Posted: Thu Jul 05, 2018 6:19 Post subject: Dump CFE on Archer C3150 V2 Router
Hi All,
I'm hoping someone can assist here. I have an Archer C3150 V2 and am in the process of providing Brainslayer the nvram and CFE dumps.
I have successfully obtained serial access to the router and have exported the nvram using nvram show.
I am having issues exporting the CFE however. The exported CFE.BIN on my PC running the TFTP server does not look right when opened in a HEX editor - all the data is FF FF FF etc
I originally used save 192.168.0.2:cfe.bin BC000000 40000
and then save 192.168.0.2:cfe.bin BC000000 400000 to dump the whole memory.
The resulting BIN files however don't look right as previously mentioned.
My serial console looks like the below
Decompressing...done
CFE version 7.14.131.42 (r622851) based on BBP 1.0.37 for BCM947XX (32bit,SP,)
Build Date: Fri Aug 12 08:26:39 CST 2016 (rock@rock-computer)
Copyright (C) 2000-2008 Broadcom Corporation.
-----------------------------------------
|Factory Boot - Double boot TP-LINK. |
-----------------------------------------
Init Arena
Init Devs.
DDR Clock: 800 MHz
Info: DDR frequency set from clkfreq=1400,*800*
et0(chipattach) MAC address: 50-c7-bf-a2-b6-ac
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 7.14.131.42 (r622851)
CPU type 0x0: 1400MHz
Tot mem: 262144 KBytes
Method even though its recommend in the peacock post
With alot if not all firmwares starting some years back...not really sure exactly
That method produces a bin file with a whole lot of FF FF FF FF hex in the produced cfe.bin fle...where as other methods produce hex that matches web based backups made many years ago on same router
Or...send that to Brainslayer and maybe he'll see a need to look into it.... _________________ Location 1
R7800- DD-WRT v3.0-r53562 (10/03/23) Gateway
WNDR3400v1 DD-WRT v3.0-r35531_mega-nv64k (03/26/18 ) Access Point
WRT160Nv3 DD-WRT ?v3?.0-r35531 mini (03/26/18 ) Access Point
WRT54GSv5 DD-WRT v24-r33555_micro_generic (10/20/17) Repeater
Location 2
R7800- DD-WRT v3.0-r51855 (02/25/23) Gateway
R6300v2- DD-WRT v3.0-r50671 (10-26-22) Access Point
WNDR3700v2 DD-WRT v3.0-r35531 std (03/26/18 ) Access Point
E1200 v2 DD-WRT v3.0-r35531 mega-nv64k (03/26/18 ) Gateway(for trivial reasons)
RBWAPG-5HACT2HND-BE RouterOS-v6.46.4 (2/21/20) Outdoor Access Point
2x RBSXTG-5HPACD RouterOS-v6.46.4 (2/21/20) PTP Bridge 866.6Mbps-1GbpsLAN
Location 3
2x R7000- DD-WRT v3.0-r50671 (10/26/22) Access Points
2x RBWAPG-60AD RouterOS-v6.45.9 (04/30/20) PTP Bridge 2.3Gbps-1GbpsLAN
2x RBSXTsqG-5acD RouterOS-v6.49.7 (10/14/22) PTP Bridge 866.6Mbps-1GbpsLAN Thank You BrainSlayer for ALL that you do & have done, also to "most" everyone here that shares their knowledge
Thanks for the replies. I ended up exporting the CFE successfully via the below command. I should mention this is obviously from stock TP Link firmware and the CFE on this router has a very limited set of commands that can be used.
save 192.168.0.2:cfe.bin 0x00F00000 903480
I think it may have exported more then just the CFE however but it's done the trick.
Have sent all the dumps to Brainslayer. Here's hoping that he will develop a port for Archer C3150 V1 and V2
This router uses the exact same CPU and wireless chips as Asus RT-AC88U for example which is supported by DD WRT.