联通给升级了g7615的fttr,原来的hg6145f就退下来了,这段时间想把它搞一下。
8 X% J$ |9 ]8 B/ G3 D6 O1 ~不过以前没接触过博通方案的路由器,就照着整Linux的方法试了一下 U9 r, Q% u+ P7 u& T- w% A
# y* _1 s2 D+ w4 L7 T( J; o3 g$ ^
首先是mtd,可以看出来有很多个mtd分区,但其实大部分都是虚拟分区,真实的只有rootfsA/B,data,nvram和frameworkA/B4 I$ M& l( p" |0 i' j* w+ k7 p
- dev: size erasesize name
5 o; }. G# ?( |: h* f - mtd0: 04d00000 00020000 "rootfsA"8 u& a+ ] w0 ? o* q* t- s
- mtd1: 04d00000 00020000 "rootfsB"9 S$ J/ j/ K% G$ `0 ? z2 U
- mtd2: 04400000 00020000 "data"! s" V6 W2 h0 a) o; ? r
- mtd3: 00100000 00020000 "nvram"# d! r" ]* C( k2 F7 G* V$ o# ~3 K
- mtd4: 01000000 00020000 "frameworkA"" r2 J/ p; }: L5 E! Z
- mtd5: 01000000 00020000 "frameworkB"" Q' L! i4 R) N X& f
- mtd6: 02435000 0001f000 "rootfs_ubifs"
0 Y0 K/ x, T. \1 d4 ?- r4 [7 u# a - mtd7: 0001f000 0001f000 "METADATA"
" O, h" ^ q" W0 }2 l* T - mtd8: 0001f000 0001f000 "METADATACOPY"
( Q) g# d! |+ a1 z; e - mtd9: 01550000 0001f000 "app_ubifs"+ `: w( u6 M2 m( ]8 K4 S) b- N
- mtd10: 007c0000 0001f000 "felix"
$ W M! F8 D2 I) A: y - mtd11: 00301440 0001f000 "filestruct_full.bin"1 M4 i' {- {% s/ I3 E
- mtd12: 02435000 0001f000 "rootfs_ubifs"* c* y' K" l+ m. [( g1 F& A
- mtd13: 0001f000 0001f000 "METADATA"
3 X7 S* g- @: `" v0 {+ b - mtd14: 0001f000 0001f000 "METADATACOPY". j! u. W0 {7 n H5 e% Z( T& T
- mtd15: 01550000 0001f000 "app_ubifs"
, \- O& e f7 ]4 \0 N" q6 r - mtd16: 007c0000 0001f000 "felix"1 I& [: ~ U+ V3 u% {4 G
- mtd17: 00301496 0001f000 "filestruct_full.bin"% f s9 w3 x0 f3 I$ c/ V
- mtd18: 03032000 0001f000 "Apps"& d1 f9 k7 u0 @ _
- mtd19: 00991000 0001f000 "data"
( B) ~7 W2 F* Z! N6 D* t/ z - mtd20: 00554000 0001f000 "factory"
复制代码 下面是从bootlog里抓的分区表,可以看出来实际分区! V* z! \9 v( k$ t5 U
- >>>>> For primary mtd partition rootfsA, cferam/vmlinux.lz UBI volume, vmlinux fs mounted as UBIFS <<<<<
: V1 e. W. w. \# B* \; | g0 I0 C - Secondary mtd partition rootfsB detected as UBI for cferam/vmlinux source and UBIFS for vmlinux filesystem
4 a; Z j% P/ P: e/ P) g3 L( P - Creating 6 MTD partitions on "brcmnand.0":
* ?; N- k2 U }2 S+ U, A - 0x000000100000-0x000004e00000 : "rootfsA") |2 j, F9 L1 | Q% _3 m
- 0x000004e00000-0x000009b00000 : "rootfsB"
- v, L0 k, X3 x0 p0 B. n" [2 y# I- p - 0x000009b00000-0x00000df00000 : "data"
2 V0 H/ A1 B9 Q2 Z5 h - 0x000000000000-0x000000100000 : "nvram"8 Y) m, d8 a* v* k) p4 c2 r# P+ s
- 0x00000df00000-0x00000ef00000 : "frameworkA"2 X) v* ~! \5 v u$ p0 X9 ~
- 0x00000ef00000-0x00000ff00000 : "frameworkB"
复制代码 不过很奇怪的是,这几个分区已经占了255M了,剩下的1M读出来又全是0xFF,那cfe又在哪里呢?
) i' S, R5 _/ Q' V) k' krootfs是ubi格式,里面有个filestruct_full.bin,里面有内核,不过没见过这个格式,不知道怎么解包, ]9 i* N5 D# j+ T
& z! s! C1 O* d( m! y刚才又看了一下,mtd4 framework分区里面似乎是个openwrt,是lxc格式的,不过似乎没有运行,有人知道该怎么让它运行吗?那样似乎就能当个路由器来用了
+ H" X* m, H" |1 r! R5 n# }4 r# n% {
下面是几个文件; p+ }$ ~. h9 y2 F8 v, Q o
nand_dump.zip
. M0 z/ t- b5 j. w3 P; u# p- cmtd4_frameworkA.tar.gz
3 r( ~- P- i. D) I) P: U" l( [- p4 v
3 l: b! T* l9 i
% d. i. l8 g8 N2 O9 u8 }* Y1 N; i
|