BT voyager 205 router

Advanced Viking Voyager Hacking..

Where we get inside the gubbins of the viking based routers; BT Voyager 205, of course, CastleNet AR502, Dynalink RTA100, RTA500-D51, GlobespanVirata, Netgear DM602, Solwise SAR100 & SAR130 and probably others, and discuss such topics as firmware hacking, telnet scripting, router application building (and testing) without all the noise of folk asking how to get Command And Conquer (whatever that is) to work.

Feel free to help out, offer scripts, applications, beta testing, debate, disagree, suggest, whatever, in the comments section, below.

I might put more text here, but really we just needed the breathing space away from the regular comments to cover the more "advanced" topics..
;o) corz.org

Secret Page Selectors..

Telnet may be a superior tool for configuring your router, but your web browser is certainly a much cooler way to view the results. Don't forget to bookmark your favourites!

Secret Admin Page Selector!

Skip the tedious interfacing, and open all the "advanced" pages directly, including quite a few you can't get via the regular BT pages!

(opens in a cool windoid, or possibly a new tab)

special pages..

get the source!   open this tool in its own window

Secret PopOut Page Selector!

More of the same fun, but this time, for the PopOut pages.

(opens in a cool windoid, or possibly a new tab)

get the source!   open this tool in its own window

Before you ask a question..

This is not the place to ask how to get eMule working, or your xbox, or whatever, try the main page for that stuff, which is a lot better than having your comment deleted, or worse.. ignored!


return to paged comments
cor - 13.07.05 10:21 am

Welcome fearless Viking Hackers!

Here we are, a quiet place away from all the noise and haste. Currently there's all sorts going on under the viking hood; we have ready-made scripts in progress, firmware hacking, some interesting Beta's of a new viking configurator app and more!

have fun!

;o)


barney - 13.07.05 1:16 pm

Love the winking icon!!

good luck on new direction

best

barney


riche - 13.07.05 2:20 pm

:), all my future posts will be in here about VCCT


cor - 13.07.05 6:22 pm

hey! barney! at last! someone noticed the animated favicon! man, those favicons can take weeks to clear from your cache!

Eagerly awaiting the VCCT stuff, riche, feedback button at the ready!

welcome aboard guys!
let's see if we can't blow up a few more voyager boxes. smiley for :D

;o)


Riche - 13.07.05 9:43 pm

I think i've managed to sort out some of the problems, but still can't get it to pass commands unless the telnet window has focus, but each button click will now force the telnet window to the top and set it to stay on top until the part of the script has been parsed to the telnet window, then removes the ontop flag and minimises the telnet window out of the way, it's a pain not being able to hide it, but it's liveable with atm, till i can figure out why it doesn't work.

i've also put in some error/window checking to see if the telnet window exists, if not in say the case of the exit or disconnect buttons, it will now not pass the exit command, followed by "enter"

also if the telnet window does exist but the connect button is enabled it won't allow you to open another telnet session.

again please check the basic stuff, if this now works ok, i'll move onto the DYNDNS and Rule creation/deletion, and recipes as they just require focus on the telnet windows and maybe a few list select boxes n stuff.

it's here

Regards

RichE



bael - 13.07.05 11:19 pm

nope still not working here xD

I still can't connect, and now the telnet window doesn't even stay open when i try to connect, it opens for a split second, and then closes, and when it's closed, the <enter> cmd the app sends, opens the program selected, but i still get connection established in vcct.

Bael


Roger - 14.07.05 3:27 am

Well, a brand new area reserved for Advanced Viking Voyager Hacking... I applaud the idea!
Congrats, Cor.
I thought you had some tools made by Globespan because you said "I think I have most of the manufacturer's tools for dealing with the raw images". That was very encouraging!
I searched the public archives for the second time, but did not find anything else. Have you?
Do you know about any other forum elsewhere, focused on firmware?


RichE - 14.07.05 8:02 am

oh, i forgot to meantion, you may need to delete the bvt.ini, so do a search for it, and delete.

as i've told it to ask your router address, until i can sort the detection problem out, and if the bvt.ini exists it won't ask you hence you not being able to connect, thats why the telnet appears briefly and disappears, hence the enter signal being sent to the desktop and no the telnet.

future new versions will deleted the bvt.ini, or even better these settings will be held in the registry and a frsitrun flag will be reset, force the questions to be asked again.

RichE



Riche - 14.07.05 1:20 pm

I've made some changes which require an installer that i was going to add later due to some of the problems that have happened.

Change log

1. RIG installer added
2. all settings are now held in the registry and not an .ini file, this also speeds up loading
3. firstrun flag added, and this will be reset as future version come out forcing the initial questions and stops the problem should new intial question be added in the future
4 after firstrun, the flag gets changed and the questions won't be asked.

here is a preview of the install program

an image

I will now include a change log with all future beta uploads, and the current beta can be got from here

Regards

RichE



Riche - 14.07.05 4:33 pm

i've done some more work on it, here's the change log

1. added splash screen
2. revised error checking for most functions and connect/disconnect
3. added change ip button for router ip
4. added some of the recipes namely bit-torrent standard and custom and emule.

here's a screenshot of the recipes screen layout

an image

will keep working on it.

regards

RichE



Riche - 14.07.05 4:35 pm

it's here by the way

Doh!

RichE


cor - 14.07.05 4:59 pm

Oh bugger!

One of my slave drives (my last, and I do literally mean my last EVER Maxtor drive) is packing in, and just took down my machine (it's only for my MP3's which are also archived) anyways, I just lost my entire Beta report, so, *sigh*, to sum up..

The installer installed nothing. perhaps because I'd run the app by itself first, dunno. I deleted the registry entries and tried again, but still no joy.

keeping prefs in registry is a bad idea (I went into detail about this!) and real human-readable ini files are always preferable, even when you allow the user plain text access to all the settings in your GUI, which you don't, at least not yet.

As more and more options are added, this lack of human-readableness becomes more apparent, essentially you are storing script data inside registry keys, and that's exactly the sort of data that users like to get in about and tweak.

You can either make it totally accessible via the GUI and keep the registry storage, or use ini files. In the long run, ini's are probably easier for everyone, but this is just me being suggestive, you can do it any way you like! smiley for :D

You need a dialog at first run to ask the user if they require dyndns, either that or remove the dyndns dialogs, they will confuse most users. Or perhaps the text on the first dialog could read "hit cancel if you do not require dyndns services" and if they cancel, it can skip the other ddns dialogs altogether.

what else? erm.. someone with no knowledge of your password can change the password (by cancelling both dialogs, the old password is wiped) same for the username dialog. Just remove the "change" buttons altogether, folk can change these things easily enough with the two text fields so they are superfluous.

dynds allows three hostnames, do you plan to add another two?

It had troubles loggin in after I messed with my username/password settings. It seems to be reading them from the ini, but storing them in the registry. when I edited the ini, it worked great.

It's definitely shaping up! Keep those updates coming!

;o)


cor - 14.07.05 5:11 pm

ahh, new version already!

This easy recipe creation is nice! But the buttons are a highly cryptic, (Bit-Tor Stnd is utterly meaningless; *I* knew what it meant, but a n00b probably wouldn't) It would also be a good idea (if possible in your programming language) to have pop-up hints (or something) so the user knows that "IP Address" acttually means "IP addresss of the machine running BitTorrent" or whatever.

The more we can think of up ahead, the less trouble it causes later on for users (and in turn us, answering their questions!)

It's working really well though, I just dropped it in over the old one and it runs fine, connects to the router, does the RAD, etc, etc, very nice!

Consider removing the "RuleID" stuff for BitTorrent. Users don't need to know, just use whatever they specified for the port (you might also want to suggest one, even enter one in the text area in advance) they don't want to know about "IPF", or "NAT" either, just "create port-forwarding rule" or something along those lines would help n00bs immensely.

keep up the good work!

;o)


Riche - 14.07.05 5:17 pm

it's funny some people prefer ini's some prefer the registry, i can do it either way.

once the core stuff is in i'll post another update then we can iron out the finer details after that :)


Riche - 14.07.05 5:20 pm

to view the source code for both the installer and the app itself go here


cor - 14.07.05 7:28 pm

Yeah Riche , I'm an ini guy! That's why I use Firefox/Thunderbird, it's the future man! (well, it's the past really, the unix way, but it's the future of windows apps, too!)

Thanks for putting up the source, this Auto-It looks very interesting. Hopefully I can get a chance to play with it soon.

Roger, if you know of any tools other than the ones here, do share! (we have Ian Walker to thank for the best of these) The 110 app is probably the most handy, you simply export a config from any firmware, tweak it as a config file, then zap it back to a firmware file. I know that others have managed to successfully run alternative firmware on the 205, and they got their tools here! As far as I know there really isn't anywhere else. There's a chinese site has some similar things, but in Chinese, of course!

I'm fairly certain that other tools exist (they must! a decnt firmware editor, for a start), but as far as I know, they haven't seen the light of day. But do feel free to investigate further!

;o)


Bael - 14.07.05 8:06 pm

hmmm i still can't connect xD the telnet window still just closes as soon as it opens, i did a full system search for bvt.ini including hidden files, and it wasn't found. any more ideas lol xD

Bael


Roger - 15.07.05 12:58 am

Cor,
Thanks for the feedback. (I've tried to post a comment here some hours ago but don't know what happened to it)

""The 110 app is probably the most handy""

Do you mean viking-011.exe, packed inside viking-011-default_config_extractor_inserter.zip ? This is really a powerful app, as I said before, but it is only able to deal with the DEFAULT factory configuration. It will not let you edit the firmware or alter the WEB interface.

""I know that others have managed to successfully run alternative firmware on the 205, and they got their tools here!""

I'd like to know what they did and at which point they reached. Perhaps I am missing something, but I can't figure out how to make an alternative firmware using the tools that are in the public archives. Please, help.
Roger


cor - 15.07.05 3:22 pm

Yup Roger, that's the one.

Past success hasn't been achieved by editing the firmware gubbins, as much as simply using foreign firmware. check the comments (load the main 205 page with all comments and employ some Firefox type-to-find magic to track this down) for more details. If I remember correctly, the rta100+ was very fully featured (search for that model number).

You can't use the tools we have to edit the web interface (as far as I know) but you can create firmwares with alternative sets of defaults, perhaps useful for setting the unit up with Tiscali or something. In the real world, it's easier to simply upload a script by FTP.

By the way, I should mention, the BT web interface has all the pages, and I don't feel the need to change it at all. But it didn't come like that; we had to create special "admin page selectors" to get to these hidden pages. You can access almost nothing via the regular interface.

Point is, are you sure yours aren't just hidden, too?

;o)

ps.. that wouldn't be the first disappearing comment, on extremely rare occasions, two folk comment onsite somewhere at exactly the same point (or rather, *just* after each other) and the comment engine doesn't allow two processes to write to the file at the same time (this is good), but the error-handling is really shoddy (this is bad) and a new comment engine is due sometime in the next few (insert favourite timescale)


Riche - 15.07.05 3:40 pm

just a Quick update:

Change log

1. cancelling no long blanks username/password
2. tool tips added to everything
3. winMX and direct connect and the±wire recipes added.
4. rule deletion/creation added (needs testing at home first)

no uploaded update as of yet, but will be by sunday once all the stuff is in.

just to keep you upto date

Regards

RichE



Roger - 15.07.05 4:22 pm

Cor,
OK, all understood. I will search the entire contents of the comments and look for what (and how) the other guys did. Thanks for the feedback.

I am not sure if my modem has hidden pages. I will try to find something about.

Roger
P.S.: I used a link I found somewhere on this page and sent you an e-Mail. Have you got it?


Roger - 18.07.05 6:09 pm

Cor,
I am still browsing through the comments pages... I have not finished yet. It's a huge task... I'll let you know my findings when I finish.

I've confirmed that there are a few hidden pages in my D-LINK 502G, but they are useless. The good ones (NAT translations, system log view, system log export, current config export, alarms view, alarms export, etc) simply do not exist. There are several items in the BT firmware that are missing in my 502G firmware.

Your BT Voyager WEB interface has a page for exporting your current config. D-LINK 502G does not have it. I've read the Solwise manual entirely, but did not find any CLI command able to export the current configuration. Do you know a CLI command for getting the current config (current, not default)?


cor - 18.07.05 7:23 pm

I didn't get that email Roger. erm, it's possible my voracious spam filleter ate it, especially if you used a hotmail type address, I'll look into that. You might try sending again @corz.org, if you know what I mean. (this domain's mail doesn't get filleted!)

Those voyager comments are getting out of hand, apologies for not having extracted more of the good stuff; it can take more time than I have to even answer them all sometimes, though geting all the FAQ's down would probably save work in the long run, but hey! smiley for :ken:

I don't know a CLI command to export the config, but I do remember looking for one once. Use FTP.

It is annoying, isn't it, when manufacturers see fit to deny access to perfectly good built-in features. Are they trying to protect us? I wish I knew. I might email someone.

;o)


Riche - 19.07.05 4:57 pm

Update time again smiley for :D

change log
1. added most of the recipes
2. added a reboot button! (totally untested but sends the command "reboot last")
3. added delete rules functions which have been tested and work nicely
4. added create firewall rule (personal) with dropdown boxes to make life a little easier. (untested but should work)
5. added tools tips to everthing know to man including the toilet seat lol

please brake it and feedback

it's in the usual place

source code has been updated and on my forum, and to the backup config via ftp, it won't be had to do from this app, as the name of the file should always be the same, will look into it.

regards

RichE



Bael - 19.07.05 9:52 pm

well again i still can't connect to the router point blank, i've tried a full re-install serveral times (as in full, i mean completely removing anything vcct related of my comp, including btv.ini's, registry entries, even the installer) so any ideas what's casuign this lmao xD

Bael


cor - 20.07.05 1:30 pm

About the latest vcct..

Annoyingly, it's still asking for dyndns details at startup *grr*

First I tested the new Firewall creation rule (somewhat useless without a NAT counterpart, but we're still in development, right?) which creates an invalid rule! not good. the example..
Create IPF Rule Entry Rule ID 1234 ifname PUBLIC dir IN act ACCEPT
transprot eq TCP destport eq num 1234 seclevel high medium low
by the looks of it, simply removing the space between "Rule" and "ID" should fix it. Tell me again, why didn't you test these things before you packaged it???

The telnet window jumping to the foreground and then jumping away again has to stop! either keep it open, or completely hide it! I'd like it open all the time, or better still, incorporated into the GUI!

I tried the WinMX recipe, the first two commands were "rule already exists", I expected this, it's good. the second two commands weren't valid. not good.

I know what it's like, a new development project, you are keen to get the layout done, all the features in, etc, but please, test test test *before* you package it. The idea of beta testing is to discover bugs the author missed, do things the author didn't consider folk might do.

All this implies that the author has put the thing through the wringer first! Currently it's half-way to being a super-useful tool.

dunno what's up with your setup Bael. weird.

;o)


Kev - 23.07.05 5:00 pm

HELP!!!! ive buggerd my router me thinks ,today ive added a few more tweaks and now i cannot connect to my fav hubs on dc++, ive tried everything from fresh install, changed to lan ,even reset router nothing works.. ,any ideas , can i get anywhere a default config file to upload to router to reset it back to factory default.?



Kev - 23.07.05 5:01 pm

Tip: if it anit broke dont fix it..



Roger - 29.07.05 3:04 am

A few days ago I downloaded once again the file virgin_voyager.zip from Cor's public archives (is Virgin an ADSL provider?).
Well, I installed that firmware again on my D-LINK DSL-502G. As expected, the ADSL link did not syncronize, just like it happened the first time, but I've still got IP connectivity to the router via Ethernet. This time I carried a very careful inspection of the features available via the WEB interface.

It was quite a disappointment. Even the WEB interface of my poor D-LINK DSL-502G's native firmware offers much more features than those I found in the virgin_voyager.zip. Most of the more important features of the original GlobespanVirata firmware are missing in the WEB interface of this release. If this is the firmware that BT installs on the Voyagers, it explains why the users of the '205 have to deal so much with the CLI.

In the same way, I tested again the file rta100plus_2.1.040827a1(firmware).zip (for the Dynalink RTA100+, also available at Cor's public archives). Once again the ADSL link did not work, but I could browse through the WEB interface. It delivers the most rich set of features that I have ever found among all Viking-based modem-routers up to now, but it still misses the very latest features (just a few) created by GlobespanVirata and made available in its last release.

I still hope I will eventually find a good firmware (like the RTA100's) able to work on my D-LINK with the DSLAMs of my provider.


Robbie Racoon - 11.08.05 1:23 pm

Yeah! just the site I have been searching for all my life! Please can you help me to solve a seemingly obvious problem..... My voyager 200 router is in "safe mode" ,,,,,,,,,,,,, how do I get it out ! Please help me and you shall be blessed with loads off happiness.

Robbie


cor - 11.08.05 7:25 pm

Well, Robbie, sadly none of the Voyager series routers are anything like each other (well, generally) so what applies to the 205 does not apply to the voyager 200, which I've never heard of.

I've also never heard of "safe mode" in a router, but if you can get your hands on a manual for the thing, we can certainly give you a hand deciphering it!

;o)


Stuart - 12.08.05 11:03 pm

Does anyone know where/how the configuration files are stored on a Netgear DM602? An FTP listing shows that there are various html and similar files in /home, but no .cfg files. There are a couple of .dat files, one of which is binary, the other mostly text, but nothing recognisably like my configuration in it. The cli "list" command shows no files, just the home directory. The router is working fine.

Thanks for any pointers.


Roger - 14.08.05 2:27 am

Stuart,
I've already gone through this quest, i.e., to look for the current configuration file of a Viking-based router.

In their most recent releases of firmwares (which were dated around late 2003), GlobespanVirata introduced a file named commitedcfg.cfg which contained the full current configuration. They put it at /home. The methods for getting that file are two:

1 - by ftp (not tftp; tftp usually does not work on the last releases - you may get "Error on server : Error: Illegal TFTP Operation")
2 - via the WEB interface, at the "Admin" tab.

On the other hand, the older releases did not let you backup nor restore the current configuration file alone. And there was not even a CLI command for that purpose. By what you wrote, I think that this is your case.

I really don't know where the current configuration is stored in this case (older firmwares). If you are looking for just a backup of the current configuration (maybe this is not exactly what you want), your only option is to backup the entire image. The following command, good for older releases, will do it:

tftp -i "IP.of.your.modem" get TEimage.bin

You'll get all the current configuration restored to the modem if, at a later time, you reload this very TEimage.bin file (warning - all Viking complete images are named TEImage.bin - if you restore the wrong file you'll have another config on the modem).

To reload:
tftp -i "IP.of.your.modem" put TEImage.bin

Hope this helps.
Roger


andso - 16.08.05 4:45 am

hi anybody... i make my serial cable(to flash modem imagem(teimage.bin)) but i dont have the original 502g firmware.... my adsl modem firmware version is: r2.01.b1.us if anybody get this, please, send to me... cause my modem are death, and i can't use dsl on my house... the modem doesn't work... please, send in my mail.... pascini@gmail.com

my regrards....


RichE - 22.08.05 8:47 pm

Hi, I'm back, been away for a while, so will get cracking on finishing VCCT


cor - 29.08.05 6:06 am

Ahh great news RichE! I been loving that wee GUI version of "rad", too, simple and effective. Is the source on your site?

looking forward!

;o)


riche - 30.08.05 9:54 am

by "Rad", do you mean the installer program that installers the app?

if it is what you mean, then yes the source for that is on my site :)



Riche - 30.08.05 9:13 pm

Spam!


Riche - 30.08.05 9:53 pm

Spam!


Riche - 30.08.05 10:25 pm

Naughty BT (or viking), they've added new forced rules to the default config, rule 74 & 94, which are now added to the rule removal script.

BTW i've now had time to test out the reboot button which works like a dream and soft reboots your router, and i've removed the dyndns questions on initial running.

i'm not releasing this version yet though as there are a few other things I want to do and test first.


cor - 31.08.05 6:37 am

Spam.


cor - 31.08.05 6:47 am

SPAM!

okay, maybe this isn't the place for Monty Python humour, where were we?

Ah yeah! VCCT! - or was it VTTC? or, erm, VDCV? er... smiley for :D

sounds great dude! looking forward to that! Definitely.

By "RAD" I didn't mean your installer script, I meant your GUI version of "Router Automatic Deletions", the original deletions script. It does only that, but very neat.

But yeah, your installer rocks! It's definitely on my list of things to pinch-and-tweak, I've even went so far as to install AutoIt, though quite when I'll get to play I don't know!

By the way, it the time it took me to create this post BT have funnelled approximately 23.2 million pounds of hard-earned common folk's money into the bank accounts of a handful of mega-rich stockholders.

Naughty? I'd say.

;o)

ps.. Matt (poster of now-deleted comments) try the main page, I left something for you there, before I came here, in fact.


riche - 31.08.05 11:32 am

oh that RAD, doh!


Bicephale - 02.09.05 12:44 pm

Is this the right site to read about the GNet BB0060B ADSL MoDem and
siblings? The later has an "Atmel AT45DB161B TC 0426 GSV-VIKING" chip
inside and at www.atmel.fi/dyn/products/product_card.asp?part_id=2471
i've read that's a 16 Mb Flash memory with a minium of active pins for
use by some Mode 0/mode 3 Serial Peripheral Interface (SPI)... I have
quite a few .JPG shots at hand which show the copper traces going from
this chip to a 6 pins male connector and i suspect it may be equivalent
to the HardWare configuration which is described on another Web site:

http://laundry.circolab.net/pipermail/cialtroni/2003-November/002506.html

The picture doesn't seem to be coherent with the physical layout as
described on the later site but it may still happen to be electrically
equivalent (same signals, different pinout). Do i make sense at all?

Anyway, i wonder if it would be necessary to handle the three-wires
interface myself or if i can just rely on the MoDem do it for me. I
certainly am curious, in any case, because the prospect of any FLASH
accident disabling the MoDem is quite an intolerable prospect to me!

smiley for :ehh:



RQ - 03.09.05 6:42 pm

Roger, you might want to try out the firmware from here. This doesn't disclose all the options it could, but you can at least get to the hidden pages using Cor's selector. And most of the options I actually tried, worked for me (well, DDNS is buggy, and there seems to be no management control).

PS: Are there any screenshots of what VCCT looks like? smiley for :roll:


Roger - 03.09.05 9:02 pm
Is this official information from the chipset maker or have you just heard/read about it? (perhaps your "AFAICS" already answers me, but I am not sure of what "AFAICS" is). If this is official, this is the worst scenario we could expect, because we have already noticed that all manufacturers have already quit releasing updated firmware for their Viking based modens. So, without the tools, we will be unable to get any improvement for our units.
>
1 - Bridge Filtering (location: Services - Bridge Filter)
2 - Dynamic Domain Name Service (DDNS) (location: Services - DDNS)
3 - System Log (location: Admin - System Log)
4 - Export of System Log (location: Admin - System Log - Save Log)
5 - Backup/Restore Config (location: Admin - Backup/Restore Config)

(note that I am referring to the Intracom's JetSpeed 520 firmware version 2.1.040407a8)

There are a few others missing, which I don't remember now. Anyhow, the Jetspeed 520 is still the way to go, if we cannot find anything beter.
The real solution would be to get the original Globespan tools and assemble a really good firmware.



RQ - 04.09.05 1:35 am

Roger, those tools, just like this CLI reference are available to vendors only, under a non-disclosure agreement, AFAICS. So I'm afraid there's no legal way to get them. smiley for :ehh: Nevertheless, having them would be really cool.

Btw, system log (complaints #3 and #4) actually works in jetSpeed, it's just not linked from the interface anywhere. DDNS (complaint #2) is buggy (lets me add host entries, but doesn't always update them).

If I got it correctly, I think you can easily know what firmware you need. I think, it depends on your HwVersion string. In jetSpeed, this number is 810020, meanwhile a very common case here is 810012. Assuming your D-LINK says 810020 too, I guess you need firmware for something having this number in HwVersion. I tried the RTA100+ firmware myself. It seems to be the most close to what GlobespanVirata could have actually provided (even the logo wasn't changed, AFAIR), but I had exactly the same problem you did - something was wrong with ADSL synchronization; and because I wasn't patient enough, I didn't try out all the possible settings; have you tried that?
I've also looked at RTA100+ express setup utility files, there seem to be five little numbers that vary among the service providers, maybe that's all you have to fiddle?
Then again, this same RTA100+ firmware seems to work perfectly with Ericsson HM210dp, which (if to believe the screenshots in it's manual) is 810012, so... This number is probably the catch.

BTW, if you haven't yet, you may want to try firmwares from here. I haven't took a look at them, though.

Now - how about my PS part? smiley for :ken:


Roger - 04.09.05 10:23 pm

Nice post, RQ, thank you. You've touched good points. I'll need some time to think about and then I'll post a reply.

About your PS part: I think RichE has an WEB site with good info on his VCCT development. Search the previous Comments pages here and you'll find the link.


Roger - 05.09.05 3:55 am

RQ,
those tools, just like this CLI reference are available to vendors only, under a non-disclosure agreement, AFAICS. So I'm afraid there's no legal way to get them. Nevertheless, having them would be really cool.


Is this official information from the chipset maker or have you just heard/read about it? (perhaps your "AFAICS" already answers me, but I am not sure of what "AFAICS" is). If this is official, this is the worst scenario we could expect, because we have already noticed that all manufacturers have already quit releasing updated firmware for their Viking based modens. So, without the tools, we will be unable to get any improvement for our units.

Currently we do not find any modem manufacturer using the Viking chipsets for new models. It seems that industry is moving towards less complicated products, kind of "plug and play", taking configuration almost out of reach to customers. All of the tweaking will soon be gone for customers. Example: see any modem based on the AccessRunner chipset. Compare its WEB interface or its CLI (if any!) to those of any Viking-based modem...

Btw, system log (complaints #3 and #4) actually works in jetSpeed, it's just not linked from the interface anywhere. DDNS (complaint #2) is buggy (lets me add host entries, but doesn't always update them).


I know that almost all Viking firmwares "hide" certain sets of features, making them only accessible via the CLI. It always depends on the decision of the guy who compiled the image. But, despite not having any difficulty using the CLI, my search is for a better, most complete, WEB interface. If a feature is not available via the WEB interface, it does not fit my goal.

If I got it correctly, I think you can easily know what firmware you need. I think, it depends on your HwVersion string. In jetSpeed, this number is 810020, meanwhile a very common case here is 810012. Assuming your D-LINK says 810020 too, I guess you need firmware for something having this number in HwVersion.


HwVersion is an attribute of the modem itself (I mean the physical printed circuit board), most probably related to the chipset. HwVersion is not an attribute of the firmware. When you issue the command get system in the CLI, the software reads the hardware version of the modem and prints it on the screen. Any firmware that you may try (if, at least, it lets the modem to boot up) will return the same result for the get system command. Of course, each firmware is compiled for a given HwVersion. This should be indicated by the manufacturer in the corresponding Release Notes documentation (if any...) of the firmware. Perfect results can only be expected when the HwVersion for which the firmware was compiled matches that of the modem. In the real world, when we download a firmware for tests, we almost never get the corresponding documentation, but we try it anyway. In brief: there's nothing we can do to make a given firmware work by using the HwVersion. At maximum we will know beforehand that it won't work.

The following info is from http://home.pages.at/braziliantech/downloads_mdmfw_br.html , translated from Portuguese to English:

Viking I chipset is made up by the GS8120-174-008D CPU (Viking) and the GS3771-174-001H ADSL controller (Atlas) - this generally causes HwVersion to be 81001a.

Viking II chipset is made up by the GS8120-174-008D CPU (Viking) and the GS3780-174-001Z ADSL controller (Cafe) - this generally causes HwVersion to be 810020.

Viking II firmware will run on Viking I; one may get access to the modem via Ethernet, but ADSL link will not synchronize.

Viking I firmware will NOT run on Viking II; the modem will not even boot up and the original firmware must be restored by the use of the parallel cable to write the code directly to the flash memory.


I must add that the above info does not mention that there may be other reasons, even simultaneously, for the ADSL link not synchronizing. For instance, incompatibility with the DSLAM of the ADSL access provider.

I tried the RTA100+ firmware myself. It seems to be the most close to what GlobespanVirata could have actually provided (even the logo wasn't changed, AFAIR),


Yes, it is the most close to the complete GlobespanVirata firmware, but it misses a few features too. The only important misses that I noticed are the SNMP config screen and the screen for control of the external access to the Configuration Manager (WEB GUI).

but I had exactly the same problem you did - something was wrong with ADSL synchronization; and because I wasn't patient enough, I didn't try out all the possible settings; have you tried that?


Yes, I did. I've checked and tried all CLI commands regarding the physical level configuration (ADSL). No matter what I did, ADSL never went up. Two possible reasons: that firmware may have been written for a Viking II (mine is Viking I) -OR- it may have certain unchangeable parameters that were specifically set for a different DSLAM than the one to which my line is attached.

I've also looked at RTA100+ express setup utility files, there seem to be five little numbers that vary among the service providers, maybe that's all you have to fiddle?


Sorry - I don't know this express setup, so I can't say anything. Perhaps this may be a good clue. Please, give more info.

Then again, this same RTA100+ firmware seems to work perfectly with Ericsson HM210dp, which (if to believe the screenshots in it's manual) is 810012, so... This number is probably the catch.


Did you actually load the RTA100+ firmware to an Ericsson HM210dp or have you just heard/read about it? If you have that modem, then try the "get system" command and you'll see the HwVersion. Please, let me know the result.

BTW, if you haven't yet, you may want to try firmwares from here. I haven't took a look at them, though.


Yes... I did... I've tried all of them... to no avail. ADSL never went up in my D-LINK 502G with my provider's DSLAM.



RQ - 05.09.05 12:16 pm

Roger,

wow, such a huge post! smiley for :eek:



those tools, just like this CLI reference are available to vendors only, under a non-disclosure agreement, AFAICS. So I'm afraid there's no legal way to get them. Nevertheless, having them would be really cool.


Is this official information from the chipset maker or have you just heard/read about it? (perhaps your "AFAICS" already answers me, but I am not sure of what "AFAICS" is). If this is official, this is the worst scenario we could expect, because we have already noticed that all manufacturers have already quit releasing updated firmware for their Viking based modens. So, without the tools, we will be unable to get any improvement for our units.


Well, this is what page 2 of the document I referenced says:


[...]
This Conexant proprietary document is intended only for use as specified in a non-disclosure agreement with the company or one of its subsidiaries.

This document is the property of Conexant. No part of this document may be copied, reproduced, stored in a retrieval system, translated, or transmitted in any form, or by any means, nor may any part of this document be used as the basis for manufacture or sale of any items or software without the express written consent of Conexant.
[...]


"AFAICS" means "As Far As I Can See". What I said before, is my not-a-lawyer opinion of course.

It's probably an insane idea, but i suppose it would probably be the best to convince Conexant release/give us the software we need. Otherwise, we could apply some reverse engineering, i suppose...

Currently we do not find any modem manufacturer using the Viking chipsets for new models. It seems that industry is moving towards less complicated products, kind of "plug and play", taking configuration almost out of reach to customers. All of the tweaking will soon be gone for customers. Example: see any modem based on the AccessRunner chipset. Compare its WEB interface or its CLI (if any!) to those of any Viking-based modem...

Nah, no access to things like that. :) I'm a home user, not a business. smiley for :D

Btw, system log (complaints #3 and #4) actually works in jetSpeed, it's just not linked from the interface anywhere. DDNS (complaint #2) is buggy (lets me add host entries, but doesn't always update them).

I know that almost all Viking firmwares "hide" certain sets of features, making them only accessible via the CLI. It always depends on the decision of the guy who compiled the image. But, despite not having any difficulty using the CLI, my search is for a better, most complete, WEB interface. If a feature is not available via the WEB interface, it does not fit my goal.


What I meant was that with jetSpeed, even if those features are "hidden" in a web interface, they still exist in it. You can use Cor's page selector to go directly to them. They do exist, but are simply not linked from the main interface.

Any firmware that you may try (if, at least, it lets the modem to boot up) will return the same result for the get system command. Of course, each firmware is compiled for a given HwVersion.

That's exactly what I wanted to say. When you find some new firmware, you can try to find out what is the HwVersion of it's target modem, and only try firmware for those modems, that have same HwVersion as yours. On the other hand though, it might sometimes be easier to try an image out, than to find out the HwVersion of its target modem... smiley for :D

BTW, what you translated from that Brazilian page, doesn't even mention HwVersion 810012, which apearantly exists. Could it be that the number is region-specific to some extent?

Yes, it is the most close to the complete GlobespanVirata firmware, but it misses a few features too. The only important misses that I noticed are the SNMP config screen and the screen for control of the external access to the Configuration Manager (WEB GUI).

Again: always try the Cor's page selector. Some pages are "hidden", but still they do exist, and are accessible, if you know their URL.

Two possible reasons: that firmware may have been written for a Viking II (mine is Viking I) -OR- it may have certain unchangeable parameters that were specifically set for a different DSLAM than the one to which my line is attached.

What is your HwVersion? :) If you're a Viking I, and 810020 is really a Viking II, and jetSpeed says it's 810020, how come its firmware worked perfectly for you?

Also, what is DSLAM? smiley for :D

Sorry - I don't know this express setup, so I can't say anything. Perhaps this may be a good clue. Please, give more info.

It's here. Unzip it and look at the "cfg" folder. In lines of viking.cfg, first two numbers are obviously VPI/VCI. But what are the last three? They seem to represent some settings too. That's what I meant.

Did you actually load the RTA100+ firmware to an Ericsson HM210dp or have you just heard/read about it? If you have that modem, then try the "get system" command and you'll see the HwVersion. Please, let me know the result.

I think I did, but i'm not sure. That's my dad's modem. I'll try to connect to it, or ask my brother to do it, when they go online. I'll also ask him to make me a screenshot of its start page in case I cannot connect to the modem from my home.




RQ - 05.09.05 6:34 pm

Roger,

My fathers Ericsson HM210dp:

pics here

Telnet session log (sorry for not filtering anything out):
                       *******************

                        Welcome to Viking
                        *******************


GlobespanVirata Inc., Software Release VIK-2.1.040827a

Copyright (c) 2001-2003 by GlobespanVirata, Inc.


login: root
password:
Login Successful

$get system


Model       : HM210dp

Name        : titanium

Domain Name :

Description : DSL Modem

Location    : GlobespanVirata Inc.,100 Schulz Drive, Red Bank,NJ 07701,U.S.A

Contact     : GlobespanVirata Inc.,100 Schulz Drive, Red Bank,NJ 07701,U.S.A

Vendor      : GlobespanVirata Inc.,100 Schulz Drive, Red Bank,NJ 07701,U.S.A

LogThreshold: 1

Object-id   : 1.3.6.1.4.1.50000

HwVersion   : 81001a

SwVersion   : VIK-2.1.040827a

DSL Version : T93.3.38

System Time : Mon Sep 05 19:05:42 2005

Time Zone   : EET

DST         : On

Services    : physical datalink internet end-to-end applications

UpTime(HH:MM:SS)     : 1:55:42

Backup Interval      : Disable
$


As we can see, it's 81001a, not 810012, as I thought at the beginning...


RQ - 05.09.05 7:02 pm

oh, and of course, it's not original firmware, as I've changed it. Even the current page title (Maxthon screenshots) says that. However, now I think I actually used the firmware of RTA100, not RTA100+, as the Ericsson doesn't have a USB port.

Also, as you can see, the original firmware said "GS8100 Configuration Manager", and GS8100 is actually the name of original GlobespanVirata modems.


Roger - 06.09.05 4:23 am

RQ,

Nah, no access to things like that. :) I'm a home user, not a business.

You did not understand: I've suggested that you just examine ANY modem based on the Conexant's AccessRunner chipset. They are very common nowadays, anywhere.

You can use Cor's page selector to go directly to them. They do exist, but are simply not linked from the main interface.

I know it. But, again, this is not the kind of solution that I am looking for. I am looking for a better firmware, featuring an integrated, stand-alone WEB interface - without the need of alternate resources. A firmware like the RTA100's or a little better. But one that would work with my D-LINK and my ADSL provider.

BTW, what you translated from that Brazilian page, doesn't even mention HwVersion 810012, which apearantly exists. Could it be that the number is region-specific to some extent?

My guess is simpler than yours: probably that author hadn't come across a hardware with id=810012 -OR- maybe HwVersion 810012 does not exist.

Note that I've picked those lines up from that site, but I do not know if those statements are 100% correct and verified. For instance, it says that

"Viking II firmware will run on Viking I; one may get access to the modem via Ethernet, but ADSL link will not synchronize."

Now, suppose that RTA100's firmware version 2.1.040827a was made for Viking II (this is a good guess, OK?). Then, how come it worked perfectly on your father's Ericsson modem which is a 81001a ? Perhaps the way the Vikings work is more complicated than we think.

Again: always try the Cor's page selector. Some pages are "hidden", but still they do exist, and are accessible, if you know their URL.

I've already tried, but those specific pages really do not exist in that firmware (I mean Dynalink VIK-2.1.040827a1).

What is your HwVersion? :) If you're a Viking I, and 810020 is really a Viking II, and jetSpeed says it's 810020, how come its firmware worked perfectly for you?

Who told you that the HwVersion of the JetSpeed 520 is 810020 ? I've never had a real JetSpeed 520 in my hands so I have never issued the "get system" command on one of them. So I don't know whether or not that HARDWARE is 810020. (Does anybody else reading this have a real JetSpeed 520? - if yes, please command "get system" on the CLI and tell us, so we know its HwVersion for sure). RQ, it seems to me that you are again being puzzled by HwVersion: it is a property of the hardware, not of the firmware.

Currently I have two Viking modems. I've just tested them again, with 3 different firmwares on each. Results:
D-LINK DSL-502G - "get system" always returned HwVersion = 81001a, no matter what firmware was loaded. Always 81001a.
Huawei MT800 V.100 - "get system" always returned HwVersion = 81001a, no matter what firmware was loaded. Always 81001a.

Also, what is DSLAM?

The acronym DSLAM stands for "Digital Subscriber Line Access Multiplexer". In brief, a DSLAM is the equipment to which the far end of my line is connected, at the provider's premises. But technically there is much more than this. You may read a little about the DSLAM here:
http://www.eicon.it/support/training/slideshow2.asp?i=150&go=back&c=ADSL_Intro
Or, better yet, browse the course from its starting page:
http://www.eicon.it/support/training/slideshow2.asp?go=section&c=ADSL_Intro&s=5

look at the "cfg" folder. In lines of viking.cfg, first two numbers are obviously VPI/VCI. But what are the last three? They seem to represent some settings too. That's what I meant.

I downloaded the Dynalink Express Setup. Fist I analyzed it with an Hex Editor, looking for something like Viking CLI commands, because I suspected that it was simply a program made for quickly configuring RTAs (it is very common that ISPs produce such utilities for their customers)... and the commands were, in fact, in the file. Upon executing the program, I've noticed that there was no place in its GUI for setting up the correct IP address of the target modem and its correct admin password. So IP and pwd were already defined, fixed, within the code. So I concluded that Dynalink Express Setup was very region-specific and wouldn't work at my setup, but I gave it a try anyway.

To get a better understanding of what Express Setup would do, I've selected an ISP from the drop-down list and clicked SET, while monitoring my PC's Eth interface with a data analyzer tool. Result: Express Setup tried to establish a telnet session to 192.168.1.1 (the default Eth IP address of most Dynalink modems) and to send CLI commands, just as I expected. Of course it did not work: when it tried to log in to the modem, the password it used was invalid for my modem. Then Express Setup gave up. The monitoring tool registered the entire session.

Dynalink Express Setup is clearly a very region-specific utility, created to simplify the customer's task of configuring the RTA100 and 500 for one of those ISPs in Australia. The 3 last numbers must be variables, to be read and understood only by the program, which will then send consecutive configuration commands (or a full script at once) to the modem accordingly.

I could not uncover the meaning of those numbers in the cfg file. Only their location is easy to understand: they are in a separate file probably because this lets Dynalink (and/or the ISP) to easily update parameters without having to recompile the code.

But be sure that all of this will never lead us to the solution of the problem we are discussing. These numbers probably only define parameter values and/or commands to be sent to the modem. And I have already tried all Viking DSL configuration commands and nothing made the ADSL link go up. I think that ADSL compatibility between the modem and the DSLAM is deep within the firmware of the modem, something that can only be changed by the use of the original GlobespanVirata tools.

Warning: I would never recomend the use of the Dynalink Express Setup to any user unless it was delivered by his ISP, bundled with a Dynalink modem and well documented. This program is of no use to anybody outside its intended market, which seems to be certain areas in Australia.

My fathers Ericsson HM210dp ... As we can see, it's 81001a, not 810012, as I thought at the beginning...

OK, it is a 81001a and there is no 810012, right. Interesting to note that is running a RTA100's 2.1.040827a firmware without glitches (see: operational status is showtime/data - good).

Well, I think there's not much more to discuss on this subject - unless someone can help us finding the original Globespan tools...

Cor,
Please, excuse me for these long posts. I won't do this anymore.


RQ - 06.09.05 9:15 am

Roger,
just a few notes:
Who told you that the HwVersion of the JetSpeed 520 is 810020 ? I've never had a real JetSpeed 520 in my hands so I have never issued the "get system" command on one of them. So I don't know whether or not that HARDWARE is 810020. (Does anybody else reading this have a real JetSpeed 520? - if yes, please command "get system" on the CLI and tell us, so we know its HwVersion for sure). RQ, it seems to me that you are again being puzzled by HwVersion: it is a property of the hardware, not of the firmware.

I'm not being puzzled. jetSpeed 520 is what I have. And it is 810020. :)

Meanwhile, 810012 is featured in lots of manuals (including Conexant's CLI reference), that's why I believe it exists... Again, maybe it simply depends on the region, and is US-only, for example.


Roger - 06.09.05 2:39 pm

RQ,
jetSpeed 520 is what I have. And it is 810020.

Thanks for this info. This is important. This confirms that the info from that site ("Viking II firmware will run on Viking I, etc, etc") does not entirely clarify the issue and could lead to wrong conclusions. Hummm... perhaps I should have given more attention to that "generally" word in that text...

About 810012 - I'll check the manuals, the CLI ref etc. Will try to find as many versions as possible, compare with any Release Notes I may find and try to derive / stabilish the rules. This will take a while.

Could you please take a few close pictures of the printed circuit board of your JetSpeed 520 and post them on your pictures site? I'd like very much to see it.

Have you tried the RTA100+ firmware on your Jetspeed? Did the ADSL link work?
Thanks,
Roger


cor - 07.09.05 5:35 pm

don't worry about long posts, it's all good!

;o)


Roger - 08.09.05 3:51 am

Cor,
Thanks!
I thought that long posts were unwanted here... It is a relief knowing that they are welcomed.

RQ,
I've already found several references to HwVersion 810012. So it really exists, no doubts. But I still can't establish a relationship between HwVersion and the type of the Viking chipset (I or II).

I have almost concluded that HwVersion has nothing to do with the Viking being I or II. The more I search on the subject, the more convinced I become that that info linking them (Viking I ... HwVersion to be 81001a... Viking II ... HwVersion to be 810020) is incomplete, misleading or, maybe, entirely wrong.

Here are a few lines that I picked up from the Conexant site (differences on bold):

Viking I: "Viking ADSL Bridge Chipset with Network Processor"
Viking II: "Viking II ADSL Bridge/Router Chipset with Network Processor"

Viking I:
"... The highly integrated Viking Ethernet modem ADSL chipset offers OEMs a complete full-rate, full-bridging performance two-chip solution for ADSL Ethernet CPE applications...".
Viking II:
"... The highly integrated Viking II Ethernet modem ADSL chipset offers OEMs a complete full-rate, full bridging, and routing performance two-chip solution for ADSL Ethernet CPE applications...".

Viking I:
"... Fully integrated AFE (*) with integrated transmit operational amplifier and analog multiplexer..."
Viking II:
"... Fully integrated AFE with line driver, receive amplifier and ADSL filters..."

Viking I:
"... Data rates up to 8 Mbps full rate, 4 Mbps for G.Lite downstream, and up to 1 Mbps upstream"
Viking II:
"... Data rates up to 12 Mbps full rate, 4 Mbps for G.Lite downstream, and up to 1 Mbps upstream..."

A feature only available on Viking II:
"... Upgradable to ADSL2..."

(*) AFE = Analog Front End

So, it seems to me that among Viking chipsets I and II, the II is the only one that can be used to build a modem-router. Viking I seems to be an old chipset, obsolete, maybe discontinued, not used anymore on any currently available Internet Access Device (IAD), since it can only be used for assembling modem-bridges. So, if one has a Viking-based Internet Access Device that can be configured as a router, then its chipset has to be the Viking II, no matter what the HwVersion is.

Perhaps HwVersion is only related to minor differences on the physical circuit board of the IAD: existence of USB port, of console port, of extra ETH ports (bundled Ethernet switch), of power on/off switch, of an internal splitter, of a reset switch, number and function of leds, operating DC voltage, etc. So, the use of a firmware targeted for the exact HwVersion of a given IAD will just make sure that all of the above mentioned features will work properly, but will not determine whether the ADSL link will synchronize or not.

That statement ("Viking II firmware will run on Viking I; one may get access to the modem via Ethernet, but ADSL link will not synchronize") is, at best, misleading. In fact, ADSL link may not equalize for another reason, like interoperability problems between the DSLAM and IAD ends.

This is as much as I could learn/discover from the very few sources available on the Internet on this subject. Of course, any other insights are very wellcome.


Roger - 10.09.05 1:58 am

RQ,
Could you please take a few close up pictures of the printed circuit board of your JetSpeed 520 and post them on your pictures site? I'd like very much to see how's the '520 in detail.

Have you tried the RTA100+ firmware on your Jetspeed? Did the ADSL link work?
Thanks,
Roger

Cor,
It's getting very quiet down here... Where's everybody?
Roger


Bicephale - 15.09.05 5:26 am

`GNetBB0060BMaintenanceConnectorReview.RAR' (870 Ko) has been E-Mailed, i
got it back using Cc and Bc addresses... The maintenance connector and its vincinity are clearly exposed in the 1st eight pictures, the comments
to describe it all are written in .RTF text and are included as well.



cor - 15.09.05 8:36 am

I got that Bicephale, and everyone else can get it here..

http://corz.org/public/docs/comms/router/GNet%20BB0060B%20close-up/

thanks!

;o)


Juan - 15.09.05 7:24 pm

We need to set some default parameters in a specific TEfacs file.
Can you help us with that?



juan - 15.09.05 8:56 pm

Is it possible to get from the TEimage, all the files in order to create that image: TEfacs, cfg, etc..


Roger - 16.09.05 6:42 am

Is it possible to get from the TEimage, all the files in order to create that image: TEfacs, cfg, etc..


Good question, Juan. I think that the answer is no, at least not without the GlobespanVirata docs and tools (development environment).


Bicéphale - 16.09.05 1:41 pm

Hi Juan,

About your question (and two carbon copies)
of September 15:

If i'm getting this correctly, you're not asking
me about the GNet BB0060B MoDem Router and its
`TEImage.BIN' because if you do i have to reply
that it's using `TEPatch.BIN' instead. If you do
ask me this question then i must point out i did
not try `Vik-Tools v0.11' on `TEPatch.BIN' just
yet. If i were curious about `TEPatch.BIN' i'd
try ftp://192.168.7.1 first bu i suppose this is
not the answer you're looking for neither so, i'm
sorry to write that i don't have a clue so far.

smiley for :roll:




Roger - 18.09.05 3:03 am

Bicephale,
Perhaps the following information might be of interest to you.

From the Advanced Reference Guide for Solwise SAR110 ADSL Router - Page #21

TEImage.bin - Entire binary image.
TEPatch.bin - Compressed file containing patch code representing one or more of the code blocks (for example, the DSL firmware and application code blocks). You can use TEPatch.bin to upgrade several blocks at a time, without overwriting all blocks.


So one must be carefull when applying a TEPatch.bin. It must be exactly the one compiled and provided by the modem manufacturer to be loaded over that exact TEImage.bin release that is already in the modem. There's no room for experiments here. If a TEPatch.bin is applied over a TEImage.bin not corresponding to it, the modem will not synchronize anymore, will not even complete the boot process and will be unreacheable via Ethernet interface.

During my former tests with my D-LINK DSL-502Gmodem, I made this mistake and I got a beautiful D-LINK dead box... Because my D-LINK did not feature the console port ("modern" modem makers love to save on LVTTL to TTL interfaces...) and because I was in no mood to assemble such a voltage level adapter interface, the only solution I found was to find out how to record a full TEImage.bin directly to the Atmel flash memory. At the end, it turned out that I had to assemble something, anyway: the famous parallel cable. Then I got the GlobespanVirata's Loadfi.exe program and restored the image to the flash. All worked 100% OK.
Hope this helps.


Roger - 18.09.05 3:45 am

Cor
Now I know why some comments show up duplicated...
I've reloaded the page and my last comment was inserted again...
Nice to have this "edit" icon: I edited the comment and posted this one instead.


Bicéphale - 18.09.05 8:23 am

Hi Roger,

Ro> ...Solwise SAR110... Hope this helps.

You're right on time, i was becoming curious about
sibling brands and i must confess the `LoadFi.EXE'
documentation (which brought me to CorZoogle, as i
recall) didn't make me understand the difference
between `TEImage.BIN' and `TEPatch.BIN'. I still
haven't compared the maintenance connector pinouts
so far but i've DownLoaded everything i could find
that seemed to relate to the FLASH chip, i guess.

Confirming that i should pay more attention to the
SolWise manual was most useful to me, nonetheless:


an image
http://www.solwise.co.uk/adsl-sar130.htm


an image
http://www.turbocomm.com/spec.aspx?mn=EA102


an image
http://www.gentek.com/products.cgi?sku=BB0060


The PC Board is marked "EA130 Rev:X5" and my top-
cover has no model below the "ADSL MoDem" letters.

Other than that, the casings look quite similar...

smiley for :D

Ro> ...I got a beautiful D-LINK dead box... ...my
Ro> D-LINK did not feature the console port...

I probably had my reseller cross-ship mine for the
very same reason: GNet's replacement unit arrived
with the newer FirmWare already FLASHED, though...

Ro> ...the only solution I found was to find out
Ro> how to record a full TEImage.bin directly to
Ro> the Atmel flash memory. At the end, it turned
Ro> out that I had to assemble something, anyway:
Ro> the famous parallel cable.

That's where your expertise can help the most: my
maintenance connector differs and hence i'll need
to identify each of the six pins. So far, pin #1=
SI, pin #2=SO and pin #5=+3V3 if pin #6 is Ground.

I get about 70 mV A.C. on pin #3 while there's no
A.C. signal on pin #4 and the later pin drops all
the way down (to below 50 mv) during boot time...

Usually, pins #3 and #4 both remain close to +3V3.

The more i get acquainted with it, the more i have
to wonder why the manufacturer doesn't offer its
customers a dependable version equiped with a pair
of FLASH chips so that at least one FirmWare will
be valid at any one time! Well, given the fact it
is so tiny i had to use a camera to help my sight,
i don't suppose space would really be a problem...

smiley for :roll:

But i begin to babel now so, i'll just say thanks!



Roger - 18.09.05 11:58 pm

Bicephale,
Nice to know that my previous comment was of use to you.
So, am I right to infer that all you want is the parallel cable? If yes, that's easy... it's all here at Cor's archives: http://corz.org/public/docs/comms/router/emergency%20direct%20flash.zip Besides describing the parallel cable, this doc will help you identify the wiring from each of the pins of the 6-pin header to the pins of the Atmel flash memory. Anyhow, I think that this identification will not be needed. Read on.

In fact, there are several sites on the Internet carrying the same description of the parallel cable, with small (and sometimes large) variations, but I suppose that all of these documents derive from the same chinese original:

http://oldblog.blogchina.com/article_42238.795348.html

I've already seen several translations and adaptations of this chinese WEB page, on different languages, most of them very poorly assembled, leading to huge confusion. For sure, they would never win any literature award on any language, but anyone having a basic knowledge of
electronics would be able to extract the useful info from them and successfully assemble the cable.

And, of course, as usually happens on the Internet, some of these "versions" may actually contain errors. For instance, if one follow exactly the pictures shown on some of these pages, one may reverse the connector of the cable at the modem's end... Even the pictures on the chinese WEB page may lead to some doubts (it seems to me that one of the pictures show the connector on the reversed position).

Anyhow, what counts is: the chinese document contains good information that really works. One just have to be cautious and apply elementary electronic concepts. Even if the connector is reversed, that will not cause much harm. Normally Loadfi.exe will simply not "see" the modem. Then just unload Loadfi (ESC key), power off the modem, reverse the connector and you're done.

As you may know, all of these Viking-based modem-routers are designed from the same GlobespanVirata hardware reference design. The actual modem makers only introduce minor variations. This is why the cable will work for most of the clones.

The pictures you posted are interesting ones... even the boxes are identical for those three brands... But there are several other "incarnations" of the GlobespanVirata reference model around, as you may have already seen elsewhere.

Among the several Viking-based modem brands and models that I have tested, the 6-pin interface always follows the same pin sequence/order, but sometimes they are reversed, I mean, sometimes pin-1 is the one closest to the front side of the modem and sometimes it is the one closest to the rear side. As I said before, just try reversing the connector.

There are a few of the "clones" that actually feature a SEVEN-pin connector. For this case the solution is a bit more complicated. This is not your case.

Here is a very brief resume that I wrote from the contents of the file stored at Cor's archives (refer to the file for all other details):

-----------------------------------------------------
Left column: pin of the 6-pin connector of the modem
Right column: correspondent pin of the ATMEL chip (modem's PCB internal wiring)
1 ........... 13
2 ........... 14
3 ........... Exception: see below (*)
4 ........... 11
5 ........... 12
6 ........... 7
-----------------------------------------------------

(*) Pin 3 of the connector is not wired to the Atmel chip, but it has to be connected to pin 4 of the LPT for the cable to work.

And here is what really matters:
The LPT of the computer has to be connected to the modem’s 6-pin connector as follows:
--------------------------------------------
Left column: LPT on the PC
Right column: 6-pin interface at the modem
4 ---------------------- 3
5 ---------------------- 1
6 ---------------------- 5
7 ---------------------- 4
11 ---------------------- 2 (through a 100 ohms resistor, 0.25w)
18 ---------------------- 6
--------------------------------------------
Make a cable accordingly. Connect modem to PC. Boot on pure DOS (an old boot disk will do). Run Loadfi.exe. Apply the TEImage.bin. Be happy...

Please, post here your results and let me know if this was helpful for your needs.

Disclaimer - alert to the eventual reader: people not familiar with this kind of things must not try any of the above suggestions. The modem may be damaged and / or warranty may be void.


Bicéphale - 20.09.05 4:49 pm

Hi Roger,

Ro> So, am I right to infer that all you want is
Ro> the parallel cable?

At first, i couldn't imagine today's manufacturers
still fail to manage FLASH memory safely while the
responsability is transfered without being worried
that FLASH disasters rarely boost confidence... I
wasn't aware that maintenance connectors were such
a common feature and the reason for this eluded me
even more! All i wanted was a reliable device for
which no money needs to be spent in transportation
charges for reprogramming, etc., and especially if
my best option will be the purchase of a new unit.

smiley for :roll:

Since virtually every single manufacturer seems to
build its products similarily, leaving a door wide
open to FLASH failures, euh... i suppose the GNet
products are as good as any other. My alternative
being some emergency kit, i'd have ordered a cable
from them quite happily if provided with a CD-ROM,
even at the cost of cancelling a 2 years warranty!

smiley for :geek:

In short, a 3rd-party emergency kit is needed only
because i couldn't find a MoDem/Router which NEVER
fails to recover from FLASH accidents by itself...

Ro> ...it's all here at Cor's archives...

Yes, this is exactly what made me realize the best
home for the GNet BB0060B MoDem/Router pictures is
RIGHT HERE! Having no other choice than Plan-B, i
concluded it may accelerate the process of sharing
information with other technically oriented people
if i could get my findings published on CorZoogle.

smiley for :cool:

Ro> ...this identification will not be needed.

I'm not desperate enough to plug the cable in hope
that nothing harmful occurs at any of both ends...

smiley for :eek:

All i had at hand was remotely related information
about a 5 pins header used by FLASH SoftWare for a
different product when i started this. Now that i
am making progress, my curiosity is growing and it
is no longer satisfying just to get a hypothetical
emergency kit: i need to understand its wiring...

Ro> ...all of these documents derive from the same
Ro> chinese original...

At least, we can now add the Huawei MT800 brand to
the list of clones to be investigated! I couldn't
progress with the "ys168.com zflcn" trail, though.

smiley for :roll:

Ro> ...one of the pictures show the connector on
Ro> the reversed position...

I did't see it but it happens the GlobeSpan/Virata
Serial Flash Image Loader v2.05 (of 2002) is self-
documented. `LoadFi' launched from a command-line
describes the v1 cable ("-c1" flag by default) as:

D5 (Data-5) -> CS (Chip Select)
D4 (Data-4) -> Clk (Master Serial Clock)
D3 (Data-3) -> SI (Serial Input)
D2 (Data-2) -> Rst (Reset)
~S7 (?) <- 100Ω <- SO (Serial Output)
Gnd25 (Gnd) -> Gnd (Ground)

This is more verbose but my interpretation remains
coherent with what we can gather from the `LoadFi'
program. Now, according to that Chineese post at:

http://zhangfl.blogchina.com/669586.html

Only two lines seem to remain coherent between the
various references, the paths are described below:

Data-3 (LPT-5) > Blue > SI (JP1-1/U8-13)
Data-5 (LPT-7) > Black > *CS (JP1-4/U8-11)

Extrapolations didn't allow me to clarify these 4:

Gnd (LPT-18?/25) > Braid > Gnd/0V (JP1-6/U8-7)
Data-4 (LPT-6) > Cyan > Master SCk (JP1-3)
Data-2 (LPT-4) > Yellow > Reset? (JP1-5/?)
Busy (LPT-11/~S7?) < 100Ω < Red < SO (JP1-2/U8-14)

NOTE - Here's help about the parallel port layout:

http://www.winfordeng.com/download/brk25_connections.pdf

Ro> ...anyone having a basic knowledge of
Ro> electronics would be able to extract the
Ro> useful info from them and successfully
Ro> assemble the cable. The actual modem makers
Ro> only introduce minor variations. This is why
Ro> the cable will work for most of the clones.

So far, my worst issue is with the Master SCk bus:
two antagonist outputs short-circuit each other if
the main chip's output can't be forced to enter in
high-impedance state and i don't see how to do it.

smiley for :erm:

Ro> The pictures you posted are interesting...

Thanks you, it wasn't easy to reveal features less
than a millimeter wide while maintaining a balance
between details and spotlights using a home setup.

smiley for :D

Ro> ...there are several other "incarnations" of
Ro> the GlobespanVirata reference model around...

Indeed, but i'm not certain it's all GS8100 based:

http://eciadsl.flashtux.org/modems.php?lang=en&modem=all

Among those with a supported ECI ADSL Linux Driver
there was the GVC BB039, the IPM DataCom WebPower,
the SolWise SAR100 (EA100), the TeleWell TW-EA100,
the TurboComm (EA100 as well) and a few more might
have slipped thru if casings were too different...

Ro> Among the several Viking-based modem brands
Ro> and models that I have tested, the 6-pin
Ro> interface always follows the same pin
Ro> sequence... ...try reversing the connector.

I always find 1st-hand testimony most valuable but
i wouldn't risk being the exception confirming the
rules. I'll try to proceed in some orderly steps.

smiley for :D

If only it was the eighties and i bought it at the
local Radio-Shack store! In those days an average
customer wasn't thought just to be a moron for who
a MoDem is a MoDem is a MoDem: we had schematics,
often enough!!! I sort of miss these old times...

Ro> Please, post here your results and let me know
Ro> if this was helpful for your needs.

Yes, and more specifically the Chineese reference:
i appreciated to have the original pictures handy.

Then i got this while reading the Atmel #2224 .PDF
documentation (see "Pin Descriptions", page 8/33):
1) Write Protect can be tied high if unused, 2) an
internal power-on reset circuit is present and the
Reset line can be tied high if unused... Page 24:
i also read that SPI mode is 3 by default and i've
also found that the Ready/Busy* output pin must be
terminated with an external pull-up resistor since
that's an open-drain stage and it's low when busy.

Oh, and somewhere it says that "Serial Mode" is 4.

I can't garantee this will help in the near future
but knowing there are half-output stages with some
load resistors finally put me at ease, somewhat...

smiley for :ehh:

Ro> Disclaimer - alert to the eventual reader:
Ro> people not familiar with this kind of things
Ro> must not try any of the above suggestions.

True and i can't but concur, most definitively!...

Ro> The modem may be damaged...

Which is why i must try to verify some things 1st;
JP1-6, for example: it turns out the power bus on
the solder-side that i believed could make contact
with it is actually at 5 Volts while pin 6 is tied
to 0 Volts and one needs a good sight to see this!

smiley for :eek:

Ro> ...and/or warranty may be void.

Which will be confirmed, most likely, if one cares
to ask any clerk from practically any corporation!

smiley for :roll:



Roger - 22.09.05 2:44 am

Hello Bicephale
All understood. Good luck in your quest for exactly identifying the wiring. Without schematics it is very difficult and may be almost impossible if the printed circuit board has more than two wiring layers, which, I think, is the case.


Bicéphale - 22.09.05 6:16 am

Hi Roger,

Thanks! Most fortunately, it's a cheap double sided board only...

If it's OKay, i'll resume posting images, then explain what i see.

smiley for :cool:



viking - 22.09.05 6:30 am

what is de password default??????
plsss
send a mesage jjtorres_80@hotmail.com


Roger - 23.09.05 12:59 am

Bicephale,

Bic> it's a cheap double sided board only...

It would be nice to know how to discover/determine the number of layers of an assembled PCB. Any hints?

Bic> If it's OKay, i'll resume posting images,

Images are always helpful. Anyway, I think that only Cor can respond to this and tell where/how to store the images.

Bic> then explain what i see.

For sure, I will appreciate to read your report.


Bicéphale - 23.09.05 3:25 am

Hi Roger,

Bi> it's a cheap double sided board only...
Ro> It would be nice to know how to discover/
Ro> determine the number of layers... Any hints?

Good question. Back lightning can help inspection
and partly reveal the solder-side thru translucent
areas (with no copper on the component side). I'd
have noticed the middle layers if any were present
but no shot from the photograph set capture that.

Bi> If it's OKay, i'll resume posting images...
Ro> ...only Cor can respond to this...

Yes, i wrote to him about it so i must wait now...

Bi> ...then explain what i see.
Ro> ...I will appreciate to read your report.

You're most welcome. Many aspects still should be
cleared up: the custom RS-232 cable, for example;
the U8-2 (Reset), U8-3 (WP) and U-11 (CS) pins, or
simply a few left-overs from the primary review...

smiley for :D



Roger - 23.09.05 3:41 am

Thanks for the explanation, Bicephale.
Again, good luck with the wiring mapping.


Bicéphale - 28.09.05 4:16 pm

Hi Cor,

Is it OKay to complete my GNet BB0060B maintenance connector review?

smiley for :cool:




cor - 29.09.05 9:55 am

sure! feel free to do anything you like!

mail me stuff and I'll slot it into the most appropriate place.

;o)


RQ - 30.09.05 5:52 pm

Hey! :) Long time no see. :)
Sorry, Roger, i haven't taken a pic of my jetSpeed until now. At first, I was out of my home for a week, and then I just kept forgetting to bring the camera home (it's not mine).

However, probably the best of the blurry pics is here. Sorry, I may have drank too much alcohol today smiley for :erm:, so the photos aren't sharp enough. But they may help you a little. You can check the whole folder, if you want.

On the pic I linked, I added 7 numbers, of which first 6 mark chips. Here's what's written on them:

Number 1:
20PMT04B
YCL
0426

Number 2:
UMEC
UTB00298S

Number 3:
Realtek
RTL8201BL
45358S1
423D TAIWAN

Number 4:
(GlobespanVirata logo)
GS37710174-001H A
0423 Taiwan
D14WP.1-2A

Number 5 is a barcode:
803W4B30A287

Number 6:
(ATMEL logo)
AT45DB161B
TC
0422
GSV-VIKING

Number 7 is what's printed on the board itself:
X8021-ZT1
ver: 1.61 2002.12.22


I hope this will help. :) However, I may have misinterpreted Zeroes as Oh's, or vice-versa.

I'm goin' to read your comments now. ;)


Roger - 01.10.05 4:36 am

Hi RQ,
Thanks for posting. Nice to have you here again. I've tried to access the link you provided and got the following:

"The following error occurred: code=GATEWAY_TIMEOUT A gateway timeout occurred. The server is unreachable. Retry the request."

Tried several times, at variable intervals, to no avail.

I've found another Viking II chipset-based modem-router, the T r i z model T Z 5 5 0 0 E, which seems to be interesting. From what I've read about it on the Internet, maybe it has the newest hardware I've found till now and its firmware release may be the most complete I've seen to date, surpassing even the Dynalink RTA 100+. And so, I've just ordered one... I'll receive it late on next week, maybe oct 6th.

If all features comply to what I expect, that modem will give me the ability to make several other experiences that I could not make with my Huawei and D-LINK ones. I hope I won't be disapointed.


RQ - 01.10.05 7:54 pm

hmmm, interesting... The link works fine for me...

If that firmware of Triz is what you want, would you post it here? :)


Bicéphale - 01.10.05 10:09 pm

Hi,

Your post made me curious... What model is it and
did you add your own Heat-Sink or is one standard?

;^)

Euh... By the way, Cor: thanks, i'm on it now...

smiley for :cool:



Roger - 01.10.05 11:20 pm

RQ,
Your link worked now, but extremely slow. Anyhow, I saved the pic. I'll check it in detail later on, using the description of the chips that you provided. Will comment on this tomorrow. Now I have to leave and will come back very late.

I'll will be waiting for the hi-res close up pictures when you get the camera.

Have you tried the RTA100+ firmware on your Jetspeed? Did the ADSL link work?

Yes, OK about the firmware of my new modem, if it turns out to be any good.

Thanks,
Roger


RQ - 02.10.05 9:27 pm

Bicéphale, it's an Intracom jetSpeed 520, and yes, everything is original there. The day I took those pictures was the first time for me to disassemble that modem. :)

Roger, yes, the link might be slow, as my server gets quite heavily loaded sometimes. Yes, i've tried the RTA100+ firmware, and the link didn't synchronize, AFAIR. It was some time ago, and could try that again though, just to make sure.


Bicéphale - 04.10.05 5:44 pm

Roger, euh... 10-4!




truong - 05.10.05 7:53 am

Password default ???
Please !!!


Bicéphale - 05.10.05 10:58 am

Hi viking,
Hi truong,

About your posts of September 22 and October 5:

Vi> What is de password default?
Tr> Password default?

It's not clear if these requests were addressed to
me but let me thank you both for reminding me that
the default PassWord should be mentioned somewhere
in my suite of GNet BB0060B reviews, eventually...

In case one of you was about the GNet unit, i post
it without waiting:  "DSL" (capital letters only).

The MoDem's default IP address is:  192.168.7.1...

The Console interfaces (2-wires RS-232 and TelNet)
both will be quite useless for output captures, in
many cases, but TelNet is somewhat more forgiving.

smiley for :geek:

Viking (jjtorres_80), my alias is "dosinternet" on
HotMail/MSN, if you were inviting further contact.



cor - 07.10.05 4:04 pm

ahh, nice one riche, I updated my "rad" script, too, though whether I actually uploaded that anywhere is another story! smiley for :lol:

good work dude!

This page is gathering some real interesting info, we might have to see about some sort of gallery for all these pics of router innards. You gotta sober up soon RQ, or get a tripod!

;o)


Bicéphale - 07.10.05 8:07 pm

No, no!

There should be no need to change anyone's habits,
not as long as there's a timer available i mean...

:)



Roger - 10.10.05 6:06 am

RQ,

Sorry for the delay on continuing my comment.

I've checked my three modems against the picture and description of components that you provided. Most components are the same. The match is greater for my newest modem, that has HwVersion=810020. Of course, component locations differ a lot, as expected. Thanks for the pic and components ID.

i've tried the RTA100+ firmware, and the link didn't synchronize, AFAIR. It was some time ago, and could try that again though, just to make sure.

I think that latest RTA 100+ firmware may work on your JetSpeed 520, because, in my current understanding of the Viking-based modems, ...

- there are two main kinds of HwVersion: 81001a and 810020.
- HwVersion comprises much more than the chipset itself. It extends to most part of the circuit.
- all of the current modems are built with the Viking II chipset. The old Viking I was intended to make bridges, not routers.
- firmwares with release versions above 2 will only fit on 810020.
- your JetSpeed is a 810020

When you can, please test it again and tell us.

About my new modem - no good news...

I received it and it worked here, but unfortunately I did not like its firmware. There was a bug that caused the DHCP phase (after PPP authorization) to take around 3 minutes to get the valid IP and DNS servers addresses from the ISP, which is 200 times the normal time.

Besides, the WEB pages (Configuration Manager) had several non-working menus, leading to non-existent pages... For instance, the link to Parental Control was fake.

Moreover, the firmware does not allow Management Control (configuration of the access to the Configuration Manager from the WAN port).

Finally, it lost configuration a few times upon reboot. I am thinking about what I'm gonna do...


wombat - 10.10.05 3:22 pm

Can anyone send me the latest firmware of the huawaei smartax mt800.
Or tell me where to get it.
Or could someone get it from their mt800 by typing the following at the c:/ tftp -i 192.168.1.1 get teimage.bin
Any help is greatly appreciated.


Bicéphale - 12.10.05 9:23 pm

Hi Cor,

I'm conducting an experiment while i still have my
Sympatico DSL access running (i couldn't make this
device work like a stand-alone MoDem/Router before
yesterday)...  I believe it would be usefull here:

GS8100 Configuration Manager GUI

If it goes well, the visitors should have a pretty
good idea of what the MoDem is like.  I might also
publish the `commitedcfg.cfg' file i got so far...

This will most certainly need the scrutiny of your
regular users, i welcome any advice they can give!

smiley for :geek:

Note:  The "Help" button can be made interractive.

smiley for :cool:


Bicéphale - 13.10.05 11:40 pm

Hi,

This is the commitedcfg.cfg file i'm using at this
time, anyone willing to comment will be welcome...

smiley for :geek:



RQ - 15.10.05 11:00 pm

Roger,
I had this problem with DHCP taking 3 minutes too. Disable DHCP! You're not using DHCP to get an IP address; it's a part of PPP negotiation process.
Also, I had that problem with loosing configuration on reboot. The firmware that came with my jetSpeed behaved like that. Firmware update stopped it.

I haven't retried the RTA100+ yet. Maybe tomorrow...

cor, :) Thanks for the tripod tip, but naaahh... :) I'm happy with the server I administer myself. It's interesting tho, why it doesn't show you my pics...


DT - 16.10.05 3:48 am

Hi
I have a BT voyager 205 router. I have gone and reseted the default settings on it but cannot get into the advance settings after I put in the default name admin and password as well.

I click on ADSL, SYSTEM, etc and get nothing now like I use to within internet explorer.

I am trying to get in to disable DHCP, set IP addresses for all PC's and apply ACL's to the IP addresses as I had seen them within the router when I first got it. But now I dont see them at all. Any help would be a great help to this problem I have been trying to sort out.
thanks.. DT


Roger - 16.10.05 8:00 pm

Hello RQ,

In fact, since the first installation and configuration of my newest modem, I had DHCP disabled on ppp-0 (as well as on all other interfaces) but the modem disregarded the setting. This is one of the bugs that I referred to.

Nevertheless, you've hit the exact point, even without having direct contact with the setup here, what proves that you know a lot about data network stuff. Thank you for the insight and congratulations. You've helped me to get the correct understanding of a bug that I had pinpointed (see below).

Of course I have trashed that firmware and I am currently testing some others to commit. Amazingly, a few of them worked quite well (even ADSL synchonized!), proving the theory that 81002 is very compliant and tolerant when it comes to alternative firmware.

Roger

P.S. Here is a longer explanation of what happened.

LAN side - for several reasons, I always disable DHCP because I only work with static IPs on my LAN machines.

WAN side - when configuring interface ppp-0, I always disable DHCP, because my ADSL access provider (as well as the vast majority of them, worldwide) uses RADIUS for assigning IPs. The RADIUS server sends the valid IP to the BRAS and this one passes the IP to the modem during the NCP phase of the PPP negotiation.

The firmware that came installed on my new modem disregarded my setting (no DHCP on ppp-0) and was still executing a DHCP client behaviour on ppp-0 towards the ISP. In other words, despite I have configured ppp-0 with "DHCP: disable", the modem kept broadcasting outgoing DHCPDISCOVER packets on the ADSL side, hoping to get a DHCPOFFER packet in return. It took that long delay to timeout. After that, NCP took over and got the modem's valid IP and DNS servers.

In my previous comment, I involuntarily wrote a wrong description for that bug, because of what I saw in Configuration Manager. The Alarm Log showed "PPP Authorization Successful" (this meant that the LCP phase was done), then "Oper. Status" of the ppp-0 interface displayed "DHCP" during 2-3 minutes and suddenly the Alarm Log registered "PPP Interface Up". Actually, I thought that the word "DHCP" which appeared as Oper.Status of ppp-0 was just a wrong label that the author of the firmware used for the NCP phase. I should have understood that the modem was really trying DHCP, but how could I imagine that it was disobeying my non-DHCP setting? (this is the characteristic of all bugs; they're always misleading). So I wrote that "there was a bug that caused the DHCP phase (after PPP authorization) to take around 3 minutes".


Bicéphale - 17.10.05 12:49 pm

Hi Cor,

I'm slowly updating the BB0060B front page for its
future publication on CorZoogle, if you agree.  My
personal Web space is limited on SogeTel and there
is a pretty good chance i'll have to trim it down,
back to a single link to CorZoogle if possible.  A
toolbar header isn't included but i'm certain that
can be put back in no time...  Also, my Web author
skills are very limited...  it would require help!

Go to my post of October 12 for the exact address.

:)



cor - 17.10.05 6:52 pm

Nice work Bicéphale! I'll update the archive here with your HTML version, and link the images into it (you'll get hot-link errors from your current page) at some point soon. I'm in the thick of a site upgrade myself, making this soup of tags 100% xhtml compliant, among other things, so if you like I can fix up your tags and stuff while I'm at it, if they need it that is, I'm presuming they won't be xhtml compliant, gawd knows, most of the code here at corz.org certainly isn't.

By the way, it's just corz.org, "corzoogle" (all small case) is my (real-time) search engine. I tend to name my stuff with "corz" at the beginning, as is my wont. smiley for :D

The page looks great, very useful and with a clear, simple layout, your web skills aren't so bad, many so-called "experts" pages are near unusable! I'll grab the source now and throw it into the queue, if you make any changes, mail them to me. I'm happy enough to host any useful information, a lot of the juiciest stuff here at corz.org was contributed, or at least inspired by users. keep it up, I've got loads of space!

DT, I think I answered you on the main page, but at any rate, you really want to use telnet for these things.

RQ smiley for :lol: I meant for your camera!  smiley for :lol:  tripod hosting is the suxxors! You get those wee table-top tripods, ideal for desktop photography, though I tend to use my thumb. smiley for :D

Thanks for pinning down the ppp-DHCP issue Roger & RQ, that's not the first time I've heard of "disobedient" firmwares, as if certain features are simply hard-wired by the firmware writers, not good.

I wonder, As the devices ISP's put out "for free" become more sophisticated and valuable, perhaps we are about to enter an era where routers will need to be unlocked, like crippled, network-specific mobile phones*. Damn.

Do let us know which firmware you eventually settle on.

for now..

;o)


references:
At the risk of putting ideas into their heads, it's possible that certain provider-specific packets could be introduced into the negotiation process, and modems failing to conform would simply fail. The quest for a reliable set of generic router firmware hacking tools must begin!



RQ - 17.10.05 9:13 pm

Roger, I don't know that much about network stuff. ;) I just happenned to have had the same problem, and somewhere on the internet, I found that DHCP is only usefull to get addresses for IRC/NNTP/SMTP etc. servers, not to get an IP in this case.

cor, why are you making a separate print version? Just use a separate css file with media="print"!

Oh, and your XHTML-compliant sourcecode looks kinda ugly. No offence, but just replacing tables with divs doesn't make the code any cleaner or nicer, or whatever... Please don't feel insulted, that's just My Humble Opinion, of course.


Bicéphale - 18.10.05 1:12 am

Hi Cor,

Thank you for the support, i'll do my best to make
good use of any Web space you provide!  I modified
those pages for you and i'd only find natural that
it will get fixed as you see fit:  it's now yours.

smiley for :D



cor - 18.10.05 8:55 am

Don't worry RQ, I'm not, firstly because the stuff I'm working on has almost nothing to do with "just replacing tables", and secondly, there isn't a print version of anything, it's generated automatically on request (which is easier than creating print versions of all my stylesheets, at least for now), so you gotta be looking at something else entirely. Anything specific?

And for my recent source to be any more beautiful, damn! it would need to be typed in gold! smiley for :ken: Anyways, I'm more concerned about how it looks at the other end, and its being capable of being looked at, at all.

Cheers Bicéphale, yup, the page looks fine as-is. I'll get around to putting up here sometime soon - I don't get nearly enough time for web development, but I get there in the end.

By the way, I've got a second Voyager 205 winging its way to me this very minute, so finally I'll get to start messing around with the firmware proper myself. Watch out! smiley for :D

for now..

;o)


Bicéphale - 20.10.05 5:03 pm

Hi,

Cor> ...the page looks fine as-is.

The main page felt easy enough, it's the simulator
that gives me some hard time because the links are
valid in a few cases but don't work automatically.

I haven't figured out how the top menu (Home, LAN,
etc.) could be replaced with code that's more like
plain old HTML code.  I may need a crash-course on
using scripts and this idea isn't appealing to me!

If a revised version of 'commitedcfg.cfg' could be
submitted to my attention before ADSL disconnects,
i'll validate and use the replacement, eventually.

Perhaps you can give it a try on your Voyager 205.

smiley for :lol:




Me - 21.10.05 4:14 am

does anybody know Annex B firmware for Viking ?


Roger - 21.10.05 12:15 pm

Cor: "The quest for a reliable set of generic router firmware hacking tools must begin!"

As you remember, we've talked about this some months ago. Now, your renewed interest on this subject is more than wellcome. I have found one or two groups on the Internet, dedicated to hack the firmware of specific modem models, trying to make their modems better, get more feature-rich codes, even correct some bugs or lack of functionalities. I have always been envious of those modem-owners.


cor - 22.10.05 10:47 pm

Roger, this all sounds highly interesting. And yes, with a second voyager kicking around (at last!) I do plan to try out some of the stuff that would have been way too risky before.

What groups? I think we should get involved. smiley for :ken: I'm also very keen to explore the possibility of putting the unit to other uses. There's a small and highly capable computer on there just aching to be put to work on more interesting tasks. Audio processing comes to mind.

Me, appartently it's built-in. So long as you have the correct splitter (read: "microfilter") it should work fine, I guess.

Bicéphale, for the simulator, I'd probably start by simply spidering the web interface to a "local browsable copy", something that Teleport Pro, Offline Explorer, and those kinds of applications do rather well. When you're done, you have a re-linked local copy that *should* be browsable with little or no editing.

Like the router hacking, a lot of this is theoretical! smiley for :D

for now..

;o)


Bicéphale - 23.10.05 3:18 am

Hi,

Cor> ...I'd probably start by simply spidering the
Cor> web interface to a "local browsable copy"...

I used `OffLine Explorer v3.9.2123' on your advice
and the resulting capture will reproduce the whole
structure with no extra weight (well, not much), i
need to find and remove sensitive information now.

I already had a complete set using Mozilla page by
page with broken links/redundancy as a consequence
so, this new capture is quite a major improvement!

Cor> ...a lot of this is theoretical!

I can be patient while i try to keep an eye on the
larger picture and some tangible reality behind...




Roger - 23.10.05 5:15 am

Cor,
I did not find any group producing 3rd party firmware for Viking-based routers, but, months ago, when I was looking for the GlobespanVirata tools (which I never found...), I found a few WEB pages and foruns dealing with the development of alternative firmwares for some other routers and modem-routers. I did not save those URLs, but a quick Google search took me now to the following:

One alternative firmware for the Linksys WRT54G and WRT54GS router (free):
http://www.hyperwrt.org/Home-Page.shtml

Table comparing various 3rd party firmwares for the Linksys WRT54G/GS:
http://www.linksysinfo.org/modules.php?name=Content&pa=showpage&pid=31

Foruns about alternative firmwares for the Linksys router:
http://www.linksysinfo.org/modules.php?name=Forums&file=viewforum&f=2

Open source firmware distribution for Linksys and Broadcom routers:
http://www.linux-hacker.net/cgi-bin/UltraBoard/UltraBoard.pl?Action=ShowPost&Board=RG&Post=11&Idle=0&Sort=0&Order=Descend&Page=0&Session=

Short list of alternative firmware for Linksys WRT54G:
http://www.dslreports.com/faq/10537

Of course, these are all for the Linksys WRT54G/GS and the firmware is based on Linux, etc, but I just want to give an example of what people are doing, by developing or making better firmware. Perhaps somebody will eventually be able to start something similar for Viking-based routers.


cor - 23.10.05 8:03 am

Ahh.. great news Bicéphale! I must say I've taken to Teleport Pro myself, but used Offline Explorer for a few years. Teleport is more intuitive in use, I feel, though both produce excellent "browsable" copies of whatever you point them at. So long as you don't set the level too deep and end up capturing the entire internet to your hard drive; a sure-fire way of maxing out your monthly ISP limit! smiley for :lol:

I've done a fair bit of Googling myself these last few months, Roger, but alas, dead-ends and unresponsive manufacturers is all I seem to get. My inbox gets a weekly spattering of firware tool requests, as if I might have them up my sleeve somewhere, and not tell you guys about them. I wish.

It's in my mind to put together a nice written argument, explaining how releasing useful tools to the masses is a Very Good Thing, and would not only allow more demanding users to fully exploit the capabilities of the devices they have purchased, but quite probably produce better solutions for the ISP's who distribute the units in the first place.

I'm pretty sure BT would like to be able to say to some hyperventilating housewife.. "simply click here and your son will be able to play Halo", for instance. There's no doubt that with the right tools, capable viking owners will start to profitably tinker with the device, and we all benefit from that. Power of open-software, etc, etc.

Okay, that's a start, I'll expand on that, add power-words and stuff smiley for :ken:

Another reason I'd like to explore the possibilities of the unit is that while very capable, it will quickly be superceded by The Next Best Thing, and without decent tools, zillions of these boxes will be left to simply rot, adding to that already enormous pile of disgarded electronic materials that is forming a layer over our entire planet so thick that future archeologists will identify our time as "The Silicon Age". If we last that long, that is.

Or alternatively, our trusty Vikings might become effects peddles, echo-boxes, encryption chambers, DNS servers, I dunno, something!  Just thinking out loud..

;o)


Bicéphale - 30.10.05 8:08 pm

Hi,

Bic> I used `OffLine Explorer v3.9.2123'...  ...a
Bic> major improvement!
Cor> So long as you don't set the level too deep
Cor> and end up capturing the entire internet...


Yes, i had to include these in my URL filter list:

helpdesk.tzo.com
www.autofailover.com
www.dyndns.com
www.dyndns.org
www.tzo.com
www.tzoha.com


I'm finally done switching ISPs, well at least for
a couple months, i hope.  I wonder because my logs
show many bursts of successive failures like this:


All at once...

DSL Interface Down
ATM Interface Down
PPP Interface Down
PPPoE Down
ATM VC Down

Eighteen seconds later...

DSL Interface Up
ATM Interface Up
ATM VC Up

Two seconds later...

PPPoE Up

Then three to four seconds later...

PPP Authorization Successful


When i'm lucky, the connection lasts for hours but
that cycle repeats again after thirteen seconds if
i'm not (the disconnection lasts for hours too)...

The only change, other than the ISP, is the speed:
i upgraded from 3 Mbps to 5.  I tried the factory-
default configurations, etc., and it doesn't work.

I never observed any DSL, ATM, PPPoE and/or ATM-VC
failure since i bought my MoDem in mid-July (well,
not before i switched ISPs, i mean).  I'm puzzled!

In any case, there are times when everything looks
normal so i still hope to find what disables DHCP,
so that i can get the whole GUI (and corresponding
`commitedcfg.cfg' file) to capture then publish...

Should i be given the choice about the router hack
items to come, i'd vote for troubleshooting tools!

smiley for :roll:



RQ - 31.10.05 12:47 pm

Hey, peeps!

Would you enlighten me about what you're trying to do with those pages you download from the modem? I would probably want to help you improve them (if I don't become lazy by then).

Btw, i'm considering a switch to another internet provider too, and this one doesn't use DSL to provide internet, so it's possible that I won't use Vikings at home anymore...

Btw, a person on IRC told me about one more Viking-based modem: Siemens E-110.
I've just asked him to send me his TEImage.bin (which he downloaded from his modem using FTP), and I also have some German TEPatch.bin from http://www.uta.at/ds?pagename=UTA/Support/Support&kuerzel=20202000 . Roger, feel like testing it out? smiley for :cool:

RQ



RQ - 31.10.05 2:14 pm

OOps....

I've just "upgraded" my Intracom to the Siemens firmware, and it doesn't seem to work. I cannot ping my modem (well, i don't know which IP to ping), and I cannot "upgrade" it back to the original thing. Any ideas?.. smiley for :D If the network doesn't work, is there a way to upload the firmware image using console?


Roger - 31.10.05 10:01 pm

RQ,
Yes, I will test it next weekend.

You may look for the address (that your modem got after you loaded the new firmware) by using an hex editor for looking inside of the TEImage.bin.

Here's a good one: Hex Editor (Freeware license) - http://www.hhdsoftware.com. But note that even Notepad or Word would do too.

Then search for "ethernet" and close to it you'll find the IP address that the modem should have got after the firmware "update". After you find the IP, try connecting via http. If that does not work, you'll have to reload the old firmware.

I guess that there is a way to upload the old firmware via the console port, but I am not so sure now... it seems I got a blank smiley for :ehh: inside my head... I'm sorry. Go check the commands manual.

I always prefer to use the parallel cable. smiley for :D It is 100% safe. I've used it hundreds of times. I've "killed" all of my modems several times just like you did, and my cable never let me down. Look for my previous comments here and you'll find a complete description of the cable that I posted sometime ago.


RQ - 02.11.05 12:35 pm

Roger, thanks for the info. I found some instructions to make the cable here, and i'll try to assemble that one. It's a pity of course, that I cannot load the firmware using simple null-modem cable and console port. Actually, I tried connecting to jetSpeed's console today with no success. It either doesn't echo ANYTHING to the console, or I used bad connection parameters or bad cable. Anyways, it seems like loadfi.exe works through LPT port, not COM, so, having a working console wouldn't help me anyways...




Roger - 02.11.05 6:41 pm

RQ,
Just curious:
Have you found the IP address inside the TEImage.bin?
Have you read my comment (18.09.05 11:58 pm) about how to set up the parallel cable?
RQ wrote::
Actually, I tried connecting to jetSpeed's console today with no success. It either doesn't echo ANYTHING to the console, or I used bad connection parameters or bad cable.
First, check the pinout of the serial cable you used.

Now, about the terminal program:
None of my modems featured a console port, but I found the correct 5 pins available inside all of them (that is the serial header, but misses the voltage level adapter interface). I had to assemble a LVTTL-to-CMOS interface using an integrated circuit and four capacitors. Then I tested several terminal programs. The best one was TeraTerm (http://www.ayera.com/teraterm/). It worked wonderfully, but I could only connect at 38.400, 8N1.

As long as you already have the serial console port ready for use on the rear panel of your modem (Intracom was nice to its customers..), you don't need to assemble anything. Maybe all you need should be just playing with the connection parameters.

As I said in my previous comment, I can't remeber how to use the console port + serial cable for loading the firmware (or even if is there a way to...). But I just recalled how to use the console to reset the modem to an initial, temporary status so that you can access the modem via HTTP - ETH again and load the old firmware using ftp or tftp.

The recipe is here: http://poetry.freaknet.org/poetryminihowto/speedweb_hack_asbesto.html
(Cor, perhaps this may be of use to other people eventually reading this - should it go to Cor's archives?)

Anyhow, I would say that this procedure is a bit tricky and that I will always prefer the parallel cable method.
RQ wrote::
it seems like loadfi.exe works through LPT port, not COM, so, having a working console wouldn't help me anyways...
Yes, Loadfi.exe works through LPT (note that I always refer to the cable as "parallel cable"), but having access to the console is always important. For instance, you'll need it if you ever want to try the method described in the link above.




Bicéphale - 02.11.05 10:19 pm

Hi,

Bi> I used `OffLine Explorer v3.9.2123'...
RQ> Would you enlighten me about what you're
RQ> trying to do with those pages you download
RQ> from the modem?  I would probably want to help
RQ> you...  ...if I don't become lazy...

At first, i planned to publish graphic captures to
the attention of new owners and/or users requiring
help with the configuration.  Then, i realized the
capture was a lot more efficient in terms of space
if done using graphic components and HTML code.  I
wasn't able to determine the underlaying structure
from page-by-page captures using Mozilla but Cor's
suggestion allowed me to make a giant leap forward
as i now have the actual directory layout and even
more:  the on-line GNet BB0060 GUI simulator comes
to life without a glitch - well, almost i must say
(my MoDem/Router stops responding after the scan).

smiley for :erm:

The ultimate goal would be to publish my real-life
capture of a working configuration so that another
person in a similar situation will have the option
to get better acquainted with his MoDem/Router 1st
and then `commitedcfg.cfg' would be available once
he feels ready to edit it with his own settings...

On-line simulation doesn't expose the MoDem/Router
to risks due to misuse, FirmWare bugs or whatever,
you see - and this would make a nice complement to
the maintenance-connector relatated photo-section!

smiley for :cool:

I still intend to improve my maintenance-connector
section but that's a long-term project...  I learn
the things i need to know very patiently;  so far,
only half of the connector has been defined and it
is why i don't consider the work done yet.  My GUI
simulator is a refreshing change of perspective, i
hope it will help sustain my interrest before i've
become "lazy" but the end result would really have
value in itself, right?  Well, not for you since i
read there won't be DSL for you anymore but that's
life and DSL is what i'll have to use for a while.

RQ> Roger, feel like testing it out?

Dont ask me as maintenance-connector unknowns must
be cleared up before i consider a parallel test on
my MoDem/Router - the only one i can afford at the
moment...  FirmWare emergency rescue is one thing,
FirmWare testing is a completely different matter!

I wish i had multiple devices to troubleshoot this
persistant wave of disconnections i'm now getting;
i was ready to post when the DSL signal went down,
i guess it tells where i put my energy these days!

smiley for :roll:

Ro> I guess that there is a way to upload the old
Ro> firmware via the console port...

The best i could read when i was searching for the
perfect MoDem/Router (Flow-Controlled RS-232 port,
CLI, up-to-date ChipSet, etc.) was that X-MoDem is
the only protocol used around!  Only a model which
has Dial BackUp support built-in is likely to also
allow a suitable combination of speed and HardWare
Flow-Control:  ZyXEL's Prestige 662H, for example,
can reach 230 Kbps with HardWare Flow-Control when
its serial port is configured as "auxiliary" but i
am sorry to write the same port reverts to 9K6 bps
without any Flow-Control in "console" mode!  In my
opinion, this isn't reliable enough for a FirmWare
update and each attempt will seem to last forever.

My GNet MoDem/Router can do 38K4 bps over its two-
lines RS-232 interface (no HardWare Flow-Control),
i can't even have Xon/Xoff as on my HP calculator!

This is one of the elements which would need to be
improved in some eventual hacked FirmWare, really.

RQ> ...I cannot load the firmware using simple
RQ> null-modem cable...  ...seems like loadfi.exe
RQ> works through LPT port, not COM...

Once i reached this level of despair, i'd go for a
custom serial-parallel emergency rescue using this
parallel kit, keeping in mind i'm still pumping or
retreiving data from the serial SPI bus, actually.

smiley for :geek:



RQ - 02.11.05 10:22 pm

Hey!

The IP was 192.168.1.1, just as I expected from the screenshots of the interface of Siemens. I tried that IP with no success.

However, I'm back on track. I (well, my father, mostly smiley for :lol:) have assembled The Parallel Cable today, and used it to load the original firmware from Intracom. Well, Roger, actually, i've only checked the Brazilian page I gave a link to, before starting. Then, before flashing anything, I've read your comment and looked at the emergency flash archive, and found out that I needed to boot to "real mode DOS". Well, I did it. Still the cable didn't work. Eventually, we found out that one of the wires was broken, and soiled another instead (we used an 8-wire cable, so 2 wires were still free). After that, everything was just perfect. So, your manual was also a bit helpful (i'm not sure if flashing would succeed from Windows XP).

Now the serial cable. I don't know much about it. I just borrowed a "console cable" (at least that's what I called it) from the Computer Center guys at our university, and it didn't work. When connecting, I tried settings from this guide and used HyperTerminal. Btw, after failing this, I brought the modem downstairs to the Computer Center, and we tried it with another "console cable" and another program. Same results - console was empty.

Now that I have The Parallel cable, I don't really think Console port matters anymore. If I ever need this cable again (or borrow it to someone), it's current modification will be much more universal, than the one with an RS-232 jack on the end. OTOH, it might be interesting to find out "how it works"... :)

Btw, the guide you mentioned is too hard smiley for :ken: to read. :) It should have been QP-decoded before posting to the net... So, I haven't taken much of a look into it.


Roger - 03.11.05 2:32 am

RQ,

About my comment of 18.09.05 11:58 pm
In that text I shared complete, correct and simplified information about the parallel cable. One should not need any extra info for assembling a perfectly working parallel cable. I'll never know how many other people have ever read those guidelines and taken benefit from them... maybe, for some people, they may have been a real solution, actually. Sorry, I should have taken into account that, given your knowledge on this matter, my "manual" would be just "a bit helpful".

About your console port
Your access to the console did not work because the cables you used have wrong pinout (unless your modem has a HW defect). This is so easy to correct that I will not bore you with any further explanation.

About the Italian guide to recover using the console
The page for which I provided the link, covers a situation where the owner of the modem does not have a parallel cable but does have a serial cable and a console port on the modem. Thus its importance. This was your "status" at that point and the "serial access and short-circuit pins" approach would be a perfectly adequate solution. OTOH, just as I said before, if a parallel cable was available, one should forget about this method.

I don't know what is QP-decode, but that page opens very well here, no problems. You must have noticed that it was not written by me, of course. It is a (very good) contribution shared by someone in Italy, I guess, and the author even warns about his English. However, I've had no problems to fully understand the information and there was good information there. Sorry for leading you to a "too hard to read" page.


Bicéphale - 03.11.05 3:47 am

Hi again,

My "interleaved" string will be removed on reboot:

create atm port enable ifname atm-0 maxvc 8 interleaved oamsrc 0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

I wish to force the MoDem to negociate interleaved
mode instead of fast but i just can't do it right!

Can it be done at all?  Has anyone done it before?




Bicéphale - 05.11.05 1:24 am

Hi,

Has this ever failed for anyone here (when applicable):


Recovering from a failed firmware upgrade





RQ - 05.11.05 11:40 am

Hey, Roger, don't overestimate me. It's just that I prefer googling before anything else, and Google brought me to that page in Portuguesse (which actually tells exactly the same that your manual does). And because it contained images (the same as yours, with chinese comments ;)) of the pinout, and mentioned loadfi.exe, I didn't need anything else. I didn't even need to understand Portuguese (or whatever that language actually is). :) However, your manual mentioned real mode DOS, and added that info to my knowledge, hence, it was "a bit helpful". I'm not saying the manual is bad, i'm just saying that i had already read all that before. Btw, I referreed to your manual when checking whether the cable I made was correct (before testing the wires).

About my console port. Well, the cable that I borrowed didn't help me, so you're right - it had wrong pinout. But I didn't feel like redoing it, and furthermore, I couldn't find ANY info on how to make that serial cable, so I just decided to "go parallel", as I already had information on assembling the parallel cable. Plus, the parallel cable is more universal than the serial one.

I've checked the Italian manual now. First note, it also doesn't mention how to make the cable, and second, it mentions JP1 pingroup, and I don't think I have this on my modem. I think there's only JP2 (the one to which parallel cable can be connected) on it.

QP means quoted-printable. after QP-decoding that message, the "=3D", and "=20" stuff would be gone, or replaced by real symbols. :)

Now a few words about the Siemens thing. I'm not sure you have its TEImage.bin. If you don't, I could send it to you, or to Cor. Because TEPatch.bin isn't much usable just by itself...

Bicéphale, I think that manual works, but you must have a working serial cable first. :)
Furthermore, even without it, I tried uploading my TEImage to 192.168.0.1, 192.168.1.1 and 192.168.7.1 with no success. I guess in my case the modem wouldn't boot that far... :)


Bicéphale - 05.11.05 9:58 pm

Hi,

RQ> I tried uploading my TEImage to 192.168.0.1,
RQ> 192.168.1.1 and 192.168.7.1 with no success.


On my GNet device, the TFTP address is 192.168.1.1
if rebooted with the "Clean" or "Minimum" .CFG, as
i recall, but i'm not really certain which though.


RQ> I guess in my case the modem wouldn't boot
RQ> that far...


That's precisely the question i should have asked.

Does the MoDem/Router always boot far enough for a
TFTP UpLoad to work?  It sounds like an assumption
that it won't would be safer and hence the need to
have a rescue kit handy!  Thank you for the input,
i'm not adventurous to test it myself, i'll admit!


smiley for :lol:


RQ - 09.11.05 10:10 am

Bicéphale > Does the MoDem/Router always boot far enough for a
TFTP UpLoad to work?


Well, if I understand it correctly from the Roger's link, it may boot far enough in most cases, but the user might need to interfere boot process (by shortening a jumper, for example). So the answer is probably NO...


Bicéphale - 10.11.05 2:52 am

Hi,

Bi> Does the MoDem/Router always boot far enough
Bi> for a TFTP UpLoad to work?
RQ> ...it may boot far enough in most cases, but
RQ> the user might need to interfere boot process
RQ> (by shortening a jumper, for example).

Ha yes, i see.  But then are you aware of an event
where you or someone else happened to be unable to
perform the overall procedure to recover from some
flash accident without using the parallel adaptor?

I read you experiment with different FirmWares so,
you must be in an ideal position to know about it!

;^)

I thought i'd be able to get acquainted with other
knowledgeable users elsewhere but i don't have too
much success.  No later than today, i received the
private messages from five different officials who
rule the BroadBand Reports site (Big Greg, Justin,
McGyver, Fatness and TmpChaos).  The fist was most
agressive and asked me not to mention CLIs anymore
(he argued the posts were ravings in his Broadband
Modem Hardware forum)!  All requests to be refered
to a proper forum for CLI discussions got deleted,
which means that practically no user will be aware
that i'm after this information (Justin thinks Big
Greg is right and he sent no forum suggetion).  As
for the others, TmpChaos replied he would pass the
request to a guy who might be able to assist while
McGyver left the title of the locked topic on-line
(no content);  Fatness was the most silent of all.

Maybe you know these names if you're familiar with
BBR but that's not what i'm trying to explain.  My
point is that a wall was raised after technologies
like CLIs, RS-232 Serial-Ports, TelNet, etc., were
mentioned - when and where it seemed suitable!  Of
course, no appeal is possible and i don't expect a
satisfying answer in the foreseable future...  Put
shortly, CLI matters are " sexy " for some of us but
" non-sexy " to others, i guess those who don't have
a use for it or who can't exploit it don't like it
neither - i wonder if moderators can be like that?

smiley for :roll:

Anyway, Cor's site appears to be the best place so
far but i'm still seeking CLI amateurs so, please,
let me know if you hear of other welcoming groups!

Featured tools are one thing, i also looked for an
ideal MoDem/Router so i'd love to read from anyone
with devices like the ZyXEL Prestige 662HW or even
better:  this one offers a standard RS-232 Serial-
Port and a CLI to go with it but no Business-Class
product seems to use " Dual Flash Banks " to improve
the FirmWare UpGrade sturdiness until now...  Your
input, and that from others, would be appreciated!

Ever heard of some "Dual Flash Banks" structure as
in Cisco's products?  I see mentions of it at some
times but i must admit i didn't search much yet...

smiley for :D


Bicéphale - 11.11.05 12:28 pm

Hi,

I know this certainly won't seem on-topic but i'll
need assistance with my Main Page (Home) Menu code
in order to continue the GNet BB0060B simulator...

I don't know what's keeping those cells appart!  I
should obtain a continuous menu bar and i don't...

smiley for :roll:



Roger - 14.11.05 5:07 am

RQ,
OK, all understood. I have just a few comments:
RQ wrote:
I didn't even need to understand Portuguese (or whatever that language actually is).
Yes, it is brazilian portuguese.
RQ wrote:
Plus, the parallel cable is more universal than the serial one.
I agree; you can use it under any circunstances. It is very safe.
RQ wrote:
... and second, it mentions JP1 pingroup, and I don't think I have this on my modem. I think there's only JP2 (the one to which parallel cable can be connected) on it.
This is because you're lucky and already have a serial port. The second pin header is only available when the manufacturer saves a few cents and does not provide the LVTTL-to-CMOS voltage adapter interface and the corresponding DB9 serial connector. Instead, the manufacturer installs a 5-pin header inside the modem (which would be the second one) and leaves to the customer the burden of assembling the needed interface.
RQ wrote:
Now a few words about the Siemens thing. I'm not sure you have its TEImage.bin. If you don't, I could send it to you, or to Cor.
OK, you may send it to Cor, or give me an url where to dload it.
RQ wrote:
Because TEPatch.bin isn't much usable just by itself...
You're right. The most common beginner's error is to use a TEPatch.bin which was not specifically written for the firmware and version he may have in his modem. Hundreds (perhaps much more) have done it and made their modems useless.


Roberto - 24.11.05 5:02 pm

Hello, and sorry for my english.
I've read your posts about the Viking series and I've some questions:

1- I've a Telit AR520 router, based on Viking II chipset; I've opened the router and I've found the following chips:
GS8120-174-008D
GS3780-174-001Z
16Mbit Atmel Flash
8MB SDRAM Cache
Hardware Version 810020
Software Version (firmware) 2.1.040407a3_u_e5_A
Do you know if exists a newest firmware?

2- Do you know if on my router I can put a generic Viking II firmware?

3- Exist a oftware to backup the original firmware BEFORE upgrade it?

4- The original manufacturer of my router seems to be the Castlenet company http://www.castlenet.com.tw because they've a router that IS EXACTLY like mine. I MUST to upgrade my router ONLY with original castlenet FW?

Thanx and sorry again for my english.

P.S.:
I can't use your "secret page selectors" because I've changed the default LAN addresses: do you can modify your sources to make it possible to change the IP manually BEFORE select the GO button? I can't redefine my entire network.



Bicéphale - 25.11.05 7:50 pm

Hi Roberto,

I don't know if you can use foreign FirmWares, i'm
not even sure i have this option myself...  As for
saving yours, that might depend:  were you able to
see a maintenance connector when you looked inside
and does the MoDem have a ready-built serial-port?

If you replied yes to both of my questions and the
device is LoadFi-compatible (CastleNet's AR502 was
said to be, after all), then you'll find that item
#4 clearly states you can read/save a flash image.

LoadFi is part of an emergency maintenance kit, it
requires a custom connector to fit.  Relatively to
the FirmWare version and chips, here's what i got:

   Brand & Model:  GNet (GenTek) BB0060B
HardWare version:  810020
FirmWare version:  VIK-2.1.050224a1gen
    CPU/DMT Chip:  Connexant GS8120-174-008D B0 0432 Singapore FG1843.1-B0
        AFE Chip:  Connexant GS3780-174-001Z 0434 Singapore E1CNK.1-C0
      FLASH Chip:  Atmel AT45DB161B TC 0426 GSV-Viking
      SDRAM Chip:  Samsung 443 K4S641632H-TC75 S6416 ZHT503HIC

This makes both products relatively closer than if
i had got an Opticom DSLink 220E were the AFE chip
may show a "GS3771-174-001H" marking, for example.

Should you have basic technical skills, you may be
interrested to read further about using LoadFi and
its custom cable .  I wish you have a nice reading!

smiley for :lol:



cor - 25.11.05 8:05 pm

Good answer Bicéphale!

Every time I drop in here I start thinking we gotta distil some of the amazing information here into some kind of "easy guide to upgrading your firmware", but that looks like a scary big job, anyone? smiley for :eek:

By the way, Roberto, the page-selectors are available as php source, so you can edit the IP of your machine in one place only, run them from any php web server. Or simply download the generated page to your hard drive and do a find/replace in the html.

And Bicéphale, your "Main Page (Home) Menu code" looks fine in Firefox and Opera, the menu items are smartly next to each other without gaps. You weren't using Internet Explorer, were you? smiley for :D

;o)


Bicéphale - 26.11.05 1:14 am

Hi Cor,

Co> Good answer...  ...we gotta distil some of the
Co> amazing information here into some kind of
Co> "easy guide to upgrading your firmware", but
Co> that looks like a scary big job, anyone?

Thanks and yes, intimidating indeed!   A challenge
as global as yours sounds like a problem which may
be easier to solve once it's been broken into many
smaller chunks that one deals with previously.  It
isn't so difficult to imagine starting from a time
when a user opens the box, to some final step when
he ends up managing security items...  Scary, yes!


smiley for :roll:

Co> ...your "Main Page (Home) Menu code" looks
Co> fine in Firefox and Opera...  ...without gaps.

Right, it's promissing.  I'm about settled with my
switch to Ultra (roughly 4.7 Mbps tops), i believe
my connection is now stable and i need to plan the
move from my DialUp ISP to that one when i know it
is reliable...  I fixed OffLine Explorer, at last;
i started to take over a new routine again, etc...

My solution may work but i still don't get a clear
idea of what my next task should be:  i changed of
ISP so the capture is no longer valid;  i have the
structure from OffLine Explorer but each page must
be transposed individually because the job done by
OffLine Explorer didn't allow me to find sensitive
information which had to be removed.  I'd probably
use the HAG (Help And Graphics) directory revealed
by OffLine Explorer to put order into the mess but
Mozilla would be the capture tool and that means i
must recombine four pages into a single one, while
i keep an eye on my relative directory stucture in
order to reduce redundant data to a minimum...  As
you may have noticed, i worked slowly but i try to
organize my thoughts into one suitable methodology
so that i save time later by avoiding bad choices.

smiley for :eek:

Co> You weren't using Internet Explorer, were you?

How did you know?!!  Well, that's true:  perhaps i
should but i'm in no hurry...  Lynx was relatively
OKay with this simulator so, if it works, then the
decision to reduce fluffy code sounds justifyable.

smiley for :D

I still see elements i should try to make optional
if i can.  Hummm...  Maybe a bit of music combined
with just the right sort of ChristMass abuse would
get me back to shape (i became a bit lazy lately)!

Your project about a FirmWare upgrading guide just
seems right as i don't find much related help from
any other site i visited.  Make it your tradeMark!

smiley for :cool:



Alex(moose) - 28.11.05 3:26 pm

Hi all new here so be kind... I have some background with computer programming mainly in dos, just a quick back ground... I have went and bought a gnet adsl bb0060 modem and cant figure out how to reset it i have tried all the basics and cant get it to take anything i was wondering if any of you wonderful people could help me with a flash or something to reset it.
Thanks
Moose...


Bicéphale - 29.11.05 1:44 pm

Hi,

Al> ...can't figure out how to reset it...

I'm nothing close to "wonderful" but i have a GNet
myself.  I'm trying to understand what you mean so
pardon me if i must ask...  Do you use the serial-
port for management?  Did you try to flash it?  If
so, did you try a previous (DownGrade) version?...


smiley for :ken:


bunnyboiler - 02.12.05 1:09 am

cor, i need help (bah, i tried man i tried)

i have a voyager 205 which works gr8 with my dual boot xp / fc4 desktop ... i even tweek it thanks to your gr8 site :-D

so i have 2 more computers in the house and i want them on the network, and i have a 'safecom' 4 port cable/dsl router ... so you get the scenario

the two routers are linked by a crossover cable, the 205 is plugged into the wall and put into zipb mode, the safecom is reset and THE BEST result i achieve is NO internet connection BUT Skype connects!!!! Skype is that IMS internet phone program and i was able to talk to a friend whilst having no internet .... ?!?!?

i tried many other configs and combinations before i admitted i needed help

PLEASE if you have a guide for hanging a regular 4 port router off a 205 then i will gratefully press your paypal button (really)



cor - 02.12.05 2:33 pm

Thanks Bicéphale! Food for thought! Sounds like a project for the new year, perhaps we can all collaborate on the "chunks". smiley for :ken:

As to your HTML, have you tried Teleport Pro? I've had great success with it, sucking whole sites (observing the proper rules of netiquette, of course) in their entirity. The interface is highly intuitive, and all-in-all, I seem to get to the "GO!" stage a lot sooner than I used to with Offline Explorer, and the results are better, too.

Perhaps even sucking with multiple spiders and combining the results when needed. Try Teleport first, though. For feeling a bit lazy I recommend all Shpongle's albums in a loop, really loud. Does the trick for me! smiley for :D

Alex(moose), doesn't it have a recessed button of some sort, paper-clip job, no?

bunnyboiler, my first thought is "just use the safecom". Have you tried that? It should be easy enough to get it to play ball with BT.

Then I wonder about the crossover cable. As far as I know the 205 should auto-sense that and flip it back, but perhaps that's my switch doing that.

Do you have a switch? Voyager > Switch > many puters works very well. The more "intelligent" the switching device (routing, NAT, etc) the trickier things become.

You say skype connects but no internet, but do you really mean no web? What about other services? Try FTPing an IP, or PING 72.14.207.99 (google). Perhaps there's a DNS issue and raw addressing is working fine, but named addressing, not. The advanced troubleshooter in the voyager web interface is rather good for revealing these kinds of troubles.

Keep the voyager in Zipb mode and try connecting it directly to the peecee and see if it works okay. Then add the safecom unit bewtween them. Switch off the firewall features on the safecom. Switch off *everything* on it, in fact, and add features gradually and individually.

What I'm saying, I guess, is that it could be anything! smiley for :lol:

for now..

;o)


BunnyBoiler - 02.12.05 3:02 pm

thanks for the reply Cor

i will try with the safecom alone (but my understanding which is wrong and contradicted by your suggestion is that there is a modem inside the 205 which is in addition to what you get in a router) i will still try

the safecom is a bog standard 4 port cable/dsl router with routing nat etc

skype worked AND yes i pinged google and it worked so thanks for confirming that raw addressing is working and so it must be a dns issue ... am i correct that first dns is the gateway 192.168.1.1 ? this also tells us that the crossover cable is working

unfortunately i havent been able to access the voyager, the safecom is taking the address 192.168.1.1

and thanks for confirming that my first idea was correct - 205 in zipb and safecom doing the routing

another question, with 205 in zipb connected to the safecom i originally had DHCP turned ON on both ... i am now guessing DNS and DHCP is OFF on the 205 and ON for the safecom?

thanks for the time Cor


cor - 02.12.05 4:00 pm

Ahh yes BunnyBoiler, my most valuable resource!

If you tell me exactly what model of safecom it is, I could tell you if using it alone is doable. Certainly their newer routers have all the DSL bits (modem) in them, too. Worth a shot.

If not, then assign it a different IP address than 192.168.1.1, you have enough troubles without the two units fighting over who gets the top spot.

The DHCP server will need to be enabled on the Voyager, and the Safecom (or whatever's connected to the voyager) will need to have its DHCP client enabled. The Voyager will use its DHCP client to get the IP address, and the next device uses the same mechanism to get the address from the voyager.

As to DNS server, I haven't tested this, but I imagine it would be better to disable the DNS on the router and insert the addresses of a couple of actual BT nameservers into your puters, though the DNS relay should work just fine in zipb mode, too.

for now..

;o)


BunnyBoiler - 02.12.05 8:03 pm

i can confirm it is a DNS problem ... but i cant find the dns server addresses for BT :-( ... so in frustration i called BT and complained that they miss-sold me a product 'cos i cant connect my 3 computers, and they are now sending me a 2100 free of charge,

i feel guilty cos i took the easy way out, but hey, i can now sell my 205 on eBay (just have to remove the cooling towers and find the top of the case)

btw that paypal £5 was from me ;-) thanks


Cipher - 03.12.05 1:07 am

Anyone know how to make the remote management port (80) open through telnet?
Thanks


cor - 03.12.05 4:50 am

hahah nice one BunnyBoiler! I don't know much about the 2100, it's pretty new, but I do know it'll perform the job of both those devices by itself. The unit has a great list of features, well, apart from the "BT quality and reliability". smiley for :lol:

There are loads of ways to find out the IP of BT's name servers, but often some trial and error is involved in finding one that works really well. The two plusnet servers on the main page (212.159.11.150 and 212.159.13.150) should work well, though.

Cipher, you mean the web interface? Ouside access can be enabled thus..
modify mctl access httpwanaccess enable
for now..

;o)


Giorgio - 04.12.05 1:56 am

I fu**ed up my Ericsson HM210dp firmware, folks!!!
Beware the "reset to a clean version" command in the "reset" tag of the Viking firmware...
This modem seemsto be a GlobespanVirata "TITANIUM" model.
Pls, anyone knows a way to restore a working version of the firmware?
My PC doesn't detect the modem now...
What can I do? smiley for :blank:


RQ - 06.12.05 12:40 pm

Hi everyone,

long time no see. I haven't read all the comments I missed, but i'll read them in the evening maybe.

I haven't yet switched to Radio internet, so I still have my Intracom. Instead, I've switched from OS X to Linux. :) Bicéphale, If you want, I can quickly download you all the main pages of my router (wget rocks!). So you can just copy-paste the code to your emulator. However, If you would be making an alternative configurator instead of the emulator, I'd suggest that you use nicer and mode w3c-compliant design and code. More CSS, less semantically incorrect tables. ;)


Bicéphale - 08.12.05 5:50 pm

Hi Cor,
Hi Cipher,
Hi RQ,


Co> ...perhaps we can all collaborate...

It seems like i was away for too long.  Well, I'll
happily join any wider project if it suits better!

Thanks for suggesting Teleport Pro and Shpongle, a
scan makes my GNet BB0060B MoDem non-responding if
i use OffLine Explorer Pro/Enterprise, actually...

I'll still need to replace scripts with basic HTTP
code, unless i'm wrong...  How do you conceive the
organization of this project?  I'll do what i can.


RQ> ...I'd suggest that you use nicer and mode
RQ> w3c-compliant design and code.  More CSS,
RQ> less semantically incorrect tables.


Do you happen to favour the use of CSS extensions?

I must evaluate Teleport Pro and Shpongle further.

I thought the simpler meant the better so i wanted
to find out how i can take these CSS files away...


Ci> Anyone know how to make the remote management
Ci> port (80) open through telnet?


Won't telnet://192.128.7.1 work the way it should?

Let see this puzzling matter, if i'm not too late:

Admin

Management Control

HTTP WANAccess [x]
TelNet [x]

Admin

Port Settings

HTTP Port (23 or leave as 80 by default)

Opening some HTTP (80) Remote Management port thru
TelNet wouldn't make more sense than to connect to
a regular HTTP Server using the TelNet Protocol on
TCP/IP port 80:  Web pages seem very hard to read!

If you mean displace the Router's HTTP server to a
different TCP/IP port as 23 then it's not the same
thing to TelNet on TCP/IP 80 to reach the Router's
HTTP server.  You'd better try be more specific...




Leandro - 14.12.05 5:51 am

Hello i have a sar130 modem/router, it is set to "modem" by my isp, but i would like to enable nat functions to use it as a router, they refuse to configure it that way or give me the login/password, So i wonder if there's any way to reset the password or something, or leave to it to defafaults setting,
Thanks in advance


Bicéphale - 15.12.05 10:09 pm

Hi,

Le> ...i wonder if there's any way to reset the
Le> password or something...


I got a GNet BB0060B, it distributes my connection
via a switch; its Serial Console Port allows out-
of-band management and no password is required for
access to this interface. I can't tell if you got
a serial-port built-in (and much less if it's been
PassWord protected) but i don't see how the MoDem/
Router PassWord can be read-back anyway. Once you
have access using an RS-232 connection though, i'd
suggest you try to create a 2nd user entry with an
equivalent privilege-level. Of course, if the ISP
decided not to let you manage their device then my
question will be this: what about using your own?




Bicéphale - 15.12.05 11:01 pm

Hi again,

Bi> ...i don't see how the MoDem/Router
Bi> PassWord can be read-back anyway.


I'm having 2nd thoughts, perhaps one can read-back
the device's PassWord using the brute-force LoadFi
tool but it requires knowledge of the file system,
etc. Having two PassWord entries would let an ISP
manage the device, possibly without noticing a 2nd
entry as long as they won't look for one, that is.

You're aware the 1st page reveals the mode, right?




RQ - 17.12.05 10:44 am

Bicéphale, CSS is not an "extension". Of course, you can leave it at invalid HTML3.2 (or whatever the version), but well... We're in the 21st century, where all modern browsers support CSS which is, by the way, the recomendation of W3 consortium. HTML is meant to be used for semantic markup, not for design. People should understand it.

When used correctly, clean (X)HTML and CSS only adds value to the webside, because:
  • user has to download less data (you may share single style describtion among all the files of the website);
  • for owner, it's easier to redesign the site - you only have to change the CSS file, instead of changing <font color="foo"> to <font color="bar"> in every single file ;)
  • The site becomes more accessible, when you use semantical markup - i.e., you use tables to represent tabular data, not to create a design, you use lists instead of the JavaScript to create menus, you use classes and ID's to define how things look, instead of defining them again and again for every element.

Check the website i'm working on (sorry, it's missing a few images in English version - we had an attack on our server last week). Visit it with Opera or Firefox and disable styles. Or visit it with Lynx or Links text-mode browsers. See? It still looks readable and makes sense. Would you say the same about the web interface of your router? :)


Watermelon - 20.12.05 6:00 pm

OK, any help with this problem would be appreciated. ANYTHING!!!!!!

My setup is as follows:

Voyager 205 in ZIPB mode, bridging enabled on eth-0
IP 192.168.1.1
DHCP server ON (192.168.1.3 - 10)(This is only for when ADSL is down)

Netgear WPN824 NAT Router with switch (wireless OFF for now)
IP 10.0.0.1
DHCP server ON (10.0.0.2 - 20) This is for my LAN
Firewall OFF

Here's the strange bit- If I connect the Voyager directly to my NIC with Windows XP Pro, I have no problems, my public IP is forwarded straight through, and I'm connected (with no NAT!! Ooooooh.)
NOT THE CASE when I introduce the new-fangled Netgear router. The WPN824 has 1 WAN port, and 4 LAN ports separated by it's own NAT firewall which I'd like to make use of (nice though the voyager is!).

When I plug the voyager into the Netgear's WAN port, it grabs the DHCP data, in fact it even displays it on the web config page.

So my WAN port IS connected!!! There's just no way of accessing it through the router it seems. I've made sure there's no hidden firewall settings anywhere, but to no avail. I suspect this is a routing issue which may be slightly beyond me???

Cheers guys,

and great site btw Cor


JonT - 23.12.05 12:47 pm

hey gr8 site!

im having a few problems with my voyager205!

i want to use it on ethernet, but no matter how i connect it, it wont do anything!

i connect it using a crossover cable direct to my nic and it does nothing (no light or anything), i connect it to a 4 port hub with a patch cable and it does nothing (again no light), i connect it via usb and it works!

am i being really dense or is something wrong with it!

please help, im about ready to lob it out my window!smiley for :eek:


cor - 23.12.05 1:38 pm

Watermelon, we did you on the main page methinks.

JonT, yup, it sounds like it's broken. If you have tried both cables in all four combinations and the ethernet light doesn't even come on, then yup, I'd say it's broken.

Here's what you do, two things. 1) phone BT and tell them it's broken and the lights don't come on any more. They'll send a replacement.

2) lob that thing to me! (the apaptor, too!) cheapest possible snail mail smiley for :D

Bicéphale, Thanks! I've got some Flashing adventures for you regulars, and a totally dead 205 into the bargain. I can now apprciate that your cautious approach is well suited to this side of Viking tech! smiley for :ken:

But that'll have to wait, too much Yule going on here just now to get it all down logically.

Merry Christmas all!

;o)


Foxabilo - 27.12.05 12:19 am

Happy jebus day all

Long story short,
205 given by Bt to fix a problem that they had no idea how to fix namly some what can best be described as internet consitpation, ever since the "big outage" a while ago my connection has had login issues for one and then just pauses where all internet activity seems to stop for 5 mins or so then return just as radomly seems to be when I have torrents running (linux iso's only *ehem* honest) I have upped my connection to 512 I have tried running it in mystic magical modem only mode, putting the voyager 100 back on running the 205 in USB and nic resetting it updating the firmware to 1.8 wiping my disk and re-installing with a clean xp sp2 but I still get these constipated moments where my connection does othing Bt have found no issue with my line and the torrent level I am running if anything is less than I did pre network outage so I am somwhat at a loss, anyone of you chap/s/ess find any of that familar ? If so a nice "press Cntrl+K 3 times" would be loverly :) but I think It might be a little more involved than that


Bicéphale - 27.12.05 8:55 am

Hi,

RQ> ...CSS is not an "extension".  We're in the 21st century...

With TelNet as an alternative, i wouldn't plan for
modifications even if i favour universality at the
cost of using LEGACY technologies but the issue is
sensitive data from the OffLine Explorer captures,
anyway:  searching for my User-ID/PassWord, my MAC
address, etc. in order to mask them means too much
trouble already and it doesn't help that the MoDem
should be rebooted after some scans.  The TelePort
capture might have worked better, if only it saved
the whole file-structure to disk instead of simply
showing it, euh...  TelePort Pro creates tiny .TPP
project files and the Ultra version has .TPU ones,
perhaps the next step should be to handle TelePort
before anything else?  I welcome your suggestions.

smiley for :D

RQ> Check the website i'm working on...  ...visit
RQ> it with Lynx or Links text-mode browsers.

That's a really nice effort toward universality, i
certainly appreciate it but lets keep in mind that
each Web page comes from the MoDem/Router, not me,
ideally...  I'll be most satisfied if all browsers
can read it correctly, if i can mask private parts
and if it works without any further modifications!

Co> Thanks! I've got some Flashing adventures for
Co> you regulars, and a totally dead 205 into the
Co> bargain.  I can now appreciate that your
Co> cautious approach is well suited...

I'm very sorry if this venture caused you any loss
but the manufacturers often warn the owner against
flashing their products and using CLIs.  This is a
mystery to me how logical errors will damage MoDem
HardWare, i can't afford to loose the MoDem/Router
myself so i do handle it with care (not to mention
that this one had to be replaced after my flashing
procedure failed here too)!  An on-line simulation
coupled to its corresponding configuration-file is
one way to get acquainted with all the terminology
before there's a real opportunity for incidents to
happen, the need to re-configure can be dealt with
less exploration required:  edit `commitedcfg.cfg'
to suit your situation relatively to your ISP then
tweak the rest via the GUI if you must.  Shouldn't
every single manufacturer offer a training tool as
it just may reduce service calls or boost customer
curiosity?...  Quite frankly, i'm very disapointed
at large corporations with cheap business manners.

Co> ...that'll have to wait, too much Yule going
Co> on here just now to get it all down logically.

I still have work done on the main page where i've
placed my GNet Simulator Project and Photo-Section
links together...  My SogeTel-hosted pages are due
to disapear shortly and my /Sympatico/ launch-page
with it;  your /GNet BB0060B close-up/ index would
fit beatifully at the top of this revised version,
i regret the timing is wrong but i'll keep reading
hoping for a .TPP/.TPU file, etc.  Happy new year!

smiley for :ken:


P.S.:  TelePort says the "nucleus" is "Nucleus/4.3
        UPnP/1.0 Virata-EmWeb/ R 6_2_0" - Red-Hat v6?

smiley for :cool:


RichE - 11.01.06 7:50 pm

Nice updated site Cor, been abit busy of late doing work proects, but have time to finally finish the TB config tool i started.

oh and BTW Happy new year.



Jocelho - 13.01.06 2:08 pm

Pleasse! I lost the password... my modem/router is D´link 502g



cor - 14.01.06 11:53 am

Jocelho, pass! Have you tried admin/admin ? (the voyager default) or else perhaps your manual. DLink surely have a page for it.

/me googles: Dlink 502g admin password

first hit, it's.. admin / [blank]
Tada! smiley for :roll:

Cheers RichE! It's coming along slowly, higgeldy-piggeldy when I get the time; my usual working style! smiley for :lol: Looking forward to your finished version, be sure and post a nice (PR-giving) link right here!

Bicéphale! You are having fun! smiley for :lol: Firstly, tepeport pro DOES save the whole thing, at least my version does. The .tpp file is just its own database/index file, but all your router pages should be there too. Isn't there a similarly named folder right next to the .tpp file?

Any decent text editor should be able to search (and in UltraEdit's case, replace) any sensitive information contained within the files in one fell swoop. Check that out. There are many other text find/replace tools available, too. I'm rather fond of sed for these things.
Bicéphale said..:
Quite frankly, i'm very disapointed at large corporations with cheap business manners
I know exaclty what you mean! And my outbox sees something along these lines at least once a week. My current pet-hate is big organisations who send email replies with a) different subject lines, and b) you original mail removed. *grrr*. Yes, of course they should release tools for their devices, but probably they don't care much for portability and longevity, instead preferring to sell us the "next device" a year or two down the line. *grrr*X2.

Shame about your hosting, but I've managed to clear the deck a bit here (hence the site updating, at last) so if you like, I can get your updated version up here at the org sometime soon, and your simulator too, if you like. Those pages you linked to look fine, shall I just grab the HTML from there, and drop it into place?

I'll be back sometime this weekend (hopefully) with the gory details of my firmware flashing adventures, currently just a mess of notes.

Foxabilo, use ethernet only, and try one of the ready-made script from the archive, work from there.

By the way, I've fixed the weird bug in my comments script and I should *hopefully* now get notified of new posts on this page. smiley for :roll:

;o)

ps.. RQ, come on man, I'm waiting for you to tear apart my lovely compliant xhtml/css design! Do your worst! smiley for :lol:

pps.. lower case for the bbcode, dudes!


Bicéphale - 14.01.06 9:03 pm

Hi,

Co> You are having fun!  Isn't there a similarly
Co> named folder right next to the .tpp file?


I'm afraid that the default options didn't work!!!

No joke, honest:  it only shows the file structure
and i can't even keep my FileNames tree...  hence,
the mention that a .TPP/.TPU file just might help.


Co> Any decent text editor should be able to...

Oh yes, i could have used some time for this but a
capture from OffLine Explorer generates extension-
less files - which is a bad start in my opinion...

smiley for :geek:

Configuration settings appear to prevent DownLoads
at the moment but TelePort still seems promissing;
i'll limit modifications of the GUI to essentials.


Bi> ...corporations with cheap business manners...
Co> ...they don't care much for portability and
Co> longevity, instead preferring to sell us the
Co> "next device" a year or two down the line.


I concur, product longevity is considered counter-
productive if we can judge from what the market is
offering!  The FLASH-based products should be made
fool-proof by exploiting connectivity that already
exists in the form of USB/RS-232 ports if a device
can't be properly hardened against FLASH failures.

Customers thriving on illimited budgets may not be
worried at all to learn that manufacturers dare to
play Russian Roulette indefinitely, i'm not one of
them and i'm most puzzled to find that the average
customer tolerates it when the only alternative is
to spend money over back and forth transportation,
service fees or even a brand new unit sometimes!!!

smiley for :erm:

Imagine a product which supports USB Storage Keys:
who wouldn't spend 40 $ on one if the MoDem/Router
will copy its FirmWare from it or run it directly?


smiley for :idea:

Co> Shame about your hosting...  I can get your
Co> updated version up here...  and your simulator
Co> too, if you like.  ...shall I just grab the
Co> HTML from there, and drop it into place?


My illustrated description of the maintenance port
is a drop-in replacement which you'd cut and paste
in order to remain coherent with the page header &
scripting.  I'm unable to sort out the scripts and
it's not clear what you'd like better but i should
be able to submit drop-in updates after you made a
first sample available.  I still favour linking to
your future simulator page as there *will* be one.

With TelePort Pro handy, you can as well capture a
simulator of your own 205 in the meantime, anyway!

In any case, i still have a few hundred Mega-Bytes
of photographs on disk...  More information can be
gathered from it but i'm begining to think there's
been little incentive so far and i'm on a learning
curve with DSL HardWare - and my project is young.


Co> I'll be back sometime this weekend (hopefully)
Co> with the gory details of my firmware flashing
Co> adventures, currently just a mess of notes.


I had gory adventures for Christmass too but i can
not tell here!  I'd be angry myself should i waste
money unexpectantly like you did so i'd understand
if you decide it's become too expensive a venture;
the manufacturers themselves (D-Link excepted) are
quite lazy about it and yet they're getting money.

smiley for :roll:

I'm thinking simulators should ignite curiosity in
the long run but it won't happen if nothing exists
which users can find and explore.  I'm hoping that
the TelePort configuration issue can be sorted out
soon, or maybe a better suited tool will be found?

Consider pointing visitor at TelePort so that they
are invited to submit their GUIs for a collection,
with some .TPP or .TPU file available if required!

Long-term view:  if i can, i expect others do too.


smiley for :geek:



cor - 15.01.06 9:40 am

To be perfectly honest, I'm still fairly smashed from last night; a surprise rare let-my-hair-down celebration with a good friend, so this might not go exactly to plan, I offer by way of potential excuse.

But here goes..

I woke early this morning, creeped through to the workshop, got my mail, and voila! a comment on the advanced pages, so that fix worked, good. Bicéphale, you are an inspiration! I set Teleport Pro's hammer on way low, 5 seconds, and screen captured the whole thing.

Start your adventure here.

I haven't bothered to remove any potentially sensitive data or anything like that. Even the five second hammer proved too much for the nucleus web server, so 99% of the files were grabbed at my old IP, not that it takes much to get my IP at any time, this place is LIVE and public! smiley for :ken:

I can't even think straight* today, so I will value feedback much more than my own opinion! Time to take Karma to the river, I think.

Have fun!

;o)

ps.. it didn't work at first, just raw text, then I realised I'd need to have all the files parsed as html, head-fuck! Then I remembered my devblog entry about setting up for phpsuexec and added a file handler for all files (so already that has proved to be a useful resource!) though the capture may still bork out somewhere and if it does, let me know and I'll probably fix it tomorrow.

pps.. the chances of me getting that mess of notes into the presentable gory details of my firmware flashing adventures have slipped to "very slim". smiley for :ken:

ppps.. please google: scanoramic smiley for :eek:

references:
alcohol is a poison kids, but remember, even the most riotously drunk state - so drunk you completely forget who and where you are - WILL NOT KILL YOUR BRAIN CELLS, it will only stun them. It takes around one full moon cycle to heal these cells, quicker if you eat super-foods and excercise daily.

But

And this is so important I should use a header tag, IF you suffer alcohol poisoning - and that's pretty much anything over one unit sipped very slowly - at any time within that lunar cycle (say, 28 days) you will kill those cells. Everything in moderation, see.



Bicéphale - 15.01.06 5:36 pm

Hi Cor,

Co> Bicéphale, you are an inspiration!

As a French-Canadian, there are times when it have
difficulties gathering English intent & humour but
i saw your TelePort page and i infer this is good.

A proper comment for me to make would be:  thanks!

smiley for :D

I'm afraid Christmass was hardly traditional-style
for me as well but i'm still able to notice/retain
key words which i should focus on and deceipher...


smiley for :cool:

Co> I set Teleport Pro's hammer on way low...
Co> ...too much for the nucleus web server...


You seem to be explaining a phenomenon which i had
observed with OffLine Explorer:  it seems to knock
down the HTTP server by overload.  Perhaps there's
a setting somewhere to tame down my DownLoad rate.


smiley for :idea:

Co> ...didn't work at first, just raw text, then I
Co> realised I'd need to have all the files parsed
Co> as html...  ...already that has proved to be a
Co> useful resource!  ...capture may still bork...
Co> ...let me know and I'll probably fix it...


"Useful resource" sounds good, my understanding is
that progress was made so i couldn't wait to check
the "The Viking Voyager 205 GUI Simulator" but the
result appears radically different, unfortunately:


http://corz.org/public/docs/comms/router/GUI%20Suck/Voyager%20205/:
Parse error: parse error, unexpected T_STRING in /home/corzorg/public_html/public/docs/comms/router/GUI Suck/Voyager 205/index.html on line 1

Right now it's my stomach which controls me so i'd
better post what i wrote you so far.  I'll be back
to you after i applied your recommendations to the
TelePort Pro project here.  Thank you for helping!


smiley for :D


cor - 15.01.06 7:00 pm

Yes, it's all good! L'inspiration Magnifique! smiley for :D

There are some differences between my host's web server and my own. I may end up renaming those "active" links to plain .html files and running some regexp search/replace over them. I'd prefer to investivate more elegant capture techniques, and/or get to the bottom of the server's refusal to parse extensionless files. smiley for :roll: I don't like extensionless files, either.

Hammer: speed at which the client retries the server for a particular resource. It's originally from IRC slang, I think, when some agitated chatterbox hits the channel over and over in rapid succession, trying for attention, annoying. But yes, the nucleus webserver seems to overload the box if you hammer it. I guess, if you had WAN-side HTTP access enabled, it would be fairly easy to mount what amounts to a Denial-Of-Service attack on the box. Noteworthy.

Even a five second retry rate, with a single thread, cripples my 205. I reckon the webserver is simply desibned to be used by humans at human speed. I can surf like the wind, but I've not had the same effect accessing the Nucleus server by hand! smiley for :D

I've got the simulator doing *something*, but not much (I'd previously made a silly mistake). I'm keen to know if the version running on my workshop server is functioning from outside my LAN (replace ".org" with ".ath.cx" to get my development mirror version - purring away here at my left leg). I suspect there may be some DNS issue at work (though I did remove all references to the absolute address) explaining why my local copy functions, and though it looks fine from in here, it may be exactly the same as the corz.org version from the outside, ie. totally wonked!

I can't even trust a proxy for this one smiley for :geek:

;o)

ps.. It's Scottish Humour, Thank-You! smiley for :ken:


cor - 15.01.06 10:22 pm

The more I think about it, sober, the more I think it's irresponsible to just chuck the whole lot online, I haven't checked the functionality of the javascript, or anything, it auto-refreshes and all sorts (eek! bandwidth!), more manual labour will be required. I took it down, for now.

I'll leave my local copy up, and work on it as and when, feel free to jump in at any time. The real world is persistant today, but the GUI suck pages stay! it's started now, and it will be back!

;o)


Bicéphale - 16.01.06 1:37 am

Hi Cor,

Bi> I'll be back to you after i applied your
Bi> recommendations to the TelePort Pro project...


I launched TelePort Pro then configured it the way
you suggested.  As a result, it requested 99 files
and saved 96 to disk!  I suspect a TelePort issue,
i'm not observing parsing errors so far, though...


smiley for :lol:

Co> There are some differences between my host's
Co> web server and my own.


I noticed differences between hosts myself when my
Yahoo!/Geocities one refused files on the basis of
their filenames so i'm hoping it can be fixed too.


Co> I may end up renaming those "active" links to
Co> plain .html files and running some regexp
Co> search/replace over them.


I don't get it all but TelePort couldn't DownLoad
the page from where you'd normally find a link to
my MoDem/Router's `commitedcfg.cfg' setup file, i
ended up doing some manual patching, effectively!


Co> I'd prefer to investivate more elegant
Co> capture techniques, and/or get to the bottom
Co> of the server's refusal to parse...


I've noticed that the link to `commitedcfg.cfg' is
from a page in the /hag/emweb/ directory, TelePort
Pro ignored it completely but i had a copy from my
work with OffLine Explorer.  You see the result...

I share your taste for elegant techniques since it
won't be popular if the user has to work too hard.

The files which weren't DownLoaded got their names
clearly identified by TelePort, here and there, in
the capture.  At least two of them have been found
in this infamous /hag/emweb/ directory.  They are:


/hag/emweb/lclImageUpgrade.htm
/hag/emweb/bkupRestoreConfig.htm


smiley for :idea:

I believe it would be a good idea to skip them but
your MoDem/Router may very well use other names...

Both devices start from /hag/pages/home.htm, there
is a stunning difference in the presentation but i
can see similarities too as i explore the capture.


Co> ...yes, the nucleus webserver seems to
Co> overload the box if you hammer it.


Perhaps a .TPP TelePort Pro configuration file can
clear all this for visitors, once it's sorted out.


Co> ...if you had WAN-side HTTP access enabled, it
Co> would be fairly easy to mount what amounts to
Co> a Denial-Of-Service attack on the box.


Well, you'll find i don't trust the WAN side much!

Co> Even a five second retry rate, with a single
Co> thread, cripples my 205.


My TelePort Pro DownLoad from the GNet HTTP server
required a lot longer than what you mentioned when
you tried it.  So, we both end up rebooting, hey?!


smiley for :roll:

Co> I've got the simulator doing *something*, but
Co> not much...


Then i've been a lot luckier because this is quite
a dramatic change from OffLine Explorer, once that
i got TelePort working somewhat, see for yourself:



I read you're concerned about user's safety, may i
suggest that you replace 192.168.1.1 by something
which can make a page harmless, in the meantime...

I don't like it either having that around but some
TelePort option will take care of this in the near
future, i hope...  There's fog in my crystal ball,
it's hard for me to see the future clearly so far!


smiley for :ken:

Co> I'm keen to know if the version running on my
Co> workshop server is functioning from outside my
Co> LAN...  ...replace ".org" with ".ath.cx"...


I see it but the URL we got 1st still fails badly:

http://corz.org/public/docs/comms/router/GUI Suck/Voyager 205/

I bet you have the /emweb/ directory out there too
and it's interfering with your TelePort DownLoads!


Co> The more I think...  ...more manual labour
Co> will be required.  The real world is
Co> persistant today, but the GUI suck pages stay!


If you mean that you fear to find those pages in a
Google cache then i see your point and this is why
i had to make certain no sensitive data might have
been disseminated before i'm satisfied about it...

Real progress has been made today, nonetheless:  i
have the whole structure and won't need to compare
dupes, etc!  It's a nice achievement as far as i'm
concerned and perhaps the brain storming will make
some more possible.  I wish you a very nice day!!!


smiley for :D


cor - 16.01.06 10:25 am

Bicéphale said..
I launched TelePort Pro then configured it the way
you suggested. As a result, it requested 99 files
and saved 96 to disk!
Great news! I had a feeling those TelePort screen captures would be of some use! My capture, too, had the three files missing, but it shouldn't be too difficult to grab them manually and insert into the simulator.

Your simulator looks great! The web design is much simpler than the Voyager interface, - my capture has 150+ files, and it's <FRAMES> smiley for :eek: - but all the files are these, I shouldn't think it would take more than an hour or so to rename and re-link the files. I might even look at that javascript and see if it can be tweaked to do something useful.

Did you try my ath.cx version?

One thing I noticed about your simulator, if I clicked one of the controls, it attempted to perform the action on the local address (192.168.1.7, or something, which fortunately doesn't exist on my lan) which may cause problems for someone with the same router, if they "tried something out", it might performed the command for real, on their own router. Sure, they'd likely have to authenticate, but folk just click dialog boxes without reading them. I relinked my addresses to the local folder on the server, but there are other possibilities, too.

Bicéphale said..
If you mean that you fear to find those pages in a
Google cache then...
No, what I meant was, the front (main suck) page will remain on-site, as a marker, an indicator that there is more to follow. In other words, I've started, so I will finish!

Brainstorming is good, sharing ideas and information, we'll make more progress yet, for sure!

I guess I better go and read the *regular* voyager pages now, catch up on all the Sunday Network Engineers. smiley for :roll: Well, maybe later. smiley for :ken:

for now..

;o)


MarkUK - 17.01.06 4:53 pm

Cor mate. I've been a complete !IDIOT! After all of this, i forgot to active the username and password on the voyager.home bit, ROFL!!!!!!!!!!!!!!!!!!! WHAT A TWAT! lol Sorry to hassle you mate lol, Gonna use your page and sort it out now mate, thanks again Mark. (Lovin' the new look btw smiley for :D)


Bicéphale - 18.01.06 10:11 pm

Hi Cor,

Co> My capture, too, had the three files missing,
Co> but it shouldn't be too difficult to grab...


Euh...  Three?  You mean 99-96=3, not 4?!...  Then
it must true some abuses will hurt a brain cell or
two!  Well, i'm pretty much confident that OffLine
Explorer can do a simple capture which would elude
other tools but the TelePort configuration(s) .TPP
file(s) might suit a potential contributor better.

Can captures really be expected to stay functional
once they've been saved locally and then published
on a radically different HTTP server?  Without the
need for multi-tool/multi-step captures which will
end up with manual patching anyway?  Your visitors
may find it means "bad breath" enough as it is, it
would help to have a single simple-to-use tool!...

TelePort reveals my directory structure (it didn't
get /hag/emweb/ but at least there was a warning);
by the way, here's my list of files with sensitive
data from the BB0060B - it might be a major issue:

/192.168.7.1/MainPage-id=5.htm
Routing -> IP Addr
"IP Address Table"
WAN IP Address

/192.168.7.1/MainPage-id=6.htm
Home -> Home
"System View"
Domain Name,  WAN IP Address, GateWay, MAC Address

/192.168.7.1/MainPage-id=7.htm
Routing -> IP Route
"IP Route Table"
WAN IP Address, GateWay, DNS

/192.168.7.1/MainPage-id=16.htm
WAN -> PPP
"Point to Point Protocol (PPP) Configuration"
WAN IP and GateWay

/192.168.7.1/MainPage-id=24.htm
Services -> DNS
"Domain Name Service (DNS) Configuration"
DNS

/192.168.7.1/MainPage-id=25.htm
Home -> Quick Configuration
"UserName, PassWord and DNS"

/192.168.7.1/MainPage-id=48.htm
Admin -> Parental Control
"MAC Address!"


All of this information isn't necessarily harmfull
when published but i'm no hacker and no later than
a couple hours after i put my simulator on-line an
event occured which is a stricking coïcidence:  at
9h50 a.m., with nothing but the MoDem/Router on, i
got an alarm recorded after over ten weeks of A-1,
read hassle-free and *uninterrupted*, DSL service!

smiley for :erm:

PPP Authentification was failing so i put back the
default configuration (MoDem mode) and launched my
Windows PPPoE client - which showed that there was
nothing wrong with my account!!!  Then, i re-tried
my favourite configuration and noticed no PPP line
with the UserName and PassWord were left!  I don't
have a clue what has happened that morning, i just
know that my MAC address from the Parental Control
page slipped thru for a few hours the night before
i got this masked as well...  Is such event enough
to let someone take control of the device?  In any
case, i had to delete the entries, auto-detect and
now i find myself with two WAN interfaces (ppp-7 &
eoa-0) which are both valid!  Lets says it's never
been more true that this device is in "Routing And
Bridging" mode!!!  Anyway, here's the related log:

Mon Jan 16 09:51:00 2006
MAJOR ALARM
Failed To Get IP Address : Interface - ppp-0

Mon Jan 16 09:51:00 2006
WARNING
PPP Authorization Failed : Interface - ppp-0

Mon Jan 16 09:50:48 2006
STATUS ALARM
PPPoE Up : Interface - ppp-0

Mon Jan 16 09:50:48 2006
WARNING
PPP Interface Down : Interface - ppp-0


How can the MoDem/Router be caused to delete a PPP
entry without human intervention from the owner?!?

smiley for :ehh:

Sensitive data is defined by value instructions or
are simply part of the page, editing requires time
to perform...  Visitors may not be able to provide
you with ready-made captures to be published here.


Co> Your simulator looks great!  ...all the files
Co> are these, I shouldn't think it would take
Co> more than an hour or so to rename and...


Thanks but i didn't do much more than just apply a
receipie which you tried yourself and no more than
an hour was needed to get it in its present shape.

smiley for :D

There's lots of work ahead, though, but it's here!


Co> I might even look at that javascript and see
Co> if it can be tweaked to do something useful.


Like extend the emulation to a fuller scope?  Yes,
i suppose it's quite possible but somewhat remote.


Co> Did you try my ath.cx version?

Yes, of course!  As i replied, the files look very
much similar despite our radically diffent GUIs...


Co> One thing I noticed about your simulator...
Co> ...it might performed the command for real...


A concern for now but not a long term issue, sure!

Co> ...I've started, so I will finish!

Hurray, persistance works!  To next week-end then!

smiley for :cool:

In the meantime, i wish to include a list of files
which would sit in a mysterious /emweb/ directory:

/hag/emweb/lclImageUpgrade.htm
/hag/emweb/bkupRestoreConfig.htm
/hag/emweb/index.html
/hag/emweb/bkupRestoreConfigNS.htm


smiley for :geek:



cor - 19.01.06 1:21 pm

Well, I know 151 - 148 = 3 ! smiley for :lol:

The missing files: I don't have the index.htm in my setup, and I notice one of the three is simply a netscape version of another, so really it's only two! Also, the voyager 205 has a good 50% more files than your capture, I wonder what's missing from your router? Or possibly it's just extra frames and BT eye-candy. It would be interesting to compare the two sets of files next to each other, though.

Captures CAN remain functional if the http://192.168.1.1 (or whatever) links remain in place. The buttons send the request directly to the user's own router. We'll have to watch for that, or else users will be setting things they only wanted to play with in the simulator.

I'm not bothered about "sensitive" data, I'll be at a new IP by the time anyone sees the simulator, and it's only IP and routing information anyway, something anyone could easily get by pinging my dyndns domain, if they had a mind to.

As to your mysterious issues, it does seem unlikely that your ppp information could be altered from afar. I'd certainly keep an eye on things, but wouldn't worry too much. I know myself, weird things can happen on the broadband network, I used to notice the odd drop-out with BT, middle of the night, no ppp login, errors everywhere, then five minutes later, all is well, like maybe they were tweaking something, when the BT engineers imagined everyone would be too asleep to notice.

If it keeps happening, that's a different story!

I'll get back to the simulator at the week-end, well, it's pencilled in!

;o)


RQ - 19.01.06 9:52 pm

hmmz... you're writing a lot here. I've got to catch up again...

ps.. RQ, come on man, I'm waiting for you to tear apart my lovely compliant xhtml/css design! Do your worst! smiley for smiley for :lol:

bah! I've said what i wanted already. smiley for :aargh: AFAIK, my only note was about a separately generated print page, which is useless and consumes more traffic than it would consume if you would just use a separate CSS file for printer media. everything else looks nice, and i've got no complaints about it.

See you soon (probably). I've sort of lost my enthusiasm in tweaking my router that JUST WORKS with the uptime of 34 days.

However, i've just got a quick question here. If I use my modem as a router, and I connect to the IRC, i get a pause of maybe 10 seconds when connecting, because the irc server tries to lookup my ident response. Is there a way to somehow fake that response quikly right from the modem, or to simply DISCARD those network packets, making the server know that they're not just getting lost?


cor - 20.01.06 2:14 am

The easiest solution is probably just to run an ident server on your LAN, and forward the port for it. Some IRC Clients have one built-in. The ever-popular mIRC even has one that will only run while you are connecting and then quit.

The Voyager, in its current configuration, isn't capable of producing an ident response. If the unit is stealthed, it will already be discarding the packets; the ten seconds is likely just the time-out period of the IRC server ident client.

Personally, I just put up with the 10 seconds, and then stay connected.

;o)


RQ - 20.01.06 6:55 am

That's what I do (wait). Just thought maybe I can reduce that timeout somehow. :)
Btw, i would forward the requests, but i don't think I can actually tell which box to forward those ident calls to, and I don't want to just always forward them to one computer. Furthermore, if I remember correctly, for this to work, one still needs an identd server on the gateway, simple port forwarding won't just work.

Kinda offtopic: what do you guys think about routers from D-Link with GPL'ed software? :) Mustbe kinda fun, isn't it? :) Maybe a router like that could just run an identd server/forwarder by itself... :) I've installed such a thing for a LAN once. But i didn't manage to actually get to its shell, as the password that worked for web interface, didn't work with telnet.

Oh, and there's that project (forgot the name) that has created an open standard for modems/routers like that. Should be interesting... Maybe we'll really be able to tweak our routers in any way we want in the near future... Would be fun. :)


cor - 20.01.06 4:51 pm

Nope, RQ, forwarding the ports works fine. You'll connect in under a second..
create ipf rule entry ruleid 113 ifname public dir in act accept transprot eq tcp destport eq num 113 seclevel high medium low

create nat rule entry ruleid 113 rdr prot num 6 lcladdrfrom 192.168.1.3 lcladdrto 192.168.1.3 destportfrom num 113 destportto num 113
works great (though it's only redirecting to a single puter, of course).

The new BT routers have GPL'd firmware, too. If you have a mind to, and some spare cash, you can order the source CD from BT *grr*. We spoke about this on the main voyager page a wee while back. Then yes, it could do *anything*. Certainly it could do IDENT, which is a standard *nix service.

And ya, openwrt, something else we spoke about over there. There's a whole swathe of Voyager 2091 users looking to "unlock" themselves from the BT network. Could be an interesting avenue of research.

;o)


steveo - 22.01.06 3:16 am

Had a good look around the site and was looking for a help with atm vc congestion? Trying to run 3 computers through a switch then the voyager 205. it appears that the maximum vc's in total is 8. Is that enough? I had a look through the guides and cli reference`s but i'm rapidly floating out of my depth, as you might be able to tell.
Getting congestion alarms every minute to 2 minutes then all bandwidth drops and connections get bumped?
Any help or education would be appreciated.
Cheers steveo


cor - 22.01.06 9:10 am

steveo, everyone gets those same VC congestion messages, as soon as you start to push your connexion. They are an ISP problem, change nothing, and generally don't affect up or download speeds at all; they are "normal".

Look elsewhere.

;o)


Bicéphale - 22.01.06 6:54 pm

Hi Cor,

Co> ...users will be setting things they only
Co> wanted to play with...  ...unlikely that your
Co> ppp information could be altered from afar.


Perhaps my PPP UserName/PassWord entry only seemed
to disapear without external intervention...  It's
not clear how changes were made and commited but i
begin to think that the `commitedcfg.cfg' file was
already modified when PPP authorization failed.  I
observed a similar event when switching ISPs:  the
validation data became useless once they closed my
account and yet the access remained active until a
power failure forced my MoDem/Router to reboot, or
to re-negociate a new PPP session again, actually.

I may have managed to modify `commitedcfg.cfg' the
evening before and the change went unnoticed until
the PPP session or lease period was over, i guess!




vof - 23.01.06 1:35 am

Since my last post re Voyager 220V about a month back, I've managed to get through the BT system - having been sent from pillar to post and back - and persuade them to send me a Voyager GPL CDROM. (It came with a Scotland postmark, and without charge smiley for :eek:). Now this may prove interesting for any corzlings with Voyager 2xxx boxes. (These boxes are Askey sourced and use mips32 based Broadcom 63xx parts.)

The CD has 5 files on it:

bcm963xx_2.14L.02_consumer_release.tar.gz (74MB)
bcm963xx_2.18L.01_consumer_release.tar.gz (95MB)
bcm963xx_2.21L.05_consumer_release.tar.gz (77MB)
bcm963xx_3.02L.02V_consumer_release.tar.gz (119MB)

plus a Word doc describing where each open source component came from. I suspect the 4 code packages relate to different BT Voyager products. It would be interesting to know if any of the obvious version numbers match firmware in the other Voyager 2xxx (i.e. 2000/2091/2500/etc) boxes.

I've had a quick look at the 2.18L.01 file the name of which seems to correspond to the first part of my 220V firmware version. This file is so big because they seem to have managed to tar up a large part of the release twice smiley for :lol: but it appears to include the cross-compile toolset plus the Linux kernel plus a set of user apps. The web server scripts in the released firmware have clearly been 'enhanced' by BT but I am hopeful that I may be able to unlock the VOIP features and free the device from BT's Broadband Voice service.

Cor: do you want to make these files available in your site's download area? Let me know if you do and I'll mail you a copy of the CD.

Keep up the good work - and don't overdo it on Wed night smiley for :D
BTW, your scanoramic stuff is amazing!

vof



cor - 23.01.06 1:25 pm

Good work vof!

Yes, I would be delighted to host the files, though being so large, perhaps a torrent might be better! My monthly corz.org bandwidth usage hovers around 90% and growing. smiley for :eek: They do seem very large, even if they did tar some stuff twice smiley for :roll:

Someone on the main page mentioned they'd be keen to get hacking the firmware, too, so getting this "out there" sounds like a very good idea. It will save BT staff many hours dealing with the likes of YOU, for a start! smiley for :lol:

Is the firmware for the 2091 there? That's the one everyone wants to crack, I think, being "locked" into the BT Network. One version that was mentioned was "2.21.05.08m_A2pB018c1.d16d" which looks remarkably similar to one of the above.

Interesting times ahead..

Bicéphale, for all the great info, wizards, and GUI's out there, networking is still something of a black art, and I generally wait for a thing to happen at least twice before I look into it! smiley for :lol:

l*rz dudes..

;o)

ps.. Oh yeah vof! I didn't realialize it was so close, must see if I can barter for some fine malt! Cheers!
pps.. Aye, the scanoramic stuff is pretty wild. I gotta do some sort of promotion for that, I want to see every flat-bed scanner flipped on its side!



ItsRich - 25.01.06 2:53 pm

I'm up for hacking the GPL code and (trying to) unlock it from BT. I can host the files for a while too, if needed.
Cool scanoramic pics


cor - 28.01.06 1:24 am

Thanks vof! I got that in the mail this morning. I'm a bit tied up just now, but I'll put it somewhere tomorrow, make it available for download, probably one of my local servers, then ItsRich and everyone else can get stuck in.

for now..

;o)

ps.. thanks for mucking in on the main page, I'll scoop up the dregs over the week-end!


alvarok - 28.01.06 4:55 pm


Hello!

Hi, I'm the owner of a TurboComm EA130, it's identical to the Solwise SAR130... even the plastic enclosure and the phrase "Always on Surfing DSL"

Igought it from my ISP (I think that was the "Conecction Fee" that i paid, cause the Phone lines were there on the wall! No?)

When The device boot up, minicom tells me this:

Starting POST - V2.1
SDRAM ... Passed
Loader Checksum ... Passed
Loader (V2.03) Self-Extracting ... Done
Decompressing UMON (V1.62) ... Done/Activated
Flash ATMEL AT45DB161 (Capacity=2112K, PageSize=528, TotalPages=4096)
Testing FILESYS Checksum ... Passed
Testing DSLCODE Checksum ... Passed
Testing APPCODE Checksum ... Passed
Decompressing "TEAppl.gsz" (1392358->3641960) ... Done

Text Segment Size = 3287232 bytes
Data Segment Size = 354728 bytes
Bss Segment Size = 955568 bytes
System Stack Size = 16536 bytes
HISR Stack Size = 16536 bytes
NetBuffer Pool Size= 710512 bytes
System Memory Size = 2366200 bytes
Start of DSPText = 207c0800 bytes
Decompressing "TEMod.gsz" (60720->134472) ... Done
Decompressing "TEDSL.gsz" (74679->163320) ... Done

File System Memory Size = 286720 bytes
UnTar File System \...\...\..\\.....\\\..\......................\.\..\..\......e

Normal Execution Mode

CfgInit: System Coming up from Last Configuration
*******************
Welcome to VikingII
*******************

GlobespanVirata Inc., Software Release VIK-2.1.040205a2
Copyright (c) 2001-2003 by GlobespanVirata, Inc.

login:



Yes It actualy ask me for password on the serial console, I don't know why.

And then:

Thu Jan 01 00:01:38 1970 : STATUS ALARM : System Up

login:
Thu Jan 01 00:01:45 1970 : STATUS ALARM : DSL Interface Up

Thu Jan 01 00:01:45 1970 : STATUS ALARM : ATM Interface Up : Interface - atm-0

Thu Jan 01 00:01:45 1970 : STATUS ALARM : ATM VC Up : Interface - aal5-0, PortId
=7, Vpi=0, Vci=35

Thu Jan 01 00:01:45 1970 : STATUS ALARM : ATM VC Up : Interface - aal5-1, PortId
=7, Vpi=0, Vci=33


Usual I gues.

The EA130 BOARD says:

EA130 Rev:X3a
KMA621300103

The Chipset:

(GlobeSpan Virata logo)
GS8120-174-008D
FB5918.1AA Singapore

(globeSpan Virata logo)
GS5780-174-0012
00316 Taiwan
DOFAJ.1-CO

(ATMEL logo)
AT45DB161B
TC
0332

The GS5780 has two pins "out" of the PCB (not soldered, the are separated of it ) I don't know why, or if is normal.

I will try with LoadFi, but what i need to do? Save the firmware and then search with a hexadecimal editor for "password"?
Can I load the latest firmware from Solwise SAR130?

I will try the Loadfi theory first, then will see...

Thanks!





Bicéphale - 28.01.06 10:12 pm

Hi,

I bet your device looks like the one i shown here:

http://bicephale.electronicbox.net/GNet BB0060B/

smiley for :cool:


cor - 30.01.06 9:03 pm

Voyager 2091 (and the other locked voyager routers) can now be discussed here.

;o)


vof - 30.01.06 9:23 pm

Thanks!


Foxabilo - 31.01.06 2:20 am

/me slaps self for not revisiting sooner, Ello all.

Cor rember me going on about that 205 with real Azures torrent issues back on page 8 somplace ? well... For a couple of months I just gave up and went back to using a 105 into a little PII box as the router but now I really want to give this 205 a shot and I have now put all of the loverly pre made entrys for NAT and F/W and somtimes it works for a good hour but them whammo I loose the net again for from 5-20 mins. What I have noticed thats quite interesting is that the 205 is actualy disconnecting from BT when I run Azures the main status page just gives me my username and password loggin screen and no matter how many times I click on Connect it just says your username and password have been updated o_O and promply sits there not logged in, takes a full power down and restart to get it back to life, and this is the second 205 to do it, getting a really nice collection of 205's now smiley for :D I will have to send some out for "Testing" purposes smiley for :D any thoughts on my odd problem as ever appriciated


tech - 31.01.06 4:12 am

On the bt voyager 205 modem main board is the 7 pin header connector (JP1).
I think that pin 7 is a connection to pin 6 on the AT45DB161B (Vcc Pin), this pin also has a link to ground through capacitor (C42).
The Voltage for the chip can be anything between 2.7V and 3.6V DC.

I am thinking about checking the lpt pin voltage specs to see if any of the pins gives out a constant 3V or 3.3V or even 5V which can be reduced to 3V or 3.3V.

Pin 7 could also have something to do with the (WP) pin which is held low by resistor (R41) which also goes to ground and by applying the +ve voltage of 3v or 3.3v to pin 7 externally (through the cable) could also lift the voltage of the (WP) pin to a more positive voltage and disable the write protect (WP) of the AT45DB161B.

Do you think this is worth a try.

I also think that trying to program an eprom/Flash bios with the device it's in powered on is a very bad idea, I wouldn't have done that as the programming of these devices interupts (burns out) the voltage regulators of the device.


cor - 01.02.06 3:34 am

Foxabilo, yeah, the name is definitely familiar. It just sounds like you are overloading the thing. Have you applied all the tweaks? Max connexions, TCP timeouts and such? Try one of the ready-made scripts (from the archive) for an easy way to apply everything-at-once.

And yes! I'll gladly take your spare 205's off you! Because, yes, tech, it's a risky operation; I've blown one up already! smiley for :D I moved your comment here, so I presume you haven't read the comments here yet, have fun!

Check out the archives (link above), especially the "emergency" folder, for more information, replace "org" with "ath.cx" for my workshop mirror, which may have more info about my own particular adventures with the seven pins. There's some in depth technical details about the Atmel flash chip, too.

I'm keen to try again, though under more controlled circumstances next time. Read above if you want to get up to speed with what's known so far; not enough.

And if you have a backup router, go for it!

;o)


Franc Zabkar - 16.02.06 9:30 am

I've been looking at the following photo of the innards of the BT Voyager and am curious about the unpopulated connector location at P1. I suspect it is for the RS232 console port.

Console Connector P1

The IC pinout at U14 appears to be a perfect match for a Maxim MAX3226E or MAX3227E RS232 receiver/transmitter chip.

MAX3226E/MAX3227E Datasheet

IC pins 8 (R1IN) and 13 (T1OUT) connect to P1-5 and P1-3, respectively. I'm guessing these are Rx and Tx. Pin 10 of the IC is used for power management and appears to go to the reset switch (SW1) via resistor R31. P1-6 is grounded but P1-8 is a mystery. Does anyone know where it goes?

My own D-Link DSL-302G modem has a 5-pin header (JP1) which I suspect is also for a serial console port. However, my modem has set aside no PCB real estate for an RS232 chip, so it looks like I'll have to make a little daughter PCB. To this end I'll need some help identifying the function of the three signal pins.

The pinouts for JP1 are as follows:

JP1-1 -> GS8120 - 39 (CPU pin #39)
JP1-2 -> ground
JP1-3 -> GS8120 - 60
JP1-4 -> ground
JP1-5 -> GS8120 - 38

Would some kind BT Voyager 205 owner be able to trace pins 11 and 9 of U14 back to the Globespan CPU chip? A DMM on the low ohms range would be the go. Some help in determining where CPU pin 60 connects to would also be nice.



Franc Zabkar - 16.02.06 9:40 am

For anyone wanting to try the "parallel port" technique for recovering from a failed flash, here are the pinouts of the header (JP2) adjacent to the Atmel EEPROM in a D-Link DSL-302G modem/router.

JP2-1 -> --680R-- GS8120 (CPU) pin 91
JP2-2 -> --680R-- GS8120 pin 90
JP2-3 -> GS8120 pin 53 & VIA VT6103 pin 48
JP2-4 -> Atmel EEPROM pin 11
JP2-5 -> Atmel EEPROM pin 12
JP2-6 -> ground

(--680R-- designates a 680 ohm resistor)



cor - 16.02.06 3:49 pm

I finally found my flashing adventure notes!
A Voyager 205 revival..

loadfi.exe :

	loadfi	[-i <imgfile>] [-p <portaddr>] [-c#] [-a[v][s]] [-f <fmtstring>] [-s#]
			[-h|/h|/?|--help]

	-i <imgfile>       Image file name, default is "TEImage.bin".

	-p <portaddr>      Parallel port address, default is 378.

	-c#                Loadfi cable version, default cable is 1 (-c1). To run
					 with new loadfi (v2.x) cable, set it to 2 (-c2).

	-a[v][s]           Run loadfi in automatic mode, e.g. -a, -av, -as, -avs.
					 'v': Verifies the flash after programming.
					 's': Serializes the flash after programming.

	-f <fmtstring>     SNum/MACs input format, e.g. "-f sm1-m2" means sn & mac1
					 in 1st line, and mac2 in 2nd line, default is "-f m1-s".

	-s#                Serial clock mode (-s1,-s2,-s3,-s4), default is -s4.

					clock modes:

						s1 : Inactive Clock Polarity Low
						s2 : Inactive Clock Polarity High
						s3 : SPI Mode 0
						s4 : SPI Mode 3	(default)

	-h|/h|/?|--help    Displays help message.

	cables:

		c1 cable: D5->cs, D4->clk, D3->si, D2->rst, ~S7<-(100ohm)<-so, GND25->gnd.
		c2 cable: D7->si1,D6->rst1,D5->cs1,D4->clk1,~S7<-(100ohm)<-so1,GND25->gnd1,
				  D3->si2,D2->rst2,D1->cs2,D0->clk2, S6<-(100ohm)<-so2,GND24->gnd2.


hmmm. wtf is ~S7 on a Parallel cable?
Googling tells me that it's pin 11..

	http://www.geocities.com/gear996/sub/parallel.html

Thanks m8! Here's what works for some other clones..


	JP1 ......... ATMEL AT45DB161
	-------------------------------------
	1 ........... 13	[si]
	2 ........... 14	[so]
	3 ........... Exception: see below (*)
	4 ........... 11	[cs]
	5 ........... 12	[sck]
	6 ........... 7 	[gnd]
	--------------------------------------

	(*) Pin 3 of the connector is not wired to the Atmel chip,
		it is connected to pin 4 of the LPT cable.



	PC LPT ................. JP1
	--------------------------------------
	4 ---------------------- 3
	5 ---------------------- 1
	6 ---------------------- 5
	7 ---------------------- 4
	11 ---------------------- 2 (via 100 ohms resistor, 0.25w)
	18 ---------------------- 6
	--------------------------------------


Firstly, the Voyager 205 has a *seven* pin connector. Bummer. Some simple investigations
with my multimeter lead me to conclude that I haven't a clue what I'm doing, but pins 1-6
look likely, pin 3 seems to be indirectly connected to the reset on the Atmel, and pin 7
isn't directly connected to anything, so I follow the instructions as writ..


	Instructions..
	--------------------------------------

	Make the parallel cable.
	Connect modem to PC with the cable.
	Boot into pure DOS (like from a floppy boot disk).
		You'll need to have TEImage.bin on a partition that pure DOS can recognise,
			i.e. FAT or FAT32.
		Or else you might try to use ntfsdos to access an NTFS partition from DOS.
		Alternatively, you might want to try "UserPort", to give an XP DOS Session
			raw access to the parallel port.
	Run Loadfi.exe.
	Apply the TEImage.bin
	Reboot the router.


Well, that didn't work!

Something was happening. loadfi would recognise a device, but it was never the same device twice! It
would go through the motions when pushed, mostly ending up with "manufacturing cycle complete.
replace boards and try again" or words to that effect. reading the flash gets you a file of
gibberish, and writing the flash has no effect, though it does produce a pretty display of X's.

Interestingly, I had to reverse my 6-pin connector to get it to do anything. Even though my cable is
assembled exactly like the chinese example, round the correct way it's always "no connection" from
loadfi. This is not encouraging. It looks like the interface will need some tweaking for the Voyager
models.

Fortunately I have a one-puter-one-bricked-voyager network setup to test all this.
If the whole lot goes up in a puff of smoke, nothing is lost.

	And that's exactly what happened!

I made another cable, this time following the wiring diagram in loadfi, which is similar, but not
exactly the same as the Chinese example, and plugged that in. Switch on. Nada. The router doesn't
even power up. The power pack also seems to be kaput now (putting out a variable 0.5-0.9V instead of
16), and I wonder if it was the cable, coincedence, or both. And now I have no test router. damn!

A 13V pack that used to at least make it power up also has no effect. I'll try feeding it some power
directly (from my variable power supply) and see if I can get it to come on. Another time!

I'll come back to that!

Thanks for all the info Franc!

for now..

;o)


Franc Zabkar - 16.02.06 7:42 pm

I wish to amend my last post by adding connection info for pins 1 & 2 of JP2.

For anyone wanting to try the "parallel port" technique for recovering from a failed flash, here are the pinouts of the header (JP2) adjacent to the Atmel EEPROM in a D-Link DSL-302G modem/router.

JP2-1 -> Atmel EEPROM pin 13 & GS8120 (CPU) pin 91 via 680 ohm resistor

JP2-2 -> Atmel EEPROM pin 14 & GS8120 (CPU) pin 90 via 680 ohm resistor

JP2-3 -> GS8120 pin 53 & VIA VT6103 pin 48

JP2-4 -> Atmel EEPROM pin 11

JP2-5 -> Atmel EEPROM pin 12

JP2-6 -> ground

I'm guessing that JP2-3 is some kind of reset pin for the CPU and VT6103. It probably prevents the CPU from talking on the SPI bus. This would ensure that the external device (eg PC parallel port) would have total control of the EEPROM.



Bicephale - 21.02.06 12:45 pm

Hi Franc,

Look at my console connector, i have pins 3, 5 and 6 used and the rest is discarded
(it's a non-buffered type of serial-connection with the TxD and RxD signals ONLY and the rate is 38K4 Bps at best): no Flow-Control (which is why some people may find that TelNet isn't as prone to character loss, in comparison)!... The other pins of the RJ-45 female connector are unused, i suppose the GSPN chip simply doesn't have the extra lines/support. Euh... I'm typing this live, on a live CD, so i'll keep short but i had to mention i don't concur about using an ohm-meter as you described, measuring AC/DC levels wouldn't risk to stress sensitive parts as with the potentially large currents present when the range is set too low (if using auto-range then the operator may not even have control over that)...




maddler - 21.02.06 10:03 pm

First of all: THANK YOU!!!
I just bought a Digicom Michelangelo Lan CX ADSL2 modem/router which looks like is using some kind of Viking derivate. After login I get a "Welcome to Vulcan" banner.
And "Conexant Inc., Software Release VUL-2.5.050523c Copyright (c) 2001-2003 by Conexant, Inc.". I checked the CLI guide and looks like many commands are working fine.
Does anybody knows about the differences among Viking (which is shown on the web login form btw) and Vulcan?

Thank you!


maddler - 21.02.06 11:19 pm

Thought about that only after leaving my prev comment.
Nmap! :)

OS details: CastleNet AR502/GlobespanVirata GS8100 (same thing) DSL router

At least a good starting point! :)


maddler - 22.02.06 10:54 am

was anyone able to install openwrt on GS8100?
I saw on a previous post you were talking about that, but was unable to find any info anyway.

Thx again.


George - 25.02.06 7:34 pm

Trying to get the BT 205 Router working in Czech Rep. but i need to set router to Annex B for it to work, but i cannot find this option under the advanced tab. Does any1 know where i can change it from Annex A to B. Thanks


vof - 26.02.06 1:31 am

George: I have a Netgear DM602 - very similar to the Voyager 205. The DM602 requires a firmware change for Annex B - see here - and I would expect the 205 to also require different firmware. I doubt BT have produced Annex B firmware unless they have marketed the 205 in Europe.


George - 26.02.06 7:44 pm

I am guessing i wont be able to flash the voyager using Netgear firmware? Thanks for the help.


vof - 26.02.06 11:55 pm

George: cor posted last year that Annex B support was built-in - his URL reference was to the Conexant hardware spec - it is certainly part of the chip but I'm not sure of the firmware - Netgear clearly produce different firmware versions for the Annex A and B regions.

Anyhow, I decided to follow it up so I looked up the Solwise 110 CLI ref manual. It contradicts itself! smiley for :eek: The section of the manual for

modify dsl config annex <annex>

says valid values for <annex> are annexa or annexb or annexc but the syntax definition specifies all three in one place and only annexa and annexc in another.

I guess you would have to try it and see. You would do it via the CLI or possibly via cor's secret admin pages but not via the standard BT web pages.

HTH some more. I could not recommend flashing with the Netgear firmware.


George - 27.02.06 12:53 am

Thanks for the continuing help vof. I tried using CLI to change annex, i used the command 'modify DSL config annexb' but i get 'invalid command' error msg. :(


vof - 27.02.06 9:05 pm

George: modify dsl config annex annexb

(Note that the command includes the word annex and the new annex value (annexb). Also, I'm not sure if CLI is case sensitive. You specified 'DSL' not 'dsl')


George - 28.02.06 12:07 am

Looks like i entered the command wrongsmiley for :roll:, managed to change it to annexb but with i plugged in DSL line all green leds lit up and stayed lit up. Tried to hard reset modem, but does nothing, even if i switch it off and on the the power led lights up first, the diag and all light up. Is there anything else i can do to reset this thing? I guss i will be buying a new modem/router after all. :(


vof - 28.02.06 12:33 am

George: Can you telnet in? If so, are you sure the ATM PVC is set correctly? UK uses VPI:0 VCI:38 but other countries can and do use other PVC values. What messages are in the log? If you can telnet in but still can't get it to work, howzabout changing the annex type back to Annex A?


George - 28.02.06 9:33 am

No, telnet is not working anymore, the VCI and VPI for Czech Rep. 8, 48 and that is what is saved on the router. I tried using the web interface to access it but that does not work either.


Bicéphale - 02.03.06 11:12 pm

Hi,

I came across this page and "OpenWRT" immediately rang a bell as i was reading:

http://wiki.openwrt.org/TableOfHardware

Apparently, it clearly shows that GSPN/Viking won't allow this type of feature,
any opinion?



Charbless - 08.03.06 5:40 pm

What firmware do you lot use? I am using BT v1.6 dont like it also cant get any of the config files to work they upload from what I can tell but no settings are changed.


gurgle - 11.03.06 1:26 pm

Hi,
I like how the Dlink 302G can be configured for rfc1483 routed. That is: it just behavew as a modem (not a router) and doesn't keep the point-to-point local (static) IP address (aka WAN local address) for its interface, but you can set the p2p local IP to your pc eth interface and the modem is seen (from the pc) as having the p2p remote IP.
This doesn't seem to be possibile with any other DSL modem/router I've tried, however since most of these modem are actually the same hardware, maybe they can all be configured in this way by using the CLI interface.
Does anyone know how to do it, or is there anyone using a Dlink302G and an rfc1483 routed connection that can post the full detailed (CLI) configuration of his modem?
Thanks



jase - 15.03.06 6:16 am

got an d-link 302G genII umm... i think its stuffed lolwont go in to gui and cant c its ip but c a mac address fine... a mate had it came back rooted lol, any suggestions it powers up and connects to network thats it no net or anything else also i think its auto assigning ip addresses ok


Vulcanitor - 25.03.06 2:00 am

Does anyone knows if the new Vulcan chip will support VoIP hardware and services (SIP, Etc) and VLAN? I'm looking for the main differences and advantages of using Vulcan over VikingII. Any info?


cor - 28.03.06 2:00 am

Charbless, I use v1.6, and I recommend that. I've had a few strange reports about v1.8.

I've had a few strange reports about the v1.6 "ready-made" scripts, too, apparently my custom system line is rejected on some routers. I'll re-do those when I get a chance.

jase, does that have a Viking chipset???

passing through..

;o)


jabberwokki - 02.04.06 12:22 pm

hi all just A quick one lots of people have posted about bts 2xxx routers being loked to bts isp i recieved a 2500v from them yesterday which is locked when i spoke to them about it because they knew i was with another isp they appologised and said they would send me a new 2500v which was enabled for all isps as they were aware of this problem and are now supplying two versions one for bt only and another for all isp s so if you have a router which is locked then speak to bt they CAN supply a router unlocked but not the firmware YET!!!!!!


cor - 09.04.06 12:16 pm

jabberwokki, we want that firmware! DUMP! DUMP! DUMP!

By the way, I put up a new set of ready-made configs, they work on v1.6 AND v1.8.

have fun!

;o)
9or


murix - 13.04.06 1:49 am

hello,

i am brazilian, my english is bad, but i am revive over 200 units of the dlink 502g,
the basic method is using parallel custom cable plus loadfi and teimage.bin on fat32 partition

atmel at45db161 datasheet describle how to load file via SPI (Serial Programming Interface),
i am start , but not finnish , writing "loadfi.exe" version for linux

for development the generic firmware for all VIKING-I and VIKING-II CPU, plus DSL controller,
i thinking which most recommend method is Reverse Engineered with "IDA Pro" (http://www.datarescue.com/idabase/)


UMon is micromonitor -------> http://microcross.com/html/micromonitor.html
may be UMON loader linux kernel 2.2 plus minimal userspace
(uclibc + busybox + iptables + iproute2)

the viking cpu(sound like old sparc) and ethernet(via vt8032 phy) driver port for linux may be easy, the complicated stuff is make
drive for DSL controller work fine



Starting POST - V2.1
SDRAM ... Passed
Loader Checksum ... Passed
Loader (V2.03) Self-Extracting ... Done
Decompressing UMON (V1.62) ... Done/Activated
Flash ATMEL AT45DB161 (Capacity=2112K, PageSize=528, TotalPages=4096)
Testing FILESYS Checksum ... Passed
Testing DSLCODE Checksum ... Passed
Testing APPCODE Checksum ... Passed
Decompressing "TEAppl.gsz" (1392358->3641960) ... Done




BobGeldof - 18.04.06 11:46 am

Does anyone have a copy of or a link to the originl Globespan Virata GS8100 firmware. Kinda been messing with mine and stuffed it, and I was not bright enough to back it up first :-)
thanks


Zibri - 18.04.06 11:50 pm

Please HELP
I need the voyager.firmware cd with souces...
I downloaded the torrent but it can't even get the tracker..

Please !
Can Anyone write me an email to arrange the download somehow ?

Thanks in advance.

You can contact me at: zibree @ gmail . com


Bicéphale - 20.04.06 7:46 am

Hi,

Perhaps you can try looking here:

ftp://ftp.gentek.com/pub/gnet/ADSL-Modems/BB0060B/Firmware/2.1.050524k/

smiley for :)


RichE - 20.04.06 11:10 am

Hi guys, I've been doing abit of recoding on rad, and changed the way it works, as before when new forced rules are added to your router i had to add it and compile and distribute the rad win32.exe all over again.

so instead what i've done (i need to test it first) is the exe now reads the rule numbers in from a .txt or equivalent file, and then parses them to telnet for removal, this has two advantages:

1. the code for the program is way smaller due to it being a do ... until loop.

2. if a new forced rule is introduced you just add it to the bottom of the .txt file and it's removed, no more recompiling the exe.

anyways once it's test at home and i'm happy i'll post it.


RichE - 20.04.06 8:23 pm

testing done, and it works great, the source code is half the original size, and the rules.txt works great when adding new forced rules like 107 & 108:

anyway here's the source code:

RAD V2
#include <File.au3>
$router = "192.168.1.1"
$user = InputBox("Username", "input username", "", "",200, 80)
$password = InputBox("Password", "input password", "", "*", 200, 80)

if $user or $password <> "" Then


Run("telnet " & $router,"")
WinActivate("Telnet " & $Router)
sleep(300)
send($user & "{enter}")
sleep(300)
Send($password & "{enter}")
sleep(300)

$RULES = "RULES.TXT"
$rulescount = _FileCountLines($rules)


$r = 1


Do
$rulesread = filereadline($rules, $r)
send("delete ipf rule entry ruleid " & $rulesread & "{enter}")
sleep(300)
$r= $r +1
until $r = ($rulescount +1)

Send("commit{enter}")
sleep(2000)

send("exit{enter}")
sleep(1000)

else
Msgbox(0, "Missing Input detected!!!", "you missed soemthing," & @CR & "Please restart", 10)
EndIf

once compiled place in a dir with a rules.txt file here's the contents of my rules.txt

rules.
8
10
11
12
27
28
29
30
32
47
48
49
50
51
52
67
68
69
70
71
72
73
74
87
88
90
91
92
93
94
107
108

and there ya go, a RAD program that never needs recompiling on Forced rule additions, just add them to the text file and their gone!

COR if you have an email, i'll send you the compiled .exe's to put in your resources page smiley for :)


cor - 21.04.06 2:05 pm

NIce one, RichE. This is definitely a better way to do things, more UNIX-like, usually a good thing. I have a copy of autoit kicking around, though, so it's easy enough for me to compile/test, but if you want to send me anything, any of the email addresses kicking around here is good, something at corz.org or corzoogle.com usually gets to me pretty quick.

Anyway, even though I no longer have a 205 at 192.168.1.1 (by the way, not everyone's router is at that address), I gave it a whirl..

Firstly, it didn't seem to notice my rules.txt at all, and regardless, went into an infinite loop spewing out "delete ipf rule entry ruleid <enter>" over and over again into whatever application was at the top! smiley for :eek: Some error-checking, perhaps?

do..until is deadly in the wrong hands, consider a for-next loop. smiley for :ken:

You could check for the file's existence (I'm guessing your UPPER CASE is what prevented it from reading my "rules.txt" - lower case, as specified in your post), and then also check for the number of rules in the file. If either of these is null or zero, the script should exit immediately with an error message explaining the situation. A for-next loop, by its very nature, would prevent all rules.txt-based errors becoming fatal because the number of rules would be zero, ergo, no loop.

I'm savvy enough to know how to bring down a runaway application, but many users probably are not. It's always a developer's job to catch these things, not the user's. If they had, for instance, an explorer window at the front, and an appplication was selected (highly likely, they just clicked rad.exe) they would get instance after instance launched ad-infinitum, which would eventually bring down their machine. ouch!

Also, as it's still using that sendkeys thing, we need to have a messagebox telling the user not to touch anything. My windows versions of rad bring up a DOS box that says something like "STEP AWAY FROM THE COMPUTER! TOUCH NOTHING!!", which works rather well, so I'm told.

A good tip for any developer is to test it the way it *should* be, and then test it over and over again in all the ways that it *shouldn't* be. In other words, try and recreate the craziest user situation you can; router disconnected, no rules.txt, rules.txt with silly words in it instead of numbers, incorrect username incorrect pass, both, etc. etc. and see what happens. When every single test ends safely, and exactly the way you expected, THEN you release!

By the way, for anyone stumbling across this source and thinking WTF!?!? It's for "AutoIt", a fairly nifty BASIC-like scripting environment for Windows®

Keep up the good work RichE!

murix, a linux version of loadfi.exe would indeed be a valuable tool, we look forward to that!

;o)


Riche - 21.04.06 3:59 pm

i've updated the code to check for the existance of rules.txt and also the each line is numeric and not a letter.

anyway here's the updated code:

error checking RAD V2
#include <File.au3>
$router = "192.168.1.1"
$user = InputBox("Username", "input username", "", "",200, 80)
$password = InputBox("Password", "input password", "", "*", 200, 80)

$RULES = "RULES.TXT"
if not FileExists($rules) then
msgbox(48, "WARNING!!!", "NO RULES FILE FOUND", 10)
Exit
Else
if $user or $password <> "" Then
Run("telnet " & $router,"")
WinActivate("Telnet " & $Router)
sleep(300)
send($user & "{enter}")
sleep(300)
Send($password & "{enter}")
sleep(300)

$rulescount = _FileCountLines($rules)
$r = 1
Do
$rulesread = filereadline($rules, $r)
IF StringIsAlpha ($rulesread) Then
$r = $r +1
Else
send("delete ipf rule entry ruleid " & $rulesread & "{enter}")
sleep(300)
$r= $r +1
EndIf
until $r = ($rulescount +1)

Send("commit{enter}")
sleep(2000)
send("exit{enter}")
sleep(1000)
else
Msgbox(0, "Missing Input detected!!!", "you missed soemthing," & @CR & "Please restart", 10)
EndIf
endif

i'm also working on a way to make the commitedcfg.cfg easier to read, and i'm almost there with that as well.




cor - 21.04.06 5:37 pm

hey, that was quick!

smiley for :idea: what about checking for "RULES.TXT" AND "rules.txt". I guess your installer will have a rules.txt along with it, so it's not a biggie; folk will just edit that, and it will surely be the right case!

And perhaps the IP could be a dialog, too. 192.168.1.1 could already be in place for normal users to just hit <enter>, but at least those with their 205 at a non-standard IP could also use the application, a good thing.

And if the values could be saved so that, in the future, one might just click-and-go, that would be even better! Is there a way to store things, perhaps in the registry?

I figure it's best to suggest these things while you're hot! smiley for :D

/me gets back to the bash scripting..

;o)


RichE - 22.04.06 8:55 am

another update that has an input for the ip address, and now stores all the inputs in an .ini file.

As before it checks for the RULES.TXT if it doesn't exist it now creates it with the rules I have forced on my router (no biggie if they don't exist)

RAD V2
; ----------------------------------------------------------------------------
;
; AutoIt Version: 3.1.0
; Author: RichE <rich.easton@gmail.com>
;
; Script Function:
; RAD V2.
;
; ----------------------------------------------------------------------------


#include <File.au3>

;check for stored router ip
if fileexists("router.ini") Then
$rip = iniread("router.ini", "Router", "ip", "192.168.1.1")
$router = InputBox("Username", "Router IP", $rip, "",200, 80)
Else
$router = InputBox("Username", "Router IP", "192.168.1.1", "",200, 80)
EndIf
iniwrite("router.ini", "Router", "ip", $router)

;check for stored router username
if fileexists("router.ini") Then
$ruser = iniread("router.ini", "Router", "user", "")
$user = InputBox("Username", "input username", $ruser, "",200, 80)
Else
$user = InputBox("Username", "input username", "", "",200, 80)
EndIf
iniwrite("router.ini", "Router", "user", $user)

;check for stored router password
if fileexists("router.ini") Then
$rpass = iniread("router.ini", "Router", "password", "")
$password = InputBox("Username", "input password", $rpass, "*",200, 80)
Else
$password = InputBox("Username", "input password", "", "*",200, 80)
EndIf
iniwrite("router.ini", "Router", "password", $password)


$RULES = "RULES.TXT"
;check for rules.txt if it doesn't exist it creates it
if not FileExists($rules) then
FileWriteLine($rules, "8")
FileWriteLine($rules, "10")
FileWriteLine($rules, "11")
FileWriteLine($rules, "12")
FileWriteLine($rules, "27")
FileWriteLine($rules, "28")
FileWriteLine($rules, "29")
FileWriteLine($rules, "30")
FileWriteLine($rules, "32")
FileWriteLine($rules, "47")
FileWriteLine($rules, "48")
FileWriteLine($rules, "49")
FileWriteLine($rules, "50")
FileWriteLine($rules, "51")
FileWriteLine($rules, "52")
FileWriteLine($rules, "67")
FileWriteLine($rules, "68")
FileWriteLine($rules, "69")
FileWriteLine($rules, "70")
FileWriteLine($rules, "71")
FileWriteLine($rules, "72")
FileWriteLine($rules, "73")
FileWriteLine($rules, "74")
FileWriteLine($rules, "87")
FileWriteLine($rules, "88")
FileWriteLine($rules, "90")
FileWriteLine($rules, "91")
FileWriteLine($rules, "92")
FileWriteLine($rules, "93")
FileWriteLine($rules, "94")
FileWriteLine($rules, "107")
FileWriteLine($rules, "108")
endif
;checks null inputs
if $user or $password or $router <> "" Then
Run("telnet " & $router,"")
WinActivate("Telnet " & $Router)
sleep(300)
send($user & "{enter}")
sleep(300)
Send($password & "{enter}")
sleep(300)

;counts rules
$rulescount = _FileCountLines($rules)
$r = 1
Do
$rulesread = filereadline($rules, $r)
IF StringIsAlpha ($rulesread) Then
$r = $r +1
Else
send("delete ipf rule entry ruleid " & $rulesread & "{enter}")
sleep(300)
$r= $r +1
EndIf
until $r = ($rulescount +1)

Send("commit{enter}")
sleep(2000)
send("exit{enter}")
sleep(1000)
else
Msgbox(0, "Missing Input detected!!!", "you missed something," & @CR & "Please restart", 10)
EndIf

if you can think of anything else, just let me know and i'll add it.

oh and BTW i found a command called AUTOUPDATE, which initially is set to TRUE, I typed AUTOUPDATE FALSE , and some of the rules didn't come back, just thought i say.. smiley for :)






cor - 23.04.06 1:34 am

Hey! I thought you'd cracked it with that "autoupdate" command! I was so excited I had to go plug in my Voyager, check it out.

Nada, bummer smiley for :lol:

Okay, I got a kick to mess with RAD when I got back tonight, with the router plugged in anyway, and me itching to try out this AutoIt stuff, yes, I have a suggestion, here it is.. an image

And a nice, pre-compiled version for the masses..  an image

Don't take it the wrong way! I've been meaning to have a play with AutoIt for ages, and I was sure there must be a way to get it to do telnet. It turns out that although the release version of AutoIt has no TCP functions, the beta does.

I'm rather taken with AutoIt. Despite its flaws, it's a highly capable RAID system; just a pity it can't cross-compile for *nix. And here's me trying to get rid of my last Windows box! smiley for :roll:

Anyways, the 205's implementation of telnet is very simple, so it didn't take to long to cobble together a basic telnet functionality. While I was at it, I rewrote the basic structure of the application, cleaned up some stuff, and maybe you can learn some things from this. It's certainly not an object lesson in AutoIt (I'm a AutoIt n00b!) but it definitely highlights a few of the differences between coding and programming. It was fun, anyway, and the result is quite pleasing..

The data is stored in a "Voyager205" folder in the user's application data folder (RAD informs the user of this when it first creates the folder). The voyager's defaults are hard-coded in as defaults, though the user can override them all with the usual address/user/pass dialogs. Changes are stored in the ini file.

Then, and this is the fun bit, RAD V3 silently, and transparently creates a socket connection to the router (after a quick Ping, to check it's up and running) and begins a simple telnet session. It logs in, and if all goes well, chucks the delete rules down the wire. If the login fails, the user will be informed that their details were incorrect.

Every stage is error-checked, and it should be pretty much foolproof. I've tested it with my own router (happily living a non-internet-gateway life at 192.168.1.205) and everything looks great.

All feedback appreciated, of course.

for now..

;o)


RichE - 23.04.06 9:40 am

I'm a techy by trade so coding and scripting is more of a sideline for me, and I won't take offence to anyone helping me learn easier ways to do stuff.

I've been trying to do a seamless way to do the telnet to the router, and you've done the hrad part, so if it's ok with you, can I have a look at the source, (i'll decompile rad v3) so I can implement it into other stuff i've done.

i haven't checked it out yet but i'm gonna do so asap and give feedback, like they say "two heads are better than one..."


Riche - 23.04.06 9:50 am

feedback:

don't remove rule 31, you loose connection from the session for 31 is the rule for the telnet port, and it didn't remove rules above 31 for me, but i've edited the source rules.txt file and it works now, very nice Cor, now I'll finally finish VCCT... LOL

also the version of autoit i've been using has now been updated to the version that has TCP func's in, their cool, and so easy to use, oh and BTW thanx for the mention in the source. smiley for :D


cor - 23.04.06 11:39 am

The 31 thing is weird.

I added it because, when I was done, I noticed all rules *except* 31 had been removed, so I added it. On my 205, it makes no difference to the telnet session, which works great before and after. Very strange.

And if any of the rules were needed, why, for instance, does the web interface work afterwards? Gonna have to look into this! But for now, I could drop a note in the source, for if anyone has any troubles. Leaving it out is probably safer, then. It's the least interfering of all the rules.

Perhaps it's a firmware thing. Hmmm.
V1.8?

You're right about the TCP functions, they were a doddle. As was the 205 telnet. I had the RFCs all ready and waiting, my hex editor at the ready; none of it was required, just slam the text down the wire! smiley for :cool: The ability to do a ping with just Ping(address, timeout) is rather neat, too. So the "is the router switched on?" dialog is a great added check, almost for free.

No need to decompile, source code is in the same folder, and the distro. I've set it so decompilation is possible, too (no password) in case the .exe gets separated form the au3 at any point. These things happen. I didn't bother with a license or anything, it's open-source, and free as in beer. Help yourself!

Lastly, this morning, I added au3 and ini file highlighting to my corz.org textviewer (source for that available in /engine), so you can view the source here in all its technicolour glory! Click that strange wee icon I created for my last post.

I updated the source this morning, too, just a few extra notes and stuff, but I didn't bother to recompile and package it; the functionality is the same.

I'm glad you got into the spirit of the work, I'm always happy to teach, and even happier to learn, when I can. So now I've learned a bit of AutoIt, and it's good to have it in my toolkit, highly useful. Yes, two heads are often better than one.

By the way, in my text editor - EditPlus - I can create "user tools" where you can hit one command and have your code compiled instantly, all from the text editor. If you are doing a lot of coding work, something like this is a real timesaver. It has a similar facility for web code, translating the system file path to your local web server's path, and presenting the rendered document on screen. Probably saves me an hour a day, every day.

On the subject of code and AutoIt, I'm actually considering writing a proper automated AutoIt telnet for regular telnet servers, scriptable remote commands would be a handy thing, something I've seen loads of people searching for (yes, I began by Googling), but no one actually coming up with the goods, yet. We'll see how time goes. My preferred approach is to try and motivate one the the AutoIt guys to write a function library!

One thing that comes to mind with all this is, how easy it would be to create alternative configurations (one reason I put that part into its own function), so instead of a list of numbers which RAD processes, it could simply be a list of whole commands, which RAD sends down the wire; in other words; all the router recipes here, tweaks and what-not could be provided as automatic RAD scripts (or RAH, rather!). I'll have a wee think about that. Perhaps a script drop-box, you just drag them onto it, and ballabang! Something like that.

This is the sort of thing I'm looking at for the telnet implementation, except with a shit-load of protocol negotiation and other stuff I know almost nothing about. True, the Voyager may accept our login and commands without further ado, but a real telnet server will not. SUPPRESS WHAT?!? smiley for :eek:

/me fires up tcpdump. Hmm...
something beginning with ff smiley for :geek:

l*rz..

;o)


RichE - 23.04.06 7:05 pm

I've had some barn storming ideas, some from other apps i've wrote, like a sudo cmd prompt that displays what you've done on a GUI, to logging so you can see from the log what went wrong last. (both of which i've already got the code written for).

one thing I would put into RAD is a progress so you can see how far through the process it is, and thats also inbuilt to AutoIT.

I learnt most of my AutoIT stuff by reading the manual.

I will look into my other ideas tomorrow when i have more time.





cor - 24.04.06 12:03 pm

Yup, progress bar crossed my mind, too. But I remembered building one in another language some time ago and then classified the RAD progress bar as "non-essential"! smiley for :lol:

A built-in function, eh? Very nice! I'll have a look at that manual again - always the best way to pick up any programming language, I find, that and a project, of course.

I dunno about logging, that's perhaps over the top here, but I do think the user should at least get the current command echoed back to them. Not least for that sense that "something is happening".

I hacked together a "RAH" [link altered to new Automatic Router Scripting Engine - 27-4-06] yesterday for an "elderly" 205 user, it does no more than add a port-forwarding rule to the 205. It took less than a minute, working from the current RAD code, and once RAH has added its rule, the commands.txt file itself can be used to add any rules the user wishes.

Create an application to add a port-forwarding rule? What a neat idea! Especially for the elderly and plain stupid. AutoIt makes these kinds of things trivial, and I definitely expect to see RAH expanded, probably a "basic" version that accepts one or more command files, perhaps with a menu (created from every *.rah file it finds in the Voyager205 folder, not that I've created a .rah file extension yet, but it's a good idea)

Another thing I'd like to add to these apps is the ability to check a box and have it run completely automatically1, ie. no dialogs (a simple ini option automatic=true, or something). For something like RAD, this would be a real bonus, true click-and-go operation.

I'll have to make that "cancel" button do something, too. Currently it's just ignored, and computers ignoring users is not acceptable. I haven't looked into these things yet, but I see every break-time this week AutoIt-centered. My next task, I think, will be to put RAD's rules into an array, spit the lines out in a loop. That long list is nice to look at, but not exactly elegant!

I'll keep the RAD/RAH pot boiling here, so if you want to chuck snippets in, feel free. Probably mail is best for that. Let those ideas bubble away! And code code code!

l*rz..

;o)

references:
A dialog would have to pop up warning the user of the implications, and instructing them on how to disable this behaviour (edit/delete ini file) if they ever need to change something.



riche - 24.04.06 4:18 pm

here take a look a an app i wrote to run admin functions at the place I work, it has the tick a box senario, the sudo cmd prompt and logging, and other stuff.

as to the progress bar, it's easy progresson( yada yada yada), progressset(yada), progressoff(), it's that simple.

btw it's a biggy one

[snipped dude! mail! -ed]

note: the graphics won't show up and the server won't ping (obviously) but you get the idea.....



cor - 24.04.06 4:51 pm

Yup, I had a look at the manual, the progress will be a doddle. There's even a *choice* of progress bar types. heh.

I've been messing around with RAH just now, in fact, currently, it gathers up any *.rah scripts in the voyager folder and spits them at the router, so you can build up a collection of different tweaks. I'll likely do a menu with buttons or something, in good time.

I added cancel-recognition to it, too, and to the regular RAD, and repackaged that, uploaded the source to the usual place. I'll be messing around with them like this for a while yet, no doubt.

I snipped your BIG code, thanks for that. I'll probably do the same with all the source listings on this page, there's no need for them, really, but feel free to mail me anything you think might be useful.

l*rz..

;o)


cor - 24.04.06 5:36 pm

Aye, it was easy. I'm working on RAH, and back-porting any interesting stuff to RAD. This is the last I'll say of the code for now, except that you can always get the latest version of RAH from here.

l*rz..

;o)

[edit: link switched to the all-new "Automatic Router Scripting Engine" - 27-4-06]


vof - 27.04.06 12:28 pm

cor: link in your most recent comment is broken.

I'd stopped looking at this page some weeks ago since so little seemed to happen - just been back today - wow! thanks riche and yourself for all the interesting stuff based on AutoIt.


cor - 27.04.06 2:27 pm

Thanks vof! I meant to switch them last night (now done) but by the time I got finished I was beat! Switch them? Why?

Well, I figured that more was needed, and I got my head down and created something quite special. I call it the "Automatic Router Scripting Engine", and I definitely recommend that you click the link, and try it for yourself!

I spent a good few hours creating an installer for the thing yesterday (designed to be reused elsewhere, later, of course) which not only drops the thing into a chosen location, but sets up the icons, file associations, etc, etc, and the bottom line is, you just click one of the .arse scripts, and BALLABANG! It gets sent to the router!

If you launch it without a script on the command-line (or drag-and-drop, whatever), it processes all the scripts in its scripts folder, so you can keep a collection of all your essential tweaks there.

I've created scripts for all the existing setups, there's a basic Voyager setup script which can take a factory router and transform it into a corz-style tweaked router in one click! There's scripts for all the major p2p apps (port forwarding), etc, etc. If you have one of these viking routers, ARSE is essential, imho.

Scripts are a doddle to make, too, just router commands. You could even just switch the file extension on an exported .cfg file1. Read the notes on the Arse page for more info about these.

So, while "RAD" still exists, it has been deprecated. The need for a one-shot app for router deletions has been removed with the introduction of Arse (you just click rad.arse (or whatever it's called now), and thy will is done!)

Download, install, play, let me know what you think, report any bugs you may find, etc. Source is available2 so if you have the latest AutoIt ßeta, feel free to compile to your own specifications (in that case, you will probably want to run my installer first, so that file-associations, etc, are setup for you).

Once arse is installed, the installer also acts as an uninstaller/reinstaller, is extremely well behaved, clean, tidy, and even deletes itself when it's done.

I'm so impressed with Arse, I was seriously tempted to make it PayWare!3 smiley for ;)

for now..

;o)

ps.. If, like me, you haven't had a look at AutoIt since it was v2, I definitely urge you to take another look now. v3 is a different beast altogether, very impressive.

references:
  1. Though, of course, some of the settings from a raw exported .cfg couldn't be added to a live router, eg, ppp can't be altered while it is up, etc.
  2. Source is available for arse, not for the installer, yet, I still have a few tricks I'd like to add to that, like an Add/remove programs entry.
  3. Because living on porridge gets boring after a while!



riche - 28.04.06 4:08 pm

nice work cor, if you check out the autoit forum, you'll find an installer maker that i wrote on there, which i'm still working on, to refine certain aspects like multiple registry entries etc.




cor - 28.04.06 6:46 pm

Thanks RichE!, but I had fun with it! My installer adds multiple registry entires (remembers install options, etc), start menu items, shortcuts, explorer file-associations, right-click actions, the works! It also (once the app is installed) acts as an uninstaller/reinstaller and even deletes itself when it's done! Quite cute. smiley for :cool:  Run it!

The installer is a separate entity from ARSE, but I designed it so that it can install whatever application I need to install (a couple of prefs and bang! it's a new installer). There's still things I'd like it to do with it, use a manifest perhaps, and maybe an add/remove program entry (a doddle, but I haven't got around to that yet) as well as perhaps an archive of files, rather than the current "files" folder, and some sort of inflate facility. Though I quite like the files folder approach.

I'm hoping to "finish" it some time over the weekend, though I plan to thoroughly review the manual before attempting to code anything tricky. I spent over an hour the other day trying to figure out how to hook into Winsock.dll to get some DNS resolution, only to later realize that AutoIt has a TCPNameToIP() function! smiley for :roll: I swear, I searched loads of terms in the manual, googled, you name it! I found it later, looking for something completely different! smiley for :erm:

By the way, the installer also opens the user's *default* browser when they click its "about" link! smiley for ;)   [you can grab that from the registry]

AutoIt is quite exciting. Sure, there are some things it lacks, but so far, everything I've wanted to do has not only been possible, but simplicity itself. The documentation takes longer to write! smiley for :blank:

The ironic thing is, with the advent of ARSE, setting up and configuring the Viking routers is such a joy, I'm having way more fun with my Voyager205 than I did when I actually used it! smiley for :lol:

for now..

;o)

ps. smiley for :geek:


cor - 03.05.06 8:50 pm

an image


ARSE v1.7.1

Mmmm.

;o)


RichE - 07.05.06 8:47 pm

here's some useful code from an app i'm writing to store sql commands, it auto populates a combo box and also allows you to add new statements and auto updates the combo box list.

just thought that this may help in a future version of a GUI arse

l8r'ssmiley for ;)


cor - 07.05.06 10:33 pm

Hey thanks RichE!

But, did you spot this? /me runs to fix image location in last post (oops!)

combo box. hmm. haven't played with those yet. But if santa ever comes through with his promise of many varied routers, I'll probably use one of those babies for the "router command" tab that sleeps in the back of my mind. Currently I'm messing with dynamic tray menu items for the drag+drop script adding. Grab the latest, upped this very evening.

Though my avoidance of all things sql is well documented, I shall now peruse your code for bits to steal. Feel free to do the same with ARSE, now 1.7.5 and luvvin it luvvin it! smiley for :D

*ahem*

;o)


Leandro - 12.05.06 9:22 am

>Bicéphale - 15.12.05 11:01 pm
>
>Hi again,
>
>Bi> ...i don't see how the MoDem/Router
>Bi> PassWord can be read-back anyway.
>
>I'm having 2nd thoughts, perhaps one can read-back
>the device's PassWord using the brute-force LoadFi
>tool but it requires knowledge of the file system,
>etc. Having two PassWord entries would let an ISP
>manage the device, possibly without noticing a 2nd
>entry as long as they won't look for one, that is.
>
>You're aware the 1st page reveals the mode, right?


Sorry i took sooo long to answer , anyway the console shell is also password protects so how can read beack the password using the brute-force loadfi tool ?
What first page are you talking about ?

thanks





Paloma - 13.05.06 8:10 pm

I have a ADSL modem named Tenda TED8620R with chinese interface. I can't
understand anything and I think something will bettr if I upgrade FW to ENglish Version.
I've tried with viking-firmware+cfg_backup+upg+restore_utility.zip here. After that, my modem cannot work normally, but still shine the link-led., still have ADSL signal but cannot register with ISP.
Now all I need is CHinese FW of this modem. I don't have enought $ for new.
CAn anyone come with help?



Jase - 14.05.06 1:07 pm

REsmiley for :D-Link 302G Gen II

Charbless: no idea if it does or doest.... how and where do i tell? email is possles@hotmail.com .....


cor - 15.05.06 10:23 am

Paloma, you might want to try the rta firmware, check out the public archives, file called "rta100plus_2.1.040827a1.zip".

;o)



mub - 29.05.06 7:17 pm

Cor,

I just had a thought about an easy way of removing those rules the 205 automatically adds when it boots.

Can the delete command be used in a config file? If it can I'm guessing the router would boot up with those rules in place but when it loads the config the delete commands would remove them.

Is that do able?

mub - smiley for :)

EDIT: I'm not keen on testing this out myself uncase it renders the router useless and I'm assuming you've tried this at some point anyway.


Bicéphale - 31.05.06 5:20 am

Hi Leandro,

Le> ...i wonder if there's any way to reset the
Le> password or something...
Bi> ...i don't see how the MoDem/Router PassWord
Bi> can be read-back...  ...perhaps one can read-
Bi> back the device's PassWord using the brute-
Bi> force LoadFi tool...


I forgot what your context was when i made mention
of the 1st page but mine displays the mode - which
was set to "Routing And Bridging" in this example.

As for LoadFi, a picture is worth a thousand words
says the adage so i suggest you pay a visit to the
"public archives"...  Enter the "emergency" folder
then the "emergency direct flash_files" directory,
you'll find that the 8th picture talks for itself.

If by chance your DSL device, whatever it is, does
happen to be close enough to the Huawei product to
be compatible with what is called the LoadFi FLASH
maintenance tool, euh...  it may be safe to assume
that you're able to capture the whole data content
from it.  I think it's likely to be Linux-like and
if that's true then a knowledgeable cracker should
find a way to reset the password (if not read it).


smiley for :cool:


Bicéphale - 23.09.07 11:18 am

Hi there, it's a pleasure to see this site back on line!

smiley for :D


cor - 23.09.07 2:52 pm

Aha! Good to see you, dude!

About the site, Agreed!

I'm gonna leave this routers area now. I haven't even looked at a voyager router for over a year, after moving; very happily; to an IPCop-based firewall solution. I got a free laptop with a broken screen - no problem, no screen required - and never looked back.

I made a special shelf for it under my workbench, and it just sits there unattended for months at a time, doing its thing. Very impressive; and because it's Linux, it's 100% free and customizable. Some new protocol evolves, no problem. Need to add a wireless network, no problem. Etc.

Once we can take consumer devices like these routers, and throw on the operating system of our choice, then we'll have something to really talk about. Until then, I'll keep this place hanging around, in the hope that we can at least give these hunks of non-bio-degradable materials some kind of after-life.

I also have some other voyager firmwares that have arrived in the mail over the last year, but most of the sources are unconfirmed, and there's duplication, and much sorting to do before they see the light of day. Needless to say, this isn't at the top of my "to do" list [now done - see above -ed].

By the way, the "voyager suck" (mock voyager interface) is back up, and seems to be working away, though I haven't tested it much; and I've done a fair bit of mod_rewriting and such on-site since getting it working, but fingers crossed…

Anyways, back to work again, though at a definite "Sunday pace".
I have some forum admins to bug.

for now..

;o)


Posting here is disabled at this time.

Welcome to corz.org!

I'm always messing around with the back-end.. See a bug? Wait a minute and try again. Still see a bug? Mail Me!