====== Zyxel PMG5617GA ====== {{description>Informações sobre a Zyxel PMG5617GA GPON ONT/ONU. Teardown, hacking, unlocking (desbloqueio), firmwares, custom images, recuperação, bridge.}} ===== Disclaimer ===== Todas as informações, métodos, procedimentos, firmwares, aplicativos e material sobre modificações e configurações postadas neste wiki foram criados pelo O3 Labs (salvo menção em contrário) e disponibilizadas **GRATUITAMENTE** desde o dia de sua elaboração. Denuncie quando possível quaisquer tentativas de venda destes material. ===== Hardware ===== {{:ont:zyxel:zyxel-pmg5617ga-front.jpg?direct&400 |}} {{ :ont:zyxel:zyxel-pmg5617ga-back.jpg?direct&400|}} ---- ^ SoC | Econet EN7526GT / EN751221 - MIPS 34Kc 4 x 900 MHz | ^ RAM | 128 MB - W631GG6KB-12I DDR3 SDRAM | ^ Flash | 128 MB - Macronix MXIC35LF1G SPI NAND | ^ LAN | 4 x 1 Gbit/s | ^ USB | 1 x USB 2.0 | ^ Wireless 2.4 GHz| 2x2 Mediatek MT7592N | ^ Wireless 5 GHz| 2x2 Mediatek MT7612EN | ^ Laser Driver/Transceiver | Econet EN7571N | ^ Acoplamento fibra | SC/APC | ^ FXS | 2 - Microsemi Le9642PQC | ^ HPNA | - | ^ Serial | Sim | ^ JTAG | ? | ^ Alimentação | DC 12 V / 2 A | ^ Credenciais padrão | única por aparelho ([[#senhas_de_supervisor_e_root|veja mais]]) | ^ IP LAN padrão | 192.168.1.1 | ==== GPON ==== ^ Tipo | SFU e HGU (Ethernet UNI: 4 \ VEIP: 1) | ^ Vendor ID | ZYYG | ^ Version | PMG5617GA | ^ Equipment ID | PMG5617GA | ^ OMCC Version | 160 (0xA0) | ^ Product code | 0 | ^ Software Version (Main, example) | V540ABNA1b3h02 | ^ Software Version (Standby, example) | V540ABNA0C0 | ===== Bootlog ===== ++++ Clique aqui para visualizar| BGA IC Xtal:1 DDR3 init. DRAMC init done. Calculate size. DRAM size=128MB Set new TRFC. ddr-1066 7512DRAMC V1.2.2 (0) EN751221 at Wed May 16 11:26:49 CST 2018 version 1.1 free bootbase Memory size 128MB Set SPI Clock to 50 Mhz spi_nand_probe: mfr_id=0xc2, dev_id=0x12 Using Flash ECC. Detected SPI NAND Flash : _SPI_NAND_DEVICE_ID_MXIC35LF1G, Flash Size=0x8000000 bmt pool size: 81 BMT & BBT Init Success ZyXEL zloader v1.2.3 (05/16/2018 - 11:26:48) Multiboot client version: 2.2 Hit any key to stop autoboot: 0 ==> boot flag = 0 main tclinux.bin have ZYXEL trx header! from main Decompress to 80002000 free_mem_ptr=80750000 free_mem_ptr_end=807B0000 Uncompressing [LZMA] ... done. Linux version 2.6.36 (vm@vm-virtual-machine) (gcc version 4.3.6 (OpenWrt GCC 4.3.6 unknown) ) #1 SMP Wed Jun 12 23:39:30 CST 2019 ISPRAM0: PA=00360000,Size=00010000,enabled memsize:128MB EcoNet EN751221 SOC prom init bootconsole [early0] enabled CPU revision is: 00019558 (MIPS 34Kc) Determined physical RAM map: memory: 07fe0000 @ 00020000 (usable) Wasting 1024 bytes for tracking 32 unused pages Zone PFN ranges: Normal 0x00000020 -> 0x00008000 Movable zone start PFN for each node early_node_map[1] active PFN ranges 0: 0x00000020 -> 0x00008000 3 available secondary CPU TC(s) PERCPU: Embedded 7 pages/cpu @81103000 s7232 r8192 d13248 u65536 pcpu-alloc: s7232 r8192 d13248 u65536 alloc=16*4096 pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32480 Kernel command line: es=1 PID hash table entries: 512 (order: -1, 2048 bytes) Dentry cache hash table entries: 16384 (order: 4, 65536 bytes) Inode-cache hash table entries: 8192 (order: 3, 32768 bytes) Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes. Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes Writing ErrCtl register=00048c82 Readback ErrCtl register=00048c82 nmi base is 8115c200 Memory: 125136k/130944k available (3480k kernel code, 5808k reserved, 693k data, 208k init, 0k highmem) SLUB: Genslabs=7, HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Hierarchical RCU implementation. RCU-based detection of stalled CPUs is disabled. Verbose stalled-CPUs detection is disabled. NR_IRQS:64 CPU frequency 900.00 MHz Using 199.996 MHz high precision timer. console [ttyS0] enabled, bootconsole disabled console [ttyS0] enabled, bootconsole disabled Calibrating delay loop... 598.01 BogoMIPS (lpj=2990080) pid_max: default: 32768 minimum: 301 Mount-cache hash table entries: 512 34K sync es set to 1. Config7: 0x80080500 Limit of 4 TCs set TLB of 64 entry pairs shared by 2 VPEs VPE 0: TC 0 1 2, VPE 1: TC 3 IPI buffer pool of 16 buffers CPU revision is: 00019558 ((null)) TC 1 going on-line as CPU 1 CPU revision is: 00019558 ((null)) TC 2 going on-line as CPU 2 CPU revision is: 00019558 ((null)) TC 3 going on-line as CPU 3 Brought up 4 CPUs kworker/u:0 used greatest stack depth: 14864 bytes left NET: Registered protocol family 16 PCIe driver version: 751221.3.20160516 MT7512_pcie_init check pcie link up status: isRC0_LINKUP=1 isRC1_LINKUP=1 registering PCI controller with io_map_base unset bio: create slab at 0 pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff] pci 0000:00:01.0: BAR 8: assigned [mem 0x20100000-0x202fffff] pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff] pci 0000:01:00.0: BAR 0: set to [mem 0x20000000-0x200fffff] (PCI address [0x20000000-0x200fffff] pci 0000:00:00.0: PCI bridge to [bus 01-01] pci 0000:00:00.0: bridge window [io disabled] pci 0000:00:00.0: bridge window [mem 0x20000000-0x200fffff] pci 0000:00:00.0: bridge window [mem pref disabled] pci 0000:02:00.0: BAR 0: assigned [mem 0x20100000-0x201fffff 64bit] pci 0000:02:00.0: BAR 0: set to [mem 0x20100000-0x201fffff 64bit] (PCI address [0x20100000-0x201fffff] pci 0000:02:00.0: BAR 6: assigned [mem 0x20200000-0x2020ffff pref] pci 0000:00:01.0: PCI bridge to [bus 02-02] pci 0000:00:01.0: bridge window [io disabled] pci 0000:00:01.0: bridge window [mem 0x20100000-0x202fffff] pci 0000:00:01.0: bridge window [mem pref disabled] PCI: Enabling device 0000:00:00.0 (0000 -> 0002) PCI: Enabling device 0000:00:01.0 (0000 -> 0002) NET: Registered protocol family 8 NET: Registered protocol family 20 Switching to clocksource MIPS NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 4096 (order: 3, 32768 bytes) TCP bind hash table entries: 4096 (order: 3, 32768 bytes) TCP: Hash tables configured (established 4096 bind 4096) TCP reno registered UDP hash table entries: 128 (order: 0, 4096 bytes) UDP-Lite hash table entries: 128 (order: 0, 4096 bytes) NET: Registered protocol family 1 mt7512_pcie_fixup: 0x1438 = 20000014 mt7512_pcie_fixup: 0x3438 = 20100015 mt7512_pcie_rc1_retrain: 70 = 0047dc11 80 = 01608c12 TC3162 hardware watchdog module loaded. squashfs: version 4.0 (2009/01/31) Phillip Lougher fuse init (API version 7.15) msgmni has been set to 244 io scheduler noop registered (default) ttyS0 at I/O 0xbfbf0003 (irq = 1) is a TC3162 ECNT ring buffer init success brd: module loaded SPI Flash Init Start Found no SPI flash device IS_SPIFLASH=0x0, IS_NANDFLASH=0x2, (0xBFA10114)=0x6) Set SPI Clock to 50 Mhz SPI_NAND_Flash_init: before init, mtx_mode_tog=0xl9, manaul_en=0x1 spi_nand_probe: mfr_id=0xc2, dev_id=0x12 Detected SPI NAND Flash : _SPI_NAND_DEVICE_ID_MXIC35LF1G, Flash Size=0x8000000 spi nand flash tc3162: flash device 0x01000000 at 0x1c000000 EN7512 mtd init: spi nand probe enter [spi_nand_setup] : Enter NAND device: Manufacturer ID: 0xc2, Chip ID: 0x12 (Unknown _SPI_NAND_DEVICE_ID_MXIC35LF1G) nand_scan_ident ok [spi_nand_setup]: chip size = 0x8000000, erase_shift=0x11 calc_bmt_pool_size : need_valid_block_num=0x51, total_block=0x400 bmt pool size: 81 BMT & BBT Init Success parsing <0[bootloader],0[romfile],56M[tclinux],-[tclinux_slave],1M[wwan],4M[data],1M[rom-d]> partition 10: name , offset ffffffff, size 100000, mask flags 0 partition 9: name , offset ffffffff, size 400000, mask flags 0 partition 8: name , offset ffffffff, size 100000, mask flags 0 partition 7: name , offset ffffffff, size ffffffff, mask flags 0 partition 4: name , offset ffffffff, size 3800000, mask flags 0 partition 1: name , offset ffffffff, size fffffffe, mask flags 0 partition 0: name , offset ffffffff, size fffffffe, mask flags 0 Creating 12 MTD partitions on "EN7512-SPI_NAND": 0x000000000000-0x000000040000 : "bootloader" 0x000000040000-0x000000080000 : "romfile" 0x000000080000-0x0000001e1128 : "kernel" mtd: partition "kernel" doesn't end on an erase block -- force read-only 0x0000001e1128-0x00000126112c : "rootfs" mtd: partition "rootfs" doesn't start on an erase block boundary -- force read-only 0x000000080000-0x000003880000 : "tclinux" 0x000003880000-0x0000039e0671 : "kernel_slave" mtd: partition "kernel_slave" doesn't end on an erase block -- force read-only 0x0000039e0671-0x000004a20675 : "rootfs_slave" mtd: partition "rootfs_slave" doesn't start on an erase block boundary -- force read-only 0x000003880000-0x000006f60000 : "tclinux_slave" 0x000006f60000-0x000007060000 : "wwan" 0x000007060000-0x000007460000 : "data" 0x000007460000-0x000007560000 : "rom-d" 0x000007560000-0x0000075e0000 : "reservearea" rootfs PPP generic driver version 2.4.2 PPP Deflate Compression module registered PPP BSD Compression module registered PPP MPPE Compression module registered NET: Registered protocol family 24 RT3xxx EHCI/OHCI init. Netfilter messages via NETLINK v0.30. nf_conntrack version 0.5.0 (1955 buckets, 7820 max) ctnetlink v0.93: registering with nfnetlink. ip_tables: (C) 2000-2006 Netfilter Core Team TCP cubic registered NET: Registered protocol family 10 lo: Disabled Privacy Extensions IPv6 over IPv4 tunneling driver sit0: Disabled Privacy Extensions ip6tnl0: Disabled Privacy Extensions NET: Registered protocol family 17 802.1Q VLAN Support v1.8 Ben Greear All bugs added by David S. Miller VFS: Mounted root (squashfs filesystem) readonly on device 31:3. Freeing unused kernel memory: 208k freed uname used greatest stack depth: 14832 bytes left mount used greatest stack depth: 14264 bytes left mount used greatest stack depth: 14128 bytes left mknod: dev/hwnat0: File exists mknod: dev/acl0: File exists mknod: dev/ac0: File exists mknod: dev/mtr0: File exists cp used greatest stack depth: 14104 bytes left **************prepare var***************** busybox init and set aff init started: BusyBox v1.20.1 (2019-06-12 22:56:37 CST) chmod: /userfs/profile.cfg: Read-only file system yaffs: dev is 32505865 name is "mtdblock9" rw yaffs: passed flags "tags-ecc-off" yaffs: dev is 32505867 name is "mtdblock11" rw yaffs: passed flags "tags-ecc-off" mount: mounting /dev/mtmount used greatest stack depth: 13944 bytes left dblock11 on /misc failed: Invalid argument mount: mounting debugfs on /sys/kernel/debug failed: No such file or directory mtd[readflash]:device=reservearea tclen=160 tcoffset=198144 Unlocking reservearea ... Reading from reservearea to /tmp/7570_bob.conf ... module_sel: module license 'unspecified' taints kernel. Disabling lock debugging due to kernel taint tcsmux version: tcsmux V1.1.0.0 (Aug 24 2017-14:49:30). tcportbind version: tcportbind V1.1.0.0 (Mar 9 2017-12:21:59). vlantag_drv_init TCSUPPORT_IPV6 TC3162 LED Manager 0.1 init tcledctrl version: tcledctrl V1.1.0.0 (Jun 12 2019-23:13:09). find led.conf error led path:/userfs/led.conf tccicmd V1.1.0.0 (Jun 12 2019-23:13:11) SIFMaster 0.1 init Register sifm cmd Reading MT7592 EEPROM from flash reservearea mtd[readflash]:device=reservearea tclen=512 tcoffset=393216 Unlocking reservearea ... Reading from reservearea to /etc/RT30xxEEPROM.bin ... Reading MT7612E EEPROM from flash reservearea mtd[readflash]:device=reservearea tclen=512 tcoffset=393728 Unlocking reservearea ... Reading from reservearea to /etc/Wireless/RT2860AP_AC/RT30xxEEPROM.bin ... insmod ETH_LAN driver macType = 0 qdma_lan: physical_size is 0x00200000 ether.c:v1.00-NAPI 29.Mar.2015 eth0: FE MAC Ethernet address: C8:54:4B:XX:XX:XX Use External switch ,type 10 EN7512 TRGMII V1.0 GE Rxet cal (1)(1)(1)(0x1f) GE Rext AnaCal Done! (2)(0x1e) GE Rext AnaCal Done! (2)(0x1e) GE R50 AnaCal Done! (1) (0x28)(0xa8) GE R50 AnaCal Done! (1) (0x28)(0xa8) GE R50 AnaCal Done! (1) (0x2b)(0xab) GE R50 AnaCal Done! (1) (0x2b)(0xab) GE Tx offset AnaCal Done! (1)(0x21) GE Tx offset AnaCal Done! (3)(0x23) GE Tx offset AnaCal Done! (2)(0x22) GE Tx offset AnaCal Done! (1)(0x21) GE Tx amp AnaCal Done! (pair-0)(0x12)(0x2020) GE Tx amp AnaCal Done! (26) (0x6) GE Tx amp AnaCal Done! (pair-1)(0x17)(0x820) GE Tx amp AnaCal Done! (26) (0x6) GE Tx amp AnaCal Done! (pair-2)(0x19)(0x520) GE Tx amp AnaCal Done! (29) (0x3) GE Tx amp AnaCal Done! (pair-3)(0x21)(0x320) GE Tx amp AnaCal Done! (31) (0x1) tcPhyVerLookUp 3887 0 tcPhyVerLookUp 3887 0 tcPhyVerLookUp 3887 0 tcPhyVerLookUp 3887 9412 7530 Ge, 0x1 MCM MT7530 tcPhyVerLookUp 3887 9412 7530 Ge, 0x1 MCM MT7530 [tcPhyInit] in [tcPhyInit] out , r31 = (1, 0x0) tcPhyVerLookUp 3887 9412 7530 Ge, 0x1 MCM MT7530 [tcPhyInit] in [tcPhyInit] out , r31 = (2, 0x0) tcPhyVerLookUp 3887 9412 7530 Ge, 0x1 MCM MT7530 [tcPhyInit] in [tcPhyInit] out , r31 = (3, 0x0) tcPhyVerLookUp 3887 9412 7530 Ge, 0x1 MCM MT7530 [tcPhyInit] in [tcPhyInit] out , r31 = (4, 0x0) tcPhyVerLookUp 3887 0 MCM MT7530 tcPhyVerLookUp 3887 0 MCM MT7530 tcPhyVerLookUp 3887 0 MCM MT7530 tcPhyVerLookUp 3887 0 MCM MT7530 tcPhyVerLookUp 3887 0 MCM MT7530 tcPhyVerLookUp 3887 0 MCM MT7530 tcPhyVerLookUp 3887 0 MCM MT7530 tcPhyVerLookUp 3887 9451 7512 Ge, MCM MT7530 [tcPhyInit] in [tcPhyInit] out , r31 = (12, 0x0) Exec. Successful Exec. Successful and the accuracy is 8kbps Exec. Successful and the accuracy is 8kbps eth0: starting interface. netif_start_queue macType = 0 qdma_wan: qdma_bmgr.c [2588]: HW_FWD physical size is not illegal, force setting to 4MB qdma_wan: physical_size is 0x00400000 Exec. Successful Exec. Successful and the accuracy is 8kbps Exec. Successful and the accuracy is 8kbps [4294939261]0ms[phy_init.c:342] xPON PHY initialization done EN7571 found! FLASH matrix got PWRADC offset = 0x3625 PWRADC ready BG 1.76V = 0x293 BG 0.875V = 0x148 RSSI_Vref = 0x21e RSSI_V = 0x299 eFuse value = 0xf5 eFuse offset = -3.3'C Start GPON Tx Calibration RGS_T0C = 0x4d RGS_T1C = 0x51 APD initialization done Initial current loaded PWR/ER loaded TIASD = 0x2a Rx LOS is set Internal DDMI Enabled KT Enabled EN7571 Initialization Done! PON PHY driver version is 170228.103.8 insmod used greatest stack depth: 13792 bytes left xPON driver initialization Alloc data struct memory successful, 35376 insmod used greatest stack depth: 13596 bytes left XPON Mapping Module init OK! TCSUPPORT_WLAN TCSUPPORT_DUAL_WLAN_MT7612E mtphy[1]:Link-up at 1000 F. message received before monitor task is initialized kerSysSendtoMonitorTask ALL 0x1E,0x9B =0x102 ALL 0x1E,0x9C =0x202 BB1 lch_mse_mdcA =0x1 BB2 lch_mse_mdcB =0x2 BB3 lch_mse_mdcC =0x2 BB4 lch_mse_mdcD =0x2 register rtpci mt7662e_ap.ko zyWlan_evt_init: create socket successfully PCI: Enabling device 0000:02:00.0 (0000 -> 0002) === pAd = c0c02000, size = 1681984 === <-- RTMPAllocTxRxRingMemory, Status=0 <-- RTMPAllocAdapterBlock, Status=0 pAd->CSRBaseAddress =0xc0b00000, csr_addr=0xc0b00000! device_id =0x7662 ==>rlt_wlan_chip_onoff(): OnOff:1, Reset= 1, pAd->WlanFunCtrl:0x0, Reg-WlanFunCtrl=0x20a get_dev_name_prefix(): dev_idx = 0, dev_name_prefix=rai TCSUPPORT_WLAN_MT7592 register mt_drv mt7603eap.ko zyWlan_evt_init: Enter. mt7603eap.ko zyWlan_evt_init: create socket successfully PCI: Enabling device 0000:01:00.0 (0000 -> 0002) === pAd = c1282000, size = 814832 === <-- RTMPAllocTxRxRingMemory, Status=0, ErrorValue=0x <-- RTMPAllocAdapterBlock, Status=0 pAd->CSRBaseAddress =0xc1180000, csr_addr=0xc1180000! device_id =0x7603 RtmpChipOpsHook(507): Not support for HIF_MT yet! mt7603_init()--> mt_bcn_buf_init(224): Not support for HIF_MT yet! <--mt7603_init() Mirror/redirect action on insmod used greatest stack depth: 13456 bytes left ifconfig: SIOCGIFFLAGS: No such device Ebtables v2.0 registered HWNAT Module enabled with Type:L2B/IPv4/IPv6/DS-LITE/6RD, foeSize:80B, foeNum:16384 IP check use Black List **************lan port init***************** four ports TC3162 hardware watchdog initialized Added VLAN with VID == 1 to IF -:eth0:- WARNING: VLAN 1 does not work with many switches, consider another number if you have problems. device eth0.1 entered promiscuous mode device eth0 entered promiscuous mode br0: port 1(eth0.1) entering learning state br0: port 1(eth0.1) entering learning state Added VLAN with VID == 2 to IF -:eth0:- device eth0.2 entered promiscuous mode br0: port 2(eth0.2) entering learning state br0: port 2(eth0.2) entering learning state Added VLAN with VID == 3 to IF -:eth0:- device eth0.3 entered promiscuous mode br0: port 3(eth0.3) entering learning state br0: port 3(eth0.3) entering learning state Added VLAN with VID == 4 to IF -:eth0:- device eth0.4 entered promiscuous mode br0: port 4(eth0.4) entering learning state br0: port 4(eth0.4) entering learning state device eth0 is not a slave of br0 pon_vlan_init Multi Lan port insmod used greatest stack depth: 13080 bytes left initilize xpon igmp module....done! pon_mac_filter_init Multi Lan port*reg=00001640 value:00000000 (ext_switch:0) valid subcommands: adsl taskset: invalid number '0x8' MTK DSP support voip_loader start sh used greatest stack depth: 12520 bytes left status: DSPCore[Ver:TVM1.0.4-545] [1] PCM V2.4 (Jun 16 2017 14:17:51) pcm[Ver:TVB1.0.4.545.100-2] PCM V2.4 (Mar 9 2017 14:00:18) pcm[Ver:TVM1.0.4-545] lec[Ver:TVB1.0.4.545.100-2] Major Num:255, device: spi spi[Ver:TVM1.0.4-545] START CHECK ZARLIN ZSI [4294940229][slic][INFO][slic3_init:L36]init mod-slic3,interface:ZSI,devNum:1,gpio:2000 [4294940229][slic][INFO][slic3_init:L49]ZSI slic3[Ver:TVM1.0.4-545] [4294940230][spi][INFO][SPI_slic_check:L1515]set slic type: ===0=== [4294940231][spi][INFO][SPI_slic_check:L1516]set interface_type: ===1=== [4294940232][spi][INFO][SPI_slic_check:L1517]set slicid: ===0=== [4294940232][spi][INFO][SLIC_Reset_Infc:L1493]======slic reset 7512====== [4294940233][spi][INFO][SPI_Reset:L379] SPI_Reset 2 [4294940237][spi][INFO][SPI_slic_check:L1539]======spi check zarlink====== [4294940237][spi][INFO][SPI_slic_check:L1555]res_arr[0]:0x8 res_arr[1]:0x75 [4294940238][spi][INFO][SPI_slic_check:L1586]le9642_deviceVerify RCNPCN success! param.data:le9642 [4294940239][spi][INFO][SPI_slic_check:L1515]set slic type: ===0=== [4294940239][spi][INFO][SPI_slic_check:L1516]set interface_type: ===1=== [4294940240][spi][INFO][SPI_slic_check:L1517]set slicid: ===1=== [4294940241][spi][INFO][SLIC_Reset_Infc:L1493]======slic reset 7512====== [4294940241][spi][INFO][SPI_Reset:L379] SPI_Reset 2 [4294940246][spi][INFO][SPI_slic_check:L1539]======spi check zarlink====== [4294940246][spi][INFO][SPI_slic_check:L1555]res_arr[0]:0x0 res_arr[1]:0x0 [4294940247][spi][INFO][SPI_slic_check:L1607][zarlink] unknown slic type! param.data: PCM and SLIC Controller Module has been unloaded [SLIC] le9642 Loading le9642,slic num:1 init slicFunc slic1:7 slic2:7 [4294940279][spi][INFO][SPI_Reset:L379] SPI_Reset 2 [4294940283][slic][INFO][SLIC_DeviceVerify:L540]SLIC_DeviceVerify [4294940283][slic][INFO][le9662_deviceVerify:L317]le9662_deviceVerify Start [4294940284][slic][INFO][le9662_deviceVerify:L329]devInfo->deviceNum=0 res_arr[0]=8 res_arr[0]=75 [4294940285][slic][INFO][le9662_deviceVerify:L332]le9662_deviceVerify Success! rd_cnt=1 [4294940285][slic][INFO][le9662_deviceVerify:L346]SLIC_SELF_TEST VP886_R_OPCOND_RD = 0x0 [4294940286][slic][INFO][le9662_deviceVerify:L353]SLIC_SELF_TEST WRT VAL = 0x47 SLIC_SELF_TEST RD BACK = 0x47 [4294940287][slic][INFO][le9662_deviceVerify:L357]SLIC WRT RD test Pass [4294940288][slic][INFO][le9662_deviceVerify:L366]SLIC_SELF_TEST WRT VAL = 0x0 SLIC_SELF_TEST RD BACK = 0x0 [4294940289][slic][INFO][le9662_deviceVerify:L371]SLIC WRT RD test Pass [4294940289][slic][INFO][SLIC_DeviceVerify:L552]DEVICE_VERIFY ret:1 [4294940290][slic][ERR][le9662_deviceVerify:L313]le9662_deviceVerify already! Bypass 2nd verify! [4294940291][slic][INFO][SLIC_DeviceVerify:L552]DEVICE_VERIFY ret:0 pcm1 ch num:2 pcm2 ch num:0 Init fxsNum(2) + fxoNum(0) = slic_ch_num(2) , deviceNum(1) [4294940292][slic][INFO][SLIC_Init:L593]FXS_NUM=2 FXO_NUM=0 [4294940293][slic][INFO][le9662_deviceInit:L441]le9662_deviceInit 0 [4294940293][slic][INFO][le9662_slicParamReset:L194]le9662_slicParamReset Successful(CountryCode=Default) [4294940295][slic][INFO][le9662_deviceInit:L474]le9662 Init ..[4294940439][slic][INFO][le9662_deviceInit:L489] le9662_Init_Cnt = 170 [4294940439][slic][INFO][le9662_deviceInit:L541]CODEC_LINEAR setting [4294940440][slic][INFO][le9662_deviceInit:L582]FXS-0 timeslot:2 [4294940440][slic][INFO][le9662_deviceInit:L596]FXS-1 timeslot:3 [4294940441][slic][INFO][le9662_deviceInit:L613]fxs0 gain--TX :4000 RX: 4000 [4294940442][slic][INFO][le9662_deviceInit:L613]fxs1 gain--TX :4000 RX: 4000 [4294940442][slic][INFO][SLIC_Init:L593]FXS_NUM=2 FXO_NUM=0 [4294940443][slic][WARN][le9662_deviceInit:L434]Bypass le9662_deviceInit on Device 1! fxs[Ver:TVB1.0.4.545.100-2] Loading common init mod-ksocket ksocket[Ver:TVM1.0.4-545] ortp[Ver:TVM1.0.4-545] init mod-acodec acodec[Ver:TVM1.0.4-545] init mod-foip3 foip3[Ver:TVM1.0.4-545] init mod-vdsp for 2 channels 4 sessions vdsp[Ver:TVB1.0.4.545.100-2] =============================== || MTK DSP init successfully || =============================== dbgTool_init init v2.0 pcmdump[Ver:TVM1.0.4-545] voip loader end pid 772's current affinity mask: 0 pid 772's new affinity mask: 0 pid 765's current affinity mask: 0 pid 765's new affinity mask: 0 pid 785's current affinity mask: 0 pid 785's new affinity mask: 0 pid 783's current affinity mask: 0 pid 783's new affinity mask: 0 pid 784's current affinity mask: 0 pid 784's new affinity mask: 0 MMM *reg=00007d08 value:00077777 (ext_switch:1) * doPhyMMDWrite => phyaddr=1, dev_addr=31, data_addr=0x0026 , value=0xC002 * doPhyMMDWrite => phyaddr=1, dev_addr=31, data_addr=0x0027 , value=0x000C usage: sh: write error: Invalid argument usage: sh: write error: Invalid argument VDSP_GetInstasipclient used greatest stack depth: 8296 bytes left nce:275 MMM_end hw_nat -U 300 300 300 300 done Jan 1 00:00:39 crond[823]: crond: crond (busybox 1.20.1) started, log level 8 START disable Lan and Wan... ln: /dev/log: File exists message received before monitor task is initialized kerSysSendtoMonitorTask mtcphy[1]: Link-down!!! 1970-01-01 00:00:39 dnsmasq<844>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 3 1970-01-01 00:00:40 dnsmasq<844>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO: EID 23 bind server on /var/lib/.sock/zcfg_sockaddr23 successfully ZCMD Start 1970-01-01 00:00:40 zcmd<853>, uitimer.c:95, UITimerProc(), INFO: thread starts killall: zywifid_run.sh: no process killed zcfg_schema.bin Please press Enter to activate this console. killall: zywifid: no process killed 1970-01-01 00:00:40 zywifid<869>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 3 1970-01-01 00:00:40 zywifid<869>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO: EID 40 bind server on /var/lib/.sock/zcfg_sockaddr40 successfully zywifid> [ALERT] wifi_module_init:1082: load libzywl_001_ecn.so .......... zywifid> [ALERT] main:1211: Check and fix Wifi MAC address...... Find MTD Device /dev/mtd1 with name romfile. mtd.oobsize 64 mtd.writesize 2048 romfile type ffff romfile size 4294967295 romfile crc 65535 zcmdRomConvert rm: can't remove '/tmp/wifiScanTime*': No such file or directory br0: port 1(eth0.1) entering forwarding state MAX Number of Interface Stack is 128 br0: port 2(eth0.2) entering forwarding state br0: port 3(eth0.3) entering forwarding state br0: port 4(eth0.4) entering forwarding state Enter zcmdTr98MapTableInit zcmdTr98ParmAttrNodeBuild: zcmdTr98ParmAttrNodeBuild: obj 67152 3,1,0,0,0,0 nSetParmAttr 1 setParmAttrNodeLst Add, n=1 zcmdTr98ParmAttrNodeBuild: obj 67152 4,1,0,0,0,0 nSetParmAttr 1 setParmAttrNodeLst Add, n=2 zcmdTr98ParmAttrNodeBuild: obj 67152 5,1,0,0,0,0 nSetParmAttr 1 setParmAttrNodeLst Add, n=3 zcmdTr98ParmAttrNodeBuild: obj 67152 6,1,0,0,0,0 nSetParmAttr 1 setParmAttrNodeLst Add, n=4 zcmdTr98ParmAttrNodeBuild: obj 67152 7,1,0,0,0,0 nSetParmAttr 1 setParmAttrNodeLst Add, n=5 zcmdTr98ParmAttrNodeBuild: obj 67152 8,1,0,0,0,0 nSetParmAttr 1 setParmAttrNodeLst Add, n=6 zcmdTr98ParmAttrNodeBuild: obj 67152 9,1,0,0,0,0 nSetParmAttr 1 setParmAttrNodeLst Add, n=7 zcmdTr98ParmAttrNodeBuild: obj 67152 10,1,0,0,0,0 nSetParmAttr 1 setParmAttrNodeLst Add, n=8 zcmdTr98ParmAttrNodeBuild: obj 64764 1,0,0,0,0,0 nSetParmAttr 1 setParmAttrNodeLst Add, n=9 zcmdTr98ParmAttrNodeBuild: obj 14520 0,0,0,0,0,0 nSetParmAttr 2 setParmAttrNodeLst Add, n=10 zcmdTr98ParmAttrNodeBuild: obj 16872 0,0,0,0,0,0 nSetParmAttr 1 setParmAttrNodeLst Add, n=11 mainDhcpPoolInfo[0]= 1 [1 0] mainDhcpPoolInfo[1]= 0 [0 0] mainDhcpPoolInfo[2]= 0 [0 0] mainDhcpPoolInfo[3]= 0 [0 0] mainDhcpPoolInfo[4]= 0 [0 0] mainDhcpPoolInfo[5]= 0 [0 0] mainDhcpPoolInfo[6]= 0 [0 0] mainDhcpPoolInfo[7]= 0 [0 0] mainDhcpPoolInfo[8]= 0 [0 0] mainDhcpPoolInfo[9]= 0 [0 0] mainDhcpPoolInfo[10]= 0 [0 0] mainDhcpPoolInfo[11]= 0 [0 0] mainDhcpPoolInfo[12]= 0 [0 0] mainDhcpPoolInfo[13]= 0 [0 0] mainDhcpPoolInfo[14]= 0 [0 0] mainDhcpPoolInfo[15]= 0 [0 0] zcmdTr98MapTableInit End main: tr98 map table inited! zcmdReleaseTr98ObjParamMapping: no this object mapping zcmdReleaseTr98ObjParamMapping: no this object mapping 1970-01-01 00:00:41 zcmd<852>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 3 1970-01-01 00:00:41 zcmd<852>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO: EID 1 bind server on /var/lib/.sock/zcfg_sockaddr1 successfully main: create thread zcmdConfigApplyTask 1970-01-01 00:00:41 zcmd<887>, zcmd_config_apply.c:1656, zcmdModuleConfigHandleTask(), INFO: thread starts 1970-01-01 00:00:41 zcmd<887>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 4 1970-01-01 00:00:41 zcmd<887>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO: EID 70 ip6_tables: (C) 2000-2006 Netfilter Core Team bind server on /var/lib/.sock/zcfg_sockaddr70 successfully 1970-01-01 00:00:41 zcmd<886>, zcmd_config_apply.c:1707, zcmdConfigApplyTask(), INFO: thread starts 1970-01-01 00:00:41 zcmd<886>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 5 1970-01-01 00:00:41 zcmd<886>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO: EID 68 bind server on /var/lib/.sock/zcfg_sockaddr68 successfully ip6tables: No chain/target/match by that name. ip6tables: No chain/target/match by that name. /bin/sh: dsldiagd: not found 1970-01-01 00:00:42 esmd<911>, esmd.c:2009, main(), INFO: ESMD Start ESMD msg server init... 1970-01-01 00:00:42 esmd<911>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 0 1970-01-01 00:00:42 esmd<911>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO:set user_pid flag to 911 EID 2 bind server on /var/lib/.sock/zcfg_sockaddr2 successfully [ESMD] Initial kernel monitor ... kernelFd=6 Error: zyUtilUpdateWWANPackage, open FW_WWANPACKAGE_FILE fail! main: create thread zcmdBeInit 1970-01-01 00:00:42 zcmd<918>, zcmd.c:5638, zcmdActiveZtr69(), INFO: thread starts FW_WATCHER Start Find MTD Device /dev/mtd8 with name wwan. mtd.oobsize 64 mtd.writesize 2048 Notice: zyUtilUpdateWWANPackage, No WWAN Package in Flash! zyUtilUpdateWWANPackage: Could not get Revision 1970-01-01 00:00:42 esmd<922>, esmd.c:1487, _esmd_thread(), INFO: ESMD usr config thread starts 1970-01-01 00:00:42 esmd<923>, esmd.c:1495, _esmd_thread(), INFO: ESMD ground thread starts 1970-01-01 00:00:42 esmd<923>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 7 1970-01-01 00:00:42 esmd<923>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO: EID 67 bind server on /var/lib/.sock/zcfg_sockaddr67 successfully 1970-01-01 00:00:42 esmd<924>, esmd.c:1876, timer_thread(), INFO: thread starts zyUtilTcpSvrInit zcmdBeInit(): DL opening... Initial begui_customization.... Initial bedevice.... insmod: can't insert '/lib/modules/2.6.36/ipt_TRIGGER.ko': No such file or directory xt_time: kernel timezone is -0000 insmod: can't insert '/lib/modules/2.6.36/xt_LOG.ko': No such file or directory insmod: can't insert '/lib/modules/2.6.36/ip6_tables.ko': File exists insmod: can't insert '/lib/modules/2.6.36/ip6table_filter.ko': File exists insmod: can't insert '/lib/modules/2.6.36/nf_defrag_ipv6.ko': No such file or directory insmod: can't insert '/lib/modules/2.6.36/ip6t_REJECT.ko': File exists Chain MACFILTER already exists. devObj->DeviceSummary = InternetGatewayDevice:1.4[](Baseline:1,EthernetLAN:2,WiFiLAN:1,ADSLWAN:1,ADSL2WAN:1,VDSL2WAN:1,PTMWAN:1,EthernetWAN:1,QoS:1,Time:1,IPPing:1),VoiceService:1[](Endpoint:1,SIPEndpoint:1,TAEndpoint:1) Initial belog.... killall: tty_log_echo: no process killed killall: mailsend: no process killed killall: syslog-ng: no process killed Initial besysinfo.... Initial beaccount.... mkdir: can't create directory '/var/tmp': File exists chmod: /data/zcfg_predef.json: No such file or directory Initial bedevinfo.... 1970-01-01 00:00:47 zcmd<917>, zcfg_msg.c:396, _msg_send(), ERROR: errno = 2, No such file or directory 1970-01-01 00:00:47 zcmd<917>, zcfg_msg.c:397, _msg_send(), ERROR: fail to sendto /var/lib/.sock/zcfg_sockaddr9 1970-01-01 00:00:47 zcmd<917>, zcfg_msg.c:399, _msg_send(), ERROR: srcEid = 1, dstEid = 9, type = 273, without reply 1970-01-01 00:00:47 zcmd<917>, zcfg_msg.c:805, zcfg_msg_sendAndGetReply(), ERROR: fail to send message. ret = -5 1970-01-01 00:00:47 zcmd<917>, zcfg_msg.c:396, _msg_send(), ERROR: errno = 2, No such file or directory 1970-01-01 00:00:47 zcmd<917>, zcfg_msg.c:397, _msg_send(), ERROR: fail to sendto /var/lib/.sock/zcfg_sockaddr52 1970-01-01 00:00:47 zcmd<917>, zcfg_msg.c:399, _msg_send(), ERROR: srcEid = 1, dstEid = 52, type = 273, without reply 1970-01-01 00:00:47 zcmd<917>, zcfg_msg.c:805, zcfg_msg_sendAndGetReply(), ERROR: fail to send message. ret = -5 Initial beethlink.... Initial beethintf.... mtphy[1]:Link-up at 1000 F. ALL 0x1E,0x9B =0x202 ALL 0x1E,0x9C =0x302 BB1 lch_mse_mdcA =0x2 BB2 lch_mse_mdcB =0x2 BB3 lch_mse_mdcC =0x3 BB4 lch_mse_mdcD =0x2 updateLinkStatus 336: receiving Kernel event !! auto, Auto-negotiation enabled. The autonegotiated media type is 100baseTx-FD. Link is up auto, Auto-negotiation enabled. No common media type was autonegotiated! This is extremely unusual and typically indicates a configuration error. Perhaps the advertised capability set was intentionally limited. Link is down auto, Auto-negotiation enabled. No common media type was autonegotiated! This is extremely unusual and typically indicates a configuration error. Perhaps the advertised capability set was intentionally limited. Link is down auto, Auto-negotiation enabled. No common media type was autonegotiated! This is extremely unusual and typically indicates a configuration error. Perhaps the advertised capability set was intentionally limited. Link is down Initial beoptintf.... Initial beXpon.... Initial beGpon.... Initial bePmmgr.... Initial bewifi_radio.... Initial bewifi_ssid.... Initial bewifi_ap.... Initial bebridging.... Initial bebridgingbr.... Initial bebridgePort.... device eth0.1 left promiscuous mode br0: port 1(eth0.1) entering forwarding state device eth0.2 left promiscuous mode br0: port 2(eth0.2) entering forwarding state device eth0.3 left promiscuous mode br0: port 3(eth0.3) entering forwarding state device eth0.4 left promiscuous mode device eth0 left promiscuous mode br0: port 4(eth0.4) entering forwarding state device ra0 is not a slave of br0 interface ra1 does not exist! interface ra2 does not exist! interface ra3 does not exist! device rai0 is not a slave of br0 interface rai1 does not exist! interface rai2 does not exist! interface rai3 does not exist! device eth0.1 entered promiscuous mode device eth0 entered promiscuous mode device eth0.2 entered promiscuous mode device eth0.3 entered promiscuous mode device eth0.4 entered promiscuous mode TX_BCN DESC a5293000 size = 320 RX[0] DESC a5295000 size = 2048 RX[1] DESC a5296000 size = 2048 ERROR!!! Your no. of SSIDs( = 1) does not match your BssidNum( = 4)! cfg_mode=9 cfg_mode=9 wmode_band_equal(): Band Equal! APSDCapable[0]=0 APSDCapable[1]=0 APSDCapable[2]=0 APSDCapable[3]=0 APSDCapable[4]=0 APSDCapable[5]=0 APSDCapable[6]=0 APSDCapable[7]=0 APSDCapable[8]=0 APSDCapable[9]=0 APSDCapable[10]=0 APSDCapable[11]=0 APSDCapable[12]=0 APSDCapable[13]=0 APSDCapable[14]=0 APSDCapable[15]=0 Key1Str is Invalid key length(1) or Type(0) Key2Str is Invalid key length(1) or Type(0) Key3Str is Invalid key length(1) or Type(0) Key4Str is Invalid key length(1) or Type(0) [PMF]Set_PMFMFPC_Proc:: apidx=0, Desired MFPC=0 [PMF]Set_PMFMFPR_Proc:: apidx=0, Desired MFPR=0 [PMF]Set_PMFSHA256_Proc:: apidx=0, Desired PMFSHA256=0 RtmpOSFileOpen(): Error 2 opening /etc/Wireless/RT2860AP/SingleSKU.dat FW Version:CL173766-A FW Build Date:20170925114906 CmdAddressLenReq:(ret = 0) CmdFwStartReq: override = 1, address = 1048576 CmdStartDLRsp: WiFI FW Download Success AsicDMASchedulerInit(): DMA Scheduler Mode=0(LMAC) efuse_probe: efuse = 10000002 RtmpChipOpsEepromHook::e2p_type=4, inf_Type=5 RtmpEepromGetDefault::e2p_dafault=1 RtmpChipOpsEepromHook: E2P type(4), E2pAccessMode = 4, E2P default = 1 NVM is BIN mode 1. Phy Mode = 14 Cal Free IC!! @@@ NICReadEEPROMParameters : pAd->FWLoad=0 now bb MainSsid mac 00:aa:bb:01:23:40 Country Region from e2p = ffff tssi_1_target_pwr_g_band = 22 2. Phy Mode = 14 3. Phy Mode = 14 NICInitPwrPinCfg(14): Not support for HIF_MT yet! NICInitializeAsic(585): Not support rtmp_mac_sys_reset () for HIF_MT yet! mt_mac_init()--> mt7603_init_mac_cr()--> AsicSetMacMaxLen(1826): Set the Max RxPktLen=1024! <--mt_mac_init() WTBL Segment 1 info: MemBaseAddr/FID:0x28000/0 EntrySize/Cnt:32/128 WTBL Segment 2 info: MemBaseAddr/FID:0x40000/0 EntrySize/Cnt:64/128 WTBL Segment 3 info: MemBaseAddr/FID:0x42000/64 EntrySize/Cnt:64/128 WTBL Segment 4 info: MemBaseAddr/FID:0x44000/128 EntrySize/Cnt:32/128 MtAsicACQueue: Write CR:21510, Value=10421 MtAsicACQueue: Write CR:21500, Value=10421 AntCfgInit(2577): Not support for HIF_MT yet! MCS Set = ff ff 00 00 01 SYNC - BBP R4 to 20MHz.l SYNC - BBP R4 to 20MHz.l SYNC - BBP R4 to 20MHz.l SYNC - BBP R4 to 20MHz.l SYNC - BBP R4 to 20MHz.l SYNC - BBP R4 to 20MHz.l SYNC - BBP R4 to 20MHz.l SYNC - BBP R4 to 20MHz.l SYNC - BBP R4 to 20MHz.l [PMF]ap_pmf_init:: apidx=0, MFPC=0, MFPR=0, SHA256=0 [PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0 [PMF]ap_pmf_init:: apidx=1, MFPC=0, MFPR=0, SHA256=0 [PMF]ap_pmf_init:: apidx=2, MFPC=0, MFPR=0, SHA256=0 [PMF]ap_pmf_init:: apidx=3, MFPC=0, MFPR=0, SHA256=0 AsicSetRalinkBurstMode(4230): Not support for HIF_MT yet! RTMPSetPiggyBack(876): Not support for HIF_MT yet! AsicSetTxPreamble(4217): Not support for HIF_MT yet! AsicAddSharedKeyEntry(1992): Not support for HIF_MT yet! AsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xa0 Main bssid = 00:aa:bb:01:23:40 <==== rt28xx_init, Status=0 @@@ ed_monitor_exit : ===> @@@ ed_monitor_exit : <=== mt7603_set_ed_cca: TURN OFF EDCCA mac 0x10618 = 0xd7083f0f jiffies=ffffa83f, POLLING_MODE_DETECT_INTV=300 WiFi Startup Cost (ra0): 3.620s device ra0 entered promiscuous mode ##### mbss_cr_enable, BssId = 1 device ra1 entered promiscuous mode ##### mbss_cr_enable, BssId = 2 device ra2 entered promiscuous mode ##### mbss_cr_enable, BssId = 3 device ra3 entered promiscuous mode build time = 20141115060606a rom patch for E3 IC platform = ALPS hw/sw version = ŠŠ patch version =  FW Version:0.0.00 Build:1 Build Time:201607111443____ fw for E3 IC RX[0] DESC a5718000 size = 8192 RX[1] DESC a571a000 size = 8192 ERROR!!! Your no. of SSIDs( = 1) does not match your BssidNum( = 4)! cfg_mode=14 cfg_mode=14 wmode_band_equal(): Band Not Equal! APSDCapable[0]=0 APSDCapable[1]=0 APSDCapable[2]=0 APSDCapable[3]=0 APSDCapable[4]=0 APSDCapable[5]=0 APSDCapable[6]=0 APSDCapable[7]=0 APSDCapable[8]=0 APSDCapable[9]=0 APSDCapable[10]=0 APSDCapable[11]=0 APSDCapable[12]=0 APSDCapable[13]=0 APSDCapable[14]=0 APSDCapable[15]=0 pAd->ed_threshold = 90 pAd->ed_chk = 1 pAd->ed_false_cca_threshold = 180 Key1Str is Invalid key length(1) or Type(0) Key2Str is Invalid key length(1) or Type(0) Key3Str is Invalid key length(1) or Type(0) Key4Str is Invalid key length(1) or Type(0) [PMF]Set_PMFMFPC_Proc:: apidx=0, Desired MFPC=0 [PMF]Set_PMFMFPR_Proc:: apidx=0, Desired MFPR=0 [PMF]Set_PMFSHA256_Proc:: apidx=0, Desired PMFSHA256=0 RtmpOSFileOpen(): Error 2 opening /etc/Wireless/RT2860AP_AC/SingleSKU.dat --> Error opening /etc/Wireless/RT2860AP_AC/SingleSKU.dat RtmpChipOpsEepromHook::e2p_type=4, inf_Type=5 NVM is BIN mode 1. Phy Mode = 49 get_chl_grp:illegal channel (167) get_chl_grp:illegal channel (167) get_chl_grp:illegal channel (169) get_chl_grp:illegal channel (169) get_chl_grp:illegal channel (171) get_chl_grp:illegal channel (171) /home/vm/ex100/opal/btc-git/pmg5617ga/b_201906111526_1b3/build_dir/target-mips_r2_uClibc-0.9.33.2/linux-en75xx_pmg5617ga/MT7612E_LinuxAP_3.0.4.0.P2_DPA/os/linux/../../chips/mt76x2.c:2938 assert (ad->TxPower[choffset].Channel == 42)failed Country Region from e2p = 1ff mt76x2_read_temp_info_from_eeprom:: is_temp_tx_alc=1, temp_tx_alc_enable=1 mt76x2_read_tx_alc_info_from_eeprom:: is_ePA_mode=1, ePA_type=1 mt76x2_read_tx_alc_info_from_eeprom:: [5G band] high_temp_slope=15, low_temp_slope=9 mt76x2_read_tx_alc_info_from_eeprom:: [2G band] high_temp_slope=0, low_temp_slope=0 mt76x2_read_tx_alc_info_from_eeprom:: [5G band] tc_lower_bound=-7, tc_upper_bound=4 mt76x2_read_tx_alc_info_from_eeprom:: [2G band] tc_lower_bound=0, tc_upper_bound=0 mt76x2_get_external_lna_gain::LNA type=0x1, BLNAGain=0xffffff8c, ALNAGain0=0xffffff8c, ALNAGain1=0xffffff8c, ALNAGain2=0xffffff8c 2. Phy Mode = 49 3. Phy Mode = 49 andes_pci_fw_init 0x1300 = 00073200 AntCfgInit: primary/secondary ant 0/1 andes_load_cr:cr_type(2) ChipStructAssign(): MT76x2 hook ! MCS Set = ff ff 00 00 01 [PMF]APStartUp:: apidx=0, MFPC=0, MFPR=0, SHA256=0 [PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=0, MFPR=0 [PMF]APStartUp:: apidx=1, MFPC=0, MFPR=0, SHA256=0 [PMF]APStartUp:: apidx=2, MFPC=0, MFPR=0, SHA256=0 [PMF]APStartUp:: apidx=3, MFPC=0, MFPR=0, SHA256=0 mt76x2_bbp_adjust():rf_bw=2, ext_ch=3, PrimCh=161, HT-CentCh=159, VHT-CentCh=155 mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400 APStartUp(): AP Set CentralFreq at 155(Prim=161, HT-CentCh=159, VHT-CentCh=155, BBP_BW=2) mt76x2_calibration(channel = 155) @@@ ed_monitor_exit : ===> @@@ ed_monitor_exit : <=== Main bssid = 00:aa:bb:01:23:40 mt76x2_reinit_agc_gain:original agc_vga0 = 0x48, agc_vga1 = 0x48 mt76x2_reinit_agc_gain:updated agc_vga0 = 0x48, agc_vga1 = 0x48 mt76x2_reinit_hi_lna_gain:original hi_lna0 = 0x33, hi_lna1 = 0x33 mt76x2_reinit_hi_lna_gain:updated hi_lna0 = 0x33, hi_lna1 = 0x33 original vga value(chain0) = 48 original vga value(chain1) = 48 <==== rt28xx_init, Status=0 get_dev_name_prefix(): dev_idx = 0, dev_name_prefix=rai get_dev_name_prefix(): dev_idx = 0, dev_name_prefix=rai get_dev_name_prefix(): dev_idx = 0, dev_name_prefix=rai get_dev_name_prefix(): dev_idx = 0, dev_name_prefix=wdsi get_dev_name_prefix(): dev_idx = 0, dev_name_prefix=wdsi get_dev_name_prefix(): dev_idx = 0, dev_name_prefix=wdsi get_dev_name_prefix(): dev_idx = 0, dev_name_prefix=wdsi RTMPDrvOpen(1):Check if PDMA is idle! RTMPDrvOpen(2):Check if PDMA is idle! jiffies=ffffa92d, POLLING_MODE_DETECT_INTV=300 device rai0 entered promiscuous mode device rai1 entered promiscuous mode device rai2 entered promiscuous mode device rai3 entered promiscuous mode Initial bebridgeFilter.... Initial bewifi.... Initial beipiface.... [ZYXEL] The untag WAN doesn't use bridge mode. zywifid:Config> [ERROR] zyWifiUpdateLanInfo:404: No wifi interface on module(ECN). br0: port 12(rai3) entering forwarding state br0: port 12(rai3) entering forwarding state br0: port 11(rai2) entering forwarding state br0: port 11(rai2) entering forwarding state br0: port 10(rai1) entering forwarding state br0: port 10(rai1) entering forwarding state br0: port 9(rai0) entering forwarding state br0: port 9(rai0) entering forwarding state br0: port 8(ra3) entering forwarding state br0: port 8(ra3) entering forwarding state br0: port 7(ra2) entering forwarding state br0: port 7(ra2) entering forwarding state br0: port 6(ra1) entering forwarding state br0: port 6(ra1) entering forwarding state br0: port 5(ra0) entering forwarding state br0: port 5(ra0) entering forwarding state br0: port 4(eth0.4) entering forwarding state br0: port 4(eth0.4) entering forwarding state br0: port 3(eth0.3) entering forwarding state br0: port 3(eth0.3) entering forwarding state br0: port 2(eth0.2) entering forwarding state br0: port 2(eth0.2) entering forwarding state br0: port 1(eth0.1) entering forwarding state br0: port 1(eth0.1) entering forwarding state zcmdTr98SyncTr98WANConnectNum: obj 65652 seqnum 202 zcmdTr98SyncTr98WANConnectNum: obj 65652 seqnum 202 zcmdTr98SyncTr98WANConnectNum: obj 65652 seqnum 202 zcmdTr98SyncTr98WANConnectNum: obj 65652 seqnum 202 zcmdTr98SyncTr98WANConnectNum: obj 65652 seqnum 202 zcmdTr98SyncTr98WANConnectNum: obj 65652 seqnum 202 zcmdTr98SyncTr98WANConnectNum: obj 65652 seqnum 202 zcmdTr98SyncTr98WANConnectNum: obj 65652 seqnum 202 zcfgBeWanInitIntfMark : Enter zcfgBeWanInitIntfMark: Init IfMark Done !! Initial benatIntf.... ftp switch turn on sip switch turn on rtsp switch turn off pptp switch turn off iptables: Bad rule (does a matching rule exist in that chain?). ipsec switch turn off,sw_state= iptables: Bad rule (does a matching rule exist in that chain?). Initial bev4addr.... Initial bev6addr.... Initial bev6prefix.... Initial beloopguard.... Initial beusbhost.... Initial beusbintf.... Initial beusbport.... Initial berouter.... Initial berainfo.... Initial bedhcp4_server.... Initial bedhcp4_serverpool.... Initial bedhcp4_serverpool_staticaddr.... Initial bedhcp4_serverpool_option.... Initial bedhcp4_serversubnet.... restart DNSMASQ... 1970-01-01 00:01:22 dnsmasq<1817>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 6 1970-01-01 00:01:22 dnsmasq<1817>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO: EID 23 bind server on /var/lib/.sock/zcfg_sockaddr23 successfully Initial bedhcp4_relay.... Initial bedhcp6_server.... Initial bedhcp6_serverpool.... Initial bevlanTerm.... Initial bepppiface.... [pppIfaceObj->Username=] beConfigBoot 95 zcmdTr98SyncTr98WANConnectNum: obj 63648 seqnum 216 Initial bepppifaceipcp.... Initial bedhcp4_client.... Initial bedhcp6_client.... 1970-01-01 00:01:23 zcmd<917>, be_dhcp6_client_config_init.c:29, beConfigBoot(), INFO: boot Dhcp6 Client Initial beradvd.... Initial bedns.... Initial bedns_route.... Initial bedns_server.... Initial benat_port_map.... Initial benat_port_trigger.... Initial benat_addr_mapping.... Initial begre_tunnel.... modprobe ip_gre modprobe: module ip_gre not found in modules.dep Initial besessCtl.... br0: port 5(ra0) entering forwarding state /bin/sh: can't create /proc/zy_nf_ct_udp_STB_port: nonexistent directory /bin/sh: can't create /proc/zy_nf_ct_udp_STB_timeout: nonexistent directory Initial befirewall.... br0: port 6(ra1) entering forwarding state br0: port 7(ra2) entering forwarding state MTPciPollTxRxEmpty AsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0x0 RTMPSetPiggyBack(876): Not support for HIF_MT yet! RT28xxPciAsicRadioOff(): Not support for HIF_MT yet! RTMPDrvClose call RT28xxPciAsicRadioOff fail !! tx_kickout_fail_count = 0 tx_timeout_fail_count = 0 rx_receive_fail_count = 0 alloc_cmd_msg = 78 free_cmd_msg = 78 br0: port 8(ra3) entering forwarding state TX_BCN DESC a5293000 size = 320 RX[0] DESC a5295000 size = 2048 RX[1] DESC a5296000 size = 2048 cfg_mode=9 cfg_mode=9 wmode_band_equal(): Band Equal! APSDCapable[0]=1 APSDCapable[1]=1 APSDCapable[2]=1 APSDCapable[3]=1 APSDCapable[4]=1 APSDCapable[5]=1 APSDCapable[6]=1 APSDCapable[7]=1 APSDCapable[8]=1 APSDCapable[9]=1 APSDCapable[10]=1 APSDCapable[11]=1 APSDCapable[12]=1 APSDCapable[13]=1 APSDCapable[14]=1 APSDCapable[15]=1 Key1Str is Invalid key length(0) or Type(0) Key1Str is Invalid key length(0) or Type(0) Key1Str is Invalid key length(0) or Type(0) Key1Str is Invalid key length(0) or Type(0) Key2Str is Invalid key length(0) or Type(0) Key2Str is Invalid key length(0) or Type(0) Key2Str is Invalid key length(0) or Type(0) Key2Str is Invalid key length(0) or Type(0) Key3Str is Invalid key length(0) or Type(0) Key3Str is Invalid key length(0) or Type(0) Key3Str is Invalid key length(0) or Type(0) Key3Str is Invalid key length(0) or Type(0) Key4Str is Invalid key length(0) or Type(0) Key4Str is Invalid key length(0) or Type(0) Key4Str is Invalid key length(0) or Type(0) Key4Str is Invalid key length(0) or Type(0) [PMF]Set_PMFMFPC_Proc:: apidx=0, Desired MFPC=1 [PMF]Set_PMFMFPC_Proc:: apidx=1, Desired MFPC=1 [PMF]Set_PMFMFPC_Proc:: apidx=2, Desired MFPC=1 [PMF]Set_PMFMFPC_Proc:: apidx=3, Desired MFPC=1 [PMF]Set_PMFMFPR_Proc:: apidx=0, Desired MFPR=0 [PMF]Set_PMFMFPR_Proc:: apidx=1, Desired MFPR=0 [PMF]Set_PMFMFPR_Proc:: apidx=2, Desired MFPR=0 [PMF]Set_PMFMFPR_Proc:: apidx=3, Desired MFPR=0 [PMF]Set_PMFSHA256_Proc:: apidx=0, Desired PMFSHA256=0 [PMF]Set_PMFSHA256_Proc:: apidx=1, Desired PMFSHA256=0 [PMF]Set_PMFSHA256_Proc:: apidx=2, Desired PMFSHA256=0 [PMF]Set_PMFSHA256_Proc:: apidx=3, Desired PMFSHA256=0 FW Version:CL173766-A FW Build Date:20170925114906 AsicDMASchedulerInit(): DMA Scheduler Mode=0(LMAC) efuse_probe: efuse = 10000002 RtmpChipOpsEepromHook::e2p_type=4, inf_Type=5 RtmpEepromGetDefault::e2p_dafault=1 RtmpChipOpsEepromHook: E2P type(4), E2pAccessMode = 4, E2P default = 1 NVM is BIN mode 1. Phy Mode = 14 Cal Free IC!! @@@ NICReadEEPROMParameters : pAd->FWLoad=1 now bb MainSsid mac c8:54:4b:xx:xx:xx Country Region from e2p = ffff tssi_1_target_pwr_g_band = 22 2. Phy Mode = 14 3. Phy Mode = 14 NICInitPwrPinCfg(14): Not support for HIF_MT yet! NICInitializeAsic(585): Not support rtmp_mac_sys_reset () for HIF_MT yet! mt_mac_init()--> mt7603_init_mac_cr()--> AsicSetMacMaxLen(1826): Set the Max RxPktLen=1024! <--mt_mac_init() WTBL Segment 1 info: MemBaseAddr/FID:0x28000/0 EntrySize/Cnt:32/128 WTBL Segment 2 info: MemBaseAddr/FID:0x40000/0 EntrySize/Cnt:64/128 WTBL Segment 3 info: MemBaseAddr/FID:0x42000/64 EntrySize/Cnt:64/128 WTBL Segment 4 info: MemBaseAddr/FID:0x44000/128 EntrySize/Cnt:32/128 MtAsicACQueue: Write CR:21510, Value=10421 MtAsicACQueue: Write CR:21500, Value=10421 AntCfgInit(2577): Not support for HIF_MT yet! RTMPSetPhyMode(): channel out of range, use first ch=0 MCS Set = ff ff 00 00 00 [PMF]ap_pmf_init:: apidx=0, MFPC=1, MFPR=0, SHA256=0 [PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0 [PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE [PMF]ap_pmf_init:: apidx=1, MFPC=1, MFPR=0, SHA256=0 [PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0 [PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE [PMF]ap_pmf_init:: apidx=2, MFPC=1, MFPR=0, SHA256=0 [PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0 [PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE [PMF]ap_pmf_init:: apidx=3, MFPC=1, MFPR=0, SHA256=0 [PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0 [PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE AsicSetRalinkBurstMode(4230): Not support for HIF_MT yet! RTMPSetPiggyBack(876): Not support for HIF_MT yet! AsicSetTxPreamble(4217): Not support for HIF_MT yet! AsicAddSharedKeyEntry(1992): Not support for HIF_MT yet! AsicAddSharedKeyEntry(1992): Not support for HIF_MT yet! AsicAddSharedKeyEntry(1992): Not support for HIF_MT yet! AsicAddSharedKeyEntry(1992): Not support for HIF_MT yet! The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4 AsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xa0 Main bssid = c8:54:4b:xx:xx:xx <==== rt28xx_init, Status=0 @@@ ed_monitor_init : ===> @@@ ed_monitor_init : <=== mt7603_set_ed_cca: TURN ON EDCCA mac 0x10618 = 0xd7c87d0f jiffies=ffffad4b, POLLING_MODE_DETECT_INTV=300 WiFi Startup Cost (ra0): 3.730s br0: port 5(ra0) entering forwarding state br0: port 5(ra0) entering forwarding state getL1InterfaceUpstream: 560 USB.Interface.1 restart DNSMASQ... getL1InterfaceUpstream: 560 USB.Interface.1 1970-01-01 00:01:29 dnsmasq<1923>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 6 1970-01-01 00:01:29 dnsmasq<1923>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO: EID 23 bind server on /var/lib/.sock/zcfg_sockaddr23 successfully ppe cmd done! ppe cmd done! ppe cmd done! ppe cmd done! ppe cmd done! ppe cmd done! ppe cmd done! ppe cmd done! done Initial betr69.... ==>Set_Debug_Proc() <==Set_Debug_Proc(RTDebugLevel = 0) Initial beddns.... Initial betime.... Initial bediagnostic.... Initial beschedule.... Initial beparenCtl.... device ra0 is already a member of a bridge; can't enslave it to bridge br0. Initial beqos.... Initial beqosQueue.... device ra1 is already a member of a bridge; can't enslave it to bridge br0. device ra2 is already a member of a bridge; can't enslave it to bridge br0. device ra3 is already a member of a bridge; can't enslave it to bridge br0. Initial beqosClass.... Initial beqosShaper.... Initial beqosPolicer.... Initial be6rd.... Initial beigmp.... cp: can't stat '/etc/mcpd_igmp.conf': No such file or directory beigmp! /bin/sh: can't create /proc/zy_igmp_noipsrcaddr_enable: nonexistent directory nas0 : 4 nas1 : 4 nas2 : 4 nas3 : 4 nas4 : 4 nas5 : 4 nas6 : 4 nas[ZYXEL] The untag WAN doesn't use bridge mode. 7 : 4Initial besnmp.... Boot SNMP beConfigBoot, start snmpd Initial bemld.... cp: can't stat '/etc/mcpd_mld.conf': No such file or directory cat: can't open '/var/run/ecmh.pid': No such file or directory sh: you need to specify whom to kill Initial bevcAutoHunt.... Initial bevlanAutoHunt.... Initial beupnp.... Initial bemacfilter.... Initial bemacfilter_whitelist.... Initial beuserinterface.... Initial beremoMgmt.... mount: mounting devpts on /dev/pts failed: Device or resource busy Initial bechangehosticon.... Initial behosts.... Initial behostshost.... Initial becert.... Initial beportmirror.... Initial bedslite.... Initial beSTBVendorID.... Initial berip.... killall: ripd: no process killed Initial betr64.... Initial besamba.... starting smbd. samba start ok Initial bevoiceSrv.... Initial bevoiceCap.... Initial bevoiceCapSip.... Initial bevoiceCapCodec.... Initial bevoiceCommon.... Initial bevoiceProf.... Initial bevoiceProfSip.... Initial bevoiceProfFaxT38.... Initial bevoiceProfNumberingPlan.... Initial bevoiceProfNumberingPlanPrefixInfo.... Initial bevoiceProfRTP.... Initial bevoiceProfRTPSRTP.... Initial bevoiceLine.... Initial bevoiceLineSip.... writing RSA key Initial bevoiceLineProc.... Initial bevoiceLineCallingFeatures.... Initial bevoiceLineCodecList.... Initial bevoiceLineStats.... Initial bevoiceLineRinger.... Initial bevoiceLineRingerDescription.... Initial bevoicePhyIntf.... Initial http with port(443), SSL enable. Initial bevoiceSpeedDialBookList.... Initial bevoiceCallPolicyBook.... Initial bevoiceCallPolicyBookList.... Initial bevoiceCallStatus.... Initial bednsentry.... Initial http with port(80), SSL disable. 1970-01-01 00:01:35 zhttpd<2109>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 11 1970-01-01 00:01:35 zhttpd<2109>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO: EID 15 bind server on /var/lib/.sock/zcfg_sockaddr15 successfully Initial bezx.... Initial bedlna.... Initial bevlangroup.... Initial beTFTPServerName.... Initial bepptp.... Boot PPTP PptpVpnConfigStatsUpdate ifconfig: ppp11: error fetching interface information: Device not found Initial beOmci.... 00:01:35 imgr.c [71]: Initial system driver. 00:01:35 imgr.c [77]: Initial pthread parameters. 00:01:35 imgr.c [83]: Initial dispatcher. 00:01:35 dspch_init.c [23]: Create IPC trap message queue 00:01:35 dspch_init.c [36]: Create IPC trap message queue 00:01:35 imgr.c [89]: Initial database manager. 00:01:35 dbmgr_init.c [32]: Create database memory. 00:01:35 dbmgr_init.c [38]: Create the share database memory successful. 00:01:35 dbmgr_init.c [41]: The total share database size is 0. 00:01:35 imgr.c [95]: Initial config manager. 00:01:35 imgr.c [101]: Initial fault manager. 00:01:35 imgr.c [107]: Initial performance manager. Exec. Successful Back-end module init finished Initial USB driver... OMCI mode: gpon br0: port 9(rai0) entering forwarding state [econet] open zyomci-a control message queue (mqId=262152) OK! [econet] open zyomci-e control messaSCSI subsystem initialized ge br0: port 10(rai1) entering forwarding state queue (mqId=294921) OK! [econet] open zyomci-e TX message queue (mqId=327690) OK! set olt type: 0 sh used greatest stack depth: 7704 bytes left br0: port 11(rai2) entering forwarding state turn on ztr69 @@@ APStop: go to ed_monitor_exit()!! @@@ ed_monitor_exit : ===> @@@ ed_monitor_exit : <=== andes_pci_erasefw ==>rlt_wlan_chip_onoff(): OnOff:0, Reset= 0, pAd->WlanFunCtrl:0x20b, Reg-WlanFunCtrl=0x20b RTMP_TimerListRelease: release timer obj c0c16390! RTMP_TimerListRelease: release timer obj c0cc134c! RTMP_TimerListRelease: release timer obj c0c1a3b4! RTMP_TimerListRelease: release timer obj c0c19f98! RTMP_TimerListRelease: release timer obj c0c1a384! RTMP_TimerListRelease: release timer obj c0c1a6c4! RTMP_TimerListRelease: release timer obj c0c1a600! RTMP_TimerListRelease: release timer obj c0c1a630! RTMP_TimerListRelease: release timer obj c0c1d5ec! RTMP_TimerListRelease: release timer obj c0c1d1d0! RTMP_TimerListRelease: release timer obj c0c1d5bc! RTMP_TimerListRelease: release timer obj c0c1d8fc! RTMP_TimerListRelease: release timer obj c0c1d838! RTMP_TimerListRelease: release timer obj c0c1d868! RTMP_TimerListRelease: release timer obj c0c20824! RTMP_TimerListRelease: release timer obj c0c20408! RTMP_TimerListRelease: release timer obj c0c207f4! RTMP_TimerListRelease: release timer obj c0c20b34! RTMP_TimerListRelease: release timer obj c0c20a70! RTMP_TimerListRelease: release timer obj c0c20aa0! RTMP_TimerListRelease: release timer obj c0c23a5c! RTMP_TimerListRelease: release timer obj c0c23640! RTMP_TimerListRelease: release timer obj c0c23a2c! RTMP_TimerListRelease: release timer obj c0c23d6c! RTMP_TimerListRelease: release timer obj c0c23ca8! RTMP_TimerListRelease: release timer obj c0c23cd8! RTMP_TimerListRelease: release timer obj c0c26c94! RTMP_TimerListRelease: release timer obj c0c26878! RTMP_TimerListRelease: release timer obj c0c26c64! RTMP_TimerListRelease: release timer obj c0c26fa4! RTMP_TimerListRelease: release timer obj c0c26ee0! RTMP_TimerListRelease: release timer obj c0c26f10! RTMP_TimerListRelease: release timer obj c0c29ecc! RTMP_TimerListRelease: release timer obj c0c29ab0! RTMP_TimerListRelease: release timer obj c0c29e9c! RTMP_TimerListRelease: release timer obj c0c2a1dc! RTMP_TimerListRelease: release timer obj c0c2a118! RTMP_TimerListRelease: release timer obj c0c2a148! RTMP_TimerListRelease: release timer obj c0c2d104! RTMP_TimerListRelease: release timer obj c0c2cce8! RTMP_TimerListRelease: release timer obj c0c2d0d4! RTMP_TimerListRelease: release timer obj c0c2d414! RTMP_TimerListRelease: release timer obj c0c2d350! RTMP_TimerListRelease: release timer obj c0c2d380! RTMP_TimerListRelease: release timer obj c0c3033c! RTMP_TimerListRelease: release timer obj c0c2ff20! RTMP_TimerListRelease: release timer obj c0c3030c! RTMP_TimerListRelease: release timer obj c0c3064c! RTMP_TimerListRelease: release timer obj c0c30588! RTMP_TimerListRelease: release timer obj c0c305b8! RTMP_TimerListRelease: release timer obj c0c6d09c! RTMP_TimerListRelease: release timer obj c0c6d1b8! RTMP_TimerListRelease: release timer obj c0c6d0c8! RTMP_TimerListRelease: release timer obj c0c49958! RTMP_TimerListRelease: release timer obj c0c6d14c! RTMP_TimerListRelease: release timer obj c0c178a8! RTMP_TimerListRelease: release timer obj c0c1aae0! RTMP_TimerListRelease: release timer obj c0c1dd18! RTMP_TimerListRelease: release timer obj c0c20f50! RTMP_TimerListRelease: release timer obj c0c24188! RTMP_TimerListRelease: release timer obj c0c273c0! RTMP_TimerListRelease: release timer obj c0c2a5f8! RTMP_TimerListRelease: release timer obj c0c2d830! RTMP_TimerListRelease: release timer obj c0c49888! RTMP_TimerListRelease: release timer obj c0d9a8dc! RTMP_TimerListRelease: release timer obj c0c5318c! @@@ RTMPDrvClose: go to ed_monitor_exit()!! @@@ ed_monitor_exit : ===> @@@ ed_monitor_exit : <=== 1970-01-01 00:01:38 ztr69<2324>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 12 1970-01-01 00:01:38 ztr69<2324>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO: EID 9 bind server on /var/lib/.sock/zcfg_sockaddr9 successfully exFAT: Version 1.2.9 br0: port 12(rai3) entering forwarding state ==>rlt_wlan_chip_onoff(): OnOff:1, Reset= 0, pAd->WlanFunCtrl:0x208, Reg-WlanFunCtrl=0x208 build time = 20141115060606a rom patch for E3 IC platform = ALPS hw/sw version = ŠŠ patch version =  FW Version:0.0.00 Build:1 Build Time:201607111443____ fw for E3 IC RX[0] DESC a5718000 size = 8192 RX[1] DESC a571a000 size = 8192 cfg_mode=14 cfg_mode=14 wmode_band_equal(): Band Not Equal! APSDCapable[0]=1 APSDCapable[1]=1 APSDCapable[2]=1 APSDCapable[3]=1 APSDCapable[4]=1 APSDCapable[5]=1 APSDCapable[6]=1 APSDCapable[7]=1 APSDCapable[8]=1 APSDCapable[9]=1 APSDCapable[10]=1 APSDCapable[11]=1 APSDCapable[12]=1 APSDCapable[13]=1 APSDCapable[14]=1 APSDCapable[15]=1 pAd->ed_threshold = 90 pAd->ed_chk = 1 pAd->ed_false_cca_threshold = 180 Key1Str is Invalid key length(0) or Type(0) Key1Str is Invalid key length(0) or Type(0) Key1Str is Invalid key length(0) or Type(0) Key1Str is Invalid key length(0) or Type(0) Key2Str is Invalid key length(0) or Type(0) Key2Str is Invalid key length(0) or Type(0) Key2Str is Invalid key length(0) or Type(0) Key2Str is Invalid key length(0) or Type(0) Key3Str is Invalid key length(0) or Type(0) Key3Str is Invalid key length(0) or Type(0) Key3Str is Invalid key length(0) or Type(0) Key3Str is Invalid key length(0) or Type(0) Key4Str is Invalid key length(0) or Type(0) Key4Str is Invalid key length(0) or Type(0) Key4Str is Invalid key length(0) or Type(0) Key4Str is Invalid key length(0) or Type(0) [PMF]Set_PMFMFPC_Proc:: apidx=0, Desired MFPC=1 [PMF]Set_PMFMFPC_Proc:: apidx=1, Desired MFPC=1 [PMF]Set_PMFMFPC_Proc:: apidx=2, Desired MFPC=1 [PMF]Set_PMFMFPC_Proc:: apidx=3, Desired MFPC=1 [PMF]Set_PMFMFPR_Proc:: apidx=0, Desired MFPR=0 [PMF]Set_PMFMFPR_Proc:: apidx=1, Desired MFPR=0 [PMF]Set_PMFMFPR_Proc:: apidx=2, Desired MFPR=0 [PMF]Set_PMFMFPR_Proc:: apidx=3, Desired MFPR=0 [PMF]Set_PMFSHA256_Proc:: apidx=0, Desired PMFSHA256=0 [PMF]Set_PMFSHA256_Proc:: apidx=1, Desired PMFSHA256=0 [PMF]Set_PMFSHA256_Proc:: apidx=2, Desired PMFSHA256=0 [PMF]Set_PMFSHA256_Proc:: apidx=3, Desired PMFSHA256=0 usbcore: registered new interface driver usbfs updateLinkStatus usbcore: registered new interface driver hub 336: receiving Kernel event !! RtmpChipOpsEepromHook::e2p_type=4, inf_Type=5 NVM is BIN mode 1. Phy Mode = 49 usbcore: registered new device driver usb get_chl_grp:illegal channel (167) get_chl_grp:illegal channel (167) get_chl_grp:illegal channel (169) get_chl_grp:illegal channel (169) get_chl_grp:illegal channel (171) get_chl_grp:illegal channel (171) /home/vm/ex100/opal/btc-git/pmg5617ga/b_201906111526_1b3/build_dir/target-mips_r2_uClibc-0.9.33.2/linux-en75xx_pmg5617ga/MT7612E_LinuxAP_3.0.4.0.P2_DPA/os/linux/../../chips/mt76x2.c:2938 assert (ad->TxPower[choffset].Channel == 42)failed Country Region from e2p = 1ff mt76x2_read_temp_info_from_eeprom:: is_temp_tx_alc=1, temp_tx_alc_enable=1 mt76x2_read_tx_alc_info_from_eeprom:: is_ePA_mode=1, ePA_type=1 mt76x2_read_tx_alc_info_from_eeprom:: [5G band] high_temp_slope=15, low_temp_slope=9 mt76x2_read_tx_alc_info_from_eeprom:: [2G band] high_temp_slope=0, low_temp_slope=0 mt76x2_read_tx_alc_info_from_eeprom:: [5G band] tc_lower_bound=-7, tc_upper_bound=4 mt76x2_read_tx_alc_info_from_eeprom:: [2G band] tc_lower_bound=0, tc_upper_bound=0 mt76x2_get_external_lna_gain::LNA type=0x1, BLNAGain=0xffffff8c, ALNAGain0=0xffffff8c, ALNAGain1=0xffffff8c, ALNAGain2=0xffffff8c 2. Phy Mode = 49 3. Phy Mode = 49 andes_pci_fw_init 0x1300 = 00064340 AntCfgInit: primary/secondary ant 0/1 andes_load_cr:cr_type(2) ChipStructAssign(): MT76x2 hook ! RTMPSetPhyMode: channel is out of range, use first channel=0 MCS Set = ff ff 00 00 00 mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400 usbcore: registered new interface driver usblp Initializing USB Mass Storage driver... usbcore: registered new interface driver usb-storage USB Mass Storage support registered. BGA USB PHY config port 0 u2_slew_rate_calibration mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400 FM_OUT value = 137(0x00000089) SR calibration value = 4 port 1 u2_slew_rate_calibration FM_OUT value = 136(0x00000088) SR calibration value = 4 USB driver version: 751221.2.20160516 xhc_mtk xhc_mtk: xHCI Host Controller xhc_mtk xhc_mtk: new USB bus registered, assigned bus number 1 xhc_mtk xhc_mtk: irq 18, io mem 0x1fb90000 mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400 [/sbin/usb-hotplug.sh] add /var/usb/usb1 hub 1-0:1.0: USB hub found hub 1-0:1.0: 2 ports detected xhc_mtk xhc_mtk: xHCI Host Controller xhc_mtk xhc_mtk: new USB bus registered, assigned bus number 2 mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400 hub 2-0:1.0: USB hub found hub 2-0:1.0: 1 port detected /bin/sh: /etc/init.d/mcpd.sh: not found START enable Lan and Wan... mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400 mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400 mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400 hotplug:beUsbPortSet: USB Port Alias is cpe- hotplug:beUsbPortSet: USB Port Type is Device [/sbin/usb-hotplug.sh] add /var/usb/usb2 mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400 mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400 mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400 mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400 mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400 hotplug:beUsbPortSet: USB Port Alias is cpe- hotplug:beUsbPortSet: USB Port Type is Device mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400 mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400 mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400 mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400 mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400 mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400 mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400 [PMF]APStartUp:: apidx=0, MFPC=1, MFPR=0, SHA256=0 [PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0 [PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE [PMF]APStartUp:: apidx=1, MFPC=1, MFPR=0, SHA256=0 [PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0 [PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE [PMF]APStartUp:: apidx=2, MFPC=1, MFPR=0, SHA256=0 [PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0 [PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE [PMF]APStartUp:: apidx=3, MFPC=1, MFPR=0, SHA256=0 [PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0 [PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE mt76x2_bbp_adjust():rf_bw=0, ext_ch=0, PrimCh=52, HT-CentCh=52, VHT-CentCh=58 mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400 APStartUp(): AP Set CentralFreq at 52(Prim=52, HT-CentCh=52, VHT-CentCh=58, BBP_BW=0) mt76x2_calibration():RDMode is in Silent State, do not calibration. The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4 @@@ ed_monitor_init : ===> @@@ ed_monitor_init : <=== edcca_tx_stop_start():start tx Main bssid = c8:54:4b:xx:xx:xx mt76x2_reinit_agc_gain:original agc_vga0 = 0x4a, agc_vga1 = 0x4a mt76x2_reinit_agc_gain:updated agc_vga0 = 0x4a, agc_vga1 = 0x4a mt76x2_reinit_hi_lna_gain:original hi_lna0 = 0x33, hi_lna1 = 0x33 mt76x2_reinit_hi_lna_gain:updated hi_lna0 = 0x33, hi_lna1 = 0x33 original vga value(chain0) = 4a original vga value(chain1) = 4a <==== rt28xx_init, Status=0 RTMPDrvOpen(1):Check if PDMA is idle! RTMPDrvOpen(2):Check if PDMA is idle! @@@ ed_monitor_init : ===> jiffies=ffffb45b, POLLING_MODE_DETECT_INTV=300 br0: port 9(rai0) entering forwarding state br0: port 9(rai0) entering forwarding state valid subcommands: eth0 addwan delwan miir miiw gswr gsww miir2 miiw2 gswr2 gsww2 vlan acl qos arl reset ratectl macctl portmirror stp phyctl mib gen_pkt pbrw-test version help portmode wptest dsp5qos dstrtcm stormctrl traffic portmatrix dstq valid subcommands: media-type reset lanchip vlanpt status igmpsnoop valid subcommands: media-type reset lanchip vlanpt status igmpsnoop TR181 object IP.Interface.1 zyExtRemoteMgmtSrvObjGet : Enter l3fwdObjGet : Enter l3fwdGetDfGwByRtTable: enter, 4 Restarting ZyIMS VoIP killall: voiceApp: no process killed l3fwdGetDfGwByRtTable: ifname = l3fwdGetDfGwByRtTable: No find default gateway interface!! killall: mm.exe: no process killed zcmdReqProcess():5352 ret=2 zcmdReqProcess():5352 ret=2 killall: icf.exe: no process killed zcmdReqProcess():5352 ret=2 zcmdReqProcess():5352 ret=2 zcmdReqProcess():5352 ret=2 zcmdReqProcess():5352 ret=2 ============================================================================ UPnP Mapping table Dump: TR98 Object Name : UPnP service Id InternetGatewayDevice.Layer3Forwarding : urn:upnp-org:serviceId:Layer3Forwarding.1 ============================================================================ zupnpGetInterfaceName: enter, 4 l3fwdObjGet : Enter l3fwdGetDfGwByRtTable: enter, 4 l3fwdGetDfGwByRtTable: ifname = l3fwdGetDfGwByRtTable: No find default gateway interface!! handlerName=mgmt_srv method=GET i=72 handlerName=firewall method=GET i=26 handlerName=tr69 method=GET i=1 handlerName=wlan method=GET i=29 zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)]. zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)]. handlerName=wifi_others method=GET i=39 zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)]. handlerName=wlan method=GET i=29 zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)]. zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)]. handlerName=wifi_others method=GET i=39 zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)]. handlerName=wlan method=GET i=29 zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)]. zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)]. handlerName=wifi_others method=GET i=39 zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)]. handlerName=wlan method=GET i=29 zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)]. zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)]. handlerName=wifi_others method=GET i=39 zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)]. handlerName=wlan method=GET i=29 zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)]. zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)]. handlerName=wifi_others method=GET i=39 zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)]. handlerName=wlan method=GET i=29 ppe cmd done! zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)]. zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)]. ppe cmd done! ppe cmd done! handlerName=wifi_others method=GET i=39 ppe cmd done! zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)]. handlerName=wlan method=GET i=29 ppe cmd done! zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)]. zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)]. ppe cmd done! ppe cmd done! handlerName=wifi_others method=GET i=39 zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)]. handlerName=wlan method=GET i=29 zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)]. ppe cmd done! zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)]. done handlerName=wifi_others method=GET i=39 zywifid> [ERROR] push_wifidReqProcess:590: Ignore request handler[ZCFG_MSG_WIFI_ST_UPDATE(4012)]. mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400 1970-01-01 00:01:48 zupnp<2423>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 13 1970-01-01 00:01:48 zupnp<2423>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO: EID 17 bind server on /var/lib/.sock/zcfg_sockaddr17 successfully @@@ APStop: go to ed_monitor_exit()!! @@@ ed_monitor_exit : ===> @@@ ed_monitor_exit : <=== [PMF]APStartUp:: apidx=0, MFPC=1, MFPR=0, SHA256=0 [PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0 [PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE [PMF]APStartUp:: apidx=1, MFPC=1, MFPR=0, SHA256=0 [PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0 [PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE [PMF]APStartUp:: apidx=2, MFPC=1, MFPR=0, SHA256=0 [PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0 [PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE [PMF]APStartUp:: apidx=3, MFPC=1, MFPR=0, SHA256=0 [PMF]RTMPMakeRsnIeCap: RSNIE Capability MFPC=1, MFPR=0 [PMF]PMF_MakeRsnIeGMgmtCipher: Insert BIP to the group management cipher of RSNIE mt76x2_bbp_adjust():rf_bw=2, ext_ch=1, PrimCh=52, HT-CentCh=54, VHT-CentCh=58 mt76x2_single_sku::sku_base_pwr = 0x26, DefaultTargetPwr = 0x26, ch_pwr_adj = 0x0(0), 0x13B4: 0x1b0f0400 APStartUp(): AP Set CentralFreq at 58(Prim=52, HT-CentCh=54, VHT-CentCh=58, BBP_BW=2) mt76x2_calibration():RDMode is in Silent State, do not calibration. The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4 @@@ ed_monitor_init : ===> @@@ ed_monitor_init : <=== edcca_tx_stop_start():start tx 1970-01-01 00:01:49 omci<2497>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 18 1970-01-01 00:01:49 omci<2497>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO: EID 52 bind server on /var/lib/.sock/zcfg_sockaddr52 successfully 1970-01-01 00:01:49 omci<2498>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 19 1970-01-01 00:01:49 omci<2498>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO: EID 53 bind server on /var/lib/.sock/zcfg_sockaddr53 successfully [MM] main(): getpid = 2502 AppRegisterSignal(): mm.exe pid = 2502 UITimer_Init()... [MM]dspDriverDeinit(): DSP & Phone Port driver is already De-initialized ==> skip the action!! UITimerProc(): The UI Timer System (thread task: 'vo-USR-UItimer', pid=2502) is running... WARNING: no real random source present! srtpInit....ret = 0 zcmd.c line 5583, zcmdReqProcess() : get ZCFG_MSG_INIT_DATAMODEL_FIN ECONET/zcmd_wrapper.c line 1830, zcmdEnableConfigSave() : enable tr98mapTableSaveFlag and configSaveFlag AppRegisterSignal(): voiceApp pid = 2503 UITimer_Init()... 1970-01-01 00:01:51 voiceApp<2503>, zcfg_msg.c:564, zcfg_msg_serverInit(), INFO: Socket ID = 9 1970-01-01 00:01:51 voiceApp<2503>, zcfg_msg.c:584, zcfg_msg_serverInit(), INFO: EID 12 bind server on /var/lib/.sock/zcfg_sockaddr12 successfully ### ZyIMS VoIP TR-104 Config Data Init Procedure Start ### UITimerProc(): The UI Timer System (thread task: 'vo-USR-UItimer', pid=2503) is running... rai0 bbp: BBP[0x2308]:00000303 ==>Set_Debug_Proc() <==Set_Debug_Proc(RTDebugLevel = 0) main(): getpid = 2501 [ENTERED]:ICF_ES INFO: AUTO_SCALE: 1 INFO: MODE_OF_OPERATION: 0 INFO: SIP_COMPACT_HDRS: NO INFO: NW_TRACE_ENABLED: YES INFO: ICF_DEF_SIP_SERVER_PORT: 6062 INFO: ICF_DEF_SIP_PROXY_PORT: 6061 INFO: TRANSPORT_MODE: 0 INFO: ICF_SYS_RESOURCE_LIMIT: 1 [ENTERING]:icf_es_init [ICF_ES]:PORT initalized succesfully icf_port_open_ipc_channel path = /var/iptk_es.chanl the open channel succeded exit from the es init icf_register_signal(): icf.exe pid = 2501 device rai0 is already a member of a bridge; can't enslave it to bridge br0. device rai1 is already a member of a bridge; can't enslave it to bridge br0. device rai2 is already a member of a bridge; can't enslave it to bridge br0. device rai3 is already a member of a bridge; can't enslave it to bridge br0. route: SIOCADDRT: File exists 1970-01-01 00:01:53 zcmd<852>, zcfg_msg.c:827, zcfg_msg_sendAndGetReply(), ERROR: fail to receive message. ret = -1 <> beVoiceCapConfigStatsUpdate() beVoiceSendMsgToZyIMSAndGetReply failed -5 use default list tr104ConvertPortsType(): <> INVALID parameter value : '' !! tr104ConvertDialingType(): <> INVALID parameter value : '' !! tr104ConvertDialToneType(): <> INVALID parameter value : '' !! tr104ConvertReceiveToneType(): <> INVALID parameter value : '' !! tr104ConvertCallerIDType(): <> INVALID parameter value : '' !! tr104ConvertCallerIDPayloadType(): <> INVALID parameter value : '' !! tr104ConvertTASType(): <> INVALID parameter value : '' !! tr104ConvertTASType(): <> INVALID parameter value : '' !! tr104ConvertPortsType(): <> INVALID parameter value : '' !! tr104ConvertDialingType(): <> INVALID parameter value : '' !! tr104ConvertDialToneType(): <> INVALID parameter value : '' !! tr104ConvertReceiveToneType(): <> INVALID parameter value : '' !! tr104ConvertCallerIDType(): <> INVALID parameter value : '' !! tr104ConvertCallerIDPayloadType(): <> INVALID parameter value : '' !! tr104ConvertTASType(): <> INVALID parameter value : '' !! tr104ConvertTASType(): <> INVALID parameter value : '' !! tr104ConvertRegType(): <> INVALID parameter value : '' !! tr104ConvertCWStatus(): <> INVALID parameter value : '' !! tr104ConvertRegType(): <> INVALID parameter value : '' !! tr104ConvertCWStatus(): <> INVALID parameter value : '' !! ### ZyIMS VoIP TR-104 Config Data Init Procedure Successfully Finished ### MM:voiceDspCoreInit(): Entering... [MM]dspDriverInit(): Start to initialize the DSP [4294948857][slic][INFO][le9662_fxsSetGainLv:L1291]le9662_fxsSetGainLv - 5a67 / 2d4e ([4294948857][slic][INFO][le9662_fxsSetGainLv:L1294]&le9662_fxsSetGainLv - 5a67 / 2d4e P[4294948858][slic][INFO][le9662_fxsSetGainLv:L1291]le9662_fxsSetGainLv - 5a67 / 2d4e ho[4294948859][slic][INFO][le9662_fxsSetGainLv:L1294]le9662_fxsSetGainLv - 5a67 / 2d4e ne Port) driver by calling 'PhoneInit(countryCode=25)'... PhoneInit(): region: 'NOR'. Country Name:NOR result:10946392 result:-10946392 VDSP_GetInstance:275 MM:voiceDspCoreInit(): after calling 'dsp_driver_itf.c/dspDriverGetInitData(initData@0x0, initDataLength=0)' to get the inited data of the MM part 'Endpoint_itf_mm.c/cmPhysEndpt[MAX_ENDPT]'... MM:voiceDspCoreInit(): after calling 'voiceEventIpcSendToVoiceApp()' to send the response message 'VOICE_DSP_INIT_RSP' back to [voiceApp]... MM:voiceDspCoreInit(): Exiting...with ret=1 & ret2=1 (MM_SUCCESS(1), MM_FAILURE(0)) [Adam] Change log level to (EVA_LOG_ERR). [GDI] Change log level to (EVA_LOG_ERR). fxsPhoneIOP_hookFlashDetecTimerSet(): <>Invalid input timer value {flashTimerMin=0, flashTimerMax=0} for the FXS phone port index-0!! The valid condition is: both values should >= 0 except these two cases - (i)both values == 0, and (ii)(flashTimerMin >= flashTimerMax) while both values > 0! fxsPhoneIOP_hookFlashDetecTimerSet(): <>Invalid input timer value {flashTimerMin=0, flashTimerMax=0} for the FXS phone port index-1!! The valid condition is: both values should >= 0 except these two cases - (i)both values == 0, and (ii)(flashTimerMin >= flashTimerMax) while both values > 0! voiceDspInit(): <> The Phone (DSP Init) Data: LocationPtr=0x00000000, Size=-1!! DSP state is Inactive , so exit PhoneInitEventCb now DSP activated success taskCreate()... voiceDspInit(): Leaving with return 0... phonePortVMWISet enters (for 'FXS' phone, phid=8 (8:All 'Ports' of the type), vmwiSigType=2 (1:SigOn,2:SigOff,0:SigNone))... in PhoneEventCb , the event 17 is not support ! in PhoneEventCb , the event 17 is not support ! taskCreate()... flushVoipRoutePolicy(): cmd = iptables -t mangle -F IP_ROUTE2_VOIP ### ZyIMS VoIP Start-up Procedure Finished ### zyRegionLListAdd(): <> VoIP Country/Region Code 'MEX' is NOT supported, Skip it!! zyRegionLListAdd(): <> VoIP Country/Region Code 'CYP' is NOT supported, Skip it!! 1970-01-01 00:01:56 voiceApp<2503>, zcfg_msg.c:396, _msg_send(), ERROR: errno = 2, No such file or directory 1970-01-01 00:01:56 voiceApp<2503>, zcfg_msg.c:397, _msg_send(), ERROR: fail to sendto /var/lib/.sock/zcfg_sockaddr1-3867476 1970-01-01 00:01:56 voiceApp<2503>, zcfg_msg.c:399, _msg_send(), ERROR: srcEid = 12, dstEid = 1, type = 103, without reply get_iface_ipv4_address(): <> ioctl socket 'SIOCGIFADDR' fail for ifName() ==> try to get IP address info by searching the 'iface_ipv4_address_list[]' array database alternatively!! get_iface_ipv4_address(): <> Can't find any matched ifName() even in the 'iface_ipv4_address_list[]' array database!! mmCfgSelfIp()/SipAcctId=0: <> calling 'get_iface_ipv4_address()' to get the IP Address FAIL for the interface pProf->ZyXEL_ActiveBoundIfName='' (where pProf->name='ChangeMe', ZyXEL_BoundIfName='Multi_WAN', ZyXEL_BoundIfList='IP.Interface.3', ZyXEL_BoundIpAddr='') ==> return FALSE now!! mmCfgOfRtpInfo()/SipAcctId=0: <> MM -> IPTK : 'mmCfgSelfIp(ICF_CFG_SET_SELF_IP_REQ)' FAILed ==> return FALSE now!! mmIptkCfgOfSipAccount(PID = 2503): <> 'mmCfgOfRtpInfo(sipAccountId=0)' FAIL ===> try to continue processing the next SIP Account!! get_iface_ipv4_address(): <> ioctl socket 'SIOCGIFADDR' fail for ifName() ==> try to get IP address info by searching the 'iface_ipv4_address_list[]' array database alternatively!! get_iface_ipv4_address(): <> Can't find any matched ifName() even in the 'iface_ipv4_address_list[]' array database!! mmCfgSelfIp()/SipAcctId=1: <> calling 'get_iface_ipv4_address()' to get the IP Address FAIL for the interface pProf->ZyXEL_ActiveBoundIfName='' (where pProf->name='ChangeMe', ZyXEL_BoundIfName='Multi_WAN', ZyXEL_BoundIfList='IP.Interface.3', ZyXEL_BoundIpAddr='') ==> return FALSE now!! mmCfgOfRtpInfo()/SipAcctId=1: <> MM -> IPTK : 'mmCfgSelfIp(ICF_CFG_SET_SELF_IP_REQ)' FAILed ==> return FALSE now!! mmIptkCfgOfSipAccount(PID = 2503): <> 'mmCfgOfRtpInfo(sipAccountId=1)' FAIL ===> try to continue processing the next SIP Account!! mt76x2_calibration(channel = 58) ++++ ===== Configurações ===== É de sua total responsabilidade o uso e implicações que utilizar equipamentos não fornecidos ou homologados pelo ISP podem causar. ===== Bugs, dicas e notas ===== ==== Senhas de supervisor e root ==== Para obter as senhas de supervisor e root, anote o serial do aparelho (impresso na etiqueta) composto por 13 caracteres e iniciando-se com "S190Y", e utilize a seguinte ferramenta de //boginw//: https://github.com/boginw/zyxel-vmg8825-keygen Execute-a com o serial do aparelho desta forma: python main.py S190Yxxxxxxxx Várias senhas serão geradas, utilize a mostrada no tipo **zcfgBeCommonGenKeyBySerialNumMethod2**, que terá o formato de **8 caracteres hexadecimais, minúsculos**. ===== Firmwares ===== ==== Stock ==== Versões oficiais e não modificadas para o aparelho. São de propriedade do fabricante - que detém todos os direitos sobre elas - e mantidas aqui apenas em caráter de arquivamento e espelhamento, podendo ser removidas caso solicitado pelos representantes oficiais da empresa. ==== Custom ==== Todas as versões custom são testadas localmente ao máximo possível, porém seu uso e possíveis implicações são de total responsabilidade do proprietário do aparelho. Não atualize o aparelho sem necessidade; só atualize o aparelho para as versões custom se confirmado que precise das alterações listadas. Os arquivos produzidos pelo O3 Labs são assinados para garantir sua integridade e procedência. Para instruções de como validar as assinaturas, [[about:signing|acesse aqui]]. Versões modificadas com correções e/ou melhorias, baseadas em //releases// oficiais/stock. As versões são cumulativas, ou seja, a mais recente sempre contém também todas as modificações das versões anteriores. É possível atualizar entre versões custom ou stock sem nenhum problema. Note que saltos na versão base podem incluir ou remover parâmetros de configuração, portanto é aconselhável um //factory reset// após realizar tais atualizações. Adicionalmente, efetue estes procedimentos com a fibra **desconectada** do aparelho. Caso a versão base continue a mesma de uma versão custom para a outra, não é necessário o //factory reset//, salvo se solicitado explicitamente na descrição. ===== Agradecimentos ===== Pessoas envolvidas em arquivos, discussões, dicas, doações ou bate papo em geral. Lista em ordem alfabética. skullao