Speedport W 501V

Aus Zebradem WIKI
Version vom 3. November 2012, 08:15 Uhr von Mandy28 (Diskussion | Beiträge)
(Unterschied) ← Nächstältere Version | Aktuelle Version (Unterschied) | Nächstjüngere Version → (Unterschied)
Zur Navigation springenZur Suche springen

Das Board mit Freiheiten




Hardware

Speedport W 501V unterscheidet sich in Prozessor (TNETD7200) und WLAN (TNETW1350A) von den üblichen AR7-Vertretern, ist aber ansonsten den anderen Mitgliedern der Fritz-Familie sehr ähnlich.

Bootprotokoll

Das folgende Bootprotokoll ist mit einer Emulation (QEMU) erzeugt worden. 

ram_offset (internal RAM) = 2000000

(AVM) EVA Revision: 1.153 Version: 1153
(C) Copyright 2005 AVM Date: May 23 2006 Time: 12:05:09 (0) 2 0-1001

[FLASH:] MACRONIX Top-Flash 4MB 
[FLASH:](Eraseregion [0] 63 sectors a 64kB) 
[FLASH:](Eraseregion [1] 8 sectors a 8kB) 
[SYSTEM:] AR7 on 150MHz/125MHz 

AVM_Ar7 >AVM decompress Kernel:
.................done
start kernel
[ohio_pre_init] System Clk = 12500000 Hz               

LINUX started...
Linux version 2.6.13.1-ohio (686) (gcc version 3.4.6) #9 Wed Apr 4 13:48:08 CEST 2007
memsize=16 MByte
flashsize=4 MByte
&_end=0x942096e8 PFN_ALIGN(&_end)=0x9420a000 CPHYSADDR(PFN_ALIGN(&_end))=0x1420a000 memsize=0x1000000
CPU revision is: 00018448
[ohio_gpio_init]
Determined physical RAM map:
 memory: 0020a000 @ 14000000 (reserved)
 memory: 00df6000 @ 1420a000 (usable)
On node 0 totalpages: 4096
[alloc_node_mem_map] reduce size from 2752544 Bytes to  131104 Bytes
[alloc_node_mem_map]: (org) sizeof(mem_map) = 131104 mem_map=0x9420d000-0x9422d020
[alloc_node_mem_map]: sizeof(mem_map) = 2752544 mem_map=0x93f8d000-0x9422d020
zone=0 zone_size[j]=0x86016
realsize=4096
  DMA zone: 4096 pages, LIFO batch:1
zone=1 zone_size[j]=0x0
realsize=0
  Normal zone: 0 pages, LIFO batch:1
zone=2 zone_size[j]=0x0
realsize=0
  HighMem zone: 0 pages, LIFO batch:1
Built 1 zonelists
Kernel command line:  console=ttyS0,38400n8r
[ld_mmu_r4xx0] memcpy((void *)(CAC_BASE   + 0x100), &except_vec2_generic, 0x30)
Primary instruction cache 16kB, physically tagged, 4-way, linesize 16 bytes.
Primary data cache 16kB, 4-way, linesize 16 bytes.
Synthesized TLB refill handler (20 instructions). Base=0x941df63c
TLB synthesizer field overflow (simm)
Synthesized TLB load handler fastpath (34 instructions) Base=0x941e2620.
TLB synthesizer field overflow (simm)
Synthesized TLB store handler fastpath (34 instructions) Base=0x941e2820.
TLB synthesizer field overflow (simm)
Synthesized TLB modify handler fastpath (33 instructions) Base=0x941e2a20.
PID hash table entries: 128 (order: 7, 2048 bytes)
CPU frequency 176.64 MHz
Using 88.320 MHz high precision timer.
[setup_irq]: irq 127 irqaction->handler 0x94042530 (no_action+0x0/0x8 )
[register_console] enable commandline console 0
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 14116k/14296k available (1468k kernel code, 164k reserved, 340k data, 112k init, 0k highmem)
totalram_pages= 3533
Calibrating delay loop... 629.14 BogoMIPS (lpj=3145728)
loops_per_jiffy=3145728
Mount-cache hash table entries: 512
Checking for 'wait' instruction...  available.
NET: Registered protocol family 16
Can't analyze prologue code at 9416d748
Squashfs 2.2-r2b (released 2006/02/23) (C) 2002-2005 Phillip Lougher
[avm] configured: watchdog eventled enable direct gpio 

AR7WDT: Watchdog Driver for AR7 Hardware (Version 1.0, build: Apr  4 2007 13:46:17)
Serial: 8250/16550 driver $Revision: 1.90 $ 1 ports, IRQ sharing disabled
[uart_add_one_port]
ttyS0 at MMIO 0x0 (irq = 15) is a OHIO_UART
[uart_add_one_port] dont register console port->type = 16
port->cons = 0x941a7450 port->cons->flags = 0x7
[uart_add_one_port] success
io scheduler noop registered
[cpmac] cpmac_if_register, dev eth0 (phy_id 0) registered
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <[email protected]>
physmap flash device: 400000 at 10000000
phys_mapped_flash: Found 1 x16 devices at 0x0 in 16-bit bank
[genprobe_ident_chips] 4 i 0 j 0
[genprobe_ident_chips] 5 i 0 j 1
 Amd/Fujitsu Extended Query Table at 0x0040
phys_mapped_flash: Swapping erase regions for broken CFI table.
number of CFI chips: 1
RedBoot partition parsing not available
Generic platform RAM MTD, (c) 2004 Simtec Electronics
Ohio flash driver (size->0x400000 mem->0x10000000)
flash_size=0x400000
flash_mask=0x7fffff
Ohio flash memory: Found 1 x16 devices at 0x0 in 16-bit bank
[genprobe_ident_chips] 4 i 0 j 0
[genprobe_ident_chips] 5 i 0 j 1
 Amd/Fujitsu Extended Query Table at 0x0040
Ohio flash memory: Swapping erase regions for broken CFI table.
number of CFI chips: 1
[mtd]: set to default: jffs2_size = 0x20 * 64KByte (0x200000 Bytes)
[ohio_find_hidden_filesystem]: super block found: bytes_used: 0x2f7da6/3112358
[init_ohio_flash] find hidden filesystem size=0x314300 offset=0xabd00
[mtd] configure jffs2 partition
[mtd] fs_size=0x3a0000 max=0x10000 is=0x200000 max jffs2_size value 1
[mtd] ERROR jffs2_size too big, reduce to max
[mtd] ohio_flash_map: name=Ohio flash memory bankwidth=2 virt=0xb0000000 phys=0x10000000 size=0x400000
Creating 7 MTD partitions on "Ohio flash memory":
0x000abd00-0x003c0000 : "filesystem"
	'nor-flash'
	'Bits can be cleared (flash)'
	'Has an erase function'
mtd: partition "filesystem" doesn't start on an erase block boundary -- force read-only
0x00010000-0x003c0000 : "kernel"
	'nor-flash'
	'Bits can be cleared (flash)'
	'Has an erase function'
0x00000000-0x00010000 : "bootloader"
	'nor-flash'
	'Bits can be cleared (flash)'
	'Has an erase function'
0x003c0000-0x003e0000 : "tffs (1)"
	'nor-flash'
	'Bits can be cleared (flash)'
	'Has an erase function'
0x003e0000-0x00400000 : "tffs (2)"
	'nor-flash'
	'Bits can be cleared (flash)'
	'Has an erase function'
0x003b0000-0x003c0000 : "jffs2"
	'nor-flash'
	'Bits can be cleared (flash)'
	'Has an erase function'
0x00010000-0x003b0000 : "Kernel without jffs2"
	'nor-flash'
	'Bits can be cleared (flash)'
	'Has an erase function'
partition_info[0]: name=filesystem offset=abd00 size=314300
partition_info[0]: 0xb00abd00: 0x73717368 0x29b
partition_info[1]: name=kernel offset=10000 size=3b0000
partition_info[1]: 0xb0010000: 0xfeed1281 0x9bc03
partition_info[2]: name=bootloader offset=0 size=10000
partition_info[2]: 0xb0000000: 0x40809000 0x40809800
partition_info[3]: name=tffs (1) offset=3c0000 size=20000
partition_info[3]: 0xb03c0000: 0x40001 0xfbffffff
partition_info[4]: name=tffs (2) offset=3e0000 size=20000
partition_info[4]: 0xb03e0000: 0x40001 0xfcffffff
partition_info[5]: name=jffs2 offset=3b0000 size=10000
partition_info[5]: 0xb03b0000: 0xffffffff 0xffffffff
partition_info[6]: name=Kernel without jffs2 offset=10000 size=3a0000
partition_info[6]: 0xb0010000: 0xfeed1281 0x9bc03
NET: Registered protocol family 2
IP route cache hash table entries: 256 (order: -2, 1024 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
TCP bic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
NET: Registered protocol family 8
NET: Registered protocol family 20
[setup_irq]: irq 1 irqaction->handler 0x94001390 (dummy_timer_irq+0x0/0x14 )
[setup_irq]: irq 6 irqaction->handler 0x940013a4 (dummy_system_irq_2+0x0/0x14 )
[ohio_late_init] 
TFFS: tiny flash file system driver. GPL (c) AVM Berlin (Version 2.0)
      mount on mtd4 and mtd5 (double buffering)
Adam2 environment variables API installed.
[prepare_namespace] new mount root /dev/mtdblock1
use lzma compression 
VFS: Mounted root (squashfs filesystem) readonly.
Freeing prom memory: 0kb freed
Freeing unused kernel memory: 112k freed (3561 free)
[setup_irq]: irq 15 irqaction->handler 0x940cf170 (serial8250_interrupt+0x0/0x13c )
[avm_led] from virt led ('festnetz', 2) not registered
[avm_led] format error: "MAP Name,Instanz TO Name,Instanz"
[avm_led_load_config] Syntax error in led config file /etc/led.conf at "MAP festnetz,2 TO nu"
[setup_irq]: irq 15 irqaction->handler 0x940cf170 (serial8250_interrupt+0x0/0x13c )
[setup_irq]: irq 15 irqaction->handler 0x940cf170 (serial8250_interrupt+0x0/0x13c )
init started:  BusyBox v1.1.2 (2007.02.05-09:25+0000) multi-call binary
init started:  BusyBox v1.1.2 (2007.02.05-09:25+0000) multi-call binary
Starting pid 16, console /dev/ttyS0: '/etc/init.d/rc.S'
AR7WDT: System Init UEberwachung 120 Sekunden
TFFS Name Table 9
Jan  1 00:00:02 ar7cfgctl[85]: FactoryDefault=/etc/default/tcom/ar7.cfg (ar7)
Jan  1 00:00:02 ar7cfgctl[85]: load_config(ar7): factory default loaded
HWRevision	93
ProductID	Fritz_Box_SpeedportW501V
SerialNumber	0000000000000000
annex	B
autoload	yes
bootloaderVersion	1.153
bootserport	tty0
bluetooth	00:04:0E:FF:FF:07
cpufrequency	150000000
firstfreeaddress	0x946AE500
firmware_version	tcom
firmware_info	28.04.38
flashsize	0x00400000
maca	00:1A:4F:xx:xx:xx
macb	00:1A:4F:xx:xx:xx
macwlan	00:1A:4F:xx:xx:xx
macdsl	00:1A:4F:xx:xx:xx
memsize	0x01000000
modetty0	38400,n,8,1,hw
modetty1	38400,n,8,1,hw
mtd0	0x90000000,0x90000000
mtd1	0x90010000,0x903C0000
mtd2	0x90000000,0x90010000
mtd3	0x903C0000,0x903E0000
mtd4	0x903E0000,0x90400000
my_ipaddress	192.168.178.1
prompt	AVM_Ar7
ptest	
reserved	00:04:0E:FF:FF:00
req_fullrate_freq	125000000
sysfrequency	125000000
urlader-version	1153
usb_board_mac	00:1A:4F:xx:xx:xx
usb_rndis_mac	00:1A:4F:xx:xx:xx
usb_device_id	0x5401
usb_revision_id	0x0200
usb_device_name	USB DSL Device
usb_manufacturer_name	AVM
wlan_cal	03F5,0025,0011,00E1,010A,00F2,010A,02FB,0343
Jan  1 01:00:02 ar7cfgctl[161]: FactoryDefault=/etc/default/tcom/ar7.cfg (ar7)

Jan  1 01:00:02 ar7cfgctl[161]: load_config(ar7): factory default loaded

HWRevision='93'
HWRevision_ATA='1'
HWRevision_BitFileCount=''
HWRevision_Reserved1='0'
ANNEX='B'
OEM='tcom'
OEM_DEFAULT_INDEX=''
OEM_tmp='tcom'
Language='de'
Country='049'
TZ='CET-1CEST-2,M3.5.0/02:00:00,M10.5.0/03:00:00'
CONFIG_AB_COUNT='2'
CONFIG_ACCESSORY_URL='http://www.avm.de/fritzbox_apps.php?hardware=93&oem=tcom&language=de&country=&version=28.04.38&subversion='
CONFIG_ANNEX='B'
CONFIG_ASSIST='y'
CONFIG_ATA='n'
CONFIG_ATA_FULL='n'
CONFIG_AUDIO='n'
CONFIG_AURA='n'
CONFIG_BLUETOOTH='n'
CONFIG_BLUETOOTH_CTP='n'
CONFIG_BUTTON='n'
CONFIG_CAPI='y'
CONFIG_CAPI_MIPS='n'
CONFIG_CAPI_NT='n'
CONFIG_CAPI_POTS='y'
CONFIG_CAPI_TE='n'
CONFIG_CAPI_UBIK='n'
CONFIG_CAPI_XILINX='y'
CONFIG_CDROM='n'
CONFIG_CDROM_FALLBACK='n'
CONFIG_DECT='n'
CONFIG_DSL='y'
CONFIG_ECO='n'
CONFIG_ENVIRONMENT='/var/env'
CONFIG_ENVIRONMENT_PATH='/proc/sys/urlader'
CONFIG_ETH_COUNT='1'
CONFIG_FIRMWARE_URL='http://www.t-com.de/downloads'
CONFIG_FON='y'
CONFIG_FONGUI2='n'
CONFIG_FONQUALITY='y'
CONFIG_HOMEI2C='n'
CONFIG_HOSTNAME='speedport.ip'
CONFIG_I2C='n'
CONFIG_INSTALL_TYPE='ar7_4MB_1eth_2ab_pots_wlan_28776'
CONFIG_IPONE='n'
CONFIG_JFFS2='n'
CONFIG_KIDS='n'
CONFIG_LED_NO_DSL_LED='n'
CONFIG_MAILER='n'
CONFIG_MEDIACLI='n'
CONFIG_MEDIASRV='n'
CONFIG_NAND='n'
CONFIG_NFS='n'
CONFIG_OEM_DEFAULT='tcom'
CONFIG_PRODUKT='Fritz_Box_SpeedportW501V'
CONFIG_PRODUKT_NAME='Speedport W 501V'
CONFIG_RAMSIZE='16'
CONFIG_RELEASE='1'
CONFIG_ROMSIZE='4'
CONFIG_SAMBA='n'
CONFIG_SERVICEPORTAL_URL='none'
CONFIG_STOREUSRCFG='y'
CONFIG_SUBVERSION=''
CONFIG_SWAP='n'
CONFIG_TAM='n'
CONFIG_TAM_MODE='0'
CONFIG_TR064='n'
CONFIG_TR069='y'
CONFIG_UBIK2='n'
CONFIG_UPNP='n'
CONFIG_USB='n'
CONFIG_USB_HOST_AVM='n'
CONFIG_USB_HOST_TI='n'
CONFIG_USB_PRINT_SERV='n'
CONFIG_USB_STORAGE='n'
CONFIG_USB_WLAN_AUTH='n'
CONFIG_VDSL='n'
CONFIG_VERSION='04.38'
CONFIG_VERSION_MAJOR='28'
CONFIG_VLYNQ='y'
CONFIG_VLYNQ0='3'
CONFIG_VLYNQ1='0'
CONFIG_VLYNQ_PARAMS='vlynq_reset_bit_0=17'
CONFIG_VPN='n'
CONFIG_WLAN='y'
CONFIG_WLAN_1130TNET='n'
CONFIG_WLAN_1350TNET='y'
CONFIG_WLAN_GREEN='n'
CONFIG_WLAN_IPTV='n'
CONFIG_WLAN_TXPOWER='n'
CONFIG_WLAN_WDS='y'
CONFIG_WLAN_WMM='n'
CONFIG_XILINX='y'
set 'Activate Wizzard'
mknod: /var/flash/ar7.cfg: File exists
checkempty: : No such file or directory
checkempty: : No such file or directory
checkempty: warning, /var/flash/ar7.cfg not found - nop
checkempty: : No such file or directory
checkempty: warning, /var/flash/voip.cfg not found - nop
Piglet: module license '
(C) Copyright 2005 by AVM
' taints kernel.
EMIF: asize=0 ta=3 r_hold=0 w_strobe=6 r_strobe=6 ew=0
attempting to load DSL Firmware '/lib/modules/microvoip-dsl.bin'
**** ANNEX: 'B'
*************************************
setting DSL Firmware to Annex B
registered device TI Avalanche SAR
tiatm driver (patch_annex=0xc0053e2c)
Error : Failed to Initialize the DSL subsystem !!.
insmod: cannot insert `/lib/modules/2.6.13.1-ohio/kernel/drivers/atm/avm_atm/tiatm.ko': Success (19): Success
modprobe: failed to load module tiatm
*** ERROR: load tiatm failed ***
[tiatm] Error at firmware file: Code=-2insmod: cannot insert `/lib/modules/2.6.13.1-ohio/kernel/drivers/atm/avm_atm/tiatm.ko': Success (19): Success
<4>ubik2: Unknown symbol atm_dsp_trigger_ubik2
ubik2: Unknown symbol atm_dsp_deactivate_ubik2
ubik2: Unknown symbol atm_dsp_activate_ubik2
ubik2: Unknown symbol atm_dsp_register_ubik2
ubik2: Unknown symbol atm_dsp_release_ubik2
ubik2: Unknown symbol atm_dsp_reactivate_ubik2
insmod: cannot insert `/lib/modules/2.6.13.1-ohio/kernel/drivers/char/ubik2/ubik2.ko': Success (2): Success
modprobe: failed to load module ubik2
cat: /dev/debug: No such device or address
[tiatm] Error at firmware file: Code=-2insmod: cannot insert `/lib/modules/2.6.13.1-ohio/kernel/drivers/atm/avm_atm/tiatm.ko': Success (19): Success
<4>ubik2: Unknown symbol atm_dsp_trigger_ubik2
ubik2: Unknown symbol atm_dsp_deactivate_ubik2
ubik2: Unknown symbol atm_dsp_activate_ubik2
ubik2: Unknown symbol atm_dsp_register_ubik2
ubik2: Unknown symbol atm_dsp_release_ubik2
ubik2: Unknown symbol atm_dsp_reactivate_ubik2
insmod: cannot insert `/lib/modules/2.6.13.1-ohio/kernel/drivers/char/ubik2/ubik2.ko': Success (2): Success
isdn_fbox_fon4: Unknown symbol ubik2_rx_tasklet_control
isdn_fbox_fon4: Unknown symbol ubik2_ul_rx_buffer_conf
isdn_fbox_fon4: Unknown symbol ubik2_ul_tx_trigger
isdn_fbox_fon4: Unknown symbol ubik2_ul_register
isdn_fbox_fon4: Unknown symbol ubik2_ul_getchanfromhandle
isdn_fbox_fon4: Unknown symbol ubik2_ul_release
isdn_fbox_fon4: Unknown symbol ubik2_DebugPrintf
insmod: cannot insert `/lib/modules/2.6.13.1-ohio/kernel/drivers/isdn/isdn_fon4/zzz/isdn_fbox.ko': Success (2): Success
modprobe: failed to load module isdn_fbox
Jan  1 01:00:06 ar7cfgctl[264]: FactoryDefault=/etc/default/tcom/ar7.cfg (ar7)
Jan  1 01:00:06 ar7cfgctl[264]: load_config(ar7): factory default loaded
kdsldmod: init start (Apr 18 2007 14:44:44) sizeof(struct sk_buff)=160
kdsldmod: init done
kdsld: PPP led: off (value=0)
Jan  1 01:00:07 ctlmgr[295]: process priority is 19
Jan  1 01:00:07 ctlmgr[297]: FactoryDefault=/etc/default/tcom/ar7.cfg (ar7)
Jan  1 01:00:07 wlancfgctl[302]: FactoryDefault=/etc/default/tcom/wlan.cfg (wlan)
Jan  1 01:00:07 wlancfgctl[302]: load_config(wlan): factory default loaded
MAC WLAN: 	00:1A:4F:91:72:C0
WLAN is not enabled
SIOCGIFFLAGS: No such device
Jan  1 01:00:07 ctlmgr[297]: load_config(ar7): factory default loaded
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
/etc/init.d/rc.net: /etc/init.d/rc.net: 372: igdd: not found
Jan  1 01:00:08 websrv[318]: FactoryDefault=/etc/default/tcom/ar7.cfg (ar7)
Jan  1 01:00:08 ctlmgr[297]: FactoryDefault=/etc/default/tcom/voip.cfg (voip)
Jan  1 01:00:08 websrv[318]: load_config(ar7): factory default loaded
Jan  1 01:00:08 ctlmgr[297]: load_config(voip): factory default loaded
Jan  1 01:00:08 ctlmgr[297]: FactoryDefault=/etc/default/tcom/wlan.cfg (wlan)
Jan  1 01:00:08 ctlmgr[297]: load_config(wlan): factory default loaded
Jan  1 01:00:08 ctlmgr[297]: TR-069 is activated in tr069.cfg
Jan  1 01:00:08 websrv[318]: startup (Apr 18 2007 14:42:12)
Jan  1 01:00:08 ctlmgr[297]: dlopen(/usr/share/ctlmgr/libdect.so) failed: File not found
Jan  1 01:00:08 ctlmgr[297]: dlopen(/usr/share/ctlmgr/libtamconf.so) failed: File not found
Jan  1 01:00:08 ctlmgr[297]: dlopen(/usr/share/ctlmgr/libuser.so) failed: File not found
Jan  1 01:00:08 ctlmgr[297]: mapping to info-LED already exist
Jan  1 01:00:08 ctlmgr[297]: box init ok
Jan  1 01:00:08 ctlmgr[297]: /dev/avm_power <-- MODE=dsl
Jan  1 01:00:08 ctlmgr[297]: WAN (ata) led value = 0
Jan  1 01:00:08 ctlmgr[297]: TR069_Init() TR069_Init(full)
Jan  1 01:00:08 ctlmgr[297]: TR069_Full_Init
Jan  1 01:00:08 ctlmgr[297]: get_VoiceProfileNumberOfEntries() get_VoiceProfileNumberOfEntries 0 voipaccounts existing
Jan  1 01:00:08 ctlmgr[297]: Register_WANConnectionDevice() adding 'connection_voip' to TR069Mapper_AddCallbacksForCtlmgrList
Jan  1 01:00:08 ctlmgr[297]: Register_Portmapping() adding 'rule' to TR069Mapper_AddCallbacksForCtlmgrList
Jan  1 01:00:08 ctlmgr[297]: Register_VoiceProfile() adding 'sip' to TR069Mapper_AddCallbacksForCtlmgrList
Jan  1 01:00:08 ctlmgr[297]: Register_VoiceProfile() adding 'telcfg' to TR069Mapper_AddCallbacksForCtlmgrList
Jan  1 01:00:08 ctlmgr[297]: TR069_Full_Init() TR069_Full_Init() ret=0
Jan  1 01:00:08 ctlmgr[297]: TR069_Init returned 0
Jan  1 01:00:08 ctlmgr[297]: TR069_Init() returned 0
Jan  1 01:00:08 ctlmgr[297]: verbose: DISABLED
Jan  1 01:00:09 multid[327]: FactoryDefault=/etc/default/tcom/ar7.cfg (ar7)
Jan  1 01:00:09 multid[327]: load_config(ar7): factory default loaded
Jan  1 01:00:09 multid[327]: startup (Apr 18 2007 14:42:32)
[cpmac] cpmac_main_ioctl, unknown ioctl 35142
device eth0 entered promiscuous mode
[setup_irq]: irq 27 irqaction->handler 0x940df8bc (cpmac_main_isr+0x0/0x78 )
lan: port 1(eth0) entering learning state
lan: topology change detected, propagating
lan: port 1(eth0) entering forwarding state
Jan  1 01:00:09 multid[329]: DHCPD on lan
Jan  1 01:00:09 multid[329]: dhcpd: can't open /var/flash/multid.leases - No such file or directory (2)
Jan  1 01:00:09 multid[329]: DDNS: no valid accounts
Jan  1 01:00:09 multid[329]: ONLINE: script /bin/onlinechanged not found.
Jan  1 01:00:09 multid[329]: interface eth0 new.
Jan  1 01:00:09 multid[329]: interface lo new.
Jan  1 01:00:09 multid[329]: interface lo up.
Jan  1 01:00:09 multid[329]: verbose: DISABLED
Jan  1 01:00:09 dsld[334]: FactoryDefault=/etc/default/tcom/ar7.cfg (ar7)
Jan  1 01:00:09 dsld[334]: load_config(ar7): factory default loaded
Jan  1 01:00:09 dsld[334]: startup (Apr 18 2007 14:43:23)
Jan  1 01:00:09 dsld[336]: DSL Mac 00:1a:4f:4d:47:51
Jan  1 01:00:09 dsld[336]: VOIP Mac 00:1a:4f:4d:47:52
Jan  1 01:00:09 dsld[336]: VCC2 Mac 00:1a:4f:4d:47:53
Jan  1 01:00:09 dsld[336]: VCC3 Mac 00:1a:4f:4d:47:50
Jan  1 01:00:09 dsld[336]: voip: ppptarget voip disabled, ignored
Jan  1 01:00:09 dsld[336]: compiled tc filter  to 0 classes
Jan  1 01:00:09 dsld[336]: compiled tc filter tc:rtp,sip to 2 classes
Jan  1 01:00:09 dsld[336]: compiled tc filter tc:tcp_ack to 1 classes
Jan  1 01:00:09 dsld[336]: compiled tc filter tc:dns,sipdns,ntpdns,tr069dns to 4 classes
Jan  1 01:00:09 dsld[336]: compiled tc filter tc:http_req,tr069 to 2 classes
Jan  1 01:00:09 dsld[336]: compiled tc filter tc:icmp to 1 classes
Jan  1 01:00:09 dsld[336]: compiled tc filter  to 0 classes
Jan  1 01:00:09 dsld[336]: verbose: DISABLED
telefon: use clock_gettime(CLOCK_MONOTONIC)!
telefon: SIGCHLD received!
telefon: WARNING No config file '/var/flash/fx_def' !
telefon: WARNING No CG file '/var/flash/fx_cg' !
[capi_oslib] not jet activated
telefon: kein Capi!
/etc/init.d/rc.voip: /etc/init.d/rc.voip: 98: pbd: not found
Jan  1 01:00:10 ar7cfgctl[359]: FactoryDefault=/etc/default/tcom/ar7.cfg (ar7)
Jan  1 01:00:10 ar7cfgctl[359]: load_config(ar7): factory default loaded
run_clock demon started
AR7WDT: System Init UEberwachung abgeschlossen (110930 ms noch verfuegbar)
Jan  1 01:00:10 voipd[353]: FactoryDefault=/etc/default/tcom/voip.cfg (voip)
Jan  1 01:00:10 voipd[353]: load_config(voip): factory default loaded
Jan  1 01:00:10 voipd[353]: startup (AVM Speedport W 501V 28.04.38 AVM SIP v7.01.07 Apr 18 2007 14:44:45)
[capi_oslib] not jet activated
Jan  1 01:00:10 voipd[353]: Warning: CAPI_GET_PROFILE failed - 0x1109
Jan  1 01:00:10 voipd[353]: INFO led: off (value=0)
Jan  1 01:00:10 voipd[353]: VoIP SRTP led value = 0
Jan  1 01:00:10 voipd[353]: INTERNET led value = 0
/etc/init.d/rc.S: /etc/init.d/rc.S: 475: cannot create /proc/sysrq-trigger: Directory nonexistent
[setup_irq]: irq 15 irqaction->handler 0x940cf170 (serial8250_interrupt+0x0/0x13c )

Please press Enter to activate this console. 
Starting pid 367, console /dev/ttyS0: '/bin/sh'


BusyBox v1.1.2 (2007.02.05-09:25+0000) Built-in shell (ash)
Enter 'help' for a list of built-in commands.

Jan  1 01:00:13 ar7cfgctl[430]: FactoryDefault=/etc/default/tcom/ar7.cfg (ar7)
Jan  1 01:00:13 ar7cfgctl[430]: load_config(ar7): factory default loaded
HWRevision='93'
HWRevision_ATA='1'
HWRevision_BitFileCount=''
HWRevision_Reserved1='0'
ANNEX='B'
OEM='tcom'
OEM_DEFAULT_INDEX=''
OEM_tmp='tcom'
Language='de'
Country='049'
TZ='CET-1CEST-2,M3.5.0/02:00:00,M10.5.0/03:00:00'
CONFIG_AB_COUNT='2'
CONFIG_ACCESSORY_URL='http://www.avm.de/fritzbox_apps.php?hardware=93&oem=tcom&language=de&country=&version=28.04.38&subversion='
CONFIG_ANNEX='B'
CONFIG_ASSIST='y'
CONFIG_ATA='n'
CONFIG_ATA_FULL='n'
CONFIG_AUDIO='n'
CONFIG_AURA='n'
CONFIG_BLUETOOTH='n'
CONFIG_BLUETOOTH_CTP='n'
CONFIG_BUTTON='n'
CONFIG_CAPI='y'
CONFIG_CAPI_MIPS='n'
CONFIG_CAPI_NT='n'
CONFIG_CAPI_POTS='y'
CONFIG_CAPI_TE='n'
CONFIG_CAPI_UBIK='n'
CONFIG_CAPI_XILINX='y'
CONFIG_CDROM='n'
CONFIG_CDROM_FALLBACK='n'
CONFIG_DECT='n'
CONFIG_DSL='y'
CONFIG_ECO='n'
CONFIG_ENVIRONMENT='/var/env'
CONFIG_ENVIRONMENT_PATH='/proc/sys/urlader'
CONFIG_ETH_COUNT='1'
CONFIG_FIRMWARE_URL='http://www.t-com.de/downloads'
CONFIG_FON='y'
CONFIG_FONGUI2='n'
CONFIG_FONQUALITY='y'
CONFIG_HOMEI2C='n'
CONFIG_HOSTNAME='speedport.ip'
CONFIG_I2C='n'
CONFIG_INSTALL_TYPE='ar7_4MB_1eth_2ab_pots_wlan_28776'
CONFIG_IPONE='n'
CONFIG_JFFS2='n'
CONFIG_KIDS='n'
CONFIG_LED_NO_DSL_LED='n'
CONFIG_MAILER='n'
CONFIG_MEDIACLI='n'
CONFIG_MEDIASRV='n'
CONFIG_NAND='n'
CONFIG_NFS='n'
CONFIG_OEM_DEFAULT='tcom'
CONFIG_PRODUKT='Fritz_Box_SpeedportW501V'
CONFIG_PRODUKT_NAME='Speedport W 501V'
CONFIG_RAMSIZE='16'
CONFIG_RELEASE='1'
CONFIG_ROMSIZE='4'
CONFIG_SAMBA='n'
CONFIG_SERVICEPORTAL_URL='none'
CONFIG_STOREUSRCFG='y'
CONFIG_SUBVERSION=''
CONFIG_SWAP='n'
CONFIG_TAM='n'
CONFIG_TAM_MODE='0'
CONFIG_TR064='n'
CONFIG_TR069='y'
CONFIG_UBIK2='n'
CONFIG_UPNP='n'
CONFIG_USB='n'
CONFIG_USB_HOST_AVM='n'
CONFIG_USB_HOST_TI='n'
CONFIG_USB_PRINT_SERV='n'
CONFIG_USB_STORAGE='n'
CONFIG_USB_WLAN_AUTH='n'
CONFIG_VDSL='n'
CONFIG_VERSION='04.38'
CONFIG_VERSION_MAJOR='28'
CONFIG_VLYNQ='y'
CONFIG_VLYNQ0='3'
CONFIG_VLYNQ1='0'
CONFIG_VLYNQ_PARAMS='vlynq_reset_bit_0=17'
CONFIG_VPN='n'
CONFIG_WLAN='y'
CONFIG_WLAN_1130TNET='n'
CONFIG_WLAN_1350TNET='y'
CONFIG_WLAN_GREEN='n'
CONFIG_WLAN_IPTV='n'
CONFIG_WLAN_TXPOWER='n'
CONFIG_WLAN_WDS='y'
CONFIG_WLAN_WMM='n'
CONFIG_XILINX='y'
ermittle die aktuelle TTY
tty is "/dev/ttyS0"
Serielles Terminal

Auslesen des Flashspeichers

Als Backup, aber auch für die Router-Emulation, ist es sinnvoll, den Flashspeicher auszulesen und als Datei abzuspeichern.

Prinzipiell gibt es dafür bei AVM- und vergleichbaren Routern mehrere Möglichkeiten:

  • Auslesen über Bootloader (ADAM2 / EVA, serielle Konsole)
  • Auslesen über Bootloader (ADAM2 / EVA, FTP-Zugang)
  • Auslesen unter Linux (serielle Konsole oder Telnet-Zugang)

Die aktuelle Firmware des Speedport W501V enthält keinen Telnet-Server, und für die serielle Konsole muss das Gerät geöffnet werden. Will man das nicht, bleibt der FTP-Zugang zum Bootloader.

Ca. fünf Sekunden nach dem Einschalten des Routers läßt der Bootloader (ADAM2 oder EVA) eine FTP-Verbindung auf IP-Adresse 192.168.178.1 zu.

Das folgende Protokoll zeigt, wie man per FTP unter Linux die Dateien env, mtd1, mtd2, mtd3 und mtd4 ausliest. 

$ ifconfig eth0 192.168.178.2
$ ftp -p 192.168.178.1
Connected to 192.168.178.1.
220 ADAM2 FTP Server ready
Name (192.168.178.1:xxxx): adam2
331 Password required for adam2
Password:
230 User adam2 successfully logged in
Remote system type is AVM.
ftp> debug
Debugging on (debug=1).
ftp> quote MEDIA FLSH
---> MEDIA FLSH
200 Media set to MEDIA_FLASH
ftp> get env
local: env remote: env
ftp: setsockopt (ignored): Permission denied
---> PASV
227 Entering Passive Mode (192,168,178,1,4,222)
---> RETR env
150 Opening ASCII data connection

receive aborted     <= hier muss man die Übertragen mit Strg-C abbrechen
waiting for remote to finish abort
226 Transfer complete
502 Command not implemented
1427 bytes received in 5.38 secs (0.3 kB/s)
ftp> bin
---> TYPE I
200 Type set to BINARY
ftp> get mtd1
local: mtd1 remote: mtd1
ftp: setsockopt (ignored): Permission denied
---> PASV
227 Entering Passive Mode (192,168,178,1,4,53)
---> RETR mtd1
150 Opening BINARY data connection

receive aborted
waiting for remote to finish abort
226 Transfer complete
502 Command not implemented
3866624 bytes received in 5.91 secs (638.8 kB/s)
ftp> get mtd2
local: mtd2 remote: mtd2
ftp: setsockopt (ignored): Permission denied
---> PASV
227 Entering Passive Mode (192,168,178,1,5,231)
---> RETR mtd2
150 Opening BINARY data connection

receive aborted
waiting for remote to finish abort
226 Transfer complete
502 Command not implemented
65536 bytes received in 10.25 secs (6.2 kB/s)
ftp> get mtd3
local: mtd3 remote: mtd3
ftp: setsockopt (ignored): Permission denied
---> PASV
227 Entering Passive Mode (192,168,178,1,6,87)
---> RETR mtd3
150 Opening BINARY data connection

receive aborted
waiting for remote to finish abort
226 Transfer complete
502 Command not implemented
131072 bytes received in 8.70 secs (14.7 kB/s)
ftp> get mtd4
local: mtd4 remote: mtd4
ftp: setsockopt (ignored): Permission denied
---> PASV
227 Entering Passive Mode (192,168,178,1,5,150)
---> RETR mtd4
150 Opening BINARY data connection

receive aborted
waiting for remote to finish abort
226 Transfer complete
502 Command not implemented
131072 bytes received in 13.15 secs (9.7 kB/s)
ftp> bye
---> QUIT
221 Thank you for using the FTP service on ADAM2
$ cat mtd2 mtd1 mtd3 mtd4 >flashimage.bin

Mit dem letzten Kommando werden die vier Speicherauszüge in der richtigen Reihenfolge zu einem Gesamtabzug flashimage.bin vereinigt. Dieser kann für die Emulation mit QEMU direkt verwendet werden.


Wichtige Links

Abgerufen von „https://wiki.zebradem.com/wiki/index.php?title=Speedport_W_501V&oldid=19707“