[Lugro-mesh] huawey echolife hg520
martin campff
martincampff en arnet.com.ar
Sab Feb 16 20:09:37 ARDT 2008
radio chipset isl3886ikz + isl3686biz
http://islsm.org/wiki/lib/exe/fetch.php?id=re%3Afirmware_reverse-engeneering
_methodology&cache=cache&media=re:isl3886.pdf
micro chipset conexant DA4-9431-PCA Z ARM
memory chipset ESMTM12L64164A-7T (2 chips iguales)16 megas
rom chpset spancion s29AL032D90TF104
switch chipset infineon ADM6996M
DSL chipset conexant BAZ-3882-NCAZ
fccid link
https://fjallfoss.fcc.gov/oetcf/eas/reports/ViewExhibitReport.cfm?mode=Exhib
its&RequestTimeout=500&calledFromFrame=N&application_id=433771&fcc_id='QISHG
520C1'
como veran tiene una consola pero aparentemente no corre Linux lo cual no
implica que no lo pueda correr ya que la memoria da, tiene serial, y por lo
que vi por ahí el driver prism54 anda con el chipset de la radio chipset.
Nos quedaria ver que bootloader tiene. Bueno si encuentran algo avisan
Yo ya tome las fotos internas y tambien pude conseguir el firmware
(http://waikee.cn/blog/attachments/month_0702/r2007214233015.rar) en una
pagina china usando el goo g le para traducir a ingles
$ telnet 10.0.0.2
Login: admin
Password: *********
Login successful
--> system info
Global System Configuration:
Vendor: Conexant
URL: http://www.conexant.com/
MAC address: 00:0F:XX:XX:XX
Hardware ver: Argon 4x2 Eval BSP v1.0 / Argon 4x1 CSP v1.0 (ISOS 9.0)
Software ver: V100R001B022 ARG-T
-->
--> ?
802.1x 802.1x port based authentication
WLAN Configure Wireless Module
agent Get a file from a remote host
ald Configuration commands for ald
atmloopback commands to configure remote ATM loopback
autoprov
bridge Configure layer 2 bridge
classifier Packet classifier configuration commands
console Console access
dhcpclient DHCP client configuration commands
dhcpserver DHCP server configuration commands
diagnosticTest
dnsclient DNS client configuration commands
dnsrelay DNS relay configuration
dyndns Dynamic DNS Updater commands
ethernet Commands to configure ethernet transports
firewall Firewall configuration commands
help Top level CLI help
igmp
imdebug Directly access the information model
ip Configure IP router
logger Log to a remote host using syslog
meter Packet metering configuration command
nat NAT configuration commands
port Physical port configuration commands
pppoa PPP over ATM configuration
pppoe
radclient RADIUS Client Configuration commands
rfc1483 Commands to configure RFC1483 transports
scheduler Configuration commands for scheduler
security Security configuration commands not specific to NAT or
firewall
snmp
sntpclient
source Read a file of commands
system System administration commands
tftpc TFTP client commands
tp Test Portal commands
transports Transport configuration commands
upnp UPnP configuration commands
user User commands
webserver Webserver configuration commands
wpa Configure WPA (Wireless Protected Access)
zipb Configure Dynamic ZIPB mode
--> console
enable Enter console mode
process Execute console command
--> console imdebug
--> console imdebug help
Unrecognized command (use '?' to see valid completions)
-->
802.1x 802.1x port based authentication
WLAN Configure Wireless Module
agent Get a file from a remote host
ald Configuration commands for ald
atmloopback commands to configure remote ATM loopback
autoprov
bridge Configure layer 2 bridge
classifier Packet classifier configuration commands
console Console access
dhcpclient DHCP client configuration commands
dhcpserver DHCP server configuration commands
diagnosticTest
dnsclient DNS client configuration commands
dnsrelay DNS relay configuration
dyndns Dynamic DNS Updater commands
ethernet Commands to configure ethernet transports
firewall Firewall configuration commands
help Top level CLI help
igmp
imdebug Directly access the information model
ip Configure IP router
logger Log to a remote host using syslog
meter Packet metering configuration command
nat NAT configuration commands
port Physical port configuration commands
pppoa PPP over ATM configuration
pppoe
radclient RADIUS Client Configuration commands
rfc1483 Commands to configure RFC1483 transports
scheduler Configuration commands for scheduler
security Security configuration commands not specific to NAT or
firewall
snmp
sntpclient
source Read a file of commands
system System administration commands
tftpc TFTP client commands
tp Test Portal commands
transports Transport configuration commands
upnp UPnP configuration commands
user User commands
webserver Webserver configuration commands
wpa Configure WPA (Wireless Protected Access)
zipb Configure Dynamic ZIPB mode
--> console imdebug
--> console imdebug ls
Unrecognized command (use '?' to see valid completions)
--> console imdebug
--> console imdebug
--> console imdebug
--> console imdebug
--> console imdebug
Unrecognized command (use '?' to see valid completions)
--> console
Unrecognized command (use '?' to see valid completions)
--> console
enable Enter console mode
process Execute console command
--> console enable
Switching from CLI to console mode - type 'exit' to return
Quantum> help
Console internal commands:
home (works at any time)
event [show|unshow|next|n|previous|p|recent|r]
restart (or 'system restart')
tell <task> <command>
uptime
version
Tasks accepting commands:
debug ip config buffer chips
isfs fm flashfs ppp dhcpclient
dhcpserver dnsrelay dnslookup tftp ftpd
wireless pci syslog 802.1x reflect
housekeeping pvcbundling post bridge security
led im dnsclient bun wpa
oam
Quantum> debug
Quantum debug> help
help : Display built-in help : help
why : Show return code meaning : why <error>
what : Show what values might be : what <n> <n>...
db : Display memory bytes : db [<addr> [count]]
dh : Display memory half words : dh [<addr> [count]]
dw : Display memory words : dw [<addr> [count]]
wb : Write memory byte : wb <addr> <value>
wh : Write memory half word : wh <addr> <value>
ww : Write memory byte : wb <addr> <value>
var : Set variable : var <name> <value>
call : Call function : call <addr> [args]
exit : Exit from the debugger : exit
version : Report version : version
system asic : Display ASIC information : system asic
system abort : Show state following an abort : system abort
system stack : Display a stack : system stack [sp
<stack>]
system restart : Reboot the system : system restart
memory map : Show top level map : memory map
memory stats : Show memory statistics : memory stats
memory list : List all allocation info : memory list
memory tasks : Show memory use by task : memory tasks
memory show : display region information : memory show <region>
[sta
ts|list|tasks]
object ls : Directory listing : object ls [<path>]
[type
<type>] [only]
object find : Find objects of specific type : object find <type>
[key <
key>]
object show : Show object properties : object show <path>
[type
<type>] [key <key>] [only]
object mkdir : Create a directory : object mkdir <path>
object rmdir : Remove a directory : object rmdir <path>
object types : Display registered object types: object types
object new : Create a new object : object new <type>
<path>
<properties>
object delete : Delete an object : object delete <path>
object set : Set an objects attributes : object set <path>
<proper
ties>
interface show : Show detailed interface info : interface show <name>
[in
fo]
semaphore show : Show detailed semaphore info : semaphore show <name>
[in
fo]
pool steal : Steal <n> buffers from a pool : pool steal [<name>
<n>]
pool show : Show detailed pool info : pool show <name>
[info|in
use|free][reset]
message show : Show specific message : message show
<address>
task global : Show global state : task global
task main : List task main() entry points : task main
task stack : Show task stack : task stack <task>
timer time : Show system time : timer time
timer state : Display internal state : timer state
event recent : Show recent events : event recent
event next : Show next events : event next
event previous : Show previous events : event previous
pci show tree : Show PCI bus/device tree : pci
pci list devices: List PCI devices : pci
pci show device: Show device Config space : pci
[<bus>:]<dev>[.<fn>]
pci show resources: Show resources used by (all) device(s): pci
[<bus>:]<
dev>[.<fn>]|all
Quantum debug> pci list
Unknown command 'pci list'
Quantum debug> pci list devices
Bus:Dev.Fn Vendor Device SubVendor SubDevice Rev Class I/F Description
---------------------------------------------------------------
00:05.0 14BC 4772 14BC 4772 01 06-00 00 Host Bridge
00:06.0 1260 3886 1260 0000 01 02-80 00 Network
Controller
Quantum debug> vercion
Unknown command 'vercion'
Quantum debug> version
host port : native-arm32-hf
hs version: 2.01
xs version: 1.02
Quantum debug> memory map
Physical memory : 00000000 -> 00ffffff 16.0 Mbytes
Firmware : 00000000 -> 0054d8ff 5.3 Mbytes
Code : 00002020 -> 0054d72b 5.3 Mbytes
Global heap : 0054d900 -> 00ffffff 10.7 Mbytes
Quantum debug> system asic
Argon 4x1 ChipID 34325247 ChipVersion 00000101
ticks 1386 TIMER_LOOPS 256
Effective CPU speed 96.0MHz
Quantum debug> system stack
No aborts taken.
Quantum debug> interfase show
Unknown command 'interfase show'
Quantum debug> interface show
/task/consoleagent: can't parse interface handle - Syntax error (rc 84)
Quantum debug> pci show tree
PCI bus tree:
=============
+---Bus 0 Primary 0 Secondary 0 Subordinate 0
+---Dev 00:05.0 id 14BC:4772 subsystem 14BC:4772
+---Dev 00:06.0 id 1260:3886 subsystem 1260:0000
Quantum debug> pci show devices
Device not found
Quantum debug> pci show resources
00:05.0 BAR0: Memory at 0xD0000000 - 0xD1FFFFFF length=0x2000000
00:06.0 IRQ : Pin INTA
00:06.0 BAR0: Memory at 0xD2000000 - 0xD2001FFF length=0x2000
Quantum debug> object types
tASTaskService 9haq [2] 1.00 -> tASInterface [0]
-> tASObject [0]
tASTask 4haq [2] 1.01 -> tASTaskService [1]
-> tASInterface [0]
-> tASObject [0]
tASMonitoredPool 8haq [1] 1.00 -> tASPool [0]
-> tASInterface [0]
-> tASObject [0]
tASPool 5haq [1] 1.00 -> tASInterface [0]
-> tASObject [0]
tASMemRegion 0maq [1] 1.01 -> tASObject [0]
tASSemaphore 3haq [1] 1.00 -> tASObject [0]
tASInterface 1haq [1] 1.00 -> tASObject [0]
tASVariable 0vaq [1] 1.00 -> tASObject [0]
tASInterrupt 1qaq [1] 1.00 -> tASObject [0]
tASIrqController 0qaq [1] 1.00 -> tASObject [0]
tASObject 0haq [1] 1.00
Quantum debug> exit
Quantum debug> exit
Quantum debug>
Quantum debug> ?
Unknown command '?'
Quantum debug>
Quantum debug> help
help : Display built-in help : help
why : Show return code meaning : why <error>
what : Show what values might be : what <n> <n>...
db : Display memory bytes : db [<addr> [count]]
dh : Display memory half words : dh [<addr> [count]]
dw : Display memory words : dw [<addr> [count]]
wb : Write memory byte : wb <addr> <value>
wh : Write memory half word : wh <addr> <value>
ww : Write memory byte : wb <addr> <value>
var : Set variable : var <name> <value>
call : Call function : call <addr> [args]
exit : Exit from the debugger : exit
version : Report version : version
system asic : Display ASIC information : system asic
system abort : Show state following an abort : system abort
system stack : Display a stack : system stack [sp
<stack>]
system restart : Reboot the system : system restart
memory map : Show top level map : memory map
memory stats : Show memory statistics : memory stats
memory list : List all allocation info : memory list
memory tasks : Show memory use by task : memory tasks
memory show : display region information : memory show <region>
[sta
ts|list|tasks]
object ls : Directory listing : object ls [<path>]
[type
<type>] [only]
object find : Find objects of specific type : object find <type>
[key <
key>]
object show : Show object properties : object show <path>
[type
<type>] [key <key>] [only]
object mkdir : Create a directory : object mkdir <path>
object rmdir : Remove a directory : object rmdir <path>
object types : Display registered object types: object types
object new : Create a new object : object new <type>
<path>
<properties>
object delete : Delete an object : object delete <path>
object set : Set an objects attributes : object set <path>
<proper
ties>
interface show : Show detailed interface info : interface show <name>
[in
fo]
semaphore show : Show detailed semaphore info : semaphore show <name>
[in
fo]
pool steal : Steal <n> buffers from a pool : pool steal [<name>
<n>]
pool show : Show detailed pool info : pool show <name>
[info|in
use|free][reset]
message show : Show specific message : message show
<address>
task global : Show global state : task global
task main : List task main() entry points : task main
task stack : Show task stack : task stack <task>
timer time : Show system time : timer time
timer state : Display internal state : timer state
event recent : Show recent events : event recent
event next : Show next events : event next
event previous : Show previous events : event previous
pci show tree : Show PCI bus/device tree : pci
pci list devices: List PCI devices : pci
pci show device: Show device Config space : pci
[<bus>:]<dev>[.<fn>]
pci show resources: Show resources used by (all) device(s): pci
[<bus>:]<
dev>[.<fn>]|all
Quantum debug> version
host port : native-arm32-hf
hs version: 2.01
xs version: 1.02
Quantum debug>
Más información sobre la lista de distribución Lugro-mesh