NETGEAR WNDR3700 Runs WRT

Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Atheros WiSOC based Hardware
Author Message
bluegrass
DD-WRT Novice


Joined: 18 Sep 2009
Posts: 1

PostPosted: Fri Sep 18, 2009 21:35    Post subject: NETGEAR WNDR3700 Runs WRT Reply with quote
Check out this! A fellow has posted the boot log of the WNDR3700.

http://forums.smallnetbuilder.com/showthread.php?p=13002#post13002
Sponsor
rushtrader
DD-WRT Novice


Joined: 07 Jun 2009
Posts: 3

PostPosted: Mon Sep 21, 2009 11:15    Post subject: Reply with quote
Here is a boot log sent to me in the openwrt forums of a WNDR3700 running openwrt:

Code:

U-Boot 1.1.4DNI1.6 (May 22 2009 - 16:37:44)

WNDR3700U (ar7100) U-boot 0.0.12
DRAM:  b8050000: 0xc0140180
64 MB
Top of RAM usable for U-Boot at: 84000000
Reserving 315k for U-Boot at: 83fb0000
Reserving 192k for malloc() at: 83f80000
Reserving 44 Bytes for Board Info at: 83f7ffd4
Reserving 36 Bytes for Global Data at: 83f7ffb0
Reserving 128k for boot params() at: 83f5ffb0
Stack Pointer at: 83f5ff98
Now running in RAM - U-Boot at: 83fb0000
id read 0x100000ff
flash size 8MB, sector count = 128
Flash:  8 MB
*** Warning - bad CRC, using default environment

In:    serial
Out:   serial
Err:   serial
Net:   ag7100_enet_initialize...
CHH:mac: 0 if: 2
CHH:mac:verify: 0 if: 00000002
: cfg1 0xf cfg2 0x7014
eth0: 00:24:XX:XX:XX:XX
eth0 up
CHH:mac: 1 if: 1
CHH:mac:verify: 1 if: 00000001
: cfg1 0xf cfg2 0x7014
eth1: 00:24:XX:XX:XX:XX
eth1 up
eth0, eth1
Trying eth0
: unit 0 phy is up...RGMii 1000Mbps full duplex
#259:ag7100_set_mac_from_link
: pll reg 0x18050010: 0x11110000
: cfg_1: 0x1ff0000
: cfg_2: 0x3ff
: cfg_3: 0x8001ff
: cfg_4: 0xffff
: cfg_5: 0xfffef
: done cfg2 0x7215 ifctl 0x40605060 miictrl 0x22

 Client starts...[Listening] for ADVERTISE...TTT
Retry count exceeded; boot the image as usual

 nmrp server is stopped or failed !
Hit any key to stop autoboot:  0
   Verifying Checksum ... OK
### SQUASHFS loading 'image/uImage' to 0x80800000
### SQUASHFS load complete: 939504 bytes loaded to 0x80800000
## Booting image at 80800000 ...
   Image Name:   Linux Kernel Image
   Created:      2009-08-26   9:29:14 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    939440 Bytes = 917.4 kB
   Load Address: 80002000
   Entry Point:  80297000
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80297000) ...
## Giving linux memsize in bytes, 67108864

Starting kernel ...

Linux version 2.6.15 (ronger@ronger-desktop) (gcc version 3.4.4 (OpenWrt-2.0)) #1 Wed Aug 26 17:29:04 CST 2009
flash_size passed from bootloader = 8
CPU revision is: 00019374
Determined physical RAM map:
 memory: 04000000 @ 00000000 (usable)
Built 1 zonelists
Kernel command line: console=ttyS0,115200 root=31:09 rootfstype=squashfs init=/etc/preinit mtdparts=ar7100-nor0:320k(uboot),128k(env),7296k(rootfs),64k(config),64k(config_bak),64k(pot),64k(traffic_meter),128k(language),64k(caldata),7471040@458816(mount_fs)
Primary instruction cache 64kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
Cache parity protection disabled
PID hash table entries: 512 (order: 9, 8192 bytes)
Using 340.000 MHz high precision timer.
Console: colour dummy device 80x25
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Memory: 61952k/65536k available (2151k kernel code, 3536k reserved, 488k data, 132k init, 0k highmem)
Mount-cache hash table entries: 512
Checking for 'wait' instruction...  available.
NET: Registered protocol family 16
WLAN ON/OFF button is pressed..
SCSI subsystem initialized
usbcore: registered new driver usbfs
usbcore: registered new driver hub
AR7100 GPIOC major 0
Initializing usb led semaphore
squashfs: version 3.0 (2006/03/15) Phillip Lougher
Initializing Cryptographic API
io scheduler noop registered
io scheduler deadline registered
Serial: 8250/16550 driver $Revision: #1 $ 4 ports, IRQ sharing disabled
serial8250.0: ttyS0 at MMIO 0x0 (irq = 19) is a 16550A
RAMDISK driver initialized: 1 RAM disks of 8192K size 1024 blocksize
10 cmdlinepart partitions found on MTD device ar7100-nor0
Creating 10 MTD partitions on "ar7100-nor0":
0x00000000-0x00050000 : "uboot"
0x00050000-0x00070000 : "env"
0x00070000-0x00790000 : "rootfs"
0x00790000-0x007a0000 : "config"
0x007a0000-0x007b0000 : "config_bak"
0x007b0000-0x007c0000 : "pot"
0x007c0000-0x007d0000 : "traffic_meter"
0x007d0000-0x007f0000 : "language"
0x007f0000-0x00800000 : "caldata"
0x00070040-0x00790000 : "mount_fs"
mtd: partition "mount_fs" doesn't start on an erase block boundary -- force read-only
10 Dec 2004 USB 2.0 'Enhanced' Host Controller (EHCI) Driver (AR7100_EHCI)
In ar7100_ehci_drv_probe
probing ehci...
hcd->regs is 0xbb000000
ehci->caps is 0xbb000000
ehci->caps->hc_base is 0x1000010
ar7100-ehci ar7100-ehci.0: AR7100 EHCI
ar7100-ehci ar7100-ehci.0: new USB bus registered, assigned bus number 1
ar7100-ehci ar7100-ehci.0: irq 3, io mem 0x1b000000
hcc_params addr 0xbb000008 val 0xa020 hcs_params addr 0xbb000004 val 0x1212
ar7100-ehci ar7100-ehci.0: USB 0.0 started, EHCI 1.00, driver 10 Dec 2004
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 2 ports detected
...probing done
2005 April 22 USB 1.1 'Open' Host Controller (OHCI) Driver (ar7100_ohci)block sizes: ed 64 td 64
In ohci_hcd_ar7100_drv_probeprobing...
ar7100-ohci ar7100-ohci.0: new USB bus registered, assigned bus number 2
ar7100-ohci ar7100-ohci.0: irq 22, io mem 0x1c000000
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 2 ports detected
probing done
Initializing USB Mass Storage driver...
usbcore: registered new driver usb-storage
USB Mass Storage support registered.
usbcore: registered new driver usbserial
drivers/usb/serial/usb-serial.c: USB Serial support registered for generic
usbcore: registered new driver usbserial_generic
drivers/usb/serial/usb-serial.c: USB Serial Driver core
u32 classifier
    Perfomance counters on
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 2, 16384 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
ip_conntrack version 2.4 (512 buckets, 4096 max) - 228 bytes per conntrack
ip_conntrack_rtsp v0.6.21 loading
ip_nat_rtsp v0.6.21 loading
ip_tables: (C) 2000-2002 Netfilter core team
IPP2P v0.8.2 loading
DNIFILTER loading
TCP bic registered
NET: Registered protocol family 1
NET: Registered protocol family 10
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
Ebtables v2.0 registered
ar7100wdt_init: Registering WDT success
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 132k freed
Warning: unable to open an initial console.
Algorithmics/MIPS FPU Emulator v1.5
init started:  BusyBox v1.4.2 (2009-08-26 17:05:42 CST) multi-call binary
Loading data from /dev/mtd/3 ...
The data configuration is Valid
The data center is Running ...
ipt_CONENAT: module license 'unspecified' taints kernel.
sed: /etc/modules.d/20-dnirtsp: No such file or directory
ip_conntrack_pptp version 3.1 loaded
ip_nat_pptp version 3.0 loaded
Generating Rules...
Done!
fuse init (API version 7.8)
fuse distribution version: 2.7.4
POT is Running...
POT is Finished!!!
The POT-(Get/Set) Demo is Running ...
sn:22R1985L00A2D
SN: 22R1985L00A2D
dni-qos module init at dev:eth1, real_dev:eth1
/home/ronger/release/wndr3700-35/build_mips/linux-2.6-wndr3700u/rtl8366s/switch-core.c #172:switch_init
/home/ronger/release/wndr3700-35/build_mips/linux-2.6-wndr3700u/rtl8366s/switch-core.c #177:switch_init
/home/ronger/release/wndr3700-35/build_mips/linux-2.6-wndr3700u/rtl8366s/switch-core.c #181:switch_init
/home/ronger/release/wndr3700-35/build_mips/linux-2.6-wndr3700u/rtl8366s/switch-core.c #201:switch_init
/home/ronger/release/wndr3700-35/build_mips/linux-2.6-wndr3700u/rtl8366s/switch-core.c #203:switch_init
/home/ronger/release/wndr3700-35/build_mips/linux-2.6-wndr3700u/rtl8366s/switch-core.c #210:switch_init init succeeds
AG7100: Length per segment 512
AG7100: Max segments per packet 4
AG7100: Max tx descriptor count    400
AG7100: Max rx descriptor count    252
AG7100: fifo cfg 3 018001ff
AG7100CHH: Mac address for unit 0
AG7100CHH: 00:24:XX:XX:XX:XX
AG7100CHH: Mac address for unit 1
AG7100CHH: 00:24:XX:XX:XX:XX
init the qos
NET-LAN: Default WAN MAC is : 00:24:XX:XX:XX:XX
AG7100: unsupported ioctl
device eth0 entered promiscuous mode
number of br ports=1
NET-LAN: Default LAN MAC is : 00:24:XX:XX:XX:XX
ag7100_ring_alloc Allocated 4800 at 0x83de8000
ag7100_ring_alloc Allocated 3024 at 0x83f7a000
CHH:mac:verify: 0 if: 00000002
AG7100: cfg1 0xf cfg2 0x7014
AG7100: unit 0 phy is up...RGMii 1000Mbps full duplex
AG7100#1000:ag7100_set_mac_from_link
AG7100: pll reg 0x18050010: 0x11110000
AG7100: cfg_1: 0x1ff0000
AG7100: cfg_2: 0x3ff
AG7100: cfg_3: 0x18001ff
AG7100: cfg_4: 0xffff
AG7100: cfg_5: 0xfffef
AG7100: done cfg2 0x7215 ifctl 0x0 miictrl 0x22
Writing 4
br0: port 1(eth0) entering learning state
br0: topology change detected, propagating
br0: port 1(eth0) entering forwarding state
/home/ronger/release/wndr3700-35/build_mips/linux-2.6-wndr3700u/kmod-ar7100-watchdog/watchdog.c #25:ar7100_reset_watchdog AR7100 HW watchdog enabled
udhcp server (v0.9.8) started
The attached devices demo is Running ...
killall: miniupnpd: no process killed
killall: utelnetd: no process killed
killall: telnetenable: no process killed
Jan  1 00:00:09 miniupnpd[969]: listening on 192.168.1.1:5555
The telnetenable is running ...
Deleting static route ... Done!
Adding static route ... Done!
ag7100_ring_alloc Allocated 4800 at 0x8394e000
ag7100_ring_alloc Allocated 3024 at 0x8394c000
CHH:mac:verify: 1 if: 00000000
AG7100: cfg1 0xf cfg2 0x7014
AG7100: unit 1: phy not up carrier 1
AG7100: WAN Rx Hang Detected 1 times!
Writing 6
ADDRCONF(NETDEV_UP): eth1: link is not ready
ag7100_ring_free Freeing at 0x8394e000
ag7100_ring_free Freeing at 0x8394c000
ag7100_ring_alloc Allocated 4800 at 0x8394e000
ag7100_ring_alloc Allocated 3024 at 0x8394c000
CHH:mac:verify: 1 if: 00000000
AG7100: cfg1 0xf cfg2 0x7014
Writing 6
ADDRCONF(NETDEV_UP): eth1: link is not ready
udhcp client (v0.9.8) started
traffic_meter config_update : killall: traffic_meter: no process killed
.
killall: ntpclient: no process killed
time zone index is : 0
Run NTP Client with setting: pri:time-g.netgear.com sec:time-h.netgear.com
Jan  1 00:00:15 miniupnpd[969]: received signal 15, good-bye
Jan  1 00:00:18 miniupnpd[1063]: listening on 192.168.1.1:5555
/etc/rc.d/rc.wlan: /etc/rc.d/rc.wlan: 56: uname: not found
Args: 1
ath_hal: 0.9.17.1 (AR5416, REGOPS_FUNC, WRITE_EEPROM, 11D)
wlan: 0.8.4.2 (Atheros/multi-bss)
ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved
insmod: ath_dfs.ko: no module by that name found
ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved
ath_pci: 0.9.4.5 (Atheros/multi-bss)
!!!!! SC Callback Registration for wifi0
wifi0: Atheros 9280: mem=0x10000000, irq=48 hw_base=0xb0000000
!!!!! SC Callback Registration for wifi1
wifi1: Atheros 9280: mem=0x10010000, irq=49 hw_base=0xb0010000
wlan: mac acl policy registered
wlan_me: Version 0.1
Copyright (c) 2008 Atheros Communications, Inc. All Rights Reserved
Creating ap for NETGEAR on
Added ath0 mode master
Interface doesn't accept private ioctl...
HALDbg (8BE0): Operation not permitted
The command noedgech needs exactly 1 argument(s)...
Invalid command : ampdumin
Created ath0 mode ap for NETGEAR
lo        no wirelAG7100: unsupported ioctl
AG7100: unsupported ioctl


sit0      no wireless extensions.

br0       no wireless extensions.

eth0      no wireless extensions.

eth1      no wireless extensions.

wifi0     no wireless extensions.

wifi1     no wireless extensions.

Modules already loaded
Creating ap for NETGEAR-5G on
Added ath1 mode master
Interface doesn't accept private ioctl...
HALDbg (8BE0): Operation not permitted
The command noedgech needs exactly 1 argument(s)...
Invalid command : ampdumin
Created ath1 mode ap for NETGEAR-5G
lo        no wirelAG7100: unsupported ioctl
AG7100: unsupported ioctl


sit0      no wireless extensions.

br0       no wireless extensions.

eth0      no wireless extensions.

eth1      no wireless extensions.

wifi0     no wireless extensions.

wifi1     no wireless extensions.

/etc/ath/activateVAP: /etc/ath/activateVAP: 62: uname: not found
lo        no wirelAG7100: unsupported ioctl
AG7100: unsupported ioctl


sit0      no wireless extensions.

br0       no wireless extensions.

eth0      no wireless extensions.

eth1      no wireless extensions.

wifi0     no wireless extensions.

wifi1     no wireless extensions.

device ath0 entered promiscuous mode
br0: port 2(ath0) entering learning state
br0: topology change detected, propagating
br0: port 2(ath0) entering forwarding state
number of br ports=2
/etc/ath/activateVAP: /etc/ath/activateVAP: 1: arping: not found
>>>>> WPS ENABLED, PSK
cat: /etc/wpa2/WSC_ath0.conf: No such file or directory
>>>>> WPS Translate, Index:0
/etc/ath/activateVAP: /etc/ath/activateVAP: 62: uname: not found
lo        no wirelAG7100: unsupported ioctl
AG7100: unsupported ioctl


sit0      no wireless extensions.

br0       no wireless extensions.

eth0      no wireless extensions.

eth1      no wireless extensions.

wifi0     no wireless extensions.

wifi1     no wireless extensions.

Country ie is DE
device ath1 entered promiscuous mode
br0: port 3(ath1) entering learning state
br0: topology change detected, propagating
br0: port 3(ath1) entering forwarding state
number of br ports=3
/etc/ath/activateVAP: /etc/ath/activateVAP: 1: arping: not found
>>>>> WPS ENABLED, PSK
cat: /etc/wpa2/WSC_ath1.conf: No such file or directory
>>>>> WPS Translate, Index:2
Making Topology File . . .
Reading topology file /var/run/topology.conf ...
Reading bss configuration file /etc/wpa2/WSC_ath0.conf ...

Reading bss configuration file /etc/wpa2/WSC_ath1.conf ...

br0: port 2(ath0) entering disabled state
br0: port 3(ath1) entering disabled state
l2_packet_receive - recvfrom: Network is down
Could not connect to kernel driver.
Using interface ath0 with hwaddr 00:24:XX:XX:XX:XX and ssid 'NETGEAR'
Country ie is DE
br0: port 2(ath0) entering learning state
br0: topology change detected, propagating
br0: port 2(ath0) entering forwarding state
upnp_wps_device_init called
l2_packet_receive - recvfrom: Network is down
Could not connect to kernel driver.
Using interface ath1 with hwaddr 00:24:XX:XX:XX:XX and ssid 'NECountry ie is DE
TGEAR-5G'
br0: port 3(ath1) entering learning state
br0: topology change detected, propagating
br0: port 3(ath1) entering forwarding state
upnp_wps_device_init called
Starting Firewall...
Done!
time zone index is : 0
Run NTP Client with setting: pri:time-g.netgear.com sec:time-h.netgear.com
dnsmasq: started, version 2.39 cachesize 150
dnsmasq: compile time options: IPv6 GNU-getopt ISC-leasefile no-DBus no-I18N no-TFTP
dnsmasq: using local addresses only for domain lan
dnsmasq: failed to access /tmp/dhcp.leases: No such file or directory
dnsmasq: no servers found in /tmp/resolv.conf, will retry
dnsmasq: cleared cache
killall: uhttpd: no process killed
checksum = 0xFF, len = 131072
There is not language table in flash or language table was broken!
gui_region = English
region = English, download_region =
 Update string table successfully, memory usage: 248KB.
The httpd server is running ...
Start utelnetd by telnetenable
killall: lld2d: no process killed
traffic_meter start : .
USB Storage daemon is Running ...
Boot up procedure is Finished!!!

Please press Enter to activate this console.


BusyBox v1.4.2 (2009-08-26 17:05:42 CST) Built-in shell (ash)
Enter 'help' for a list of built-in commands.

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 KAMIKAZE (7.09) -----------------------------------
  * 10 oz Vodka       Shake well with ice and strain
  * 10 oz Triple sec  mixture into 10 shot glasses.
  * 10 oz lime juice  Salute!
 ---------------------------------------------------
root@WNDR3700:/#
Delekhan
DD-WRT Novice


Joined: 22 Sep 2009
Posts: 4

PostPosted: Tue Sep 22, 2009 16:04    Post subject: Reply with quote
It was me who posted to bootlog over at smallnetbuilder. To clarify the whole Realtek/Broadcom/Atheros question - here is the output from cat /proc/cpuinfo:

Quote:
root@WNDR3700:/# cat /proc/cpuinfo
system type : Atheros AR7100 (hydra)
processor : 0
cpu model : MIPS 24K V7.4
BogoMIPS : 451.58
wait instruction : yes
microsecond timers : yes
tlb_entries : 16
extra interrupt vector : yes
hardware watchpoint : yes
ASEs implemented : mips16
VCED exceptions : not available
VCEI exceptions : not available


As with many (?) Netgear routers you can gain telnet access through the telnetenable.exe from Netgear. A quick how-to is posted in the openwrt wiki.

Anything more I can do to get dd-wrt running on this thing?
Will post any outputs in case you need them.
Sourcecode (with binary atheros drivers it seems) is also availiable on the Netgear page

--Markus
kahi
DD-WRT Novice


Joined: 24 Sep 2009
Posts: 1

PostPosted: Thu Sep 24, 2009 20:03    Post subject: Reply with quote
I'd be interested in learning about this, as well.
In my experience, the configuration is rather unusual for an OpenWRT. I couldn't manage to mount the rootfs in rw mode, because apparently they chose squashfs over jffs2, so it may be quite some pain to get additional software installed on the box without re-flashing:

Code:
root@WNDR3700:/# mount
/dev/root on / type squashfs (ro)
none on /proc type proc (rw,nodiratime)
none on /tmp type tmpfs (rw,nosuid,nodev)
tmpfs on /dev type tmpfs (rw)
sysfs on /sys type sysfs (rw)


I can offer some additional info on the mtd config here:

Code:
root@WNDR3700:/# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00050000 00010000 "uboot"
mtd1: 00020000 00010000 "env"
mtd2: 00720000 00010000 "rootfs"
mtd3: 00010000 00010000 "config"
mtd4: 00010000 00010000 "config_bak"
mtd5: 00010000 00010000 "pot"
mtd6: 00010000 00010000 "traffic_meter"
mtd7: 00020000 00010000 "language"
mtd8: 00010000 00010000 "caldata"
mtd9: 0071ffc0 00010000 "mount_fs"


What kind of surprised me was the way they reference the block device (there is no file /dev/31:02):

Code:
root@WNDR3700:/# ls /dev/mtdblock2 /dev/root -l
brw-r--r--    1 root     root      31,   2 Jan  1 00:00 /dev/mtdblock2
lrwxrwxrwx    1 root     root            5 Jan  1 00:22 /dev/root -> 31:02


I'm a little afraid to flash any new OpenWRT or DD-WRT firmware on the box using `mtd` without knowing more about possible check-summing on part of the boot loader. That's because I decided against opening the box and attaching a serial console -- I went the telnetenable way instead.

Maybe someone with a serial console attached can clarify the situation and provide some directions on how to proceed?
duneman
DD-WRT Novice


Joined: 31 Oct 2009
Posts: 1

PostPosted: Sat Oct 31, 2009 3:38    Post subject: Python implementation of telnetenable Reply with quote
I decided I wanted to screw around with the telnet console on my WNDR3700, and being on a mac had to mess around a bit to make the telnetenable.c crap posted on that link to the OpenWRT message boards work.

So, I translated it to python and made a google-code page for the thing.

http://code.google.com/p/netgear-telnetenable/

If you have python and can install pycrypto, you should be able to do the telnetenable process

now if only someone can figure out what to do about that damned read-only filesystem Very Happy
luminoso
DD-WRT Novice


Joined: 08 Dec 2009
Posts: 11

PostPosted: Fri Dec 11, 2009 19:19    Post subject: Reply with quote
So..

1) it runs openwrt
2) source code is avaiable for download
3) telnet avaiable

...

4) it i'll run dd-wrt??
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Atheros WiSOC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum