Kitz ADSL Broadband Information
adsl spacer  
Support this site
Home Broadband ISPs Tech Routers Wiki Forum
 
     
   Compare ISP   Rate your ISP
 
Please login or register.

Login with username, password and session length
Advanced search  

News:

Pages: 1 [2]

Author Topic: Notes on the xdslcmd in Broadcom based modems  (Read 28276 times)

burakkucat

  • Global Moderator
  • Senior Kitizen
  • *
  • Posts: 19228
  • Over the Rainbow
    • The ELRepo Project
Huawei HG612. Hidden Options of the Broadcom xdslcmd Utility.
« Reply #15 on: March 24, 2016, 05:06:33 PM »

Assuming one has a Huawei HG612 available (a HG612 that has been unlocked by flashing it with the relevant firmware image [1]) then it is possible to access the device via the LAN2 port, either by ssh or by telnet. From the initial ATP> prompt one can then invoke a Busybox shell.

The command that is of most use, upon which all the monitoring software depends, is the Broadcom xdslcmd utility which interfaces with the Broadcom proprietary driver. The xdslcmd command, when asked, will display its mode of usage --

Code: [Select]
# xdslcmd --help
Usage: xdslcmd start [--up] [--mod <a|d|l|t|2|p|e|m|v>] [--lpair <(i)nner|(o)uter>]
           [--trellis <on|off>] [--snr <snrQ4>] [--bitswap <on|off>] [--sesdrop <on|off>]
           [--sra <on|off>] [--CoMinMgn <on|off>] [--i24k <on|off>] [--phyReXmt <0xBitMap-UsDs>]
           [--TpsTc <0xBitMap-AvPvAaPa>] [--monitorTone <on|off>]
           [--profile <0x00 - 0xFF>|<"8a |8b |8c |8d |12a |12b |17a">] [--us0 <on|off>]
           [--dynamicD <on|off>] [--dynamicF <on|off>] [--SOS <on|off>]
           [--forceJ43 <on|off>] [--toggleJ43B43 <on|off>]
       xdslcmd stop
       xdslcmd connection [--up] [--down] [--loopback] [--reverb]
           [--medley] [--noretrain] [--L3] [--diagmode] [--L0]
           [--tones] [--normal] [--freezeReverb] [--freezeMedley]
       xdslcmd configure [--mod <a|d|l|t|2|p|e|m|v>] [--lpair <(i)nner|(o)uter>]
           [--trellis <on|off>] [--snr <snrQ4>] [--bitswap <on|off>] [--sesdrop <on|off>]
           [--sra <on|off>] [--CoMinMgn <on|off>] [--i24k <on|off>] [--phyReXmt <0xBitMap-UsDs>]
           [--TpsTc <0xBitMap-AvPvAaPa>] [--monitorTone <on|off>]
           [--profile <0x00 - 0xFF>|<"8a |8b |8c |8d |12a |12b |17a">] [--us0 <on|off>]
           [--dynamicD <on|off>] [--dynamicF <on|off>] [--SOS <on|off>]
           [--forceJ43 <on|off>] [--toggleJ43B43 <on|off>]
       xdslcmd bert [--start <#seconds>] [--stop] [--show]
       xdslcmd afelb [--time <sec>] [--tones] [--signal <1/2/8>]
       xdslcmd qlnmntr [--time <sec>] [--freq <msec>]
       xdslcmd inm [--start <BB_THRESH 10*dB> <INMIATO> <INMIATS>] [--stop] [--show]
       xdslcmd snrclamp [--shape <shapeId>] [--bpshape [bpIndex-bpLevel,]]
       xdslcmd diag [--logstart <nBytes>] [--logpause] [--logstop] [--loguntilbufferfull <nBytes>]
           [--loguntilretrain <nBytes>]
       xdslcmd info [--state] [--show] [--stats] [--SNR] [--QLN] [--Hlog] [--Hlin] [--HlinS] [--Bits]
           [--pbParams] [--linediag] [--linediag1] [--reset] [--vendor] [--cfg]
       xdslcmd profile [--show] [--save] [--restore]
       xdslcmd --version
       xdslcmd --help
#

That looks to be a full and complete description of the xdslcmd utility's usage. Or is it? :hmm:

Quite recently it has been shown that the info sub-command of the xdslcmd utility can take a vectoring flag and then display vectoring information relating to a VDSL2 circuit. [2][3]

For example --

Code: [Select]
# xdslcmd info --vectoring
xdslcmd: ADSL driver and PHY status
Status: Showtime
Retrain Reason:   0
Last initialization procedure status:   0
Max:   Upstream rate = 4847 Kbps, Downstream rate = 21648 Kbps
Bearer:   0, Upstream rate = 4789 Kbps, Downstream rate = 22059 Kbps
Bearer:   1, Upstream rate = 0 Kbps, Downstream rate = 0 Kbps
Vectoring state: 5
VCE MAC Address: 0:0:0:0:0:0
Total error samples Ethernet pkts sent: 0
Total error samples Ethernet pkts discarded: 0
Total error samples statuses sent: 0
Total error samples statuses discarded: 0
#

Very recently, a discussion took place between the occupants of the Eagle's Nest and The Cattery when it was agreed that attempts should be made to discover any other latent flags of the xdslcmd utility's sub-commands.

A quick look was taken at byte level of the contents of the most recent firmware image and only the following (partial) strings were seen --

Code: [Select]
Broadcom Corporatio
ver. 2.0
6368
96368MVWG
3551453
3217096960
2756608
3219853568
794845
EchoLife_
V100R001C01B030SP08-1407000358
qshs

This forum has many members with a wide range of abilities . . . I wonder if someone would be willing to dismantle the latest firmware image and then look into the binary files that are the Broadcom xDSL driver & the xdslcmd utility, please?

Knowing the help output that is displayed by the utility may then give clues as to which part of the binary file that should be given close scrutiny. Who knows what might be discovered?



[1] Acknowledging the work of Asbokid in developing the procedure & creating the initial unlocked firmware image and Wolfy's later work in creating the more recent unlocked firmware images.
[2] http://forum.kitz.co.uk/index.php/topic,14361.msg315738.html#msg315738
[3] http://forum.kitz.co.uk/index.php/topic,15593.msg315751.html#msg315751
Logged
:cat:  100% Linux and, previously, Unix. Co-founder of the ELRepo Project.

Please consider making a donation to support the running of this site.

ejs

  • Kitizen
  • ****
  • Posts: 1299
Re: Huawei HG612. Hidden Options of the Broadcom xdslcmd Utility.
« Reply #16 on: March 24, 2016, 06:31:00 PM »

Looking at the strings in xdslcmd, there's probably:
--phycfg
--mcfg
--lcfg
They probably are used with the configure sub-command, but it might be impossible to determine what they are for, especially if they just take some hexadecimal digits as input.

Possibly there's xdslcmd info --toneGroupObjects

xdslcmd diag
--dumpBuf
--dbgcmd



Looking in the driver, I'm not sure how much will be interesting. There appears to be some sort of provision for the ability to disable bitswap and VN (virtual noise?) when vectoring is in use.
Quote
DRV VECT(VECTORMGR_SET_MODE_CMD_ID): disableBS=0x%x disableVN=0x%x, MSG: disableBS=0x%x disableVN=0x%x direction=%d
There's also something similar about that in the Broadcom AdslMibDef.h file included with the source code for some devices.
Logged

tickmike

  • Kitizen
  • ****
  • Posts: 3054
  • Yes Another Penguin !. :)
    • Free Download from.
Re: Huawei HG612. Hidden Options of the Broadcom xdslcmd Utility.
« Reply #17 on: April 11, 2017, 02:43:10 PM »

Warning: this topic has not been posted in for at least 120 days.
Unless you're sure you want to reply, please consider starting a new topic.


This is a very useful post, just asking if any more commands have been discovered in the last year ?.

Edit, Mods please consider a 'Sticky' for this post please.
Second Edit Thank you.
« Last Edit: April 11, 2017, 09:51:05 PM by tickmike »
Logged
I RECOMMEND TRYING / USING PCLinuxOS (www.pclinuxos.com) .
I have a set of 8 fixed IP's From my Eclipse isp.
BT ADSL2 line>HG612 set as a Modem, Bridge, WAN not Bound to LAN1 or 2 >Smoothwall (Hardware Firewall and routing) > Ethernet LAN, DMZ,WiFI LAN and Spare LAN .
DSLstats LAN2  linked Ethernet

tickmike

  • Kitizen
  • ****
  • Posts: 3054
  • Yes Another Penguin !. :)
    • Free Download from.
Re: Huawei HG612. Hidden Options of the Broadcom xdslcmd Utility.
« Reply #18 on: May 13, 2017, 03:55:34 PM »

13 May 2017 15:52:27
xdslcmd --help
Usage: xdslcmd start [--up] <configure command options>
       xdslcmd stop
       xdslcmd connection [--up] [--down] [--loopback] [--reverb]
           [--medley] [--noretrain] [--L3] [--diagmode] [--L0]
           [--tones <r1-r2,r3-r4,...>] [--normal] [--freezeReverb] [--freezeMedley]
       xdslcmd configure/configure1 [--mod <a|d|l|t|2|p|e|m|M3|M5|v>] [--lpair <(i)nner|(o)uter>]
           [--trellis <on|off>] [--snr <snrQ4>] [--bitswap <on|off>] [--sesdrop <on|off>]
           [--sra <on|off>] [--CoMinMgn <on|off>] [--i24k <on|off>] [--phyReXmt <0xBitMap-UsDs>]
           [--Ginp <0xBitMap-UsDs>] [--TpsTc <0xBitMap-AvPvAaPa>] [--monitorTone <on|off>]
           [--profile <0x00 - 0xFF>|<"8a |8b |8c |8d |12a |12b |17a |30a">] [--us0 <on|off>]
           [--dynamicD <on|off>] [--dynamicF <on|off>] [--SOS <on|off>] [--maxDataRate <maxDsDataRateKbps maxUsDataRateKbps maxAggrDataRateKbps>]
           [--forceJ43 <on|off>] [--toggleJ43B43 <on|off>]
       xdslcmd bert [--start <#seconds>] [--stop] [--show]
       xdslcmd afelb [--time <sec>] [--tones] [--signal <1/2/8>]
       xdslcmd qlnmntr [--time <sec>] [--freq <msec>]
       xdslcmd inm [--start <INMIATO> <INMIATS><INMCC><INM_INPEQ_MODE><INM_INPEQ_FORMAT>] [--show]
       xdslcmd snrclamp [--shape <shapeId>] [--bpshape [bpIndex-bpLevel,]]
       xdslcmd nlnm [--show ] [--setThld <Thld_Num_Tones>]
       xdslcmd diag [--logstart <nBytes>
Logged
I RECOMMEND TRYING / USING PCLinuxOS (www.pclinuxos.com) .
I have a set of 8 fixed IP's From my Eclipse isp.
BT ADSL2 line>HG612 set as a Modem, Bridge, WAN not Bound to LAN1 or 2 >Smoothwall (Hardware Firewall and routing) > Ethernet LAN, DMZ,WiFI LAN and Spare LAN .
DSLstats LAN2  linked Ethernet

kitz

  • Administrator
  • Senior Kitizen
  • *
  • Posts: 29977
  • Trinity: Most guys do.
    • http://www.kitz.co.uk
Re: Huawei HG612. Hidden Options of the Broadcom xdslcmd Utility.
« Reply #19 on: May 13, 2017, 08:50:47 PM »

Not sure what this is doing in Broadband Technology.  Moving it to correct section.
---
ETA Theres already a sticky topic on xdslcmd in the Broadband Hardware section.   Merging threads.
« Last Edit: May 13, 2017, 09:12:31 PM by kitz »
Logged
Please do not PM me with queries for broadband help as I may not be able to respond.
-----
How to get your router line stats :: ADSL Exchange Checker
Pages: 1 [2]