查看: 23362|回复: 16

华为EC1308IPTV机顶盒并机的可能

[复制链接]
发表于 2010-1-20 22:14:23 | 显示全部楼层 |阅读模式
本帖最后由 synge 于 2010-1-20 14:26 编辑 & n7 q1 c3 w* i
1 D8 ~3 Z# s1 r
通过TTL线取得以下的登录信息:* T2 L6 a- D- ?9 Z% n8 c
U-Boot 1.1.4 (Jul 16 2008 - 06:13:29)
0 Z* x$ A9 p& [0 Q' U/ O  [U-Boot code: F0500000 -> F0521EA0  BSS: -> F052909C
9 E: |+ Y0 t( i: w  y/ Q# tHI_VERSION=U_BOOT_1_1_4-M02C0405B0205B0303 @Hi3560v100_OSDrv_1_0_0_2 2008-04-19 11:08:39
8 V$ P, a' E( kRAM Configuration:0 Q6 n/ s/ V9 E7 L# K
Bank #0: f0000000 128 MB3 |6 a+ b5 k9 y1 c( y) M: d3 V% O
Flash: 16 MB6 X. |& M) p. F# U/ O/ B1 P3 x8 `
In:    serial* V& l( d+ `- B1 ^5 S; l
Out:   serial$ R# Y0 ^  u" G- }
Err:   serial
+ T7 \4 X6 S9 n5 y% YMAC:   00-07-63-xx-xx-xx  (隐去)+ H+ W% J% L5 F" m" I
----------sw_show_logo------------
- E' c7 m' i/ ~4 A! s* e# Y4 j" ^sw_flashlogo_init return 0, z) c  _* N; V# L" x  m! n
buf=GIF
1 P0 A" {6 ?% ]8 C: @$ esw_gif_decode wieth:720 height:576
+ t: N4 P" M9 Q( n% ~Press SPACE to abort autoboot in 1 seconds. o2 k- l( A6 L, i( C/ y% Z" ]
hilinux # 1 y% `* M/ S  A/ l
按空格键,进入U-boot的loader状态,输入help得到如下信息:
$ U% v' f5 P2 W" c+ w3 F' K?       - alias for 'help'  G" G9 Z$ k, m4 `
base    - print or set address offset' g: p' C+ F8 P( g2 q7 k4 P2 |
bdinfo  - print Board Info structure3 L( q8 t' D+ H' B9 ?" `
bootf   - boot application image from memory
* W+ O$ i# a- Ibootm   - boot application image from memory
: E; g% q  v. J, p& P" A+ g+ `% Q' kbootp   - boot image via network using BootP/TFTP protocol
' q( b0 c. e2 o0 S/ l( D8 s8 a- ecmp     - memory compare. f, Y5 _' b( W1 N$ a8 F8 e7 I) ^
cp      - memory copy
! o7 [0 l% m- p0 A& P1 q) ccrc32   - checksum calculation
; C2 q3 h- I- jdhcp    - invoke DHCP client to obtain IP/boot params
( n- d$ k/ S" E4 k$ `7 Secho    - echo args to console7 i% o2 _1 Q$ r: `, L8 E. G
erase   - erase FLASH memory* w% x% _- q3 _* P% i# C
flinfo  - print FLASH memory information. P& W; d. w2 D5 j1 }
go      - start application at address 'addr'0 L$ q8 I" |  M1 O. q
help    - print online help
7 L1 k1 x$ u- k1 D" Q. Wloadb   - load binary file over serial line (kermit mode)
% E9 @  j7 \3 ~9 W. m0 [( k% Oloop    - infinite loop on address range
6 R# u' s0 Z8 |( k  {md      - memory display
# ]/ U, U; }; H% ]mm      - memory modify (auto-incrementing)
9 o9 ~% G7 m0 t( h1 dmtest   - simple RAM test8 p+ m! M- e6 S% ]- e; x; ~
mw      - memory write (fill)
9 }8 R) l+ T7 t) j% v* mnm      - memory modify (constant address)
1 J. S  C; }. c6 D# X3 J$ Yping    - send ICMP ECHO_REQUEST to network host7 q, @7 k- K/ ~0 u8 Q5 Q5 P
printenv- print environment variables4 X  O$ G0 ?) A8 I7 J# q* l
protect - enable or disable FLASH write protection0 E* ?( ?; v" k' I; k* }  D3 t  f
rarpboot- boot image via network using RARP/TFTP protocol
: |" I. \  @$ i' ~6 Xreset   - Perform RESET of the CPU
5 z2 b2 B- t: Osaveenv - save environment variables to persistent storage9 E- ^2 o" s  v% y& D2 B8 l
setenv  - set environment variables6 {' I5 z7 ?6 q
sw_e2prom_test   - test e2prom through i2c  _5 h9 R5 {( S, ~9 `+ a
sw_reg_read16    - read 32 bits registers
  k- k1 ^: `  B  I* Osw_reg_read32    - read 32 bits registers
9 a+ Z0 `. R( ~, m; f( lsw_reg_write16   - read 16 bits registers# H, F0 a5 [8 J  S* C) U  X( d
sw_reg_write32   - read 16 bits registers9 x# R/ h$ T# t3 p
swupdate        - download or upload one partition (loader,app,boot) via network using TFTP protocol
  X0 a; H! Y& ]" z$ uswupdate_serial   - load binary file over serial way
1 \, G( c3 p" Y9 ?2 r* M9 Ctftp    - download or upload image via network using TFTP protocol
7 h( h; p" O9 U, N1 q0 b. m% bversion - print monitor version
1 q5 d/ ]" N; r0 hhilinux # 4 ]$ j5 z4 u& t
通过setenv修改为一个有登录权限的mac地址,但正常boot机后就变为标签纸的MAC地址了
 楼主| 发表于 2010-1-20 22:15:46 | 显示全部楼层
本帖最后由 synge 于 2010-1-20 14:24 编辑 ! d" N5 o: \! n: s8 ?

% v6 m/ i( X1 g5 m正常boot机后的信息:- s0 M2 R& z. |  \- Y
U-Boot 1.1.4 (Jul 16 2008 - 06:13:29): R+ v# ?2 M8 C0 f
U-Boot code: F0500000 -> F0521EA0  BSS: -> F052909C+ C+ G7 q  }1 s, t: T, I
HI_VERSION=U_BOOT_1_1_4-M02C0405B0205B0303 @Hi3560v100_OSDrv_1_0_0_2 2008-04-19 11:08:39- v8 o* d% u! y/ w; T! J
RAM Configuration:$ E9 c" ?1 ~1 P9 P/ I# x% F
Bank #0: f0000000 128 MB
) m, s$ b4 ~( @% NFlash: 16 MB6 Q1 |" `2 n; k4 \# ?( R' w  Y
In:    serial' w9 c; a8 Q1 `4 l/ a
Out:   serial7 i9 Z4 Y; _  t. d9 P! g+ e
Err:   serial7 b( O$ ], Y' L6 X6 m4 Z8 o
MAC:   00-07-63-xx-xx-xx (隐去)& h  p7 j+ U# ]  O% O: K
----------sw_show_logo------------
* E2 B' ~) ~+ Rsw_flashlogo_init return 0! ^+ V2 `0 o: s, U; [( J; M
buf=GIF
) r8 x* b  k( e2 R" }+ m! Msw_gif_decode wieth:720 height:576+ @! Z+ `3 L" [
Press SPACE to abort autoboot in 1 seconds
5 w3 h7 U; D$ \& F3 S/ }8 H0 eHisilicon I2C Driver Init Start./ P' L9 x. m- y
Read E2PROM ldrVersion = 1020007 ,ret=0
- f' n1 O8 _$ A. `/ L) URead E2PROM loader information OK: version=1020007
5 U0 s" B, H5 \" F  z/ c5 jRead E2PROM offset = 0,ret=0% A0 P* b( M; X) _% Q/ y# S
Read E2PROM offset = 20,ret=0/ R: `; Y7 D# n$ R8 P5 [
Read E2PROM offset = 40,ret=0' N  k% U5 C6 `2 P8 _9 R! _6 y
Read E2PROM offset = 60,ret=0
0 a: _  V) z+ V) b0 ?Read E2PROM offset = 80,ret=07 B* N+ C" U  C) |
Read E2PROM offset = a0,ret=0/ g! o3 P3 f- u* p) `' \% y
Read E2PROM offset = c0,ret=0" \4 K2 ?* P! x+ [# Y4 [4 E+ M8 A
Read E2PROM offset = e0,ret=0+ d' _- V! W6 G  f: l) M
Read E2PROM offset = 100,ret=0
: i; @7 E* n1 [6 TRead E2PROM offset = 120,ret=0
& ]9 r; S/ x! z$ \Read E2PROM offset = 140,ret=0
- l+ j8 u$ ?. WRead E2PROM offset = 160,ret=0
; q% c  p& n1 L6 f8 l; S6 ERead E2PROM offset = 180,ret=0
* Z4 N1 h- o+ y, o) t6 yRead E2PROM offset = 1a0,ret=0
1 Y- n+ o! h# `Read E2PROM offset = 1c0,ret=04 r* j* t( J+ Q, U( |& s" ?
Read E2PROM Partition information  OK epprom_init_flag = 1108040 , flag  = 1108040 , bInvalid=0
2 ]0 @" u0 y7 n, {: F' yBoot flag : 0  |/ W0 K8 x, p
## Booting image at f0008000 ...
- c" A6 J' Z3 c' OAddMemSizeToOption tmem=128M) C" z% x5 Q1 A  _' c  w
MAC Address:00:07:63:xx:xx:xx(隐去)
- x9 q$ _" c  W) j1 W# uMAC Address2:01:08:64:xx:xx:xx(隐去)
' X8 N# C  ]5 t7 @" y7 R3 yStarting kernel ...' `; Y) p" y" m/ ^: Y7 ^
Linux version 2.6.14-hi3560v100-pilot-test-pa-release (ubuntu@ubuntu-desktop) (gcc version 3.4.3 (release) (CodeSourcery ARM Q3cvs 2004)) #16 Fri Jan 16 11:24:45 CST 2009' u6 V8 @8 J! o4 r
CPU: ARM926EJ-Sid(wb) [41069265] revision 5 (ARMv5TEJ)8 ]* o0 t$ C* _/ j; |. D
Machine: Hi3560v100
, U; [# V. o5 RMemory policy: ECC disabled, Data cache writeback
3 Z4 i0 p, D1 P$ N; J- PCPU0: D VIVT write-back cache; w( ]. b# d5 h( h. C1 |
CPU0: I cache: 16384 bytes, associativity 4, 32 byte lines, 128 sets
' I0 n+ I% A0 K' h- B' h5 d  YCPU0: D cache: 16384 bytes, associativity 4, 32 byte lines, 128 sets2 J4 ]! B9 t1 M
Built 1 zonelists
( d1 p/ x) h$ @) E4 P1 w# }1 w1 vKernel command line: mem=64M console=ttyAMA0,115200 root=/dev/mtdblock/2 rootfstype=cramfs rw mmz=ddr,2,0xF40M,64M  fes=128 partitions=v2&0:0:256&1:0:16&2:16:64&3:80:64&4:144:64&5:208:8&10:238:4&7:218:2&8:220:2&9:222:16&6:216:2&11:242:14 tmùþ=128M appstatus=1 macd: y( P* {: |+ {. O* _9 n
PID hash table entries: 512 (order: 9, 8192 bytes)
( p& H. k% Q% q% X  PConsole: colour dummy device 80x30
) x+ S) W! }( j: `Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)0 A0 [3 T( I0 j% a6 ^, `
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
7 l# w' P* E/ Q" e/ @Memory: 80MB = 80MB total8 X9 z# W  B( a! [
Memory: 78976KB available (1679K code, 350K data, 84K init)! X, W: R( a, @7 F: G/ o# ~" r
Mount-cache hash table entries: 512, v, h) w) \9 ~$ ]
HI_VERSION=LINUX_2_6_14-M04C0404B0202 @Hi3560v100_OSDrv_1_0_0_2 2008-07-22 16:23:20
& X6 ?: s9 }& P# M+ OCPU: Testing write buffer coherency: ok
# G6 m. v3 }# U6 i7 zNET: Registered protocol family 16$ E+ w1 S' H3 ?9 g/ ]; i: [. v
Hisilicon clock system V0.015 a2 s+ x3 B& O# k
NetWinder Floating Point Emulator V0.97 (double precision)
& I' ~( P, @0 f6 \yaffs Jan 13 2009 12:02:45 Installing.
: D' I) Z" n" ~* H( |8 Vdevfs: 2004-01-31 Richard Gooch (rgooch@atnf.csiro.au)$ M" C9 H5 ^' N% b7 r& A6 q3 F5 L
devfs: boot_options: 0x0! V* `: R$ k7 e7 }
JFFS2 version 2.2. (NAND) (C) 2001-2003 Red Hat, Inc.
/ H% _# Q+ Y" O( BInitializing Cryptographic API
6 h" W) W2 l" N- ^0 oSerial: AMBA PL011 UART driver8 V6 z& n9 h7 x% R
ttyAMA0 at MMIO 0x101f1000 (irq = 12) is a AMBA/PL011* `! S2 u* n8 [3 p4 r2 e# o5 E$ a
ttyAMA1 at MMIO 0x101f2000 (irq = 13) is a AMBA/PL011
' A  e9 h+ j9 S8 ^% H' d& aio scheduler noop registered; |0 T; S8 f; r% }% o7 b
RAMDISK driver initialized: 4 RAM disks of 8192K size 1024 blocksize
0 J6 F! j5 \/ Mphysmap flash device: 1000000 at 34000000
( s2 _3 v* P* T& o, l! ephys_mapped_flash: Found 1 x16 devices at 0x0 in 16-bit bank9 b6 s# a( {4 Q1 R
Amd/Fujitsu Extended Query Table at 0x0040
& b9 t! X& v% M1 j% r3 _phys_mapped_flash: CFI does not contain boot bank location. Assuming top.
$ m8 g/ X: m- F1 t! |number of CFI chips: 1
: ~+ b% J; Y) `# `- _cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
/ y; s! v; J( y# Z partition name: whole; partition offset: 0; partition size: 16777216( l# K* Z! n& f
partition name: loader; partition offset: 0; partition size: 1048576
1 d# B, n8 Y1 ~3 {5 { partition name: boot1; partition offset: 1048576; partition size: 4194304( s: v! i5 U. ?5 I. d  P
partition name: boot2; partition offset: 5242880; partition size: 4194304
- I; f/ H% g. L3 G7 G2 q partition name: app; partition offset: 9437184; partition size: 41943049 z( U, H9 z4 b. M; {" w! C% V
partition name: setting; partition offset: 13631488; partition size: 524288, K: F& s; l6 W  D% I# y3 j
partition name: playlist; partition offset: 15597568; partition size: 262144" o4 T. \. B0 P
partition name: param1; partition offset: 14286848; partition size: 131072
4 q% }+ Z" t# E1 I& `5 e partition name: param2; partition offset: 14417920; partition size: 131072
2 j& L/ j) _8 ^ partition name: font; partition offset: 14548992; partition size: 1048576& B' g, o3 h: N! Y" O
partition name: logo; partition offset: 14155776; partition size: 131072; b1 v2 t* w2 M" I! z1 n
partition name: swfs; partition offset: 15859712; partition size: 9175040 a! p9 F$ F( v+ n8 s
12 cmdlinepart partitions found on MTD device phys_mapped_flash/ f; [' D9 F4 e6 |3 ~
Creating 12 MTD partitions on "phys_mapped_flash":: t) d0 c# F# i
0x00000000-0x01000000 : "whole"/ ]0 G9 z8 V8 g
0x00000000-0x00100000 : "loader"
) q' \+ R* X- Q2 `; \% Y0x00100000-0x00500000 : "boot1"$ L  Y' Z) V& b* l8 }3 x
0x00500000-0x00900000 : "boot2"
$ ?; h( U( K4 l2 \- t. v0x00900000-0x00d00000 : "app"
- x: V! c( K/ E0 J+ _0x00d00000-0x00d80000 : "setting"
$ n8 o2 l" d# U3 _0x00ee0000-0x00f20000 : "playlist"
/ U% W% r, g, B5 x0 y0x00da0000-0x00dc0000 : "param1": J0 h+ h: v# w- o9 G( C% _% j. P# V
0x00dc0000-0x00de0000 : "param2"
2 E* E# X* T  x9 c& m0x00de0000-0x00ee0000 : "font": w0 o2 r/ `+ V
0x00d80000-0x00da0000 : "logo"
% c3 N: B7 j* I# }0x00f20000-0x01000000 : "swfs"* w* T5 m9 }3 t5 G/ s6 O  s6 {
HISI_NAND-MDC040003B040002 @Hi3560v100_OSDrv_1_0_0_2 2008-07-22 16:30:32
2 v9 W. Y0 g4 J! Y# }* _: ^No NAND device found!!!
9 V" L1 ?3 t' X+ j4 Rdrivers/mtd/nand/hisilicon/hisilicon_nand.c,1069.
4 @( c& L( _. i4 {- pNET: Registered protocol family 2
1 o0 x" t" m( ^; w, [IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
+ `- H+ ]( ?1 p% D6 B' V6 sTCP established hash table entries: 4096 (order: 2, 16384 bytes)- Z3 X; _  @7 I2 s+ g9 B
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)  p5 [# V+ m" d3 e& @& e( b) h
TCP: Hash tables configured (established 4096 bind 4096)
, s: l( F: v1 x( Y( B. hTCP reno registered
' d* Y- G/ w7 J7 S* v! ?+ \2 p  nTCP bic registered- n3 `, Y% C0 D7 U& b
VFS: Mounted root (cramfs filesystem) readonly.* a0 R) f# ^2 e( N' e: P* d- r
Freeing init memory: 84K
6 P( i3 j: D9 I5 c1 Pinit started:  BusyBox v1.1.2 (2008.05.17-09:17+0000) multi-call binary6 I7 e. A) L) t0 D2 j% w
vm.overcommit_memory = 28 J1 N0 f0 y& r* |
vm.overcommit_ratio = 100# n1 u# a' }5 N: u
            _ _ _ _ _ _ _ _ _ _ _ _% }( f8 D: ]: }) O- [* t+ I
            \  _  _   _  _ _ ___
5 K& F( V+ a( |+ Y* t; [5 }            / /__/ \ |_/
. A( ?- W% {9 E& U  v8 E           / __   /  -  _ ___. H- Y4 K5 E& X1 q9 ~
          / /  / /  / // X5 o9 X9 U2 G: G/ `  u
  _ _ _ _/ /  /  \_/  \_ ______. x7 Q  o7 e# I+ M
___________\___\__________________) R" m* d( h2 L* Q) X! g0 y/ _
Checking for boardip ...1 E2 [, F; Y& K$ m( \
app  is ok+ U; \+ M% o- y
app  is nor flash mount mtdblock
. W1 r) s2 J) {setting  is nor flash mount mtdblock
) P# m& ]0 R$ Z- mrmmod: hifb: No such file or directory% U9 n3 r+ g/ |
rmmod: fb: No such file or directory
4 A1 G$ p# v% c' W7 q& V8 W; Srmmod: hi3560: No such file or directory
' O# T+ o) k& z% R& Brmmod: tde: No such file or directory8 F( p' b* p8 d9 @# Q
rmmod: hiether: No such file or directory/ J& F1 N7 `: A: B3 }8 }+ K" K' {! G
rmmod: hidmac: No such file or directory6 u4 R$ C" Y; o$ \  ?% u; s- M
rmmod: mmz: No such file or directory* ?9 R& ?2 R8 }/ x& o/ I
Hisilicon Media Memory Zone Manager
0 a9 ]% D  |0 v  MHISI_DMAC-MDC040003 @Hi3560v100_OSDrv_1_0_0_2 2008-10-17 16:22:16' y' |  C7 {1 P$ I7 I2 M4 M
NETDRV_ETHV100-M03C04DB0201 @Hi3560v100_OSDrv_1_0_0_2 2008-10-17 16:22:21
# f! u6 t; e- t, @hiir: init ok. ver=Oct 17 2008, 16:33:02.
* V6 C- o/ n3 J! IHISI_I2C-MDC040002 @Hi3560v100_OSDrv_1_0_0_2 2008-10-17 16:22:42, e9 E: L* |( C+ V3 J* |" F
tde: module license 'Copyright(c)' taints kernel.
9 B( N0 e; ~$ d7 R/ T1 OTDE_MAIN_VERSION[v1.0.0.1] Build Time[Oct 17 2008, 16:35:29]
. l- Q+ ?5 R* X8 H' d( QTDE_ADP_VERSION[hi3560 adp v1.0.0.3] Build Time[Oct 17 2008, 16:35:29]. l# [# @0 q* K
DRV356X_init
, t1 H, x+ e9 Q  @1 J. cHisilicon UMAP device driver interface: v1.00
. X8 v# N; I- N* G) n$ wThe Vou Clk Freq is 270
7 t0 k6 ^( s; PDRV356X_init ok
$ ]$ O& Y$ N* H, Whifb info: HIFB_MAIN_VERSION[HIFB_MAIN_VERSION] Build Time[Oct 17 2008, 16:35:31]9 C$ {  A3 n& }* A# t- K
hifb info: video:vram0_size:13271040,vram1_size:10485760
0 n8 Y2 o4 R, B; {2 o' |hifb info: succeed in registering the fb0: ovl0 frame buffer device
7 K5 c: C5 {. T" T1 q- Ihifb info: succeed in registering the fb1: ovl1 frame buffer device
4 X- K, l+ Q/ J6 P. oNET: Registered protocol family 17; j% \3 Q; b# k) Z
NET: Registered protocol family 1
8 [+ ~9 {2 C. _5 c; ?: jCSLIP: code copyright 1989 Regents of the University of California
5 W! f( i' l/ r& e) `PPP generic driver version 2.4.2- w8 ?- Z, r+ F4 F& F+ S5 `
NET: Registered protocol family 24
8 y& Q0 t4 ^9 U0 CSCSI subsystem initialized3 c+ F1 j$ c4 C6 T5 D$ O; B
usbcore: registered new driver usbfs
. \# I% F- o3 b8 L$ W8 Busbcore: registered new driver hub& I: a1 ^' j6 e
Initializing USB Mass Storage driver...
1 r/ P4 s  k4 W4 Wusbcore: registered new driver usb-storage; n& ?1 A: ~4 j
USB Mass Storage support registered.4 \2 D9 [4 m  u# h- C  D
ctrlpipe_nak_limit=3, bulkpipe_nak_limit=3. X1 w5 Z$ W# }+ ]
hiusb-hcd hiusb-hcd.0: Hisilicon USB host controller
0 y: K' E  ?- G8 Rhiusb-hcd hiusb-hcd.0: new USB bus registered, assigned bus number 1
( }! M; k; U  ?hiusb-hcd hiusb-hcd.0: irq 23, io base 0x80090000
$ e' q' m& g' C7 F, ~hub 1-0:1.0: USB hub found
) A  y8 p7 |6 P2 \& R( _hub 1-0:1.0: 1 port detected- Q! R% ]# F7 E
hiusb:hiusb_hcd_handle_status_intr:732: vbus error has detected.& Q3 \6 }) J. e
hiusb:hiusb_hcd_hw_status_check:1641: hw abnormal, devctl=0x900 n( G' R  E+ U6 Z! M7 h  Z
usbcore: registered new driver rt73. ^7 |9 L( x" b5 x/ h* |5 E% x
Get address=0x10120600, new value=0x18100800!
5 g; I1 a6 h  W, w  K4 `& ?Get address=0x10120604, new value=0x38302820!- _( D# H5 V/ u2 ?
Get address=0x10120608, new value=0x58504840!6 J0 S+ [) k7 u2 Y: c
Get address=0x1012060c, new value=0x78706860!' a" d: T1 W, H/ S! x- V4 l& q( P
Get address=0x10120610, new value=0x98918980!7 _% @; G- C+ {. d1 n0 `/ U
Get address=0x10120614, new value=0xb8b0a8a0!
. i7 t& s: _, {Get address=0x10120618, new value=0xd8d0c8c0!* o- a: v1 ]  H
Get address=0x1012061c, new value=0xf8f0e8e0!
9 U: U0 v6 h" M- Z9 d5 J" LGet address=0x10120620, new value=0xff!
1 e7 v7 I0 _! j! X2 t0 pGet address=0x10120700, new value=0x18100800!
" `3 m4 T: b  CGet address=0x10120704, new value=0x38302820!+ @/ O. x$ e7 S! Z4 ~9 R. M5 D( x
Get address=0x10120708, new value=0x58504840!
, I; n4 L. D8 k3 l+ E1 ?2 RGet address=0x1012070c, new value=0x78706860!
! K# ~7 g0 r5 y! g0 X: P- TGet address=0x10120710, new value=0x98918980!, D5 n5 Y, ^8 B3 c
Get address=0x10120714, new value=0xb8b0a8a0!
- Y6 X' ]1 d( a$ t5 jGet address=0x10120718, new value=0xd8d0c8c0!& e1 F( ^2 v% D- d* ]2 D5 k
Get address=0x1012071c, new value=0xf8f0e8e0!  Z! r4 D$ ^" m) s1 o
Get address=0x10120720, new value=0xff!  x4 V  d& ]+ R: s5 d; _
Get address=0x10120c00, new value=0x18100800!: w- Z1 }( Z$ S) \: [2 v# X
Get address=0x10120c04, new value=0x38302820!! z) b  I  B( Z! p* @! k! n! o6 r
Get address=0x10120c08, new value=0x58504840!' C+ H9 G' x* [$ m( M& M
Get address=0x10120c0c, new value=0x78706860!
) d0 t+ v8 o9 h; eGet address=0x10120c10, new value=0x98918980!6 b5 R7 f1 |# \8 ^. ]  y
Get address=0x10120c14, new value=0xb8b0a8a0!
2 v) X& q$ ~& KGet address=0x10120c18, new value=0xd8d0c8c0!$ T; N% d7 S7 I
Get address=0x10120c1c, new value=0xf8f0e8e0!. D# _: q/ f' L6 F) G7 _' E, q
Get address=0x10120c20, new value=0xff!0 x% Q- K. P$ b" C/ ^/ w5 x
Get address=0x10120000, new value=0x8281e000!4 g; X7 o, a* t
[0]sw_mqmc_init listen_port=37001 server_ip=0 server_port=37000, w( Y* s0 z8 c1 O0 D
OSD_WIDTH:720   OSD_HEIGHT:576  MEM_SIZE:26214400( z  A  J/ _! V$ R
Boot version: 8112016
1 R1 S. c$ \' j; O# T$ _Built at Sep_06_2009__21:21:13
( h8 [! v9 `# [% {4 HUpdatePtTable 1000000
' n" K# d( h6 K6 g" S[0]Partition loader , 0 , 100000 6 f2 {' q; \" z. B
[0]Partition boot1 , 100000 , 400000 . [7 r5 D& ^0 i5 }* s
[0]Partition boot2 , 500000 , 400000 * _" p/ _; g: Y6 y' \  @# s; P
[0]Partition app , 900000 , 400000
$ t  j7 U; u+ v/ g3 V9 P8 R[0]Partition setting , d00000 , 80000
6 z6 l( ]: V- q' m) `! i9 v[0]Partition playlist , ee0000 , 40000 ; ]. m8 D- h7 A5 Y
[0]Partition param1 , da0000 , 20000
$ i: P, z8 |- `[0]Partition param2 , dc0000 , 20000
+ I. b; G  g/ _0 _) c# G3 Q2 |[0]Partition font , de0000 , 100000 * D  `! ]  `  t1 s
[0]Partition logo , d80000 , 20000
5 R) u: A6 w5 ^; d[0]Partition swfs , f20000 , e0000
/ T, }2 M1 k! @- A& m$ u. lInit GPIO OK!
! L! E( P% f& z# o6 aboot_init: mute the audio gpio 27=1 .
8 n5 n9 I, T0 {& ~0 S. j9 M' k6 X2 LInit screen ...
, M! E2 q( m# l9 p1 `* k.. OK4 t) z  i* y4 Y0 a8 L6 o
Wrong standard ! using pal
0 S; o5 K; e# xAAAAA 2 t" a! |* O. K1 }$ a! q
sw_mem_alloc3 ], m0 e. v4 p5 A: i( z, B4 T
GIF decode ok8 b4 {1 Y& |3 P! X
sw_server_init open socket sucess 8 !, w- A. i2 M! b2 g7 e8 Y" B) L
[1520]Thread-<tHttpServer : 0 : f0b88> opened$ Y; J, N' p. V9 I+ f8 N, {
[1530]sw_mqmc_stb_client_init linkd=0 . [" z: S$ y5 K# z
[1530]Thread-<tClientThread : 1 : f0c08> opened
2 j  @( L, K8 ?$ M% P% G: E[1530]Thread-<tMonitorThread : 2 : f0c88> opened
& `  B: `# t  ~9 ?1 M9 T[1570]Thread-<tMonitorDevs : 3 : f0d08> opened
- m/ B9 D- n- N6 V[1570]0  0x000f0b88 tHttpServer    proc=0xb744     pause=0 ppid=338 pid=341& o3 U9 |& g8 r- G9 |$ s/ S
[1570]1  0x000f0c08 tClientThread  proc=0xc910     pause=0 ppid=338 pid=342
7 f9 N3 k' K5 C1 _2 a! A2 ^% w[1570]2  0x000f0c88 tMonitorThread proc=0xae84     pause=0 ppid=338 pid=343
  y' a- a. i, O# G2 F[1570]3  0x000f0d08 tMonitorDevs   proc=0xafcc     pause=0 ppid=338 pid=344
% Y7 `7 i4 D' }& Q5 i6 E9 _[1570]( w1 P) U0 f0 I" t% r+ c
ref = 4' @) i! D: b- Y7 l
[1630]Thread-<tMonitorThread> exit self: R6 F# @: Z! Z% L0 _
sw_mem_alloc% J* e8 y$ Z' U7 u/ L7 j( X
GIF decode ok
! P3 m% m" p! Y$ S1 _0 b- ][sw_parameter_get_int] lValue=1% n& q+ E0 K2 j! d6 ~. e
[value] value=8112016" h" U6 Z1 O4 E3 u( D( n" s2 Z
sw_network_set_mac:ifconfig eth0 hw ether 00:07:63:0c:f8:fd
( _$ g- m' _$ d) xsw_ir_init->268
; R/ S) k/ h) u+ F" y& S1 ~3 Z5 Nsw_ir_set_trans_callback->248# P/ }, X# O% `. h, D# }0 X$ q; K
After bsettop_init gpio27:1
8 g' o! ~: k5 ~/ W* S( y- Kboot_init: unmute the audio gpio 27=0 .
; t( ^3 k( e) T5 }+ E% o# D3 q9 Oifconfig eth0 up still continue wait 12 S& s# K! s7 l. J- o8 j
Sunniwell shell,(c) 2007 sunniwell.
/ Y; u1 W2 d# H" e, ?+ B==================================) o4 X9 E* P: \; A9 Y5 I9 ?( @) @+ F
>ifconfig eth0 up still continue wait 2" n/ J; B) {( r
ifconfig eth0 up still continue wait 3
+ ?6 t& w0 w# ?$ i" D6 h# {0 w. pifconfig eth0 up still continue wait 4
3 J: p. n' k- O- p# sifconfig eth0 up still continue wait 5
$ D0 y& S2 k9 N6 t4 D3 W* {ifconfig eth0 up still continue wait 6$ _5 K$ O3 n/ e2 Q. h2 Z
ifconfig eth0 up still continue wait 7
, W/ g+ H5 y# x% |) Fifconfig eth0 up still continue wait 8
6 t9 \# t- n+ |) C; ^6 _& zifconfig eth0 up still continue wait 9
* h5 C! h- O. I- m% F) Z% {  Iifconfig eth0 up still continue wait 10' S$ ^. h/ A1 `2 `' x5 y+ u  j. L
ifconfig eth0 up still continue wait 11% Q$ a8 \- P9 k: k6 l1 b
ifconfig eth0 up still continue wait 12' ~) s( B% q) B
ifconfig eth0 up still continue wait 13
0 U9 t" o# o0 h$ }) u+ Fifconfig eth0 up still continue wait 14
( x6 L$ g- b! xifconfig eth0 up still continue wait 151 P) d$ U) L) c0 M; H+ O( i
ifconfig eth0 up still continue wait 16
2 E5 A! O$ t( M# {' S  V, fifconfig eth0 up still continue wait 17' J8 `' l; S- F( B, L% T
ifconfig eth0 up still continue wait 18
$ S, q% U6 X9 H2 Z2 S% `ifconfig eth0 up still continue wait 196 j0 Y( R! {* u6 A  Q
ifconfig eth0 up still continue wait 20
2 U0 Q8 i' F4 A+ I' H/ F! iifconfig eth0 up still continue wait 21: E! Q1 x+ _# Z" E9 o3 P7 u
ifconfig eth0 up still continue wait 22
0 }: {. X3 v# x' K( p) P) jifconfig eth0 up still continue wait 23
 楼主| 发表于 2010-1-20 22:16:56 | 显示全部楼层
本帖最后由 synge 于 2010-1-20 14:31 编辑
, s, w* X* H2 B1 z
" \3 A5 _, d& D联网升级之前还可以使用sh命令进去那个shell,升级之后就不能进去,不过还是能telnet进去的,请高手们想想破解的办法。
, F) @- L; e5 c: M: n3 j7 M4 e, T另外据我观察,估计是还有一个身份识别是标签纸上的序列号码,估计也是识别身份的。
发表于 2010-1-22 20:49:40 | 显示全部楼层
我们这是绑定MAC和MC ID两项
发表于 2010-2-9 08:38:11 | 显示全部楼层
高人,学习了
发表于 2010-3-11 11:19:41 | 显示全部楼层
楼主能否详细介绍进入和修改的方法,最近正为此事烦
 楼主| 发表于 2010-3-16 17:52:37 | 显示全部楼层
拆开机顶盒,有个ttl线的接口,然后连到终端窗口就可以看到上面的信息了!
发表于 2010-6-1 23:45:19 | 显示全部楼层
天数!!!!!
发表于 2010-6-22 13:05:36 | 显示全部楼层
烦请楼主能否介绍修改MAC的详细命令,诚谢!
发表于 2010-6-22 18:50:05 | 显示全部楼层
回复 1# synge
您需要登录后才可以回帖 登录 | 注册

本版积分规则

关闭

站长推荐上一条 /1 下一条

相关侵权、举报、投诉及建议等,请发 E-mail:yesdong@qq.com

Powered by Discuz! X5.0 Licensed © 2001-2026 Discuz! Team.44152102000001

在本版发帖QQ客服返回顶部