The content of this topic has been archived between 9 Mar 2018 and 6 May 2018. Unfortunately there are posts – most likely complete pages – missing.
Anyone seen/heard of this device?
It looks curiously like a WRTSL54GS but with removable antenna.
802.11n 2.4 GHz band. I see claims the RAM is 32 megs . If it has 8 megs flash might be interesting.
I see some sort of pins on upper right in the FCC photos, but not a clearly delineated set of serial & JTAG as I would wish. The FCC data is here:
From zooming in on the FCC photos I see:
Winbond W9425G6EH-5 which is a 256 Mbit chip so 32 megs RAM seems certain.
Atheros AR9130 CPU
Atheros AR9102 WiFi chip
5-pin header possibly serial console
14-pin block probably JTAG
Can't read the flash chip too blurry.
(Last edited by vincentfox on 13 May 2009, 01:39)
I just got mine in the mail on Friday. It has at leased an 8mb flash and 32mb ram. I haven't done anything to it except ghetto modify the firmware to run telnet. I removed the udhcpd package and installed the utelnetd package in it's place so it would start on router boot. If someone knows a better way please share. The base firmware is actually pretty stable although functionless. I'm very curios to see if I can get openwrt running on it somehow.
awesomo,
Do you have a serial console? How do you know the flash size?
Can you print out dmesg output or something if so? I'd like to know more about the hardware details. Possibly you could open the case and look inside give numbers off important chips? I'd be willing to order one and experiment on OpenWRT trunk compile if I had a little more info.
Thanks!
I just ordered one of these off of NewEgg after seeing it in their weekly deals. It was only a measly $5 off, but I figured it has USB and removeable antennas, unlike my WRT54G2, so if I can get this baby running some nice smexy firmware I can sell this G2.
If it does indeed have 8mb or more flash then I'm going to do a happy dance 
If not, I'm pretty certain I saw something someplace about running the firmware piggybacked off USB. I'm usually wrong though so don't quote me.
Problem is, I think after $100, I'm not sure if I'd be willing to be a guinea pig. I'm a follower, not a leader D:
Yeah that NewEgg sale suckered me into ordering also. I'll at least post some naked pics when I get mine to add to the knowledge base.
I am slightly peeved about the shift to RP-SMA connectors after years of RP-TNC and plenty of antenna of that type lying around. Oh well.
(Last edited by vincentfox on 20 May 2009, 07:41)
Is this router that is:
- low priced
- has USB
- supports 802.11n
- supported by OpenWRT 8.09
!?
That would be great !
Can anyone confirm ?
(or suggest a similar router, that is officially supported ?*)
* - as in : at least one of the developers has one on the shelf and tries it once a month
(Last edited by xerces8 on 20 May 2009, 19:01)
Did you read the first part of the thread? This router is quite new and few are in anyone's hands. As far as I know, nobody has cracked one open or even tried Kamikaze on it yet.
Ah, wishful thinking.
I am looking for a such router and nobody can recommend one...
Just received mine from NewEgg
Received mine just now. Will strip it down tonight.
Flash is cFeon EN25P64, so 8 megs flash.
CPU is Atheros AR9130-BC1E
RAM is Samsung K4H561638J-LCCC, so 32 megs RAM.
Switch chip is RealTek RTL8306SD
And in a first for a factory WRT, there is a 5-pin header installed at position J3.
I though perhaps those FCC photo showing a header was a sample unit but
nope this unit is the same.
JTAG is unfortunately micro-sized and no header installed. Oh well.
All in all seems very promising.
How easy do you think third party firmware might be on this one? I haven't been around the scene long enough to know, is there already support for these particular chips? The Trendnet TEW-632BRP uses the same cpu, but does anyone know about the AR9102? Last I recall, Atheros has pretty nice Linux support, this wouldn't be an exception would it?
The GPL'ed source for the stock firmware is available, if there's not already support, how easy would it be for someone to cobble together some support with that?
Check out Kamikaze trunk, look like lots of Atheros stuff in there. Dunno until I try it. Too early to say.
So far, have held wires on 5-pin header to confirm pins for serial console.
Here's a probable pin layout with board held so J3 is in top right quadrant:
3.3V
TX
RX
NC
GNDI just held wires at what seemed "obvious" TX, RX, and GND and saw console text
while applying the power to it.
I mean typically they all seem to be arranged in that order and it was just a matter
of guessing which way around J3 was oriented. Technically I only INFER that
the other 2 pins are NC and 3.3V but why wouldn't they be?
Serial was 115200,8,n,1, no flow control as usual.
I need to solder up something more permanent and collect dmesg etc next.
(Last edited by vincentfox on 23 May 2009, 09:52)
Bootup messages:
U-Boot 1.1.5 (Mar 10 2009 - 07:34:04)
DRAM: ar7100_ddr_initial_config(237) enter!
ar7100_ddr_initial_config(269) exit!
U-Boot 1.1.5 (Mar 10 2009 - 07:34:04)
AP81 (ar7100) U-boot
sri
32 MB
WRT160NL u-boot version: 1.0.0
Top of RAM usable for U-Boot at: 82000000
Reserving 277k for U-Boot at: 81fb8000
Reserving 192k for malloc() at: 81f88000
Reserving 44 Bytes for Board Info at: 81f87fd4
Reserving 36 Bytes for Global Data at: 81f87fb0
Reserving 128k for boot params() at: 81f67fb0
Stack Pointer at: 81f67f98
Now running in RAM - U-Boot at: 81fb8000
id read 0x100000ff
flash size 8MB, sector count = 128
Flash: 8 MB
*** Warning - bad CRC, using default environment
In: serial
Out: serial
Err: serial
Net: ag7100_enet_initialize...
ag7100 get ethaddr for device eth0
Fetching MAC Address from 0x81feaf20
--------***** Get the RTL8306SD Manufactory ID=34dc *****-------
Reg6: speed=0 nway=1 duplex=1
Reg5: speed=0 nway=0 duplex=0
Reg1: a1=7fd9 a2=2890 a3=115c a4=2890 a5=0
Reg1: a1=7fd9 a2=2890 a3=115c a4=2890
Reg1: a1=7fd9 a2=2890 a3=115c a4=2890
Reg1: a1=7fd9 a2=2890 a3=115c a4=2890
Reg1: a1=7fd9 a2=2890 a3=115c a4=2890
eth0: 00:23:69:98:2e:db
eth0 up
eth0
### main_loop entered: bootdelay=1
Starting kernel ...
Linux version 2.6.15 (root@sw1) (gcc version 3.4.4) #417 Tue Mar 10 07:15:55 HKT
2009
flash_size passed from bootloader = 8
arg 1: console=ttyS0,115200
arg 2: root=31:04
arg 3: rootfstype=squashfs
arg 4: init=/sbin/init
arg 5: mtdparts=ar7100-nor0:256k(u-boot),7808k(linux),64k(nvram),64k(ART),64k(fi
lesystem)
arg 6: bootver=1.1.5
arg 7: fsoffset=0xe0000
arg 8: mem=32M
CPU revision is: 00019374
Determined physical RAM map:
memory: 02000000 @ 00000000 (usable)
User-defined physical RAM map:
memory: 02000000 @ 00000000 (usable)
Built 1 zonelists
Kernel command line: console=ttyS0,115200 root=31:04 rootfstype=squashfs init=/s
bin/init mtdparts=ar7100-nor0:256k(u-boot),7808k(linux),64k(nvram),64k(ART),64k(
filesystem) bootver=1.1.5 fsoffset=0xe0000 mem=32M
Primary instruction cache 64kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
Cache parity protection disabled
PID hash table entries: 256 (order: 8, 4096 bytes)
Using 200.000 MHz high precision timer.
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 30188k/32768k available (1644k kernel code, 2564k reserved, 243k data, 1
08k init, 0k highmem)
Mount-cache hash table entries: 512
Checking for 'wait' instruction... available.
NET: Registered protocol family 16
SCSI subsystem initialized
AR7100 GPIOC major 0
squashfs: version 3.0 (2006/03/15) Phillip Lougher
Initializing Cryptographic API
io scheduler noop registered
io scheduler deadline registered
GPIO_init register done
HDLC line discipline: version $Revision: #1 $, maxframe=4096
N_HDLC line discipline registered.
Serial: 8250/16550 driver $Revision: #2 $ 1 ports, IRQ sharing disabled
serial8250.0: ttyS0 at MMIO 0x0 (irq = 19) is a 16550A
PPP generic driver version 2.4.2
NET: Registered protocol family 24
5 cmdlinepart partitions found on MTD device ar7100-nor0
Creating 5 MTD partitions on "ar7100-nor0":
0x00000000-0x00040000 : "u-boot"
0x00040000-0x007e0000 : "linux"
0x007e0000-0x007f0000 : "nvram"
0x007f0000-0x00800000 : "ART"
0x00120000-0x007e0000 : "filesystem"
u32 classifier
Perfomance counters on
NET: Registered protocol family 2
IP route cache hash table entries: 512 (order: -1, 2048 bytes)
TCP established hash table entries: 2048 (order: 1, 8192 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
ip_conntrack version 2.4 (256 buckets, 2048 max) - 296 bytes per conntrack
ip_conntrack_pptp version 3.1 loaded
ip_nat_pptp version 3.0 loaded
ip_tables: (C) 2000-2002 Netfilter core team
ip_conntrack_rtsp v0.01 loading
ip_nat_rtsp v0.01 loading
TCP htcp registered
NET: Registered protocol family 1
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
ar7100wdt_init: Registering WDT success
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 108k freed
Algorithmics/MIPS FPU Emulator v1.5
Jan 1 00:00:01 udevd[72]: main: inotify_init failed: No such file or directory
Name to be unset = wl0_hwaddr=00:23:69:98:2E:DD
Name to be unset = wan_get_dns=192.168.15.1
Language Package:
modules[0]=/lib/modules/2.6.15/kernel/drivers/net/ag7100/ag7100_mod.ko buf=[/lib
/modules/2.6.15/kernel/drivers/net/ag7100/ag7100_mod.ko ]
modules[1]=/lib/modules/2.6.15/kernel/drivers/net/ctmisc/ctmisc.ko buf=[/lib/mod
ules/2.6.15/kernel/drivers/net/ag7100/ag7100_mod.ko /lib/modules/2.6.15/kernel/d
rivers/net/ctmisc/ctmisc.ko ]
Needed modules: /lib/modules/2.6.15/kernel/drivers/net/ag7100/ag7100_mod.ko /lib
/modules/2.6.15/kernel/drivers/net/ctmisc/ctmisc.ko
ag7100_mod: module license 'unspecified' taints kernel.
AG7100: Length per segment 1536
AG7100: Max segments per packet 1
AG7100: Max tx descriptor count 32
AG7100: Max rx descriptor count 64
AG7100: fifo cfg 3 00780008
AG7100CHH: Mac address for unit 0
AG7100CHH: 00:03:7f:e0:04:51
AG7100CHH: Mac address for unit 1
AG7100CHH: 00:03:7f:0c:a1:7a
Register /dev/ctmisc device, major:10 minor:255
fuse init (API version 7.3)
ufsd: driver loaded at c0101000 built on Feb 26 2009 15:30:49
UFSD version 7.02 (Feb 26 2009, 15:15:10)
NTFS read/write support included
Big endian platform
$Id: ufsdvfs.c,v 1.195 2009/02/02 15:38:06 shura Exp $
Name to be unset = private_shares=Public:sda1:comment:/sda1/public
insmod usbcore.ko
usbcore: registered new driver usbfs
usbcore: registered new driver hub
Port Status c000004
ar7100-ehci ar7100-ehci.0: ATH EHCI
ar7100-ehci ar7100-ehci.0: new USB bus registered, assigned bus number 1
ar7100-ehci ar7100-ehci.0: irq 3, io mem 0x1b000000
hcc_params addr 0xbb000108 val 0x6 hcs_params addr 0xbb000104 val 0x10011
ar7100-ehci ar7100-ehci.0: USB 2.0 started, EHCI 1.00, driver 10 Dec 2004
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
Initializing USB Mass Storage driver...
usbcore: registered new driver usb-storage
USB Mass Storage support registered.
Hit enter to continue...The chipset is AR9132 + RTL8306SD
ifconfig(): name=[lo] flags=[IFUP] addr=[127.0.0.1] netmask=[255.0.0.0]
type = [get_mac]ctmisc_ioctl: cmd=0x11
get_data(): cmdata_init(): base = 0xbf03f288
d=0x11 count=8 ldata_init(): location = [1]
en=18
ctmisc_ioctl: index=1
get_data(): Get MAC count is [1]
get_data(): MAC 0: [00:23:69:98:2E:DB]
get_data(): done
type = [get_sn]ctmisc_ioctl: cmd=0x15
get_data(): cmdata_init(): base = 0xbf03f360
d=0x15 count=8 ldata_init(): location = [1]
en=20
ctmisc_ioctl: index=1
get_data(): Get SN count is [1]
get_data(): SN 0: [CUR01J400510]
get_data(): done
type = [get_counctmisc_ioctl: cmd=0x2c
try]
get_data()data_init(): base = 0xbf03f400
: cmd=0x2c countdata_init(): location = [1]
=1 len=4
ctmisc_ioctl: index=1
get_data(): Get COUNTRY count is [1]
get_data(): COUNTRY 0: [US]
get_data(): done
type = [get_2g_cctmisc_ioctl: cmd=0x2e
ountry_code]
gedata_init(): base = 0xbf03f408
t_data(): cmd=0xdata_init(): location = [1]
2e count=1 len=4ctmisc_ioctl: index=1
get_data(): Get 2G_COUNTRY_CODE count is [1]
get_data(): 2G_COUNTRY_CODE 0: [US]
get_data(): done
type = [get_wsc_ctmisc_ioctl: cmd=0x26
pin]
get_data()data_init(): base = 0xbf03f318
: cmd=0x26 countdata_init(): location = [1]
=8 len=9
ctmisc_ioctl: index=1
get_data(): Get WSC count is [1]
get_data(): WSC 0: [66691686]
get_data(): done
###################
MD5=[5ebd2a8b4297129378b17d891e63a074]
************************
killall: mini_httpd: no process killed
killall: mini_httpds: no process killed
>>>>>> STOP MONITOR PS >>>>>>>>>>>
>>>>>> START MONITOR PS >>>>>>>>>>>
Thu Jan 1 00:00:00 UTC 2009
ifconfig(): nameag7100_ring_alloc Allocated 384 at 0x8125b200
=[eth0] flags=[Iag7100_ring_alloc Allocated 768 at 0x81d0bc00
FUP] addr=[(null)] netmask=[(null)]
AG7100: cfg1 0x2f cfg2 0x7014
--------***** Get the RTL8306SD Manufactory ID=5988 *****-------
--------***** Get the RTL8306SD Reg0=1000 *****-------
--------***** Get the RTL8306SD Reg1=7849 *****-------
--------***** Get the RTL8306SD Reg4=5e1 *****-------
--------***** Get the RTL8306SD Reg5=401 *****-------
AG7100: unit 0 phy is up...RMii 100Mbps full duplex
AG7100: pll reg 0x18050014: 0x13000a44 AG7100: cfg_1: 0x7ff0000
AG7100: cfg_2: 0xfff
AG7100: cfg_3: 0x780008
AG7100: cfg_4: 0xffff
AG7100: cfg_5: 0x7efef
AG7100: done cfg2 0x7115 ifctl 0x10000 miictrl 0x13
Writing 4
br0: No such device
device eth0 entered promiscuous mode
lo no wireless extensions.
eth0 no wireless extensions.
eth1 no wireless extensions.
br0 no wireless extensions.
Args: 1
ath_hal: 0.9.17.1 (AR5416, REGOPS_FUNC, WRITE_EEPROM, 11D)
wlan: 0.8.4.2 (Atheros/multi-bss)
ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Right
s Reserved
ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserve
d
ath_ahb: 0.9.4.5 (Atheros/multi-bss)
<<<<ar5416SetReset:931>>>>
<<<<ar5416SetReset:935>>>>
<<<<ar5416SetReset:939>>>>
<<<<ar5416SetReset:951>>>>
<<<<ar5416SetReset:982>>>>
<<<<ar5416SetReset:986>>>>
<<<<ar5416SetReset:994>>>>
<<<<ar5416SetReset:998>>>>
<<<<ar5416SetReset:1017>>>>
<<<<ar5416SetReset:1022>>>>
<<<<ar5416SetReset:1027>>>>
<<<<ar5416SetReset:1031>>>>
<<<<ar5416SetReset:1043>>>>
<<<<ar5416SetReset:1047>>>>
Howl Revision ID 0xb8
wifi0: Atheros AR9100 WiSoC: mem=0xb80c0000, irq=2
wlan: mac acl policy registered
Creating ap for linksys on
Added ath0 mode master
ieee80211_ioctl_setmode: CHH Mode: 11NGHT20
ath_set_config: Setting ATH parameter
ath_set_config: Setting ATH parameter
ath_set_config: Setting ATH parameter
ath_set_config: Setting ATH parameter
ath_set_config: Setting ATH parameter
Created ath0 mode ap for linksys
lo no wireless extensions.
eth0 no wireless extensions.
eth1 no wireless extensions.
br0 no wireless extensions.
wifi0 no wireless extensions.
ieee80211_ioctl_setparam: CHH Calling ieee80211_open
ieee80211_ioctl_setparam: CHH Calling ieee80211_open
ieee80211_ioctl_setparam: CHH Calling ieee80211_open
ieee80211_ioctl_setparam: CHH Calling ieee80211_open
ieee80211_ioctl_setparam: CHH Calling ieee80211_open
killall: wsc: no process killed
killall: hostapd: no process killed
ieee80211_ioctl_setparam: CHH Calling ieee80211_open
ifconfig(): name<<<<ar5416SetReset:931>>>>
=[ath0] flags=[I<<<<ar5416SetReset:935>>>>
FUP] addr=[(null<<<<ar5416SetReset:939>>>>
)] netmask=[(nul<<<<ar5416SetReset:951>>>>
l)]
<<<<ar5416SetReset:982>>>>
<<<<ar5416SetReset:986>>>>
<<<<ar5416SetReset:994>>>>
<<<<ar5416SetReset:998>>>>
<<<<ar5416SetReset:1017>>>>
<<<<ar5416SetReset:1022>>>>
<<<<ar5416SetReset:1027>>>>
<<<<ar5416SetReset:1031>>>>
Force rf_pwd_icsyndiv to 1 on 2412 (1 0)
--AP ar5416InitUserSettings ahp->ah_miscMode 0xc
ar5416Reset Setting CFG 0x10a
Howl Revision ID 0xb8
MBSSID Set bit 22 of AR_STA_ID 0xb8c1dd2e
<<<<ar5416SetReset:931>>>>
<<<<ar5416SetReset:935>>>>
<<<<ar5416SetReset:939>>>>
<<<<ar5416SetReset:951>>>>
<<<<ar5416SetReset:982>>>>
<<<<ar5416SetReset:986>>>>
<<<<ar5416SetReset:994>>>>
<<<<ar5416SetReset:998>>>>
<<<<ar5416SetReset:1017>>>>
<<<<ar5416SetReset:1022>>>>
<<<<ar5416SetReset:1027>>>>
<<<<ar5416SetReset:1031>>>>
Force rf_pwd_icsyndiv to 1 on 2412 (1 0)
--AP ar5416InitUserSettings ahp->ah_miscMode 0xc
ar5416Reset Setting CFG 0x10a
Howl Revision ID 0xb8
MBSSID Set bit 22 of AR_STA_ID 0xb8c1dd2e
device ath0 entered promiscuous mode
ifconfig(): name=[ath0] flags=[IFUP] addr=[(null)] netmask=[(null)]
Force rf_pwd_icsyndiv to 1 on 2417 (1 0)
<<<<ar5416SetReset:931>>>>
<<<<ar5416SetReset:935>>>>
<<<<ar5416SetReset:939>>>>
<<<<ar5416SetReset:951>>>>
<<<<ar5416SetReset:982>>>>
<<<<ar5416SetReset:986>>>>
<<<<ar5416SetReset:994>>>>
<<<<ar5416SetReset:998>>>>
<<<<ar5416SetReset:1017>>>>
<<<<ar5416SetReset:1022>>>>
<<<<ar5416SetReset:1027>>>>
<<<<ar5416SetReset:1031>>>>
Force rf_pwd_icsyndiv to 1 on 2417 (1 0)
--AP ar5416InitUserSettings ahp->ah_miscMode 0xc
ar5416Reset Setting CFG 0x10a
Howl Revision ID 0xb8
MBSSID Set bit 22 of AR_STA_ID 0xb8c1dd2e
Force rf_pwd_icsyndiv to 2 on 2422 (1 0)
Force rf_pwd_icsyndiv to 2 on 2427 (1 0)
br0: No such device
device ath0 is already br0: port 2(ath0) entering learning state
a member of a brbr0: port 1(eth0) entering learning state
idge; can't enslbr0: topology change detected, propagating
ave it to bridgebr0: port 2(ath0) entering forwarding state
br0.
ifconfig(br0: topology change detected, propagating
): name=[br0] flbr0: port 1(eth0) entering forwarding state
ags=[IFUP] addr=[192.168.1.1] netmask=[255.255.255.0]
ifconfig(): name=[lo] flags=[IFUP] addr=[127.0.0.1] netmask=[255.0.0.0]
lo: File exists
Set 1 to /proc/sys/net/ipv4/tcp_syncookies ...
Sleeping here for 0
~~~~~ start upnpd ....
cron: No such file or directory
[HTTPD Starting on /www]
Jan 1 00:00:06 : 5bUpnpd-v010 start!!!
tftp server started
tftpd: standalone socket
Force rf_pwd_icsyndiv to 2 on 2432 (1 0)
ret=0
br0 192.168.1.100 86400
Force rf_pwd_icsyndiv to 2 on 2437 (1 0)
info, udhcp server (v0.9.8) started
routed disabled.
Force rf_pwd_icsyndiv to 2 on 2442 (1 0)
Force rf_pwd_icsyndiv to 2 on 2447 (1 0)
Force rf_pwd_icsyndiv to 2 on 2452 (1 0)
wsc_role proxy
Name to be unset = wsc_config_method=pin
killall: wsc: no process killed
>>>>>> START WSC >>>>>>>>>>>
Force rf_pwd_icsyndiv to 2 on 2457 (1 0)
Force rf_pwd_icsyndiv to 2 on 2462 (1 0)
Configuration file: /tmp/wlan/hostapd.conf
ath_netdev_stop: The stopping of the running
<<<<ar5416SetReset:931>>>>
<<<<ar5416SetReset:935>>>>
<<<<ar5416SetReset:939>>>>
<<<<ar5416SetReset:951>>>>
<<<<ar5416SetReset:982>>>>
<<<<ar5416SetReset:986>>>>
<<<<ar5416SetReset:994>>>>
<<<<ar5416SetReset:998>>>>
<<<<ar5416SetReset:1017>>>>
<<<<ar5416SetReset:1022>>>>
<<<<ar5416SetReset:1027>>>>
<<<<ar5416SetReset:1031>>>>
<<<<ar5416SetReset:931>>>>
<<<<ar5416SetReset:935>>>>
<<<<ar5416SetReset:939>>>>
<<<<ar5416SetReset:951>>>>
<<<<ar5416SetReset:982>>>>
<<<<ar5416SetReset:986>>>>
<<<<ar5416SetReset:994>>>>
<<<<ar5416SetReset:998>>>>
<<<<ar5416SetReset:1017>>>>
<<<<ar5416SetReset:1022>>>>
<<<<ar5416SetReset:1027>>>>
<<<<ar5416SetReset:1031>>>>
<<<<ar5416SetReset:1043>>>>
<<<<ar5416SetReset:1047>>>>
br0: port 2(ath0) entering disabled state
Using interface ieee80211_ioctl_setparam: CHH Calling ieee80211_open
ath0 with hwaddr<<<<ar5416SetReset:931>>>>
00:23:69:98:2e:<<<<ar5416SetReset:935>>>>
dd and ssid 'lin<<<<ar5416SetReset:939>>>>
ksys'
<<<<ar5416SetReset:951>>>>
<<<<ar5416SetReset:982>>>>
<<<<ar5416SetReset:986>>>>
<<<<ar5416SetReset:994>>>>
<<<<ar5416SetReset:998>>>>
<<<<ar5416SetReset:1017>>>>
<<<<ar5416SetReset:1022>>>>
<<<<ar5416SetReset:1027>>>>
<<<<ar5416SetReset:1031>>>>
Force rf_pwd_icsyndiv to 2 on 2462 (1 0)
--AP ar5416InitUserSettings ahp->ah_miscMode 0xc
ar5416Reset Setting CFG 0x10a
Howl Revision ID 0xb8
MBSSID Set bit 22 of AR_STA_ID 0xb8c1dd2e
Country ie is USI
Force rf_pwd_icsyndiv to 1 on 2417 (1 0)
br0: port 2(ath0) entering learning state
br0: topology change detected, propagating
br0: port 2(ath0) entering forwarding state
WSC_IE: In wsc_ie_init
UdpLib: Entered udp_open
UdpLib: Socket open successful, sd: 8
UdpLib: Entered udp_write: len 5
SIOCGIWRANGE: WE(compiled)=2139901160 WE(source)=268450792 enc_capa=0x10008380
Flushing old station entries
Deauthenticate all stations
Dumping Message Received:WscIE.c--line 369, (msgLen 21)
dd 0e 00 50 f2 04 10 4a : 00 01 10 10 44 00 01 01 :
c8 dc 30 00 00
Dumping MeCountry ie is USI
Force rf_pwd_icsyndiv to 2 on 2462 (1 0)
ssage Received:WscIE.c--line 321, (msgLen 122)
dd 73 00 50 f2 04 10 4a : 00 01 10 10 44 00 01 01 :
10 3b 00 01 03 10 47 00 : 10 00 23 69 98 2e db 00 :
23 69 98 2e db 02 2a c1 : 07 10 21 00 0c 4c 69 6e :
6b 73 79 73 20 49 6e 63 : 2e 10 23 00 08 57 52 54 :
31 36 30 4e 4c 10 24 00 : 08 76 31 2e 30 30 2e 30 :
31 10 42 00 02 31 32 10 : 54 00 08 00 06 00 50 f2 :
04 00 01 10 11 00 08 57 : 52 54 31 36 30 4e 4c 10 :
08 00 02 00 84 00 00 2a : b8 58
WSC_IE: Entered wsc_ie_read_callback. sock = 2139900088
WSC_IE: SET_BEACON_IE from upper layer
WSC_IE: Entered wsc_ie_read_callback. sock = 2139900088
WSC_IE: SET_PR_RESP_IE from upper layer
killall: twonkymedia: no process killed
killall: twonkymediaserv: no process killed
killall: twonkymediaserver: no process killed
rm -rf /tmp/twonkymedia.db
>>>>>> START LLTD >>>>>>>>>>>
ifconfig(): nameag7100_ring_alloc Allocated 384 at 0x81258200
=[eth1] flags=[Iag7100_ring_alloc Allocated 768 at 0x819fd400
FUP] addr=[(null)] netmask=[(null)]
AG7100: cfg1 0x2f cfg2 0x7014
--------***** Get the RTL8306SD Manufactory ID=5988 *****-------
--------***** Get the RTL8306SD Reg0=1000 *****-------
--------***** Get the RTL8306SD Reg1=7849 *****-------
--------***** Get the RTL8306SD Reg4=5e1 *****-------
--------***** Get the RTL8306SD Reg5=401 *****-------
AG7100: unit 1: phy not up carrier 1
Writing 6
LLTD: wireless interface argument is .
tallest:=====( wan_or_lan=wan )=====
tallest:=====( wan_or_lan=wan is wan !!)=====
info, udhcp client (v0.9.8) started
ifconfig(): name=[eth1] flags=[IFUP] addr=[0.0.0.0] netmask=[(null)]
Hit enter to continue...Hit enter to continue...<<<<ar5416SetReset:931>>>>
<<<<ar5416SetReset:935>>>>
<<<<ar5416SetReset:939>>>>
<<<<ar5416SetReset:951>>>>
<<<<ar5416SetReset:982>>>>
<<<<ar5416SetReset:986>>>>
<<<<ar5416SetReset:994>>>>
<<<<ar5416SetReset:998>>>>
<<<<ar5416SetReset:1017>>>>
<<<<ar5416SetReset:1022>>>>
<<<<ar5416SetReset:1027>>>>
<<<<ar5416SetReset:1031>>>>
Force rf_pwd_icsyndiv to 2 on 2462 (1 0)
--AP ar5416InitUserSettings ahp->ah_miscMode 0xc
ar5416Reset Setting CFG 0x10a
Howl Revision ID 0xb8
MBSSID Set bit 22 of AR_STA_ID 0xb8c1dd2e
<<<<ar5416SetReset:931>>>>
<<<<ar5416SetReset:935>>>>
<<<<ar5416SetReset:939>>>>
<<<<ar5416SetReset:951>>>>
<<<<ar5416SetReset:982>>>>
<<<<ar5416SetReset:986>>>>
<<<<ar5416SetReset:994>>>>
<<<<ar5416SetReset:998>>>>
<<<<ar5416SetReset:1017>>>>
<<<<ar5416SetReset:1022>>>>
<<<<ar5416SetReset:1027>>>>
<<<<ar5416SetReset:1031>>>>
Force rf_pwd_icsyndiv to 2 on 2462 (1 0)
--AP ar5416InitUserSettings ahp->ah_miscMode 0xc
ar5416Reset Setting CFG 0x10a
Howl Revision ID 0xb8
MBSSID Set bit 22 of AR_STA_ID 0xb8c1dd2e
<<<<ar5416SetReset:931>>>>
<<<<ar5416SetReset:935>>>>
<<<<ar5416SetReset:939>>>>
<<<<ar5416SetReset:951>>>>
<<<<ar5416SetReset:982>>>>
<<<<ar5416SetReset:986>>>>
<<<<ar5416SetReset:994>>>>
<<<<ar5416SetReset:998>>>>
<<<<ar5416SetReset:1017>>>>
<<<<ar5416SetReset:1022>>>>
<<<<ar5416SetReset:1027>>>>
<<<<ar5416SetReset:1031>>>>
Force rf_pwd_icsyndiv to 2 on 2462 (1 0)
--AP ar5416InitUserSettings ahp->ah_miscMode 0xc
ar5416Reset Setting CFG 0x10a
Howl Revision ID 0xb8
MBSSID Set bit 22 of AR_STA_ID 0xb8c1dd2eDunno why, but hitting ENTER doesn't do anything. Maybe bad solder joint.
Or maybe I got only TX in the right place but not RX.
Or.... I dunno I'm using to hacking Broadcom widgets.
Maybe Atheros-based ones don't give a root prompt
by default?
Since this is AP81 design, existing OpenWRT thread has lots of info:
http://forum.openwrt.org/viewtopic.php?id=19475
Bedtime for Bonzo, will recheck things tomorrow night.
(Last edited by vincentfox on 23 May 2009, 10:42)
Still getting serial output but no input recognized.
I'm using an FTDI adapter I've used on many routers, the TTL-232R-3V3-AJ.
I retested the USB cable itself on a plain WRT54GL and it works fine.
I built another stereo adapter cable thinking I made a bad joint on the
first one and it gives the same results.
I flipped over the PCB and there is a square pad at "top" of J3 which usually means it is pin 1.
So holding the board with J3 visible and on right hand side, my map of J3 pins would be:
1 power
2 TX
3 RX
4 NC
5 GND
Maybe the factory firmware doesn't accept input from serial console?
Maybe I just have a defective board? I'm baffled and befuddled.
It also occurs to me this might be a 5V console and thus my 3.3V
setup only half-works with it. I'll hunt up a multimeter and see if
I can find out.
I've built a trunk with hopefully valid choices, but need to resolve console problem first
so I can interrupt UBOOT and reflash factory firmware if needed.
This really bugs me. Anybody else tried serial console yet?
(Last edited by vincentfox on 24 May 2009, 23:16)
I just got mine in the mail on Friday. It has at leased an 8mb flash and 32mb ram. I haven't done anything to it except ghetto modify the firmware to run telnet. I removed the udhcpd package and installed the utelnetd package in it's place so it would start on router boot. If someone knows a better way please share. The base firmware is actually pretty stable although functionless. I'm very curios to see if I can get openwrt running on it somehow.
Hello?
Can you specify how you made this telnet modification? I would like to do so as well.
Thanks!
Hey,
Bit complicated. I'm 100% new to this. I have never attempted to hack a firmware onto a router before that wasn't already hacked for it. My initial goal was to hack the upload side of the router to accept unsigned code... But that part of the "open source package" is already precompiled and included...
I'm willing to work with you on this as I do have time and an 8 core linux rig for compiling. http://hyperionservers.com/code.bin is the modded firmware I made. Reset your router to factory defaults, upload this via web, Login to the router via web, make a storage user admin with no pass (delete all users, I think one was already there) then telnet 192.168.1.1 (remember you will have to set a static ip because the DHCP package was not included in this build) and use user name admin and hit enter twice fast. It'll let you in and give you unadulterated telnet access. Good Luck.
I to am pissed that they went sma (most likely for looks) I have panels, grids, amps, and omni antennas all fricken rp-tnc based. Just have to spend a little bit more on adaptors. Can't wait to get this thing up and running. It'll be my first open wrt router when it gets running. I am currently disgusted with the way the DD-WRT project has devolved into a commercial project.
Oh, and i'm a willing guinea pig. What's $100 to future progress? I have wrt54gl's hanging out in the woods bouncing signals everywhere. I'd love to give this a whirl. 99% of the time, as long as you don't fry the board soldering, you can get it up again. I haven't even opened it up yet, so I can not confirm or deny what you have experienced with the console being locked.
(Last edited by awesomo on 25 May 2009, 00:55)
I've been toying around with the source for the stock Linksys firmware, the OpenWRT firmware, and the DD-WRT firmware in Linux. I'm having trouble trying to get the mips cross compiler to work. It gets stuck here and there and I'm not entirely sure why. I'm playing with it in a VM with an immutable hard disk so I can shutdown and start from scratch if need be.
I too have had trouble getting certain apps to compile within vm ware... My current rig is a dual quad xeon with centos 5.3 2.6.24_rt kernel and I have no compiler issues (compiling the linksys firmware source). DD-WRT I have never been able to get to compile right. OpenWRT compiles fine though. My big problem is, How can we get say openwrt or dd-wrt to compile with the linksys signature so I can flipping upload it and go from there? I'd like to get something on there and address the incompatibilities as they arise.
I confirmed my issue with serial console is not simple 5V to 3.3V mismatch.
I bought a cheap multimeter and seeing 3.3V on pin 1 at J3.
Still getting serial output but no input recognized.
I'm using an FTDI adapter I've used on many routers, the TTL-232R-3V3-AJ.
I retested the USB cable itself on a plain WRT54GL and it works fine.
That's interesting. I have an FTDI adapter that does the same thing on my ar71xx-based router (planex mzk-w04nu). I can see the boot-wait countdown and kernel boot, but it doesn't recognize my input. The cable seems fine when I test it on itself, with tx and rx tied together.
I eventually tried a $3.99 Nokia DKU-5 cable, which worked fine.
It seems worth noting that my FTDI cable is long (6'), and I cut my nokia cable pretty short (18"). I'm not positive the length difference is what matters, but if you are willing to cut your cable, it might be worth a try.
I too have had trouble getting certain apps to compile within vm ware... My current rig is a dual quad xeon with centos 5.3 2.6.24_rt kernel and I have no compiler issues (compiling the linksys firmware source). DD-WRT I have never been able to get to compile right. OpenWRT compiles fine though. My big problem is, How can we get say openwrt or dd-wrt to compile with the linksys signature so I can flipping upload it and go from there? I'd like to get something on there and address the incompatibilities as they arise.
Does the Linksys-provided toolkit not have something that will do that for you? How about a hex editor? Can you rip the signature out of the linksys firmware and append it to the third party firmware?
Looking through the GPL source for the stock firmware, release/tools looks promising. checksum2 and nvserial both stand out.
I'm still having trouble wrapping my head around this toolkit thing. I've never dealt with cross compilers before. I try to understand what I'm doing before I do it, and this cross compiling thing is very interesting to me right now
I don't know enough about this stuff to find what part of the compile process throws in what I call "the signature" I guess it's a header file in the bin that tells the router it is ok. The cross compiler, from how I understand it, It creates a build environment based on the processor type (mips?) so you can build you apps for that instead of being native for your system. My expert noob analysis.
That's interesting. I have an FTDI adapter that does the same thing on my ar71xx-based router (planex mzk-w04nu). I can see the boot-wait countdown and kernel boot, but it doesn't recognize my input. The cable seems fine when I test it on itself, with tx and rx tied together.
I eventually tried a $3.99 Nokia DKU-5 cable, which worked fine.
It seems worth noting that my FTDI cable is long (6'), and I cut my nokia cable pretty short (18"). I'm not positive the length difference is what matters, but if you are willing to cut your cable, it might be worth a try.
THANKS for very useful info. I have 6 foot FTDI not wanting to cut it. Digging through my junk-pile I have a Nokia DKU-2 and a CA-42 I will see if I can make something work from one of them.
(Last edited by vincentfox on 25 May 2009, 09:48)