I gathered some data from serial console. It uses CFE bootloader, also has CFE mini webserver at 192.168.1.1
Here are some data:
Base: 4.16_01
CFE version 1.0.38-116.15 for BCM963268 (32bit,SP,BE)
Build Date: 2020年 05月 16日 星期六 17:15:05 CST (root@tplink)
Copyright (C) 2000-2013 Broadcom Corporation.
Chip ID: BCM63168D0, MIPS: 400MHz, DDR: 400MHz, Bus: 200MHz
Main Thread: TP0
Memory Test Passed
Total Memory: 67108864 bytes (64MB)
Boot Address: 0xb8000000
NAND ECC BCH-4, page size 0x800 bytes, spare size used 64 bytes
NAND flash device: Hynix H27U1G8F2B, id 0xadf1 block 128KB size 131072KB
Board IP address : 192.168.1.1:ffffff00
Host IP address : 192.168.1.100
Gateway IP address :
Run from flash/host/tftp (f/h/c) : f
Default host run file name : vmlinux
Default host flash file name : bcm963xx_fs_kernel
Boot delay (0-9 seconds) : 1
Boot image (0=latest, 1=previous) : 0
Default host ramdisk file name :
Default ramdisk store address :
Board Id (0-29) : 963168XF
Number of MAC Addresses (1-32) : 11
Base MAC Address : c5:05:c0:99:70:01
PSI Size (1-64) KBytes : 24
Enable Backup PSI [0|1] : 0
System Log Size (0-256) KBytes : 0
Auxillary File System Size Percent: 0
Main Thread Number [0|1] : 0
*** Press 't' to stop auto run (0.1 seconds) ***
Booting from latest image (address 0xb8020000, flash offset 0x00020000) ...
HELO
Starting to boot:
*** Press 't' to stop auto run (0.1 seconds) ***
Booting from latest image (address 0xbbd80000, flash offset 0x03d80000) ...
Decompression OK!
Entry at 0x804052c0
Starting program at 0x804052c0
Linux version 3.4.11-rt19 (root@34db43e44fa1) (gcc version 4.6.2 (Buildroot 2011
963168XF prom init
CPU revision is: 0002a080 (Broadcom BMIPS4350)
DSL SDRAM reserved: 0x132000
Determined physical RAM map:
memory: 03ece000 @ 00000000 (usable)
Zone PFN ranges:
DMA 0x00000000 -> 0x00001000
Normal 0x00001000 -> 0x00003ece
Movable zone start PFN for each node
Early memory PFN ranges
0: 0x00000000 -> 0x00003ece
On node 0 totalpages: 16078
free_area_init_node: node 0, pgdat 80519ef0, node_mem_map 81000000
DMA zone: 32 pages used for memmap
DMA zone: 0 pages reserved
DMA zone: 4064 pages, LIFO batch:0
Normal zone: 94 pages used for memmap
Normal zone: 11888 pages, LIFO batch:1
PERCPU: Embedded 7 pages/cpu @81083000 s5488 r8192 d14992 u32768
pcpu-alloc: s5488 r8192 d14992 u32768 alloc=8*4096
pcpu-alloc: [0] 0 [0] 1
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 15952
Kernel command line: ro noinitrd irqaffinity=0
PID hash table entries: 256 (order: -2, 1024 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes.
Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes
Memory: 57980k/64312k available (4107k kernel code, 6332k reserved, 1054k data,)
Preemptible hierarchical RCU implementation.