OpenWrt Forum Archive

Topic: Netgear PTV1000

The content of this topic has been archived on 7 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

I picked up a couple of Netgear PTV1000's on the cheap recently for those not familiar the device uses intel WiDi to extend your laptop display and audio over WiFi and the out to HDMI or composite.

http://www.netgear.com/home/products/ho … V1000.aspx

I decided to crack one open and take a look and identified the following:

2x samsung 512mb ddr2 dram k4t51163qg-hce6
1x Sigma Designs smp8653a-cbe3 processor (Non marcovision version of the smp8652) http://www.sigmadesigns.com/uploads/doc … 650_br.pdf
1x pegatron Et856 94V-0 Ralink RT3070 802.11b/g/n Wireless Lan Device connected via internal female usb port
1x 24-bit stereo DAC akm 4421aet 3e937 http://www.asahi-kasei.co.jp/akm/en/pro … 4421a.html
1x st nand512w3a2dn6 NAND flash covered in sticker "WiDi 1.056.2 f2 9683f516"
1x sil9002csu hdmi transmitter

1x 2x10 20 pin test pad near CPU marked J18 (JTAG?)
1x 1x4 male header marked con28 (Serial?)
1x 2x7 14 pin test pad marked j15

firmware source: ftp://downloads.netgear.com/files/GPL/P … ar.bz2.zip
firmware readme http://www.pastie.org/1508140

So for $55 USD this device seems to have good potential as a media streamer or otherwise and I plan on getting to work once I have some time.  If anyone has any experience with the processor or device I would be glad to hear form you.

Cheers.

(Last edited by mas_rtyl on 29 Jan 2011, 07:43)

I have one as well.   I downloaded the source, but it didn't build cleanly first try and haven't had time to figure it out.

the 1x4 header is TTL (3.3V) serial.

Boot messages below:

----------------------
xos2P52-100 (sfla 128kbytes. subid 0x00/a8) [serial#dde868b1a7ee537bdb627273685af963]
#stepxmb 0xb5
*** No valid zxenv found in DevType 0 CS#0, phyblock#0 ! ***
No valid zxenv found in device group 0 CS#0
No valid zxenv found in device group 0 CS#1
#DRAM setup (method=0x10015858) ...
#DRAM0 Window  :    0x#2a#2a#29#2a# (20)
#DRAM0 Settings: WD=0x0c0c0c0c RG=0x0a0a0a0a RR=0x0a0a0a0a RF=0x0b0b0b0b
#poisoned 32768 pages with 0x17d80f1c
#s*** zxenv has been customized compared to build ***
--- review xmasboot/configs/WiDi-07.config for details [xmbb5-ezboot90-nand_st2] ---
xloadsize=47988
xload rc=6
subrom SHA-256: 0043573e6613e8be4373c0259bdfe10911c93769ea113cf328c2443b3ce0e3db
ezboot90 @0xd00e5844 (nand_st2) (actual cpu=@499MHz/dsp=333MHz/sys=333MHz)
on 8653 rev ES2 (subid 0x00) a2=0x00000002 a3=0x00000003
step12
ruamm0 [0x84800000,0x879f8000[ (~52396032 bytes)
[0x879b8000,xos_public_ga=0x879c0000[ and [0x879e0000,0x879f7fff[ are lost for alignment)
channel#ei
x_ga=0x879b7cd4
[0x871a7cbc,ios_ga=0x87400000[ and [0x87800000,0x879a7cbb[ are lost for alignment)
GW32 0x0006f008 0x80000000 [va=0x84000000]
GW32 0x0006f00c 0x84000000 [va=0x88000000]
GW32 0x0006f010 0x88000000 [va=0x8c000000]
step33
xos2k client version=19, server version=19
xos2 SHA-1 = 696b15f57c540829defeeee9f4a092007337a124 (version 0x52)
xos2 serial = dde868b1a7ee537bdb627273685af963
Using zbootxenv ga=0x871a3cb0 (va=0xbb1a3cb0)

**************************************
* SMP86xx zboot start ...
* Version: 3.1.0
* Started at 0xd00ec990.
* Configurations (chip revision: 1):
*    Enabled checkpoints.
**************************************
DRAM0 dunit_cfg/delay0_ctrl (0x15140017/0x45651323).
DRAM1 dunit_cfg/delay0_ctrl (NA/NA).
Using UART port 0 as console.
PHYBLOCK0 Ver: 07
Board ID.: WiDi-07
Setting up H/W from XENV block at 0xbb1a3cb0.
  Setting <SYSCLK avclk_mux> to 0x17400000.
  Setting <SYSCLK hostclk_mux> to 0x00000130.
  Setting <IRQ rise edge trigger lo> to 0xff28ca06.
  Setting <IRQ fall edge trigger lo> to 0x0000c000.
  Setting <IRQ rise edge trigger hi> to 0x8c10009f.
  Setting <IRQ fall edge trigger hi> to 0x00000000.
  Setting <PB default timing> to 0x03080202.
  Keeping <PB timing0> to 0x03080202.
  Keeping <PB Use timing0> to 0x000003f3.
  Setting <PB timing1> to 0x10101010.
  Setting <PB Use timing1> to 0x000003f4.
  Setting <PB CS Config> to 0x00370043.
  Enabled Devices: 0x00100290
    Ethernet1 IR I2CS USB
cd#0 disabled
cd#1 disabled
cd#2 want 96000000Hz: setting of 0x0000000021c00000-2^28
cd#2 cannot measure
cd#3 disabled
cd#4 disabled
cd#5 disabled
cd#6 disabled
cd#7 disabled
cd#8 disabled
cd#9 disabled
cd#10 disabled
cd#11 disabled
  GPIO dir/data = 0x0000c800/0x00000800
  UART0 GPIO mode/dir/data = 0x6e/0x00/0x00
  UART1 GPIO mode/dir/data = 0x00/0x00/0x00
  UART2 GPIO mode/dir/data = 0x00/0x00/0x00
  Generate pulse(s) with GPIO11 .. 1,0(500000us),1
  MAC1: 00:16:e8:62:72:73
XENV block processing completed.
Default boot index: 0
xmboot booted from devtype: 1, chipsel: 0
No explicit boot order specified, using default boot order...
ezboot buffers, setup in DRAM bank#0:
  Alloting 2097152 bytes for heap.
  Alloting 16777216 bytes for reading.
  Alloting 16777216 bytes for decryption.
xmat romfs goes to 0x870a3ca0 (ga)
xmat romfs goes to 0xb30a3ca0 (va)
Trying devtype=0 chipsel=0
gbus_read_unit32 0x0xd00e3448 0x0xd00e3448
nand_handle 0xd00ff7e0 st_partition 0
nand_handle.p_partition 0xd00ff0a8.......
nand_probe 0x0xd00f5b90
nand_Mg_open 0
Reading NAND CS0, addr 0x015c0000, size 0x00100000 to 0xb30a3ca0
File xtask_loader.xload found
found imat romfs @ 0x011c0000
imap romfs goes to 0x86ca3c80 (ga)
imap romfs goes to 0xb2ca3c80 (va)
Trying devtype=0 chipsel=0
Reading NAND CS0, addr 0x011c0000, size 0x00400000 to 0xb2ca3c80
File itask_loader.iload found
Trying devtype=0 chipsel=0
WiDi Rev ID: 7 - switch OFF
reading z.boot0 (vzx=0xbb1a3cb0) is 0x000c0000
Reading NAND CS0, addr 0x000c0000, size 0x00000800 to 0x01840000
Reading NAND CS0, addr 0x000c0800, size 0x00b9f400 to 0x01840800
Found.
ROMFS found at 0x0x01840000, Volume name = MIPSLINUX_XLOAD
Found 1 file(s) to be processed in ROMFS.
Processing vmlinux_xload.zbf (start: 0x01840090, size: 0x00b9f794)
  Checking zboot file signature .. OK.
  Warning: header version mismatched.
   *** Fully Encrypted.
src_addr = 0x018400b0, dest addr = 0x02840000
XLOADING src=0x818400b0, dest=0x82840000, size=0x00b9f774
xload.c:76: Waiting for XLOAD completion.
xload.c:86: XLOAD done, status = 0x6.
  Decompressing to 0x84000000 .. OK (13975104/0xd53e40).
  Load time total 0/0 msec.
Execute at 0x842d0000 ..
Linux version 2.6.22.19-19-sigma (user@localhost.localdomain) (gcc version 4.3.2 (Sourcery G++ Lite 4.3-51) ) #392 PREEMPT Mon Oct 12 22:50:04 PDT 2009
Physical map 0x80000000 to 0x04000000, max remap/kernel size: 0x0c000000/0x18000000.
Configured for SMP865x, detected SMP8653 (revision ES2).
Detected CPU/System/DSP Frequencies: 499.50/333.00/333.00MHz
SMP86xx Enabled Devices under Linux/XENV 0x871a3cb0 = 0x00100290
Ethernet1 IR I2CS USB
Maximum kernel memory size is 0x04800000 with RUAMM restriction.
CPU revision is: 0001937c
FPU revision is: 01739300
Determined physical RAM map:
On node 0 totalpages: 8640
  DMA zone: 16 pages used for memmap
  DMA zone: 0 pages reserved
  DMA zone: 8624 pages, LIFO batch:1
  Normal zone: 0 pages used for memmap
Built 1 zonelists.  Total pages: 8624
Kernel command line: console=ttyS0 mem=71M
Primary instruction cache 32kB, 4-way, physically tagged, linesize 32 bytes.
Primary data cache 32kB, 4-way, physically tagged, no aliases, linesize 32 bytes
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
Cache parity protection disabled
PID hash table entries: 1024 (order: 10, 4096 bytes)
Using 249.750 MHz high precision timer.
Console: colour dummy device 80x25
Dentry cache hash table entries: 32768 (order: 3, 131072 bytes)
Inode-cache hash table entries: 16384 (order: 2, 65536 bytes)
Memory: 58032k/72704k available (2352k kernel code, 14608k reserved, 511k data, 10768k init, 0k highmem)
Calibrating delay loop... 332.59 BogoMIPS (lpj=1662976)
Mount-cache hash table entries: 2048
NET: Registered protocol family 16
PCI: pci host support disabled
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
NET: Registered protocol family 2
Time: TANGOX clocksource has been installed.
IP route cache hash table entries: 4096 (order: 0, 16384 bytes)
TCP established hash table entries: 8192 (order: 2, 65536 bytes)
TCP bind hash table entries: 8192 (order: 1, 32768 bytes)
TCP: Hash tables configured (established 8192 bind 8192)
TCP reno registered
io scheduler noop registered
io scheduler anticipatory registered (default)
io scheduler deadline registered
io scheduler cfq registered
tango3dog: Hardware Watchdog Timer for SMP864x/SMP865x 0.1 (def. timeout: 30 sec)
Serial: 8250/16550 driver $Revision: 1.90 $ 2 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x0 (irq = 9) is a 16550A
serial8250: ttyS1 at MMIO 0x0 (irq = 10) is a 16550A
loop: module loaded
tangox_enet0: ethernet mac_core 0 support is disabled from XENV
tangox_enet1: unable to autodetect phy
TCP cubic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
Freeing unused kernel memory: 10768k freed
Initializing random number generator... done.
Starting watchdog timer with 20 second expiration ...
Started watchdog timer.
Starting network...
sigmablock: module license 'Proprietary' taints kernel.

CS 0 vendor id 0x20.......
CS 0 device id 0x76.......
...................................................................................................................................................................

********************** Parition configureations for CS 0 *******************
**** parition 1  offset [0x00000000] + size [0x00080000] = [0x00080000] ****
**** parition 2  offset [0x00080000] + size [0x00040000] = [0x000c0000] ****
**** parition 3  offset [0x000c0000] + size [0x01100000] = [0x011c0000] ****
**** parition 4  offset [0x011c0000] + size [0x00400000] = [0x015c0000] ****
**** parition 5  offset [0x015c0000] + size [0x00100000] = [0x016c0000] ****
**** parition 6  offset [0x016c0000] + size [0x00040000] = [0x01700000] ****
**** parition 7  offset [0x01700000] + size [0x01100000] = [0x02800000] ****
**** parition 8  offset [0x02800000] + size [0x01100000] = [0x03900000] ****
chip_index 0 pos 0

CS 1 vendor id 0x00.......
CS 1 device id 0x00.......
nand_probe Error on chip 1 ret code -13
EXT2-fs warning: mounting unchecked fs, running e2fsck is recommended
driver tangox-ehci-hcd, 10 Dec 2004
TangoX USB initializing...
tangox-ehci-hcd tangox-ehci-hcd: TangoX USB 2.0
tangox-ehci-hcd tangox-ehci-hcd: new USB bus registered, assigned bus number 1
tangox-ehci-hcd tangox-ehci-hcd: irq 48, io mem 0xa0021500
tangox-ehci-hcd tangox-ehci-hcd: USB 0.0 started, EHCI 1.00, driver 10 Dec 2004
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
rtusb init --->
usb 1-1: new high speed USB device using tangox-ehci-hcd and address 2
usb 1-1: configuration #1 chosen from 1 choice


=== pAd = c0054000, size = 568536 ===

<-- RTMPAllocAdapterBlock, Status=0
usbcore: registered new interface driver rt2870
<-- RTMPAllocTxRxRingMemory, Status=0
-->RTUSBVenderReset
<--RTUSBVenderReset
--> Opening file /etc/Wireless/RT2870STA/RT2870STA.dat
I/F(ra0) Key1Str is Invalid key length! KeyLen = 0!
I/F(ra0) Key2Str is Invalid key length! KeyLen = 0!
I/F(ra0) Key3Str is Invalid key length! KeyLen = 0!
I/F(ra0) Key4Str is Invalid key length! KeyLen = 0!
1. Phy Mode = 5
2. Phy Mode = 5
RTMPSetPhyMode: channel is out of range, use first channel=1
3. Phy Mode = 9
MCS Set = ff 00 00 00 01
The UUID Hex string is:bc329e001dd811b286010026f2a6a3aa
The UUID ASCII string is:bc329e00-1dd8-11b2-8601-0026f2a6a3aa!
<==== RTMPInitialize, Status=0
0x1300 = 00064300
em8xxx: no version for "llad_open" found: kernel tainted.
em8xxx [/home/user/sigma/3.7/mrua_SMP8654F_3_7_0_dev.mips/MRUA_src/rua/emhwlib_kernel/kernel_src/krua.c:1571] init_module: begun
em8xxx0 [/home/user/sigma/3.7/mrua_SMP8654F_3_7_0_dev.mips/MRUA_src/rua/emhwlib_kernel/kernel_src/krua.c:1422] identify: board is design #711 (odyssey)
em8xxx [/home/user/sigma/3.7/mrua_SMP8654F_3_7_0_dev.mips/MRUA_src/rua/emhwlib_kernel/kernel_src/krua.c:1557] identify: device 0x8653 0x2 accepted with software t3
em8xxx [/home/user/sigma/3.7/mrua_SMP8654F_3_7_0_dev.mips/MRUA_src/rua/emhwlib_kernel/kernel_src/krua.c:1636] mumk_register_tasklet 0xc011c000
mumk_register_tasklet: (0) tasklet c011c000 status @c03b1bb4
em8xxx [/home/user/sigma/3.7/mrua_SMP8654F_3_7_0_dev.mips/MRUA_src/rua/emhwlib_kernel/kernel_src/krua.c:353] mumk_register_channel_tasklet[0] 0xc0124000: pE=0xc030
em8xxx [/home/user/sigma/3.7/mrua_SMP8654F_3_7_0_dev.mips/MRUA_src/rua/emhwlib_kernel/kernel_src/krua.c:353] mumk_register_channel_tasklet[1] 0xc012c000: pE=0xc03c
em8xxx [/home/user/sigma/3.7/mrua_SMP8654F_3_7_0_dev.mips/MRUA_src/rua/emhwlib_kernel/kernel_src/krua.c:353] mumk_register_channel_tasklet[2] 0xc0134000: pE=0xc038
em8xxx [/home/user/sigma/3.7/mrua_SMP8654F_3_7_0_dev.mips/MRUA_src/rua/emhwlib_kernel/kernel_src/krua.c:353] mumk_register_channel_tasklet[3] 0xc013c000: pE=0xc034
em8xxx [/home/user/sigma/3.7/mrua_SMP8654F_3_7_0_dev.mips/MRUA_src/rua/emhwlib_kernel/kernel_src/krua.c:353] mumk_register_channel_tasklet[4] 0xc0144000: pE=0xc030
em8xxx [/home/user/sigma/3.7/mrua_SMP8654F_3_7_0_dev.mips/MRUA_src/rua/emhwlib_kernel/kernel_src/krua.c:353] mumk_register_channel_tasklet[5] 0xc014c000: pE=0xc03c
em8xxx [/home/user/sigma/3.7/mrua_SMP8654F_3_7_0_dev.mips/MRUA_src/rua/emhwlib_kernel/kernel_src/krua.c:353] mumk_register_channel_tasklet[6] 0xc0154000: pE=0xc038
em8xxx [/home/user/sigma/3.7/mrua_SMP8654F_3_7_0_dev.mips/MRUA_src/rua/emhwlib_kernel/kernel_src/krua.c:1733] init_module: done. Found 1 em8xxx
---------------------------------

The discussion might have continued from here.