726 (edited by daniel1919 2012-07-05 15:21:26)

Re: Is this router based on the infineon danube?

Hi!
I have a Dartybox(Bewan?) ARV4519PW.
By following some of the posts here i managed to get into the router flash by using UART,but it only gives me some info on the router,which looks like a normal log to me..i understand that there is a hidden boot-loader in the CPU since i don't get the press space 3 times to enter command mode,if so how do i get into this hidden bootloader.
Thanks,
  Daniel.

Boot log

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2012.07.05 16:02:41 =~=~=~=~=~=~=~=~=~=~=~=

ROM VER: 1.0.3
CFG 01
Read ÿ
ROM VER: 1.0.3
CFG 01
Read EEPROMX
 X





   _                              
  | |__   _____      ____ _ _ __  
  | '_ \ / _ \ \ /\ / / _` | '_ \ 
  | |_) |  __/\ V  V / (_| | | | |
  |_.__/ \___| \_/\_/ \__,_|_| |_|

Portions Copyright (c) 2005-2008 bewan systems
   www.bewan.com


Parameters:
  Product         : A50F01
  Product family  : A50F00
  Flash size      : 1000000
  DRAM size       : 2000000
  Ethernet        : MII
  LAN MAC address : 00:0c:c3:44:5f:65
  WAN MAC address : 00:0c:c3:44:5f:65
  Dual bank boot  : yes
  Reset           : no
  Pairing         : no
  Serial number   : 940000044808692
  WEP key         : GUWP665ER4LW2
  Loader version  : 13400
  Capabilities    : 80000001


Found valid bootable partition 0:
  Copyright (c) 2006-2009 BeWAN Systems
  Arcadyan ibox Darty
  A50F01
  2010-09-24-11:57:07
  A50F01-darty23-35357.bin

Found valid bootable partition 1:
  Copyright (c) 2006-2009 BeWAN Systems
  Arcadyan ibox Darty
  A50F01
  2010-05-17-11:19:35
  A50F01-darty22-32433.bin

Booting from partition 1 in flash.

Loading: Linux Kernel Image

Load address = 80000000
Uncompressing Linux....................
done, booting the kernel.

start addr = 802C9000
memsize=31
TODO: chip version
Linux version 2.6.16bewan (build@bewan.com) (gcc version 3.3.4) #1
Reserving memory for CP1 @0xa1f00000
CPU revision is: 00019641
PCI: Probing PCI hardware on host bus 0.
Board with an external oscillator
Determined physical RAM map:
 memory: 01f00000 @ 00000000 (usable)
User-defined physical RAM map:
 memory: 01f00000 @ 00000000 (usable)
Built 1 zonelists
Kernel command line: nofpu console=ttyS0,115200n1 bewan_boot=flash1 bewan_fs_addr=0x8f3000 bewan_fs_size=0x6d2000 mem=31M 
Primary instruction cache 16kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 16kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
Cache parity protection disabled
PID hash table entries: 128 (order: 7, 2048 bytes)
mips_hpt_frequency:166666667
r4k_offset: 00196e6a(1666666)
Using 166.667 MHz high precision timer.
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 27792k/31744k available (2352k kernel code, 3952k reserved, 497k data, 156k init, 0k highmem)
Mount-cache hash table entries: 512
Checking for 'wait' instruction...  available.
NET: Registered protocol family 16
DANUBE MIPS24KEc MPS mailbox driver, Version 1.1.0
(c) Copyright 2006, Infineon Technologies AG
IFX_MPS: using proc fs
squashfs: version 3.0 (2006/03/15) Phillip Lougher
Squashfs 2.2 with LZMA support
devfs: 2004-01-31 Richard Gooch (rgooch@atnf.csiro.au)
devfs: boot_options: 0x1
Initializing Cryptographic API
io scheduler noop registered (default)
cgu: misc_register on minor = 63
gptu: totally 6 16-bit timers/counters
gptu: misc_register on minor 62
gptu: succeeded to request irq 118
gptu: succeeded to request irq 119
gptu: succeeded to request irq 120
gptu: succeeded to request irq 121
gptu: succeeded to request irq 122
gptu: succeeded to request irq 123
IFX MEI Version 3.04.00
Danube Port Settings

Danube Port Initialization
ttyS0 at MMIO 0xbe100c00 (irq = 9) is a DANUBEASC
ttyS1 at MMIO 0xbe100400 (irq = 2) is a DANUBEASC
RAMDISK driver initialized: 16 RAM disks of 8192K size 1024 blocksize
loop: loaded (max 8 devices)
PPP generic driver version 2.4.2
NET: Registered protocol family 24
danube ETOP driver loaded!
danube_sw : led_thread_handler: 
ppe: ATM init succeeded (firmware version 1.1.0.2.1.13
Danube IAD flash device: 0x1000000 at 0xb0000000
Danube IAD FLASH: Found 1 x16 devices at 0x0 in 16-bit bank
 Intel/Sharp Extended Query Table at 0x0031
Using buffer write method
cfi_cmdset_0001: Erase suspend on write enabled
Creating 5 MTD partitions on "Danube IAD FLASH":
0x00000000-0x01000000 : "Flash"
0x00000000-0x00020000 : "Loader"
0x00020000-0x00040000 : "Config"
0x00820000-0x01000000 : "Firmware"
0x00040000-0x00820000 : "OldFirmware"
bootpart=2
Creating 1 MTD partitions on "Danube IAD FLASH":
0x008f3000-0x00fc5000 : "ART"
rootdev = 31,5
dwc_otg: version 2.40a 10-APR-2006
usb0: Ethernet Gadget, version: Equinox 2004
usb0: using dwc_otg_pcd, OUT ep2 IN ep1 STATUS ep3
usb0: MAC 82:11:0d:d2:ea:0c
usb0: HOST MAC 1a:8c:52:53:9a:d4
usb0: RNDIS ready
LED and Buttons driver: v2.6.0
NET: Registered protocol family 2
IP route cache hash table entries: 256 (order: -2, 1024 bytes)
TCP established hash table entries: 1024 (order: 0, 4096 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
ip_conntrack version 2.4 (248 buckets, 1984 max) - 220 bytes per conntrack
ip_tables: (C) 2000-2006 Netfilter Core Team
arp_tables: (C) 2002 David S. Miller
TCP bic registered
Initializing IPsec netlink socket
NET: Registered protocol family 1
NET: Registered protocol family 17
NET: Registered protocol family 15
Ebtables v2.0 registered
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
Ethernet Multiplexer Support v1.0 Christophe Piel (c) 2006 BeWAN systems
VFS: Mounted root (squashfs filesystem) readonly.
Mounted devfs on /dev
Freeing unused kernel memoryinit started:  BusyBox v1.00 multi-call binary 
Starting pid 119, console /dev/tts/0: '/etc/rc' 
Algorithmics/MIPS FPU Emulator v1.5
Software Watchdog Timer: 0.05, timer margin: 120 sec.
Thu Jan  1 00:00:00 UTC 2009
 _                              
| |__   _____      ____ _ _ __  
| '_ \ / _ \ \ /\ / / _` | '_ \ 
| |_) |  __/\ V  V / (_| | | | |
|_.__/ \___| \_/\_/ \__,_|_| |_|
Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/drv_tapi
IFX TAPI, version 3.5.2.5, (c) 2007 Infineon Technologies

Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/drv_vmmc
IFX VMMC device driver, version 1.1.6.5, (c) 2007 Infineon Technologies AG

Hotplug: SUBSYSTEM=block ACTION=mount DEVPATH=/block/ram0
Got an USB block device at /block/ram0
Not an add/remove/umount action for /block/ram0. Exiting.
<4>drv_daa: module license 'unspecified' taints kernel.
Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/drv_daa
TAPI DAA driver for Si3050, version 1.0.0, (c) 2007, Infineon Technologies AG

Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/tz
Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/fat
Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/vfat
Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/usbcore
Hotplug: SUBSYSTEM=drivers ACTION=add DEVPATH=/bus/usb/drivers/usbfs
<6>usbcore: registered new driver usbfs
Hotplug: SUBSYSTEM=drivers ACTION=add DEVPATH=/bus/usb/drivers/hub
usbcore: registered new driver hub
Hotplug: SUBSYSTEM=drivers ACTION=add DEVPATH=/bus/usb/drivers/usb
Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/scsi_mod
SCSI subsystem initialized
Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/usb_storage
Initializing USB Mass Storage driver...
Hotplug: SUBSYSTEM=drivers ACTION=add DEVPATH=/bus/usb/drivers/usb-storage
usbcore: registered new driver usb-storage
USB Mass Storage support registered.
Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/sd_mod
Hotplug: SUBSYSTEM=drivers ACTION=add DEVPATH=/bus/scsi/drivers/sd
Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/ehci_hcd
Hotplug: SUBSYSTEM=drivers ACTION=add DEVPATH=/bus/pci/drivers/ehci_hcd
PCI: Enabling device 0000:00:0f.2 (0000 -> 0002)
plat_dev_init(803c4400)
ehci_hcd 0000:00:0f.2: EHCI Host Controller
Hotplug: SUBSYSTEM=usb_host ACTION=add DEVPATH=/class/usb_host/usb_host1
ehci_hcd 0000:00:0f.2: new USB bus registered, assigned bus number 1
ehci_hcd 0000:00:0f.2: irq 26, io mem 0x18010000
ehci_hcd 0000:00:0f.2: USB 2.0 started, EHCI 1.00, driver 10 Dec 2004
Hotplug: SUBSYSTEM=usb ACTION=add DEVPATH=/devices/pci0000:00/0000:00:0f.2/usb1
usb usb1: configuration #1 chosen from 1 choice
Hotplug: SUBSYSTEM=usb ACTION=add DEVPATH=/devices/pci0000:00/0000:00:0f.2/usb1/1-0:1.0
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 4 ports detected
vendor id : 0000, product : 0000, usbifclass : 09, interface : 0
0000 0000 09
Hotplug: SUBSYSTEM=usb_device ACTION=add DEVPATH=/class/usb_device/usbdev1.1
vendor id : , product : , usbifclass : , interface : 1

Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/uhci_hcd
USB Universal Host Controller Interface driver v2.3
Hotplug: SUBSYSTEM=drivers ACTION=add DEVPATH=/bus/pci/drivers/uhci_hcd
PCI: Enabling device 0000:00:0f.0 (0000 -> 0001)
plat_dev_init(803c4c00)
uhci_hcd 0000:00:0f.0: UHCI Host Controller
Hotplug: SUBSYSTEM=usb_host ACTION=add DEVPATH=/class/usb_host/usb_host2
uhci_hcd 0000:00:0f.0: new USB bus registered, assigned bus number 2
uhci_hcd 0000:00:0f.0: irq 26, io base 0x1ae00000
Hotplug: SUBSYSTEM=usb ACTION=add DEVPATH=/devices/pci0000:00/0000:00:0f.0/usb2
vendor id : , product : , usbifclass : , interface : 2

usb usb2: configuration #1 chosen from 1 choice
Hotplug: SUBSYSTEM=usb ACTION=add DEVPATH=/devices/pci0000:00/0000:00:0f.0/usb2/2-0:1.0
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 2 ports detected
Hotplug: SUBSYSTEM=usb_device ACTION=add DEVPATH=/class/usb_device/usbdev2.1
PCI: Enabling device 0000:00:0f.1 (0000 -> 0001)
plat_dev_init(803c4800)
uhci_hcd 0000:00:0f.1: UHCI Host Controller
Hotplug: SUBSYSTEM=usb_host ACTION=add DEVPATH=/class/usb_host/usb_host3
uhci_hcd 0000:00:0f.1: new USB bus registered, assigned bus number 3
uhci_hcd 0000:00:0f.1: irq 26, io base 0x1ae00020
Hotplug: SUBSYSTEM=usb ACTION=add DEVPATH=/devices/pci0000:00/0000:00:0f.1/usb3
vendor id : , product : , usbifclass : , interface : 3

usb usb3: configuration #1 chosen from 1 choice
Hotplug: SUBSYSTEM=usb ACTION=add DEVPATH=/devices/pci0000:00/0000:00:0f.1/usb3/3-0:1.0
vendor id : 0000, product : 0000, usbifclass : 09, interface : 0
0000 0000 09
hub 3-0:1.0: USB hub found
hub 3-0:1.0: 2 ports detected
vendor id : 0000, product : 0000, usbifclass : 09, interface : 0
0000 0000 09
Hotplug: SUBSYSTEM=usb_device ACTION=add DEVPATH=/class/usb_device/usbdev3.1
Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/x10
x10: X10 DEV module v2.1.3 (wsh@sprintmail.com)
x10: $Id: dev.c,v 1.22 2005/03/27 04:39:26 root Exp root $
x10: X10 driver successfully loaded
Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/firmware_class
Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/videodev
Linux video capture interface: v1.00
Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/gspca
Hotplug: SUBSYSTEM=drivers ACTION=add DEVPATH=/bus/usb/drivers/gspca
usbcore: registered new driver gspca
../user/gspca/gspca_core.c: gspca driver 01.00.20 registered
build router.conf from /etc/flash/router.diff
/etc/init.d/syslog start
/etc/eom.d/update-config
/etc/init.d/dsl start
Using /lib/modules/2.6.16bewan/extra/drv_dsl_cpe_api-3.20.5.1/dsl_cpe_api.ko
Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/dsl_cpe_api


Infineon CPE API Driver version: DSL CPE API V3.20.5.1
modprobe: module ctlmeth not found.
modprobe: failed to load module ctlmeth
/etc/init.d/interface start LANEthernetInterface 1
/etc/init.d/switch stop 1
/etc/init.d/phy stop 1 1
using the specified MII index 19.
power down...
/etc/init.d/phy stop 1 2
using the specified MII index 18.
power down...
/etc/init.d/phy stop 1 3
using the specified MII index 17.
power down...
/etc/init.d/phy stop 1 4
using the specified MII index 16.
power down...
danube_sw : danube_switch_open: eth0
danube_sw : open_rx_dma: eth0
/etc/init.d/switchvlan nothing 1
/etc/init.d/switchigmp start 1
igmpctl : disabling IGMP snooping!
Setting Hardware IGMP Snooping Enable ........................... [ HISE ] : Off
Setting Snooping Control Packet Actions ......................... [ SCPA ] : 0x1
igmpctl : enable IGMP snooping !
Setting Snooping Control Packet Actions ......................... [ SCPA ] : 0x0
Setting Hardware IGMP Snooping Enable ........................... [ HISE ] : On
Setting IGMP/MLD Trap Enable .................................... [ IMTE ] : 0x3f
modprobe: module ctlmusb not found.
modprobe: failed to load module ctlmusb
/etc/init.d/interface start LANUSBInterface 1
wireless config : atheros
/etc/init.d/wifi.d/wifi start 1
Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/cn
Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/ath_hal
ath_hal: 0.9.14.25 (AR5212, AR5416, RF5111, RF5112, RF2413, RF5413, DEBUG)
Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/ath_dfs
ath_dfs: Version 2.0.0
Copyright (c) 2005-2006 Atheros Communications, Inc. All Rights Reserved

DS max rate = 0 kbps
US max rate = 0 kbps
DS payload rate = 0 kbps
US payload rate = 0 kbps
Local CRC = 0
Remote CRC = 0
Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/wlan
wlan: 0.8.4.2 (Atheros/multi-bss)
Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/ath_rate_atheros
ath_rate_atheros: Version 2.0.1
Copyright (c) 2001-2004 Atheros Communications, Inc, All Rights Reserved
Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/ath_pci
ath_pci: 0.9.4.5 (Atheros/multi-bss)
ath_pci: CR-LSDK-1.3.1.71
Hotplug: SUBSYSTEM=drivers ACTION=add DEVPATH=/bus/pci/drivers/ath_pci
PCI: Enabling device 0000:00:0c.0 (0000 -> 0002)
plat_dev_init(81051000)
Hotplug: SUBSYSTEM=net ACTION=add DEVPATH=/class/net/wifi0
wifi0: 11b rates: 1Mbps 2Mbps 5.5Mbps 11Mbps
wifi0: 11g rates: 1Mbps 2Mbps 5.5Mbps 11Mbps 6Mbps 9Mbps 12Mbps 18Mbps 24Mbps 36Mbps 48Mbps 54Mbps
wifi0: mac 7.8 phy 4.5 radio 5.6
wifi0: Atheros 5212: mem=0x18000000, irq=95 hw_base=0xb8000000
Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/wlan_xauth
Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/wlan_ccmp
Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/wlan_tkip
Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/wlan_wep
Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/wlan_acl
Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/wlan_scan_ap
Hotplug: SUBSYSTEM=net ACTION=add DEVPATH=/class/net/ath0
/etc/init.d/wifi.d/wifi start 2
Hotplug: SUBSYSTEM=net ACTION=add DEVPATH=/class/net/ath1
modprobe: module ctlmatm not found.
modprobe: failed to load module ctlmatm
/etc/init.d/interface start ATMEthernetInterface 1
/etc/init.d/atm start 1
/bin/atmcfg atm1 -grpreq 1 1
/bin/atmcfg atm1 -flowset 0 0 0 3 0 0 0 1
/bin/atmcfg atm1 -vccopen 8 35 0 llc brip
/etc/init.d/interface nothing ATMEthernetInterface 2
/etc/init.d/interface nothing ATMEthernetInterface 3
/etc/init.d/interface nothing ATMEthernetInterface 4
/etc/init.d/interface nothing ATMEthernetInterface 5
/etc/init.d/autodslam start auto-stop
/etc/init.d/lan start 1
Hotplug: SUBSYSTEM=net ACTION=add DEVPATH=/class/net/lan1
/etc/init.d/lanif start 1 all
/etc/init.d/lanintf start lan1 eth0
danube_sw : switch_ethtool_ioctl: eth0
device eth0 entered promiscuous mode
/etc/init.d/lanintf start lan1 usb0
device usb0 entered promiscuous mode
/etc/init.d/lanintf start lan1 ath0
device ath0 entered promiscuous mode
/etc/init.d/lanintf start lan1 ath1
danube_sw : switch_ethtool_ioctl: eth0
device ath1 entered promiscuous mode
/etc/init.d/shaping nothing
/etc/init.d/lanip start 1
/etc/config.default/ip-up-dhcp lan1 192.168.1.254
lan1: port 4(ath1) entering listening state
lan1: port 3(ath0) entering listening state
lan1: port 1(eth0) entering listening state
/etc/init.d/host start
/etc/init.d/igmp start
/etc/init.d/inittab
/var/etc/config/inittab.d/miniupnpd restart
Starting miniupnpd
/etc/init.d/inittab
/etc/init.d/ipsec restart all
/etc/init.d/landhcp start 1
/etc/init.d/racoon stop
/etc/init.d/wifi.d/lanacl start 1
/etc/init.d/passthrough start 1
/etc/init.d/lan nothing 2
/etc/init.d/lan nothing 3
/etc/init.d/lan nothing 4
/etc/init.d/lan nothing 5
/etc/init.d/users start
/etc/init.d/unix start
/etc/init.d/unixusers start 1
/etc/init.d/unixusers start 2
/etc/init.d/pureftpd start
/etc/init.d/webusers start
rm: cannot remove `/var/etc/config/.naspasswd': No such file or directory
rm: cannot remove `/var/etc/config/.nasaudiopasswd': No such file or directory
/etc/init.d/unixadmin start
/etc/init.d/time start
/etc/init.d/mdns start
/etc/init.d/rmthttp start
/etc/init.d/wan start 1
Hotplug: SUBSYSTEM=net ACTION=add DEVPATH=/class/net/wan1
/etc/init.d/interface start WANConnectionDevice 1
/etc/init.d/wannet start 1
/etc/init.d/wanbr nothing 1
/etc/init.d/wanip nothing 1
/etc/init.d/wanppp start 1
/etc/init.d/firewall start 1
lan1: port 4(ath1) entering learning state
lan1: port 3(ath0) entering learning state
lan1: port 1(eth0) entering learning state
/etc/init.d/ports start 1
/etc/init.d/wan start 2
Hotplug: SUBSYSTEM=net ACTION=add DEVPATH=/class/net/wan2
/etc/init.d/interface start WANConnectionDevice 2
/etc/init.d/wannet start 2
/etc/init.d/wanbr start 2
wan2: dev_set_promiscuity(master, 1)
device atm1 entered promiscuous mode
device wan2 entered promiscuous mode
/etc/init.d/wanip nothing 2
/etc/init.d/wanppp nothing 2
/etc/init.d/firewall start 2
/etc/init.d/ports nothing 2
/etc/init.d/wan nothing 3
/etc/init.d/wan nothing 4
/etc/init.d/wan nothing 5
/etc/init.d/qos start all
/etc/init.d/shaping nothing
/etc/init.d/dhcp start all
/etc/init.d/dhcpd nothing all
/etc/init.d/dhcrelay nothing all
/etc/init.d/hbrdhcp start all
/etc/init.d/dnsmasq start all
/etc/init.d/dnsmasq start all
/etc/init.d/adddnsmasq start
/etc/init.d/pppd start all
/etc/init.d/dhclient start all
/etc/init.d/wifi.d/hostapd start all
/etc/init.d/wifi.d/wsccmd start all
/etc/init.d/wifi.d/wpa_supplicant start all
/etc/init.d/wifi.d/easyp start
Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/pbcbutton
Hotplug: SUBSYSTEM=misc ACTION=add DEVPATH=/class/misc/pbcbutton
/etc/init.d/inittab
/etc/init.d/pptp stop
/etc/init.d/pptp stop
/etc/init.d/openl2tp stop
/etc/init.d/openl2tp stop
lan1: topology change detected, propagating
lan1: port 4(ath1) entering forwarding state
br_change_link(ath1): 0 -> 1
lan1: topology change detected, propagating
lan1: port 3(ath0) entering forwarding state
br_change_link(ath0): 0 -> 1
lan1: topology change detected, propagating
lan1: port 1(eth0) entering forwarding state
br_change_link(eth0): 0 -> 1
/etc/init.d/ipsec start all
/etc/init.d/fwrules start
/etc/init.d/iptables start
/etc/init.d/ebtables start
/etc/init.d/routes start
/etc/init.d/mirror nothing
/etc/init.d/upnp start
/etc/init.d/dyndns start
/etc/init.d/dyndns nothing 0
/etc/init.d/phy start 1 1
using the specified MII index 19.
resetting the transceiver...
restarting autonegotiation...
/etc/init.d/phy start 1 2
using the specified MII index 18.
resetting the transceiver...
restarting autonegotiation...
/etc/init.d/phy start 1 3
using the specified MII index 17.
resetting the transceiver...
restarting autonegotiation...
/etc/init.d/phy start 1 4
using the specified MII index 16.
resetting the transceiver...
restarting autonegotiation...
/etc/init.d/inittab
rc completed
Starting pid 1750, console /dev/null: '/sbin/syslogd' 
Starting pid 1751, console /dev/null: '/sbin/klogd' 
Starting pid 1752, console /dev/null: '/bin/dnsmasq-2' 
Starting pid 1753, console /dev/null: '/sbin/igmpproxyd' 
Starting pid 1754, console /dev/null: '/bin/mDNSResponderPosix' 
Starting pid 1755, console /dev/null: '/bin/miniupnpd' 
Starting pid 1756, console /dev/null: '/bin/pairingd' 
Starting pid 1757, console /dev/null: '/bin/pppd' 
Starting pid 1758, console /dev/console: '/bin/resetd' 
Starting pid 1759, console /dev/null: '/bin/upnpd' 
Starting pid 1760, console /dev/console: '/bin/wdgd' 
Starting pid 1761, console /dev/null: '/bin/ash' 
Software Watchdog Timer: set margin to 40 sec.
Hotplug: SUBSYSTEM=module ACTION=add DEVPATH=/module/fuse
fuse init (API version 7.8)
fuse distribution version: 2.6.5
Hotplug: SUBSYSTEM=misc ACTION=add DEVPATH=/class/misc/fuse
/etc/init.d/upgd nothing
/etc/init.d/inetd start
/etc/init.d/http start
/etc/init.d/htpwd start
/etc/init.d/tr069 nothing
/etc/init.d/usbdevices
/etc/init.d/voip start
br_change_link(ath0): 1 -> 0
lan1: port 3(ath0) entering disabled state
lan1: port 3(ath0) entering listening state
/etc/init.d/bluetooth nothing
/etc/init.d/host start
Load functions
Main loop 1
isJobInQueue( )
startServices
/etc/init.d/userscreatedir start
/etc/init.d/usersdir start 1
/etc/init.d/usersdir start 2
/etc/init.d/mediafs restart
/etc/init.d/upnpav restart
/etc/init.d/inittab
Reloading /etc/inittab 
Starting pid 2081, console /dev/console: '/bin/asterisk' 
Starting pid 2083, console /dev/null: '/sbin/inetd' 
Starting pid 2084, console /dev/null: '/bin/msdmount' 
Starting pid 2085, console /dev/null: '/bin/ushare' 
Starting pid 2082, console /dev/console: '/bin/thttpd' 
msdmount V1.0, copyright (c) BeWAN systems (mpt=/var/media, c=/etc/config/msdmount.conf, d=0, m=1400)
/etc/init.d/inittab
Reloading /etc/inittab 
/etc/init.d/upnpav nothing
/etc/init.d/pureftpdserver start
lan1: port 3(ath0) entering learning state
/etc/init.d/obexpush nothing4
isJobInQueue( )
Unlocking
/etc/init.d/webcam start
usbcore: registered new driver usblp
drivers/usb/class/usblp.c: v0.13: USB Printer Device Class driver
Sanity check start
/var/etc/config/inittab.d/tinyproxy start
Starting Tinyproxy
/etc/init.d/adddyndns start
/etc/init.d/adddyndns start 1
lan1: topology change detected, propagating
lan1: port 3(ath0) entering forwarding state
br_change_link(ath0): 0 -> 1
/etc/init.d/samba start
/etc/init.d/web start
****** Start cgi NAS server (port: 8081) ********
/etc/init.d/webusers start
/etc/init.d/inittab
rc2 completed
Reloading /etc/inittab 
Starting pid 2329, console /dev/null: '/sbin/nmbd' 
Starting pid 2330, console /dev/null: '/sbin/smbd' 
Starting pid 2331, console /dev/null: '/bin/tinyproxy' 
Starting pid 2332, console /dev/console: '/bin/thttpd' 
Starting pid 2333, console /dev/null: '/var/lib/webcam'

Re: Is this router based on the infineon danube?

Hi all.

I have EasyBox 803A(arv752dpw22) and EasyBox 802(arv752dpw).
And my question is, what linux distribution is the best to build OpenWrt.
I have allready tried Ubuntu 12.04 LTS running on Virtualbox - but without success.

Thanks
J.

Re: Is this router based on the infineon danube?

I have a virtual box with ARCHLinux on it .... just console mode

Re: Is this router based on the infineon danube?

I installed Debian (2 months ago). Followed wiki help and start compiling at second try ... it's easy

Re: Is this router based on the infineon danube?

daniel1919 wrote:

Hi!
I have a Dartybox(Bewan?) ARV4519PW.
By following some of the posts here i managed to get into the router flash by using UART,but it only gives me some info on the router,which looks like a normal log to me..i understand that there is a hidden boot-loader in the CPU since i don't get the press space 3 times to enter command mode,if so how do i get into this hidden bootloader.

There is a serial bootloader, but you'll have to find the pins to short in your board.
What you see is the normal bootloader, they probably locked it so you cannot use it to load something else, however your router is already running Linux, so maybe you could ask them the GPL sources for it.
Since the GPL states that you should be able to run modified versions of the software, they should also provide you with tools/instructions to load your modified image, however most leeches using Linux for their benefit don't do that, and forcing them to comply is not easy.

Re: Is this router based on the infineon danube?

pippolippi wrote:
daniel1919 wrote:

Hi!
I have a Dartybox(Bewan?) ARV4519PW.
By following some of the posts here i managed to get into the router flash by using UART,but it only gives me some info on the router,which looks like a normal log to me..i understand that there is a hidden boot-loader in the CPU since i don't get the press space 3 times to enter command mode,if so how do i get into this hidden bootloader.

There is a serial bootloader, but you'll have to find the pins to short in your board.
What you see is the normal bootloader, they probably locked it so you cannot use it to load something else, however your router is already running Linux, so maybe you could ask them the GPL sources for it.
Since the GPL states that you should be able to run modified versions of the software, they should also provide you with tools/instructions to load your modified image, however most leeches using Linux for their benefit don't do that, and forcing them to comply is not easy.

I have the 2 sets of pins, which i shorted using some jumpers.

http://i253.photobucket.com/albums/hh58/razvan1919/Public/DSCF3088.jpg

By shorting only the J21 pin i get this:

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2012.07.06 14:07:56 =~=~=~=~=~=~=~=~=~=~=~=





   _                              
  | |__   _____      ____ _ _ __  
  | '_ \ / _ \ \ /\ / / _` | '_ \ 
  | |_) |  __/\ V  V / (_| | | | |
  |_.__/ \___| \_/\_/ \__,_|_| |_|

Portions Copyright (c) 2005-2008 bewan systems
   www.bewan.com


Parameters:
  Product         : A50F01
  Product family  : A50F00
  Flash size      : 1000000
  DRAM size       : 2000000
  Ethernet        : MII
  LAN MAC address : 00:0c:c3:44:5f:65
  WAN MAC address : 00:0c:c3:44:5f:65
  Dual bank boot  : yes
  Reset           : no
  Pairing         : no
  Serial number   : 940000044808692
  WEP key         : GUWP665ER4LW2
  Loader version  : 13400
  Capabilities    : 80000001


Found valid bootable partition 0:
  Copyright (c) 2006-2009 BeWAN Systems
  Arcadyan ibox Darty
  A50F01
  2010-09-24-11:57:07
  A50F01-darty23-35357.bin

Found valid bootable partition 1:
  Copyright (c) 2006-2009 BeWAN Systems
  Arcadyan ibox Darty
  A50F01
  2010-05-17-11:19:35
  A50F01-darty22-32433.bin

Booting from partition 1 in flash.

Loading: Linux Kernel Image

Load address = 80000000
Uncompressing Linux....................

kernel corrupted!


 -- System halted

and when i short both jumpers i get:

ROM VER: 1.0.3
CFG 04
Read EEPROMX
 X
UART

I'm really out of ideas..

Re: Is this router based on the infineon danube?

Seems like that board is identical with Finnish 'Elisa Kotiboksi' - it also contains the mini pci slot and in general looks the same. I can't say for sure since I have to use that modem with stock firmware at the moment.
Other than that, the UART mode is the correct one you want - when it is in that mode it will accept the bootloader using serial (u-boot.asc). Just copy the contents of u-boot.asc and paste it to the putty - it will take some time but it will load it up.

When I played with that modem and openwrt I always ended up with kernel panic caused by jffs2 (flash file system). If you manage to make it work please do report back.

733 (edited by daniel1919 2012-07-07 17:23:13)

Re: Is this router based on the infineon danube?

guess it didn't work...the whole reason for changing to openwrt was because i changed ISP's and the modem they gave me is wired,and so I thought I could use this box,but I can't seem to find the option where I can input my user id and password in order to get internet access...can I somehow change the settings on the router via UART ?

734 (edited by jjb_wii 2012-07-10 22:27:03)

Re: Is this router based on the infineon danube?

@aiayua, Great job with the installation steps (post #668), congratulations!!!.


Un Saludo

Re: Is this router based on the infineon danube?

Good morning!

I have ZTE ZXV10 H108L modem. It looks like it based on infeneon danube.
Is it possible to run OpenWRT on it?

Please review board photo bellow:
http://info.kp.km.ua/images/zte_zxv10h108l.jpg

Re: Is this router based on the infineon danube?

Maybe in this thread, this post helps you -> https://forum.openwrt.org/viewtopic.php?pid=150238#p150238

Anyway, try to solder 4 pins at connector under "C167", under main PSB 50601 chip. I suppose it's serial port. Later use a level converter to connect to your computer serial port, and get all the bootlog ... we will start once here big_smile

Re: Is this router based on the infineon danube?

@jjb_wii smile nice to be helpfull, your welcome

738 (edited by oleandr 2012-07-11 12:39:54)

Re: Is this router based on the infineon danube?

According to one post it uses U-boot loader. Below is trace from broken modem.

U-Boot 1.1.5-2.2 (Jun 7 2011 - 19:16:57)

DRAM: 16 MB

relocate_code start
relocate_code finish.
Flash: 4 MB
Flash: MXIC_MX25L3205D
*** Warning - bad CRC, using default environment

parse tag param success
In: serial
Out: serial
Err: serial
Net:

Init chip ,reset switch !

Internal Clock
Selected EPHY_MODE
AMAZON_SE Switch

Type "run flash_nfs" to mount root filesystem over NFS

Have Calibration Data
*** Press 1 means entering boot mode***
Press 2 means entering testing mode***
Press 3 means entering norm mode***
Hit key to stop autoboot: 0
Entering norm mode ...

foundVer = 0
no image is available
http server start...

http://ogo.in.ua/forums/index.php?showtopic=8133&view=findpost&p=194333

Is it possible to flash openwrt via preinstalled u-boot without serial converter?

Re: Is this router based on the infineon danube?

If u-boot is preinstaled, do a "printenv" and a "?" (or "help" dont remember) and paste both results here

Re: Is this router based on the infineon danube?

Unfortunatelly i do not have servial convertor. Is it possible to interact with u-boot via lan?

741 (edited by daniel1919 2012-07-12 22:02:18)

Re: Is this router based on the infineon danube?

hi!
I retried to boot up the boot loader and it worked this time on my ARW4519,I'll post the putty output,i'll try and follow the instructions some posts back and see if it works.

U-Boot 2010.03 (Jul 10 2012 - 19:56:24)

Board: Danube/Twinpass/Vinax-VE V1.3, DDR Speed 111 MHz, CPU Speed 111 MHz
DRAM:  32 MB
Flash: 16 MB
*** Warning - bad CRC, using default environment

Net:   lq_cpe_eth
Hit any key to stop autoboot:  2  0
DANUBE =>   help
help
?       - alias for 'help'
base    - print or set address offset
bootm   - boot application image from memory
bootp   - boot image via network using BOOTP/TFTP protocol
cmp     - memory compare
cp      - memory copy
crc32   - checksum calculation
erase   - erase FLASH memory
flinfo  - print FLASH memory information
go      - start application at address 'addr'
help    - print command description/usage
httpd   - httpd    - start webserver
iminfo  - print header information for application image
loop    - infinite loop on address range
md      - memory display
mii     - MII utility commands
mm      - memory modify (auto-incrementing address)
mtest   - simple RAM read/write test
mw      - memory write (fill)
nm      - memory modify (constant address)
printenv- print environment variables
protect - enable or disable FLASH write protection
rarpboot- boot image via network using RARP/TFTP protocol
reset   - Perform RESET of the CPU
run     - run commands in an environment variable
saveenv - save environment variables to persistent storage
setenv  - set environment variables
tftpboot- boot image via network using TFTP protocol
version - print monitor version
DANUBE =>

Re: Is this router based on the infineon danube?

Here is the set of information that i collected about ZTE ZXV10 H108L so far:

Model    ZXV10H108L
Serial Number    88000200000000100000FCC897961164
Batch Number    07dcT210147
Hardware Version    V1.1.00
Software Version    V1.0.00_UKRT21
Boot Loader Version    V1.0.04

# cat /proc/cpuinfo
system type             : BSP_A4
processor               : 0
cpu model               : MIPS 4KEc V6.12
BogoMIPS                : 266.24
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 16
extra interrupt vector  : yes
hardware watchpoint     : yes
ASEs implemented        : mips16
VCED exceptions         : not available
VCEI exceptions         : not available

# cat /proc/meminfo
MemTotal:        13584 kB
MemFree:           716 kB
Buffers:           320 kB
Cached:           3924 kB
SwapCached:          0 kB
Active:           6164 kB
Inactive:          800 kB
SwapTotal:           0 kB
SwapFree:            0 kB
Dirty:               0 kB
Writeback:           0 kB
AnonPages:        2756 kB
Mapped:           2952 kB
Slab:             3764 kB
SReclaimable:      328 kB
SUnreclaim:       3436 kB
PageTables:        324 kB
NFS_Unstable:        0 kB
Bounce:              0 kB
CommitLimit:      6792 kB
Committed_AS:     4824 kB
VmallocTotal:  1048404 kB
VmallocUsed:      1428 kB
VmallocChunk:  1046876 kB

# lsmod
Module                  Size  Used by
hst_acl 3008 0 - Live 0xc006c000 (P)
hst_scanap 7808 0 - Live 0xc0046000 (P)
hst_scansta 13248 0 - Live 0xc0078000 (P)
if_ath_usb 1456 0 - Live 0xc0054000 (P)
hst_ath 80800 0 - Live 0xc00b2000 (P)
hst_rate 21472 1 hst_ath, Live 0xc0071000 (P)
hst_hal 153408 1 hst_ath, Live 0xc00f7000 (P)
hst_htc 15584 3 hst_ath,hst_rate,hst_hal, Live 0xc005a000 (P)
hst_tkip 9536 0 - Live 0xc0062000 (P)
hst_ccmp 4800 0 - Live 0xc0066000
hst_wep 4032 0 - Live 0xc003a000 (P)
hst_xauth 640 0 - Live 0xc0060000 (P)
hst_wlan 160848 9 hst_acl,hst_scanap,hst_scansta,hst_ath,hst_rate,hst_tkip,hst_ccmp,hst_wep,hst_xauth, Live 0xc00ce000 (P)
hif_usb 72832 3 if_ath_usb,hst_ath,hst_htc, Live 0xc007d000 (P)
adf 10928 4 hst_ath,hst_htc,hst_wlan,hif_usb, Live 0xc0042000 (P)
amazon_se_ppe 35856 2 - Live 0xc004a000 (P)
vnet 464 0 - Live 0xc002c000 (P)
switch_rtl8306 30960 0 - Live 0xc001b000 (P)
enet_zte 16512 2 hst_hal,adf, Live 0xc0024000 (P)

AR9271 ath9_htc
Lantiq PSB50601HL
ESMT M12L128168A
RTL 8306G

U-Boot 1.1.5-2.2 (Jun 7 2011 - 19:16:57)

DRAM: 16 MB

relocate_code start
relocate_code finish.
Flash: 4 MB
Flash: MXIC_MX25L3205D


# df
Filesystem           1k-blocks      Used Available Use% Mounted on
/dev/mtdblock5            2944      2944         0 100% /

# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00400000 00010000 "Whole_Flash"
mtd1: 00020000 00010000 "BOOT"
mtd2: 00010000 00010000 "Def_CFG"
mtd3: 00010000 00010000 "Current_CFG"
mtd4: 000d0000 00010000 "KERNEL"
mtd5: 002e0000 00010000 "FS"
mtd6: 00010000 00010000 "LOGS"

Also i backed up flash image. Need to figure out u-boot environment variables but do not know how to extract them from flash image.
Is it ever possible?

Re: Is this router based on the infineon danube?

You need serial connection to it, mandatory big_smile So get a cable (a siemens C45/C55 unlock cable works too ... just need a cable with RS232<->TTL(3.3v) converter)

Whe you have it, connect it, switch off the unit, switch on, stop the boot and then, do a help command and a printenv command. You will get available commands and environment variables big_smile

At this point, we can continue "openwrting" the unit big_smile

Re: Is this router based on the infineon danube?

This is probably the cheapest option, cheaper than a phone cable and more convenient since it comes with jumper cables.
I'm not affiliated with buyincoins and I find the quality is hit or miss (half of my orders have been refunded because they sent non working items), but I just received it and it seems to work fine (don't know for how long, but for $2.40 who cares?).

Re: Is this router based on the infineon danube?

I suppose is the same than this Adapter. It seems like the same item ... but in the pippolippi link i can't see pictures

I'm using C45 cable now but this morning bought this item ... when it arrives ... i'll post here some review wink

746 (edited by pippolippi 2012-07-12 22:50:56)

Re: Is this router based on the infineon danube?

Yes, that's exactly the same.
Edit: one nice thing is that there's a pin with the 5V coming from the usb and one with 3.3V from an onboard regulator and you can use them to power small devices (the data lines are strictly 3.3V though).

747 (edited by daniel1919 2012-07-15 08:51:50)

Re: Is this router based on the infineon danube?

Hi!
I am a complete beginner at this stuff so i can't seem to figure it out,i managed to get U-boot running,lan works,i run tftpd32 have the openwrt image in the folder,and in the putty command windows i do the "run update_openwrt' thing and it gives me "Loading : T T T T T..." and so on but nothing more..

DANUBE => run update  _openwrt
run update_openwrt
Using lq_cpe_eth device
TFTP from server 192.168.0.3; our IP address is 192.168.0.119
Filename 'openwrt-ifxmips-squashfs.image'.
Load address: 0x80500000
Loading: *T T T T

how can i flash the openwrt image using serial instead of tftp ? I'm really out of ideeas.
My router : ARV4519PW
Thanks in advance!

Re: Is this router based on the infineon danube?

Hi! Here's Pablo again. I'm still trying to make my ARV7518 deal with telephony ports.
I'm a bit confused. svd binary only links with:
libpthread.so.0
libsofia-sip-ua.so.0
libuci.so
libgcc_s.so.1
libc.so.0
ld-uClibc.so.0
libdl.so.0

is libab statically linked? 

I decided to see whether libab was installed, and surprise! it was not.
I opended the apk and it was empty.. I mean, the structure was there but no library at all.

I'm still getting the error reported in
https://forum.openwrt.org/viewtopic.php?pid=171128#p171128
But I suppose it's not a problem in the code of libab but in the load of libab itself

Any idea what may be wrong? I read some of you got it working smile
Now I'm using my android mobile as a SIP phone when I'm at home, but it's a battery eater and wifi coverage is so small sad

Re: Is this router based on the infineon danube?

Yes, libab is statically linked, did you try the modification I suggested?
It's been a while since I played with this whole mess, but I think you must first rebuild libab then rebuild completely svd, so that it links in the new libab.

Re: Is this router based on the infineon danube?

@daniel1919 -> Page 27 of this thread, just 3 pages back wink I explain how to do with 4518 and why tftp/httpd is not working, follow my tutorial, try my binaries if you want(i think my u-boot will work for you), and/or compile your owns smile Say us after you read that and tried big_smile