Re: [OpenWrt-Devel] smc7908-isp (infineon danube based router)
Julius Schulz-Zander wrote: Hi all, On Sunday 29 June 2008 18:03:37 Luca Olivetti wrote: Hello, I have this router (labelled smc7908-isp) supplied by my isp for double play (adsl+voip). It is based on the infineon danube, the wifi chip is an atheros 2417, the switch is a realtek RTL8306SD, it has 4MB of flash (EON EN29LV320B) nice to see that the flash chip is the same as in the T-Com Speedport W700V. It looks almost identical to the MX29LV320B. It also has two fxs ports (analog interface provided by 2 SLIC DX PEF 4268). All in all it seems similar to the reference design, the only apparent difference being the switch. Afaik they are also on the Speedport and on the Samsung SMT-G3XX0 Boards. @John Is the EON EN29LV320B Flash supported by the current trunk? If so, then i'll try soon to boot a openwrt kernel without pci on the Speedport. it is a normal cfi0002 chipset What is the current masterplan of supporting the amazon chipset and the chips around (i.e. PEF 4268 and VINETIC PEB 3332 HT)? I bough some hardware with that chipset and saw that the hardware is sold by many hardware vendors and of course by many ISPs (i.e. t-com, alice and freenet) in germany. danube != ifxmips ... it'll be some weeks, before we get amazon working properly. since the weekend, wifi is workin on the arcaydian boards with danube though, so these boards can now be safely flashed ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org http://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] smc7908-isp (infineon danube based router)
http://img512.imageshack.us/my.php?image=dscn1845rl6.jpg http://img443.imageshack.us/my.php?image=dscn1846ix5.jpg http://img443.imageshack.us/my.php?image=dscn1847rp1.jpg openwrt runs on the devices shown in the images. however, please do not try to flash it yet, i already bricked wifi on 1 device. looks like the atheros has not eeprom for its calibration data. the info is stored in the last sector of the flash. and after flashin gthis is erased. so we need to add some detection first. blogic ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org http://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] smc7908-isp (infineon danube based router)
En/na John Crispin ha escrit: http://img512.imageshack.us/my.php?image=dscn1845rl6.jpg http://img443.imageshack.us/my.php?image=dscn1846ix5.jpg http://img443.imageshack.us/my.php?image=dscn1847rp1.jpg openwrt runs on the devices shown in the images. however, please do not try to flash it yet, i already bricked wifi on 1 device. looks like the atheros has not eeprom for its calibration data. the info is stored in the last sector of the flash. and after flashin gthis is erased. so we need to add some detection first. Is this data specific for each device or common to all of them? If the latter, perhaps it's embedded in the original firmware image and it should be possible to recover it. As I said, I'm not going to flash anything, I was just hoping for some instructions to do testing in ram. Anyway, the firmware is available at http://www.megaupload.com/es/?d=X0JXSR0I The bin can be split in its components using the program at http://www.kessler-design.com/speedport-w700v/download.html (it works under wine). The first part is the kernel, compressed with an obfuscated lzma (The attached quick'n'dirty python script deobfuscates it) The second part is the content of the web interface (pfs.img, again obfuscated lzma). According to the bootlog part 3 is the zipped DSP firmware (?) I don't know what parts 4 and 5 are, maybe one of them has the calibration data for the wifi chip. Bye -- Luca partname='ya-1' f=open(partname+'.bin','rb') s=f.read() f.close() def rn(c): b=ord(c) return chr(b%16*16+b/16) s2='' i=104 for j in range(16): s2=s2+rn(s[i+1])+rn(s[i]) i=i+2 i=36 for j in range(68): s2=s2+s[i] i=i+1 i=4 for j in range(32): s2=s2+s[i] i=i+1 s2=s2+s[136:] f=open(partname+'.lzma','wb') f.write(s2) f.close() ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org http://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] smc7908-isp (infineon danube based router)
The bin can be split in its components using the program at http://www.kessler-design.com/speedport-w700v/download.html (it works under wine). The first part is the kernel, compressed with an obfuscated lzma (The attached quick'n'dirty python script deobfuscates it) nice, i will try to have a look at that The second part is the content of the web interface (pfs.img, again obfuscated lzma). According to the bootlog part 3 is the zipped DSP firmware (?) this wil be either the voip or dsl firmware. I don't know what parts 4 and 5 are, maybe one of them has the calibration data for the wifi chip. the calibration data is unique to each device. we will just have a detetction for this in the flash driver and then provide the data to madwifi. its a bit of work, but the only real solution. ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org http://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] smc7908-isp (infineon danube based router)
this board is an arcaydian design. we managed to boot openwrt on it last night. pci, net, gpi,led, button, wdt,... are working. voipd and dsl are still missing. for the bootloader you need to use u-boot. the u-boot source is in trunk. we have not tried to boot it yet on the device, but are using a binary we managed to get our hands on. i hope that i will have the time this week to test our own u-boot on the device. I would suggest, that you do not try it yet, as recovering a broken bootloader, requires sodering some stuff on the pcb. which country / telco distributed the device ? blogic Luca Olivetti wrote: [hadn't muck luck with this in the forum or in openwrt-users, I hope this isn't too much noise for this list] Hello, I have this router (labelled smc7908-isp) supplied by my isp for double play (adsl+voip). It is based on the infineon danube, the wifi chip is an atheros 2417, the switch is a realtek RTL8306SD, it has 4MB of flash (EON EN29LV320B) and 64MB of ram (PSC A3S12D40ETP). It also has two fxs ports (analog interface provided by 2 SLIC DX PEF 4268). All in all it seems similar to the reference design, the only apparent difference being the switch. Another problem is that this router doesn't currently run linux and the bootloader is the brn bootloader (no u-boot or redboot), but I more or less know the format of the image (though I'm not sure how can I shoehorn openwrt into it, probably trying something similar to http://ar7-firmware.berlios.de/openwrt/patches.html.en, however that page seems to be very old and I cannot tell if the patch to hardcode the startup address is still needed and/or how to make a similar one for ifxmips) I connected a serial port to the unit and the brn bootloader has an option to upload something to the ram and run it (I cannot afford to brick it, so ATM this is the only option I have). Do you think the ifxmips should work in spite of the different switch? What kind of image should I try to directly upload to ram and run? (uImage, vmlinux, vmlinux.elf, none of the above? or maybe try to compile u-boot to run from ram, upload it and use it to boot with tftp?) And what's the status of ifxmips? Does the adsl interface work? Do the FXS ports? In case you are interested, the bootlog is available as danube.txt under ventoso.org/luca/ (I don't put the full url since I don't want it to be picked up by the search engines). Bye ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org http://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] smc7908-isp (infineon danube based router)
En/na Luca Olivetti ha escrit: En/na Luca Olivetti ha escrit: I cannot really read german, and much less 40 pages of it ;-) but the only way to know for sure is to open it and/or get a bootlog (arcadyan makes many models, e.g. the speedport w700v is based on the amazon chipset). I found the firmware of the A800 and A600 at .http://www.arcor.de/hilfe/neu/ Since the obfuscation is the same as mine, I could decode it and take a look at the kernel with strings, and both have references to DANUBE, so they most probably are based on it. One more detail: the kernel is the same for both models (didn't check the web pages but I'm not that interested). Bye -- Luca ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org http://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
