设为首页收藏本站

宽带技术网

 找回密码
 注 册

QQ登录

只需一步,快速开始

扫一扫,访问微社区

查看: 12774|回复: 18

HGG420N V3光猫TTL破解成功一半,求高人

[复制链接]
本帖最后由 yale2000 于 2013-3-7 09:02 编辑
  t+ P) q, C: ^9 B3 K
% V" r# N0 k4 _1 [- L2 a. k5 ~) fHGG420N V3拆机
% }# _% m3 ]+ y3 a" L0 p1. 取出底部4个橡胶垫,去除藏在橡胶垫下面的螺丝。9 Q$ j$ y1 `. s) x
看看PCBA:  b/ Q4 e& m( ]1 m+ }8 p' \
5 |6 S- Q0 C8 ^4 F6 Z6 z! j6 _

  E8 v& F$ O+ _9 ?2 T! h2. 我们看到在PCBA左上角有5个并排插针,无任何标识。经仪表检测和研究,确认插针从左到右依次为VCC,RXD,GND,TXD,VCC(如图)。
7 t: a. \; l* m, \$ i" {/ g) d# @+ u6 |0 R. C, u

8 ]9 ]. ]+ U0 O- r( {" u! a. Q
/ X- {- Y0 p! c2 _1 I3 M" R
TTL线破解前的准备
4 z4 m( A, u" q+ K: {/ O1. 安装TTL-to-Serial驱动9 g. O7 B9 V! z; ^7 ~

5 M! y- |) Z# k2. 使用杜邦线或其他线材连接到光猫对应的接口上。TTL线的GND的细长型插管插到GND插针上,TTL线的RXD插到RXD插针上,TXD也如此办理。千万,VCC插针请不要插(烧了编程器别怪我没有提醒)
0 D& O8 q9 x- k- ~: u3. USB-TTL编程器插入电脑。这时,打开设备管理器,点开端口,我们能看到COM x已经作为TTL通信口。(根据每台电脑的具体情况,COM口会不一样,我自己的是COM3口,需要自己去设备管理器里查看)。' C+ u( F5 |! ?$ s" o- L$ h+ l
+ `  K6 c$ X; F. s6 T8 p6 H
4.将网线一段连入猫的LAN口,任意一个都可以,另一段连接电脑。设置电脑:192.168.1.100,255.255.255.0,192.168.1.1% g- k6 X: ^6 g: X, k4 @

3 X) z  a# o3 P  r5. 下载并安装SecureCRT v6.5.8.380汉化版/ @* F, v  v0 z3 D4 l6 s: ^; h
/ @( x! u1 p+ t, x

; F4 z3 \9 d5 C1 F& o5 ~& s2 {6. 到此我们的准备工作就做好了,下面我们就开始破解过程。! U. @5 c1 A% s' ]& A3 o6 s1 w1 W: i
  K5 K- {! B) o% o# q5 R2 x
破解步骤
; G3 m! t2 d8 h, j" u8 ]* ]1. 重复检查准备工作。
& ~% h) [& x+ u2. 我们在PC上启动程序SecureCRT,选择菜单“文件”,然后选择快速连接,并按下图进行设置。
% a0 A6 m( y) v9 T7 ]% u1 v8 I7 @2 b  G& N9 C& P

+ J6 x& F0 ~3 W/ w点击连接,我们就能看到如下界面:
( F5 n; a3 O0 |
: p+ p* C% v6 |. G3.  然后打开HGG420N V3电源,这时SecureCRT窗口会有E文滚动,当滚动到停止,任意按下键盘任意一个键,就会进入ONT> 命令行界面(如下分割线)。
, _( B/ s! z1 v( p3 D4 [: I4. 令人郁闷的是:输入各种linux命令,无任何反应。。。。。。( p( R- `. x5 M! o  b1 C

1 I- V6 u9 a- I至此,TTL破解成功一半,求高人。。。( `. d4 Q: Y7 w
$ u1 Y- n( U  B5 @( W
-------------------------------------------------------------------------------------------------------------------------------------------------
* c2 G$ C' F  @! RBootROM 1.34
' N; o6 a; e% j4 vBooting from NAND flash
3 }. G2 o8 l* t# lBootROM: Image checksum verification PASSED8 T2 r# i" ^$ b' H' S6 C$ \
8 w6 ?9 D* o* ?7 Z: f! K( U
) E: N) z3 X3 o* ?9 t# A" ?
              Gpon System Boot
8 T+ x: O- n5 a7 M" Q: x0 u, x$ ~+ r& s
1 o% k+ ~8 ~4 z+ H, s* B4 r  j& F' X
+ T6 q8 T; I5 ^Copyright 2011 CIG Gpon ONT System.
8 j1 m  W# \) R  l$ ^5 o) l9 \: m& ~$ X+ l& `* l
CPU           : GPON Soc
4 R8 ?  u: B$ i* W+ }BOOT version  : V8.1.13
+ c# N5 G( s: j* b$ g, ZPEX 1: Root Complex Interface, Detected Link X1
  R6 I2 M. q% N8 G6 cDRAM          : 128 MB$ V0 D- ~& [- y1 A
NAND:  1bit HM ECC, Size: 64 MiB
8 K8 ?9 T% C0 G* [EEPROM version: 0x0003! H: ?0 x0 e8 d$ B* \4 G
USB 0: Host Mode) v! l" A7 z5 P5 K6 m+ R" z
Modules Detected:; |4 A# ^5 ~! ?7 B" _+ Z3 w$ I
       GPON module detected.
+ P* h4 o  b1 F7 }/ S/ b       Ethernet Switch on MAC0.
! B) L6 l& I3 _$ B: r       3xFE PHY Module.
, [% R' j; Y0 s4 K# T+ h       GE-PHY on Switch port #0.
: g7 V2 W/ M0 m2 N6 JNet:   egiga0 [PRIME], egiga1" ?2 k7 V4 A" B* ?8 d8 z5 X8 f
**************************************3 M" e  U$ f: ~8 C3 D) Y! C8 y
*                                    *
$ F& i, r' ]: H- S*  KEY -- Enter console terminal     *
; X4 ], `1 E+ N- S: ~*                                    *$ c/ J, I7 {8 E1 y/ I! J: b
**************************************7 G9 }1 u5 T/ h$ Y/ R$ H
waiting for your select ...% z) V" s, P( }( t8 m# {+ U# w/ K  s
2 ^0 T+ k  S" [0 F" a# l
Loading 'uImage' from  CRAMFS Partition 'imageb' to 0x2000000.
+ ]6 j9 {) f2 U3 Y( p0 ?9 G5 Y' F. K4 P! j7 b: b- I
Root Filesystem crc check successfully!
# Z: d9 t! J0 w2 t1 Z" E8 _. D3 F+ J0 O0 Y; m
### CRAMFS load complete: 2036300 bytes loaded to 0x2000000
- }9 I. y' y+ v7 [" T3 P( P
1 \- a) V" a6 `& ^        Software version:  1.22UYG.1F0
( k0 n2 Z! J9 A/ V: j! S6 _# H( y
3 C# S2 d0 _! G## Booting kernel from Legacy Image at 02000000 ...+ \  E) e6 a: E
   Image Name:   Linux-2.6.32.111 @; u7 [1 k3 P3 V9 D, d7 L# ^2 C
   Created:      2012-05-10   5:21:52 UTC
  G1 W; C; F8 _   Image Type:   ARM Linux Kernel Image (uncompressed)
- H. u$ P$ ~4 s! d% `   Data Size:    2036236 Bytes =  1.9 MB
* ^7 J0 N# h( `+ F- ^7 q   Load Address: 000080006 A: q$ y: U8 j
   Entry Point:  00008000! j$ i. P' c+ ?) O( M0 [
   Verifying Checksum ... OK
' e1 M8 \; m  b3 p6 e5 ~# K0 l   Loading Kernel Image ... OK/ W. K2 h" o0 [+ Q' y; y; N
OK2 f4 m: e, q# O

: {% C2 J  R) O& YStarting kernel ...8 H1 w$ F3 u( ]# U; f2 [8 ~1 {9 ^5 J2 g2 y

# ~+ R2 l+ U/ ~Uncompressing Linux..................................................................................................................................... done, booting the kernel.
" X' ~# U2 }; ^! d- t1 vLinux version 2.6.32.11 (root@localhost.localdomain) (gcc version 4.2.4) #1 Wed May 9 22:21:44 PDT 20126 Z; u, j; I# P9 w# d
CPU: Feroceon 88FR131 [56251311] revision 1 (ARMv5TE), cr=00053977
  d# r( b* _' N: f, G- ICPU: VIVT data cache, VIVT instruction cache! x% N/ G" `  L$ G  y6 ~3 ^4 o; ~
Machine: Feroceon-KW2: S5 J' o+ e! q2 k
Using UBoot passing parameters structure% l+ }# |$ U* R2 k! d9 }
Memory policy: ECC disabled, Data cache writeback) y+ L2 ^; Y; H& y( l1 O
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32512
* I7 {1 c' z' |) R0 JKernel command line: console=ttyS0,115200 root=/dev/mtdblock3 mtdparts=nand_mtd:0x100000@0x0(Boot1),0x200000@0x200000(Config1),18M@0x600000(ImageA),18M@0x2100000(ImageB),4M@0x3c00000(MidWare),0x100000@0x100000(Boot2),0x200000@0x400000(Config2),9M@0x1800000(Imagec1),9M@0x3300000(Imagec2) rootfstype=cramfs mv_net_config=0 mv_phone_config=dev0:fxs,dev1:fxs mem=128M flash=nand 5srst=0 pwrLed=255 ethOpt=560
6 @( C0 F# _8 tPID hash table entries: 512 (order: -1, 2048 bytes)) T5 x5 ]8 r1 T- A& m/ _4 U( c
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)& c: y5 J  ~* L! @1 a5 c
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)$ a1 r# r7 ]% c7 j- \
Memory: 128MB = 128MB total+ w: z% R& \' m1 h' G
Memory: 125340KB available (3796K code, 524K data, 104K init, 0K highmem)
2 _( ~% W% L: t; ?Hierarchical RCU implementation.
7 m" P6 H( {* LNR_IRQS:1925 c# F* a* l: ]
Console: colour dummy device 80x30
9 O$ F7 g, {* q4 S2 `Calibrating delay loop... 1191.93 BogoMIPS (lpj=595968)
  ?5 X8 y# T' E+ qMount-cache hash table entries: 512  ~7 \) s/ u/ M5 ]# g, X4 a
CPU: Testing write buffer coherency: ok
. X" Z4 j4 C6 h7 Q6 ~* \' WNET: Registered protocol family 16% X/ N- x0 \9 J* L
Feroceon L2: Cache support initialised.
8 a1 F. ]( n* n3 S1 `- r5 P" S/ y3 ^/ N+ R& S# s
CPU Interface( ]. \8 c* R8 i/ T% ~9 @
-------------7 A/ {: h0 V9 F- ]( A* _; B
SDRAM_CS0 ....base 00000000, size 128MB $ I3 W) g: M7 C* c; B
SDRAM_CS1 ....no such
8 l. s+ g* d8 ]6 dSDRAM_CS2 ....no such0 M, o! [( H5 j4 S) k1 U
SDRAM_CS3 ....no such
% {! {, T# ]( v3 ^* Q7 H; nDEVICE_CS0 ....no such0 c9 I) W  U# M1 m4 P. w2 J
DEVICE_CS1 ....no such
6 v( b0 f+ {9 N4 iDEVICE_CS2 ....no such" i0 s$ k6 Y8 I! L
DEVICE_CS3 ....no such! w0 P! A! P5 [) ^$ o
PEX0_MEM ....base f3000000, size  16MB
: O0 I8 {! t1 sPEX0_IO ....base f2000000, size   1MB
% v* ?* d; d5 O# V7 l# _, SPEX1_MEM ....base f4000000, size  16MB
  l+ J! e1 M# LPEX1_IO ....base f2100000, size   1MB # O; m' }3 p6 l! {6 r4 l
INTER_REGS ....base f1000000, size   1MB 9 v6 ^; V1 W  p: p! ]- ]; C
NAND_NOR_CS ....base f8000000, size   2MB 7 e2 W; e( A  H7 {5 B0 B
SPI_CS0 ....base f0000000, size  16MB
2 v8 W5 G1 B6 O% M1 h' lSPI_CS1 ....no such
* ~/ P) `8 b. \' o, _SPI_CS2 ....no such# @. \3 F( @( g& _& m$ w
SPI_CS3 ....no such$ ?6 T+ l& a, J, o0 h/ g
SPI_CS4 ....no such
2 w8 B" m# A/ z% OSPI_CS5 ....no such0 R) B' b4 m8 g3 z
SPI_CS6 ....no such
" r9 H; D7 X, U$ e$ k! mSPI_CS7 ....no such
2 d* i! x1 d' I( GSPI_B_CS0 ....no such
5 r1 m( o8 N0 U- j8 QBOOT_ROM_CS ....no such
$ q: q) W9 n$ ?( I7 ZDEV_BOOTCS ....no such# H9 e6 z3 v1 e! ]
CRYPT1_ENG ....base f2200000, size   2MB . ^/ K& |) K- G
CRYPT2_ENG ....no such2 {( G' J/ y3 z5 f
PNC_BM ....base f5000000, size   1MB ' p( d9 |& f8 F: b
ETH_CTRL ....base f5100000, size   1MB
8 s8 z* [. W- X, Q8 gPON_CTRL ....base f5200000, size   1MB
  C5 g! ~" U3 ]; T* Z5 q1 ^" q5 Y4 dNFC_CTRL ....no such
: V1 g' k5 J* e) z( H
0 l! y& b" E. @7 ]" d' a* b: `  Marvell Development Board (LSP Version KW2_LSP_2.0.5_p14_NQ)-- RD-88F6560-GW  Soc: MV88F6560 Rev 2 LE# G# M/ I8 H, f: u: V( ~- |# E
  X4 {  e% m7 Q% F  }* R
Detected Tclk 200000000 and SysClk 0 ( q- h! V0 Q. B; V4 C
Marvell USB EHCI Host controller #0: c783e800" F+ u/ w4 x) c1 }' U* h
PEX0 interface detected no Link.* v# [7 h) Q$ {+ m) q  [
PEX1 interface detected Link X11 V4 _% {6 q+ ^
PCI: bus0: Fast back to back transfers enabled
( G$ S" r' a) U; Rpci 0000:01:01.0: PME# supported from D0 D1 D2 D3hot D3cold
( e1 q" `2 u( \  ]% l% f! Cpci 0000:01:01.0: PME# disabled+ {$ u1 m# p/ N: S; b; t+ i
PCI: bus1: Fast back to back transfers disabled& u0 A) Z" h* B
bio: create slab <bio-0> at 0, P+ I$ J) v! @6 [
vgaarb: loaded
+ y3 G/ _  V' u# DSCSI subsystem initialized
' a+ e8 V. D* W0 T  n/ P8 p' Ocfg80211: Calling CRDA to update world regulatory domain
6 o/ B/ }; S2 w) ^6 qSwitching to clocksource kw_clocksource* o  Z& ]2 r$ F4 K7 B3 w( `! s
Switched to NOHz mode on CPU #06 m1 d7 Y9 @& _! Q- G) q
NET: Registered protocol family 2% C" t! J5 f. ?
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)7 I& V" W  Z4 c6 v2 w: W
TCP established hash table entries: 4096 (order: 3, 32768 bytes)0 I) t. u2 S. L! Y, O
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
3 d4 |, U4 K8 U7 B/ P/ R* @/ ]TCP: Hash tables configured (established 4096 bind 4096)
) W# H7 [: u) h! jTCP reno registered
9 T( A3 v$ E$ e& PNET: Registered protocol family 1
1 g1 s+ E# N- _RTC has been updated!!!
4 h  N7 p* m5 |8 S8 S& k& Yrtc mv_rtc: rtc core: registered kw-rtc as rtc0% u( \: X) C5 m; p0 L# @
RTC registered) L( C4 q  L, X  [; T. n
cpufreq: Init kirkwood cpufreq driver
" V2 L1 u, Z, n4 X4 X9 KNFP (fib) init 16384 entries, 65536 bytes
& k" ?. X& l5 q9 R9 j, N7 c- uNFP (pnc) init 471 entries, 13188 bytes
* L* k/ g2 d4 O( j  _1 {cesadev_init(c000cad0)
: p7 H7 L) A4 A) F, O3 R- L/ ^mvCesaInit: channels=1, session=640, queue=64
* _3 b2 b9 V9 g" q! k, X, {+ \, HJFFS2 version 2.2. (NAND) © 2001-2006 Red Hat, Inc." s" f0 `" a% P$ H! v4 h# x& @& C7 E
fuse init (API version 7.13)
& `$ \  s, M/ |: G/ A* Q8 Imsgmni has been set to 2450 o* Z/ @( n2 P1 @' Q
alg: No test for cipher_null (cipher_null-generic)  R, |& ~8 c( }( c
alg: No test for ecb(cipher_null) (ecb-cipher_null); m; |& R/ u& t/ i' M
alg: No test for digest_null (digest_null-generic)
4 q9 A3 j. Q* G6 U$ yalg: No test for compress_null (compress_null-generic): c/ b2 k2 Z- Q( C7 A* s
alg: No test for stdrng (krng)/ ?$ }" g$ }; p4 z5 {) y$ V
io scheduler noop registered
! J. u1 a# A- ]io scheduler anticipatory registered (default)6 m! L3 v- u: `. R0 l# f
Serial: 8250/16550 driver, 4 ports, IRQ sharing disabled
0 z7 p! B  q; ?, K! G* Vserial8250.0: ttyS0 at MMIO 0xf1012000 (irq = 33) is a 16550A
$ D/ \1 ~3 H, S: J- C( {4 oconsole [ttyS0] enabled, C; X9 X" A; g4 L9 i
loop: module loaded( X9 E% X1 r, ^$ ?9 j2 m! J
NAND device: Manufacturer ID: 0x98, Chip ID: 0x76 (Toshiba NAND 64MiB 3,3V 8-bit)# `* u3 p1 h" x; W7 u; _" e. a) ?0 e
Scanning device for bad blocks/ j# r9 n) G5 T& Y; p
9 cmdlinepart partitions found on MTD device nand_mtd
6 L: M( \6 ?2 d0 Q2 Z) NUsing command line partition definition
0 o. b- h  n' h. O2 yCreating 9 MTD partitions on "nand_mtd":
; b: [3 @' w1 L) w& G; W9 w7 |0x000000000000-0x000000100000 : "Boot1"
+ a  e" k6 L' L. w& p# G% z0x000000200000-0x000000400000 : "Config1"& b5 l* g) ~, ]+ W6 s3 L; o
0x000000600000-0x000001800000 : "ImageA"" N2 f- b1 ~% C
0x000002100000-0x000003300000 : "ImageB"
8 [2 o+ o; d2 E2 S) d  J0 O/ O0x000003c00000-0x000004000000 : "MidWare"
3 F, R3 z2 a0 O' ~& s0x000000100000-0x000000200000 : "Boot2"" Z' t( }9 k# ~& u: k2 R
0x000000400000-0x000000600000 : "Config2". k* D% ]% d7 s" `
0x000001800000-0x000002100000 : "Imagec1", S5 `2 X5 v5 J( B
0x000003300000-0x000003c00000 : "Imagec2"2 B  g: ]: z8 N2 k0 a3 x: g) h+ a
0 - Base 0x00000000 , Size = 0x08000000.7 |% T% C( ~; D0 p& p( j6 \2 H
8 - Base 0xf3000000 , Size = 0x01000000.
( x" `$ l$ y5 Q: Y4 o9 - Base 0xf2000000 , Size = 0x00100000.
; O$ W9 C5 [1 K3 g10 - Base 0xf4000000 , Size = 0x01000000.0 q, b- @* {) O2 F; q
11 - Base 0xf2100000 , Size = 0x00100000.1 E8 n2 U6 D- _2 p9 w7 Q( Y. n
12 - Base 0xf1000000 , Size = 0x00100000.5 r% O  L5 ~( r& x. {& P9 n
13 - Base 0xf8000000 , Size = 0x00200000.- {3 t/ ]; b  {/ W$ V1 Q4 R" v
14 - Base 0xf0000000 , Size = 0x01000000.
( @" N9 D1 C" Q7 p% E25 - Base 0xf2200000 , Size = 0x00200000.
2 H& H0 N& I, G- A$ P5 e/ l27 - Base 0xf5000000 , Size = 0x00100000.
) K  d+ V2 G0 y. {28 - Base 0xf5100000 , Size = 0x00100000.* c* A# q5 O/ s7 y7 d
29 - Base 0xf5200000 , Size = 0x00100000.
% D6 e5 N$ O% g# _mvPncVirtBase = 0xc8c000001 ^( H, u5 \# e8 X( Q2 w
  o 3 Giga ports supported
) \- N; t8 W+ l  A  o Giga PON port is #2: - 8 TCONTs supported
! B0 i, M; }9 D. [  o SKB recycle supported (Enabled)
2 i4 G+ _2 T' z# i& \  o NETA acceleration mode 40 n( L) T, a" i
  o BM supported: short buffer size is 256 bytes  b6 Q& S4 X  p- u: L
  o PnC supported
3 ]6 Q, y% Y- h' a5 V, B  o HWF supported
" Y( e  H9 P# ~# |: U  o PMT supported
& J4 D. _4 G+ \* L5 n' p5 {5 v  o RX Queue support: 8 Queues * 128 Descriptors
' d! w7 p( @; X6 z7 r  o TX Queue support: 8 Queues * 256 Descriptors: t/ r; u6 K% Z! L7 ~) l- j
  o GSO supported
. i* h( u) z2 }7 g  G  o GRO supported4 J: }% T3 l0 Z) S' ~
  o Receive checksum offload supported5 ?, J& u# V4 n  `2 _: Z* W& \
  o Transmit checksum offload supported
: L" S$ Z. ?8 Q9 [( g  o Network Fast Processing (Routing) supported. }! r" c1 l, Q0 B2 \8 Z
  o Driver ERROR statistics enabled
$ ]5 l6 E9 H' T6 u3 {% x% t3 [  o Driver INFO statistics enabled
# m: l& _* a4 j, p  o Driver DEBUG statistics enabled: w) q8 U& ^2 [
  o Proc tool API enabled6 |# l  @$ h% G
  o Switch support enabled2 K4 X. t  \% J+ @7 z8 R# W
     o IGMP special processing support
" n# S; z( D, Z0 r
% D8 K% ?9 @: E; J  o Loading Switch QuarterDeck driver: K* L2 x0 q1 x  g0 W$ k9 q8 b
    o Internal GE PHY Connected to Switch Port 0 Detected3 Z5 r# h3 y+ B; u
    o Setting Switch CPU port (port #4) for 1000 Full with FC
/ [8 K) A1 q6 b9 i/ R* T    o Setting Switch CPU port (port #5) for 1000 Full with FC
8 G* I# t: j$ X/ R7 P! `/ r# _    o Disable disconnected switch port (port #6) and force link down  C5 j, S# y- ^
  o Loading 3 network interface(s)4 \! O( @& ?* T0 z* t
( e* Q5 v+ C! @: G! V8 J0 c
  o Port 0 is connected to Linux netdevice0 K& K: B7 ?) w9 I/ C6 I
      o Using UBoot netconfig string7 c; w( B; W0 y: |
        net_config_str: 00 Z$ O; K& N3 B! m2 u: m
  o Working in External Switch mode' t& A7 T8 `3 x( Y
        giga p=0: mtu=2000, mac=c7819f6a
. i6 c0 c: c0 R2 g0 oeth0: Dropping NETIF_F_SG since no checksum feature.' U0 \+ n2 s4 y
    o eth0, ifindex = 2, GbE port = 0/ b: }  {' _; w/ v* E3 c
, [4 a1 w3 ~, ^" ]2 a/ V
  o Port 1 is connected to Linux netdevice# ^" y% Z5 x! j4 d# i
      o Using UBoot netconfig string
: X" ]8 f" n3 Y: H1 `        net_config_str: 0
; b1 }; Y, X, B; j  o Working in External Switch mode" m* `. s8 v# S$ A4 q- O* i, z
        giga p=1: mtu=2000, mac=c7819f6a
1 r' l5 a- D/ _6 b0 ~eth1: Dropping NETIF_F_SG since no checksum feature.# e% G% b" @/ m; z2 _
    o eth1, ifindex = 3, GbE port = 1
* r' Q; Z$ t2 q+ A0 c4 s: p
- e8 e+ h2 z# J  V, W  o Port 2 is connected to Linux netdevice
3 [) k9 v% b" E" p4 C: s        pon p=2: mtu=2000, mac=c7819f6a! E' e6 l1 y7 P: m& a0 x
eth2: Dropping NETIF_F_SG since no checksum feature.
! ^. J+ i( u! `0 d; I9 Z    o eth2, ifindex = 4, GbE port = 2
' X) j! R) }" e+ U
& I& G& a0 h. dPPP generic driver version 2.4.2
0 r$ i2 ?. C; x2 B- x0 s4 cPPP BSD Compression module registered4 x' `- i! n. A- U& U& E
NET: Registered protocol family 24  D# J0 K5 O, d% R4 k3 }
mice: PS/2 mouse device common for all mice$ S" \" `4 D$ R; I8 q8 F
i2c /dev entries driver
$ P" a2 i# }/ h' MLinux telephony interface: v1.00
  N2 b7 |9 }8 A$ pLoading Marvell vpapi device
. U* |. m3 B( f- r$ f, p" F1 u* dLoading Marvell tdm device3 k' k9 O* S' h4 u- N# g8 H7 _
cpuidle: using governor ladder/ ~, V0 c5 z5 W+ Q/ ^, N0 @5 `
cpuidle: using governor menu
* ^' A: B3 x. I; p9 t  znf_conntrack version 0.5.0 (1960 buckets, 7840 max)( ?  f# q$ A- o; F
CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use
2 P2 d6 ?& h0 F6 a& p$ unf_conntrack.acct=1 kernel parameter, acct=1 nf_conntrack module option or! w3 u/ D' E, x% L
sysctl net.netfilter.nf_conntrack_acct=1 to enable it.
! F+ ~* P; d. Z: d* D" ?, p4 rIPv4 over IPv4 tunneling driver- Z' `. _6 o/ l8 z0 p* S6 Z8 t0 M$ c( @
GRE over IPv4 tunneling driver
0 H% ]$ B1 ^( E  B( q5 g+ oTCP cubic registered
/ B2 d# l! p* i% x, o! _# XNET: Registered protocol family 17
/ W! M# X+ O9 A+ Z; [Bridge firewalling registered
9 C6 G0 ~- o( h6 `$ s) f: R* EMarvell Kirkwood2 Power Management Initializing
; n# \# P& `' x, d# Drtc mv_rtc: setting system clock to 2000-01-01 00:00:00 UTC (946684800)
: m: |+ g4 w1 h! y5 q( eVFS: Mounted root (cramfs filesystem) readonly on device 31:3.+ A5 U. s5 a2 x
Freeing init memory: 104K
0 L& l' U9 y0 S& y5 I( {; g; z8 a; qPopulating /dev using udev: done+ c* ]+ [7 t% t- d3 E
Initializing random number generator... read-only file system detected...done  Z) x: m' ~/ F) m$ p( `
Starting system message bus: done
* ?' o6 ~' o- o4 t5 H& H1 eStarting network...
. l" Y. l! p3 Tip: RTNETLINK answers: File exists
' G1 o0 y/ g3 F" ?[RCS]:  Extract Board Configuration# B, ?  V& s2 v* Q
[RCS]:  Load kernel modules! r  K  q; f' R& f; v6 n, S
mv_eth_ports_num = 3
5 c9 u: @2 K2 T7 b+ t8 L0 W# kmv_eth_rx_special_proc_func register $ X- [1 V6 z% J$ A4 B( E1 R
mv_eth_rx_special_proc_func register
2 b% s4 H- M% L- qmv_eth_rx_special_proc_func register ; }3 J+ A# S! J+ d6 ?1 q' l* N
mv_eth_tx_special_check_func register
8 q4 b. ?/ B, c# j6 K% l. i3 |0 O/ wmv_eth_tx_special_check_func register & g$ n3 W9 @0 A+ J& p1 c& n
mv_eth_tx_special_check_func register
+ G# y  U+ x) ~= SW Module SYS FS Init ended successfully =
/ D$ G+ _& ?8 E' Z  y6 {= TPM Module Init ended successfully =
% k& l, K. g. Q- M4 |[RCS]: Start XPON
; X8 {8 |  v, `' p& u) z; @; n% Z- Jpon interface is eth2
  J7 v( r% W6 [) v# k[RCS]: Start Data Configuration* L( ~: C9 N& |* j& p
[RCS]: Start Network
3 a0 D8 f% u/ z6 lpool #0: pkt_size=2048, buf_size=2144 - 2048 of 2048 buffers added) d& p% B; L/ z& u
pool #3: pkt_size=256, buf_size=352 - 2048 of 2048 buffers added
9 _! O. V) k+ ^; b% Oeth0: link up7 u: L. b* F. d5 s7 @
eth0: started
; S8 r: I1 h2 ~7 R: B2 Fpool #1: pkt_size=2048, buf_size=2144 - 2048 of 2048 buffers added
7 b# x# f' G2 y3 J& r3 e2 spool #3: pkt_size=256, buf_size=352 - 2048 of 2048 buffers added
  f, s+ E. L  r) F3 @eth1: link up, X/ y/ E3 C. m( W+ h4 ?  f& v' d
eth1: started
6 Q0 ?7 J  `$ Ppool #2: pkt_size=2048, buf_size=2144 - 2048 of 2048 buffers added
* h: D& |6 K0 N  R  Spool #3: pkt_size=256, buf_size=352 - 2048 of 2048 buffers added+ M* {, }+ D8 s  a& L
pon0: link up! W7 I: u% S/ ]) U! V2 |( B
pon0: started
- x2 V+ [9 _6 w8 lEmpty flash at 0x001ff170 ends at 0x001ff200
0 ]! I0 a$ Q# A: q( P3 F  j
. N# T8 i% q* S8 T+ E) m. q# num is 10,nothing need to do) i, R' F, v/ s4 `
Empty flash at 0x00116214 ends at 0x00116400
$ f6 a) h; i. l) {# ]0 R, FEmpty flash at 0x00116d88 ends at 0x00116e003 J$ R/ j. j% X% F2 y. k$ ]8 ]
Empty flash at 0x001f0854 ends at 0x001f0a00: x. t0 ^" V8 O! c) A3 [1 |
Empty flash at 0x001f1268 ends at 0x001f1400
$ U9 H+ c" r- t% [* ^Empty flash at 0x001f1c6c ends at 0x001f1e00
1 M9 I% w3 ^4 l0 W" e- R0 c% zEmpty flash at 0x001f266c ends at 0x001f28004 z7 t! K. B* @' r/ ?4 C& ~
Empty flash at 0x001f306c ends at 0x001f32008 R7 f  X0 j9 y  A

5 V) i  r8 P* U) ^# ~% m) @5 q  g- N; Q. ~3 Y! G1 A
- F. O( Y6 @( z1 J
ONT>Starting Application: 0x00002000, /bin/TimerMgr................Done.
1 z% c+ i( J8 U8 BStarting Application: 0x00001000, /bin/LogMgr................Done.
: F, j5 j' @8 ^
. A* q; W/ f6 s$ n5 YUpdate timer: curTime=6acfb6c7, gTmrTimerMsCounter=00000000
+ ?0 M6 N5 r8 H2 _% q' `Starting Application: 0x00007000, /bin/MiscMgr................Done.; o; a! E3 e, I$ d. _* n
Check base image file CRC ... cal_crc (91a57653) ori_crc (91a57653) Success.0 a+ n: c& H; y
Mount Backup[/dev/mtdblock2] as cramfs...Success.8 \" Z4 ~7 r- f! E
major ID[0x7f] minor ID[0x2]/ E2 v+ n+ a, H6 l' g6 W. w: u+ U
VOS_XML_Init(): ) h, o5 C1 s1 ?8 u* P
Load XML OK from file /mnt/rwdir/runtime_rg.xmlVOS_XML_Init(): & b* N: {2 \# A; A
Load XML OK from file /tmp/default_rg.xmlVOS_XML_Init(): " Z8 q; C- @# m2 W+ a
Load XML OK from file /tmp/runtime_rg.xmlVOS_XML_Init(): ' G. [7 t% L' q3 i
Load XML OK from file /tmp/runtime_rg.xmlVOS_XML_Init(): 7 q1 y- `6 H% s! b
Load XML OK from file Starting Application: 0x00003000, /bin/MecMgr................Done.
5 f& F! D  F# X+ ?Starting Application: 0x00004000, /bin/PonMgr................Done.
7 C) A$ V4 f4 ~, n  qStarting Application: 0x00009000, /bin/NetMgr................Done./ D) T7 h1 _' R, B4 b; I. j
Starting Application: 0x00006000, /bin/VmrMgr................Done.
2 |/ a' o9 W/ [Starting Application: 0x00005000, /bin/EthMgr................Done.: o8 X  J) @0 Z. v2 R
CfgDIR = /etc/tr069cfg* i& R5 N' ^) N5 m( t; e
cd /tmp/cpe35 F# p8 j2 _" J  W. H& w# u
dir = data
! }, x' G; {$ I3 @- F) d7 Tdir = filetrans
" P  D( E& a' r1 w. L3 udir = options- ]& K! ^$ D( Q5 S2 d, ]+ Y
dir = parameter! [& _. B$ q) I) l& y
cdir = /tmp/cpe3
. b+ T* Z0 N6 \' t! h5 B3 eifconfig: SIOCSIFADDR: No such device
. `9 X, t$ L, G9 E! S9 xadd call back OK
5 y; D/ V# t$ Kadd call back OK6 q' P; F0 b+ x+ T$ Y+ p0 N
Starting Application: 0x0000d000, /bin/tr069Mgr................Done.
7 I6 a! r: D( ^ln: /tmp/web/web: Read-only file system$ h) ]$ P2 W' h& m0 D2 m+ q  _
Starting Application: 0x0000c000, /bin/WebMgr................Done.: K4 U% W; O3 H$ A- Q

6 c1 f3 v% r% V4 NSync 0xc0002, msg no reply, dest NET, VOS_SendSyncMsg:1845
) v. L/ H7 @8 _2 e& O, L: Linit SIP.8 T/ J8 U/ R  H0 d
/tmp/default_rg.xmlVOS_XML_Init():
& D3 G0 _+ Z4 wLoad XML OK from file 2 T/ z! f4 w5 \1 r
5376a591 5376a591 5376a5915 k- b9 |' _2 b1 E) [$ u# s
$ D5 B- }! C6 m% N
Sync 0xc0002, msg no reply, dest UNKNOWN, VOS_SendSyncMsg:1845
* {4 e2 e$ F, h! d9 t
; Y$ g) l' {5 S2 U2 Q* N9 D, {Sync 0xc0004, msg no reply, dest EMR, VOS_SendSyncMsg:18458 H1 v. J, a# t- q7 }& x9 r  v/ b8 A
/mnt/rwdir/voicecfg.xml7 h* `+ n: H& e9 L; n. L, Z
INFO: ALL APPs are ready.
/ R& q, c4 j) s# IAPPL 3000, Warning: do not reply sync message 0x60006d6 ]. x* U" w6 H/ S2 O$ G: ~! Y
--ok to listen to port 5060!!!!get local sip port from mec is 5060
/ D8 }9 {5 u2 W# H!!!!get local sip port from mec is 5060
1 _% @% P+ _9 a8 ]8 @1 S  
; \# `% ], B* F3 t9 zONT>
" _" m4 y+ r0 ~- ^

* a1 `7 V7 |4 Y! ~) k9 S! d2 I---------------------------------------------------------------------------------------------------------------------------------------------------
/ j( t1 Y! T" V  ?, ]3 ^! l9 M9 D( o- k

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?注 册

x
发表于 2013-3-7 07:59:09 | 显示全部楼层
求人还收钱………………
 楼主| 发表于 2013-3-7 09:04:10 | 显示全部楼层
呵呵,2楼正解。已经取消猫粮。
发表于 2013-3-7 09:19:08 | 显示全部楼层
手头没猫,不好说,帮你顶贴,我用的TTL转USB,跑完E文之后,按回车,真接输入root root就进了Linux Shell了!!

点评

不行啊!!!  详情 回复 发表于 2013-3-9 12:59
发表于 2013-3-7 15:43:31 | 显示全部楼层
好好学习中
 楼主| 发表于 2013-3-9 12:59:19 | 显示全部楼层
maicalyin 发表于 2013-3-7 09:19 , O5 m. m7 M* D' q& R) y
手头没猫,不好说,帮你顶贴,我用的TTL转USB,跑完E文之后,按回车,真接输入root root就进了Linux Shell了 ...
. ?9 z: x! w) r7 q0 [$ Y) `5 O' ]  U
不行啊!!!
发表于 2013-6-1 09:01:05 | 显示全部楼层
看图还要收钱?
发表于 2013-6-18 12:38:52 | 显示全部楼层
不是吧,这也要破解成功一半,有点动手能力的人去最知道如果接TTL线好不~~我真的是汗呀!!!
发表于 2013-9-9 00:20:51 | 显示全部楼层
华勤天地 HGG420N V3光猫路由器配置文件
发表于 2013-9-17 21:00:36 | 显示全部楼层
这种定制的LINUX应该有专门的命令集,查一下
您需要登录后才可以回帖 登录 | 注 册

本版积分规则

QQ|Archiver|手机版|小黑屋|宽带技术网 ( 粤ICP备15054574号  

粤公网安备 44152102000001号

GMT+8, 2017-3-29 15:26 , Processed in 0.537030 second(s), 27 queries , Gzip On.

Powered by Discuz! X3.2

© 2001-2013 Comsenz Inc.

快速回复 返回顶部 返回列表