【拆光纤猫第二弹】ZTE中兴 ZXA10 F420 ONU 拆解|拆机乐园

离线miao_s

数码3级

发帖: 321

M币: 1117

专家: 5

粉丝: 13

只看楼主倒序阅读我要置顶楼主发表于: 2011-09-12

闲着没事再拿个坏的猫拆拆……

正面

背面

侧面 Monitor是什么刷机的？

主板

2颗电话IC

HUB芯片

光信号处理的？？

Flash 16M
Memory: 14088k/16384k available (1622k kernel code, 2276k reserved, 286k data, 100k init)

主控芯片
参数（超级终端里看来的）：
CPU revision is: 00018448
Primary instruction cache 16kB, physically tagged, 4-way, linesize 16 bytes.
Primary data cache 8kB, 4-way, linesize 16 bytes.
CPU frequency 300.00 MHz
Using 150.000 MHz high precision timer.

两粒华邦

光单元。由于“地形”比较复杂所以没把金属外壳掰开来了。

TTL线伺候

TTL线连接方法

分解完毕。。

附上TTL信息：

复制代码

Error: Out of Environment space
Error: Out of Environment space
Error: Out of Environment space
Error: Out of Environment space
Basic POST completed... Success.
Last reset cause: Hardware reset (Power-on reset)
PSPBoot1.4 rev: 1.4.3.7
D2 TECHNOLOGIES
======================
Flash Manufacture ID : EON_FLASH_ID
Flash_Family : FLASH_FAMILY_EON
Warning: Flash Device ID is Unknown!
Use EON_EN29LV640BT as default
Flash_Device_ID : EON_EN29LV640BT
Flash_Layout : FLASH_LAYOUT_BOTTOM
Press ESC for monitor... 3321
(psbl)
Booting...
Launching kernel decompressor.
Starting LZMA Uncompression Algorithm.
Compressed file is LZMA format.
Kernel decompressor was successful ... launching kernel.
LINUX started...
Config serial console: console=ttyS0,115200n8r root=31:5
Linux version 2.6.10_dev-malta-mips2_fp_len (arthur@localhost.localdomain) (gcc version 3.4.3) #78 Thu Mar 25 09:30:20 CST 2010
CPU revision is: 00018448
TNETV1020VDB Communication Processor detected
Determined physical RAM map:
memory: 14001000 @ 00000000 (reserved)
memory: 0001f000 @ 14001000 (ROM data)
memory: 0020e000 @ 14020000 (reserved)
memory: 00dd2000 @ 1422e000 (usable)
Built 1 zonelists
Kernel command line: console=ttyS0,115200n8r root=31:5
Primary instruction cache 16kB, physically tagged, 4-way, linesize 16 bytes.
Primary data cache 8kB, 4-way, linesize 16 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
PID hash table entries: 128 (order: 7, 2048 bytes)
CPU frequency 300.00 MHz
Using 150.000 MHz high precision timer.
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Freeing Bootloader reserved memory [0x0001f000 @ 0x14001000]
Memory: 14088k/16384k available (1622k kernel code, 2276k reserved, 286k data, 100k init)
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
Checking for 'wait' instruction... available.
spawn_desched_task(00000000)
desched cpu_callback 3/00000000
ksoftirqd started up.
softirq RT prio: 24.
desched cpu_callback 2/00000000
desched thread 0 started up.
TI Optimizations: Allocating TI-Cached Memory Pool.
Warning: Number of buffers is not configured. Setting default to 512
Using 512 Buffers for TI-Cached Memory Pool.
NSP Optimizations: Succesfully allocated TI-Cached Memory Pool.
NET: Registered protocol family 16
Can't analyze prologue code at 941b3c00
Squashfs 2.1-r2 (released 2004/12/15) (C) 2002-2004 Phillip Lougher
LZMA decompressor support based on LZMA SDK 4.05 by Oleg I.Vdovikin
Serial: 8250/16550 driver $Revision: 1.90 $ 1 ports, IRQ sharing disabled
ttyS0 at (irq = 15) is a 16550A
io scheduler noop registered
PPP generic driver version 2.4.2
NET: Registered protocol family 24
Error getting CPMAC Configuration params for instance:0
Environment Variable:MACCFG_A not set in bootloader
Setting Default configuration params for CPMAC instance:0
MAC CFG : Tx Interrupts off , threshold : 20
Error getting CPMAC Configuration params for instance:1
Environment Variable:MACCFG_B not set in bootloader
Setting Default configuration params for CPMAC instance:1
MAC CFG : Tx Interrupts off , threshold : 20
TI CPMAC Linux DDA version 2.0 - CPMAC DDC version 0.3
Cpmac: Installed 2 instances.
Cpmac driver is allocating buffer memory at init time.
elevator: using noop as default io scheduler
Primary flash device: Found 1 x16 devices at 0x0 in 16-bit bank
Amd/Fujitsu Extended Query Table at 0x0040
cfi_fixup, detect mfr = 7f, id = cb
cfi_fixup, detect mfr = 7f, id = cb
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
avalanche flash device: 0x800000 at 0x10000000.
Looking for mtd device :mtd0:
Found a mtd0 image (0x150000), with size (0x240000).
Creating 1 MTD partitions on "Primary flash device":
0x00150000-0x00390000 : "mtd0"
Looking for mtd device :mtd1:
Found a mtd1 image (0x50000), with size (0x100000).
Creating 1 MTD partitions on "Primary flash device":
0x00050000-0x00150000 : "mtd1"
Looking for mtd device :mtd2:
Found a mtd2 image (0x0), with size (0x20000).
Creating 1 MTD partitions on "Primary flash device":
0x00000000-0x00020000 : "mtd2"
Looking for mtd device :mtd3:
Found a mtd3 image (0x390000), with size (0x70000).
Creating 1 MTD partitions on "Primary flash device":
0x00390000-0x00400000 : "mtd3"
Looking for mtd device :mtd4:
Found a mtd4 image (0x400000), with size (0x100000).
Creating 1 MTD partitions on "Primary flash device":
0x00400000-0x00500000 : "mtd4"
Looking for mtd device :mtd5:
Found a mtd5 image (0x500000), with size (0x240000).
Creating 1 MTD partitions on "Primary flash device":
0x00500000-0x00740000 : "mtd5"
NET: Registered protocol family 2
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 1024 bind 2048)
NET: Registered protocol family 1
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly.
FWBGetBlockSize=0x10000.
FWBGetBlockSize=0x10000.
Freeing unused kernel memory: 100k freed
@@@@@@@@init started: BusyBox v1.00 (2010.03.25-01:30+0000) multi-call binary@@@@@
Algorithmics/MIPS FPU Emulator v1.5
[/etc/init.d/S03config.sh]
Mounting proc and var ....
avalanche_led: module license 'proprietary' taints kernel.
......
EPON F420 D2 Alphanetworks
......
Start xmldb ...
----
Starting D2Tech vPort.
----
D2 OSAL kernel module 1.5 initialized
D2 OSAL kernel module 1.5 initialized
[/etc/scripts/misc/profile.sh] get ...
lkm.c 133: devname /dev/d2vtspr
/dev/d2vtspr registered successfuly @ 252.
[/etc/scripts/misc/defnodes.sh] ...
SH [/etc/defnodes/S10syncnodes.sh] ...
SH [/etc/defnodes/S11setext.sh] ...
PHP [/etc/defnodes/S12setnodes.php] ...
PHP [/etc/defnodes/S40brand.php] ...
[/etc/scripts/misc/defnodes.sh] Done !!
[/etc/templates/timezone.sh] ...
_tic.c(506) SLIC init success:1
Setup Lan IP!
FWBGetBlockSize=0x10000.
FWBGetBlockSize=0x10000.
FWBGetBlockSize=0x10000.
FWBGetBlockSize=0x10000.
device eth0 entered promiscuous mode
:init i2c-driver adapt for eeprom
:now probe i2c
[/etc/init.d/S03config.sh] done!
[/etc/init.d/S10system.sh]
[/etc/templates/thttpd.sh] [start] ...
Starting THTTPD ...
[/etc/templates/housekeeper.sh] [start] ...
[/var/run/housekeeper_start.sh] ...
Starting housekeeper ...
[/etc/templates/dns.sh] [start] ...
auto ,zh ,en ,dir = /www
[/var/run/dns_start.sh] ...
[/etc/templates/flash_agent.sh] [start] ...
_tic.c(506) SLIC init success:2
D2 Technologies
_ _ __
/ | '/ /_ _ /_ _ _ /_ _ ._ _
/_.'/_ //_'/_ / // //_///_//_///_'_\
_/
Unified Communication Products
www.d2tech.com
+D2Tech+ VTSP_RT VTSP_R_1_4_12
[/var/run/flash_agent_start.sh] ...
>>> ALPHA Flash Agent:
[/etc/templates/logd.sh] ...
[/var/run/logd_start.sh] ...
Starting logd ...
>>> ALPHA Log:
/bin/alphaLogd: create logd_ipc(3) OK !
[/etc/templates/diap.sh] [start] ...
[/var/run/diap_start.sh] ...
Starting DIAP ...
[/etc/templates/telnetd.sh] ...
[/var/run/telnetd_start.sh] ...
Starting telnetd ...
[/etc/templates/oam.sh] [start] ...
[/var/run/oam_start.sh] ...
Starting OAM ...
[/etc/templates/verupdate.sh] [start] ...
[/var/run/verupdate_start.sh] ...
Starting Version Update ...
[/etc/templates/megaco.sh] [start] ...
[/var/run/megaco_start.sh] ...
Starting Megaco ...
[/etc/init.d/S10system.sh] done!
rcS done!
BusyBox v1.00 (2010.03.25-01:30+0000) Built-in shell (msh)
Enter 'help' for a list of built-in commands.
Alpha # log_init: shmget failed, retry[1]rt_setup: fd 4
[EventSend]: send event msg to ipc fd(5), path = /tmp/mg_sock error! 2
[EventSend]: send event msg to ipc fd(5), path = /tmp/mg_sock error! 2
MG[Info]: Megaco Stack Version 2.5.1.5 Copyright (c) 2009 RADVISION
MG[Info]: Stack initialed successfully.
MG[Info]: Starting Media Gateway.