Sitecom WLR-8200

Hi all,

I recently have started using OpenWRT and just love this great software that replaced some buggy old firmware and a user-unfriendly interface (in my case LinkSys Velop WHW01). So now I'm looking to see if I can revive an old router that was catching dust on a shelf. I was thinking to give it away/donate it or throw it away but I guess it will be better for the planet if I can reuse it myself. It's a Sitecom X8 AC1750 which is supported for the WLR-8100 version but unfortunately, this a appears to be a WLR-8200 model... I can't find much info on that one...

I managed to connect to the serial and are able to watch the boot output.
Unfortunately the keyboard input or mapping seems to be faulty (some keys give double output or different/strange characters) but I can start the board in TFTP server mode so I am able to upload any firmware image. Apparently, there's no image available for a WLR-8200 so I tried the various WLR-8100 that I could find; some official builds and from custom lede ones from some OpenWRT forums.

Apparently, all images are rejected due to some Signature ID check...
Would anyone know how I can set this and create a custom build that would work ?
I managed to setup an env and can build an OpenWRT image but I'm not an OpenWRT guru or developer and have no idea how to assemble a factory image that is accepted by the router...

Help/Tips/Info would be appreciated,
Thanks Bas
WebGUI:

Invalid file, please check your firmware and try again

TFTP image upload

signature='V StartAddr=0x64874c1e burnAddr=0x59e641ec                           
  nmodTag=CheckSum ok!                                                          
                                                                                
****************Signature ERR **************                                    
Can not identify signature ID 'Vd�LY�A�:                                        
Signature ID must be CSYS, ANFG or BOOT!Minicom2.9Minicom2.9
Model                : WLR-8200 v1001
Hardware Version     : Rev. A
Serial Number        : WLR820061300515
Boot Code Version    : 4.0.1.5
Runtime Code Version : 1.02

Full log

U-Boot 1.1.4 (Jun 29 2015 - 19:51:11)                                           
                                                                                
ap152 - Dragonfly 1.0DRAM:                                                      
sri                                                                             
ath_ddr_initial_config(283): (ddr2 init)                                        
ath_sys_frequency: cpu 775 ddr 650 ahb 258                                      
Tap values = (0xe, 0xe, 0xe, 0xe)                                               
128 MB                                                                          
Top of RAM usable for U-Boot at: 88000000                                       
Reserving 206k for U-Boot at: 87fcc000                                          
Reserving 192k for malloc() at: 87f9c000                                        
Reserving 44 Bytes for Board Info at: 87f9bfd4                                  
Reserving 36 Bytes for Global Data at: 87f9bfb0                                 
Reserving 128k for boot params() at: 87f7bfb0                                   
Stack Pointer at: 87f7bf98                                                      
Now running in RAM - U-Boot at: 87fcc000                                        
Flash Manuf Id 0xc2, DeviceId0 0x20, DeviceId1 0x18                             
flash size 16MB, sector count = 256                                             
Flash: 16 MB                                                                    
In:    serial                                                                   
Out:   serial                                                                   
Err:   serial                                                                   
Net:   ath_gmac_enet_initialize...                                              
No valid address in Flash. Using fixed address                                  
ath_gmac_enet_initialize: reset mask:c02200                                     
athr_mgmt_init ::done                                                           
Dragonfly  ----> S17 PHY *                                                      
athrs17_reg_init: complete                                                      
SGMII in forced mode                                                            
athr_gmac_sgmii_setup SGMII done                                                
: cfg1 0x80000000 cfg2 0x7114                                                   
eth0: 00:03:7f:09:0b:ad                                                         
eth0 up                                                                         
eth0                                                                            
Setting 0x181162c0 to 0x4c982100                                                
EDX wan_power_down!                                                             
Hit any key to stop autoboot:  0                                                
Trying eth0                                                                     
dup 1 speed 1000                                                                
SERVER IP address : 192.168.1.6 port:69                                         
Load address: 0x80060000                                                        
Loading: Peer IP:192.168.1.10                                                   
#################################################################               
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         #################################################################      
         ####                                                                   
done                                                                            
Bytes transferred = 4013483 (3d3dab hex)                                        
                                                                                
****************** Header Information *****************                         
signature='V StartAddr=0x64874c1e burnAddr=0x59e641ec                           
  nmodTag=CheckSum ok!                                                          
                                                                                
****************Signature ERR **************                                    
Can not identify signature ID 'Vd�LY�A�:                                        
Signature ID must be CSYS, ANFG or BOOT!Minicom2.9Minicom2.9

Please show OEM boot log. Can you get into OEM fw shell?

New to these forums as well, couldn't find a way to upload the file so copy/pasing it here...
This is the full boot log when the router starts up

U-Boot 1.1.4 (Jun 29 2015 - 19:51:11)

ap152 - Dragonfly 1.0DRAM:  
sri
ath_ddr_initial_config(283): (ddr2 init)
ath_sys_frequency: cpu 775 ddr 650 ahb 258
Tap values = (0xe, 0xe, 0xe, 0xe)
128 MB
Top of RAM usable for U-Boot at: 88000000
Reserving 206k for U-Boot at: 87fcc000
Reserving 192k for malloc() at: 87f9c000
Reserving 44 Bytes for Board Info at: 87f9bfd4
Reserving 36 Bytes for Global Data at: 87f9bfb0
Reserving 128k for boot params() at: 87f7bfb0
Stack Pointer at: 87f7bf98
Now running in RAM - U-Boot at: 87fcc000
Flash Manuf Id 0xc2, DeviceId0 0x20, DeviceId1 0x18
flash size 16MB, sector count = 256R | Minicom 2.9 | VT102 | Offline | ttyUSB0                      
Flash: 16 MB
In:    serial
Out:   serial
Err:   serial
Net:   ath_gmac_enet_initialize...
No valid address in Flash. Using fixed address
ath_gmac_enet_initialize: reset mask:c02200 
athr_mgmt_init ::done
Dragonfly  ----> S17 PHY *
athrs17_reg_init: complete
SGMII in forced mode
athr_gmac_sgmii_setup SGMII done
: cfg1 0x80000000 cfg2 0x7114
eth0: 00:03:7f:09:0b:ad
eth0 up
eth0
Setting 0x181162c0 to 0x4c982100
EDX wan_power_down!
Hit any key to stop autoboot:  0 
## Booting image at bf070000 ...
   Image Name:   Linux Kernel Image
   Created:      2016-03-16   1:29:19 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    7994396 Bytes =  7.6 MB
   Load Address: 80002000
   Entry Point:  803011d0
   Verifying Checksum at 0xbf070040 ...OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 803011d0) ...
## Giving linux memsize in bytes, 134217728

Starting kernel ...

Linux version 3.2.9 (root@jim-pc) (gcc version 4.3.6 (Buildroot 2013.05) ) #3 Wed Mar 16 09:29:12 CS6
bootconsole [early0] enabled
CPU revision is: 00019750 (MIPS 74Kc)
SoC: QCA956x
Clocks: CPU:775.000MHz, DDR:650.000MHz, AHB:258.333MHz, Ref:25.000MHz
Determined physical RAM map:
 memory: 08000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Zone PFN ranges:
  Normal   0x00000000 -> 0x00008000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00008000
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32512
Kernel command line:  console=ttyS0,115200 root=/dev/ram0 rootfstype=squashfs,jffs2
PID hash table entries: 512 (order: -1, 2048 bytes)
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
Writing ErrCtl register=00000000
Readback ErrCtl register=00000000
Memory: 118588k/131072k available (3109k kernel code, 12484k reserved, 737k data, 7356k init, 0k hig)
SLUB: Genslabs=9, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
NR_IRQS:51
Calibrating delay loop... 385.02 BogoMIPS (lpj=770048)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
NET: Registered protocol family 16
MIPS: machine is Qualcomm Atheros 956x board
registering PCI controller with io_map_base unset
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
pci 0000:00:00.0: BAR 0: assigned [mem 0x12000000-0x121fffff 64bit]
pci 0000:00:00.0: BAR 0: set to [mem 0x12000000-0x121fffff 64bit] (PCI address [0x12000000-0x121ffff)
pci 0000:00:00.0: BAR 6: assigned [mem 0x12200000-0x1220ffff pref]
pci 0000:00:00.0: using irq 40 for pin 1
Switching to clocksource MIPS
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
UDP hash table entries: 256 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
NET: Registered protocol family 1
squashfs: version 4.0 (2009/01/31) Phillip Lougher
JFFS2 version 2.2 (NAND) (SUMMARY) (ZLIB) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
fuse init (API version 7.17)
msgmni has been set to 231
io scheduler noop registered
io scheduler deadline registered
io scheduler cfq registered (default)
Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11) is a 16550A
console [ttyS0] enabled, bootconsole disabled
console [ttyS0] enabled, bootconsole disabled
loop: module loaded
Flash0 Manuf Id 0xc2, DeviceId0 0x20, DeviceId1 0x18
Flash0 MX25L12845E(c2 2018c200) (16384 Kbytes)
mtd .name = ath-nor0, .size = 0x01000000 (16M) .erasesize = 0x00010000 (64K) .numeraseregions = 0
Creating 10 MTD partitions on "ath-nor0":
0x000000000000-0x000001000000 : "ALL"
0x000000000000-0x000000040000 : "Bootloader"
0x000000040000-0x000000050000 : "Config"
0x000000050000-0x000000060000 : "ART"
0x000000060000-0x000000070000 : "ART2"
0x000000070000-0x000000e70000 : "Kernel"
0x000000070000-0x000000e70000 : "user"
0x000000e70000-0x000000f70000 : "manufacture"
0x000000f70000-0x000000f80000 : "backup"
0x000000f80000-0x000001000000 : "storage"
IMQ driver loaded successfully. (numdevs = 2, numqueues = 1)
        Hooking IMQ after NAT on PREROUTING.
        Hooking IMQ before NAT on POSTROUTING.
PPP generic driver version 2.4.2
PPP BSD Compression module registered
PPP Deflate Compression module registered
PPP MPPE Compression module registered
NET: Registered protocol family 24
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
Port Status 1c000004 
ath-ehci ath-ehci.0: ATH EHCI
ath-ehci ath-ehci.0: new USB bus registered, assigned bus number 1
ath-ehci ath-ehci.0: irq 48, io mem 0x1b000000
ath-ehci ath-ehci.0: USB 2.0 started, EHCI 1.00
usb usb1: New USB device found, idVendor=1d6b, idProduct=0002
usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
usb usb1: Product: ATH EHCI
usb usb1: Manufacturer: Linux 3.2.9 ehci_hcd
usb usb1: SerialNumber: platform
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
Port Status 1c000004 
ath-ehci1 ath-ehci1.1: ATH EHCI
ath-ehci1 ath-ehci1.1: new USB bus registered, assigned bus number 2
ath-ehci1 ath-ehci1.1: irq 49, io mem 0x1b400000
ath-ehci1 ath-ehci1.1: USB 2.0 started, EHCI 1.00
usb usb2: New USB device found, idVendor=1d6b, idProduct=0002
usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1
usb usb2: Product: ATH EHCI
usb usb2: Manufacturer: Linux 3.2.9 ehci_hcd
usb usb2: SerialNumber: platform
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
uhci_hcd: USB Universal Host Controller Interface driver
usbcore: registered new interface driver usblp
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
ath_usb_init: ID: 1150
Registered button device:wps, gpio:2,code:529,index:11
Registered button device:multi-fun-button, gpio:5,code:265,index:9
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (2500 buckets, 17500 max, 2500 max0, 20000 reserved)
xt_time: kernel timezone is -0000
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP westwood registered
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
L2TP core driver, V2.0
PPPoL2TP kernel driver, V2.0
8021q: 802.1Q VLAN Support v1.8
Freeing unused kernel memory: 7356k freed
System Init version: 1.1 date: 1
Setting up file systems ...
Setting up /mnt/tmpfs directory with tmpfs/16384KB
Setting up FLASH storage partition ...
JFFS2 notice: (366) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 u.
Setting up /apps directory ...apps is in RAM ...
Setting up loopback device ...
FINISHED
qca956x_GMAC: Length per segment 1536
956x_GMAC: qca956x_gmac_attach
956x_GMAC: qca956x_set_gmac_caps
Currently in polling mode unit0
qca956x_set_gmac_caps   CHECK DMA STATUS 
mac:0 Registering S17....
qca956x_GMAC: RX TASKLET - Pkts per Intr:160
qca956x_GMAC: Mac address for unit 0:bfff0000
qca956x_GMAC: 19:85:20:03:00:00 
qca956x_GMAC: Max segments per packet :   1
qca956x_GMAC: Max tx descriptor count :   128
qca956x_GMAC: Max rx descriptor count :   224
qca956x_GMAC: Mac capability flags    :   12002201
956x_GMAC: Serdes PLL is locked value 0x1b838116
cat: can't open '/sys/devices/platform/gpio-keys-polled/reset': No such file or directory
Start Normal Operation Mode ...
************************************************************************
*                                ---ELX---                             *
************************************************************************

KernelApp version: 1.2.0 build date: 2016/03/16 build time: 09:25:46
cmd> ln: /sbin/./start_all: File exists
Share memory created:  keyid 6888 shm_id 0 size 309(KB)
Warning: dbox_destroy_share_memory p_dbox_cfg is NULL!
CMD[mkdir -p /var/sd]
__create_share_mem keyid 6888 shm_id 0

System Monitoring
nat_session_manager: module license 'unspecified' taints kernel.
Disabling lock debugging due to kernel taint
Start nat_session_reservation_init_driver
__create_share_mem keyid 6888 shm_id 0
To set s17 LOOKUP_CTRL_REG registers, flag 0 
 Setting up [EDX]VLAN Configuration ..done 
athr_gmac_ring_alloc Allocated 2048 at 0x86eb4000
sram_desc_cnt 1536,mac Unit 0,Tx r->ring_desc 0xbd000000
athr_gmac_ring_alloc Allocated 3584 at 0x86e36000
sram_desc_cnt 4224,mac Unit 0,Rx r->ring_desc 0xbd000600
956x_GMAC: eth0 in SGMII MODE
Dragonfly  ----> S17 PHY *
athrs17_reg_init:done
955x_SGMII::athr_gmac_sgmii_setup  Done
Setting Drop CRC Errors, Pause Frames and Length Error frames 
Setting PHY...
Phy setup Complete
To set s17 LOOKUP_CTRL_REG registers, flag 1 
 Setting up [EDX]VLAN Configuration ..done 
ADDRCONF(NETDEV_UP): eth0: link is not ready
device eth0 entered promiscuous mode
ADDRCONF(NETDEV_UP): eth0.1: link is not ready
ADDRCONF(NETDEV_UP): eth0.2: link is not ready
sh: can't create /proc/ath_switch: nonexistent directory
sh: mii_mgr: not found
sh: can't create /proc/ath_switch: nonexistent directory
sh: can't create /proc/ath_switch: nonexistent directory
ADDRCONF(NETDEV_UP): br0: link is not ready
device eth0.1 entered promiscuous mode
ADDRCONF(NETDEV_UP): br0: link is not ready


********************
Initialize Radio_(24G) setting ... 
rd[0]==2
OK


Configuring QCA WiFi device[0] ...Wlan is in
 AP Mode
FCMD[insmod /lib/adf.ko]
FCMD[insmod /lib/asf.ko]
FCMD[insmod /lib/ath_hal.ko]
FCMD[insmod /lib/ath_rate_atheros.ko]
FCMD[insmod /lib/ath_dfs.ko]
FCMD[insmod /lib/ath_dev.ko]
FCMD[insmod /lib/umac.ko]
FCMD[insmod /lib/ath_pktlog.ko]
FCMD[ln -s /apps/sbin/hostapd /sbin/hostapd1]
FCMD[ln -s /apps/sbin/hostapd /sbin/hostapd2]
wifiname=wifi0 , macaddr=64:D1:A3:42:87:D2
FCMD[ifconfig wifi0 hw ether 64:D1:A3:42:87:D2]
FCMD[iwpriv wifi0 setCountryID 826]
FCMD[wlanconfig ath0 create wlandev wifi0 wlanmode ap ]
FCMD[iwpriv wifi0 rxchainmask 7]
FCMD[iwpriv wifi0 txchainmask 7]
QCA Radio[1],Wireless Mode:[11NGHT40MINUS]
FCMD[iwpriv ath0 mode 11NGHT40MINUS]
FCMD[iwpriv ath0 pureg 0]
FCMD[iwpriv ath0 puren 0]
FCMD[iwpriv ath0 disablecoext 0]
FCMD[iwconfig ath0 essid Sitecom4287D2]
FCMD[iwconfig ath0 channel 11]
FCMD[iwpriv ath0 maxsta 32]
FCMD[iwpriv ath0 bintval 100]
FCMD[iwpriv ath0 inact 60]
FCMD[iwpriv ath0 dtim_period 1]
FCMD[iwpriv ath0 shpreamble 1]
FCMD[iwconfig ath0 rts 2347]
FCMD[iwpriv ath0 protmode 2]
FCMD[iwpriv ath0 extprotmode 2]
FCMD[iwpriv ath0 countryie 1]
FCMD[iwpriv ath0 hide_ssid 0]
FCMD[iwpriv ath0 cwmenable 1]
FCMD[iwpriv ath0 mcastenhance 2]
FCMD[iwpriv wds8 mcastenhance 2]
FCMD[iwpriv ath0 shortgi 1]
FCMD[iwpriv wifi0 AMPDU 1]
FCMD[iwpriv wifi0 AMPDUFrames 32]
FCMD[iwpriv wifi0 AMPDULim 50000]
FCMD[iwpriv ath0 macradius 0]
FCMD[iwpriv wifi0 set_swapled 1]
FCMD[brctl addif br0 ath0]
FCMD[route add -net 239.0.0.0 netmask 255.0.0.0 br0]
Encryption using WPA2-PSK ...
Encryption using AES ...
FCMD[ln -s /sbin/hostapd /sbin/hostapd1]
Start Hostapd1
FCMD[/sbin/hostapd1 -P /var/hostapd.pid /etc/hostapd1.conf  -B]
OK
FCMD[iwpriv ath0 ap_bridge 1]
FCMD[ifconfig wifi0 txqueuelen 10000]
FCMD[ifconfig ath0 txqueuelen 10000]
FCMD[iwpriv wifi0 tpscale 0]
FCMD[sleep 1]
FCMD[iwpriv ath0 mcast_rate 54000]
FCMD[iwpriv wds8 mcast_rate 54000]
FCMD[iwpriv ath0 wmm 1]
FCMD[iwpriv ath0 uapsd 1]
FCMD[iwpriv ath0 aifs 0 0 3]
FCMD[iwpriv ath0 aifs 1 0 7]
FCMD[iwpriv ath0 aifs 2 0 1]
FCMD[iwpriv ath0 aifs 3 0 1]
FCMD[iwpriv ath0 cwmin 0 0 4]
FCMD[iwpriv ath0 cwmin 1 0 4]
FCMD[iwpriv ath0 cwmin 2 0 3]
FCMD[iwpriv ath0 cwmin 3 0 2]
FCMD[iwpriv ath0 cwmax 0 0 6]
FCMD[iwpriv ath0 cwmax 1 0 10]
FCMD[iwpriv ath0 cwmax 2 0 4]
FCMD[iwpriv ath0 cwmax 3 0 3]
FCMD[iwpriv ath0 txoplimit 0 0 0]
FCMD[iwpriv ath0 txoplimit 1 0 0]
FCMD[iwpriv ath0 txoplimit 2 0 3008]
FCMD[iwpriv ath0 txoplimit 3 0 1504]
FCMD[iwpriv ath0 noackpolicy 0 0 0]
FCMD[iwpriv ath0 noackpolicy 1 0 0]
FCMD[iwpriv ath0 noackpolicy 2 0 0]
FCMD[iwpriv ath0 noackpolicy 3 0 0]
FCMD[iwpriv ath0 aifs 0 1 3]
FCMD[iwpriv ath0 aifs 1 1 7]
FCMD[iwpriv ath0 aifs 2 1 2]
FCMD[iwpriv ath0 aifs 3 1 2]
FCMD[iwpriv ath0 cwmin 0 1 4]
FCMD[iwpriv ath0 cwmin 1 1 4]
FCMD[iwpriv ath0 cwmin 2 1 3]
FCMD[iwpriv ath0 cwmin 3 1 2]
FCMD[iwpriv ath0 cwmax 0 1 10]
FCMD[iwpriv ath0 cwmax 1 1 10]
FCMD[iwpriv ath0 cwmax 2 1 4]
FCMD[iwpriv ath0 cwmax 3 1 3]
FCMD[iwpriv ath0 txoplimit 0 1 0]
FCMD[iwpriv ath0 txoplimit 1 1 0]
FCMD[iwpriv ath0 txoplimit 2 1 3008]
FCMD[iwpriv ath0 txoplimit 3 1 1504]
FCMD[iwpriv ath0 acm 0 1 0]
FCMD[iwpriv ath0 acm 1 1 0]
FCMD[iwpriv ath0 acm 2 1 0]
FCMD[iwpriv ath0 acm 3 1 0]
CMD[sh /var/sd/qca_wlan0.sh]
****Address of trace_timer :80c5e614 
ath_hal: 0.9.17.1 (AR5416, AR9380, REGOPS_FUNC, WRITE_EEPROM, TX_DATA_SWAP, RX_DATA_SWAP, 11D)
ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved
ath_dfs: Version 2.0.0
Copyright (c) 2005-2006 Atheros Communications, Inc. All Rights Reserved
ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved
ath_ahb: 10.2.r2-00014-4 (Atheros/multi-bss)
__ath_attach: Set global_scn[0]
*** All the minfree values should be <= ATH_TXBUF-32, otherwise default value will be used instead **
ACBKMinfree = 48
ACBEMinfree = 32
ACVIMinfree = 16
ACVOMinfree = 0
CABMinfree = 48
UAPSDMinfree = 0
ATH_TXBUF=512
Enterprise mode: 0x03bda000
Restoring Cal data from Flash
Green-AP : Green-AP : Attached

ath_get_caps[6149] rx chainmask mismatch actual 7 sc_chainmak 0
ath_get_caps[6124] tx chainmask mismatch actual 7 sc_chainmak 0
ath_attach_dfs[12568] dfsdomain 1
ath_tx_paprd_init sc 80ec8000 PAPRD disabled in HAL
wifi0: Atheros 956X: mem=0xb8100000, irq=47
ath_pci: 10.2.r2-00014-4 (Atheros/multi-bss)
ath_pci_probe
PCI device id is 003c :003c
ath_pci 0000:00:00.0: BAR 0: assigned [mem 0x12000000-0x121fffff 64bit]
ath_pci 0000:00:00.0: BAR 0: set to [mem 0x12000000-0x121fffff 64bit] (PCI address [0x12000000-0x121)
PCI: Enabling device 0000:00:00.0 (0000 -> 0002)
ath_pci 0000:00:00.0: ath DEBUG: sc=0x80c7f600

 ol_ath_pci_configure : num_desired MSI set to 0

 Using PCI Legacy Interrupt

Enet:0 port4 up
ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
ADDRCONF(NETDEV_CHANGE): eth0.1: link becomes ready
br0: port 1(eth0.1) entering forwarding state
br0: port 1(eth0.1) entering forwarding state
ADDRCONF(NETDEV_CHANGE): eth0.2: link becomes ready
ADDRCONF(NETDEV_CHANGE): br0: link becomes ready
CE_per_engine_handler_adjust, base=80c7f600 offset=57400 
CE_per_engine_handler_adjust, base=80c7f600 offset=57800 
__ol_ath_attach: ath_attach TODO
__ol_ath_attach: dev name wifi1
ol_ath_set_default_tgt_config : AC Minfree buffer allocation through module param (umac.ko)
 OL_ACBKMinfree : 0
 OL_ACBEMinfree : 0
 OL_ACVIMinfree : 0
 OL_ACVOMinfree : 0
ol_ath_attach() BMI inited.
ol_ath_attach() BMI Get Target Info.
ol_ath_attach() TARGET TYPE: 7 Vers 0x4100016c
NUM_DEV=1 FWMODE=0x2 FWSUBMODE=0x0 FWBR_BUF 0
ol_ath_attach() configure Target .
qc98xx_verify_checksum: flash checksum passed: 0xde63
ol_transfer_bin_file 1915: Download Flash data len 2116
ol_transfer_bin_file 1856: Download Firmware data len 227772
ol_ath_attach() Download FW. 
ol_ath_attach() HT Create .
ol_ath_attach() HIF Claim.
ol_ath_attach() BMI Done. 
ol_ath_attach() WMI attached. wmi_handle 86bb0000 
+HWT
SOC_RESET_CONTROL_ADDRESS : 800
CPU_INTR_ADDRESS = [0]
SOC_GLOBAL_RESET_ADDRESS = [0]
Rx_Filter : [0]
CE_per_engine_handler_adjust, base=80c7f600 offset=57400 
CE_per_engine_handler_adjust, base=80c7f600 offset=57800 
CE_per_engine_handler_adjust, base=80c7f600 offset=57c00 
CE_per_engine_handler_adjust, base=80c7f600 offset=58000 
CE_per_engine_handler_adjust, base=80c7f600 offset=58400 
CE_per_engine_handler_adjust, base=80c7f600 offset=58800 
CE_recv_buf_enqueue 653 Populate last entry 512 for CE 5
CE_recv_buf_enqueue 662 CE 5 wi 511 dest_ptr 0x6587020 nbytes 0 recv_ctxt 0x8657e6c0
-HWT
HTC Service:0x0300 ep:1 TX flow control disabled
CE_pkt_dl_len_set CE 4 Pkt download length 64
ol_txrx_pdev_attach: 1424 tx desc's allocated ; range starts from 861d0000
HTC Service:0x0100 ep:2 TX flow control disabled
wmi_service_ready_event_rx:  WMI UNIFIED SERVICE READY event 
num_rf_chain : 00000003
ht_cap_info: : 0000085b
vht_cap_info : 338001b2
vht_supp_mcs : 0000ffea
LARGE_AP enabled. num_peers 144, num_vdevs 16, num_tids 256
idx 0 req 1  num_units 0 num_unit_info 2 unit size 444 actual units 145 
chunk 0 len 64380 requested ,ptr  0x61e0000 
FIRMWARE:P 145 V 16 T 443
 
FIRMWARE:_wlan_rtt_enable 
wmi_ready_event_rx:  WMI UNIFIED READY event 
ol_ath_connect_htc() WMI is ready
ol_ath_set_host_app_area TODO
target uses HTT version 2.1; host uses 2.1
ol_ath_attach() connect HTC. 
bypasswmi : 0
ol_regdmn_start: reg-domain param: regdmn=0, countryName=, wModeSelect=FFFFFFFF, netBand=FFFFFFFF, e.
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2) flags 0x2150
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4) flags 0xa0
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x8) flags 0xc0
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x20) flags 0xd0
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x40) flags 0x150
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x800) flags 0x10080
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2000) flags 0x20080
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4000) flags 0x40080
Add VHT80 channel: 5210
Add VHT80 channel: 5290
Add VHT80 channel: 5530
Add VHT80 channel: 5610
Add VHT80 channel: 5690
Add VHT80 channel: 5775
Skipping VHT80 channel 5825
ol_ath_phyerr_attach: called
OL Resmgr Init-ed
Green-AP : Green-AP : Attached

Green-AP : Attached
ol_if_dfs_setup: called 
ol_if_dfs_attach: called; ptr=861c9974, radar_info=80eefbe0
ol_ath_rtt_meas_report_attach: called
ol_ath_attach() UMAC attach . 
ol_if_dfs_configure: called
ol_if_dfs_configure: FCC domain
ol_if_dfs_disable: called
ol_ath_attach: Calling ol_if_dfs_configure
__ol_ath_attach: init tx/rx TODO
__ol_ath_attach: hard_header_len reservation 58
Initializing Pktlogs for 11ac
ath_attach_dfs[12568] dfsdomain 1
wlan_vap_create : enter. devhandle=0x80f80360, opmode=IEEE80211_M_HOSTAP, flags=0x1
wlan_vap_create : exit. devhandle=0x80f80360, opmode=IEEE80211_M_HOSTAP, flags=0x1.
VAP device ath0 created osifp: (86b73360) os_if: (86a00000)
 
 DES SSID SET=Sitecom4287D2 
Setting Max Stations:32
wds8      no private ioctls.

device ath0 entered promiscuous mode
ln: /sbin/hostapd1: File exists
 ieee80211_ioctl_siwmode: imr.ifm_active=131712, new mode=3, valid=1 
 DEVICE IS DOWN ifname=ath0
 DEVICE IS DOWN ifname=ath0
[wifi1] FWLOG: [26626] WAL_DBGID_TX_AC_BUFFER_SET ( 0x3, 0x1e, 0x460, 0x460, 0x0 )
[wifi1] FWLOG: [26626] WAL_DBGID_TX_AC_BUFFER_SET ( 0x12, 0x1e, 0x460, 0x460, 0x0 )
[wifi1] FWLOG: [26626] WAL_DBGID_TX_AC_BUFFER_SET ( 0x45, 0x1e, 0x460, 0x460, 0x0 )
[wifi1] FWLOG: [26626] WAL_DBGID_TX_AC_BUFFER_SET ( 0x67, 0x1e, 0x460, 0x460, 0x0 )
[wifi1] FWLOG: [26631] WHAL_ERROR_RECV_STOPPCU ( 0x110298a, 0x3 )
[wifi1] FWLOG: [26631] WHAL_ERROR_RESET_PM (  )
br0: port 2(ath0) entering forwarding state
br0: port 2(ath0) entering forwarding state
wds8      no private ioctls.

FIXME:osif_forward_mgmt_to_app: Event length more than expected..dropping
mlme_create_infra_bss : Overriding HT40 channel with HT20 channel
mlme_create_infra_bss : Overriding HT40 channel with HT20 channel
mlme_create_infra_bss : Overriding HT40 channel with HT20 channel
CMD[echo netdev > /sys/class/leds/2g_led/trigger]
CMD[echo ath0 > /sys/class/leds/2g_led/device_name]
CMD[echo link tx rx> /sys/class/leds/2g_led/mode]


********************
Initialize Radio_(5G) setting ... 
rd[1]==4
OK
Configuring 5G radio setting ... 


Configuring QCA WiFi device[1] ...Wlan is in
 AP Mode
wifiname=wifi1 , macaddr=64:D1:A3:42:87:D3
FCMD[ifconfig wifi1 hw ether 64:D1:A3:42:87:D3]
FCMD[iwpriv wifi1 setCountryID 4027]
FCMD[wlanconfig ath4 create wlandev wifi1 wlanmode ap ]
FCMD[iwpriv wifi1 rxchainmask 7]
FCMD[iwpriv wifi1 txchainmask 7]
QCA Radio[2],Wireless Mode:[11ACVHT80]
FCMD[iwpriv ath4 mode 11ACVHT80]
FCMD[iwpriv ath4 pureg 0]
FCMD[iwpriv ath4 puren 0]
FCMD[iwpriv ath4 disablecoext 0]
FCMD[iwpriv wifi1 enable_ol_stats 1]
FCMD[iwpriv ath4 dbgLVL 1073741824]
FCMD[iwconfig ath4 essid Sitecom4287D3]
FCMD[iwconfig ath4 channel 36]
FCMD[iwpriv ath4 maxsta 32]
FCMD[iwpriv ath4 bintval 100]
FCMD[iwpriv ath4 inact 60]
FCMD[iwpriv ath4 dtim_period 1]
FCMD[iwpriv ath4 shpreamble 1]
FCMD[iwconfig ath4 rts 2347]
FCMD[iwpriv ath4 extprotmode 2]
FCMD[iwpriv ath4 countryie 1]
FCMD[iwpriv ath4 hide_ssid 0]
FCMD[iwpriv ath4 mcastenhance 2]
FCMD[iwpriv wds12 mcastenhance 2]
FCMD[iwpriv ath4 shortgi 1]
FCMD[iwpriv wifi1 AMPDU 1]
FCMD[iwpriv wifi1 AMPDUFrames 32]
FCMD[iwpriv wifi1 AMPDULim 50000]
FCMD[iwpriv ath4 macradius 0]
FCMD[brctl addif br0 ath4]
FCMD[route add -net 239.0.0.0 netmask 255.0.0.0 br0]
Encryption using WPA2-PSK ...
Encryption using AES ...
Start Hostapd2
FCMD[/sbin/hostapd2 -P /var/hostapd2.pid /etc/hostapd21.conf  -B]
OK
FCMD[iwpriv ath4 ap_bridge 1]
FCMD[ifconfig wifi1 txqueuelen 10000]
FCMD[ifconfig ath4 txqueuelen 10000]
FCMD[iwpriv wifi1 tpscale 0]
FCMD[sleep 1]
FCMD[iwpriv ath4 mcast_rate 117000]
FCMD[iwpriv wds12 mcast_rate 117000]
FCMD[iwpriv ath4 wmm 1]
FCMD[iwpriv ath4 uapsd 1]
FCMD[iwpriv ath4 aifs 0 0 3]
FCMD[iwpriv ath4 aifs 1 0 7]
FCMD[iwpriv ath4 aifs 2 0 1]
FCMD[iwpriv ath4 aifs 3 0 1]
FCMD[iwpriv ath4 cwmin 0 0 4]
FCMD[iwpriv ath4 cwmin 1 0 4]
FCMD[iwpriv ath4 cwmin 2 0 3]
FCMD[iwpriv ath4 cwmin 3 0 2]
FCMD[iwpriv ath4 cwmax 0 0 6]
FCMD[iwpriv ath4 cwmax 1 0 10]
FCMD[iwpriv ath4 cwmax 2 0 4]
FCMD[iwpriv ath4 cwmax 3 0 3]
FCMD[iwpriv ath4 txoplimit 0 0 0]
FCMD[iwpriv ath4 txoplimit 1 0 0]
FCMD[iwpriv ath4 txoplimit 2 0 3008]
FCMD[iwpriv ath4 txoplimit 3 0 1504]
FCMD[iwpriv ath4 noackpolicy 0 0 0]
FCMD[iwpriv ath4 noackpolicy 1 0 0]
FCMD[iwpriv ath4 noackpolicy 2 0 0]
FCMD[iwpriv ath4 noackpolicy 3 0 0]
FCMD[iwpriv ath4 aifs 0 1 3]
FCMD[iwpriv ath4 aifs 1 1 7]
FCMD[iwpriv ath4 aifs 2 1 2]
FCMD[iwpriv ath4 aifs 3 1 2]
FCMD[iwpriv ath4 cwmin 0 1 4]
FCMD[iwpriv ath4 cwmin 1 1 4]
FCMD[iwpriv ath4 cwmin 2 1 3]
FCMD[iwpriv ath4 cwmin 3 1 2]
FCMD[iwpriv ath4 cwmax 0 1 10]
FCMD[iwpriv ath4 cwmax 1 1 10]
FCMD[iwpriv ath4 cwmax 2 1 4]
FCMD[iwpriv ath4 cwmax 3 1 3]
FCMD[iwpriv ath4 txoplimit 0 1 0]
FCMD[iwpriv ath4 txoplimit 1 1 0]
FCMD[iwpriv ath4 txoplimit 2 1 3008]
FCMD[iwpriv ath4 txoplimit 3 1 1504]
FCMD[iwpriv ath4 acm 0 1 0]
FCMD[iwpriv ath4 acm 1 1 0]
FCMD[iwpriv ath4 acm 2 1 0]
FCMD[iwpriv ath4 acm 3 1 0]
CMD[sh /var/sd/qca_wlan1.sh]
isCountryCodeValid: EEPROM regdomain 0x0
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2) flags 0x2150
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4) flags 0xa0
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x8) flags 0xc0
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x20) flags 0xd0
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x40) flags 0x150
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x800) flags 0x10080
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2000) flags 0x20080
ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4000) flags 0x40080
Add VHT80 channel: 5210
ath_ioctl: SIOC80211IFCREATE CALLED
wmi_unified_vdev_create_send: ID = 0 VAP Addr = 64:d1:a3:42:87:d3:
Setting dscp for vap id: 0
VAP device ath4 created osifp: (86a0db60) os_if: (862ac000)
vap-0(ath4):set SIOC80211NWID, 13 characters
 
 DES SSID SET=Sitecom4287D3 
DCS: ol_ath_disable_dcsim dcs state 0 
Setting Max Stations:32
ol_ath_desc_alloc_and_mark_for_mcast_clone: VAP Mcast to Unicast buffer allocated: 400
ol_ath_vap_set_param: VAP param is now supported param:66 value:2
wds12     no private ioctls.

Interface doesn't accept private ioctl...
AMPDU (8BE0): Operation not permitted
Interface doesn't accept private ioctl...
AMPDUFrames (8BE0):device ath4 entered promiscuous mode
 Operation not permitted
Interface doesn't accept private ioctl...
AMPDULim (8 ieee80211_ioctl_siwmode: imr.ifm_active=66176, new mode=3, valid=1 
BE0): Operation  DEVICE IS DOWN ifname=ath4
not permitted
r DEVICE IS DOWN ifname=ath4
oute: SIOCADDRT:vap-0(ath4):DELETE CRYPTO KEY index 0, addr 00:00:00:00:00:00
 File exists
vap-0(ath4):DELETE CRYPTO KEY index 1, addr 00:00:00:00:00:00
vap-0(ath4):DELETE CRYPTO KEY index 2, addr 00:00:00:00:00:00
vap-0(ath4):DELETE CRYPTO KEY index 3, addr 00:00:00:00:00:00
vap-0(ath4):set IEEE80211_IOC_AUTHMODE to open
vap-0(ath4):set IEEE80211_IOC_MCASTCIPHER to AES CCM
vap-0(ath4):Warning: wlan_set_mcast_cipher failed. cache the mcast cipher  
vap-0(ath4):set IEEE80211_IOC_UCASTCIPHERS (0x8)    AES-CCMP  
vap-0(ath4):ieee80211_ioctl_setparam Warning: wlan_set_ucast_cipher failed. cache the ucast cipher
vap-0(ath4):set IEEE80211_IOC_KEYMGTALGS (0x2)  802.1x PSK
vap-0(ath4):set IEEE80211_IOC_RSNCAPS to 0x0
vap-0(ath4):set IEEE80211_IOC_WPA to RSN
vap-0(ath4):set IEEE80211_IOC_AUTHMODE to WPA
vap-0(ath4):

ieee80211_ioctl_setkey: ******** SETKEY : error: 0 , key_type=3, macaddr=ff:ff:ff:ff:ff:ff, key_len=6

vap-0(ath4):start running, ifname=ath4, opmode=6
wmi_unified_vdev_stop_send for vap 0 (86bb0000)
STOPPED EVENT for vap 0 (86bb0000)
FIXME:osif_forward_mgmt_to_app: Event length more than expected..dropping
wmi_unified_vdev_start_send for vap 0 (86bb0000)
vap-0(ath4):osif_vap_init :mlme returned error 16 
ol_vdev_start_resp_ev for vap 0 (86bb0000)
ol_ath_vap_join: join operation is only for STA/IBSS mode
wmi_unified_vdev_up_send for vap 0 (86bb0000)
vap-0(ath4):osif_create_infra_complete :vap up 
Notification to UMAC VAP layer
[wifi1] FWLOG: [32226] WAL_DBGID_SECURITY_ENCR_EN (  )
[wifi1] FWLOG: [32226] WAL_DBGID_SECURITY_MCAST_KEY_SET ( 0x1 )
br0: port 3(ath4) entering forwarding state
br0: port 3(ath4) entering forwarding state
ol_ath_vap_set_param: VAP param is now supported param:11 value:214
wds12     no private ioctls.

vap-0(ath4):start running, ifname=ath4, opmode=6
wmi_unified_vdev_stop_send for vap 0 (86bb0000)
STOPPED EVENT for vap 0 (86bb0000)
wmi_unified_vdev_start_send for vap 0 (86bb0000)
vap-0(ath4):osif_vap_init :mlme returned error 16 
ol_vdev_start_resp_ev for vap 0 (86bb0000)
ol_ath_vap_join: join operation is only for STA/IBSS mode
wmi_unified_vdev_up_send for vap 0 (86bb0000)
vap-0(ath4):osif_create_infra_complete :vap up 
Notification to UMAC VAP layer
vap-0(ath4):start running, ifname=ath4, opmode=6
wmi_unified_vdev_stop_send for vap 0 (86bb0000)
STOPPED EVENT for vap 0 (86bb0000)
wmi_unified_vdev_start_send for vap 0 (86bb0000)
vap-0(ath4):osif_vap_init :mlme returned error 16 
ol_vdev_start_resp_ev for vap 0 (86bb0000)
ol_ath_vap_join: join operation is only for STA/IBSS mode
wmi_unified_vdev_up_send for vap 0 (86bb0000)
vap-0(ath4):osif_create_infra_complete :vap up 
Notification to UMAC VAP layer
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 3 ac 0 bss 0 val 3
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 3 ac 1 bss 0 val 7
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 3 ac 2 bss 0 val 1
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 3 ac 3 bss 0 val 1
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 1 ac 0 bss 0 val 4
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 1 ac 1 bss 0 val 4
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 1 ac 2 bss 0 val 3
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 1 ac 3 bss 0 val 2
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 2 ac 0 bss 0 val 6
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 2 ac 1 bss 0 val 10
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 2 ac 2 bss 0 val 4
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 2 ac 3 bss 0 val 3
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 4 ac 0 bss 0 val 0
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 4 ac 1 bss 0 val 0
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 4 ac 2 bss 0 val 3008
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 4 ac 3 bss 0 val 1504
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 6 ac 0 bss 0 val 0
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 6 ac 1 bss 0 val 0
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 6 ac 2 bss 0 val 0
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 6 ac 3 bss 0 val 0
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 3 ac 0 bss 1 val 3
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 3 ac 1 bss 1 val 7
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 3 ac 2 bss 1 val 2
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 3 ac 3 bss 1 val 2
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 1 ac 0 bss 1 val 4
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 1 ac 1 bss 1 val 4
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 1 ac 2 bss 1 val 3
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 1 ac 3 bss 1 val 2
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 2 ac 0 bss 1 val 10
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 2 ac 1 bss 1 val 10
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 2 ac 2 bss 1 val 4
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 2 ac 3 bss 1 val 3
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 4 ac 0 bss 1 val 0
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 4 ac 1 bss 1 val 0
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 4 ac 2 bss 1 val 3008
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 4 ac 3 bss 1 val 1504
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 5 ac 0 bss 1 val 0
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 5 ac 1 bss 1 val 0
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 5 ac 2 bss 1 val 0
vap-0(ath4):ieee80211_ioctl_setwmmparams: param 5 ac 3 bss 1 val 0
CMD[echo netdev > /sys/class/leds/5g_led/trigger]
CMD[echo ath4 > /sys/class/leds/5g_led/device_name]
CMD[echo link tx rx> /sys/class/leds/5g_led/mode]

sh: can't create /proc/rtk_switch: nonexistent directory
cp: can't stat '/etc/resolv.conf': No such file or directory
cat: can't open '/tmp/resolv.conf': No such file or directory
Start wps_led driver
Ebtables v2.0 registered
FIXME:osif_forward_mgmt_to_app: Event length more than expected..dropping
FIXME:osif_forward_mgmt_to_app: Event length more than expected..dropping
__create_share_mem keyid 6888 shm_id 0
__create_share_mem keyid 6888 shm_id 0


Err: read_to_buf failed to open file /proc/502/status!
Err: read_to_buf failed to open file /proc/503/status!
Err: read_to_buf failed to open file /proc/1756/status!
Err: read_to_buf failed to open file /proc/1757/status!
FIXME:osif_forward_mgmt_to_app: Event length more than expected..dropping
FIXME:osif_forward_mgmt_to_app: Event length more than expected..dropping
br0: port 1(eth0.1) entering forwarding state
FIXME:osif_forward_mgmt_to_app: Event length more than expected..dropping
Hit any key to stop autoboot:  0 

NB. I can hit a key and stop the boot but next I somehow can't enter any commands due to some keyboard mismatch or issue with the trx of the keys..

Tried 'help'

Press any key to stop autoboot:  2 
yh       eMlp

I'd suggest trying things around QCA956x and ap152 reference board.
There's some options in current OpenWRT.
It might even get you far enough to a working terminal if you can work out how to get the initramfs loaded with tftpboot or similar.

You probably want to see if any have matching partitions, and NOR flash.
Ideally you want to get root login to inspect the PCI ranges, and any other buses that might be exposed. It would also potentially let you see what GPIO are configured.

Are you using the ESCape key when it's asking for 'any key'? It's a pretty common key to abort the normal boot sequence.

Thanks,
As said, I'm not a developer (anymore :slight_smile: ) and for sure not one that understands the bootup parts of routers.. Are you saying I can try the initfsram and/or firmware of ' TP-Link Archer C6 v2' ?

The boot is responding to any serial key to stop the autoboot and comes back with a prompt.

Hit any key to stop autoboot: 0  
ath> 

..Next however, I can't enter any proper command..
Some keys map correct, some keys give double output ..
e.g.
'h' becomes 'h + '
'p' becomes '�p'

Are 3 wires connected correctly ie gnd tx rx, never vcc.

Yeah it must have something to do with the GND...
I see I was accidentally using CTS jumper on the FTDI usb adapter but using GND on pin2 or pin3 instead gives me no keyboard interaction at all..

Apparently the serial port is on the J5 connector; connecting TX and RX gives me at least readable output (as shared) on the the minicom terminal when powering up the router.

   [pin1] [pin2] [pin3] [pin4]
J5 [ TX ] [  ? ] [  ? ] [ RX ]

..Will have to try to find this GND now...

It's almost certainly on the pin header.
Normally it's easy to find, with power turned off, put multimeter probe on "continuity test" (normally a buzzer when the probes are at low resistance/touched together). Find a big expanse of copper on the board, potentially connected to screws / fasteners (or the earth lug).. then just hold a lead on that, and hold the other lead on each of the pins on the header. If it sounds a continuous noise, then you've found the ground, if the noise goes away after a second or so, then you've found another power rail (with lots of capacitance).

Thanks bevanweiss,
I followed your instructions and find that [pin2] must the GND.
I already tried to connect the GND to this pin so unfortunately, the outcome is the still same:
no response or stop on the autoboot when hitting any key... I may need to assume the port is just malfunctioning...

Unidirectional....

Interestingly, I accidently started with connecting the CTS port to [pin3].
With this, I can stop the autoboot by hitting a key so some bytes must be received this way... Next, the keyboard is nevertheless useless this way...

Wrong speed?

Tried them all..

If there's meaningful text coming from RX, then the rate is likely correct.

@baszie what serial terminal client are you using? It's not doing anything stupid like trying to add in colour/style formatting controls?

You said that you could stop the autoboot, just that the text you then entered was wrong, the characters 'h' 'e' 'l' 'p' do appear there, but not quite right.

You've mentioned CTS several times. What kind of TTL adapter are you using?
Normally they ONLY have GND, VCC, TX and RX. We definitely don't want things like CTS/RTC/DTS/DTR getting involved. Perhaps get yourself a different (more basic) USB-TTL adapter. Then you just hook up GND, RX and TX (never VCC).

Hi,

I've tried both with putty on Windows and also minicom running on an ubuntu live setup... results are same so I don't expect any funny interference by the terminal program...

With CTS connected to [pin3] port, I can stop the autoboot when pressing a key but indeed not possible to properly pass commands. This does not happen when the GND is on [pin2]...

I'm using a simple AliExpress FT232RL USB to TTL adapter that I used many time to flash some ESP devices (Tasmota). TX/RX/GND should be fine... I should perhaps just order a new one just to be sure that the adapter hasn't got faulty somehow and is simply the problem here...

1 Like

The adapter is not defective if it shows normal characters.