Belkin F5D8233-4 v1

From TechInfoDepot
Jump to navigationJump to search
multiple revisions of this device, use caution
bgn (N300)
N Wireless Router
Belkin F5D8233-4.jpg
Support
Wikipedia
WikiDevi.wi-cat.ru
3rd Party Firmware
dd-wrt
OpenWrt
Incompatible
Tomato any flavor
Incompatible
Platform
BrandModelRev
Belkin F5D8233-4 v1
FCC ID
IC ID
Type
wireless router
Series
F5D8233-4
CPU1
Infineon (Lantiq) PSB 50610
CPU1 Type
MIPS 4KEc
CPU1 Speed
333 MHz
Flash1 Chip
Eon EN29LV160BB-70TIP
Flash1 Size
2 MiB2,097,152 B <br />16,384 Kib <br />2,048 KiB <br />16 Mib <br />0.00195 GiB <br />
RAM1 Size
16 MiB16,777,216 B <br />131,072 Kib <br />16,384 KiB <br />128 Mib <br />0.0156 GiB <br />
RAM1 Chip
PSC A2V28S40CTP-G6
ETH chip1
Infineon (Lantiq) PSB 50610
Switch
Realtek RTL8306S
Ethernet Port Count
1-WAN
4-100MbE-LAN
Wired Standard
IEEE 802.3i/3u

802dot11 OUI: 00:17:3F (11 E, 27 W)
Ethernet OUI: 00:17:3F (11 E, 27 W)

Stock FW OS
SuperTask!
Expansion IF types
none specified
Power
12 VDC, 1 A
Connector type
barrel
Serial Port (UART)
yes, internal, unpopulated, J2, 3.3V TTL, (115200 8N1), Arcadyan Type1 pinout

Additional chips
2.4GHz Front End Module;Microchip;SST12LF01;SST, 12LF01, 0728115;2;

Other

Default SSID: Belkin_N_Wireless_XXXXXX (4 addl. devices)
, RT2860AP
Default IP address: 192.168.2.1
the IP 192.168.2.1 is used by 293 additional devices
of which 99 are Belkin devices

Manuf/OEM/ODM
Arcadyan WG7005B -LF-AK
Retail
Availability End of Life
FCC approval date 17 May 2007
ASIN B000RMPP5Q Flag of the United States.svg
multiple uses
Country of manuf China
Radio 1
Chip1
Ralink RT2860
Chip2
Ralink RT2820
Wireless interface OUI
00:17:3F
Antenna Connector Type
none specified
MIMO status
2x2:2
Wireless Standard
IEEE 802.11b/g/n
802.11n
up to 300 Mbps
802.11g
up to 54 Mbps
802.11b
up to 11 Mbps
WiFi Operating Frequency
2.4 GHz
 CPU1 brandRadio1 chip1 brandRadio1 chip2 brand
Belkin F5D8233-4 v1Infineon (Lantiq)RalinkRalink
Belkin F5D8233-4 v3RalinkRalinkRalink
Belkin F5D8233-4 v4RalinkRalinkRalink

For a list of all currently documented Infineon (Lantiq) chipsets with specifications, see Infineon.
For a list of all currently documented Ralink chipsets with specifications, see Ralink.
For a list of all currently documented Realtek chipsets with specifications, see Realtek.

For a list of all currently documented Belkin device with specifications, see Belkin.

300 Mbps - 2SS 2.4GHz 802.11n (40MHz chan.) = N300 class


Overview

Again, this router would seem to be running SuperTask! with its stock FW.

The default SSID is Belkin_N_Wireless_XXXXXX.. where XXXXXX

is the last three octets of the WLAN MAC address (upper case letters).

The device appears to assumed the SSID RT2860AP temporarily when booting.

JTAG-Serial Info

Serial

Serial Pinouts

Arcadyan Type1 pinout

^
| to AMAZON-SE

[ • ] ( • ) ( • ) ( • ) (3.3)
( • ) (RxD) (TxD) ( • ) (GND)

J2

Info derived from

boot log
ROM VER: 1.0.3
CFG 01
Read
ROM VER: 1.0.3
CFG 01
Read EEPROMX
 X

=======================================================================
Wireless Gateway WG7005B-LF-AK Loader V0.09 build Apr 26 2007 16:55:35
                    Arcadyan Technology Corporation
=======================================================================
MX29LV160B bottom boot 16-bit mode found

Copying boot params.....DONE

Press Space Bar 3 times to enter command mode ...
Flash Checking
 Passed.

Unzipping firmware at 0x80002000 ... [ZIP 3] [ZIP 1]  done
In c_entry() function ...
install_exception
Co config = 80008483
[INIT]@Interrupt ...
CLC = 0x00000100
CON = 0x00008200
PISEL = 0x00000000
FDV = 0x000001a3
BG = 0x00000024
*DANUBE_FPIS_BCU_CON  = 4009FFFFh @ 0xbc200410
*DANUBE_FPIS_BCU_ECON = 00000000h @ 0xbc200420
*DANUBE_FPIS_BCU_EADD = 00000000h @ 0xbc200424
*DANUBE_FPIS_BCU_EDAT = 00000000h @ 0xbc200428
------------end of uart_init------------------
[GPIO FLOW] SetGpio() port 0 value =0x9158
[GPIO FLOW] SetGpio() port 1 value =0x3401
gptu: totally 6 16-bit timers/counters
Init timer = 0
##### _ftext      = 0x80002000
##### _fdata      = 0x80359AB0
##### __bss_start = 0x803CE6D4
##### end         = 0x80E114EC
##### Backup Data from 0x80359AB0 to 0x80E194EC~0x80E8E110 len 478244
##### Backup Data completed
##### Backup Data verified
[INIT] System Log Pool startup ...
[INIT] MTinitialize ..
[INIT] usrclk
CPU Clock 333333334 Hz
mips_counter_frequency:166666667
r4k_offset: 00028b0a(166666)
init_US_counter : time1 = 260428 , time2 = 40260478, diff 40000050
US_counter = 48
 cnt1 40984883 cnt2 40986142, diff 1259
Runtime code version: 1.00.10
System startup...
[INIT] Memory COLOR 0, 800000 bytes ..
[INIT] Memory COLOR 1, 600000 bytes ..
[INIT] Memory COLOR 2, 607200 bytes ..
MX29LV160B bottom boot 16-bit mode found
Set flash memory layout to BRN-BOOT
Boot Parameters found !!!
Bootcode version: V0.09
Serial number: 12733823304858
Hardware version: 01A
MX29LV160B bottom boot 16-bit mode found

sizeof(struct III_Config_t) is 80884, nLen:80884, Magic:0xffffffff
!![E-CFG-VER] Configuration data version mismatch!!
!![E-CFG-VER] Adapting factory defaults!!
!![E-CFG-VER] Reconfiguration required!!
!!No configuration file present!!
!!Cleanup configuration in flash memory!!
MX29LV160B bottom boot 16-bit mode found
!!! Invalid wireless channel range 0 ~ 0
!!! Use default value 1 ~ 13
default route: 0.0.0.0
BufferInit:
BUF_HDR_SZ=160 BUF_ALIGN_SZ=28 BUFFER_OFFSET=384
BUF_BUFSZ0=544 BUF_BUFSZ1=4320
NUM_OF_B0=0 NUM_OF_B1=900
BUF_POOL0_SZ=0 BUF_POOL1_SZ=4032000
sizeof(BUFFER0)=704,sizeof(BUFFER1)=4480
*BUF0=0x80af9958 *BUF1=0x80721338
Altgn *BUF0=0x80af9960 *BUF1=0x80721340
End at BUF0:0x80af9960, BUF1:0x80af9940

BUF0[0]=0x80af9960 BUF1[0]=0x80721340

buffer0 pointer init OK!
buffer1 pointer init OK!
ifno=  0, Link_Type= 4
time = 08/01/2003, 00:00:00
Interface 0 ip = 127.0.0.1

ifno=  1, Link_Type= 1
DMA g_desc_list=0x8066D1A0
Register=0x4012FFFF
init GPIO#19 (as0:0,as1:0,dir:1)
ctrl GPIO#19 (val:1)
ctrl GPIO#19 (val:0)
ctrl GPIO#19 (val:1)
MAC Address: 00:17:3f:c2:84:47
mac_0_init: init MIB counter.
time = 08/01/2003, 00:00:00
Interface 1 ip = 192.168.2.1

ifno=  2, Link_Type= 1
PCI: Probing PCI hardware on host bus 0.
danube pci startup...
PCI clock 33.3MHz
DANUBE_GPIO_P1_ALTSEL0=81c6
DANUBE_GPIO_P1_ALTSEL1=0
DANUBE_GPIO_P1_DIR=b5ef
Autoconfig PCI channel 0x803B9BCC
Scanning bus 00, I/O 0xbae00000:0xbb000001, Mem 0x18000000:0x1a000001
Ralink vendor id: 0x1814
(bus:dev:fun)= 00:0e.0 Class 0280: VenID 1814: DevID 0601
        Mem at 0x18000000 [size=0x10000]
Scanning bus 00:
Found 00:70 [1814/0601] 000280 00
Fixups for bus 00
Bus scan for 00 returning with max=00
 6011814  4100007  2800000     8000 18000000        0        0        0
       0        0     8001 28601814        0       40        0  4020100

[HWLAN] ifno=2 irno=7 port=0x00000000
RTMP_ADAPTER_mem : 8048bf78, sizeof(RTMP_ADAPTER) 332176
rt2860_probe : should call pci_set_master() ???
should call pci_set_drvdata ???
RUNTASK id=1 hwlan_light_isr...
time = 08/01/2003, 00:00:00
Interface 2 ip = 192.168.2.1

ifno=  3, Link_Type= 1
WAN MAC Address: 00:17:3f:c2:84:48
MAC Address: 00:17:3f:c2:84:48
mac_0_init: init MIB counter.
time = 08/01/2003, 00:00:00
iput_IpLinkUp(ifno=3)> ifp->add_default_route:1
Re-Init NAT data structure
Init NAT data structure
Interface 3 ip = 0.0.0.0

ifno=  4, Link_Type= 0
ifno=  5, Link_Type= 0
ifno=  6, Link_Type= 0
ifno=  7, Link_Type= 0
ifno=  8, Link_Type= 0
ifno=  9, Link_Type= 0
ifno= 10, Link_Type= 0
ifno= 11, Link_Type= 0
ifno= 12, Link_Type= 0
ifno= 13, Link_Type= 0
ifno= 14, Link_Type= 0
ifno= 15, Link_Type= 0
ifno= 16, Link_Type= 0
ruleCheck()> Group: 0,  Error: Useless rule index will be truncated
ruleCheck()> Group: 1,  Error: Useless rule index will be truncated
ruleCheck()> Group: 2,  Error: Useless rule index will be truncated
CBAC rule format check succeed !!
reqCBACBuf()> init match pool, Have: 1000
Memory Address: 0x80dc0790 ~ 0x80dc750c
reqCBACBuf()> init timeGap pool, Have: 10000
Memory Address: 0x80dc750c ~ 0x80df8260
reqCBACBuf()> init sameHost pool, Have: 2000
Memory Address: 0x80df8260 ~ 0x80e07c80
CBAC rule pool initialized !!
Init NAT data structure
No default route, no need to reinit the NAT data structure
RUNTASK id=2 if_task if0...
RUNTASK id=3 if_task if1...
RUNTASK id=4 if_task if2...
RUNTASK id=5 if_task if3...
RUNTASK id=6 timer_task...
RUNTASK id=7 conn_mgr...
RUNTASK id=8 main_8021x...
RUNTASK id=9 main_lltd...
RUNTASK id=10 period_task...
RUNTASK id=11 belkin_goodie_task...
RUNTASK id=12 dhcp_daemon...
RUNTASK id=13 dhcp_clt...on interface 3
RUNTASK id=14 pptp_callmgr...
RUNTASK id=15 L2tpd...
found signature: 78h 56h 34h 12h
ulImgLens=900046, LENGTH[3]-12=1769460
length checking OK
[0] find End at 0xB011B800 len=900046
---[ LZMA head start in 0xB011BC00 ]---
found signature: 78h 56h 34h 12h
ulImgLens=99449, LENGTH[3]-12=1769460
length checking OK
[1] find End at 0xB0134000 len=99449
Image[1] at 0xB0040000, len = 900046
Image[2] at 0xB011BC00, len = 99449
Unzipping from B011BC00 to 80EC2000 ... [ZIP 1] done
Uncompressed size = 944563
drive start addr[0]=80ec2000, [1]=80fa89c0
[HTTPD] flash_init: failed!!
httpd: listen at 192.168.2.1:80
RUNTASK httpd...
RUNTASK id=18 dnsproxy...
RUNTASK id=19 rip...
RUNTASK id=20 ripout...
RUNTASK id=21 dhcpd_mgmt_task...
UPnP is enabled
UPNP Device initialize success! slot=22

>>> belkin_wan_cfg task runs successfully, task_id = 23
gConfig.WSC_Mode:1
RUNTASK id=24 wscmain...
RUNTASK id=25 wsc_Send_eap_packet...
RUNTASK id=26 wsc_Send_UPNP_packet...
RUNTASK id=27 WSC_WaitUserAction_Task...
gConfig.WSC_Mode:1
UART RX Input
Starting Multitask...
run_project_task
RUNTASK id=28 apAppInit...
ifno2dot1x_if[2]=0
dot1x_wireless_if_mask=0x4
init psock cnt=1975247578
rt2860_open : should call request_irq ????????????????????????
rt2860_open 1
rt2860_open 2
rt2860_init 1
rt2860_init 2
rt2860_init 3
rt2860_init 6
rt2860_init 7
rt2860_init 8
rt2860_init 9
rt2860_init 10
sizeof(RT2860AP_DAT) : 1314
sould check E2PROM MAC ?????????????????
rt2860_open 3
should Set up the Mac address ?????????
rt2860_open 4
rt2860_open 5
rt2860_open 6
netif_carrier_on() called ???
[dhcp_clt] enable dhcp client in interface WAN[3]
*********************************************
Wi-Fi Simple Config Application - Intel Corp.
Version: Build 1.02, Jul 25 2007 11:41:56
*********************************************
Initializing stack...
---------in wsc init----------
----------sizeof(uint32)=4
----------sizeof(uint-long)=4
----------sizeof(uint32)=2
@#*@#*@#*EAP-WSC: Entered eap_wsc_init *#@*#@*#@
wsc_Send_eap_packet:udpFdupnp_wcn:28;;udpFdupnp:2a
WSC_WaitUserAction:wait user action:0
[HWLAN] [30] rapi_tmr_task running
[24]pthread_cond_init: 0
[24]pthread_mutex_init: resource No. 34
[24]pthread_mutex_init: resource No. 35
[PORTABLITY]:WscCreateThread--------------------
 Entered udp_read
WscCmd:ActualCBThreadProc: Started
[htf_dbg]     - OnlineActiveWirless() 858
should check capable(CAP_NET_ADMIN) ???
should check capable(CAP_NET_ADMIN) ???
should check capable(CAP_NET_ADMIN) ???
should check capable(CAP_NET_ADMIN) ???
should check capable(CAP_NET_ADMIN) ???
should check capable(CAP_NET_ADMIN) ???
should check capable(CAP_NET_ADMIN) ???
should check capable(CAP_NET_ADMIN) ???
should check capable(CAP_NET_ADMIN) ???
should check capable(CAP_NET_ADMIN) ???
should check capable(CAP_NET_ADMIN) ???
[24]pthread_cond_init: 1
[24]pthread_mutex_init: resource No. 36
[24]pthread_mutex_init: resource No. 37
[PORTABLITY]:WscCreateThread--------------------
 WscCmd:ActualUIThreadProc: Started.
ActualUIThreadProc: wait q
MasterControl constructor
WscCmd::MC instantiated ok
[24]pthread_cond_init: 2
[24]pthread_mutex_init: resource No. 38
[24]pthread_mutex_init: resource No. 39
[PORTABLITY]:WscCreateThread--------------------
 [24]pthread_mutex_init: resource No. 40
[PORTABLITY]:pthread_mutex_init--------------------
 CTransport Construction
[24]pthread_cond_init: 3
[24]pthread_mutex_init: resource No. 41
[24]pthread_mutex_init: resource No. 42
[PORTABLITY]:WscCreateThread--------------------
 In CTransport::ActualCBThreadProc
ActualCBThreadProc: Calling Dequeue
MC::Init: Init complete ok
WscCmd::MC intialized ok
WscCmd::Init ok, starting stack...
Info::ReadConfigFile: Called
Info::ReadConfigFile:▒4▒H
Info::ReadConfigFile:File open ok
*****uuid_p:0x0000000000000001100000173fc28447*****
mp_deviceInfo->uuid[i]:
0-0-0-0-0-0-0-1-10-0-0-17-3f-c2-84-47-
mp_deviceInfo->macAddr:00:17:3F:C2:84:47
gSetting.dot1x.if_entry[0].enableWEP:0
authTypeFlags is 1 ,encrTypeFlags is 1 ,m_nwKey is , key len is 0
 ssid is Belkin_N_Wireless_C28447
S, c93
E, ee3
RegistrarSM constructor
[24]pthread_cond_init: 4
[24]pthread_mutex_init: resource No. 43
[24]pthread_mutex_init: resource No. 44
[PORTABLITY]:WscCreateThread--------------------
 [24]pthread_mutex_init: resource No. 45
[PORTABLITY]:pthread_mutex_init--------------------
 RegistrarSM constructor
[24]pthread_cond_init: 5
[24]pthread_mutex_init: resource No. 46
[24]pthread_mutex_init: resource No. 47
[PORTABLITY]:WscCreateThread--------------------
 c_devPwd:org:79614429
**************mcp_devPwd:79614429;;
Generated devPwd: ▒b▒0
in startMonitor....
CInbEap Construction
Sizeof(WSC_NOTIFY_DATA) = -2141004712
---test--sizeof(WSC_NOTIFY_DATA) = 36
[24]pthread_cond_init: 6
[PORTABLITY]:WscCreateEvent--------------------
 Entered udp_open
Socket open successful, sd: -2141004728
Entered udp_open
Socket open successful, sd: -2141004728
Entered udp_bind
Binding successful for socket [-2141004744]
[PORTABLITY]:WscCreateThread--------------------
 In CInbEap::StaticRecvThread
CInbEap::ActualRecvThread Started
Entered udp_read
in startMonitor....
CInbUPnPDev Construction
Entered udp_open
Socket open successful, sd: -2141004728
Entered udp_open
Socket open successful, sd: -2141004728
Entered udp_bind
Binding successful for socket [-2141004744]
CInbUPnPDev StartMonitor
[PORTABLITY]:WscCreateThread--------------------
 MC::SwitchModeOn: Exit
In CInbUPnPDev::StaticUPnPThread
end UPnPCreateMicroStack
Entered udp_read
MC::StartStack: Informing app of mode
-WscCmd::CallbackProc Enqueue done
MC::SwitchModeOn: Done callback
exit wscmain
@@[31]pthread_mutex_unlock: the res is free 34-- -2142138992
WscCmd:ActualCBThreadProc: CB_MAIN_PUSH_MODE recd

******* MODE: Access Point *******
-@@[28]pthread_mutex_unlock: the res is free 36-- -2142139112
*******p_header->eType:1

Options:
0. Quit
1. Get configured
2. Get configured via push-button
3. Get configured using IEs
Enter selection: ***gp_mc->mp_info->GetSwitchMode():1
mp_info->GetSwitchMode():1:e_currMode:1,,e_targetMode:3
mp_deviceInfo->authTypeFlags:1
mp_deviceInfo->encrTypeFlags:1
********g_pin:79614429*****
********cp_devPwd:79614429*****
mp_deviceInfo->authTypeFlags:1
mp_deviceInfo->encrTypeFlags:1
MC::SetBeaconIE: call to trans->SetBeaconIE() ok
MC::SetProbeRespIE: call to trans->SetProbeRespIE() ok
Waiting for Registrar to connect...
WscCmd::unconfig initiated
ActualUIThreadProc: wait q
[reset_802dot1x] wireless module ready
[init_wpa] dot1x_ready[0]=1
[reset_802dot1x] 802.1Xv2 ready
upnp_Init: flag=0
SSDP Initialization completed...
GenaInit : event_hook is NULL!!
.. and a boot log from the same unit bricked (whoops)
ROM VER: 1.0.3
CFG 01
Read▒
ROM VER: 1.0.3
CFG 01
Read EEPROMX
 X

=======================================================================
Wireless Gateway WG7005B-LF-AK Loader V0.09 build Apr 26 2007 16:55:35
                    Arcadyan Technology Corporation
=======================================================================
MX29LV160B bottom boot 16-bit mode found

Copying boot params.....DONE

Press Space Bar 3 times to enter command mode ...
Flash Checking
 Passed.

Unzipping firmware at 0x80002000 ...  failed : 4 !!
Unzipping firmware at 0x80002000 ...  failed : 4 !!
Unzipping firmware at 0x80002000 ...  failed : 4 !!
Unzipping firmware at 0x80002000 ...  failed : 4 !!
Unzipping firmware at 0x80002000 ...  failed : 4 !!
Unzipping Tiny Kernel at 0x80002000 ... [ZIP 1]  done
Tiny ETCPIP running ...

In c_entry() function ...
install_exception
Co config = 80008483
sys_irq_init ...
Tiny Kernel System startup...
Unzipping from B001E000 to 80720000 ... done
Uncompressed size = 10142
CPU Clock 333333334 Hz
tcpip_startup...
MX29LV160B bottom boot 16-bit mode found
Set flash memory layout to BPARAMS+RECOVER_KERNEL
Bootcode version: V0.09
Serial number   : 12733823304858
Hardware version: 01A
!!No configuration file present!!
default route: 0.0.0.0
default route: 0.0.0.0
BufferInit:
BUF_HDR_SZ=32 BUF_ALIGN_SZ=16 BUFFER_OFFSET=96
BUF_BUFSZ0=384 BUF_BUFSZ1=1632
NUM_OF_B0=24 NUM_OF_B1=800
BUF_POOL0_SZ=9984 BUF_POOL1_SZ=1331200
Buf0_Block 80265df8  Buf1_Block 80120dd8
BUF0[0]=0x80265e00 BUF1[0]=0x80120de0

buffer0 pointer init OK!
buffer1 pointer init OK!
init_if() ; gConfig.Interface[0].Link_Type is [4]
Interface 0 ip = 127.0.0.1

init_if() ; gConfig.Interface[1].Link_Type is [1]
DMA g_desc_list=0x8011B7A0
Register=0x4012FFFF
MAC Address: 00:17:3f:c2:84:47

 ***** Manufactory ID=5988 *****-------

 ***** Chip ID=200 *****-------
Interface 1 ip = 192.168.2.1

init_if() ; gConfig.Interface[2].Link_Type is [0]
RUNTASK id=1 if_task if0...
RUNTASK id=2 if_task if1...
RUNTASK id=3 timer_task...
RUNTASK id=4 period_task...
RUNTASK id=5 dhcp_daemon...
RUNTASK httpd...
Starting Multitask...
period_task running!!!
httpd: listen at 192.168.2.1:80