This router looks very much like the WNDR4300, (and WNDR3700)
For completeness's sake, this router has an FCCID of PY312400225
I cobbled together a serial cable and put it on the breakout header to get the boot info.
Here's the bit at the beginning of it.
U-Boot 1.1.4 (Jun 27 2013 - 10:48:26) U-boot dni29 V0.9 for DNI HW ID: 29764434 flash 128MB RAM 128MB 1st Radio 2x2 2nd Radio 2x2 DRAM: 128 MB Atheros on-chip NAND FLash Controller Driver, Version 0.1 (c) 2010 Atheros Communications, Ltd. Ath Nand ID[87ff1178]: 2c:f1:80:95:04 ONFI MICRON MT29F1G08ABAEAWP Micron NAND 128MiB 3,3V 8-bit [128MB] ====== NAND Parameters ====== sc = 0x87ff1158 bbt = 0x87f68008 bbt_size = 0x100 nf_ctrl = 0x344 page = 0x800 block = 0x20000 oob = 0x40 size = 128MB Setting 0xb8116290 to 0x48902d0f Using default environment In: serial Out: serial Err: serial 131072 bytes read: OK Net: ag934x_enet_initialize... 4096 bytes read: OK Fetching MAC Address from 0x87fe82f8 4096 bytes read: OK Fetching MAC Address from 0x87fe82f8 wasp reset mask:c02300 WASP ----> S27 PHY : cfg1 0x80000000 cfg2 0x7114 eth0: 44:94:fc:98:0b:c3 s27 reg init athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000 athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10 eth0 up WASP ----> S27 PHY WASP ----> S27 PHY : cfg1 0xf cfg2 0x7214 eth1: 44:94:fc:98:0b:c2 s27 reg init lan ATHRS27: resetting s27 ATHRS27: s27 reset done athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000 athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :10 athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000 athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :10 athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000 athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :10 athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000 athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10 eth1 up eth0, eth1 Hit any key to stop autoboot: 2 ^H^H^H 1 ^H^H^H 0
And here it is running, apparently, a custom version of OpenWRT, in ths stock firmware!
Loading from device 0: ath-nand (offset 0x1a0000) ** check kernel image ** Verifying Checksum ... OK ** check rootfs image ** Verifying Checksum ... OK ## Booting image at 81000000 ... Image Name: MIPS OpenWrt Linux-2.6.31 Created: 2013-06-04 10:51:12 UTC Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 1179456 Bytes = 1.1 MB Load Address: 80002000 Entry Point: 80269860 Verifying Checksum ... OK Uncompressing Kernel Image ... OK Starting kernel ... Booting Atheros AR934x
Is it common practice for big corporations like Netgear to basically just use OpenWRT and then not release their sources?
Just for the FYI, the pinout for the serial header on this router is:
Pin1 -> vcc
pin2 -> TX
pin3 -> RX
pin4 -> GND
I am going to see if I can build a custom openWRT firmware for this device using the u-boot menu to upload new test images.
If anyone is interested, I can provide the full boot log from this device.