OpenWrt Forum Archive

Post #1

CRC

31 May 2013, 09:29

Hi all,

Just wondering what the chances would be to have the WD N600 support in OpenWRT..

I've managed to find the following details:
Name: Western Digital My Net N600
FCC ID: RRK-D2F
Wifi Supported: abgn
CPU: Atheros AR9344
Onboard RAM: 128Mb
Wifi #1: AR9344
Wifi #2: AR9382
USB Ports: 1
LAN Ethernet: 4 x 10/100
WAN Ethernet: 1 x 10/100

More than happy to take photos of this device if helpful...

The mainboard shows the following printed on the back:
PALWONN M3
94V-0
E230435 1211
FR-4
8WRGND16.3A1G

No real markings on the front of the PCB - however there is a sticker with a barcode and the text: X12136608

There seems to be a 5 x pin header and a 14 pin (not connected) test connector on the mainboard.

Post #2

CRC

31 May 2013, 09:39

Looking under the main 'can', the CPU is:

Atheros
AR9344-BC2A
PBT204.00B
1128
TAIWAN

Next to that, there's what looks to be 2 x RAM chips:

ESMT
M14D5121632A
ASH1 -2.58
P127W02 201

Under the second smaller 'can', I see another Atheros Chip:

Atheros
AR9382-ALTA
PFT676.00B
1203

It looks like WD have released some source code:
http://support.wdc.com/product/download … mp;lang=en

Post #3

CRC

3 Jun 2013, 03:31

I've started a wiki page with some info on the router here:
http://wiki.openwrt.org/toh/wd/n600

Hopefully, someone can point me in the right direction to help out?

Post #4

ranfish

3 Jun 2013, 05:46

Very smilliar to tplink wdr3600

Post #5

CRC

3 Jun 2013, 06:01

ranfish wrote:

Very smilliar to tplink wdr3600

I agree. The only differences would be 100Mbit ethernet ports instead of 1000Mbit, and 1 USB port instead of two.

Post #6

EvilDevil

14 Sep 2013, 12:04

Hello all,

I received my WD N600 yesterday and this is what i found out/gathered from other sources:
Stock Firmware:
Telnet Access ist possible:
http://tachisalopex.blogspot.de/2013/06 … elnet.html

Serial console is possible too:
You have to use a TTL-converter (3.3 V ) and connect to the "JP1" header:
Pinout: See http://wikidevi.com/wiki/Western_Digital_My_Net_N750

Sometimes the router did not boot when the cables were connected(stopped at "Stack Pointer at: 87f6ff98").
I had to disconnect GND, power the router and connect GND again to fix this (could be my crappy TTL-converter).

Serial console bootlog:

U-Boot 1.1.4 (Mar 26 2012 - 21:54:50)
SVN revision: 51
Target board: WRG-ND16
DRAM:
sri
Wasp 1.2
wasp_ddr_initial_config(255): (32bit) ddr2 init
128 MB
Top of RAM usable for U-Boot at: 88000000
Reserving 244k for U-Boot at: 87fc0000
Reserving 192k for malloc() at: 87f90000
Reserving 44 Bytes for Board Info at: 87f8ffd4
Reserving 36 Bytes for Global Data at: 87f8ffb0
Reserving 128k for boot params() at: 87f6ffb0
Stack Pointer at: 87f6ff98
Now running in RAM - U-Boot at: 87fc0000
id read 0x100000ff
flash size 16 MB, sector count = 256
Flash: 16 MB
pci_init_board: PCIe PLL not set for 40MHz refclk
In: serial
Out: serial
Err: serial
Net: ag934x_enet_initialize...
wasp reset mask:c03300
WASP ----> S27 PHY
: cfg1 0x5 cfg2 0x7114
eth0: 00:90:a9:a7:12:2b
s27 reg init
MEGA: athrs27_link_down all port...
MEGA: athrs27_link_down all port...
eth0 up
WASP ----> S27 PHY
: cfg1 0xf cfg2 0x7214
eth1: 00:90:a9:a7:12:2c
s27 reg init lan
ATHRS27: resetting s27
ATHRS27: s27 reset done
MEGA: athrs27_link_down all port...
athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10
athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :10
athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :50
athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :50
athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :50
MEGA: athrs27_link_down all port...
eth1 up
eth0, eth1
Hit any key to stop autoboot: 0
## Booting image at 9f070000 ...
Verifying Checksum ...
Uncompressing SEAMA linux.lzma ... OK
do_boot_linux entry = 80002000
## Transferring control to Linux (at address 00000000) ...
## Giving linux memsize in bytes, 134217728
Starting kernel ...

Booting Atheros AR934x
Linux version 2.6.31--LSDK-9.2.0_U8.834-svn4367 (bouble_hung@Zeus) (gcc version 4.3.3 (GCC) ) #1 Fri Dec 14 15:43:09 CST 2012
flash_size passed from bootloader = 0
CPU revision is: 0001974c (MIPS 74Kc)
ath_sys_frequency: cpu srif ddr srif cpu 560 ddr 480 ahb 240
Determined physical RAM map:
memory: 02000000 @ 00000000 (usable)
User-defined physical RAM map:
memory: 08000000 @ 00000000 (usable)
Initrd not found or empty - disabling initrd
Zone PFN ranges:
Normal 0x00000000 -> 0x00008000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
0: 0x00000000 -> 0x00008000
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32512
Kernel command line: console=ttyS0,115200 root=/dev/mtdblock0 rw mem=128m
PID hash table entries: 512 (order: 9, 2048 bytes)
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
Writing ErrCtl register=00000000
Readback ErrCtl register=00000000
Memory: 111032k/131072k available (3219k kernel code, 19864k reserved, 866k data , 164k init, 0k highmem)
NR_IRQS:128
plat_time_init: plat time init done
Calibrating delay loop... 279.55 BogoMIPS (lpj=559104)
Mount-cache hash table entries: 512
****************ALLOC***********************
Packet mem: 8043c820 (0xe00000 bytes)
********************************************
NET: Registered protocol family 16
PCI init:ath_pcibios_init
ath_pcibios_init(294): PCI CMD write: 0x356
registering PCI controller with io_map_base unset
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
pci 0000:00:00.0: PME# supported from D0 D1 D3hot
pci 0000:00:00.0: PME# disabled
Returning IRQ 64
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
NET: Registered protocol family 1
ATH GPIOC major 0
squashfs: version 4.0 (2009/01/31) Phillip Lougher
msgmni has been set to 217
alg: No test for lzma (lzma-generic)
alg: No test for stdrng (krng)
io scheduler noop registered
io scheduler deadline registered (default)
HDLC line discipline maxframe=4096
N_HDLC line discipline registered.
Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
serial8250.0: ttyS0 at MMIO 0xb8020000 (irq = 19) is a 16550A
console [ttyS0] enabled
brd: module loaded
PPP generic driver version 2.4.2
PPP MPPE Compression module registered
NET: Registered protocol family 24
cmdlinepart partition parsing not available
RedBoot partition parsing not available
No partitions found on flash bank 0
ELBOX CFI physmap flash device: 1000000 at 9f000000
cmdlinepart partition parsing not available
RedBoot partition parsing not available
No partitions found on flash bank 0
ATH serial flash !!
ath-nor0: the flash image has SEAMA header
ath-nor0: squashfs filesystem found at offset 0x001e0040
Creating 11 MTD partitions on "ath-nor0":
0x0000001e0060-0x000000b0f060 : "rootfs"
0x000000070000-0x000000ff0000 : "upgrade"
0x000000050000-0x000000060000 : "devdata"
0x000000060000-0x000000070000 : "devconf"
0x000000ff0000-0x000001000000 : "radiocfg"
0x000000000000-0x000001000000 : "flash"
0x000000000000-0x000000040000 : "bootloader"
0x000000040000-0x000000050000 : "bdcfg"
0x000000fe0000-0x000000ff0000 : "devrev1"
0x000000fd0000-0x000000fe0000 : "devrev2"
0x000000fd0000-0x000000ff0000 : "devrev3"
usbmon: debugfs is not available
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
Port Status 1c000004
ath-ehci ath-ehci.0: ATH EHCI
ath-ehci ath-ehci.0: new USB bus registered, assigned bus number 1
ehci_reset Intialize USB CONTROLLER in host mode: 13
ehci_reset Port Status 1c000000
ath-ehci ath-ehci.0: irq 3, io mem 0x1b000000
ehci_reset Intialize USB CONTROLLER in host mode: 13
ehci_reset Port Status 1c000000
ath-ehci ath-ehci.0: USB 2.0 started, EHCI 1.00
usb usb1: New USB device found, idVendor=1d6b, idProduct=0002
usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
usb usb1: Product: ATH EHCI
usb usb1: Manufacturer: Linux 2.6.31--LSDK-9.2.0_U8.834-svn4367 ehci_hcd
usb usb1: SerialNumber: platform
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
u32 classifier
nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use
nf_conntrack.acct=1 kernel parameter, acct=1 nf_conntrack module option or
sysctl net.netfilter.nf_conntrack_acct=1 to enable it.
nf_conntrack_rtsp v0.6.21 loading
nf_conntrack_rtsp port #0: 554
nf_conntrack_rtsp port #1: 557
xt_time: kernel timezone is -0000
nf_nat_rtsp v0.6.21 loading
BCM fast NAT: INIT
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP cubic registered
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
athwdt_init: Registering WDT success
ath_otp_init: Registering OTP success
ath_clksw_init: Registering Clock Switch Interface success
VFS: Mounted root (squashfs filesystem) readonly on device 31:0.
Freeing unused kernel memory: 164k freed
init started: BusyBox v1.14.1 (2012-12-14 15:43:34 CST)
starting pid 347, tty '': '/etc/init.d/rcS'
[/etc/init.d/S10init.sh]
[/etc/init.d/S14kcode.sh]
GPL NetUSB up!
NetUSB: module license 'Proprietary' taints kernel.
Disabling lock debugging due to kernel taint
kc 88 : run_telnetDBGDServer start
kc 225 : init_DebugD end
INFO16B7: NetUSB 1.166, 0002061F : Mar 20 2012 14:08:45
INFO16B9: AUTH ISOC
INFO16BA:
INFO0A78: --- checkSBusTimeoutThread start ---
usbcore: registered new interface driver KC NetUSB General Driver
INFO0076: init proc : PAGE_SIZE 4096
INFO158E: sleep to wait br0 to wake up
INFO02C7: use dev Name br0 : fail
[/etc/init.d/S14paragon.sh]
ufsd: driver (8.6 U86_r192470_b3, LBD=ON, delalloc, ioctl, rwm, ws, bdi, sd) loa ded at 87b00000
NTFS (with native replay) support included
Hfs+/HfsX support included
Big endian platform
optimized: speed
Build_for__WD_Stingray_DB600_2011-12-28_U86_r192470_b3
[/etc/init.d/S15udevd.sh]
INFO02C7: use dev Name br0 : fail
[/etc/init.d/S16ipv6.sh]
[/etc/init.d/S19init.sh]
[/etc/init.d/S20init.sh]
INFO02C7: use dev Name br0 : fail
DEFNODE[/etc/defnodes/S11devdata.xml]
DEFNODE[/etc/defnodes/S12flashspeed.php]
DEFNODE[/etc/defnodes/S14setchlist.php]
DEFNODE[/etc/defnodes/S20device.xml]
DEFNODE[/etc/defnodes/S22timezone.php]
[/etc/scripts/setdate.sh] 01/01/2000 ...
Sat Jan 1 01:00:04 GMT 2000
DEFNODE[/etc/defnodes/S23language.php]
DEFNODE[/etc/defnodes/S30device.php]
DEFNODE[/etc/defnodes/S30device.xml]
DEFNODE[/etc/defnodes/S31diagnostic.xml]
DEFNODE[/etc/defnodes/S31locale.php]
DEFNODE[/etc/defnodes/S33wifi.php]
DEFNODE[/etc/defnodes/S40device.xml]
DEFNODE[/etc/defnodes/S40links.php]
DEFNODE[/etc/defnodes/S90netstar.php]
DEFNODE[/etc/defnodes/S90opendns.php]
DEFNODE[/etc/defnodes/S90sessions.php]
DEFNODE[/etc/defnodes/S90upnpigd.php]
INFO02C7: use dev Name br0 : fail
DEFNODE[/etc/defnodes/S90upnpwfa.php]
DEFNODE[/etc/defnodes/S91upnpigd2.php]
DEFNODE[/etc/defnodes/S91upnpwd.php]
DEFNODE[/etc/defnodes/S92RussiaQOS.php]
SERVD: start service [LOGD]
[/etc/init.d/S21interfaces.sh]
Inserting gpio.ko ...
done.
Inserting athrs_gmac.ko ...
ATHR_GMAC: Length per segment 1536
ATHR_GMAC: fifo cfg 3 01f00140
ATHR_GMAC: RX TASKLET - Pkts per Intr:16
ATHR_GMAC: Mac address for unit 0:bfff0000
ATHR_GMAC: ff:ff:ff:ff:ff:ff
mac:0 Registering S27....
ATHR_GMAC: Max segments per packet : 1
ATHR_GMAC: Max tx descriptor count : 128
ATHR_GMAC: Max rx descriptor count : 128
ATHR_GMAC: Mac capability flags : 2580
ATHR_GMAC: RX TASKLET - Pkts per Intr:16
ATHR_GMAC: Mac address for unit 1:bfff0006
ATHR_GMAC: ff:ff:ff:ff:ff:ff
INFO02C7: use dev Name br0 : fail
mac:1 Registering S27....
ATHR_GMAC: Max segments per packet : 1
ATHR_GMAC: Max tx descriptor count : 128
ATHR_GMAC: Max rx descriptor count : 128
ATHR_GMAC: Mac capability flags : 2D80
Inserting rebootm.ko ...
Rebootm loading ...
mknod: /dev/pts/0: Operation not permitted
mknod: /dev/pts/1: Operation not permitted
[/etc/init.d/S21usbmount.sh]
[/etc/init.d/S23udevd.sh]
[/etc/init.d/S45gpiod.sh]
mknod: /dev/gpio: File exists
[/etc/init.d/S46hd-idle.sh]
spin-down [600] ...
[/etc/init.d/rcS] done!
Factory reset tiERROR:s27_rd_phy failed:phy:0 reg:11 rd_data:80000000
me : 5 secs
00 GPIO#00 : LED foERROR:s27_wr_phy failed:phy:0 regD
r Wireless , OE is output ERROR:s27_wr_phy failed:phy:0 regE
ERROR:s27_wr_phy failed:phy:0 regD
01 GPIO#01 : GrERROR:s27_rd_phy failed:phy:0 reg:E rd_data:80000000
een LED port 1 , OE is output mode, MUX value is GPIO_CONTROL
02 GPIO#02 : Green LED port 2 , OE is output mode, MUX value is GPIO_CONTR OL
03 GPIO#03 : Green LED port 3 , OE is output mode, MUX value is GPIO_CONTR OL
04 GPIO#04 : Green LED port 4 , OE is output mode, MUX value is GPIO_CONTR OL
05 GPIO#11 : Power_Status LED Green , OE is output mode, MUX value is GPIO_CONTR OL
06 GPIO#12 : Internet LED Green , OE is output mode, MUX value is GPIO_CONTR OL
07 GPIO#13 : LED for WPS , OE is output mode, MUX value is GPIO_CONTR OL
08 GPIO#14 : WLAN external lna 0 , OE is output mode, MUX value is 46
09 GPIO#15 : WLAN external lna 1 , OE is output mode, MUX value is 47
10 GPIO#16 : Factory Reset Button , OE is input mode, MUX value is GPIO_CONTR OL
11 GPIO#17 : WPS Button , OE is input mode, MUX value is GPIO_CONTR OL
gpiod: LAYOUT_ROUTER
ERROR:s27_rd_phy failed:phy:0 reg:11 rd_data:80000000
INFO02C7: use dev Name br0 : fail
[/etc/init0.d/S21layout.sh]: start ...
SERVD: start service [LAYOUT]
[/etc/init0.d/S40event.sh]: start ...
ERROR:s27_rd_phy failed:phy:1 reg:0 rd_data:80000000
ERROR:s27_wr_phy failed:phy:1 reg0
ERROR:s27_rd_phy failed:phy:2 reg:0 rd_data:80000000
ERROR:s27_wr_phy failed:phy:2 reg0
ERROR:s27_rd_phy failed:phy:3 reg:0 rd_data:80000000
ERROR:s27_wr_phy failed:phy:3 reg0
ERROR:s27_rd_phy failed:phy:4 reg:0 rd_data:80000000
ERROR:s27_wr_phy failed:phy:4 reg0
athr_gmac_ring_alloc Allocated 2048 at 0x87aec000
athr_gmac_ring_alloc Allocated 2048 at 0x86c37800
WASP ----> S27 PHY MDIO
Setting Drop CRC Errors, Pause Frames and Length Error frames
Setting PHY...
getportstatus: old_wan_status=0 new_wan_status=1 diff_times=0
SERVD: event [SEALPAC.LOAD/default]
date: invalid date '201205010000'
INFO02C7: use dev Name br0 : fail
SEAMA: need meta for searching image.
[/etc/init0.d/S40gpioevent.sh]: start ...
[/etc/init0.d/S41autowan.sh]: start ...
[/etc/init0.d/S41autowanv6.sh]: start ...
[/etc/init0.d/S41event.sh]: start ...
[/etc/init0.d/S41inf.sh]: start ...
[/etc/init0.d/S42pthrough.sh]: start ...
[/etc/init0.d/S51wlan.sh]: start ...
[/etc/init0.d/S65ddnsd.sh]: start ...
[/etc/init0.d/S65user.sh]: start ...
[/etc/init0.d/S80telnetd.sh]: start ...
bind br0 fail try again
Create /var/proc/alpha symbolic link...
Enable Fast Route
[/etc/init0.d/rcS] done!
Please press Enter to activate this console. INFO02C7: use dev Name br0 : fail
INFO02C7: use dev Name br0 : fail
INFO02C7: use dev Name br0 : fail
ADDRCONF(NETDEV_UP): eth0: link is not ready
SERVD: event [WANPORT.LINKDOWN] not found!
athr_gmac_ring_alloc Allocated 2048 at 0x86c37000
athr_gmac_ring_alloc Allocated 2048 at 0x86c33800
WASP ----> S27 PHY MDIO
Setting Drop CRC Errors, Pause Frames and Length Error frames
ATHRS27: resetting s27
ATHRS27: s27 reset done
Setting PHY...
bind br0 fail try again
INFO02C7: use dev Name br0 : fail
ADDRCONF(NETDEV_UP): eth1: link is not ready
device eth1 entered promiscuous mode
SERVD: start service [LOGD]
SERVD: service [LOGD] is already started.
SERVD: start service [BRIDGE]
BRIDGE: The device is not in the bridge mode.
SERVD: start service [LAN]
SERVD: start service [WAN]
SERVD: start service [DEVICE.PASSTHROUGH]
INFO02D0: use dev Name br0
INFO1597: sleep to wait br0 end.
INFO15B0: UDP_BROAD 7436 tcpPort:625868800
INFO02D0: use dev Name br0
INFO14E7: tcpConnector() started...
SERVD: stop service [PHYINF.WIFI]
SERVD: service [PHYINF.WIFI] is already stopped.
SERVD: start service [PHYINF.WIFI]
SERVD: start service [DEVICE.ACCOUNT]
Password for 'admin' has been updated
Password for 'wd_user' has been updated
SERVD: start service [PHYINF.ETH-1]
SERVD: start service [PHYINF.ETH-2]
SERVD: start service [PHYINF.ETH-3]
SERVD: start service [IPTABLES]
insmod: can't insert '/lib/modules/ifresetcnt.ko': unknown symbol in module, or unknown parameter
INFO13C4: Bind to br0
SERVD: start service [IP6TABLES]
SERVD: start service [IPTABLES]
SERVD: service [IPTABLES] is already started.
SERVD: start service [IP6TABLES]
SERVD: service [IP6TABLES] is already started.
SERVD: start service [INET.LAN-1]
[/var/servd/INET.LAN-1_start.sh]: starting LAN-1...
SERVD: event [LAN-1.UP/default]
/proc/nf_accelerate_to_local: can't create
[/var/servd/INET.LAN-1_start.sh]: starting LAN-1 done !!!
SERVD: start service [INET.LAN-2]
[/var/servd/INET.LAN-2_start.sh]: starting LAN-2...
SERVD: event [LAN-2.UP/default]
[/var/servd/INET.LAN-2_start.sh]: starting LAN-2 done !!!
SERVD: start service [INET.LAN-4]
#!/bin/sh
# No inet profile!!
exit 9
SERVD: start service [IPTMACCTRL]
SERVD: start service [IPTURLCTRL]
SERVD: start service [ACCESSCTRL]
SERVD: start service [IPTPORTT]
SERVD: start service [IP6T.LAN-1]
SERVD: start service [IP6T.LAN-2]
SERVD: start service [IP6T.LAN-3]
SERVD: start service [IP6T.LAN-4]
SERVD: start service [IPTABLES]
SERVD: service [IPTABLES] is already started.
SERVD: start service [IP6TABLES]
SERVD: service [IP6TABLES] is already started.
SERVD: start service [INET.WAN-1]
[/var/servd/INET.WAN-1_start.sh]: starting WAN-1...
SERVD: event [WAN-1.UP/default]
[/var/servd/INET.WAN-1_start.sh]: starting WAN-1 done !!!
SERVD: start service [INET.WAN-2]
ifsetup: (WAN-2) not active.
SERVD: service [INET.WAN-2] return error 8.
SERVD: start service [INET.WAN-3]
ADDRCONF(NETDEV_UP): eth0: link is not ready
[/var/servd/INET.WAN-3_start.sh]: starting WAN-3...
SERVD: service [INET.WAN-3] return error 9.
SERVD: start service [INET.WAN-4]
ifsetup: (WAN-4) not active.
SERVD: service [INET.WAN-4] return error 8.
SERVD: start service [IPTMASQ]
/proc/sys/net/ipv4/ip_personality_sport: can't create
/proc/sys/net/ipv4/ip_personality_enable: can't create
SERVD: start service [IPTVSVR]
SERVD: start service [IPTPFWD]
SERVD: start service [IPTPORTT]
SERVD: service [IPTPORTT] is already started.
SERVD: start service [IPTDMZ]
IPTDMZ: cnt= 1
SERVD: start service [IPT.WAN-1]
SERVD: start service [IP6T.WAN-1]
SERVD: start service [IPT.WAN-2]
SERVD: start service [IP6T.WAN-2]
SERVD: start service [IPT.WAN-3]
SERVD: start service [IP6T.WAN-3]
SERVD: start service [IPT.WAN-4]
SERVD: start service [IP6T.WAN-4]
SERVD: stop service [IPT.LAN-1]
SERVD: service [IPT.LAN-1] is already stopped.
SERVD: start service [IPT.LAN-1]
/proc/fastnat/forskipsupport: can't create
SERVD: stop service [IPT.LAN-2]
SERVD: service [IPT.LAN-2] is already stopped.
SERVD: start service [IPT.LAN-2]
/proc/fastnat/forskipsupport: can't create
SERVD: stop service [IPT.LAN-3]
SERVD: service [IPT.LAN-3] is already stopped.
SERVD: start service [IPT.LAN-3]
SERVD: service [IPT.LAN-3] return error 108.
SERVD: stop service [IPT.LAN-4]
SERVD: service [IPT.LAN-4] is already stopped.
SERVD: start service [IPT.LAN-4]
SERVD: service [IPT.LAN-4] return error 108.
SERVD: start service [WIFI_MODS]
ath_hal: 0.9.17.1 (AR5416, AR9380, REGOPS_FUNC, WRITE_EEPROM, 11D)
ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Right s Reserved
ath_dfs: Version 2.0.0
Copyright (c) 2005-2006 Atheros Communications, Inc. All Rights Reserved
ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserve d
ath_ahb: 9.2.0_U9.915 (Atheros/multi-bss)
__ath_attach: Set global_scn[0]
ACBKMinfree = 48
ACBEMinfree = 32
ACVIMinfree = 16
ACVOMinfree = 0
CABMinfree = 48
UAPSDMinfree = 0
Restoring Cal data from Flash
dfs_attach: use DFS enhancements
DFS min filter rssiThresh = 18
DFS max pulse dur = 151 ticks
ath_get_caps[4913] rx chainmask mismatch actual 3 sc_chainmak 0
ath_get_caps[4888] tx chainmask mismatch actual 3 sc_chainmak 0
wifi0: Atheros 9340: mem=0xb8100000, irq=2
ath_pci: 9.2.0_U9.915 (Atheros/multi-bss)
__ath_attach: Set global_scn[1]
ACBKMinfree = 48
ACBEMinfree = 32
ACVIMinfree = 16
ACVOMinfree = 0
CABMinfree = 48
UAPSDMinfree = 0
Restoring Cal data from Flash
dfs_attach: use DFS enhancements
DFS min filter rssiThresh = 18
DFS max pulse dur = 151 ticks
ath_get_caps[4913] rx chainmask mismatch actual 3 sc_chainmak 0
ath_get_caps[4888] tx chainmask mismatch actual 3 sc_chainmak 0
wifi1: Atheros 9380: mem=0x10000000, irq=64 hw_base=0xb0000000
DFS min filter rssiThresh = 22
DFS max pulse dur = 151 ticks
DFS min filter rssiThresh = 22
DFS max pulse dur = 151 ticks
SERVD: start service [PHYINF.BAND24G-1.1]
makeVAPcmd=/etc/ath/makeVAP ap "WesternDigital" "BANDMODE=2G;CH_MODE=11NGHT40;PU REN=0;PUREG=0;AP_HIDESSID=0;AP_WMM=1;RF=RF;PRI_CH=0;BEACONINT=100;ATH_NAME=ath0; R_SHORTGI=1;"
/etc/ath/makeVAP ap WesternDigital BANDMODE=2G;CH_MODE=11NGHT40;PUREN=0;PUREG=0; AP_HIDESSID=0;AP_WMM=1;RF=RF;PRI_CH=0;BEACONINT=100;ATH_NAME=ath0;R_SHORTGI=1;
bandmode =2G
ssid =
wlanmode =11NGHT40
chan_bw =
channel =0
hidessid =0
wmm =1
puren =0
pureg =0
rf =RF
ATH_NAME =ath0
Creating ap for WesternDigital on
wlan_vap_create : enter. devhandle=0x86ef82c0, opmode=IEEE80211_M_HOSTAP, flags= 0x1
wlan_vap_create : exit. devhandle=0x86ef82c0, opmode=IEEE80211_M_HOSTAP, flags=0 x1.
VAP device ath0 created
Added ath0 mode master
DES SSID SET=WesternDigital
ieee80211_ioctl_siwmode: imr.ifm_active=131712, new mode=3, valid=1
Created ath0 mode ap for WesternDigital
/usr/sbin/updatewifistats doesn't exist
SERVD: event [WPS.SUCCESS/default]
SERVD: event [WLAN.CONNECTED/default]
SERVD: start service [PHYINF.BAND5G-1.1]
makeVAPcmd=/etc/ath/makeVAP ap "WesternDigital" "BANDMODE=5G;CH_MODE=11NAHT40;PU REN=0;PUREG=0;AP_HIDESSID=0;AP_WMM=1;RF=RF;PRI_CH=0;BEACONINT=100;ATH_NAME=ath2; R_SHORTGI=1;"
/etc/ath/makeVAP ap WesternDigital BANDMODE=5G;CH_MODE=11NAHT40;PUREN=0;PUREG=0; AP_HIDESSID=0;AP_WMM=1;RF=RF;PRI_CH=0;BEACONINT=100;ATH_NAME=ath2;R_SHORTGI=1;
bandmode =5G
ssid =
wlanmode =11NAHT40
chan_bw =
channel =0
hidessid =0
wmm =1
puren =0
pureg =0
rf =RF
ATH_NAME =ath2
Creating ap for WesternDigital on
wlan_vap_create : enter. devhandle=0x864002c0, opmode=IEEE80211_M_HOSTAP, flags= 0x1
wlan_vap_create : exit. devhandle=0x864002c0, opmode=IEEE80211_M_HOSTAP, flags=0 x1.
VAP device ath2 created
Added ath2 mode master
DES SSID SET=WesternDigital
ieee80211_ioctl_siwmode: imr.ifm_active=66176, new mode=3, valid=1
Created ath2 mode ap for WesternDigital
/usr/sbin/updatewifistats doesn't exist
SERVD: event [WPS.SUCCESS/default]
SERVD: event [WLAN.CONNECTED/default]
SERVD: start service [PHYINF.STATION24G-1.1]
SERVD: service [PHYINF.STATION24G-1.1] return error 8.
SERVD: start service [PHYINF.STATION5G-1.1]
SERVD: service [PHYINF.STATION5G-1.1] return error 8.
SERVD: start service [WIFI_ACTIVATE]
device ath0 entered promiscuous mode
br0: port 2(ath0) entering forwarding state
device ath2 entered promiscuous mode
br0: port 3(ath2) entering forwarding state
Reading topology file /var/topol ieee80211_ioctl_siwmode: imr.ifm_active=393856, new mode=3, valid=1
ogy.conf ...
IN ieee80211_ioctl_siwmode: imr.ifm_active=328320, new mode=3, valid=1
IT g_ap_setup_lo
DES SSID SET=WesternDigital
cked 0
INIT g_ap_setup_locked 0
madwifi_init:
DES SSID SET=WesternDigital
Initiating madwifi_wireless_event_init...
madwifi_init: Initiating madwifi_wireless_event_init...
Using interface ath0 with hwaddr 00:90:a9:a7:12:2b and ssid 'WesternDigital'
Using interface ath2 with hwaddr 00:90:a9:a7:12:2d and ssid 'WesternDigital'
SERVD: stop service [INFSVCS.LAN-1]
SERVD: service [INFSVCS.LAN-1] is already stopped.
SERVD: start service [INFSVCS.LAN-1]
SERVD: event [LAN-1.CONNECTED] not found!
SERVD: event [INFSVCS.LAN-1.UP/default]
SERVD: event [STATUS.READY/default]
SERVD: stop service [INFSVCS.LAN-2]
SERVD: service [INFSVCS.LAN-2] is already stopped.
SERVD: start service [INFSVCS.LAN-2]
SERVD: event [LAN-2.CONNECTED] not found!
SERVD: event [INFSVCS.LAN-2.UP] not found!
SERVD: stop service [INFSVCS.WAN-1]
SERVD: service [INFSVCS.WAN-1] is already stopped.
SERVD: start service [INFSVCS.WAN-1]
[bw_detect main.c main 981] auto detection flag is not enabled
SERVD: event [UPDATERESOLV/default]
SERVD: event [INFSVCS.WAN-1.UP] not found!
SERVD: event [UPNP.IGD.NOTIFY.WANIPCONN1] not found!
SERVD: start service [ENLAN]
detection failed ...
SERVD: event [IPV6ENABLE/default]
SERVD: event [IPV6ENABLE/default]
ADDRCONF(NETDEV_UP): br1: link is not ready
SERVD: event [IPV6ENABLE/default]
SERVD: start service [HTTP.LAN-1]
SERVD: start service [NAMERESOLV.LAN-1]
SERVD: start service [STUNNEL]
Start Stunnel service ..
SERVD: start service [DHCPS4.LAN-1]
SERVD: start service [DNS4.LAN-1]
SERVD: stop service [BWC.LAN-1]
SERVD: service [BWC.LAN-1] is already stopped.
SERVD: start service [BWC.LAN-1]
LAN-1 Start TrafSet fw policy from 0(SKB->mark only) to 4(CONNECTION->mark only plus Small packet enhance)
fic Control system ...
SERVD: start service [INET.LAN-3]
[/var/servd/INET.LAN-3_start.sh]: starting LAN-3...
LAN-3 a is link local interface.
SERVD: event [LAN-3.UP/default]
[/var/servd/INET.LAN-3_start.sh]: starting LAN-3 done !!!
SERVD: start service [ENLAN]
SERVD: service [ENLAN] is already started.
SERVD: start service [HTTP.LAN-2]
httpsetup: (LAN-2) not active.
SERVD: service [HTTP.LAN-2] return error 8.
SERVD: start service [DHCPS4.LAN-2]
SERVD: start service [DNS4.LAN-2]
SERVD: stop service [IPTOBF]
SERVD: service [IPTOBF] is already stopped.
SERVD: start service [IPTOBF]
SERVD: stop service [LLD2]
SERVD: service [LLD2] is already stopped.
SERVD: start service [LLD2]
SERVD: stop service [FTP]
SERVD: service [FTP] is already stopped.
SERVD: start service [FTP]
FTP is disabled !
SERVD: stop service [ITUNES]
SERVD: service [ITUNES] is already stopped.
SERVD: start service [ITUNES]
itunes server need mounted device!
itunes server is disabled !
SERVD: stop service [SAMBA]
SERVD: service [SAMBA] is already stopped.
SERVD: start service [SAMBA]
SERVD: start service [HTTP.WAN-1]
httpsetup: (WAN-1) not active.
SERVD: service [HTTP.WAN-1] return error 8.
SERVD: stop service [BWC.WAN-1]
SERVD: service [BWC.WAN-1] is already stopped.
SERVD: start service [BWC.WAN-1]
WAN-1 Start Traffic Control system ...
Set fw policy from 4(CONNECTION->mark only plus Small packet enhance) to 4(CONNE CTION->mark only plus Small packet enhance)
(WORKGROUP)(WesternDigital)
SMB Start (VNov 22 2012)
SERVD: stop service [INTERNET_PING]
SERVD: service [INTERNET_PING] is already stopped.
SERVD: start service [INTERNET_PING]
3317
SERVD: stop service [FIREWALL]
SERVD: service [FIREWALL] is already stopped.
SERVD: start service [FIREWALL]
[/etc/events/Ping_Helper.sh] ...
SERVD: stop service [IPTDEFCHAIN]
SERVD: service [IPTDEFCHAIN] is already stopped.
SERVD: start service [IPTDEFCHAIN]
Check Internet Connection by PING request
/proc/fastnat/min_gone: can't create
SERVD: stop service [ROUTE.STATIC]
SERVD: service [ROUTE.STATIC] is already stopped.
SERVD: start service [ROUTE.STATIC]
SERVD: stop service [ROUTE.DESTNET]
SERVD: service [ROUTE.DESTNET] is already stopped.
SERVD: start service [ROUTE.DESTNET]
SERVD: stop service [ROUTE.DOMAIN]
SERVD: service [ROUTE.DOMAIN] is already stopped.
SERVD: start service [ROUTE.DOMAIN]
SERVD: stop service [ROUTE.IPUNNUMBERED]
SERVD: service [ROUTE.IPUNNUMBERED] is already stopped.
SERVD: start service [ROUTE.IPUNNUMBERED]
SERVD: stop service [MULTICAST]
SERVD: service [MULTICAST] is already stopped.
SERVD: start service [MULTICAST]
SERVD: stop service [QOS]
SERVD: service [QOS] is already stopped.
SERVD: start service [QOS]
SERVD: service [QOS] return error 108.
SERVD: stop service [PARENTCTRL]
SERVD: service [PARENTCTRL] is already stopped.
SERVD: start service [PARENTCTRL]
SERVD: stop service [PARENTCTRLSCHL]
SERVD: service [PARENTCTRLSCHL] is already stopped.
SERVD: start service [PARENTCTRLSCHL]
=============
Disable Parental control block
killall: accesstimectl: no process killed
rm: cannot remove '/var/run/accesstimectl.pid': No such file or directory
=============
Flush relative iptables
[/etc/scripts/igmpproxy_helper.sh] flush ...
=============
SERVD: stop service [DEVICE.TIME]
SERVD: service [DEVICE.TIME] is already stopped.
SERVD: start service [DEVICE.TIME]
GMT-01:00GDT-02:00,M3.5.0/02:00:00,M10.5.0/03:00:00
Run NTP client ...
SERVD: stop service [ROUTE.DYNAMIC]
SERVD: service [ROUTE.DYNAMIC] is already stopped.
SERVD: start service [ROUTE.DYNAMIC]
SERVD: service [ROUTE.DYNAMIC] return error 108.
SERVD: start service [DEVICE]
rtlioc: not found
SERVD: stop service [MDNSRESPONDER]
SERVD: service [MDNSRESPONDER] is already stopped.
SERVD: start service [MDNSRESPONDER]
mdnsresponder server start !
SERVD: stop service [NAMERESOLV]
SERVD: service [NAMERESOLV] is already stopped.
SERVD: start service [NAMERESOLV]
SERVD: stop service [HTTP]
SERVD: service [HTTP] is already stopped.
SERVD: start service [HTTP]
SERVD: event [HTTP.UP] not found!
SERVD: stop service [INFSVCS.LAN-3]
SERVD: service [INFSVCS.LAN-3] is already stopped.
SERVD: start service [INFSVCS.LAN-3]
SERVD: event [LAN-3.CONNECTED] not found!
SERVD: event [INFSVCS.LAN-3.UP] not found!
SERVD: stop service [DNS]
SERVD: service [DNS] is already stopped.
SERVD: start service [DNS]
killall: dnsmasq: no process killed
SERVD: stop service [STUNNEL]
Stop Stunnel service ..
SERVD: start service [STUNNEL]
Start Stunnel service ..
SERVD: stop service [HW_NAT]
SERVD: service [HW_NAT] is already stopped.
SERVD: start service [HW_NAT]
SERVD: stop service [IPTFIREWALL]
SERVD: service [IPTFIREWALL] is already stopped.
SERVD: start service [IPTFIREWALL]
SERVD: stop service [IPT.WAN-2]
SERVD: start service [IPT.WAN-2]
SERVD: stop service [IPT.WAN-3]
SERVD: start service [IPT.WAN-3]
SERVD: stop service [IPT.WAN-4]
SERVD: start service [IPT.WAN-4]
SERVD: stop service [IPT.LAN-1]
/proc/fastnat/forskipsupport: can't create
SERVD: start service [IPT.LAN-1]
/proc/fastnat/forskipsupport: can't create
SERVD: stop service [IPT.LAN-2]
/proc/fastnat/forskipsupport: can't create
SERVD: start service [IPT.LAN-2]
/proc/fastnat/forskipsupport: can't create
SERVD: stop service [IPT.LAN-3]
SERVD: service [IPT.LAN-3] is already stopped.
SERVD: start service [IPT.LAN-3]
SERVD: service [IPT.LAN-3] return error 108.
SERVD: stop service [IPT.LAN-4]
SERVD: service [IPT.LAN-4] is already stopped.
SERVD: start service [IPT.LAN-4]
SERVD: service [IPT.LAN-4] return error 108.
SERVD: stop service [IPT.WAN-1]
SERVD: event [INET.DISCONNECTED/default]
[/etc/events/Ping_Helper.sh] error!!
SERVD: start service [IPT.WAN-1]
SERVD: stop service [DLNA]
SERVD: service [DLNA] is already stopped.
SERVD: start service [DLNA]
mpe_server: not found
DMS root directory : ./DMS/media
DMS config directory : ./xml
DMS description file name : dms_descr.xml
DMS upload function is supported!

========================================
NFLC SDK version 2.3.0
DMS_SMM version 2.3.0.11677
========================================
Enabled features:
----------------------------------------
XMMRR support
User agent customizations support
Subtitle support
QOS support
JPEG_SM res creation
Upload [+UP+]
XML runtime generation
Search support
FIFO mechanism for storage adding and removing enabled
Parental guidance
Interface storage filter
========================================
[/etc/events/Ping_Helper.sh] ...
Check Internet Connection by PING request
SERVD: start service [ENLAN]
SERVD: service [ENLAN] is already started.
SERVD: start service [HTTP.LAN-3]
SERVD: start service [UPNP.LAN-3]
SERVD: event [UPNP.ALIVE.LAN-3/default]
SERVD: start service [NAMERESOLV.LAN-3]
[/etc/scripts/upnp/NOTIFYAB.sh]: [ssdp:alive] [LAN-3] [br0] [fe80::290:a9ff:fea7 :122b] [1800] [inet6]...
! -f
SERVD: stop service [ROUTE6.STATIC]
SERVD: service [ROUTE6.STATIC] is already stopped.
SERVD: start service [ROUTE6.STATIC]
SERVD: stop service [ROUTE6.DYNAMIC]
SERVD: service [ROUTE6.DYNAMIC] is already stopped.
SERVD: start service [ROUTE6.DYNAMIC]
SERVD: stop service [IP6TOBF]
SERVD: service [IP6TOBF] is already stopped.
SERVD: start service [IP6TOBF]
ip6tables: No chain/target/match by that name.
ip6tables: No chain/target/match by that name.
SERVD: stop service [IP6TDEFCHAIN]
SERVD: service [IP6TDEFCHAIN] is already stopped.
SERVD: start service [IP6TDEFCHAIN]
SERVD: stop service [ROUTE.DYNAMIC]
SERVD: service [ROUTE.DYNAMIC] is already stopped.
SERVD: start service [ROUTE.DYNAMIC]
SERVD: service [ROUTE.DYNAMIC] return error 108.
SERVD: stop service [LLD2]
SERVD: start service [LLD2]
SERVD: stop service [FTP]
FTP is disabled !
SERVD: start service [FTP]
FTP is disabled !
SERVD: stop service [ITUNES]
itunes server is disabled !
SERVD: start service [ITUNES]
itunes server need mounted device!
itunes server is disabled !
SERVD: stop service [SAMBA]
kill: cannot kill pid 4193: No such process
SERVD: start service [SAMBA]
SERVD: stop service [HTTP]
SERVD: event [HTTP.DOWN] not found!
SERVD: start service [HTTP]
startup_server:IPV6, is multicast
SERVD: event [HTTP.UP] not found!
SERVD: stop service [NAMERESOLV]
SERVD: start service [NAMERESOLV]
SERVD: stop service [DLNA]
kill: cannot kill pid 4323: No such process
SERVD: start service [DLNA]
mpe_server: not found
DMS root directory : ./DMS/media
DMS config directory : ./xml
DMS description file name : dms_descr.xml
DMS upload function is supported!

========================================
NFLC SDK version 2.3.0
DMS_SMM version 2.3.0.11677
========================================
Enabled features:
----------------------------------------
XMMRR support
User agent customizations support
Subtitle support
QOS support
JPEG_SM res creation
Upload [+UP+]
XML runtime generation
Search support
FIFO mechanism for storage adding and removing enabled
Parental guidance
Interface storage filter

Flash partitions:

# ls -laR /dev/mtd*
crw-rw---- 1 root root 90, 0 Jan 1 1970 /dev/mtd0
crw-rw---- 1 root root 90, 1 Jan 1 1970 /dev/mtd0ro
crw-rw---- 1 root root 90, 2 Jan 1 1970 /dev/mtd1
crw-rw---- 1 root root 90, 20 Jan 1 1970 /dev/mtd10
crw-rw---- 1 root root 90, 21 Jan 1 1970 /dev/mtd10ro
crw-rw---- 1 root root 90, 3 Jan 1 1970 /dev/mtd1ro
crw-rw---- 1 root root 90, 4 Jan 1 1970 /dev/mtd2
crw-rw---- 1 root root 90, 5 Jan 1 1970 /dev/mtd2ro
crw-rw---- 1 root root 90, 6 Jan 1 1970 /dev/mtd3
crw-rw---- 1 root root 90, 7 Jan 1 1970 /dev/mtd3ro
crw-rw---- 1 root root 90, 8 Jan 1 1970 /dev/mtd4
crw-rw---- 1 root root 90, 9 Jan 1 1970 /dev/mtd4ro
crw-rw---- 1 root root 90, 10 Jan 1 1970 /dev/mtd5
crw-rw---- 1 root root 90, 11 Jan 1 1970 /dev/mtd5ro
crw-rw---- 1 root root 90, 12 Jan 1 1970 /dev/mtd6
crw-rw---- 1 root root 90, 13 Jan 1 1970 /dev/mtd6ro
crw-rw---- 1 root root 90, 14 Jan 1 1970 /dev/mtd7
crw-rw---- 1 root root 90, 15 Jan 1 1970 /dev/mtd7ro
crw-rw---- 1 root root 90, 16 Jan 1 1970 /dev/mtd8
crw-rw---- 1 root root 90, 17 Jan 1 1970 /dev/mtd8ro
crw-rw---- 1 root root 90, 18 Jan 1 1970 /dev/mtd9
crw-rw---- 1 root root 90, 19 Jan 1 1970 /dev/mtd9ro
/dev/mtdblock:
drwxr-xr-x 2 root root 0 Jan 1 1970 .
drwxr-xr-x 6 root root 0 Jan 1 2000 ..
brw-rw---- 1 root root 31, 0 Jan 1 1970 0
brw-rw---- 1 root root 31, 1 Jan 1 1970 1
brw-rw---- 1 root root 31, 10 Jan 1 1970 10
brw-rw---- 1 root root 31, 2 Jan 1 1970 2
brw-rw---- 1 root root 31, 3 Jan 1 1970 3
brw-rw---- 1 root root 31, 4 Jan 1 1970 4
brw-rw---- 1 root root 31, 5 Jan 1 1970 5
brw-rw---- 1 root root 31, 6 Jan 1 1970 6
brw-rw---- 1 root root 31, 7 Jan 1 1970 7
brw-rw---- 1 root root 31, 8 Jan 1 1970 8
brw-rw---- 1 root root 31, 9 Jan 1 1970 9
lrwxrwxrwx 1 root root 1 Jan 1 1970 bdcfg -> 7
lrwxrwxrwx 1 root root 1 Jan 1 1970 bootloader -> 6
lrwxrwxrwx 1 root root 1 Jan 1 1970 devconf -> 3
lrwxrwxrwx 1 root root 1 Jan 1 1970 devdata -> 2
lrwxrwxrwx 1 root root 1 Jan 1 1970 devrev1 -> 8
lrwxrwxrwx 1 root root 1 Jan 1 1970 devrev2 -> 9
lrwxrwxrwx 1 root root 2 Jan 1 1970 devrev3 -> 10
lrwxrwxrwx 1 root root 1 Jan 1 1970 flash -> 5
lrwxrwxrwx 1 root root 1 Jan 1 1970 radiocfg -> 4
lrwxrwxrwx 1 root root 1 Jan 1 1970 rootfs -> 0
lrwxrwxrwx 1 root root 1 Jan 1 1970 upgrade -> 1

Flash layout (at least that was it shows during bootup):

RedBoot partition parsing not available
No partitions found on flash bank 0
ATH serial flash !!
ath-nor0: the flash image has SEAMA header
ath-nor0: squashfs filesystem found at offset 0x001e0040
Creating 11 MTD partitions on "ath-nor0":
0x0000001e0060-0x000000b0f060 : "rootfs"
0x000000070000-0x000000ff0000 : "upgrade"
0x000000050000-0x000000060000 : "devdata"
0x000000060000-0x000000070000 : "devconf"
0x000000ff0000-0x000001000000 : "radiocfg"
0x000000000000-0x000001000000 : "flash"
0x000000000000-0x000000040000 : "bootloader"
0x000000040000-0x000000050000 : "bdcfg"
0x000000fe0000-0x000000ff0000 : "devrev1"
0x000000fd0000-0x000000fe0000 : "devrev2"
0x000000fd0000-0x000000ff0000 : "devrev3"

If you press a key during bootup, you can get into U-Boot:

ar7240> flinfo
Bank # 1: The hell do you want flinfo for??
ar7240> pci
Scanning PCI devices on bus 0
BusDevFun VendorId DeviceId Device Class Sub-Class
_____________________________________________________________
00.00.00 0x168c 0x0030 Network controller 0x80
00.01.00 0x168c 0x0030 Network controller 0x80
00.02.00 0x168c 0x0030 Network controller 0x80
00.03.00 0x168c 0x0030 Network controller 0x80
00.04.00 0x168c 0x0030 Network controller 0x80
00.05.00 0x168c 0x0030 Network controller 0x80
00.06.00 0x168c 0x0030 Network controller 0x80
00.07.00 0x168c 0x0030 Network controller 0x80
00.08.00 0x168c 0x0030 Network controller 0x80
00.09.00 0x168c 0x0030 Network controller 0x80
00.0a.00 0x168c 0x0030 Network controller 0x80
00.0b.00 0x168c 0x0030 Network controller 0x80
00.0c.00 0x168c 0x0030 Network controller 0x80
00.0d.00 0x168c 0x0030 Network controller 0x80
00.0e.00 0x168c 0x0030 Network controller 0x80
00.0f.00 0x168c 0x0030 Network controller 0x80
00.10.00 0x168c 0x0030 Network controller 0x80
00.11.00 0x168c 0x0030 Network controller 0x80
00.12.00 0x168c 0x0030 Network controller 0x80
00.13.00 0x168c 0x0030 Network controller 0x80
00.14.00 0x168c 0x0030 Network controller 0x80
00.15.00 0x168c 0x0030 Network controller 0x80
00.16.00 0x168c 0x0030 Network controller 0x80
00.17.00 0x168c 0x0030 Network controller 0x80
00.18.00 0x168c 0x0030 Network controller 0x80
00.19.00 0x168c 0x0030 Network controller 0x80
00.1a.00 0x168c 0x0030 Network controller 0x80
00.1b.00 0x168c 0x0030 Network controller 0x80
00.1c.00 0x168c 0x0030 Network controller 0x80
00.1d.00 0x168c 0x0030 Network controller 0x80
00.1e.00 0x168c 0x0030 Network controller 0x80
00.1f.00 0x168c 0x0030 Network controller 0x80
ar7240> version
U-Boot 1.1.4 (Mar 26 2012 - 21:54:50)
ar7240> bdinfo
boot_params = 0x87F6FFB0
memstart = 0x80000000
memsize = 0x08000000
flashstart = 0x9F000000
flashsize = 0x01000000
flashoffset = 0x0002FD2C
ethaddr = 00:90:A9:A7:12:2B
ip_addr = 192.168.1.1
baudrate = 115200 bps

That's how far I got. Does anyone know how to proceed to get OpenWRT up and running?
U-Boot seems to be able to load a firmware image from NFS/TFTP and boot it, maybe that's my next move ;-)

Best regards,
Patrick

Post #7

CRC

14 Sep 2013, 12:30

Now THIS is a win. I pulled down the source but didn't get a chance to look at it - then over time forgot about it again....

Great work! I'll ping a few people and see if I can nudge someone in the right direction of this info....

Post #8

EvilDevil

14 Sep 2013, 13:42

I tried to boot the ar71xx Kernel LZMA uImage (http://downloads.openwrt.org/snapshots/ … e-lzma.bin) from TFTP (had to set the IP address of the TFTP server to 192.168.1.10).
U-Boot seems to recognize the kernel, but booting it fails somehow:

ar7240> tftpboot 0x80002000 openwrt-ar71xx-generic-uImage-lzma.bin
Trying eth1
dup 1 speed AUTO(10/100/1000)
Using eth1 device
TFTP from server 192.168.1.10; our IP address is 192.168.1.1
Filename 'openwrt-ar71xx-generic-uImage-lzma.bin'.
Load address: 0x80002000
Loading: #################################################################
#################################################################
#################################################################
############
done
Bytes transferred = 1059736 (102b98 hex)
ar7240> bootm 0x80002000
## Booting image at 80002000 ...
Image Name: MIPS OpenWrt Linux-3.10.10
Created: 2013-09-11 3:58:57 UTC
Image Type: MIPS Linux Kernel Image (lzma compressed)
Data Size: 1059672 Bytes = 1 MB
Load Address: 80060000
Entry Point: 80060000
Verifying Checksum at 0x80002040 ...OK
Uncompressing Kernel Image with LZMA ... OK
No initrd
## Transferring control to Linux (at address 80060000) ...
## Giving linux memsize in bytes, 134217728
Starting kernel ...

=> Nothing happens after that

U-Boot environment:

ar7240> printenv
loadstart=0x81000000
runtimeloadstart=0x80002000
bootstart=0x9f000000
bootsize=0x40000
bootend=0x9F03FFFF
runtimestart=0x9F070000
runtimesize=0x00F80000
runtimeend=0x9FFEFFFF
envstart=0x9F040000
envend=0x9F04FFFF
bootargs=console=ttyS0,115200
bootcmd=run runtime
bootdelay=1
baudrate=115200
ethaddr=00:90:a9:a7:12:2b
serverip=192.168.1.10
update_bootloader=protect off $(bootstart) $(bootend);erase $(bootstart) $(bootend);cp.b $(loadstart) $(bootstart) $(bootsize)
update_runtime=protect off $(runtimestart) $(runtimeend);erase $(runtimestart) $(runtimeend);cp.b $(loadstart) $(runtimestart) $(runtimesize)
clean_env=protect off $(envstart) $(envend);erase $(envstart) $(envend)
runtime=bootm $(runtimestart) $(runtimeloadstart)
ipaddr=192.168.1.1
stdin=serial
stdout=serial
stderr=serial
ethact=eth0
Environment size: 803/65532 bytes

Do I need a InitRAMDisk to boot the device from TFTP? Unfortunately I'm not that familiar with U-Boot... :-/

Regards,
Patrick

Post #9

CRC

14 Sep 2013, 13:52

I'm reading through this at the moment:
http://wiki.openwrt.org/doc/techref/fla … o.find.out

comparing to this from the N600:

# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 0092f000 00010000 "rootfs"
mtd1: 00f80000 00010000 "upgrade"
mtd2: 00010000 00010000 "devdata"
mtd3: 00010000 00010000 "devconf"
mtd4: 00010000 00010000 "radiocfg"
mtd5: 01000000 00010000 "flash"
mtd6: 00040000 00010000 "bootloader"
mtd7: 00010000 00010000 "bdcfg"
mtd8: 00010000 00010000 "devrev1"
mtd9: 00010000 00010000 "devrev2"
mtd10: 00020000 00010000 "devrev3"

I'm not sure what order these are present in the flash though - you'd expect the bootloader to start at 0x0...

Looking at the raw hardware, the http://wiki.openwrt.org/toh/d-link/dir-825 looks just like the N600 - only difference being an 8Mb flash chip instead of 16Mb...

EDIT2: I wonder... If we could update the flash size in the dir-825 to match the layout of the N600, would the rest work out of the box?

(Last edited by CRC on 14 Sep 2013, 14:05)

Post #10

EvilDevil

14 Sep 2013, 14:14

Hi!

During the boot, the following message is displayed:

Creating 11 MTD partitions on "ath-nor0":
0x0000001e0060-0x000000b0f060 : "rootfs"
0x000000070000-0x000000ff0000 : "upgrade"
0x000000050000-0x000000060000 : "devdata"
0x000000060000-0x000000070000 : "devconf"
0x000000ff0000-0x000001000000 : "radiocfg"
0x000000000000-0x000001000000 : "flash"
0x000000000000-0x000000040000 : "bootloader"
0x000000040000-0x000000050000 : "bdcfg"
0x000000fe0000-0x000000ff0000 : "devrev1"
0x000000fd0000-0x000000fe0000 : "devrev2"
0x000000fd0000-0x000000ff0000 : "devrev3"

If you rearrange the partitions according to their address, you'll get this order:

0x000000000000- <overlapping everything> - 0x000001000000 : "flash"
0x000000000000-0x000000040000 : "bootloader"
0x000000040000-0x000000050000 : "bdcfg"
0x000000050000-0x000000060000 : "devdata"
0x000000060000-0x000000070000 : "devconf"
0x000000070000- <overlapping to devrev1/3> - 0x000000ff0000 : "upgrade"
0x0000001e0060-0x000000b0f060 : "rootfs"
0x000000fd0000-0x000000fe0000 : "devrev2"
0x000000fd0000-0x000000ff0000 : "devrev3"
0x000000fe0000-0x000000ff0000 : "devrev1"
0x000000ff0000-0x000001000000 : "radiocfg"

I don't think that we need to have the correct flash layout to load the kernel from TFTP to RAM and boot it, but I could be wrong :-)

The CPU is the same as in the TP-Link WDR4300 ( http://wiki.openwrt.org/toh/tp-link/tl-wdr4300), which also uses the ar71xx kernel.

Post #11

CRC

14 Sep 2013, 14:22

EvilDevil wrote:

I don't think that we need to have the correct flash layout to load the kernel from TFTP to RAM and boot it, but I could be wrong :-)

This is true

The CPU is the same as in the TP-Link WDR4300 ( http://wiki.openwrt.org/toh/tp-link/tl-wdr4300), which also uses the ar71xx kernel.

Its almost there - just a different wifi card for the 5GHz section - and 100Mbit ports instead of GigE for the ethernet switch.

If you happen to be on IRC, I'm CRCinAU in #openwrt on Freenode. I'm not an expert - but maybe we can brainstorm something.

Post #12

EvilDevil

14 Sep 2013, 14:24

Looking at the raw hardware, the http://wiki.openwrt.org/toh/d-link/dir-825 looks just like the N600 - only difference being an 8Mb flash chip instead of 16Mb...
EDIT2: I wonder... If we could update the flash size in the dir-825 to match the layout of the N600, would the rest work out of the box?

The DIR 825 revision C1 matches almost perfect (same CPU & Flash size, but Gigabit LAN).
I think the N600 does have 16 MByte Flash (according to the "flash" partition from 0x0 to 0x000001000000 => 0 to 16777216 Byte => 16 MByte)

Post #13

drdoolittle

16 Sep 2013, 18:19

as of today i also own the N600 router and would love to see a openwrt firmware as the original fw doesn't seem to support repeater mode (WDS) which i thought it would (it only supports AP mode via LAN)

as the DIR 825 seems to match except the ethernet chip, would it be possible to flash the DIR 825 fw? i wouldn't need the ethernet ports anyways

(Last edited by drdoolittle on 16 Sep 2013, 18:20)

Post #14

nv15

16 Sep 2013, 18:51

Hi, I also got a WD N600 on Friday. Already tried to flash a few different images but never succeeded. I just ordered a USB-TTL converter so that I can debug using the serial interface. I hope that it will give me some useful feedback from the device. As soon as it arrives, I would like to offer my assistance in getting OpenWRT to run.

PS: I already tried the snapshot DIR-825 c1 factory image. It was the only one that let the ethernet port LEDs flash when I inserted a cable. No network response, but at least a sign of life. With all the other images I tried the device didn't give any response at all. Maybe this could be a starting point for trying something else.

(Last edited by nv15 on 16 Sep 2013, 18:58)

Post #15

EvilDevil

16 Sep 2013, 21:59

Hello all,

thanks to the help of nebbia88 we found out that the U-Boot propably expects a SEAMA signed firmware image.
So the image needs to be handled similar to http://wiki.openwrt.org/toh/d-link/dir- … ftp.method
We tried to boot different images incl. initramfs, but they would not load because of a invalid header.

Findings so far:
Address for Flash start: 0x9F000000 (contains bootloader - do not overwrite!)
Offset for bootloader: 0x0070000 (size of bootloader + stock firmware config partitions)
=====
Address for Firmware flash: 0x9F070000 (Flash start + offset bootloader)

To flash stock firmware via tftp (file "mtd1ro" backed up from /dev/mtd1ro):
Size: 0x00F80000
tftpboot 0x81000000 mtd1ro
erase 0x9F070000 +0x00F80000
cp.b 0x81000000 0x9F070000 0x00F80000

To flash a 8 MB openwrt image:
Size OpenWrt 8MB: 0x007c0000
tftpboot 0x81000000 openwrt-ar71xx-generic-tl-wdr3500-v1-squashfs-factory.bin
erase 0x9F070000 +0x007c0000
cp.b 0x81000000 0x9F070000 0x007c0000

I also tried to create a fimrware image which is signed using SEAMA(included in the WD GPL source):
Before that, I build openwrt trunk and grabbed the resulting openwrt-ar71xx-generic-root.squashfs and openwrt-ar71xx-generic-vmlinux.lzma and put it in ~/openwrt

[fedora@fedora12 tools]$ buildimg/packimgs -o ~/openwrt/raw.img -i ~/openwrt/openwrt-ar71xx-generic-vmlinux.lzma -i ~/openwrt/openwrt-ar71xx-generic-root.squashfs 

[fedora@fedora12 tools]$ seama/seama -i ~/openwrt/raw.img -m dev=/dev/mtdblock/1 -m type=firmware

[fedora@fedora12 tools]$ seama/seama -s ~/openwrt/web.img -i ~/openwrt/raw.img.seama -m signature=wrgnd16_wd_db600

[fedora@fedora12 seama]$ ./seama -d  ~/openwrt/web.img 
FILE - /home/fedora/openwrt/web.img (3014792 bytes)
SEAMA ==========================================
  magic      : 5ea3a417
  meta size  : 28 bytes
  meta data  : signature=wrgnd16_wd_db600
  meta data  : 
  image size : 0 bytes
SEAMA ==========================================
  magic      : 5ea3a417
  meta size  : 36 bytes
  meta data  : dev=/dev/mtdblock/1
  meta data  : type=firmware
  meta data  : 
  meta data  : 
  image size : 3014688 bytes
  checksum   : 2A10F87DADD15363034A2D8D586925CE
  digest     : 2A10F87DADD15363034A2D8D586925CE
================================================

Stock firmware SEAMA signature:

[fedora@fedora12 tools]$ seama/seama -d ~/My_Net_N600_1.04.16.bin 
FILE - /home/fedora/My_Net_N600_1.04.16.bin (11137160 bytes)
SEAMA ==========================================
  magic      : 5ea3a417
  meta size  : 28 bytes
  meta data  : signature=wrgnd16_wd_db600
  meta data  : 
  image size : 0 bytes
SEAMA ==========================================
  magic      : 5ea3a417
  meta size  : 36 bytes
  meta data  : dev=/dev/mtdblock/1
  meta data  : type=firmware
  meta data  : 
  meta data  : 
  image size : 11137056 bytes
  checksum   : 5E2D27B9CB99B0DD212C93C2A7F159D9
  digest     : 5E2D27B9CB99B0DD212C93C2A7F159D9
================================================

Unfortunately, this still does not work:

ar7240> tftpboot 0x81000000 web.img
Trying eth1
dup 1 speed AUTO(10/100/1000)
Using eth1 device
TFTP from server 192.168.1.10; our IP address is 192.168.1.1
Filename 'web.img'.
Load address: 0x81000000
Loading: #################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
####
done
Bytes transferred = 3014792 (2e0088 hex)
ar7240> bootm 0x81000000
## Booting image at 81000000 ...
Verifying Checksum ...
csum:
signature=wrgnd1
afterMD5_we_get_digest:
▒▒ُ▒▒ ▒▒▒B~
Bad Header Checksum.

I'm quite stuck - any ideas? ;-)

Regards,
Patrick

Post #16

nv15

16 Sep 2013, 22:43

Hi EvilDevil,

I analyzed the firmware image that WD offers as a download. It has 2 SEAMA headers. When I flash it by using the HTTP upload dialog in the WD bootloader, I can afterwards enable telnet, log in and read /dev/mtd1. The image I get from there only has 1 SEAMA header. md5sums of the relevant ~11MB match. So what you could try is to cut the first header (40 bytes in my case) and try booting the image again.

I did a lot of copying and patching with dd and hexdump to get the SEAMA headers. If you still get the checksum error, I can post a few commands that I used to create my images. They are at least accepted by the HTTP firmware upload dialog.

Greetings, nv15

Post #17

EvilDevil

16 Sep 2013, 23:40

nv15 wrote:

Hi EvilDevil,
I analyzed the firmware image that WD offers as a download. It has 2 SEAMA headers. When I flash it by using the HTTP upload dialog in the WD bootloader, I can afterwards enable telnet, log in and read /dev/mtd1. The image I get from there only has 1 SEAMA header. md5sums of the relevant ~11MB match. So what you could try is to cut the first header (40 bytes in my case) and try booting the image again.
I did a lot of copying and patching with dd and hexdump to get the SEAMA headers. If you still get the checksum error, I can post a few commands that I used to create my images. They are at least accepted by the HTTP firmware upload dialog.
Greetings, nv15

Good idea - I could try that tomorrow after work. It's basically?

dd if=myimage of=myimage2 skip=40b

Regards,
Patrick

Post #18

nv15

16 Sep 2013, 23:51

Either of the following. The second command is a lot faster.

dd if=image_in of=image_out bs=40 skip=1
tail -c $(( $(stat -c %s image_in) - 40)) image_in > image_out

Good luck.

(Last edited by nv15 on 16 Sep 2013, 23:56)

Post #19

CRC

17 Sep 2013, 06:10

This progress is beyond me - but it seems exciting.

I'm happy to help out in whatever way I can - if I can...

Post #20

EvilDevil

17 Sep 2013, 14:49

nv15 wrote:

Either of the following. The second command is a lot faster.
dd if=image_in of=image_out bs=40 skip=1
tail -c $(( $(stat -c %s image_in) - 40)) image_in > image_out
Good luck.

Another, less invasive methode: Load the complete image to RAM and let it boot from start-address + 40b

Post #21

EvilDevil

17 Sep 2013, 18:11

Ok, new status:
Same image (web.img) from last try, I just adjusted the start address by 40 byte (0x28):

ar7240> tftpboot 0x81000000 web.img
Trying eth1
enet1 port4 up
dup 1 speed AUTO(10/100/1000)
Using eth1 device
TFTP from server 192.168.1.10; our IP address is 192.168.1.1
Filename 'web.img'.
Load address: 0x81000000
Loading: #################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
####
done
Bytes transferred = 3014792 (2e0088 hex)
ar7240> bootm 0x81000028
## Booting image at 81000028 ...
Verifying Checksum ...
Uncompressing SEAMA linux.lzma ... OK
do_boot_linux entry = 00000000
## Transferring control to Linux (at address 00000000) ...
## Giving linux memsize in bytes, 134217728
Starting kernel ...

And again... nothing happens after that :-(

Same behaviour when flashing the image:

ar7240> tftpboot 0x81000000 web.img
Trying eth1
enet1 port4 up
dup 1 speed AUTO(10/100/1000)
Using eth1 device
TFTP from server 192.168.1.10; our IP address is 192.168.1.1
Filename 'web.img'.
Load address: 0x81000000
Loading: #################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
####
done
Bytes transferred = 3014792 (2e0088 hex)
ar7240> erase 0x9F070000 +0x2E0060
Erase Flash from 0x9f070000 to 0x9f35ffff in Bank # 1
First 0x7 last 0x35 sector size 0x10000 53
Erased 47 sectors
ar7240> cp.b 0x81000028 0x9F070000 0x2E0060
Copy to Flash... write addr: 9f070000
done
ar7240> reset
Resetting...
U-Boot 1.1.4 (Mar 26 2012 - 21:54:50)
SVN revision: 51
Target board: WRG-ND16
DRAM:
sri
Wasp 1.2
wasp_ddr_initial_config(255): (32bit) ddr2 init
128 MB
Top of RAM usable for U-Boot at: 88000000
Reserving 244k for U-Boot at: 87fc0000
Reserving 192k for malloc() at: 87f90000
Reserving 44 Bytes for Board Info at: 87f8ffd4
Reserving 36 Bytes for Global Data at: 87f8ffb0
Reserving 128k for boot params() at: 87f6ffb0
Stack Pointer at: 87f6ff98
Now running in RAM - U-Boot at: 87fc0000
id read 0x100000ff
flash size 16 MB, sector count = 256
Flash: 16 MB
pci_init_board: PCIe PLL not set for 40MHz refclk
In: serial
Out: serial
Err: serial
Net: ag934x_enet_initialize...
wasp reset mask:c03300
WASP ----> S27 PHY
: cfg1 0x5 cfg2 0x7114
eth0: 00:90:a9:a7:12:2b
s27 reg init
MEGA: athrs27_link_down all port...
MEGA: athrs27_link_down all port...
eth0 up
WASP ----> S27 PHY
: cfg1 0xf cfg2 0x7214
eth1: 00:90:a9:a7:12:2c
s27 reg init lan
ATHRS27: resetting s27
ATHRS27: s27 reset done
MEGA: athrs27_link_down all port...
athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10
athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :50
athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :50
athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :10
athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
MEGA: athrs27_link_down all port...
eth1 up
eth0, eth1
Hit any key to stop autoboot: 0
## Booting image at 9f070000 ...
Verifying Checksum ...
Uncompressing SEAMA linux.lzma ... OK
do_boot_linux entry = 80002000
## Transferring control to Linux (at address 00000000) ...
## Giving linux memsize in bytes, 134217728
Starting kernel ...

Regards,
Patrick

(Last edited by EvilDevil on 17 Sep 2013, 18:21)

Post #22

drdoolittle

24 Sep 2013, 20:27

any news on this issue? really would love to poke around with my N600 but don't have a ttl conv

Post #23

CRC

25 Sep 2013, 00:31

Yeah - I'm kinda chomping at the bit too Any updates?

Post #24

EvilDevil

25 Sep 2013, 21:11

Hi,

unfortunately not, I'm still stuck... :-/

Regards,
Patrick

Post #25

juhosg

25 Sep 2013, 21:15

https://dev.openwrt.org/changeset/38076