1. Downloaded open source from Belkin and rebuild factory firmware and flashed router.
Two tar balls are available releases 2.01.06 and 2.01.07.
Production release is 2.01.06
These tar balls come with configuration files and the build was fairly easy. I created a virtual machine for my build using sun's virtualbox. Unpacked the tar bar into the "/" partition as instructed. Build required following fixes to run to completion. The "make" will find them for you.
changed HOSTCFLAGS and CFLAGS in the linux/Makefile allowed warning messages on compile
An extraneous "-e" was added to the bb_config.h file. Deleted these characters from line 1.
The firmware file is passed to the router by TFTP. You will need to install and configure a tftpd server
After a successful build the /Belkin_F5D8235-4_v2000_v2.01.06/images contains the following files
The firmware.bin file is a trx file. The F5D8235v2_WW_2.01.06.bin is the same as the firmware.bin but has 19 bytes of additional identifier information prepended to the start of the file.
copy the firmware.bin file to the tftpd-hpa server directory (/var/lib/tftpboot on ubuntu)
The router uses the das boot(uboot). The following menu is presented during boot and you have 1 second to enter a value.
I used option 1 extensively to test if the kernel runs.
When it works I use option 2 to write the new firmware.
Console code of flash
U-Boot 1.1.3 (Nov 7 2008 - 00:24:27)
Board: Ralink APSoC DRAM: 32 MB
relocate_code Pointer at: 81fa0000
=====config_usbotg =====
flash_protect ON: from 0xBF000000 to 0xBF02F0F7
protect on 0
protect on 1
protect on 2
protect on 3
protect on 4
protect on 5
protect on 6
protect on 7
protect on 8
protect on 9
flash_protect ON: from 0xBF030000 to 0xBF03FFFF
protect on 10
============================================
Ralink UBoot Version: 3.2
--------------------------------------------
ASIC 3052_MP2 (Port5<->GigaSW)
DRAM COMPONENT: 128Mbits
DRAM BUS: 32BIT
Total memory: 32 MBytes
Date:Nov 7 2008 Time:00:24:27
============================================
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:128, ways:4, linesz:32 ,total:16384
##### The CPU freq = 384 MHZ ####
SDRAM bus set to 32 bit
SDRAM size =32 Mbytes
Please choose the operation:
1: Load system code to SDRAM via TFTP.
2: Load system code then write to Flash via TFTP.
3: Boot system code via Flash (default).
4: Entr boot command line interface.
9: Load Boot Loader code then write to Flash via TFTP.
You choosed 2
0
eth_register
Eth0 (10/100-M)
enetvar=ethaddr,Eth addr:00:AA:BB:CC:DD:10
00:AA:BB:CC:DD:10:
eth_current->name = Eth0 (10/100-M)
2: System Load Linux Kernel then write to Flash via TFTP.
Warning!! Erase Linux in Flash then burn new one. Are you sure?(Y/N)
Please Input new ones /or Ctrl-C to discard
Input device IP (192.168.1.1) ==:
Input server IP (192.168.1.64) ==:
Input Linux Kernel filename (f5d8235.romfs-fix.2009.10.13.trx) ==:firmware.2009.10.14-v0.trx
netboot_common, argc= 3
*************buf = 0x81fcf260
**********NexTxPacket = 81fe7340
NetTxPacket = 0x81FE7340
NetRxPackets[0] = 0x81FE7940
NetRxPackets[1] = 0x81FE7F40
NetRxPackets[2] = 0x81FE8540
NetRxPackets[3] = 0x81FE8B40
NetRxPackets[4] = 0x81FE9140
NetRxPackets[5] = 0x81FE9740
NetRxPackets[6] = 0x81FE9D40
NetRxPackets[7] = 0x81FEA340
NetRxPackets[8] = 0x81FEA940
NetRxPackets[9] = 0x81FEAF40
NetRxPackets[10] = 0x81FEB540
NetRxPackets[11] = 0x81FEBB40
NetRxPackets[12] = 0x81FEC140
NetRxPackets[13] = 0x81FEC740
NetRxPackets[14] = 0x81FECD40
NetRxPackets[15] = 0x81FED340
NetRxPackets[16] = 0x81FED940
NetRxPackets[17] = 0x81FEDF40
NetRxPackets[18] = 0x81FEE540
NetRxPackets[19] = 0x81FEEB40
KSEG1ADDR(NetTxPacket) = 0xA1FE7340
NetLoop,call eth_halt !
NetLoop,call eth_init !
Trying Eth0 (10/100-M)
Waitting for RX_DMA_BUSY status Start... done
0 smi_init check[0x0509]=0x5937
0 smi_init check[0x0509]=0x5937
Header Payload scatter function is Disable !!
ETH_STATE_ACTIVE!!
Using Eth0 (10/100-M) device
TFTP from server 192.168.1.64; our IP address is 192.168.1.1
Filename 'firmware.2009.10.14-v0.trx'.
TIMEOUT_COUNT=10,Load address: 0x80100000
Loading: Got ARP REPLY, set server/gtwy eth addr (00:23:54:ef:98:f1)
Got it
T #
first block received
################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#############
done
Bytes transferred = 6385664 (617000 hex)
NetBootFileXferSize= 00617000
Erase linux kernel block !!
From 0xBF050000 To 0xBF66FFFF
b_end =BF7FFFFF
Erase Flash from 0xbf050000 to 0xbf66ffff in Bank # 1
erase sector = 12
sect = 12,s_last = 109,erase poll = 828124
erase sector = 13
sect = 13,s_last = 109,erase poll = 844256
erase sector = 14
*sect = 14,s_last = 109,erase poll = 822779
erase sector = 15
sect = 15,s_last = 109,erase poll = 830345
erase sector = 16
*sect = 16,s_last = 109,erase poll = 828794
erase sector = 17
sect = 17,s_last = 109,erase poll = 846010
erase sector = 18
sect = 18,s_last = 109,erase poll = 844435
erase sector = 19
*sect = 19,s_last = 109,erase poll = 845138
erase sector = 20
sect = 20,s_last = 109,erase poll = 870838
erase sector = 21
*sect = 21,s_last = 109,erase poll = 832141
erase sector = 22
sect = 22,s_last = 109,erase poll = 818910
erase sector = 23
sect = 23,s_last = 109,erase poll = 856100
erase sector = 24
*sect = 24,s_last = 109,erase poll = 819070
erase sector = 25
sect = 25,s_last = 109,erase poll = 829492
erase sector = 26
*sect = 26,s_last = 109,erase poll = 833550
erase sector = 27
sect = 27,s_last = 109,erase poll = 820866
erase sector = 28
sect = 28,s_last = 109,erase poll = 819179
erase sector = 29
*sect = 29,s_last = 109,erase poll = 819219
erase sector = 30
sect = 30,s_last = 109,erase poll = 781204
erase sector = 31
sect = 31,s_last = 109,erase poll = 676554
erase sector = 32
*sect = 32,s_last = 109,erase poll = 679882
erase sector = 33
sect = 33,s_last = 109,erase poll = 727867
erase sector = 34
sect = 34,s_last = 109,erase poll = 690609
erase sector = 35
*sect = 35,s_last = 109,erase poll = 659683
erase sector = 36
sect = 36,s_last = 109,erase poll = 819193
erase sector = 37
*sect = 37,s_last = 109,erase poll = 837984
erase sector = 38
sect = 38,s_last = 109,erase poll = 824229
erase sector = 39
sect = 39,s_last = 109,erase poll = 840464
erase sector = 40
*sect = 40,s_last = 109,erase poll = 819403
erase sector = 41
sect = 41,s_last = 109,erase poll = 842603
erase sector = 42
*sect = 42,s_last = 109,erase poll = 819880
erase sector = 43
sect = 43,s_last = 109,erase poll = 820251
erase sector = 44
sect = 44,s_last = 109,erase poll = 819313
erase sector = 45
*sect = 45,s_last = 109,erase poll = 841607
erase sector = 46
sect = 46,s_last = 109,erase poll = 819565
erase sector = 47
*sect = 47,s_last = 109,erase poll = 851433
erase sector = 48
sect = 48,s_last = 109,erase poll = 835413
erase sector = 49
sect = 49,s_last = 109,erase poll = 819538
erase sector = 50
*sect = 50,s_last = 109,erase poll = 819025
erase sector = 51
sect = 51,s_last = 109,erase poll = 833992
erase sector = 52
*sect = 52,s_last = 109,erase poll = 846202
erase sector = 53
sect = 53,s_last = 109,erase poll = 819307
erase sector = 54
sect = 54,s_last = 109,erase poll = 808774
erase sector = 55
*sect = 55,s_last = 109,erase poll = 886035
erase sector = 56
sect = 56,s_last = 109,erase poll = 830668
erase sector = 57
*sect = 57,s_last = 109,erase poll = 819470
erase sector = 58
sect = 58,s_last = 109,erase poll = 843478
erase sector = 59
sect = 59,s_last = 109,erase poll = 820893
erase sector = 60
*sect = 60,s_last = 109,erase poll = 846664
erase sector = 61
sect = 61,s_last = 109,erase poll = 831172
erase sector = 62
*sect = 62,s_last = 109,erase poll = 840436
erase sector = 63
sect = 63,s_last = 109,erase poll = 840946
erase sector = 64
*sect = 64,s_last = 109,erase poll = 900289
erase sector = 65
sect = 65,s_last = 109,erase poll = 819795
erase sector = 66
sect = 66,s_last = 109,erase poll = 819295
erase sector = 67
*sect = 67,s_last = 109,erase poll = 820132
erase sector = 68
sect = 68,s_last = 109,erase poll = 833414
erase sector = 69
*sect = 69,s_last = 109,erase poll = 819324
erase sector = 70
sect = 70,s_last = 109,erase poll = 826787
erase sector = 71
sect = 71,s_last = 109,erase poll = 857527
erase sector = 72
*sect = 72,s_last = 109,erase poll = 832786
erase sector = 73
sect = 73,s_last = 109,erase poll = 829730
erase sector = 74
*sect = 74,s_last = 109,erase poll = 829931
erase sector = 75
sect = 75,s_last = 109,erase poll = 847788
erase sector = 76
sect = 76,s_last = 109,erase poll = 829908
erase sector = 77
*sect = 77,s_last = 109,erase poll = 821290
erase sector = 78
sect = 78,s_last = 109,erase poll = 836348
erase sector = 79
*sect = 79,s_last = 109,erase poll = 840752
erase sector = 80
sect = 80,s_last = 109,erase poll = 840348
erase sector = 81
sect = 81,s_last = 109,erase poll = 872301
erase sector = 82
*sect = 82,s_last = 109,erase poll = 862717
erase sector = 83
sect = 83,s_last = 109,erase poll = 866147
erase sector = 84
*sect = 84,s_last = 109,erase poll = 845215
erase sector = 85
sect = 85,s_last = 109,erase poll = 819939
erase sector = 86
sect = 86,s_last = 109,erase poll = 835800
erase sector = 87
*sect = 87,s_last = 109,erase poll = 862549
erase sector = 88
sect = 88,s_last = 109,erase poll = 843201
erase sector = 89
*sect = 89,s_last = 109,erase poll = 904785
erase sector = 90
sect = 90,s_last = 109,erase poll = 822938
erase sector = 91
sect = 91,s_last = 109,erase poll = 820678
.
erase sector = 92
sect = 92,s_last = 109,erase poll = 842488
erase sector = 93
sect = 93,s_last = 109,erase poll = 831315
erase sector = 94
*sect = 94,s_last = 109,erase poll = 821181
erase sector = 95
sect = 95,s_last = 109,erase poll = 880157
erase sector = 96
*sect = 96,s_last = 109,erase poll = 936438
erase sector = 97
sect = 97,s_last = 109,erase poll = 839581
erase sector = 98
sect = 98,s_last = 109,erase poll = 809073
erase sector = 99
*sect = 99,s_last = 109,erase poll = 819420
erase sector = 100
sect = 100,s_last = 109,erase poll = 819343
erase sector = 101
*sect = 101,s_last = 109,erase poll = 859005
erase sector = 102
sect = 102,s_last = 109,erase poll = 809665
erase sector = 103
sect = 103,s_last = 109,erase poll = 837934
erase sector = 104
*sect = 104,s_last = 109,erase poll = 830163
erase sector = 105
sect = 105,s_last = 109,erase poll = 830708
erase sector = 106
*sect = 106,s_last = 109,erase poll = 833737
erase sector = 107
sect = 107,s_last = 109,erase poll = 830632
erase sector = 108
sect = 108,s_last = 109,erase poll = 808868
erase sector = 109
*sect = 109,s_last = 109,erase poll = 815174
done
Erased 98 sectors
Copy linux image[6385664 byte] to Flash[0xBF050000]....
Copy to Flash...
Copy 6385664 byte to Flash...
addr = 0xBF0A409C ,cnt=6041444
addr = 0xBF0F813A ,cnt=5697222
addr = 0xBF14C1D8 ,cnt=5353000
addr = 0xBF1A0276 ,cnt=5008778
addr = 0xBF1F4314 ,cnt=4664556
addr = 0xBF2483B2 ,cnt=4320334
addr = 0xBF29C450 ,cnt=3976112
addr = 0xBF2F04EE ,cnt=3631890
addr = 0xBF34458C ,cnt=3287668
addr = 0xBF39862A ,cnt=2943446
addr = 0xBF3EC6C8 ,cnt=2599224
addr = 0xBF440766 ,cnt=2255002
addr = 0xBF494804 ,cnt=1910780
addr = 0xBF4E88A2 ,cnt=1566558
addr = 0xBF53C940 ,cnt=1222336
addr = 0xBF5909DE ,cnt=878114
addr = 0xBF5E4A7C ,cnt=533892
addr = 0xBF638B1A ,cnt=189670 done
## Booting image at bf050000 ...
Image Name: Linux Kernel Image
Created: 2009-10-14 9:55:29 UTC
System Control Status = 0x30440000
Image Type: MIPS Linux Kernel Image (lzma compressed)
Data Size: 1210677 Bytes = 1.2 MB
Load Address: 80000000
Entry Point: 8037c000
Verifying Checksum ... OK
Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 8037c000) ...
## Giving linux memsize in MB, 32
Starting kernel ...
LINUX started...
THIS IS ASIC
Linux version 2.6.21 (root@lab64-vb) (gcc version 3.4.2) #84 Wed Oct 14 02:55:03 PDT 2009
The CPU feqenuce set to 384 MHz
CPU revision is: 0001964c
Determined physical RAM map:
memory: 02000000 @ 00000000 (usable)
Built 1 zonelists. Total pages: 8128
Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock2
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 16kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
Cache parity protection disabled
cause = 80800060, status = 1100ff00
PID hash table entries: 128 (order: 7, 512 bytes)
calculating r4koff... 00177000(1536000)
CPU frequency 384.00 MHz
Using 192.000 MHz high precision timer.
Console: colour dummy device 80x25
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 28644k/32768k available (2914k kernel code, 4124k reserved, 649k data, 132k init, 0k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
NET: Registered protocol family 2
Time: MIPS clocksource has been installed.
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher
squashfs: LZMA suppport for slax.org by jro
fuse init (API version 7.8)
io scheduler noop registered (default)
FLASH_API: MAN_ID=C2 DEV_ID=22CB SIZE=8MB
Ralink RT2880 gpio driver initialized
Gemtek LED init...
Ralink gpio driver initialized
HDLC line discipline: version $Revision: 1.1.1.1 $, maxframe=4096
N_HDLC line discipline registered.
Serial: 8250/16550 driver $Revision: 1.3 $ 2 ports, IRQ sharing disabled
serial8250: ttyS0 at I/O 0xb0000500 (irq = 37) is a 16550A
serial8250: ttyS1 at I/O 0xb0000c00 (irq = 12) is a 16550A
loop: loaded (max 8 devices)
rdm_major = 254
GDMA1_MAC_ADRH -- : 0x00000000
GDMA1_MAC_ADRL -- : 0x00000000
Ralink APSoC Ethernet Driver Initilization. v1.60 128 rx/tx descriptors allocated, mtu = 1500!
NAPI enable, weight = 0, Tx Ring = 128, Rx Ring = 128
GDMA1_MAC_ADRH -- : 0x0000000c
GDMA1_MAC_ADRL -- : 0x43305277
PROC INIT OK!
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
PPP MPPE Compression module registered
NET: Registered protocol family 24
ralink flash device: 0x1000000 at 0xbf000000
Ralink SoC physically mapped flash: Found 1 x16 devices at 0x0 in 16-bit bank
Amd/Fujitsu Extended Query Table at 0x0040
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
Creating 5 MTD partitions on "Ralink SoC physically mapped flash":
0x00000000-0x00050000 : "uboot"
0x00050000-0x007e0000 : "Kernel and Rootfs"
0x001d0000-0x007e0000 : "Rootfs"
0x007e0000-0x007f0000 : "Nvram"
0x007f0000-0x00800000 : "Factory"
block2mtd: version $Revision: 1.1.1.1 $
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
nf_conntrack version 0.5.0 (256 buckets, 2048 max)
IPv4 over IPv4 tunneling driver
GRE over IPv4 tunneling driver
ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Fully Cone
TCP cubic registered
NET: Registered protocol family 1
NET: Registered protocol family 10
lo: Disabled Privacy Extensions
tunl0: Disabled Privacy Extensions
Mobile IPv6
IPv6 over IPv4 tunneling driver
sit0: Disabled Privacy Extensions
NET: Registered protocol family 17
create_proc_read_write_entry: fail
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
ieee80211: 802.11 data/management/control stack, git-1.1.13
ieee80211: Copyright (C) 2004-2005 Intel Corporation <jketreno@linux.intel.com>
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 132k freed
Algorithmics/MIPS FPU Emulator v1.5
reset_btn : reset_btn is 1...press
phy_tx_ring = 0x01cc1000, tx_ring = 0xa1cc1000
phy_rx_ring = 0x00000000, rx_ring = 0x00000000
RT305x_ESW: Link Status Changed
CDMA_CSG_CFG = 81000007
GDMA1_FWD_CFG = 790000
#sysinit: [sysinit]
rtl8366_smi: module license 'unspecified' taints kernel.
smi_major=249
0 smi_init check[0x05c]1=0x5937
mkdir: Cannot create directory `/dev/pts': File exists
BusyBox v1.1.0 (2009.10.12-23:11+0000) Built-in shell (msh)
Enter 'help' for a list of built-in commands.
# ftok: No such file or directory
msgget: No such file or directory
[sighandler]: No more events to be processed, quitting.
[cleanup]: Waiting for children.
[cleanup]: All children terminated.
Creat rmain device for LED and insmod it.
insmod: reset_btn.ko: no module by that name found
Starting Watchdog function !!!!!!!
-- BUTTON: REBOOT --
cat: /proc/watchdog_ctrl_folder/watchdog_ctrl_run: No such file or directory
Done
Clean storage nvram value!!
# update nvram with default list!
Do 'echo 0 > /proc/USB_BLINK;echo 1 > /proc/GPIO23;echo 1 > /proc/GPIO22;' in ixp4xx_gpio.h
# interfaces_init......
RTL8366 reg 0x5C=[0x5937]
Init RTL8366RB!!
switch reg write offset=98, value=7f40
switch reg write offset=e4, value=20
rmmod: rtl8366RB: Success
killall: smbd: no process killed
rtl_major = 253
0 smi_init check[0x0105]=0x0000
0 smi_init check[0x0105]=0x0000
0 smi_init check[0x0509]=0x5937
verid is 3
0 rtl8366rb_initChip
0 smi_init check[0x0509]1=0x5937
0 smi_init check[0x050a]1=0x0003
Gemtek Link status init.
killall: nmbd: no process killed
killall: ntfs-3g: no process killed
The system is going down NOW !!
Sending SIGTERM to all processes.
Sending SIGKILL
BusyBox v1.1.0 (2009.10.12-23:11+0000) Built-in shell (msh)
Enter 'help' for a list of built-in commands.
# Restarting system.
U-Boot 1.1.3 (Nov 7 2008 - 00:24:27)
Board: Ralink APSoC DRAM: 32 MB
relocate_code Pointer at: 81fa0000
=====config_usbotg =====
flash_protect ON: from 0xBF000000 to 0xBF02F0F7
protect on 0
protect on 1
protect on 2
protect on 3
protect on 4
protect on 5
protect on 6
protect on 7
protect on 8
protect on 9
flash_protect ON: from 0xBF030000 to 0xBF03FFFF
protect on 10
============================================
Ralink UBoot Version: 3.2
--------------------------------------------
ASIC 3052_MP2 (Port5<->GigaSW)
DRAM COMPONENT: 128Mbits
DRAM BUS: 32BIT
Total memory: 32 MBytes
Date:Nov 7 2008 Time:00:24:27
============================================
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:128, ways:4, linesz:32 ,total:16384
##### The CPU freq = 384 MHZ ####
SDRAM bus set to 32 bit
SDRAM size =32 Mbytes
Please choose the operation:
1: Load system code to SDRAM via TFTP.
2: Load system code then write to Flash via TFTP.
3: Boot system code via Flash (default).
4: Entr boot command line interface.
9: Load Boot Loader code then write to Flash via TFTP.
0
3: System Boot system code via Flash.
## Booting image at bf050000 ...
Image Name: Linux Kernel Image
Created: 2009-10-14 9:55:29 UTC
System Control Status = 0x30440000
Image Type: MIPS Linux Kernel Image (lzma compressed)
Data Size: 1210677 Bytes = 1.2 MB
Load Address: 80000000
Entry Point: 8037c000
Verifying Checksum ... OK
Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 8037c000) ...
## Giving linux memsize in MB, 32
Starting kernel ...
LINUX started...
THIS IS ASIC
Linux version 2.6.21 (root@lab64-vb) (gcc version 3.4.2) #84 Wed Oct 14 02:55:03 PDT 2009
The CPU feqenuce set to 384 MHz
CPU revision is: 0001964c
Determined physical RAM map:
memory: 02000000 @ 00000000 (usable)
Built 1 zonelists. Total pages: 8128
Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock2
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 16kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
Cache parity protection disabled
cause = 10800020, status = 1100ff00
PID hash table entries: 128 (order: 7, 512 bytes)
calculating r4koff... 00177000(1536000)
CPU frequency 384.00 MHz
Using 192.000 MHz high precision timer.
Console: colour dummy device 80x25
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 28644k/32768k available (2914k kernel code, 4124k reserved, 649k data, 132k init, 0k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
NET: Registered protocol family 2
Time: MIPS clocksource has been installed.
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher
squashfs: LZMA suppport for slax.org by jro
fuse init (API version 7.8)
io scheduler noop registered (default)
FLASH_API: MAN_ID=C2 DEV_ID=22CB SIZE=8MB
Ralink RT2880 gpio driver initialized
Gemtek LED init...
Ralink gpio driver initialized
HDLC line discipline: version $Revision: 1.1.1.1 $, maxframe=4096
N_HDLC line discipline registered.
Serial: 8250/16550 driver $Revision: 1.3 $ 2 ports, IRQ sharing disabled
serial8250: ttyS0 at I/O 0xb0000500 (irq = 37) is a 16550A
serial8250: ttyS1 at I/O 0xb0000c00 (irq = 12) is a 16550A
loop: loaded (max 8 devices)
rdm_major = 254
GDMA1_MAC_ADRH -- : 0x00000000
GDMA1_MAC_ADRL -- : 0x00000000
Ralink APSoC Ethernet Driver Initilization. v1.60 128 rx/tx descriptors allocated, mtu = 1500!
NAPI enable, weight = 0, Tx Ring = 128, Rx Ring = 128
GDMA1_MAC_ADRH -- : 0x0000000c
GDMA1_MAC_ADRL -- : 0x43305277
PROC INIT OK!
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
PPP MPPE Compression module registered
NET: Registered protocol family 24
ralink flash device: 0x1000000 at 0xbf000000
Ralink SoC physically mapped flash: Found 1 x16 devices at 0x0 in 16-bit bank
Amd/Fujitsu Extended Query Table at 0x0040
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
Creating 5 MTD partitions on "Ralink SoC physically mapped flash":
0x00000000-0x00050000 : "uboot"
0x00050000-0x007e0000 : "Kernel and Rootfs"
0x001d0000-0x007e0000 : "Rootfs"
0x007e0000-0x007f0000 : "Nvram"
0x007f0000-0x00800000 : "Factory"
block2mtd: version $Revision: 1.1.1.1 $
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
nf_conntrack version 0.5.0 (256 buckets, 2048 max)
IPv4 over IPv4 tunneling driver
GRE over IPv4 tunneling driver
ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Fully Cone
TCP cubic registered
NET: Registered protocol family 1
NET: Registered protocol family 10
lo: Disabled Privacy Extensions
tunl0: Disabled Privacy Extensions
Mobile IPv6
IPv6 over IPv4 tunneling driver
sit0: Disabled Privacy Extensions
NET: Registered protocol family 17
create_proc_read_write_entry: fail
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
ieee80211: 802.11 data/management/control stack, git-1.1.13
ieee80211: Copyright (C) 2004-2005 Intel Corporation <jketreno@linux.intel.com>
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 132k freed
Algorithmics/MIPS FPU Emulator v1.5
phy_tx_ring = 0x01cbd000, tx_ring = 0xa1cbd000
phy_rx_ring = 0x00000000, rx_ring = 0x00000000
RT305x_ESW: Link Status Changed
CDMA_CSG_CFG = 81000007
GDMA1_FWD_CFG = 790000
#sysinit: [sysinit]
rtl8366_smi: module license 'unspecified' taints kernel.
smi_major=249
0 smi_init check[0x05c]1=0x5937
mkdir: Cannot create directory `/dev/pts': File exists
BusyBox v1.1.0 (2009.10.12-23:11+0000) Built-in shell (msh)
Enter 'help' for a list of built-in commands.
# ftok: No such file or directory
msgget: No such file or directory
[sighandler]: No more events to be processed, quitting.
[cleanup]: Waiting for children.
[cleanup]: All children terminated.
Creat rmain device for LED and insmod it.
insmod: reset_btn.ko: no module by that name found
Starting Watchdog function !!!!!!!
cat: /proc/watchdog_ctrl_folder/watchdog_ctrl_run: No such file or directory
Done
Clean storage nvram value!!
# update nvram with default list!
Do 'echo 0 > /proc/USB_BLINK;echo 1 > /proc/GPIO23;echo 1 > /proc/GPIO22;' in ixp4xx_gpio.h
# interfaces_init......
RTL8366 reg 0x5C=[0x5937]
Init RTL8366RB!!
switch reg write offset=98, value=7f40
switch reg write offset=e4, value=20
rmmod: rtl8366RB: Success
rtl_major = 253
0 smi_init check[0x0105]=0x0000
0 smi_init check[0x0105]=0x0000
0 smi_init check[0x0509]=0x5937
verid is 3
0 rtl8366rb_initChip
0 smi_init check[0x0509]1=0x5937
0 smi_init check[0x050a]1=0x0003
Gemtek Link status init.
verid is 3
rtl8366rb_initChip() initialized!
rtl8366rb_setMac5ForceLink() initialized!
verid is 3
[0]phy_abilityAutoNegotiation : 1
[0]phy_abilityHalf_10 : 1
[0]phy_abilityFull_10 : 1
[0]phy_abilityHalf_100 : 1
[0]phy_abilityFull_100 : 1
[0]phy_abilityFull_1000 : 1
[0]phy_abilityFC : 1
[0]phy_abilityAsyFC : 1
[1]phy_abilityAutoNegotiation : 1
[1]phy_abilityHalf_10 : 1
[1]phy_abilityFull_10 : 1
[1]phy_abilityHalf_100 : 1
[1]phy_abilityFull_100 : 1
[1]phy_abilityFull_1000 : 1
[1]phy_abilityFC : 1
[1]phy_abilityAsyFC : 1
[2]phy_abilityAutoNegotiation : 1
[2]phy_abilityHalf_10 : 1
[2]phy_abilityFull_10 : 1
[2]phy_abilityHalf_100 : 1
[2]phy_abilityFull_100 : 1
[2]phy_abilityFull_1000 : 1
[2]phy_abilityFC : 1
[2]phy_abilityAsyFC : 1
[3]phy_abilityAutoNegotiation : 1
[3]phy_abilityHalf_10 : 1
[3]phy_abilityFull_10 : 1
[3]phy_abilityHalf_100 : 1
[3]phy_abilityFull_100 : 1
[3]phy_abilityFull_1000 : 1
[3]phy_abilityFC : 1
[3]phy_abilityAsyFC : 1
[4]phy_abilityAutoNegotiation : 1
[4]phy_abilityHalf_10 : 1
[4]phy_abilityFull_10 : 1
[4]phy_abilityHalf_100 : 1
[4]phy_abilityFull_100 : 1
[4]phy_abilityFull_1000 : 1
[4]phy_abilityFC : 1
[4]phy_abilityAsyFC : 1
rtl8366s_getEthernetPHY fail for 5!!!!
rtl8366s_getEthernetPHY fail for 6!!!!
rtl8366s_getEthernetPHY fail for 7!!!!
rtl8366s_getEthernetPHY fail for 8!!!!
rtl8366s_getEthernetPHY fail for 9!!!!
rtl8366s_getEthernetPHY fail for 10!!!!
rtl8366s_getEthernetPHY fail for 11!!!!
rtl8366s_getEthernetPHY fail for 12!!!!
rtl8366s_getEthernetPHY fail for 13!!!!
rtl8366s_getEthernetPHY fail for 14!!!!
rtl8366s_getEthernetPHY fail for 15!!!!
gemtek_switch_reset failed
RTL_GET_GREEN_ETHERNET Success!!!
RTL_GET_GREEN_ETHERNET : tx is 0, rx is -2143516000
RTL_GET_GREEN_ETHERNET : rtl8368s_getAsicPowerSaving is phyNo.0, enabled : 1 !!!
RTL_GET_GREEN_ETHERNET : rtl8368s_getAsicPowerSaving is phyNo.1, enabled : 1 !!!
RTL_GET_GREEN_ETHERNET : rtl8368s_getAsicPowerSaving is phyNo.2, enabled : 1 !!!
RTL_GET_GREEN_ETHERNET : rtl8368s_getAsicPowerSaving is phyNo.3, enabled : 1 !!!
RTL_GET_GREEN_ETHERNET : rtl8368s_getAsicPowerSaving is phyNo.4, enabled : 1 !!!
rtl:rtl_ge_read : 0
RTL_SET_GREEN_ETHERNET Success!!!
RTL_GET_GREEN_ETHERNET Success!!!
RTL_GET_GREEN_ETHERNET : tx is 1, rx is -2115564384
RTL_GET_GREEN_ETHERNET : rtl8368s_getAsicPowerSaving is phyNo.0, enabled : 1 !!!
RTL_GET_GREEN_ETHERNET : rtl8368s_getAsicPowerSaving is phyNo.1, enabled : 1 !!!
RTL_GET_GREEN_ETHERNET : rtl8368s_getAsicPowerSaving is phyNo.2, enabled : 1 !!!
RTL_GET_GREEN_ETHERNET : rtl8368s_getAsicPowerSaving is phyNo.3, enabled : 1 !!!
RTL_GET_GREEN_ETHERNET : rtl8368s_getAsicPowerSaving is phyNo.4, enabled : 1 !!!
rtl:rtl_ge_read : 0
Setting ra0 configuration....
CountryRegionABand=1
WirelessMode=9
TxRate=0
Channel=0
BeaconPeriod=100
DtimPeriod=1
TxPower=100
BGProtection=2
RTSThreshold=2347
FragThreshold=2346
TxBurst=1
ShortSlot=1
PktAggregate=0
NoForwarding=0
NoForwardingBTNBSSID=0
HideSSID=0
Key1Type=0
Key2Type=0
Key3Type=0
Key4Type=0
WdsEnable=0
WdsList=
WdsKey=
WdsEncrypType=NONE
AutoChannelSelect=1
RekeyInterval=2000
AccessPolicy0=0
AccessPolicy1=0
RADIUS_Server=0.0.0.0
RADIUS_Port=1812
RADIUS_Key=
Ethifname=vlan1
own_ip_addr=192.168.1.247
session_timeout_interval=0
DisableOLBC=0
TxPreamble=0
WmmCapable=1
AckPolicy=0;0;0;0
APAifsn=3;7;1;1
APCwmin=4;4;3;2
APCwmax=6;10;4;3
APTxop=0;0;94;47
APACM=0;0;0;0
BSSAifsn=3;7;2;2
BSSCwmin=4;4;3;2
BSSCwmax=10;10;4;3
BSSTxop=0;0;94;47
BSSACM=0;0;0;0
BasicRate=15
IEEE8021X=0
Set N mode parameter...
Bring up ra0 interface....
2860 version : 2.0.0.0-Win7-20090331 (Jun 9 2009)
=== pAd = c1042000, size = 486296 ===
<-- RTMPAllocAdapterBlock, Status=0
RX DESC a181d000 size = 2048
<-- RTMPAllocTxRxRingMemory, Status=0
1. Phy Mode = 9
2. Phy Mode = 9
3. Phy Mode = 9
MCS Set = ff ff 00 00 00
Main bssid = 00:22:75:b3:a8:a8
The UUID Hex string is:2880288028801880a880002275b3a8a8
The UUID ASCII string is:28802880-2880-1880-a880-002275b3a8a8!
<==== RTMPInitialize, Status=0
0x1300 = 00064320
interface ra0 does not exist!
No need to change ra0 to Nintendo NDS capable
No need to change ra0 to Nintendo NDS capable...Complete
ra0 mac:
[0x00001300]:00063330
ra0 mac:
[0x00001304]:000a3700
killall: rt2860apd: no process killed
rt2860apd: not found
Mssid : init mode
killall : No such file or directory
get_WPS_PIN_code : WSCStatus : 17741200
check_WPS_status : WSCStatus is 3 now...STATUS_WSC_LINK_UP
WPS BUTTON press!!
killall: wscd: no process killed
route: SIOC[ADD|DEL]RT: No such device
ra0 mac:
[0x0000102c]:0f031e46
The FW is NOT for WIN 7 LOGO TEST
gPassiveMsgQ Init success! gPassiveMsgID=0x386d4399!
gActiveMsgQ Init success!
sock=6!(0x0x7fd88cf8)
Pthread(wscDevNLHandle)Now waiting for the netlink socket incoming message!
Create netlink socket thread success!
Create ioctl socket(7) success!
(wscDevNLHandle):netlink socket data is availablvlan1: Setting MAC address to e now.
00 22 75 b3 a8 a8.
device eth2 entered promiscuous mode
VLAN (vlan1): Setting underlying device (eth2) to promiscious mode.
vlan1: dev_set_promiscuity(master, 1)
device vlan1 entered promiscuous mode
device ra0 entered promiscuous mode
br0: port 2(ra0) entering listening state
br0: port 1(vlan1) entering listening state
wscNLEventRTMNewlinkHandle(wscDevNLHandle):netlink socket data is available now.
wscNLEventRTMNewlinkHandle(wscDevNLHandle):netlink socket data is available now.
wscNLEventRTMNewlinkHandle(wscDevNLHandle):netlink socket data is available now.
wscNLEventRTMNewlinkHandle(wscDevNLHandle):netlink socket data is available now.
wscNLEventRTMNewlinkHandle(wscDevNLHandle):netlink socket data is available now.
wscNLEventRTMNewlinkHandle(wscDevNLHandle):netlink socket data is available now.
wscNLEventRTMNewlinkHandle(wscDevNLHandle):netlink socket data is available now.
wscNLEventRTMNewlinkHandlewscd: SSDP UDP PORT = 1900
Error with UpnpInit -- -208
dwc_otg: version 2.60a 22-NOV-2006
DWC_otg: Using DMA mode
dwc_otg lm0: DWC OTG Controller
dwc_otg lm0: new USB bus registered, assigned bus number 1
dwc_otg lm0: irq 18, io mem 0x00000000
DWC_otg: Init: Port Power? op_state=1
DWC_otg: Init: Power Port (0)
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
# lan services init......
killall: rt2860apd: no process killed
rt2860apd: No such file or directory
Start UPnP
easyconf: start 20080820
easyconf: Waiting for client to connect...
route: resolving gw
route: resolving gw
route: resolving gw
route: resolving gw
route: resolving gw
br0: port 2(ra0) entering learning state
br0: port 1(vlan1) entering learning state
dnsmasq: failed to bind listening socket for fe80::222:75ff:feb3:a8a8: Cannot assign requested address
killall : No such file or directory
get_WPS_PIN_code : WSCStatus : 17741200
check_WPS_status : WSCStatus is 3 now...STATUS_WSC_LINK_UP
br0: topology change detected, propagating
br0: port 2(ra0) entering forwarding state
br0: topology change detected, propagating
br0: port 1(vlan1) entering forwarding state
killall: wscd: no process killed
route: SIOC[ADD|DEL]RT: File exists
gPassiveMsgQ Init success! gPassiveMsgID=0x386d439c!
gActiveMsgQ Init success!
(2147)Service enable wireless
# wan_init......
Set country code to us!!!
sock=6!(0x0x7fb01cf8)
Create netlink socket thread success!
Create ioctl socket(7) success!
vlan2: Setting MAC address to 00 22 75 b3 a8 aa.
Pthread(wscDevNLHandle)Now waiting for the netlink socket incoming message!
(wscDevNLHandle):netlink socket data is available now.
wscNLEventRTMNewlinkHandlewscd: SSDP UDP PORT = 1900
UPnP Initialized
IP-Addr: 192.168.1.247 Port: 49152
HW-Addr: 00:22:75:b3:a8:a8!
Specifying the webserver root directory -- /etc_ro/xml/
UUID Str=uuid:28802880-2880-1880-a880-002275b3a8a8!
alloc memory size=1135!
<?xml version="1.0" encoding="utf-8"?>
<root xmlns="urn:schemas-upnp-org:device-1-0">
<specVersion>
<major>1</major>
<minor>0</minor>
</specVersion>
<device>
<deviceType>urn:schemas-wifialliance-org:device:WFADevice:1</deviceType>
<friendlyName>Belkin Wireless Router</friendlyName>
<manufacturer>Belkin Corporation</manufacturer>
<manufacturerURL>http://www.belkin.com</manufacturerURL>
<modelDescription>Belkin Wireless Router</modelDescription>
<modelName>Belkin Wireless Router</modelName>
<modelNumber>F5D</modelNumber>
<modelURL>http://www.belkin.com</modelURL>
<serialNumber>111111111111</serialNumber>
<UDN>uuid:28802880-2880-1880-a880-002275b3a8a8</UDN>
<serviceList>
<service>
<serviceType>urn:schemas-wifialliance-org:service:WFAWLANConfig:1</serviceType>
<serviceId>urn:wifialliance-org:serviceId:WFAWLANConfig1</serviceId>
<SCPDURL>WFAWLANConfigSCPD.xml</SCPDURL>
<controlURL>control</controlURL>
<eventSubURL>event</eventSubURL>
</service>
</serviceList>
</device>
</root>
Registering the RootDevice
with descDocUrl: http://192.168.1.247:49152/description.xml
RootDevice Registered
WscLocalDevice:
Device:
FriendlyName=Belkin Wireless Router!
DescDocURL=http://192.168.1.247:49152/description.xml!
UDN=uuid:28802880-2880-1880-a880-002275b3a8a8!
PresURL=!
Service:
servIdStr=urn:wifialliance-org:serviceId:WFAWLANConfig1!
servTypeStr=urn:schemas-wifialliance-org:service:WFAWLANConfig:1!
scpdURL=http://192.168.1.247:49152/WFAWLANConfigSCPD.xml!
eventURL=http://192.168.1.247:49152/event!
controlURL=http://192.168.1.247:49152/control!
WscLocalDeviceInit Initialized
Close speed boot up led...
Changing password for guest
Bad password: too short.
Warning: weak password (continuing).
Jan 1 00:00:29 passwd[3488]: password for `guest' changed by user `root'
Password changed.
Advertisement Sent
Can't load /etc/smb.conf - run testparm to debug it
# httpd : This is httpd...ssl_enabled is 0
# uname -a
Linux (none) 2.6.21 #84 Wed Oct 14 02:55:03 PDT 2009 mips unknown
# ps auxw | telnet(easystorage.c->main(201)) Easystorage Start 20080820
telnet: not found
# ps auxw | grep telnet
687 root 164 R telnetd
3733 root 320 S grep telnet
# mount
/dev/mtdblock2 on / type squashfs (rw)
/proc on /proc type proc (rw)
ramfs on /tmp type ramfs (rw)
none on /dev/pts type devpts (rw)
devfs on /dev type ramfs (rw)
sysfs on /sys type sysfs (rw)
# cat /etc/rc
ifconfig eth2 up
#insmod fvmac.ko debug_mii=0 share_mii=1 mac0_phyaddr=32 mac1_phyaddr=4 mac0_devname=eth1 mac1_devname
=eth0
#insmod fv_led.ko
#insmod fv_fastnat_core.ko
#insmod fv_watch_dog.ko
sysinit&
# herb swanson 10.14.2009 added in telnetd
mkdir /dev/pts
mount -t devpts none /dev/pts
telnetd
After router boot the following commands needed to be entered to activate the telnet daemon
execute passwd command to give root a password otherwise root cannot login.
