Posted: Sat Mar 17, 2007 2:35 Post subject: Realtek (SoCs are NOT SUPPORTED)
Is there any plan for supporting Realtek chips such as the 8186? I read that it wasn't normally worth while, but I was wondering if anyone had one or would want to see it. I cannot say I am too concerned myself, as I've only ever seen one router that uses the chip, and it was by a brand I think few have heard of - Hawking.
Oh, and for those interested, it was the Hawking HWR54G, which appears to be exactly the same on the inside as the Aztech WL730RT4.
Mod note 01.08.2023: RealTek SoC based routers will never be supported. See Known Incompatible Devices for further information. Topic now locked.
One of the beauties of the internet is necroposting.
BrainSlayer wrote:
no. and there will not be. realtek boards are slow, the radio is crap and 2 mb flash is even not worth to port it.
Put my vote in for development towards a Realtek port. GPL code is in abundance and its not THAT bad.
16M RAM and 2M flash is not exactly spectacular, but if micro versions were developed for 8/2 WRT routers, it shouldn't be that much of a stretch to port one for a MIPS platform.
and what about dlink DAP-1160? it is built on rtl8186, has 4MB flash, 16MB RAM and some sources available on ftp://ftp.dlink.cz/dap/dap-1160/driver_software/ is there a way, that dd-wrt could be ported?
One of the beauties of the internet is necroposting.
BrainSlayer wrote:
no. and there will not be. realtek boards are slow, the radio is crap and 2 mb flash is even not worth to port it.
Put my vote in for development towards a Realtek port. GPL code is in abundance and its not THAT bad.
16M RAM and 2M flash is not exactly spectacular, but if micro versions were developed for 8/2 WRT routers, it shouldn't be that much of a stretch to port one for a MIPS platform.
Brainslayer is soo right, the Realtek cpu's are not much to put in a parcel under the xmas tree.
They are slooow. They are crap.
Realtek based routers are not very common, you may find one here and one there but you rarely see a router mfgr having more than one model based on Realtek. Burned once..
There are so many good routers for which there hasn't been time for Brainslayer to do a dd-wrt port that it would be a misuse of time to spend it on Realtek ports.
No need to "vote" for it, the man has already said no. _________________ Kernel panic: Aiee, killing interrupt handler!
depends on term qualiffication... for example, here in east europe (CZ/SK/PL) they are very common and is not a wonder that lot of local ISPs use them in their networks. Generally, there are maybe more those craps (as you call it) than dd-wrt cappable units around me.
Jan 1 00:00:24 klogd started: BusyBox v1.8.2 (2010-10-08 16:18:17 CST)
Jan 1 00:00:24 Linux version 2.6.19 (root@8196bu) (gcc version 3.4.6-1.3.6) #2 Fri Oct 8 16:18:13 CST 2010
Now; without connecting a console, any ideas of how to crack the default telnet password? it does not prompt for a username, only a password, when I telnet to it.
The only password I can change from the web site is the "admin" account; which is clearly not the root account.
The Firmware appears to be encrypted/compressed in some form; but it's been awhile since I did any reverse-engineering =(
Full boot log, to drool over (with a 7-port hub, and a digital camera plugged in):
Jan 1 00:00:24 klogd started: BusyBox v1.8.2 (2010-10-08 16:18:17 CST)
Jan 1 00:00:24 Linux version 2.6.19 (root@8196bu) (gcc version 3.4.6-1.3.6) #2 Fri Oct 8 16:18:13 CST 2010
Jan 1 00:00:24 CPU revision is: 0000ff00
Jan 1 00:00:24 Determined physical RAM map:
Jan 1 00:00:24 memory: 02000000 @ 00000000 (usable)
Jan 1 00:00:24 User-defined physical RAM map:
Jan 1 00:00:24 memory: 02000000 @ 00000000 (usable)
Jan 1 00:00:24 On node 0 totalpages: 8192
Jan 1 00:00:24 DMA zone: 64 pages used for memmap
Jan 1 00:00:24 DMA zone: 0 pages reserved
Jan 1 00:00:24 DMA zone: 8128 pages, LIFO batch:0
Jan 1 00:00:24 read synopsys=0
Jan 1 00:00:24 read synopsys2=0
Jan 1 00:00:24 rtl8652-ehci rtl8652-ehci.0: irq 10, io base 0xb8021000
Jan 1 00:00:24 rtl8652-ehci rtl8652-ehci.0: USB 0.0 started, EHCI 1.00, driver 10 Dec 2004
Jan 1 00:00:24 usb usb1: configuration #1 chosen from 1 choice
Jan 1 00:00:24 hub 1-0:1.0: USB hub found
Jan 1 00:00:24 hub 1-0:1.0: 2 ports detected
Jan 1 00:00:24 rtl8652-ohci rtl8652-ohci.0: RTL8652 OHCI
Jan 1 00:00:24 rtl8652-ohci rtl8652-ohci.0: new USB bus registered, assigned bus number 2
Jan 1 00:00:24 rtl8652-ohci rtl8652-ohci.0: irq 10, io mem 0xb8020000
Jan 1 00:00:24 usb usb2: configuration #1 chosen from 1 choice
Nov 7 01:44:04 usb 1-1: new high speed USB device using rtl8652-ehci and address 2
Nov 7 01:44:04 usb 1-1: configuration #1 chosen from 1 choice
Nov 7 01:44:04 hub 1-1:1.0: USB hub found
Nov 7 01:44:04 hub 1-1:1.0: 4 ports detected
Nov 7 01:44:05 usb 1-1.4: new high speed USB device using rtl8652-ehci and address 3
Nov 7 01:44:05 usb 1-1.4: configuration #1 chosen from 1 choice
Nov 7 01:44:05 hub 1-1.4:1.0: USB hub found
Nov 7 01:44:05 hub 1-1.4:1.0: 4 ports detected
Nov 7 01:44:05 wimax LED off and change to wan LED
Nov 7 01:44:05 wimax LED off and change to wan LED
Nov 7 01:48:38 usb 1-1.4.2: new high speed USB device using rtl8652-ehci and address 4
Nov 7 01:48:38 usb 1-1.4.2: configuration #1 chosen from 2 choices
Nov 7 01:48:38 scsi0 : SCSI emulation for USB Mass Storage devices
Nov 7 01:48:38 usb-storage: device found at 4
Nov 7 01:48:38 usb-storage: waiting for device to settle before scanning
Nov 7 01:48:39 wimax LED off and change to wan LED
Nov 7 01:48:43 scsi 0:0:0:0: Direct-Access Sony DSC 1.00 PQ: 0 ANSI: 0
Nov 7 01:48:43 SCSI device sda: 15523840 512-byte hdwr sectors (7948 MB)
Nov 7 01:48:43 sda: Write Protect is off
Nov 7 01:48:43 sda: Mode Sense: 03 00 00 00
Nov 7 01:48:43 sda: assuming drive cache: write through
Nov 7 01:48:43 SCSI device sda: 15523840 512-byte hdwr sectors (7948 MB)
Nov 7 01:48:43 sda: Write Protect is off
Nov 7 01:48:43 sda: Mode Sense: 03 00 00 00
Nov 7 01:48:43 sda: assuming drive cache: write through
Nov 7 01:48:43 sda: sda1
Nov 7 01:48:44 sd 0:0:0:0: Attached scsi removable disk sda
Nov 7 01:48:44 sd 0:0:0:0: Attached scsi generic sg0 type 0
Nov 7 01:48:44 scsi 0:0:0:1: Direct-Access Sony DSC 1.00 PQ: 0 ANSI: 0
Nov 7 01:48:44 SCSI device sdb: 92160 512-byte hdwr sectors (47 MB)
Nov 7 01:48:44 sdb: Write Protect is on
Nov 7 01:48:44 sdb: Mode Sense: 03 00 80 00
Nov 7 01:48:44 sdb: assuming drive cache: write through
Nov 7 01:48:44 SCSI device sdb: 92160 512-byte hdwr sectors (47 MB)
Nov 7 01:48:44 sdb: Write Protect is on
Nov 7 01:48:44 sdb: Mode Sense: 03 00 80 00
Nov 7 01:48:44 sdb: assuming drive cache: write through
Nov 7 01:48:44 sdb: sdb1
Nov 7 01:48:44 sd 0:0:0:1: Attached scsi removable disk sdb
Nov 7 01:48:44 sd 0:0:0:1: Attached scsi generic sg1 type 0
Nov 7 01:48:44 scsi 0:0:0:2: Direct-Access Sony DSC 1.00 PQ: 0 ANSI: 0
Nov 7 01:48:44 SCSI device sdc: 28672 512-byte hdwr sectors (15 MB)
Nov 7 01:48:44 sdc: Write Protect is off
Nov 7 01:48:44 sdc: Mode Sense: 03 00 00 00
Nov 7 01:48:44 sdc: assuming drive cache: write through
Nov 7 01:48:44 SCSI device sdc: 28672 512-byte hdwr sectors (15 MB)
Nov 7 01:48:44 sdc: Write Protect is off
Nov 7 01:48:44 sdc: Mode Sense: 03 00 00 00
Nov 7 01:48:44 sdc: assuming drive cache: write through
Nov 7 01:48:44 sdc: sdc1
Nov 7 01:48:44 sd 0:0:0:2: Attached scsi removable disk sdc
Nov 7 01:48:44 sd 0:0:0:2: Attached scsi generic sg2 type 0
Nov 7 01:48:44 usb-storage: device scan complete
Nov 7 01:49:41 usb 1-1.4.2: USB disconnect, address 4
Nov 7 01:49:42 wimax LED off and change to wan LED
Jan 1 00:00:24 klogd started: BusyBox v1.8.2 (2010-10-08 16:18:17 CST)
Jan 1 00:00:24 Linux version 2.6.19 (root@8196bu) (gcc version 3.4.6-1.3.6) #2 Fri Oct 8 16:18:13 CST 2010
Now; without connecting a console, any ideas of how to crack the default telnet password? it does not prompt for a username, only a password, when I telnet to it.
The only password I can change from the web site is the "admin" account; which is clearly not the root account.
The Firmware appears to be encrypted/compressed in some form; but it's been awhile since I did any reverse-engineering =(
Full boot log, to drool over (with a 7-port hub, and a digital camera plugged in):
Jan 1 00:00:24 klogd started: BusyBox v1.8.2 (2010-10-08 16:18:17 CST)
Jan 1 00:00:24 Linux version 2.6.19 (root@8196bu) (gcc version 3.4.6-1.3.6) #2 Fri Oct 8 16:18:13 CST 2010
Jan 1 00:00:24 CPU revision is: 0000ff00
Jan 1 00:00:24 Determined physical RAM map:
Jan 1 00:00:24 memory: 02000000 @ 00000000 (usable)
Jan 1 00:00:24 User-defined physical RAM map:
Jan 1 00:00:24 memory: 02000000 @ 00000000 (usable)
Jan 1 00:00:24 On node 0 totalpages: 8192
Jan 1 00:00:24 DMA zone: 64 pages used for memmap
Jan 1 00:00:24 DMA zone: 0 pages reserved
Jan 1 00:00:24 DMA zone: 8128 pages, LIFO batch:0
Jan 1 00:00:24 read synopsys=0
Jan 1 00:00:24 read synopsys2=0
Jan 1 00:00:24 rtl8652-ehci rtl8652-ehci.0: irq 10, io base 0xb8021000
Jan 1 00:00:24 rtl8652-ehci rtl8652-ehci.0: USB 0.0 started, EHCI 1.00, driver 10 Dec 2004
Jan 1 00:00:24 usb usb1: configuration #1 chosen from 1 choice
Jan 1 00:00:24 hub 1-0:1.0: USB hub found
Jan 1 00:00:24 hub 1-0:1.0: 2 ports detected
Jan 1 00:00:24 rtl8652-ohci rtl8652-ohci.0: RTL8652 OHCI
Jan 1 00:00:24 rtl8652-ohci rtl8652-ohci.0: new USB bus registered, assigned bus number 2
Jan 1 00:00:24 rtl8652-ohci rtl8652-ohci.0: irq 10, io mem 0xb8020000
Jan 1 00:00:24 usb usb2: configuration #1 chosen from 1 choice
Nov 7 01:44:04 usb 1-1: new high speed USB device using rtl8652-ehci and address 2
Nov 7 01:44:04 usb 1-1: configuration #1 chosen from 1 choice
Nov 7 01:44:04 hub 1-1:1.0: USB hub found
Nov 7 01:44:04 hub 1-1:1.0: 4 ports detected
Nov 7 01:44:05 usb 1-1.4: new high speed USB device using rtl8652-ehci and address 3
Nov 7 01:44:05 usb 1-1.4: configuration #1 chosen from 1 choice
Nov 7 01:44:05 hub 1-1.4:1.0: USB hub found
Nov 7 01:44:05 hub 1-1.4:1.0: 4 ports detected
Nov 7 01:44:05 wimax LED off and change to wan LED
Nov 7 01:44:05 wimax LED off and change to wan LED
Nov 7 01:48:38 usb 1-1.4.2: new high speed USB device using rtl8652-ehci and address 4
Nov 7 01:48:38 usb 1-1.4.2: configuration #1 chosen from 2 choices
Nov 7 01:48:38 scsi0 : SCSI emulation for USB Mass Storage devices
Nov 7 01:48:38 usb-storage: device found at 4
Nov 7 01:48:38 usb-storage: waiting for device to settle before scanning
Nov 7 01:48:39 wimax LED off and change to wan LED
Nov 7 01:48:43 scsi 0:0:0:0: Direct-Access Sony DSC 1.00 PQ: 0 ANSI: 0
Nov 7 01:48:43 SCSI device sda: 15523840 512-byte hdwr sectors (7948 MB)
Nov 7 01:48:43 sda: Write Protect is off
Nov 7 01:48:43 sda: Mode Sense: 03 00 00 00
Nov 7 01:48:43 sda: assuming drive cache: write through
Nov 7 01:48:43 SCSI device sda: 15523840 512-byte hdwr sectors (7948 MB)
Nov 7 01:48:43 sda: Write Protect is off
Nov 7 01:48:43 sda: Mode Sense: 03 00 00 00
Nov 7 01:48:43 sda: assuming drive cache: write through
Nov 7 01:48:43 sda: sda1
Nov 7 01:48:44 sd 0:0:0:0: Attached scsi removable disk sda
Nov 7 01:48:44 sd 0:0:0:0: Attached scsi generic sg0 type 0
Nov 7 01:48:44 scsi 0:0:0:1: Direct-Access Sony DSC 1.00 PQ: 0 ANSI: 0
Nov 7 01:48:44 SCSI device sdb: 92160 512-byte hdwr sectors (47 MB)
Nov 7 01:48:44 sdb: Write Protect is on
Nov 7 01:48:44 sdb: Mode Sense: 03 00 80 00
Nov 7 01:48:44 sdb: assuming drive cache: write through
Nov 7 01:48:44 SCSI device sdb: 92160 512-byte hdwr sectors (47 MB)
Nov 7 01:48:44 sdb: Write Protect is on
Nov 7 01:48:44 sdb: Mode Sense: 03 00 80 00
Nov 7 01:48:44 sdb: assuming drive cache: write through
Nov 7 01:48:44 sdb: sdb1
Nov 7 01:48:44 sd 0:0:0:1: Attached scsi removable disk sdb
Nov 7 01:48:44 sd 0:0:0:1: Attached scsi generic sg1 type 0
Nov 7 01:48:44 scsi 0:0:0:2: Direct-Access Sony DSC 1.00 PQ: 0 ANSI: 0
Nov 7 01:48:44 SCSI device sdc: 28672 512-byte hdwr sectors (15 MB)
Nov 7 01:48:44 sdc: Write Protect is off
Nov 7 01:48:44 sdc: Mode Sense: 03 00 00 00
Nov 7 01:48:44 sdc: assuming drive cache: write through
Nov 7 01:48:44 SCSI device sdc: 28672 512-byte hdwr sectors (15 MB)
Nov 7 01:48:44 sdc: Write Protect is off
Nov 7 01:48:44 sdc: Mode Sense: 03 00 00 00
Nov 7 01:48:44 sdc: assuming drive cache: write through
Nov 7 01:48:44 sdc: sdc1
Nov 7 01:48:44 sd 0:0:0:2: Attached scsi removable disk sdc
Nov 7 01:48:44 sd 0:0:0:2: Attached scsi generic sg2 type 0
Nov 7 01:48:44 usb-storage: device scan complete
Nov 7 01:49:41 usb 1-1.4.2: USB disconnect, address 4
Nov 7 01:49:42 wimax LED off and change to wan LED
V/r,
Mike
If this runs on linux then its possible to run ddwrt on it....right???
Could I get some guidance on how to go about extracting this; to view the existing file system? I've tried just about every squashfs compilation I can think of; but they all end in errors =/
or perhaps some input on what I've gathered of the firmware structure:
0x0 8b 186n…. Firmware Identification:
0x8 8b TOTAL File Size…
0x80A6 32934b BZh9 BZ2 File System of some form; appears to be a Web Root.
0x15ABBE 5353476b sqsh SQUASHFS-based file system; uncracked!
0x675BC2 End of File
Joined: 06 Nov 2010 Posts: 42 Location: Harlem, GA
Posted: Fri Nov 19, 2010 14:07 Post subject:
Great success!
I now have DD-WRT v24-sp2 Up and running on a Sapido RB-1132.
Problem is; the flash and bootloader are ... funny. and they require some heavy modifications to run DD-WRT:
1) Had to crack the default root password (it's "swetop", without the quotes as of version 1.0.14)
2) Had to manually re-compile the DD-WRT kernel; with Realtek 8196BU ASM Support (Lexra 4280@400MHz; also known as the Realtek RTL8196BU v1.4)
2) Had to manually DD the kernel into /dev/mtd
3) Had to manually DD the filesystem into /dev/mtdblock1
4) Had to use the SPI Recovery to re-copy the filesystem 8 times; at different positions; trying to "guess" the recompiled kernel ended....
And, in the final product; nothing works. No USB (the usb-storage used doesn't get along with the realtek controller); No WiFi (same same); and only eth1 works.
So; here is my current stopage point:
Does anyone have _ANY_ form of official reference for the Realtek RTL8196BU v1.4? Did Realtek actually make this chip, or is it a "Taiwan Special"?