Linksys WRT54GX4



"RT3125W-D40", "REV:1.1", "28-000371", and "3028-002061"
 * is silkscreened on the router main board.

"704-00104-08" is silkscreened on the wireless module.

WRT54GX4 serial numbers appear to start with KLD0.

Pinout
The serial header is the (populated) JP1. JP1 [ (RxD) (TxD) (GND) (...) ] v to RTL8651B

cat /proc/version
Linux version 2.4.26-uc0 (shixiang@compile-server) (gcc version 3.3.3) #423 Wed Mar 28 13:33:22 CST 2007
 * 1) cat /proc/version

cat /proc/cpuinfo
system type            : Philips Nino processor              : 0 cpu model              : R3000 V0.0 BogoMIPS               : 199.06 wait instruction       : no microsecond timers      : no tlb_entries             : 16 extra interrupt vector : no hardware watchpoint     : no VCED exceptions         : not available VCEI exceptions        : not available
 * 1) cat /proc/cpuinfo

cat /proc/mtd
dev:   size   erasesize  name mtd0: 00006000 00002000 "boot1" mtd1: 00010000 00010000 "boot2" mtd2: 00800000 00010000 "boot3" mtd3: 00100000 00010000 "kernel" mtd4: 006e0000 00010000 "rootfs"
 * 1) cat /proc/mtd

cat /proc/pci
PCI devices found: Bus 0, device   0, function  0: Class 0200: PCI device 17cb:0002 (rev 1). IRQ 5. Master Capable. Latency=248. Min Gnt=24.Max Lat=255. Non-prefetchable 32 bit memory at 0x1bf80000 [0x1bf9ffff]. Non-prefetchable 32 bit memory at 0x1bf00000 [0x1bf7ffff].
 * 1) cat /proc/pci

lsmod
Module                 Size  Used by pol_nosdram          1928360   1 wns_mod               33884   0 [pol_nosdram] ccd                    3232   0 [pol_nosdram wns_mod] led                    1696   0
 * 1) lsmod

cat /proc/meminfo
total:   used:    free:  shared: buffers:  cached: Mem: 30269440 14733312 15536128        0  2314240  5849088 Swap:       0        0        0 MemTotal:       29560 kB MemFree:         15172 kB MemShared:           0 kB Buffers:          2260 kB Cached:           5712 kB SwapCached:          0 kB Active:           2536 kB Inactive:         6144 kB HighTotal:           0 kB HighFree:            0 kB LowTotal:        29560 kB LowFree:         15172 kB SwapTotal:           0 kB SwapFree:            0 kB
 * 1) cat /proc/meminfo

cat /etc/version
Realtek/RTL865XB Version 3.4.0 -- Wed Mar 28 13:34:41 CST 2007
 * 1) cat /etc/version

ps aux
PID Uid     VmSize Stat Command 1 root      3328 S   /sbin/init 2 root           SW  [keventd] 3 root           SWN [ksoftirqd_CPU0] 4 root           SW  [kswapd] 5 root           SW  [bdflush] 6 root           SW  [kupdated] 18 root     16000 S   /bin/webs start 19 root      5888 S   /bin/sh 25 root      4864 S   /bin/udhcpc 45 root      6336 S   /bin/ani8021x_aa 50 root      8192 S   /bin/wsm 63 root      4928 S   /bin/udhcpd 87 root      4608 R   ps aux
 * 1) ps aux

Airgo (Polaris) module info dump (/proc/net/drivers/wlan0/*)
{{SCollapse|cat ./hif_regs
 * 1) cat hif_regs
 * 1) cat hif_regs

=
================================== HIF REGISTERS for Device wlan0

=
================================== hif_control:            0x10E00 hif_window:             0x2000000 hif_endian:             0xB3B2B1B0 --- hif_rx_config:          0x33 hif_rx_gof:             0x148E2E0 hif_rx_address:         0x14B30C6 hif_rx_state:           0xF2000000 hif_rx_control:         0x8B hif_rx_start:           0x148E000 hif_rx_end:             0x148E400 hif_rx_first:           0x148E2E0 --- hif_tx_config:          0x10 hif_tx_gof:             0x148EC70 hif_tx_address:         0x18444DC hif_tx_state:           0x80 hif_tm_control:         0x86 hif_tm_start:           0x148EC00 hif_tm_end:             0x148F000 hif_tm_first:           0x148EC70 hif_td_control:         0x82 hif_td_start:           0x148E400 hif_td_end:             0x148EC00 hif_td_first:           0x148E400 ---            Debug Registers --- Transmit DMA            0x46028411 Receive DMA             0x3142A511 Receive DMA             0x14021191 DMA FIFOs               0x40 Tx State m/c            0x80 Rx State m/c:           0xF2000000 Mem Port State m/c:     0x20 Access Counter          0x1D

=
================================== }} {{SCollapse|cat ./stats =*=================================================== Admin State up:6 min 8 sec   dev->state :0x6 TotalIntr :58672        HalIntr:81070         RxIntr:18181 Rx packets: 0            Pkt/RxIntr :0 OOM:0       [drop:0       ] TX-frees in xmit      :0 TX-queue stop/starts      :0/0
 * 1) cat stats
 * 1) cat stats

=
=========================================                  IRQ Stats -- Rx/Tx(Td/Tm)                           18181/0(0/0) Polaris/Error                                  0/0 Interface TX Mode                      Polled Global TX Mode                         Polled Global RX Mode                         Polled

=
=========================================                Polling Stats

=
========================================= poll: quota/weight                             0/32 Poll start start/pkts                          0/0 Rx Tasklet Schedule Count                      0 Alloc SKB Failures                             0 Poll exit: done/not_done/oom                   0/0/0 Poll done w. rx pending                        0 Poll done w. zero receive                      0 MAC skb list 0 peak 6 Memory allocation failure (small skb)          0 Data Frames forwarded to MAC SW in Learn Mode  203 Mgmt/Ctl Frames forwarded to MAC SW            18002 TD Dummy Pkts received by the HDD              0 TM Dummy Pkts received by the HDD              0 Dummy Pkts enqueued to the TD Ring by the HDD  0 Dummy Pkts Re-queued by the HDD                0 Pkts passed on to the HDD for TD ring by MAC SW 0 Dummy Pkts passed on to the HDD by MAC SW      0 DataNull Frames passed on to HDD by MAC SW     0 Data Frames passed on to the HDD by MAC SW     0 Frames Enqueued to TD ring by WNS for L2 update 0 Frames Enqueued to TD ring by Applications     0 Number of times the TD Ring Flush was called   0 Number of times the HIF TD Engine Enable called 0 Number of times the HIF TD Engine Disable called0 HIF RX Length Errors                           0 HIF Other Errors                               0

=
=========================================                MAC SW Reset Stats

=
========================================= Number of times the Reset Req Timer expired    0 Total number of MAC SW Resets issued           0 Resets Counts: EOF/SOF MISMATCH                       0 BMU EXCEPTION                          0 PDU COUNT LOW                          0 User Triggered                         0 NETDEV Watchdog triggered              0 Unspecified                            0 Number of Radio Enable cmd rcvd                3 Number of Radio Disable cmd rcvd               2 Number of NETDEV Watchdog timeouts             0

=
=========================================              DPH Error Stats

=
========================================= DPH TX_PUSH_ERR CNT                            0 DPH TX_INVLD_ERR CNT                           0 DPH TX_STA_INVLD CNT                           0 DPH TX_UNINIT_ERR CNT                          0 DPH TX HASH_LOOKUP_MISS CNT                    0

=
=========================================              MBX Msg Stats

=
========================================= Total Number of MBX msgs rcvd from MAC SW      150 Number of MBX msgs from MAC SW sent to apps    150 Number of MBX msgs from MAC SW that were dropped 0

=
=========================================        Polaris 2.2 PCI Bug Woraround Stats

=
========================================= Total Rx Unblock invocations                   0 RX Ring Entries Refill Cnt                     0 RX Ring Entries Discard Cnt                    0

}} {{SCollapse|cat ./dbg
 * 1) cat dbg
 * 1) cat dbg

=
================================= Current value of np->msg_enable = 0x3F00C0

=
================================= 0x80000000 Dump the RX/TX msg 0x40000000 MAC Msgs rcvd 0x20000000 MAC Msgs sent 0x10000000 Msgs rcvd on Rx Mbx 0x08000000 Msgs sent on TX Mbx 0x04000000 Messages rcvd from Apps 0x02000000 Messages sent to Apps 0x01000000 Disp RX/TX Frame Info 0x00800000 Disp Netlink msgs 0x00400000 Dump Rx MAC mgmt/ctl msgs -- Debugs msgs from MAC SW -- 0x00200000 Disp dbg msgs from CFG 0x00100000 Disp dbg msgs from SYS 0x00080000 Disp dbg msgs from LIM 0x00040000 Disp dbg msgs from DPH 0x00020000 Disp dbg msgs from SCH 0x00010000 Disp all the other MAC dbg msgs -- Standard Linux debug bits for the net device -- 0x00004000 NETIF_MSG_WOL 0x00002000 NETIF_MSG_HW 0x00001000 NETIF_MSG_PKTDATA 0x00000800 NETIF_MSG_RX_STATUS 0x00000400 NETIF_MSG_TX_DONE 0x00000200 NETIF_MSG_INTR 0x00000100 NETIF_MSG_TX_QUEUED 0x00000080 NETIF_MSG_TX_ERR 0x00000040 NETIF_MSG_RX_ERR 0x00000020 NETIF_MSG_IFUP 0x00000010 NETIF_MSG_IFDOWN 0x00000008 NETIF_MSG_TIMER 0x00000004 NETIF_MSG_LINK 0x00000002 NETIF_MSG_PROBE 0x00000001 NETIF_MSG_DRV

=
================================= }} {{SCollapse|cat ./np --- ring_dma           = 0148e000
 * 1) cat np
 * 1) cat np

0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Avg Rx cycle/pkt = 0 --- cur_rx             = 22221 dirty_rx           = 0 rx_ring[077]       = a148e268 rx_dma[077]        = 01652810 rx_skbuff[077]     = 8165ef10 rx_buf_sz          = 3036 cur_txm            = 0 dirty_txm          = 0 txm_ring[000]      = a148ec00 txm_skbuff[000]    = 00000000 txm_dma[000]       = 00000000 --- cur_txd            = 0 dirty_txd          = 0 txd_ring[000]      = a148e400 txd_polbd[000]    = 00000000

=
================================== free Rx skb #    = 64 Verify skb on Q # = 64, AIRGO_PKT #=64 }}

cat /etc/key.pem
-BEGIN RSA PRIVATE KEY- MIIBOwIBAAJBANun+O1P7q9DkmZo0jl4wrpFSD5FC8AKHmpZE/OqH972c8sMPlr4 3mx9bEU99bAbGzTxaQ86jOertGT7Y45HkqECAwEAAQJBAIvmjyAu0dnlEsCRMJwU MwpKiDnI5jP4/ehENfXyu/vYFFSkT/U/y0tzouhwUcuyYCCkiQRwniJ3G7LRwA1y LrUCIQDtbpJJjqCBk7ZjCyS/fe38Q4UvB8obQc6fJU11TQwrlwIhAOzVhtmy7Nc3 29S+8482C4/Viz/xBN3XNv+vc5/d8tqHAiBp/3Ublasebh18thrfyo6WkmZBCs81 v/lIn1SnS5BlXQIgQTaywTNRoBmTgMtryZ16JYsJovu8+VEPpewsDHNTMfUCIQCm osc90IYSSLTUwUZN4EwYp/dXUlTzTA8PsnhAPvjTbg== -END RSA PRIVATE KEY-
 * 1) cat key.pem

cat /etc/cert.pem
-BEGIN CERTIFICATE- MIICHjCCAcgCAQAwDQYJKoZIhvcNAQEEBQAwgZkxCzAJBgNVBAYTAlVTMRMwEQYD VQQIEwpDYWxpZm9ybmlhMQ8wDQYDVQQHEwZJcnZpbmUxGzAZBgNVBAoTEkNpc2Nv LUxpbmtzeXMsIExDQzERMA8GA1UECxMIRGl2aXNpb24xEDAOBgNVBAMTB0xpbmtz eXMxIjAgBgkqhkiG9w0BCQEWE3N1cHBvcnRAbGlua3N5cy5jb20wHhcNMDQwODAz MDIwNzM1WhcNMTQwODAxMDIwNzM1WjCBmTELMAkGA1UEBhMCVVMxEzARBgNVBAgT CkNhbGlmb3JuaWExDzANBgNVBAcTBklydmluZTEbMBkGA1UEChMSQ2lzY28tTGlu a3N5cywgTENDMREwDwYDVQQLEwhEaXZpc2lvbjEQMA4GA1UEAxMHTGlua3N5czEi MCAGCSqGSIb3DQEJARYTc3VwcG9ydEBsaW5rc3lzLmNvbTBcMA0GCSqGSIb3DQEB AQUAA0sAMEgCQQDbp/jtT+6vQ5JmaNI5eMK6RUg+RQvACh5qWRPzqh/e9nPLDD5a +N5sfWxFPfWwGxs08WkPOoznq7Rk+2OOR5KhAgMBAAEwDQYJKoZIhvcNAQEEBQAD QQB0Us6ImStuvDqhCavam5VBHrv7990rFpr9AuwxcfzSZWXqyHz6UpLtkrsNyJvW D8zeiko8w/yImzOWrcI9V8zg -END CERTIFICATE-

netstat -l
Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address          Foreign Address         State tcp       0      0 *:http                  *:*                     LISTEN tcp       0      0 *:https                 *:*                     LISTEN udp       0      0 127.0.0.1:1024          *:* udp       0      0 127.0.0.1:1025          *:* udp       0      0 *:bootps                *:* Active UNIX domain sockets (only servers) Proto RefCnt Flags      Type       State         I-Node Path
 * 1) netstat -l