I managed to get a serial console on it using an old Siemens phone cable (pl2303) 9600-8-N-1.
Here the info I was able to dump:
ar531xPlus rev 0x00000090 firmware startup...
SDRAM NOT TEST
Cannot write a correct value(0xA320) on reg 0x11=0xE320
WRK54G version 4.1.2.56SP4
1
ttached TCP/IP interface to ae0.
Attaching to TFFS...
/fl/ - Volume is OK
[Boot]:
[Boot]: nvram show
Network interface vram unknown.
Cannot initialize interface named "vram0"
[Boot]: show
Unrecognized command. Type '?' for help.
[Boot]: ?
? - print this list
@ - boot (load and go)
p - print boot params
c - change boot params
e - print fatal exception
v - print version
B - change board data
E - erase board data
F - quick format on the file system
L - low level format on file system
C - clean up Radio's EEPROM configuration
O - save Radio's EEPROM configuration to file
T - restore Radio's EEPROM configuration from file
S - show board data
n netif - print network interface device address
$dev(0,procnum)host:/file h=# e=# b=# g=# u=usr [pw=passwd] f=#
tn=targetname s=script o=other
boot device: tffs=drive,removable file name: /tffs0/vxWorks
Boot flags:
0x02 - load local system symbols
0x04 - don't autoboot
0x08 - quick autoboot (no countdown)
0x20 - disable login security
0x40 - use bootp to get boot parameters
0x80 - use tftp to get boot image
0x100 - use proxy arp
available boot devices:Enhanced Network Devices
ae0 ae1 tffs
[Boot]: p
boot device : tffs:
unit number : 0
processor number : 0
file name : /fl/ap61.sys
inet on ethernet (e) : 192.168.1.20:ffffff00
host inet (h) : 192.168.1.100
flags (f) : 0x8
startup script (s) : factory
other (o) : ae
[Boot]: ?
? - print this list
@ - boot (load and go)
p - print boot params
c - change boot params
e - print fatal exception
v - print version
B - change board data
E - erase board data
F - quick format on the file system
L - low level format on file system
C - clean up Radio's EEPROM configuration
O - save Radio's EEPROM configuration to file
T - restore Radio's EEPROM configuration from file
S - show board data
n netif - print network interface device address
$dev(0,procnum)host:/file h=# e=# b=# g=# u=usr [pw=passwd] f=#
tn=targetname s=script o=other
boot device: tffs=drive,removable file name: /tffs0/vxWorks
Boot flags:
0x02 - load local system symbols
0x04 - don't autoboot
0x08 - quick autoboot (no countdown)
0x20 - disable login security
0x40 - use bootp to get boot parameters
0x80 - use tftp to get boot image
0x100 - use proxy arp
available boot devices:Enhanced Network Devices
ae0 ae1 tffs
[Boot]: s
Unrecognized command. Type '?' for help.
[Boot]: S
name: Atheros AR2317 default
magic: 35333131
cksum: 6f9c
rev: 6
major: 1
minor: 0
pciid: 0013
wlan0: yes 00:18:f8:77:e6:9c
wlan1: no 00:03:7f:fe:00:02
enet0: yes 00:18:f8:77:e6:9b
enet1: no 00:18:f8:77:e6:9a
localbus: no ff:ff:ff:ff:ff:ff
PCI: no ff:ff:ff:ff:ff:ff
uart0: yes
sysled: yes, gpio 7
factory: yes, gpio 6
serclk: internal
cpufreq: calculated 184000000 Hz
sysfreq: calculated 92000000 Hz
memcap: disabled
watchdg: enabled
vxWorks_Ver = 0
vxWorksB_Ver = 0
boot_Ver = 01000003
upgradeFlag = 255
[Boot]: @
Attaching to TFFS... done.
Loading /fl/ap61.sys...931952
Starting at 0x80480684...
/fl/ - Volume is OK
Cannot write a correct value(0xA320) on reg 0x11=0xE320
Attaching interface lo0...done
Ready unit=0
********** Disable sysWatchdog ***************
++++++++++++ IP attach interface ++++++++++
Start Initial MEM Drv size:0x1fe00
Copy OK: 28187 bytes copied
FlshFormatFileSystem: Invalid Filesys ID -1
vxBitsInit
!!!!!!!!!!!!!!Find Interface mirror0
!!!!!!!!!!!!!!Find Interface ae1
WAN Initialisation [SUCCESS]
PPPoE Initialised
PPTP Initialised
L2TP Initialization success FW initalized
** before calling dhcpc http register function **
TFstandard_tftp_server launched on port TPD:Initializa69tinion ok .........
.......
IGWIpRsmInit(): ....End
Initialising UPnP Stack DEBUG: IGWHttpServStart: server is now running
UPnP Stack InitialisedIGWUPNLdSvInit 54
IGWIGDLoadAndSaveInit: success
../../ldsvcbk/firewall/kukildsv.c(76): FWCookieLdsvInit: SUCCESS
Loading the databases......
======================= Set IP Address state 0
======================= Set Boardcast Address state 0
Loading RIP configuration records - success.
Loaded RIP database
DNSRDLoad Done
DNSRDLoadSysDName Done
Firewall load database completed Loaded Security database
IGWIGD: Loading data
lTotalRecs is 1
IGWIGDSetIface: Interface Info failure
IGWIGDLoadEnable :lTotalRecs is 1
UP0xnPPeriodicAdvertis805f8190eRestart: St (arting Advts.
strt):
IGWIGDLoad: arp_rtrequest: bad gateway valueIGWIGDLoad() success
IGWUPN: Loading data
IGWUPNLoadData 74
IGWUPNLoadHostRec 270
IGWUPNLoadServRec 356
IGWUPNLoadServRec: DbGetRecordInfo Failed
Already login from internal n/w is enabled
Httpd_Register_TagArray
Httpd_Register_TagArray
Httpd_Register_TagArray
**********Registration of local tags succesful for DMZHostConfig
********** Ensable sysWatchdog ***************
IGWIGDSetIface: IGWUpnpGetIfaceInfo failure
ROUTE NET TABLE
destination gateway flags Refcnt Use Interface
----------------------------------------------------------------------------
0.0.0.0 0.0.0.0 101 0 0 ae1
192.168.1.0 192.168.1.1 101 0 0 mirror0
----------------------------------------------------------------------------
ROUTE HOST TABLE
destination gateway flags Refcnt Use Interface
----------------------------------------------------------------------------
127.0.0.1 127.0.0.1 5 1 3 lo0
239.255.255.250 192.168.1.1 5 0 0 mirror0
----------------------------------------------------------------------------
Listing Directory /fl:
-rwxrwxrwx 1 0 0 932340 Jan 1 01:01 AP61.SYS
-rwxrwxrwx 1 0 0 175188 Apr 21 2006 igwhtm.dat
-rwxrwxrwx 1 0 0 27712 Apr 21 2006 langpak_en
-rwxrwxrwx 1 0 0 28187 Jan 1 01:00 igwpricf.dat
/fl/ - disk check in progress ...
/fl/AP61.SYS
/fl/igwhtm.dat
/fl/langpak_en
/fl/igwpricf.dat
/fl/ - Volume is OK
total # of clusters: 2,819
# of free clusters: 542
# of bad clusters: 0
total free space: 277,504
max contiguous free space: 277,504 bytes
# of files: 4
# of folders: 0
total bytes in files: 1,136 Kb
# of lost chains: 0
total bytes in lost chains: 0
FREE LIST:
num addr size
--- ---------- ----------
1 0x805e8180 66032
2 0x80510520 192
3 0x803b6fc0 399344
SUMMARY:
status bytes blocks avg block max block
------ --------- -------- ---------- ----------
current
free 465568 3 155189 399344
alloc 4007792 2334 1717 -
cumulative
alloc 4472016 11013 406 -
Here is the normal boot without any interruption:
ar531xPlus rev 0x00000090 firmware startup...
SDRAM NOT TEST
Cannot write a correct value(0xA320) on reg 0x11=0xE320
WRK54G version 4.1.2.56SP4
1
0
auto-booting...
Attaching to TFFS... done.
Loading /fl/ap61.sys...931952
Starting at 0x80480684...
/fl/ - Volume is OK
Cannot write a correct value(0xA320) on reg 0x11=0xE320
Attaching interface lo0...done
Ready unit=0
********** Disable sysWatchdog ***************
++++++++++++ IP attach interface ++++++++++
Start Initial MEM Drv size:0x1fe00
Copy OK: 28187 bytes copied
FlshFormatFileSystem: Invalid Filesys ID -1
vxBitsInit
!!!!!!!!!!!!!!Find Interface mirror0
!!!!!!!!!!!!!!Find Interface ae1
WAN Initialisation [SUCCESS]
PPPoE Initialised
PPTP Initialised
L2TP Initialization success FW initalized
** before calling dhcpc http register function **
TFstandard_tftp_server launched on port TPD:Initializa69tinion ok .........
.......
IGWIpRsmInit(): ....End
Initialising UPnP Stack DEBUG: IGWHttpServStart: server is now running
UPnP Stack InitialisedIGWUPNLdSvInit 54
IGWIGDLoadAndSaveInit: success
../../ldsvcbk/firewall/kukildsv.c(76): FWCookieLdsvInit: SUCCESS
Loading the databases......
======================= Set IP Address state 0
======================= Set Boardcast Address state 0
Loading RIP configuration records - success.
Loaded RIP database
DNSRDLoad Done
DNSRDLoadSysDName Done
Firewall load database completed Loaded Security database
IGWIGD: Loading data
lTotalRecs is 1
IGWIGDSetIface: Interface Info failure
IGWIGDLoadEnable :lTotalRecs is 1
UP0xnPPeriodicAdvertis805f8190eRestart: St (arting Advts.
strt):
IGWIGDLoad: arp_rtrequest: bad gateway valueIGWIGDLoad() success
IGWUPN: Loading data
IGWUPNLoadData 74
IGWUPNLoadHostRec 270
IGWUPNLoadServRec 356
IGWUPNLoadServRec: DbGetRecordInfo Failed
Already login from internal n/w is enabled
Httpd_Register_TagArray
Httpd_Register_TagArray
Httpd_Register_TagArray
**********Registration of local tags succesful for DMZHostConfig
********** Ensable sysWatchdog ***************
IGWIGDSetIface: IGWUpnpGetIfaceInfo failure
ROUTE NET TABLE
destination gateway flags Refcnt Use Interface
----------------------------------------------------------------------------
0.0.0.0 0.0.0.0 101 0 0 ae1
192.168.1.0 192.168.1.1 101 0 0 mirror0
----------------------------------------------------------------------------
ROUTE HOST TABLE
destination gateway flags Refcnt Use Interface
----------------------------------------------------------------------------
127.0.0.1 127.0.0.1 5 1 3 lo0
239.255.255.250 192.168.1.1 5 0 0 mirror0
----------------------------------------------------------------------------
Listing Directory /fl:
-rwxrwxrwx 1 0 0 932340 Jan 1 01:01 AP61.SYS
-rwxrwxrwx 1 0 0 175188 Apr 21 2006 igwhtm.dat
-rwxrwxrwx 1 0 0 27712 Apr 21 2006 langpak_en
-rwxrwxrwx 1 0 0 28187 Jan 1 01:00 igwpricf.dat
/fl/ - disk check in progress ...
/fl/AP61.SYS
/fl/igwhtm.dat
/fl/langpak_en
/fl/igwpricf.dat
/fl/ - Volume is OK
total # of clusters: 2,819
# of free clusters: 542
# of bad clusters: 0
total free space: 277,504
max contiguous free space: 277,504 bytes
# of files: 4
# of folders: 0
total bytes in files: 1,136 Kb
# of lost chains: 0
total bytes in lost chains: 0
FREE LIST:
num addr size
--- ---------- ----------
1 0x805e8180 66032
2 0x80510520 192
3 0x803b6fc0 399344
SUMMARY:
status bytes blocks avg block max block
------ --------- -------- ---------- ----------
current
free 465568 3 155189 399344
alloc 4007792 2334 1717 -
cumulative
alloc 4472016 11013 406 -
I hear there are some micro images in the works? I would love to put a stripped down version of kamikaze on here, anything would be better.