360路由RTL8196D 三方固件[9楼已更新高人编译的SDK固件]

blac***

翻到一个DLINK新出的路由，看配置跟360P0几乎一模一样，不过网上只有升级固件，有P0甚至P1的胆子大的可以试试，我试过WEB直升和RTLBOOT都不行，懒得拆机没继续试了，带TTL，有兴趣的用编程器可以去研究下，360自己固件的安全防护特别恶心，HTTP劫持，搞得CPU也特别烫，本身659Mhz的CPU还是很强的，怎么样用编程器刷入不清楚，有搞过螃蟹的可以做个WEB直升固件造福下大众                                                                                                                                          D-Link DIR-615 S rev A1

Manuf/OEM/ODM Shenzhen Gongjin Electronics

FCC approval date: 09 August 2013
Country of manuf.: China

Type: wireless router

FCC ID: KA2IR615S1

Power: 12 VDC, 0.5 A
Connector type: barrel

CPU1: Realtek RTL8196D (620 MHz)
FLA1: 4 MiB (Macronix MX25L3206E)
RAM1: 32 MiB (ESMT M13S2561616A-5T)

Expansion IFs: none specified

WI1 chip1: Realtek RTL8192ER
WI1 802dot11 protocols: bgn
WI1 MIMO config: 2x2:2
WI1 antenna connector: none

ETH chip1: Realtek RTL8196D
Switch: Realtek RTL8196D
LAN speed: 10/100
LAN ports: 4
WAN speed: 10/100
WAN ports: 1

血洗***

卧槽，螃蟹这么恶心的固件

blac***

血洗刀锋 发表于 2017-4-21 11:00
卧槽，螃蟹这么恶心的固件

螃蟹不恶心，恶心的是360

thjth***

刷磊科powr4

w664***

不知道可不可以用

w664***

跟本解压不了，提示文件损坏

zw201***

不知道360P0可不可以用

芯片***

链接：https://pan.baidu.com/s/1HrI-l7XrE2--Q87pDSf2jQ
提取码：aq0v

360 P0的 编程器固件。有兴趣可试试。就是这台路由也是坏的，不知道为啥不启动， 不知道刷进去是不是不能用。

微***

前面帖子说的都没有用， 前面那个兄弟提供的编程器固件不是完整的估计是备份的不完整。找了好久才找到源码并编译烧录，目前WiFi不能用但其他用图还是可以的，刷了编译的螃蟹官方固件才发现原来是支持5G频段的。
另附加引导和固件，不想用我编辑好的可以用编程器把flash清空 然后在回读空白的文件用十六进制编辑器把引导复制粘贴到回读的空白固件头部（注意看我附件里面最后三张图片里面的区别） 然后在写回到flash里面，最后用tftp上传固件机器会自动刷入无需动手敲命令。

我的环境：
编程器： FT2232HL 型号：CJMCU-2232HL

软件： flashrom

系统：manjaro


下一步计划适配一下openwrt。

newboot-360-P0.bin <- 这个文件是我编辑后的只带引导的固件

附加编辑时间：22:53:48

需要可用的D-LINK固件可以联系我有偿提供

D-LINK固件启动日志：
Booting...

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@
@ chip__no chip__id mfr___id dev___id cap___id size_sft dev_size chipSize
@ 0000000h 0ef4016h 00000efh 0000040h 0000016h 0000000h 0000016h 0400000h
@ blk_size blk__cnt sec_size sec__cnt pageSize page_cnt chip_clk chipName
@ 0010000h 0000040h 0001000h 0000400h 0000100h 0000010h 000003eh W25Q32
@
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Reboot Result from Watchdog Timeout!

---RealTek(RTL8196D)at 2017.08.20-16:12+0300 v1.3 [16bit](579MHz)

gcc: 4.4.5-1.5.5p4 for arch: 5281
hash: 21a868b31f7fca194fd118a6458affe62ad0a68f
rep: git@rd:sdk_boot/rtl/boot_3463

nvram: invalid sign
check_image_header  return_addr:05010000 bank_offset:00000000
no sys signature at 00010000!
no sys signature at 00020000!
ret=2  sys signature at 00030000!
Header -> startAddr:0x80500000, len:3866672
magic at 0x003e0051
load with header to:0x804ffff0, len:3866708, first_word:63723662
---
Check dlink signature
---
Validate OK
---
Jump to image start=0x80500000...
decompressing kernel:
Uncompressing Linux... done, booting the kernel.
done decompressing kernel.
start address: 0x80003470
CPU revision is: 0000dc02
Determined physical RAM map:
memory: 02000000 @ 00000000 (usable)
Zone PFN ranges:
  Normal   0x00000000 -> 0x00002000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00002000
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 8128
Kernel command line: console=ttyS0,38400 root=31:04 init=/sbin/init
icache: 64kB/32B, dcache: 32kB/32B, scache: 0kB/0B
NR_IRQS:48
PID hash table entries: 128 (order: 7, 512 bytes)
console handover: boot [early0] -> real [ttyS0]
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 22588k/32768k available (3151k kernel code, 10180k reserved, 729k data, 116k init, 0k highmem)
Calibrating delay loop... 578.35 BogoMIPS (lpj=2891776)
Mount-cache hash table entries: 512
net_namespace: 784 bytes
NET: Registered protocol family 16
bio: create slab <bio-0> at 0
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
NET: Registered protocol family 1
squashfs: version 4.0 (2009/01/31) Phillip Lougher
msgmni has been set to 44
io scheduler noop registered
io scheduler cfq registered (default)
Realtek GPIO Driver for Flash Reload Default
Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x18002000 (irq = 8) is a 16550A
PPP generic driver version 2.4.2
MPPE/MPPC encryption/compression module registered
NET: Registered protocol family 24
Realtek WLAN driver - version 1.7 (2015-10-30)(SVN:Unversioned directory)
Adaptivity function - version 9.3.2
98 - 40MHz Clock Source
Find Port=0 Device:Vender ID=818b10ec


#######################################################
SKB_BUF_SIZE=2408 MAX_SKB_NUM=480
#######################################################

[roam_nl_init:162] family no = 17
[roam_nl_init:164] Module initialized.
ROAM UP



Probing RTL8186 10/100 NIC-kenel stack size order[3]...
chip name: 8196C, chip revid: 0
Start to initiate QM
INIT swCore descriptor count Failed : (0 [0])
eth0 added. vid=9 Member port 0x10f...
eth1 added. vid=8 Member port 0x10...
rtl819x_dlink Generic Netlink family is registered.
SPI INIT
flash device: 0x400000 at 0xbfe00000
------------------------- Force into Single IO Mode ------------------------
|No chipID  Sft chipSize blkSize secSize pageSize sdCk opCk      chipName    |
| 0 ef4016h  0h  400000h  10000h   1000h     100h   80    0            W25Q32|
----------------------------------------------------------------------------
SPI flash(W25Q32) was found at CS0, size 0x400000
flash_bank_1: squashfs filesystem found at offset 0x170000
Creating 7 MTD partitions on "flash_bank_1":
0x000000000000-0x000000010000 : "boot"
0x000000010000-0x000000020000 : "MAC"
0x000000020000-0x000000030000 : "config"
0x000000030000-0x000000170000 : "kernel"
0x000000170000-0x000000400000 : "rootfs"
0x000000030000-0x000000400000 : "Linux"
0x000000000000-0x000000400000 : "ALL"
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (512 buckets, 2048 max)
ctnetlink v0.93: registering with nfnetlink.
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP cubic registered
NET: Registered protocol family 10
lo: Disabled Privacy Extensions
ip6_tables: (C) 2000-2006 Netfilter Core Team
NET: Registered protocol family 17
Bridge firewalling registered
Ebtables v2.0 registered
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
Netlink[Kernel] create socket for igmp ok.
Realtek FastPath:v1.03
nlmon: nlmon_init entry
VFS: Mounted root (squashfs filesystem) readonly on device 31:4.
Freeing unused kernel memory: 116k freed
D-link init started
Jan  1 00:00:07 init[1]: Kernel threads-max value (128) is too small. Set it to 512.
updateboot: bootloader up to date
gpiom: module license 'Proprietary' taints kernel.
Disabling lock debugging due to kernel taint
gpiom: module starting ...
gpiom: using profile DIR_620AE1A.
gpiom: button support enabled.
gpiom: led support enabled.
IRQ 32/gpiom: IRQF_DISABLED is not guaranteed on shared IRQs
init_pre_boot: -----> OK.
read_and_validate_conf - config: 0, res: 0
read_and_validate_conf - config: 1, res: 0
Lenght of avalible memory for title 142 bytes
resident starting...
Event pipe size is 4096 bytes
Initializing device...

Initializing /dev/mtd1 RLX...
Intialize wifi calibration (-1)...
MTD RLX data is latest!!!

Jan  1 00:00:02 autoupdate[40]: Config reset

Init netfilter
nf_conntrack_rtsp v0.6.21 loading
nf_nat_rtsp v0.6.21 loading
Check SSID
Do preinit ifaces
Jan  1 00:00:02 get_device_mac[[RTL_NIC]success): Dev eth0 is opened!
40]: Can't get valid MAC from flash! Use defadevice eth0 entered promiscuous mode
ult MAC!

Set mac ee:ee:[RTL_NIC]success): Dev eth0 is closed!
ee:ee:ee:e1 on if[RTL_NIC]success): Dev eth0 is opened!
ace eth0 - Obr0: port 1(eth0) entering learning state
K
Jan  1 00:00:02 get_device_mac[40]: Can't get valid MAC from flash! Use default MAC!

iface: eth0
Set mac ee:ee:ee:ee:ee:e1 on iface eth0 - OK
Set mac ee:ee:ee:ee:ee:e1 on iface br0 - OK
Jan  1 00:00:02 sched_set_task_activity[40]: Cannot open pipe
Jan  1 00:00:02 libshared rtl:start_wifi[40]: begin
Jan  1 00:br0: port 1(eth0) entering forwarding state
00:02 start_wifi[40]device wlan0 entered promiscuous mode
: device wlan0-vxd entered promiscuous mode
s-------> Set MIB from /etc/Wireless/RTL8192CD.dat
tart on<------- Set MIB from /etc/Wireless/RTL8192CD.dat Success
br= br0
Jan  1 00:00:02 get_device_mac[40]: Can't get valid MAC from flash! Use default MAC!

Jan  1 00:00:02 DMS_NL_API[40]: Rtnetlink answer: Success

Jan  1 00:00:02 DMS_ROUTE_SUCCESS[40]: ADD 239.255.255.250 via (null) dev br0 metr 0 table 254 (configure_config_file)
Jan  1 00:00:02 config_ssid_params[40]: begin
Jan  1 00:00:02 config_ssid_params[40]: ifname = wlan0


************* Initialize MAC/PHY parameter *************
[MAC_REG_8192Emp]
[PHY_REG_8192Emp]
RTL8192E_MAC_PHY_Parameter_v043_MP_20141229
[PHY_REG_PG_8192Emp]
RL6286_MAC_PHY_Parameter_v024_20130125
[AGC_TAB_8192Emp]
RTL8192E_MAC_PHY_Parameter_v043_MP_20141229
RadioA_8192Emp
RTL8192E_MAC_PHY_Parameter_v043_MP_20141229
[RadioB_8192Emp]
RTL8192E_MAC_PHY_Parameter_v043_MP_20141229
[PHY_ConfigTXPwrTrackingWithParaFile]
[TxPowerTrack_AP]
br0: port 2(wlan0) entering learning state
Jan  1 00:00:04 execWPACommands[40]: auth daemon isn't needed!

Jan  1 00:00:04 start_wifi[40]: Starting iwcontrol...

Do clear ifaces
Jan  1 00:00:04 get_device_mac[40]: Can't get valid MAC from flash! Use default MAC!

Register to wlan0
init_lan: iface = br0
br0: port 2(wlan0) entering forwarding state
update dns
init rlx linux vlans
init macfilter
start services
start tr069...
iwcontrol RegisterPID to (wlan0)
LocDNS started: NetBIOS - ok, LLMNR - ok
d-link channel[1+2+3+4+5] = 120
d-link channel[2+3+4+5+6] = 210
d-link channel[3+4+5+6+7] = 310
d-link channel[4+5+6+7+8] = 420
d-link channel[5+6+7+8+9] = 540
d-link channel[6+7+8+9+10] = 610
d-link channel[7+8+9+10+11] = 630
d-link channel[8+9+10+11+12] = 600
d-link channel[9+10+11+12+13] = 520
d-link select channel = 1 + 5
Out init_device
init_device: exited, status=0
Done.
Welcome to
     _______          ___     __  ____   _  _   ___
    |  ___  \        |   |   |__||    \ | || | /  /
    | |   | ||  ___  |   |__  __ |     \| || |/  /
    | |___| || |___| |      ||  || |\     ||     \
    |_______/        |______||__||_| \____||_|\___\

                     = Building Networks for People =

D-link init done
br0: port 2(wlan0) entering disabled state
-------> Set MIB from /etc/Wireless/RTL8192CD.dat
<------- Set MIB from /etc/Wireless/RTL8192CD.dat Success


************* Initialize MAC/PHY parameter *************
[MAC_REG_8192Emp]
[PHY_REG_8192Emp]
RTL8192E_MAC_PHY_Parameter_v043_MP_20141229
[PHY_REG_PG_8192Emp]
RL6286_MAC_PHY_Parameter_v024_20130125
[AGC_TAB_8192Emp]
RTL8192E_MAC_PHY_Parameter_v043_MP_20141229
RadioA_8192Emp
RTL8192E_MAC_PHY_Parameter_v043_MP_20141229
[RadioB_8192Emp]
RTL8192E_MAC_PHY_Parameter_v043_MP_20141229
[PHY_ConfigTXPwrTrackingWithParaFile]
[TxPowerTrack_AP]
br0: port 2(wlan0) entering learning state
br0: port 2(wlan0) entering forwarding state
d-link channel[1+2+3+4+5] = 260
d-link channel[2+3+4+5+6] = 270

blac***

微启宇 发表于 2020-1-15 16:32
前面帖子说的都没有用， 前面那个兄弟提供的编程器固件不是完整的估计是备份的不完整。找了好久才找到源码 ...

强！高人出现，你这个sdk看来像是dlink提供的吧？问题是我找遍他家可能有8192ER和96D支持的型号都没有发现有GPL源码，你用的97D那些路由的源码树？

blac***

微启宇 发表于 2020-1-15 16:32
前面帖子说的都没有用， 前面那个兄弟提供的编程器固件不是完整的估计是备份的不完整。找了好久才找到源码 ...

你wifi不能用跟RTL8192ER比较新是有比较大的关系的，驱动需要另外找

YiS***

看样子，我的360P1可以继续玩玩了

17230***

我还当360没落了

afe***

这个是原版的SDK，我有好多类似的方案的源代码，可以修改过来使用，不过螃蟹的代码真的很烂

blac***

afeng11 发表于 2020-3-8 10:54
这个是原版的SDK，我有好多类似的方案的源代码，可以修改过来使用，不过螃蟹的代码真的很烂

光说没用啊，不折腾没热度