恩山无线论坛

 找回密码
 立即注册

QQ登录

只需一步,快速开始

搜索
查看: 591|回复: 5

请教大佬如何根据TTL OUTPUT看路由器的MAC偏移?

[复制链接]
发表于 2019-2-9 12:04 | 显示全部楼层 |阅读模式

如题: 有 TTL 启动信息后, 如何根据这个来确定MAC地址的偏移

之前好像在H大的哪个贴子里看他提到过, 要适配固件就得拆机接TTL看输出信息。

我的恩山、我的无线 The best wifi forum is right here.
 楼主| 发表于 2019-2-9 12:07 | 显示全部楼层

TTL 输出

DRAM:  64 MB
Flash Manuf Id 0xc8, DeviceId0 0x40, DeviceId1 0x17
flash size 8MB, sector count = 128
Flash:  8 MB
Using default environment

In:    serial
Out:   serial
Err:   serial
Net:   ath_gmac_enet_initialize...
ath_gmac_enet_initialize: reset mask:c02200
Scorpion ---->S27 PHY*
S27 reg init
: cfg1 0x800c0000 cfg2 0x7114
eth0: ba:be:fa:ce:08:41
athrs27_phy_setup ATHR_PHY_CONTROL 4 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 4 :10
eth0 up
Honey Bee ---->  MAC 1 S27 PHY *
S27 reg init
ATHRS27: resetting s27
ATHRS27: s27 reset done
: cfg1 0x800c0000 cfg2 0x7214
eth1: ba:be:fa:ce:08:41
athrs27_phy_setup ATHR_PHY_CONTROL 0 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 0 :10
athrs27_phy_setup ATHR_PHY_CONTROL 1 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 1 :10
athrs27_phy_setup ATHR_PHY_CONTROL 2 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 2 :10
athrs27_phy_setup ATHR_PHY_CONTROL 3 :1000
athrs27_phy_setup ATHR_PHY_SPEC_STAUS 3 :10
eth1 up
eth0, eth1
Setting 0x181162c0 to 0x58b1a100
is_auto_upload_firmware=0
Autobooting in 1 seconds
## Booting image at 9f020000 ...
   Uncompressing Kernel Image ... OK

Starting kernel ...

Booting QCA953x
Linux version 2.6.31 (tomcat@buildserver) (gcc version 4.3.3 (GCC) ) #380 Sun Jun 12 17:34:21 CST 2016
Ram size passed from bootloader =64M
flash_size passed from bootloader = 8
CPU revision is: 00019374 (MIPS 24Kc)
ath_sys_frequency: cpu apb ddr apb cpu 650 ddr 390 ahb 216
Determined physical RAM map:
memory: 04000000 @ 00000000 (usable)
Zone PFN ranges:
  Normal   0x00000000 -> 0x00004000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0: 0x00000000 -> 0x00004000
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
Kernel command line: console=ttyS0,115200 root=31:2 rootfstype=squashfs init=/sbin/init mtdparts=ath-nor0:128k(u-boot),1024k(kernel),6912k(rootfs),6M
PID hash table entries: 256 (order: 8, 1024 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
Writing ErrCtl register=00000000
Readback ErrCtl register=00000000
Memory: 56092k/65536k available (1958k kernel code, 9372k reserved, 475k data, 124k init, 0k highmem)
NR_IRQS:128
plat_time_init: plat time init done
Calibrating delay loop... 433.15 BogoMIPS (lpj=866304)
Mount-cache hash table entries: 512

****************ALLOC***********************
Packet mem: 802912e0 (0x600000 bytes)
********************************************

NET: Registered protocol family 16
ath_pcibios_init: bus 0
***** Warning PCIe 0 H/W not found !!!
registering PCI controller with io_map_base unset
bio: create slab <bio-0> at 0
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
NET: Registered protocol family 1
ATH GPIOC major 0
squashfs: version 4.0 (2009/01/31) Phillip Lougher
msgmni has been set to 109
io scheduler noop registered
io scheduler deadline registered (default)
Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
serial8250.0: ttyS0 at MMIO 0xb8020000 (irq = 19) is a 16550A
console [ttyS0] enabled
PPP generic driver version 2.4.2
NET: Registered protocol family 24
5 cmdlinepart partitions found on MTD device ath-nor0
Creating 5 MTD partitions on "ath-nor0":
0x000000000000-0x000000020000 : "u-boot"
0x000000020000-0x000000120000 : "kernel"
0x000000120000-0x0000007e0000 : "rootfs"
0x0000007e0000-0x0000007f0000 : "config"
0x0000007f0000-0x000000800000 : "art"
->Oops: flash id 0xc84017 .
nf_conntrack version 0.5.0 (1024 buckets, 5120 max)
xt_time: kernel timezone is -0000
Ooops, why the devices couldn't been initialed?
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP cubic registered
NET: Registered protocol family 10
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
athwdt_init: Registering WDT success
VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
Freeing unused kernel memory: 124k freed
init started:  BusyBox v1.01 (2016.06.12-09:37+0000) multi-call binary
This Board use 2.6.31
insmod: cannot open module `/lib/modules/2.6.31/kernel/x_tables.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/xt_tcpudp.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/xt_MARK.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/xt_TCPMSS.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/xt_comment.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/xt_iprange.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/xt_mac.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/xt_multiport.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/xt_string.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/xt_time.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/ipt_multiurl.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/nf_conntrack.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/xt_conntrack.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/xt_state.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/nf_defrag_ipv4.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/nf_conntrack_ipv4.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/nf_nat.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/ip_tables.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/iptable_filter.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/iptable_nat.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/iptable_raw.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/ipt_MASQUERADE.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/ipt_REDIRECT.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/ipt_REJECT.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/ipt_TRIGGER.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/ts_kmp.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/flashid.ko': No such file or directory
PPPoL2TP kernel driver, V1.0
p p t p driver version 0.8.3
insmod: cannot open module `/lib/modules/2.6.31/kernel/harmony.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/af_key.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/xfrm_user.ko': No such file or directory
insmod: cannot open module `/lib/modules/2.6.31/kernel/xt_mark.ko': No such file or directory
qca955x_GMAC: Length per segment 1536
953x_GMAC: qca953x_gmac_attach
Link Int Enabled
qca953x_set_gmac_caps  CHECK DMA STATUS
mac:1 Registering S27....
qca955x_GMAC: RX TASKLET - Pkts per Intr:18
qca955x_GMAC: Max segments per packet :   1
qca955x_GMAC: Max tx descriptor count :   511
qca955x_GMAC: Max rx descriptor count :   128
qca955x_GMAC: Mac capability flags    :   2D81
953x_GMAC: qca953x_gmac_attach
Link Int Enabled
qca953x_set_gmac_caps  CHECK DMA STATUS
mac:0 Registering S27....
qca955x_GMAC: RX TASKLET - Pkts per Intr:18
qca955x_GMAC: Max segments per packet :   1
qca955x_GMAC: Max tx descriptor count :   511
qca955x_GMAC: Max rx descriptor count :   128
qca955x_GMAC: Mac capability flags    :   2581

(none) mips #380 Sun Jun 12 17:34:21 CST 2016 (none)
(none) login: athr_gmac_ring_alloc Allocated 8176 at 0x83886000
athr_gmac_ring_alloc Allocated 2048 at 0x83a59800
HONEYBEE ----> S27 PHY MDIO
ATHRS27: resetting s27
ATHRS27: s27 reset done
++++ athrs27_igmp_setup once
port0 vid is 0xb000b
port1 vid is 0x30003
port2 vid is 0x50005
port3 vid is 0x70007
port4 vid is 0x90009
++ PVID: 0x0000000b, bitmap: 0x0000001f
++ PVID: 0x00000003, bitmap: 0x0000001f
++ PVID: 0x00000005, bitmap: 0x0000001f
++ PVID: 0x00000007, bitmap: 0x0000001f
++ PVID: 0x00000009, bitmap: 0x0000001f
vtable vid: 0x00000002, bitmap 0x00000003
vtable vid: 0x00000004, bitmap 0x00000005
vtable vid: 0x00000006, bitmap 0x00000007
vtable vid: 0x00000008, bitmap 0x00000009
vtable vid: 0x0000000a, bitmap 0x0000000b
vtable vid: 0x0000000c, bitmap 0x0000000d
vtable vid: 0x0000000e, bitmap 0x0000000f
vtable vid: 0x00000010, bitmap 0x00000011
vtable vid: 0x00000012, bitmap 0x00000013
vtable vid: 0x00000014, bitmap 0x00000015
vtable vid: 0x00000016, bitmap 0x00000017
vtable vid: 0x00000018, bitmap 0x00000019
vtable vid: 0x0000001a, bitmap 0x0000001b
vtable vid: 0x0000001c, bitmap 0x0000001d
vtable vid: 0x0000001e, bitmap 0x0000001f
vtable vid: 0x00000020, bitmap 0x00000021
Setting Drop CRC Errors, Pause Frames and Length Error frames
Setting PHY...
ADDRCONF(NETDEV_UP): eth0: link is not ready
athr_gmac_ring_alloc Allocated 8176 at 0x8387a000
athr_gmac_ring_alloc Allocated 2048 at 0x839f9000
HONEYBEE ----> S27 PHY MDIO
Setting Drop CRC Errors, Pause Frames and Length Error frames
Setting PHY...
ADDRCONF(NETDEV_UP): eth1: link is not ready
device eth0 entered promiscuous mode
athr_gmac_ring_free Freeing at 0x8387a000
athr_gmac_ring_free Freeing at 0x839f9000
athr_gmac_ring_alloc Allocated 8176 at 0x8387c000
athr_gmac_ring_alloc Allocated 2048 at 0x839f9000
HONEYBEE ----> S27 PHY MDIO
Setting Drop CRC Errors, Pause Frames and Length Error frames
Setting PHY...
ADDRCONF(NETDEV_UP): eth1: link is not ready
athr_gmac_ring_free Freeing at 0x83886000
athr_gmac_ring_free Freeing at 0x83a59800
athr_gmac_ring_alloc Allocated 8176 at 0x83878000
athr_gmac_ring_alloc Allocated 2048 at 0x83a59800
HONEYBEE ----> S27 PHY MDIO
Setting Drop CRC Errors, Pause Frames and Length Error frames
Setting PHY...
ADDRCONF(NETDEV_UP): eth0: link is not ready
nf_conntrack_rtsp v0.6.21 loading
nf_nat_rtsp v0.6.21 loading
adf: module license 'Proprietary' taints kernel.
Disabling lock debugging due to kernel taint
ath_hal: 0.9.17.1 (AR5416, AR9380, REGOPS_FUNC, WRITE_EEPROM, TX_DATA_SWAP, RX_DATA_SWAP, 11D)
ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved
ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved
ath_ahb: 10.2-00082-4 (Atheros/multi-bss)
__ath_attach: Set global_scn[0]
Enterprise mode: 0x03fc0000
Restoring Cal data from Flash
ath_get_caps[6191] rx chainmask mismatch actual 3 sc_chainmak 0
ath_get_caps[6166] tx chainmask mismatch actual 3 sc_chainmak 0
wifi0: Atheros ???: mem=0xb8100000, irq=2
ath_pci: 10.2-00082-4 (Atheros/multi-bss)
VAP device ath0 created
Setting Max Stations:32
ieee80211_ioctl_siwmode: imr.ifm_active=131712, new mode=3, valid=1
Set freq vap stop send + 832f8000
Set freq vap stop send -832f8000
Set wait done --832f8000
Set freq vap stop send + 832f8000
Set freq vap stop send -832f8000
Set wait done --832f8000
athr_gmac_ring_free Freeing at 0x83878000
athr_gmac_ring_free Freeing at 0x83a59800
br0: port 1(eth0) entering disabled state
athr_gmac_ring_alloc Allocated 8176 at 0x83b46000
athr_gmac_ring_alloc Allocated 2048 at 0x83a59800
HONEYBEE ----> S27 PHY MDIO
Setting Drop CRC Errors, Pause Frames and Length Error frames
Setting PHY...
ADDRCONF(NETDEV_UP): eth0: link is not ready
device ath0 entered promiscuous mode
br0: port 2(ath0) entering forwarding state
ieee80211_ioctl_siwmode: imr.ifm_active=131712, new mode=3, valid=1
br0: port 2(ath0) entering disabled state
DEVICE IS DOWN ifname=ath0
DEVICE IS DOWN ifname=ath0

DES SSID SET=iTSLBD1
br0: port 2(ath0) entering forwarding state
Scan in progress.. Cancelling it
br0: port 2(ath0) entering disabled state
br0: port 2(ath0) entering forwarding state
====>>>>wlanBootupAll ok
Scan in progress.. Cancelling it
br0: port 2(ath0) entering disabled state

DES SSID SET=iTSLBD1
br0: port 2(ath0) entering forwarding state
ieee80211_ioctl_siwmode: imr.ifm_active=393856, new mode=3, valid=1
Scan in progress.. Cancelling it
br0: port 2(ath0) entering disabled state
DEVICE IS DOWN ifname=ath0
DEVICE IS DOWN ifname=ath0
IPv6 over IPv4 tunneling driver
br0: port 2(ath0) entering forwarding state
qca955x_GMAC: GE0 RX DMA ENABLE
blockWps_proc_write 1278: write value = 0
mlme_create_infra_bss : Overriding HT40 channel with HT20 channel
我的恩山、我的无线 The best wifi forum is right here.
发表于 2019-2-9 23:12 来自手机 | 显示全部楼层
内核日志看不出来的

点评

那看来只有拿到 spi dump 才能看了  详情 回复 发表于 2019-2-10 12:29
我的恩山、我的无线 The best wifi forum is right here.
 楼主| 发表于 2019-2-10 12:29 | 显示全部楼层
LGA1150 发表于 2019-2-9 23:12
内核日志看不出来的

那看来只有拿到 spi dump 才能看了

点评

高通一般都是 art 分区内  详情 回复 发表于 2019-2-10 12:56
我的恩山、我的无线 The best wifi forum is right here.
发表于 2019-2-10 12:56 来自手机 | 显示全部楼层
safehorse 发表于 2019-2-10 12:29
那看来只有拿到 spi dump 才能看了

高通一般都是 art 分区内

点评

我查看过 刷过固件一的MAC 并且 查看过 ART中的字节, 并没有搜索到 MAC. 另外也没有调用到 1FC00 偏移处的MAC地址. 所以感觉有点奇怪, 不知道TP路由还会有哪些典型的MAC地址偏移  详情 回复 发表于 2019-2-10 13:08
我的恩山、我的无线 The best wifi forum is right here.
 楼主| 发表于 2019-2-10 13:08 | 显示全部楼层
LGA1150 发表于 2019-2-10 12:56
高通一般都是 art 分区内

我查看过 刷过固件一的MAC 并且 查看过 ART中的字节, 并没有搜索到 MAC.

另外也没有调用到 1FC00 偏移处的MAC地址. 所以感觉有点奇怪, 不知道TP路由还会有哪些典型的MAC地址偏移
我的恩山、我的无线 The best wifi forum is right here.
您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

QQ|手机版|小黑屋|Archiver|恩山无线论坛(常州市恩山计算机开发有限公司版权所有) ( 苏ICP备05084872号 )

GMT+8, 2019-10-22 19:21

Powered by Discuz! X3.4

© 2001-2017 Comsenz Inc.

快速回复 返回顶部 返回列表