Netgear WNDR3400v3

From WikiDevi.Wi-Cat.RU
Jump to navigation Jump to search

Netgear WNDR3400 v3

Manuf (OEM/ODM): Foxconn U12H208 T00

FCC approval date: 06 December 2012
UPC: 606449071146 (UPC DB, On eBay)
Country of manuf.: Vietnam
Series: N600

Amazon image

ASINs
B0041LYY6K (Flag of the United States.svg, On Amazon, On CCC)
B0085WN7YQ (Flag of the United States.svg, On Amazon, On CCC)
multiple revisions of this device, use caution

Type: wireless router

FCC ID: PY312300210
IC ID: 4054A-12300210
PCB ID: U12H208T00

Power: 12 VDC, 1.5 A
Connector type: barrel

CPU1: Broadcom BCM5358UB0 (530 MHz)
FLA1: 8 MiB8,388,608 B <br />65,536 Kib <br />8,192 KiB <br />64 Mib <br />0.00781 GiB <br /> (Macronix MX25L6406EM2I-12G)
RAM1: 64 MiB67,108,864 B <br />524,288 Kib <br />65,536 KiB <br />512 Mib <br />0.0625 GiB <br /> (Samsung K4H511638J-LCCC)

Expansion IFs: USB 2.0
USB ports: 1

WI1 chip1: Broadcom BCM5358UB0
WI1 802dot11 protocols: bgn
WI1 MIMO config: 2x2:2
WI1 antenna connector: none
WI2 chip1: Broadcom BCM43236B
WI2 802dot11 protocols: an
WI2 MIMO config: 2x2:2
WI2 antenna connector: none

ETH chip1: Broadcom BCM5358UB0
Switch: Broadcom BCM5358UB0
LAN speed: 100M
LAN ports: 4
WAN speed: 100M
WAN ports: 1

abgn

Additional chips
Hex inverter;NXP;74LVC04AD;;1;

Stock bootloader: CFE

Stock FW OS: Linux 2.6.22

TPFirmware supported: DD-WRT • (List), TomatoUSB • (List | DLs), OpenWrt • (List | Dev | DLs)

Default IP address: 192.168.1.1
the IP 192.168.1.1 is used by 1304 additional devices
of which 106 are Netgear devices
Default login user: admin
Default login password: password
admin:password credentials used by 423 additional devices
of which 304 are Netgear devices

802dot11 OUI: 04:A1:51 (3 E, 3 W), C4:04:15 (3 E, 1 W)
Ethernet OUI: 04:A1:51 (3 E, 3 W), C4:04:15 (3 E, 1 W)

 CPU1 brandWI1 chip1 brandWI2 chip1 brand
Netgear WNDR3400v1BroadcomBroadcomBroadcom
Netgear WNDR3400v2BroadcomBroadcomBroadcom
Netgear WNDR3400v3BroadcomBroadcomBroadcom

For a list of all currently documented Broadcom chipsets with specifications, see Broadcom.


N600 Wireless Dual Band Router

The BCM43236 used would appear (or would be likely) to vary..

  • At least some production units would appear to be using BCM43236B
  • The FCC docs show the device w/ Broadcom BCM43236
(BCM43236KMLG, HT1127 P20, 146859 6 W)

The default SSID formats are probably NETGEARXX and NETGEARXX-5G.

Custom Firmware

Serial

  • tp16 = GND
  • tp15 = RX
  • tp12 = TX

nvram show

Netgear WNDR3400v3/nvram

 • Serial info

cat /proc/cmdline

# cat /proc/cmdline
root=/dev/mtdblock2 console=ttyS0,115200 init=/sbin/preinit

cat /proc/mtd

# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00040000 00010000 "boot"
mtd1: 00700000 00010000 "linux"
mtd2: 005c6ef0 00010000 "rootfs"
mtd3: 00010000 00010000 "ML1"
mtd4: 00010000 00010000 "ML2"
mtd5: 00010000 00010000 "ML3"
mtd6: 00010000 00010000 "ML4"
mtd7: 00010000 00010000 "ML5"
mtd8: 00010000 00010000 "ML6"
mtd9: 00010000 00010000 "ML7"
mtd10: 00010000 00010000 "T_Meter1"
mtd11: 00010000 00010000 "T_Meter2"
mtd12: 00010000 00010000 "POT"
mtd13: 00010000 00010000 "board_data"
mtd14: 00010000 00010000 "nvram"

cat /proc/cpuinfo

# cat /proc/cpuinfo
system type             : Broadcom BCM5357 chip rev 2
processor               : 0
cpu model               : MIPS 74K V4.9
BogoMIPS                : 264.60
wait instruction        : no
microsecond timers      : yes
tlb_entries             : 64
extra interrupt vector  : no
hardware watchpoint     : yes
ASEs implemented        : mips16 dsp
VCED exceptions         : not available
VCEI exceptions         : not available

unaligned_instructions  : 211
dcache hits             : 2147483648
dcache misses           : 4287610019
icache hits             : 2147483648
icache misses           : 1929082868
instructions            : 2147483648

cat /proc/meminfo

# cat /proc/meminfo
MemTotal:        61408 kB
MemFree:         31688 kB
Buffers:          3204 kB
Cached:          10784 kB
SwapCached:          0 kB
Active:           8156 kB
Inactive:        10440 kB
SwapTotal:           0 kB
SwapFree:            0 kB
Dirty:               0 kB
Writeback:           0 kB
AnonPages:        4620 kB
Mapped:           2540 kB
Slab:             7128 kB
SReclaimable:     1740 kB
SUnreclaim:       5388 kB
PageTables:        348 kB
NFS_Unstable:        0 kB
Bounce:              0 kB
CommitLimit:     30704 kB
Committed_AS:     8076 kB
VmallocTotal:   786388 kB
VmallocUsed:      3424 kB
VmallocChunk:   782484 kB

cat /proc/kmsg

# cat /proc/kmsg
<5>Linux version 2.6.22 (lawrence@foxconncpe2) (gcc version 4.2.3) #1 Tue May 21 11:43:52 CST 2013
<4>CPU revision is: 00019749
<4>Found a 8MB ST compatible serial flash
<4>Determined physical RAM map:
<4> memory: 03fff000 @ 00000000 (usable)
<7>On node 0 totalpages: 16383
<7>  Normal zone: 127 pages used for memmap
<7>  Normal zone: 0 pages reserved
<7>  Normal zone: 16256 pages, LIFO batch:3
<4>Built 1 zonelists.  Total pages: 16256
<5>Kernel command line: root=/dev/mtdblock2 console=ttyS0,115200 init=/sbin/preinit
<4>Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
<4>Primary data cache 32kB, 4-way, linesize 32 bytes.
<6>Synthesized TLB refill handler (20 instructions).
<6>Synthesized TLB load handler fastpath (32 instructions).
<6>Synthesized TLB store handler fastpath (32 instructions).
<6>Synthesized TLB modify handler fastpath (31 instructions).
<4>PID hash table entries: 256 (order: 8, 1024 bytes)
<4>CPU: BCM5357 rev 2 at 530 MHz
<4>Using 265.000 MHz high precision timer.
<4>Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
<4>Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
<6>Memory: 61168k/65532k available (2783k kernel code, 4308k reserved, 560k data, 184k init, 0k highmem)
<7>Calibrating delay loop... 264.60 BogoMIPS (lpj=1323008)
<4>Mount-cache hash table entries: 512
<6>NET: Registered protocol family 16
<5>SCSI subsystem initialized
<6>usbcore: registered new interface driver usbfs
<6>usbcore: registered new interface driver hub
<6>usbcore: registered new device driver usb
<4>PCI: no core
<4>PCI: Fixing up bus 0
<6>NET: Registered protocol family 2
<6>Time: MIPS clocksource has been installed.
<4>IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
<4>TCP established hash table entries: 2048 (order: 2, 16384 bytes)
<4>TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
<6>TCP: Hash tables configured (established 2048 bind 2048)
<6>TCP reno registered
<6>squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher
<4>fuse init (API version 7.8)
<6>io scheduler noop registered (default)
<6>Serial: 8250/16550 driver $Revision: 1.1.1.1 $ 4 ports, IRQ sharing disabled
<6>serial8250: ttyS0 at MMIO 0x0 (irq = 8) is a 16550A
<6>loop: module loaded
<6>PPP generic driver version 2.4.2
<6>NET: Registered protocol family 24
<6>PPPoL2TP kernel driver, V0.17
<5>sflash: squash filesystem with lzma found at block 1508
<5>Creating 15 MTD partitions on "sflash":
<5>0x00000000-0x00040000 : "boot"
<5>0x00040000-0x00740000 : "linux"
<5>0x00179110-0x00740000 : "rootfs"
<5>0x00740000-0x00750000 : "ML1"
<5>0x00750000-0x00760000 : "ML2"
<5>0x00760000-0x00770000 : "ML3"
<5>0x00770000-0x00780000 : "ML4"
<5>0x00780000-0x00790000 : "ML5"
<5>0x00790000-0x007a0000 : "ML6"
<5>0x007a0000-0x007b0000 : "ML7"
<5>0x007b0000-0x007c0000 : "T_Meter1"
<5>0x007c0000-0x007d0000 : "T_Meter2"
<5>0x007d0000-0x007e0000 : "POT"
<5>0x007e0000-0x007f0000 : "board_data"
<5>0x007f0000-0x00800000 : "nvram"
<4>wombo_reset set to gpio 25
<7>PCI: Setting latency timer of device 0000:00:04.1 to 64
<6>ehci_hcd 0000:00:04.1: EHCI Host Controller
<6>ehci_hcd 0000:00:04.1: new USB bus registered, assigned bus number 1
<6>ehci_hcd 0000:00:04.1: EHCI Fastpath: New EHCI driver starting
<6>ehci_hcd 0000:00:04.1: irq 5, io mem 0x18004000
<6>ehci_hcd 0000:00:04.1: USB 0.0 started, EHCI 1.00, driver 10 Dec 2004
<6>usb usb1: configuration #1 chosen from 1 choice
<6>hub 1-0:1.0: USB hub found
<6>hub 1-0:1.0: 2 ports detected
<7>ohci_hcd: 2006 August 04 USB 1.1 'Open' Host Controller (OHCI) Driver
<4>wombo_reset set to gpio 25
<7>PCI: Setting latency timer of device 0000:00:04.0 to 64
<6>ohci_hcd 0000:00:04.0: OHCI Host Controller
<6>ohci_hcd 0000:00:04.0: new USB bus registered, assigned bus number 2
<6>ohci_hcd 0000:00:04.0: irq 5, io mem 0x18009000
<6>usb usb2: configuration #1 chosen from 1 choice
<6>hub 2-0:1.0: USB hub found
<6>hub 2-0:1.0: 2 ports detected
<6>Initializing USB Mass Storage driver...
<6>usb 1-2: new high speed USB device using ehci_hcd and address 2
<6>usb 1-2: configuration #1 chosen from 1 choice
<6>usbcore: registered new interface driver usb-storage
<6>USB Mass Storage support registered.
<4>u32 classifier
<6>TCP cubic registered
<6>NET: Registered protocol family 1
<6>NET: Registered protocol family 10
<6>6WIND/LSIIT IPv6 multicast forwarding 0.1 plus PIM-SM/SSM with *BSD API
<6>lo: Disabled Privacy Extensions
<6>IPv6 over IPv4 tunneling driver
<6>sit0: Disabled Privacy Extensions
<6>NET: Registered protocol family 17
<6>802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
<6>All bugs added by David S. Miller <davem@redhat.com>
<4>VFS: Mounted root (squashfs filesystem) readonly.
<6>Freeing unused kernel memory: 184k freed
<4>Warning: unable to open an initial console.
<4>Failed to execute /init
<4>Algorithmics/MIPS FPU Emulator v1.5
<4>emf: module license 'Proprietary' taints kernel.
<0>Initialise conn table 2048 entries
<4>et_module_init: passivemode set to 0x1
<7>PCI: Setting latency timer of device 0000:00:02.0 to 64
<4>eth0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.60.127 @VERSION_TYPE@
<4>wl_module_init: wl_txq_thresh set to 0x200
<7>PCI: Setting latency timer of device 0000:00:01.0 to 64
<4>eth1: Broadcom BCM4329 802.11 Wireless Controller 5.60.127.2704 @VERSION_TYPE@
<4>Symbol usb_register_driver is being used by a non-GPL module, which will not be allowed in the future
<4>Please see the file Documentation/feature-removal-schedule.txt in the kernel source tree for more details.
<4>Symbol usb_deregister is being used by a non-GPL module, which will not be allowed in the future
<4>Please see the file Documentation/feature-removal-schedule.txt in the kernel source tree for more details.
<4>wl_module_init: rpcq_rxthresh set to 0x200
<4>wl_module_init: wl_txq_thresh set to 0x200
<4>EHCI Fastpath: usb_dev 810fc000
<4>EHCI Fastpath: bus 810cbc00
<4>EHCI Fastpath: Hub 810fcc00
<6>ehci_hcd 0000:00:04.1: EHCI Fastpath: Got the bypass device command in EHCI 810fc000
<4>EHCI Fastpath: usb_dev 810fc000
<4>EHCI Fastpath: bus 810cbc00
<4>EHCI Fastpath: Hub 810fcc00
<6>ehci_hcd 0000:00:04.1: EHCI Fastpath: Got the bypass callback command in EHCI c0127adc
<4>EHCI Fastpath: usb_dev 810fc000
<4>EHCI Fastpath: bus 810cbc00
<4>EHCI Fastpath: Hub 810fcc00
<6>ehci_hcd 0000:00:04.1: EHCI Fastpath: Got the RH bypass command in EHCI for EP #0 0004
<6>ehci_hcd 0000:00:04.1: EHCI Fastpath: EP 83fc81ec QH a3e63100 dummy a3faa060
<4>EHCI Fastpath: usb_dev 810fc000
<4>EHCI Fastpath: bus 810cbc00
<4>EHCI Fastpath: Hub 810fcc00
<6>ehci_hcd 0000:00:04.1: EHCI Fastpath: Got the RH bypass command in EHCI for EP #1 0012
<6>ehci_hcd 0000:00:04.1: EHCI Fastpath: EP 83fc81a4 QH a3e63180 dummy a3faa120
<4>EHCI Fastpath: EP in 18 EP in2 19 EP out 4
<3>ehci_hcd 0000:00:04.1: dma_pool_free usbnet_qtd, a3faa060/3faa060 (bad dma)
<4>bcm_rpc_up: waiting to be connected
<4>bcm_rpc_buf_recv_mgn_high: Recvd:2 Version: 0x53c7f20
<4>State: 1 Session:0
<4>bcm_rpc_buf_recv_mgn_high: Reason: 0 Dongle Version: 0x53c7f20
<4>bcm_rpc_buf_recv_mgn_high: Connected!
<4>eth2: Broadcom BCMa8e4 802.11 Wireless Controller 5.60.127.2704 @VERSION_TYPE@
<6>usbcore: registered new interface driver dbus_usbdev
<7>vlan1: add 33:33:00:00:00:01 mcast address to master interface
<7>vlan1: add 01:00:5e:00:00:01 mcast address to master interface
<7>vlan1: add 33:33:ff:01:af:e1 mcast address to master interface
<6>vlan1: dev_set_allmulti(master, 1)
<6>vlan1: dev_set_promiscuity(master, 1)
<6>device eth0 entered promiscuous mode
<6>device vlan1 entered promiscuous mode
<6>device eth1 entered promiscuous mode
<6>device eth2 entered promiscuous mode
<6>br0: port 3(eth2) entering learning state
<6>br0: port 2(eth1) entering learning stateI<6>br0: port 1(vlan1) entering learning state
<6>br0: topology change detected, propagating
<6>br0: port 3(eth2) entering forwarding state
<6>br0: topology change detected, propagating
<6>br0: port 2(eth1) entering forwarding state
<6>br0: topology change detected, propagating
<6>br0: port 1(vlan1) entering forwarding state
<7>eth1: no IPv6 routers present
<7>eth2: no IPv6 routers present
<0>agnat QOS disable!
<0>IOCTL_AG_REGION_SET: English
<4>vlan2: Setting MAC address to  00 0c 43 30 52 78.
<7>vlan2: add 33:33:00:00:00:01 mcast address to master interface
<7>vlan2: add 01:00:5e:00:00:01 mcast address to master interface
<7>vlan2: add 33:33:ff:30:52:78 mcast address to master interface
<6>vlan2: dev_set_promiscuity(master, 1)
<6>device vlan2 entered promiscuous mode
<6>vlan2: dev_set_allmulti(master, 1)
<0>ACOSNAT: Set BCMCTF to off
<0>ACOSNAT: Set NAT for LAN domain only to on
<4>ACOSNAT: NAT for LAN domain only is ON, addr=0101a8c0,mask=00ffffff

cat /proc/bus/usb/devices

# cat /proc/bus/usb/devices

T:  Bus=02 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#=  1 Spd=12  MxCh= 2
B:  Alloc=  0/900 us ( 0%), #Int=  0, #Iso=  0
D:  Ver= 1.10 Cls=09(hub  ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1
P:  Vendor=0000 ProdID=0000 Rev= 2.06
S:  Manufacturer=Linux 2.6.22 ohci_hcd
S:  Product=OHCI Host Controller
S:  SerialNumber=0000:00:04.0
C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr=  0mA
I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub  ) Sub=00 Prot=00 Driver=hub
E:  Ad=81(I) Atr=03(Int.) MxPS=   2 Ivl=255ms

T:  Bus=01 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#=  1 Spd=480 MxCh= 2
B:  Alloc=  0/800 us ( 0%), #Int=  0, #Iso=  0
D:  Ver= 2.00 Cls=09(hub  ) Sub=00 Prot=01 MxPS=64 #Cfgs=  1
P:  Vendor=0000 ProdID=0000 Rev= 2.06
S:  Manufacturer=Linux 2.6.22 ehci_hcd
S:  Product=EHCI Host Controller
S:  SerialNumber=0000:00:04.1
C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr=  0mA
I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub  ) Sub=00 Prot=00 Driver=hub
E:  Ad=81(I) Atr=03(Int.) MxPS=   4 Ivl=256ms

T:  Bus=01 Lev=01 Prnt=01 Port=01 Cnt=01 Dev#=  2 Spd=480 MxCh= 0
D:  Ver= 2.00 Cls=ff(vend.) Sub=00 Prot=00 MxPS=64 #Cfgs=  1
P:  Vendor=0a5c ProdID=bd17 Rev= 0.01
S:  Manufacturer=Broadcom
S:  Product=Remote Download Wireless Adapter
S:  SerialNumber=000000000001
C:* #Ifs= 1 Cfg#= 1 Atr=80 MxPwr=200mA
I:* If#= 0 Alt= 0 #EPs= 4 Cls=ff(vend.) Sub=02 Prot=ff Driver=dbus_usbdev
E:  Ad=81(I) Atr=03(Int.) MxPS=  16 Ivl=1ms
E:  Ad=82(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=83(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=04(O) Atr=02(Bulk) MxPS= 512 Ivl=125us

cat /proc/bus/pci/devices

# cat /proc/bus/pci/devices
0000  14e40800  8  18000000     0     0     0     0     0     0  1000  1000     0  0  0  0   800  
0008  14e44329  3  18001000     0     0     0     0     0     0  1000  1000     0  0  0  0   800  wl
0010  14e44715  4  18002000     0     0     0     0     0     0  1000  1000     0  0  0  0   800  et
0020  14e4471a  5  18009000     0     0     0     0     0     0  1000     0     0  0  0  0   800  ohci_hcd
0021  14e4471a  5  18004000     0     0     0     0     0     0  1000     0     0  0  0  0   800  ehci_hcd
0028  14e4082e  d  18005000     0     0     0     0     0     0  1000  1000     0  0  0  0   800  
0030  14e44711  e  18006000     0     0     0     0     0     0  1000  1000     0  0  0  0   800  
0038  14e4080e  8  18007000     0     0     0     0     0     0  1000  1000     0  0  0  0   800 

cat /proc/mounts

# cat /proc/mounts
rootfs / rootfs rw 0 0
/dev/root / squashfs ro 0 0
devfs /dev tmpfs rw 0 0
proc /proc proc rw 0 0
sysfs /sys sysfs rw 0 0
ramfs /tmp ramfs rw 0 0
usbdeffs /proc/bus/usb usbfs rw 0 0

ps

# ps
  PID  Uid        VSZ Stat Command
    1 0          2636 S   /sbin/preinit 
    2 0               SW< [kthreadd]
    3 0               RWN [ksoftirqd/0]
    4 0               SW< [events/0]
    5 0               SW< [khelper]
   18 0               SW< [kblockd/0]
   19 0               SW< [ksuspend_usbd]
   22 0               SW< [khubd]
   45 0               SW  [pdflush]
   46 0               SW  [pdflush]
   47 0               SW< [kswapd0]
   48 0               SW< [aio/0]
  582 0               SW< [mtdblockd]
 2105 0          1532 S   /bin/eapd 
 2108 0          2032 S   nas 
 2112 0          2996 S   /bin/wps_monitor 
 2171 0          1748 S   swresetd 
 2173 0          1596 S   dnsRedirectReplyd 
 2178 0           828 S   dnsmasq -h -n -c 0 -N -i br0 -r /tmp/resolv.conf -u root 
 2181 0           844 S   udhcpd /tmp/udhcpd.conf 
 2185 0          1596 S   ddnsd & 
 2191 0          2212 S   heartbeat 
 2194 0          1524 S   wlanconfigd 
 2204 0          8292 S   httpd -S -E /usr/sbin/ca.pem /usr/sbin/httpsd.pem 
 2212 0          1600 S   scheact 
 2217 0          2612 S   upnpd 
 2222 0          1968 S   /usr/sbin/email 
 2225 0          1664 S   lld2d br0 
 2227 0          2252 S   /usr/sbin/acl_logd 
 2238 0          2076 S   check_fw 
 2311 0          1592 S   /usr/sbin/timesync /sbin/ntpclient 
 2368 0          1584 S   wpsd 
 2383 0          1104 R   telnetd 
 2386 0          1100 S   /bin/sh 
 2401 0          1100 R   ps 

lsmod

# lsmod
Module                  Size       Used by    Tainted: P  
MultiSsidCntl           3712 0 -      Live 0xc0017000 (P)
acos_nat              464032 0 -      Live 0xc035d000 (P)
wl_high              1128768 0 -      Live 0xc007c000 (P)
wl                   1106400 0 -      Live 0xc01cc000 (P)
et                     72240 0 -      Live 0xc0069000 (P)
ipv6_spi               43616 0 -      Live 0xc0022000 (P)
igs                    20112 1 wl,    Live 0xc0011000 (P)
emf                    22400 2 wl,igs Live 0xc000a000 (P)