U-Boot 1.1.3 (Dec 13 2011 - 13:46:43) Board: Ralink APSoC DRAM: 32 MB relocate_code Pointer at: 81fb0000 spi_wait_nsec: 40 spi device id: c2 20 17 c2 20 (2017c220) find flash: MX25L6405D raspi_read: from:30000 len:1000 .raspi_read: from:30000 len:1000 .============================================ Ralink UBoot Version: 3.6.0.0 -------------------------------------------- ASIC 3883_MP (MAC to 100PHY Mode) DRAM_CONF_FROM: Boot-Strapping DRAM_TYPE: SDRAM DRAM_SIZE: 256 Mbits DRAM_WIDTH: 16 bits DRAM_TOTAL_WIDTH: 16 bits TOTAL_MEMORY_SIZE: 32 MBytes Flash component: SPI Flash Date:Dec 13 2011 Time:13:46:43 ============================================ icache: sets:512, ways:4, linesz:32 ,total:65536 dcache: sets:256, ways:4, linesz:32 ,total:32768 ##### The CPU freq = 500 MHZ #### estimate memory size =32 Mbytes Please choose the operation: 1: Load system code to SDRAM via TFTP. 2: Load system code then write to Flash via TFTP. 3: Boot system code via Flash (default). 4: Entr boot command line interface. 7: Load Boot Loader code then write to Flash via Serial. 9: Load Boot Loader code then write to Flash via TFTP.  4  3  2  1  0 3: System Boot system code via Flash. Trying to boot from A...bootstate=[0] Boot A addr_str=[0xBC050000] ## Booting image at bc050000 ... raspi_read: from:50000 len:40 . Image Name: Linux Kernel Image Created: 2013-08-22 3:23:21 UTC Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 3428916 Bytes = 3.3 MB Load Address: 80000000 Entry Point: 8024f000 raspi_read: from:50040 len:345234 ..................................................... Verifying Checksum ... OK Uncompressing Kernel Image ... OK No initrd ## Transferring control to Linux (at address 8024f000) ... ## Giving linux memsize in MB, 32 Starting kernel ... LINUX started... THIS IS ASIC Linux version 2.6.21 (root@CVS2) (gcc version 3.4.2) #317 Thu Aug 22 11:23:18 CST 2013 The CPU frequency set to 500 MHz CPU revision is: 0001974c Determined physical RAM map: memory: 02000000 @ 00000000 (usable) Initrd not found or empty - disabling initrd Built 1 zonelists. Total pages: 8128 Kernel command line: console=ttyS1,57600n8 root=/dev/ram0 Primary instruction cache 64kB, physically tagged, 4-way, linesize 32 bytes. Primary data cache 32kB, 4-way, linesize 32 bytes. Synthesized TLB refill handler (20 instructions). Synthesized TLB load handler fastpath (32 instructions). Synthesized TLB store handler fastpath (32 instructions). Synthesized TLB modify handler fastpath (31 instructions). cause = 40808000, status = 11000000 PID hash table entries: 128 (order: 7, 512 bytes) calculating r4koff... 001e8480(2000000) CPU frequency 500.00 MHz Using 250.000 MHz high precision timer. Dentry cache hash table entries: 4096 (order: 2, 16384 bytes) Inode-cache hash table entries: 2048 (order: 1, 8192 bytes) Memory: 27356k/32768k available (2073k kernel code, 5412k reserved, 286k data, 2668k init, 0k highmem) Mount-cache hash table entries: 512 NET: Registered protocol family 16 NET: Registered protocol family 2 Time: MIPS clocksource has been installed. IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 1024 (order: 1, 8192 bytes) TCP bind hash table entries: 1024 (order: 0, 4096 bytes) TCP: Hash tables configured (established 1024 bind 1024) TCP reno registered detected lzma initramfs detected lzma initramfs initramfs: LZMA lc=3,lp=0,pb=2,dictSize=1048576,origSize=11433472 LZMA initramfs by Ming-Ching Tiew ...............................................................................................................................................................................deice id : c2 20 17 c2 20 (2017c220) MX25L6405D(c2 2017c220) (8192 Kbytes) mtd .name = raspi, .size = 0x00800000 (8M) .erasesize = 0x00010000 (64K) .numeraseregions = 0 Creating 7 MTD partitions on "raspi": 0x00000000-0x00800000 : "ALL" 0x00000000-0x00030000 : "Bootloader" 0x00030000-0x00040000 : "Config" 0x00040000-0x00050000 : "Factory" 0x00050000-0x00420000 : "KernelA" 0x00420000-0x007f0000 : "KernelB" 0x007f0000-0x00800000 : "Factory2" Load Ralink DFS Timer Module squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher squashfs: LZMA suppport for slax.org by jro io scheduler noop registered (default) Ralink gpio driver initialized spidrv_major = 217 HDLC line discipline: version $Revision: 1.1.1.1 $, maxframe=4096 N_HDLC line discipline registered. Serial: 8250/16550 driver $Revision: 1.8 $ 2 ports, IRQ sharing disabled serial8250: ttyS0 at I/O 0xb0000500 (irq = 37) is a 16550A serial8250: ttyS1 at I/O 0xb0000c00 (irq = 12) is a 16550A RAMDISK driver initialized: 16 RAM disks of 16384K size 1024 blocksize loop: loaded (max 8 devices) rdm_major = 253 IMQ starting with 2 devices... IMQ driver loaded successfully. Hooking IMQ after NAT on PREROUTING. Hooking IMQ before NAT on POSTROUTING. PPP generic driver version 2.4.2 PPP BSD Compression module registered NET: Registered protocol family 24 PPPoL2TP kernel driver, V0.17 PPTP driver version 0.8.1 block2mtd: version $Revision: 1.1.1.1 $ nf_conntrack version 0.5.0 (256 buckets, 2048 max) ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Restricted Cone TCP cubic registered NET: Registered protocol family 1 NET: Registered protocol family 10 NET: Registered protocol family 17 802.1Q VLAN Support v1.8 Ben Greear All bugs added by David S. Miller Freeing unused kernel memory: 2668k freed init started: BusyBox v1.12.1 (2013-08-22 11:20Algorithmics/MIPS FPU Emulator v1.5 :11 CST) starting pid 13, tty '': '/etc_ro/rcS' devpts: called with bogus options mount: mounting none on /proc/bus/usb failed: No such file or directory Welcome to _______ _______ ___ __ ____ _ _ ___ | ___ \| __ || | |__|| \ | || | / / | |___| || |__| || |__ __ | \| || |/ / | _ /| _ || || || |\ || \ |__| \__\|__| |__||______||__||_| \____||_|\___\ =System Architecture Department= internet.sh ra0 no private ioctls. starting pid 34, tty '/dev/ttyS1': '/bin/sh' BusyBox v1.12.1 (2013-08-22 11:20:11 CST) built-in shell (ash) Enter 'help' for a list of built-in commands. # killall: udpsvd: no process killed udpsvd: listening on 0.0.0.0:19078, starting Password for 'admin' changed rmmod: ralink_wdt: No such file or directory rmmod: cls: No such file or directory rmmod: hw_nat: No such file or directory rmmod: raeth: No such file or directory insmod: bridge.ko: module not found insmod: mii.ko: module not found Ralink APSoC Ethernet Driver Initilization. v2.1 256 rx/tx descriptors allocated, mtu = 1500! MAC_ADRH -- : 0x0000000c MAC_ADRL -- : 0x432880b6 PROC INIT OK! phy_tx_ring = 0x002cc000, tx_ring = 0xa02cc000 phy_rx_ring0 = 0x002cd000, rx_ring0 = 0xa02cd000 MAC_ADRH -- : 0x0000000c MAC_ADRL -- : 0x432880b6 CDMA_CSG_CFG = 81000007 GDMA1_FWD_CFG = C0710000 ##### disable 1st wireless interface ##### rmmod: rt2860v2_ap_net: No such file or directory rmmod: rt2860v2_ap: No such file or directory rmmod: rt2860v2_ap_util: No such file or directory rmmod: rt2860v2_sta_net: No such file or directory rmmod: rt2860v2_sta: No such file or directory rmmod: rt2860v2_sta_util: No such file or directory insmod: rt2860v2_sta_util.ko: module not found rt2860v2_sta: module license 'unspecified' taints kernel. === pAd = c0028000, size = 583616 === <-- RTMPAllocAdapterBlock, Status=0 insmod: rt2860v2_sta_net.ko: module not found rmmod: nf_nat_pptp: No such file or directory rmmod: nf_conntrack_pptp: No such file or directory rmmod: nf_nat_proto_gre: No such file or directory rmmod: nf_conntrack_proto_gre: No such file or directory RX DESC a14d5000 size = 2048 <-- RTMPAllocTxRxRingMemory, Status=0 RTMP_TimerListAdd: add timer obj c0076c08! RTMP_TimerListAdd: add timer obj c0076c30! RTMP_TimerListAdd: add timer obj c0076c58! RTMP_TimerListAdd: add timer obj c0076be0! RTMP_TimerListAdd: add timer obj c0076b68! RTMP_TimerListAdd: add timer obj c0076b90! RTMP_TimerListAdd: add timer obj c002decc! RTMP_TimerListAdd: add timer obj c002df0c! RTMP_TimerListAdd: add timer obj c002df4c! RTMP_TimerListAdd: add timer obj c002df8c! RTMP_TimerListAdd: add timer obj c004159c! RTMP_TimerListAdd: add timer obj c002de94! RTMP_TimerListAdd: add timer obj c002dfcc! RTMP_TimerListAdd: add timer obj c0030910! RTMP_TimerListAdd: add timer obj c0030160! RTMP_TimerListAdd: add timer obj c00308e4! RTMP_TimerListAdd: add timer obj c0030b70! RTMP_TimerListAdd: add timer obj c003093c! RTMP_TimerListAdd: add timer obj c0030968! RTMP_TimerListAdd: add timer obj c0030994! RTMP_TimerListAdd: add timer obj c004154c! RTMP_TimerListAdd: add timer obj c0041650! Key1Str is Invalid key length(0) or Type(0) Key2Str is Invalid key length(0) or Type(0) Key3Str is Invalid key length(0) or Type(0) Key4Str is Invalid key length(0) or Type(0) 1. Phy Mode = 5 2. Phy Mode = 5 Read EEPROM, EthCloneMac is f8:35:dd:c9:1b:23! 3. Phy Mode = 5 RTMPSetPhyMode: channel is out of range, use first channel=1 MCS Set = ff ff ff 00 01 <==== rt28xx_init, Status=0 0x1300 = 00064300 ifconfig: ioctl 0x8913 failed: No such device brctl: bridge br0: No such device or address device ra0 entered promiscuous mode device eth2 entered promiscuous mode br0: port 2(eth2) entering learning state br0: port 1(ra0) entering learning state route: ioctl 0x890c failed: No such process ifconfig: ioctl 0x8914 failed: Cannot assign requested address ifconfig: ioctl 0x8914 failed: Cannot assign requested address ifconfig: ioctl 0x8913 failed: No such device no previous profiles defined killall rt2860apd 1>/dev/null 2>&1 iptables -F -t filter 1>/dev/null 2>&1 iptables -D FORWARD -j macipport_filter 1>/dev/null 2>&1 iptables -F macipport_filter 1>/dev/null 2>&1 iptables -D FORWARD -j web_filter 1>/dev/null 2>&1 iptables -F web_filter 1>/dev/null 2>&1 iptables -D FORWARD -j malicious_filter 1>/dev/null 2>&1 iptables -F malicious_filter 1>/dev/null 2>&1 iptables -D INPUT -j malicious_input_filter 1>/dev/null 2>&1 iptables -F malicious_input_filter 1>/dev/null 2>&1 iptables -P INPUT ACCEPT iptables -P OUTPUT ACCEPT iptables -P FORWARD ACCEPT iptables -t filter -N web_filter 1>/dev/null 2>&1 iptables -t filter -N macipport_filter 1>/dev/null 2>&1 iptables -t filter -N malicious_filter 1>/dev/null 2>&1 iptables -t filter -N synflood_filter 1>/dev/null 2>&1 iptables -t filter -N malicious_input_filter 1>/dev/null 2>&1 iptables -t filter -N synflood_input_filter 1>/dev/null 2>&1 iptables -t filter -A FORWARD -j web_filter 1>/dev/null 2>&1 iptables -t filter -A FORWARD -j macipport_filter 1>/dev/null 2>&1 iptables -t filter -A FORWARD -j malicious_filter 1>/dev/null 2>&1 iptables -t filter -A malicious_filter -p tcp --syn -j synflood_filter 1>/dev/null 2>&1 iptables -t filter -A INPUT -j malicious_input_filter 1>/dev/null 2>&1 iptables -t filter -A malicious_input_filter -p tcp --syn -j synflood_input_filter 1>/dev/null 2>&1 iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu 1>/dev/null 2>&1 /bin/super_dmz -f sh: /bin/super_dmz: not found iptables -t nat -D PREROUTING -j port_forward 1>/dev/null 2>&1 iptables -t nat -F port_forward 1>/dev/null 2>&1; iptables -t nat -X port_forward 1>/dev/null 2>&1 iptables -t nat -D PREROUTING -j DMZ 1>/dev/null 2>&1 iptables -t nat -F DMZ 1>/dev/null 2>&1; iptables -t nat -X DMZ 1>/dev/null 2>&1 iptables -t nat -N port_forward 1>/dev/null 2>&1; iptables -t nabr0: topology change detected, propagating t -I PREROUTING br0: port 2(eth2) entering forwarding state 1 -j port_forwarbr0: topology change detected, propagating d 1>/dev/null 2>br0: port 1(ra0) entering forwarding state &1 iptables -t nat -N DMZ 1>/dev/null 2>&1; iptables -t nat -I PREROUTING 2 -j DMZ 1>/dev/null 2>&1 ntp.sh ddns.sh kill -9 `cat /var/run/wscd.pid.ra0` cat: can't open '/var/run/wscd.pid.ra0': No such file or directory kill: you need to specify whom to kill iwpriv ra0 set WscConfMode=0 1>/dev/null 2>&1 route delete 239.255.255.250 1>/dev/null 2>&1 killall -q klogd killall -q syslogd syslogd -C8 1>/dev/null 2>&1 klogd 1>/dev/null 2>&1 killall -q zebra killall -q ripd /bin/qos_run webs: Listening for HTTP requests at address 198.18.201.123:19080 Get_bootstate_to_nvram... Get_bootstate_to_nvram : Reading 4096 bytes......success Uboot CRC is 033F04CC, Uboot env CRC is 033F04CC Reading 65536 bytes......success Get_bootstate_to_nvram : bootstate is [0] mtd4 and mtd5 is the same mtd3 and mtd6 is the same ================ Initial_Finish ================ # cat   ls etc_ro usr lib tmp sys dev proc mnt init bin var etc media sbin home # cd proc # ls 879 11 1 mounts zoneinfo sys 764 10 self kmsg diskstats irq 761 9 loadavg devices modules misc 224 8 uptime cpuinfo kcore ioports 223 7 meminfo partitions net iomem 47 6 version stat sysvipc timer_list 34 5 filesystems interrupts fs mtd 28 4 cmdline slabinfo driver rt3883 23 3 locks buddyinfo tty 18 2 execdomains vmstat bus # cat devices Character devices: 1 mem 2 pty 3 ttyp 4 ttyS 5 /dev/tty 5 /dev/console 5 /dev/ptmx 10 misc 13 input 90 mtd 108 ppp 128 ptm 136 pts 217 spiS0 251 nvram 252 gpio 253 rdm0 Block devices: 1 ramdisk 7 loop 31 mtdblock # ls 917 11 1 mounts zoneinfo sys 764 10 self kmsg diskstats irq 761 9 loadavg devices modules misc 224 8 uptime cpuinfo kcore ioports 223 7 meminfo partitions net iomem 47 6 version stat sysvipc timer_list 34 5 filesystems interrupts fs mtd 28 4 cmdline slabinfo driver rt3883 23 3 locks buddyinfo tty 18 2 execdomains vmstat bus # cat cpuinfo system type : Ralink SoC processor : 0 cpu model : MIPS 74K V4.12 BogoMIPS : 249.34 wait instruction : yes microsecond timers : yes tlb_entries : 32 extra interrupt vector : yes hardware watchpoint : yes ASEs implemented : mips16 dsp VCED exceptions : not available VCEI exceptions : not available #