Skip to content

Instantly share code, notes, and snippets.

@johnp789
Last active August 28, 2016 20:25
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save johnp789/85bc60a1ac0835a249aed90052932243 to your computer and use it in GitHub Desktop.
Save johnp789/85bc60a1ac0835a249aed90052932243 to your computer and use it in GitHub Desktop.
Trendnet TEW-714TRU factory image boot log
RT5350 # printenv
bootcmd=tftp
bootdelay=5
baudrate=57600
ethaddr="00:AA:BB:CC:DD:10"
ipaddr=10.10.10.123
serverip=10.10.10.3
ramargs=setenv bootargs root=/dev/ram rw
addip=setenv bootargs $(bootargs) ip=$(ipaddr):$(serverip):$(gatewayip):$(netmask):$(hostname):$(netdev):off
addmisc=setenv bootargs $(bootargs) console=ttyS0,$(baudrate) ethaddr=$(ethaddr) panic=1
flash_self=run ramargs addip addmisc;bootm $(kernel_addr) $(ramdisk_addr)
kernel_addr=BFC40000
u-boot=u-boot.bin
load=tftp 8A100000 $(u-boot)
u_b=protect off 1:0-1;era 1:0-1;cp.b 8A100000 BC400000 $(filesize)
loadfs=tftp 8A100000 root.cramfs
u_fs=era bc540000 bc83ffff;cp.b 8A100000 BC540000 $(filesize)
test_tftp=tftp 8A100000 root.cramfs;run test_tftp
stdin=serial
stdout=serial
stderr=serial
ethact=Eth0 (10/100-M)
Environment size: 765/4092 bytes
U-Boot 1.1.3 (Aug 31 2012 - 09:40:01)
Board: Ralink APSoC DRAM: 32 MB
relocate_code Pointer at: 81fb4000
spi_wait_nsec: 42
spi device id: c2 20 17 c2 20 (2017c220)
find flash: MX25L6405D
raspi_read: from:30000 len:1000
.*** Warning - bad CRC, using default environment
============================================
Ralink UBoot Version: 3.6.0.0
--------------------------------------------
ASIC 5350_MP (Port5<->None)
DRAM_CONF_FROM: Boot-Strapping
DRAM_TYPE: SDRAM
DRAM_SIZE: 256 Mbits
DRAM_WIDTH: 16 bits
DRAM_TOTAL_WIDTH: 16 bits
TOTAL_MEMORY_SIZE: 32 MBytes
Flash component: SPI Flash
Date:Aug 31 2012 Time:09:40:01
============================================
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:128, ways:4, linesz:32 ,total:16384
##### The CPU freq = 360 MHZ ####
estimate memory size =32 Mbytes
Please choose the operation:
1: Load system code to SDRAM via TFTP.
2: Load system code then write to Flash via TFTP.
3: Boot system code via Flash (default).
4: Entr boot command line interface.
7: Load Boot Loader code then write to Flash via Serial.
9: Load Boot Loader code then write to Flash via TFTP.
You choosed 3
 0
3: System Boot system code via Flash.
## Booting image at bc050000 ...
raspi_read: from:50000 len:40
. Image Name: Linux Kernel Image
Created: 2014-04-28 7:31:16 UTC
Image Type: MIPS Linux Kernel Image (lzma compressed)
Data Size: 5127047 Bytes = 4.9 MB
Load Address: 80000000
Entry Point: 8042c000
raspi_read: from:50040 len:4e3b87
............................................................................... Verifying Checksum ... OK
Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 8042c000) ...
## Giving linux memsize in MB, 32
Starting kernel ...
LINUX started...
THIS IS ASIC
Linux version 2.6.21 (root@ubuntu) (gcc version 3.4.2) #228 Mon Apr 28 15:31:07 CST 2014
The CPU frequency set to 360 MHz
CPU revision is: 0001964c
Determined physical RAM map:
memory: 02000000 @ 00000000 (usable)
Built 1 zonelists. Total pages: 8128
Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock5
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 16kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
Cache parity protection disabled
cause = 40808060, status = 11000000
PID hash table entries: 128 (order: 7, 512 bytes)
calculating r4koff... 0015f900(1440000)
CPU frequency 360.00 MHz
Using 180.000 MHz high precision timer.
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 28000k/32768k available (3357k kernel code, 4768k reserved, 911k data, 112k init, 0k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
NET: Registered protocol family 2
Time: MIPS clocksource has been installed.
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
deice id : c2 20 17 c2 20 (2017c220)
MX25L6405D(c2 2017c220) (8192 Kbytes)
mtd .name = raspi, .size = 0x00800000 (8M) .erasesize = 0x00010000 (64K) .numeraseregions = 0
Creating 7 MTD partitions on "raspi":
0x00000000-0x00800000 : "ALL"
0x00000000-0x00030000 : "Bootloader"
0x00030000-0x00040000 : "Config"
0x00040000-0x00050000 : "Factory"
0x00050000-0x001a5bc7 : "Kernel"
mtd: partition "Kernel" doesn't end on an erase block -- force read-only
0x001a5bc7-0x01000000 : "RootFS"
mtd: partition "RootFS" extends beyond the end of device "raspi" -- size truncated to 0x65a439
mtd: partition "RootFS" doesn't start on an erase block boundary -- force read-only
0x00050000-0x01000000 : "Kernel_RootFS"
mtd: partition "Kernel_RootFS" extends beyond the end of device "raspi" -- size truncated to 0x7b0000
RT3xxx EHCI/OHCI init.
squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher
squashfs: LZMA suppport for slax.org by jro
fuse init (API version 7.8)
io scheduler noop registered (default)
Ralink gpio driver initialized
HDLC line discipline: version $Revision: 1.1.1.1 $, maxframe=4096
N_HDLC line discipline registered.
Serial: 8250/16550 driver $Revision: 1.8 $ 2 ports, IRQ sharing disabled
serial8250: ttyS0 at I/O 0xb0000500 (irq = 37) is a 16550A
serial8250: ttyS1 at I/O 0xb0000c00 (irq = 12) is a 16550A
loop: loaded (max 8 devices)
rdm_major = 253
Ralink APSoC Ethernet Driver Initilization. v2.1 256 rx/tx descriptors allocated, mtu = 1500!
MAC_ADRH -- : 0x00000014
MAC_ADRL -- : 0xd1fde24d
PROC INIT OK!
PPP generic driver version 2.4.2
PPP BSD Compression module registered
NET: Registered protocol family 24
PPPoL2TP kernel driver, V0.17
PPTP driver version 0.8.1
=== pAd = c0019000, size = 630176 ===
<-- RTMPAllocAdapterBlock, Status=0
block2mtd: version $Revision: 1.1.1.1 $
rt3xxx-ehci rt3xxx-ehci: Ralink EHCI Host Controller
rt3xxx-ehci rt3xxx-ehci: new USB bus registered, assigned bus number 1
rt3xxx-ehci rt3xxx-ehci: irq 18, io mem 0x101c0000
rt3xxx-ehci rt3xxx-ehci: USB 0.0 started, EHCI 1.00, driver 10 Dec 2004
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
rt3xxx-ohci rt3xxx-ohci: RT3xxx OHCI Controller
rt3xxx-ohci rt3xxx-ohci: new USB bus registered, assigned bus number 2
rt3xxx-ohci rt3xxx-ohci: irq 18, io mem 0x101c1000
usb usb2: configuration #1 chosen from 1 choice
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
usbcore: registered new interface driver usbserial
drivers/usb/serial/usb-serial.c: USB Serial support registered for generic
usbcore: registered new interface driver usbserial_generic
drivers/usb/serial/usb-serial.c: USB Serial Driver core
drivers/usb/serial/usb-serial.c: USB Serial support registered for GSM modem (1-port)
usbcore: registered new interface driver option
drivers/usb/serial/option.c: USB Driver for GSM modems: v0.7.1
nf_conntrack version 0.5.0 (256 buckets, 2048 max)
ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Restricted Cone
TCP cubic registered
NET: Registered protocol family 1
NET: Registered protocol family 10
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 112k freed
init started: BusyBox v1.19.2 (2014-04-28 15:18:25 CST)
Algorithmics/MIPS FPU Emulator v1.5
devpts: called with bogus options
Welcome to
_______ _______ ___ __ ____ _ _ ___
| ___ \| __ || | |__|| \ | || | / /
| |___| || |__| || |__ __ | \| || |/ /
| _ /| _ || || || |\ || \
|__| \__\|__| |__||______||__||_| \____||_|\___\
=System Architecture Department=
(none) login: init_mdev.sh
Password for 'admin' changed
sigusr1:16 --sigusr2:17
internet.sh
Password for 'admin' changed
Cannot get device settings: No such device
Cannot get wake-on-lan settings: No such device
Cannot get message level: No such device
Cannot get link status: No such device
rmmod: can't unload 'ralink_wdt': unknown symbol in module, or unknown parameter
rmmod: can't unload 'cls': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hw_nat': unknown symbol in module, or unknown parameter
rmmod: can't unload 'raeth': unknown symbol in module, or unknown parameter
insmod: can't insert 'bridge': No such file or directory
insmod: can't insert 'mii': No such file or directory
insmod:
phy_tx_ring = 0x01d56000, tx_ring = 0xa1d56000
phy_rx_ring0 = 0x01d57000, rx_ring0 = 0xa1d57000
MAC_ADRH -- : 0x00000014
MAC_ADRL -- : 0xd1fde24d
can't insert 'rRT305x_ESW: Link Status Changed
aeth': No such file or directory
##### disable 1st wireless interface #####
rmmod: can't unload 'rt2860v2_ap_net': unknown symbol in module, or unknown parameter
rmmod: can't unload 'rt2860v2_ap': unknown symbol in module, or unknown parameter
rmmod: can't unload 'rt2860v2_ap_util': unknown symbol in module, or unknown parameter
rmmod: can't unload 'rt2860v2_sta_net': unknown symbol in module, or unknown parameter
rmmod: can't unload 'rt2860v2_sta': unknown symbol in module, or unknown parameter
rmmod: can't unload 'rt2860v2_sta_util': unknown symbol in module, or unknown parameter
insmod: can't insert 'rt2860v2_ap_util': No such file or directory
insmod: can't insert 'rt2860v2_ap': No such file or directory
insmod: can't insert 'rt2860v2_ap_net': No such file or directory
rmmod: can't unload 'nf_nat_pptp': unknown symbol in module, or unknown parameter
rmmod: can't unload 'nf_conntrack_pptp': unknown symbol in module, or unknown parameter
rmmod: can't unload 'nf_nat_proto_gre': unknown symbol in module, or unknown parameter
rmmod: can'tRX DESC a1d8f000 size = 2048
unload 'nf_conntrack_proto_gre': unknown symbol<-- RTMPAllocTxRxRingMemory, Status=0
in module, or unknown parameter
Key1Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
1. Phy Mode = 9
2. Phy Mode = 9
TXALC> bInternalTxALC = 1
3. Phy Mode = 9
NICInitAsicFromEEPROM: pAd->TxPowerCtrl.bInternalTxALC = 1
Channel 1 TSSI delta=-1
Channel 2 TSSI delta=-1
Channel 3 TSSI delta=-1
Channel 4 TSSI delta=-1
Channel 5 TSSI delta=-1
Channel 6 TSSI delta=-1
Channel 7 TSSI delta=-1
Channel 8 TSSI delta=-1
Channel 9 TSSI delta=-1
Channel 10 TSSI delta=-1
Channel 11 TSSI delta=-1
Channel 12 TSSI delta=-1
Channel 13 TSSI delta=-1
Channel 14 TSSI delta=-1
TSSIBase(0x6E) = 3F, TxPowerOFDM54 = 6
EEPROM_CCK_MCS0_MCS1(0xDE) = 0x6
EEPROM_CCK_MCS2_MCS3(0xDF) = 0x6
RT5350_desiredTSSIOverCCK[0] = 1133307
RT5350_desiredTSSIOverCCK[1] = 1133307
RT5350_desiredTSSIOverCCK[2] = 1133307
RT5350_desiredTSSIOverCCK[3] = 1133307
EEPROM_OFDM_MCS0_MCS1(0xE0) = 0xC
EEPROM_OFDM_MCS2_MCS3(0xE1) = 0xA
EEPROM_OFDM_MCS4_MCS5(0xE2) = 0x8
EEPROM_OFDM_MCS6_MCS7(0xE3) = 0x6
RT5350_desiredTSSIOverOFDM[0] = 1240000
RT5350_desiredTSSIOverOFDM[1] = 1240000
RT5350_desiredTSSIOverOFDM[2] = 1240000
RT5350_desiredTSSIOverOFDM[3] = 1240000
RT5350_desiredTSSIOverOFDM[4] = 931833
RT5350_desiredTSSIOverOFDM[5] = 931833
RT5350_desiredTSSIOverOFDM[6] = 630000
RT5350_desiredTSSIOverOFDM[7] = 630000
EEPROM_HT_MCS0_MCS1(0xE4) = 0xC
EEPROM_HT_MCS2_MCS3(0xE5) = 0xA
EEPROM_HT_MCS4_MCS5(0xE6) = 0x8
EEPROM_HT_MCS6_MCS7(0xE7) = 0x6
RTMPSetPhyMode: channel is out of range, use first channel=0
MCS Set = ff 00 00 00 01
SYNC - BBP R4 to 20MHz.l
The 2-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 2
Main bssid = 00:14:d1:fd:e2:4d
<==== rt28xx_init, Status=0
0x1300 = 00064380
##### iwpriv ra0 set HwAntDiv=2 #####
vconfig: ioctl error for rem: Invalid argument
vconfig: ioctl error for rem: Invalid argument
rmmod: can't unload '8021q': unknown symbol in module, or unknown parameter
insmod: can't insert '8021q': No such file or directory
eth2.2: Setting MAC address to 00 14 d1 fd e2 4e.
device eth2 entered promiscuous mode
VLAN (eth2.2): Setting underlying device (eth2) to promiscious mode.
ifconfig: SIOCGIFFLAGS: No such device
brctl: bridge br0: No such device or address
iptables v1.3.5: can't initialize iptables table `mangle': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
##### config Ralink ESW vlan partition (WLLLL) #####
switch reg write offset=14, value=405555
switch reg write offset=50, value=2001
switch reg write offset=98, value=7f3f
switch reg write offset=e4, value=3f
switch reg write offset=40, value=1002
switch reg write offset=44, value=1001
switch reg write offset=48, value=1001
switch reg write offset=70, value=ffff417e
done.
device ra0 entered promiscuous mode
eth2.1: dev_set_promiscuity(master, 1)
device eth2.1 entered promiscuous mode
udhcpc (v1.19.2) started
br0: port 2(eth2.1) entering learning state
br0: port 1(ra0) entering learning state
ifconfig: SIOCSIFFLAGS: Cannot assign requested address
ifconfig: SIOCSIFFLAGS: Cannot assign requested address
br0: topology change detected, propagating
br0: port 2(eth2.1) entering forwarding state
br0: topology change detected, propagating
br0: port 1(ra0) entering forwarding state
killall: udhcpd: no process killed
Set: phy[4].reg[0] = 3900
Set: phy[1].reg[0] = 3900
Set: phy[2].reg[0] = 3900
Set: phy[3].reg[0] = 3900
Set: phy[4].reg[0] = 3100
Set: phy[1].reg[0] = 3100
Set: phy[2].reg[0] = 3100
Set: phy[3].reg[0] = 3100
ifconfig: SIOCGIFFLAGS: No such device
rm: can't remove '/etc/radvd.conf': No such file or directory
killall: nmbd: no process killed
killall: smbd: no process killed
1st partition does not exist
samba.sh TEW-714TRU TEW-714TRU
iptables -F -t filter 1>/dev/null 2>&1
iptables -D FORWARD -j macipport_filter 1>/dev/null 2>&1
iptables -F macipport_filter 1>/dev/null 2>&1
iptables -D FORWARD -j web_filter 1>/dev/null 2>&1
iptables -F web_filter 1>/dev/null 2>&1
iptables -D FORWARD -j malicious_filter 1>/dev/null 2>&1
iptables -F malicious_filter 1>/dev/null 2>&1
iptables -D INPUT -j malicious_input_filter 1>/dev/null 2>&1
iptables -F malicious_input_filter 1>/dev/null 2>&1
iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -t filter -N web_filter 1>/dev/null 2>&1
iptables -t filter -N macipport_filter 1>/dev/null 2>&1
iptables -t filter -N malicious_filter 1>/dev/null 2>&1
iptables -t filter -N synflood_filter 1>/dev/null 2>&1
iptables -t filter -N malicious_input_filter 1>/dev/null 2>&1
iptables -t filter -N synflood_input_filter 1>/dev/null 2>&1
iptables -t filter -A FORWARD -j web_filter 1>/dev/null 2>&1
iptables -t filter -A FORWARD -j macipport_filter 1>/dev/null 2>&1
iptables -t filter -A FORWARD -j malicious_filter 1>/dev/null 2>&1
iptables -t filter -A malicious_filter -p tcp --syn -j synflood_filter 1>/dev/null 2>&1
iptables -t filter -A INPUT -j malicious_input_filter 1>/dev/null 2>&1
iptables -t filter -A malicious_input_filter -p tcp --syn -j synflood_input_filter 1>/dev/null 2>&1
iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu 1>/dev/null 2>&1
/bin/super_dmz -f
sh: /bin/super_dmz: not found
iptables -t nat -D PREROUTING -j port_forward 1>/dev/null 2>&1
iptables -t nat -F port_forward 1>/dev/null 2>&1; iptables -t nat -X port_forward 1>/dev/null 2>&1
iptables -t nat -D PREROUTING -j DMZ 1>/dev/null 2>&1
iptables -t nat -F DMZ 1>/dev/null 2>&1; iptables -t nat -X DMZ 1>/dev/null 2>&1
iptables -t nat -N port_forward 1>/dev/null 2>&1; iptables -t nat -I PREROUTING 1 -j port_forward 1>/dev/null 2>&1
iptables -t nat -N DMZ 1>/dev/null 2>&1; iptables -t nat -I PREROUTING 2 -j DMZ 1>/dev/null 2>&1
ntp.sh
pool.ntp.org: Unknown host
ddns.sh
kill -9 `cat /var/run/wscd.pid.ra0`
cat: can't open '/var/run/wscd.pid.ra0': No such file or directory
sh: you need to specify whom to kill
iwprivThe 2-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 2
ra0 set WscConfMode=0 1>/dev/null 2>&1
iwpriv ra0 set WscConfMode=7
The 2-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 2
route add -host 239.255.255.250 dev br0 1>/dev/null 2>&1
wscd -m 1 -a 192.168.10.1 -i ra0 &
libupnp: using UDP SSDP_PORT = 1900
killall -q klogd
killall -q syslogd
syslogd -C8 1>/dev/null 2>&1
klogd 1>/dev/null 2>&1
killall -q zebra
killall -q ripd
echo 0 > /proc/sys/net/ipv6/conf/all/forwarding
webs: Listening for HTTP requests at address 192.168.10.1
[01/Jan/2000:00:00:27 +0000] boa: server version Boa/0.94.14rc21
[01/Jan/2000:00:00:27 +0000] boa: server built Apr 28 2014 at 15:21:15.
[01/Jan/2000:00:00:27 +0000] boa: starting server pid=1314, port 8098
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment