Table of Contents
TODO
TFtP boot
- http://downloads.openwrt.org/kamikaze/8.09/brcm-2.4/# openwrt-brcm-2.4-squashfs.trx
Alt Fw
WRT54G v2
CPU revision is: 00029007 (Broadcom BCM3302)
~ # cat /proc/cpuinfo system type : Broadcom BCM47XX processor : 0 cpu model : Broadcom BCM3302 V0.7 BogoMIPS : 198.65 wait instruction : yes microsecond timers : yes tlb_entries : 32 extra interrupt vector : yes hardware watchpoint : no ASEs implemented : shadow register sets : 1 core : 0 VCED exceptions : not available VCEI exceptions : not available
STOCK FIRWMARE
- Firmware Version: v2.04.4-ssl
nmap 80/tcp open http Linksys WRT54G wireless-G router http config 5431/tcp open upnp Belkin/Linksys wireless router UPnP (Linux 2.4; UPnP 1.0; BRCM400 1.0) MAC Address: 00:13:FF:FF:FF:FF (Cisco-Linksys) Service Info: OS: Linux; Devices: WAP, router; CPE: cpe:/o:linux:kernel
http://technicallyeasy.net/2008/01/how-to-reset-linksys-wrt54g-wireless/
reset 30 sec
http://192.168.0.1/# admin:admi
TODO FW
LIBRE SOFTWARE
Get version :
http://wiki.openwrt.org/toh/linksys/wrt54g
HowTo : http://madscientistlabs.blogspot.fr/2011/12/dd-wrt-is-dead-long-live-openwrt.html
telnet 192.168.1.1
Trying 192.168.1.1...
Connected to 192.168.1.1.
Escape character is '^]'.
=== IMPORTANT ============================
Use 'passwd' to set your login password
this will disable telnet and enable SSH
------------------------------------------
BusyBox v1.15.3 (2011-11-24 02:12:13 CET) built-in shell (ash)
Enter 'help' for a list of built-in commands.
_______ ________ __
| |.-----.-----.-----.| | | |.----.| |_
| - || _ | -__| || | | || _|| _|
|_______|| __|_____|__|__||________||__| |____|
|__| W I R E L E S S F R E E D O M
Backfire (10.03.1, r29592) ------------------------
* 1/3 shot Kahlua In a shot glass, layer Kahlua
* 1/3 shot Bailey's on the bottom, then Bailey's,
* 1/3 shot Vodka then Vodka.
---------------------------------------------------
root@OpenWrt:/# passwd
http://192.168.1.1/cgi-bin/luci/;stok=fa682b45ac9484bed54da81123e9d06b/admin/network/
OpenWrt | OpenWrt Backfire 10.03.1 | Load: 0.60 0.18 0.09 | Auto Refresh: on
~ # df -h
Filesystem Size Used Available Use% Mounted on
/dev/root 1.9M 1.9M 0 100% /rom
tmpfs 6.5M 116.0K 6.4M 2% /tmp
tmpfs 512.0K 0 512.0K 0% /dev
/dev/mtdblock3 960.0K 220.0K 740.0K 23% /overlay
mini_fo:/overlay 1.9M 1.9M 0 100% /
~ # cat /proc/version
Linux version 2.6.32.27 (jow@nd-build-02.linux-appliance.net) (gcc version 4.3.3 (GCC) ) #5 Wed Dec 21 05:56:26 CET 2011
http://wiki.openwrt.org/toh/linksys/wrt54g#using.the.linksys.web.gui
~ # /sbin/wifi
wl0(broadcom): Interface type not supported
wl0(broadcom): Interface type not supported
~ # export PATH=/bin:/usr/bin:/sbin:/usr/sbin
~ # /sbin/wifi detect | tee /etc/config/wireless
config wifi-device radio0
option type mac80211
option channel 11
option macaddr 00:13:FF:FF:FF:FF
option hwmode 11g
# REMOVE THIS LINE TO ENABLE WIFI:
option disabled 1
config wifi-iface
option device radio0
option network lan
option mode ap
option ssid OpenWrt
option encryption none
cat /etc/config/wireless
config 'wifi-device' 'radio0'
option 'type' 'mac80211'
option 'channel' '11'
option 'macaddr' '00:13:FF:FF:FF:FF'
option 'hwmode' '11g'
config 'wifi-iface'
option 'device' 'radio0'
option 'network' 'lan'
option 'mode' 'ap'
option 'ssid' 'OpenWrt'
option 'encryption' 'none'
Open Port 80 :
"Rejected request from RFC1918 IP to public server address"
RAM
# free
total used free shared buffers Mem: 13388 12516 872 0 440 Swap: 0 0 0 Total: 13388 12516 872
DMESG
Linux version 2.6.32.27 (jow@nd-build-02.linux-appliance.net) (gcc version 4.3.3 (GCC) ) #5 Wed Dec 21 05:56:26 CET 2011
CPU revision is: 00029007 (Broadcom BCM3302)
ssb: Core 0 found: ChipCommon (cc 0x800, rev 0x09, vendor 0x4243)
ssb: Core 1 found: IEEE 802.11 (cc 0x812, rev 0x07, vendor 0x4243)
ssb: Core 2 found: Fast Ethernet (cc 0x806, rev 0x07, vendor 0x4243)
ssb: Core 3 found: USB 1.1 Device (cc 0x818, rev 0x01, vendor 0x4243)
ssb: Core 4 found: USB 1.1 Host (cc 0x817, rev 0x01, vendor 0x4243)
ssb: Core 5 found: MIPS 3302 (cc 0x816, rev 0x01, vendor 0x4243)
ssb: Core 6 found: MEMC SDRAM (cc 0x80F, rev 0x01, vendor 0x4243)
ssb: Core 7 found: PCI (cc 0x804, rev 0x0A, vendor 0x4243)
ssb: chipcommon status is 0x0
ssb: Initializing MIPS core...
ssb: set_irq: core 0x0812, irq 4 => 4
ssb: set_irq: core 0x0806, irq 5 => 5
ssb: set_irq: core 0x0818, irq 6 => 2
ssb: set_irq: core 0x0804, irq 2 => 6
ssb: after irq reconfiguration
ssb: core 0x0800, irq : 2(S) 3* 4 5 6 D I
ssb: core 0x0812, irq : 2(S) 3 4* 5 6 D I
ssb: core 0x0806, irq : 2(S) 3 4 5* 6 D I
ssb: core 0x0818, irq : 2(S)* 3 4 5 6 D I
ssb: core 0x0817, irq : 2(S)* 3 4 5 6 D I
ssb: core 0x0816, irq : 2(S)* 3 4 5 6 D I
ssb: core 0x080f, irq : 2(S) 3 4 5 6 D I*
ssb: core 0x0804, irq : 2(S) 3 4 5 6* D I
ssb: Sonics Silicon Backplane found at address 0x18000000
Serial init done.
Determined physical RAM map:
memory: 01000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Zone PFN ranges:
Normal 0x00000000 -> 0x00001000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
0: 0x00000000 -> 0x00001000
On node 0 totalpages: 4096
free_area_init_node: node 0, pgdat 802a09f0, node_mem_map 802e7000
Normal zone: 32 pages used for memmap
Normal zone: 0 pages reserved
Normal zone: 4064 pages, LIFO batch:0
Built 1 zonelists in Zone order, mobility grouping off. Total pages: 4064
Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200
PID hash table entries: 64 (order: -4, 256 bytes)
Dentry cache hash table entries: 2048 (order: 1, 8192 bytes)
Inode-cache hash table entries: 1024 (order: 0, 4096 bytes)
Primary instruction cache 8kB, VIPT, 2-way, linesize 16 bytes.
Primary data cache 4kB, 2-way, VIPT, no aliases, linesize 16 bytes
Memory: 13252k/16384k available (2332k kernel code, 3132k reserved, 355k data, 136k init, 0k highmem)
Hierarchical RCU implementation.
NR_IRQS:128
console [ttyS0] enabled
Calibrating delay loop... 198.65 BogoMIPS (lpj=397312)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
bio: create slab <bio-0> at 0
Switching to clocksource MIPS
ssb: PCIcore in host mode found
PCI: Fixing up bridge 0000:00:00.0
PCI: Setting latency timer of device 0000:00:00.0 to 64
PCI: Fixing up device 0000:00:00.0
PCI: Fixing latency timer of device 0000:00:00.0 to 168
pci 0000:00:00.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:00.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:01.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:01.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:02.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:02.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:03.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:03.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:04.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:04.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:05.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:05.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:06.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:06.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:07.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:07.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:08.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:08.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:09.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:09.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:0a.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:0a.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:0b.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:0b.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:0c.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:0c.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:0d.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:0d.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:0e.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:0e.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
pci 0000:00:0f.0: reg 10 32bit mmio: [0x000000-0x001fff]
pci 0000:00:0f.0: reg 14 32bit mmio pref: [0x000000-0x7ffffff]
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 512 (order: 0, 4096 bytes)
TCP bind hash table entries: 512 (order: -1, 2048 bytes)
TCP: Hash tables configured (established 512 bind 512)
TCP reno registered
NET: Registered protocol family 1
squashfs: version 4.0 (2009/01/31) Phillip Lougher
Registering mini_fo version $Id$
JFFS2 version 2.2. (NAND) (SUMMARY) © 2001-2006 Red Hat, Inc.
msgmni has been set to 25
io scheduler noop registered
io scheduler deadline registered (default)
Serial: 8250/16550 driver, 2 ports, IRQ sharing enabled
serial8250: ttyS0 at MMIO 0xb8000300 (irq = 3) is a 16550A
serial8250: ttyS1 at MMIO 0xb8000400 (irq = 3) is a 16550A
serial8250.0: ttyS0 at MMIO 0xb8000300 (irq = 3) is a 16550A
serial8250.0: ttyS1 at MMIO 0xb8000400 (irq = 3) is a 16550A
flash init: 0x1c000000 0x02000000
Physically mapped flash: Found 1 x16 devices at 0x0 in 16-bit bank
Physically mapped flash: Found an alias at 0x400000 for the chip at 0x0
Physically mapped flash: Found an alias at 0x800000 for the chip at 0x0
Physically mapped flash: Found an alias at 0xc00000 for the chip at 0x0
Physically mapped flash: Found an alias at 0x1000000 for the chip at 0x0
Physically mapped flash: Found an alias at 0x1400000 for the chip at 0x0
Physically mapped flash: Found an alias at 0x1800000 for the chip at 0x0
Physically mapped flash: Found an alias at 0x1c00000 for the chip at 0x0
Intel/Sharp Extended Query Table at 0x0035
Using auto-unlock on power-up/resume
cfi_cmdset_0001: Erase suspend on write enabled
erase region 0: offset=0x0,size=0x2000,blocks=8
erase region 1: offset=0x10000,size=0x10000,blocks=63
Flash device: 0x400000 at 0x1fc00000
bootloader size: 262144
Creating 4 MTD partitions on "Physically mapped flash":
0x000000000000-0x000000040000 : "cfe"
0x000000040000-0x0000003f0000 : "linux"
0x00000011b000-0x0000003f0000 : "rootfs"
mtd: partition "rootfs" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
mtd: partition "rootfs" set to be root filesystem
mtd: partition "rootfs_data" created automatically, ofs=300000, len=F0000
0x000000300000-0x0000003f0000 : "rootfs_data"
0x0000003f0000-0x000000400000 : "nvram"
b44.c:v2.0
eth0: Broadcom 44xx/47xx 10/100BaseT Ethernet 00:13:FF:FF:FF:FF
BCM47xx Watchdog Timer enabled (30 seconds, nowayout)
TCP westwood registered
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
Freeing unused kernel memory: 136k freed
Please be patient, while OpenWrt loads ...
diag: Detected 'Linksys WRT54G/GS/GL'
b44: eth0: Link is up at 100 Mbps, full duplex.
b44: eth0: Flow control is off for TX and off for RX.
roboswitch: Probing device eth0: No Robo switch in managed mode found, phy_id = 0xffffffff
roboswitch: Probing device eth1: No such device
roboswitch: Probing device eth2: No such device
roboswitch: Probing device eth3: No such device
mini_fo: using base directory: /
TODO
Upgrade RaM ?
~ # dd if=/dev/mtdblock0 bs=1 skip=4116 count=2048 | strings > /tmp/cfe.txt boardtype=0x0101 boardnum=42 boardrev=0x10 boardflags=0x0188 boardflags2=0 sromrev=2 clkfreq=200 sdram_init=0x0000 sdram_config=0x0032 sdram_refresh=0x0000 sdram_ncdl=0x0
TODO
WIP
TestS :
MisC :
opkg install http://downloads.openwrt.org/backfire/10.03.1/brcm47xx/packages/kmod-fs-nfs-common_2.6.32.27-1_brcm47xx.ipk mount 192.168.0.90:/local /mnt/host-nas-local/ -o nolock apt-get install cdebootstrap arch=mipsel sudo cdebootstrap --foreign -a$arch stable rzr-rootfs-debian-stable-$arch http://ftp.fr.debian.org/debian
HARDWARE
MORE
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 3.0 Unported
