GURU's Netgear wndr 3400 update - test build page 7

Post new topic   This topic is locked: you cannot edit posts or make replies.    DD-WRT Forum Index -> Broadcom SoC based Hardware
Goto page Previous  1, 2, 3, 4 ... 22, 23, 24  Next
Author Message
dadget
DD-WRT Novice


Joined: 16 Jul 2011
Posts: 45

PostPosted: Wed Jul 27, 2011 20:04    Post subject: Reply with quote
And this too (boot log):

http://pastebin.com/buANppt6
Sponsor
Starks
DD-WRT User


Joined: 18 Feb 2008
Posts: 55

PostPosted: Thu Jul 28, 2011 0:12    Post subject: Reply with quote
Whoa. You're a bold one.

Did you brute-force OpenWRT onto the chip?
dadget
DD-WRT Novice


Joined: 16 Jul 2011
Posts: 45

PostPosted: Thu Jul 28, 2011 13:32    Post subject: Reply with quote
Starks wrote:
Whoa. You're a bold one.

Did you brute-force OpenWRT onto the chip?


Wasn't me, forgot to mention - just found these on Pastebin.
dadget
DD-WRT Novice


Joined: 16 Jul 2011
Posts: 45

PostPosted: Thu Jul 28, 2011 13:35    Post subject: Reply with quote
Hopefully it gets us somewhere though.
Starks
DD-WRT User


Joined: 18 Feb 2008
Posts: 55

PostPosted: Thu Jul 28, 2011 18:23    Post subject: Reply with quote
dadget wrote:
Starks wrote:
Whoa. You're a bold one.

Did you brute-force OpenWRT onto the chip?


Wasn't me, forgot to mention - just found these on Pastebin.
First result in Google for "wndr3400 boot log"...

WHY DIDN'T I THINK OF THAT?!?
Starks
DD-WRT User


Joined: 18 Feb 2008
Posts: 55

PostPosted: Thu Jul 28, 2011 19:01    Post subject: Reply with quote
Here's something interesting...

Just found out how to enable telnet on this thing (http://code.google.com/p/netgear-telnetenable/) and look at what I ended up with.

Maybe we can grab the CFE now?

Code:
eric@kingfisher:~/et$ telnet 192.168.1.1
Trying 192.168.1.1...
Connected to 192.168.1.1.
Escape character is '^]'.


BusyBox v0.60.0 (2011.06.17-14:01+0000) Built-in shell (msh)
Enter 'help' for a list of built-in commands.

# cat /proc/cpuinfo
system type             : Broadcom BCM4716 chip rev 1
processor               : 0
cpu model               :  V4.0
BogoMIPS                : 226.09
wait instruction        : no
microsecond timers      : yes
tlb_entries             : 64
extra interrupt vector  : no
hardware watchpoint     : yes
VCED exceptions         : not available
VCEI exceptions         : not available
unaligned_instructions  : 0
System clocks
        (cpu/mem/si/xtal)       : 453/226/113/20 Mhz.
dcache hits             : 2147483648
dcache misses           : 1111265924
icache hits             : 2147483648
icache misses           : 4083859263
instructions            : 2147483648

# cat /proc/version
Linux version 2.4.20 (jenny@moonlight) (gcc version 3.2.3 with Broadcom modifications) #16 Fri Jun 17 22:01:42 CST 2011
Starks
DD-WRT User


Joined: 18 Feb 2008
Posts: 55

PostPosted: Thu Jul 28, 2011 20:01    Post subject: Reply with quote
And I just might have the CFE...

Using the following:
# mount
rootfs on / type rootfs (rw)
/dev/root on / type squashfs (ro)
none on /dev type devfs (rw)
proc on /proc type proc (rw)
ramfs on /tmp type ramfs (rw)
none on /proc/bus/usb type usbdevfs (rw)
/dev/sda1 on /tmp/mnt/usb0/part1 type vfat (rw)

# cat /dev/mtd/0 > /tmp/mnt/usb0/part1/cfe.bin

I was able to put a 256KB file that I named cfe.bin on my attached USB stick.

No JTAG. No serial. Just telnet magic.

Have I obtained the CFE?



cfe.bin
 Description:
WNDR3400 CFE

Download
 Filename:  cfe.bin
 Filesize:  256 KB
 Downloaded:  985 Time(s)

dadget
DD-WRT Novice


Joined: 16 Jul 2011
Posts: 45

PostPosted: Thu Jul 28, 2011 20:21    Post subject: Reply with quote
I think that may indeed be the CFE. It is 256KB in size, padded with 0 (FF) at the end, and I was able to extract some things from it that pertain to when the device boots:

http://pastebin.com/EC5nGSKS
dadget
DD-WRT Novice


Joined: 16 Jul 2011
Posts: 45

PostPosted: Thu Jul 28, 2011 20:33    Post subject: Reply with quote
Also, don't know if you noticed, but it looks like it's running BusyBox.
Starks
DD-WRT User


Joined: 18 Feb 2008
Posts: 55

PostPosted: Thu Jul 28, 2011 21:03    Post subject: Reply with quote
Believe me, I noticed. I was expecting some no-name barebones interface.

Spent a good hour messing around trying to expose /tmp to HTTP before I realized that my USB key could be used as a writable location.

I was expecting to not obtain the CFE and instead hose my router.
dadget
DD-WRT Novice


Joined: 16 Jul 2011
Posts: 45

PostPosted: Thu Jul 28, 2011 21:07    Post subject: Reply with quote
My question is, where do we go from here? Do you think it's safe to flash a DD-WRT NEWD image via web interface/telnet?
Starks
DD-WRT User


Joined: 18 Feb 2008
Posts: 55

PostPosted: Thu Jul 28, 2011 21:12    Post subject: Reply with quote
I wouldn't.

My assumption is that this router will require a few things established first.

1. NEWD or NEWD2?
2. K2.4 or K2.6?
3. Multi-flash for first use?
4. Special builds?
5. Is the necessary code even in the trunk?
dadget
DD-WRT Novice


Joined: 16 Jul 2011
Posts: 45

PostPosted: Thu Jul 28, 2011 22:29    Post subject: Reply with quote
Starks wrote:
I wouldn't.

My assumption is that this router will require a few things established first.

1. NEWD or NEWD2?
2. K2.4 or K2.6?
3. Multi-flash for first use?
4. Special builds?
5. Is the necessary code even in the trunk?


1. Probably NEWD2 if we want dual-radio support, but NEWD would be fine if we just want 2.4GHz.
2. Not sure which kernel, but probably K2.6.
3. Multi-flash would be ok for first use, just to make sure. There is no gigabit switch, so flashing a Micro build would not be a problem.
4.
5. No idea.
Starks
DD-WRT User


Joined: 18 Feb 2008
Posts: 55

PostPosted: Thu Jul 28, 2011 23:10    Post subject: Reply with quote
I can't help but feel that this has been too easy.

Getting a boot log and CFE is supposed to be a tedious operation.
LOM
DD-WRT Guru


Joined: 28 Dec 2008
Posts: 7647

PostPosted: Fri Jul 29, 2011 10:16    Post subject: Reply with quote
Starks wrote:
I wouldn't.

My assumption is that this router will require a few things established first.

1. NEWD or NEWD2?
2. K2.4 or K2.6?
3. Multi-flash for first use?
4. Special builds?
5. Is the necessary code even in the trunk?


1. NEWDX Wink (latest Broadcom wifi driver, the radio is already used in other dd-wrt supported routers)

2. K26
3. Yes
4. Yes, nv64 build like the WNDR4000 for Netgear routers with 64KByte nvram.
5. Yes

Can you please extract mtd/1, mtd/16, mtd/17 and upload them here or include them in a pm to me.

I don't think Eko ever got a donated router (he usually acknowledge that in a forum post) but it looks like it is possible to add dd-wrt support for the router now without a physical router on his table.

_________________
Kernel panic: Aiee, killing interrupt handler!
Goto page Previous  1, 2, 3, 4 ... 22, 23, 24  Next Display posts from previous:    Page 3 of 24
Post new topic   This topic is locked: you cannot edit posts or make replies.    DD-WRT Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum