===== TODO =====
* http://blog.oxplot.com/debrick-wrt54gl-raspberrypi/
TFtP boot
* http://wiki.openwrt.org/doc/howto/generic.flashing.tftp
* http://downloads.openwrt.org/kamikaze/8.09/brcm-2.4/openwrt-wrt54g-squashfs.bin
ReFlash using NetCat ?
* http://downloads.openwrt.org/kamikaze/8.09/brcm-2.4/# openwrt-brcm-2.4-squashfs.trx
* http://blog.videgro.net/2010/12/openwrt-asus_wl-hdd/
Alt Fw
* http://www.dd-wrt.com/wiki/index.php/Linksys_WRT54G_v2.0
====== WRT54G v2 ======
* http://en.wikipedia.org/wiki/Linksys_WRT54G_series
CPU revision is: 00029007 (Broadcom BCM3302)
* http://wiki.openwrt.org/doc/hardware/soc/soc.broadcom.bcm33xx
MipS
HardWare MoD :
* http://woodhousellc.com/?p=30# UsB PorT
~ # cat /proc/cpuinfo
system type : Broadcom BCM47XX
processor : 0
cpu model : Broadcom BCM3302 V0.7
BogoMIPS : 198.65
wait instruction : yes
microsecond timers : yes
tlb_entries : 32
extra interrupt vector : yes
hardware watchpoint : no
ASEs implemented :
shadow register sets : 1
core : 0
VCED exceptions : not available
VCEI exceptions : not available
====== STOCK FIRWMARE =====
* Firmware Version: v2.04.4-ssl
nmap
80/tcp open http Linksys WRT54G wireless-G router http config
5431/tcp open upnp Belkin/Linksys wireless router UPnP (Linux 2.4; UPnP 1.0; BRCM400 1.0)
MAC Address: 00:13:FF:FF:FF:FF (Cisco-Linksys)
Service Info: OS: Linux; Devices: WAP, router; CPE: cpe:/o:linux:kernel
http://technicallyeasy.net/2008/01/how-to-reset-linksys-wrt54g-wireless/
reset 30 sec
http://192.168.0.1/# admin:admi
===== TODO FW =====
* http://downloads.openwrt.org/kamikaze/8.09/brcm-2.4/
* http://downloads.openwrt.org/kamikaze/8.09/brcm-2.4/openwrt-wrt54g-squashfs.bin
* http://downloads.openwrt.org/whiterussian/newest/micro/openwrt-brcm-2.4-squashfs.trx
===== LIBRE SOFTWARE =====
Get version :
* http://wiki.openwrt.org/toh/linksys/wrt54g# v2
* http://www.dslreports.com/faq/12772
* http://wiki.openwrt.org/doc/start
* http://192.168.1.1/Upgrade.asp
http://wiki.openwrt.org/toh/linksys/wrt54g
HowTo :
http://madscientistlabs.blogspot.fr/2011/12/dd-wrt-is-dead-long-live-openwrt.html
telnet 192.168.1.1
Trying 192.168.1.1...
Connected to 192.168.1.1.
Escape character is '^]'.
=== IMPORTANT ============================
Use 'passwd' to set your login password
this will disable telnet and enable SSH
------------------------------------------
BusyBox v1.15.3 (2011-11-24 02:12:13 CET) built-in shell (ash)
Enter 'help' for a list of built-in commands.
_______ ________ __
| |.-----.-----.-----.| | | |.----.| |_
| - || _ | -__| || | | || _|| _|
|_______|| __|_____|__|__||________||__| |____|
|__| W I R E L E S S F R E E D O M
Backfire (10.03.1, r29592) ------------------------
* 1/3 shot Kahlua In a shot glass, layer Kahlua
* 1/3 shot Bailey's on the bottom, then Bailey's,
* 1/3 shot Vodka then Vodka.
---------------------------------------------------
root@OpenWrt:/# passwd
http://192.168.1.1/cgi-bin/luci/;stok=fa682b45ac9484bed54da81123e9d06b/admin/network/
OpenWrt | OpenWrt Backfire 10.03.1 | Load: 0.60 0.18 0.09 | Auto Refresh: on
~ # df -h
Filesystem Size Used Available Use% Mounted on
/dev/root 1.9M 1.9M 0 100% /rom
tmpfs 6.5M 116.0K 6.4M 2% /tmp
tmpfs 512.0K 0 512.0K 0% /dev
/dev/mtdblock3 960.0K 220.0K 740.0K 23% /overlay
mini_fo:/overlay 1.9M 1.9M 0 100% /
~ # cat /proc/version
Linux version 2.6.32.27 (jow@nd-build-02.linux-appliance.net) (gcc version 4.3.3 (GCC) ) #5 Wed Dec 21 05:56:26 CET 2011
http://wiki.openwrt.org/toh/linksys/wrt54g#using.the.linksys.web.gui
~ # /sbin/wifi
wl0(broadcom): Interface type not supported
wl0(broadcom): Interface type not supported
~ # export PATH=/bin:/usr/bin:/sbin:/usr/sbin
~ # /sbin/wifi detect | tee /etc/config/wireless
config wifi-device radio0
option type mac80211
option channel 11
option macaddr 00:13:FF:FF:FF:FF
option hwmode 11g
# REMOVE THIS LINE TO ENABLE WIFI:
option disabled 1
config wifi-iface
option device radio0
option network lan
option mode ap
option ssid OpenWrt
option encryption none
cat /etc/config/wireless
config 'wifi-device' 'radio0'
option 'type' 'mac80211'
option 'channel' '11'
option 'macaddr' '00:13:FF:FF:FF:FF'
option 'hwmode' '11g'
config 'wifi-iface'
option 'device' 'radio0'
option 'network' 'lan'
option 'mode' 'ap'
option 'ssid' 'OpenWrt'
option 'encryption' 'none'
Open Port 80 :
"Rejected request from RFC1918 IP to public server address"
{{http://193.164.197.50/images/757/757201111866363.jpg}}
==== RAM ====
# free
total used free shared buffers
Mem: 13388 12516 872 0 440
Swap: 0 0 0
Total: 13388 12516 872
==== DMESG ====
Linux version 2.6.32.27 (jow@nd-build-02.linux-appliance.net) (gcc version 4.3.3 (GCC) ) #5 Wed Dec 21 05:56:26 CET 2011
CPU revision is: 00029007 (Broadcom BCM3302)
ssb: Core 0 found: ChipCommon (cc 0x800, rev 0x09, vendor 0x4243)
ssb: Core 1 found: IEEE 802.11 (cc 0x812, rev 0x07, vendor 0x4243)
ssb: Core 2 found: Fast Ethernet (cc 0x806, rev 0x07, vendor 0x4243)
ssb: Core 3 found: USB 1.1 Device (cc 0x818, rev 0x01, vendor 0x4243)
ssb: Core 4 found: USB 1.1 Host (cc 0x817, rev 0x01, vendor 0x4243)
ssb: Core 5 found: MIPS 3302 (cc 0x816, rev 0x01, vendor 0x4243)
ssb: Core 6 found: MEMC SDRAM (cc 0x80F, rev 0x01, vendor 0x4243)
ssb: Core 7 found: PCI (cc 0x804, rev 0x0A, vendor 0x4243)
ssb: chipcommon status is 0x0
ssb: Initializing MIPS core...
ssb: set_irq: core 0x0812, irq 4 => 4
ssb: set_irq: core 0x0806, irq 5 => 5
ssb: set_irq: core 0x0818, irq 6 => 2
ssb: set_irq: core 0x0804, irq 2 => 6
ssb: after irq reconfiguration
ssb: core 0x0800, irq : 2(S) 3* 4 5 6 D I
ssb: core 0x0812, irq : 2(S) 3 4* 5 6 D I
ssb: core 0x0806, irq : 2(S) 3 4 5* 6 D I
ssb: core 0x0818, irq : 2(S)* 3 4 5 6 D I
ssb: core 0x0817, irq : 2(S)* 3 4 5 6 D I
ssb: core 0x0816, irq : 2(S)* 3 4 5 6 D I
ssb: core 0x080f, irq : 2(S) 3 4 5 6 D I*
ssb: core 0x0804, irq : 2(S) 3 4 5 6* D I
ssb: Sonics Silicon Backplane found at address 0x18000000
Serial init done.
Determined physical RAM map:
memory: 01000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Zone PFN ranges:
Normal 0x00000000 -> 0x00001000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
0: 0x00000000 -> 0x00001000
On node 0 totalpages: 4096
free_area_init_node: node 0, pgdat 802a09f0, node_mem_map 802e7000
Normal zone: 32 pages used for memmap
Normal zone: 0 pages reserved
Normal zone: 4064 pages, LIFO batch:0
Built 1 zonelists in Zone order, mobility grouping off. Total pages: 4064
Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200
PID hash table entries: 64 (order: -4, 256 bytes)
Dentry cache hash table entries: 2048 (order: 1, 8192 bytes)
Inode-cache hash table entries: 1024 (order: 0, 4096 bytes)
Primary instruction cache 8kB, VIPT, 2-way, linesize 16 bytes.
Primary data cache 4kB, 2-way, VIPT, no aliases, linesize 16 bytes
Memory: 13252k/16384k available (2332k kernel code, 3132k reserved, 355k data, 136k init, 0k highmem)
Hierarchical RCU implementation.
NR_IRQS:128
console [ttyS0] enabled
Calibrating delay loop... 198.65 BogoMIPS (lpj=397312)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
bio: create slab at 0
Switching to clocksource MIPS
ssb: PCIcore in host mode found
PCI: Fixing up bridge 0000:00:00.0
PCI: Setting latency timer of device 0000:00:00.0 to 64
PCI: Fixing up device 0000:00:00.0
PCI: Fixing latency timer of device 0000:00:00.0 to 168
pci 0000:00:00.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:00.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:01.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:01.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:02.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:02.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:03.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:03.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:04.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:04.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:05.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:05.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:06.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:06.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:07.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:07.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:08.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:08.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:09.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:09.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:0a.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:0a.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:0b.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:0b.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:0c.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:0c.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:0d.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:0d.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:0e.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:0e.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:0f.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:0f.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 512 (order: 0, 4096 bytes)
TCP bind hash table entries: 512 (order: -1, 2048 bytes)
TCP: Hash tables configured (established 512 bind 512)
TCP reno registered
NET: Registered protocol family 1
squashfs: version 4.0 (2009/01/31) Phillip Lougher
Registering mini_fo version $Id$
JFFS2 version 2.2. (NAND) (SUMMARY) © 2001-2006 Red Hat, Inc.
msgmni has been set to 25
io scheduler noop registered
io scheduler deadline registered (default)
Serial: 8250/16550 driver, 2 ports, IRQ sharing enabled
serial8250: ttyS0 at MMIO 0xb8000300 (irq = 3) is a 16550A
serial8250: ttyS1 at MMIO 0xb8000400 (irq = 3) is a 16550A
serial8250.0: ttyS0 at MMIO 0xb8000300 (irq = 3) is a 16550A
serial8250.0: ttyS1 at MMIO 0xb8000400 (irq = 3) is a 16550A
flash init: 0x1c000000 0x02000000
Physically mapped flash: Found 1 x16 devices at 0x0 in 16-bit bank
Physically mapped flash: Found an alias at 0x400000 for the chip at 0x0
Physically mapped flash: Found an alias at 0x800000 for the chip at 0x0
Physically mapped flash: Found an alias at 0xc00000 for the chip at 0x0
Physically mapped flash: Found an alias at 0x1000000 for the chip at 0x0
Physically mapped flash: Found an alias at 0x1400000 for the chip at 0x0
Physically mapped flash: Found an alias at 0x1800000 for the chip at 0x0
Physically mapped flash: Found an alias at 0x1c00000 for the chip at 0x0
Intel/Sharp Extended Query Table at 0x0035
Using auto-unlock on power-up/resume
cfi_cmdset_0001: Erase suspend on write enabled
erase region 0: offset=0x0,size=0x2000,blocks=8
erase region 1: offset=0x10000,size=0x10000,blocks=63
Flash device: 0x400000 at 0x1fc00000
bootloader size: 262144
Creating 4 MTD partitions on "Physically mapped flash":
0x000000000000-0x000000040000 : "cfe"
0x000000040000-0x0000003f0000 : "linux"
0x00000011b000-0x0000003f0000 : "rootfs"
mtd: partition "rootfs" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
mtd: partition "rootfs" set to be root filesystem
mtd: partition "rootfs_data" created automatically, ofs=300000, len=F0000
0x000000300000-0x0000003f0000 : "rootfs_data"
0x0000003f0000-0x000000400000 : "nvram"
b44.c:v2.0
eth0: Broadcom 44xx/47xx 10/100BaseT Ethernet 00:13:FF:FF:FF:FF
BCM47xx Watchdog Timer enabled (30 seconds, nowayout)
TCP westwood registered
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear
All bugs added by David S. Miller
VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
Freeing unused kernel memory: 136k freed
Please be patient, while OpenWrt loads ...
diag: Detected 'Linksys WRT54G/GS/GL'
b44: eth0: Link is up at 100 Mbps, full duplex.
b44: eth0: Flow control is off for TX and off for RX.
roboswitch: Probing device eth0: No Robo switch in managed mode found, phy_id = 0xffffffff
roboswitch: Probing device eth1: No such device
roboswitch: Probing device eth2: No such device
roboswitch: Probing device eth3: No such device
mini_fo: using base directory: /
==== TODO ====
Upgrade RaM ?
* http://wiki.openwrt.org/doc/techref/bootloader/cfe?s[]=cfe
~ # dd if=/dev/mtdblock0 bs=1 skip=4116 count=2048 | strings > /tmp/cfe.txt
boardtype=0x0101
boardnum=42
boardrev=0x10
boardflags=0x0188
boardflags2=0
sromrev=2
clkfreq=200
sdram_init=0x0000
sdram_config=0x0032
sdram_refresh=0x0000
sdram_ncdl=0x0
===== TODO =====
* https://dd-wrt.com/support/router-database/?model=WRT54G_v2.0
* ftp://ftp.dd-wrt.com/betas/2010/08-12-10-r14929/broadcom/dd-wrt.v24_mini_wrt54g.bin
===== WIP =====
TestS :
* 250KBps to 1.66 MBps : RSync over WiFi to NaS
MisC :
opkg install http://downloads.openwrt.org/backfire/10.03.1/brcm47xx/packages/kmod-fs-nfs-common_2.6.32.27-1_brcm47xx.ipk
mount 192.168.0.90:/local /mnt/host-nas-local/ -o nolock
apt-get install cdebootstrap
arch=mipsel
sudo cdebootstrap --foreign -a$arch stable rzr-rootfs-debian-stable-$arch
http://ftp.fr.debian.org/debian
* http://www.debwrt.net/
* https://www.qualityology.com/tech/add-802-11-n-support-to-bcm47xx-and-bcm53xx-openwrt/ # ToDo WiFi
===== HARDWARE =====
* https://wiki.openwrt.org/toh/netgear/wg602# MipS ROM=2MiB
* https://wiki.dd-wrt.com/wiki/index.php/Netgear_WG602_v3/4
===== MORE =====
@TaG: RtOs GateWay BroadCom