Speedport W 501V

Das Board mit Freiheiten

---

Hardware

Speedport W 501V unterscheidet sich in Prozessor (TNETD7200) und WLAN (TNETW1350A) von den üblichen AR7-Vertretern, ist aber ansonsten den anderen Mitgliedern der Fritz-Familie sehr ähnlich.

Bootprotokoll

Das folgende Bootprotokoll ist mit einer Emulation (QEMU) erzeugt worden.

ram_offset (internal RAM) = 2000000

(AVM) EVA Revision: 1.153 Version: 1153
(C) Copyright 2005 AVM Date: May 23 2006 Time: 12:05:09 (0) 2 0-1001

[FLASH:] MACRONIX Top-Flash 4MB 
[FLASH:](Eraseregion [0] 63 sectors a 64kB) 
[FLASH:](Eraseregion [1] 8 sectors a 8kB) 
[SYSTEM:] AR7 on 150MHz/125MHz 

AVM_Ar7 >AVM decompress Kernel:
.................done
start kernel
[ohio_pre_init] System Clk = 12500000 Hz               

LINUX started...
Linux version 2.6.13.1-ohio (686) (gcc version 3.4.6) #9 Wed Apr 4 13:48:08 CEST 2007
memsize=16 MByte
flashsize=4 MByte
&_end=0x942096e8 PFN_ALIGN(&_end)=0x9420a000 CPHYSADDR(PFN_ALIGN(&_end))=0x1420a000 memsize=0x1000000
CPU revision is: 00018448
[ohio_gpio_init]
Determined physical RAM map:
 memory: 0020a000 @ 14000000 (reserved)
 memory: 00df6000 @ 1420a000 (usable)
On node 0 totalpages: 4096
[alloc_node_mem_map] reduce size from 2752544 Bytes to  131104 Bytes
[alloc_node_mem_map]: (org) sizeof(mem_map) = 131104 mem_map=0x9420d000-0x9422d020
[alloc_node_mem_map]: sizeof(mem_map) = 2752544 mem_map=0x93f8d000-0x9422d020
zone=0 zone_size[j]=0x86016
realsize=4096
  DMA zone: 4096 pages, LIFO batch:1
zone=1 zone_size[j]=0x0
realsize=0
  Normal zone: 0 pages, LIFO batch:1
zone=2 zone_size[j]=0x0
realsize=0
  HighMem zone: 0 pages, LIFO batch:1
Built 1 zonelists
Kernel command line:  console=ttyS0,38400n8r
[ld_mmu_r4xx0] memcpy((void *)(CAC_BASE   + 0x100), &except_vec2_generic, 0x30)
Primary instruction cache 16kB, physically tagged, 4-way, linesize 16 bytes.
Primary data cache 16kB, 4-way, linesize 16 bytes.
Synthesized TLB refill handler (20 instructions). Base=0x941df63c
TLB synthesizer field overflow (simm)
Synthesized TLB load handler fastpath (34 instructions) Base=0x941e2620.
TLB synthesizer field overflow (simm)
Synthesized TLB store handler fastpath (34 instructions) Base=0x941e2820.
TLB synthesizer field overflow (simm)
Synthesized TLB modify handler fastpath (33 instructions) Base=0x941e2a20.
PID hash table entries: 128 (order: 7, 2048 bytes)
CPU frequency 176.64 MHz
Using 88.320 MHz high precision timer.
[setup_irq]: irq 127 irqaction->handler 0x94042530 (no_action+0x0/0x8 )
[register_console] enable commandline console 0
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 14116k/14296k available (1468k kernel code, 164k reserved, 340k data, 112k init, 0k highmem)
totalram_pages= 3533
Calibrating delay loop... 629.14 BogoMIPS (lpj=3145728)
loops_per_jiffy=3145728
Mount-cache hash table entries: 512
Checking for 'wait' instruction...  available.
NET: Registered protocol family 16
Can't analyze prologue code at 9416d748
Squashfs 2.2-r2b (released 2006/02/23) (C) 2002-2005 Phillip Lougher
[avm] configured: watchdog eventled enable direct gpio 

AR7WDT: Watchdog Driver for AR7 Hardware (Version 1.0, build: Apr  4 2007 13:46:17)
Serial: 8250/16550 driver $Revision: 1.90 $ 1 ports, IRQ sharing disabled
[uart_add_one_port]
ttyS0 at MMIO 0x0 (irq = 15) is a OHIO_UART
[uart_add_one_port] dont register console port->type = 16
port->cons = 0x941a7450 port->cons->flags = 0x7
[uart_add_one_port] success
io scheduler noop registered
[cpmac] cpmac_if_register, dev eth0 (phy_id 0) registered
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
physmap flash device: 400000 at 10000000
phys_mapped_flash: Found 1 x16 devices at 0x0 in 16-bit bank
[genprobe_ident_chips] 4 i 0 j 0
[genprobe_ident_chips] 5 i 0 j 1
 Amd/Fujitsu Extended Query Table at 0x0040
phys_mapped_flash: Swapping erase regions for broken CFI table.
number of CFI chips: 1
RedBoot partition parsing not available
Generic platform RAM MTD, (c) 2004 Simtec Electronics
Ohio flash driver (size->0x400000 mem->0x10000000)
flash_size=0x400000
flash_mask=0x7fffff
Ohio flash memory: Found 1 x16 devices at 0x0 in 16-bit bank
[genprobe_ident_chips] 4 i 0 j 0
[genprobe_ident_chips] 5 i 0 j 1
 Amd/Fujitsu Extended Query Table at 0x0040
Ohio flash memory: Swapping erase regions for broken CFI table.
number of CFI chips: 1
[mtd]: set to default: jffs2_size = 0x20 * 64KByte (0x200000 Bytes)
[ohio_find_hidden_filesystem]: super block found: bytes_used: 0x2f7da6/3112358
[init_ohio_flash] find hidden filesystem size=0x314300 offset=0xabd00
[mtd] configure jffs2 partition
[mtd] fs_size=0x3a0000 max=0x10000 is=0x200000 max jffs2_size value 1
[mtd] ERROR jffs2_size too big, reduce to max
[mtd] ohio_flash_map: name=Ohio flash memory bankwidth=2 virt=0xb0000000 phys=0x10000000 size=0x400000
Creating 7 MTD partitions on "Ohio flash memory":
0x000abd00-0x003c0000 : "filesystem"
	'nor-flash'
	'Bits can be cleared (flash)'
	'Has an erase function'
mtd: partition "filesystem" doesn't start on an erase block boundary -- force read-only
0x00010000-0x003c0000 : "kernel"
	'nor-flash'
	'Bits can be cleared (flash)'
	'Has an erase function'
0x00000000-0x00010000 : "bootloader"
	'nor-flash'
	'Bits can be cleared (flash)'
	'Has an erase function'
0x003c0000-0x003e0000 : "tffs (1)"
	'nor-flash'
	'Bits can be cleared (flash)'
	'Has an erase function'
0x003e0000-0x00400000 : "tffs (2)"
	'nor-flash'
	'Bits can be cleared (flash)'
	'Has an erase function'
0x003b0000-0x003c0000 : "jffs2"
	'nor-flash'
	'Bits can be cleared (flash)'
	'Has an erase function'
0x00010000-0x003b0000 : "Kernel without jffs2"
	'nor-flash'
	'Bits can be cleared (flash)'
	'Has an erase function'
partition_info[0]: name=filesystem offset=abd00 size=314300
partition_info[0]: 0xb00abd00: 0x73717368 0x29b
partition_info[1]: name=kernel offset=10000 size=3b0000
partition_info[1]: 0xb0010000: 0xfeed1281 0x9bc03
partition_info[2]: name=bootloader offset=0 size=10000
partition_info[2]: 0xb0000000: 0x40809000 0x40809800
partition_info[3]: name=tffs (1) offset=3c0000 size=20000
partition_info[3]: 0xb03c0000: 0x40001 0xfbffffff
partition_info[4]: name=tffs (2) offset=3e0000 size=20000
partition_info[4]: 0xb03e0000: 0x40001 0xfcffffff
partition_info[5]: name=jffs2 offset=3b0000 size=10000
partition_info[5]: 0xb03b0000: 0xffffffff 0xffffffff
partition_info[6]: name=Kernel without jffs2 offset=10000 size=3a0000
partition_info[6]: 0xb0010000: 0xfeed1281 0x9bc03
NET: Registered protocol family 2
IP route cache hash table entries: 256 (order: -2, 1024 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
TCP bic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
NET: Registered protocol family 8
NET: Registered protocol family 20
[setup_irq]: irq 1 irqaction->handler 0x94001390 (dummy_timer_irq+0x0/0x14 )
[setup_irq]: irq 6 irqaction->handler 0x940013a4 (dummy_system_irq_2+0x0/0x14 )
[ohio_late_init] 
TFFS: tiny flash file system driver. GPL (c) AVM Berlin (Version 2.0)
      mount on mtd4 and mtd5 (double buffering)
Adam2 environment variables API installed.
[prepare_namespace] new mount root /dev/mtdblock1
use lzma compression 
VFS: Mounted root (squashfs filesystem) readonly.
Freeing prom memory: 0kb freed
Freeing unused kernel memory: 112k freed (3561 free)
[setup_irq]: irq 15 irqaction->handler 0x940cf170 (serial8250_interrupt+0x0/0x13c )
[avm_led] from virt led ('festnetz', 2) not registered
[avm_led] format error: "MAP Name,Instanz TO Name,Instanz"
[avm_led_load_config] Syntax error in led config file /etc/led.conf at "MAP festnetz,2 TO nu"
[setup_irq]: irq 15 irqaction->handler 0x940cf170 (serial8250_interrupt+0x0/0x13c )
[setup_irq]: irq 15 irqaction->handler 0x940cf170 (serial8250_interrupt+0x0/0x13c )
init started:  BusyBox v1.1.2 (2007.02.05-09:25+0000) multi-call binary
init started:  BusyBox v1.1.2 (2007.02.05-09:25+0000) multi-call binary
Starting pid 16, console /dev/ttyS0: '/etc/init.d/rc.S'
AR7WDT: System Init UEberwachung 120 Sekunden
TFFS Name Table 9
Jan  1 00:00:02 ar7cfgctl[85]: FactoryDefault=/etc/default/tcom/ar7.cfg (ar7)
Jan  1 00:00:02 ar7cfgctl[85]: load_config(ar7): factory default loaded
HWRevision	93
ProductID	Fritz_Box_SpeedportW501V
SerialNumber	0000000000000000
annex	B
autoload	yes
bootloaderVersion	1.153
bootserport	tty0
bluetooth	00:04:0E:FF:FF:07
cpufrequency	150000000
firstfreeaddress	0x946AE500
firmware_version	tcom
firmware_info	28.04.38
flashsize	0x00400000
maca	00:1A:4F:xx:xx:xx
macb	00:1A:4F:xx:xx:xx
macwlan	00:1A:4F:xx:xx:xx
macdsl	00:1A:4F:xx:xx:xx
memsize	0x01000000
modetty0	38400,n,8,1,hw
modetty1	38400,n,8,1,hw
mtd0	0x90000000,0x90000000
mtd1	0x90010000,0x903C0000
mtd2	0x90000000,0x90010000
mtd3	0x903C0000,0x903E0000
mtd4	0x903E0000,0x90400000
my_ipaddress	192.168.178.1
prompt	AVM_Ar7
ptest	
reserved	00:04:0E:FF:FF:00
req_fullrate_freq	125000000
sysfrequency	125000000
urlader-version	1153
usb_board_mac	00:1A:4F:xx:xx:xx
usb_rndis_mac	00:1A:4F:xx:xx:xx
usb_device_id	0x5401
usb_revision_id	0x0200
usb_device_name	USB DSL Device
usb_manufacturer_name	AVM
wlan_cal	03F5,0025,0011,00E1,010A,00F2,010A,02FB,0343
Jan  1 01:00:02 ar7cfgctl[161]: FactoryDefault=/etc/default/tcom/ar7.cfg (ar7)

Jan  1 01:00:02 ar7cfgctl[161]: load_config(ar7): factory default loaded

HWRevision='93'
HWRevision_ATA='1'
HWRevision_BitFileCount=''
HWRevision_Reserved1='0'
ANNEX='B'
OEM='tcom'
OEM_DEFAULT_INDEX=''
OEM_tmp='tcom'
Language='de'
Country='049'
TZ='CET-1CEST-2,M3.5.0/02:00:00,M10.5.0/03:00:00'
CONFIG_AB_COUNT='2'
CONFIG_ACCESSORY_URL='http://www.avm.de/fritzbox_apps.php?hardware=93&oem=tcom&language=de&country=&version=28.04.38&subversion='
CONFIG_ANNEX='B'
CONFIG_ASSIST='y'
CONFIG_ATA='n'
CONFIG_ATA_FULL='n'
CONFIG_AUDIO='n'
CONFIG_AURA='n'
CONFIG_BLUETOOTH='n'
CONFIG_BLUETOOTH_CTP='n'
CONFIG_BUTTON='n'
CONFIG_CAPI='y'
CONFIG_CAPI_MIPS='n'
CONFIG_CAPI_NT='n'
CONFIG_CAPI_POTS='y'
CONFIG_CAPI_TE='n'
CONFIG_CAPI_UBIK='n'
CONFIG_CAPI_XILINX='y'
CONFIG_CDROM='n'
CONFIG_CDROM_FALLBACK='n'
CONFIG_DECT='n'
CONFIG_DSL='y'
CONFIG_ECO='n'
CONFIG_ENVIRONMENT='/var/env'
CONFIG_ENVIRONMENT_PATH='/proc/sys/urlader'
CONFIG_ETH_COUNT='1'
CONFIG_FIRMWARE_URL='http://www.t-com.de/downloads'
CONFIG_FON='y'
CONFIG_FONGUI2='n'
CONFIG_FONQUALITY='y'
CONFIG_HOMEI2C='n'
CONFIG_HOSTNAME='speedport.ip'
CONFIG_I2C='n'
CONFIG_INSTALL_TYPE='ar7_4MB_1eth_2ab_pots_wlan_28776'
CONFIG_IPONE='n'
CONFIG_JFFS2='n'
CONFIG_KIDS='n'
CONFIG_LED_NO_DSL_LED='n'
CONFIG_MAILER='n'
CONFIG_MEDIACLI='n'
CONFIG_MEDIASRV='n'
CONFIG_NAND='n'
CONFIG_NFS='n'
CONFIG_OEM_DEFAULT='tcom'
CONFIG_PRODUKT='Fritz_Box_SpeedportW501V'
CONFIG_PRODUKT_NAME='Speedport W 501V'
CONFIG_RAMSIZE='16'
CONFIG_RELEASE='1'
CONFIG_ROMSIZE='4'
CONFIG_SAMBA='n'
CONFIG_SERVICEPORTAL_URL='none'
CONFIG_STOREUSRCFG='y'
CONFIG_SUBVERSION=''
CONFIG_SWAP='n'
CONFIG_TAM='n'
CONFIG_TAM_MODE='0'
CONFIG_TR064='n'
CONFIG_TR069='y'
CONFIG_UBIK2='n'
CONFIG_UPNP='n'
CONFIG_USB='n'
CONFIG_USB_HOST_AVM='n'
CONFIG_USB_HOST_TI='n'
CONFIG_USB_PRINT_SERV='n'
CONFIG_USB_STORAGE='n'
CONFIG_USB_WLAN_AUTH='n'
CONFIG_VDSL='n'
CONFIG_VERSION='04.38'
CONFIG_VERSION_MAJOR='28'
CONFIG_VLYNQ='y'
CONFIG_VLYNQ0='3'
CONFIG_VLYNQ1='0'
CONFIG_VLYNQ_PARAMS='vlynq_reset_bit_0=17'
CONFIG_VPN='n'
CONFIG_WLAN='y'
CONFIG_WLAN_1130TNET='n'
CONFIG_WLAN_1350TNET='y'
CONFIG_WLAN_GREEN='n'
CONFIG_WLAN_IPTV='n'
CONFIG_WLAN_TXPOWER='n'
CONFIG_WLAN_WDS='y'
CONFIG_WLAN_WMM='n'
CONFIG_XILINX='y'
set 'Activate Wizzard'
mknod: /var/flash/ar7.cfg: File exists
checkempty: : No such file or directory
checkempty: : No such file or directory
checkempty: warning, /var/flash/ar7.cfg not found - nop
checkempty: : No such file or directory
checkempty: warning, /var/flash/voip.cfg not found - nop
Piglet: module license '
(C) Copyright 2005 by AVM
' taints kernel.
EMIF: asize=0 ta=3 r_hold=0 w_strobe=6 r_strobe=6 ew=0
attempting to load DSL Firmware '/lib/modules/microvoip-dsl.bin'
**** ANNEX: 'B'
*************************************
setting DSL Firmware to Annex B
registered device TI Avalanche SAR
tiatm driver (patch_annex=0xc0053e2c)
Error : Failed to Initialize the DSL subsystem !!.
insmod: cannot insert `/lib/modules/2.6.13.1-ohio/kernel/drivers/atm/avm_atm/tiatm.ko': Success (19): Success
modprobe: failed to load module tiatm
*** ERROR: load tiatm failed ***
[tiatm] Error at firmware file: Code=-2insmod: cannot insert `/lib/modules/2.6.13.1-ohio/kernel/drivers/atm/avm_atm/tiatm.ko': Success (19): Success
<4>ubik2: Unknown symbol atm_dsp_trigger_ubik2
ubik2: Unknown symbol atm_dsp_deactivate_ubik2
ubik2: Unknown symbol atm_dsp_activate_ubik2
ubik2: Unknown symbol atm_dsp_register_ubik2
ubik2: Unknown symbol atm_dsp_release_ubik2
ubik2: Unknown symbol atm_dsp_reactivate_ubik2
insmod: cannot insert `/lib/modules/2.6.13.1-ohio/kernel/drivers/char/ubik2/ubik2.ko': Success (2): Success
modprobe: failed to load module ubik2
cat: /dev/debug: No such device or address
[tiatm] Error at firmware file: Code=-2insmod: cannot insert `/lib/modules/2.6.13.1-ohio/kernel/drivers/atm/avm_atm/tiatm.ko': Success (19): Success
<4>ubik2: Unknown symbol atm_dsp_trigger_ubik2
ubik2: Unknown symbol atm_dsp_deactivate_ubik2
ubik2: Unknown symbol atm_dsp_activate_ubik2
ubik2: Unknown symbol atm_dsp_register_ubik2
ubik2: Unknown symbol atm_dsp_release_ubik2
ubik2: Unknown symbol atm_dsp_reactivate_ubik2
insmod: cannot insert `/lib/modules/2.6.13.1-ohio/kernel/drivers/char/ubik2/ubik2.ko': Success (2): Success
isdn_fbox_fon4: Unknown symbol ubik2_rx_tasklet_control
isdn_fbox_fon4: Unknown symbol ubik2_ul_rx_buffer_conf
isdn_fbox_fon4: Unknown symbol ubik2_ul_tx_trigger
isdn_fbox_fon4: Unknown symbol ubik2_ul_register
isdn_fbox_fon4: Unknown symbol ubik2_ul_getchanfromhandle
isdn_fbox_fon4: Unknown symbol ubik2_ul_release
isdn_fbox_fon4: Unknown symbol ubik2_DebugPrintf
insmod: cannot insert `/lib/modules/2.6.13.1-ohio/kernel/drivers/isdn/isdn_fon4/zzz/isdn_fbox.ko': Success (2): Success
modprobe: failed to load module isdn_fbox
Jan  1 01:00:06 ar7cfgctl[264]: FactoryDefault=/etc/default/tcom/ar7.cfg (ar7)
Jan  1 01:00:06 ar7cfgctl[264]: load_config(ar7): factory default loaded
kdsldmod: init start (Apr 18 2007 14:44:44) sizeof(struct sk_buff)=160
kdsldmod: init done
kdsld: PPP led: off (value=0)
Jan  1 01:00:07 ctlmgr[295]: process priority is 19
Jan  1 01:00:07 ctlmgr[297]: FactoryDefault=/etc/default/tcom/ar7.cfg (ar7)
Jan  1 01:00:07 wlancfgctl[302]: FactoryDefault=/etc/default/tcom/wlan.cfg (wlan)
Jan  1 01:00:07 wlancfgctl[302]: load_config(wlan): factory default loaded
MAC WLAN: 	00:1A:4F:91:72:C0
WLAN is not enabled
SIOCGIFFLAGS: No such device
Jan  1 01:00:07 ctlmgr[297]: load_config(ar7): factory default loaded
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
/etc/init.d/rc.net: /etc/init.d/rc.net: 372: igdd: not found
Jan  1 01:00:08 websrv[318]: FactoryDefault=/etc/default/tcom/ar7.cfg (ar7)
Jan  1 01:00:08 ctlmgr[297]: FactoryDefault=/etc/default/tcom/voip.cfg (voip)
Jan  1 01:00:08 websrv[318]: load_config(ar7): factory default loaded
Jan  1 01:00:08 ctlmgr[297]: load_config(voip): factory default loaded
Jan  1 01:00:08 ctlmgr[297]: FactoryDefault=/etc/default/tcom/wlan.cfg (wlan)
Jan  1 01:00:08 ctlmgr[297]: load_config(wlan): factory default loaded
Jan  1 01:00:08 ctlmgr[297]: TR-069 is activated in tr069.cfg
Jan  1 01:00:08 websrv[318]: startup (Apr 18 2007 14:42:12)
Jan  1 01:00:08 ctlmgr[297]: dlopen(/usr/share/ctlmgr/libdect.so) failed: File not found
Jan  1 01:00:08 ctlmgr[297]: dlopen(/usr/share/ctlmgr/libtamconf.so) failed: File not found
Jan  1 01:00:08 ctlmgr[297]: dlopen(/usr/share/ctlmgr/libuser.so) failed: File not found
Jan  1 01:00:08 ctlmgr[297]: mapping to info-LED already exist
Jan  1 01:00:08 ctlmgr[297]: box init ok
Jan  1 01:00:08 ctlmgr[297]: /dev/avm_power <-- MODE=dsl
Jan  1 01:00:08 ctlmgr[297]: WAN (ata) led value = 0
Jan  1 01:00:08 ctlmgr[297]: TR069_Init() TR069_Init(full)
Jan  1 01:00:08 ctlmgr[297]: TR069_Full_Init
Jan  1 01:00:08 ctlmgr[297]: get_VoiceProfileNumberOfEntries() get_VoiceProfileNumberOfEntries 0 voipaccounts existing
Jan  1 01:00:08 ctlmgr[297]: Register_WANConnectionDevice() adding 'connection_voip' to TR069Mapper_AddCallbacksForCtlmgrList
Jan  1 01:00:08 ctlmgr[297]: Register_Portmapping() adding 'rule' to TR069Mapper_AddCallbacksForCtlmgrList
Jan  1 01:00:08 ctlmgr[297]: Register_VoiceProfile() adding 'sip' to TR069Mapper_AddCallbacksForCtlmgrList
Jan  1 01:00:08 ctlmgr[297]: Register_VoiceProfile() adding 'telcfg' to TR069Mapper_AddCallbacksForCtlmgrList
Jan  1 01:00:08 ctlmgr[297]: TR069_Full_Init() TR069_Full_Init() ret=0
Jan  1 01:00:08 ctlmgr[297]: TR069_Init returned 0
Jan  1 01:00:08 ctlmgr[297]: TR069_Init() returned 0
Jan  1 01:00:08 ctlmgr[297]: verbose: DISABLED
Jan  1 01:00:09 multid[327]: FactoryDefault=/etc/default/tcom/ar7.cfg (ar7)
Jan  1 01:00:09 multid[327]: load_config(ar7): factory default loaded
Jan  1 01:00:09 multid[327]: startup (Apr 18 2007 14:42:32)
[cpmac] cpmac_main_ioctl, unknown ioctl 35142
device eth0 entered promiscuous mode
[setup_irq]: irq 27 irqaction->handler 0x940df8bc (cpmac_main_isr+0x0/0x78 )
lan: port 1(eth0) entering learning state
lan: topology change detected, propagating
lan: port 1(eth0) entering forwarding state
Jan  1 01:00:09 multid[329]: DHCPD on lan
Jan  1 01:00:09 multid[329]: dhcpd: can't open /var/flash/multid.leases - No such file or directory (2)
Jan  1 01:00:09 multid[329]: DDNS: no valid accounts
Jan  1 01:00:09 multid[329]: ONLINE: script /bin/onlinechanged not found.
Jan  1 01:00:09 multid[329]: interface eth0 new.
Jan  1 01:00:09 multid[329]: interface lo new.
Jan  1 01:00:09 multid[329]: interface lo up.
Jan  1 01:00:09 multid[329]: verbose: DISABLED
Jan  1 01:00:09 dsld[334]: FactoryDefault=/etc/default/tcom/ar7.cfg (ar7)
Jan  1 01:00:09 dsld[334]: load_config(ar7): factory default loaded
Jan  1 01:00:09 dsld[334]: startup (Apr 18 2007 14:43:23)
Jan  1 01:00:09 dsld[336]: DSL Mac 00:1a:4f:4d:47:51
Jan  1 01:00:09 dsld[336]: VOIP Mac 00:1a:4f:4d:47:52
Jan  1 01:00:09 dsld[336]: VCC2 Mac 00:1a:4f:4d:47:53
Jan  1 01:00:09 dsld[336]: VCC3 Mac 00:1a:4f:4d:47:50
Jan  1 01:00:09 dsld[336]: voip: ppptarget voip disabled, ignored
Jan  1 01:00:09 dsld[336]: compiled tc filter  to 0 classes
Jan  1 01:00:09 dsld[336]: compiled tc filter tc:rtp,sip to 2 classes
Jan  1 01:00:09 dsld[336]: compiled tc filter tc:tcp_ack to 1 classes
Jan  1 01:00:09 dsld[336]: compiled tc filter tc:dns,sipdns,ntpdns,tr069dns to 4 classes
Jan  1 01:00:09 dsld[336]: compiled tc filter tc:http_req,tr069 to 2 classes
Jan  1 01:00:09 dsld[336]: compiled tc filter tc:icmp to 1 classes
Jan  1 01:00:09 dsld[336]: compiled tc filter  to 0 classes
Jan  1 01:00:09 dsld[336]: verbose: DISABLED
telefon: use clock_gettime(CLOCK_MONOTONIC)!
telefon: SIGCHLD received!
telefon: WARNING No config file '/var/flash/fx_def' !
telefon: WARNING No CG file '/var/flash/fx_cg' !
[capi_oslib] not jet activated
telefon: kein Capi!
/etc/init.d/rc.voip: /etc/init.d/rc.voip: 98: pbd: not found
Jan  1 01:00:10 ar7cfgctl[359]: FactoryDefault=/etc/default/tcom/ar7.cfg (ar7)
Jan  1 01:00:10 ar7cfgctl[359]: load_config(ar7): factory default loaded
run_clock demon started
AR7WDT: System Init UEberwachung abgeschlossen (110930 ms noch verfuegbar)
Jan  1 01:00:10 voipd[353]: FactoryDefault=/etc/default/tcom/voip.cfg (voip)
Jan  1 01:00:10 voipd[353]: load_config(voip): factory default loaded
Jan  1 01:00:10 voipd[353]: startup (AVM Speedport W 501V 28.04.38 AVM SIP v7.01.07 Apr 18 2007 14:44:45)
[capi_oslib] not jet activated
Jan  1 01:00:10 voipd[353]: Warning: CAPI_GET_PROFILE failed - 0x1109
Jan  1 01:00:10 voipd[353]: INFO led: off (value=0)
Jan  1 01:00:10 voipd[353]: VoIP SRTP led value = 0
Jan  1 01:00:10 voipd[353]: INTERNET led value = 0
/etc/init.d/rc.S: /etc/init.d/rc.S: 475: cannot create /proc/sysrq-trigger: Directory nonexistent
[setup_irq]: irq 15 irqaction->handler 0x940cf170 (serial8250_interrupt+0x0/0x13c )

Please press Enter to activate this console. 
Starting pid 367, console /dev/ttyS0: '/bin/sh'


BusyBox v1.1.2 (2007.02.05-09:25+0000) Built-in shell (ash)
Enter 'help' for a list of built-in commands.

Jan  1 01:00:13 ar7cfgctl[430]: FactoryDefault=/etc/default/tcom/ar7.cfg (ar7)
Jan  1 01:00:13 ar7cfgctl[430]: load_config(ar7): factory default loaded
HWRevision='93'
HWRevision_ATA='1'
HWRevision_BitFileCount=''
HWRevision_Reserved1='0'
ANNEX='B'
OEM='tcom'
OEM_DEFAULT_INDEX=''
OEM_tmp='tcom'
Language='de'
Country='049'
TZ='CET-1CEST-2,M3.5.0/02:00:00,M10.5.0/03:00:00'
CONFIG_AB_COUNT='2'
CONFIG_ACCESSORY_URL='http://www.avm.de/fritzbox_apps.php?hardware=93&oem=tcom&language=de&country=&version=28.04.38&subversion='
CONFIG_ANNEX='B'
CONFIG_ASSIST='y'
CONFIG_ATA='n'
CONFIG_ATA_FULL='n'
CONFIG_AUDIO='n'
CONFIG_AURA='n'
CONFIG_BLUETOOTH='n'
CONFIG_BLUETOOTH_CTP='n'
CONFIG_BUTTON='n'
CONFIG_CAPI='y'
CONFIG_CAPI_MIPS='n'
CONFIG_CAPI_NT='n'
CONFIG_CAPI_POTS='y'
CONFIG_CAPI_TE='n'
CONFIG_CAPI_UBIK='n'
CONFIG_CAPI_XILINX='y'
CONFIG_CDROM='n'
CONFIG_CDROM_FALLBACK='n'
CONFIG_DECT='n'
CONFIG_DSL='y'
CONFIG_ECO='n'
CONFIG_ENVIRONMENT='/var/env'
CONFIG_ENVIRONMENT_PATH='/proc/sys/urlader'
CONFIG_ETH_COUNT='1'
CONFIG_FIRMWARE_URL='http://www.t-com.de/downloads'
CONFIG_FON='y'
CONFIG_FONGUI2='n'
CONFIG_FONQUALITY='y'
CONFIG_HOMEI2C='n'
CONFIG_HOSTNAME='speedport.ip'
CONFIG_I2C='n'
CONFIG_INSTALL_TYPE='ar7_4MB_1eth_2ab_pots_wlan_28776'
CONFIG_IPONE='n'
CONFIG_JFFS2='n'
CONFIG_KIDS='n'
CONFIG_LED_NO_DSL_LED='n'
CONFIG_MAILER='n'
CONFIG_MEDIACLI='n'
CONFIG_MEDIASRV='n'
CONFIG_NAND='n'
CONFIG_NFS='n'
CONFIG_OEM_DEFAULT='tcom'
CONFIG_PRODUKT='Fritz_Box_SpeedportW501V'
CONFIG_PRODUKT_NAME='Speedport W 501V'
CONFIG_RAMSIZE='16'
CONFIG_RELEASE='1'
CONFIG_ROMSIZE='4'
CONFIG_SAMBA='n'
CONFIG_SERVICEPORTAL_URL='none'
CONFIG_STOREUSRCFG='y'
CONFIG_SUBVERSION=''
CONFIG_SWAP='n'
CONFIG_TAM='n'
CONFIG_TAM_MODE='0'
CONFIG_TR064='n'
CONFIG_TR069='y'
CONFIG_UBIK2='n'
CONFIG_UPNP='n'
CONFIG_USB='n'
CONFIG_USB_HOST_AVM='n'
CONFIG_USB_HOST_TI='n'
CONFIG_USB_PRINT_SERV='n'
CONFIG_USB_STORAGE='n'
CONFIG_USB_WLAN_AUTH='n'
CONFIG_VDSL='n'
CONFIG_VERSION='04.38'
CONFIG_VERSION_MAJOR='28'
CONFIG_VLYNQ='y'
CONFIG_VLYNQ0='3'
CONFIG_VLYNQ1='0'
CONFIG_VLYNQ_PARAMS='vlynq_reset_bit_0=17'
CONFIG_VPN='n'
CONFIG_WLAN='y'
CONFIG_WLAN_1130TNET='n'
CONFIG_WLAN_1350TNET='y'
CONFIG_WLAN_GREEN='n'
CONFIG_WLAN_IPTV='n'
CONFIG_WLAN_TXPOWER='n'
CONFIG_WLAN_WDS='y'
CONFIG_WLAN_WMM='n'
CONFIG_XILINX='y'
ermittle die aktuelle TTY
tty is "/dev/ttyS0"
Serielles Terminal

Auslesen des Flashspeichers

Als Backup, aber auch für die Router-Emulation, ist es sinnvoll, den Flashspeicher auszulesen und als Datei abzuspeichern.

Prinzipiell gibt es dafür bei AVM- und vergleichbaren Routern mehrere Möglichkeiten:

• Auslesen über Bootloader (ADAM2 / EVA, serielle Konsole)
• Auslesen über Bootloader (ADAM2 / EVA, FTP-Zugang)
• Auslesen unter Linux (serielle Konsole oder Telnet-Zugang)

Die aktuelle Firmware des Speedport W501V enthält keinen Telnet-Server, und für die serielle Konsole muss das Gerät geöffnet werden. Will man das nicht, bleibt der FTP-Zugang zum Bootloader.

Ca. fünf Sekunden nach dem Einschalten des Routers läßt der Bootloader (ADAM2 oder EVA) eine FTP-Verbindung auf IP-Adresse 192.168.178.1 zu.

Das folgende Protokoll zeigt, wie man per FTP unter Linux die Dateien env, mtd1, mtd2, mtd3 und mtd4 ausliest.

$ ifconfig eth0 192.168.178.2
$ ftp -p 192.168.178.1
Connected to 192.168.178.1.
220 ADAM2 FTP Server ready
Name (192.168.178.1:xxxx): adam2
331 Password required for adam2
Password:
230 User adam2 successfully logged in
Remote system type is AVM.
ftp> debug
Debugging on (debug=1).
ftp> quote MEDIA FLSH
---> MEDIA FLSH
200 Media set to MEDIA_FLASH
ftp> get env
local: env remote: env
ftp: setsockopt (ignored): Permission denied
---> PASV
227 Entering Passive Mode (192,168,178,1,4,222)
---> RETR env
150 Opening ASCII data connection

receive aborted     <= hier muss man die Übertragen mit Strg-C abbrechen
waiting for remote to finish abort
226 Transfer complete
502 Command not implemented
1427 bytes received in 5.38 secs (0.3 kB/s)
ftp> bin
---> TYPE I
200 Type set to BINARY
ftp> get mtd1
local: mtd1 remote: mtd1
ftp: setsockopt (ignored): Permission denied
---> PASV
227 Entering Passive Mode (192,168,178,1,4,53)
---> RETR mtd1
150 Opening BINARY data connection

receive aborted
waiting for remote to finish abort
226 Transfer complete
502 Command not implemented
3866624 bytes received in 5.91 secs (638.8 kB/s)
ftp> get mtd2
local: mtd2 remote: mtd2
ftp: setsockopt (ignored): Permission denied
---> PASV
227 Entering Passive Mode (192,168,178,1,5,231)
---> RETR mtd2
150 Opening BINARY data connection

receive aborted
waiting for remote to finish abort
226 Transfer complete
502 Command not implemented
65536 bytes received in 10.25 secs (6.2 kB/s)
ftp> get mtd3
local: mtd3 remote: mtd3
ftp: setsockopt (ignored): Permission denied
---> PASV
227 Entering Passive Mode (192,168,178,1,6,87)
---> RETR mtd3
150 Opening BINARY data connection

receive aborted
waiting for remote to finish abort
226 Transfer complete
502 Command not implemented
131072 bytes received in 8.70 secs (14.7 kB/s)
ftp> get mtd4
local: mtd4 remote: mtd4
ftp: setsockopt (ignored): Permission denied
---> PASV
227 Entering Passive Mode (192,168,178,1,5,150)
---> RETR mtd4
150 Opening BINARY data connection

receive aborted
waiting for remote to finish abort
226 Transfer complete
502 Command not implemented
131072 bytes received in 13.15 secs (9.7 kB/s)
ftp> bye
---> QUIT
221 Thank you for using the FTP service on ADAM2
$ cat mtd2 mtd1 mtd3 mtd4 >flashimage.bin

Mit dem letzten Kommando werden die vier Speicherauszüge in der richtigen Reihenfolge zu einem Gesamtabzug flashimage.bin vereinigt. Dieser kann für die Emulation mit QEMU direkt verwendet werden.

Wichtige Links

• zurück
• Zurück zu Fritzbox
• Zurück zu Hauptseite