วันอาทิตย์ที่ 28 ธันวาคม พ.ศ. 2557

กล้อง Wireless IP Camera จากจีนรุ่น IPC BW XXC-5030-T

วันนี้เป็นรีวิวกล้อง Wireless IP Camera จากจีนครับ
ด้านหน้าติดสติกเกอร์ VR IP camera
ด้านหน้า

ด้านหลังเครื่องมีเสา Wireless พอร์ต LAN, MIC, ลำโพง, ช่องเสียบ Micro SD-Card, และช่องเสียบ Adapter 5 VDC 2000 mA
ด้านหลัง
ใต้เครื่องมีสติกเกอร์ XXC-065124-CARFB
ใต้เครื่อง
แกะฝาครอบใต้เครื่องออกมาจะพบบอร์ดหลัก
บอร์ดหลัก
บอร์ดหลักมีไอซีสำคัญๆ คือ
บอร์ดหลัก
ES8388 -> Low Power Stereo Audio CODEC With Headphone Amplifier
ES8388
8002A -> ??
8002A
ALCOR AU6351GL ->  Integrated HUB2.0 and SD/MS card reader
AU6351GL
FR9886D -> 23V, 2A, 380KHz Synchronous Step-Down DC/DC Converter
FR9886D
NXP 74HC259D -> 8-bit addressable latch
74HC259D
ULN2803AG -> Darlington Transistor Arrays
ULN2803AG
บอร์ด CPU มีพอร์ต Serial ความเร็ว 57600 มีไอซีหลักๆ คือ
Etrontech EM63A165TS -> (32 MB) 16M x 16 bit Synchronous DRAM (SDRAM)
บอร์ด CPU
ใต้บอร์ด
MXIC MX25L6406E -> 64M-BIT [x 1 / x 2] CMOS SERIAL FLASH
MX25L6406E
ส่วนขับเคลื่อนกล้องใช้มอเตอร์แบบ Stepping มี 2 ตัวใช้เลื่อนในแกนตั้งและแกนนอน
ส่วนขับเคลื่อน
ส่วนขับเคลื่อน
โมดูลกล้องเชื่อมต่อกับวงจรหลักด้วย USB Interface โดยแยกเป็น 2 ส่วนหลักๆ คือ ส่วนกล้อง และส่วนแสง IR
โมดูลกล้อง
โมดูลกล้องใช้ CCD ความละเอียด 640x480 เป็นรุ่น AU3861_PAS6375
กล้อง
อีกด้านนึงเป็นไอซีควบคุมกล้อง ไอซีหลักๆ คือ
กล้อง
ALCOR AU3861BL -> USB2.0 webcam controller
AU3861BL
ATMEL 24C64N -> (64 kB) 2-Wire Serial EEPROM
24C64N
โมดูลแหล่งกำเนิดแสง IR LED สำหรับใช้กลางคืน
โมดูล IR LED
ชิ้นส่วนทั้งหมดที่แกะออกมา
ชิ้นส่วน
Boot Message


U-Boot 1.1.3 (Oct 31 2012 - 23:46:19)

Board: Ralink APSoC DRAM:  32 MB
relocate_code Pointer at: 81fb4000
sysctl:40200300
spi_wait_nsec: 42
spi device id: c2 20 17 c2 20 (2017c220)
find flash: MX25L6405D
raspi_read: from:30000 len:1000
.raspi_read: from:30000 len:1000
.============================================
Ralink UBoot Version: 3.5.3.0
--------------------------------------------
ASIC 5350_MP (Port5<->None)
DRAM_CONF_FROM: Boot-Strapping
DRAM_TYPE: SDRAM
DRAM_SIZE: 256 Mbits
DRAM_WIDTH: 16 bits
DRAM_TOTAL_WIDTH: 16 bits
TOTAL_MEMORY_SIZE: 32 MBytes
Flash component: SPI Flash
Date:Oct 31 2012  Time:23:46:19
============================================
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:128, ways:4, linesz:32 ,total:16384

 ##### The CPU freq = 360 MHZ ####
 estimate memory size =32 Mbytes

Please choose the operation:
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.                     0

3: System Boot system code via Flash.
## Booting image at bc050000 ...
raspi_read: from:50000 len:40
.   Image Name:   Linux Kernel Image
   Created:      2012-11-16   2:03:25 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    4112320 Bytes =  3.9 MB
   Load Address: 80000000
   Entry Point:  802f9000
raspi_read: from:50040 len:3ebfc0
...............................................................   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 802f9000) ...
## Giving linux memsize in MB, 32

Starting kernel ...


LINUX started...

 THIS IS ASIC
Linux version 2.6.21 (root@mailzxh-desktop) (gcc version 3.4.2) #636 Fri Nov 16 10:03:21 CST 2012

 The CPU feqenuce set to 360 MHz
CPU revision is: 0001964c
Determined physical RAM map:
 memory: 02000000 @ 00000000 (usable)
Built 1 zonelists.  Total pages: 8128
Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock5
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 16kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
Cache parity protection disabled
cause = 40808008, status = 11000000
PID hash table entries: 128 (order: 7, 512 bytes)
calculating r4koff... 00057e40(360000)
CPU frequency 360.00 MHz
Using 180.000 MHz high precision timer.
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 29220k/32768k available (2644k kernel code, 3548k reserved, 395k data, 124k init, 0k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
NET: Registered protocol family 2
Time: MIPS clocksource has been installed.
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
deice id : c2 20 17 c2 20 (2017c220)
MX25L6405D(c2 2017c220) (8192 Kbytes)
mtd .name = raspi, .size = 0x00800000 (8M) .erasesize = 0x00010000 (64K) .numeraseregions = 0
Creating 8 MTD partitions on "raspi":
0x00000000-0x00800000 : "ALL"
0x00000000-0x00030000 : "Bootloader"
0x00030000-0x00040000 : "Config"
0x00040000-0x00050000 : "Factory"
0x00050000-0x00150000 : "Kernel"
0x00150000-0x00480000 : "RootFS"
0x00480000-0x00780000 : "sys"
0x00780000-0x00800000 : "param"
Load Ralink DFS Timer Module
RT3xxx EHCI/OHCI init.
squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher
squashfs: LZMA suppport for slax.org by jro
JFFS2 version 2.2. (NAND) (C) 2001-2006 Red Hat, Inc.
io scheduler noop registered (default)
gpiomode:404059 addr:b0000000 by zqh
gpiomode:404059 by zqh1
Ralink gpio driver initialized
Enable Ralink GDMA Controller Module
GDMA IP Version=2
i2cdrv_major = 218
HDLC line discipline: version $Revision: 1.1.1.1 $, maxframe=4096
N_HDLC line discipline registered.
Ralink APSoC Hardware Watchdog Timer
Serial: 8250/16550 driver $Revision: 1.7 $ 2 ports, IRQ sharing disabled
serial8250: ttyS0 at I/O 0xb0000500 (irq = 37) is a 16550A
serial8250: ttyS1 at I/O 0xb0000c00 (irq = 12) is a 16550A
loop: loaded (max 8 devices)
rdm_major = 254
MAC_ADRH -- : 0x00000000
MAC_ADRL -- : 0x00000000
Ralink APSoC Ethernet Driver Initilization. v2.0  256 rx/tx descriptors allocated, mtu = 1500!
NAPI enable, weight = 0, Tx Ring = 256, Rx Ring = 256
MAC_ADRH -- : 0x000000d0
MAC_ADRL -- : 0xb11a12fd
PROC INIT OK!
PPP generic driver version 2.4.2
PPP BSD Compression module registered
NET: Registered protocol family 24
PPPoL2TP kernel driver, V0.17
PPTP driver version 0.8.1
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
Linux video capture interface: v2.00
 === SONiX UVC Like Driver(H264) Initial ===
usbcore: registered new interface driver uvcvideo
USB Video Class driver (v0.1.0_SONiX_v2.6.24.03)
block2mtd: version $Revision: 1.1.1.1 $
usbmon: debugfs is not available
rt3xxx-ehci rt3xxx-ehci: Ralink EHCI Host Controller
rt3xxx-ehci rt3xxx-ehci: new USB bus registered, assigned bus number 1
rt3xxx-ehci rt3xxx-ehci: irq 18, io mem 0x101c0000
rt3xxx-ehci rt3xxx-ehci: USB 0.0 started, EHCI 1.00, driver 10 Dec 2004
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
rt3xxx-ohci rt3xxx-ohci: RT3xxx OHCI Controller
rt3xxx-ohci rt3xxx-ohci: new USB bus registered, assigned bus number 2
rt3xxx-ohci rt3xxx-ohci: irq 18, io mem 0x101c1000
usb usb2: configuration #1 chosen from 1 choice
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
Initializing USB Mass Storage driver...
usb 1-1: new high speed USB device using rt3xxx-ehci and address 2
usb 1-1: configuration #1 chosen from 1 choice
hub 1-1:1.0: USB hub found
hub 1-1:1.0: 4 ports detected
usb 1-1.1: new high speed USB device using rt3xxx-ehci and address 3
usb 1-1.1: configuration #1 chosen from 1 choice
uvcvideo: Found UVC 1.00 device USB 2.0 PC Camera (058f:3861)
uvcvideo: Failed to query (1) UVC control 1 (unit 4) : -145 (exp. 4).
uvcvideo: Failed to query (1) UVC control 1 (unit 3) : -32 (exp. 4).
usb 1-1.4: new high speed USB device using rt3xxx-ehci and address 4
usb 1-1.4: configuration #1 chosen from 1 choice
scsi0 : SCSI emulation for USB Mass Storage devices
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
Advanced Linux Sound Architecture Driver Version 1.0.14rc3 (Wed Mar 14 07:25:50 2007 UTC).
ALSA device list:
  No soundcards found.
nf_conntrack version 0.5.0 (256 buckets, 131072 max)
ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Restricted Cone
TCP cubic registered
NET: Registered protocol family 1
NET: Registered protocol family 10
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 124k freed
init started: BusyBox v1.12.1 (2012-11-16 09:58:14 CST)
starting pid 19, tty '': '/etc_ro/rcS'
Algorithmics/MIPS FPU Emulator v1.5
devpts: called with bogus options
mount: mounting none on /proc/bus/usb failed: No such file or directory
Welcome to
     _______  _______  ___     __  ____   _  _   ___
    |  ___  \|   __  ||   |   |__||    \ | || | /  /
    | |___| ||  |__| ||   |__  __ |     \| || |/  /
    |   _   /|   _   ||      ||  || |\     ||     \
    |__| \__\|__| |__||______||__||_| \____||_|\___\

                     =System Architecture Department=

gpio open
ralink gpio release by zqh
clr gpio
starting pid 35, tty '/dev/ttyS1': '/bin/sh'


BusyBox v1.12.1 (2012-11-16 09:58:14 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

# zqh socket fd=3
zqh bind(6666) address successful!
zqh socket fd=3
zqh bind(6666) address successStarted WatchDog Timer.
ful!
 InitSystemParam 0
=========================read system param from file==================================
ie param ppid 41
ie param ppid 38
mac:00:01:00:01:9C:EC 30
wifimac:00:01:00:01:9C:ED 30
wifimac:00:01:00:01:9C:ED
daemon:===== wifi.c, line 71, WifiConfig():     SSID=@THREE
daemon:===== wifi.c, line 347, WifiDriversInit():       insmod From kernal
scsi 0:0:0:0: Direct-Access     Multi    Flash Reader     1.00 PQ: 0 ANSI: 0
sd 0:0:0:0: Attached scsi removable disk sda
rt2860v2_sta: module license 'unspecified' taints kernel.


=== pAd = c0095000, size = 534784 ===

<-- RTMPAllocAdapterBlock, Status=0
daemon:===== wifi.c, line 355, WifiDriversInit():       [insmod /lib/modules/2.6.21/kernel/drivers/netRX DESC a1e3e000  size = 2048
/wireless/rt2860v2_sta/rt2860v2_sta.ko mac=00:01<-- RTMPAllocTxRxRingMemory, Status=0
:00:01:9C:ED] OK
Key1Str is Invalid key length(0) or Type(0)
Key2Str is Invalid key length(0) or Type(0)
Key3Str is Invalid key length(0) or Type(0)
Key4Str is Invalid key length(0) or Type(0)
1. Phy Mode = 9
2. Phy Mode = 9
3. Phy Mode = 9
MCS Set = ff 00 00 00 01
<==== rt28xx_init, Status=0
0x1300 = 00064300
EthMacInit2
MAC_ADRH -- : 0x00000001
MAC_ADRL -- : 0x00019cec
EthMacInit3

phy_tx_ring = 0x01ff8000, tx_ring = 0xa1ff8000

phy_rx_ring0 = 0x01ff9000, rx_ring0 = 0xa1ff9000
RT305x_ESW: Link Status Changed
RT305x ESW status:a180a110
EthMacInit4
switch reg write offset=14, value=5555
switch reg write offset=40, value=1001
switch reg write offset=44, value=1001
switch reg write offset=48, value=1001
switch reg write offset=4c, value=1
switch reg write offset=50, value=2001
switch reg write offset=70, value=ffffffff
switch reg write offset=98, value=7f7f
switch reg write offset=e4, value=7f
done.
EthMacInit5
EthMacInit5
switch reg write offset=14, value=5555
switch reg write offset=40, value=1001
switch reg write offset=44, value=1001
switch reg write offset=48, value=1001
switch reg write offset=4c, value=1
switch reg write offset=50, value=2001
switch reg write offset=70, value=ffffffff
switch reg write offset=98, value=7f7f
switch reg write offset=e4, value=7f
done.
eth is start
=====InitNetDrivers=======
daemon:===== network.c, line 385, DnsConfig():  Save to File, 1 = [168.126.63.2]
daemon:===== network.c, line 386, DnsConfig():  Save to File, 2 = [168.126.63.1]
pid 32
NetThreadProc
Rcv Wcid(1) AddBAReq
Start Seq = 00000000
netstatsem post
Daemon...=======network change=======
Daemon...netok -1 link 2
net is work on eth
EthStart0
route: ioctl 0x890c failed: No such process
EthStart2
EthStart3
EthStart4
EthStart5
--------------SaveSystemParam----------
bparam.stNetParam.szIpAddr = 192.168.1.10
link:2 status:2
netstatsem post end
start app update thread
start sys update thread
=======mac=======
00-01-00-01-9c-ec-
zqh socket fd=7
zqh bind(9123) address successful!
ipc param ppid 42
update socket init
update Socket proc is start
==== sysparam.c      , line  516, InitSystemParam         :read system.ini
user1: , pwd1:
user2: , pwd2:
user3: admin, pwd3:
zqh socket fd=4
zqh bind(8832) address successful!
zqh socket fd=5
zqh bind(6666) addressi2s enable:1
 successful!
zqwork in slave
audiohw_preinit by zqh
12Mhz
h socket fd=9
zgpio open
qh bind(8813) address successful!
zqh socket fd=10
zqh bind(8822) address successful!
zqh socket fd=11
zqh bind(8832) address successful!
mac:00:01:00:01:9C:EC 30
wifimac:00:01:00:01:9C:ED 30
wifimac:00:01:00:01:9C:ED
sys_ver 4c020010
write date ok
curtime 1404700997
ie param ppid 127
ie param ppid 127
fp == null
==== encrypt.c       , line 1276, CheckChipOk             :es8388 is ok

ralink gpio release by zqh
clr gpio
=======mac=======
00-01-00-01-9c-ec-
============autio init=========
audio capture:131
audio play:132
==== stream.c        , line  564, VideoEnable             :---VideoEnable(bysize=0)---Initing...
length: 921600 offset: 0
Buffer mapped at address 0x2af83000.
length: 921600 offset: 921600
Buffer mapped at address 0x2b064000.
length: 921600 offset: 1843200
Buffer mapped at address 0x2b145000.
length: 921600 offset: 2764800
Buffer mapped at address 0x2b226000.
video_enable
video enable
video enable ok
init capture ok
init thread ok
capture video:141
Socket proc is start pid=145
send live jpeg:146
send live jpeg:147
send live jpeg:148
send live jpeg:149
send video jpeg:150
send video jpeg:151
send video jpeg:152
send live audio:154
send live audio:155
send live audio:156
send live audio:157
AudioPlayProc:158
send video jpeg:153
send record file:159
send record file:160
send record file:161
send record file:162
upnpc : miniupnpc library test client. (c) 2006-2010 Thomas Bernard
Go to http://miniupnp.free.fr/ or http://miniupnp.tuxfamily.org/
for more information.
start gpio check
start motion check
start alarm proc
==== dns.c           , line  179, DnsSendAlarmProc        :start alarm to DNS server...

init thread ok
web pid:179
FrameRate proc:1gpio open
80
p2p init proc
P2P cmd thread is start...
==== moto-new.c      , line 5217, InitMoto                :Init, alarminhappen = 0
==== moto-new.c      , line 1864, GetVertTime             :get vertime 15

==== moto-new.c      , line 5437, MotoThreadStart         :=========Start, verttime = 15, maxverttime=160======
==== moto-new.c      , line 1534, GetLevelTime            :get levelime 244

========ipaddr 192.168.1.10===========
========port 81===========
P2P media thread is start...
P2P play thread is start...
P2P media thread is start...
P2P cmd thread is start...
==== dns.c           , line 1203, FactoryRegisterProc     :Start FactoryRegisterProc
========version:2010902===========
========DeviceID:XXC-065124-CABFB=========
==== moto-new.c      , line 5331, MotoCentProc            :=====moto is start=====

==== moto-new.c      , line 5332, MotoCentProc            :moto start, read moto sit
==== moto-new.c      , line 5333, MotoCentProc            :presend = 0, speed = 1
==== moto-new.c      , line 5340, MotoCentProc            :Set Moto to Center-----
==== moto-new.c      , line 4399, SendMotoCmd             :Motocmd=0
start run ddns
No IGD UPnP Device found on the network !
iRet 0 upnp:/system/system/bin/upnpc-static -a 192.168.1.10 81 81 TCP
iRet 0
route mac is null
route mac is null
==== network.c       , line 3368, Networkhread            :Create Thread WfiCheckProc
==== network.c       , line 3274, WfiCheckProc            :===wifi check status===
==== capture.c       , line  370, SetBrightness           :size iRet=0, value=0
==== capture.c       , line  393, SetContrast             :size iRet=0 value=16
sat1
sat2
==== video.c         , line  930, VideoParamInit          :--------------VideoParamInit----------
set mirr flip=5
==== video.c         , line 1058, VideoParamInit          :set mirr flip, Param = 5, Saturation = 5

sat1
sat2
write 5020
get main thread param
==== main.c          , line  558, main                    :SystemVerion==================[ 76.2.0.16 ]==============
write 5020
--------------SaveSystemParam----------
bparam.stNetParam.szIpAddr = 192.168.1.10
==== ipc.c           , line  688, NetThreadproc           :param.cmd=1(1--eth2, 2-wifi, 0--update param)
sys_ver 4c020010
==== main.c          , line  415, CheckEncryptProc        :start CheckEncryptProc !!!
==== main.c          , line  419, CheckEncryptProc        :CheckEncrypt now
==== main.c          , line  424, CheckEncryptProc        :CheckEncrypt ok
get main thread param
def key proc
iRet 0
bFlagInternet 1
bFlagHostResolved 0
bFlagServerHello 0
NAT_Type 0
PPPP_Share_Bandwidth(1) iRet 0
P2P init =0
externwifistatus=0
==== moto-new.c      , line 3492, MotoCenter              :------verttime = 0
==== moto-new.c      , line 3528, MotoCenter              :==========Will Center, verttime = 160
dircnt 64 verttime 160
===onstart===1
on start = 0
write date ok

#

cpuinfo
# cat /proc/cpuinfo
system type             : Ralink SoC
processor               : 0
cpu model               : MIPS 24K V4.12
BogoMIPS                : 239.10
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : yes
hardware watchpoint     : yes
ASEs implemented        : mips16 dsp
VCED exceptions         : not available
VCEI exceptions         : not available



mount
# mount
rootfs on / type rootfs (rw)
/dev/root on / type squashfs (ro)
proc on /proc type proc (rw)
none on /var type ramfs (rw)
none on /etc type ramfs (rw)
none on /tmp type ramfs (rw)
none on /media type ramfs (rw)
none on /sys type sysfs (rw)
none on /dev/pts type devpts (rw)
/dev/mtdblock6 on /system type jffs2 (rw)
/dev/mtdblock7 on /param type jffs2 (rw)

df
# df
Filesystem           1k-blocks      Used Available Use% Mounted on
rootfs                    3008      3008         0 100% /
/dev/root                 3008      3008         0 100% /
/dev/mtdblock6            3072      2852       220  93% /system
/dev/mtdblock7             512       208       304  41% /param

free
# free
              total         used         free       shared      buffers
  Mem:        29344        21748         7596            0         1008
 Swap:            0            0            0
Total:        29344        21748         7596
ps
# ps -A
  PID USER       VSZ STAT COMMAND
    1 root      1528 S    init
    2 root         0 SWN  [ksoftirqd/0]
    3 root         0 SW<  [events/0]
    4 root         0 SW<  [khelper]
    5 root         0 SW<  [kthread]
    6 root         0 SW<  [kblockd/0]
    7 root         0 SW<  [khubd]
    8 root         0 SW<  [kswapd0]
    9 root         0 SW   [pdflush]
   10 root         0 SW   [pdflush]
   11 root         0 SW<  [aio/0]
   12 root         0 SW<  [scsi_tgtd/0]
   13 root         0 SW   [mtdblockd]
   14 root         0 SW<  [scsi_eh_0]
   15 root         0 SW<  [usb-storage]
   17 root         0 SW<  [kmmcd]
   23 root      1092 S    nvram_daemon
   26 root         0 SWN  [jffs2_gcd_mtd6]
   28 root         0 SWN  [jffs2_gcd_mtd7]
   31 root      1528 S    telnetd
   32 root      1696 S    /system/system/bin/daemon.v5.10
   33 root      1480 S    /system/system/bin/cmd_thread
   34 root      1480 S    /system/system/bin/gmail_thread
   35 root      1532 S    /bin/sh
   38 root      1480 S    /system/system/bin/cmd_thread
   39 root      1696 S    /system/system/bin/daemon.v5.10
   42 root      1480 S    /system/system/bin/gmail_thread
   43 root      1480 S    /system/system/bin/cmd_thread
   44 root      1696 S    /system/system/bin/daemon.v5.10
   45 root      1696 S    /system/system/bin/daemon.v5.10
   48 root      1480 S    /system/system/bin/gmail_thread
   53 root         0 SW   [RtmpCmdQTask]
   54 root         0 SW   [RtmpWscTask]
   92 root      1696 S    /system/system/bin/daemon.v5.10
  117 root      1696 S    /system/system/bin/daemon.v5.10
  118 root      1696 S    /system/system/bin/daemon.v5.10
  119 root      1696 S    /system/system/bin/daemon.v5.10
  122 root      1696 S    /system/system/bin/daemon.v5.10
  123 root      1696 S    /system/system/bin/daemon.v5.10
  124 root      1696 S    /system/system/bin/daemon.v5.10
  126 root     13260 S    /system/system/bin/encoder
  127 root     13260 S    /system/system/bin/encoder
  128 root     13260 S    /system/system/bin/encoder
  129 root     13260 S    /system/system/bin/encoder
  130 root     13260 S    /system/system/bin/encoder
  131 root     13260 S    /system/system/bin/encoder
  132 root     13260 S    /system/system/bin/encoder
  134 root     13260 S    /system/system/bin/encoder
  135 root     13260 S    /system/system/bin/encoder
  136 root     13260 S    /system/system/bin/encoder
  137 root     13260 S    /system/system/bin/encoder
  138 root     13260 S    /system/system/bin/encoder
  139 root     13260 S    /system/system/bin/encoder
  140 root     13260 S    /system/system/bin/encoder
  141 root     13260 S    /system/system/bin/encoder
  142 root     13260 S    /system/system/bin/encoder
  143 root     13260 S    /system/system/bin/encoder
  144 root     13260 S    /system/system/bin/encoder
  145 root     13260 S    /system/system/bin/encoder
  146 root     13260 S    /system/system/bin/encoder
  147 root     13260 S    /system/system/bin/encoder
  148 root     13260 S    /system/system/bin/encoder
  149 root     13260 S    /system/system/bin/encoder
  150 root     13260 S    /system/system/bin/encoder
  151 root     13260 S    /system/system/bin/encoder
  152 root     13260 S    /system/system/bin/encoder
  153 root     13260 S    /system/system/bin/encoder
  154 root     13260 S    /system/system/bin/encoder
  155 root     13260 S    /system/system/bin/encoder
  156 root     13260 S    /system/system/bin/encoder
  157 root     13260 S    /system/system/bin/encoder
  158 root     13260 S    /system/system/bin/encoder
  159 root     13260 S    /system/system/bin/encoder
  160 root     13260 S    /system/system/bin/encoder
  161 root     13260 S    /system/system/bin/encoder
  162 root     13260 S    /system/system/bin/encoder
  163 root     13260 S    /system/system/bin/encoder
  164 root     13260 S    /system/system/bin/encoder
  165 root     13260 S    /system/system/bin/encoder
  167 root     13260 S    /system/system/bin/encoder
  168 root     13260 S    /system/system/bin/encoder
  169 root     13260 S    /system/system/bin/encoder
  170 root     13260 S    /system/system/bin/encoder
  171 root     13260 S    /system/system/bin/encoder
  174 root     13260 S    /system/system/bin/encoder
  175 root     13260 S    /system/system/bin/encoder
  176 root     13260 S    /system/system/bin/encoder
  177 root     13260 S    /system/system/bin/encoder
  178 root     13260 S    /system/system/bin/encoder
  179 root     13260 S    /system/system/bin/encoder
  180 root     13260 S    /system/system/bin/encoder
  181 root     13260 S    /system/system/bin/encoder
  182 root     13260 S    /system/system/bin/encoder
  183 root     13260 S    /system/system/bin/encoder
  184 root     13260 S    /system/system/bin/encoder
  185 root     13260 S    /system/system/bin/encoder
  186 root     13260 S    /system/system/bin/encoder
  187 root     13260 S    /system/system/bin/encoder
  188 root     13260 S    /system/system/bin/encoder
  189 root     13260 S    /system/system/bin/encoder
  190 root     13260 S    /system/system/bin/encoder
  191 root     13260 S    /system/system/bin/encoder
  192 root     13260 S    /system/system/bin/encoder
  193 root     13260 S    /system/system/bin/encoder
  198 root     13260 S    /system/system/bin/encoder
  213 root     13260 S    /system/system/bin/encoder
  214 root     13260 S    /system/system/bin/encoder
  215 root     13260 S    /system/system/bin/encoder
  216 root     13260 S    /system/system/bin/encoder
  217 root     13260 S    /system/system/bin/encoder
  218 root     13260 S    /system/system/bin/encoder
  219 root     13260 S    /system/system/bin/encoder
  222 root      1532 S    -sh
  257 root     13260 S    /system/system/bin/encoder
  258 root     13260 S    /system/system/bin/encoder
  259 root     13260 S    /system/system/bin/encoder
  260 root     13260 S    /system/system/bin/encoder
  261 root     13260 S    /system/system/bin/encoder
  264 root      1528 R    ps -A
ifconfig
# ifconfig
eth2      Link encap:Ethernet  HWaddr 00:01:00:01:9C:EC
          inet addr:192.168.1.10  Bcast:192.168.1.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:35022 errors:0 dropped:0 overruns:0 frame:0
          TX packets:34128 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:2137746 (2.0 MiB)  TX bytes:18386942 (17.5 MiB)
          Interrupt:3

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:416 errors:0 dropped:0 overruns:0 frame:0
          TX packets:416 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:41712 (40.7 KiB)  TX bytes:41712 (40.7 KiB)

ra0       Link encap:Ethernet  HWaddr 00:01:00:01:9C:ED
          inet addr:12.34.56.78  Bcast:12.255.255.255  Mask:255.0.0.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:52570 errors:0 dropped:0 overruns:0 frame:0
          TX packets:109 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:7580943 (7.2 MiB)  TX bytes:717 (717.0 B)
          Interrupt:4
mtd
# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00800000 00010000 "ALL"
mtd1: 00030000 00010000 "Bootloader"
mtd2: 00010000 00010000 "Config"
mtd3: 00010000 00010000 "Factory"
mtd4: 00100000 00010000 "Kernel"
mtd5: 00330000 00010000 "RootFS"
mtd6: 00300000 00010000 "sys"
mtd7: 00080000 00010000 "param"

mtd backup
กล้องตัวนี้เปิดพอร์ต 
  • HTTP เบอร์ 80 ไว้ดูภาพและตั้งค่า
  • TELNET เบอร์ 23 ใช้ User name: root และ Password: 123456

วันพฤหัสบดีที่ 11 ธันวาคม พ.ศ. 2557

D-Link DIR-618 A1

อุปกรณ์ตัวนี้เป็น Wireless Router มี 1 WAN, 4 LAN ส่วน Wireless ความเร็วสูงสุด 300 Mbps
ตัวเครื่องภายนอก
สเปคคร่าวๆ คือ CPU RTL8196B, RAM 16 MB, Flash 2 MB ภายในรัน Linux
บอร์ดวงจร
ไอซีหลักๆ บนบอร์ดคือ
Realtek RTL8196B -> SoC
Realtek RTL8196B
ESMT M12L128168A -> (16 MB) 2M x 16 Bit x 4 Banks Synchronous DRAM
ESMT M12L128168A
Spansion S29AL016J -> (2 MB) 16 Megabit (2 M x 8-Bit/1 M x 16-Bit) CMOS 3.0 Volt-only, Boot Sector Flash Memory
Spansion S29AL016J
ภาค Wireless 2.4 GHz
ภาค Wireless
Realtek RTL8192SE ->  SingleChip IEEE 802.11b/g/n 2T2R WLAN Controller with PCI Express
Interface
Realtek RTL8192SE
Microsemi LX5535 -> InGaP HBT 2.4 – 2.5 GHz Power Amplifier
MSC5535
Power
Serial Port & JTAG

Boot Message

POST(1),Pattern:0xa5a5a5a5 => PASS

POST(2),Pattern:0x5a5a5a5a => PASS


mfid=1 devid=2249
Found 1 x 2M flash memory

---RealTek(RTL8196B-kld)at 2010.12.30-16:45+0900 version v1.7.2 Alpha [16bit](330MHz)
boot for Flag is 618 0
Jump to image start=0x80500000...
decompressing kernel:
Uncompressing Linux... done, booting the kernel.
done decompressing kernel.
Realtek GPIO Driver for Flash Reload Default is 618 0
RTL8192SE driver version 1.31 (2011-01-19)
init started:  BusyBox v1.01 (2011.05.04-06:50+0000) multi-call binary
Starting pid 9, console /dev/ttyS0: '/bin/sh'


BusyBox v1.01 (2011.05.04-06:50+0000) Built-in shell (msh)
Enter 'help' for a list of built-in commands.

mount: Mounting /dev/mtdblock2 on /web-lang failed: Invalid argument
Initialize wlan0 interface
set 618 wlan
mac_filter intVal =0
set 618 wlan channel
Initialize wlan0-va0 interface
Setup BRIDGE interface
SIOCGIFFLAGS: No such device
bridge br0 doesn't exist; can't delete it
Setup bridge...
route: SIOC[ADD|DEL]RT: No such process
route: SIOC[ADD|DEL]RT: No such process
route: SIOC[ADD|DEL]RT: No such process
route: SIOC[ADD|DEL]RT: No such process
route: SIOC[ADD|DEL]RT: No such process
route: SIOC[ADD|DEL]RT: No such process

WiFi Simple Config v1.13 (2009.09.16-11:30+0000).

Setup WAN interface

MiniIGD v1.07 (2009.08.19-13:06+0000).

test wps
killall: netbios: no process killed
killall: llmnresp: no process killed
deleting routers
route: SIOC[ADD|DEL]RT: No such process
adding dns 192.168.10.1
start DNS Relay Daemon
Notice: caching turned off
Set Firewall...
here
Start telnetd ...
0DevInfo.txt text mode!
hard ver is96B8
boa: server version Boa/0.94.14rc21
boa: server built May  4 2011 at 14:51:23.
boa: starting server pid=1308, port 80
#

cpuinfo
# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 000a0000 00010000 "boot+cfg+linux"
mtd1: 00150000 00010000 "root fs"
mtd2: 00010000 00010000 "webpage"
# cat /proc/cpuinfo
system type             : Philips Nino
processor               : 0
cpu model               : R3000 V0.0
BogoMIPS                : 329.31
wait instruction        : no
microsecond timers      : no
tlb_entries             : 32
extra interrupt vector  : no
hardware watchpoint     : no
VCED exceptions         : not available
VCEI exceptions         : not available
ll emulations           : 0
sc emulations           : 0

ifconfig
# ifconfig
br0       Link encap:Ethernet  HWaddr 00:40:F4:81:96:B1
          inet addr:192.168.0.1  Bcast:192.168.0.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:914 errors:0 dropped:0 overruns:0 frame:0
          TX packets:420 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:90279 (88.1 KiB)  TX bytes:55500 (54.1 KiB)

eth0      Link encap:Ethernet  HWaddr 00:40:F4:81:96:B1
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:922 errors:0 dropped:0 overruns:0 frame:0
          TX packets:420 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:103819 (101.3 KiB)  TX bytes:55500 (54.1 KiB)
          Interrupt:2 Base address:0x4000

eth1      Link encap:Ethernet  HWaddr 00:40:F4:81:96:B9
          inet addr:192.168.10.151  Bcast:192.168.10.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:2876 errors:0 dropped:0 overruns:0 frame:0
          TX packets:3 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:277636 (271.1 KiB)  TX bytes:1222 (1.1 KiB)
          Interrupt:2 Base address:0x4000

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:99 errors:0 dropped:0 overruns:0 frame:0
          TX packets:99 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:10494 (10.2 KiB)  TX bytes:10494 (10.2 KiB)

wlan0     Link encap:Ethernet  HWaddr 00:40:F4:81:96:B1
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:3652 errors:0 dropped:0 overruns:0 frame:0
          TX packets:56 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:771794 (753.7 KiB)  TX bytes:12554 (12.2 KiB)
          Interrupt:21

#

ps
# ps
  PID  Uid     VmSize Stat Command
    1 root        224 S   init
    2 root            SW  [keventd]
    3 root            SWN [ksoftirqd_CPU0]
    4 root            SW  [kswapd]
    5 root            SW  [bdflush]
    6 root            SW  [kupdated]
    7 root            SW  [mtdblockd]
    9 root        300 S   -sh
  136 root        192 S   netfilter_log
  726 root        216 S   udhcpd /var/udhcpd.conf
  867 root        368 S   wscd -start -c /var/wsc.conf -w wlan0 -fi /var/wscd-w
  876 root        200 S   iwcontrol wlan0
  987 root        228 S   miniigd -e 1 -i br0
 1049 root        184 S   llmnresp -r dlinkrouter
 1052 root        144 S   netbios dlinkrouter
 1070 root        200 S   mini_upnpd -wsc /tmp/wscd_config -igd /tmp/igd_config
 1077 root        248 S   dnrd --cache=off -s 192.168.10.1
 1131 root        260 S   lld2d br0
 1205 root        196 S   reload -e 11,0,1440,127,Always
 1229 root        156 S   telnetd -l /usr/bin/login -u Alphanetworks:wrgn25_dlw
 1308 root        500 S   boa
 1359 root        220 S   udhcpc -i eth1 -p /etc/udhcpc/udhcpc-eth1.pid -s /usr
 1366 root        244 R   ps
#

mtd
# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 000a0000 00010000 "boot+cfg+linux"
mtd1: 00150000 00010000 "root fs"
mtd2: 00010000 00010000 "webpage"