TRENDnet TEW-651BR V1.0R
TRENDnet TEW-651BR V1.0R
Manuf (OEM/ODM): Cameo WLN-2211
Amazon image
ASIN
B0032L85J2 (, On Amazon, On CCC, multiple uses)
multiple revisions of this device, use caution
Type: wireless router
FCC ID: XU8TEW651BR
IC ID: 6337A-TEW651BR
Power: 5 VDC, 1.2 A
Connector type: barrel
CPU1: Realtek RTL8196B (330 MHz)
FLA1: 4 MiB4,194,304 B <br />32,768 Kib <br />4,096 KiB <br />32 Mib <br />0.00391 GiB <br /> (Macronix MX29LV320DBTI-70G)
RAM1: 16 MiB16,777,216 B <br />131,072 Kib <br />16,384 KiB <br />128 Mib <br />0.0156 GiB <br /> (ProMOS V54C3128164VBI6)
Expansion IFs: none specified
Serial: yes, (38400,8,N,1)
WI1 chip1: Realtek Model?
WI1 802dot11 protocols: bgn
WI1 MIMO config: 1x1:1
WI1 antenna connector: none
ETH chip1: Realtek RTL8196B
Switch: Realtek RTL8196B
LAN speed: 100M
LAN ports: 4
WAN speed: 100M
WAN ports: 1
bgn
Stock FW OS: Linux 2.6.19
Flags: boot log
Default SSID: TRENDnet651 (1 addl. devices)
Default IP address: 192.168.10.1
the IP 192.168.10.1 is used by 122 additional devices
of which 45 are TRENDnet devices
Default login user: admin
Default login password: admin
admin:admin credentials used by 1324 additional devices
of which 49 are TRENDnet devices
CPU1 brand | WI1 chip1 brand | WI1 chip2 brand | |
---|---|---|---|
TRENDnet TEW-651BR V1.0R | Realtek | Realtek | |
TRENDnet TEW-651BR V2.xR | Realtek | Realtek |
For a list of all currently documented Realtek chipsets with specifications, see Realtek.
This device is presumably a Cameo WLN-2211 (RTL8191RE wireless).
Images
Serial
Pinout
[VCC] (TxD) (RxD) (GND) -> Silkscreened UART text
Boot log
mfid=c2 devid=22a8 Checking Flash Size !! 4M Flash! Flash register data is 0xfffc8000 Found 1 x 4M flash memory ---RealTek(RTL8196B)at 2009.11.24-15:06+0800 version v1.3 [16bit](330MHz) no rootfs signature at E0000! Jump to image start=0x80500000... Dentry cache hash table entries: 2048 (order: 1, 8192 bytes) Inode-cache hash table entries: 1024 (order: 0, 4096 bytes) Memory: 9632k/16384k available (2310k kernel code, 6752k reserved, 293k data, 120k init, 0k highmem) Mount-cache hash table entries: 512 Checking for 'wait' instruction... available. NET: Registered protocol family 16 PCI: Bridge: 0000:00:00.0 IO window: 18c00000-18c00fff MEM window: 19000000-190fffff PREFETCH window: disabled. PCI: Enabling device 0000:00:00.0 (0000 -> 0003) NET: Registered protocol family 2 IP route cache hash table entries: 128 (order: -3, 512 bytes) TCP established hash table entries: 512 (order: -1, 2048 bytes) TCP bind hash table entries: 256 (order: -2, 1024 bytes) TCP: Hash tables configured (established 512 bind 256) TCP reno registered Squashfs 2.2-r2 (released 2005/09/08) (C) 2002-2005 Phillip Lougher Squashfs 2.2 includes LZMA decompression support io scheduler noop registered io scheduler anticipatory registered (default) Skipping PCI bus scan due to resource conflict PCI: Bridge: 0000:00:00.0 IO window: 18c00000-18c00fff MEM window: 19000000-190fffff PREFETCH window: disabled. Realtek GPIO Driver for Flash Reload Default init gpio_ioctl Successful, major = 201 Serial: 8250/16550 driver $Revision: 1.1.1.1 $ 1 ports, IRQ sharing disabled serial8250: ttyS0 at MMIO 0x0 (irq = 12) is a 16550A Probing RTL8186 10/100 NIC... chip name: 8196B, chip revid: 0 NOT YET eth0 added. vid=9 Member port 0x1de... eth1 added. vid=8 Member port 0x1... PPP generic driver version 2.4.2 MPPE/MPPC encryption/compression module registered NET: Registered protocol family 24 PPTP driver version 0.7 RTL8192SE driver version 1.21 (2010-04-02) PCI: Enabling device 0000:01:00.0 (0000 -> 0003) correcting to 32 RealTek E-Flash System Driver. (C) 2002 RealTek Corp. Found 1 x 4M Byte MXIC MX29LV320AB at 0xbd000000 table size = 0x400000, table region is 4 mtd->numeraseregions = 0x4 Creating 5 MTD partitions on "DiskOnChip Millennium": 0x00000000-0x00010000 : "boot+cal" 0x00010000-0x000f0000 : "linux" 0x000f0000-0x003e0000 : "rootfs" 0x003e0000-0x003f0000 : "nvram" 0x003f0000-0x00400000 : "mac" Netfilter messages via NETLINK v0.30. ip_conntrack version 2.4 (128 buckets, 1024 max) - 228 bytes per conntrack ip_conntrack_rtsp v0.6.21 loading ip_nat_rtsp v0.6.21 loading ip_ct_h323: init success ip_conntrack_pptp version 3.1 loaded ip_nat_pptp version 3.0 loaded ip_tables: (C) 2000-2006 Netfilter Core Team ipt_time loading ClusterIP Version 0.8 loaded successfully TCP cubic registered NET: Registered protocol family 1 NET: Registered protocol family 17 Realtek FastPath v1.02 VFS: Mounted root (squashfs filesystem) readonly. Go to out!! Freeing unused kernel memory: 120k freed mount /proc file system ok! mount /var file system ok! init started: BusyBox v1.01 (2010.06.02-02:49+0000) multi-call binary BusyBox v1.01 (2010.06.02-02:49+0000) Built-in shell (ash) Enter 'help' for a list of built-in commands. / # in get_default_mac!!! Dev eth1 open eth1: Cannot assign requested address Dev eth0 open eth0: Cannot assign requested address device eth0 entered promiscuous mode br0: port 1(eth0) entering learning state br0: topology change detected, propagating br0: port 1(eth0) entering forwarding state Start Get CheckSum mlist[0].size =e0000 ImgCheckSum=63563e1 write the checksum successfully! Wed Jun 2 10:49:00 UTC 2010 killall: gpio: no process killed [igpio.o: opened. nfo]GPIOgpio.o: closed. _DRIVER = /dev/gpio [info]GPIO TYPE: WPS_LED, GPIO STATUS TYPE: off [gpio.o: opened. info]GPIO_DRIVER = /dev/gpio [info]GPIO TYPE: SYSTEM, GPIO STATUS TYPE: wps_on lan mac = 00:01:23:45:67:89rc is BUSY now! eth1: Cannot assign requested address DHCP client start. ################################## ######### START WIRELESS ######### ################################## Sending discover... device br0 already exists; can't create bridge with the same name device wlan0 entered promiscuous mode fw_version: 7030(48.21), fw_EMEM_len: 48080, fw_IMEM_len: 37896, fw_DMEM_len: 48 br0: port 2(wlan0) entering learning state br0: topology change detected, propagating br0: port 2(wlan0) entering forwarding state ================== === Start wscd === ================== [gpio.o: opened. info]GPIgpio.o: closed. O_DRIVER = /dev/gpio [info]GPIO TYPE: WPS_BUTTON, GPIO STATUS TYPE: check WiFi Simple Config v1.8 (2008.11.10-09:34+0000). /************** debug wlan setting ****************/ /* WlanMode: Set to default mode (AP) /* Wlan Domain: FCCA /* 80211Mode: WLAN_80211_11BGN /* Channel Width: 20M in N mode /* Essid: 5452454e446e6574363531 /* Channel: 6 /* WEP: close /* WPA-PSK: close /* WPA-EAP: close /* WPS AP-DEFAULT-PIN: 51824167 /* WPS AP-PIN: 51824167 /* WPS: Non-Sec-Enable /**************************************************/ eth0: Cannot assign requested address dhcpd_enabled:::::: domain empty Sending discover... route: SIOC[ADD|DEL]RT: No such process DHCP server start. device_lan_ip=192.168.10.1 , device_lan_subnet_mask=255.255.255.0 max_leases value (254) not sane, setting to 99 instead Unable to open /var/misc/udhcpd.leases for reading IEEE 802.11f (IAPP) using interface br0 (v1.7) killall: igmpproxy: no process killed Wed Jun 2 10:49:00 UTC 2010 ERRO: Unable to open configfile from /var/etc/igmpproxy.conf TFTP main standard_tftp_server launched on port 69. receive SIGNAL, ready to send update message ERRO: There must be at least 2 Vif's where one is upstream. Sending discover... wantimer: dhcpc_release (VCT_DISCONNECT) DHCPC Received SIGUSR2=>DHCPC Release Performing a DHCPC release Entering released state ###################### ### Start firewall ### ###################### ### firewall without wan connected ### Start Firewall: Clear iptables rc is IDLE now! rc is BUSY now! ################################# ######### STOP WIRELESS ######### ################################# device wlan0 left promiscuous mode br0: port 2(wlan0) entering disabled state ################################# ######### STOP WLAN APP ######### ################################# killall: auth: no process killed [gpio.o: opened. info]GPIO_Dgpio.o: closed. RIVER = /dev/gpio [info]GPIO TYPE: WPS_LED, GPIO STATUS TYPE: off gpio.o: closed. rc is BUSY now! #################gpio.o: opened. ################# ######### START WIRELESS ######### ################################## [info]GPIO_DRIVER = /dev/gpio [info]GPIO TYPE: SYSTEM, GPIO STATUS TYPE: wps_on device br0 already exists; can't create bridge with the same name device wlan0 entered promiscuous mode fw_version: 7030(48.21), fw_EMEM_len: 48080, fw_IMEM_len: 37896, fw_DMEM_len: 48 PHY_to1T1R br0: port 2(wlan0) entering learning state br0: topology change detected, propagating br0: port 2(wlan0) entering forwarding state ================== === Start wscd === ================== [gpio.o: opened. info]GPIgpio.o: closed. O_DRIVER = /dev/gpio [info]GPIO TYPE: WPS_BUTTON, GPIO STATUS TYPE: check WiFi Simple Config v1.8 (2008.11.10-09:34+0000). /************** debug wlan setting ****************/ /* WlanMode: Set to default mode (AP) /* Wlan Domain: FCCA /* 80211Mode: WLAN_80211_11BGN /* Channel Width: 20M in N mode /* Essid: 5452454e446e6574363531 /* Channel: 6 /* WEP: close /* WPA-PSK: close /* WPA-EAP: close /* WPS AP-DEFAULT-PIN: 51824167 /* WPS AP-PIN: 51824167 /* WPS: Non-Sec-Enable /**************************************************/ IEEE 802.11f (IAPP) using interface br0 (v1.7) rc is IDLE now!
Info
cat /proc/version
/ # cat /proc/version Linux version 2.6.19 (root@localhost.localdomain) (gcc version 3.4.6-1.3.5) #1 Wed Jun 2 10:48:13 CST 2010
cat /proc/cpuinfo
/ # cat /proc/cpuinfo system type : RTL8652 processor : 0 cpu model : R3000 V0.0 BogoMIPS : 329.31 wait instruction : yes microsecond timers : no tlb_entries : 32 extra interrupt vector : no hardware watchpoint : no ASEs implemented : VCED exceptions : not available VCEI exceptions : not available
cat /proc/meminfo
/ # cat /proc/meminfo MemTotal: 9752 kB MemFree: 1240 kB Buffers: 512 kB Cached: 2252 kB SwapCached: 0 kB Active: 3400 kB Inactive: 1024 kB SwapTotal: 0 kB SwapFree: 0 kB Dirty: 0 kB Writeback: 0 kB AnonPages: 1680 kB Mapped: 1052 kB Slab: 3648 kB SReclaimable: 468 kB SUnreclaim: 3180 kB PageTables: 268 kB NFS_Unstable: 0 kB Bounce: 0 kB CommitLimit: 4876 kB Committed_AS: 3856 kB VmallocTotal: 1048404 kB VmallocUsed: 48 kB VmallocChunk: 1048356 kB
cat /proc/mtd
/ # cat /proc/mtd dev: size erasesize name mtd0: 00010000 00002000 "boot+cal" mtd1: 000e0000 00010000 "linux" mtd2: 002f0000 00010000 "rootfs" mtd3: 00010000 00010000 "nvram" mtd4: 00010000 00010000 "mac"
cat /proc/cmdline
/ # cat /proc/cmdline root=/dev/mtdblock2 console=ttyS0,38400 single mem=16M
ps
/ # ps PID Uid VmSize Stat Command 1 root 340 S init 2 root SWN [ksoftirqd/0] 3 root SW< [events/0] 4 root SW< [khelper] 5 root SW< [kthread] 37 root SW< [kblockd/0] 53 root SW [pdflush] 54 root SW [pdflush] 55 root SW< [kswapd0] 592 root SW [mtdblockd] 600 root 444 S -sh 601 root 892 S rc init 638 root 332 S syslogd 642 root 252 S klogd 644 root 328 S httpd 646 root 564 S timer 662 root 316 S /var/sbin/wantimer 664 root 300 S udhcpc -j -w dhcpc -i eth1 -H TEW-651BR -s /usr/share 823 root 260 S udhcpd 846 root 244 S tftpd 852 root 248 S miniupnpd 860 root 336 S dnsmasq -i br0 925 root 224 S gpio SYSTEM wps_on 1049 root 388 S wscd -start -c /tmp/tmp/wsc.conf -w wlan0 -fi /var/ws 1054 root 240 S iapp br0 wlan0 1057 root 244 S iwcontrol wlan0 1133 root 336 R ps
ls /lib
/ # ls /lib iptables libipv6.so libpthread.so.0 ld-uClibc-0.9.28.so libiw.a libresolv-0.9.28.so ld-uClibc.so.0 libiw.so libresolv.so.0 libc.so.0 libiw.so.25 libsutil.so libcrypt-0.9.28.so libm-0.9.28.so libuClibc-0.9.28.so libcrypt.so.0 libm.so.0 libvct.so libdl-0.9.28.so libnsl-0.9.28.so mini_upnp.so libdl.so.0 libnsl.so.0 pppd libgcc-0.9.28.so libnvram.so pptp.so libgcc_s_5181.so.1 libproject.so libgcc_s_5181_debug.so.1 libpthread-0.9.28.so
busybox
/ # busybox BusyBox v1.01 (2010.06.02-02:49+0000) multi-call binary Usage: busybox [function] [arguments]... or: [function] [arguments]... BusyBox is a multi-call binary that combines many common Unix utilities into a single executable. Most people will create a link to busybox for each function they wish to use and BusyBox will act like whatever it was invoked as! Currently defined functions: [, arping, ash, brctl, busybox, cat, chmod, cp, cut, date, dirname, echo, egrep, fgrep, find, grep, hostname, ifconfig, init, insmod, kill, killall, klogd, linuxrc, ln, logger, logread, ls, lsmod, mkdir, mount, mv, ping, ping6, ps, reboot, rm, rmmod, route, sed, sh, sleep, syslogd, test, tty, umount, uname, xargs