User Tools

Site Tools


toh:inventel:dv4210

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Previous revision
toh:inventel:dv4210 [2013/01/04 23:09]
toh:inventel:dv4210 [2015/12/12 08:49] (current)
tmomas New bootlog formatting applied
Line 1: Line 1:
 +====== Inventel Livebox 1 ======
  
 +This is an adsl wifi router mainly distributed by [[wp>​Orange_(telecommunications)|Orange]]. The board is manufactured by [[wp>​Inventel|Inventel]]-[[wp>​Thomson_SA|Thomson]]. The main difference with other bcm6348 boards is the bootloader, the liveboxes use redboot whereas others use CFE.
 +
 +More info about this platform at [[doc:​hardware:​soc:​soc.broadcom.bcm63xx|bcm63xx]]
 +
 +===== Supported Versions =====
 +These are the differences between several board models. In any case DSP and ADSL aren't supported by OpenWrt.
 +
 +^ router version ​  ^ board model   ^ PCMCIA ​  ​^ ​ DSP  ^ mini-pci ​  ^ BCM5325 ​  ^
 +|    **DV4210** ​   |    blue5g9 ​   |          |       ​| ​    ​✔ ​     |           |
 +|    **DV4210** ​   |    blue5g4 ​   |    ✔     ​| ​  ​✔ ​ |     ​✔ ​     |           |
 +|    **DV3210** ​   |    blue5g6 ​   |    ✔     ​| ​ ✔   ​| ​           |           |
 +|    **DV4410** ​   |   ​blue5g6.3 ​  ​| ​   ✔     ​| ​ ✔   ​| ​    ​✔ ​     |    ✔      |
 +
 +The Livebox DV4410 (AKA Livebox Pro v1) is supported, however the BCM5325 switch doesn'​t work. Only 1 ethernet port not belonging to the switch works. Maybe it isn't correctly activated when booting the board. It seems the switch should be configured via SPI, in this case the **SPI Slave Select (SS) is the GPIO_29**.
 +
 +**NOTE:** About board models see [[#notes]].
 +
 +===== Hardware Highlights =====
 +^ SoC             ^ CPU speed   ^ Ram     ^ Flash   ^ Network ​  ^ USB   ^ Serial ​  ^ JTag   ^
 +| Broadcom 6348   | 256MHz ​     | 16MiB   | 8MiB    | 1 x 2     | Yes   | Yes      | Yes    |
 +
 +===== Installation =====
 +-> [[doc:​howto:​obtain.firmware]] \\ -> [[doc:​howto:​generic.flashing|Install OpenWrt]]
 +
 +
 +| {{:​meta:​icons:​tango:​dialog-information.png}} | Currently there are no firmwares for downloads at Openwrt, thus you will need to build it yourself. However you can use the danitool'​s precompiled firmware if you are too lazy for building your own. Use it at your own risk:\\ [[https://​docs.google.com/​uc?​export=download&​id=0B-EMoBe-_OdBTnA0LWk2RjNJa28"​|OpenWrt_Backfire_10.03.1-livebox1_redboot.zip]]\\ [[https://​docs.google.com/​uc?​export=download&​id=0B-EMoBe-_OdBQmw1X3F1SDI2SkU"​|OpenWrt_AA_12.09-livebox1_redboot.zip]] |
 +
 +
 +  * Characteristics of Inventel DV4210 (AKA Livebox):
 +    * the OEM firmware doesn'​t allow flashing over it's WebUI
 +    * the OEM RedBoot isn't accessible, you cannot stop the RedBoot while loading the system with CTL+C using a serial console.
 +    * the OEM RedBoot only flash their encrypted firmwares.
 +  * Solution:
 +    * Use RGWRepair.exe to replace OEM firmware with elder OEM firmware, this allows to access via telnet to the command line interface.
 +    * replace the OEM RedBoot with an alternative RedBoot without the restrictions.
 +    * Once we have the alternative new RedBoot installed we are ready to install OpenWrt:
 +\\
 +  - [[#​JTAG|Backup]] whole flash memory if you want to have the possibility to restore it later. Or continue with the next step, older Inventel'​s firmwares still can be found elsewhere in the web. \\
 +  - Replace your current firmware with an old OEM firmware. Firmware versions < 5.04 have a backdoor which allows //telnet access// . There are howtos elsewhere for gaining access via telnet with this old firmware. \\
 +  - Once we have telnet access we can replace the original redboot by this one modified by danitool. \\ [[https://​docs.google.com/​uc?​export=download&​id=0B-EMoBe-_OdBYXo3MWhMZ1hHbGM|REDBOOT_blue5g-16MB_1chip.bin]] ​ <color grey>​md5sum:​ 685260e895c891b2fda6b1ab10982b99</​color>​\\ In the command line inside the livebox just execute this commands \\ <​code>​
 +# /​etc/​init.d/​ramdisk start 16 
 +# cd /​mnt/​ramdisk/​rd1
 +# wget ftp://​your_local_ftp_server/​redbootelnet04.rom
 +# fcp -v redbootelnet04.rom /dev/mtd0
 +Erasing blocks: 3/3 (100%)
 +Writing data: 192k/192k (100%)
 +Verifying data: 192k/192k (100%)
 +# reboot
 +</​code>​ Ok now we don't have restrictions and can flash unencrypted firmwares, like OpenWrt. \\
 +  -Get a firmware: you can build it your own or download a precompiled one\\ [[https://​docs.google.com/​uc?​export=download&​id=0B-EMoBe-_OdBTnA0LWk2RjNJa28|OpenWrt_Backfire_10.03.1-livebox1_redboot.zip]]\\ [[https://​docs.google.com/​uc?​export=download&​id=0B-EMoBe-_OdBQmw1X3F1SDI2SkU|OpenWrt_AA_12.09-livebox1_redboot.zip]]
 +  -Now put the firmware into your tftp server.
 +      * Your ip must be ''​10.7.58.114''​
 +      * The ethernet cable is connected to the yellow port.
 +      * Start your tftp server!.
 +  -Unplug the livebox, press the button 1 and plug the power cord again, wait 5 seconds and release the button. Wait until the flashing process finish. \\ \\
 +  -Telnet to 192.168.1.1 and set a root password, or browse to http://​192.168.1.1 if LuCI is installed.
 +
 +
 +==== Flash Layout ====
 +  * OEM firmware versions < 5.06.2 (cramfs partitions)<​code>​
 +RedBoot> fis list
 +Name              FLASH addr  Mem addr    Length ​     Entry point
 +RedBoot ​          ​0xBE400000 ​ 0xBE400000 ​ 0x00030000 ​ 0x00000000
 +
 +user_fs ​          ​0xBE430000 ​ 0xBE430000 ​ 0x00720000 ​ 0x80545FB0
 +jffs_system ​      ​0xBEB50000 ​ 0xBEB50000 ​ 0x000A0000 ​ 0x80545FB0
 +
 +FIS directory ​    ​0xBEBF0000 ​ 0xBEBF0000 ​ 0x0000F000 ​ 0x00000000
 +RedBoot config ​   0xBEBFF000 ​ 0xBEBFF000 ​ 0x00001000 ​ 0x00000000</​code>​
 +  * OEM firmware versions > 5.06.2 (squashfs partitions)<​code>​
 +Name              FLASH addr  Mem addr    Length ​     Entry point
 +RedBoot ​          ​0xBE400000 ​ 0xBE400000 ​ 0x00030000 ​ 0x00000000 ​
 +
 +user_fs ​          ​0xBE430000 ​ 0xBE430000 ​ 0x00390000 ​ 0x80800000 ​
 +user_2_fs ​        ​0xBE7C0000 ​ 0xBE7C0000 ​ 0x00390000 ​ 0x80800000 ​
 +jffs_system ​      ​0xBEB50000 ​ 0xBEB50000 ​ 0x000A0000 ​ 0x80800000 ​
 +
 +FIS directory ​    ​0xBEBF0000 ​ 0xBEBF0000 ​ 0x0000F000 ​ 0x00000000 ​
 +RedBoot config ​   0xBEBFF000 ​ 0xBEBFF000 ​ 0x00001000 ​ 0x00000000</​code>​
 +  * OpenWrt firmware, the size of partitions depends on the size of the images we will flash.<​code>​
 +RedBoot> fis list                                                                                                                           
 +Name              FLASH addr  Mem addr    Length ​     Entry point                                                                           
 +RedBoot ​          ​0xBE400000 ​ 0xBE400000 ​ 0x00030000 ​ 0x00000000 ​                                                                           ​
 +
 +kernel ​           0xBE430000 ​ 0xBE430000 ​ 0x00120000 ​ 0x80010000 ​                                                                           ​
 +user_fs ​          ​0xBE550000 ​ 0xBE550000 ​ 0x001A0000 ​ 0x80800000 ​                                                                           ​
 +rootfs_data ​      ​0xBE6F0000 ​ 0xBE6F0000 ​ 0x00500000 ​ 0x80800000 ​                                                                           ​
 +
 +FIS directory ​    ​0xBEBF0000 ​ 0xBEBF0000 ​ 0x0000F000 ​ 0x00000000 ​                                                                           ​
 +RedBoot config ​   0xBEBFF000 ​ 0xBEBFF000 ​ 0x00001000 ​ 0x00000000  ​
 +</​code>​
 +
 +
 +===== Basic configuration =====
 +-> [[doc:​howto:​basic.config|Basic configuration]] After flashing, proceed with this.\\
 +Set up your Internet connection, configure wireless, configure USB port, etc.
 +
 +
 +===== Specific Configuration =====
 +==== Interfaces ====
 +The default network configuration is:
 +^ Interface Name   ^ Description ​  ^ Default configuration ​  ^
 +| br-lan ​          | LAN & WiFi    | 192.168.1.1/​24 ​         |
 +| eth0             | WAN           | dhcp                    |
 +| eth1             | LAN           | bridged ​                |
 +| wlan0            | WiFi          | disabled ​               |
 +
 +==== Failsafe mode ====
 +-> [[doc:​howto:​generic.failsafe]]
 +
 +==== Buttons ====
 +-> [[doc:​howto:​hardware.button]] on howto use and configure the hardware button(s).
 +
 +The Livebox has 2 buttons. They are ASSOCIATION BUTTON and PAGE BUTTON. There are no associated events to these buttons in Openwrt by default, you can customize it.
 +^ BUTTON ​        ^ onboard name   ^ OEM name             ^ Openwrt name   ^ GPIO   ^ SoC pin   ^ action ​          ^
 +| Button 1       | S2             | ASSOCIATION_BUTTON ​  | BTN_1          | 36     | W25       | not configured ​  |
 +| Button 2       | S1             | PAGE_BUTTON ​         | BTN_2          | 7      | AD5       | not configured ​  |
 +| not soldered ​  | S3             | n/a                  | n/a            | n/a    | G26       | System Reset     |
 +
 +==== Leds ====
 +
 +The Livebox has 5 leds. Adsl-fail is used as default for indicating the router is on.
 +^ Led                                          ^^  onboard name  ^  GPIO  ^  default trigger ​ ^
 +| <color red>​⚠</​color> ​                       | adsl-fail ​     |  DS1   ​| ​        ​0 ​        | "​default-on"​|
 +| <color red>​@</​color> ​                        | adsl           ​| ​ DS2   ​| ​        ​1 ​        | --- |
 +| <color red>​➤➤</​color> ​                     | traffic ​       |  DS3   ​| ​        ​2 ​        | --- |
 +| <color red>​✆</​color> ​                       | phone          |  DS4   ​| ​        ​3 ​        | --- |
 +| <color red><​nowiki>​((⚲))</​nowiki></​color> ​  | wifi           ​| ​ DS5   ​| ​        ​4 ​        | --- |
 +| not soldered ​                                                ​|| ​ DS6   ​| ​        ​5 ​        | --- |
 +| not soldered ​                                                ​|| ​ DS7   ​| ​        ​6 ​        | conected to the eth1 phy, then always high |
 +
 +Read: \\ [[doc:​uci:​system#​leds|System configuration:​ Leds]] \\ to configure the leds
 +
 +
 +**LEDs and gpio6 detail**
 +
 +{{:​media:​inventel:​livebox_leds.jpg?​400}}
 +{{:​media:​inventel:​livebox_gpio6.jpg?​0x215}}
 +
 +===== Hardware =====
 +==== Info ====
 +| **[[wp>​Instruction set|Instruction set]]:​** ​  | [[wp>​MIPS architecture|MIPS]] ​       ||
 +| **Vendor:​** ​                                  | [[wp>​Broadcom]] ​                     ||
 +| **[[doc:​techref:​Bootloader]]:​** ​              | [[doc:​techref:​bootloader:​RedBoot]] ​  ||
 +| **[[doc:​hardware:​soc|System-On-Chip]]:​** ​     | Broadcom BCM6348 ​                    ||
 +| **[[doc:​hardware:​cpu|CPU]]/​Speed** ​           | BMIPS3300 V0.7 / 256 MHz             ||
 +| **Flash-Chip:​** ​           | Spansion S29GL064A11TFIR4 ​                ||
 +| **Flash-Chip Geometry:​** ​  | 8 KiB block size x 8 bottom boot blocks ​  ||
 +| ::: | 64 KiB block size x 127 main blocks ||
 +| **Flash size:​** ​     | 8 MiB ||
 +| **RAM:​** ​            | Hynix HY57V281620FTP-H / 16 MiB / 133 MHz \\ Samsung K4S281632I-UC75 / 16 MiB / 133 MHz \\ ISSI IS42S16800A-7T / 16 MiB / 143 MHz | DV4210 WS \\ DV4210 WA \\ DV4410 |
 +| **Wireless:​** ​       | Broadcom 4318 802.11b/g (mini-PCI) \\ PCMCIA | DV4210 \\ DV3210|
 +| **Ethernet:​** ​       | 1 internal phy + 1 external phy Altima ac101L \\ 1 internal phy + {{:​media:​datasheets:​bcm5325_pinout.png?​linkonly|BCM5325}} | DV4210, DV3210 \\ DV4410 |
 +| **Internet:​** ​       | ADSL2+ ​ ||
 +| **USB:​** ​            | 1x 1.1 host + 1 slave (udc) ||
 +| **FXS:​** ​            | slic STLC3055N ||
 +| **Digital Signal Processor:​** | Texas Instruments TMS320VC5402 | DV3210, DV4410|
 +| **Bluetooth:​** ​  | bb4g-t10 (NXP PCD80715HL) module connected via SPI   ||
 +| **PSU:​** ​        | 15V DC 1.2A / Thomson Telecom DSL3594571A ​           ||
 +| **[[doc:​hardware:​port.serial|Serial]]:​** ​  | [[#​Serial|Yes]] ​  ||
 +| **[[doc:​hardware:​port.jtag|JTAG]]:​** ​      | [[#​JTAG|Yes]] ​    ||
 +
 +==== Photos ====
 +^ Photo of front of the casing, and opening the case  ^^^^
 +| {{:​media:​inventel:​livebox_case.jpg?​100x80}} | {{:​media:​inventel:​livebox_case2.jpg?​100x80}} | {{:​media:​inventel:​livebox_caseopen.jpg?​100x80}} | {{:​media:​inventel:​livebox_caseopen2.jpg?​100x80}} |
 +
 +^^ Photo of PCB  ^^^
 +| **DV4210** | **DV4410** | **DV3210** |
 +| {{:​media:​inventel:​dv4210_board.jpeg?​200x150}} | {{:​media:​inventel:​dv4410_board.jpg?​200x150}} | {{:​media:​inventel:​dv3210_board.jpg?​200x150}} |
 +
 +
 +==== Thermal Balls ====
 +
 +| {{:​media:​inventel:​livebox1_thermal_balls.jpg?​200x200|}} | {{:​doc:​hardware:​soc:​bcm6348_kpbg_pinout.png?​200x200|}} | These are the thermal balls at the board, the  bcm6348 SoC has been removed. You can guess how the SoC is wired at the board tracing pins and comparing it with the available bcm6348 pinout. |
 +
 +==== Serial ====
 +-> [[doc:​hardware:​port.serial]] ​
 +
 +| {{:​media:​inventel:​livebox_serial.jpg?​200|}} |The livebox has an external accesible serial port TTL. It is a DEC MMJ connector. \\ You can build a serial TTL adapter, or use those cheap USB adapters for cellphones. Using a TTL USB serial converter is easier, it only uses TX, RX and GND. |
 +
 +|{{:​media:​inventel:​rj45-mmj.jpg?​100|rj45 mmj mod}} | Sometimes maybe difficult to find the DEC MMJ connector. We can carefully modify a RJ45 ethernet one to fit it perfectly in the serial port|
 +
 +
 +==== Flash-chip ====
 +(NOR 56/48-Pin Standard TSOP)
 +<​code>​Query identification string:
 +        Primary Algorithm Command Set and Control Interface ID Code: 0x0002 (AMD/​Fujitsu Standard Command Set)
 +   16-bit: Manufacturer ID 0x000001 Chip ID 0x001000
 +        Alternate Algorithm Command Set and Control Interface ID Code: 0x0000 (null)
 +Query system interface information:​
 +        Vcc Logic Supply Minimum Write/Erase or Write voltage: 2700 mV
 +        Vcc Logic Supply Maximum Write/Erase or Write voltage: 3600 mV
 +        Vpp [Programming] Supply Minimum Write/Erase voltage: 0 mV
 +        Vpp [Programming] Supply Maximum Write/Erase voltage: 0 mV
 +        Typical timeout per single byte/word program: 128 us
 +        Typical timeout for maximum-size multi-byte program: 128 us
 +        Typical timeout per individual block erase: 1024 ms
 +        Typical timeout for full chip erase: 0 ms
 +        Maximum timeout for byte/word program: 1024 us
 +        Maximum timeout for multi-byte program: 4096 us
 +        Maximum timeout per individual block erase: 16384 ms
 +        Maximum timeout for chip erase: 0 ms
 +Device geometry definition:
 +        Device Size: 8388608 B (8192 KiB, 8 MiB)
 +        Flash Device Interface Code description:​ 0x0002 (x8/x16)
 +        Maximum number of bytes in multi-byte program: 32
 +        Number of Erase Block Regions within device: 2
 +        Erase Block Region Information:​
 +                Region 0:
 +                        Erase Block Size: 8192 B (8 KiB)
 +                        Number of Erase Blocks: 8
 +                Region 1:
 +                        Erase Block Size: 65536 B (64 KiB)
 +                        Number of Erase Blocks: 127
 +Primary Vendor-Specific Extended Query:
 +        Major version number: 1
 +        Minor version number: 3
 +        Address Sensitive Unlock: Required
 +        Process Technology: CS99
 +        Erase Suspend: Read/write
 +        Sector Protect: 1 sectors per group
 +        Sector Temporary Unprotect: Not supported
 +        Sector Protect/​Unprotect Scheme: 29BDS640 mode (Software Command Locking)
 +        Simultaneous Operation: Not supported
 +        Burst Mode Type: Supported
 +        Page Mode Type: 4 word Page
 +        ACC (Acceleration) Supply Minimum: 11500 mV
 +        ACC (Acceleration) Supply Maximum: 12500 mV
 +        Top/Bottom Sector Flag: Bottom boot device
 +</​code>​
 +
 +=== Flash device in physical memory map ===
 +BCM6348 SoCs allow only to load a bootloader from the fixed address 0x1FC00000. This restricts the max size of the flash memory to be 4 MB, unless the bootloader makes some trick to allow bigger sizes, like our redboot does:
 +  * The bootloader is first loaded from the physical address 0x1FC00000 (the middle of the flash where the bootloader really lives), and then the bootloader itself remaps whole flash to see the 8MB. The problem is that once remapped the bottom sectors are seen as if they were in the middle of the flash.\\ {{media:​thomson:​livebox1_flash_remapping.png?​300|}}
 +
 +
 +==== JTAG ====
 +-> [[doc:​hardware:​port.jtag]] general information about the JTAG port, JTAG cable, etc.
 +
 +To use a simple unbuffered cable we only need to connect **TDI**, **TDO**, **TMS** and **TCK**. We also may connect the nTRST pin if we need it.
 +| {{:​meta:​icons:​tango:​dialog-information.png|}} | The **nTRST** and **nSRST** (system reset) are bridged, as a result of this the functionallity of this pin is just acting as a regular system reset. Of course we can separate ​ these pins cutting physically the bridge, but for sure you won't need to do it unless you are experimenting with your JTAG, or if you have a serious brick and you want to use the nTRST functionallity to make a proper TAP reset before flashig | {{:​media:​inventel:​ntrst_nsrst-bridge.jpg?​200x110|}}| ​
 +This is the pinout of the 30 pin connector and JTAG testpoints:
 +\\
 +{{:​media:​inventel:​livebox_jtag-30pin3.jpg?​500|JTAG-30pin}}
 +\\
 +**Photo of PCB with markings**
 +
 +Use a debrick utility to backup the original firmware, or debrick the device (broken bootloader): ​
 +\\
 +[[https://​docs.google.com/​leaf?​id=0B07LcVZMfvdkZTc1MDA5MjUtZTMzYy00OGQzLWE5MjAtODFiN2RkMTJmNDQ5&​sort=name&​layout=list&​num=50|An updated version of debrick on Google Docs]]
 +
 +=== Backup the entire flash ===
 +Plug the power cord, wait 4 seconds and enter the command:
 +<​code>​nice ./debrick -backup:​custom /​window:​1e400000 /​start:​1e400000 /​length:​800000 /silent /​notimestamp</​code>​
 +If we want to extract partitions we need to reverse endianess:
 +<​code>​cat CUSTOM.BIN | ./switchend > backup_livebox.bin</​code>​
 +Now for extracting, first we cut the binary accordingly to the flash layout (versions > 5.06.2)
 +<​code>​dd if=backup_livebox.bin count=196608 ​ bs=1 skip=0 ​      ​of=mtd0-Redboot.rom
 +dd if=backup_livebox.bin count=3735552 bs=1 skip=196608 ​ of=mtd1-user_fs.squashfs
 +dd if=backup_livebox.bin count=3735552 bs=1 skip=3932160 of=mtd2-user_2_fs.squashfs
 +dd if=backup_livebox.bin count=655360 ​ bs=1 skip=7667712 of=mtd3-jffs_system.jffs2
 +dd if=backup_livebox.bin count=61440 ​  bs=1 skip=8323072 of=mtd4-FIS_directory
 +dd if=backup_livebox.bin count=4096 ​   bs=1 skip=8384512 of=mtd5-Redboot.config</​code>​
 +Extract squash filesystems:​
 +<​code>​sudo unsquashfs -i -d user_fs ​  ​mtd1-user_fs.squashfs
 +sudo unsquashfs -i -d user_2_fs mtd2-user_2_fs.squashfs</​code>​
 +Mount the jffs2 filesystem
 +<​code>​modprobe mtdram total_size=16384 ​
 +modprobe mtdblock ​
 +modprobe jffs2 
 +jffs2dump -b -c -e jffs_system.jffs2 mtd3-jffs_system.jffs2
 +dd if=jffs_system.jffs2 of=/​dev/​mtdblock0
 +mount /​dev/​mtdblock0 mount/ -t jffs2</​code>​
 +
 +
 +=== Debrick ===
 +[[doc:​howto:​generic.debrick]]
 +
 +Debrick the device flashing the redboot:
 +\\
 +If your redboot is broken, you can put a new working redboot via JTAG.
 +First you'll need to do byte reordering with an utility. Use **redim** (darkfader tool):
 +<​code>​./​redim *,2,-2 -i redboot.rom -o CUSTOM.BIN</​code>​
 +The utility and CUSTOM.BIN already reordered:
 +\\
 +http://​files.myopera.com/​danitool/​livebox/​redboot03_jtag.zip
 +
 +Now, plug the power and enter the comand:
 +<​code>​rmmod lp
 +nice ./debrick -flash:​custom /​window:​1fc00000 /​start:​1fc00000 /​length:​30000 /silent /nodma
 +</​code>​
 +If the JTAG utility stops with the message: ​
 +\\
 +//<color crimson><​nowiki>​Halting Processor ... <​Procesor did NOT enter Debug Mode!></​nowiki>​ </​color>//​
 +\\
 +and nothing else happens, then **you'​ll need to deal with System Reset (bridged to nTRST)** pin to perform a fast reset before flashing. Also in the BIOS of your PC, you may need to set Parallel Port into ECP, EPP or "​Bi-Directional"​ mode. Read on: [[wp>​IEEE_1284#​IEEE_1284_modes|IEEE 1284 modes]].
 +
 +Debricking with this method is tested and working fine. This is a successful session of restoring the redboot via JTAG:
 +<WRAP bootlog>
 +<​nowiki>​[root@tool hairydebrick]#​ nice ./debrick -flash:​custom /​window:​1fc00000 /​start:​1fc00000 /​length:​30000 /silent /nodma
 +
 +====================================
 +WRT54G/GS EJTAG Debrick Utility v4.8
 +====================================
 +
 +Probing bus ... Done
 +
 +Instruction Length set to 5
 +
 +CPU Chip ID: 00000110001101001000000101111111 (0634817F)
 +*** Found a Broadcom BCM6348 Rev 1 CPU chip ***
 +
 +    - EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
 +    - EJTAG Version ....... : 1 or 2.0
 +    - EJTAG DMA Support ... : Yes
 +    *** DMA Mode Forced Off ***
 +
 +Issuing Processor / Peripheral Reset ... Done
 +Enabling Memory Writes ... Done
 +Halting Processor ... <​Processor Entered Debug Mode!> ... Done
 +Clearing Watchdog ... Done
 +
 +Probing Flash at (Flash Window: 0x1fc00000) ... Done
 +
 +Flash Vendor ID: 00000000000000000000000000000001 (00000001)
 +Flash Device ID: 00000000000000000010001000000000 (00002200)
 +*** Found a AMD 29lv320MB 2Mx16 BotB   (4MB) Flash Chip ***
 +
 +    - Flash Chip Window Start .... : 1fc00000
 +    - Flash Chip Window Length ... : 00400000
 +    - Selected Area Start ........ : 1fc00000
 +    - Selected Area Length ....... : 00030000
 +
 +*** You Selected to Flash the CUSTOM.BIN ***
 +
 +=========================
 +Flashing Routine Started
 +========================= ​
 +Total Blocks to Erase: 10
 +
 +Erasing block: 1 (addr = 1fc00000)...Done
 +Erasing block: 2 (addr = 1fc02000)...Done
 +Erasing block: 3 (addr = 1fc04000)...Done
 +Erasing block: 4 (addr = 1fc06000)...Done
 +Erasing block: 5 (addr = 1fc08000)...Done
 +Erasing block: 6 (addr = 1fc0a000)...Done
 +Erasing block: 7 (addr = 1fc0c000)...Done
 +Erasing block: 8 (addr = 1fc0e000)...Done
 +Erasing block: 9 (addr = 1fc10000)...Done
 +Erasing block: 10 (addr = 1fc20000)...Done
 +
 +Loading CUSTOM.BIN to Flash Memory...
 +Done  (CUSTOM.BIN loaded into Flash Memory OK)
 +
 +=========================
 +Flashing Routine Complete
 +=========================
 +elapsed time: 4319 seconds
 +
 +
 + *** REQUESTED OPERATION IS COMPLETE ***
 +
 +[root@tool hairydebrick]#​ </​nowiki>​
 +</​WRAP>​\\
 +
 +==== GPIOs ====
 +There are 37 GPIOs, probably some of them are unused, these seems to be the pretended use of each one, this may depend of the board version (ie: some boards have pccard, or DSP). Depending on this, we have plenty of GPIOs exposed on the board, and they can be used freely in OpenWrt.
 +^ GPIO ^ direction ^ hardware function ^ PCB markings ^
 +| GPIO_00 ............. GPIO_05 | OUT | led | {{:​media:​inventel:​livebox_leds.jpg?​linkonly}} |
 +| GPIO_06 ​ | OUT | AC101L_RESET#​ **and** led_DS7 **and** DSP_RST_N| {{:​media:​inventel:​livebox_gpio6.jpg?​linkonly}} ​ {{:​media:​inventel:​livebox_dsp.jpg?​linkonly}} |
 +| GPIO_07 ​ | IN  | button 2 | |
 +| GPIO_08, .............,​ GPIO_15 | BI | MII  BLK | {{:​media:​inventel:​livebox-gpios-mii.jpg?​linkonly}} |
 +| GPIO_16, .............,​ GPIO_21 | IN | PCI  BLK | |
 +| GPIO_22, .............,​ GPIO_27 | IN | PCCARD | {{:​media:​thomson:​livebox_pcmcia-gpio-a.jpg?​linkonly}} {{:​media:​thomson:​livebox_pcmcia-gpio-b.jpg?​linkonly}} |
 +| GPIO_28 | OUT | BT_DECT_RST | {{:​media:​inventel:​livebox_spi_pinout2.jpg?​linkonly}} |
 +| GPIO_29 | OUT | BCM5325 SPI_SS# | {{:​media:​inventel:​livebox-gpios-mii.jpg?​linkonly}} |
 +| GPIO_30 | - | NC | |
 +| GPIO_31 | OUT | DECT SPI_SS# | {{:​media:​inventel:​livebox_spi_pinout2.jpg?​linkonly}} |
 +| GPIO_32 | OUT | BCM5325_MDC or AC101L_MDC | {{:​media:​inventel:​livebox-gpios-mii.jpg?​linkonly}} |
 +| GPIO_33 | IN | BT_INT | {{:​media:​inventel:​livebox_spi_pinout2.jpg?​linkonly}} |
 +| GPIO_34 | IN | DECT_INT | ::: |
 +| GPIO_35 | IN | DSP_INT2# | {{:​media:​inventel:​livebox_dsp.jpg?​linkonly}} |
 +| GPIO_36 | IN | button 1 |  |
 +
 +**Note:** bcm63xx GPIO drivers don't provide IRQs. But GPIO32, GPIO33, GPIO34, GPIO35 can be used as pure IRQs, see -> [[doc/​hardware/​soc/​soc.broadcom.bcm63xx#​external_irqs|]]
 +==== SPI ====
 +**[[wp>​Serial_Peripheral_Interface_Bus|Serial Peripheral Interface]]** ​
 +| Conected to a bluetooth device bb4g-t10 (no information available) \\ If we remove the paper over the bluetooth IC we can see the exact part number: \\ **NXP PCD80715HL** - (//VEGA THUNDERBIRD BASEBAND// IC family bought by [[http://​www.dspg.com|DSPG]]) | {{:​media:​inventel:​livebox_spi_ribbon.jpg?​150x100|}} ​ {{:​media:​inventel:​livebox_bluetooth.jpg?​150x100|}} |
 +
 +
 +| {{:​media:​inventel:​livebox_spi_pinout2.jpg?​150x100|}} | This is the SPI pinout, and some gpios. Note a second twin unsoldered connector, it also has SPI (pads 6, 7, 8, bridged to the bluetooth connector). |
 +| {{:​media:​inventel:​livebox_spi_testpoints.jpg?​150x100|SPI testpoints}} | The SPI pins are also located here at these testpoints. |
 +
 +==== USB ====
 +The livebox has two USBs, they work at full speed using the OHCI module:
 +|{{:​media:​inventel:​usb_host_sch.png?​150x100}} | One is a host usb 1.1. In the pic you can see the schematic. |
 +
 +| {{:​meta:​icons:​tango:​dialog-information.png|}} |There is a known problem with hotplugging,​ everytime you plug a device in the usb, the board restarts itself. This maybe caused by a faulty hardware design. We can solve it soldering another electrolytic capacitor in parallel with the 10uF one. Use a 470 uF one (see pic) | {{ :​media:​inventel:​usb_capacitor.jpg?​150x100}} |
 +
 +| {{:​media:​inventel:​usb_slave_sch.png?​150x100}} | The second USB port is slave. In OpenWrt this port is totally useless, in fact the preliminary support for UDC has been dropped. You can mod this port to convert it to a **host port** (see [[#USB Mod]]), as a result of this you will have **two** working usb host ports in your board. |
 +
 +==== DSP ====
 +[[wp>​Digital_signal_processor|Digital Signal Processor]]
 +
 +| {{:​media:​inventel:​livebox_dsp.jpg?​150x100|GPIOs DSP}} | Some liveboxes boards have a TMS320VC5402 Digital Signal Processor like in the DV4410 or DV3210. \\ In the pic you can see relevant GPIOs used by the DSP when present. \\ BTW, it seems there aren't in any case drivers for DSPs FIXME |
 +
 +==== PCMCIA ====
 +
 +{{:​media:​inventel:​dv3210_pcmcia_a.jpg?​150x100}}
 +{{:​media:​inventel:​dv3210_pcmcia_b.jpg?​150x100}}
 +{{:​media:​inventel:​dv3210_pcmcia_c.jpg?​150x100}}
 +
 +On some boards there isn't any PCMCIA slot soldered leaving plenty of **exposed GPIOs**:
 +
 +{{media:​thomson:​livebox_pcmcia-gpio-b.jpg?​direct&​200x100|}} {{media:​thomson:​livebox_pcmcia-gpio-a.jpg?​direct&​200x100|}}
 +
 +===== Bootloader Mods =====
 +-> you could read about [[doc:​techref:​bootloader]] in general
 +
 +| {{:​meta:​icons:​tango:​package-x-generic.png|}} | There are several Redboot mods for this board, even those redboots can work with other boards. The redboot sourcecode and the patch used to build **redboot**:​ \\ [[https://​files.myopera.com/​danitool/​linux/​bootloaders/​redboot-blue5g.tar.gz|redboot-blue5g.tar.gz]] |
 +
 +==== Redboot RAM ====
 +
 +For flashing a new Redboot with Redboot we need a RAM redboot version \\
 +[[https://​drive.google.com/​uc?​export=download&​id=0B-EMoBe-_OdBY0RIeU42VWMwNVk|redbootRAMBL.img]]
 +
 +First gain access Redboot through the serial console. \\
 +Or if you already are using a modded Redboot with telnet enabled just use the ethernet cable (yellow port). Use the button1, press while powering on, wait 5 seconds and release the button:
 +
 +<​code>​telnet 10.7.58.112 9000</​code>​
 +
 +put the redbootRAMBL.img into your tftp server. And then:
 +
 +<​code>​RedBoot>​ load -v redbootRAMBL.img
 +...
 +RedBoot> go
 +... </​code>​
 +Open another terminal console and telnet it again
 +<​code>​telnet 10.7.58.112 9000</​code>​
 +
 +be sure you are now using the RAM version:
 +
 +<​code>​RedBoot>​ version
 +RedBoot(tm) bootstrap and debug environment [RAM]
 +</​code>​
 +And now flash the new redboot
 +
 +<​code>​RedBoot>​load -v -r -b 0x80800000 newredboot.rom
 +....
 +RedBoot>​fis create RedBoot -r 0xBE400000 -e 0x00000000
 +......</​code>​
 +
 +==== flashcp for flashing a new bootloader ====
 +We can also install a new bootloader from inside Openwrt. With the OEM inventel firmware fcp can write the bootloader image to the mtd0 partition. And with Openwrt firmware we can use **flashcp** (fcp is the old flashcp name).
 +<​code>​opkg update
 +opkg install mtd-utils-flashcp
 +</​code>​
 +Now proceed with flashing:
 +<​code>​
 +root@OpenWrt:/#​ cd /tmp
 +root@OpenWrt:/#​ wget ftp://​ourlocalserver/​newbootloader.rom
 +....
 +root@OpenWrt:/#​ flashcp -v newbootloader.rom /dev/mtd0
 +.....
 +</​code>​
 +
 +==== CFE ====
 +There exists a fully featured CFE for the livebox. The **board ID**s are //blue5g9// (DV4210) and //​blue5g6.3//​ (livebox pro V1). However not (yet) supported officially by Openwrt. It maybe more comfortable for most users since CFE has a web server for updating firmwares.
 +| {{:​meta:​icons:​tango:​package-x-generic.png|}} | Here the links for the CFE binary, prebuilt firmwares and the patch for **Backfire** \\ [[https://​files.myopera.com/​danitool/​linux/​bootloaders/​CFE_blue5g9-nvr.zip|CFE_blue5g9-nvr.zip]] \\ [[https://​files.myopera.com/​danitool/​livebox/​livebox1_backfire_firmwares-CFE.zip|livebox1_backfire_firmwares-CFE.zip]] |
 +
 +===== Hardware mods =====
 +As a beginner, you really should inform yourself about [[doc:​hardware:​soldering]] in general and then obtain some practical experience!
 +
 +==== 64MiB RAM Mod ====
 +| {{:​media:​inventel:​livebox_ram.jpeg?​150x100|}} |The RAM and the flash chip are located under the minipci. For this mod you'll need two RAM chips 32 MiB each one. Note this board uses SDR, and each chip is 16bit bus width. Check datasheets before choosing a suitable RAM chip. |
 +| {{:​media:​inventel:​livebox1-64mb_ram-mod.jpg?​150x100|}} | Both chips should be identical. And you'll need a custom bootloader to recognize 64 MB, 2 chips (32 bit bus width). Here the custom **Redboot/​CFE** for this and other RAM sizes/​confirgurations\\ [[https://​docs.google.com/​uc?​export=download&​id=0B-EMoBe-_OdBYlRuTklkU19XY1k|livebox1-bootloaders-cfe_redboot.zip]] |
 +
 +==== USB Mod ====
 +You can convert your usb slave port to host. See details in the pics:
 +| {{:​media:​inventel:​usb_slave-host_mod_sch.png?​150|}} | The mod is very simple, but to isolate the **USB1_PWRFLT** (AD12) is very difficult since you must cut two layers of copper, making a deep ditch. Don't try to isolate the pin (and thus this mod) if you don't know what are you doing. \\ The 470uF electrolytic capacitor is optional but highly recommendable to avoid problems with hotplugging. The capacitors at the D+ D- lines are already present in the board, thus you won't need to solder them. |
 +| {{:​media:​inventel:​slave-host_mod.jpg?​150x100}} |  {{:​media:​inventel:​slave-host_mod1.jpg?​150x100}} ​ {{:​media:​inventel:​slave-host_mod2.jpg?​150x100}} ​ {{:​media:​inventel:​slave-host_mod3.jpg?​150x100}} ​ {{:​media:​inventel:​slave-host_mod4.jpg?​150x100}} ||
 +
 +Now for making it work we need to patch the kernel. This is the patch for Backfire:
 +<code diff>--- a/​drivers/​usb/​host/​ohci-bcm63xx.c
 ++++ b/​drivers/​usb/​host/​ohci-bcm63xx.c
 +@@ -24,7 +24,6 @@
 +          * port 2 can be shared with USB slave, but all boards seem to
 +          * have only one host port populated, so we can hardcode it
 +          */
 +- ohci->​num_ports = 1;
 + 
 +  ret = ohci_init(ohci);​
 +  if (ret < 0)
 +@@ -80,7 +79,7 @@
 + 
 + ​ clk_enable(clk);​
 + ​ usb_host_clock = clk;
 +- bcm_rset_writel(RSET_OHCI_PRIV,​ 0, OHCI_PRIV_REG);​
 ++ bcm_rset_writel(RSET_OHCI_PRIV,​ 1, OHCI_PRIV_REG);​
 + 
 +  } else if (BCMCPU_IS_6358()) {
 +  reg = bcm_rset_readl(RSET_USBH_PRIV,​ USBH_PRIV_SWAP_REG);​
 +</​code>​
 +Build Openwrt with this patch and flash the new firmware, or just replace your ohci-hcd.ko module with the new one in the router. This is a log from dmesg with both USBs working as hosts:
 +
 +<WRAP bootlog>
 +<​nowiki>​....
 +....
 +NET: Registered protocol family 24
 +
 +nf_conntrack version 0.5.0 (213 buckets, 852 max)
 +
 +ohci_hcd: USB 1.1 '​Open'​ Host Controller (OHCI) Driver
 +bcm63xx_ohci ​
 +bcm63xx_ohci.0:​ BCM63XX integrated OHCI controller
 +bcm63xx_ohci bcm63xx_ohci.0:​ new USB bus registered, assigned bus number 1
 +bcm63xx_ohci bcm63xx_ohci.0:​ irq 20, io mem 0xfffe1b00
 +usb usb1: configuration #1 chosen from 1 choice
 +hub 1-0:1.0: USB hub found
 +hub 1-0:1.0: 2 ports detected
 +
 +Initializing USB Mass Storage driver...
 +usbcore: registered ​
 +new interface driver usb-storage
 +USB Mass Storage support registered.
 +
 +usb 1-1: new full speed USB device using bcm63xx_ohci and address 2
 +
 +usb 1-1: configuration #1 chosen from 1 choice
 +scsi0 : SCSI emulation for USB Mass Storage devices
 +
 +scsi 0:0:0:0: CD-ROM ​           Vodafone CD ROM (Huawei) ​ 2.31 PQ: 0 ANSI: 2
 +
 +usb 1-2: new full speed USB device using bcm63xx_ohci and address 3
 +
 +usb 1-2: configuration #1 chosen from 1 choice
 +scsi1 : SCSI emulation for USB Mass Storage devices
 +
 +scsi 1:0:0:0: Direct-Access ​    ​M-Sys ​   Dell Memory Key  4.60 PQ: 0 ANSI: 0 CCS
 +sd 1:0:0:0: [sda] 239872 512-byte logical blocks: (122 MB/117 MiB)
 +sd 1:0:0:0: [sda] Write Protect is off
 +sd 1:0:0:0: [sda] Assuming drive cache: write through
 +sd 1:0:0:0: [sda] Assuming drive cache: write through
 + sda: sda1
 +sd 1:0:0:0: [sda] Assuming drive cache: write through
 +sd 1:0:0:0: [sda] Attached SCSI removable disk</​nowiki>​
 +</​WRAP>​\\
 +
 +===== Firmware mods =====
 +  * Wireless router with a [[:​doc:​recipes:​3gdongle|3g-dongle]] (**12.09**, without luci):\\ [[https://​docs.google.com/​uc?​export=download&​id=0B-EMoBe-_OdBeTBnLU5NT1p3OUE|OpenWrt_AA-usb_3g-brcm_wl_mini.zip]]
 +
 +===== Bootlogs =====
 +==== OEM bootlog ====
 +<WRAP bootlog>
 +<​nowiki>​96432SDRAM16bit_5GX101201234
 +Hardware version 0x90 BLUE5G.9
 +56+678ESA: 30:​78:​30:​30:​3a:​30
 +WEP KEY : FFFFFFFFFFFFFFFFFFFFFFFFFF
 +Auto-negotiation timed-out
 +10 MB Half-Duplex (assumed)
 +Ethernet eth0: MAC address 30:​78:​30:​30:​3a:​30
 +IP: 10.7.58.112,​ Default server: 10.7.58.114
 +Hardware version 0x10 BLUE5G.9 WITHOUT_OPTION
 +Factory Settings Recovery Switch OFF High
 +Register : 1f
 +
 +RedBoot(tm) bootstrap and debug environment [ROM]
 +Non-certified release, version release-wanadoo-fr - built 16:25:10, Jun 20 2006
 +
 +Platform: Blue_5g (MIPS32 4Kc) 
 +Copyright (C) 2000, 2001, 2002, Red Hat, Inc.
 +
 +RAM: 0x80000000-0x81000000,​ [0x80445fb0-0x80fe2000] available
 +FLASH: 0xbe400000 - 0xbec00000, 128 blocks of 0x00010000 bytes each.
 +== Executing boot script in 0.050 seconds - enter ^C twice to abort
 +hit '
 +' (0x0A)
 +== Executing boot script in 0.040 seconds - enter ^C twice to abort
 +RedBoot> fis load -b 0x80010000 -m cramfs -f Image user_fs
 +Partition is : 0xbe430000 - 0x390000 ​
 +mlen : 0x36d038 ​
 +begin_tag : 0xbe79d000, end : 0xbe79d038
 +Verif OK 
 +Looking for Image in cramfs user_fs partition
 +cramfs_load : b 0x80010000, c 0xBE430000, s 0x00390000, f Image
 +unable to find magic
 +Found a valid SQUASHFS superblock on user_fs.
 + Inodes are compressed
 + Data is compressed
 + Fragments are compressed
 + Check data is not present in the filesystem
 + Fragments are  present in the filesystem
 + Always_use_fragments option is not specified
 + Duplicates are  removed
 + Filesystem size 3590371 bytes
 + Block size 65536
 + Number of fragments 32
 + Number of inodes 702
 + Number of uids 1
 + Number of gids 0
 +
 +Scanning existing filesystem...
 +Read existing filesystem, 701 inodes scanned
 +Return with root_try==0
 +RedBoot> exec -c "​boot_loader=RedBoot root=1F01 mem=16M"​ 0x80010000
 +root_try == 0 : leave boot cmd alone
 +Now booting linux kernel:
 + Base address 0x8000fc00 Entry 0x80010000
 + ​Cmdline : boot_loader=RedBoot root=1F01 mem=16M hwversion=BLUE5G.9-WITHOUT_OPTION redbootversion="​release-wanadoo-fr-Jun 20 2006-16:​25:​10"​
 +
 +Linux version 2.6.12.6 (lenerk@rennslxcomp25) (gcc version 3.4.2) #1 Tue Jan 18 16:19:04 CET 2011
 +C0 config : 2147516544x ​
 +CPU revision is: 00029107
 +mpi: No Card is in the PCMCIA slot
 +Determined physical RAM map:
 + ​memory:​ 00fa0000 @ 00000000 (usable)
 + ​memory:​ 00060000 @ 00fa0000 (reserved)
 +On node 0 totalpages: 4000
 +  DMA zone: 4000 pages, LIFO batch:1
 +  Normal zone: 0 pages, LIFO batch:1
 +  HighMem zone: 0 pages, LIFO batch:1
 +Built 1 zonelists
 +Kernel command line: boot_loader=RedBoot root=1F01 hwversion=BLUE5G.9-WITHOUT_OPTION redbootversion="​release-wanadoo-fr-Jun 20 2006-16:​25:​10"​
 +brcm mips: enabling icache and dcache...
 +Primary instruction cache 16kB, physically tagged, 2-way, linesize 16 bytes.
 +Primary data cache 8kB, 2-way, linesize 16 bytes.
 +Synthesized TLB refill handler (19 instructions).
 +Synthesized TLB load handler fastpath (31 instructions).
 +Synthesized TLB store handler fastpath (31 instructions).
 +Synthesized TLB modify handler fastpath (30 instructions).
 +PID hash table entries: 64 (order: 6, 1024 bytes)
 +Using 128.000 MHz high precision timer.
 +Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
 +Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
 +Memory: 13092k/​16000k available (1861k kernel code, 2888k reserved, 251k data, 340k init, 0k highmem)
 +
 +Calibrating delay loop... (HZ=200) 255.59 BogoMIPS (lpj=638976)
 +
 +Mount-cache hash table entries: 512
 +Checking for '​wait'​ instruction... ​ unavailable.
 +NET: Registered protocol family 16
 +Squashfs 2.2 (released 2005/07/03) (C) 2002-2005 Phillip Lougher
 +devfs: 2004-01-31 Richard Gooch (rgooch@atnf.csiro.au)
 +devfs: boot_options:​ 0x1
 +JFFS2 version 2.2. (C) 2001-2003 Red Hat, Inc.
 +io scheduler noop registered
 +lo:​register_netdevice:​2847
 +PPP generic driver version 2.4.2
 +NET: Registered protocol family 24
 +
 +initialize redboot parser
 +Found: AMD AM29LV640MB
 +Inventel Blue5G Flash: Found 1 x16 devices at 0x0 in 16-bit bank
 +number of JEDEC chips: 1
 +cfi_cmdset_0002:​ Disabling erase-suspend-program due to code brokenness.
 +parse_redboot_partitions
 +Searching for RedBoot partition table in Inventel Blue5G Flash at offset 0x7f0000
 +6 RedBoot partitions found on MTD device Inventel Blue5G Flash
 +
 +Creating 6 MTD partitions on "​Inventel Blue5G Flash":​
 +0x00000000-0x00030000 : "​RedBoot"​
 +0x00030000-0x003c0000 : "​user_fs"​
 +0x003c0000-0x00750000 : "​user_2_fs"​
 +0x00750000-0x007f0000 : "​jffs_system"​
 +0x007f0000-0x007ff000 : "FIS directory"​
 +0x007ff000-0x00800000 : "​RedBoot config"​
 +
 +bcm963xx_serial driver v2.0
 +u32 classifier
 +    OLD policer on 
 +    input device check on 
 +NET: Registered protocol family 2
 +IP: routing cache hash table of 512 buckets, 4Kbytes
 +TCP established hash table entries: 1024 (order: 1, 8192 bytes)
 +TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
 +TCP: Hash tables configured (established 1024 bind 1024)
 +ip_conntrack version 2.1 (125 buckets, 1000 max) - 212 bytes per conntrack
 +ip_tables: (C) 2000-2002 Netfilter core team
 +NET: Registered protocol family 1
 +NET: Registered protocol family 17
 +Ebtables v2.0 registered
 +NET: Registered protocol family 8
 +NET: Registered protocol family 20
 +VFS: Mounted root (squashfs filesystem) readonly.
 +Mounted devfs on /dev
 +Freeing unused kernel memory: 340k freed
 +
 +init started: ​ BusyBox v1.1.3 (2011.01.18-15:​26+0000) multi-call binary
 +init started: ​ BusyBox v1.1.3 (2011.01.18-15:​26+0000) multi-call binary
 +
 +Starting pid 15, console /dev/tts/0: '/​etc_ro_fs/​init.d/​sysinit'​
 +Algorithmics/​MIPS FPU Emulator v1.5
 +
 +SYSINIT
 +
 +INVENTEL version : v5.11.13-sip-sp
 +
 +Mounting proc filesystem ...
 +Mounting tmpfs filesystem ...
 +> NORMAL BOOT <
 +
 ++ [ -f /​etc_ro_fs/​autoconf.conf ]
 ++ . /​etc_ro_fs/​autoconf.conf
 ++ CONFIG_TARGET_NAME=WANADOO
 ++ CONFIG_TARGET_NAME_ALTERNATE=y
 ++ CONFIG_TARGET_NAME_ALTERNATE_NAME=Livebox
 ++ CONFIG_GENERATION_5G=y
 ++ CONFIG_GATEWAY_RESIDENTIAL=y
 ++ CONFIG_BCM_VARIANT=6348
 ++ CONFIG_LINUX_2_6=y
 ++ CONFIG_LB2_NONE=y
 ++ CONFIG_RELEASE=y
 ++ CONFIG_STRIP_LIBS=y
 ++ CONFIG_DEFAULT_KERNEL_CONFIG_FILE=Config-LiveBox1-5G
 ++ CONFIG_DEFAULT_BUSYBOX_CONFIG_FILE=Config-Wanadoo-Release
 ++ CONFIG_ROOT_SQUASHFS=y
 ++ CONFIG_ROOT_SPLIT=y
 ++ CONFIG_RELEASE_BASE_DIR_HOME=y
 ++ CONFIG_GENERATE_WEBUPDATE=y
 ++ CONFIG_GENERATE_WEBUPDATE_COMPLETEUPGRADECLONE=y
 ++ CONFIG_GENERATE_WEBUPDATE_PARTIALUPGRADECLONE=y
 ++ CONFIG_DEFAULT_UPDATE_DIRECTORY=inventel/​blue_5g/​wanadoo-sp/​release-d
 ++ CONFIG_DEFAULT_UPDATE_DIRECTORY_FORCE=y
 ++ CONFIG_DEFAULT_UPDATE_MACHINE=developers.inventel.com
 ++ CONFIG_DEFAULT_UPDATE_USERNAME=inventel
 ++ CONFIG_DEFAULT_UPDATE_PASSWORD=inventel
 ++ CONFIG_UPDATE_ALERT=y
 ++ CONFIG_UPDATE_AUTOUPDATE_DELAY=1
 ++ CONFIG_UPDATE_AUTOUPDATE_ON_FIRST_PPP=y
 ++ CONFIG_AUTOUPDATE_CRON=y
 ++ CONFIG_UPDATE_AUTOUPDATE_CRON_DELAY=864000
 ++ CONFIG_VERSION_NAME_MAJOR=5.11
 ++ CONFIG_VERSION_NAME_MINOR_TYPE=.
 ++ CONFIG_VERSION_NAME_MINOR=13
 ++ CONFIG_VERSION_NAME_SUFFIX=-sip-sp
 ++ CONFIG_VERSION_FQN=v5.11.13-sip-sp
 ++ CONFIG_HW_VERSION=1.0
 ++ CONFIG_INCLUDE_PUBKEY=y
 ++ CONFIG_PUBKEY_FILENAME=release-wanadoo-fr
 ++ CONFIG_ADDRESS_192_168=y
 ++ CONFIG_ADDRESS_IP_0=192.168.1.1
 ++ CONFIG_ADDRESS_NETMASK_0=255.255.255.0
 ++ CONFIG_ADDRESS_BROADCAST_0=192.168.1.255
 ++ ADVANCE_MEMORY_CONFIGURATION=y
 ++ CONFIG_FLASH_64MBIT=y
 ++ CONFIG_SDRAM_128MBIT=y
 ++ CONFIG_PAIRABLE_TIMEOUT=600
 ++ CONFIG_STACK_BLUEZ=y
 ++ CONFIG_BLUEZ_RFCOMM=y
 ++ CONFIG_BLUEZ_SDPD=y
 ++ CONFIG_BLUEZ_PAN=y
 ++ CONFIG_BT_WATCHDOG=y
 ++ CONFIG_BLUETOOTH=y
 ++ CONFIG_BTNAME_HOSTNAME=y
 ++ CONFIG_BLUETOOTH_OFF=y
 ++ CONFIG_BLUETOOTH_ALTERNATE=y
 ++ CONFIG_BLUETOOTH_ALTERNATE_VERSION=0x34313832
 ++ CONFIG_DECT_HCI=y
 ++ CONFIG_DECT_BUTTON_PAIRING=y
 ++ CONFIG_DECT_BUTTON_PAGING=y
 ++ CONFIG_DECT_USB_SERIAL=y
 ++ CONFIG_DECT_USB=y
 ++ CONFIG_DECT_USB_API_G=y
 ++ CONFIG_DECT_DISABLE_UPDATE=y
 ++ CONFIG_BLUEZ_TEST=y
 ++ CONFIG_DEVGATEWAY=y
 ++ CONFIG_INCLUDE_ENGLISH_ORANGE_SP=y
 ++ CONFIG_INCLUDE_SPANISH_ORANGE=y
 ++ CONFIG_DEFAULT_SPANISH_ORANGE=y
 ++ CONFIG_ADSL=y
 ++ CONFIG_ADSL_RTC=y
 ++ CONFIG_ADSL_A2pBT009c1=y
 ++ CONFIG_ADSL_PPP_NAME=orangeuser@orangeadsl
 ++ CONFIG_ADSL_PPP_PASS=orangeuser123
 ++ CONFIG_ADSLCTL=y
 ++ CONFIG_ADSL_MOD_AUTO=y
 ++ CONFIG_PPPOE_PASSTHRU=y
 ++ CONFIG_ADSL_SET_MAX_UPLOAD_ON_SYNCHRO=y
 ++ CONFIG_ADSL_SET_MAX_UPLOAD_ON_SYNCHRO_WOO_SP=y
 ++ CONFIG_ADSL_BRIDAGE_WOO_SP=y
 ++ CONFIG_ADSL_DEFAULT_BRIDAGE_PROFILE=2
 ++ CONFIG_ADSL_VP=8
 ++ CONFIG_ADSL_VC=35
 ++ CONFIG_ADSL_PROTOCOL=pppoe
 ++ CONFIG_ADSL_ENCAPS=LLCMUX
 ++ CONFIG_ADSL_MAX_CONNECT_TIME=597600
 ++ CONFIG_BCM_USB=y
 ++ CONFIG_BCM_USB_PRODUCT_NAME=Inventel Gateway
 ++ CONFIG_USB_HOST=y
 ++ CONFIG_USBMGR=y
 ++ CONFIG_WIRELESS_LAN=y
 ++ CONFIG_WIRELESS_LAN_WEPONLY_HANDLED_BY_NAS=y
 ++ CONFIG_WIFI_MAC_FILTER=y
 ++ CONFIG_WIFI_BLUETOOTH_COEXISTENCE=y
 ++ CONFIG_WIRELESS_BCMTOOLS=y
 ++ CONFIG_UPNP=y
 ++ CONFIG_EBTABLES=y
 ++ CONFIG_IPROUTE2=y
 ++ CONFIG_IPROUTE2_IP=y
 ++ CONFIG_IPROUTE2_TC=y
 ++ CONFIG_REMOTE_MGT=y
 ++ CONFIG_COUNTRY_SPAIN=y
 ++ CONFIG_SUPPORT_TPSL=y
 ++ CONFIG_DHCP_MONITOR=y
 ++ CONFIG_SUPPORT_TPSL_ON_DEFAULT=y
 ++ CONFIG_SUPPORT_VISIO=y
 ++ CONFIG_WIFI_SECURITY_WPA_ONLY=y
 ++ CONFIG_DEFINITIVE_PASSWORD=y
 ++ CONFIG_WANADOO_SERVER_KIT_DB=y
 ++ CONFIG_WANADOO_DB_UPDATE_DELAY=1
 ++ CONFIG_FT_SERVER_KIT_URL=http://​suivilb.wanadoo.fr/​servlets/​maj
 ++ CONFIG_FT_SERVER_KIT_COUNTRY_CODE=1034
 ++ CONFIG_FT_UPDATE_SOLUTION=y
 ++ CONFIG_FEATURE_UPDATE_FT=y
 ++ CONFIG_SUPPORT_FIRMWARE_PUSH=y
 ++ CONFIG_SUPPORT_HOMELIVE=y
 ++ CONFIG_GENERIC_SPI=y
 ++ CONFIG_WEB=y
 ++ CONFIG_WEB_LEFT_MENU_STYLE=y
 ++ CONFIG_WEB_LOGIN=admin
 ++ CONFIG_WEB_PASSWORD=admin
 ++ CONFIG_WEB_WANADOO_LIVEBOX_2=y
 ++ CONFIG_WEB_ORANGE=y
 ++ CONFIG_UPNP_DEFAULT=y
 ++ CONFIG_VOIP=y
 ++ CONFIG_VOIP_INVH323_UMA_FT=y
 ++ CONFIG_VOIP_INVH323_UMA_FT_SECGW=sgw.orange.es
 ++ CONFIG_VOIP_INVH323_UMA_FT_QOS=y
 ++ CONFIG_DSCP_REMARKING=y
 ++ CONFIG_VOIP_RADVISION=y
 ++ CONFIG_VOIP_RADVISION_SPAIN=y
 ++ [ ! -f /​etc_ro_fs/​autoconf.conf ]
 ++ [ -z y ]
 ++ cat /proc/mtd
 ++ grep user.*_fs+ cut -f1 -d:
 +
 ++ mtdlist=mtd1
 +mtd2
 ++ [ -h /dev/root ]
 ++ ls -al /dev/root
 ++ sed s/.* -> mtdblock/​mtd/​
 ++ mtdroot=mtd1
 ++ echo mtd1 mtd2
 ++ sed s/mtd1//
 ++ mtdlist= mtd2
 ++ echo mtd2
 ++ sed s/mtd//
 ++ mtdlist=2
 ++ echo 2
 +2
 ++ echo Try to mount /​dev/​mtdblock2 on /usr
 +Try to mount /​dev/​mtdblock2 on /usr
 ++ flash_verify /dev/mtd2 0x29032005
 +Magic: 29032005
 +/dev/mtd2: opening...
 +/dev/mtd2: reading signature...
 +Signature (48 bytes):
 +    94 00 03 02 00 14 9b 37 26 58 31 f2 32 5a d6 b8 
 +    48 1b 13 d1 47 f6 0f b2 6c d4 00 14 69 ec 6d 07 
 +    8a a7 b3 34 e9 f1 c3 8a 32 12 34 9a e9 f5 77 a4 
 +/dev/mtd2: hashing...
 +/dev/mtd2: importing public key...
 +/dev/mtd2: verifying hash...
 +/dev/mtd2: verification OK
 ++ mount -t squashfs /​dev/​mtdblock2 /usr
 ++ result=0
 ++ [ ! 0 -eq 0 ]
 ++ rm -f /​var/​run/​rescue_boot
 ++ break
 ++ [ ! -e /etc/rc.d ]
 ++ rm -f /​tmp/​touch.test
 ++ find /​lib/​modules//​ -name prod_test*
 ++ insmod /​lib/​modules//​2.6.12.6/​extra/​prod_test.ko
 +prod_test: module license '​Proprietary'​ taints kernel.
 +
 +insmod: cannot insert `/​lib/​modules//​2.6.12.6/​extra/​prod_test.ko':​ Success (1): Success
 ++ [ 1 = 0 ]
 ++ [ -n mtd0 ]
 ++ cat /proc/mtd
 +dev:    size   ​erasesize ​ name
 +mtd0: 00030000 00010000 "​RedBoot"​
 +mtd1: 00390000 00010000 "​user_fs"​
 +mtd2: 00390000 00010000 "​user_2_fs"​
 +mtd3: 000a0000 00010000 "​jffs_system"​
 +mtd4: 0000f000 00010000 "FIS directory"​
 +mtd5: 00001000 00010000 "​RedBoot config"​
 ++ cat /proc/mtd
 ++ grep jffs_system
 ++ sed -n s/​\(mtd\)\(.*\):​\(.\)*/​\2/​p
 ++ mount -t jffs2 -o rw /​dev/​mtdblock3 /​mnt/​jffs2/​jffs2_3
 ++ rm -f /​tmp/​touch.test
 ++ touch /​tmp/​touch.test
 ++ [ ! -e /​tmp/​touch.test ]
 ++ rm -f /​tmp/​touch.test
 ++ [ -e /​tmp/​touch.test ]
 ++ [ ! -f /​mnt/​jffs2/​jffs2_3/​etc/​issue ]
 ++ [ ! -f /​mnt/​jffs2/​jffs2_3/​etc/​finished ]
 ++ cat /​etc/​issue.bluedsl
 ++ grep version
 ++ x=INVENTEL version : v5.11.13-sip-sp
 ++ cat /​etc_ro_fs/​issue.bluedsl
 ++ grep version
 ++ y=INVENTEL version : v5.11.13-sip-sp
 ++ [ INVENTEL version : v5.11.13-sip-sp = INVENTEL version : v5.11.13-sip-sp ]
 ++ echo Up to date version INVENTEL version : v5.11.13-sip-sp
 +Up to date version INVENTEL version : v5.11.13-sip-sp
 ++ [ -f /​usr/​etc_ro_fs/​init.d/​usrboot ]
 ++ /​usr/​etc_ro_fs/​init.d/​usrboot
 ++ rm -f /​var/​run/​rescue_boot
 ++ [ ! -f /​usr/​etc/​finished ]
 ++ grep version
 ++ cat /​usr/​etc/​issue.bluedsl
 ++ x=INVENTEL version : v5.11.13-sip-sp
 ++ cat /​usr/​etc_ro_fs/​issue.bluedsl
 ++ grep version
 ++ y=INVENTEL version : v5.11.13-sip-sp
 ++ [ INVENTEL version : v5.11.13-sip-sp = INVENTEL version : v5.11.13-sip-sp ]
 ++ echo /usr up to date version INVENTEL version : v5.11.13-sip-sp
 +/usr up to date version INVENTEL version : v5.11.13-sip-sp
 ++ exit 0
 ++ exit 0
 +
 +Starting pid 99, console /dev/tts/0: '/​etc_ro_fs/​init.d/​rc.sysinit'​
 +Mounting other filesystems ...
 +cp: /​etc/​crontab_root:​ No such file or directory
 ++ echo Switching to RUNLEVEL 1 ...
 +Switching to RUNLEVEL 1 ...
 ++ runlevel_manage 1
 ++ local previous
 ++ runlevel=1
 ++ [ -f /​var/​run/​runlevel ]
 ++ previous=N
 ++ [ 1 = N ]
 ++ local scriptlist directorylist
 ++ directorylist=/​etc/​rc1.d/:/​usr/​etc/​rc1.d/​
 ++ OLDIFS=
 +
 ++ IFS=:
 +
 ++ scriptlist=
 ++ find /etc/rc1.d/ -name K*
 ++ sed s,/​etc/​rc1.d/,,​
 ++ scriptlist= ​
 ++ find /​usr/​etc/​rc1.d/​ -name K*
 ++ sed s,/​usr/​etc/​rc1.d/,,​
 ++ scriptlist=  ​
 ++ sort -u
 ++ scriptlist=
 ++ echo 1
 ++ echo 108
 ++ scriptlist=
 ++ find /etc/rc1.d/ -name S*
 ++ sed s,/​etc/​rc1.d/,,​
 ++ scriptlist=S84usbdect_apig
 +S20network
 +S25update_ft
 +S10adsl
 +S26pair
 +S27http_server
 +S25wireless
 +S22backlight
 +S05hardware
 +S99printkoff
 +S25dhcp_dns_server ​
 ++ find /​usr/​etc/​rc1.d/​+ sed s,/​usr/​etc/​rc1.d/,,​
 + -name S*
 ++ scriptlist=S22usb-host
 +S22upnp
 +S28krtp
 +S85voip
 +S27bluetooth
 +S90post_webupgrade S84usbdect_apig
 +S20network
 +S25update_ft
 +S10adsl
 +S26pair
 +S27http_server
 +S25wireless
 +S22backlight
 +S05hardware
 +S99printkoff
 +S25dhcp_dns_server ​
 ++ echo S22usb-host
 ++ sort -u
 ++ echo S22upnp
 ++ echo S28krtp
 ++ echo S85voip
 ++ echo S27bluetooth
 ++ echo S90post_webupgrade
 ++ echo S84usbdect_apig
 ++ echo S20network
 ++ echo S25update_ft
 ++ echo S10adsl
 ++ echo S26pair
 ++ echo S27http_server
 ++ echo S25wireless
 ++ echo S22backlight
 ++ echo S05hardware
 ++ echo S99printkoff
 ++ echo S25dhcp_dns_server
 ++ scriptlist=S05hardware
 +S10adsl
 +S20network
 +S22backlight
 +S22upnp
 +S22usb-host
 +S25dhcp_dns_server
 +S25update_ft
 +S25wireless
 +S26pair
 +S27bluetooth
 +S27http_server
 +S28krtp
 +S84usbdect_apig
 +S85voip
 +S90post_webupgrade
 +S99printkoff
 ++ [ -f /​etc/​rc1.d/​S05hardware ]
 ++ realscript=/​etc/​rc1.d/​S05hardware
 ++ [ 1 != N ]
 ++ number=05hardware
 ++ echo 05hardware
 ++ cut -c 1-2
 ++ number=05
 ++ echo 05
 ++ suffix=hardware
 ++ stop=/​etc/​rc1.d/​K[0-9][0-9]hardware
 ++ echo /etc/rc1.d/
 ++ sed s,rc1,rcN,
 ++ previous_start=/​etc/​rcN.d/​S[0-9][0-9]hardware
 ++ [ -f /​etc/​rcN.d/​S[0-9][0-9]hardware ]
 ++ sh /​etc/​rc1.d/​S05hardware start
 +Starting core drivers...
 +Watchdog init Build: ​ Jan 18 2011  16:28:01
 +
 +irq register OK
 +SPI driver Jan 18 2011 16:28:00
 +   ​usage:​ insmod spi.o [debug=1] [tty_low_latency=1]
 +Broadcom BCM6348B0 Ethernet Network Device v0.3 Jan 18 2011 16:17:14
 +Config Internal PHY Through MDIO
 +BCM63xx_ENET:​ Auto-negotiation timed-out
 +BCM63xx_ENET:​ 100 MB Full-Duplex (auto-neg)
 +eth0:​register_netdevice:​2847
 +eth0: MAC Address: 00:​07:​3A:​FF:​FF:​FF
 +Broadcom BCM6348B0 Ethernet Network Device v0.3 Jan 18 2011 16:17:14
 +Config External PHY Through MDIO
 +eth0 Link UP.
 +BCM63xx_ENET:​ Auto-negotiation timed-out
 +BCM63xx_ENET:​ 10 MB Half-Duplex (assumed)
 +eth1:​register_netdevice:​2847
 +eth1: MAC Address: 00:​07:​3A:​FF:​FF:​FF
 +USB MAC ADDRESS belongs to 30:​78:​30:​30:​3A:​32
 +USB HOST MAC ADDRESS belongs to 30:​78:​30:​30:​3A:​33
 +Broadcom BCM6348B0 USB Network Device v0.4 Jan 18 2011 16:17:15
 +usb0: MAC Address: 30 78 30 30 3A 32
 +usb0: Host MAC Address: 30 78 30 30 3A 33
 +usb0:​register_netdevice:​2847
 +Switch module creating proc entry
 +dummy0:​register_netdevice:​2847
 +dummy1:​register_netdevice:​2847
 +
 ++ break
 ++ [ -f /​etc/​rc1.d/​S10adsl ]
 ++ realscript=/​etc/​rc1.d/​S10adsl
 ++ [ 1 != N ]
 ++ number=10adsl
 ++ echo 10adsl
 ++ cut -c 1-2
 ++ number=10
 ++ echo 10
 ++ suffix=adsl
 ++ stop=/​etc/​rc1.d/​K[0-9][0-9]adsl
 ++ echo /etc/rc1.d/
 ++ sed s,rc1,rcN,
 ++ previous_start=/​etc/​rcN.d/​S[0-9][0-9]adsl
 ++ [ -f /​etc/​rcN.d/​S[0-9][0-9]adsl ]
 ++ sh /​etc/​rc1.d/​S10adsl start
 +Loading ADSL & ATM kernel modules...
 +Starting ADSL daemon...
 ++ break
 ++ [ -f /​etc/​rc1.d/​S20network ]
 ++ realscript=/​etc/​rc1.d/​S20network
 ++ [ 1 != N ]
 ++ number=20network
 ++ echo 20network
 ++ cut -c 1-2
 ++ number=20
 ++ echo 20
 ++ suffix=network
 ++ stop=/​etc/​rc1.d/​K[0-9][0-9]network
 ++ echo /etc/rc1.d/
 ++ sed s,rc1,rcN,
 ++ previous_start=/​etc/​rcN.d/​S[0-9][0-9]network
 ++ [ -f /​etc/​rcN.d/​S[0-9][0-9]network ]
 ++ sh /​etc/​rc1.d/​S20network start
 +BcmAdsl_Initialize=0xC00DF0C8,​ g_pFnNotifyCallback=0xC00F4034
 +pSdramPHY=0xA0FFFFF8,​ 0xD1AA192F 0xDEADDEAD
 +AdslCoreHwReset:​ AdslOemDataAddr = 0xA0FFDE10
 +AdslCoreEcUpdTmr:​ timeMs=-280130 ecUpdMask=0x40000
 +
 +Local network configuration ...
 +Ethernet network configuration ...
 +Hostname configuration : WANADOO-
 +br0:​register_netdevice:​2847
 +
 +device usb0 entered promiscuous mode
 +br1:​register_netdevice:​2847
 +device eth0 entered promiscuous mode
 +br1: port 1(eth0) entering learning state
 +device eth1 entered promiscuous mode
 +br0: port 2(eth1) entering learning state
 +br0: port 1(usb0) entering learning state
 +Killing dhcp-monitor with SIGTERM (1/5)...
 +br1: topology change detected, propagating
 +br1: port 1(eth0) entering forwarding state
 +br0: topology change detected, propagating
 +br0: port 2(eth1) entering forwarding state
 +br0: topology change detected, propagating
 +br0: port 1(usb0) entering forwarding state
 +
 +device dummy0 is not a slave of br1
 +device dummy0 entered promiscuous mode
 +
 +br1: port 2(dummy0) entering learning state
 +
 ++ break
 ++ [ -f /​etc/​rc1.d/​S22backlight ]
 ++ realscript=/​etc/​rc1.d/​S22backlight
 ++ [ 1 != N ]
 ++ number=22backlight
 ++ echo 22backlight
 ++ cut -cdevice eth0 left promiscuous mode
 +
 +br1: port 1(eth0) entering disabled state
 +
 +delif eth0 from br1, result: 0
 +addif eth0 to br1, result: 16
 + 1-2
 ++ number=22
 ++ echo 22
 ++ suffix=backlight
 ++ stop=/​etc/​rc1.d/​K[0-9][0-9]backlight
 ++ echo /etc/rc1.d/
 ++ sed s,rc1,rcN,
 ++ previous_start=/​etc/​rcN.d/​S[0-9][0-9]backlight
 ++ [ -f /​etc/​rcN.d/​S[0-9][0-9]backlight ]
 ++ sh /​etc/​rc1.d/​S22backlight start
 +Update Backlight state
 +On
 +Advanced
 +Device open failed: Address family not supported by protocol
 ++ break
 ++ [ -f /​etc/​rc1.d/​S22upnp ]
 ++ [ -f /​usr/​etc/​rc1.d/​S22upnp ]
 ++ realscript=/​usr/​etc/​rc1.d/​S22upnp
 ++ [ 1 != N ]
 +br1: topology change detected, propagating
 +
 +br1: port 2(dummy0) entering forwarding state
 +
 ++ number=22upnp
 ++ echo 22upnp
 ++ cut -c 1-2
 ++ number=22
 ++ echo 22
 ++ suffix=upnp
 ++ stop=/​usr/​etc/​rc1.d/​K[0-9][0-9]upnp
 ++ echo /​usr/​etc/​rc1.d/​
 ++ sed s,rc1,rcN,
 ++ previous_start=/​usr/​etc/​rcN.d/​S[0-9][0-9]upnp
 ++ [ -f /​usr/​etc/​rcN.d/​S[0-9][0-9]upnp ]
 +device eth0 entered promiscuous mode
 +
 +br1: port 1(eth0) entering learning state
 +
 +addif eth0 to br1, result: 0
 +device eth1 left promiscuous mode
 +
 +br0: port 2(eth1) entering disabled state
 +
 +delif eth1 from br0, result: 0
 +addif eth1 to br0, result: 16
 ++ sh /​usr/​etc/​rc1.d/​S22upnp start
 +No ADSL, default: abc0
 +Upnp init ...
 +br1: topology change detected, propagating
 +br1: port 1(eth0) entering forwarding state
 +device eth1 entered promiscuous mode
 +br0: port 2(eth1) entering learning state
 +
 +addif eth1 to br0, result: 0
 +MyConfig in /​usr/​etc/​upnp.conf:​
 + Debug=0
 + descDocName:​ gatedesc.xml
 + xmlPath: /​usr/​etc/​linuxigd
 + g_iptables:​ iptables
 + g_forwardChainName:​ upnp
 + g_preroutingChainName:​ upnp
 + g_upstreamBitrate:​ 0
 + g_downstreamBitrate:​ 0
 +
 + TGU: IpAddress: 192.168.1.1
 ++ break
 ++ [ -f /​etc/​rc1.d/​S22usb-host ]
 ++ [ -f /​usr/​etc/​rc1.d/​S22usb-host ]
 ++ realscript=/​usr/​etc/​rc1.d/​S22usb-host
 ++ [ 1 != N ]
 ++ number=22usb-host
 ++ echo 22usb-host
 ++ cut -c 1-2
 ++ number=22
 ++ echo 22
 ++ suffix=usb-host
 ++ stop=/​usr/​etc/​rc1.d/​K[0-9][0-9]usb-host
 ++ echo /​usr/​etc/​rc1.d/​
 ++ sed s,rc1,rcN,
 + INFO : IGD root device successfully registered.
 ++ previous_start=/​usr/​etc/​rcN.d/​S[0-9][0-9]usb-host
 ++ [ -f /​usr/​etc/​rcN.d/​S[0-9][0-9]usb-host ]
 ++ sh /​usr/​etc/​rc1.d/​S22usb-host start
 +br0: topology change detected, propagating
 +br0: port 2(eth1) entering forwarding state
 +usbcore: registered new driver usbfs
 +usbcore: registered new driver hub
 +ohci-hcd: 2004 Nov 08 USB 1.1 '​Open'​ Host Controller (OHCI) Driver (PCI)
 +PCI: Enabling device 0000:​00:​09.0 (0000 -> 0002)
 +PCI: Setting latency timer of device 0000:​00:​09.0 to 64
 +ohci-hcd 0000:​00:​09.0:​ PCI device 14e4:6300 (Broadcom Corporation)
 +ohci-hcd 0000:​00:​09.0:​ new USB bus registered, assigned bus number 1
 +ohci-hcd 0000:​00:​09.0:​ irq 20, io mem 0xfffe1b00
 +hub 1-0:1.0: USB hub found
 +hub 1-0:1.0: 2 ports detected
 +
 +usbmgr[448]:​ start 0.4.8
 +usbmgr[448]:​ sleep time -1 micro sec
 +
 +Name: /​usr/​etc/​usbmgr/​usbmgr.conf
 +Load_from_file:​ /​usr/​etc/​usbmgr/​preload.conf
 ++ break
 ++ [ -f /​etc/​rc1.d/​S25dhcp_dns_server ]
 ++ realscript=/​etc/​rc1.d/​S25dhcp_dns_server
 ++ [ 1 != N ]
 ++ number=25dhcp_dns_server
 ++ echo 25dhcp_dns_server
 ++ cut -c 1-2
 ++ number=25
 ++ echo 25
 ++ suffix=dhcp_dns_server
 ++ stop=/​etc/​rc1.d/​K[0-9][0-9]dhcp_dns_server
 ++ echo /etc/rc1.d/
 ++ sed s,rc1,rcN,
 ++ previous_start=/​etc/​rcN.d/​S[0-9][0-9]dhcp_dns_server
 ++ [ -f /​etc/​rcN.d/​S[0-9][0-9]dhcp_dns_server ]
 ++ sh /​etc/​rc1.d/​S25dhcp_dns_server start
 +usbmgr[450]:​ buffer line: remove T
 +usbmgr[450]:​ class:0x9 subclass:​0x0 protocol:​0x0
 +usbmgr[450]:​ try /​usr/​etc/​usbmgr/​class/​09/​00/​00/​module
 +usbmgr[450]:​ try /​usr/​etc/​usbmgr/​class/​09/​00/​module
 +usbmgr[450]:​ try /​usr/​etc/​usbmgr/​class/​09/​module
 +usbmgr[450]:​ try /​usr/​etc/​usbmgr/​class/​module
 +usbmgr[450]:​ USB device isn't matched the configuration
 +dnsmasq configured as dhcp server
 +sagem
 + INFO : Advertisements Sent.  Listening for requests ... 
 +sagem
 +sagem
 +sagem
 +sagem
 +sagem
 +thomson
 +thomson
 +dnsmasq start ( DNS / DHCP server ) ...
 +dnsmasq -o -r/​etc/​resolv.dnsmasq -z --dhcp-range=192.168.1.9,​192.168.1.200,​24h --dhcp-leasefile=/​etc/​dhcp.leases ​ --dhcp-vendorclass novendor_sagem,​sagem --dhcp-vendorclass novendor_thomson,​thomson --dhcp-userclass nouser_sagem,​IAD5116 --dhcp-userclass nouser_sagem,​IAD61-17 --dhcp-userclass nouser_sagem,​IAD80-16 --dhcp-userclass nouser_sagem,​ITAD80-16 HD --dhcp-userclass nouser_sagem,​ITAD81-160 --dhcp-userclass nouser_sagem,​ITAD81 FT --dhcp-userclass nouser_thomson,​IP921F --dhcp-userclass nouser_thomson,​IP2031F --dhcp-userclass nouser_mltv,​STB_MLTV --dhcp-userclass nouser_mltv,​PC_MLTV --dhcp-ignore=nouser_mltv --dhcp-ignore=novendor_thomson,​nouser_thomson --dhcp-ignore=novendor_sagem,​nouser_sagem
 +[p2] iface->​name:​ br0
 +[p2] iface->​name:​ lo
 ++ break
 ++ [ -f /​etc/​rc1.d/​S25update_ft ]
 ++ realscript=/​etc/​rc1.d/​S25update_ft
 ++ [ 1 != N ]
 ++ number=25update_ft
 ++ echo 25update_ft
 ++ cut -c 1-2
 ++ number=25
 ++ echo 25
 ++ suffix=update_ft
 ++ stop=/​etc/​rc1.d/​K[0-9][0-9]update_ft
 ++ echo+ sed s,rc1,rcN,
 + /​etc/​rc1.d/​
 ++ previous_start=/​etc/​rcN.d/​S[0-9][0-9]update_ft
 ++ [ -f /​etc/​rcN.d/​S[0-9][0-9]update_ft ]
 ++ sh /​etc/​rc1.d/​S25update_ft start
 +France Telecom Firmware Update Client v1.12
 +Copyright Inventel 2005-2006
 ++ break
 ++ [ -f /​etc/​rc1.d/​S25wireless ]
 ++ realscript=/​etc/​rc1.d/​S25wireless
 ++ [ 1 != N ]
 ++ number=25wireless
 ++ echo 25wireless
 ++ cut -c 1-2
 ++ number=25
 ++ echo 25
 ++ suffix=wireless
 ++ stop=/​etc/​rc1.d/​K[0-9][0-9]wireless
 ++ echo /​etc/​rc1.d/​+ sed s,rc1,rcN,
 +
 ++ previous_start=/​etc/​rcN.d/​S[0-9][0-9]wireless
 ++ [ -f /​etc/​rcN.d/​S[0-9][0-9]wireless ]
 ++ sh /​etc/​rc1.d/​S25wireless start
 +PCI: Setting latency timer of device 0000:​00:​01.0 to 64
 +
 +PCI: Enabling device 0000:​00:​01.0 (0004 -> 0006)
 +wl0:​register_netdevice:​2847
 +wl0: Broadcom BCM4318 802.11 Wireless Controller 3.131.35.0.cpe0.0
 +[p2] wl_event, bssid idx: 0
 +[p2] wl_event, dev: 00000000
 +[p2] dev == NULL, using wl->dev
 +[p2] wl_event, dev->​name:​ wl0
 +[p2] wlc_sendup_event,​ bssid:0
 +device wl0 entered promiscuous mode
 +[p2] wl_event, bssid idx: 0
 +[p2] wl_event, dev: 00000000
 +[p2] dev == NULL, using wl->dev
 +[p2] wl_event, dev->​name:​ wl0
 +[p2] wlc_sendup_event,​ bssid:0
 +br0: port 3(wl0) entering learning state
 +
 ++ break
 ++ [ -f /​etc/​rc1.d/​S26pair ]
 ++ realscript=/​etc/​rc1.d/​S26pair
 ++ [ 1 != N ]
 ++ number=26pair
 ++ echo 26pair
 ++ cut -c 1-2
 ++ number=26
 ++ echo 26
 ++ suffix=pair
 ++ stop=/​etc/​rc1.d/​K[0-9][0-9]pair
 ++ sed s,rc1,rcN,
 ++ echo /etc/rc1.d/
 ++ previous_start=/​etc/​rcN.d/​S[0-9][0-9]pair
 ++ [ -f /​etc/​rcN.d/​S[0-9][0-9]pair ]
 ++ sh /​etc/​rc1.d/​S26pair start
 +Bad run level ...
 ++ break
 ++ [ -f /​etc/​rc1.d/​S27bluetooth ]
 ++ [ -f /​usr/​etc/​rc1.d/​S27bluetooth ]
 +Starting pairing manager
 +br0: topology change detected, propagating
 +
 +br0: port 3(wl0) entering forwarding state
 +
 ++ realscript=/​usr/​etc/​rc1.d/​S27bluetooth
 ++ [ 1 != N ]
 ++ number=27bluetooth
 ++ echo 27bluetooth
 ++ cut -c 1-2
 ++ number=27
 ++ echo 27
 ++ suffix=bluetooth
 ++ stop=/​usr/​etc/​rc1.d/​K[0-9][0-9]bluetooth
 ++ echo /​usr/​etc/​rc1.d/​
 ++ sed s,rc1,rcN,
 ++ previous_start=/​usr/​etc/​rcN.d/​S[0-9][0-9]bluetooth
 ++ [ -f /​usr/​etc/​rcN.d/​S[0-9][0-9]bluetooth ]
 ++ sh /​usr/​etc/​rc1.d/​S27bluetooth start
 +Param: ​
 +Update Backlight state
 +On
 +Advanced
 +Device open failed: Address family not supported by protocol
 +s_backlight : 1
 +Function cleanup_link_keys
 +wifi_nb : 0
 +0 link keys removed
 +/​sbin/​iwpriv wl0 del_mac ff:​ff:​ff:​ff:​ff:​ff
 +/​sbin/​iwpriv wl0 maccmd 0
 +Bluetooth configuration ...
 +Bluetooth: Core ver 2.7
 +
 +NET: Registered protocol family 31
 +Bluetooth: HCI device and connection manager initialized
 +Bluetooth: HCI socket layer initialized
 +Bluetooth: L2CAP ver 2.7
 +Bluetooth: L2CAP socket layer initialized
 +Bluetooth: RFCOMM ver 1.5
 +Bluetooth: RFCOMM socket layer initialized
 +Bluetooth: BNEP (Ethernet Emulation) ver 1.2
 +Bluetooth: HCI UART driver ver 2.1
 +Bluetooth: HCI H4 protocol initialized
 +Bluetooth: HCI BCSP protocol initialized
 +Bluetooth: SCO (Voice Link) ver 0.4
 +Bluetooth: SCO socket layer initialized
 +
 +üttySPI, 391Khz
 +SPI: use CS0 on hardware that way have CS0 and CS2 linked, GPIOmode_grp1 configured to use PC-Card
 +ttySPI, 391Khz
 +ttySPI, 781Khz
 +ttySPI, 781Khz
 +ttySPI, 781Khz
 +Hardware version: 0x31303032 - Software version: 0x34313832
 +Bluetooth is OFF in this configuration. Disable scan and exit.
 +
 ++ break
 ++ [ -f /​etc/​rc1.d/​S27http_server ]
 ++ realscript=/​etc/​rc1.d/​S27http_server
 ++ [ 1 != N ]
 ++ number=27http_server
 ++ echo 27http_server
 ++ cut -c 1-2
 ++ number=27
 ++ echo 27
 ++ suffix=http_server
 ++ stop=/​etc/​rc1.d/​K[0-9][0-9]http_server
 ++ echo /etc/rc1.d/
 ++ sed s,rc1,rcN,
 ++ previous_start=/​etc/​rcN.d/​S[0-9][0-9]http_server
 ++ [ -f /​etc/​rcN.d/​S[0-9][0-9]http_server ]
 ++ sh /​etc/​rc1.d/​S27http_server start
 +Websrv start ...
 ++ break
 ++ [ -f /​etc/​rc1.d/​S28krtp ]
 ++ [ -f /​usr/​etc/​rc1.d/​S28krtp ]
 ++ realscript=/​usr/​etc/​rc1.d/​S28krtp
 ++ [ 1 != N ]
 ++ number=28krtp
 ++ echo 28krtp
 ++ cut -c 1-2
 ++ number=28
 ++ echo 28
 ++ suffix=krtp
 ++ stop=/​usr/​etc/​rc1.d/​K[0-9][0-9]krtp
 ++ echo /​usr/​etc/​rc1.d/​
 ++ sed s,rc1,rcN,
 ++ previous_start=/​usr/​etc/​rcN.d/​S[0-9][0-9]krtp
 ++ [ -f /​usr/​etc/​rcN.d/​S[0-9][0-9]krtp ]
 ++ sh /​usr/​etc/​rc1.d/​S28krtp start
 +krtp start ...
 ++ break
 ++ [ -f /​etc/​rc1.d/​S84usbdect_apig ]
 ++ realscript=/​etc/​rc1.d/​S84usbdect_apig
 ++ [ 1 != N ]
 ++ number=84usbdect_apig
 ++ cut -c 1-2
 ++ echo 84usbdect_apig
 ++ number=84
 ++ echo 84
 ++ suffix=usbdect_apig
 ++ stop=/​etc/​rc1.d/​K[0-9][0-9]usbdect_apig
 ++ echo /etc/rc1.d/
 ++ sed s,rc1,rcN,
 ++ previous_start=/​etc/​rcN.d/​S[0-9][0-9]usbdect_apig
 ++ [ -f /​etc/​rcN.d/​S[0-9][0-9]usbdect_apig ]
 ++ sh /​etc/​rc1.d/​S84usbdect_apig start
 +USB DECT Upper driver installed
 +
 ++ break
 ++ [ -f /​etc/​rc1.d/​S85voip ]
 ++ [ -f /​usr/​etc/​rc1.d/​S85voip ]
 ++ realscript=/​usr/​etc/​rc1.d/​S85voip
 ++ [ 1 != N ]
 ++ number=85voip
 ++ echo 85voip
 ++ cut -c 1-2
 ++ number=85
 ++ echo 85
 ++ suffix=voip
 ++ stop=/​usr/​etc/​rc1.d/​K[0-9][0-9]voip
 ++ echo /​usr/​etc/​rc1.d/​
 ++ sed s,rc1,rcN,
 ++ previous_start=/​usr/​etc/​rcN.d/​S[0-9][0-9]voip
 ++ [ -f /​usr/​etc/​rcN.d/​S[0-9][0-9]voip ]
 ++ sh /​usr/​etc/​rc1.d/​S85voip start
 +Module upper_dect_driver is ready
 +iptables: No chain/​target/​match by that name
 +iptables: No chain/​target/​match by that name
 +iptables: No chain/​target/​match by that name
 +voip start...
 ++ break
 ++ [ -f /​etc/​rc1.d/​S90post_webupgrade ]
 ++ [ -f /​usr/​etc/​rc1.d/​S90post_webupgrade ]
 ++ realscript=/​usr/​etc/​rc1.d/​S90post_webupgrade
 ++ [ 1 != N ]
 ++ number=90post_webupgrade
 ++ echo 90post_webupgrade
 ++ cut -c 1-2
 ++ number=90
 ++ echo 90
 ++ suffix=post_webupgrade
 ++ stop=/​usr/​etc/​rc1.d/​K[0-9][0-9]post_webupgrade
 ++ echo /​usr/​etc/​rc1.d/​
 ++ sed s,rc1,rcN,
 ++ previous_start=/​usr/​etc/​rcN.d/​S[0-9][0-9]post_webupgrade
 ++ [ -f /​usr/​etc/​rcN.d/​S[0-9][0-9]post_webupgrade ]
 ++ sh /​usr/​etc/​rc1.d/​S90post_webupgrade start
 +[post_webupgrade] Detected '​start'​ from rc script during a normal boot. I will not start services now
 ++ break
 ++ [ -f /​etc/​rc1.d/​S99printkoff ]
 ++ realscript=/​etc/​rc1.d/​S99printkoff
 ++ [ 1 != N ]
 ++ number=99printkoff
 ++ echo 99printkoff
 ++ cut -c 1-2
 ++ number=99
 ++ echo 99
 ++ suffix=printkoff
 ++ stop=/​etc/​rc1.d/​K[0-9][0-9]printkoff
 ++ echo /etc/rc1.d/
 ++ sed s,rc1,rcN,
 ++ previous_start=/​etc/​rcN.d/​S[0-9][0-9]printkoff
 ++ [ -f /​etc/​rcN.d/​S[0-9][0-9]printkoff ]
 ++ sh /​etc/​rc1.d/​S99printkoff start
 +Setting printk off
 ++ break
 ++ rm -f /​var/​run/​rc.pid
 ++ rm -f /​var/​run/​runlevel_in_progress
 ++ rm -f /​var/​run/​init_in_progress_stage
 ++ echo 1
 +Sysinit done
 +
 +Please press Enter to activate this console.</​nowiki>​
 +</​WRAP>​\\
 +
 +==== Openwrt bootlog ====
 +<WRAP bootlog>
 +<​nowiki>​9655432SDRAM16bitX10120123456+678
 +ESA: 30:​78:​30:​30:​3a:​30
 +WEP KEY : FFFFFFFFFFFFFFFFFFFFFFFFFF
 +Auto-negotiation timed-out
 +10 MB Half-Duplex (assumed)
 +Ethernet eth0: MAC address 30:​78:​30:​30:​3a:​30
 +IP: 10.7.58.112,​ Default server: 10.7.58.114
 +Hardware version 0x90, mask=0x7E
 +Hardware version 0x10 (masked) BLUE5G.9 DV4210
 +Factory Settings Recovery Switch OFF
 +
 +RedBoot(tm) bootstrap and debug environment [ROM]
 +unlocked release, eCos 2.0b1 - built 01:06:01, Mar  1 2012
 +
 +Platform: Blue_5g (MIPS32 4Kc) 
 +Copyright (C) 2000, 2001, 2002, Red Hat, Inc.
 +
 +RAM: 0x80000000-0x81000000,​ [0x80435e50-0x80fe2000] available
 +FLASH: 0xbe400000 - 0xbec00000, 128 blocks of 0x00010000 bytes each.
 +== Executing boot script in 20.000 seconds - enter ^C twice to abort
 +hit '​'​ (0x01)
 +== Executing boot script in 19.990 seconds - enter ^C twice to abort
 +RedBoot> fis load -b 0x80010000 -d kernel
 + -- Redboot version without crypt_verify -- 
 +Image loaded from 0x80010000-0x80275a58
 +RedBoot> exec -c "​noinitrd mem=16M"​ 0x80010000
 +Now booting linux kernel:
 + Base address 0x8000fc00 Entry 0x80010000
 + ​Cmdline : noinitrd mem=16M
 +changing Kseg0 coherency algorithm to write back...
 +enabling icache and dcache...
 +
 +Linux version 2.6.32.27 (dani@tool) (gcc version 4.3.3 (GCC) ) #29 Thu Mar 1 01:06:46 CET 2012
 +Detected Broadcom 0x6348 CPU revision b0
 +CPU frequency is 256 MHz
 +16MB of RAM installed
 +registering 37 GPIOs
 +board_livebox:​ Hardware version 0x90 BLUE5G.9
 +
 +RAC_CR0 = 0x15, RAC_CR1 = 0x2000000
 +C0 register($16,​ 0): 0x80008083
 +C0 register($22,​ 0): 0xe3880000
 +
 +board_livebox:​ resetting gpio6 for eth1...
 +bootconsole [early0] enabled
 +CPU revision is: 00029107 (Broadcom BCM6348)
 +board_livebox:​ board name: Livebox
 +Determined physical RAM map:
 + ​memory:​ 01000000 @ 00000000 (usable)
 +Zone PFN ranges:
 +  Normal ​  ​0x00000000 -> 0x00001000
 +Movable zone start PFN for each node
 +early_node_map[1] active PFN ranges
 +    0: 0x00000000 -> 0x00001000
 +Built 1 zonelists in Zone order, mobility grouping off.  Total pages: 4064
 +Kernel command line: root=/​dev/​mtdblock2 rootfstype=squashfs,​jffs2 noinitrd console=ttyS0,​115200
 +PID hash table entries: 64 (order: -4, 256 bytes)
 +Dentry cache hash table entries: 2048 (order: 1, 8192 bytes)
 +Inode-cache hash table entries: 1024 (order: 0, 4096 bytes)
 +Primary instruction cache 16kB, VIPT, 2-way, linesize 16 bytes.
 +Primary data cache 8kB, 2-way, VIPT, no aliases, linesize 16 bytes
 +Memory: 13564k/​16384k available (1980k kernel code, 2820k reserved, 353k data, 120k init, 0k highmem)
 +Hierarchical RCU implementation.
 +NR_IRQS:128
 +Calibrating delay loop... 254.97 BogoMIPS (lpj=509952)
 +Mount-cache hash table entries: 512
 +NET: Registered protocol family 16
 +detected mtd start address 0x1FC00000, but forcing to 0x1e400000...
 +registering PCI controller with io_map_base unset
 +bio: create slab <​bio-0>​ at 0
 +Switching to clocksource MIPS
 +PCI: Enabling device 0000:​00:​01.0 (0000 -> 0002)
 +ssb: Sonics Silicon Backplane found on PCI device 0000:​00:​01.0
 +NET: Registered protocol family 2
 +IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
 +TCP established hash table entries: 512 (order: 0, 4096 bytes)
 +TCP bind hash table entries: 512 (order: -1, 2048 bytes)
 +TCP: Hash tables configured (established 512 bind 512)
 +TCP reno registered
 +NET: Registered protocol family 1
 +audit: initializing netlink socket (disabled)
 +type=2000 audit(0.328:​1):​ initialized
 +squashfs: version 4.0 (2009/​01/​31) Phillip Lougher
 +Registering mini_fo version $Id$
 +JFFS2 version 2.2. (NAND) (SUMMARY) ​ © 2001-2006 Red Hat, Inc.
 +msgmni has been set to 26
 +io scheduler noop registered
 +io scheduler deadline registered (default)
 +gpiodev: gpio device registered with major 254
 +gpiodev: gpio platform device registered with access mask FFFFFFFF
 +bcm63xx_uart.0:​ ttyS0 at MMIO 0xfffe0300 (irq = 10) is a bcm63xx_uart
 +console [ttyS0] enabled, bootconsole disabled
 +console [ttyS0] enabled, bootconsole disabled
 +bcm963xx_flash:​ 0x00800000 at 0x1e400000
 +bcm963xx: Found 1 x16 devices at 0x0 in 16-bit bank
 + CFI mfr 0x00000001
 + CFI id  0x00001000
 + ​Amd/​Fujitsu Extended Query Table at 0x0040
 +  Amd/Fujitsu Extended Query version 1.3.
 +number of CFI chips: 1
 +cfi_cmdset_0002:​ Disabling erase-suspend-program due to code brokenness.
 +bcm963xx_flash:​ Read Signature value of 
 +bcm963xx_flash:​ assuming RedBoot bootloader
 +bcm963xx_flash:​ Support for extended flash memory size : 0xf1c ; ONLY 64MBIT SUPPORT
 +Searching for RedBoot partition table in bcm963xx at offset 0x7f0000
 +Creating 6 MTD partitions on "​bcm963xx":​
 +0x000000000000-0x000000030000 : "​RedBoot"​
 +0x000000030000-0x000000150000 : "​kernel"​
 +0x000000150000-0x000000390000 : "​user_fs"​
 +0x000000390000-0x0000007f0000 : "​rootfs_data"​
 +0x0000007f0000-0x0000007ff000 : "FIS directory"​
 +0x0000007ff000-0x000000800000 : "​RedBoot config"​
 +bcm63xx_enet MII bus: probed
 +bcm63xx_enet MII bus: probed
 +bcm63xx_wdt started, timer margin: 30 sec
 +Registered led device: adsl-fail
 +Registered led device: adsl
 +Registered led device: traffic
 +Registered led device: phone
 +Registered led device: wifi
 +TCP westwood registered
 +NET: Registered protocol family 17
 +802.1Q VLAN Support v1.8 Ben Greear <​greearb@candelatech.com>​
 +All bugs added by David S. Miller <​davem@redhat.com>​
 +VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
 +Freeing unused kernel memory: 120k freed
 +Please be patient, while OpenWrt loads ...
 +^@- preinit -
 +Press the [f] key and hit [enter] to enter failsafe mode
 +- regular preinit -
 +switching to jffs2
 +mini_fo: using base directory: /
 +mini_fo: using storage directory: /overlay
 +- init -
 +
 +Please press Enter to activate this console. bcm63xx_enet bcm63xx_enet.0:​ attached PHY at address 1 [Broadcom BCM63XX (1)]
 +device eth0 entered promiscuous mode
 +bcm63xx_enet bcm63xx_enet.1:​ attached PHY at address 31 [Generic PHY]
 +eth0: link UP - 100/full - flow control off
 +br-lan: port 1(eth0) entering forwarding state
 +Compat-wireless backport release: compat-wireless-2011-11-29
 +Backport based on wireless-testing.git master-2011-12-01
 +cfg80211: Calling CRDA to update world regulatory domain
 +cfg80211: World regulatory domain updated:
 +cfg80211: ​    ​(start_freq - end_freq @ bandwidth), (max_antenna_gain,​ max_eirp)
 +cfg80211: ​    ​(2402000 KHz - 2472000 KHz @ 40000 KHz), (300 mBi, 2000 mBm)
 +cfg80211: ​    ​(2457000 KHz - 2482000 KHz @ 20000 KHz), (300 mBi, 2000 mBm)
 +cfg80211: ​    ​(2474000 KHz - 2494000 KHz @ 20000 KHz), (300 mBi, 2000 mBm)
 +cfg80211: ​    ​(5170000 KHz - 5250000 KHz @ 40000 KHz), (300 mBi, 2000 mBm)
 +cfg80211: ​    ​(5735000 KHz - 5835000 KHz @ 40000 KHz), (300 mBi, 2000 mBm)
 +SCSI subsystem initialized
 +usbcore: registered new interface driver usbfs
 +usbcore: registered new interface driver hub
 +usbcore: registered new device driver usb
 +b43-phy0: Broadcom 4318 WLAN found (core revision 9)
 +Registered led device: b43-phy0::​tx
 +Registered led device: b43-phy0::​rx
 +Registered led device: b43-phy0::​radio
 +Broadcom 43xx driver loaded [ Features: PL ]
 +PPP generic driver version 2.4.2
 +ip_tables: (C) 2000-2006 Netfilter Core Team
 +NET: Registered protocol family 24
 +nf_conntrack version 0.5.0 (213 buckets, 852 max)
 +ohci_hcd: USB 1.1 '​Open'​ Host Controller (OHCI) Driver
 +bcm63xx_ohci bcm63xx_ohci.0:​ BCM63XX integrated OHCI controller
 +bcm63xx_ohci bcm63xx_ohci.0:​ new USB bus registered, assigned bus number 1
 +bcm63xx_ohci bcm63xx_ohci.0:​ irq 20, io mem 0xfffe1b00
 +usb usb1: configuration #1 chosen from 1 choice
 +hub 1-0:1.0: USB hub found
 +hub 1-0:1.0: 1 port detected
 +Initializing USB Mass Storage driver...
 +usbcore: registered new interface driver usb-storage
 +USB Mass Storage support registered.
 +
 +
 +BusyBox v1.15.3 (2012-02-15 19:17:10 CET) built-in shell (ash)
 +Enter '​help'​ for a list of built-in commands.
 +
 +  _______ ​                    ​________ ​       __
 + ​| ​      ​|.-----.-----.-----.| ​ |  |  |.----.| ​ |_
 + ​| ​  ​- ​  ​|| ​ _  |  -__|     ​|| ​ |  |  ||   ​_|| ​  _|
 + ​|_______|| ​  ​__|_____|__|__||________||__| ​ |____|
 +          |__| W I R E L E S S   F R E E D O M
 + ​Backfire (10.03.1, r30365) ------------------------
 +  * 1/3 shot Kahlua ​   In a shot glass, layer Kahlua ​
 +  * 1/3 shot Bailey'​s ​ on the bottom, then Bailey'​s, ​
 +  * 1/3 shot Vodka     then Vodka.
 + ​---------------------------------------------------
 +root@OpenWrt:/#​ </​nowiki>​
 +</​WRAP>​\\
 +
 +===== Notes =====
 +
 +==== Hardware Versions ====
 +With this kernel code we can get the hardware version:
 +<code c>u32 val;
 +unsigned char hw_version;
 +val = bcm_gpio_readl(GPIO_CTL_LO_REG);​
 +val &= ~0x000000FF;​
 +bcm_gpio_writel(val,​ GPIO_CTL_LO_REG);​
 +hw_version = (unsigned char)bcm_gpio_readl(GPIO_DATA_LO_REG) & 0xFF;
 + printk("​Hardware version 0x%02X \n", hw_version);​
 +</​code>​
 +But probably should be masked either with 0x7E or 0xFE
 +
 +Example: \\
 +<color green>​hardware version = 0x90 \\
 +masked hardware version = 0x90 & 0x7E = 0x10</​color>​
 +
 +Known hardware versions (masked):
 +^ masked hw version \\ (mask=0x7E) ^ BLUE 5G name ^
 +|  0x02  | BLUE5G.2 |
 +|  0x08  | BLUE5G.3 |
 +|  0x06  | BLUE5G.4 |
 +|  0x04  | BLUE5G.4_mod1 |
 +|  0x0A  | BLUE5G.6 |
 +|  0x0A  | BLUE5G.8 |
 +|  0x10  | BLUE5G.9 |
 +but for BLUE7G boards:
 +^ masked hw version \\ (mask=0xFE) ^ BLUE7G name ^
 +|  0x40  | BLUE7G.3/​7G.4 AOL |
 +|  0x42  | BLUE7G.3/​7G.4 INVENTEL |
 +|  0x46  | BLUE7G.3/​7G.4 INVENTEL WIFI READY |
 +|  0x44  | BLUE7G.4 BT |
 +|  0x48  | BLUE7G.4 FASTWEB |
 +|  0x4A  | BLUE7G.5 AOL |
 +|  0x4C  | BLUE7G.5 INVENTEL |
 +|  0x4E  | BLUE7G.5 INVENTEL WIFI READY |
 +|  0xA0  | BLUE7G.5 BT |
 +|  0xA2  | BLUE7G.5 FASTWEB |
 +
 +Also we can find the hardware version printed on the board \\
 +{{:​media:​inventel:​livebox_board_version.jpg?​300|hardware version}}
 +
 +===== Tags =====
 +[[meta:​tags|How to add tags]]
 +{{tag>​bcm63xx bcm6348 FastEthernet 2NIC USB 1WNIC MiniPCI 802.11bg b43 16RAM 8Flash MIPS MIPS32 JTAG Serial}}