рдпрд╣ рд╕рдм рддрдм рд╢реБрд░реВ рд╣реБрдЖ рдЬрдм рдореИрдВ рдмрд┐рдХреНрд░реА рдФрд░ рдирдП рднрдирднрдирд╛рдиреЗ рд╡рд╛рд▓реЗ рд╢рдмреНрджреЛрдВ рд╕реЗ рд▓рдбрд╝рдЦрдбрд╝рд╛рдпрд╛ рд╣реБрдЖ рдерд╛ - рдореИрдВрдиреЗ рдПрдХ рджреЗрд╕реА рдШрд░ рдХреЗ рд╕рднреА рдХреЛрдиреЛрдВ рдФрд░ рдПрдХ рдЖрд╕рдиреНрди рднреВрдЦрдВрдб рдХреЛ рдХрд╡рд░ рдХрд░рдиреЗ рдХреЗ рд▓рд┐рдП рдПрдХ рд╡рд╛рдИрдлрд╛рдИ рдЬрд╛рд▓ рдкреНрд░рдгрд╛рд▓реА рдЦрд░реАрджреАред рд╕рдм рдХреБрдЫ рдареАрдХ рд╣реЛ рдЬрд╛рдПрдЧрд╛, рд▓реЗрдХрд┐рди рдПрдХ рд╕рдорд╕реНрдпрд╛ рдХрд╖реНрдЯрдкреНрд░рдж рдереАред рдФрд░ рдЗрд╕ рддрдереНрдп рдХреЛ рдзреНрдпрд╛рди рдореЗрдВ рд░рдЦрддреЗ рд╣реБрдП рдХрд┐ рдореИрдВ рдХреБрдЫ рджрд┐рдиреЛрдВ рдХреЗ рд▓рд┐рдП рдмреАрдорд╛рд░ рдЫреБрдЯреНрдЯреА рдкрд░ рдмреИрдард╛ рдерд╛, рдЗрд╕рдиреЗ рдореБрдЭреЗ рдЗрд╕ рд░рд╛рдЙрдЯрд░ рдХреА рдЬрдбрд╝ рддрдХ рдкрд╣реБрдВрдЪрд╛рдпрд╛ред

рд╕рдорд╕реНрдпрд╛
рд░реБрдЪрд┐ рдХреЗ рд▓рд┐рдП, рдореИрдВрдиреЗ рддреАрди рдХреНрдпреВрдмреНрд╕ рдЯреЗрдВрдбрд╛ рдиреЛрд╡рд╛ рдПрдордбрдмреНрд▓реНрдпреВ 6 рдХреЗ рджреЛ рд╕реЗрдЯ рдЦрд░реАрджреЗ - рдбрдореА рдХреЗ рд▓рд┐рдП рд╡рд╛рдИрдлрд╛рдИ рдЬрд╛рд▓ рдХреЗ рдЖрдпреЛрдЬрди рдХреЗ рд▓рд┐рдП рдПрдХ рдкреНрд░рдгрд╛рд▓реАред рдИрдерд░рдиреЗрдЯ рдмреИрдХрд╣реЙрд▓ рдХреНрд╖рдорддрд╛ рдХреЗ рд╕рд╛рде рдпрд╛рдиреА рддрд╛рд░ рджреНрд╡рд╛рд░рд╛ рдХреБрдЫ рдмреНрд▓реЙрдХреЛрдВ рдХреЛ рдПрдХ рджреВрд╕рд░реЗ рд╕реЗ рдЬреЛрдбрд╝рдирд╛, рдХреНрдпреЛрдВрдХрд┐ рдпрд╣ рдмреЙрдХреНрд╕ рд▓рдЧрднрдЧ рд╕рдмрд╕реЗ рд╕рд╕реНрддрд╛ рд╡рд╛рдИрдлрд╛рдИ рдЬрд╛рд▓ рд╣реИ (рд╕рд╕реНрддрд╛, рдореЗрд░реА рд░рд╛рдп рдореЗрдВ, рдХреЗрд╡рд▓ рдЙрдирдХреЗ MW3) рдФрд░ рдЗрд╕рдореЗрдВ рдмреНрд▓реЙрдХ рдХреЗ рдмреАрдЪ рдЖрдВрддрд░рд┐рдХ рд╕рдВрдЪрд╛рд░ рдХреЗ рд▓рд┐рдП рддреАрд╕рд░рд╛ рд╕рдорд░реНрдкрд┐рдд рд░реЗрдбрд┐рдпреЛ рдкрде рдирд╣реАрдВ рд╣реИ (рдЬреИрд╕реЗ рдХреБрдЫ рдорд╣рдВрдЧрд╛ рд╕рд╣рдХрд░реНрдореА - рдиреЗрдЯрдЧрд┐рдпрд░ рдУрд░рдмреА)ред
рд╕рд╛рдорд╛рдиреНрдп рддреМрд░ рдкрд░, рдХреЛрдИ рдмрдбрд╝реА рдЬрд╝рд░реВрд░рдд рдирд╣реАрдВ рдереА, рд▓реЗрдХрд┐рди рдУрдкрдирд╡рд░реНрдЯ рдХреЗ рд▓рд┐рдП рдХреБрдЫ рд░рд╛рдЙрдЯрд░ рдиреЗ рд╕рднреА рдЖрд╡рд╢реНрдпрдХ рд╕реНрдерд╛рдиреЛрдВ рдХреЛ рдХрд╡рд░ рдирд╣реАрдВ рдХрд┐рдпрд╛ред
рдХреМрди рдЬрд╛рд▓ рд╣реИ рдФрд░ рдЗрд╕рдХреА рдЖрд╡рд╢реНрдпрдХрддрд╛ рдХреНрдпреЛрдВ рд╣реИрдореЗрд╖ рдЙрдЪреНрдЪ рджреЛрд╖ рд╕рд╣рд┐рд╖реНрдгреБрддрд╛ рдФрд░ рдЧрддрд┐рд╢реАрд▓рддрд╛ рджреНрд╡рд╛рд░рд╛ рд╡рд┐рд╢реЗрд╖рддрд╛ рдиреЗрдЯрд╡рд░реНрдХрд┐рдВрдЧ рдЯреЛрдкреЛрд▓реЙрдЬреА рд╣реИред
рдореИрдВ рд╡рд┐рд╡рд░рдг рдореЗрдВ рдирд╣реАрдВ рдЬрд╛рдКрдВрдЧрд╛, рдХреНрдпреЛрдВрдХрд┐ рдХрдИ рд▓реЛрдЧ рдЬрд╛рдЧрд░реВрдХ рд╣реИрдВ, рдФрд░ рдЬреЛ рдирд╣реАрдВ рд╣реИ, рдЖрдк рд╡рд┐рдХрд┐рдкреАрдбрд┐рдпрд╛ рдкрд░ рд╕реЗрд▓реБрд▓рд░ рдЯреЛрдкреЛрд▓реЙрдЬреА рдХреЗ рдмрд╛рд░реЗ рдореЗрдВ рд▓реЗрдЦ рд╕реЗ рд╢реБрд░реВ рдХрд░ рд╕рдХрддреЗ рд╣реИрдВред
"рд╣реЛрдо" рд╡рд╛рдИрдлрд╛рдИ рдЬрд╛рд▓ рдиреЗрдЯрд╡рд░реНрдХ рдХрд╛ рдореБрдЦреНрдп рдХрд╛рд░реНрдп рдПрдХ рдмрдбрд╝реЗ рдХреНрд╖реЗрддреНрд░ рдХреЛ рдПрдХ рд╕реНрдерд┐рд░ рд╡рд╛рдпрд░рд▓реЗрд╕ рд╕рд┐рдЧреНрдирд▓ рдХреЗ рд╕рд╛рде рдХрд╡рд░ рдХрд░рдирд╛ рд╣реИ, рдЬрд┐рд╕рдореЗрдВ рд╕рд╣рдЬ рд░реЛрдорд┐рдВрдЧ рд╣реИред
рд╕реАрдорд▓реЗрд╕ рд░реЛрдорд┐рдВрдЧ рдХреЛ рдПрдХреНрд╕реЗрд╕ рдкреНрд╡рд╛рдЗрдВрдЯ рдФрд░ рд╣реЛрдо рд░рд╛рдЙрдЯрд░ рджреЛрдиреЛрдВ рдкрд░ рд╕рдХреНрд╖рдо рдХрд┐рдпрд╛ рдЬрд╛ рд╕рдХрддрд╛ рд╣реИ (рдЙрджрд╛рд╣рд░рдг рдХреЗ рд▓рд┐рдП, рдУрдкрдирд░рдЯ рдХреЗ рд╕рд╛рде - рд╡рд╛рд░реНрдбрдк рдХреЗ рд╕рд╛рде-рд╕рд╛рде wpad рдХреА рдЬрдЧрд╣ рдФрд░ 802.11r рдХреЛ рд╕рдХреНрд╖рдо рдХрд░рдХреЗ)ред рдПрдХ рдмрдбрд╝реЗ рдХреНрд╖реЗрддреНрд░ рдкрд░ рдПрдХ рд╕реНрдерд┐рд░ рд╕рд┐рдЧреНрдирд▓ рдХреЛ рдПрдХ рдЬреЛрдбрд╝реА рдмрд┐рдВрджреБрдУрдВ рд╕реЗ рдкреНрд░рд╛рдкреНрдд рдирд╣реАрдВ рдХрд┐рдпрд╛ рдЬрд╛ рд╕рдХрддрд╛ рд╣реИ - рдпрд╣ рдЦрд╛рд▓реА рд╣реИ, рдлрд┐рд░ рдпрд╣ рдореЛрдЯрд╛ рд╣реИ - рд╕рд╛рде рд╣реА, рдпрджрд┐ рдЖрдк рд╢рдХреНрддрд┐ рдмрдврд╝рд╛рддреЗ рд╣реИрдВ рддреЛ рд╣рд╡рд╛ рднрд╛рд░реА рд╣реИред рдЖрдкрдХреЛ рдЕрдзрд┐рдХ рдЕрдВрдХ рдЪрд╛рд╣рд┐рдП - рдХрдИ 5G рдЕрдВрдХ рдЕрдзрд┐рдХ рдХреБрд╢рд▓ рд╣реЛрдВрдЧреЗред рд▓реЗрдХрд┐рди рд╕рд╛рдзрд╛рд░рдг рдкрд╣реБрдВрдЪ рдмрд┐рдВрджреБрдУрдВ / рд░рд╛рдЙрдЯрд░ рдкрд░, рдЖрдк рдЕрднреА рднреА рд╕реЛрдЪрддреЗ рд╣реИрдВ рдХрд┐ рдХреИрд╕реЗ рдПрдХ рддрд╛рд░ рдЦреАрдВрдЪрдирд╛ рд╣реИ, рдФрд░ рдореЗрд╖ рд╕реЗ рдореЗрд╖, рдЕрдкрдиреЗ рдЖрдк рдХреЛ рдмрдирд╛рдП рд░рдЦрдиреЗ рдХреЗ рд▓рд┐рдП рдФрд░ рдПрдХ рддрд╛рд░ (рдмреИрдХрд╣реЙрд▓) рдХреЗ рд╕рд╛рде рдФрд░ рдмрд┐рдирд╛ рджреЛрдиреЛрдВ рдХреЗ рдХрдиреЗрдХреНрд╢рди рд╕реНрдерд╛рдкрд┐рдд рдХрд░рдиреЗ рдХреЗ рд▓рд┐рдПред
рд╕рд╛рдорд╛рдиреНрдп рддреМрд░ рдкрд░, рдЬреАрд╡рди рдХреА рд╕реБрд╡рд┐рдзрд╛ рдХреЗ рд▓рд┐рдП рдкреНрд░реМрджреНрдпреЛрдЧрд┐рдХреАред рдпрд╣ рдЕрдЪреНрдЫрд╛ рд╣реИред
рд╕рд┐рд╕реНрдЯрдо рдиреЗ рдкрд╣рд▓реА рдмрд╛рд░ рд╢реБрд░реВ рдХрд┐рдпрд╛, рдпрд╣ рдЦреБрдж рдХреЛ рдЯреНрдпреВрди рдХрд┐рдпрд╛, рд╕рдм рдХреБрдЫ рдареАрдХ рд╣реИред рдПрдкреНрд▓рд┐рдХреЗрд╢рди рдореЗрдВ рдЙрдирдХреА рд╡рд┐рд╢реЗрд╖рддрд╛рдУрдВ рдХреЗ рд╕рд╛рде рдЦреЗрд▓рдиреЗ рдХреЗ рдмрд╛рдж (рдФрд░ рдХреЛрдИ рдХреНрд▓рд╛рд╕рд┐рдХ рд╡реЗрдм рдЪреЗрд╣рд░рд╛ рдирд╣реАрдВ рд╣реИ, рдЕрдм рд╕рдм рдХреБрдЫ рдХреЗрд╡рд▓ рдлреЛрди рдЕрдиреБрдкреНрд░рдпреЛрдЧреЛрдВ рдФрд░ рдЪреАрдиреА рдмрд╛рджрд▓реЛрдВ рдХреЗ рдорд╛рдзреНрдпрдо рд╕реЗ рд╣реИ ...) рдореИрдВрдиреЗ рдиреЗрдЯрд╡рд░реНрдХ рдХреЛ рдкреБрд▓ рдореЛрдб рдореЗрдВ рд╕реНрдерд╛рдирд╛рдВрддрд░рд┐рдд рдХрд░рдиреЗ рдХрд╛ рдлреИрд╕рд▓рд╛ рдХрд┐рдпрд╛, рдХреНрдпреЛрдВрдХрд┐ рдкрд╣рд▓реЗ рд╕реЗ рд╣реА рдЖрд╡рд╢реНрдпрдХ рдХреЗ рд░реВрдк рдореЗрдВ рдХреЙрдиреНрдлрд╝рд┐рдЧрд░ рдХрд┐рдП рдЧрдП рд╡рд┐рднрд┐рдиреНрди рдбрд┐рд╡рд╛рдЗрд╕ рд╣реИрдВ рдФрд░ рдореБрдЦреНрдп рд░рд╛рдЙрдЯрд░ рдореЗрдВ рдмрд╣реБрдд рд╕реА рдЪреАрдЬреЗрдВ рд╣реИрдВ рдпрд╣ рдХрд░рддрд╛ рд╣реИред
рдПрдХ рджрд┐рди рддрдХ рд╕рдмрдХреБрдЫ рдареАрдХ рд░рд╣рд╛, рдлрд┐рд░ рдореИрдВрдиреЗ рдиреЛрдЯрд┐рд╕ рдХрд░рдирд╛ рд╢реБрд░реВ рдХрд┐рдпрд╛ рдХрд┐ рдПрдХ рдореЗрдЬрдмрд╛рди, рдпрд╛ рджреВрд╕рд░реЗ рддрдХ рдХреЛрдИ рдкрд╣реБрдВрдЪ рдирд╣реАрдВ рдерд╛ред OpenWrt рд╡реНрдпрд╡рд╕реНрдерд╛рдкрдХ рдкреИрдирд▓ рдореЗрдВ, рдЖрд╡рдВрдЯрд┐рдд рдкрддреЛрдВ рдХреА рд╕реВрдЪреА рдореЗрдВ рдореЗрдЬрдмрд╛рдиреЛрдВ рдХреЗ рдПрдХ рдЬреЛрдбрд╝реЗ рд╣реИрдВ, рдмрд╛рдХреА рдирд╣реАрдВ рд╣реИрдВред рдореИрдВ рдиреЗрдЯрд╡рд░реНрдХ рдХреЛ рд╕реНрдХреИрди рдХрд░рддрд╛ рд╣реВрдВ - рдореЗрдЬрдмрд╛рди рдЬрдЧрд╣ рдореЗрдВ рд╣реИрдВ, рдХреЗрд╡рд▓ рдЙрдирдХреЗ рдкрддреЗ рд╡реЗ рдирд╣реАрдВ рд╣реИрдВ рдЬреЛ рддрдп рдХрд┐рдП рдЧрдП рдереЗред рдореБрдЭреЗ рд╕рдВрджреЗрд╣ рд╣реЛрдиреЗ рд▓рдЧрддрд╛ рд╣реИ - рдореИрдВ MW6 рдХреЗ "рдореБрдЦреНрдп рдХреНрдпреВрдм" рдХреЛ рд╕реНрдХреИрди рдХрд░рддрд╛ рд╣реВрдВ - рдпрд╣ рд╣реИ, рдЗрд╕рдореЗрдВ рдбреАрдПрдЪрд╕реАрдкреА рд╕рд░реНрд╡рд░ рдЪрд▓ рд░рд╣рд╛ рд╣реИред
рд╕реБрдбреЛ рдиреИрдореНрдкреНрд╕ -sU -p 67 --рд╕реНрдХреНрд░рд┐рдкреНрдЯ = dhcp-192.168.5.111 рдХреА рдЦреЛрдЬ рдХрд░реЗрдВStarting Nmap 7.60 ( https://nmap.org ) at 2019-07-18 20:04 MSK Nmap scan report for _gateway (192.168.5.111) Host is up (0.0027s latency). PORT STATE SERVICE 67/udp open dhcps | dhcp-discover: | DHCP Message Type: DHCPACK | Server Identifier: 192.168.5.111 | IP Address Lease Time: 23h30m42s | Subnet Mask: 255.255.255.0 | Broadcast Address: 192.168.5.255 | Router: 192.168.5.1 | Domain Name Server: 192.168.5.1 |_ Domain Name: tendawifi.com MAC Address: 04:95:E6:1A:96:E0 (Tenda Technology,Ltd.Dongguan branch) Nmap done: 1 IP address (1 host up) scanned in 0.75 seconds
рдЯреЗрдВрдбрд╛ рд╕реЗ рд╕рдорд░реНрдерди рдХреЗрд╡рд▓ рдбреЗ рдЬреБрд░реЗ рд╣реИред рдбреА рд╡рд╛рд╕реНрддрд╡ рдореЗрдВ рдХреЛрдИ рдЬрд╡рд╛рдм рдирд╣реАрдВред рд╕рдВрдкрд░реНрдХ рдореЗрдВ рд░реВрд╕реА рд╕рдорд░реНрдерди, рд╣рд╛рд▓рд╛рдВрдХрд┐ рдЬрд╡рд╛рдм рджреЗрдирд╛, рдмрд┐рд▓реНрдХреБрд▓ рдЕрдкрд░реНрдпрд╛рдкреНрдд рд╣реИ рдФрд░ рдпрд╣ рдирд╣реАрдВ рдЬрд╛рдирддрд╛ рдХрд┐ рдЧреНрд░рд╛рд╣рдХреЛрдВ рдХреЛ рдХреИрд╕реЗ рд╕реБрдирдирд╛ рд╣реИред
рдПрдХ рддреНрд╡рд░рд┐рдд googling рдиреЗ рд╕реБрдЭрд╛рд╡ рджрд┐рдпрд╛ рдХрд┐ рдмрд╕ рдорд╛рдорд▓реЗ рдореЗрдВ, рдореБрдЦреНрдп рд░рд╛рдЙрдЯрд░ рдкрд░ dhcp authoritative='1'
рд╕реЗрдЯ рдХрд░рдирд╛ рдЖрд╡рд╢реНрдпрдХ рд╣реЛрдЧрд╛, рд▓реЗрдХрд┐рди рдЗрд╕рд╕реЗ рдХреЛрдИ рдлрд╛рдпрджрд╛ рдирд╣реАрдВ рд╣реБрдЖред рдФрд░ рдлрд┐рд░ рдореИрдВрдиреЗ рд╕реЛрдЪрдирд╛ рд╢реБрд░реВ рдХрд┐рдпрд╛ рдХрд┐ рдЗрди рдХреНрдпреВрдмреНрд╕ рдкрд░ рдбреАрдПрдЪрд╕реАрдкреА рд╕рд░реНрд╡рд░ рдХреЛ рдХреИрд╕реЗ рдирд┐рд╖реНрдХреНрд░рд┐рдп рдХрд┐рдпрд╛ рдЬрд╛рдПред рдореИрдВрдиреЗ рдЦреЗрд▓реЛрдВ рдХреЗ рд▓рд┐рдП рдПрдХ рдкрд╛рд╕рд╛ рдЪреБрдирд╛, рдЗрд╕рдХреА рд╕реЗрдЯрд┐рдВрдЧреНрд╕ рдХреЛ рд░реАрд╕реЗрдЯ рдХрд┐рдпрд╛ рдФрд░ - рдпрд╣ рд╢реБрд░реВ рд╣реЛ рдЧрдпрд╛ред
рдиреЗрдЯрд╡рд░реНрдХ рд╕реЗрд╡рд╛рдПрдВ
рдХрдИ рдмрдВрджрд░рдЧрд╛рд╣ рдЦреБрд▓реЗ рд╣реИрдВ, рдореИрдВрдиреЗ рдЬреНрдпрд╛рджрд╛ рдЦреБрджрд╛рдИ рдирд╣реАрдВ рдХреА рд╣реИ, рдмрд╕ nmap <host>
ред рдореБрдЭреЗ рд╕рдВрджреЗрд╣ рд╣реИ рдХрд┐ рдЪреАрдиреА рдмрд╛рджрд▓реЛрдВ рдХреЗ рд▓рд┐рдП рдмреИрдХрдбреЛрд░ рд╣реИрдВ, рд▓реЗрдХрд┐рди рдЕрднреА рддрдХ рдЙрдирдХреА рддрд▓рд╛рд╢ рдирд╣реАрдВ рдХреА рдЧрдИ рд╣реИред рдЖрдЧреЗ рдмрдврд╝рдиреЗ рдкрд░, рдЙрдкрдпреЛрдЧреА рдХреБрдЫ рднреА рдирд╣реАрдВ рджрд┐рдЦрд╛рдИ рджреЗрддрд╛ рд╣реИред рдФрд░ рдЗрд╕ рдХрджрдо рдкрд░ рдирд╣реАрдВ - UART рдХреЗ рдорд╛рдзреНрдпрдо рд╕реЗ рдХрдВрд╕реЛрд▓ рд╕реЗ рдХрдиреЗрдХреНрдЯ рдХрд░рдиреЗ рдХреЗ рдмрд╛рдж рдореИрдВ рдХреНрдпреВрдм рд╕реЗрдЯрд┐рдВрдЧреНрд╕ рд░реАрд╕реЗрдЯ рдХрд░рдирд╛ рдЪрд╛рд╣рддрд╛ рдерд╛ рдФрд░ рдкрддрд╛ рдЪрд▓рд╛ рдХрд┐ рд░реАрд╕реЗрдЯ рд░реАрд╕реЗрдЯ рдХрд░рдиреЗ рдХреЗ 3 рд╕реЗрдХрдВрдб рдХреЗ рдмрд╛рдж, рдЯреЗрд▓рдиреЗрдЯ рд╕рд░реНрд╡рд░ рд╢реБрд░реВ рд╣реЛрддрд╛ рд╣реИред
LAN рд╕реЗ рджреЗрдЦреЗрдВ PORT STATE SERVICE 23/tcp open telnet 5500/tcp open hotline 9000/tcp open cslistener
рд╡рд╛рди рд╕реЗ рджреЗрдЦреЗрдВ PORT STATE SERVICE 1723/tcp closed pptp
рдЖрдЗрдП рдЯреЗрд▓рдиреЗрдЯ рдкрд░ рдЬрд╛рдПрдВ
рдЦреИрд░, рдпрд╣рд╛рдБ рднрд╛рдЧреНрдп рд╣рдореЗрдВ рдмрд╣реБрдд рдореБрд╕реНрдХреБрд░рд╛ рдирд╣реАрдВ рд░рд╣рд╛ рдерд╛ - рд╕рднреА рдкреНрд░рдХрд╛рд░ рдХреЗ рдорд╛рдирдХ рд▓реЙрдЧрд┐рди / рдкрд╛рд╕рд╡рд░реНрдб рдХреЗ рдорд╛рдзреНрдпрдо рд╕реЗ рд╣рд▓ рдХрд┐рдпрд╛ - рдлрд┐рдЯ рдирд╣реАрдВ рд╣реБрдЖред рдореИрдВрдиреЗ "рдЗрдВрдЯрд░рдиреЗрдЯ" рд╕реЗ рд░реВрдЯ / рд╡реНрдпрд╡рд╕реНрдерд╛рдкрдХ / рд╕рдорд░реНрдерди / рдЙрдкрдпреЛрдЧрдХрд░реНрддрд╛ рдФрд░ рдкрд╛рд╕рд╡рд░реНрдб рдХреА рдХреЛрд╢рд┐рд╢ рдХреА - рдкрд╛рд╕рд╡рд░реНрдб, рд░реВрдЯ, рдЯреЛрдЕрд░, рд╡реНрдпрд╡рд╕реНрдерд╛рдкрдХ, рд╕рдорд░реНрдерди, рдирд┐рд╡рд┐рджрд╛, 1234, 12345678, рдЖрджрд┐ред рдореИрдВрдиреЗ рд╡рд╛рдИрдлрд╛рдИ рдиреЗрдЯрд╡рд░реНрдХ рд╕реЗ рдкрд╛рд╕рд╡рд░реНрдб рднреА рдЖрдЬрдорд╛рдпрд╛ред
рд▓реЛрд╣реЗ рдХрд╛ рдЯреБрдХрдбрд╝рд╛
рдХреНрдпреВрдм рдЖрд╕рд╛рдиреА рд╕реЗ рдФрд░ рд╕реНрд╡рд╛рднрд╛рд╡рд┐рдХ рд░реВрдк рд╕реЗ рдЦреБрд▓рддрд╛ рд╣реИ, рд╢рд┐рдХрдВрдЬрд╛, рд╣рдореЗрд╢рд╛ рдХреА рддрд░рд╣, рдкреИрд░реЛрдВ рдХреЗ рдиреАрдЪреЗред рдХреЛрдИ рдЫрд┐рдкреЗ рд╣реБрдП рд╢рд┐рдХрдВрдЬрд╛ рдирд╣реАрдВ рд╣реИрдВред рдЕрдВрджрд░ рдХреБрддреНрддреЛрдВ рдШрди рд╢реВрдиреНрдпрддрд╛ рд╣реИред рд╕рд░реНрдХрд┐рдЯ рдмреЛрд░реНрдбреЛрдВ рдХреА рдПрдХ рдЬреЛрдбрд╝реА рдФрд░ рд╕реВрдХреНрд╖реНрдо рдПрдВрдЯреЗрдирд╛ рдХреА рдПрдХ рдЬреЛрдбрд╝реАред рджрд┐рд▓рдЪрд╕реНрдк рдирд╣реАрдВ, 99% рдорд╛рдорд▓реЛрдВ рдореЗрдВ рдХрд╣реАрдВ рдФрд░ред
UART рдХреЗ рд╕рд╛рде рднрд╛рдЧреНрдпрд╢рд╛рд▓реА - рдПрдХрдорд╛рддреНрд░ рдХрдиреЗрдХреНрдЯрд░ рдЙрдиреНрд╣реЗрдВ рдирд┐рдХрд▓рд╛ред рдлреНрд▓реИрд╢ рдбреНрд░рд╛рдЗрд╡ рдареАрдХ рдмреАрдЪ рдореЗрдВ рд╣реИред рд░реЗрдбрд┐рдПрдЯрд░ рдХреЛ рдЫреЛрдбрд╝рдХрд░ рдмреЛрд░реНрдб рдХреЗ рджреВрд╕рд░реА рддрд░рдл рдХреБрдЫ рднреА рдирд╣реАрдВ рд╣реИред

UART
рдХрдиреЗрдХреНрдЯрд░ J4ред рдкрд╣рд▓реЗ рдЪрд░рдг рд╕реЗ рдкрд┐рдирдЖрдЙрдЯ: рд╡реАрд╕реАрд╕реА (3.3), TX, RX, GNDред рдкрд╣рд▓рд╛ рдкреИрд░ рдлреНрд▓реИрд╢ рдбреНрд░рд╛рдЗрд╡ рдХреЗ рд╕рдмрд╕реЗ рдХрд░реАрдм рд╣реИред UART рдХреА рд╕реЗрдЯрд┐рдВрдЧреНрд╕ рдХрд╛ рдЕрдиреБрдорд╛рди рдкрд╣рд▓реА рдХреЛрд╢рд┐рд╢ рдкрд░ рднреА рд▓рдЧрд╛рдпрд╛ рдЧрдпрд╛ - 115200, 8n1ред
рдФрд░ рдпрд╣рд╛рдВ рд▓рдВрдмреЗ рд╕рдордп рд╕реЗ рдкреНрд░рддреАрдХреНрд╖рд┐рдд рдмреВрдЯрд▓реЙрдЧ рд╣реИред рдХреЗрд╡рд▓ рдХрдИ рд╕реИрдХрдбрд╝реЛрдВ рдкрдВрдХреНрддрд┐рдпреЛрдВ рдХреЗ рдкрд╛рд░рдЦреА рд▓реЛрдЧреЛрдВ рдХреЗ рд▓рд┐рдПред Booting... init_ram 00000202 M init ddr ok DRAM Type: DDR2 DRAM frequency: 533MHz DRAM Size: 128MB JEDEC id 684017, EXT id 0x6840 found BH25Q64 flash vendor: BOHONG BH25Q64, size=8MB, erasesize=64KB, max_speed_hz=55000000Hz auto_mode=0 addr_width=3 erase_opcode=0x000000d8 =>CPU Wake-up interrupt happen! GISR=89000004 ---Realtek RTL8197F boot code at 2018.04.20-10:17+0800 v3.4.11B.9 (999MHz) Mac addr:04-95-e6-1a-96-e0 lan_wan_isolation Initing... config: lan port mask is 0x000000f7 config: wan port mask is 0x000000e8 lan_wan_isolation Initing has been completed. lan_wan_isolation Initing... config: lan port mask is 0x000000f7 config: wan port mask is 0x000000e8 lan_wan_isolation Initing has been completed. wait for upgrage port[0] link:down port[1] link:down port[2] link:down port[3] link:down port[4] link:down irq:0x00008080 Jump to image start=0x80a00000... decompressing kernel: Uncompressing Linux... done, booting the kernel. done decompressing kernel. start address: 0x80466860 Linux version 3.10.90 (root@linux-bkb8) (gcc version 4.4.7 (Realtek MSDK-4.4.7 Build 2001) ) #4 Mon Jul 2 10:57:35 CST 2018 CPU revision is: 00019385 (MIPS 24Kc) Determined physical RAM map: memory: 08000000 @ 00000000 (usable) Zone ranges: Normal [mem 0x00000000-0x07ffffff] Movable zone start for each node Early memory node ranges node 0: [mem 0x00000000-0x07ffffff] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes. Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes Built 1 zonelists in Zone order, mobility grouping on. Total pages: 8176 Kernel command line: console=ttyS0,115200 PID hash table entries: 512 (order: -3, 2048 bytes) Dentry cache hash table entries: 16384 (order: 2, 65536 bytes) Inode-cache hash table entries: 8192 (order: 1, 32768 bytes) Writing ErrCtl register=00029693 Readback ErrCtl register=00029693 Memory: 103744k/131072k available (4526k kernel code, 27328k reserved, 2031k data, 224k init, 0k highmem) SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 NR_IRQS:192 Realtek GPIO IRQ init Calibrating delay loop... 666.41 BogoMIPS (lpj=3332096) pid_max: default: 32768 minimum: 301 Mount-cache hash table entries: 2048 NET: Registered protocol family 16 <<<<<Register PCI Controller>>>>> Do MDIO_RESET 40MHz Find PCIE Port, Device:Vender ID=b82210ec Realtek GPIO controller driver init INFO: registering sheipa spi device bio: create slab <bio-0> at 0 INFO: sheipa spi driver register INFO: sheipa spi probe ***spi max freq:100000000 Switching to clocksource MIPS NET: Registered protocol family 2 TCP established hash table entries: 2048 (order: 0, 16384 bytes) TCP bind hash table entries: 2048 (order: -1, 8192 bytes) TCP: Hash tables configured (established 2048 bind 2048) TCP: reno registered UDP hash table entries: 1024 (order: 0, 16384 bytes) UDP-Lite hash table entries: 1024 (order: 0, 16384 bytes) NET: Registered protocol family 1 squashfs: version 4.0 (2009/01/31) Phillip Lougher jffs2: version 2.2. (NAND) 2001-2006 Red Hat, Inc. msgmni has been set to 202 Block layer SCSI generic (bsg) driver version 0.4 loaded (major 254) io scheduler noop registered (default) Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled serial8250: ttyS0 at MMIO 0x18147000 (irq = 17) is a 16550A console [ttyS0] enabled Realtek GPIO to I2C Driver Init... mfi_ioctl_init:565,dev=253,MINOR=0 loop: module loaded m25p80 spi0.0: change speed to 15000000Hz, div 7 JEDEC id 684017 m25p80 spi0.0: found BH25Q64, expected m25p80 flash vendor: BOHONG m25p80 spi0.0: BH25Q64 (8192 Kbytes) (55000000 Hz) m25p80 spi0.0: change speed to 55000000Hz, div 2 Kernel code size:0x1f8012 9 rtkxxpart partitions found on MTD device m25p80 Creating 9 MTD partitions on "m25p80": 0x000000000000-0x000000800000 : "ALL" 0x000000000000-0x000000020000 : "Bootloader" 0x000000020000-0x000000030000 : "CFG" 0x000000030000-0x0000005c0000 : "KernelFS" 0x000000228012-0x0000005c0000 : "RootFS" 0x0000005c0000-0x0000005d0000 : "CFM" 0x0000005d0000-0x0000005e0000 : "CFM_BACKUP" 0x0000005e0000-0x0000007f0000 : "LOG" 0x0000007f0000-0x000000800000 : "ENV" PPP generic driver version 2.4.2 PPP MPPE Compression module registered NET: Registered protocol family 24 PPTP driver version 0.8.5 Realtek WLAN driver - version 1.7 (2015-10-30)(SVN:exported) Adaptivity function - version 9.3.4 Do MDIO_RESET 40MHz Find PCIE Port, Device:Vender ID=b82210ec found 8822B !!! halmac_check_platform_api ==========> 12089M HALMAC_MAJOR_VER = 0 HALMAC_PROTOTYPE_VER = 0 HALMAC_MINOR_VER = 0 halmac_init_adapter_88xx ==========> halmac_init_adapter Succss IS_RTL8822B_SERIES value8 = a MACHAL_version_init ####################################################### SKB_BUF_SIZE=8432 MAX_SKB_NUM=1024 ####################################################### MACHAL_version_init RFE TYPE =5 ####################################################### SKB_BUF_SIZE=3032 MAX_SKB_NUM=400 ####################################################### RFE TYPE =5 RFE TYPE =5 RFE TYPE =5 RFE TYPE =5 --- link_loop_init --- mesh_extend_init over... --- hybrid_steering_init --- u32 classifier nf_conntrack version 0.5.0 (1621 buckets, 6484 max) [BM CORE ][init_online_ip ,1053] INFO: online ip data hash table created, size = 199 [BM CORE ][init_online_ip_procfs,647 ] INFO: online_ip proc file created ipip: IPv4 over IPv4 tunneling driver gre: GRE over IPv4 demultiplexor driver ip_gre: GRE over IPv4 tunneling driver ip_tables: (C) 2000-2006 Netfilter Core Team TCP: cubic registered NET: Registered protocol family 17 l2tp_core: L2TP core driver, V2.0 l2tp_ppp: PPPoL2TP kernel driver, V2.0 8021q: 802.1Q VLAN Support v1.8 Realtek FastPath:v1.03 Probing RTL819X NIC-kenel stack size order[0]... link_send_msg_timer_func:lan_dev = NULL [Rtl83xx Ethernet Driver][RTL83XX_vlan_set][901]: failed!(0x3) eth0 added. vid=9 Member port 0x2... eth1 added. vid=8 Member port 0x8... [peth0] added, mapping to [eth1]... VFS: Mounted root (squashfs filesystem) readonly on device 31:4. Freeing unused kernel memory: 224K (80668000 - 806a0000) mkdir: can't create directory '/var/run': File exists [BM CORE ][bm_init ,857 ] INFO: bm_init success [BM CORE ][bm_u2k_info_init,1149] INFO: bm_u2k_info_init success [MAC FILTER ][mf_init ,683 ] INFO: bm_mac_filter init success *TBQ* tbq_token_ctrl size: 40 *TBQ* tbq_user size: 68 *TBQ* tbq_user_sched size: 2192 *TBQ* tbq_bucket size: 56 *TBQ* tbq_bucket_sched size: 1796 *TBQ* tbq_flow_track size: 228 *TBQ* tbq_user_track size: 4412 *TBQ* tbq_backlog size: 24 *TBQ* tbq_flow_backlog size: 36 *TBQ* nos_flow_track size: 12 *TBQ* nos_user_track size: 28 *TBQ* nf_conn size: 624 *TBQ* sk_buff size: 232 *TBQ* TBQ_BACKLOG_PACKETS_MAX: 1000000 *TBQ* TBQ_LATENCY_SHIFT_MAX: 10 *TBQ* TBQ_DISABLE_TIMEOUT_MAX: 60 *TBQ* HZ: 100 *TBQ* init_user_tbq_hash_table ok *TBQ* nos_tbq_init() OK Give root password for system maintenance (or type Control-D for normal startup):argv[0] = cfmd cfmd cfms_apmib_init:line(475) Read hw setting header failed! flash_mib_compress_write DEFAULT_SETTING DONE, __[flash.c-6988] flash_mib_compress_write CURRENT_SETTING DONE, __[flash.c-7057] DEFAULT_SETTING hecksum_ok CURRENT_SETTING hecksum_ok __[flash.c-7211]setMIB end... setMIB end... setMIB end... setMIB end... setMIB end... setMIB end... setMIB end... setMIB end... setMIB end... setMIB end... setMIB end... setMIB end... setMIB end... setMIB end... setMIB end... setMIB end... setMIB end... setMIB end... setMIB end... setMIB end... setMIB end... setMIB end... setMIB end... setMIB end... setMIB end... setMIB end... setMIB end... setMIB end... setMIB end... argv[0] = timer timer argv[0] = logserver logserver argv[0] = netctrl netctrl prod_change_root_passwd(83) link_send_msg_timer_func:lan_dev = NULL insmod: can't insert '/lib/modules/phy_check.ko': File exists /bin/sh: can't create /proc/sw_nat: Permission denied src/common_hal.c hal_init_bridge device eth0 entered promiscuous mode br0: port 1(eth0) entered listening state br0: port 1(eth0) entered listening state netctrl_main.c,netctrl_init_vlan_ports,1207,: Set br0 to 04:95:e6:1a:96:e0. Sun May 1 00:00:00 UTC 2011 argv[0] = device_list device_list argv[0] = tendaupload tendaupload argv[0] = sh argv[1] = /usr/bin/mesh_op.sh sh ######## STARTING PROGRAM ######### ######## RECEIVING DATA ######### RTNETLINK answers: Operation not supported check timer start success RTNETLINK answers: No such file or directory [MAC FILTER ][mf_apply ,232 ] INFO: g_mac_filter_enable = disable, mf_default_action = accept [MAC FILTER ][mf_apply ,232 ] INFO: g_mac_filter_enable = disable, mf_default_action = accept Init gsbmac dev success. The ARP attack defence is init v1 successful Interface doesn't accept private ioctl... td_ssid_hide (8BDC): Operation not permitted Interface doesn't accept private ioctl... td_ssid_hide (8BDC): Operation not permitted open /dev/gsbmac failure. open /dev/gsbmac failure. br0: port 1(eth0) entered learning state Kernel:Init attack fence dev success. the ddos ip attack defnence init successful SET_LAN_PARAM_DATA k_data: lan ip:3232236801 lan mask:4294967040 lan submask:3232236800 lan interface:br0 lan http port:0 set the proceee ture SET_IPOP_FENCE_ATTACK_DATA k_data: ip options:32512 SET_BAD_PKT_FENCE_ATTACK_DATA k_data: bad pkt:248 SET_DDOS_FENCE_ATTACK_DATA k_data: status:7 tcp threshold:1500 udp threshold:1500 icmp threshold:1500 ready___djc___close____guest____wifi_close_guest(4617) djc___close____guest____wifi_close_guest(4623) config changed,CRC:old[3cbf4591],new[3d7bd411] mib_nvram_cfm_commit 1608: write mibvalue success write config to flash......ok ifconfig: SIOCGIFFLAGS: No such device ifconfig: SIOCGIFFLAGS: No such device ifconfig: SIOCGIFFLAGS: No such device ifconfig: SIOCGIFFLAGS: No such device ifconfig: SIOCGIFFLAGS: No such device ifconfig: SIOCGIFFLAGS: No such device ifconfig: SIOCGIFFLAGS: No such device ifconfig: SIOCGIFFLAGS: No such device /bin/sh: wlanapp.sh: not found device wlan1 entered promiscuous mode WlanSupportAbility = 0x3 available channels[US]: 1 2 3 4 5 6 7 8 9 10 11 br0: topology change detected, propagating br_topology_change_detection, clear br0 fdb ... br_topology_change_detection, clear shortcut cache... br0: port 1(eth0) entered forwarding state MDID is null !!, set default MDID [ODM_software_init] [97F] Bonding Type 97FS, PKG1 [97F] RFE type 5 PHY paratemters: GPA1+GLNA1 clock 40MHz load efuse ok rom_progress: 0x200006f rom_progress: 0x400006f [GetHwReg88XX][PHY_REG_PG_8197Fmp_Type5] size [GetHwReg88XX][PHY_REG_PG_8197Fmp_Type5] [GetHwReg88XX][rtl8197Ffw] [GetHwReg88XX][rtl8197Ffw size] [97F] Default BB Swing=20 mesh_passphrase_update, before encrypt 65 39 66 66 34 64 32 66 62 65 37 38 30 30 36 30 mesh_passphrase_update, after encrypt 64 34 38 dd 13 2c 3b ad 7b d1 93 8e 8c a8 be 34 br0: port 2(wlan1) entered listening state br0: port 2(wlan1) entered listening state device wlan-msh entered promiscuous mode br0: port 3(wlan-msh) entered listening state br0: port 3(wlan-msh) entered listening state wifi_config_service:4505 ****************** sysconf wlanapp start wlan0 wlan1 wlan0-va0 wlan1-va0 *************** open /proc/gpio: Permission denied open /proc/gpio: Permission denied open /proc/gpio: Permission denied open /proc/gpio: Permission denied Init Wlan application... FT Daemon v1.0 (Jul 2 2018 10:59:15) Receive Pathsel daemon pid:1365 [ATM] atm_swq_en on ifconfig: SIOCGIFFLAGS: No such device ifconfig: SIOCGIFFLAGS: No such device ifconfig: SIOCGIFFLAGS: No such device ifconfig: SIOCGIFFLAGS: No such device ifconfig: SIOCGIFFLAGS: No such device ifconfig: SIOCGIFFLAGS: No such device ifconfig: SIOCGIFFLAGS: No such device ifconfig: SIOCGIFFLAGS: No such device /bin/sh: wlanapp.sh: not found !!! adjust 5G 2ndoffset for 8812 !!! br0: port 2(wlan1) entered learning state br0: port 3(wlan-msh) entered disabled state device wlan0 entered promiscuous mode WlanSupportAbility = 0x3 available channels[US]: 36 40 44 48 149 153 157 161 165 MDID is null !!, set default MDID [hard_code_8822_mibs] +++ MAX_RX_BUF_LEN = 8000 [ODM_software_init] clock 40MHz InitPON OK!!! load efuse ok rom_progress: 0x200006f rom_progress: 0x400006f InitMAC Page0 Init Download FW OK halmac_init_mac_cfg OK halmac_cfg_rx_aggregation OK halmac_init_mac_cfg OK [GetHwReg88XX][size PHY_REG_PG_8822Bmp_Type6] [GetHwReg88XX][PHY_REG_PG_8822Bmp_Type6] RL6302_MAC_PHY_Parameter_v018_20140708 [set_8822_trx_regs] +++ ******************************** 8822 efuse content 0x3D7 = 0xf4 8822 efuse content 0x3D8 = 0xf5 ******************************** mesh_passphrase_update, before encrypt 65 39 66 66 34 64 32 66 62 65 37 38 30 30 36 30 mesh_passphrase_update, after encrypt 64 34 38 dd 13 2c 3b ad 7b d1 93 8e 8c a8 be 34 br0: port 4(wlan0) entered listening state br0: port 4(wlan0) entered listening state br0: port 3(wlan-msh) entered listening state br0: port 3(wlan-msh) entered listening state wifi_config_service:4505 ****************** sysconf wlanapp start wlan0 wlan1 wlan0-va0 wlan1-va0 *************** open /proc/gpio: Permission denied open /proc/gpio: Permission denied open /proc/gpio: Permission denied open /proc/gpio: Permission denied FT Daemon v1.0 (Jul 2 2018 10:59:15) Init Wlan application... Receive Pathsel daemon pid:1502 ==Set ssid close ==Set ssid close br0: topology change detected, propagating br_topology_change_detection, clear br0 fdb ... br_topology_change_detection, clear shortcut cache... br0: port 2(wlan1) entered forwarding state [ATM] atm_swq_en on wifi_config_service:4505 ****************** sysconf wlanapp start wlan0 wlan1 wlan0-va0 wlan1-va0 *************** open /proc/gpio: Permission denied open /proc/gpio: Permission denied open /proc/gpio: Permission denied open /proc/gpio: Permission denied FT Daemon v1.0 (Jul 2 2018 10:59:15) Init Wlan application... Receive Pathsel daemon pid:1538 /bin/sh: et: not found /bin/sh: et: not found /bin/sh: et: not found /bin/sh: et: not found hw_nat_config 113: #####################flags = 1 hw_nat_config 131: ##########enable = 1 hw_nat_config 152: set /proc/hw_nat to 0 cat /proc/hw_nat 0 steering_proc_band_steering_mode_write, local band steering mode Prefer-5GHz check timer start success argv[0] = pann pann argv[0] = gpio_ctrl gpio_ctrl argv[0] = mesh_status_check mesh_status_check argv[0] = network_check network_check User set flags:1 === set mesh_local.registerd = registered(2) br0: port 4(wlan0) entered learning state Phy[0] down Phy[1] down Phy[2] down Phy[3] down Phy[4] down br0: port 3(wlan-msh) entered learning state [arainc][multiWAN is not exit]netctrl_phy_link_status_change(1381) ifconfig: SIOCSIFFLAGS: Cannot assign requested address [netctrl_lan_services_ctrl][354] dhcpcd_lan is already exit! argv[0] = redis-server argv[1] = /etc_ro/redis.conf redis-server argv[0] = cmdsrv argv[1] = -l argv[2] = tcp://0.0.0.0:12598 argv[3] = -R argv[4] = tcp://127.0.0.1:6379 cmdsrv argv[0] = confsrv confsrv [get_ip_sg][313]ip : 192.168.11.1 [get_ip_sg][313]ip : 192.168.5.1 [1586] 01 May 00:00:11.607 * Max number of open files set to 10032 [1586] 01 May 00:00:11.608 # Warning: 32 bit instance detected but no memory limit set. Setting 3 GB maxmemory limit with 'noeviction' policy now. iptables: Bad rule (does a matching rule exist in that chain?). iptables: Bad rule (does a matching rule exist in that chain?). [dhcps_handle][784]pCurrentCfg is NULL, NewCfgEnable = 1 _._ _.-``__ ''-._ _.-`` `. `_. ''-._ Redis 2.6.17 (00000000/0) 32 bit .-`` .-```. ```\/ _.,_ ''-._ ( ' , .-` | `, ) Running in stand alone mode |`-._`-...-` __...-.``-._|'` _.-'| Port: 6379 | `-._ `._ / _.-' | PID: 1586 `-._ `-._ `-./ _.-' _.-' |`-._`-._ `-.__.-' _.-'_.-'| | `-._`-._ _.-'_.-' | http://redis.io `-._ `-._`-.__.-'_.-' _.-' |`-._`-._ `-.__.-' _.-'_.-'| | `-._`-._ _.-'_.-' | `-._ `-._`-.__.-'_.-' _.-' `-._ `-.__.-' _.-' `-._ _.-' `-.__.-' [1586] 01 May 00:00:11.803 # Server started, Redis version 2.6.17 [1586] 01 May 00:00:11.803 # WARNING overcommit_memory is set to 0! Background save may fail under low memory condition. To fix this issue add 'vm.overcommit_memory = 1' to /etc/sysctl.conf and then reboot or run the command 'sysctl vm.overcommit_memory=1' for this to take effect. [1586] 01 May 00:00:11.803 * The server is now ready to accept connections on port 6379 [1586] 01 May 00:00:11.803 * The server is now ready to accept connections at /tmp/redis.sock Init features[arainc][mpp]mesh_device_features_init(2704) [dhcps_save_config][641]dhcps_save_config end argv[0] = dhcps argv[1] = -C argv[2] = /etc/dhcps.conf argv[3] = -l argv[4] = /etc/dhcps.leases argv[5] = -x argv[6] = /etc/dhcps.pid argv[7] = -k dhcps br0: topology change detected, propagating br_topology_change_detection, clear br0 fdb ... br_topology_change_detection, clear shortcut cache... br0: port 4(wlan0) entered forwarding state br0: port 1(eth0) entered disabled state Send SIGUSR2 signal from kernel to pathsel, skip for test by Jack br0: topology change detected, propagating br_topology_change_detection, clear br0 fdb ... br_topology_change_detection, clear shortcut cache... br0: port 3(wlan-msh) entered forwarding state Phy[3] up br0: port 1(eth0) entered listening state br0: port 1(eth0) entered listening state 2011-05-01 00:00:12 [INFO ][uc_api_lib.c,2028][uc_api_lib_init ] Successfully initialized the api library... sched_boot_set_cfg[62] rand_num :584 upgrade_shced_timeout start upgrade_sched_reboot_init_srv(2593) [set_mib 3371]hex format odm[set_mib 4037]set odm,val=0x1e [set_mib 3371]hex format odm[set_mib 4037]set odm,val=0x1e iptables: No chain/target/match by that name. iptables v1.4.4: Couldn't find target `dmz_forward_pre' Try `iptables -h' or 'iptables --help' for more information. iptables: No chain/target/match by that name. iptables v1.4.4: Couldn't find target `dmz_forward_post' Try `iptables -h' or 'iptables --help' for more information. iptables: No chain/target/match by that name. iptables: No chain/target/match by that name. iptables: Index of insertion too big. iptables: No chain/target/match by that name. iptables: No chain/target/match by that name. iptables v1.4.4: Couldn't find target `port_forward_pre' Try `iptables -h' or 'iptables --help' for more information. iptables v1.4.4: Couldn't find target `port_forward_post' Try `iptables -h' or 'iptables --help' for more information. iptables: No chain/target/match by that name. iptables: No chain/target/match by that name. iptables: No chain/target/match by that name. iptables v1.4.4: Couldn't find target `web_wanadmin' Try `iptables -h' or 'iptables --help' for more information. iptables: No chain/target/match by that name. [device_list_cmd_sub][1385][luminais] invalid param. iptables: No chain/target/match by that name. iptables v1.4.4: Couldn't find target `web_wanadmin' Try `iptables -h' or 'iptables --help' for more information. iptables: No chain/target/match by that name. iptables: No chain/target/match by that name. iptables v1.4.4: Couldn't find target `MINIUPNPD' Try `iptables -h' or 'iptables --help' for more information. iptables: No chain/target/match by that name. miniupnpd.c,871,ver=1.0,osname=Nova,osver=1.0,osurl=http://www.tendacn.com/,manuft=Tenda,descri=Nova br0: port 1(eth0) entered learning state change_opmode: wan_prev_link_flag=1, lan_prev_link_flag=0 br0: port 1(eth0) entered disabled state device eth0 left promiscuous mode br0: port 1(eth0) entered disabled state brctl: bridge br0: Invalid argument set_hw_nat 158: set /proc/hw_nat to 1 /proc/hw_nat now is 1 [Rtl83xx Ethernet Driver][RTL83XX_vlan_set][901]: failed!(0x3) RTNETLINK answers: No such file or directory argv[0] = ucloud argv[1] = -l argv[2] = 4 ucloud killall: telnet_ate_monitor: no process killed Phy[3] down 2011-05-01 00:00:16 [INFO ][uc_api_lib.c,1938][ucloud_event_accept2 ] accept ucloud session 16 2011-05-01 00:00:16 [INFO ][uc_api_lib.c,1952][ucloud_event_accept2 ] traversal notify info 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_CLOUD_INFO_MESH_NODE_A[14] in module: M_CLOUD_INFO[8]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_CLOUD_INFO_DEV_UPLOAD_STATU[20] in module: M_CLOUD_INFO[8]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_CLOUD_INFO_DEV_UPLOAD_DEVIC[18] in module: M_CLOUD_INFO[8]... 2011-05-01 00:00:16 =Set ssid open m[INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_CL==Set ssid open OUD_INFO_DEV_MARK_LIST_A[21] in module: M_CLOUD_INFO[8]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_CLOUD_INFO_DEV_CONFIG_TIME_[23] in module: M_CLOUD_INFO[8]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_CLOUD_INFO_DEV_CONFIG_A[25] in module: M_CLOUD_INFO[8]... enable cloud info OK init_device_attr_desc(2680) get_mesh_info(2614) get_mesh_info(2650) 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_CLOUD_INFO_MESH_SET[11] in module: M_CLOUD_INFO[8]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_CLOUD_INFO_CHECK_MEMORY[0] in module: M_CLOUD_INFO[8]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_CLOUD_INFO_BEGIN_UPGRADE[4] in module: M_CLOUD_INFO[8]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c,1955][ucloud_event_accept2 ] Init Modules 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: MESH_WAN_SET[1] in module: MESH_WAN[18]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: MESH_WAN_GET[2] in module: MESH_WAN[18]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_WAN_DETECT[3] in module: M_MESH_WAN[18]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_WAN_STATUS[0] in module: M_MESH_WAN[18]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_WAN_DIAG[4] in module: M_MESH_WAN[18]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_WAN_LINEUP_GET[7] in module: M_MESH_WAN[18]... 2011-05-01 Receive Pathsel daemon pid:2004 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_WAN_TRAFFIC[8] in module: M_MESH_WAN[18]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_WLAN_GET[1] in module: M_MESH_WLAN[19]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_WLAN_SET[0] in module: M_MESH_WLAN[19]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_WLAN_GET[3] in module: M_MESH_WLAN[19]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_WLAN_SET[2] in module: M_MESH_WLAN[19]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_WLAN_ROAMING_GET[4] in module: M_MESH_WLAN[19]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_WLAN_ROAMING_SET[5] in module: M_MESH_WLAN[19]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_BASIC_SUILT[0] in module: M_MESH_BASIC[16]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_BASIC_TZ_SET[1] in module: M_MESH_BASIC[16]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_BASIC_TIME_SET[2] in module: M_MESH_BASIC[16]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_BASIC_LANG_SET[3] in module: M_MESH_BASIC[16]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_BASIC_FAST_DONE[4] in module: M_MESH_BASIC[16]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_BASIC_GET_MESH_ID[5] in module: M_MESH_BASIC[16]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_BASIC_UPLOAD_LOG[6] in module: M_MESH_BASIC[16]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_NODE_BROWS[0] in module: M_MESH_NODE[17]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_NODE_ADD[1] in module: M_MESH_NODE[17]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_NODE_DEL[2] in module: M_MESH_NODE[17]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_NODE_SET_LOCATION[3] in module: M_MESH_NODE[17]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_NODE_SET_LED[4] in module: M_MESH_NODE[17]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_NODE_QUERY_RSLT[5] in module: M_MESH_NODE[17]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_NODE_MULTI_UPGRADE_STA[6] in module: M_MESH_NODE[17]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_NODE_MANUAL_ADD[7] in module: M_MESH_NODE[17]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_HOSTS_GET[0] in module: M_MESH_HOSTS[20]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_HOSTS_MARK[1] in module: M_MESH_HOSTS[20]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_HOSTS_GET_REMARK[2] in module: M_MESH_HOSTS[20]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_MF_GET[0] in module: M_MESH_MACFILTER[21]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_MF_SET[1] in module: M_MESH_MACFILTER[21]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_FAMILY_GET_TMGRP[0] in module: M_MESH_FAMILY[22]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_FAMILY_SET_TMGRP[1] in module: M_MESH_FAMILY[22]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_FAMILY_GET_USRGRP[2] in module: M_MESH_FAMILY[22]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_FAMILY_SET_USRGRP[3] in module: M_MESH_FAMILY[22]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_FAMILY_GET_FMLYGRP[4] in module: M_MESH_FAMILY[22]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_FAMILY_SET_FMLYGRP[5] in module: M_MESH_FAMILY[22]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_ADV_PORTFWD_GET[0] in module: M_MESH_ADVANCE[23]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_ADV_PORTFWD_SET[1] in module: M_MESH_ADVANCE[23]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_ADV_UPNP_GET[2] in module: M_MESH_ADVANCE[23]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_ADV_UPNP_SET[3] in module: M_MESH_ADVANCE[23]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_ADV_MAINT_GET[4] in module: M_MESH_ADVANCE[23]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_ADV_MAINT_SET[5] in module: M_MESH_ADVANCE[23]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_ADV_DHCPS_GET[6] in module: M_MESH_ADVANCE[23]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_ADV_DHCPS_SET[7] in module: M_MESH_ADVANCE[23]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_ADV_QOS_GET[8] in module: M_MESH_ADVANCE[23]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_ADV_QOS_SET[9] in module: M_MESH_ADVANCE[23]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_ADV_DEV_ASSISTANT_GET[10] in module: M_MESH_ADVANCE[23]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_ADV_DEV_ASSISTANT_SET[11] in module: M_MESH_ADVANCE[23]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_ADV_SHAREDACC_GET[12] in module: M_MESH_ADVANCE[23]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_ADV_HIGH_DEVICE_GET[15] in module: M_MESH_ADVANCE[23]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_ADV_HIGH_DEVICE_SET[16] in module: M_MESH_ADVANCE[23]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_CLOUD_VERSION_Q[24] in module: M_CLOUD[3]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_CLOUD_INFO_CLEAR_ACC_ACK[9] in module: M_CLOUD_INFO[8]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_CLOUD_INFO_ACCOUNT_INFO_A[16] in module: M_CLOUD_INFO[8]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_MNGMT_GET_STA[0] in module: M_MESH_AUTH[24]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_MESH_MNGMT_LOGIN[1] in module: M_MESH_AUTH[24]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_SYS_BASIC_INFO_GET[0] in module: M_SYS[1]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_CATEGORY_MESH[1] in module: M_CATEGORY[15]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_COMMON_SUCCESS[0] in module: M_COMMON[0]... 2011-05-01 00:00:16 [INFO ][uc_api_lib.c, 344][uc_api_lib_cmd_register] Successfully registered command: CMD_COMMON_FAILURE[1] in module: M_COMMON[0]... argv[0] = sntp argv[1] = 1 argv[2] = 10800 argv[3] = 43200 sntp main,297,sntp_en =1,tz_offset_sec=10800,checktime=43200 wifi_config_service:4505 ****************** sysconf wlanapp start wlan0 wlan1 wlan0-va0 wlan1-va0 *************** open /proc/gpio: Permission denied open /proc/gpio: Permission denied open /proc/gpio: Permission denied open /proc/gpio: Permission denied Init Wlan application... FT Daemon v1.0 (Jul 2 2018 10:59:15) change_opmode: sleep 1s for NIC restart. change_opmode: sleep 2s for NIC restart. wifi_config_service:4505 ****************** sysconf wlanapp start wlan0 wlan1 wlan0-va0 wlan1-va0 *************** open /proc/gpio: Permission denied open /proc/gpio: Permission denied open /proc/gpio: Permission denied open /proc/gpio: Permission denied FT Daemon v1.0 (Jul 2 2018 10:59:15) Init Wlan application... Receive Pathsel daemon pid:2078 [arainc][multiWAN is not exit]netctrl_phy_link_status_change(1381) change_opmode: sleep 3s for NIC restart. device eth0 entered promiscuous mode br0: port 1(eth0) entered listening state br0: port 1(eth0) entered listening state [arainc][multiWAN is not exit]netctrl_phy_link_status_change(1381) change_opmode: sleep 1s for port reverted. ###fd failed to recv packet!### ##### NO SERVER FOUND! ##### br0: port 1(eth0) entered learning state br0: port 2(wlan1) entered disabled state change_opmode: sleep 2s for port reverted. ifconfig: SIOCGIFFLAGS: No such device ifconfig: SIOCGIFFLAGS: No such device ifconfig: SIOCGIFFLAGS: No such device ifconfig: SIOCGIFFLAGS: No such device ifconfig: SIOCGIFFLAGS: No such device ifconfig: SIOCGIFFLAGS: No such device ifconfig: SIOCGIFFLAGS: No such device ifconfig: SIOCGIFFLAGS: No such device /bin/sh: wlanapp.sh: not found br0: port 3(wlan-msh) entered disabled state WlanSupportAbility = 0x3 available channels[US]: 1 2 3 4 5 6 7 8 9 10 11 [ODM_software_init] [97F] Bonding Type 97FS, PKG1 [97F] RFE type 5 PHY paratemters: GPA1+GLNA1 clock 40MHz load efuse ok rom_progress: 0x200006f rom_progress: 0x400006f [GetHwReg88XX][PHY_REG_PG_8197Fmp_Type5] size [GetHwReg88XX][PHY_REG_PG_8197Fmp_Type5] [GetHwReg88XX][rtl8197Ffw] [GetHwReg88XX][rtl8197Ffw size] [97F] Default BB Swing=20 mesh_passphrase_update, before encrypt 65 39 66 66 34 64 32 66 62 65 37 38 30 30 36 30 mesh_passphrase_update, after encrypt 64 34 38 dd 13 2c 3b ad 7b d1 93 8e 8c a8 be 34 br0: port 2(wlan1) entered listening state br0: port 2(wlan1) entered listening state br0: port 3(wlan-msh) entered listening state br0: port 3(wlan-msh) entered listening state wifi_config_service:4505 change_opmode: sleep 3s for port reverted. ****************** sysconf wlanapp start wlan0 wlan1 wlan0-va0 wlan1-va0 *************** open /proc/gpio: Permission denied open /proc/gpio: Permission denied open /proc/gpio: Permission denied open /proc/gpio: Permission denied Init Wlan application... FT Daemon v1.0 (Jul 2 2018 10:59:15) Receive Pathsel daemon pid:2394 [ATM] atm_swq_en on br0: topology change detected, propagating br_topology_change_detection, clear br0 fdb ... br_topology_change_detection, clear shortcut cache... br0: port 1(eth0) entered forwarding state change_opmode: sleep 4s for port reverted. br0: port 2(wlan1) entered learning state br0: port 3(wlan-msh) entered learning state change_opmode: sleep 5s for port reverted. change_opmode: sleep 6s for port reverted. br0: topology change detected, propagating br_topology_change_detection, clear br0 fdb ... br_topology_change_detection, clear shortcut cache... br0: port 2(wlan1) entered forwarding state Send SIGUSR2 signal from kernel to pathsel, skip for test by Jack br0: topology change detected, propagating br_topology_change_detection, clear br0 fdb ... br_topology_change_detection, clear shortcut cache... br0: port 3(wlan-msh) entered forwarding state change_opmode: sleep 7s for port reverted. change_opmode: sleep 8s for port reverted. change_opmode: sleep 9s for port reverted. change_opmode: sleep 10s for port reverted. change_opmode: sleep 11s for port reverted. Phy[3] up [arainc][multiWAN is not exit]netctrl_phy_link_status_change(1381) change_opmode: sleep 12s for port reverted. change_opmode: NIC restart finished.(WAN:1,LAN:0) src/prod_common_rtl_fn_delete: failed del route from rtl865x! hal.c,add_local_route_to_switch,179: config (192.168.5.0,255.255.255.0,br0) to the Realtek ASIC L3 Routing Table [hw_nat_msg_handle][245]var->op 3 [set_hw_nat_by_guest_network][76]guest network is close! eth1 has been deleted from br0! hw_nat_config 113: #####################flags = 1 hw_nat_config 131: ##########enable = 1 hw_nat_config 152: set /proc/hw_nat to 0 cat /proc/hw_nat wandial_handle(231) 0 [arainc][ctrl_op = 1]netctrl_moudle_multiwan_handle(22) argv[0] = multiWAN multiWAN multiWAN -> multiwan_bad_sig_entry [18]...ct = 9 open:: No such file or directory multiWAN -> multiwan_bad_sig_entry [18]...ct = 8 iptables: No chain/target/match by that name. multiWAN -> multiwan_bad_sig_entry [18]...ct = 7 iptables: No chain/target/match by that name. multiWAN -> multiwan_bad_sig_entry [18]...ct = 6 multiWAN -> multiwan_bad_sig_entry [18]...ct = 5 multiWAN -> multiwan_bad_sig_entry [18]...ct = 4 multiWAN -> multiwan_bad_sig_entry [18]...ct = 3 iptables: No chain/target/match by that name. multiWAN -> multiwan_bad_sig_entry [18]...ct = 2 multiWAN -> multiwan_bad_sig_entry [18]...ct = 1 multiWAN -> multiwan_bad_sig_entry [18]...ct = 0 iptables: No chain/target/match by that name. iptables: No chain/target/match by that name. argv[0] = dhcpcd_wan1 argv[1] = -c argv[2] = /etc/wan1.ini argv[3] = -m argv[4] = 1 argv[5] = eth1 argv[6] = -h argv[7] = NOVA-0495e61a96e0 argv[8] = -x argv[9] = /etc/dhcpc-wan-up1.sh dhcpcd_wan1 program_name = dhcpcd_lan killall: dhcpcd_lan: no process killed [multiwan_msg_handle][2849]recv_info->SendPid = 7, recv_info->SendMid = 7, recv_info->RecvPid = 5, recv_info->RecvMid = 5 ganda_debug--[igmp_start]107 IGMP UP!!! iptables: Bad rule (does a matching rule exist in that chain?). iptables: Bad rule (does a matching rule exist in that chain?). *TBQ* disabling tbq ... *TBQ* tbq enqueue handlers is disabled igmpproxy, Version 0.1 beta2, Build 170904 Copyright 2005 by Johnny Egeland <j*TBQ* notify disable done in timer func ohnny@rlo.org> *TBQ* tbq backlog is cleared Distributed unde*TBQ* tbq disabled r the GNU GENERAL PUBLIC LICENSE, Version 2 - check GPL.txt update_hwnat_setting 383:/proc/hw_nat now is 0 route: SIOCDELRT: No such process [multiwan_set_route_single_wan][1308][luminais] add_default_route_success [getAllWanDns][125]wan1.manual.dns.en = 0 [getAllWanDns][187]dns_buf = -s 192.168.3.1 argv[0] = dnrd argv[1] = -t argv[2] = 3 argv[3] = -M argv[4] = 600 argv[5] = --cache=off argv[6] = -b argv[7] = -R argv[8] = /etc/dnrd argv[9] = -r argv[10] = 3 argv[11] = -s argv[12] = 192.168.3.1 dnrd [lan_wan_ip_conflict_check][707][luminais] wan : 192.168.3.140/255.255.255.0 Notice: caching turned off [lan_wan_ip_conflict_check][722][luminais] br0 : 192.168.5.1/255.255.255.0 [multiwan_msg_handle][2849]recv_info->SendPid = 4, recv_info->SendMid = 4, recv_info->RecvPid = 5, recv_info->RecvMid = 5 open /dev/flow failed:: No such file or directory iptables: No chain/target/match by that name. iptables v1.4.4: Couldn't find target `icmp_access' Try `iptables -h' or 'iptables --help' for more information. *TBQ* tbq is not running *TBQ* config size: 278 *TBQ* Operation not set *TBQ* wanid=ffffffff set *TBQ* config.Rules[n].IpIncluded not set *TBQ* config.Rules[n].UserIncluded not set *TBQ* config.Rules[n].AppIncluded not set *TBQ* MaxBacklogPackets set to: 9999 *TBQ* reloading tbq ... *TBQ* tbq reloaded *TBQ* ------------- TBQ CONFIG (rule count: 1) ------------- *TBQ* ~~~~~~~~~ TBQ RULE [UI-GLOBAL] ~~~~~~~~~ *TBQ* global out tokens_per_jiffy: 1280000 *TBQ* user out tokens_per_jiffy: 1280000 *TBQ* global in tokens_per_jiffy: 1280000 *TBQ* user in tokens_per_jiffy: 1280000 *TBQ* max_backlog_packets: 9999 *TBQ* latency_shift: 7 *TBQ* disable_timeout: 2 *TBQ* ------------------------------------------ *TBQ* tbq enabled killall: xl2tpd-server: no process killed iptables: No chain/target/match by that name. iptables: Chain already exists. iptables: Chain already exists. iptables: No chain/target/match by that name. iptables v1.4.4: Couldn't find target `web_wanadmin' Try `iptables -h' or 'iptables --help' for more information. iptables: No chain/target/match by that name. iptables: No chain/target/match by that name. iptables v1.4.4: Couldn't find target `web_wanadmin' Try `iptables -h' or 'iptables --help' for more information. iptables: No chain/target/match by that name. miniupnpd.c,871,ver=1.0,osname=Nova,osver=1.0,osurl=http://www.tendacn.com/,manuft=Tenda,descri=Nova [hw_nat_msg_handle][245]var->op 2 [set_hw_nat_by_guest_network][76]guest network is close! hw_nat_config 113: #####################flags = 0 hw_nat_config 131: ##########enable = 0 [fill_cloud_info_device_lists_rate][2600][luminais] NULL == g_ip_info cat /proc/hw_nat [mib_load_manage][472][luminais] GetBasicInfo [0] 0 [mib_save_manage][532][luminais] AccoutACK [0] dev_mark_list_a(72) [dev_mark_list_a][75] [upload_local_diff_remark_to_cloud][2270][luminais] all client remark same with cloud. [mesh_node_a][242] [cloud_mesh_node_handle][3977] [save_mesh_node_group_conf][387][kg] groupsn = 181285920113001948 not need to write flash,crc:[3d7bd411] commit cfm failed or not need write flash not need to write flash,crc:[3d7bd411] commit cfm failed or not need write flash s_time :1562925999991 config_time :1562925999991 local_time:1562925999991 telnet_ate_monitor_recv(166) telnet_ate_monitor_recv(166) [hw_nat_msg_handle][245]var->op 1 [set_hw_nat_by_guest_network][76]guest network is close! hw_nat_config 113: #####################flags = 1 hw_nat_config 131: ##########enable = 0 cat /proc/hw_nat 0 Normal startupGive root password for system maintenance (or type Control-D for normal startup):
, .
Flash
146% SPI flash BOHONG BH25Q64 8 . Datasheet
, firmware
. Tenda , , . , - , , .
тАФ , , , .. , . , . тАФ - тАФ . тАФ .

?
, , тАФ . FTDI FT2232H, ESP32 JTAG + OpenOCD. , . SPI . ():
4 тАФ GND, 8, 3 7 тАФ VCC 3.3v.

Flashrom
flashrom тАФ .
...
$ flashrom -p ft2232_spi:type=2232H,port=A
тАж , , тАФ .
$ flashrom v0.9.9-r1954 on Linux 4.18.0-25-generic (x86_64) flashrom is free software, get the source code at https://flashrom.org Calibrating delay loop... OK. Found Generic flash chip "unknown SPI chip (RDID)" (0 kB, SPI) on ft2232_spi. === This flash part has status NOT WORKING for operations: PROBE READ ERASE WRITE The test status of this chip may have been updated in the latest development version of flashrom. If you are running the latest development version, please email a report to flashrom@flashrom.org if any of the above operations work correctly for you with this flash chip. Please include the flashrom log file for all operations you tested (see the man page for details), and mention which mainboard or programmer you tested in the subject line. Thanks for your help! No operations were specified.
, , , - "" "generic" .
. esp8266 .
. . .NET.
, 3.3 5 тАФ NodeMCU esp8266
. 3.3.
, тАФ SPI , HSPI GPIO 12..14
.
- NB ,
flashrom
serprog
, 8- AVR, . , , esp8266 .

!
, , 110 (2 USD) Winbond W25Q64FV. .
$ flashrom -p ft2232_spi:type=2232H,port=A -w all.bin
Tenda , . (, -, , - /. ).
-, -
- . , binwalk . тАФ .
, - .
$ binwalk all.bin DECIMAL HEXADECIMAL DESCRIPTION -------------------------------------------------------------------------------- 35096 0x8918 CRC32 polynomial table, little endian 36192 0x8D60 gzip compressed data, maximum compression, from Unix, last modified: 2018-04-20 02:17:42 206872 0x32818 LZMA compressed data, properties: 0x5D, dictionary size: 8388608 bytes, uncompressed size: 6890804 bytes 2261010 0x228012 Squashfs filesystem, little endian, version 4.0, compression:xz, size: 3071844 bytes, 378 inodes, blocksize: 131072 bytes, created: 1902-05-30 15:13:04 6160384 0x5E0000 JFFS2 filesystem, little endian
. bootlog- , тАФ dd
, binwalk
.
bootlog : mtd partitions flash vendor: BOHONG m25p80 spi0.0: BH25Q64 (8192 Kbytes) (55000000 Hz) m25p80 spi0.0: change speed to 55000000Hz, div 2 Kernel code size:0x1f8012 9 rtkxxpart partitions found on MTD device m25p80 Creating 9 MTD partitions on "m25p80": 0x000000000000-0x000000800000 : "ALL" 0x000000000000-0x000000020000 : "Bootloader" 0x000000020000-0x000000030000 : "CFG" 0x000000030000-0x0000005c0000 : "KernelFS" 0x000000228012-0x0000005c0000 : "RootFS" 0x0000005c0000-0x0000005d0000 : "CFM" 0x0000005d0000-0x0000005e0000 : "CFM_BACKUP" 0x0000005e0000-0x0000007f0000 : "LOG" 0x0000007f0000-0x000000800000 : "ENV"
RootFS all.bin
:
$ dd if=all.bin of=RootFS.bin bs=1 skip=$((0x228012)) count=$((0x5c0000-0x228012))
, , RootFS KernelFS.
, , .
, , :
- ,
- bootloader,
- bootloader DDR, , - TFTP ,
- .
RootFS
тАФ unsquashfs RootFS.bin
. squashfs-root
/.
cat /etc_ro/passwd
root:$1$nalENqL8$jnRFwb1x5S.ygN.3nwTbG1:0:0:root:/:/bin/sh
cat /etc_ro/shadow
root:$1$OVhtCyFa$7tISyKW1KGssHAQj1vI3i1:14319::::::
cat /etc_ro/inittab
::sysinit:/etc_ro/init.d/rcS ttyS0::respawn:/sbin/sulogin ::ctrlaltdel:/bin/umount -a -r ::shutdown:/usr/sbin/usb led_off
`/etc_ro/fstab` . proc /proc proc defaults 0 0 #none /var ramfs defaults 0 0 none /tmp ramfs defaults 0 0 mdev /dev ramfs defaults 0 0 none /sys sysfs defaults 0 0
, `/etc_ro/init.d/rcS`. #! /bin/sh PATH=/sbin:/bin:/usr/sbin:/usr/bin/ export PATH mount -t ramfs none /var/ mkdir -p /var/etc mkdir -p /var/media mkdir -p /var/webroot mkdir -p /var/etc/iproute mkdir -p /var/run mkdir -p /var/debug cp -rf /etc_ro/* /etc/ cp -rf /webroot_ro/* /webroot/ mkdir -p /var/etc/upan mount -a mount -t ramfs /dev mkdir /dev/pts mount -t devpts devpts /dev/pts mount -t tmpfs none /var/etc/upan -o size=2M mdev -s mkdir /var/run echo 1 > /proc/sys/vm/panic_on_oom echo 1 > /proc/sys/kernel/panic_on_oops echo '/sbin/mdev' > /proc/sys/kernel/hotplug #echo 'sd[az][0-9] 0:0 0660 @/usr/sbin/autoUsb.sh $MDEV' >> /etc/mdev.conf #echo 'sd[az] 0:0 0660 $/usr/sbin/DelUsb.sh $MDEV' >> /etc/mdev.conf #echo 'lp[0-9] 0:0 0660 */usr/sbin/IppPrint.sh'>> /etc/mdev.conf #wds rule start echo 'wds*.* 0:0 0660 */etc/wds.sh $ACTION $INTERFACE' > /etc/mdev.conf #wsd rule end echo 'sd[az][0-9] 0:0 0660 @/usr/sbin/usb_up.sh $MDEV $DEVPATH' >> /etc/mdev.conf echo '-sd[az] 0:0 0660 $/usr/sbin/usb_down.sh $MDEV $DEVPATH'>> /etc/mdev.conf echo 'sd[az] 0:0 0660 @/usr/sbin/usb_up.sh $MDEV $DEVPATH'>> /etc/mdev.conf echo '.* 0:0 0660 */usr/sbin/IppPrint.sh $ACTION $INTERFACE'>> /etc/mdev.conf mkdir -p /var/ppp insmod /lib/modules/dhcp_options.ko #insmod /lib/modules/gpio.ko insmod /lib/modules/phy_check.ko #insmod /lib/modules/fastnat.ko insmod /lib/modules/bm.ko #insmod /lib/modules/ai.ko insmod /lib/modules/mac_filter.ko #insmod /lib/modules/ip_mac_bind.ko #insmod /lib/modules/privilege_ip.ko insmod /lib/modules/nos.ko #insmod /lib/modules/url_filter.ko #insmod /lib/modules/loadbalance.ko #insmod /lib/modules/app_filter.ko #insmod /lib/modules/port_filter.ko #insmod /lib/modules/arp_fence.ko #insmod /lib/modules/ddos_ip_fence.ko #/etc/gpio_conf echo "enable 0 interval 0" >/proc/watchdog_cmd chmod +x /etc/mdev.conf mkdir -p /tmp/log mkdir -p /tmp/log/crash mkdir -p /tmp/log_print ln -sf /proc/port1 /var/port1 ln -sf /proc/port3 /var/port0 echo 'kern.* /tmp/log/kernel.log' >> /etc/syslog.conf echo '*.* /tmp/log_print/message.txt' >> /etc/syslog.conf klogd -n & syslogd -f /var/etc/syslog.conf -s 50 & monitor & sh /usr/bin/ugw_watchdog.sh 2>/tmp/log_print/ugw_watchdog.log& #sh /usr/bin/mesh_op.sh > /dev/null &
, ttyS0 /sbin/sulogin
, /bin/login -f root
/bin/sh
.
/etc_ro/inittab
. ttyS0::respawn:/sbin/sulogin
ttyS0::respawn:/bin/login -f root
.
squashfs mksquashfs
тАФ 1.5 . , xz
, - lzma
. тАФ . RootFS 0xff
. dd
. . , ...
Booting... init_ram 00000202 M init ddr ok DRAM Type: DDR2 DRAM frequency: 533MHz DRAM Size: 128MB JEDEC id EF4017, EXT id 0x0000 found w25q64 flash vendor: Winbond w25q64, size=8MB, erasesize=64KB, max_speed_hz=29000000Hz auto_mode=0 addr_width=3 erase_opcode=0x000000d8 =>CPU Wake-up interrupt happen! GISR=89000004 ---Realtek RTL8197F boot code at 2018.04.20-10:17+0800 v3.4.11B.9 (999MHz) Mac addr:04-95-e6-1a-96-e0 lan_wan_isolation Initing... config: lan port mask is 0x000000f7 config: wan port mask is 0x000000e8 lan_wan_isolation Initing has been completed. lan_wan_isolation Initing... config: lan port mask is 0x000000f7 config: wan port mask is 0x000000e8 lan_wan_isolation Initing has been completed. wait for upgrage port[0] link:down port[1] link:down port[2] link:down port[3] link:down port[4] link:down irq:0x00008080 rootfs checksum error at 00228012! <RealTek>
! CRC.
binwalk
тАФ bootloader UBoot, , RealTek тАФ . , , , тАж .
UBoot firmware-mod-kit , тАФ Firmware Analysis Toolkit
тАФ RealTek SDK 2015-. 600 . CRC тАФ . . . -.
, , :
argv[0] = netctrl netctrl prod_change_root_passwd(83)
netctrl
.
. , 20 ZX Spectrum , .
, , 3-4 . KDE FreeBSD setup-.
IDA PRO .
?
, . prod_change_root_passwd
тАФ , /bin/netctrl
, /lib/libcommonprod.so
. тАФ , тАФ .
IDA PRO, . MIPS .
/bin/netctrl
. main
. , , , . , , sys.role
, тАж . . , $a0..$a3.

/lib/libcommonprod.so
, тАФ . , тАж , ! wifi, base64 .

--!
, base64( wifi)
. тАФ . .
Normal startupGive root password for system maintenance (or type Control-D for normal startup): System Maintenance Mode ~ # ~ # uname -a Linux NOVA-xxxxxxxxxxxx 3.10.90 #4 Mon Jul 2 10:57:35 CST 2018 mips GNU/Linux
, . r/o, - RootFS .
~ # cat /proc/cpuinfo system type : RTL8197F machine : Unknown processor : 0 cpu model : MIPS 24Kc V8.5 BogoMIPS : 666.41 wait instruction : yes microsecond timers : yes tlb_entries : 64 extra interrupt vector : yes hardware watchpoint : yes, count: 4, address/irw mask: [0x0ffc, 0x0ffc, 0x0ffb, 0x0ffb] isa : mips1 mips2 mips32r2 ASEs implemented : mips16 shadow register sets : 4 kscratch registers : 0 core : 1 VCED exceptions : not available VCEI exceptions : not available
~ # ls -l /sys/class/gpio/ total 0 --w------- 1 root root 16384 Jan 1 1970 export lrwxrwxrwx 1 root root 0 Jan 1 1970 gpio18 -> ../../devices/virtual/gpio/gpio18 lrwxrwxrwx 1 root root 0 Jan 1 1970 gpio19 -> ../../devices/virtual/gpio/gpio19 lrwxrwxrwx 1 root root 0 Jan 1 1970 gpio58 -> ../../devices/virtual/gpio/gpio58 lrwxrwxrwx 1 root root 0 Jan 1 1970 gpiochip0 -> ../../devices/virtual/gpio/gpiochip0 --w------- 1 root root 16384 Jan 1 1970 unexport
~ # ls -l /sys/devices/platform/ total 0 drwxr-xr-x 2 root root 0 Jul 18 21:12 alarmtimer drwxr-xr-x 2 root root 0 Jul 18 21:12 rtl819x_8367r_i2c_pin.1 drwxr-xr-x 2 root root 0 Jul 18 21:12 rtl819x_8367r_i2c_pin.2 drwxr-xr-x 2 root root 0 Jul 18 21:12 rtl819x_8367r_reset_pin.0 drwxr-xr-x 2 root root 0 Jul 18 21:12 rtl819x_btn.0 drwxr-xr-x 2 root root 0 Jul 18 21:12 rtl819x_led.0 drwxr-xr-x 2 root root 0 Jul 18 21:12 rtl819x_led.1 drwxr-xr-x 2 root root 0 Jul 18 21:12 rtl819x_led.2 drwxr-xr-x 3 root root 0 Jan 1 1970 serial8250 drwxr-xr-x 3 root root 0 Jan 1 1970 spi-sheipa.0 -rw-r--r-- 1 root root 16384 Jul 18 21:12 uevent
~ # ps PID USER TIME COMMAND 1 root 0:01 init 2 root 0:00 [kthreadd] 3 root 0:40 [ksoftirqd/0] 4 root 0:00 [kworker/0:0] 5 root 0:00 [kworker/0:0H] 6 root 0:01 [kworker/u2:0] 7 root 0:00 [khelper] 8 root 0:00 [kworker/u2:1] 75 root 0:00 [writeback] 78 root 0:00 [bioset] 79 root 0:00 [crypto] 81 root 0:00 [kblockd] 84 root 0:01 [spi0] 102 root 0:00 [kworker/0:1] 106 root 0:00 [kswapd0] 154 root 0:00 [fsnotify_mark] 708 root 0:00 [mtdblock0] 713 root 0:00 [mtdblock1] 718 root 0:00 [mtdblock2] 723 root 0:00 [mtdblock3] 728 root 0:00 [mtdblock4] 733 root 0:00 [mtdblock5] 738 root 0:00 [mtdblock6] 743 root 0:00 [mtdblock7] 748 root 0:00 [mtdblock8] 802 root 0:00 [deferwq] 860 root 0:03 klogd -n 862 root 0:00 monitor 863 root 1:55 sh /usr/bin/ugw_watchdog.sh 869 root 0:00 syslogd -f /var/etc/syslog.conf -s 50 914 root 0:15 cfmd 1030 root 0:00 [jffs2_gcd_mtd7] 1032 root 0:11 timer 1033 root 0:00 logserver 1034 root 0:14 netctrl 1069 root 0:01 device_list 1071 root 3:20 sh /usr/bin/mesh_op.sh 1530 root 0:10 pann 1531 root 0:00 gpio_ctrl 1532 root 0:00 mesh_status_check 1534 root 0:19 network_check 1570 root 0:00 redis-server /etc_ro/redis.conf 1571 root 0:01 cmdsrv -l tcp://0.0.0.0:12598 -R tcp://127.0.0.1:6379 1572 root 0:00 [kworker/0:1H] 1573 root 0:05 confsrv 1599 root 0:01 dhcps -C /etc/dhcps.conf -l /etc/dhcps.leases -x /etc/dhc 1931 root 0:00 ucloud -l 4 1962 root 0:00 sntp 1 28800 43200 2370 root 0:00 ftd -br br0 -w wlan0 wlan1 -pid /var/run/ft.pid -c /tmp/f 2375 root 0:00 pathsel -i wlan-msh -P -t 9 2387 root 0:00 multiWAN 2488 root 0:00 dhcpcd_wan1 -c /etc/wan1.ini -m 1 eth1 -h NOVA-0495e61a96 2567 root 0:00 dnrd -t 3 -M 600 --cache=off -b -R /etc/dnrd -r 3 -s 192. 2955 root 0:00 miniupnpd -f /etc/miniupnpd.config -w 2991 root 0:00 igmpproxy 10388 root 0:00 -sh 12125 root 0:00 sleep 5 12155 root 0:00 sleep 1 12156 root 0:00 ps
Access granted, root
, . . , . .
?
тАФ DHCP . .
, . тАФ RSDK.
, . , , cloud , .
, , .
рд╕рдВрджрд░реНрдн
- , . https://github.com/latonita/tenda-reverse
- Tenda Mesh3-18 (Nova MW6 2018) on wikidevi.com
- SPI Flash programmer by SKProj
- flashrom homepage
- firmware-mod-kit ( )
- linux-based firmware тАФ firmadyne
- тАФ Firmware Analysis Toolkit