New Belkin Routers (04/2010)

Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware
Goto page Previous  1, 2, 3, ... 29, 30, 31  Next
Author Message
TheUSMarshall
DD-WRT Novice


Joined: 19 Apr 2010
Posts: 15

PostPosted: Tue Jun 01, 2010 14:51    Post subject: Yes! Reply with quote
Definitely glad to see there are others working on this, too! I'm going to resurrect my efforts tonight. The last thing I did was pick apart the user.conf file that is generated when you "save settings" in the built-in firmware. From what I gathered, it looks like there is some sort of a checksum generated on that file that prevents you from editing it and re-applying it to the router. (Note - my goal here was to try to unlock some of the other features of the router that were disabled by default, and to open up a port to enable me to telnet into the router). It also looked like the checksum that was being used was a relatively standard checksum algorithm (can't remember which one off the top of my head, but will try to find it). When I get a chance, i'll post the output from my router later on.
Sponsor
deadlyquirk
DD-WRT Novice


Joined: 07 Oct 2009
Posts: 3

PostPosted: Wed Jun 02, 2010 18:52    Post subject: Reply with quote
Edit: A thought occurs, According to the security log, the router is using dnsmasq,and smbd and the firewall's log references IPTABLES which is part of the Linux kernel which is all GPL code.

According to this page, Belkin is committed to meeting the requirements of the gpl including releasing source code.

I put in a ticket to tech support requesting all of the GPL code for this unit.

I think that if all of us who own this router all bug them for the code, they will release it for us.
miquella
DD-WRT Novice


Joined: 08 Jun 2010
Posts: 2

PostPosted: Tue Jun 08, 2010 5:36    Post subject: Settings checksum Reply with quote
I saved out my configuration settings and glanced at the checksum, it looks like it's a base64 encoded, 28 byte digest, so I would guess it's an SHA-224.

I might try to see if I can reproduce the digest a little later, but maybe that'll give someone else a leg up on the problem!
moonrequiem
DD-WRT Novice


Joined: 17 Jun 2010
Posts: 26

PostPosted: Thu Jun 17, 2010 6:35    Post subject: Belkin Play Router - F7D4302 Reply with quote
Bump...

The stock firmware on this router is TERRIBLE. I bought one of these, but I refuse to use it. Every time I load up a webpage using this router I get a "Resolving Host" message for about 30 seconds before the webpage loads. And even then, sometimes, it doesn't even load.

What's the status on this?
miquella
DD-WRT Novice


Joined: 08 Jun 2010
Posts: 2

PostPosted: Wed Jun 23, 2010 4:19    Post subject: DNS resolving issues Reply with quote
I'm running into a similar problem with DNS resolving. I know it's not the solution you're looking for, but I manually set the DNS servers on my computer to point to Google's DNS servers (8.8.8.8 and 8.8.4.4) and that has me working for now.

I'm still trying to find time that I can sit down and work on breaking into the firmware, but I haven't made any progress yet, sorry...
eddie97044
DD-WRT User


Joined: 03 Nov 2008
Posts: 83

PostPosted: Fri Jun 25, 2010 20:34    Post subject: Serial console output at boot and then some. Reply with quote
Just bought a belkin play. Already have serial console access. Here is what I got from it so far and thier is a bit. By the way it is definantely running busybox.::

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2010.06.25 16:22:19 =~=~=~=~=~=~=~=~=~=~=~=
Decompressing...done
Init Arena
Init Devs.
Boot partition size = 131072(0x20000)
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.10.128.0
CPU type 0x19740: 133MHz
Tot mem: 65536 KBytes

CFE mem: 0x80700000 - 0x8079A640 (632384)
Data: 0x80731730 - 0x80733AF0 (9152)
BSS: 0x80733AF0 - 0x80734640 (2896)
Heap: 0x80734640 - 0x80798640 (409600)
Stack: 0x80798640 - 0x8079A640 (8192)
Text: 0x80700000 - 0x80731730 (202544)


Copying boot params.....DONEDecompressing...done
Decompressing...done
Init Arena
Init Devs.
Boot partition size = 131072(0x20000)
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.10.128.0
CPU type 0x19740: 453MHz
Tot mem: 65536 KBytes

CFE mem: 0x80700000 - 0x8079A640 (632384)
Data: 0x80731730 - 0x80733AF0 (9152)
BSS: 0x80733AF0 - 0x80734640 (2896)
Heap: 0x80734640 - 0x80798640 (409600)
Stack: 0x80798640 - 0x8079A640 (8192)
Text: 0x80700000 - 0x80731730 (202544)


Copying boot params.....DONE

Bootloader version 0.06e boot_version 0.06e
Project name : WG8017F22 1-LF-AK
Press space bar to cancel startup...
Committing NVRAM...done
Device eth0: hwaddr xx-xx-xx-xx-xx-xx, ipaddr 192.168.2.1, mask 255.255.255.0
gateway not set, nameserver not set
Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)
Loading: ....... 4173584 bytes read
Entry at 0x80001000
Closing network.
Starting program at 0x80001000
Linux version 2.6.22 (titan_liu@SW3SRV2.arcadyan.com.tw) (gcc version 4.1.2) #24 Tue Feb 9 17:53:18 CST 2010
CPU revision is: 00019740
Found chip type AI (0x19a14716)
Chipc: rev 31, caps 0x184807c9, chipst 0x9400 pmurev 5, pmucaps 0x11242c05
No PLL init done for chip 4716 rev 1 pmurev 5
si_kattach done. ccrev = 31, wd_msticks = 32
Determined physical RAM map:
memory: 04000000 @ 00000000 (usable)
Built 1 zonelists. Total pages: 16256
Kernel command line: root=/dev/mtdblock2 console=ttyS0,115200 init=/sbin/preinit
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
PID hash table entries: 256 (order: 8, 1024 bytes)
CPU: BCM4716 rev 1 at 453 MHz
Using 226.500 MHz high precision timer.
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 60664k/65536k available (2811k kernel code, 4816k reserved, 1128k data, 132k init, 0k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
PCI: Using membase 8000000
PCI: Initializing host
PCI: Reset RC
PCI: Fixing up bus 0
PCI: Fixing up bridge
PCI: Fixing up bridge
PCI: Enabling device 0000:01:00.1 (0004 -> 0006)
PCI: Fixing up bus 1
Time: MIPS clocksource has been installed.
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
gpio_init 478
VFS: Disk quotas dquot_6.5.1
Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher
fuse init (API version 7.Cool
io scheduler noop registered (default)
Serial: 8250/16550 driver $Revision: 1.1.1.1 $ 4 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x0 (irq = Cool is a 16550A
loop: module loaded
PPP generic driver version 2.4.2
PPP MPPE Compression module registered
NET: Registered protocol family 24
Physically mapped flash: Found 1 x16 devices at 0x0 in 8-bit bank
Amd/Fujitsu Extended Query Table at 0x0040
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
Flash device: 0x800000 at 0x1c000000
Physically mapped flash: squash filesystem with lzma found at block 1760
Creating 4 MTD partitions on "Physically mapped flash":
0x00000000-0x00030000 : "boot"
0x00030000-0x007f0000 : "linux"
0x001b815c-0x007f0000 : "rootfs"
0x007f0000-0x00800000 : "nvram"
Found a 0MB serial flash
sflash: found no supported devices
usbmon: debugfs is not available
GACT probability on
Mirror/redirect action on
u32 classifier
input device check on
Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (512 buckets, 4096 max)
ctnetlink v0.93: registering with nfnetlink.
ip_tables: (C) 2000-2006 Netfilter Core Team
ipt_time loading
ClusterIP Version 0.8 loaded successfully
arp_tables: (C) 2002 David S. Miller
TCP cubic registered
NET: Registered protocol family 1
NET: Registered protocol family 10
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
Ebtables v2.0 registered
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 132k freed
Warning: unable to open an initial console.
Algorithmics/MIPS FPU Emulator v1.5
[sighandler]: No more events to be processed, quitting.
[cleanup]: Waiting for children.
[cleanup]: All children terminated.
Hit enter to continue...Restoring defaults...QoS_nvram_erase(204): Erasing the QoS rules...
ACS_nvram_erase(225): Erasing the Access control rules...
DHCP_nvram_erase(245): Erasing the DHCP reverse entries...
done
waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
vlan2: Operation not supported
waitpid: No child processes
brctl: No child processes
waitpid: No child processes
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Invalid argument
eth1: Invalid argument
eth1: Operation not supported
waitpid: No child processes
eth2: Operation not supported
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Operation not supported
eth2: Operation not supported
eth2: Operation not supported
eth2: Operation not supported
eth2: Operation not supported
eth2: Operation not supported
eth2: Operation not supported
eth2: Operation not supported
eth2: Operation not supported
eth2: Operation not supported
eth2: Operation not supported
eth2: Operation not supported
eth2: Operation not supported
eth2: Operation not supported
eth2: Operation not supported
eth2: Operation not supported
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Operation not supported
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
HTTPD: main(957)
udhcpd_main(134): udhcp server (v0.9.Cool started
udhcpd_main(134): udhcp server (v0.9.Cool started
Reaped 325
ut->en 1
ut->override_iconv_err 0
ut->xbox360 1
ut->dlna_enabled 1
DIR list 1/mnt/shared
Starting in XboX 360 compliant profile ...
Starting in DLNA compliant profile ...
Building Metadata List ...
Entry id(0), title root

Entry id(100000), title Pictures

Entry id(100001), title Video

Entry id(100002), title Music

Looking for files in content directory : /mnt/shared
scandir: No such file or directory
Found 3 files and subdirectories.
Total 0 seconds.
UPnP daemon is ready to run
killall: wps_monitor: no process killed
waitpid: No child processes
killall: wps_ap: no process killed
killall: wps_enr: no process killed
mkdir: cannot create directory '/tmp/mnt': File exists
mkdir: cannot create directory '/tmp/etc': File exists
mkdir: cannot create directory '/tmp/etc/sysconfig': File exists
Starting HotPlug: /usr/sbin/hotplugd -D
Starting jcpd daemon: /usr/sbin/jcpd


share memory key=74565 successful id on creating=32769

waitpid: No child processes
original zone=GMT
modified dst=GMT
[start_wan 1071], ifconfig vlan1 up
vlan1: Operation not supported
waitpid: No child processes
waitpid: No child processes
udhcpc_main(302): udhcp client (v0.9.Cool started
original zone=GMT+8
modified dst=GMT
vlan1 dhcp
vlan1: No such process
Stop DDNS service!
waitpid: No child processes
waitpid: No child processes
killall: wps_ap: no process killed
Freeing Metadata List ...
ushare_free...
DLNA: uninit
waitpid: No child processes
killall: smbd: no process killed
killall: nmbd: no process killed
killall: nmbd: no process killed
killall: smbd: no process killed
Starting Samba: /usr/sbin/smbd -D
waitpid: No child processes
killall: wanstatus: no process killed
waitpid: No child processes
killall: belkin_wan_cfg: no process killed
waitpid: No child processes
killall: acscher: no process killed
waitpid: No child processes
killall: ulogd: no process killed
/usr/sbin/nmbd -D
Reconnect signalling HANGUP
stop_Eco_mode
waitpid: No child processes
Stop DDNS service!
killall: stats: no process killed
killall: ntpclient: no process killed
killall: ip-up: no process killed
killall: ip-down: no process killed
killall: pppoecd: no process killed
waitpid: No child processes
killall: pppoecd: no process killed
waitpid: No child processes
waitpid: No child processes
perform_release(162): Entering released state
waitpid: No child processes
udhcpc_main(559): Received SIGTERM
original zone=GMT+8
modified dst=GMT
killall: pppd: no process killed
stop_pptp OK
killall: udhcpc: no process killed
waitpid: No child processes
killall: udhcpc: no process killed
waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
ifconfig br0 down &waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
device br0 already exists; can't create bridge with the same name
waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
EMF already configured for br0

waitpid: No child processes
IGMP Snooping already enabled on br0

Command failed
waitpid: No child processes
vlan2: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Operation not supported
eth1: Invalid argument
eth1: Invalid argument
eth1: Operation not supported
waitpid: No child processes
waitpid: No child processes
brctl: No child processes
Interface add failed

waitpid: No child processes
eth2: Operation not supported
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Operation not supported
eth2: Operation not supported
eth2: Operation not supported
eth2: Operation not supported
eth2: Operation not supported
eth2: Operation not supported
eth2: Operation not supported
eth2: Operation not supported
eth2: Operation not supported
eth2: Operation not supported
eth2: Operation not supported
eth2: Operation not supported
eth2: Operation not supported
eth2: Operation not supported
eth2: Operation not supported
eth2: Operation not supported
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Operation not supported
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
Starting sxuptpd
eth2: Invalid argument
Initializing USB port mode:
port1 = NAS
port2 = NAS
eth2: Invalid argument
Starting usbjcpd
eth2: Invalid argument
insmod: fuse.ko: no module by that name found
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
eth2: Invalid argument
waitpid: No child processes
Interface add failed

waitpid: No child processes
Duplicate configuration request

waitpid: No child processes
device br1 already exists; can't create bridge with the same name
waitpid: No child processes
waitpid: No child processes
waitpid: No child processes
HTTPD: main(957)
waitpid: No child processes
udhcpd_main(134): udhcp server (v0.9.Cool started
udhcpd_main(134): udhcp server (v0.9.Cool started
waitpid: No child processes
ut->en 1
ut->override_iconv_err 0
ut->xbox360 1
ut->dlna_enabled 1
DIR list 1/mnt/shared
Starting in XboX 360 compliant profile ...
Starting in DLNA compliant profile ...
Building Metadata List ...
Entry id(0), title root

Entry id(100000), title Pictures

Reaped 700
Entry id(100001), title Video

Entry id(100002), title Music

Looking for files in content directory : /mnt/shared
Found 3 files and subdirectories.
Total 0 seconds.
UPnP daemon is ready to run
waitpid: No child processes
killall: wps_monitor: no process killed
killall: wps_ap: no process killed
killall: wps_enr: no process killed
waitpid: No child processes
mkdir: cannot create directory '/tmp/mnt': File exists
mkdir: cannot create directory '/tmp/mnt/shared': File exists
mkdir: cannot create directory '/tmp/etc': File exists
mkdir: cannot create directory '/tmp/etc/sysconfig': File exists
Starting HotPlug: /usr/sbin/hotplugd -D
Starting jcpd daemon: /usr/sbin/jcpd


share memory key=74565 successful id on creating=32769

waitpid: No child processes
original zone=GMT+8
modified dst=GMT
[start_wan 1071], ifconfig vlan1 up
vlan1: Operation not supported
waitpid: No child processes
waitpid: No child processes
udhcpc_main(302): udhcp client (v0.9.Cool started
Hit enter to continue...original zone=GMT+8
modified dst=GMT
vlan1 dhcp
vlan1: No such process
Stop DDNS service!
connect: Network is unreachable
Hit enter to continue...Hit enter to continue...Starting Samba: /usr/sbin/smbd -D
/usr/sbin/nmbd -D
Hit enter to continue...wl: Unsupported
main(1090) wl -i eth1 -C 11 ssid Belkin.523D
wl: Unsupported
main(1095) wl -i eth2 -C 16 ssid Belkin.523D_5GHz

start_wl(932) reStart the Wireless, lan_ifNames=vlan2 eth1 eth2
start_wl(969), name=vlan2
start_wl(969), name=eth1
start_wl(969), name=eth2
Starting sxuptpd
insmod: cannot insert '/lib/modules/2.6.22/kernel/drivers/usb/sxuptp/sxuptp.ko': Invalid parameters (17): Invalid argument
insmod: cannot insert '/lib/modules/2.6.22/kernel/drivers/usb/sxuptp-usbmode/sxuptp_usbmode.ko': Invalid parameters (17): Invalid argument
Initializing USB port mode:
port1 = NAS
port2 = NAS
insmod: cannot insert '/lib/modules/2.6.22/kernel/drivers/usb/sxuptp/sxuptp_driver.ko': Invalid parameters (17): Invalid argument
Starting usbjcpd
insmod: cannot insert '/lib/modules/2.6.22/kernel/drivers/usb/sxuptp/jcp.ko': Invalid parameters (17): Invalid argument
insmod: cannot insert '/lib/modules/2.6.22/kernel/drivers/usb/sxuptp/jcp_cmd.ko': Invalid parameters (17): Invalid argument
insmod: fuse.ko: no module by that name found
insmod: cannot insert '/lib/modules/2.6.22/kernel/drivers/usb/storage/usb-storage.ko': Invalid parameters (17): Invalid argument
Hit enter to continue...original zone=GMT+8
modified dst=GMT
Portrd: Add iptable command:
iptables -t nat -A POSTROUTING -s 192.168.2.0/24 -o vlan1 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -o vlan1 -j MASQUERADE



BusyBox v1.7.2 (2010-02-09 17:57:33 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

#
# tc_update_rules(503): tc class add dev vlan1 parent 10: classid 10:1 htb rate 118750000bps ceil 118750000bps

# ls
bin etc media proc silex tmp var
dev lib mnt sbin sys usr www
# cd ..
# ls
bin etc media proc silex tmp var
dev lib mnt sbin sys usr www
# cd bin
# ls
addgroup cp fgrep mount rmdir usleep
adduser date grep mv sh wps_ap
ash df ip netstat sleep wps_monitor
busybox dmesg kill ping sync
cat eapd ls ping6 touch
chgrp echo mkdir ps true
chmod egrep mknod pwd umount
chown false more rm uname
# cd ..
# ls
bin etc media proc silex tmp var
dev lib mnt sbin sys usr www
# ls
bin etc media proc silex tmp var
dev lib mnt sbin sys usr www
# cd media     www
# ls
FwAuto.stm multiPPPOE_Routing_table.stm
WPS_stautsShow.stm my_function.txt
adv_wireless.html my_function3.css
adv_wireless.stm nat_v.stm
ajax_submit.js prototype.js
bt.html qos_main2.stm
bt.stm qos_main_0.stm
bt_check.stm qos_stats.stm
bt_get_config.stm refreshmenu.txt
bt_main.stm routine.txt
bt_main_check.stm routine_data.js
bt_menu.stm setup.htm
cgi.stm setup_dns.stm
clock.js setup_help.htm
data.js setup_top.htm
ddns.stm setup_top_guest.htm
excanvas.js setup_top_landing.htm
firewall_a.stm sku_set.stm
firewall_ac.js status.stm
firewall_ac.stm system.stm
firewall_d.stm system_c.stm
firewall_mac.stm system_f.stm
firewall_main_0.stm system_r.stm
firewall_ping.stm tl_main_0.stm
fw_access.html tools_backup.stm
fw_ddns.html tools_restore.stm
fw_main.html wait.stm
fw_virtual.html wan_bigpondnew.stm
glossary.stm wan_dhpc.stm
glossary.stm.bak wan_dhpc_mac.stm
health_main.stm wan_l2tp.stm
help.stm wan_main.stm
help.stm.bak wan_main_0.stm
home.htm wan_multipppoe.stm
hyper.txt wan_pppoe.stm
images wan_pptp.stm
index.htm wan_static.stm
index.html wan_static_route.stm
jquery.js wan_type.html
jquery_flot.js wireless_128bitwep.stm
lan_dhcp.stm wireless_128bitwep_5.stm
lan_main.stm wireless_1x.stm
lan_main_0.stm wireless_64bitwep.stm
log.stm wireless_64bitwep_5.stm
login.htm wireless_PSK.stm
login.stm wireless_PSK_5.stm
login_guest.htm wireless_WPA_5.stm
login_guest.stm wireless_WPS.stm
login_guest_pserr.stm wireless_WPS_5.stm
login_guest_success.stm wireless_apt.stm
login_landing.htm wireless_e.stm
login_landing.stm wireless_e_5.stm
login_landing_pserr.stm wireless_guest2.stm
login_landing_success.stm wireless_guest2_print.stm
loginduperr.stm wireless_id.stm
loginerr.stm wireless_id_5.stm
loginpserr.stm wireless_main_0.stm
main_router.css wireless_no_encryption.stm
md5.js wireless_no_encryption_5.stm
media_dlna.stm wl_ap.html
menu.stm wl_guest.html
mootabs.css wl_mac_filtering.html
mootabs.js wl_main.html
mootools.js wps_showInit.stm
msg.js wps_showProcess.stm
# cd ..
# ls
bin etc media proc silex tmp var
dev lib mnt sbin sys usr www
# cd sys
# ls
block class firmware kernel
bus devices fs module
# cd firmware          block
# ls
loop0 loop2 loop4 loop6 mtdblock0 mtdblock2
loop1 loop3 loop5 loop7 mtdblock1 mtdblock3
# cd ..
# ls
block class firmware kernel
bus devices fs module
# cd firmware
# ls
# cd ..
# cd fs
#

_________________
Linksys - WRT54GS Ver 7.2 (usb port added)
Belkin - (PLAY) F7D4302 Ver 1
Asus - WL500G Premium Ver 1
Asus - RT-N16


Last edited by eddie97044 on Fri Jun 25, 2010 21:40; edited 1 time in total
eddie97044
DD-WRT User


Joined: 03 Nov 2008
Posts: 83

PostPosted: Fri Jun 25, 2010 21:30    Post subject: Reply with quote
oops

Last edited by eddie97044 on Tue Jun 29, 2010 11:44; edited 2 times in total
eddie97044
DD-WRT User


Joined: 03 Nov 2008
Posts: 83

PostPosted: Sat Jun 26, 2010 6:59    Post subject: Reply with quote
CFE> save 192.168.2.199:wholeflash.bin bc000000 800000

where ip was my pc running tftp server.

CFEON (EON) EN29LV640B flash which is 8 meg



whole8Meg.bin
 Description:
Factory dump with zeroed mac addresses.

Download
 Filename:  whole8Meg.bin
 Filesize:  8 MB
 Downloaded:  757 Time(s)


_________________
Linksys - WRT54GS Ver 7.2 (usb port added)
Belkin - (PLAY) F7D4302 Ver 1
Asus - WL500G Premium Ver 1
Asus - RT-N16


Last edited by eddie97044 on Thu Sep 16, 2010 13:59; edited 2 times in total
eddie97044
DD-WRT User


Joined: 03 Nov 2008
Posts: 83

PostPosted: Tue Jun 29, 2010 13:25    Post subject: Reply with quote
Ok, I have somewhat working Jtag on this unit. It's standard 14 pin EJTAG. Problem I am having is that it detects the cpu every single time correctly, but doesn't detect the flash, and the data for EJTAG Impcode, Version, Dma Support, and Implementation keeps changing every time I run it.

Your probably going to say bad jtag cable, but I check it with another router I have and it works fine on that one. I don't know at this point.

Output is below and remember that flash is a CFEON (EON) EN29LV640B-90TIP. I tried forcing flash type with fc:104 and no dice, all I get from output is all 0000001a in the files it dumps.

[root@jasons-linux-pc linux_32bit]# ./tjtag3 -probeonly /flash_debug /noreset /nobreak

==============================================
EJTAG Debrick Utility v3.0.1 Tornado-MOD
==============================================

Probing bus ... Done

Instruction Length set to 8

CPU Chip ID: 00010100011100010110000101111111 (1471617F)
*** Found a Broadcom BCM4716 Rev 1 CPU chip ***

- EJTAG IMPCODE ....... : 00000000000100110000000000000000 (00130000)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS16 MIPS32

Issuing Processor / Peripheral Reset ... Skipped
Enabling Memory Writes ... Done
Halting Processor ... Skipped
Clearing Watchdog ... Done
spi_flash_read 0x1fc00000
spi_flash_mmr 0x00000000
spi_flash_mmr_size 0x00000000
spi_flash_ctl 0x18000040
spi_flash_opcode 0x18000044
spi_flash_data 0x18000048
spi_ctl_start 0x80000000
spi_ctl_busy 0x80000000

Probing Flash at (Flash Window: 0x1fc00000) ...

Debug AMD Vendid : 00000000000000000000000000011010 (0000001A)
Debug AMD Devdid : 00000000000000000000000000000000 (00000000)

Debug SST Vendid : 00000000000000000000000000011010 (0000001A)
Debug SST Devdid : 00000000000000000000000000000000 (00000000)

Debug BSC-SCS Vendid :00000000000000000000000000011010 (0000001A)
Debug BCS-SCS Devdid :00000000000000000000000000011010 (0000001A)
REGREAD32 data 0x0000001a spi_flash_mmr 0x00000000 reg 0x18000040
REG 0x18000044 REGWRITE32 0x0000049f
SPI_FLASH_OPCODE 0x18000044 PTR_OPCODE 0x0000049f
REG 0x18000040 REGWRITE32 0x8000049f
SPI_FLASH_CTL SEND -> 0x18000040 reg 0x8000049f
REGREAD32 data 0x0000001a spi_flash_mmr 0x00000000 reg 0x18000040
REGREAD32 data 0x0000001a spi_flash_mmr 0x00000000 reg 0x18000048

Debug SPI id : 00000000000110100000000000000000 (001A0000)

Debug SPI Vendid : 00000000000000000000000000011010 (0000001A)
Debug SPI Devdid : 00000000000000000000000000000000 (00000000)
Done

*** Unknown or NO Flash Chip Detected ***

*** REQUESTED OPERATION IS COMPLETE ***

[root@jasons-linux-pc linux_32bit]#

_________________
Linksys - WRT54GS Ver 7.2 (usb port added)
Belkin - (PLAY) F7D4302 Ver 1
Asus - WL500G Premium Ver 1
Asus - RT-N16
moonrequiem
DD-WRT Novice


Joined: 17 Jun 2010
Posts: 26

PostPosted: Sat Jul 03, 2010 18:59    Post subject: Reply with quote
Thanks for moving this project forward eddie. Hopefully something will come of this. Razz
Obnoticus
DD-WRT Novice


Joined: 03 Aug 2008
Posts: 4

PostPosted: Fri Jul 16, 2010 4:26    Post subject: Any progress on the router? Reply with quote
Hi guys - I've been watching this thread for a couple days, just wondering has anyone been able to make any progress on putting dd-wrt on this baby?

If you search for the Play Max on Amazon, it looks like the firmware for this router is absolute crap from the reviews. Not to mention there are listings there for used play max available for basically 55 bucks! If dd-wrt works then this will basically become the cheapest functional simultaneous dual band gigabit router available on the market today. Amazing.

Keep up the good work! We're all anxious to hear more good news Very Happy
dubbz82
DD-WRT Novice


Joined: 21 Jul 2010
Posts: 9

PostPosted: Wed Jul 21, 2010 14:46    Post subject: Reply with quote
i'm also wondering if there's been any more progress on this, i see that it's been in the works almost since the device released, and that there's been quite a bit of progress already....i just don't know how much longer i can deal with the stock firmware on this thing...in the mean time, i am doing as was mentioned earlier and using google's dns server, and for now that seems to be helping. i wish you guys luck on getting this thing up and running, as it would be great to have a full blown wireless n router/bridge/access point without having to deal with the horrible preinstalled firmware....at least we know the hardware has enough flashable memory and system ram to run a full blown copy of dd-wrt.....


EDIT: also just thought about this, the error that was displayed was for improper filesize...maybe if we dummy out the dd-wrt firmware and try to load it with same filesize as the regular firmware (crack open a hex editor and manually fix the filesize to a set size by adding a bunch of zero's at the end or so) this may work? i don't really have a whole heck of a lot of experience with this though, and this could obviously completely brick it too......just tossing an idea out there.

EDIT2: just grabbed a firmware file from belkin's site and the filesize is 7,192,576 bytes...hope that helps if someone decides to take on this task...i would do it myself, but i only have one router, and i don't want to risk bricking it.
TheUSMarshall
DD-WRT Novice


Joined: 19 Apr 2010
Posts: 15

PostPosted: Tue Jul 27, 2010 16:19    Post subject: Reply with quote
I have a lot more time to work on this now, so I am hoping to make some progress today. Will keep everyone posted!

Thanks to everyone who has made so much progress on this over the past few months.

One more thing I discovered today:

The CFE miniWeb Server is used on several Asus routers as well.... did some searching and looked at directions for DD-WRT on the Asus router running the same chip (Broadcom 4718)... I think it was the NR-16? Something like that. Anyway, they recommended uploading a .trx file through the miniWeb interface... I tried that, no dice... I think that the posters referencing the file size might be on to something...

BTW, to those who are suffering with the stock firmware - I feel your pain - it's awful. It looks like Belkin is trying to make it as "idiot-proof" as possible, but in the process has also made it as un-customizable as possible.
TheUSMarshall
DD-WRT Novice


Joined: 19 Apr 2010
Posts: 15

PostPosted: Tue Jul 27, 2010 16:25    Post subject: Reply with quote
Eddie - I noticed in your output that it's detecting a Broadcom 4716? If you look back to the start of the thread you can see the inside of my F7D4302 and it appears to have a Broadcom 4718 (not 16)... do you think there are different versions out there?
dubbz82
DD-WRT Novice


Joined: 21 Jul 2010
Posts: 9

PostPosted: Wed Jul 28, 2010 2:53    Post subject: Reply with quote
cool. glad to see that this is still being worked on...I can't wait to get rid of this stock firmware....as i stated in the above post, I do believe that the filesize is likely checked, so dummying it out from one of the smaller builds is probably a start anyways. Either way, we will likely need to use one of the smaller builds to start off with then upgrade to the full blown one after updating.
Goto page Previous  1, 2, 3, ... 29, 30, 31  Next Display posts from previous:    Page 2 of 31
Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum