Making some progress on the Belkin router.

Running uBoot, is a Marvell board.

Bootlog

        |  \/  | __ _ _ ____   _____| | |
        | |\/| |/ _` | '__\ \ / / _ \ | |
        | |  | | (_| | |   \ V /  __/ | |
        |_|  |_|\__,_|_|    \_/ \___|_|_|
 _   _     ____              _
| | | |   | __ )  ___   ___ | |_
| | | |___|  _ \ / _ \ / _ \| __|
| |_| |___| |_) | (_) | (_) | |_
 \___/    |____/ \___/ \___/ \__|  ** LOADER **
 ** MARVELL BOARD: RD-88F5181L-VOIP-FE LE

U-Boot 1.1.1 (Jul 14 2006 - 14:33:05) Marvell version: 1.7.3

DRAM CS[0] base 0x00000000   size  32MB
DRAM Total size  32MB
Flash: mvFlashInit base 0xffc00000 devW 1 busW 1
Flash: flashStructGet manu 0xc2 id 0xa8
Flash: flashStructGet flash is supported.
FLASH: initFlashSecs BOTTOM Sector Type
Flash: flashSecsInit main sector loop 8 - 71
[4096kB@ffc00000] Flash:  4 MB
Addresses 20M - 0M are saved for the U-Boot usage.
Mem malloc Initialization (20M - 16M): Done
*** Warning - bad CRC, using default environment


Soc: 88F5181 B1
CPU: ARM926 (Rev 0) running @ 500Mhz
SysClock = 166Mhz , TClock = 166Mhz


USB 0: host mode
PCI 0: PCI Express Root Complex Interface
PCI 1: Conventional PCI, speed = 33000000
Net:   mvEgigaLoad: egiga0 load ok
egiga0 [PRIME]

***************DRIVER INFO*****************

DRIVER BUILD DATA: Jul 14 2006 at 15:28:46
DRIVER VERSION 1.04

*******************************************
dbSign is:65:52:63:4f:6d:4d
mac address in flash is:00:17:3f:3a:8d:70
have eRcOmM
Hit ENTER to stop autoboot:  0
copy kernel from 0xffef0000 to 0x400000 with size 0xc0000
## Booting image at 00400000 ...
   Image Name:   Linux-2.4.27-vrs1
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    745608 Bytes = 728.1 kB
   Load Address: 00008000
   Entry Point:  00008000
   Verifying Checksum ... OK
OK

Starting kernel ...

Uncompressing Linux................................................... done, booting the kernel.
=Linux version 2.4.27-vrs1 (william@SBUI-3) (gcc version 3.4.4 (release) (CodeSourcery ARM 2005q3-1)) #14 Tue Dec 18 13:58:33 CST 2007
CPU: ARM926EJ-Sid(wb) revision 0
Machine: MV-88fxx81
Using UBoot passing parameters structure
Sys Clk = 166666667, Tclk = 166666667
On node 0 totalpages: 8192
zone(0): 8192 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: ttyS0,115200 root=/dev/mtdblock0 ro
Calibrating delay loop... 332.59 BogoMIPS
Memory: 32MB 0MB 0MB 0MB = 32MB total
Memory: 30620KB available (1354K code, 324K data, 76K init)
Dentry cache hash table entries: 4096 (order: 3, 32768 bytes)
Inode cache hash table entries: 2048 (order: 2, 16384 bytes)
Mount cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 8192 (order: 3, 32768 bytes)
CPU: Testing write buffer: pass
POSIX conformance testing by UNIFIX
init hw started.

CPU Interface
-------------
SDRAM_CS0 ....base 00000000, size  32MB
SDRAM_CS1 ....disable
SDRAM_CS2 ....disable
SDRAM_CS3 ....disable
PEX0_MEM ....base e0000000, size 128MB
PEX0_IO ....base f2000000, size   1MB
PCI0_MEM ....base e8000000, size 128MB
PCI0_IO ....base f2100000, size   1MB
INTER_REGS ....base f1000000, size   1MB
DEVICE_CS0 ....no such
DEVICE_CS1 ....no such
DEVICE_CS2 ....no such
DEV_BOOCS ....base f4000000, size  16MB
Flash bankwidth 1, base f4000000, size 1000000
PCI: bus0: Fast back to back transfers enabled
HW already initialized.
PCI: bus1: Fast back to back transfers enabled
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
Initializing RT netlink socket

  Marvell Development Board (LSP Version 1.1.3)-- RD-88F5181L-VOIP-FE  Soc: 88F5181 B1

 Detected Tclk 166666667 and SysClk 166666667
Starting kswapd
squashfs: version 3.0 (2006/03/15) Phillip Lougher
pty: 256 Unix98 ptys configured
Serial driver version 5.05c (2001-07-08) with MANY_PORTS SHARE_IRQ SERIAL_PCI enabled
ttyS00 at 0xf1012000 (irq = 3) is a 16550A
Marvell Gateway Driver:
Detected RD_88F5181L_VOIP_FE
Using VLAN-tag Mode
L3/L4 Checksum offload enabled
Link status indication mode is on (switch irq=41)
Multi queue support ( rxq0=128 rxq1=64 rxq2=64 rxq3=64 txq0=2000 )
Using boot network interface configuration
eth0: mac_addr 00:00:00:00:51:81, VID 0x100, port list: port-4
eth1: mac_addr 00:00:00:00:51:80, VID 0x200, port list: port-0 port-1 port-2 port-3
init switch layer... done
init MAC layer... done
loading network interfaces: eth0 eth1
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
physmap flash device: 1000000 at f4000000
 Amd/Fujitsu Extended Query Table v1.1 at 0x0040
number of CFI chips: 1
cfi_cmdset_0002: Disabling fast programming due to code brokenness.
Using physmap partition definition
Creating 4 MTD parti.tions on "Physically mapped flash":
0x00000000-0x002f0000 : "rootfs"
0x002f0000-0x003b0000 : "kernel"
0x003b0000-0x003c0000 : "nvram"
0x003c0000-0x00400000 : "boot"
Initializing Cryptographic API
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP, IGMP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 2048 bind 4096)
IPv4 over IPv4 tunneling driver
GRE over IPv4 tunneling driver
Linux IP multicast router 0.06 plus PIM-SM
netfilter PSD loaded - (c) astaro AG
ipt_random match loaded
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
NET4: Ethernet Bridge 008 for NET4.0
Fast Floating Point Emulator V0.94M by Peter Teichmann.
VFS: Mounted root (squashfs filesystem) readonly.
Freeing init memory: 76K
init started:  BusyBox v1.00 (2007.12.17-03:08+0000) multi-call binary
init started:  BusyBox v1.00 (2007.12.17-03:08+0000) multi-call binary
Starting pid 10, console /dev/ttyS0: '/etc/rcS'
Using /usr/sbin/led.o
Using /etc/ap8x.o
ap0: Marvell AP-8x 802.11n adapter: mem=0xe8000000, irq=36
Using /usr/sbin/push_button.o

 init...push_buttom
gpio direct value=[ffff0714]
polarity reg =<0xa3c>
Using /usr/sbin/eth_status.o
init eth status module
mv_gateway: eth1 db1 port-mask=0x20, 00:00:00:00:51:80 deleted
mv_gateway: eth1 db1 port-mask=0x20, 00:17:3f:3a:8d:70 added
mv_gateway: eth1 change mac address to 00:17:3f:3a:8d:70
mv_gateway: eth0 db0 port-mask=0x20, 00:00:00:00:51:81 deleted
mv_gateway: eth0 db0 port-mask=0x20, 00:17:3f:3a:8d:71 added
mv_gateway: eth0 change mac address to 00:17:3f:3a:8d:71
mv_gateway: starting eth1
mv_gateway: eth1 db1 port-mask=0x20, 00:17:3f:3a:8d:70 added
mv_gateway: eth1 db1 port-mask=0x2f, ff:ff:ff:ff:ff:ff added
WLAN: MLME - Disconnecting (deauth) wireless client: ffffffffffff Reason 3
WLAN: MLME - Disconnecting (deauth) wireless client: ffffffffffff Reason 3
device eth1 entered promiscuous mode
device ap0 entered promiscuous mode
ap0: attempt to add interface with same source address.
start syslog...
syslog_cmd=
<mapping sub-ioctl wpawpa2mode to cmd 0x8BE0-11>
<mapping sub-ioctl hidessid to cmd 0x8BE0-4>
<mapping sub-ioctl opmode to cmd 0x8BE0-2>
<mapping sub-ioctl gprotect to cmd 0x8BE0-6>
<mapping sub-ioctl htbw to cmd 0x8BE0-19>
<mapping sub-ioctl preamble to cmd 0x8BE0-5>
<mapping sub-ioctl fixrate to cmd 0x8BE0-9>
<mapping sub-ioctl bcninterval to cmd 0x8BE0-7>
<mapping sub-ioctl dtim to cmd 0x8BE0-8>
<mapping sub-ioctl agingtime to cmd 0x8BE0-24>
<mapping sub-ioctl intrabss to cmd 0x8BE0-17>
<mapping sub-ioctl amsdu to cmd 0x8BE0-18>
<mapping sub-ioctl guardint to cmd 0x8BE0-20>
<mapping sub-ioctl extsubch to cmd 0x8BE0-21>
<mapping sub-ioctl rxantenna to cmd 0x8BE0-10>
<mapping sub-ioctl wmm to cmd 0x8BE0-14>
<mapping sub-ioctl optlevel to cmd 0x8BE0-31>
<mapping sub-ioctl ratemode to cmd 0x8BE0-33>
<mapping sub-ioctl csmode to cmd 0x8BE0-38>
<mapping sub-ioctl regioncode to cmd 0x8BE0-3>
<mapping sub-ioctl autochannel to cmd 0x8BE0-26>
<mapping sub-ioctl filter to cmd 0x8BE0-16>
<mapping sub-ioctl htprotect to cmd 0x8BE0-22>
WLAN: MLME - Disconnecting (deauth) wireless client: ffffffffffff Reason 3
WLAN: MLME - Disconnecting (deauth) wireless client: ffffffffffff Reason 3
WLAN: MLME - Disconnecting (deauth) wireless client: ffffffffffff Reason 3
br0: port 2(ap0) entering learning state
br0: port 1(eth1) entering learning state
/usr/sbin/fw-scripts/non-firewall: 9: # ------ [ MAC Filter ] -----------------------------------#: not found
start dhcpd...
mv_gateway: starting eth0
mv_gateway: eth0 db0 port-mask=0x20, 00:17:3f:3a:8d:71 added
mv_gateway: eth0 db0 port-mask=0x30, ff:ff:ff:ff:ff:ff added
mv_gateway: eth0 db0 port-mask=0x30, 01:00:5e:00:00:01 added
mv_gateway: eth0 db0 port-mask=0x30, 01:00:5e:00:00:01 added
start httpd...
killall: upnpd: no process killed
download uses obsolete (PF_INET,SOCK_PACKET)
mv_gateway: eth0 db0 port-mask=0x30, 01:00:5e:00:00:01 added
device eth0 entered promiscuous mode
ping: sendto: Network is unreachable
Starting pid 216, console /dev/ttyS0: '/bin/sh'


BusyBox v1.00 (2007.12.17-03:08+0000) Built-in shell (ash)
Enter 'help' for a list of built-in commands.

# WLAN: MLME - Disconnecting (deauth) wireless client: ffffffffffff Reason 3
WLAN: MLME - Disconnecting (deauth) wireless client: ffffffffffff Reason 3
br0: port 2(ap0) entering forwarding state
br0: topology change detected, propagating
br0: port 1(eth1) entering forwarding state
br0: topology change detected, propagating

#
# cat /proc/cpuinfo
Processor       : ARM926EJ-Sid(wb) rev 0 (v5EJl)
BogoMIPS        : 332.59
Features        : swp half thumb fastmult

Hardware        : MV-88fxx81
Revision        : 0000
Serial          : 0000000000000000
# cat /proc/meminfo
        total:    used:    free:  shared: buffers:  cached:
Mem:  31432704 13856768 17575936        0  1396736  3039232
Swap:        0        0        0
MemTotal:        30696 kB
MemFree:         17164 kB
MemShared:           0 kB
Buffers:          1364 kB
Cached:           2968 kB
SwapCached:          0 kB
Active:           2744 kB
Inactive:         2684 kB
HighTotal:           0 kB
HighFree:            0 kB
LowTotal:        30696 kB
LowFree:         17164 kB
SwapTotal:           0 kB
SwapFree:            0 kB
# ps x
  PID  Uid     VmSize Stat Command
    1 root        452 S   init
    2 root            SW  [keventd]
    3 root            SWN [ksoftirqd_CPU0]
    4 root            SW  [kswapd]
    5 root            SW  [bdflush]
    6 root            SW  [kupdated]
    7 root            SW  [mtdblockd]
   54 root        464 S   /sbin/klogd
   61 root        472 S   /sbin/syslogd -f /tmp/syslog.conf
  163 root        428 S   /usr/sbin/udhcpd /var/udhcpd.conf
  168 root        336 S   /usr/sbin/udhcpc -i eth0 -s /etc/udhcpc.script
  176 root        292 S   /usr/sbin/ntp -z GMT+10:0:2 -h time.nist.gov
  177 root        372 S   /usr/sbin/crond
  180 root        304 S   /usr/sbin/cmd_agent
  194 root        584 S   /usr/sbin/mini_httpd -d /tmp/www -c *.cgi -t 600
  203 root        328 S   /usr/sbin/flashled internet
  205 root        408 S   /usr/sbin/ezinstall
  208 root        332 S   /usr/sbin/pb_ap
  210 root        260 S   /usr/sbin/flashled lan_led_ctrl
  211 root        352 S   /usr/sbin/wlan_led_ctrl
  212 root        356 S   /usr/sbin/wan_led_ctrl
  214 root        268 S   /usr/sbin/download
  216 root        640 S   -sh
  302 root        632 R   ps x
#

I shall keep updating this page as I find out more.

-Nick