home 
wiki
wiki
Spelling: WGT634U
* Vitals [1]
* Official Details [2]
* Pictures [3]
* OEM Firmware [4]
* Alternate Firmware [5]
* Support knowledgebase and firmware download [6]
* Misc Notes & Links [7]
* Modifications / Addon\'s [8]
* Discussion [9]
* Firmware hacking [10]
VITALS
* MANUFACTURER : Netgear
* MODEL : WGT634U
* TYPE : Router
* EXTERNAL ANTENNA JACK : xxxx (RP-SMA RP-TNC )
* USB PORTS : 1 x USB 2.0
* POWER : (eg 5V)
* WLAN CHIPSET : Atheros Mini-PCI
* TRANSMIT POWER :
* TBAmW default
* TBAmW max
* RECIEVE SENSITIVITY :
* -TBAdB @ 1Mbps
* -TBAdB @ 11Mbps
* AVAILABLE NEW : Yes
* AVERAGE PRICE : $219 new at Harris, ~$78 refurbished on EBay
* VITALS LAST UPDATED : 01/08/05
OFFICIAL DETAILS
Same old bla bla...
* 200MHz MIPS CPU: Broadcom BCM95365R
* 802.11g Atheros mini-PCI radio, no antenna connectors
* USB 2.0 host controller
* 32MB RAM
* 8MB Flash
Netgear product page [11]
PICTURES
OEM FIRMWARE
The OEM firmware is Linux kernel 2.4.20 version of LEAF [12]. This
uses the Linux Router Project *.lrp files.
See link under support
ALTERNATE FIRMWARE
Linux 2.6 Kernel [13]
openwrt is stil a WIP.
The Linux distribution on the box is already easily accessible.
SUPPORT KNOWLEDGEBASE AND FIRMWARE DOWNLOAD
Support [14]
MISC NOTES & LINKS
* FCC info [15]
* MIT Roofnet project [16]
* More Hacking [17]
* original hack data [18]
* Another hack log [19]
* openwrt forum [20]
MODIFICATIONS / ADDON\'S
DISCUSSION
Just started looking at this device. It's interesting for a number of
reasons:
* Has MINI-PCI using an open source driver
* Has USB interface
FIRMWARE HACKING
Kernel starts at 0x00000000 and a JFFS2 Filesystem at 0x00140000
JFFS2 starts with magic 0x1895
extract the filesystem:
dd if=wgt634u_1_4_1_9.img bs=1 > rootfs.jffs2
mount it:
To mount a jffs2 filesystem you need to use the mtdram device. You
may also need to creat the device to mount ( mknod /dev/mtdblock0 b 31
0 )
modprobe mtdcore modprobe mtdpart modprobe mtdram totalsize=32768
erasesize=256 modprobe jffs2 dd if=rootfs2 of=/dev/mtdblock0 mount -t
jffs2 /dev/mtdblock0 ./mnt
Inside is a bunch of lrp packages. On boot the device creates a ramfs
then unpacks the .lrp packages into it. A .lrp is a simple package
inside a tar.gz archive.
+++
[dna@koen mnt]$ ls
boa.lrp dnsmasq.lrp hotplug.lrp modules.lrp pptp.lrp shorwall.lrp
zebra.lrp
bpalogin.lrp etc.lrp iptables.lrp nfqueue.lrp proftpd.lrp
smtpclient.lrp
bridge.lrp ezipupd.lrp linuxigd.lrp ntpdate.lrp root.lrp
telnetd.lrp
dhcpcd.lrp firmware.version lrpkg.cfg ppp.lrp rp-pppoe.lrp
wgt634u-gui.lrp
dhcpd.lrp gpio.lrp mawk.lrp pppoe.lrp samba.lrp wireless-tools.lrp
+++
Links:
------
[1] http://melbournewireless.org.au/#vitals
[2] http://melbournewireless.org.au/#official_details
[3] http://melbournewireless.org.au/#pictures
[4] http://melbournewireless.org.au/#oem_firmware
[5] http://melbournewireless.org.au/#alternate_firmware
[6]
http://melbournewireless.org.au/#support_knowledgebase_and_firmware_download
[7] http://melbournewireless.org.au/#misc_notes___links
[8] http://melbournewireless.org.au/#modifications___addon_s
[9] http://melbournewireless.org.au/#discussion
[10] http://melbournewireless.org.au/#firmware_hacking
[11] http://www.netgear.com/products/details/WGT634U.php
[12] http://leaf.sourceforge.net/index.php?menu=1
[13]
http://www.nomis52.net/?section=projects§2=netgear&page=about
[14] http://www.netgear.com/products/details/WGT634U.php
[15]
https://gullfoss2.fcc.gov/prod/oet/cf/eas/reports/ViewExhibitReport.cfm?mode=Exhibits&RequestTimeout=500&calledFromFrame=N&application_id=631719&fcc_id=\'PY3WGT634U\'
[16] http://pdos.csail.mit.edu/roofnet/doku.php?id=wgt634u
[17]
http://sarwiki.informatik.hu-berlin.de/Hacking_the_Netgear_wgt634u
[18] http://wifi.rulez.org/wgt634u/
[19] http://router.4th.be/
[20] http://forum.openwrt.org/viewtopic.php?id=33
[EditText] [Spelling] [Current] [Raw] [Code] [Diff] [Subscribe] [VersionHistory] [Revert] [Delete] [RecentChanges]