[<<][openwrt][>>][..]
Fri Jul 6 13:28:53 EDT 2012

Recovering Belkin Share Max N300 using CFE

Missing link was CFE IP address, which is 192.168.2.1 on lan ports.
The following command fixed it:

atftp --trace --option "timeout 1" --option "mode octet" --put --local-file zuk.trx 192.168.2.1

On device console this gives:

Decompressing...done
Decompressing...done
Init Arena
Init Devs.
Boot partition size = 131072(0x20000)
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.10.128.0
CPU type 0x19740: 453MHz
Tot mem: 65536 KBytes

CFE mem:    0x80700000 - 0x8079AD20 (634144)
Data:       0x80731E00 - 0x807341B0 (9136)
BSS:        0x807341B0 - 0x80734D20 (2928)
Heap:       0x80734D20 - 0x80798D20 (409600)
Stack:      0x80798D20 - 0x8079AD20 (8192)
Text:       0x80700000 - 0x80731DF4 (204276)


Copying boot params.....
DONE


Bootloader version 1.00e boot_version 1.00e
Project name : WG7117F22 2-LF-AK
Press space bar to cancel startup...
Device eth0:  hwaddr 94-44-52-A6-E2-9C, ipaddr 192.168.2.1, mask 255.255.255.0
        gateway not set, nameserver not set
Boot program checksum is invalid
Reading :: Done. 3018752 bytes read
Programming...done. 3018752 bytes written
Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)
Loading: .. 3796 bytes read
Entry at 0x80001000
Closing network.
Starting program at 0x80001000
[    0.000000] Linux version 3.0.18 (tom@zoo) (gcc version 4.6.3 20120201 (prerelease) (Linaro GCC 4.6-2012.02) ) #13 PREEMPT Fri Jul 6 11:24:10 EDT 2012
[    0.000000] CPU revision is: 00019740 (MIPS 74Kc)
[    0.000000] bcm47xx: using ssb bus
[    0.000000] ssb: Found END of erom after 9 cores
[    0.000000] ssb: chipcommon status is 0x8800
[    0.000000] ssb: ssb_pmu_resources_init: Resource count 7
[    0.000000] ssb: Initializing MIPS core...
[    0.000000] ssb: set_irq: core 0x0812, irq 3 => 3
[    0.000000] ssb: set_irq: core 0x082d, irq 4 => 4
[    0.000000] ssb: set_irq: core 0x0819, irq 5 => 5
[    0.000000] ssb: after irq reconfiguration
[    0.000000] ssb: core 0x0800, irq : 2(S)* 3  4  5  6  D  I 
[    0.000000] ssb: core 0x0812, irq : 2(S)  3* 4  5  6  D  I 
[    0.000000] ssb: core 0x082d, irq : 2(S)  3  4* 5  6  D  I 
[    0.000000] ssb: core 0x082c, irq : 2(S)  3  4  5  6  D  I*
[    0.000000] ssb: core 0x0819, irq : 2(S)  3  4  5* 6  D  I 
[    0.000000] ssb: core 0x0820, irq : 2(S)  3  4  5  6* D  I 
[    0.000000] ssb: core 0x082e, irq : 2(S)* 3  4  5  6  D  I 
[    0.000000] ssb: core 0x080e, irq : 2(S)  3  4  5  6  D  I*
[    0.000000] ssb: core 0x0834, irq : 2(S)* 3  4  5  6  D  I 
[    0.000000] found parallel flash.
[    0.000000] ssb: Sonics Silicon Backplane (AI type) found at address 0x18000000
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 04000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone PFN ranges:
[    0.000000]   Normal   0x00000000 -> 0x00004000
[    0.000000] Movable zone start PFN for each node
[    0.000000] early_node_map[1] active PFN ranges
[    0.000000]     0: 0x00000000 -> 0x00004000
[    0.000000] Reserving 0MB of memory at 0MB for crashkernel
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
[    0.000000] Kernel command line:  root=/dev/mtdblock2 rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[    0.000000] Writing ErrCtl register=00000000
[    0.000000] Readback ErrCtl register=00000000
[    0.000000] Memory: 61844k/65536k available (2438k kernel code, 3692k reserved, 341k data, 156k init, 0k highmem)
[    0.000000] NR_IRQS:128
[    0.000000] console [ttyS0] enabled
[    0.004000] Calibrating delay loop... 225.02 BogoMIPS (lpj=450048)
[    0.044000] pid_max: default: 32768 minimum: 301
[    0.048000] Mount-cache hash table entries: 512
[    0.052000] NET: Registered protocol family 16
[    0.064000] bio: create slab <bio-0> at 0
[    0.072000] Switching to clocksource MIPS
[    0.080000] Switched to NOHz mode on CPU #0
[    0.084000] Disabling SSB PCI-E host due to code brokeness
[    0.096000] NET: Registered protocol family 2
[    0.100000] IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.108000] TCP established hash table entries: 2048 (order: 2, 16384 bytes)
[    0.116000] TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
[    0.124000] TCP: Hash tables configured (established 2048 bind 2048)
[    0.128000] TCP reno registered
[    0.132000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.140000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.144000] NET: Registered protocol family 1
[    0.156000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.164000] JFFS2 version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.176000] msgmni has been set to 120
[    0.180000] io scheduler noop registered
[    0.184000] io scheduler deadline registered (default)
[    0.188000] Serial: 8250/16550 driver, 2 ports, IRQ sharing enabled
[    0.216000] serial8250: ttyS0 at MMIO 0xb8000300 (irq = 2) is a U6_16550A
[    0.244000] serial8250.0: ttyS0 at MMIO 0xb8000300 (irq = 2) is a U6_16550A
[    0.256000] bcm47xx_pflash: flash init: 0x1c000000 0x02000000
[    0.260000] Physically mapped flash: Found 1 x16 devices at 0x0 in 8-bit bank. Manufacturer ID 0x0000c2 Chip ID 0x0000cb
[    0.272000] Amd/Fujitsu Extended Query Table at 0x0040
[    0.280000]   Amd/Fujitsu Extended Query version 1.1.
[    0.284000] number of CFI chips: 1
[    0.288000] bcm47xx_pflash: Flash device: 0x2000000 at 0x1fc00000
[    0.296000] bcm47xx_part: Found Belkin_F7D3301 header:cfe
[    0.300000] bcm47xx_part: bootloader size: 196608
[    0.308000] bcm47xx_part: Looking for dual image
[    0.316000] bcm47xx_part: Found Belkin_F7D3301 header:root
[    0.320000] bcm47xx_part: TRX offset : 0
[    0.716000] bcm47xx_part: Updating TRX offsets and length:
[    0.720000] bcm47xx_part: old trx = [0x0000001c, 0x0000096c, 0x000e1800], len=0x002e1000 crc32=0xcc31c2ed
[    0.732000] bcm47xx_part: new trx = [0x0000001c, 0x0000096c, 0x000e1800], len=0x000e1800 crc32=0x090a423b
[    2.612000] bcm47xx_part: Done
[    2.616000] 4 bcm47xx partitions found on MTD device Physically mapped flash
[    2.624000] Creating 4 MTD partitions on "Physically mapped flash":
[    2.628000] 0x000000000000-0x000000030000 : "cfe"
[    2.636000] 0x000000030000-0x0000007f0000 : "linux"
[    2.644000] 0x000000111800-0x0000007f0000 : "rootfs"
[    2.652000] mtd: partition "rootfs" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
[    2.664000] mtd: partition "rootfs" set to be root filesystem
[    2.672000] mtd: partition "rootfs_data" created automatically, ofs=2D0000, len=520000 
[    2.680000] 0x0000002d0000-0x0000007f0000 : "rootfs_data"
[    2.688000] 0x0000007f0000-0x000000800000 : "nvram"
[    2.700000] bcm47xx_sflash: error registering platform driver: -19
[    2.704000] BCM47xx Watchdog Timer enabled (30 seconds, nowayout)
[    2.712000] TCP westwood registered
[    2.716000] NET: Registered protocol family 17
[    2.724000] 802.1Q VLAN Support v1.8
[    2.736000] VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
[    2.744000] Freeing unused kernel memory: 156k freed
[    4.416000] manoj: boardnum= 121032G3100879 : boardtype : 0xa4cf
[    4.424000] diag: Detected 'Belkin PlayMax F7D3301'
[    4.428000] diag: led:power
[    4.432000] diag: led:warn
[    4.436000] diag: led:wlan
[    4.436000] diag: led:led0
[    4.440000] diag: led:led1
[    5.660000] roboswitch: Probing device eth0: No such device
[    5.664000] roboswitch: Probing device eth1: No such device
[    5.672000] roboswitch: Probing device eth2: No such device
[    5.676000] roboswitch: Probing device eth3: No such device
- preinit -
Press the [f] key and hit [enter] to enter failsafe mode
- regular preinit -
jffs2 not ready yet; using ramdisk
- init -

Please press Enter to activate this console. [   13.536000] bgmac ssb0:1: eth0: Broadcom SSB GMAC ethernet driver (ext. Robo Switch) 94:44:52:a6:e2:9c
[   13.664000] USB20H mdio control register: 0x80000008
[   13.920000] SCSI subsystem initialized
[   13.956000] roboswitch: Probing device eth0: found a 53115! It's a 5350.
[   14.148000] usbcore: registered new interface driver usbfs
[   14.156000] usbcore: registered new interface driver hub
[   14.164000] usbcore: registered new device driver usb
[   15.144000] wl: module license 'unspecified' taints kernel.
[   15.148000] Disabling lock debugging due to kernel taint
[   15.260000] wl0: Broadcom BCM4329 802.11 Wireless Controller 5.10.56.27
[   15.268000] SSB/BCMA glue driver successfully attached
[   15.580000] PPP generic driver version 2.4.2
[   15.808000] ip_tables: (C) 2000-2006 Netfilter Core Team
[   16.068000] NET: Registered protocol family 24
[   16.128000] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[   16.136000] ehci-platform ehci-platform.0: Generic Platform EHCI Controller
[   16.144000] ehci-platform ehci-platform.0: new USB bus registered, assigned bus number 1
[   16.176000] ehci-platform ehci-platform.0: irq 5, io mem 0x18004000
[   16.192000] ehci-platform ehci-platform.0: USB 0.0 started, EHCI 1.00
[   16.200000] hub 1-0:1.0: USB hub found
[   16.204000] hub 1-0:1.0: 2 ports detected
[   16.332000] nf_conntrack version 0.5.0 (968 buckets, 3872 max)
[   17.044000] uhci_hcd: USB Universal Host Controller Interface driver
[   17.076000] Initializing USB Mass Storage driver...
[   17.080000] usbcore: registered new interface driver usb-storage
[   17.088000] USB Mass Storage support registered.
[   22.344000] device eth0.0 entered promiscuous mode
[   22.348000] device eth0 entered promiscuous mode
[   22.412000] br-lan: port 1(eth0.0) entering forwarding state
[   22.420000] br-lan: port 1(eth0.0) entering forwarding state
[   32.280000] jffs2_scan_eraseblock(): End of filesystem marker found at 0x0
[   32.296000] jffs2_build_filesystem(): unlocking the mtd device... done.
[   32.304000] jffs2_build_filesystem(): erasing all blocks after the end marker... 
[   76.492000] JFFS2 notice: (1082) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.


BusyBox v1.19.3 (2012-06-22 01:08:55 EDT) built-in shell (ash)
Enter 'help' for a list of built-in commands.

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 ATTITUDE ADJUSTMENT (bleeding edge, r30776) ----------
  * 1/4 oz Vodka      Pour all ingredients into mixing
  * 1/4 oz Gin        tin with ice, strain into glass.
  * 1/4 oz Amaretto
  * 1/4 oz Triple sec
  * 1/4 oz Peach schnapps
  * 1/4 oz Sour mix
  * 1 splash Cranberry juice
 -----------------------------------------------------
root@OpenWrt:/# 





[Reply][About]
[<<][openwrt][>>][..]