Jkx@home » AP

Fonera SD Card Hack

admin — Fri, 18 May 2007 17:22:33 +0000

I read on several websites, that some people managed to wire a SD Card (or a MMC) to a Fonera access point. After a little googling, I discover this can be done easily, so I decided to test.. but I run into one issue so I decided to describe the process here.

Here the finished result:

Let’s give it a try:

Solder the SD Card

The first step, is to locate the SW pins (near the antenna).. simply solder some wires like this:

SD Car      -----    Fonera
DO  (pin 7)          SW1
CLK (pin 5)          SW2
DI  (pin 2)          SW5
CS  (pin 1)          SW6
Gnd (pin 3)          Gnd
Vcc (pin 4)          Vcc

Here you can see the SD Card pinouts

You can solder the VCC, and Gnd on the serial pins.

Unsolder the Caps

In my first tests, I discovered the SD card is detected, so I checked the signals. And discover the clk isn’t really clear.. So I decided to remove the capacitor on the SPI bus. (C142, C143, C144, C145)

Install software and test

Next we need to install the kernel module on OpenWRT. You can find it on the Phrozen website . Simply ipkg install the file and it should be ok. Now, let’s try: insert a SD Card, and reboot, you should see something like this in your log.

Jan  1 00:00:49 OpenWrt user.warn kernel: mmc : MMC Driver for Fonera Version 2.5 (050507) -- '2B|!2B' (john@phrozen.org)
Jan  1 00:00:49 OpenWrt user.warn kernel: mmc : Card Found
Jan  1 00:00:49 OpenWrt user.warn kernel: mmc : card in op mode
Jan  1 00:00:49 OpenWrt user.warn kernel: mmc : SIZE : 241, nMUL : 6, COUNT : 1932, NAME : 256MB
Jan  1 00:00:49 OpenWrt user.warn kernel: mmc : Card Initialised
Jan  1 00:00:49 OpenWrt user.warn kernel: mmc : The inserted card has a capacity of 253231104 Bytes
Jan  1 00:00:49 OpenWrt user.warn kernel: mmc : adding disk
Jan  1 00:00:49 OpenWrt user.info kernel:  mmc1
Jan  1 00:00:49 OpenWrt user.warn kernel: mmc : Card was Found

So now you can mount it:

mount /dev/mmc0 /mnt

This stuff, is working really well, I managed to have around 150Ko/s (reading) which is far enough for my needs. The only issue right now, is that you need to carefully umount the card before removing it, otherwise the fonera will crash.

Enjoy Fonera ??

Fonera motherboard pics, and more

admin — Sun, 07 Jan 2007 21:41:10 +0000

Here some photos (hi-res) of the Fonera, the Fon routeur. This little box has:

8Mo
Atheros CPU + Wifi

Here you can see the AR2315 CPU from Atheros. One stuff really funny, they decide to use exactly the same layout as the Atheros design (look at the pic closely). You can see the 16Mb Ram on the left. Just near the serial port, and the 14 pins header is a JTag. We can see the antenna, the network plug, and the power supply on the left.

You can find hi-res pics here

Here, you can the 8Mo serial flash made by ST. And the Altima network chip.

This looks like a great hardware to hack… some, and have a OpenWRT port. But it seems to have a really limited free GPIO and the BGA package doesn’t help :(

Arpwatch on WRT54G

admin — Thu, 12 May 2005 15:22:32 +0000

While running my access point in public mode, i want to know when people log in. This can be a good way to find intruders too, but not my purpose.
I decided to run arpwatch on my linksys access point, but this is not so easy ..

1) Mail

First you need to have sendmail on the WRT. So install mini_sendmail. Add a file /usr/sbin/sendmail that contains:

#!/bin/sh
/usr/sbin/mini_sendmail -t -sIP_of_your_mail_relay

Check that it ‘s working..

2) Arpwatch

Run arpwatch on the WRT throught this script:

#!/bin/sh
IFNAME=$(nvram get wifi_ifname)

case $1 in
start)
touch /tmp/arpwatch.dat
arpwatch -f /tmp/arpwatch.dat -i $IFNAME
;;
stop)
killall arpwatch
;;
*)
echo "usage: $0 (start|stop)"
exit 1
esac

exit $?

3) Check

Wait a bit, connect to your wifi, look at your email on the gateway. (root@gw) you will see something like this:

From: root@openwrt.local.net
Subject: new station

hostname: 
ip address: 192.168.2.1
ethernet address: 0:f:66:c7:b5:b1
ethernet vendor: 
timestamp: Tuesday, January 18, 2000 14:34:01 +0000

Enjoy :)

Have fun with a Gkrellm on a WRT54G ? Geeky no ..:)

admin — Tue, 01 Feb 2005 12:08:02 +0000

Ok a little screenshot is perhaps better than a long talk.

Yes, I use gkrellm to monitor my WRT (mainly the bandwith, CPU Load .. and other stuffs). This is pretty easy to use, and friendly no ?

update: I miss the URL: http://chriscarey.us/software/gkrellm/wrt54g/

Ntp on a WRT54

admin — Mon, 03 Jan 2005 21:35:26 +0000

Ok, everybody know ntp. But how can i use it on a linksys WRT54 to set up clock once.. without a decent man page ?

ntpclient -s -c 1 -h local-ntp-server.domain

OpenWRT Admin Tool in PHP

admin — Thu, 23 Dec 2004 14:09:25 +0000

In a recent post, i described the build of Python for a WRT. I didn’t manage to finish this hack. So I decided to use a PHP interface. Here the first screenshot

Alternative Firmware for the WRT54GS

admin — Sat, 20 Nov 2004 12:10:51 +0000

Ok, yes, I bought a new WRT54GS, this works quite fine. I ‘m able to do what i want with that stuff. I will explain in a future post how to use this stuff in a secure way without using WEP.

Here is the list of firmware to use on this little box:

The Official one (pretty nice, but doesn’t allow telnet over device )
Sveasoft (the infamous weaked GPL one)
EWRT (sveasoft + nocat -> hotspot)
Wifi-box (hum not tested yet)
openWRT (minimal setup without http)
MeshBoxKit (openWRT + OLSR, special for Meshing)

Look at Seattle wiki on WRT for more infos. Do you use another one ?