OpenWrt Forum Archive

Topic: Boot log from the Linksys EA6300v1/EA6400

The content of this topic has been archived on 15 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Zajec wrote:

1) Get serial console access
2) Grab boot log using original firmware (or DD-WRT if it exists)
3) Grab output of "nvram show | grep gpio"
4) Create forum thread providing above logs

(Original post. Related.)

Here's what I have so far: The serial port connects to the white 2mm pitch molex-like connector already soldered onto the board. The pinout is as follows:

1 VCC probably
2 ?
3 TXD
4 ?
5 RXD
6 GND

The serial port speed is 115200 baud. At least, 115200 baud worked where 9600 baud didn't. After I got the port working, I didn't test any other speeds.

The router won't boot if the serial cable is attached to the router before it's turned on. (Is there a fix for this?) So to capture the whole output, I had to turn the router on first, then connect the cable, wait for it to boot, log in, reboot, and capture the whole boot sequence from the very beginning. Here it is:

Decompressing...done
Found a AMD NAND flash:
Total size:  128MB
Block size:  128KB
Page Size:   2048B
OOB Size:    64B
Sector size: 512B
Spare size:  16B
ECC level:   8-bit
Device ID: 0x01 0xf1 0x00 0x1d 0x01


CFE version 6.39.163.14 (r374748) based on BBP 1.0.37 for BCM947XX (32bit,SP,)
Build Date: Mon Feb 18 09:36:10 CST 2013 (mike@localhost.localdomain)
Copyright (C) 2000-2008 Broadcom Corporation.

Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
DDR Clock: 333 MHz
Info: DDR frequency set from clkfreq=800,*333*
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.39.163.14 (r374748)
CPU type 0x0: 800MHz
Tot mem: 131072 KBytes

CFE mem:    0x00F00000 - 0x0109DC8C (1694860)
Data:       0x00F5636C - 0x00F56830 (1220)
BSS:        0x00F56840 - 0x00F9BC8C (283724)
Heap:       0x00F9BC8C - 0x0109BC8C (1048576)
Stack:      0x0109BC8C - 0x0109DC8C (8192)
Text:       0x00F00000 - 0x00F4AFA4 (307108)
Boot:       0x0109E000 - 0x010DE000
Reloc:      I:00000000 - D:00000000

Boot version: v1.0.8

Device eth0:  hwaddr 48-F8-B3-65-D5-79, ipaddr 192.168.1.1, mask 255.255.255.0
        gateway not set, nameserver not set
Loader:raw Filesys:tftp Dev:eth0 File:: Options:(null)
Loading: Failed.
Could not load :: Timeout occured
Booting(0): boot -raw -z -addr=0x8000 -max=0xef8000 nflash0.os:
Loader:raw Filesys:raw Dev:nflash0.os File: Options:(null)
Loading: ..... 5494368 bytes read
Entry at 0x00008000
Closing network.
Starting program at 0x00008000
console [ttyS0] enabled, bootconsole disabled
serial8250.0: ttyS1 at MMIO 0x18000400 (irq = 117) is a 16550
brd: module loaded
loop: module loaded
pflash: found no supported devices
bcmsflash: found no supported devices
The first offset=200000, 2nd offset=1f00000
Boot partition size = 524288(0x80000)
lookup_nflash_rootfs_offset: offset = 0x200000
nflash: squash filesystem with lzma found at block 33
lookup_nflash_rootfs_offset: offset = 0x1f00000
nflash: squash filesystem with lzma found at block 262
Creating 6 MTD partitions on "nflash":
0x000000000000-0x000000080000 : "boot"
0x000000080000-0x000000200000 : "nvram"
0x000000200000-0x000001f00000 : "linux"
0x000000436430-0x000001f00000 : "rootfs"
0x000001f00000-0x000003c00000 : "linux2"
0x0000020d364c-0x000003c00000 : "rootfs2"
PPP generic driver version 2.4.2
PPP MPPE Compression module registered
NET: Registered protocol family 24
PPTP driver version 0.8.5
SLIP: version 0.8.4-NET3.019-NEWTTY (dynamic channels, max=256).
CSLIP: code copyright 1989 Regents of the University of California.
sdhci: Secure Digital Host Controller Interface driver
sdhci: Copyright(c) Pierre Ossman
u32 classifier
    Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (1940 buckets, 7760 max)
ctnetlink v0.93: registering with nfnetlink.
nf_conntrack_rtsp v0.6.21 loading
IPv4 over IPv4 tunneling driver
nf_nat_rtsp v0.6.21 loading
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP cubic registered
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
Bridge firewalling registered
Ebtables v2.0 registered
L2TP core driver, V2.0
PPPoL2TP kernel driver, V2.0
L2TP IP encapsulation support (L2TPv3)
L2TP netlink interface
L2TP ethernet pseudowire support (L2TPv3)
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
Northstar brcmnand NAND Flash Controller driver, Version 0.1 (c) Broadcom Inc. 2012
NAND device: Manufacturer ID: 0x01, Chip ID: 0xf1 (AMD NAND 128MiB 3,3V 8-bit)
Spare area=64 eccbytes 56, ecc bytes located at:
 2 3 4 5 6 7 8 9 10 11 12 13 14 15 18 19 20 21 22 23 24 25 26 27 28 29 30 31 34 35 36 37 38 39 40 41 42 43 44 45 46 47 50 51 52 53 54 55 56 57 58 59 60 61 62 63
Available 7 bytes at (off,len):
(1,1) (16,2) (32,2) (48,2) (0,0) (0,0) (0,0) (0,0)
Scanning device for bad blocks
Bad eraseblock 847 at 0x0000069e0000
Options: NO_AUTOINCR,NO_READRDY,BBT_SCAN2NDPAGE,
Creating 1 MTD partitions on "brcmnand":
0x000003c00000-0x000008000000 : "brcmnand"
VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
devtmpfs: mounted
Freeing init memory: 232K
Failed to execute /sbin/preinit.  Attempting defaults...
*********************************************************************************
              _        _  __    _    __ _____ __   __ _____
             | |      | ||  \  | |  / // ____]\ \ / // ____]TM
             | |      | ||   \ | | / /| (___   \ V /| (____
             | |      | || |\ \| |\ \  \____ \  \ /  \____ \
             | |_____ | || | \   | \ \  ____) | | |   ____) |
             |_______||_||_|  \__|  \_\[____ /  |_|  [_____/

 (c) 2013 Belkin International, Inc. and/or its affiliates. All rights reserved.
 Booting esprit (firmware version 1.1.40.160989)
*********************************************************************************
[utopia][init] System Initialization
[utopia][init] Creating /proc
[utopia][init] Creating /sys
[utopia][init] Creating /dev
[utopia][init] Creating /tmp
[utopia][init] Allocating 40M for /tmp
[utopia][init] Prepairing /dev/pts
[utopia][init] Setting /tmp and /var permissions
[utopia][init] Starting udev..
bdutil board utility kernel module, version 1.3
bdutil board utility kernel module boardId (1)
bdutil board utility buttons kernel module, version 1.3
bdutil board utility LEDs kernel module, version 1.3
bdutil board utility usbhub kernel module, version 1.1
[utopia][init] Using persistent syscfg data from /var/config/syscfg
[utopia][init] Starting system logging
[utopia][init] Starting sysevent subsystem
[utopia][init] Setting any unset system values to default
[utopia][init] no persistence config file (/var/config/pstcfg) found
[utopia][init] Late loading usb drivers
inserting ctf.ko
checking for interactive script start up...
0xb000000 0x1000000
0xc000000 0x1000000
0xd000000 0x1000000
0xe000000 0x1000000
0xf000000 0x1000000
0x10000000 0x1000000
0x11000000 0x1000000
0x12000000 0x1000000
0x13000000 0x1000000
0x14000000 0x1000000
0x15000000 0x1000000
0x16000000 0x1000000
0x17000000 0x1000000
0x18000000 0x1000000
[utopia][init] Starting bdutil daemon
attempting to sync sysinfo.cgi auth credentials
BDUTIL daemon mode
Sat Jul 28 17:10:00 UTC 2012

(none) login: 0x17010000 0x1000000
0x18010000 0x1000000
wifi, sysevent received: lan-started
wifi, service_start()
wifi_scheduler, sysevent received (Sat Jul 28 10:10:05 PDT 2012)
Lighttpd Model Base: EA6300
Generating Rainier lighttpd config
Build temporary www configuration directory:
wifi, system_boot_init
TSLIIHauhEfGE
Device is Broadcom Router
Invalid instance identifier br0

Invalid instance identifier br0

Registering Service myrouter._http._tcp.local port 80
wifi, platform_virtual_onetime_setting()
Got a reply for myrouter._http._tcp.local.: Name now registered and active
[utopia] Not setting ppp_clamp_mtu
Restarting nfqrecv service...
Failed to modify password entry for user guest
eth1: WLC_GET_VAR(psta_if): Invalid argument
wl0.2: WLC_GET_VAR(psta_if): Invalid argument
eth1: WLC_GET_VAR(psta_if): Invalid argument

### wps_wfi_init(): <wl0_wfi_enable=(null)><wl1_wfi_enable=(null)><wl0.2_wfi_enable=(null)><wl0.1_wfi_enable=(null)>WFI is not enabled ###
wifi, user vap eth1 is up
wifi, user vap eth2 is up
wifi, Tap Connect is up
wifi, guest_enabled is set to 0, do not enable 2.4GHz guest
wifi, guest_enabled is set to 0, do not enable 5GHz guest
[utopia] Not setting ppp_clamp_mtu on dslite protocol
Failed to modify password entry for user guest
Failed to modify password entry for user guest
Starting smbd ...

The boot log says EA6300, but the hardware really is an EA6400. Apparently, the first EA6300 routers released (EA6300v1) were all actually EA6400 routers.  Here's the output of nvram show | grep gpio:

~ # nvram show | grep gpio
reset_gpio=11
gpio7=wps_button
size: 6753 bytes (58783 left)
gpio10=usbport2
~ # 

That had to be run as root---not admin.  They are two distinct users and admin didn't have the privileges. So, my login was user root, password admin.

I hope that helps, Zajec. Sorry it took so long. The first UART I accidentally fried with a power surge from a temperamental USB cable, and the second one took two weeks to ship. I guess I should have gotten two, like you suggested. smile If there are any other commands whose output you'd like to see, just let me know.

(Last edited by ewtoombs on 28 Jul 2015, 10:03)

My apologies for hijacking this thread but is there any way I can load OpenWrt onto the EA6300/EA6400?

Is there anything I could do to help with this process?

gyrex wrote:

Is there anything I could do to help with this process?

In my post above yours there is a TODO list. What's unclear about that?

gyrex wrote:

My apologies for hijacking this thread but is there any way I can load OpenWrt onto the EA6300/EA6400?

Is there anything I could do to help with this process?

Preliminary support has been added to the development branch. You can test the current build here:

http://downloads.openwrt.org/snapshots/ … x/generic/

You can try installing through the default firmware's upgrade interface. Failing that, you can attach to the router's serial port using the pinout I wrote in the first post and flash the image using the recovery console over tftp.

Anyway, the answer is yes, it can be done, but it's in beta and you'll be testing.

ewtoombs wrote:

You can try installing through the default firmware's upgrade interface. Failing that, you can attach to the router's serial port using the pinout I wrote in the first post and flash the image using the recovery console over tftp.

Anyway, the answer is yes, it can be done, but it's in beta and you'll be testing.

Happy to beta test! I'll load it on and provide feedback - I'm currently running dd-wrt but this lacks ncm support of Huawei 4g dangles and wanted to run a 3.18 kernel. Thanks for your reply smile

gyrex wrote:

Happy to beta test! I'll load it on and provide feedback - I'm currently running dd-wrt but this lacks ncm support of Huawei 4g dangles and wanted to run a 3.18 kernel. Thanks for your reply smile

You might like to read this too:

https://dev.openwrt.org/ticket/20280

More information on the system along with what happened last time I tried putting openwrt on it.

Hi !

I've installed the openwrt prx through the stock firmware and now I got nothing.... Only 192.168.1.1 is pinging but no port is open.

I've tried to TFTP using recovery utilities from Linksys or from ASUS with no success.

I've connected a FTDI serial adaptor connecting GND/TX/RX to my computer but I get only garbage messages like :

¨¨HM!!!% !(%!)% ) )"!$)$
                        R$¢,KJR±!! "$!!) !" $)1)
                                                $RV"%""!HQIJHYHHM³!"d

                                                                     R$¢$IJY±!! ",!#) #& $i+
            ff$a( CRA ah%!) "!)$%$!

                                        ¨HHE!!a% !(%!)% ) )"!$)$
                                                                ""$!( ARA !(%!) "a)$%$!
       B!4( )-!a% "!$!!!
                        ABE

Any help would be appreciated...

Finally ! Had reversed TX and RX now I have :

Decompressing...done
Found a AMD NAND flash:
Total size:  128MB
Block size:  128KB
Page Size:   2048B
OOB Size:    64B
Sector size: 512B
Spare size:  16B
ECC level:   8-bit
Device ID: 0x01 0xf1 0x00 0x1d 0x01


CFE version 6.39.163.14 (r374748) based on BBP 1.0.37 for BCM947XX (32bit,SP,)
Build Date: Mon Feb 18 09:36:10 CST 2013 (mike@localhost.localdomain)
Copyright (C) 2000-2008 Broadcom Corporation.

Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
DDR Clock: 333 MHz
Info: DDR frequency set from clkfreq=800,*333*
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.39.163.14 (r374748)
CPU type 0x0: 800MHz
Tot mem: 131072 KBytes

CFE mem:    0x00F00000 - 0x0109DC8C (1694860)
Data:       0x00F5636C - 0x00F56830 (1220)
BSS:        0x00F56840 - 0x00F9BC8C (283724)
Heap:       0x00F9BC8C - 0x0109BC8C (1048576)
Stack:      0x0109BC8C - 0x0109DC8C (8192)
Text:       0x00F00000 - 0x00F4AFA4 (307108)
Boot:       0x0109E000 - 0x010DE000
Reloc:      I:00000000 - D:00000000

Boot version: v1.0.8

Device eth0:  hwaddr C8-D7-19-45-2D-89, ipaddr 192.168.1.1, mask 255.255.255.0
        gateway not set, nameserver not set
Boot program checksum is invalid
Invalid boot block on disk
flash0.0: Device not found
Changed to the other image 0 (maxpartialboots exceeded)
Boot program checksum is invalid
nflash1.trx CRC check failed!
Invalid boot block on disk
nflash1.trx2 CRC check failed!
Both images bad!!!

hoani: You can flash from the CFE through tftp without a problem. Help for all commands is available through the 'help' command. Basically, you'll want to list all partitions with a 'show devices' command or something similar, then when you've found the right partition, flash from tftp with the flash command. Set up a tftp server on your computer, give your computer a static IP address on the 192.168.1.0/24 network, and connect using an ethernet cable. You'll probably have to disable checks in the flash command. The switch is --noheader, I think. This is all from memory. I don't have access to my notes or my hardware right now, since I'm travelling, so anything in the CFE help contradicting what I have said takes precedence. Check out the links I posted earlier for more information, like the default partition table.

Hi,

Using CFE, I forced the flash of the default openwrt trx to nflash0 wich lead to a totally bricked device... no more pingable 192.168.1.1 IP.

Tried everything through the eth ports with no success.

After some searching, I decided to go with my Raspberry Pi and its GPIO to act like a JTAG adapter.

I compiled tjtag-pi, openocd and urjtag but every tools or commands lead to a deadend... The BCM4708 of the 6300v1 is undocumented (I wasn't able to find any datasheet of this component) and the JTAG command are obscure. IR length of 64 !

The CPU ID is 0x202BF17F. 17F is the code for Broadcom, but 202BF ??? Usually, it's the CPU identifier used and should be 0x0470817F... There's something that has been customized by Linksys ?

For your information, I used the Linksys JTAG port and the ARM-STD JTAG port with the same results.

The Linksys JTAG port is similar to the WRT54G one, just check where are the GND pins to find out the rest.

As a bonus, here is a picture of my setup before I gave up.... until someone finds out how to get into the BCM4708 with JTAG :

http://s29.postimg.org/b87nbr8yv/IMG_20151225_000908.jpg

(Last edited by hoani on 25 Dec 2015, 22:38)

So it looks like flashing the CFE eliminated most of the problems with  DD WRT. Has anyone tried running OpenWr using a modified CFE?

(Last edited by OpenWWWrt on 17 Feb 2016, 23:39)

hoani wrote:

Using CFE, I forced the flash of the default openwrt trx to nflash0 wich lead to a totally bricked device... no more pingable 192.168.1.1 IP.

If you flashed directly to nflash and not something like flash1.trx or similar, you overwrote CFE with a TRX.

But I guess you already realized that neutral

Hi guys!
Has anyone installed this ROM open-wrt already?
I installed, but the USB port is not working. No power on port.
Does it work at somebody?

If ping can do, then tftp server is started at boot time and can be downloaded stock firmware. Find linksys tftp-client and use it.

No, no. This is possible. You have stock CFE, it stayed. It have linksys tftp-server. When the router starts, LED begins to turn on / off, at this time the tftp-server waits for downloading firmware. It is necessary to have time at this time of the firmware file to transfer.

Zajec wrote:
hoani wrote:

Using CFE, I forced the flash of the default openwrt trx to nflash0 wich lead to a totally bricked device... no more pingable 192.168.1.1 IP.

If you flashed directly to nflash and not something like flash1.trx or similar, you overwrote CFE with a TRX.

But I guess you already realized that neutral


Really, I bricked my router EA6400 same as MR.HOANI, I have tried to unbrick it for 2 days and now it can getback to original firmware.
steps:
use tftpd32 server, put openwrt in tftpd32's folder and flash onto nflash1.trx with commnad:
CFE>flash -noheader 192.168.1.2:openwrt.trx n1flash.trx (with 192.168.1.2 is tftp server).
Hope this can help somebody when needed.
Regards

XNMEPA wrote:

Hi guys!
Has anyone installed this ROM open-wrt already?
I installed, but the USB port is not working. No power on port.
Does it work at somebody?

@XNMEPA : you can flash OpenWRT on this router with trunk version but you must exchange wireless 5Ghz is not able to work.

(Last edited by hongdat1106 on 28 Jun 2016, 10:52)

For 5GHz you must install additional module. But I do not need a radio. I need a USB. But the USB port is not working.

So is OpenWRT working fine on EA6300? Is it possible to install from stock version?

I have not tested for a long time. USB is not able to work. It may already be fixed. Try it and tell us.

I've flashed my EA6400 yesterday with trunk version but it didn't work for me. hmm

What does not work?

No response at all. I've installed xvortex CFE + dd-wrt first. Then downloaded openwrt and flashed it from shell just like I did with dd-wrt. Rebooted and it didn't return. Unfortunately I can't open router to attach serial to see what was the reason. sad Anyway I'll stick to dd-wrt for a while but I hope to reflash it with openwrt someday.

Openwrt work only with stock CFE.

The discussion might have continued from here.