Здравствуй LOR! Подскажите пожалуйста или наведите на путь решения этой проблемы. В общем есть такой девайс Sagemcom 3804 от РТ лежал он всё лежал и тут я загорелся идеей (домашней автоматизации, DLNA, файл сервачёк и тд и тп) и бросил я на него свой взор. Разобрав его я понял что мозги у него неплохие:
Boardcom BCM6362VKFEDG проц 400МГ Dual Core поддержка у OpenWRT реализована
TC58NVG0S3ETA00 - Toshiba оперативка 128 MB
Микросхемы флеща я не нашёл. Похоже микросхема оперативы ещё выполняет роль флеща или я чтот не понимаю.
Oстальные все микросхемы (DTMF кодер для ВоИП, контроллеры питания, два сдвиговых регистра, что то для ADSL и сдвоеный мосфет)
WiFi у него в проце Dual Bend
Два USB, на плате есть UART и JTAG
Погуляв по OpenWRT я нашёл два схожих по железу девайса (Sagemcom 2504n и NEUFBOX6) заливать пытается но не заливается. Подскажите как портировать.
Подпаял проводки к UART посмотрел лог загрузки и всё дальше я бессилен.
HELO
CPUI
L1CI
HELO
CPUI
L1CI
DRAM
----
PHYS
ZQDN
PHYE
DINT
LASY
USYN
MSYN
LMBE
PASS
----
ZBSS
CODE
DATA
L12F
MAIN
NAN0
BT00
0001
NAN9
BT01
0492
NAN9
NAN3
RFS2
NAN5
CFE version 7.126 for BCM96362 (32bit,SP,BE)
Build Date: Wed Jul 24 20:54:45 CST 2013 (bensonli@SZ01007.DONGGUAN.CN)
Copyright (C) 2005-2012 SAGEMCOM Corporation.
NAND flash device: name <not identified>, id 0x98d1 block 128KB size 131072KB
Chip ID: BCM6362B0, MIPS: 400MHz, DDR: 333MHz, Bus: 166MHz
Main Thread: TP0
Memory Test Passed
Total Memory: 134217728 bytes (128MB)
Boot Address: 0xb8000000
Board IP address : 192.168.1.1:ffffff00
Host IP address : 192.168.1.100
Gateway IP address :
Run from flash/host (f/h) : f
Default host run file name : vmlinux
Default host flash file name : bcm963xx_fs_kernel
Boot delay (0-9 seconds) : 1
Boot image (0=latest, 1=previous) : 0
Board Id (0-3) : F@ST3804R
Number of MAC Addresses (1-32) : 11
Base MAC Address : 7c:03:4c:d1:68:63
PSI Size (1-64) KBytes : 24
Enable Backup PSI [0|1] : 0
System Log Size (0-256) KBytes : 0
Main Thread Number [0|1] : 0
Voice Board Configuration (0-0) : ADVNGR_SI3217X
*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 0
Booting from latest image (0xbbd80000) ...
Decompression OK!
Entry at 0x8032f090
Closing network.
Disabling Switch ports.
Flushing Receive Buffers...
0 buffers found.
Closing DMA Channels.
Starting program at 0x8032f090
Linux version 2.6.30 (bensonli@SZ01007.DONGGUAN.CN) (gcc version 4.4.2 (Buildroo t 2010.02-git) ) #1 SMP PREEMPT Wed Jul 24 20:45:03 CST 2013
BCM Flash API. Flash device is not found.
F@ST3804R prom init
CPU revision is: 0002a070 (Broadcom4350)
DSL SDRAM reserved: 0x100000
Determined physical RAM map:
memory: 07f00000 @ 00000000 (usable)
Zone PFN ranges:
DMA 0x00000000 -> 0x00001000
Normal 0x00001000 -> 0x00007f00
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
0: 0x00000000 -> 0x00007f00
On node 0 totalpages: 32512
free_area_init_node: node 0, pgdat 80403880, node_mem_map 81000000
DMA zone: 32 pages used for memmap
DMA zone: 0 pages reserved
DMA zone: 4064 pages, LIFO batch:0
Normal zone: 222 pages used for memmap
Normal zone: 28194 pages, LIFO batch:7
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32258
Kernel command line: root=mtd:rootfs ro rootfstype=jffs2 console=ttyS0,115200
wait instruction: enabled
Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes.
Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes
NR_IRQS:128
PID hash table entries: 512 (order: 9, 2048 bytes)
console [ttyS0] enabled
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Allocating memory for DSP module core and initialization code
Allocated DSP module memory - CORE=0x0 SIZE=0, INIT=0x0 SIZE=0
Memory: 124176k/130048k available (3228k kernel code, 5684k reserved, 837k data, 152k init, 0k highmem)
Calibrating delay loop... 398.33 BogoMIPS (lpj=199168)
Mount-cache hash table entries: 512
--Kernel Config--
SMP=1
PREEMPT=1
DEBUG_SPINLOCK=0
DEBUG_MUTEXES=0
Broadcom Logger v0.1 Jul 24 2013 20:40:08
CPU revision is: 0002a070 (Broadcom4350)
Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes.
Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes
Calibrating delay loop... 402.43 BogoMIPS (lpj=201216)
Brought up 2 CPUs
net_namespace: 1140 bytes
NET: Registered protocol family 16
Total Flash size: 0K with -1 sectors
registering PCI controller with io_map_base unset
registering PCI controller with io_map_base unset
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usb_fortune: Module loaded.
usbcore: registered new device driver usb
pci 0000:00:00.0: reg 10 32bit mmio: [0x10004000-0x10013fff]
pci 0000:00:00.0: reg 30 32bit mmio: [0x000000-0x0007ff]
pci 0000:00:00.0: supports D1 D2
pci 0000:00:00.0: PME# supported from D0 D3hot D3cold
pci 0000:00:00.0: PME# disabled
pci 0000:00:09.0: reg 10 32bit mmio: [0x10002600-0x100026ff]
pci 0000:00:0a.0: reg 10 32bit mmio: [0x10002500-0x100025ff]
pci 0000:01:00.0: PME# supported from D0 D3hot
pci 0000:01:00.0: PME# disabled
pci 0000:01:00.0: PCI bridge, secondary bus 0000:02
pci 0000:01:00.0: IO window: disabled
pci 0000:01:00.0: MEM window: disabled
pci 0000:01:00.0: PREFETCH window: disabled
PCI: Setting latency timer of device 0000:01:00.0 to 64
BLOG v3.0 Initialized
BLOG Rule v1.0 Initialized
Broadcom IQoS v0.1 Jul 24 2013 20:44:56 initialized
Broadcom GBPM v0.1 Jul 24 2013 20:44:56 initialized
NET: Registered protocol family 8
NET: Registered protocol family 20
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 3, 32768 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
NET: Registered protocol family 1
JFFS2 version 2.2. (NAND) © 2001-2006 Red Hat, Inc.
fuse init (API version 7.11)
msgmni has been set to 242
io scheduler noop registered (default)
PCI: Setting latency timer of device 0000:01:00.0 to 64
Driver 'sd' needs updating - please use bus_type methods
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
NET: Registered protocol family 24
bcm963xx_mtd driver v1.0
Failed to read image tag from flash
Broadcom DSL NAND controller (BrcmNand Controller)
-->brcmnand_scan: CS=0, numchips=1, csi=0
mtd->oobsize=0, mtd->eccOobSize=0
NAND_CS_NAND_XOR=00000000
Disabling XOR on CS#0
brcmnand_scan: Calling brcmnand_probe for CS=0
B4: NandSelect=40000001, nandConfig=15142200, chipSelect=0
brcmnand_read_id: CS0: dev_id=98d19015
After: NandSelect=40000001, nandConfig=15142200
brcmnand_probe: Ecc level set to 1, sectorSize=512 from ID table
Block size=00020000, erase shift=17
NAND Config: Reg=15142200, chipSize=128 MB, blockSize=128K, erase_shift=11
busWidth=1, pageSize=2048B, page_shift=11, page_mask=000007ff
timing1 not adjusted: 5363444f
timing2 not adjusted: 00000fc6
BrcmNAND mfg 98 d1 TOSHIBA TC58NVG0S3ETA00 128MB on CS0
Found NAND on CS0: ACC=f3000000, cfg=15142200, flashId=98d19015, tim1=5363444f, tim2=00000fc6
BrcmNAND version = 0x0202 128MB @00000000
B4: NandSelect=40000001, nandConfig=15142200, chipSelect=0
brcmnand_read_id: CS0: dev_id=98d19015
After: NandSelect=40000001, nandConfig=15142200
Found NAND flash on Chip Select 0, chipSize=128MB, usable size=128MB, base=0
brcmnand_scan: Done brcmnand_probe
brcmnand_scan: B4 nand_select = 40000001
brcmnand_scan: After nand_select = 40000001
brcmnand_scan 10
200 CS=0, chip->ctrl->CS[0]=0
200 chip->ecclevel=15, acc=f3000000
page_shift=11, bbt_erase_shift=17, chip_shift=27, phys_erase_shift=17
brcmnand_scan 220
Brcm NAND controller version = 2.2 NAND flash size 128MB @18000000
brcmnand_scan 230
brcmnand_scan 40, mtd->oobsize=64, chip->ecclayout=00000000
brcmnand_scan 42, mtd->oobsize=64, chip->ecclevel=15, isMLC=0, chip->cellinfo=0
ECC layout=brcmnand_oob_bch4_4k
brcmnand_scan: mtd->oobsize=64
brcmnand_scan: oobavail=50, eccsize=512, writesize=2048
brcmnand_scan, eccsize=512, writesize=2048, eccsteps=4, ecclevel=15, eccbytes=3
300 CS=0, chip->ctrl->CS[0]=0
500 chip=87a3d190, CS=0, chip->ctrl->CS[0]=0
-->brcmnand_default_bbt
brcmnand_default_bbt: bbt_td = bbt_main_descr
Bad block table Bbt0 found at page 0000ffc0, version 0x01 for chip on CS0
Bad block table 1tbB found at page 0000ff80, version 0x01 for chip on CS0
brcmnandCET: Status -> Deferred
brcmnand_scan 99
Creating 4 MTD partitions on "brcmnand.0":
0x000003d80000-0x000007ae0000 : "rootfs"
0x000000020000-0x000003d80000 : "rootfs_update"
0x000007b00000-0x000007f00000 : "data"
0x000000000000-0x000000020000 : "nvram"
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
PCI: Enabling device 0000:00:0a.0 (0000 -> 0002)
PCI: Setting latency timer of device 0000:00:0a.0 to 64
ehci_hcd 0000:00:0a.0: EHCI Host Controller
ehci_hcd 0000:00:0a.0: new USB bus registered, assigned bus number 1
ehci_hcd 0000:00:0a.0: Enabling legacy PCI PM
ehci_hcd 0000:00:0a.0: irq 18, io mem 0x10002500
ehci_hcd 0000:00:0a.0: USB f.f started, EHCI 1.00
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 2 ports detected
generic_probe wake up Monitor!!
message received before monitor task is initialized kerSysSendtoMonitorTask
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
PCI: Enabling device 0000:00:09.0 (0000 -> 0002)
PCI: Setting latency timer of device 0000:00:09.0 to 64
ohci_hcd 0000:00:09.0: OHCI Host Controller
ohci_hcd 0000:00:09.0: new USB bus registered, assigned bus number 2
ohci_hcd 0000:00:09.0: irq 17, io mem 0x10002600
usb usb2: configuration #1 chosen from 1 choice
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 2 ports detected
generic_probe wake up Monitor!!
message received before monitor task is initialized kerSysSendtoMonitorTask
usbcore: registered new interface driver cdc_acm
cdc_acm: v0.26:USB Abstract Control Model driver for USB modems and ISDN adapter s
usbcore: registered new interface driver usblp
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
usbcore: registered new interface driver usbserial
USB Serial support registered for generic
usbcore: registered new interface driver usbserial_generic
usbserial: USB Serial Driver core
USB Serial support registered for GSM modem (1-port)
usbcore: registered new interface driver option
option: v0.7.2:USB Driver for GSM modems
brcmboard: brcm_board_init entry
kerSysScreenPciDevices: 0x14e4:0x435f:(slot 0) detected
kerSysScreenPciDevices: 0x14e4:0x6300:(slot 9) detected
kerSysScreenPciDevices: 0x14e4:0x6300:(slot 10) detected
kerSysScreenPciDevices: 0x14e4:0x6362:(slot 0) detected
SES: Button Interrupt 0x1 is enabled
SES: LED GPIO 0xc010 is enabled
PCIe: No device found - Powering down
Serial: BCM63XX driver $Revision: 3.00 $
Magic SysRq enabled (type ^ h for list of supported commands)
ttyS0 at MMIO 0xb0000100 (irq = 11) is a BCM63XX
ttyS1 at MMIO 0xb0000120 (irq = 12) is a BCM63XX
bcmPktDma_init: Broadcom Packet DMA Library initialized
Total # RxBds=2769
bcmPktDmaBds_init: Broadcom Packet DMA BDs initialized
bcmxtmrt: Broadcom BCM6362B0 ATM/PTM Network Device v0.3 Jul 24 2013 20:44:38
IPSEC SPU: SUCCEEDED
GACT probability NOT on
Mirror/redirect action on
u32 classifier
input device check on
Actions configured
TCP cubic registered
Initializing XFRM netlink socket
NET: Registered protocol family 10
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
NET: Registered protocol family 15
Initializing MCPD Module
Ebtables v2.0 registered
ebt_time registered
ebt_ftos registered
ebt_wmm_mark registered
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (jffs2 filesystem) readonly on device 31:0.
Freeing unused kernel memory: 152k freed
init started: BusyBox v1.17.2 (2013-07-24 20:49:00 CST)
starting pid 230, tty '': '/etc/init.d/rcS'
usbfs: unrecognised mount option "defaults" or missing value
usbfs: mount parameter error.
starting pid 234, tty '': '-/bin/sh'
BusyBox v1.17.2 (2013-07-24 20:49:00 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.
Loading drivers and kernel modules...
chipinfo: module license 'proprietary' taints kernel.
Disabling lock debugging due to kernel taint
brcmchipinfo: brcm_chipinfo_init entry
Broadcom Ingress QoS Module Char Driver v0.1 Jul 24 2013 20:42:45 Registered<243>
Broadcom Ingress QoS ver 0.1 initialized
BPM: tot_mem_size=134217728B (128MB), buf_mem_size=20132659B (19MB), num of buffers=9605, buf size=2096
Broadcom BPM Module Char Driver v0.1 Jul 24 2013 20:40:29 Registered<244>
[NTC bpm] bpm_set_status: BPM status : enabled
NBUFF v1.0 Initialized
Initialized fcache state
Broadcom Packet Flow Cache Char Driver v2.2 Jul 24 2013 20:42:45 Registered<242>
Created Proc FS /procfs/fcache
Broadcom Packet Flow Cache registered with netdev chain
Broadcom Packet Flow Cache learning via BLOG enabled.
Constructed Broadcom Packet Flow Cache v2.2 Jul 24 2013 20:42:45
chipId 0x636220B0
Broadcom Forwarding Assist Processor (FAP) Char Driver v0.1 Jul 24 2013 20:42:30 Registered <241>
FAP Debug values at 0x00000010 0x00000010
Enabling SMISBUS PHYS_FAP_BASE[0] is 0x14001000
FAP Soft Reset Done
4ke Reset Done
Allocated FAP0 GSO Buffers (0xA5D98D08) : 1048576 bytes @ 0xA5E00000
[NTC fapProto] fapReset : Reset FAP Protocol layer
bcmPktDma_bind: FAP Driver binding successfull
[FAP0] DSPRAM : stack <0x80004000><1024>, global <0x80004400><7096>, free <72>, total<8192>
[FAP0] PSM : addr<0xE0010000>, used <32764>, free <4>, total <32768>
[FAP0] Flows supported: 80 (dsp 60, psm 20, qsm 0)
[FAP0] DQM : availableMemory 14084 bytes, nextByteAddress 0xE00048FC
[FAP0] GSO Buffer set to 0xA5E00000
[FAP0] FAP BPM Initialized.
bcmxtmcfg: bcmxtmcfg_init entry
adsl: adsl_init entry
Broadcom BCM6362B0 Ethernet Network Device v0.1 Jul 24 2013 20:44:29
fapDrv_psmAlloc: fapIdx=0, size: 4000, offset=b10106f0 bytes remaining 7008
ETH Init: Ch:0 - 200 tx BDs at 0xb10106f0
ETH Init: Ch:1 - 200 tx BDs at 0xa5d6d000
fapDrv_psmAlloc: wastage 8 bytes
fapDrv_psmAlloc: fapIdx=0, size: 4808, offset=b1011690 bytes remaining 2192
ETH Init: Ch:0 - 600 rx BDs at 0xb1011690
ETH Init: Ch:1 - 1921 rx BDs at 0xa7904000
Error: kerSysRegisterDyingGaspHandler: list head is null
eth0: MAC Address: 7C:03:4C:D1:68:63
eth1: MAC Address: 7C:03:4C:D1:68:63
eth2: MAC Address: 7C:03:4C:D1:68:63
eth3: MAC Address: 7C:03:4C:D1:68:63
[NTC arl] arlEnable : Enabled ARL binding to FAP
Broadcom Adress Resolution Logic Processor (ARL) Char Driver v0.1 Jul 24 2013 20:40:29 Registered <245>
--SMP support
wl: dsl_tx_pkt_flush_len=338
wl: high_wmark_tot=6243
PCI: Setting latency timer of device 0000:00:00.0 to 64
wl: passivemode=1
wl: napimode=0
wl0: allocskbmode=1 currallocskbsz=512
otp_read_pci: bad crc
Neither SPROM nor OTP has valid image
wl:srom/otp not programmed, using main memory mapped srom info(wombo board)
wl:loading /etc/wlan/bcm6362_vars.bin
Failed to open srom image from '/etc/wlan/bcm6362_vars.bin'.
wl:loading /etc/wlan/bcm6362_map.bin
wl0: Broadcom BCM435f 802.11 Wireless Controller 5.100.138.2008.cpe4.12L04.3
Error: kerSysRegisterDyingGaspHandler: list head is null
Endpoint: endpoint_init entry
Endpoint: endpoint_init COMPLETED
Broadcom 802.1Q VLAN Interface, v0.1
===== Release Version 7.126 (build timestamp 130724_2046) =====
Got primary config file from flash (len=48762), validating....
ssk:error:21.147:lck_checkBeforeEntry:171:lock required during cmBOS: Enter bosInit
sObj_getNextInSuBOS: Exit bosInit
bTreeFlags
endpoint_open COMPLETED
interface eth3.2 does not exist!
[Jan 01 00:00:21] radvd: ioctl(SIOCGIFFLAGS) failed for br0: No such device
[Jan 01 00:00:21] radvd: interface br0 does not exist
[Jan 01 00:00:21] radvd: error parsing or activating the config file: /var/radvd.conf
ifconfig: ioctl 0x8913 failed: No such device
ip_tables: (C) 2000-2006 Netfilter Core Team
Netfilter messages via NETLINK v0.30.
ip6_tables: (C) 2000-2006 Netfilter Core Team
mcpd: sendto failed
device eth1 entered promiscuous mode
ADDRCONF(NETDEV_UP): eth1: link is not ready
device eth0 entered promiscuous mode
ADDRCONF(NETDEV_UP): eth0: link is not ready
WLmngr Daemon is running
optarg=0 shmId=0
device wl0 entered promiscuous mode
br0: port 3(wl0) entering forwarding state
wlevt is ready for new msg...
mcpd: sendto failed
device eth2 entered promiscuous mode
ADDRCONF(NETDEV_UP): eth2: link is not ready
BcmAdsl_Initialize=0xC01D5BB0, g_pFnNotifyCallback=0xC020A4E4
pSdramPHY=0xA7FFFFF8, 0xB6BFFFFF 0xFFFFFFFF
*** XfaceOffset: 0x21F90 => 0x21F90 ***
*** PhySdramSize got adjusted: 0x8E7E8 => 0xA463C ***
AdslCoreSharedMemInit: shareMemSize=375197(375200)
AdslCoreHwReset: pLocSbSta=85218000 bkupThreshold=1600
AdslCoreHwReset: AdslOemDataAddr = 0xA7F832F0
Error: kerSysRegisterDyingGaspHandler: list head is null
fapDrv_psmAlloc: fapIdx=0, size: 1600, offset=b1012960 bytes remaining 592
XTM Init: 200 rx BDs at 0xb1012960
fapDrv_psmAlloc: fapIdx=0, size: 128, offset=b1012fa0 bytes remaining 464
XTM Init: 16 rx BDs at 0xb1012fa0
ADDRCONF(NETDEV_UP): eth3: link is not ready
nf_conntrack version 0.5.0 (2032 buckets, 8128 max)
monitor task is initialized pid= 333
There is no Predefined DevicePin in CFE
WPS Device PIN = 11105824
ssk:error:29.138:initVodslBoundIpIfWanSideUpLocked:793:Failed to get WAN Connection object
br0: port 3(wl0) entering disabled state
device wl0 left promiscuous mode
br0: port 3(wl0) entering disabled state
device wl0 entered promiscuous mode
br0: port 3(wl0) entering forwarding state
ssk:error:29.577:ssk_main:774:cannot handle msg type 0x10000802
rupgrade:error:30.170:ruReadMessageFromSmd:23:got SYSTEM_BOOT msg
br0: port 3(wl0) entering disabled state
Setting SSID: "SAGEMCOM_8C37"
Setting SSID: "wl0_Guest1"
Setting SSID: "wl0_Guest2"
Setting SSID: "wl0_Guest3"
wlmngr_wlIfcDown: reset wifi_up_time
wlmngr_wlIfcDown: reset wifi_up_time
wlmngr_wlIfcDown: reset wifi_up_time
wlmngr_wlIfcDown: reset wifi_up_time
wlctl: Unsupported
wlctl: Unsupported
device wl0 left promiscuous mode
br0: port 3(wl0) entering disabled state
device wl0 entered promiscuous mode
br0: port 3(wl0) entering forwarding state
tr69c:error:32.152:updateTr69cCfgInfo:981:could not build full path to (null)
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: selected channel spec: 0x2b01
wlmngr_wlIfcUp: wifi_up_time=38
