Mainboard pics:  Mainboard front ^^^  Mainboard back ^^^ I've dissasembled my router after browsing through pics of Sagemcom 2764 published by Tripe Oxygen on his blog article about hacking Sagemcom 2764, which is a bit similiar to 3764 (same Fusiv Vx180 chipset, similiar firmware structure). On his pics of 2764 mainboard, Triple Oxygen marked serial console connector which i've assumed was factory soldered. I was curious if my 3764 also has ready to use serial console connector. After dissasembling of my 3764, it turned out that these routers doesn't have as much in common as i've thought - the mainboards have completely different layout, and some chips (for example ethernet switch chip) are different. My 3764 had no serial console connector soldered in, but i've managed to find the right holes in the PCB (marked on the above pics by orange underscoring), and soldered it in by myself. Pinout of console connector (looking at the front of mainboard): GND,Tx,Rx,3V3. Console speed: 115200,8,N,1. After connecting serial cable from PC (via MAX3232 converter) and resetting the router, following bootlog appeared in the terminal window. When 3764's kernel finishes loading, it starts Sagem's fake /sbin/init, which only function is to start main OpenRG process. Serial console gives us access to OpenRG prompt, similiar to what is avaliable when connecting to router via telnet. When looking at factory bootlog, one can spot some suprising things (kernel has bluetooth support compiled in, 802.1q vlan support is also compiled in), and confirm that unfortunately there is no support for pseudoterminals (GNU screen won't be able to work on the router), and also no support for SMBFS which i was hoping will be there... |
