Ubee U10C020

Ubee U10C020

Manuf (OEM/ODM): Foxconn

(Est.) release date: June 2006
Country of manuf.: China

Amazon image

ASIN
B00EJVUQO6 (, On Amazon, On CCC)

Type: cable modem

Power: ? VDC, ? A
Connector type: barrel

CPU1: Broadcom BCM3349
FLA1: 8 MiB 8,388,608 B <br />65,536 Kib <br />8,192 KiB <br />64 Mib <br />0.00781 GiB <br /> (Macronix MX29LV640BBTC-90G)
RAM1: 16 MiB 16,777,216 B <br />131,072 Kib <br />16,384 KiB <br />128 Mib <br />0.0156 GiB <br /> (Samsung K4S281632F-UC75)

Expansion IFs: USB 2.0 (slave)
Serial: yes, internal, 5-pin header, populated, 3.3V TTL, J350, (115200,8,N,1)

ETH chip1: Broadcom BCM3349
Switch: Broadcom BCM5325MA2
LAN speed: 100M
LAN ports: 4

Additional chips
Direct Conversion Cable Tuner;Broadcom;BCM3419;BROADCOM, BCM3419KML, cP0627 P10, P26TW 05;1;

Stock FW OS: eCos

Ethernet OUI: 00:16:CF (1 E, 5 W)

For a list of all currently documented Broadcom chipsets with specifications, see Broadcom.

---

"E08C005T00", "REV: 02", "19.2167", and a date code of 0624 is silkscreened on one particular U10C020's board.

Images

• internal
• 

  board top

• 

  BCM3349 SoC

• 

  BCM5325MA2 FE Switch

• 

  Flash

• 

  RAM

• 

  BCM3419 tuner

• 

  Foxconn board PN

• 

  power section

• 

  PCBmanuf text + date code

• 

  Foxconn label

• 

  board bottom

Serial

Pinout

^
|
| USB B-type port

  (GND)
J (RxD)
3 (...)
0 (TxD)
5 (...)

Info derived from

• boot log

BCM3349A0 100000010346890 MemSize: .........................16M Flash detected @0xbe000000 Signature: a607 Broadcom BootLoader Version: 2.1.6d release Gnu Build Date: Apr 19 2005 Build Time: 17:13:01 Image 1 Program Header: Signature: a607 Control: 0005 Major Rev: 0000 Minor Rev: 0000 Build Time: 2009/2/26 05:10:37 Z File Length: 1780489 bytes Load Address: 80010000 Filename: ecram_sto.bin HCS: 9af8 CRC: bc4aa104 HCS failed on Image 2 Program Header Enter '1', '2', or 'p' within 2 seconds or take default... . . Performing CRC on Image 1... Detected LZMA compressed image... decompressing... Target Address: 0x80010000 ............................. Decompressed length: 7602985 Executing Image 1... eCos - hal_diag_init Init device '/dev/BrcmTelnetIoDriver' Init device '/dev/ttydiag' Init tty channel: 80722058 Init device '/dev/tty0' Init tty channel: 80722078 Init device '/dev/haldiag' HAL/diag SERIAL init Init device '/dev/ser0' BCM 33XX SERIAL init - dev: 0.2 Set output buffer - buf: 807a7da0 len: 2048 Set input buffer - buf: 807a85a0 len: 2048 BCM 33XX SERIAL config Current Boot Image : 1 file length= 1780489 program header length :92 Flash driver opened. Total Parse 13 element ParseTLV Successd ! FoxCsNonVolSettings::GetSingletonInstance: WARNING - the singleton instance is NULL, and someone is accessing it! Reading Permanent settings from non-vol... Checksum for permanent settings: 0xb1e2dcb3 Nonvol: Reset Event Log Nonvol: Foxconn Cm NonVol Settings Nonvol: PPP NonVol Settings * * * One or more of the settings groups was missing, possibly as a result of a code upgrade. * * Nonvol: CM DOCSIS NonVol Settings * * * One or more of the settings groups was upgraded. * * Settings were read and verified. Reading Dynamic settings from non-vol... Checksum for dynamic settings: 0x38947323 Settings were read and verified. ->Dynamic is good, so we write backup to ensure backup is the same as dynamic... @@@@BPI Key is encryped@@@@ Tag : 11, Length : 1, Value =0 Tag : 12, Length : 1, Value =1 Tag : 13, Length : 1, Value =1 Tag : 14, Length : 1, Value =1 Tag : 15, Length : 1, Value =0 Tag : 16, Length : 1, Value =0 Tag : 17, Length : 1, Value =0 Tag : 18, Length : 1, Value =1 Tag : 1b, Length : 1, Value =1 Tag : 1d, Length : 1, Value =0 Tag : 1e, Length : 1, Value =0 Tag : 2d, Length : 1, Value =2 vvv Interface creation and driver startup beginning vvv -> Begin DOCSIS CM WAN interface Creating HAL object for the DOCSIS CableModem interface Registering DOCSIS CableModem driver 0000000 - The DS Channel List is being updated (RFI-N-03.0086). 0000001 - The list is empty; adding a single default scanning entry. -> End DOCSIS CM WAN interface -> Begin Ethernet LAN interfaces Creating HAL object for the Eth-Switch Lan(0) interface Registering Eth-Switch Lan(0) driver 0000002 - CM HAL reports h/w support for PHS, bitmask=3 -> End Ethernet LAN interfaces -> Begin USB LAN interface Creating HAL object for the USB 1.1 interface Registering USB driver 0000003 - CM HAL reports h/w support for PHS, size=64 -> End USB LAN interface -> Begin IP Stack interfaces -> Starting V2 DHCP Client subsystem... Creating HAL object for IP Stack1 (MAC Addr=00:16:cf:48:84:be) Registering IP Stack1 driver Creating HAL object for IP Stack2 (MAC Addr=00:d1:59:de:ad:02) Registering IP Stack2 driver Creating HAL object for IP Stack3 (MAC Addr=00:16:cf:48:84:c0) Registering IP Stack3 driver Creating HAL object for IP Stack4 (MAC Addr=00:16:cf:48:84:c1) Registering IP Stack4 driver Creating HAL object for IP Stack5 (MAC Addr=00:16:cf:48:84:c2) Registering IP Stack5 driver IP Stack6 not enabled or failed to create and start interface; no other stacks will be loaded. -> End IP Stack interfaces ^^^ Interface creation and driver startup complete ^^^ BcmCmDownstreamScanThread::RegisterEvent is called Propane version: 2.0.1 (28 Oct 2002) DON'T think we need to go here - so don't:::: init_mib !!!! WARNING: netsnmp_brcm_create_tstring called with no address! Creating SNMP agent cablemodem agent Write backup dynamic nonvol 0000004 - FoxTftpClientThread::GetSingletonInstance: WARNING - the singleton instance is NULL, and someone is accessing it! Creating SNMP agent CPE diag agent Successfully added MAC Management address to CAM 0000005 - Interface 10 additional registration w/ SNMP agent OK. StartFoxTplusClient: Starting TACACS Client Thread successfully!! ************************************ *** Start up CPU load monitor module ************************************ Eric --> Add VendorCpeNsaSnoop in CM mode start HTTP Server.............. BcmCableHomePingTool::GetSingletonInstance: WARNING - the singleton instance is NULL, and someone is accessing it! * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *** * * * * * * * * ******************* * * * * * * * * Broadcom Corporation Reference Design +----------------------------------------------------------------------------+ | _/_/ _/_/_/_/ _/_/ | | _/ _/ _/ _/ _/ Broadband | | _/ _/ _/ _/ | | _/_/ _/_/_/ _/ Foundation | | _/ _/ _/ _/ | | _/ _/ _/ _/ _/ Classes | | _/_/_/ _/ _/_/ | | | | Copyright (c) 1999 - 2005 Broadcom Corporation | | | | Revision: 3.9.32 RELEASE | | | | Features: MinimalConsole TelnetConsole Nonvol Slim HeapManager SNMP | | Features: Networking USB1.1 | +----------------------------------------------------------------------------+ | Standard Embedded Target Support for BFC | | | | Copyright (c) 2003-2004 Broadcom Corporation | | | | Revision: 3.0.1 RELEASE | | | | Features: PID=0xa607 Bootloader-Rev=2.1.6d | | Features: Bootloader-Compression-Support=0x19 | +----------------------------------------------------------------------------+ | eCos BFC Application Layer | | | | Copyright (c) 1999 - 2004 Broadcom Corporation | | | | Revision: 3.0.2 RELEASE | | | | Features: eCos Console Cmds, (no Idle Loop Profiler) | +----------------------------------------------------------------------------+ | _/_/ _/ _/ | | _/ _/ _/_/ _/_/ DOCSIS Cable Modem | | _/ _/ _/ _/ | | _/ _/ _/ | | _/ _/ _/ | | _/ _/ _/ _/ | | _/_/ _/ _/ | | | | Copyright (c) 1999 - 2005 Broadcom Corporation | | | | Revision: 3.9.32 RELEASE | | | | Features: AckCel(tm) DOCSIS 1.0/1.1/2.0 Propane(tm) CM SNMP CM Vendor | | Features: Extension | +----------------------------------------------------------------------------+ | Broadcom Data-Only CM Vendor Extension | | | | Copyright (c) 1999 - 2004 Broadcom Corporation | | | | Revision: 3.6.2 RELEASE | | | | Features: DHCP Server HTTP Server OSS2-N-03025 Visualization LED | | Features: Controller Reset/Standby Switch Support | +----------------------------------------------------------------------------+ | _/_/ _/ _/ | | _/ _/ _/ _/ CableHome Cable Modem | | _/ _/ _/ | | _/ _/_/_/_/ | | _/ _/ _/ CableLabs Certified | | _/ _/ _/ _/ | | _/_/ _/ _/ | | | | Copyright (c) 1999 - 2005 Broadcom Corporation | | | | Revision: 3.9.32 RELEASE | | | | Features: CableHome 1.0/1.1 CH SNMP CH Customer Extension | +----------------------------------------------------------------------------+ | Broadcom CableHome Customer Extension | | | | Copyright (c) 1999 - 2004 Broadcom Corporation | | | | Revision: 3.6.2 RELEASE | | | | Features: () | +----------------------------------------------------------------------------+ | Build Date: Feb 26 2009 | | Build Time: 13:10:21 | | Built By: bill | | Firmware version : 5.72.1026 | | Hidden version : 5.72.1026a | +----------------------------------------------------------------------------+ fSoftResetCounter = 0 Running the system... [ERROR] Scanning DS Channel at 573000000 Hz... 0000006 - Starting at the beginning of the DS Channel List. 0000007 - Retrying our last happy home at 573000000 Hz...IterationNumber = 32 key_from_blob: remaining bytes in key blob 167 Type 'help' or '?' for a list of commands... CM> Scanning DS Channel at 861000000 Hz... Scanning DS Channel at 855000000 Hz... Scanning DS Channel at 849000000 Hz... Scanning DS Channel at 843000000 Hz... Scanning DS Channel at 837000000 Hz... Scanning DS Channel at 831000000 Hz... Scanning DS Channel at 825000000 Hz... Scanning DS Channel at 819000000 Hz... Scanning DS Channel at 813000000 Hz... Scanning DS Channel at 807000000 Hz... Scanning DS Channel at 801000000 Hz... Scanning DS Channel at 795000000 Hz... Scanning DS Channel at 789000000 Hz... Scanning DS Channel at 783000000 Hz... Scanning DS Channel at 777000000 Hz... Scanning DS Channel at 771000000 Hz... Scanning DS Channel at 573000000 Hz... 0000008 - Retrying our last happy home at 573000000 Hz...IterationNumber = 16 Scanning DS Channel at 765000000 Hz... Scanning DS Channel at 759000000 Hz... Scanning DS Channel at 753000000 Hz... Scanning DS Channel at 747000000 Hz... Scanning DS Channel at 741000000 Hz... Scanning DS Channel at 735000000 Hz... Scanning DS Channel at 729000000 Hz... Scanning DS Channel at 723000000 Hz... Scanning DS Channel at 717000000 Hz... Scanning DS Channel at 711000000 Hz... Scanning DS Channel at 705000000 Hz... Scanning DS Channel at 699000000 Hz... Scanning DS Channel at 693000000 Hz... Scanning DS Channel at 687000000 Hz... Scanning DS Channel at 681000000 Hz... Scanning DS Channel at 675000000 Hz... Scanning DS Channel at 573000000 Hz... 0000009 - Retrying our last happy home at 573000000 Hz...IterationNumber = 16 Scanning DS Channel at 669000000 Hz... Scanning DS Channel at 663000000 Hz... Scanning DS Channel at 657000000 Hz... Scanning DS Channel at 651000000 Hz... Scanning DS Channel at 645000000 Hz... Scanning DS Channel at 639000000 Hz... Scanning DS Channel at 633000000 Hz... Scanning DS Channel at 627000000 Hz... Scanning DS Channel at 621000000 Hz... Scanning DS Channel at 615000000 Hz... Scanning DS Channel at 609000000 Hz... Scanning DS Channel at 603000000 Hz... Scanning DS Channel at 597000000 Hz... Scanning DS Channel at 591000000 Hz... Scanning DS Channel at 585000000 Hz... Scanning DS Channel at 579000000 Hz... Scanning DS Channel at 573000000 Hz... 0000010 - Retrying our last happy home at 573000000 Hz...IterationNumber = 16 Scanning DS Channel at 573000000 Hz... Scanning DS Channel at 567000000 Hz... Scanning DS Channel at 561000000 Hz... Scanning DS Channel at 555000000 Hz... Scanning DS Channel at 549000000 Hz... Scanning DS Channel at 543000000 Hz... Scanning DS Channel at 537000000 Hz... Scanning DS Channel at 531000000 Hz... Scanning DS Channel at 525000000 Hz... Scanning DS Channel at 519000000 Hz... Scanning DS Channel at 513000000 Hz... Scanning DS Channel at 507000000 Hz... Scanning DS Channel at 501000000 Hz... Scanning DS Channel at 495000000 Hz... Scanning DS Channel at 489000000 Hz... Scanning DS Channel at 483000000 Hz... Scanning DS Channel at 573000000 Hz... 0000011 - Retrying our last happy home at 573000000 Hz...IterationNumber = 16 Scanning DS Channel at 477000000 Hz... Scanning DS Channel at 471000000 Hz... Scanning DS Channel at 465000000 Hz... Scanning DS Channel at 459000000 Hz... Scanning DS Channel at 453000000 Hz... Scanning DS Channel at 447000000 Hz... Scanning DS Channel at 441000000 Hz... Scanning DS Channel at 435000000 Hz... Scanning DS Channel at 429000000 Hz... Scanning DS Channel at 423000000 Hz... Scanning DS Channel at 417000000 Hz... Scanning DS Channel at 411000000 Hz... Scanning DS Channel at 405000000 Hz... Scanning DS Channel at 399000000 Hz... Scanning DS Channel at 393000000 Hz... Scanning DS Channel at 387000000 Hz... Scanning DS Channel at 573000000 Hz... 0000012 - Retrying our last happy home at 573000000 Hz...IterationNumber = 16 Scanning DS Channel at 381000000 Hz... Scanning DS Channel at 375000000 Hz... Scanning DS Channel at 369000000 Hz... Scanning DS Channel at 363000000 Hz... Scanning DS Channel at 357000000 Hz... Scanning DS Channel at 351000000 Hz... Scanning DS Channel at 345000000 Hz... Scanning DS Channel at 339000000 Hz... Scanning DS Channel at 333000000 Hz... Scanning DS Channel at 327000000 Hz... Scanning DS Channel at 321000000 Hz... Scanning DS Channel at 315000000 Hz... Scanning DS Channel at 309000000 Hz... Scanning DS Channel at 303000000 Hz... Scanning DS Channel at 297000000 Hz... Scanning DS Channel at 291000000 Hz... Scanning DS Channel at 573000000 Hz... 0000013 - Retrying our last happy home at 573000000 Hz...IterationNumber = 16 Scanning DS Channel at 285000000 Hz... Scanning DS Channel at 279000000 Hz... Scanning DS Channel at 273000000 Hz... Scanning DS Channel at 267000000 Hz... Scanning DS Channel at 261000000 Hz... Scanning DS Channel at 255000000 Hz... Scanning DS Channel at 249000000 Hz... Scanning DS Channel at 243000000 Hz... Scanning DS Channel at 237000000 Hz... Scanning DS Channel at 231000000 Hz... Scanning DS Channel at 225000000 Hz... Scanning DS Channel at 219000000 Hz... Scanning DS Channel at 213000000 Hz... Scanning DS Channel at 207000000 Hz... Scanning DS Channel at 201000000 Hz... Scanning DS Channel at 195000000 Hz... Scanning DS Channel at 573000000 Hz... 0000014 - Retrying our last happy home at 573000000 Hz...IterationNumber = 16 Scanning DS Channel at 189000000 Hz... Scanning DS Channel at 183000000 Hz... Scanning DS Channel at 177000000 Hz... Scanning DS Channel at 171000000 Hz... Scanning DS Channel at 165000000 Hz... Scanning DS Channel at 159000000 Hz... Scanning DS Channel at 153000000 Hz... Scanning DS Channel at 147000000 Hz... Scanning DS Channel at 141000000 Hz... Scanning DS Channel at 135000000 Hz... Scanning DS Channel at 129000000 Hz... Scanning DS Channel at 123000000 Hz... Scanning DS Channel at 117000000 Hz... Scanning DS Channel at 111000000 Hz... Scanning DS Channel at 105000000 Hz... Scanning DS Channel at 99000000 Hz...