ipTIME N8004R
ipTIME N8004R
Availability: Korea only
Manuf (OEM/ODM): Zioncom IP04176
(Est.) release date: December 2011
Country of manuf.: China
Type: wireless router
Power: 5 VDC, 2.5 A
Connector type: barrel
CPU1: Realtek RTL8198 (500 MHz)
FLA1: 4 MiB4,194,304 B <br />32,768 Kib <br />4,096 KiB <br />32 Mib <br />0.00391 GiB <br /> (Macronix MX25L3206EM2I-12G)
RAM1: 64 MiB67,108,864 B <br />524,288 Kib <br />65,536 KiB <br />512 Mib <br />0.0625 GiB <br /> (Hynix H5PS5162GFR-S5C)
Expansion IFs: none specified
Serial: yes, populated, 4-pin header, (38400,8,N,1)
WI1 chip1: Realtek RTL8192DR
WI1 802dot11 protocols: an
WI1 MIMO config: 2x2:2
WI1 antenna connector: none
WI2 chip1: Realtek RTL8192CE
WI2 802dot11 protocols: bgn
WI2 MIMO config: 2x2:2
WI2 antenna connector: none
ETH chip1: Realtek RTL8198
Switch: Realtek RTL8198
LAN speed: 1G
LAN ports: 4
WAN speed: 1G
WAN ports: 1
abgn
Stock bootloader: rtkload
Stock FW OS: Linux 2.6.30.9
Flags: boot log
Default SSID: iptime (1 addl. devices)
, iptime5G
Default IP address: 192.168.0.1
the IP 192.168.0.1 is used by 785 additional devices
of which 1 are ipTIME devices
For a list of all currently documented Realtek chipsets with specifications, see Realtek.
"04176C" is silkscreened on the board. It is presumed this device is a Zioncom IP04176 (though it could potentially be a IP04173).
Speed comparison with the N5004 on http://koreatechblog.com
- ipTime N8004R using RealTek RTL8198 chip introduced December 2011 W94,000
- is an enhanced version of N8004 using RaLink RT3662 chip introduced July 2011
Q+A on the ipTIME site showing SoCs used by various ipTIME routers, including this one
It is assumed this device uses RTL8192DR (/ RTL8192DE .. any difference?) and RTL8192CE. Per the ipTIME website, this device has 4MB Flash and 64MB RAM.
- Per the below serial dump, the PCI IDs for the radios are 10ec:8193 (default 92DE ID) and 10ec:8191 (88CE ID per the pci-id repo).
Additional internal images (KR)
- The power adapter shown is a Shen Zhen City Hong Ben ELectronic Co., Ltd HB12B-050250SPA (5V, 2.5A).
The same parent Zioncom product may also be sold as the TOTOLINK N500RDG.
Images
Serial
Pinout
Obviously, the UART pins are located @ the header clearly labeled UART.
Pinout seems to be...
(3.3) (TxD) (RxD) (GND) | | -----------> to SPI Flash | v to JTAG / ICE
Info derived from
• boot log |
---|
Booting... ========== SPI ============= SDRAM CLOCK:168MHZ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ @ chip__no chip__id mfr___id dev___id cap___id size_sft dev_size chipSize @ 0h c22016h c2h 20h 16h 0h 16h 400000h @ blk_size blk__cnt sec_size sec__cnt pageSize page_cnt chip_clk chipName @ 10000h 40h 1000h 400h 100h 10h 54h MX25L3205D @ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ ---RealTek(RTL8198)at 2011.04.08-10:22+0900 version v1.1g [16bit](500MHz) Delay 1 second till reset button Magic Number: DEFAUL 00000000 Check Firmware(05020000) : product_id: <n8004r>, size: 0x001fdfc8 ---->[ OK ] Jump to image start=0x80500000... decompressing kernel: Uncompressing Linux... done, booting the kernel. done decompressing kernel. start address: 0x80003640 CPU revision is: 0000dc02 Determined physical RAM map: memory: 04000000 @ 00000000 (usable) Zone PFN ranges: Normal 0x00000000 -> 0x00004000 Movable zone start PFN for each node early_node_map[1] active PFN ranges 0: 0x00000000 -> 0x00004000 Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16256 Kernel command line: console=ttyS0,38400 root=/dev/mtdblock1 icache: 16kB/32B, dcache: 8kB/32B, scache: 0kB/0B NR_IRQS:48 PID hash table entries: 256 (order: 8, 1024 bytes) console handover: boot [early0] -> real [ttyS0] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) Memory: 56128k/65536k available (2220k kernel code, 9340k reserved, 608k data, 104k init, 0k highmem) Calibrating delay loop... 498.07 BogoMIPS (lpj=2490368) Mount-cache hash table entries: 512 net_namespace: 524 bytes NET: Registered protocol family 16 bio: create slab <bio-0> at 0 NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 2048 (order: 2, 16384 bytes) TCP bind hash table entries: 2048 (order: 1, 8192 bytes) TCP: Hash tables configured (established 2048 bind 2048) TCP reno registered NET: Registered protocol family 1 squashfs: version 4.0 (2009/01/31) Phillip Lougher io scheduler noop registered io scheduler cfq registered (default) Realtek GPIO Driver for Flash Reload Default Init IPTIME GPIO: Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled serial8250: ttyS0 at MMIO 0x18002000 (irq = 8) is a 16550A PPP generic driver version 2.4.2 MPPE/MPPC encryption/compression module registered NET: Registered protocol family 24 RTL8192C/RTL8188C driver version 1.6 (2011-07-18) =====>>INSIDE rtl8192cd_init_one <<===== PCIE reset (0) Do MDIO_RESET 98 - 40MHz Clock Source Find Port=1 Device:Vender ID=819310ec vendor_deivce_id=819310ec =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== PCIE reset (0) Do MDIO_RESET 98 - 40MHz Clock Source Find Port=0 Device:Vender ID=819110ec vendor_deivce_id=819110ec =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== =====>>EXIT rtl8192cd_init_one <<===== =====>>INSIDE rtl8192cd_init_one <<===== =====>>EXIT rtl8192cd_init_one <<===== Probing RTL8186 10/100 NIC-kenel stack size order[3]... chip name: 8196C, chip revid: 0 ==Set GPHY Parameter OK NOT YET Set threshould idx 0 eth0 added. vid=9 Member port 0x11e... eth1 added. vid=8 Member port 0x1... eth2 added. vid=9 Member port 0x2... eth3 added. vid=9 Member port 0x4... eth4 added. vid=9 Member port 0x8... [peth0] added, mapping to [eth1]... SPI INIT ------------------------- Force into Single IO Mode ------------------------ |No chipID Sft chipSize blkSize secSize pageSize sdCk opCk chipName | | 0 c22016h 0h 400000h 10000h 1000h 100h 86 0 MX25L3205D/E| ---------------------------------------------------------------------------- SPI flash(MX25L3205D/E) was found at CS0, size 0x400000 Creating 2 MTD partitions on "flash_bank_1": 0x000000000000-0x000000400000 : "boot+cfg+linux+rootfs" 0x000000100000-0x000000400000 : "root fs" nf_conntrack version 0.5.0 (1024 buckets, 4096 max) NETDETECT target register ip_nat_bnet: Trying to register for port 6112 ip_tables: (C) 2000-2006 Netfilter Core Team TCP cubic registered ==> create_proc_ipclone() form DEV.c NET: Registered protocol family 17 Netlink[Kernel] create socket for igmp ok. VFS: Mounted root (squashfs filesystem) readonly on device 31:1. Freeing unused kernel memory: 104k freed mount /proc file system ok! mount /tmp file system ok! alias:n8004r version:8.02 Default Configuration ================================================================= press magic key to change default setting ... LAN MAC : 00:26:66:C4:D5:58 WAN MAC : 00:26:66:C4:D5:59 Bridge Init device wlan1-wds0 is not a slave of br0 device wlan1-wds1 is not a slave of br0 device wlan1-wds2 is not a slave of br0 device wlan1-wds3 is not a slave of br0 device wlan1-vxd is not a slave of br0 device wlan0-wds0 is not a slave of br0 device wlan0-wds1 is not a slave of br0 device wlan0-wds2 is not a slave of br0 device wlan0-wds3 is not a slave of br0 device wlan0-vxd is not a slave of br0 Jan 1 00:00:16 miniupnpd[194]: Reloading rules from lease file Jan 1 00:00:16 miniupnpd[194]: could not open lease file: /var/run/upnp_pmlist Jan 1 00:00:16 miniupnpd[194]: HTTP listening on port 43041 PPTP Server Start!! sh: insmod: not found killall: iapp: no process killed killall: wscd: no process killed killall: iwcontrol: no process killed WiFi Simple Config v1.19 (2011.07.28-00:28+0000). Reaped 192 Reaped 193 Reaped 212 Reaped 224 Reaped 228 Reaped 232 Invalid Save : DEFAULT SIGNAL -> Config Update signal progress Check DHCP PID Elapsed Time: 0 SIGNAL -> WAN ip changed Reaped 236 iwcontrol RegisterPID to (wlan0) iwcontrol RegisterPID to (wlan1) sh: can't create /proc/gpio: nonexistent directory sh: can't create /proc/gpio: nonexistent directory |
cat /proc/version
# cat /proc/version Linux version 2.6.30.9 (rtl98wl2@localhost.localdomain) (gcc version 3.4.6-1.3.6) #164 Mon Nov 7 14:26:08 KST 2011
cat /proc/cpuinfo
# cat cpuinfo system type : RTL8198 processor : 0 cpu model : 56322 BogoMIPS : 498.07 tlb_entries : 32 mips16 implemented : yes
cat /proc/mtd
# cat mtd dev: size erasesize name mtd0: 00400000 00001000 "boot+cfg+linux+rootfs" mtd1: 00300000 00001000 "root fs"
cat /proc/cmdline
# cat /proc/cmdline console=ttyS0,38400 root=/dev/mtdblock1
ps aux
# ps aux PID USER VSZ STAT COMMAND 1 root 2720 S /sbin/init 2 root 0 SW< [kthreadd] 3 root 0 SW< [ksoftirqd/0] 4 root 0 SW< [events/0] 5 root 0 SW< [khelper] 6 root 0 SW< [async/mgr] 7 root 0 SW< [kblockd/0] 8 root 0 SW [pdflush] 9 root 0 SW< [kswapd0] 10 root 0 SW< [mtdblockd] 194 root 2644 S upnpd 208 root 2668 S httpd 210 root 3372 S /sbin/dhcpd 215 root 2700 S apcpd 217 root 2700 S /sbin/iptables-q 225 root 2576 S /sbin/pptpd -b br0 229 root 1096 S /bin/iapp wlan0 wlan1 233 root 1376 S /bin/wscd -start -both_band_ap -c /var/wsc.conf -w wl 237 root 1120 S /bin/iwcontrol wlan0 wlan1 241 root 2604 S /sbin/dhclient -i eth1 -p dhclient.eth1 254 root 1344 S /bin/sh 267 root 1336 R ps aux
cat /etc/passwd
# cat /etc/passwd root::0:0:root::/bin/sh nobody::99:0:nobody:/:/bin/sh bin::99:0:efm-sw:/bin:/bin/sh admin:$1$9Sideh27$eAiGI2LbLrtHkY6lAsoou0:0:0:root::/bin/sh
cat /proc/meminfo
# cat meminfo MemTotal: 56300 kB MemFree: 42424 kB Buffers: 904 kB Cached: 2788 kB SwapCached: 0 kB Active: 3124 kB Inactive: 2364 kB Active(anon): 1796 kB Inactive(anon): 0 kB Active(file): 1328 kB Inactive(file): 2364 kB SwapTotal: 0 kB SwapFree: 0 kB Dirty: 0 kB Writeback: 0 kB AnonPages: 1812 kB Mapped: 1028 kB Slab: 7784 kB SReclaimable: 268 kB SUnreclaim: 7516 kB PageTables: 188 kB NFS_Unstable: 0 kB Bounce: 0 kB WritebackTmp: 0 kB CommitLimit: 28148 kB Committed_AS: 3764 kB VmallocTotal: 1048404 kB VmallocUsed: 292 kB VmallocChunk: 1044744 kB