Equipos y materiales > Openwrt & LEDE |
Observa Telecom RTA01N (movistar adsl) |
<< < (2/3) > >> |
krasny:
Si, creo que la inversión de tiempo/posibilidades no resulta interesante en el caso de este router, de todos modos es una pena porque para determinadas aplicaciones podría ser interesante. He conseguido cambiar de adaptador serial y he obtenido el bootlog original, se que tiene los datos de mi router, pero eso me da igual. Aquí lo dejo como información: --- Citar ---Booting Press 'ESC' to enter BOOT console... Using Int. PHY support multicast tool:config address=1f8000 time out ...... Decompress file... uncompress fail OSK image found ok! create memory pool: start at 0x805023c8, size 11525176 spi_init(1279) c2/20 SPI flash found: id c2/20 sector_size:0x1000 num_of_sector:1024 4 wired tlb entry, 1 pages for pgt mib chain:DHCP_SERVING_POOL descpritor's size don't match its recordSize, please check it! mib chain:URL_STR descpritor's size don't match its recordSize, please check it! mib chain:KEYWORD_STR descpritor's size don't match its recordSize, please check it! mib chain:DOMAIN_STR descpritor's size don't match its recordSize, please check it! mib chain:NATRULE_INSRC descpritor's size don't match its recordSize, please check it! mib chain:NATRULE_INSRC_STATIC descpritor's size don't match its recordSize, please check it! mib chain:NATRULE_INSRC_FROM descpritor's size don't match its recordSize, please check it! mib chain:IP_ACL_STD_ENTRY descpritor's size don't match its recordSize, please check it! mib chain:IP_ACL_EXT_ENTRY descpritor's size don't match its recordSize, please check it! mib chain:QOS_RULE descpritor's size don't match its recordSize, please check it! mib chain:QOS_TC descpritor's size don't match its recordSize, please check it! mib chain:PERMANENT_ARP_TBL descpritor's size don't match its recordSize, please check it! mib chain:NAT_PORTRIGGER_RULES descpritor's size don't match its recordSize, please check it! mib chain:NAT_PRIORITY_RULES descpritor's size don't match its recordSize, please check it! mib chain:RA_ENTRY descpritor's size don't match its recordSize, please check it! mib chain:IPV6_FILTER descpritor's size don't match its recordSize, please check it! mib chain:IPV6_ACL descpritor's size don't match its recordSize, please check it! mib chain:DHCPV6S_INTERFACE descpritor's size don't match its recordSize, please check it! mib chain:DHCPV6C_INTERFACE descpritor's size don't match its recordSize, please check it! mib chain:DHCPV6_UUID descpritor's size don't match its recordSize, please check it! loadDefaultSetting 938............... loadDefaultSetting 940............... loadDefaultSetting 945............... uncompress: preLen:11503, unPreLen:58829 loadDefaultSetting 954............... flash hw config addr:0xbfc04000 size:8192 uncompress: preLen:291, unPreLen:719 flash sw config addr:0xbfff0000 size:65536 uncompress: preLen:11667, unPreLen:59720 system config initial finsihed. registerTask stackp=0x50001000, size 12288, name=CFGTASK registerTask stackp=0x50004000, size 12288, name=STPMAIN registerTask stackp=0x50007000, size 16384, name=CLITASK registerTask stackp=0x5000b000, size 12288, name=GENTSK registerTask stackp=0x5000e000, size 12288, name=XTCPIP registerTask stackp=0x50011000, size 20480, name=EWSTSK registerTask stackp=0x50016000, size 16384, name=SNMP registerTask stackp=0x5001a000, size 16384, name=FEATTASK registerTask stackp=0x5001e000, size 12288, name=PPPoE registerTask stackp=0x50021000, size 12288, name=ppp registerTask stackp=0x50024000, size 12288, name=TFTPD registerTask stackp=0x50027000, size 12288, name=TFTP registerTask stackp=0x5002a000, size 12288, name=DNS registerTask stackp=0x5002d000, size 12288, name=DDNS registerTask stackp=0x50030000, size 16384, name=Telnet registerTask stackp=0x50034000, size 12288, name=DHCP registerTask stackp=0x50037000, size 12288, name=FTPC registerTask stackp=0x5003a000, size 16384, name=BFTPD registerTask stackp=0x5003e000, size 12288, name=NTP registerTask stackp=0x50041000, size 12288, name=UPNP registerTask stackp=0x50044000, size 12288, name=CWMPSRV registerTask stackp=0x50047000, size 65536, name=CWMPCLT registerTask stackp=0x50057000, size 20480, name=CWMPDL registerTask stackp=0x5005c000, size 20480, name=CWMPDLD registerTask stackp=0x50061000, size 12288, name=CWMPUE registerTask stackp=0x50064000, size 12288, name=rtl8670 registerTask stackp=0x50067000, size 32768, name=auth_wlan registerTask stackp=0x5006f000, size 12288, name=WSC registerTask stackp=0x50072000, size 16384, name=dropbear registerTask stackp=0x50076000, size 12288, name=dhcpv6d registerTask stackp=0x50079000, size 12288, name=dhcpv6c registerTask stackp=0x5007c000, size 16384, name=IDLETSK eraseUnusedFlash fromSector=0xbfdb0000 ~~~~bufsize = 2164,datapool->start = 0x805cbd54,datapool->end = 0x80631454~~~~ Calibrating delay loop... 398.95 BogoMIPS set internal PHY page: 1 set internal PHY page: 1 set internal PHY page: 1 set internal PHY page: 1 set internal PHY page: 1 set internal PHY page: 1 set internal PHY page: 1 set internal PHY page: 1 set internal PHY page: 0 set internal PHY page: 0 is100m signal ignored for 8672C chip eth phy patch done! wlan0Init: idx=0, mac=d861944f27cd rtk_wlan_init:212 RTL8192C-RTL8188C driver version 1.6 (2009-11-18/2012-0306) =====>>INSIDE rtl8192cd_init_one <<===== conf_addr=b8b10000 rtl8192cd_init_one 6872, PCIE_reset_procedure PCIE_reset=0 Clock source is 35.328MHz conf_addr=b8b10000, base_addr=b9000000 vendor_deivce_id=819110ec check_chipID_MIMO==0x0 osk_register_netdev:wlan0, dev=0x8058e15c =====>>EXIT rtl8192cd_init_one wlanChipType=0x00001000<<===== =====>>INSIDE rtl8192cd_init_one <<===== osk_register_netdev:wlan0-vap0, dev=0x8063c40c =====>>EXIT rtl8192cd_init_one wlanChipType=0x00001000<<===== =====>>INSIDE rtl8192cd_init_one <<===== osk_register_netdev:wlan0-vap1, dev=0x80656d1c =====>>EXIT rtl8192cd_init_one wlanChipType=0x00001000<<===== =====>>INSIDE rtl8192cd_init_one <<===== osk_register_netdev:wlan0-vap2, dev=0x8067162c =====>>EXIT rtl8192cd_init_one wlanChipType=0x00001000<<===== =====>>INSIDE rtl8192cd_init_one <<===== osk_register_netdev:wlan0-vap3, dev=0x8068c56c =====>>EXIT rtl8192cd_init_one wlanChipType=0x00001000<<===== Warning: request_irq is used! irq14 request irq ok, rc=0 MacInit: RTL_R8(APS_FSMCO+1) retry times=12 FSMCO11=0x10002 [PHY_ConfigMACWithParaFile][MACPHY_REG_92C] val=5 ===> Load_92C_Firmware <=== Load_92C_Firmware 8192c firmware not ready val=c6 stop hw Warning: free_irq is used! irq14 enter rtk_wlan_config_root wlan0 set_mib ACS_forMa=0 wlan0 set_mib use40M=0 wlan0 set_mib coexist=0 wlan0 set_mib ampdu=1 wlan0 set_mib shortGI20M=1 wlan0 set_mib shortGI40M=1 wlanGetRegDomain 20 value=3 wlan0 set_mib regdomain=3 wlan0 set_mib led_type=12 rtk_wlan_config 1306:SSID=MOVISTAR_27CD default SSID=RTK_ADSL wlan0 set_mib ssid=MOVISTAR_27CD wlan0 set_mib vap_enable=0 wlan0 set_mib opmode=16 wlan0 set_mib shortretry=0 wlan0 set_mib longretry=0 wlan0 set_mib pwrlevelCCK_A=2828282828282828282828282828 wlan0 set_mib pwrlevelCCK_B=3030303030303030303030303030 wlan0 set_mib pwrlevelHT40_1S_A=2a2a2a2828282828282828282828 wlan0 set_mib pwrlevelHT40_1S_B=3030303032323232323232323232 wlan0 set_mib ther=19 wlan0 set_mib bcnint=100 wlan0 set_mib channel=0 wlan0 set_mib basicrates=15 wlan0 set_mib oprates=4095 wlan0 set_mib autorate=1 wlan0 set_mib rtsthres=2347 wlan0 set_mib fragthres=2346 wlan0 set_mib expired_time=30000 wlan0 set_mib preamble=0 wlan0 set_mib hiddenAP=0 wlan0-vap0 set_mib hiddenAP=0 wlan0-vap1 set_mib hiddenAP=0 wlan0-vap2 set_mib hiddenAP=0 wlan0-vap3 set_mib hiddenAP=0 wlan0 set_mib dtimperiod=1 wlan0 set_mib aclnum=0 wlan0 set_mib aclmode=0 wlan0 set_mib authtype=2 wlan0-vap0 set_mib authtype=2 wlan0-vap1 set_mib authtype=2 wlan0-vap2 set_mib authtype=2 wlan0-vap3 set_mib authtype=2 wlan0 set_mib encmode=2 wlan0-vap0 set_mib encmode=0 wlan0-vap1 set_mib encmode=0 wlan0-vap2 set_mib encmode=0 wlan0-vap3 set_mib encmode=0 wlan0 set_mib psk_enable=0 wlan0 set_mib wpa_cipher=0 wlan0 set_mib wpa2_cipher=0 wlan0 set_mib lgyEncRstrct=15 wlan0-vap0 set_mib psk_enable=0 wlan0-vap0 set_mib wpa_cipher=0 wlan0-vap0 set_mib wpa2_cipher=0 wlan0-vap0 set_mib lgyEncRstrct=15 wlan0-vap1 set_mib psk_enable=0 wlan0-vap1 set_mib wpa_cipher=0 wlan0-vap1 set_mib wpa2_cipher=0 wlan0-vap1 set_mib lgyEncRstrct=15 wlan0-vap2 set_mib psk_enable=0 wlan0-vap2 set_mib wpa_cipher=0 wlan0-vap2 set_mib wpa2_cipher=0 wlan0-vap2 set_mib lgyEncRstrct=15 wlan0-vap3 set_mib psk_enable=0 wlan0-vap3 set_mib wpa_cipher=0 wlan0-vap3 set_mib wpa2_cipher=0 wlan0-vap3 set_mib lgyEncRstrct=15 wlan0 set_mib psk_enable=1 wlan0 set_mib passphrase=6LNucNNt82vHP25Qtisr wlan0 set_mib 802_1x=1 wlan0-vap0 set_mib 802_1x=0 wlan0-vap1 set_mib 802_1x=0 wlan0-vap2 set_mib 802_1x=0 wlan0-vap3 set_mib 802_1x=0 wlan0 set_mib band=11 wlan0 set_mib deny_legacy=0 wlan0-vap0 set_mib band=11 wlan0-vap0 set_mib deny_legacy=0 wlan0-vap1 set_mib band=11 wlan0-vap1 set_mib deny_legacy=0 wlan0-vap2 set_mib band=11 wlan0-vap2 set_mib deny_legacy=0 wlan0-vap3 set_mib band=11 wlan0-vap3 set_mib deny_legacy=0 wlan0 set_mib lowestMlcstRate=0 wlan0 set_mib cts2self=1 wlan0 set_mib disable_protection=0 wlan0 set_mib block_relay=0 wlan0 set_mib qos_enable=1 wlan0 set_mib apsd_enable=1 wlan0 set_mib mc2u_disable=0 wlan0 set_mib pwr_by_rate=0 exit rtk_wlan_config_root rtk_wlan_set_mac_addr: 804edc28,8058e15c wlan0Init: idx=1, mac=d861944f27ce rtk_wlan_set_mac_addr: 804edc38,8063c40c wlan0Init: idx=2, mac=d861944f27cf rtk_wlan_set_mac_addr: 804edc48,80656d1c wlan0Init: idx=3, mac=d861944f27d0 rtk_wlan_set_mac_addr: 804edc58,8067162c wlan0Init: idx=4, mac=d861944f27d1 rtk_wlan_set_mac_addr: 804edc68,8068c56c Port ifindex range Br 1 Wan 2-9 Wlan root 10 Wlan vap 11-14 PPP 15-22 GIF 23-26 STF 27 numberOfPorts 14 ####V6 Fastpath entry size:56 Bytes addV6FastpathEntryCache 679 i=64 max=64 count=64 ####initial default route table! ####initial cwmp route table! ####initial local route table! ####inital 4 port mapping route tables! ####inital 5 port mapping tables! alloc 9k bytes for route table dns wait time is 2 secs dhcpv6dmain start.............................. CreateVC channel(0) tunnel mode (0) CreateVc: vpi=255 vci=65535 ch_no=0 rfc=brg1483 cp->vcc[ch_no].created=0 Enable_New_IP_Parse: ch_no=0, rfc=0, framing=0, CKS=0x00002440 create sar : create sar rfc =4 frameing =0 CreateVC channel(0) tunnel mode (0) CreateVc: vpi=8 vci=32 ch_no=0 rfc=pppoe cp->vcc[ch_no].created=0 Enable_New_IP_Parse: ch_no=0, rfc=4, framing=0, CKS=0x00002c40 setIfPortRfc ifindex=2,rfc=4 create sar : create sar rfc =4 frameing =0 CreateVC channel(1) tunnel mode (0) CreateVc: vpi=8 vci=36 ch_no=1 rfc=pppoe cp->vcc[ch_no].created=0 Enable_New_IP_Parse: ch_no=1, rfc=4, framing=0, CKS=0x00002c40 setIfPortRfc ifindex=3,rfc=4 #######ipCircCreate type=256 if_id=15 rcid=0 smdixTimerHandler tryFlag=0, modeToggle=0, wt=0 et ppp-encap to 0 #######ipCircCreate type=256 if_id=16 rcid=0 set ppp-encap to 0 setCfgIntfNat 1773 itf=15 mdoe=2 setCfgIntfNat 1791 itf=15 mdoe=2 setCfgIntfNat 1773 itf=16 mdoe=2 setCfgIntfNat 1791 itf=16 mdoe=2 #######ipCircCreate type=1 if_id=1 rcid=0 ipCircSetIPA id_pyhport=1 c->rc_id=3 phyport=1 xipCreateVif................... ipCircEnable 1188............... ipCircEvent 905............... ####add 0xc0a80101/0xffffffff in route table 0x806ce204! owner=5, cid=3 src=0xc0a80101 set network direct route, phyport=1 itf e1. ####add 0xc0a80100/0xffffff00 in route table 0x806ce204! owner=6, cid=3 src=0xc0a80101 #######ipCircCreate type=1 if_id=1 rcid=0 ipCircSetIPA id_pyhport=2 c->rc_id=4 phyport=1 xipCreateVif................... ipCircEnable 1188............... ipCircEvent 905............... ####add 0xc0a8f901/0xffffffff in route table 0x806ce204! owner=5, cid=4 src=0xc0a8f901 set network direct route, phyport=1 itf e1. ####add 0xc0a8f900/0xfffffffc in route table 0x806ce204! owner=6, cid=4 src=0xc0a8f901 ipCircEnable 1188............... ipCircEvent 905............... ipCircEnable 1188............... ipCircEvent 905............... setCfgIntfNat 1773 itf=15 mdoe=2 setCfgIntfNat 1791 itf=15 mdoe=2 setCfgIntfNat 1773 itf=16 mdoe=2 setCfgIntfNat 1791 itf=16 mdoe=2 init_rtsp_ssrc 39 nat entry's size is 160 bytes Nat Entry Maxinum: 4096 gNatCachePoolp=0x804f5ae4 gNatCachePoolp->qcnt=1024 natRuleAdd 2312 flags=0x00000009 sip=0.0.0.0 eip=0.0.0.0 enqueue item to queue! natRuleAdd 2312 flags=0x00000009 sip=0.0.0.0 eip=0.0.0.0 enqueue item to queue! portrigger rule total 0 ! priority rule total 4 ! mib_chain_add error! this entry NAT_PRIORITY_RULES has been in chain list! mib_chain_add error! this entry NAT_PRIORITY_RULES has been in chain list! mib_chain_add error! this entry NAT_PRIORITY_RULES has been in chain list! mib_chain_add error! this entry NAT_PRIORITY_RULES has been in chain list! priority rule total 4 ! The rule has existed!do nothing!The rule has existed!do nothing!The rule has existed!do nothing!The rule has existed!do nothing!cfgSetIgmpProxyAnyItf isDisable=1 not find mib entry that match tag:35983! not find mib entry that match tag:35984! not find mib entry that match tag:35985! not find mib entry that match tag:35986! not find mib entry that match tag:35987! setCfgMacAcInterfaceList(540): macAcInterfaceBitmap=0x00000000 *******ipv6Init() Start******* ipfw2 (+ipv6) initialized, divert loadable, nat loadable, rule-based forwarding disabled, default to accept, logging ####ipfw2 dynamic entry size: 92 bytes,pre malloc 64 entries disabled Enter SetupFWRule! do_firewall_cmd:command=flush Flushed all rules. do_firewall_cmd() execute successfully! do_firewall_cmd:command=add check-state do_firewall_cmd() execute successfully! do_firewall_cmd:command=add skipto 1000 icmp6 from any to any icmp6types 128,129 do_firewall_cmd() execute successfully! do_firewall_cmd:command=add allow icmp6 from any to any do_firewall_cmd() execute successfully! do_firewall_cmd:command=add 1000 skipto 5000 ip6 from any to me6 in via e1 do_firewall_cmd() execute successfully! do_firewall_cmd:command=add skipto 5000 ip6 from me6 to any out via e1 do_firewall_cmd() execute successfully! do_firewall_cmd:command=add skipto 10000 ip6 from any to me6 in via wan do_firewall_cmd() execute successfully! do_firewall_cmd:command=add skipto 10000 ip6 from me6 to any out via wan do_firewall_cmd() execute successfully! do_firewall_cmd:command=add skipto 15000 ip6 from any to any do_firewall_cmd() execute successfully! Enter SetupLanAclRule! do_firewall_cmd:command=set 1 flush Flushed all rules. do_firewall_cmd() execute successfully! do_firewall_cmd:command=add 9980 set 1 allow ip6 from any to any out keep-state do_firewall_cmd() execute successfully! do_firewall_cmd:command=add 9990 set 1 allow ip6 from any to any in keep-state do_firewall_cmd() execute successfully! Enter SetupWanAclRule! do_firewall_cmd:command=set 2 flush Flushed all rules. do_firewall_cmd() execute successfully! do_firewall_cmd:command=add 10010 set 2 allow icmp6 from any to any in via wan keep-state icmp6types 128,129 do_firewall_cmd:command=add 14980 set 2 allow ip6 from any to any out keep-state do_firewall_cmd() execute successfully! do_firewall_cmd:command=add 14990 set 2 deny ip6 from any to any in do_firewall_cmd() execute successfully! Enter SetupWanAclRule! do_firewall_cmd:command=set 3 flush Flushed all rules. do_firewall_cmd() execute successfully! do_firewall_cmd:command=add 15010 set 3 allow icmp6 from any to any in recv wan keep-state icmp6types 128,129 do_firewall_cmd:command=add 19980 set 3 allow ip6 from any to any out recv e1 xmit wan keep-state do_firewall_cmd() execute successfully! do_firewall_cmd:command=add 19990 set 3 deny ip6 from any to any out recv wan xmit e1 do_firewall_cmd() execute successfully! *******ipv6Init() End******* qos list add success qos list add success captive portal redirect url string: Client limit disabled Restart cwmp server! cwmpwanport=7547 <cwmp_udpecho_server_loop:82> pset:interface=,srcip=0.0.0.0,port=0> adslRestoreMode =0 wlan_itf_start>Wlan is going up..........[5] enable idx=0 rtk_wlan_open:240>wlan0 Warning: request_irq is used! irq14 request irq ok, rc=0 MacInit: RTL_R8(APS_FSMCO+1) retry times=12 FSMCO11=0x11012 [PHY_ConfigMACWithParaFile][MACPHY_REG_92C] val=4 ===> Load_92C_Firmware <=== Load_92C_Firmware 8192c firmware not ready val=c6 wlan_itf_start>open wlan idx=0 successfully Warning: int_Register is deprecated disable idx=1 disable idx=2 disable idx=3 disable idx=4 Set root WPA PSK = 6LNucNNt82vHP25Qtisr 802.1x daemon: open interface 0 IEEE 802.1x (WPA) daemon, version 1.7f 802.1x daemon: open interface 0 IEEE 802.1x (WPA) daemon, version 1.7f [wsc]wsc_main 5692:daemon parameter: r<cwmpinit_NoDebugMsg>Set No Debug Message[1] <cwmpinit_DelayStart>Set Delay[30] <../../swbase/protocol/cwmp/libcwmp/cwmp_utility.c>Set gDisplaypassword[1] <../../swbase/protocol/cwmp/libcwmp/cwmp_utility.c>Set gDisplayNotificationPara[0] @@-objFIREWALLRule:5815, -num=28---@@@ load default certificate files flashfile_init>no flashfile connecting to https://main.acs.telefonica.net:7004/cwmpWeb/WGCPEMgt(804f7cf0) aebrgForwardInit ++++++++++++++++++++++++++++++++setup_remote_mgmt_pvc: vpi=0 vci=16 ch_no=18 we will simulate this mgmt pvc in out band channel ++++++++++++++++++++++++++++++++setup_remote_mgmt_pvc: vpi=1 vci=39 ch_no=19 we will simulate this mgmt pvc in out band channel adslCfgMode: modemask=0x71 dhcp: port10 up port 10 is up guitmdixTimerHandler tryFlag=0, modeToggle=0, wt=0 shRtegisterEAPOL: already registered 802.1x daemon: open interface 0 IEEE 802.1x (WPA) daemon, version 1.7f eauthRegfail to bind for socket 1, status -126 i/sterEfail to bind for socket 2, status -126 rAPOL: already rtefail to bind for socket 2, status -126 bgfail to bind for socket 2, status -126 ifail to bind for socket 2, status -126 stoered 802.1x daemon: open interface 0 IEEE 802.1x (WPA) daemon, version 1.7f kauethRegnisterEAPOL: already registered 802.1x daemon: open interface 0 IEEE 802.1x (WPA) daemon, version 1.7f authRegisterEAPOL: already registered on/ws cd -stafrat -ct /vara/wscld .ctoonf -dw welbanu0g -ftia /vbar/wlscd-ew lafna0.iflif er -debug --g--->iparsse_artguemren tt Writing file /var/wscd.conf... ----o->rkeade_nconfi g_fxilef Read config file[/var/wscd.conf], def=0 ile to debugtable fail [wsc]read_config_file 4709:auth_type:0x02 restoreAndclearLogFile clearLogFile aa logRecord ffff , severity=255, events=ffff SYS_LOG_START_1=bffe0000,LOGLINESIZE=128 bb logRecord 321 , severity=5, events=321 4e ff b0 22 3 21 21 5 75 73 65 72 6e 61 6d 65 3d 20 70 61 73 73 77 6f 72 64 3d a 20 66 61 69 6c 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 4e ff b0 22 3 21 21 5 75 73 65 72 6e 61 6d 65 3d 20 70 61 73 73 77 6f 72 64 3d a 20 66 61 69 6c 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4e ff b0 22 3 22 21 5 75 73 65 72 6e 61 6d 65 3d 20 70 61 73 73 77 6f 72 64 3d a 66 6c 61 73 70 3d 62 66 66 65 64 30 30 30 2c 62 6f 74 74 6f 6d 3d 31 36 30 2c 6c 69 6e 65 73 69 20 66 61 69 6c 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4e ff b0 22 3 23 21 5 75 73 65 72 6e 61 6d 65 3d 20 70 61 73 73 77 6f 72 64 3d a 66 6c 61 73 70 3d 62 66 66 65 64 30 38 30 2c 62 6f 74 74 6f 6d 3d 31 36 31 2c 6c 69 6e 65 73 69 7a 65 3d 31 32 20 66 61 69 6c 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4e ff b0 22 3 24 21 5 75 73 65 72 6e 61 6d 65 3d 20 70 61 73 73 77 6f 72 64 3d a 66 6c 61 73 70 3d 62 66 66 65 64 31 30 30 2c 62 20 66 61 69 6c 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 command string: dump "dump" command: No change mode writeflashLEDCycle 1313 compress: unPreLen:59720, preLen:11667 start write config mib to flash addr:bfff0000, write size:11675 ... write mib to flash end tr068_internet_led 60 state=0 mdixTimerHandler tryFlag=0, modeToggle=0, wt=0 User[wsc]read_config_file 4741:encrypt_type_flash:12 [wsc]read_config_file 4742:encrypt_type:4 namemdixTimerHandler tryFlag=0, modeToggle=0, wt=0 :fail to bind for socket 2, status -126 fail to bind for socket 1, status -126 fail to bind for socket 2, status -126 fail to bind for socket 2, status -126 fail to bind for socket 2, status -126 [wsc]read_config_file 4885:network_key=6LNucNNt82vHP25Qtisr adslsetPMSconfig N1=0,D1=0 adslsetPMSconfig N2=0,D2=0 adslsetPMSconfig N3=0,D3=0 adslsetPMSconfig N4=0,D4=0 adslsetPMSconfig N5=0,D5=0 adslsetPMSconfig N6=0,D6=0 adslsetPMSconfig Skip_ND=0 *******ipv6Init2() Start******* ipv6_IfInit:ifport=l0, adminStatus=0 ipv6_IfInit:ifport=e1, adminStatus=1 ipv6_IfInit:ifport=w1, adminStatus=1 ipv6_IfInit:ifport=w2, adminStatus=0 ipv6_IfInit:ifport=w3, adminStatus=0 ipv6_IfInit:ifport=w4, adminStatus=0 ipv6_IfInit:ifport=w5, adminStatus=0 getconfig:ifp=e1 gifConfigSet()! total=0 stfConfigSet()! g_prefix_filter=0 *******ipv6Init2() End******** [wsc]read_config_file 4722:auth_type_flags:0x27 [wsc]read_config_file 4754:encrypt_type_flags:15 <<====WPS argument list=====>> is_ap = 1 role = Registrar config_state = configured config_method = 0x86 pin_code = 71537573 use_ie = 1 upnp = 1 ---wlan0 setting--- rf_band = 1; 1=2.4G ;2=5G wep_transmit_key = 0 SSID=MOVISTAR_27CD Auth Type=2 Encrypt Type=4 WSC_PSK = "6LNucNNt82vHP25Qtisr" configured button_hold_time = 5 disable_configured_by_exReg = 0 support EAP_frag reassembly AP mode; Probe_Rsp wsc_ie frag =false AP mode;Extension Tag =false uuid=63041253101920061228d861944f27cd auto_lock_down:during[60],fail[3]times,locked[60]seconds wsc version=2.0 <<====WPS argument list=====>> pCtx->original_pin_code = 71537573 get_mac_addr>ffffffd861ffffff944f27ffffffcd [wsc]wsc_main 5756:wlan0 addr: (wsc_main,5757): D8:61:94:4F:27:CD pCtx->upnp:1, wsc_main << Start_upnp >> WSCRegisterCallBackFunc successfully! mini_UPnP_DeviceStateTableInit 1693: evnturl_ctrl = /upnp/event/WFAWLANConfig1 mini_UPnP_DeviceStateTableInit 1694:<<===========upnp parameters=================>> mdixTimerHandler tryFlag=0, modeToggle=0, wt=0 WiFi Simple Config v1.22 (Feb 7 2013). pidfile_acquire>/var/run/wscd-wlan0.pid pidfile_write_release>pid_fd:0 ----->init_wlan fixme:open the fifo [util]build_probe_rsp_ie,3974:config method(0x1008)=6 wlan0 set_mib wsc_enable=3 wlan0 set_mib func_off=0 init_wlan-----> Initialize PBC station list mutex... wps_set_led_mode>mode=E wps_set_led_mode>mode=0 [wsc]wsc_main 5917:alarm(1)----------> Wrong dns server address! Wrong dns server address! Wrong dns server address! dns cache rehash:size=150,new_size=64 flasp=bffe2600,bottom=76,linesize=128 cwmp_webserver_init() successful: master socket = 1 ch:1 cca=224, fa:217, rx_count:0, rx_count_40M:0, ap_count:0 ch:2 cca=0, fa:0, rx_count:0, rx_count_40M:0, ap_count:0 ch:3 cca=4, fa:5, rx_count:0, rx_count_40M:0, ap_count:0 ch:4 cca=1, fa:0, rx_count:0, rx_count_40M:0, ap_count:0 ch:5 cca=207, fa:223, rx_count:1, rx_count_40M:0, ap_count:0 ch:6 cca=4286, fa:2242, rx_count:1440, rx_count_40M:0, ap_count:0 ch:7 cca=934, fa:950, rx_count:1, rx_count_40M:16, ap_count:0 ch:8 cca=3024, fa:2900, rx_count:33, rx_count_40M:10, ap_count:0 ch:9 cca=0, fa:0, rx_count:0, rx_count_40M:13, ap_count:0 ch:10 cca=4, fa:2, rx_count:1, rx_count_40M:12, ap_count:0 ch:11 cca=0, fa:0, rx_count:1, rx_count_40M:9, ap_count:1 ch:12 cca=0, fa:0, rx_count:0, rx_count_40M:0, ap_count:0 ch:13 cca=13, fa:12, rx_count:3, rx_count_40M:0, ap_count:0 ch1,217,ch2,85,ch3,7376,ch4,13221,ch5,13732,ch6,17411,ch7,14745,ch8,16750,ch9,8077,ch10,858,ch11,708,ch12,475,ch13,362, select channel is:2 mdixTimerHandler tryFlag=0, modeToggle=0, wt=0 mdixTimerHandler tryFlag=0, modeToggle=0, wt=0 mdixTimerHandler tryFlag=0, modeToggle=0, wt=0 mdixTimerHandler tryFlag=0, modeToggle=0, wt=0 mdixTimerHandler tryFlag=0, modeToggle=0, wt=0 mdixTimerHandler tryFlag=0, modeToggle=0, wt=0 mdixTimerHandler tryFlag=0, modeToggle=0, wt=0 mdixTimerHandler tryFlag=0, modeToggle=0, wt=0 mdixTimerHandler tryFlag=0, modeToggle=0, wt=0 mdixTimerHandler tryFlag=0, modeToggle=0, wt=0 mdixTimerHandler tryFlag=0, modeToggle=0, wt=0 --------******start ending ****----- create memory pool: start at 0x804ffb90, size 10296 Init memory freed, start:804ffb90, len:10296 InformIntevalCnt is set to 259200(s) <../../swbase/protocol/cwmp/libcwmp/cwmp_utility.c>Set gSupportFtpTransfer[1] --- Fin de la cita --- Nota: editado por Pteridium porque descuadraba un poco el hilo. |
barriteleves:
hola compañero me ha regalodo uno de estos y acabo de mirar tus post un detalle esta wiki puede ayudar: https://wikidevi.com/wiki/EnGenius_ESR1221N dentro de ella he visto esta otra: https://forum.openwrt.org/viewtopic.php?id=46606 estoy mirando esta ultima y hace referencia ha este kernel --- Citar ---i download the kernel " openwrt-realtek-rtl8196c-nprove-kernel.bin" --- Fin de la cita --- |
barriteleves:
he mirado y conectado el adaptador para puerto serie a usb desde donde pone jp1 es : 3,3 GND, tx y rx, y cruzando rx por tx en el adaptador funcionando perfectamente e sacado todo el arranque igual al tuyo, ademas he jugado un poco pulsando intro al final y entra en consola te pido username 1234 y password 1234, entras tienes varios comandos: pero enlugar de realizarlo asi tambien he probado como pone al principio del arranque pulsando escape : Booting Press 'ESC' to enter BOOT console... Using Int. PHY (c)Copyright Realtek, Inc. 2010 Project RTL867X LOADER (LZMA) Version 00.00.14e (Feb 20 2013 17:26:01) <RTL867X>ls <RTL867X>dir <RTL867X>help help info reboot run [app addr] [entry addr] r [addr] w [addr] [val] d [addr] <len> resetcfg mac ["clear"/"osk"/mac address] bootline entry [address] load [address] xmodem [address] tftp [ip] [server ip] [file name] web multicast flashsize [256(k)/128(k)/1(M)/2(M)/4(M)/8(M)/16(M)] memsize ROW[2k/4k/8k/16k] COL[256/512/1k/2k/4k] BANK[2/4] uart [0(enable)/1(disable)] <RTL867X>help help info reboot run [app addr] [entry addr] r [addr] w [addr] [val] d [addr] <len> resetcfg mac ["clear"/"osk"/mac address] bootline entry [address] load [address] xmodem [address] tftp [ip] [server ip] [file name] web multicast flashsize [256(k)/128(k)/1(M)/2(M)/4(M)/8(M)/16(M)] memsize ROW[2k/4k/8k/16k] COL[256/512/1k/2k/4k] BANK[2/4] uart [0(enable)/1(disable)] <RTL867X>info (c)Copyright Realtek, Inc. 2010 Project RTL867X LOADER (LZMA) Version 00.00.14e (Feb 20 2013 17:26:01) <RTL867X>BootLine: file MAC Address [0]: 00:23:79:11:22:33 Entry Point: 0x80000000 Load Address: 0x80000000 Application Address: 0xBFC10000 Flash Size: 16M Memory Configuration: ROW:4K COL:512 Bank:4Banks MII Selection: 0 (0: Int. PHY 1: Ext. PHY) UART is enabled el router se queda en led rojo encendido constantemente, como puedes observar esta listo para actualizar por esta via parando el arranque del boot. hay varias formas una de ellas tftp. etc haber si ahora consiguo sacar un drump completo |
barriteleves:
aampliando los datos de conexion de la consola al final del arranque con su username y password, 1234 , 1234 respectivamente he teclecado el acceso al sell (Çsh) esto s lo que responde: sh ADSL#ls command: "ls" is unknown Looking for : adsl ADSL Status capture capture on/Off define/...flag cfgmib Configuration mib setting clear Reset functions configuration Enter configureation mode copy Copy from one file to another cpuocpy cpu occupancy debug Debuging functions (see also 'undebug') dsttime Set D.S.T. time ethctl Read/Write switch or internal PHY register flash Configuration flash setting lanmirror mirror lan packets led led setting login Turn on priviledged commands logout logout system memory ping Send echo messages ping6 Send ipv6 echo request messages pppoe Set pppoe configuration quit goto shell reload Halt and perform a warm restart restart Halt and perform a warm restart sardebug sar rx/tx info sardebug 0/1 (disable/enable) sarmirror set mirror packet for TX and RV packet show Show running system information tftp Trivial File Transfer Protocol trace trace route undebug si tecleamos adsl : adsl Looking for : enableModemLine disableModemLine getDriverVersion getReHSKCount getChannelSNR reportModemStates reportPMdata farEndIdentification nearEndIdentification farEndLineData nearEndLineData nearEndChannelDataFastMode nearEndChannelDataInterlea farEndChannelDataFastMode farEndChannelDataInterleav setAdslMode getAdslMode getLossData getLinkSpeed getChannelMode getLoopAtt sendDyingGasp incTxPower tunePerf enableBitSwap disableBitSwap enableTrellis disableTrellis setLoopback testPsd getChannelBH retrain debugMode msgMode time dump setrxgain sethybrid setannexl trigolrtype1 setpmsconfig masktone GetUsPMSParam1 GetDsPMSParam1 gpio |
geminis_demon:
Buenas, estoy cacharreando un poco con este router. He visto que tiene un backdoor que permite acceder por telnet como administrador, con algunos comandos extra. Desde la interface web, puedes hacer un backup de la configuración del router, o puedes ver el archivo sin descargartelo entrando a la siguiente url: http://192.168.1.1/form2saveConf.cgi El el archivo entre otras cosas se puede ver lo siguiente: --- Código: ---<chain N="USERNAME_PASSWORD"> <V N="FLAG" V="0x0"/> <V N="USERNAME" V="1234"/> <V N="PASSWORD" V="1234"/> <V N="BACKDOOR" V="0x0"/> <V N="PRIORITY" V="0x2"/> </chain> <chain N="USERNAME_PASSWORD"> <V N="FLAG" V="0x0"/> <V N="USERNAME" V="admin"/> <V N="PASSWORD" V="3767airocon"/> <V N="BACKDOOR" V="0x1"/> <V N="PRIORITY" V="0x1"/> --- Fin del código --- Entrando por telnet con el usuario "admin" y la clave (en mi caso) "3767airocon" tenemos algunos comandos extra, aunque sigue siendo una shell muy limitada. La clave se compone por lo dos últimos dígitos del BSSID seguido de airocon, por lo que siempre se puede acceder a la configuración del router aunque el usuario cambie la clave por defecto desde la interface web. Se puede desactivar el backdoor cambiando --- Código: ---<V N="BACKDOOR" V="0x1"/> --- Fin del código --- por --- Código: ---<V N="BACKDOOR" V="0x0"/> --- Fin del código --- o cambiar el usuario y contrasña que vienen por defecto. |
Navegación |
Índice de Mensajes |
Página Siguiente |
Página Anterior |