Speedport W 501V
Aus Zebradem WIKI
Zur Navigation springenZur Suche springen
Hardware
Speedport W 501V unterscheidet sich in Prozessor (TNETD7200) und WLAN (TNETW1350A) von den üblichen AR7-Vertretern, ist aber ansonsten den anderen Mitgliedern der Fritz-Familie sehr ähnlich.
Bootprotokoll
Das folgende Bootprotokoll ist mit einer Emulation (QEMU) erzeugt worden.
ram_offset (internal RAM) = 2000000 (AVM) EVA Revision: 1.153 Version: 1153 (C) Copyright 2005 AVM Date: May 23 2006 Time: 12:05:09 (0) 2 0-1001 [FLASH:] MACRONIX Top-Flash 4MB [FLASH:](Eraseregion [0] 63 sectors a 64kB) [FLASH:](Eraseregion [1] 8 sectors a 8kB) [SYSTEM:] AR7 on 150MHz/125MHz AVM_Ar7 >AVM decompress Kernel: .................done start kernel [ohio_pre_init] System Clk = 12500000 Hz LINUX started... Linux version 2.6.13.1-ohio (686) (gcc version 3.4.6) #9 Wed Apr 4 13:48:08 CEST 2007 memsize=16 MByte flashsize=4 MByte &_end=0x942096e8 PFN_ALIGN(&_end)=0x9420a000 CPHYSADDR(PFN_ALIGN(&_end))=0x1420a000 memsize=0x1000000 CPU revision is: 00018448 [ohio_gpio_init] Determined physical RAM map: memory: 0020a000 @ 14000000 (reserved) memory: 00df6000 @ 1420a000 (usable) On node 0 totalpages: 4096 [alloc_node_mem_map] reduce size from 2752544 Bytes to 131104 Bytes [alloc_node_mem_map]: (org) sizeof(mem_map) = 131104 mem_map=0x9420d000-0x9422d020 [alloc_node_mem_map]: sizeof(mem_map) = 2752544 mem_map=0x93f8d000-0x9422d020 zone=0 zone_size[j]=0x86016 realsize=4096 DMA zone: 4096 pages, LIFO batch:1 zone=1 zone_size[j]=0x0 realsize=0 Normal zone: 0 pages, LIFO batch:1 zone=2 zone_size[j]=0x0 realsize=0 HighMem zone: 0 pages, LIFO batch:1 Built 1 zonelists Kernel command line: console=ttyS0,38400n8r [ld_mmu_r4xx0] memcpy((void *)(CAC_BASE + 0x100), &except_vec2_generic, 0x30) Primary instruction cache 16kB, physically tagged, 4-way, linesize 16 bytes. Primary data cache 16kB, 4-way, linesize 16 bytes. Synthesized TLB refill handler (20 instructions). Base=0x941df63c TLB synthesizer field overflow (simm) Synthesized TLB load handler fastpath (34 instructions) Base=0x941e2620. TLB synthesizer field overflow (simm) Synthesized TLB store handler fastpath (34 instructions) Base=0x941e2820. TLB synthesizer field overflow (simm) Synthesized TLB modify handler fastpath (33 instructions) Base=0x941e2a20. PID hash table entries: 128 (order: 7, 2048 bytes) CPU frequency 176.64 MHz Using 88.320 MHz high precision timer. [setup_irq]: irq 127 irqaction->handler 0x94042530 (no_action+0x0/0x8 ) [register_console] enable commandline console 0 Dentry cache hash table entries: 4096 (order: 2, 16384 bytes) Inode-cache hash table entries: 2048 (order: 1, 8192 bytes) Memory: 14116k/14296k available (1468k kernel code, 164k reserved, 340k data, 112k init, 0k highmem) totalram_pages= 3533 Calibrating delay loop... 629.14 BogoMIPS (lpj=3145728) loops_per_jiffy=3145728 Mount-cache hash table entries: 512 Checking for 'wait' instruction... available. NET: Registered protocol family 16 Can't analyze prologue code at 9416d748 Squashfs 2.2-r2b (released 2006/02/23) (C) 2002-2005 Phillip Lougher [avm] configured: watchdog eventled enable direct gpio AR7WDT: Watchdog Driver for AR7 Hardware (Version 1.0, build: Apr 4 2007 13:46:17) Serial: 8250/16550 driver $Revision: 1.90 $ 1 ports, IRQ sharing disabled [uart_add_one_port] ttyS0 at MMIO 0x0 (irq = 15) is a OHIO_UART [uart_add_one_port] dont register console port->type = 16 port->cons = 0x941a7450 port->cons->flags = 0x7 [uart_add_one_port] success io scheduler noop registered [cpmac] cpmac_if_register, dev eth0 (phy_id 0) registered tun: Universal TUN/TAP device driver, 1.6 tun: (C) 1999-2004 Max Krasnyansky <[email protected]> physmap flash device: 400000 at 10000000 phys_mapped_flash: Found 1 x16 devices at 0x0 in 16-bit bank [genprobe_ident_chips] 4 i 0 j 0 [genprobe_ident_chips] 5 i 0 j 1 Amd/Fujitsu Extended Query Table at 0x0040 phys_mapped_flash: Swapping erase regions for broken CFI table. number of CFI chips: 1 RedBoot partition parsing not available Generic platform RAM MTD, (c) 2004 Simtec Electronics Ohio flash driver (size->0x400000 mem->0x10000000) flash_size=0x400000 flash_mask=0x7fffff Ohio flash memory: Found 1 x16 devices at 0x0 in 16-bit bank [genprobe_ident_chips] 4 i 0 j 0 [genprobe_ident_chips] 5 i 0 j 1 Amd/Fujitsu Extended Query Table at 0x0040 Ohio flash memory: Swapping erase regions for broken CFI table. number of CFI chips: 1 [mtd]: set to default: jffs2_size = 0x20 * 64KByte (0x200000 Bytes) [ohio_find_hidden_filesystem]: super block found: bytes_used: 0x2f7da6/3112358 [init_ohio_flash] find hidden filesystem size=0x314300 offset=0xabd00 [mtd] configure jffs2 partition [mtd] fs_size=0x3a0000 max=0x10000 is=0x200000 max jffs2_size value 1 [mtd] ERROR jffs2_size too big, reduce to max [mtd] ohio_flash_map: name=Ohio flash memory bankwidth=2 virt=0xb0000000 phys=0x10000000 size=0x400000 Creating 7 MTD partitions on "Ohio flash memory": 0x000abd00-0x003c0000 : "filesystem" 'nor-flash' 'Bits can be cleared (flash)' 'Has an erase function' mtd: partition "filesystem" doesn't start on an erase block boundary -- force read-only 0x00010000-0x003c0000 : "kernel" 'nor-flash' 'Bits can be cleared (flash)' 'Has an erase function' 0x00000000-0x00010000 : "bootloader" 'nor-flash' 'Bits can be cleared (flash)' 'Has an erase function' 0x003c0000-0x003e0000 : "tffs (1)" 'nor-flash' 'Bits can be cleared (flash)' 'Has an erase function' 0x003e0000-0x00400000 : "tffs (2)" 'nor-flash' 'Bits can be cleared (flash)' 'Has an erase function' 0x003b0000-0x003c0000 : "jffs2" 'nor-flash' 'Bits can be cleared (flash)' 'Has an erase function' 0x00010000-0x003b0000 : "Kernel without jffs2" 'nor-flash' 'Bits can be cleared (flash)' 'Has an erase function' partition_info[0]: name=filesystem offset=abd00 size=314300 partition_info[0]: 0xb00abd00: 0x73717368 0x29b partition_info[1]: name=kernel offset=10000 size=3b0000 partition_info[1]: 0xb0010000: 0xfeed1281 0x9bc03 partition_info[2]: name=bootloader offset=0 size=10000 partition_info[2]: 0xb0000000: 0x40809000 0x40809800 partition_info[3]: name=tffs (1) offset=3c0000 size=20000 partition_info[3]: 0xb03c0000: 0x40001 0xfbffffff partition_info[4]: name=tffs (2) offset=3e0000 size=20000 partition_info[4]: 0xb03e0000: 0x40001 0xfcffffff partition_info[5]: name=jffs2 offset=3b0000 size=10000 partition_info[5]: 0xb03b0000: 0xffffffff 0xffffffff partition_info[6]: name=Kernel without jffs2 offset=10000 size=3a0000 partition_info[6]: 0xb0010000: 0xfeed1281 0x9bc03 NET: Registered protocol family 2 IP route cache hash table entries: 256 (order: -2, 1024 bytes) TCP established hash table entries: 1024 (order: 1, 8192 bytes) TCP bind hash table entries: 1024 (order: 0, 4096 bytes) TCP: Hash tables configured (established 1024 bind 1024) TCP reno registered TCP bic registered NET: Registered protocol family 1 NET: Registered protocol family 17 NET: Registered protocol family 8 NET: Registered protocol family 20 [setup_irq]: irq 1 irqaction->handler 0x94001390 (dummy_timer_irq+0x0/0x14 ) [setup_irq]: irq 6 irqaction->handler 0x940013a4 (dummy_system_irq_2+0x0/0x14 ) [ohio_late_init] TFFS: tiny flash file system driver. GPL (c) AVM Berlin (Version 2.0) mount on mtd4 and mtd5 (double buffering) Adam2 environment variables API installed. [prepare_namespace] new mount root /dev/mtdblock1 use lzma compression VFS: Mounted root (squashfs filesystem) readonly. Freeing prom memory: 0kb freed Freeing unused kernel memory: 112k freed (3561 free) [setup_irq]: irq 15 irqaction->handler 0x940cf170 (serial8250_interrupt+0x0/0x13c ) [avm_led] from virt led ('festnetz', 2) not registered [avm_led] format error: "MAP Name,Instanz TO Name,Instanz" [avm_led_load_config] Syntax error in led config file /etc/led.conf at "MAP festnetz,2 TO nu" [setup_irq]: irq 15 irqaction->handler 0x940cf170 (serial8250_interrupt+0x0/0x13c ) [setup_irq]: irq 15 irqaction->handler 0x940cf170 (serial8250_interrupt+0x0/0x13c ) init started: BusyBox v1.1.2 (2007.02.05-09:25+0000) multi-call binary init started: BusyBox v1.1.2 (2007.02.05-09:25+0000) multi-call binary Starting pid 16, console /dev/ttyS0: '/etc/init.d/rc.S' AR7WDT: System Init UEberwachung 120 Sekunden TFFS Name Table 9 Jan 1 00:00:02 ar7cfgctl[85]: FactoryDefault=/etc/default/tcom/ar7.cfg (ar7) Jan 1 00:00:02 ar7cfgctl[85]: load_config(ar7): factory default loaded HWRevision 93 ProductID Fritz_Box_SpeedportW501V SerialNumber 0000000000000000 annex B autoload yes bootloaderVersion 1.153 bootserport tty0 bluetooth 00:04:0E:FF:FF:07 cpufrequency 150000000 firstfreeaddress 0x946AE500 firmware_version tcom firmware_info 28.04.38 flashsize 0x00400000 maca 00:1A:4F:xx:xx:xx macb 00:1A:4F:xx:xx:xx macwlan 00:1A:4F:xx:xx:xx macdsl 00:1A:4F:xx:xx:xx memsize 0x01000000 modetty0 38400,n,8,1,hw modetty1 38400,n,8,1,hw mtd0 0x90000000,0x90000000 mtd1 0x90010000,0x903C0000 mtd2 0x90000000,0x90010000 mtd3 0x903C0000,0x903E0000 mtd4 0x903E0000,0x90400000 my_ipaddress 192.168.178.1 prompt AVM_Ar7 ptest reserved 00:04:0E:FF:FF:00 req_fullrate_freq 125000000 sysfrequency 125000000 urlader-version 1153 usb_board_mac 00:1A:4F:xx:xx:xx usb_rndis_mac 00:1A:4F:xx:xx:xx usb_device_id 0x5401 usb_revision_id 0x0200 usb_device_name USB DSL Device usb_manufacturer_name AVM wlan_cal 03F5,0025,0011,00E1,010A,00F2,010A,02FB,0343 Jan 1 01:00:02 ar7cfgctl[161]: FactoryDefault=/etc/default/tcom/ar7.cfg (ar7) Jan 1 01:00:02 ar7cfgctl[161]: load_config(ar7): factory default loaded HWRevision='93' HWRevision_ATA='1' HWRevision_BitFileCount='' HWRevision_Reserved1='0' ANNEX='B' OEM='tcom' OEM_DEFAULT_INDEX='' OEM_tmp='tcom' Language='de' Country='049' TZ='CET-1CEST-2,M3.5.0/02:00:00,M10.5.0/03:00:00' CONFIG_AB_COUNT='2' CONFIG_ACCESSORY_URL='http://www.avm.de/fritzbox_apps.php?hardware=93&oem=tcom&language=de&country=&version=28.04.38&subversion=' CONFIG_ANNEX='B' CONFIG_ASSIST='y' CONFIG_ATA='n' CONFIG_ATA_FULL='n' CONFIG_AUDIO='n' CONFIG_AURA='n' CONFIG_BLUETOOTH='n' CONFIG_BLUETOOTH_CTP='n' CONFIG_BUTTON='n' CONFIG_CAPI='y' CONFIG_CAPI_MIPS='n' CONFIG_CAPI_NT='n' CONFIG_CAPI_POTS='y' CONFIG_CAPI_TE='n' CONFIG_CAPI_UBIK='n' CONFIG_CAPI_XILINX='y' CONFIG_CDROM='n' CONFIG_CDROM_FALLBACK='n' CONFIG_DECT='n' CONFIG_DSL='y' CONFIG_ECO='n' CONFIG_ENVIRONMENT='/var/env' CONFIG_ENVIRONMENT_PATH='/proc/sys/urlader' CONFIG_ETH_COUNT='1' CONFIG_FIRMWARE_URL='http://www.t-com.de/downloads' CONFIG_FON='y' CONFIG_FONGUI2='n' CONFIG_FONQUALITY='y' CONFIG_HOMEI2C='n' CONFIG_HOSTNAME='speedport.ip' CONFIG_I2C='n' CONFIG_INSTALL_TYPE='ar7_4MB_1eth_2ab_pots_wlan_28776' CONFIG_IPONE='n' CONFIG_JFFS2='n' CONFIG_KIDS='n' CONFIG_LED_NO_DSL_LED='n' CONFIG_MAILER='n' CONFIG_MEDIACLI='n' CONFIG_MEDIASRV='n' CONFIG_NAND='n' CONFIG_NFS='n' CONFIG_OEM_DEFAULT='tcom' CONFIG_PRODUKT='Fritz_Box_SpeedportW501V' CONFIG_PRODUKT_NAME='Speedport W 501V' CONFIG_RAMSIZE='16' CONFIG_RELEASE='1' CONFIG_ROMSIZE='4' CONFIG_SAMBA='n' CONFIG_SERVICEPORTAL_URL='none' CONFIG_STOREUSRCFG='y' CONFIG_SUBVERSION='' CONFIG_SWAP='n' CONFIG_TAM='n' CONFIG_TAM_MODE='0' CONFIG_TR064='n' CONFIG_TR069='y' CONFIG_UBIK2='n' CONFIG_UPNP='n' CONFIG_USB='n' CONFIG_USB_HOST_AVM='n' CONFIG_USB_HOST_TI='n' CONFIG_USB_PRINT_SERV='n' CONFIG_USB_STORAGE='n' CONFIG_USB_WLAN_AUTH='n' CONFIG_VDSL='n' CONFIG_VERSION='04.38' CONFIG_VERSION_MAJOR='28' CONFIG_VLYNQ='y' CONFIG_VLYNQ0='3' CONFIG_VLYNQ1='0' CONFIG_VLYNQ_PARAMS='vlynq_reset_bit_0=17' CONFIG_VPN='n' CONFIG_WLAN='y' CONFIG_WLAN_1130TNET='n' CONFIG_WLAN_1350TNET='y' CONFIG_WLAN_GREEN='n' CONFIG_WLAN_IPTV='n' CONFIG_WLAN_TXPOWER='n' CONFIG_WLAN_WDS='y' CONFIG_WLAN_WMM='n' CONFIG_XILINX='y' set 'Activate Wizzard' mknod: /var/flash/ar7.cfg: File exists checkempty: : No such file or directory checkempty: : No such file or directory checkempty: warning, /var/flash/ar7.cfg not found - nop checkempty: : No such file or directory checkempty: warning, /var/flash/voip.cfg not found - nop Piglet: module license ' (C) Copyright 2005 by AVM ' taints kernel. EMIF: asize=0 ta=3 r_hold=0 w_strobe=6 r_strobe=6 ew=0 attempting to load DSL Firmware '/lib/modules/microvoip-dsl.bin' **** ANNEX: 'B' ************************************* setting DSL Firmware to Annex B registered device TI Avalanche SAR tiatm driver (patch_annex=0xc0053e2c) Error : Failed to Initialize the DSL subsystem !!. insmod: cannot insert `/lib/modules/2.6.13.1-ohio/kernel/drivers/atm/avm_atm/tiatm.ko': Success (19): Success modprobe: failed to load module tiatm *** ERROR: load tiatm failed *** [tiatm] Error at firmware file: Code=-2insmod: cannot insert `/lib/modules/2.6.13.1-ohio/kernel/drivers/atm/avm_atm/tiatm.ko': Success (19): Success <4>ubik2: Unknown symbol atm_dsp_trigger_ubik2 ubik2: Unknown symbol atm_dsp_deactivate_ubik2 ubik2: Unknown symbol atm_dsp_activate_ubik2 ubik2: Unknown symbol atm_dsp_register_ubik2 ubik2: Unknown symbol atm_dsp_release_ubik2 ubik2: Unknown symbol atm_dsp_reactivate_ubik2 insmod: cannot insert `/lib/modules/2.6.13.1-ohio/kernel/drivers/char/ubik2/ubik2.ko': Success (2): Success modprobe: failed to load module ubik2 cat: /dev/debug: No such device or address [tiatm] Error at firmware file: Code=-2insmod: cannot insert `/lib/modules/2.6.13.1-ohio/kernel/drivers/atm/avm_atm/tiatm.ko': Success (19): Success <4>ubik2: Unknown symbol atm_dsp_trigger_ubik2 ubik2: Unknown symbol atm_dsp_deactivate_ubik2 ubik2: Unknown symbol atm_dsp_activate_ubik2 ubik2: Unknown symbol atm_dsp_register_ubik2 ubik2: Unknown symbol atm_dsp_release_ubik2 ubik2: Unknown symbol atm_dsp_reactivate_ubik2 insmod: cannot insert `/lib/modules/2.6.13.1-ohio/kernel/drivers/char/ubik2/ubik2.ko': Success (2): Success isdn_fbox_fon4: Unknown symbol ubik2_rx_tasklet_control isdn_fbox_fon4: Unknown symbol ubik2_ul_rx_buffer_conf isdn_fbox_fon4: Unknown symbol ubik2_ul_tx_trigger isdn_fbox_fon4: Unknown symbol ubik2_ul_register isdn_fbox_fon4: Unknown symbol ubik2_ul_getchanfromhandle isdn_fbox_fon4: Unknown symbol ubik2_ul_release isdn_fbox_fon4: Unknown symbol ubik2_DebugPrintf insmod: cannot insert `/lib/modules/2.6.13.1-ohio/kernel/drivers/isdn/isdn_fon4/zzz/isdn_fbox.ko': Success (2): Success modprobe: failed to load module isdn_fbox Jan 1 01:00:06 ar7cfgctl[264]: FactoryDefault=/etc/default/tcom/ar7.cfg (ar7) Jan 1 01:00:06 ar7cfgctl[264]: load_config(ar7): factory default loaded kdsldmod: init start (Apr 18 2007 14:44:44) sizeof(struct sk_buff)=160 kdsldmod: init done kdsld: PPP led: off (value=0) Jan 1 01:00:07 ctlmgr[295]: process priority is 19 Jan 1 01:00:07 ctlmgr[297]: FactoryDefault=/etc/default/tcom/ar7.cfg (ar7) Jan 1 01:00:07 wlancfgctl[302]: FactoryDefault=/etc/default/tcom/wlan.cfg (wlan) Jan 1 01:00:07 wlancfgctl[302]: load_config(wlan): factory default loaded MAC WLAN: 00:1A:4F:91:72:C0 WLAN is not enabled SIOCGIFFLAGS: No such device Jan 1 01:00:07 ctlmgr[297]: load_config(ar7): factory default loaded SIOCGIFFLAGS: No such device SIOCGIFFLAGS: No such device SIOCGIFFLAGS: No such device SIOCGIFFLAGS: No such device SIOCGIFFLAGS: No such device /etc/init.d/rc.net: /etc/init.d/rc.net: 372: igdd: not found Jan 1 01:00:08 websrv[318]: FactoryDefault=/etc/default/tcom/ar7.cfg (ar7) Jan 1 01:00:08 ctlmgr[297]: FactoryDefault=/etc/default/tcom/voip.cfg (voip) Jan 1 01:00:08 websrv[318]: load_config(ar7): factory default loaded Jan 1 01:00:08 ctlmgr[297]: load_config(voip): factory default loaded Jan 1 01:00:08 ctlmgr[297]: FactoryDefault=/etc/default/tcom/wlan.cfg (wlan) Jan 1 01:00:08 ctlmgr[297]: load_config(wlan): factory default loaded Jan 1 01:00:08 ctlmgr[297]: TR-069 is activated in tr069.cfg Jan 1 01:00:08 websrv[318]: startup (Apr 18 2007 14:42:12) Jan 1 01:00:08 ctlmgr[297]: dlopen(/usr/share/ctlmgr/libdect.so) failed: File not found Jan 1 01:00:08 ctlmgr[297]: dlopen(/usr/share/ctlmgr/libtamconf.so) failed: File not found Jan 1 01:00:08 ctlmgr[297]: dlopen(/usr/share/ctlmgr/libuser.so) failed: File not found Jan 1 01:00:08 ctlmgr[297]: mapping to info-LED already exist Jan 1 01:00:08 ctlmgr[297]: box init ok Jan 1 01:00:08 ctlmgr[297]: /dev/avm_power <-- MODE=dsl Jan 1 01:00:08 ctlmgr[297]: WAN (ata) led value = 0 Jan 1 01:00:08 ctlmgr[297]: TR069_Init() TR069_Init(full) Jan 1 01:00:08 ctlmgr[297]: TR069_Full_Init Jan 1 01:00:08 ctlmgr[297]: get_VoiceProfileNumberOfEntries() get_VoiceProfileNumberOfEntries 0 voipaccounts existing Jan 1 01:00:08 ctlmgr[297]: Register_WANConnectionDevice() adding 'connection_voip' to TR069Mapper_AddCallbacksForCtlmgrList Jan 1 01:00:08 ctlmgr[297]: Register_Portmapping() adding 'rule' to TR069Mapper_AddCallbacksForCtlmgrList Jan 1 01:00:08 ctlmgr[297]: Register_VoiceProfile() adding 'sip' to TR069Mapper_AddCallbacksForCtlmgrList Jan 1 01:00:08 ctlmgr[297]: Register_VoiceProfile() adding 'telcfg' to TR069Mapper_AddCallbacksForCtlmgrList Jan 1 01:00:08 ctlmgr[297]: TR069_Full_Init() TR069_Full_Init() ret=0 Jan 1 01:00:08 ctlmgr[297]: TR069_Init returned 0 Jan 1 01:00:08 ctlmgr[297]: TR069_Init() returned 0 Jan 1 01:00:08 ctlmgr[297]: verbose: DISABLED Jan 1 01:00:09 multid[327]: FactoryDefault=/etc/default/tcom/ar7.cfg (ar7) Jan 1 01:00:09 multid[327]: load_config(ar7): factory default loaded Jan 1 01:00:09 multid[327]: startup (Apr 18 2007 14:42:32) [cpmac] cpmac_main_ioctl, unknown ioctl 35142 device eth0 entered promiscuous mode [setup_irq]: irq 27 irqaction->handler 0x940df8bc (cpmac_main_isr+0x0/0x78 ) lan: port 1(eth0) entering learning state lan: topology change detected, propagating lan: port 1(eth0) entering forwarding state Jan 1 01:00:09 multid[329]: DHCPD on lan Jan 1 01:00:09 multid[329]: dhcpd: can't open /var/flash/multid.leases - No such file or directory (2) Jan 1 01:00:09 multid[329]: DDNS: no valid accounts Jan 1 01:00:09 multid[329]: ONLINE: script /bin/onlinechanged not found. Jan 1 01:00:09 multid[329]: interface eth0 new. Jan 1 01:00:09 multid[329]: interface lo new. Jan 1 01:00:09 multid[329]: interface lo up. Jan 1 01:00:09 multid[329]: verbose: DISABLED Jan 1 01:00:09 dsld[334]: FactoryDefault=/etc/default/tcom/ar7.cfg (ar7) Jan 1 01:00:09 dsld[334]: load_config(ar7): factory default loaded Jan 1 01:00:09 dsld[334]: startup (Apr 18 2007 14:43:23) Jan 1 01:00:09 dsld[336]: DSL Mac 00:1a:4f:4d:47:51 Jan 1 01:00:09 dsld[336]: VOIP Mac 00:1a:4f:4d:47:52 Jan 1 01:00:09 dsld[336]: VCC2 Mac 00:1a:4f:4d:47:53 Jan 1 01:00:09 dsld[336]: VCC3 Mac 00:1a:4f:4d:47:50 Jan 1 01:00:09 dsld[336]: voip: ppptarget voip disabled, ignored Jan 1 01:00:09 dsld[336]: compiled tc filter to 0 classes Jan 1 01:00:09 dsld[336]: compiled tc filter tc:rtp,sip to 2 classes Jan 1 01:00:09 dsld[336]: compiled tc filter tc:tcp_ack to 1 classes Jan 1 01:00:09 dsld[336]: compiled tc filter tc:dns,sipdns,ntpdns,tr069dns to 4 classes Jan 1 01:00:09 dsld[336]: compiled tc filter tc:http_req,tr069 to 2 classes Jan 1 01:00:09 dsld[336]: compiled tc filter tc:icmp to 1 classes Jan 1 01:00:09 dsld[336]: compiled tc filter to 0 classes Jan 1 01:00:09 dsld[336]: verbose: DISABLED telefon: use clock_gettime(CLOCK_MONOTONIC)! telefon: SIGCHLD received! telefon: WARNING No config file '/var/flash/fx_def' ! telefon: WARNING No CG file '/var/flash/fx_cg' ! [capi_oslib] not jet activated telefon: kein Capi! /etc/init.d/rc.voip: /etc/init.d/rc.voip: 98: pbd: not found Jan 1 01:00:10 ar7cfgctl[359]: FactoryDefault=/etc/default/tcom/ar7.cfg (ar7) Jan 1 01:00:10 ar7cfgctl[359]: load_config(ar7): factory default loaded run_clock demon started AR7WDT: System Init UEberwachung abgeschlossen (110930 ms noch verfuegbar) Jan 1 01:00:10 voipd[353]: FactoryDefault=/etc/default/tcom/voip.cfg (voip) Jan 1 01:00:10 voipd[353]: load_config(voip): factory default loaded Jan 1 01:00:10 voipd[353]: startup (AVM Speedport W 501V 28.04.38 AVM SIP v7.01.07 Apr 18 2007 14:44:45) [capi_oslib] not jet activated Jan 1 01:00:10 voipd[353]: Warning: CAPI_GET_PROFILE failed - 0x1109 Jan 1 01:00:10 voipd[353]: INFO led: off (value=0) Jan 1 01:00:10 voipd[353]: VoIP SRTP led value = 0 Jan 1 01:00:10 voipd[353]: INTERNET led value = 0 /etc/init.d/rc.S: /etc/init.d/rc.S: 475: cannot create /proc/sysrq-trigger: Directory nonexistent [setup_irq]: irq 15 irqaction->handler 0x940cf170 (serial8250_interrupt+0x0/0x13c ) Please press Enter to activate this console. Starting pid 367, console /dev/ttyS0: '/bin/sh' BusyBox v1.1.2 (2007.02.05-09:25+0000) Built-in shell (ash) Enter 'help' for a list of built-in commands. Jan 1 01:00:13 ar7cfgctl[430]: FactoryDefault=/etc/default/tcom/ar7.cfg (ar7) Jan 1 01:00:13 ar7cfgctl[430]: load_config(ar7): factory default loaded HWRevision='93' HWRevision_ATA='1' HWRevision_BitFileCount='' HWRevision_Reserved1='0' ANNEX='B' OEM='tcom' OEM_DEFAULT_INDEX='' OEM_tmp='tcom' Language='de' Country='049' TZ='CET-1CEST-2,M3.5.0/02:00:00,M10.5.0/03:00:00' CONFIG_AB_COUNT='2' CONFIG_ACCESSORY_URL='http://www.avm.de/fritzbox_apps.php?hardware=93&oem=tcom&language=de&country=&version=28.04.38&subversion=' CONFIG_ANNEX='B' CONFIG_ASSIST='y' CONFIG_ATA='n' CONFIG_ATA_FULL='n' CONFIG_AUDIO='n' CONFIG_AURA='n' CONFIG_BLUETOOTH='n' CONFIG_BLUETOOTH_CTP='n' CONFIG_BUTTON='n' CONFIG_CAPI='y' CONFIG_CAPI_MIPS='n' CONFIG_CAPI_NT='n' CONFIG_CAPI_POTS='y' CONFIG_CAPI_TE='n' CONFIG_CAPI_UBIK='n' CONFIG_CAPI_XILINX='y' CONFIG_CDROM='n' CONFIG_CDROM_FALLBACK='n' CONFIG_DECT='n' CONFIG_DSL='y' CONFIG_ECO='n' CONFIG_ENVIRONMENT='/var/env' CONFIG_ENVIRONMENT_PATH='/proc/sys/urlader' CONFIG_ETH_COUNT='1' CONFIG_FIRMWARE_URL='http://www.t-com.de/downloads' CONFIG_FON='y' CONFIG_FONGUI2='n' CONFIG_FONQUALITY='y' CONFIG_HOMEI2C='n' CONFIG_HOSTNAME='speedport.ip' CONFIG_I2C='n' CONFIG_INSTALL_TYPE='ar7_4MB_1eth_2ab_pots_wlan_28776' CONFIG_IPONE='n' CONFIG_JFFS2='n' CONFIG_KIDS='n' CONFIG_LED_NO_DSL_LED='n' CONFIG_MAILER='n' CONFIG_MEDIACLI='n' CONFIG_MEDIASRV='n' CONFIG_NAND='n' CONFIG_NFS='n' CONFIG_OEM_DEFAULT='tcom' CONFIG_PRODUKT='Fritz_Box_SpeedportW501V' CONFIG_PRODUKT_NAME='Speedport W 501V' CONFIG_RAMSIZE='16' CONFIG_RELEASE='1' CONFIG_ROMSIZE='4' CONFIG_SAMBA='n' CONFIG_SERVICEPORTAL_URL='none' CONFIG_STOREUSRCFG='y' CONFIG_SUBVERSION='' CONFIG_SWAP='n' CONFIG_TAM='n' CONFIG_TAM_MODE='0' CONFIG_TR064='n' CONFIG_TR069='y' CONFIG_UBIK2='n' CONFIG_UPNP='n' CONFIG_USB='n' CONFIG_USB_HOST_AVM='n' CONFIG_USB_HOST_TI='n' CONFIG_USB_PRINT_SERV='n' CONFIG_USB_STORAGE='n' CONFIG_USB_WLAN_AUTH='n' CONFIG_VDSL='n' CONFIG_VERSION='04.38' CONFIG_VERSION_MAJOR='28' CONFIG_VLYNQ='y' CONFIG_VLYNQ0='3' CONFIG_VLYNQ1='0' CONFIG_VLYNQ_PARAMS='vlynq_reset_bit_0=17' CONFIG_VPN='n' CONFIG_WLAN='y' CONFIG_WLAN_1130TNET='n' CONFIG_WLAN_1350TNET='y' CONFIG_WLAN_GREEN='n' CONFIG_WLAN_IPTV='n' CONFIG_WLAN_TXPOWER='n' CONFIG_WLAN_WDS='y' CONFIG_WLAN_WMM='n' CONFIG_XILINX='y' ermittle die aktuelle TTY tty is "/dev/ttyS0" Serielles Terminal
Auslesen des Flashspeichers
Als Backup, aber auch für die Router-Emulation, ist es sinnvoll, den Flashspeicher auszulesen und als Datei abzuspeichern.
Prinzipiell gibt es dafür bei AVM- und vergleichbaren Routern mehrere Möglichkeiten:
- Auslesen über Bootloader (ADAM2 / EVA, serielle Konsole)
- Auslesen über Bootloader (ADAM2 / EVA, FTP-Zugang)
- Auslesen unter Linux (serielle Konsole oder Telnet-Zugang)
Die aktuelle Firmware des Speedport W501V enthält keinen Telnet-Server, und für die serielle Konsole muss das Gerät geöffnet werden. Will man das nicht, bleibt der FTP-Zugang zum Bootloader.
Ca. fünf Sekunden nach dem Einschalten des Routers läßt der Bootloader (ADAM2 oder EVA) eine FTP-Verbindung auf IP-Adresse 192.168.178.1 zu.
Das folgende Protokoll zeigt, wie man per FTP unter Linux die Dateien env, mtd1, mtd2, mtd3 und mtd4 ausliest.
$ ifconfig eth0 192.168.178.2 $ ftp -p 192.168.178.1 Connected to 192.168.178.1. 220 ADAM2 FTP Server ready Name (192.168.178.1:xxxx): adam2 331 Password required for adam2 Password: 230 User adam2 successfully logged in Remote system type is AVM. ftp> debug Debugging on (debug=1). ftp> quote MEDIA FLSH ---> MEDIA FLSH 200 Media set to MEDIA_FLASH ftp> get env local: env remote: env ftp: setsockopt (ignored): Permission denied ---> PASV 227 Entering Passive Mode (192,168,178,1,4,222) ---> RETR env 150 Opening ASCII data connection receive aborted <= hier muss man die Übertragen mit Strg-C abbrechen waiting for remote to finish abort 226 Transfer complete 502 Command not implemented 1427 bytes received in 5.38 secs (0.3 kB/s) ftp> bin ---> TYPE I 200 Type set to BINARY ftp> get mtd1 local: mtd1 remote: mtd1 ftp: setsockopt (ignored): Permission denied ---> PASV 227 Entering Passive Mode (192,168,178,1,4,53) ---> RETR mtd1 150 Opening BINARY data connection receive aborted waiting for remote to finish abort 226 Transfer complete 502 Command not implemented 3866624 bytes received in 5.91 secs (638.8 kB/s) ftp> get mtd2 local: mtd2 remote: mtd2 ftp: setsockopt (ignored): Permission denied ---> PASV 227 Entering Passive Mode (192,168,178,1,5,231) ---> RETR mtd2 150 Opening BINARY data connection receive aborted waiting for remote to finish abort 226 Transfer complete 502 Command not implemented 65536 bytes received in 10.25 secs (6.2 kB/s) ftp> get mtd3 local: mtd3 remote: mtd3 ftp: setsockopt (ignored): Permission denied ---> PASV 227 Entering Passive Mode (192,168,178,1,6,87) ---> RETR mtd3 150 Opening BINARY data connection receive aborted waiting for remote to finish abort 226 Transfer complete 502 Command not implemented 131072 bytes received in 8.70 secs (14.7 kB/s) ftp> get mtd4 local: mtd4 remote: mtd4 ftp: setsockopt (ignored): Permission denied ---> PASV 227 Entering Passive Mode (192,168,178,1,5,150) ---> RETR mtd4 150 Opening BINARY data connection receive aborted waiting for remote to finish abort 226 Transfer complete 502 Command not implemented 131072 bytes received in 13.15 secs (9.7 kB/s) ftp> bye ---> QUIT 221 Thank you for using the FTP service on ADAM2 $ cat mtd2 mtd1 mtd3 mtd4 >flashimage.bin
Mit dem letzten Kommando werden die vier Speicherauszüge in der richtigen Reihenfolge zu einem Gesamtabzug flashimage.bin vereinigt. Dieser kann für die Emulation mit QEMU direkt verwendet werden.
