AMIT CDM530AM

Default SSID: default (101 addl. devices)
Default IP address: 192.168.123.254
the IP 192.168.123.254 is used by 28 additional devices
of which 13 are AMIT devices
Default login user: blank
Default login password: admin
blank:admin credentials used by 278 additional devices
of which 10 are AMIT devices

Manuf/OEM/ODM

AMIT

Retail

FCC approval date

21 July 2009

Country of manuf

China

Radio 1

Chip1

Ralink RT3050

Wireless interface OUI

00:50:18

Antenna Connector Type

none specified

MIMO status

1x1:1

Wireless Standard

IEEE 802.11b/g/n

802.11n

up to 150 Mbps

802.11g

up to 54 Mbps

802.11b

up to 11 Mbps

WiFi Operating Frequency

2.4 GHz

	FCC ID
4G Systems XSBox Move	PBLCDM530AM
D-Link DWR-131 rev A1	KA2WR131A1 PBLCDM530AM
TRENDnet TEW-655BR3G	XU8TEW655BR3G PBLCDM530AM

	CPU1 brand	Radio1 chip1 brand	Radio1 chip2 brand
AMIT CDM530AM	Ralink	Ralink
AMIT CDM530AM-002	Ralink	Ralink

For a list of all currently documented Ralink chipsets with specifications, see Ralink.

For a list of all currently documented AMIT device with specifications, see AMIT.

• 150 Mbps - 1SS 2.4GHz 802.11n (40MHz chan.) = N150 class

Overview

"11340Y20EA00003A1" is silkscreened on the board in the FCC photos.

"11340Y20EA00004A1" is silkscreened on a production unit (see below pictures).

The default SSID is default.

JTAG-Serial Info

Serial

boot log
JBoot B252 JRecovery Version R1.2 2010/06/17 13:35 Flash MXIC-22A7 0xBF000000-0x400000 x16 ............... Starting kernel @80000000... LINUX started... THIS IS ASIC Linux version 2.6.21 (charles@uranus) (gcc version 3.4.2) #13 Thu Jul 22 11:57:06 CST 2010 The CPU feqenuce set to 320 MHz CPU revision is: 0001964c Determined physical RAM map: memory: 02000000 @ 00000000 (usable) Built 1 zonelists. Total pages: 8128 Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock3 Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes. Primary data cache 16kB, 4-way, linesize 32 bytes. Synthesized TLB refill handler (20 instructions). Synthesized TLB load handler fastpath (32 instructions). Synthesized TLB store handler fastpath (32 instructions). Synthesized TLB modify handler fastpath (31 instructions). Cache parity protection disabled cause = 10800000, status = 1100ff00 PID hash table entries: 128 (order: 7, 512 bytes) calculating r4koff... 00138800(1280000) CPU frequency 320.00 MHz Using 160.000 MHz high precision timer. Console: colour dummy device 80x25 Dentry cache hash table entries: 4096 (order: 2, 16384 bytes) Inode-cache hash table entries: 2048 (order: 1, 8192 bytes) Memory: 29304k/32768k available (2389k kernel code, 3464k reserved, 551k data, 124k init, 0k highmem) Mount-cache hash table entries: 512 NET: Registered protocol family 16 SCSI subsystem initialized usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb Time: MIPS clocksource has been installed. NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 1024 (order: 1, 8192 bytes) TCP bind hash table entries: 1024 (order: 0, 4096 bytes) TCP: Hash tables configured (established 1024 bind 1024) TCP reno registered squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher squashfs: LZMA suppport for slax.org by jro fuse init (API version 7.8) io scheduler noop registered (default) FLASH_API: MAN_ID=C2 DEV_ID=22A7 SIZE=4MB ------------------GPIO-------------------------- GPIOMODE:2df SLIC INTR ==> gpio 0 Ralink gpio driver initialized HDLC line discipline: version $Revision: 1.1.1.1 $, maxframe=4096 N_HDLC line discipline registered. Serial: 8250/16550 driver $Revision: 1.3 $ 2 ports, IRQ sharing disabled serial8250: ttyS0 at I/O 0xb0000500 (irq = 37) is a 16550A serial8250: ttyS1 at I/O 0xb0000c00 (irq = 12) is a 16550A loop: loaded (max 8 devices) rdm_major = 254 GDMA1_MAC_ADRH -- : 0x00000000 GDMA1_MAC_ADRL -- : 0x00000000 Ralink APSoC Ethernet Driver Initilization. v1.60 256 rx/tx descriptors allocated, mtu = 1500! GDMA1_MAC_ADRH -- : 0x0000dc91 GDMA1_MAC_ADRL -- : 0xf659bfab PROC INIT OK! TX100 AD/DA current bias: 7054 TX100 slew rate control: 0038 PPP generic driver version 2.4.2 PPP Deflate Compression module registered PPP BSD Compression module registered NET: Registered protocol family 24 ralink flash device: 0x400000 at 0xbf000000 Ralink SoC physically mapped flash: Found 1 x16 devices at 0x0 in 16-bit bank Amd/Fujitsu Extended Query Table at 0x0040 Ralink SoC physically mapped flash: Swapping erase regions for broken CFI table. number of CFI chips: 1 cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness. Creating 6 MTD partitions on "Ralink SoC physically mapped flash": 0x00000000-0x00400000 : "Whole" 0x00000000-0x00010000 : "Bootloader" 0x00010000-0x00110000 : "Kernel" 0x00110000-0x003a0000 : "RootFS" 0x003a0000-0x003f0000 : "UI" 0x003f0000-0x00400000 : "Config" block2mtd: version $Revision: 1.1.1.1 $ usbcore: registered new interface driver usbhid drivers/usb/input/hid-core.c: v2.6:USB HID core driver u32 classifier Netfilter messages via NETLINK v0.30. nf_conntrack version 0.5.0 (256 buckets, 2048 max) Register conntrack protocol helper for ESP... GRE over IPv4 tunneling driver Init IP_nat_proto_esp register. ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Restricted Cone arp_tables: (C) 2002 David S. Miller TCP cubic registered NET: Registered protocol family 1 NET: Registered protocol family 17 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> VFS: Mounted root (squashfs filesystem) readonly. Freeing unused kernel memory: 124k freed Algorithmics/MIPS FPU Emulator v1.5 Ralink HotFix switch register base addr to 0xb0180000 write offset 0x500, value 0x31a65 write offset 0x500, value 0x31b23 Inter-\| Receive phy_tx_ring = 0x01c70000, tx_ring = 0xa1c70000, size: 16 bytes phy_rx_ring = 0x01c71000, rx_ring = 0xa1c71000, size: 16 bytes \| Transmit fRT305x_ESW: Link Status Changed ace \|bytes paGDMA1_FWD_CFG = 710000 ckets errs drop fifo frame compressed multicast\|bytes packets errs drop fifo colls carrier compressed eth2: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 lo: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 gre0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 dwc_otg: version 2.72a 24-JUN-2008 DWC_otg: Core Release: 2.66a DWC_otg: Periodic Transfer Interrupt Enhancement - disabled DWC_otg: Multiprocessor Interrupt Enhancement - disabled DWC_otg: Using DMA mode DWC_otg: Device using Buffer DMA mode dwc_otg lm0: DWC OTG Controller dwc_otg lm0: new USB bus registered, assigned bus number 1 dwc_otg lm0: irq 18, io mem 0x00000000 DWC_otg: Init: Port Power? op_state=1 DWC_otg: Init: Power Port (0) usb usb1: configuration #1 chosen from 1 choice hub 1-0:1.0: USB hub found hub 1-0:1.0: 1 port detected Load RT2880 Timer Module(Wdg/Soft) flash_open: flash_fd=3 Mount D Section. timezone:0 dsttime:0 flash_open: flash_fd=9 Fri Jan 1 00:00:00 UTC 2010 timezone:0 dsttime:0 switch reg write offset=14, value=405555 switch reg write offset=50, value=2001 switch reg write offset=98, value=7f3f switch reg write offset=e4, value=3f switch reg write offset=40, value=1002 switch reg write offset=44, value=1001 switch reg write offset=48, value=1001 switch reg write offset=70, value=ffff417e ----1--0-- Set: phy[1].reg[0] = 3900 Set: phy[2].reg[0] = 3900 Set: phy[3].reg[0] = 3900 Set: phy[4].reg[0] = 3900 Single Ethernet Port Configured as LAN eth2.2: Setting MAC address to 00 50 18 5f 5d 0c. device eth2 entered promiscuous mode VLAN (eth2.2): Setting underlying device (eth2) to promiscious mode. ifconfig eth2.2 hw ether 0050185F5D0C eth2.2: dev_set_promiscuity(master, 1) device eth2.2 entered promiscuous mode br0: port 1(eth2.2) entering learning state br0: topology change detected, propagating br0: port 1(eth2.2) entering forwarding state rt2860v2_ap: module license 'unspecified' taints kernel. Jack 2860 version : 2.0.0.0 (Jul 22 2010) --- pAd = c0448000, size = 414016 --- <-- RTMPAllocAdapterBlock, Status=0 Length of MAC:6 mac:0:50:18:5f:5d:c: ---- RX DESC a1f6d000 size = 2048 <-- RTMPAllocTxRxRingMemory, Status=0 2a:55:44:e4:05:1a:cb:eb:01:93:83:88:b2:c3:4f:8f: 50:b2:65:62:c1:a3:cb:f9:52:8e:b0:b1:79:c9:b6:97: 1. Phy Mode = 9 2. Phy Mode = 9 3. Phy Mode = 9 MCS Set = ff 00 00 00 01 Main bssid = 00:50:18:5f:5d:0c The UUID Hex string is:2880288028801880a8800050185f5d0c The UUID ASCII string is:28802880-2880-1880-a880-0050185f5d0c! <---- RTMPInitialize, Status=0 0x1300 = 00064380 device ra0 entered promiscuous mode br0: port 2(ra0) entering learning state br0: topology change detected, propagating br0: port 2(ra0) entering forwarding state --> This is a single-ether router. ->WAN_TYPE is 16 ---- NAT START ---- /var/nat-draft.uyg start ok udhcpd (v0.9.9-pre) started Unable to open /var/run/udhcpd.leases for reading timezone:0 dsttime:0 ============= AMIT UPNP Start ============= WAN_IF=eth2.2,LAN_IF=br0 #

boot log

JBoot B252
JRecovery Version R1.2 2010/06/17 13:35
Flash MXIC-22A7 0xBF000000-0x400000 x16
...............
Starting kernel @80000000...

LINUX started...

 THIS IS ASIC
Linux version 2.6.21 (charles@uranus) (gcc version 3.4.2) 
 #13 Thu Jul 22 11:57:06 CST 2010

 The CPU feqenuce set to 320 MHz
CPU revision is: 0001964c
Determined physical RAM map:
 memory: 02000000 @ 00000000 (usable)
Built 1 zonelists.  Total pages: 8128
Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock3
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 16kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
Cache parity protection disabled
cause = 10800000, status = 1100ff00
PID hash table entries: 128 (order: 7, 512 bytes)
calculating r4koff... 00138800(1280000)
CPU frequency 320.00 MHz
Using 160.000 MHz high precision timer.
Console: colour dummy device 80x25
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 29304k/32768k available (2389k kernel code, 
3464k reserved, 551k data, 124k init, 0k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
Time: MIPS clocksource has been installed.
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher
squashfs: LZMA suppport for slax.org by jro
fuse init (API version 7.8)
io scheduler noop registered (default)
FLASH_API: MAN_ID=C2 DEV_ID=22A7 SIZE=4MB

------------------GPIO--------------------------
 GPIOMODE:2df
SLIC INTR ==> gpio 0
Ralink gpio driver initialized
HDLC line discipline: version $Revision: 1.1.1.1 $, maxframe=4096
N_HDLC line discipline registered.
Serial: 8250/16550 driver $Revision: 1.3 $ 2 ports, IRQ sharing disabled
serial8250: ttyS0 at I/O 0xb0000500 (irq = 37) is a 16550A
serial8250: ttyS1 at I/O 0xb0000c00 (irq = 12) is a 16550A
loop: loaded (max 8 devices)
rdm_major = 254
GDMA1_MAC_ADRH -- : 0x00000000
GDMA1_MAC_ADRL -- : 0x00000000
Ralink APSoC Ethernet Driver Initilization. v1.60  
 256 rx/tx descriptors allocated, mtu = 1500!
GDMA1_MAC_ADRH -- : 0x0000dc91
GDMA1_MAC_ADRL -- : 0xf659bfab
PROC INIT OK!
TX100 AD/DA current bias: 7054
TX100 slew rate control: 0038
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
NET: Registered protocol family 24
ralink flash device: 0x400000 at 0xbf000000
Ralink SoC physically mapped flash: Found 1 x16 devices at 0x0 in 16-bit bank
 Amd/Fujitsu Extended Query Table at 0x0040
Ralink SoC physically mapped flash: Swapping erase regions for broken CFI table.
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.

Creating 6 MTD partitions on "Ralink SoC physically mapped flash":
0x00000000-0x00400000 : "Whole"
0x00000000-0x00010000 : "Bootloader"
0x00010000-0x00110000 : "Kernel"
0x00110000-0x003a0000 : "RootFS"
0x003a0000-0x003f0000 : "UI"
0x003f0000-0x00400000 : "Config"
block2mtd: version $Revision: 1.1.1.1 $
usbcore: registered new interface driver usbhid
drivers/usb/input/hid-core.c: v2.6:USB HID core driver
u32 classifier
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (256 buckets, 2048 max)
Register conntrack protocol helper for ESP...
GRE over IPv4 tunneling driver
Init IP_nat_proto_esp register.
ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Restricted Cone
arp_tables: (C) 2002 David S. Miller
TCP cubic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 124k freed
Algorithmics/MIPS FPU Emulator v1.5
Ralink HotFix
switch register base addr to 0xb0180000
write offset 0x500, value 0x31a65
write offset 0x500, value 0x31b23
Inter-|   Receive
phy_tx_ring = 0x01c70000, tx_ring = 0xa1c70000, size: 16 bytes

phy_rx_ring = 0x01c71000, rx_ring = 0xa1c71000, size: 16 bytes
 |  Transmit
 fRT305x_ESW: Link Status Changed
ace |bytes    paGDMA1_FWD_CFG = 710000
ckets errs drop fifo frame compressed multicast|bytes    packets errs drop fifo colls carrier compressed
  eth2:       0       0    0    0    0     0          0         0        0       0    0    0    0     0       0          0
    lo:       0       0    0    0    0     0          0         0        0       0    0    0    0     0       0          0
  gre0:       0       0    0    0    0     0          0         0        0       0    0    0    0     0       0          0
dwc_otg: version 2.72a 24-JUN-2008
DWC_otg: Core Release: 2.66a
DWC_otg: Periodic Transfer Interrupt Enhancement - disabled
DWC_otg: Multiprocessor Interrupt Enhancement - disabled
DWC_otg: Using DMA mode
DWC_otg: Device using Buffer DMA mode
dwc_otg lm0: DWC OTG Controller
dwc_otg lm0: new USB bus registered, assigned bus number 1
dwc_otg lm0: irq 18, io mem 0x00000000
DWC_otg: Init: Port Power? op_state=1
DWC_otg: Init: Power Port (0)
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
Load RT2880 Timer Module(Wdg/Soft)
 flash_open: flash_fd=3
Mount D Section.
timezone:0
dsttime:0
 flash_open: flash_fd=9
Fri Jan  1 00:00:00 UTC 2010
timezone:0
dsttime:0
switch reg write offset=14, value=405555
switch reg write offset=50, value=2001
switch reg write offset=98, value=7f3f
switch reg write offset=e4, value=3f
switch reg write offset=40, value=1002
switch reg write offset=44, value=1001
switch reg write offset=48, value=1001
switch reg write offset=70, value=ffff417e

----1--0--
Set: phy[1].reg[0] = 3900
Set: phy[2].reg[0] = 3900
Set: phy[3].reg[0] = 3900
Set: phy[4].reg[0] = 3900
Single Ethernet Port
Configured as LAN
eth2.2: Setting MAC address to  00 50 18 5f 5d 0c.
device eth2 entered promiscuous mode
VLAN (eth2.2):  Setting underlying device (eth2) to promiscious mode.
ifconfig eth2.2 hw ether 0050185F5D0C
eth2.2: dev_set_promiscuity(master, 1)
device eth2.2 entered promiscuous mode
br0: port 1(eth2.2) entering learning state
br0: topology change detected, propagating
br0: port 1(eth2.2) entering forwarding state
rt2860v2_ap: module license 'unspecified' taints kernel.
Jack 2860 version : 2.0.0.0 (Jul 22 2010)

--- pAd = c0448000, size = 414016 ---

<-- RTMPAllocAdapterBlock, Status=0
Length of MAC:6
 mac:0:50:18:5f:5d:c:
----
RX DESC a1f6d000  size = 2048
<-- RTMPAllocTxRxRingMemory, Status=0
2a:55:44:e4:05:1a:cb:eb:01:93:83:88:b2:c3:4f:8f:
50:b2:65:62:c1:a3:cb:f9:52:8e:b0:b1:79:c9:b6:97:

1. Phy Mode = 9
2. Phy Mode = 9
3. Phy Mode = 9
MCS Set = ff 00 00 00 01
Main bssid = 00:50:18:5f:5d:0c
The UUID Hex string is:2880288028801880a8800050185f5d0c
The UUID ASCII string is:28802880-2880-1880-a880-0050185f5d0c!

<---- RTMPInitialize, Status=0
0x1300 = 00064380
device ra0 entered promiscuous mode
br0: port 2(ra0) entering learning state
br0: topology change detected, propagating
br0: port 2(ra0) entering forwarding state
--> This is a single-ether router.
->WAN_TYPE is 16
---- NAT START ----
/var/nat-draft.uyg start ok
udhcpd (v0.9.9-pre) started
Unable to open /var/run/udhcpd.leases for reading
timezone:0
dsttime:0
============= AMIT UPNP Start =============
WAN_IF=eth2.2,LAN_IF=br0
#

cat /etc/passwd

# cat passwd
root:$1$$N76hdwGfg11g0KdKbtyh21:0:0:root:/root:/bin/ash

password: amittima

DD-WRT forums topic

netstat -l

# netstat -l
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State
tcp        0      0 *:8080                  *:*                     LISTEN
tcp        0      0 *:http                  *:*                     LISTEN
tcp        0      0 192.168.123.254:2300    *:*                     LISTEN
udp        0      0 *:9                     *:*
udp        0      0 *:67                    *:*
udp        0      0 *:1900                  *:*
Active UNIX domain sockets (only servers)
Proto RefCnt Flags       Type       State         I-Node Path

ps aux

# ps aux
  PID  Uid     VmSize Stat Command
    1 root        332 S   init
    2 root            SWN [ksoftirqd/0]
    3 root            SW< [events/0]
    4 root            SW< [khelper]
    5 root            SW< [kthread]
   26 root            SW< [kblockd/0]
   29 root            SW< [khubd]
   41 root            SW< [kswapd0]
   42 root            SW  [pdflush]
   43 root            SW  [pdflush]
   44 root            SW< [aio/0]
  643 root            SW  [mtdblockd]
  695 root            SW< [dwc_otg]
  713 root        256 S   syslogd
  716 root        256 S   klogd -f
  728 root        288 S   csmanuds -p /var/run/csman.pid
  786 root        132 S   ated br0
  799 root            SW  [rtmpWscHandle]
 1470 root        228 S   udhcpd /etc/udhcpd.conf
 1490 root        412 S   AmitUPnP eth2.2 br0
 1499 root        308 S   httpd
 1501 root        264 S   AGPServer
 1503 root        332 S   commander
 1506 root        484 S   -ash
 1517 root        412 S   AmitUPnP eth2.2 br0
 1518 root        412 S   AmitUPnP eth2.2 br0
 1519 root        412 S   AmitUPnP eth2.2 br0
 1528 root        172 S   telnetd -b 192.168.123.254
 7950 root        352 R   ps aux

cat /proc/mtd

# cat mtd
dev:    size   erasesize  name
mtd0: 00400000 00010000 "Whole"
mtd1: 00010000 00010000 "Bootloader"
mtd2: 00100000 00010000 "Kernel"
mtd3: 00290000 00010000 "RootFS"
mtd4: 00050000 00010000 "UI"
mtd5: 00010000 00002000 "Config"

cat /proc/modules

# cat modules
rt2860v2_ap 1061088 1 - Live 0xc059f000 (P)
xt_time 3200 0 - Live 0xc040a000
rt_timer 2432 0 - Live 0xc0408000
dwc_otg 103824 0 - Live 0xc042d000
lm 3520 1 dwc_otg,[permanent], Live 0xc0406000

cat /proc/cmdline

# cat cmdline
console=ttyS1,57600n8 root=/dev/mtdblock3

cat /proc/meminfo

# cat meminfo
MemTotal:        29428 kB
MemFree:         16032 kB
Buffers:          1368 kB
Cached:           4560 kB
SwapCached:          0 kB
Active:           2640 kB
Inactive:         4068 kB
SwapTotal:           0 kB
SwapFree:            0 kB
Dirty:               0 kB
Writeback:           0 kB
AnonPages:         828 kB
Mapped:            764 kB
Slab:             4672 kB
SReclaimable:      596 kB
SUnreclaim:       4076 kB
PageTables:        204 kB
NFS_Unstable:        0 kB
Bounce:              0 kB
CommitLimit:     14712 kB
Committed_AS:     3548 kB
VmallocTotal:  1048404 kB
VmallocUsed:      5696 kB
VmallocChunk:  1041604 kB