Posted: Sat Mar 17, 2007 2:35 Post subject: Realtek
Is there any plan for supporting Realtek chips such as the 8186? I read that it wasn't normally worth while, but I was wondering if anyone had one or would want to see it. I cannot say I am too concerned myself, as I've only ever seen one router that uses the chip, and it was by a brand I think few have heard of - Hawking.
Oh, and for those interested, it was the Hawking HWR54G, which appears to be exactly the same on the inside as the Aztech WL730RT4.
One of the beauties of the internet is necroposting.
BrainSlayer wrote:
no. and there will not be. realtek boards are slow, the radio is crap and 2 mb flash is even not worth to port it.
Put my vote in for development towards a Realtek port. GPL code is in abundance and its not THAT bad.
16M RAM and 2M flash is not exactly spectacular, but if micro versions were developed for 8/2 WRT routers, it shouldn't be that much of a stretch to port one for a MIPS platform.
and what about dlink DAP-1160? it is built on rtl8186, has 4MB flash, 16MB RAM and some sources available on ftp://ftp.dlink.cz/dap/dap-1160/driver_software/ is there a way, that dd-wrt could be ported?
One of the beauties of the internet is necroposting.
BrainSlayer wrote:
no. and there will not be. realtek boards are slow, the radio is crap and 2 mb flash is even not worth to port it.
Put my vote in for development towards a Realtek port. GPL code is in abundance and its not THAT bad.
16M RAM and 2M flash is not exactly spectacular, but if micro versions were developed for 8/2 WRT routers, it shouldn't be that much of a stretch to port one for a MIPS platform.
Brainslayer is soo right, the Realtek cpu's are not much to put in a parcel under the xmas tree.
They are slooow. They are crap.
Realtek based routers are not very common, you may find one here and one there but you rarely see a router mfgr having more than one model based on Realtek. Burned once..
There are so many good routers for which there hasn't been time for Brainslayer to do a dd-wrt port that it would be a misuse of time to spend it on Realtek ports.
No need to "vote" for it, the man has already said no. _________________ Kernel panic: Aiee, killing interrupt handler!
depends on term qualiffication... for example, here in east europe (CZ/SK/PL) they are very common and is not a wonder that lot of local ISPs use them in their networks. Generally, there are maybe more those craps (as you call it) than dd-wrt cappable units around me.
Jan 1 00:00:24 klogd started: BusyBox v1.8.2 (2010-10-08 16:18:17 CST)
Jan 1 00:00:24 Linux version 2.6.19 (root@8196bu) (gcc version 3.4.6-1.3.6) #2 Fri Oct 8 16:18:13 CST 2010
Now; without connecting a console, any ideas of how to crack the default telnet password? it does not prompt for a username, only a password, when I telnet to it.
The only password I can change from the web site is the "admin" account; which is clearly not the root account.
The Firmware appears to be encrypted/compressed in some form; but it's been awhile since I did any reverse-engineering =(
Full boot log, to drool over (with a 7-port hub, and a digital camera plugged in):
Jan 1 00:00:24 klogd started: BusyBox v1.8.2 (2010-10-08 16:18:17 CST)
Jan 1 00:00:24 Linux version 2.6.19 (root@8196bu) (gcc version 3.4.6-1.3.6) #2 Fri Oct 8 16:18:13 CST 2010
Jan 1 00:00:24 CPU revision is: 0000ff00
Jan 1 00:00:24 Determined physical RAM map:
Jan 1 00:00:24 memory: 02000000 @ 00000000 (usable)
Jan 1 00:00:24 User-defined physical RAM map:
Jan 1 00:00:24 memory: 02000000 @ 00000000 (usable)
Jan 1 00:00:24 On node 0 totalpages: 8192
Jan 1 00:00:24 DMA zone: 64 pages used for memmap
Jan 1 00:00:24 DMA zone: 0 pages reserved
Jan 1 00:00:24 DMA zone: 8128 pages, LIFO batch:0
Jan 1 00:00:24 read synopsys=0
Jan 1 00:00:24 read synopsys2=0
Jan 1 00:00:24 rtl8652-ehci rtl8652-ehci.0: irq 10, io base 0xb8021000
Jan 1 00:00:24 rtl8652-ehci rtl8652-ehci.0: USB 0.0 started, EHCI 1.00, driver 10 Dec 2004
Jan 1 00:00:24 usb usb1: configuration #1 chosen from 1 choice
Jan 1 00:00:24 hub 1-0:1.0: USB hub found
Jan 1 00:00:24 hub 1-0:1.0: 2 ports detected
Jan 1 00:00:24 rtl8652-ohci rtl8652-ohci.0: RTL8652 OHCI
Jan 1 00:00:24 rtl8652-ohci rtl8652-ohci.0: new USB bus registered, assigned bus number 2
Jan 1 00:00:24 rtl8652-ohci rtl8652-ohci.0: irq 10, io mem 0xb8020000
Jan 1 00:00:24 usb usb2: configuration #1 chosen from 1 choice
Nov 7 01:44:04 usb 1-1: new high speed USB device using rtl8652-ehci and address 2
Nov 7 01:44:04 usb 1-1: configuration #1 chosen from 1 choice
Nov 7 01:44:04 hub 1-1:1.0: USB hub found
Nov 7 01:44:04 hub 1-1:1.0: 4 ports detected
Nov 7 01:44:05 usb 1-1.4: new high speed USB device using rtl8652-ehci and address 3
Nov 7 01:44:05 usb 1-1.4: configuration #1 chosen from 1 choice
Nov 7 01:44:05 hub 1-1.4:1.0: USB hub found
Nov 7 01:44:05 hub 1-1.4:1.0: 4 ports detected
Nov 7 01:44:05 wimax LED off and change to wan LED
Nov 7 01:44:05 wimax LED off and change to wan LED
Nov 7 01:48:38 usb 1-1.4.2: new high speed USB device using rtl8652-ehci and address 4
Nov 7 01:48:38 usb 1-1.4.2: configuration #1 chosen from 2 choices
Nov 7 01:48:38 scsi0 : SCSI emulation for USB Mass Storage devices
Nov 7 01:48:38 usb-storage: device found at 4
Nov 7 01:48:38 usb-storage: waiting for device to settle before scanning
Nov 7 01:48:39 wimax LED off and change to wan LED
Nov 7 01:48:43 scsi 0:0:0:0: Direct-Access Sony DSC 1.00 PQ: 0 ANSI: 0
Nov 7 01:48:43 SCSI device sda: 15523840 512-byte hdwr sectors (7948 MB)
Nov 7 01:48:43 sda: Write Protect is off
Nov 7 01:48:43 sda: Mode Sense: 03 00 00 00
Nov 7 01:48:43 sda: assuming drive cache: write through
Nov 7 01:48:43 SCSI device sda: 15523840 512-byte hdwr sectors (7948 MB)
Nov 7 01:48:43 sda: Write Protect is off
Nov 7 01:48:43 sda: Mode Sense: 03 00 00 00
Nov 7 01:48:43 sda: assuming drive cache: write through
Nov 7 01:48:43 sda: sda1
Nov 7 01:48:44 sd 0:0:0:0: Attached scsi removable disk sda
Nov 7 01:48:44 sd 0:0:0:0: Attached scsi generic sg0 type 0
Nov 7 01:48:44 scsi 0:0:0:1: Direct-Access Sony DSC 1.00 PQ: 0 ANSI: 0
Nov 7 01:48:44 SCSI device sdb: 92160 512-byte hdwr sectors (47 MB)
Nov 7 01:48:44 sdb: Write Protect is on
Nov 7 01:48:44 sdb: Mode Sense: 03 00 80 00
Nov 7 01:48:44 sdb: assuming drive cache: write through
Nov 7 01:48:44 SCSI device sdb: 92160 512-byte hdwr sectors (47 MB)
Nov 7 01:48:44 sdb: Write Protect is on
Nov 7 01:48:44 sdb: Mode Sense: 03 00 80 00
Nov 7 01:48:44 sdb: assuming drive cache: write through
Nov 7 01:48:44 sdb: sdb1
Nov 7 01:48:44 sd 0:0:0:1: Attached scsi removable disk sdb
Nov 7 01:48:44 sd 0:0:0:1: Attached scsi generic sg1 type 0
Nov 7 01:48:44 scsi 0:0:0:2: Direct-Access Sony DSC 1.00 PQ: 0 ANSI: 0
Nov 7 01:48:44 SCSI device sdc: 28672 512-byte hdwr sectors (15 MB)
Nov 7 01:48:44 sdc: Write Protect is off
Nov 7 01:48:44 sdc: Mode Sense: 03 00 00 00
Nov 7 01:48:44 sdc: assuming drive cache: write through
Nov 7 01:48:44 SCSI device sdc: 28672 512-byte hdwr sectors (15 MB)
Nov 7 01:48:44 sdc: Write Protect is off
Nov 7 01:48:44 sdc: Mode Sense: 03 00 00 00
Nov 7 01:48:44 sdc: assuming drive cache: write through
Nov 7 01:48:44 sdc: sdc1
Nov 7 01:48:44 sd 0:0:0:2: Attached scsi removable disk sdc
Nov 7 01:48:44 sd 0:0:0:2: Attached scsi generic sg2 type 0
Nov 7 01:48:44 usb-storage: device scan complete
Nov 7 01:49:41 usb 1-1.4.2: USB disconnect, address 4
Nov 7 01:49:42 wimax LED off and change to wan LED
Jan 1 00:00:24 klogd started: BusyBox v1.8.2 (2010-10-08 16:18:17 CST)
Jan 1 00:00:24 Linux version 2.6.19 (root@8196bu) (gcc version 3.4.6-1.3.6) #2 Fri Oct 8 16:18:13 CST 2010
Now; without connecting a console, any ideas of how to crack the default telnet password? it does not prompt for a username, only a password, when I telnet to it.
The only password I can change from the web site is the "admin" account; which is clearly not the root account.
The Firmware appears to be encrypted/compressed in some form; but it's been awhile since I did any reverse-engineering =(
Full boot log, to drool over (with a 7-port hub, and a digital camera plugged in):
Jan 1 00:00:24 klogd started: BusyBox v1.8.2 (2010-10-08 16:18:17 CST)
Jan 1 00:00:24 Linux version 2.6.19 (root@8196bu) (gcc version 3.4.6-1.3.6) #2 Fri Oct 8 16:18:13 CST 2010
Jan 1 00:00:24 CPU revision is: 0000ff00
Jan 1 00:00:24 Determined physical RAM map:
Jan 1 00:00:24 memory: 02000000 @ 00000000 (usable)
Jan 1 00:00:24 User-defined physical RAM map:
Jan 1 00:00:24 memory: 02000000 @ 00000000 (usable)
Jan 1 00:00:24 On node 0 totalpages: 8192
Jan 1 00:00:24 DMA zone: 64 pages used for memmap
Jan 1 00:00:24 DMA zone: 0 pages reserved
Jan 1 00:00:24 DMA zone: 8128 pages, LIFO batch:0
Jan 1 00:00:24 read synopsys=0
Jan 1 00:00:24 read synopsys2=0
Jan 1 00:00:24 rtl8652-ehci rtl8652-ehci.0: irq 10, io base 0xb8021000
Jan 1 00:00:24 rtl8652-ehci rtl8652-ehci.0: USB 0.0 started, EHCI 1.00, driver 10 Dec 2004
Jan 1 00:00:24 usb usb1: configuration #1 chosen from 1 choice
Jan 1 00:00:24 hub 1-0:1.0: USB hub found
Jan 1 00:00:24 hub 1-0:1.0: 2 ports detected
Jan 1 00:00:24 rtl8652-ohci rtl8652-ohci.0: RTL8652 OHCI
Jan 1 00:00:24 rtl8652-ohci rtl8652-ohci.0: new USB bus registered, assigned bus number 2
Jan 1 00:00:24 rtl8652-ohci rtl8652-ohci.0: irq 10, io mem 0xb8020000
Jan 1 00:00:24 usb usb2: configuration #1 chosen from 1 choice
Nov 7 01:44:04 usb 1-1: new high speed USB device using rtl8652-ehci and address 2
Nov 7 01:44:04 usb 1-1: configuration #1 chosen from 1 choice
Nov 7 01:44:04 hub 1-1:1.0: USB hub found
Nov 7 01:44:04 hub 1-1:1.0: 4 ports detected
Nov 7 01:44:05 usb 1-1.4: new high speed USB device using rtl8652-ehci and address 3
Nov 7 01:44:05 usb 1-1.4: configuration #1 chosen from 1 choice
Nov 7 01:44:05 hub 1-1.4:1.0: USB hub found
Nov 7 01:44:05 hub 1-1.4:1.0: 4 ports detected
Nov 7 01:44:05 wimax LED off and change to wan LED
Nov 7 01:44:05 wimax LED off and change to wan LED
Nov 7 01:48:38 usb 1-1.4.2: new high speed USB device using rtl8652-ehci and address 4
Nov 7 01:48:38 usb 1-1.4.2: configuration #1 chosen from 2 choices
Nov 7 01:48:38 scsi0 : SCSI emulation for USB Mass Storage devices
Nov 7 01:48:38 usb-storage: device found at 4
Nov 7 01:48:38 usb-storage: waiting for device to settle before scanning
Nov 7 01:48:39 wimax LED off and change to wan LED
Nov 7 01:48:43 scsi 0:0:0:0: Direct-Access Sony DSC 1.00 PQ: 0 ANSI: 0
Nov 7 01:48:43 SCSI device sda: 15523840 512-byte hdwr sectors (7948 MB)
Nov 7 01:48:43 sda: Write Protect is off
Nov 7 01:48:43 sda: Mode Sense: 03 00 00 00
Nov 7 01:48:43 sda: assuming drive cache: write through
Nov 7 01:48:43 SCSI device sda: 15523840 512-byte hdwr sectors (7948 MB)
Nov 7 01:48:43 sda: Write Protect is off
Nov 7 01:48:43 sda: Mode Sense: 03 00 00 00
Nov 7 01:48:43 sda: assuming drive cache: write through
Nov 7 01:48:43 sda: sda1
Nov 7 01:48:44 sd 0:0:0:0: Attached scsi removable disk sda
Nov 7 01:48:44 sd 0:0:0:0: Attached scsi generic sg0 type 0
Nov 7 01:48:44 scsi 0:0:0:1: Direct-Access Sony DSC 1.00 PQ: 0 ANSI: 0
Nov 7 01:48:44 SCSI device sdb: 92160 512-byte hdwr sectors (47 MB)
Nov 7 01:48:44 sdb: Write Protect is on
Nov 7 01:48:44 sdb: Mode Sense: 03 00 80 00
Nov 7 01:48:44 sdb: assuming drive cache: write through
Nov 7 01:48:44 SCSI device sdb: 92160 512-byte hdwr sectors (47 MB)
Nov 7 01:48:44 sdb: Write Protect is on
Nov 7 01:48:44 sdb: Mode Sense: 03 00 80 00
Nov 7 01:48:44 sdb: assuming drive cache: write through
Nov 7 01:48:44 sdb: sdb1
Nov 7 01:48:44 sd 0:0:0:1: Attached scsi removable disk sdb
Nov 7 01:48:44 sd 0:0:0:1: Attached scsi generic sg1 type 0
Nov 7 01:48:44 scsi 0:0:0:2: Direct-Access Sony DSC 1.00 PQ: 0 ANSI: 0
Nov 7 01:48:44 SCSI device sdc: 28672 512-byte hdwr sectors (15 MB)
Nov 7 01:48:44 sdc: Write Protect is off
Nov 7 01:48:44 sdc: Mode Sense: 03 00 00 00
Nov 7 01:48:44 sdc: assuming drive cache: write through
Nov 7 01:48:44 SCSI device sdc: 28672 512-byte hdwr sectors (15 MB)
Nov 7 01:48:44 sdc: Write Protect is off
Nov 7 01:48:44 sdc: Mode Sense: 03 00 00 00
Nov 7 01:48:44 sdc: assuming drive cache: write through
Nov 7 01:48:44 sdc: sdc1
Nov 7 01:48:44 sd 0:0:0:2: Attached scsi removable disk sdc
Nov 7 01:48:44 sd 0:0:0:2: Attached scsi generic sg2 type 0
Nov 7 01:48:44 usb-storage: device scan complete
Nov 7 01:49:41 usb 1-1.4.2: USB disconnect, address 4
Nov 7 01:49:42 wimax LED off and change to wan LED
V/r,
Mike
If this runs on linux then its possible to run ddwrt on it....right???
Could I get some guidance on how to go about extracting this; to view the existing file system? I've tried just about every squashfs compilation I can think of; but they all end in errors =/
or perhaps some input on what I've gathered of the firmware structure:
0x0 8b 186n…. Firmware Identification:
0x8 8b TOTAL File Size…
0x80A6 32934b BZh9 BZ2 File System of some form; appears to be a Web Root.
0x15ABBE 5353476b sqsh SQUASHFS-based file system; uncracked!
0x675BC2 End of File
Joined: 06 Nov 2010 Posts: 42 Location: Harlem, GA
Posted: Fri Nov 19, 2010 14:07 Post subject:
Great success!
I now have DD-WRT v24-sp2 Up and running on a Sapido RB-1132.
Problem is; the flash and bootloader are ... funny. and they require some heavy modifications to run DD-WRT:
1) Had to crack the default root password (it's "swetop", without the quotes as of version 1.0.14)
2) Had to manually re-compile the DD-WRT kernel; with Realtek 8196BU ASM Support (Lexra 4280@400MHz; also known as the Realtek RTL8196BU v1.4)
2) Had to manually DD the kernel into /dev/mtd
3) Had to manually DD the filesystem into /dev/mtdblock1
4) Had to use the SPI Recovery to re-copy the filesystem 8 times; at different positions; trying to "guess" the recompiled kernel ended....
And, in the final product; nothing works. No USB (the usb-storage used doesn't get along with the realtek controller); No WiFi (same same); and only eth1 works.
So; here is my current stopage point:
Does anyone have _ANY_ form of official reference for the Realtek RTL8196BU v1.4? Did Realtek actually make this chip, or is it a "Taiwan Special"?