DSM-G600, DNS-3xx and NSA-220 Hack Forum

I am having the same issue as SystemR89 except that I am using Dlink-1.02us firmware.

I followed the gentoo chroot howto and it is working fine.

I installed to sda3.
/etc/conf.d/net is setup correctly.
I ran "rc-update add dropbear default" and "rc-update add net.eth0 default".

I didn't compile my own kernel, I'm using the vmlinux from a couple posts up.

When I run "sync;insmod /mnt/HD_a2/loader.o kernel=/mnt/HD_a2/vmlinux" I get the "Using /mnt/HD_a2/loader.o" message. The box appears to be doing something (the lights are going and I can hear the hard drive being accessed). However my telnet session drops I can no longer ping the box on the static IP I had set up for it.

I checked my router's DHCP table but no sign of the device in there.

I waited for about 10 minutes just to make sure it was finished booting but it never lets me do anything.

I also tried adding the following lines to gentoos /etc/conf.d/local.start

mount /dev/sda2 /mnt/nas
dmesg > /var/log/dmesg.log
dmesg > /mnt/nas/gentoo-dmesg.txt

But after rebooting the box neither of those files were created.

I'm at a loss to understand why this won't work when others have gotten it going with no problems.

Any suggestions would be helpful.

~Scuzzell

Last edited by scuzzell (2007-10-31 04:04:07)

Thanks for the the reply.

The filesystem is clean, and I did update e2fsprogs. I made a couple slight changes to fstab over what was in the gentoo chroot howto. I changed /dev/sda3 to be mounted as etx2 as that is what filesystem I created on it. I also added a line to mount /dev/sda2 automatically into /mnt/nas.

/dev/sda3     /                 ext2        noatime                 0 0
/dev/sda1     none           swap       sw                         0 0
/dev/sda2     /mnt/nas     ext2        defaults                  0 0
none            /proc           proc        defaults                  0 0
none            /dev/shm     tmpfs      defaults                  0 0
none            /dev/pts      devpts     gid=5,mode=620     0 0

Really all I am trying to do is remove the bond on the nics and create a bridge from the WLAN to the LAN. I figured it would be easier to do this way and get full control over the system than it would be to mess with the stock boot scripts. When I couldn't get this working I did a bit of messing around on the standard installation.

I created a script called brdown.sh that I run manually from the busybox telnetd session which brings down br0, detaches the two interfaces, unloads the bonding module, resets the mac on the wireless card to the mac printed on the sticker, turns arp back on on both eth0 and ra0, and brings the interfaces back up each with their own ip.

The script does what it's suppose to do, but if run a mac address scanner from my pc it still shows the same mac for both ips. Also if I bring down ra0, I can still ping it from my pc.

#!/bin/sh

ifconfig br0 inet 0.0.0.0
ifconfig br0 hw ether 00:00:00:00:00:01
ifconfig br0 down

ifenslave -d br0 ra0 eth0

rmmod bonding >> /mnt/HD_a2/brdown.log
sync;insmod /sys/crfs/bridge/bridge.o >> /mnt/HD_a2/brdown.log #I haven't even got to a point where I can use this yet

ifconfig eth0 inet 192.168.1.9
ifconfig eth0 arp

ifconfig ra0 hw ether 00:13:D3:6E:49:EE
ifconfig ra0 inet 192.168.1.10
ifconfig ra0 arp

ifconfig eth0 up
ifconfig ra0 up

ifconfig >> /mnt/HD_a2/brdown.log

This is driving me nuts, it should be working.

I suppose it would be possible to remove the bonding calls in rc.sh directly, but that would involve rebuilding the firmware and I don't know if I'm ready to tackle that.

~Scuzzell

Oh... Great...

I tried to get Debian working first (and would much rather use it than Gentoo), but I got Segmentation faults trying to build the filesystem with debootstrap as in this post http://dns323.kood.org/forum/p3688-2007 … tml#p3688.

Looks like I'm out of luck here. I don't have a serial port on this thing so I'm hesitant to build my own firmware with an rc.sh that messes with the network settings. If I get locked out of it then I'm done for good.

It may be a bit much to ask, but would you be willing to build a firmware image with this modified rc.sh and test it for me? The only changes are that I commented out every line that has to do with the nic bonding and uncommented 2 lines that set the IPs of the nics to 0.0.0.0 and changed them to 192.168.1.10 and 192.168.1.11 for eth0 and ra0 respectively.

~Scuzzell

Last edited by scuzzell (2007-11-01 16:17:24)

Sala, I can't imagine you don't have it around you anymore.    Give us hope.

I've a problem with RAM with gentoo boot (with loader.o)
Opening top it shows: Mem:     14040k total,     9228k used,     4812k free,     1000k buffers

but with dlink firmware Mem is bigger (~29000k). how I can solve this problem?

This is the dmesg output:

localhost ~ # dmesg
Memory BAT mapping: BAT2=16Mb, BAT3=0Mb, residual: 0Mb
Total memory is 16777216.
CPU = 82xx
Linux version 2.4.21-pre4 (root@serv) (gcc version 2.95.4 20010319 (prerelease)) #480 Mon Feb 19 17:19:05 EET 2007
OpenPIC_Addr in mpc10x_bridge_init function is fc040000
Motorola SPS Sandpoint Test Platform
Port by MontaVista Software, Inc. (source@mvista.com)
On node 0 totalpages: 4096
zone(0): 4096 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: root=/dev/sda3 console=ttyS0,9600
OpenPIC Version 1.2 (1 CPUs and 123 IRQ sources) at fc040000
Calibrating delay loop... 133.12 BogoMIPS
Memory: 13984k available (1564k kernel code, 584k data, 56k init, 0k highmem)
Dentry cache hash table entries: 2048 (order: 2, 16384 bytes)
Inode cache hash table entries: 1024 (order: 1, 8192 bytes)
Mount cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer-cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 4096 (order: 2, 16384 bytes)
POSIX conformance testing by UNIFIX
PCI: Probing PCI hardware
PCI fixup irq: (PCI device 1814:0201) got 0
PCI fixup irq: (PCI device 1033:0035) got 1
PCI fixup irq: (PCI device 1033:0035) got -1
PCI fixup irq: (PCI device 1033:00e0) got 2
PCI fixup irq: (PCI device 13f0:1023) got 3
PCI fixup irq: (PCI device 1191:0008) got 4
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
Initializing RT netlink socket
Starting kswapd
Journalled Block Device driver loaded
devfs: v1.12c (20020818) Richard Gooch (rgooch@atnf.csiro.au)
devfs: boot_options: 0x1
udf: registering filesystem
pty: 256 Unix98 ptys configured
Serial driver version 5.05c (2001-07-08) with MANY_PORTS SERIAL_PCI enabled
ttyS00 at 0xfc004500 (IOMEM)(irq = 121) is a ST16650
ttyS01 at 0xfc004600 (IOMEM)(irq = 122) is a ST16650
loop: loaded (max 8 devices)
ipg : v0.36 10/31/01  Written by Craig Rich, www.sundanceti.com
IC PLUS IP1000 1000/100/10 based NIC found.
Ethernet device registered as: eth0
IPG module loaded.
SCSI subsystem driver Revision: 1.00
atp86x_detect:
   ACARD ATP-865 PCI ATA133 2-Channels Host Adapter: 0    IO:FEBFFEF8, IRQ:4.
         ID:  0  QUANTUM FIREBALLP AS20.5         UDMA5 (100)
scsi0 : ACARD ATP86X PCI ATA133 Adapter Driver Ver: 0.78  Date: 2004/01/15

  Vendor: QUANTUM   Model: FIREBALLP AS20.5  Rev:
  Type:   Direct-Access                      ANSI SCSI revision: 02
Attached scsi disk sda at scsi0, channel 0, id 0, lun 0
SCSI device sda: 40132502 512-byte hdwr sectors (10274 MB)
Partition check:
p1 p2 p3
USI AMD/FUJITSU flash: probing 8-bit flash bus
Amd/Fujitsu Extended Query Table at 0x0040
number of CFI chips: 1
cfi_cmdset_0002: Disabling fast programming due to code brokenness.
Creating 5 MTD partitions on "USI Intel flash":
0x00000000-0x00010000 : "Linux mtd1"
0x00010000-0x00020000 : "Linux mtd2"
0x00020000-0x00300000 : "Linux Ramdisk"
0x00300000-0x00310000 : "U-BOOT BOOT LOADER"
0x00310000-0x00400000 : "Linux Kernel"
usb.c: registered new driver hub
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 1024 bind 1024)
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
EXT3-fs: INFO: recovery required on readonly filesystem.
EXT3-fs: write access will be enabled during recovery.
kjournald starting.  Commit interval 5 seconds
EXT3-fs: recovery complete.
EXT3-fs: mounted filesystem with ordered data mode.
VFS: Mounted root (ext3 filesystem) readonly.
Mounted devfs on /dev
Freeing unused kernel memory: 56k init
EXT3 FS 2.4-0.9.19, 19 August 2002 on sd(8,3), internal journal
Adding Swap: 192740k swap-space (priority -1)
mac = 00:13:46:d9:d7:75
Link speed = undefined!
Link speed = undefined!
Link speed = 100Mbps.
setting full duplex, TX flow control, RX flow control.
localhost ~ #

sala wrote:

Look http://dns323.kood.org/dsmg600/howto:loader_o
There is a patch for this problem.

Can you share a patched kernel?

Try to patch it manually. It is very easy. Only two lines are affected.
Just remove lines with - at the begnning of the line and add lines with + at the beginning.
-    /* return mpc10x_get_mem_size(MPC10X_MEM_MAP_B); */
-    return 16*1024*1024;
+    return mpc10x_get_mem_size(MPC10X_MEM_MAP_B);
+    /*return 16*1024*1024;*/

*bump*

Btw, has anyone tested this FW on a Conceptronic CH3WNAS? I read that these devices are almost similar, but is this also applicable to the FW?

Hi Sala,

I have the problem to copy large files with samba

I want to apply this patch to your firmware source.

http://dns323.kood.org/forum/t233-2GB%2 … side!.html

So i have downloaded from svn:

svn checkout http://dsmg600.googlecode.com/svn/trunk/ dsmg600

and i tried to compile the source from my ubuntu pc

But i receive this error:

mkdir -p firmwaredump/fs
mount -o loop firmwaredump/ramdisk.ext2 firmwaredump/fs
mount: according to mtab /home/ramponis/tags/dsmg600/firmwaredump/ramdisk.ext2 is already mounted on firmwaredump/fs as loop
make: *** [firmwaredump/.worked] Error 32

Can you help me... or if you can add the samba pacth to your firmware, compile and post it

After some compilation time...

I receive this other error:

/home/ramponis/tags/dsmg600/uclibc-toolchain-src-20040609/gcc-3.3.x/toolchain_build_powerpc/gcc-3.3.3/gcc/collect2.c: In function ‘notice’:
/home/ramponis/tags/dsmg600/uclibc-toolchain-src-20040609/gcc-3.3.x/toolchain_build_powerpc/gcc-3.3.3/gcc/collect2.c:362: warning: traditional C rejects ISO C style function definitions
/home/ramponis/tags/dsmg600/uclibc-toolchain-src-20040609/gcc-3.3.x/toolchain_build_powerpc/gcc-3.3.3/gcc/collect2.c: In function ‘fatal_perror’:
/home/ramponis/tags/dsmg600/uclibc-toolchain-src-20040609/gcc-3.3.x/toolchain_build_powerpc/gcc-3.3.3/gcc/collect2.c:374: warning: traditional C rejects ISO C style function definitions
/home/ramponis/tags/dsmg600/uclibc-toolchain-src-20040609/gcc-3.3.x/toolchain_build_powerpc/gcc-3.3.3/gcc/collect2.c: In function ‘fatal’:
/home/ramponis/tags/dsmg600/uclibc-toolchain-src-20040609/gcc-3.3.x/toolchain_build_powerpc/gcc-3.3.3/gcc/collect2.c:392: warning: traditional C rejects ISO C style function definitions
/home/ramponis/tags/dsmg600/uclibc-toolchain-src-20040609/gcc-3.3.x/toolchain_build_powerpc/gcc-3.3.3/gcc/collect2.c: In function ‘error’:
/home/ramponis/tags/dsmg600/uclibc-toolchain-src-20040609/gcc-3.3.x/toolchain_build_powerpc/gcc-3.3.3/gcc/collect2.c:408: warning: traditional C rejects ISO C style function definitions
/home/ramponis/tags/dsmg600/uclibc-toolchain-src-20040609/gcc-3.3.x/toolchain_build_powerpc/gcc-3.3.3/gcc/collect2.c: In function ‘dump_file’:
/home/ramponis/tags/dsmg600/uclibc-toolchain-src-20040609/gcc-3.3.x/toolchain_build_powerpc/gcc-3.3.3/gcc/collect2.c:515: warning: comparison of unsigned expression < 0 is always false
In file included from /usr/include/fcntl.h:205,
                 from /home/ramponis/tags/dsmg600/uclibc-toolchain-src-20040609/gcc-3.3.x/toolchain_build_powerpc/gcc-3.3.3/gcc/system.h:208,
                 from /home/ramponis/tags/dsmg600/uclibc-toolchain-src-20040609/gcc-3.3.x/toolchain_build_powerpc/gcc-3.3.3/gcc/collect2.c:30:
In function ‘open’,
    inlined from ‘collect_execute’ at /home/ramponis/tags/dsmg600/uclibc-toolchain-src-20040609/gcc-3.3.x/toolchain_build_powerpc/gcc-3.3.3/gcc/collect2.c:1575:
/usr/include/bits/fcntl2.h:51: error: call to ‘__open_missing_mode’ declared with attribute error: open with O_CREAT in second argument needs 3 arguments
make[3]: *** [collect2.o] Error 1
make[3]: Leaving directory `/home/ramponis/tags/dsmg600/uclibc-toolchain-src-20040609/gcc-3.3.x/toolchain_build_powerpc/gcc-3.3-initial/gcc'
make[2]: *** [all-gcc] Error 2
make[2]: Leaving directory `/home/ramponis/tags/dsmg600/uclibc-toolchain-src-20040609/gcc-3.3.x/toolchain_build_powerpc/gcc-3.3-initial'
make[1]: *** [/home/ramponis/tags/dsmg600/uclibc-toolchain-src-20040609/gcc-3.3.x/toolchain_build_powerpc/gcc-3.3-initial/.compiled] Error 2
make[1]: Leaving directory `/home/ramponis/tags/dsmg600/uclibc-toolchain-src-20040609/gcc-3.3.x'
make: *** [uclibc-toolchain-src-20040609/gcc-3.3.x/.built] Error 2

This is not a problem.
I can sold the serial.
I have done this work an a lot of device.

My problem is the toolchain... i'm not able to finish the compilation.
So i cannot crosscompile samba source and/or the complete firmware.

Can you help me?

Thank you