金色K3-首拆帖-个人拆机-失保-TTL信息-260-cfe下载

独爱你一人

5楼有更新，此次K3拆机更换NAND颗粒刷固件完结

路由器31号半夜11点55分被闹钟叫醒，12点2分下单了体脂称，又去看k3，发现库存是1，抢购加入购物车结算提示库存不足，心想完，这次撸不成了，去扣扣群了解各位群友们的情况，也是抱怨有抢到有的没抢到，水了20来分钟，回去看竟然发现有货了，立马下单两套，k2+k2p+k3，使用3000-211的神卷，还送了64g的U盘，感觉还不错。等待到2号，终于到货了，拆开包装测试了下，果然都是新版固件260的，又搜索了论坛一堆大佬的帖子，发现还有被降频的版本，发现不单单是新版固件，还是新版的cfe了，无奈想要刷机只能拆机了，那就拆，顺便看看nand颗粒是不是三星。
2017-11-09更~~牢骚版，可略过
由于07号晚上可能吃错食物造成本屌丝08号发烧一天（一百天没休息，搬砖的命苦呀）闪存到货，可有心无力~~

中午才有时间测量了下，我的天，跑去看美女医生给开了一批药片，叫啥名也不懂，告诉怎么吃了就怎么吃，下午继续干活，还开车跑了趟80km的距离，佩服我自己下。
晚上感觉药力不够，跑去楼下又撸了两盒药物，某群友推荐的（此处省略若干字）。就这两盒48大洋，心疼的我呀~~~，不过还好，今天09日感觉好多了。

end

同2017-11-09更~正文更

到货拆包，5片全新颗粒，型号根据雷帝大说是华硕路由用的同款，相比应该是很好的，晚上换上试试看效果，待更~



以下为首次编辑内容，无改动

先上U盘镇楼


双机到货未拆封，该打打码的部位还是要打码，你们懂滴










与银色k3一样，也是4a电源






待机功耗，我电源戴尔18a，电源自身功耗1.7w



******************************************************************************
开拆
先扒开底部脚垫


扒开另一边，防拆贴纸，弄坏意味失去保修


扒开了一面


扒开了另一面，手工不行，拽断了两个脚








熟悉的大散热片


顶部屏幕驱动板








TTL位置，从这里入手可以查看cfe与是否降频版本，重要的是可以刷固件


连接板




三星没跑了，ttl信息查看的是自带坏块若干个。手动兔血


******************************************************************************

补充下新版的cfe文件


拆机完毕，接下来上TTL信息，完整启动信息
放不下了，楼下继续~~

独爱你一人

Digital core power voltage set to 1.05V
Decompressing...done
Digital core power voltage set to 1.05V

SHMOO VER 1.13

PKID07DC06011801080000000000001A103F01000000

S30000207
00001690


RDLYW0 00000004

RDENW0 00000038

RDQSW0

    0000000000111111111122222222223333333333444444444455555555556666
    0123456789012345678901234567890123456789012345678901234567890123
00 --------++++++++++++++++++++++++++++X+++++++++++++++++++++++++--
01 ----------+++++++++++++++++++++++++++X++++++++++++++++++++++++++
02 --------++++++++++++++++++++++++++++X+++++++++++++++++++++++++++
03 ------+++++++++++++++++++++++++++++X+++++++++++++++++++++++++++-
04 -++++++++++++++++++++++++++X++++++++++++++++++++++++++----------
05 ----------+++++++++++++++++++++++++++X++++++++++++++++++++++++--
06 ---+++++++++++++++++++++++++++X++++++++++++++++++++++++++-------
07 ----------+++++++++++++++++++++++++++X++++++++++++++++++++++++++
08 ----+++++++++++++++++++++++++++X+++++++++++++++++++++++++++-----
09 --------++++++++++++++++++++++++++X++++++++++++++++++++++++++---
10 --------++++++++++++++++++++++++++++X+++++++++++++++++++++++++++
11 --------++++++++++++++++++++++++++X+++++++++++++++++++++++++----
12 --+++++++++++++++++++++++++++X+++++++++++++++++++++++++++-------
13 ------+++++++++++++++++++++++++X+++++++++++++++++++++++++-------
14 ------+++++++++++++++++++++++++++++X++++++++++++++++++++++++++--
15 ------++++++++++++++++++++++++++X++++++++++++++++++++++++++-----


PW0

    0000000000111111111122222222223333333333444444444455555555556666
    0123456789012345678901234567890123456789012345678901234567890123
00 -----+++++++++++++++++++++++++++++X+++++++++++++++++++++++++++--
01 ------+++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
02 -----+++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++
03 --+++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++-
04 +++++++++++++++++++++++++++X++++++++++++++++++++++++++----------
05 ----++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++-
06 ++++++++++++++++++++++++++++X++++++++++++++++++++++++++++-------
07 -----+++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++
08 +++++++++++++++++++++++++++++X+++++++++++++++++++++++++++++-----
09 ---+++++++++++++++++++++++++++++X++++++++++++++++++++++++++++---
10 ---++++++++++++++++++++++++++++++X++++++++++++++++++++++++++++++
11 ----++++++++++++++++++++++++++++X+++++++++++++++++++++++++++----
12 ++++++++++++++++++++++++++++X++++++++++++++++++++++++++++-------
13 --+++++++++++++++++++++++++++X+++++++++++++++++++++++++++-------
14 ----++++++++++++++++++++++++++++++X+++++++++++++++++++++++++++--
15 --++++++++++++++++++++++++++++X++++++++++++++++++++++++++++-----


NW0

    0000000000111111111122222222223333333333444444444455555555556666
    0123456789012345678901234567890123456789012345678901234567890123
00 -------++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
01 ----------+++++++++++++++++++++++++++X++++++++++++++++++++++++++
02 ---------+++++++++++++++++++++++++++X+++++++++++++++++++++++++++
03 ------+++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
04 -++++++++++++++++++++++++++++X+++++++++++++++++++++++++++-------
05 ----------+++++++++++++++++++++++++++X++++++++++++++++++++++++++
06 ---+++++++++++++++++++++++++++++X++++++++++++++++++++++++++++---
07 ----------+++++++++++++++++++++++++++X++++++++++++++++++++++++++
08 ---+-+++++++++++++++++++++++++++++X+++++++++++++++++++++++++++--
09 --------++++++++++++++++++++++++++++X+++++++++++++++++++++++++++
10 -------++++++++++++++++++++++++++++X++++++++++++++++++++++++++++
11 ---------+++++++++++++++++++++++++++X+++++++++++++++++++++++++++
12 --+++++++++++++++++++++++++++++X++++++++++++++++++++++++++++----
13 ------++++++++++++++++++++++++++X++++++++++++++++++++++++++-----
14 -------++++++++++++++++++++++++++++X++++++++++++++++++++++++++--
15 -----++++++++++++++++++++++++++++X+++++++++++++++++++++++++++---


WRDQW0

    0000000000111111111122222222223333333333444444444455555555556666
    0123456789012345678901234567890123456789012345678901234567890123
00 ++++++++++++++++++++++++++X++++++++++++++++++++++++++-----------
01 ++++++++++++++++++++++++++++X++++++++++++++++++++++++++++-------
02 ++++++++++++++++++++++++++++X+++++++++++++++++++++++++++------+-
03 +++++++++++++++++++++++++++X++++++++++++++++++++++++++----------
04 +++++++++++++++++++++++X+++++++++++++++++++++++---------------+-
05 +++++++++++++++++++++++++++X+++++++++++++++++++++++++++---------
06 ++++++++++++++++++++++++X+++++++++++++++++++++++--------------+-
07 ++++++++++++++++++++++++++++X+++++++++++++++++++++++++++--------
08 ++++++++++++++++++++++++X++++++++++++++++++++++++-------------+-
09 ++++++++++++++++++++++++++X++++++++++++++++++++++++++---------+-
10 ++++++++++++++++++++++++++++X+++++++++++++++++++++++++++--------
11 +++++++++++++++++++++++++++X+++++++++++++++++++++++++++---------
12 +++++++++++++++++++++++++X++++++++++++++++++++++++------------+-
13 +++++++++++++++++++++++++X+++++++++++++++++++++++++-----------+-
14 +++++++++++++++++++++++++X++++++++++++++++++++++++--------------
15 +++++++++++++++++++++++++X++++++++++++++++++++++++--------------


WRDMW0 00000026
WRDMW0 00000025


ADDR

    0000000000111111111122222222223333333333444444444455555555556666
    0123456789012345678901234567890123456789012345678901234567890123
00 ++++++++++++++++++++++S++++++++X++++++++++++++++++++++++++++++++

Decompressing...done


CFE version 7.14.131.47 (r629548) based on BBP 1.0.37 for BCM947XX (32bit,SP,)
Build Date: Wed Aug  2 14:01:07 CST 2017 (jenkins@SOHO-OPWRT)
Copyright (C) 2000-2008 Broadcom Corporation.

Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
DDR Clock: 800 MHz
Info: DDR frequency set from clkfreq=1400,*800*
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 7.14.131.47 (r629548)
CPU type 0x0: 1400MHz
Tot mem: 524288 KBytes

CFE mem:    0x00F00000 - 0x017D1E38 (9248312)
Data:       0x00F6A210 - 0x00F6A7DC (1484)
BSS:        0x00F6A7E8 - 0x00FCFE38 (415312)
Heap:       0x00FCFE38 - 0x017CFE38 (8388608)
Stack:      0x017CFE38 - 0x017D1E38 (8192)
Text:       0x00F00000 - 0x00F5DE30 (384560)

Device eth0:  hwaddr 2C-B2-1A-CA-91-E8, ipaddr 192.168.2.1, mask 255.255.255.0
        gateway not set, nameserver not set
Loader:raw Filesys:raw Dev:nflash0.os File: Optionsnull)
Loading: ..... 5280704 bytes read
Entry at 0x00008000
Closing network.
Starting program at 0x00008000
console [ttyS0] enabled, bootconsole disabled
serial8250.0: ttyS1 at MMIO 0x18000400 (irq = 117) is a 16550
brd: module loaded
loop: module loaded
pflash: found no supported devices
bcmsflash: found no supported devices
Boot partition size = 524288(0x80000)
lookup_nflash_rootfs_offset: offset = 0x400000
nflash: squash filesystem with lzma found at block 48
Creating 8 MTD partitions on "nflash":
0x000000000000-0x000000080000 : "boot"
0x000000080000-0x000000180000 : "nvram"
0x000000180000-0x000000280000 : "nvram_back"
0x000000280000-0x0000002c0000 : "res_info"
0x000000300000-0x000000320000 : "pro_info"
0x000000380000-0x0000003a0000 : "dev_info"
0x000000400000-0x000003000000 : "linux"
0x00000061e268-0x000003000000 : "rootfs"
PPP generic driver version 2.4.2
NET: Registered protocol family 24
usbmon: debugfs is not available
usbcore: registered new interface driver usblp
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
u32 classifier
    Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (8035 buckets, 32140 max)
ctnetlink v0.93: registering with nfnetlink.
xt_time: kernel timezone is -0000
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP cubic registered
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
init_module:price_compare!
creat nlsock ok!
Northstar brcmnand NAND Flash Controller driver, Version 0.1 (c) Broadcom Inc. 2012
NAND device: Manufacturer ID: 0xec, Chip ID: 0xf1 (Samsung NAND 128MiB 3,3V 8-bit)
Spare area=64 eccbytes 28, ecc bytes located at:
9 10 11 12 13 14 15 25 26 27 28 29 30 31 41 42 43 44 45 46 47 57 58 59 60 61 62 63
Available 35 bytes at (off,len):
(1,8) (16,9) (32,9) (48,9) (0,0) (0,0) (0,0) (0,0)
Scanning device for bad blocks
Bad eraseblock 168 at 0x000001500000
Bad eraseblock 172 at 0x000001580000
Bad eraseblock 515 at 0x000004060000
Bad eraseblock 1023 at 0x000007fe0000
Options: NO_AUTOINCR,NO_PADDING,CACHEPRG,COPYBACK,NO_READRDY,BBT_SCAN2NDPAGE,
Creating 1 MTD partitions on "brcmnand":
0x000003000000-0x000008000000 : "brcmnand"
VFS: Mounted root (squashfs filesystem) readonly on device 31:7.
devtmpfs: mounted
Freeing init memory: 236K
yaffs: dev is 32505864 name is "mtdblock8" rw
yaffs: passed flags ""
yaffs: yaffs: Attempting MTD mount of 31.8,"mtdblock8"
yaffs: checking block 0 bad
yaffs: checking block 1 bad
yaffs: checking block 2 bad
yaffs: checking block 3 bad
yaffs: checking block 4 bad
yaffs: checking block 5 bad
yaffs: checking block 6 bad
yaffs: checking block 7 bad
yaffs: checking block 8 bad
yaffs: checking block 9 bad
yaffs: checking block 10 bad
yaffs: checking block 11 bad
yaffs: checking block 12 bad
yaffs: checking block 13 bad
yaffs: checking block 14 bad
yaffs: checking block 15 bad
yaffs: checking block 16 bad
yaffs: checking block 17 bad
yaffs: checking block 18 bad
yaffs: checking block 19 bad
yaffs: checking block 20 bad
yaffs: checking block 21 bad
yaffs: checking block 22 bad
yaffs: checking block 23 bad
yaffs: checking block 24 bad
yaffs: checking block 25 bad
yaffs: checking block 26 bad
yaffs: checking block 27 bad
yaffs: checking block 28 bad
yaffs: checking block 29 bad
yaffs: checking block 30 bad
yaffs: checking block 31 bad
yaffs: checking block 32 bad
yaffs: checking block 33 bad
yaffs: checking block 34 bad
yaffs: checking block 35 bad
yaffs: checking block 36 bad
yaffs: checking block 37 bad
yaffs: checking block 38 bad
yaffs: checking block 39 bad
yaffs: checking block 40 bad
yaffs: checking block 41 bad
yaffs: checking block 42 bad
yaffs: checking block 43 bad
yaffs: checking block 44 bad
yaffs: checking block 45 bad
yaffs: checking block 46 bad
yaffs: checking block 47 bad
yaffs: checking block 48 bad
yaffs: checking block 49 bad
yaffs: checking block 50 bad
yaffs: checking block 51 bad
yaffs: checking block 52 bad
yaffs: checking block 53 bad
yaffs: checking block 54 bad
yaffs: checking block 55 bad
yaffs: checking block 56 bad
yaffs: checking block 57 bad
yaffs: checking block 58 bad
yaffs: checking block 59 bad
yaffs: checking block 60 bad
yaffs: checking block 61 bad
yaffs: checking block 62 bad
yaffs: checking block 63 bad
yaffs: checking block 64 bad
yaffs: checking block 65 bad
yaffs: checking block 66 bad
yaffs: checking block 67 bad
yaffs: checking block 68 bad
yaffs: checking block 69 bad
yaffs: checking block 70 bad
yaffs: checking block 71 bad
yaffs: checking block 72 bad
yaffs: checking block 73 bad
yaffs: checking block 74 bad
yaffs: checking block 75 bad
yaffs: checking block 76 bad
yaffs: checking block 77 bad
yaffs: checking block 78 bad
yaffs: checking block 79 bad
yaffs: checking block 80 bad
yaffs: checking block 81 bad
yaffs: checking block 82 bad
yaffs: checking block 83 bad
yaffs: checking block 84 bad
yaffs: checking block 85 bad
yaffs: checking block 86 bad
yaffs: checking block 87 bad
yaffs: checking block 88 bad
yaffs: checking block 89 bad
yaffs: checking block 90 bad
yaffs: checking block 91 bad
yaffs: checking block 92 bad
yaffs: checking block 93 bad
yaffs: checking block 94 bad
yaffs: checking block 95 bad
yaffs: checking block 96 bad
yaffs: checking block 97 bad
yaffs: checking block 98 bad
yaffs: checking block 99 bad
yaffs: checking block 100 bad
yaffs: checking block 101 bad
yaffs: checking block 102 bad
yaffs: checking block 103 bad
yaffs: checking block 104 bad
yaffs: checking block 105 bad
yaffs: checking block 106 bad
yaffs: checking block 107 bad
yaffs: checking block 108 bad
yaffs: checking block 109 bad
yaffs: checking block 110 bad
yaffs: checking block 111 bad
yaffs: checking block 112 bad
yaffs: checking block 113 bad
yaffs: checking block 114 bad
yaffs: checking block 115 bad
yaffs: checking block 116 bad
yaffs: checking block 117 bad
yaffs: checking block 118 bad
yaffs: checking block 119 bad
yaffs: checking block 120 bad
yaffs: checking block 121 bad
yaffs: checking block 122 bad
yaffs: checking block 123 bad
yaffs: checking block 124 bad
yaffs: checking block 125 bad
yaffs: checking block 126 bad
yaffs: checking block 127 bad
yaffs: checking block 128 bad
yaffs: checking block 129 bad
yaffs: checking block 130 bad
yaffs: checking block 131 bad
yaffs: block 132 is bad
yaffs: checking block 132 bad
yaffs: checking block 133 bad
yaffs: checking block 134 bad
yaffs: checking block 135 bad
yaffs: checking block 136 bad
yaffs: checking block 137 bad
yaffs: checking block 138 bad
yaffs: checking block 139 bad
yaffs: checking block 140 bad
yaffs: checking block 141 bad
yaffs: checking block 142 bad
yaffs: checking block 143 bad
yaffs: checking block 144 bad
yaffs: checking block 145 bad
yaffs: checking block 146 bad
yaffs: checking block 147 bad
yaffs: checking block 148 bad
yaffs: checking block 149 bad
yaffs: checking block 150 bad
yaffs: checking block 151 bad
yaffs: checking block 152 bad
yaffs: checking block 153 bad
yaffs: checking block 154 bad
yaffs: checking block 155 bad
yaffs: checking block 156 bad
yaffs: checking block 157 bad
yaffs: checking block 158 bad
yaffs: checking block 159 bad
yaffs: checking block 160 bad
yaffs: checking block 161 bad
yaffs: checking block 162 bad
yaffs: checking block 163 bad
yaffs: checking block 164 bad
yaffs: checking block 165 bad
yaffs: checking block 166 bad
yaffs: checking block 167 bad
yaffs: checking block 168 bad
yaffs: checking block 169 bad
yaffs: checking block 170 bad
yaffs: checking block 171 bad
yaffs: checking block 172 bad
yaffs: checking block 173 bad
yaffs: checking block 174 bad
yaffs: checking block 175 bad
yaffs: checking block 176 bad
yaffs: checking block 177 bad
yaffs: checking block 178 bad
yaffs: checking block 179 bad
yaffs: checking block 180 bad
yaffs: checking block 181 bad
yaffs: checking block 182 bad
yaffs: checking block 183 bad
yaffs: checking block 184 bad
yaffs: checking block 185 bad
yaffs: checking block 186 bad
yaffs: checking block 187 bad
yaffs: checking block 188 bad
yaffs: checking block 189 bad
yaffs: checking block 190 bad
yaffs: checking block 191 bad
yaffs: checking block 192 bad
yaffs: checking block 193 bad
yaffs: checking block 194 bad
yaffs: checking block 195 bad
yaffs: checking block 196 bad
yaffs: checking block 197 bad
yaffs: checking block 198 bad
yaffs: checking block 199 bad
yaffs: checking block 200 bad
yaffs: checking block 201 bad
yaffs: checking block 202 bad
yaffs: checking block 203 bad
yaffs: checking block 204 bad
yaffs: checking block 205 bad
yaffs: checking block 206 bad
yaffs: checking block 207 bad
yaffs: checking block 208 bad
yaffs: checking block 209 bad
yaffs: checking block 210 bad
yaffs: checking block 211 bad
yaffs: checking block 212 bad
yaffs: checking block 213 bad
yaffs: checking block 214 bad
yaffs: checking block 215 bad
yaffs: checking block 216 bad
yaffs: checking block 217 bad
yaffs: checking block 218 bad
yaffs: checking block 219 bad
yaffs: checking block 220 bad
yaffs: checking block 221 bad
yaffs: checking block 222 bad
yaffs: checking block 223 bad
yaffs: checking block 224 bad
yaffs: checking block 225 bad
yaffs: checking block 226 bad
yaffs: checking block 227 bad
yaffs: checking block 228 bad
yaffs: checking block 229 bad
yaffs: checking block 230 bad
yaffs: checking block 231 bad
yaffs: checking block 232 bad
yaffs: checking block 233 bad
yaffs: checking block 234 bad
yaffs: checking block 235 bad
yaffs: checking block 236 bad
yaffs: checking block 237 bad
yaffs: checking block 238 bad
yaffs: checking block 239 bad
yaffs: checking block 240 bad
yaffs: checking block 241 bad
yaffs: checking block 242 bad
yaffs: checking block 243 bad
yaffs: checking block 244 bad
yaffs: checking block 245 bad
yaffs: checking block 246 bad
yaffs: checking block 247 bad
yaffs: checking block 248 bad
yaffs: checking block 249 bad
yaffs: checking block 250 bad
yaffs: checking block 251 bad
yaffs: checking block 252 bad
yaffs: checking block 253 bad
yaffs: checking block 254 bad
yaffs: checking block 255 bad
yaffs: checking block 256 bad
yaffs: checking block 257 bad
yaffs: checking block 258 bad
yaffs: checking block 259 bad
yaffs: checking block 260 bad
yaffs: checking block 261 bad
yaffs: checking block 262 bad
yaffs: checking block 263 bad
yaffs: checking block 264 bad
yaffs: checking block 265 bad
yaffs: checking block 266 bad
yaffs: checking block 267 bad
yaffs: checking block 268 bad
yaffs: checking block 269 bad
yaffs: checking block 270 bad
yaffs: checking block 271 bad
yaffs: checking block 272 bad
yaffs: checking block 273 bad
yaffs: checking block 274 bad
yaffs: checking block 275 bad
yaffs: checking block 276 bad
yaffs: checking block 277 bad
yaffs: checking block 278 bad
yaffs: checking block 279 bad
yaffs: checking block 280 bad
yaffs: checking block 281 bad
yaffs: checking block 282 bad
yaffs: checking block 283 bad
yaffs: checking block 284 bad
yaffs: checking block 285 bad
yaffs: checking block 286 bad
yaffs: checking block 287 bad
yaffs: checking block 288 bad
yaffs: checking block 289 bad
yaffs: checking block 290 bad
yaffs: checking block 291 bad
yaffs: checking block 292 bad
yaffs: checking block 293 bad
yaffs: checking block 294 bad
yaffs: checking block 295 bad
yaffs: checking block 296 bad
yaffs: checking block 297 bad
yaffs: checking block 298 bad
yaffs: checking block 299 bad
yaffs: checking block 300 bad
yaffs: checking block 301 bad
yaffs: checking block 302 bad
yaffs: checking block 303 bad
yaffs: checking block 304 bad
yaffs: checking block 305 bad
yaffs: checking block 306 bad
yaffs: checking block 307 bad
yaffs: checking block 308 bad
yaffs: checking block 309 bad
yaffs: checking block 310 bad
yaffs: checking block 311 bad
yaffs: checking block 312 bad
yaffs: checking block 313 bad
yaffs: checking block 314 bad
yaffs: checking block 315 bad
yaffs: checking block 316 bad
yaffs: checking block 317 bad
yaffs: checking block 318 bad
yaffs: checking block 319 bad
yaffs: checking block 320 bad
yaffs: checking block 321 bad
yaffs: checking block 322 bad
yaffs: checking block 323 bad
yaffs: checking block 324 bad
yaffs: checking block 325 bad
yaffs: checking block 326 bad
yaffs: checking block 327 bad
yaffs: checking block 328 bad
yaffs: checking block 329 bad
yaffs: checking block 330 bad
yaffs: checking block 331 bad
yaffs: checking block 332 bad
yaffs: checking block 333 bad
yaffs: checking block 334 bad
yaffs: checking block 335 bad
yaffs: checking block 336 bad
yaffs: checking block 337 bad
yaffs: checking block 338 bad
yaffs: checking block 339 bad
yaffs: checking block 340 bad
yaffs: checking block 341 bad
yaffs: checking block 342 bad
yaffs: checking block 343 bad
yaffs: checking block 344 bad
yaffs: checking block 345 bad
yaffs: checking block 346 bad
yaffs: checking block 347 bad
yaffs: checking block 348 bad
yaffs: checking block 349 bad
yaffs: checking block 350 bad
yaffs: checking block 351 bad
yaffs: checking block 352 bad
yaffs: checking block 353 bad
yaffs: checking block 354 bad
yaffs: checking block 355 bad
yaffs: checking block 356 bad
yaffs: checking block 357 bad
yaffs: checking block 358 bad
yaffs: checking block 359 bad
yaffs: checking block 360 bad
yaffs: checking block 361 bad
yaffs: checking block 362 bad
yaffs: checking block 363 bad
yaffs: checking block 364 bad
yaffs: checking block 365 bad
yaffs: checking block 366 bad
yaffs: checking block 367 bad
yaffs: checking block 368 bad
yaffs: checking block 369 bad
yaffs: checking block 370 bad
yaffs: checking block 371 bad
yaffs: checking block 372 bad
yaffs: checking block 373 bad
yaffs: checking block 374 bad
yaffs: checking block 375 bad
yaffs: checking block 376 bad
yaffs: checking block 377 bad
yaffs: checking block 378 bad
yaffs: checking block 379 bad
yaffs: checking block 380 bad
yaffs: checking block 381 bad
yaffs: checking block 382 bad
yaffs: checking block 383 bad
yaffs: checking block 384 bad
yaffs: checking block 385 bad
yaffs: checking block 386 bad
yaffs: checking block 387 bad
yaffs: checking block 388 bad
yaffs: checking block 389 bad
yaffs: checking block 390 bad
yaffs: checking block 391 bad
yaffs: checking block 392 bad
yaffs: checking block 393 bad
yaffs: checking block 394 bad
yaffs: checking block 395 bad
yaffs: checking block 396 bad
yaffs: checking block 397 bad
yaffs: checking block 398 bad
yaffs: checking block 399 bad
yaffs: checking block 400 bad
yaffs: checking block 401 bad
yaffs: checking block 402 bad
yaffs: checking block 403 bad
yaffs: checking block 404 bad
yaffs: checking block 405 bad
yaffs: checking block 406 bad
yaffs: checking block 407 bad
yaffs: checking block 408 bad
yaffs: checking block 409 bad
yaffs: checking block 410 bad
yaffs: checking block 411 bad
yaffs: checking block 412 bad
yaffs: checking block 413 bad
yaffs: checking block 414 bad
yaffs: checking block 415 bad
yaffs: checking block 416 bad
yaffs: checking block 417 bad
yaffs: checking block 418 bad
yaffs: checking block 419 bad
yaffs: checking block 420 bad
yaffs: checking block 421 bad
yaffs: checking block 422 bad
yaffs: checking block 423 bad
yaffs: checking block 424 bad
yaffs: checking block 425 bad
yaffs: checking block 426 bad
yaffs: checking block 427 bad
yaffs: checking block 428 bad
yaffs: checking block 429 bad
yaffs: checking block 430 bad
yaffs: checking block 431 bad
yaffs: checking block 432 bad
yaffs: checking block 433 bad
yaffs: checking block 434 bad
yaffs: checking block 435 bad
yaffs: checking block 436 bad
yaffs: checking block 437 bad
yaffs: checking block 438 bad
yaffs: checking block 439 bad
yaffs: checking block 440 bad
yaffs: checking block 441 bad
yaffs: checking block 442 bad
yaffs: checking block 443 bad
yaffs: checking block 444 bad
yaffs: checking block 445 bad
yaffs: checking block 446 bad
yaffs: checking block 447 bad
yaffs: checking block 448 bad
yaffs: checking block 449 bad
yaffs: checking block 450 bad
yaffs: checking block 451 bad
yaffs: checking block 452 bad
yaffs: checking block 453 bad
yaffs: checking block 454 bad
yaffs: checking block 455 bad
yaffs: checking block 456 bad
yaffs: checking block 457 bad
yaffs: checking block 458 bad
yaffs: checking block 459 bad
yaffs: checking block 460 bad
yaffs: checking block 461 bad
yaffs: checking block 462 bad
yaffs: checking block 463 bad
yaffs: checking block 464 bad
yaffs: checking block 465 bad
yaffs: checking block 466 bad
yaffs: checking block 467 bad
yaffs: checking block 468 bad
yaffs: checking block 469 bad
yaffs: checking block 470 bad
yaffs: checking block 471 bad
yaffs: checking block 472 bad
yaffs: checking block 473 bad
yaffs: checking block 474 bad
yaffs: checking block 475 bad
yaffs: checking block 476 bad
yaffs: checking block 477 bad
yaffs: checking block 478 bad
yaffs: checking block 479 bad
yaffs: checking block 480 bad
yaffs: checking block 481 bad
yaffs: checking block 482 bad
yaffs: checking block 483 bad
yaffs: checking block 484 bad
yaffs: checking block 485 bad
yaffs: checking block 486 bad
yaffs: checking block 487 bad
yaffs: checking block 488 bad
yaffs: checking block 489 bad
yaffs: checking block 490 bad
yaffs: checking block 491 bad
yaffs: checking block 492 bad
yaffs: checking block 493 bad
yaffs: checking block 494 bad
yaffs: checking block 495 bad
yaffs: checking block 496 bad
yaffs: checking block 497 bad
yaffs: checking block 498 bad
yaffs: checking block 499 bad
yaffs: checking block 500 bad
yaffs: checking block 501 bad
yaffs: checking block 502 bad
yaffs: checking block 503 bad
yaffs: checking block 504 bad
yaffs: checking block 505 bad
yaffs: checking block 506 bad
yaffs: checking block 507 bad
yaffs: checking block 508 bad
yaffs: checking block 509 bad
yaffs: checking block 510 bad
yaffs: checking block 511 bad
yaffs: checking block 512 bad
yaffs: checking block 513 bad
yaffs: checking block 514 bad
yaffs: checking block 515 bad
yaffs: checking block 516 bad
yaffs: checking block 517 bad
yaffs: checking block 518 bad
yaffs: checking block 519 bad
yaffs: checking block 520 bad
yaffs: checking block 521 bad
yaffs: checking block 522 bad
yaffs: checking block 523 bad
yaffs: checking block 524 bad
yaffs: checking block 525 bad
yaffs: checking block 526 bad
yaffs: checking block 527 bad
yaffs: checking block 528 bad
yaffs: checking block 529 bad
yaffs: checking block 530 bad
yaffs: checking block 531 bad
yaffs: checking block 532 bad
yaffs: checking block 533 bad
yaffs: checking block 534 bad
yaffs: checking block 535 bad
yaffs: checking block 536 bad
yaffs: checking block 537 bad
yaffs: checking block 538 bad
yaffs: checking block 539 bad
yaffs: checking block 540 bad
yaffs: checking block 541 bad
yaffs: checking block 542 bad
yaffs: checking block 543 bad
yaffs: checking block 544 bad
yaffs: checking block 545 bad
yaffs: checking block 546 bad
yaffs: checking block 547 bad
yaffs: checking block 548 bad
yaffs: checking block 549 bad
yaffs: checking block 550 bad
yaffs: checking block 551 bad
yaffs: checking block 552 bad
yaffs: checking block 553 bad
yaffs: checking block 554 bad
yaffs: checking block 555 bad
yaffs: checking block 556 bad
yaffs: checking block 557 bad
yaffs: checking block 558 bad
yaffs: checking block 559 bad
yaffs: checking block 560 bad
yaffs: checking block 561 bad
yaffs: checking block 562 bad
yaffs: checking block 563 bad
yaffs: checking block 564 bad
yaffs: checking block 565 bad
yaffs: checking block 566 bad
yaffs: checking block 567 bad
yaffs: checking block 568 bad
yaffs: checking block 569 bad
yaffs: checking block 570 bad
yaffs: checking block 571 bad
yaffs: checking block 572 bad
yaffs: checking block 573 bad
yaffs: checking block 574 bad
yaffs: checking block 575 bad
yaffs: checking block 576 bad
yaffs: checking block 577 bad
yaffs: checking block 578 bad
yaffs: checking block 579 bad
yaffs: checking block 580 bad
yaffs: checking block 581 bad
yaffs: checking block 582 bad
yaffs: checking block 583 bad
yaffs: checking block 584 bad
yaffs: checking block 585 bad
yaffs: checking block 586 bad
yaffs: checking block 587 bad
yaffs: checking block 588 bad
yaffs: checking block 589 bad
yaffs: checking block 590 bad
yaffs: checking block 591 bad
yaffs: checking block 592 bad
yaffs: checking block 593 bad
yaffs: checking block 594 bad
yaffs: checking block 595 bad
yaffs: checking block 596 bad
yaffs: checking block 597 bad
yaffs: checking block 598 bad
yaffs: checking block 599 bad
yaffs: checking block 600 bad
yaffs: checking block 601 bad
yaffs: checking block 602 bad
yaffs: checking block 603 bad
yaffs: checking block 604 bad
yaffs: checking block 605 bad
yaffs: checking block 606 bad
yaffs: checking block 607 bad
yaffs: checking block 608 bad
yaffs: checking block 609 bad
yaffs: checking block 610 bad
yaffs: checking block 611 bad
yaffs: checking block 612 bad
yaffs: checking block 613 bad
yaffs: checking block 614 bad
yaffs: checking block 615 bad
yaffs: checking block 616 bad
yaffs: checking block 617 bad
yaffs: checking block 618 bad
yaffs: checking block 619 bad
yaffs: checking block 620 bad
yaffs: checking block 621 bad
yaffs: checking block 622 bad
yaffs: checking block 623 bad
yaffs: checking block 624 bad
yaffs: checking block 625 bad
yaffs: checking block 626 bad
yaffs: checking block 627 bad
yaffs: checking block 628 bad
yaffs: checking block 629 bad
yaffs: checking block 630 bad
yaffs: checking block 631 bad
yaffs: checking block 632 bad
yaffs: checking block 633 bad
yaffs: checking block 634 bad
yaffs: checking block 635 bad
yaffs: checking block 636 bad
yaffs: checking block 637 bad
yaffs: checking block 638 bad
yaffs: checking block 639 bad
yaffs: block 640 is bad
yaffs: yaffs_read_super: is_checkpointed 0
/tmp/media/nand/config.tgz: No such file or directory
[usb_test]:usb_stat file init successful!
/sbin/hotplug2: No such file or directory
insmod: ipv6.ko: no module by that name found

Done insmod insmod: bcm57xx.ko: no module by that name found
et
Done insmod bcm57xx
Done insmod dpsta
Done insmod dhd
Done insmod hotplug detected product:  1d6b/2/206
hotplug detected product:  1d6b/2/206
hotplug detected action:  add
hotplug detected action:  add
hotplug detected product:  1d6b/1/206
hotplug detected action:  add
hotplug detected product:  1d6b/1/206
hotplug detected action:  add
GMAC3 not supported...
wl WARNING: console log level set to 1
eth1: WLC_SET_VAR(bss): Numerical result out of range
eth1: WLC_SET_VAR(bsscfg:split_assoc_req): Operation not supported
eth1: WLC_SET_VAR(wet_tunnel): Operation not supported
eth1: WLC_SET_VAR(chanspec): Invalid argument
eth1: WLC_SET_VAR(wme_tx_params): Operation not supported
eth1: WLC_SET_VAR(avg_dma_xfer_rate): Operation not supported
eth1: cmd=64: Operation not supported
eth1: WLC_SET_VAR(bsscfg:mfp): Operation not supported
eth2: WLC_SET_VAR(bss): Numerical result out of range
eth2: WLC_SET_VAR(bsscfg:split_assoc_req): Operation not supported
eth2: WLC_SET_VAR(wet_tunnel): Operation not supported
eth2: cmd=142: Invalid argument
eth2: cmd=142: Invalid argument
eth2: WLC_SET_VAR(chanspec): Invalid argument
eth2: WLC_SET_VAR(wme_tx_params): Operation not supported
eth2: WLC_SET_VAR(avg_dma_xfer_rate): Operation not supported
eth2: cmd=64: Operation not supported
eth2: WLC_SET_VAR(bsscfg:mfp): Operation not supported
dhcp6s: No such file or directory
[Jan 01 08:00:00] radvd: ioctl(SIOCGIFADDR) failed for vlan2: Cannot assign requested address
[Jan 01 08:00:00] radvd: interface vlan2 has no IPv4 addresses, disabling 6to4 prefix
[Jan 01 08:00:00] radvd: interface vlan2 is not UP
[Jan 01 08:00:00] radvd: interface vlan2 does not exist
[Jan 01 08:00:00] radvd: error parsing or activating the config file: /tmp/radvd.conf
info, udhcp server (v0.9.8) started
killall: hspotap: no process killed
killall: dhd_monitor: no process killed
killall: smbd: no process killed
start_samba in
smbini_init 1
smbini_init 2
acsd: scan in progress ...
builddefaultini ret = 0
smbini_init 1
smbini_init 2
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
start_uhmi
wlconf wan_ifname = vlan2
info, udhcp client (v0.9.8) started
vlan2 dhcp
vlan2: No such process
iptables -F -t filter 1>/dev/null 2>&1
send_default
acsd: scan in progress ...
[806:main()]=>WAN_daemon: execute WAN_daemon.
start_wl is set
uhmi_uart.c_53:standard input is not a terminal device

uhmi init .............ok!
iptables -F -t nat 1>/dev/null 2>&1
iptables -F -t mangle 1>/dev/null 2>&1
iptables -I INPUT -i br0 -p udp --sport 68 -d 255.255.255.255 --dport 67 -m state --state NEW -j ACCEPT
tc qdisc del dev  root
uhmi thread creat......ok!
acsd: scan in progress ...
Cannot find device "root"
tc qdisc del dev vlan2 root
RTNETLINK answers: No such file or directory
tc qdisc del dev br0 root
RTNETLINK answers: No such file or directory
iptables -t mangle -F ip_ctl
iptables: No chain/target/match by that name.
iptables -t mangle -D FORWARD -j ip_ctl 1>/dev/null 2>&1
skip_ipct down 1>/dev/null 2>&1
killall: collect: no process killed
acsd: scan in progress ...
start syslight
System boots up completely.

acsd: scan in progress ...
the s_buf is EventCode=1
[DEBUG][http_start_inform_526] parse url error

acsd: scan in progress ...
mcu version: 1.2.108
acsd: selected channel spec: 0x100b
acsd: Adjusted channel spec: 0x100b
acsd: selected channel spec: 0x100b
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
[929:main()]=>dhcp_daemon: wan port disconnected
kill -12 725
info, Entering released state
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: scan in progress ...
acsd: selected channel spec: 0xe09b
acsd: Adjusted channel spec: 0xe09b
acsd: selected DFS-exit channel spec: 0xe09b
acsd: selected channel spec: 0xe09b
acsd: Adjusted channel spec: 0xe09b
acsd: selected channel spec: 0xe09b

end~

独爱你一人

接楼上

下面是TTL常用的一些个操作，各位老鸟默默略过即可。

BusyBox v1.7.2 (2017-08-02 13:54:54 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

#
#
# cat /proc/mtd                        查看分区信息
dev:    size   erasesize  name
mtd0: 00080000 00020000 "boot"
mtd1: 00100000 00020000 "nvram"
mtd2: 00100000 00020000 "nvram_back"
mtd3: 00040000 00020000 "res_info"
mtd4: 00020000 00020000 "pro_info"
mtd5: 00020000 00020000 "dev_info"
mtd6: 02c00000 00020000 "linux"
mtd7: 029e1d98 00020000 "rootfs"
mtd8: 05000000 00020000 "brcmnand"

# cat /proc/partitions                        查看分区容量blocks/1024就是M的大小，cfe是512/1024=0.5M 也就是512k
major minor  #blocks  name

  31        0        512 mtdblock0
  31        1       1024 mtdblock1
  31        2       1024 mtdblock2
  31        3        256 mtdblock3
  31        4        128 mtdblock4
  31        5        128 mtdblock5
  31        6      45056 mtdblock6
  31        7      42887 mtdblock7
  31        8      81920 mtdblock8
#

# cat /proc/cpuinfo                        查看cpu信息，看bogo分还是很强悍的
Processor       : ARMv7 Processor rev 0 (v7l)
processor       : 0
BogoMIPS        : 2798.38

processor       : 1
BogoMIPS        : 2798.38

Features        : swp half thumb fastmult edsp
CPU implementer : 0x41
CPU architecture: 7
CPU variant     : 0x3
CPU part        : 0xc09
CPU revision    : 0

Hardware        : Northstar Prototype
Revision        : 0000
Serial          : 0000000000000000
#

# nvram get clkfreq                        查看cpu与内存频率，首发频率，不是被降频那种
1400,800
#
# free
              total         used         free       shared      buffers
  Mem:       514508        73568       440940            0          740
Swap:            0            0            0
Total:       514508        73568       440940
#

插上U盘后会自动挂载到/tmp/share/sda1

# hotplug detected product:  58f/6387/106
hotplug detected action:  add
hotplug detected product:  58f/6387/106
hotplug detected action:  add
lock_fd lock
mntdev = /dev/sda1 mntpath = /tmp/share/sda1
err = -1
err /tmp/share/sda1= File exists umask_mode=18 fs_type vfat
start usb services
Start bcmmserver.
lock_fd remove
lock_fd lock
mntdev = /dev/sda0 mntpath = /tmp/share/sda0
err = 0
err /tmp/share/sda0= Success umask_mode=18 fs_type unknown
no support fs type
unsuccess 1002!
lock_fd remove
start_samba in
builddefaultini ret = 0
errno:2 not such file or dirctory
cmd:minidlna.service  sda1/.minidlna
daemon

# mount                        查看挂载情况，可以看到刚挂载上的U盘绝对路径与相对路径
rootfs on / type rootfs (rw)
/dev/root on / type squashfs (ro,relatime)
devtmpfs on /dev type devtmpfs (rw,relatime,size=257136k,nr_inodes=64284,mode=755)
proc on /proc type proc (rw,relatime)
sysfs on /sys type sysfs (rw,relatime)
ramfs on /tmp type ramfs (rw,relatime)
/dev/mtdblock8 on /tmp/media/nand type yaffs2 (rw,relatime)
devpts on /dev/pts type devpts (rw,relatime,mode=600)
tmpfs on /tmp/share type tmpfs (rw,relatime,size=1024k)
/dev/sda1 on /tmp/share/sda1 type vfat (rw,relatime,fmask=0000,dmask=0000,allow_utime=0022,codepage=cp437,iocharset=utf8,shortname=mixed,errors=continue)
#

cd进入U盘目录
# cd /tmp/share/sda1
备份所有分区                虽然看到大佬们说有的分区不用备份，但是U盘空间大，又想自己来查看下，就都备份了
# cat /dev/mtd0 > boot.bin
# cat /dev/mtd1 > nvram.bin
# cat /dev/mtd2 > nvram_back.bin
# cat /dev/mtd3 > res_info.bin
# cat /dev/mtd4 > pro_info.bin
# cat /dev/mtd5 > dev_info.bin
# cat /dev/mtd6 > linux.bin
# cat /dev/mtd7 > rootfs.bin
# cat /dev/mtd8 > brcmnand.bin
#

# cat /proc/version                        查看固件编译版本，是新版的cfe没错
Linux version 2.6.36.4brcmarm (jenkins@SOHO-OPWRT) (gcc version 4.5.3 (Buildroot 2012.02) ) #1 SMP PREEMPT Wed Aug 2 13:51:31 CST 2017
#

******************************************************************************

技术部分，小白不要轻易玩弄。
免责声明：
        【损坏了与我无关，我只是打酱油的，你弄坏了机器别让我背锅。折腾好了吃鸡，折腾坏了吃土。】
       
k3 开telnet方法
http://koolshare.cn/thread-89151-1-3.html

把修改好的mtd4分区替换回去
# cat pro_info-ok-telnet.bin > /dev/mtd4
用这个命令检查是否默认开机启动telnet
# telnetd_startup show
telnetd default on
还可以检查一下端口号是否打开，telnet的端口默认是23
# netstat -an
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State
tcp        0      0 0.0.0.0:8200            0.0.0.0:*               LISTEN
tcp        0      0 192.168.2.1:139         0.0.0.0:*               LISTEN
tcp        0      0 0.0.0.0:80              0.0.0.0:*               LISTEN
tcp        0      0 0.0.0.0:53              0.0.0.0:*               LISTEN
tcp        0      0 127.0.0.1:8888          0.0.0.0:*               LISTEN
tcp        0      0 127.0.0.1:5916          0.0.0.0:*               LISTEN
tcp        0      0 192.168.2.1:1980        0.0.0.0:*               LISTEN
tcp        0      0 192.168.2.1:445         0.0.0.0:*               LISTEN
tcp        0      0 127.0.0.1:54811         127.0.0.1:8888          TIME_WAIT
tcp        0      0 127.0.0.1:54821         127.0.0.1:8888          TIME_WAIT
tcp        0      0 127.0.0.1:54818         127.0.0.1:8888          TIME_WAIT
tcp        0      0 127.0.0.1:54815         127.0.0.1:8888          TIME_WAIT
tcp        0      0 127.0.0.1:54817         127.0.0.1:8888          TIME_WAIT
tcp        0      0 127.0.0.1:54816         127.0.0.1:8888          TIME_WAIT
tcp        0      0 127.0.0.1:54813         127.0.0.1:8888          TIME_WAIT
tcp        0      0 127.0.0.1:54812         127.0.0.1:8888          TIME_WAIT
tcp        0      0 127.0.0.1:54819         127.0.0.1:8888          TIME_WAIT
tcp        0      0 127.0.0.1:54814         127.0.0.1:8888          TIME_WAIT
tcp        0      0 127.0.0.1:54820         127.0.0.1:8888          TIME_WAIT
tcp        0      0 :::53                   :::*                    LISTEN
udp        0      0 127.0.0.1:45064         0.0.0.0:*
udp        0      0 0.0.0.0:42000           0.0.0.0:*
udp        0      0 192.168.2.1:48422       0.0.0.0:*
udp        0      0 127.0.0.1:42032         0.0.0.0:*
udp        0      0 0.0.0.0:53              0.0.0.0:*
udp        0      0 0.0.0.0:67              0.0.0.0:*
udp        0      0 239.255.255.250:1900    0.0.0.0:*
udp        0      0 0.0.0.0:1900            0.0.0.0:*
udp        0      0 0.0.0.0:38000           0.0.0.0:*
udp        0      0 0.0.0.0:48000           0.0.0.0:*
udp        0      0 0.0.0.0:37000           0.0.0.0:*
udp        0      0 127.0.0.1:38032         0.0.0.0:*
udp        0      0 0.0.0.0:47000           0.0.0.0:*
udp        0      0 0.0.0.0:46000           0.0.0.0:*
udp        0      0 0.0.0.0:45000           0.0.0.0:*
udp        0      0 0.0.0.0:21210           0.0.0.0:*
udp        0      0 0.0.0.0:44000           0.0.0.0:*
udp        0      0 127.0.0.1:45032         0.0.0.0:*
udp        0      0 0.0.0.0:43000           0.0.0.0:*
udp        0      0 :::53                   :::*
raw        0      0 0.0.0.0:2               0.0.0.0:*               7
Active UNIX domain sockets (servers and established)
Proto RefCnt Flags       Type       State         I-Node Path
unix  5      [ ]         DGRAM                    212    /dev/log
unix  2      [ ]         DGRAM                    1431
unix  2      [ ]         DGRAM                    1279
unix  3      [ ]         STREAM     CONNECTED     805
unix  3      [ ]         STREAM     CONNECTED     804
unix  2      [ ]         DGRAM                    797
#


用这个命令启动telnet
# utelnetd -d
telnetd: starting
  port: 23; interface: any; login program: /bin/sh
#
再次查看端口号
# netstat -an
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State
tcp        0      0 0.0.0.0:8200            0.0.0.0:*               LISTEN
tcp        0      0 192.168.2.1:139         0.0.0.0:*               LISTEN
tcp        0      0 0.0.0.0:80              0.0.0.0:*               LISTEN
tcp        0      0 0.0.0.0:53              0.0.0.0:*               LISTEN
tcp        0      0 0.0.0.0:23              0.0.0.0:*               LISTEN
··············
可以看到23号端口已经打开，局域网telnet已经可以使用了

******************************************************************************

折腾预报~
已经淘宝购买了与华硕AC3100同款使用的128nand颗粒，单价6元每颗，等到货了换上

qq222g

买三个，才赚300不到，亏了！！老弟

独爱你一人

2017-11-11光棍节的夜间~更

俗话说干活之前得有一套好装备，比如挖墙脚，榔头不利是挖不到滴~~
SPI编程器与8脚宽体弹跳座+spi颗粒若干枚


放大了看看，好几种品牌，好几种大小。（楼主作为小白白测试了1M的spi颗粒与2M的spi颗粒，结果如下相同，大概意思应该是cfe启动的时候需要解压数据来获取硬件信息，SPI被我反复拆装了5次，后来直接换成了8M的spi颗粒，顺利启动了cfe，华邦W25Q64），最终结果需要4M大小的颗粒才可以放的下512K的cfe，品牌用的MX的（宏旺）


还是感觉这编程器软件漂亮


4M以下的ttl信息如下
Digital core power voltage set to 1.05V
Decompressing...done


CFE version 7.14.131.47 (r629548) based on BBP 1.0.37 for BCM947XX (32bit,SP,)
Build Date: Fri Mar 10 11:38:37 CST 2017 (jenkins@SOHO-OPWRT)
Copyright (C) 2000-2008 Broadcom Corporation.

Init Arena
Init Devs.
DDR Clock: 400 MHz
Warning: invalid DDR setting of 0 MHz ignored. DDR frequency will be set to 400 MHz.
Warning: invalid CPU setting of 0 MHz ignored. armclock frequency will be set to 800 MHz.
Corrupt NVRAM found, trying embedded NVRAM next.
find_nvram: no nvram found
Corrupt NVRAM found, trying embedded NVRAM next.
find_nvram: no nvram found
Corrupt NVRAM found, trying embedded NVRAM next.
find_nvram: no nvram found
Corrupt NVRAM found, trying embedded NVRAM next.
find_nvram: no nvram found
CPU type 0x0: 800MHz
Tot mem: 524288 KBytes

CFE mem:    0x00F00000 - 0x017CB47C (9221244)
Data:       0x00F638DC - 0x00F63E64 (1416)
BSS:        0x00F63E70 - 0x00FC947C (415244)
Heap:       0x00FC947C - 0x017C947C (8388608)
Stack:      0x017C947C - 0x017CB47C (8192)
Text:       0x00F00000 - 0x00F57A40 (358976)

Committing NVRAM...done
File not found
!! Could not open boot device
flash0.0: Device not found
Loader:raw Filesys:tftp Devnull) File:flash0.os: Optionsnull)
Loading: Failed.
Could not load flash0.os:: Network is down
CFE>


******************************************************************
换上8M的spi颗粒以后启动信息如下，成功启动到了cfe环境
<<<<<<<<<<<
省略若干代码段
<<<<<<<<<<<
CFE version 7.14.131.47 (r629548) based on BBP 1.0.37 for BCM947XX (32bit,SP,)
Build Date: Tue Mar 21 21:48:23 CST 2017 (jenkins@SOHO-OPWRT)
Copyright (C) 2000-2008 Broadcom Corporation.

Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
Can't find nandflash! ccrev = 42, chipst= 0    这里重点，没有发现nandflash，也就是说找不到nand颗粒
DDR Clock: 800 MHz
Info: DDR frequency set from clkfreq=1400,*800*
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 7.14.131.47 (r629548)
CPU type 0x0: 1400MHz
Tot mem: 524288 KBytes

CFE mem:    0x00F00000 - 0x017CB47C (9221244)
Data:       0x00F638DC - 0x00F63E64 (1416)
BSS:        0x00F63E70 - 0x00FC947C (415244)
Heap:       0x00FC947C - 0x017C947C (8388608)
Stack:      0x017C947C - 0x017CB47C (8192)
Text:       0x00F00000 - 0x00F57A40 (358976)

Device eth0:  hwaddr XX-XX-XX-XX-XX-XX, ipaddr 192.168.2.1, mask 255.255.255.0
        gateway not set, nameserver not set
Invalid boot block on disk
!! Could not open boot device
flash0.0: Device not found
Loader:raw Filesys:raw Dev:flash0.os File: Optionsnull)
Loading: Image compressed with unsupported method
Failed.
Could not load flash0.os:: Unsupported function
CFE>

教程就不重复发了，论坛内帖子很多，电烙铁拆nand，掰弯了几个脚，不过可以正回来还可以用


准备焊接，其实是想偷懒，打算直接热风枪吹上去


位置还可以接受，已吹上待上机测试


焊接完成以后还是一样的结果，提示找不到nandflash颗粒，怎么办，加焊呀
（手工很丑，电烙铁加焊锡丝加松香搞的，外观党请略过）



加焊以后再次试机运行查看，终于完美了
CFE version 7.14.131.47 (r629548) based on BBP 1.0.37 for BCM947XX (32bit,SP,)
Build Date: Fri Mar 10 11:38:37 CST 2017 (jenkins@SOHO-OPWRT)
Copyright (C) 2000-2008 Broadcom Corporation.

Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
Found a AMD NAND flash:    这里识别到了nand颗粒，显示是AMD牌子的
Total size:  128MB
Block size:  128KB
Page Size:   2048B
OOB Size:    64B
Sector size: 512B
Spare size:  16B
ECC level:   4 (4-bit)
Device ID: 0x01 0xf1 0x80 0x1d 0x01 0xf1   这里显示的是nand颗粒的ID信息
DDR Clock: 800 MHz
Info: DDR frequency set from clkfreq=1400,*800*
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 7.14.131.47 (r629548)
CPU type 0x0: 1400MHz
Tot mem: 524288 KBytes


颗粒正常了以后，下一步就是焊接切换spi的开关


开关加的位置，这里很好，外壳打个孔就搞定了


开孔神器，你们懂滴


扯点有用没用的，我也是找大神教程看的在spi里面刷nand的cfe文件，
讲几条有用的命令吧
从spi里面的cfe环境把cfe文件刷入nand颗粒用命令：

1. flash -noheader 192.168.2.100:boot.bin nflash0.brcmnand

复制代码

在nand颗粒的cfe环境中刷cfe用命令：

1. flash -noheader 192.168.2.100:boot.bin nflash0.boot

复制代码

在nand颗粒的cfe环境中刷固件用命令：

1. flash -noheader 192.168.2.100:k3-meilin.trx nflash0.trx

复制代码

红色的地址是我电脑的地址，蓝色的是我的cfe文件名称
清空nvram用命令：

1. nvram erase

复制代码

重启用命令：

1. reboot

复制代码

说一个你们可能用不到的命令：这个命令是清空整个nand，包括分区表，比如刷梅林后的分区表变动，任何东西，慎用看到有坛友的机器在cfe中刷固件会无限重启可以用此命令来试试看，仅限加装了spi颗粒，并且能正常使用的坛友使用

1. flash -erase nflash0

复制代码

刷机成功后来两张截图给坛友欣赏下，不过没啥看头



测试nand所有分区都为0坏块

另一台金色k3也是三星颗粒估计没跑，改天有时间了也搞搞~END完结

独爱你一人

qq222g 发表于 2017-11-4 10:29
买三个，才赚300不到，亏了！！老弟

前两天开了普拉斯送了一对卷，，撸了很多东西，-100  -150  0-50  买了称与套套

牛驴鸭加钙

我也拆了  ttl刷成官方root固件了  但保修标签还在啊  保修标签完全不用动到的呀

hatamen

玩DELL 18A电源的就知道数码玩家，你的改了去大电流保护了？

lan2561553

666坐等更新，

qihuo360

出厂坏快就这么多，会不会是返厂后重新组装，仅换了外壳就出来卖的？

楼主可否将备份的mtd0共享出来？

感谢楼主的奉献精神！

独爱你一人

牛驴鸭加钙 发表于 2017-11-4 10:33
我也拆了  ttl刷成官方root固件了  但保修标签还在啊  保修标签完全不用动到的呀

我手残，拆机必坏点东西

独爱你一人

hatamen 发表于 2017-11-4 10:35
玩DELL 18A电源的就知道数码玩家，你的改了去大电流保护了？

这个是最后出来的那种，厚款，没改，没找到修改方法，据说是同步整流的，转换效率高，但是待机功耗比其他的高

独爱你一人

qihuo360 发表于 2017-11-4 10:49
出厂坏快就这么多，会不会是返厂后重新组装，仅换了外壳就出来卖的？

楼主可否将备份的mtd0共享出来？

已经共享，遇见大佬的你是我的荣幸

liyiecho

刷个别人低版本的CFE，以后就可以不用拆机刷固件了，我就是这么做的

minrui79

占个位置，等更新。。。