I've been monitoring this forum thread since its start in hopes that openwrt would finally incorporate support for Realtek-based SoCs. Recently having spare 150USD in pocket and a desire to have some fun hacking hardware I went on and bought at a local computer store NETGEAR JNR3210 router which is based on a pretty powerful Realtek 8198 SoC clocked @620MHz with 128Mb RAM@181MHz and 8MB SPI FLASH. PCB has four unpopulated pins where one could solder RS-232 header. UART signalling seems to be pretty standard LVTTL 3V so one would need to use voltage level converter to be able to connect router with standard PC RS-232-C card. As for me, I used USB-2-SERIAL converter based on PL-2303 chip which uses 3V level by default.
As could be seen on the picture above main chip has some kind of a heatsink glued on it. This heatsink is not the best solution I've seen for thermal decipation but it is at least something comparing to other SOHO routers out there in the wild.
JTAG seems to be out of luck but the flash chip used is an easy one to desolder and reflash using your device of choice (I've had success in the past reflashing the same type of flash chip using Arduino as a flashing device).
WIFI chip is RTL8192CE and it has no RF shield soldered around it.
PCB seems to be OEM-manufactured by Sercomm for Netgear.
Here is boot log of the original firmware:
Booting...�
========== SPI =============
SDRAM CLOCK:181MHZ
------------------------- Force into Single IO Mode ------------------------
|No chipID Sft chipSize blkSize secSize pageSize sdCk opCk chipName |
| 0 c22017h 0h 800000h 10000h 1000h 100h 86 45 MX6405D/05E/45E|
----------------------------------------------------------------------------
Reboot Result from Watchdog Timeout!
---RealTek(RTL8198)at 2012.05.22-14:53+0800 version v1.1f [16bit](620MHz)
Enter NMRP_main
NMRP func [NMRP_init] state is [0x00] line [84]
Scanning Flash Section 0...
Scanning Flash Section 1...
Flash Sector Number : 128.
NMRP func [NMRP_init] state is [0x00] line [93]
Set GPHY Parameter OK
NMRP func [NMRP_init] state is [[0x00]] line [99]
Our ETH MAC:
9c d3 6d fb d0 96
NMRP:LISTENING
Enter NMRP_handle_LISTENING_state
### No NMRP Server found ###
Scanning Flash Section 0...
Scanning Flash Section 1...
Flash Sector Number : 128.
***************************************************
Sercomm Boot Version 1.5.0.0
***************************************************
Entering Firmware : Everything is OK.
Jump to image start=0x80500000...
decompressing kernel:
Uncompressing Linux... done, booting the kernel.
done decompressing kernel.
start address: 0x80003750
CPU revision is: 0000dc02
Determined physical RAM map:
memory: 08000000 @ 00000000 (usable)
Zone PFN ranges:
Normal 0x00000000 -> 0x00008000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
0: 0x00000000 -> 0x00008000
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32512
Kernel command line: console=ttyS0,38400 root=/dev/mtdblock1
icache: 16kB/32B, dcache: 8kB/32B, scache: 0kB/0B
NR_IRQS:48
PID hash table entries: 512 (order: 9, 2048 bytes)
console handover: boot [early0] -> real [ttyS0]
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Memory: 121728k/131072k available (2800k kernel code, 9156k reserved, 904k data, 108k init, 0k highmem)
Calibrating delay loop... 619.31 BogoMIPS (lpj=3096576)
Mount-cache hash table entries: 512
net_namespace: 524 bytes
NET: Registered protocol family 16
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
NET: Registered protocol family 1
squashfs: version 4.0 (2009/01/31) Phillip Lougher
NTFS driver 2.1.29 [Flags: R/W DEBUG].
fuse init (API version 7.11)
msgmni has been set to 238
io scheduler noop registered
io scheduler cfq registered (default)
Realtek GPIO Driver for Flash Reload Default
Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x18002000 (irq = 8) is a 16550A
Driver 'sd' needs updating - please use bus_type methods
PPP generic driver version 2.4.2
MPPE/MPPC encryption/compression module registered
NET: Registered protocol family 24
RTL8192C/RTL8188C driver version 1.4 (2010-12-22)
=====>>INSIDE rtl8192cd_init_one <<=====
PCIE reset (0)
Do MDIO_RESET
Find Port=0 Device:Vender ID=819110ec
vendor_deivce_id=819110ec
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
=====>>EXIT rtl8192cd_init_one <<=====
Probing RTL8186 10/100 NIC-kenel stack size order[2]...
chip name: 8196C, chip revid: 0
==Set GPHY Parameter OK
NOT YET
Set threshould idx 0
eth0 added. vid=9 Member port 0x1...
eth1 added. vid=8 Member port 0x10...
eth2 added. vid=9 Member port 0x2...
eth3 added. vid=9 Member port 0x4...
eth4 added. vid=9 Member port 0x8...
eth5 added. vid=9 Member port 0x0...
[peth0] added, mapping to [eth1]...
port_num 0, link 0, speed: 0
port_num 1, link 0, speed: 0
port_num 2, link 0, speed: 0
port_num 3, link 0, speed: 0
port_num 4, link 0, speed: 0
SPI INIT
------------------------- Force into Single IO Mode ------------------------
|No chipID Sft chipSize blkSize secSize pageSize sdCk opCk chipName |
| 0 c22017h 0h 800000h 10000h 1000h 100h 86 0 MX6405D/05E/45E|
----------------------------------------------------------------------------
SPI flash(MX6405D/05E/45E) was found at CS0, size 0x800000
Creating 14 MTD partitions on "flash_bank_1":
0x000000020000-0x0000007b0000 : "fs+kernel+multi-lang"
0x000000160000-0x0000006f0000 : "rootfs"
0x000000000000-0x000000020000 : "bootloader"
0x0000007e0000-0x0000007f0000 : "nvram"
0x0000007b0000-0x0000007c0000 : "POT"
0x0000007c0000-0x0000007d0000 : "traffic_meter"
0x0000007d0000-0x0000007e0000 : "DPF"
0x0000007f0000-0x000000800000 : "BRCM_NV"
0x0000006f0000-0x000000710000 : "English UI"
0x000000710000-0x000000730000 : "Chinese UI"
0x000000730000-0x000000750000 : "Russian UI"
0x000000750000-0x000000770000 : "Portuguese UI"
0x000000770000-0x000000790000 : "German UI"
0x000000790000-0x0000007b0000 : "Other UI"
usbmon: debugfs is not available
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
rtl8652-ehci rtl8652-ehci.0: RTL8652 On-Chip EHCI Host Controller
rtl8652-ehci rtl8652-ehci.0: new USB bus registered, assigned bus number 1
read synopsys=0
read synopsys2=0
rtl8652-ehci rtl8652-ehci.0: irq 10, io base 0x18021000
rtl8652-ehci rtl8652-ehci.0: USB 0.0 started, EHCI 1.00
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
rtl8652-ohci rtl8652-ohci.0: RTL8652 OHCI
rtl8652-ohci rtl8652-ohci.0: new USB bus registered, assigned bus number 2
rtl8652-ohci rtl8652-ohci.0: irq 10, io mem 0x18020000
usb usb2: configuration #1 chosen from 1 choice
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP cubic registered
NET: Registered protocol family 17
Netlink[Kernel] create socket for igmp ok.
VFS: Mounted root (squashfs filesystem) readonly on device 31:1.
Freeing unused kernel memory: 108k freed
init started: BusyBox v1.13.4 (2012-09-21 11:10:20 CST)
starting pid 708, tty '/dev/console': '/usr/etc/rcS'
led_pb_api: module license 'Sercomm' taints kernel.
Disabling lock debugging due to kernel taint
Register LED ID <70>
Register LED ID <71>
Register LED ID <18>
Register LED ID <14>
Register LED ID <15>
Register LED ID <16>
Register LED ID <17>
Register LED ID <10>
Register LED ID <11>
Register LED ID <12>
Register LED ID <13>
Register LED ID <20>
Register LED ID <30>
Register LED ID <38>
Register LED ID <45>
Register LED ID <60>
Register LED ID <75>
Register LED ID <90>
Register LED ID <91>
Register LED ID <92>
netfilter dnshj choose interested dns queries module loaded !
init common module successful
insert firewall block module success
fake source dos protect modules is inserted
netfilter PSD and TCP/UDP Echo/Chargen Attack loaded
netfilter tcp syn flood module loaded
netfilter clamp total session for one src ip module loaded
netfilter other dos module loaded
insmod finish
dev:eth1 add ret:0
dev:ppp0 add ret:-2
dev:eth1 add ret:0
dev:ppp0 add ret:-2
dev:eth1 del et:0
dev:ppp0 del et:-3
[rc debug]/usr/sbin/rc init
[SYSTEM]/sbin/ifconfig eth0 down
[SYSTEM]/sbin/ifconfig eth0 hw ether 9C:D3:6D:FB:D0:96
[SYSTEM]/sbin/ifconfig eth0 up
[SYSTEM]/bin/renice -20 2
[SYSTEM]/bin/renice -20 3
RC: wifi_init()
rules = <>, timeout = 20
ft_tool uses obsolete (PF_INET,SOCK_PACKET)
=============rc start
[rc debug]/usr/sbin/rc start
ap_name=(null) action=start
[rc.c::rc_start():605] Calling Start function of lan
rc action <lan @ start> before file_lock.
rc action <lan @ start lock = 3> after file_lock.
[SYSTEM]/bin/cp /proc/uptime /var/run/rc.lan.run
rc action < unlock = 3> after file_lock.
[SYSTEM]/sbin/vconfig rem eth0.1 >/dev/null 2>&1
[SYSTEM]/sbin/vconfig rem eth0.11 >/dev/null 2>&1
[SYSTEM]/sbidevice eth0 entered promiscuous mode
n/vconfig rem eth0.12 >/dev/null 2>&1
[SYSTEM]/sbin/vconfig rem eth0.13 >/dev/null 2>&1
[SYSTEM]/sbin/vconfig rem eth0.14 >/dev/null 2>&1
[SYSTEM]/usr/sbin/brctl addif br0 eth0
[SYSTEM]/sbin/vconfig add eth0 11
sh: /sbin/vconfig: not found
[SYSTEM]/usr/sbin/brctl addif br0 eth0.11
interface eth0.11 does not exist!
[SYSTEM]/sbin/ifconfig eth0.11 up
ifconfig: SIOCGIFFLAGS: No such device
[SYSTEM]/sbin/vconfig add eth0 12
sh: /sbin/vconfig: not found
[SYSTEM]/usr/sbin/brctl addif br0 eth0.12
interface eth0.12 does not exist!
[SYSTEM]/sbin/ifconfig eth0.12 up
ifconfig: SIOCGIFFLAGS: No such device
[SYSTEM]/sbin/vconfig add eth0 13
sh: /sbin/vconfig: not found
[SYSTEM]/usr/sbin/brctl addif br0 eth0.13
interface eth0.13 does not exist!
[SYSTEM]/sbin/ifconfig eth0.13 up
br0: port 1(eth0) entering learning state
[SYSTEM]/sbin/vconfig add eth0 14
sh: /sbin/vconfig: not found
[SYSTEM]/usr/sbin/brctl addif br0 eth0.14
interface eth0.14 does not exist!
[SYSTEM]/sbin/ifconfig eth0.14 up
ifconfig: SIOCGIFFLAGS: No such device
[SYSTEM]/usr/sbin/brctl setfd br0 1
[SYSTEM]/sbin/ifconfig br0 192.168.1.1 netmask 255.255.255.0 broadcast 192.168.1.255
[SYSTEM]/usr/sbin/brctl stp br0 off
[SYSTEM]/usr/sbin/brctl delif br0 eth2
device eth2 is not a slave of br0
[SYSTEM]/usr/sbin/ifconfig eth2 dport_num 0, link 0, speed: 0
oport_num 1, link 0, speed: 0
wport_num 2, link 0, speed: 0
nport_num 3, link 0, speed: 0
ort_num 4, link 0, speed: 0
[0m
[SYSTEM]/usr/sbin/brctl delif br0 eth3
device eth3 is not a slave of br0
[SYSTEM]/usr/sbin/ifconfig eth3 down
[SYSTEM]/usr/sbin/brctl delif br0 eth4
device eth4 is not a slave of br0
[SYSTEM]/usr/sbin/ifconfig eth4 down
[SYSTEM]/usr/sbin/brctl delif br0 eth7
device eth7 is not a slave of br0
[SYSTEM]/usr/sbin/ifconfig eth7 down
[SYSTEM]/usr/sbin/echo 0 > /proc/rtk_vlan_support
dev:eth1 add ret:0
dev:ppp0 add ret:-2
dev:eth1 add ret:0
dev:ppp0 add ret:-2
unlink running file </var/run/rc.lan.run>
[rc.c::rc_start():605] Calling Start function of printk
rc action <printk @ start> before file_lock.
rc action <printk @ start lock = 3> after file_lock.
[SYSTEM]/bin/cp /proc/uptime /var/run/rc.printk.run
rc action < unlock = 3> after file_lock.
[SYSTEM]/bin/echo 1 4 1 7 > /proc/sys/kernel/printk
unlink running file </var/run/rc.printk.run>
[rc.c::rc_start():605] Calling Start function of timezone
rc action <timezone @ start> before file_lock.
rc action <timezone @ start lock = 3> after file_lock.
[SYSTEM]/bin/cp /proc/uptime /var/run/rc.timezone.run
rc action < unlock = 3> after file_lock.
[SYSTEM]/bin/echo GMT-4 > /etc/TZ
unlink running file </var/run/rc.timezone.run>
[rc.c::rc_start():605] Calling Start function of syslogd
rc action <syslogd @ start> before file_lock.
rc action <syslogd @ start lock = 3> after file_lock.
[SYSTEM]/bin/cp /proc/uptime /var/run/rc.syslogd.run
rc action < unlock = 3> after file_lock.
[SYSTEM]/sbin/syslogd -f /etc/syslog.conf
unlink running file </var/run/rc.syslogd.run>
[rc.c::rc_start():605] Calling Start function of httpd
rc action <httpd @ start> before file_lock.
rc action <httpd @ start lock = 5> after file_lock.
[SYSTEM]/bin/cp /proc/uptime /var/run/rc.httpd.run
rc action < unlock = 5> after file_lock.
[sc_language.c::create_language_file():389] Create link files for <Russian>
[sc_language.c::create_language_file():411] Checking MTD </dev/mtdblock10> according to its id <RUS>
[sc_language.c::decompress_language():174] Try to decompress MTD </dev/mtdblock10>
rmmod: cannot unload 'ipt_REJECT': unknown symbol in module, or unknown parameter
[rc debug]/bin/rc firewall restart
ap_name=firewall action=restart
[rc.c::rc_action():702] rc_action before add firewall - restart
rc action <firewall @ restart> before file_lock.
rc action <firewall @ restart lock = 4> after file_lock.
[SYSTEM]/bin/cp /proc/uptime /var/run/rc.firewall.run
rc action < unlock = 4> after file_lock.
[rc.c::rc_action():710] rc_action after add firewall - restart
unlink running file </var/run/rc.firewall.run>
[rc.c::rc_action():702] rc_action before add firewall - restart
rc action <firewall @ restart> before file_lock.
rc action <firewall @ restart lock = 4> after file_lock.
[SYSTEM]/bin/cp /proc/uptime /var/run/rc.firewall.run
rc action < unlock = 4> after file_lock.
[rc.c::rc_action():710] rc_action after add firewall - restart
[rc.c::rc_stop():644] Calling Stop function of firewall
[SYSTEM]echo 0 > /proc/sys/net/ipv4/ip_forward
[SYSTEM]echo 1 > /proc/sys/net/ipv4/conf/br0/forwarding
[SYSTEM]echo 1 > /proc/sys/net/ipv4/conf/wlan0/forwarding
[SYSTEM]echo 1 > /proc/sys/net/ipv4/conf/wlan0-va0/forwarding
[rc.c::rc_start():605] Calling Start function of firewall
[fw_rule] /usr/sbin/iptables -t nat -F
[fw_rule] /usr/sbin/iptables -t nat -X
[fw_rule] /usr/sbin/iptables -t filter -F
[fw_rule] /usr/sbin/iptables -t filter -X
[fw_rule] /usr/sbin/iptables -t mangle -F
[fw_rule] /usr/sbin/iptables -t nat -N PRE_BASIC
[fw_rule] /usr/sbin/iptables -t nat -N DNS
[fw_rule] /usr/sbin/iptables -t nat -N PRE_PROXY
[fw_rule] /usr/sbin/iptables -t nat -N MINIUPNPD
[fw_rule] /usr/sbin/iptables -t nat -N PT
[fw_rule] /usr/sbin/iptables -t nat -N NAPT
[fw_rule] /usr/sbin/iptables -t nat -N VS
[fw_rule] /usr/sbin/iptables -t nat -N DMZ
[fw_rule] /usr/sbin/iptables -t nat -N VPN
[fw_rule] /usr/sbin/iptables -t nat -N PORT_FORWARD
[fw_rule] /usr/sbin/iptables -t filter -N DOS
[fw_rule] /usr/sbin/iptables -t filter -N SP_DOS_2
[fw_rule] /usr/sbin/iptables -t filter -N SCAN
[fw_rule] /usr/sbin/iptables -t filter -N PROXY
[fw_rule] /usr/sbin/iptables -t filter -N LOCAL_SERVICE
[fw_rule] /usr/sbin/iptables -t filter -N OUT_FILTER
[fw_rule] /usr/sbin/iptables -t filter -N HTTP
[fw_rule] /usr/sbin/iptables -t filter -N BLOCK_HTTP
[fw_rule] /usr/sbin/iptables -t filter -N IN_FILTER
[fw_rule] /usr/sbin/iptables -t filter -N MINIUPNPD
[fw_rule] /usr/sbin/iptables -t filter -N FW_BASIC
[fw_rule] /usr/sbin/iptables -t filter -N SMB
[fw_rule] /usr/sbin/iptables -t filter -N PORT_FORWARD
[fw_rule] /usr/sbin/iptables -t filter -N FTP_SHARES
[fw_rule] /usr/sbin/iptables -t filter -N HTTPS_SHARES
[fw_rule] /usr/sbin/iptables -t filter -N PT
[fw_rule] /usr/sbin/iptables -t filter -N C_NATMGR
[fw_rule] /usr/sbin/iptables -t nat -A PREROUTING -j PRE_BASIC
[fw_rule] /usr/sbin/iptables -t nat -A PREROUTING -j PRE_PROXY
[fw_rule] /usr/sbin/iptables -t nat -A PREROUTING -j PT
[fw_rule] /usr/sbin/iptables -t nat -A PREROUTING -j NAPT
[fw_rule] /usr/sbin/iptables -t nat -A PREROUTING -j VS
[fw_rule] /usr/sbin/iptables -t nat -A PREROUTING -j PORT_FORWARD
[fw_rule] /usr/sbin/iptables -t nat -A PREROUTING -j DMZ
[fw_rule] /usr/sbin/iptables -P INPUT DROP
[fw_rule] /usr/sbin/iptables -A INPUT -i lo -j ACCEPT
[fw_rule] /usr/sbin/iptables -A INPUT -i ipsec0 -j ACCEPT
[fw_rule] /usr/sbin/iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
[fw_rule] /usr/sbin/iptables -A INPUT -p tcp --syn -j DOS
[fw_rule] /usr/sbin/iptables -A INPUT -p udp -j DOS
[fw_rule] /usr/sbin/iptables -A INPUT -p icmp --icmp-type echo-request -j DOS
[fw_rule] /usr/sbin/iptables -A INPUT -j SP_DOS_2
[fw_rule] /usr/sbin/iptables -A INPUT -j PROXY
[fw_rule] /usr/sbin/iptables -A INPUT -j LOCAL_SERVICE
[fw_rule] /usr/sbin/iptables -P FORWARD DROP
[fw_rule] /usr/sbin/iptables -A FORWARD -j OUT_FILTER
[fw_rule] /usr/sbin/iptables -A FORWARD -p tcp -j HTTP
[fw_rule] /usr/sbin/iptables -A FORWARD -j FW_BASIC
[fw_rule] /usr/sbin/iptables -A FORWARD -j SP_DOS_2
[fw_rule] /usr/sbin/iptables -A FORWARD -j PORT_FORWARD
[fw_rule] /usr/sbin/iptables -A FORWARD -p tcp --syn -j DOS
[fw_rule] /usr/sbin/iptables -A FORWARD -p udp -j DOS
[fw_rule] /usr/sbin/iptables -A FORWARD -p icmp --icmp-type echo-request -j DOS
[fw_rule] /usr/sbin/iptables -A FORWARD -i eth1 -j IN_FILTER
[fw_rule] /usr/sbin/iptables -A FW_BASIC -i lo -j ACCEPT
[fw_rule] /usr/sbin/iptables -A FW_BASIC -i ipsec0 -j ACCEPT
[fw_rule] /usr/sbin/iptables -A FW_BASIC -j C_NATMGR
[fw_rule] /usr/sbin/iptables -A FW_BASIC -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
[fw_rule] /usr/sbin/iptables -A FW_BASIC -m state --state ESTABLISHED,RELATED -j ACCEPT
[fw_rule] /usr/sbin/iptables -A FW_BASIC -i br0 -p tcp ! --syn -m state --state NEW -j DROP
[fw_rule] /usr/sbin/iptables -A FW_BASIC -m mark --mark 0x2511 -j ACCEPT
[fw_rule] /usr/sbin/iptables -A FW_BASIC -m mark --mark 0x2512 -j ACCEPT
[fw_rule] /usr/sbin/iptables -A LOCAL_SERVICE -m mark --mark 0x2511 -j ACCEPT
[fw_rule] /usr/sbin/iptables -t nat -A POSTROUTING -j VPN
[fw_rule] /usr/sbin/iptables -t nat -A PREROUTING -i eth1 -j MINIUPNPD
[fw_rule] /usr/sbin/iptables -A FORWARD -i eth1 -j MINIUPNPD
[fw_rule] /usr/sbin/iptables -I INPUT -i br0 -j ACCEPT
[fw_rule] /usr/sbin/iptables -A FW_BASIC -i br0 -j PT
[fw_rule] /usr/sbin/iptables -A FW_BASIC -i br0 -j ACCEPT
[fw_rule] /usr/sbin/iptables -t mangle -A OUTPUT -j MARK --set-mark 0x9527
[SYSTEM]/usr/sbin/rc syslogd create;/usr/bin/killall -SIGUSR2 syslogd &
[rc debug]/usr/sbin/rc syslogd create
ap_name=syslogd action=create
[rc.c::rc_action():702] rc_action before add syslogd - create
rc action <syslogd @ create> before file_lock.
rc action <syslogd @ create lock = 7> after file_lock.
[SYSTEM]/bin/cp /proc/uptime /var/run/rc.syslogd.run
rc action < unlock = 7> after file_lock.
[rc.c::rc_action():710] rc_action after add syslogd - create
[rc.c::rc_create():686] Calling Create function of syslogd
unlink running file </var/run/rc.syslogd.run>
[SYSTEM]/bin/echo switch=on > /proc/net/spi_enable
[SYSTEM]/bin/echo clear > /proc/net/firewall_block
[SYSTEM]/bin/echo clear > /proc/net/clamp_total_session_for_one_src
[SYSTEM]/bin/echo clear > /proc/net/psd_udp_tcp_vanilla_port_scan
[SYSTEM]/bin/echo clear > /proc/net/echo_chargen_config
[SYSTEM]/bin/echo wan_if=eth1 > /proc/net/spi_enable
[SYSTEM]/bin/echo spi=enable > /proc/net/spi_enable
[fw_rule] /usr/sbin/iptables -A DOS -j RETURN
[fw_rule] /usr/sbin/iptables -I FORWARD -i br0 -p icmp --icmp-type port-unreachable -j DROP
[fw_rule] /usr/sbin/iptables -A SP_DOS_2 -i ! eth1 -m ct_dir ! --ct_dir from_wan -j RETURN
[fw_rule] /usr/sbin/iptables -A SP_DOS_2 -m limit --limit 3/m --limit-burst 1 -p tcp --tcp-flags ALL FIN,URG,PSH -j DLOG --log-level 19 --log-prefix "Xmas Tree Scan"
[fw_rule] /usr/sbin/iptables -A SP_DOS_2 -p tcp --tcp-flags ALL FIN,URG,PSH -j DROP
[fw_rule] /usr/sbin/iptables -A SP_DOS_2 -m limit --limit 3/m --limit-burst 1 -p tcp --tcp-flags ALL FIN -j DLOG --log-level 19 --log-prefix "FIN Scan"
[fw_rule] /usr/sbin/iptables -A SP_DOS_2 -p tcp --tcp-flags ALL FIN -j DROP
[fw_rule] /usr/sbin/iptables -A SP_DOS_2 -m limit --limit 3/m --limit-burst 1 -p tcp --tcp-flags ALL NONE -j DLOG --log-level 19 --log-prefix "NULL Scan"
[fw_rule] /usr/sbin/iptables -A SP_DOS_2 -p tcp --tcp-flags ALL NONE -j DROP
[fw_rule] /usr/sbin/iptables -A SP_DOS_2 -m limit --limit 3/m --limit-burst 1 -p tcp --tcp-flags ACK ACK -j DLOG --log-level 19 --log-prefix "ACK Scan"
[fw_rule] /usr/sbin/iptables -A SP_DOS_2 -p tcp --tcp-flags ACK ACK -j DROP
[fw_rule] /usr/sbin/iptables -A SP_DOS_2 -m limit --limit 3/m --limit-burst 1 -p tcp --tcp-flags ALL RST -j DLOG --log-level 19 --log-prefix "RST Scan"
[fw_rule] /usr/sbin/iptables -A SP_DOS_2 -p tcp --tcp-flags ALL RST -j DROP
[fw_rule] /usr/sbin/iptables -A SP_DOS_2 -m limit --limit 3/m --limit-burst 1 -p tcp --tcp-flags ALL SYN,RST -j DLOG --log-level 19 --log-prefix "SYN/RST Scan"
[fw_rule] /usr/sbin/iptables -A SP_DOS_2 -p tcp --tcp-flags ALL SYN,RST -j DROP
[fw_rule] /usr/sbin/iptables -A SP_DOS_2 -m limit --limit 3/m --limit-burst 1 -p tcp --tcp-flags SYN,FIN SYN,FIN -j DLOG --log-level 19 --log-prefix "IMAP Scan"
[fw_rule] /usr/sbin/iptables -A SP_DOS_2 -p tcp --tcp-flags SYN,FIN SYN,FIN -j DROP
[fw_rule] /usr/sbin/iptables -A SP_DOS_2 -p tcp --tcp-flags URG URG -j DLOG --log-level 19 --log-prefix "WinNuke Attack"
[fw_rule] /usr/sbin/iptables -A SP_DOS_2 -p tcp --tcp-flags URG URG -j DROP
[fw_rule] /usr/sbin/iptables -A PRE_BASIC -t nat -i eth1 -d ! (null) -j DROP
[fw_rule] /usr/sbin/iptables -t nat -A PRE_BASIC -d (null) -j CNAPT --dir in --eaddr (null)
[fw_rule] /usr/sbin/iptables -t nat -A PREROUTING -p udp -i eth1 -j CUDP --mode security --ctmark 0x2511
[fw_rule] /usr/sbin/iptables -t nat -I PRE_BASIC -i br0 -d (null) -j HAIRPIN --eaddr (null)
[fw_rule] /usr/sbin/iptables -t nat -A POSTROUTING -o br0 -s 192.168.1.1/24 -j HAIRPIN --eaddr (null)
fw_pt
[fw_rule] /usr/sbin/iptables -I FW_BASIC -m mark --mark 0x2512 -i eth1 -o br0 -m state --state NEW -j DLOG --log-level 20
[fw_rule] /usr/sbin/iptables -F PT
[fw_rule] /usr/sbin/iptables -t nat -A PT -i eth1 -j CPT --ctmark 0x2512
[fw_rule] /usr/sbin/iptables -A PORT_FORWARD -i eth1 -o br0 -m state --state NEW -j DLOG --log-level 20
[fw_rule] /usr/sbin/iptables -A OUT_FILTER -i ! br0 -j RETURN
[fw_rule] /usr/sbin/iptables -A INPUT -j FTP_SHARES
[fw_rule] /usr/sbin/iptables -D INPUT -i br0 -p tcp --dport 20:21 -j DROP
[fw_rule] /usr/sbin/iptables -I INPUT -i br0 -p tcp --dport 20:21 -j DROP
[fw_rule] /usr/sbin/iptables -t nat -D PRE_BASIC -i eth1 -p tcp --dport 21 -d (null) -j DNAT --to 192.168.1.1:20-21
[fw_rule] /usr/sbin/iptables -t nat -D PRE_BASIC -i br0 -p tcp --dport 21 -d (null) -j DNAT --to 192.168.1.1:20-21
[fw_rule] /usr/sbin/iptables -D FTP_SHARES -d 192.168.1.1 -p tcp --dport 20:21 -j ACCEPT
[fw_rule] /usr/sbin/iptables -A INPUT -j HTTPS_SHARES
[fw_rule] /usr/sbin/iptables -t nat -D PRE_BASIC -i eth1 -p tcp --dport 80 -d (null) -j DNAT --to 192.168.1.1:80
[fw_rule] /usr/sbin/iptables -t nat -D PRE_BASIC -i br0 -p tcp --dport 80 -d (null) -j DNAT --to 192.168.1.1:80
[fw_rule] /usr/sbin/iptables -D HTTPS_SHARES -d 192.168.1.1 -p tcp --dport 80 -j ACCEPT
[fw_rule] /usr/sbin/iptables -A C_NATMGR -j NATLIMIT --lan 192.168.1.1/24
[fw_rule] /usr/sbin/iptables -A LOCAL_SERVICE -d 192.168.1.1 -p tcp --dport 23 -j ACCEPT
[fw_rule] /usr/sbin/iptables -t nat -A PRE_BASIC -d 192.168.1.1 -p tcp --dport 5000 -j DNAT --to 192.168.1.1:80
[fw_rule] /usr/sbin/iptables -A LOCAL_SERVICE -p udp --sport 67 --dport 68 -j ACCEPT
[fw_rule] /usr/sbin/iptables -A BLOCK_HTTP -j REJECT --reject-with http-block
[fw_rule] /usr/sbin/iptables -A HTTP -o br0 -j RETURN
[fw_rule] /usr/sbin/iptables -A HTTP -m state --state INVALID -j DROP
[fw_rule] /usr/sbin/iptables -t nat -A POSTROUTING -o eth1 -j CNAPT --dir out --eaddr (null)
[fw_rule] /usr/sbin/iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE
[fw_rule] /usr/sbin/iptables -A INPUT -i eth1 -d 239.255.255.250 -j DROP
[fw_rule] /usr/sbin/iptables -A INPUT -d 224.0.0.0/3 -j ACCEPT
[fw_rule] /usr/sbin/iptables -I FORWARD 1 -d 224.0.0.0/3 -j ACCEPT
[fw_rule] /usr/sbin/iptables -t nat -I PREROUTING 1 -d 224.0.0.0/3 -j ACCEPT
[SYSTEM]/bin/cp /usr/etc/crontab /etc/crontab
Using intrapositioned negation (`--option ! this`) is deprecated in favor of extrapositioned (`! --option this`).
Using intrapositioned negation (`--option ! this`) is deprecated in favor of extrapositioned (`! --option this`).
iptables v1.4.6: host/network `(null)' not found
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.4.6: Unknown arg `(null)'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.4.6: Unknown arg `(null)'
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.4.6: Unknown arg `(null)'
Try `iptables -h' or 'iptables --help' for more information.
Using intrapositioned negation (`--option ! this`) is deprecated in favor of extrapositioned (`! --option this`).
iptables v1.4.6: host/network `(null)' not found
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.4.6: host/network `(null)' not found
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.4.6: host/network `(null)' not found
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.4.6: host/network `(null)' not found
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.4.6: Unknown arg `(null)'
Try `iptables -h' or 'iptables --help' for more information.
[SYSTEM]iptables -t nat -I PREROUTING -i br0 -p udp --dport 53 -m dnshj -j DNAT --to 192.168.1.1
[SYSTEM]/bin/cp /usr/etc/crontab /etc/crontab
[SYSTEM]/bin/echo GMT-4 > /etc/TZ
[SYSTEM]echo 1 > /proc/net/ipt_condition/schedule
sh: can't create /proc/net/ipt_condition/schedule: nonexistent directory
[SYSTEM]echo flush > /proc/filter_table
[SYSTEM]echo 9 > /proc/sw_nat
[SYSTEM]echo 1 > /proc/fast_nat
unlink running file </var/run/rc.firewall.run>
[SYSTEM]/usr/sbin/mini_httpd -d /www -r "NETGEAR JNR3210" -c '**.cgi' -t 300&
unlink running file </var/run/rc.httpd.run>
[rc.c::rc_start():605] Calling Start function of dhcpd
rc action <dhcpd @ start> before file_lock.
rc action <dhcpd @ start lock = 7> after file_lock.
[SYSTEM]/bin/cp /proc/uptime /var/run/rc.dhcpd.run
rc action < unlock = 7> after file_lock.
killall: udhcpd: no process killed
unlink running file </var/run/rc.dhcpd.run>
[rc.c::rc_start():605] Calling Start function of ntp
rc action <ntp @ start> before file_lock.
rc action <ntp @ start lock = 7> after file_lock.
[SYSTEM]/bin/cp /proc/uptime /var/run/rc.ntp.run
rc action < unlock = 7> after file_lock.
[SYSTEM]/usr/sbin/netgear_ntp -z GMT-4&
unlink running file </var/run/rc.ntp.run>
[rc.c::rc_start():605] Calling Start function of route
rc action <route @ start> before file_lock.
rc action <route @ start lock = 7> after file_lock.
[SYSTEM]/bin/cp /proc/uptime /var/run/rc.route.run
rc action < unlock = 7> after file_lock.
unlink running file </var/run/rc.route.run>
[rc.c::rc_start():605] Calling Start function of ripd
rc action <ripd @ start> before file_lock.
rc action <ripd @ start lock = 7> after file_lock.
[SYSTEM]/bin/cp /proc/uptime /var/run/rc.ripd.run
rc action < unlock = 7> after file_lock.
unlink running file </var/run/rc.ripd.run>
[rc.c::rc_start():605] Calling Start function of dnrd
rc action <dnrd @ start> before file_lock.
rc action <dnrd @ start lock = 7> after file_lock.
[SYSTEM]/bin/cp /proc/uptime /var/run/rc.dnrd.run
rc action < unlock = 7> after file_lock.
[SYSTEM]iptables -t nat -D PREROUTING -i br0 -p tcp --dport 80 -j DNAT --to 192.168.1.1:80
iptables: No chain/target/match by that name.
[SYSTEM]iptables -t nat -D PREROUTING -i br0 -p udp --dport 53 -m dnshj -j DNAT --to 192.168.1.1
[SYSTEM]iptables -t nat -D PREROUTING -i br0 -p udp --dport 53 -j DNAT --to 192.168.1.1
iptables: No chain/target/match by that name.
[SYSTEM]killall -9 dnrd
killall: dnrd: no process killed
[SYSTEM]iptables -t nat -D PREROUTING -i br0 -p udp --dport 53 -j DNAT --to 192.168.1.1
iptables: No chain/target/match by that name.
[SYSTEM]iptables -t nat -I PREROUTING -i br0 -p udp --dport 53 -j DNAT --to 192.168.1.1
[SYSTEM]iptables -t nat -I PREROUTING -i br0 -p tcp --dport 80 -j DNAT --to 192.168.1.1:80
[SYSTEM]dnrd -a 192.168.1.1 -m hosts -c off -g routerlogin.com &
unlink running file </var/run/rc.dnrd.run>
[rc.c::rc_start():605] Calling Start function of potcounter
rc action <potcounter @ start> before file_lock.
rc action <potcounter @ start lock = 7> after file_lock.
[SYSTEM]/bin/cp /proc/uptime /var/run/rc.potcounter.run
rc action < unlock = 7> after file_lock.
Notice: caching turned off
Warning: Using /etc/hosts will be removed in a future version. Please use only the /etc/dnrd/master file or use -m off.
unlink running file </var/run/rc.potcounter.run>
[rc.c::rc_start():605] Calling Start function of lltd
rc action <lltd @ start> before file_lock.
rc action <lltd @ start lock = 7> after file_lock.
[SYSTEM]/bin/cp /proc/uptime /var/run/rc.lltd.run
rc action < unlock = 7> after file_lock.
unlink running file </var/run/rc.lltd.run>
[rc.c::rc_start():605] Calling Start function of wlan
rc action <wlan @ start> before file_lock.
rc action <wlan @ start lock = 7> after file_lock.
[SYSTEM]/bin/cp /proc/uptime /var/run/rc.wlan.run
rc action < unlock = 7> after file_lock.
[SYSTEM]/bin/echo 0 > /proc/sw_nat
sh: /sbin/wl: not found
RC: insert wl.ko...
[SYSTEM]/bin/flash set_mib wlan0
enter flash, argc = 3
argv[0] = /bin/flash
argv[1] = set_mib
argv[2] = wlan0
wlan_idx=0, vwlan_idx=0
enter initWlan
sh: wlanapp.sh: not found
find [MIB_HW_RF_TYPE]=10
initWlan wlan_idx = 0, vlwan_idx=0, disable=0
find unconfirmed para [MIB_HW_REG_DOMAIN]=3
find [MIB_WLAN_WLAN_MAC_ADDR]=-1663865349
find [MIB_OP_MODE]=0
find [MIB_WISP_WAN_ID]=0
find unconfirmed para [MIB_HW_LED_TYPE]=7
find [MIB_WLAN_SSID]=NETGEAR89
find [MIB_WLAN_MODE]=0
find [MIB_HW_RF_TYPE]=10
find [MIB_HW_BOARD_VER]=1
find unconfirmed para [MIB_HW_TX_POWER_CCK_A]=0
find unconfirmed para [MIB_HW_TX_POWER_CCK_B]=0
find unconfirmed para [MIB_HW_TX_POWER_HT40_1S_A]=0
find unconfirmed para [MIB_HW_TX_POWER_HT40_1S_B]=0
find unconfirmed para [MIB_HW_TX_POWER_DIFF_HT40_2S]=0
find unconfirmed para [MIB_HW_TX_POWER_DIFF_HT20]=0
find unconfirmed para [MIB_HW_TX_POWER_DIFF_OFDM]=0
find unconfirmed para [MIB_HW_11N_TSSI1]=0
find unconfirmed para [MIB_HW_11N_TSSI2]=0
find unconfirmed para [MIB_HW_11N_THER]=15
find unconfirmed para [MIB_HW_11N_TRSWITCH]=1
find unconfirmed para [MIB_WLAN_RFPOWER_SCALE]=0
find [MIB_WLAN_BEACON_INTERVAL]=100
find [MIB_WLAN_CHANNEL]=0
find [MIB_WLAN_RTS_THRESHOLD]=2347
find [MIB_WLAN_FRAG_THRESHOLD]=2346
find [MIB_WLAN_INACTIVITY_TIME]=30000
find [MIB_WLAN_PREAMBLE_TYPE]=0
find unconfirmed para [MIB_WLAN_DTIM_PERIOD]=2
find unconfirmed para [MIB_WLAN_STBC_ENABLED]=0
find [MIB_WLAN_IAPP_DISABLED]=1
find unconfirmed para [MIB_WLAN_COEXIST_ENABLED]=0
find unconfirmed para [MIB_WLAN_PROTECTION_DISABLED]=0
find [MIB_WLAN_BLOCK_RELAY]=0
find unconfirmed para [MIB_WIFI_SPECIFIC]=2
find [MIB_WLAN_WDS_ENABLED]=0
find [MIB_WLAN_WDS_NUM]=1
find [MIB_WLAN_IAPP_DISABLED]=1
find [MIB_WLAN_MACAC_ENABLED]=0
find unconfirmed para [MIB_WLAN_MACCLONE_ENABLED]=0
find [MIB_OP_MODE]=0
find [MIB_WLAN_CHANNEL_BONDING]=1
find [MIB_WLAN_CONTROL_SIDEBAND]=1
find unconfirmed para [MIB_WLAN_SHORT_GI]=1
find unconfirmed para [MIB_WLAN_AGGREGATION]=1
find [MIB_WLAN_BLOCK_RELAY]=0
find unconfirmed para [MIB_WLAN_BASIC_RATES]=0
find unconfirmed para [MIB_WLAN_SUPPORTED_RATES]=0
find [MIB_WLAN_RATE_ADAPTIVE_ENABLED]=1
find [MIB_WLAN_HIDDEN_SSID]=0
find [MIB_WLAN_BAND]=11
find unconfirmed para [MIB_WLAN_ACCESS]=0
find [MIB_WLAN_WMM_ENABLED]=1
find [MIB_WLAN_AUTH_TYPE]=2
find [MIB_WLAN_ENCRYPT]=4
find [MIB_WLAN_WPA_AUTH]=2
find [MIB_WLAN_WPA_PSK]=fearlesstable856
find [MIB_WLAN_WPA_GROUP_REKEY_TIME]=3600
find [MIB_WLAN_WPA2_CIPHER_SUITE]=2
end initWlan
[SYSTEM]/bin/flash-gw set_hw wlan0
find country [Europe], channel[1~13]
[SYSTEM]/usr/sbin/iwpriv wlan0 set_mib ch_low=1
[SYSTEM]/usr/sbin/iwpriv wlan0 set_mib ch_hi=13
[SYSTEM]/bin/flash set_mib wlan0-va0
enter flash, argc = 3
argv[0] = /bin/flash
argv[1] = set_mib
argv[2] = wlan0-va0
wlan_idx=0, vwlan_idx=1
enter initWlan
initWlan wlan_idx = 0, vlwan_idx=1, disable=1
[SYSTEM]/bin/flash set_mib wlan0-va1
enter flash, argc = 3
argv[0] = /bin/flash
argv[1] = set_mib
argv[2] = wlan0-va1
wlan_idx=0, vwlan_idx=2
enter initWlan
initWlan wlan_idx = 0, vlwan_idx=2, disable=1
[SYSTEM]/bin/flash set_mib wlan0-va2
enter flash, argc = 3
argv[0] = /bin/flash
argv[1] = set_mib
argv[2] = wlan0-va2
wlan_idx=0, vwlan_idx=3
enter initWlan
initWlan wlan_idx = 0, vlwan_idx=3, disable=1
[SYSTEM]/bin/flash set_mib wlan0-va3
enter flash, argc = 3
argv[0] = /bin/flash
argv[1] = set_mib
argv[2] = wlan0-va3
wlan_idx=0, vwlan_idx=4
enter initWlan
initWlan wlan_idx = 0, vlwan_idx=4, disable=1
========idx=0
[SYSTEM]/bin/echo wlan disable[wlan0] = 0 > /dev/console
wlan disable[wlan0] = 0
[SYSTEM]/bin/echo 1 > /proc/br_shutcut_support
****************** start wlanapp ifname = br0 wlan0 *************************
open /proc/gpio: No such file or directory
Init Wlan application...
find [MIB_WLAN_MODE]=0
find [MIB_WLAN_IAPP_DISABLED]=1
find [MIB_WLAN_WSC_DISABLE]=0
find [MIB_WLAN_ENABLE_1X]=0
find [MIB_WLAN_ENCRYPT]=4
find [MIB_WLAN_NETWORK_TYPE]=0
find [MIB_WLAN_WPA_AUTH]=2
find [MIB_WLAN_WSC_UPNP_ENABLED]=1
find [MIB_WLAN_MODE]=0
find [MIB_WLAN_WDS_ENABLED]=0
find [MIB_WLAN_WDS_NUM]=1
find [MIB_WLAN_ENCRYPT]=4
find [MIB_WLAN_WPA_AUTH]=2
enter flash, argc = 4
argv[0] = flash
argv[1] = wpa
argv[2] = wlan0
argv[3] = /var/wpa-wlan0.conf
find [MIB_WLAN_ENCRYPT]=4
find [MIB_WLAN_SSID]=NETGEAR89
find [MIB_WLAN_ENABLE_1X]=0
find unconfirmed para [MIB_WLAN_ENABLE_SUPP_NONWPA]=0
find [MIB_WLAN_WEP]=0
find [MIB_WLAN_WPA_AUTH]=2
find [MIB_WLAN_WPA_CIPHER_SUITE]=1
find [MIB_WLAN_WPA2_CIPHER_SUITE]=2
find [MIB_WLAN_WPA2_PRE_AUTH]=0
find [MIB_WLAN_PSK_FORMAT]=0
find [MIB_WLAN_WPA_PSK]=fearlesstable856
find [MIB_WLAN_WPA_GROUP_REKEY_TIME]=3600
find [MIB_WLAN_RS_PORT]=1812
find [MIB_WLAN_RS_IP]=0
find [MIB_WLAN_RS_PASSWORD]=
find [MIB_WLAN_RS_MAXRETRY]=3
find [MIB_WLAN_RS_INTERVAL_TIME]=5
find undefined para [MIB_WLAN_ACCOUNT_RS_ENABLED]=5
find undefined para [MIB_WLAN_ACCOUNT_RS_PORT]=5
find undefined para [MIB_WLAN_ACCOUNT_RS_IP]=0
find undefined para [MIB_WLAN_ACCOUNT_RS_PASSWORD]=0
find undefined para [MIB_WLAN_ACCOUNT_RS_UPDATE_ENABLED]=5
find undefined para [MIB_WLAN_ACCOUNT_RS_UPDATE_DELAY]=5
find undefined para [MIB_WLAN_ACCOUNT_RS_MAXRETRY]=5
find undefined para [MIB_WLAN_ACCOUNT_RS_INTERVAL_TIME]=5
find [MIB_WLAN_IAPP_DISABLED]=1
find [MIB_WLAN_WSC_DISABLE]=0
find undefined para [MIB_REPEATER_ENABLED1]=0
find [MIB_WLAN_WSC_CONFIGURED]=1
enter flash, argc = 5
argv[0] = flash
argv[1] = upd-wsc-conf
argv[2] = /etc/wscd.conf
argv[3] = /var/wsc-wlan0.conf
argv[4] = wlan0
find [MIB_HW_WSC_PIN]=36532964
find [MIB_WLAN_WSC_REGISTRAR_ENABLED]=1
find [MIB_WLAN_WSC_UPNP_ENABLED]=1
find [MIB_WLAN_WSC_METHOD]=3
find [MIB_WLAN_NETWORK_TYPE]=0
find [MIB_WLAN_WSC_MANUAL_ENABLED]=0
find [MIB_WLAN_CHANNEL]=0
find [MIB_DEVICE_NAME]=JNR3210
find [MIB_DEVICE_NAME]=JNR3210
find [MIB_WLAN_WSC_AUTH]=32
find [MIB_WLAN_WSC_ENC]=8
find [MIB_WLAN_WSC_CONFIGURED]=1
find unconfirmed para [MIB_WLAN_WSC_CONFIGBYEXTREG]=0
find [MIB_WLAN_SSID]=NETGEAR89
find [MIB_WLAN_MODE]=0
find [MIB_WLAN_ENCRYPT]=4
find [MIB_WLAN_WEP]=0
find unconfirmed para [MIB_WLAN_WEP_KEY_TYPE]=1
find [MIB_WLAN_WEP_DEFAULT_KEY]=0
find [MIB_WLAN_WEP64_KEY1]=
find [MIB_WLAN_WEP64_KEY2]=
find [MIB_WLAN_WEP64_KEY3]=
find [MIB_WLAN_WEP64_KEY4]=
find [MIB_WLAN_WEP128_KEY1]=0
find [MIB_WLAN_WEP128_KEY2]=0
find [MIB_WLAN_WEP128_KEY3]=0
find [MIB_WLAN_WEP128_KEY4]=0
find [MIB_WLAN_WPA_PSK]=fearlesstable856
find [MIB_HW_NIC0_ADDR]=-1663865349
WiFi Simple Config v1.17 (2012.09.21-03:00+0000).
Register to wlan0
find [MIB_WLAN_ENCRYPT]=4
iwcontrol RegisterPID to (wlan0)
find [MIB_WLAN_WDS_ENABLED]=0
find [MIB_WLAN_WDS_NUM]=1
find [MIB_WLAN_MODE]=0
unlink running file </var/run/rc.wlan.run>
[rc.c::rc_start():605] Calling Start function of usb_init
rc action <usb_init @ start> before file_lock.
rc action <usb_init @ start lock = 8> after file_lock.
[SYSTEM]/bin/cp /proc/uptime /var/run/rc.usb_init.run
rc action < unlock = 8> after file_lock.
[SYSTEM]/bin/rm /etc/samba/secrets.tdb
rm: cannot remove '/etc/samba/secrets.tdb': No such file or directory
[SYSTEM]/usr/bin/killall -9 smbd >/dev/null 2>&1
[SYSTEM]/usr/bin/killall -9 nmbd >/dev/null 2>&1
[SYSTEM]/usr/bin/killall -9 bftpd >/dev/null 2>&1
[SYSTEM]/usr/bin/killall -SIGTREM download_manage >/dev/null 2>&1
[SYSTEM]/usr/bin/killall download_manage >/dev/null 2>&1
[SYSTEM]/sbin/echo 128 > /proc/sys/vm/min_free_kbytes&
[SYSTEM]/bin/rm -rf /var/tmp/*.status &
[SYSTEM]/usr/bin/killall -9 bftpd >/dev/null 2>&1
unlink running file </var/run/rc.usb_init.run>
[rc.c::rc_start():605] Calling Start function of debug_mode
rc action <debug_mode @ start> before file_lock.
rc action <debug_mode @ start lock = 8> after file_lock.
[SYSTEM]/bin/cp /proc/uptime /var/run/rc.debug_mode.run
rc action < unlock = 8> after file_lock.
unlink running file </var/run/rc.debug_mode.run>
[rc.c::rc_start():605] Calling Start function of wifi_isolation
rc action <wifi_isolation @ start> before file_lock.
rc action <wifi_isolation @ start lock = 9> after file_lock.
[SYSTEM]/bin/cp /proc/uptime /var/run/rc.wifi_isolation.run
rc action < unlock = 9> after file_lock.
[SYSTEM]/bin/echo "lan_ip=192.168.1.1" > /proc/wifi_isolation
sh: can't create /proc/wifi_isolation: nonexistent directory
[SYSTEM]/bin/echo "lan_netmask=255.255.255.0" > /proc/wifi_isolation
sh: can't create /proc/wifi_isolation: nonexistent directory
unlink running file </var/run/rc.wifi_isolation.run>
=============rc finish
PID USER VSZ STAT COMMAND
1 root 1732 S init
2 root 0 SW< [kthreadd]
3 root 0 SW< [ksoftirqd/0]
4 root 0 SW< [events/0]
5 root 0 SW< [khelper]
8 root 0 SW< [async/mgr]
66 root 0 SW< [kblockd/0]
75 root 0 SW< [khubd]
92 root 0 SW [pdflush]
93 root 0 SW< [kswapd0]
644 root 0 SW< [mtdblockd]
708 root 1740 S /bin/sh /usr/etc/rcS
791 root 1112 S /sbin/klogd
793 root 1076 S /usr/sbin/cmd_agent_ap
812 root 1624 S /usr/sbin/scfgmgr
814 root 1352 S /usr/sbin/ft_tool
928 root 1172 S /sbin/syslogd -f /etc/syslog.conf
1323 root 1444 S /usr/sbin/mini_httpd -d /www -r NETGEAR JNR3210 -c **
1329 root 1148 S /usr/sbin/udhcpd /etc/udhcpd.conf
1756 root 1084 S /usr/sbin/potcounter
1757 root 1900 S dnrd -a 192.168.1.1 -m hosts -c off -g routerlogin.co
1763 root 1488 S /usr/bin/lld2 br0
1891 root 1372 S wscd -start -c /var/wsc-wlan0.conf -w wlan0 -fi /var/
1893 root 1904 S /usr/sbin/wps_det do_addER_reset
1897 root 1120 S iwcontrol wlan0
1940 root 1096 S telnetenabled 192.168.1.1 9CD36DFBD096 Gearguy Geardo
1946 root 1736 R /bin/ps
[rc debug]/usr/sbin/rc upnp start
ap_name=upnp action=start
[rc.c::rc_action():702] rc_action before add upnp - start
rc action <upnp @ start> before file_lock.
rc action <upnp @ start lock = 3> after file_lock.
[SYSTEM]/bin/cp /proc/uptime /var/run/rc.upnp.run
rc action < unlock = 3> after file_lock.
[rc.c::rc_action():710] rc_action after add upnp - start
unlink running file </var/run/rc.upnp.run>
[rc.c::rc_action():702] rc_action before add upnp - start
rc action <upnp @ start> before file_lock.
rc action <upnp @ start lock = 3> after file_lock.
[SYSTEM]/bin/cp /proc/uptime /var/run/rc.upnp.run
rc action < unlock = 3> after file_lock.
[rc.c::rc_action():710] rc_action after add upnp - start
unlink running file </var/run/rc.upnp.run>
can't find this application
[rc.c::rc_action():702] rc_action before add upnp - start
rc action <upnp @ start> before file_lock.
rc action <upnp @ start lock = 3> after file_lock.
[SYSTEM]/bin/cp /proc/uptime /var/run/rc.upnp.run
rc action < unlock = 3> after file_lock.
[rc.c::rc_action():710] rc_action after add upnp - start
[rc.c::rc_start():605] Calling Start function of upnp
[SYSTEM]route add -net 239.0.0.0 netmask 255.0.0.0 br0
[SYSTEM]/usr/sbin/miniupnpd -i eth1 -a 192.168.1.1 -p 56688 -U -t 1800 -T 4 -u 824ff22b-8c7d-41c5-a131-9cd36dfbd096
unlink running file </var/run/rc.upnp.run>
route: SIOCADDRT: File exists
[rc debug]usr/sbin/rc wan start
[SYSTEM]/bin/echo 0 > /proc/fast_pptp
[SYSTEM]/bin/echo 0 > /proc/fast_l2tp
[SYSTEM]echo 2 > /proc/fast_nat
[SYSTEM]/usr/sbin/brctl delif br0 eth1
device eth1 is not a slave of br0
[SYSTEM]/usr/bin/killall netgear_ntp
killall: netgear_ntp: no process killed
[SYSTEM]/usr/bin/killall -SIGUSR2 miniupnpd
killall: ripd: no process killed
killall: zebra: no process killed
killall: ripd: no process killed
killall: zebra: no process killed
[SYSTEM]/bin/echo 0 > /proc/sys/net/ipv4/conf/br0/forwarding
[SYSTEM]/usr/sbin/iptables -t nat -F POSTROUTING
[SYSTEM]/usr/sbin/iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE
[SYSTEM]/bin/echo 1 > /proc/sys/net/ipv4/conf/br0/forwarding
[SYSTEM]/sbin/rc firewall stop
[rc debug]/sbin/rc firewall stop
ap_name=firewall action=stop
[rc.c::rc_action():702] rc_action before add firewall - stop
rc action <firewall @ stop> before file_lock.
rc action <firewall @ stop lock = 3> after file_lock.
[SYSTEM]/bin/cp /proc/uptime /var/run/rc.firewall.run
rc action < unlock = 3> after file_lock.
[rc.c::rc_action():710] rc_action after add firewall - stop
unlink running file </var/run/rc.firewall.run>
[rc.c::rc_action():702] rc_action before add firewall - stop
rc action <firewall @ stop> before file_lock.
rc action <firewall @ stop lock = 3> after file_lock.
[SYSTEM]/bin/cp /proc/uptime /var/run/rc.firewall.run
rc action < unlock = 3> after file_lock.
[rc.c::rc_action():710] rc_action after add firewall - stop
[rc.c::rc_stop():644] Calling Stop function of firewall
[SYSTEM]echo 0 > /proc/sys/net/ipv4/ip_forward
[SYSTEM]echo 1 > /proc/sys/net/ipv4/conf/br0/forwarding
[SYSTEM]echo 1 > /proc/sys/net/ipv4/conf/wlan0/forwarding
[SYSTEM]echo 1 > /proc/sys/net/ipv4/conf/wlan0-va0/forwarding
unlink running file </var/run/rc.firewall.run>
[SYSTEM]/usr/sbin/iptables -D PRE_BASIC -t nat -i eth1 -d ! (null) -j DROP
sh: syntax error: "(" unexpected
[SYSTEM]/bin/echo "#!/bin/sh" > /etc/ppp/ip-down
[SYSTEM]/usr/bin/killall pptp
killall: pptp: no process killed
[SYSTEM]/usr/bin/killall l2tpd
killall: l2tpd: no process killed
[SYSTEM]/usr/sbin/rm -rf /tmp/l2tp
[SYSTEM]/usr/bin/killall pppd
killall: pppd: no process killed
[SYSTEM]/usr/bin/killall udhcpc
killall: udhcpc: no process killed
[SYSTEM]/usr/bin/killall pppoe-relay
killall: pppoe-relay: no process killed
[SYSTEM]/sbin/ifconfig eth1 0.0.0.0 >/dev/null 2>&1
[SYSTEM]/sbin/ifconfig eth1 down
[SYSTEM]/sbin/ifconfig eth1 hw ether 9C:D3:6D:fb:d0:97
[SYSTEM]/sbin/ifconfig eth1 up
[SYSTEM]/sbin/ifconfig eth1 mtu 1500
[wan/wan.c::start_wan():1178] wan_mode is <dhcpc>
[SYSTEM]/usr/sbin/udhcpc -i eth1 -s /etc/udhcpc.script -H "JNR3210" &
cable_down_once
rm: cannot remove '/tmp/wan_uptime': No such file or directory
rm: cannot remove '/tmp/wan_ipaddr': No such file or directory
rm: cannot remove '/tmp/dhcpc.lease': No such file or directory
deleting dhcpc options releated routers
/bin/sh: can't open /tmp/dhcpc_route_related_options_del
[rc debug]/usr/sbin/rc route restart
ap_name=route action=restart
[rc.c::rc_action():702] rc_action before add route - restart
rc action <route @ restart> before file_lock.
rc action <route @ restart lock = 4> after file_lock.
[SYSTEM]/bin/cp /proc/uptime /var/run/rc.route.run
rc action < unlock = 4> after file_lock.
[rc.c::rc_action():710] rc_action after add route - restart
[rc.c::rc_stop():644] Calling Stop function of route
[rc.c::rc_start():605] Calling Start function of route
unlink running file </var/run/rc.route.run>
PID USER VSZ STAT COMMAND
1 root 1732 S init
2 root 0 SW< [kthreadd]
3 root 0 SW< [ksoftirqd/0]
4 root 0 SW< [events/0]
5 root 0 SW< [khelper]
8 root 0 SW< [async/mgr]
66 root 0 SW< [kblockd/0]
75 root 0 SW< [khubd]
92 root 0 SW [pdflush]
93 root 0 SW< [kswapd0]
644 root 0 SW< [mtdblockd]
708 root 1740 R /bin/sh /usr/etc/rcS
791 root 1112 S /sbin/klogd
793 root 1076 S /usr/sbin/cmd_agent_ap
812 root 1624 S /usr/sbin/scfgmgr
814 root 1352 S /usr/sbin/ft_tool
928 root 1172 S /sbin/syslogd -f /etc/syslog.conf
1323 root 1444 S /usr/sbin/mini_httpd -d /www -r NETGEAR JNR3210 -c **
1329 root 1148 S /usr/sbin/udhcpd /etc/udhcpd.conf
1756 root 1084 S /usr/sbin/potcounter
1757 root 1900 S dnrd -a 192.168.1.1 -m hosts -c off -g routerlogin.co
1763 root 1488 S /usr/bin/lld2 br0
1891 root 1372 S wscd -start -c /var/wsc-wlan0.conf -w wlan0 -fi /var/
1893 root 1904 S /usr/sbin/wps_det do_addER_reset
1897 root 1120 S iwcontrol wlan0
1940 root 1096 S telnetenabled 192.168.1.1 9CD36DFBD096 Gearguy Geardo
1959 root 2272 S /usr/sbin/miniupnpd -i eth1 -a 192.168.1.1 -p 56688 -
1960 root 1100 S /usr/sbin/crond
1961 root 1372 S /usr/sbin/multi_pb_app 90 91 92 10 50
1963 root 0 Z [crond]
1964 root 0 Z [crond]
1970 root 1080 S /usr/sbin/cmd_agent
2204 root 1120 S /usr/sbin/udhcpc -i eth1 -s /etc/udhcpc.script -H JNR
2220 root 1624 S usr/sbin/wan_monitor
2250 root 0 SW [ telnetDBGD ]
2251 root 0 SW [ acktelnetDBGD ]
2252 root 0 SW [checkSBusTimeou]
2255 root 0 SW [NU UDP]
2256 root 0 SW [NU TCP]
2257 root 1736 R /bin/ps
# Dmesg contents immediately after the bootup:
# dmesg
Linux version 2.6.30.9 (root@BuildServer) (gcc version 3.4.6-1.3.6) #1 Fri Sep 21 10:59:20 CST 2012
console [early0] enabled
CPU revision is: 0000dc02
Determined physical RAM map:
memory: 08000000 @ 00000000 (usable)
Zone PFN ranges:
Normal 0x00000000 -> 0x00008000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
0: 0x00000000 -> 0x00008000
On node 0 totalpages: 32768
free_area_init_node: node 0, pgdat 8039d980, node_mem_map 81000000
Normal zone: 256 pages used for memmap
Normal zone: 0 pages reserved
Normal zone: 32512 pages, LIFO batch:7
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32512
Kernel command line: console=ttyS0,38400 root=/dev/mtdblock1
icache: 16kB/32B, dcache: 8kB/32B, scache: 0kB/0B
NR_IRQS:48
PID hash table entries: 512 (order: 9, 2048 bytes)
console handover: boot [early0] -> real [ttyS0]
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Memory: 121728k/131072k available (2800k kernel code, 9156k reserved, 904k data, 108k init, 0k highmem)
Calibrating delay loop... 619.31 BogoMIPS (lpj=3096576)
Mount-cache hash table entries: 512
net_namespace: 524 bytes
NET: Registered protocol family 16
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
NET: Registered protocol family 1
squashfs: version 4.0 (2009/01/31) Phillip Lougher
NTFS driver 2.1.29 [Flags: R/W DEBUG].
fuse init (API version 7.11)
msgmni has been set to 238
io scheduler noop registered
io scheduler cfq registered (default)
Realtek GPIO Driver for Flash Reload Default
Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x18002000 (irq = 8) is a 16550A
Driver 'sd' needs updating - please use bus_type methods
PPP generic driver version 2.4.2
MPPE/MPPC encryption/compression module registered
NET: Registered protocol family 24
RTL8192C/RTL8188C driver version 1.4 (2010-12-22)
=====>>INSIDE rtl8192cd_init_one <<=====
PCIE reset (0)
Do MDIO_RESET
Find Port=0 Device:Vender ID=819110ec
vendor_deivce_id=819110ec
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
=====>>EXIT rtl8192cd_init_one <<=====
=====>>INSIDE rtl8192cd_init_one <<=====
=====>>EXIT rtl8192cd_init_one <<=====
Probing RTL8186 10/100 NIC-kenel stack size order[2]...
chip name: 8196C, chip revid: 0
==Set GPHY Parameter OK
NOT YET
Set threshould idx 0
eth0 added. vid=9 Member port 0x1...
eth1 added. vid=8 Member port 0x10...
eth2 added. vid=9 Member port 0x2...
eth3 added. vid=9 Member port 0x4...
eth4 added. vid=9 Member port 0x8...
eth5 added. vid=9 Member port 0x0...
[peth0] added, mapping to [eth1]...
port_num 0, link 0, speed: 0
port_num 1, link 0, speed: 0
port_num 2, link 0, speed: 0
port_num 3, link 0, speed: 0
port_num 4, link 0, speed: 0
SPI INIT
------------------------- Force into Single IO Mode ------------------------
|No chipID Sft chipSize blkSize secSize pageSize sdCk opCk chipName |
| 0 c22017h 0h 800000h 10000h 1000h 100h 86 0 MX6405D/05E/45E|
----------------------------------------------------------------------------
SPI flash(MX6405D/05E/45E) was found at CS0, size 0x800000
Creating 14 MTD partitions on "flash_bank_1":
0x000000020000-0x0000007b0000 : "fs+kernel+multi-lang"
0x000000160000-0x0000006f0000 : "rootfs"
0x000000000000-0x000000020000 : "bootloader"
0x0000007e0000-0x0000007f0000 : "nvram"
0x0000007b0000-0x0000007c0000 : "POT"
0x0000007c0000-0x0000007d0000 : "traffic_meter"
0x0000007d0000-0x0000007e0000 : "DPF"
0x0000007f0000-0x000000800000 : "BRCM_NV"
0x0000006f0000-0x000000710000 : "English UI"
0x000000710000-0x000000730000 : "Chinese UI"
0x000000730000-0x000000750000 : "Russian UI"
0x000000750000-0x000000770000 : "Portuguese UI"
0x000000770000-0x000000790000 : "German UI"
0x000000790000-0x0000007b0000 : "Other UI"
usbmon: debugfs is not available
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
rtl8652-ehci rtl8652-ehci.0: RTL8652 On-Chip EHCI Host Controller
rtl8652-ehci rtl8652-ehci.0: new USB bus registered, assigned bus number 1
read synopsys=0
read synopsys2=0
rtl8652-ehci rtl8652-ehci.0: irq 10, io base 0x18021000
rtl8652-ehci rtl8652-ehci.0: USB 0.0 started, EHCI 1.00
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
rtl8652-ohci rtl8652-ohci.0: RTL8652 OHCI
rtl8652-ohci rtl8652-ohci.0: new USB bus registered, assigned bus number 2
rtl8652-ohci rtl8652-ohci.0: irq 10, io mem 0x18020000
usb usb2: configuration #1 chosen from 1 choice
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP cubic registered
NET: Registered protocol family 17
Netlink[Kernel] create socket for igmp ok.
VFS: Mounted root (squashfs filesystem) readonly on device 31:1.
Freeing unused kernel memory: 108k freed
led_pb_api: module license 'Sercomm' taints kernel.
Disabling lock debugging due to kernel taint
Register LED ID <70>
Register LED ID <71>
Register LED ID <18>
Register LED ID <14>
Register LED ID <15>
Register LED ID <16>
Register LED ID <17>
Register LED ID <10>
Register LED ID <11>
Register LED ID <12>
Register LED ID <13>
Register LED ID <20>
Register LED ID <30>
Register LED ID <38>
Register LED ID <45>
Register LED ID <60>
Register LED ID <75>
Register LED ID <90>
Register LED ID <91>
Register LED ID <92>
netfilter dnshj choose interested dns queries module loaded !
init common module successful
insert firewall block module success
fake source dos protect modules is inserted
netfilter PSD and TCP/UDP Echo/Chargen Attack loaded
netfilter tcp syn flood module loaded
netfilter clamp total session for one src ip module loaded
netfilter other dos module loaded
dev:eth1 add ret:0
dev:ppp0 add ret:-2
dev:eth1 add ret:0
dev:ppp0 add ret:-2
dev:eth1 del et:0
dev:ppp0 del et:-3
ft_tool uses obsolete (PF_INET,SOCK_PACKET)
device eth0 entered promiscuous mode
br0: port 1(eth0) entering learning state
port_num 0, link 0, speed: 0
port_num 1, link 0, speed: 0
port_num 2, link 0, speed: 0
port_num 3, link 0, speed: 0
port_num 4, link 0, speed: 0
dev:eth1 add ret:0
dev:ppp0 add ret:-2
dev:eth1 add ret:0
dev:ppp0 add ret:-2
br0: port 1(eth0) entering forwarding state
block items:
input:clear
clamp total entry used:0
total count:0
input str:clear
psd clear oldest entry
proc_write_echo_chargen receive: len: 6, input: clear
proc_write_echo_chargen receive: clear list
Leaving proc_write_echo_chargen : size: 6
wan interface=[eth1], index=18
br interface=[br0], index=24
device wlan0 entered promiscuous mode
[PHY_ConfigMACWithParaFile][MACPHY_REG_92C]
[PHY_ConfigBBWithParaFile][PHY_REG_PG]
===> Load_92C_Firmware
= Load_92C_Firmware
8192c firmware not ready
8192c firmware not ready
8192c firmware not ready
8192c firmware not ready
br0: port 2(wlan0) entering learning state
Can't find DB for id==61
Can't find DB for id==62
Can't find DB for id==63
Can't find DB for id==64
Can't find DB for id==65
Can't find DB for id==66
Can't find DB for id==67
Can't find DB for id==68
br0: port 2(wlan0) entering forwarding state
Can't find DB for id==74
GPL NetUSB up!
kc 88 : run_telnetDBGDServer start
kc 225 : init_DebugD end
INFO1714: NetUSB 1.173, 0002061E : Apr 12 2012 01:10:41
INFO1716: AUTH ISOC
INFO1717: MOVE_HEAD emb_audio isocSubBackisocGenNosoundPkt
INFO027E: embedded_init_soundcore
INFO0FC4: embedded_usb_audio_init
INFO0FE2: 0 : tunnelID AirPlay
INFO0A68: --- checkSBusTimeoutThread start ---
usbcore: registered new interface driver KC NetUSB General Driver
INFO0076: init proc : PAGE_SIZE 4096
INFO15D5: sleep to wait br0 to wake up
INFO02D0: use dev Name br0
INFO15DE: sleep to wait br0 end.
INFO15F7: UDP_BROAD 7423 tcpPort:625868800
INFO02D0: use dev Name br0
INFO152E: tcpConnector() started...
INFO140B: Bind to br0
# Boot loader seems to be a derivation (?) of the rtl819x-bootcode (source is available as a part of rtl819x SDK on SourceForge). NetGear provides an archive for download from their FTP containing JNR3210 SDK which is as expected based on the original RealTek SDK for this SoC.
Flash layout looks like this:
0x000000-0x020000 : "bootloader"
0x020000-0x7b0000 : "fs+kernel+multi-lang"
0x160000-0x6f0000 : "rootfs"
0x6f0000-0x710000 : "English UI"
0x710000-0x730000 : "Chinese UI"
0x730000-0x750000 : "Russian UI"
0x750000-0x770000 : "Portuguese UI"
0x770000-0x790000 : "German UI"
0x790000-0x7b0000 : "Other UI"
0x7b0000-0x7c0000 : "POT"
0x7c0000-0x7d0000 : "traffic_meter"
0x7d0000-0x7e0000 : "DPF"
0x7e0000-0x7f0000 : "nvram"
0x7f0000-0x800000 : "BRCM_NV"Looking at ranges it seems that kernel starts at 0x020000 and could be max 0x140000 bytes (1.25MB) in length. Inspecting Netgear's JNR3210 SDK suggests that kernel partition size is expected to be set by hand at the moment of firmware image generation. From the file names in the aforementioned SDK one may conclude that bootloader is cfe (binary blob file with bootloader is named "jnr3210ncn_cfez.bin") but I highly doubt it is really a CFE or its fork - boot messages seem to differ from what CFE boot usually looks like. Actually bootloader looks like a modified by Sercomm version of original Realtek rtl819x-bootcode with added-in functionality to auto-recover over TFTP like it is done with so-called "slugimages" of NSLU2. Then again, bootloader don't seem to be a redboot derivate as it were in case of NSLU2.
To terminate normal boot sequence there are two options:
1) Press ESC over serial console at the early boot stage before bootloader hands off control to linux kernel. Here is how it looks like:
========== SPI =============
SDRAM CLOCK:181MHZ
------------------------- Force into Single IO Mode ------------------------
|No chipID Sft chipSize blkSize secSize pageSize sdCk opCk chipName |
| 0 c22017h 0h 800000h 10000h 1000h 100h 86 45 MX6405D/05E/45E|
----------------------------------------------------------------------------
Reboot Result from Watchdog Timeout!
---RealTek(RTL8198)at 2012.05.22-14:53+0800 version v1.1f [16bit](620MHz)
enter monitor earlier!
<Sercomm>help
----------------- COMMAND MODE HELP ------------------
HELP (?) : Print this help message
D <Address> <Len>
DB <Address> <Len>
DW <Address> <Len>
EW <Address> <Value1> <Value2>...
EB <Address> <Value1> <Value2>...
CMP: CMP <dst><src><length>
IPCONFIG:<TargetAddress>
AUTOBURN: 0/1
LOADADDR: <Load Address>
J: Jump to <TargetAddress>
FLW <dst_ROM_offset><src_RAM_addr><length_Byte> <SPI cnt#>: Write offset-data to SPI from RAM
EEE :Set EEE Pathch
SCDOWNLOAD :Enter Sercomm download mode
SCTFTP :RTL TFTP Server
SCTFTP_REC :Enter Sercomm TFTP Recovery mode
SCLPTEST :Enter Sercomm loopback test sample mode
SCRAMTEST :Enter Sercomm ram test
SCREAD: sc flash read debug command
SCERASE: sc flash erase debug command
SCWRITE: sc flash write byte debug command
SCRX: sc ethernet rx debug command
SCTX: sc ethernet tx debug command
SCMII: sc mii debug command
SCREG: sc cpu register debug command
SCLED: sc led test debug command
SCLED_BLINK: sc led blink debug cmd
SCBTN: sc button test debug command
<Sercomm>2) Power the unit on having reset button pressed. Here is console output:
Booting...�
========== SPI =============
SDRAM CLOCK:181MHZ
------------------------- Force into Single IO Mode ------------------------
|No chipID Sft chipSize blkSize secSize pageSize sdCk opCk chipName |
| 0 c22017h 0h 800000h 10000h 1000h 100h 86 45 MX6405D/05E/45E|
----------------------------------------------------------------------------
Reboot Result from Watchdog Timeout!
---RealTek(RTL8198)at 2012.05.22-14:53+0800 version v1.1f [16bit](620MHz)
Enter NMRP_main
NMRP func [NMRP_init] state is [0x00] line [84]
Scanning Flash Section 0...
Scanning Flash Section 1...
Flash Sector Number : 128.
NMRP func [NMRP_init] state is [0x00] line [93]
Set GPHY Parameter OK
NMRP func [NMRP_init] state is [[0x00]] line [99]
Our ETH MAC:
9c d3 6d fb d0 96
NMRP:LISTENING
Enter NMRP_handle_LISTENING_state
### No NMRP Server found ###
Scanning Flash Section 0...
Scanning Flash Section 1...
Flash Sector Number : 128.
***************************************************
Sercomm Boot Version 1.5.0.0
***************************************************
Reset Button is pressed! - to SC_Upgrade
Scanning Flash Section 0...
Scanning Flash Section 1...
Flash Sector Number : 128.
In Download now...
Set GPHY Parameter OK
9c d3 6d fb d0 96That's all info I had gathered from box for now.
To the questions part:
1) Would it be possible to install OpenWRT on this box using realtek-unstable branch of nprove git repo?
2) What is the expected way to flash the firmware into this box - preferably without using serial console? I'm considering buying two or three JNR3210 boxes for my family in case it would be possible to run OpenWRT on them.
3) Any way I could help people @NProve and other in this thread with their OpenWRT on RTL819x porting effort? At the very least I could build/flash/test firmware images and post result here in case it would be of some help.
Thanks for your hard work, keep it up.
