Hey Kids,
This router looks very much like the WNDR4300, (and WNDR3700)
For completeness's sake, this router has an FCCID of PY312400225
I cobbled together a serial cable and put it on the breakout header to get the boot info.
Here's the bit at the beginning of it.
U-Boot 1.1.4 (Jun 27 2013 - 10:48:26)
U-boot dni29 V0.9 for DNI HW ID: 29764434 flash 128MB RAM 128MB 1st Radio 2x2 2nd Radio 2x2
DRAM: 128 MB
Atheros on-chip NAND FLash Controller Driver, Version 0.1 (c) 2010 Atheros Communications, Ltd.
Ath Nand ID[87ff1178]: 2c:f1:80:95:04
ONFI MICRON MT29F1G08ABAEAWP
Micron NAND 128MiB 3,3V 8-bit [128MB]
====== NAND Parameters ======
sc = 0x87ff1158 bbt = 0x87f68008 bbt_size = 0x100 nf_ctrl = 0x344
page = 0x800 block = 0x20000 oob = 0x40
size = 128MB
Setting 0xb8116290 to 0x48902d0f
Using default environment
In: serial
Out: serial
Err: serial
131072 bytes read: OK
Net: ag934x_enet_initialize...
4096 bytes read: OK
Fetching MAC Address from 0x87fe82f8
4096 bytes read: OK
Fetching MAC Address from 0x87fe82f8
wasp reset mask:c02300
WASP ----> S27 PHY
: cfg1 0x80000000 cfg2 0x7114
eth0: 44:94:fc:98:0b:c3
s27 reg init
athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10
eth0 up
WASP ----> S27 PHY
WASP ----> S27 PHY
: cfg1 0xf cfg2 0x7214
eth1: 44:94:fc:98:0b:c2
s27 reg init lan
ATHRS27: resetting s27
ATHRS27: s27 reset done
athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :10
athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :10
athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :10
athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
eth1 up
eth0, eth1
Hit any key to stop autoboot: 2 ^H^H^H 1 ^H^H^H 0And here it is running, apparently, a custom version of OpenWRT, in ths stock firmware!
Loading from device 0: ath-nand (offset 0x1a0000)
** check kernel image **
Verifying Checksum ... OK
** check rootfs image **
Verifying Checksum ... OK
## Booting image at 81000000 ...
Image Name: MIPS OpenWrt Linux-2.6.31
Created: 2013-06-04 10:51:12 UTC
Image Type: MIPS Linux Kernel Image (lzma compressed)
Data Size: 1179456 Bytes = 1.1 MB
Load Address: 80002000
Entry Point: 80269860
Verifying Checksum ... OK
Uncompressing Kernel Image ... OK
Starting kernel ...
Booting Atheros AR934xIs it common practice for big corporations like Netgear to basically just use OpenWRT and then not release their sources?
Just for the FYI, the pinout for the serial header on this router is:
Pin1 -> vcc
pin2 -> TX
pin3 -> RX
pin4 -> GND
I am going to see if I can build a custom openWRT firmware for this device using the u-boot menu to upload new test images.
If anyone is interested, I can provide the full boot log from this device.