OpenWrt Forum Archive

Topic: Sagemcom F@st 5310 - How to access shell?

The content of this topic has been archived on 21 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Hi
I'm new here and hoping for some advice.
I got ISP branded modem/router Sagemcom F@st 5310, unfortunately it's firmware is heavily blocked( ex. telnet port closed, config dump files encrypted).
So I managed to locate serial pins on pcb and successfully connect them via UART- USB converter (pl-2303HX), but sadly I can only see boot-sequence log and information provided, by sysrq. I can't login or get shell prompt
And this error if I try to access shell:

Please press Enter to activate this console. 

starting pid 23
process '-/bin/login' (pid 2308) exited. Scheduling for restart.

Please press Enter to activate this console

Of course I've tried soft and hard reset. Can I do something with it? Is it possible that I still didn't connected something properly or it could be some software bug, and can't do anything until update. Any ideas?

Boot-log and sysrq options:

HELO
CPUI
L1CI
HELO
CPUI
L1CI
DRAM
----
PHYS
STRF
400H
PHYE
DDR3
SIZ4
SIZ3
SIZ2
DINT
USYN
LSYN
MFAS
LMBE
RACE
PASS
----
ZBSS
CODE
DATA
L12F
MAIN
FPS0
SVOL
NGEO
FVLY
FVLY
RVOL
J2EP
SeOK


CFE version 1.0.38-112.118 for BCM963268 (32bit,SP,BE)
Build Date: Wed Oct 23 14:16:27 CEST 2013 (g110981@RMM-P1188051)
Copyright (C) 2000-2011 Broadcom Corporation.

CFE (soft operational)
NAND flash device: name <not identified>, id 0x98d1 block 128KB size 131072KB
Chip ID: BCM63168D0, MIPS: 400MHz, DDR: 400MHz, Bus: 200MHz
Main Thread: TP0
Memory Test Passed
Total Memory: 134217728 bytes (128MB)
Boot Address: 0xb8000000

NextLevelBoot U-boot @ 0x87f00000

Board IP address                  : 192.168.1.1:ffffff00  
Host IP address                   : 192.168.1.10  
Gateway IP address                : 192.168.1.10  
Run from flash/host (f/h)         : f  
Default host run file name        : vmlinux  
Default host flash file name      : bcm963xx_fs_kernel  
Boot delay (0-9 seconds)          : 1  
Launch linux/uboot (l/u)          : l  
Board Id (0-8)                    : F@ST5310  
Number of MAC Addresses (1-32)    : 10  
Base MAC Address                  : 00:10:18:00:00:00  
PSI Size (1-64) KBytes            : 24  
Enable Backup PSI [0|1]           : 0  
System Log Size (0-256) KBytes    : 0  
Main Thread Number [0|1]          : 0  
Voice Board Configuration (0-0)   : SI3217X_NOFXO  

Initializing UBI to launch u-boot!
UBI volume uboot has id 3
read 826812 bytes from UBI volume 3
SHATEST=2.
Ubi U-Boot Entry at 0x87f00000
Closing network.
Disabling Switch ports.
Flushing Receive Buffers...
0 buffers found.
Closing DMA Channels.
Starting program at 0x87f00000

U-Boot 2011.12
Version: 4.30.2-full (Oct 23 2013 - 14:15:52) 
Copyright (C) 2011 - 2013 Sagemcom All rights reserved
gpio in: 0x40dbdf1e 
board type: 00020010
board memsize : 0x08000000
CPU: Broadcom BCM63168D0
DRAM:  128 MiB
NAND:  bcm63xxx nand initialization
brcmnand_probe: Ecc level set to 1, sectorSize=512 from ID table
reqEccLevel=1, eccLevel=15
128 MiB
Creating 1 MTD partitions on "nand0":
0x0000000c0000-0x000007b00000 : "mtd=1"
UBI: attaching mtd1 to ubi0
UBI: physical eraseblock size:   131072 bytes (128 KiB)
UBI: logical eraseblock size:    126976 bytes
UBI: smallest flash I/O unit:    2048
UBI: VID header offset:          2048 (aligned 2048)
UBI: data offset:                4096
UBI: attached mtd1 to ubi0
UBI: MTD device name:            "mtd=1"
UBI: MTD device size:            122 MiB
UBI: number of good PEBs:        978
UBI: number of bad PEBs:         0
UBI: max. allowed volumes:       128
UBI: wear-leveling threshold:    256
UBI: number of internal volumes: 1
UBI: number of user volumes:     7
UBI: available PEBs:             301
UBI: total number of reserved PEBs: 677
UBI: number of PEBs reserved for bad PEB handling: 9
UBI: max/mean erase counter: 21/3
Volume bootenv not found!
*** Warning - bad CRC, using default environment

Net:   BCM63xxx
sb3: sb3_sagem_init()
sb3: action: 1007
sb3: sb3_wait_for_magic()
sb3: action: 1002
sb3: sb3_boot( operational )
sb3: top available addr 0x878c0000, ram available = 0x74c0000 
sb3: read image operational size=15c1800 to address=862f0000
sb3_load_ubivol: max_load_size=122421248
Read 22812672 bytes from volume operational to 862f0000
sb3: image operational has gsdf format
sb3: image operational signature OK
BCM63xx : unregistering Ethernet driver 
Disabling Switch ports.
Flushing Receive Buffers...
3 buffers found.
Closing DMA Channels.
sb3: No pre-boot commands
sb3: setting kernel args
bootm 862F1000 
## Booting kernel from Legacy Image at 862f1000 ...
   Image Name:   FTPL_4.34.17
   Created:      2013-11-06  18:51:22 UTC
   Image Type:   MIPS Linux Kernel Image (gzip compressed)
   Data Size:    2490368 Bytes = 2.4 MiB
   Load Address: 80010000
   Entry Point:  803ec800
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK

Starting kernel ...

Initializing cgroup subsys cpuset

Linux version 2.6.30 (@sahwbld03) (gcc version 4.4.2 (SoftAtHome 1.0.6) ) #1 SMP PREEMPT Wed Nov 6 19:06:00 CET 2013

argc 15 arg a79c032c env a79c0850 

memsize  board_memsize = 128

env memsize=128 

env initrd_start=0xA0000000 

env initrd_size=0x0 

flash_start 0

env flash_start=0x00000000 

board_flash_size c8bbcc9c

env flash_size=0xC8BBCC9C 

env ethaddr=00:01:02:03:04:05 

arg[1] root=mtd:rootfs 

arg[2] init=/etc/preinit 

arg[3] ro 

arg[4] rootfstype=squashfs 

arg[5] console=ttyS0,115200 

arg[6] rootfs_offset=0x00261800 

arg[7] rootfs_size=0x01360000 

arg[8] mtdparts=nand:768k(bcm),125184k(partAll),5120k(data) 

arg[9] ubi.mtd=ubi 

arg[10] part_main=partAll 

arg[11] part_boot=partAll 

arg[12] image_ubivol=operational 

arg[13] secure 

arg[14] board_type=00020050 

BCM Flash API. Flash device is not found.

F@ST5310 prom init

CPU revision is: 0002a080 (Broadcom4350)

Sagemcom SDRAM reserved: 0x1000

DSL SDRAM reserved: 0x132000

Determined physical RAM map:

 memory: 00010000 @ 00000000 (usable)

 memory: 00001000 @ 00010000 (reserved)

 memory: 07ebd000 @ 00011000 (usable)

Zone PFN ranges:

  DMA      0x00000000 -> 0x00001000

  Normal   0x00001000 -> 0x00007ece

Movable zone start PFN for each node

early_node_map[1] active PFN ranges

    0: 0x00000000 -> 0x00007ece

On node 0 totalpages: 32462

free_area_init_node: node 0, pgdat 804f4550, node_mem_map 81000000

  DMA zone: 32 pages used for memmap

  DMA zone: 0 pages reserved

  DMA zone: 4064 pages, LIFO batch:0

  Normal zone: 222 pages used for memmap

  Normal zone: 28144 pages, LIFO batch:7

Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32208

Kernel command line: root=mtd:rootfs init=/etc/preinit ro rootfstype=squashfs console=ttyS0,115200 rootfs_offset=0x00261800 rootfs_size=0x01360000 mtdparts=nand:768k(bcm),125184k(partAll),5120k(data) ubi.mtd=ubi part_main=partAll part_boot=partAll image_ubivol=operational secure board_type=00020050 

UBI image volume: "operational"

wait instruction: enabled

Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes.

Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes

RCU-based detection of stalled CPUs is enabled.

NR_IRQS:128

PID hash table entries: 512 (order: 9, 2048 bytes)

console [ttyS0] enabled

Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)

Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)

Allocating memory for DSP module core and initialization code

Allocated DSP module memory - CORE=0x0 SIZE=0, INIT=0x0 SIZE=0

Memory: 122988k/129844k available (3986k kernel code, 6684k reserved, 1038k data, 176k init, 0k highmem)

Calibrating delay loop... 399.36 BogoMIPS (lpj=199680)

Mount-cache hash table entries: 512

--Kernel Config--

  SMP=1

  PREEMPT=1

  DEBUG_SPINLOCK=0

  DEBUG_MUTEXES=0

Broadcom Logger v0.1 Nov  6 2013 18:59:37

CPU revision is: 0002a080 (Broadcom4350)

Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes.

Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes

Calibrating delay loop... 402.43 BogoMIPS (lpj=201216)

Brought up 2 CPUs

net_namespace: 1092 bytes

NET: Registered protocol family 16

Total Flash size: 0K with -1 sectors

Internal 1P2 VREG will be shutdown if unused...Used, leave it on (000081bf-00007ca2=1309>=300)

registering PCI controller with io_map_base unset

registering PCI controller with io_map_base unset

bio: create slab <bio-0> at 0

SCSI subsystem initialized

usbcore: registered new interface driver usbfs

usbcore: registered new interface driver hub

usbcore: registered new device driver usb

pci 0000:00:00.0: reg 10 32bit mmio: [0x10004000-0x10013fff]

pci 0000:00:00.0: reg 30 32bit mmio: [0x000000-0x0007ff]

pci 0000:00:00.0: supports D1 D2

pci 0000:00:00.0: PME# supported from D0 D3hot D3cold

pci 0000:00:00.0: PME# disabled

pci 0000:00:09.0: reg 10 32bit mmio: [0x10002600-0x100026ff]

pci 0000:00:0a.0: reg 10 32bit mmio: [0x10002500-0x100025ff]

pci 0000:01:00.0: PME# supported from D0 D3hot

pci 0000:01:00.0: PME# disabled

pci 0000:01:00.0: PCI bridge, secondary bus 0000:02

pci 0000:01:00.0:   IO window: disabled

pci 0000:01:00.0:   MEM window: disabled

pci 0000:01:00.0:   PREFETCH window: disabled

PCI: Setting latency timer of device 0000:01:00.0 to 64

BLOG v3.0 Initialized

BLOG Rule v1.0 Initialized

Broadcom IQoS v0.1 Nov  6 2013 19:05:33 initialized

Broadcom GBPM v0.1 Nov  6 2013 19:05:33 initialized

NET: Registered protocol family 8

NET: Registered protocol family 20

NET: Registered protocol family 2

IP route cache hash table entries: 1024 (order: 0, 4096 bytes)

TCP established hash table entries: 4096 (order: 3, 32768 bytes)

TCP bind hash table entries: 4096 (order: 3, 32768 bytes)

TCP: Hash tables configured (established 4096 bind 4096)

TCP reno registered

NET: Registered protocol family 1

squashfs: version 4.0 (2009/01/31) Phillip Lougher

JFFS2 version 2.2. (NAND) © 2001-2006 Red Hat, Inc.

fuse init (API version 7.11)

msgmni has been set to 240

io scheduler noop registered (default)

PCI: Setting latency timer of device 0000:01:00.0 to 64

loop: module loaded

Driver 'sd' needs updating - please use bus_type methods

PPP generic driver version 2.4.2

NET: Registered protocol family 24

tun: Universal TUN/TAP device driver, 1.6

tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>

bcm963xx_mtd driver v1.0

Failed to read image tag from flash

Broadcom DSL NAND controller (BrcmNand Controller)

-->brcmnand_scan: CS=0, numchips=1, csi=0

mtd->oobsize=0, mtd->eccOobSize=0

NAND_CS_NAND_XOR=00000000

Disabling XOR on CS#0

brcmnand_scan: Calling brcmnand_probe for CS=0

B4: NandSelect=40000001, nandConfig=15142200, chipSelect=0

brcmnand_read_id: CS0: dev_id=98d19015

After: NandSelect=40000001, nandConfig=15142200

decode_ID_type1: mafID=98, devID=d1, ID4=15, ID5=76

Updating Config Reg: Block & Page Size: B4: 15142200, blockSize=00020000, pageSize=2048

Updating Config Reg: Block & Page Size: After: 15142200

nbrBlocks=1024, blockSize=131072, blkShift=17, chip Size = 8000000

nandConfigChipSize = 0005

-->brcmnand_compute_adr_bytes, chip->chipSize=8000000

brcmnand_compute_adr_bytes: nbrPages=10000, blkAdrBytes=2, colAdrBytes=2, nand_config=15142200

brcmnand_probe: NAND_CONFIG=15142200

brcmnand_probe: Ecc level set to 1, sectorSize=512 from ID table

Block size=00020000, erase shift=17

NAND Config: Reg=15142200, chipSize=128 MB, blockSize=128K, erase_shift=11

busWidth=1, pageSize=2048B, page_shift=11, page_mask=000007ff

timing1 not adjusted: 6574845b

timing2 not adjusted: 00001e96

brcmnand_adjust_acccontrol: gAccControl[CS=0]=00000000, ACC=f7ff1010

BrcmNAND mfg 98 d1 TOSHIBA TC58NVG0S3ETA00 128MB on CS0


Found NAND on CS0: ACC=f7ff1010, cfg=15142200, flashId=98d19015, tim1=6574845b, tim2=00001e96

BrcmNAND version = 0x0400 128MB @00000000

brcmnand_scan: Done brcmnand_probe

brcmnand_scan: B4 nand_select = 40000001

brcmnand_scan: After nand_select = 40000001

100 CS=0, chip->ctrl->CS[0]=0

ECC level 15, threshold at 1 bits

reqEccLevel=1, eccLevel=15

190 eccLevel=15, chip->ecclevel=15, acc=f7ff1010

brcmnand_scan 10

200 CS=0, chip->ctrl->CS[0]=0

200 chip->ecclevel=15, acc=f7ff1010

page_shift=11, bbt_erase_shift=17, chip_shift=27, phys_erase_shift=17

brcmnand_scan 220

Brcm NAND controller version = 4.0 NAND flash size 128MB @18000000

brcmnand_scan 230

brcmnand_scan 40, mtd->oobsize=64, chip->ecclayout=00000000

brcmnand_scan 42, mtd->oobsize=64, chip->ecclevel=15, isMLC=0, chip->cellinfo=0

ECC layout=brcmnand_oob_bch4_4k

brcmnand_scan:  mtd->oobsize=64

brcmnand_scan: oobavail=50, eccsize=512, writesize=2048

brcmnand_scan, eccsize=512, writesize=2048, eccsteps=4, ecclevel=15, eccbytes=3

300 CS=0, chip->ctrl->CS[0]=0

500 chip=87a57990, CS=0, chip->ctrl->CS[0]=0

-->brcmnand_default_bbt

brcmnand_default_bbt: bbt_td = bbt_main_descr

Bad block table Bbt0 found at page 0000ffc0, version 0x01 for chip on CS0

Bad block table 1tbB found at page 0000ff80, version 0x01 for chip on CS0

brcmnandCET: Status -> Deferred

brcmnand_scan 99

Creating 5 MTD partitions on "brcmnand.0":

0x000000000000-0x000000020000 : "bcmfs"

0x000000020000-0x0000000c0000 : "bcmfs_update"

0x0000000c0000-0x000007b00000 : "ubi"

0x000007b00000-0x000007f00000 : "data"

0x000000000000-0x000000020000 : "nvram"

UBI: attaching mtd2 to ubi0

UBI: physical eraseblock size:   131072 bytes (128 KiB)

UBI: logical eraseblock size:    126976 bytes

UBI: smallest flash I/O unit:    2048

UBI: VID header offset:          2048 (aligned 2048)

UBI: data offset:                4096

Add UBI volume partitions: name=operational

Creating 3 MTD partitions on "operational":

0x000000000000-0x00000001f000 : "auth"

0x000000000000-0x000000261800 : "kernel"

mtd: partition "kernel" doesn't end on an erase block -- force read-only

0x000000261800-0x0000015c1800 : "rootfs"

mtd: partition "rootfs" doesn't start on an erase block boundary -- force read-only

Add UBI volume partitions: name=permanent_param

Add UBI volume partitions: name=rescue

Add UBI volume partitions: name=uboot

Add UBI volume partitions: name=secondaryboot

Add UBI volume partitions: name=user

Add UBI volume partitions: name=ext

UBI: attached mtd2 to ubi0

UBI: MTD device name:            "ubi"

UBI: MTD device size:            122 MiB

UBI: number of good PEBs:        978

UBI: number of bad PEBs:         0

UBI: max. allowed volumes:       128

UBI: wear-leveling threshold:    256

UBI: number of internal volumes: 1

UBI: number of user volumes:     7

UBI: available PEBs:             301

UBI: total number of reserved PEBs: 677

UBI: number of PEBs reserved for bad PEB handling: 9

UBI: max/mean erase counter: 21/3

ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver

PCI: Enabling device 0000:00:0a.0 (0000 -> 0002)

PCI: Setting latency timer of device 0000:00:0a.0 to 64

ehci_hcd 0000:00:0a.0: EHCI Host Controller

UBI: background thread "ubi_bgt0d" started, PID 251

ehci_hcd 0000:00:0a.0: new USB bus registered, assigned bus number 1

ehci_hcd 0000:00:0a.0: Enabling legacy PCI PM

ehci_hcd 0000:00:0a.0: irq 18, io mem 0x10002500

ehci_hcd 0000:00:0a.0: USB f.f started, EHCI 1.00

usb usb1: configuration #1 chosen from 1 choice

hub 1-0:1.0: USB hub found

hub 1-0:1.0: 2 ports detected

ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver

PCI: Enabling device 0000:00:09.0 (0000 -> 0002)

PCI: Setting latency timer of device 0000:00:09.0 to 64

ohci_hcd 0000:00:09.0: OHCI Host Controller

ohci_hcd 0000:00:09.0: new USB bus registered, assigned bus number 2

ohci_hcd 0000:00:09.0: irq 17, io mem 0x10002600

usb usb2: configuration #1 chosen from 1 choice

hub 2-0:1.0: USB hub found

hub 2-0:1.0: 2 ports detected

usbcore: registered new interface driver usblp

Initializing USB Mass Storage driver...

usbcore: registered new interface driver usb-storage

USB Mass Storage support registered.

usbcore: registered new interface driver usbserial

USB Serial support registered for generic

usbcore: registered new interface driver usbserial_generic

usbserial: USB Serial Driver core

USB Serial support registered for GSM modem (1-port)

usbcore: registered new interface driver option

option: v0.7.2:USB Driver for GSM modems

brcmboard: brcm_board_init entry

SES: LED GPIO 0x8024 is enabled

PCIe: No device found - Powering down

Serial: BCM63XX driver $Revision: 3.00 $

Magic SysRq enabled (type ^ h for list of supported commands)

ttyS0 at MMIO 0xb0000180 (irq = 13) is a BCM63XX

ttyS1 at MMIO 0xb00001a0 (irq = 42) is a BCM63XX

bcmPktDma_init: Broadcom Packet DMA Library initialized

Total # RxBds=1448

bcmPktDmaBds_init: Broadcom Packet DMA BDs initialized


bcmxtmrt: Broadcom BCM3168D0 ATM/PTM Network Device v0.4 Nov  6 2013 19:04:56

p8021ag: p8021ag_init entry

IPSEC SPU: SUCCEEDED 

kbutton_hw_init

SoftAtHome Button driver has been initialized

lb_led_init called

u32 classifier

Netfilter messages via NETLINK v0.30.

nf_conntrack version 0.5.0 (2028 buckets, 8112 max)

CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use

nf_conntrack.acct=1 kernel paramater, acct=1 nf_conntrack module option or

sysctl net.netfilter.nf_conntrack_acct=1 to enable it.

ctnetlink v0.93: registering with nfnetlink.

/proc/net/netfilter/nf_dyndscp_w2ldscp_transtbl created

GRE over IPv4 tunneling driver

ip_tables: (C) 2000-2006 Netfilter Core Team

TCP cubic registered

Initializing XFRM netlink socket

NET: Registered protocol family 10

ip6_tables: (C) 2000-2006 Netfilter Core Team

IPv6 over IPv4 tunneling driver

NET: Registered protocol family 17

Initializing MCPD Module

Ebtables v2.0 registered

RPC: Registered udp transport module.

RPC: Registered tcp transport module.

802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>

All bugs added by David S. Miller <davem@redhat.com>

VFS: Mounted root (squashfs filesystem) readonly on device 31:8.

Freeing unused kernel memory: 176k freed

Failed to execute /etc/preinit.  Attempting defaults...


init started: BusyBox v1.13.3 (2013-11-06 19:18:18 CET)

starting pid 284, tty '': '/etc_ro_fs/init.d/sysinit'
Mounting tmpfs filesystem (/dev) ...
Mounting devpts filesystem (/dev/pts) ...
Mounting proc filesystem ...
Mounting sys filesystem ...
Mounting tmpfs filesystem (/var) ...
Mounting tmpfs filesystem (/var/log) ...
Mounting tmpfs filesystem (/tmp) ...
> NORMAL BOOT <
JFFS2 write-buffering enabled buffer (2048) erasesize (126976)

> BOOT SYSTEM <
Create /dev/button files
## CV=CONFIG_VERSION_NAME_MAJOR="4.34.17" DB=CONFIG_VERSION_NAME_MAJOR="4.34.17"
cp: cannot stat '/fs/rw/dl/tls/cert0201.pem': No such file or directory
 start rc.sysinit
Mounting other filesystems ...
Switching to RUNLEVEL 1 ...
*********************** Starting script /etc/rc1.d/S01EnableRebootOnCrash at: 4.77 0.00
Enabling Reboot on kernel crash
*********************** Starting script /etc/rc1.d/S01hgwcfg at: 4.86 0.00
*********************** Starting script /etc/rc1.d/S01sysbus at: 4.91 0.00
Starting pcb system bus
*********************** Starting script /etc/rc1.d/S01sysctl at: 5.94 0.00
*********************** Starting script /etc/rc1.d/S02hardware at: 5.98 0.00
mknod: /dev/brcmboard: File exists
mknod: /dev/bcmadsl0: File exists
mknod: /dev/bcmendpoint0: File exists
mknod: /dev/bcm: File exists
mknod: /dev/bcmxtmcfg0: File exists
mknod: /dev/pktcmf: File exists
mknod: /dev/spu: File exists
mknod: /dev/button0: File exists
mknod: /dev/button2: File exists
bcm_bpm: module license 'unspecified' taints kernel.

Disabling lock debugging due to kernel taint

BPM: tot_mem_size=134217728B (128MB), buf_mem_size=20132659B (19MB), num of buffers=9605, buf size=2096

Broadcom BPM Module Char Driver v0.1 Nov  6 2013 19:00:43 Registered<244>

[NTC bpm] bpm_set_status: BPM status : enabled 



NBUFF v1.0 Initialized

Initialized fcache state

Broadcom Packet Flow Cache  Char Driver v2.2 Nov  6 2013 19:03:01 Registered<242>

Created Proc FS /procfs/fcache

Broadcom Packet Flow Cache registered with netdev chain

Broadcom Packet Flow Cache learning via BLOG enabled.

Constructed Broadcom Packet Flow Cache v2.2 Nov  6 2013 19:03:01

chipId 0x631680D0

Broadcom Forwarding Assist Processor (FAP) Char Driver v0.1 Nov  6 2013 19:02:47 Registered <241>

FAP Debug values at 0x00000010 0x00000010

Enabling SMISBUS PHYS_FAP_BASE[0] is 0x10c01000

FAP Soft Reset Done

4ke Reset Done

Enabling SMISBUS PHYS_FAP_BASE[1] is 0x10c01000

FAP Soft Reset Done

4ke Reset Done

Allocated FAP0 GSO Buffers (0xA5D1C5A4) : 1048576 bytes @ 0xA5E00000

Allocated FAP1 GSO Buffers (0xA5D3C5A4) : 1048576 bytes @ 0xA5F00000

[NTC fapProto] fapReset  : Reset FAP Protocol layer

[FAP0] DSPRAM : stack <0x80000000><1024>, global <0x80000400><7112>, free <56>, total<8192>

[FAP1] DSPRAM : stack <0x80000000><1024>, global <0x80000400><7112>, free <56>, total<8192>

[FAP0] PSM : addr<0x80002000>, used <24536>, free <40>, total <24576>

[FAP1] PSM : addr<0x80002000>, used <24536>, free <40>, total <24576>

[FAP0] Flows supported: 238 (dsp 61, psm 75, qsm 102)

[FAP1] Flows supported: 238 (dsp 61, psm 75, qsm 102)

[FAP0] DQM : availableMemory 14012 bytes, nextByteAddress 0xE0010944

[FAP1] DQM : availableMemory 14012 bytes, nextByteAddress 0xE0010944

[FAP0] GSO Buffer set to 0xA5E00000

[FAP1] GSO Buffer set to 0xA5F00000

[FAP0] FAP BPM Initialized.

[FAP1] FAP BPM Initialized.

bcmPktDma_bind: FAP Driver binding successfull

bcmxtmcfg: bcmxtmcfg_init entry

adsl: adsl_init entry

Broadcom BCM63168D0 Ethernet Network Device v0.1 Nov  6 2013 19:04:41

fapDrv_psmAlloc: fapIdx=0, size: 3600, offset=b08206f0 bytes remaining 7408

ETH Init: Ch:0 - 180 tx BDs at 0xb08206f0

fapDrv_psmAlloc: fapIdx=1, size: 3600, offset=b0a206f0 bytes remaining 7408

ETH Init: Ch:1 - 180 tx BDs at 0xb0a206f0

fapDrv_psmAlloc: wastage 8 bytes

fapDrv_psmAlloc: fapIdx=0, size: 4808, offset=b0821500 bytes remaining 2592

ETH Init: Ch:0 - 600 rx BDs at 0xb0821500

fapDrv_psmAlloc: wastage 8 bytes

fapDrv_psmAlloc: fapIdx=1, size: 4808, offset=b0a21500 bytes remaining 2592

ETH Init: Ch:1 - 600 rx BDs at 0xb0a21500

dgasp: kerSysRegisterDyingGaspHandler: bcmsw registered 

eth0: MAC Address: 00:10:18:00:00:00

eth1: MAC Address: 00:10:18:00:00:00

eth2: MAC Address: 00:10:18:00:00:00

eth3: MAC Address: 00:10:18:00:00:00

--SMP support

wl: dsl_tx_pkt_flush_len=338

wl: high_wmark_tot=6243

PCI: Setting latency timer of device 0000:00:00.0 to 64

wl: passivemode=1

wl: napimode=0

wl0: allocskbmode=1 currallocskbsz=512

otp_read_pci: bad crc

Neither SPROM nor OTP has valid image

wl:srom/otp not programmed, using main memory mapped srom info(wombo board)

wl:loading /etc/wlan/bcm6362_vars.bin

Failed to open srom image from '/etc/wlan/bcm6362_vars.bin'.

wl:loading /etc/wlan/bcm6362_map.bin

wl0: Broadcom BCM435f 802.11 Wireless Controller 5.100.138.2008.cpe4.12L06.4

dgasp: kerSysRegisterDyingGaspHandler: wl0 registered 

modprobe: Module p8021ag not found.
Broadcom 802.1Q VLAN Interface, v0.1

ip6_gre: GRE over IPv6 tunneling driver

*********************** Starting script /etc/rc1.d/S02hardware.adsl.96362 at: 12.15 0.00
Starting ADSL...
    pktflow... ok
    bcmxtmcfg... ok
    adsldd... ok
*********************** Starting script /etc/rc1.d/S05ext at: 12.38 0.00
UBIFS: recovery needed

UBIFS: recovery completed

UBIFS: mounted UBI device 0, volume 6, name "ext"

UBIFS: file system size:   15745024 bytes (15376 KiB, 15 MiB, 124 LEBs)

UBIFS: journal size:       1015809 bytes (992 KiB, 0 MiB, 6 LEBs)

UBIFS: media format:       w4/r0 (latest is w4/r0)

UBIFS: default compressor: lzo

UBIFS: reserved for root:  743676 bytes (726 KiB)

Note: Loading 6300 MDK (default) driver for 63168 chip 
Switch MDK: num_switches = 1
Switch MDK: unit = 0; phy_pbmp = 0xf; config_pbmp = 0xf 
Switch MDK link poll thread: unit=0; phypbmp=0xf
*********************** Starting script /etc/rc1.d/S10netmodeconfig1 at: 12.74 0.00
eth0 (switch port: 2) Link UP 100 mbps full duplex

message received before monitor task is initialized kerSysSendtoMonitorTask 

*********************** Starting script /etc/rc1.d/S15syslogd at: 21.85 0.00
*********************** Starting script /etc/rc1.d/S16usermngt at: 21.89 0.00
*********************** Starting script /etc/rc1.d/S20nemo-core at: 22.44 0.00
*********************** Starting script /etc/rc1.d/S20network at: 23.56 0.00
Hostname configuration : LIVEBOX
*********************** Starting script /etc/rc1.d/S21geniodb at: 23.67 0.00
Loading geniodb kernel module...
 Thomson geniodb driver: Loading ...

 Thomson geniodb driver: Loading finished with SUCCESS

*********************** Starting script /etc/rc1.d/S21nemo-extensions1 at: 23.77 0.00
*********************** Starting script /etc/rc1.d/S21netdev at: 24.27 0.00
ADDRCONF(NETDEV_UP): eth1: link is not ready

ADDRCONF(NETDEV_UP): eth2: link is not ready

ADDRCONF(NETDEV_UP): eth3: link is not ready

*********************** Starting script /etc/rc1.d/S21www-backend at: 24.62 0.00
*********************** Starting script /etc/rc1.d/S22firewall at: 24.79 0.00
Warning: never matched protocol: 51. use extension match instead.
*********************** Starting script /etc/rc1.d/S22gatewayd at: 28.19 0.00
gatewayd start ...
add_trigger: type(2), data(5)

End of initialisation

*********************** Starting script /etc/rc1.d/S23bcmeth at: 33.40 0.00
*********************** Starting script /etc/rc1.d/S23nemo-clients at: 33.51 0.00
device bridge entered promiscuous mode

device wl0 entered promiscuous mode

device eth0 entered promiscuous mode

bridge: port 2(eth0) entering forwarding state

device eth1 entered promiscuous mode

eth0 (switch port: 2)  Link DOWN.

message received before monitor task is initialized kerSysSendtoMonitorTask 

bridge: port 2(eth0) entering disabled state

device eth2 entered promiscuous mode

device eth3 entered promiscuous mode

device bridge_wfc entered promiscuous mode

BcmAdsl_Initialize=0xC02BA9C8, g_pFnNotifyCallback=0xC02F40D4

lmemhdr[2]=0x100CE000, pAdslLMem[2]=0x100CE000

pSdramPHY=0xA7FFFFF8, 0xA906BD6F 0x2E34296

*** XfaceOffset: 0x5FF90 => 0x5FF90 ***

fapDrv_psmAlloc: fapIdx=1, size: 1600, offset=b0a227d0 bytes remaining 992

XTM Init: Ch:0 - 200 rx BDs at 0xb0a227d0

fapDrv_psmAlloc: fapIdx=1, size: 128, offset=b0a22e10 bytes remaining 864

XTM Init: Ch:1 - 16 rx BDs at 0xb0a22e10

rxdma[0]: skbs_p(84f70000), size(44816), SKB_ALIGNED_SIZE(224)

rxdma[1]: skbs_p(84eaf000), size(3600), SKB_ALIGNED_SIZE(224)

*********************** Starting script /etc/rc1.d/S23raplugin at: 35.43 0.00
*** PhySdramSize got adjusted: 0xE9190 => 0x11FC20 ***

AdslCoreSharedMemInit: shareMemAvailable=74688

AdslCoreHwReset:  pLocSbSta=84f90000 bkupThreshold=3072

AdslCoreHwReset:  AdslOemDataAddr = 0xA7FA8244

dgasp: kerSysRegisterDyingGaspHandler: dsl0 registered 

bcmxtmrt: MAC address: 00 10 18 00 00 02

[DoCreateDeviceReq.3006]: register_netdev

[DoCreateDeviceReq.3008]: register_netdev done

[FAP0] xtmCreateDevice : devId 0, encapType 0, headerLen 0

[FAP1] xtmCreateDevice : devId 0, encapType 0, headerLen 0

bcmxtmrt: MAC address: 00 10 18 00 00 03

[DoCreateDeviceReq.3006]: register_netdev

[DoCreateDeviceReq.3008]: register_netdev done

[FAP0] xtmCreateDevice : devId 1, encapType 0, headerLen 0

[FAP1] xtmCreateDevice : devId 1, encapType 0, headerLen 0

device atm_iptv1 entered promiscuous mode

bridge_aiptv: port 1(atm_iptv1) entering forwarding state

bcmxtmrt: MAC address: 00 10 18 00 00 04

[DoCreateDeviceReq.3006]: register_netdev

[DoCreateDeviceReq.3008]: register_netdev done

[FAP0] xtmCreateDevice : devId 2, encapType 0, headerLen 0

[FAP1] xtmCreateDevice : devId 2, encapType 0, headerLen 0

device atm_iptv2 entered promiscuous mode

bridge_aiptv: port 2(atm_iptv2) entering forwarding state

bcmxtmrt: MAC address: 00 10 18 00 00 05

[DoCreateDeviceReq.3006]: register_netdev

*********************** Starting script /etc/rc1.d/S24resolvd at: 36.10 0.00
Resolv daemon start ...
[DoCreateDeviceReq.3008]: register_netdev done

[FAP0] xtmCreateDevice : devId 3, encapType 0, headerLen 0

[FAP1] xtmCreateDevice : devId 3, encapType 0, headerLen 0

device atm_iptv3 entered promiscuous mode

bridge_aiptv: port 3(atm_iptv3) entering forwarding state

bcmxtmrt: MAC address: 00 10 18 00 00 06

[DoCreateDeviceReq.3006]: register_netdev

[DoCreateDeviceReq.3008]: register_netdev done

[FAP0] xtmCreateDevice : devId 4, encapType 0, headerLen 0

[FAP1] xtmCreateDevice : devId 4, encapType 0, headerLen 0

*********************** Starting script /etc/rc1.d/S25dnsplugin at: 36.43 0.00
device vvlan_iptv1 entered promiscuous mode

device ptm0 entered promiscuous mode

bridge_vviptv: port 1(vvlan_iptv1) entering forwarding state

dnsmasq already stopped...
dnsmasq start ...
device vvlan_iptv2 entered promiscuous mode

bridge_vviptv: port 2(vvlan_iptv2) entering forwarding state

*********************** Starting script /etc/rc1.d/S28dhcpv6server at: 37.23 0.00
*********************** Starting script /etc/rc1.d/S29dslite at: 37.45 0.00
*********************** Starting script /etc/rc1.d/S40nlplugd at: 37.63 0.00
nlplugd start ...
Initializing.

Starting netlink plugin

Daemonize netlink plugin



*********************** Starting script /etc/rc1.d/S420fuse at: 37.73 0.00
Fuse filesystem already available.
Line 0: xDSL G.994 training

message received before monitor task is initialized kerSysSendtoMonitorTask 

Mounting fuse control filesystem.
*********************** Starting script /etc/rc1.d/S42usb-host at: 37.80 0.00
Starting usbmgr
*********************** Starting script /etc/rc1.d/S44igmpsnooping at: 38.09 0.00
*********************** Starting script /etc/rc1.d/S45dhccd at: 38.66 0.00
dhccd start ...
Broadcom Packet Flow Cache Learning of multicast flows IPv4<ENABLED> IPv6<DISABLED>



Daemonize dhccd



*********************** Starting script /etc/rc1.d/S50deviceinfo at: 38.99 0.00
Starting deviceinfo plugin
*********************** Starting script /etc/rc1.d/S50wld_bcm at: 39.11 0.00
device wl0 left promiscuous mode

bridge: port 1(wl0) entering disabled state

*********************** Starting script /etc/rc1.d/S55lanled at: 39.88 0.00
*********************** Starting script /etc/rc1.d/S70stopload at: 40.20 0.00
Wait until configuration load reaches phase 10 (now -1)
device wl0 entered promiscuous mode

appbox: start loading after [ 11020ms ]

Wait until configuration load reaches phase 10 (now 4)
appbox: end loading

*********************** Starting script /etc/rc1.d/S71mbusmap at: 42.30 0.00
Starting mbus mapper
device wl0.1 entered promiscuous mode

PPP
PPP.Scan


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL

*********************** Starting script /etc/rc1.d/S71start_wlan at: 43.19 0.00
*********************** Starting script /etc/rc1.d/S72nemo-extensions2 at: 43.24 0.00
*********************** Starting script /etc/rc1.d/S72netmodeconfig2 at: 43.64 0.00
ADDRCONF(NETDEV_UP): ppp_data: link is not ready

eth0 (switch port: 2) Link UP 100 mbps full duplex

message received before monitor task is initialized kerSysSendtoMonitorTask 

bridge: port 2(eth0) entering forwarding state


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL

message received before monitor task is initialized kerSysSendtoMonitorTask 


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL

add_trigger: type(0), data(0)


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL

add_trigger: type(1), data(0)


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL

add_trigger: type(0), data(0)

add_trigger: type(1), data(0)


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL

ADDRCONF(NETDEV_UP): ppp_data: link is not ready

device eth1 left promiscuous mode

bridge: port 3(eth1) entering disabled state

device eth1 entered promiscuous mode

device eth1 left promiscuous mode

bridge_vviptv: port 3(eth1) entering disabled state

device eth1 entered promiscuous mode

device eth1 left promiscuous mode

bridge: port 3(eth1) entering disabled state

device eth1 entered promiscuous mode

Broadcom Packet Flow Cache Learning of multicast flows IPv4<DISABLED> IPv6<DISABLED>



*********************** Starting script /etc/rc1.d/S73eventmanager at: 47.60 0.00
Starting pcb eventmanager
Broadcom Packet Flow Cache Learning of multicast flows IPv4<ENABLED> IPv6<DISABLED>



*********************** Starting script /etc/rc1.d/S73httpd at: 48.04 0.00
Starting http server
message received before monitor task is initialized kerSysSendtoMonitorTask 

Starting httpd watchdog
warning: `httpd' uses 32-bit capabilities (legacy support in use)

*********************** Starting script /etc/rc1.d/S74devdiscd at: 49.67 0.00
Line 0: VDSL G.993 started

message received before monitor task is initialized kerSysSendtoMonitorTask 

*********************** Starting script /etc/rc1.d/S75captiveportal at: 50.44 0.00
bridge_aiptv: port 1(atm_iptv1) entering forwarding state

bridge_aiptv: port 2(atm_iptv2) entering forwarding state

bridge_aiptv: port 3(atm_iptv3) entering forwarding state

*********************** Starting script /etc/rc1.d/S76pwrledstop at: 51.49 0.00
pwrledstart stop ...


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL

*********************** Starting script /etc/rc1.d/S78dyndns at: 51.70 0.00
bridge_vviptv: port 1(vvlan_iptv1) entering forwarding state

Starting dyndns plug-in
bridge_vviptv: port 2(vvlan_iptv2) entering forwarding state

*********************** Starting script /etc/rc1.d/S78openntpd_plugin at: 52.33 0.00
Starting openntpd plugin
*********************** Starting script /etc/rc1.d/S80telnetd at: 52.90 0.00
telnetd start ...
open telnet in the firewall ...
*********************** Starting script /etc/rc1.d/S81phonebook_plugin at: 53.04 0.00
Starting phonebook_plugin plugin
*********************** Starting script /etc/rc1.d/S81voicecfgload at: 53.38 0.00
Restoring voice datamodel from file
 Done! Configuration restored using the backup configuration
*********************** Starting script /etc/rc1.d/S82voipapp at: 53.63 0.00
voice_storage-definition.odl:741: warning: Unable to resolve function cfg_constraint_AllowHeader from this binary
VoiceCmdVoicePlugin
VoiceCmdVoicePlugin.Plugin
*********************** Starting script /etc/rc1.d/S83igd at: 59.65 0.00
Starting pcb igd mapper
Line 0: VDSL2 link up, Bearer 0, us=6744, ds=40014

message received before monitor task is initialized kerSysSendtoMonitorTask 

bcmxtmcfg: XTM Link Information, port = 0, State = UP, Service Support = PTM 

bcmxtmcfg: Reinitialize port 0 traffictype 2 

bcmxtmcfg: Normal(XTM/PTM) Mode enabled 

bcmxtmcfg: Reserve PTM vcid=0 ptmPri=1 port=0 bondingPort=4

bcmxtmcfg: Reserve TxQueueIdx=0

bcmxtmcfg: Reserve MP group=0 priority=0 weight=1

[FAP0] xtmLinkUp : devId 4, matchId 0

[FAP1] xtmLinkUp : devId 4, matchId 0

XTM Init: Ch:0 - 400 tx BDs at 0xa39b0000

bcmxtmcfg: Connection UP, LinkActiveStatus=0x1, US=6744000, DS=40014000 

bridge: port 2(eth0) entering forwarding state

*********************** Starting script /etc/rc1.d/S83voipaad at: 61.49 0.00
*********************** Starting script /etc/rc1.d/S85scheduler at: 61.91 0.00
Starting Scheduler plug-in


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL

*********************** Starting script /etc/rc1.d/S87usbhosts at: 62.23 0.00
Starting usbhosts plug-in
*********************** Starting script /etc/rc1.d/S89usb_modeswitch_boot at: 62.41 0.00
*********************** Starting script /etc/rc1.d/S90dlnaserver at: 62.61 0.00
*********************** Starting script /etc/rc1.d/S90tod at: 62.73 0.00
Starting ToD plug-in
*********************** Starting script /etc/rc1.d/S90wlanscheduler at: 62.93 0.00
*********************** Starting script /etc/rc1.d/S91cups at: 63.10 0.00
*********************** Starting script /etc/rc1.d/S98avahi at: 63.32 0.00
*********************** Starting script /etc/rc1.d/S98cwmp at: 64.20 0.00
*********************** Starting script /etc/rc1.d/S98remoteaccess at: 64.98 0.00
Starting remote access plug-in
*********************** Starting script /etc/rc1.d/S98upgraded at: 65.30 0.00
*********************** Starting script /etc/rc1.d/S98wifi-community at: 65.70 0.00


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL

bcmxtmcfg: Reserve TxQueueIdx=1

XTM Init: Ch:1 - 400 tx BDs at 0xa3b6e000

bcmxtmcfg: Reserve TxQueueIdx=2

XTM Init: Ch:2 - 400 tx BDs at 0xa3bae000

bcmxtmcfg: Reserve TxQueueIdx=3

XTM Init: Ch:3 - 400 tx BDs at 0xa3ab8000

bcmxtmcfg: Reserve TxQueueIdx=4

XTM Init: Ch:4 - 400 tx BDs at 0xa3aba000

bcmxtmcfg: Reserve TxQueueIdx=5

XTM Init: Ch:5 - 400 tx BDs at 0xa3abc000


 in kernel led_ioctl 

    led_ioctl BOARD_IOCTL_LED_CTRL

*********************** Starting script /etc/rc1.d/S99cifscl at: 66.12 0.00
*********************** Starting script /etc/rc1.d/S99conmon at: 66.40 0.00
*********************** Starting script /etc/rc1.d/S99dummy_ep at: 66.53 0.00
Start dummy endpointplugin ...
*********************** Starting script /etc/rc1.d/S99gwmonstart at: 66.63 0.00
Starting gwmonit
*********************** Starting script /etc/rc1.d/S99printkoff at: 66.72 0.00
Setting printk off
*********************** Starting script /etc/rc1.d/S99ravoice at: 66.82 0.00
Start Broadcom FXS plugin...
. Loading voice kernel modules
dect
modprobe: Module dect not found.
dectshim
modprobe: Module dectshim not found.
dspdd
modprobe: Module dspdd not found.
endpointdd
mknod: /dev/bcmendpoint0: File exists
. Starting pcb plugin
*********************** Starting script /etc/rc1.d/S99saveflush at: 69.30 0.00
*********************** Starting script /etc/rc1.d/S99storage at: 69.49 0.00
*********************** Starting script /etc/rc1.d/S99transfer_client at: 74.43 0.00
*********************** Starting script /etc/rc1.d/S99upnp-igd at: 74.83 0.00
*********************** Starting script /etc/rc1.d/S99upnpdiscd_plugin at: 75.91 0.00
Starting upnp discovery plugin
Sysinit done.

starting pid 1712, tty '': '/etc_ro_fs/init.d/rc.sysinit'
Mounting other filesystems ...
Switching to RUNLEVEL 1 ...
Sysinit done.

Please press Enter to activate this console. Starting to monitor the gatewayd process...
SysRq : HELP : loglevel(0-9) BRCM: show summary status on all CPUs(A) reBoot terminate-all-tasks(E) memory-full-oom-kill(F) kill-all-tasks(I) thaw-filesystems(J) show-backtrace-all-active-cpus(L) show-memory-usage(M) nice-all-RT-tasks(N) show-registers(P) show-all-timers(Q) Sync show-task-states(T) Unmount show-blocked-tasks(W) BRCM: show interrupt counts on all CPUs(Y) 

All commands are case insensitive.

PCB picture:
http://i.imgur.com/uv2P5P3.jpg

My primal goal is to enable bridge-mode on this box, but becouse heavy software limitation even Sagemcom support couln't help with that.

EDIT:
Here is pinouts for serial ports, both J709 J708 could be used as serial as they are connected. Don't know why they are doubled?
http://i.imgur.com/1m4uM88.jpg
One more question, Is it possible that console would behave differently if I will power up device via vcc pin?

Thanks in advance

(Last edited by tomatau on 4 May 2015, 15:04)

Maybe the
"sb3: sb3_wait_for_magic()" is the moment to press some kind of magic key to get to CFE enviroment?

IMHO it's clearly /etc/inittab which is broken (intentionally) to prevent logging in. If we find a way to fix it terminal might work.

Also: A very similiar bootlog: https://forum.openwrt.org/viewtopic.php … mp;login=1

Thank You for Your response

boskar wrote:

Maybe the
"sb3: sb3_wait_for_magic()" is the moment to press some kind of magic key to get to CFE enviroment?

Yes I've tried that, to be more specific after I pressed Ctrl+C or ESC(as I've read are probably keys to enter CFE prompt), console just respond with "Abort" message and continue to boot.

Using Sysrq I've found out that after pressing "enter" for a moment there are two init processes running..

[ pid ]   uid  tgid total_vm      rss cpu oom_adj name

[    1]     0     1      241       80   1       0 init

[  362]     0   362     1022      335   0       0 sysbus

[  469]     0   469      621      170   1       0 swmdk

[  502]     0   502      621      170   0       0 swmdk

[  503]     0   503      621      170   0       0 swmdk

[  548]     0   548      240       65   1       0 syslogd

[  556]     0   556     1260      238   1       0 usermngt

[  564]     0   564     1255      552   1       0 nemo-core

[  599]     0   599      807      323   0       0 netdev

[  608]     0   608      927      219   1       0 www-backend

[  633]     0   633     1169      463   1       0 firewall_plugin

[  642]     0   642     1894      854   0       0 gatewayd

[  644]     0   644     1894      854   0       0 gatewayd

[  646]     0   646     1894      854   0       0 gatewayd

[  647]     0   647     1894      854   0       0 gatewayd

[  648]     0   648     1894      854   0       0 gatewayd

[  650]     0   650     1894      854   0       0 gatewayd

[  651]     0   651     1894      854   0       0 gatewayd

[  652]     0   652     1894      854   0       0 gatewayd

[  653]     0   653     1894      854   0       0 gatewayd

[  654]     0   654     1894      854   0       0 gatewayd

[  662]     0   662      548      181   1       0 bcmeth

[  679]     0   679      574      195   1       0 bridge

[  682]     0   682      565      188   0       0 dhcpv6

[  685]     0   685      601      206   0       0 dsl

[  689]     0   689      567      197   1       0 vlan

[  691]     0   691      535      171   0       0 wwan

[  701]     0   701      591      209   0       0 xtm

[  719]     0   719      738      200   1       0 raplugin

[  726]     0   726      886      358   1       0 resolvd

[  727]     0   727      241       75   1       0 logger

[  738]     0   738      886      358   0       0 resolvd

[  739]     0   739      886      358   1       0 resolvd

[  741]     0   741      886      358   0       0 resolvd

[  743]     0   743      886      358   1       0 resolvd

[  744]     0   744      886      358   1       0 resolvd

[  758]     0   758      877      232   1       0 dnsplugin

[  768]     0   768      737      219   1       0 dhcpv6server

[  779]     0   779      552      171   1       0 dslite

[  787]     0   787      660      161   0       0 nlplugd

[  805]     0   805      557      240   1       0 usbmgr

[  809]     0   809      557      240   0       0 usbmgr

[  810]     0   810      557      240   0       0 usbmgr

[  819]     0   819      683      196   1       0 igmpsnoop_plugi

[  823]     0   823      858      283   1       0 igmpsnoopd

[  832]     0   832      858      283   0       0 igmpsnoopd

[  834]     0   834      858      283   1       0 igmpsnoopd

[  835]     0   835      858      283   1       0 igmpsnoopd

[  850]     0   850      766      240   1       0 dhccd

[  851]     0   851      766      240   1       0 dhccd

[  852]     0   852      766      240   0       0 dhccd

[  885]     0   885      825      232   1       0 deviceinfo_plug

[  894]     0   894      962      313   0       0 wld_bcm

[  921]     0   921      559      167   1       0 lanled

[  946]     0   946     1894      854   0       0 gatewayd

[  975]     0   975      839      319   0       0 grom

[ 1015]     0  1015     1096      382   0       0 netmodeconfig

[ 1123]     0  1123      706      191   1       0 eventmanager

[ 1217]   121  1217     1425      498   1       0 httpd

[ 1218]     0  1218      240       84   1       0 sh

[ 1220]     0  1220      241       94   0       0 S73httpd

[ 1233]     0  1233      938      291   1       0 devdisc_plugin

[ 1237]     0  1237      567      215   1       0 devdisc_client

[ 1264]     0  1264     1397      312   1       0 captiveportal

[ 1292]     0  1292      882      231   1       0 dyndns_plugin

[ 1322]     0  1322      885      262   0       0 openntpd_plugin

[ 1341]     0  1341      882      211   1       0 phonebook_plugi

[ 1363]     0  1363      519      203   1       0 pcb_sysbus

[ 1364]     0  1364     2855     1457   0       0 voipapp

[ 1381]     0  1381      688      212   0       0 wps_monitor

[ 1383]     0  1383      339       60   1       0 nas

[ 1385]     0  1385      324       39   0       0 eapd

[ 1390]     0  1390     2855     1457   1       0 voipapp

[ 1391]     0  1391     2855     1457   0       0 voipapp

[ 1397]     0  1397      346      109   0       0 acsd

[ 1405]     0  1405      860      384   0       0 igd_mapper

[ 1414]     0  1414     1426      309   1       0 voipaad_plugin

[ 1422]     0  1422      728      236   1       0 scheduler-plugi

[ 1432]     0  1432      722      240   1       0 usbhosts

[ 1477]     0  1477      242       91   0       0 dlna_monitor

[ 1490]     0  1490      892      203   1       0 tod-plugin

[ 1498]     0  1498      915      204   1       0 wlanscheduler-p

[ 1513]     0  1513      748      231   1       0 cups

[ 1522]     0  1522      522      313   0       0 cupsd

[ 1525]   104  1525      524      254   1       0 avahi-daemon

[ 1534]     0  1534      952      280   1       0 cwmp-plugin

[ 1535]     0  1535      727      248   1       0 ippingdiagnosti

[ 1538]     0  1538     1228      598   1       0 cwmpd

[ 1546]     0  1546      856      219   1       0 remoteaccess-pl

[ 1554]     0  1554      710      195   1       0 upgraded_plugin

[ 1557]     0  1557     1203      284   1       0 upgraded

[ 1571]     0  1571      776      212   1       0 wificom

[ 1585]     0  1585      906      245   1       0 cifscl

[ 1593]     0  1593      728      193   1       0 ConMon

[ 1606]     0  1606      241       90   1       0 sh

[ 1616]     0  1616      731      195   1       0 dummy_ep

[ 1630]     0  1630      765      304   1       0 bcm_fxs

[ 1637]     0  1637      765      304   0       0 aoRT

[ 1653]     0  1653      765      304   1       0 HTSK

[ 1658]     0  1658      765      304   1       0 HRTBEAT

[ 1659]     0  1659      765      304   0       0 VRGDISP

[ 1660]     0  1660      765      304   0       0 HCAS

[ 1661]     0  1661      765      304   1       0 ISTW

[ 1667]     0  1667      778      229   1       0 storage

[ 1676]     0  1676      512      176   1       0 transfer_client

[ 1677]   120  1677      986      450   1       0 smbd

[ 1678]   120  1678      517      303   1       0 nmbd

[ 1699]     0  1699      991      215   1       0 upnp-igd_plugin

[ 1705]   114  1705      882      338   1       0 upnpdiscd_plugi

[ 1737]    99  1737      270      114   0       0 dnsmasq

[ 1738]     0  1738      216      101   1       0 ntpd

[ 1739]   112  1739      217       92   1       0 ntpd

[ 1744]   114  1744      882      338   0       0 upnpdiscd_plugi

[ 1745]   114  1745      882      338   0       0 upnpdiscd_plugi

[ 1747]   114  1747      882      338   0       0 upnpdiscd_plugi

[ 1748]   114  1748      882      338   0       0 upnpdiscd_plugi

[ 1749]   114  1749      882      338   1       0 upnpdiscd_plugi

[ 1751]   114  1751      882      338   1       0 upnpdiscd_plugi

[ 1752]   114  1752      882      338   0       0 upnpdiscd_plugi

[ 1771]     0  1771      239       51   1       0 sleep

[ 1773]     0  1773      239       51   1       0 sleep

[ 1778]     0  1778      239       51   1       0 sleep

[ 1779]     0  1779      241       39   0       0 init



starting pid 17
process '-/bin/login' (pid 1779) exited. Scheduling for restart.

Please press Enter to activate this console. 

One proper with pid 1 on CPU 1 and second on a CPU 0 which is starting after pressing enter.
Serial interrupts seems to be handled only by 1 CPU but I don't know if there is a connection with the problem.

SysRq: intr handled on CPU 1

SysRq : Interrupt Counts

           CPU0       CPU1       

  0:      51344      59833  BCM63xx               IPI(0x420)

  7:     240629     209499  BCM63xx               timer(0x420)

 13:          0        541  BCM63xx_no_unmask     serial(0x60)

 15:        236          0  BCM63xx_no_unmask     brcm_15(0x60)

 17:          1          0  BCM63xx               ohci_hcd:usb2(0x80)

 18:          1          0  BCM63xx               ehci_hcd:usb1(0x80)

 21:          3          0  BCM63xx_no_unmask     brcm_21(0x60)

 22:          0          0  BCM63xx_no_unmask     brcm_22(0x60)

 31:       6124          0  BCM63xx_no_unmask     brcm_31(0x60)

 32:        358          0  BCM63xx_no_unmask     brcm_32(0x60)

 33:        400          0  BCM63xx_no_unmask     brcm_33(0x60)

 39:          0          0  BCM63xx_no_unmask     brcm_39(0x60)

 50:          0      27411  BCM63xx               voip(0x40)


ERR:          0

To be honest I've abandoned this device and I bought different one which can work as PPPoE bridge. But if there will be some ideas I can pull apart this sagem again and test.

The discussion might have continued from here.