1) Get serial console access
2) Grab boot log using original firmware (or DD-WRT if it exists)
3) Grab output of "nvram show | grep gpio"
4) Create forum thread providing above logs
(Original post. Related.)
Here's what I have so far: The serial port connects to the white 2mm pitch molex-like connector already soldered onto the board. The pinout is as follows:
1 VCC probably
2 ?
3 TXD
4 ?
5 RXD
6 GND
The serial port speed is 115200 baud. At least, 115200 baud worked where 9600 baud didn't. After I got the port working, I didn't test any other speeds.
The router won't boot if the serial cable is attached to the router before it's turned on. (Is there a fix for this?) So to capture the whole output, I had to turn the router on first, then connect the cable, wait for it to boot, log in, reboot, and capture the whole boot sequence from the very beginning. Here it is:
Decompressing...done
Found a AMD NAND flash:
Total size: 128MB
Block size: 128KB
Page Size: 2048B
OOB Size: 64B
Sector size: 512B
Spare size: 16B
ECC level: 8-bit
Device ID: 0x01 0xf1 0x00 0x1d 0x01
CFE version 6.39.163.14 (r374748) based on BBP 1.0.37 for BCM947XX (32bit,SP,)
Build Date: Mon Feb 18 09:36:10 CST 2013 (mike@localhost.localdomain)
Copyright (C) 2000-2008 Broadcom Corporation.
Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
DDR Clock: 333 MHz
Info: DDR frequency set from clkfreq=800,*333*
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 6.39.163.14 (r374748)
CPU type 0x0: 800MHz
Tot mem: 131072 KBytes
CFE mem: 0x00F00000 - 0x0109DC8C (1694860)
Data: 0x00F5636C - 0x00F56830 (1220)
BSS: 0x00F56840 - 0x00F9BC8C (283724)
Heap: 0x00F9BC8C - 0x0109BC8C (1048576)
Stack: 0x0109BC8C - 0x0109DC8C (8192)
Text: 0x00F00000 - 0x00F4AFA4 (307108)
Boot: 0x0109E000 - 0x010DE000
Reloc: I:00000000 - D:00000000
Boot version: v1.0.8
Device eth0: hwaddr 48-F8-B3-65-D5-79, ipaddr 192.168.1.1, mask 255.255.255.0
gateway not set, nameserver not set
Loader:raw Filesys:tftp Dev:eth0 File:: Options:(null)
Loading: Failed.
Could not load :: Timeout occured
Booting(0): boot -raw -z -addr=0x8000 -max=0xef8000 nflash0.os:
Loader:raw Filesys:raw Dev:nflash0.os File: Options:(null)
Loading: ..... 5494368 bytes read
Entry at 0x00008000
Closing network.
Starting program at 0x00008000
console [ttyS0] enabled, bootconsole disabled
serial8250.0: ttyS1 at MMIO 0x18000400 (irq = 117) is a 16550
brd: module loaded
loop: module loaded
pflash: found no supported devices
bcmsflash: found no supported devices
The first offset=200000, 2nd offset=1f00000
Boot partition size = 524288(0x80000)
lookup_nflash_rootfs_offset: offset = 0x200000
nflash: squash filesystem with lzma found at block 33
lookup_nflash_rootfs_offset: offset = 0x1f00000
nflash: squash filesystem with lzma found at block 262
Creating 6 MTD partitions on "nflash":
0x000000000000-0x000000080000 : "boot"
0x000000080000-0x000000200000 : "nvram"
0x000000200000-0x000001f00000 : "linux"
0x000000436430-0x000001f00000 : "rootfs"
0x000001f00000-0x000003c00000 : "linux2"
0x0000020d364c-0x000003c00000 : "rootfs2"
PPP generic driver version 2.4.2
PPP MPPE Compression module registered
NET: Registered protocol family 24
PPTP driver version 0.8.5
SLIP: version 0.8.4-NET3.019-NEWTTY (dynamic channels, max=256).
CSLIP: code copyright 1989 Regents of the University of California.
sdhci: Secure Digital Host Controller Interface driver
sdhci: Copyright(c) Pierre Ossman
u32 classifier
Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (1940 buckets, 7760 max)
ctnetlink v0.93: registering with nfnetlink.
nf_conntrack_rtsp v0.6.21 loading
IPv4 over IPv4 tunneling driver
nf_nat_rtsp v0.6.21 loading
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP cubic registered
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
Bridge firewalling registered
Ebtables v2.0 registered
L2TP core driver, V2.0
PPPoL2TP kernel driver, V2.0
L2TP IP encapsulation support (L2TPv3)
L2TP netlink interface
L2TP ethernet pseudowire support (L2TPv3)
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
Northstar brcmnand NAND Flash Controller driver, Version 0.1 (c) Broadcom Inc. 2012
NAND device: Manufacturer ID: 0x01, Chip ID: 0xf1 (AMD NAND 128MiB 3,3V 8-bit)
Spare area=64 eccbytes 56, ecc bytes located at:
2 3 4 5 6 7 8 9 10 11 12 13 14 15 18 19 20 21 22 23 24 25 26 27 28 29 30 31 34 35 36 37 38 39 40 41 42 43 44 45 46 47 50 51 52 53 54 55 56 57 58 59 60 61 62 63
Available 7 bytes at (off,len):
(1,1) (16,2) (32,2) (48,2) (0,0) (0,0) (0,0) (0,0)
Scanning device for bad blocks
Bad eraseblock 847 at 0x0000069e0000
Options: NO_AUTOINCR,NO_READRDY,BBT_SCAN2NDPAGE,
Creating 1 MTD partitions on "brcmnand":
0x000003c00000-0x000008000000 : "brcmnand"
VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
devtmpfs: mounted
Freeing init memory: 232K
Failed to execute /sbin/preinit. Attempting defaults...
*********************************************************************************
_ _ __ _ __ _____ __ __ _____
| | | || \ | | / // ____]\ \ / // ____]TM
| | | || \ | | / /| (___ \ V /| (____
| | | || |\ \| |\ \ \____ \ \ / \____ \
| |_____ | || | \ | \ \ ____) | | | ____) |
|_______||_||_| \__| \_\[____ / |_| [_____/
(c) 2013 Belkin International, Inc. and/or its affiliates. All rights reserved.
Booting esprit (firmware version 1.1.40.160989)
*********************************************************************************
[utopia][init] System Initialization
[utopia][init] Creating /proc
[utopia][init] Creating /sys
[utopia][init] Creating /dev
[utopia][init] Creating /tmp
[utopia][init] Allocating 40M for /tmp
[utopia][init] Prepairing /dev/pts
[utopia][init] Setting /tmp and /var permissions
[utopia][init] Starting udev..
bdutil board utility kernel module, version 1.3
bdutil board utility kernel module boardId (1)
bdutil board utility buttons kernel module, version 1.3
bdutil board utility LEDs kernel module, version 1.3
bdutil board utility usbhub kernel module, version 1.1
[utopia][init] Using persistent syscfg data from /var/config/syscfg
[utopia][init] Starting system logging
[utopia][init] Starting sysevent subsystem
[utopia][init] Setting any unset system values to default
[utopia][init] no persistence config file (/var/config/pstcfg) found
[utopia][init] Late loading usb drivers
inserting ctf.ko
checking for interactive script start up...
0xb000000 0x1000000
0xc000000 0x1000000
0xd000000 0x1000000
0xe000000 0x1000000
0xf000000 0x1000000
0x10000000 0x1000000
0x11000000 0x1000000
0x12000000 0x1000000
0x13000000 0x1000000
0x14000000 0x1000000
0x15000000 0x1000000
0x16000000 0x1000000
0x17000000 0x1000000
0x18000000 0x1000000
[utopia][init] Starting bdutil daemon
attempting to sync sysinfo.cgi auth credentials
BDUTIL daemon mode
Sat Jul 28 17:10:00 UTC 2012
(none) login: 0x17010000 0x1000000
0x18010000 0x1000000
wifi, sysevent received: lan-started
wifi, service_start()
wifi_scheduler, sysevent received (Sat Jul 28 10:10:05 PDT 2012)
Lighttpd Model Base: EA6300
Generating Rainier lighttpd config
Build temporary www configuration directory:
wifi, system_boot_init
TSLIIHauhEfGE
Device is Broadcom Router
Invalid instance identifier br0
Invalid instance identifier br0
Registering Service myrouter._http._tcp.local port 80
wifi, platform_virtual_onetime_setting()
Got a reply for myrouter._http._tcp.local.: Name now registered and active
[utopia] Not setting ppp_clamp_mtu
Restarting nfqrecv service...
Failed to modify password entry for user guest
eth1: WLC_GET_VAR(psta_if): Invalid argument
wl0.2: WLC_GET_VAR(psta_if): Invalid argument
eth1: WLC_GET_VAR(psta_if): Invalid argument
### wps_wfi_init(): <wl0_wfi_enable=(null)><wl1_wfi_enable=(null)><wl0.2_wfi_enable=(null)><wl0.1_wfi_enable=(null)>WFI is not enabled ###
wifi, user vap eth1 is up
wifi, user vap eth2 is up
wifi, Tap Connect is up
wifi, guest_enabled is set to 0, do not enable 2.4GHz guest
wifi, guest_enabled is set to 0, do not enable 5GHz guest
[utopia] Not setting ppp_clamp_mtu on dslite protocol
Failed to modify password entry for user guest
Failed to modify password entry for user guest
Starting smbd ...
The boot log says EA6300, but the hardware really is an EA6400. Apparently, the first EA6300 routers released (EA6300v1) were all actually EA6400 routers. Here's the output of nvram show | grep gpio:
~ # nvram show | grep gpio
reset_gpio=11
gpio7=wps_button
size: 6753 bytes (58783 left)
gpio10=usbport2
~ #
That had to be run as root---not admin. They are two distinct users and admin didn't have the privileges. So, my login was user root, password admin.
I hope that helps, Zajec. Sorry it took so long. The first UART I accidentally fried with a power surge from a temperamental USB cable, and the second one took two weeks to ship. I guess I should have gotten two, like you suggested. If there are any other commands whose output you'd like to see, just let me know.
(Last edited by ewtoombs on 28 Jul 2015, 08:03)