Posted: Sat Nov 14, 2009 20:12 Post subject: Unbranded Ralink SoC RT3052 based router
Hi all,
this is my first time here so be gentle :P
I've bougth a router from dealextreme and its firmware has some bugs, it doesn't do UPNP, Port Forwarding and DMZ so i want to put a DD-WRT firmware but since its unbranded i have no idea which on shall i use....
* Flash memory 4MB -> MX29LV320BTC-90G - 32 BIT 4M X 8 / 2M X 16 ] SINGLE VOLTAGE 3V
* 16MB SDRAM -> 2x EM639165 - 8Mega x 16bits SDRAM
8Mega x 16bits SDRAM
* Ralink RT3052 with a Ralink RT2860V2 wireless interface (not sure about the wireless interface)
* 2T2R board setup (although it has 3 antennas only two are connected to the PCB (china stuff...) but on the PCB there are 3 spots to solder antennas... hum....)
* PCB - XDX RN502 V2.0 (that's what's written on it)
* Linux version 2.6.21 (gcc version 3.4.2)
* BusyBox v1.12.1 (this is what i get using the touch command)
* Web interface uses GoAhead WebServer
* Has the telnetd loaded but when i try to connect "Connection to host lost."
* Web interface has a Run a system command page so i can run system commands as root
* Has a WPS button (but dont know if works)
* Has Upload Firmware page its possible to Update Firmware and Update Bootloader separately (there is also an option to Force upgrade firmware via mem)
* Has an option to Upgrade firmware from USB but pull-down box is empty since there is no USB port on the router
* There is an SDK history and has this information:
Ralink AP SDK - History
Version 3.2.0.0
- [Switch setting] set XOR48 and enable aging by default
- [Phy setting] Improve Ethernet conformance
- [Ethernet] [RT305x] Improve multicast efficiency.
- [USB] power-saving design for USB interface. (Release the corresponding Application Note in parallel.)
- [Wifi] AP version 2.0.0.0
- [Wifi] STA version 1.8.0.0
- [Wifi] MCS12->MCS11, not MCS12->MCS4.
- [Wifi] Low threshold of rate adaption table: 25->15 @ (SGI & MCS 15)
- [Wifi] 20M/40M power delta issue
- [SDK] Increase core voltage for system stability
- [SDK] Disable mdc/mdio by default
- [SDK] MTD-based Flash API
- [SDK] Mesh AP support
- [SDK] Turn off wireless by timer in WebUI (GreenAP).
- [SDK] change to mips-gcc 3.4.2 cross-compiler (optimize for size)
- [SDK] RT3050/RT3051 support
- [SDK] Samba with FAT32 bug fix
Version 3.1.0.0
- [Wifi Driver] AP version 1.9.0.0
- [Wifi Driver] STA version 1.7.0.0
- [Raeth Driver] fix RT3052 multicast issue
- [System] Fix web firmware upgrade issue for Spansion flash
- [System] USB Performance tuning
- [App] Wireless Tool v29
Version 3.0.0.0
- [System] RT3052 MP/MP2 Support
- [WebUI] Upgrade firmware from USB
- [WebUI] Layer7 QoS & Content Filter
- [WebUI] FTP/Samba Server
- [System] support Spansion 4MB flash S29GL032N
- [System] support Spansion 8MB flash S29GL064N, this feature need Uboot support (ver >= 2.0)
- [System] support Mxic 8MB flash MX29LV640B, this feature need Uboot support (ver >= 2.0)
Posted: Tue Nov 17, 2009 14:55 Post subject: More info
I've found a model from this router my have been cloned, its from Winstars Technology
and the model is the WS-WR511N2 Wireless 802. 11N Router (2T2R 300M), product page here.
This router may even been actually manufactured by Winstars Technology it self since the router's serial number starts with 'WS' (WS12A091000092).
So I tried to save "RootFS" block, but I'm getting slightly different files from "/dev/mtd4", "/dev/mtd4ro" and "/dev/mtdblock4".
They seem to contain squashfs-lzma (start with magic 'shsq'), but in some strange format
(I checked the beginning in hexeditor, it looks a bit different from the original squashfs superblock).
I'm getting this error "Filesystem on dev_mtdblock4 is (124:0),
which is a later filesystem version than I support!" if I try to unpack them.
So the questions:
1. Why are there so many copies of mtd devices and what is the difference between them. Which one is better to dump?
2. Can I get somewhere a statically linked version of 'nc' (netcat) tool for MIPS architecture,
which could be used to dump those files instead of 'telnet+cat'?
3. Could it be that squashfs images are somehow encrypted? Or may be it is some other not known to me squashfs variation?
Posted: Mon Jan 04, 2010 15:13 Post subject: Bad Magic Number,27051956 with unbranded Ralink SoC
Hey friends,
I have got Unbranded Ralink SoC router RT3050@384MHZ from china and its seems to be same hardware as it has with Buffalo WHR-G300N.
But this device has one USB port too and probably its from WINSTAR company in China.It came with default firmware which is from Ralink itself.(Very bad GUI)
Now I gone through DD-WRT Forum and came to know that Brian's WHR-G300N firmware might work with this hardware and I downloaded firmware.tftp and loaded through serial/tftp.
it gives below error,
Please choose the operation:
1: Load system code to SDRAM via TFTP.
2: Load system code then write to Flash via TFTP.
3: Boot system code via Flash (default).
4: Entr boot command line interface.
5: Load ucos code to SDRAM via TFTP.
0
3: System Boot system code via Flash.
## Booting image at bc450000 ...
Bad Magic Number,27051956
I dont know whether I am right or wrong ,but I feel there is some Magic code in Uboot bootloader of My unbranded board which is not matching with dd-wrt firmware's magic code.
is anybody having such problem?is there any solution?
can we change magic number of dd-wrt WHR-G300N firmware's magic number using dd-wrt firmware modification kit?Because I feel I am not able to change magic number of Uboot of this undranded board.
Is there any other way to run DD-WRT on this Ralink board?
Posted: Tue Jan 05, 2010 8:41 Post subject: Re: Bad Magic Number,27051956 with unbranded Ralink SoC
withoutpointer wrote:
Hey friends,
I have got Unbranded Ralink SoC router RT3050@384MHZ from china and its seems to be same hardware as it has with Buffalo WHR-G300N.
But this device has one USB port too and probably its from WINSTAR company in China.It came with default firmware which is from Ralink itself.(Very bad GUI)
Now I gone through DD-WRT Forum and came to know that Brian's WHR-G300N firmware might work with this hardware and I downloaded firmware.tftp and loaded through serial/tftp.
it gives below error,
Please choose the operation:
1: Load system code to SDRAM via TFTP.
2: Load system code then write to Flash via TFTP.
3: Boot system code via Flash (default).
4: Entr boot command line interface.
5: Load ucos code to SDRAM via TFTP.
0
3: System Boot system code via Flash.
## Booting image at bc450000 ...
Bad Magic Number,27051956
I dont know whether I am right or wrong ,but I feel there is some Magic code in Uboot bootloader of My unbranded board which is not matching with dd-wrt firmware's magic code.
is anybody having such problem?is there any solution?
can we change magic number of dd-wrt WHR-G300N firmware's magic number using dd-wrt firmware modification kit?Because I feel I am not able to change magic number of Uboot of this undranded board.
Is there any other way to run DD-WRT on this Ralink board?
Your suggestions is highly appreciable.
I have the same problem, I think we can try to change the bootloader to
WHR-G300N 's bootloader, then follow the WHR-G300N dd-wrt flashing steps
But, I do not have the bootloader file of WHR-G300N to try.
I think you are right ,but where to get WHR-G300N's bootloader file?
Did you compiled DD-WRT source code for WHR-G300N?
I have tried to open Brains's WHR-G300N firmware with DD-WRT firmware modification kit to change Magic number, but its not supporting firmware format,so no luck
Posted: Wed Jan 13, 2010 21:57 Post subject: Re: Unbranded Ralink SoC RT3052 based router
ReWoP wrote:
SDK Version 3.2.0.0 (Jan 6 2009)
I have a simlar router with SDK Version 3.2.4.0 (Jan 21 2009). The manual show a screenshot of SDK Version 3.3.0.0 (May 27 2009). There are no downloadable firmwares from the makers homepage, so where the heck is version 3.3.0.0? I have a printed manual, and there is a lot of differences between version 3.2.4.0 and 3.3.0.0.
Does anobody know where to get the new firmware? I asked the maker and got no answer.
I think you are right ,but where to get WHR-G300N's bootloader file?
Did you compiled DD-WRT source code for WHR-G300N?
I have tried to open Brains's WHR-G300N firmware with DD-WRT firmware modification kit to change Magic number, but its not supporting firmware format,so no luck
I try to remove some header of "WHR-G300N-webflash.bin"
Then use boot loader tftp upgrade via Serial...
The image check passed !!
But the kernel start fail during initial filesystem mount.
Posted: Fri Jan 15, 2010 7:04 Post subject: Re: Bad Magic Number,27051956 with unbranded Ralink SoC
withoutpointer wrote:
H
it gives below error,
3: System Boot system code via Flash.
## Booting image at bc450000 ...
Bad Magic Number,27051956
I found the Magic code is the starting 4 byte of the firmware image.
The boot loader will check the magic code, header checksum and data checksum.
Your boot loader magic is not "27051956" but, mine router and dd-wrt firmware magic code are both the same "27051956". Though my boot loader magic code check pass , my router is still in problem.