无系统密码，如何备份CFE及无线资料？@#￥

ff***

LG-Dacom BCM5354路由器4Mx16M,想刷DD或华硕WL-330gE固件，但无法备份CFE及无线资料！！{:soso_e118:} 可以进CFE，但启动完成后有密码，无法进入命令提示符界面{:soso_e101:} 附上完整启动log
高手请支招@！！

CFE version 1.0.37.3 for BCM947XX (32bit,SP,LE)
Build Date: 2009-03-12 11:28:29 (neon20@davo_devel1)
Copyright (C) 2000,2001,2002,2003 Broadcom Corporation.

Initializing Arena
Initializing Devices.
Boot partition size = 262144(0x40000)
et0: Broadcom BCM47xx 10/100 Mbps Ethernet Controller 4.150.10.31
CPU type 0x29029: 240MHz
Total memory: 16384 KBytes

Total memory used by CFE:  0x80700000 - 0x808398A0 (1284256)
Initialized Data:          0x807336D0 - 0x80736920 (12880)
BSS Area:                  0x80736920 - 0x807378A0 (3968)
Local Heap:                0x807378A0 - 0x808378A0 (1048576)
Stack Area:                0x808378A0 - 0x808398A0 (8192)
Text (code) segment:       0x80700000 - 0x807336D0 (210640)
Boot area (physical):      0x0083A000 - 0x0087A000
Relocation Factor:         I:00000000 - D:00000000

Device eth0:  hwaddr 00-90-4C-C0-14-EE, ipaddr 192.168.123.254, mask 255.255.255.0
        gateway not set, nameserver not set
booting by flash0.os
Loader:raw Filesys:tftp Dev:eth0 File:: Optionsnull)
Loading: Failed.
Could not load :: Interrupted
web info: Waiting for connection on socket 0.
CFE>
CFE> help
Available commands:
et                  Broadcom Ethernet utility.
nvram               NVRAM utility.
reboot              Reboot.
flash               Update a flash memory device
autoboot            Automatic system bootstrap.
batch               Load a batch file into memory and execute it
go                  Verify and boot OS image.
boot                Load an executable file into memory and execute it
load                Load an executable file into memory without executing it
save                Save a region of memory to a remote file via TFTP
ping                Ping a remote IP host.
arp                 Display or modify the ARP Table
ifconfig            Configure the Ethernet interface
unsetenv            Delete an environment variable.
printenv            Display the environment variables
setenv              Set an environment variable.
help                Obtain help for CFE commands

For more information about a command, enter 'help command-name'
*** command status = 0
----------------------------------------------------------------------------------
CFE version 1.0.37.3 for BCM947XX (32bit,SP,LE)
Build Date: 2009-03-12 11:28:29 (neon20@davo_devel1)
Copyright (C) 2000,2001,2002,2003 Broadcom Corporation.

Initializing Arena
Initializing Devices.
Boot partition size = 262144(0x40000)
et0: Broadcom BCM47xx 10/100 Mbps Ethernet Controller 4.150.10.31
CPU type 0x29029: 240MHz
Total memory: 16384 KBytes

Total memory used by CFE:  0x80700000 - 0x808398A0 (1284256)
Initialized Data:          0x807336D0 - 0x80736920 (12880)
BSS Area:                  0x80736920 - 0x807378A0 (3968)
Local Heap:                0x807378A0 - 0x808378A0 (1048576)
Stack Area:                0x808378A0 - 0x808398A0 (8192)
Text (code) segment:       0x80700000 - 0x807336D0 (210640)
Boot area (physical):      0x0083A000 - 0x0087A000
Relocation Factor:         I:00000000 - D:00000000

Device eth0:  hwaddr 00-90-4C-C0-14-EE, ipaddr 192.168.123.254, mask 255.255.255.0
        gateway not set, nameserver not set
booting by flash0.os
Loader:raw Filesys:tftp Dev:eth0 File:: Optionsnull)
Loading: Failed.
Could not load :: Timeout occured
Loader:raw Filesys:raw Dev:flash0.os File: Optionsnull)
Loading: .......... 3043328 bytes read
Entry at 0x80001000
Closing network.
Starting program at 0x80001000
CPU revision is: 00029029
Primary instruction cache 16kb, linesize 16 bytes (4 ways)
Primary data cache 16kb, linesize 16 bytes (2 ways)
Linux version 2.4.20 (neon20@neon20-linuxPC) (gcc version 3.2.3 with Broadcom modifications) #277 Mon Aug 17 17:54:27 KST 2009
Setting the PFC to its default value
Determined physical RAM map:
memory: 01000000 @ 00000000 (usable)
On node 0 totalpages: 4096
zone(0): 4096 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: root=/dev/mtdblock2 noinitrd console=ttyS0,115200
CPU: BCM5354 rev 3 at 240 MHz
Calibrating delay loop... 237.56 BogoMIPS
Memory: 12368k/16384k available (1378k kernel code, 4016k reserved, 104k data, 64k init, 0k highmem)
Dentry cache hash table entries: 2048 (order: 2, 16384 bytes)
Inode cache hash table entries: 1024 (order: 1, 8192 bytes)
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer-cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 4096 (order: 2, 16384 bytes)
Checking for 'wait' instruction...  unavailable.
POSIX conformance testing by UNIFIX
PCI: no core
PCI: Fixing up bus 0
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
Initializing RT netlink socket
Starting kswapd
devfs: v1.12c (20020818) Richard Gooch (rgooch@atnf.csiro.au)
devfs: boot_options: 0x1
Squashfs 2.2 (released 2005/07/03) (C) 2002-2004, 2005 Phillip Lougher
pty: 256 Unix98 ptys configured
Serial driver version 5.05c (2001-07-08) with MANY_PORTS SHARE_IRQ SERIAL_PCI enabled
ttyS00 at 0xb8000300 (irq = 3) is a 16550A
ttyS01 at 0xb8000400 (irq = 0) is a 16550A
PPP generic driver version 2.4.2
Amd/Fujitsu Extended Query Table v1.1 at 0x0040
number of CFI chips: 1
Flash device: 0x400000 at 0x1c000000
Creating 8 MTD partitions on "hysically mapped flash":
0x00000000-0x00040000 : "boot"
0x00040000-0x003f0000 : "linux"
0x00040000-0x003f0000 : "rootfs"
0x003f0000-0x00400000 : "nvram"
0x00040000-0x003e0000 : "all"
0x003e0000-0x003f0000 : "dvrom"
0x00040000-0x00290000 : "trx1"
0x00290000-0x003e0000 : "trx2"
Embedded root device: 0x160000 at 0x16d400
a016d400: 7a 6c 71 73 d0 00 00 00
sflash: found no supported devices
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 1024 bind 2048)
ip_conntrack version 2.1 (128 buckets, 1024 max) - 344 bytes per conntrack
ip_tables: (C) 2000-2002 Netfilter core team
ipt_time loading
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
NET4: Ethernet Bridge 008 for NET4.0
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
nvram mtd foundnvram)
VFS: Mounted root (squashfs filesystem) readonly.
Mounted devfs on /dev
Freeing unused kernel memory: 64k freed
Using /lib/modules/2.4.20/kernel/drivers/net/et/et.o
insmod: bcm57xx.o: no module by that name found
Using /lib/modules/2.4.20/kernel/drivers/net/wl/wl.o
Hit enter to continue...

Check boot ROM updating /etc/bootrom
boot ROM file found /etc/bootrom
boot ROM version is same (ver=1.01.07)
WARNING: console log level set to 1
eth1: Numerical result out of range
eth1: Operation not supported
eth1: Invalid argument
eth1: Invalid argument
NET: Setting vlan0 hw addr to 00:90:4C:C0:14:ED
vlan0: Operation not supported
NET: Setting wl0.1 hw addr to 00:90:4C:C0:14:EC
killall: upnp: no process killed
calling upnp_main
Daemon Successfully forked (pid: 67)
argv[0] ==> wlconf
argv[1] ==> eth1
argv[2] ==> master
argv[3] ==> 0
Run wlctl wds master daemon [pid : 69]
SNMP 192.168.123.254:161 succesfully opened.
vlan1: Operation not supported
vlan1 dhcp
vlan1: No such process
Hit enter to continue...ACH message : same channel!!

password:

ff***

唉。。。没落了，连个会话顶的都少

ff***

终于搞定备份了{:soso_e189:}