百度 小度路由器 全面拆解

近期百度路由器上市了,我们就买了一个玩了,下直接拆掉。

里面的配置是:
CPU: MT7620A
内存: 64MB DDR2 winbond (这个内存价格相比韩国内存便宜很多)
FLASH: 8MB 内存 型号是 MX25L6405D

操作系统部分采用的是MTK官方的SDK没有自己开发出操作系统,这点做的还是有点不如极路由或Speedytel这种厂商,他们自己移植OpenWRT系统,弃用原厂的SDK实现对硬件更高的榨取。

这个板子完全没有做任何加密部分,因此启动信息,请见下面:

  • U-Boot 1.1.3 (Nov 1 2013 - 13:49:26)
  • Board: Ralink APSoC DRAM: 64 MB
  • relocate_code Pointer at: 83fb4000
  • enable ephy clock…done. rf reg 29 = 5
  • SSC disabled.

  • Software System Reset Occurred

  • spi_wait_nsec: 29
  • spi device id: c2 20 17 c2 20 (2017c220)
  • find flash: MX25L6405D
  • raspi_read: from:20000 len:1000
  • *** Warning - bad CRC, using default environment
  • ============================================
  • Ralink UBoot Version: 4.1.2.0

  • ASIC 7620_MP (Port5<->None)
  • DRAM component: 512 Mbits DDR, width 16
  • DRAM bus: 16 bit
  • Total memory: 64 MBytes
  • Flash component: SPI Flash
  • Date:Nov 1 2013 Time:13:49:26
  • ============================================
  • icache: sets:512, ways:4, linesz:32 ,total:65536
  • dcache: sets:256, ways:4, linesz:32 ,total:32768
  • The CPU freq = 580 MHZ
  • estimate memory size =64 Mbytes
  • Please choose the operation:
  • 1: Load system code to SDRAM via TFTP.
  • 2: Load system code then write to Flash via TFTP.
  • 3: Boot system code via Flash (default).
  • 4: Entr boot command line interface.
  • 7: Load Boot Loader code then write to Flash via Serial.
  • 9: Load Boot Loader code then write to Flash via TFTP.
  • 0
  • 3: System Boot system code via Flash.
  • Booting image at bc040000 …

  • raspi_read: from:40000 len:40
  • Image Name: Ai-BR
  • Image Type: MIPS Linux Kernel Image (lzma compressed)
  • Data Size: 5018643 Bytes = 4.8 MB
  • Load Address: 80000000
  • Entry Point: 8000c310
  • raspi_read: from:40040 len:4c9413
  • Verifying Checksum … OK
  • Uncompressing Kernel Image … OK
  • No initrd
  • Transferring control to Linux (at address 8000c310) …

  • Giving linux memsize in MB, 64

  • Starting kernel …
  • LINUX started…
  • THIS IS ASIC
  • Linux version 2.6.36 (chris@ubuntu-dt) (gcc version 3.4.2) #66 Thu Nov 21 18:35:00 CST 2013
  • The CPU feqenuce set to 580 MHz
  • MIPS CPU sleep mode enabled.
  • PCIE: bypass PCIe DLL.
  • PCIE: Elastic buffer control: Addr:0x68 -> 0xB4
  • disable all power about PCIe
  • CPU revision is: 00019650 (MIPS 24Kc)
  • Determined physical RAM map:
  • memory: 04000000 @ 00000000 (usable)
  • Initrd not found or empty - disabling initrd
  • Zone PFN ranges:
  • Normal 0x00000000 -> 0x00004000
  • Movable zone start PFN for each node
  • early_node_map[1] active PFN ranges
  • 0: 0x00000000 -> 0x00004000
  • Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16256
  • Kernel command line: console=ttyS1,57600n8 root=/dev/ram0 console=ttyS0
  • PID hash table entries: 256 (order: -2, 1024 bytes)
  • Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
  • Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
  • Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
  • Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
  • Writing ErrCtl register=00004000
  • Readback ErrCtl register=00004000
  • Memory: 56188k/65536k available (4353k kernel code, 9348k reserved, 800k data, 3400k init, 0k highmem)
  • NR_IRQS:128
  • MTK/Ralink System Tick Counter init… cd:804efe78, m:214748, s:32
  • console [ttyS1] enabled
  • Calibrating delay loop… 386.04 BogoMIPS (lpj=772096)
  • pid_max: default: 32768 minimum: 301
  • Mount-cache hash table entries: 512
  • NET: Registered protocol family 16
  • bio: create slab at 0
  • SCSI subsystem initialized
  • usbcore: registered new interface driver usbfs
  • usbcore: registered new interface driver hub
  • usbcore: registered new device driver usb
  • Switching to clocksource Ralink external timer
  • NET: Registered protocol family 2
  • IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
  • TCP established hash table entries: 2048 (order: 2, 16384 bytes)
  • TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
  • TCP: Hash tables configured (established 2048 bind 2048)
  • TCP reno registered
  • UDP hash table entries: 256 (order: 0, 4096 bytes)
  • UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
  • NET: Registered protocol family 1
  • RT3xxx EHCI/OHCI init.
  • JFFS2 version 2.2 (NAND) (ZLIB) (RTIME) © 2001-2006 Red Hat, Inc.
  • fuse init (API version 7.15)
  • msgmni has been set to 109
  • Block layer SCSI generic (bsg) driver version 0.4 loaded (major 254)
  • io scheduler noop registered (default)
  • Ralink gpio driver initialized
  • RALINK_REG_PIODATA=00fc7f87
  • Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
  • serial8250: ttyS0 at MMIO 0x10000500 (irq = 37) is a 16550A
  • serial8250: ttyS1 at MMIO 0x10000c00 (irq = 12) is a 16550A
  • brd: module loaded
  • deice id : c2 20 17 c2 20 (2017c220)
  • MX25L6405D(c2 2017c220) (8192 Kbytes)
  • mtd .name = raspi, .size = 0x00800000 (0M) .erasesize = 0x00000008 (0K) .numeraseregions = 65536
  • Creating 6 MTD partitions on “raspi”:
  • 0x000000000000-0x000000800000 : “ALL”
  • 0x000000000000-0x000000020000 : “Bootloader”
  • 0x000000020000-0x000000030000 : “Config”
  • 0x000000030000-0x000000040000 : “Factory”
  • 0x000000040000-0x000000600000 : “Kernel”
  • 0x000000600000-0x000000800000 : “Baidu”
  • SMACCR1 – : 0x0000240a
  • SMACCR0 – : 0x64fe4c42
  • Ralink APSoC Ethernet Driver Initilization. v3.0 256 rx/tx descriptors allocated, mtu = 1500!
  • SMACCR1 – : 0x0000240a
  • SMACCR0 – : 0x64fe4c42
  • PROC INIT OK!
  • PPP generic driver version 2.4.2
  • PPP MPPE Compression module registered
  • NET: Registered protocol family 24
  • PPTP driver version 0.8.5
  • === pAd = c0198000, size = 625304 ===
  • <-- RTMPAllocTxRxRingMemory, Status=0
  • <-- RTMPAllocAdapterBlock, Status=0
  • AP Driver version-2.7.1.6
  • ehci_hcd: USB 2.0 ‘Enhanced’ Host Controller (EHCI) Driver
  • rt3xxx-ehci rt3xxx-ehci: Ralink EHCI Host Controller
  • rt3xxx-ehci rt3xxx-ehci: new USB bus registered, assigned bus number 1
  • rt3xxx-ehci rt3xxx-ehci: irq 18, io mem 0x101c0000
  • rt3xxx-ehci rt3xxx-ehci: USB 0.0 started, EHCI 1.00
  • hub 1-0:1.0: USB hub found
  • hub 1-0:1.0: 1 port detected
  • ohci_hcd: USB 1.1 ‘Open’ Host Controller (OHCI) Driver
  • rt3xxx-ohci rt3xxx-ohci: RT3xxx OHCI Controller
  • rt3xxx-ohci rt3xxx-ohci: new USB bus registered, assigned bus number 2
  • rt3xxx-ohci rt3xxx-ohci: irq 18, io mem 0x101c1000
  • hub 2-0:1.0: USB hub found
  • hub 2-0:1.0: 1 port detected
  • Initializing USB Mass Storage driver…
  • usbcore: registered new interface driver usb-storage
  • USB Mass Storage support registered.
  • nf_conntrack version 0.5.0 (877 buckets, 3508 max)
  • matchsize=264
  • IPVS: Registered protocols ()
  • IPVS: Connection hash table configured (size=4096, memory=32Kbytes)
  • IPVS: ipvs loaded.
  • GRE over IPv4 demultiplexor driver
  • gre: can’t add protocol
  • ip_tables: © 2000-2006 Netfilter Core Team, Type=Restricted Cone
  • TCP cubic registered
  • NET: Registered protocol family 10
  • IPv6 over IPv4 tunneling driver
  • NET: Registered protocol family 17
  • L2TP core driver, V2.0
  • PPPoL2TP kernel driver, V2.0
  • 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
  • All bugs added by David S. Miller <davem@redhat.com>
  • Freeing unused kernel memory: 3400k freed
  • init started: BusyBox v1.12.1 (Algorithmics/MIPS FPU Emulator v1.5
  • 2013-11-18 10:23:01 CST)
  • starting devpts: called with bogus options
  • pid 31, tty ‘’: ‘/etc_ro/rcS’
  • mount: mounting none on /proc/bus/usb failed: No such file or directory
  • Welcome to

  • | ___ | __ || | |__|| \ | || | / /
  • | || || || || |_ __ | | || |/ /
  • | _ /| _ || || || |\ || usb 1-1: new high speed USB device using rt3xxx-ehci and address 2
  • \
  • || __|| |||_||||| _|||_\
  • =System Architecture Department=
  • boa: waiting for nvram_daemon
  • starting pid 43, tty ‘/dev/ttyS1’: ‘/bin/monitor’
  • starting pid 42, tty ‘/dev/ttyS1’: ‘/bin/sh’
  • XXXXXXXXXXX1:5
  • BusyBox v1.12.1 (2013-11-18 10:23:01 CST) built-in shell (ash)
  • Enter ‘help’ for a list of built-in commands.
  • scsi0 : usb-storage 1-1:1.0

  • ----------support asp+++
  • server_name :192.168.8.1+++
  • boa: server version Boa/0.94.14rc21
  • boa: server built Nov 21 2013 at 16:13:51.
  • boa: starting server pid=49, port 80
  • scsi 0:0:0:0: Direct-Access Generic Flash Disk 8.07 PQ: 0 ANSI: 4
  • sd 0:0:0:0: [sda] 16441344 512-byte logical blocks: (8.41 GB/7.83 GiB)
  • sd 0:0:0:0: [sda] Write Protect is off
  • sd 0:0:0:0: [sda] Assuming drive cache: write through
  • sd 0:0:0:0: [sda] Assuming drive cache: write through
  • sda: sda1
  • sd 0:0:0:0: [sda] Assuming drive cache: write through
  • sd 0:0:0:0: [sda] Attached SCSI removable disk
  • Password for ‘admin’ changed
  • rmmod: ralink_wdt: No such file or directory
  • rmmod: cls: No such file or directory
  • rmmod: hw_nat: No such file or directory
  • rmmod: raeth: No such file or directory
  • insmod: bridge.ko: module not found
  • insmod: mii.ko: module not found
  • insmod: raeth.ko: module not found
  • disable 1st wireless interface
  • rmmod: rt2860v2_ap_net: No such file or directory
  • rmmod: rt2860v2_ap: No such file or directory
  • rmmod: rt2860v2_ap_util: No such file or directory
  • insmod: rt2860v2_ap_util.ko: module not found
  • insmod: rt2860v2_ap.ko: module not found
  • insmod: rt2860v2_ap_net.ko: module not found
  • insmod: nf_conntrack_proto_gre.ko: module not found
  • insmod: nf_nat_proto_gre.ko: module not found
  • insmod: nf_conntrack_pptp.ko: module not found
  • insmod: nf_nat_pptp.ko: module nRX DESC a2a2c000 size = 2048
  • ot found
  • RTMP_TimerListAdd: add timer obj c02016c8!
  • RTMP_TimerListAdd: add timer obj c01a0070!
  • RTMP_TimerListAdd: add timer obj c019fc64!
  • RTMP_TimerListAdd: add timer obj c01a0040!
  • RTMP_TimerListAdd: add timer obj c01a03e8!
  • RTMP_TimerListAdd: add timer obj c01a0138!
  • RTMP_TimerListAdd: add timer obj c01a0168!
  • RTMP_TimerListAdd: add timer obj c01a0328!
  • RTMP_TimerListAdd: add timer obj c01a0358!
  • RTMP_TimerListAdd: add timer obj c01d8034!
  • RTMP_TimerListAdd: add timer obj c01d8150!
  • RTMP_TimerListAdd: add timer obj c01d8060!
  • RTMP_TimerListAdd: add timer obj c01cf85c!
  • RTMP_TimerListAdd: add timer obj c019d530!
  • RTMP_TimerListAdd: add timer obj c01cf570!
  • APSDCapable[0]=0
  • APSDCapable[1]=0
  • APSDCapable[2]=0
  • APSDCapable[3]=0
  • APSDCapable[4]=0
  • APSDCapable[5]=0
  • APSDCapable[6]=0
  • APSDCapable[7]=0
  • APSDCapable[8]=0
  • APSDCapable[9]=0
  • APSDCapable[10]=0
  • APSDCapable[11]=0
  • APSDCapable[12]=0
  • APSDCapable[13]=0
  • APSDCapable[14]=0
  • APSDCapable[15]=0
  • Key1Str is Invalid key length(0) or Type(0)
  • Key2Str is Invalid key length(0) or Type(0)
  • Key3Str is Invalid key length(0) or Type(0)
  • Key4Str is Invalid key length(0) or Type(0)
    1. Phy Mode = 9
    1. Phy Mode = 9
  • E2PROM: D0 target power=0xff20
  • E2PROM: 40 MW Power Delta= 0
    1. Phy Mode = 9
  • RTMP_TimerListAdd: add timer obj c019d12c!
  • AntCfgInit: primary/secondary ant 0/1
  • Initialize RF Central Registers for E2 !!!
  • Initialize RF Central Registers for E3 !!!
  • Initialize RF Channel Registers for E2 !!!
  • Initialize RF Channel Registers for E3 !!!
  • Initialize RF DCCal Registers for E2 !!!
  • Initialize RF DCCal Registers for E3 !!!
  • D1 = 1, D2 = 4, CalCode = 7 !!!
  • RT6352_Temperature_Init : BBPR49 = 0x1
  • RT6352_Temperature_Init : TemperatureRef25C = 0xfffffff7
  • Current Temperature from BBP_R49=0xfffffff7
  • TX BW Filter Calibration !!!
  • RX BW Filter Calibration !!!
  • LOFT Calibration Done!
  • IQCalibration Start!
  • IQCalibration Done! CH = 0, (gain= 0, phase=3e)
  • IQCalibration Start!
  • IQCalibration Done! CH = 1, (gain= 0, phase=3d)
  • TX IQ Calibration Done!
  • RTMPSetPhyMode: channel is out of range, use first channel=0
  • MCS Set = ff ff 00 00 01
  • SYNC - BBP R4 to 20MHz.l
  • RTMP_TimerListAdd: add timer obj c01cfb48!
  • Main bssid = 24:0a:64:fe:4c:42
  • <==== rt28xx_init, Status=0
  • 0x1300 = 00064380
  • ifconfig: ioctl 0x8913 failed: No such device
  • brctl: bridge br0: No such device or address
  • Raeth v3.0 (Tasklet,SkbRecycle)
  • phy_tx_ring = 0x00cd8000, tx_ring = 0xa0cd8000
  • phy_rx_ring0 = 0x00cd9000, rx_ring0 = 0xa0cd9000
  • SMACCR1 – : 0x0000240a
  • SMACCR0 – : 0x64fe4c42
  • ESW: Link Status Changed - Port2 Link UP
  • CDMA_CSG_CFG = 81000000
  • GDMA1_FWD_CFG = 20710000
  • vconfig: ioctl error for rem: No such device
  • vconfig: ioctl error for rem: No such device
  • rmmod: 8021q: No such file or directory
  • insmod: 8021q.ko: module not found
  • config Ralink ESW vlan partition (LLLLW)
  • switch reg write offset=2004, value=ff0003
  • switch reg write offset=2104, value=ff0003
  • switch reg write offset=2204, value=ff0003
  • switch reg write offset=2304, value=ff0003
  • switch reg write offset=2404, value=ff0003
  • switch reg write offset=2504, value=ff0003
  • switch reg write offset=2010, value=810000c0
  • switch reg write offset=2110, value=810000c0
  • switch reg write offset=2210, value=810000c0
  • switch reg write offset=2310, value=810000c0
  • switch reg write offset=2410, value=810000c0
  • switch reg write offset=2510, value=810000c0
  • switch reg write offset=2610, value=81000000
  • switch reg write offset=2710, value=81000000
  • switch reg write offset=2604, value=20ff0003
  • switch reg write offset=2704, value=20ff0003
  • Special Tag Disabled
  • switch reg write offset=2610, value=81000000
  • switch reg write offset=2014, value=10001
  • switch reg write offset=2114, value=10001
  • switch reg write offset=2214, value=10001
  • switch reg write offset=2314, value=10001
  • switch reg write offset=2414, value=10002
  • switch reg write offset=2514, value=10001
  • REG_ESW_WT_MAC_ATC is 0x7ff0002
  • done.
  • device ra0 entered promiscuous mode
  • device eth2.1 entered promiscuous mode
  • device eth2 entered promiscuous mode
  • killall: udhcpc: no process killed
  • killall: pppd: no process killed
  • killall: l2tpd: no process killed
  • killall: openl2tpd: no process killed
  • udhcpc (v1.12.1) started
  • killall: dnrd: no process killed
  • br0: port 2(eth2.1) entering learning state
  • br0: port 2(eth2.1) entering learning state
  • br0: port 1(ra0) entering learning state
  • br0: port 1(ra0) entering learning state
  • ifconfig: ioctl 0x8914 failed: Cannot assign requested address
  • ifconfig: ioctl 0x8914 failed: Cannot assign requested address
  • br0: port 2(eth2.1) entering forwarding state
  • br0: port 1(ra0) entering forwarding state
  • killall: udhcpd: no process killed
  • Set: phy[0].reg[0] = 3900
  • Set: phy[1].reg[0] = 3900
  • SeESW: Link Status Changed - Port2 Link Down
  • t: phy[2].reg[0] = 3900
  • Set: phy[3].reg[0] = 3900
  • Set: phy[0].reg[0] = 3100
  • Set: phy[1].reg[0] = 3100
  • Set: phy[2].reg[0] = 3100
  • Set: phy[3].reg[0] = 3100
  • Unknown option: -I
  • Unknown option: ra0
  • rm: cannot remove ‘/etc/radvd.conf’: No such file or directory
  • ADDRCONF(NETDEV_UP): sit0: link is not ready
  • ***** sda *****
  • /sbin/automount_boot.sh: line 13: chkexfat: not found
  • /sbin/automount_boot.sh: line 14: chkhfs: not found
  • /sbin/automount_boot.sh: line 15: chkntfs: not found
  • FAT: utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
  • mount: mounting /dev/sda on /media/sda failed: Invalid argument
  • FAT: utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
  • mount: mounting /dev/sda on /media/sda failed: Invalid argument
  • FAT: utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
  • mount: mounting /dev/sda on /media/sda failed: Invalid argument
  • NTFS signature is missing.
  • Failed to mount ‘/dev/sda’: Invalid argument
  • The device ‘/dev/sda’ doesn’t seem to have a valid NTFS.
  • Maybe the wrong device is used? Or the whole disk instead of a
  • partition (e.g. /dev/sda, not /dev/sda1)? Or the other way around?
  • NTFS signature is missing.
  • Failed to mount ‘/dev/sda’: Invalid argument
  • The device ‘/dev/sda’ doesn’t seem to have a valid NTFS.
  • Maybe the wrong device is used? Or the whole disk instead of a
  • partition (e.g. /dev/sda, not /dev/sda1)? Or the other way around?
  • NTFS signature is missing.
  • Failed to mount ‘/dev/sda’: Invalid argument
  • The device ‘/dev/sda’ doesn’t seem to have a valid NTFS.
  • Maybe the wrong device is used? Or the whole disk instead of a
  • partition (e.g. /dev/sda, not /dev/sda1)? Or the other way around?
  • ***** sda1 *****
  • /sbin/automount_boot.sh: line 13: chkexfat: not found
  • /sbin/automount_boot.sh: line 14: chkhfs: not found
  • /sbin/automount_boot.sh: line 15: chkntfs: not found
  • FAT: utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
  • sh: /bin/super_dmz: not found
  • ***** sda *****
  • /sbin/automount_boot.sh: line 13: chkexfat: not found
  • /sbin/automount_boot.sh: line 14: chkhfs: not found
  • /sbin/automount_boot.sh: line 15: chkntfs: not found
  • ***** sda1 *****
  • /sbin/automount_boot.sh: line 13: chkexfat: not found
  • /sbin/automount_boot.sh: line 14: chkhfs: not found
  • /sbin/automount_boot.sh: line 15: chkntfs: not found
  • Set: phy[0].reg[0] = 3300
  • Set: phy[1].reg[0] = 3300
  • Set: phy[2].reg[0] = 3300
  • Set: phy[3].reg[0] = 3300
  • killall: dnrd: no process killed
  • dnrd --cache=off -L 192.168.8.1 -s 168.95.1.1 -s 8.8.8.8 &
  • lanIp:192.168.8.1
  • Notice: caching turned off
  • Notice: local DNS master turned off
  • killall: updateFw: no process killed
  • killall: inadyn: no process killed
  • killall: phddns: no process killed
  • Jan 1 00:00:25 miniupnpd[2128]: received signal 15, good-bye
  • Unknown option: -I
  • Unknown option: ra0
  • Jan 1 00:00:26 miniupnpd[7299]: WPS listening on port 7777
  • Jan 1 00:00:26 miniupnpd[7299]: HTTP listening on port 6352
  • ESW: Link Status Changed - Port2 Link UP
  • ******************1
  • Hotplug device init
  • killall: nmbd: no process killed
  • killall: smbd: no process killed
  • samba.sh Ai-BR100 WORKGROUP /media/sda1
  • /media/sda1
  • iptables: No chain/target/match by that name.
  • iptables: No chain/target/match by that name.
  • smbpasswd -a admin admin
  • startsmbfilepwent_internal: file /etc/smbpasswd did not exist. File successfully created.
  • Added user admin.
  • smbpasswd -a GUEST
  • Added user GUEST.
  • samba_add_dir.sh mnt1 /media/sda1/ admin GUEST GUEST
  • fetchSmbConfig
  • fetchSmbConfig: No such file or directory
  • /media/sda1/.smb_config: No such file or directory
  • killall: ushare: no process killed
  • ushare.sh Baidu AV-Router br0 /media/sda1 3
  • ushare -D
  • sleep 1
  • sleep 2
  • baiduCmd.sh 100 sda1
  • susockc: unable to open socket ‘/var/baiduevent.susock’. No such file or directory.
  • XXXXXXXXXXX2:45
  • cat: can’t open ‘/var/run/baidu_daemon.pid’: No such file or directory
  • kill: you need to specify whom to kill
  • /extraApps/baidu_daemon.bin -d sda1 -o BaiduDownload &
  • [E- 1 0: 0:46] -------------------------------------------------
  • [E- 1 0: 0:46] baidu daemon is running
  • [E- 1 0: 0:46] -------------------------------------------------
  • [W- 1 0: 0:46] Blink version: 0.9.8, arch: UCLINUX
    • got BAIDU_DB_DEVICEID: 898f9738-d930-4db4-a3cf-240a64fe4c42
    • got BAIDU_DB_DEVICENAME: aigale_Ai-BR100
    • got BAIDU_DB_DLNA_NAME: Baidu AV-Router
  • [W- 1 0: 0:46] got BAIDU_DB_FW_VERSION: v1.0.0.15
  • [W- 1 0: 0:46] Baidu Daemon process ID is 7810
  • [W- 1 0: 0:46] TCP thread working…
  • [W- 1 0: 0:46] Local thread working…
    • init RTMPWorker success!
  • ERROR: Problem accessing the DNS. (addr: msg.link.n.shifen.com)
  • ERROR: RTMP_Connect failed!
  • [E- 1 0: 0:46] RTMPWorker_start failed!, ret = -1
  • [W- 1 0: 0:46] start RTMPWorker error!
    • [bl_init_download_dir]Found download_dir /media/sda1/BaiduDownload
    • [dl_cache_list_init]download list cache path: /media/sda1/BaiduDownload/.baidu_daemon_dl.cache
    • [file_cache_list_init]file cache path: /media/sda1/BaiduDownload/.baidu_daemon_file.cache
    • [bl_init_download_dir]Found ts cache diretory /media/sda1/BaiduDownload/.BaiduDownloadCache
    • 1970 1 1 Thu 0: 0:46
  • [E- 1 0: 0:46] push_sdk_start_work_thread fail! rv = -30002
  • [F- 1 0: 0:46] init push thread failed with error code-2]

复制代码
大家可以看到,系统在启动的时候,还保留了Ralink的信息,而输出内容,基本上是跟Ralink SDK一致的(Ralink已经被MTK收购了).
据说这个是百度跟海联达(aigale)合作的产品,但是从系统启动信息上来看,似乎aigale只是做了PCB而已。 got BAIDU_DB_DEVICENAME: aigale_Ai-BR100
突然发现一个很重要的内容,就是Blink version: 0.9.8, arch: UCLINUX 这个似乎是表示这个软件系统跟blink公司有某种关系。

在系统中用ps指令发现,baidu的功能就是一个baidu_daemon.bin的socket程序而已。好像连接了http://device.baidu.com上面做了啥。

话说99块钱这个东西要么赔钱,要么就不赚钱,7620A这款处理器性能很高。而这个路由器的内存,我们可以换成256MB的,绝对没问题的。但是产品里的软件还是太可怜了,玩家真的没办法玩。

不过有个好消息,这玩意可以支持OpenWRT, OpenWRT是全球最大的开源路由器操作系统。支持1000多种软件包,操作起来跟电脑装个ubuntu类似。

目前美国官方的OpenWRT是支持7620但是没有WIFI驱动。这方面,国内的资深路由器玩家lintel已经实现这方面的支持,据他自己说8号他就可以提供完整的刷机固件包。

他提供了一个地址,在http://downloads.openwrt.org.cn/PandoraBox/BR100 大家可以关注下8号就可以刷机。

这里我向大家介绍下,怎么进入路由器的命令行模式(直接操作linux shell)

  1. 首先上淘宝买一个USB串口的小板子PL2303做的那种,几块钱一个就可以。
  2. 见图,将GND跟板子连接在一起,RX连接板子的TX,TX连接板子的RX,VCC千万不要接
  3. 打开串口终端软件,速率设置为 57600 8 N 1
  4. 打开路由器电源
  5. 你就可以进到他系统里了。

剩下就等待lintel老大做好固件,大家就可以自己玩转咯~~~

本文作者: hoowa

如需转载请注明

感谢分享。。。。。。。。。。。。

感谢分享

真正的大神