วันอาทิตย์ที่ 7 สิงหาคม พ.ศ. 2565

TRUE T3 T628L Tear down

 อุปกรณ์ตัวนี้เป็นเราเตอร์ GPON WIFI AX5400 จากเน็ตบ้านของ TRUE 

ตัวเครื่อง
มีเสาอากาศ 6 เสา แบ่งเป็น 2 เสาคู่หน้า (สายอากาศสีขาว) สำหรับ WIFI AX 2.4GHz และอีก 4 เสาด้านหลัง(สายอากาศสีดำ) สำหรับ WIFI AX 5GHz

ด้านหลัง
ด้านหลังมี Ethernet 4 พอร์ต

ใต้เครื่อง
ใต้เครื่องมีน็อต 4 ตัว และพอร์ต GPON

ภายในเครื่อง
พอเกาะฝาครอบออกก็จะเจอกับแผ่นเหล็กระบายความร้อนขนาดใหญ่ 

ชิพบนบอร์ด
พอเแกะแผ่นระบายความร้อนก็จะเจอชิพหลายๆตัวคือ

BCM68560IFSBG
    BROADCOM BCM68560IFSBG -> SoC ARMv8 (B53) 2 Core 1.5GHz 4x GbE, 1x 2.5G, 1x USB 3.0, DDR 1066MHz,4ch VoIP, GPON/EPON GE Processor

H5TQ4G63EFR
    SKhynix H5TQ4G63EFR -> 4Gb DDR3 SDRAM

BCM6705KFFBG
    BROADCOM BCM6705KFFBG -> PCIe 2.0 abgn+ac+ax 2x2:2(1.2Gbps) 2.4/5/6GHz MAC/PHY/Radio, PCIe 2.0 Wi-Fi 6E, MU-MIMO, HE80, 1024QAM TWT, LDPC, DFS, Residential AP Chip

BCM43684KRFBG
    BROADCOM BCM43684KRFBG -> PCIe 2.0 abgn+ac+ax 4x4:4(4.8Gbps) 2.4/5GHz  MAC/PHY/Radio, PCIe 2.0 Wi-Fi 6E, MU-MIMO, HE160, 1024QAM ZeroWait DFS, Residential AP Chip

435 7676
    435 7676 -> ??

PCB ด้านล่าง
อีกด้านของ PCB มีชิพ NAND Flash อยู่

FMND2G08U3D
Dosilicon FMND2G08U3D -> 3V/1.8V, x8/x16 2G-BIT NAND FLASH

UART Console
UART Port

UART Console ใช่ Baudrate 115200 
Boot Message

----
BTRM
V1.0
R1.0
L1CD
MMUI
MMU9
DATA
ZBBS
MAIN
OTP?
OTPP
USBT
NAND
IMG?
IMGL
UHD?
UHDP
RLO?
RLOP
UBI?
UBIP
PASS
----
HELO
5.0207p1-1.0.38-163.243
CPU0
L1CD
MMUI
MMUC
ZBBS
MAIN
SEND
Boot Strap Register:  0x53008056
NVRAM memcfg 0x1427
MCB chksum 0x722c322d, config 0x1427

MemsysInit hpg0_generic_aarch64 3.5.1.1 20171009
DDR3
8262CB58 80180000 801A0000 00000000 00000000 0020476E
MCB rev=0x00000501 Ref ID=0x0476E Sub Bld=0x002
Dram Timing 11-11-11

start of memsys_begin
mc_cfg_init(): Initialize the default values on mc_cfg
init_memc_dram_profile(): Initializing MEMC DRAM profile
---------------------------------------------------------------
MEMC DRAM profile (memc_dram_profile_struct) values:
  dram_type    = DDR3
====================================================
PART values:
  part_speed_grade    = 1600 CL11
  part_size_Mbits     = 4096 (DRAM size in MegaBits)
  part_row_bits       = 15 (number of row bits)
  part_col_bits       = 10 (number of column bits)
  part_ba_bits        = 3 (number of bank bits)
  part_width_bits     = 16 (DRAM width in bits)
NUMER OF PARTS:
  part_num            = 1 (Number of parts)
TOTAL values:
  total_size_Mbits    = 4096 (DRAM size in MegaBits)
  total_cs_bits       = 0 (number of cs bits, for dual_rank mode)
  total_width_bits    = 16 (DRAM width in bits)
  total_burst_bytes   = 16 (Number of bytes per DRAM access)
  total_max_byte_addr = 0x1fffffff (Maximum/last DRAM byte address)
                        (Number of bits in total_max_byte_addr is 29)
                        (i.e. total_max_byte_addr goes from bit 0 to bit 28)
  ddr_2T_mode         = 0
  ddr_hdp_mode        = 1
  large_page          = 1
  ddr_dual_rank       = 0
  cs_mode             = 0
MEMC timing (memc_dram_timing_cfg_struct) values:
====================================================
  MC_CHN_TIM_TIM1_0 register fields:
    tCwl   = 8
    tRP    = 11
    tCL    = 11
    tRCD   = 11
  MC_CHN_TIM_TIM1_1 register fields:
    tCCD_L = 4
    tCCD   = 4
    tRRD_L = 6
    tRRD   = 6
  MC_CHN_TIM_TIM1_2 register fields:
    tFAW   = 32
    tRTP   = 6
    tRCr   = 39
  MC_CHN_TIM_TIM1_3 register fields:
    tWTR_L = 6
    tWTR   = 6
    tWR_L  = 12
    tWR    = 12
  MC_CHN_TIM_TIM2 register fields:
    tR2R   = 0
    tR2W   = 2
    tW2R   = 2
    tW2W   = 0
    tAL    = 0
    tRFC   = 208
====================================================
%1 SSC enabled

Poll PHY Status register
PHY Status= 1
Disable Auto-Refresh
[0x80180200] = 0x00000305
End of memsys_begin
Add/Ctl Alignment
Coarse Adj=0x087 deg, cmd steps=0x0E4
reg 0x801A0090 set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A0094 set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A0098 set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A009C set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A00A0 set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A00A4 set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A00A8 set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A00AC set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A00B0 set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A00B4 set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A00B8 set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A00BC set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A00C0 set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A00C4 set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A00C8 set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A00CC set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A00D0 set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A00D4 set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A00D8 set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A00DC set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A00E0 set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A00E4 set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A00E8 set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A00EC set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A00F0 set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A00F4 set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A00F8 set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A00FC set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A0100 set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A0108 set to VDL 0x057 with Fine Adj=0x01 deg
reg 0x801A010C set to VDL 0x057 with Fine Adj=0x01 deg
HP RX TRIM
itrim = 0x0
lstrim = 0x9

ZQ Cal HP PHY
 R in Ohm
 P: Finger=0x318 Term=0x71 Drv=0x28
 N: Finger=0x300 Term=0x80 Drv=0x28

PLL Ref(Hz)=0x02FAF080 UI STEPS=0x072
 DDR CLK(MHz)=0x31B WL CLK dly(ps)=0x0C8 bitT(ps)=0x274 VDLsize(fs)=0x1584 CLK_VDL=0x024
start of memc_init
[0x80180004] = 0x0110061f
[0x80180234] = 0x00001101
Enable Auto-Refresh
[0x80180110] = 0x11100f0e
[0x80180114] = 0x15141312
[0x80180118] = 0x19181716
[0x8018011c] = 0x001c1b1a
[0x80180124] = 0x04000000
[0x80180128] = 0x08070605
[0x8018012c] = 0x00000a09
[0x80180134] = 0x000d0c0b
 Writing to MC_CHN_CFG_CNFG reg; data=0x00000000
[0x80180100] = 0x00000000
cfg_memc_timing_ctrl() Called
[0x80180214] = 0x080b0b0b
[0x80180218] = 0x04040606
[0x8018021c] = 0x20000627
[0x80180220] = 0x06060c0c
[0x80180224] = 0x120000d0
End of memc_init
start of pre_shmoo
[0x80180004] = 0xc110071f
end of pre_shmoo

SHMOO 28nm
801A0000 80180800 00000000 00020000 00000000

Shmoo WL

One UI Steps : 0x81

auto-clk result = 00B (filter=0C steps)
initial CLK shift = 024
final CLK shift   = 00B

   000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011111111111111111111111111111
   000000000011111111112222222222333333333344444444445555555555666666666677777777778888888888999999999900000000001111111111222222222
   012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678
00 S---------------X----------------------------------------------------------------------------------------------------------------
01 S---------------------X----------------------------------------------------------------------------------------------------------

Shmoo RD En
FORCED WR ODT = 0x00001800
 DQSN DRIVE PAD CONTROL (from) (to)
 B0 00039A93 00079A93
 B1 00039A93 00079A93
B0 RISE UI=1 VDL=2B PICK UI=2 VDL=2B
B1 RISE UI=1 VDL=17 PICK UI=2 VDL=17
   000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011111111111111111111111111111
   000000000011111111112222222222333333333344444444445555555555666666666677777777778888888888999999999900000000001111111111222222222
   012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678
00 --S-------------------------------------+--X+++++++++++++++----------------------------------------------------------------------
01 --S--------------------X+++++++++++++++------------------------------------------------------------------------------------------

Shmoo RD DQ NP
DQS :
B0 VDL=72 ok
B1 VDL=72 ok
   000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011111111111111111111111111111
   000000000011111111112222222222333333333344444444445555555555666666666677777777778888888888999999999900000000001111111111222222222
   012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678
00 ----------------------+++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++--------
01 ------------------------++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++---
02 ---------------------+++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++--------
03 -------------------++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++---------
04 --------------------+++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++---------
05 -------------------++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++---------
06 ------------------+++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++--------
07 -----------------++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++-----------
08 -----------------++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++-----------
09 ------------------++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++----------
10 ---------------------++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++-------
11 -----------------+++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++--------
12 --------------------++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++-----------
13 -----------------+++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++------------
14 ------------------+++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++-----------
15 --------------------+++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++---------

Shmoo RD DQ P
   000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011111111111111111111111111111
   000000000011111111112222222222333333333344444444445555555555666666666677777777778888888888999999999900000000001111111111222222222
   012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678
00 ----------------------+++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++--------
01 ------------------------++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++---
02 --------------------++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++-------
03 ------------------++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++---------
04 --------------------++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++--------
05 ------------------+++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++--------
06 ------------------+++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++--------
07 -----------------+++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++---------
08 ----------------+++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++----------
09 ------------------++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++----------
10 --------------------+++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++------
11 ------------------+++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++--------
12 -------------------++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++---------
13 ----------------++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++-----------
14 ------------------+++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++-----------
15 -------------------++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++---------

Shmoo RD DQ N
   000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011111111111111111111111111111
   000000000011111111112222222222333333333344444444445555555555666666666677777777778888888888999999999900000000001111111111222222222
   012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678
00 ------------------+++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++-------
01 ----------------------++++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++--
02 -----------------+++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++--------
03 ----------------+++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++---------
04 -------------------++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++---------
05 ----------------+++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++---------
06 --------------++++++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++++------
07 ----------------++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++-----------
08 ---------------++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++------------
09 ---------------+++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++----------
10 -------------------+++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++-------
11 ---------------++++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++++--------
12 -----------------++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++-----------
13 --------------+++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++-----------
14 ---------------+++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++----------
15 ----------------+++++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++++------

RD DQS adjustments :
BL0: Start: 0x72 Final: 0x72
BL1: Start: 0x72 Final: 0x72

Shmoo WR DQ
   000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011111111111111111111111111111
   000000000011111111112222222222333333333344444444445555555555666666666677777777778888888888999999999900000000001111111111222222222
   012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678
00 --------++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++--------------------
01 --------------++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++-------------
02 ----------++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++---------------------
03 ----------++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++---------------------
04 -------+++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++----------------------
05 ----+++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++---------------------
06 ----+++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++---------------------
07 ----+++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++-------------------------
08 -----+++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++--------------------
09 ------++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++---------------------
10 ------+++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++--------------------
11 ---+++++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++++------------------
12 -----+++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++--------------------
13 --++++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++----------------------
14 --++++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++----------------------
15 ------+++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++--------------------

Shmoo WR DM
WR DM
   000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011111111111111111111111111111
   000000000011111111112222222222333333333344444444445555555555666666666677777777778888888888999999999900000000001111111111222222222
   012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678
00 ------++++++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++++--------------
01 -+++++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++++--------------------
start of memsys_end
[0x80180004] = 0x8110071f
[0x80180010] = 0x00000009
end of memsys_end
DDR test done successfully
FPS0
----
PAR1
U999
COM1
UBI#
03E7
BT99
0008
----
PAR2
U999
COM1
UBI#
03E7
BT99
0976
----
TRY2
NAN3
UBI!
NAN5


Base: 5.2_07p1
CFE version 1.0.38-163.243 for BCM96856 (64bit,SP,LE)
Build Date: Fri Jan 15 09:27:52 CST 2021 (hook@BFWWH-Server)
Copyright (C) 2000-2015 Broadcom Corporation.

SEND
Boot Strap Register:  0x53008056
Chip ID: BCM68560_B1, Broadcom B53 Dual Core: 1500MHz
RDP: 1400MHz
Total Memory: 536870912 bytes (512MB)
NAND ECC BCH-4, page size 0x800 bytes, spare size used 64 bytes
NAND flash device: , id 0x0000f8da block 128KB size 262144KB
CPU1
############In board_device_init(...):Line 759, Before PON TX_PWR Enable GPIO_11=[0] ========
############In board_device_init(...):Line 762, After PON TX_PWR Enable GPIO_11=[0] ========
Dump Current setting of SWREGs
1.0D, reg=0x00, val=0xc690
1.0D, reg=0x01, val=0x0d06
1.0D, reg=0x02, val=0xcb12
1.0D, reg=0x03, val=0x5372
1.0D, reg=0x04, val=0x0000
1.0D, reg=0x05, val=0x0702
1.0D, reg=0x06, val=0xb000
1.0D, reg=0x07, val=0x0029
1.0D, reg=0x08, val=0x0c02
1.0D, reg=0x09, val=0x0071
1.8 , reg=0x00, val=0xc690
1.8 , reg=0x01, val=0x0d06
1.8 , reg=0x02, val=0xcb12
1.8 , reg=0x03, val=0x5370
1.8 , reg=0x04, val=0x0000
1.8 , reg=0x05, val=0x0702
1.8 , reg=0x06, val=0xb000
1.8 , reg=0x07, val=0x0029
1.8 , reg=0x08, val=0x0c02
1.8 , reg=0x09, val=0x0071
1.5 , reg=0x00, val=0xc690
1.5 , reg=0x01, val=0x0d06
1.5 , reg=0x02, val=0xcb12
1.5 , reg=0x03, val=0x5370
1.5 , reg=0x04, val=0x0000
1.5 , reg=0x05, val=0x0702
1.5 , reg=0x06, val=0xb000
1.5 , reg=0x07, val=0x0029
1.5 , reg=0x08, val=0x0c02
1.5 , reg=0x09, val=0x0071
1.0A, reg=0x00, val=0xc690
1.0A, reg=0x01, val=0x0d06
1.0A, reg=0x02, val=0xcb12
1.0A, reg=0x03, val=0x5370
1.0A, reg=0x04, val=0x0000
1.0A, reg=0x05, val=0x0702
1.0A, reg=0x06, val=0xb000
1.0A, reg=0x07, val=0x0029
1.0A, reg=0x08, val=0x0c02
1.0A, reg=0x09, val=0x0071
Take PMC out of reset
waiting for PMC finish booting
PMC rev: 3.1.9.427360 running
pmc_init:PMC using DQM mode
bcm63xx_run_ex: g_in_cfe = 0
Board IP address                  : 192.168.1.1:ffffff00
Host IP address                   : 192.168.1.100
Gateway IP address                :
Run from flash/host/tftp (f/h/c)  : f
Default host run file name        : vmlinux
Default host flash file name      : bcm963xx_fs_kernel
Boot delay (0-9 seconds)          : 1
Boot image (0=latest, 1=previous) : 0
Default host ramdisk file name    :
Default ramdisk store address     :
Default DTB file name             :
Board Id                          : WAG_8F2W6
Number of MAC Addresses (1-64)    : 11
Base MAC Address                  : 02:10:18:01:00:01
HWCFG                             : 0x1
SNOUI                             : 7777777777777777
PSI Size (1-128) KBytes           : 24
Enable Backup PSI [0|1]           : 0
System Log Size (0-256) KBytes    : 0
Auxillary File System Size Percent: 0
RNR_TBLS memory allocation (8-13) (MB) : 8
FPM_POOL memory allocation (MB)   : 16
DHD 0 memory allocation (MB)      : 14
DHD 1 memory allocation (MB)      : 0
DHD 2 memory allocation (MB)      : 0
WLan Feature                      : 0x00
Voice Board Configuration (0-32)  : LE9642_ZSI_BB
parameter = 0M
Partition 1 Size (MB)             : 0M
parameter = 0M
Partition 2 Size (MB)             : 0M
parameter = 0M
Partition 3 Size (MB)             : 0M
parameter = 12M
Partition 4 Size (MB) (Data)      : 12M

*** Press Esc key to stop auto run (1 seconds) ***
Auto run second count down: 1                                                                                                                                                                                                               1
Toggle reset of XRDP core...
Toggle reset of XRDP core...
Parse board Params Start
XRDP INIT start
XRDP INIT FPM Address 000000001e000000
ddr base address is 0x000000001e000000
data_path_init_basic: Restore HW configuration
access_log_restore: 10021 entries processed
data_path_init_basic: Restore HW configuration done. rc=0
XRDP INIT Done
MAC and PHY Init Start
CORE_SHD1C_09: 0x18 CORE_SHD1C_0D: 0xe0 CORE_SHD1C_0E: 0x3 CORE_EXP04: 0x0
CORE_SHD1C_09: 0x18 CORE_SHD1C_0D: 0xe0 CORE_SHD1C_0E: 0x3 CORE_EXP04: 0x0
CORE_SHD1C_09: 0x18 CORE_SHD1C_0D: 0xe0 CORE_SHD1C_0E: 0x3 CORE_EXP04: 0x0
CORE_SHD1C_09: 0x18 CORE_SHD1C_0D: 0xe0 CORE_SHD1C_0E: 0x3 CORE_EXP04: 0x0
internal_open: Done
Creating CPU ring for queue number 16 with 512 packets descriptor=0x000000000124b098, size_of_entry 8
Done initializing Ring 16 Base=0x0000002001253100 num of entries= 512 RDD Base=1253100 descriptor=0x000000000124b098
Creating CPU ring for queue number 0 with 1024 packets descriptor=0x000000000124a798, size_of_entry 16
Done initializing Ring 0 Base=0x000000200135ba40 num of entries= 1024 RDD Base=135ba40 descriptor=0x000000000124a798
CPU ring init Done
No active ports
pt_upg_upgrade start!
pt_upg_auto_upgrade start!
pt_upg_monitor_packet start!
Timeout or packet isn't legal. Do not enter multicast upgrade
auto upgrade failed.                                                                                                                                                                                                                        0
Booting from latest image (address 0x00100000, flash offset 0x00100000) ...
ubi_find_file: got vmlinux.lz  size 3045661
Decompression LZMA Image OK!
Entry at 0x0000000000080000
Starting program at 0x0000000000080000
cfe_fs_fetch_file: Error locating WAG_8F2W6.dtb image
ERROR: cfe_load_boot_file: Loading WAG_8F2W6.dtb failed rc -1
ubi_find_file: got 96856.dtb  size 4601
/memory = 0x20000000 bytes @ 0x0
rdp param1 value 0x2000000 in device tree larger than nvram value 0x1000000. Use device tree value!
Setting ROOTFS: root=
Appending CFE version to dtb, ret:0
Appending NVRAM to dtb, ret:0
Booting Linux on physical CPU 0x0
Linux version 4.1.52 (hook@BFWWH-Server) (gcc version 5.5.0 (Buildroot 2017.11.1) ) #1 SMP PREEMPT Fri Jan 15 09:28:37 CST 2021
CPU: AArch64 Processor [420f1000] revision 0
Detected VIPT I-cache on CPU0
alternatives: enabling workaround for ARM erratum 845719
PERCPU: Embedded 16 pages/cpu @ffffffc01ffd2000 s25112 r8192 d32232 u65536
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 115645
Kernel command line: root= coherent_pool=4M cpuidle_sysfs_switch pci=pcie_bus_safe
PID hash table entries: 2048 (order: 2, 16384 bytes)
Dentry cache hash table entries: 65536 (order: 7, 524288 bytes)
Inode-cache hash table entries: 32768 (order: 6, 262144 bytes)
Memory: 443272K/468992K available (4955K kernel code, 1844K rwdata, 1732K rodata, 228K init, 458K bss, 25720K reserved, 0K cma-reserved)
Virtual kernel memory layout:
    vmalloc : 0xffffff8000000000 - 0xffffffbdffff0000   (   247 GB)
    vmemmap : 0xffffffbe00000000 - 0xffffffbfc0000000   (     7 GB maximum)
              0xffffffbe00000000 - 0xffffffbe00700000   (     7 MB actual)
    fixed   : 0xffffffbffabfd000 - 0xffffffbffac00000   (    12 KB)
    PCI I/O : 0xffffffbffae00000 - 0xffffffbffbe00000   (    16 MB)
    modules : 0xffffffbffc000000 - 0xffffffc000000000   (    64 MB)
    memory  : 0xffffffc000000000 - 0xffffffc020000000   (   512 MB)
      .init : 0xffffffc000709000 - 0xffffffc000742000   (   228 KB)
      .text : 0xffffffc000080000 - 0xffffffc000708504   (  6690 KB)
      .data : 0xffffffc000744000 - 0xffffffc000911080   (  1845 KB)
Preemptible hierarchical RCU implementation.
        RCU restricting CPUs from NR_CPUS=4 to nr_cpu_ids=2.
RCU: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2
NR_IRQS:64 nr_irqs:64 0
Architected cp15 timer(s) running at 50.00MHz (phys).
clocksource arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0xb8812736b, max_idle_ns: 440795202655 ns
sched_clock: 56 bits at 50MHz, resolution 20ns, wraps every 4398046511100ns
BRCM Legacy Drivers' Helper, all legacy drivers' IO memories/interrupts should be remapped here
     Remapping interrupts...
             hwirq      virq
               50         5
               61         6
               64         7
               65         8
              125         9
               43        10
               44        11
               45        12
               46        13
              213        14
              214        15
              215        16
              216        17
              217        18
              218        19
              219        20
              220        21
               70        22
              116        23
              131        24
              130        25
              137        26
              138        27
              139        28
              160        29
              161        30
              162        31
              163        32
              164        33
              165        34
              166        35
              167        36
              168        37
              169        38
              170        39
              171        40
              172        41
              173        42
              174        43
              175        44
              176        45
              177        46
              178        47
              179        48
              180        49
              181        50
              182        51
              183        52
              184        53
              185        54
              186        55
              187        56
              188        57
              189        58
              190        59
              191        60
              192        61
              146        62
              153        63
              156        64
              157        65
              154        66
              155        67
     Remapping IO memories...
             phys              virt          size
       0000000080180000  ffffff8000040000  00024000
       00000000ffb00000  ffffff8000008000  00006000
       00000000ffb20000  ffffff8000002000  00001000
       0000000082000000  ffffff8000080000  01000000
       0000000083000000  ffffff8000010000  00001000
       00000000ff800000  ffffff8000014000  00003000
       00000000ff854000  ffffff8000012000  00001000
       00000000ff858000  ffffff8000018000  00004000
       00000000ffe00000  ffffff8001100000  00100000
       00000000ff860000  ffffff8000020000  00002000
       0000000083058600  ffffff800001e600  00000100
       0000000082db2000  ffffff8000024000  00001000
       0000000082db4000  ffffff8000030000  0000e000
       000000008000c000  ffffff8000028000  00003fff
       000000008300c000  ffffff8000026000  00001000
       0000000083028000  ffffff800002e000  00001000
       0000000083020000  ffffff8000066000  00001000
       0000000083038000  ffffff8000068000  00001000
       0000000083058000  ffffff800006a000  00001000
       0000000083064000  ffffff800006c000  00001000
       0000000083068000  ffffff800006e000  00001000
       0000000083080000  ffffff8000070000  00001000
       0000000083088000  ffffff8000072000  00001000
       00000000830a0000  ffffff8000074000  00001000
       00000000830a4000  ffffff8000076000  00001000
       00000000830ac000  ffffff8000078000  00001000
       00000000810a0000  ffffff800007a000  00001000
       0000000081060000  ffffff800007c000  00003000
console [ttyS0] enabled
Calibrating delay loop (skipped), value calculated using timer frequency.. 100.00 BogoMIPS (lpj=500000)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 1024 (order: 1, 8192 bytes)
Mountpoint-cache hash table entries: 1024 (order: 1, 8192 bytes)
--Kernel Config--
  SMP=1
  PREEMPT=1
  DEBUG_SPINLOCK=0
  DEBUG_MUTEXES=0
creating mapping for reserved memory phys 0x000000000e000000 virt 0xffffffc00e000000 size 0x02000000 for rdp1
creating mapping for reserved memory phys 0x000000000d800000 virt 0xffffffc00d800000 size 0x00800000 for rdp2
creating mapping for reserved memory phys 0x000000000ca00000 virt 0xffffffc00ca00000 size 0x00e00000 for dhd0
pmc_init:PMC using DQM mode
Successfully retrieved NVRAM data from dtb
cfe-v: 1.0.38-163.243
CPU1: Booted secondary processor
Detected VIPT I-cache on CPU1
Brought up 2 CPUs
SMP: Total of 2 processors activated.
CPU: All CPU(s) started at EL2
alternatives: patching kernel code
devtmpfs: initialized
clocksource jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
futex hash table entries: 512 (order: 3, 32768 bytes)
NET: Registered protocol family 16
cpuidle: using governor ladder
cpuidle: using governor menu
Toggle reset of XRDP core...
Toggle reset of XRDP core...
vdso: 2 pages (1 code @ ffffffc000749000, 1 data @ ffffffc000748000)
DMA: preallocated 4096 KiB pool for atomic allocations
Broadcom Logger v0.1
ACPI: Interpreter disabled.
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
bcmhs_spi bcmhs_spi.1: master is unqueued, this is deprecated
skb_free_task created successfully with start budget 256
BLOG v3.0 Initialized
BLOG Rule v1.0 Initialized
Broadcom IQoS v1.0 initialized
Switched to clocksource arch_sys_counter
pnp: PnP ACPI: disabled
NET: Registered protocol family 2
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 4, 65536 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
UDP hash table entries: 256 (order: 1, 8192 bytes)
UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
NET: Registered protocol family 1
squashfs: version 4.0 (2009/01/31) Phillip Lougher
ntfs: driver 2.1.32 [Flags: R/O].
jffs2: version 2.2. (NAND) (SUMMARY)  © 2001-2006 Red Hat, Inc.
fuse init (API version 7.23)
io scheduler noop registered (default)
brd: module loaded
loop: module loaded
nand: device found, Manufacturer ID: 0xf8, Chip ID: 0xda
nand: Unknown FMND2G08U3D
nand: 256 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
bcm63xx_nand ff801800.nand: Adjust timing_1 to 0x6532845b timing_2 to 0x00091e94
bcm63xx_nand ff801800.nand: detected 256MiB total, 128KiB blocks, 2KiB pages, 16B OOB, 8-bit, BCH-4
Bad block table found at page 131008, version 0x01
Bad block table found at page 130944, version 0x01
>>>>> For primary mtd partition rootfsA, cferam/vmlinux.lz UBI volume, vmlinux fs mounted as UBIFS <<<<<
Secondary mtd partition rootfsB detected as UBI for cferam/vmlinux source and UBIFS for vmlinux filesystem
Creating 6 MTD partitions on "brcmnand.0":
0x000000100000-0x000007a00000 : "rootfsA"
0x000007a00000-0x00000f300000 : "rootfsB"
0x00000f300000-0x00000ff00000 : "data"
0x000000000000-0x000000100000 : "nvram"
0x000000000000-0x000010000000 : "dummy1"
0x000000000000-0x000010000000 : "dummy2"
PPP generic driver version 2.4.2
PPP BSD Compression module registered
PPP Deflate Compression module registered
NET: Registered protocol family 24
i2c /dev entries driver
sdhci: Secure Digital Host Controller Interface driver
sdhci: Copyright(c) Pierre Ossman
sdhci-pltfm: SDHCI platform and OF driver helper
sdhci-bcm63xx ff858000.sdhci: No vmmc regulator found
sdhci-bcm63xx ff858000.sdhci: No vqmmc regulator found
mmc0: SDHCI controller on ff858000.sdhci [ff858000.sdhci] using ADMA
brcmboard registered
brcmboard: brcm_board_init entry
print_rst_status: Last RESET due to HW reset
print_rst_status: RESET reason: 0x00000000
   KERN_DEBUG (kInitNetlinkSocket:950) BTN sg_monitor_nl_pid: [0]****
   KERN_DEBUG (kInitNetlinkSocket:959) Leaving ****
DYING GASP IRQ Initialized and Enabled
map_hw_timer_interrupt,130: interrupt_id 10
map_hw_timer_interrupt,130: interrupt_id 11
map_hw_timer_interrupt,130: interrupt_id 12
map_hw_timer_interrupt,130: interrupt_id 13
Serial: BCM63XX driver $Revision: 3.00 $
Magic SysRq with Auxilliary trigger char enabled (type ^ h for list of supported commands)
ttyS0 at MMIO 0xff800640 (irq = 7, base_baud = 921600) is a BCM63XX
ttyS1 at MMIO 0xff800660 (irq = 8, base_baud = 921600) is a BCM63XX
i2c-bcm63000 ff802100.i2c: Broadcom BCM96xxx I2C driver
bcm_i2c: i2c bus 0 mod_abs_gpio 23 value low, but found SFP on i2c bus!
bcm_i2c: bus 0: module inserted

Optical detection module loaded.
init netlink module
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (3463 buckets, 13852 max)
ctnetlink v0.93: registering with nfnetlink.
xt_time: kernel timezone is -0000
ip_tables: (C) 2000-2006 Netfilter Core Team
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
sit: IPv6 over IPv4 tunneling driver
ip6_gre: GRE over IPv6 tunneling driver
NET: Registered protocol family 17
start br control device register
br control device register ok
bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
Ebtables v2.0 registered
ebt_time registered
ebt_blog registered
ebt_ftos registered
ebt_wmm_mark registered
ebt_qos_map registered
ebt_qos_map registered
8021q: 802.1Q VLAN Support v1.8
ubi0: attaching mtd0
ubi0: scanning is finished
ubi0: attached mtd0 (name "rootfsA", size 121 MiB)
ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubi0: good PEBs: 968, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 4, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 990392953
bcm_i2c: sfp i2c device found registered for bus 0 address 0xa0
ubi0: available PEBs: 10, total reserved PEBs: 958, PEBs reserved for bad PEB handling: 48
bcm_i2c: sfp i2c device found registered for bus 0 address 0xa2
Opticaldet: optical module detected on i2c bus 0:
ubi0: background thread "ubi_bgt0d" started, PID 333
ubi1: attaching mtd1
Opticaldet Unknown Transceiver
Module Form Factor: SFF
Module Type       : xPON
Vendor Name       : BFW-Solutions
Part Number       : BNB2F-HAI-GS
Part REV          : 2.1
************************************************************************
* Opticaldet: Unknown optical module - using default configuration     *
* Please make sure the optical module is correct for your connection   *
************************************************************************
ubi1: scanning is finished
ubi1: attached mtd1 (name "rootfsB", size 121 MiB)
ubi1: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi1: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
ubi1: VID header offset: 2048 (aligned 2048), data offset: 4096
ubi1: good PEBs: 968, bad PEBs: 0, corrupted PEBs: 0
ubi1: user volume: 4, internal volumes: 1, max. volumes count: 128
ubi1: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 990392953
ubi1: available PEBs: 10, total reserved PEBs: 958, PEBs reserved for bad PEB handling: 48
ubi1: background thread "ubi_bgt1d" started, PID 365
block ubiblock0_0: created from ubi0:0(rootfs_ubifs)
UBIFS (ubi0:0): UBIFS: mounted UBI device 0, volume 0, name "rootfs_ubifs", R/O mode
UBIFS (ubi0:0): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
UBIFS (ubi0:0): FS size: 105263104 bytes (100 MiB, 829 LEBs), journal size 9023488 bytes (8 MiB, 72 LEBs)
UBIFS (ubi0:0): reserved for root: 0 bytes (0 KiB)
UBIFS (ubi0:0): media format: w4/r0 (latest is w4/r0), UUID 84486235-2531-4A26-8988-C4FE58CDC0B6, small LPT model
VFS: Mounted root (ubifs filesystem) readonly on device 0:12.
devtmpfs: mounted
Freeing unused kernel memory: 228K
Mounting filesystems...
>>>>> Starting udev <<<<<
Pre_initialization script
Populating /dev using udev: done
>>>>> Creating static device nodes <<<<<
>>>>> Mounting /data partition <<<<<
udevd (415): /proc/415/oom_adj is deprecated, please use /proc/415/oom_score_adj instead.
ubi2: attaching mtd2
ubi2: scanning is finished
ubi2: attached mtd2 (name "data", size 12 MiB)
ubi2: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi2: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
ubi2: VID header offset: 2048 (aligned 2048), data offset: 4096
ubi2: good PEBs: 96, bad PEBs: 0, corrupted PEBs: 0
ubi2: user volume: 2, internal volumes: 1, max. volumes count: 128
ubi2: max/mean erase counter: 235/155, WL threshold: 4096, image sequence number: 3282630136
ubi2: available PEBs: 7, total reserved PEBs: 89, PEBs reserved for bad PEB handling: 5
ubi2: background thread "ubi_bgt2d" started, PID 471
>>>>> Mounting data partition as UBIFS <<<<<
UBIFS (ubi2:0): background thread "ubifs_bgt2_0" started, PID 491
UBIFS (ubi2:0): recovery needed
UBIFS (ubi2:0): recovery completed
UBIFS (ubi2:0): UBIFS: mounted UBI device 2, volume 0, name "data"
UBIFS (ubi2:0): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
UBIFS (ubi2:0): FS size: 4825088 bytes (4 MiB, 38 LEBs), journal size 1015809 bytes (0 MiB, 6 LEBs)
UBIFS (ubi2:0): reserved for root: 227900 bytes (222 KiB)
UBIFS (ubi2:0): media format: w4/r0 (latest is w4/r0), UUID 57249F24-DF4D-445F-9ED2-642B38BA8C3D, small LPT model
UBIFS (ubi2:1): UBIFS: mounted UBI device 2, volume 1, name "factory", R/O mode
UBIFS (ubi2:1): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
UBIFS (ubi2:1): FS size: 2793472 bytes (2 MiB, 22 LEBs), journal size 1015809 bytes (0 MiB, 6 LEBs)
UBIFS (ubi2:1): reserved for root: 131942 bytes (128 KiB)
UBIFS (ubi2:1): media format: w4/r0 (latest is w4/r0), UUID 93B50E7D-EA2B-4FD0-ABCB-195EC2FBBC67, small LPT model
/ptconf is not empty
Configuring system...
Configuring networking...
Enabling IPv6 Forwarding...
Saving kernel bootup messages for dumpsysinfo...
pt_peripheral: loading out-of-tree module taints kernel.
ptdrv gpio init
wlan led timer init
led init
button timer init
pt button setup
ptdrv nvram init

NO_WL_ADAPTER !!!!!
ptdrv_hwcfg_get:hwcfg = 1
bcmlibs: module license 'Proprietary' taints kernel.
Disabling lock debugging due to kernel taint
BCMLIBS loaded...
Broadcom Ingress QoS Module  Char Driver v1.0 Registered<303>

Broadcom Ingress QoS v1.0 initialized
RDPA_MW: scratchpad get_or_init: RdpaWanType - GPON
RDPA_MW: scratchpad get_or_init: GbeWanEMac - NONE
fpm base =0xffffffc00e000000 fpm poolsize 33554432, MTU: 1536, token: 512 rnr_tables=0xffffffc00d800000 size=8388608
INFO: _data_path_init#2332: Start.
INFO: _data_path_init#2342: Driver init.
FPM driver: base 0xffffffc00e000000; buffer size 512
DB-Idx = 3 mem_avail = 6607104 total_mem_reqd = 5899968Creating CPU ring for queue number 17 with 16384 packets descriptor=0xffffffbffc59c200, size_of_entry 8
Done initializing Ring 17 Base=0xffffffc01b840000 num of entries= 16384 RDD Base=1b840000 descri
                                                                                                dhd_prot_ioctl: status ret value is -20
dhd_hwa_event: Dongle(wl0) schedule hwa event
dhd_hwa_event_handler: Dongle(wl0) hwa event scheduled
Info: wps_pbcd wps_pbcd_is_wps_possible_on_interface wps is not enabled for wl0.4
Info: wps_pbcd wps_pbcd_fill_info_objects_list get radio unit failed for eth0
Info: wps_pbcd wps_pbcd_fill_info_objects_list get radio unit failed for eth1
Info: wps_pbcd wps_pbcd_fill_info_objects_list get radio unit failed for eth2
Info: wps_pbcd wps_pbcd_fill_info_objects_list get radio unit failed for eth3
Info: wps_pbcd wps_pbcd_fill_info_objects_list get radio unit failed for eth4
Info: wps_pbcd wps_pbcd_is_wps_possible_on_interface wps is not enabled for wl0.4

Login: admin
Password:
Error!
Login: root
Password:
Error!
Login: admin
Password:
Error!

process '/sbin/getty -L ttyS0 0 vt100 ' (pid 746) exited. Scheduling for restart.

Login:

Login ไม่ได้เนื่องจากไม่รู้ Username/Password


 Bootloader

BTRM
V1.0
R1.0
L1CD
MMUI
MMU9
DATA
ZBBS
MAIN
OTP?
OTPP
USBT
NAND
IMG?
IMGL
UHD?
UHDP
RLO?
RLOP
UBI?
UBIP
PASS
----
HELO
5.0207p1-1.0.38-163.243
CPU0
L1CD
MMUI
MMUC
ZBBS
MAIN
SEND
Boot Strap Register:  0x53008056
NVRAM memcfg 0x1427
MCB chksum 0x722c322d, config 0x1427

MemsysInit hpg0_generic_aarch64 3.5.1.1 20171009
DDR3
8262CB58 80180000 801A0000 00000000 00000000 0020476E
MCB rev=0x00000501 Ref ID=0x0476E Sub Bld=0x002
Dram Timing 11-11-11

start of memsys_begin
mc_cfg_init(): Initialize the default values on mc_cfg
init_memc_dram_profile(): Initializing MEMC DRAM profile
---------------------------------------------------------------
MEMC DRAM profile (memc_dram_profile_struct) values:
  dram_type    = DDR3
====================================================
PART values:
  part_speed_grade    = 1600 CL11
  part_size_Mbits     = 4096 (DRAM size in MegaBits)
  part_row_bits       = 15 (number of row bits)
  part_col_bits       = 10 (number of column bits)
  part_ba_bits        = 3 (number of bank bits)
  part_width_bits     = 16 (DRAM width in bits)
NUMER OF PARTS:
  part_num            = 1 (Number of parts)
TOTAL values:
  total_size_Mbits    = 4096 (DRAM size in MegaBits)
  total_cs_bits       = 0 (number of cs bits, for dual_rank mode)
  total_width_bits    = 16 (DRAM width in bits)
  total_burst_bytes   = 16 (Number of bytes per DRAM access)
  total_max_byte_addr = 0x1fffffff (Maximum/last DRAM byte address)
                        (Number of bits in total_max_byte_addr is 29)
                        (i.e. total_max_byte_addr goes from bit 0 to bit 28)
  ddr_2T_mode         = 0
  ddr_hdp_mode        = 1
  large_page          = 1
  ddr_dual_rank       = 0
  cs_mode             = 0
MEMC timing (memc_dram_timing_cfg_struct) values:
====================================================
  MC_CHN_TIM_TIM1_0 register fields:
    tCwl   = 8
    tRP    = 11
    tCL    = 11
    tRCD   = 11
  MC_CHN_TIM_TIM1_1 register fields:
    tCCD_L = 4
    tCCD   = 4
    tRRD_L = 6
    tRRD   = 6
  MC_CHN_TIM_TIM1_2 register fields:
    tFAW   = 32
    tRTP   = 6
    tRCr   = 39
  MC_CHN_TIM_TIM1_3 register fields:
    tWTR_L = 6
    tWTR   = 6
    tWR_L  = 12
    tWR    = 12
  MC_CHN_TIM_TIM2 register fields:
    tR2R   = 0
    tR2W   = 2
    tW2R   = 2
    tW2W   = 0
    tAL    = 0
    tRFC   = 208
====================================================
%1 SSC enabled

Poll PHY Status register
PHY Status= 1
Disable Auto-Refresh
[0x80180200] = 0x00000305
End of memsys_begin
Add/Ctl Alignment
Coarse Adj=0x087 deg, cmd steps=0x0E2
reg 0x801A0090 set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A0094 set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A0098 set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A009C set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A00A0 set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A00A4 set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A00A8 set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A00AC set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A00B0 set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A00B4 set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A00B8 set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A00BC set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A00C0 set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A00C4 set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A00C8 set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A00CC set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A00D0 set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A00D4 set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A00D8 set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A00DC set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A00E0 set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A00E4 set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A00E8 set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A00EC set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A00F0 set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A00F4 set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A00F8 set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A00FC set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A0100 set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A0108 set to VDL 0x056 with Fine Adj=0x01 deg
reg 0x801A010C set to VDL 0x056 with Fine Adj=0x01 deg
HP RX TRIM
itrim = 0x0
lstrim = 0x9

ZQ Cal HP PHY
 R in Ohm
 P: Finger=0x318 Term=0x71 Drv=0x28
 N: Finger=0x300 Term=0x80 Drv=0x28

PLL Ref(Hz)=0x02FAF080 UI STEPS=0x071
 DDR CLK(MHz)=0x31B WL CLK dly(ps)=0x0C8 bitT(ps)=0x274 VDLsize(fs)=0x15B5 CLK_VDL=0x024
start of memc_init
[0x80180004] = 0x0110061f
[0x80180234] = 0x00001101
Enable Auto-Refresh
[0x80180110] = 0x11100f0e
[0x80180114] = 0x15141312
[0x80180118] = 0x19181716
[0x8018011c] = 0x001c1b1a
[0x80180124] = 0x04000000
[0x80180128] = 0x08070605
[0x8018012c] = 0x00000a09
[0x80180134] = 0x000d0c0b
 Writing to MC_CHN_CFG_CNFG reg; data=0x00000000
[0x80180100] = 0x00000000
cfg_memc_timing_ctrl() Called
[0x80180214] = 0x080b0b0b
[0x80180218] = 0x04040606
[0x8018021c] = 0x20000627
[0x80180220] = 0x06060c0c
[0x80180224] = 0x120000d0
End of memc_init
start of pre_shmoo
[0x80180004] = 0xc110071f
end of pre_shmoo

SHMOO 28nm
801A0000 80180800 00000000 00020000 00000000

Shmoo WL

One UI Steps : 0x80

auto-clk result = 00B (filter=0C steps)
initial CLK shift = 024
final CLK shift   = 00B

   00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001111111111111111111111111111
   00000000001111111111222222222233333333334444444444555555555566666666667777777777888888888899999999990000000000111111111122222222
   01234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567
00 S---------------X---------------------------------------------------------------------------------------------------------------
01 S---------------------X---------------------------------------------------------------------------------------------------------

Shmoo RD En
FORCED WR ODT = 0x00001800
 DQSN DRIVE PAD CONTROL (from) (to)
 B0 00039A93 00079A93
 B1 00039A93 00079A93
B0 RISE UI=1 VDL=28 PICK UI=2 VDL=28
B1 RISE UI=1 VDL=17 PICK UI=2 VDL=17
   00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001111111111111111111111111111
   00000000001111111111222222222233333333334444444444555555555566666666667777777777888888888899999999990000000000111111111122222222
   01234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567
00 --S------------------------------------+X+++++++++++++++------------------------------------------------------------------------
01 --S--------------------X+++++++++++++++-----------------------------------------------------------------------------------------

Shmoo RD DQ NP
DQS :
B0 VDL=71 ok
B1 VDL=71 ok
   00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001111111111111111111111111111
   00000000001111111111222222222233333333334444444444555555555566666666667777777777888888888899999999990000000000111111111122222222
   01234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567
00 --------------------+++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++---------
01 -----------------------++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++----
02 ------------------++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++--------
03 ------------------+++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++----------
04 -------------------+++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++----------
05 -----------------++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++----------
06 ---------------+++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++---------
07 ----------------+++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++------------
08 ----------------+++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++------------
09 -----------------++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++----------
10 -------------------++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++--------
11 ----------------+++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++--------
12 -----------------+++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++------------
13 --------------++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++------------
14 ----------------+++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++------------
15 -----------------+-+++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++----------

Shmoo RD DQ P
   00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001111111111111111111111111111
   00000000001111111111222222222233333333334444444444555555555566666666667777777777888888888899999999990000000000111111111122222222
   01234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567
00 -------------------+++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++---------
01 -----------------------++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++----
02 ------------------++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++--------
03 -----------------++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++----------
04 ------------------++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++---------
05 ---------------+++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++---------
06 ----------------+++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++---------
07 ---------------+++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++----------
08 ---------------+++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++----------
09 ----------------++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++----------
10 -------------------+++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++------
11 ----------------+++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++--------
12 ----------------++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++----------
13 --------------++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++------------
14 ----------------+++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++------------
15 -----------------++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++----------

Shmoo RD DQ N
   00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001111111111111111111111111111
   00000000001111111111222222222233333333334444444444555555555566666666667777777777888888888899999999990000000000111111111122222222
   01234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567
00 ------------------+++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++-------
01 ---------------------+++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++---
02 -----------------+++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++--------
03 -----------------++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++----------
04 ------------------+++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++----------
05 ----------------++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++----------
06 --------------+++++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++++-------
07 ----------------+++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++------------
08 ---------------++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++------------
09 ---------------+++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++----------
10 ------------------++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++--------
11 --------------++++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++---------
12 -----------------+++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++------------
13 -------------+++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++-----------
14 ----------------++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++-----------
15 ---------------+++++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++++------

RD DQS adjustments :
BL0: Start: 0x71 Final: 0x71
BL1: Start: 0x71 Final: 0x71

Shmoo WR DQ
   00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001111111111111111111111111111
   00000000001111111111222222222233333333334444444444555555555566666666667777777777888888888899999999990000000000111111111122222222
   01234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567
00 --------++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++-------------------
01 --------------++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++-------------
02 ----------++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++--------------------
03 ---------+++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++--------------------
04 -------+++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++---------------------
05 ----+++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++--------------------
06 ----+++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++---------------------
07 -----++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++-------------------------
08 -----+++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++--------------------
09 ------++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++--------------------
10 ------++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++--------------------
11 ---+++++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++++------------------
12 -----+++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++-------------------
13 -++++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++++---------------------
14 --++++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++---------------------
15 ------++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++--------------------

Shmoo WR DM
WR DM
   00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001111111111111111111111111111
   00000000001111111111222222222233333333334444444444555555555566666666667777777777888888888899999999990000000000111111111122222222
   01234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567
00 ------+++++++++++++++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++++++++++++++++--------------
01 -+++++++++++++++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++++++++++++++--------------------
start of memsys_end
[0x80180004] = 0x8110071f
[0x80180010] = 0x00000009
end of memsys_end
DDR test done successfully
FPS0
----
PAR1
U999
COM1
UBI#
03E7
BT99
0008
----
PAR2
U999
COM1
UBI#
03E7
BT99
0976
----
TRY2
NAN3
UBI!
NAN5


Base: 5.2_07p1
CFE version 1.0.38-163.243 for BCM96856 (64bit,SP,LE)
Build Date: Fri Jan 15 09:27:52 CST 2021 (hook@BFWWH-Server)
Copyright (C) 2000-2015 Broadcom Corporation.

SEND
Boot Strap Register:  0x53008056
Chip ID: BCM68560_B1, Broadcom B53 Dual Core: 1500MHz
RDP: 1400MHz
Total Memory: 536870912 bytes (512MB)
NAND ECC BCH-4, page size 0x800 bytes, spare size used 64 bytes
NAND flash device: , id 0x0000f8da block 128KB size 262144KB
CPU1
############In board_device_init(...):Line 759, Before PON TX_PWR Enable GPIO_11=[0] ========
############In board_device_init(...):Line 762, After PON TX_PWR Enable GPIO_11=[0] ========
Dump Current setting of SWREGs
1.0D, reg=0x00, val=0xc690
1.0D, reg=0x01, val=0x0d06
1.0D, reg=0x02, val=0xcb12
1.0D, reg=0x03, val=0x5372
1.0D, reg=0x04, val=0x0000
1.0D, reg=0x05, val=0x0702
1.0D, reg=0x06, val=0xb000
1.0D, reg=0x07, val=0x0029
1.0D, reg=0x08, val=0x0c02
1.0D, reg=0x09, val=0x0071
1.8 , reg=0x00, val=0xc690
1.8 , reg=0x01, val=0x0d06
1.8 , reg=0x02, val=0xcb12
1.8 , reg=0x03, val=0x5370
1.8 , reg=0x04, val=0x0000
1.8 , reg=0x05, val=0x0702
1.8 , reg=0x06, val=0xb000
1.8 , reg=0x07, val=0x0029
1.8 , reg=0x08, val=0x0c02
1.8 , reg=0x09, val=0x0071
1.5 , reg=0x00, val=0xc690
1.5 , reg=0x01, val=0x0d06
1.5 , reg=0x02, val=0xcb12
1.5 , reg=0x03, val=0x5370
1.5 , reg=0x04, val=0x0000
1.5 , reg=0x05, val=0x0702
1.5 , reg=0x06, val=0xb000
1.5 , reg=0x07, val=0x0029
1.5 , reg=0x08, val=0x0c02
1.5 , reg=0x09, val=0x0071
1.0A, reg=0x00, val=0xc690
1.0A, reg=0x01, val=0x0d06
1.0A, reg=0x02, val=0xcb12
1.0A, reg=0x03, val=0x5370
1.0A, reg=0x04, val=0x0000
1.0A, reg=0x05, val=0x0702
1.0A, reg=0x06, val=0xb000
1.0A, reg=0x07, val=0x0029
1.0A, reg=0x08, val=0x0c02
1.0A, reg=0x09, val=0x0071
Take PMC out of reset
waiting for PMC finish booting
PMC rev: 3.1.9.427360 running
pmc_init:PMC using DQM mode
bcm63xx_run_ex: g_in_cfe = 0
Board IP address                  : 192.168.1.1:ffffff00
Host IP address                   : 192.168.1.100
Gateway IP address                :
Run from flash/host/tftp (f/h/c)  : f
Default host run file name        : vmlinux
Default host flash file name      : bcm963xx_fs_kernel
Boot delay (0-9 seconds)          : 1
Boot image (0=latest, 1=previous) : 0
Default host ramdisk file name    :
Default ramdisk store address     :
Default DTB file name             :
Board Id                          : WAG_8F2W6
Number of MAC Addresses (1-64)    : 11
Base MAC Address                  : 02:10:18:01:00:01
HWCFG                             : 0x1
SNOUI                             : 7777777777777777
PSI Size (1-128) KBytes           : 24
Enable Backup PSI [0|1]           : 0
System Log Size (0-256) KBytes    : 0
Auxillary File System Size Percent: 0
RNR_TBLS memory allocation (8-13) (MB) : 8
FPM_POOL memory allocation (MB)   : 16
DHD 0 memory allocation (MB)      : 14
DHD 1 memory allocation (MB)      : 0
DHD 2 memory allocation (MB)      : 0
WLan Feature                      : 0x00
Voice Board Configuration (0-32)  : LE9642_ZSI_BB
parameter = 0M
Partition 1 Size (MB)             : 0M
parameter = 0M
Partition 2 Size (MB)             : 0M
parameter = 0M
Partition 3 Size (MB)             : 0M
parameter = 12M
Partition 4 Size (MB) (Data)      : 12M

*** Press Esc key to stop auto run (1 seconds) ***
Auto run second count down: 1                                                                                                                                                                                                               1
Toggle reset of XRDP core...
Toggle reset of XRDP core...
Parse board Params Start
XRDP INIT start
XRDP INIT FPM Address 000000001e000000
ddr base address is 0x000000001e000000
data_path_init_basic: Restore HW configuration
access_log_restore: 10021 entries processed
data_path_init_basic: Restore HW configuration done. rc=0
XRDP INIT Done
MAC and PHY Init Start
CORE_SHD1C_09: 0x18 CORE_SHD1C_0D: 0xe0 CORE_SHD1C_0E: 0x3 CORE_EXP04: 0x0
CORE_SHD1C_09: 0x18 CORE_SHD1C_0D: 0xe0 CORE_SHD1C_0E: 0x3 CORE_EXP04: 0x0
CORE_SHD1C_09: 0x18 CORE_SHD1C_0D: 0xe0 CORE_SHD1C_0E: 0x3 CORE_EXP04: 0x0
CORE_SHD1C_09: 0x18 CORE_SHD1C_0D: 0xe0 CORE_SHD1C_0E: 0x3 CORE_EXP04: 0x0
internal_open: Done
Creating CPU ring for queue number 16 with 512 packets descriptor=0x000000000124b098, size_of_entry 8
Done initializing Ring 16 Base=0x00000020012547c0 num of entries= 512 RDD Base=12547c0 descriptor=0x000000000124b098
Creating CPU ring for queue number 0 with 1024 packets descriptor=0x000000000124a798, size_of_entry 16
Done initializing Ring 0 Base=0x000000200135d100 num of entries= 1024 RDD Base=135d100 descriptor=0x000000000124a798
CPU ring init Done
No active ports
web info: Waiting for connection on socket 0.
CFE> help
Available commands:

otpcfg              Reading/fusing potp/sotp bits
unimac_stats        Show UNIMAC port statistics
set_dump            Dump all recieved packets on active port
net_stats           Get network ports status
vrpd                View Ring packet descriptor
sar                 Show available Runner to CPU rings
erase_misc_parti    Erase misc partition
x                   Change extra partitions size
find                Find string in NAND
comp                Compare NAND blocks
bb                  Find NAND flipped bits by comparing a read with and without ECC
fb                  Find NAND bad blocks
rn                  Read NAND contents along with spare area with ECC off
dn                  Dump NAND contents along with spare area
phy                 Set memory or registers.
meminfo             Display CFE System Memory
kernp               Updates extra bootloader parameter for kernel. To end input enter // consecutively at any time then press <enter>
sm                  Set memory or registers.
swrp                Enumerate  power supplies
swrd                Dump SWREG
swrw                Write SWREG
swrr                Read SWREG
db                  Dump bytes.
dh                  Dump half-words.
dw                  Dump words.
ddw                 Dump dwords.
w                   Write the whole image start from beginning of the flash
e                   Erase NAND flash
wp                  Write pmc (previously loaded through JTAG to flash block 0.
ws                  Write whole image (priviously loaded by kermit or JTAG) to flash .
ba                  set linux kernel boot argument
ldt                 load device tree blob from tftp server.
go                  goto and execute from specefic address.
loadb               load binary via network or kermit protocol.
enable_timeout      enable console timeout.
disable_timeout     disable console timeout.
r                   Run program from flash image or from host depending on [f/h/c] flags
p                   Print boot line and board parameter info
c                   Change booline parameters
i                   Erase persistent storage data
ddr                 Change board DDR config
a                   Change board AFE ID
b                   Change board parameters
reset               Reset the board
pmdio               Pseudo MDIO access for external switches.
spi                 Legacy SPI access of external switch.
pmclog              pmclog
pmc                 pmc cmd
closeavs            pmc close avs cmd
force               override chipid check for images.
upg                 access multicast upgrade
help                Obtain help for CFE commands

For more information about a command, enter 'help command-name'
*** command status = 0
CFE> p
Board IP address                  : 192.168.1.1:ffffff00
Host IP address                   : 192.168.1.100
Gateway IP address                :
Run from flash/host/tftp (f/h/c)  : f
Default host run file name        : vmlinux
Default host flash file name      : bcm963xx_fs_kernel
Boot delay (0-9 seconds)          : 1
Boot image (0=latest, 1=previous) : 0
Default host ramdisk file name    :
Default ramdisk store address     :
Default DTB file name             :
Board Id                          : WAG_8F2W6
Number of MAC Addresses (1-64)    : 11
Base MAC Address                  : 02:10:18:01:00:01
HWCFG                             : 0x1
SNOUI                             : 7777777777777777
PSI Size (1-128) KBytes           : 24
Enable Backup PSI [0|1]           : 0
System Log Size (0-256) KBytes    : 0
Auxillary File System Size Percent: 0
RNR_TBLS memory allocation (8-13) (MB) : 8
FPM_POOL memory allocation (MB)   : 16
DHD 0 memory allocation (MB)      : 14
DHD 1 memory allocation (MB)      : 0
DHD 2 memory allocation (MB)      : 0
WLan Feature                      : 0x00
Voice Board Configuration (0-32)  : LE9642_ZSI_BB
parameter = 0M
Partition 1 Size (MB)             : 0M
parameter = 0M
Partition 2 Size (MB)             : 0M
parameter = 0M
Partition 3 Size (MB)             : 0M
parameter = 12M
Partition 4 Size (MB) (Data)      : 12M

*** command status = 0

2 ความคิดเห็น: