Uitlezen flash geheugen kabelmodem

[Ano]

Hallo mensen,

Uit oogpunt van hobby heb ik mijn kabelmodem maar eens geopend. Zou het
leuk vinden eens wat te rommelen met de firmware.
Het modem is een Hitron CGNV4. De processor is een Intel DHCE652. Ik zie
een flash chip zitten type Spansion S34ML01G1 100TFI00 (= 1 GB).
Ik zie ook een niet-aangesloten connector zitten met 4 aansluitingen,
wellicht kan ik de chip via JTAG uitlezen op deze pins?

Ik heb dit in het verleden wel gedaan met ADSL modems, maar dan was er
een 'dedicated' programma beschikbaar dat de processor (Broadcom) en de
flash chip herkende, en vervolgens het flash geheugen ging uitlezen.
Maar voor deze kabelmodems heb ik zo'n programma nog nooit gezien...

Iemand ervaring ermee hoe ik die Spansion chip toch kan uitlezen?

Bedankt!

Ano

[Dick Streefland]

Ano <a...@ano.invalid> wrote:
| Uit oogpunt van hobby heb ik mijn kabelmodem maar eens geopend. Zou het
| leuk vinden eens wat te rommelen met de firmware.
| Het modem is een Hitron CGNV4. De processor is een Intel DHCE652. Ik zie
| een flash chip zitten type Spansion S34ML01G1 100TFI00 (= 1 GB).
| Ik zie ook een niet-aangesloten connector zitten met 4 aansluitingen,
| wellicht kan ik de chip via JTAG uitlezen op deze pins?

Vaak zit er in dit soort apparaten een seriele poort met 3,3V signaal
nivo's. Die 4 aansluitingen zouden dus heel goed GND, 3,3V, TX en RX
kunnen zijn. Misschien dat je via die poort met de bootloader kunt
praten.

--
Dick

[Ano]

Ja, moet ik ook maar eens proberen, ik heb nog wel een kabeltje liggen.
Ik heb trouwens nog een tweede paar aansluitingen gevonden. Ik meld me
terug.

[Ano]

Het TTL-RS232 kabeltje opgezocht en zitten testen. Blijkt dat J100 de
goede connector is, zit verborgen onder "insteekkaartje" van
telefoonaansluiting, dat VoIP verhaal zit blijkbaar op een apart
kaartje. Natuurlijk zat ik eerst vergeefs de andere connector te testen
(met ook 1 x GND en 3 x 3.3V).

Aansluitingen J100:
1: Rx (of Tx?)
2: +3.3V
3: Tx (of Rx?)
4: GND

Blijkbaar staat op Rx en Tx ook constant +3.3V, weer wat geleerd ;-)

Terminal instellingen:
speed:115200 bps / databits:8 / parity:none / stop bits:1 / flow
control:hardware.

Dat geeft deze output bij booten van modem (insteekkaartje VoIP ligt
eruit tijdens booten, ik heb mac adressen vervangen door "xx:..."):


Cat Mountain B2- Boot Ram.
Version: 0.1.14 (Apr 8 2013, 10:30:47)

Boot Param memory dump:
[0x1FFC] - 0x00010014
[0x1FF8] - 0x00000001
[0x1FF4] - 0x00000001
[0x1FF0] - 0x00000002
[0x1FEC] - 0x00000001
[0x1FE8] - 0x18000000
[0x1FE4] - 0x08000000
[0x1FE0] - 0x001E0000
[0x1FDC] - 0x001E0200
[0x1FD8] - 0x03C04000
[0x1FD4] - 0x00040000
[0x1FD0] - 0x03C44000
[0x1FCC] - 0x03C44000
[0x1FC8] - 0x00010000
[0x1FC4] - 0x00000000
[0x1FC0] - 0x00000000
[0x1FBC] - 0x00000000
[0x1FB8] - 0x00000000
[0x1FB4] - 0x00000000
[0x1FB0] - 0x00000000
[0x1FAC] - 0x00000000
[0x1FA8] - 0x00000000
[0x1FA4] - 0x00000000
[0x1FA0] - 0x00000000
[0x1F9C] - 0x0B0A0807
[0x1F98] - 0x01090D0C
[0x1F94] - 0xFF050302
[0x1F90] - 0x00000001
[0x1F8C] - 0x00000006
[0x1F88] - 0x000528F0
[0x1F84] - 0x001D8000
[0x1F80] - 0x00000070
[0x1F7C] - 0xFFFFFFFF
[0x1F78] - 0x00008000
[0x1F74] - 0x00000020
[0x1F70] - 0x00080800
[0x1F6C] - 0x00010000
[0x1F68] - 0x00090800
[0x1F64] - 0x00009400
[0x1F60] - 0x00099C00
[0x1F5C] - 0x00065400
[0x1F58] - 0x000FF800
[0x1F54] - 0x00000800
[0x1F50] - 0x00100000
[0x1F4C] - 0x00000800
[0x1F48] - 0x000FF000
[0x1F44] - 0x00000800
[0x1F40] - 0x00000000
Load U-Boot from eMMC/NAND Flash
eMMC/NAND copy from 0x03C04000 to 0x59FB0000 (len:262144).
Done.


U-Boot 1.2.0 (Jun 21 2013 - 09:47:11)Puma6 - PSPU-Boot 2.0.0.24

DRAM: 128 MB
*** Warning - Unsupported Flash detected, flash is unusable

Manufacturer ID: 0xFF
Type: 0xFF
Density: 0xFF
Extended ID: {0xFF, 0xFF}
failed to probe Flash (bank 0)
Error: failed to probe Flash
Flash: 0 kB
MMC: sdhci_puma6: 0
MMC info:
Manufacturer ID: 0
OEM ID: 0
Name: MMC128
MMC version 4.4
High Capacity: No
Dual Data Rate (DDR): No
Bus Width: 8-bit
Clock: 50000000
Rd Block Len: 512
Capacity: 112.4 MB (117833728 bytes)
In: serial
Out: serial
Err: serial
Setting Board-Type to 2
Read AID 1
set ACTIMAGE to 2
Press SPACE to abort autoboot in 2 second(s)
*** ACTIMAGE = 2, will try to boot UBFI2 stored @0x03F58000
## Executing script at 03f58000
========== Running script (puma6) ver 2.5 =========
*** Running from UBFI2 partition @0x5A000000 (eMMC)
Load address ............. 0x3f5a36c
Kernel partition offset .. 0x23bc
kernel size .............. 0x15b444
Root FS partition offset . 0x15d800
Root FS size ............. 0x5f7c00
Additional FS ............ ,0x3f3000(FS1)ro
========== Script Done ============================

*** UBFI2 bootscript executed successfully.
Start booting...
## Booting image at 03f5a36c ...
ARM MBX sending 'eMMC done.' notification...
Image Name: Multi Image File
Image Type: ARM Linux Multi-File Image (uncompressed)
Data Size: 11821140 Bytes = 11.3 MB
Load Address: 00a00000
Entry Point: 00a00000
Contents:
Image 0: 1422404 Bytes = 1.4 MB
Image 1: 6257664 Bytes = 6 MB
Image 2: 4141056 Bytes = 3.9 MB
OK

Starting kernel ...

Starting LZMA Uncompression Algorithm.
Compressed file is LZMA format.
[Debug - Kerenl] LZMA Uncompression - Done.
Linux version 2.6.39.3-VRG-gb55ec1fb-TEST (zhongkai@Niklaus) (gcc
version 4.7.3 (Buildroot 2013.08.1) ) #1 PREEMPT Thu Jul 23
17:27:08 CST 2015
CPU: ARMv6-compatible processor [410fb764] revision 4 (ARMv7), cr=00c538ff
CPU: VIPT nonaliasing data cache, VIPT aliasing instruction cache
Machine: puma6
Ignoring unrecognised tag 0x00000000
Memory policy: ECC disabled, Data cache writeback
Reserved 4096k DSP memory starting from Physical 0x5fc00000
Initialized Peripheral Port Remap Register to base : 0x20000000
Puma-6 system_rev = 1505 -- docsis ip rev = 16
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 31496
Kernel command line: root=/dev/mmcblk0p11 rootwait ro
nvram=/dev/mmcblk0p9 fs1=/dev/mmcblk0p13
console=ttyS0,115200n8,n ethaddr0= usbhostaddr= boardtype=0x00000002
eth0_mdio_phy_addr= ext_switch_reset_gpio=
top_mem_reserved=0x400000 threadirqs MFG=0
Puma6 boardtype Id 2
PID hash table entries: 512 (order: -1, 2048 bytes)
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Memory: 124MB = 124MB total
Memory: 120832k/120832k available, 6144k reserved, 0K highmem
Virtual kernel memory layout:
vector : 0xffff0000 - 0xffff1000 ( 4 kB)
fixmap : 0xfff00000 - 0xfffe0000 ( 896 kB)
DMA : 0xffc00000 - 0xffe00000 ( 2 MB)
vmalloc : 0x88000000 - 0xd0000000 (1152 MB)
lowmem : 0x80000000 - 0x87c00000 ( 124 MB)
modules : 0x7f000000 - 0x80000000 ( 16 MB)
.init : 0x80018000 - 0x8003b000 ( 140 kB)
.text : 0x8003b000 - 0x803e6000 (3756 kB)
.data : 0x803e6000 - 0x80408b40 ( 139 kB)
Preemptable hierarchical RCU implementation.
RCU-based detection of stalled CPUs is disabled.
Verbose stalled-CPUs detection is disabled.
NR_IRQS:150
Interrupt controller revision : 4e822100
CRU 13 is allready in CRU state 3 [ignore operation]
Precise sched_clock: load 35156, nsec/count 284
Puma6 Timer0 initialized
console [ttyS0] enabled
INITIAL_JIFFIES 4294937296
jiffies 4294937297
Sync FRC (hi 0 lo 38) to timer0 (0)
Calibrating delay loop... 447.28 BogoMIPS (lpj=2236416)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
hw perfevents: enabled with v6 PMU driver, 3 counters available
NET: Registered protocol family 16
hw-breakpoint: found 6 breakpoint and 1 watchpoint registers.
hw-breakpoint: maximum watchpoint size is 4 bytes.

PAL_cppi4Init : domain is 0, cfg ptr is 0x803F21C4
PAL_cppi4Init: CPPI 4.1 API initialized successfully.

PAL_cppi4Init : domain is 0, cfg ptr is 0x00000000
HW Mutex: Intel(R) HW MUTEX driver built on Jul 23 2015 @ 17:21:24
HW Mutex: pmaster 0x8742b2c0 ,irq_num 74, reg_base 0xdffe1800
HW Mutex: driver is running. HW MUTEX Code-Id = 0x1000c936
SRAM: Intel(R) SRAM driver built on Jul 23 2015 @ 17:21:25
SRAM: Create device: /dev/sram_drv0
SRAM: Create proc file /proc/bootparams
AEP: Intel(R) AEP driver built on Jul 23 2015 @ 17:21:23
AEP: Disabled.
bio: create slab <bio-0> at 0
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
UDP hash table entries: 256 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
NET: Registered protocol family 1
Initializing Cru Control module
GPIO: Intel(R) GPIO driver built on Jul 23 2015 @ 17:21:25
GPIO: Create device: /dev/docsis_gpio_dev
GPIO: Add proc file: /proc/gpio
IOSF-SB: Intel(R) IOSF-SB driver built on Jul 23 2015 @ 17:21:24
IOSF-SB: Create device: /dev/docsis_iosfsb_drv
PUNIT: Intel(R) P-UNIT driver built on Jul 23 2015 @ 17:21:25
PUNIT: Create device: /dev/p_unit
PUNIT: Create proc file: /proc/P-UNIT
P-UNIT : Enable reset event handling ...
0 = result from request_irq

==============================================================================
P-UNIT : FW version is [ 1.0.9 ]
P-UNIT : FW is backward compatible down to Silicon Stepping [A0]
P-UNIT : FW build version is [ P-196 ]
P-UNIT : Last reset reason = 0x00000000 [ RESET_COLD_BOOT ]
P-UNIT : Last reset origin = 0x00000000 [ RESET_ORIGIN_HW ]
P-UNIT : Last reset duration = 0.0 Seconds
==============================================================================
squashfs: version 4.0 (2009/01/31) Phillip Lougher
JFFS2 version 2.2. (NAND) © 2001-2006 Red Hat, Inc.
msgmni has been set to 236
Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249)
io scheduler noop registered
io scheduler deadline registered
io scheduler cfq registered (default)
Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x70003 (irq = 9) is a TI 16550A
serial8250: ttyS1 at MMIO 0x50003 (irq = 7) is a TI 16550A
serial8250: ttyS2 at MMIO 0x60003 (irq = 8) is a TI 16550A
TI LED driver initialized [major=248]
PUMA6 SPI Controller: Control Reg [0xDFFE0100]: 0x44453400
PUMA6 SPI Controller: Split Reg [0xDFFE0104]: 0x00000008
PUMA6 SPI Controller: Current Address Reg[0xDFFE0108]: 0x00000000
PUMA6 SPI Controller: Addressing mode set to: 3
Serial Flash [Bus:0 CS:0] : No device found
Serial Flash [Bus:0 CS:1] : No device found
PUMA6 SPI Controller driver at 0xdffe0100 bus_num = 0x0
(null): TI Codec SPI Controller driver at 0xd01200c8 (irq = 0)
PPP generic driver version 2.4.2
PPP MPPE Compression module registered
NET: Registered protocol family 24
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <ma...@qualcomm.com>
MODULE: PDSP Start ...
MODULE: PP Start ...
HIL Core: Profile intrusive_pp2k has been Loaded.
Module: HTX PP Genl controller Load
i2c /dev entries driver
watchdog: TI Avalanche Watchdog Timer: timer margin 35 sec
cpuidle: using governor ladder
sdhci: Secure Digital Host Controller Interface driver
sdhci: Copyright(c) Pierre Ossman
NP-CPU MBX waits for 'eMMC advance mode ready' notification from APP-CPU ...
receive_specific_event_notification Event=0x4 parameter = 0x30
NP-CPU MBX received 'eMMC advance mode ready' notification from APP-CPU.
mmc0: SDHCI controller on platform [sdhci-puma6.0] using ADMA
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (1888 buckets, 7552 max)
ctnetlink v0.93: registering with nfnetlink.
xt_time: kernel timezone is -0000
IPVS: Registered protocols ()
IPVS: Connection hash table configured (size=4096, memory=32Kbytes)
IPVS: Creating netns size=744 id=0
IPVS: ipvs loaded.
IPv4 over IPv4 tunneling driver
GRE over IPv4 demultiplexor driver
GRE over IPv4 tunneling driver
ip_tables: (C) 2000-2006 Netfilter Core Team
ipt_CLUSTERIP: ClusterIP Version 0.8 loaded successfully
arp_tables: (C) 2002 David S. Miller
TCP cubic registered
Initializing XFRM netlink socket
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
IPv6 over IPv4 tunneling driver
mmc0: new high speed MMC card at address 0001
mmcblk0: mmc0:0001 MMC128 112 MiB
ip6_gre: GRE over IPv6 tunneling driver
NET: Registered protocol family 17
NET: Registered protocol family 15
Bridge firewalling registered
Ebtables v2.0 registered
L2TP core driver, V2.0
PPPoL2TP kernel driver, V2.0
802.1Q VLAN Support v1.8 Ben Greear <gre...@candelatech.com>
mmcblk0: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 >
All bugs added by David S. Miller <da...@redhat.com>
VFP support v0.3:
mmcblk0: p13 size 34816 extends beyond EOD, truncated
not present
NP-CPU MBX Send notification to APP-CPU - 'Card initialization complete'...
VFS: Mounted root (squashfs filesystem) readonly on device 179:11.
Freeing init memory: 140K
init started: BusyBox v1.19.2 (2015-08-06 17:57:11 CST)
starting pid 42, tty '/dev/tts/0': '/etc/init.d/rcS > /dev/console 2>
/dev/console'
Calibrate: prev cal 0, new cal 0

About to set realtime runtime...


About to initialize PP ...


PAL_cppi4Init : domain is 0, cfg ptr is 0x00000000
main:367 (pid=53): hal_pp_fw_download SUCCESS!


The PP Should be running now ...

/dev/mmcblk0p9: recovering journal
/dev/mmcblk0p9: clean, 79/256 files, 1281/2048 blocks
The device /dev/mmcblk0p9 was scan with fsck.ext3 and the return value is 0
kjournald starting. Commit interval 5 seconds
EXT3-fs (mmcblk0p9): using internal journal
EXT3-fs (mmcblk0p9): mounted filesystem with journal data mode
mount -t ext3 /dev/mmcblk0p9 /nvram -o data=journal -o barrier=1
eMMC F/W Auto-Update: disabled.
fss=/dev/mmcblk0p13-FS1
/etc/init.d/rcS: /etc/config: line 357: CROSS: not found


========================================================
Intel DSDK release 4.5.10.8
Build date: Thursday, August 06 2015, 18:28:11
Copyright © 2011, Intel Corporation.
========================================================


ProductionDb_Init:1446 (pid=174): Restoring production DB from NVRAM ...
SUCCESS
ProductionDb_FrequencyPlanValidity:1973 (pid=174):


#####################################
#####################################
# Frequency plan: Euro #
#####################################
#####################################



/etc/scripts/sys_check.sh: /etc/config: line 357: CROSS: not found
Setup memory config from file "/etc/sysctl_mem.conf"
/etc/scripts/memcfg_check.sh: line 23: sysctl: not found
Using DOCSIS Initialization process parameters: -debug_options 8
-debug_options 128 -debug_options 0x08000000
Using DOCSIS MAC Manager parameters: -x -m
VoPP NVRAM flag setting exist, MAS_PP_SUPPORT=0 (0-disable/off 1-enable/on)
pcd: (213): Starting TI Process Control Daemon.
pcd: (213): Loaded 100 rules.
pcd: Initialization complete.
pcd: (213): Starting process /etc/scripts/l2switch_drvinit.sh (Rule
PUMA6SYSTEM_L2SW_INSMODE).
pcd: (213): Starting process echo (Rule PUMA6SYSTEM_DECT_UART_IRQ_P).
pcd: (213): Starting process mknod (Rule PUMA6SYSTEM_CRU_CTRL_MKNOD).
pcd: (213): Starting process /usr/sbin/watchdog_rt (Rule SYSTEM_WATCHDOG).
pcd: (213): Starting process /usr/sbin/logger (Rule SYSTEM_LOGGER).
pcd: (213): Starting process /usr/sbin/gptimer (Rule SYSTEM_GPTIMER).
pcd: (213): Rule SYSTEM_WATCHDOG: Success (Process /usr/sbin/watchdog_rt
(219)).
TI Watchdog-RT daemon started <kick interval = 10 seconds>
Installing L2 Switch drivers...
pcd: (213): Rule PUMA6SYSTEM_DECT_UART_IRQ_P: Success (Process echo (217)).
pcd: (213): Rule PUMA6SYSTEM_CRU_CTRL_MKNOD: Success (Process mknod (218)).
L2switch internal MAC:
main:803 (pid=221): Initialized successfully, timer tick 50ms
pcd: (213): Rule SYSTEM_GPTIMER: Success (Process /usr/sbin/gptimer (221)).

PAL_cppi4Init : domain is 0, cfg ptr is 0x00000000

PAL_cppi4Init : domain is 0, cfg ptr is 0x00000000
PP Operation PP_EV_PID_CREATED, pid_handle=0 @ l2sd0 device

PAL_cppi4Init : domain is 0, cfg ptr is 0x00000000
PP Operation PP_EV_PID_CREATED, pid_handle=1 @ l2sm0 device
enable_proxy_pdsp_hw: Run Proxy PDSP
L2 Switch drivers installed successfully
pcd: (213): Rule PUMA6SYSTEM_L2SW_INSMODE: Success (Process
/etc/scripts/l2switch_drvinit.sh (216)).
TI Logger: Init complete
pcd: (213): Rule SYSTEM_LOGGER: Success (Process /usr/sbin/logger (220)).
pcd: (213): Starting process /usr/sbin/l2switch_init (Rule
PUMA6SYSTEM_L2SWITCH).
pcd: (213): Starting process /usr/sbin/gim (Rule SYSTEM_GIM).
pcd: (213): Rule SYSTEM_GIM: Success (Process /usr/sbin/gim (236)).
pcd: (213): Starting process /usr/sbin/sync_app_np_reboot (Rule
PUMA6SYSTEM_SYNC_APP_NP_REB).
Call id support: 1
starting pid 238, tty '/dev/tts/0': '/bin/sh --login
/etc/scripts/start_cli.sh > /dev/console 2> /dev/console'
pcd: (213): Rule PUMA6SYSTEM_SYNC_APP_NP_REB: Success (Process
/usr/sbin/sync_app_np_reboot (237)).
pcd: (213): Rule PUMA6SYSTEM_L2SWITCH: Success (Process
/usr/sbin/l2switch_init (235)).
pcd: (213): Starting process /usr/sbin/ext_switch_init (Rule
PUMA6SYSTEM_SWITCH_INIT).
pcd: (213): Rule PUMA6SYSTEM_SWITCH_INIT: Success (Process
/usr/sbin/ext_switch_init (239)).
pcd: (213): Starting process /usr/sbin/rpc_ifconfig (Rule
PUMA6SYSTEM_RPC_IFCONFIG).
process '/bin/sh --login /etc/scripts/start_cli.sh > /dev/console 2>
/dev/console' (pid 238) exited. Scheduling for restart.
starting pid 247, tty '/dev/tts/0': '/bin/sh --login
/etc/scripts/start_cli.sh > /dev/console 2> /dev/console'


BusyBox v1.19.2 (2015-08-06 17:57:11 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

# Autoconfiguration disabled for l2sd0
Autoconfiguration disabled for l2sd0.4093
iniparser: cannot open /var/tmp/lsddb_rt.ini
pcd: (213): Starting process /usr/sbin/portmap (Rule SYSTEM_RPC_PORTMAP).
pcd: (213): Rule SYSTEM_RPC_PORTMAP: Success (Process /usr/sbin/portmap
(263)).
pcd: (213): Starting process /usr/sbin/rpc_management_server (Rule
PUMA6SYSTEM_RPC_MANAGEMENT).
pcd: (213): Rule PUMA6SYSTEM_RPC_MANAGEMENT: Success (Process
/usr/sbin/rpc_management_server (264)).

GOT ACK from ATOM on eventId=0x8 arrived
Clear the ACK Vector from ATOM on eventId=0x8
pcd: (213): Rule PUMA6SYSTEM_RPC_IFCONFIG: Success (Process
/usr/sbin/rpc_ifconfig (240)).
pcd: (213): Rule PUMA6_RPC_LASTRULE: Success.
pcd: (213): Rule PUMA6SYSTEM_LASTRULE: Success.
pcd: (213): Error: Warning, rule SYSTEM_APPPSM not found.
pcd: (213): Rule SYSTEM_LASTRULE: Success.
pcd: (213): Starting process /usr/sbin/ht_atom_event_dispatcher (Rule
HT_ATOM_EVENT_DISP).
pcd: (213): Starting process insmod (Rule GPIO_MODULE).
pcd: (213): Starting process insmod (Rule EXT_BT_MODULE).
pcd: (213): Starting process router_init.sh (Rule RG_INIT).
pcd: (213): Starting process /usr/sbin/crond (Rule RG_CROND).
pcd: (213): Rule RG_CROND: Success (Process /usr/sbin/crond (269)).
pcd: (213): Rule PREDOCSIS_LASTRULE: Success.
pcd: (213): Rule EXT_SWITCH_CTL: Success.
pcd: (213): Starting process echo (Rule DOCSIS_APPRUN).
pcd: (213): Rule DOCSIS_APPRUN: Success (Process echo (270)).
pcd: (213): Error: Process /usr/sbin/crond (269) exited with result code
6 (Rule RG_CROND).
PUNIT upgrade starting...
pcd: (213): Error: Rule RG_CROND failed.

==============================================================================
P-UNIT : FW version is [ 1.2.0 ]
P-UNIT : FW is backward compatible down to Silicon Stepping [A0]
P-UNIT : FW build version is [ R-20a ]
==============================================================================

rpc_mgm_punit_upgrade_done_1_svc
Initial device[ht_ext_bt] ok.
pcd: (213): Rule GPIO_MODULE: Success (Process insmod (266)).
pcd: (213): Rule EXT_BT_MODULE: Success (Process insmod (267)).
pcd: (213): Starting process /usr/sbin/ht_buttond (Rule EXT_BUTTOND).
Open device[ht_ext_bt] ok.
nf_conntrack_rtsp v0.7 loading
INIT[299] INFO: Router begins the initialization process
SHDB[299] INFO: Initialize primary shared memory success. size-918733
chunks-23
UTILS[302] TRACE: Capabilities configuration init Success
UTILS[299] INFO: spawn process /sbin/insmod success
UTILS[305] TRACE: Capabilities configuration init Success
UTILS[299] INFO: spawn process /sbin/insmod success
UTILS[308] TRACE: Capabilities configuration init Success
UTILS[299] INFO: spawn process /sbin/insmod success
UTILS[311] TRACE: Capabilities configuration init Success
UTILS[299] INFO: spawn process /sbin/insmod success
UTILS[314] TRACE: Capabilities configuration init Success
UTILS[299] INFO: spawn process /sbin/insmod success
UTILS[319] TRACE: Capabilities configuration init Success
UTILS[299] INFO: spawn process /sbin/insmod success
INIT[299] INFO: Router initialization phase 2,shared database init finished
pcd: (213): Rule RG_INIT: Success (Process router_init.sh (268)).
pcd: (213): Starting process router_init.sh (Rule RG_START).
pcd: (213): Starting process /usr/sbin/docsis_init_once (Rule
DOCSIS_INITONCE).
sched `ps | grep -v grep | grep irq | grep irq/24 | cut -c-5` 1 1
pcd: (213): Rule DOCSIS_INITONCE: Success (Process
/usr/sbin/docsis_init_once (340)).
pcd: (213): Starting process /usr/sbin/upstream_manager_1q (Rule
DOCSIS_US1Q).
pcd: (213): Starting process insmod (Rule DOCSIS_SOCIFDRV).
pcd: (213): Starting process /usr/sbin/cm_status (Rule DOCSIS_CMSTATUS).
pcd: (213): Rule DOCSIS_CMSTATUS: Success (Process /usr/sbin/cm_status
(355)).

PAL_cppi4Init : domain is 0, cfg ptr is 0x00000000
RX Init CPPI: open free descriptor queue
RX Init CPPI: allocate descriptors
init_cppi_rx: Allocate descriptors to the embedded free queues
RX Init CPPI: Fill free discriptor queue
RX Init CPPI: Set DMA channel
init_cppi_rx: Call PAL_cppi4RxChOpen channel=9, REF_CNT=1 BUF COUNT=64
RX Init CPPI: Init accumulator
RX Init RX CPPI pass
TX Init CPPI: open free descriptor queue
TX Init CPPI: allocate descriptors
init_cppi_tx: Allocate descriptors to the embedded free queues
TX Init CPPI: Fill free discriptor queue
TX Init CPPI: Create CPGMAC TX handler
TX Init CPPI: open mpeg TX channel
TX Init CPPI pass
WQ Init CPPI: open queue descriptor queue
WQ Init pass
MPEG driver initialization complete.
pcd: (213): Rule DOCSIS_SOCIFDRV: Success (Process insmod (354)).
pcd: (213): Starting process mknod (Rule DOCSIS_MKNODSOCIFDRV).
pcd: (213): Starting process insmod (Rule DOCSIS_BRIDGE).
pcd: (213): Rule DOCSIS_US1Q: Success (Process
/usr/sbin/upstream_manager_1q (353)).
pcd: (213): Rule DOCSIS_MKNODSOCIFDRV: Success (Process mknod (358)).
pcd: (213): Starting process insmod (Rule DOCSIS_MNG).
Entered docsis_cppi_init

PAL_cppi4Init : domain is 2, cfg ptr is 0x7F0D3DE8
Entered docsis_cppi_DS_GROUP_init

PAL_cppi4Init : domain is 3, cfg ptr is 0x7F0D4658
Entered docsis_cppi_DS_GROUP_init

PAL_cppi4Init : domain is 0, cfg ptr is 0x00000000

PAL_cppi4Init : domain is 1, cfg ptr is 0x7F0D4FE0

PAL_cppi4Init : domain is 0, cfg ptr is 0x00000000
pcd: (213): Rule DOCSIS_BRIDGE: Success (Process insmod (359)).
pcd: (213): Rule DOCSIS_MNG: Success (Process insmod (360)).
pcd: (213): Starting process mknod (Rule DOCSIS_MKNODMNG).
pcd: (213): Starting process insmod (Rule DOCSIS_KINTR).
pcd: (213): Starting process insmod (Rule DOCSIS_CNI).
pcd: (213): Rule DOCSIS_MKNODMNG: Success (Process mknod (364)).
pcd: (213): Starting process insmod (Rule DOCSIS_FILTERCLASS).
pcd: (213): Rule DOCSIS_KINTR: Success (Process insmod (365)).
pcd: (213): Starting process /usr/sbin/hal_event_mbox (Rule
DOCSIS_HALEVENTMBOX).
pcd: (213): Starting process /usr/sbin/hal_cmd_mbox (Rule
DOCSIS_HALCMDMBOX).

PAL_cppi4Init : domain is 0, cfg ptr is 0x00000000
PP Operation PP_EV_PID_CREATED, pid_handle=6 @ cni0 device
pcd: (213): Rule DOCSIS_CNI: Success (Process insmod (366)).
SHDB[344] DEBUG: 18
UTILS[344] ERROR: Larray add Failed (No space for new element)!
UTILS[344] ERROR: Larray add Failed (No space for new element)!
pcd: (213): Rule DOCSIS_FILTERCLASS: Success (Process insmod (400)).
pcd: (213): Starting process /bin/sh (Rule DOCSIS_FCDEV).
pcd: (213): Rule DOCSIS_HALEVENTMBOX: Success (Process
/usr/sbin/hal_event_mbox (413)).
pcd: (213): Rule DOCSIS_HALCMDMBOX: Success (Process
/usr/sbin/hal_cmd_mbox (414)).
pcd: (213): Starting process /usr/sbin/mlx (Rule DOCSIS_MLX).
pcd: (213): Rule DOCSIS_MLX: Success (Process /usr/sbin/mlx (433)).
pcd: (213): Starting process /usr/sbin/hal_tuner_mgr (Rule
DOCSIS_HALTUNERMGR).
UTILS[344] ERROR: Get Network link index Failed(Don't have device erouter0).
UTILS[344] ERROR: Get Network Address Failed(Don't have device erouter0)
SHDB[344] WARN: Command <net_wan_dhcpinfo_bootfile > error -3
SHDB[344] WARN: Command <net_wan_dhcpinfo_bootfileurl > error -3
pcd: (213): Rule DOCSIS_FCDEV: Success (Process /bin/sh (428)).
pcd: (213): Rule DOCSIS_HALTUNERMGR: Success (Process
/usr/sbin/hal_tuner_mgr (441)).
pcd: (213): Starting process /usr/sbin/testmode_handle.sh (Rule
DOCSIS_TEST_HALTUNERMG).
pcd: (213): Rule DOCSIS_TEST_HALTUNERMG: Success (Process
/usr/sbin/testmode_handle.sh (446)).
pcd: (213): Starting process /usr/sbin/dbridge_init (Rule
DOCSIS_DBRIDGEINIT).
SHDB[344] WARN: 2 parse failed items
BOARD[344] INFO: GPIO 26 ioctl successully, value=0
BOARD[344] INFO: GPIO 27 ioctl successully, value=0
UM[344] INFO: Admin account(upccsr)'s password has been changed at 33
FIREWALL[344] DEBUG: Generate raw-save file success
FIREWALL[344] DEBUG: Generate nat-save file success
FIREWALL[344] DEBUG: Generate mangle-save file success
FIREWALL[344] DEBUG: Generate filter-savDbridge Init SUCSESS
e file success
FIREWALL[344] DEBUG: Generate raw-save file success
FIREWALL[344] DEBUG: Generate mangle-save file success
FIREWALL[344] DEBUG: Generate filter-save file success
FIREWALL[344] DEBUG: RTDB_MGNT_STATUS_EROUTER_START not ready!
Autoconfiguration disabled for lbr0
Autoconfiguration disabled for lan0
Autoconfiguration disabled for wan0
Autoconfiguration disabled for wwan0
UTILS[344] INFO: spawn process /fss//gw/usr/sbin/webs success
SERVICES[344] INFO: Start WEBS PID : 459.
WIRELESS[344] DEBUG: RTDB_MGNT_STATUS_EROUTER_START not ready!
UTILS[459] TRACE: Capabilities configuration init Success
Autoconfiguration disabled for cni0
pcd: (213): Rule DOCSIS_DBRIDGEINIT: Success (Process
/usr/sbin/dbridge_init (451)).
pcd: (213): Starting process /bin/sh (Rule DOCSIS_DBRIDGEMDFINIT).
pcd: (213): Starting process /bin/sh (Rule DOCSIS_DBRIDGEL2VPNDSI).
DRP[344] INFO: Ripd stoped, PID:0
DRP[344] INFO: Ripngd stoped
pcd: (213): Rule DOCSIS_DBRIDGEL2VPNDSI: Success (Process /bin/sh (464)).
pcd: (213): Rule DOCSIS_DBRIDGEMDFINIT: Success (Process /bin/sh (463)).
pcd: (213): Starting process insmod (Rule DOCSIS_PP).
DRP[344] INFO: Zebra stoped
SHDB[344] DEBUG: SntpDb_SparserVerify
SHDB[344] DEBUG: SntpDb_DeamonTodRun Mark.
pcd: (213): Rule DOCSIS_PP: Success (Process insmod (477)).
pcd: (213): Starting process /bin/sh (Rule DOCSIS_PPDEV).
UTILS[344] INFO: spawn process /fss//gw/usr/sbin/todtimezone success
SHDB[344] DEBUG: SntpDb_DeamonDaylightRun Mark.
UTILS[479] TRACE: Capabilities configuration init Success
UTILS[344] INFO: spawn process /fss//gw/usr/sbin/daylight success
INIT[344] INFO: Router initialization phase 2,script load finished.
UTILS[484] TRACE: Capabilities configuration init Success
/fss//gw/usr/sbin/todtimezone: .: line 2: can't open '/var/conf/todDef.conf'
pcd: (213): Rule DOCSIS_PPDEV: Success (Process /bin/sh (481)).
pcd: (213): Starting process ledd (Rule DOCSIS_LED).
pcd: (213): Rule DOCSIS_HALREADY: Success.
pcd: (213): Rule DOCSIS_LED: Success (Process ledd (492)).
pcd: (213): Starting process /usr/sbin/qos_dsx_sm (Rule DOCSIS_QOSDSXSM).
pcd: (213): Starting process /usr/sbin/dispatcher (Rule DOCSIS_DISPATCHER).
netlink_open: initialized fd 6
pcd: (213): Rule DOCSIS_DISPATCHER: Success (Process
/usr/sbin/dispatcher (496)).
pcd: (213): Rule DOCSIS_QOSDSXSM: Success (Process /usr/sbin/qos_dsx_sm
(493)).
pcd: (213): Starting process /usr/sbin/docsis_mac_driver (Rule
DOCSIS_MACDRIVER).
echo daylight_timezone=1
TZ_NAME_DEFAULT=UTC0
TZ_NAME_DEFAULT_DST=UTC0EDT
Enable Daylight Saving Time!
System time updated, Current System Time is: Thu Jan 1 00:00:38 UTC 1970
SHDB[492] DEBUG: 18
pcd: (213): Rule RG_START: Success (Process router_init.sh (339)).
SHDB[485] DEBUG: 18
INIT[485] INFO: RSM]-Router state machine(RSM) start
DEBUG-[119@Router_CfgfileParserInit]:Mark
SHDB[459] DEBUG: 18
DEBUG-[139@Vendor_CfgfileParserRegister]:Mark, parser:0x2b79a7b9
DEBUG-[141@Vendor_CfgfileParserRegister]:Mark
DEBUG-[126@Router_CfgfileParserInit]:Mark
INIT[485] DEBUG: [RSM]-Entry
INIT[485] DEBUG: [RSM]-Exit
INIT[485] INFO: RSM]-Get init event,RegionId:-2
INIT[485] INFO: RSM]-Wait for Docsis Init Notify...
pcd: (213): Starting process /usr/sbin/downstream_manager (Rule
DOCSIS_DSMNGR24).
pcd: (213): Starting process /usr/sbin/downstream_manager (Rule
DOCSIS_DSMNGR23).
pcd: (213): Starting process /usr/sbin/downstream_manager (Rule
DOCSIS_DSMNGR22).
pcd: (213): Starting process /usr/sbin/downstream_manager (Rule
DOCSIS_DSMNGR21).
pcd: (213): Starting process /usr/sbin/downstream_manager (Rule
DOCSIS_DSMNGR20).
pcd: (213): Starting process /usr/sbin/downstream_manager (Rule
DOCSIS_DSMNGR19).
pcd: (213): Starting process /usr/sbin/downstream_manager (Rule
DOCSIS_DSMNGR18).
pcd: (213): Starting process /usr/sbin/downstream_manager (Rule
DOCSIS_DSMNGR17).
pcd: (213): Starting process /usr/sbin/downstream_manager (Rule
DOCSIS_DSMNGR16).
pcd: (213): Starting process /usr/sbin/downstream_manager (Rule
DOCSIS_DSMNGR15).
pcd: (213): Starting process /usr/sbin/downstream_manager (Rule
DOCSIS_DSMNGR14).
pcd: (213): Starting process /usr/sbin/downstream_manager (Rule
DOCSIS_DSMNGR13).
pcd: (213): Starting process /usr/sbin/downstream_manager (Rule
DOCSIS_DSMNGR12).
pcd: (213): Starting process /usr/sbin/downstream_manager (Rule
DOCSIS_DSMNGR11).
pcd: (213): Starting process /usr/sbin/downstream_manager (Rule
DOCSIS_DSMNGR10).
pcd: (213): Starting process /usr/sbin/downstream_manager (Rule
DOCSIS_DSMNGR9).
pcd: (213): Starting process /usr/sbin/downstream_manager (Rule
DOCSIS_DSMNGR8).
pcd: (213): Starting process /usr/sbin/downstream_manager (Rule
DOCSIS_DSMNGR7).
pcd: (213): Starting process /usr/sbin/downstream_manager (Rule
DOCSIS_DSMNGR6).
pcd: (213): Starting process /usr/sbin/downstream_manager (Rule
DOCSIS_DSMNGR5).
pcd: (213): Starting process /usr/sbin/downstream_manager (Rule
DOCSIS_DSMNGR4).
pcd: (213): Starting process /usr/sbin/downstream_manager (Rule
DOCSIS_DSMNGR3).
pcd: (213): Starting process /usr/sbin/downstream_manager (Rule
DOCSIS_DSMNGR2).
pcd: (213): Starting process /usr/sbin/downstream_manager (Rule
DOCSIS_DSMNGR1).
pcd: (213): Rule DOCSIS_DSMNGR4: Success (Process
/usr/sbin/downstream_manager (539)).
pcd: (213): Rule DOCSIS_DSMNGR19: Success (Process
/usr/sbin/downstream_manager (524)).
pcd: (213): Rule DOCSIS_DSMNGR13: Success (Process
/usr/sbin/downstream_manager (530)).
pcd: (213): Rule DOCSIS_DSMNGR24: Success (Process
/usr/sbin/downstream_manager (519)).
pcd: (213): Rule DOCSIS_DSMNGR9: Success (Process
/usr/sbin/downstream_manager (534)).
pcd: (213): Rule DOCSIS_DSMNGR21: Success (Process
/usr/sbin/downstream_manager (522)).
pcd: (213): Rule DOCSIS_DSMNGR10: Success (Process
/usr/sbin/downstream_manager (533)).
pcd: (213): Rule DOCSIS_DSMNGR15: Success (Process
/usr/sbin/downstream_manager (528)).
pcd: (213): Rule DOCSIS_DSMNGR18: Success (Process
/usr/sbin/downstream_manager (525)).
pcd: (213): Rule DOCSIS_DSMNGR20: Success (Process
/usr/sbin/downstream_manager (523)).
pcd: (213): Rule DOCSIS_DSMNGR14: Success (Process
/usr/sbin/downstream_manager (529)).
pcd: (213): Rule DOCSIS_DSMNGR23: Success (Process
/usr/sbin/downstream_manager (520)).
pcd: (213): Rule DOCSIS_DSMNGR16: Success (Process
/usr/sbin/downstream_manager (527)).
pcd: (213): Rule DOCSIS_DSMNGR8: Success (Process
/usr/sbin/downstream_manager (535)).
pcd: (213): Rule DOCSIS_DSMNGR7: Success (Process
/usr/sbin/downstream_manager (536)).
pcd: (213): Rule DOCSIS_DSMNGR22: Success (Process
/usr/sbin/downstream_manager (521)).
pcd: (213): Rule DOCSIS_DSMNGR17: Success (Process
/usr/sbin/downstream_manager (526)).
pcd: (213): Rule DOCSIS_DSMNGR6: Success (Process
/usr/sbin/downstream_manager (537)).
pcd: (213): Rule DOCSIS_DSMNGR3: Success (Process
/usr/sbin/downstream_manager (540)).
pcd: (213): Rule DOCSIS_DSMNGR11: Success (Process
/usr/sbin/downstream_manager (532)).
pcd: (213): Rule DOCSIS_DSMNGR12: Success (Process
/usr/sbin/downstream_manager (531)).
pcd: (213): Rule DOCSIS_DSMNGR2: Success (Process
/usr/sbin/downstream_manager (541)).
pcd: (213): Rule DOCSIS_DSMNGR5: Success (Process
/usr/sbin/downstream_manager (538)).
pcd: (213): Rule DOCSIS_DSMNGR1: Success (Process
/usr/sbin/downstream_manager (542)).
pcd: (213): Starting process /usr/sbin/upstream_manager (Rule
DOCSIS_USMNGR1).
pcd: (213): Starting process /usr/sbin/upstream_manager (Rule
DOCSIS_USMNGR2).
pcd: (213): Starting process /usr/sbin/upstream_manager (Rule
DOCSIS_USMNGR3).
pcd: (213): Starting process /usr/sbin/upstream_manager (Rule
DOCSIS_USMNGR4).
pcd: (213): Starting process /usr/sbin/upstream_manager (Rule
DOCSIS_USMNGR5).
pcd: (213): Starting process /usr/sbin/upstream_manager (Rule
DOCSIS_USMNGR6).
pcd: (213): Starting process /usr/sbin/upstream_manager (Rule
DOCSIS_USMNGR7).
pcd: (213): Starting process /usr/sbin/upstream_manager (Rule
DOCSIS_USMNGR8).
pcd: (213): Rule DOCSIS_USMNGR4: Success (Process
/usr/sbin/upstream_manager (546)).
pcd: (213): Rule DOCSIS_USMNGR6: Success (Process
/usr/sbin/upstream_manager (548)).
pcd: (213): Rule DOCSIS_USMNGR2: Success (Process
/usr/sbin/upstream_manager (544)).
pcd: (213): Rule DOCSIS_USMNGR3: Success (Process
/usr/sbin/upstream_manager (545)).
pcd: (213): Rule DOCSIS_USMNGR5: Success (Process
/usr/sbin/upstream_manager (547)).
pcd: (213): Rule DOCSIS_USMNGR7: Success (Process
/usr/sbin/upstream_manager (549)).
pcd: (213): Rule DOCSIS_USMNGR8: Success (Process
/usr/sbin/upstream_manager (550)).
pcd: (213): Rule DOCSIS_USMNGR1: Success (Process
/usr/sbin/upstream_manager (543)).
pcd: (213): Rule DOCSIS_MACDRIVER: Success (Process
/usr/sbin/docsis_mac_driver (497)).
pcd: (213): Starting process /usr/sbin/snmp_agent_cm (Rule
DOCSIS_SNMPAGENT).
pcd: (213): Starting process /usr/sbin/energy_manager_app (Rule DOCSIS_EM).
pcd: (213): Starting process /usr/sbin/bpi_auth (Rule DOCSIS_BPIAUTH).
pcd: (213): Rule DOCSIS_EM: Success (Process
/usr/sbin/energy_manager_app (552)).
pcd: (213): Rule DOCSIS_BPIAUTH: Success (Process /usr/sbin/bpi_auth (553)).
pcd: (213): Starting process /usr/sbin/bpi_tek (Rule DOCSIS_BPITEK).
pcd: (213): Starting process /usr/sbin/bpi_sa_map (Rule DOCSIS_BPISAMAP).
pcd: (213): Rule DOCSIS_BPISAMAP: Success (Process /usr/sbin/bpi_sa_map
(555)).
pcd: (213): Rule DOCSIS_BPITEK: Success (Process /usr/sbin/bpi_tek (554)).
******** SNMP get plugin /lib/snmplugins/liball_snmp_plugins.so ********
SHDB[551] DEBUG: 18
******** SNMP get plugin /lib/snmplugins/libplugin_snmp_htCMEmta.so ********
SNMPA_CreateSocketEntry : type 0, addr = 0, port = 0, ifname =
/var/tmp/cm_snmp_ctrl List = (nil)
Cntl Entry created
SNMPDBG:: SNMP_DH_initParams - 86 (pid=551): TRY: SNMP_DH_params.prime =
BN_new()
SNMPDBG:: SNMP_DH_initParams - 93 (pid=551): TRY: SNMP_DH_params.base =
BN_new()
SNMPDBG:: SNMP_DH_initParams - 100 (pid=551): TRY: EBufferPreLoad()
SNMPDBG:: SNMP_DH_initParams - 104 (pid=551): TRY: SNMP_DH_decodeParams()
SNMPDBG:: SNMP_DH_initParams - 113 (pid=551): TRY: BN_is_prime()
SNMPDBG:: SNMP_DH_initParams - 120 (pid=551): TRY: BN_set_word()
SNMPDBG:: SNMP_DH_initParams - 122 (pid=551): TRY: EBufferClean()
SNMPDBG:: SNMP_DH_initParams - 125 (pid=551): TRY: SNMP_DH_encodeParams()
SNMPDBG:: SNMP_DH_initParams - 152 (pid=551): DONE: SNMP_DH_initParams()
- stat 1
SNMPDBG:: agent_init - 265 (pid=551): DONE: agent_init()
SNMPA_CreateSocketEntry : type 1, addr = c0a86401, port = 161, ifname =
lan0 List = 0x68ec8
SNMPA_CreateSocketEntry : type 1, addr = c0a86401, port = 162, ifname =
lan0 List = 0x68ec8
pcd: (213): Rule DOCSIS_SNMPAGENT: Success (Process
/usr/sbin/snmp_agent_cm (551)).
pcd: (213): Starting process /usr/sbin/eventmgr_cm (Rule DOCSIS_EVENTMNGR).
pcd: (213): Rule DOCSIS_EVENTMNGR: Success (Process
/usr/sbin/eventmgr_cm (622)).
pcd: (213): Starting process /usr/sbin/docsis_mac_manager (Rule
DOCSIS_MACMANAGER).
INIT[485] DEBUG: [RSM]-Exit
INIT[485] INFO: RSM]-Get DocsInitNotify event, RegionId:-2
UTILS[625] TRACE: Capabilities configuration init Success
eRouter: Network interface initialized successfully
Autoconfiguration disabled for esafe0
eRouter: create proc
eRouter: create proc successfully
eRouter: Network interface registered successfully
UTILS[485] INFO: spawn process /sbin/insmod success
UTILS[485] TRACE: Changed 1 Links
Autoconfiguration disabled for erouter0
UTILS[485] TRACE: Changed 1 Links
UTILS[485] TRACE: No address matched.
UTILS[485] TRACE: Changed 1 Links
UTILS[654] TRACE: Capabilities configuration init Success
insmod: can't open '(null)': No such file or directory
UTILS[485] INFO: spawn process /sbin/insmod success
UTILS[485] TRACE: Changed -1 Links
UTILS[485] TRACE: Changed -1 Links
UTILS[485] TRACE: Failed to get dev index.
UTILS[485] TRACE: Utils_NetNlIfindexGetByName.
UTILS[485] ERROR: Delete Network Address Failed
UTILS[485] TRACE: Changed -1 Links
Commit Changes:
router_status 2 1
SHDB[485] DEBUG: SntpDb_SparserVerify
BOARD[485] INFO: GPIO 26 ioctl successully, value=0
BOARD[485] INFO: GPIO 27 ioctl successully, value=0
INIT[485] DEBUG: SHDB_EVENT_STATUS_EROUTER_INIT_ENTER!
[485]Check SHDB_EVENT_STATUS_WLAN_OPERATIONAL_ENTER(0)
PP Operation PP_EV_VPID_CREATED, vpid_handle=31
====> PP2K Ingress registered 0 [8030b41c] <=====
====> PP2K Egress registered 0 [8030b16c] <=====
pcd: (213): Rule DOCSIS_MACMANAGER: Success (ProPP Operation
PP_EV_VPID_CREATED, vpid_handle=30
cess /usr/sbin/d====> PP2K Ingress registered 0 [8030b41c] <=====
ocsis_mac_manager (623)).
====> PP2K Egress registered 0 [8030b16c] <=====
PP Operation PP_EV_VPID_CREATED, vpid_handle=29
pcd: (213): Rule DOCSIS_LASTRULE: Success.
pcd: (213): Starting process insmod (Rule PACM_MTANI).
pcd: (213): Starting process /usr/sbin/htxvendordb (Rule
DOCSIS_PROFILE_CHECK).
====> PP2K Ingress registered 0 [8030b41c] <=====
====> PP2K Egress registered 0 [8030b16c] <=====
PP Operation PP_EV_VPID_CREATED, vpid_handle=28
====> PP2K Ingress registered 0 [8030b41c] <=====
====> PP2K Egress registered 0 [8030b16c] <=====
PP Operation PP_EV_VPID_CREATED, vpid_handle=27
====> PP2K Ingress registered 0 [8030b41c] <=====
====> PP2K Egress registered 0 [8030b16c] <=====
PP Operation PP_EV_VPID_CREATED, vpid_handle=26
====> PP2K Ingress registered 0 [8030b41c] <=====
====> PP2K Egress registered 0 [8030b16c] <=====
PP Operation PP_EV_VPID_CREATED, vpid_handle=25
====> PP2K Ingress registered 0 [8030b41c] <=====
====> PP2K Egress registered 0 [8030b16c] <=====
PP Operation PP_EV_VPID_CREATED, vpid_handle=24
====> PP2K Ingress registered 0 [8030b41c] <=====
====> PP2K Egress registered 0 [8030b16c] <=====
PP Operation PP_EV_VPID_CREATED, vpid_handle=23
====> PP2K Ingress registered 0 [8030b41c] <=====
mtani: Network interface initialized successfully
====> PP2K Egress registered 0 [8030b16c] <=====
Autoconfiguration disabled for esafe1
mtani: Network interface registered successfully
pcd: (213): Rule PACM_MTANI: Success (Process insmod (660)).
pcd: (213): Starting process /usr/sbin/pacm_init (Rule PACM_INIT).
DHCPv4 Server for interface lan0 start, PID: 700
UTILS[485] INFO: spawn process /sbin/udhcpd success
INIT[485] DEBUG: [RSM]-Entry
Commit Changes:
router_status 19 0
router_status 3 1
l2sd0.2:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx
INIT[485] TRACE: trace:
l2sd0.3:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx
INIT[485] TRACE: trace:
l2sd0.4:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx
INIT[485] TRACE: trace:
l2sd0.5:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx
INIT[485] TRACE: trace:
l2sd0.6:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx
INIT[485] TRACE: trace:
l2sd0.7:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx
INIT[485] TRACE: trace:
l2sd0.8:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx
INIT[485] TRACE: trace:
l2sd0.9:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx
INIT[485] TRACE: trace:
Production config saved to NVRAM
Autoconfiguration disabled for mta0
UTILS[700] TRACE: Capabilities configuration init Success
STA MAC initialized to xx:xx:xx:xx:xx:xxPACM - Exec PACM_Prov_DbInit
PACM - Exec PACM_MSM_DbInit
PACM - Exec Security_InitDataBase
PACM - Exec SnmpDB_Init
[debug]set PACM_CONFIG_CERTIFICATION_MODE to FALSE
pcd: (213): Rule PACM_INIT: Success (Process /usr/sbin/pacm_init (697)).
pcd: (213): Starting process insmod (Rule VOICE_INSMXPMOD).
pcd: (213): Starting process /usr/sbin/pacm_vendor_app (Rule
PACM_VENDORAPP).
pcd: (213): Starting process /bin/sh (Rule PACM_SNMP_PLUGINCONF).
pcd: (213): Starting process /usr/sbin/pacm_security (Rule PACM_SECURITY).
pcd: (213): Starting process /usr/sbin/pacm_event_mgr (Rule PACM_EVENTMGR).
pcd: (213): Starting process /usr/sbin/pacm_doim (Rule PACM_DOIM).
SHDB[485] DEBUG: SntpDb_SparserVerify
INIT[485] DEBUG: SHDB_EVENT_STATUS_EROUTER_START_ENTER!
Error: Bridge port lbr0 does not exist
273@RtCore_UtilsLanMacAddrSet:ifname l2sd0, ifindex 0
/bin/sh: htxConfigLoginAccount.sh: not found
/bin/sh: can't create /proc/htx_IGMP_Settings: nonexistent directory
/bin/sh: can't create /proc/htx_IGMP_Settings: nonexistent directory
UTILS[485] TRACE: Changed 1 Links
UTILS[485] TRACE: Changed 1 Links
Warning: TIMER1 may already be in use
MXP_TMR: Calibrating MXP Timer... Ticks/sec=200
Starting MXP timer
pcd: (213): Rule DOCSIS_PROFILE_CHECK: Success (Process
/usr/sbin/htxvendordb (661)).
pcd: (213): Rule PACM_SNMP_PLUGINCONF: Success (Process /bin/sh (726)).
pcd: (213): Starting process /usr/sbin/pacm_snmp_agent (Rule PACM_SNMP).
pcd: (213): Rule PACM_EVENTMGR: Success (Process
/usr/sbin/pacm_event_mgr (728)).
Sync start timer1 (142) to timer0 (2500052) diff 2499910 required 2500000
MXP module loaded
pcd: (213): Rule VOICE_INSMXPMOD: Success (Process insmod (724)).
pcd: (213): Starting process insmod (Rule VOICE_INSMXPMEM).
info, udhcp server (v0.9.7) started
MXP memory module loaded
pcd: (213): Rule VOICE_INSMXPMEM: Success (Process insmod (783)).
pcd: (213): Starting process insmod (Rule VOICE_INSDSPMOD).
Autoconfiguration disabled for l2sd0
Autoconfiguration disabled for l2sd0.100
Autoconfiguration disabled for l2sd0.101
Autoconfiguration disabled for l2sd0.102
Autoconfiguration disabled for l2sd0.103
Autoconfiguration disabled for l2sd0.104
Autoconfiguration disabled for l2sd0.105
Autoconfiguration disabled for l2sd0.106
pcd: (213): Rule PACM_DOIM: Success (Process /usr/sbin/pacm_doim (729)).
Autoconfiguration disabled for l2sd0.107
Autoconfiguration disabled for l2sd0.999
Autoconfiguration disabled for l2sd0.4093
info, interface: lan0, start : c0a8640a end : c0a864c8

UTILS[485] TRACE: Changed 1 Links
UTILS[485] TRACE: Changed 1 LinksCould not add a new ALT entry for MAC
xx-xx-xx-xx-xx-xx

UTILS[485] TRACE: Changed 1 Links
UTILS[485] TRACE: Deleted 1 address.
PP Operation PP_EV_VPID_CREATED, vpid_handle=22
====> PP2K Ingress registered 0 [8030b41c] <=====
====> PP2K Egress registered 0 [8030b16c] <=====
INIT[485] DEBUG: LAN interface 0 0
INIT[485] DEBUG: LAN interface l2sd0.2 Enabled, mac: xx:xx:xx:xx:xx:xx
INIT[485] INFO: Add address[192.168.1.2/24] to LAN If l2sd0.2 successfully
INIT[485] INFO: Add address[92.111.37.121/29] to LAN If l2sd0.2 successfully
INIT[485] INFO: Add address[192.168.100.1/24] to LAN If l2sd0.2 successfully
INIT[485] INFO: Add address[192.168.254.252] to LAN If l2sd0.2 successfully
83: Disabling PUMA DSPSS
86: Taking PUMA DSPSS IN RESET
INIT[485] INFO: Add address[2001::100:1] to LAN If l2sd0.2 successfully
INIT[485] INFO: Add address[2002::1/64] to LAN If l2sd0.2 successfully
INIT[485] INFO: Add address[fe80::8694:8cff:fe45:e6a2/64] to LAN If
l2sd0.2 successfully
pcd: (213): Rule PACM_VENDORAPP: Success (Process
/usr/sbin/pacm_vendor_app (725)).
INIT[485] INFO: Add address[xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/64]
to LAN If l2sd0.2 successfully
Autoconfiguration disabled for l2sd0.2
UTILS[485] TRACE: Changed 1 Links
273@RtCore_UtilsLanMacAddrSet:ifname l2sd0, ifindex 1
UTILS[485] TRACE: Changed 1 Links
Could not add a new ALT entry for MAC xx-xx-xx-xx-xx-xx
HW_DSP module loaded
UTILS[485] TRACE: Changed 1 Links
pcd: (213): Rule VOICE_INSDSPMOD: Success (Process insmod (786)).
pcd: (213): Starting process insmod (Rule VOICE_INSTELEHAL).
UTILS[485] TRACE: No address matched.
PP Operation PP_EV_VPID_CREATED, vpid_handle=21
====> PP2K Ingress registered 0 [8030b41c] <=====
====> PP2K Egress registered 0 [8030b16c] <=====
INIT[485] DEBUG: LAN interface 1 0
INIT[485] DEBUG: LAN interface l2sd0.3 Enabled, mac: xx:xx:xx:xx:xx:xx
INIT[485] INFO: Add address[192.168.101.1/24] to LAN If l2sd0.3 successfully
INIT[485] INFO: Add address[192.168.100.1/24] to LAN If l2sd0.3 successfully
INIT[485] INFO: Add address[192.168.254.252] to LAN If l2sd0.3 successfully
INIT[485] INFO: Add address[2001::100:1] to LAN If l2sd0.3 successfully
INIT[485] INFO: Add address[xxxx::xxxx:xxxx:xxxx:xxxx/64] to LAN If
l2sd0.3 successfully
TIUHAL: Finished TDM configuration
TIUHAL using DOCSIS clock source
pcd: (213): Rule VOICE_INSTELEHAL: Success (Process insmod (831)).
pcd: (213): Starting process insmod (Rule VOICE_INSVOICENI).
INIT[485] INFO: Add address[xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/64]
to LAN If l2sd0.3 successfully
Autoconfiguration disabled for l2sd0.3
UTILS[485] TRACE: Changed 1 Links
273@RtCore_UtilsLanMacAddrSet:ifname l2sd0, ifindex 2
UTILS[485] TRACE: Changed 1 Links
UTILS[485] TRACECould not add a new ALT entry for MAC xx-xx-xx-xx-xx-xx
: Changed 1 Links

PAL_cppi4Init : domain is 0, cfg ptr is 0x00000000
PP Operation PP_EV_PID_CREATED, pid_handle=15 @ vni0 device
UTILS[485] TRACE: No address matched.
pcd: (213): Rule VOICE_INSVOICENI: Success (Process insmod (838)).
pcd: (213): Starting process /sbin/ifconfig (Rule VOICE_NET).
PP Operation PP_EV_VPID_CREATED, vpid_handle=20
====> PP2K Ingress registered 0 [8030b41c] <=====
====> PP2K Egress registered 0 [8030b16c] <=====
INIT[485] DEBUG: LAN interface 2 0
INIT[485] DEBUG: LAN interface l2sd0.4 Enabled, mac: xx:xx:xx:xx:xx:xx
INIT[485] INFO: Add address[192.168.102.1/24] to LAN If l2sd0.4 successfully
INIT[485] INFO: Add address[192.168.100.1/24] to LAN If l2sd0.4 successfully
INIT[485] INFO: Add address[192.168.254.252] to LAN If l2sd0.4 successfully
******** PACM SNMP get plugin
/fss/gw/lib/libpacm_plugin_snmp_htmtadev.so ********
pcd: (213): Rule PACM_SECURITY: Success (Process /usr/sbin/pacm_security
(727)).
INIT[485] INFO: Add address[2001::100:1] to LAN If l2sd0.4 successfully
INIT[485] INFO: Add address[xxxx::xxxx:xxxx:xxxx:xxxx/64] to LAN If
l2sd0.4 successfully
INIT[485] INFO: Add address[xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/64]
to LAN If l2sd0.4 successfully
Autoconfiguration disabled for l2sd0.4
UTILS[485] TRACE: Changed 1 Links
273@RtCore_UtilsLanMacAddrSet:ifname l2sd0, ifindex 3
UTILS[485] TRACE: Changed 1 Links
UTILS[485] TRACECould not add a new ALT entry for MAC xx-xx-xx-xx-xx-xx
: Changed 1 Links
UTILS[485] TRACE: No address matched.
PP Operation PP_EV_VPID_CREATED, vpid_handle=19
******** PACM SNMP get plugin /fss/gw/lib/libpacm_plugin_snmp_htsip.so
********
====> PP2K Ingress registered 0 [8030b41c] <=====
====> PP2K Egress registered 0 [8030b16c] <=====
INIT[485] DEBUG: LAN interface 3 0
INIT[485] DEBUG: LAN interface l2sd0.5 Enabled, mac: xx:xx:xx:xx:xx:xx
INIT[485] INFO: Add address[192.168.103.1/24] to LAN If l2sd0.5 successfully
INIT[485] INFO: Add address[192.168.100.1/24] to LAN If l2sd0.5 successfully
INIT[485] INFO: Add address[192.168.254.252] to LAN If l2sd0.5 successfully
INIT[485] INFO: Add address[2001::100:1] to LAN If l2sd0.5 successfully
INIT[485] INFO: Add address[xxxx::xxxx:xxxx:xxxx:xxxx/64] to LAN If
l2sd0.5 successfully
INIT[485] INFO: Add address[xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/64]
to LAN If l2sd0.5 successfully
PP Operation PP_EV_VPID_CREATED, vpid_handle=18
====> PP2K Ingress registered 0 [8030b41c] <=====
====> PP2K Egress registered 0 [8030b16c] <=====
Autoconfiguration disabled for vni0
pcd: (213): Rule VOICE_NET: Success (Process /sbin/ifconfig (848)).
pcd: (213): Starting process udevstart (Rule VOICE_UDEVSTART).
Autoconfiguration disabled for l2sd0.5
UTILS[485] TRACE: Changed 1 Links273@RtCore_UtilsLanMacAddrSet:ifname
l2sd0, ifindex 4

UTILS[485] TRACE: Changed 1 Links
UTILS[485] TRACECould not add a new ALT entry for MAC xx-xx-xx-xx-xx-xx
: Changed 1 Links
UTILS[485] TRACE: No address matched.
PP Operation PP_EV_VPID_CREATED, vpid_handle=17
====> PP2K Ingress registered 0 [8030b41c] <=====
====> PP2K Egress registered 0 [8030b16c] <=====
INIT[485] DEBUG: LAN interface 4 0
INIT[485] DEBUG: LAN interface l2sd0.6 Enabled, mac: xx:xx:xx:xx:xx:xx
INIT[485] INFO: Add address[192.168.104.1/24] to LAN If l2sd0.6 successfully
INIT[485] INFO: Add address[192.168.100.1/24] to LAN If l2sd0.6 successfully
INIT[485] INFO: Add address[192.168.254.252] to LAN If l2sd0.6 successfully
INIT[485] INFO: Add address[2001::100:1] to LAN If l2sd0.6 successfully
Processing configuration file...
Found command: sysdescr eMTA SNMP Agent
Found command: read-community public
Found command: write-community private
Found command: trap-community SNMP-trap
Found command: nv-file /etc/snmp_mta_nv.txt
Hit EOF of config file


****HOST INFORMATION****
sysDescr is "eMTA SNMP Agent"
sysContact is "Hitron Technologies, Inc."
sysLocation is "No.1-8, Lihsin 1st Rd., HsinChu Science Park, HsinChu,
Taiwan 300, R.O.C."
System Boot time was Thu Jan 1 00:01:15 1970
System object identifier has 14 components:
0.0.0.0.0.0.0.0.0.0.0.0.0.0.


****SNMP AGENT INFORMATION****
Community names:
Read: public
Write: private
Trap: SNMP-trap
nv-file: /etc/snmp_mta_nv.txt


SNMPA_CreateSocketEntry : type 0, addr = 0, port = 0, ifname =
/var/tmp/mta_snmp_ctrl List = (nil)
Cntl Entry created
INIT[485] INFO: Add address[xxxx::xxxx:xxxx:xxxx:xxxx/64] to LAN If
l2sd0.6 successfully
INIT[485] INFO: Add address[xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/64]
to LAN If l2sd0.6 successfully
Autoconfiguration disabled for l2sd0.6
UTILS[485] TRACE: Changed 1 Links
273@RtCore_UtilsLanMacAddrSet:ifname l2sd0, ifindex 5
UTILS[485] TRACE: Changed 1 Links
UTILS[485] TRACE: Changed 1 Links
Could not add a new ALT entry for MAC xx-xx-xx-xx-xx-xx
pcd: (213): Rule VOICE_UDEVSTART: Success (Process udevstart (893)).
pcd: (213): Starting process /usr/sbin/ggncs (Rule VOICE_GGAPP).
UTILS[485] TRACE: No address matched.
PP Operation PP_EV_VPID_CREATED, vpid_handle=16
====> PP2K Ingress registered 0 [8030b41c] <=====
====> PP2K Egress registered 0 [8030b16c] <=====
INIT[485] DEBUG: LAN interface 5 0
INIT[485] DEBUG: LAN interface l2sd0.7 Enabled, mac: xx:xx:xx:xx:xx:xx
INIT[485] INFO: Add address[192.168.105.1/24] to LAN If l2sd0.7 successfully
SNMPDBG:: SNMP_DH_initParams - 86 (pid=780): TRY: SNMP_DH_params.prime =
BN_new()
SNMPDBG:: SNMP_DH_initParams - 93 (pid=780): TRY: SNMP_DH_params.base =
BN_new()
SNMPDBG:: SNMP_DH_initParams - 100 (pid=780): TRY: EBufferPreLoad()
SNMPDBG:: SNMP_DH_initParams - 104 (pid=780): TRY: SNMP_DH_decodeParams()
SNMPDBG:: SNMP_DH_initParams - 113 (pid=780): TRY: BN_is_prime()
INIT[485] INFO: Add address[192.168.100.1/24] to LAN If l2sd0.7 successfully
INIT[485] INFO: Add address[192.168.254.252] to LAN If l2sd0.7 successfully
INIT[485] INFO: Add address[2001::100:1] to LAN If l2sd0.7 successfully
INIT[485] INFO: Add address[xxxx::xxxx:xxxx:xxxx:xxxx/64] to LAN If
l2sd0.7 successfully
INIT[485] INFO: Add address[xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/64]
to LAN If l2sd0.7 successfully
Autoconfiguration disabled for l2sd0.7
UTILS[485] TRACE: Changed 1 Links
273@RtCore_UtilsLanMacAddrSet:ifname l2sd0, ifindex 6
UTILS[485] TRACE: Changed 1 Links
UTILS[485] TRACECould not add a new ALT entry for MAC xx-xx-xx-xx-xx-xx
: Changed 1 Links
UTILS[485] TRACE: No address matched.
PP Operation PP_EV_VPID_CREATED, vpid_handle=15
====> PP2K Ingress registered 0 [8030b41c] <=====
====> PP2K Egress registered 0 [8030b16c] <=====
INIT[485] DEBUG: LAN interface 6 0
INIT[485] DEBUG: LAN interface l2sd0.8 Enabled, mac: xx:xx:xx:xx:xx:xx
INIT[485] INFO: Add address[192.168.106.1/24] to LAN If l2sd0.8 successfully
INIT[485] INFO: Add address[192.168.100.1/24] to LAN If l2sd0.8 successfully
INIT[485] INFO: Add address[192.168.254.252] to LAN If l2sd0.8 successfully
INIT[485] INFO: Add address[2001::100:1] to LAN If l2sd0.8 successfully
INIT[485] INFO: Add address[xxxx::xxxx:xxxx:xxxx:xxxx/64] to LAN If
l2sd0.8 successfully
INIT[485] INFO: Add address[xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/64]
to LAN If l2sd0.8 successfully
Autoconfiguration disabled for l2sd0.8
UTILS[485] TRACE: Changed 1 Links
273@RtCore_UtilsLanMacAddrSet:ifname l2sd0, ifindex 7
UTILS[485] TRACE: Changed 1 Links
UTILS[485] TRACE: Changed 1 LinkCould not add a new ALT entry for MAC
xx-xx-xx-xx-xx-xx
s
UTILS[485] TRACE: No address matched.
PP Operation PP_EV_VPID_CREATED, vpid_handle=14
====> PP2K Ingress registered 0 [8030b41c] <=====
====> PP2K Egress registered 0 [8030b16c] <=====
INIT[485] DEBUG: LAN interface 7 0
INIT[485] DEBUG: LAN interface l2sd0.9 Enabled, mac: xx:xx:xx:xx:xx:xx
INIT[485] INFO: Add address[192.168.107.1/24] to LAN If l2sd0.9 successfully
INIT[485] INFO: Add address[192.168.100.1/24] to LAN If l2sd0.9 successfully
INIT[485] INFO: Add address[192.168.254.252] to LAN If l2sd0.9 successfully
INIT[485] INFO: Add address[2001::100:1] to LAN If l2sd0.9 successfully
INIT[485] INFO: Add address[xxxx::xxxx:xxxx:xxxx:xxxx/64] to LAN If
l2sd0.9 successfully
INIT[485] INFO: Add address[xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx/64]
to LAN If l2sd0.9 successfully
Autoconfiguration disabled for l2sd0.9
Info: Device l2sd0.4093 has no packet handler installed
Info: Device l2sd0.4093 has no egress hook installed
UTILS[485] TRACE: Changed 1 Links
PP Operation PP_EV_VPID_CREATED, vpid_handle=13
====> PP2K Ingress registered 0 [8030b41c] <=====
====> PP2K Egress registered 0 [8030b16c] <=====
UTILS[485] TRACE: Changed 1 Links
UTILS[485] TRACE: No address matched.
Autoconfiguration disabled for l2sd0.4093
UTILS[485] TRACE: Changed 1 Links
INIT[485] INFO: DHCPv4 Configuration for interface l2sd0.2 Stopped
info, Received SIGTERM
UTILS[485] TRACE: Wait pid(700) failed: No child processes
UTILS[485] INFO: spawn process /sbin/udhcpd success
INIT[485] DEBUG: DHCPv4 Server start, PID: 963, wait:0
UTILS[963] TRACE: Capabilities configuration init Success
info, udhcp server (v0.9.7) started
SNMPDBG:: SNMP_DH_initParams - 120 (pid=780): TRY: BN_set_word()
SNMPDBG:: SNMP_DH_initParams - 122 (pid=780): TRY: EBufferClean()
SNMPDBG:: SNMP_DH_initParams - 125 (pid=780): TRY: SNMP_DH_encodeParams()
SNMPDBG:: SNMP_DH_initParams - 152 (pid=780): DONE: SNMP_DH_initParams()
- stat 1
SNMPDBG:: agent_init - 265 (pid=780): DONE: agent_init()
pcd: (213): Rule PACM_SNMP: Success (Process /usr/sbin/pacm_snmp_agent
(780)).
info, interface: l2sd0.3, start : c0a8650a end : c0a865c8

info, interface: l2sd0.4, start : c0a8660a end : c0a866c8

info, interface: l2sd0.5, start : c0a8670a end : c0a867c8

info, interface: l2sd0.6, start : c0a8680a end : c0a868c8

info, interface: l2sd0.7, start : c0a8690a end : c0a869c8

info, interface: l2sd0.8, start : c0a86a0a end : c0a86ac8

info, interface: l2sd0.9, start : c0a86b0a end : c0a86bc8

UTILS[485] INFO: spawn process /fss//gw/usr/sbin/dnsmasq success
INIT[485] INFO: IPv4 DNS Proxy Start, PID: 985
INIT[485] DEBUG: WAN interface 0 Enable
INIT[485] DEBUG: WAN interface 1 Enable
UTILS[485] ERROR: Open data file
/proc/sys/net/ipv4/conf/dummy0/force_igmp_version error.
UTILS[485] ERROR: Open data file
/proc/sys/net/ipv6/conf/dummy0/force_mld_version error.
UTILS[485] ERROR: Open data file
/proc/sys/net/ipv4/conf/dummy0/force_igmp_version error.
UTILS[485] ERROR: Open data file
/proc/sys/net/ipv6/conf/dummy0/force_mld_version error.
UTILS[485] ERROR: Open data file
/proc/sys/net/ipv4/conf/dummy0/force_igmp_version error.
UTILS[485] ERROR: Open data file
/proc/sys/net/ipv6/conf/dummy0/force_mld_version error.
UTILS[485] ERROR: Open data file
/proc/sys/net/ipv4/conf/dummy0/force_igmp_version error.
UTILS[485] ERROR: Open data file
/proc/sys/net/ipv6/conf/dummy0/force_mld_version error.
UTILS[485] ERROR: Open data file
/proc/sys/net/ipv4/conf/dummy0/force_igmp_version error.
UTILS[485] ERROR: Open data file
/proc/sys/net/ipv6/conf/dummy0/force_mld_version error.
UTILS[485] ERROR: Open data file
/proc/sys/net/ipv4/conf/dummy0/force_igmp_version error.
UTILS[485] ERROR: Open data file
/proc/sys/net/ipv6/conf/dummy0/force_mld_version error.
UTILS[485] ERROR: Open data file
/proc/sys/net/ipv4/conf/dummy0/force_igmp_version error.
UTILS[485] ERROR: Open data file
/proc/sys/net/ipv6/conf/dummy0/force_mld_version error.
UTILS[485] ERROR: Open data file
/proc/sys/net/ipv4/conf/dummy0/force_igmp_version error.
UTILS[485] ERROR: Open data file
/proc/sys/net/ipv6/conf/dummy0/force_mld_version error.
UTILS[485] ERROR: Open data file
/proc/sys/net/ipv4/conf/dummy0/force_igmp_version error.
UTILS[485] ERROR: Open data file
/proc/sys/net/ipv6/conf/dummy0/force_mld_version error.
FIREWALL[485] DEBUG: Generate raw-save file success
FIREWALL[485] DEBUG: Generate nat-save file success
FIREWALL[485] DEBUG: Generate mangle-save file success
FIREWALL[485] DEBUG: Generate filter-save file success
UTILS[985] TRACE: Capabilities configuration init Success
UTILS[1007] TRACE: Capabilities configuration init Success
NAT Table update all sessions flushed
tcb_alloc: task id=1,name=mxproot,busy=1
tcb_alloc: task id=2,name=XSPY,busy=1
tcb_alloc: task id=3,name=XTELNET,busy=1
tcb_alloc: task id=4,name=ROOT,busy=1
Initializing signal_handler
>>>> rootInit <<<<<
Creating Golden Gateway application...
Registtcb_alloc: task id=5,name=NWIF01,busy=1
tcb_alloc: task id=6,name=DQMM,busy=1
ered with TIUHAL version 3
TID(M) 0 is VE88702PTC014
Returning tid_type(slot=0) tid_type.id=12tcb_alloc: task
id=7,name=ISU,busy=1
tcb_alloc: task id=8,name=VIM,busy=1
tcb_alloc: task id=9,name=CCU,busy=1
tcb_alloc: task id=10,name=RTCP,busy=1
tcb_alloc: task id=11,name=PMA,busy=1
tcb_alloc: task id=12,name=DEX,busy=1
DSPMOD query DSP address syscall: DSP Start address = 0x5FE00000
83: Disabling PUMA DSPSS
86: Taking PUMA DSPSS IN RESET
1 tid_type.drvr=0x25d5ec
TIUHW_SYS: poll_on_intr_support=1, poll_on_intr_enabled=1
TIUHW_SYS: MAS_CFG_MULTI_SLIC_SYNC_INIT_SUPPORT = FALSE
Returning tid_type(slot=0) tid_type.id=121 tid_ttcb_alloc: task
id=13,name=AMU,busy=1
tcb_alloc: task id=14,name=SPU,busy=1
tcb_alloc: task id=15,name=SFU,busy=1
tcb_alloc: task id=16,name=ATPM,busy=1
tcb_alloc: task id=17,name=SSMUTMR,busy=1
tcb_alloc: task id=18,name=SSMU,busy=1
tcb_alloc: task id=19,name=PSU,busy=1
tcb_alloc: task id=20,name=NMM,busy=1
tcb_alloc: task id=21,name=VOIMFE,busy=1
ype.drvr=0x25d5ec
VP88702: tid_init() tid_type tcb_free: task id=4, name=ROOT
121, tid_ndx 0, base_tcid 0
VP88702: SLIC termination type 10
83: Disabling PUMA DSPSS

tiuhw_setup_ch86: Taking PUMA DSPSS IN RESET
ipselect: cs for tcid 0 = 0 fxo: 33
tiuhw_setup_chipselect: cs for tcid 1 = 0 fxo: 33
Loading dsp image: /lib/dspimage.ld
DSP external memory mapped to 0x2B678000 (User Sp) = 0x5FE00000 (Kernel Sp)
dimhw_init_dsp: dpr_base mapped to 0x2A878000 (User sp)
tiuo_get_hw_inst 0
tiuo_hw_init, tcid 0, timeslot 1
tiuo_get_hw_inst 1
tiuo_hw_init, tcid 1, timeslot 2
FXS FXR = 16
Attempting to delete TCB: 4
XtDelete called
lmxp_tcb_free called for 4
pcd: (213): Rule VOICE_GGAPP: Success (Process /usr/sbin/ggncs (916)).
pcd: (213): Rule VOICE_LASTRULE: Success.
pcd: (213): Rule PACM_INITDONE: Success.
pcd: (213): Starting process /usr/sbin/pacm_mta_control (Rule PACM_MTACTRL).
pcd: (213): Rule PACM_MTACTRL: Success (Process
/usr/sbin/pacm_mta_control (1052)).
pcd: (213): Rule PACM_LASTRULE: Success.
pcd: (213): Starting process /usr/sbin/alarm_clock (Rule PACM_WAKE_UP_CALL).
pcd: (213): Rule PACM_WAKE_UP_CALL: Success (Process
/usr/sbin/alarm_clock (1069)).
NAT Table update all sessions flushed
UTILS[485] INFO: spawn process /fss//gw/usr/sbin/iptables-restore success
FIREWALL[485] DEBUG: Generate raw-save file success
FIREWALL[485] DEBUG: Generate mangle-save file success
FIREWALL[485] DEBUG: Generate filter-save file success
83: Enabling PUMA DSPSS
86: Taking PUMA DSPSS OUT of RESET
UTILS[1094] TRACE: Capabilities configuration init Success
UTILS[485] INFO: spawn process /fss//gw/usr/sbin/ip6tables-restore success
UTILS[1117] TRACE: Capabilities configuration init Success
UTILS[485] INFO: spawn process /fss//gw/usr/sbin/router_snmp_agent success
SERVICES[485] INFO: Wait for SNMP Agent startup...
SERVICES[485] INFO: Wait for SNMP Agent startup...
SERVICES[485] INFO: Wait for SNMP Agent startup...
SERVICES[485] INFO: Wait for SNMP Agent startup...
SERVICES[485] INFO: Wait for SNMP Agent startup...
SERVICES[485] INFO: Wait for SNMP Agent startup...
SERVICES[485] INFO: Wait for SNMP Agent startup...
SERVICES[485] INFO: Wait for SNMP Agent startup...
SERVICES[485] INFO: Wait for SNMP Agent startup...
SERVICES[485] INFO: Wait for SNMP Agent startup...
SERVICES[485] INFO: Wait for SNMP Agent startup...
SERVICES[485] INFO: Wait for SNMP Agent startup...
SERVICES[485] INFO: Wait for SNMP Agent startup...
SERVICES[485] INFO: Wait for SNMP Agent startup...
SERVICES[485] INFO: Wait for SNMP Agent startup...
SERVICES[485] INFO: Wait for SNMP Agent startup...
SERVICES[485] INFO: Wait for SNMP Agent startup...
SHDB[1117] DEBUG: 18
GW-SNMP process starting....
GW-SNMP engineId = 000021930384948c45e6a301
SNMPA_CreateSocketEntry : type 0, addr = 0, port = 0, ifname =
/var/tmp/gw_snmp_ctrl List = (nil)
Cntl Entry created
SNMPDBG:: SNMP_DH_initParams - 86 (pid=1117): TRY: SNMP_DH_params.prime
= BN_new()
SNMPDBG:: SNMP_DH_initParams - 93 (pid=1117): TRY: SNMP_DH_params.base =
BN_new()
SNMPDBG:: SNMP_DH_initParams - 100 (pid=1117): TRY: EBufferPreLoad()
SNMPDBG:: SNMP_DH_initParams - 104 (pid=1117): TRY: SNMP_DH_decodeParams()
SNMPDBG:: SNMP_DH_initParams - 113 (pid=1117): TRY: BN_is_prime()
SERVICES[485] INFO: Wait for SNMP Agent startup...
SERVICES[485] INFO: SNMP Agent Start, PID: 1117.
WebServer already running!
UTILS[485] INFO: spawn process /fss//gw/usr/sbin/utelnetd success
SERVICES[485] INFO: Start telnetd PID : 1142.
UTILS[1142] TRACE: Capabilities configuration init Success
[485]Set SHDB_EVENT_STATUS_WLAN_OPERATIONAL_ENTER
WIRELESS[485] DEBUG: Start wps app process
[1064@_WlsDb_WirelessInit]Do wireless initialiaze in background
UTILS[485] INFO: spawn process /fss//gw/usr/sbin/wls_wpsapp success
[485]Check SHDB_EVENT_STATUS_WLAN_OPERATIONAL_ENTER(1)
wireless event: operational!
cpu port vid list:2 3 4 5 6 7 8 9 4095
UTILS[1146] TRACE: Capabilities configuration init Success
SNMPDBG:: SNMP_DH_initParams - 120 (pid=1117): TRY: BN_set_word()
SNMPDBG:: SNMP_DH_initParams - 122 (pid=1117): TRY: EBufferClean()
SNMPDBG:: SNMP_DH_initParams - 125 (pid=1117): TRY: SNMP_DH_encodeParams()
SNMPDBG:: SNMP_DH_initParams - 152 (pid=1117): DONE:
SNMP_DH_initParams() - stat 1
SNMPDBG:: agent_init - 265 (pid=1117): DONE: agent_init()
pcd: (213): Warning: Got READY event, but cannot find an associated rule
to pid 1117.
PCD API: ICC wait return value -522
WIRELESS[1144] DEBUG: [Trace]: 2986@WlsDb_VlanIfAddrSet, set
192.168.1.254/24 to vid 2
WIRELESS[1144] DEBUG: [Trace]: 2986@WlsDb_VlanIfAddrSet, set
192.168.101.254/24 to vid 3
WIRELESS[1144] DEBUG: [Trace]: 2986@WlsDb_VlanIfAddrSet, set
192.168.102.254/24 to vid 4
WIRELESS[1144] DEBUG: [Trace]: 2986@WlsDb_VlanIfAddrSet, set
192.168.103.254/24 to vid 5
WIRELESS[1144] DEBUG: [Trace]: 2986@WlsDb_VlanIfAddrSet, set
192.168.104.254/24 to vid 6
WIRELESS[1144] DEBUG: [Trace]: 2986@WlsDb_VlanIfAddrSet, set
192.168.105.254/24 to vid 7
WIRELESS[1144] DEBUG: [Trace]: 2986@WlsDb_VlanIfAddrSet, set
192.168.106.254/24 to vid 8
utelnetd: starting
port: 23; interface: any
SHDB[1142] DEBUG: 18
WIRELESS[1144] DEBUG: [Trace]: 2986@WlsDb_VlanIfAddrSet, set
192.168.107.254/24 to vid 9
WlsDb_RadioSRLSet 0
WlsDb_RadioLRLSet 0
WlsDb_RadioOutPowerSet 0
[1079@_WlsDb_WirelessInit] Trace
mac_list:
SHDB[1146] DEBUG: 18
mac_list:
mac_list:
mac_list:
mac_list:
PUMA6_MDIO: WARNING! l2switch_mdio_lock may be dead lock now, so unlock
it enforcedly.
SERVICES[485] INFO: Pform_L2switchPortsEnable
mac_list:
mac_list:
mac_list:
[1083@_WlsDb_WirelessInit] Trace
[236@main] Trace
INIT[485] DEBUG: [RSM]-Wait for Docsis Config file for ESAFE Notify
[41@ExecCmdList] Trace
[367@main] Trace
WIRELESS[1144] DEBUG: [Trace]: 2986@WlsDb_VlanIfAddrSet, set
192.168.1.254/24 to vid 2
WIRELESS[1144] DEBUG: [Trace]: 2986@WlsDb_VlanIfAddrSet, set
192.168.101.254/24 to vid 3
WIRELESS[1144] DEBUG: [Trace]: 2986@WlsDb_VlanIfAddrSet, set
192.168.102.254/24 to vid 4
WIRELESS[1144] DEBUG: [Trace]: 2986@WlsDb_VlanIfAddrSet, set
192.168.103.254/24 to vid 5
WIRELESS[1144] DEBUG: [Trace]: 2986@WlsDb_VlanIfAddrSet, set
192.168.104.254/24 to vid 6
WIRELESS[1144] DEBUG: [Trace]: 2986@WlsDb_VlanIfAddrSet, set
192.168.105.254/24 to vid 7
WIRELESS[1144] DEBUG: [Trace]: 2986@WlsDb_VlanIfAddrSet, set
192.168.106.254/24 to vid 8
WIRELESS[1144] DEBUG: [Trace]: 2986@WlsDb_VlanIfAddrSet, set
192.168.107.254/24 to vid 9
WlsDb_RadioSRLSet 0
WlsDb_RadioLRLSet 0
WlsDb_RadioOutPowerSet 0
[1079@_WlsDb_WirelessInit] Trace
mac_list:
mac_list:
mac_list:
mac_list:
mac_list:
mac_list:
mac_list:
mac_list:
[1083@_WlsDb_WirelessInit] Trace
debug: 5G cmdlist end
[236@main] Trace
[41@ExecCmdList] Trace
[367@main] Trace
Call radio(0) reload!
[1096@_WlsDb_WirelessInit]Wireless initialiaze complete.


Hmmm, kunnen we hier wat mee?

Groet!

[N. Coesel]

Op 10/12/2015 om 10:12 PM schreef Ano:

> Load U-Boot from eMMC/NAND Flash
> eMMC/NAND copy from 0x03C04000 to 0x59FB0000 (len:262144).
> Done.

> Manufacturer ID: 0xFF
> Type: 0xFF
> Density: 0xFF
> Extended ID: {0xFF, 0xFF}
> failed to probe Flash (bank 0)
> Error: failed to probe Flash
> Flash: 0 kB
> MMC: sdhci_puma6: 0
> MMC info:
> Manufacturer ID: 0
> OEM ID: 0
> Name: MMC128
> MMC version 4.4
> High Capacity: No
> Dual Data Rate (DDR): No
> Bus Width: 8-bit
> Clock: 50000000
> Rd Block Len: 512
> Capacity: 112.4 MB (117833728 bytes)
> In: serial
> Out: serial
> Err: serial

eMMC= SD kaartje in een chip die je op de print kunt solderen. Misschien
dat er in de Uboot ondersteuning zit voor het filesystem op het eMMC
kaartje. Dan kun je de password hash van het root account vervangen en
als root inloggen (eventueel een seriele terminal aanzetten).

Anders proberen de ARM soc in reset te houden en een USB SD kaart reader
met hele korte draadjes op de eMMC lijnen aan te sluiten. Dan kun je de
eMMC mounten op een Linux systeem en daarmee e.e.a. open zetten.

[Ano]

Ik heb overigens al wel een 'admin' account om via de webinterface in te
loggen op het modem.

Maar waar zou de Spansion 1 GB chip gebleven zijn? Er wordt wel
gesproken over een "eMMC" maar ik zie geen melding van de Spansion chip
in bovenstaande output. Wel iets van 'unsupported flash' maar dat lijkt
toch die MMC128 te zijn.
Mijn ervaring met eerdere modems en routers van Alcatel/Thomson en
Linksys was dat zo'n Spansion NAND flash de plek was waar de firmware
opstond. Ik denk dat die MMC128 misschien te klein daarvoor is (?).

[Dick Streefland]

Ano <a...@ano.invalid> wrote:
| Press SPACE to abort autoboot in 2 second(s)

Wat gebeurt er als je dit doet?
Waarschijnlijk krijg je dan een prompt van de bootloader,
en daarmee kun je misschien het geheugen uitlezen.

--
Dick

[Martijn van Buul]

* Ano:

>>>>> | een flash chip zitten type Spansion S34ML01G1 100TFI00 (= 1 GB).

1 GBit.

>>> Manufacturer ID: 0xFF
>>> Type: 0xFF
>>> Density: 0xFF
>>> Extended ID: {0xFF, 0xFF}
>>> failed to probe Flash (bank 0)
>>> Error: failed to probe Flash
>>> Flash: 0 kB
>>> MMC: sdhci_puma6: 0
>>> MMC info:
>>> Manufacturer ID: 0
>>> OEM ID: 0
>>> Name: MMC128
>>> MMC version 4.4
>>> High Capacity: No
>>> Dual Data Rate (DDR): No
>>> Bus Width: 8-bit
>>> Clock: 50000000
>>> Rd Block Len: 512
>>> Capacity: 112.4 MB (117833728 bytes)

== 942669824 bit, oftewel 0.9 GBit.

--
Martijn van Buul - pi...@dohd.org

[Ano]

Je hebt helemaal gelijk, ik had niet goed opgelet: die Spansion chip is
1 Gb, niet 1 1GB. Dus dat zal hem dan toch wel zijn, ook al wordt hij
niet 'herkend'.

[N. Coesel]

Op 10/13/2015 om 09:09 AM schreef Ano:

1Gbit=128Mbyte dus dat klopt precies. 128Mbyte is meer dan genoeg voor
een redelijk complete Linux distributie. Het zou interessant zijn om uit
te vinden of ze een buildroot/Openembedded distributie hebben gebruikt
(zou niet hoeven) of een standaard distributie zoals Debian.

[Ano]

Helaas is dan het enige wat hij doet: pauzeren.
Geen prompt, niets...

Trouwens, weet jij of iemand anders nog een eenvoudig en gratis terminal
programmaatje voor op Windows 7? Ik gebruik nu HyperTerminal wwat ik van
mijn oude XP computer heb gekopieerd, maar dat loopt regelmatig vast.

[N. Coesel]

Op 10/13/2015 om 11:04 PM schreef Ano:

Kijk eens naar Putty. Het grote probleem van Hyperterminal is dat het
het meest complete terminal programma is en dat het eenvoudig is om de
COM poort even te sluiten en daarna weer te openen. Bij alle andere
programma's is het veel ingewikkelder om de COM te sluiten en weer te
openen.

[Stef]

On 2015-10-13 Ano wrote in nl.hobby.elektronica:
>
> Trouwens, weet jij of iemand anders nog een eenvoudig en gratis terminal
> programmaatje voor op Windows 7? Ik gebruik nu HyperTerminal wwat ik van
> mijn oude XP computer heb gekopieerd, maar dat loopt regelmatig vast.
>

Tera Term
http://ttssh2.osdn.jp/index.html.en

--
Stef (remove caps, dashes and .invalid from e-mail address to reply by mail)

When all else fails, EAT!!!

[Ano]

On 12/10/2015 08:54, Ano wrote:
> Intel DHCE652

Moet zijn: Intel DHCE2652

[spring...@gmail.com]

Waar de HFC MAC-adres wordt opgeslagen, waardoor het bestand op te slaan het?

[Ano]

On 11/11/2015 23:39, spring...@gmail.com wrote:
> Waar de HFC MAC-adres wordt opgeslagen, waardoor het bestand op te slaan het?

Geen idee hoe ik dat kan benaderen...