ファームウェア 1.60 の散歩

LS-SL

ようやく標準ファーム 1.60 にログインできるようになったので、 いつものように散歩。

cpuinfo

root@LS-SL9AF:~# cat /proc/cpuinfo
Processor       : ARM926EJ-S rev 0 (v5l)
BogoMIPS        : 266.24
Features        : swp half thumb fastmult edsp
CPU implementer : 0x41
CPU architecture: 5TEJ
CPU variant     : 0x0
CPU part        : 0x926
CPU revision    : 0
Cache type      : write-back
Cache clean     : cp15 c7 ops
Cache lockdown  : format C
Cache format    : Harvard
I size          : 32768
I assoc         : 1
I line length   : 32
I sets          : 1024
D size          : 32768
D assoc         : 1
D line length   : 32
D sets          : 1024

Hardware        : Feroceon
Revision        : 0000
Serial          : 0000000000000000
root@LS-SL9AF:~#

meminfo

root@LS-SL9AF:~# cat /proc/meminfo
MemTotal:       125748 kB
MemFree:         50600 kB
Buffers:          2556 kB
Cached:          49880 kB
SwapCached:          0 kB
Active:          26196 kB
Inactive:        38716 kB
SwapTotal:     1000428 kB
SwapFree:      1000428 kB
Dirty:              84 kB
Writeback:           0 kB
AnonPages:       12492 kB
Mapped:           8564 kB
Slab:             7340 kB
SReclaimable:     1960 kB
SUnreclaim:       5380 kB
PageTables:        604 kB
NFS_Unstable:        0 kB
Bounce:              0 kB
CommitLimit:   1063300 kB
Committed_AS:    90064 kB
VmallocTotal:   385024 kB
VmallocUsed:      8692 kB
VmallocChunk:   368636 kB
root@LS-SL9AF:~# free
              total         used         free       shared      buffers
  Mem:       125748        75148        50600            0         2556
 Swap:      1000428            0      1000428
Total:      1126176        75148      1051028
root@LS-SL9AF:~#

カーネルのバージョン

root@LS-SL9AF:~# uname -a
Linux LS-SL9AF 2.6.22.7-88f5182 #1 Fri Jun 8 11:00:39 JST 2012 armv5tejl unknown
root@LS-SL9AF:~#
あれ?2.6.22.7 ?
LS-QVL などの、2.6.31.8 とは違う、、、これはちょっと意外。

dmesg

root@LS-SL9AF:~# dmesg
Linux version 2.6.22.7-88f5182 (root@NAS) (gcc version 4.2.0 20070413 (prerelease)) #1 Fri Jun 8 11:00:39 JST 2012
CPU: ARM926EJ-S [41069260] revision 0 (ARMv5TEJ), cr=a0053177
Machine: Feroceon
Using UBoot passing parameters structure
Memory policy: ECC disabled, Data cache writeback
On node 0 totalpages: 32768
  DMA zone: 256 pages used for memmap
  DMA zone: 0 pages reserved
  DMA zone: 32512 pages, LIFO batch:7
  Normal zone: 0 pages used for memmap
CPU0: D VIVT write-back cache
CPU0: I cache: 32768 bytes, associativity 1, 32 byte lines, 1024 sets
CPU0: D cache: 32768 bytes, associativity 1, 32 byte lines, 1024 sets
Built 1 zonelists.  Total pages: 32512
Kernel command line: console=ttyS0,115200 root=/dev/sda2 rw initrd=0x00800040,15M panic=5 func=0 BOOTVER=1.23
PID hash table entries: 512 (order: 9, 2048 bytes)
Console: colour dummy device 80x30
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Memory: 128MB 0MB 0MB 0MB = 128MB total
Memory: 110108KB available (3860K code, 294K data, 120K init)
Calibrating delay loop... 266.24 BogoMIPS (lpj=1331200)
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
NET: Registered protocol family 16
env_format_version = 0x00000006
product_id = 0x00000013
Sys Clk = 200000000, Tclk = 166664740

CPU Interface
-------------
SDRAM_CS0 ....base 00000000, size 128MB
SDRAM_CS1 ....disable
SDRAM_CS2 ....disable
SDRAM_CS3 ....disable
PEX0_MEM ....base e0000000, size 128MB
PEX0_IO ....base f2000000, size   1MB
PCI0_MEM ....base e8000000, size 128MB
PCI0_IO ....base f2100000, size   1MB
INTER_REGS ....base f1000000, size   1MB
DEVICE_CS0 ....no such
DEVICE_CS1 ....base f4000000, size  32MB
DEVICE_CS2 ....no such
DEV_BOOCS ....base ff800000, size   8MB
CRYPT_ENG ....base f0000000, size  64KB

  Marvell Development Board (LSP Version 3.0.5_NAS_GDP_p8)-- BUFFALO_BOARD  Soc: 88F5182 A2

 Detected Tclk 166664740 and SysClk 200000000
Marvell USB EHCI Host controller #0: c055b600
Marvell USB EHCI Host controller #1: c055b400
IO Request resource failed - Pci If 0
PCI: bus0: Fast back to back transfers enabled
PCI: bus1: Fast back to back transfers enabled
SCSI subsystem initialized
Time: orion_clocksource clocksource has been installed.
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
checking if image is initramfs...it isn't (no cpio magic); looks like an initrd
Freeing initrd memory: 15360K
RTC registered
mvCesaInit: sessions=640, queue=64, pSram=f0000000
Use the XOR engines (acceleration) for enhancing the following functions:
  o RAID 5 Xor calculation
  o kernel memcpy
  o kenrel memzero
  o copy user to/from kernel buffers
Number of XOR engines to use: 2
Use IDMA channels 2 and 3 for enhancing the following function:
VFS: Disk quotas dquot_6.5.1
Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
fuse init (API version 7.8)
SGI XFS with ACLs, large block numbers, no debug enabled
SGI XFS Quota Management subsystem
io scheduler noop registered (default)
io scheduler anticipatory registered
io scheduler deadline registered
io scheduler cfq registered
Serial: 8250/16550 driver $Revision: 1.90 $ 4 ports, IRQ sharing disabled
serial8250: ttyS1 at MMIO 0x0 (irq = 4) is a 16550A
serial8250.0: ttyS0 at MMIO 0xf1012000 (irq = 3) is a 16550A
serial8250.0: ttyS2 at MMIO 0xf1012100 (irq = 4) is a 16550A
RAMDISK driver initialized: 3 RAM disks of 32768K size 1024 blocksize
loop: module loaded
Marvell Ethernet Driver 'mv_ethernet':
  o Uncached descriptors in DRAM
  o DRAM SW cache-coherency
  o TCP segmentation offload enabled
  o Checksum offload enabled
  o Rx desc: 128
  o Tx desc: 256
  o Loading network interface ** eth_init_module (0)
'eth0'
Intergrated Sata device found
scsi0 : Marvell SCSI to SATA adapter
scsi1 : Marvell SCSI to SATA adapter
scsi 0:0:0:0: Direct-Access     Seagate  ST9100828AS      3.BH PQ: 0 ANSI: 5
sd 0:0:0:0: [sda] 195371568 512-byte hardware sectors (100030 MB)
sd 0:0:0:0: [sda] Write Protect is off
sd 0:0:0:0: [sda] Mode Sense: 23 00 00 00
sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
sd 0:0:0:0: [sda] 195371568 512-byte hardware sectors (100030 MB)
sd 0:0:0:0: [sda] Write Protect is off
sd 0:0:0:0: [sda] Mode Sense: 23 00 00 00
sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
 sda: sda1 sda2 sda3 sda4 sda5 sda6
sd 0:0:0:0: [sda] Attached SCSI disk
sd 0:0:0:0: Attached scsi generic sg0 type 0
physmap platform flash device: 01000000 at f0000000
CFI: Found no physmap-flash.0 device at location zero
JEDEC: Found no physmap-flash.0 device at location zero
physmap-flash physmap-flash.0: map_probe failed
CFI: Found no cfi_flash_0 device at location zero
Found: SST 39LF020
cfi_flash_0: Found 1 x8 devices at 0x0 in 8-bit bank
cfi_flash_0: Found an alias at 0x40000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x80000 for the chip at 0x0
cfi_flash_0: Found an alias at 0xc0000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x100000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x140000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x180000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x1c0000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x200000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x240000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x280000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x2c0000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x300000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x340000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x380000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x3c0000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x400000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x440000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x480000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x4c0000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x500000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x540000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x580000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x5c0000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x600000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x640000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x680000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x6c0000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x700000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x740000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x780000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x7c0000 for the chip at 0x0
number of JEDEC chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
cmdlinepart partition parsing not available
CFI: Found no cfi_flash_1 device at location zero
JEDEC: Found no cfi_flash_1 device at location zero
mice: PS/2 mouse device common for all mice
md: raid0 personality registered for level 0
md: raid1 personality registered for level 1
raid6: int32x1     20 MB/s
raid6: int32x2     28 MB/s
raid6: int32x4     35 MB/s
raid6: int32x8     31 MB/s
raid6: using algorithm int32x4 (35 MB/s)
md: raid6 personality registered for level 6
md: raid5 personality registered for level 5
md: raid4 personality registered for level 4
raid5: measuring checksumming speed
   arm4regs  :   292.400 MB/sec
   8regs     :   242.400 MB/sec
   32regs    :   256.000 MB/sec
raid5: using function: arm4regs (292.400 MB/sec)
Kernel event proc (C) BUFFALO INC. V.1.00 installed.
MICON ctrl (C) BUFFALO INC. V.1.00 installed.
Buffalo CPU Inerupts Driver (C) BUFFALO INC. Ver.0.01 alpha1 installed.
Buffalo Gpio Control Driver (C) BUFFALO INC. Ver.0.02 installed.
TCP cubic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
md: Autodetecting RAID arrays.
md: autorun ...
md: ... autorun DONE.
RAMDISK: Compressed image found at block 0
VFS: Mounted root (ext2 filesystem).
md: md0 stopped.
md: bind<sda1>
raid1: raid set md0 active with 1 out of 2 mirrors
kjournald starting.  Commit interval 5 seconds
EXT3 FS on md0, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
md: md10 stopped.
md: bind<sda5>
raid1: raid set md10 active with 1 out of 2 mirrors
md: md1 stopped.
md: bind<sda2>
raid1: raid set md1 active with 1 out of 2 mirrors
kjournald starting.  Commit interval 5 seconds
EXT3 FS on md1, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
kjournald starting.  Commit interval 5 seconds
EXT3 FS on md1, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
VFS: Mounted root (ext3 filesystem).
Trying to move old root to /initrd ... okay
Freeing init memory: 120K
Adding 1000428k swap on /dev/md10.  Priority:-1 extents:1 across:1000428k
kjournald starting.  Commit interval 5 seconds
EXT3 FS on md0, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
ehci_marvell ehci_marvell.4523: Marvell Orion EHCI
ehci_marvell ehci_marvell.4523: new USB bus registered, assigned bus number 1
ehci_marvell ehci_marvell.4523: irq 17, io base 0xf1050100
ehci_marvell ehci_marvell.4523: USB 2.0 started, EHCI 1.00, driver 10 Dec 2004
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
ehci_marvell ehci_marvell.167817: Marvell Orion EHCI
ehci_marvell ehci_marvell.167817: new USB bus registered, assigned bus number 2
ehci_marvell ehci_marvell.167817: irq 12, io base 0xf10a0100
ehci_marvell ehci_marvell.167817: USB 2.0 started, EHCI 1.00, driver 10 Dec 2004
usb usb2: configuration #1 chosen from 1 choice
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
ohci_hcd: 2006 August 04 USB 1.1 'Open' Host Controller (OHCI) Driver
USB Universal Host Controller Interface driver v3.0
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
usbcore: registered new interface driver usblp
drivers/usb/class/usblp.c: v0.13: USB Printer Device Class driver
eth reg(9) val=0x0300
program smartctl is using a deprecated SCSI ioctl, please convert it to SG_IO
program smartctl is using a deprecated SCSI ioctl, please convert it to SG_IO
program smartctl is using a deprecated SCSI ioctl, please convert it to SG_IO
program smartctl is using a deprecated SCSI ioctl, please convert it to SG_IO
program smartctl is using a deprecated SCSI ioctl, please convert it to SG_IO
program smartctl is using a deprecated SCSI ioctl, please convert it to SG_IO
program smartctl is using a deprecated SCSI ioctl, please convert it to SG_IO
program smartctl is using a deprecated SCSI ioctl, please convert it to SG_IO
XFS mounting filesystem sda6
Ending clean XFS mount for filesystem: sda6
root@LS-SL9AF:~#

ファームウェア情報

root@LS-SL9AF:~# cat /etc/linkstation_release
VERSION=1.60
SUBVERSION=HDD 3.02
PRODUCTID=0x00000000
BUILDDATE=2012/06/18 18:57:41
root@LS-SL9AF:~# cat /proc/buffalo/firmware
SERIES=LinkStation
PRODUCTNAME=LS-SL(SEINEI)
VERSION=0.16
SUBVERSION=FLASH 0.00
PRODUCTID=0x00000013
BUILDDATE=2012/06/08 10:59:45
BOOTVER=1.23
root@LS-SL9AF:~#
以前は SEIMEI だったのに、SEINEI になっている。
以前の SEIMEI が typo ? 誰が気がついて直した?(笑

ps

root@LS-SL9AF:~# ps
  PID  Uid        VSZ Stat Command
    1 root       3084 S   init
    2 root            SW< [kthreadd]
    3 root            SWN [ksoftirqd/0]
    4 root            SW< [events/0]
    5 root            SW< [khelper]
   32 root            SW< [kblockd/0]
   45 root            SW  [crypto]
   46 root            SW  [crypto_ret]
   49 root            SW  [pdflush]
   50 root            SW  [pdflush]
   51 root            SW< [kswapd0]
   52 root            SW< [aio/0]
   54 root            SW< [xfslogd/0]
   55 root            SW< [xfsdatad/0]
  243 root            SW< [scsi_eh_0]
  244 root            SW< [scsi_eh_1]
  260 root            SW< [mtdblockd]
  393 root            SW< [md0_raid1]
  436 root            SW< [md10_raid1]
  441 root            SW< [md1_raid1]
  520 root            SW< [kjournald]
  561 root       1720 S < /sbin/udevd --daemon
 1457 root            SW< [kjournald]
 1505 root            SW< [khubd]
 1608 root       1620 S   /sbin/dhcpcd -L /etc/dhcpc -h LS-SL9AF -t 15 -x -y -z
 1671 root       1856 S   syslogd -m 0
 1673 root       2380 S   klogd
 1682 root       3620 S   /usr/sbin/inetd
 1686 root       1824 S   /usr/local/sbin/errormon
 1691 root       2208 S   /bin/sh /usr/local/sbin/kernelmon
 1698 root      27216 S   /usr/bin/python /usr/local/sbin/BuffaloXMLRPCServer.p
 1937 root            SW< [xfsbufd]
 1938 root            SW< [xfssyncd]
 2120 root       2040 S   mdadm --monitor --scan --daemonise --pid-file /var/ru
 2339 root       1804 S   /usr/local/sbin/logchkd
 2389 root       2772 S   /bin/bash /usr/local/sbin/diskmon_exec.sh start
 2401 root       4352 S   /usr/sbin/lighttpd.webui -f /etc/lighttpd/buffalo-web
 2423 root       4352 S   /usr/sbin/lighttpd.webui -f /etc/lighttpd/buffalo-web
 2512 root      10348 S   /usr/local/sbin/smbd -D
 2531 root      10348 S   /usr/local/sbin/smbd -D
 2532 root       6020 S   /usr/local/sbin/nmbd -D
 2578 root       2152 S   /usr/local/sbin/clientUtil_server -i eth0
 2606 root       1740 S   /usr/local/sbin/mDNSResponderPosix -b -f /etc/bonjour
 2609 root       4172 S   /usr/local/sbin/lsprcvd -i eth0
 2612 root       1796 S   /usr/local/sbin/daemonwatch -a /etc/daemonwatch.list
 2618 root       3360 S   /usr/sbin/crond
 2674 root      18092 S   /usr/local/BootServer/rarpd
 2677 root       9892 S   /usr/local/BootServer/rarpcfgd
 2683 root       1568 S   /usr/local/BootServer/fwupdated
 2684 root       1700 S   /usr/local/BootServer/tftpd
 2711 root       2272 S   lpd Waiting
 2871 root       2700 S   /usr/local/twonky/twonkymedia -utf8 -inifile /usr/loc
 2872 root       9444 S   /usr/local/twonky/twonkymediaserver -utf8 -inifile /u
 2918 root       3212 S   /usr/local/sbin/mt-daapd -c /etc/mt-daapd.conf
 2919 root      11400 S   /usr/local/sbin/mt-daapd -c /etc/mt-daapd.conf
 2981 root       4028 S   /usr/local/sbin/sshd
 3148 root       3228 S   cat /proc/buffalo/kernevnt
 3240 root       2784 S   /bin/login --
 3576 root       2340 S   -bash
 7529 root       3228 S   sleep 10
 7530 root       3364 R   ps
root@LS-SL9AF:~#

mdstat

root@LS-SL9AF:~# cat /proc/mdstat
Personalities : [raid0] [raid1] [raid6] [raid5] [raid4]
md1 : active raid1 sda2[0]
      4999156 blocks super 1.2 [2/1] [U_]

md10 : active raid1 sda5[0]
      1000436 blocks super 1.2 [2/1] [U_]

md0 : active raid1 sda1[0]
      1000384 blocks [2/1] [U_]

unused devices: 
root@LS-SL9AF:~#

マウント

root@LS-SL9AF:~# df
Filesystem           1k-blocks      Used Available Use% Mounted on
/dev/md1               4920624    829808   3840860  18% /
udev                     10240       100     10140   1% /dev
/dev/ram1                15360       152     15208   1% /mnt/ram
/dev/md0                992440     50288    942152   5% /boot
/dev/disk1_6          82803264    159784  82643480   0% /mnt/disk1
root@LS-SL9AF:~# mount
rootfs on / type rootfs (rw)
/dev/root on / type ext3 (rw,data=ordered)
proc on /proc type proc (rw)
sysfs on /sys type sysfs (rw)
udev on /dev type tmpfs (rw,nosuid)
devpts on /dev/pts type devpts (rw)
/dev/ram1 on /mnt/ram type tmpfs (rw)
/dev/md0 on /boot type ext3 (rw,data=ordered)
usbfs on /proc/bus/usb type usbfs (rw)
/dev/disk1_6 on /mnt/disk1 type xfs (rw,noatime,usrquota,grpquota)
root@LS-SL9AF:~#
/ も /boot も ext3 でマウントされている

LS-SL
楽天市場




ログイン可能にする
ハックの記録
LinkStation/玄箱 をハックしよう

RAM root にログインできるようにする

ツイート Tweet to @yasunari_y @yasunari_yをフォロー

Copyright (C) 2003-2012 Yasunari Yamashita. All Rights Reserved.
yasunari @ yamasita.jp 山下康成@京都府向日市