找回密码
 注册

QQ登录

只需一步,快速开始

楼主: xyn

zte h608b v2 破解全攻略(免拆机)

    [复制链接]
发表于 2010-5-3 22:22:34 | 显示全部楼层
请问U盘那几个文件?你说的做两次启动指?
 楼主| 发表于 2010-5-3 22:35:25 | 显示全部楼层
本帖最后由 xyn 于 2010-5-3 22:37 编辑

回复 47# chjtyxw
ftp完成后,机器里有一个html.mz文件,是读口令那个,这时U盘里要放上html.mz.2.gz
带U盘启动,第一次会把html.mz.2.gz写进去,覆盖掉原来的html.mz但这是登陆进去还是
读口令界面,因为新的还没进内存,再重起(这次就不用U盘了),新界面就出来了.以后如不
改动,U盘上就只有rc.exec有用了(用来打开telnet)几个子目录都是存放有关文件准备以后
用的.其中rcA.diy,rcB.diy和html.mz.2.gz要更换哪个就把哪个放进E8_h608b目录,带U盘
启动,就进去了.
 楼主| 发表于 2010-5-3 22:42:09 | 显示全部楼层
回复 46# zsdja
我的版本是T015的,之前版本我认为应该没问题,后面的我无法肯定,因为不知道有何改变.
发表于 2010-5-3 22:56:09 | 显示全部楼层
拆机用ttl线,只要把rc1和rc.diy拷到/usr/local/ct目录下,后面都可通过U盘完成。怎么操作呀???谢谢!!!
发表于 2010-5-3 23:07:30 | 显示全部楼层
回楼主,刚刚重启了电脑,又重新操作一次,成功了,呵呵,太棒了,谢谢!
发表于 2010-5-3 23:30:17 | 显示全部楼层
我在U盘根目录下建一下个文件夹EB_h608b,里面放了两个文件一个rc.exec和html.mz.2.gz对不对啊!
 楼主| 发表于 2010-5-3 23:38:06 | 显示全部楼层
回复 52# chjtyxw

E8不是EB
发表于 2010-5-4 08:13:17 | 显示全部楼层
回复 53# xyn


    我的猫现在不停的自动重启!请问是怎么回事!应该如何来改!
ticfg status 0
ticfg env status 0

Basic POST completed...     Success.
Last reset cause: Software reset (memory controller also reset)
ZXV10 HomeGateway bootloader version: 1.4.4.3
Board hardware version: 2.0.6
Flash size:     16M
Memory size:    32M
(c) Copyright 2004-2007 ZTE CORPORATION. All Rights Reserved.

Press ESC for monitor...

ZXV10 HGW>

Booting...
Launching kernel decompressor.
Starting LZMA Uncompression Algorithm.
Copyright (C) 2003 Texas Instruments Incorporated; Copyright (C) 1999-2003 Igor
Pavlov.
Compressed file is LZMA format.
Kernel decompressor was successful ... launching kernel.

LINUX started...
Config serial console: ttyS0,115200
Auto Detection OHIO chip
This SOC has MDIX cababilities on chip.
WLAN 1350 chip configured.
CONFIG_AVALANCHE_VLYNQ_POLARITY_LOW
Success in setting up the VLYNQ.
CPU revision is: 00018448
Primary instruction cache 16kb, linesize 16 bytes (4 ways)
Primary data cache 8kb, linesize 16 bytes (4 ways)
Number of TLB entries 16.
Linux version 2.6.17_mvl21-malta-mips_fp_le (xia@XLVersion) (gcc version 2.96 20
000731 (Red Hat Linux 7.3 2.96-113.2) neon) #1 Mon Jul 28 14:24:30 CST 2008
Set GPIO19 interrupt mode now:
Determined physical RAM map:
memory: 14000000 @ 00000000 (reserved)
memory: 00020000 @ 14000000 (ROM data)
memory: 01fe0000 @ 14020000 (usable)
On node 0 totalpages: 8192
zone(0): 8192 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: BOOTCFG_A 11001100 0 1 8 9
calculating r4koff... 00102c00(1059840)
CPU frequency 211.97 MHz
Calibrating delay loop... 211.35 BogoMIPS
Freeing Adam2 reserved memory [0x14001000,0x0001f000]
Memory: 29816k/32768k available (1852k kernel code, 2952k reserved, 199k data, 6
8k init)
Dentry-cache hash table entries: 4096 (order: 3, 32768 bytes)
Inode-cache hash table entries: 2048 (order: 2, 16384 bytes)
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer-cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 8192 (order: 3, 32768 bytes)
Checking for 'wait' instruction...  unavailable.
POSIX conformance testing by UNIFIX
Linux NET4.0 for Linux 2.6
Based upon Swansea University Computer Society NET3.039
TI Optimizations: Allocating TI-Cached Memory Pool.
Warning: Number of buffers is not configured.Setting default to 120
Using 120 Buffers for TI-Cached Memory Pool.
DEBUG: Using Hybrid Mode.
NSP Optimizations: Succesfully allocated TI-Cached Memory Pool.
Initializing RT netlink socket
DEBUG: Starting ksoftirqd with ALWAYS_SOFTIRQ:0x3 NON ALWAYS SOFTIRQ:0xfffffffc.

DEBUG: Starting ksoftirqd with priority:0 policy:0 nice:19.
Starting kswapd
Disabling the Out Of Memory Killer
devfs: v1.7 (20011216) Richard Gooch (rgooch@atnf.csiro.au)
devfs: boot_options: 0x1
JFFS2 version 2.1. (C) 2001, 2002 Red Hat, Inc., designed by Axis Communications
AB.
ticfg_name_select : board_hwversion ==0
pty: 32 Unix98 ptys configured
Serial driver version 5.05c (2001-07-08) with no serial options enabled
ttyS00 at 0xa8610e00 (irq = 15) is a 16550A
Installed misc driver vlynq0: it handles vlynq bridge0 with 1 hop(s).
block: 64 slots per queue, batch=16
Initializing the TI QoS NSP Framework.
DEBUG: Initializing the Network Queue Manager Algorithms.
DEBUG: Initialization of the Translation Unit.
DEBUG: Initializing the LOCAL High Priority Database Module.
DEBUG: Initialization of the LOCAL High Priority Database Module successful..
Succesfully Initialized the TI QoS NSP Framework.
cpmac_dev_probe : WAN MODE == adsl
Error getting CPMAC Configuration params for instance:0
Environment Variable:MACCFG_A not set in bootloader
Setting Default configuration params for CPMAC instance:0

MAC CFG : Tx Interrupts off , threshold : 20
cpmac_dev_init,EnableHwIGMP1
addr=0x000c     value=0x8038
addr=0x000b     value=0x8001
addr=0x000b     value=0xa001
CPMAC: Registered switch port 1 with device eth1
CPMAC: Registered switch port 2 with device eth2
CPMAC: Registered switch port 3 with device eth3
CPMAC: Registered switch port 4 with device eth4
TI CPMAC Linux DDA version 1.9 - CPMAC DDC version 0.3
Cpmac: Installed 1 instances.
Cpmac driver is allocating buffer memory at init time.
cpmac_dev_probe : sync @ normal
PPP generic driver version 2.4.1
avalanche flash device: 0x1000000 at 0x10000000.
Found: Spansion S29GL128N02
Physically mapped flash:0: Found 1 x16 devices at 0x0 in 16-bit mode
number of JEDEC chips: 1
cfi_amdstd_setup :: Using buffer write method --- in w300
Avalanche: No single image format found. Using mtd env variables
Looking for mtd device :mtd0:
Avalanche: Adding a mtd0 image (0x160000), with size (0x400000).
Creating 1 MTD partitions on "Physically mapped flash:0":
0x00160000-0x00560000 : "mtd0"
Avalanche:      linking partition mtd0: mtd0 -> ../../mtdblock/0
Looking for mtd device :mtd1:
Avalanche: Adding a mtd1 image (0x80000), with size (0xe0000).
Creating 1 MTD partitions on "Physically mapped flash:0":
0x00080000-0x00160000 : "mtd1"
Avalanche:      linking partition mtd1: mtd1 -> ../../mtdblock/1
Looking for mtd device :mtd2:
Avalanche: Adding a mtd2 image (0x0), with size (0x20000).
Creating 1 MTD partitions on "Physically mapped flash:0":
0x00000000-0x00020000 : "mtd2"
Avalanche:      linking partition mtd2: mtd2 -> ../../mtdblock/2
Looking for mtd device :mtd3:
Avalanche: Adding a mtd3 image (0x20000), with size (0x40000).
Creating 1 MTD partitions on "Physically mapped flash:0":
0x00020000-0x00060000 : "mtd3"
Avalanche:      linking partition mtd3: mtd3 -> ../../mtdblock/3
Looking for mtd device :mtd4:
Avalanche: Adding a mtd4 image (0x80000), with size (0x4e0000).
Creating 1 MTD partitions on "Physically mapped flash:0":
0x00080000-0x00560000 : "mtd4"
Avalanche:      linking partition mtd4: mtd4 -> ../../mtdblock/4
Looking for mtd device :mtd5:
Avalanche: Adding a mtd5 image (0x60000), with size (0x20000).
Creating 1 MTD partitions on "Physically mapped flash:0":
0x00060000-0x00080000 : "mtd5"
Avalanche:      linking partition mtd5: mtd5 -> ../../mtdblock/5
Looking for mtd device :mtd6:
Avalanche: Adding a mtd6 image (0x560000), with size (0x20000).
Creating 1 MTD partitions on "Physically mapped flash:0":
0x00560000-0x00580000 : "mtd6"
Avalanche:      linking partition mtd6: mtd6 -> ../../mtdblock/6
Looking for mtd device :mtd7:
Avalanche: Adding a mtd7 image (0xb00000), with size (0x500000).
Creating 1 MTD partitions on "Physically mapped flash:0":
0x00b00000-0x01000000 : "mtd7"
Avalanche:      linking partition mtd7: mtd7 -> ../../mtdblock/7
Looking for mtd device :mtd8:
Avalanche: Adding a mtd8 image (0x6e0000), with size (0x400000).
Creating 1 MTD partitions on "Physically mapped flash:0":
0x006e0000-0x00ae0000 : "mtd8"
Avalanche:      linking partition mtd8: mtd8 -> ../../mtdblock/8
Looking for mtd device :mtd9:
Avalanche: Adding a mtd9 image (0x600000), with size (0xe0000).
Creating 1 MTD partitions on "Physically mapped flash:0":
0x00600000-0x006e0000 : "mtd9"
Avalanche:      linking partition mtd9: mtd9 -> ../../mtdblock/9
Looking for mtd device :mtd10:
Avalanche: Adding a mtd10 image (0x580000), with size (0x20000).
Creating 1 MTD partitions on "Physically mapped flash:0":
0x00580000-0x005a0000 : "mtd10"
Avalanche:      linking partition mtd10: mtd10 -> ../../mtdblock/10
Looking for mtd device :mtd11:
Avalanche: Adding a mtd11 image (0x5a0000), with size (0x40000).
Creating 1 MTD partitions on "Physically mapped flash:0":
0x005a0000-0x005e0000 : "mtd11"
Avalanche:      linking partition mtd11: mtd11 -> ../../mtdblock/11
Looking for mtd device :mtd12:
Avalanche: Adding a mtd12 image (0x600000), with size (0x4e0000).
Creating 1 MTD partitions on "Physically mapped flash:0":
0x00600000-0x00ae0000 : "mtd12"
Avalanche:      linking partition mtd12: mtd12 -> ../../mtdblock/12
Looking for mtd device :mtd13:
Avalanche: Adding a mtd13 image (0x5e0000), with size (0x20000).
Creating 1 MTD partitions on "Physically mapped flash:0":
0x005e0000-0x00600000 : "mtd13"
Avalanche:      linking partition mtd13: mtd13 -> ../../mtdblock/13
Looking for mtd device :mtd14:
Avalanche: Adding a mtd14 image (0xae0000), with size (0x20000).
Creating 1 MTD partitions on "Physically mapped flash:0":
0x00ae0000-0x00b00000 : "mtd14"
Avalanche:      linking partition mtd14: mtd14 -> ../../mtdblock/14
Looking for mtd device :mtd15:
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP, IGMP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 2048 bind 2048)
Linux IP multicast router 0.06 plus PIM-SM
ip_conntrack version 2.0 (256 buckets, 2048 max) - 372 bytes per conntrack
ip_ct_sip: registering helper for port 5060
ip_ct_sip: registering helper for port 5063
ip_tables: (C) 2000-2002 Netfilter core team
netfilter PSD loaded - (c) astaro AG
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
NET4: Ethernet Bridge 008 for NET4.0
Initializing the WAN Bridge.
Please set the MAC Address for the WAN Bridge.
Set the Environment variable 'wan_br_mac'.
MAC Address should be in the following format: xx.xx.xx.xx.xx.xx
bzp : /dev/mtdblock0
FAT: bogus logical sector size 22272
!!!!root fs is squash fs, so skip jffs2 fs
VFS: Mounted root (squashfs filesystem) readonly.
Mounted devfs on /dev
Freeing unused kernel memory: 68k freed
serial console detected.  Disabling virtual terminals.
console=/dev/tts/0
init started:  BusyBox v0.61.pre (2008.07.28-06:35+0000) multi-call binary
Starting pid 10, console /dev/tts/0: '/etc/init.d/rcS'
Algorithmics/MIPS FPU Emulator v1.5
mnum== c0011985

JFFS is already here!
mount -t jffs2 /dev/mtdblock/7 /usr/local/ct
cd: can't cd to mod
ledcfg: reading Standard Configuration File /etc/led.conf
ledcfg: configured 19 states
in atm_dev_register, acQosAdslName avsar_0
registered device TI Avalanche SAR
Ohio250(7200/7100A2) detected
DSL_FEATURE_CNTL_0 (_dsl_Feature_0) = 4000
DSL_PHY_CNTL_0 (_dsl_PhyControl_0) = 200
DSP binary filesize = 383830 bytes
tn7dsl_init : env var DSL_BIT_TMODE is set
tn7dsl_set_modulation : Setting mode to 0xff
Texas Instruments ATM driver: version:[7.02.01.00]
usb.c: registered new driver usbdevfs
usb.c: registered new driver hub
SCSI subsystem driver Revision: 1.00
Initializing USB Mass Storage driver...
usb.c: registered new driver usb-storage
USB Mass Storage support registered.
ISP116x Chip_id = 6123
usb.c: new USB bus registered, assigned bus number 1
hub.c: USB hub found
hub.c: 2 ports detected
ISP116x_HCD Initialization Successful
Waiting for enter to start '/bin/sh' (pid 78, terminal /dev/tts/0)

Please press Enter to activate this console. ****** unusedenv has been clean****
**
$$$$$$$proc_newboot_defparams
UP MOde is adsl
==== In logic main ====
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device

ADSL default config is already here!
iptables: No chain/target/match by that name
Logger:log_load_from_flash:will load log from flash
Logger:log_load_from_flash:load access file success,buf:0x10041350,12474 byte
Logger:log_load_from_flash:finshed to parse log
Logger:log_load_from_flash:will load log from flash
Logger:log_load_from_flash:load security file success,buf:0x10045d38,12233 byte
Logger:log_load_from_flash:finshed to parse log
Tr069ConnectionChanged():Restart tr069 listen socket (mini_httpd) , iface=
name MappingEntity

tree_tr069startElement name=802-1_P_Value,len=13

tree_tr069endElement name=802-1_P_Value,len=13
set_pval: No key in list InternetGatewayDevice.ManagementServer.URL
set_pval: No key in list InternetGatewayDevice.ManagementServer.URL
set_pval: No key in list InternetGatewayDevice.DeviceInfo.X_CT-COM_MiddlewareMgt
.MiddlewareURL
set_pval: No key in list InternetGatewayDevice.DeviceInfo.X_CT-COM_MiddlewareMgt
.MiddlewareURL
set_pval: No key in list InternetGatewayDevice.ManagementServer.CTMgtIPAddress
set_pval: No key in list InternetGatewayDevice.ManagementServer.CTMgtIPAddress
set_pval: No key in list InternetGatewayDevice.ManagementServer.CTUserIPAddress1

set_pval: No key in list InternetGatewayDevice.ManagementServer.MgtDNS
set_pval: No key in list InternetGatewayDevice.ManagementServer.MgtDNS
set_pval: No key in list InternetGatewayDevice.DeviceInfo.X_CT-COM_MiddlewareMgt
.InternetPvc
set_pval: No key in list InternetGatewayDevice.DeviceInfo.X_CT-COM_MiddlewareMgt
.InternetPvc
set_pval: No key in list InternetGatewayDevice.DeviceInfo.X_CT-COM_TeleComAccoun
t.TeleAccountChange
set_pval: No key in list InternetGatewayDevice.DeviceInfo.X_CT-COM_TeleComAccoun
t.TeleAccountChange
@@@@@@  delete_CRURL_from_notification:
ACTV_NOTIFY_DUMP
List:
add_middle_to_notification(): initialize notify parameters list. 2.
List: 'InternetGatewayDevice.ManagementServer.URL'='http://devacs.edatahome.com:
9090/ACS-server/ACS', 'InternetGatewayDevice.DeviceInfo.X_CT-COM_MiddlewareMgt.M
iddlewareURL'='0.0.0.0:9080', 'InternetGatewayDevice.ManagementServer.CTMgtIPAdd
ress'='N/A', 'InternetGatewayDevice.ManagementServer.CTUserIPAddress1'='N/A', 'I
nternetGatewayDevice.ManagementServer.MgtDNS'='N/A', 'InternetGatewayDevice.Devi
ceInfo.X_CT-COM_MiddlewareMgt.InternetPvc'='N/A', 'InternetGatewayDevice.DeviceI
nfo.X_CT-COM_TeleComAccount.TeleAccountChange'='0',
MWSURL: 0.0.0.0
==>set_tr069_url_conf  strValue = http://devacs.edatahome.com:9090/ACS-server/AC
S
0000-00-00T00:00:09 [Notice] dev_init one time
iptables: Bad rule (does a matching rule exist in that chain?)

restoretelnetuserpass restore user/pass ok user is root,pass is root

security init E8-B version get password1
resolver: configuration tree:
0000-00-00T00:00:14 [Critical] oamPingInterval(20)(20)

********Get pmodulation of 0xff from env********
0000-00-00T00:00:15 [Notice] ssid0 PSK value : v5ntz6g5. len : 8
Eeeeeeeenabe SC and akmp
#######WSC isactive = 1
0000-00-00T00:00:15 [Notice] MAC address : 00:1e:73:ba:ec:c2
0000-00-00T00:00:16 [Notice] Read WLAN_CARD_TYPE error!!!!! default to 200
ap is loading,set ap to busy
0000-00-00T00:00:16 [Notice] AP Acquiring Lock
0000-00-00T00:00:19 [Notice] ppp_led_ctl !DO! LED =0
0000-00-00T00:00:19 [Notice] Valid Configuration Tree
Got module id = landhcps0
Got module id = landhcps0
Got module id = landhcps0
Got module id = landhcps0
Got module id = landhcps0
0000-00-00T00:00:19 [Notice] stat successfull for /etc/resolv.conf.
0000-00-00T00:00:21 [Critical] NTP Polling Timer for DHCP Started succesfully.
rm: cannot remove `/var/tmp/pap-secrets': No such file or directory
###(init_pppproxy_link)  num= 0
0000-00-00T00:00:21 [Notice] DSL Polling Timer Started succesfully.
0000-00-00T00:00:21 [Error]   &&&eth_start
0000-00-00T00:00:21 [Error]   &&&eth_start, ifconfig
0000-00-00T00:00:21 [Error]   &&&eth_start
0000-00-00T00:00:21 [Error]   &&&eth_start
0000-00-00T00:00:21 [Error]   &&&eth_start
0000-00-00T00:00:22 [Notice] Firewall NAT service started
0000-00-00T00:00:22 [Notice] ppp_proxy pEnable=-1!
0000-00-00T00:00:22 [Alert] 104001 The device rebooted by software reset
0000-00-00T00:00:22 [Notice] AP REPORT LOCK ACQUIRED
0000-00-00T00:00:22 [Notice] wlan_handle_load_event - Acquired Lock
0000-00-00T00:00:22 [Notice] ssid0 PSK value : v5ntz6g5. len : 8
Eeeeeeeenabe SC and akmp
#######WSC isactive = 1
0000-00-00T00:00:22 [Notice] MAC address : 00:1e:73:ba:ec:c2
0000-00-00T00:00:22 [Notice] Read WLAN_CARD_TYPE error!!!!! default to 200
0000-00-00T00:00:23 [Error] del_iptable_rules : ppp_name not intact
0000-00-00T00:00:23 [Warning] !!!!root fs is squash fs, so skip jffs2 fs
0000-00-00T00:00:23 [Warning] Mounted root (squashfs filesystem) readonly.
0000-00-00T00:00:23 [Warning] Mounted devfs on /dev
0000-00-00T00:00:23 [Warning] 68k freed
0000-00-00T00:00:23 [Warning] Algorithmics/MIPS FPU Emulator v1.5
0000-00-00T00:00:23 [Warning] in atm_dev_register, acQosAdslName avsar_0
0000-00-00T00:00:23 [Warning] registered device TI Avalanche SAR
0000-00-00T00:00:23 [Warning] Ohio250(7200/7100A2) detected
0000-00-00T00:00:23 [Warning] DSL_FEATURE_CNTL_0 (_dsl_Feature_0) = 4000
0000-00-00T00:00:23 [Warning] DSL_PHY_CNTL_0 (_dsl_PhyControl_0) = 200
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Core Logic received 'SEGFAULT' signal, halting and reboot now...
!!!!!!!!!!!!!!!!Restarting system.
!!!!!!!!!!!!!!!!read flash area ...... 9000 4080
!!!!!!!!!!!!!!!!flash status 0
!
ticfg status 0
ticfg env status 0

Basic POST completed...     Success.
Last reset cause: Software reset (memory controller also reset)
ZXV10 HomeGateway bootloader version: 1.4.4.3
Board hardware version: 2.0.6
Flash size:     16M
Memory size:    32M
(c) Copyright 2004-2007 ZTE CORPORATION. All Rights Reserved.

Press ESC for monitor...
发表于 2010-5-4 08:36:26 | 显示全部楼层
我用了一下自动配置!现在猫自动重起!请问是怎么回事啊!
 楼主| 发表于 2010-5-4 09:38:56 | 显示全部楼层
回复 57# chjtyxw

你有ttl线没?
*滑块验证:
您需要登录后才可以回帖 登录 | 注册

本版积分规则

QQ|Archiver|小黑屋|宽带技术网 |网站地图

粤公网安备 44152102000001号

GMT+8, 2024-4-28 22:29 , Processed in 0.027722 second(s), 3 queries , Redis On.

Powered by Discuz! X3.5 Licensed

Copyright © 2001-2020, Tencent Cloud.

快速回复 返回顶部 返回列表