TP-LINK TL-WDR6500 高清拆解

hackpascal

楼主在某宝上入了个转卖的 WDR6500，准备拿来研究

配置：
CPU： Qualcomm Atheros QCA9561-AL3A
5G 11ac 无线： Qualcomm Atheros QCA9882-BR4A
频率： CPU 775MHz，DDR 650MHz，AHB 258MHz
内存： EtronTech EM68C16CWQD-25H 128MB DDR2
Flash： Winbond W25Q64FV 8MB
有线网：百兆 4+1，网口8针，指示灯在网口上
其它接口：UART JTAG USB (有焊点引出)

由于固件头变了（看看内核的 mtdparts 就知道），所以没有任何办法可以免拆机刷第三方固件

上图：（图较大，平均 900KB）

1. 
   
2. 
   
3. 
   
4. U-Boot 1.1.4-g5e4af5a2 (Sep 17 2014 - 17:29:36)
   
5. 
   
6. ap151 - Dragonfly 1.0
   
7. 
   
8. DRAM:  128 MB
   
9. Top of RAM usable for U-Boot at: 88000000
   
10. Reserving 135k for U-Boot at: 87fdc000
    
11. Reserving 192k for malloc() at: 87fac000
    
12. Reserving 44 Bytes for Board Info at: 87fabfd4
    
13. Reserving 36 Bytes for Global Data at: 87fabfb0
    
14. Reserving 128k for boot params() at: 87f8bfb0
    
15. Stack Pointer at: 87f8bf98
    
16. Now running in RAM - U-Boot at: 87fdc000
    
17. Flash Manuf Id 0xef, DeviceId0 0x40, DeviceId1 0x17
    
18. flash size 8MB, sector count = 128
    
19. Flash:  8 MB
    
20. Using default environment
    
21. 
    
22. In:    serial
    
23. Out:   serial
    
24. Err:   serial
    
25. Net:   ath_gmac_enet_initialize...
    
26. No valid address in Flash. Using fixed address
    
27. No valid address in Flash. Using fixed address
    
28. ath_gmac_enet_initialize: reset mask:c02200
    
29. Dragonfly----> S27 PHY *
    
30. : cfg1 0x80000000 cfg2 0x7114
    
31. eth0: 00:03:7f:09:0b:ad
    
32. athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
    
33. athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
    
34. eth0 up
    
35. ATHRS27: resetting s27
    
36. ATHRS27: s27 reset done
    
37. : cfg1 0x800c0000 cfg2 0x7214
    
38. eth1: 00:03:7f:09:0b:ad
    
39. athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
    
40. athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10
    
41. athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
    
42. athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :10
    
43. athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
    
44. athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :10
    
45. athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
    
46. athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :10
    
47. eth1 up
    
48. eth0, eth1
    
49. Setting 0x181162c0 to 0x82
    
50. Hit any key to stop autoboot:  0
    
51. ## Booting image at 9f010200 ...
    
52.    Image Name:   Linux Kernel Image
    
53.    Created:      2014-09-17   9:29:29 UTC
    
54.    Image Type:   MIPS Linux Kernel Image (lzma compressed)
    
55.    Data Size:    996298 Bytes = 972.9 kB
    
56.    Load Address: 80002000
    
57.    Entry Point:  8020ed90
    
58.    Verifying Checksum at 0x9f010240 ...OK
    
59.    Uncompressing Kernel Image ... OK
    
60. No initrd
    
61. ## Transferring control to Linux (at address 8020ed90) ...
    
62. ## Giving linux memsize in bytes, 134217728
    
63. 
    
64. Starting kernel ...
    
65. 
    
66. Booting QCA956x
    
67. [    0.000000] Linux version 2.6.31--LSDK- (jenkins@build-server) (gcc version 4.3.3 (GCC) ) #1 Wed Sep 17 17:28:37 CST 2014
    
68. [    0.000000] flash_size passed from bootloader = 8
    
69. [    0.000000] arg 1: console=ttyS0,115200
    
70. [    0.000000] arg 2: root=31:03
    
71. [    0.000000] arg 3: rootfstype=squashfs
    
72. [    0.000000] arg 4: init=/sbin/init
    
73. [    0.000000] arg 5: mtdparts=ath-nor0:32k(u-boot),32k(u-boot-env),1024k(uImage),6976k(rootfs),64k(mib0),64k(ART)
    
74. [    0.000000] arg 6: mem=128M
    
75. [    0.000000] CPU revision is: 00019750 (MIPS 74Kc)
    
76. [    0.000000] ath_sys_frequency: cpu 775 ddr 650 ahb 258
    
77. [    0.000000] Determined physical RAM map:
    
78. [    0.000000]  memory: 02000000 @ 00000000 (usable)
    
79. [    0.000000] User-defined physical RAM map:
    
80. [    0.000000]  memory: 08000000 @ 00000000 (usable)
    
81. [    0.000000] Initrd not found or empty - disabling initrd
    
82. [    0.000000] Zone PFN ranges:
    
83. [    0.000000]   Normal   0x00000000 -> 0x00008000
    
84. [    0.000000] Movable zone start PFN for each node
    
85. [    0.000000] early_node_map[1] active PFN ranges
    
86. [    0.000000]     0: 0x00000000 -> 0x00008000
    
87. [    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32512
    
88. [    0.000000] Kernel command line: console=ttyS0,115200 root=31:03 rootfstype=squashfs init=/sbin/init mtdparts=ath-nor0:32k(u-boot),32k(u-boot-env),1024k(uImage),6976k(rootfs),64k(mib0),64k(ART) mem=128M
    
89. [    0.000000] PID hash table entries: 512 (order: 9, 2048 bytes)
    
90. [    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
    
91. [    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
    
92. [    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
    
93. [    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
    
94. [    0.000000] Writing ErrCtl register=00000000
    
95. [    0.000000] Readback ErrCtl register=00000000
    
96. [    0.000000] Memory: 112512k/131072k available (2117k kernel code, 18392k reserved, 520k data, 160k init, 0k highmem)
    
97. [    0.000000] NR_IRQS:128
    
98. [    0.000000] plat_time_init: plat time init done
    
99. [    0.000000] r4k_clockevent_init: Ignoring int_usable failure
    
100. [    0.000000] Console: colour dummy device 80x25
     
101. [    0.000000] Calibrating delay loop... 387.07 BogoMIPS (lpj=774144)
     
102. [    0.080000] Mount-cache hash table entries: 512
     
103. [    0.080000]
     
104. [    0.080000] ****************ALLOC***********************
     
105. [    0.080000]  Packet mem: 802d0400 (0xe00000 bytes)
     
106. [    0.080000] ********************************************
     
107. [    0.080000]
     
108. [    0.080000] NET: Registered protocol family 16
     
109. [    0.080000] ath_pcibios_init: bus 0
     
110. [    0.080000] ath_pcibios_init(255): PCI 0 CMD write: 0x356
     
111. [    0.080000] registering PCI controller with io_map_base unset
     
112. [    0.080000] bio: create slab <bio-0> at 0
     
113. [    0.080000] SCSI subsystem initialized
     
114. [    0.080000] pci 0000:00:00.0: PME# supported from D0 D1 D3hot
     
115. [    0.080000] pci 0000:00:00.0: PME# disabled
     
116. [    0.080000] pcibios_map_irq: IRQ 76 for bus 0
     
117. [    0.080000] NET: Registered protocol family 2
     
118. [    0.080000] IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
     
119. [    0.080000] TCP established hash table entries: 4096 (order: 3, 32768 bytes)
     
120. [    0.080000] TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
     
121. [    0.080000] TCP: Hash tables configured (established 4096 bind 4096)
     
122. [    0.084000] TCP reno registered
     
123. [    0.084000] NET: Registered protocol family 1
     
124. [    0.084000] ATH GPIOC major 0
     
125. [    0.084000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
     
126. [    0.084000] JFFS2 version 2.2 (NAND) (ZLIB) (RTIME) (c) 2001-2006 Red Hat, Inc.
     
127. [    0.084000] fuse init (API version 7.12)
     
128. [    0.084000] msgmni has been set to 220
     
129. [    0.084000] io scheduler noop registered
     
130. [    0.084000] io scheduler deadline registered (default)
     
131. [    0.088000] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
     
132. [    0.088000] serial8250.0: ttyS0 at MMIO 0xb8020000 (irq = 19) is a 16550A
     
133. [    0.088000] console [ttyS0] enabled
     
134. [    0.448000] brd: module loaded
     
135. [    0.452000] PPP generic driver version 2.4.2
     
136. [    0.456000] NET: Registered protocol family 24
     
137. [    0.460000] 6 cmdlinepart partitions found on MTD device ath-nor0
     
138. [    0.468000] Creating 6 MTD partitions on "ath-nor0":
     
139. [    0.472000] 0x000000000000-0x000000008000 : "u-boot"
     
140. [    0.480000] mtd: partition "u-boot" doesn't end on an erase block -- force read-only
     
141. [    0.488000] 0x000000008000-0x000000010000 : "u-boot-env"
     
142. [    0.492000] mtd: partition "u-boot-env" doesn't start on an erase block boundary -- force read-only
     
143. [    0.500000] 0x000000010000-0x000000110000 : "uImage"
     
144. [    0.508000] 0x000000110000-0x0000007e0000 : "rootfs"
     
145. [    0.512000] 0x0000007e0000-0x0000007f0000 : "mib0"
     
146. [    0.516000] 0x0000007f0000-0x000000800000 : "ART"
     
147. [    0.524000] ->Oops: flash id 0xef4017 .
     
148. [    0.528000] ----TP IGMP has been init------
     
149. [    0.532000] TCP cubic registered
     
150. [    0.536000] NET: Registered protocol family 10
     
151. [    0.540000] NET: Registered protocol family 17
     
152. [    0.544000] 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
     
153. [    0.552000] All bugs added by David S. Miller <davem@redhat.com>
     
154. [    0.556000] athwdt_init: Registering WDT success
     
155. [    0.568000] VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
     
156. [    0.576000] Freeing unused kernel memory: 160k freed
     
157. init started: BusyBox v1.21.1 (2014-09-17 17:32:50 CST)
     
158. [    1.316000] usbcore: registered new interface driver usbfs
     
159. [    1.324000] usbcore: registered new interface driver hub
     
160. [    1.328000] usbcore: registered new device driver usb
     
161. [    1.396000] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
     
162. [    1.404000] Port Status 1c000004
     
163. [    1.404000] ath-ehci ath-ehci.0: ATH EHCI
     
164. [    1.408000] ath-ehci ath-ehci.0: new USB bus registered, assigned bus number 1
     
165. [    1.420000] ehci_reset Intialize USB CONTROLLER in host mode: 13
     
166. [    1.424000] ehci_reset Port Status 1c000000
     
167. [    1.428000] ath-ehci ath-ehci.0: irq 3, io mem 0x1b000000
     
168. [    1.436000] ehci_reset Intialize USB CONTROLLER in host mode: 13
     
169. [    1.444000] ehci_reset Port Status 1c000000
     
170. [    1.460000] ath-ehci ath-ehci.0: USB 2.0 started, EHCI 1.00
     
171. [    1.464000] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002
     
172. [    1.472000] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
     
173. [    1.480000] usb usb1: Product: ATH EHCI
     
174. [    1.484000] usb usb1: Manufacturer: Linux 2.6.31--LSDK- ehci_hcd
     
175. [    1.488000] usb usb1: SerialNumber: platform
     
176. [    1.492000] usb usb1: configuration #1 chosen from 1 choice
     
177. [    1.500000] hub 1-0:1.0: USB hub found
     
178. [    1.504000] hub 1-0:1.0: 1 port detected
     
179. [    1.508000] Port Status 1c000000
     
180. [    1.512000] ath-ehci1 ath-ehci1.1: ATH EHCI
     
181. [    1.516000] ath-ehci1 ath-ehci1.1: new USB bus registered, assigned bus number 2
     
182. [    1.524000] ehci_reset Intialize USB CONTROLLER in host mode: 13
     
183. [    1.532000] ehci_reset Port Status 1c000000
     
184. [    1.536000] ath-ehci1 ath-ehci1.1: irq 3, io mem 0x1b400000
     
185. [    1.544000] ehci_reset Intialize USB CONTROLLER in host mode: 13
     
186. [    1.552000] ehci_reset Port Status 1c000000
     
187. [    1.568000] ath-ehci1 ath-ehci1.1: USB 2.0 started, EHCI 1.00
     
188. [    1.572000] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002
     
189. [    1.580000] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1
     
190. [    1.588000] usb usb2: Product: ATH EHCI
     
191. [    1.592000] usb usb2: Manufacturer: Linux 2.6.31--LSDK- ehci_hcd
     
192. [    1.596000] usb usb2: SerialNumber: platform
     
193. [    1.604000] usb usb2: configuration #1 chosen from 1 choice
     
194. [    1.608000] hub 2-0:1.0: USB hub found
     
195. [    1.612000] hub 2-0:1.0: 1 port detected
     
196. [    1.676000] Initializing USB Mass Storage driver...
     
197. [    1.680000] usbcore: registered new interface driver usb-storage
     
198. [    1.688000] USB Mass Storage support registered.
     
199. [    1.760000] usbcore: registered new interface driver cdc_ether
     
200. This Board use 2.6.31
     
201. [    1.876000] xt_time: kernel timezone is -0000
     
202. [    1.996000] nf_conntrack version 0.5.0 (2048 buckets, 32768 max)
     
203. [    2.256000] ip_tables: (C) 2000-2006 Netfilter Core Team
     
204. insmod: can't insert '/lib/modules/2.6.31/kernel/iptable_raw.ko': No such file or directory
     
205. insmod: can't insert '/lib/modules/2.6.31/kernel/flashid.ko': No such file or directory
     
206. insmod: can't insert '/lib/modules/2.6.31/kernel/br_filter.ko': No such file or directory
     
207. [    2.464000] PPPoL2TP kernel driver, V1.0
     
208. [    2.500000] PPTP driver version 0.8.3
     
209. insmod: can't insert '/lib/modules/2.6.31/kernel/harmony.ko': No such file or directory
     
210. 
     
211. (none) mips #1 Wed Sep 17 17:28:37 CST 2014 (none)
     
212. (none) login: [    3.128000] Now flash open!
     
213. [    3.284000] qca956x_GMAC: Length per segment 1536
     
214. [    3.288000] 956x_GMAC: qca956x_gmac_attach
     
215. [    3.292000] 956x_GMAC: qca956x_set_gmac_caps
     
216. [    3.296000] GPIO LED SETTINGS ....done
     
217. [    3.300000] Currently in interrupt mode unit1
     
218. [    3.304000] qca956x_set_gmac_caps    CHECK DMA STATUS
     
219. [    3.312000] mac:1 Registering S27....
     
220. [    3.316000] qca956x_GMAC: RX TASKLET - Pkts per Intr:32
     
221. [    3.320000] qca956x_GMAC: Mac address for unit 1:bfff0006
     
222. [    3.324000] qca956x_GMAC: ff:ff:ff:ff:ff:ff
     
223. [    3.332000] qca956x_GMAC: Max segments per packet :   1
     
224. [    3.336000] qca956x_GMAC: Max tx descriptor count :   128
     
225. [    3.340000] qca956x_GMAC: Max rx descriptor count :   128
     
226. [    3.348000] qca956x_GMAC: Mac capability flags    :   2401
     
227. [    3.352000] 956x_GMAC: qca956x_gmac_attach
     
228. [    3.356000] 956x_GMAC: qca956x_set_gmac_caps
     
229. [    3.360000] Currently in interrupt mode unit0
     
230. [    3.364000] qca956x_set_gmac_caps    CHECK DMA STATUS
     
231. [    3.372000] mac:0 Registering S27....
     
232. [    3.376000] qca956x_GMAC: RX TASKLET - Pkts per Intr:32
     
233. [    3.380000] qca956x_GMAC: Mac address for unit 0:bfff0000
     
234. [    3.384000] qca956x_GMAC: ff:ff:ff:ff:ff:ff
     
235. [    3.392000] qca956x_GMAC: Max segments per packet :   1
     
236. [    3.396000] qca956x_GMAC: Max tx descriptor count :   128
     
237. [    3.400000] qca956x_GMAC: Max rx descriptor count :   128
     
238. [    3.408000] qca956x_GMAC: Mac capability flags    :   2401
     
239. [    4.020000] athr_gmac_ring_alloc Allocated 2048 at 0x87b3a800
     
240. [    4.028000] sram_desc_cnt 1536,mac Unit 0,Tx r->ring_desc 0xbd000000
     
241. [    4.036000] athr_gmac_ring_alloc Allocated 2048 at 0x87b3a000
     
242. [    4.040000] sram_desc_cnt 3072,mac Unit 0,Rx r->ring_desc 0xbd000600
     
243. [    4.348000] 956x_GMAC: eth0 in MII MODE
     
244. [    4.352000] Dragonfly -----> S27 PHY
     
245. [    4.356000] Setting Drop CRC Errors, Pause Frames and Length Error frames
     
246. [    4.372000] Setting PHY...
     
247. [    4.696000] ADDRCONF(NETDEV_UP): eth1: link is not ready
     
248. [    4.708000] athr_gmac_ring_alloc Allocated 2048 at 0x87b3b800
     
249. [    4.716000] sram_desc_cnt 4608,mac Unit 1,Tx r->ring_desc 0xbd000c00
     
250. [    4.720000] athr_gmac_ring_alloc Allocated 2048 at 0x87b3b000
     
251. [    4.728000] sram_desc_cnt 6144,mac Unit 1,Rx r->ring_desc 0xbd001200
     
252. [    5.032000] 956x_GMAC: eth1 in RGMII MODE
     
253. [    5.036000] Dragonfly -----> S27 PHY
     
254. [    5.040000] ATHRS27: resetting s27
     
255. [    5.144000] ATHRS27: s27 reset done
     
256. [    5.160000] ++++ athrs27_igmp_setup once
     
257. [    5.172000] Setting Drop CRC Errors, Pause Frames and Length Error frames
     
258. [    5.188000] Setting PHY...
     
259. [    5.316000] ADDRCONF(NETDEV_UP): eth0: link is not ready
     
260. [    5.336000] device eth0 entered promiscuous mode
     
261. [    5.348000] Now flash open!
     
262. [    5.356000] athr_gmac_ring_free Freeing at 0x87b3a800
     
263. [    5.356000] athr_gmac_ring_free Freeing at 0x87b3a000
     
264. [    5.380000] athr_gmac_ring_alloc Allocated 2048 at 0x87b3a000
     
265. [    5.388000] sram_desc_cnt 6144,mac Unit 0,Tx r->ring_desc 0xbd000000
     
266. [    5.396000] athr_gmac_ring_alloc Allocated 2048 at 0x87b3a800
     
267. [    5.400000] sram_desc_cnt 6144,mac Unit 0,Rx r->ring_desc 0xbd000600
     
268. [    5.708000] 956x_GMAC: eth0 in MII MODE
     
269. [    5.712000] Dragonfly -----> S27 PHY
     
270. [    5.716000] Setting Drop CRC Errors, Pause Frames and Length Error frames
     
271. [    5.732000] Setting PHY...
     
272. [    6.056000] ADDRCONF(NETDEV_UP): eth1: link is not ready
     
273. route: SIOCADDRT: Invalid argument
     
274. [    6.072000] athr_gmac_ring_free Freeing at 0x87b3b800
     
275. [    6.072000] athr_gmac_ring_free Freeing at 0x87b3b000
     
276. [    6.100000] athr_gmac_ring_alloc Allocated 2048 at 0x87b3b000
     
277. [    6.104000] sram_desc_cnt 6144,mac Unit 1,Tx r->ring_desc 0xbd000c00
     
278. [    6.112000] athr_gmac_ring_alloc Allocated 2048 at 0x87b3b800
     
279. [    6.120000] sram_desc_cnt 6144,mac Unit 1,Rx r->ring_desc 0xbd001200
     
280. [    6.424000] 956x_GMAC: eth1 in RGMII MODE
     
281. [    6.428000] Dragonfly -----> S27 PHY
     
282. [    6.432000] Setting Drop CRC Errors, Pause Frames and Length Error frames
     
283. [    6.452000] Setting PHY...
     
284. [    6.576000] ADDRCONF(NETDEV_UP): eth0: link is not ready
     
285. route: SIOCADDRT: Invalid argument
     
286. <wlanWarn> Weak
     
287. wlanWarn check
     
288. rmmod: can't unload 'tp_domain': unknown symbol in module, or unknown parameter
     
289. info, udhcpc (v0.9.9-pre) started
     
290. info, udhcpd (v0.9.9-pre) started
     
291. insmod: can't insert '/lib/modules/2.6.31/kernel/nf_conntrack_proto_gre.ko': File exists
     
292. insmod: can't insert '/lib/modules/2.6.31/kernel/nf_nat_h323.ko': File exists
     
293. [    7.644000] nf_conntrack_rtsp v0.6.21 loading
     
294. [    7.660000] nf_nat_rtsp v0.6.21 loading
     
295. 
     
296. 02020003
     
297. 35377075
     
298. [    7.764000] adf: module license 'Proprietary' taints kernel.
     
299. [    7.768000] Disabling lock debugging due to kernel taint
     
300. [    8.188000] ath_hal: 0.9.17.1 (AR5416, AR9380, REGOPS_FUNC, WRITE_EEPROM, TX_DATA_SWAP, RX_DATA_SWAP, 11D)
     
301. [    8.252000] ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved
     
302. [    8.320000] ath_dfs: Version 2.0.0
     
303. [    8.320000] Copyright (c) 2005-2006 Atheros Communications, Inc. All Rights Reserved
     
304. [    8.344000] ath_tx99: Version 2.0
     
305. [    8.344000] Copyright (c) 2010 Atheros Communications, Inc, All Rights Reserved
     
306. [    8.608000] ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved
     
307. [   10.088000] ath_ahb:  (Atheros/multi-bss)
     
308. [   10.096000] __ath_attach: Set global_scn[0]
     
309. [   10.108000] Enterprise mode: 0x03bda000
     
310. [   10.112000] Restoring Cal data from Flash
     
311. [   10.120000] Green-AP : Green-AP : Attached
     
312. [   10.120000]
     
313. [   10.128000] ath_get_caps[6128] rx chainmask mismatch actual 7 sc_chainmak 0
     
314. [   10.136000] ath_get_caps[6103] tx chainmask mismatch actual 7 sc_chainmak 0
     
315. [   10.148000] ath_attach_dfs[12518] dfsdomain 1
     
316. [   10.172000] SC Callback Registration for wifi0
     
317. [   10.176000] wifi0: Atheros 956X: mem=0xb8100000, irq=2
     
318. [   10.180000] ath_pci:  (Atheros/multi-bss)
     
319. [   10.184000] ath_pci_probe
     
320. [   10.188000] PCI device id is 003c :003c
     
321. [   10.196000] ath_pci 0000:00:00.0: ath DEBUG: sc=0x86f02e00
     
322. [   10.200000]
     
323. [   10.200000]  ol_ath_pci_configure : num_desired MSI set to 0
     
324. [   10.208000]
     
325. [   10.208000]  Using PCI Legacy Interrupt
     
326. [   10.620000] __ol_ath_attach: ath_attach TODO
     
327. [   10.628000] __ol_ath_attach: dev name wifi1
     
328. [   10.632000] ol_ath_set_default_tgt_config : AC Minfree buffer allocation through module param (umac.ko)
     
329. [   10.640000]  OL_ACBKMinfree : 0
     
330. [   10.644000]  OL_ACBEMinfree : 0
     
331. [   10.648000]  OL_ACVIMinfree : 0
     
332. [   10.652000]  OL_ACVOMinfree : 0
     
333. [   10.652000] ol_ath_attach() BMI inited.
     
334. [   10.660000] ol_ath_attach() BMI Get Target Info.
     
335. [   10.664000] ol_ath_attach() TARGET TYPE: 7 Vers 0x4100016c
     
336. [   10.668000] NUM_DEV=1 FWMODE=0x2 FWSUBMODE=0x0 FWBR_BUF 0
     
337. [   10.676000] ol_ath_attach() configure Target .
     
338. [   10.680000] qc98xx_verify_checksum: flash checksum passed: 0xbc88
     
339. [   10.688000] ol_transfer_bin_file 1836: Download Flash data len 2116
     
340. [   10.708000] ol_transfer_bin_file 1783: Download Firmware data len 214312
     
341. [   11.628000] ol_ath_attach() Download FW.
     
342. [   11.632000] ol_ath_attach() HT Create .
     
343. [   11.636000] ol_ath_attach() HIF Claim.
     
344. [   11.640000] ol_ath_attach() BMI Done.
     
345. [   11.644000] ol_ath_attach() WMI attached. wmi_handle 86e00000
     
346. [   11.648000] +HWT
     
347. [   11.656000] CE_recv_buf_enqueue 644 Populate last entry 512 for CE 5
     
348. [   11.660000] CE_recv_buf_enqueue 653 CE 5 wi 511 dest_ptr 0x6a9420 nbytes 0 recv_ctxt 0x86e4bda0
     
349. [   11.672000] -HWT
     
350. [   11.672000] HTC Service:0x0300 ep:1 TX flow control disabled
     
351. [   11.680000] CE_pkt_dl_len_set CE 4 Pkt download length 64
     
352. [   11.688000] HTC Service:0x0100 ep:2 TX flow control disabled
     
353. [   11.696000] wmi_service_ready_event_rx:  WMI UNIFIED SERVICE READY event
     
354. [   11.700000] num_rf_chain : 00000002
     
355. [   11.704000] ht_cap_info: : 0000085b
     
356. [   11.708000] vht_cap_info : 338001b2
     
357. [   11.712000] vht_supp_mcs : 0000fffa
     
358. [   11.724000] FIRMWARE:P 49 V 16 T 155
     
359. [   11.724000]
     
360. [   11.732000] FIRMWARE:_wlan_rtt_enable
     
361. [   11.736000] wmi_ready_event_rx:  WMI UNIFIED READY event
     
362. [   11.740000] ol_ath_connect_htc() WMI is ready
     
363. [   11.744000] ol_ath_set_host_app_area TODO
     
364. [   11.748000] target uses HTT version 2.1; host uses 2.1
     
365. [   11.760000] ol_ath_attach() connect HTC.
     
366. [   11.764000] ol_regdmn_start: reg-domain param: regdmn=0, countryName=, wModeSelect=FFFFFFFF, netBand=FFFFFFFF, extendedChanMode=0.
     
367. [   11.776000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2) flags 0x2150
     
368. [   11.784000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4) flags 0xa0
     
369. [   11.792000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x8) flags 0xc0
     
370. [   11.796000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x20) flags 0xd0
     
371. [   11.804000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x40) flags 0x150
     
372. [   11.812000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x800) flags 0x10080
     
373. [   11.820000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2000) flags 0x20080
     
374. [   11.828000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4000) flags 0x40080
     
375. [   11.836000] Add VHT80 channel: 5210
     
376. [   11.840000] Add VHT80 channel: 5290
     
377. [   11.844000] Add VHT80 channel: 5530
     
378. [   11.844000] Add VHT80 channel: 5610
     
379. [   11.848000] Add VHT80 channel: 5690
     
380. [   11.852000] Add VHT80 channel: 5775
     
381. [   11.856000] Skipping VHT80 channel 5825
     
382. [   11.860000] ol_ath_phyerr_attach: called
     
383. [   11.864000] OL Resmgr Init-ed
     
384. [   11.868000] Green-AP : Green-AP : Attached
     
385. [   11.868000]
     
386. [   11.876000] Green-AP : Attached
     
387. [   11.880000] ol_if_dfs_setup: called
     
388. [   11.884000] ol_if_dfs_attach: called; ptr=86e9d974, radar_info=87b97c08
     
389. [   11.892000] ol_ath_rtt_meas_report_attach: called
     
390. [   11.896000] ol_ath_attach() UMAC attach .
     
391. [   11.904000] ol_if_dfs_configure: called
     
392. [   11.908000] ol_if_dfs_configure: FCC domain
     
393. [   11.912000] ol_if_dfs_disable: called
     
394. [   11.916000] ol_ath_attach: Calling ol_if_dfs_configure
     
395. [   11.920000] __ol_ath_attach: init tx/rx TODO
     
396. [   11.924000] __ol_ath_attach: hard_header_len reservation 58
     
397. [   11.932000] SC Callback Registration for wifi1
     
398. [   11.980000] ath_attach_dfs[12518] dfsdomain 1
     
399. [   12.048000] VAP device ath0 created
     
400. ath0
     
401. Interface doesn't accept private ioctl...
     
402. ForBiasAuto (8BE0): Operation not permitted
     
403. [   12.128000]
     
404. [   12.128000]  DES SSID SET=TP-LINK_XXXX
     
405. [   12.144000]  ieee80211_ioctl_siwmode: imr.ifm_active=131712, new mode=3, valid=1
     
406. [   12.644000] FWLOG: [16123] WAL_DBGID_TX_AC_BUFFER_SET ( 0x3, 0x1e, 0x460, 0x460, 0x0 )
     
407. [   12.652000] FWLOG: [16123] WAL_DBGID_TX_AC_BUFFER_SET ( 0x12, 0x1e, 0x460, 0x460, 0x0 )
     
408. [   12.660000] FWLOG: [16123] WAL_DBGID_TX_AC_BUFFER_SET ( 0x45, 0x1e, 0x460, 0x460, 0x0 )
     
409. [   12.668000] FWLOG: [16123] WAL_DBGID_TX_AC_BUFFER_SET ( 0x67, 0x1e, 0x460, 0x460, 0x0 )
     
410. Interface doesn't accept private ioctl...
     
411. ForBiasAuto (8BE0): Operation not permitted
     
412. [   17.512000]  ieee80211_ioctl_siwmode: imr.ifm_active=918144, new mode=3, valid=1
     
413. 00000000Local port:1900.
     
414. Handle Index:1.
     
415. IGD: adding support to WFADevice
     
416. [   19.096000]  Scan in progress.. Cancelling it
     
417. [   19.884000] device ath0 entered promiscuous mode
     
418. [   19.888000] br0: port 2(ath0) entering forwarding state
     
419. Configuration file: /tmp/topology_ath0.conf
     
420. [   20.280000]  ieee80211_ioctl_siwmode: imr.ifm_active=393856, new mode=3, valid=1
     
421. [   20.288000]  Scan in progress.. Cancelling it
     
422. [   20.360000] br0: port 2(ath0) entering disabled state
     
423. [   20.368000]  DEVICE IS DOWN ifname=ath0
     
424. ath0: Could not [   20.372000]  DEVICE IS DOWN ifname=ath0
     
425. connect to kernel driver
     
426. Using interface ath0 with hwaddr ec:26:ca:xx:xx:xx and ssid 'TP-LINK_XXXX'
     
427. [   20.528000] br0: port 2(ath0) entering forwarding state
     
428. <wlanWarn> Weak
     
429. <wlanWarn>5g Weak
     
430. <wlanWarn> 2g/5g wlan warn actived
     
431. <wlanWarn> on
     
432. <wlanWarn> wlanWarn call
     
433. 
     
434. 440888bc
     
435. 99990900
     
436. [   22.004000] isCountryCodeValid: EEPROM regdomain 0x0
     
437. [   22.012000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2) flags 0x2150
     
438. [   22.020000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4) flags 0xa0
     
439. [   22.024000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x8) flags 0xc0
     
440. [   22.032000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x20) flags 0xd0
     
441. [   22.040000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x40) flags 0x150
     
442. [   22.048000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x800) flags 0x10080
     
443. [   22.056000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2000) flags 0x20080
     
444. [   22.064000] ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4000) flags 0x40080
     
445. [   22.068000] Add VHT80 channel: 5775
     
446. [   22.072000] Skipping VHT80 channel 5825
     
447. ifconfig: SIOCSIFTXQLEN: No such device
     
448. [   22.116000] ath_ioctl: SIOC80211IFCREATE CALLED
     
449. [   22.120000] wmi_unified_vdev_create_send: ID = 0 VAP Addr = ec:26:ca:xx:xx:xx:
     
450. [   22.128000] VAP device ath1 created
     
451. ath1
     
452. [   22.168000]
     
453. [   22.168000]  DES SSID SET=TP-LINK_5G_XXXX
     
454. [   22.184000]  ieee80211_ioctl_siwmode: imr.ifm_active=66176, new mode=3, valid=1
     
455. [   22.192000] OL vap_stop +
     
456. [   22.192000] wmi_unified_vdev_stop_send
     
457. [   22.196000] OL vap_stop -
     
458. [   22.200000] STOPPED EVENT for vap 0
     
459. [   22.212000] ol_ath_desc_alloc_and_mark_for_mcast_clone: VAP Mcast to Unicast buffer allocated: 400
     
460. [   22.220000] ol_ath_vap_set_param: VAP param is now supported param:65 value:2
     
461. [   22.244000] OL vap_stop +
     
462. [   22.248000] wmi_unified_vdev_stop_send
     
463. [   22.252000] OL vap_stop -
     
464. [   22.252000] STOPPED EVENT for vap 0
     
465. [   22.264000] OL vap_stop +
     
466. [   22.268000] wmi_unified_vdev_stop_send
     
467. [   22.272000] OL vap_stop -
     
468. [   22.276000] STOPPED EVENT for vap 0
     
469. [   22.644000] FWLOG: [26646] WHAL_ERROR_RECV_STOPPCU ( 0x110298a, 0x3 )
     
470. [   22.648000] FWLOG: [26646] WHAL_ERROR_RESET_PM (  )
     
471. [   23.220000] mlme_create_infra_bss : Overriding HT40 channel with HT20 channel
     
472. [   23.908000] OL vap_start +
     
473. [   23.912000] OL vap_start -
     
474. [   23.920000] ol_vdev_start_resp_ev
     
475. [   23.920000] ol_ath_vap_join: join operation is only for STA/IBSS mode
     
476. [   23.928000] ol_ath_wmm_update:
     
477. [   23.932000] Notification to UMAC VAP layer
     
478. [   27.416000] wmi_unified_vdev_stop_send
     
479. [   27.420000] STOPPED EVENT for vap 0
     
480. [   27.872000] OL vap_stop +
     
481. [   27.876000] wmi_unified_vdev_stop_send
     
482. [   27.880000] OL vap_stop -
     
483. [   27.884000] STOPPED EVENT for vap 0
     
484. [   28.016000] OL vap_start +
     
485. [   28.016000] OL vap_start -
     
486. [   28.020000] ol_vdev_start_resp_ev
     
487. [   28.024000] ol_ath_vap_join: join operation is only for STA/IBSS mode
     
488. [   28.032000] ol_ath_wmm_update:
     
489. [   28.036000] Notification to UMAC VAP layer
     
490. [   28.048000] device ath1 entered promiscuous mode
     
491. [   28.052000] br0: port 3(ath1) entering forwarding state
     
492. Configuration fi[   28.072000]  ieee80211_ioctl_siwmode: imr.ifm_active=131738, new mode=3, valid=1
     
493. le: /tmp/topolog[   28.084000] wmi_unified_vdev_stop_send
     
494. y_5G_ath1.conf
     
495. [   28.088000] STOPPED EVENT for vap 0
     
496. [   28.096000] br0: port 3(ath1) entering disabled state
     
497. [   28.100000]  DEVICE IS DOWN ifname=ath1
     
498. ath1: Could not [   28.104000]  DEVICE IS DOWN ifname=ath1
     
499. connect to kerne[   28.112000] OL vap_stop +
     
500. l driver
     
501. Using [   28.116000] wmi_unified_vdev_stop_send
     
502. interface ath1 w[   28.120000] OL vap_stop -
     
503. ith hwaddr ec:26[   28.124000] STOPPED EVENT for vap 0
     
504. :ca:xx:xx:xx and ssid 'TP-LINK_5G_XXXX'
     
505. [   28.256000] OL vap_start +
     
506. [   28.256000] OL vap_start -
     
507. [   28.260000] ol_vdev_start_resp_ev
     
508. [   28.264000] ol_ath_vap_join: join operation is only for STA/IBSS mode
     
509. [   28.272000] ol_ath_wmm_update:
     
510. [   28.276000] Notification to UMAC VAP layer
     
511. [   28.280000] br0: port 3(ath1) entering forwarding state
     
512. [   28.644000] FWLOG: [33185] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x81a1, 0x200008a, 0x0, 0x9 )
     
513. 000a0a02<wlanWarn> already
     
514. RTNETLINK answers: No such file or directory
     
515. RTNETLINK answers: No such file or directory
     
516. Cannot find device "ppp0"
     
517. [   30.260000] (tp_mroute_enable_write)146, tp_mroute_enable = 1
     
518. -------- new thread --------
     
519. -------- new thread --------
     
520. -------- new thread --------
     
521. [   33.528000] qca956x_GMAC: GE0 RX DMA ENABLE
     
522. 
     
523. TL-WDR6500 mips #1 Wed Sep 17 17:28:37 CST 2014 (none)
     
524. TL-WDR6500 login:
     

复制代码

zy900114

厉害！！

ztw1013

早日 出breed

邪恶海盗

5G啊,感觉离我好遥远...

compop

和wdr5600的配置一样？？

郁林清风

漂亮,PASCAL有折腾新机了

那个男人

没有usb啊   

realjack

配置强，价格还行，双频867。只可惜是百兆。

vic-dou

9561的春天来了！

billking

每根天线都有功放？

通化呈翔

支持一个，128M内存,高档。

87213950

有线百兆？

^自我^

TP10、TP11两个触点很显眼，只可惜是百兆的LAN，就看看得了

小盛

好期待,不知道有没有续集

sun3596209

这个厉害了，支持
这款路由，百兆lan口是硬伤，还不如1041，至少1041还是千兆wan/lan口。
不过pa和lna还是满喜人的