Hi!
I have a spare unit of TP-Link TD-W9970 v2 and I've not found much information about OpenWrt possible support.
I know that having a Broadcom chipset ADSL part is not usable with OpenWrt but It could be used as wifi router.
I will post the information I was able to gather via serial console access.
(J7 is the unpopulated serial port on the board and '1234' is the password for user 'admin' to access the console)
HELO
CPUI
L1CI
HELO
CPUI
L1CI
4.1603-1.0.38-116.174
PMCI
PMCM
DRAM
----
PHYS
PHYE
DDR1
300H
SIZ4
SIZ3
LMBE
RACE
PASS
----
ZBSS
CODE
DATA
L12F
MAIN
Base: 4.16_03
CFE version 1.0.38-116.174 for BCM963381 (32bit,SP,BE)
Build Date: Thu Aug 18 08:52:29 CST 2016 (swd@localhost.localdomain)
Copyright (C) 2000-2013 Broadcom Corporation.
Boot Strap Register: 0x1ffff7f
Chip ID: BCM63381B0, MIPS: 600MHz, DDR: 300MHz, Bus: 300MHz
Main Thread: TP0
Total Memory: 67108864 bytes (64MB)
Boot Address: 0xb8000000
HS Serial flash device: GD25Q64, id 0xc817 sector 64KB size 8192KB
Flash not used for Auxillary File System
pmc_init:PMC using DQM mode
Board IP address : 192.168.1.1:ffffff00
Host IP address : 192.168.1.100
Gateway IP address :
Run from flash/host/tftp (f/h/c) : f
Default host run file name : vmlinux
Default host flash file name : bcm963xx_fs_kernel
Boot delay (0-9 seconds) : 1
Default host ramdisk file name :
Default ramdisk store address :
Board Id (0-8) : 963381SV
Number of MAC Addresses (1-32) : 10
Base MAC Address : e0:05:c5:XX:XX:XX
PSI Size (1-64) KBytes : 64
Enable Backup PSI [0|1] : 0
System Log Size (0-256) KBytes : 0
Auxillary File System Size Percent: 0
Main Thread Number [0|1] : 0
WLan Feature : 0x00
*** Press 't' to stop auto run (0.1 seconds) ***
Code Address: 0x80010000, Entry Address: 0x803277f0
Decompression OK!
Entry at 0x803277f0
Starting program at 0x803277f0
Linux version 3.4.11-rt19 (swd@localhost.localdomain) (gcc version 4.6.2 (Buildroot 2011.11) ) #59 SMP PREEMPT Thu Aug 18 09:03:14 CST 2016
HS Serial flash device: GD25Q64, id 0xc817 sector 64KB size 8192KB
963381SV prom init
CPU revision is: 0002a081 (Broadcom BMIPS4350)
DSL SDRAM reserved: 0x132000
Determined physical RAM map:
memory: 03ece000 @ 00000000 (usable)
Zone PFN ranges:
DMA 0x00000000 -> 0x00001000
Normal 0x00001000 -> 0x00003ece
Movable zone start PFN for each node
Early memory PFN ranges
0: 0x00000000 -> 0x00003ece
On node 0 totalpages: 16078
free_area_init_node: node 0, pgdat 80408e30, node_mem_map 81000000
DMA zone: 32 pages used for memmap
DMA zone: 0 pages reserved
DMA zone: 4064 pages, LIFO batch:0
Normal zone: 94 pages used for memmap
Normal zone: 11888 pages, LIFO batch:1
PERCPU: Embedded 7 pages/cpu @81083000 s5200 r8192 d15280 u32768
pcpu-alloc: s5200 r8192 d15280 u32768 alloc=8*4096
pcpu-alloc: [0] 0 [0] 1
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 15952
Kernel command line: ro noinitrd irqaffinity=0
PID hash table entries: 256 (order: -2, 1024 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes.
Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes
Memory: 58640k/64312k available (3215k kernel code, 5672k reserved, 854k data, 208k init, 0k highmem)
Preemptible hierarchical RCU implementation.
NR_IRQS:128
console [ttyS0] enabled
Calibrating delay loop... 598.01 BogoMIPS (lpj=299008)
pid_max: default: 4096 minimum: 301
Mount-cache hash table entries: 512
--Kernel Config--
SMP=1
PREEMPT=1
DEBUG_SPINLOCK=0
DEBUG_MUTEXES=0
CPU revision is: 0002a081 (Broadcom BMIPS4350)
Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes.
Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes
Brought up 2 CPUs
NET: Registered protocol family 16
pmc_init:PMC using DQM mode
Flash not used for Auxillary File System
registering PCI controller with io_map_base unset
bcm63xx_pcie: setting resistor calibration value to 0x0
bcm63xx_pcie: applying serdes parameters
registering PCI controller with io_map_base unset
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
PCI host bridge to bus 0000:00
pci_bus 0000:00: root bus resource [mem 0x10600000-0x106fffff]
pci_bus 0000:00: root bus resource [io 0x11700000-0x1170ffff]
pci 0000:00:09.0: [14e4:6300] type 00 class 0x0c0310
pci 0000:00:09.0: reg 10: [mem 0x1000c400-0x1000c4ff]
pci 0000:00:0a.0: [14e4:6300] type 00 class 0x0c0320
pci 0000:00:0a.0: reg 10: [mem 0x1000c300-0x1000c3ff]
PCI host bridge to bus 0000:01
pci_bus 0000:01: root bus resource [mem 0xa0000000-0xbfffffff]
pci_bus 0000:01: root bus resource [??? 0x00000000 flags 0x0]
pci 0000:01:00.0: [14e4:6338] type 01 class 0x060400
pci 0000:01:00.0: PME# supported from D0 D3hot
pci 0000:02:00.0: [14e4:a8db] type 00 class 0x028000
pci 0000:02:00.0: reg 10: [mem 0x00000000-0x00007fff 64bit]
pci 0000:02:00.0: supports D1 D2
pci 0000:01:00.0: BAR 8: assigned [mem 0xa0000000-0xa00fffff]
pci 0000:02:00.0: BAR 0: assigned [mem 0xa0000000-0xa0007fff 64bit]
pci 0000:01:00.0: PCI bridge to [bus 02-02]
pci 0000:01:00.0: bridge window [mem 0xa0000000-0xa00fffff]
PCI: Enabling device 0000:01:00.0 (0000 -> 0002)
bcmhs_spi bcmhs_spi.1: master is unqueued, this is deprecated
skbFreeTask created successfully
BLOG v3.0 Initialized
BLOG Rule v1.0 Initialized
Broadcom IQoS v0.1 Aug 18 2016 08:59:57 initialized
Broadcom GBPM v0.1 Aug 18 2016 08:59:57 initialized
NET: Registered protocol family 8
NET: Registered protocol family 20
Switching to clocksource MIPS
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP: reno registered
NET: Registered protocol family 1
PCI: CLS 16 bytes, default 16
init_bcm_tstamp: unhandled mips_hpt_freq=300000000, adjust constants in bcm_tstamp.c
bcm_tstamp initialized, (hpt_freq=300000000 2us_div=300 2ns_mult=0 2ns_shift=0)
squashfs: version 4.0 (2009/01/31) Phillip Lougher
fuse init (API version 7.18)
msgmni has been set to 114
io scheduler noop registered (default)
bcm963xx_mtd driver
Registered device mtd:rootfs dev0 Address=0xb817c6c0 Size=6553600
PPP generic driver version 2.4.2
NET: Registered protocol family 24
brcmboard: brcm_board_init entry
WIFI: Button Interrupt 0x1 is enabled
RESET: Button Interrupt 0x0 is enabled
SES: Button Interrupt 0x0 is enabled
SES: LED GPIO 0x8017 is enabled
Register flash device: flash0
Serial: BCM63XX driver $Revision: 3.00 $
Magic SysRq with Auxilliary trigger char enabled (type ^ h for list of supported commands)
ttyS0 at MMIO 0xb0000280 (irq = 8) is a BCM63XX
ttyS1 at MMIO 0xb00002a0 (irq = 9) is a BCM63XX
Total # RxBds=1979
bcmPktDmaBds_init: Broadcom Packet DMA BDs initialized
pppox_fastpath_init!
Mirror/redirect action on
u32 classifier
Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (916 buckets, 5120 max)
gre: GRE over IPv4 demultiplexor driver
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP: cubic registered
Initializing XFRM netlink socket
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
NET: Registered protocol family 15
Ebtables v2.0 registered
ebt_ftos registered
ebt_wmm_mark registered
8021q: 802.1Q VLAN Support v1.8
SQUASHFS error: Xattrs in filesystem, these will be ignored
SQUASHFS error: unable to read xattr id index table
VFS: Mounted root (squashfs filesystem) readonly on device 31:0.
Freeing unused kernel memory: 208k freed
starting pid 203, tty '': '/etc/init.d/rcS'
L2TP core: blog_l2tp_rcv_check
L2TP core driver, V2.0
PPPoL2TP kernel driver, V2.0
pppol2tp_fastpath_init!
bcmxtmrtdrv: module license 'Proprietary' taints kernel.
Disabling lock debugging due to kernel taint
bcmxtmrt: Broadcom BCM3381B0 ATM/PTM Network Device v0.6 Aug 18 2016 09:08:30
Broadcom Ingress QoS Module Char Driver v0.1 Aug 18 2016 09:05:10 Registered<243>
Broadcom Ingress QoS ver 0.1 initialized
BPM: tot_mem_size=67108864B (64MB), buf_mem_size <10%> =6710880B (6MB), num of buffers=3328, buf size=2016
Broadcom BPM Module Char Driver v0.1 Aug 18 2016 09:05:09 Registered<244>
NBUFF v1.0 Initialized
Initialized fcache state
Broadcom Packet Flow Cache Char Driver v2.2 Aug 18 2016 09:05:11 Registered<242>
Created Proc FS /procfs/fcache
Broadcom Packet Flow Cache registered with netdev chain
Broadcom Packet Flow Cache learning via BLOG enabled.
flwStatsThread created
Constructed Broadcom Packet Flow Cache v2.2 Aug 18 2016 09:05:11
bcmxtmcfg: bcmxtmcfg_init entry
adsl: adsl_init entry
Broadcom BCM63381B0 Ethernet Network Device v0.1 Aug 18 2016 09:08:17
ETH Init: Ch:0 - 200 tx BDs at 0xa3add000
ETH Init: Ch:0 - 1331 rx BDs at 0xa2eb4000
eth0.2: <Int sw port: 0> <Logical : 00> PHY_ID <0x00000001 : 0x01> MAC : AC:84:C6:EE:EE:36
eth0.3: <Int sw port: 1> <Logical : 01> PHY_ID <0x00000002 : 0x02> MAC : AC:84:C6:EE:EE:36
eth0.4: <Int sw port: 2> <Logical : 02> PHY_ID <0x00000003 : 0x03> MAC : AC:84:C6:EE:EE:36
eth0.5: <Int sw port: 3> <Logical : 03> PHY_ID <0x00000004 : 0x04> MAC : AC:84:C6:EE:EE:36
Chip WAN Only Port 00000000, Defined WAN Only Port 00000000, WAN Only Port Result: 0x00000000
<4> Chip WAN Preffered Port 00000000, Defined WAN Preffered Port 00000000, WAN Preffered Port Result: 0x00000000
Chip LAN Only Port 00000000, Defined LAN Only Port 00000000, LAN Only Port Result: 0x00000000
Energy Efficient Ethernet: Disabled
insmod: can't insert '/lib/modules/kmdir/extra/nciTMSkmod.ko': No such file or directory
Broadcom Address Resolution Logic Processor (ARL) Char Driver v0.1 Aug 18 2016 09:05:09 Registered <245>
Broadcom 802.1Q VLAN Interface, v0.1
Initializing WLCSM Module
WLCSM Module loaded successfully
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
PCI: Enabling device 0000:00:0a.0 (0000 -> 0002)
ehci_hcd 0000:00:0a.0: setting latency timer to 64
ehci_hcd 0000:00:0a.0: EHCI Host Controller
ehci_hcd 0000:00:0a.0: new USB bus registered, assigned bus number 1
ehci_hcd 0000:00:0a.0: Enabling legacy PCI PM
ehci_hcd 0000:00:0a.0: irq 113, io mem 0x1000c300
ehci_hcd 0000:00:0a.0: USB f.f started, EHCI 1.00
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
PCI: Enabling device 0000:00:09.0 (0000 -> 0002)
ohci_hcd 0000:00:09.0: setting latency timer to 64
ohci_hcd 0000:00:09.0: OHCI Host Controller
ohci_hcd 0000:00:09.0: new USB bus registered, assigned bus number 2
ohci_hcd 0000:00:09.0: irq 112, io mem 0x1000c400
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
dns_init
PPP MPPE Compression module registered
PPTP driver version 0.8.5
pptp fastpath module init ...
Please press Enter to activate this console. eth0.5 Link UP 100 mbps full duplex
message received before monitor task is initialized kerSysSendtoMonitorTask
[ dm_readFile ] 2061: can not open xml file /var/tmp/pc/reduced_data_model.xml!, about to open file /etc/reduced_data_model.xml
[ oal_sys_readCfgFlash ] 913: User config length is too long - ffffffff
[ dm_loadCfg ] 2302: Read config from flash failed. ret = 1
[ dm_readFile ] 2061: can not open xml file /var/tmp/pc/default_config.xml!, about to open file /etc/default_config.xml
[ parseConfigNode ] 525: Meet unrecognized object node "PhDDNSCfg", skip the node
[ parseConfigNode ] 530: Meet unrecognized parameter node "PhDDNSCfg", skip the node
[ parseConfigNode ] 525: Meet unrecognized object node "QueueManagement", skip the node
[ parseConfigNode ] 525: Meet unrecognized object node "monitor task is initialized pid= 416
VoiceService", skip the node
[ parseConfigNode ] 530: Meet unrecognized parameter node "VoiceService", skip the node
[ parseConfigNode ] 525: Meet unrecognized object node "X_TP_SpeedDialCfg", skip the node
[ parseConfigNode ] 525: Meet unrecognized object node "X_TP_MultiIspDialPlan", skip the node
[ parseConfigNode ] 525: Meet unrecognized object node "X_TP_CallLogCfg", skip the node
[ initKernelMonitorFd ] 428: kernelMonitorFd=7
[ initKernelMonitorFd ] 446: registered fd 7 with kernel monitor
sh: pwrctl: not found
ioctl: No such device
ADDRCONF(NETDEV_UP): eth0.2: link is not ready
device eth0.2 entered promiscuous mode
Success
ADDRCONF(NETDEV_UP): eth0.3: link is not ready
device eth0.3 entered promiscuous mode
Success
ADDRCONF(NETDEV_UP): eth0.4: link is not ready
device eth0.4 entered promiscuous mode
Success
device eth0.5 entered promiscuous mode
br0: port 4(eth0.5) entered forwarding state
br0: port 4(eth0.5) entered forwarding state
Success
[DBG:700] ADSL dr*** dslThread dslPid=470
BcmAdsl_Initialize=0xC013A090, g_pFnNotifyCallback=0xC01743E0
iver returns error
[ oal_dsl_isAtmConnection ] 3940: Failed to freshAdslMibInfo
pSdramPHY=0xA3FFFFF8, 0x13BFDDBF 0xDEAFBEFF
*** XfaceOffset: 0x4FF90 => 0x4FF90 ***
*** PhySdramSize got adjusted: 0xF5FB4 => 0x129AB8 ***
AdslCoreSharedMemInit: shareMemSize=34080(34080)
AdslCoreHwReset: pLocSbSta=82a48000 bkupThreshold=3072
AdslCoreHwReset: AdslOemDataAddr = 0xA3FB59A4
VersionInfo: A2pvI042j1.d26h
***BcmDiagsMgrRegisterClient: 0 ***
bcmxtmcfg: DS xDSL G.inp Mode = DISABLED
bcmxtmcfg: xDSL G.Fast Mode = DISABLED
XTM Init: Ch:0 - 332 rx BDs at 0xa2f93000
XTM Init: Ch:1 - 16 rx BDs at 0xa382c180
bcmxtmrt: PTM/ATM Non-Bonding Mode configured in system
bcmxtmcfg: Out of sequence call to XTM_ASM_HANDLER::Uninitialize(). Recovering.
bcmxtmcfg: ATM Bonding configured in system. Fallback mode = Enabled
bcmxtmcfg: Bonding State is DATA_IDLE
bcmxtmcfg: SID MODE SET to 12 BIT MODE
bcmxtmcfg: ATM Bonding Mgmt Log Area = 82930d08
--SMP support
wl: dsl_tx_pkt_flush_len=338
wl: norm_wmark_tot=876, pktc_wmark_tot=876
PCI: Enabling device 0000:02:00.0 (0000 -> 0002)
wl: passivemode=1
wl0: creating kthread wl0-kthrd
wl: napimode=0
initvars_cis_pci: Not CIS format
Neither SPROM nor OTP has valid image
wl:srom/otp not programmed, using main memory mapped srom info(wombo board)
wl: ID=pci/2/0/
wl: ID=pci/2/0/
wl: loading /etc/wlan/bcm43217_map.bin
wl: updating srom from flash...
wl: updating srom from flash...
srom rev:8
wl: reading /etc/wlan/bcmcmn_nvramvars.bin, file size=32
wl0: allocskbmode=1 currallocskbsz=512
wl0: Broadcom BCM43227 802.11 Wireless Controller 7.14.89.14.cpe4.16L03.0-kdb
Setting SSID: "TP-LINK_EE36"
Chanspec set to 0x1806
wlctl: Unsupported
wlctl: Bad Argument
wlctl: Unsupported
open DNS error: No such file or directory
[ oal_sys_getOldTZInfo ] 523: Open TZ file error!
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: selected channel spec: 0x1001
acsd: Adjusted channel spec: 0x1001
acsd: selected DFS-exit channel spec: 0x1001
acsd: selected channel spec: 0x1001
acsd: Adjusted channel spec: 0x1001
acsd: selected channel spec: 0x1001
device wl0 entered promiscuous mode
br0: port 5(wl0) entered forwarding state
br0: port 5(wl0) entered forwarding state
brctl: iface wl0.1: No such device
brctl: iface wl0.3: No such device
brctl: iface wl0.4: No such device
brctl: iface wl0.2: No such device
send 2030 error No such file or directory ,pid 317
send 2004 error No such file or directory ,pid 317
[ rsl_getManagementServerObj ] 488: cannot set connectionRequestURL yet because no WAN intf is up
[ rsl_getManagementServerObj ] 488: cannot set connectionRequestURL yet because no WAN intf is up
[ rsl_getManagementServerObj ] 488: cannot set connectionRequestURL yet because no WAN intf is up
iptables: Bad rule (does a matching rule exist in that chain?).
radvd starting
ifconfig: ioctl 0x8913 failed: No such device
brctl: iface nas0_1: No such device
brctl: iface nas0_1: No such device
brctl: iface nas0_1: No such device
[ getPidFromPidFile ] 112: Cann't open file: /var/run/zebra.pid.
[ getPidFromPidFile ] 112: Cann't open file: /var/run/ripd.pid.
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
ip6tables: Bad rule (does a matching rule exist in that chain?).
[ rsl_initDslIptvCfgObj ] 2180: DSL IPTV not enable or not firstInit.
[ rsl_setStorageServiceObj ] 1252: mountFlag is 3,We start usb server
killall: ushare: no process killed
uShare (version 1.1a), a lightweight UPnP A/V and DLNA Media Server.
Benjamin Zores (C) 2005-2007, for GeeXboX Team.
See http://ushare.geexbox.org/ for updates.
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
ip6tables: Bad rule (does a matching rule exist in that chain?).
kcg 333 :GPL NetUSB up!
kc 90 : run_telnetDBGDServer start
kc 227 : init_DebugD end
INFO182B: NetUSB 1.02.80, 0003040B : Mar 4 2016 10:07:24
INFO182D: 7437: TD-W9970 :TD-W9970
INFO182E: AUTH ISOC
INFO182F: filterAudio
usbcore: registered new interface driver KC NetUSB General Driver
INFO188C: Reset device when disconnect
INFO01ED: init proc : PAGE_SIZE 4096
INFO171F: infomap c0d7e1a4
INFO1722: sleep to wait br0 to wake up
INFO15D9: tcpConnector() started... : br0
open DNS error: No such file or directory
INFO1589: Bind to br0
open DNS error: No such file or directory
starting pid 319, tty '': '/sbin/getty -L ttyS0 115200 vt100'
TD-W9970 login: admin
Password:
Jan 1 00:02:26 login[319]: root login on 'console'
~ # ls
web usr sys proc linuxrc etc bin
var tmp sbin mnt lib dev
~ # cat (/pro~ # cat /proc/mt~ # cat /proc/mtd
dev: size erasesize name
mtd0: 00640000 00010000 "rootfs"
~ # cat /pr~ # cat /proc/cp~ # cat /proc/cpuinfo
system type : 963381SV
processor : 0
cpu model : Broadcom BMIPS4350 V8.1
BogoMIPS : 598.01
wait instruction : yes
microsecond timers : yes
tlb_entries : 32
extra interrupt vector : no
hardware watchpoint : no
ASEs implemented :
shadow register sets : 1
kscratch registers : 0
core : 0
VCED exceptions : not available
VCEI exceptions : not available
processor : 1
cpu model : Broadcom BMIPS4350 V8.1
BogoMIPS : 602.11
wait instruction : yes
microsecond timers : yes
tlb_entries : 32
extra interrupt vector : no
hardware watchpoint : no
ASEs implemented :
shadow register sets : 1
kscratch registers : 0
core : 0
VCED exceptions : not available
VCEI exceptions : not available
Could you please tell me which commands I could use to retrieve more useful information?
Is there any similar device to this one I could use as a reference?