タグ: QCA9558

WAB-I1750-PS

某所で某氏が既にサポート作業をしており眺めていたが、普段触る家庭向けルータと異なりRJ-45タイプのコンソールポートがあったりブザーを搭載しているなど気になる点がいくつかあり、半ば衝動的に購入したもの。
前述の通り、既に作業している方がいる為こちらではOpenWrt本家に投げるための作業は行わないが、試しに弄ってみるのでメモ。

Ethernet

switchは搭載せず、QCA9558のeth0/eth1にAR803x phy2つをそれぞれ直結。

zone WAN LAN
port
(WAB-I1750-PS)
PD (IN) PSE (OUT)
port eth0
(AR8035)
eth1
(AR8033)

MAC

未確認

  • Ethernet: 74:DA:88:xx:xx:0A (tddp, option macaddr (text))
  • 2.4G: 00:90:FE:xx:xx:0A
  • 5G: 00:90:FE:xx:xx:0B

U-Boot

  • help
    ath> help
    ?       - alias for 'help'
    autoscr - run script from memory
    base    - print or set address offset
    bdinfo  - print Board Info structure
    boot    - boot default, i.e., run 'bootcmd'
    bootd   - boot default, i.e., run 'bootcmd'
    bootelf - Boot from an ELF image in memory
    bootm   - boot application image from memory
    bootp   - boot image via network using BootP/TFTP protocol
    bootvx  - Boot vxWorks from an ELF image
    cmp     - memory compare
    coninfo - print console devices and information
    cp      - memory copy
    crc32   - checksum calculation
    dhcp    - invoke DHCP client to obtain IP/boot params
    echo    - echo args to console
    elx_check      - check ELX image
    erase   - erase FLASH memory
    ethreg    - S26 PHY Reg rd/wr  utility
    exit    - exit script
    flinfo  - print FLASH memory information
    go      - start application at address 'addr'
    help    - print online help
    iminfo  - print header information for application image
    itest   - return true/false on integer compare
    loop    - infinite loop on address range
    md      - memory display
    mii     - MII utility commands
    mm      - memory modify (auto-incrementing)
    mtest   - simple RAM test
    mw      - memory write (fill)
    nfs     - boot image via network using NFS protocol
    nm      - memory modify (constant address)
    pci     - list and access PCI Configuration Space
    ping    - send ICMP ECHO_REQUEST to network host
    pll cpu-pll dither ddr-pll dither - Set to change CPU & DDR speed
    pll erase
    pll get
    printenv- print environment variables
    progmac - Set ethernet MAC addresses
    protect - enable or disable FLASH write protection
    rarpboot- boot image via network using RARP/TFTP protocol
    reset   - Perform RESET of the CPU
    run     - run commands in an environment variable
    saveenv - save environment variables to persistent storage
    setenv  - set environment variables
    sleep   - delay execution for some time
    test    - minimal test like /bin/sh
    tftpboot- boot image via network using TFTP protocol
    version - print monitor version
    

  • version
    ath> version
    
    U-Boot 1.1.4-g245070bc-dirty (Sep 15 2014 - 21:36:13)
    

  • printenv
    ath> printenv
    bootargs=console=ttyS0,115200 root=31:02 rootfstype=jffs2 init=/sbin/init mtdparts=ath-nor0:256k(u-boot),64k(u-boot-env),6336k(rootfs),1408k(uImage),8256k(mib0),64k(ART)
    bootcmd=bootm 0x9f070000
    bootdelay=2
    baudrate=115200
    ethaddr="00:90:FE:**:**:0A"
    ipaddr=192.168.99.9
    serverip=192.168.99.8
    dir=
    lu=tftp 0x80060000 ${dir}u-boot.bin&&erase 0x9f000000 +$filesize&&cp.b $fileaddr 0x9f000000 $filesize
    lf=tftp 0x80060000 ${dir}7479PLC${bc}-jffs2&&erase 0x9f050000 +0x630000&&cp.b $fileaddr 0x9f050000 $filesize
    lk=tftp 0x80060000 ${dir}vmlinux${bc}.lzma.uImage&&erase 0x9f680000 +$filesize&&cp.b $fileaddr 0x9f680000 $filesize
    ethact=eth1
    domain=1
    pincode=********
    wlanaddr=00:aa:bb:cc:dd:10
    sn=************
    usboot=0
    op_mode=0
    bver=4.0.1.5
    dom2=1
    wanaddr=00:aa:bb:cc:dd:20
    bootfile=uImage_WN-AC733GR
    hw_id=0107000d
    language_code=jp
    kver=1.0.16
    stdin=serial
    stdout=serial
    stderr=serial
    
    Environment size: 904/65532 bytes
    

  • mii device
    ath> mii device
    MII devices: 'eth1'
    Current device: 'eth1'
    

  • md.l 0x180500x8
    0x18050028

    ath> md.l 0x18050028 1
    18050028: 00000101
    

    0x18050048

    ath> md.l 0x18050048 1
    18050048: 03000101    ....
    

  • 
    

Kernel

パスワードを要求される。

  • uname -a
    # uname -a
    Linux WAB_I1750 3.2.9 #3 Mon Sep 15 20:24:53 CST 2014 mips GNU/Linux
    

  • cat /proc/version
    # cat /proc/version
    Linux version 3.2.9 (root@******-OptiPlex-****) (gcc version 4.3.6 (Buildroot 2013.05) ) #3 Mon Sep 15 20:24:53 CST 2014
    

  • cat /proc/cpuinfo
    # cat /proc/cpuinfo
    system type             : QCA955x
    machine                 : Elecom WAP-S1167
    processor               : 0
    cpu model               : MIPS 74Kc V5.0
    BogoMIPS                : 359.42
    wait instruction        : yes
    microsecond timers      : yes
    tlb_entries             : 32
    extra interrupt vector  : yes
    hardware watchpoint     : yes, count: 4, address/irw mask: [0x0000, 0x0bf0, 0x07f8, 0x05e0]
    ASEs implemented        : mips16
    shadow register sets    : 1
    kscratch registers      : 0
    core                    : 0
    VCED exceptions         : not available
    VCEI exceptions         : not available
    

  • cat /proc/meminfo
    # cat /proc/meminfo
    MemTotal:         126244 kB
    MemFree:           80696 kB
    Buffers:            2464 kB
    Cached:            17788 kB
    SwapCached:            0 kB
    Active:             7428 kB
    Inactive:          16776 kB
    Active(anon):       4380 kB
    Inactive(anon):     1548 kB
    Active(file):       3048 kB
    Inactive(file):    15228 kB
    Unevictable:           0 kB
    Mlocked:               0 kB
    SwapTotal:             0 kB
    SwapFree:              0 kB
    Dirty:                 0 kB
    Writeback:             0 kB
    AnonPages:          3968 kB
    Mapped:             3792 kB
    Shmem:              1976 kB
    Slab:              14296 kB
    SReclaimable:        704 kB
    SUnreclaim:        13592 kB
    KernelStack:         448 kB
    PageTables:          356 kB
    NFS_Unstable:          0 kB
    Bounce:                0 kB
    WritebackTmp:          0 kB
    CommitLimit:       63120 kB
    Committed_AS:      98812 kB
    VmallocTotal:    1048372 kB
    VmallocUsed:         496 kB
    VmallocChunk:    1044264 kB
    

  • cat /proc/mtd
    # cat /proc/mtd
    dev:    size   erasesize  name
    mtd0: 01000000 00010000 "ALL"
    mtd1: 00040000 00010000 "Bootloader"
    mtd2: 00010000 00010000 "Config"
    mtd3: 00010000 00010000 "ART"
    mtd4: 00010000 00010000 "ART2"
    mtd5: 00e00000 00010000 "Kernel"
    mtd6: 00e00000 00010000 "user"
    mtd7: 00100000 00010000 "manufacture"
    mtd8: 00010000 00010000 "backup"
    mtd9: 00080000 00010000 "storage"
    

  • mount
    # mount
    rootfs on / type rootfs (rw)
    none on /sys type sysfs (rw,relatime)
    /proc on /proc type proc (rw,relatime)
    devpts on /dev/pts type devpts (rw,relatime,mode=600)
    /dev/shm/tmp/ on /mnt/tmpfs type tmpfs (rw,relatime,size=16384k,nr_inodes=10240,mode=700)
    /dev/mtdblock9 on /storage type jffs2 (rw,relatime)
    /dev/loop0 on /apps type squashfs (ro,relatime)
    

  • ls -al /sys/class/leds
    # ls -al /sys/class/leds
    lrwxrwxrwx    1         0 Sep  1 00:12 buzr -> ../../devices/platform/leds-gpio/leds/buzr
    lrwxrwxrwx    1         0 Sep  1 00:00 2g_led -> ../../devices/platform/leds-gpio/leds/2g_led
    lrwxrwxrwx    1         0 Sep  1 00:00 usb1_en -> ../../devices/platform/leds-gpio/leds/usb1_en
    lrwxrwxrwx    1         0 Sep  1 00:00 usb1_led -> ../../devices/platform/leds-gpio/leds/usb1_led
    lrwxrwxrwx    1         0 Sep  1 00:12 DIAG -> ../../devices/platform/leds-gpio/leds/DIAG
    drwxr-xr-x   19         0 Sep  1 00:00 ..
    drwxr-xr-x    2         0 Sep  1 00:00 .
    

  • header -x WAB-I1750-PS-FW-V1-5-4.bin
    # header -x WAB-I1750-PS-FW-V1-5-4.bin
    ### Decoding  image ####
    Decode source file [WAB-I1750-PS-FW-V1-5-4.bin]
    ------- Header Info -------
    Vendor  id:  0x0107
    Product id:  0x000d
    Hardware id:  0x0107000d
    Version id:  3047
    Code Version:  1.5.4
    Type: 0x3 [kernel]
    comp_file_len:  6355047
    comp_file_sum:  0x0
    Header sum:  0x3e3
    Magic key:  0x30471688
    MD5 chksum:  5a30899a57eb61ad71aba294ce46875
    ------------------------------
    Decode finished, got file [WAB-I1750-PS-FW-V1-5-4.bin.bin] with size 6355047 bytes
    header: Return OK
    

  • ./busybox devmem 0x18070000 32
    ※2020/07/23現在のGitHubにおけるmirror/busyboxのmasterをコンパイルし実機上へ転送したもの

    # ./busybox devmem 0x18070000 32
    0x003FD001
    

  • ./busybox devmem 0x180500x8 32
    0x18050028

    # ./busybox devmem 0x18050028 32
    0xA6000000
    

    0x18050048

    # ./busybox devmem 0x18050048 32
    0x03000000
    

  • 
    

  • bootlog (op_mode=0)
    U-Boot 1.1.4-g245070bc-dirty (Sep 15 2014 - 21:36:13)
    ELX version: 1.0.1
    
    7479PLC - Scorpion 1.0DRAM:
    sri
    Scorpion 1.0
    ath_ddr_initial_config(178): (32bit) ddr2 init
    tap = 0x00000003
    Tap (low, high) = (0x5, 0x1c)
    Tap values = (0x10, 0x10, 0x10, 0x10)
    128 MB
    Flash Manuf Id 0xc2, DeviceId0 0x20, DeviceId1 0x18
    Flash [MX25L12845E] sectors: 256
    Flash: 16 MB
    In:    serial
    Out:   serial
    Err:   serial
    Net:   ath_gmac_enet_initialize...
    athrs_sgmii_res_cal: cal value = 0x1
    Fetching MAC Address from 0x87feb67c
    Fetching MAC Address from 0x87feb67c
    ath_gmac_enet_initialize: reset mask:c02200
    Scorpion ---->8033 PHY*
    AR8033 PHY init
    athrs_ar8033_reg_init: Done ffff
    Max resets limit reached exiting...
    athr_gmac_sgmii_setup SGMII done
    : cfg1 0x800c0000 cfg2 0x7214
    eth1: 00:aa:bb:cc:dd:01
    eth1 up
    eth1
    Setting 0x18116290 to 0x458ba14f
    
    Please choose the operation:
    1: Load system code to SDRAM via TFTP.
    3: Boot system code via Flash (default).
    4: Entr boot command line interface.                                                                                                             0
    
    3: System Boot system code via Flash.
    ## Booting image at 9f070000 ...
    Image Name:   Linux Kernel Image
    Created:      2014-09-15  12:25:00 UTC
    Image Type:   MIPS Linux Kernel Image (lzma compressed)
    Data Size:    5728465 Bytes =  5.5 MB
    Load Address: 80002000
    Entry Point:  802c1520
    Verifying Checksum at 0x9f070040 ...OK
    Uncompressing Kernel Image ... OK
    
    Starting kernel ...
    
    Linux version 3.2.9 (****@******-OptiPlex-****) (gcc version 4.3.6 (Buildroot 2013.05) ) #3 Mon Sep 15 20:24:53 CST 2014
    bootconsole [early0] enabled
    CPU revision is: 00019750 (MIPS 74Kc)
    SoC: QCA955x
    Clocks: CPU:720.000MHz, DDR:600.000MHz, AHB:200.000MHz, Ref:40.000MHz
    Determined physical RAM map:
    memory: 08000000 @ 00000000 (usable)
    Initrd not found or empty - disabling initrd
    Zone PFN ranges:
    Normal   0x00000000 -> 0x00008000
    Movable zone start PFN for each node
    early_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00008000
    Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32512
    Kernel command line:  console=ttyS0,115200 root=/dev/ram0 rootfstype=squashfs,jffs2
    PID hash table entries: 512 (order: -1, 2048 bytes)
    Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
    Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
    Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
    Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
    Writing ErrCtl register=00000000
    Readback ErrCtl register=00000000
    Memory: 119220k/131072k available (2849k kernel code, 11852k reserved, 692k data, 7024k init, 0k highmem)
    SLUB: Genslabs=9, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
    NR_IRQS:51
    Calibrating delay loop... 359.42 BogoMIPS (lpj=718848)
    pid_max: default: 32768 minimum: 301
    Mount-cache hash table entries: 512
    NET: Registered protocol family 16
    MIPS: machine is Elecom WAP-S1167
    registering PCI controller with io_map_base unset
    ar724x-pci ar724x-pci.1: PCIe link is down
    registering PCI controller with io_map_base unset
    bio: create slab  at 0
    vgaarb: loaded
    SCSI subsystem initialized
    usbcore: registered new interface driver usbfs
    usbcore: registered new interface driver hub
    usbcore: registered new device driver usb
    pci 0000:00:00.0: fixup device configuration
    pci 0000:00:00.0: BAR 0: assigned [mem 0x10000000-0x101fffff 64bit]
    pci 0000:00:00.0: BAR 0: set to [mem 0x10000000-0x101fffff 64bit] (PCI address [0x10000000-0x101fffff])
    pci 0000:00:00.0: BAR 6: assigned [mem 0x10200000-0x1020ffff pref]
    pci 0000:00:00.0: using irq 40 for pin 1
    Switching to clocksource MIPS
    NET: Registered protocol family 2
    IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
    TCP established hash table entries: 4096 (order: 3, 32768 bytes)
    TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
    TCP: Hash tables configured (established 4096 bind 4096)
    TCP reno registered
    UDP hash table entries: 256 (order: 0, 4096 bytes)
    UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
    NET: Registered protocol family 1
    squashfs: version 4.0 (2009/01/31) Phillip Lougher
    JFFS2 version 2.2 (NAND) (SUMMARY) (ZLIB) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
    msgmni has been set to 232
    io scheduler noop registered
    io scheduler deadline registered
    io scheduler cfq registered (default)
    step 0x54e scale 0x8 for 115200
    Serial: Atheros High-Speed UART (115200)
    Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
    serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11) is a 16550A
    console [ttyS0] enabled, bootconsole disabled
    console [ttyS0] enabled, bootconsole disabled
    loop: module loaded
    Flash0 Manuf Id 0xc2, DeviceId0 0x20, DeviceId1 0x18
    Flash0 MX25L12845E(c2 2018c200) (16384 Kbytes)
    mtd .name = ath-nor0, .size = 0x01000000 (16M) .erasesize = 0x00010000 (64K) .numeraseregions = 0
    Creating 10 MTD partitions on "ath-nor0":
    0x000000000000-0x000001000000 : "ALL"
    0x000000000000-0x000000040000 : "Bootloader"
    0x000000040000-0x000000050000 : "Config"
    0x000000050000-0x000000060000 : "ART"
    0x000000060000-0x000000070000 : "ART2"
    0x000000070000-0x000000e70000 : "Kernel"
    0x000000070000-0x000000e70000 : "user"
    0x000000e70000-0x000000f70000 : "manufacture"
    0x000000f70000-0x000000f80000 : "backup"
    0x000000f80000-0x000001000000 : "storage"
    IMQ driver loaded successfully. (numdevs = 2, numqueues = 1)
    Hooking IMQ after NAT on PREROUTING.
    Hooking IMQ before NAT on POSTROUTING.
    usbcore: registered new interface driver asix
    usbcore: registered new interface driver cdc_ether
    usbcore: registered new interface driver net1080
    usbcore: registered new interface driver cdc_subset
    usbcore: registered new interface driver zaurus
    usbcore: registered new interface driver MOSCHIP usb-ethernet driver
    cdc_ncm: 04-Aug-2011
    usbcore: registered new interface driver cdc_ncm
    ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
    Port Status 1c000004
    ath-ehci ath-ehci.0: ATH EHCI
    ath-ehci ath-ehci.0: new USB bus registered, assigned bus number 1
    ath-ehci ath-ehci.0: irq 48, io mem 0x1b000000
    ath-ehci ath-ehci.0: USB 2.0 started, EHCI 1.00
    usb usb1: New USB device found, idVendor=1d6b, idProduct=0002
    usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
    usb usb1: Product: ATH EHCI
    usb usb1: Manufacturer: Linux 3.2.9 ehci_hcd
    usb usb1: SerialNumber: platform
    hub 1-0:1.0: USB hub found
    hub 1-0:1.0: 1 port detected
    Port Status 1c000004
    ath-ehci1 ath-ehci1.1: ATH EHCI
    ath-ehci1 ath-ehci1.1: new USB bus registered, assigned bus number 2
    ath-ehci1 ath-ehci1.1: irq 49, io mem 0x1b400000
    ath-ehci1 ath-ehci1.1: USB 2.0 started, EHCI 1.00
    usb usb2: New USB device found, idVendor=1d6b, idProduct=0002
    usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1
    usb usb2: Product: ATH EHCI
    usb usb2: Manufacturer: Linux 3.2.9 ehci_hcd
    usb usb2: SerialNumber: platform
    hub 2-0:1.0: USB hub found
    hub 2-0:1.0: 1 port detected
    ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
    uhci_hcd: USB Universal Host Controller Interface driver
    Initializing USB Mass Storage driver...
    usbcore: registered new interface driver usb-storage
    USB Mass Storage support registered.
    ath_usb_init: ID: 1130
    Registered button device:usb1_over, gpio:20,code:257,index:1
    Registered button device:reset, gpio:18,code:408,index:10
    Registered button device:wps, gpio:16,code:529,index:11
    Registered button device:usb_eject, gpio:19,code:256,index:0
    Netfilter messages via NETLINK v0.30.
    nf_conntrack version 0.5.0 (256 buckets, 2048 max)
    xt_time: kernel timezone is -0000
    ip_tables: (C) 2000-2006 Netfilter Core Team
    TCP westwood registered
    NET: Registered protocol family 10
    NET: Registered protocol family 17
    NET: Registered protocol family 2
    8021q: 802.1Q VLAN Support v1.8
    Freeing unused kernel memory: 7024k freed
    System Init version: 1.1 date: 1
    Setting up file systems ...
    Setting up /mnt/tmpfs directory with tmpfs/16384KB
    Setting up FLASH storage partition ...
    JFFS2 notice: (346) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
    Setting up /apps directory ...apps is in RAM ...
    Setting up loopback device ...
    FINISHED
    qca955x_GMAC: Length per segment 1536
    955x_GMAC: qca955x_gmac_attach
    955x_GMAC: qca955x_set_gmac_caps
    Currently in polling mode unit0
    Registering AR8035 Phy....
    qca955x_GMAC: RX TASKLET - Pkts per Intr:160
    qca955x_GMAC: Max segments per packet :   1
    qca955x_GMAC: Max tx descriptor count :   128
    qca955x_GMAC: Max rx descriptor count :   224
    qca955x_GMAC: Mac capability flags    :   42200
    955x_GMAC: qca955x_gmac_attach
    955x_GMAC: qca955x_set_gmac_caps
    Currently in polling mode unit1
    Registering AR8033 Phy....
    qca955x_GMAC: RX TASKLET - Pkts per Intr:160
    qca955x_GMAC: Max segments per packet :   1
    qca955x_GMAC: Max tx descriptor count :   128
    qca955x_GMAC: Max rx descriptor count :   224
    qca955x_GMAC: Mac capability flags    :   42200
    955x_GMAC: Serdes PLL is locked value 0x18818116
    Start Normal Operation Mode ...
    ************************************************************************
    *                                ---ELX---                             *
    ************************************************************************
    
    KernelApp version: 1.0.16 build date: 2014/09/15 build time: 20:22:00
    cmd> ln: /sbin/./cli: File exists
    ln: /sbin/./start_all: File exists
    athr_gmac_ring_alloc Allocated 2048 at 0x86e3c800
    sram_desc_cnt 1536,mac Unit 0,Tx r->ring_desc 0xbd000000
    athr_gmac_ring_alloc Allocated 3584 at 0x86dd5000
    sram_desc_cnt 4224,mac Unit 0,Rx r->ring_desc 0xbd000600
    955x_GMAC: eth0 in RGMII MODE
    Scorpion -----> 8035 PHY
    athrs_ar8035_reg_init: Done
    Disable TX Flow control..
    Setting Drop CRC Errors, Pause Frames and Length Error frames
    Setting PHY...
    AR8035 found!
    [0:4]Phy ID 4d:d072
    ADDRCONF(NETDEV_UP): eth0: link is not ready
    athr_gmac_ring_alloc Allocated 2048 at 0x86f95000
    sram_desc_cnt 5760,mac Unit 1,Tx r->ring_desc 0xbd001080
    athr_gmac_ring_alloc Allocated 3584 at 0x86dd4000
    sram_desc_cnt 8448,mac Unit 1,Rx r->ring_desc 0xbd001680
    955x_GMAC: eth1 in SGMII MODE
    Scorpion -----> 8033 PHY
    athrs_ar8033_reg_init: Done
    955x_SGMIIMax resets limit reached exiting...
    955x_SGMII::athr_gmac_sgmii_setup  Done
    Disable TX Flow control..
    Setting Drop CRC Errors, Pause Frames and Length Error frames
    Setting PHY...
    AR8033 found!
    Phy ID 4d:d074
    ADDRCONF(NETDEV_UP): eth1: link is not ready
    athr_gmac_ring_free Freeing at 0x86e3c800
    athr_gmac_ring_free Freeing at 0x86dd5000
    athr_gmac_ring_alloc Allocated 2048 at 0x80c19800
    sram_desc_cnt 8448,mac Unit 0,Tx r->ring_desc 0xbd000000
    athr_gmac_ring_alloc Allocated 3584 at 0x87809000
    sram_desc_cnt 8448,mac Unit 0,Rx r->ring_desc 0xbd000600
    955x_GMAC: eth0 in RGMII MODE
    Scorpion -----> 8035 PHY
    athrs_ar8035_reg_init: Done
    Disable TX Flow control..
    Setting Drop CRC Errors, Pause Frames and Length Error frames
    Setting PHY...
    AR8035 found!
    [0:4]Phy ID 4d:d072
    ADDRCONF(NETDEV_UP): eth0: link is not ready
    athr_gmac_ring_free Freeing at 0x86f95000
    athr_gmac_ring_free Freeing at 0x86dd4000
    athr_gmac_ring_alloc Allocated 2048 at 0x86f39800
    sram_desc_cnt 8448,mac Unit 1,Tx r->ring_desc 0xbd001080
    athr_gmac_ring_alloc Allocated 3584 at 0x86dd4000
    sram_desc_cnt 8448,mac Unit 1,Rx r->ring_desc 0xbd001680
    955x_GMAC: eth1 in SGMII MODE
    Scorpion -----> 8033 PHY
    athrs_ar8033_reg_init: Done
    955x_SGMIIMax resets limit reached exiting...
    955x_SGMII::athr_gmac_sgmii_setup  Done
    Disable TX Flow control..
    Setting Drop CRC Errors, Pause Frames and Length Error frames
    Setting PHY...
    AR8033 found!
    Phy ID 4d:d074
    ADDRCONF(NETDEV_UP): eth1: link is not ready
    port_id:[4],mode:[1]
    sh: mii_mgr: not found
    port_id:[4],mode:[1]
    port_id:[1],mode:[1]
    sh: mii_mgr: not found
    port_id:[1],mode:[1]
    device br_t.1 entered promiscuous mode
    device br_t entered promiscuous mode
    br0: port 1(br_t.1) entering disabled state
    device eth0 entered promiscuous mode
    device eth1 entered promiscuous mode
    adf: module license 'Proprietary' taints kernel.
    Disabling lock debugging due to kernel taint
    ath_hal: 0.9.17.1 (AR5416, AR9380, REGOPS_FUNC, WRITE_EEPROM, 11D)
    ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved
    ath_dfs: Version 2.0.0
    Copyright (c) 2005-2006 Atheros Communications, Inc. All Rights Reserved
    ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved
    ath_ahb: 10.1.467 (Atheros/multi-bss)
    __ath_attach: Set global_scn[0]
    Enterprise mode: 0x33fc0000
    Restoring Cal data from Flash
    Green-AP : Green-AP : Attached
    
    ath_get_caps[5957] rx chainmask mismatch actual 7 sc_chainmak 0
    ath_get_caps[5932] tx chainmask mismatch actual 7 sc_chainmak 0
    ath_attach_dfs[11938] dfsdomain 1
    wifi0: Atheros ???: mem=0xb8100000, irq=47
    ath_pci: 10.1.467 (Atheros/multi-bss)
    ath_pci_probe
    PCI device id is 003c :003c
    ath_pci 0000:00:00.0: BAR 0: assigned [mem 0x10000000-0x101fffff 64bit]
    ath_pci 0000:00:00.0: BAR 0: set to [mem 0x10000000-0x101fffff 64bit] (PCI address [0x10000000-0x101fffff])
    PCI: Enabling device 0000:00:00.0 (0000 -> 0002)
    ath_pci 0000:00:00.0: ath DEBUG: sc=0x80df6e00
    
    ol_ath_pci_configure : num_desired MSI set to 0
    
    Using PCI Legacy Interrupt
    __ol_ath_attach: ath_attach TODO
    ol_ath_attach() BMI inited.
    ol_ath_attach() BMI Get Target Info.
    ol_ath_attach() TARGET TYPE: 7 Vers 0x4100016c
    NUM_DEV=1 FWMODE=0x2 FWSUBMODE=0x0 FWBR_BUF 0
    ol_ath_attach() configure Target .
    qc98xx_verify_checksum: flash checksum passed: 0xc79d
    ol_transfer_bin_file 1713: Download Flash data len 2116
    ol_transfer_bin_file 1657: Download Firmware data len 190500
    ol_ath_attach() Download FW.
    ol_ath_attach() HT Create .
    ol_ath_attach() HIF Claim.
    ol_ath_attach() BMI Done.
    ol_ath_attach() WMI attached. wmi_handle 86490000
    +HWT
    CE_recv_buf_enqueue 457 Populate last entry 512 for CE 5
    CE_recv_buf_enqueue 466 CE 5 wi 511 dest_ptr 0x6626820 nbytes 0 recv_ctxt 0x8660c9c0
    -HWT
    HTC Service:0x0300 ep:1 TX flow control disabled
    CE_pkt_dl_len_set CE 4 Pkt download length 42
    TXRX: Created pdev 869fe200
    wmi_service_ready_event_rx:  WMI UNIFIED SERVICE READY event
    num_rf_chain : 00000003
    ht_cap_info: : 0000085b
    vht_cap_info : 338001b2
    vht_supp_mcs : 0000ffea
    LARGE_AP enabled. num_peers 144, num_vdevs 16, num_tids 256
    idx 0 req 1  num_units 0 num_unit_info 2 unit size 404 actual units 145
    chunk 0 len 58580 requested ,ptr  0x6270000
    FIRMWARE:P 145 V 16 T 443
    
    wmi_ready_event_rx:  WMI UNIFIED READY event
    ol_ath_connect_htc() WMI is ready
    ol_ath_set_host_app_area TODO
    target uses HTT version 2.1; host uses 2.1
    ol_ath_attach() connect HTC.
    ol_regdmn_start: reg-domain param: regdmn=0, countryName=, wModeSelect=FFFFFFFF, netBand=FFFFFFFF, extendedChanMode=0.
    ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2) flags 0x2150
    ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4) flags 0xa0
    ol_regdmn_init_channels: !avail mode 0x1f9001 (0x8) flags 0xc0
    ol_regdmn_init_channels: !avail mode 0x1f9001 (0x20) flags 0xd0
    ol_regdmn_init_channels: !avail mode 0x1f9001 (0x40) flags 0x150
    ol_regdmn_init_channels: !avail mode 0x1f9001 (0x800) flags 0x10080
    ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2000) flags 0x20080
    ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4000) flags 0x40080
    Skipping VHT80 channel 5825
    ol_ath_phyerr_attach: called
    OL Resmgr Init-ed
    Green-AP : Green-AP : Attached
    
    Green-AP : Attached
    ol_if_dfs_setup: called
    ol_if_dfs_attach: called; ptr=86285974, radar_info=80ed3bf0
    ol_ath_rtt_meas_report_attach: called
    ol_ath_attach() UMAC attach .
    ol_if_dfs_configure: called
    ol_if_dfs_configure: FCC domain
    ol_if_dfs_disable: called
    ol_ath_attach: Calling ol_if_dfs_configure
    __ol_ath_attach: init tx/rx TODO
    __ol_ath_attach: hard_header_len reservation 58
    __ol_ath_attach: dev name wifi1
    Initializing Pktlogs for 11ac
    ath_attach_dfs[11938] dfsdomain 1
    VAP device ath0 created
    wds32     no private ioctls.
    
    DES SSID SET=elecom2g01-9cb40a
    Setting Max Stations:50
    WARNING: Fragmentation with HT mode NOT ALLOWED!!
    Error for wireless request "Set Fragmentation Threshold" (8B24) :
    SET failed on device ath0 ; Invalid argument.
    Error for wireless request "Set Fragmentation Threshold" (8B24) :
    SET failed on device wds32 ; No such device.
    Error for wireless request "Set RTS Threshold" (8B22) :
    SET failed on device wds32 ; No such device.
    FWLOG: [20962] WHAL_ERROR_RESET_CHANNF1 ( 0xaaaa1111, 0x0 )
    FWLOG: [20962] WHAL_ERROR_RESET_CHANNF1 ( 0xaaaa2222, 0x91 )
    FWLOG: [20962] WHAL_ERROR_RESET_CHANNF1 ( 0xaaaa3333, 0x122 )
    FWLOG: [20962] WHAL_ERROR_RESET_CHANNF1 ( 0xaaaa4444, 0x132 )
    FWLOG: [20962] WHAL_ERROR_RESET_CHANNF1 ( 0xaaaa5555, 0x142 )
    FWLOG: [20962] WHAL_ERROR_RESET_CHANNF1 ( 0x1bb, 0x14a )
    isCountryCodeValid: EEPROM regdomain 0x0
    ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2) flags 0x2150
    ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4) flags 0xa0
    ol_regdmn_init_channels: !avail mode 0x1f9001 (0x8) flags 0xc0
    ol_regdmn_init_channels: !avail mode 0x1f9001 (0x20) flags 0xd0
    ol_regdmn_init_channels: !avail mode 0x1f9001 (0x40) flags 0x150
    ol_regdmn_init_channels: !avail mode 0x1f9001 (0x800) flags 0x10080
    ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2000) flags 0x20080
    ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4000) flags 0x40080
    Skipping VHT80 channel 5660
    Skipping VHT80 channel 5680
    Skipping VHT80 channel 5700
    ath_ioctl: SIOC80211IFCREATE CALLED
    wmi_unified_vdev_create_send: ID = 0 VAP Addr = 00:90:fe:**:**:0b:
    TXRX: Created vdev 80edcd80 (00:90:fe:**:**:0b)
    Setting vdev param = 26, value = 147
    Setting vdev param = 27, value = 295
    Setting vdev param = 28, value = 300
    VAP device ath16 created
    TXRX: ol_txrx_peer_find_add_id: peer 80ebe800 ID 127
    TXRX: ol_txrx_peer_find_add_id: peer 80ebe800 ID 79
    wds36     no private ioctls.
    
    ol_ath_vap_set_param: VAP param unsupported param:38 value:0
    ol_ath_vap_set_param: VAP param unsupported param:43 value:0
    
    DES SSID SET=elecom5g01-9cb40b
    wmi_unified_vdev_stop_send
    STOPPED EVENT for vap 0
    Setting Max Stations:50
    Setting vdev param = 3, value = 100
    Setting vdev param = 26, value = 27
    Setting vdev param = 27, value = 55
    Setting vdev param = 28, value = 60
    Setting vdev param = d, value = 1
    ol_ath_vap_set_param: VAP param unsupported param:7 value:1
    WARNING: Fragmentation with HT mode NOT ALLOWED!!
    Error for wireless request "Set Fragmentation Threshold" (8B24) :
    SET failed on device ath16 ; Invalid argument.
    Error for wireless request "Set Fragmentation Threshold" (8B24) :
    SET failed on device wds36 ; No such device.
    Errool_ath_vap_set_param: VAP param unsupported param:41 value:1
    r for wireless request "Set RTS Threshold" (8B22ol_ath_vap_set_param: VAP param unsupported param:35 value:0
    ) :
    SET failed on device wds36 ; No such deSetting vdev param = 1a, value = 1
    vice.
    Interface doesn't accept private ioctl...
    AMPDU (8BE0): Operation not permitted
    Interface doesn't accept privaol_ath_vap_set_param: VAP param unsupported param:156 value:0
    te ioctl...
    AMPDUFrames (8BE0): Operation not permitted
    Interface doesn't accept private ioctl...
    AMPDULim (8Setting vdev param = 1e, value = 1
    BE0): Operation not permitted
    Invalid command : set_swapled
    route: SIOCADDRT: File exists
    Setting vdev param = 12, value = 1
    ol_ath_vap_set_param: VAP param unsupported param:30 value:1
    
    port_id:[4],mode:[1]
    port_id:[1],mode:[1]
    
    Ebtables v2.0 registered
    
    Start wps_led driver
    

WRC-1750GHBK

吉川のハードオフにて550円ジャンクで見つけ、一度は見送ったものの後にアンケートを取った結果WRC-1750GSと同数で並んだため確保したもの。とにかく筐体がデカい。
弄っていくのでメモ。

Switch

zone WAN LAN
port
(WRC-1750GHBK)
INTERNET LAN4 LAN3 LAN2 LAN1
port
(QCA8337)
port1 port2 port3 port4 port5

MAC

  • LAN: 00:90:FE:xx:xx:E1 (hwconfig, HW.LAN.MAC.Address (text))
  • WAN: 00:90:FE:xx:xx:E0 (hwconfig, HW.WAN.MAC.Address (text))
  • 2.4G: 00:90:FE:xx:xx:E2 (?)
  • 5G: 00:90:FE:xx:xx:E3 (hwconfig, HW.LAN.5G.0.MAC.Address (text))

U-Boot

  • help
    ath> help
    ?       - alias for 'help'
    autoscr - run script from memory
    base    - print or set address offset
    bdinfo  - print Board Info structure
    boot    - boot default, i.e., run 'bootcmd'
    bootd   - boot default, i.e., run 'bootcmd'
    bootelf - Boot from an ELF image in memory
    bootm   - boot application image from memory
    bootp   - boot image via network using BootP/TFTP protocol
    bootvx  - Boot vxWorks from an ELF image
    cmp     - memory compare
    coninfo - print console devices and information
    cp      - memory copy
    crc32   - checksum calculation
    dhcp    - invoke DHCP client to obtain IP/boot params
    echo    - echo args to console
    erase   - erase FLASH memory
    ethreg    - S26 PHY Reg rd/wr  utility
    exit    - exit script
    flinfo  - print FLASH memory information
    go      - start application at address 'addr'
    help    - print online help
    iminfo  - print header information for application image
    itest   - return true/false on integer compare
    loop    - infinite loop on address range
    md      - memory display
    mii     - MII utility commands
    mm      - memory modify (auto-incrementing)
    mtest   - simple RAM test
    mw      - memory write (fill)
    nfs     - boot image via network using NFS protocol
    nm      - memory modify (constant address)
    pci     - list and access PCI Configuration Space
    ping    - send ICMP ECHO_REQUEST to network host
    pll cpu-pll dither ddr-pll dither - Set to change CPU & DDR speed
    pll erase
    pll get
    printenv- print environment variables
    progmac - Set ethernet MAC addresses
    protect - enable or disable FLASH write protection
    rarpboot- boot image via network using RARP/TFTP protocol
    reset   - Perform RESET of the CPU
    run     - run commands in an environment variable
    saveenv - save environment variables to persistent storage
    setenv  - set environment variables
    sleep   - delay execution for some time
    test    - minimal test like /bin/sh
    tftpboot- boot image via network using TFTP protocol
    version - print monitor version
    

  • version
    ath> version
    
    U-Boot 1.1.4 (Jul  7 2015 - 02:12:19)
    

  • bdinfo
    ath> bdinfo
    boot_params = 0x87F7BFB0
    memstart    = 0x80000000
    memsize     = 0x08000000
    flashstart  = 0x9F000000
    flashsize   = 0x01000000
    flashoffset = 0x0002AA18
    ethaddr     = 00:AA:BB:CC:DD:EE
    ip_addr     = 192.168.1.1
    baudrate    = 115200 bps
    

  • printenv
    ath> printenv
    bootargs=console=ttyS0,115200 root=31:02 rootfstype=jffs2 init=/sbin/init mtdparts=ath-nor0:256k(u-boot),64k(u-boot-env),6336k(rootfs),1408k(uImage),8256k(mib0),64k(ART)
    bootdelay=2
    baudrate=115200
    ethaddr=0x00:0xaa:0xbb:0xcc:0xdd:0xee
    ipaddr=192.168.1.1
    serverip=192.168.1.10
    dir=
    lu=tftp 0x80060000 ${dir}u-boot.bin&&erase 0x9f000000 +$filesize&&cp.b $fileaddr 0x9f000000 $filesize
    lf=tftp 0x80060000 ${dir}ap135${bc}-jffs2&&erase 0x9f050000 +0x630000&&cp.b $fileaddr 0x9f050000 $filesize
    lk=tftp 0x80060000 ${dir}vmlinux${bc}.lzma.uImage&&erase 0x9f680000 +$filesize&&cp.b $fileaddr 0x9f680000 $filesize
    stdin=serial
    stdout=serial
    stderr=serial
    ethact=eth0
    bootcmd=bootm 0xbf070000
    
    Environment size: 685/65532 bytes
    

  • mii device
    ath> mii device
    MII devices: 'eth0' 'eth1' 
    Current device: 'eth0'
    

  • md.l 0x18050028
    ath> md.l 0x18050028
    18050028: 5a000000    Z...
    

  • md.l 0x18050048
    ath> md.l 0x18050048
    18050048: 03000101    ....
    

  • md.l 0x18070000 1
    ath> md.l 0x18070000 1
    18070000: 00000001    ....
    

  • 
    

  • 
    

  • 
    

Kernel

パスワードが設定されていてログイン不可。

  • 
    

  • 
    

  • 
    

  • 
    

  • 
    

  • 
    

  • 
    

  • bootlog
    U-Boot 1.1.4 (Jul  7 2015 - 02:12:19)
    
    ap135 - Scorpion 1.0DRAM:  
    sri
    Scorpion 1.0
    ath_ddr_initial_config(200): (32bit) ddr2 init
    tap = 0x00000003
    Tap (low, high) = (0x4, 0x1d)
    Tap values = (0x10, 0x10, 0x10, 0x10)
    128 MB
    Top of RAM usable for U-Boot at: 88000000
    Reserving 207k for U-Boot at: 87fcc000
    Reserving 192k for malloc() at: 87f9c000
    Reserving 44 Bytes for Board Info at: 87f9bfd4
    Reserving 36 Bytes for Global Data at: 87f9bfb0
    Reserving 128k for boot params() at: 87f7bfb0
    Stack Pointer at: 87f7bf98
    Now running in RAM - U-Boot at: 87fcc000
    Flash Manuf Id 0xef, DeviceId0 0x40, DeviceId1 0x18
    flash size 16MB, sector count = 256
    Flash: 16 MB
    *** Warning - bad CRC, using default environment
    
    *** Warning *** : PCIe WLAN Module not found !!!
    In:    serial
    Out:   serial
    Err:   serial
    Net:   ath_gmac_enet_initialize...
    athrs_sgmii_res_cal: cal value = 0x1
    Fetching MAC Address from 0x87fef17c
    Fetching MAC Address from 0x87fef17c
    ath_gmac_enet_initialize: reset mask:c02200 
    Scorpion  ----> S17 PHY *
    Vlan config...
    s17 phy0 register value 0x00004140
    TEST: FINAL REG VAL after TX Calibration - 0x4a000000
    TEST: FINAL XMII VAL after RX Calibration - 0x5a000000
    TEST: FINAL ETH_CFG VAL after RX Calibration - 0x00000001
    athrs17_reg_init: complete
    : cfg1 0x80000000 cfg2 0x7335
    eth0: 00:00:00:00:00:00
    eth0 up
    athrs17_reg_init_wan done
    SGMII in forced mode
    athr_gmac_sgmii_setup SGMII done
    : cfg1 0x800c0000 cfg2 0x7214
    eth1: 00:00:00:00:00:00
    eth1 up
    eth0, eth1
    Setting 0x18116290 to 0x458ba14f
    Hit any key to stop autoboot:  0 
    ## Booting image at bf070000 ...
       Image Name:   Linux Kernel Image
       Created:      2015-07-06  21:26:15 UTC
       Image Type:   MIPS Linux Kernel Image (lzma compressed)
       Data Size:    8007596 Bytes =  7.6 MB
       Load Address: 80002000
       Entry Point:  80250e00
       Verifying Checksum at 0xbf070054 ...OK
       Uncompressing Kernel Image ... OK
    No initrd
    ## Transferring control to Linux (at address 80250e00) ...
    ## Giving linux memsize in bytes, 134217728
    
    Starting kernel ...
    
    Booting QCA955x
    Linux version 2.6.31 (root@localhost.localdomain) (gcc version 4.3.3 (GCC) ) #173 Mon Jul 6 23:52:50 CST 2015
    flash_size passed from bootloader = 16
    arg 1: console=ttyS0,115200
    arg 2: root=31:02
    arg 3: rootfstype=jffs2
    arg 4: init=/sbin/init
    arg 5: mtdparts=ath-nor0:256k(u-boot),64k(u-boot-env),6336k(rootfs),1408k(uImage),8256k(mib0),64k(ART)
    arg 6: mem=128M
    cmdLine: console=ttyS0,115200 root=31:04 rootfstype=squashfs init=/sbin/init mtdparts=ath-nor0:256k(u-boot),64k(u-boot-env),128k(nvram),1088k(Kernel),14720k(RootFS),64k(hwconfig),64k(ART),15808k(Uimage) mem=128M 
    CPU revision is: 00019750 (MIPS 74Kc)
    cpu apb ddr apb ath_sys_frequency: cpu 720 ddr 600 ahb 200
    Determined physical RAM map:
     memory: 02000000 @ 00000000 (usable)
    User-defined physical RAM map:
     memory: 08000000 @ 00000000 (usable)
    Zone PFN ranges:
      Normal   0x00000000 -> 0x00008000
    Movable zone start PFN for each node
    early_node_map[1] active PFN ranges
        0: 0x00000000 -> 0x00008000
    Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32512
    Kernel command line: console=ttyS0,115200 root=31:04 rootfstype=squashfs init=/sbin/init mtdparts=ath-nor0:256k(u-boot),64k(u-boot-env),128k(nvram),1088k(Kernel),14720k(RootFS),64k(hwconfig),64k(ART),15808k(Uimage) mem=128M 
    PID hash table entries: 512 (order: 9, 2048 bytes)
    Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
    Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
    Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
    Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
    Writing ErrCtl register=00000000
    Readback ErrCtl register=00000000
    Memory: 112128k/131072k available (2381k kernel code, 18768k reserved, 591k data, 164k init, 0k highmem)
    NR_IRQS:128
    plat_time_init: plat time init done
    Console: colour dummy device 80x25
    Calibrating delay loop... 359.42 BogoMIPS (lpj=718848)
    Mount-cache hash table entries: 512
    
    ****************ALLOC***********************
     Packet mem: 8032d160 (0xe00000 bytes)
    ********************************************
    
    NET: Registered protocol family 16
    ath_pcibios_init: bus 0
    ath_pcibios_init(238): PCI 0 CMD write: 0x356
    registering PCI controller with io_map_base unset
    ath_pcibios_init: bus 1
    ***** Warning PCIe 1 H/W not found !!!
    registering PCI controller with io_map_base unset
    bio: create slab  at 0
    SCSI subsystem initialized
    pci 0000:00:00.0: PME# supported from D0 D1 D3hot
    pci 0000:00:00.0: PME# disabled
    pcibios_map_irq: IRQ 75 for bus 0
    NET: Registered protocol family 2
    IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
    TCP established hash table entries: 4096 (order: 3, 32768 bytes)
    TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
    TCP: Hash tables configured (established 4096 bind 4096)
    TCP reno registered
    NET: Registered protocol family 1
    ATH GPIOC major 0
    squashfs: version 4.0 (2009/01/31) Phillip Lougher
    fuse init (API version 7.12)
    msgmni has been set to 219
    io scheduler noop registered
    io scheduler deadline registered (default)
    Initializing edx switch control...
    Done
    Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
    serial8250.0: ttyS0 at MMIO 0xb8020000 (irq = 19) is a 16550A
    console [ttyS0] enabled
    brd: module loaded
    PPP generic driver version 2.4.2
    PPP BSD Compression module registered
    NET: Registered protocol family 24
    8 cmdlinepart partitions found on MTD device ath-nor0
    Creating 8 MTD partitions on "ath-nor0":
    0x000000000000-0x000000040000 : "u-boot"
    0x000000040000-0x000000050000 : "u-boot-env"
    0x000000050000-0x000000070000 : "nvram"
    0x000000070000-0x000000180000 : "Kernel"
    0x000000180000-0x000000fe0000 : "RootFS"
    0x000000fe0000-0x000000ff0000 : "hwconfig"
    0x000000ff0000-0x000001000000 : "ART"
    0x000000070000-0x000000fe0000 : "Uimage"
    Atheros on-chip NAND FLash Controller Driver, Version 0.1 (c) 2010 Atheros Communications, Ltd.
    u32 classifier
        Performance counters on
    Netfilter messages via NETLINK v0.30.
    nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
    CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use
    nf_conntrack.acct=1 kernel parameter, acct=1 nf_conntrack module option or
    sysctl net.netfilter.nf_conntrack_acct=1 to enable it.
    ctnetlink v0.93: registering with nfnetlink.
    xt_time: kernel timezone is -0000
    ip_tables: (C) 2000-2006 Netfilter Core Team
    ClusterIP Version 0.8 loaded successfully
    arp_tables: (C) 2002 David S. Miller
    TCP cubic registered
    NET: Registered protocol family 10
    IPv6 over IPv4 tunneling driver
    NET: Registered protocol family 17
    dnshijack
    802.1Q VLAN Support v1.8 Ben Greear 
    All bugs added by David S. Miller 
    athwdt_init: Registering WDT success
    Watchdog Reset count: 2147483844
    ath_otp_init: Registering OTP success
    VFS: Mounted root (squashfs filesystem) readonly on device 31:4.
    Freeing unused kernel memory: 164k freed
    init started: BusyBox v1.12.1 (2014-04-07 20:14:19 CST)
    starting pid 15, tty '': '/etc/init.d/rcS sysinit'
    rc ver. 1.0.1
    Initializing...Success!
    Mounting file systems...Success!
    Creating devices...Success!
    Creating loopback device...Success!
    starting pid 22, tty '': '/etc/init.d/rcS start'
    rc ver. 1.0.2
    Initializing...Success!
    Loading dynamic libraries...Success!
    edx_gpio: module license 'unspecified' taints kernel.
    Disabling lock debugging due to kernel taint
    Initializing EDX GPIO...Done
    Acelink events notification ver. 1.6
    NVRAM access daemon Ver. 1.0 Build 20150603114817
    daemonize process
    Starting L0000Config.so...Done ! (ret=0)
    Starting L0100WLANInterface.so...Done ! (ret=0)
    Starting L0130EthInterface.so...Done ! (ret=0)
    interface ath0 does not exist!
    Invalid command : setVowExt
    Invalid command : set_vsp_enable
    Interface doesn't accept private ioctl...
    setPhyRestartWar (8BE0): Operation not permitted
    Invalid command : setVowExtStats
    Invalid command : bgscan
    Invalid command : extoffset
    Invalid command : bgscan
    Invalid command : extoffset
    Interface doesn't accept private ioctl...
    AMPDU (8BE0): Operation not permitted
    Interface doesn't accept private ioctl...
    AMPDUFrames (8BE0): Operation not permitted
    Interface doesn't accept private ioctl...
    AMPDULim (8BE0): Operation not permitted
    Invalid command : HALDbg
    Invalid command : ATHDebug
    Invalid command : setVowExt
    Invalid command : setKeySrchAlways
    Invalid command : set_vsp_enable
    Invalid command : setPhyRestartWar
    Invalid command : setVowExtStats
    Invalid command : bgscan
    Starting L0200LANConfig.so...Done ! (ret=0)
    1970-01-01 00:00:26: (server.c.915) can't have more connections than fds/2:  1024 824 
    udhcpd: max_leases=235 is too big, setting to 101
    start lld2d...
    start child_net...
    start Router mode accesscontrol...
    starting firewall...
    start house_keeper...
    Starting L0230LANServices.so...Done ! (ret=0)
    Starting L0300WANConfig.so...Done ! (ret=0)
    
    Please press Enter to activate this console. starting wan_event...
    wan_event done !
    Notice: caching turned off
    Notice: caching turned off
    insmod: cannot insert '/sbin/edx_tables.ko': File exists
    device eth1.2 is already a member of a bridge; can't enslave it to bridge br0.
    insmod: cannot insert '/sbin/edx_m2u.ko': File exists
    starting wan_event...
    wan_event done !
    starting wan_event...
    udhcpc receive a leasefail for eth1.2
    wan_event done !
    

WG1400HP GPIOメモ

WG1400HPでのGPIOのレジスタを調べたメモ。整理するのが面倒なのでテキストのメモそのまま。

boot> debug memory read 0xb8040000 70
b8040000:00a6031f 20bcee2d 0000ec00 00000000 .... ..-........
b8040010:00000000 00000000 00000000 00000000 ................
b8040020:00000000 00000000 00000000 00000000 ................
b8040030:0c080900 00160000 00000000 07000000 ................
b8040040:00000006 00000908 00000000 00000000 ................
b8040050:00000000 14130000 80808080 80808080 ................
b8040060:80808080 80808080 00000000 00000002 ................

# Output Enable
val: 0xa6031f

IN: 0, 1, 2, 3, 4, 8, 9, 17, 18, 21, 23
OUT: 5, 6, 7, 10, 11, 12, 13, 14, 15, 16, 19, 20, 22

# Input Value
val: 0x20bcee2d

INPUT=1: 0, 2, 3, 5, 9, 10, 11, 13, 14, 15, 18, 19, 20, 21, 23
INPUT=0: 1, 4, 6, 7, 8, 12, 16, 17, 22

# Output Value
val: 0xec00 (kernel: 0x40ec00)

OUTPUT=1: 10, 11, 13, 14, 15

### Used
GPIO IN: 2, 3, 8, 9, 17, 18, 19, 20, 23
GPIO OUT: 5, 6, 7, 10, 11, 22

?: 19 (FUNCTION: reserved (7))
?: 20 (FUNCTION: reserved (6))
I2C_DATA: 0x14 (20)
I2C_CLK: 0x13 (19)

WG1400HP I2C expanderメモ

WG1400HPでLEDとUSB HubのRESETがぶら下がっているらしいI2C接続のExpander (Texas Instruments TCA6416)がBootloaderから制御できたので、割り当てを確認したメモ。

コマンド実行例

Read value:

boot> debug i2c ioexp read P08

Write value:

boot> debug i2c ioexp write P08 1

割り当て

  • P00: USB Hub (μPD720114) RESET
  • P01: ?
  • P02: ?
  • P03: ?
  • P04: CONVERTER (Red)
  • P05: CONVERTER (Green)
  • P06: TV (Red)
  • P07: TV (Green)
  • P10: 5 GHz (Red)
  • P11: 5 GHZ (Green)
  • P12: 2.4 GHz (Red)
  • P13: 2.4 GHz (Green)
  • P14: ACTIVE (Red)
  • P15: ACTIVE (Green)
  • P16: POWER (Red)
  • P17: POWER (Green)

WG1400HP

豊四季のハードオフで偶然1.5k + 税のモノを見つけ、衝動的に購入したもの。
NetBSD機であるためBootloaderの置き換えが必要になると思われるが、搭載しているSoCがQCA9558であり、これはpepe2k/u-boot_modで未サポートであるためどうするか未定。
とりあえず弄っていくのでメモ。

Switch

zone WAN LAN
port
(WG1400HP)
WAN LAN1 LAN2 LAN3 LAN4
port
(AR8327)
port1 port2 port3 port4 port5

MAC

  • LAN: 10:66:82:xx:xx:20 (config, 0x6 (hex))
  • WAN: 10:66:82:xx:xx:21 (config, 0xc (hex))
  • 2.4G: 10:66:82:xx:xx:22 (config, 0x0 (hex))
  • 5G: 10:66:82:xx:xx:23 (config, 0x12 (hex))

Bootloader

chiron

  • help
    boot> help
    support commands ...
    load             load module
    boot             boot loaded module
    tftpd            start tftpd [tftpd [IP] [bfn]]
    dlmode           set tftpd download mode [bfn]
    reboot           reboot system
    help             help command
    macaddr          macaddr read/write
    configid         configid read/write
    randomkey        randomkey read/write
    serial           serial number read/write
    pkg_info         show package information
    presetid         preset id read/write
    version          show boot version
    mhx              mhx utility
    tp               test program
    errorlog         errorlog command
    additional       additional command
    rf-serial        rf-serial command
    time             Time command
    debug            debug command
    ?                help command
    
  • version
    boot> version
    boot version: 1.0.0
    system version: 2.80.24
    TP Version = 1.0.0
    
  • pkg_info
    boot> pkg_info
      PKG NAME : 2x2LIGHTNING
      CPU   : Atheros/QCA9558
      RAM   : 128Mbyte
      Flash : 16Mbyte
        Device         : MX25L12845E(Macronix)
        Top Address    : 0xbf000000
        Config Address : 0xbf020000
        System Address : 0xbf040000
      Ether PHY : Atheros/AR8327(SW)
      DIPSW : 0x2
    
  • debug ?
    boot> debug ?
    support commands ...
    memory           memory read/write
    flash            flash driver r/w
    fs               file system r/w
    load             load test (calc chksum)
    exception        exception
    register         display register
    watchdog         do watchdog reset
    tlb              tlb register
    cache            cache control
    mii              mii control
    l2sw             l2sw control
    ether            ether control
    pci              pci control
    btimer_start     test btimer
    btimer_stop      test btimer
    usb              usb control
    i2c              i2c control
    
  • debug fs ls
    boot> debug fs ls
    Firmware            4457912 bytes
    total 16515072, avail 11981376 bytes
    
  • debug l2sw register dump ?
    boot> debug l2sw register dump ?
    PHY:
    00 : 1000 1000 1000 1000 1000 
    01 : 7949 7949 7949 7949 7949 
    02 : 004d 004d 004d 004d 004d 
    03 : d034 d034 d034 d034 d034 
    04 : 1de1 1de1 1de1 1de1 1de1 
    05 : 0000 0000 0000 0000 0000 
    06 : 0004 0004 0004 0004 0004 
    07 : 2801 2801 2801 2801 2801 
    08 : 0000 0000 0000 0000 0000 
    09 : 0200 0200 0200 0200 0200 
    0a : 0000 0000 0000 0000 0000 
    0b : 0000 0000 0000 0000 0000 
    0c : 0000 0000 0000 0000 0000 
    0d : 4003 4003 4003 4003 4003 
    0e : 003f 003f 003f 003f 003f 
    0f : 2000 2000 2000 2000 2000 
    10 : 0862 0862 0862 0862 0862 
    11 : 0010 0010 0010 0010 0010 
    12 : 0000 0000 0000 0000 0000 
    13 : 0000 0000 0000 0000 0000 
    14 : 002c 002c 002c 002c 002c 
    15 : 0000 0000 0000 0000 0000 
    16 : 04e8 04e8 04e8 04e8 04e8 
    17 : 0000 0000 0000 0000 0000 
    18 : 3200 3200 3200 3200 3200 
    19 : 0000 0000 0000 0000 0000 
    1a : 0000 0000 0000 0000 0000 
    1b : 0000 0000 0000 0000 0000 
    1c : 0000 0000 0000 0000 0000 
    1d : 003f 003f 003f 003f 003f 
    1e : 0000 0000 0000 0000 0000 
    1f : 0000 0000 0000 0000 0000 
    
    DEBUG:
    00 : 02ee 02ee 02ee 02ee 02ee 
    01 : 02b2 01b1 02b2 01b1 01b1 
    02 : 3110 3110 3220 3220 3220 
    03 : 3f11 3f22 3f11 3f11 3f22 
    04 : bbbb bbbb bbbb bbbb bbbb 
    05 : 3c06 3c06 3c06 3c06 3c06 
    06 : 0000 0000 0000 0000 0000 
    07 : 0000 0000 0000 0000 0000 
    08 : 1c00 1c00 1c00 1c00 1c00 
    09 : 8000 8000 8000 8000 8000 
    0a : 3000 3000 3000 b000 3000 
    0b : bc00 bc00 bc00 bc00 bc00 
    0c : 6001 6001 6001 6001 6001 
    0d : c820 2820 c820 2820 2820 
    0e : 0003 0003 0003 0003 0003 
    0f : 0030 0030 0030 0030 0030 
    10 : 0000 0000 0000 0000 0000 
    11 : 7552 7552 7552 7552 7552 
    12 : 4c04 4c04 4c04 4c04 4c04 
    13 : c01b c01b c01b c01b c01b 
    14 : 0752 0752 0752 0752 0752 
    15 : 3220 3220 3220 3220 3220 
    16 : 8000 8000 8000 8000 8000 
    17 : 0000 0000 0000 0000 0000 
    18 : 62ea 62ea 62ea 62ea 62ea 
    19 : 01f4 01f4 01f4 01f4 01f4 
    1a : 01d7 01d7 01d7 01d7 01d7 
    1b : 0176 0176 0176 0176 0176 
    1c : 3cbb 3cbb 3cbb 3cbb 3cbb 
    1d : 00ec 00ec 00ec 00ec 00ec 
    1e : 0076 0076 0076 0076 0076 
    1f : 0000 0000 0000 0000 0000 
    20 : 0000 0000 0000 0000 0000 
    21 : 2d15 2d15 2d15 2d15 2d15 
    22 : 1f6a 1f6a 1f6a 1f6a 1f6a 
    23 : a200 a200 a200 a200 a200 
    24 : 1000 1000 1000 1000 1000 
    25 : 0000 0000 0000 0000 0000 
    26 : 0000 0000 0000 0000 0000 
    27 : 1000 1000 1000 1000 1000 
    28 : 0000 0000 0000 0000 0000 
    29 : b6dd b6dd b6dd b6dd b6dd 
    2a : 0000 0000 0000 0000 0000 
    2b : 3a98 3a98 3a98 3a98 3a98 
    2c : 0000 0000 0000 0000 0000 
    2d : 0000 0000 0000 0000 0000 
    2e : 0000 0000 0000 0000 0000 
    2f : 0000 0000 0000 0000 0000 
    30 : 0000 0000 0000 0000 0000 
    31 : 0000 0000 0000 0000 0000 
    32 : 2200 2200 2200 2200 2200 
    33 : 2200 2200 2200 2200 2200 
    34 : 2200 2200 2200 2200 2200 
    35 : 0000 0000 0000 0000 0000 
    36 : e12c e12c e12c e12c e12c 
    37 : 6040 6040 6040 6040 6040 
    38 : 1111 1111 1111 1111 1111 
    39 : 7359 7359 7359 7359 7359 
    3a : ee6b ee6b ee6b ee6b ee6b 
    3b : 4646 4646 4646 4646 4646 
    3c : 4646 4646 4646 4646 4646 
    3d : 6820 6820 6820 6820 6820 
    3e : e0d8 e0d8 e0d8 e0d8 e0d8 
    3f : 0000 0000 0000 0000 0000 
    
    MMD3:
    
    MMD7:
    
    L2SW:
    
    0000 : 00001204 00080080 00000000 07600000 
    0010 : 202613a0 f0107650 0000690e 00003f1f 
    0020 : 3f500000 00010000 00000000 00000000 
    0030 : 80000301 00000000 0f000000 00000000 
    0040 : 00700000 00000000 000088a8 00000000 
    0050 : cc36cc36 ca36ca36 c936c936 03ffff00 
    0060 : 00000001 00000000 00000000 00000000 
    0070 : b00e6060 03707f07 000005ee 0000004e 
    0080 : 00001280 00001280 00001280 00001280 
    0090 : 00001280 0000004e 00000000 00000000 
    00a0 : 00000000 00000000 00000000 00000000 
    00b0 : 00000000 00000000 00000000 00000000 
    00c0 : 00000000 00000000 80901040 00000000 
    00d0 : 7fff7ff7 00003fff 00000100 00000000 
    00e0 : c74164d0 0002a545 2dc11c9c 00000000 
    00f0 : 00000000 00000000 00000000 00000000 
    
    0100 : 00001550 00000000 00000000 00000000 
    0110 : 00000000 00000000 00000000 00000000 
    0120 : 00240024 00000000 00240024 00000000 
    0130 : 00240024 00000000 00240024 00000000 
    0140 : 00240024 00000000 00240024 00000000 
    0150 : 00240024 00000000 00240024 00000000 
    0160 : 00240024 00000000 00240024 00000000 
    0170 : 00000000 00000000 00000000 00000000 
    0180 : 00000000 00000000 00000000 00000000 
    0190 : 00000000 00000000 00000000 00000000 
    01a0 : 00000000 00000000 00000000 00000000 
    01b0 : 00000000 00000000 00000000 00000000 
    01c0 : 00000000 00000000 00000000 00000000 
    01d0 : 00000000 00000000 00000000 00000000 
    01e0 : 00000000 00000000 00000000 00000000 
    01f0 : 00000000 00000000 00000000 00000000 
    
    0200 : 00000001 00005000 00400040 00000000 
    0210 : 00000000 00000000 00000000 00000000 
    0220 : 00000000 00000000 00000000 00000000 
    0230 : 00000000 00000000 00000000 00000000 
    0240 : 00000000 00000000 00000000 00000000 
    0250 : 00000000 00000000 00000000 00000000 
    0260 : 00000000 00000000 00000000 00000000 
    0270 : 0000000f 00000000 00000000 00000000 
    0280 : 00000000 00000000 00000000 00000000 
    0290 : 00000000 00000000 00000000 00000000 
    02a0 : 00000000 00000000 00000000 00000000 
    02b0 : 00000000 00000000 00000000 00000000 
    02c0 : 00000000 00000000 00000000 00000000 
    02d0 : 00000000 00000000 00000000 00000000 
    02e0 : 00000000 00000000 00000000 00000000 
    02f0 : 00000000 00000000 00000000 00000000 
    
    0400 : 00000000 00000000 00000000 00000000 
    0410 : 00000000 00000000 000c0a80 00000000 
    0420 : 00010001 00003040 00020001 00003040 
    0430 : 00010001 00003040 00010001 00003040 
    0440 : 00010001 00003040 00010001 00003040 
    0450 : 00020001 00003040 00000000 00000000 
    0460 : 00000000 00000000 00000000 00000000 
    0470 : 00000000 00000000 00000000 00000000 
    0480 : 00000000 00000000 00000000 00000000 
    0490 : 00000000 00000000 00000000 00000000 
    04a0 : 00000000 00000000 00000000 00000000 
    04b0 : 00000000 00000000 00000000 00000000 
    04c0 : 00000000 00000000 00000000 00000000 
    04d0 : 00000000 00000000 00000000 00000000 
    04e0 : 00000000 00000000 00000000 00000000 
    04f0 : 00000000 00000000 00000000 00000000 
    
    0600 : 00000000 00000000 00000000 00000006 
    0610 : 0003fff0 00000005 50e8002b 00000000 
    0620 : 000000f0 007f7f7f 00000000 00000000 
    0630 : 00000000 11111111 22222222 33333333 
    0640 : 44444444 55555555 66666666 77777777 
    0650 : 76543210 00000000 00000000 00000000 
    0660 : 0014003c 00000018 00007000 00140040 
    0670 : 00000018 00007000 00140039 00000018 
    0680 : 00007000 00140035 00000018 00007000 
    0690 : 0014002d 00000018 00007000 0014001d 
    06a0 : 00000018 00007000 00140002 00000018 
    06b0 : 00007000 00000000 00000000 00000000 
    06c0 : 00000000 00000000 00000000 00000000 
    06d0 : 00000000 00000000 00000000 00000000 
    06e0 : 00000000 00000000 00000000 00000000 
    06f0 : 00000000 00000000 00000000 00000000 
    0700 : 00000000 00000000 00000000 00000000 
    0710 : 00000000 00000000 00000000 00000000 
    
    0800 : 01200188 00000000 0000000e 00000000 
    0810 : 54332201 33221100 00000000 00000000 
    0820 : 00000000 00000000 00000000 00000000 
    0830 : 10841041 00041041 00041041 00041041 
    0840 : 00041041 10841041 10841041 00000000 
    0850 : 00000000 00000000 00000000 00000000 
    0860 : 00000000 00000000 00000000 00000000 
    0870 : 00000000 00000000 00000000 00000000 
    0880 : 00000000 00000000 00000000 00000000 
    0890 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff 
    08a0 : 7fff7fff 7fff7fff 00000000 00000002 
    08b0 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff 
    08c0 : 7fff7fff 7fff7fff 00000000 00000002 
    08d0 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff 
    08e0 : 7fff7fff 7fff7fff 00000000 00000002 
    08f0 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff 
    0900 : 7fff7fff 7fff7fff 00000000 00000002 
    0910 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff 
    0920 : 7fff7fff 7fff7fff 00000000 00000002 
    0930 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff 
    0940 : 7fff7fff 7fff7fff 00000000 00000002 
    0950 : 7fff7fff 7fff7fff 7fff7fff 7fff7fff 
    0960 : 7fff7fff 7fff7fff 00000000 00000002 
    0970 : 28000000 000000c0 28000000 000000c2 
    0980 : 28000000 000000c2 28000000 000000c2 
    0990 : 28000000 000000c2 28000000 000000c2 
    09a0 : 28000000 000000c0 00000000 00000000 
    09b0 : 003a004a 003a004a 003a004a 003a004a 
    09c0 : 003a004a 003a004a 003a004a 00000000 
    09d0 : 00000000 00000000 00000000 00000000 
    09e0 : 00000000 00000000 00000000 00000000 
    09f0 : 00000000 00000000 00000000 00000000 
    
    VTU:
    
    ATU:
    
  • debug memory read 0xb8040000 70
    (switch uninitialized)

    boot> debug memory read 0xb8040000 70
    b8040000:00a6031f 20bce62d 0000e400 00000000 .... ..-........
    b8040010:00000000 00000000 00000000 00000000 ................
    b8040020:00000000 00000000 00000000 00000000 ................
    b8040030:0c080900 00160000 00000000 07000000 ................
    b8040040:00000006 00000908 00000000 00000000 ................
    b8040050:00000000 14130000 80808080 80808080 ................
    b8040060:80808080 80808080 00000000 00000002 ................
    

    (switch initialized)

    boot> debug memory read 0xb8040000 70
    b8040000:00a6031f 20bcee2d 0000ec00 00000000 .... ..-........
    b8040010:00000000 00000000 00000000 00000000 ................
    b8040020:00000000 00000000 00000000 00000000 ................
    b8040030:0c080900 00160000 00000000 07000000 ................
    b8040040:00000006 00000908 00000000 00000000 ................
    b8040050:00000000 14130000 80808080 80808080 ................
    b8040060:80808080 80808080 00000000 00000002 ................
    
  • debug memory read 0xb8050028 4
    boot> debug memory read 0xb8050028 4
    b8050028:5a000000                            Z...
    
  • debug memory read 0xb8050048 4
    boot> debug memory read 0xb8050048 4
    b8050048:03000000                            ....
    
  • debug memory read 0xb8070000 4
    boot> debug memory read 0xb8070000 4  
    b8070000:00028001                            ....
    
  • debug memory read 0xb806001c d0
    (before tp usb)

    boot> debug memory read 0xb8060000 d0
    b8060000:0002ccc8 00061a80 00000003 0989637c ..............c|
    b8060010:077fffdd 00000000 00000020 2c044830 ........... ,.H0
    b8060020:00000000 00000000 00000000 00000000 ................
    b8060030:00000000 00000000 00000000 00000000 ................
    b8060040:00000000 00000000 00000000 00000000 ................
    b8060050:00000000 00000000 00000000 00000000 ................
    b8060060:00000000 00000000 00000000 00000000 ................
    b8060070:00000000 00000000 00000000 00000000 ................
    b8060080:00000000 00000000 00000000 00000000 ................
    b8060090:00001130 00000000 00000000 00000000 ...0............
    b80600a0:00000000 00000000 00000000 00000000 ................
    b80600b0:00031e5e 00033fc0 00000000 000a6000 ...^..?.......`.
    b80600c0:00000000 00030831 00000000 000003ff .......1........
    

    (after tp usb)

    boot> debug memory read 0xb8060000 d0
    b8060000:00016ccc 00061a80 00000003 098961b8 ..l...........a.
    b8060010:077fffdd 00000000 00000020 2c044008 ........... ,.@.
    b8060020:00000000 00000000 00000000 00000000 ................
    b8060030:00000000 00000000 00000000 00000000 ................
    b8060040:00000000 00000000 00000000 00000000 ................
    b8060050:00000000 00000000 00000000 00000000 ................
    b8060060:00000000 00000000 00000000 00000000 ................
    b8060070:00000000 00000000 00000000 00000000 ................
    b8060080:00000000 00000000 00000000 00000000 ................
    b8060090:00001130 00000000 00000000 00000000 ...0............
    b80600a0:00000000 00000000 00000000 00000000 ................
    b80600b0:00031e5e 00033fc0 00000000 000a6000 ...^..?.......`.
    b80600c0:00000000 00030831 00000000 000003ff .......1........
    
  • debug memory read 0xb8018000 84
    boot> debug memory read 0xb8018000 84
    b8018000:00000025 00000020 00000055 00000001 ...%... ...U....
    b8018010:000000ff 000000a0 000000bc 00000028 ...............(
    b8018020:0000003e 00000006 0000000d 00000000 ...>............
    b8018030:00000000 00000711 00000000 00000000 ................
    b8018040:00000001 00000000 00000000 00000000 ................
    b8018050:00000000 00000000 00000000 00000000 ................
    b8018060:00000000 00000000 00000000 00000001 ................
    b8018070:00000006 00000000 00000000 00000000 ................
    b8018080:00000000                            ....
    

Kernel (NetBSD)

  • Bootlog
    IPL:HARD-RESET
    memory test ... ok
    flinstall OK
    
    boot version: 1.0.0
    
    PKG "2x2LIGHTNING"
    CPU "Atheros/QCA9558"
    Revision 113.0 CLOCK 720.0 MHz
    HEAP MEMORY 262144 bytes
    Boot:InitFilesystem
    RGMII calibration GE0 ... ETH_CFG: 00028001 ETH_XMII: 5a000000
    phy0.0: "Atheros/AR8327(phy)"
    phy0.1: "Atheros/AR8327(SW)"
    active ch:1
    post start
    DRAM Test ..... PASS
    Timer test .... PASS
    FLASH CHKSUM .. PASS
    LAN Test ...... 
    LoopBack count 0 .. 
    phy0.0: "Atheros/AR8327(phy)"
    phy0.1: "Atheros/AR8327(SW)"
    active ch:0
    active ch:1
    phy0.0: "Atheros/AR8327(phy)"
    phy0.1: "Atheros/AR8327(SW)"
    active ch:1
    PASS
    Package TYPE = 0x01
    post success
    now booting Firmware ...
    loaded Firmware
    config=0x80208483 status=0x00000000
    mips_pdcache_write_through=0
    mips_picache_line_size=32 mips_pdcache_line_size=32
      pagemask: 0x00000000
      status: 0x00000000
      config: 0x80208483
      cause: 0x40008000
    load memory 0x1f0e000, 0x60f2000
    load memory 0x1000, 0x5f000
    Copyright (c) 1996, 1997, 1998, 1999, 2000, 2001, 2002
        The NetBSD Foundation, Inc.  All rights reserved.
    Copyright (c) 1982, 1986, 1989, 1991, 1993
        The Regents of the University of California.  All rights reserved.
    
    NetBSD 1.6.1 (LIGHTNING2x2.tmp) #0: 2013-10-24 12:31:40 JST
        kubota@A00-30-04938:/home/kubota/lightning/git/hituji/build/lightning2x2/kernel-obj/LIGHTNING2x2.tmp
    
    total memory = 128 MB
    avail memory = 92692 KB
    using 1024 buffers containing 4096 KB of memory
    mainbus0 (root)
    cpu0 at mainbus0: MIPS 74Kc (0x19750) Rev. 80 with software emulated floating point
    cpu0: 64KB/32B 4-way set-associative L1 Instruction cache, 32 TLB entries
    cpu0: 32KB/32B 4-way set-associative write-back L1 Data cache
    arspi0 at mainbus0
    arflash0 at mainbus0 addr 0xbf000000 size 16777216 bytes
    flash: id 0xc2 type 0x17 addr 0xbf000000 size 16777216 bytes
    pfmg: carrier mode 0 pkgid 0x20a01 configid 0xff
    arrtc0 at mainbus0
    argiu0 at mainbus0
    btnu0 at argiu0 port 18
    btnu1 at argiu0 port 2
    btnu2 at argiu0 port 3
    ari2c0 at mainbus0: clk_sel=0(REFCLK), hcnt=0x28, lcnt=0x3e
    iic0 at ari2c0: I2C bus
    tca6416gpio0 at iic0 addr 0x20
    tcaled0 at tca6416gpio0
    athq0 at mainbus0
    LSDK DRV Version = 10.1.357_0909P
    
    athq0: WLAN MAC ADDRESS (10:66:82:e0:02:22)
    pfmg_read_scan_upper_2_4g: 11
    nbuf_hdr_init: struct nbuf(120 bytes) mallocsize(917504 bytes)
    mbuf_freeq_setup: mbuf_freeq_bufcount = 0
    mbuf_freeq_setup: mbuf_freeq_bufcount(6144,6144)
    Enterprise mode: 0x33fc0000
    Restoring Cal data from Flash
    Green-AP : Green-AP : Attached
    
    ath_get_caps[6155] rx chainmask mismatch actual 7 sc_chainmak 0
    ath_get_caps[6130] tx chainmask mismatch actual 7 sc_chainmak 0
    ath_attach_dfs[12110] dfsdomain 3
    ath_tx_paprd_init sc 0xc0179000 PAPRD disabled in HAL
     chan  Freq     HT                       DFS
     1     2412nbg  HT20 HT40PLUS            N
     2     2417nbg  HT20 HT40PLUS            N
     3     2422nbg  HT20 HT40PLUS            N
     4     2427nbg  HT20 HT40PLUS            N
     5     2432nbg  HT20 HT40PLUS HT40MINUS  N
     6     2437nbg  HT20 HT40PLUS HT40MINUS  N
     7     2442nbg  HT20 HT40PLUS HT40MINUS  N
     8     2447nbg  HT20 HT40PLUS HT40MINUS  N
     9     2452nbg  HT20 HT40PLUS HT40MINUS  N
     10    2457nbg  HT20          HT40MINUS  N
     11    2462nbg  HT20          HT40MINUS  N
     12    2467nbg  HT20          HT40MINUS  N
     13    2472nbg  HT20          HT40MINUS  N
    athq0: Atheros 955X: memt=0x80440120, memh=0xb8100000 
    com0 at mainbus0: ns16550a, working fifo
    com0: console
    ehci0 at mainbus0ehci0: EHCI version 1.0
    usb0 at ehci0: USB revision 2.0
    uhub0 at usb0
    uhub0: QCA9558 EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
    uhub0: 1 port with 1 removable, self powered
    qcaled0 at mainbus0
    ageth0 at mainbus0
    ath8327swsphy0 at ageth0 phy 0: Atheros AR8327 10/100/1000 L2SW, rev. 4
    ath8327swsphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT-FDX, auto
    ageth1 at mainbus0
    ath8327swlphy0 at ageth1 phy 1: Atheros AR8327 10/100/1000 L2SW, rev. 4
    ath8327swlphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT-FDX, auto, 1000baseT-FDX FLAG0, 1000baseT-FDX FLAG1
    arpcieu0 at mainbus0:
    pci0 at arpcieu0 bus 0
    pci0: memory space enabled
    athq1 at pci0 dev 0 function 0
    LSDK PCI Version = 10.1.357_0909P
    ath_pci_probe
    disable ASPM on peregrine[0x80] lcr(0x10110000) --> (0x10110000)
    athten1: WLAN MAC ADDRESS (10:66:82:e0:02:23)
    __ol_ath_attach: WLAN MAC ADDRESS (10:66:82:e0:02:23) ic(0xc025d000)
    
     Using PCI Legacy Interrupt
    __ol_ath_attach: ath_attach TODO
    arpcieu1 at mainbus0:
    pci1 at arpcieu1 bus 1
    pci1: memory space enabled
    rtc: CLOCK INITIALIZED 
    kevt0: 
    logbuf: using 655360 bytes logging area
    md0: internal 25600 KB image area
    uhub1 at uhub0 port 1
    uhub1: vendor 0x0409 product 0x005a, class 9/0, rev 2.00/1.00, addr 2
    uhub1: single transaction translator
    uhub1: 4 ports with 4 removable, self powered
    boot device: 
    root on md0a dumps on md0b
    root file system type: ffs
    Tue Jan  1 00:00:02 JST 2013
    /usr/local/www/.htpasswd file not exists.(ignore)
    Setting tty flags.
    net.inet6.ip6.forwarding: 0 -> 1
    net.inet6.ip6.accept_rtadv: 0 -> 0
    Building databases...
    mode switch: rt
    vathten0
    vathten1
    vathten4
    ol_transfer_bin_file 1562: Download Board data in flash len:0x0844(0x0844)
    vathten2
    vathten3
    Starting wificonfig
    encrypt key mode AES
    encrypt key mode AES
    Starting evtmgr.
    Starting dlnamgr.
    Starting clid.
    DDR Activity - HIGH
    Starting inetd.
    Starting procmon.
    Starting wzcm.
    DDR Activity - HIGH
    Tue Jan  1 00:00:13 JST 2013
    DDR Activity - HIGH
    DDR Activity - HIGH
    
    NetBSD/scorpimips (Amnesiac) (console)
    
    login: