Merhaba,
Geçen ay Superonline için mevcut root scriptine, Telekom için olanı da eklendi. Root etkinleştirme yöntemini bulup paylaşan arkadaşa teşekkür ederim. İşlemi kendi router’ımda uyguladığımda başarılı sonuç aldım.
(FW version: H3600p v9.0 ttn. 5_240228)
İlk olarak, güncelleme ile cihazın tekrar kapatılmasını önlemek için root kullanıcısı ile giriş yapıp management bağlantısını (TR069) devre dışı bırakarak ISP yönetimini kapattım. (“Management” bağlantısı admin kullanıcısında görünmüyor.)
Wi-Fi güvenliği için WPA3-SAE'ye geçiş yaptım.
SSH ve telnet erişimi aç/kapa özelliği root ile birlikte arayüze geliyor. SSH yapabilmek için erişim açık görünse de, root aktif ettikten sonra uygula butonuna tıklamadan SSH erişimi gelmedi.
Cihazın clı ve Shell kısımları root useri ile erişime açılıyor.
SSH ile clı arayüzü erişimi:
Shell komutu ile cihazdan Linux Shell alınabiliyor
Hadi gelin, Shell üzerinden biraz kurcalayalım.
Linux buildroot project ile oluşturulmuş: Ve 4.1.25 kernel kullanıyor.
ARMv7 mimarili, 2 çekirdekli bir işlemcisi bulunuyor. Donanım kodu: ZTE ZX279128s.
Cihaz üzerindeki Serial port bağlantı hızı 115200 baud, root dosya sistemi ise read only olarak Mount edilmiş yani Shell üzerinden root altındaki dosyaları editleyemiyoruz.
RAM= 512 MB.
Bootloader = u-boot
Serial iletişim bilgileri bulunuyorsa, anakart üstünde seri port yuvası (UART) olması gerekir diye düşünerek, cihazı söküp serial portu tespit ettim ve pin header lehimledim.
Kaldığım yerden devam..
UART bağlantı şeması:
1 - VCC (boş)
2 - TX
3 - RX
4 - GND
Boot anında aldığım çıktı:
boot log dan edinilen bilgiye göre
CPU: ZTE ZX279128S (1.0 GHz, 2 cores) -> SoC için OpenWrt desteği malesef ki şu an yok bkz. support for ZX279128S
SPI NAND HYF4GQ4UAACBE 512MiB 3,3V
SPI NAND Flash da bulunan bölümler:
11 MTD partitions on "ZX279127-spifc"
0x000000000000-0x000020000000 : "Whole flash"
0x000000000000-0x000000100000 : "Bootloader"
0x000000100000-0x000000200000 : "tag"
0x000000200000-0x000000400000 : "wifi"
0x000000400000-0x000000800000 : "usercfg"
0x000000800000-0x000000c00000 : "defcfg"
0x000000c00000-0x000000fc0000 : "kernel1"
0x000004c00000-0x000004fc0000 : "kernel2"
0x000000fc0000-0x000002900000 : "rootfs"
0x000008c00000-0x00000a000000 : "tcpdump"
0x00000a000000-0x00000bc00000 : "lxc"
SoC için OpenWrt desteği olmadığından teknik olarak buradan ileri gitmiyorum eğer desteği olsaydı cihazı port etmeye çalışabilirdik. Bundan sonra cihaz içinde görebileceğimiz neler var shell üzerinden araştırıp göreceğiz...
Geçen ay Superonline için mevcut root scriptine, Telekom için olanı da eklendi. Root etkinleştirme yöntemini bulup paylaşan arkadaşa teşekkür ederim. İşlemi kendi router’ımda uyguladığımda başarılı sonuç aldım.
(FW version: H3600p v9.0 ttn. 5_240228)
İlk olarak, güncelleme ile cihazın tekrar kapatılmasını önlemek için root kullanıcısı ile giriş yapıp management bağlantısını (TR069) devre dışı bırakarak ISP yönetimini kapattım. (“Management” bağlantısı admin kullanıcısında görünmüyor.)
Wi-Fi güvenliği için WPA3-SAE'ye geçiş yaptım.
SSH ve telnet erişimi aç/kapa özelliği root ile birlikte arayüze geliyor. SSH yapabilmek için erişim açık görünse de, root aktif ettikten sonra uygula butonuna tıklamadan SSH erişimi gelmedi.
Cihazın clı ve Shell kısımları root useri ile erişime açılıyor.
SSH ile clı arayüzü erişimi:
Kod:
root@192.168.1.1's password:
************************************************************
Welcome to the world of CLI !
************************************************************
CLI>?
Exec commands:
exit Quit from telnet.
ftp FTP configuration.
fwlevel
igmp Set IGMP configuration.
ping Ping the destination.
portbinding port binding.
reboot Reboot device.
restoredefault Reset to factory configuration.
route Route configuration.
servicecontrol Service control configuration.
shell Switch to shell.
show Show configuration.
traceroute Traceroute Diagnostic.
wlan Wlan configuration.
Shell komutu ile cihazdan Linux Shell alınabiliyor
Hadi gelin, Shell üzerinden biraz kurcalayalım.
Linux buildroot project ile oluşturulmuş: Ve 4.1.25 kernel kullanıyor.
Kod:
Linux version 4.1.25 (root@c8de74c892d2) (gcc version 4.9.3 (Buildroot 2015.08.1-svn1486) ) #2 SMP Wed Feb 28 15:27:40 CST 2024.
ARMv7 mimarili, 2 çekirdekli bir işlemcisi bulunuyor. Donanım kodu: ZTE ZX279128s.
Kod:
/ $ cat proc/cpuinfo
processor : 0
model name : ARMv7 Processor rev 1 (v7l)
BogoMIPS : 1987.37
Features : half fastmult edsp tls
CPU implementer : 0x41.
CPU architecture: 7
CPU variant : 0x4.
CPU part : 0xc09.
CPU revision : 1
processor : 1
model name : ARMv7 Processor rev 1 (v7l)
BogoMIPS : 1993.93
Features : half fastmult edsp tls
CPU implementer : 0x41.
CPU architecture: 7
CPU variant : 0x4.
CPU part : 0xc09.
CPU revision : 1
Hardware : ZTE ZX279128S (Device Tree)
Revision : 0020.
Serial : 0000000000000000.
Cihaz üzerindeki Serial port bağlantı hızı 115200 baud, root dosya sistemi ise read only olarak Mount edilmiş yani Shell üzerinden root altındaki dosyaları editleyemiyoruz.
RAM= 512 MB.
Bootloader = u-boot
Kod:
/ $ cat /proc/cmdline
console=ttyAMA0,115200n8 root=/dev/mtdblock8 ro rootfstype=jffs2 mem=512M; U-Boot V1.0.0 20240228161322 0xc00000 0x0 0xaf 0xa3.
Serial iletişim bilgileri bulunuyorsa, anakart üstünde seri port yuvası (UART) olması gerekir diye düşünerek, cihazı söküp serial portu tespit ettim ve pin header lehimledim.
Kaldığım yerden devam..
UART bağlantı şeması:
1 - VCC (boş)
2 - TX
3 - RX
4 - GND
Boot anında aldığım çıktı:
Kod:
Boot SPI NAND
start read bootheader
start read secondboot
non secure boot
Jump
5SPI NAND
non secure uboot
Booting Linux on physical CPU 0x0
Initializing cgroup subsys cpuset
Initializing cgroup subsys cpu
Initializing cgroup subsys cpuacct
Linux version 4.1.25 (root@c8de74c892d2) (gcc version 4.9.3 (Buildroot 2015.08.1-svn1486) ) #2 SMP Wed Feb 28 15:27:40 CST 2024
CPU: ARMv7 Processor [414fc091] revision 1 (ARMv7), cr=18c5387d
CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
Machine model: ZTE ZX279128S
Ignoring memory range 0x0 - 0x40000000
Ignoring memory block 0x0 - 0x20000000
Ignoring unrecognised tag 0x00000000
in function:early_mem line: 820 zxic_mem_size = 0x20000000
zx279128_reserve_mem,280
ZX_RESERVE_MEM_SIZE is 2600000, 26
Memory policy: Data cache writealloc
======= zx_map_io =======
BUG: mapping for 0x00400000 at 0xf0000000 out of vmalloc space
BUG: mapping for 0x00800000 at 0xf0100000 out of vmalloc space
BUG: mapping for 0x00a20000 at 0xf0200000 out of vmalloc space
BUG: mapping for 0x00c00000 at 0xf9602000 out of vmalloc space
BUG: mapping for 0x94000000 at 0xf0400000 out of vmalloc space
BUG: mapping for 0x94100000 at 0xf0500000 out of vmalloc space
BUG: mapping for 0x94200000 at 0xf0600000 out of vmalloc space
BUG: mapping for 0x94400000 at 0xf0700000 out of vmalloc space
BUG: mapping for 0x9a100000 at 0xf0800000 out of vmalloc space
BUG: mapping for 0x00d00000 at 0xf0900000 out of vmalloc space
BUG: mapping for 0x92000000 at 0xf4000000 out of vmalloc space
BUG: mapping for 0x00200000 at 0xf0a00000 out of vmalloc space
BUG: mapping for 0x9fe00000 at 0xf0f00000 out of vmalloc space
BUG: mapping for 0x09100000 at 0xf0b00000 out of vmalloc space
BUG: mapping for 0x09400000 at 0xf0c00000 out of vmalloc space
BUG: mapping for 0x09300000 at 0xf0d00000 out of vmalloc space
BUG: mapping for 0x09200000 at 0xf0e00000 out of vmalloc space
BUG: mapping for 0x5da00000 at 0xf1000000 out of vmalloc space
--------Boot para(len:0x554)------addr = c072befc
--dwBootparaMagic[0]=cccccccc------
--dwBootparaMagic[1]=55555555------
--dwBootparaMagic[2]=aaaaaaaa------
--dwBootparaMagic[3]=11111111------
--runmode=3------
--validImgNum=2------
--totalImgNum=2------
--bootWhichImg=0------
--BootParaCksum=fdef------
--[0]low=0xc00000------
--[0]high=0x4c00000------
--[0]dwKernelStartPhyAddr=0xc00000------
--[0]dwFsStartPhyAddr=0xfc0000------
--[1]dwKernelStartPhyAddr=0x4c00000------
--[1]dwFsStartPhyAddr=0x4fc0000------
--[1]low=0xc00000------
--[1]high=0x4c00000------
Check boot para cksum...
boot para cksum error!
boot para cksum OK!
Boot 0'th image
bootPara.runmode=3
pdt_verinfo_init: tcVerInfo->RunMode[3]
bootPara.bootWhichImg=0
bootPara.search_info_tbl[0].flashOffset=0x 2900000
sHardVersion=V9.0.3
PERCPU: Embedded 13 pages/cpu @dd554000 s23424 r8192 d21632 u53248
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 129920
Kernel command line: console=ttyAMA0,115200n8 root=/dev/mtdblock8 ro rootfstype=jffs2 mem=512M; U-Boot V1.0.0 20240228161322 0xc00000 0x0 0xaf 0xa3
PID hash table entries: 2048 (order: 1, 8192 bytes)
Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
Memory: 470860K/524288K available (5066K kernel code, 308K rwdata, 1712K rodata, 220K init, 2010K bss, 53428K reserved, 0K cma-reserved)
Virtual kernel memory layout:
vector : 0xffff0000 - 0xffff1000 ( 4 kB)
fixmap : 0xffc00000 - 0xfff00000 (3072 kB)
vmalloc : 0xe0800000 - 0xf0000000 ( 248 MB)
lowmem : 0xc0000000 - 0xe0000000 ( 512 MB)
modules : 0xbf000000 - 0xc0000000 ( 16 MB)
.text : 0xc0008000 - 0xc06a6a5c (6779 kB)
.init : 0xc06a7000 - 0xc06de000 ( 220 kB)
.data : 0xc06de000 - 0xc072b160 ( 309 kB)
.bss : 0xc072b160 - 0xc0921aa4 (2011 kB)
SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
Hierarchical RCU implementation.
Additional per-CPU info printed with stalls.
NR_IRQS:16 nr_irqs:16 16
L2C: platform modifies aux control register: 0x02030000 -> 0x32430000
L2C: platform provided aux values permit register corruption.
L2C: DT/platform modifies aux control register: 0x02030000 -> 0x32430000
L2C-310 enabling early BRESP for Cortex-A9
L2C-310 full line of zeros enabled for Cortex-A9
L2C-310 ID prefetch enabled, offset 1 lines
L2C-310 dynamic clock gating enabled, standby mode enabled
L2C-310 cache controller enabled, 16 ways, 256 kB
L2C-310: CACHE_ID 0x410000c9, AUX_CTRL 0x76430001
sched_clock: 64 bits at 500MHz, resolution 2ns, wraps every 4398046511103ns
clocksource arm_global_timer: mask: 0xffffffffffffffff max_cycles: 0xe6a171a037, max_idle_ns: 881590485102 ns
Calibrating delay loop... 1987.37 BogoMIPS (lpj=9936896)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
Initializing cgroup subsys blkio
Initializing cgroup subsys memory
Initializing cgroup subsys devices
Initializing cgroup subsys freezer
Initializing cgroup subsys net_cls
Initializing cgroup subsys perf_event
Initializing cgroup subsys net_prio
Initializing cgroup subsys pids
CPU: Testing write buffer coherency: ok
CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
Setting up static identity map for 0x400081c0 - 0x400081f4
CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
Brought up 2 CPUs
SMP: Total of 2 processors activated (3981.31 BogoMIPS).
CPU: All CPU(s) started in SVC mode.
devtmpfs: initialized
clocksource jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
pinctrl core: initialized pinctrl subsystem
NET: Registered protocol family 16
product_vid = 48
DMA: preallocated 2048 KiB pool for atomic coherent allocations
<7>11930:22:53 [Klogctl][Info] [(540)LogCtlInit] LogCtlInit begin
<7>11930:22:53 [Klogctl][Info] [(552)LogCtlInit] LogCtlInit end
11930:22:53 [KernOSS][Notice] [oss_kernel_comm(613)KernOssInit] kernel oss init... !
product_vid = 48
product_vid = 48
current_board=c06ee884
0,c3ffffa,c3ffffa
1,ef003f,ef003f
2,555ffff,555ffff
3,3e3f8d,3e3f8d
4,0,0
5,0,0
input gpio:44
input gpio:42
input gpio:62
input gpio:61
input gpio:43
input gpio:47
input gpio:46
input gpio:45
output gpio:10
output gpio:21
output gpio:56
output gpio:0
output gpio:41
output gpio:60
output gpio:40
output gpio:8
input gpio:18
input gpio:3
input gpio:1
output gpio:19
output gpio:19, value=1, 0
output gpio:53
output gpio:55
output gpio:52
output gpio:54
output gpio:51
output gpio:51, value=0, 1
output gpio:2
output gpio:2, value=0, 1
bootsel=3
hw-breakpoint: found 5 (+1 reserved) breakpoint and 1 watchpoint registers.
hw-breakpoint: maximum watchpoint size is 4 bytes.
Serial: AMBA PL011 UART driver
94404000.serial: ttyAMA0 at MMIO 0x94404000 (irq = 19, base_baud = 0) is a
console [ttyAMA0] enabled
94405000.serial: ttyAMA1 at MMIO 0x94405000 (irq = 20, base_baud = 0) is a
<pdt_wdt_init>(627):creat proc files for watchdog!!!
<pdt_wdt_init>(631):Starting Watchdog Timer...
arm A9 regs f0100620 cpu1 watchdog: heartbeat 20 sec, clock 3906250,max heartbeat 1099
enable watchdog in cpu0
vgaarb: loaded
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
Switched to clocksource arm_global_timer
NET: Registered protocol family 2
TCP established hash table entries: 4096 (order: 2, 16384 bytes)
TCP bind hash table entries: 4096 (order: 3, 32768 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
UDP hash table entries: 256 (order: 1, 8192 bytes)
UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
NET: Registered protocol family 1
synopsys pcie probe enter!!!!!!
pcie0 irq is 37
pcie1 irq is 38
synopsys pcie0 controller setting
synopsys pcie0 controller waitting L0 state
pcie0 link up,gen1,cnt 23!
synopsys pcie1 controller setting
synopsys pcie1 controller waitting L0 state
pcie1 link up,gen2,cnt 11!
PCI host bridge to bus 0000:00
pci_bus 0000:00: root bus resource [mem 0x10000000-0x17ffffff]
pci_bus 0000:00: root bus resource [io 0x1000-0xffff]
pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
PCI: bus0: Fast back to back transfers disabled
PCI host bridge to bus 0000:01
pci_bus 0000:01: root bus resource [mem 0x20000000-0x27ffffff]
pci_bus 0000:01: root bus resource [io 0x10000-0x1ffff]
pci_bus 0000:01: No busn resource found for root bus, will use [bus 01-ff]
PCI: bus1: Fast back to back transfers disabled
pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit pref]
pci 0000:01:00.0: BAR 2: assigned [mem 0x20100000-0x20107fff 64bit]
pci 0000:01:00.0: BAR 4: assigned [mem 0x20108000-0x20108fff 64bit pref]
pci 0000:00:00.0: BAR 0: assigned [mem 0x10000000-0x100fffff 64bit pref]
pci 0000:00:00.0: BAR 2: assigned [mem 0x10100000-0x10107fff 64bit]
pci 0000:00:00.0: BAR 4: assigned [mem 0x10108000-0x10108fff 64bit pref]
futex hash table entries: 512 (order: 2, 16384 bytes)
squashfs: version 4.0 (2009/01/31) Phillip Lougher
ntfs: driver 2.1.32 [Flags: R/W].
jffs2: version 2.2. (NAND) © 2001-2006 Red Hat, Inc.
fuse init (API version 7.23)
exFAT: file-system version 2.2.0-3arter97
io scheduler noop registered (default)
SCSI Media Changer driver v0.25
nand bootsel======3
zte_spifc_reg:dd09bf00
spifc->io_base :f0706000
nand: device found, Manufacturer ID: 0xc9, Chip ID: 0xd4
nand: hy SPI NAND HYF4GQ4UAACBE 512MiB 3,3V
nand: 512 MiB, SLC, erase size: 256 KiB, page size: 4096, OOB size: 256
NAND Chip: oobsize:0x100, pagesize:0x1000, blocksize:0x40000, chipsize:0x20000000, ECC capbility is 8 bits, CRC protection is disabled
Scanning device for bad blocks
Bad eraseblock 128 at 0x000002000000
Bad eraseblock 522 at 0x000008280000
Bad eraseblock 912 at 0x00000e400000
Bad eraseblock 1287 at 0x0000141c0000
Bad eraseblock 2047 at 0x00001ffc0000
bitflip_threshold====11,ecc strength=====14
##init_MUTEX cpu:0
##init_MUTEX cpu:1
Creating 11 MTD partitions on "ZX279127-spifc":
0x000000000000-0x000020000000 : "Whole flash"
0x000000000000-0x000000100000 : "Bootloader"
0x000000100000-0x000000200000 : "tag"
0x000000200000-0x000000400000 : "wifi"
0x000000400000-0x000000800000 : "usercfg"
0x000000800000-0x000000c00000 : "defcfg"
0x000000c00000-0x000000fc0000 : "kernel1"
0x000004c00000-0x000004fc0000 : "kernel2"
0x000000fc0000-0x000002900000 : "rootfs"
0x000008c00000-0x00000a000000 : "tcpdump"
0x00000a000000-0x00000bc00000 : "lxc"
ret:0
zx_spi_probe...master->bus_num:0
SPI0 probed
PPP generic driver version 2.4.2
NET: Registered protocol family 24
ZX_VA_TOP_CRM+0x4C=0x3cfff
**********TOP_CRM_BASE+0x08=0x1ff7ffff******
dwc2 9000000.usb: 1792 invalid for host_rx_fifo_size. Check HW configuration.
dwc2 9000000.usb: 1024 invalid for host_nperio_tx_fifo_size. Check HW configuration.
dwc2 9000000.usb: 1024 invalid for max_packet_count. Check HW configuration.
dwc2 9000000.usb: DWC OTG Controller
creating file 'devices'creating file '001'
dwc2 9000000.usb: new USB bus registered, assigned bus number 1
dwc2 9000000.usb: irq 41, io mem 0x00000000
usb usb1: New USB device found, idVendor=1d6b, idProduct=0002
usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
usb usb1: Product: DWC OTG Controller
usb usb1: Manufacturer: Linux 4.1.25 dwc2_hsotg
usb usb1: SerialNumber: 9000000.usb
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
usb usb1: csp_report_dev_addok 1d6b 2
11930:22:57 [KernOSS][Info] [oss_kernel_comm(209)KernOssInner_AS] transfer appid=00010000, msgid=0x0000a442, ptr=dd03bc90, len=16, iRet=-111
11930:22:57 [KernOSS][Warn] [oss_kernel_comm(298)Kernel_ASEND] failed:net = (null), receiver = cspd.cspd.usb_mgr, msgid = 0xa442, ptr = dd03bc90, len = 16, priority = 0, iRet=-1009
creating file '001'usb report device change: attach_flag=1
usbcore: registered new interface driver usbserial
usbcore: registered new interface driver usbserial_generic
usbserial: USB Serial support registered for generic
usbcore: registered new interface driver option
usbserial: USB Serial support registered for GSM modem (1-port)
I2C probe start!
zx_i2c_probe i2c-1 i2c-1->clk is dc829ea0 ,clk rate is 100000000
I2C probe successed!
usbcore: registered new interface driver usbhid
usbhid: USB HID core driver
zx tempsensor: zx_bsp_tempsensor.regs = 0xf0500034,&(zx_bsp_tempsensor.regs->cfg)= 0xf0500034
bsp_temp_start,val = 0x2ed
<pdt_temp_init>(624):creat proc files for temper sensor!!!
<pdt_temp_init>(629):temper sensor is running...
zx tempsensor: work clock 0
zx tempsensor: selector0's int num 23 allocated.
zx tempsensor: selector1's int num 24 allocated.
zx tempsensor: selector2's int num 25 allocated.
Init Common Switch Module
Init Common Switch Module Success
Mirror/redirect action on
u32 classifier
Performance counters on
input device check on
Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (7357 buckets, 29428 max)
ctnetlink v0.93: registering with nfnetlink.
nf_tables: (c) 2007-2009 Patrick McHardy <kaber@trash.net>
nf_tables_compat: (c) 2012 Pablo Neira Ayuso <pablo@netfilter.org>
gre_demux: GRE over IPv4 demultiplexor driver
ip_gre: GRE over IPv4 tunneling driver
IPv4 over IPsec tunneling driver
ip_tables: (C) 2000-2006 Netfilter Core Team
ipt_CLUSTERIP: ClusterIP Version 0.8 loaded successfully
Initializing XFRM netlink socket
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
sit: IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
NET: Registered protocol family 15
bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
Bridge firewalling registered
Ebtables v2.0 registered
l2tp_core: L2TP core driver, V2.0
l2tp_ppp: PPPoL2TP kernel driver, V2.0
8021q: 802.1Q VLAN Support v1.8
logger: created 1024K log 'logger_main' major '99'
logger: created 512K log 'logger_sys' major '101'
11930:22:58 [Kernm255][Info] [ver_info_nand_v(1002)ver_info_init]
11930:22:58 [Kern][Notice] [csp_board_abili(362)csp_board_abili] Initializing Board Ability...
----------netif_flag_init_net--------!
----------wb_init_net--------!
11930:22:58 [KIGMPSNP][Info] [br_multicast_se(7589)br_mcparam_init] info init!
11930:22:58 [KMLDSNP][Error] [br_mld.c(3926)mld_register] protocol =131
11930:22:58 [KMLDSNP][Error] [br_mld.c(3926)mld_register] protocol =132
11930:22:58 [KMLDSNP][Error] [br_mld.c(3926)mld_register] protocol =143
11930:22:58 [KQOS][Info] [qos.c(4011)CSPKernel_QoS_I] Qos module init
11930:22:58 [KQOS][Info] [qp_meter_api.c(77)QoSPolicerMeter] Register Meter(stb)
11930:22:58 [KQOS][Info] [qp_meter_api.c(77)QoSPolicerMeter] Register Meter(srtc)
11930:22:58 [KQOS][Info] [qp_meter_api.c(77)QoSPolicerMeter] Register Meter(trtc)
11930:22:58 [KQOS][Info] [qp_act_api.c(74)QoSPolicerActRe] Register Action(null)
11930:22:58 [KQOS][Info] [qp_act_api.c(74)QoSPolicerActRe] Register Action(drop)
11930:22:58 [KQOS][Info] [qp_act_api.c(74)QoSPolicerActRe] Register Action(dscp_mark)
11930:22:58 [KQOS][Info] [qp_act_api.c(74)QoSPolicerActRe] Register Action(vlan_prio_mark)
11930:22:58 [KQOS][Info] [qp_act_api.c(74)QoSPolicerActRe] Register Action(dscp_vlan_prio_mark)
zte--oss cpu usage module init
Registering SWP/SWPB emulation handler
11930:22:58 [KernOSS][Info] [oss_kernel_comm(209)KernOssInner_AS] transfer appid=00010000, msgid=0x0000a442, ptr=dc829bc0, len=16, iRet=-111
11930:22:58 [KernOSS][Warn] [oss_kernel_comm(338)kern_oss_timer_] bufCnt=2: Receiver=cspd.cspd.usb_mgr, wMsgId=0XA442
11930:22:58 [KernOSS][Info] [oss_kernel_comm(209)KernOssInner_AS] transfer appid=00010000, msgid=0x0000a437, ptr=dc942e00, len=320, iRet=-111
net_ratelimit: 66 callbacks suppressed
11930:23:02 [KernOSS][Info] [oss_kernel_comm(209)KernOssInner_AS] transfer appid=00010000, msgid=0x0000a442, ptr=dc829bc0, len=16, iRet=-111
11930:23:02 [KernOSS][Warn] [oss_kernel_comm(338)kern_oss_timer_] bufCnt=2: Receiver=cspd.cspd.usb_mgr, wMsgId=0XA442
11930:23:02 [KernOSS][Info] [oss_kernel_comm(209)KernOssInner_AS] transfer appid=00010000, msgid=0x0000a437, ptr=dc942e00, len=320, iRet=-111
11930:23:02 [KernOSS][Warn] [oss_kernel_comm(338)kern_oss_timer_] bufCnt=2: Receiver=cspd.cspd.usb_mgr, wMsgId=0XA437
VFS: Mounted root (jffs2 filesystem) readonly on device 31:8.
Freeing unused kernel memory: 220K (c06a7000 - c06de000)
This architecture does not have kernel memory protection.
11930:23:03 [KernOSS][Info] [oss_kernel_comm(209)KernOssInner_AS] transfer appid=00010000, msgid=0x0000a442, ptr=dc829bc0, len=16, iRet=-111
busybox init and set aff
sched_setaffinity cpu all success
mkdir: can't create directory '/var/tmp': File exists
init normal mode!!!
Loading drivers and kernel modules...
jffs2: Empty flash at 0x00279014 ends at 0x0027a000
jffs2: Empty flash at 0x00351280 ends at 0x00352000
jffs2: Empty flash at 0x0036a180 ends at 0x0036b000
jffs2: notice: (493) check_node_data: wrong data CRC in data node at 0x0010ca00: read 0xad490aea, calculated 0x619453c3.
register fpga driver success, major=222
pon init
ZX_PA_BUF_BASE0=5da00000
ZX_VA_BUF_BASE0=dda00000
ZX_ACL_BASE=5da20000
ZX_VA_ACL_BASE=dda20000
ZX_FLOW_BASE=5de20000
ZX_VA_FLOW_BASE=dde20000
ZX_BP_BUFFER_BASE=5df20000
ZX_DESC_BASE=5ff20000
ZX_TX_UP_DESC_BASE=5ffe0000
ZX_TX_DN_DESC_BASE=5fff0000
ZX_VA_BPPE_BASE=dda00000
ZX_VA_BP_BUF_BASE=ddf20000
ZX_VA_DESC_BASE=dff20000
ZX_VA_TX_UP_DESC_BASE=dffe0000
ZX_VA_TX_DN_DESC_BASE=dfff0000
BPPE_POOL_SIZE=3000
NORMAL_BP_BUFFER_SIZE=1b00000
JUMBO_BP_SIZE=2800
JUMBO_BPPE_POOL_SIZE=200
BP_BUFFER_SIZE=2000000
ponmode = 0x10
lan_up=1, lan_up_port=0
g_pon_irq=26,f4000000,f0400000,f0500000,f0600000,e0c00000
get npp irq succeed,g_npp_irq:27
get tm irq succeed,g_tm_irq:29
get pp irq succeed,g_pp_irq:30
get idm irq succeed,g_idm_irq:28
pon tm init
netif_napi_add() called with weight 512 on device pon
DMA_DN_DESC_CNT = 0x0
DMA_UP_DESC_CNT = 0x0
pon_tm net init ok,232/176
module-netdebug: register_chrdev failed
pon_pp init
pon_npp init
idm_status_proc success!
idm_desc_init e0ae9000/5caf0000
request idm irq succeed
idm net init ok
mac 0 link down
mac 1 link down
mac 2 link down
mac 3 link down
net_ratelimit: 70 callbacks suppressed
11930:23:07 [KernOSS][Info] [oss_kernel_comm(209)KernOssInner_AS] transfer appid=00010000, msgid=0x0000a442, ptr=dc829bc0, len=16, iRet=-111
11930:23:07 [KernOSS][Warn] [oss_kernel_comm(338)kern_oss_timer_] bufCnt=2: Receiver=cspd.cspd.usb_mgr, wMsgId=0XA442
11930:23:07 [KernOSS][Info] [oss_kernel_comm(209)KernOssInner_AS] transfer appid=00010000, msgid=0x0000a437, ptr=dc942e00, len=320, iRet=-111
11930:23:07 [KernOSS][Warn] [oss_kernel_comm(338)kern_oss_timer_] bufCnt=2: Receiver=cspd.cspd.usb_mgr, wMsgId=0XA437
11930:23:08 [KernOSS][Info] [oss_kernel_comm(209)KernOssInner_AS] transfer appid=00010000, msgid=0x0000a442, ptr=dc829bc0, len=16, iRet=-111
= TM Module SYS FS Init ended successfully =
tm_initModule begin...
enter tm_sdk_init
api lock init!!
tm_initModule end...
Init switch module
g_sw_cap.sw_uni_count=4
g_sw_cap.sw_uni_mask=0xe
g_sw_cap.sw_wan_port=0
g_sw_cap.sw_wan_mask=0x1
g_sw_cap.sw_all_port_count=7
g_sw_cap.sw_all_port_mask=0xef
g_sw_cap.gwtype1
g_sw_cap.wantype0
g_sw_cap.onutype3
ptSwInfo->wan_logicport=0
g_mii_dev_name[0] sw
g_mii_dev_name[1] pon
port id 0, name pon
sw_set_uni_as_wan uni=0
lan_up_port=0x0
PON_PP_TM_CFG=0x1200000
after PON_PP_TM_CFG=0x3200000
tm_pon_protocol_pktdeal_set fail, error protocal 33
tm_pon_protocol_pktdeal_set fail, error protocal 31
protocal fail, error deal 43
tm_pon_protocol_pktdeal_set fail, error protocal 35
tm_pon_protocol_pktdeal_set fail, error protocal 36
tm_pon_protocol_pktdeal_set fail, error protocal 37
tm_pon_protocol_pktdeal_set fail, error protocal 69
tm_pon_protocol_pktdeal_set fail, error protocal 34
protocol fail, error deal 66
[TM][dpa_set_protocol_type_i_act] failed
protocol fail, error deal 65
[TM][dpa_set_protocol_type_i_act] failed
-------chip_tm_init end-----
[SW][sw_init_switch] l2_fast init
[SW]set cpu queue rate limit to 8000pps
Capacity=256000
Capacity=256000[SW][sw_init_switch] reg hff
register npu driver 12
Init personal switch module Success
tdm registered!
zx_tdm2.0_probe!
g_tdm_buf =e0b31000,5caea000
remap tdm reg 9a106000 to f0806000
tdm irq=36
reg 0xf0800020 value is 0x20080b
Init codec v2.3(2019-05-17)!
Mounting cgroup at /cgroup
net_ratelimit: 70 callbacks suppressed
11930:23:12 [KernOSS][Info] [oss_kernel_comm(209)KernOssInner_AS] transfer appid=00010000, msgid=0x0000a442, ptr=dc829bc0, len=16, iRet=-111
11930:23:13 [KernOSS][Warn] [oss_kernel_comm(338)kern_oss_timer_] bufCnt=2: Receiver=cspd.cspd.usb_mgr, wMsgId=0XA442
11930:23:13 [KernOSS][Info] [oss_kernel_comm(209)KernOssInner_AS] transfer appid=00010000, msgid=0x0000a437, ptr=dc942e00, len=320, iRet=-111
11930:23:13 [KernOSS][Warn] [oss_kernel_comm(338)kern_oss_timer_] bufCnt=2: Receiver=cspd.cspd.usb_mgr, wMsgId=0XA437
11930:23:13 [KernOSS][Info] [oss_kernel_comm(209)KernOssInner_AS] transfer appid=00010000, msgid=0x0000a442, ptr=dc829bc0, len=16, iRet=-111
sh: can't create /proc/systools: nonexistent directory
11930:23:12 [OSS_pc][Notice] [pc.c(1964)main] sched_setaffinity cpu 0 (ret = 0)
boot log dan edinilen bilgiye göre
CPU: ZTE ZX279128S (1.0 GHz, 2 cores) -> SoC için OpenWrt desteği malesef ki şu an yok
SPI NAND HYF4GQ4UAACBE 512MiB 3,3V
SPI NAND Flash da bulunan bölümler:
11 MTD partitions on "ZX279127-spifc"
0x000000000000-0x000020000000 : "Whole flash"
0x000000000000-0x000000100000 : "Bootloader"
0x000000100000-0x000000200000 : "tag"
0x000000200000-0x000000400000 : "wifi"
0x000000400000-0x000000800000 : "usercfg"
0x000000800000-0x000000c00000 : "defcfg"
0x000000c00000-0x000000fc0000 : "kernel1"
0x000004c00000-0x000004fc0000 : "kernel2"
0x000000fc0000-0x000002900000 : "rootfs"
0x000008c00000-0x00000a000000 : "tcpdump"
0x00000a000000-0x00000bc00000 : "lxc"
SoC için OpenWrt desteği olmadığından teknik olarak buradan ileri gitmiyorum eğer desteği olsaydı cihazı port etmeye çalışabilirdik. Bundan sonra cihaz içinde görebileceğimiz neler var shell üzerinden araştırıp göreceğiz...
Son düzenleyen: Moderatör: