Netool NE1

bgn (N150)
Battery operated Ethernet Packet analyzer and Wi-Fi router
Homepage	Product page
Downloads	Download page
3rd Party Firmware
dd-wrt	Status Unknown
OpenWrt	Status Unknown
Tomato any flavor	Incompatible
Platform
Brand • Model • Rev	Netool NE1
FCC ID	2APJB-NE1
Board ID	YJ18650V3
Type	wireless router, WiFi security auditing tool
CPU1	Ralink RT5350F
CPU1 Type	MIPS 24KEc
CPU1 Speed	360 MHz
Flash1 Chip	Winbond W25Q128JVSQ
Flash1 Size	16 MiB16,777,216 B <br />131,072 Kib <br />16,384 KiB <br />128 Mib <br />0.0156 GiB <br />
RAM1 Size	32 MiB33,554,432 B <br />262,144 Kib <br />32,768 KiB <br />256 Mib <br />0.0313 GiB <br />
RAM1 Chip	ESMT M12L2561616A-6T
ETH chip1	Ralink RT5350F
Ethernet Port Count	1-100MbE-LAN
Wired Standard	IEEE 802.3i/3u
802dot11 OUI: 70:B3:D5 (-, 1 W) Ethernet OUI: 64:51:7E (1 E, 2 W)
Stock bootloader	U-Boot 1.1.3 Ralink UBoot
Stock FW OS	Linux 4.4.7 OpenWRT
Expansion IF types	USB 2.0
USB ports	1
USB Hub Compatible	Untested
Power	5 VDC, 1 A
Connector type	USB Female Micro-B
Flags: battery backup
Additional chips Battery Management;STM;STM8S003F3;;1;
Other
Default SSID: netool-DEFAULT Default IP address: 192.168.42.1
Retail
FCC approval date	31 May 2018
(Est.) initial retail price (in USD):	$179
ASIN	B01L9W8FB8
Radio 1
Chip1	Ralink RT5350F
Wireless interface OUI	70:B3:D5,
Antenna Connector Type	soldered
MIMO status	1x1:1
Wireless Standard	IEEE 802.11b/g/n
802.11n	up to 150 Mbps
802.11g	up to 54 Mbps
802.11b	up to 11 Mbps
WiFi Operating Frequency	2.4 GHz

For a list of all currently documented Ralink chipsets with specifications, see Ralink.

• 150 Mbps - 1SS 2.4GHz 802.11n (40MHz chan.) = N150 class

Overview

"YJ18650V3" is silkscreened on the board in the FCC photos.

CPU: Ralink RT5350F (MIPS 24KEc V4.12)

See also: Hak5 WiFi Pineapple Mark V

JTAG-Serial Info

dmesg boot

boot log • >>

[ 0.000000] Linux version 4.4.7 (nate@ninja) (gcc version 5.3.0 (OpenWrt GCC 5.3.0 r49395) ) #215 Tue Mar 26 18:04:42 UTC 2019 [ 0.000000] SoC Type: Ralink RT5350 id:1 rev:3 [ 0.000000] bootconsole [early0] enabled [ 0.000000] CPU0 revision is: 0001964c (MIPS 24KEc) [ 0.000000] MIPS: machine is HAME MPR-A2 [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 02000000 @ 00000000 (usable) [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x0000000000000000-0x0000000001ffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000000000-0x0000000001ffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000001ffffff] [ 0.000000] On node 0 totalpages: 8192 [ 0.000000] free_area_init_node: node 0, pgdat 80360390, node_mem_map 81000000 [ 0.000000] Normal zone: 64 pages used for memmap [ 0.000000] Normal zone: 0 pages reserved [ 0.000000] Normal zone: 8192 pages, LIFO batch:0 [ 0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes. [ 0.000000] Primary data cache 16kB, 4-way, VIPT, no aliases, linesize 32 bytes [ 0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768 [ 0.000000] pcpu-alloc: [0] 0 [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 8128 [ 0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs2 [ 0.000000] PID hash table entries: 128 (order: -3, 512 bytes) [ 0.000000] Dentry cache hash table entries: 4096 (order: 2, 16384 bytes) [ 0.000000] Inode-cache hash table entries: 2048 (order: 1, 8192 bytes) [ 0.000000] Writing ErrCtl register=0004d290 [ 0.000000] Readback ErrCtl register=0004d290 [ 0.000000] Memory: 28508K/32768K available (2764K kernel code, 124K rwdata, 660K rodata, 156K init, 191K bss, 4260K reserved, 0K cma-reserved) [ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 [ 0.000000] NR_IRQS:256 [ 0.000000] CPU Clock: 360MHz [ 0.000000] clocksource: systick: mask: 0xffff max_cycles: 0xffff, max_idle_ns: 583261500 ns [ 0.000000] systick: running - mult: 214748, shift: 32 [ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 10618113593 ns [ 0.000016] sched_clock: 32 bits at 180MHz, resolution 5ns, wraps every 11930464253ns [ 0.015667] Calibrating delay loop... 239.61 BogoMIPS (lpj=1198080) [ 0.090871] pid_max: default: 32768 minimum: 301 [ 0.100274] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.113348] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes) [ 0.136302] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.156132] pinctrl core: initialized pinctrl subsystem [ 0.167841] NET: Registered protocol family 16 [ 0.182545] rt2880-pinmux pinctrl: try to register 28 pins ... [ 0.182594] pinctrl core: registered pin 0 (io0) on rt2880-pinmux [ 0.182664] pinctrl core: registered pin 1 (io1) on rt2880-pinmux [ 0.182685] pinctrl core: registered pin 2 (io2) on rt2880-pinmux [ 0.182704] pinctrl core: registered pin 3 (io3) on rt2880-pinmux [ 0.182723] pinctrl core: registered pin 4 (io4) on rt2880-pinmux [ 0.182741] pinctrl core: registered pin 5 (io5) on rt2880-pinmux [ 0.182760] pinctrl core: registered pin 6 (io6) on rt2880-pinmux [ 0.182779] pinctrl core: registered pin 7 (io7) on rt2880-pinmux [ 0.182798] pinctrl core: registered pin 8 (io8) on rt2880-pinmux [ 0.182817] pinctrl core: registered pin 9 (io9) on rt2880-pinmux [ 0.182836] pinctrl core: registered pin 10 (io10) on rt2880-pinmux [ 0.182854] pinctrl core: registered pin 11 (io11) on rt2880-pinmux [ 0.182874] pinctrl core: registered pin 12 (io12) on rt2880-pinmux [ 0.182892] pinctrl core: registered pin 13 (io13) on rt2880-pinmux [ 0.182911] pinctrl core: registered pin 14 (io14) on rt2880-pinmux [ 0.182930] pinctrl core: registered pin 15 (io15) on rt2880-pinmux [ 0.182949] pinctrl core: registered pin 16 (io16) on rt2880-pinmux [ 0.182968] pinctrl core: registered pin 17 (io17) on rt2880-pinmux [ 0.182986] pinctrl core: registered pin 18 (io18) on rt2880-pinmux [ 0.183023] pinctrl core: registered pin 19 (io19) on rt2880-pinmux [ 0.183043] pinctrl core: registered pin 20 (io20) on rt2880-pinmux [ 0.183062] pinctrl core: registered pin 21 (io21) on rt2880-pinmux [ 0.183081] pinctrl core: registered pin 22 (io22) on rt2880-pinmux [ 0.183100] pinctrl core: registered pin 23 (io23) on rt2880-pinmux [ 0.183119] pinctrl core: registered pin 24 (io24) on rt2880-pinmux [ 0.183137] pinctrl core: registered pin 25 (io25) on rt2880-pinmux [ 0.183156] pinctrl core: registered pin 26 (io26) on rt2880-pinmux [ 0.183175] pinctrl core: registered pin 27 (io27) on rt2880-pinmux [ 0.183250] pinctrl core: add 5 pinctrl maps [ 0.183310] rt2880-pinmux pinctrl: found group selector 0 for i2c [ 0.183344] rt2880-pinmux pinctrl: found group selector 4 for jtag [ 0.183376] rt2880-pinmux pinctrl: invalid group "rgmii" for function "gpio" [ 0.197378] rt2880-pinmux pinctrl: invalid group "mdio" for function "gpio" [ 0.211158] rt2880-pinmux pinctrl: found group selector 2 for uartf [ 0.211197] rt2880-pinmux pinctrl: request pin 1 (io1) for pinctrl [ 0.211227] rt2880-pinmux pinctrl: request pin 2 (io2) for pinctrl [ 0.211261] rt2880-pinmux pinctrl: request pin 17 (io17) for pinctrl [ 0.211289] rt2880-pinmux pinctrl: request pin 18 (io18) for pinctrl [ 0.211316] rt2880-pinmux pinctrl: request pin 19 (io19) for pinctrl [ 0.211343] rt2880-pinmux pinctrl: request pin 20 (io20) for pinctrl [ 0.211370] rt2880-pinmux pinctrl: request pin 21 (io21) for pinctrl [ 0.211402] rt2880-pinmux pinctrl: request pin 7 (io7) for pinctrl [ 0.211429] rt2880-pinmux pinctrl: request pin 8 (io8) for pinctrl [ 0.211456] rt2880-pinmux pinctrl: request pin 9 (io9) for pinctrl [ 0.211483] rt2880-pinmux pinctrl: request pin 10 (io10) for pinctrl [ 0.211510] rt2880-pinmux pinctrl: request pin 11 (io11) for pinctrl [ 0.211537] rt2880-pinmux pinctrl: request pin 12 (io12) for pinctrl [ 0.211564] rt2880-pinmux pinctrl: request pin 13 (io13) for pinctrl [ 0.211591] rt2880-pinmux pinctrl: request pin 14 (io14) for pinctrl [ 0.211621] rt2880-pinmux pinctrl: failed to lookup the sleep state [ 0.247495] rt2880_gpio 10000600.gpio: registering 22 gpios [ 0.258615] rt2880_gpio 10000600.gpio: registering 22 irq handlers [ 0.273827] clocksource: Switched to clocksource MIPS [ 0.286706] NET: Registered protocol family 2 [ 0.297056] TCP established hash table entries: 1024 (order: 0, 4096 bytes) [ 0.310951] TCP bind hash table entries: 1024 (order: 0, 4096 bytes) [ 0.323535] TCP: Hash tables configured (established 1024 bind 1024) [ 0.336397] UDP hash table entries: 256 (order: 0, 4096 bytes) [ 0.348026] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) [ 0.361015] NET: Registered protocol family 1 [ 0.370773] rt-timer 10000100.timer: maximum frequency is 3662Hz [ 0.384237] alarmtimer alarmtimer: no of_node; not parsing pinctrl DT [ 0.384802] futex hash table entries: 256 (order: -1, 3072 bytes) [ 0.441023] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.452672] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.478734] io scheduler noop registered [ 0.486543] io scheduler deadline registered (default) [ 0.497130] ralink-usb-phy usbphy: invalid resource [ 0.507733] rt2880-pinmux pinctrl: request pin 7 (io7) for pio:7 [ 0.508103] rt2880-pinmux pinctrl: request pin 12 (io12) for pio:12 [ 0.508408] gpio-export gpio_export: 2 gpio(s) exported [ 0.519360] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled [ 0.533115] serial8250 serial8250: no of_node; not parsing pinctrl DT [ 0.533735] pinctrl core: add 1 pinctrl maps [ 0.533944] rt2880-pinmux pinctrl: found group selector 3 for uartlite [ 0.533999] rt2880-pinmux pinctrl: request pin 15 (io15) for 10000c00.uartlite [ 0.534030] rt2880-pinmux pinctrl: request pin 16 (io16) for 10000c00.uartlite [ 0.534533] console [ttyS0] disabled [ 0.541575] 10000c00.uartlite: ttyS0 at MMIO 0x10000c00 (irq = 20, base_baud = 2500000) is a Palmchip BK-3103 [ 0.561400] console [ttyS0] enabled [ 0.575180] bootconsole [early0] disabled [ 0.593425] pinctrl core: add 1 pinctrl maps [ 0.593513] rt2880-pinmux pinctrl: found group selector 1 for spi [ 0.593555] rt2880-pinmux pinctrl: request pin 3 (io3) for 10000b00.spi [ 0.593585] rt2880-pinmux pinctrl: request pin 4 (io4) for 10000b00.spi [ 0.593612] rt2880-pinmux pinctrl: request pin 5 (io5) for 10000b00.spi [ 0.593640] rt2880-pinmux pinctrl: request pin 6 (io6) for 10000b00.spi [ 0.602246] spi spi0.0: force spi mode3 [ 0.610894] m25p80 spi0.0: w25q128 (16384 Kbytes) [ 0.620470] 4 ofpart partitions found on MTD device spi0.0 [ 0.631467] Creating 4 MTD partitions on "spi0.0": [ 0.641087] 0x000000000000-0x000000030000 : "u-boot" [ 0.654937] 0x000000030000-0x000000040000 : "u-boot-env" [ 0.669482] 0x000000040000-0x000000050000 : "factory" [ 0.683559] 0x000000050000-0x000000800000 : "firmware" [ 0.736562] 2 uimage-fw partitions found on MTD device firmware [ 0.748503] 0x000000050000-0x00000017aef1 : "kernel" [ 0.761743] 0x00000017aef1-0x000000800000 : "rootfs" [ 0.775756] mtd: device 5 (rootfs) set to be root filesystem [ 0.787353] 1 squashfs-split partitions found on MTD device rootfs [ 0.799775] 0x0000006c0000-0x000000800000 : "rootfs_data" [ 0.820426] rt3050-esw 10110000.esw: link changed 0x00 [ 0.834611] mtk_soc_eth 10100000.ethernet eth0: MediaTek frame engine at 0xb0100000, irq 5 [ 0.852340] rt2880_wdt 10000120.watchdog: Initialized [ 0.865656] NET: Registered protocol family 10 [ 0.883247] NET: Registered protocol family 17 [ 0.892479] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this. [ 0.917768] 8021q: 802.1Q VLAN Support v1.8 [ 0.945481] VFS: Mounted root (squashfs filesystem) readonly on device 31:5. [ 0.961350] Freeing unused kernel memory: 156K (80379000 - 803a0000) [ 3.526732] init: Console is alive [ 3.534219] init: - watchdog - [ 6.290646] usbcore: registered new interface driver usbfs [ 6.301980] usbcore: registered new interface driver hub [ 6.312997] usbcore: registered new device driver usb [ 6.333144] Button Hotplug driver version 0.4.1 [ 6.346598] rt2880-pinmux pinctrl: request pin 0 (io0) for pio:0 [ 6.364129] SCSI subsystem initialized [ 6.383959] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 6.400287] ehci-platform: EHCI generic platform driver [ 6.421454] phy phy-usbphy.0: remote usb device wakeup disabled [ 6.433347] phy phy-usbphy.0: UTMI 16bit 30MHz [ 6.442342] ehci-platform 101c0000.ehci: EHCI Host Controller [ 6.453970] ehci-platform 101c0000.ehci: new USB bus registered, assigned bus number 1 [ 6.470107] ehci-platform 101c0000.ehci: irq 26, io mem 0x101c0000 [ 6.493956] ehci-platform 101c0000.ehci: USB 2.0 started, EHCI 1.00 [ 6.507846] usb usb1: no of_node; not parsing pinctrl DT [ 6.508782] hub 1-0:1.0: no of_node; not parsing pinctrl DT [ 6.508903] hub 1-0:1.0: USB hub found [ 6.517550] hub 1-0:1.0: 1 port detected [ 6.529346] rt2880-pinmux pinctrl: request pin 20 (io20) for pio:20 [ 6.529709] rt2880-pinmux pinctrl: request pin 17 (io17) for pio:17 [ 6.539398] usbcore: registered new interface driver usb-storage [ 6.562234] init: - preinit - [ 7.849977] rt3050-esw 10110000.esw: link changed 0x00 [ 8.116616] random: procd urandom read with 13 bits of entropy available [ 9.539617] rt3050-esw 10110000.esw: link changed 0x10 [ 11.500651] mount_root: loading kmods from internal overlay [ 12.518539] jffs2: notice: (325) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 12.550654] block: attempting to load /tmp/jffs_cfg/upper/etc/config/fstab [ 12.601119] block: extroot: not configured [ 12.818876] jffs2: notice: (322) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 13.478353] block: attempting to load /tmp/jffs_cfg/upper/etc/config/fstab [ 13.526992] block: extroot: not configured [ 13.537215] mount_root: switching to jffs2 overlay [ 13.601039] procd: - early - [ 13.607817] procd: - watchdog - [ 14.640501] procd: - ubus - [ 14.702316] procd: - init - [ 16.415397] zram: Added device: zram0 [ 16.497649] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 16.555388] Netfilter messages via NETLINK v0.30. [ 16.571350] ip_set: protocol 6 [ 16.651039] Loading modules backported from Linux version v4.4-rc5-1913-gc8fdf68 [ 16.665959] Backport generated by backports.git backports-20151218-0-g2f58d9d [ 16.691440] ip_tables: (C) 2000-2006 Netfilter Core Team [ 16.727222] nf_conntrack version 0.5.0 (447 buckets, 1788 max) [ 16.812679] xt_time: kernel timezone is -0000 [ 16.991456] ieee80211 phy0: rt2x00_set_rt: Info - RT chipset 5350, rev 0500 detected [ 17.007089] ieee80211 phy0: rt2x00_set_rf: Info - RF chipset 5350 detected [ 17.022154] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht' [ 20.324597] zram0: detected capacity change from 0 to 13631488 [ 20.363409] Adding 13308k swap on /dev/zram0. Priority:-1 extents:1 across:13308k SS [ 21.982326] rt3050-esw 10110000.esw: link changed 0x00 [ 23.688599] rt3050-esw 10110000.esw: link changed 0x10 [ 30.649924] device eth0.1 entered promiscuous mode [ 30.659624] device eth0 entered promiscuous mode [ 30.764195] br-lan: port 1(eth0.1) entered forwarding state [ 30.775562] br-lan: port 1(eth0.1) entered forwarding state [ 32.773945] br-lan: port 1(eth0.1) entered forwarding state [ 38.014211] rt2880-pinmux pinctrl: request pin 14 (io14) for pio:14 [ 38.487733] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 48.214258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.182150] random: nonblocking pool is initialized [ 1468.412802] rt3050-esw 10110000.esw: link changed 0x00 [ 1470.133592] rt3050-esw 10110000.esw: link changed 0x10

Pictures

User Images

• 

  Main board top

• 

  Main board bottom