Linksys WRT54GX4

bg (G240)
	Wireless-G Broadband Router with SRX400
Support	Support page
Wikipedia	Linksys routers
InfoDepot Wiki	Linksys WRT54GX4 v1.0
3rd Party Firmware
dd-wrt	Status Unknown
OpenWrt	Status Unknown
Tomato any flavor	Incompatible
Platform
Brand • Model • Rev	Linksys WRT54GX4
Serial number prefix	KLD0
FCC ID	Q87-WRT54GX4, SA3-AGN3023MX0100
IC ID	3839A-WRT54GX4
Type	wireless router
CPU1	Realtek RTL8651B
CPU1 Type	Lexra RLX5280
CPU1 Speed	200 MHz
Flash1 Chip	Spansion S29GL064M90TFIR4
Flash1 Size	8 MiB8,388,608 B <br />65,536 Kib <br />8,192 KiB <br />64 Mib <br />0.00781 GiB <br />
RAM1 Size	32 MiB33,554,432 B <br />262,144 Kib <br />32,768 KiB <br />256 Mib <br />0.0313 GiB <br />
RAM1 Chip	Elpida EDS1216AATA-75-E x 2
ETH chip1	Realtek RTL8651B
Switch	Realtek RTL8651B
Ethernet Port Count	1-100MbE-WAN 4-100MbE-LAN
Wired Standard	IEEE 802.3i/3u
	802dot11 OUI: 00:13:10 (16 E, 17 W), 00:16:B6 (8 E, 15 W), 00:18:39 (8 E, 17 W); Ethernet OUI: 00:13:10 (16 E, 17 W), 00:16:B6 (8 E, 15 W), 00:18:39 (8 E, 17 W)
Stock bootloader	ROME
Stock FW OS	μClinux 2.4.26-uc0
Expansion IF types	Mini PCI
Mini PCI slots	1
Power	12 VDC, 1 A
Connector type	barrel
Serial Port (UART)	yes, internal, populated, connectorized, ; 4-pin header, JP1, (38400 8N1), 3.3V TTL
Other
	Default SSID: linksys (53 addl. devices); Default IP address: 192.168.1.1; the IP 192.168.1.1 is used by 1326 additional devices; of which 155 are Linksys devices; Default login user: admin; Default login password: admin; admin:admin credentials used by 1343 additional devices; of which 59 are Linksys devices
Manuf/OEM/ODM	Askey RT3125W -D40
Retail
Availability	less common
FCC approval date	10 November 2005
UPC	745883568574 ; (UPC DB, On eBay);
ASIN	B000C77XSS
Country of manuf	China
Radio 1
Radio1 module	Airgo AGN3023MX-01
Radio1 module IF	Mini PCI (long)
Chip1	Airgo AGN303BB
Chip2	Airgo AGN311RF
Chip3	Airgo AGN312RF
Wireless interface OUI	00:13:10, 00:16:B6, 00:18:39
Antenna Connector Type	U.FL
MIMO status	2x3:2
Wireless Standard	IEEE 802.11b/g
802.11g	up to 240 Mbps
802.11b	up to 11 Mbps
WiFi Operating Frequency	2.4 GHz
ASUS WL-156gM	MSQWL566GM; SA3-AGN3023MX0100
ASUS WL-566gM	MSQWL566GM; SA3-AGN3023MX0100
Airgo AGN3023MX-01	SA3-AGN3023MX0100
Buffalo WZR-G240	FDI-09101459-0; SA3-AGN3023MX0100
Netgear WPNT834	SA3-AGN3023MX0100

For a list of all currently documented Airgo chipsets with specifications, see Airgo.
For a list of all currently documented Realtek chipsets with specifications, see Realtek.

For a list of all currently documented Linksys device with specifications, see Linksys.

Overview

"RT3125W-D40", "REV:1.1", "28-000371", and "3028-002061" is silkscreened on the router main board. "704-00104-08" is silkscreened on the wireless module.

WRT54GX4 serial numbers appear to start with KLD0.

JTAG-Serial Info

Serial

Serial Pinouts

The serial header is the (populated) JP1.

JP1 [ (RxD) (TxD) (GND) (...) ]
  v
to RTL8651B

Info derived from

boot log • >>

(c)Copyright Realtek, Inc. 2003
Project ROME LOADER
Version 00.00.18(uClinux) (Jun 16 2005 15:35:49)
LDR version 1.00.04 for identification
[865xB] CPU Clock Rate: 200MHz, Memory Clock Rate: 130MHz
AMD/Fujitsu Standard CFI Query Table v1.3 at 0x0040
Detected flash size: total 8MB.
SDRAM size: 32MB
+TFTP +Auto UART +Bank1:ROM
Here we try to capture the default reset button:  None.

--== Loader Menu ==--
'r' to update run image
'a' to change config
'l' to update loader
'g' to load run image without updating Flash
'o' to update flash with ROM file
's' to test SDRAM memory
't' to test flash memory
'e' to erase flash memory
'i' to test led on/off

Loading runtime image ...
Unzip image from address: 0xbe020000
Start runtime image at 80000400.

************************************
Powered by Realtek RTL8651B SoC, rev 1
************************************
SDRAM size: 32MB
CPU revision is: 0000ff00
Init MMU (16 entries)
Primary instruction cache 0kB, linesize 0 bytes.
Primary data cache 0kB, linesize 0 bytes.
Linux version 2.4.26-uc0 (shixiang@compile-server) 
 (gcc version 3.3.3) #423 Wed Mar 28 13:33:22 CST 2007
Determined physical RAM map:
 memory: 02000000 @ 00000000 (usable)
NOFS reserved @ 0x802e11d0
On node 0 totalpages: 8192
zone(0): 8192 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: root=/dev/mtdblock4
IRR(0)=c0000000
Calibrating delay loop... 199.06 BogoMIPS
Memory: 29456k/32768k available (2395k kernel code, 
 3312k reserved, 108k data, 104k init, 0k highmem)
Dentry cache hash table entries: 4096 (order: 3, 32768 bytes)
Inode cache hash table entries: 2048 (order: 2, 16384 bytes)
Mount cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 8192 (order: 3, 32768 bytes)
Checking for 'wait' instruction...  unavailable.
POSIX conformance testing by UNIFIX
NEW PCI Driver...isLinuxCompliantEndianMode=False(Big Endian)
Found Airgo PCI, function=0!
Memory Space 0 data=0xfffe0000 size=0x20000
Memory Space 1 data=0xfff80000 size=0x80000
PCI device exists: slot 0 function 0 VendorID 17cb DeviceID 2 bbd40000
Found Airgo PCI, function=1!
Found Airgo PCI, function=2!
Found Airgo PCI, function=3!
Found Airgo PCI, function=4!
Found Airgo PCI, function=5!
Found Airgo PCI, function=6!
Found Airgo PCI, function=7!
memory mapping BAnum=0 slot=0 func=0
memory mapping BAnum=1 slot=0 func=0
assign mem base 1bf00000~1bf7ffff at bbd40014 size=524288
assign mem base 1bf80000~1bf9ffff at bbd40010 size=131072
Find Total 1 PCI functions
Found 00:00 [17cb/0002] 000200 00
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
Initializing RT netlink socket
Starting kswapd
devfs: v1.12c (20020818) Richard Gooch (rgooch@atnf.csiro.au)
devfs: boot_options: 0x0
pty: 256 Unix98 ptys configured
Serial driver version 5.05c (2001-07-08) with MANY_PORTS SERIAL_PCI enabled
Probing RTL8651 home gateway controller...
chip name: 8651B, chip revid: 1
===> Request IRQ 6 for eth0, ret=0
PPP generic driver version 2.4.2
PPP BSD Compression module registered
flash device: 7e0000 at be000000
AMD/Fujitsu Standard CFI Query Table v1.3 at 0x0040
 Amd/Fujitsu Extended Query Table v1.3 at 0x0040
number of CFI chips: 1
cfi_cmdset_0002: Disabling fast programming due to code brokenness.

Creating 5 MTD partitions on "Physically mapped flash":
0x00000000-0x00006000 : "boot1"
0x00010000-0x00020000 : "boot2"
0x00000000-0x00800000 : "boot3"
0x00020000-0x00120000 : "kernel"
0x00120000-0x00800000 : "rootfs"
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP, IGMP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 2048 bind 4096)
GRE over IPv4 tunneling driver
ip_conntrack version 2.1 (256 buckets, 2048 max) - 344 bytes per conntrack
ip_conntrack_pptp version $Revision: 1.1.1.1 $ loaded
ip_nat_pptp version $Revision: 1.1.1.1 $ loaded
ip_tables: (C) 2000-2002 Netfilter core team
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
VFS: Mounted root (cramfs filesystem) readonly.
Freeing unused kernel memory: 104k freed
Bad boy: serial (at 0x8009d9fc) called us without a dev_id!
IRR(4)=c0c40000
===> Request IRQ 4 for serial, ret=0

BusyBox v1.00-pre2 (2006.04.07-04:21+0000) Built-in shell (msh)
Enter 'help' for a list of built-in commands.

# System initializing...AMD/Fujitsu Standard CFI Query Table v1.3 at 0x0040

cfgmgr_integrityCheck: ok
cfgmgr_init: romeCfgParam size: 24232(0x5ea8)
cfgmgr_init: pRomeCfgParam addr: 715853824(0x2aab1000)
rtl8651_user_pid set to 18
AMD/Fujitsu Standard CFI Query Table v1.3 at 0x0040
cfg wan toAMD/Fujitsu Standard CFI Query Table v1.3 at 0x0040
 dhcp client ...
pRomeCfgParam->ifCfgParam[0].mtu =1500

Set IGMP Default Upstream interface (eth0) ... SUCCESS!!
info, client (v0.9.9-pre) started
dhcpc client deconfig
ifCfgParam[0].ipAddr: 0.0.0.0
ifCfgParam[0].ipMask: 0.0.0.0
ifCfgParam[0].gwAddr: 0.0.0.0
ifCfgParam[0].dnsPrimaryAddr: 0.0.0.0
ifCfgParam[0].dnsSecondaryAddr: 0.0.0.0
ifCfgParam[0].winsPrimaryAddr: 0.0.0.0
ifCfgParam[0].winsSecondaryAddr: 0.0.0.0
rtl8651_delNaptMapping: ret -6
rtl8651_delRoute(default): ret -3
rtl8651_delIpIntf: ret -2710
Using /lib/modules/2.4.26-uc0/kernel/drivers/net/led/led.o
PPPoE Passthru disabled.
Drop Unknown PPPoE PADT disabled.
IPv6 Passthru disabled.
killall: upnp: no process killed
/proc/sys/net/ipv4/ip_masq_udp_dloose: No such file or directory
target 239.0.0.0
SIOCDELRT: No such process
Using /lib/modules/2.4.26-uc0/kernel/drivers/net/askey/airgo/ccd.o
Using /lib/modules/2.4.26-uc0/kernel/drivers/net/askey/airgo/wns_mod.o
Using /lib/modules/2.4.26-uc0/kernel/drivers/net/askey/airgo/pol_nosdram.o
debug, Sending discover...
debug, Sending discover...
CPU: LX5280@ 2001340 cycles/jiffies
plm probe (plm_dump_buf @ C0029060)
np->hif_regs->bus_slave.hif_ctrl.val 00000000
np->hif_regs->bus_slave.hif_ctrl.val 000000C0
wlan0: PCI Revision = 1, Slot Name[00:00.0], Slot#[0]
wlan0: at BAR0 = 0xbbf80000, BAR1 = 0xbbf00000, IRQ 5.
IRR(5)=c0c40000
===> Request IRQ 5 for wlan0, ret=0
Register shadow 18
ccd_msg_handler_shadow 18 2 C002A4C0
find_pid_by_name(): 0
ssid=linksys
aniSdkSetSsid sintStatus =0
 aniSdkSetSuppressSsid sintStatus =0
 aniSdkSetBeaconParam sintStatus =0
 aniSdkSetDot11MacParam sintStatus =0
 aniSdkSetNwkDensity  sintStatus =0
 aniSdkSetRadioPersona
debug, Sending discover...
aniSdkSetWorldMode

Error: can' get  ,48! ken debug : wl_country_code =US,get code =
ken , struParam.Channel =0
sec_chan = 0
ken , struParam.secondaryChannel =0
ken param.channel=0,secondarychannel=0,autoselmode=1
ken , struParam.channelBondingMode =1
ken ... chbonding....
ken ... wl_qos....
struParam.qosMode =1
ken ...  QoS Mode....
ken ... wl_wme....
ken ... CCK Rate....
ken ... OFDM....
ken ... wl_frameburst....
ken debug  wl_proximity
ken ..  wl_compression =0
ken .................   wl_macmode
ken debug : pc01Value wl_wep = off
halPhyGetChanelListWithPower: dev_ind->numChan = 11
Applied commit-all global settings
find_pid_by_name(): PID(45) match
find_pid_by_name(): 1
airgo_init():  ani8021x_aa processes existed
ssid=linksys
Starting MAC FW module...radioID = 0 NUM_RADIO 1 
 - param_addr = 0x8148d2f4 start at C003B3B0
[0][1a][2][1179] successfully initialized hal rc 0
[0][20][2][1] halPerformSystemReset Called
[0][10][2][1] After halMacHwInit done
[0][11][3][1] Sending CFG_DNLD_REQ
Register External Device (wlan0) vid (9) extPortNum (6)
Reserve port 6 for peripheral device use. (0x40)
Total WLAN/WDS links: 1
aniSdkSetSsid sintStatus =0
 aniSdkSetSuppressSsid sintStatus =0
 aniSdkSetBeaconParam sintStatus =0
 WSM radio 0 reset started.
[0][12][2][1] received unexpected SME_STOP_BSS_REQ in state 2, for role 0
[0][12][2][1] eLIM_SME_SUSPEND_STATE
aniSdkSetDot11MacParam sintStatus =0
 mac_mod_exit: Cleaning MAC FW module: radio Id 0
aniSdkSetNwkDensity  sintStatus =0
 aniSdkSetRadioPersonaStarting MAC FW module...radioID = 0 NUM_RADIO 1 
 -  param_addr = 0x8148d2f4 start at C003B3B0

[0][1a][2][1220] successfully initialized hal rc 0
[0][20][2][1] halPerformSystemReset Called
[0][10][2][1] After halMacHwInit done
[0][11][3][1] Sending CFG_DNLD_REQ
aniSdkSetWorldMode
[0][11][3][1] CFG size 4596 bytes MAGIC dword is 0xdeaddead
[0][11][3][1] CFG hdr totParams 262 intParams 204 strBufSize 1080/1775
[0][14][2][1] Cfg param 231 indication not handled
[0][10][3][1] initFixedState : STA 0
[0][10][2][1] limresumeactivityntf is sent from hal
[0][10][2][1] halProcessStartEvent: Completed HAL/CFG/HAL init; State 3!
[0][10][2][1] halProcessStartEvent: Done:- Hal State 3
[0][12][2][1] Received RESUME_NTF in State 2 on Role 0
halPhyGetChanelListWithPower: dev_ind->numChan = 11
 ken debug : wl_country_code =US,g[0][14][2][13] Cfg param 190 indication not handled
[0][14][2][13] Cfg param 191 indication not handled
[0][14][2][13] Cfg param 49 indication not handled
[0][11][2][13] Value 20 out of range [100,1000] cfg id 187
et code =US
ken , struParam.Channel =0
sec_chan = 0
ken , struParam.secondaryChannel =0
ken param.channel=0,secondarychannel=0,autoselmode=1
ken , struParam.channelBondingMode =1
ken ... chbonding....
ken ... wl_qos....
struParam.qosMode =1
ken ...  QoS Mode....
ken ... wl_wme....
ken ... CCK Rate....
ken ... OFDM....
ken ... wl_frameburst....
ken debug  wl_proximity
ken ..  wl_compression =0
ken .................   wl_macmode
ken debug : pc01Value wl_wep = off
WSM radio 0 reset started.
Applied commit-all global settings
[0][12][2][176] received unexpected SME_STOP_BSS_REQ in state 0, for role 0
[0][12][2][176] eLIM_SME_OFFLINE_STATE
Delete port 0 from peripheral port set. (0x40)
Unregister Extension device with LinkID 1 -- (wlan0)
Total WLAN/WDS links: 0
halPhyGetChanelListWithPower: dev_ind->numChan = 11
mac_mod_exit: Cleaning MAC FW module: radio Id 0
Starting MAC FW module...radioID = 0 NUM_RADIO 1 - param_addr = 0x8148d2f4 start at C003B3B0
[0][1a][2][1415] successfully initialized hal rc 0
[0][20][2][1] halPerformSystemReset Called
[0][10][2][1] After halMacHwInit done
[0][11][3][1] Sending CFG_DNLD_REQ
Register External Device (wlan0) vid (9) extPortNum (6)
Reserve port 6 for peripheral device use. (0x40)
Total WLAN/WDS links: 1
[0][11][3][1] CFG size 4596 bytes MAGIC dword is 0xdeaddead
[0][11][3][1] CFG hdr totParams 262 intParams 204 strBufSize 1080/1775
[0][14][2][1] Cfg param 231 indication not handled
[0][10][3][1] initFixedState : STA 0
[0][10][2][1] limresumeactivityntf is sent from hal
[0][10][2][1] halProcessStartEvent: Completed HAL/CFG/HAL init; State 3!
[0][10][2][1] halProcessStartEvent: Done:- Hal State 3
[0][12][2][1] Received RESUME_NTF in State 2 on Role 0
halPhyGetChanelListWithPower: dev_ind->numChan = 11
[0][14][2][10] Cfg param 190 indication not handled
[0][14][2][10] Cfg param 191 indication not handled
[0][14][2][10] Cfg param 49 indication not handled
killall: udhcpd: no process killed
info, server (v0.9.9-pre) started
error, unable to parse 'opt domain '
error, max_leases value (254) not sane, setting to 50 instead
error, Unable to open /var/udhcpd.leases for reading
[0][12][3][179] Going to parse numSSID  in the START_BSS_REQ, len=9
[0][10][3][179] initFixedState : STA 1
[0][19][3][179] dphSetBroadcastRateForFixedSta(): Set STA[0] broadcast rate to 2 (macRate 100)
[0][10][3][179] halUpdateConfig: set Proximity = 0
WSM radio 0 reset completed.
iptables: Bad rule (does a matching rule exist in that chain?)
iptables: Bad rule (does a matching rule exist in that chain?)
iptables: Bad rule (does a matching rule exist in that chain?)

Other • >>

cat /proc/version

# cat /proc/version
Linux version 2.4.26-uc0 (shixiang@compile-server) 
(gcc version 3.3.3) #423 Wed Mar 28 13:33:22 CST 2007

cat /proc/cpuinfo

# cat /proc/cpuinfo
system type             : Philips Nino
processor               : 0
cpu model               : R3000 V0.0
BogoMIPS                : 199.06
wait instruction        : no
microsecond timers      : no
tlb_entries             : 16
extra interrupt vector  : no
hardware watchpoint     : no
VCED exceptions         : not available
VCEI exceptions         : not available

cat /proc/mtd

# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00006000 00002000 "boot1"
mtd1: 00010000 00010000 "boot2"
mtd2: 00800000 00010000 "boot3"
mtd3: 00100000 00010000 "kernel"
mtd4: 006e0000 00010000 "rootfs"

cat /proc/pci

# cat /proc/pci
PCI devices found:
  Bus  0, device   0, function  0:
    Class 0200: PCI device 17cb:0002 (rev 1).
      IRQ 5.
      Master Capable.  Latency=248.  Min Gnt=24.Max Lat=255.
      Non-prefetchable 32 bit memory at 0x1bf80000 [0x1bf9ffff].
      Non-prefetchable 32 bit memory at 0x1bf00000 [0x1bf7ffff].

lsmod

# lsmod
Module                  Size  Used by
pol_nosdram          1928360   1
wns_mod                33884   0 [pol_nosdram]
ccd                     3232   0 [pol_nosdram wns_mod]
led                     1696   0

cat /proc/meminfo

# cat /proc/meminfo
        total:    used:    free:  shared: buffers:  cached:
Mem:  30269440 14733312 15536128        0  2314240  5849088
Swap:        0        0        0
MemTotal:        29560 kB
MemFree:         15172 kB
MemShared:           0 kB
Buffers:          2260 kB
Cached:           5712 kB
SwapCached:          0 kB
Active:           2536 kB
Inactive:         6144 kB
HighTotal:           0 kB
HighFree:            0 kB
LowTotal:        29560 kB
LowFree:         15172 kB
SwapTotal:           0 kB
SwapFree:            0 kB

cat /etc/version

# cat /etc/version
Realtek/RTL865XB Version 3.4.0 --  Wed Mar 28 13:34:41 CST 2007

ps aux

# ps aux
  PID  Uid     VmSize Stat Command
    1 root       3328 S   /sbin/init
    2 root            SW  [keventd]
    3 root            SWN [ksoftirqd_CPU0]
    4 root            SW  [kswapd]
    5 root            SW  [bdflush]
    6 root            SW  [kupdated]
   18 root      16000 S   /bin/webs start
   19 root       5888 S   /bin/sh
   25 root       4864 S   /bin/udhcpc
   45 root       6336 S   /bin/ani8021x_aa
   50 root       8192 S   /bin/wsm
   63 root       4928 S   /bin/udhcpd
   87 root       4608 R   ps aux

Airgo (Polaris) module info dump (/proc/net/drivers/wlan0/*)

cat ./hif_regs

# cat hif_regs
===============================================
  HIF REGISTERS for Device wlan0
===============================================
hif_control:             0x10E00
hif_window:              0x2000000
hif_endian:              0xB3B2B1B0
-----------------------------------------------
hif_rx_config:           0x33
hif_rx_gof:              0x148E2E0
hif_rx_address:          0x14B30C6
hif_rx_state:            0xF2000000
hif_rx_control:          0x8B
hif_rx_start:            0x148E000
hif_rx_end:              0x148E400
hif_rx_first:            0x148E2E0
-----------------------------------------------
hif_tx_config:           0x10
hif_tx_gof:              0x148EC70
hif_tx_address:          0x18444DC
hif_tx_state:            0x80
hif_tm_control:          0x86
hif_tm_start:            0x148EC00
hif_tm_end:              0x148F000
hif_tm_first:            0x148EC70
hif_td_control:          0x82
hif_td_start:            0x148E400
hif_td_end:              0x148EC00
hif_td_first:            0x148E400
-----------------------------------------------
             Debug Registers
-----------------------------------------------
Transmit DMA             0x46028411
Receive DMA              0x3142A511
Receive DMA              0x14021191
DMA FIFOs                0x40
Tx State m/c             0x80
Rx State m/c:            0xF2000000
Mem Port State m/c:      0x20
Access Counter           0x1D
===============================================

cat ./stats

# cat stats
=*===================================================
Admin State up:6 min 8 sec    dev->state :0x6
TotalIntr :58672         HalIntr:81070         RxIntr:18181
Rx packets: 0             Pkt/RxIntr :0
OOM:0        [drop:0       ]
TX-frees in xmit       :0
TX-queue stop/starts       :0/0
======================================================
                   IRQ Stats
------------------------------------------------------
Rx/Tx(Td/Tm)                            18181/0(0/0)
Polaris/Error                                   0/0
Interface TX Mode                       Polled
Global TX Mode                          Polled
Global RX Mode                          Polled
======================================================
                 Polling Stats
======================================================
poll: quota/weight                              0/32
Poll start start/pkts                           0/0
Rx Tasklet Schedule Count                       0
Alloc SKB Failures                              0
Poll exit: done/not_done/oom                    0/0/0
Poll done w. rx pending                         0
Poll done w. zero receive                       0
MAC skb list 0 peak 6
Memory allocation failure (small skb)           0
Data Frames forwarded to MAC SW in Learn Mode   203
Mgmt/Ctl Frames forwarded to MAC SW             18002
TD Dummy Pkts received by the HDD               0
TM Dummy Pkts received by the HDD               0
Dummy Pkts enqueued to the TD Ring by the HDD   0
Dummy Pkts Re-queued by the HDD                 0
Pkts passed on to the HDD for TD ring by MAC SW 0
Dummy Pkts passed on to the HDD by MAC SW       0
DataNull Frames passed on to HDD by MAC SW      0
Data Frames passed on to the HDD by MAC SW      0
Frames Enqueued to TD ring by WNS for L2 update 0
Frames Enqueued to TD ring by Applications      0
Number of times the TD Ring Flush was called    0
Number of times the HIF TD Engine Enable called 0
Number of times the HIF TD Engine Disable called0
HIF RX Length Errors                            0
HIF Other Errors                                0
======================================================
                 MAC SW Reset Stats
======================================================
Number of times the Reset Req Timer expired     0
Total number of MAC SW Resets issued            0
Resets Counts:
        EOF/SOF MISMATCH                        0
        BMU EXCEPTION                           0
        PDU COUNT LOW                           0
        User Triggered                          0
        NETDEV Watchdog triggered               0
        Unspecified                             0
Number of Radio Enable cmd rcvd                 3
Number of Radio Disable cmd rcvd                2
Number of NETDEV Watchdog timeouts              0
======================================================
               DPH Error Stats
======================================================
DPH TX_PUSH_ERR CNT                             0
DPH TX_INVLD_ERR CNT                            0
DPH TX_STA_INVLD CNT                            0
DPH TX_UNINIT_ERR CNT                           0
DPH TX HASH_LOOKUP_MISS CNT                     0
======================================================
               MBX Msg Stats
======================================================
Total Number of MBX msgs rcvd from MAC SW       150
Number of MBX msgs from MAC SW sent to apps     150
Number of MBX msgs from MAC SW that were dropped 0
======================================================
         Polaris 2.2 PCI Bug Woraround Stats
======================================================
Total Rx Unblock invocations                    0
RX Ring Entries Refill Cnt                      0
RX Ring Entries Discard Cnt                     0

cat ./dbg

# cat dbg
==============================================
Current value of np->msg_enable = 0x3F00C0
==============================================
0x80000000 Dump the RX/TX msg
0x40000000 MAC Msgs rcvd
0x20000000 MAC Msgs sent
0x10000000 Msgs rcvd on Rx Mbx
0x08000000 Msgs sent on TX Mbx
0x04000000 Messages rcvd from Apps
0x02000000 Messages sent to Apps
0x01000000 Disp RX/TX Frame Info
0x00800000 Disp Netlink msgs
0x00400000 Dump Rx MAC mgmt/ctl msgs
----------------------------------------------
Debugs msgs from MAC SW
----------------------------------------------
0x00200000 Disp dbg msgs from CFG
0x00100000 Disp dbg msgs from SYS
0x00080000 Disp dbg msgs from LIM
0x00040000 Disp dbg msgs from DPH
0x00020000 Disp dbg msgs from SCH
0x00010000 Disp all the other MAC dbg msgs
----------------------------------------------
Standard Linux debug bits for the net device
----------------------------------------------
0x00004000 NETIF_MSG_WOL
0x00002000 NETIF_MSG_HW
0x00001000 NETIF_MSG_PKTDATA
0x00000800 NETIF_MSG_RX_STATUS
0x00000400 NETIF_MSG_TX_DONE
0x00000200 NETIF_MSG_INTR
0x00000100 NETIF_MSG_TX_QUEUED
0x00000080 NETIF_MSG_TX_ERR
0x00000040 NETIF_MSG_RX_ERR
0x00000020 NETIF_MSG_IFUP
0x00000010 NETIF_MSG_IFDOWN
0x00000008 NETIF_MSG_TIMER
0x00000004 NETIF_MSG_LINK
0x00000002 NETIF_MSG_PROBE
0x00000001 NETIF_MSG_DRV
==============================================

cat ./np

# cat np
-----------------------------------------------
ring_dma            = 0148e000

0 0 0 0 0 0 0
0 0 0 0 0 0 0
0 0 0 0 0 0 0
0 0 0 0 0 0 0
0 0 0 0 0 0 0
0 0 0 0 0 0 0
0 0 0 0 0 0 0
0 0 0 0 0 0 0
0 0 0 0 0 0 0
0 0 0 0 0 0 0
0 0 0 0 0 0 0
0 0 0 0 0 0 0
0 0 0 0 0 0 0
0 0 0 0 0 0 0
0 0 0 0 0 0 0
0 0 0 0 0 0 0
Avg Rx cycle/pkt = 0
-----------------------------------------------
cur_rx              = 22221
dirty_rx            = 0
rx_ring[077]        = a148e268
rx_dma[077]         = 01652810
rx_skbuff[077]      = 8165ef10
rx_buf_sz           = 3036
cur_txm             = 0
dirty_txm           = 0
txm_ring[000]       = a148ec00
txm_skbuff[000]     = 00000000
txm_dma[000]        = 00000000
-----------------------------------------------
cur_txd             = 0
dirty_txd           = 0
txd_ring[000]       = a148e400
txd_polbd[000]     = 00000000
===============================================
free Rx skb #     = 64
Verify skb on Q # = 64, AIRGO_PKT #=64

cat /etc/key.pem

# cat key.pem
-----BEGIN RSA PRIVATE KEY-----
MIIBOwIBAAJBANun+O1P7q9DkmZo0jl4wrpFSD5FC8AKHmpZE/OqH972c8sMPlr4
3mx9bEU99bAbGzTxaQ86jOertGT7Y45HkqECAwEAAQJBAIvmjyAu0dnlEsCRMJwU
MwpKiDnI5jP4/ehENfXyu/vYFFSkT/U/y0tzouhwUcuyYCCkiQRwniJ3G7LRwA1y
LrUCIQDtbpJJjqCBk7ZjCyS/fe38Q4UvB8obQc6fJU11TQwrlwIhAOzVhtmy7Nc3
29S+8482C4/Viz/xBN3XNv+vc5/d8tqHAiBp/3Ublasebh18thrfyo6WkmZBCs81
v/lIn1SnS5BlXQIgQTaywTNRoBmTgMtryZ16JYsJovu8+VEPpewsDHNTMfUCIQCm
osc90IYSSLTUwUZN4EwYp/dXUlTzTA8PsnhAPvjTbg==
-----END RSA PRIVATE KEY-----

cat /etc/cert.pem

netstat -l

# netstat -l
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State
tcp        0      0 *:http                  *:*                     LISTEN
tcp        0      0 *:https                 *:*                     LISTEN
udp        0      0 127.0.0.1:1024          *:*
udp        0      0 127.0.0.1:1025          *:*
udp        0      0 *:bootps                *:*
Active UNIX domain sockets (only servers)
Proto RefCnt Flags       Type       State         I-Node Path

Pictures

User Images

external
angled
front
back
side panel
ports

internal
board top
flash
board bottom

Linksys WRT54GX4

Overview

JTAG-Serial Info

Serial

Serial Pinouts

Info derived from

cat /proc/version

cat /proc/cpuinfo

cat /proc/mtd

cat /proc/pci

lsmod

cat /proc/meminfo

cat /etc/version

ps aux

Airgo (Polaris) module info dump (/proc/net/drivers/wlan0/*)

cat /etc/key.pem

cat /etc/cert.pem

netstat -l

Pictures

Navigation menu

Page actions

Page actions

Personal tools

Search

Navigation

data/misc

Tools

query forms

ShoutWiki messages