Netgear WNDR3400v3

The BCM43236 used would appear (or would be likely) to vary..
 * At least some production units would appear to be using BCM43236B
 * The FCC docs show the device w/ Broadcom BCM43236
 * (BCM43236KMLG, HT1127 P20, 146859 6 W)

The default SSID formats are probably NETGEARXX and NETGEARXX-5G.

Custom Firmware

 * Netgear WNDR3400 on OpenWrt Wiki
 * Tomato support (beta) - Netgear WNDR3400 v3
 * DD-WRT for NETGEAR WNDR3400 v3 (unofficial)

Serial

 * tp16 = GND
 * tp15 = RX
 * tp12 = TX

nvram show
Netgear WNDR3400v3/nvram

{{SCollapse|Serial info

cat /proc/cmdline
root=/dev/mtdblock2 console=ttyS0,115200 init=/sbin/preinit
 * 1) cat /proc/cmdline

cat /proc/mtd
dev:   size   erasesize  name mtd0: 00040000 00010000 "boot" mtd1: 00700000 00010000 "linux" mtd2: 005c6ef0 00010000 "rootfs" mtd3: 00010000 00010000 "ML1" mtd4: 00010000 00010000 "ML2" mtd5: 00010000 00010000 "ML3" mtd6: 00010000 00010000 "ML4" mtd7: 00010000 00010000 "ML5" mtd8: 00010000 00010000 "ML6" mtd9: 00010000 00010000 "ML7" mtd10: 00010000 00010000 "T_Meter1" mtd11: 00010000 00010000 "T_Meter2" mtd12: 00010000 00010000 "POT" mtd13: 00010000 00010000 "board_data" mtd14: 00010000 00010000 "nvram"
 * 1) cat /proc/mtd

cat /proc/cpuinfo
system type            : Broadcom BCM5357 chip rev 2 processor              : 0 cpu model              : MIPS 74K V4.9 BogoMIPS               : 264.60 wait instruction       : no microsecond timers      : yes tlb_entries            : 64 extra interrupt vector : no hardware watchpoint     : yes ASEs implemented       : mips16 dsp VCED exceptions        : not available VCEI exceptions        : not available
 * 1) cat /proc/cpuinfo

unaligned_instructions : 211 dcache hits            : 2147483648 dcache misses          : 4287610019 icache hits            : 2147483648 icache misses          : 1929082868 instructions           : 2147483648

cat /proc/meminfo
MemTotal:       61408 kB MemFree:         31688 kB Buffers:          3204 kB Cached:          10784 kB SwapCached:          0 kB Active:           8156 kB Inactive:        10440 kB SwapTotal:           0 kB SwapFree:            0 kB Dirty:               0 kB Writeback:           0 kB AnonPages:        4620 kB Mapped:           2540 kB Slab:             7128 kB SReclaimable:     1740 kB SUnreclaim:       5388 kB PageTables:        348 kB NFS_Unstable:        0 kB Bounce:              0 kB CommitLimit:     30704 kB Committed_AS:     8076 kB VmallocTotal:   786388 kB VmallocUsed:      3424 kB VmallocChunk:   782484 kB
 * 1) cat /proc/meminfo

cat /proc/kmsg
<5>Linux version 2.6.22 (lawrence@foxconncpe2) (gcc version 4.2.3) #1 Tue May 21 11:43:52 CST 2013 <4>CPU revision is: 00019749 <4>Found a 8MB ST compatible serial flash <4>Determined physical RAM map: <4> memory: 03fff000 @ 00000000 (usable) <7>On node 0 totalpages: 16383 <7> Normal zone: 127 pages used for memmap <7> Normal zone: 0 pages reserved <7> Normal zone: 16256 pages, LIFO batch:3 <4>Built 1 zonelists. Total pages: 16256 <5>Kernel command line: root=/dev/mtdblock2 console=ttyS0,115200 init=/sbin/preinit <4>Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes. <4>Primary data cache 32kB, 4-way, linesize 32 bytes. <6>Synthesized TLB refill handler (20 instructions). <6>Synthesized TLB load handler fastpath (32 instructions). <6>Synthesized TLB store handler fastpath (32 instructions). <6>Synthesized TLB modify handler fastpath (31 instructions). <4>PID hash table entries: 256 (order: 8, 1024 bytes) <4>CPU: BCM5357 rev 2 at 530 MHz <4>Using 265.000 MHz high precision timer. <4>Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) <4>Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) <6>Memory: 61168k/65532k available (2783k kernel code, 4308k reserved, 560k data, 184k init, 0k highmem) <7>Calibrating delay loop... 264.60 BogoMIPS (lpj=1323008) <4>Mount-cache hash table entries: 512 <6>NET: Registered protocol family 16 <5>SCSI subsystem initialized <6>usbcore: registered new interface driver usbfs <6>usbcore: registered new interface driver hub <6>usbcore: registered new device driver usb <4>PCI: no core <4>PCI: Fixing up bus 0 <6>NET: Registered protocol family 2 <6>Time: MIPS clocksource has been installed. <4>IP route cache hash table entries: 1024 (order: 0, 4096 bytes) <4>TCP established hash table entries: 2048 (order: 2, 16384 bytes) <4>TCP bind hash table entries: 2048 (order: 1, 8192 bytes) <6>TCP: Hash tables configured (established 2048 bind 2048) <6>TCP reno registered <6>squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher <4>fuse init (API version 7.8) <6>io scheduler noop registered (default) <6>Serial: 8250/16550 driver $Revision: 1.1.1.1 $ 4 ports, IRQ sharing disabled <6>serial8250: ttyS0 at MMIO 0x0 (irq = 8) is a 16550A <6>loop: module loaded <6>PPP generic driver version 2.4.2 <6>NET: Registered protocol family 24 <6>PPPoL2TP kernel driver, V0.17 <5>sflash: squash filesystem with lzma found at block 1508 <5>Creating 15 MTD partitions on "sflash": <5>0x00000000-0x00040000 : "boot" <5>0x00040000-0x00740000 : "linux" <5>0x00179110-0x00740000 : "rootfs" <5>0x00740000-0x00750000 : "ML1" <5>0x00750000-0x00760000 : "ML2" <5>0x00760000-0x00770000 : "ML3" <5>0x00770000-0x00780000 : "ML4" <5>0x00780000-0x00790000 : "ML5" <5>0x00790000-0x007a0000 : "ML6" <5>0x007a0000-0x007b0000 : "ML7" <5>0x007b0000-0x007c0000 : "T_Meter1" <5>0x007c0000-0x007d0000 : "T_Meter2" <5>0x007d0000-0x007e0000 : "POT" <5>0x007e0000-0x007f0000 : "board_data" <5>0x007f0000-0x00800000 : "nvram" <4>wombo_reset set to gpio 25 <7>PCI: Setting latency timer of device 0000:00:04.1 to 64 <6>ehci_hcd 0000:00:04.1: EHCI Host Controller <6>ehci_hcd 0000:00:04.1: new USB bus registered, assigned bus number 1 <6>ehci_hcd 0000:00:04.1: EHCI Fastpath: New EHCI driver starting <6>ehci_hcd 0000:00:04.1: irq 5, io mem 0x18004000 <6>ehci_hcd 0000:00:04.1: USB 0.0 started, EHCI 1.00, driver 10 Dec 2004 <6>usb usb1: configuration #1 chosen from 1 choice <6>hub 1-0:1.0: USB hub found <6>hub 1-0:1.0: 2 ports detected <7>ohci_hcd: 2006 August 04 USB 1.1 'Open' Host Controller (OHCI) Driver <4>wombo_reset set to gpio 25 <7>PCI: Setting latency timer of device 0000:00:04.0 to 64 <6>ohci_hcd 0000:00:04.0: OHCI Host Controller <6>ohci_hcd 0000:00:04.0: new USB bus registered, assigned bus number 2 <6>ohci_hcd 0000:00:04.0: irq 5, io mem 0x18009000 <6>usb usb2: configuration #1 chosen from 1 choice <6>hub 2-0:1.0: USB hub found <6>hub 2-0:1.0: 2 ports detected <6>Initializing USB Mass Storage driver... <6>usb 1-2: new high speed USB device using ehci_hcd and address 2 <6>usb 1-2: configuration #1 chosen from 1 choice <6>usbcore: registered new interface driver usb-storage <6>USB Mass Storage support registered. <4>u32 classifier <6>TCP cubic registered <6>NET: Registered protocol family 1 <6>NET: Registered protocol family 10 <6>6WIND/LSIIT IPv6 multicast forwarding 0.1 plus PIM-SM/SSM with *BSD API <6>lo: Disabled Privacy Extensions <6>IPv6 over IPv4 tunneling driver <6>sit0: Disabled Privacy Extensions <6>NET: Registered protocol family 17 <6>802.1Q VLAN Support v1.8 Ben Greear  <6>All bugs added by David S. Miller  <4>VFS: Mounted root (squashfs filesystem) readonly. <6>Freeing unused kernel memory: 184k freed <4>Warning: unable to open an initial console. <4>Failed to execute /init <4>Algorithmics/MIPS FPU Emulator v1.5 <4>emf: module license 'Proprietary' taints kernel. <0>Initialise conn table 2048 entries <4>et_module_init: passivemode set to 0x1 <7>PCI: Setting latency timer of device 0000:00:02.0 to 64 <4>eth0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.60.127 @VERSION_TYPE@ <4>wl_module_init: wl_txq_thresh set to 0x200 <7>PCI: Setting latency timer of device 0000:00:01.0 to 64 <4>eth1: Broadcom BCM4329 802.11 Wireless Controller 5.60.127.2704 @VERSION_TYPE@ <4>Symbol usb_register_driver is being used by a non-GPL module, which will not be allowed in the future <4>Please see the file Documentation/feature-removal-schedule.txt in the kernel source tree for more details. <4>Symbol usb_deregister is being used by a non-GPL module, which will not be allowed in the future <4>Please see the file Documentation/feature-removal-schedule.txt in the kernel source tree for more details. <4>wl_module_init: rpcq_rxthresh set to 0x200 <4>wl_module_init: wl_txq_thresh set to 0x200 <4>EHCI Fastpath: usb_dev 810fc000 <4>EHCI Fastpath: bus 810cbc00 <4>EHCI Fastpath: Hub 810fcc00 <6>ehci_hcd 0000:00:04.1: EHCI Fastpath: Got the bypass device command in EHCI 810fc000 <4>EHCI Fastpath: usb_dev 810fc000 <4>EHCI Fastpath: bus 810cbc00 <4>EHCI Fastpath: Hub 810fcc00 <6>ehci_hcd 0000:00:04.1: EHCI Fastpath: Got the bypass callback command in EHCI c0127adc <4>EHCI Fastpath: usb_dev 810fc000 <4>EHCI Fastpath: bus 810cbc00 <4>EHCI Fastpath: Hub 810fcc00 <6>ehci_hcd 0000:00:04.1: EHCI Fastpath: Got the RH bypass command in EHCI for EP #0 0004 <6>ehci_hcd 0000:00:04.1: EHCI Fastpath: EP 83fc81ec QH a3e63100 dummy a3faa060 <4>EHCI Fastpath: usb_dev 810fc000 <4>EHCI Fastpath: bus 810cbc00 <4>EHCI Fastpath: Hub 810fcc00 <6>ehci_hcd 0000:00:04.1: EHCI Fastpath: Got the RH bypass command in EHCI for EP #1 0012 <6>ehci_hcd 0000:00:04.1: EHCI Fastpath: EP 83fc81a4 QH a3e63180 dummy a3faa120 <4>EHCI Fastpath: EP in 18 EP in2 19 EP out 4 <3>ehci_hcd 0000:00:04.1: dma_pool_free usbnet_qtd, a3faa060/3faa060 (bad dma) <4>bcm_rpc_up: waiting to be connected <4>bcm_rpc_buf_recv_mgn_high: Recvd:2 Version: 0x53c7f20 <4>State: 1 Session:0 <4>bcm_rpc_buf_recv_mgn_high: Reason: 0 Dongle Version: 0x53c7f20 <4>bcm_rpc_buf_recv_mgn_high: Connected! <4>eth2: Broadcom BCMa8e4 802.11 Wireless Controller 5.60.127.2704 @VERSION_TYPE@ <6>usbcore: registered new interface driver dbus_usbdev <7>vlan1: add 33:33:00:00:00:01 mcast address to master interface <7>vlan1: add 01:00:5e:00:00:01 mcast address to master interface <7>vlan1: add 33:33:ff:01:af:e1 mcast address to master interface <6>vlan1: dev_set_allmulti(master, 1) <6>vlan1: dev_set_promiscuity(master, 1) <6>device eth0 entered promiscuous mode <6>device vlan1 entered promiscuous mode <6>device eth1 entered promiscuous mode <6>device eth2 entered promiscuous mode <6>br0: port 3(eth2) entering learning state <6>br0: port 2(eth1) entering learning stateI<6>br0: port 1(vlan1) entering learning state <6>br0: topology change detected, propagating <6>br0: port 3(eth2) entering forwarding state <6>br0: topology change detected, propagating <6>br0: port 2(eth1) entering forwarding state <6>br0: topology change detected, propagating <6>br0: port 1(vlan1) entering forwarding state <7>eth1: no IPv6 routers present <7>eth2: no IPv6 routers present <0>agnat QOS disable! <0>IOCTL_AG_REGION_SET: English <4>vlan2: Setting MAC address to 00 0c 43 30 52 78. <7>vlan2: add 33:33:00:00:00:01 mcast address to master interface <7>vlan2: add 01:00:5e:00:00:01 mcast address to master interface <7>vlan2: add 33:33:ff:30:52:78 mcast address to master interface <6>vlan2: dev_set_promiscuity(master, 1) <6>device vlan2 entered promiscuous mode <6>vlan2: dev_set_allmulti(master, 1) <0>ACOSNAT: Set BCMCTF to off <0>ACOSNAT: Set NAT for LAN domain only to on <4>ACOSNAT: NAT for LAN domain only is ON, addr=0101a8c0,mask=00ffffff
 * 1) cat /proc/kmsg

cat /proc/bus/usb/devices

 * 1) cat /proc/bus/usb/devices

T: Bus=02 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#=  1 Spd=12  MxCh= 2 B: Alloc=  0/900 us ( 0%), #Int=  0, #Iso=  0 D: Ver= 1.10 Cls=09(hub  ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1 P: Vendor=0000 ProdID=0000 Rev= 2.06 S: Manufacturer=Linux 2.6.22 ohci_hcd S: Product=OHCI Host Controller S: SerialNumber=0000:00:04.0 C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr= 0mA I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub ) Sub=00 Prot=00 Driver=hub E: Ad=81(I) Atr=03(Int.) MxPS=   2 Ivl=255ms

T: Bus=01 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#=  1 Spd=480 MxCh= 2 B: Alloc=  0/800 us ( 0%), #Int=  0, #Iso=  0 D: Ver= 2.00 Cls=09(hub  ) Sub=00 Prot=01 MxPS=64 #Cfgs=  1 P: Vendor=0000 ProdID=0000 Rev= 2.06 S: Manufacturer=Linux 2.6.22 ehci_hcd S: Product=EHCI Host Controller S: SerialNumber=0000:00:04.1 C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr= 0mA I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub ) Sub=00 Prot=00 Driver=hub E: Ad=81(I) Atr=03(Int.) MxPS=   4 Ivl=256ms

T: Bus=01 Lev=01 Prnt=01 Port=01 Cnt=01 Dev#=  2 Spd=480 MxCh= 0 D: Ver= 2.00 Cls=ff(vend.) Sub=00 Prot=00 MxPS=64 #Cfgs=  1 P: Vendor=0a5c ProdID=bd17 Rev= 0.01 S: Manufacturer=Broadcom S: Product=Remote Download Wireless Adapter S: SerialNumber=000000000001 C:* #Ifs= 1 Cfg#= 1 Atr=80 MxPwr=200mA I:* If#= 0 Alt= 0 #EPs= 4 Cls=ff(vend.) Sub=02 Prot=ff Driver=dbus_usbdev E: Ad=81(I) Atr=03(Int.) MxPS=  16 Ivl=1ms E: Ad=82(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms E: Ad=83(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms E: Ad=04(O) Atr=02(Bulk) MxPS= 512 Ivl=125us

cat /proc/bus/pci/devices
0000 14e40800  8  18000000     0     0     0     0     0     0  1000  1000     0  0  0  0   800 0008 14e44329  3  18001000     0     0     0     0     0     0  1000  1000     0  0  0  0   800  wl 0010  14e44715  4  18002000     0     0     0     0     0     0  1000  1000     0  0  0  0   800  et 0020  14e4471a  5  18009000     0     0     0     0     0     0  1000     0     0  0  0  0   800  ohci_hcd 0021 14e4471a  5  18004000     0     0     0     0     0     0  1000     0     0  0  0  0   800  ehci_hcd 0028 14e4082e  d  18005000     0     0     0     0     0     0  1000  1000     0  0  0  0   800 0030 14e44711  e  18006000     0     0     0     0     0     0  1000  1000     0  0  0  0   800 0038 14e4080e  8  18007000     0     0     0     0     0     0  1000  1000     0  0  0  0   800
 * 1) cat /proc/bus/pci/devices

cat /proc/mounts
rootfs / rootfs rw 0 0 /dev/root / squashfs ro 0 0 devfs /dev tmpfs rw 0 0 proc /proc proc rw 0 0 sysfs /sys sysfs rw 0 0 ramfs /tmp ramfs rw 0 0 usbdeffs /proc/bus/usb usbfs rw 0 0
 * 1) cat /proc/mounts

ps
PID Uid        VSZ Stat Command 1 0         2636 S   /sbin/preinit 2 0              SW< [kthreadd] 3 0              RWN [ksoftirqd/0] 4 0              SW< [events/0] 5 0              SW< [khelper] 18 0              SW< [kblockd/0] 19 0              SW< [ksuspend_usbd] 22 0              SW< [khubd] 45 0              SW  [pdflush] 46 0              SW  [pdflush] 47 0              SW< [kswapd0] 48 0              SW< [aio/0] 582 0              SW< [mtdblockd] 2105 0         1532 S   /bin/eapd 2108 0         2032 S   nas 2112 0         2996 S   /bin/wps_monitor 2171 0         1748 S   swresetd 2173 0         1596 S   dnsRedirectReplyd 2178 0          828 S   dnsmasq -h -n -c 0 -N -i br0 -r /tmp/resolv.conf -u root 2181 0          844 S   udhcpd /tmp/udhcpd.conf 2185 0         1596 S   ddnsd & 2191 0         2212 S   heartbeat 2194 0         1524 S   wlanconfigd 2204 0         8292 S   httpd -S -E /usr/sbin/ca.pem /usr/sbin/httpsd.pem 2212 0         1600 S   scheact 2217 0         2612 S   upnpd 2222 0         1968 S   /usr/sbin/email 2225 0         1664 S   lld2d br0 2227 0         2252 S   /usr/sbin/acl_logd 2238 0         2076 S   check_fw 2311 0         1592 S   /usr/sbin/timesync /sbin/ntpclient 2368 0         1584 S   wpsd 2383 0         1104 R   telnetd 2386 0         1100 S   /bin/sh 2401 0         1100 R   ps
 * ps

lsmod
Module                 Size       Used by    Tainted: P  MultiSsidCntl           3712 0 -      Live 0xc0017000 (P) acos_nat             464032 0 -      Live 0xc035d000 (P) wl_high             1128768 0 -      Live 0xc007c000 (P) wl                  1106400 0 -      Live 0xc01cc000 (P) et                    72240 0 -      Live 0xc0069000 (P) ipv6_spi              43616 0 -      Live 0xc0022000 (P) igs                   20112 1 wl,    Live 0xc0011000 (P) emf                   22400 2 wl,igs Live 0xc000a000 (P) }}
 * 1) lsmod