查看: 23163|回复: 16

华为EC1308IPTV机顶盒并机的可能

[复制链接]
发表于 2010-1-20 22:14:23 | 显示全部楼层 |阅读模式
本帖最后由 synge 于 2010-1-20 14:26 编辑
3 H" |: O* s$ U9 s9 M7 {% {
( O+ r% r9 p" ~( Z  z通过TTL线取得以下的登录信息:
  I0 B" }* H% a% D$ g1 @U-Boot 1.1.4 (Jul 16 2008 - 06:13:29)
8 l# C: |: Q  V5 F' Y0 EU-Boot code: F0500000 -> F0521EA0  BSS: -> F052909C
9 K6 f, A/ ~% X: qHI_VERSION=U_BOOT_1_1_4-M02C0405B0205B0303 @Hi3560v100_OSDrv_1_0_0_2 2008-04-19 11:08:395 C) t4 [) R: i6 k% ]% a
RAM Configuration:
) J* x9 \! S# U! z9 _+ B, OBank #0: f0000000 128 MB
0 [( K+ Y. c( A5 H! n& UFlash: 16 MB7 b3 k; K# |* t; m1 ?
In:    serial
- K% @/ \5 ?$ U+ @4 ROut:   serial8 `7 C  h' A* a( K$ x* W% F. x
Err:   serial' q/ n  D6 s, j0 R) C# [. U- {
MAC:   00-07-63-xx-xx-xx  (隐去)' g$ [& k6 t0 L3 F* S! d4 ]
----------sw_show_logo------------2 V5 }$ e& W5 {% u9 I8 J8 r
sw_flashlogo_init return 0  D* t6 m- Z' P* J4 n  O) e
buf=GIF
- h0 v) e0 S7 ^( D- r8 p, Fsw_gif_decode wieth:720 height:576
* g6 q% ~! i& H1 }9 X  _% L! uPress SPACE to abort autoboot in 1 seconds+ Y) K8 C7 k4 M
hilinux # 2 S% m, Z  c. y
按空格键,进入U-boot的loader状态,输入help得到如下信息:2 k& u1 e; c& b* |* Q6 e4 d
?       - alias for 'help'
% M& B5 ~' \, M- A0 c. `" ubase    - print or set address offset
& w" R( P- H* Q' {" j0 p( Ybdinfo  - print Board Info structure5 {- j+ p6 v4 m6 d
bootf   - boot application image from memory
1 _& k2 }3 D$ bbootm   - boot application image from memory
6 U5 S- P4 U- ]- |9 ^* Bbootp   - boot image via network using BootP/TFTP protocol
. }8 V$ K7 b  bcmp     - memory compare( x; P" ~- g/ G4 e, H  {# c
cp      - memory copy
- ^4 s: H* J5 }1 z5 E! zcrc32   - checksum calculation7 C& ^. }, t' Z
dhcp    - invoke DHCP client to obtain IP/boot params
4 L9 W8 J9 x$ u3 y' V, K8 v8 Oecho    - echo args to console2 O' k1 ~, S$ `% ]
erase   - erase FLASH memory
2 K2 F/ D' g+ A) j+ dflinfo  - print FLASH memory information* g  K/ X4 X6 [1 K
go      - start application at address 'addr'% s* H. [; a3 y$ _: T  T; C
help    - print online help, Z0 X, r) F& M4 I. h) g
loadb   - load binary file over serial line (kermit mode)' y2 n8 G; G9 R- B8 R6 l  X
loop    - infinite loop on address range
0 h- I0 G0 N$ e! U1 Rmd      - memory display
& \3 x7 y- o6 y5 Cmm      - memory modify (auto-incrementing); a& ]5 I, x2 ?  A. e3 n
mtest   - simple RAM test- W: l4 @1 z# }3 B& Q8 y: t1 g
mw      - memory write (fill)
& |8 l" x# Y( N) s, |& Anm      - memory modify (constant address)$ [( v2 P5 i6 \- c) s& O
ping    - send ICMP ECHO_REQUEST to network host
9 X# l# v) l0 g8 {+ Gprintenv- print environment variables
1 ]5 P6 b. v1 J- i8 V8 c! ~protect - enable or disable FLASH write protection
% n) u, ^" r, ?/ K" d- I4 ]rarpboot- boot image via network using RARP/TFTP protocol
& \; x/ T: F1 S$ rreset   - Perform RESET of the CPU7 |& S& I9 P) A- j
saveenv - save environment variables to persistent storage
0 X( K& {7 z3 b3 c8 K: t4 Dsetenv  - set environment variables
* c9 }: K: f2 u0 R9 K+ vsw_e2prom_test   - test e2prom through i2c
8 H- g. j  N" i' U- u) L# Ksw_reg_read16    - read 32 bits registers( T# y9 H2 u5 \  ~9 w
sw_reg_read32    - read 32 bits registers
4 U! A$ B6 r# U$ j" x) I4 jsw_reg_write16   - read 16 bits registers! v6 F5 q6 ~' K& I- I+ m) V, X
sw_reg_write32   - read 16 bits registers: @$ J' ~) r6 D
swupdate        - download or upload one partition (loader,app,boot) via network using TFTP protocol
0 i$ g' ?0 V) N' ~: m/ tswupdate_serial   - load binary file over serial way
# f; d' ^, J' \tftp    - download or upload image via network using TFTP protocol; b9 s7 x! Z8 E# G' |# C
version - print monitor version- \% O6 V: b8 y# g/ x; l( {  ?3 A- R
hilinux #
1 I3 F' X; _( ]9 _通过setenv修改为一个有登录权限的mac地址,但正常boot机后就变为标签纸的MAC地址了
 楼主| 发表于 2010-1-20 22:15:46 | 显示全部楼层
本帖最后由 synge 于 2010-1-20 14:24 编辑
2 q3 U# B  \) D' R- x1 \# L) `9 y! ^2 P! Q& t2 p$ B* F
正常boot机后的信息:  U& r5 z+ L/ @
U-Boot 1.1.4 (Jul 16 2008 - 06:13:29)' l5 V* F2 V/ b, i" z
U-Boot code: F0500000 -> F0521EA0  BSS: -> F052909C( z) E6 t5 G) Y. m" _- i' j! V
HI_VERSION=U_BOOT_1_1_4-M02C0405B0205B0303 @Hi3560v100_OSDrv_1_0_0_2 2008-04-19 11:08:39
, X0 q7 B" p& o5 \+ SRAM Configuration:
; Q# m4 n# V$ F3 NBank #0: f0000000 128 MB
& G0 }% f/ `: g" BFlash: 16 MB$ @8 g- H$ |" [- p# X
In:    serial
' n! O1 Y" E* y2 p* OOut:   serial
7 R1 [* `( E/ ]0 O' @( J& mErr:   serial
  b2 z; o7 M8 J6 @3 h; oMAC:   00-07-63-xx-xx-xx (隐去)
% H( c+ f8 \) ~, x% I& ~
----------sw_show_logo------------  T2 Z# ]0 Q: J" d2 }1 n+ z6 E
sw_flashlogo_init return 0$ z; h4 \! W& [
buf=GIF' J& \6 C  f3 I8 p8 x
sw_gif_decode wieth:720 height:576
4 a) D, S' t4 c8 D3 B, kPress SPACE to abort autoboot in 1 seconds
3 u5 D3 n% i* s; a* qHisilicon I2C Driver Init Start.: A: H; f8 V1 ]2 g8 W3 T9 C
Read E2PROM ldrVersion = 1020007 ,ret=0
& C/ {6 B$ j. }6 _( `Read E2PROM loader information OK: version=1020007
: y! G2 A( O- Q, I' o5 C1 gRead E2PROM offset = 0,ret=0" S8 A) _! X: C6 {8 E' D4 H
Read E2PROM offset = 20,ret=0
" _: M. {3 A+ b4 d  e7 BRead E2PROM offset = 40,ret=0
2 q) M8 @* x, r: u3 rRead E2PROM offset = 60,ret=0
) Z$ n# n8 P& X% r6 v0 |8 E9 T' x, ~Read E2PROM offset = 80,ret=0# \4 d4 m+ @3 _! J0 I: @7 O
Read E2PROM offset = a0,ret=0# a4 c0 u5 r* D( O/ d" U
Read E2PROM offset = c0,ret=0
6 |8 {- C* q& b* fRead E2PROM offset = e0,ret=0
  Z/ y/ s4 j* k! U; d8 i, eRead E2PROM offset = 100,ret=0
5 r# S" Y% u& hRead E2PROM offset = 120,ret=02 T% V% A$ s: `  F1 K0 X% @! \6 s
Read E2PROM offset = 140,ret=0. q: r' s4 U$ Y
Read E2PROM offset = 160,ret=0; ^# s! m8 `# e  d
Read E2PROM offset = 180,ret=0
! d* u3 {# c3 n9 \Read E2PROM offset = 1a0,ret=0
: \/ i# t5 ~& ^- B9 g, tRead E2PROM offset = 1c0,ret=0  i# Z) h% _5 ?/ Q# X
Read E2PROM Partition information  OK epprom_init_flag = 1108040 , flag  = 1108040 , bInvalid=0! j% v2 [$ \/ k4 [3 z- K9 O$ S8 `" }6 v
Boot flag : 0
( P+ i4 V0 D2 z+ d! X1 e1 R/ z! ?## Booting image at f0008000 ...
! u/ N5 O, n7 w! D% y, [AddMemSizeToOption tmem=128M/ d) r; S6 f0 r2 P% r
MAC Address:00:07:63:xx:xx:xx(隐去)
8 o5 G1 x! J* |4 \MAC Address2:01:08:64:xx:xx:xx(隐去)
7 I5 E9 _+ w: f1 D5 [. v  UStarting kernel .... V, F4 |$ r. d0 a
Linux version 2.6.14-hi3560v100-pilot-test-pa-release (ubuntu@ubuntu-desktop) (gcc version 3.4.3 (release) (CodeSourcery ARM Q3cvs 2004)) #16 Fri Jan 16 11:24:45 CST 2009
+ L: f3 `! y/ pCPU: ARM926EJ-Sid(wb) [41069265] revision 5 (ARMv5TEJ)( ^5 z* P( Q  L$ Z; y
Machine: Hi3560v1007 y$ s) M9 E& M4 D5 V4 ~0 G  l' k. N
Memory policy: ECC disabled, Data cache writeback
5 v, \! N1 s# \/ Z" v% ~' bCPU0: D VIVT write-back cache
6 N) S# |- v9 {1 d: nCPU0: I cache: 16384 bytes, associativity 4, 32 byte lines, 128 sets
. ?2 f- H# c# J, Z5 @+ KCPU0: D cache: 16384 bytes, associativity 4, 32 byte lines, 128 sets, f: \' U% a& u* m" y6 o
Built 1 zonelists3 Q8 o# T0 f! j9 P+ y
Kernel command line: mem=64M console=ttyAMA0,115200 root=/dev/mtdblock/2 rootfstype=cramfs rw mmz=ddr,2,0xF40M,64M  fes=128 partitions=v2&0:0:256&1:0:16&2:16:64&3:80:64&4:144:64&5:208:8&10:238:4&7:218:2&8:220:2&9:222:16&6:216:2&11:242:14 tmùþ=128M appstatus=1 macd( N- E2 [2 i# J
PID hash table entries: 512 (order: 9, 8192 bytes)
% K8 Y/ o, U* Q7 g) ?6 zConsole: colour dummy device 80x301 i) U' _$ h9 l+ L3 i, k! K
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
& H0 b* m5 g4 c& p2 o4 G; CInode-cache hash table entries: 8192 (order: 3, 32768 bytes)
% _6 a- F9 f9 U0 K4 y% m* r& E1 xMemory: 80MB = 80MB total, @7 ^; z: O1 j8 R' k; b/ T
Memory: 78976KB available (1679K code, 350K data, 84K init)
$ c7 S/ ?. ~1 \Mount-cache hash table entries: 512, }( t8 \2 t+ ^& u# I$ s
HI_VERSION=LINUX_2_6_14-M04C0404B0202 @Hi3560v100_OSDrv_1_0_0_2 2008-07-22 16:23:20
0 O3 J7 l/ ]/ b# t$ g* z& l6 yCPU: Testing write buffer coherency: ok. g3 Z" c* m+ G
NET: Registered protocol family 16" j% v& j+ [- ?+ j! k
Hisilicon clock system V0.019 S8 L; B9 O  r3 I0 h1 Z$ y2 w
NetWinder Floating Point Emulator V0.97 (double precision)
1 M, g. Y9 E5 Wyaffs Jan 13 2009 12:02:45 Installing. 1 S# D; g% u9 ~4 F
devfs: 2004-01-31 Richard Gooch (rgooch@atnf.csiro.au)
! Q" Z5 I$ J7 k5 Jdevfs: boot_options: 0x0
8 j& ]* Y- C% e+ rJFFS2 version 2.2. (NAND) (C) 2001-2003 Red Hat, Inc.* L5 y% V' `3 ^- L6 B; Q# ?
Initializing Cryptographic API4 i+ a' C% |1 c- Q( J
Serial: AMBA PL011 UART driver
7 K& p. R- O7 E, ?% y, bttyAMA0 at MMIO 0x101f1000 (irq = 12) is a AMBA/PL011" N! `/ S0 J$ R! ]! {: j" a7 H
ttyAMA1 at MMIO 0x101f2000 (irq = 13) is a AMBA/PL0118 H4 `1 f6 j( T* `7 P7 I  Z
io scheduler noop registered" Y1 T6 k/ W0 l
RAMDISK driver initialized: 4 RAM disks of 8192K size 1024 blocksize1 y- p' d8 ?9 F' Y7 k  K
physmap flash device: 1000000 at 340000002 x# E7 U6 {4 \6 ~$ h
phys_mapped_flash: Found 1 x16 devices at 0x0 in 16-bit bank
* q* l: R) E/ J9 H9 c Amd/Fujitsu Extended Query Table at 0x0040+ ~* ^  F6 i( L: p; V
phys_mapped_flash: CFI does not contain boot bank location. Assuming top.- g4 ^0 Y  V7 q- m4 W
number of CFI chips: 13 n- h' A  y* P
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
, M4 E, s# S9 l9 j: \ partition name: whole; partition offset: 0; partition size: 16777216
% \% |- c) r* q0 j: m partition name: loader; partition offset: 0; partition size: 1048576. }4 b, v+ N8 `* Q7 ]0 H
partition name: boot1; partition offset: 1048576; partition size: 4194304, R5 K: L6 ]& }* ?3 B
partition name: boot2; partition offset: 5242880; partition size: 4194304
3 C3 t+ p- X1 }7 Q partition name: app; partition offset: 9437184; partition size: 41943043 Z$ B( n1 f# N) A8 `
partition name: setting; partition offset: 13631488; partition size: 524288* o: \! r; O* f2 V4 W* @
partition name: playlist; partition offset: 15597568; partition size: 262144
6 h  L! J4 p3 |. i! U5 e partition name: param1; partition offset: 14286848; partition size: 1310726 ^& y5 r7 l0 p
partition name: param2; partition offset: 14417920; partition size: 131072$ s3 l/ z: X4 d/ x9 @, m3 y2 v
partition name: font; partition offset: 14548992; partition size: 1048576
+ \1 t+ m: A! ?3 l; {8 V partition name: logo; partition offset: 14155776; partition size: 131072
) s; y9 q0 Z% n1 b2 |; p0 L% r3 h partition name: swfs; partition offset: 15859712; partition size: 917504, ?7 D3 x( g; C
12 cmdlinepart partitions found on MTD device phys_mapped_flash
+ a/ p- ]4 n7 e0 i* [Creating 12 MTD partitions on "phys_mapped_flash":3 @# w0 X& i: D5 L: k; }
0x00000000-0x01000000 : "whole"7 @1 W! s2 O1 P5 y( n
0x00000000-0x00100000 : "loader"
; j; a; ^3 D  ~. l1 r6 b0x00100000-0x00500000 : "boot1". X9 j# h% Y2 ^6 ^' g- F1 K
0x00500000-0x00900000 : "boot2"" `* S" i4 c; T9 B1 t$ O
0x00900000-0x00d00000 : "app"3 o/ M9 j# L1 f8 D6 H$ r9 R8 j- z
0x00d00000-0x00d80000 : "setting"
6 e: w  `4 m) j/ @2 Q8 |6 t0x00ee0000-0x00f20000 : "playlist") y$ s" |4 J8 K. N
0x00da0000-0x00dc0000 : "param1"
3 ~) O6 G; |: y7 I0x00dc0000-0x00de0000 : "param2"6 _! Q! N2 v9 U. J- U1 D- m
0x00de0000-0x00ee0000 : "font"
* D! K* a3 r3 _+ H9 a4 v. G0x00d80000-0x00da0000 : "logo"
0 O! D% a) A. b7 A% p8 N' y- I, J0x00f20000-0x01000000 : "swfs"
: V2 ?* Z) s! _7 \% `8 g" U& c8 r  |HISI_NAND-MDC040003B040002 @Hi3560v100_OSDrv_1_0_0_2 2008-07-22 16:30:32
# `  V9 y' @7 k( h/ P5 TNo NAND device found!!!
! H  f" F; u) R4 g5 X$ Ldrivers/mtd/nand/hisilicon/hisilicon_nand.c,1069.
3 _' n( c, L  V/ {! i& G! _NET: Registered protocol family 2- ?; a6 [1 p# I; Q
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)9 z! m2 n. T9 \$ |) I( o: @
TCP established hash table entries: 4096 (order: 2, 16384 bytes)+ d4 Q8 c$ a; P/ q& e- R; u% ?
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
2 X$ N# j! @6 s+ ^, \8 X3 b$ gTCP: Hash tables configured (established 4096 bind 4096)1 q& y$ ~, U3 K4 j' b
TCP reno registered+ W* r! r5 b! B6 ?- \
TCP bic registered
3 A7 j4 A, v' b: w+ H$ P  {VFS: Mounted root (cramfs filesystem) readonly.$ F; [: }0 k& s
Freeing init memory: 84K
" N: G4 k/ m1 S. V' u# ^' Ninit started:  BusyBox v1.1.2 (2008.05.17-09:17+0000) multi-call binary! k# C4 Q6 A  |" ^
vm.overcommit_memory = 2( S. D4 }% [) H0 i" G
vm.overcommit_ratio = 100- K% T# @/ p( |/ O$ T  U
            _ _ _ _ _ _ _ _ _ _ _ _: M$ S0 ~4 G# }" @$ N
            \  _  _   _  _ _ ___
7 t0 K: ^9 u5 u$ A# \            / /__/ \ |_/$ v% F5 l2 A, `' o3 z
           / __   /  -  _ ___
+ F$ T3 Z) S9 P          / /  / /  / /1 b+ V% Z$ D6 c
  _ _ _ _/ /  /  \_/  \_ ______8 H' ?) f- |1 O5 v  d; ^
___________\___\__________________
8 I5 ?8 B5 n' D2 P* iChecking for boardip ...
: Q9 F" t  }$ X: H1 iapp  is ok- y- s# U$ _- H( X# E- p
app  is nor flash mount mtdblock
; g( c' c3 M3 z: ~/ V( w( ssetting  is nor flash mount mtdblock7 ^# o$ \" A: a; ~4 u: C
rmmod: hifb: No such file or directory
8 \5 t1 S2 u7 Y0 Q6 B/ krmmod: fb: No such file or directory( v9 c2 R* k+ B! u: U  L
rmmod: hi3560: No such file or directory1 u, w! i. b6 d. O: N5 J7 M# R
rmmod: tde: No such file or directory
: G# p( z1 n3 P/ {rmmod: hiether: No such file or directory
1 M! e- d; L6 `+ Q0 e2 d1 Vrmmod: hidmac: No such file or directory
& u( |5 E# `0 ?3 srmmod: mmz: No such file or directory
; R" N. w& [& c- e0 o( o) ?Hisilicon Media Memory Zone Manager
' Q' C1 l& B* z# R$ [$ ^HISI_DMAC-MDC040003 @Hi3560v100_OSDrv_1_0_0_2 2008-10-17 16:22:16- T6 Z$ k, i; T6 ~1 U0 \7 d
NETDRV_ETHV100-M03C04DB0201 @Hi3560v100_OSDrv_1_0_0_2 2008-10-17 16:22:21% `7 x- E% u. d. ^; {9 o
hiir: init ok. ver=Oct 17 2008, 16:33:02.
$ J, s+ _7 A; b2 C4 XHISI_I2C-MDC040002 @Hi3560v100_OSDrv_1_0_0_2 2008-10-17 16:22:42% j7 \# L! ^, }2 m! C
tde: module license 'Copyright(c)' taints kernel.
9 _$ ?- |/ M3 c# G' x# HTDE_MAIN_VERSION[v1.0.0.1] Build Time[Oct 17 2008, 16:35:29]; q1 Y! M* i- }: k/ j5 i
TDE_ADP_VERSION[hi3560 adp v1.0.0.3] Build Time[Oct 17 2008, 16:35:29]
) i- _4 {) K5 rDRV356X_init
" v# m3 l+ H% ?8 }; A% H- [9 PHisilicon UMAP device driver interface: v1.00
6 Y8 j" U( N; k6 HThe Vou Clk Freq is 270
) L9 V0 D# u7 K7 ~DRV356X_init ok8 e2 A" _. k- h3 b) X# _
hifb info: HIFB_MAIN_VERSION[HIFB_MAIN_VERSION] Build Time[Oct 17 2008, 16:35:31]! S8 P$ }) e# k/ J5 _3 E
hifb info: video:vram0_size:13271040,vram1_size:10485760
$ I9 h( e& ^- g. \* Nhifb info: succeed in registering the fb0: ovl0 frame buffer device
" S* l6 \8 ]7 {; R/ T, Thifb info: succeed in registering the fb1: ovl1 frame buffer device
9 ^+ I/ t4 H7 _; d+ B8 bNET: Registered protocol family 17" W6 L5 d2 k" U3 N+ |  K0 P
NET: Registered protocol family 1
% e# n; f: g- l# s& [( DCSLIP: code copyright 1989 Regents of the University of California
! r  p, m/ D8 O8 @; ^5 U4 b. \8 [PPP generic driver version 2.4.2# y( R* s) d1 u; Y; E
NET: Registered protocol family 241 }7 U/ D- T. d2 e- C4 G. F  V: ]% Z
SCSI subsystem initialized" B1 u. g3 @5 q
usbcore: registered new driver usbfs) V9 d$ M3 c* O/ {( X
usbcore: registered new driver hub
" O+ ~& H2 @  l" b( r& k9 wInitializing USB Mass Storage driver...
' x! Q' Q% \( Q$ Susbcore: registered new driver usb-storage9 f. N. r/ `. y( m" f5 E
USB Mass Storage support registered.9 f: H4 h: `/ k  m( @" b
ctrlpipe_nak_limit=3, bulkpipe_nak_limit=3
/ X. g# z$ m' bhiusb-hcd hiusb-hcd.0: Hisilicon USB host controller' D- t% _1 ~& C1 `2 N
hiusb-hcd hiusb-hcd.0: new USB bus registered, assigned bus number 1* N$ N( c: i) v' R! U1 H. q
hiusb-hcd hiusb-hcd.0: irq 23, io base 0x80090000" ]6 p! W; a) `! b5 q$ f
hub 1-0:1.0: USB hub found
- |/ E! V2 j8 Khub 1-0:1.0: 1 port detected
! T( h) f) L) X% g, P0 @hiusb:hiusb_hcd_handle_status_intr:732: vbus error has detected." V( ^4 s# r) l/ m. |* B3 ~
hiusb:hiusb_hcd_hw_status_check:1641: hw abnormal, devctl=0x90, f, L& j6 ~6 ?5 p( w/ L
usbcore: registered new driver rt73$ V! a6 A- l$ y( W( u
Get address=0x10120600, new value=0x18100800!
: K/ X: R( o2 aGet address=0x10120604, new value=0x38302820!
8 M) T' {% T$ b" oGet address=0x10120608, new value=0x58504840!
% i$ M* V% ^9 s/ N0 Y  |Get address=0x1012060c, new value=0x78706860!
$ b' K( R" d" UGet address=0x10120610, new value=0x98918980!" z- s' K+ U/ o6 V1 o: s3 h7 R  k
Get address=0x10120614, new value=0xb8b0a8a0!
2 q, y; b8 q; Y' b3 OGet address=0x10120618, new value=0xd8d0c8c0!
$ J! F9 k6 A# C1 [6 yGet address=0x1012061c, new value=0xf8f0e8e0!
: N$ G/ }3 S1 H) x, D3 n5 |& LGet address=0x10120620, new value=0xff!( e4 N% l% b2 j" a
Get address=0x10120700, new value=0x18100800!
! s3 ?/ G0 [8 z+ T4 tGet address=0x10120704, new value=0x38302820!
: d6 X! Q+ K6 }' q) KGet address=0x10120708, new value=0x58504840!. h8 h6 w. U7 {% r, n! M
Get address=0x1012070c, new value=0x78706860!  ?1 n' U. Z. a+ {! w1 D5 N  W( u; A
Get address=0x10120710, new value=0x98918980!: k1 g) {" c7 z8 Q  R& @# e
Get address=0x10120714, new value=0xb8b0a8a0!3 ?, ?/ W; Q# W% m4 o' H- ]8 b
Get address=0x10120718, new value=0xd8d0c8c0!) T0 W* e7 D, I6 b
Get address=0x1012071c, new value=0xf8f0e8e0!
* I; g  s& z5 QGet address=0x10120720, new value=0xff!$ T# l2 D0 Z: q  q9 p0 u
Get address=0x10120c00, new value=0x18100800!
$ U! o/ p% p: [5 v' Q) mGet address=0x10120c04, new value=0x38302820!
0 D$ K2 f# o, Z+ W, t; k( b" BGet address=0x10120c08, new value=0x58504840!
' n7 W( \: G3 e' S5 AGet address=0x10120c0c, new value=0x78706860!! R1 F' C# h7 z, `! d% n: s
Get address=0x10120c10, new value=0x98918980!8 i5 Q0 H( ~# C
Get address=0x10120c14, new value=0xb8b0a8a0!
2 S# v- v3 _5 f( y, R& c2 z7 D9 lGet address=0x10120c18, new value=0xd8d0c8c0!+ Z5 H4 l2 s3 U4 _, F: o' \. R; S: g  P
Get address=0x10120c1c, new value=0xf8f0e8e0!
( P3 u3 H  Q0 B; W) D. lGet address=0x10120c20, new value=0xff!2 H5 ^$ m+ R/ m. d
Get address=0x10120000, new value=0x8281e000!
0 V* t2 y- O8 l  y[0]sw_mqmc_init listen_port=37001 server_ip=0 server_port=37000
: f% Q9 I* T  K* Y% @0 uOSD_WIDTH:720   OSD_HEIGHT:576  MEM_SIZE:26214400" T7 `5 r6 t- j0 g
Boot version: 8112016
% d- m+ b/ ~; tBuilt at Sep_06_2009__21:21:13- P, M, T% ^1 M7 J/ o% }2 ]4 i
UpdatePtTable 1000000 $ W% K1 }5 z) f5 }% P
[0]Partition loader , 0 , 100000
8 t) P6 X; B& j# K" j. w[0]Partition boot1 , 100000 , 400000 % x5 {$ }9 J7 n- T
[0]Partition boot2 , 500000 , 400000 0 G2 c% p& c5 _' h0 Q2 ^+ a
[0]Partition app , 900000 , 400000 ; |, q# c, }; ~# K2 L: i0 H0 y/ L
[0]Partition setting , d00000 , 80000 6 x5 E* m! Z7 P/ k& @+ [
[0]Partition playlist , ee0000 , 40000
8 A* G. l" [  ~8 I4 a[0]Partition param1 , da0000 , 20000
3 o4 O, ?! Q0 L3 a[0]Partition param2 , dc0000 , 20000 & |. l; [- ~" |8 a5 K, b, w2 r
[0]Partition font , de0000 , 100000 " q* ?, @6 R' X# n4 Z. d! e+ l  C& W
[0]Partition logo , d80000 , 20000 ! x1 ^1 K( Q' i$ \- T7 P6 N
[0]Partition swfs , f20000 , e0000 : C; X. e0 R# {5 n1 Q- a
Init GPIO OK!' V# P9 p" h2 E7 l! v! s
boot_init: mute the audio gpio 27=1 .3 D! X; ]) f7 g
Init screen ...
  [# J* K6 v. U, R7 H.. OK
3 h6 q* Z& \. @) U3 XWrong standard ! using pal
) V) P' o4 ~, r6 Y2 \( c% V' uAAAAA
* l/ D* |4 Y+ P5 u+ rsw_mem_alloc4 K& U) f& t* a( f0 g4 [7 A* i
GIF decode ok
8 N. q+ T3 l7 V9 P% E  g  @sw_server_init open socket sucess 8 !
$ ?7 i( h! y: W" k& Q1 [[1520]Thread-<tHttpServer : 0 : f0b88> opened3 J1 a9 l. q* D; W! u! X: N
[1530]sw_mqmc_stb_client_init linkd=0
  Z  f; T4 h( G- P3 p, y9 |[1530]Thread-<tClientThread : 1 : f0c08> opened! _/ p* c- N9 d6 E
[1530]Thread-<tMonitorThread : 2 : f0c88> opened8 M* H7 G: Q  Z5 B6 A, a
[1570]Thread-<tMonitorDevs : 3 : f0d08> opened
2 l7 C$ ~, o; P- {. Z9 q[1570]0  0x000f0b88 tHttpServer    proc=0xb744     pause=0 ppid=338 pid=341
! ?4 J& h; ?! O[1570]1  0x000f0c08 tClientThread  proc=0xc910     pause=0 ppid=338 pid=342
3 ]6 g# O  K/ k9 y% F  b; c[1570]2  0x000f0c88 tMonitorThread proc=0xae84     pause=0 ppid=338 pid=343/ @9 |1 p: H: `! u; u; M0 G
[1570]3  0x000f0d08 tMonitorDevs   proc=0xafcc     pause=0 ppid=338 pid=344
. z8 u/ @. I  K; o  _[1570]
- w& d; M; Q* {5 V7 N' Cref = 4
4 e9 t( F  ^: S' U! B$ V9 J* G[1630]Thread-<tMonitorThread> exit self
0 L1 Q' K- Z7 f& _0 A% ?; D% Lsw_mem_alloc! }( f0 t8 f% n* g. t/ K
GIF decode ok9 V" G0 d( e7 }' N0 t5 `8 x1 V- z
[sw_parameter_get_int] lValue=1
' S8 C7 U# k3 w: m9 Z0 R! j[value] value=8112016; \& I2 K/ w) ^5 v% P, [/ `8 x
sw_network_set_mac:ifconfig eth0 hw ether 00:07:63:0c:f8:fd8 ^( X1 B) K7 `4 r+ \( I+ t9 K
sw_ir_init->2686 s# E1 k1 @; n4 ?, [- t1 ^. f7 l
sw_ir_set_trans_callback->2483 b( O' I: m' Z
After bsettop_init gpio27:1
5 G# a2 |2 o1 `& t  Q# Q  iboot_init: unmute the audio gpio 27=0 .
$ V# a3 t( _4 \" k- fifconfig eth0 up still continue wait 1  [7 C2 U& z0 i. ^% t  S' T. m
Sunniwell shell,(c) 2007 sunniwell.
* G$ }" q$ H1 R& D* }6 v) i==================================2 j$ P2 g7 u+ ?/ x3 s- L0 y
>ifconfig eth0 up still continue wait 20 c) q* ~& k, M& p  b
ifconfig eth0 up still continue wait 33 G9 ^+ |5 Y3 s: w+ G- ~- Q
ifconfig eth0 up still continue wait 4
" G! a+ A5 L3 c6 i3 P) Kifconfig eth0 up still continue wait 5
1 ^9 F7 p5 x( |' iifconfig eth0 up still continue wait 6) c9 {- k$ \2 ]0 Z
ifconfig eth0 up still continue wait 7" [% F9 q$ ?! N3 E
ifconfig eth0 up still continue wait 8* G  u$ F- F, p/ y6 ~+ L
ifconfig eth0 up still continue wait 9
) {0 v  r; P  o0 l! g8 Z& I, e% tifconfig eth0 up still continue wait 10
5 k% A' y; @: a0 bifconfig eth0 up still continue wait 11) e2 D8 k# b. n1 R5 r5 B
ifconfig eth0 up still continue wait 12; r( a$ Z, ?7 V4 L7 ^
ifconfig eth0 up still continue wait 13: l0 l9 z" f8 f
ifconfig eth0 up still continue wait 14
& t- Z, I  q4 m  a- x. pifconfig eth0 up still continue wait 15' z% q7 ?: `) q2 k* ^7 y" L
ifconfig eth0 up still continue wait 165 t! X! v& g2 d. B
ifconfig eth0 up still continue wait 17
; a& c* c0 j( d- z  ?/ g9 Iifconfig eth0 up still continue wait 18( ]3 d$ a5 Y/ T- I# M# @
ifconfig eth0 up still continue wait 19
8 X7 ]! b( q* w( nifconfig eth0 up still continue wait 20
0 m3 S! ^( r' h; @% r  a- Eifconfig eth0 up still continue wait 21) M! v3 b8 c5 Y
ifconfig eth0 up still continue wait 22; x% l5 \7 k- {
ifconfig eth0 up still continue wait 23
 楼主| 发表于 2010-1-20 22:16:56 | 显示全部楼层
本帖最后由 synge 于 2010-1-20 14:31 编辑
2 Z2 D$ @$ H* u7 O; U8 C
+ K  ?% o) N+ z% F' R联网升级之前还可以使用sh命令进去那个shell,升级之后就不能进去,不过还是能telnet进去的,请高手们想想破解的办法。
, u! s! {$ B$ H, J( J) b- j另外据我观察,估计是还有一个身份识别是标签纸上的序列号码,估计也是识别身份的。
发表于 2010-1-22 20:49:40 | 显示全部楼层
我们这是绑定MAC和MC ID两项
发表于 2010-2-9 08:38:11 | 显示全部楼层
高人,学习了
发表于 2010-3-11 11:19:41 | 显示全部楼层
楼主能否详细介绍进入和修改的方法,最近正为此事烦
 楼主| 发表于 2010-3-16 17:52:37 | 显示全部楼层
拆开机顶盒,有个ttl线的接口,然后连到终端窗口就可以看到上面的信息了!
发表于 2010-6-1 23:45:19 | 显示全部楼层
天数!!!!!
发表于 2010-6-22 13:05:36 | 显示全部楼层
烦请楼主能否介绍修改MAC的详细命令,诚谢!
发表于 2010-6-22 18:50:05 | 显示全部楼层
回复 1# synge
您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

关闭

站长推荐上一条 /1 下一条

相关侵权、举报、投诉及建议等,请发 E-mail:yesdong@qq.com

Powered by Discuz! X5.0 Licensed © 2001-2026 Discuz! Team.44152102000001

在本版发帖QQ客服返回顶部