工业路由器的拆解过程

上次杭州的一家对接商,送来了他们的工业路由器,也就是一个铁盒子了。

工业路由器的拆解过程_第1张图片

具体的参数也没有仔细的看,我对这个不感冒,只对里面的系统有兴趣。(后来发现此USB口为ADB调试口

接口如图:

工业路由器的拆解过程_第2张图片

 

拿到后,放那里吃灰了很久。才想起来要测试下,把玩把玩吧。

第一步:动用螺丝刀进行拆解(这个拆解很简单了,除了QC和保修标贴外,就是螺丝了)

拆机后,对PCBA一览无余,也没有什么接口可以调试的。有的那个应该是他们的编程器接口吧。

工业路由器的拆解过程_第3张图片

PCBA背面:

工业路由器的拆解过程_第4张图片

瞬间感觉,扯淡了。白费力气了。

好吧,那就扫描端口,接上网线开始一顿狂扫,80,53,5555端口开发。

5555,一个莫名端口,先连接看看,一连接就断开了,哦哦。

后来发现这个原来是个ADBD的调试口,凌乱了,路由器上竟然能用ADB来调试。

好吧,就你的调试比较突出。接上USB线,发现下面的几个接口,还可以升级模块的程序。

工业路由器的拆解过程_第5张图片

那就上来调试下,发现果然ADB可以正常进入,而且还是特权用户权限。

看看启动日志,具体如下:

/var/volatile/log # cat boot
Thu Jan  1 08:04:40 1970: MTD : Detected block device : /firmware for modem
Thu Jan  1 08:04:40 1970: UBI device number 1, total 223 LEBs (56631296 bytes, 54.0 MiB), available 0 LEBs (0 bytes), LEB size 253952 bytes (248.0 KiB)
Thu Jan  1 08:04:40 1970: Starting psmd: done
Thu Jan  1 08:04:40 1970: /firmware/image
Thu Jan  1 08:04:40 1970: Nothing to do. No firmware links needed.
Thu Jan  1 08:04:41 1970: Starting ipacm_perf: done
Thu Jan  1 08:04:41 1970: ln: /system/bin/sh: File exists
Thu Jan  1 08:04:41 1970: Switching to composition number 0x9025
Thu Jan  1 08:04:41 1970: sh: write error: No such file or directory
Thu Jan  1 08:04:41 1970: Starting adbd: Starting ipacmdiag: done
Thu Jan  1 08:04:41 1970: /etc/init.d/adbd: line 74: can't create /etc/adb_devid: Read-only file system
Thu Jan  1 08:04:41 1970: Starting qti: done
Thu Jan  1 08:04:42 1970: INIT: Entering runlevel: 5
Thu Jan  1 08:04:42 1970: Configuring network interfaces... Cannot find device "eth0"
Thu Jan  1 08:04:43 1970: Starting keyd: done
Thu Jan  1 08:04:44 1970: chown: /media/card: Read-only file system
Thu Jan  1 08:04:44 1970: chown: /sdcard: Read-only file system
Thu Jan  1 08:04:44 1970: hwclock: settimeofday: Invalid argument
Thu Jan  1 08:04:44 1970: Starting syslogd done
Thu Jan  1 08:04:44 1970: Starting webcgid: done
Thu Jan  1 08:04:44 1970: Starting irsc_util: Starting irsc tool
Thu Jan  1 08:04:44 1970: Failed to open file:/etc/sec_config
Thu Jan  1 08:04:44 1970: Absent/Invalid config,Default rules apply
Thu Jan  1 08:04:44 1970: Ending irsc tool
Thu Jan  1 08:04:44 1970: done
Thu Jan  1 08:04:44 1970: Starting modem dependent daemons: Starting/Loading embms_kernel module: done loading embms_kernel module
Thu Jan  1 08:04:47 1970: Starting qmuxd: done
Thu Jan  1 08:04:47 1970: Starting thermal-engine: done
Thu Jan  1 08:04:47 1970: Starting csdserver: done
Thu Jan  1 08:04:47 1970: Starting netmgrd: done
Thu Jan  1 08:04:47 1970: Starting atreset: done
Thu Jan  1 08:04:47 1970: Starting Lighttpd Web Server: 1970-01-01 08:04:47: (/home/lynn/work/kl/mdm9607-v11-dtu/apps_proc/oe-core/build/tmp-glibc/work/armv7a-vfp-neon-oe-linux-gnueabi/lighttpd/1.4.45-r0/lighttpd-1.4.45/src/log.c.217) server started
Thu Jan  1 08:04:48 1970: lighttpd.
Thu Jan  1 08:04:48 1970: Starting eMBMs_TunnelingModule: done
Thu Jan  1 08:04:48 1970: Starting qmi_ip: done
Thu Jan  1 08:04:48 1970: Starting subsystem_ramdump: done
Thu Jan  1 08:04:48 1970: Starting system message bus: dbus.
Thu Jan  1 08:04:48 1970: Starting modem dependent daemons: Starting diagrebootapp: done
Thu Jan  1 08:04:48 1970: Starting atreset: done
Thu Jan  1 08:04:48 1970: Starting Lighttpd Web Server: /usr/sbin/lighttpd is already running
Thu Jan  1 08:04:48 1970: 636
Thu Jan  1 08:04:48 1970: lighttpd.
Thu Jan  1 08:04:48 1970: Starting qti_ppp: done
Thu Jan  1 08:04:48 1970: done
Thu Jan  1 08:04:48 1970: Starting netd: done
Thu Jan  1 08:04:48 1970:  * Starting Avahi Unicast DNS Configuration Daemon: avahi-dnsconfd
Thu Jan  1 08:04:48 1970:    ...fail!
Thu Jan  1 08:04:48 1970: Starting dturs232: done
Thu Jan  1 08:04:49 1970: Starting dturs485: done
Thu Jan  1 08:04:49 1970: Starting powerconfig for mdm9607: Starting pdc daemon: done

上面为boot的启动日志,下面为dmesg日志:

/var/volatile/tmp # dmesg
[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Initializing cgroup subsys cpu
[    0.000000] Initializing cgroup subsys cpuacct
[    0.000000] Linux version 3.18.20 (lynn@Think) (gcc version 4.9.2 (GCC) ) #1 PREEMPT Wed Apr 11 14:10:09 CST 2018
[    0.000000] CPU: ARMv7 Processor [410fc075] revision 5 (ARMv7), cr=10c53c7d
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[    0.000000] Machine model: Qualcomm Technologies, Inc. MDM 9607 DTU v1p2
[    0.000000] Reserved memory: reserved region for node 'modem_adsp_region@0': base 0x82a00000, size 80 MiB
[    0.000000] Reserved memory: reserved region for node 'cnss_debug_region@0': base 0x87a00000, size 2 MiB
[    0.000000] Reserved memory: reserved region for node 'external_image_region@0': base 0x87c00000, size 4 MiB
[    0.000000] Removed memory: created DMA memory pool at 0x82a00000, size 80 MiB
[    0.000000] Reserved memory: initialized node modem_adsp_region@0, compatible id removed-dma-pool
[    0.000000] Removed memory: created DMA memory pool at 0x87a00000, size 2 MiB
[    0.000000] Reserved memory: initialized node cnss_debug_region@0, compatible id removed-dma-pool
[    0.000000] Removed memory: created DMA memory pool at 0x87c00000, size 4 MiB
[    0.000000] Reserved memory: initialized node external_image_region@0, compatible id removed-dma-pool
[    0.000000] cma: Reserved 4 MiB at 0x8fc00000
[    0.000000] Memory policy: Data cache writeback
[    0.000000] On node 0 totalpages: 64000
[    0.000000] free_area_init_node: node 0, pgdat c0b51cdc, node_mem_map cf9d0000
[    0.000000]   Normal zone: 512 pages used for memmap
[    0.000000]   Normal zone: 0 pages reserved
[    0.000000]   Normal zone: 64000 pages, LIFO batch:15
[    0.000000] CPU: All CPU(s) started in SVC mode.
[    0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
[    0.000000] pcpu-alloc: [0] 0
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 63488
[    0.000000] Kernel command line: noinitrd rw console=ttyHSL0,115200,n8 androidboot.hardware=qcom ehci-hcd.park=3 msm_rtb.filter=0x37 lpm_levels.sleep_disabled=1  earlycon=msm_hsl_uart,0x78b3000  androidboot.serialno=MDM9607 androidboot.authorized_kernel=true androidboot.baseband=msm rootfstype=ubifs rootflags=bulk_read root=ubi0:rootfs ubi.mtd=15
[    0.000000] PID hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000000] Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
[    0.000000] Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Memory: 154304K/256000K available (7612K kernel code, 542K rwdata, 3120K rodata, 304K init, 1277K bss, 101696K reserved)
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
[    0.000000]     vmalloc : 0xd0800000 - 0xff000000   ( 744 MB)
[    0.000000]     lowmem  : 0xc0000000 - 0xd0000000   ( 256 MB)
[    0.000000]     modules : 0xbf000000 - 0xc0000000   (  16 MB)
[    0.000000]       .text : 0xc0008000 - 0xc0a83338   (10733 kB)
[    0.000000]       .init : 0xc0a84000 - 0xc0ad0000   ( 304 kB)
[    0.000000]       .data : 0xc0ad0000 - 0xc0b57ae0   ( 543 kB)
[    0.000000]        .bss : 0xc0b57ba4 - 0xc0c97060   (1278 kB)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] Preemptible hierarchical RCU implementation.
[    0.000000] NR_IRQS:16 nr_irqs:16 16
[    0.000000] GIC CPU mask not found - kernel will fail to boot.
[    0.000000] GIC CPU mask not found - kernel will fail to boot.
[    0.000000] mpm_init_irq_domain(): Cannot find irq controller for qcom,gpio-parent
[    0.000000] MPM 1 irq mapping errored -517
[    0.000000] Architected mmio timer(s) running at 19.20MHz (virt).
[    0.000010] sched_clock: 56 bits at 19MHz, resolution 52ns, wraps every 3579139424256ns
[    0.000026] Switching to timer-based delay loop, resolution 52ns
[    0.000044] Switched to clocksource arch_mem_counter
[    0.000690] Console: colour dummy device 80x30
[    0.000712] Calibrating delay loop (skipped), value calculated using timer frequency.. 38.40 BogoMIPS (lpj=192000)
[    0.000729] pid_max: default: 32768 minimum: 301
[    0.000847] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000863] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.001527] Initializing cgroup subsys freezer
[    0.001555] Initializing cgroup subsys debug
[    0.001591] CPU: Testing write buffer coherency: ok
[    0.001938] Setting up static identity map for 0x8073dfa8 - 0x8073e000
[    0.002931]
[    0.002931] **********************************************************
[    0.002951] **   NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE   **
[    0.002960] **                                                      **
[    0.002969] ** trace_printk() being used. Allocating extra memory.  **
[    0.002978] **                                                      **
[    0.002986] ** This means that this is a DEBUG kernel and it is     **
[    0.002994] ** unsafe for produciton use.                           **
[    0.003003] **                                                      **
[    0.003011] ** If you see this message and you are not debugging    **
[    0.003019] ** the kernel, report this immediately to your vendor!  **
[    0.003028] **                                                      **
[    0.003036] **   NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE   **
[    0.003045] **********************************************************
[    0.003843] MSM Memory Dump base table set up
[    0.003881] MSM Memory Dump apps data table set up
[    0.013877] VFP support v0.3: implementor 41 architecture 2 part 30 variant 7 rev 5
[    0.015538] pinctrl core: initialized pinctrl subsystem
[    0.015972] regulator-dummy: no parameters
[    0.043987] NET: Registered protocol family 16
[    0.045895] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.100109] cpuidle: using governor ladder
[    0.130099] cpuidle: using governor menu
[    0.160097] cpuidle: using governor qcom
[    0.168849] msm_watchdog b017000.qcom,wdt: wdog absent resource not present
[    0.169155] msm_watchdog b017000.qcom,wdt: MSM Watchdog Initialized
[    0.174175] spmi_pmic_arb 200f000.qcom,spmi: PMIC Arb Version-2 0x20010000
[    0.176920] platform 4080000.qcom,mss: assigned reserved memory node modem_adsp_region@0
[    0.177551] irq: no irq domain found for /soc/pinctrl@1000000 !
[    0.178274] mem_acc_corner: 0 <--> 0 mV
[    0.180020] hw-breakpoint: found 5 (+1 reserved) breakpoint and 4 watchpoint registers.
[    0.180038] hw-breakpoint: maximum watchpoint size is 8 bytes.
[    0.181581] gpiochip_add: registered GPIOs 0 to 79 on device: 1000000.pinctrl
[    0.181604] GPIO chip 1000000.pinctrl: created GPIO range 0->79 ==> 1000000.pinctrl PIN 0->79
[    0.182179] __of_mpm_init(): MPM driver mapping exists
[    0.182695] msm_rpm_glink_dt_parse: qcom,rpm-glink compatible not matches
[    0.182712] msm_rpm_dev_probe: APSS-RPM communication over SMD
[    0.182725] smd_open() before smd_init()
[    0.183328] msm_mpm_dev_probe(): Cannot get clk resource for XO: -517
[    0.185551] smd_channel_probe_now: allocation table not initialized
[    0.187638] mdm9607_s1: 1050 <--> 1350 mV at 1225 mV normal idle
[    0.187822] spm_regulator_probe: name=mdm9607_s1, range=LV, voltage=1225000 uV, mode=AUTO, step rate=4800 uV/us
[    0.188273] cpr_efuse_init: apc_corner: efuse_addr = 0x000a4000 (len=0x1000)
[    0.188320] cpr_read_fuse_revision: apc_corner: fuse revision = 2
[    0.188340] cpr_parse_speed_bin_fuse: apc_corner: [row: 37]: 0x47d88832c995cf1e, speed_bits = 4
[    0.188423] cpr_pvs_init: apc_corner: pvs voltage: [1050000 1100000 1212500] uV
[    0.188439] cpr_pvs_init: apc_corner: ceiling voltage: [1050000 1225000 1350000] uV
[    0.188452] cpr_pvs_init: apc_corner: floor voltage: [1050000 1050000 1150000] uV
[    0.189204] i2c-msm-v2 78b6000.i2c: probing driver i2c-msm-v2
[    0.189288] i2c-msm-v2 78b6000.i2c: error on clk_get(core_clk):-517
[    0.189306] i2c-msm-v2 78b6000.i2c: error probe() failed with err:-517
[    0.192066] msm-thermal soc:qcom,msm-thermal: msm_thermal:Failed reading node=/soc/qcom,msm-thermal, key=qcom,core-limit-temp. err=-22. KTM continues
[    0.192103] msm-thermal soc:qcom,msm-thermal: probe_therm_reset:Failed reading node=/soc/qcom,msm-thermal, key=qcom,therm-reset-temp err=-22. KTM continues
[    0.192152] msm_thermal:msm_thermal_dev_probe Failed reading node=/soc/qcom,msm-thermal, key=qcom,online-hotplug-core. err:-517
[    0.193177] sps:sps is ready.
[    0.194964] msm_rpm_glink_dt_parse: qcom,rpm-glink compatible not matches
[    0.194983] msm_rpm_dev_probe: APSS-RPM communication over SMD
[    0.195944] mdm9607_s2: 750 <--> 1275 mV at 750 mV normal idle
[    0.196756] mdm9607_s3_level: 0 <--> 0 mV at 0 mV normal idle
[    0.197304] mdm9607_s3_level_ao: 0 <--> 0 mV at 0 mV normal idle
[    0.197820] mdm9607_s3_floor_level: 0 <--> 0 mV at 0 mV normal idle
[    0.198324] mdm9607_s3_level_so: 0 <--> 0 mV at 0 mV normal idle
[    0.199047] mdm9607_s4: 1800 <--> 1950 mV at 1800 mV normal idle
[    0.199761] mdm9607_l1: 1250 mV normal idle
[    0.200682] mdm9607_l2: 1800 mV normal idle
[    0.201422] mdm9607_l3: 1800 mV normal idle
[    0.202148] mdm9607_l4: 3075 mV normal idle
[    0.202890] mdm9607_l5: 1700 <--> 3050 mV at 1700 mV normal idle
[    0.203624] mdm9607_l6: 1700 <--> 3050 mV at 1700 mV normal idle
[    0.204372] mdm9607_l7: 1700 <--> 1900 mV at 1700 mV normal idle
[    0.205115] mdm9607_l8: 1800 mV normal idle
[    0.205877] mdm9607_l9: 1200 <--> 1250 mV at 1200 mV normal idle
[    0.206632] mdm9607_l10: 1050 mV normal idle
[    0.207367] mdm9607_l11: 1800 mV normal idle
[    0.208135] mdm9607_l12_level: 0 <--> 0 mV at 0 mV normal idle
[    0.208687] mdm9607_l12_level_ao: 0 <--> 0 mV at 0 mV normal idle
[    0.209222] mdm9607_l12_level_so: 0 <--> 0 mV at 0 mV normal idle
[    0.209753] mdm9607_l12_floor_lebel: 0 <--> 0 mV at 0 mV normal idle
[    0.210800] mdm9607_l13: 1800 <--> 2850 mV at 2850 mV normal idle
[    0.211563] mdm9607_l14: 2650 <--> 3000 mV at 2650 mV normal idle
[    0.211815] msm_mpm_dev_probe(): Cannot get clk resource for XO: -517
[    0.212106] cpr_efuse_init: apc_corner: efuse_addr = 0x000a4000 (len=0x1000)
[    0.212159] cpr_read_fuse_revision: apc_corner: fuse revision = 2
[    0.212179] cpr_parse_speed_bin_fuse: apc_corner: [row: 37]: 0x47d88832c995cf1e, speed_bits = 4
[    0.212263] cpr_pvs_init: apc_corner: pvs voltage: [1050000 1100000 1212500] uV
[    0.212277] cpr_pvs_init: apc_corner: ceiling voltage: [1050000 1225000 1350000] uV
[    0.212291] cpr_pvs_init: apc_corner: floor voltage: [1050000 1050000 1150000] uV
[    0.212499] cpr_init_cpr_parameters: apc_corner: up threshold = 2, down threshold = 3
[    0.212531] cpr_init_cpr_parameters: apc_corner: CPR is enabled by default.
[    0.212564] cpr_init_cpr_efuse: apc_corner: [row:65] = 0x15c002a22a2367
[    0.212587] cpr_init_cpr_efuse: apc_corner: CPR disable fuse = 0
[    0.212601] cpr_init_cpr_efuse: apc_corner: Corner[1]: ro_sel = 0, target quot = 674
[    0.212614] cpr_init_cpr_efuse: apc_corner: Corner[2]: ro_sel = 0, target quot = 674
[    0.212627] cpr_init_cpr_efuse: apc_corner: Corner[3]: ro_sel = 0, target quot = 871
[    0.212809] cpr_config: apc_corner: Timer count: 0x17700 (for 5000 us)
[    0.213296] apc_corner: 0 <--> 0 mV
[    0.213858] i2c-msm-v2 78b6000.i2c: probing driver i2c-msm-v2
[    0.213940] i2c-msm-v2 78b6000.i2c: error on clk_get(core_clk):-517
[    0.213958] i2c-msm-v2 78b6000.i2c: error probe() failed with err:-517
[    0.214434] msm-thermal soc:qcom,msm-thermal: msm_thermal:Failed reading node=/soc/qcom,msm-thermal, key=qcom,core-limit-temp. err=-22. KTM continues
[    0.214467] msm-thermal soc:qcom,msm-thermal: probe_therm_reset:Failed reading node=/soc/qcom,msm-thermal, key=qcom,therm-reset-temp err=-22. KTM continues
[    0.214579] msm_thermal:get_kernel_cluster_info CPU0 topology not initialized.
[    0.215064] cpu cpu0: dev_pm_opp_get_opp_count: device OPP not found (-19)
[    0.215081] msm_thermal:get_cpu_freq_plan_len Error reading CPU0 freq table len. error:-19
[    0.215092] msm_thermal:vdd_restriction_reg_init Defer vdd rstr freq init.
[    0.215556] cpu cpu0: dev_pm_opp_get_opp_count: device OPP not found (-19)
[    0.215573] msm_thermal:get_cpu_freq_plan_len Error reading CPU0 freq table len. error:-19
[    0.215588] cpu cpu0: dev_pm_opp_get_opp_count: device OPP not found (-19)
[    0.215599] msm_thermal:get_cpu_freq_plan_len Error reading CPU0 freq table len. error:-19
[    0.225174] qcom,gcc-mdm9607 1800000.qcom,gcc: Registered GCC clocks
[    0.225579] clock-a7 b010008.qcom,clock-a7: Speed bin: 4 PVS Version: 0
[    0.225661] a7ssmux: set OPP pair(400000000 Hz: 1 uV) on cpu0
[    0.225701] a7ssmux: set OPP pair(1305600000 Hz: 7 uV) on cpu0
[    0.227367] i2c-msm-v2 78b6000.i2c: probing driver i2c-msm-v2
[    0.227461] AXI: msm_bus_scale_register_client(): msm_bus_scale_register_client: Bus driver not ready.
[    0.227479] i2c-msm-v2 78b6000.i2c: msm_bus_scale_register_client(mstr-id:86):0 (not a problem)
[    0.281897] gpiochip_find_base: found new base at 1018
[    0.282081] gpiochip_add: registered GPIOs 1018 to 1023 on device: pm8019-gpio
[    0.282372] qcom,qpnp-pin qpnp-pin-6: qpnp_pin_probe: gpio_chip registered between 1018-1023
[    0.282519] gpiochip_find_base: found new base at 1013
[    0.282674] gpiochip_add: registered GPIOs 1013 to 1017 on device: pm8019-mpp
[    0.283031] qcom,qpnp-pin qpnp-pin-7: qpnp_pin_probe: gpio_chip registered between 1013-1017
[    0.283526] KPI: Bootloader start count = 17653
[    0.283541] KPI: Bootloader end count = 44920
[    0.283553] KPI: Bootloader display count = 1033851772
[    0.283564] KPI: Bootloader load kernel count = 17787
[    0.283574] KPI: Kernel MPM timestamp = 66628
[    0.283584] KPI: Kernel MPM Clock frequency = 32768
[    0.283617] socinfo_print: v0.10, id=290, ver=1.0, raw_id=74, raw_ver=0, hw_plat=8, hw_plat_ver=65536
[    0.283617]  accessory_chip=0, hw_plat_subtype=0, pmic_model=65539, pmic_die_revision=131074 foundry_id=1 serial_number=3382038302
[    0.283969] of_get_named_gpiod_flags: parsed 'gpio' property of node '/soc/rome_vreg[0]' - status (0)
[    0.284203] rome_vreg: no parameters
[    0.285275] SCSI subsystem initialized
[    0.285484] usbcore: registered new interface driver usbfs
[    0.285580] usbcore: registered new interface driver hub
[    0.285777] usbcore: registered new device driver usb
[    0.285991] pps_core: LinuxPPS API ver. 1 registered
[    0.286004] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti 
[    0.286770] cpufreq: driver msm up and running
[    0.287283] ION heap system created
[    0.287736] msm_bus_fabric_init_driver
[    0.294612] qcom,qpnp-power-on qpnp-power-on-1: PMIC@SID0 Power-on reason: Triggered from Hard Reset and 'cold' boot
[    0.294643] qcom,qpnp-power-on qpnp-power-on-1: PMIC@SID0: Power-off reason: Triggered from RESIN_N (Reset line/Volume Down Key)
[    0.294878] input: qpnp_pon as /devices/virtual/input/input0
[    0.295341] PMIC@SID0: PM8019 v2.2 options: 3, 2, 2, 2
[    0.296402] Advanced Linux Sound Architecture Driver Initialized.
[    0.297036] Bluetooth: cf433ee0
[    0.297086] NET: Registered protocol family 31
[    0.297095] Bluetooth: cf433ee0
[    0.297110] Bluetooth: cf433ed8Bluetooth: cf433ec8
[    0.297159] Bluetooth: cf433ec8<6>[    0.297443] cfg80211: Calling CRDA to update world regulatory domain
[    0.297475] cfg80211: World regulatory domain updated:
[    0.297485] cfg80211:  DFS Master region: unset
[    0.297493] cfg80211:   (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time)
[    0.297505] cfg80211:   (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A)
[    0.297516] cfg80211:   (2457000 KHz - 2482000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A)
[    0.297526] cfg80211:   (2474000 KHz - 2494000 KHz @ 20000 KHz), (N/A, 2000 mBm), (N/A)
[    0.297535] cfg80211:   (5170000 KHz - 5250000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
[    0.297546] cfg80211:   (5250000 KHz - 5330000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
[    0.297555] cfg80211:   (5490000 KHz - 5710000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
[    0.297566] cfg80211:   (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
[    0.297576] cfg80211:   (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm), (N/A)
[    0.298504] Switched to clocksource arch_mem_counter
[    0.320605] NET: Registered protocol family 2
[    0.321225] TCP established hash table entries: 2048 (order: 1, 8192 bytes)
[    0.321254] TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
[    0.321277] TCP: Hash tables configured (established 2048 bind 2048)
[    0.321328] TCP: reno registered
[    0.321341] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.321358] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.321497] NET: Registered protocol family 1
[    0.323278] futex hash table entries: 256 (order: -1, 3072 bytes)
[    0.328414] msgmni has been set to 309
[    0.330563] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 250)
[    0.330587] io scheduler noop registered
[    0.330601] io scheduler deadline registered
[    0.330705] io scheduler cfq registered (default)
[    0.330801] gpiochip_find_base: found new base at 981
[    0.330904] gpiochip_add: registered GPIOs 981 to 1012 on device: smp2p
[    0.331051] gpiochip_find_base: found new base at 949
[    0.331155] gpiochip_add: registered GPIOs 949 to 980 on device: smp2p
[    0.331192] gpiochip_find_base: found new base at 917
[    0.331273] gpiochip_add: registered GPIOs 917 to 948 on device: smp2p
[    0.331394] gpiochip_find_base: found new base at 885
[    0.331478] gpiochip_add: registered GPIOs 885 to 916 on device: smp2p
[    0.331513] gpiochip_find_base: found new base at 853
[    0.331602] gpiochip_add: registered GPIOs 853 to 884 on device: slave-kernel
[    0.331707] gpiochip_find_base: found new base at 853
[    0.331785] gpiochip_add: registered GPIOs 853 to 884 on device: master-kernel
[    0.336311] msm_rpm_log_probe: OK
[    0.337073] of_get_named_gpiod_flags: parsed 'qcom,gpio-proxy-unvote' property of node '/soc/qcom,mss@4080000[0]' - status (-517)
[    0.337950] msm_serial_hs module loaded
[    0.338234] msm_serial_hsl_probe: detected port #0 (ttyHSL0)
[    0.338272] AXI: get_pdata(): Error: Client name not found
[    0.338282] AXI: msm_bus_cl_get_pdata(): client has to provide missing entry for successful registration
[    0.338290] msm_serial_hsl_probe: Bus scaling is disabled
[    0.338415] 78b3000.serial: ttyHSL0 at MMIO 0x78b3000 (irq = 153, base_baud = 460800) is a MSM
[    0.338761] msm_serial_hsl_probe: detected port #1 (ttyHSL1)
[    0.338793] AXI: get_pdata(): Error: Client name not found
[    0.338803] AXI: msm_bus_cl_get_pdata(): client has to provide missing entry for successful registration
[    0.338810] msm_serial_hsl_probe: Bus scaling is disabled
[    0.338900] 78b1000.serial: ttyHSL1 at MMIO 0x78b1000 (irq = 151, base_baud = 460800) is a MSM
[    0.339248] msm_serial_hsl_probe: detected port #2 (ttyHSL2)
[    0.339283] AXI: get_pdata(): Error: Client name not found
[    0.339291] AXI: msm_bus_cl_get_pdata(): client has to provide missing entry for successful registration
[    0.339299] msm_serial_hsl_probe: Bus scaling is disabled
[    0.339391] 78b4000.serial: ttyHSL2 at MMIO 0x78b4000 (irq = 154, base_baud = 460800) is a MSM
[    0.339689] msm_serial_hsl_init: driver initialized
[    0.354173] brd: module loaded
[    0.356608] loop: module loaded
[    0.358335] i2c-core: driver [tabla-i2c-core] using legacy suspend method
[    0.358348] i2c-core: driver [tabla-i2c-core] using legacy resume method
[    0.358478] i2c-core: driver [wcd9xxx-i2c-core] using legacy suspend method
[    0.358487] i2c-core: driver [wcd9xxx-i2c-core] using legacy resume method
[    0.358592] i2c-core: driver [tasha-i2c-core] using legacy suspend method
[    0.358601] i2c-core: driver [tasha-i2c-core] using legacy resume method
[    0.358762] SCSI Media Changer driver v0.25
[    0.362601] sps: BAM device 0x07984000 is not registered yet.
[    0.362893] sps:BAM 0x07984000 is registered.
[    0.362914] msm_nand_bam_init: msm_nand_bam_init: BAM device registered: bam_handle 0xcee7c400
[    0.363143] sps:BAM 0x07984000 (va:0xd09a0000) enabled: ver:0x18, number of pipes:7
[    0.365115] msm_nand_parse_smem_ptable: Parsing partition table info from SMEM
[    0.365158] msm_nand_parse_smem_ptable: SMEM partition table found: ver: 4 len: 16
[    0.365185] msm_nand_version_check: nand_major:1, nand_minor:5, qpic_major:1, qpic_minor:5
[    0.365227] msm_nand_scan: NAND Id: 0x2690ac98 Buswidth: 8Bits Density: 512 MByte
[    0.365237] msm_nand_scan: pagesize: 4096 Erasesize: 262144 oobsize: 128 (in Bytes)
[    0.365244] msm_nand_scan: BCH ECC: 8 Bit
[    0.365259] msm_nand_scan: CFG0: 0x290409c0,           CFG1: 0x08045d5c
[    0.365259]             RAWCFG0: 0x2b8401c0,        RAWCFG1: 0x0005055d
[    0.365259]           ECCBUFCFG: 0x00000203,      ECCBCHCFG: 0x42040d10
[    0.365259]           RAWECCCFG: 0x42000d11, BAD BLOCK BYTE: 0x00000175
[    0.365280] Creating 16 MTD partitions on "7980000.nand":
[    0.365294] 0x000000000000-0x000000280000 : "sbl"
[    0.366027] 0x000000280000-0x000000500000 : "mibib"
[    0.366641] 0x000000500000-0x000001100000 : "efs2"
[    0.367233] 0x000001100000-0x000001200000 : "tz"
[    0.367839] 0x000001200000-0x000001280000 : "rpm"
[    0.368412] 0x000001280000-0x000001380000 : "aboot"
[    0.368967] 0x000001380000-0x000001b80000 : "boot"
[    0.369542] 0x000001b80000-0x000002c00000 : "scrub"
[    0.370254] 0x000002c00000-0x000003880000 : "efs2_bak"
[    0.370864] 0x000003880000-0x000007040000 : "modem"
[    0.371473] 0x000007040000-0x0000071c0000 : "misc"
[    0.372070] 0x0000071c0000-0x0000079c0000 : "recovery"
[    0.372678] 0x0000079c0000-0x000007b40000 : "fota"
[    0.373291] 0x000007b40000-0x000009240000 : "recoveryfs"
[    0.373848] 0x000009240000-0x00000c540000 : "systembak"
[    0.374420] 0x00000c540000-0x000020000000 : "system"
[    0.374990] msm_nand_probe: NANDc phys addr 0x7980000, BAM phys addr 0x7984000, BAM IRQ 164
[    0.375003] msm_nand_probe: Allocated DMA buffer at virt_addr 0xcfc42000, phys_addr 0x8fc42000
[    0.375879] tun: Universal TUN/TAP device driver, 1.6
[    0.375892] tun: (C) 1999-2004 Max Krasnyansky 
[    0.377200] PPP generic driver version 2.4.2
[    0.382662] cnss_configure_ramdump: ramdump addr: d2c00000, phys: 0x87a00000 subsys:'AR6320'
[    0.383056] cnss_sdio 87a00000.qcom,cnss-sdio: CNSS SDIO Driver registered
[    0.383555] msm_otg 78d9000.usb: msm_otg probe
[    0.383751] of_get_named_gpiod_flags: can't parse 'qcom,hub-reset-gpio' property of node '/soc/usb@78d9000[0]'
[    0.383765] of_get_named_gpiod_flags: can't parse 'qcom,sw-sel-gpio' property of node '/soc/usb@78d9000[0]'
[    0.383776] of_get_named_gpiod_flags: can't parse 'qcom,usbid-gpio' property of node '/soc/usb@78d9000[0]'
[    0.383794] of_get_named_gpiod_flags: can't parse 'qcom,hsusb-otg-vddmin-gpio' property of node '/soc/usb@78d9000[0]'
[    0.385537] msm_otg 78d9000.usb: OTG regs = d08f2000
[    0.387720] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    0.388022] ehci-msm: Qualcomm On-Chip EHCI Host Controller
[    0.388332] usbcore: registered new interface driver cdc_acm
[    0.388343] cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters
[    0.388422] usbcore: registered new interface driver usb-storage
[    0.388493] usbcore: registered new interface driver ums-alauda
[    0.388541] usbcore: registered new interface driver ums-cypress
[    0.388586] usbcore: registered new interface driver ums-datafab
[    0.388631] usbcore: registered new interface driver ums-freecom
[    0.388682] usbcore: registered new interface driver ums-isd200
[    0.388727] usbcore: registered new interface driver ums-jumpshot
[    0.388771] usbcore: registered new interface driver ums-karma
[    0.388815] usbcore: registered new interface driver ums-onetouch
[    0.388858] usbcore: registered new interface driver ums-sddr09
[    0.388903] usbcore: registered new interface driver ums-sddr55
[    0.388947] usbcore: registered new interface driver ums-usbat
[    0.388999] usbcore: registered new interface driver usb_ehset_test
[    0.390169] gbridge_init: gbridge_init successs.
[    0.391660] qcom,qpnp-rtc qpnp-rtc-5: rtc core: registered qpnp_rtc as rtc0
[    0.391937] i2c /dev entries driver
[    0.392879] unable to find DT imem DLOAD mode node
[    0.393147] unable to find DT imem EDLOAD mode node
[    0.393365] unable to find DT imem dload-type node
[    0.396217] msm_otg 78d9000.usb: phy_reset: success
[    0.414752] Bluetooth: cf433ee0
[    0.414768] Bluetooth: cf433ed8Bluetooth: cf433ed8
[    0.415490] sdhci: Secure Digital Host Controller Interface driver
[    0.415504] sdhci: Copyright(c) Pierre Ossman
[    0.415516] sdhci-pltfm: SDHCI platform and OF driver helper
[    0.416019] sdhci_msm 7824900.sdhci: sdhci_msm_probe: ICE device is not enabled
[    0.416048] of_get_named_gpiod_flags: can't parse 'cd-gpios' property of node '/soc/sdhci@7824900[0]'
[    0.416090] sdhci_msm 7824900.sdhci: no qcom,vdd-voltage-level property
[    0.416104] sdhci_msm 7824900.sdhci: no qcom,vdd-current-level property
[    0.416319] sdhci_msm 7824900.sdhci: sdhci_msm_pm_qos_parse_irq: error -22 reading irq cpu
[    0.416332] sdhci_msm 7824900.sdhci: sdhci_msm_pm_qos_parse: PM QoS voting for IRQ will be disabled
[    0.416346] sdhci_msm 7824900.sdhci: sdhci_msm_pm_qos_parse: PM QoS voting for cpu group will be disabled
[    0.419006] sdhci_msm 7824900.sdhci: No vmmc regulator found
[    0.419023] sdhci_msm 7824900.sdhci: No vqmmc regulator found
[    0.419459] mmc0: SDHCI controller on 7824900.sdhci [7824900.sdhci] using 32-bit ADMA in legacy mode
[    0.447983] sdhci_msm 7864900.sdhci: sdhci_msm_probe: ICE device is not enabled
[    0.448007] of_get_named_gpiod_flags: can't parse 'cd-gpios' property of node '/soc/sdhci@07864900[0]'
[    0.448225] sdhci_msm 7864900.sdhci: sdhci_msm_pm_qos_parse_irq: error -22 reading irq cpu
[    0.448238] sdhci_msm 7864900.sdhci: sdhci_msm_pm_qos_parse: PM QoS voting for IRQ will be disabled
[    0.448252] sdhci_msm 7864900.sdhci: sdhci_msm_pm_qos_parse: PM QoS voting for cpu group will be disabled
[    0.454552] sdhci_msm 7864900.sdhci: No vmmc regulator found
[    0.454569] sdhci_msm 7864900.sdhci: No vqmmc regulator found
[    0.455039] mmc1: SDHCI controller on 7864900.sdhci [7864900.sdhci] using 32-bit ADMA in legacy mode
[    0.485704] of_get_named_gpiod_flags: parsed 'gpios' property of node '/soc/gpio-leds/autodog_led[0]' - status (0)
[    0.485733] of_get_named_gpiod_flags: parsed 'gpios' property of node '/soc/gpio-leds/autodog_led[0]' - status (0)
[    0.486457] usbcore: registered new interface driver usbhid
[    0.486469] usbhid: USB HID core driver
[    0.487732] bimc-bwmon 408000.qcom,cpu-bwmon: BW HWmon governor registered.
[    0.488308] devfreq soc:qcom,cpubw: Couldn't update frequency transition information.
[    0.488626] coresight-fuse a601c.fuse: QPDI fuse not specified
[    0.488714] coresight-fuse a601c.fuse: Fuse initialized
[    0.492111] coresight-csr 6001000.csr: CSR initialized
[    0.492745] coresight-tmc 6026000.tmc: Byte Counter feature enabled
[    0.493133] sps:BAM 0x06084000 is registered.
[    0.493485] coresight-tmc 6026000.tmc: TMC initialized
[    0.493890] coresight-tmc 6025000.tmc: TMC initialized
[    0.495437] coresight-tpiu 6020000.tpiu: sdc voltage supply not specified or available
[    0.495651] nidnt boot config: 0
[    0.496524] coresight-tpiu 6020000.tpiu: NIDnT on SDCARD only mode
[    0.496726] coresight-tpiu 6020000.tpiu: TPIU initialized
[    0.498151] coresight-replicator 6024000.replicator: REPLICATOR initialized
[    0.498859] coresight-stm 6002000.stm: STM initialized
[    0.499350] coresight-hwevent 606c000.hwevent: Hardware Event driver initialized
[    0.502039] sps:BAM 0x078c4000 is registered.
[    0.502089] IPA HW is not supported on this target
[    0.505218] mmc0: new high speed SDIO card at address 0001
[    0.505814] coresight-remote-etm soc:rpm_etm0: Remote ETM initialized
[    0.506346] coresight-remote-etm soc:modem_etm0: Remote ETM initialized
[    0.521903] Netfilter messages via NETLINK v0.30.
[    0.521967] nf_conntrack version 0.5.0 (2475 buckets, 9900 max)
[    0.522367] ctnetlink v0.93: registering with nfnetlink.
[    0.522666] ip_set: protocol 6
[    0.522805] ipip: IPv4 over IPv4 tunneling driver
[    0.523492] ip_tables: (C) 2000-2006 Netfilter Core Team
[    0.523650] arp_tables: (C) 2002 David S. Miller
[    0.523717] TCP: cubic registered
[    0.523732] Initializing XFRM netlink socket
[    0.524144] NET: Registered protocol family 10
[    0.525050] ip6_tables: (C) 2000-2006 Netfilter Core Team
[    0.525262] sit: IPv6 over IPv4 tunneling driver
[    0.525795] NET: Registered protocol family 17
[    0.525837] NET: Registered protocol family 15
[    0.525899] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
[    0.525934] Bridge firewalling registered
[    0.525950] Ebtables v2.0 registered
[    0.526534] NET: Registered protocol family 27
[    0.528887] gpiochip_find_base: found new base at 853
[    0.529013] gpiochip_add: registered GPIOs 853 to 884 on device: slave-kernel
[    0.529248] gpiochip_find_base: found new base at 821
[    0.529349] gpiochip_add: registered GPIOs 821 to 852 on device: master-kernel
[    0.529771] of_get_named_gpiod_flags: parsed 'qcom,gpio-proxy-unvote' property of node '/soc/qcom,mss@4080000[0]' - status (0)
[    0.530512] of_get_named_gpiod_flags: parsed 'qcom,gpio-err-fatal' property of node '/soc/qcom,mss@4080000[0]' - status (0)
[    0.530531] of_get_named_gpiod_flags: parsed 'qcom,gpio-err-ready' property of node '/soc/qcom,mss@4080000[0]' - status (0)
[    0.530545] of_get_named_gpiod_flags: parsed 'qcom,gpio-stop-ack' property of node '/soc/qcom,mss@4080000[0]' - status (0)
[    0.530559] of_get_named_gpiod_flags: parsed 'qcom,gpio-force-stop' property of node '/soc/qcom,mss@4080000[0]' - status (0)
[    0.530574] of_get_named_gpiod_flags: parsed 'qcom,gpio-shutdown-ack' property of node '/soc/qcom,mss@4080000[0]' - status (0)
[    0.532609] of_get_named_gpiod_flags: parsed 'gpios' property of node '/soc/qcom,smp2pgpio_test_smp2p_15_in[0]' - status (0)
[    0.532675] of_get_named_gpiod_flags: parsed 'gpios' property of node '/soc/qcom,smp2pgpio_test_smp2p_15_out[0]' - status (0)
[    0.532727] of_get_named_gpiod_flags: parsed 'gpios' property of node '/soc/qcom,smp2pgpio_test_smp2p_1_in[0]' - status (0)
[    0.532779] of_get_named_gpiod_flags: parsed 'gpios' property of node '/soc/qcom,smp2pgpio_test_smp2p_1_out[0]' - status (0)
[    0.613335] ubi0: attaching mtd15
[    1.745374] ubi0: scanning is finished
[    1.752415] ubi0: attached mtd15 (name "system", size 314 MiB)
[    1.752431] ubi0: PEB size: 262144 bytes (256 KiB), LEB size: 253952 bytes
[    1.752441] ubi0: min./max. I/O unit sizes: 4096/4096, sub-page size 4096
[    1.752450] ubi0: VID header offset: 4096 (aligned 4096), data offset: 8192
[    1.752458] ubi0: good PEBs: 1255, bad PEBs: 4, corrupted PEBs: 0
[    1.752467] ubi0: user volume: 3, internal volumes: 1, max. volumes count: 128
[    1.752477] ubi0: max/mean erase counter: 4/1, WL threshold: 4096, image sequence number: 1328192
[    1.752487] ubi0: available PEBs: 0, total reserved PEBs: 1255, PEBs reserved for bad PEB handling: 36
[    1.752525] RNDIS_IPA module is loaded.
[    1.753139] file system registered
[    1.753227] mbim_init: initialize 1 instances
[    1.753305] mbim_init: Initialized 1 ports
[    1.753534] ubi0: background thread "ubi_bgt0d" started, PID 118
[    1.755043] rndis_qc_init: initialize rndis QC instance
[    1.755329] Number of LUNs=8
[    1.755344] Mass Storage Function, version: 2009/09/11
[    1.755355] LUN: removable file: (no medium)
[    1.755422] Number of LUNs=2
[    1.755492] LUN: removable file: (no medium)
[    1.755554] LUN: removable read only CD-ROM file: (no medium)
[    1.755563] Number of LUNs=2
[    1.755840] android_usb gadget: android_usb ready
[    1.755858] msm_hsusb msm_hsusb: [ci13xxx_start] hw_ep_max = 32
[    1.755908] msm_hsusb msm_hsusb: CI13XXX_CONTROLLER_RESET_EVENT received
[    1.755923] msm_hsusb msm_hsusb: CI13XXX_CONTROLLER_UDC_STARTED_EVENT received
[    1.756524] of_get_named_gpiod_flags: parsed 'gpios' property of node '/soc/gpio_keys/fact_reset[0]' - status (0)
[    1.756574] gpio-75 (fact_reset): gpiod_set_debounce: missing set() or set_debounce() operations
[    1.756906] input: gpio-keys as /devices/soc:gpio_keys/input/input1
[    1.757338] qcom,qpnp-rtc qpnp-rtc-5: setting system clock to 1970-01-01 00:04:38 UTC (278)
[    1.758870] parse_legacy_cluster_params(): Ignoring cluster params
[    1.758902] /soc/qcom,lpm-levels/qcom,pm-cluster@0: No CPU phandle, assuming single cluster
[    1.760859] qcom,cc-debug-mdm9607 1800000.qcom,debug: Registered Debug Mux successfully
[    1.761172] mem_acc_corner: disabling
[    1.761195] clock_late_init: Removing enables held for handed-off clocks
[    1.762774] ALSA device list:
[    1.762785]   No soundcards found.
[    1.762884] Warning: unable to open an initial console.
[    1.770170] UBIFS (ubi0:0): background thread "ubifs_bgt0_0" started, PID 124
[    1.885359] UBIFS (ubi0:0): UBIFS: mounted UBI device 0, volume 0, name "rootfs"
[    1.885378] UBIFS (ubi0:0): LEB size: 253952 bytes (248 KiB), min./max. I/O unit sizes: 4096 bytes/4096 bytes
[    1.885390] UBIFS (ubi0:0): FS size: 63741952 bytes (60 MiB, 251 LEBs), journal size 9404416 bytes (8 MiB, 38 LEBs)
[    1.885399] UBIFS (ubi0:0): reserved for root: 0 bytes (0 KiB)
[    1.885412] UBIFS (ubi0:0): media format: w4/r0 (latest is w4/r0), UUID 275BF51F-306C-432F-8342-B64B5DBB329D, small LPT model
[    1.887839] VFS: Mounted root (ubifs filesystem) on device 0:12.
[    1.888277] Freeing unused kernel memory: 304K (c0a84000 - c0ad0000)
[    2.475807] UBIFS (ubi0:0): background thread "ubifs_bgt0_0" stops
[    2.640267] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" started, PID 170
[    2.695293] UBIFS (ubi0:1): recovery needed
[    2.821056] UBIFS (ubi0:1): recovery completed
[    2.821145] UBIFS (ubi0:1): UBIFS: mounted UBI device 0, volume 1, name "usrfs"
[    2.821157] UBIFS (ubi0:1): LEB size: 253952 bytes (248 KiB), min./max. I/O unit sizes: 4096 bytes/4096 bytes
[    2.821170] UBIFS (ubi0:1): FS size: 181829632 bytes (173 MiB, 716 LEBs), journal size 9404416 bytes (8 MiB, 38 LEBs)
[    2.821180] UBIFS (ubi0:1): reserved for root: 0 bytes (0 KiB)
[    2.821193] UBIFS (ubi0:1): media format: w4/r0 (latest is w4/r0), UUID E6CF1CBF-EAA0-4DE1-8602-E1F07B2CE845, small LPT model
[    2.856531] ubi1: attaching mtd9
[    3.050644] ubi1: scanning is finished
[    3.056653] ubi1: attached mtd9 (name "modem", size 55 MiB)
[    3.056668] ubi1: PEB size: 262144 bytes (256 KiB), LEB size: 253952 bytes
[    3.056678] ubi1: min./max. I/O unit sizes: 4096/4096, sub-page size 4096
[    3.056687] ubi1: VID header offset: 4096 (aligned 4096), data offset: 8192
[    3.056696] ubi1: good PEBs: 223, bad PEBs: 0, corrupted PEBs: 0
[    3.056704] ubi1: user volume: 1, internal volumes: 1, max. volumes count: 128
[    3.056714] ubi1: max/mean erase counter: 3/1, WL threshold: 4096, image sequence number: 35657280
[    3.056723] ubi1: available PEBs: 0, total reserved PEBs: 223, PEBs reserved for bad PEB handling: 40
[    3.058926] ubi1: background thread "ubi_bgt1d" started, PID 179
[    3.206937] UBIFS (ubi1:0): UBIFS: mounted UBI device 1, volume 0, name "modem", R/O mode
[    3.206956] UBIFS (ubi1:0): LEB size: 253952 bytes (248 KiB), min./max. I/O unit sizes: 4096 bytes/4096 bytes
[    3.206968] UBIFS (ubi1:0): FS size: 42917888 bytes (40 MiB, 169 LEBs), journal size 7110656 bytes (6 MiB, 28 LEBs)
[    3.206977] UBIFS (ubi1:0): reserved for root: 0 bytes (0 KiB)
[    3.206991] UBIFS (ubi1:0): media format: w4/r0 (latest is w4/r0), UUID B631A95C-0B08-430B-8955-2C51A799A5C5, small LPT model
[    3.443957] subsys-restart: __subsystem_get(): Changing subsys fw_name to modem
[    3.460021] pil-q6v5-mss 4080000.qcom,mss: modem: loading from 0x82a00000 to 0x87800000
[    3.500262] pil-q6v5-mss 4080000.qcom,mss: Debug policy not present - msadp. Continue.
[    3.500983] pil-q6v5-mss 4080000.qcom,mss: Loading MBA and DP (if present) from 0x8fd00000 to 0x8fe00000
[    3.549125] pil-q6v5-mss 4080000.qcom,mss: MBA boot done
[    4.924464] enable_store: android_usb: already disabled
[    4.924959] lun0: unable to open backing file: /dev/mmcblk0
[    5.130584] read descriptors
[    5.130611] read strings
[    5.140271] msm_hsusb msm_hsusb: CI13XXX_CONTROLLER_CONNECT_EVENT received
[    5.250382] QTI:start
[    5.258030] msm_otg 78d9000.usb: Avail curr from USB = 100
[    5.258329] android_work: android_work: did not send uevent (0 0   (null))
[    5.348502] android_work: android_work: sent uevent USB_STATE=CONNECTED
[    5.360301] android_work: android_work: sent uevent USB_STATE=DISCONNECTED
[    5.432899] USB QCMAP NL IOCTL Snd GETNEIGH Succ
[    5.458316] android_work: android_work: sent uevent USB_STATE=CONNECTED
[    7.530002] cgid: starting
[    7.583060] cgid: cmd failed 1, rm -r /data/lighttpd-tmp/*
[    7.587585] cgid: running
[    9.969683] android_usb gadget: high-speed config #1: 86000c8.android_usb
[    9.969734] diag: USB channel diag connected
[    9.969845] msm_otg 78d9000.usb: Avail curr from USB = 500
[    9.970151] gbam_connect_work: gbam_connect_work: Bam channel is not ready
[   10.020199] android_work: android_work: sent uevent USB_STATE=CONFIGURED
[   10.399584] pil-q6v5-mss 4080000.qcom,mss: modem: Brought out of reset
[   10.467649] pil-q6v5-mss 4080000.qcom,mss: Subsystem error monitoring/handling services are up
[   10.467701] pil-q6v5-mss 4080000.qcom,mss: modem: Power/Clock ready interrupt received
[   10.467988] M-Notify: General: 7
[   10.586531] diag: In diag_send_feature_mask_update, control channel is not open, p: 0, c0c0d698
[   10.600353] apr_tal:Modem Is Up
[   10.709609] embms:start/load
[   10.989982] msm_thermal:set_enabled enabled = 0
[   11.345443] eMBMs Tunneling Module:start
[   11.523562] random: dbus-uuidgen urandom read with 45 bits of entropy available
[   11.780871] QTI_PPP:start
[   11.843809] sps:BAM 0x04044000 is registered.
[   11.844024] sps:BAM 0x04044000 (va:0xd0e20000) enabled: ver:0x27, number of pipes:6
[   12.490562] ++++ /etc/rc5.d/S99power_config -> ENABLE-FTRACE
[   12.760827] netd: starting
[   12.762087] panic_download is 0.
[   12.765071] netd: load_config: unrecognize mobile_reg_apn_name =
[   12.765098] netd: load_config: unrecognize mobile_reg_username =
[   12.765113] netd: load_config: unrecognize mobile_reg_password =
[   12.765127] netd: load_config: unrecognize mobile_reg_authtype = 0
[   12.765141] netd: load_config: unrecognize gateway_domain = mydtu.com
[   12.766014] netd: load_config: unrecognize ping_server = www.baidu.com
[   12.766038] netd: load_config: unrecognize cgiservice = 1
[   12.766057] netd: load_config: unrecognize wifimac = 84:1E:24:00:09:DF
[   12.871388] mbimd: Proc start
[   12.931690] mbim_open: Open mbim driver
[   12.931706] mbim_open: Lock mbim_dev->open_excl for open
[   12.931714] mbim_open: USB cable not connected
[   12.931722] mbim_open: Exit, mbim file opened
[   13.120701] Realtek WLAN driver - version 1.7 (2017-05-15)
[   13.120719] Adaptivity function - version 9.1
[   13.120729]  wlan_index:0  1, 10,0x8179024c,0x0,0
[   13.122613] rtw_drv_init: sdio_func_id is "mmc0:0001:1"
[   13.122629] =====>>INSIDE rtl8192cd_init_one <<=====
[   13.122636] init for root device
[   13.123066] Device Name = RTKWiFi0
[   13.123077] VIF_NUM=1
[   13.123086] sizeof(struct rtl8192cd_priv) = 12008
[   13.180899] register wiphy device:ce7c6140
[   13.277286] =====>>EXIT rtl8192cd_init_one <<=====
[   13.277305] =====>>INSIDE rtl8192cd_init_one <<=====
[   13.277312] init for vxd device
[   13.277321] sizeof(struct rtl8192cd_priv) = 12008
[   13.311734] =====>>EXIT rtl8192cd_init_one <<=====
[   13.311752] =====>>INSIDE rtl8192cd_init_one <<=====
[   13.311759] init for virtual device
[   13.311768] sizeof(struct rtl8192cd_priv) = 12008
[   13.322606] =====>>EXIT rtl8192cd_init_one <<=====
[   13.950535] libphy: emac-mdio: probed
[   14.256215] Atheros 8031 ethernet 7c40000.qcom,ema:00: GPIO lookup for consumer reset
[   14.256234] Atheros 8031 ethernet 7c40000.qcom,ema:00: using device tree for GPIO lookup
[   14.256249] of_get_named_gpiod_flags: can't parse 'reset-gpios' property of node '/soc/qcom,emac@7c40000/ethernet-phy@0[0]'
[   14.256260] of_get_named_gpiod_flags: can't parse 'reset-gpio' property of node '/soc/qcom,emac@7c40000/ethernet-phy@0[0]'
[   14.256271] Atheros 8031 ethernet 7c40000.qcom,ema:00: using lookup tables for GPIO lookup
[   14.256284] Atheros 8031 ethernet 7c40000.qcom,ema:00: lookup for GPIO reset failed
[   14.640645] device wlan0 entered promiscuous mode
[   14.661373] device eth0 entered promiscuous mode
[   14.934778] netd: uim_update_card_status: card_status_valid = 1
[   14.934805] netd: uim_update_card_status: index_gw_pri = 0
[   14.934819] netd: uim_update_card_status: index_1x_pri = 65535
[   14.934832] netd: uim_update_card_status: index_gw_sec = 65535
[   14.934844] netd: uim_update_card_status: index_1x_sec = 65535
[   14.934857] netd: uim_update_card_status:   card_state = 1
[   14.934870] netd: uim_update_card_status:   upin pin_state = 0 pin_retries = 0 puk_retries = 0
[   14.934884] netd: uim_update_card_status:   error_code = 0
[   14.934897] netd: uim_update_card_status:     app_type = 2 app_state = 7
[   14.934912] netd: uim_update_card_status:     pin1 pin_state = 3 pin_retries = 3 puk_retries = 10
[   14.934926] netd: uim_update_card_status:     pin2 pin_state = 1 pin_retries = 3 puk_retries = 10
[   14.936966] netd: uim_update_imsi: sim app type = 2 imsi = 460040615701885
[   15.193762] netd: uim_update_imsi: mcc = 460 mnc = 04 apn_name = cmiot
[   15.231138] netd: nas_update_serving_system: registration_state = 2 cs_attach_state = 2 ps_attach_state = 2 selected_network = 2
[   15.240344] netd: nas_update_sys_info: wcdma domain 0
[   15.292377] IPv6: ADDRCONF(NETDEV_UP): br0: link is not ready
[   15.657207] netd: nas_ind: msg_id = 0x24
[   15.657284] netd: nas_ind: registration_state = 2 cs_attach_state = 2 ps_attach_state = 2 selected_network = 2
[   15.657359] netd: nas_ind: msg_id = 0x4e
[   15.657406] netd: nas_ind: lte domain 4
[   15.750593] [PHY_ConfigBBWithParaFile][PHY_REG_PG_88E]
[   16.259888] ===> Load_88E_Firmware
[   16.410899] random: nonblocking pool is initialized
[   16.620473] <=== Load_88E_Firmware
[   16.633666] Switch to channel 7 before doing 88E IQK
[   16.942249] netd: nas_ind: msg_id = 0x24
[   16.942328] netd: nas_ind: registration_state = 1 cs_attach_state = 1 ps_attach_state = 1 selected_network = 2
[   16.942416] netd: nas_ind: msg_id = 0x4e
[   16.942462] netd: nas_ind: lte
[   16.942478] netd: nas_ind: lte domain 3
[   16.942594] netd: nas_ind: msg_id = 0x4e
[   16.942635] netd: nas_ind: lte
[   16.942649] netd: nas_ind: lte domain 3
[   16.942716] netd: nas_ind: msg_id = 0x24
[   16.942744] netd: nas_ind: registration_state = 1 cs_attach_state = 1 ps_attach_state = 1 selected_network = 2
[   16.942876] netd: nas_ind: msg_id = 0x61
[   16.986117] netd: nas_ind: msg_id = 0x24
[   16.986183] netd: nas_ind: registration_state = 1 cs_attach_state = 1 ps_attach_state = 1 selected_network = 2
[   17.239151] gain offset : invalid data
[   17.241513] br0: port 1(wlan0) entered forwarding state
[   17.241579] br0: port 1(wlan0) entered forwarding state
[   17.242569] IPv6: ADDRCONF(NETDEV_CHANGE): br0: link becomes ready
[   17.270754] cfg80211: Calling CRDA for country: EU
[   17.396103] netd: running
[   18.909712] netd: nas_ind: msg_id = 0x24
[   18.909780] netd: nas_ind: registration_state = 1 cs_attach_state = 1 ps_attach_state = 1 selected_network = 2
[   18.910714] netd: nas_ind: msg_id = 0x4e
[   18.910779] netd: nas_ind: lte
[   18.910796] netd: nas_ind: lte domain 3
[   19.598730] qcom-emac 7c40000.qcom,emac eth0: TX queues 1, TX descriptors 512
[   19.598751] qcom-emac 7c40000.qcom,emac eth0: RX queues 1, Rx descriptors 256
[   19.684168] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[   19.693764] USB QCMAP NL IOCTL Snd GETNEIGH Succ
[   20.002050] netd: mobile_data_connect_callback: lte
[   20.002085] netd: mobile_data_connect_callback: lte domain 3
[   20.002106] netd: mobile_data_connect_callback2: apn_name = cmiot
[   20.002120] netd: mobile_data_connect_callback2: username =
[   20.002133] netd: mobile_data_connect_callback2: password =
[   20.002147] netd: mobile_data_connect_callback2: authtype = 0
[   20.021136] netd: wds_ind: msg_id = 0x22
[   20.021174] netd: wds_ind: connection_status = 2
[   20.430346] cfg80211: Calling CRDA to update world regulatory domain
[   20.430966] cfg80211: World regulatory domain updated:
[   20.430980] cfg80211:  DFS Master region: unset
[   20.430989] cfg80211:   (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time)
[   20.431001] cfg80211:   (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A)
[   20.431012] cfg80211:   (2457000 KHz - 2482000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A)
[   20.431023] cfg80211:   (2474000 KHz - 2494000 KHz @ 20000 KHz), (N/A, 2000 mBm), (N/A)
[   20.431034] cfg80211:   (5170000 KHz - 5250000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
[   20.431044] cfg80211:   (5250000 KHz - 5330000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
[   20.431055] cfg80211:   (5490000 KHz - 5710000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
[   20.431066] cfg80211:   (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
[   20.431990] cfg80211:   (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm), (N/A)
[   21.023732] netd: mobile_data_update_route_dns: pdp_type = 0
[   21.023796] netd: mobile_data_update_route_dns: primary_DNS_IPv4_address_preference = 211.136.20.203
[   21.023817] netd: mobile_data_update_route_dns: secondary_DNS_IPv4_address_preference = 211.136.17.107
[   21.023833] netd: mobile_data_update_route_dns: authentication_preference = 0x0
[   21.023849] netd: mobile_data_update_route_dns: ipv4_address_preference = 10.123.157.135
[   21.023864] netd: mobile_data_update_route_dns: profile type = 0 index = 3
[   21.023880] netd: mobile_data_update_route_dns: ipv4_gateway_addr = 10.123.157.136
[   21.023895] netd: mobile_data_update_route_dns: ipv4_subnet_mask = 255.255.255.240
[   21.023909] netd: mobile_data_update_route_dns: mtu = 1500
[   21.023922] netd: mobile_data_update_route_dns: ip_family = 4
[   21.057215] netd: wan_state_change: connected = 1
[   21.871902] USB QCMAP NL IOCTL Snd GETNEIGH Succ
[   22.101830] USB QCMAP NL IOCTL Snd GETNEIGH Succ
[   22.513021] [rtw_cmd_thread] bDriverStopped(1) OR bSurpriseRemoved(0)
[   22.513141] [rtw_dev_unload] cmd_thread terminate
[   22.513266] [rtw_dev_unload] xmit_thread
[   22.513286] rtw_xmit_thread: bDriverStopped(1) OR bSurpriseRemoved(0)
[   22.513362]  terminate
[   22.572890] [PHY_ConfigBBWithParaFile][PHY_REG_PG_88E]
[   22.932681] ===> Load_88E_Firmware
[   23.144642] <=== Load_88E_Firmware
[   23.150153] Switch to channel 7 before doing 88E IQK
[   23.464756] gain offset : invalid data
[   23.474172] USB QCMAP NL IOCTL Snd GETNEIGH Succ
[   31.312398] netd: nas_ind: msg_id = 0x24
[   31.312480] netd: nas_ind: registration_state = 1 cs_attach_state = 1 ps_attach_state = 1 selected_network = 2
[   31.312791] netd: nas_ind: msg_id = 0x4e
[   31.312859] netd: nas_ind: lte
[   31.312879] netd: nas_ind: lte domain 3
[   32.280165] br0: port 1(wlan0) entered forwarding state
[   62.313255] netd: nas_ind: msg_id = 0x24
[   62.313333] netd: nas_ind: registration_state = 1 cs_attach_state = 1 ps_attach_state = 1 selected_network = 2
[   62.313426] netd: nas_ind: msg_id = 0x4e
[   62.313492] netd: nas_ind: lte
[   62.313514] netd: nas_ind: lte domain 3
[  105.552547] netd: nas_ind: msg_id = 0x24
[  105.552617] netd: nas_ind: registration_state = 1 cs_attach_state = 1 ps_attach_state = 1 selected_network = 2
[  105.552854] netd: nas_ind: msg_id = 0x4e
[  105.552924] netd: nas_ind: lte
[  105.552944] netd: nas_ind: lte domain 3
[  207.896761] netd: nas_ind: msg_id = 0x24
[  207.896833] netd: nas_ind: registration_state = 1 cs_attach_state = 1 ps_attach_state = 1 selected_network = 2
[  207.897073] netd: nas_ind: msg_id = 0x4e
[  207.897145] netd: nas_ind: lte
[  207.897166] netd: nas_ind: lte domain 3
[  447.957907] netd: nas_ind: msg_id = 0x24
[  447.957984] netd: nas_ind: registration_state = 1 cs_attach_state = 1 ps_attach_state = 1 selected_network = 2
[  447.958246] netd: nas_ind: msg_id = 0x4e
[  447.958321] netd: nas_ind: lte
[  447.958341] netd: nas_ind: lte domain 3

分析日志的结果,发现用的是高通的平台,模块为MDM9X07系列的9607,上面写着呢。

那就搜索下MDM9X07平台的资料吧,具体的可以参加我提供的下载链接:

https://download.csdn.net/download/leekwen/10563103

文件系统为UBIFS,这个需要在linux下用mtd仿真一个分区,再进行挂载!

该系统主要的配置文件放在了/data/netd目录下,具体的如下:

/data # ls -l
ls -l
total 8
drwxr-xr-x    2 root     root           160 Apr 11  2018 configs  <---空
-rw-r--r--    1 root     root           236 Apr 11  2018 dturs232.conf
-rw-r--r--    1 root     root           206 Apr 11  2018 dturs485.conf
drwxrwxrwx    2 root     root           160 Jan  1 08:01 lighttpd-tmp <---空
drwxr-xr-x    2 root     root           160 Apr 11  2018 logs <---空
drwxr-xr-x    3 root     root           744 Jul 25  2018 netd
/data/netd # ls -l
ls -l
total 292
-rw-r--r--    1 root     root        282113 Apr 11  2018 apns-conf.xml <-----APN配置文件
-rw-r--r--    1 root     root             0 Apr 11  2018 hostapd.accept  <---MAC地址白名单
-rw-r--r--    1 root     root           959 Jan  1 08:00 hostapd.conf  <----wifi 配置文件
-rw-r--r--    1 root     root             0 Apr 11  2018 hostapd.deny <----MAC地址黑名单
-rw-r--r--    1 root     root          1111 Jan  1 08:00 netd.conf  <----网络接口配置文件
-rw-r--r--    1 root     root            44 Apr 11  2018 superuser <----特权用户及秘钥
drwxr-xr-x    2 root     root           232 Jul 25  2018 traffics  <---4G流量数据大小
-rw-r--r--    1 root     root            84 Apr 11  2018 wpa_supplicant.conf  <---WPA配置文件 此文件未用

再分析下进程和端口吧!

/var/volatile/tmp # ps aux
PID   USER     TIME   COMMAND
    1 root       0:01 init [5]
    2 root       0:00 [kthreadd]
    3 root       0:08 [ksoftirqd/0]
    5 root       0:00 [kworker/0:0H]
    7 root       0:00 [rcu_preempt]
    8 root       0:00 [rcu_sched]
    9 root       0:00 [rcu_bh]
   10 root       0:00 [khelper]
   11 root       0:00 [netns]
   12 root       0:00 [perf]
   13 root       0:00 [msm_watchdog]
   14 root       0:00 [smd_channel_clo]
   15 root       0:00 [smsm_cb_wq]
   16 root       0:00 [kworker/u2:1]
   17 root       0:00 [deferwq]
   18 root       0:00 [kworker/0:1]
   19 root       0:00 [irq/52-cpr]
   20 root       0:00 [mpm]
   21 root       0:10 [kworker/u2:2]
   22 root       0:00 [writeback]
   23 root       0:00 [crypto]
   24 root       0:00 [bioset]
   25 root       0:00 [kblockd]
   26 root       0:00 [system]
   27 root       0:00 [devfreq_wq]
   28 root       0:00 [cfg80211]
   29 root       0:00 [power_off_alarm]
   30 root       0:00 [kswapd0]
   31 root       0:00 [fsnotify_mark]
   42 root       0:00 [glink_ssr_wq]
   43 root       0:00 [apr_driver]
   44 root       0:00 [diag_real_time_]
   45 root       0:00 [diag_wq]
   46 root       0:00 [DIAG_USB_diag]
   47 root       0:00 [diag_cntl_wq]
   48 root       0:00 [diag_dci_wq]
   49 root       0:00 [DIAG_SMD_MODEM_]
   50 root       0:00 [DIAG_SMD_MODEM_]
   51 root       0:00 [DIAG_SMD_MODEM_]
   52 root       0:00 [DIAG_SMD_MODEM_]
   53 root       0:00 [DIAG_SMD_MODEM_]
   54 root       0:00 [DIAG_SMD_LPASS_]
   55 root       0:00 [DIAG_SMD_LPASS_]
   56 root       0:00 [DIAG_SMD_LPASS_]
   57 root       0:00 [DIAG_SMD_LPASS_]
   58 root       0:00 [DIAG_SMD_LPASS_]
   59 root       0:00 [DIAG_SMD_WCNSS_]
   60 root       0:00 [DIAG_SMD_WCNSS_]
   61 root       0:00 [DIAG_SMD_WCNSS_]
   62 root       0:00 [DIAG_SMD_WCNSS_]
   63 root       0:00 [DIAG_SMD_WCNSS_]
   64 root       0:00 [DIAG_SMD_SENSOR]
   65 root       0:00 [DIAG_SMD_SENSOR]
   66 root       0:00 [DIAG_SMD_SENSOR]
   67 root       0:00 [DIAG_SMD_SENSOR]
   68 root       0:00 [DIAG_SMD_SENSOR]
   69 root       0:00 [DIAG_SOCKMODEM_]
   70 root       0:00 [DIAG_SOCKMODEM_]
   71 root       0:00 [DIAG_SOCKMODEM_]
   72 root       0:00 [DIAG_SOCKMODEM_]
   73 root       0:00 [DIAG_SOCKMODEM_]
   74 root       0:00 [DIAG_SOCKLPASS_]
   75 root       0:00 [DIAG_SOCKLPASS_]
   76 root       0:00 [DIAG_SOCKLPASS_]
   77 root       0:00 [DIAG_SOCKLPASS_]
   78 root       0:00 [DIAG_SOCKLPASS_]
   79 root       0:00 [DIAG_SOCKWCNSS_]
   80 root       0:00 [DIAG_SOCKWCNSS_]
   81 root       0:00 [DIAG_SOCKWCNSS_]
   82 root       0:00 [DIAG_SOCKWCNSS_]
   83 root       0:00 [DIAG_SOCKWCNSS_]
   84 root       0:00 [DIAG_SOCKSENSOR]
   85 root       0:00 [DIAG_SOCKSENSOR]
   86 root       0:00 [DIAG_SOCKSENSOR]
   87 root       0:00 [DIAG_SOCKSENSOR]
   88 root       0:00 [DIAG_SOCKSENSOR]
   89 root       0:00 [DIAG_CNTL_SOCKE]
   90 root       0:00 [k_gserial]
   91 root       0:00 [k_ipa_usb]
   92 root       0:00 [uether]
   93 root       0:00 [k_gbridge]
   94 root       0:00 [therm_core:noti]
   95 root       0:00 [therm_core:noti]
   96 root       0:00 [therm_core:noti]
   97 root       0:00 [therm_core:noti]
   98 root       0:00 [therm_core:noti]
   99 root       0:00 [irq/216-tsens_i]
  100 root       0:00 [therm_core:noti]
  101 root       0:00 [therm_core:noti]
  102 root       0:00 [cfinteractive]
  103 root       0:00 [irq/170-7824900]
  104 root       0:18 [irq/155-mmc0]
  106 root       0:00 [irq/253-7864900]
  107 root       0:00 [irq/157-mmc1]
  108 root       0:00 [soc:rpm_etm0]
  109 root       0:00 [usb_bam_wq]
  110 root       0:00 [qmi_svc_event_w]
  111 root       0:00 [msm_ipc_router]
  112 root       0:00 [soc:modem_etm0]
  113 root       0:00 [ipv6_addrconf]
  114 root       0:00 [irq/441-modem]
  115 root       0:00 [sysmon_wq]
  116 root       0:00 [bam_dmux_rx]
  117 root       0:00 [bam_dmux_tx]
  118 root       0:00 [ubi_bgt0d]
  119 root       0:00 [k_bam_data]
  120 root       0:00 [f_mtp]
  122 root       0:00 [msm_thermal:fre]
  123 root       0:00 [msm_thermal:the]
  170 root       0:00 [ubifs_bgt0_1]
  179 root       0:00 [ubi_bgt1d]
  188 root       0:04 psmd
  415 root       0:00 ipacm_perf
  448 root       0:00 /sbin/adbd
  458 root       0:00 [k_gsmd]
  460 root       0:00 [k_gbam]
  461 root       0:03 [file-storage]
  475 root       0:00 /usr/bin/qti
  515 root       0:00 /usr/bin/keyd
  526 root       0:00 /sbin/syslogd -n -C64
  531 root       0:00 /usr/bin/webcgid
  553 root       0:00 [kworker/0:2]
  555 root       0:00 [IPCRTR]
  557 root       0:00 [modem_IPCRTR]
  584 root       0:00 /usr/bin/qmuxd
  588 root       0:00 /usr/bin/thermal-engine
  596 root       0:00 /usr/bin/netmgrd
  627 root       0:00 /usr/bin/thermal_low
  636 www-data   0:00 /usr/sbin/lighttpd -f /etc/lighttpd.conf
  658 messageb   0:00 /usr/bin/dbus-daemon --system
  667 root       0:00 /sbin/reboot-daemon
  669 diag       0:00 /usr/bin/diagrebootapp
  675 root       0:00 /usr/bin/atfwd_daemon
  708 root       0:01 /usr/bin/netd
  747 root       0:00 /usr/bin/dturs232 /data/dturs232.conf
  780 root       0:00 /usr/bin/pdc_daemon
  793 root       0:00 /usr/bin/mbimd
 1013 root       0:00 hostapd -B -P /var/run/hostapd.pid -e /var/tmp/hostapd.entropy.bin /data/netd/hostapd.conf
 1019 nobody     0:00 dnsmasq -x /var/run/dnsmasq.pid -l /var/run/dnsmasq.leases -i br0 -I lo -z --dhcp-range=br0,192.168.100.100,192.168.100.200,255.255.255.0,43200 --address=/mydtu.com/192.168.100.1 --address=/androapmi.yu.me/192.168.100.1 --address=/ioapmi.yu.me/192.168.100.1 --dhcp-option-force=6,192.168.100.1
 1068 root       0:00 [irq/325-emac_wo]
 1137 root       0:00 [rtw_xmit/wlan0]
 1138 root       0:09 [rtw_cmd/wlan0]
 1292 root       0:00 [kworker/u2:0]
 1306 root       0:00 /system/bin/sh -
 1316 root       0:00 ps aux

端口和服务的提供如下:

/data/netd # netstat -tunlp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 127.0.0.1:5037          0.0.0.0:*               LISTEN      448/adbd
tcp        0      0 0.0.0.0:80              0.0.0.0:*               LISTEN      629/lighttpd
tcp        0      0 0.0.0.0:5555            0.0.0.0:*               LISTEN      448/adbd
tcp        0      0 192.168.100.1:53        0.0.0.0:*               LISTEN      1012/dnsmasq
tcp        0      0 fe80::200:deff:fead:beef:53 :::*                LISTEN      1012/dnsmasq
udp        0      0 192.168.100.1:53        0.0.0.0:*                           1012/dnsmasq
udp        0      0 0.0.0.0:67              0.0.0.0:*                           1012/dnsmasq
udp        0      0 fe80::200:deff:fead:beef:53 :::*                            1012/dnsmasq

启动的进程,截取一两个:

/etc/rc.d/init.d # cat ebtables
#!/bin/bash
#
# init script for the Ethernet Bridge filter tables
#
# Written by Dag Wieers 
# Modified by Rok Papez 
#             Bart De Schuymer 
#
# chkconfig: - 15 85
# description: Ethernet Bridge filtering tables
#
# config: /etc/ebtables/ebtables         (text)
#         /etc/ebtables/ebtables. (binary)

source /etc/init.d/functions
source /etc/sysconfig/network

# Check that networking is up.
[ ${NETWORKING} = "no" ] && exit 0

[ -x /usr/sbin/ebtables ] || exit 1
[ -x /usr/sbin/ebtables-save ] || exit 1
[ -x /usr/sbin/ebtables-restore ] || exit 1

RETVAL=0
prog="ebtables"
desc="Ethernet bridge filtering"
umask 0077

#default configuration
EBTABLES_TEXT_FORMAT="yes"
EBTABLES_BINARY_FORMAT="yes"
EBTABLES_MODULES_UNLOAD="yes"
EBTABLES_SAVE_ON_STOP="no"
EBTABLES_SAVE_ON_RESTART="no"
EBTABLES_SAVE_COUNTER="no"

config=/etc/ebtables/$prog-config
[ -f "$config" ] && . "$config"

start() {
        echo -n $"Starting $desc ($prog): "
        if [ "$EBTABLES_BINARY_FORMAT" = "yes" ]; then
                for table in $(ls /etc/ebtables/ebtables.* 2>/dev/null | sed -e 's/.*ebtables\.//' -e '/save/d' ); do
                        /usr/sbin/ebtables -t $table --atomic-file /etc/ebtables/ebtables.$table --atomic-commit || RETVAL=1
                done
        else
                /usr/sbin/ebtables-restore < /etc/sysconfig/ebtables || RETVAL=1
        fi

        if [ $RETVAL -eq 0 ]; then
                success "$prog startup"
                rm -f /var/lock/subsys/$prog
        else
                failure "$prog startup"
        fi
        echo
}

stop() {
        echo -n $"Stopping $desc ($prog): "
        for table in $(grep '^ebtable_' /proc/modules | sed -e 's/ebtable_\([^ ]*\).*/\1/'); do
                /usr/sbin/ebtables -t $table --init-table || RETVAL=1
        done

        if [ "$EBTABLES_MODULES_UNLOAD" = "yes" ]; then
                for mod in $(grep -E '^(ebt|ebtable)_' /proc/modules | cut -f1 -d' ') ebtables; do
                        rmmod $mod 2> /dev/null
                done
        fi

        if [ $RETVAL -eq 0 ]; then
                success "$prog shutdown"
                rm -f /var/lock/subsys/$prog
        else
                failure "$prog shutdown"
        fi
        echo
}

restart() {
        stop
        start
}

save() {
        echo -n $"Saving $desc ($prog): "
        if [ "$EBTABLES_TEXT_FORMAT" = "yes" ]; then
                if [ -e /etc/ebtables/ebtables ]; then
                        chmod 0600 /etc/ebtables/ebtables
                        mv -f /etc/ebtables/ebtables /etc/ebtables/ebtables.save
                fi
                /usr/sbin/ebtables-save > /etc/ebtables/ebtables || RETVAL=1
        fi
        if [ "$EBTABLES_BINARY_FORMAT" = "yes" ]; then
                rm -f /etc/ebtables/ebtables.*.save
                for oldtable in $(ls /etc/ebtables/ebtables.* 2>/dev/null | grep -vF 'ebtables.save'); do
                        chmod 0600 $oldtable
                        mv -f $oldtable $oldtable.save
                done
                for table in $(grep '^ebtable_' /proc/modules | sed -e 's/ebtable_\([^ ]*\).*/\1/'); do
                        /usr/sbin/ebtables -t $table --atomic-file /etc/ebtables/ebtables.$table --atomic-save || RETVAL=1
                        if [ "$EBTABLES_SAVE_COUNTER" = "no" ]; then
                                /usr/sbin/ebtables -t $table --atomic-file /etc/ebtables/ebtables.$table -Z || RETVAL=1
                        fi
                done
        fi

        if [ $RETVAL -eq 0 ]; then
                success "$prog saved"
        else
                failure "$prog saved"
        fi
        echo
}

case "$1" in
  start)
        start
        ;;
  stop)
        [ "$EBTABLES_SAVE_ON_STOP" = "yes" ] && save
        stop
        ;;
  restart|reload)
        [ "$EBTABLES_SAVE_ON_RESTART" = "yes" ] && save
        restart
        ;;
  condrestart)
        [ -e /var/lock/subsys/$prog ] && restart
        RETVAL=$?
        ;;
  save)
        save
        ;;
  status)
        /usr/sbin/ebtables-save
        RETVAL=$?
        ;;
  *)
        echo $"Usage $0 {start|stop|restart|condrestart|save|status}"
        RETVAL=1
esac

exit $RETVAL
/etc/rc.d/init.d #

如果要测试的话,我会通过ADB push一个脚本进去,时刻监控着网络是否会掉线,运行时长等等信息。

淘宝搜了下MDM9607模块,180以上吧,而且不是有名的厂家生产的。

看来这个不起眼的黑盒子的价格,远远高过一个4G路由器的价格了。

由于方案不同,与我们自己在OP上搭建的4G路由器还是有些区别的。

不过,每个厂家的方案不同,对技术的要求也不同。

希望下次多给我们寄几个样品,反正也没有费用,测试完毕后,原样返回给他们。

顺便搜了一下MDM9X07系列的模块资料:

具有全网通能力的骁龙X5 LTE调制解调器(9x07)支持LTE Category 4,
最高可达150 Mbps的下载速率。MDM9207-1调制解调器在下行链路支持LTE Category 1,
最高达10 Mbps的速度,同时支持节电模式(Power Save Mode, PSM),
使用两节AA电池可实现最多长达10年的续航时间。这些调制解调器兼容全球主要蜂窝标准,
同时还支持Linux OS、ARM Cortex A7处理器、并已预集成支持MU-MIMO技术的
Qualcomm® VIVE™ 802.11ac Wi-Fi、Bluetooth 4.2、低功耗蓝牙(Bluetooth Low Energy)和全球导航卫星系统(GNSS)。
为了提供设计简易性,该芯片可跨整个芯片平台支持可扩展软件复用,
从而降低设计复杂性、减少开发成本和实现更快的产品商用。

登录界面,很丑,真丑。

工业路由器的拆解过程_第6张图片

内页:

工业路由器的拆解过程_第7张图片

好了,就这样吧,这界面我看不下去了。

你可能感兴趣的:(其它应用,物联网系统安全)