找回密码
 注册

QQ登录

只需一步,快速开始

查看: 20783|回复: 16

华为EC1308IPTV机顶盒并机的可能

[复制链接]
发表于 2010-1-20 22:14:23 | 显示全部楼层 |阅读模式
本帖最后由 synge 于 2010-1-20 14:26 编辑 4 ?+ b, h5 b/ y, e8 r0 u$ M# W

) F9 X/ X* X8 }+ Z' }通过TTL线取得以下的登录信息:( U/ H" C6 T4 T  t: x
U-Boot 1.1.4 (Jul 16 2008 - 06:13:29)6 o. D3 S9 s. B& d
U-Boot code: F0500000 -> F0521EA0  BSS: -> F052909C9 b$ V# `4 o  J8 r0 O
HI_VERSION=U_BOOT_1_1_4-M02C0405B0205B0303 @Hi3560v100_OSDrv_1_0_0_2 2008-04-19 11:08:39
+ Y" C/ @+ [9 {5 F: ~/ F# sRAM Configuration:
( J! b# I" C$ e- ~- _2 {8 V# U: I3 yBank #0: f0000000 128 MB
. h0 v. r' f- a" l9 ]Flash: 16 MB) H& |' I' P5 F; m
In:    serial0 b/ a- O4 y. [: k# o$ r' N/ l! P
Out:   serial
1 M+ H8 J9 E) F1 ^4 {Err:   serial
+ i. i7 f( I3 D% v! }MAC:   00-07-63-xx-xx-xx  (隐去)
. H: {0 s" g0 t( W# x----------sw_show_logo------------
. q  ]' y+ |- B) N3 esw_flashlogo_init return 0
+ K& ^% f% J5 b5 F3 ~- ~# p  Jbuf=GIF6 ^: d6 h- |' Y8 {
sw_gif_decode wieth:720 height:576
& s$ v) p1 O7 ^* a/ UPress SPACE to abort autoboot in 1 seconds* K: U4 \, r- E9 Y
hilinux # . I' E$ g  w6 l7 M
按空格键,进入U-boot的loader状态,输入help得到如下信息:( s/ l" m% p' C" `6 T6 C% L
?       - alias for 'help'3 O! f% ?& n& h# m# f( }# F
base    - print or set address offset/ l1 p$ M% ^  Z& [1 ?$ \, z
bdinfo  - print Board Info structure0 f6 @& q7 z; j3 n+ ]
bootf   - boot application image from memory
) c/ d0 W3 f8 x' w2 I. r+ a7 }bootm   - boot application image from memory
+ Y# G9 w: |; W+ F+ Qbootp   - boot image via network using BootP/TFTP protocol
  @2 c1 b' \6 Q) k* s( ~cmp     - memory compare
! {0 H8 L9 P/ ^0 D/ X: v0 ccp      - memory copy
" V! u( P! m$ lcrc32   - checksum calculation
6 S6 C1 t( A, D+ T3 |! zdhcp    - invoke DHCP client to obtain IP/boot params
- u  a! {& d# q2 qecho    - echo args to console
( z5 S. ~! b# w# i; u7 ~erase   - erase FLASH memory6 v3 C: A6 O4 @7 y$ o
flinfo  - print FLASH memory information
2 D% m7 f, l8 A! U6 Ego      - start application at address 'addr'
/ d. p9 S6 X( \2 P0 xhelp    - print online help
- ^* c3 ?- F: Yloadb   - load binary file over serial line (kermit mode)
- i( B$ N5 E: z8 d7 b* dloop    - infinite loop on address range9 ^$ Q( Q# m# h" V' t
md      - memory display7 n5 v' b  z) g# x5 D
mm      - memory modify (auto-incrementing)
3 Y0 a+ b! ~8 t: Hmtest   - simple RAM test
7 q! i5 H9 m" l& F# l" Qmw      - memory write (fill)
( F: Z3 Z! j' }$ D3 e+ A# cnm      - memory modify (constant address)  u% E' X' n# k8 J7 R( o- q
ping    - send ICMP ECHO_REQUEST to network host: J3 Y) X/ D( [$ i& b" T
printenv- print environment variables3 x: y" q1 ^( l
protect - enable or disable FLASH write protection
+ b" u3 @/ ^+ f7 H+ E0 Qrarpboot- boot image via network using RARP/TFTP protocol
+ X- `5 C" S: C1 h$ ~& jreset   - Perform RESET of the CPU
4 r4 o) Z9 i  z8 X8 gsaveenv - save environment variables to persistent storage1 v. d4 M( d2 s  d& i. ~
setenv  - set environment variables+ ^3 U5 A% {7 u% x
sw_e2prom_test   - test e2prom through i2c+ |1 g1 R! C2 L5 `& r! m6 H# o8 i
sw_reg_read16    - read 32 bits registers
" v/ |1 l; i! e; {* usw_reg_read32    - read 32 bits registers; }6 Y0 d) J% w* E$ F. F. q
sw_reg_write16   - read 16 bits registers6 U$ z) e* u- V' ]$ V
sw_reg_write32   - read 16 bits registers' {& s! `/ ]3 e& d3 X
swupdate        - download or upload one partition (loader,app,boot) via network using TFTP protocol( F- `, L$ b/ _5 Z1 Q9 f" h4 q9 C
swupdate_serial   - load binary file over serial way
/ k3 [4 K4 u( \/ \1 \tftp    - download or upload image via network using TFTP protocol* u; ^1 t# A1 @2 X% m
version - print monitor version
* |* f! f1 i# ?. Xhilinux # / C. h5 ?4 I2 p0 X- a* K" {
通过setenv修改为一个有登录权限的mac地址,但正常boot机后就变为标签纸的MAC地址了
 楼主| 发表于 2010-1-20 22:15:46 | 显示全部楼层
本帖最后由 synge 于 2010-1-20 14:24 编辑
- S) ~* R; R; r2 [1 @
* g  J$ `- p. J. C. ]正常boot机后的信息:2 Q+ p  x; p" w  @! E
U-Boot 1.1.4 (Jul 16 2008 - 06:13:29)
: {: A' S9 r3 b- nU-Boot code: F0500000 -> F0521EA0  BSS: -> F052909C
8 m, ]8 A- Z, C1 S! N. |! oHI_VERSION=U_BOOT_1_1_4-M02C0405B0205B0303 @Hi3560v100_OSDrv_1_0_0_2 2008-04-19 11:08:39
4 f) ^4 `7 Y" u+ S) V, pRAM Configuration:
1 l! L: o6 [0 hBank #0: f0000000 128 MB8 `' e1 l3 Z$ m. `& ^$ v0 \
Flash: 16 MB% W; d1 S7 F; J: ]% P
In:    serial
* ?5 B6 c. [* N+ zOut:   serial
1 }: u, O7 i! ~. B: k! g: V; V2 L/ }5 zErr:   serial5 Q1 H5 ~; @& v2 u# u9 h7 y/ h/ c# M* |
MAC:   00-07-63-xx-xx-xx (隐去)
5 @0 `" }: J) h" _' j" V, S6 C1 ]
----------sw_show_logo------------
& f5 W0 a5 A4 I' ?7 H& U# esw_flashlogo_init return 0
( R1 E- k/ _2 b; H1 Obuf=GIF! I0 _- L& }! ^
sw_gif_decode wieth:720 height:576: X' ], Z" k' h' u$ S0 _
Press SPACE to abort autoboot in 1 seconds( h- p: n# c% W& N
Hisilicon I2C Driver Init Start.( {* M$ o- n) A0 G7 x4 X
Read E2PROM ldrVersion = 1020007 ,ret=0
  K  i( B& J% k) s0 SRead E2PROM loader information OK: version=1020007% ~7 E& s1 [! u$ `6 R* _6 ?; ~
Read E2PROM offset = 0,ret=0
6 ^- ]8 k# P+ b6 `! t+ @Read E2PROM offset = 20,ret=0( K6 j+ u3 u2 f3 ]
Read E2PROM offset = 40,ret=0
4 T2 W2 E0 |# J% V1 C# w2 a: B+ DRead E2PROM offset = 60,ret=02 o( p0 n  n6 d: W0 u; _- b3 l; L
Read E2PROM offset = 80,ret=0
( p+ ~5 A8 g/ A' oRead E2PROM offset = a0,ret=0
. _3 `: x" h$ v- V; KRead E2PROM offset = c0,ret=0
2 O8 q1 y7 P1 C9 _; {; p/ w! z5 bRead E2PROM offset = e0,ret=0
- v9 d( k6 V2 [( URead E2PROM offset = 100,ret=0) j( A% x$ L0 P0 _" w& x  h, q% _
Read E2PROM offset = 120,ret=0
; a; z. r3 ^5 B$ w) r# ~Read E2PROM offset = 140,ret=0: Y- i/ `( |2 ?2 {7 }
Read E2PROM offset = 160,ret=0
: [5 [- T% X$ v( B' x! M1 }  zRead E2PROM offset = 180,ret=0
! h. @! B4 r4 m% A0 M1 NRead E2PROM offset = 1a0,ret=0
- |* f  ~! h* U- W& Y6 e7 E' pRead E2PROM offset = 1c0,ret=0
9 Y! L* J. B$ c  n! KRead E2PROM Partition information  OK epprom_init_flag = 1108040 , flag  = 1108040 , bInvalid=0
# R% b- b, G) t/ d' GBoot flag : 0& Q. a; m" i" l. p# ]( C# S, [; G7 W8 j
## Booting image at f0008000 ...
6 q* w/ L6 Y* }0 r3 lAddMemSizeToOption tmem=128M# K- h4 e; Y( ]7 B: r
MAC Address:00:07:63:xx:xx:xx(隐去)# l4 ^: Z  k' v- `$ u( a7 ~
MAC Address2:01:08:64:xx:xx:xx(隐去)
. `- W- u* U# a4 l* B3 }Starting kernel ...
: @* l5 i; m1 G5 D: ILinux version 2.6.14-hi3560v100-pilot-test-pa-release (ubuntu@ubuntu-desktop) (gcc version 3.4.3 (release) (CodeSourcery ARM Q3cvs 2004)) #16 Fri Jan 16 11:24:45 CST 2009- B- M$ J/ J* P' s  R( ^: [
CPU: ARM926EJ-Sid(wb) [41069265] revision 5 (ARMv5TEJ)
) N6 c* Q* K" AMachine: Hi3560v100/ Q  V- q$ y% T9 Y3 F' j
Memory policy: ECC disabled, Data cache writeback
5 l+ k, E8 B. h6 S7 b+ WCPU0: D VIVT write-back cache2 s, p# ?- I) z% f0 d6 U9 y
CPU0: I cache: 16384 bytes, associativity 4, 32 byte lines, 128 sets% b  _! D, l) d! H
CPU0: D cache: 16384 bytes, associativity 4, 32 byte lines, 128 sets' R! J" a' Z# t
Built 1 zonelists3 _9 w7 w6 d# F! A- H
Kernel command line: mem=64M console=ttyAMA0,115200 root=/dev/mtdblock/2 rootfstype=cramfs rw mmz=ddr,2,0xF40M,64M  fes=128 partitions=v2&0:0:256&1:0:16&2:16:64&3:80:64&4:144:64&5:208:8&10:238:4&7:218:2&8:220:2&9:222:16&6:216:2&11:242:14 tmùþ=128M appstatus=1 macd- ^- {% \/ U8 R
PID hash table entries: 512 (order: 9, 8192 bytes)
, m8 N6 i# Q9 yConsole: colour dummy device 80x303 X$ d$ s- z2 x/ q7 ]: R' Z8 i
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
2 l: l& y* f2 N/ A1 ~5 `( \Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)$ [5 B4 S, Q+ k  `+ F1 n
Memory: 80MB = 80MB total
7 }& Q* b5 H* D, e6 a; UMemory: 78976KB available (1679K code, 350K data, 84K init): c. v+ H; P' d7 k& K; r+ e& i6 P( Y
Mount-cache hash table entries: 512
0 _5 C7 Z/ q/ s' U/ I3 K2 S5 }HI_VERSION=LINUX_2_6_14-M04C0404B0202 @Hi3560v100_OSDrv_1_0_0_2 2008-07-22 16:23:20$ j: X. G! }2 T# Q
CPU: Testing write buffer coherency: ok
# I5 E# j& t9 F/ \' t1 F$ i: wNET: Registered protocol family 161 {, v7 u1 f- X- @
Hisilicon clock system V0.011 D/ s( a$ n$ @' h- ?" M
NetWinder Floating Point Emulator V0.97 (double precision)
) S% b; Y( ]( o) `' t/ Pyaffs Jan 13 2009 12:02:45 Installing. . ]( T: x$ F' J# {- e- m
devfs: 2004-01-31 Richard Gooch (rgooch@atnf.csiro.au)7 X; g+ V6 ~! Y" i( t
devfs: boot_options: 0x01 J3 ~& a* n* M0 A7 v, D
JFFS2 version 2.2. (NAND) (C) 2001-2003 Red Hat, Inc.5 R% q/ F$ o# k/ N
Initializing Cryptographic API
! @- D* M9 M; g( x2 U2 m: P1 qSerial: AMBA PL011 UART driver2 E! z# D# ?; ~7 V( G) K1 m- C
ttyAMA0 at MMIO 0x101f1000 (irq = 12) is a AMBA/PL011
% h. {# m: D) h9 F) J3 VttyAMA1 at MMIO 0x101f2000 (irq = 13) is a AMBA/PL011, i$ [( z9 C0 n2 h% V' G$ E
io scheduler noop registered: H5 z& f7 o, ?( l3 u: w( }2 w
RAMDISK driver initialized: 4 RAM disks of 8192K size 1024 blocksize
; M/ ]/ x& M; b# B" `physmap flash device: 1000000 at 34000000
; ~: T/ J  w+ N4 B8 T! Lphys_mapped_flash: Found 1 x16 devices at 0x0 in 16-bit bank9 r/ p: [( r8 N; H. p
Amd/Fujitsu Extended Query Table at 0x00409 H5 p! f) E& `' i" u! V7 N
phys_mapped_flash: CFI does not contain boot bank location. Assuming top.1 o5 h3 X9 V6 m: ?8 N- k% J
number of CFI chips: 1. a' i' E, w- a& D: ^& v
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness." I( f5 k. q. o  \; L( c
partition name: whole; partition offset: 0; partition size: 16777216
$ O7 K$ N4 q$ M+ x9 [( C partition name: loader; partition offset: 0; partition size: 1048576
5 V& i: X2 _, N% ^6 T partition name: boot1; partition offset: 1048576; partition size: 4194304
' G$ D1 j( C1 _0 v2 h$ y partition name: boot2; partition offset: 5242880; partition size: 4194304
7 }/ E0 y6 m8 t7 w, q partition name: app; partition offset: 9437184; partition size: 4194304
; p3 |4 V/ M/ j) O3 [ partition name: setting; partition offset: 13631488; partition size: 524288# y" \/ _( |; h7 V5 e3 g! d# _
partition name: playlist; partition offset: 15597568; partition size: 262144
: \( P1 Z9 r# } partition name: param1; partition offset: 14286848; partition size: 131072
' k9 z7 F' S% i8 [. c: w partition name: param2; partition offset: 14417920; partition size: 131072
# |+ u5 {; D# W6 \ partition name: font; partition offset: 14548992; partition size: 10485765 @; G0 U, R" e; k; E% @6 t4 j& I: C5 G
partition name: logo; partition offset: 14155776; partition size: 131072
7 p/ S+ G0 q' i5 w partition name: swfs; partition offset: 15859712; partition size: 9175041 K. G" N2 M, w* w" H$ t4 X
12 cmdlinepart partitions found on MTD device phys_mapped_flash+ t+ h. u2 s$ t
Creating 12 MTD partitions on "phys_mapped_flash":
9 J( ?  U; S6 x# q0x00000000-0x01000000 : "whole"
' f5 D; J' d( _) f% C2 S6 r# ^0x00000000-0x00100000 : "loader"
- |) \% J- u: j3 B0x00100000-0x00500000 : "boot1"- {" W/ v( I$ u& Y
0x00500000-0x00900000 : "boot2"
9 h& s) r# `% z- j9 A. A+ p0x00900000-0x00d00000 : "app"
- ?, @, |+ f6 O2 ]( L( J9 a" }0x00d00000-0x00d80000 : "setting"
& W' y5 W( y+ A4 h0 q! s# B- e0 L0x00ee0000-0x00f20000 : "playlist". _9 y5 [# O6 {' Q2 y, s9 D( }
0x00da0000-0x00dc0000 : "param1"
2 L+ X8 Z- Y" }6 J- S0x00dc0000-0x00de0000 : "param2"0 o" c( I* s3 c
0x00de0000-0x00ee0000 : "font"+ x# L6 V* Q% L1 ^- R
0x00d80000-0x00da0000 : "logo"6 v" r- T. t8 d2 l
0x00f20000-0x01000000 : "swfs"& _! l9 B5 k) j1 P4 M+ s2 D4 c
HISI_NAND-MDC040003B040002 @Hi3560v100_OSDrv_1_0_0_2 2008-07-22 16:30:32
- {4 ?* [( ?% s3 e$ X, QNo NAND device found!!!" x' E. Z9 N$ D8 A5 h2 s5 T
drivers/mtd/nand/hisilicon/hisilicon_nand.c,1069.
5 @2 @& V( o- f5 B# q: b0 d0 ENET: Registered protocol family 2
& ?5 u. E+ m0 a+ J0 `! a% w5 YIP route cache hash table entries: 1024 (order: 0, 4096 bytes)2 C& |# S" u0 W% U+ J: }
TCP established hash table entries: 4096 (order: 2, 16384 bytes)
/ O" w  }# g' P; c: o3 ~% \TCP bind hash table entries: 4096 (order: 2, 16384 bytes)1 A, p; L/ K6 h% d: I: @8 G
TCP: Hash tables configured (established 4096 bind 4096)
6 K" O0 X5 c1 F  U4 C3 {TCP reno registered% U  t, F1 {9 c* Z( m  _% Q- A# R
TCP bic registered, r/ |4 \4 N8 |& U( @
VFS: Mounted root (cramfs filesystem) readonly.6 c% N$ L9 ?# d6 o
Freeing init memory: 84K1 l; M& W# l# s8 O
init started:  BusyBox v1.1.2 (2008.05.17-09:17+0000) multi-call binary# F# f- K/ m2 q+ L1 u" ]! S
vm.overcommit_memory = 2$ X# u; f( e2 w$ I6 v5 v8 N5 ]
vm.overcommit_ratio = 100& n1 C; f7 D" o3 h
            _ _ _ _ _ _ _ _ _ _ _ _
4 h! y7 B. J% V, J/ t            \  _  _   _  _ _ ___
% P4 T/ A3 e2 g  B            / /__/ \ |_/- h( F1 Y) r8 O% B+ i  V9 @/ W
           / __   /  -  _ ___: u' r+ x3 w) N( _* R- T
          / /  / /  / /: D8 @: z; J, ^4 |. u6 O- D
  _ _ _ _/ /  /  \_/  \_ ______
9 B, M# P6 T; ]8 i" w2 ]4 m___________\___\__________________  C% T( f, D: K4 q" H
Checking for boardip ...
) I8 O: j4 D: Q* M# J2 ]app  is ok
, I  p6 x4 Q( D* f2 _app  is nor flash mount mtdblock. n( B5 F& u. g2 C6 T; ^
setting  is nor flash mount mtdblock# e' y$ B% l+ _9 g
rmmod: hifb: No such file or directory) j  J  R/ D& `, w
rmmod: fb: No such file or directory
; H  R" Q; ~) x+ T" _rmmod: hi3560: No such file or directory
0 k0 g8 h# z: krmmod: tde: No such file or directory: ]/ G9 A: _$ P. @5 {
rmmod: hiether: No such file or directory
$ h2 c% W1 H# armmod: hidmac: No such file or directory8 X+ Z" ?5 s" K3 J  S; U
rmmod: mmz: No such file or directory
/ Q8 E: \# l8 ~7 i  K( SHisilicon Media Memory Zone Manager1 k6 F6 }$ S" X2 C& P" A5 [, R
HISI_DMAC-MDC040003 @Hi3560v100_OSDrv_1_0_0_2 2008-10-17 16:22:16
" p/ h1 M: a4 p9 u2 d2 [: F# ]2 rNETDRV_ETHV100-M03C04DB0201 @Hi3560v100_OSDrv_1_0_0_2 2008-10-17 16:22:21! y2 W% y1 b  B" L! E9 Y) ^
hiir: init ok. ver=Oct 17 2008, 16:33:02.
; E% N$ t1 C9 y* d; r9 `HISI_I2C-MDC040002 @Hi3560v100_OSDrv_1_0_0_2 2008-10-17 16:22:42
6 O9 ~  X3 |: {# A7 @/ Ntde: module license 'Copyright(c)' taints kernel.
3 M% U7 j+ ]9 ~7 ?0 ~TDE_MAIN_VERSION[v1.0.0.1] Build Time[Oct 17 2008, 16:35:29]8 v* ~* d  q8 }' `1 Z; E
TDE_ADP_VERSION[hi3560 adp v1.0.0.3] Build Time[Oct 17 2008, 16:35:29]1 M; k# s5 [/ U# N
DRV356X_init/ J4 z* Q& k) `$ S
Hisilicon UMAP device driver interface: v1.00
) {$ n6 ?7 g# P& b; W8 X0 ?The Vou Clk Freq is 270
3 Q$ ?# B8 f; @$ q7 LDRV356X_init ok6 ~7 c+ B$ t# d, ?! J/ H
hifb info: HIFB_MAIN_VERSION[HIFB_MAIN_VERSION] Build Time[Oct 17 2008, 16:35:31]
1 w4 k. \- w  ^( Bhifb info: video:vram0_size:13271040,vram1_size:10485760% O# Y2 a9 |! n% V% o* x3 @
hifb info: succeed in registering the fb0: ovl0 frame buffer device' y7 a9 P( e% y  H7 d4 \2 a8 C
hifb info: succeed in registering the fb1: ovl1 frame buffer device
- c$ N2 u! j  Z( bNET: Registered protocol family 17
8 t$ Q9 u' \) N; f7 fNET: Registered protocol family 1
+ J0 E# c  U/ h; g% h/ XCSLIP: code copyright 1989 Regents of the University of California  Y2 R- R; }+ V0 }+ A0 F6 x' @
PPP generic driver version 2.4.2' Q* g( s* Y! P* p
NET: Registered protocol family 24( l5 Q7 a5 t( J3 G+ r
SCSI subsystem initialized
5 R; S7 H/ H7 d: E! V$ u8 e8 Q- Yusbcore: registered new driver usbfs  m0 p3 p5 x$ K' A& W
usbcore: registered new driver hub! e, M6 J3 m* M5 F/ v
Initializing USB Mass Storage driver...  O$ }% z* {- w& D; u5 I
usbcore: registered new driver usb-storage3 `; O9 ~$ `& u! G; }" ~. P
USB Mass Storage support registered.
% Z, w1 g$ R2 uctrlpipe_nak_limit=3, bulkpipe_nak_limit=3
) Z$ Y' H, u; \3 X0 h6 Qhiusb-hcd hiusb-hcd.0: Hisilicon USB host controller2 T5 V: u% w" y7 x! N6 Q" B
hiusb-hcd hiusb-hcd.0: new USB bus registered, assigned bus number 1
; ?/ p9 S! y+ _hiusb-hcd hiusb-hcd.0: irq 23, io base 0x80090000
( y9 J  F6 [- c2 Shub 1-0:1.0: USB hub found
3 v) Q9 _- w/ O7 `. T+ Ehub 1-0:1.0: 1 port detected1 k" r- ]5 Q( \! G6 ~3 B
hiusb:hiusb_hcd_handle_status_intr:732: vbus error has detected.1 n0 I* ?# \" I- s' S& l7 D7 Q
hiusb:hiusb_hcd_hw_status_check:1641: hw abnormal, devctl=0x90) J6 u/ }0 m. Q9 h+ F, C5 p
usbcore: registered new driver rt73- G7 }7 o& ]/ Z4 @! u
Get address=0x10120600, new value=0x18100800!$ S2 d* Z3 U3 c# O+ J' s
Get address=0x10120604, new value=0x38302820!
1 V* H8 v& |- }9 v9 B# tGet address=0x10120608, new value=0x58504840!
" Y" j9 y1 i/ E4 ~) _Get address=0x1012060c, new value=0x78706860!/ T- Q3 K  X  `5 p5 a( W: B
Get address=0x10120610, new value=0x98918980!
/ z5 F( Z9 Y0 y8 a" NGet address=0x10120614, new value=0xb8b0a8a0!; |% D* n3 U$ ?2 t" Q2 J; F
Get address=0x10120618, new value=0xd8d0c8c0!# D  e6 U. i4 Q6 [8 P2 K, Z- D& {: D
Get address=0x1012061c, new value=0xf8f0e8e0!, m2 w0 X7 `, A& R( h
Get address=0x10120620, new value=0xff!
% H  ?7 U% L/ R) ?7 i% I& YGet address=0x10120700, new value=0x18100800!! W! v: ~2 }: Q$ [$ i2 T
Get address=0x10120704, new value=0x38302820!
# b0 E& S' l7 Q3 o3 s; LGet address=0x10120708, new value=0x58504840!/ p. O! c: y; t' ]8 f# }
Get address=0x1012070c, new value=0x78706860!
1 T% H0 `* j+ K% r( [Get address=0x10120710, new value=0x98918980!
2 Q7 x2 }1 t/ \- ?) y: k6 PGet address=0x10120714, new value=0xb8b0a8a0!; U! A: q( `  Y  h$ e2 i
Get address=0x10120718, new value=0xd8d0c8c0!. ]5 U# L2 x* V
Get address=0x1012071c, new value=0xf8f0e8e0!2 }1 e. d/ Q0 ^9 i6 m
Get address=0x10120720, new value=0xff!/ _2 o  I0 P: M, |* ?! t9 _$ A. `
Get address=0x10120c00, new value=0x18100800!
4 B: V5 T: ]( c' Z: u) WGet address=0x10120c04, new value=0x38302820!. R& O( Z* Q' Q3 d7 Y/ d
Get address=0x10120c08, new value=0x58504840!; l* `8 Q+ G$ h; @, V# I0 K
Get address=0x10120c0c, new value=0x78706860!
$ }. ^2 H$ s, a. y7 Z- tGet address=0x10120c10, new value=0x98918980!7 o2 A: }5 g' V) F
Get address=0x10120c14, new value=0xb8b0a8a0!" x7 F) r% G/ m) d  G9 Q) K
Get address=0x10120c18, new value=0xd8d0c8c0!
" ^3 h( i6 G+ `6 y5 u" A5 PGet address=0x10120c1c, new value=0xf8f0e8e0!
: D$ m2 u* ]6 x" JGet address=0x10120c20, new value=0xff!
7 M  s, P! T4 B! KGet address=0x10120000, new value=0x8281e000!
' }$ F, A& ^8 C4 c, Y[0]sw_mqmc_init listen_port=37001 server_ip=0 server_port=37000
2 q  |; K; G* s0 q/ j# ?/ S- xOSD_WIDTH:720   OSD_HEIGHT:576  MEM_SIZE:26214400$ [" H) |; |1 J3 I
Boot version: 8112016
" g# Z  H- c& gBuilt at Sep_06_2009__21:21:13
+ ]+ S3 T' d/ ]* a1 s% ^UpdatePtTable 1000000
' u) |1 G5 \' ^" d[0]Partition loader , 0 , 100000 9 Q% d- \4 V7 y  ?+ w  t" T
[0]Partition boot1 , 100000 , 400000 ! w6 d& L/ k( Q2 ~/ @
[0]Partition boot2 , 500000 , 400000
, A3 }' M1 @/ u. o0 \, X( S[0]Partition app , 900000 , 400000
& H. r5 `* i3 ~6 z( c[0]Partition setting , d00000 , 80000
$ W9 z! k( |% ~  a4 M, x[0]Partition playlist , ee0000 , 40000 1 |  b5 F4 z2 L# J
[0]Partition param1 , da0000 , 20000
0 ?% h1 {; v; R[0]Partition param2 , dc0000 , 20000 5 W1 k. c/ h) @; H% \4 S
[0]Partition font , de0000 , 100000 1 b5 ~2 K* v! l! r9 z" J
[0]Partition logo , d80000 , 20000 : A1 B+ s7 f, r# N% o) U9 W! X
[0]Partition swfs , f20000 , e0000 " r8 B1 T% s* F" H! v
Init GPIO OK!  q8 U( F) v- X( E
boot_init: mute the audio gpio 27=1 .1 ^% l; ?) L6 t' v
Init screen ...5 F0 x$ {- p7 h! V
.. OK8 P5 c+ [+ h- K1 R
Wrong standard ! using pal* P* m' I! x5 _% M
AAAAA * Z+ j; l& U& Y8 |
sw_mem_alloc; {& F! C  c: h0 A- B9 D
GIF decode ok
6 ?7 V. o8 T& Esw_server_init open socket sucess 8 !* V- `# W! ^" w" b+ V6 b9 c% Y
[1520]Thread-<tHttpServer : 0 : f0b88> opened
% c) R1 O1 H( z$ r* ^; `$ k: Z[1530]sw_mqmc_stb_client_init linkd=0 ; H  S  t+ W" i. j2 ~0 |- X1 Y4 J
[1530]Thread-<tClientThread : 1 : f0c08> opened) o& ~# G4 t  H2 K; `! \4 J
[1530]Thread-<tMonitorThread : 2 : f0c88> opened
/ k5 e. c1 v6 [, `- p7 N" @4 M% M- F[1570]Thread-<tMonitorDevs : 3 : f0d08> opened
% K' B& y- r- _* r0 p% @6 {4 s[1570]0  0x000f0b88 tHttpServer    proc=0xb744     pause=0 ppid=338 pid=341* @! d% K! Q. ~8 q! q. E
[1570]1  0x000f0c08 tClientThread  proc=0xc910     pause=0 ppid=338 pid=342/ T2 X  z. v% @; L
[1570]2  0x000f0c88 tMonitorThread proc=0xae84     pause=0 ppid=338 pid=343
% _. x  F# r3 l5 v- s& ^[1570]3  0x000f0d08 tMonitorDevs   proc=0xafcc     pause=0 ppid=338 pid=344
# d/ [; l0 J* U  @6 s, Z* N[1570]' h. b1 \) ]2 ~
ref = 4: G, O0 h8 c2 e; Z. x
[1630]Thread-<tMonitorThread> exit self
4 O& P8 n8 S' H: \, g% ]  Nsw_mem_alloc
9 x5 v$ L! w( R1 }+ VGIF decode ok
( m  e# S* A/ ?[sw_parameter_get_int] lValue=1' @" u. h4 @4 k. R5 M6 B
[value] value=8112016$ g% O' d) A& j- x, v
sw_network_set_mac:ifconfig eth0 hw ether 00:07:63:0c:f8:fd
6 s; M# ?- X. i" B2 vsw_ir_init->268
0 ?9 X$ O, ]4 P" C% Csw_ir_set_trans_callback->248
6 ~0 m, M0 I; h, p/ [$ l, r4 UAfter bsettop_init gpio27:11 K8 J2 [$ w$ e$ b
boot_init: unmute the audio gpio 27=0 .  e5 D/ K! g* m" r) ]8 @
ifconfig eth0 up still continue wait 1
/ n! [! K: i$ ^' i$ Z1 OSunniwell shell,(c) 2007 sunniwell.2 O/ }  p0 T0 K
==================================
# f& X& ^- S3 X+ W: b  d& f>ifconfig eth0 up still continue wait 2
! E- l9 O: j1 x4 {ifconfig eth0 up still continue wait 3
$ _+ r: P3 x& |ifconfig eth0 up still continue wait 4
7 l7 u+ Y6 S' e& H( rifconfig eth0 up still continue wait 5
' Y4 O# U  o( W0 ^+ M0 I9 S4 ~. [ifconfig eth0 up still continue wait 67 L& D: i/ m) ~& n9 g2 f- t
ifconfig eth0 up still continue wait 7
: q" B, n6 k: a( V  e# c" V3 k! [' ^ifconfig eth0 up still continue wait 8
$ E9 r4 u' A4 d% e7 S% T& Eifconfig eth0 up still continue wait 9
- v7 N( T" i" ^4 Y5 nifconfig eth0 up still continue wait 10
" D' O: q0 _. gifconfig eth0 up still continue wait 11
( ^9 z& `& c* D) jifconfig eth0 up still continue wait 12
& W3 Z% V$ i. q. Jifconfig eth0 up still continue wait 13: Q  M- D, W& n/ E$ u% `) F' v! w
ifconfig eth0 up still continue wait 14
6 _4 F; B0 j& c' o5 Eifconfig eth0 up still continue wait 15
; u; R7 }  n% e  yifconfig eth0 up still continue wait 16
9 p1 [  W& g$ x% s3 eifconfig eth0 up still continue wait 17
: F0 h+ v  `7 Z' Z' y+ z! y- D6 ^ifconfig eth0 up still continue wait 18
( Z% B+ t" h- u$ n* r* s* r, W/ }ifconfig eth0 up still continue wait 19
, D( G7 t; x) i0 k3 ?& R# O4 ^ifconfig eth0 up still continue wait 20# S2 U* C: G7 i6 z1 ^' |0 ^- U: u
ifconfig eth0 up still continue wait 21' h9 R: `( e0 r& ^4 i' U
ifconfig eth0 up still continue wait 22
' ^# J" _, [( N; ~+ Uifconfig eth0 up still continue wait 23
 楼主| 发表于 2010-1-20 22:16:56 | 显示全部楼层
本帖最后由 synge 于 2010-1-20 14:31 编辑 " M1 R# S8 ~- A

$ F( [8 ~( \% z1 c4 M' }联网升级之前还可以使用sh命令进去那个shell,升级之后就不能进去,不过还是能telnet进去的,请高手们想想破解的办法。9 X7 f7 z( f* [* v7 X4 I
另外据我观察,估计是还有一个身份识别是标签纸上的序列号码,估计也是识别身份的。
发表于 2010-1-22 20:49:40 | 显示全部楼层
我们这是绑定MAC和MC ID两项
发表于 2010-2-9 08:38:11 | 显示全部楼层
高人,学习了
发表于 2010-3-11 11:19:41 | 显示全部楼层
楼主能否详细介绍进入和修改的方法,最近正为此事烦
 楼主| 发表于 2010-3-16 17:52:37 | 显示全部楼层
拆开机顶盒,有个ttl线的接口,然后连到终端窗口就可以看到上面的信息了!
发表于 2010-6-1 23:45:19 | 显示全部楼层
天数!!!!!
发表于 2010-6-22 13:05:36 | 显示全部楼层
烦请楼主能否介绍修改MAC的详细命令,诚谢!
发表于 2010-6-22 18:50:05 | 显示全部楼层
回复 1# synge
*滑块验证:
您需要登录后才可以回帖 登录 | 注册

本版积分规则

Archiver|小黑屋|宽带技术网 |网站地图 粤公网安备44152102000001号

GMT+8, 2025-5-3 13:11 , Processed in 0.030539 second(s), 5 queries , Redis On.

Powered by Discuz! X3.5 Licensed

Copyright © 2001-2020, Tencent Cloud.

快速回复 返回顶部 返回列表