TTL破解光猫，安装教程运行代码，但是无法进行下步操作
天邑光猫，打算破解超级密码，网上搜了许多软件破解教程，均破解不了。后打算使用TTL破解。前期按照教程操作，代码运行正常，但是无法停止；代码运行完后，也无法输入命令操作。
试过“ctrl+c”，也是试过“ty”，均失败，网上也搜索了好多教程，很少有相关资料。实在没有办法，现附上代码，请高手分析分析，小弟在此感谢。
代码如下：
HELO
CPUI
L1CI
HELO
CPUI
L1CI
4.1604_CT2015_Yueme-1.0.38-116.230
AVSD
DRAM
***** DDR INITIALIZATION START ******
NVRAM memcfg 0xffffffff
mcb configuration = 6
MemsysInit lpf0wb_r4p0 1.2.0.4 20150422
DDR3
930A43B0 B0014000 B0016000 00000000 00000000 004031D9
MCB rev=0x00030301 Ref ID=0x031D9 Sub Bld=0x004
Dram Timing 07-07-07
PHY Status= 1
= 0x00000305
Add/Ctl Alignment
no adjustment
ZQ Cal LP PHY
p_term=0x03 n_term=0x03 p_drive=0x11 n_drive=0x10
R in Ohm
P: Finger=0x2D0 Term=0xF0 Drv=0x3C
N: Finger=0x2D0 Term=0xF0 Drv=0x3C
PLL Ref(Hz)=0x02FAF080 UI STEPS=0x055
DDR CLK(MHz)=0x215 WL CLK dly(ps)=0x0C8 bitT(ps)=0x3AA VDLsize(fs)=0x2B1B CLK_VDL=0x01A
= 0x11100f0e
= 0x15141312
= 0x19181716
= 0x00001b1a
= 0x04000000
= 0x08070605
= 0x00000a09
= 0x000d0c0b
SHMOO 28nm
B0016000 B0014800 00000000 00020000 00000000
Shmoo WL
One UI Steps : 0x60
000000000011111111112222222222333333333344444444445555555555666666666677777777778888888888999999
012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345
00 S------------X++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
01 S------------X++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Shmoo RD En
B0 RISE UI=0 VDL=3D PICK UI=1 VDL=3D
B1 RISE UI=0 VDL=3F PICK UI=1 VDL=3F
000000000011111111112222222222333333333344444444445555555555666666666677777777778888888888999999
012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345
00 -S-----------------------------------------------------------X++++++++++++++++++++++++++++++++++
01 -S-------------------------------------------------------------X++++++++++++++++++++++++++++++++
Shmoo RD DQ NP
DQS :
B0 VDL=55 ok
B1 VDL=55 ok
000000000011111111112222222222333333333344444444445555555555666666666677777777778888888888999999
012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345
00 -----++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++-------------
01 ---------++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++---------
02 -----++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++--------------
03 ----------++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++---------
04 -------++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++-----------
05 --------++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++-----------
06 ------++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++------------
07 --------++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++----------
08 --------++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++----------
09 ----++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++--------------
10 ----------+++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++-------
11 --++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++-----------------
12 ---------++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++---------
13 --+++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++---------------
14 -----------++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++-------
15 ---+++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++-------------
Shmoo RD DQ P
000000000011111111112222222222333333333344444444445555555555666666666677777777778888888888999999
012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345
00 ---+++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++-------------
01 -------++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++--------
02 ---++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++------------
03 --------+++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++---------
04 -----+++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++-----------
05 -------++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++-----------
06 ----++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++-----------
07 ------++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++---------
08 -----++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++----------
09 -++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++--------------
10 ------+++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++-------
11 +++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++----------------
12 ------++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++---------
13 ++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++---------------
14 -------++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++-------
15 -++++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++++-------------
Shmoo RD DQ N
000000000011111111112222222222333333333344444444445555555555666666666677777777778888888888999999
012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345
00 -----+++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++------------
01 ---------++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++---------
02 -----++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++--------------
03 ----------++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++---------
04 -------++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++-----------
05 --------+++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++---------
06 ------++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++------------
07 ---------++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++----------
08 ---------++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++---------
09 ----++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++--------------
10 ----------+++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++-------
11 --++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++-----------------
12 ---------+++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++--------
13 ---+++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++--------------
14 -----------++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++-------
15 ---++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++------------
RD DQS adjustments :
BL0: Start: 0x55 Final: 0x55
BL1: Start: 0x55 Final: 0x55
Shmoo WR DQ
000000000011111111112222222222333333333344444444445555555555666666666677777777778888888888999999
012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345
00 ---+++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++-------------
01 ---------++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++----------
02 ----++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++--------------
03 ---------++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++----------
04 ----+++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++------------
05 -------+++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++--------------
06 ----+++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++-------------
07 ------++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++------------
08 -----+++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++-----------
09 ---+++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++--------------
10 --------++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++-------
11 -++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++-----------------
12 ------+++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++----------
13 -+++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++---------------
14 ----------+++++++++++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++++++++++++-------
15 --++++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++-------------
Shmoo WR DM
WR DM
000000000011111111112222222222333333333344444444445555555555666666666677777777778888888888999999
012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345
00 ------+++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++----------
01 -+++++++++++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++++++++++++---------------
DDR test done successfully
***** DDR INITIALIZATION DONE ********
PDDR
ZBSS
L12F
MAIN
FPS0
BT00
0001
BT01
0600
NAN3
RFS2
NAN5
Base: 4.16_04_CT2015_Yueme
CFE version 1.0.38-116.230 for BCM96848 (32bit,SP,BE)
Build Date: Thu Aug3 17:53:21 CST 2017 (zhangxs@localhost.localdomain)
Copyright (C) 2000-2015 Broadcom Corporation.
Boot Strap Register:0xbfcbc2
Chip ID: BCM68488_A1_, MIPS: 600MHz, DDR: 533MHz, Bus: 300MHz
RDP: 428MHz
Main Thread: TP0
Total Memory: 268435456 bytes (256MB)
Boot Address: 0xb8000000
NAND ECC BCH-4, page size 0x800 bytes, spare size used 64 bytes
NAND flash device: , id 0xc2dc block 128KB size 524288KB
Board IP address : 192.168.1.1:ffffff00
Host IP address : 192.168.1.100
Gateway IP address :
Run from flash/host/tftp (f/h/c): f
Default host run file name : vmlinux
Default host flash file name : bcm963xx_fs_kernel
Boot delay (0-9 seconds) : 1
Boot image (0=latest, 1=previous) : 0
Default host ramdisk file name :
Default ramdisk store address :
Board Id (0-14) : 968488X41
MEMORY CONFIG OVERRIDE : 0xffffffff
Number of MAC Addresses (1-32) : 11
Base MAC Address : *************
PSI Size (1-128) KBytes : 24
Enable Backup PSI : 0
System Log Size (0-256) KBytes : 0
Auxillary File System Size Percent: 0
Main Thread Number : 0
MC memory allocation (MB) : 4
TM memory allocation (MB) : 20
DHD 0 memory allocation (MB) : 0
DHD 1 memory allocation (MB) : 0
DHD 2 memory allocation (MB) : 0
WLan Feature : 0x00
Voice Board Configuration (0-1) : SI32181_LCCB
Partition 1 Size (MB) : 129M
Partition 2 Size (MB) : 224M
Partition 3 Size (MB) : 4M
Partition 4 Size (MB) (Data) : 4MB
*** Press 'ty' to stop auto run (1 seconds) ***
Auto run second count down: 0
Booting from latest image (address 0xbcb00000, flash offset 0x04b00000) ...
Decompression LZ4 Image OK!
Entry at 0x8041d440
Starting program at 0x8041d440
Initializing cgroup subsys cpuset
Initializing cgroup subsys cpu
Linux version 3.4.11-rt19 (hujiaqi@localhost.localdomain) (gcc version 4.6.2 (Buildroot 2011.11) ) #1 SMP PREEMPT 2017/08/22 19:33:31
968488X41 prom init
CPU revision is: 0002a081 (Broadcom BMIPS4350)
Determined physical RAM map:
memory: 01400000 @ 0ec00000 (reserved)
memory: 00400000 @ 0e800000 (reserved)
memory: 0e800000 @ 00000000 (usable)
Zone PFN ranges:
DMA 0x00000000 -> 0x00000400
Normal 0x00000400 -> 0x00003a00
HighMemempty
Movable zone start PFN for each node
Early memory PFN ranges
0: 0x00000000 -> 0x00004000
On node 0 totalpages: 14848
free_area_init_node: node 0, pgdat 8056eec0, node_mem_map 81000000
DMA zone: 2 pages used for memmap
DMA zone: 0 pages reserved
DMA zone: 1022 pages, LIFO batch:0
Normal zone: 27 pages used for memmap
Normal zone: 13797 pages, LIFO batch:3
PERCPU: Embedded 2 pages/cpu @81084000 s5040 r8192 d19536 u32768
pcpu-alloc: s5040 r8192 d19536 u32768 alloc=2*16384
pcpu-alloc: 0 1
Built 1 zonelists in Zone order, mobility grouping on.Total pages: 14819
Kernel command line: ro noinitrdirqaffinity=0
PID hash table entries: 1024 (order: -2, 4096 bytes)
Dentry cache hash table entries: 32768 (order: 3, 131072 bytes)
Inode-cache hash table entries: 16384 (order: 2, 65536 bytes)
Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes.
Primary data cache 32kB, 2-way, VIPT, no aliases, linesize 16 bytes
allocated 118784 bytes of page_cgroup
please try 'cgroup_disable=memory' option if you don't want memory cgroups
Memory: 230368k/237568k available (4206k kernel code, 7200k reserved, 1296k data, 224k init, 0k highmem)
Preemptible hierarchical RCU implementation.
NR_IRQS:256
console enabled
Allocating memory for DSP module core and initialization code
Allocated DSP module memory - CORE=0x0 SIZE=0, INIT=0x0 SIZE=0
Calibrating delay loop... 598.01 BogoMIPS (lpj=299008)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 2048
--Kernel Config--
SMP=1
PREEMPT=1
DEBUG_SPINLOCK=0
DEBUG_MUTEXES=0
Initializing cgroup subsys cpuacct
Initializing cgroup subsys memory
Initializing cgroup subsys devices
Initializing cgroup subsys freezer
Initializing cgroup subsys blkio
Initializing cgroup subsys net_prio
Broadcom Logger v0.1 Aug 22 2017 19:29:16
CPU revision is: 0002a081 (Broadcom BMIPS4350)
Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes.
Primary data cache 32kB, 2-way, VIPT, no aliases, linesize 16 bytes
Brought up 2 CPUs
NET: Registered protocol family 16
registering PCI controller with io_map_base unset
bcm63xx_pcie: setting resistor calibration value to 0x9
bcm63xx_pcie: applying serdes parameters
registering PCI controller with io_map_base unset
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
PCI host bridge to bus 0000:00
pci_bus 0000:00: root bus resource
pci_bus 0000:00: root bus resource
pci 0000:00:09.0: type 00 class 0x0c0310
pci 0000:00:09.0: reg 10:
pci 0000:00:0a.0: type 00 class 0x0c0320
pci 0000:00:0a.0: reg 10:
PCI host bridge to bus 0000:01
pci_bus 0000:01: root bus resource
pci_bus 0000:01: root bus resource [??? 0x00000000 flags 0x0]
pci 0000:01:00.0: type 01 class 0x060400
pci 0000:01:00.0: PME# supported from D0 D3hot
pci 0000:02:00.0: type 00 class 0x028000
pci 0000:02:00.0: reg 10:
pci 0000:02:00.0: supports D1 D2
pci 0000:01:00.0: BAR 8: assigned
pci 0000:02:00.0: BAR 0: assigned
pci 0000:01:00.0: PCI bridge to
pci 0000:01:00.0: bridge window
PCI: Enabling device 0000:01:00.0 (0000 -> 0002)
bcmhs_spi bcmhs_spi.1: master is unqueued, this is deprecated
skbFreeTask created successfully
gbpm_do_work scheduled
BLOG v3.0 Initialized
BLOG Rule v1.0 Initialized
Broadcom IQoS v0.1 Aug 22 2017 19:33:08 initialized
Broadcom GBPM v0.1 Aug 22 2017 19:33:09 initialized
Switching to clocksource MIPS
NET: Registered protocol family 2
IP route cache hash table entries: 4096 (order: 0, 16384 bytes)
TCP established hash table entries: 8192 (order: 2, 65536 bytes)
TCP bind hash table entries: 8192 (order: 2, 65536 bytes)
TCP: Hash tables configured (established 8192 bind 8192)
TCP: reno registered
UDP hash table entries: 512 (order: 0, 16384 bytes)
UDP-Lite hash table entries: 512 (order: 0, 16384 bytes)
NET: Registered protocol family 1
PCI: CLS 16 bytes, default 16
init_bcm_tstamp: unhandled mips_hpt_freq=300000000, adjust constants in bcm_tstamp.c
bcm_tstamp initialized, (hpt_freq=300000000 2us_div=300 2ns_mult=0 2ns_shift=0)
squashfs: version 4.0 (2009/01/31) Phillip Lougher
jffs2: version 2.2. (NAND) (SUMMARY)? 2001-2006 Red Hat, Inc.
fuse init (API version 7.18)
msgmni has been set to 449
io scheduler noop registered (default)
Broadcom NAND controller (BrcmNand Controller)
mtd->oobsize=0, mtd->eccOobSize=0
NAND_CS_NAND_XOR=00000000
B4: NandSelect=40000001, nandConfig=07052300, chipSelect=0
brcmnand_read_id: CS0: dev_id=c2dc9095
After: NandSelect=40000001, nandConfig=07052300
DevId c2dc9095 may not be supported.Will use config info
Spare Area Size = 16B/512B
Block size=00020000, erase shift=17
NAND Config: Reg=07052300, Config Ext: Reg=00000042, chipSize=512 MB, blockSize=128K, erase_shift=11
busWidth=1, pageSize=2048B, page_shift=11, page_mask=000007ff
timing1 not adjusted: 65644458
timing2 not adjusted: 80040e56
ECC level changed to 4
OOB size changed to 16
BrcmNAND mfg 0 0 UNSUPPORTED NAND CHIP 512MB on CS0
Found NAND on CS0: ACC=c3040010, cfg=07052300, cfg_ext=00000042, flashId=c2dc9095, tim1=65644458, tim2=80040e56
BrcmNAND version = 0x0701 512MB @00000000
brcmnand_scan: B4 nand_select = 40000001
brcmnand_scan: After nand_select = 40000001
handle_acc_control: default CORR ERR threshold3 bits
ACC: 16 OOB bytes per 512B ECC step; from ID probe: 16
page_shift=11, bbt_erase_shift=17, chip_shift=29, phys_erase_shift=17
Brcm NAND controller version = 7.1 NAND flash size 512MB @00000000
ECC layout=brcmnand_oob_bch4_2k
brcmnand_scan:mtd->oobsize=64
brcmnand_scan: oobavail=35, eccsize=512, writesize=2048
brcmnand_scan, eccsize=512, writesize=2048, eccsteps=4, ecclevel=4, eccbytes=7
-->brcmnand_default_bbt
brcmnand_default_bbt: bbt_td = bbt_slc_bch4_main_descr
Bad block table Bbt0 found at page 0003ffc0, version 0x01 for chip on CS0
Bad block table 1tbB found at page 0003ff80, version 0x01 for chip on CS0
brcmnand_reset_corr_threshold: default CORR ERR threshold3 bits for CS0
nand_read_bbt: Bad block at 0x150e0000
brcmnandCET: Status -> Deferred
sgw 2.4g identify hw_boardid
temp:1
temp:1
temp:1
temp:1
id:f
***** Found UBIFS Marker at 0x0503ff00
***** Found SQUASHFS Marker at 0x003fff00
Creating 13 MTD partitions on "brcmnand.0":
0x000005040000-0x0000095e0000 : "rootfs"
0x000000400000-0x000004b00000 : "rootfs_update"
0x00001fb00000-0x00001ff00000 : "data"
0x000000000000-0x000000020000 : "nvram"
0x000004b00000-0x0000095e0000 : "image"
0x000000020000-0x000004b00000 : "image_update"
0x000004b00000-0x000005040000 : "bootfs"
0x000000020000-0x000000400000 : "bootfs_update"
0x00001f700000-0x00001fb00000 : "middleware"
0x000011700000-0x00001f700000 : "reserved"
0x000009600000-0x00000a200000 : "frwk1"
0x00000a200000-0x00000ae00000 : "frwk2"
0x00000ae00000-0x000011700000 : "apps"
UBI: attaching mtd0 to ubi0
UBI: physical eraseblock size: 131072 bytes (128 KiB)
UBI: logical eraseblock size: 126976 bytes
UBI: smallest flash I/O unit: 2048
UBI: VID header offset: 2048 (aligned 2048)
UBI: data offset: 4096
UBI: max. sequence number: 2
UBI: attached mtd0 to ubi0
UBI: MTD device name: "rootfs"
UBI: MTD device size: 69 MiB
UBI: number of good PEBs: 557
UBI: number of bad PEBs: 0
UBI: number of corrupted PEBs: 0
UBI: max. allowed volumes: 128
UBI: wear-leveling threshold: 4096
UBI: number of internal volumes: 1
UBI: number of user volumes: 1
UBI: available PEBs: 0
UBI: total number of reserved PEBs: 557
UBI: number of PEBs reserved for bad PEB handling: 5
UBI: max/mean erase counter: 1/0
UBI: image sequence number:547441907
UBI: background thread "ubi_bgt0d" started, PID 283
PPP generic driver version 2.4.2
PPP BSD Compression module registered
PPP Deflate Compression module registered
PPP MPPE Compression module registered
NET: Registered protocol family 24
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
PCI: Enabling device 0000:00:0a.0 (0000 -> 0002)
ehci_hcd 0000:00:0a.0: setting latency timer to 64
ehci_hcd 0000:00:0a.0: EHCI Host Controller
ehci_hcd 0000:00:0a.0: new USB bus registered, assigned bus number 1
ehci_hcd 0000:00:0a.0: Enabling legacy PCI PM
ehci_hcd 0000:00:0a.0: irq 16, io mem 0x1000c300
ehci_hcd 0000:00:0a.0: USB f.f started, EHCI 1.00
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
PCI: Enabling device 0000:00:09.0 (0000 -> 0002)
ohci_hcd 0000:00:09.0: setting latency timer to 64
ohci_hcd 0000:00:09.0: OHCI Host Controller
ohci_hcd 0000:00:09.0: new USB bus registered, assigned bus number 2
ohci_hcd 0000:00:09.0: irq 18, io mem 0x1000c400
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
usbcore: registered new interface driver cdc_acm
cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters
usbcore: registered new interface driver usblp
usbcore: registered new interface driver usbserial
usbserial: USB Serial Driver core
usbcore: registered new interface driver ch341
USB Serial support registered for ch341-uart
usbcore: registered new interface driver cp210x
USB Serial support registered for cp210x
usbcore: registered new interface driver cypress
USB Serial support registered for DeLorme Earthmate USB
USB Serial support registered for HID->COM RS232 Adapter
USB Serial support registered for Nokia CA-42 V2 Adapter
usbcore: registered new interface driver f81232
USB Serial support registered for f81232
usbcore: registered new interface driver ftdi_sio
USB Serial support registered for FTDI USB Serial Device
ftdi_sio: v1.6.0:USB FTDI Serial Converters Driver
usbcore: registered new interface driver option
USB Serial support registered for GSM modem (1-port)
usbcore: registered new interface driver pl2303
USB Serial support registered for pl2303
i2c /dev entries driver
usbcore: registered new interface driver usbhid
hid_core: USB HID core driver
brcmboard: brcm_board_init entry
set_location_info: init location code:0x2000
Wifi Button: Button Interrupt 0x7 is enabled
DYING GASP IRQ Initialized and Enabled
BpGet11nInputGpio failed
Serial: BCM63XX driver $Revision: 3.00 $
Magic SysRq with Auxilliary trigger char enabled (type ^ h for list of supported commands)
ttyS0 at MMIO 0xb0800640 (irq = 104) is a BCM63XX
ttyS1 at MMIO 0xb0800660 (irq = 105) is a BCM63XX
BPM: tot_mem_size=268435456B (256MB), buf_mem_size <10%> =26843540B (25MB), num of buffers=13421, buf size=2000
Broadcom BPM Module Char Driver v0.1 Aug 22 2017 19:29:38 Registered<244>
GACT probability NOT on
Mirror/redirect action on
u32 classifier
input device check on
Actions configured
TCP: cubic registered
NET: Registered protocol family 10
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
Initializing MCPD Module
Ebtables v2.0 registered
ebt_time registered
ebt_ftos registered
ebt_wmm_mark registered
L2TP core: blog_l2tp_rcv_check
L2TP core driver, V2.0
PPPoL2TP kernel driver, V2.0
8021q: 802.1Q VLAN Support v1.8
UBIFS: mounted UBI device 0, volume 0, name "rootfs_ubifs"
UBIFS: mounted read-only
UBIFS: file system size: 68186112 bytes (66588 KiB, 65 MiB, 537 LEBs)
UBIFS: journal size: 9023488 bytes (8812 KiB, 8 MiB, 72 LEBs)
UBIFS: media format: w4/r0 (latest is w4/r0)
UBIFS: default compressor: zlib
UBIFS: reserved for root:0 bytes (0 KiB)
VFS: Mounted root (ubifs filesystem) readonly on device 0:11.
Freeing unused kernel memory: 224k freed
init started: BusyBox v1.17.2 (2017-08-22 19:41:59 CST)
starting pid 366, tty '': '/bin/sh -l -c "bcm_boot_launcher start"'
Mounting filesystems...
jffs2: notice: (371) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
jffs2: notice: (371) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
Saving kernel bootup messages for dumpsysinfo...
Configuring system...
Loading drivers and kernel modules...
wlcsm: module license 'Proprietary' taints kernel.
Disabling lock debugging due to kernel taint
Initializing WLCSM Module
WLCSM Module loaded successfully
scratchpad RdpaWanType - GPON
enable IH Wan-Wan forwarding...
data_path_go Done!!
Bridge fastpath module. compiled Aug 22 2017 , 19:32:48
brcmchipinfo: brcm_chipinfo_init entry
NBUFF v1.0 Initialized
Initialized fcache state
Broadcom Packet Flow CacheChar Driver v2.2 Aug 22 2017 19:30:15 Registered<242>
Created Proc FS /procfs/fcache
Broadcom Packet Flow Cache registered with netdev chain
Broadcom Packet Flow Cache learning via BLOG enabled.
pktDbgLvl=0
fhw_construct:
Initialized Fcache HW accelerator layer state
flwStatsThread created
Constructed Broadcom Packet Flow Cache v2.2 Aug 22 2017 19:30:15
i2c i2c-0: Failed to register i2c client gpon_i2c at 0x50 (-16)
i2c i2c-0: Failed to register i2c client gpon_i2c at 0x51 (-16)
Broadcom BCM68488_A1_ Ethernet Network Device v0.1 Aug 22 2017 19:32:49
dgasp: kerSysRegisterDyingGaspHandler: bcmsw registered
eth0: <Int sw port: 0> <Logical : 00> PHY_ID <0x01800001 : 0x01> MAC : ****************
eth3: <Int sw port: 1> <Logical : 01> PHY_ID <0x00800002 : 0x02> MAC : ****************
eth1: <Int sw port: 2> <Logical : 02> PHY_ID <0x00800003 : 0x03> MAC : ****************
eth2: <Int sw port: 3> <Logical : 03> PHY_ID <0x00800004 : 0x04> MAC : ****************
Ethernet Auto Power Down and Sleep: Enabled
All Port Bit Map: 0x000f: eth0,eth3,eth1,eth2
Chip WAN Only Ports 0000, Defined WAN Only Ports 0000, WAN Only Port Result: 0x0000:
Chip WAN Preffered Ports 0000, Defined WAN Preffered Ports 0000, WAN Preffered Port Result: 0x0000:
Chip LAN Only Ports 0000, Defined LAN Only Ports 0000, LAN Only Port Result: 0x0000:
WAN/LAN Both Capable Ports 0x000f:eth0,eth3,eth1,eth2
Creating Enet CPU ring for queue number 1 with 912 packets,Descriptor base=aad2c080
Creating Enet CPU ring for queue number 0 with 912 packets,Descriptor base=ad468080
Broadcom Packet Flow Cache HW acceleration enabled.
Broadcom Packet Flow Cache HW acceleration enabled.
Creating CPU ring for queue number 2 with 1024 packets descriptor=0xc06e4724
wfd_bind: Dev (null) wfd_idx 2 wl_radio_idx -1 Type skb configured WFD thread wfd2-thrd minQId/maxQId (10/10), status (0) qmask 0x4
Instantiating WFD 2 thread
Wifi Forwarding Driver is initialized!
--SMP support
wl: dsl_tx_pkt_flush_len=338
wl: norm_wmark_tot=8723, pktc_wmark_tot=8723
PCI: Enabling device 0000:02:00.0 (0000 -> 0002)
wl: passivemode=1
wl0: creating kthread wl0-kthrd
wl: napimode=0
initvars_cis_pci: Not CIS format
Neither SPROM nor OTP has valid image
wl:srom/otp not programmed, using main memory mapped srom info(wombo board)
wl: ID=pci/2/0/
wl: ID=pci/2/0/
wl: loading /etc/wlan/bcm43217_map.bin
srom rev:8
wl: reading /etc/wlan/bcmcmn_nvramvars.bin, file size=32
wl0: allocskbmode=1 currallocskbsz=1024
Creating CPU ring for queue number 0 with 1024 packets descriptor=0xc06e46ec
wfd_bind: Dev wl%d wfd_idx 0 wl_radio_idx 0 Type skb configured WFD thread wfd0-thrd minQId/maxQId (8/8), status (0) qmask 0x1
Instantiating WFD 0 thread
wfd_registerdevice Successfully registered dev wl0 ifidx 0 wfd_idx 0
wl0: Broadcom BCM43227 802.11 Wireless Controller 7.14.164.15.cpe4.16L04_CT2015_Yueme.0-kdb
dgasp: kerSysRegisterDyingGaspHandler: wl0 registered
Loading PCM shim driver
Endpoint: endpoint_init entry
Endpoint: endpoint_init COMPLETED
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
Broadcom 802.1Q VLAN Interface, v0.1
brcm_otp_init entry
Board not populated with PMD
RDPA Speed Service Command Driver
nf_conntrack version 0.5.0 (3603 buckets, 18015 max)
MAXNET DPI interface Loaded
Skip /etc/loadclm.sh: /etc/wlan/clm/router.clm_blob doesn't exist
mounting cgroup...
get mtd 'apps' info success
DEVNAME:mtd12
MAJOR:90
MINOR:24
attaching mtd apps(mtd12)...
UBI: attaching mtd12 to ubi1
UBI: physical eraseblock size: 131072 bytes (128 KiB)
UBI: logical eraseblock size: 126976 bytes
UBI: smallest flash I/O unit: 2048
UBI: VID header offset: 2048 (aligned 2048)
UBI: data offset: 4096
UBI: max. sequence number: 31404
UBI: attached mtd12 to ubi1
UBI: MTD device name: "apps"
UBI: MTD device size: 105 MiB
UBI: number of good PEBs: 840
UBI: number of bad PEBs: 0
UBI: number of corrupted PEBs: 0
UBI: max. allowed volumes: 128
UBI: wear-leveling threshold: 4096
UBI: number of internal volumes: 1
UBI: number of user volumes: 1
UBI: available PEBs: 0
UBI: total number of reserved PEBs: 840
UBI: number of PEBs reserved for bad PEB handling: 8
UBI: max/mean erase counter: 41/38
UBI: image sequence number:1435636553
UBI: background thread "ubi_bgt1d" started, PID 590
UBI device number 1, total 840 LEBs (106659840 bytes, 101.7 MiB), available 0 LEBs (0 bytes), LEB size 126976 bytes (124.0 KiB)
attached mtd12 to ubi1
MAJOR:252
MINOR:0
Volume ID: 0 (on ubi1)
Type: dynamic
Alignment: 1
Size: 828 LEBs (105136128 bytes, 100.3 MiB)
State: OK
Name: apps
Character device major/minor: 252:1
mounting ubi volume 'apps' to /opt/upt/apps...
UBIFS: recovery needed
UBIFS: recovery completed
UBIFS: mounted UBI device 1, volume 0, name "apps"
UBIFS: file system size: 103739392 bytes (101308 KiB, 98 MiB, 817 LEBs)
UBIFS: journal size: 9023488 bytes (8812 KiB, 8 MiB, 72 LEBs)
UBIFS: media format: w4/r0 (latest is w4/r0)
UBIFS: default compressor: zlib
UBIFS: reserved for root:0 bytes (0 KiB)
attaching mtd10...
UBI: attaching mtd10 to ubi2
UBI: physical eraseblock size: 131072 bytes (128 KiB)
UBI: logical eraseblock size: 126976 bytes
UBI: smallest flash I/O unit: 2048
UBI: VID header offset: 2048 (aligned 2048)
UBI: data offset: 4096
UBI: max. sequence number: 0
UBI error: ubi_read_volume_table: the layout volume was not found
ubiattach: error!: cannot attach mtd10
error 22 (Invalid argument)
Checking SAF partition mtd10...[ ok ]
attaching mtd11...
UBI: attaching mtd11 to ubi2
UBI: physical eraseblock size: 131072 bytes (128 KiB)
UBI: logical eraseblock size: 126976 bytes
UBI: smallest flash I/O unit: 2048
UBI: VID header offset: 2048 (aligned 2048)
UBI: data offset: 4096
UBI: max. sequence number: 0
UBI error: ubi_read_volume_table: the layout volume was not found
ubiattach: error!: cannot attach mtd11
error 22 (Invalid argument)
Checking SAF partition mtd11...[ ok ]
Starting monitor...
Starting CMS smd...
===== Release Version 4.16L.04_CT2015_Yueme (build timestamp 170822_1937) =====
wl: wl driver adapter not found
Initializing CMS MDM in Legacy98 mode
ty_get_current_mdm_name():loading mdm file:libmdm.so
jffs2: notice: (723) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
jffs2: notice: (723) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
Active partition = 2, Next partition = 2
Adjust WLAN Configuration, has configuration , num , defaultnum
upwd:d2dbj
err:No such file or directory
ip_tables: (C) 2000-2006 Netfilter Core Team
ip6_tables: (C) 2000-2006 Netfilter Core Team
Broadcom Packet Flow Cache learning via BLOG disabled.
ssk:error:25.898:rutIpt_ctUserinfoCfgRedirectRules:4606:failed to get subnet or netmask info for br0!
Netfilter messages via NETLINK v0.30.
CMS_MSG_STOP_APP EID_TELNETD
/bin/smd:error:27.041:processStopAppMsg:3576:get targetDinfo fail
rcl_wanServiceManageObject currObj == NULL newObj != NULL
set samba access, lanEn:1 wanEn:0 service:0
updating dnsproxy!!
Host MIPS Clock divider pwrsaving is enabled
ssk:error:30.305:bcm_phy_eee_set:6336:ioctl command return error!
ssk:error:30.305:mdm_activateObjects:1050:rcl handler reports error=9002 on X_BROADCOM_COM_PwrMngtCfg oid=3230 iidStack={}
created /var/mcpd.conf then rutMulti_sendRelaodMcpdMsg()
created /var/mcpd.conf then rutMulti_sendRelaodMcpdMsg()
Broadcom SNTP Stack v0.1 (Aug 22 2017, 19:42:28)
created /var/mcpd.conf then rutMulti_sendRelaodMcpdMsg()
created /var/mcpd.conf then rutMulti_sendRelaodMcpdMsg()
created /var/mcpd.conf then rutMulti_sendRelaodMcpdMsg()
br_netlink_mcpd.c: Setting registration type 0 pid to 939
dhcpd:error:32.161:queryDeviceInfo:578:Invalid message type (10000268), expects CMS_MSG_GET_DEVICE_INFO (100008a1)
IGMP Configuration
default_version = 2
query_interval = 125
query_resp_interval = 10
lmqi = 10
robustness value = 2
max_groups = 25
max_sources = 10
max_members = 25
fast_leave_enable = 1
admission required = 0
admission bridging filter = 0
igmp proxy interfaces:
igmp snooping interfaces: br0
igmp snooping all interfaces br0
IPv4 multicast source interfaces: veip0.3 veip0.2
MLD Configuration
default_version = 1
query_interval = 125
query_resp_interval = 10
lmqi = 10
robustness value = 2
max_groups = 10
max_sources = 10
max_members = 10
fast_leave_enable = 1
admission required = 0
admission bridging filter = 0
mld proxy interfaces:
mld-snooping-interfaces: br0
mld-snooping-all-interfaces: br0
IPv6 multicast source interfaces:
Bridge port multicast group limits:
mcpd_router.interfaces:
Loglevel:3
xt_connbytes: Forcing CT accounting to be enabled
fun=rcl_ipv6LanHostCfgObject line=545 advManagedFlag=0 ra=1 6s=0 mannalLan=0
device eth0 entered promiscuous mode
Ethernet Auto Power Down and Sleep: Enabled
ADDRCONF(NETDEV_UP): eth0: link is not ready
device eth2 entered promiscuous mode
Ethernet Auto Power Down and Sleep: Enabled
ADDRCONF(NETDEV_UP): eth2: link is not ready
device eth3 entered promiscuous mode
Ethernet Auto Power Down and Sleep: Enabled
ADDRCONF(NETDEV_UP): eth3: link is not ready
fe_ports:3 ge_ports:1
created /var/mcpd.conf then rutMulti_sendRelaodMcpdMsg()
IGMP Configuration
default_version = 2
query_interval = 125
query_resp_interval = 10
lmqi = 10
robustness value = 2
max_groups = 25
max_sources = 10
max_members = 25
fast_leave_enable = 1
admission required = 0
admission bridging filter = 0
igmp proxy interfaces:
igmp snooping interfaces: br0 br1
igmp snooping all interfaces br0 br1
IPv4 multicast source interfaces: veip0.3 veip0.2
MLD Configuration
default_version = 1
query_interval = 125
query_resp_interval = 10
lmqi = 10
robustness value = 2
max_groups = 10
max_sources = 10
max_members = 10
fast_leave_enable = 1
admission required = 0
admission bridging filter = 0
mld proxy device eth1 entered promiscuous mode
interfaces:
mld-snooping-interfaces: br0 br1
mld-snooping-all-interfaces: br0 br1
IPv6 multicast source interfaces:
Bridge port multicast group limits:
mcpd_router.interfaces:
br0(idx:12) iproute
Loglevel:3
mcpd_interface_cleanup,1444 MCPD_MSG_IF_CHANGE, but don't send
created /var/mcpd.conf then rutMulti_sendRelaodMcpdMsEthernet Auto Power Down and Sleep: Enabled
g()
ADDRCONF(NETDEV_UP): eth1: link is not ready
rcl_ipv6LanHostCfgObject Invalid argument iidStack=0x7ffdda84
rcl_ipv6LanHostCfgObject Invalid argument iidStack->instance=2
===45 45========
===43 43========
===42 42========
===120 120========
cmdBuf
cmdBuf
cmdBuf
cmdBuf
cmdBuf
cmdBuf
created /var/mcpd.conf then rutMulti_sendRelaodMcpdMsg()
created /var/mcpd.conf then rutMulti_sendRelaodMcpdMsg()
created /var/mcpd.conf then rutMulti_sendRelaodMcpdMsg()
created /var/mcpdnfc_enable=1
.conf then rutMulti_sendRelaodMcpdMsg() bcmeapi_ioctl_ethsw_port_pause_capability,574: invalid lan port id 8
ssk:error:35.265:bcm_enet_map_oam_idx_to_phys_port:2815:Get unit port failed, oam_idx=8
ssk:error:35.274:bcm_port_pause_capability_set:1373:ioctl SIOCETHSWCTLOPS returned error 1 (Operation not permitted)
created /var/mcpd.conf then rutMulti_sendRelaodMcpdMsg()
created /var/mcpd.conf then rutMulti_sendRelaodMcpdMsg()
created /var/mcpd.conf then rutMulti_sendRelaodMcpdMsg()
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
monitor task is initialized pid= 723
ty_device_model_string():init device model:gpon_41w_smart
Starting wanconf...
wanconf: cmsPsp_get: rdpaWanType=GPON
--laser_init start--
MTD: MTD device with name "bob_data" not found.
Starting LXC support ...
mount: mounting mtd:bob_data oscratchpad RdpaWanType - GPON
n /bob failed: No such file or directory
--laser_init hw_board_id:f
--laser_init,id:15 skip bob conf,just go out
starting pid 1330, tty '': '-/bin/sh -l -c consoled'
---------setVoiceServerType vodslProtocolType IMS
ssk:error:36.753:initVodslBoundIpIfWanSideUpLocked_igd:1008:Failed to get WAN Connection object
wancfg_cms_init successful, shmId=0
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
LOGGER driver Init Done : 0x89816180
enable IH Wan-Wan forwarding...
wlctl: wl driver adapter not fCreating CPU ring for queue number 6 with 32 packets descriptor=0xc04c10c0
Done initializing Ring 6 Base=0xa815a980 End=0xa815ab80 calculated entries= 32 RDD Base=0x0815a980 descriptor=0xc04c10c0
ound
printSerialPasswd: SN=53:43:54:59:32:dc:8d:a8
printSerialPasswd: PW=20:20:20:20:20:20:20:20:20:20
dgasp: kerSysRegisterDyingGaspHandler: gpon0 registered
bcm_ploamCreate: ploam driver created.
Creating CPU ring for queue number 5 with 64 packets descriptor=0xc04c1098
Done initializing Ring 5 Base=0xa8150880 End=0xa8150c80 calculated entries= 64 RDD Base=0x08150880 descriptor=0xc04c1098
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
# Created object <vlan_action/dir=ds,index=100>
tr69c:error:38.661:dns_lookup:825:dns_lookup gethostbynameError
# Created object <ingress_class/dir=ds,index=0>
# Created object <ingress_class/dir=ds,index=1>
tr69c:error:38.816:dns_lookup:825:dns_lookup gethostbynameError
# Created object <ingress_class/dir=ds,index=2>
tr69c:error:38.922:dns_lookup:825:dns_lookup gethostbynameError
# Created object <ingress_class/dir=ds,index=3>
tr69c:error:38.981:dns_lookup:825:dns_lookup gethostbynameError
lan if index:12
ssk:error:39.023:create_downloadQoe:5345:link is not up and sleep 60s
ty_device_model_string():init device model:gpon_41w_smart
ssk:error:39.385:ssk_main:5374:cannot handle msg type 0x10000802 from 20 (flags=0x20007ae0)
tr69c:error:39.393:dns_lookup:825:dns_lookup gethostbynameError
mcpd_interface_cleanup,1444 MCPD_MSG_IF_CHANGE, but don't send
mcpd_interface_cleanup,1444 MCPD_MSG_IF_CHANGE, but don't send
wlctl: wl driver adapter not found
dhcpd:error:39.618:udhcpd:581:unrecognized msg, type=0x100008a1 dataLength=136
dhcpd:error:39.619:udhcpd:581:unrecognized msg, type=0x100007c0 dataLength=0
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
tar: removing leading '/' from member names
var/SCTY_TEWA-700G_187532dc8da8_GW_19700101080039_debuginfo
tr69c:error:40.381:dns_lookup:825:dns_lookup gethostbynameError
gpon0: MAC Address: ****************
netdev path : gpon0.ani -> gpon0
BCMVLAN : gpon0 mode was set to ONT
gpon0.ani MAC address set to ****************
device gpon0 entered promiscuous mode
netdev path : veip0 -> gpon0.ani -> gpon0
BCMVLAN : gpon0.ani mode was set to ONT
veip0 MAC address set to ****************
tr69c:error:40.595:dns_lookup:825:dns_lookup gethostbynameError
tr69c:error:40.631:dns_lookup:825:dns_lookup gethostbynameError
epon link error status = LinkStatusLinkNormal
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: Bad rule (does a matching rule exist in that chain?).
Broadcom GPON OMCI Stack v0.1 (Aug 22 2017, 19:40:16)
Omci_Capture_Init:NOP
epon link error status = 15
mii (phy addr 0x1) register 24 is 0x7207
mii (phy addr 0x1) register 24 is 0x7217
wl: wl driver adapter not found
wl: wl driver adapter not found
gpon0.ani: no IPv6 routers present
veip0: no IPv6 routers present
!!!! launch boot stage 2 timeout !!!!
ty_device_model_string():init device model:gpon_41w_smart
ty_device_model_string():init device model:gpon_41w_smart
epon link error status = LinkStatusLinkLos
epon link error status = 13
Use performance improvement level: 1
Enter ecms main
on_name_lost: connection to the bus daemon lost or can't be made
on_name_lost: Lost the name (com.ctc.igd1) from the bus
wl: wl driver adapter not found
wl: wl driver adapter not found
bus_own_name_retry: try to own bus name com.ctc.igd1
on_name_lost: connection to the bus daemon lost or can't be made
on_name_lost: Lost the name (com.ctc.igd1) from the bus
wl: wl driver adapter not found
bus_own_name_retry: try to own bus name com.ctc.igd1
on_name_lost: connection to the bus daemon lost or can't be made
on_name_lost: Lost the name (com.ctc.igd1) from the bus
processTr69cSetParam begin
processTr69cSetParam end
bus_own_name_retry: try to own bus name com.ctc.igd1
on_name_lost: connection to the bus daemon lost or can't be made
on_name_lost: Lost the name (com.ctc.igd1) from the bus
bus_own_name_retry: try to own bus name com.ctc.igd1
on_name_lost: connection to the bus daemon lost or can't be made
on_name_lost: Lost the name (com.ctc.igd1) from the bus
WLmngr Daemon is running
optarg=0 shmId=0
0: ssid: ChinaNet-WuLY
1: ssid: iTV-WuLY
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
2: ssid: ChinaNet-3
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
3: ssid: ChinaNet-4
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
wlctl: wl driver adapter not found
There is no Predefined DevicePin in CFE
WPS Device PIN = 17145664
sched_setaffinity failed, rc=-1, pid_wfd0=461
device wl0 is not a slave of br0
interface wl0.1 does not exist!
interface wl0.2 does not exist!
interface wl0.3 does not exist!
bus_own_name_retry: try to own bus name com.ctc.igd1
on_name_lost: connection to the bus daemon lost or can't be made
on_name_lost: Lost the name (com.ctc.igd1) from the bus
Setting SSID: "ChinaNet-WuLY"
Setting SSID: "iTV-WuLY"
wfd_registerdevice Successfully registered dev wl0.1 ifidx 1 wfd_idx 0
Setting SSID: "ChinaNet-3"
Setting SSID: "ChinaNet-4"
wfd_registerdevice Successfully registered dev wl0.2 ifidx 2 wfd_idx 0
wfd_registerdevice Successfully registered dev wl0.3 ifidx 3 wfd_idx 0
device wl0 entered promiscuous mode
device wl0.1 entered promiscuous mode
device wl0.2 entered promiscuous mode
device wl0.3 entered promiscuous mode
--wlmngr_startWsc buf:--
--wlmngr_startWsc idx:0 j:0 wl_wps_config_state:1--
--idx:0 cfg:NONE--
br0: port 4(wl0) entered forwarding state
send igmp general query to all ports
br0: port 4(wl0) entered forwarding state
send igmp general query to all ports
get mtd 'apps' info success
br1: port 2(wl0.1) entered forwarding state
send igmp general query to all ports
br1: port 2(wl0.1) entered forwarding state
send igmp general query to all ports
DEVNAME:mtd12
MAJOR:90
MINOR:24
attaching mtd apps(mtd12)...
ubiattach: error!: cannot attach mtd12
error 17 (File exists)
creating mtd device '/tmp/mtd12'
formating mtd apps(mtd12)...
ubiformat: error!: please, first detach mtd12 (/tmp/mtd12) from ubi1
attaching mtd apps(mtd12) again...
ubiattach: error!: cannot attach mtd12
error 17 (File exists)
attach ubi failed, that's impossible!!!
--is_wps_restarted:1 wl_cnt:1 need_disable_someone_wps:0--
bus_own_name_retry: try to own bus name com.ctc.igd1
on_name_lost: connection to the bus daemon lost or can't be made
on_name_lost: Lost the name (com.ctc.igd1) from the bus
attaching mtd10...
UBI: attaching mtd10 to ubi2
UBI: physical eraseblock size: 131072 bytes (128 KiB)
UBI: logical eraseblock size: 126976 bytes
UBI: smallest flash I/O unit: 2048
UBI: VID header offset: 2048 (aligned 2048)
UBI: data offset: 4096
UBI: max. sequence number: 0
UBI error: ubi_read_volume_table: the layout volume was not found
ubiattach: error!: cannot attach mtd10
error 22 (Invalid argument)
Checking SAF partition mtd10...[ ok ]
attaching mtd11...
UBI: attaching mtd11 to ubi2
UBI: physical eraseblock size: 131072 bytes (128 KiB)
UBI: logical eraseblock size: 126976 bytes
UBI: smallest flash I/O unit: 2048
UBI: VID header offset: 2048 (aligned 2048)
UBI: data offset: 4096
UBI: max. sequence number: 0
UBI error: ubi_read_volume_table: the layout volume was not found
ubiattach: error!: cannot attach mtd11
error 22 (Invalid argument)
Checking SAF partition mtd11...[ ok ]
system dbus Starting
waiting child start apps
starting app '/usr/sbin/dbus-daemon'...
child execute successfully
child start apps done, exit
system dbus Started
get io stream error: Could not connect: No such file or directory 1
get io stream error: Could not connect: No such file or directory 1
get io stream error: Could not connect: No such file or directory 1
get io stream error: Could not connect: No such file or directory 1
got io stream
bus name 'com.ctc.igd1' vanished
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
ssk:error:99.113:create_downloadQoe:5345:link is not up and sleep 60s
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
ACSD >>acs_candidate_score_busy(2890): busy check failed for chanspec: 0x1001
ACSD >>acs_candidate_score_intf(2926): intf check failed for chanspec: 0x1001
ACSD >>acs_candidate_score_busy(2890): busy check failed for chanspec: 0x1002
ACSD >>acs_candidate_score_intf(2926): intf check failed for chanspec: 0x1002
ACSD >>acs_candidate_score_busy(2890): busy check failed for chanspec: 0x1003
ACSD >>acs_candidate_score_intf(2926): intf check failed for chanspec: 0x1003
ACSD >>acs_candidate_score_busy(2890): busy check failed for chanspec: 0x1004
ACSD >>acs_candidate_score_intf(2926): intf check failed for chanspec: 0x1004
ACSD >>acs_candidate_score_busy(2890): busy check failed for chanspec: 0x1005
ACSD >>acs_candidate_score_intf(2926): intf check failed for chanspec: 0x1005
ACSD >>acs_candidate_score_busy(2890): busy check failed for chanspec: 0x1006
ACSD >>acs_candidate_score_intf(2926): intf check failed for chanspec: 0x1006
ACSD >>acs_candidate_score_busy(2890): busy check failed for chanspec: 0x1007
ACSD >>acs_candidate_score_intf(2926): intf check failed for chanspec: 0x1007
ACSD >>acs_candidate_score_busy(2890): busy check failed for chanspec: 0x1008
ACSD >>acs_candidate_score_intf(2926): intf check failed for chanspec: 0x1008
ACSD >>acs_candidate_score_busy(2890): busy check failed for chanspec: 0x1009
ACSD >>acs_candidate_score_intf(2926): intf check failed for chanspec: 0x1009
ACSD >>acs_candidate_score_busy(2890): busy check failed for chanspec: 0x100a
ACSD >>acs_candidate_score_intf(2926): intf check failed for chanspec: 0x100a
ACSD >>acs_candidate_score_busy(2890): busy check failed for chanspec: 0x100b
ACSD >>acs_candidate_score_intf(2926): intf check failed for chanspec: 0x100b
acsd: selected channel spec: 0x100a
acsd: Adjusted channel spec: 0x100a
acsd: selected channel spec: 0x100a
==>wl -i wl0 down<==.
==>wl -i wl0.1 down<==.
bus_own_name_retry: try to own bus name com.ctc.igd1
Engine Vesion 2.0-20170601-0
Enter dbus_engine_init
ty_device_model_string():init device model:gpon_41w_smart
ecms:error:101.909:GetUpgradeStatus:6059:open read /data/UpgradeStatus fail
ecms:error:101.918:GetUpgradeSWVersion:6130:open /tmp/UpgradeSWVersion failed,err:No such file or directory
Leave dbus_engine_init
on_bus_acquired: Acquired a message bus connection success
bus name 'com.ctc.igd1' owned by ':1.1'
on_name_acquired: Claim the name (com.ctc.igd1) success
saf mtd:10 11 12
starting app '/usr/sbin/saf'...
child execute successfully
app '/usr/sbin/saf(2575)' exited
bus name 'com.ctc.saf1' vanished
Framework (active):
boot time is 104 Thu Jan1 08:01:44 1970
E8C RestoreStatus is 4
ecms:error:104.706:GetUpgradeStatus:6059:open read /data/UpgradeStatus fail
E8C UpgradeStatus is 0
Auto Starting Framework ...
bus name 'com.ctc.saf1' owned by ':1.2'
--search IPconn---
--search IPconn---
--search PPPconn---
--search PPPconn---
--search IPconn---
--search IPconn---
--search PPPconn---
--search PPPconn---
ecms:error:124.593:scty_getmulti_ctc_igd1_network_info:2347:ppp not exists!
ecms:error:124.598:scty_getmulti_ctc_igd1_network_info:2424:ppp not exists!
memshr init OK
this is the kernel dpi loaded by maxnet, (0xc2680000, 204030)
ssk:error:159.116:create_downloadQoe:5341:qoe download retry up to max and exit
ssk:error:159.117:create_downloadQoe:5513:download error
update all engine status(1)
start_samba:set samba access, lanEn:1 wanEn:0 service:0
starting samba server
wlctl: Not up
wlctl: Not Found
wlctl: Not up
wlctl: Not Found
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:60000 0.0.0.0:* LISTEN 2998/m01-b01-inner
tcp 0 0 0.0.0.0:32768 0.0.0.0:* LISTEN 2994/inter_connd
tcp 0 0 192.168.2.1:1990 0.0.0.0:* LISTEN 2106/wps_monitor
tcp 0 0 192.168.1.1:1990 0.0.0.0:* LISTEN 2106/wps_monitor
tcp 0 0 0.0.0.0:139 0.0.0.0:* LISTEN 3271/smbd
tcp 0 0 192.168.1.1:17998 0.0.0.0:* LISTEN 2872/cloudclient
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 2887/uhttpd
tcp 0 0 127.0.0.1:5916 0.0.0.0:* LISTEN 2437/acsd
tcp 0 0 0.0.0.0:445 0.0.0.0:* LISTEN 3271/smbd
tcp 0 0 :::139 :::* LISTEN 3271/smbd
tcp 0 0 :::33742 :::* LISTEN 722/smd
tcp 0 0 :::80 :::* LISTEN 2887/uhttpd
tcp 0 0 :::8080 :::* LISTEN 722/smd
tcp 0 0 :::21 :::* LISTEN 722/smd
tcp 0 0 :::35256 :::* LISTEN 722/smd
tcp 0 0 :::30010 :::* LISTEN 722/smd
tcp 0 0 :::445 :::* LISTEN 3271/smbd
udp 0 0 0.0.0.0:67 0.0.0.0:* 1132/dhcpd
udp 0 0 0.0.0.0:38000 0.0.0.0:* 2093/eapd
udp 0 0 0.0.0.0:37000 0.0.0.0:* 2093/eapd
udp 0 0 127.0.0.1:38032 0.0.0.0:* 2102/nas
udp 0 0 127.0.0.1:40600 0.0.0.0:* 2106/wps_monitor
udp 0 0 127.0.0.1:37064 0.0.0.0:* 2106/wps_monitor
udp 0 0 0.0.0.0:1900 0.0.0.0:* 2106/wps_monitor
udp 0 0 0.0.0.0:46000 0.0.0.0:* 2093/eapd
udp 0 0 0.0.0.0:45000 0.0.0.0:* 2093/eapd
udp 0 0 0.0.0.0:43000 0.0.0.0:* 2093/eapd
udp 0 0 0.0.0.0:42000 0.0.0.0:* 2093/eapd
udp 0 0 127.0.0.1:42032 0.0.0.0:* 2437/acsd
udp 0 0 127.0.0.1:40500 0.0.0.0:* 2106/wps_monitor
udp 0 0 :::69 :::* 722/smd
udp 0 0 :::53 :::* 921/dnsproxy
有没有人帮帮忙？ 四川天邑康和光猫，我这大豫地界800g的型号，很简单就可以找到了密码了 hztlkm 发表于 2018-5-9 07:26
四川天邑康和光猫，我这大豫地界800g的型号，很简单就可以找到了密码了
我这是700g，找了好多软件，教程都不行。能不能指点一下。谢谢。 超密破解：
1、浏览器输入：http://192.168.1.1:8080 使用光猫背后普通账号密码登陆
2、再输入 http://192.168.1.1:8080/dumpmdmd.cmd 得到配置文件信息。
3、拷贝下来查找telecomadmin密码。
4、使用超密登陆之后，输入：http://192.168.1.1:8080/enableTelnet.html 打开telnet管理页面。 看不懂 . 学习学习
页:
[1]