84usbdect_apig ] + realscript=/etc/rc1.d/S84usbdect_apig + [ 1 != N ] + number=84usbdect_apig + cut -c 1-2 + echo 84usbdect_apig + number=84 + echo 84 + suffix=usbdect_apig + stop=/etc/rc1.d/K[0-9][0-9]usbdect_apig + echo /etc/rc1.d/ + sed s,rc1,rcN, + previous_start=/etc/rcN.d/S[0-9][0-9]usbdect_apig + [ -f /etc/rcN.d/S[0-9][0-9]usbdect_apig ] + sh /etc/rc1.d/S84usbdect_apig start USB DECT Upper driver installed + break + [ -f /etc/rc1.d/S85voip ] + [ -f /usr/etc/rc1.d/S85voip ] + realscript=/usr/etc/rc1.d/S85voip + [ 1 != N ] + number=85voip + echo 85voip + cut -c 1-2 + number=85 + echo 85 + suffix=voip + stop=/usr/etc/rc1.d/K[0-9][0-9]voip + echo /usr/etc/rc1.d/ + sed s,rc1,rcN, + previous_start=/usr/etc/rcN.d/S[0-9][0-9]voip + [ -f /usr/etc/rcN.d/S[0-9][0-9]voip ] + sh /usr/etc/rc1.d/S85voip start Module upper_dect_driver is ready iptables: No chain/target/match by that name iptables: No chain/target/match by that name iptables: No chain/target/match by that name voip start... + break + [ -f /etc/rc1.d/S90post_webupgrade ] + [ -f /usr/etc/rc1.d/S90post_webupgrade ] + realscript=/usr/etc/rc1.d/S90post_webupgrade + [ 1 != N ] + number=90post_webupgrade + echo 90post_webupgrade + cut -c 1-2 + number=90 + echo 90 + suffix=post_webupgrade + stop=/usr/etc/rc1.d/K[0-9][0-9]post_webupgrade + echo /usr/etc/rc1.d/ + sed s,rc1,rcN, + previous_start=/usr/etc/rcN.d/S[0-9][0-9]post_webupgrade + [ -f /usr/etc/rcN.d/S[0-9][0-9]post_webupgrade ] + sh /usr/etc/rc1.d/S90post_webupgrade start [post_webupgrade] Detected 'start' from rc script during a normal boot. I will not start services now + break + [ -f /etc/rc1.d/S99printkoff ] + realscript=/etc/rc1.d/S99printkoff + [ 1 != N ] + number=99printkoff + echo 99printkoff + cut -c 1-2 + number=99 + echo 99 + suffix=printkoff + stop=/etc/rc1.d/K[0-9][0-9]printkoff + echo /etc/rc1.d/ + sed s,rc1,rcN, + previous_start=/etc/rcN.d/S[0-9][0-9]printkoff + [ -f /etc/rcN.d/S[0-9][0-9]printkoff ] + sh /etc/rc1.d/S99printkoff start Setting printk off + break + rm -f /var/run/rc.pid + rm -f /var/run/runlevel_in_progress + rm -f /var/run/init_in_progress_stage + echo 1 Sysinit done Please press Enter to activate this console.

Openwrt bootlog

9655432SDRAM16bitX10120123456+678 ESA: 30:78:30:30:3a:30 WEP KEY : FFFFFFFFFFFFFFFFFFFFFFFFFF Auto-negotiation timed-out 10 MB Half-Duplex (assumed) Ethernet eth0: MAC address 30:78:30:30:3a:30 IP: 10.7.58.112, Default server: 10.7.58.114 Hardware version 0x90, mask=0x7E Hardware version 0x10 (masked) BLUE5G.9 DV4210 Factory Settings Recovery Switch OFF RedBoot(tm) bootstrap and debug environment [ROM] unlocked release, eCos 2.0b1 - built 01:06:01, Mar 1 2012 Platform: Blue_5g (MIPS32 4Kc) Copyright (C) 2000, 2001, 2002, Red Hat, Inc. RAM: 0x80000000-0x81000000, [0x80435e50-0x80fe2000] available FLASH: 0xbe400000 - 0xbec00000, 128 blocks of 0x00010000 bytes each. == Executing boot script in 20.000 seconds - enter ^C twice to abort hit '' (0x01) == Executing boot script in 19.990 seconds - enter ^C twice to abort RedBoot> fis load -b 0x80010000 -d kernel -- Redboot version without crypt_verify -- Image loaded from 0x80010000-0x80275a58 RedBoot> exec -c "noinitrd mem=16M" 0x80010000 Now booting linux kernel: Base address 0x8000fc00 Entry 0x80010000 Cmdline : noinitrd mem=16M changing Kseg0 coherency algorithm to write back... enabling icache and dcache... Linux version 2.6.32.27 (dani@tool) (gcc version 4.3.3 (GCC) ) #29 Thu Mar 1 01:06:46 CET 2012 Detected Broadcom 0x6348 CPU revision b0 CPU frequency is 256 MHz 16MB of RAM installed registering 37 GPIOs board_livebox: Hardware version 0x90 BLUE5G.9 RAC_CR0 = 0x15, RAC_CR1 = 0x2000000 C0 register($16, 0): 0x80008083 C0 register($22, 0): 0xe3880000 board_livebox: resetting gpio6 for eth1... bootconsole [early0] enabled CPU revision is: 00029107 (Broadcom BCM6348) board_livebox: board name: Livebox Determined physical RAM map: memory: 01000000 @ 00000000 (usable) Zone PFN ranges: Normal 0x00000000 -> 0x00001000 Movable zone start PFN for each node early_node_map[1] active PFN ranges 0: 0x00000000 -> 0x00001000 Built 1 zonelists in Zone order, mobility grouping off. Total pages: 4064 Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200 PID hash table entries: 64 (order: -4, 256 bytes) Dentry cache hash table entries: 2048 (order: 1, 8192 bytes) Inode-cache hash table entries: 1024 (order: 0, 4096 bytes) Primary instruction cache 16kB, VIPT, 2-way, linesize 16 bytes. Primary data cache 8kB, 2-way, VIPT, no aliases, linesize 16 bytes Memory: 13564k/16384k available (1980k kernel code, 2820k reserved, 353k data, 120k init, 0k highmem) Hierarchical RCU implementation. NR_IRQS:128 Calibrating delay loop... 254.97 BogoMIPS (lpj=509952) Mount-cache hash table entries: 512 NET: Registered protocol family 16 detected mtd start address 0x1FC00000, but forcing to 0x1e400000... registering PCI controller with io_map_base unset bio: create slab at 0 Switching to clocksource MIPS PCI: Enabling device 0000:00:01.0 (0000 -> 0002) ssb: Sonics Silicon Backplane found on PCI device 0000:00:01.0 NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 512 (order: 0, 4096 bytes) TCP bind hash table entries: 512 (order: -1, 2048 bytes) TCP: Hash tables configured (established 512 bind 512) TCP reno registered NET: Registered protocol family 1 audit: initializing netlink socket (disabled) type=2000 audit(0.328:1): initialized squashfs: version 4.0 (2009/01/31) Phillip Lougher Registering mini_fo version $Id$ JFFS2 version 2.2. (NAND) (SUMMARY) © 2001-2006 Red Hat, Inc. msgmni has been set to 26 io scheduler noop registered io scheduler deadline registered (default) gpiodev: gpio device registered with major 254 gpiodev: gpio platform device registered with access mask FFFFFFFF bcm63xx_uart.0: ttyS0 at MMIO 0xfffe0300 (irq = 10) is a bcm63xx_uart console [ttyS0] enabled, bootconsole disabled console [ttyS0] enabled, bootconsole disabled bcm963xx_flash: 0x00800000 at 0x1e400000 bcm963xx: Found 1 x16 devices at 0x0 in 16-bit bank CFI mfr 0x00000001 CFI id 0x00001000 Amd/Fujitsu Extended Query Table at 0x0040 Amd/Fujitsu Extended Query version 1.3. number of CFI chips: 1 cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness. bcm963xx_flash: Read Signature value of bcm963xx_flash: assuming RedBoot bootloader bcm963xx_flash: Support for extended flash memory size : 0xf1c ; ONLY 64MBIT SUPPORT Searching for RedBoot partition table in bcm963xx at offset 0x7f0000 Creating 6 MTD partitions on "bcm963xx": 0x000000000000-0x000000030000 : "RedBoot" 0x000000030000-0x000000150000 : "kernel" 0x000000150000-0x000000390000 : "user_fs" 0x000000390000-0x0000007f0000 : "rootfs_data" 0x0000007f0000-0x0000007ff000 : "FIS directory" 0x0000007ff000-0x000000800000 : "RedBoot config" bcm63xx_enet MII bus: probed bcm63xx_enet MII bus: probed bcm63xx_wdt started, timer margin: 30 sec Registered led device: adsl-fail Registered led device: adsl Registered led device: traffic Registered led device: phone Registered led device: wifi TCP westwood registered NET: Registered protocol family 17 802.1Q VLAN Support v1.8 Ben Greear All bugs added by David S. Miller VFS: Mounted root (squashfs filesystem) readonly on device 31:2. Freeing unused kernel memory: 120k freed Please be patient, while OpenWrt loads ... ^@- preinit - Press the [f] key and hit [enter] to enter failsafe mode - regular preinit - switching to jffs2 mini_fo: using base directory: / mini_fo: using storage directory: /overlay - init - Please press Enter to activate this console. bcm63xx_enet bcm63xx_enet.0: attached PHY at address 1 [Broadcom BCM63XX (1)] device eth0 entered promiscuous mode bcm63xx_enet bcm63xx_enet.1: attached PHY at address 31 [Generic PHY] eth0: link UP - 100/full - flow control off br-lan: port 1(eth0) entering forwarding state Compat-wireless backport release: compat-wireless-2011-11-29 Backport based on wireless-testing.git master-2011-12-01 cfg80211: Calling CRDA to update world regulatory domain cfg80211: World regulatory domain updated: cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp) cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) cfg80211: (2457000 KHz - 2482000 KHz @ 20000 KHz), (300 mBi, 2000 mBm) cfg80211: (2474000 KHz - 2494000 KHz @ 20000 KHz), (300 mBi, 2000 mBm) cfg80211: (5170000 KHz - 5250000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) cfg80211: (5735000 KHz - 5835000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) SCSI subsystem initialized usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb b43-phy0: Broadcom 4318 WLAN found (core revision 9) Registered led device: b43-phy0::tx Registered led device: b43-phy0::rx Registered led device: b43-phy0::radio Broadcom 43xx driver loaded [ Features: PL ] PPP generic driver version 2.4.2 ip_tables: (C) 2000-2006 Netfilter Core Team NET: Registered protocol family 24 nf_conntrack version 0.5.0 (213 buckets, 852 max) ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver bcm63xx_ohci bcm63xx_ohci.0: BCM63XX integrated OHCI controller bcm63xx_ohci bcm63xx_ohci.0: new USB bus registered, assigned bus number 1 bcm63xx_ohci bcm63xx_ohci.0: irq 20, io mem 0xfffe1b00 usb usb1: configuration #1 chosen from 1 choice hub 1-0:1.0: USB hub found hub 1-0:1.0: 1 port detected Initializing USB Mass Storage driver... usbcore: registered new interface driver usb-storage USB Mass Storage support registered. BusyBox v1.15.3 (2012-02-15 19:17:10 CET) built-in shell (ash) Enter 'help' for a list of built-in commands. _______ ________ __ | |.-----.-----.-----.| | | |.----.| |_ | - || _ | -__| || | | || _|| _| |_______|| __|_____|__|__||________||__| |____| |__| W I R E L E S S F R E E D O M Backfire (10.03.1, r30365) ------------------------ * 1/3 shot Kahlua In a shot glass, layer Kahlua * 1/3 shot Bailey's on the bottom, then Bailey's, * 1/3 shot Vodka then Vodka. --------------------------------------------------- root@OpenWrt:/#

Notes

Hardware Versions

With this kernel code we can get the hardware version:

u32 val;
unsigned char hw_version;
val = bcm_gpio_readl(GPIO_CTL_LO_REG);
val &= ~0x000000FF;
bcm_gpio_writel(val, GPIO_CTL_LO_REG);
hw_version = (unsigned char)bcm_gpio_readl(GPIO_DATA_LO_REG) & 0xFF;
	printk("Hardware version 0x%02X \n", hw_version);
But probably should be masked either with 0x7E or 0xFE

Example:
hardware version = 0x90
masked hardware version = 0x90 & 0x7E = 0x10

Known hardware versions (masked):

masked hw version
(mask=0x7E)
BLUE 5G name
0x02 BLUE5G.2
0x08 BLUE5G.3
0x06 BLUE5G.4
0x04 BLUE5G.4_mod1
0x0A BLUE5G.6
0x0A BLUE5G.8
0x10 BLUE5G.9

but for BLUE7G boards:

masked hw version
(mask=0xFE)
BLUE7G name
0x40 BLUE7G.3/7G.4 AOL
0x42 BLUE7G.3/7G.4 INVENTEL
0x46 BLUE7G.3/7G.4 INVENTEL WIFI READY
0x44 BLUE7G.4 BT
0x48 BLUE7G.4 FASTWEB
0x4A BLUE7G.5 AOL
0x4C BLUE7G.5 INVENTEL
0x4E BLUE7G.5 INVENTEL WIFI READY
0xA0 BLUE7G.5 BT
0xA2 BLUE7G.5 FASTWEB

Also we can find the hardware version printed on the board
hardware version

Tags

Back to top

toh/inventel/dv4210.txt · Last modified: 2014/05/11 16:26 by danitool