Informações sobre o Askey RTF3505VW-GV GPON / fibra modem / router / gateway. Teardown, hacking, unlocking (desbloqueio), firmwares, custom images, recuperação, bridge.

Clique na foto para abrir o álbum.

HELO
CPUI
L1CI
PLLI
PMCB
HELO
CPUI
L1CI
4.1404Apatch3-1.0.38-117.002 134
DRAM
----
PHYS
ZQDN
PHYE
DINT
TST1
TST2
PASS
----
ZBSS
L12F
MAIN
FPS0
BT07
0001
BT06
0300
NAN3
RFS1
NAN5

Base: 4.14_04Apatch3
CFE version 1.0.38-117.2 for BCM96838 (32bit,SP,BE)
Build Date: Wed Oct 14 03:39:40 CST 2015 (openwrt@OB2D.askey.com.tw)
Copyright (C) 2000-2013 Broadcom Corporation.

Chip ID: BCM68380_B0, MIPS: 600MHz, DDR: 533MHz, Bus: 240MHz
RDP: 800MHz
Main Thread: TP0
Total Memory: 134217728 bytes (128MB)
Boot Address: 0xbfc00000

NAND flash device: Spansion S34ML01G1, id 0x01f1 block 128KB size 131072KB
Configuring RGMII pinpux
ddr_tm_base_address = 0xa0800000
f_initialize_bbh_dma_sdma_related_arrays:(967) errorenable IH Wan-Wan forwarding...
Initializing port 0
Initializing port 1
Initializing port 2
Initializing port 3
Initializing port 4
oren_data_path_go done!!!
Power On Self Test - DRAM         : OK
Board IP address                  : 192.168.1.1:ffffff00  
Host IP address                   : 192.168.1.100  
Gateway IP address                :   
Run from flash/host/tftp (f/h/c)  : f  
Default host run file name        : vmlinux  
Default host flash file name      : bcm963xx_fs_kernel  
Boot delay (0-9 seconds)          : 1  
Boot image (0=latest, 1=previous) : 0  
Default host ramdisk file name    :   
Default ramdisk store address     :   
Board Id (0-27)                   : 3505VW  
Number of MAC Addresses (1-32)    : 15  
Base MAC Address                  : FC:B4:E6:xx:xx:xx  
PSI Size (1-64) KBytes            : 64  
Enable Backup PSI [0|1]           : 1  
System Log Size (0-256) KBytes    : 256  
Auxillary File System Size Percent: 0  
Main Thread Number [0|1]          : 0  
GPON Serial Number                : "ASKY00000000"  
GPON Password                     : "00000000000000000000"  
MC memory allocation (MB)         : 0  
TM memory allocation (MB)         : 0  
Voice Board Configuration (0-1)   : LE9540  
rtf hw version                    : REV4_B4  
bosa_sn                           : 0000000000000  
gpon_regs (hex, the format is XX:XX:...): 00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:23:07:00:00:00:00:00:00:14:02:01:56:00:11:D7:80:FF:FF:00:00:42:01:4A:00:39:32:18:33:01:2A:A0:D1:04:00:41:00:73:00:28:11:EA:EA:00:07:09:00:B4:00:66:2B:63:15:42:02:41:99:CC:00:14:AA:72:27:02:00:00:00:00:FF:FF:01:4B:08:03:07:1A:AF:06:FF:01:20  
bosa_vapd (integer, unit:0.0001)        : 393700  
bosa_apd_a (integer, unit:0.0001)       : 550  
bosa_apd_b (integer, unit:0.0001)       : 450  
bosa_apd_r1 (integer, unit:0.0001)      : 1100000  
bosa_apd_r2 (integer, unit:0.0001)      : 43000  

Creating CPU ring for queue number 0 with 32 packets descriptor=0x8066afd4
 Done initializing Ring 0 Base=0xa220f690K End=0xa220f890K calculated entries= 32 RDD Base=0x0220f690K descriptor=0x8066afd4
Open PHY 1 on MAC 0 : link state = Down
Open PHY 2 on MAC 1 : link state = Down
Open PHY 3 on MAC 2 : link state = Down
Open PHY 4 on MAC 3 : link state = Down
Open PHY 25 on MAC 4 : link state = 1000M Full
*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 110
seq1 = 7, seq2 = 6, bootPartition = 0x30, rootfsA = 1
Booting from latest image (0xbfc20000) ...
Decompression OK!
Entry at 0x80327e00
Closing network.
Starting program at 0x80327e00
Linux version 3.4.11-rt19+ (openwrt@OB2D.askey.com.tw) (gcc version 4.6.2 (Buildroot 2011.11) ) #1 SMP PREEMPT Wed Oct 14 03:29:03 CST 2015
3505VW prom init
CPU revision is: 0002a080 (Broadcom BMIPS4350)
Determined physical RAM map:
 memory: 01400000 @ 06c00000 (reserved)
 memory: 00400000 @ 06800000 (reserved)
 memory: 06800000 @ 00000000 (usable)
Zone PFN ranges:
  DMA      0x00000000 -> 0x00001000
  Normal   0x00001000 -> 0x00006800
Movable zone start PFN for each node
Early memory PFN ranges
    0: 0x00000000 -> 0x00006800
On node 0 totalpages: 26624
free_area_init_node: node 0, pgdat 8040a660, node_mem_map 81000000
  DMA zone: 32 pages used for memmap
  DMA zone: 0 pages reserved
  DMA zone: 4064 pages, LIFO batch:0
  Normal zone: 176 pages used for memmap
  Normal zone: 22352 pages, LIFO batch:3
PERCPU: Embedded 7 pages/cpu @810d3000 s5088 r8192 d15392 u32768
pcpu-alloc: s5088 r8192 d15392 u32768 alloc=8*4096
pcpu-alloc: [0] 0 [0] 1 
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 26416
Kernel command line: ro noinitrd  irqaffinity=0
PID hash table entries: 512 (order: -1, 2048 bytes)
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes.
Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes
Memory: 100924k/106496k available (3222k kernel code, 5572k reserved, 853k data, 200k init, 0k highmem)
Preemptible hierarchical RCU implementation.
NR_IRQS:256
console [ttyS0] enabled
Allocating memory for DSP module core and initialization code
Allocated DSP module memory - CORE=0x0 SIZE=0, INIT=0x0 SIZE=0
Calibrating delay loop... 598.01 BogoMIPS (lpj=299008)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
--Kernel Config--
  SMP=1
  PREEMPT=1
  DEBUG_SPINLOCK=0
  DEBUG_MUTEXES=0
Broadcom Logger v0.1 Oct 14 2015 03:20:52
CPU revision is: 0002a080 (Broadcom BMIPS4350)
Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes.
Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes
Brought up 2 CPUs
NET: Registered protocol family 16
PMC Driver Init... done.
registering PCI controller with io_map_base unset
registering PCI controller with io_map_base unset
registering PCI controller with io_map_base unset
bio: create slab <bio-0> at 0
PCI host bridge to bus 0000:00
pci_bus 0000:00: root bus resource [mem 0xeff00000-0xefffffff]
pci_bus 0000:00: root bus resource [io  0xf1000000-0xf100ffff]
PCI host bridge to bus 0000:01
pci_bus 0000:01: root bus resource [mem 0xd0000000-0xdfffffff]
pci_bus 0000:01: root bus resource [??? 0x00000000 flags 0x0]
pci 0000:01:00.0: [14e4:6838] type 01 class 0x060400
pci 0000:01:00.0: PME# supported from D0 D3hot
pci 0000:02:00.0: [14e4:a8db] type 00 class 0x028000
pci 0000:02:00.0: reg 10: [mem 0x00000000-0x00007fff 64bit]
pci 0000:02:00.0: supports D1 D2
pci 0000:01:00.0: BAR 8: assigned [mem 0xd0000000-0xd00fffff]
pci 0000:02:00.0: BAR 0: assigned [mem 0xd0000000-0xd0007fff 64bit]
pci 0000:01:00.0: PCI bridge to [bus 02-02]
pci 0000:01:00.0:   bridge window [mem 0xd0000000-0xd00fffff]
PCI: Enabling device 0000:01:00.0 (0000 -> 0002)
PCI host bridge to bus 0000:03
pci_bus 0000:03: root bus resource [mem 0xe0000000-0xefefffff]
pci_bus 0000:03: root bus resource [??? 0x00000000 flags 0x0]
pci 0000:03:00.0: [14e4:6838] type 01 class 0x060400
pci 0000:03:00.0: PME# supported from D0 D3hot
pci 0000:03:00.0: PCI bridge to [bus 04-04]
bcmhs_spi bcmhs_spi.1: master is unqueued, this is deprecated
skbFreeTask created successfully
BLOG v3.0 Initialized
BLOG Rule v1.0 Initialized
Broadcom IQoS v0.1 Oct 14 2015 03:28:00 initialized
Broadcom GBPM v0.1 Oct 14 2015 03:28:00 initialized
Switching to clocksource MIPS
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 3, 32768 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP: reno registered
UDP hash table entries: 128 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 128 (order: 0, 4096 bytes)
NET: Registered protocol family 1
PCI: CLS 0 bytes, default 16
init_bcm_tstamp: unhandled mips_hpt_freq=300000000, adjust constants in bcm_tstamp.c
bcm_tstamp initialized, (hpt_freq=300000000 2us_div=300 2ns_mult=0 2ns_shift=0)
squashfs: version 4.0 (2009/01/31) Phillip Lougher
jffs2: version 2.2. (NAND) © 2001-2006 Red Hat, Inc.
msgmni has been set to 197
io scheduler noop registered (default)
Broadcom NAND controller (BrcmNand Controller)
mtd->oobsize=0, mtd->eccOobSize=0
NAND_CS_NAND_XOR=00000000
B4: NandSelect=40000001, nandConfig=15142200, chipSelect=0
brcmnand_read_id: CS0: dev_id=01f1801d
After: NandSelect=40000001, nandConfig=15142200
Block size=00020000, erase shift=17
NAND Config: Reg=15142200, chipSize=128 MB, blockSize=128K, erase_shift=11
busWidth=1, pageSize=2048B, page_shift=11, page_mask=000007ff
timing1 not adjusted: 6574845b
timing2 not adjusted: 00001e96
BrcmNAND mfg 1 f1 SPANSION_S30ML01GP_08 128MB on CS0

Found NAND on CS0: ACC=f7441010, cfg=15142200, flashId=01f1801d, tim1=6574845b, tim2=00001e96
BrcmNAND version = 0x80000500 128MB @00000000
brcmnand_scan: B4 nand_select = 40000001
brcmnand_scan: After nand_select = 40000001
handle_acc_control: default CORR ERR threshold  1 bits
ACC: 16 OOB bytes per 512B ECC step; from ID probe: 16
page_shift=11, bbt_erase_shift=17, chip_shift=27, phys_erase_shift=17
Brcm NAND controller version = 5.0 NAND flash size 128MB @18000000
ECC layout=brcmnand_oob_bch4_2k
brcmnand_scan:  mtd->oobsize=64
brcmnand_scan: oobavail=35, eccsize=512, writesize=2048
brcmnand_scan, eccsize=512, writesize=2048, eccsteps=4, ecclevel=4, eccbytes=7
-->brcmnand_default_bbt
brcmnand_default_bbt: bbt_td = bbt_slc_bch4_main_descr
Bad block table Bbt0 found at page 0000ffc0, version 0x01 for chip on CS0
Bad block table 1tbB found at page 0000ff80, version 0x01 for chip on CS0
brcmnand_reset_corr_threshold: default CORR ERR threshold  1 bits for CS0
brcmnand_reset_corr_threshold: CORR ERR threshold changed to 3 bits for CS0
brcmnandCET: Status -> Deferred
Creating 7 MTD partitions on "brcmnand.0":
0x000000020000-0x000002580000 : "rootfs"
0x000002580000-0x000004ae0000 : "rootfs_update"
0x000007b00000-0x000007f00000 : "data"
0x000000000000-0x000000020000 : "nvram"
0x000000020000-0x000002580000 : "image"
0x000002580000-0x000004ae0000 : "image_update"
0x000004b00000-0x000007b00000 : "aux_fs"
PPP generic driver version 2.4.2
PPP BSD Compression module registered
PPP Deflate Compression module registered
NET: Registered protocol family 24
i2c /dev entries driver
brcmboard: brcm_board_init entry
SES: ses_5g_Btn_irq 0x8002
SES: ses_5g_Btn_gpio 0x8004
SES: 5g Button Interrupt 0x8002 is enabled
SES: 5g_ext_irq_idx 0x2
SES: 5g Button Interrupt gpio is 4
SES: 5g_external_irq 0x8a
SES: 5g_dev_id = 80401f60 
SES: 5g LED GPIO 0x9007 is enabled
SES: 2.4g_sesBtn_irq 0x1
SES: 2.4g_sesBtn_gpio 0x800e
SES: Button Interrupt 0x1 is enabled
SES: 2.4g_external_irq 0x89
SES: 2.4g_dev_id = 80401f64 
At booting process.....
brcm_board_init: Reset config Interrupt gpio is 69
Serial: BCM63XX driver $Revision: 3.00 $
Magic SysRq with Auxilliary trigger char enabled (type ^ h for list of supported commands)
ttyS0 at MMIO 0xb4e00500 (irq = 9) is a BCM63XX
ttyS1 at MMIO 0xb4e00520 (irq = 10) is a BCM63XX
BPM: tot_mem_size=134217728B (128MB), buf_mem_size <10%> =13421770B (12MB), num of buffers=5178, buf size=2592
Broadcom BPM Module Char Driver v0.1 Oct 14 2015 03:21:53 Registered<244>
TCP: cubic registered
NET: Registered protocol family 10
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
Initializing MCPD Module
Ebtables v2.0 registered
ebt_time registered
ebt_ftos registered
ebt_wmm_mark registered
8021q: 802.1Q VLAN Support v1.8
VFS: Mounted root (jffs2 filesystem) readonly on device 31:0.
Freeing unused kernel memory: 200k freed
init started: BusyBox v1.17.2 (2015-10-14 03:35:38 CST)
starting pid 202, tty '': '/bin/sh -l -c "bcm_boot_launcher start"'
Mounting filesystems...
UBI: attaching mtd6 to ubi2
UBI: physical eraseblock size:   131072 bytes (128 KiB)
UBI: logical eraseblock size:    126976 bytes
UBI: smallest flash I/O unit:    2048
UBI: VID header offset:          2048 (aligned 2048)
UBI: data offset:                4096
UBI: max. sequence number:       198
UBI: attached mtd6 to ubi2
UBI: MTD device name:            "aux_fs"
UBI: MTD device size:            48 MiB
UBI: number of good PEBs:        384
UBI: number of bad PEBs:         0
UBI: number of corrupted PEBs:   0
UBI: max. allowed volumes:       128
UBI: wear-leveling threshold:    4096
UBI: number of internal volumes: 1
UBI: number of user volumes:     1
UBI: available PEBs:             0
UBI: total number of reserved PEBs: 384
UBI: number of PEBs reserved for bad PEB handling: 3
UBI: max/mean erase counter: 3/2
UBI: image sequence number:  1382342180
UBI: background thread "ubi_bgt2d" started, PID 224
UBI device number 2, total 384 LEBs (48758784 bytes, 46.5 MiB), available 0 LEBs (0 bytes), LEB size 126976 bytes (124.0 KiB)
UBIFS: recovery needed
UBIFS: recovery completed
UBIFS: mounted UBI device 2, volume 0, name "aux_fs"
UBIFS: file system size:   46727168 bytes (45632 KiB, 44 MiB, 368 LEBs)
UBIFS: journal size:       2285568 bytes (2232 KiB, 2 MiB, 18 LEBs)
UBIFS: media format:       w4/r0 (latest is w4/r0)
UBIFS: default compressor: lzo
UBIFS: reserved for root:  2207039 bytes (2155 KiB)
Configuring system...
Loading drivers and kernel modules... 

i2c i2c-0: Failed to register i2c client laser_i2c at 0x4f (-16)
i2c i2c-0: Failed to register i2c client laser_i2c at 0x4f (-16)
bosa_drv: module license 'Proprietary' taints kernel.
Disabling lock debugging due to kernel taint
/home2/_Build/BRCMGPON/RTF35XX/414L04A_gvt/bcmdrivers/broadcom/char/rtfdef/bosa/bosa_drv.c:bosa_tx_power_enable[LN332] enable gpon tx power, gpio[72]
LOGGER driver Init Done : 0x857fb580
START GPON SerDes Init script
 !!!!   PLL locked !!!!!!     !!!!   RX CDR locked !!!!!!     !!!!   TX CDR locked !!!!!!    GPON BEN Calibration Done 
GPON SerDes Initialization Sequence Done 
f_initialize_bbh_dma_sdma_related_arrays:(967) errorenable IH Wan-Wan forwarding...
Initializing port 0
Initializing port 1
Initializing port 2
Initializing port 3
Initializing port 4
oren_data_path_go done!!!
# Created object <system>
RDPA lan init
# Created object <port/index=lan0>
# Created object <port/index=lan1>
# Created object <port/index=lan2>
# Created object <port/index=lan3>
# Created object <port/index=lan4>
# Created object <egress_tm/dir=ds,index=0>
# Created object <egress_tm/dir=ds,index=1>
# Created object <egress_tm/dir=ds,index=2>
# Created object <egress_tm/dir=ds,index=3>
# Created object <egress_tm/dir=ds,index=4>
RDPA lan init end
Creating CPU ring for queue number 0 with 128 packets descriptor=0xc05806e0
 Done initializing Ring 0 Base=0xa5308080 End=0xa5308880 calculated entries= 128 RDD Base=0x05308080 descriptor=0xc05806e0
rdpa filter init start!!
# Created object <filter>
rdpa filter init end
Bridge fastpath module. compiled Oct 14 2015 , 03:27:14
brcmchipinfo: brcm_chipinfo_init entry
NBUFF v1.0 Initialized
Initialized fcache state
Broadcom Packet Flow Cache  Char Driver v2.2 Oct 14 2015 03:23:11 Registered<242>
Created Proc FS /procfs/fcache
Broadcom Packet Flow Cache registered with netdev chain
Broadcom Packet Flow Cache learning via BLOG enabled.
[FHW]  pktDbgLvl[0xc0632800]=0
[FHW]  fhw_construct: 
Initialized Fcache HW accelerator layer state
flwStatsThread created
Constructed Broadcom Packet Flow Cache v2.2 Oct 14 2015 03:23:11
Broadcom Packet Flow Cache HW acceleration enabled.
Broadcom Packet Flow Cache HW acceleration enabled.
i2c i2c-0: new_device: Instantiated device gpon_i2c at 0x50
i2c i2c-0: new_device: Instantiated device gpon_i2c at 0x51
Broadcom BCM68380_B0 Ethernet Network Device v0.1 Oct 14 2015 03:27:15
dgasp: kerSysRegisterDyingGaspHandler: bcmsw registered 
eth0: MAC Address: FC:B4:E6:xx:xx:xx
eth1: MAC Address: FC:B4:E6:xx:xx:xx
eth2: MAC Address: FC:B4:E6:xx:xx:xx
eth3: MAC Address: FC:B4:E6:xx:xx:xx
eth4: MAC Address: FC:B4:E6:xx:xx:xx
Creating CPU ring for queue number 3 with 512 packets descriptor=0xc0580764
 Done initializing Ring 3 Base=0xa41b4080 End=0xa41b6080 calculated entries= 512 RDD Base=0x041b4080 descriptor=0xc0580764
eth4 Link UP 1000 mbps full duplex
message received before monitor task is initialized kerSysSendtoMonitorTask 
cpu Ring 3 has been flushed
Creating CPU ring for queue number 8 with 1024 packets descriptor=0xc0580840
 Done initializing Ring 8 Base=0xa4390080 End=0xa4394080 calculated entries= 1024 RDD Base=0x04390080 descriptor=0xc0580840
 Wifi Forwarding Driver initialized !
timer = 500, threshold = 1024 number_of_packets_to_read = 128 fist pci queue 8 number_of_queues = 1
--SMP support
wl: dsl_tx_pkt_flush_len=338
wl: norm_wmark_tot=3365, pktc_wmark_tot=2048
Initializing WLCSM Module
PCI: Enabling device 0000:02:00.0 (0000 -> 0002)
wl: passivemode=1
wl0: creating kthread wl0-kthrd
wl: napimode=0
Neither SPROM nor OTP has valid image
wl:srom/otp not programmed, using main memory mapped srom info(wombo board)
wl: ID=pci/2/0/
wl: ID=pci/2/0/
wl: loading /etc/wlan/bcm43217_map.bin
srom rev:8
wl0: allocskbmode=1 currallocskbsz=512
wl0: Broadcom BCMa8db 802.11 Wireless Controller 6.37.14.4803.cpe4.14L04Apatch3.0-kdb
dgasp: kerSysRegisterDyingGaspHandler: wl0 registered 
Loading PCM shim driver
Endpoint: endpoint_init entry
Endpoint: endpoint_init COMPLETED
Creating CPU ring for queue number 2 with 32 packets descriptor=0xc0580738
 Done initializing Ring 2 Base=0xa2451c80 End=0xa2451e80 calculated entries= 32 RDD Base=0x02451c80 descriptor=0xc0580738
[NTC ploamFsm] printSerialPasswd: SN=xx:xx:xx:xx:xx:xx:xx:xx
[NTC ploamFsm] printSerialPasswd: PW=00:00:00:00:00:00:00:00:00:00
dgasp: kerSysRegisterDyingGaspHandler: gpon0 registered 
[NTC ploamFsm] bcm_ploamCreate: ploam driver created.
Creating CPU ring for queue number 4 with 64 packets descriptor=0xc0580790
 Done initializing Ring 4 Base=0xa2e19080 End=0xa2e19480 calculated entries= 64 RDD Base=0x02e19080 descriptor=0xc0580790

Ploam init and Tx disable !
Broadcom 802.1Q VLAN Interface, v0.1
PCIe1: No device found - Powering down
[INF rdpadrv] rdpa_cmd_drv_init: Broadcom Runner Packet Processor Char Driver v0.2 Oct 14 2015 03:27:00 Registered. Device: bcmrdpa Ver:<251>

[INF rdpadrv] rdpa_cmd_drv_init: RDPA driver init: OK
Loading GRE kernel modules...
gre: GRE over IPv4 demultiplexor driver
ip_gre: GRE over IPv4 tunneling driver
Saving kernel bootup messages for dumpsysinfo...
Starting CMS smd...
coredump enable !!

===== Release Version 4.14L.04Apatch3 (build timestamp 151014_0331) =====

====== Create /tmp/system_boot_tr69c 
gpondef: MAC Address: FC:B4:E6:xx:xx:xx
netdev path : gpon0 -> gpondef
BCMVLAN : gpondef mode was set to ONT
netdev path : gpon0.0 -> gpon0 -> gpondef
BCMVLAN : gpon0 mode was set to ONT
gpon0.0 MAC address set to FC:B4:E6:xx:xx:xx
device gpon0 entered promiscuous mode
device gpondef entered promiscuous mode
netdev path : veip0 -> gpon0.0 -> gpon0 -> gpondef
BCMVLAN : gpon0.0 mode was set to ONT
veip0 MAC address set to FC:B4:E6:xx:xx:xx
Initializing CMS MDM in Legacy98 mode
gpon0.0: no IPv6 routers present
Active partition = 1, Next partition = 1
ASCII version string R3505VWGV010 extracted from software image 0

ASCII version string R3505VWGV010 extracted from software image 1

Ignoring fakeImage
addDefaultGponSoftwareImageObject[LN1764] set to MDM, Inst 0, C=1, A=1, V=1
addDefaultGponSoftwareImageObject[LN1764] set to MDM, Inst 1, C=0, A=0, V=1
ssk:error:58.310:lck_checkBeforeEntry:232:lBOS: Enter bosInit 
BOS: Exit bosInit 
endpoint_open COMPLETED
ock required during cmsObj_getNextInSubTreeFlags
getNumberOfLineInstances[LN1878] count = 1
rutVoice_getMaxPhysEndpt[LN434] maxPhysEndpt = 1
ssk:error:58.320:fixNumberOfEntriesLan6IpIntf:1051:fixed MDMOID_I_PV6_INTERFACE_NUMBER_OF_ENTRIES {1} IPIntf count=1
ip_tables: (C) 2000-2006 Netfilter Core Team
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (1580 buckets, 6320 max, 6000 ip_forward_max, 5000 limited_l4_port_max)
ctnetlink v0.93: registering with nfnetlink.
ip6_tables: (C) 2000-2006 Netfilter Core Team
Host MIPS Clock divider pwrsaving is enabled
Energy Efficient Ethernet is disabled
sntp:error:60.524:convertFqdnToIp:216:getaddrinfo invocation using a.st1.ntp.br is failed, caused by Name or service not known!
sntp:error:60.527:convertFqdnToIp:216:getaddrinfo invocation using b.st1.ntp.br is failed, caused by Name or service not known!
sntp:error:60.527:main:579:convRet=1.
[Jan 01 00:01:01] radvd: no linklocal address configured for br0
ADDRCONF(NETDEV_UP): br0: link is not ready
[Jan 01 00:01:01] radvd: no linklocal address configured for br0
ssk:error:61.547:rcl_ipv6LanHostCfgObject:633:startup condition
ADDRCONF(NETDEV_UP): eth0: link is not ready
[Jan 01 00:01:01] radvd: no linklocal address configured for br0
netdev path : eth0.0 -> eth0
BCMVLAN : eth0 mode was set to RG
Created new Tag Rule: dev=eth0, dir=1, tags=0, id=0

Created new Tag Rule: dev=eth0, dir=1, tags=1, id=0

Created new Tag Rule: dev=eth0, dir=1, tags=2, id=0

Created new Tag Rule: dev=eth0, dir=0, tags=0, id=0

Created new Tag Rule: dev=eth0, dir=0, tags=1, id=0

Created new Tag Rule: dev=eth0, dir=0, tags=2, id=0

[Jan 01 00:01:01] radvd: no linklocal address configured for br0
[Jan 01 00:01:01] radvd: no linklocal address confdevice eth0.0 entered promiscuous mode
device eth0 entered promiscuous mode
igured for br0
[Jan 01 00:01:01] radvdbr0: port 1(eth0.0) entered forwarding state
br0: port 1(eth0.0) entered forwarding state
[Bridge fdb insert]do kerSysGetBaseMacAddressforQTN()
[Bridge fdb insert]get qtn setting mac address(fc:b4:e6:xx:xx:xx)
ADDRCONF(NETDEV_CHANGE): br0: link becomes ready
: no linklocal address configured for br0
ADDRCONF(NETDEV_UP): eth1: link is not ready
netdev path : eth1.0 -> eth1
BCMVLAN : eth1 mode was set to RG
Created new Tag Rule: dev=eth1, dir=1, tags=0, id=0

Created new Tag Rule: dev=eth1, dir=1, tags=1, id=0

Created new Tag Rule: dev=eth1, dir=1, tags=2, id=0

Created new Tag Rule: dev=eth1, dir=0, tags=0, id=0

Created new Tag Rule: dev=eth1, dir=0, tags=1, id=0

Created new Tag Rule: dev=eth1, dir=0, tags=2, id=0

device eth1.0 entered promiscuous mode
device eth1 entered promiscuous mode
br0: port 2(eth1.0) entered forwarding state
br0: port 2(eth1.0) entered forwarding state
ADDRCONF(NETDEV_UP): eth2: link is not ready
netdev path : eth2.0 -> eth2
BCMVLAN : eth2 mode was set to RG
Created new Tag Rule: dev=eth2, dir=1, tags=0, id=0

Created new Tag Rule: dev=eth2, dir=1, tags=1, id=0

Created new Tag Rule: dev=eth2, dir=1, tags=2, id=0

Created new Tag Rule: dev=eth2, dir=0, tags=0, id=0

Created new Tag Rule: dev=eth2, dir=0, tags=1, id=0

Created new Tag Rule: dev=eth2, dir=0, tags=2, id=0

device eth2.0 entered promiscuous mode
device eth2 entered promiscuous mode
br0: port 3(eth2.0) entered forwarding state
br0: port 3(eth2.0) entered forwarding state
ADDRCONF(NETDEV_UP): eth3: link is not ready
netdev path : eth3.0 -> eth3
BCMVLAN : eth3 mode was set to RG
Created new Tag Rule: dev=eth3, dir=1, tags=0, id=0

Created new Tag Rule: dev=eth3, dir=1, tags=1, id=0

Created new Tag Rule: dev=eth3, dir=1, tags=2, id=0

Created new Tag Rule: dev=eth3, dir=0, tags=0, id=0

Created new Tag Rule: dev=eth3, dir=0, tags=1, id=0

Created new Tag Rule: dev=eth3, dir=0, tags=2, id=0

device eth3.0 entered promiscuous mode
device eth3 entered promiscuous mode
br0: port 4(eth3.0) entered forwarding state
br0: port 4(eth3.0) entered forwarding state
mcpd:error:63.161:mcpd_process_cms_msg:771:unrecognized msg 0x100007c0
netdev path : eth4.0 -> eth4
BCMVLAN : eth4 mode was set to RG
Created new Tag Rule: dev=eth4, dir=1, tags=0, id=0

Created new Tag Rule: dev=eth4, dir=1, tags=1, id=0

Created new Tag Rule: dev=eth4, dir=1, tags=2, id=0

Created new Tag Rule: dev=eth4, dir=0, tags=0, id=0

Created new Tag Rule: dev=eth4, dir=0, tags=1, id=0

Created new Tag Rule: dev=etdevice eth4.0 entered promiscuous mode
device eth4 entered promiscuous mode
br0: port 5(eth4.0) entered forwarding state
br0: port 5(eth4.0) entered forwarding state
h4, dir=0, tags=2, id=0

veip0.2 MAC address set to FC:B4:E6:xx:xx:xx
netdev path : veip0.2 -> veip0 -> gpon0.0 -> gpon0 -> gpondef
BCMVLAN : veip0 mode was set to RG
ADDRCONF(NETDEV_CHANGE): eth4.0: link becomes ready
veip0.3 MAC address set to FC:B4:E6:xx:xx:xx
netdev path : veip0.3 -> veip0 -> gpon0.0 -> gpon0 -> gpondef
BCMVLAN : veip0 mode was set to RG
veip0.4 MAC address set to FC:B4:E6:xx:xx:xx
netdev path : veip0.4 -> veip0 -> gpon0.0 -> gpon0 -> gpondef
BCMVLAN : veip0 mode was set to RG
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<3> RDPA_IOC_SYS arg<0x7F91F850>
veip0.1 MAC address set to FC:B4:E6:xx:xx:xx
netdev path : veip0.1 -> veip0 -> gpon0.0 -> gpon0 -> gpondef
BCMVLAN : veip0 mode was set to RG
INIT CHAIN
chain_creator = ACS
modifier = ACS
INIT RULE
chain_creator = ACS
modifier = ACS
INIT RULE
chain_creator = ACS
modifier = ACS
INIT RULE
chain_creator = ACS
modifier = ACS
INIT RULE
chain_creator = ACS
modifier = ACS
INIT RULE
chain_creator = ACS
modifier = ACS
INIT RULE
INIT CHAIN
INIT CHAIN
INIT CHAIN
chain_creator = UserInterface
modifier = ACS
INIT RULE
callerFuncName = rutGpon_getOmciPromiscInfo, fail to lock (timeout)
CMS MDM lock is held by ssk (pid=663) for 11 seconds.
Lock acquired in function cmsMdm_initWithAcc
Currently in rcl handler function for oid 194
rutVoice_getMaxLineInstances[LN1270] maxLine = 1
rutVoice_getMaxLineInstances[LN1270] maxLine = 1
monitor task is initialized pid= 663 
Writing to memory done
bs /m mw 0xb30d3004 w 0x0000000b
/sbin/ifconfig br0:2 1.1.1.1 netmask 255.255.255.0
rtfGpioSet(16, 1), ret = 0
/bin/board_para_util gpio 16 1
[Tr69c_BoundIfName] 587, ifName = ppp0.1
/bin/smd:error:70.396:initInetServerSocketBindToDev:410:fail to setsockopt(SO_BINDTODEVICE), ifName = ppp0.1, errno = No such device
[Tr69c_BoundIfName] 611, bind to device, ifName = ppp0.1, fd = -1
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<0> RDPA_IOC_TM arg<0x7F858AE0>
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<0> RDPA_IOC_TM arg<0x7F858AE0>
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<0> RDPA_IOC_TM arg<0x7F858AE0>
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<0> RDPA_IOC_TM arg<0x7F858AE0>
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<0> RDPA_IOC_TM arg<0x7F858AE0>
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<0> RDPA_IOC_TM arg<0x7F858AE0>
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<0> RDPA_IOC_TM arg<0x7F858AE0>
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<0> RDPA_IOC_TM arg<0x7F858AE0>
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<0> RDPA_IOC_TM arg<0x7F858AE0>
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<0> RDPA_IOC_TM arg<0x7F858AE0>
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<0> RDPA_IOC_TM arg<0x7F858AE0>
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<0> RDPA_IOC_TM arg<0x7F858AE0>
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<0> RDPA_IOC_TM arg<0x7F858AE0>
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<0> RDPA_IOC_TM arg<0x7F858AE0>
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<0> RDPA_IOC_TM arg<0x7F858AE0>
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<0> RDPA_IOC_TM arg<0x7F858AE0>
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<0> RDPA_IOC_TM arg<0x7F858AE0>
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<0> RDPA_IOC_TM arg<0x7F858AE0>
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<0> RDPA_IOC_TM arg<0x7F858AE0>
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<0> RDPA_IOC_TM arg<0x7F858AE0>
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<0> RDPA_IOC_TM arg<0x7F858AE0>
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<0> RDPA_IOC_TM arg<0x7F858AE0>
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<0> RDPA_IOC_TM arg<0x7F858AE0>
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<0> RDPA_IOC_TM arg<0x7F858AE0>
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<0> RDPA_IOC_TM arg<0x7F858AE0>
ssk:error:75.683:initializeVoice:404:@@@@@ just warning, vodsl being initialized
[initializeVoice, 464] cmdBuf=echo 5060 > /proc/sys/net/ipv4/nf_nat_sip_local_port
starting pid 2327, tty '': '-/bin/sh -l -c consoled'
[initializeVoice, 467] Set sipUserAgentPort=5060
ssk:error:75.710:initializeVoice:538:@@@@@ just warning, Vodsl cannot bind any interface, so vodsl is down
ssk:error:75.711:dalIsSipSupported:9392:dalIsSipSupported: @@@@@ just warning,  Voice Profile State=Disabled
ssk:error:75.711:initializeVoice:580:@@@@@ Sip is not Supported
ssk_init[LN1385] /bin/bs /bdmf/configure filter entry[{filter=mcast,ports=wan0}]={enabled=yes,action=host}
[rtf_i2c_post_test, LN312] i2c post test OK chip ID: 0x9
Power On Self Test: DRAM [ OK ]
Power On Self Test: I2C  [ OK ]
[writePostTestLog, 296] DRAM Post test OK.
[writePostTestLog, 296] I2C Post test OK.
mii register 28 is 0x2418
Broadband Router 3505VW
mii register 28 is 0x2418
mii register 28 is 0x2418
mii register 28 is 0x2418
ssk:error:76.060:processLanHostInfoMsg_igd:234:oal_getPortnameFromMacAddr failed, ret=9002
ssk:error:76.070:processLanHostInfoMsg_igd:234:oal_getPortnameFromMacAddr failed, ret=9002
ssk:error:76.087:processLanHostInfoMsg_igd:234:oal_getPortnameFromMacAddr failed, ret=9002
ssk:error:76.098:processLanHostInfoMsg_igd:169:oal_getPortnameFromMacAddr failed, mac=00:01:15:11:2B:02, ret=9002
ssk:error:76.099:processLanHostInfoMsg_igd:169:oal_getPortnameFromMacAddr failed, mac=FC:B4:E6:xx:xx:xx, ret=9002
ssk:error:76.100:processLanHostInfoMsg_igd:169:oal_getPortnameFromMacAddr failed, mac=00:01:02:03:04:05, ret=9002
ssk:error:76.101:ssk_main:1082:cannot handle msg type 0x10000802 from 20 (flags=0x20000000)
omcid:error:76.105:mib_data_reset:1348:failed to get me info for meClass=161 error = 4 
/bin/mapa_red_local(pid=2345): optarg=0 shmId=0 
initOmciSystemObject[LN150] omciSys.numberOfPotsPorts = 1
[NTC ploam] ploamIOCgetState: rdpa_gpon_link_state_get: error=0, state=1
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
sh: cmf: not found[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<3> RDPA_IOC_SYS arg<0x7F9B4260>

Broadcom Packet Flow Cache learning via BLOG enabled.
Broadcom GPON OMCI Stack v0.1 (Oct 14 2015, 03:33:39)

OMCI message capture enabled.
WLmngr Daemon is running
omcid_timeout_init: gOmcidTimeout = 5000
omcid_Onug_Tm_option_init: gOmciOnugTmOption = 2
omcid_create_iphost_init: gOmciCreateIphost = 1
wlevt is ready for new msg...
tr69c:error:77.717:cancelPeriodicInform:1656:request failed, ret=9003
ssk:error:79.991:processLanHostInfoMsg_igd:169:oal_getPortnameFromMacAddr failed, mac=00:01:15:11:2B:02, ret=9002
ssk:error:79.995:processLanHostInfoMsg_igd:169:oal_getPortnameFromMacAddr failed, mac=00:01:02:03:04:05, ret=9002
Waiting for 5G initial...
wlmngr:5G initialed successfully
[writePostTestLog, 296] 5G WIFI Post test OK.
wlmngr:error:94.254:getAdapterListFromMdm:3951:instanceId=2 is not supported!
wlmngr:error:94.254:getAdapterListFromMdm:3951:instanceId=3 is not supported!
wlmngr:error:94.254:getAdapterListFromMdm:3951:instanceId=4 is not supported!
[WLMNGR]wl0 restarting...
There is no Predefined DevicePin in CFE
WPS Device PIN = xxxxxxxx
[WLMNGR]idx = 0, wlTxPwrPcnt = 100, wlradioEnabled = 1, currentRadio = 1
killall: hspotap: no process killed
killall: bsd: no process killed
sendOfferLN433
[checkValidRange: 406] c0a81903, c0a81902, c0a819f0
acsd: selected channel spec: 0x1001
[writePostTestLog, 296] 2.4G WIFI Post test OK.
Setting SSID: "FIBRA-XXXX"
Setting SSID: "wl0_Guest1"
Setting SSID: "wl0_Guest2"
Setting SSID: "wl0_Guest3"
device wl0 is not a slave of br0
device wl0 entered promiscuous mode
br0: port 6(wl0) entered forwarding state
br0: port 6(wl0) entered forwarding state
[WLMNGR]wl0 restart finish!!!
Waiting startprod initial...
Waiting startprod initial...
Waiting startprod initial...
Waiting startprod initial...
startprod is success
[Bridge fdb update]do kerSysGetBaseMacAddressforQTN()
[Bridge fdb update]get qtn setting mac address(fc:b4:e6:xx:xx:xx)
[WLMNGR]wl1 restarting...
[WLMNGR]idx = 1, wlTxPwrPcnt = 100, wlradioEnabled = 1, currentRadio = 1
wlmngr_QT_setupRegulatory@1747 QCS:-95:set_power_constraint:0: Operation not supported
arp: SIOCDARP(pub): No such file or directory
[WLMNGR]wl1 restart finish!!!

Pessoas envolvidas em discussões, dicas ou bate papo em geral. Lista em ordem alfabética.