易莱孚ETR635-U路由器（e life）拆机以及ttl中开启telnet

那些年偷过的网

20250105更新文章图片，原图片图床地址失效
补充传送门：易莱孚ETR635-U联通版原厂系统开启ssh和telnet【免拆】-OPENWRT专版-恩山无线论坛




MT7981方案，配置如图，MT7981BA+MT7976CN+MT7531AE  256+128


一、拆机


正面一块均热板，夏天捉急


正面有emmc空焊盘



反面光秃秃



交换主控



无线


ttl接口

接好线，波特率115200

开启串口

软件控制台开始跑码

1. Login timed out after 60 seconds
   
2. 
   
3. Router login: ???????
   
4. F0: 102B 0000
   
5. FA: 1040 0000
   
6. FA: 1040 0000 [0200]
   
7. F9: 0000 0000
   
8. V0: 0000 0000 [0001]
   
9. 00: 0000 0000
   
10. BP: 2400 0041 [0000]
    
11. G0: 1190 0000
    
12. EC: 0000 0000 [1000]
    
13. T0: 0000 024B [010F]
    
14. Jump to BL
    
15. 
    
16. NOTICE:  BL2: v2.8(release):3212ba8-dirty
    
17. NOTICE:  BL2: Built : 04:34:51, Sep 20 2023
    
18. NOTICE:  WDT: disabled
    
19. NOTICE:  EMI: Using DDR3 settings
    
20. NOTICE:  EMI: Detected DRAM size: 256MB
    
21. NOTICE:  EMI: complex R/W mem test passed
    
22. NOTICE:  CPU: MT7981 (1300MHz)
    
23. NOTICE:  PP COPY 0 CRC read: 0x3d0f, compute: 0x3d0f
    
24. NOTICE:  SPI_NAND parses attributes from parameter page.
    
25. NOTICE:  SPI_NAND Detected ID 0xef
    
26. NOTICE:  Page size 2048, Block size 131072, size 134217728
    
27. NOTICE:  Initializing NMBM ...
    
28. NOTICE:  Signature found at block 1023 [0x07fe0000]
    
29. NOTICE:  First info table with writecount 0 found in block 960
    
30. NOTICE:  Second info table with writecount 0 found in block 963
    
31. NOTICE:  NMBM has been successfully attached in read-only mode
    
32. NOTICE:  BL2: Booting BL31
    
33. NOTICE:  BL31: v2.8(release):3212ba8-dirty
    
34. NOTICE:  BL31: Built : 04:34:53, Sep 20 2023
    
35. 
    
36. 
    
37. U-Boot 2023.04.03b-ge7a9951b-dirty (Sep 20 2023 - 04:33:25 -0700)
    
38. 
    
39. CPU:   MediaTek MT7981
    
40. Model: mt7981-rfb
    
41.        (mediatek,mt7981-rfb)
    
42. DRAM:  256 MiB
    
43. Core:  35 devices, 12 uclasses, devicetree: separate
    
44. 
    
45. Initializing NMBM ...
    
46. spi-nand: spi_nand spi_nand@0: Winbond SPI NAND was found.
    
47. spi-nand: spi_nand spi_nand@0: 128 MiB, block size: 128 KiB, page size: 2048, OOB size: 64
    
48. Could not find a valid device for nmbm0
    
49. Signature found at block 1023 [0x07fe0000]
    
50. First info table with writecount 0 found in block 960
    
51. Second info table with writecount 0 found in block 963
    
52. NMBM has been successfully attached
    
53. 
    
54. Loading Environment from MTD... OK
    
55. In:    serial@11002000
    
56. Out:   serial@11002000
    
57. Err:   serial@11002000
    
58. Net:   eth0: ethernet@15100000
    
59. LED RED enabled
    
60. GPIO: requesting red pin 34, ret=0
    
61. GPIO: get pin 0 value:1
    
62. [?25l*** U-Boot Boot Menu ***Press UP/DOWN to move, ENTER to select, ESC to quit1. Startup system (Default)2. Upgrade firmware3. Upgrade ATF BL24. Upgrade ATF FIP5. Upgrade U-boot only6. Upgrade single image7. Load image8. Start Web failsafe0. U-Boot consoleHit any key to stop autoboot: 4 Hit any key to stop autoboot: 3 Hit any key to stop autoboot: 2 Hit any key to stop autoboot: 1 [?25hubi0: attaching mtd6
    
63. ubi0: scanning is finished
    
64. ubi0: attached mtd6 (name "ubi", size 112 MiB)
    
65. ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
    
66. ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
    
67. ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
    
68. ubi0: good PEBs: 896, bad PEBs: 0, corrupted PEBs: 0
    
69. ubi0: user volume: 5, internal volumes: 1, max. volumes count: 128
    
70. ubi0: max/mean erase counter: 2/0, WL threshold: 4096, image sequence number: 1702614078
    
71. ubi0: available PEBs: 0, total reserved PEBs: 896, PEBs reserved for bad PEB handling: 19
    
72. Trying to boot from image slot 0
    
73. Read 64 bytes from volume kernel to 0000000046000000
    
74. Read 3372967 bytes from volume kernel to 0000000046000000
    
75. ## Checking hash(es) for FIT Image at 46000000 ...
    
76.    Hash(es) for Image 0 (kernel-1): crc32+ sha1+
    
77.    Hash(es) for Image 1 (fdt-1): crc32+ sha1+
    
78. Read 48 bytes from volume rootfs to 00000000463377a8
    
79. Read 21583498 bytes from volume rootfs to 00000000463377a8
    
80.    Hash(es) for rootfs: crc32+ sha1+
    
81. Firmware integrity verification passed
    
82. ## Loading kernel from FIT Image at 46000000 ...
    
83.    Using 'config-1' configuration
    
84.    Trying 'kernel-1' kernel subimage
    
85.      Description:  ARM64 OpenWrt Linux-5.4.188
    
86.      Type:         Kernel Image
    
87.      Compression:  lzma compressed
    
88.      Data Start:   0x460000e8
    
89.      Data Size:    3352372 Bytes = 3.2 MiB
    
90.      Architecture: AArch64
    
91.      OS:           Linux
    
92.      Load Address: 0x48080000
    
93.      Entry Point:  0x48080000
    
94.      Hash algo:    crc32
    
95.      Hash value:   63ac2920
    
96.      Hash algo:    sha1
    
97.      Hash value:   5894c1c9520c80c45b03caafcf1f38c70e997e9d
    
98.    Verifying Hash Integrity ... crc32+ sha1+ OK
    
99. ## Loading fdt from FIT Image at 46000000 ...
    
100.    Using 'config-1' configuration
     
101.    Trying 'fdt-1' fdt subimage
     
102.      Description:  ARM64 OpenWrt mt7981-spim-nand-rfb device tree blob
     
103.      Type:         Flat Device Tree
     
104.      Compression:  uncompressed
     
105.      Data Start:   0x46332960
     
106.      Data Size:    18542 Bytes = 18.1 KiB
     
107.      Architecture: AArch64
     
108.      Hash algo:    crc32
     
109.      Hash value:   81c123b0
     
110.      Hash algo:    sha1
     
111.      Hash value:   1ba99ef9ce91192b226217e55421c48cdf68f2ad
     
112.    Verifying Hash Integrity ... crc32+ sha1+ OK
     
113.    Booting using the fdt blob at 0x46332960
     
114. Working FDT set to 46332960
     
115.    Uncompressing Kernel Image
     
116.    Loading Device Tree to 000000004f7f0000, end 000000004f7f786d ... OK
     
117. Working FDT set to 4f7f0000
     
118. 
     
119. Starting kernel ...
     
120. 
     
121. [    0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
     
122. [    0.000000] Linux version 5.4.188 (build@ime) (gcc version 8.4.0 (OpenWrt GCC 8.4.0 r0-e867aa9e9)) #0 SMP Fri Dec 15 04:21:18 2023
     
123. [    0.000000] Machine model: KOMI A30
     
124. [    0.000000] earlycon: uart8250 at MMIO32 0x0000000011002000 (options '')
     
125. [    0.000000] printk: bootconsole [uart8250] enabled
     
126. [    0.000000] On node 0 totalpages: 64080
     
127. [    0.000000]   DMA32 zone: 1016 pages used for memmap
     
128. [    0.000000]   DMA32 zone: 0 pages reserved
     
129. [    0.000000]   DMA32 zone: 64080 pages, LIFO batch:15
     
130. [    0.000000] psci: probing for conduit method from DT.
     
131. [    0.000000] psci: PSCIv1.1 detected in firmware.
     
132. [    0.000000] psci: Using standard PSCI v0.2 function IDs
     
133. [    0.000000] psci: MIGRATE_INFO_TYPE not supported.
     
134. [    0.000000] psci: SMC Calling Convention v1.0
     
135. [    0.000000] percpu: Embedded 30 pages/cpu s83928 r8192 d30760 u122880
     
136. [    0.000000] pcpu-alloc: s83928 r8192 d30760 u122880 alloc=30*4096
     
137. [    0.000000] pcpu-alloc: [0] 0 [0] 1
     
138. [    0.000000] Detected VIPT I-cache on CPU0
     
139. [    0.000000] CPU features: detected: GIC system register CPU interface
     
140. [    0.000000] CPU features: kernel page table isolation disabled by kernel configuration
     
141. [    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 63064
     
142. [    0.000000] Kernel command line: console=ttyS0,115200n1 loglevel=8 earlycon=uart8250,mmio32,0x11002000 ubi.rootfs_volume=rootfs boot_param.boot_kernel_part=kernel boot_param.boot_rootfs_part=rootfs boot_param.upgrade_kernel_part=kernel2 boot_param.upgrade_rootfs_part=rootfs2 boot_param.rootfs_data_part=rootfs_data boot_param.boot_image_slot=0 boot_param.uboot_ver=2023.04.03b-ge7a9951b-dirty
     
143. [    0.000000] Dentry cache hash table entries: 32768 (order: 6, 262144 bytes, linear)
     
144. [    0.000000] Inode-cache hash table entries: 16384 (order: 5, 131072 bytes, linear)
     
145. [    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
     
146. [    0.000000] Memory: 227520K/256320K available (6974K kernel code, 634K rwdata, 2744K rodata, 512K init, 225K bss, 28800K reserved, 0K cma-reserved)
     
147. [    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
     
148. [    0.000000]
     
149. [    0.000000] **********************************************************
     
150. [    0.000000] **   NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE   **
     
151. [    0.000000] **                                                      **
     
152. [    0.000000] ** trace_printk() being used. Allocating extra memory.  **
     
153. [    0.000000] **                                                      **
     
154. [    0.000000] ** This means that this is a DEBUG kernel and it is     **
     
155. [    0.000000] ** unsafe for production use.                           **
     
156. [    0.000000] **                                                      **
     
157. [    0.000000] ** If you see this message and you are not debugging    **
     
158. [    0.000000] ** the kernel, report this immediately to your vendor!  **
     
159. [    0.000000] **                                                      **
     
160. [    0.000000] **   NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE   **
     
161. [    0.000000] **********************************************************
     
162. [    0.000000] rcu: Hierarchical RCU implementation.
     
163. [    0.000000] rcu:         CONFIG_RCU_FANOUT set to non-default value of 32.
     
164. [    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 25 jiffies.
     
165. [    0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
     
166. [    0.000000] GICv3: GIC: Using split EOI/Deactivate mode
     
167. [    0.000000] GICv3: 640 SPIs implemented
     
168. [    0.000000] GICv3: 0 Extended SPIs implemented
     
169. [    0.000000] GICv3: Distributor has no Range Selector support
     
170. [    0.000000] GICv3: 16 PPIs implemented
     
171. [    0.000000] GICv3: no VLPI support, no direct LPI support
     
172. [    0.000000] GICv3: CPU0: found redistributor 0 region 0:0x000000000c080000
     
173. [    0.000000] random: get_random_bytes called from start_kernel+0x358/0x4a8 with crng_init=0
     
174. [    0.000000] arch_timer: cp15 timer(s) running at 13.00MHz (phys).
     
175. [    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x2ff89eacb, max_idle_ns: 440795202429 ns
     
176. [    0.000003] sched_clock: 56 bits at 13MHz, resolution 76ns, wraps every 4398046511101ns
     
177. [    0.008252] Calibrating delay loop (skipped), value calculated using timer frequency.. 26.00 BogoMIPS (lpj=52000)
     
178. [    0.018587] pid_max: default: 32768 minimum: 301
     
179. [    0.023328] Mount-cache hash table entries: 512 (order: 0, 4096 bytes, linear)
     
180. [    0.030600] Mountpoint-cache hash table entries: 512 (order: 0, 4096 bytes, linear)
     
181. [    0.039264] ASID allocator initialised with 65536 entries
     
182. [    0.044787] rcu: Hierarchical SRCU implementation.
     
183. [    0.049952] smp: Bringing up secondary CPUs ...
     
184. [    0.055121] Detected VIPT I-cache on CPU1
     
185. [    0.055144] GICv3: CPU1: found redistributor 1 region 0:0x000000000c0a0000
     
186. [    0.055169] CPU1: Booted secondary processor 0x0000000001 [0x410fd034]
     
187. [    0.055247] smp: Brought up 1 node, 2 CPUs
     
188. [    0.076900] SMP: Total of 2 processors activated.
     
189. [    0.081634] CPU features: detected: 32-bit EL0 Support
     
190. [    0.086806] CPU features: detected: CRC32 instructions
     
191. [    0.092102] CPU: All CPU(s) started at EL2
     
192. [    0.096233] alternatives: patching kernel code
     
193. [    0.103430] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
     
194. [    0.113256] futex hash table entries: 512 (order: 3, 32768 bytes, linear)
     
195. [    0.120173] pinctrl core: initialized pinctrl subsystem
     
196. [    0.126001] NET: Registered protocol family 16
     
197. [    0.130739] DMA: preallocated 256 KiB pool for atomic allocations
     
198. [    0.137404] hw-breakpoint: found 6 breakpoint and 4 watchpoint registers.
     
199. [    0.159789] rbus 18000000.wbsys: PCI host bridge to bus 0000:00
     
200. [    0.165831] pci_bus 0000:00: root bus resource [mem 0x18000000-0x18ffffff]
     
201. [    0.172769] pci_bus 0000:00: root bus resource [bus 00-ff]
     
202. [    0.178294] pci_bus 0000:00: scanning bus
     
203. [    0.182345] pci 0000:00:00.0: [14c3:7981] type 00 class 0x000280
     
204. [    0.188400] pci 0000:00:00.0: reg 0x10: [mem 0x18000000-0x1800000f 64bit]
     
205. [    0.195236] pci 0000:00:00.0: reg 0x18: [mem 0x00000000-0x0000000f]
     
206. [    0.201546] pci 0000:00:00.0: reg 0x1c: [mem 0x00000000-0x0000000f]
     
207. [    0.207856] pci 0000:00:00.0: reg 0x20: [mem 0x00000000-0x0000000f]
     
208. [    0.214165] pci 0000:00:00.0: reg 0x24: [mem 0x00000000-0x0000000f]
     
209. [    0.221684] pci_bus 0000:00: fixups for bus
     
210. [    0.225909] pci_bus 0000:00: bus scan returning with max=00
     
211. [    0.232323] clocksource: Switched to clocksource arch_sys_counter
     
212. [    0.266397] thermal_sys: Registered thermal governor 'fair_share'
     
213. [    0.266401] thermal_sys: Registered thermal governor 'bang_bang'
     
214. [    0.272553] thermal_sys: Registered thermal governor 'step_wise'
     
215. [    0.278601] thermal_sys: Registered thermal governor 'user_space'
     
216. [    0.284646] thermal_sys: Registered thermal governor 'power_allocator'
     
217. [    0.291026] NET: Registered protocol family 2
     
218. [    0.302063] IP idents hash table entries: 4096 (order: 3, 32768 bytes, linear)
     
219. [    0.309618] tcp_listen_portaddr_hash hash table entries: 256 (order: 0, 4096 bytes, linear)
     
220. [    0.318043] TCP established hash table entries: 2048 (order: 2, 16384 bytes, linear)
     
221. [    0.325853] TCP bind hash table entries: 2048 (order: 3, 32768 bytes, linear)
     
222. [    0.333058] TCP: Hash tables configured (established 2048 bind 2048)
     
223. [    0.339515] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
     
224. [    0.346098] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
     
225. [    0.353204] NET: Registered protocol family 1
     
226. [    0.357605] NET: Registered protocol family 44
     
227. [    0.362088] PCI: CLS 0 bytes, default 64
     
228. [    0.367307] workingset: timestamp_bits=46 max_order=16 bucket_order=0
     
229. [    0.377240] squashfs: version 4.0 (2009/01/31) Phillip Lougher
     
230. [    0.383129] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
     
231. [    0.405780] phy phy-usb-phy@11e10000.1: type_sw - reg 0x218, index 0
     
232. [    0.422176] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
     
233. [    0.429351] printk: console [ttyS0] disabled
     
234. [    0.453773] 11002000.serial: ttyS0 at MMIO 0x11002000 (irq = 12, base_baud = 2500000) is a ST16650V2
     
235. [    0.462975] printk: console [ttyS0] enabled
     
236. [    0.462975] printk: console [ttyS0] enabled
     
237. [    0.471342] printk: bootconsole [uart8250] disabled
     
238. [    0.471342] printk: bootconsole [uart8250] disabled
     
239. [    0.481753] cacheinfo: Unable to detect cache hierarchy for CPU 0
     
240. [    0.490477] loop: module loaded
     
241. [    0.493759] mediatek,mt2701-ice_debug ice_debug: get dbg_sel clock fail: -2
     
242. [    0.500726] mediatek,mt2701-ice_debug: probe of ice_debug failed with error -2
     
243. [    0.508794] mt7981-pinctrl 11d00000.pinctrl: pin_config_set op failed for pin 19
     
244. [    0.516193] mtk-spi 1100a000.spi: Error applying setting, reverse things back
     
245. [    0.523993] spi-nand spi0.0: Winbond SPI NAND was found.
     
246. [    0.529315] spi-nand spi0.0: 128 MiB, block size: 128 KiB, page size: 2048, OOB size: 64
     
247. [    0.540205] {httphack}:httphack_init(): version: 1.0.0
     
248. [    0.545744] [mtk_hw_init] reset_lock:0, force:0
     
249. [    0.550306] [mtk_hw_init] execute fe cold reset
     
250. [    0.566594] mtk_soc_eth 15100000.ethernet: generated random MAC address d6:e5:56:a8:a3:d9
     
251. [    0.575123] mtk_soc_eth 15100000.ethernet eth0: mediatek frame engine at 0xffffffc011800000, irq 75
     
252. [    0.584212] mtk_soc_eth 15100000.ethernet: generated random MAC address aa:8e:99:21:45:7e
     
253. [    0.592694] mtk_soc_eth 15100000.ethernet eth1: mediatek frame engine at 0xffffffc011800000, irq 75
     
254. [    0.601747] (unnamed net_device) (dummy): netif_napi_add() called with weight 256
     
255. [    0.609526] i2c /dev entries driver
     
256. [    0.614049] mtk-wdt 1001c000.watchdog: Watchdog enabled (timeout=31 sec, nowayout=0)
     
257. [    0.622063] device-mapper: ioctl: 4.41.0-ioctl (2019-09-16) initialised: dm-devel@redhat.com
     
258. [    0.632581] NET: Registered protocol family 10
     
259. [    0.637911] Segment Routing with IPv6
     
260. [    0.641648] NET: Registered protocol family 17
     
261. [    0.646161] Bridge firewalling registered
     
262. [    0.650274] 8021q: 802.1Q VLAN Support v1.8
     
263. [    0.665500] nmbm nmbm_spim_nand: Signature found at block 1023 [0x07fe0000]
     
264. [    0.673256] nmbm nmbm_spim_nand: First info table with writecount 0 found in block 960
     
265. [    0.683431] nmbm nmbm_spim_nand: Second info table with writecount 0 found in block 963
     
266. [    0.691439] nmbm nmbm_spim_nand: NMBM has been successfully attached
     
267. [    0.698068] 5 fixed-partitions partitions found on MTD device nmbm_spim_nand
     
268. [    0.705116] Creating 5 MTD partitions on "nmbm_spim_nand":
     
269. [    0.710599] 0x000000000000-0x000000100000 : "BL2"
     
270. [    0.715892] 0x000000100000-0x000000180000 : "u-boot-env"
     
271. [    0.721745] 0x000000180000-0x000000380000 : "Factory"
     
272. [    0.727338] 0x000000380000-0x000000580000 : "FIP"
     
273. [    0.732635] 0x000000580000-0x000007580000 : "ubi"
     
274. [    0.949811] mt7530 mdio-bus:1f lan1 (uninitialized): PHY [dsa-0.0:00] driver [Generic PHY]
     
275. [    0.959422] mt7530 mdio-bus:1f lan2 (uninitialized): PHY [dsa-0.0:01] driver [Generic PHY]
     
276. [    0.969059] mt7530 mdio-bus:1f lan3 (uninitialized): PHY [dsa-0.0:02] driver [Generic PHY]
     
277. [    0.978638] mt7530 mdio-bus:1f lan4 (uninitialized): PHY [dsa-0.0:03] driver [Generic PHY]
     
278. [    0.987572] mt7530 mdio-bus:1f: configuring for fixed/2500base-x link mode
     
279. [    0.994729] DSA: tree 0 setup
     
280. [    0.994979] mt7530 mdio-bus:1f: Link is Up - 2.5Gbps/Full - flow control rx/tx
     
281. [    1.005084] UBI: auto-attach mtd5
     
282. [    1.008462] ubi0: attaching mtd5
     
283. [    1.015855] random: fast init done
     
284. [    1.343081] ubi0: scanning is finished
     
285. [    1.352073] ubi0: attached mtd5 (name "ubi", size 112 MiB)
     
286. [    1.357567] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
     
287. [    1.364434] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
     
288. [    1.371212] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
     
289. [    1.378163] ubi0: good PEBs: 896, bad PEBs: 0, corrupted PEBs: 0
     
290. [    1.384159] ubi0: user volume: 5, internal volumes: 1, max. volumes count: 128
     
291. [    1.391371] ubi0: max/mean erase counter: 2/0, WL threshold: 4096, image sequence number: 1702614078
     
292. [    1.400494] ubi0: available PEBs: 0, total reserved PEBs: 896, PEBs reserved for bad PEB handling: 19
     
293. [    1.409710] ubi0: background thread "ubi_bgt0d" started, PID 604
     
294. [    1.416340] block ubiblock0_1: created from ubi0:1(rootfs)
     
295. [    1.421840] ubiblock: device ubiblock0_1 (rootfs) set to be root filesystem
     
296. [    1.428797] hctosys: unable to open rtc device (rtc0)
     
297. [    1.437430] VFS: Mounted root (squashfs filesystem) readonly on device 253:0.
     
298. [    1.444828] Freeing unused kernel memory: 512K
     
299. [    1.464342] Run /sbin/init as init process
     
300. [    1.651029] init: Console is alive
     
301. [    1.654602] init: - watchdog -
     
302. [    2.027617] crng init done
     
303. [    2.154458] kmodloader: loading kernel modules from /etc/modules-boot.d/*
     
304. [    2.186714] conninfra@(mtk_conninfra_drv_init:644) Before platform_driver_register
     
305. [    2.194410] Get Index(0-TOP_MISC_BASE) phy_addr(0x11d10000) vir_addr=(0xffffffc010bcd000) size=(0x1000)
     
306. [    2.203803] Get Index(1-TOPRGU_BASE) phy_addr(0x1001c000) vir_addr=(0xffffffc010bd5000) size=(0x1000)
     
307. [    2.213013] Get Index(2-GPIO_BASE) phy_addr(0x11d00000) vir_addr=(0xffffffc010bdd000) size=(0x1000)
     
308. [    2.222048] Get Index(3-IOCFG_TR_BASE) phy_addr(0x11f00000) vir_addr=(0xffffffc010be5000) size=(0x1000)
     
309. [    2.231432] Get Index(4-IOCFG_TL_BASE) phy_addr(0x11f10000) vir_addr=(0xffffffc010bed000) size=(0x1000)
     
310. [    2.240819] Get Index(5-INFRACFG_AO_BASE) phy_addr(0x10003000) vir_addr=(0xffffffc010bf5000) size=(0x1000)
     
311. [    2.250462] Get Index(6-CONN_INFRA_CFG_BASE) phy_addr(0x18001000) vir_addr=(0xffffffc010bfd000) size=(0x1000)
     
312. [    2.260366] Get Index(7-CONN_INFRA_SYSRAM_BASE) phy_addr(0x18050000) vir_addr=(0xffffffc010e0d000) size=(0x1000)
     
313. [    2.270530] Get Index(8-CONN_INFRA_CLKGEN_ON_TOP_BASE) phy_addr(0x18009000) vir_addr=(0xffffffc010e15000) size=(0x1000)
     
314. [    2.281300] Get Index(9-CONN_HOST_CSR_TOP_BASE) phy_addr(0x18060000) vir_addr=(0xffffffc010e17000) size=(0x1000)
     
315. [    2.291464] Get Index(10-CONN_INFRA_BUS_CR_BASE) phy_addr(0x1800e000) vir_addr=(0xffffffc010e19000) size=(0x1000)
     
316. [    2.301715] Get Index(11-CONN_INFRA_RGU_BASE) phy_addr(0x18000000) vir_addr=(0xffffffc010e1b000) size=(0x1000)
     
317. [    2.311705] Get Index(12-CONN_WT_SLP_CTL_REG_BASE) phy_addr(0x18005000) vir_addr=(0xffffffc010e1d000) size=(0x1000)
     
318. [    2.322129] Get Index(13-INST2_CONN_WT_SLP_CTL_REG_BASE) phy_addr(0x18085000) vir_addr=(0xffffffc010e1f000) size=(0x1000)
     
319. [    2.333073] Get Index(14-CONN_RF_SPI_MST_REG_BASE) phy_addr(0x18004000) vir_addr=(0xffffffc010e21000) size=(0x1000)
     
320. [    2.343500] Get Index(15-INST2_CONN_RF_SPI_MST_REG_BASE) phy_addr(0x18084000) vir_addr=(0xffffffc010e23000) size=(0x1000)
     
321. [    2.354447] Get Index(16-CONN_SEMAPHORE_BASE) phy_addr(0x18070000) vir_addr=(0xffffffc010ed0000) size=(0x10000)
     
322. [    2.364524] Get Index(17-CONN_AFE_CTL_BASE) phy_addr(0x18003000) vir_addr=(0xffffffc010e25000) size=(0x1000)
     
323. [    2.374341] Get Index(18-CONN_AFE_CTL_2ND_BASE) phy_addr(0x18083000) vir_addr=(0xffffffc010e27000) size=(0x1000)
     
324. [    2.384505] Get Index(19-WF_TOP_SLPPROT_ON_BASE) phy_addr(0x184c0000) vir_addr=(0xffffffc010ef0000) size=(0x10000)
     
325. [    2.394842] Get Index(20-WF_TOP_CFG_BASE) phy_addr(0x184b0000) vir_addr=(0xffffffc010e29000) size=(0x1000)
     
326. [    2.404485] Get Index(21-WF_MCU_CONFIG_LS_BASE) phy_addr(0x184f0000) vir_addr=(0xffffffc010e2b000) size=(0x1000)
     
327. [    2.414648] Get Index(22-WF_MCU_BUS_CR_BASE) phy_addr(0x18400000) vir_addr=(0xffffffc010e2d000) size=(0x1000)
     
328. [    2.424551] Get Index(23-WF_MCUSYS_INFRA_BUS_FULL_U_DEBUG_CTRL_AO_BASE) phy_addr(0x18500000) vir_addr=(0xffffffc010e76000) size=(0x1000)
     
329. [    2.436798] Get Index(24-WF_TOP_CFG_ON_BASE) phy_addr(0x184c0000) vir_addr=(0xffffffc010f10000) size=(0x10000)
     
330. [    2.446789] conninfra@(consys_plt_hw_init:162) adie_cfg_type = 1, one_adie_dbdc = 1
     
331. [    2.454444] [emi_mng_init] gConEmiPhyBase = [0x47c80000] size = [0x100000] fw size = [0x100000] ops=[00000000f31170d3]
     
332. [    2.465226] conninfra@(mtk_conninfra_drv_init:650) After platform_driver_register
     
333. [    2.473154] ConnInfra Dev: init (0)
     
334. [    2.478098] conninfra@(_consys_polling_chipid_int:306) Read CONNSYS HW IP version successfully! (0x02090000)
     
335. [    2.487936] conninfra@(connsys_d_die_cfg:365) D-die efuse: 0x00000000
     
336. [    2.495418] conninfra@(_connsys_a_die_cfg_7976:919) adie_idx[0], A-die CHIP ID = 0x7976, HW Version = 0x8a10
     
337. [    2.506242] conninfra@(consys_spi_write_nolock:501) addr=0x0a00, val=0xffffffff
     
338. [    2.514547] conninfra@(consys_spi_write_nolock:501) addr=0x04ac, val=0x0000001c
     
339. [    2.522853] conninfra@(consys_spi_write_nolock:501) addr=0x0144, val=0x00000002
     
340. [    2.532165] conninfra@(consys_spi_write_nolock:501) addr=0x0148, val=0x00000000
     
341. [    2.541477] conninfra@(consys_spi_write_nolock:501) addr=0x0148, val=0x43a60000
     
342. [    2.554819] conninfra@(connsys_a_die_efuse_read_nolock:737) efuse = [0x00000001, 0x00c40000, 0x008800b6, 0x00000000]
     
343. [    2.566335] conninfra@(consys_spi_write_nolock:501) addr=0x0144, val=0x00000002
     
344. [    2.575647] conninfra@(consys_spi_write_nolock:501) addr=0x0148, val=0x23a6003a
     
345. [    2.584959] conninfra@(consys_spi_write_nolock:501) addr=0x0148, val=0x63a7003a
     
346. [    2.598301] conninfra@(connsys_a_die_efuse_read_nolock:737) efuse = [0x00000001, 0x00c40000, 0x008800b6, 0x00000000]
     
347. [    2.609816] conninfra@(consys_spi_write_nolock:501) addr=0x0144, val=0x00000002
     
348. [    2.619127] conninfra@(consys_spi_write_nolock:501) addr=0x0148, val=0x23a7003a
     
349. [    2.628438] conninfra@(consys_spi_write_nolock:501) addr=0x0148, val=0x63ac003a
     
350. [    2.641782] conninfra@(connsys_a_die_efuse_read_nolock:737) efuse = [0x00000001, 0x00c40000, 0x008800b6, 0x00000000]
     
351. [    2.653295] conninfra@(consys_spi_write_nolock:501) addr=0x0038, val=0x4a563b00
     
352. [    2.661601] conninfra@(consys_spi_write_nolock:501) addr=0x065c, val=0x1d59080f
     
353. [    2.669906] conninfra@(consys_spi_write_nolock:501) addr=0x0664, val=0x34c00fe0
     
354. [    2.678212] conninfra@(consys_spi_write_nolock:501) addr=0x0070, val=0x88888005
     
355. [    2.687474] conninfra@(consys_spi_write_nolock:501) addr=0x0070, val=0x00000005
     
356. [    2.695713] conninfra@(_consys_polling_chipid_int:306) Read CONNSYS HW IP version successfully! (0x02090000)
     
357. [    2.705529] conninfra@(_consys_hw_conninfra_wakeup:470) conninfra_wakeup refcnt=[0]->[1] wakeup!!
     
358. [    2.714395] conninfra@(_consys_hw_conninfra_sleep:490) conninfra_sleep refcnt=[1]->[0] sleep!!
     
359. [    2.722997] conninfra@(opfunc_power_on_internal:241) [Conninfra Pwr On] BT=[0] FM=[0] GPS=[0] WF=[0] CONNINFRA=[1]
     
360. [    2.735536]  ime_dhcp_init ...
     
361. [    2.738630] init proc
     
362. [    2.740942] nl-msg_init: create netlink socket success: 0x000000003f6f5407
     
363. [    2.747811]  init ok
     
364. [    2.750535] Could not create tracefs 'console' directory
     
365. [    2.755974] ime kernel panic recorder handler initialized.
     
366. [    2.764346] mediatek_soc_hnat 15100000.hnat: wan = eth1
     
367. [    2.769597] mediatek_soc_hnat 15100000.hnat: lan = lan
     
368. [    2.774733] mediatek_soc_hnat 15100000.hnat: ppd = eth0
     
369. [    2.779952] mediatek_soc_hnat 15100000.hnat: gmac num = 2
     
370. [    2.785345] mediatek_soc_hnat 15100000.hnat: ppe num = 1
     
371. [    2.791100] mediatek_soc_hnat 15100000.hnat: PPE0 entry number = 8192
     
372. [    2.807892] mediatek_soc_hnat 15100000.hnat: PPE0 hwnat start
     
373. [    2.813701] hnat roaming work enable
     
374. [    2.820822] warp_module_init(): module init and register callback for warp
     
375. [    2.827706] warp_malloc_init(), init warp_memory
     
376. [    2.832329] create warp_ctrl ok!!!
     
377. [    2.835763] wed_get_slot_map(): assign slot_id:0 for entry: 0!
     
378. [    2.841606] wed_get_slot_map(): assign slot_id:1 for entry: 1!
     
379. [    2.848761] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
     
380. [    2.860622] init: - preinit -
     
381. [    3.278334] mtk_soc_eth 15100000.ethernet eth0: configuring for fixed/2500base-x link mode
     
382. [    3.286678] set device eth0 = 1
     
383. [    3.289834] mtk_soc_eth 15100000.ethernet eth0: Link is Up - 2.5Gbps/Full - flow control rx/tx
     
384. [    3.303585] mt7530 mdio-bus:1f lan1: configuring for phy/gmii link mode
     
385. [    3.310771] 8021q: adding VLAN 0 to HW filter on device lan1
     
386. Press the [f] key and hit [enter] to enter failsafe mode
     
387. Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
     
388. boot nvram security-ver =
     
389. *** nvram check : 0 ***
     
390. [    5.239729] mount_root: loading kmods from internal overlay
     
391. [    5.257149] kmodloader: loading kernel modules from //etc/modules-boot.d/*
     
392. [    5.265751] kmodloader: done loading kernel modules from //etc/modules-boot.d/*
     
393. uci: I/O error

复制代码

控制台进入跑码时，赶紧在ttl软件输入框中键入f和回车

再手动点击发送，多点几次（或者使用定时发送），进入failsafe模式

failsafe 模式下打开 telnet
输入以下命令

1. # 挂载root并开启telnet
   
2. mount_root
   
3. 
   
4. sed -i 's/.*local telnet_enable=0/\tlocal telnet_enable=1/' /etc/init.d/telnet
   
5. 
   
6. # 修改root密码为password
   
7. passwd root
   
8. 
   
9. password
   
10. 
    
11. password
    
12. 
    
13. # 重启
    
14. reboot

复制代码

二、登录telnet


使用工具MobaXterm新建telnet会话

1. 192.168.2.1 23
   
2. root
   
3. password

复制代码

使用命令查看分区



三、总结

无需专业工具非常好拆，屏蔽罩不好搞，我就没弄
这个主板长得和KOMI A31，不说一模一样简直毫无差别

一个串口工具放在这里

https://xuux.lanzouj.com/b0cv1z2bi
密码:hdzr

那些年偷过的网

wuju 发表于 2024-3-25 22:08
怎么刷的？用哪个uboot？怎么进uboot

群里的A31的uboot，mtd命令；
按mesh键进入，红灯闪烁，变蓝；
改网卡静态IP，浏览器192.168.2.1；
反正就这个可以引导A31固件，其他A31的uboot刷固件没用，搞得我ttl换了这个uboot

倒影年华

我去  上面居然还有emmc焊盘

240038901

多少米一个，求分享

那些年偷过的网

只要ttl针够长，免拆也可以的

jontao

不错不错，感谢分享。非常感谢

kinglasy

顶一下喽顶一下喽

thunder372

电信版ETR631-T应该也是一样的

lzg999

居然还有emmc焊盘

zjuahhy

这东西电信联通版估计完全一样

vb1980

关键是多少钱？

塞班岛的梦想

能不能刷openwrt？

看看你的

感谢大佬分享，回复看一下

robinsome

谢谢分享了谢谢分享了

wuju

看看到底怎么样

fry2022

感谢分享