O3 Labs

Essa página está em modo somente de leitura. Você pode visualizar a fonte, mas não alterá-la. Informe-se com o administrador do Wiki, caso você ache que isso está incorreto.
====== Pace G5500 ======

{{description>Informações sobre o PowerBox GVT Pace G5500 GPON modem/router. Teardown, hacking, unlocking (desbloqueio), firmwares, custom images, recuperação, bridge.}}

===== Disclaimer =====

<WRAP center round important 80%>
Modifique o dispositivo **somente** se for o proprietário. A maioria destes são fornecidos pelo seu ISP em regime de comodato como parte do serviço de internet. **Não** faça modificações caso o aparelho não seja seu.
</WRAP>

<WRAP center round important 80%>
Todos os métodos de desbloqueio e material sobre modificações foram criados pelo O3 Labs e disponibilizados **GRATUITAMENTE** desde o dia de sua elaboração. Espalhem esta informação e ajudem a evitar que **PICARETAS** roubem e vendam estas informações por aí, seja no Mercado Livre ou por quaisquer outros meios.
</WRAP>

===== Hardware =====

Clique na foto para abrir o álbum.

[[https://goo.gl/photos/6oyuvrd5jm1uKJym7 |{{ https://www.tripleoxygen.net/files/devices/pace/g5500/g5500.jpg?700 }}]]

^ SoC | BCM68570IFBG - Broadcom GPON Processor SoC ( BCM968500 Lilac SOC, MIPS 74Kc, 500 MHz ) |
^ RAM | K4B1G1646G-BCH9 - Samsung 1 Gbit (128 MB) DDR3 SDRAM   |
^ Flash | S34ML01G1 - Spansion 1 Gbit (128 MB) NAND |
^ Switch | RTL8214B – Realtek 4-Port GbE |
^ USB | 2 x 2.0 |
^ Wireless | BCM43217 - Broadcom 2x2 802.11b/g/n / 2.4 GHz |
^ FXS | 2 ( SiLabs Si32260 Dual ProSLIC ) |
^ GPON Transceiver | SOGP3412-FAIGA - Superxon Single-fiber GPON ONU Transceiver US 1,244 Gbps / DS 2,488 Gbps |
^ HPNA | 3.1 ( CopperGate CG3211QIR + CopperGate CG3213QIR ) |
^ Serial | Sim |
^ JTAG | ? |

===== Bootlog =====

<code>
Pagezero nandpreload
SOC ID: BL_23570
Init DDR3.... 128MB
Boot from NAND - Pagezero

CPU speed = 497 MHz
Found Flash SPANSION S34ML01G1, size=134217728 bytes, page_size=2048, block_size=131072
Scanning NAND bad blocks...
Done...
NET: MACs configurations: mgm port = 0, emacs_group_mode = QSGMII, e_mode= NONE 
NET: MAC configurations: EMAC0, mode = QSGMII
NET: RDD version: 9.4.0.4
   _                              
  | |__   _____      ____ _ _ __  
  | '_ \ / _ \ \ /\ / / _` | '_ \ 
  | |_) |  __/\ V  V / (_| | | | |
  |_.__/ \___| \_/\_/ \__,_|_| |_|

Portions Copyright (c) 2005-2009 bewan systems
   www.bewan.com


Parameters:
  Product         : B15102
  Product family  : B15100
  Flash size      : 8000000
  DRAM size       : 8000000
  LAN MAC address : xx:xx:xx:xx:xx:xx
  WAN MAC address : xx:xx:xx:xx:xx:xx
  Dual bank boot  : yes
  Reset           : no
  Pairing         : no
  Serial number   : xxxxxxx
  Manufacturing ID: xxxxxxx
  Agile PCA       : 
  WEP key         : xxxxxxx
  WPA key         : xxxxxxx
  Loader version  : 95181
  Capabilities    : 80000000
  Signature       : no 
  Crypted RootFS  : no 


Found valid bootable partition 0:
  Copyright (c) 2006-2010 BeWAN Systems
  Mitrastar G5500 GVT
  B15102
  2016-04-03-23:39:16
  B15102-GVT-GPON-OXY-420000.bin
  Root FS in RAM

Found valid bootable partition 1:
  Copyright (c) 2006-2010 BeWAN Systems
  Mitrastar G5500 GVT
  B15102
  2015-09-03-08:12:15
  B15102-GVT-GPON-RC-100154.bin
  Root FS in RAM

Booting from partition 0 in flash.

Saving linux command line before uncompression
bewan_ramfs found in mem_parts new mem_parts is:
mem_parts=user:0x5a8a000(ram),bewan_ramfs:0xb76000(res),dsp:0x200000(res),mc:0x400000(res),tm:0x1400000(res)

Loading linux kernel image

Load address = 80010000
Uncompressing Linux............................................
Flushing cache...
done, booting the kernel.
start addr = 804b20c0

Board: Lilac Evaluation (968500CHERRY)
CPU Clock:            497 MHz
DDR Clock:            531 MHz
RNR Clock:            797 MHz
Peripheral BUS Clock: 62 MHz
plat_mem_setup
bl_lilac_mem_rsrv_init 1
p='user:0x5a8a000(ram),bewan_ramfs:0xb76000(res),dsp:0x200000(res),mc:0x400000(res),tm:0x1400000(res) irqaffinity=0'
bl_lilac_mem_rsrv_init 2
map_name[0].name='user'
map_name[1].name='bewan_ramfs'
map_name[2].name='dsp'
map_name[3].name='mc'
map_name[4].name='tm'ÿLinux version 3.4.11-rt19 (devbuild@lxc-lxc_gvt_gpon_rc) (gcc version 4.6.2 (Buildroot 2011.11) ) #1 PREEMPT Thu Sep 3 09:11:04 UTC 2015
CPU revision is: 0001974c (MIPS 74Kc)
Lilac SOC setup
Determined physical RAM map:
 memory: 05a8a000 @ 00000000 (usable)
 memory: 00b76000 @ 05a8a000 (reserved)
 memory: 00200000 @ 06600000 (reserved)
 memory: 00400000 @ 06800000 (reserved)
 memory: 01400000 @ 06c00000 (reserved)
Zone PFN ranges:
  DMA      0x00000000 -> 0x00001000
  Normal   0x00001000 -> 0x00005a8a
  HighMem  empty
Movable zone start PFN for each node
Early memory PFN ranges
    0: 0x00000000 -> 0x00008000
On node 0 totalpages: 23178
free_area_init_node: node 0, pgdat 805cdf40, node_mem_map 81000000
  DMA zone: 32 pages used for memmap
  DMA zone: 0 pages reserved
  DMA zone: 4064 pages, LIFO batch:0
  Normal zone: 150 pages used for memmap
  Normal zone: 18932 pages, LIFO batch:3
pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
pcpu-alloc: [0] 0 
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 22996
Kernel command line:  console=ttyS0,115200n8 bewan_fs_in_ram bewan_fs_addr=0x85a8a000 bewan_fs_size=0xb76000 root=/dev/mtdblock7 mtdparts=S34ML01G1:0x200000@0x0(Loader),0x200000@0x200000(Nvram),0x2000000@0x400000(Firmware),0x2000000@0x2400000(OldFirmware),0x800000@0x4400000(Nvlog),0x3380000@0x4c00000(Extra_5) rootfstype=squashfs mem_parts=user:0x5a8a000(ram),bewan_ramfs:0xb76000(res),dsp:0x200000(res),mc:0x400000(res),tm:0x1400000(res) irqaffinity=0
PID hash table entries: 512 (order: -1, 2048 bytes)
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
Writing ErrCtl register=00000260
Readback ErrCtl register=00000260
Memory: 85312k/92712k available (4802k kernel code, 7400k reserved, 1080k data, 204k init, 0k highmem)
NR_IRQS:256
console [ttyS0] enabled
Calibrating delay loop... 248.21 BogoMIPS (lpj=1241088)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
--Kernel Config--
  SMP=0
  PREEMPT=1
  DEBUG_SPINLOCK=0
  DEBUG_MUTEXES=0
Broadcom Logger v0.1 Sep  3 2015 08:56:19
NET: Registered protocol family 16
registering PCI controller with io_map_base unset
registering PCI controller with io_map_base unset
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
PCI host bridge to bus 0000:00
pci_bus 0000:00: root bus resource [mem 0x10000000-0x13feffff]
pci_bus 0000:00: root bus resource [io  0x13ff0000-0x13ffffff]
pci 0000:00:00.0: [14e4:a8db] type 00 class 0x028000
pci 0000:00:00.0: reg 10: [mem 0x00000000-0x00007fff 64bit]
pci 0000:00:00.0: supports D1 D2
pci 0000:00:00.0: BAR 0: assigned [mem 0x10000000-0x10007fff 64bit]
PCI host bridge to bus 0000:01
pci_bus 0000:01: root bus resource [mem 0x14000000-0x17feffff]
pci_bus 0000:01: root bus resource [io  0x17ff0000-0x17ffffff]
skbFreeTask created successfully
BLOG v3.0 Initialized
BLOG Rule v1.0 Initialized
Broadcom IQoS v0.1 Sep  3 2015 09:07:51 initialized
Broadcom GBPM v0.1 Sep  3 2015 09:07:51 initialized
Switching to clocksource MIPS
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP: reno registered
UDP hash table entries: 256 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
NET: Registered protocol family 1
RPC: Registered named UNIX socket transport module.
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
RPC: Registered tcp NFSv4.1 backchannel transport module.
PCI: CLS 0 bytes, default 32
init_bcm_tstamp: unhandled mips_hpt_freq=248832000, adjust constants in bcm_tstamp.c
bcm_tstamp initialized, (hpt_freq=248832000 2us_div=248 2ns_mult=0 2ns_shift=0)
squashfs: version 4.0 (2009/01/31) Phillip Lougher
jffs2: version 2.2. (NAND) Â© 2001-2006 Red Hat, Inc.
fuse init (API version 7.18), FUSE_CACHE_PAGE
msgmni has been set to 166
io scheduler noop registered (default)
Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
ñserial8250: ttyS0 at MMIO 0xb90a0400 (irq = 116) is a 16550A
ONFI param page 0 valid
ONFI flash detected
NAND device: Manufacturer ID: 0x01, Chip ID: 0xf1 (AMD S34ML01G1)
Boot from NAND FLASH
6 cmdlinepart partitions found on MTD device S34ML01G1
Creating 6 MTD partitions on "S34ML01G1":
0x000000000000-0x000000200000 : "Loader"
0x000000200000-0x000000400000 : "Nvram"
0x000000400000-0x000002400000 : "Firmware"
0x000002400000-0x000004400000 : "OldFirmware"
0x000004400000-0x000004c00000 : "Nvlog"
0x000004c00000-0x000007f80000 : "Extra_5"
Creating 1 MTD partitions on "RAM":
0x000000000000-0x000000b76000 : "Root FS"
PPP generic driver version 2.4.2
PPP BSD Compression module registered
PPP Deflate Compression module registered
NET: Registered protocol family 24
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
BLUSB : ehci_hcd_bl_lilac_drv_probe(290): No OverCurrentFeature for USB_0
bl-lilac-ehci bl-lilac-ehci.0: LILAC USB EHCI Host Controller
bl-lilac-ehci bl-lilac-ehci.0: new USB bus registered, assigned bus number 1
bl-lilac-ehci bl-lilac-ehci.0: irq 140, io mem 0x18004000
bl-lilac-ehci bl-lilac-ehci.0: USB 2.0 started, EHCI 1.00
usb usb1: New USB device found, idVendor=1d6b, idProduct=0002
usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
usb usb1: Product: LILAC USB EHCI Host Controller
usb usb1: Manufacturer: Linux 3.4.11-rt19 bl_lilac_ehci
usb usb1: SerialNumber: bl_usb_ehci_0
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
BLUSB : bl_lilac_probe(171): bl_usb_ehci_0 is probed (hcd=0x855cbc00)
BLUSB : ehci_hcd_bl_lilac_drv_probe(290): No OverCurrentFeature for USB_1
bl-lilac-ehci bl-lilac-ehci.1: LILAC USB EHCI Host Controller
bl-lilac-ehci bl-lilac-ehci.1: new USB bus registered, assigned bus number 2
bl-lilac-ehci bl-lilac-ehci.1: irq 141, io mem 0x18004400
bl-lilac-ehci bl-lilac-ehci.1: USB 2.1 started, EHCI 1.00
usb usb2: New USB device found, idVendor=1d6b, idProduct=0002
usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1
usb usb2: Product: LILAC USB EHCI Host Controller
usb usb2: Manufacturer: Linux 3.4.11-rt19 bl_lilac_ehci
usb usb2: SerialNumber: bl_usb_ehci_1
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
BLUSB : bl_lilac_probe(171): bl_usb_ehci_1 is probed (hcd=0x855cb400)
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
bl-lilac-ohci bl-lilac-ohci.0: LILAC USB OHCI Host Controller
bl-lilac-ohci bl-lilac-ohci.0: new USB bus registered, assigned bus number 3
bl-lilac-ohci bl-lilac-ohci.0: irq 140, io mem 0x18004100
usb usb3: New USB device found, idVendor=1d6b, idProduct=0001
usb usb3: New USB device strings: Mfr=3, Product=2, SerialNumber=1
usb usb3: Product: LILAC USB OHCI Host Controller
usb usb3: Manufacturer: Linux 3.4.11-rt19 bl_lilac_ohci
usb usb3: SerialNumber: bl_usb_ohci_0
hub 3-0:1.0: USB hub found
hub 3-0:1.0: 1 port detected
BLUSB : bl_lilac_probe(373): bl_usb_ohci_0 is probed (hcd=0x85654c00)
bl-lilac-ohci bl-lilac-ohci.1: LILAC USB OHCI Host Controller
bl-lilac-ohci bl-lilac-ohci.1: new USB bus registered, assigned bus number 4
bl-lilac-ohci bl-lilac-ohci.1: irq 141, io mem 0x18004500
usb usb4: New USB device found, idVendor=1d6b, idProduct=0001
usb usb4: New USB device strings: Mfr=3, Product=2, SerialNumber=1
usb usb4: Product: LILAC USB OHCI Host Controller
usb usb4: Manufacturer: Linux 3.4.11-rt19 bl_lilac_ohci
usb usb4: SerialNumber: bl_usb_ohci_1
hub 4-0:1.0: USB hub found
hub 4-0:1.0: 1 port detected
BLUSB : bl_lilac_probe(373): bl_usb_ohci_1 is probed (hcd=0x85654400)
Bewan LedButton init
brcmboard: brcm_board_init entry
PHYSICAL MEMORY SIZE DETECTED: 128MB
kerSysScreenPciDevices: 0x14e4:0xa8db:(slot 0) detected
BPM: tot_mem_size=134217728B (128MB), buf_mem_size <10%> =13421770B (12MB), num of buffers=6657, buf size=2016
Broadcom BPM Module Char Driver v0.1 Sep  3 2015 09:01:49 Registered<244>
netem: version 1.3
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (1333 buckets, 5332 max)
IPv4 over IPv4 tunneling driver
gre: GRE over IPv4 demultiplexor driver
nf_nat_pt: no ports specified
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP: cubic registered
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
Initializing MCPD Module
Ebtables v2.0 registered
ebt_time registered
ebt_wmm_mark registered
8021q: 802.1Q VLAN Support v1.8
VFS: Mounted root (squashfs filesystem) readonly on device 31:7.
Freeing unused kernel memory: 204k freed
Algorithmics/MIPS FPU Emulator v1.5
Loading drivers and kernel modules... 

Loading PCM shim driver
endpointdd: module license 'Proprietary' taints kernel.
Disabling lock debugging due to kernel taint
Endpoint: endpoint_init entry
Endpoint: endpoint_init COMPLETED
 _                              
| |__   _____      ____ _ _ __  
| '_ \ / _ \ \ /\ / / _` | '_ \ 
| |_) |  __/\ V  V / (_| | | | |
|_.__/ \___| \_/\_/ \__,_|_| |_|

/etc/bewan/init.d/update-config
update-config done

Please press Enter to activate this console. Bewan Watchdog Timer: V2.0, timer margin: 100 sec.
SOFTDOG: setting margin to 180 seconds.
Loading additional drivers and kernel modules dependent on RDPA init ...
LOGGER driver Init Done : 0x8479f580
Creating CPU ring for queue number 0 with 128 packets descriptor=0xc0dcca10
 Done initializing Ring 0 Base=0xa4133080 End=0xa4133880 calculated entries= 128 RDD Base=0x04133080 descriptor=0xc0dcca10
ERR: port_attr_emac_stat_read#599: port/index=lan0: status:Error in parameters. emac id is not enable 
Bridge fastpath module. compiled Sep  3 2015 , 09:06:35
NBUFF v1.0 Initialized
Initialized fcache state
Broadcom Packet Flow Cache  Char Driver v2.2 Sep  3 2015 09:02:18 Registered<242>
Created Proc FS /procfs/fcache
Broadcom Packet Flow Cache registered with netdev chain
Broadcom Packet Flow Cache learning via BLOG enabled.
[FHW]  pktDbgLvl[0xc0eb94c0]=0
[FHW]  fhw_construct: 
Initialized Fcache HW accelerator layer state
Constructed Broadcom Packet Flow Cache v2.2 Sep  3 2015 09:02:18
flwStatsThread created
Broadcom Packet Flow Cache HW acceleration enabled.
Broadcom Packet Flow Cache HW acceleration enabled.
Broadcom BCMBL_23570 Ethernet Network Device v0.1 Sep  3 2015 09:06:36
dgasp: kerSysRegisterDyingGaspHandler: bcmsw registered 
ERR: port_attr_emac_stat_read#599: port/index=lan0: status:Error in parameters. emac id is not enable 
eth0: MAC Address: xx:xx:xx:xx:xx:xx
ERR: port_attr_emac_stat_read#599: port/index=lan1: status:Error in parameters. emac id is not enable 
eth1: MAC Address: xx:xx:xx:xx:xx:xx
ERR: port_attr_emac_stat_read#599: port/index=lan2: status:Error in parameters. emac id is not enable 
eth2: MAC Address: xx:xx:xx:xx:xx:xx
ERR: port_attr_emac_stat_read#599: port/index=lan3: status:Error in parameters. emac id is not enable 
eth3: MAC Address: xx:xx:xx:xx:xx:xx
ERR: port_attr_emac_stat_read#599: port/index=lan4: status:Error in parameters. emac id is not enable 
eth4: MAC Address: xx:xx:xx:xx:xx:xx
Creating CPU ring for queue number 3 with 512 packets descriptor=0xc0dcca94
 Done initializing Ring 3 Base=0xa41f8080 End=0xa41fa080 calculated entries= 512 RDD Base=0x041f8080 descriptor=0xc0dcca94
eth0 Link UP 1000 mbps full duplex
eth1 Link UP 1000 mbps full duplex
eth2 Link UP 1000 mbps full duplex
cpu Ring 3 has been flushed
eth3 Link UP 1000 mbps full duplex
eth4 Link UP 1000 mbps full duplex
Creating CPU ring for queue number 8 with 1024 packets descriptor=0xc0dccb70
 Done initializing Ring 8 Base=0xa2198080 End=0xa219c080 calculated entries= 1024 RDD Base=0x02198080 descriptor=0xc0dccb70
 Wifi Forwarding Driver initialized !
timer = 500, threshold = 1024 number_of_packets_to_read = 128 fist pci queue 8 number_of_queues = 1
wl: dsl_tx_pkt_flush_len=338
wl: norm_wmark_tot=4327, pktc_wmark_tot=2048
Initializing WLCSM Module
PCI: Enabling device 0000:00:00.0 (0000 -> 0002)
wl: passivemode=1
wl0: creating kthread wl0-kthrd
wl: napimode=0
Neither SPROM nor OTP has valid image
wl:srom/otp not programmed, using main memory mapped srom info(wombo board)
wl: ID=pci/0/0/
wl: ID=pci/0/0/
wl: loading /etc/wlan/bcm43217_map.bin
srom rev:8
wl0: allocskbmode=1 currallocskbsz=512
wl0: Broadcom BCMa8db 802.11 Wireless Controller 6.37.14.4803.cpe4.14L04Apatch1.0
dgasp: kerSysRegisterDyingGaspHandler: wl0 registered 
Creating CPU ring for queue number 2 with 32 packets descriptor=0xc0dcca68
 Done initializing Ring 2 Base=0xa5104c80 End=0xa5104e80 calculated entries= 32 RDD Base=0x05104c80 descriptor=0xc0dcca68
[NTC ploamFsm] printSerialPasswd: SN=xx:xx:xx:xx:xx:xx
[NTC ploamFsm] printSerialPasswd: PW=xx:xx:xx:xx:xx:xx
dgasp: kerSysRegisterDyingGaspHandler: gpon0 registered 
[NTC ploamFsm] bcm_ploamCreate: ploam driver created.
Creating CPU ring for queue number 4 with 64 packets descriptor=0xc0dccac0
 Done initializing Ring 4 Base=0xa522d080 End=0xa522d480 calculated entries= 64 RDD Base=0x0522d080 descriptor=0xc0dccac0
Broadcom 802.1Q VLAN Interface, v0.1
[INF rdpadrv] rdpa_cmd_drv_init: Broadcom Runner Packet Processor Char Driver v0.2 Sep  3 2015 09:06:21 Registered. Device: bcmrdpa Ver:<251>

[INF rdpadrv] rdpa_cmd_drv_init: RDPA driver init: OK
LED and Buttons driver: v2.0 (C) Copyright Bewan Systems
PON Leds management
/etc/bewan/init.d/phy stop 1 1
/etc/bewan/init.d/phy stop 1 2
/etc/bewan/init.d/phy stop 1 3
/etc/bewan/init.d/phy stop 1 4
/etc/bewan/init.d/phy nothing 1 5
/etc/bewan/init.d/shell-strictmode start
######### USBFS 
/etc/bewan/init.d/syslog start
/etc/bewan/init.d/time start
/etc/bewan/init.d/rtsp_conntrack start
nf_conntrack_rtsp v0.6.30 loading
nf_conntrack_rtsp: registering port #0: 554
nf_nat_rtsp v0.6.30 loading
/etc/bewan/init.d/ethernet start 1
/etc/bewan/init.d/interface start LANEthernetInterface 1
/etc/bewan/init.d/ethernet start 2
/etc/bewan/init.d/interface start LANEthernetInterface 2
/etc/bewan/init.d/ethernet start 3
/etc/bewan/init.d/interface start LANEthernetInterface 3
eth0 Link DOWN.
eth1 Link DOWN.
/etc/bewan/init.d/ethernet start 4
/etc/bewan/init.d/interface start LANEthernetInterface 4
/etc/bewan/init.d/ethernet start 5
/etc/bewan/init.d/interface start LANEthernetInterface 5
/etc/bewan/init.d/ethled start
eth2 Link DOWN.
eth3 Link DOWN.
ip_gre: GRE over IPv4 tunneling driver
/etc/bewan/init.d/switch_vlan_8021q nothing 1
/etc/bewan/init.d/switch_vlan_portbased nothing 1
/etc/bewan/rc.d/S12gponwan
/etc/bewan/rc.d/S13smd
monitor task is initialized pid= 1046 
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<3> RDPA_IOC_SYS arg<0x7FAD4C70>
[INF rdpadrv] rdpa_cmdOpen: OPEN RDPA Char Device
[INF rdpadrv] rdpa_cmdIoctl: RDPA Char Device: cmd<3> RDPA_IOC_SYS arg<0x7F9B92A0>
/etc/bewan/init.d/lan start 1
/etc/bewan/init.d/lanif start 1
Broadcom Packet Flow Cache learning via BLOG enabled.
add eth0 to lan1 bridge
device eth0 entered promiscuous mode
add eth1 to lan1 bridge
device eth1 entered promiscuous mode
add eth2 to lan1 bridge
device eth2 entered promiscuous mode
add eth3 to lan1 bridge
device eth3 entered promiscuous mode
ADDRCONF(NETDEV_UP): lan1: link is not ready
/etc/bewan/init.d/lanip start 1
/etc/bewan/scripts/ip-up-dhcp lan1 192.168.25.1/255.255.255.0
/etc/bewan/ip-up-lan.d/S01sroutes 1
/etc/bewan/ip-up-lan.d/S10nat 1
/etc/bewan/ip-up-lan.d/S19lanneighbor 1
/etc/bewan/init.d/lanneighbor restart lan1
/etc/bewan/ip-up-lan.d/S20lanarp 1
/etc/bewan/init.d/lanarp start 1
/etc/bewan/ip-up-lan.d/S21antispoofing 1
/etc/bewan/init.d/antispoofing nothing
/etc/bewan/ip-up-lan.d/S50samba 1
/etc/bewan/ip-up-lan.d/S51ippos 1
/etc/bewan/ip-up-lan.d/S60-igmp 1
/etc/bewan/ip-up-lan.d/S60-miniupnpd 1
/etc/bewan/ip-up-lan.d/S60mdns 1
/etc/bewan/ip-up-lan.d/S60ntp 1
/etc/bewan/ip-up-lan.d/S61raven 1
/etc/bewan/ip-up-lan.d/S61timezone 1
/etc/bewan/ip-up-lan.d/S62lynx 1
/etc/bewan/ip-up-lan.d/S70-voip 1
/etc/bewan/ip-up-lan.d/S90hosts 1
/etc/bewan/init.d/host restart
/etc/bewan/ip-up-lan.d/S90webauth 1
/etc/bewan/ip-up-lan.d/S91superdlna 1
/etc/bewan/init.d/landhcp start 1
/etc/bewan/init.d/dhcp start lan1
/etc/bewan/init.d/dnsmasq start lan1
/etc/bewan/init.d/dhcrelay nothing lan1
/etc/bewan/init.d/dhcpclient nothing lan1
/etc/bewan/init.d/lanip6 nothing 1
/etc/bewan/init.d/passthrough nothing 1
/etc/bewan/init.d/lan start 2
/etc/bewan/init.d/lanif start 2
ADDRCONF(NETDEV_UP): lan2: link is not ready
/etc/bewan/init.d/lanip nothing 2
/etc/bewan/init.d/lanip6 nothing 2
/etc/bewan/init.d/passthrough start 2
/etc/bewan/init.d/wan start 5
/etc/bewan/init.d/wannet start 5 ipv4
/etc/bewan/init.d/wannet start 5 ipv6
/etc/bewan/init.d/inetd start
/etc/bewan/init.d/dnsmasq start all
/etc/bewan/init.d/host start
/etc/bewan/init.d/users start
import diag
import unix
import web
/etc/bewan/user.d/unix: root
/etc/bewan/user.d/diag: admin
/etc/bewan/user.d/web: admin/iad_basic
/etc/bewan/user.d/web: admin/iad_admin
/etc/bewan/log/firewall_log_daemon start
/etc/bewan/log/firewall_nvlog start
/etc/bewan/init.d/cron start
/etc/bewan/log/firewall_collector_conntrack start
/etc/bewan/log/firewall_collector_nftables start
/etc/bewan/init.d/fwrules ipv4 start
/etc/bewan/init.d/fwrules ipv6 nothing
/etc/bewan/init.d/iptables start
/etc/bewan/init.d/antispoofing start
/etc/bewan/init.d/ip6tables start
/etc/bewan/init.d/antispoofing6 start
/etc/bewan/init.d/conntrack start
/etc/bewan/init.d/ebtables start
/etc/bewan/init.d/igmp start
/etc/bewan/init.d/mld nothing
/etc/bewan/init.d/alg
/etc/bewan/init.d/routes ipv4 start
/etc/bewan/init.d/routes ipv6 nothing
/etc/bewan/init.d/igmp nothing
/etc/bewan/init.d/ledbutton nothing
/etc/bewan/init.d/dyndns nothing 1
/etc/bewan/init.d/ntp start
/etc/bewan/init.d/cron restart
/etc/bewan/init.d/cron restart
/etc/bewan/init.d/tr069 start
/etc/bewan/init.d/web_iad start
/etc/bewan/init.d/http start 1
/etc/bewan/init.d/webauth start
/etc/bewan/init.d/web_nas nothing
/etc/bewan/init.d/phy start all all
/etc/bewan/init.d/phy start 1 1
/etc/bewan/init.d/phy start 1 2
/etc/bewan/init.d/phy start 1 3
/etc/bewan/init.d/phy start 1 4
/etc/bewan/init.d/phy nothing 1 5
SOFTDOG: setting margin to 60 seconds.
/etc/bewan/init.d/ethlink start 1
bewan rc complete
eth1 Link UP 100 mbps full duplex
lan1: port 2(eth1) entered forwarding state
lan1: port 2(eth1) entered forwarding state
ADDRCONF(NETDEV_CHANGE): lan1: link becomes ready
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
usbcore: registered new interface driver usblp
/etc/bewan/init.d/cron nothing
/etc/bewan/init.d/samba start
/etc/bewan/init.d/voip start
/etc/bewan/init.d/miniupnpd start
/etc/bewan/init.d/mdns start
/etc/bewan/init.d/webauth nothing
/etc/bewan/init.d/hpna nothing
/etc/bewan/init.d/superdlna.init start
/etc/bewan/init.d/falcon.init start
/etc/bewan/init.d/lynx.init start
/etc/bewan/init.d/raven.init start
ip_set version 4 loaded
/etc/bewan/init.d/cron restart
/etc/bewan/init.d/qos start 0
QOS: Skip WANEthernetInterface 1
QOS: Skip WANEthernetInterface 1
QOS: Skip WANEthernetInterface 1
QOS: Skip WANEthernetInterface 1
QOS: Skip WANEthernetInterface 1
QOS: Skip WANEthernetInterface 1
QOS: Skip WANEthernetInterface 1
QOS: Skip WANEthernetInterface 1
!! Deactivate IP checksum validation !!
/etc/bewan/init.d/ippos.init start
rc2 complete
/etc/bewan/init.d/wificall broadcom start_vendor_radiowifi start 1
START RADIO
/etc/bewan/init.d/wificall broadcom start_vendor_ssidwifi start 1 wl0
/etc/bewan/init.d/lanif restart 1
add wl0 to lan1 bridge
device wl0 entered promiscuous mode
lan1: port 5(wl0) entered forwarding state
lan1: port 5(wl0) entered forwarding state
</code>

===== Firmware =====

==== Stock Firmware ====

Imagens originais não disponíveis por questões de direitos autorais.

==== Custom Firmware ====

<WRAP center round important 60%>
Apesar do processo de gravação de imagens ter sido testado e ser seguro, sempre há riscos no procedimento, tal como queda de energia no momento da gravação. Quaisquer eventualidades é de sua responsabilidade. **NÃO** desligue o modem ou remova o cabo de rede por todo o processo de gravação.
</WRAP>

=== 420k Series ===

A série 420k de imagens são baseadas na versão original 100154. Elas conterão correções, melhorias e/ou novos recursos em comparação as originais.

== 420000 ==

  * Página de configuração avançada, permitindo alterar:
    * Access Class
    * Cliente TR069
  * Console serial
  * Removido tag "-test" nos informs/reports

A página encontra-se em "Gerenciamento" > "Ferramentas" > aba "Avançado".

[[https://www.tripleoxygen.net/files/devices/pace/g5500/firmware/custom/B15102-GVT-GPON-OXY-420000.bin|Download]] (SHA-1: 555edea99507a31642232d712cc7505f42720fe5)

=== Instalação ===

Obtenha o "[[modem:g5500#g5500fwuploader]]"; e siga os passos.

== g5500fwuploader ==

Baixe o utilitário [[https://www.tripleoxygen.net/files/devices/pace/g5500/tools/g5500fwuploader.zip|g5500fwuploader.zip]] e execute. Escolha a imagem a ser gravada e insira o IP do modem nas caixas correspondentes. É necessário obter um "token" e inserir no programa antes de continuar. Passa consegui-lo, faça:

  * Abra a página de configuração do modem em seu navegador (geralmente, http://192.168.25.1);
  * Vá em "Gerenciamento" > "Ferramentas";
  * Faça login com as credenciais do modem (padrão = admin:gvt12345);
  * Abra o console javascript do navegador
    * Para Chrome, pressione CTRL + SHIFT + J;
    * Para Firefox, pressione CTRL + SHIFT + K;
  * Na janela inferior que se abre, clique nela, digite o mostrado abaixo e dê ENTER:
    * pageData.token
  * Aparecerá logo abaixo um código com 6 dígitos, letras e números (ex.: g8Pf2Q). Este é o token. Copie e coloque no g5500fwuploader. Copie apenas os dígitos, as aspas não são necessárias.
  * Clique em "Gravar".

== Gravação ==

A imagem será enviada ao modem e o LED "Ligado" piscará em vermelho indicando a gravação. Aguarde até que ele pare e acenda verde. Reinicie o modem.

Após reinicializar, verifique que a imagem foi instalada com sucesso olhando a versão em "Sobre o Power Box".

Caso o LED não comece a piscar em vermelho após clicar em "Gravar", verifique se o token obtido é válido, executando os passos acima novamente.

== Agradecimentos ==

Pessoas envolvidas em discussões, dicas ou bate papo em geral. Lista em ordem alfabética.