上海贝尔RG100A-AA（神州数码DCHG-800-A）成功破解为USRobotics USR9113版本
启动信息：CFE version 1.0.37-10.2 for BCM96358 (32bit,SP,BE)
Build Date: Tue Oct 23 15:23:12 CDT 2007 (root@mns.linux.usr)
Copyright (C) 2000-2007 U.S. Robotics Corporation.
Boot Address 0xbe000000
Initializing Arena.
Initializing Devices.
Parallel flash device: name AM29LV320MT, id 0x2201, size 16384KB
Unknown PHY type
CPU type 0x2A010: 300MHz, Bus: 133MHz, Ref: 64MHz
CPU running TP0
Total memory: 33554432 bytes (32MB)
Total memory used by CFE:0x80401000 - 0x80528410 (1209360)
Initialized Data: 0x8041D790 - 0x8041FC40 (9392)
BSS Area: 0x8041FC40 - 0x80426410 (26576)
Local Heap: 0x80426410 - 0x80526410 (1048576)
Stack Area: 0x80526410 - 0x80528410 (8192)
Text (code) segment: 0x80401000 - 0x8041D784 (116612)
Boot area (physical): 0x00529000 - 0x00569000
Relocation Factor: I:00000000 - D:00000000
Board IP address : 192.168.1.1:ffffff00
Host IP address : 192.168.1.100
Gateway IP address :
Run from flash/host (f/h) : f
Default host run file name : vmlinux
Default host flash file name : bcm963xx_fs_kernel
Boot delay (0-9 seconds) : 1
Board Id (0-5) : 96358GW-A
Number of MAC Addresses (1-32) : 12
Base MAC Address : 00:74:04:01:42:17
Country code : ALL
PSI Size (1-64) KBytes : 24
Main Thread Number : 0
*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 0
Booting from only image (0xbe800000) ...
Code Address: 0x80010000, Entry Address: 0x801ca018
Decompression OK!
Entry at 0x801ca018
Closing network.
Starting program at 0x801ca018
Linux version 2.6.8.1 (root@mns.linux.usr) (gcc version 3.4.2) #1 Wed Jan 9 16:1
0:17 CST 2008
Parallel flash device: name AM29LV320MT, id 0x2201, size 16384KB
96358GW-A prom init
CPU revision is: 0002a010
Determined physical RAM map:
memory: 01fa0000 @ 00000000 (usable)
On node 0 totalpages: 8096
DMA zone: 4096 pages, LIFO batch:1
Normal zone: 4000 pages, LIFO batch:1
HighMem zone: 0 pages, LIFO batch:1
Built 1 zonelists
Kernel command line: root=31:0 ro noinitrd console=ttyS0,115200
brcm mips: enabling icache and dcache...
Primary instruction cache 32kB, physically tagged, 2-way, linesize 16 bytes.
Primary data cache 16kB 2-way, linesize 16 bytes.
PID hash table entries: 128 (order 7: 1024 bytes)
Using 150.000 MHz high precision timer.
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 30008k/32384k available (1539k kernel code, 2332k reserved, 225k data, 7
2k init, 0k highmem)
KLOB Pool 1 Initialized: 1048576 bytes <0x80e00000 ... 0x80f00000>
Calibrating delay loop... 299.00 BogoMIPS
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
Checking for 'wait' instruction...unavailable.
NET: Registered protocol family 16
Total Flash size: 16384K with 128 sectors
File system address: 0xbe800100
Can't analyze prologue code at 8018f484
usbcore: registered new driver hub
Initializing Cryptographic API
PPP generic driver version 2.4.2
NET: Registered protocol family 24
Using noop io scheduler
bcm963xx_mtd driver v1.0
PCI: Enabling device 0000:00:0a.0 (0000 -> 0002)
ehci_hcd 0000:00:0a.0: EHCI Host Controller
PCI: Setting latency timer of device 0000:00:0a.0 to 64
ehci_hcd 0000:00:0a.0: irq 18, pci mem c0000300
ehci_hcd 0000:00:0a.0: new USB bus registered, assigned bus number 1
PCI: cache line size of 32 is not supported by device 0000:00:0a.0
ehci_hcd 0000:00:0a.0: USB f.f enabled, EHCI 1.00, driver 2004-May-10
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 2 ports detected
ohci_hcd: 2004 Feb 02 USB 1.1 'Open' Host Controller (OHCI) Driver (PCI)
ohci_hcd: block sizes: ed 64 td 64
PCI: Enabling device 0000:00:09.0 (0000 -> 0002)
ohci_hcd 0000:00:09.0: OHCI Host Controller
PCI: Setting latency timer of device 0000:00:09.0 to 64
ohci_hcd 0000:00:09.0: irq 13, pci mem c0001400
ohci_hcd 0000:00:09.0: new USB bus registered, assigned bus number 2
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 2 ports detected
usbcore: registered new driver usblp
drivers/usb/class/usblp.c: v0.13: USB Printer Device Class driver
brcmboard: brcm_board_init entry
SES: Button Interrupt 0x3 is enabled
SES: LED GPIO 0x801d is enabled
Serial: BCM63XX driver $Revision: 3.00 $
ttyS0 at MMIO 0xfffe0100 (irq = 10) is a BCM63XX
ttyS1 at MMIO 0xfffe0120 (irq = 11) is a BCM63XX
NET: Registered protocol family 2
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 2048 bind 4096)
Initializing IPsec netlink socket
NET: Registered protocol family 1
NET: Registered protocol family 17
NET: Registered protocol family 15
Ebtables v2.0 registered
NET: Registered protocol family 8
NET: Registered protocol family 20
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 72k freed
init started:BusyBox v1.00 (2008.01.09-22:25+0000) multi-call binary
Algorithmics/MIPS FPU Emulator v1.5
BusyBox v1.00 (2008.01.09-22:25+0000) Built-in shell (msh)
Enter 'help' for a list of built-in commands.
Loading drivers and kernel modules...
atmapi: module license 'Proprietary' taints kernel.
adsl: adsl_init entry
blaadd: blaa_detect entry
Broadcom BCMPROCFS v1.0 initialized
Broadcom BCM6358A1 Ethernet Network Device v0.3 Jan9 2008 16:06:15
Config Ethernet Switch Through MDIO Pseudo PHY Interface
dgasp: kerSysRegisterDyingGaspHandler: eth0 registered
eth0: MAC Address: 00:74:04:01:42:17
PCI: Setting latency timer of device 0000:00:01.0 to 64
PCI: Enabling device 0000:00:01.0 (0004 -> 0006)
wl: srom not detected, using main memory mapped srom info (wombo board)
wl0: wlc_attach: use mac addr from the system pool by id: 0x776c0000
wl0: MAC Address: 00:74:04:01:42:18
wl0: Broadcom BCM4318 802.11 Wireless Controller 4.150.10.5.cpe2.0
dgasp: kerSysRegisterDyingGaspHandler: wl0 registered
eth0 Link UP.
BcmAdsl_Initialize=0xC00603C8, g_pFnNotifyCallback=0xC0079314
AnnexCParam=0x7FFF7EB8 AnnexAParam=0x00000980 adsl2=0x00000000
pSdramPHY=0xA1FFFFF8, 0x5B2B6 0xDEADBEEF
AdslCoreHwReset: AdslOemDataAddr = 0xA1FFBB64
AnnexCParam=0x7FFF7EB8 AnnexAParam=0x00000980 adsl2=0x00000000
dgasp: kerSysRegisterDyingGaspHandler: dsl0 registered
ATM proc init !!!
ip_tables: (C) 2000-2002 Netfilter core team
ip_conntrack version 2.1 (253 buckets, 0 max) - 376 bytes per conntrack
ip_conntrack_pptp version 2.1 loaded
ip_nat_pptp version 2.0 loaded
ip_ct_h323: init success
ip_nat_h323: init success
insmod: cannot open module `/lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/broad
com/ip_conntrack_ipsec.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/broad
com/ip_nat_ipsec.ko': No such file or directory
BRCM NAT Caching v0.1 Jul3 2007 10:16:19
BRCM NAT Cache: Hooking hit function @ c0051c48
ip_conntrack_rtsp v0.01 loading
ip_nat_rtsp v0.01 loading
==> Bcm963xx Software Version: 1615_010908-3.10L.02.A2pB023k.d20h <==
device eth0 entered promiscuous mode
br0: port 1(eth0) entering learning state
br0: topology change detected, propagating
br0: port 1(eth0) entering forwarding state
Setting SSID "USR9113_SES_39037"
Setting country code using abbreviation: "ALL"
wlctl: Not Found
wlctl: Not Found
wlctl: Not Found
KLOB extended to 2 pools
device wl0 entered promiscuous mode
br0: port 2(wl0) entering learning state
br0: topology change detected, propagating
br0: port 2(wl0) entering forwarding state
BcmRfc2684_init interface is not up nas_0_0_35!
pvc2684ctl -a -v 0.0.35 -f &
pvc2684d: Interface "nas_0_0_35" created sucessfully
pvc2684d: Communicating over ATM 0.0.35, encapsulation: LLC
device nas_0_0_35 entered promiscuous mode
br0: port 3(nas_0_0_35) entering learning state
br0: topology change detected, propagating
br0: port 3(nas_0_0_35) entering forwarding state
wlSesEnable=1 ,wlSesEvent=2, wlSesStates=02:01
echo wlSesClEnable=1 ,wlSesClEvent=0
License key is empty
CGI: License key is invalid
SES: SES_EVTO_CONFIGURED: status=-1
eth0 Link DOWN.
br0: port 1(eth0) entering disabled state
sntp: host not found
br0: port 1(eth0) entering disabled state
eth0 Link UP.
br0: port 1(eth0) entering learning state
br0: topology change detected, propagating
br0: port 1(eth0) entering forwarding state
相关截图
破解后存在的一些BUG介绍
1、电源指示灯不亮，Internet灯变成了DSL灯，DSL灯不亮等显示灯错位，四个lan口均可使用（灯也正常显示），不影响正常使用；2、该版本未发现upnp功能。
比dlink的版本有所改善的就是支持了打印机共享功能，usb接口正常了。
刷新这个版本比刷新dlink的版本更为复杂，网上的版本无法直接用于刷新，同时刷新必须需要用到ttl的数据线。 灯是否正常 顶y版,以后又多了个新的选择 只有看的份(touxiang: 忘了问下y版,这种机器人的是不是和2740一样flash小到4m啊 原帖由 ttggyy 于 2008-11-10 20:45 发表 https://www.chinadsl.net/images/common/back.gif
忘了问下y版,这种机器人的是不是和2740一样flash小到4m啊
本身flash就是16m的，至于用多少容量是另外一回事！原设备也用不了16m 原帖由 YES东 于 2008-11-10 20:11 发表 https://www.chinadsl.net/images/common/back.gif
1、电源指示灯不亮，Internet灯变成了DSL灯，DSL灯不亮等显示灯错位，四个lan口均可使用（灯也正常显示），不影响正常使用；
2、该版本未发现upnp功能。
比dlink的版本有所改善的就是支持了打印机共享功能，us ...
东哥，不对吧，UPNP功能我记的是有的。因为这个功能是最基本的功能了。
你在仔细看看啊。 不应该没有upnp吧，楼上的大侠和楼主公布一下刷新方法吧，我当小白