联通给升级了g7615的fttr,原来的hg6145f就退下来了,这段时间想把它搞一下。
+ q; m# c+ |* j3 [6 f+ Z不过以前没接触过博通方案的路由器,就照着整Linux的方法试了一下9 W8 z. o* ]9 S0 n4 H. O
3 o- g+ n: G# n$ \; Y" j
首先是mtd,可以看出来有很多个mtd分区,但其实大部分都是虚拟分区,真实的只有rootfsA/B,data,nvram和frameworkA/B6 P, l+ k% w7 M( `) e
- dev: size erasesize name; ~3 ]! Z* f2 l
- mtd0: 04d00000 00020000 "rootfsA"
( m& }4 @$ w9 I2 V0 S# d) q - mtd1: 04d00000 00020000 "rootfsB"5 Q0 S/ V- `& N/ }
- mtd2: 04400000 00020000 "data"
, K: L5 C4 x% i8 r7 F& @& H - mtd3: 00100000 00020000 "nvram"
. \ }) Z" W, X/ k9 [ \ - mtd4: 01000000 00020000 "frameworkA"
6 n2 J+ K N* A% J3 c+ } - mtd5: 01000000 00020000 "frameworkB"7 W8 ~0 ?+ z8 V1 ]% M
- mtd6: 02435000 0001f000 "rootfs_ubifs"
$ w' S* L1 `' n p8 r+ K } - mtd7: 0001f000 0001f000 "METADATA"
) a1 s$ }- W ~5 j2 g4 ~ - mtd8: 0001f000 0001f000 "METADATACOPY"
+ @! D% x2 ]- L - mtd9: 01550000 0001f000 "app_ubifs"
* S* k. W* h0 [ d* b @. R - mtd10: 007c0000 0001f000 "felix"
' ?& @4 }2 F' F& H6 C - mtd11: 00301440 0001f000 "filestruct_full.bin"8 c* A1 S" ^% P7 r
- mtd12: 02435000 0001f000 "rootfs_ubifs"/ f/ |9 o" e' d9 p, ^# j
- mtd13: 0001f000 0001f000 "METADATA"2 p) u3 L, j1 @6 s/ f, p
- mtd14: 0001f000 0001f000 "METADATACOPY" |2 l: s+ x8 L) F l' b4 `( ^/ G5 y
- mtd15: 01550000 0001f000 "app_ubifs"
* \7 D; R# x0 \( j! i - mtd16: 007c0000 0001f000 "felix"/ Q6 \; `% H/ e* n- n, o
- mtd17: 00301496 0001f000 "filestruct_full.bin") a S( o4 u8 T- j2 h3 c
- mtd18: 03032000 0001f000 "Apps"
4 r; h! w9 Y2 L& h9 l/ J - mtd19: 00991000 0001f000 "data"
; D* u! m) H5 Y- U Y - mtd20: 00554000 0001f000 "factory"
复制代码 下面是从bootlog里抓的分区表,可以看出来实际分区
/ G- p* S' b; h& L/ T& J! Y" M( X- >>>>> For primary mtd partition rootfsA, cferam/vmlinux.lz UBI volume, vmlinux fs mounted as UBIFS <<<<<
( M; K ~4 C) u$ ]7 @2 | - Secondary mtd partition rootfsB detected as UBI for cferam/vmlinux source and UBIFS for vmlinux filesystem
. \: h' @& R: N: R2 W - Creating 6 MTD partitions on "brcmnand.0":% w* w9 g# d4 [6 O U- _ ?5 O
- 0x000000100000-0x000004e00000 : "rootfsA" r1 e+ Z2 t" g$ f2 [/ E) u
- 0x000004e00000-0x000009b00000 : "rootfsB". n: k( P+ {$ |5 w" G
- 0x000009b00000-0x00000df00000 : "data"( ^: K% S; H+ V5 O
- 0x000000000000-0x000000100000 : "nvram"1 h @% G9 r& w; W$ c. k' s9 f; W
- 0x00000df00000-0x00000ef00000 : "frameworkA"( L7 L! @4 F) `- ^# @$ j5 D$ F
- 0x00000ef00000-0x00000ff00000 : "frameworkB"
复制代码 不过很奇怪的是,这几个分区已经占了255M了,剩下的1M读出来又全是0xFF,那cfe又在哪里呢?
. {7 q. K, x7 z# A# D- ~rootfs是ubi格式,里面有个filestruct_full.bin,里面有内核,不过没见过这个格式,不知道怎么解包9 i" E- m; D* l. W( o9 n2 i3 o, h
- F: ]+ E* u9 e% A1 T2 |1 T
刚才又看了一下,mtd4 framework分区里面似乎是个openwrt,是lxc格式的,不过似乎没有运行,有人知道该怎么让它运行吗?那样似乎就能当个路由器来用了
9 `- q6 Z) A" D+ F* I) }( U0 S; U' a4 x3 n- `& V2 X8 l$ {
下面是几个文件
& \: Q7 G. {) S( m. K* nnand_dump.zip+ M8 H: Q$ d/ C
mtd4_frameworkA.tar.gz& `3 S( `' Q1 ~$ U( p" u$ U
: e: E E; e; o+ `# g3 D, z
) {) K# n3 g! F( [- m$ E8 I+ j
|