วันพุธที่ 19 กรกฎาคม พ.ศ. 2560

CTC UNION: VDTU01/CPE - Hardware Review

CTC UNION: VDTU01/CPE

CTC UNION รุ่น VDTU01/CPE เป็นอุปกรณ์ VDSL Converter ทำหน้าที่แปลงสัญญาณ VDSL เป็น Ethernet

รูปด้านหลัง

ด้านหลังมีพอร์ตดังนี้

  •  LINE สำหรับต่อสัญญาณเข้า 
  • PHONE สำหรับโทรศัพท์ต่อพ่วง
  • LWD เป็นปุ่มกด ไม่ทราบหน้าที่
  • ETHERNET สำหรับต่ออุปกรณ์อีกด้าน
  • FG ต่อกับเคสอุปกรณ์
  • POWER ต่อแหล่งจ่ายไฟ 5V
รูปด้านล่าง
ด้านล่างมีลาเบลบอกรุ่นและซีเรยลของอุปกรณ์

ด้านในตัวเครื่อง
ด้านในตัวเครื่องมีไอซีหลักๆ อยู่ 3 ตัว (1 ตัวอยู่ใต้ Heatsink)

ไอซีต่างๆ
รายการไอซีตัวหลักๆ 

ไอซีต่างๆ


ไอซีต่างๆ
ไอซีต่างๆ
ไอซีต่างๆ
ด้านใต้ของ PCB
จบการรีวิว แล้วพบกันใหม่โอกาสหน้าครับ

วันพฤหัสบดีที่ 22 ตุลาคม พ.ศ. 2558

D-Link DES-1016A H/W version:B1

อุปกรณ์ตัวนี้เป็น Ethernet switch 10/100 Mbps 16 port
รูปรอบๆ ตัวเครื่อง
ภายในเครื่องแบ่งออกเป็น 2 ส่วนคือ บอร์ดจ่ายไฟ และบอร์ดประมวณผลหลัก
ภายในเครื่อง
บอร์ดจ่ายไฟทำหน้าที่แปลงไฟ 220V AC เป็นไฟต่ำเลี้ยงวงจรหลัก
บอร์ดจ่ายไฟ
บอร์ดหลักแบ่งเป็นส่วนย่อยๆ  3 ส่วนคือ ไอซี Ethernet, ไอซี EEPROM, และไอซีจ่ายไฟ
บอร์ดหลัก
Realtek RTL8316D -> SINGLE CHIP 16-PORT 10/100 ETHERNET SWITCH CONTROLLER WITH EMBEDDED MEMORY
Realtek RTL8316D
ATMEL AT24C08B -> 8 kb Two-wire Serial EEPROM
ATMEL ATMLH052 08B
N115 G5626 -> Regulator ???
N115 G5626
ใต้บอร์ด

วันจันทร์ที่ 11 พฤษภาคม พ.ศ. 2558

Deliberant APC 5M-12 V2

สวัสดีครับ กลับมาอีกครั้งกับการรีวิวอุปกรณ์หลังจากที่ห่างหายไปนานเนื่องจากติดภาระกิจหลายๆ อย่าง อุปกรณ์วันนี้เป็น 5 GHz CPE ยี่ห้อ Deliberant

รูปร่างภายนอก
ตัวเครื่องภายนอก
เคสของตัวเครื่องมีซีลกันน้ำ ด้วยตามรูป
ซีลกันน้ำ
แกะออกมาจะพบกับ 2 ส่วหลักๆ คือเสาอากาศกับบอร์ดหลักของเครื่อง
ภายในเครือง
ตัวเสาอากาศจะเป็นแบบมีทิศทาง รับความถี่ 5GHz มีโฟมหุ้มอยู่ด้วย
เสาอากาศ
บอร์ดประมวลผลหลักใช้ SoC ของ Ralink มีอุปกรณ์สำคัญคือ
บอร์ดประมวลผล
Ralink RT3662F -> SoC
Ralink RT3662F
Winbond W9751G6KB-25 -> 64 MB DDR2 SDRAM
Winbond W9751G6KB
MXIC 29LV640EBTI -> 64M-BIT [8M x 8/4M x 16] SINGLE VOLTAGE 3V ONLY FLASH MEMORY
MXIC MX29LV640EBTI
IC+ IP101A LF -> Single port 10/100 Fast Ethernet Transceiver
IC+ IP101A
SiGe 5003L -> 5 GHz, 23dBm Power Amplifier with Power Detector
SiGe SE5003L
Techcode TD1501HS50 -> 5V 3A 150KHz PWM Buck DC/DC Converter
Techcode TD1501HS50
พอร์ตเชื่อมต่อในบอร์ด
Serial console port
ใต้บอร์ด
U-Boot
U-Boot 1.1.3 (Feb 24 2011 - 11:48:14)

Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb0000
******************************
Software System Reset Occurred
******************************
flash_protect ON: from 0xBC000000 to 0xBC01DD63
flash_protect ON: from 0xBC030000 to 0xBC030FFF
============================================
Ralink UBoot Version: 3.5.0.0
--------------------------------------------
ASIC 3883_MP (MAC to 100SW Mode)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: NOR Flash
Date:Feb 24 2011  Time:11:48:14
============================================
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768

 ##### The CPU freq = 500 MHZ ####
 estimate memory size =64 Mbytes

Please choose the operation:
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.

You choosed 4
                                                                              0


4: System Enter Boot Command Line Interface.

U-Boot 1.1.3 (Feb 24 2011 - 11:48:14)
RT3883 # ?
?       - alias for 'help'
bootm   - boot application image from memory
cp      - memory copy
erase   - erase FLASH memory
go      - start application at address 'addr'
help    - print online help
loadb   - load binary file over serial line (kermit mode)
md      - memory display
mdio   - Ralink PHY register R/W command !!
mm      - memory modify (auto-incrementing)
mw      - memory write (fill)
nm      - memory modify (constant address)
printenv- print environment variables
protect - enable or disable FLASH write protection
reset   - Perform RESET of the CPU
rf      - read/write rf register
saveenv - save environment variables to persistent storage
setenv  - set environment variables
spicmd  - read/write data from/to eeprom or vtss
tftpboot- boot image via network using TFTP protocol
version - print monitor version
RT3883 # help
?       - alias for 'help'
bootm   - boot application image from memory
cp      - memory copy
erase   - erase FLASH memory
go      - start application at address 'addr'
help    - print online help
loadb   - load binary file over serial line (kermit mode)
md      - memory display
mdio   - Ralink PHY register R/W command !!
mm      - memory modify (auto-incrementing)
mw      - memory write (fill)
nm      - memory modify (constant address)
printenv- print environment variables
protect - enable or disable FLASH write protection
reset   - Perform RESET of the CPU
rf      - read/write rf register
saveenv - save environment variables to persistent storage
setenv  - set environment variables
spicmd  - read/write data from/to eeprom or vtss
tftpboot- boot image via network using TFTP protocol
version - print monitor version
RT3883 # version

U-Boot 1.1.3 (Feb 24 2011 - 11:48:14)
RT3883 # printenv
bootcmd=bootp; setenv bootargs root=/dev/nfs nfsroot=${serverip}:${rootpath} ip=${ipaddr}:${serverip}:${gatewayip}:${netmask}:${hostname}::off; bootm
bootdelay=5
baudrate=115200
stdin=serial
stdout=serial
stderr=serial
ethact=Eth0 (10/100-M)

Environment size: 242/4092 bytes
RT3883 #

Linux Boot 
username: admin, password: admin01
U-Boot 1.1.3 (Feb 24 2011 - 11:48:14)

Board: Ralink APSoC DRAM:  64 MB
relocate_code Pointer at: 83fb0000
flash_protect ON: from 0xBC000000 to 0xBC01DD63
flash_protect ON: from 0xBC030000 to 0xBC030FFF
============================================
Ralink UBoot Version: 3.5.0.0
--------------------------------------------
ASIC 3883_MP (MAC to 100SW Mode)
DRAM component: 512 Mbits DDR, width 16
DRAM bus: 16 bit
Total memory: 64 MBytes
Flash component: NOR Flash
Date:Feb 24 2011  Time:11:48:14
============================================
icache: sets:512, ways:4, linesz:32 ,total:65536
dcache: sets:256, ways:4, linesz:32 ,total:32768

 ##### The CPU freq = 500 MHZ ####
 estimate memory size =64 Mbytes

Please choose the operation:
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.                     0

3: System Boot system code via Flash.
## Booting image at bc050000 ...
   Image Name:   WILI-S.FWBD-1100
   Created:      2013-11-01   2:32:18 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    6156300 Bytes =  5.9 MB
   Load Address: 80000000
   Entry Point:  80271000
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80271000) ...
## Giving linux memsize in MB, 64

Starting kernel ...


LINUX started...

 THIS IS ASIC
[4294667.296000] Linux version 2.6.21 (buildd2@builder) (gcc version 4.1.2 20061007 (prerelease)) #1 Mon Oct 28 03:58:56 EET 2013
[4294667.296000]
[4294667.296000]  The CPU feqenuce set to 500 MHz
[4294667.296000] CPU revision is: 0001974c
[4294667.296000] Determined physical RAM map:
[4294667.296000]  memory: 04000000 @ 00000000 (usable)
[4294667.296000] Built 1 zonelists.  Total pages: 16256
[4294667.296000] Kernel command line: console=ttyS1,115200n8 root=/dev/mtdblock4 init=/linuxrc
[4294667.296000] Primary instruction cache 64kB, physically tagged, 4-way, linesize 32 bytes.
[4294667.296000] Primary data cache 32kB, 4-way, linesize 32 bytes.
[4294667.296000] Synthesized TLB refill handler (20 instructions).
[4294667.296000] Synthesized TLB load handler fastpath (32 instructions).
[4294667.296000] Synthesized TLB store handler fastpath (32 instructions).
[4294667.296000] Synthesized TLB modify handler fastpath (31 instructions).
[4294667.296000] cause = 40808000, status = 11000000
[4294667.296000] PID hash table entries: 256 (order: 8, 1024 bytes)
[4294667.296000] calculating r4koff... 0007a120(500000)
[4294667.296000] CPU frequency 500.00 MHz
[4294667.296000] Using 250.000 MHz high precision timer.
[4294667.296000] Console: colour dummy device 80x25
[4294667.297000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[4294667.298000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[4294667.307000] Memory: 62152k/65536k available (2086k kernel code, 3320k reserved, 409k data, 104k init, 0k highmem)
[4294667.325000] Mount-cache hash table entries: 512
[4294667.327000] NET: Registered protocol family 16
[4294667.332000] Time: MIPS clocksource has been installed.
[4294667.334000] NET: Registered protocol family 2
[4294667.344000] IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
[4294667.345000] TCP established hash table entries: 2048 (order: 2, 16384 bytes)
[4294667.346000] TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
[4294667.347000] TCP: Hash tables configured (established 2048 bind 2048)
[4294667.348000] TCP reno registered
[4294667.352000] ralink flash device: 0x800000 at 0x1c000000
[4294667.353000] Ralink SoC physically mapped flash: Found 1 x16 devices at 0x0 in 16-bit bank
[4294667.354000]  Amd/Fujitsu Extended Query Table at 0x0040
[4294667.355000] number of CFI chips: 1
[4294667.356000] cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
[4294667.357000] Creating 8 MTD partitions on "Ralink SoC physically mapped flash":
[4294667.358000] 0x00000000-0x00030000 : "Bootloader"
[4294667.359000] 0x00030000-0x00040000 : "Config"
[4294667.360000] 0x00040000-0x00050000 : "Factory"
[4294667.361000] 0x00050000-0x00150000 : "Kernel"
[4294667.362000] 0x00150000-0x00650000 : "RootFS"
[4294667.363000] 0x00650000-0x006d0000 : "cfg"
[4294667.364000] 0x006d0000-0x00800000 : "etc"
[4294667.365000] 0x00000000-0x00800000 : "ALL"
[4294667.366000] Load Ralink DFS Timer Module
[4294667.368000] squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher
[4294667.368000] squashfs: LZMA suppport for slax.org by jro
[4294667.369000] JFFS2 version 2.2. (NAND) (C) 2001-2006 Red Hat, Inc.
[4294667.370000] io scheduler noop registered (default)
[4294667.385000] Ralink gpio driver initialized
[4294667.386000] spidrv_major = 217
[4294667.637000] Ralink APSoC Hardware Watchdog Timer
[4294667.638000] Serial: 8250/16550 driver $Revision: 1.7 $ 2 ports, IRQ sharing disabled
[4294667.639000] serial8250: ttyS0 at I/O 0xb0000500 (irq = 37) is a 16550A
[4294667.640000] serial8250: ttyS1 at I/O 0xb0000c00 (irq = 12) is a 16550A
[4294667.643000] loop: loaded (max 8 devices)
[4294667.644000] rdm_major = 254
[4294667.645000] MAC_ADRH -- : 0x00000000
[4294667.646000] MAC_ADRL -- : 0x00000000
[4294667.647000] Ralink APSoC Ethernet Driver Initilization. v2.0  256 rx/tx descriptors allocated, mtu = 1500!
[4294667.648000] NAPI enable, weight = 0, Tx Ring = 256, Rx Ring = 256
[4294667.649000] MAC_ADRH -- : 0x00000019
[4294667.650000] MAC_ADRL -- : 0x3b84852a
[4294667.651000] PROC INIT OK!
[4294667.652000] PPP generic driver version 2.4.2
[4294667.653000] PPP Deflate Compression module registered
[4294667.654000] PPP BSD Compression module registered
[4294667.655000] PPP MPPE Compression module registered
[4294667.656000] NET: Registered protocol family 24
[4294667.657000] tun: Universal TUN/TAP device driver, 1.6
[4294667.658000] tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
[4294667.664000] block2mtd: version $Revision: 1.1.1.1 $
[4294667.665000] u32 classifier
[4294667.666000] nf_conntrack version 0.5.0 (512 buckets, 4096 max)
[4294667.667000] IPv4 over IPv4 tunneling driver
[4294667.668000] GRE over IPv4 tunneling driver
[4294667.669000] TCP cubic registered
[4294667.670000] NET: Registered protocol family 1
[4294667.671000] NET: Registered protocol family 17
[4294667.672000] Bridge firewalling registered
[4294667.673000] 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
[4294667.674000] All bugs added by David S. Miller <davem@redhat.com>
[4294667.675000] Reset button gpio:77 active:0
[4294667.676000] Registered led device: LED1
[4294667.677000] Registered led device: LED2
[4294667.678000] Registered led device: LED3
[4294667.679000] Registered led device: LED4
[4294667.680000] Registered led device: LED5
[4294667.681000] Registered led device: LED6
[4294667.685000] VFS: Mounted root (squashfs filesystem) readonly.
[4294667.686000] Freeing unused kernel memory: 104k freed
[4294667.981000] Algorithmics/MIPS FPU Emulator v1.5
Populating '/etc/' directory structure ... done.
Linking '/usr/etc/*' files under '/etc' ... done
starting pid 789, tty '': '/etc/rc.d/rc.sysinit'
[4294669.993000] Started WatchDog Timer.
[4294669.994000] Started WatchDog Timer.
Waiting for reset to factory defaults packet.....
[4294674.163000] ra2880stop()...Done
starting pid 832, tty '': '/usr/etc/rc.d/rc-bg start'
starting pid 834, tty '/dev/ttyS1': '/sbin/getty -L ttyS1 115200 vt100'

DLB APC 5M-12 V2 login: Tue Jan  1 00:00:00 UTC 2013
[4294675.300000] calling '/sbin/raconf -r', ret=256
[4294675.590000] NIC Link is Up
[4294675.603000] device eth0 entered promiscuous mode
[4294675.616000] device ra0 entered promiscuous mode
[4294675.629000] device ra0 left promiscuous mode
[4294675.630000] br0: port 2(ra0) entering disabled state
[4294675.853000] br0: port 1(eth0) entering learning state
Cannot get current device settings: Operation not supported
  not setting autoneg
Cannot get current device settings: Operation not supported
  not setting autoneg
00:00:01 [I] Launched 'sshd' successfully in respawning mode.
ls: /etc/persistent/skins/*.tgz: No such file or directory
[4294676.854000] br0: topology change detected, propagating
[4294676.855000] br0: port 1(eth0) entering forwarding state
00:00:02 [I] Launched 'httpd' successfully in respawning mode.
00:00:02 [I] Launched 'discoveryd' successfully in respawning mode.
[4294677.569000] Ebtables v2.0 registered
00:00:03 [I] Launched 'alertd' successfully in respawning mode.
00:00:03 [I] Launched 'ledd' successfully in respawning mode.
00:00:03 [I] Launched 'collector' successfully in respawning mode.
00:00:03 [I] Launched 'statsd' successfully in respawning mode.
Reconfiguring syslogged...
00:00:03 [I] Launched 'syslog' successfully in respawning mode.
admin: Boot finished. Ready to serve ...
[4294683.013000] process `alertd' is using obsolete setsockopt SO_BSDCOMPAT
[4294683.368000] autoch_select: Auto Channel select ch=60
[4294683.378000] DFS start, use FCC table
DLB APC 5M-12 V2 login: admin
Password: admin01
DLB APC 5M-12 V2> ?
available options:

? -- show this menu
logout
reboot
reset-to-defaults
ping <ip>
telnet <ip>
show config
save config
show gateway
set gateway <gateway>
show software version
shell
linktest [frames <packet count>] [pkt-size <packet size>] [sessions <session count>] [peer <peer number>] [ip <remote IP>]
set virtual-ap <interface>
no virtual-ap <interface>
show interface list
show interface <interface> mac
show interface <interface> ip
set interface <interface> ip <ip/subnet mask>
show interface <interface> wireless-mode
set interface <interface> wireless-mode <ap, ipoll-ap, repeater, station, station-auto-ipoll> [peer-mac <MAC>]
set interface <interface> wds <on, off>
show interface <interface> ssid
set interface <interface> ssid <ssid>
show interface <interface> ssid-broadcast
set interface <interface> ssid-broadcast
no interface <interface> ssid-broadcast
show interface <interface> security
set interface <interface> security <open, wep64, wep128, wpa-psk, wpa2-psk, wpa-ent, wpa2-ent>
        wep64 key <1,2,3,4> pass <pass>
        wpa-psk/wpa2-psk encr <tkip, aes, auto> pass <pass>
        wpa-ent/wpa2-ent encr <tkip, aes, auto> pass <pass> radius <radius ip> port <radius port>
show interface <interface> ieee-mode
set interface <interface> ieee-mode <11a, 11b, 11bg, 11g, 11n, 11gn, 11an, 11bgn, 11n5>
show interface <interface> channel
set interface <interface> channel <channel>
set interface <interface> channel-auto <channel,channel,...>
set interface <interface> txpower <txpower>
set interface <interface> up
set interface <interface> down
show interface <interface> peers
show interface <interface> vlan-to-ssid
set interface <interface> vlan-to-ssid <vlan id>
no interface <interface> vlan-to-ssid <vlan id>
set interface <interface> vlan <vlan id>
no interface <interface> vlan <vlan id>

DLB APC 5M-12 V2> shell

Launching system shell.
Enter 'exit' or Ctrl-D to return from shell.


BusyBox v1.19.3 (2013-10-28 03:56:38 EET) built-in shell (ash)
Enter 'help' for a list of built-in commands.

~ #

cpuinfo
~ # cat /proc/cpuinfo
system type             : Ralink RT3883 SoC
processor               : 0
cpu model               : MIPS 74K V4.12
BogoMIPS                : 249.34
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : yes
hardware watchpoint     : yes
ASEs implemented        : mips16 dsp
VCED exceptions         : not available
VCEI exceptions         : not available
ifconfig
~ # ifconfig
br0       Link encap:Ethernet  HWaddr 00:19:3B:84:85:29
          inet addr:192.168.2.66  Bcast:192.168.2.255  Mask:255.255.255.0
          UP BROADCAST RUNNING ALLMULTI MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:3 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:171 (171.0 B)

eth0      Link encap:Ethernet  HWaddr 00:19:3B:84:85:2A
          UP BROADCAST RUNNING ALLMULTI MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
          Interrupt:3

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

ra0       Link encap:Ethernet  HWaddr 00:19:3B:84:85:29
          UP BROADCAST RUNNING ALLMULTI MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:3 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
          Interrupt:4

mtd
~ # cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00030000 00010000 "Bootloader"
mtd1: 00010000 00010000 "Config"
mtd2: 00010000 00010000 "Factory"
mtd3: 00100000 00010000 "Kernel"
mtd4: 00500000 00010000 "RootFS"
mtd5: 00080000 00010000 "cfg"
mtd6: 00130000 00010000 "etc"
mtd7: 00800000 00010000 "ALL"

ผมได้ Backup ไฟล์ MTD partition โดยใช้คำสั่ง
  • /var/tmp # udpsvd -E 0 69 /bin/tftpd  /tmp 
เพื่อที่จะให้ TFTP Server ทำงาน

    รายการไฟล์

วันอาทิตย์ที่ 28 ธันวาคม พ.ศ. 2557

กล้อง Wireless IP Camera จากจีนรุ่น IPC BW XXC-5030-T

วันนี้เป็นรีวิวกล้อง Wireless IP Camera จากจีนครับ
ด้านหน้าติดสติกเกอร์ VR IP camera
ด้านหน้า

ด้านหลังเครื่องมีเสา Wireless พอร์ต LAN, MIC, ลำโพง, ช่องเสียบ Micro SD-Card, และช่องเสียบ Adapter 5 VDC 2000 mA
ด้านหลัง
ใต้เครื่องมีสติกเกอร์ XXC-065124-CARFB
ใต้เครื่อง
แกะฝาครอบใต้เครื่องออกมาจะพบบอร์ดหลัก
บอร์ดหลัก
บอร์ดหลักมีไอซีสำคัญๆ คือ
บอร์ดหลัก
ES8388 -> Low Power Stereo Audio CODEC With Headphone Amplifier
ES8388
8002A -> ??
8002A
ALCOR AU6351GL ->  Integrated HUB2.0 and SD/MS card reader
AU6351GL
FR9886D -> 23V, 2A, 380KHz Synchronous Step-Down DC/DC Converter
FR9886D
NXP 74HC259D -> 8-bit addressable latch
74HC259D
ULN2803AG -> Darlington Transistor Arrays
ULN2803AG
บอร์ด CPU มีพอร์ต Serial ความเร็ว 57600 มีไอซีหลักๆ คือ
Etrontech EM63A165TS -> (32 MB) 16M x 16 bit Synchronous DRAM (SDRAM)
บอร์ด CPU
ใต้บอร์ด
MXIC MX25L6406E -> 64M-BIT [x 1 / x 2] CMOS SERIAL FLASH
MX25L6406E
ส่วนขับเคลื่อนกล้องใช้มอเตอร์แบบ Stepping มี 2 ตัวใช้เลื่อนในแกนตั้งและแกนนอน
ส่วนขับเคลื่อน
ส่วนขับเคลื่อน
โมดูลกล้องเชื่อมต่อกับวงจรหลักด้วย USB Interface โดยแยกเป็น 2 ส่วนหลักๆ คือ ส่วนกล้อง และส่วนแสง IR
โมดูลกล้อง
โมดูลกล้องใช้ CCD ความละเอียด 640x480 เป็นรุ่น AU3861_PAS6375
กล้อง
อีกด้านนึงเป็นไอซีควบคุมกล้อง ไอซีหลักๆ คือ
กล้อง
ALCOR AU3861BL -> USB2.0 webcam controller
AU3861BL
ATMEL 24C64N -> (64 kB) 2-Wire Serial EEPROM
24C64N
โมดูลแหล่งกำเนิดแสง IR LED สำหรับใช้กลางคืน
โมดูล IR LED
ชิ้นส่วนทั้งหมดที่แกะออกมา
ชิ้นส่วน
Boot Message


U-Boot 1.1.3 (Oct 31 2012 - 23:46:19)

Board: Ralink APSoC DRAM:  32 MB
relocate_code Pointer at: 81fb4000
sysctl:40200300
spi_wait_nsec: 42
spi device id: c2 20 17 c2 20 (2017c220)
find flash: MX25L6405D
raspi_read: from:30000 len:1000
.raspi_read: from:30000 len:1000
.============================================
Ralink UBoot Version: 3.5.3.0
--------------------------------------------
ASIC 5350_MP (Port5<->None)
DRAM_CONF_FROM: Boot-Strapping
DRAM_TYPE: SDRAM
DRAM_SIZE: 256 Mbits
DRAM_WIDTH: 16 bits
DRAM_TOTAL_WIDTH: 16 bits
TOTAL_MEMORY_SIZE: 32 MBytes
Flash component: SPI Flash
Date:Oct 31 2012  Time:23:46:19
============================================
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:128, ways:4, linesz:32 ,total:16384

 ##### The CPU freq = 360 MHZ ####
 estimate memory size =32 Mbytes

Please choose the operation:
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.                     0

3: System Boot system code via Flash.
## Booting image at bc050000 ...
raspi_read: from:50000 len:40
.   Image Name:   Linux Kernel Image
   Created:      2012-11-16   2:03:25 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    4112320 Bytes =  3.9 MB
   Load Address: 80000000
   Entry Point:  802f9000
raspi_read: from:50040 len:3ebfc0
...............................................................   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 802f9000) ...
## Giving linux memsize in MB, 32

Starting kernel ...


LINUX started...

 THIS IS ASIC
Linux version 2.6.21 (root@mailzxh-desktop) (gcc version 3.4.2) #636 Fri Nov 16 10:03:21 CST 2012

 The CPU feqenuce set to 360 MHz
CPU revision is: 0001964c
Determined physical RAM map:
 memory: 02000000 @ 00000000 (usable)
Built 1 zonelists.  Total pages: 8128
Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock5
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 16kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
Cache parity protection disabled
cause = 40808008, status = 11000000
PID hash table entries: 128 (order: 7, 512 bytes)
calculating r4koff... 00057e40(360000)
CPU frequency 360.00 MHz
Using 180.000 MHz high precision timer.
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 29220k/32768k available (2644k kernel code, 3548k reserved, 395k data, 124k init, 0k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
NET: Registered protocol family 2
Time: MIPS clocksource has been installed.
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
deice id : c2 20 17 c2 20 (2017c220)
MX25L6405D(c2 2017c220) (8192 Kbytes)
mtd .name = raspi, .size = 0x00800000 (8M) .erasesize = 0x00010000 (64K) .numeraseregions = 0
Creating 8 MTD partitions on "raspi":
0x00000000-0x00800000 : "ALL"
0x00000000-0x00030000 : "Bootloader"
0x00030000-0x00040000 : "Config"
0x00040000-0x00050000 : "Factory"
0x00050000-0x00150000 : "Kernel"
0x00150000-0x00480000 : "RootFS"
0x00480000-0x00780000 : "sys"
0x00780000-0x00800000 : "param"
Load Ralink DFS Timer Module
RT3xxx EHCI/OHCI init.
squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher
squashfs: LZMA suppport for slax.org by jro
JFFS2 version 2.2. (NAND) (C) 2001-2006 Red Hat, Inc.
io scheduler noop registered (default)
gpiomode:404059 addr:b0000000 by zqh
gpiomode:404059 by zqh1
Ralink gpio driver initialized
Enable Ralink GDMA Controller Module
GDMA IP Version=2
i2cdrv_major = 218
HDLC line discipline: version $Revision: 1.1.1.1 $, maxframe=4096
N_HDLC line discipline registered.
Ralink APSoC Hardware Watchdog Timer
Serial: 8250/16550 driver $Revision: 1.7 $ 2 ports, IRQ sharing disabled
serial8250: ttyS0 at I/O 0xb0000500 (irq = 37) is a 16550A
serial8250: ttyS1 at I/O 0xb0000c00 (irq = 12) is a 16550A
loop: loaded (max 8 devices)
rdm_major = 254
MAC_ADRH -- : 0x00000000
MAC_ADRL -- : 0x00000000
Ralink APSoC Ethernet Driver Initilization. v2.0  256 rx/tx descriptors allocated, mtu = 1500!
NAPI enable, weight = 0, Tx Ring = 256, Rx Ring = 256
MAC_ADRH -- : 0x000000d0
MAC_ADRL -- : 0xb11a12fd
PROC INIT OK!
PPP generic driver version 2.4.2
PPP BSD Compression module registered
NET: Registered protocol family 24
PPPoL2TP kernel driver, V0.17
PPTP driver version 0.8.1
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
Linux video capture interface: v2.00
 === SONiX UVC Like Driver(H264) Initial ===
usbcore: registered new interface driver uvcvideo
USB Video Class driver (v0.1.0_SONiX_v2.6.24.03)
block2mtd: version $Revision: 1.1.1.1 $
usbmon: debugfs is not available
rt3xxx-ehci rt3xxx-ehci: Ralink EHCI Host Controller
rt3xxx-ehci rt3xxx-ehci: new USB bus registered, assigned bus number 1
rt3xxx-ehci rt3xxx-ehci: irq 18, io mem 0x101c0000
rt3xxx-ehci rt3xxx-ehci: USB 0.0 started, EHCI 1.00, driver 10 Dec 2004
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
rt3xxx-ohci rt3xxx-ohci: RT3xxx OHCI Controller
rt3xxx-ohci rt3xxx-ohci: new USB bus registered, assigned bus number 2
rt3xxx-ohci rt3xxx-ohci: irq 18, io mem 0x101c1000
usb usb2: configuration #1 chosen from 1 choice
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
Initializing USB Mass Storage driver...
usb 1-1: new high speed USB device using rt3xxx-ehci and address 2
usb 1-1: configuration #1 chosen from 1 choice
hub 1-1:1.0: USB hub found
hub 1-1:1.0: 4 ports detected
usb 1-1.1: new high speed USB device using rt3xxx-ehci and address 3
usb 1-1.1: configuration #1 chosen from 1 choice
uvcvideo: Found UVC 1.00 device USB 2.0 PC Camera (058f:3861)
uvcvideo: Failed to query (1) UVC control 1 (unit 4) : -145 (exp. 4).
uvcvideo: Failed to query (1) UVC control 1 (unit 3) : -32 (exp. 4).
usb 1-1.4: new high speed USB device using rt3xxx-ehci and address 4
usb 1-1.4: configuration #1 chosen from 1 choice
scsi0 : SCSI emulation for USB Mass Storage devices
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
Advanced Linux Sound Architecture Driver Version 1.0.14rc3 (Wed Mar 14 07:25:50 2007 UTC).
ALSA device list:
  No soundcards found.
nf_conntrack version 0.5.0 (256 buckets, 131072 max)
ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Restricted Cone
TCP cubic registered
NET: Registered protocol family 1
NET: Registered protocol family 10
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 124k freed
init started: BusyBox v1.12.1 (2012-11-16 09:58:14 CST)
starting pid 19, tty '': '/etc_ro/rcS'
Algorithmics/MIPS FPU Emulator v1.5
devpts: called with bogus options
mount: mounting none on /proc/bus/usb failed: No such file or directory
Welcome to
     _______  _______  ___     __  ____   _  _   ___
    |  ___  \|   __  ||   |   |__||    \ | || | /  /
    | |___| ||  |__| ||   |__  __ |     \| || |/  /
    |   _   /|   _   ||      ||  || |\     ||     \
    |__| \__\|__| |__||______||__||_| \____||_|\___\

                     =System Architecture Department=

gpio open
ralink gpio release by zqh
clr gpio
starting pid 35, tty '/dev/ttyS1': '/bin/sh'


BusyBox v1.12.1 (2012-11-16 09:58:14 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

# zqh socket fd=3
zqh bind(6666) address successful!
zqh socket fd=3
zqh bind(6666) address successStarted WatchDog Timer.
ful!
 InitSystemParam 0
=========================read system param from file==================================
ie param ppid 41
ie param ppid 38
mac:00:01:00:01:9C:EC 30
wifimac:00:01:00:01:9C:ED 30
wifimac:00:01:00:01:9C:ED
daemon:===== wifi.c, line 71, WifiConfig():     SSID=@THREE
daemon:===== wifi.c, line 347, WifiDriversInit():       insmod From kernal
scsi 0:0:0:0: Direct-Access     Multi    Flash Reader     1.00 PQ: 0 ANSI: 0
sd 0:0:0:0: Attached scsi removable disk sda
rt2860v2_sta: module license 'unspecified' taints kernel.


=== pAd = c0095000, size = 534784 ===

<-- RTMPAllocAdapterBlock, Status=0
daemon:===== wifi.c, line 355, WifiDriversInit():       [insmod /lib/modules/2.6.21/kernel/drivers/netRX DESC a1e3e000  size = 2048
/wireless/rt2860v2_sta/rt2860v2_sta.ko mac=00:01<-- RTMPAllocTxRxRingMemory, Status=0
:00:01:9C:ED] OK
Key1Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
1. Phy Mode = 9
2. Phy Mode = 9
3. Phy Mode = 9
MCS Set = ff 00 00 00 01
<==== rt28xx_init, Status=0
0x1300 = 00064300
EthMacInit2
MAC_ADRH -- : 0x00000001
MAC_ADRL -- : 0x00019cec
EthMacInit3

phy_tx_ring = 0x01ff8000, tx_ring = 0xa1ff8000

phy_rx_ring0 = 0x01ff9000, rx_ring0 = 0xa1ff9000
RT305x_ESW: Link Status Changed
RT305x ESW status:a180a110
EthMacInit4
switch reg write offset=14, value=5555
switch reg write offset=40, value=1001
switch reg write offset=44, value=1001
switch reg write offset=48, value=1001
switch reg write offset=4c, value=1
switch reg write offset=50, value=2001
switch reg write offset=70, value=ffffffff
switch reg write offset=98, value=7f7f
switch reg write offset=e4, value=7f
done.
EthMacInit5
EthMacInit5
switch reg write offset=14, value=5555
switch reg write offset=40, value=1001
switch reg write offset=44, value=1001
switch reg write offset=48, value=1001
switch reg write offset=4c, value=1
switch reg write offset=50, value=2001
switch reg write offset=70, value=ffffffff
switch reg write offset=98, value=7f7f
switch reg write offset=e4, value=7f
done.
eth is start
=====InitNetDrivers=======
daemon:===== network.c, line 385, DnsConfig():  Save to File, 1 = [168.126.63.2]
daemon:===== network.c, line 386, DnsConfig():  Save to File, 2 = [168.126.63.1]
pid 32
NetThreadProc
Rcv Wcid(1) AddBAReq
Start Seq = 00000000
netstatsem post
Daemon...=======network change=======
Daemon...netok -1 link 2
net is work on eth
EthStart0
route: ioctl 0x890c failed: No such process
EthStart2
EthStart3
EthStart4
EthStart5
--------------SaveSystemParam----------
bparam.stNetParam.szIpAddr = 192.168.1.10
link:2 status:2
netstatsem post end
start app update thread
start sys update thread
=======mac=======
00-01-00-01-9c-ec-
zqh socket fd=7
zqh bind(9123) address successful!
ipc param ppid 42
update socket init
update Socket proc is start
==== sysparam.c      , line  516, InitSystemParam         :read system.ini
user1: , pwd1:
user2: , pwd2:
user3: admin, pwd3:
zqh socket fd=4
zqh bind(8832) address successful!
zqh socket fd=5
zqh bind(6666) addressi2s enable:1
 successful!
zqwork in slave
audiohw_preinit by zqh
12Mhz
h socket fd=9
zgpio open
qh bind(8813) address successful!
zqh socket fd=10
zqh bind(8822) address successful!
zqh socket fd=11
zqh bind(8832) address successful!
mac:00:01:00:01:9C:EC 30
wifimac:00:01:00:01:9C:ED 30
wifimac:00:01:00:01:9C:ED
sys_ver 4c020010
write date ok
curtime 1404700997
ie param ppid 127
ie param ppid 127
fp == null
==== encrypt.c       , line 1276, CheckChipOk             :es8388 is ok

ralink gpio release by zqh
clr gpio
=======mac=======
00-01-00-01-9c-ec-
============autio init=========
audio capture:131
audio play:132
==== stream.c        , line  564, VideoEnable             :---VideoEnable(bysize=0)---Initing...
length: 921600 offset: 0
Buffer mapped at address 0x2af83000.
length: 921600 offset: 921600
Buffer mapped at address 0x2b064000.
length: 921600 offset: 1843200
Buffer mapped at address 0x2b145000.
length: 921600 offset: 2764800
Buffer mapped at address 0x2b226000.
video_enable
video enable
video enable ok
init capture ok
init thread ok
capture video:141
Socket proc is start pid=145
send live jpeg:146
send live jpeg:147
send live jpeg:148
send live jpeg:149
send video jpeg:150
send video jpeg:151
send video jpeg:152
send live audio:154
send live audio:155
send live audio:156
send live audio:157
AudioPlayProc:158
send video jpeg:153
send record file:159
send record file:160
send record file:161
send record file:162
upnpc : miniupnpc library test client. (c) 2006-2010 Thomas Bernard
Go to http://miniupnp.free.fr/ or http://miniupnp.tuxfamily.org/
for more information.
start gpio check
start motion check
start alarm proc
==== dns.c           , line  179, DnsSendAlarmProc        :start alarm to DNS server...

init thread ok
web pid:179
FrameRate proc:1gpio open
80
p2p init proc
P2P cmd thread is start...
==== moto-new.c      , line 5217, InitMoto                :Init, alarminhappen = 0
==== moto-new.c      , line 1864, GetVertTime             :get vertime 15

==== moto-new.c      , line 5437, MotoThreadStart         :=========Start, verttime = 15, maxverttime=160======
==== moto-new.c      , line 1534, GetLevelTime            :get levelime 244

========ipaddr 192.168.1.10===========
========port 81===========
P2P media thread is start...
P2P play thread is start...
P2P media thread is start...
P2P cmd thread is start...
==== dns.c           , line 1203, FactoryRegisterProc     :Start FactoryRegisterProc
========version:2010902===========
========DeviceID:XXC-065124-CABFB=========
==== moto-new.c      , line 5331, MotoCentProc            :=====moto is start=====

==== moto-new.c      , line 5332, MotoCentProc            :moto start, read moto sit
==== moto-new.c      , line 5333, MotoCentProc            :presend = 0, speed = 1
==== moto-new.c      , line 5340, MotoCentProc            :Set Moto to Center-----
==== moto-new.c      , line 4399, SendMotoCmd             :Motocmd=0
start run ddns
No IGD UPnP Device found on the network !
iRet 0 upnp:/system/system/bin/upnpc-static -a 192.168.1.10 81 81 TCP
iRet 0
route mac is null
route mac is null
==== network.c       , line 3368, Networkhread            :Create Thread WfiCheckProc
==== network.c       , line 3274, WfiCheckProc            :===wifi check status===
==== capture.c       , line  370, SetBrightness           :size iRet=0, value=0
==== capture.c       , line  393, SetContrast             :size iRet=0 value=16
sat1
sat2
==== video.c         , line  930, VideoParamInit          :--------------VideoParamInit----------
set mirr flip=5
==== video.c         , line 1058, VideoParamInit          :set mirr flip, Param = 5, Saturation = 5

sat1
sat2
write 5020
get main thread param
==== main.c          , line  558, main                    :SystemVerion==================[ 76.2.0.16 ]==============
write 5020
--------------SaveSystemParam----------
bparam.stNetParam.szIpAddr = 192.168.1.10
==== ipc.c           , line  688, NetThreadproc           :param.cmd=1(1--eth2, 2-wifi, 0--update param)
sys_ver 4c020010
==== main.c          , line  415, CheckEncryptProc        :start CheckEncryptProc !!!
==== main.c          , line  419, CheckEncryptProc        :CheckEncrypt now
==== main.c          , line  424, CheckEncryptProc        :CheckEncrypt ok
get main thread param
def key proc
iRet 0
bFlagInternet 1
bFlagHostResolved 0
bFlagServerHello 0
NAT_Type 0
PPPP_Share_Bandwidth(1) iRet 0
P2P init =0
externwifistatus=0
==== moto-new.c      , line 3492, MotoCenter              :------verttime = 0
==== moto-new.c      , line 3528, MotoCenter              :==========Will Center, verttime = 160
dircnt 64 verttime 160
===onstart===1
on start = 0
write date ok

#

cpuinfo
# cat /proc/cpuinfo
system type             : Ralink SoC
processor               : 0
cpu model               : MIPS 24K V4.12
BogoMIPS                : 239.10
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : yes
hardware watchpoint     : yes
ASEs implemented        : mips16 dsp
VCED exceptions         : not available
VCEI exceptions         : not available



mount
# mount
rootfs on / type rootfs (rw)
/dev/root on / type squashfs (ro)
proc on /proc type proc (rw)
none on /var type ramfs (rw)
none on /etc type ramfs (rw)
none on /tmp type ramfs (rw)
none on /media type ramfs (rw)
none on /sys type sysfs (rw)
none on /dev/pts type devpts (rw)
/dev/mtdblock6 on /system type jffs2 (rw)
/dev/mtdblock7 on /param type jffs2 (rw)

df
# df
Filesystem           1k-blocks      Used Available Use% Mounted on
rootfs                    3008      3008         0 100% /
/dev/root                 3008      3008         0 100% /
/dev/mtdblock6            3072      2852       220  93% /system
/dev/mtdblock7             512       208       304  41% /param

free
# free
              total         used         free       shared      buffers
  Mem:        29344        21748         7596            0         1008
 Swap:            0            0            0
Total:        29344        21748         7596
ps
# ps -A
  PID USER       VSZ STAT COMMAND
    1 root      1528 S    init
    2 root         0 SWN  [ksoftirqd/0]
    3 root         0 SW<  [events/0]
    4 root         0 SW<  [khelper]
    5 root         0 SW<  [kthread]
    6 root         0 SW<  [kblockd/0]
    7 root         0 SW<  [khubd]
    8 root         0 SW<  [kswapd0]
    9 root         0 SW   [pdflush]
   10 root         0 SW   [pdflush]
   11 root         0 SW<  [aio/0]
   12 root         0 SW<  [scsi_tgtd/0]
   13 root         0 SW   [mtdblockd]
   14 root         0 SW<  [scsi_eh_0]
   15 root         0 SW<  [usb-storage]
   17 root         0 SW<  [kmmcd]
   23 root      1092 S    nvram_daemon
   26 root         0 SWN  [jffs2_gcd_mtd6]
   28 root         0 SWN  [jffs2_gcd_mtd7]
   31 root      1528 S    telnetd
   32 root      1696 S    /system/system/bin/daemon.v5.10
   33 root      1480 S    /system/system/bin/cmd_thread
   34 root      1480 S    /system/system/bin/gmail_thread
   35 root      1532 S    /bin/sh
   38 root      1480 S    /system/system/bin/cmd_thread
   39 root      1696 S    /system/system/bin/daemon.v5.10
   42 root      1480 S    /system/system/bin/gmail_thread
   43 root      1480 S    /system/system/bin/cmd_thread
   44 root      1696 S    /system/system/bin/daemon.v5.10
   45 root      1696 S    /system/system/bin/daemon.v5.10
   48 root      1480 S    /system/system/bin/gmail_thread
   53 root         0 SW   [RtmpCmdQTask]
   54 root         0 SW   [RtmpWscTask]
   92 root      1696 S    /system/system/bin/daemon.v5.10
  117 root      1696 S    /system/system/bin/daemon.v5.10
  118 root      1696 S    /system/system/bin/daemon.v5.10
  119 root      1696 S    /system/system/bin/daemon.v5.10
  122 root      1696 S    /system/system/bin/daemon.v5.10
  123 root      1696 S    /system/system/bin/daemon.v5.10
  124 root      1696 S    /system/system/bin/daemon.v5.10
  126 root     13260 S    /system/system/bin/encoder
  127 root     13260 S    /system/system/bin/encoder
  128 root     13260 S    /system/system/bin/encoder
  129 root     13260 S    /system/system/bin/encoder
  130 root     13260 S    /system/system/bin/encoder
  131 root     13260 S    /system/system/bin/encoder
  132 root     13260 S    /system/system/bin/encoder
  134 root     13260 S    /system/system/bin/encoder
  135 root     13260 S    /system/system/bin/encoder
  136 root     13260 S    /system/system/bin/encoder
  137 root     13260 S    /system/system/bin/encoder
  138 root     13260 S    /system/system/bin/encoder
  139 root     13260 S    /system/system/bin/encoder
  140 root     13260 S    /system/system/bin/encoder
  141 root     13260 S    /system/system/bin/encoder
  142 root     13260 S    /system/system/bin/encoder
  143 root     13260 S    /system/system/bin/encoder
  144 root     13260 S    /system/system/bin/encoder
  145 root     13260 S    /system/system/bin/encoder
  146 root     13260 S    /system/system/bin/encoder
  147 root     13260 S    /system/system/bin/encoder
  148 root     13260 S    /system/system/bin/encoder
  149 root     13260 S    /system/system/bin/encoder
  150 root     13260 S    /system/system/bin/encoder
  151 root     13260 S    /system/system/bin/encoder
  152 root     13260 S    /system/system/bin/encoder
  153 root     13260 S    /system/system/bin/encoder
  154 root     13260 S    /system/system/bin/encoder
  155 root     13260 S    /system/system/bin/encoder
  156 root     13260 S    /system/system/bin/encoder
  157 root     13260 S    /system/system/bin/encoder
  158 root     13260 S    /system/system/bin/encoder
  159 root     13260 S    /system/system/bin/encoder
  160 root     13260 S    /system/system/bin/encoder
  161 root     13260 S    /system/system/bin/encoder
  162 root     13260 S    /system/system/bin/encoder
  163 root     13260 S    /system/system/bin/encoder
  164 root     13260 S    /system/system/bin/encoder
  165 root     13260 S    /system/system/bin/encoder
  167 root     13260 S    /system/system/bin/encoder
  168 root     13260 S    /system/system/bin/encoder
  169 root     13260 S    /system/system/bin/encoder
  170 root     13260 S    /system/system/bin/encoder
  171 root     13260 S    /system/system/bin/encoder
  174 root     13260 S    /system/system/bin/encoder
  175 root     13260 S    /system/system/bin/encoder
  176 root     13260 S    /system/system/bin/encoder
  177 root     13260 S    /system/system/bin/encoder
  178 root     13260 S    /system/system/bin/encoder
  179 root     13260 S    /system/system/bin/encoder
  180 root     13260 S    /system/system/bin/encoder
  181 root     13260 S    /system/system/bin/encoder
  182 root     13260 S    /system/system/bin/encoder
  183 root     13260 S    /system/system/bin/encoder
  184 root     13260 S    /system/system/bin/encoder
  185 root     13260 S    /system/system/bin/encoder
  186 root     13260 S    /system/system/bin/encoder
  187 root     13260 S    /system/system/bin/encoder
  188 root     13260 S    /system/system/bin/encoder
  189 root     13260 S    /system/system/bin/encoder
  190 root     13260 S    /system/system/bin/encoder
  191 root     13260 S    /system/system/bin/encoder
  192 root     13260 S    /system/system/bin/encoder
  193 root     13260 S    /system/system/bin/encoder
  198 root     13260 S    /system/system/bin/encoder
  213 root     13260 S    /system/system/bin/encoder
  214 root     13260 S    /system/system/bin/encoder
  215 root     13260 S    /system/system/bin/encoder
  216 root     13260 S    /system/system/bin/encoder
  217 root     13260 S    /system/system/bin/encoder
  218 root     13260 S    /system/system/bin/encoder
  219 root     13260 S    /system/system/bin/encoder
  222 root      1532 S    -sh
  257 root     13260 S    /system/system/bin/encoder
  258 root     13260 S    /system/system/bin/encoder
  259 root     13260 S    /system/system/bin/encoder
  260 root     13260 S    /system/system/bin/encoder
  261 root     13260 S    /system/system/bin/encoder
  264 root      1528 R    ps -A
ifconfig
# ifconfig
eth2      Link encap:Ethernet  HWaddr 00:01:00:01:9C:EC
          inet addr:192.168.1.10  Bcast:192.168.1.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:35022 errors:0 dropped:0 overruns:0 frame:0
          TX packets:34128 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:2137746 (2.0 MiB)  TX bytes:18386942 (17.5 MiB)
          Interrupt:3

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:416 errors:0 dropped:0 overruns:0 frame:0
          TX packets:416 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:41712 (40.7 KiB)  TX bytes:41712 (40.7 KiB)

ra0       Link encap:Ethernet  HWaddr 00:01:00:01:9C:ED
          inet addr:12.34.56.78  Bcast:12.255.255.255  Mask:255.0.0.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:52570 errors:0 dropped:0 overruns:0 frame:0
          TX packets:109 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:7580943 (7.2 MiB)  TX bytes:717 (717.0 B)
          Interrupt:4
mtd
# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00800000 00010000 "ALL"
mtd1: 00030000 00010000 "Bootloader"
mtd2: 00010000 00010000 "Config"
mtd3: 00010000 00010000 "Factory"
mtd4: 00100000 00010000 "Kernel"
mtd5: 00330000 00010000 "RootFS"
mtd6: 00300000 00010000 "sys"
mtd7: 00080000 00010000 "param"

mtd backup
กล้องตัวนี้เปิดพอร์ต 
  • HTTP เบอร์ 80 ไว้ดูภาพและตั้งค่า
  • TELNET เบอร์ 23 ใช้ User name: root และ Password: 123456