Da har jeg fått tak i en inteno x5668B .
SSID blir generert ut fra mac addressen på LAN porten.
eks: mac: 00-22-07-07-07-07 på wlan porten, da vil bestandig Lan port addressen være en under , alså 00-22-07-07-07-06 , det vil det vil da resultere i en ssid med navn: nextGenTel_07
pinout er som følger :
1 = 3,3volt
2 = pinnen er ikke der.
3 = GND
4 = RX
5 = TX
115200bps.
kontakt P1 (pinne 1 er markert med pill)
For dem som er lurer på hvordan boot'en ser ut:
CFE version 1.0.37-8.7.1 for BCM96358 (32bit,SP,BE)
Build Date: Fri Jan 11 14:26:32 CST 2008 (root@colinux)
Copyright (C) 2000-2006 Broadcom Corporation.
Boot Address 0xbe000000
Initializing Arena.
Initializing Devices.
Parallel flash device: name AM29LV320MB, id 0x2200, size 4096KB
CPU type 0x2A010: 300MHz, Bus: 133MHz, Ref: 64MHz
CPU running TP0
Total memory: 33554432 bytes (32MB)
Total memory used by CFE: 0x80401000 - 0x80528130 (1208624)
Initialized Data: 0x8041D990 - 0x8041F960 (8144)
BSS Area: 0x8041F960 - 0x80426130 (26576)
Local Heap: 0x80426130 - 0x80526130 (1048576)
Stack Area: 0x80526130 - 0x80528130 (8192)
Text (code) segment: 0x80401000 - 0x8041D98C (117132)
Boot area (physical): 0x00529000 - 0x00569000
Relocation Factor: I:00000000 - D:00000000
Board IP address : 192.168.1.1:ffffff00
Host IP address : 192.168.1.100
Gateway IP address :
Run from flash/host (f/h) : f
Default host run file name : vmlinux
Default host flash file name : bcm963xx_fs_kernel
Boot delay (0-9 seconds) : 1
Board Id (0-5) : 96358VW2
Number of MAC Addresses (1-32) : 11
Base MAC Address : 00:22:07:XX:XX:XX
PSI Size (1-64) KBytes : 24
Main Thread Number [0|1] : 0
*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 110
Code Address: 0x80010000, Entry Address: 0x801ca018
Decompression OK!
Entry at 0x801ca018
Closing network.
Starting program at 0x801ca018
Linux version 2.6.8.1 (root@colinux) (gcc version 3.4.2) #1 Thu Feb 21 16:11:35 CST 2008
Parallel flash device: name AM29LV320MB, id 0x2200, size 4096KB
Total Flash size: 4096K with 71 sectors
***Board is not initialized****: Using the default PSI size: 24
96358VW2 prom init
CPU revision is: 0002a010
Determined physical RAM map:
memory: 01fa0000 @ 00000000 (usable)
On node 0 totalpages: 8096
DMA zone: 8096 pages, LIFO batch:1
Normal zone: 0 pages, LIFO batch:1
HighMem zone: 0 pages, LIFO batch:1
Built 1 zonelists
Kernel command line: root=31:0 ro noinitrd console=ttyS0,115200
brcm mips: enabling icache and dcache...
Primary instruction cache 32kB, physically tagged, 2-way, linesize 16 bytes.
Primary data cache 16kB 2-way, linesize 16 bytes.
PID hash table entries: 128 (order 7: 1024 bytes)
Using 150.000 MHz high precision timer.
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 30032k/32384k available (1534k kernel code, 2332k reserved, 229k data, 72k init, 0k highmem)
Calibrating delay loop... 299.00 BogoMIPS
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
Checking for 'wait' instruction... unavailable.
NET: Registered protocol family 16
Can't analyze prologue code at 8018e284
usbcore: registered new driver hub
Initializing Cryptographic API
PPP generic driver version 2.4.2
NET: Registered protocol family 24
Using noop io scheduler
bcm963xx_mtd driver v1.0
PCI: Enabling device 0000:00:0a.0 (0000 -> 0002)
ehci_hcd 0000:00:0a.0: EHCI Host Controller
PCI: Setting latency timer of device 0000:00:0a.0 to 64
ehci_hcd 0000:00:0a.0: irq 18, pci mem c0000300
ehci_hcd 0000:00:0a.0: new USB bus registered, assigned bus number 1
PCI: cache line size of 32 is not supported by device 0000:00:0a.0
ehci_hcd 0000:00:0a.0: USB f.f enabled, EHCI 1.00, driver 2004-May-10
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 2 ports detected
ohci_hcd: 2004 Feb 02 USB 1.1 'Open' Host Controller (OHCI) Driver (PCI)
ohci_hcd: block sizes: ed 64 td 64
PCI: Enabling device 0000:00:09.0 (0000 -> 0002)
ohci_hcd 0000:00:09.0: OHCI Host Controller
PCI: Setting latency timer of device 0000:00:09.0 to 64
ohci_hcd 0000:00:09.0: irq 13, pci mem c0002400
ohci_hcd 0000:00:09.0: new USB bus registered, assigned bus number 2
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 2 ports detected
usbcore: registered new driver usblp
drivers/usb/class/usblp.c: v0.13: USB Printer Device Class driver
brcmboard: brcm_board_init entry
SES: Button Interrupt 0x3 is enabled
SES: LED GPIO 0xc007 is enabled
Serial: BCM63XX driver $Revision: 3.00 $
ttyS0 at MMIO 0xfffe0100 (irq = 10) is a BCM63XX
ttyS1 at MMIO 0xfffe0120 (irq = 11) is a BCM63XX
NET: Registered protocol family 2
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 2048 bind 4096)
Initializing IPsec netlink socket
NET: Registered protocol family 1
NET: Registered protocol family 17
NET: Registered protocol family 15
Ebtables v2.0 registered
NET: Registered protocol family 8
NET: Registered protocol family 20
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 72k freed
init started: BusyBox v1.00 (2008.02.21-15:23+0000) multi-call binary
Algorithmics/MIPS FPU Emulator v1.5
BusyBox v1.00 (2008.02.21-15:23+0000) Built-in shell (msh)
Enter 'help' for a list of built-in commands.
Loading drivers and kernel modules...
atmapi: module license 'Proprietary' taints kernel.
adsl: adsl_init entry
blaadd: blaa_detect entry
Broadcom BCMPROCFS v1.0 initialized
Broadcom BCM6358A1 Ethernet Network Device v0.3 Feb 21 2008 16:08:58
Config Ethernet Switch Through MDIO Pseudo PHY Interface
dgasp: kerSysRegisterDyingGaspHandler: eth0 registered
eth0: MAC Address: 00:22:07:XX:XX:XX
Broadcom BCM6358A1 USB Network Device v0.4 Feb 21 2008 16:09:01
usb0: MAC Address: 00 22 07 XX XX XX
PCI: Setting latency timer of device 0000:00:01.0 to 64
PCI: Enabling device 0000:00:01.0 (0004 -> 0006)
wl: srom not detected, using main memory mapped srom info (wombo board)
wl0: wlc_attach: use mac addr from the system pool by id: 0x776c0000
wl0: MAC Address: 00:22:07:XX:XX:XX
wl0: Broadcom BCM4318 802.11 Wireless Controller 3.131.35.6.cpe2.0
dgasp: kerSysRegisterDyingGaspHandler: wl0 registered
BcmAdsl_Initialize=0xC006A3F8, g_pFnNotifyCallback=0xC0082C54
AnnexCParam=0x7FFFXXXX AnnexAParam=0x0000XXXX adsl2=0x00000000
pSdramPHY=0xA1FFFFF8, 0xFFFFFFFF 0xFFFFFFFF
AdslCoreHwReset: AdslOemDataAddr = 0xA1FFXXXX
AnnexCParam=0x7FFFXXXX AnnexAParam=0x0000XXXX adsl2=0x00000000
dgasp: kerSysRegisterDyingGaspHandler: dsl0 registered
ATM proc init !!!
ip_tables: (C) 2000-2002 Netfilter core team
ip_conntrack version 2.1 (253 buckets, 0 max) - 368 bytes per conntrack
ip_conntrack_pptp version 2.1 loaded
ip_nat_pptp version 2.0 loaded
ip_conntrack_h323: init
ip_nat_h323: initialize the module!
BRCM NAT Caching v0.1 Nov 18 2006 14:56:48
BRCM NAT Cache: Hooking hit function @ c0092c64
ip_conntrack_rtsp v0.01 loading
ip_nat_rtsp v0.01 loading
atm: Queue was not found.
==> Bcm963xx Software Version: X5668-BWU_1.01NGT21.1_B2pB022l.d20e <==
<6>device usb0 entered promiscuous mode
device eth0 entered promiscuous mode
br0: port 2(eth0) entering learning state
br0: port 1(usb0) entering learning state
br0: topology change detected, propagating
br0: port 2(eth0) entering forwarding state
br0: topology change detected, propagating
br0: port 1(usb0) entering forwarding state
Setting SSID "NextGenTel_XX"
Setting SSID "Guest"
Setting country code using abbreviation: "NO"
wl0: current channel 11
device wl0 entered promiscuous mode
br0: port 3(wl0) entering learning state
br0: topology change detected, propagating
br0: port 3(wl0) entering forwarding state
device wl0.1 entered promiscuous mode
br0: port 4(wl0.1) entering learning state
br0: topology change detected, propagating
br0: port 4(wl0.1) entering forwarding state
pvc2684d: Interface "nas_1_33" created sucessfully
pvc2684d: Communicating over ATM 0.1.33, encapsulation: LLC
device usb0 left promiscuous mode
br0: port 1(usb0) entering disabled state
device usb0 entered promiscuous mode
br0: port 1(usb0) entering learning state
br0: topology change detected, propagating
br0: port 1(usb0) entering forwarding state
device eth0 left promiscuous mode
br0: port 2(eth0) entering disabled state
device eth0 entered promiscuous mode
br0: port 2(eth0) entering learning state
br0: topology change detected, propagating
br0: port 2(eth0) entering forwarding state
device wl0 left promiscuous mode
br0: port 3(wl0) entering disabled state
device wl0 entered promiscuous mode
br0: port 3(wl0) entering learning state
br0: topology change detected, propagating
br0: port 3(wl0) entering forwarding state
device wl0.1 left promiscuous mode
br0: port 4(wl0.1) entering disabled state
device wl0.1 entered promiscuous mode
br0: port 4(wl0.1) entering learning state
br0: topology change detected, propagating
br0: port 4(wl0.1) entering forwarding state
<6>br0: port 1(usb0) entering disabled state
CONSOLED launched
Login:
Password:
interface som ssid blir genert ut fra er : nas_1_33
Det er samme mac som står på klistrelapp under router.
komado for og koble til manult via consol.
pppd -c 1.33.1 -i nas_1_33 -u PXXXXXX -p ******** -f 0 -m 0003YYYYYYYY/55d2 &
1.33.1 = port.vpi.vci
nas_1_33 = er interface som blir brukt for og koble til med.
PXXXXXX = kunde nr
******** = password, bare tall foresten 8 tegn.
0003YYYYYYYY = mac addressen på den skal koble til.
Nå har password blitt pastet før, men her er hva som ligger i fila.
admin:hd3u6lVJQLCXc:0:0:Administrator:/:/bin/sh
support:wWXRXr/AQcL.E:0:0:Technical Support:/:/bin/sh
user:nTrvA9R3TcIfA:0:0:Normal User:/:/bin/sh
nobody:ZHXiWvEADy7gg:0:0:nobody for ftp:/:/bin/sh
admin = VebBfB1963
user = user
nobody = ????????
support = ????????
Hvis folk orker og finne ut hvordan hash det er, eller veit password på dem andre så si fra.
I config fila som ligger på etc/default.cfg (alså bare skriv: cat etc/default.cfg så får du helle greia)
ssId="NextGenTel_$MAC$" <- hvordan den finner ut tall i ssid'en.
box'en har en haug med skulte web sider,
http://ranvik.net/privat/ngt/allweb-inteno.html den lista er større enn den som blitt pasta før.