设为首页收藏本站

宽带技术网

 找回密码
 注 册

QQ登录

只需一步,快速开始

扫一扫,访问微社区

查看: 12893|回复: 18

HGG420N V3光猫TTL破解成功一半,求高人

[复制链接]
本帖最后由 yale2000 于 2013-3-7 09:02 编辑
& |8 f0 O4 z' ]" C; `
' q9 W+ k# j7 uHGG420N V3拆机
4 K% t8 N( p7 T3 }4 V+ K1. 取出底部4个橡胶垫,去除藏在橡胶垫下面的螺丝。
1 U: n6 ?$ o& t5 R% r看看PCBA:
0 U! n* a- N# V, Z0 S, @* t8 X& F1 E2 L

; X1 }$ ^. w( j, ?3 h$ |% J4 l2. 我们看到在PCBA左上角有5个并排插针,无任何标识。经仪表检测和研究,确认插针从左到右依次为VCC,RXD,GND,TXD,VCC(如图)。
" N1 I6 e0 x$ a1 H( N. f% k- o& \0 ^% j* \! b& H/ n
8 @+ b* f' j( G
% Q: d% y/ k4 _  ]7 t( _. s
TTL线破解前的准备( N& h  Q% k+ F) a$ G
1. 安装TTL-to-Serial驱动* A2 T+ b7 a- ~- t" l" s" W: A
3 R: c# M5 N  p
2. 使用杜邦线或其他线材连接到光猫对应的接口上。TTL线的GND的细长型插管插到GND插针上,TTL线的RXD插到RXD插针上,TXD也如此办理。千万,VCC插针请不要插(烧了编程器别怪我没有提醒)
. F8 w7 ]# ~0 B/ o3. USB-TTL编程器插入电脑。这时,打开设备管理器,点开端口,我们能看到COM x已经作为TTL通信口。(根据每台电脑的具体情况,COM口会不一样,我自己的是COM3口,需要自己去设备管理器里查看)。
0 S9 K; o$ q) L& z9 v& p8 o" w6 X8 R, y& g
4.将网线一段连入猫的LAN口,任意一个都可以,另一段连接电脑。设置电脑:192.168.1.100,255.255.255.0,192.168.1.1* H9 _) u; a& b- c; }: M) l
: S0 x! @( t% p$ Z2 {& I
5. 下载并安装SecureCRT v6.5.8.380汉化版
5 T$ {0 F. I7 N$ x8 i: Z3 _# Y, c" W% S6 w# P9 i9 e8 c! x, U& S

  z: y# e, P2 m' \" _+ m' C- y' ?6. 到此我们的准备工作就做好了,下面我们就开始破解过程。
+ [4 W$ d9 x4 F( f2 `! g
+ f5 V; G7 i! N& p8 k5 y破解步骤
' e3 X+ k; g5 G: ]; m1. 重复检查准备工作。% P. w$ G) s" p' Z3 J4 ~8 f* P
2. 我们在PC上启动程序SecureCRT,选择菜单“文件”,然后选择快速连接,并按下图进行设置。# M  R. B6 F) }' J9 |7 v% L

% s5 |( h$ ~3 b- j1 D

2 T5 E+ I% O) d. K9 B' E点击连接,我们就能看到如下界面:
- Q! M3 T7 l* \( ?+ O: Z6 B
  _- K; ?  T0 x1 M( [# x8 z. ^3.  然后打开HGG420N V3电源,这时SecureCRT窗口会有E文滚动,当滚动到停止,任意按下键盘任意一个键,就会进入ONT> 命令行界面(如下分割线)。/ H6 }  ?( ]$ d$ ?* X  X7 c8 U" v
4. 令人郁闷的是:输入各种linux命令,无任何反应。。。。。。
4 j- k+ ]- u6 L  g  n7 W9 e! @/ q* [7 U# N4 v
至此,TTL破解成功一半,求高人。。。. S: p; ?: a% n" m

2 G  r3 t5 x& ~/ G$ f- `-------------------------------------------------------------------------------------------------------------------------------------------------
% N8 f* A6 W& Z4 PBootROM 1.34
3 e; @8 u- |% k; Q4 Y. \Booting from NAND flash
" Q/ k5 x0 a" ]" b( i, L6 |BootROM: Image checksum verification PASSED
1 U; z2 y' d4 j9 }. b  Y' Q
* x6 M8 N5 O7 ]
+ r# b% N1 ^' x# \0 O' Q              Gpon System Boot0 \; B6 C! m2 O
" [2 d/ d' A' ?8 A
: b" {- v7 ^' Q1 v" U
Copyright 2011 CIG Gpon ONT System.
  t8 W  ]2 m/ k2 s7 K
4 Y5 c- u# {+ B( k3 |- Q0 ^CPU           : GPON Soc$ _# r5 c: j+ @7 C6 U  g
BOOT version  : V8.1.13
& ~" Q2 a9 x* {" j9 p' S5 a$ `  N/ Z8 HPEX 1: Root Complex Interface, Detected Link X1
$ F4 `  p, H$ u2 B% wDRAM          : 128 MB$ z! Y3 k- Z0 Q/ I, k7 K
NAND:  1bit HM ECC, Size: 64 MiB! I8 c( J  @  B8 c* s! q
EEPROM version: 0x0003
, b8 o% `1 O5 N  }1 tUSB 0: Host Mode. y4 P5 |3 K; l! l& i# T6 Y! u. Q
Modules Detected:
+ N2 G! h  P* A& F, ^       GPON module detected.0 _) I. y: U  [7 Y" K
       Ethernet Switch on MAC0.2 K) T& G4 \; m9 F$ o# e. K) ^3 }
       3xFE PHY Module.
1 _4 l) B5 ~9 z+ P5 H       GE-PHY on Switch port #0.
9 M3 h# W8 {0 e+ CNet:   egiga0 [PRIME], egiga1
! p$ e8 P* U' i1 d; l**************************************) {0 ?" T2 t5 D7 ~0 F  P; p& z
*                                    *
! ]1 R" u( ^4 U: E8 |2 t0 n6 H3 R% _/ X*  KEY -- Enter console terminal     *
1 @' z. m' y# R9 O7 |8 @* g8 S% ?*                                    *3 q* Y# ]4 R3 [$ D6 T) G
**************************************6 s/ |7 o8 E9 [9 [! O$ j
waiting for your select ...; T9 J$ j" X' Y! ?

4 P3 X; K8 n& g5 F3 bLoading 'uImage' from  CRAMFS Partition 'imageb' to 0x2000000.( r( o( q, V8 [! _% A% X
7 N3 O7 A/ u2 R- V: u
Root Filesystem crc check successfully!" _' D8 w( o- l
+ l) D+ E: z1 p/ A+ P& g
### CRAMFS load complete: 2036300 bytes loaded to 0x2000000
' \4 h7 |% J" b! W: D6 X9 Y/ J+ P* y/ P* k/ b
        Software version:  1.22UYG.1F0
- Z; h6 ~" h+ U: S* W5 v/ a, b* S% V4 b2 ^1 a4 q9 s
## Booting kernel from Legacy Image at 02000000 ...4 F8 i* _7 _; p' E
   Image Name:   Linux-2.6.32.11( M0 m  g; O9 Q6 c$ [( v
   Created:      2012-05-10   5:21:52 UTC
- j! u4 M! w/ H6 d# @7 R   Image Type:   ARM Linux Kernel Image (uncompressed)# }9 H- i1 z" C6 ~
   Data Size:    2036236 Bytes =  1.9 MB
1 J0 _* D2 V; B& u7 S+ G/ M   Load Address: 00008000
- n* ^8 @$ f( |: Y, w8 N' ~   Entry Point:  00008000
4 Z1 Z7 I  z8 B% ^  ^   Verifying Checksum ... OK. W( {1 x! \/ H2 o' |/ ~
   Loading Kernel Image ... OK
" d" Y# x/ B, A9 M+ C2 wOK4 x* `# v3 A# B$ i+ `

! T; O+ p' r/ Z/ b8 I* B+ RStarting kernel ...
" b, E+ E+ ~- F$ ?" O% l6 d
& v4 c7 |3 H% J! JUncompressing Linux..................................................................................................................................... done, booting the kernel.: [2 f2 E* T6 U9 m& |
Linux version 2.6.32.11 (root@localhost.localdomain) (gcc version 4.2.4) #1 Wed May 9 22:21:44 PDT 2012
3 g! ?7 K' G3 ]4 WCPU: Feroceon 88FR131 [56251311] revision 1 (ARMv5TE), cr=00053977, C( {5 r6 P. G8 u: v
CPU: VIVT data cache, VIVT instruction cache( m! r& q0 |0 G7 Y% i
Machine: Feroceon-KW2
5 p, G& B) U& L8 l* N& OUsing UBoot passing parameters structure( {9 y; j1 `9 o% C' ?. a
Memory policy: ECC disabled, Data cache writeback, c! S$ O) H3 W7 E& o: C& `# {
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32512+ E3 S# L7 V. e+ ?5 x
Kernel command line: console=ttyS0,115200 root=/dev/mtdblock3 mtdparts=nand_mtd:0x100000@0x0(Boot1),0x200000@0x200000(Config1),18M@0x600000(ImageA),18M@0x2100000(ImageB),4M@0x3c00000(MidWare),0x100000@0x100000(Boot2),0x200000@0x400000(Config2),9M@0x1800000(Imagec1),9M@0x3300000(Imagec2) rootfstype=cramfs mv_net_config=0 mv_phone_config=dev0:fxs,dev1:fxs mem=128M flash=nand 5srst=0 pwrLed=255 ethOpt=560% n, n. |% z7 z+ s
PID hash table entries: 512 (order: -1, 2048 bytes): |6 {6 `& W) k3 Q: e% ^# K/ o
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
$ F* E+ W! V( i4 q/ TInode-cache hash table entries: 8192 (order: 3, 32768 bytes)! ]4 `9 l' N3 L- w- d; J+ @
Memory: 128MB = 128MB total5 h+ A7 Q2 k- _
Memory: 125340KB available (3796K code, 524K data, 104K init, 0K highmem), y! M0 `# B! Z% R  D' K# h
Hierarchical RCU implementation.
$ e2 o% F9 t2 |2 z+ B9 iNR_IRQS:192: R- K* @* m: m
Console: colour dummy device 80x30
' ?: ~/ H* U% L, O7 c9 h: nCalibrating delay loop... 1191.93 BogoMIPS (lpj=595968)/ U7 z7 s7 P* M, i+ f
Mount-cache hash table entries: 512* x7 H+ c2 T+ \
CPU: Testing write buffer coherency: ok
- u+ x7 {4 h# r/ fNET: Registered protocol family 168 J  x4 Y. z6 c  @2 U' ]8 d! @
Feroceon L2: Cache support initialised.
0 c" `3 j- w9 {$ r$ B$ R7 G1 P  A5 G* A- W: n( M  H" T$ N
CPU Interface
& A3 h! ~1 T4 Y-------------
# b, W: d. r. q* S! oSDRAM_CS0 ....base 00000000, size 128MB
. V- n: g2 k8 I; cSDRAM_CS1 ....no such
& c/ B6 I, L' YSDRAM_CS2 ....no such
; L, F) o; X3 RSDRAM_CS3 ....no such
. I. B9 Z7 U/ ]  m- N: w$ bDEVICE_CS0 ....no such
' J$ W' F' V2 K6 NDEVICE_CS1 ....no such; R5 E4 q  Q' j: |. @/ L
DEVICE_CS2 ....no such1 Q" f5 I; x" ?" D
DEVICE_CS3 ....no such
% `1 n1 O% g' \PEX0_MEM ....base f3000000, size  16MB , G. h$ Q  @9 u7 {2 V( A9 F7 I
PEX0_IO ....base f2000000, size   1MB # N) t7 ]. P5 _+ M
PEX1_MEM ....base f4000000, size  16MB
! p: \+ o0 Y& }6 @PEX1_IO ....base f2100000, size   1MB 2 N- W/ g  `* `0 K( r2 {' j2 ~
INTER_REGS ....base f1000000, size   1MB 6 P6 z* \( ^9 x
NAND_NOR_CS ....base f8000000, size   2MB 2 C2 \* c( ]; D2 `: ]: ]5 ?
SPI_CS0 ....base f0000000, size  16MB
. G' b4 u, \1 _) ZSPI_CS1 ....no such& \; w  A, M1 p' v/ T$ g
SPI_CS2 ....no such
) v8 T) g, t2 o6 g  V* N: P/ _SPI_CS3 ....no such7 ?& @! {1 E9 h0 `0 n& X/ g
SPI_CS4 ....no such
; ^* l1 H/ {& Z& p; f& [: g6 xSPI_CS5 ....no such
3 l; Y( Y) P0 e" C6 Q6 [5 QSPI_CS6 ....no such
/ a. `- r" U' s7 k6 w) {' [SPI_CS7 ....no such
) d7 z5 k& n- a  c" i, C! SSPI_B_CS0 ....no such
, U0 I; a- m( C( ^+ B$ VBOOT_ROM_CS ....no such
6 t' V1 g$ h+ w4 aDEV_BOOTCS ....no such
5 u- d# x9 l% H4 [" FCRYPT1_ENG ....base f2200000, size   2MB 9 x! r2 Y( X, L  X
CRYPT2_ENG ....no such
7 i# k# g) |& P5 E% q2 jPNC_BM ....base f5000000, size   1MB , C. k0 |. l- X
ETH_CTRL ....base f5100000, size   1MB
3 g6 f1 F- {: P. S9 oPON_CTRL ....base f5200000, size   1MB # Z' Q  H8 r3 ?
NFC_CTRL ....no such
; `8 ?- t0 R( j: [- A, D$ B$ p: h5 X% h; M8 R/ c
  Marvell Development Board (LSP Version KW2_LSP_2.0.5_p14_NQ)-- RD-88F6560-GW  Soc: MV88F6560 Rev 2 LE0 L' z! V8 l  z1 S( o: ^

" T# K6 d! O, t( d3 _: G Detected Tclk 200000000 and SysClk 0
1 |/ `, ?, ]4 d# Z' JMarvell USB EHCI Host controller #0: c783e800
1 b& R  x! s# L  @( RPEX0 interface detected no Link.  ?- X; E/ R; w. W) t: O
PEX1 interface detected Link X1
7 i1 b9 H! A7 J. f& M5 V% k# o+ HPCI: bus0: Fast back to back transfers enabled
* y4 ?1 V# H: Ppci 0000:01:01.0: PME# supported from D0 D1 D2 D3hot D3cold
) P3 c0 o, m6 W* C2 spci 0000:01:01.0: PME# disabled
, J" [: `, u" d, l3 {0 [9 rPCI: bus1: Fast back to back transfers disabled
( \! `1 d0 \2 A' L2 j9 j- Nbio: create slab <bio-0> at 09 |' s& C8 f; s4 M: d
vgaarb: loaded
. R" c* A: ?/ z/ w( D2 N7 }SCSI subsystem initialized; E1 e$ w# |8 w/ `" X% x4 \
cfg80211: Calling CRDA to update world regulatory domain3 V' q, R* O2 _+ x
Switching to clocksource kw_clocksource
) ]* H/ Q# u6 r; K8 j' H* QSwitched to NOHz mode on CPU #09 g0 k) x% M) e& Q8 k/ _( t
NET: Registered protocol family 2! k2 g2 m8 A' W2 \9 r, o! E& x
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
7 M# U; z1 ?+ ?TCP established hash table entries: 4096 (order: 3, 32768 bytes)
# @$ z; L2 l6 |0 UTCP bind hash table entries: 4096 (order: 2, 16384 bytes)
. o3 e/ m8 X( M7 f( _' n" h2 jTCP: Hash tables configured (established 4096 bind 4096)
) l+ r# I" }* Q( g: \6 d6 STCP reno registered6 P- P. F- `/ O( j
NET: Registered protocol family 1
8 v+ R& ^4 I" GRTC has been updated!!!' j$ R* G, i6 [. @
rtc mv_rtc: rtc core: registered kw-rtc as rtc02 @& |$ p2 ^7 ~- d* {$ Q
RTC registered
' f1 o! S+ D! Dcpufreq: Init kirkwood cpufreq driver  X- B/ K) t) X0 F" \
NFP (fib) init 16384 entries, 65536 bytes: z0 R' n5 G+ M+ x+ ]1 _
NFP (pnc) init 471 entries, 13188 bytes: q( y( v6 p. L* V% v0 y) O" t# N
cesadev_init(c000cad0)% R  f- i  j5 W, @, o5 l
mvCesaInit: channels=1, session=640, queue=64
8 P5 }2 F' C2 m% h5 T! e( HJFFS2 version 2.2. (NAND) © 2001-2006 Red Hat, Inc.
, w. L' j+ u) vfuse init (API version 7.13)8 ~" [4 o- S9 Z1 r7 `- e/ ^  k# J
msgmni has been set to 245( C5 T- |8 q5 Y- J1 ^3 ^( E
alg: No test for cipher_null (cipher_null-generic)9 Y, `3 Z3 B+ h! P3 \7 u5 T( ^
alg: No test for ecb(cipher_null) (ecb-cipher_null)
0 ]+ j' i# x( R! }+ p$ e- k5 N' walg: No test for digest_null (digest_null-generic)8 q5 A9 o8 b/ s
alg: No test for compress_null (compress_null-generic)
6 t- I6 ?- F, x8 B& V  Z, Dalg: No test for stdrng (krng)
$ ^$ C) N0 z) z3 Bio scheduler noop registered
3 w" u7 S" v6 |& p! L! Vio scheduler anticipatory registered (default)
9 d; R' @5 x; ~$ }8 R' lSerial: 8250/16550 driver, 4 ports, IRQ sharing disabled/ e0 r# M  {0 |; p% W. `- w
serial8250.0: ttyS0 at MMIO 0xf1012000 (irq = 33) is a 16550A& `" n/ `; ^9 U4 D/ F
console [ttyS0] enabled
) \% z/ f) Z& |loop: module loaded
/ C9 U1 x5 w; INAND device: Manufacturer ID: 0x98, Chip ID: 0x76 (Toshiba NAND 64MiB 3,3V 8-bit)
+ M) m" S1 i$ H) Q/ |9 x6 jScanning device for bad blocks
+ H. r5 z8 g/ a2 ^! C9 cmdlinepart partitions found on MTD device nand_mtd% u7 U, M' O$ L, f
Using command line partition definition
2 r- `& ?$ E% k4 t% WCreating 9 MTD partitions on "nand_mtd":
7 Z; f; m& `* w' j: Q0x000000000000-0x000000100000 : "Boot1"
, P! N& Y6 x5 f/ j: X0x000000200000-0x000000400000 : "Config1"& j2 m! X' Q2 c+ h
0x000000600000-0x000001800000 : "ImageA"5 v! |! n4 c! p- S( N9 m
0x000002100000-0x000003300000 : "ImageB"$ Z3 y8 X# F* M$ @$ W
0x000003c00000-0x000004000000 : "MidWare"
" ~  [) m0 Z. U( @( K0x000000100000-0x000000200000 : "Boot2"
0 V# ~' }6 B: O! i4 v5 d- W0x000000400000-0x000000600000 : "Config2"$ T" f. ~* Z( u5 c- m9 t
0x000001800000-0x000002100000 : "Imagec1"
5 v0 m/ t7 M# l9 H0x000003300000-0x000003c00000 : "Imagec2"
  `2 P/ G4 W+ O; u' ^! p0 - Base 0x00000000 , Size = 0x08000000.
. I7 U' I- l! o  ]8 - Base 0xf3000000 , Size = 0x01000000.
% b4 u( Z: h* \, K; o9 - Base 0xf2000000 , Size = 0x00100000.
4 O) o( \. N: P10 - Base 0xf4000000 , Size = 0x01000000., M5 e' a+ X6 {3 v1 h
11 - Base 0xf2100000 , Size = 0x00100000.# T# M* R( H* I5 N6 p# a1 G
12 - Base 0xf1000000 , Size = 0x00100000.
0 v3 T0 @& Y& I13 - Base 0xf8000000 , Size = 0x00200000.% R1 O0 Z1 U4 a/ d" z# \, Y2 I
14 - Base 0xf0000000 , Size = 0x01000000.
8 c* t: x& s! |( O& X8 g25 - Base 0xf2200000 , Size = 0x00200000.
: `3 k( T8 c! @27 - Base 0xf5000000 , Size = 0x00100000.+ t! O9 s. Z/ }5 c5 B6 r
28 - Base 0xf5100000 , Size = 0x00100000.. [  Q! ~/ q) z
29 - Base 0xf5200000 , Size = 0x00100000.$ U/ |4 |: H9 F/ S/ k+ R0 D* S: e5 E
mvPncVirtBase = 0xc8c00000
" p3 M% Z5 S) l  H( H) T  o 3 Giga ports supported
' m1 |& C8 B& z0 F  o Giga PON port is #2: - 8 TCONTs supported6 R# J: Y( t' R4 p2 c0 P
  o SKB recycle supported (Enabled)0 U/ h+ D  }* w- B9 T; {5 T( t
  o NETA acceleration mode 4
& H* Z5 k# ~4 z, V  o BM supported: short buffer size is 256 bytes3 s9 L2 b( F7 M- U- T: x6 C
  o PnC supported4 H5 u: ?/ o, R
  o HWF supported
0 d1 s$ s+ z# f* u5 P! I  o PMT supported
8 n" A& t8 i1 e7 q% I* O: t  o RX Queue support: 8 Queues * 128 Descriptors
6 @) j$ j! a: j) u; O  o TX Queue support: 8 Queues * 256 Descriptors
! E/ }) b, v( a! o- E3 R) s  o GSO supported! V, q3 ?" h  w
  o GRO supported
  t- T; H1 h# \  o Receive checksum offload supported9 a! C& Z* o: v  F. `
  o Transmit checksum offload supported! [6 f4 i& |' t& z& i
  o Network Fast Processing (Routing) supported
% s9 T3 Z6 l( m7 X8 H2 D' K5 K  o Driver ERROR statistics enabled, ]5 m& C( P/ H& e& o
  o Driver INFO statistics enabled# t5 m4 X' F) q* F" k; p$ n
  o Driver DEBUG statistics enabled- }2 ^9 f2 I% `2 m; L  r0 r7 r
  o Proc tool API enabled
9 [6 ^' v" W% K# F  _  o Switch support enabled
- M! R8 b/ }& Q$ u* k2 `     o IGMP special processing support
3 P$ _0 ]0 P' p! G" ?' e5 z
2 E; {* v6 r! _" ]6 A6 i4 h  o Loading Switch QuarterDeck driver
* T( X/ ?' Q$ G% L1 [    o Internal GE PHY Connected to Switch Port 0 Detected
% I/ M  M4 Y- P# b+ g5 V    o Setting Switch CPU port (port #4) for 1000 Full with FC
4 x* S# V! s+ ?; T    o Setting Switch CPU port (port #5) for 1000 Full with FC
2 p* p( K! S0 O( w    o Disable disconnected switch port (port #6) and force link down
% G. X# M) j- R- G, |  o Loading 3 network interface(s)
- G. F8 A+ i7 a6 i% t2 e$ D' y
  o Port 0 is connected to Linux netdevice
1 q' e. `: D% p" Q      o Using UBoot netconfig string
' H. o6 S7 ^  E- |, ~* a+ m1 ^        net_config_str: 0
+ i0 ~/ C5 [; [  o Working in External Switch mode
8 D( \! q8 ^) F% m0 t        giga p=0: mtu=2000, mac=c7819f6a
+ K0 o! X7 K) V. C2 Jeth0: Dropping NETIF_F_SG since no checksum feature.5 P7 `) z3 K  |& Q7 R
    o eth0, ifindex = 2, GbE port = 02 E; i" U2 W. d5 h" k
8 l0 t$ h6 C* v5 ~1 M8 P
  o Port 1 is connected to Linux netdevice/ G9 i  }/ A% r2 ^( m
      o Using UBoot netconfig string
* @9 J1 n- B3 d% U+ W1 |: _8 B, ^        net_config_str: 0
) }, Z6 Q* h8 j7 m  [  o Working in External Switch mode
2 K5 A) c2 U) m( ]5 O& i& A        giga p=1: mtu=2000, mac=c7819f6a
5 W1 @% L" I* r( t7 c! U) deth1: Dropping NETIF_F_SG since no checksum feature.
% U- T8 I# Z; _& x    o eth1, ifindex = 3, GbE port = 1: p# ]9 H" P+ v2 J+ K

( J  \$ s1 f9 r  o Port 2 is connected to Linux netdevice
/ C7 K9 s1 g& `6 [        pon p=2: mtu=2000, mac=c7819f6a2 D; k# R3 V4 w5 x
eth2: Dropping NETIF_F_SG since no checksum feature.% u: }5 g- K+ C) B( ~; x
    o eth2, ifindex = 4, GbE port = 29 t3 I& N9 D0 e. y2 G* Y$ @8 k! j
+ E* B/ u' x3 j6 w
PPP generic driver version 2.4.25 b# D# }& l* b4 i7 o$ Y
PPP BSD Compression module registered1 D4 D! ]& Y2 X" n, x' {
NET: Registered protocol family 24
- q2 w: z% J7 N( A5 bmice: PS/2 mouse device common for all mice
0 S+ v2 q& ~  Y( G3 p4 n2 c  b; Ei2c /dev entries driver
7 B( [6 \- b& ^. \6 ?2 w) dLinux telephony interface: v1.00$ L: k1 t/ p5 N* e& f
Loading Marvell vpapi device
5 L( a# A4 C* r, o7 m6 G. uLoading Marvell tdm device( B$ V' q$ U! Z5 j( y
cpuidle: using governor ladder
$ x. z* ]+ @2 q9 I; dcpuidle: using governor menu
, V; u& Q) l8 O8 G0 e& Bnf_conntrack version 0.5.0 (1960 buckets, 7840 max)/ B% T8 z: {& W3 z. B$ [/ Z( L
CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use
2 f0 X4 `. G; B+ k2 |  n' pnf_conntrack.acct=1 kernel parameter, acct=1 nf_conntrack module option or" b% l& e- A5 ~1 s& ^, v
sysctl net.netfilter.nf_conntrack_acct=1 to enable it.
& A. e0 D0 a: V  u7 xIPv4 over IPv4 tunneling driver
7 l& i( w) ~: ?5 i0 n. RGRE over IPv4 tunneling driver7 c. u, V$ f: Q6 C# Z3 w7 t
TCP cubic registered
3 Y% k* l0 Q' G5 mNET: Registered protocol family 17! |2 r; F( m9 t7 M! I: U, A5 ]
Bridge firewalling registered" f0 f, h  q/ x- X/ V4 k( Z3 g
Marvell Kirkwood2 Power Management Initializing
! F  S+ k- [. m, _/ j: a& `rtc mv_rtc: setting system clock to 2000-01-01 00:00:00 UTC (946684800)
3 M( n4 ]* M; q" |! A" _: T, hVFS: Mounted root (cramfs filesystem) readonly on device 31:3.1 i8 d' ]2 k; n5 x5 a" O
Freeing init memory: 104K
8 S* I! N$ C  i7 p0 a5 nPopulating /dev using udev: done
! d3 `+ P$ u! D4 zInitializing random number generator... read-only file system detected...done/ c0 S! s7 {9 F+ ^) e& L/ @
Starting system message bus: done
7 f- W0 f: Q) oStarting network...
; {4 R6 }+ j8 o5 B; Y( N8 q8 tip: RTNETLINK answers: File exists
* w% |7 f6 S, K( C* H7 ~2 u: l[RCS]:  Extract Board Configuration
  Y7 _1 G# ~- o2 ?: m5 T- h5 B. U[RCS]:  Load kernel modules
* G; n8 H/ o  kmv_eth_ports_num = 3
* y! P  m0 w' K/ vmv_eth_rx_special_proc_func register . g$ m# g7 f( ?, i9 L0 a- h
mv_eth_rx_special_proc_func register
0 N: [' d& R; o- y6 lmv_eth_rx_special_proc_func register
- ?3 w7 A7 P; d2 s: Cmv_eth_tx_special_check_func register
# X( H0 ]  v! Y* ^  H- Z3 O" @. qmv_eth_tx_special_check_func register
( S& M0 Q7 W8 ]+ h- [. e6 ~4 ]2 Tmv_eth_tx_special_check_func register
8 k7 J: e7 b  d2 J3 ]6 Y. T= SW Module SYS FS Init ended successfully =
3 q* i( E* S$ U7 n= TPM Module Init ended successfully =
7 Z# d5 w3 s) v+ f5 u( W: @. g; m+ A[RCS]: Start XPON
  t! c3 n) A: `! D- spon interface is eth26 X* A  J- k0 U/ U
[RCS]: Start Data Configuration
8 h( z0 f8 Z6 d  V9 J[RCS]: Start Network! q  Y: D6 Z4 d7 Q! v
pool #0: pkt_size=2048, buf_size=2144 - 2048 of 2048 buffers added
+ ]5 W) d* o' @' E- f; l. \. apool #3: pkt_size=256, buf_size=352 - 2048 of 2048 buffers added; A" F' i% B8 s. R  D+ i. T6 E
eth0: link up
8 ^; {; @( o/ D) J( `8 W& m2 peth0: started2 A: |& |  {; \( r* i3 L7 t( z
pool #1: pkt_size=2048, buf_size=2144 - 2048 of 2048 buffers added
( z8 h6 a. q% e( `: d$ h& a7 h9 Opool #3: pkt_size=256, buf_size=352 - 2048 of 2048 buffers added
0 n: Y* _& ]7 a) ?5 S4 @1 keth1: link up
( F# _4 s- P9 a; q' veth1: started
/ [6 Z+ e" H* t' B, m, K# g, M0 Apool #2: pkt_size=2048, buf_size=2144 - 2048 of 2048 buffers added
3 ?; b3 F9 ~( \! n3 q/ V. y4 z. Dpool #3: pkt_size=256, buf_size=352 - 2048 of 2048 buffers added
* N  i' A' t/ Kpon0: link up
& ]* k8 j  y6 S5 E2 e, Qpon0: started
( b2 T2 G3 q( v6 P0 j5 AEmpty flash at 0x001ff170 ends at 0x001ff200
# K+ M; T( }  P  p' ]5 T8 K: W( v9 I# i7 k) p
# num is 10,nothing need to do
  c: U3 i" P7 d# k3 {. H) t7 s; K0 vEmpty flash at 0x00116214 ends at 0x001164008 [3 K6 k4 h1 o! t5 k7 T
Empty flash at 0x00116d88 ends at 0x00116e00
% R- c7 [: [: w3 uEmpty flash at 0x001f0854 ends at 0x001f0a00
# r& u7 ~# P4 j) ]* ?+ f- eEmpty flash at 0x001f1268 ends at 0x001f1400# w7 T2 b: t2 C/ }3 c! O+ X
Empty flash at 0x001f1c6c ends at 0x001f1e000 a; m$ v$ N3 |3 z; A# q2 V
Empty flash at 0x001f266c ends at 0x001f2800
/ l( l$ R. T1 S' TEmpty flash at 0x001f306c ends at 0x001f3200
4 q; q. B4 O/ z' i: E$ z
9 f3 N+ T# Q. J8 }* J. P# Z/ \9 U4 g* @" D* k; [7 {
! h6 F% W7 a( s& d" A7 B* C! Y
ONT>Starting Application: 0x00002000, /bin/TimerMgr................Done.
% o3 r1 ^4 ?; V5 p$ P0 VStarting Application: 0x00001000, /bin/LogMgr................Done.3 j% E9 ~- P0 M, U. O

( [. ?4 ?2 }# O$ _7 K8 w/ kUpdate timer: curTime=6acfb6c7, gTmrTimerMsCounter=00000000/ A' H+ l8 r4 W' D
Starting Application: 0x00007000, /bin/MiscMgr................Done.
' n1 W6 z5 @' E3 x9 n2 Y% lCheck base image file CRC ... cal_crc (91a57653) ori_crc (91a57653) Success.
. E+ n( g3 I4 X0 T4 mMount Backup[/dev/mtdblock2] as cramfs...Success.
* F2 n- K' e; y, C: T5 N' N2 m! `$ Vmajor ID[0x7f] minor ID[0x2]
+ j, P( H% B- I: w. A# x3 D9 wVOS_XML_Init():   D9 j' z: R- K
Load XML OK from file /mnt/rwdir/runtime_rg.xmlVOS_XML_Init():
9 \4 c2 R7 n. R: L/ FLoad XML OK from file /tmp/default_rg.xmlVOS_XML_Init():   r  e& N& g1 [0 W1 U
Load XML OK from file /tmp/runtime_rg.xmlVOS_XML_Init():
  F' M0 l- k7 ]+ R" jLoad XML OK from file /tmp/runtime_rg.xmlVOS_XML_Init():
% [1 s+ G" ~- u8 pLoad XML OK from file Starting Application: 0x00003000, /bin/MecMgr................Done.
+ s! }5 }2 U: x6 d8 C2 SStarting Application: 0x00004000, /bin/PonMgr................Done.- |; I6 \8 d8 L" {! Q, i
Starting Application: 0x00009000, /bin/NetMgr................Done.
. M; J4 v; Y2 j, A2 p( b7 aStarting Application: 0x00006000, /bin/VmrMgr................Done.
& w6 h5 Z9 ]4 G8 z5 IStarting Application: 0x00005000, /bin/EthMgr................Done.1 @# x- i+ f+ P# P8 I2 T
CfgDIR = /etc/tr069cfg
+ A5 @# D1 h/ X( i' v. vcd /tmp/cpe3
* _  G3 u3 |7 @, ndir = data
0 b2 z  ^/ J% o  edir = filetrans* S" B7 V' r# H; u; V' ~
dir = options% l% p2 P7 Y+ G/ {$ ~
dir = parameter: U; M1 A; P5 D# f
cdir = /tmp/cpe3
5 ^+ c7 |2 M2 V" \# Qifconfig: SIOCSIFADDR: No such device
- n' t; M, }$ Zadd call back OK
) R* h4 _/ ~9 C) g8 E, xadd call back OK  H/ b4 V. w+ `. u$ y
Starting Application: 0x0000d000, /bin/tr069Mgr................Done.* s, M. p% H1 I& B
ln: /tmp/web/web: Read-only file system
2 v1 `0 y# S/ g2 MStarting Application: 0x0000c000, /bin/WebMgr................Done.
7 a3 L4 y5 f+ m( ]2 Z9 b+ ?0 n" Q( e/ ~/ D% K5 C% j9 v% _
Sync 0xc0002, msg no reply, dest NET, VOS_SendSyncMsg:18451 p  _$ o; E% t8 e
init SIP.
: }" l7 J5 v9 B* Y- ^/tmp/default_rg.xmlVOS_XML_Init(): : B( A+ Y! a- z! P! n; O
Load XML OK from file
2 A! c3 L# t+ q3 ^+ X/ }5376a591 5376a591 5376a591' K5 d4 o( N" Z, v% x

0 p1 F, ^3 Y! tSync 0xc0002, msg no reply, dest UNKNOWN, VOS_SendSyncMsg:1845
, R0 r& X4 Y( r, v
& o2 P) a( B$ w' m! ^$ GSync 0xc0004, msg no reply, dest EMR, VOS_SendSyncMsg:1845
# K: A$ t/ ]# x' X, }+ E/mnt/rwdir/voicecfg.xml
/ I4 o: [( i, u: MINFO: ALL APPs are ready.
" @. u, E  e( f+ o3 [& |APPL 3000, Warning: do not reply sync message 0x60006d1 i  k8 ]5 {( a+ a7 Z8 M  k6 q
--ok to listen to port 5060!!!!get local sip port from mec is 50607 z1 k1 D+ U7 y0 V9 H1 Z; L+ S
!!!!get local sip port from mec is 5060, l5 R% j6 ~/ x* k1 W
  8 j5 D& I  o$ v' h! p
ONT>

1 v2 T  m# f; H+ ]+ E: [" L/ |1 Y& \3 S- n* |
---------------------------------------------------------------------------------------------------------------------------------------------------5 s3 I8 j4 D; k# T0 b9 d: @8 k7 p! _
" }7 H/ y  P! K3 C

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?注 册

x
发表于 2013-3-7 07:59:09 | 显示全部楼层
求人还收钱………………
 楼主| 发表于 2013-3-7 09:04:10 | 显示全部楼层
呵呵,2楼正解。已经取消猫粮。
发表于 2013-3-7 09:19:08 | 显示全部楼层
手头没猫,不好说,帮你顶贴,我用的TTL转USB,跑完E文之后,按回车,真接输入root root就进了Linux Shell了!!

点评

不行啊!!!  详情 回复 发表于 2013-3-9 12:59
发表于 2013-3-7 15:43:31 | 显示全部楼层
好好学习中
 楼主| 发表于 2013-3-9 12:59:19 | 显示全部楼层
maicalyin 发表于 2013-3-7 09:19
$ F( z* f* }; d1 O手头没猫,不好说,帮你顶贴,我用的TTL转USB,跑完E文之后,按回车,真接输入root root就进了Linux Shell了 ...
' i: B* A0 p# L# h6 }; M: u" k
不行啊!!!
发表于 2013-6-1 09:01:05 | 显示全部楼层
看图还要收钱?
发表于 2013-6-18 12:38:52 | 显示全部楼层
不是吧,这也要破解成功一半,有点动手能力的人去最知道如果接TTL线好不~~我真的是汗呀!!!
发表于 2013-9-9 00:20:51 | 显示全部楼层
华勤天地 HGG420N V3光猫路由器配置文件
发表于 2013-9-17 21:00:36 | 显示全部楼层
这种定制的LINUX应该有专门的命令集,查一下
您需要登录后才可以回帖 登录 | 注 册

本版积分规则

QQ|Archiver|手机版|小黑屋|宽带技术网 ( 粤ICP备15054574号  

粤公网安备 44152102000001号

GMT+8, 2017-4-30 05:42 , Processed in 0.535167 second(s), 29 queries , Gzip On.

Powered by Discuz! X3.2

© 2001-2013 Comsenz Inc.

快速回复 返回顶部 返回列表