BT Voyager 210 UART found, no docs, BusyBox

[ahorner]

Hi there,

Please forgive me if I don't fit the usual tone and style around here, i'm new and just created my account.

So, after spending the last two hours and having great success with the V2 version of this BT box https://oldwiki.archive.openwrt.org/toh/bt/vg3503j managing to get OpenWRT installed and happily running after soldering a UART header to the board, I wanted to look at another device I have, the BT Voyager 210.

I've identified the UART pinout for this device, and handily there is a header for this. Heres the board with the "front" at the bottom of the image:

The little white connector in the bottom left, just left of the bicolour LED is the UART

From Right to Left pinout: 3.3v GND TXD RXD

After starting the device with 115200 baud connected, I can see that the device is running
==> Bcm963xx Software Version: 2.21.05.08m_A2pB018c1.d16d <== BusyBox v0.60.4 (2005.09.26-02:56+0000) Built-in shell (msh)

Username and password are both admin

You get a main menu which comes with the device (this also appears to be accessible via telnet too) and if you ignore the menu you can type sh and drop to a BusyBox shell.

It says I can type help for commands like normal, but this is an unknown command. ls is also unknown, cd works and pwd also so you can navigate around directories, wget is a no, tftpd is a known command but responds with tftpd: daemon bind failed: (null), vi and vim are unknown, echo and cat work, ping works.

command busybox outputs:

BusyBox v0.60.4 (2005.09.26-02:56+0000) multi-call binary

Usage: busybox [function] [arguments]...
   or: [function] [arguments]...

        BusyBox is a multi-call binary that combines many common Unix
        utilities into a single executable.  Most people will create a
        link to busybox for each function they wish to use, and BusyBox
        will act like whatever it was invoked as.

Currently defined functions:
        [, busybox, cat, df, echo, expr, false, halt, ifconfig, init,
        insmod, kill, klogd, linuxrc, login, logread, mkdir, modprobe,
        mount, msh, ping, ps, pwd, reboot, restore, rm, rmmod, route,
        sendarp, sh, sysinfo, syslogd, test, tftpd, true, tty, wol

Pressing space at boot interrupts boot and drops us to a prompt CFE> and when we run help we get the following commands listed

Available commands:

w                   Write the whole image start from beginning of the flash
e                   Erase [n]vram or [a]ll flash except bootrom
r                   Run program from flash image or from host depend on [f/h] flag
p                   Print boot line and board parameter info
c                   Change booline parameters
f                   Write image to the flash
i                   Erase persistent storage data
b                   Change board parameters
reset               Reset the board
flashimage          Flashes a compressed image after the bootloader.
help                Obtain help for CFE commands

For more information about a command, enter 'help command-name'

Not sure is it'd be possible to get more commands available or even if we could get OpenWRT working. I don't have the experience with that.

[jeff]

Getting and posting the full boot log from serial would certainly provide people with a lot of insight into the possibilities and challenges.

[ahorner]

Full boot log

CFE version 1.0.37-21.6.8 for BCM96338 (32bit,SP,BE)
Build Date: Thu Sep 22 10:41:12 CST 2005 (michaelc@AskeyBrcmServer)

Ethernet Network Device: Internal PHY
Auto-negotiation timed-out

Board IP address                : 192.168.1.1:ffffff00
Host IP address                 : 192.168.1.2
Gateway IP address              :
Run from flash/host (f/h)       : f
Default host run file name      :
Default host flash file name    : bcmModelName_fs_kernel
Boot delay (1-9 seconds)        : 1
Board Id Name                   : V210_BB
Psi size in KB                  : 24
Number of MAC Addresses (1-32)  : 3
Ethernet MAC Address            : 00:11:f5:a9:87:d5
Memory size in MB               : 8

==== Press space key to stop auto run (1 seconds) ====
Auto run second count down(before hit space key): 0
Code Address: 0x80010000, Entry Address: 0x8001046c
Decompression OK!
Entry at 0x8001046c
Closing network.
Starting program at 0x8001046c
FLASH_BASE bfc00000,blk 0
Total Flash size: 4096K with 71 sectors NVRAM @0 block
Scratch pad is not used for this flash part.
V210_BB prom init
CPU revision is: 00029010
Primary instruction cache 16kb, linesize 16 bytes (2 ways)
Primary data cache 8kb, linesize 16 bytes (2 ways)
Linux version 2.4.17 (michaelc@AskeyBrcmServer) (gcc version 3.1) #1 Mon Sep 26 10:49:06 CST 2005
Determined physical RAM map:
 memory: 007a0000 @ 00000000 (usable)
On node 0 totalpages: 1952
zone(0): 1952 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: root=/dev/mtdblock0 ro
bcm_console_setup
Calibrating delay loop... 239.20 BogoMIPS
Memory: 6108k/7808k available (1112k kernel code, 1700k reserved, 76k data, 44k init, 0k highmem)
Dentry-cache hash table entries: 1024 (order: 1, 8192 bytes)
Inode-cache hash table entries: 512 (order: 0, 4096 bytes)
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer-cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 2048 (order: 1, 8192 bytes)
Checking for 'wait' instruction...  unavailable.
POSIX conformance testing by UNIFIX
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
Initializing RT netlink socket
Starting kswapd
brcmboard: brcm_board_init entry
Module bcm63xx_cons.c v1.1 Sep 26 2005 10:49:37
block: 64 slots per queue, batch=16
PPP generic driver version 2.4.1
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP, IGMP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 512 bind 1024)
Linux IP multicast router 0.06 plus PIM-SM
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
Ebtables v2.0 registered<6>NET4: Ethernet Bridge 008 for NET4.0
VFS: Mounted root (cramfs filesystem) readonly.
Freeing unused kernel memory: 44k freed
init started:  BusyBox v0.60.4 (2005.09.26-02:56+0000) multi-call binary
Algorithmics/MIPS FPU Emulator v1.5


BusyBox v0.60.4 (2005.09.26-02:56+0000) Built-in shell (msh)
Enter 'help' for a list of built-in commands.


Loading drivers and kernel modules...

atmapi: init_module entry 0xc0025060
blaadd: blaa_detect entry
adsl: adsl_init entry
var 1.0 initialised
Broadcom BCM6338A1 Ethernet Network Device v0.1 Sep 26 2005 10:54:39 Ports 1  unit 1 Internal PHY
BCM63xx_ENET: Auto-negotiation timed-out
BCM63xx_ENET: 10 MB Half-Duplex (assumed)
eth0: MAC Address: 00:11:F5:A9:87:D5
Broadcom BCM6338A1 USB Network Device v0.3 Sep 26 2005 10:54:40
usb0: MAC Address: 00 11 F5 A9 87 D6
usb0: Host MAC Address: 00 11 F5 A9 87 D7
USB Vendor id=069a, USB Product id=0318
ATM Soft SAR: ATM link connected.

==>   Bcm963xx Software Version: 2.21.05.08m_A2pB018c1.d16d   <==

Invalid domain = []
PPP username is out of valid domains.

[slh]

Broadcom means that the xDSL modem isn't supported in the first place, but beyond that - 8 MB RAM (and 4 MB flash) are unusable anyways.