| BBルータ解剖 |
|
|
| BUFFALO BLR-TX4S |
|
調べてわかったのですが、なんと Linux で動いています。既にカタログ落ちしている 製品なので、安く購入できたら色々いじってみるのも面白そうです。 |
| アップデートファームの取り出し |
|---|
| 確認ファーム Version : 1.21 |
ダウンロードしたファームのアップデートファイルから中身を取り出します。まず、 ファームウェアのアップデートファイルを解凍します。解凍すると、 blrtx4s-121 のファイルが取り出せます。ファイル、前半部分が kernel, 後半部分は ROMFS です。 前半部は dd if=blrtx4s-121 of=data0 bs=1 skip=63 count=576963 で取り出すことができます。この取り出したファイルは gzip で圧縮されているので、 解凍します。なぜか piggy というファイルですが、取り出すことができます。 しかし、エラーが出るので、ファイルの区切りは別な場所かもしれません。 中の kernel は Linux 2.4.5 ベースで、詳細は下の通りです。 Linux version 2.4.5 (root@Satoh-linux) (gcc version 3.0 20010422 (prerelease) with bcm4710a0 modifications) #733 2003年 8月 4日 月曜日 11:53:07 JST kernel 自体は MIPS のものなので、 CPU は MIPS でしょう。 後半部は dd if=hoge of=data1 bs=1 skip=786467 で取り出します。取り出したこの data1 ファイルは Linux などで loop オプションを つけて mount をすることができます。 ちょっと長いですが、このファイルを mount して tree コマンドを実行した ものを下に付けます。色々あって、面白そうです。
.
|-- bin
| |-- busybox
| |-- cat -> busybox
| |-- chmod -> busybox
| |-- cp -> busybox
| |-- date -> busybox
| |-- dd -> busybox
| |-- df -> busybox
| |-- dmesg -> busybox
| |-- echo -> busybox
| |-- false -> busybox
| |-- grep -> busybox
| |-- kill -> busybox
| |-- ln -> busybox
| |-- ls -> busybox
| |-- mkdir -> busybox
| |-- mknod -> busybox
| |-- more -> busybox
| |-- mount -> busybox
| |-- msh -> busybox
| |-- mv -> busybox
| |-- ping -> busybox
| |-- ps -> busybox
| |-- pwd -> busybox
| |-- rm -> busybox
| |-- rmdir -> busybox
| |-- sed -> busybox
| |-- sh -> busybox
| |-- sleep -> busybox
| |-- sync -> busybox
| |-- touch -> busybox
| |-- true -> busybox
| |-- umount -> busybox
| `-- uname -> busybox
|-- dev
|-- etc
| |-- crontab -> ../tmp/crontab
| |-- crontab.orig
| |-- dnrd -> ../tmp/dnrd
| |-- dnrd.conf
| |-- fwlogwatch.config
| |-- host.conf -> ../tmp/host.conf
| |-- hosts -> ../tmp/hosts
| |-- ld.so.cache
| |-- ld.so.conf
| |-- nsswitch.conf -> ../tmp/nsswitch.conf
| `-- resolv.conf -> ../tmp/resolv.conf
|-- hirai
| |-- air_syslog
| |-- alarm_notify
| |-- ethioctl
| |-- fwlogwatch.log
| |-- getsyslog
| |-- hirai
| |-- killpro
| `-- kmsg_syslog
|-- lib
| |-- ld.so.1
| |-- libc.so.6
| |-- libnss_compat.so.2
| |-- libnss_dns.so.2
| |-- libnss_files.so.2
| |-- libnss_hesiod.so.2
| |-- libnss_nis.so.2
| |-- libnss_nisplus.so.2
| |-- libresolv.so.2
| `-- modules
| `-- 2.4.5
| |-- build -> /hda5/WBR-G54/Ver1.30/src/linux/linux
| |-- kernel
| | `-- drivers
| | `-- net
| | |-- et
| | | `-- et.o
| | |-- il
| | | `-- il.o
| | `-- wl
| | `-- wl.o
| `-- pcmcia
|-- mnt
|-- proc
|-- sbin
| |-- erase -> rc
| |-- halt -> ../bin/busybox
| |-- hotplug -> rc
| |-- ifconfig -> ../bin/busybox
| |-- infini_exec
| |-- init -> rc
| |-- insmod -> ../bin/busybox
| |-- lsmod -> ../bin/busybox
| |-- makedevs -> ../bin/busybox
| |-- modprobe -> ../bin/busybox
| |-- nas
| |-- netfilter -> rc
| |-- pivot_root -> ../bin/busybox
| |-- rc
| |-- reboot -> ../bin/busybox
| |-- rmmod -> ../bin/busybox
| |-- stats -> rc
| |-- syslogd -> ../bin/busybox
| |-- wlctl -> rc
| `-- write -> rc
|-- tmp
|-- usr
| |-- bin
| | |-- basename -> ../../bin/busybox
| | |-- dirname -> ../../bin/busybox
| | |-- free -> ../../bin/busybox
| | |-- killall -> ../../bin/busybox
| | |-- route -> ../../bin/busybox
| | |-- uptime -> ../../bin/busybox
| | `-- wget -> ../../bin/busybox
| |-- lib
| | |-- libnetconf.so
| | |-- libnvram.so
| | `-- libshared.so
| |-- sbin
| | |-- alarm_notify
| | |-- ap_servd
| | |-- brctl
| | |-- cron
| | |-- crontab
| | |-- dnrd
| | |-- dumpleases
| | |-- fw -> netconf
| | |-- fwlogwatch
| | |-- httpd
| | |-- initswd
| | |-- netconf
| | |-- notify_mgr
| | |-- ntpclient
| | |-- nvram
| | |-- pppoecd
| | |-- ripd
| | |-- tmail
| | |-- udhcpc -> udhcpd
| | |-- udhcpd
| | |-- upnp
| | |-- wl
| | `-- zebra
| `-- tmp -> ../tmp
|-- var -> tmp/var
`-- www
|-- advance
| |-- ad-admin-backup.htm
| |-- ad-admin-client.htm
| |-- ad-admin-firm.htm
| |-- ad-admin-firm2.htm
| |-- ad-admin-init.htm
| |-- ad-admin-init2.htm
| |-- ad-admin-logout.htm
| |-- ad-admin-packet-table.htm
| |-- ad-admin-packet.htm
| |-- ad-admin-ping-footer.htm
| |-- ad-admin-ping-header.htm
| |-- ad-admin-ping.htm
| |-- ad-admin-system-dhcp-updown-help.htm
| |-- ad-admin-system-pppoe-updown-help.htm
| |-- ad-admin-system.htm
| |-- ad-fs-access.htm
| |-- ad-fs-popup.htm
| |-- ad-fs-privacy.htm
| |-- ad-info.htm
| |-- ad-lan-dhcp.check.htm
| |-- ad-lan-dhcp.checked.htm
| |-- ad-lan-dhcp.htm
| |-- ad-lan-dhcp_changing.htm
| |-- ad-lan-ether.htm
| |-- ad-net-address.checked.htm
| |-- ad-net-address.htm
| |-- ad-net-address_changing.htm
| |-- ad-net-address_changing_checked.htm
| |-- ad-net-address_changing_reload.htm
| |-- ad-net-address_input.htm
| |-- ad-net-attack.htm
| |-- ad-net-contents.htm
| |-- ad-net-firm.htm
| |-- ad-net-logging-move.htm
| |-- ad-net-logging.htm
| |-- ad-net-packet.htm
| |-- ad-net-packet_bottom.htm
| |-- ad-net-packet_changing.htm
| |-- ad-net-packet_easy.htm
| |-- ad-net-packet_easy_button.htm
| |-- ad-net-packet_easy_input.htm
| |-- ad-net-packet_easy_main.htm
| |-- ad-net-packet_ip.htm
| |-- ad-net-packet_ip_button.htm
| |-- ad-net-packet_ip_input.htm
| |-- ad-net-packet_ip_main.htm
| |-- ad-net-packet_mac.htm
| |-- ad-net-packet_mac_button.htm
| |-- ad-net-packet_mac_input.htm
| |-- ad-net-packet_mac_main.htm
| |-- ad-net-routing.checked.htm
| |-- ad-net-routing.htm
| |-- ad-net-routing_changing.htm
| |-- ad-net-routing_input.htm
| |-- ad-net-spanning.htm
| |-- ad-net-syslog-move.htm
| |-- ad-net-syslog.htm
| |-- ad-net-syslog_event.htm
| |-- ad-net-upnp.htm
| |-- ad-time.htm
| |-- ad-top.htm
| |-- ad-wan-ether.htm
| |-- ad-wan-ether_pppoe.htm
| |-- ad-wan-ether_pppoe_routeadd.htm
| |-- ad-wan-network.htm
| |-- ad-wan-pppoe.htm
| |-- advance-admin-backup.htm
| |-- advance-admin-client.htm
| |-- advance-admin-firm.htm
| |-- advance-admin-init.htm
| |-- advance-admin-logging.htm
| |-- advance-admin-logout.htm
| |-- advance-admin-packet.htm
| |-- advance-admin-ping.htm
| |-- advance-admin-syslog.htm
| |-- advance-admin-system.htm
| |-- advance-firm.htm
| |-- advance-fs-access.htm
| |-- advance-fs-pop.htm
| |-- advance-fs-privacy.htm
| |-- advance-info-as.htm
| |-- advance-info-time.htm
| |-- advance-lan-dhcp.htm
| |-- advance-lan-mac.htm
| |-- advance-lan-port.htm
| |-- advance-lan-wds.htm
| |-- advance-lan-wireless.htm
| |-- advance-lan-wireless_g.htm
| |-- advance-net-address.htm
| |-- advance-net-attack.htm
| |-- advance-net-attack_tag1.htm
| |-- advance-net-contents.htm
| |-- advance-net-logging.htm
| |-- advance-net-packet.htm
| |-- advance-net-routing.htm
| |-- advance-net-spanning.htm
| |-- advance-net-syslog.htm
| |-- advance-net-upnp.htm
| |-- advance-system.htm
| |-- advance-wan-network.htm
| |-- advance-wan-port.htm
| |-- advance-wan-pppoe.htm
| |-- advance2-admin-backup.htm
| |-- advance2-admin-client.htm
| |-- advance2-admin-firm.htm
| |-- advance2-admin-init.htm
| |-- advance2-admin-logging.htm
| |-- advance2-admin-logout.htm
| |-- advance2-admin-packet.htm
| |-- advance2-admin-ping.htm
| |-- advance2-admin-syslog.htm
| |-- advance2-admin-system.htm
| |-- advance2-firm.htm
| |-- advance2-fs-access.htm
| |-- advance2-fs-pop.htm
| |-- advance2-fs-privacy.htm
| |-- advance2-info-as.htm
| |-- advance2-info-time.htm
| |-- advance2-lan-dhcp.htm
| |-- advance2-lan-port.htm
| |-- advance2-net-address.htm
| |-- advance2-net-attack.htm
| |-- advance2-net-contents.htm
| |-- advance2-net-logging.htm
| |-- advance2-net-packet.htm
| |-- advance2-net-routing.htm
| |-- advance2-net-spanning.htm
| |-- advance2-net-syslog.htm
| |-- advance2-net-upnp.htm
| |-- advance2-system.htm
| |-- advance2-wan-network.htm
| |-- advance2-wan-port.htm
| |-- advance2-wan-pppoe.htm
| |-- cwf-1.htm
| |-- cwf-2.htm
| `-- setuzokukanounisuru.htm
|-- bc
| |-- blur_new.jpg
| |-- btn.gif
| |-- filter.asp
| |-- firmware.asp
| |-- forward.asp
| |-- index.asp
| |-- internal.asp
| |-- logo_new.gif
| |-- overlib.js
| |-- repeat_edge_new.gif
| |-- status.asp
| |-- style.css
| `-- wireless.asp
|-- catv2lan.htm
|-- cgi_base.htm
|-- cgi_connecting.htm
|-- cgi_err.htm
|-- cgi_err_game.htm
|-- cgi_err_notab.htm
|-- cgi_logout.htm
|-- dhcpc2lan.htm
|-- dhcps2setuzoku.htm
|-- game2game.htm
|-- help
| |-- admin_logout.htm
| |-- admin_password.htm
| |-- admin_user.htm
| |-- airstation_name.htm
| |-- attack_cm.htm
| |-- attack_enable.htm
| |-- attack_info.htm
| |-- attack_mailaddr.htm
| |-- attack_mailfromaddr.htm
| |-- attack_mailtest.htm
| |-- attack_smtp_before_pop.htm
| |-- attack_smtpserv.htm
| |-- attack_spoofing.htm
| |-- attack_threshold.htm
| |-- backup_load.htm
| |-- backup_save.htm
| |-- contents_administrator.htm
| |-- contents_categories.htm
| |-- contents_cwf.htm
| |-- contents_license.htm
| |-- contents_mode.htm
| |-- contents_onoff.htm
| |-- contents_password.htm
| |-- contents_user.htm
| |-- dhcp_manual.htm
| |-- dhcpserver_defaultgateway.htm
| |-- dhcpserver_display.htm
| |-- dhcpserver_display2.htm
| |-- dhcpserver_dns.htm
| |-- dhcpserver_domain.htm
| |-- dhcpserver_lease_ip.htm
| |-- dhcpserver_lease_time.htm
| |-- dhcpserver_manual.htm
| |-- dhcpserver_manual_ip.htm
| |-- dhcpserver_manual_mac.htm
| |-- dhcpserver_onoff.htm
| |-- dhcpserver_wins.htm
| |-- easy_connect_fail_auth.htm
| |-- easy_connect_fail_dhcp.htm
| |-- easy_connect_fail_pppoe.htm
| |-- filter_display.htm
| |-- filter_dst_ip.htm
| |-- filter_easy.htm
| |-- filter_info.htm
| |-- filter_insert.htm
| |-- filter_ip.htm
| |-- filter_log.htm
| |-- filter_mac.htm
| |-- filter_manual.htm
| |-- filter_operate.htm
| |-- filter_port.htm
| |-- filter_protocol.htm
| |-- filter_set.htm
| |-- filter_src_ip.htm
| |-- firmware.htm
| |-- firmware_howto.htm
| |-- game_lan_port.htm
| |-- info_card.htm
| |-- info_card_mac.htm
| |-- info_channel.htm
| |-- info_client_monitor.htm
| |-- info_dgw.htm
| |-- info_dhcp.htm
| |-- info_essid.htm
| |-- info_gateway.htm
| |-- info_lan.htm
| |-- info_lan_ip.htm
| |-- info_lan_mac.htm
| |-- info_name.htm
| |-- info_product.htm
| |-- info_wan.htm
| |-- info_wan_ip.htm
| |-- info_wan_mac.htm
| |-- info_wan_type.htm
| |-- info_wep.htm
| |-- info_wireless.htm
| |-- lanport_dhcp_lease_ip.htm
| |-- lanport_lan_ip.htm
| |-- log_display.htm
| |-- log_lebel.htm
| |-- log_level.htm
| |-- log_message.htm
| |-- misc_ip_spoofing.htm
| |-- misc_network.htm
| |-- misc_pop_before_smtp.htm
| |-- misc_rip.htm
| |-- nat_add.htm
| |-- nat_display.htm
| |-- nat_display2.htm
| |-- nat_display_game.htm
| |-- nat_dmz.htm
| |-- nat_group.htm
| |-- nat_lan_ip.htm
| |-- nat_lan_port.htm
| |-- nat_lan_protocol.htm
| |-- nat_log.htm
| |-- nat_onoff.htm
| |-- nat_set.htm
| |-- nat_wan_ip.htm
| |-- nat_wan_port.htm
| |-- nat_wan_protocol.htm
| |-- packet_lan.htm
| |-- packet_pppoe.htm
| |-- packet_wan.htm
| |-- packet_wds.htm
| |-- packet_wlan.htm
| |-- ping.htm
| |-- pingtest.htm
| |-- pppoe_authentication_type.htm
| |-- pppoe_connection_type.htm
| |-- pppoe_disable.htm
| |-- pppoe_disconnect_time.htm
| |-- pppoe_keep_alive.htm
| |-- pppoe_label.htm
| |-- pppoe_manual.htm
| |-- pppoe_mru.htm
| |-- pppoe_mtu.htm
| |-- pppoe_password.htm
| |-- pppoe_route_add.htm
| |-- pppoe_route_destination.htm
| |-- pppoe_route_list.htm
| |-- pppoe_route_position.htm
| |-- pppoe_route_sessionlabel.htm
| |-- pppoe_route_source.htm
| |-- pppoe_service.htm
| |-- pppoe_session.htm
| |-- pppoe_session_default.htm
| |-- pppoe_user.htm
| |-- restrict_onoff.htm
| |-- rip_lan_receive.htm
| |-- rip_lan_transmit.htm
| |-- rip_wan_receive.htm
| |-- rip_wan_transmit.htm
| |-- route_add.htm
| |-- route_destination.htm
| |-- route_display.htm
| |-- route_display2.htm
| |-- route_gateaway.htm
| |-- route_metric.htm
| |-- spanningtree_onoff.htm
| |-- syslog_lebel.htm
| |-- syslog_level.htm
| |-- syslog_message.htm
| |-- syslog_onoff.htm
| |-- syslog_server.htm
| |-- time_ntp.htm
| |-- time_set.htm
| |-- upnp_onoff.htm
| |-- wan_dafaultgatway.htm
| |-- wan_dns.htm
| |-- wan_domain.htm
| |-- wan_host.htm
| |-- wan_ip.htm
| |-- wan_mac.htm
| |-- wan_pingaction.htm
| |-- wan_setuzoku_ng.htm
| |-- wan_speed.htm
| |-- wan_webport.htm
| `-- wan_wins.htm
|-- help-messenger.htm
|-- help-netmeeting.htm
|-- images
| |-- air_logo.png
| |-- bar-3.png
| |-- bar-3_g.png
| |-- bar1.png
| |-- bar2-08.png
| |-- bar2-10.png
| |-- bar2-12.png
| |-- bo.png
| |-- bo1.png
| |-- lock-lan.png
| |-- lock-setuzoku.png
| |-- lock-t2.png
| |-- lock-t3-1.png
| |-- lock-t3-2.png
| |-- lock-t3-3.png
| |-- lock-t4.png
| |-- lock-wan.png
| |-- logout.png
| |-- off-kinou.png
| |-- off-lan.png
| |-- off-logout.png
| |-- off-setuzoku.png
| |-- off-t1-1.png
| |-- off-t1.png
| |-- off-t2.png
| |-- off-t3-1.png
| |-- off-t3-2.png
| |-- off-t3-3.png
| |-- off-t4.png
| |-- off-top.png
| |-- off-wan.png
| |-- on-kinou.png
| |-- on-lan.png
| |-- on-setuzoku.png
| |-- on-t1-1.png
| |-- on-t1-2.png
| |-- on-t1.png
| |-- on-t2.png
| |-- on-t3-1.png
| |-- on-t3-2.png
| |-- on-t3-3.png
| |-- on-t4.png
| |-- on-top.png
| |-- on-wan.png
| |-- p-ad-off.png
| |-- p-ad-on.png
| |-- p-adsl-off.png
| |-- p-adsl-on.png
| |-- p-catv-off.png
| |-- p-catv-on.png
| |-- p-ftth-off.png
| |-- p-ftth-on.png
| |-- p-kanryou.png
| |-- p-modoru.png
| |-- p-susumu.png
| |-- question.gif
| |-- spacer.gif
| |-- yajirushi-top.png
| |-- yajirushi.png
| |-- yajirushi01.png
| `-- yajirushi_up.png
|-- index.htm
|-- kinou-game-entry.checked.htm
|-- kinou-game-entry.htm
|-- kinou-game.htm
|-- kinou-messenger.htm
|-- kinou-netmeeting-check.htm
|-- kinou-netmeeting-check2.htm
|-- kinou-netmeeting-ng.htm
|-- kinou-netmeeting-ok.htm
|-- kinou-netmeeting.htm
|-- kinou-netmeeting2.htm
|-- kinou-security.htm
|-- kinou.htm
|-- lan-dhcp-manual.htm
|-- lan.htm
|-- mac2entry2.htm
|-- mac2kinou.htm
|-- messenger2messenger.htm
|-- nm2nm2.htm
|-- null.htm
|-- omake
| |-- cmd.htm
| |-- cmd_1.htm
| |-- cmd_2.htm
| |-- images
| | |-- airstation.gif
| | |-- bg.gif
| | |-- buffalo.gif
| | `-- melco_top.gif
| |-- index.htm
| |-- nvram.htm
| |-- nvram_1.htm
| |-- nvram_2.htm
| `-- staff.htm
|-- pppoe2lan.htm
|-- security2security.htm
|-- setuzoku-ng-call.htm
|-- setuzoku-ng.htm
|-- setuzoku-ng2.htm
|-- setuzoku-ok.htm
|-- setuzoku-wan-check.htm
|-- setuzoku-wan-check2.htm
|-- setuzoku-wan-check_hidden.htm
|-- setuzoku-wan-check_main.htm
|-- setuzoku.htm
|-- top.htm
|-- top_message.htm
|-- top_message_first.htm
|-- upnp
| |-- LAN
| | |-- landevicedesc.xml
| | `-- lanhostconfigmanagementSCPD.xml
| |-- WAN
| | |-- wancablelinkconfigSCPD.xml
| | |-- wancommoninterfaceconfigSCPD.xml
| | |-- wanconnectiondevicedesc.xml
| | |-- wandevicedesc.xml
| | |-- wandsllinkconfigSCPD.xml
| | |-- wanethernetlinkconfigSCPD.xml
| | |-- wanipconnectionSCPD.xml
| | |-- wanpotslinkconfigSCPD.xml
| | `-- wanpppconnectionSCPD.xml
| |-- igd-minimal.xml
| |-- igdevicedesc.xml
| `-- layer3forwardingSCPD.xml
|-- version
| |-- index.htm
| |-- kensa.htm
| |-- number
| |-- pmon.htm
| `-- product
|-- wan-adsl.htm
|-- wan-b-flets.htm
|-- wan-b-other.htm
|-- wan-b-pppoe.htm
|-- wan-catv-manual.htm
|-- wan-catv-top.htm
|-- wan-catv.htm
|-- wan-flets.htm
|-- wan-ftth-top.htm
`-- wan-pppoe.htm
34 directories, 575 files
見ていると、欲しくなってしまいます。 |
|
|