Ritmo Torrent Box (ZAP-LN-86BT)


I bought a bittorrent download box at DealExtreme for 25EUR.


  • RAM: 32MB
  • Flash: 4MB (ST M25P32)
  • SOC: Cavium Networks CNS2132 (250Mhz)

Serial port

There is a serial port on the board, pinout is the following:


Serial output

$ screen /dev/ttyUSB0 38400

U-Boot 1.1.4 (Mar  3 2008 - 16:51:36)

U-Boot code: 00000000 -> 0001A410  BSS: -> 0001F354
IRQ Stack: 00e6ff7c
FIQ Stack: 00e6ef7c
RAM Configuration:
Bank #0: 00000000 32 MB
Flash Manufacturer: ST
Flash:  4 MB
DataFlash: ST M25P32
Page Count: 16384
Page Size: 256
Size: 4194304 bytes
Logical Address: 0x30000000
Area 0: 30000000 to 3002FFFF 
Area 1: 30030000 to 3003FFFF 
Area 2: 30040000 to 3023FFFF 
Area 3: 30240000 to 303FFFFF 
*** Warning - bad CRC, using default environment

In:    serial
Out:   serial
Err:   serial
PLL clock at 250MHz
CPU clock at 250MHz
AHB clock at 125MHz
APB clock at 62MHz
Hit any key to stop autoboot:  3 
kernel:30060000-301e0000                                                                                                                                                                      0 
Star Equuleus #

The device does not seem to do TFTP. I cannot get the input to work on the bootloader side.

I quickly setuped a DHCP server with dnsmasq, the device got an IP address, then an nmap shows:

root@buzek /home/zoobab [6]# nmap

Starting Nmap 5.21 ( http://nmap.org ) at 2011-07-12 20:20 CEST
Nmap scan report for
Host is up (0.0030s latency).
Not shown: 995 closed ports
21/tcp    open  ftp
80/tcp    open  http
139/tcp   open  netbios-ssn
515/tcp   open  printer
49152/tcp open  unknown
MAC Address: 08:00:50:48:AD:97 (Daisy Systems)

Nmap done: 1 IP address (1 host up) scanned in 0.45 seconds

The default login/password was admin/admin.