联通给升级了g7615的fttr,原来的hg6145f就退下来了,这段时间想把它搞一下。
) y/ x, d. ~ o) H. Y# h不过以前没接触过博通方案的路由器,就照着整Linux的方法试了一下
+ R! k( w- G W' e( d" w
" m' p* o" r2 T, l/ P+ y首先是mtd,可以看出来有很多个mtd分区,但其实大部分都是虚拟分区,真实的只有rootfsA/B,data,nvram和frameworkA/B6 c: h& i- ^2 n/ h
- dev: size erasesize name
1 x8 v' q* L4 m, W - mtd0: 04d00000 00020000 "rootfsA"9 P6 ~1 t* G& s* T G
- mtd1: 04d00000 00020000 "rootfsB"
, L j9 B* p5 E. u - mtd2: 04400000 00020000 "data"7 F; D1 E0 }' A5 r! L% t
- mtd3: 00100000 00020000 "nvram"
3 K% w* u% h3 H - mtd4: 01000000 00020000 "frameworkA"4 N5 v! F/ ^6 A5 a0 R
- mtd5: 01000000 00020000 "frameworkB"" z4 x, r( c8 R, [) h6 _% M# H
- mtd6: 02435000 0001f000 "rootfs_ubifs"0 p4 u% N2 I! R& k
- mtd7: 0001f000 0001f000 "METADATA"! ]2 f& k/ h4 z
- mtd8: 0001f000 0001f000 "METADATACOPY"
C c1 v$ F. B' _+ J - mtd9: 01550000 0001f000 "app_ubifs"7 N+ I, w$ @6 ]0 g5 T" m
- mtd10: 007c0000 0001f000 "felix" M/ e/ R) r, L+ w# Q) g
- mtd11: 00301440 0001f000 "filestruct_full.bin"
0 B! y/ E; w5 V; B0 t' _+ K - mtd12: 02435000 0001f000 "rootfs_ubifs"
6 a, A' |" [: G" n' O2 {/ \ - mtd13: 0001f000 0001f000 "METADATA"
$ D. `/ D- c$ j, m$ j - mtd14: 0001f000 0001f000 "METADATACOPY"
+ @) r$ F |' c4 j' x. ~ - mtd15: 01550000 0001f000 "app_ubifs"9 C G% T) `( B$ D
- mtd16: 007c0000 0001f000 "felix") \, @& E' e E& D2 B. h
- mtd17: 00301496 0001f000 "filestruct_full.bin"
' A# l$ M( Z5 @$ L0 C - mtd18: 03032000 0001f000 "Apps" }7 m0 Q0 D- O* o3 J, H
- mtd19: 00991000 0001f000 "data"
; N9 m- h5 ^" t, S - mtd20: 00554000 0001f000 "factory"
复制代码 下面是从bootlog里抓的分区表,可以看出来实际分区
8 \7 M5 b1 R- f5 M7 m- >>>>> For primary mtd partition rootfsA, cferam/vmlinux.lz UBI volume, vmlinux fs mounted as UBIFS <<<<<- L {8 O) ` Q$ e' ~3 [( q
- Secondary mtd partition rootfsB detected as UBI for cferam/vmlinux source and UBIFS for vmlinux filesystem* u. b y/ f/ ]/ z' J
- Creating 6 MTD partitions on "brcmnand.0":; a& W* a+ e3 P/ O
- 0x000000100000-0x000004e00000 : "rootfsA"
3 z( c6 A* \7 O# } - 0x000004e00000-0x000009b00000 : "rootfsB"
0 s# ~; i1 w4 v4 j; a - 0x000009b00000-0x00000df00000 : "data"" S: e8 F5 z' S9 F
- 0x000000000000-0x000000100000 : "nvram"
1 M" x4 p0 m- p3 I& {) V# L* z6 m - 0x00000df00000-0x00000ef00000 : "frameworkA") a9 | z' S# T) k' U
- 0x00000ef00000-0x00000ff00000 : "frameworkB"
复制代码 不过很奇怪的是,这几个分区已经占了255M了,剩下的1M读出来又全是0xFF,那cfe又在哪里呢? G6 G+ D- {! n( L* J
rootfs是ubi格式,里面有个filestruct_full.bin,里面有内核,不过没见过这个格式,不知道怎么解包
3 D# }8 h Q) J) i8 M, f+ d0 y0 }8 Z& y; P2 u
刚才又看了一下,mtd4 framework分区里面似乎是个openwrt,是lxc格式的,不过似乎没有运行,有人知道该怎么让它运行吗?那样似乎就能当个路由器来用了
0 q) y2 \0 @% v2 ]3 }2 H
( [3 m8 Q" A: Y7 ^7 n: a# D下面是几个文件
' B7 {9 p1 ~* Nnand_dump.zip+ X3 e& M* `2 M6 |9 q
mtd4_frameworkA.tar.gz' ?; G ^1 m6 _" ?/ Z
* N: V/ W, z& ?7 s
& K8 I' ?! |7 l5 h) O- x
- K3 ~+ N5 t+ B' d8 Z$ i |