is it possible to have a port on this model.
look like OEM from Sagemcom Broadband SAS
ESMT F59L2G81A
BCM63167UKREBG
D9RTK
BCM53134SKFBG
BCM43602KMLG
The xDSL support will never be available, wireless will remain limited (brcmfmac, at least the BCM43602 radio - not sure if it uses a different one for 2.4 GHz), the SOC itself should be supportable.
its good enough. XDSL gone is fine.
coz this little device limit all kind of settings and speed......
do i need to provide the device ?
Only someone with the opened device on the desk will have a chance to do anything, this someone could be you (to be honest, I don't really see anyone else volunteering to work on this device).
1 Like
Here are some image, please let me know what i need to provide
is there anything i can assist or provide to smooth the support
I'm also keen to give this a try, theres 1 main problem I can see with this though, that is that it would be almost impossible for a normal user to flash a new firmware on (correct me if i'm wrong). I suspect you need to remove the nand chip, and use a SPI chip which you program by hand (some cheap $5 devices out there will do it). I also believe there may be some circuit changes required round the power led in order to tell the soc to use spi... its either that or program the nand directly which requires lots of very fine soldering (and a lot of glue to keep cables stable)
Boot logs attached (I have not gotten openwrt on this but keen to try)
HELO
CPUI
L1CI
HELO
CPUI
L1CI
4.1603-1.0.38-116.141
DRAM
----
PHYS
STRF
400H
PHYE
DDR3
SIZ4
SIZ3
DINT
USYN
LSYN
MFAS
LMBE
RACE
PASS
----
ZBSS
CODE
DATA
L12F
MAIN
Version cfe-rom: 7.28.13.1
FPS0
SVOL
NGEO
FVLY
FVLY
RVOL
J2EP
Base: 4.16_03
CFE version 1.0.38-116.141 for BCM963268 (32bit,SP,BE)
Build Date: Tue Feb 13 17:17:20 CST 2018 (stefenhuang@sz01017.ads.local)
Copyright (C) 2000-2013 Broadcom Corporation.
Version cfe-ram: 7.28.13.1
Boot Strap Register: 0x1ff97bf
Chip ID: BCM63167D0, MIPS: 400MHz, DDR: 400MHz, Bus: 200MHz
Main Thread: TP0
Memory Test Passed
Total Memory: 268435456 bytes (256MB)
Boot Address: 0xb8000000
NextLevelBoot U-boot @ 0x8ff00000
NAND ECC BCH-4, page size 0x800 bytes, spare size used 64 bytes
NAND flash device: , id 0xc8da block 128KB size 262144KB
Board IP address : 192.168.1.1:ffffff00
Host IP address : 192.168.1.100
Gateway IP address :
Run from flash/host/tftp (f/h/c) : f
Default host run file name : vmlinux
Default host flash file name : bcm963xx_fs_kernel
Boot delay (0-9 seconds) : 1
Default host ramdisk file name :
Default ramdisk store address :
Board Id (0-48) : F@ST4353
Number of MAC Addresses (1-32) : 10
Base MAC Address : 00:10:18:00:00:00
PSI Size (1-64) KBytes : 48
Enable Backup PSI [0|1] : 0
System Log Size (0-256) KBytes : 0
Auxillary File System Size Percent: 0
Main Thread Number [0|1] : 0
WLan Feature : 0x00
External switch id = 5075
CFE - Switch Port 3 is disabled
Initializing UBI to launch u-boot!
Running UbiScan...
Found 483 UBI logical blocks on NAND
UBI Layout volume is on logical block 7d7
initialize_ubi...cferam reading uboot ======================= !!!
UBI volume uboot has id 1
read 559480 bytes from UBI volume 1
Ubi U-Boot Entry at 0x8ff00000
Closing network.
Disabling Switch ports.
Flushing Receive Buffers...
0 buffers found
Closing DMA Channels
Starting program at 0x8ff00000
U-Boot 2011.12
Version: 7.28.13.1-full (Feb 13 2018 - 17:17:13)
Copyright (C) 2011 - 2013 Sagemcom All rights reserved
gpio in: 0x404fdb1f
board type: 00020010
board memsize : 0x10000000
CPU: Broadcom BCM63167D0
DRAM: 256 MiB
NAND: DevId c8da9095 may not be supported. Will use config info
Spare Area Size = 16B/512B
ECC level changed to 4
OOB size changed to 16
256 MiB
Using default environment
Board type from nvram is F@ST4353.
Net: External switch id = 53125
BCM63xxx
Hit any key to stop autoboot: 0
sb3: sb3_sagem_init()
sb3: action: 1007
sb3: sb3_wait_for_magic()
sb3: action: 1002
sb3: sb3_boot( operational )
sb3: top available addr 0x8f8b0000, ram available = 0xf4b0000
Creating 1 MTD partitions on "nand0":
0x0000000c0000-0x00000fb00000 : "mtd=1"
UBI: attaching mtd1 to ubi0
UBI: physical eraseblock size: 131072 bytes (128 KiB)
UBI: logical eraseblock size: 126976 bytes
UBI: smallest flash I/O unit: 2048
UBI: VID header offset: 2048 (aligned 2048)
UBI: data offset: 4096
UBI: attached mtd1 to ubi0
UBI: MTD device name: "mtd=1"
UBI: MTD device size: 250 MiB
UBI: number of good PEBs: 2002
UBI: number of bad PEBs: 0
UBI: max. allowed volumes: 128
UBI: wear-leveling threshold: 256
UBI: number of internal volumes: 1
UBI: number of user volumes: 7
UBI: available PEBs: 1313
UBI: total number of reserved PEBs: 689
UBI: number of PEBs reserved for bad PEB handling: 20
UBI: max/mean erase counter: 8/1
sb3: read image operational size=189c800 to address=8e010000
sb3_load_ubivol: max_load_size=256573440
Read 25806848 bytes from volume operational to 8e010000
gsdf ident string OK
gsdf size OK
gsdf auth_hash OK
sb3: image operational has gsdf format
gsdf ident string OK
gsdf size OK
gsdf auth_hash OK
found a root CA certificate in section 0
root certificate OK (SAGEMCOM GTW Devices Sign Firmware CA)
signature OK
section list OK
gsdf head_hash OK
gsdf data_hash OK
sb3: image operational signature OK
BCM63xx : unregistering Ethernet driver
Disabling Switch ports.
Flushing Receive Buffers...
0 buffers found.
Closing DMA Channels.
sb3: No pre-boot commands
sb3: setting kernel args
bootm 8E011000
## Booting kernel from Legacy Image at 8e011000 ...
Image Name: scOS SG7M100000170 (8a.80.130.6)
Created: 2018-10-29 11:41:52 UTC
Image Type: MIPS Linux Kernel Image (gzip compressed)
Data Size: 2818048 Bytes = 2.7 MiB
Load Address: 80010000
Entry Point: 8046d1a0
Verifying Checksum ... OK
Uncompressing Kernel Image ... OK
Starting kernel ...
Linux version 3.4.11-rt19 (g562108@shz-p0000720fl) (gcc version 4.6.2 (GCC) ) #10 SMP PREEMPT Mon Oct 29 19:41:35 CST 2018
F@ST4353 prom init
CPU revision is: 0002a080 (Broadcom BMIPS4350)
DSL SDRAM reserved: 0x132000
Determined physical RAM map:
memory: 0fece000 @ 00000000 (usable)
last_kmesg : reserved phy memory c000000-c010000
Zone PFN ranges:
DMA 0x00000000 -> 0x00001000
Normal 0x00001000 -> 0x0000fece
Movable zone start PFN for each node
Early memory PFN ranges
0: 0x00000000 -> 0x0000fece
On node 0 totalpages: 65230
free_area_init_node: node 0, pgdat 80586330, node_mem_map 81000000
DMA zone: 32 pages used for memmap
DMA zone: 0 pages reserved
DMA zone: 4064 pages, LIFO batch:0
Normal zone: 478 pages used for memmap
Normal zone: 60656 pages, LIFO batch:15
PERCPU: Embedded 7 pages/cpu @81203000 s5392 r8192 d15088 u32768
pcpu-alloc: s5392 r8192 d15088 u32768 alloc=8*4096
pcpu-alloc: [0] 0 [0] 1
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 64720
Kernel command line: ro noinitrd root=mtd:rootfs init=/etc/preinit ro rootfstype=squashfs console=ttyS0,115200 rootfs_offset=0x002b1800 rootfs_size=0x015eb000 mtdparts=nand:768k(bcm),5120k@-5120k(data),-@768k(partAll) ubi.mtd=ubi part_main=partAll part_boot=partAll image_ubivol=operational board_type=000200f0 console=ttyS0,115200 earlyprintk debug init=/etc/preinit irqaffinity=0
UBI image volume: "operational"
PID hash table entries: 1024 (order: 0, 4096 bytes)
Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes.
Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes
Memory: 252404k/260920k available (4526k kernel code, 8516k reserved, 1068k data, 224k init, 0k highmem)
Preemptible hierarchical RCU implementation.
NR_IRQS:128
console [ttyS0] enabled
Calibrating delay loop... 397.31 BogoMIPS (lpj=198656)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
--Kernel Config--
SMP=1
PREEMPT=1
DEBUG_SPINLOCK=0
DEBUG_MUTEXES=0
Broadcom Logger v0.1 Oct 26 2018 13:30:09
CPU revision is: 0002a080 (Broadcom BMIPS4350)
Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes.
Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes
Brought up 2 CPUs
NET: Registered protocol family 16
Internal 1P2 VREG will be shutdown if unused...Unused, turn it off (00007faa-00007fb1=-7<300)
Initialized persistent memory from 0c000000-0c00ffff
successfully registered persistent RAM device
persistent_ram: uncorrectable error in header
persistent_ram: no valid data in buffer (sig = 0x677f8ef6)
console [ram-1] enabled
successfully registered ram_console_device
registering PCI controller with io_map_base unset
registering PCI controller with io_map_base unset
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
PCI host bridge to bus 0000:00
pci_bus 0000:00: root bus resource [mem 0xa0f00000-0xa0ffffff]
pci_bus 0000:00: root bus resource [io 0xa2000000-0xa200ffff]
pci 0000:00:00.0: [14e4:435f] type 00 class 0x028000
pci 0000:00:00.0: reg 10: [mem 0x10004000-0x10005fff]
pci 0000:00:09.0: [14e4:6300] type 00 class 0x0c0310
pci 0000:00:09.0: reg 10: [mem 0x10002600-0x100026ff]
pci 0000:00:0a.0: [14e4:6300] type 00 class 0x0c0320
pci 0000:00:0a.0: reg 10: [mem 0x10002500-0x100025ff]
PCI host bridge to bus 0000:01
pci_bus 0000:01: root bus resource [mem 0x11000000-0x11efffff]
pci_bus 0000:01: root bus resource [??? 0x00000000 flags 0x0]
pci 0000:01:00.0: [14e4:6326] type 01 class 0x060400
pci 0000:01:00.0: PME# supported from D0 D3hot
pci 0000:02:00.0: [14e4:aa52] type 00 class 0x028000
pci 0000:02:00.0: reg 10: [mem 0x00000000-0x00007fff 64bit]
pci 0000:02:00.0: reg 18: [mem 0x00000000-0x003fffff 64bit]
pci 0000:02:00.0: supports D1 D2
pci 0000:01:00.0: BAR 8: assigned [mem 0x11000000-0x115fffff]
pci 0000:02:00.0: BAR 2: assigned [mem 0x11000000-0x113fffff 64bit]
pci 0000:02:00.0: BAR 0: assigned [mem 0x11400000-0x11407fff 64bit]
pci 0000:01:00.0: PCI bridge to [bus 02-02]
pci 0000:01:00.0: bridge window [mem 0x11000000-0x115fffff]
PCI: Enabling device 0000:01:00.0 (0000 -> 0002)
bcmhs_spi bcmhs_spi.1: master is unqueued, this is deprecated
bcmleg_spi bcmleg_spi.0: master is unqueued, this is deprecated
skbFreeTask created successfully
gbpm_do_work scheduled
BLOG v3.0 Initialized
BLOG Rule v1.0 Initialized
Broadcom IQoS v0.1 Oct 26 2018 13:32:43 initialized
Broadcom GBPM v0.1 Oct 26 2018 13:32:43 initialized
NET: Registered protocol family 8
NET: Registered protocol family 20
Switching to clocksource MIPS
NET: Registered protocol family 2
IP route cache hash table entries: 2048 (order: 1, 8192 bytes)
TCP established hash table entries: 8192 (order: 4, 65536 bytes)
TCP bind hash table entries: 8192 (order: 4, 65536 bytes)
TCP: Hash tables configured (established 8192 bind 8192)
TCP: reno registered
UDP hash table entries: 128 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 128 (order: 0, 4096 bytes)
NET: Registered protocol family 1
PCI: CLS mismatch (64 != 16), using 16 bytes
bcm_tstamp initialized, (hpt_freq=200000000 2us_div=200 2ns_mult=5 2ns_shift=0)
exFAT: Version 1.2.9
squashfs: version 4.0 (2009/01/31) Phillip Lougher
Registering unionfs 2.5.12 (for 3.4.70)
jffs2: version 2.2. (NAND) © 2001-2006 Red Hat, Inc.
fuse init (API version 7.18)
msgmni has been set to 492
io scheduler noop registered (default)
Broadcom NAND controller (BrcmNand Controller)
mtd->oobsize=0, mtd->eccOobSize=0
NAND_CS_NAND_XOR=00000000
B4: NandSelect=40000001, nandConfig=16152300, chipSelect=0
brcmnand_read_id: CS0: dev_id=c8da9095
After: NandSelect=40000001, nandConfig=16152300
DevId c8da9095 may not be supported. Will use config info
Spare Area Size = 16B/512B
Block size=00020000, erase shift=17
NAND Config: Reg=16152300, chipSize=256 MB, blockSize=128K, erase_shift=11
busWidth=1, pageSize=2048B, page_shift=11, page_mask=000007ff
timing1 not adjusted: 6574845b
timing2 not adjusted: 00001e96
ECC level changed to 4
OOB size changed to 16
BrcmNAND mfg 0 0 UNSUPPORTED NAND CHIP 256MB on CS0
Found NAND on CS0: ACC=e3441010, cfg=16152300, flashId=c8da9095, tim1=6574845b, tim2=00001e96
BrcmNAND version = 0x0400 256MB @00000000
brcmnand_scan: B4 nand_select = 40000001
brcmnand_scan: After nand_select = 40000001
handle_acc_control: default CORR ERR threshold 1 bits
ACC: 16 OOB bytes per 512B ECC step; from ID probe: 16
page_shift=11, bbt_erase_shift=17, chip_shift=28, phys_erase_shift=17
Brcm NAND controller version = 4.0 NAND flash size 256MB @10000000
ECC layout=brcmnand_oob_bch4_2k
brcmnand_scan: mtd->oobsize=64
brcmnand_scan: oobavail=35, eccsize=512, writesize=2048
brcmnand_scan, eccsize=512, writesize=2048, eccsteps=4, ecclevel=4, eccbytes=7
-->brcmnand_default_bbt
brcmnand_default_bbt: bbt_td = bbt_slc_bch4_main_descr
Bad block table Bbt0 found at page 0001ffc0, version 0x01 for chip on CS0
Bad block table 1tbB found at page 0001ff80, version 0x01 for chip on CS0
brcmnand_reset_corr_threshold: default CORR ERR threshold 1 bits for CS0
brcmnand_reset_corr_threshold: CORR ERR threshold changed to 3 bits for CS0
brcmnandCET: Status -> Deferred
Master size=10000000
rootfs_ofs=0xffffffff, part1ofs=0x00000080, part2ofs=0x0001f600
Part[0] name=bcmfs, size=20000, ofs=0
Part[1] name=bcmfs_update, size=a0000, ofs=20000
Part[2] name=ubi, size=fa40000, ofs=c0000
Part[3] name=data, size=400000, ofs=fb00000
Part[4] name=nvram, size=20000, ofs=0
Creating 5 MTD partitions on "brcmnand.0":
0x000000000000-0x000000020000 : "bcmfs"
0x000000020000-0x0000000c0000 : "bcmfs_update"
0x0000000c0000-0x00000fb00000 : "ubi"
0x00000fb00000-0x00000ff00000 : "data"
0x000000000000-0x000000020000 : "nvram"
UBI: attaching mtd2 to ubi0
UBI: physical eraseblock size: 131072 bytes (128 KiB)
UBI: logical eraseblock size: 126976 bytes
UBI: smallest flash I/O unit: 2048
UBI: VID header offset: 2048 (aligned 2048)
UBI: data offset: 4096
UBI: max. sequence number: 719
UBI: attached mtd2 to ubi0
UBI: MTD device name: "ubi"
UBI: MTD device size: 250 MiB
UBI: number of good PEBs: 2002
UBI: number of bad PEBs: 0
UBI: number of corrupted PEBs: 0
UBI: max. allowed volumes: 128
UBI: wear-leveling threshold: 4096
UBI: number of internal volumes: 1
UBI: number of user volumes: 7
UBI: available PEBs: 1313
UBI: total number of reserved PEBs: 689
UBI: number of PEBs reserved for bad PEB handling: 20
UBI: max/mean erase counter: 8/1
UBI: image sequence number: 0
UBI: background thread "ubi_bgt0d" started, PID 237
Add UBI volume partitions: name=secondaryboot
Add UBI volume partitions: name=uboot
Add UBI volume partitions: name=permanent_param
Add UBI volume partitions: name=rescue
Add UBI volume partitions: name=operational
Creating 3 MTD partitions on "operational":
0x000000000000-0x00000001f000 : "firm_header"
0x00000001f000-0x0000002d0800 : "kernel"
mtd: partition "kernel" doesn't end on an erase block -- force read-only
0x0000002b1800-0x00000189c800 : "rootfs"
mtd: partition "rootfs" doesn't start on an erase block boundary -- force read-only
Add UBI volume partitions: name=filesystem1
Add UBI volume partitions: name=gui
Creating 2 MTD partitions on "gui":
0x000000000000-0x00000001f000 : "gui_header"
mtd: partition "gui_header" is out of reach -- disabled
0x000000000000-0x000000000000 : "guifs"
mtd: partition "guifs" is out of reach -- disabled
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
PPP generic driver version 2.4.2
PPP BSD Compression module registered
PPP Deflate Compression module registered
NET: Registered protocol family 24
usbcore: registered new interface driver cdc_ether
usbcore: registered new interface driver sierra_net
usbcore: registered new interface driver usblp
usbcore: registered new interface driver usbserial
usbserial: USB Serial Driver core
usbcore: registered new interface driver sierra
USB Serial support registered for Sierra USB modem
i2c /dev entries driver
brcmboard: brcm_board_init entry
SES: Button Interrupt 0x3 is enabled
SES: LED GPIO 0x800f is enabled
DYING GASP IRQ Initialized and Enabled
Serial: BCM63XX driver $Revision: 3.00 $
Magic SysRq with Auxilliary trigger char enabled (type ^ h for list of supported commands)
ttyS0 at MMIO 0xb0000180 (irq = 13) is a BCM63XX
ttyS1 at MMIO 0xb00001a0 (irq = 42) is a BCM63XX
Total # RxBds=1448
bcmPktDmaBds_init: Broadcom Packet DMA BDs initialized
bcmPktDma_init: Broadcom Packet DMA Library initialized
Laser_Dev: error getting SCL and SDA GPIOs
i2c-gpio i2c-gpio.0: using pins 0 (SDA) and 0 (SCL)
IPSEC SPU: SUCCEEDED
GACT probability NOT on
Mirror/redirect action on
u32 classifier
input device check on
Actions configured
TCP: cubic registered
Initializing XFRM netlink socket
NET: Registered protocol family 10
NET: Registered protocol family 17
NET: Registered protocol family 15
Bridge firewalling registered
Initializing MCPD Module
Ebtables v2.0 registered
ebt_time registered
ebt_ftos registered
ebt_wmm_mark registered
L2TP core: blog_l2tp_rcv_check
L2TP core driver, V2.0
PPPoL2TP kernel driver, V2.0
8021q: 802.1Q VLAN Support v1.8
VFS: Mounted root (squashfs filesystem) readonly on device 31:12.
Freeing unused kernel memory: 224k freed
kernel.hotplug = /sbin/mdev
- preinit -
- regular preinit -
- init -
mkdir: can't create directory '/opt/conf': No such file or directory
remove filesystem2
Mount filesystem1
UBIFS: recovery needed
UBIFS: recovery completed
UBIFS: mounted UBI device 0, volume 5, name "filesystem1"
UBIFS: file system size: 11046912 bytes (10788 KiB, 10 MiB, 87 LEBs)
UBIFS: journal size: 1015809 bytes (992 KiB, 0 MiB, 6 LEBs)
UBIFS: media format: w4/r0 (latest is w4/r0)
UBIFS: default compressor: lzo
UBIFS: reserved for root: 521772 bytes (509 KiB)
filesystem2 linked on filesystem1
Switch root file system to unionfs
Mount smackfs ok !
Init smack configuration ok !
Registering temperature sensor
i2c i2c-0: new_device: Instantiated device lm75 at 0x48
Tue Jan 1 00:00:00 UTC 2013
unionfs: new lower inode mtime (bindex=1, name=tmp)
bsp_gpio_data: module license 'Proprietary' taints kernel.
Disabling lock debugging due to kernel taint
Driver LED and BUTTON init .....
[HAL-BSP]: kSysButtonManaged[41]: WARNING -> Button name >= Max(9)
[HAL-BSP]: kSysButtonManaged[41]: WARNING -> Button name >= Max(9)
[HAL-BSP]: kSysButtonManaged[41]: WARNING -> Button name >= Max(9)
Driver LED and BUTTON ok .....
nf_ct_rtsp: Successfully created nf_conntrack_rtsp task
Broadcom Ingress QoS Module Char Driver v0.1 Oct 26 2018 12:22:13 Registered<243>
Broadcom Ingress QoS ver 0.1 initialized
BPM: tot_mem_size=268435456B (256MB), buf_mem_size <15%> =40265310B (38MB), num of buffers=19972, buf size=2016
Broadcom BPM Module Char Driver v0.1 Oct 26 2018 12:22:04 Registered<244>
bcmxtmrt: Broadcom BCM3167D0 ATM/PTM Network Device v0.9 Oct 26 2018 12:24:11
NBUFF v1.0 Initialized
Initialized fcache state
Broadcom Packet Flow Cache Char Driver v2.2 Oct 26 2018 12:22:13 Registered<242>
Created Proc FS /procfs/fcache
Broadcom Packet Flow Cache registered with netdev chain
Broadcom Packet Flow Cache learning via BLOG enabled.
[FHW] pktDbgLvl[0xc04de350]=0
[FHW] fhw_construct:
Initialized Fcache HW accelerator layer state
flwStatsThread created
Constructed Broadcom Packet Flow Cache v2.2 Oct 26 2018 12:22:13
chipId 0x631670D0
Broadcom Forwarding Assist Processor (FAP) Char Driver v0.1 Oct 26 2018 12:22:04 Registered <241>
Enabling SMISBUS PHYS_FAP_BASE[0] is 0x10c01000
FAP Soft Reset Done
4ke Reset Done
Enabling SMISBUS PHYS_FAP_BASE[1] is 0x10c01000
FAP Soft Reset Done
4ke Reset Done
FAP Debug values at 0xac4a4270 0xac524270
fapGso_LoopBkThread created successfully
Allocated FAP0 SWQ_HOST2FAP_GSO_LOOPBACK_Q mem=aca94000 : 16384 bytes
Allocated FAP0 SWQ_FAP2HOST_GSO_LOOPBACK_Q mem=aca98000 : 16384 bytes
GSO LOOPBACK Cached HOST2FAP Q INFO:
Swq =b0825ef0 qStart=aca94000 qEnd=aca98000 msgSize=4 dqm=18 fapId=0
GSO LOOPBACK Cached FAP2HOST Q INFO:
Swq =b0825ec0 qStart=aca98000 qEnd=aca9c000 msgSize=2 dqm=19 fapId=0
Allocated FAP0 SWQ_FAP2HOST_WFD_Q mem=aca9c000 : 7200 bytes
Allocated FAP1 SWQ_FAP2HOST_WFD_Q mem=acb98000 : 7200 bytes
Allocated FAP0 SWQ_FAP2HOST_WFD_Q mem=aca92000 : 7200 bytes
Allocated FAP1 SWQ_FAP2HOST_WFD_Q mem=aca70000 : 7200 bytes
Allocated FAP0 TM SDRAM Queue Storage (ac4b5300) : 390144 bytes @ ac600000
Allocated FAP1 TM SDRAM Queue Storage (ac535300) : 390144 bytes @ ac680000
[NTC fapProto] fapReset : Reset FAP Protocol layer
[FAP0] DSPRAM : stack <0x80000000><1792>, global <0x80000700><4576>, free <1824>, total<8192>
[FAP1] DSPRAM : stack <0x80000000><1792>, global <0x80000700><4576>, free <1824>, total<8192>
[FAP0] PSM : addr<0x80002000>, used <24464>, free <112>, total <24576>
[FAP1] PSM : addr<0x80002000>, used <24464>, free <112>, total <24576>
[FAP0] DQM : availableMemory 14668 bytes, nextByteAddress 0xE00048B0
[FAP1] DQM : availableMemory 14668 bytes, nextByteAddress 0xE00048B0
[FAP0] Initializing FAP4KE GSO LOOPBACK on fapIdx=0 ...
[FAP1] IC Timer started
[FAP0] SWQ: HOST2FAP_GSO_LOOPBACK
[FAP1] FAP4KE WFD Init Done...
[FAP0] >>>>------------------
[FAP0] swq =80007ef0 msgSize =4 words , maxDepth=1024
[FAP0] qStart =aca94000 qEnd=aca98000
[FAP0] rdPtr =aca94000 wrPtr=aca94000 count=0
[FAP0] swq->interrupts 0 processed =0 dropped =0
[FAP0] Associated DQM=18 dir HOST2FAP
[FAP0] ------------------<<<<
[FAP0] SWQ: FAP2HOST_GSO_LOOPBACK
[FAP0] >>>>------------------
[FAP0] swq =80007ec0 msgSize =2 words , maxDepth=2048
[FAP0] qStart =aca98000 qEnd=aca9c000
[FAP0] rdPtr =aca98000 wrPtr=aca98000 count=0
[FAP0] swq->interrupts 0 processed =0 dropped =0
[FAP0] Associated DQM=19 dir FAP2HOST
[FAP0] ------------------<<<<
[FAP0] FAP4KE GSO LOOPBACK Init Done...
[FAP0] IC Timer started
[FAP0] FAP4KE WFD Init Done...
[FAP1] FAP BPM Initialized.
[FAP0] FAP BPM Initialized.
Broadcom Packet Flow Cache HW acceleration enabled.
fapDrv_construct: FAP0: pManagedMemory=b0820650. wastage 8 bytes
fapDrv_construct: FAP1: pManagedMemory=b0a20650. wastage 8 bytes
bcmPktDma_bind: FAP Driver binding successfull
[FAP1] FAP TM: ON
[FAP0] FAP TM: ON
bcmxtmcfg: bcmxtmcfg_init entry
adsl: adsl_init entry
Broadcom BCM63167D0 Ethernet Network Device v0.1 Oct 26 2018 12:24:03
Broadcom GMAC Char Driver v0.1 Oct 26 2018 12:24:10 Registered<249>
Broadcom GMAC Driver v0.1 Oct 26 2018 12:24:10 Initialized
fapDrv_psmAlloc: fapIdx=1, size: 4800, offset=b0a20650 bytes remaining 7000
ETH Init: Ch:0 - 200 tx BDs at 0xb0a20650
fapDrv_psmAlloc: fapIdx=0, size: 4800, offset=b0820650 bytes remaining 7000
ETH Init: Ch:1 - 200 tx BDs at 0xb0820650
fapDrv_psmAlloc: wastage 8 bytes
fapDrv_psmAlloc: fapIdx=0, size: 4808, offset=b0821910 bytes remaining 2184
ETH Init: Ch:0 - 600 rx BDs at 0xb0821910
[FAP0] enetRxChannel 0
fapDrv_psmAlloc: wastage 8 bytes
fapDrv_psmAlloc: fapIdx=1, size: 4808, offset=b0a21910 bytes remaining 2184
ETH Init: Ch:1 - 600 rx BDs at 0xb0a21910
[FAP1] enetRxChannel 1
dgasp: kerSysRegisterDyingGaspHandler: bcmsw registered
eth0: <Ext sw port: 0> <Logical : 08> PHY_ID <0x20180000 : 0x00> MAC : 00:00:00:00:00:01
eth1: <Ext sw port: 1> <Logical : 09> PHY_ID <0x20180001 : 0x01> MAC : 00:00:00:00:00:01
eth2: <Ext sw port: 2> <Logical : 10> PHY_ID <0x20180002 : 0x02> MAC : 00:00:00:00:00:01
eth3: <Ext sw port: 3> <Logical : 11> PHY_ID <0x20180003 : 0x03> MAC : 00:00:00:00:00:01
eth4: <Int sw port: 3> <Logical : 03> PHY_ID <0x00000004 : 0x04> MAC : 00:00:00:00:00:01
Ethernet Auto Power Down and Sleep: Enabled
All Port Bit Map: 0x0f08: eth4,eth0,eth1,eth2,eth3
Chip WAN Only Ports 0000, Defined WAN Only Ports 0000, WAN Only Port Result: 0x0000:
Chip WAN Preffered Ports 0000, Defined WAN Preffered Ports 0000, WAN Preffered Port Result: 0x0000:
Chip LAN Only Ports 0000, Defined LAN Only Ports 0000, LAN Only Port Result: 0x0000:
WAN/LAN Both Capable Ports 0x0f08:eth4,eth0,eth1,eth2,eth3
[NTC arl] arlEnable : Enabled ARL binding to FAP
Broadcom Address Resolution Logic Processor (ARL) Char Driver v0.1 Oct 26 2018 12:22:03 Registered <245>
Wifi Forwarding Driver is initialized!
DHD_FKB_POOL size is:1280 and entry size:2016
fkbpool address range: 8b800000 <-> 8ba76000
DHD_PKTTAG POOL size is:1280 and entry size:48
dhd_module_init in
dhd_queue_budget = 256
dhd_sta_threshold = 2048
dhd_if_threshold = 65536
no wifi platform data, skip
dhdpcie_chipmatch: Unsupported vendor 14e4 device 435f
dhdpcie_pci_probe: chipmatch failed!!
PCI_PROBE: bus 2, slot 0,vendor 14E4, device AA52(good PCI location)
dhdpcie_init: can't find adapter info for this chip
PCI: Enabling device 0000:02:00.0 (0000 -> 0002)
DHD: dongle ram size is set to 983040(orig 983040) at 0x180000
dhd:0: fw path:/etc/wlan/dhd nv path:(null)
dhd_attach: wl0: pre-allocated buffer mode is enabled (allocskbsz=2048)
dhd_attach(): thread:dhd_watchdog_thread:2ba started
dhd_attach(): thread:dhd0_dpc:2bb started
dhd_deferred_work_init: work queue initialized
wfd_bind: Dev wl%d wfd_idx 0 wl_radio_idx 0 Type fkb configured WFD thread wfd0-thrd minQId/maxQId (20/1073741844), status (0) qmask 0x3
Instantiating WFD 0 thread
dhd:0: fw path:/etc/wlan/dhd nv path:(null)
dhd_bus_download_firmware: firmware path=/etc/wlan/dhd, nvram path=
dhdpcie_ramsize_adj: Enter
dhdpcie_download_code_file: download firmware /etc/wlan/dhd/43602a1/rtecdc.bin
wl:srom/otp not programmed, using main memory mapped srom info(wombo board)
wl: ID=pci/2/0/
wl: ID=pci/2/0/
wl: loading /etc/wlan/bcm43602_map.bin
wl: updating srom from flash...
wl: reading /etc/wlan/bcmcmn_nvramvars.bin, file size=32
wl: reading /etc/wlan/bcm43602_nvramvars.bin, file size=32
Replace or append with internal Mac Address
dhdpcie_bus_write_vars: Download, Upload and compare of NVRAM succeeded.
PCIe shared addr (0x001eb0fc) read took 42023 usec before dongle is ready
DMA RX offset from shared Area 0
dhdpcie_readshared: Dongle advertizes 2 size indices
dhdpcie_readshared: Host support DMAing indices: H2D:1 - D2H:1. FW supports it
H2D DMA WR INDX : array size 268 = 2 * 134
D2H DMA RD INDX : array size 6 = 2 * 3
D2H DMA WR INDX : array size 6 = 2 * 3
H2D DMA RD INDX : array size 268 = 2 * 134
ring_info_raw: 56
fc a3 26 00 8c ac 26 00 98 ad 26 00 a4 ae 26 00
aa ae 26 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 86 00 00 00
dhdpcie_readshared: max H2D queues 134
dhd_bus_start: Initializing 134 h2drings
dhd_bus_cmn_writeshared:
0000: 00 f0 44 0c 00 00 00 00
dhd_bus_cmn_writeshared:
0000: 00 00 7f 0c 00 00 00 00
dhd_bus_cmn_writeshared:
0000: 00 a0 45 0c 00 00 00 00
dhd_bus_cmn_writeshared:
0000: 00 c0 7e 0c 00 00 00 00
dhd_bus_cmn_writeshared:
0000: 00 00 7d 0c 00 00 00 00
dhd_bus_cmn_writeshared:
0000: 00 00 e0 0b 00 00 00 00
dhd_bus_cmn_writeshared:
0000: 00 14 10 00
dhd_bus_cmn_writeshared:
0000: 00 53 36 0b 00 00 00 00
dhd_bus_cmn_writeshared:
0000: 00 34 c1 0b 00 00 00 00
dhd_bus_cmn_writeshared:
0000: 00 36 c1 0b 00 00 00 00
dhd_bus_cmn_writeshared:
0000: 80 52 36 0b 00 00 00 00
Attach flowrings pool for 132 rings
CUR_ETHERADDR : 6
00 00 00 00 00 01
dhd_sync_with_dongle: GET_REVINFO device 0xbc430000, vendor 0xe4140000, chipnum 0x52aa0000
Dongle Host Driver, version 7.14.164.15.cpe4.16L04.1-kdb
+++++ Added gso loopback support for dev=wl0 <8bc87000>
wfd_registerdevice Successfully registered dev wl0 ifidx 0 wfd_idx 0
Broadcom PCI Device 0x6326 has allocated with driver pcieport
dhd_module_init out
--SMP support
wl: dsl_tx_pkt_flush_len=338
wl: norm_wmark_tot=10043, pktc_wmark_tot=10043
wl: passivemode=1
wl: napimode=0
Neither SPROM nor OTP has valid image
wl:srom/otp not programmed, using main memory mapped srom info(wombo board)
wl: ID=sb/0/
wl: ID=sb/0/
wl: loading /etc/wlan/bcm6362_map.bin
srom rev:8
wl: reading /etc/wlan/bcmcmn_nvramvars.bin, file size=32
wl1: allocskbmode=1 currallocskbsz=2300
wfd_bind: Dev wl%d wfd_idx 1 wl_radio_idx 1 Type skb configured WFD thread wfd1-thrd minQId/maxQId (21/1073741845), status (0) qmask 0xc
Instantiating WFD 1 thread
+++++ Added gso loopback support for dev=wl1 <8bc86000>
wfd_registerdevice Successfully registered dev wl1 ifidx 0 wfd_idx 1
wl1: Broadcom BCM435f 802.11 Wireless Controller 7.14.164.15.cpe4.16L04.1-kdb
dgasp: kerSysRegisterDyingGaspHandler: wl1 registered
Bad rebount count =1
Check restore default by button
POLARITY = Low
BUT_STATE = 1
Check restore default by flags
find: /usr/share/gui-*/www/gui/version.txt: No such file or directory
Invalid RSA or empty external GUI image
'checkfirmware' unavailable, not checking image
Starting firewall-utils: OK
Run swmdk
Run hg6d
Energy Efficient Ethernet: Enabled
--OUTPUT_DROP--IN= OUT=bcmsw SRC=0000:0000:0000:0000:0000:0000:0000:0000 DST=ff02:0000:0000:0000:0000:0000:0000:0016 LEN=76 TC=0 HOPLIMIT=1 FLOWLBL=0 PROTO=ICMPv6 TYPE=143 CODE=0
bcmxtmcfg: DS xDSL G.inp Mode = DISABLED
bcmxtmcfg: xDSL G.Fast Mode = DISABLED
fapDrv_psmAlloc: fapIdx=1, size: 1600, offset=b0a22be0 bytes remaining 584
XTM Init: Ch:0 - 200 rx BDs at 0xb0a22be0
fapDrv_psmAlloc: fapIdx=1, size: 128, offset=b0a23220 bytes remaining 456
XTM Init: Ch:1 - 16 rx BDs at 0xb0a23220
bcmxtmrt: PTM/ATM Non-Bonding Mode configured in system
bcmxtmcfg: Out of sequence call to XTM_ASM_HANDLER::Uninitialize(). Recovering.
bcmxtmcfg: ATM Bonding configured in system. Fallback mode = Enabled
bcmxtmcfg: Bonding State is DATA_IDLE
bcmxtmcfg: SID MODE SET to 12 BIT MODE
bcmxtmcfg: ATM Bonding Mgmt Log Area = 8959ad14
*** dslThread dslPid=978
BcmAdsl_Initialize=0xC0687050, g_pFnNotifyCallback=0xC06C4400
lmemhdr[2]=0x100CE000, pAdslLMem[2]=0x100CE000
AdslCoreSetSdramImageAddr: lmem2(0xce000) vs ADSL_PHY_SDRAM_BIAS(0xce000); origAddr=0xAFECE000 newAddr=0xAFECE000
pSdramPHY=0xAFFFFFF8, 0x2C204440 0x48200801
*** XfaceOffset: 0x5FF90 => 0x5FF90 ***
*** PhySdramSize got adjusted: 0xF5C24 => 0x129BB0 ***
AdslCoreSharedMemInit: shareMemSize=33840(33840)
AdslCoreHwReset: pLocSbSta=86d08000 bkupThreshold=3072
AdslCoreHwReset: AdslOemDataAddr = 0xAFFB4648, time=17 ms
VersionInfo: A2pv6F039x6.d26r
***BcmDiagsMgrRegisterClient: 0 ***
dgasp: kerSysRegisterDyingGaspHandler: dsl0 registered
PCI: Enabling device 0000:00:0a.0 (0000 -> 0002)
ehci_hcd 0000:00:0a.0: Enabling legacy PCI PM
PCI: Enabling device 0000:00:09.0 (0000 -> 0002)
hub 1-0:1.0: over-current condition on port 2
oh and notice the multiple boot loaders etc... cant seem to interrupt the boot process so locked out from that perspective (unless anyone has something for me to try)
hi dear,can you help me to flash new firmware to 4353 modem?