[MLB-WIRELESS] Bricked WAP54GV3 - Tried JTAG

Fri Jan 26 01:55:30 EST 2007

Only have experience with V2 hardware but I would suggest building up the 
serial interface (MAX232 etc.).  If it's working at all, you should get 
something out of the serial port which may give you some clues.

For what it's worth, here's what comes out of my V2's serial port booting up 
Freifunk...

CFE version 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: Tue Jan 20 03:30:40 CST 2004 (vlinux at Test)
Copyright (C) 2000,2001,2002,2003 Broadcom Corporation.

Initializing Arena.
Initializing Devices.
et0: Broadcom BCM47xx 10/100 Mbps Ethernet Controller 3.50.21.0
CPU type 0x29007: 200MHz
Total memory: 0x2000000 bytes (32MB)

Total memory used by CFE:  0x8032BA00 - 0x80430F00 (1070336)
Initialized Data:          0x8032BA00 - 0x8032DB50 (8528)
BSS Area:                  0x8032DB50 - 0x8032EF00 (5040)
Local Heap:                0x8032EF00 - 0x8042EF00 (1048576)
Stack Area:                0x8042EF00 - 0x80430F00 (8192)
Text (code) segment:       0x80300000 - 0x80309420 (37920)
Boot area (physical):      0x00431000 - 0x00471000
Relocation Factor:         I:00000000 - D:00000000

Device eth0:  hwaddr 00-90-4C-60-04-00, ipaddr 192.168.100.250, mask 
255.255.255.0
        gateway not set, nameserver not set
Reading :: Failed.: Timeout occured
Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)
Loading: .. 3704 bytes read
Entry at 0x80001000
Closing network.
Starting program at 0x80001000
CPU revision is: 00029007
Primary instruction cache 8kB, physically tagged, 2-way, linesize 16 bytes.
Primary data cache 4kB, 2-way, linesize 16 bytes.
Linux version 2.4.30 (root at pcacer) (gcc version 3.4.4 (OpenWrt-1.0)) #1 So 
Mär 5 15:51:52 CET 2006
Setting the PFC value as 0x15
Determined physical RAM map:
 memory: 00800000 @ 00000000 (usable)
On node 0 totalpages: 2048
zone(0): 2048 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,jffs2 
init=/etc/preinit noinitrd console=ttyS0,
115200
CPU: BCM4712 rev 1 at 200 MHz
Using 100.000 MHz high precision timer.
Calibrating delay loop... 199.47 BogoMIPS
Memory: 6196k/8192k available (1399k kernel code, 1996k reserved, 96k data, 
80k init, 0k highmem)
Dentry cache hash table entries: 1024 (order: 1, 8192 bytes)
Inode cache hash table entries: 512 (order: 0, 4096 bytes)
Mount cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 2048 (order: 1, 8192 bytes)
Checking for 'wait' instruction...  unavailable.
POSIX conformance testing by UNIFIX
PCI: Fixing up bus 0
PCI: Fixing up bridge
PCI: Fixing up bus 1
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
Initializing RT netlink socket
Starting kswapd
devfs: v1.12c (20020818) Richard Gooch (rgooch at atnf.csiro.au)
devfs: boot_options: 0x1
JFFS2 version 2.2. (C) 2001-2003 Red Hat, Inc.
Squashfs 2.1-r2 (released 2004/12/15) (C) 2002-2004 Phillip Lougher
pty: 256 Unix98 ptys configured
Serial driver version 5.05c (2001-07-08) with MANY_PORTS SHARE_IRQ 
SERIAL_PCI enabled
ttyS00 at 0xb8000300 (irq = 3) is a 16550A
ttyS01 at 0xb8000400 (irq = 0) is a 16550A
b44.c:v0.93 (Mar, 2004)
eth0: Broadcom 47xx 10/100BaseT Ethernet 00:90:4c:60:04:00
Physically mapped flash: Found 1 x16 devices at 0x0 in 16-bit bank
 Intel/Sharp Extended Query Table at 0x0035
cfi_cmdset_0001: Erase suspend on write enabled
Flash device: 0x200000 at 0x1c000000
Creating 5 MTD partitions on "Physically mapped flash":
0x00000000-0x00040000 : "pmon"
0x00040000-0x001f0000 : "linux"
0x000ba890-0x0019f000 : "rootfs"
mtd: partition "rootfs" doesn't start on an erase block boundary -- force 
read-only
0x001f0000-0x00200000 : "nvram"
0x001a0000-0x001f0000 : "OpenWrt"
Initializing Cryptographic API
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP, IGMP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 512 bind 1024)
Linux IP multicast router 0.06 plus PIM-SM
ip_conntrack version 2.1 (5953 buckets, 5953 max) - 328 bytes per conntrack
ip_tables: (C) 2000-2002 Netfilter core team
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
NET4: Ethernet Bridge 008 for NET4.0
802.1Q VLAN Support v1.8 Ben Greear <greearb at candelatech.com>
All bugs added by David S. Miller <davem at redhat.com>
VFS: Mounted root (squashfs filesystem) readonly.
Mounted devfs on /dev
Freeing unused kernel memory: 80k freed
Algorithmics/MIPS FPU Emulator v1.5
Using /lib/modules/2.4.30/diag.o
diag boardtype: 00000446
diag wap54g-v2 detected
Using /lib/modules/2.4.30/switch-core.o
Using /lib/modules/2.4.30/switch-robo.o
Probing device eth0: No Robo switch in managed mode found
Probing device eth1: No such device
Probing device eth2: No such device
Probing device eth3: No such device
insmod: init_module: switch-robo: No such device
Using /lib/modules/2.4.30/switch-adm.o
BFL_ENETADM not set in boardflags. Use force=1 to ignore.
insmod: init_module: switch-adm: No such device
b44: eth0: Link is up at 100 Mbps, full duplex.
b44: eth0: Flow control is off for TX and off for RX.
Unlocking mtd4
init started:  BusyBox v1.01 (2006.04.12-12:05+0000) multi-call binary
kernel.panic = 3
net.ipv4.ip_forward = 1
net.ipv4.ip_conntrack_max = 16348
net.ipv4.icmp_echo_ignore_broadcasts = 1
net.ipv4.icmp_ignore_bogus_error_responses = 1
net.ipv4.tcp_fin_timeout = 30
net.ipv4.tcp_keepalive_time = 120
net.ipv4.tcp_timestamps = 0
net.ipv4.netfilter.ip_conntrack_tcp_timeout_established = 7200
Using /lib/modules/2.4.30/wl.o
eth1: Broadcom BCM4320 802.11 Wireless Controller 3.90.37.0
Using /lib/modules/2.4.30/wlcompat.o
device eth0 entered promiscuous mode
b44: eth0: Link is up at 100 Mbps, full duplex.
b44: eth0: Flow control is off for TX and off for RX.
# none ignored: can't find/create
Starting firewall...
Starting olsrd...

 *** olsr.org - 0.4.10 ***
 Build date: Apr 12 2006
 http://www.olsr.org

Parsing file: "/var/etc/olsrd.conf"
olsr.org - 0.4.10 detaching from the current process...
Fri Dec 23 12:00:00 UTC 2005
Starting olsr prio...
Using /lib/modules/2.4.30/cls_u32.o
Using /lib/modules/2.4.30/sch_prio.o
Using /lib/modules/2.4.30/sch_sfq.o

Please press Enter to activate this console.

BusyBox v1.01 (2006.04.12-12:05+0000) Built-in shell (ash)
Enter 'help' for a list of built-in commands.

  _______                     ________        __
 (       ).-----.-----.-----.)  )  )  ).----.)  )
 (   -   ))  _  )  -__)     ))  )  )  ))   _))   _)
 (_______))   __)_____)__)__))________))__)  )____)
          )__) F R E I F U N K  F I R M W A R E

root at sparklan_testbed:/# 