Dear friends,
a few weeks ago, I got a defective Symbol AP4131. The motherboard
is dead, but disassembling the case shows, that there was a wlan
adapter la4131 plugged onto the motherboard. It seems, that this
card works fine, I use it with the orinoco-0.15 driver, which
comes with the later linux 2.6 kernels.
This card is known as la4100 and is supported by the
spectrum_cs extension to the orinoco driver, which does a firmware
download.
Because the card was used in an AP, I was rather surprised, that it works
with the station firmware, which can be downloaded using the
orinoco-firmware utilities for the symbol firmware download and extraction.
Next I played with an AP firmware image from the official Symbol
download area. I was very surprised, when I found, that the firmware
extraction utility was able to extract the adapter firmware
(primary and secondary) from the dsap_fw.bin image, namely the
ap4131 firmware !
I tried these two (prim and sec) F3.94-03 firmware instead of
the station firmware with this la4131 card.
Result: it obviously contains station, ad-hoc and monitor
functionality, and I guess, it should also include AP functionality -
otherwise it would make no sense to include those card firmware in the
dsap_fw.bin AP4131 image...
Is there any information available, how to enable AP (master) mode
on these cards ? I guess, there should be some kind of host-ap
like function included in the symbol fw.
Playing with the dump_regs utility, I found, that there are 43
"unknown" additional RID's in this firmware.
Is there any documentation about these additional RID's (please
see below) ?
A further thing, which could be of interest, is the fact, that
this card obviously has a plain HFA3842 mac controller on board,
only the user access to the radio registers of the HFA3863 seems
to be different to stock intersil prism2 design.
The radio registers CR0-CR63 can be read with 0x2138 controller
command, instead of serial mmi controller commands.
The type code in CR0 of this chip is 0x30. I don't know, whether
this is the right type code for a HFA3863. Older la4121 cards,
which have firmware in flash, have a radio chip type code of
0x13, which clearly matches the HFA3861b chip.
Kind regards and thanks for your help and comment in advance,
Gerald
JKU Linz Austria
Here comes the dump_regs --all output of the la4131 with F3.94-03:
Firmware vendor: Symbol
RID Len Name Data
fc00 2 PortType 0001
fc01 6 OwnMACAddr 00:0C:DE:AD:B0:0F
fc02 34 DesiredSSID "XXX"
fc03 2 OwnChannel 0001
fc04 34 OwnSSID "XXX"
fc05 2 OwnATIMWindow 0005
fc07 2 MaxDataLength 0934
fc09 2 PMEnabled 0001
fc0a 2 PMEPS 0001
fc0b 2 MulticastReceive 0001
fc0c 2 MaxSleepDuration 0064
fc0d 2 PMHoldoverDuration 0064
fc0e 34 OwnName "bt"
fc0f 2 MKKFlag 0000
fc18 2 unknown 000B
fc19 2 unknown 0000
fc20 6 PreferredBSSID 00:00:00:00:00:00
fc21 6 MandatoryBSSID 00:00:00:00:00:00
fc23 2 WEPDefaultKeyID 0000
fc28 2 WEPFlags 0000
fc2a 2 Authentication 0001
fc2b 2 KeyLength 000D
fc2c 2 unknown 0000
fc2d 2 unknown 0000
fc2e 2 unknown 0000
fc2f 2 EnableKerberos 0000
fc32 2 unknown 0000
fc34 26 unknown
0001-000F-0000-0000-0000-0001-0000-C005-0082-0084-000B-0016-0000
fc35 10 unknown 0000-0000-0000-0000-0000
fc36 2 unknown 0000
fc38 8 unknown 991E-05B9-0283-0000
fc3a 4 unknown 0000-0000
fc3b 2 unknown 0000
fc3c 2 unknown 3FFF
fc3d 10 unknown 000E-0000-0000-0000-0000
fc81 2 CreateIBSS 0000
fc82 2 FragmenationThreshold 0000
fc83 2 RTSThreshold 092B
fc84 2 TxRateControl 000F
fc85 2 PromiscuousMode 0000
fc87 2 AntennaDiversity 0001
fc88 2 Options 0000
fc89 2 IFFrequency 0176
fc8a 2 BasicRates 000F
fc8b 2 unknown 0064
fc8c 2 Preamble 0001
fc8d 2 unknown 0000
fc8e 2 TxPower 0003
fc8f 2 unknown 0012
fca5 2 TxInhibit 0000
fca7 4 unknown C860-4680
fca8 2 unknown 0000
fca9 2 unknown 0000
fcaa 2 unknown 0014
fcab 2 HostScan 0000
fcac 2 unknown 007D
fcad 2 ACKTimeout 0144
fcae 2 unknown 0000
fcb0 2 unknown 003F
fcb1 2 unknown 0008
fcb2 2 unknown 0000
fcb3 2 unknown 000F
fcb4 2 unknown 000F
fcb5 2 unknown 0000
fcb6 2 unknown 0000
fcb8 4 unknown FFFF-0000
fcb9 2 unknown 0001
fcbb 24 unknown
0000-0000-0000-0000-0000-0000-0000-0000-0000-0000-0000-0000
fcc0 2 unknown 0001
fcc1 2 unknown 0000
fce0 2 TickTime 000A
fd00 2 MaxLoadTime 4E20
fd01 6 DownloadBuffer 0060-0000-4000
fd02 8 PRIIdentity 0017-0002-0002-0001
fd03 10 PRISupRange 0000-0003-0001-0001-0001
fd04 10 CFIActRangesPRI 0001-0002-0001-0001-0001
fd05 12 PrimaryVersion 'F3.94-03'
fd06 12 PrimaryDate '10/23/2006'
fd0a 12 NICSerialNumber '99SA01000000'
fd0b 8 NICIdentity 8000-0001-0000-0000
fd0c 10 MFISupRange 0000-0001-0000-0001-0001
fd0d 10 CFISupRange 0000-0002-0000-0001-0001
fd10 2 ChannelList 3FFF
fd11 12 RegulatoryDomains 10,20
fd12 2 TempType 0001
fd13 480 CIS invalid
fd14 2 CountryCode 0000
fd15 36 CountryName 'WWWorld Wide'
fd16 16 MKKCallSign 0000-0000-0000-0000-0000-0000-0000-0000
fd17 2 MKKRSSI 007F
fd18 4 Ordinals 1E82-2078
fd19 2 unknown 001E
fd1a 2 unknown 00C0
fd1b 2 unknown 0000
fd1c 2 unknown 0030
fd20 8 STAIdentity 0021-0002-0002-0001
fd21 10 STASupRange 0000-0004-0001-0001-0001
fd22 10 MFIActRanges 0001-0001-0001-0001-0001
fd23 10 CFIActRangesSTA 0001-0002-0001-0001-0001
fd24 12 SecondaryVersion 'F3.94-03'
fd25 12 SecondaryDate '10/23/2006'
fd26 32 unknown
010F-1800-007E-E5C6-010C-8122-007F-0002-010E-8F18-007F-0002-0110-8000-007F-184C
fd27 56 unknown
010A-8EE0-007F-0002-010B-8F2C-007F-0024-0108-8F06-007F-0012-0109-8F04-007F-0002-0104-80FA-007F-0002-0105-8E64-007F-0002-0105-812A-007F-0002
fd29 6 unknown 0000-0000-0000
fd40 2 PortStatus 0004
fd41 34 CurrentSSID "XXX"
fd42 6 CurrentBSSID 00:A0:F8:50:4F:F1
fd43 8 CommsQuality 0020-0020-0000-0000
fd44 2 CurrentTxRate 0008
fd45 2 CurrentBeaconInterval 0064
fd46 12 CurrentScaleThresholds 0000-0000-0000-0000-0000-0004
fd47 2 ProtocolRspTime 0064
fd48 2 ShortRetryLimit 0010
fd49 2 LongRetryLimit 0010
fd4a 2 MaxTransmitLifetime 0200
fd4b 2 MaxReceiveLifetime 0200
fd4c 2 CFPollable 0000
fd4d 4 AuthenticationAlgorithms 0001-0001
fd4f 2 PrivacyOptionImplemented 0001
fd50 18 unknown 0002-0002-0000-0000-0000-0000-0000-0000-0000
fdc0 2 PHYType 0002
fdc1 2 CurrentChannel 0006
fdc2 2 CurrentPowerState 0002
fdc3 2 CCAMode 0002
fdc6 10 SupportedDataRates 02,04,0B,16
fffe 4 BuildSequence 0000-0000
ffff 28 FWID 'Primary F's ' 'Secondary F's'
-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
|
