bce (Broadcom 4401 10/100 ethernet driver) from NetBSD

Most work by nate@, ok deraadt@

7 files changed, 1846 insertions, 5 deletions

diff --git a/share/man/man4/Makefile b/share/man/man4/Makefile
index b370d3601fd..945dbdde620 100644
--- a/share/man/man4/Makefile
+++ b/share/man/man4/Makefile
@@ -1,9 +1,9 @@
-#	$OpenBSD: Makefile,v 1.252 2004/02/07 21:14:35 miod Exp $
+#	$OpenBSD: Makefile,v 1.253 2004/02/13 23:24:29 andreas Exp $
 
 MAN=	aac.4 ac97.4 acphy.4 addcom.4 adv.4 aha.4 ahb.4 ahc.4 \
 	aic.4 amdpm.4 ami.4 amphy.4 an.4 aria.4 ast.4 atalk.4 \
 	atapiscsi.4 audio.4 aue.4 auich.4 autri.4 auvia.4 awi.4 \
-	az.4 bge.4 bha.4 bio.4 bktr.4 bmtphy.4 boca.4 bpf.4 \
+	az.4 bce.4 bge.4 bha.4 bio.4 bktr.4 bmtphy.4 boca.4 bpf.4 \
 	brgphy.4 bridge.4 cac.4 cardbus.4 carp.4 ccd.4 cd.4 \
 	ch.4 clcs.4 clct.4 clnp.4 cltp.4 cmpci.4 cnw.4 com.4 \
 	crypto.4 cue.4 cy.4 cz.4 dc.4 dcphy.4 ddb.4 de.4 dpt.4 \
diff --git a/share/man/man4/bce.4 b/share/man/man4/bce.4
new file mode 100644
index 00000000000..17ae8eb6131
--- /dev/null
+++ b/share/man/man4/bce.4
@@ -0,0 +1,153 @@
+.\" $OpenBSD: bce.4,v 1.1 2004/02/13 23:24:29 andreas Exp $
+.\" $NetBSD: bce.4,v 1.2 2003/10/05 11:58:36 wiz Exp $
+.\"
+.\" Copyright (c) 2003 The NetBSD Foundation, Inc.
+.\" All rights reserved.
+.\"
+.\" This code is derived from software contributed to The NetBSD Foundation
+.\" by Thomas Klausner.
+.\"
+.\" Redistribution and use in source and binary forms, with or without
+.\" modification, are permitted provided that the following conditions
+.\" are met:
+.\" 1. Redistributions of source code must retain the above copyright
+.\"    notice, this list of conditions and the following disclaimer.
+.\" 2. Redistributions in binary form must reproduce the above copyright
+.\"    notice, this list of conditions and the following disclaimer in the
+.\"    documentation and/or other materials provided with the distribution.
+.\" 3. All advertising materials mentioning features or use of this software
+.\"    must display the following acknowledgement:
+.\"        This product includes software developed by the NetBSD
+.\"        Foundation, Inc. and its contributors.
+.\" 4. Neither the name of The NetBSD Foundation nor the names of its
+.\"    contributors may be used to endorse or promote products derived
+.\"    from this software without specific prior written permission.
+.\"
+.\" THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
+.\" ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
+.\" TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+.\" PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
+.\" BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+.\" CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+.\" SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+.\" INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+.\" CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+.\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+.\" POSSIBILITY OF SUCH DAMAGE.
+.\"
+.Dd September 28, 2003
+.Dt BCE 4
+.Os
+.Sh NAME
+.Nm bce
+.Nd Broadcom BCM4401 Ethernet device driver
+.Sh SYNOPSIS
+.Cd "bce* at pci? dev ? function ?"
+.Sh DESCRIPTION
+The
+.Nm
+provides support for the Broadcom BCM4401 10/100 Ethernet card.
+Other cards from the 440x series may also be supported.
+.Pp
+The following media types and options (as given to
+.Xr ifconfig 8 )
+are supported:
+.Bl -tag -width xxx -offset indent
+.It Cm media No autoselect
+Enable autoselection of the media type and options (default).
+.It Cm media No 100baseTX Cm mediaopt No full-duplex
+Set 100Mbps (Fast Ethernet) operation and force full-duplex mode.
+.It Cm media No 100baseTX Cm mediaopt No half-duplex
+Set 100Mbps (Fast Ethernet) operation and force half-duplex mode.
+.It Cm media No 10baseT Cm mediaopt No full-duplex
+Set 10Mbps operation and force full-duplex.
+.It Cm media No 10baseT Cm mediaopt No half-duplex
+Set 10Mbps operation and force half-duplex.
+.El
+.Pp
+If no media options are present, the
+.Nm
+driver places the card into autoselect mode.
+.Sh DIAGNOSTICS
+.Bl -diag
+.It "bce%d: failed to enable memory mapping!"
+A fatal initialization error has occurred.
+.It "bce%d: unable to find mem space"
+A fatal initialization error has occurred.
+.It "bce%d: unable to wake up from power state D%d"
+The card has lost its configuration data during power save mode.
+.It "bce%d: couldn't map interrupt"
+A fatal initialization error has occurred.
+.It "bce%d: couldn't establish interrupt"
+A fatal initialization error has occurred.
+.It "bce%d: unable to alloc space for ring descriptors, error = %d"
+A fatal initialization error has occurred.
+.It "bce%d: unable to map DMA buffers, error = %d"
+A fatal initialization error has occurred.
+.It "bce%d: unable to create ring DMA map, error = %d"
+A fatal initialization error has occurred.
+.It "bce%d: unable to create tx DMA map, error = %d"
+A fatal initialization error has occurred.
+.It "bce%d: unable to create rx DMA map, error = %d"
+A fatal initialization error has occurred.
+.It "bce%d: Tx packet consumes too many DMA segments, dropping..."
+An outgoing packet didn't fit in the allocated number of segments.
+.It "bce%d: unable to load Tx buffer, error = %d"
+Short on resources when transmitting a packet, it will be retried later.
+.It "bce%d: device timeout"
+The device has stopped responding to the network or there is a problem
+with the network connection (cable).
+.It "bce%d: transmit fifo underflow"
+An error occurred, the interface will be reinitialized.
+.It "bce%d: receive fifo overflow"
+An error occurred, the interface will be reinitialized.
+.It "bce%d: receive descriptor underflow"
+An error occurred, the interface will be reinitialized.
+.It "bce%d: descriptor protocol error"
+An error occurred, the interface will be reinitialized.
+.It "bce%d: data error"
+An error occurred, the interface will be reinitialized.
+.It "bce%d: descriptor error"
+An error occurred, the interface will be reinitialized.
+.It "bce%d: general purpose timeout"
+An error occurred, the interface will be reinitialized.
+.It "bce%d: unable to allocate or map rx(%d) mbuf, error = %d"
+Failed to initialize the interface.
+.It "bce%d: timed out writing pkt filter ctl"
+Failed to add MAC address.
+.It "bce%d: timed out disabling ethernet mac"
+A problem occurred when resetting the interface.
+.It "bce%d: receive dma did not go idle after error"
+A problem occurred when resetting the interface.
+.It "bce%d: timed out resetting ethernet mac"
+A problem occurred when resetting the interface.
+.It "bce%d: while resetting core, reject did not set"
+A problem occurred when resetting the interface.
+.It "bce%d: while resetting core, busy did not clear"
+A problem occurred when resetting the interface.
+.It "bce%d: PHY read timed out reading phy %d, reg %d, val = %x"
+An error occurred when reading a PHY register on the MII.
+.It "bce%d: PHY read timed out writing phy %d, reg %d, val = %x"
+An error occurred when writing a PHY register on the MII.
+.El
+.Sh SEE ALSO
+.Xr bge 4 ,
+.Xr mii 4 ,
+.Xr ukphy 4
+.Sh HISTORY
+The
+.Nm
+driver appeared in
+.Nx 1.6.2 .
+.Ox
+support was added in
+.Ox 3.5
+.Sh AUTHORS
+The
+.Nm
+driver was written by
+.An Cliff Wright Aq cliff@snipe444.org
+and ported to
+.Ox
+by
+.An Nathan L. Binkert Aq binkertn@umich.edu .
diff --git a/share/tmac/mdoc/doc-syms b/share/tmac/mdoc/doc-syms
index 03f0c76a1a7..b4ab0fc1177 100644
--- a/share/tmac/mdoc/doc-syms
+++ b/share/tmac/mdoc/doc-syms
@@ -1,4 +1,4 @@
-.\"	$OpenBSD: doc-syms,v 1.51 2004/01/25 14:54:59 jmc Exp $
+.\"	$OpenBSD: doc-syms,v 1.52 2004/02/13 23:24:30 andreas Exp $
 .\"
 .\" Copyright (c) 1991, 1993
 .\"	The Regents of the University of California.  All rights reserved.
@@ -147,6 +147,7 @@
 .	if "\\$1"1.5"  \&NetBSD 1.5\\*(aa\\$2
 .	if "\\$1"1.5.1"  \&NetBSD 1.5.1\\*(aa\\$2
 .	if "\\$1"1.6"  \&NetBSD 1.6\\*(aa\\$2
+.	if "\\$1"1.6.2"  \&NetBSD 1.6.2\\*(aa\\$2
 .\}
 .if \\n(.$==1 \{\
 .	if "\\$1"0.8"  \&NetBSD 0.8\\*(aa
@@ -167,6 +168,7 @@
 .	if "\\$1"1.5"  \&NetBSD 1.5\\*(aa
 .	if "\\$1"1.5.1"  \&NetBSD 1.5.1\\*(aa
 .	if "\\$1"1.6"  \&NetBSD 1.6\\*(aa
+.	if "\\$1"1.6.2"  \&NetBSD 1.6.2\\*(aa
 .	if "\\$1"."    \&NetBSD\\$1\\*(aa
 .	if "\\$1","    \&NetBSD\\$1\\*(aa
 .\}
diff --git a/sys/arch/i386/conf/GENERIC b/sys/arch/i386/conf/GENERIC
index 6fd1e272fb2..5000ef2fee0 100644
--- a/sys/arch/i386/conf/GENERIC
+++ b/sys/arch/i386/conf/GENERIC
@@ -1,4 +1,4 @@
-#	$OpenBSD: GENERIC,v 1.352 2004/01/07 22:00:37 markus Exp $
+#	$OpenBSD: GENERIC,v 1.353 2004/02/13 23:24:30 andreas Exp $
 #	$NetBSD: GENERIC,v 1.48 1996/05/20 18:17:23 mrg Exp $
 #
 #	GENERIC -- everything that's currently supported
@@ -389,6 +389,7 @@ bge*	at pci? dev ? function ?		# Broadcom BCM570x (aka Tigon3)
 stge*	at pci? dev ? function ?		# Sundance TC9021 GigE
 #lge*	at pci? dev ? function ?		# Level1 LXT1001 GigE
 hme*	at pci? dev ? function ?		# Sun Happy Meal
+bce*	at pci? dev ? function ?		# Broadcom BCM4401
 
 # Wireless network cards
 wi*	at pci? dev ? function ?		# WaveLAN IEEE 802.11DS
diff --git a/sys/dev/pci/files.pci b/sys/dev/pci/files.pci
index 68d66ccd9b3..93213a6e545 100644
--- a/sys/dev/pci/files.pci
+++ b/sys/dev/pci/files.pci
@@ -1,4 +1,4 @@
-#	$OpenBSD: files.pci,v 1.149 2003/08/19 03:36:21 mickey Exp $
+#	$OpenBSD: files.pci,v 1.150 2004/02/13 23:24:30 andreas Exp $
 #	$NetBSD: files.pci,v 1.20 1996/09/24 17:47:15 christos Exp $
 #
 # Config file and device description for machine-independent PCI code.
@@ -469,3 +469,8 @@ file	dev/pci/fwohci_pci.c		fwohci_pci
 # IEEE 1394 TI "Lynx" controller
 attach	fwlynx at pci with fwlynx_pci
 file	dev/pci/fwlynx_pci.c		fwlynx_pci
+
+# Broadcom BCM4401 gigabit ethernet
+device	bce: ether, ifnet, mii, ifmedia, mii_phy
+attach	bce at pci
+file	dev/pci/if_bce.c		bce
diff --git a/sys/dev/pci/if_bce.c b/sys/dev/pci/if_bce.c
new file mode 100644
index 00000000000..d8a9fccda54
--- /dev/null
+++ b/sys/dev/pci/if_bce.c
@@ -0,0 +1,1526 @@
+/* $OpenBSD: if_bce.c,v 1.1 2004/02/13 23:24:30 andreas Exp $ */
+/* $NetBSD: if_bce.c,v 1.3 2003/09/29 01:53:02 mrg Exp $	 */
+
+/*
+ * Copyright (c) 2003 Clifford Wright. All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. The name of the author may not be used to endorse or promote products
+ *    derived from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
+ * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
+ * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
+ * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
+ * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
+ * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+ * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
+ * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+ * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ */
+
+/*
+ * Broadcom BCM440x 10/100 ethernet (broadcom.com)
+ * SiliconBackplane is technology from Sonics, Inc.(sonicsinc.com)
+ *
+ * Cliff Wright cliff@snipe444.org
+ */
+
+#include "bpfilter.h"
+#include "vlan.h"
+
+#include <sys/param.h>
+#include <sys/systm.h>
+#include <sys/timeout.h>
+#include <sys/sockio.h>
+#include <sys/mbuf.h>
+#include <sys/malloc.h>
+#include <sys/kernel.h>
+#include <sys/device.h>
+#include <sys/socket.h>
+
+#include <net/if.h>
+#include <net/if_dl.h>
+#include <net/if_media.h>
+
+#ifdef INET
+#include <netinet/in.h>
+#include <netinet/in_systm.h>
+#include <netinet/in_var.h>
+#include <netinet/ip.h>
+#include <netinet/if_ether.h>
+#endif
+#if NBPFILTER > 0
+#include <net/bpf.h>
+#endif
+
+#include <dev/pci/pcireg.h>
+#include <dev/pci/pcivar.h>
+#include <dev/pci/pcidevs.h>
+
+#include <dev/mii/mii.h>
+#include <dev/mii/miivar.h>
+#include <dev/mii/miidevs.h>
+#include <dev/mii/brgphyreg.h>
+
+#include <dev/pci/if_bcereg.h>
+
+#include <uvm/uvm_extern.h>
+
+/* transmit buffer max frags allowed */
+#define BCE_NTXFRAGS	16
+
+/* ring descriptor */
+struct bce_dma_slot {
+	u_int32_t ctrl;
+	u_int32_t addr;
+};
+#define CTRL_BC_MASK	0x1fff	/* buffer byte count */
+#define CTRL_EOT	0x10000000	/* end of descriptor table */
+#define CTRL_IOC	0x20000000	/* interrupt on completion */
+#define CTRL_EOF	0x40000000	/* end of frame */
+#define CTRL_SOF	0x80000000	/* start of frame */
+
+/* Packet status is returned in a pre-packet header */
+struct rx_pph {
+	u_int16_t len;
+	u_int16_t flags;
+	u_int16_t pad[12];
+};
+
+/* packet status flags bits */
+#define RXF_NO				0x8	/* odd number of nibbles */
+#define RXF_RXER			0x4	/* receive symbol error */
+#define RXF_CRC				0x2	/* crc error */
+#define RXF_OV				0x1	/* fifo overflow */
+
+/* number of descriptors used in a ring */
+#define BCE_NRXDESC		128
+#define BCE_NTXDESC		128
+
+/*
+ * Mbuf pointers. We need these to keep track of the virtual addresses
+ * of our mbuf chains since we can only convert from physical to virtual,
+ * not the other way around.
+ */
+struct bce_chain_data {
+	struct mbuf    *bce_tx_chain[BCE_NTXDESC];
+	struct mbuf    *bce_rx_chain[BCE_NRXDESC];
+	bus_dmamap_t    bce_tx_map[BCE_NTXDESC];
+	bus_dmamap_t    bce_rx_map[BCE_NRXDESC];
+};
+
+#define BCE_TIMEOUT		100	/* # 10us for mii read/write */
+
+struct bce_softc {
+	struct device		bce_dev;
+	bus_space_tag_t		bce_btag;
+	bus_space_handle_t	bce_bhandle;
+	bus_dma_tag_t		bce_dmatag;
+	struct arpcom		bce_ac;		/* interface info */
+	void			*bce_intrhand;
+	struct pci_attach_args	bce_pa;
+	struct mii_data		bce_mii;
+	u_int32_t		bce_phy;	/* eeprom indicated phy */
+	struct bce_dma_slot	*bce_rx_ring;	/* receive ring */
+	struct bce_dma_slot	*bce_tx_ring;	/* transmit ring */
+	struct bce_chain_data	bce_cdata;	/* mbufs */
+	bus_dmamap_t		bce_ring_map;
+	u_int32_t		bce_rxin;	/* last rx descriptor seen */
+	u_int32_t		bce_txin;	/* last tx descriptor seen */
+	int			bce_txsfree;	/* no. tx slots available */
+	int			bce_txsnext;	/* next available tx slot */
+	struct timeout		bce_timeout;
+};
+
+/* for ring descriptors */
+#define BCE_RXBUF_LEN	(MCLBYTES - 4)
+#define BCE_INIT_RXDESC(sc, x)						\
+do {									\
+	struct bce_dma_slot *__bced = &sc->bce_rx_ring[x];		\
+									\
+	*mtod(sc->bce_cdata.bce_rx_chain[x], u_int32_t *) = 0;		\
+	__bced->addr =							\
+	    htole32(sc->bce_cdata.bce_rx_map[x]->dm_segs[0].ds_addr	\
+	    + 0x40000000);						\
+	if (x != (BCE_NRXDESC - 1))					\
+		__bced->ctrl = htole32(BCE_RXBUF_LEN);			\
+	else								\
+		__bced->ctrl = htole32(BCE_RXBUF_LEN | CTRL_EOT);	\
+	bus_dmamap_sync(sc->bce_dmatag, sc->bce_ring_map,		\
+	    sizeof(struct bce_dma_slot) * x,				\
+	    sizeof(struct bce_dma_slot),				\
+	    BUS_DMASYNC_PREREAD|BUS_DMASYNC_PREWRITE);			\
+} while (/* CONSTCOND */ 0)
+
+static	int	bce_probe(struct device *, void *, void *);
+static	void	bce_attach(struct device *, struct device *, void *);
+static	int	bce_ioctl(struct ifnet *, u_long, caddr_t);
+static	void	bce_start(struct ifnet *);
+static	void	bce_watchdog(struct ifnet *);
+static	int	bce_intr(void *);
+static	void	bce_rxintr(struct bce_softc *);
+static	void	bce_txintr(struct bce_softc *);
+static	int	bce_init(struct ifnet *);
+static	void	bce_add_mac(struct bce_softc *, u_int8_t *, unsigned long);
+static	int	bce_add_rxbuf(struct bce_softc *, int);
+static	void	bce_rxdrain(struct bce_softc *);
+static	void	bce_stop(struct ifnet *, int);
+static	void	bce_reset(struct bce_softc *);
+static	void	bce_set_filter(struct ifnet *);
+static	int	bce_mii_read(struct device *, int, int);
+static	void	bce_mii_write(struct device *, int, int, int);
+static	void	bce_statchg(struct device *);
+static	int	bce_mediachange(struct ifnet *);
+static	void	bce_mediastatus(struct ifnet *, struct ifmediareq *);
+static	void	bce_tick(void *);
+
+#define BCE_DEBUG
+#ifdef BCE_DEBUG
+#define DPRINTF(x)	do {		\
+	if (bcedebug)			\
+		printf x;		\
+} while (/* CONSTCOND */ 0)
+#define DPRINTFN(n,x)	do {		\
+	if (bcedebug >= (n))		\
+		printf x;		\
+} while (/* CONSTCOND */ 0)
+int             bcedebug = 0;
+#else
+#define DPRINTF(x)
+#define DPRINTFN(n,x)
+#endif
+
+struct cfattach bce_ca = {
+	sizeof(struct bce_softc), bce_probe, bce_attach
+};
+struct cfdriver bce_cd = {
+	0, "bce", DV_IFNET
+};
+
+#if __NetBSD_Version__ >= 106120000
+#define APRINT_ERROR	aprint_error
+#define APRINT_NORMAL	aprint_normal
+#else
+#define APRINT_ERROR	printf
+#define APRINT_NORMAL	printf
+#endif
+
+static int
+bce_lookup(const struct pci_attach_args *pa)
+{
+	if (PCI_VENDOR(pa->pa_id) == PCI_VENDOR_BROADCOM &&
+	    PCI_PRODUCT(pa->pa_id) == PCI_PRODUCT_BROADCOM_BCM4401)
+	    return 1;
+
+	return 0;
+}
+
+int
+bce_probe(parent, match, aux)
+	struct device  *parent;
+	void           *match;
+	void           *aux;
+{
+	struct pci_attach_args *pa = (struct pci_attach_args *)aux;
+
+	return bce_lookup(pa);
+}
+
+void
+bce_attach(parent, self, aux)
+	struct device  *parent, *self;
+	void           *aux;
+{
+	struct bce_softc *sc = (struct bce_softc *) self;
+	struct pci_attach_args *pa = aux;
+	pci_chipset_tag_t pc = pa->pa_pc;
+	pci_intr_handle_t ih;
+	const char     *intrstr = NULL;
+	caddr_t         kva;
+	bus_dma_segment_t seg;
+	int             rseg;
+	u_int32_t       command;
+	struct ifnet   *ifp;
+	pcireg_t        memtype;
+	bus_addr_t      memaddr;
+	bus_size_t      memsize;
+	int             pmreg;
+	pcireg_t        pmode;
+	int             error;
+	int             i;
+
+	KASSERT(bce_lookup(pa));
+
+	sc->bce_pa = *pa;
+	sc->bce_dmatag = pa->pa_dmat;
+
+	/*
+	 * Map control/status registers.
+	 */
+	command = pci_conf_read(pc, pa->pa_tag, PCI_COMMAND_STATUS_REG);
+	command |= PCI_COMMAND_MEM_ENABLE | PCI_COMMAND_MASTER_ENABLE;
+	pci_conf_write(pc, pa->pa_tag, PCI_COMMAND_STATUS_REG, command);
+	command = pci_conf_read(pc, pa->pa_tag, PCI_COMMAND_STATUS_REG);
+
+	if (!(command & PCI_COMMAND_MEM_ENABLE)) {
+		APRINT_ERROR("%s: failed to enable memory mapping!\n",
+		    sc->bce_dev.dv_xname);
+		return;
+	}
+	memtype = pci_mapreg_type(pa->pa_pc, pa->pa_tag, BCE_PCI_BAR0);
+	switch (memtype) {
+	case PCI_MAPREG_TYPE_MEM | PCI_MAPREG_MEM_TYPE_32BIT:
+	case PCI_MAPREG_TYPE_MEM | PCI_MAPREG_MEM_TYPE_64BIT:
+		if (pci_mapreg_map(pa, BCE_PCI_BAR0, memtype, 0, &sc->bce_btag,
+		    &sc->bce_bhandle, &memaddr, &memsize, 0) == 0)
+			break;
+	default:
+		APRINT_ERROR("%s: unable to find mem space\n",
+		    sc->bce_dev.dv_xname);
+		return;
+	}
+
+	/* Get it out of power save mode if needed. */
+	if (pci_get_capability(pc, pa->pa_tag, PCI_CAP_PWRMGMT, &pmreg, 0)) {
+		pmode = pci_conf_read(pc, pa->pa_tag, pmreg + 4) & 0x3;
+		if (pmode == 3) {
+			/*
+			 * The card has lost all configuration data in
+			 * this state, so punt.
+			 */
+			printf("%s: unable to wake up from power state D3\n",
+			       sc->bce_dev.dv_xname);
+			return;
+		}
+		if (pmode != 0) {
+			printf("%s: waking up from power state D%d\n",
+			       sc->bce_dev.dv_xname, pmode);
+			pci_conf_write(pc, pa->pa_tag, pmreg + 4, 0);
+		}
+	}
+	if (pci_intr_map(pa, &ih)) {
+		APRINT_ERROR("%s: couldn't map interrupt\n",
+		    sc->bce_dev.dv_xname);
+		return;
+	}
+	intrstr = pci_intr_string(pc, ih);
+
+	sc->bce_intrhand = pci_intr_establish(pc, ih, IPL_NET, bce_intr, sc,
+	    self->dv_xname);
+
+	if (sc->bce_intrhand == NULL) {
+		APRINT_ERROR("%s: couldn't establish interrupt",
+		    sc->bce_dev.dv_xname);
+		if (intrstr != NULL)
+			APRINT_NORMAL(" at %s", intrstr);
+		APRINT_NORMAL("\n");
+		return;
+	}
+
+	/* reset the chip */
+	bce_reset(sc);
+
+	/*
+	 * Allocate DMA-safe memory for ring descriptors.
+	 * The receive, and transmit rings can not share the same
+	 * 4k space, however both are allocated at once here.
+	 */
+	/*
+	 * XXX PAGE_SIZE is wasteful; we only need 1KB + 1KB, but
+	 * due to the limition above. ??
+	 */
+	if ((error = bus_dmamem_alloc(sc->bce_dmatag,
+	    2 * PAGE_SIZE, PAGE_SIZE, 2 * PAGE_SIZE,
+				      &seg, 1, &rseg, BUS_DMA_NOWAIT))) {
+		printf("%s: unable to alloc space for ring descriptors, "
+		       "error = %d\n", sc->bce_dev.dv_xname, error);
+		return;
+	}
+	/* map ring space to kernel */
+	if ((error = bus_dmamem_map(sc->bce_dmatag, &seg, rseg,
+	    2 * PAGE_SIZE, &kva, BUS_DMA_NOWAIT))) {
+		printf("%s: unable to map DMA buffers, error = %d\n",
+		    sc->bce_dev.dv_xname, error);
+		bus_dmamem_free(sc->bce_dmatag, &seg, rseg);
+		return;
+	}
+	/* create a dma map for the ring */
+	if ((error = bus_dmamap_create(sc->bce_dmatag,
+	    2 * PAGE_SIZE, 1, 2 * PAGE_SIZE, 0, BUS_DMA_NOWAIT,
+				       &sc->bce_ring_map))) {
+		printf("%s: unable to create ring DMA map, error = %d\n",
+		    sc->bce_dev.dv_xname, error);
+		bus_dmamem_unmap(sc->bce_dmatag, kva, 2 * PAGE_SIZE);
+		bus_dmamem_free(sc->bce_dmatag, &seg, rseg);
+		return;
+	}
+	/* connect the ring space to the dma map */
+	if (bus_dmamap_load(sc->bce_dmatag, sc->bce_ring_map, kva,
+	    2 * PAGE_SIZE, NULL, BUS_DMA_NOWAIT)) {
+		bus_dmamap_destroy(sc->bce_dmatag, sc->bce_ring_map);
+		bus_dmamem_unmap(sc->bce_dmatag, kva, 2 * PAGE_SIZE);
+		bus_dmamem_free(sc->bce_dmatag, &seg, rseg);
+		return;
+	}
+	/* save the ring space in softc */
+	sc->bce_rx_ring = (struct bce_dma_slot *) kva;
+	sc->bce_tx_ring = (struct bce_dma_slot *) (kva + PAGE_SIZE);
+
+	/* Create the transmit buffer DMA maps. */
+	for (i = 0; i < BCE_NTXDESC; i++) {
+		if ((error = bus_dmamap_create(sc->bce_dmatag, MCLBYTES,
+		    BCE_NTXFRAGS, MCLBYTES, 0, 0, &sc->bce_cdata.bce_tx_map[i])) != 0) {
+			printf("%s: unable to create tx DMA map, error = %d\n",
+			    sc->bce_dev.dv_xname, error);
+		}
+		sc->bce_cdata.bce_tx_chain[i] = NULL;
+	}
+
+	/* Create the receive buffer DMA maps. */
+	for (i = 0; i < BCE_NRXDESC; i++) {
+		if ((error = bus_dmamap_create(sc->bce_dmatag, MCLBYTES, 1,
+		    MCLBYTES, 0, 0, &sc->bce_cdata.bce_rx_map[i])) != 0) {
+			printf("%s: unable to create rx DMA map, error = %d\n",
+			    sc->bce_dev.dv_xname, error);
+		}
+		sc->bce_cdata.bce_rx_chain[i] = NULL;
+	}
+
+	/* Set up ifnet structure */
+	ifp = &sc->bce_ac.ac_if;
+	strncpy(ifp->if_xname, sc->bce_dev.dv_xname, IF_NAMESIZE);
+	ifp->if_softc = sc;
+	ifp->if_flags = IFF_BROADCAST | IFF_SIMPLEX | IFF_MULTICAST;
+	ifp->if_ioctl = bce_ioctl;
+	ifp->if_start = bce_start;
+	ifp->if_watchdog = bce_watchdog;
+	ifp->if_init = bce_init;
+	IFQ_SET_READY(&ifp->if_snd);
+
+	/* MAC address */
+	sc->bce_ac.ac_enaddr[0] =
+	    bus_space_read_1(sc->bce_btag, sc->bce_bhandle, BCE_MAGIC_ENET0);
+	sc->bce_ac.ac_enaddr[1] =
+	    bus_space_read_1(sc->bce_btag, sc->bce_bhandle, BCE_MAGIC_ENET1);
+	sc->bce_ac.ac_enaddr[2] =
+	    bus_space_read_1(sc->bce_btag, sc->bce_bhandle, BCE_MAGIC_ENET2);
+	sc->bce_ac.ac_enaddr[3] =
+	    bus_space_read_1(sc->bce_btag, sc->bce_bhandle, BCE_MAGIC_ENET3);
+	sc->bce_ac.ac_enaddr[4] =
+	    bus_space_read_1(sc->bce_btag, sc->bce_bhandle, BCE_MAGIC_ENET4);
+	sc->bce_ac.ac_enaddr[5] =
+	    bus_space_read_1(sc->bce_btag, sc->bce_bhandle, BCE_MAGIC_ENET5);
+	printf(": %s, address %s\n", intrstr,
+	    ether_sprintf(sc->bce_ac.ac_enaddr));
+
+	/* Initialize our media structures and probe the MII. */
+
+	sc->bce_mii.mii_ifp = ifp;
+	sc->bce_mii.mii_readreg = bce_mii_read;
+	sc->bce_mii.mii_writereg = bce_mii_write;
+	sc->bce_mii.mii_statchg = bce_statchg;
+	ifmedia_init(&sc->bce_mii.mii_media, 0, bce_mediachange,
+	    bce_mediastatus);
+	mii_attach(&sc->bce_dev, &sc->bce_mii, 0xffffffff, MII_PHY_ANY,
+	    MII_OFFSET_ANY, 0);
+	if (LIST_FIRST(&sc->bce_mii.mii_phys) == NULL) {
+		ifmedia_add(&sc->bce_mii.mii_media, IFM_ETHER | IFM_NONE, 0, NULL);
+		ifmedia_set(&sc->bce_mii.mii_media, IFM_ETHER | IFM_NONE);
+	} else
+		ifmedia_set(&sc->bce_mii.mii_media, IFM_ETHER | IFM_AUTO);
+	/* get the phy */
+	sc->bce_phy = bus_space_read_1(sc->bce_btag, sc->bce_bhandle,
+	    BCE_MAGIC_PHY) & 0x1f;
+	/*
+	 * Enable activity led.
+	 * XXX This should be in a phy driver, but not currently.
+	 */
+	bce_mii_write((struct device *) sc, 1, 26,	 /* MAGIC */
+	    bce_mii_read((struct device *) sc, 1, 26) & 0x7fff);	 /* MAGIC */
+	/* enable traffic meter led mode */
+	bce_mii_write((struct device *) sc, 1, 26,	 /* MAGIC */
+	    bce_mii_read((struct device *) sc, 1, 27) | (1 << 6));	 /* MAGIC */
+
+
+	/* Attach the interface */
+	if_attach(ifp);
+	ether_ifattach(ifp);
+	timeout_set(&sc->bce_timeout, bce_tick, sc);
+}
+
+/* handle media, and ethernet requests */
+static int
+bce_ioctl(ifp, cmd, data)
+	struct ifnet   *ifp;
+	u_long          cmd;
+	caddr_t         data;
+{
+	struct bce_softc *sc = ifp->if_softc;
+	struct ifreq   *ifr = (struct ifreq *) data;
+	struct ifaddr *ifa = (struct ifaddr *)data;
+	int             s, error = 0;
+
+	s = splnet();
+
+	if ((error = ether_ioctl(ifp, &sc->bce_ac, cmd, data)) > 0) {
+		splx(s);
+		return (error);
+	}
+
+	switch (cmd) {
+	case SIOCSIFADDR:
+		ifp->if_flags |= IFF_UP;
+		switch (ifa->ifa_addr->sa_family) {
+#ifdef INET
+		case AF_INET:
+			bce_init(ifp);
+			arp_ifinit(&sc->bce_ac, ifa);
+			break;
+#endif /* INET */
+		default:
+			bce_init(ifp);
+			break;
+		}
+		break;
+	case SIOCSIFMTU:
+		ifp->if_mtu = ifr->ifr_mtu;
+		break;
+	case SIOCSIFFLAGS:
+		if(ifp->if_flags & IFF_UP)
+			if(ifp->if_flags & IFF_RUNNING)
+				bce_set_filter(ifp);
+			else
+				bce_init(ifp);
+		else if(ifp->if_flags & IFF_RUNNING)
+			bce_stop(ifp, 0);
+
+		break;
+	case SIOCADDMULTI:
+	case SIOCDELMULTI:
+		if (ifp->if_flags & IFF_RUNNING)
+			bce_set_filter(ifp);
+		break;
+	case SIOCSIFMEDIA:
+	case SIOCGIFMEDIA:
+		error = ifmedia_ioctl(ifp, ifr, &sc->bce_mii.mii_media, cmd);
+		break;
+	default:
+		error = EINVAL;
+		break;
+	}
+
+	if (error == 0) {
+		/* Try to get more packets going. */
+		bce_start(ifp);
+	}
+
+	splx(s);
+	return error;
+}
+
+/* Start packet transmission on the interface. */
+static void
+bce_start(ifp)
+	struct ifnet   *ifp;
+{
+	struct bce_softc *sc = ifp->if_softc;
+	struct mbuf    *m0;
+	bus_dmamap_t    dmamap;
+	int             txstart;
+	int             txsfree;
+	int             newpkts = 0;
+	int             error;
+
+	/*
+         * do not start another if currently transmitting, and more
+         * descriptors(tx slots) are needed for next packet.
+         */
+	if ((ifp->if_flags & (IFF_RUNNING | IFF_OACTIVE)) != IFF_RUNNING)
+		return;
+
+	/* determine number of descriptors available */
+	if (sc->bce_txsnext >= sc->bce_txin)
+		txsfree = BCE_NTXDESC - 1 + sc->bce_txin - sc->bce_txsnext;
+	else
+		txsfree = sc->bce_txin - sc->bce_txsnext - 1;
+
+	/*
+         * Loop through the send queue, setting up transmit descriptors
+         * until we drain the queue, or use up all available transmit
+         * descriptors.
+         */
+	while (txsfree > 0) {
+		int             seg;
+
+		/* Grab a packet off the queue. */
+		IFQ_POLL(&ifp->if_snd, m0);
+		if (m0 == NULL)
+			break;
+
+		/* get the transmit slot dma map */
+		dmamap = sc->bce_cdata.bce_tx_map[sc->bce_txsnext];
+
+		/*
+		 * Load the DMA map.  If this fails, the packet either
+		 * didn't fit in the alloted number of segments, or we
+		 * were short on resources. If the packet will not fit,
+		 * it will be dropped. If short on resources, it will
+		 * be tried again later.
+		 */
+		error = bus_dmamap_load_mbuf(sc->bce_dmatag, dmamap, m0,
+		    BUS_DMA_WRITE | BUS_DMA_NOWAIT);
+		if (error == EFBIG) {
+			printf("%s: Tx packet consumes too many DMA segments, "
+			    "dropping...\n", sc->bce_dev.dv_xname);
+			IFQ_DEQUEUE(&ifp->if_snd, m0);
+			m_freem(m0);
+			ifp->if_oerrors++;
+			continue;
+		} else if (error) {
+			/* short on resources, come back later */
+			printf("%s: unable to load Tx buffer, error = %d\n",
+			    sc->bce_dev.dv_xname, error);
+			break;
+		}
+		/* If not enough descriptors available, try again later */
+		if (dmamap->dm_nsegs > txsfree) {
+			ifp->if_flags |= IFF_OACTIVE;
+			bus_dmamap_unload(sc->bce_dmatag, dmamap);
+			break;
+		}
+		/* WE ARE NOW COMMITTED TO TRANSMITTING THE PACKET. */
+
+		/* So take it off the queue */
+		IFQ_DEQUEUE(&ifp->if_snd, m0);
+
+		/* save the pointer so it can be freed later */
+		sc->bce_cdata.bce_tx_chain[sc->bce_txsnext] = m0;
+
+		/* Sync the data DMA map. */
+		bus_dmamap_sync(sc->bce_dmatag, dmamap, 0, dmamap->dm_mapsize,
+				BUS_DMASYNC_PREWRITE);
+
+		/* Initialize the transmit descriptor(s). */
+		txstart = sc->bce_txsnext;
+		for (seg = 0; seg < dmamap->dm_nsegs; seg++) {
+			u_int32_t ctrl;
+
+			ctrl = dmamap->dm_segs[seg].ds_len & CTRL_BC_MASK;
+			if (seg == 0)
+				ctrl |= CTRL_SOF;
+			if (seg == dmamap->dm_nsegs - 1)
+				ctrl |= CTRL_EOF;
+			if (sc->bce_txsnext == BCE_NTXDESC - 1)
+				ctrl |= CTRL_EOT;
+			ctrl |= CTRL_IOC;
+			sc->bce_tx_ring[sc->bce_txsnext].ctrl = htole32(ctrl);
+			sc->bce_tx_ring[sc->bce_txsnext].addr =
+			    htole32(dmamap->dm_segs[seg].ds_addr + 0x40000000);	/* MAGIC */
+			if (sc->bce_txsnext + 1 > BCE_NTXDESC - 1)
+				sc->bce_txsnext = 0;
+			else
+				sc->bce_txsnext++;
+			txsfree--;
+		}
+		/* sync descriptors being used */
+		bus_dmamap_sync(sc->bce_dmatag, sc->bce_ring_map,
+			  sizeof(struct bce_dma_slot) * txstart + PAGE_SIZE,
+			     sizeof(struct bce_dma_slot) * dmamap->dm_nsegs,
+				BUS_DMASYNC_PREREAD | BUS_DMASYNC_PREWRITE);
+
+		/* Give the packet to the chip. */
+		bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_DMA_DPTR,
+			     sc->bce_txsnext * sizeof(struct bce_dma_slot));
+
+		newpkts++;
+
+#if NBPFILTER > 0
+		/* Pass the packet to any BPF listeners. */
+		if (ifp->if_bpf)
+			bpf_mtap(ifp->if_bpf, m0);
+#endif				/* NBPFILTER > 0 */
+	}
+	if (txsfree == 0) {
+		/* No more slots left; notify upper layer. */
+		ifp->if_flags |= IFF_OACTIVE;
+	}
+	if (newpkts) {
+		/* Set a watchdog timer in case the chip flakes out. */
+		ifp->if_timer = 5;
+	}
+}
+
+/* Watchdog timer handler. */
+static void
+bce_watchdog(ifp)
+	struct ifnet   *ifp;
+{
+	struct bce_softc *sc = ifp->if_softc;
+
+	printf("%s: device timeout\n", sc->bce_dev.dv_xname);
+	ifp->if_oerrors++;
+
+	(void) bce_init(ifp);
+
+	/* Try to get more packets going. */
+	bce_start(ifp);
+}
+
+int
+bce_intr(xsc)
+	void           *xsc;
+{
+	struct bce_softc *sc;
+	struct ifnet   *ifp;
+	u_int32_t intstatus;
+	u_int32_t intmask;
+	int             wantinit;
+	int             handled = 0;
+
+	sc = xsc;
+	ifp = &sc->bce_ac.ac_if;
+
+
+	for (wantinit = 0; wantinit == 0;) {
+		intstatus = bus_space_read_4(sc->bce_btag, sc->bce_bhandle,
+		    BCE_INT_STS);
+		intmask = bus_space_read_4(sc->bce_btag, sc->bce_bhandle,
+		    BCE_INT_MASK);
+
+		/* ignore if not ours, or unsolicited interrupts */
+		intstatus &= intmask;
+		if (intstatus == 0)
+			break;
+
+		handled = 1;
+
+		/* Ack interrupt */
+		bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_INT_STS,
+		    intstatus);
+
+		/* Receive interrupts. */
+		if (intstatus & I_RI)
+			bce_rxintr(sc);
+		/* Transmit interrupts. */
+		if (intstatus & I_XI)
+			bce_txintr(sc);
+		/* Error interrupts */
+		if (intstatus & ~(I_RI | I_XI)) {
+			if (intstatus & I_XU)
+				printf("%s: transmit fifo underflow\n",
+				    sc->bce_dev.dv_xname);
+			if (intstatus & I_RO) {
+				printf("%s: receive fifo overflow\n",
+				    sc->bce_dev.dv_xname);
+				ifp->if_ierrors++;
+			}
+			if (intstatus & I_RU)
+				printf("%s: receive descriptor underflow\n",
+				       sc->bce_dev.dv_xname);
+			if (intstatus & I_DE)
+				printf("%s: descriptor protocol error\n",
+				       sc->bce_dev.dv_xname);
+			if (intstatus & I_PD)
+				printf("%s: data error\n",
+				    sc->bce_dev.dv_xname);
+			if (intstatus & I_PC)
+				printf("%s: descriptor error\n",
+				    sc->bce_dev.dv_xname);
+			if (intstatus & I_TO)
+				printf("%s: general purpose timeout\n",
+				    sc->bce_dev.dv_xname);
+			wantinit = 1;
+		}
+	}
+
+	if (handled) {
+		if (wantinit)
+			bce_init(ifp);
+		/* Try to get more packets going. */
+		bce_start(ifp);
+	}
+	return (handled);
+}
+
+/* Receive interrupt handler */
+void
+bce_rxintr(sc)
+	struct bce_softc *sc;
+{
+	struct ifnet   *ifp = &sc->bce_ac.ac_if;
+	struct rx_pph  *pph;
+	struct mbuf    *m;
+	int             curr;
+	int             len;
+	int             i;
+
+	/* get pointer to active receive slot */
+	curr = bus_space_read_4(sc->bce_btag, sc->bce_bhandle, BCE_DMA_RXSTATUS)
+	    & RS_CD_MASK;
+	curr = curr / sizeof(struct bce_dma_slot);
+	if (curr >= BCE_NRXDESC)
+		curr = BCE_NRXDESC - 1;
+
+	/* process packets up to but not current packet being worked on */
+	for (i = sc->bce_rxin; i != curr;
+	    i + 1 > BCE_NRXDESC - 1 ? i = 0 : i++) {
+		/* complete any post dma memory ops on packet */
+		bus_dmamap_sync(sc->bce_dmatag, sc->bce_cdata.bce_rx_map[i], 0,
+		    sc->bce_cdata.bce_rx_map[i]->dm_mapsize,
+		    BUS_DMASYNC_POSTREAD);
+
+		/*
+		 * If the packet had an error, simply recycle the buffer,
+		 * resetting the len, and flags.
+		 */
+		pph = mtod(sc->bce_cdata.bce_rx_chain[i], struct rx_pph *);
+		if (pph->flags & (RXF_NO | RXF_RXER | RXF_CRC | RXF_OV)) {
+			ifp->if_ierrors++;
+			pph->len = 0;
+			pph->flags = 0;
+			continue;
+		}
+		/* receive the packet */
+		len = pph->len;
+		if (len == 0)
+			continue;	/* no packet if empty */
+		pph->len = 0;
+		pph->flags = 0;
+		/* bump past pre header to packet */
+		sc->bce_cdata.bce_rx_chain[i]->m_data += 30;	/* MAGIC */
+
+		/*
+		 * If the packet is small enough to fit in a
+		 * single header mbuf, allocate one and copy
+		 * the data into it.  This greatly reduces
+		 * memory consumption when receiving lots
+		 * of small packets.
+		 *
+		 * Otherwise, add a new buffer to the receive
+		 * chain.  If this fails, drop the packet and
+		 * recycle the old buffer.
+		 */
+		if (len <= (MHLEN - 2)) {
+			MGETHDR(m, M_DONTWAIT, MT_DATA);
+			if (m == NULL)
+				goto dropit;
+			m->m_data += 2;
+			memcpy(mtod(m, caddr_t),
+			 mtod(sc->bce_cdata.bce_rx_chain[i], caddr_t), len);
+			sc->bce_cdata.bce_rx_chain[i]->m_data -= 30;	/* MAGIC */
+		} else {
+			m = sc->bce_cdata.bce_rx_chain[i];
+			if (bce_add_rxbuf(sc, i) != 0) {
+		dropit:
+				ifp->if_ierrors++;
+				/* continue to use old buffer */
+				sc->bce_cdata.bce_rx_chain[i]->m_data -= 30;
+				bus_dmamap_sync(sc->bce_dmatag,
+				    sc->bce_cdata.bce_rx_map[i], 0,
+				    sc->bce_cdata.bce_rx_map[i]->dm_mapsize,
+				    BUS_DMASYNC_PREREAD);
+				continue;
+			}
+		}
+
+//		m->m_flags |= M_HASFCS;
+		m->m_pkthdr.rcvif = ifp;
+		m->m_pkthdr.len = m->m_len = len;
+		ifp->if_ipackets++;
+
+#if NBPFILTER > 0
+		/*
+		 * Pass this up to any BPF listeners, but only
+		 * pass it up the stack if it's for us.
+		 */
+		if (ifp->if_bpf)
+			bpf_mtap(ifp->if_bpf, m);
+#endif				/* NBPFILTER > 0 */
+
+		/* Pass it on. */
+		ether_input_mbuf(ifp, m);
+
+		/* re-check current in case it changed */
+		curr = (bus_space_read_4(sc->bce_btag, sc->bce_bhandle,
+		    BCE_DMA_RXSTATUS) & RS_CD_MASK) /
+		    sizeof(struct bce_dma_slot);
+		if (curr >= BCE_NRXDESC)
+			curr = BCE_NRXDESC - 1;
+	}
+	sc->bce_rxin = curr;
+}
+
+/* Transmit interrupt handler */
+void
+bce_txintr(sc)
+	struct bce_softc *sc;
+{
+	struct ifnet   *ifp = &sc->bce_ac.ac_if;
+	int             curr;
+	int             i;
+
+	ifp->if_flags &= ~IFF_OACTIVE;
+
+	/*
+         * Go through the Tx list and free mbufs for those
+         * frames which have been transmitted.
+         */
+	curr = bus_space_read_4(sc->bce_btag, sc->bce_bhandle, BCE_DMA_TXSTATUS) &
+		RS_CD_MASK;
+	curr = curr / sizeof(struct bce_dma_slot);
+	if (curr >= BCE_NTXDESC)
+		curr = BCE_NTXDESC - 1;
+	for (i = sc->bce_txin; i != curr;
+	    i + 1 > BCE_NTXDESC - 1 ? i = 0 : i++) {
+		/* do any post dma memory ops on transmit data */
+		if (sc->bce_cdata.bce_tx_chain[i] == NULL)
+			continue;
+		bus_dmamap_sync(sc->bce_dmatag, sc->bce_cdata.bce_tx_map[i], 0,
+		    sc->bce_cdata.bce_tx_map[i]->dm_mapsize,
+		    BUS_DMASYNC_POSTWRITE);
+		bus_dmamap_unload(sc->bce_dmatag, sc->bce_cdata.bce_tx_map[i]);
+		m_freem(sc->bce_cdata.bce_tx_chain[i]);
+		sc->bce_cdata.bce_tx_chain[i] = NULL;
+		ifp->if_opackets++;
+	}
+	sc->bce_txin = curr;
+
+	/*
+	 * If there are no more pending transmissions, cancel the watchdog
+	 * timer
+	 */
+	if (sc->bce_txsnext == sc->bce_txin)
+		ifp->if_timer = 0;
+}
+
+/* initialize the interface */
+static int
+bce_init(ifp)
+	struct ifnet   *ifp;
+{
+	struct bce_softc *sc = ifp->if_softc;
+	u_int32_t reg_win;
+	int             error;
+	int             i;
+
+	/* Cancel any pending I/O. */
+	bce_stop(ifp, 0);
+
+	/* enable pci inerrupts, bursts, and prefetch */
+
+	/* remap the pci registers to the Sonics config registers */
+
+	/* save the current map, so it can be restored */
+	reg_win = pci_conf_read(sc->bce_pa.pa_pc, sc->bce_pa.pa_tag,
+	    BCE_REG_WIN);
+
+	/* set register window to Sonics registers */
+	pci_conf_write(sc->bce_pa.pa_pc, sc->bce_pa.pa_tag, BCE_REG_WIN,
+	    BCE_SONICS_WIN);
+
+	/* enable SB to PCI interrupt */
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_SBINTVEC,
+	    bus_space_read_4(sc->bce_btag, sc->bce_bhandle, BCE_SBINTVEC) |
+	    SBIV_ENET0);
+
+	/* enable prefetch and bursts for sonics-to-pci translation 2 */
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_SPCI_TR2,
+	    bus_space_read_4(sc->bce_btag, sc->bce_bhandle, BCE_SPCI_TR2) |
+	    SBTOPCI_PREF | SBTOPCI_BURST);
+
+	/* restore to ethernet register space */
+	pci_conf_write(sc->bce_pa.pa_pc, sc->bce_pa.pa_tag, BCE_REG_WIN,
+	    reg_win);
+
+	/* Reset the chip to a known state. */
+	bce_reset(sc);
+
+	/* Initialize transmit descriptors */
+	memset(sc->bce_tx_ring, 0, BCE_NTXDESC * sizeof(struct bce_dma_slot));
+	sc->bce_txsnext = 0;
+	sc->bce_txin = 0;
+
+	/* enable crc32 generation */
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_MACCTL,
+	    bus_space_read_4(sc->bce_btag, sc->bce_bhandle, BCE_MACCTL) |
+	    BCE_EMC_CG);
+
+	/* setup DMA interrupt control */
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_DMAI_CTL, 1 << 24);	/* MAGIC */
+
+	/* setup packet filter */
+	bce_set_filter(ifp);
+
+	/* set max frame length, account for possible vlan tag */
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_RX_MAX,
+	    ETHER_MAX_LEN + 32);
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_TX_MAX,
+	    ETHER_MAX_LEN + 32);
+
+	/* set tx watermark */
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_TX_WATER, 56);
+
+	/* enable transmit */
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_DMA_TXCTL, XC_XE);
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_DMA_TXADDR,
+	    sc->bce_ring_map->dm_segs[0].ds_addr + PAGE_SIZE + 0x40000000);	/* MAGIC */
+
+	/*
+         * Give the receive ring to the chip, and
+         * start the receive DMA engine.
+         */
+	sc->bce_rxin = 0;
+
+	/* clear the rx descriptor ring */
+	memset(sc->bce_rx_ring, 0, BCE_NRXDESC * sizeof(struct bce_dma_slot));
+	/* enable receive */
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_DMA_RXCTL,
+	    30 << 1 | 1);	/* MAGIC */
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_DMA_RXADDR,
+	    sc->bce_ring_map->dm_segs[0].ds_addr + 0x40000000);		/* MAGIC */
+
+	/* Initalize receive descriptors */
+	for (i = 0; i < BCE_NRXDESC; i++) {
+		if (sc->bce_cdata.bce_rx_chain[i] == NULL) {
+			if ((error = bce_add_rxbuf(sc, i)) != 0) {
+				printf("%s: unable to allocate or map rx(%d) "
+				    "mbuf, error = %d\n", sc->bce_dev.dv_xname,
+				    i, error);
+				bce_rxdrain(sc);
+				return (error);
+			}
+		} else
+			BCE_INIT_RXDESC(sc, i);
+	}
+
+	/* Enable interrupts */
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_INT_MASK,
+	    I_XI | I_RI | I_XU | I_RO | I_RU | I_DE | I_PD | I_PC | I_TO);
+
+	/* start the receive dma */
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_DMA_RXDPTR,
+	    BCE_NRXDESC * sizeof(struct bce_dma_slot));
+
+	/* set media */
+	mii_mediachg(&sc->bce_mii);
+
+	/* turn on the ethernet mac */
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_ENET_CTL,
+	    bus_space_read_4(sc->bce_btag, sc->bce_bhandle,
+	    BCE_ENET_CTL) | EC_EE);
+
+	/* start timer */
+	timeout_add(&sc->bce_timeout, hz);
+
+	/* mark as running, and no outputs active */
+	ifp->if_flags |= IFF_RUNNING;
+	ifp->if_flags &= ~IFF_OACTIVE;
+
+	return 0;
+}
+
+/* add a mac address to packet filter */
+void
+bce_add_mac(sc, mac, idx)
+	struct bce_softc *sc;
+	u_int8_t *mac;
+	unsigned long   idx;
+{
+	int             i;
+	u_int32_t rval;
+
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_FILT_LOW,
+	    mac[2] << 24 | mac[3] << 16 | mac[4] << 8 | mac[5]);
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_FILT_HI,
+	    mac[0] << 8 | mac[1] | 0x10000);	/* MAGIC */
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_FILT_CTL,
+	    idx << 16 | 8);	/* MAGIC */
+	/* wait for write to complete */
+	for (i = 0; i < 100; i++) {
+		rval = bus_space_read_4(sc->bce_btag, sc->bce_bhandle,
+		    BCE_FILT_CTL);
+		if (!(rval & 0x80000000))	/* MAGIC */
+			break;
+		delay(10);
+	}
+	if (i == 100) {
+		printf("%s: timed out writing pkt filter ctl\n",
+		   sc->bce_dev.dv_xname);
+	}
+}
+
+/* Add a receive buffer to the indiciated descriptor. */
+static int
+bce_add_rxbuf(sc, idx)
+	struct bce_softc *sc;
+	int             idx;
+{
+	struct mbuf    *m;
+	int             error;
+
+	MGETHDR(m, M_DONTWAIT, MT_DATA);
+	if (m == NULL)
+		return (ENOBUFS);
+
+	MCLGET(m, M_DONTWAIT);
+	if ((m->m_flags & M_EXT) == 0) {
+		m_freem(m);
+		return (ENOBUFS);
+	}
+	if (sc->bce_cdata.bce_rx_chain[idx] != NULL)
+		bus_dmamap_unload(sc->bce_dmatag,
+		    sc->bce_cdata.bce_rx_map[idx]);
+
+	sc->bce_cdata.bce_rx_chain[idx] = m;
+
+	error = bus_dmamap_load(sc->bce_dmatag, sc->bce_cdata.bce_rx_map[idx],
+	    m->m_ext.ext_buf, m->m_ext.ext_size, NULL,
+	    BUS_DMA_READ | BUS_DMA_NOWAIT);
+	if (error)
+		return (error);
+
+	bus_dmamap_sync(sc->bce_dmatag, sc->bce_cdata.bce_rx_map[idx], 0,
+	    sc->bce_cdata.bce_rx_map[idx]->dm_mapsize, BUS_DMASYNC_PREREAD);
+
+	BCE_INIT_RXDESC(sc, idx);
+
+	return (0);
+
+}
+
+/* Drain the receive queue. */
+static void
+bce_rxdrain(sc)
+	struct bce_softc *sc;
+{
+	int             i;
+
+	for (i = 0; i < BCE_NRXDESC; i++) {
+		if (sc->bce_cdata.bce_rx_chain[i] != NULL) {
+			bus_dmamap_unload(sc->bce_dmatag,
+			    sc->bce_cdata.bce_rx_map[i]);
+			m_freem(sc->bce_cdata.bce_rx_chain[i]);
+			sc->bce_cdata.bce_rx_chain[i] = NULL;
+		}
+	}
+}
+
+/* Stop transmission on the interface */
+static void
+bce_stop(ifp, disable)
+	struct ifnet   *ifp;
+	int             disable;
+{
+	struct bce_softc *sc = ifp->if_softc;
+	int             i;
+	u_int32_t val;
+
+	/* Stop the 1 second timer */
+	timeout_del(&sc->bce_timeout);
+
+	/* Down the MII. */
+	mii_down(&sc->bce_mii);
+
+	/* Disable interrupts. */
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_INT_MASK, 0);
+	bus_space_read_4(sc->bce_btag, sc->bce_bhandle, BCE_INT_MASK);
+
+	/* Disable emac */
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_ENET_CTL, EC_ED);
+	for (i = 0; i < 200; i++) {
+		val = bus_space_read_4(sc->bce_btag, sc->bce_bhandle,
+		    BCE_ENET_CTL);
+		if (!(val & EC_ED))
+			break;
+		delay(10);
+	}
+
+	/* Stop the DMA */
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_DMA_RXCTL, 0);
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_DMA_TXCTL, 0);
+	delay(10);
+
+	/* Release any queued transmit buffers. */
+	for (i = 0; i < BCE_NTXDESC; i++) {
+		if (sc->bce_cdata.bce_tx_chain[i] != NULL) {
+			bus_dmamap_unload(sc->bce_dmatag,
+			    sc->bce_cdata.bce_tx_map[i]);
+			m_freem(sc->bce_cdata.bce_tx_chain[i]);
+			sc->bce_cdata.bce_tx_chain[i] = NULL;
+		}
+	}
+
+	/* drain receive queue */
+	if (disable)
+		bce_rxdrain(sc);
+
+	/* Mark the interface down and cancel the watchdog timer. */
+	ifp->if_flags &= ~(IFF_RUNNING | IFF_OACTIVE);
+	ifp->if_timer = 0;
+}
+
+/* reset the chip */
+static void
+bce_reset(sc)
+	struct bce_softc *sc;
+{
+	u_int32_t val;
+	u_int32_t sbval;
+	int             i;
+
+	/* if SB core is up */
+	sbval = bus_space_read_4(sc->bce_btag, sc->bce_bhandle,
+	    BCE_SBTMSTATELOW);
+	if ((sbval & (SBTML_RESET | SBTML_REJ | SBTML_CLK)) == SBTML_CLK) {
+		bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_DMAI_CTL,
+		    0);
+
+		/* disable emac */
+		bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_ENET_CTL,
+		    EC_ED);
+		for (i = 0; i < 200; i++) {
+			val = bus_space_read_4(sc->bce_btag, sc->bce_bhandle,
+			    BCE_ENET_CTL);
+			if (!(val & EC_ED))
+				break;
+			delay(10);
+		}
+		if (i == 200)
+			printf("%s: timed out disabling ethernet mac\n",
+			       sc->bce_dev.dv_xname);
+
+		/* reset the dma engines */
+		bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_DMA_TXCTL, 0);
+		val = bus_space_read_4(sc->bce_btag, sc->bce_bhandle, BCE_DMA_RXSTATUS);
+		/* if error on receive, wait to go idle */
+		if (val & RS_ERROR) {
+			for (i = 0; i < 100; i++) {
+				val = bus_space_read_4(sc->bce_btag,
+				    sc->bce_bhandle, BCE_DMA_RXSTATUS);
+				if (val & RS_DMA_IDLE)
+					break;
+				delay(10);
+			}
+			if (i == 100)
+				printf("%s: receive dma did not go idle after"
+				    " error\n", sc->bce_dev.dv_xname);
+		}
+		bus_space_write_4(sc->bce_btag, sc->bce_bhandle,
+		   BCE_DMA_RXSTATUS, 0);
+
+		/* reset ethernet mac */
+		bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_ENET_CTL,
+		    EC_ES);
+		for (i = 0; i < 200; i++) {
+			val = bus_space_read_4(sc->bce_btag, sc->bce_bhandle,
+			    BCE_ENET_CTL);
+			if (!(val & EC_ES))
+				break;
+			delay(10);
+		}
+		if (i == 200)
+			printf("%s: timed out resetting ethernet mac\n",
+			       sc->bce_dev.dv_xname);
+	} else {
+		u_int32_t reg_win;
+
+		/* remap the pci registers to the Sonics config registers */
+
+		/* save the current map, so it can be restored */
+		reg_win = pci_conf_read(sc->bce_pa.pa_pc, sc->bce_pa.pa_tag,
+		    BCE_REG_WIN);
+		/* set register window to Sonics registers */
+		pci_conf_write(sc->bce_pa.pa_pc, sc->bce_pa.pa_tag,
+		    BCE_REG_WIN, BCE_SONICS_WIN);
+
+		/* enable SB to PCI interrupt */
+		bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_SBINTVEC,
+		    bus_space_read_4(sc->bce_btag, sc->bce_bhandle,
+		        BCE_SBINTVEC) |
+		    SBIV_ENET0);
+
+		/* enable prefetch and bursts for sonics-to-pci translation 2 */
+		bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_SPCI_TR2,
+		    bus_space_read_4(sc->bce_btag, sc->bce_bhandle,
+			BCE_SPCI_TR2) |
+		    SBTOPCI_PREF | SBTOPCI_BURST);
+
+		/* restore to ethernet register space */
+		pci_conf_write(sc->bce_pa.pa_pc, sc->bce_pa.pa_tag, BCE_REG_WIN,
+			       reg_win);
+	}
+
+	/* disable SB core if not in reset */
+	if (!(sbval & SBTML_RESET)) {
+
+		/* set the reject bit */
+		bus_space_write_4(sc->bce_btag, sc->bce_bhandle,
+		    BCE_SBTMSTATELOW, SBTML_REJ | SBTML_CLK);
+		for (i = 0; i < 200; i++) {
+			val = bus_space_read_4(sc->bce_btag, sc->bce_bhandle,
+			    BCE_SBTMSTATELOW);
+			if (val & SBTML_REJ)
+				break;
+			delay(1);
+		}
+		if (i == 200)
+			printf("%s: while resetting core, reject did not set\n",
+			    sc->bce_dev.dv_xname);
+		/* wait until busy is clear */
+		for (i = 0; i < 200; i++) {
+			val = bus_space_read_4(sc->bce_btag, sc->bce_bhandle,
+			    BCE_SBTMSTATEHI);
+			if (!(val & 0x4))
+				break;
+			delay(1);
+		}
+		if (i == 200)
+			printf("%s: while resetting core, busy did not clear\n",
+			    sc->bce_dev.dv_xname);
+		/* set reset and reject while enabling the clocks */
+		bus_space_write_4(sc->bce_btag, sc->bce_bhandle,
+		    BCE_SBTMSTATELOW,
+		    SBTML_FGC | SBTML_CLK | SBTML_REJ | SBTML_RESET);
+		val = bus_space_read_4(sc->bce_btag, sc->bce_bhandle,
+		    BCE_SBTMSTATELOW);
+		delay(10);
+		bus_space_write_4(sc->bce_btag, sc->bce_bhandle,
+		    BCE_SBTMSTATELOW, SBTML_REJ | SBTML_RESET);
+		delay(1);
+	}
+	/* enable clock */
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_SBTMSTATELOW,
+	    SBTML_FGC | SBTML_CLK | SBTML_RESET);
+	val = bus_space_read_4(sc->bce_btag, sc->bce_bhandle, BCE_SBTMSTATELOW);
+	delay(1);
+
+	/* clear any error bits that may be on */
+	val = bus_space_read_4(sc->bce_btag, sc->bce_bhandle, BCE_SBTMSTATEHI);
+	if (val & 1)
+		bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_SBTMSTATEHI,
+		    0);
+	val = bus_space_read_4(sc->bce_btag, sc->bce_bhandle, BCE_SBIMSTATE);
+	if (val & SBIM_MAGIC_ERRORBITS)
+		bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_SBIMSTATE,
+		    val & ~SBIM_MAGIC_ERRORBITS);
+
+	/* clear reset and allow it to propagate throughout the core */
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_SBTMSTATELOW,
+	    SBTML_FGC | SBTML_CLK);
+	val = bus_space_read_4(sc->bce_btag, sc->bce_bhandle, BCE_SBTMSTATELOW);
+	delay(1);
+
+	/* leave clock enabled */
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_SBTMSTATELOW,
+	    SBTML_CLK);
+	val = bus_space_read_4(sc->bce_btag, sc->bce_bhandle, BCE_SBTMSTATELOW);
+	delay(1);
+
+	/* initialize MDC preamble, frequency */
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_MI_CTL, 0x8d);	/* MAGIC */
+
+	/* enable phy, differs for internal, and external */
+	val = bus_space_read_4(sc->bce_btag, sc->bce_bhandle, BCE_DEVCTL);
+	if (!(val & BCE_DC_IP)) {
+		/* select external phy */
+		bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_ENET_CTL, EC_EP);
+	} else if (val & BCE_DC_ER) {	/* internal, clear reset bit if on */
+		bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_DEVCTL,
+		    val & ~BCE_DC_ER);
+		delay(100);
+	}
+}
+
+/* Set up the receive filter. */
+void
+bce_set_filter(ifp)
+	struct ifnet   *ifp;
+{
+	struct bce_softc *sc = ifp->if_softc;
+
+	if (ifp->if_flags & IFF_PROMISC) {
+		ifp->if_flags |= IFF_ALLMULTI;
+		bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_RX_CTL,
+		    bus_space_read_4(sc->bce_btag, sc->bce_bhandle, BCE_RX_CTL)
+		    | ERC_PE);
+	} else {
+		ifp->if_flags &= ~IFF_ALLMULTI;
+
+		/* turn off promiscuous */
+		bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_RX_CTL,
+		    bus_space_read_4(sc->bce_btag, sc->bce_bhandle,
+		    BCE_RX_CTL) & ~ERC_PE);
+
+		/* enable/disable broadcast */
+		if (ifp->if_flags & IFF_BROADCAST)
+			bus_space_write_4(sc->bce_btag, sc->bce_bhandle,
+			    BCE_RX_CTL, bus_space_read_4(sc->bce_btag,
+			    sc->bce_bhandle, BCE_RX_CTL) & ~ERC_DB);
+		else
+			bus_space_write_4(sc->bce_btag, sc->bce_bhandle,
+			    BCE_RX_CTL, bus_space_read_4(sc->bce_btag,
+			    sc->bce_bhandle, BCE_RX_CTL) | ERC_DB);
+
+		/* disable the filter */
+		bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_FILT_CTL,
+		    0);
+
+		/* add our own address */
+		bce_add_mac(sc, sc->bce_ac.ac_enaddr, 0);
+
+		/* for now accept all multicast */
+		bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_RX_CTL,
+		bus_space_read_4(sc->bce_btag, sc->bce_bhandle, BCE_RX_CTL) |
+		    ERC_AM);
+		ifp->if_flags |= IFF_ALLMULTI;
+
+		/* enable the filter */
+		bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_FILT_CTL,
+		    bus_space_read_4(sc->bce_btag, sc->bce_bhandle,
+		    BCE_FILT_CTL) | 1);
+	}
+}
+
+/* Read a PHY register on the MII. */
+int
+bce_mii_read(self, phy, reg)
+	struct device  *self;
+	int             phy, reg;
+{
+	struct bce_softc *sc = (struct bce_softc *) self;
+	int             i;
+	u_int32_t val;
+
+	/* clear mii_int */
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_MI_STS, BCE_MIINTR);
+
+	/* Read the PHY register */
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_MI_COMM,
+	    (MII_COMMAND_READ << 28) | (MII_COMMAND_START << 30) |	/* MAGIC */
+	    (MII_COMMAND_ACK << 16) | BCE_MIPHY(phy) | BCE_MIREG(reg));	/* MAGIC */
+
+	for (i = 0; i < BCE_TIMEOUT; i++) {
+		val = bus_space_read_4(sc->bce_btag, sc->bce_bhandle, BCE_MI_STS);
+		if (val & BCE_MIINTR)
+			break;
+		delay(10);
+	}
+	val = bus_space_read_4(sc->bce_btag, sc->bce_bhandle, BCE_MI_COMM);
+	if (i == BCE_TIMEOUT) {
+		printf("%s: PHY read timed out reading phy %d, reg %d, val = "
+		    "0x%08x\n", sc->bce_dev.dv_xname, phy, reg, val);
+		return (0);
+	}
+	return (val & BCE_MICOMM_DATA);
+}
+
+/* Write a PHY register on the MII */
+void
+bce_mii_write(self, phy, reg, val)
+	struct device  *self;
+	int             phy, reg, val;
+{
+	struct bce_softc *sc = (struct bce_softc *) self;
+	int             i;
+	u_int32_t rval;
+
+	/* clear mii_int */
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_MI_STS,
+	    BCE_MIINTR);
+
+	/* Write the PHY register */
+	bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_MI_COMM,
+	    (MII_COMMAND_WRITE << 28) | (MII_COMMAND_START << 30) |	/* MAGIC */
+	    (MII_COMMAND_ACK << 16) | (val & BCE_MICOMM_DATA) |	/* MAGIC */
+	    BCE_MIPHY(phy) | BCE_MIREG(reg));
+
+	/* wait for write to complete */
+	for (i = 0; i < BCE_TIMEOUT; i++) {
+		rval = bus_space_read_4(sc->bce_btag, sc->bce_bhandle,
+		    BCE_MI_STS);
+		if (rval & BCE_MIINTR)
+			break;
+		delay(10);
+	}
+	rval = bus_space_read_4(sc->bce_btag, sc->bce_bhandle, BCE_MI_COMM);
+	if (i == BCE_TIMEOUT) {
+		printf("%s: PHY timed out writing phy %d, reg %d, val "
+		    "= 0x%08x\n", sc->bce_dev.dv_xname, phy, reg, val);
+	}
+}
+
+/* sync hardware duplex mode to software state */
+void
+bce_statchg(self)
+	struct device  *self;
+{
+	struct bce_softc *sc = (struct bce_softc *) self;
+	u_int32_t reg;
+
+	/* if needed, change register to match duplex mode */
+	reg = bus_space_read_4(sc->bce_btag, sc->bce_bhandle, BCE_TX_CTL);
+	if (sc->bce_mii.mii_media_active & IFM_FDX && !(reg & EXC_FD))
+		bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_TX_CTL,
+		    reg | EXC_FD);
+	else if (!(sc->bce_mii.mii_media_active & IFM_FDX) && reg & EXC_FD)
+		bus_space_write_4(sc->bce_btag, sc->bce_bhandle, BCE_TX_CTL,
+		    reg & ~EXC_FD);
+
+	/*
+         * Enable activity led.
+         * XXX This should be in a phy driver, but not currently.
+         */
+	bce_mii_write((struct device *) sc, 1, 26,	/* MAGIC */
+	    bce_mii_read((struct device *) sc, 1, 26) & 0x7fff);	/* MAGIC */
+	/* enable traffic meter led mode */
+	bce_mii_write((struct device *) sc, 1, 26,	/* MAGIC */
+	    bce_mii_read((struct device *) sc, 1, 27) | (1 << 6));	/* MAGIC */
+}
+
+/* Set hardware to newly-selected media */
+int
+bce_mediachange(ifp)
+	struct ifnet   *ifp;
+{
+	struct bce_softc *sc = ifp->if_softc;
+
+	if (ifp->if_flags & IFF_UP)
+		mii_mediachg(&sc->bce_mii);
+	return (0);
+}
+
+/* Get the current interface media status */
+static void
+bce_mediastatus(ifp, ifmr)
+	struct ifnet   *ifp;
+	struct ifmediareq *ifmr;
+{
+	struct bce_softc *sc = ifp->if_softc;
+
+	mii_pollstat(&sc->bce_mii);
+	ifmr->ifm_active = sc->bce_mii.mii_media_active;
+	ifmr->ifm_status = sc->bce_mii.mii_media_status;
+}
+
+/* One second timer, checks link status */
+static void
+bce_tick(v)
+	void           *v;
+{
+	struct bce_softc *sc = v;
+
+	/* Tick the MII. */
+	mii_tick(&sc->bce_mii);
+
+	timeout_add(&sc->bce_timeout, hz);
+}
diff --git a/sys/dev/pci/if_bcereg.h b/sys/dev/pci/if_bcereg.h
new file mode 100644
index 00000000000..9de71f4f4e6
--- /dev/null
+++ b/sys/dev/pci/if_bcereg.h
@@ -0,0 +1,154 @@
+/* $OpenBSD: if_bcereg.h,v 1.1 2004/02/13 23:24:30 andreas Exp $ */
+/* $NetBSD: if_bcereg.h,v 1.3 2003/09/29 01:53:02 mrg Exp $	 */
+
+/*
+ * Copyright (c) 2003 Clifford Wright. All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. The name of the author may not be used to endorse or promote products
+ *    derived from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
+ * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
+ * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
+ * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
+ * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
+ * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+ * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
+ * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+ * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ */
+
+/* Broadcom BCM440x */
+
+/* PCI registers defined in the PCI 2.2 spec. */
+#define BCE_PCI_BAR0			0x10
+
+/* Sonics SB register access */
+#define BCE_REG_WIN			0x80
+#define BCE_SONICS_WIN			0x18002000
+
+/* Sonics PCI control */
+#define BCE_SPCI_TR2			0x0108	/* Sonics to PCI translation
+						 * 2 */
+/* bit defines */
+#define SBTOPCI_PREF			0x4	/* prefetch enable */
+#define SBTOPCI_BURST			0x8	/* burst enable */
+#define BCE_SBINTVEC			0x0f94
+/* interrupt bits */
+#define SBIV_ENET0			0x02	/* enable for enet 0 */
+#define SBIV_ENET1			0x40	/* enable for enet 1 */
+
+
+/* Host Interface Registers */
+
+#define BCE_DEVCTL			0x0000	/* device control */
+/* device control bits */
+#define BCE_DC_IP			0x00000400	/* internal phy present */
+#define BCE_DC_ER			0x00008000	/* ephy reset */
+/* Interrupt Control */
+#define BCE_INT_STS			0x0020
+#define BCE_INT_MASK			0x0024
+/* bits for both status, and mask */
+#define I_TO				0x00000080	/* general timeout */
+#define I_PC				0x00000400	/* descriptor error */
+#define I_PD				0x00000800	/* data error */
+#define I_DE				0x00001000	/* desc. protocol error */
+#define I_RU				0x00002000	/* rx desc. underflow */
+#define I_RO				0x00004000	/* rx fifo overflow */
+#define I_XU				0x00008000	/* tx fifo underflow */
+#define I_RI				0x00010000	/* receive interrupt */
+#define I_XI				0x01000000	/* transmit interrupt */
+
+/* Ethernet MAC Control */
+#define BCE_MACCTL			0x00A8	/* ethernet mac control */
+/* mac control bits */
+#define BCE_EMC_CG			0x00000001	/* crc32 generation */
+
+/* DMA Interrupt control */
+#define BCE_DMAI_CTL			0x0100
+
+/* DMA registers */
+#define BCE_DMA_TXCTL			0x0200	/* transmit control */
+/* transmit control bits */
+#define XC_XE				0x1	/* transmit enable */
+#define XC_LE				0x4	/* loopback enable */
+#define BCE_DMA_TXADDR			0x0204	/* tx ring base address */
+#define BCE_DMA_DPTR			0x0208	/* last tx descriptor */
+#define BCE_DMA_TXSTATUS		0x020C	/* active desc, etc */
+#define BCE_DMA_RXCTL			0x0210	/* enable, etc */
+#define BCE_DMA_RXADDR			0x0214	/* rx ring base address */
+#define BCE_DMA_RXDPTR			0x0218	/* last descriptor */
+#define BCE_DMA_RXSTATUS		0x021C	/* active desc, etc */
+/* receive status bits */
+#define RS_CD_MASK			0x0fff	/* current descriptor pointer */
+#define RS_DMA_IDLE			0x2000	/* DMA is idle */
+#define RS_ERROR			0xf0000	/* had an error */
+
+/* Ethernet MAC control registers */
+#define BCE_RX_CTL			0x0400	/* receive config */
+/* config bits */
+#define ERC_DB				0x00000001	/* disable broadcast */
+#define ERC_AM				0x00000002	/* rx all multicast */
+#define ERC_PE				0x00000008	/* promiscuous enable */
+
+#define BCE_RX_MAX			0x0404	/* max packet length */
+#define BCE_TX_MAX			0x0408
+#define BCE_MI_CTL			0x0410
+#define BCE_MI_COMM			0x0414
+#define BCE_MI_STS			0x041C
+/* mii status bits */
+#define BCE_MIINTR			0x00000001	/* mii mdio interrupt */
+
+#define BCE_FILT_LOW			0x0420	/* mac low 4 bytes */
+#define BCE_FILT_HI			0x0424	/* mac hi 2 bytes */
+#define BCE_FILT_CTL			0x0428	/* packet filter ctrl */
+#define BCE_ENET_CTL			0x042C
+/* bits for mac control */
+#define EC_EE				0x00000001	/* emac enable */
+#define EC_ED				0x00000002	/* disable emac */
+#define EC_ES				0x00000004	/* soft reset emac */
+#define EC_EP				0x00000008	/* external phy */
+#define BCE_TX_CTL			0x0430
+/* bits for transmit control */
+#define EXC_FD				0x00000001	/* full duplex */
+#define BCE_TX_WATER			0x0434	/* tx watermark */
+
+/* statistics counters */
+#define BCE_RX_PKTS			0x058C
+
+/* SiliconBackplane registers */
+#define BCE_SBIMSTATE			0x0f90
+#define BCE_SBTMSTATELOW		0x0f98
+#define BCE_SBTMSTATEHI			0x0f9C
+#define SBTML_RESET			0x1	/* reset */
+#define SBTML_REJ			0x2	/* reject */
+#define SBTML_CLK			0x10000	/* clock enable */
+#define SBTML_FGC			0x20000	/* force gated clocks on */
+
+/* MI communication register */
+#define BCE_MICOMM_DATA			0x0000FFFF
+
+#define BCE_MIREG(x)			((x & 0x1F) << 18)
+#define BCE_MIPHY(x)			((x & 0x1F) << 23)
+
+/* Magic constants.... */
+#define BCE_MAGIC_PHYEMAC_BASE		0x1000
+#define	 BCE_MAGIC_PHY			(BCE_MAGIC_PHYEMAC_BASE + 90)
+#define	 BCE_MAGIC_ENET0		(BCE_MAGIC_PHYEMAC_BASE + 79)
+#define	 BCE_MAGIC_ENET1		(BCE_MAGIC_PHYEMAC_BASE + 78)
+#define	 BCE_MAGIC_ENET2		(BCE_MAGIC_PHYEMAC_BASE + 81)
+#define	 BCE_MAGIC_ENET3		(BCE_MAGIC_PHYEMAC_BASE + 80)
+#define	 BCE_MAGIC_ENET4		(BCE_MAGIC_PHYEMAC_BASE + 83)
+#define	 BCE_MAGIC_ENET5		(BCE_MAGIC_PHYEMAC_BASE + 82)
+
+#define  SBIM_MAGIC_ERRORBITS		0x60000