Blitzz BWA711 v1 (??)

From WikiDevi.Wi-Cat.RU
Jump to navigation Jump to search

Blitzz BWA711 v1 (??)

Manuf (OEM/ODM): XAVi

FCC approval date: 26 November 2003
Country of manuf.: China

Type: wireless router

FCC ID: JCK-GN-WIAG

Power: ? VDC, ? A
Connector type: barrel

CPU1: Brecis MSP2006 (167 MHz)
FLA1: 2 MiB2,097,152 B <br />16,384 Kib <br />2,048 KiB <br />16 Mib <br />0.00195 GiB <br /> (Macronix MX29LV160ABTC-90)
RAM1: 16 MiB16,777,216 B <br />131,072 Kib <br />16,384 KiB <br />128 Mib <br />0.0156 GiB <br /> (Hynix HY57V641620HG × 2)

Expansion IFs: none specified
Serial: yes, internal, 4-pin header, populated, (57600,8,N,1), P1

WI1 module: Gigabyte GN-WIAG
WI1 module IF: Mini PCI
WI1 chip1: Atheros AR5213A
WI1 chip2: Atheros AR2112A
WI1 802dot11 protocols: bg
WI1 antenna connector: U.FL

ETH chip1: Brecis MSP2006
LAN speed: 100M
LAN ports: 4
WAN speed: 100M
WAN ports: 1

bg

Additional chips
2.4GHz Power Amplifier IC;Microsemi;LX5510;MSC, 5510, 404V;1;

Stock bootloader: PMON 6.8.631

Stock FW OS: μClinux 2.4.20-br251

Default SSID: BWA711
Default IP address: 192.168.1.1
the IP 192.168.1.1 is used by 1304 additional devices
of which 1 are Blitzz devices
Default login user: admin
Default login password: admin
admin:admin credentials used by 1324 additional devices
of which 1 are Blitzz devices

802dot11 OUI: 00:0F:EA (1 E, 1 W)
Ethernet OUI: 00:01:38 (6 E, 6 W)

 FCC ID
Gigabyte GN-B49GJCK-GN-WIAG
Gigabyte GN-WIAGJCK-GN-WIAG

For a list of all currently documented Atheros (QCA) chipsets with specifications, see Atheros.
For a list of all currently documented Brecis SoC's with specifications, see Brecis.


'''Super G Wireless 108Mbps Wireless G 4-Port Router

"BWA711 Wireless Gateway Rev:1.0 31222" is silkscreened on a production model board.

"GC-WIAG-1.01" is silkscreened on the back of the wireless module. There is also a MAC label w/ a 00:0F:EA (Gigabyte) OUI affixed to it.
The module is using a Microsemi Corpration LX5510 InGaP HBT 2.4-2.5GHz Power Amplifier (marked "MSC", "5510", "404V").

The board populating this entry is using all TAICON capacitors.

Serial

Pinout

Info derived from

 • boot log

00111002

Copyright (c) 2003 Xavi Corporation
Switch chip detected : 1010
Chip select 0, Flash chip MXIC CFI-160 bottom, address 0xbfc00000, size 2MBytes
flash not detected in chip select 1
CPU type BRECIS 1000. CPU clock frequency 167 MHz.
Avail RAM 16025 KBytes.

PMON version 6.8.631 [EB], Tue Feb  3 17:27:32 CST 2004

IP Address : 192.168.1.1
MAC Address : 00:01:38:37:36:16
*** Press ^C to abort auto run (3 seconds) ***
Auto run second count down: 0
found image at 0xbfc20000, length 0x1b348d
Inflating image at bfc20000 to 80100000
block 69
Total blocks 69
original crc 0x850d0451 and length 0x306800
UART clock set to 1843200

LINUX started...
Set PCI Clock
Clock rate set to 166666667
CPU revision is: 0001830a
Primary instruction cache 16kb, linesize 16 bytes (4 ways)
Primary data cache 16kb, linesize 16 bytes (4 ways)



Linux version 2.4.20-br251 (mel@V_Server1) (gcc version 3.2 20030120 (uClinux 2.4.19-br20 BRECIS Release 2.0)) #3 Fri Jul 30 17:40:15 CST 2004
Determined physical RAM map:
 memory: 00001000 @ 00000000 (reserved)
 memory: 000ff000 @ 00001000 (ROM data)
 memory: 00338000 @ 00100000 (reserved)
 memory: 00bae700 @ 00438000 (usable)
On node 0 totalpages: 4070
zone(0): 4070 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: ip=::::XGATE:eth0:none:100fs console=ttyS0,57600
calculating r4koff... 000cb735(833333)
CPU frequency 166.66 MHz
Calibrating delay loop... 166.29 BogoMIPS
Memory: 11776k/11960k available (1571k kernel code, 184k reserved, 71k data, 84k init)
Dentry cache hash table entries: 2048 (order: 2, 16384 bytes)
Inode cache hash table entries: 1024 (order: 1, 8192 bytes)
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer-cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 4096 (order: 2, 16384 bytes)
POSIX conformance testing by UNIFIX
pcibios_init: assign resources, Autoconfig PCI channel 0x802b34c8
Scanning bus 00, I/O 0x00000004:0x00001000, Mem 0xb9002000:0xbc000000
00:0e.0 Class 0200: 168c:0013 (rev 01)
        Mem at 0xb9010000 [size=0x10000]
scan the buses.
Scanning bus 00
Found 00:70 [168c/0013] 000200 00
Fixups for bus 00
Bus scan for 00 returning with max=00
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
Initializing RT netlink socket
Serial driver version 5.05c (2001-07-08) with MANY_PORTS SHARE_IRQ SERIAL_PCI enabled
ttyS00 at 0xbc000100 (irq = 19) is a 16550A
ttyS01 at 0xb8400030 (irq = 13) is a 16550A
brecisboard: brecis_board_init entry
brecismspeth.c:v1.97, Sep 8, 2003 BRECIS Communications, Corp., www.brecis.com
ethaddr1 not set in boot prom
 No Mac addr specified for eth1 ethaddr1
ethaddr1 not set in boot prom
 No Mac addr specified for eth1 ethaddr1
Blkmem copyright 1998,1999 D. Jeff Dionne
Blkmem copyright 1998 Kenneth Albanowski
Blkmem 1 disk images:
0: 802B4000-804067FF [VIRTUAL A02B4000-A04067FF] (RO)
RAMDISK driver initialized: 16 RAM disks of 4096K size 1024 blocksize
gbt_ar5k: gbt_atheros_init, Atheros AR5K 802.11a PCI/CardBus WLAN registering pci device.
PCI: Setting latency timer of device 00:0e.0 to 128
gbt_ar5k: AR5K deviceID = 0013 found.
gbt_ar5k: The GBT_ATHEROS CardBus Ethernet interface was not assigned an IRQ.
Maybe it will not be activated.
gbt_ar5k: ATTENTION, AP start up without file system supported!
H/W_probe Set wlan0 radio frequency 0
rxQueue phy addr : 00F44000
PPP generic driver version 2.4.2
Copy engine driver installed
b_flash flash device: bfc00000 at 200000
 Amd/Fujitsu Extended Query Table v1.0 at 0x0040
number of CFI chips: 1
cfi_cmdset_0002: Disabling fast programming due to code brokenness.
Creating 3 MTD partitions on "flash0":
0x00000000-0x00020000 : "pmon"
0x00020000-0x001f0000 : "linux image"
0x001f0000-0x00200000 : "nvram data storage"
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP, IGMP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 512 bind 512)
eth0: Switch is set for 100 Mbps Full Duplex
Reading Configuration File "/var/apcfg".
Cannot open /var/apcfg
Can't parse configuration file.
Using factory default settings.
gbt_ar5k: ar5k module starts wlan0.
gbt_ar5k: ar5k module multiDomainCapEnabled FALSE
gbt_ar5k: swRadioDisable = 0, calibrationTime = 30
gbt_ar5k: wlan0 athCalibrationTask
gbt_ar5k: tApHouseKeeping alive.
gbt_ar5k: tApListKeeping alive.
gbt_ar5k: 802.1x built
gbt_ar5k: wlan0 pdevInfo @ 0x80f60000 BSS start
wireless access point starting...
wlan0 Ready
Ready
IP-Config: Incomplete network configuration information.
ip_conntrack version 2.1 (127 buckets, 1016 max) - 352 bytes per conntrack
ip_ct_ftp help registering helper callback=8023c034
ip_ct_irc help registering helper callback=8023c6f8
register h225 conntrack module
ip_ct_h323 help registering helper callback=8023e83c
register h225 nat help module
ip_ct_tftp help registering helper callback=0
ip_ct_quake3 help registering helper callback=8023feb0
ip_ct_pptp help registering helper callback=802401c8
ip_ct_mms help registering helper callback=80240ac8
ip_tables: (C) 2000-2002 Netfilter core team
ipt_timer loading
URLBLK init
ipt_inbox loading
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
NET4: Ethernet Bridge 008 for NET4.0
802.1Q VLAN Support v1.7 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (romfs filesystem) readonly.
Freeing prom memory: 1020kb freed
Freeing unused kernel memory: 84k freed [8028c000-802a1000]
Algorithmics/MIPS FPU Emulator v1.5

Starting /etc/rc
Mount ramdisk as /var
Mount /proc
Create /var/tmp/
Create /var/run/utmp
Enabling IP forwarding
# nvram_retrieve_vars: magic number error
eth0: Switch is set for 100 Mbps Full Duplex
Set name-type for VLAN subsystem. Should be visible in /proc/net/vlan/config
Added VLAN with VID == 1 to IF -:eth0:-
WARNING:  VLAN 1 does not work with many switches,
consider another number if you have problems.
Added VLAN with VID == 2 to IF -:eth0:-
eth0.1: dev_set_promiscuity(master, 1)
device eth0 entered promiscuous mode
device eth0.1 entered promiscuous mode
br0: port 1(eth0.1) entering learning state
br0: port 1(eth0.1) entering forwarding state
br0: topology change detected, propagating
device wlan0 entered promiscuous mode
Reading Configuration File "/var/apcfg".
gbt_ar5k: ar5k module starts wlan0.
gbt_ar5k: ar5k module multiDomainCapEnabled TRUE
gbt_ar5k: swRadioDisable = 0, calibrationTime = 30
gbt_ar5k: wlan0 athCalibrationTask
gbt_ar5k: tApHouseKeeping alive.
gbt_ar5k: tApListKeeping alive.
gbt_ar5k: 802.1x built
gbt_ar5k: wlan0 pdevInfo @ 0x80f60000 BSS start
wireless access point starting...
wlan0 Ready
Ready
br0: port 2(wlan0) entering learning state
br0: port 2(wlan0) entering forwarding state
br0: topology change detected, propagating
Firewall Initializing...
Firewall Setup...
Virtual Server Initializing...
Access Control List Initializing...
Content Filter Initializing...
Hex:0x1
Hex:0x0
Hex:0x0
Hex:0x0
Syslog Initializing...
close Remote Log

plog->slog_pid=153

xsyslogd started.
close Remote Log
eth0.2: Setting MAC address to  00 01 38 37 36 17.

bootloader help

XGATE> ?
  load  load memory from hostport            h  The help command
  help  The help command                     ?  The help command
  copy  copy memory                          g  start execution (go)
   sym  define symbol                      set  display/set variable
     d  display memory                  setmac  The setmac command
getmac  The getmac command               setbd  The setbd command
  dump  send srecs/binary to hostport     ping  send ping request to hostport

cat /proc/cpuinfo

# cat /proc/cpuinfo
BRECIS MIPS 4km

cat /proc/meminfo

# cat /proc/meminfo
        total:    used:    free:  shared: buffers:  cached:
Mem:  12144640  7360512  4784128        0   630784   643072
Swap:        0        0        0
MemTotal:        11860 kB
MemFree:          4672 kB
MemShared:           0 kB
Buffers:           616 kB
Cached:            628 kB
SwapCached:          0 kB
Active:            936 kB
Inactive:          308 kB
HighTotal:           0 kB
HighFree:            0 kB
LowTotal:        11860 kB
LowFree:          4672 kB
SwapTotal:           0 kB
SwapFree:            0 kB

cat /proc/mtd

# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00020000 00010000 "pmon"
mtd1: 001d0000 00010000 "linux image"
mtd2: 00010000 00010000 "nvram data storage"

cat /etc/passwd

# cat passwd
root:z1UcRYmEzsAaY:0:0:root:/root:/bin/sh
demo:z1UcRYmEzsAaY:5000:100:Demo User:/home/demo:/bin/bash

ps

# ps
  PID  Uid     VmSize Stat Command
    1 root            S    init
    2 root            S    [keventd]
    3 root            R    [ksoftirqd_CPU0]
    4 root            S    [kswapd]
    5 root            S    [bdflush]
    6 root            S    [kupdated]
    7 root            S    [mtdblockd]
    8 root            Z    [tTrapMon]
    9 root            Z    [tWlanCal]
   10 root            Z    [tApHouseKeeping]
   11 root            Z    [swapper]
   33 root            S    /bin/webs
   34 root            S    -/bin/sh
   66 root            S    [tWlanCal]
   67 root            S    [tApHouseKeeping]
   68 root            S    [tApListKeeping]
  154 root            S    syslogd -f /var/run/logmail.conf
  172 root            S    udhcpd
  184 root            R    ps

cat /proc/bus/pci/devices

# cat devices
0070    168c0013        0       b9010000        00000000        00000000        00000000        00000000        00000000        00000000        00010000  00000000 00000000        00000000        00000000        00000000        00000000        atheros