工业路由器的拆解过程
发布者：leekwenty
发布于：2019-02-18 13:09
版权声明：本文为LeeKwen的原创文章，请联系微信@leekwenty后转载。 https://blog.csdn.net/leekwen/article/details/81202456
上次杭州的一家对接商，送来了他们的工业路由器，也就是一个铁盒子了。
具体的参数也没有仔细的看，我对这个不感冒，只对里面的系统有兴趣。（后来发现此USB口为ADB调试口）
接口如图：
拿到后，放那里吃灰了很久。才想起来要测试下，把玩把玩吧。
第一步：动用螺丝刀进行拆解（这个拆解很简单了，除了QC和保修标贴外，就是螺丝了）
拆机后，对PCBA一览无余，也没有什么接口可以调试的。有的那个应该是他们的编程器接口吧。
PCBA背面：
瞬间感觉，扯淡了。白费力气了。
好吧，那就扫描端口，接上网线开始一顿狂扫，80,53,5555端口开发。
5555，一个莫名端口，先连接看看，一连接就断开了，哦哦。
后来发现这个原来是个ADBD的调试口，凌乱了，路由器上竟然能用ADB来调试。
好吧，就你的调试比较突出。接上USB线，发现下面的几个接口，还可以升级模块的程序。
那就上来调试下，发现果然ADB可以正常进入，而且还是特权用户权限。
看看启动日志，具体如下：
/var/volatile/log # cat boot
Thu Jan 1 08:04:40 1970: MTD : Detected block device : /firmware for modem
Thu Jan 1 08:04:40 1970: UBI device number 1, total 223 LEBs (56631296 bytes, 54.0 MiB), available 0 LEBs (0 bytes), LEB size 253952 bytes (248.0 KiB)
Thu Jan 1 08:04:40 1970: Starting psmd: done
Thu Jan 1 08:04:40 1970: /firmware/image
Thu Jan 1 08:04:40 1970: Nothing to do. No firmware links needed.
Thu Jan 1 08:04:41 1970: Starting ipacm_perf: done
Thu Jan 1 08:04:41 1970: ln: /system/bin/sh: File exists
Thu Jan 1 08:04:41 1970: Switching to composition number 0x9025
Thu Jan 1 08:04:41 1970: sh: write error: No such file or directory
Thu Jan 1 08:04:41 1970: Starting adbd: Starting ipacmdiag: done
Thu Jan 1 08:04:41 1970: /etc/init.d/adbd: line 74: can't create /etc/adb_devid: Read-only file system
Thu Jan 1 08:04:41 1970: Starting qti: done
Thu Jan 1 08:04:42 1970: INIT: Entering runlevel: 5
Thu Jan 1 08:04:42 1970: Configuring network interfaces... Cannot find device "eth0"
Thu Jan 1 08:04:43 1970: Starting keyd: done
Thu Jan 1 08:04:44 1970: chown: /media/card: Read-only file system
Thu Jan 1 08:04:44 1970: chown: /sdcard: Read-only file system
Thu Jan 1 08:04:44 1970: hwclock: settimeofday: Invalid argument
Thu Jan 1 08:04:44 1970: Starting syslogd done
Thu Jan 1 08:04:44 1970: Starting webcgid: done
Thu Jan 1 08:04:44 1970: Starting irsc_util: Starting irsc tool
Thu Jan 1 08:04:44 1970: Failed to open file:/etc/sec_config
Thu Jan 1 08:04:44 1970: Absent/Invalid config,Default rules apply
Thu Jan 1 08:04:44 1970: Ending irsc tool
Thu Jan 1 08:04:44 1970: done
Thu Jan 1 08:04:44 1970: Starting modem dependent daemons: Starting/Loading embms_kernel module: done loading embms_kernel module
Thu Jan 1 08:04:47 1970: Starting qmuxd: done
Thu Jan 1 08:04:47 1970: Starting thermal-engine: done
Thu Jan 1 08:04:47 1970: Starting csdserver: done
Thu Jan 1 08:04:47 1970: Starting netmgrd: done
Thu Jan 1 08:04:47 1970: Starting atreset: done
Thu Jan 1 08:04:47 1970: Starting Lighttpd Web Server: 1970-01-01 08:04:47: (/home/lynn/work/kl/mdm9607-v11-dtu/apps_proc/oe-core/build/tmp-glibc/work/armv7a-vfp-neon-oe-linux-gnueabi/lighttpd/1.4.45-r0/lighttpd-1.4.45/src/log.c.217) server started
Thu Jan 1 08:04:48 1970: lighttpd.
Thu Jan 1 08:04:48 1970: Starting eMBMs_TunnelingModule: done
Thu Jan 1 08:04:48 1970: Starting qmi_ip: done
Thu Jan 1 08:04:48 1970: Starting subsystem_ramdump: done
Thu Jan 1 08:04:48 1970: Starting system message bus: dbus.
Thu Jan 1 08:04:48 1970: Starting modem dependent daemons: Starting diagrebootapp: done
Thu Jan 1 08:04:48 1970: Starting atreset: done
Thu Jan 1 08:04:48 1970: Starting Lighttpd Web Server: /usr/sbin/lighttpd is already running
Thu Jan 1 08:04:48 1970: 636
Thu Jan 1 08:04:48 1970: lighttpd.
Thu Jan 1 08:04:48 1970: Starting qti_ppp: done
Thu Jan 1 08:04:48 1970: done
Thu Jan 1 08:04:48 1970: Starting netd: done
Thu Jan 1 08:04:48 1970: * Starting Avahi Unicast DNS Configuration Daemon: avahi-dnsconfd
Thu Jan 1 08:04:48 1970: ...fail!
Thu Jan 1 08:04:48 1970: Starting dturs232: done
Thu Jan 1 08:04:49 1970: Starting dturs485: done
Thu Jan 1 08:04:49 1970: Starting powerconfig for mdm9607: Starting pdc daemon: done
上面为boot的启动日志，下面为dmesg日志：
/var/volatile/tmp # dmesg
[ 0.000000] Booting Linux on physical CPU 0x0
[ 0.000000] Initializing cgroup subsys cpu
[ 0.000000] Initializing cgroup subsys cpuacct
[ 0.000000] Linux version 3.18.20 (lynn@Think) (gcc version 4.9.2 (GCC) ) #1 PREEMPT Wed Apr 11 14:10:09 CST 2018
[ 0.000000] CPU: ARMv7 Processor [410fc075] revision 5 (ARMv7), cr=10c53c7d
[ 0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[ 0.000000] Machine model: Qualcomm Technologies, Inc. MDM 9607 DTU v1p2
[ 0.000000] Reserved memory: reserved region for node 'modem_adsp_region@0': base 0x82a00000, size 80 MiB
[ 0.000000] Reserved memory: reserved region for node 'cnss_debug_region@0': base 0x87a00000, size 2 MiB
[ 0.000000] Reserved memory: reserved region for node 'external_image_region@0': base 0x87c00000, size 4 MiB
[ 0.000000] Removed memory: created DMA memory pool at 0x82a00000, size 80 MiB
[ 0.000000] Reserved memory: initialized node modem_adsp_region@0, compatible id removed-dma-pool
[ 0.000000] Removed memory: created DMA memory pool at 0x87a00000, size 2 MiB
[ 0.000000] Reserved memory: initialized node cnss_debug_region@0, compatible id removed-dma-pool
[ 0.000000] Removed memory: created DMA memory pool at 0x87c00000, size 4 MiB
[ 0.000000] Reserved memory: initialized node external_image_region@0, compatible id removed-dma-pool
[ 0.000000] cma: Reserved 4 MiB at 0x8fc00000
[ 0.000000] Memory policy: Data cache writeback
[ 0.000000] On node 0 totalpages: 64000
[ 0.000000] free_area_init_node: node 0, pgdat c0b51cdc, node_mem_map cf9d0000
[ 0.000000] Normal zone: 512 pages used for memmap
[ 0.000000] Normal zone: 0 pages reserved
[ 0.000000] Normal zone: 64000 pages, LIFO batch:15
[ 0.000000] CPU: All CPU(s) started in SVC mode.
[ 0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
[ 0.000000] pcpu-alloc: [0] 0
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 63488
[ 0.000000] Kernel command line: noinitrd rw console=ttyHSL0,115200,n8 androidboot.hardware=qcom ehci-hcd.park=3 msm_rtb.filter=0x37 lpm_levels.sleep_disabled=1 earlycon=msm_hsl_uart,0x78b3000 androidboot.serialno=MDM9607 androidboot.authorized_kernel=true androidboot.baseband=msm rootfstype=ubifs rootflags=bulk_read root=ubi0:rootfs ubi.mtd=15
[ 0.000000] PID hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.000000] Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
[ 0.000000] Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
[ 0.000000] Memory: 154304K/256000K available (7612K kernel code, 542K rwdata, 3120K rodata, 304K init, 1277K bss, 101696K reserved)
[ 0.000000] Virtual kernel memory layout:
[ 0.000000] vector : 0xffff0000 - 0xffff1000 ( 4 kB)
[ 0.000000] fixmap : 0xffc00000 - 0xfff00000 (3072 kB)
[ 0.000000] vmalloc : 0xd0800000 - 0xff000000 ( 744 MB)
[ 0.000000] lowmem : 0xc0000000 - 0xd0000000 ( 256 MB)
[ 0.000000] modules : 0xbf000000 - 0xc0000000 ( 16 MB)
[ 0.000000] .text : 0xc0008000 - 0xc0a83338 (10733 kB)
[ 0.000000] .init : 0xc0a84000 - 0xc0ad0000 ( 304 kB)
[ 0.000000] .data : 0xc0ad0000 - 0xc0b57ae0 ( 543 kB)
[ 0.000000] .bss : 0xc0b57ba4 - 0xc0c97060 (1278 kB)
[ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[ 0.000000] Preemptible hierarchical RCU implementation.
[ 0.000000] NR_IRQS:16 nr_irqs:16 16
[ 0.000000] GIC CPU mask not found - kernel will fail to boot.
[ 0.000000] GIC CPU mask not found - kernel will fail to boot.
[ 0.000000] mpm_init_irq_domain(): Cannot find irq controller for qcom,gpio-parent
[ 0.000000] MPM 1 irq mapping errored -517
[ 0.000000] Architected mmio timer(s) running at 19.20MHz (virt).
[ 0.000010] sched_clock: 56 bits at 19MHz, resolution 52ns, wraps every 3579139424256ns
[ 0.000026] Switching to timer-based delay loop, resolution 52ns
[ 0.000044] Switched to clocksource arch_mem_counter
[ 0.000690] Console: colour dummy device 80x30
[ 0.000712] Calibrating delay loop (skipped), value calculated using timer frequency.. 38.40 BogoMIPS (lpj=192000)
[ 0.000729] pid_max: default: 32768 minimum: 301
[ 0.000847] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.000863] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.001527] Initializing cgroup subsys freezer
[ 0.001555] Initializing cgroup subsys debug
[ 0.001591] CPU: Testing write buffer coherency: ok
[ 0.001938] Setting up static identity map for 0x8073dfa8 - 0x8073e000
[ 0.002931]
[ 0.002931] **********************************************************
[ 0.002951] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE **
[ 0.002960] ** **
[ 0.002969] ** trace_printk() being used. Allocating extra memory. **
[ 0.002978] ** **
[ 0.002986] ** This means that this is a DEBUG kernel and it is **
[ 0.002994] ** unsafe for produciton use. **
[ 0.003003] ** **
[ 0.003011] ** If you see this message and you are not debugging **
[ 0.003019] ** the kernel, report this immediately to your vendor! **
[ 0.003028] ** **
[ 0.003036] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE **
[ 0.003045] **********************************************************
[ 0.003843] MSM Memory Dump base table set up
[ 0.003881] MSM Memory Dump apps data table set up
[ 0.013877] VFP support v0.3: implementor 41 architecture 2 part 30 variant 7 rev 5
[ 0.015538] pinctrl core: initialized pinctrl subsystem
[ 0.015972] regulator-dummy: no parameters
[ 0.043987] NET: Registered protocol family 16
[ 0.045895] DMA: preallocated 256 KiB pool for atomic coherent allocations
[ 0.100109] cpuidle: using governor ladder
[ 0.130099] cpuidle: using governor menu
[ 0.160097] cpuidle: using governor qcom
[ 0.168849] msm_watchdog b017000.qcom,wdt: wdog absent resource not present
[ 0.169155] msm_watchdog b017000.qcom,wdt: MSM Watchdog Initialized
[ 0.174175] spmi_pmic_arb 200f000.qcom,spmi: PMIC Arb Version-2 0x20010000
[ 0.176920] platform 4080000.qcom,mss: assigned reserved memory node modem_adsp_region@0
[ 0.177551] irq: no irq domain found for /soc/pinctrl@1000000 !
[ 0.178274] mem_acc_corner: 0 <--> 0 mV
[ 0.180020] hw-breakpoint: found 5 (+1 reserved) breakpoint and 4 watchpoint registers.
[ 0.180038] hw-breakpoint: maximum watchpoint size is 8 bytes.
[ 0.181581] gpiochip_add: registered GPIOs 0 to 79 on device: 1000000.pinctrl
[ 0.181604] GPIO chip 1000000.pinctrl: created GPIO range 0->79 ==> 1000000.pinctrl PIN 0->79
[ 0.182179] __of_mpm_init(): MPM driver mapping exists
[ 0.182695] msm_rpm_glink_dt_parse: qcom,rpm-glink compatible not matches
[ 0.182712] msm_rpm_dev_probe: APSS-RPM communication over SMD
[ 0.182725] smd_open() before smd_init()
[ 0.183328] msm_mpm_dev_probe(): Cannot get clk resource for XO: -517
[ 0.185551] smd_channel_probe_now: allocation table not initialized
[ 0.187638] mdm9607_s1: 1050 <--> 1350 mV at 1225 mV normal idle
[ 0.187822] spm_regulator_probe: name=mdm9607_s1, range=LV, voltage=1225000 uV, mode=AUTO, step rate=4800 uV/us
[ 0.188273] cpr_efuse_init: apc_corner: efuse_addr = 0x000a4000 (len=0x1000)
[ 0.188320] cpr_read_fuse_revision: apc_corner: fuse revision = 2
[ 0.188340] cpr_parse_speed_bin_fuse: apc_corner: [row: 37]: 0x47d88832c995cf1e, speed_bits = 4
[ 0.188423] cpr_pvs_init: apc_corner: pvs voltage: [1050000 1100000 1212500] uV
[ 0.188439] cpr_pvs_init: apc_corner: ceiling voltage: [1050000 1225000 1350000] uV
[ 0.188452] cpr_pvs_init: apc_corner: floor voltage: [1050000 1050000 1150000] uV
[ 0.189204] i2c-msm-v2 78b6000.i2c: probing driver i2c-msm-v2
[ 0.189288] i2c-msm-v2 78b6000.i2c: error on clk_get(core_clk):-517
[ 0.189306] i2c-msm-v2 78b6000.i2c: error probe() failed with err:-517
[ 0.192066] msm-thermal soc:qcom,msm-thermal: msm_thermal:Failed reading node=/soc/qcom,msm-thermal, key=qcom,core-limit-temp. err=-22. KTM continues
[ 0.192103] msm-thermal soc:qcom,msm-thermal: probe_therm_reset:Failed reading node=/soc/qcom,msm-thermal, key=qcom,therm-reset-temp err=-22. KTM continues
[ 0.192152] msm_thermal:msm_thermal_dev_probe Failed reading node=/soc/qcom,msm-thermal, key=qcom,online-hotplug-core. err:-517
[ 0.193177] sps:sps is ready.
[ 0.194964] msm_rpm_glink_dt_parse: qcom,rpm-glink compatible not matches
[ 0.194983] msm_rpm_dev_probe: APSS-RPM communication over SMD
[ 0.195944] mdm9607_s2: 750 <--> 1275 mV at 750 mV normal idle
[ 0.196756] mdm9607_s3_level: 0 <--> 0 mV at 0 mV normal idle
[ 0.197304] mdm9607_s3_level_ao: 0 <--> 0 mV at 0 mV normal idle
[ 0.197820] mdm9607_s3_floor_level: 0 <--> 0 mV at 0 mV normal idle
[ 0.198324] mdm9607_s3_level_so: 0 <--> 0 mV at 0 mV normal idle
[ 0.199047] mdm9607_s4: 1800 <--> 1950 mV at 1800 mV normal idle
[ 0.199761] mdm9607_l1: 1250 mV normal idle
[ 0.200682] mdm9607_l2: 1800 mV normal idle
[ 0.201422] mdm9607_l3: 1800 mV normal idle
[ 0.202148] mdm9607_l4: 3075 mV normal idle
[ 0.202890] mdm9607_l5: 1700 <--> 3050 mV at 1700 mV normal idle
[ 0.203624] mdm9607_l6: 1700 <--> 3050 mV at 1700 mV normal idle
[ 0.204372] mdm9607_l7: 1700 <--> 1900 mV at 1700 mV normal idle
[ 0.205115] mdm9607_l8: 1800 mV normal idle
[ 0.205877] mdm9607_l9: 1200 <--> 1250 mV at 1200 mV normal idle
[ 0.206632] mdm9607_l10: 1050 mV normal idle
[ 0.207367] mdm9607_l11: 1800 mV normal idle
[ 0.208135] mdm9607_l12_level: 0 <--> 0 mV at 0 mV normal idle
[ 0.208687] mdm9607_l12_level_ao: 0 <--> 0 mV at 0 mV normal idle
[ 0.209222] mdm9607_l12_level_so: 0 <--> 0 mV at 0 mV normal idle
[ 0.209753] mdm9607_l12_floor_lebel: 0 <--> 0 mV at 0 mV normal idle
[ 0.210800] mdm9607_l13: 1800 <--> 2850 mV at 2850 mV normal idle
[ 0.211563] mdm9607_l14: 2650 <--> 3000 mV at 2650 mV normal idle
[ 0.211815] msm_mpm_dev_probe(): Cannot get clk resource for XO: -517
[ 0.212106] cpr_efuse_init: apc_corner: efuse_addr = 0x000a4000 (len=0x1000)
[ 0.212159] cpr_read_fuse_revision: apc_corner: fuse revision = 2
[ 0.212179] cpr_parse_speed_bin_fuse: apc_corner: [row: 37]: 0x47d88832c995cf1e, speed_bits = 4
[ 0.212263] cpr_pvs_init: apc_corner: pvs voltage: [1050000 1100000 1212500] uV
[ 0.212277] cpr_pvs_init: apc_corner: ceiling voltage: [1050000 1225000 1350000] uV
[ 0.212291] cpr_pvs_init: apc_corner: floor voltage: [1050000 1050000 1150000] uV
[ 0.212499] cpr_init_cpr_parameters: apc_corner: up threshold = 2, down threshold = 3
[ 0.212531] cpr_init_cpr_parameters: apc_corner: CPR is enabled by default.
[ 0.212564] cpr_init_cpr_efuse: apc_corner: [row:65] = 0x15c002a22a2367
[ 0.212587] cpr_init_cpr_efuse: apc_corner: CPR disable fuse = 0
[ 0.212601] cpr_init_cpr_efuse: apc_corner: Corner[1]: ro_sel = 0, target quot = 674
[ 0.212614] cpr_init_cpr_efuse: apc_corner: Corner[2]: ro_sel = 0, target quot = 674
[ 0.212627] cpr_init_cpr_efuse: apc_corner: Corner[3]: ro_sel = 0, target quot = 871
[ 0.212809] cpr_config: apc_corner: Timer count: 0x17700 (for 5000 us)
[ 0.213296] apc_corner: 0 <--> 0 mV
[ 0.213858] i2c-msm-v2 78b6000.i2c: probing driver i2c-msm-v2
[ 0.213940] i2c-msm-v2 78b6000.i2c: error on clk_get(core_clk):-517
[ 0.213958] i2c-msm-v2 78b6000.i2c: error probe() failed with err:-517
[ 0.214434] msm-thermal soc:qcom,msm-thermal: msm_thermal:Failed reading node=/soc/qcom,msm-thermal, key=qcom,core-limit-temp. err=-22. KTM continues
[ 0.214467] msm-thermal soc:qcom,msm-thermal: probe_therm_reset:Failed reading node=/soc/qcom,msm-thermal, key=qcom,therm-reset-temp err=-22. KTM continues
[ 0.214579] msm_thermal:get_kernel_cluster_info CPU0 topology not initialized.
[ 0.215064] cpu cpu0: dev_pm_opp_get_opp_count: device OPP not found (-19)
[ 0.215081] msm_thermal:get_cpu_freq_plan_len Error reading CPU0 freq table len. error:-19
[ 0.215092] msm_thermal:vdd_restriction_reg_init Defer vdd rstr freq init.
[ 0.215556] cpu cpu0: dev_pm_opp_get_opp_count: device OPP not found (-19)
[ 0.215573] msm_thermal:get_cpu_freq_plan_len Error reading CPU0 freq table len. error:-19
[ 0.215588] cpu cpu0: dev_pm_opp_get_opp_count: device OPP not found (-19)
[ 0.215599] msm_thermal:get_cpu_freq_plan_len Error reading CPU0 freq table len. error:-19
[ 0.225174] qcom,gcc-mdm9607 1800000.qcom,gcc: Registered GCC clocks
[ 0.225579] clock-a7 b010008.qcom,clock-a7: Speed bin: 4 PVS Version: 0
[ 0.225661] a7ssmux: set OPP pair(400000000 Hz: 1 uV) on cpu0
[ 0.225701] a7ssmux: set OPP pair(1305600000 Hz: 7 uV) on cpu0
[ 0.227367] i2c-msm-v2 78b6000.i2c: probing driver i2c-msm-v2
[ 0.227461] AXI: msm_bus_scale_register_client(): msm_bus_scale_register_client: Bus driver not ready.
[ 0.227479] i2c-msm-v2 78b6000.i2c: msm_bus_scale_register_client(mstr-id:86):0 (not a problem)
[ 0.281897] gpiochip_find_base: found new base at 1018
[ 0.282081] gpiochip_add: registered GPIOs 1018 to 1023 on device: pm8019-gpio
[ 0.282372] qcom,qpnp-pin qpnp-pin-6: qpnp_pin_probe: gpio_chip registered between 1018-1023
[ 0.282519] gpiochip_find_base: found new base at 1013
[ 0.282674] gpiochip_add: registered GPIOs 1013 to 1017 on device: pm8019-mpp
[ 0.283031] qcom,qpnp-pin qpnp-pin-7: qpnp_pin_probe: gpio_chip registered between 1013-1017
[ 0.283526] KPI: Bootloader start count = 17653
[ 0.283541] KPI: Bootloader end count = 44920
[ 0.283553] KPI: Bootloader display count = 1033851772
[ 0.283564] KPI: Bootloader load kernel count = 17787
[ 0.283574] KPI: Kernel MPM timestamp = 66628
[ 0.283584] KPI: Kernel MPM Clock frequency = 32768
[ 0.283617] socinfo_print: v0.10, id=290, ver=1.0, raw_id=74, raw_ver=0, hw_plat=8, hw_plat_ver=65536
[ 0.283617] accessory_chip=0, hw_plat_subtype=0, pmic_model=65539, pmic_die_revision=131074 foundry_id=1 serial_number=3382038302
[ 0.283969] of_get_named_gpiod_flags: parsed 'gpio' property of node '/soc/rome_vreg[0]' - status (0)
[ 0.284203] rome_vreg: no parameters
[ 0.285275] SCSI subsystem initialized
[ 0.285484] usbcore: registered new interface driver usbfs
[ 0.285580] usbcore: registered new interface driver hub
[ 0.285777] usbcore: registered new device driver usb
[ 0.285991] pps_core: LinuxPPS API ver. 1 registered
[ 0.286004] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
[ 0.286770] cpufreq: driver msm up and running
[ 0.287283] ION heap system created
[ 0.287736] msm_bus_fabric_init_driver
[ 0.294612] qcom,qpnp-power-on qpnp-power-on-1: PMIC@SID0 Power-on reason: Triggered from Hard Reset and 'cold' boot
[ 0.294643] qcom,qpnp-power-on qpnp-power-on-1: PMIC@SID0: Power-off reason: Triggered from RESIN_N (Reset line/Volume Down Key)
[ 0.294878] input: qpnp_pon as /devices/virtual/input/input0
[ 0.295341] PMIC@SID0: PM8019 v2.2 options: 3, 2, 2, 2
[ 0.296402] Advanced Linux Sound Architecture Driver Initialized.
[ 0.297036] Bluetooth: cf433ee0
[ 0.297086] NET: Registered protocol family 31
[ 0.297095] Bluetooth: cf433ee0
[ 0.297110] Bluetooth: cf433ed8Bluetooth: cf433ec8
[ 0.297159] Bluetooth: cf433ec8<6>[ 0.297443] cfg80211: Calling CRDA to update world regulatory domain
[ 0.297475] cfg80211: World regulatory domain updated:
[ 0.297485] cfg80211: DFS Master region: unset
[ 0.297493] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time)
[ 0.297505] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A)
[ 0.297516] cfg80211: (2457000 KHz - 2482000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A)
[ 0.297526] cfg80211: (2474000 KHz - 2494000 KHz @ 20000 KHz), (N/A, 2000 mBm), (N/A)
[ 0.297535] cfg80211: (5170000 KHz - 5250000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
[ 0.297546] cfg80211: (5250000 KHz - 5330000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
[ 0.297555] cfg80211: (5490000 KHz - 5710000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
[ 0.297566] cfg80211: (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
[ 0.297576] cfg80211: (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm), (N/A)
[ 0.298504] Switched to clocksource arch_mem_counter
[ 0.320605] NET: Registered protocol family 2
[ 0.321225] TCP established hash table entries: 2048 (order: 1, 8192 bytes)
[ 0.321254] TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
[ 0.321277] TCP: Hash tables configured (established 2048 bind 2048)
[ 0.321328] TCP: reno registered
[ 0.321341] UDP hash table entries: 256 (order: 0, 4096 bytes)
[ 0.321358] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[ 0.321497] NET: Registered protocol family 1
[ 0.323278] futex hash table entries: 256 (order: -1, 3072 bytes)
[ 0.328414] msgmni has been set to 309
[ 0.330563] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 250)
[ 0.330587] io scheduler noop registered
[ 0.330601] io scheduler deadline registered
[ 0.330705] io scheduler cfq registered (default)
[ 0.330801] gpiochip_find_base: found new base at 981
[ 0.330904] gpiochip_add: registered GPIOs 981 to 1012 on device: smp2p
[ 0.331051] gpiochip_find_base: found new base at 949
[ 0.331155] gpiochip_add: registered GPIOs 949 to 980 on device: smp2p
[ 0.331192] gpiochip_find_base: found new base at 917
[ 0.331273] gpiochip_add: registered GPIOs 917 to 948 on device: smp2p
[ 0.331394] gpiochip_find_base: found new base at 885
[ 0.331478] gpiochip_add: registered GPIOs 885 to 916 on device: smp2p
[ 0.331513] gpiochip_find_base: found new base at 853
[ 0.331602] gpiochip_add: registered GPIOs 853 to 884 on device: slave-kernel
[ 0.331707] gpiochip_find_base: found new base at 853
[ 0.331785] gpiochip_add: registered GPIOs 853 to 884 on device: master-kernel
[ 0.336311] msm_rpm_log_probe: OK
[ 0.337073] of_get_named_gpiod_flags: parsed 'qcom,gpio-proxy-unvote' property of node '/soc/qcom,mss@4080000[0]' - status (-517)
[ 0.337950] msm_serial_hs module loaded
[ 0.338234] msm_serial_hsl_probe: detected port #0 (ttyHSL0)
[ 0.338272] AXI: get_pdata(): Error: Client name not found
[ 0.338282] AXI: msm_bus_cl_get_pdata(): client has to provide missing entry for successful registration
[ 0.338290] msm_serial_hsl_probe: Bus scaling is disabled
[ 0.338415] 78b3000.serial: ttyHSL0 at MMIO 0x78b3000 (irq = 153, base_baud = 460800) is a MSM
[ 0.338761] msm_serial_hsl_probe: detected port #1 (ttyHSL1)
[ 0.338793] AXI: get_pdata(): Error: Client name not found
[ 0.338803] AXI: msm_bus_cl_get_pdata(): client has to provide missing entry for successful registration
[ 0.338810] msm_serial_hsl_probe: Bus scaling is disabled
[ 0.338900] 78b1000.serial: ttyHSL1 at MMIO 0x78b1000 (irq = 151, base_baud = 460800) is a MSM
[ 0.339248] msm_serial_hsl_probe: detected port #2 (ttyHSL2)
[ 0.339283] AXI: get_pdata(): Error: Client name not found
[ 0.339291] AXI: msm_bus_cl_get_pdata(): client has to provide missing entry for successful registration
[ 0.339299] msm_serial_hsl_probe: Bus scaling is disabled
[ 0.339391] 78b4000.serial: ttyHSL2 at MMIO 0x78b4000 (irq = 154, base_baud = 460800) is a MSM
[ 0.339689] msm_serial_hsl_init: driver initialized
[ 0.354173] brd: module loaded
[ 0.356608] loop: module loaded
[ 0.358335] i2c-core: driver [tabla-i2c-core] using legacy suspend method
[ 0.358348] i2c-core: driver [tabla-i2c-core] using legacy resume method
[ 0.358478] i2c-core: driver [wcd9xxx-i2c-core] using legacy suspend method
[ 0.358487] i2c-core: driver [wcd9xxx-i2c-core] using legacy resume method
[ 0.358592] i2c-core: driver [tasha-i2c-core] using legacy suspend method
[ 0.358601] i2c-core: driver [tasha-i2c-core] using legacy resume method
[ 0.358762] SCSI Media Changer driver v0.25
[ 0.362601] sps: BAM device 0x07984000 is not registered yet.
[ 0.362893] sps:BAM 0x07984000 is registered.
[ 0.362914] msm_nand_bam_init: msm_nand_bam_init: BAM device registered: bam_handle 0xcee7c400
[ 0.363143] sps:BAM 0x07984000 (va:0xd09a0000) enabled: ver:0x18, number of pipes:7
[ 0.365115] msm_nand_parse_smem_ptable: Parsing partition table info from SMEM
[ 0.365158] msm_nand_parse_smem_ptable: SMEM partition table found: ver: 4 len: 16
[ 0.365185] msm_nand_version_check: nand_major:1, nand_minor:5, qpic_major:1, qpic_minor:5
[ 0.365227] msm_nand_scan: NAND Id: 0x2690ac98 Buswidth: 8Bits Density: 512 MByte
[ 0.365237] msm_nand_scan: pagesize: 4096 Erasesize: 262144 oobsize: 128 (in Bytes)
[ 0.365244] msm_nand_scan: BCH ECC: 8 Bit
[ 0.365259] msm_nand_scan: CFG0: 0x290409c0, CFG1: 0x08045d5c
[ 0.365259] RAWCFG0: 0x2b8401c0, RAWCFG1: 0x0005055d
[ 0.365259] ECCBUFCFG: 0x00000203, ECCBCHCFG: 0x42040d10
[ 0.365259] RAWECCCFG: 0x42000d11, BAD BLOCK BYTE: 0x00000175
[ 0.365280] Creating 16 MTD partitions on "7980000.nand":
[ 0.365294] 0x000000000000-0x000000280000 : "sbl"
[ 0.366027] 0x000000280000-0x000000500000 : "mibib"
[ 0.366641] 0x000000500000-0x000001100000 : "efs2"
[ 0.367233] 0x000001100000-0x000001200000 : "tz"
[ 0.367839] 0x000001200000-0x000001280000 : "rpm"
[ 0.368412] 0x000001280000-0x000001380000 : "aboot"
[ 0.368967] 0x000001380000-0x000001b80000 : "boot"
[ 0.369542] 0x000001b80000-0x000002c00000 : "scrub"
[ 0.370254] 0x000002c00000-0x000003880000 : "efs2_bak"
[ 0.370864] 0x000003880000-0x000007040000 : "modem"
[ 0.371473] 0x000007040000-0x0000071c0000 : "misc"
[ 0.372070] 0x0000071c0000-0x0000079c0000 : "recovery"
[ 0.372678] 0x0000079c0000-0x000007b40000 : "fota"
[ 0.373291] 0x000007b40000-0x000009240000 : "recoveryfs"
[ 0.373848] 0x000009240000-0x00000c540000 : "systembak"
[ 0.374420] 0x00000c540000-0x000020000000 : "system"
[ 0.374990] msm_nand_probe: NANDc phys addr 0x7980000, BAM phys addr 0x7984000, BAM IRQ 164
[ 0.375003] msm_nand_probe: Allocated DMA buffer at virt_addr 0xcfc42000, phys_addr 0x8fc42000
[ 0.375879] tun: Universal TUN/TAP device driver, 1.6
[ 0.375892] tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
[ 0.377200] PPP generic driver version 2.4.2
[ 0.382662] cnss_configure_ramdump: ramdump addr: d2c00000, phys: 0x87a00000 subsys:'AR6320'
[ 0.383056] cnss_sdio 87a00000.qcom,cnss-sdio: CNSS SDIO Driver registered
[ 0.383555] msm_otg 78d9000.usb: msm_otg probe
[ 0.383751] of_get_named_gpiod_flags: can't parse 'qcom,hub-reset-gpio' property of node '/soc/usb@78d9000[0]'
[ 0.383765] of_get_named_gpiod_flags: can't parse 'qcom,sw-sel-gpio' property of node '/soc/usb@78d9000[0]'
[ 0.383776] of_get_named_gpiod_flags: can't parse 'qcom,usbid-gpio' property of node '/soc/usb@78d9000[0]'
[ 0.383794] of_get_named_gpiod_flags: can't parse 'qcom,hsusb-otg-vddmin-gpio' property of node '/soc/usb@78d9000[0]'
[ 0.385537] msm_otg 78d9000.usb: OTG regs = d08f2000
[ 0.387720] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[ 0.388022] ehci-msm: Qualcomm On-Chip EHCI Host Controller
[ 0.388332] usbcore: registered new interface driver cdc_acm
[ 0.388343] cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters
[ 0.388422] usbcore: registered new interface driver usb-storage
[ 0.388493] usbcore: registered new interface driver ums-alauda
[ 0.388541] usbcore: registered new interface driver ums-cypress
[ 0.388586] usbcore: registered new interface driver ums-datafab
[ 0.388631] usbcore: registered new interface driver ums-freecom
[ 0.388682] usbcore: registered new interface driver ums-isd200
[ 0.388727] usbcore: registered new interface driver ums-jumpshot
[ 0.388771] usbcore: registered new interface driver ums-karma
[ 0.388815] usbcore: registered new interface driver ums-onetouch
[ 0.388858] usbcore: registered new interface driver ums-sddr09
[ 0.388903] usbcore: registered new interface driver ums-sddr55
[ 0.388947] usbcore: registered new interface driver ums-usbat
[ 0.388999] usbcore: registered new interface driver usb_ehset_test
[ 0.390169] gbridge_init: gbridge_init successs.
[ 0.391660] qcom,qpnp-rtc qpnp-rtc-5: rtc core: registered qpnp_rtc as rtc0
[ 0.391937] i2c /dev entries driver
[ 0.392879] unable to find DT imem DLOAD mode node
[ 0.393147] unable to find DT imem EDLOAD mode node
[ 0.393365] unable to find DT imem dload-type node
[ 0.396217] msm_otg 78d9000.usb: phy_reset: success
[ 0.414752] Bluetooth: cf433ee0
[ 0.414768] Bluetooth: cf433ed8Bluetooth: cf433ed8
[ 0.415490] sdhci: Secure Digital Host Controller Interface driver
[ 0.415504] sdhci: Copyright(c) Pierre Ossman
[ 0.415516] sdhci-pltfm: SDHCI platform and OF driver helper
[ 0.416019] sdhci_msm 7824900.sdhci: sdhci_msm_probe: ICE device is not enabled
[ 0.416048] of_get_named_gpiod_flags: can't parse 'cd-gpios' property of node '/soc/sdhci@7824900[0]'
[ 0.416090] sdhci_msm 7824900.sdhci: no qcom,vdd-voltage-level property
[ 0.416104] sdhci_msm 7824900.sdhci: no qcom,vdd-current-level property
[ 0.416319] sdhci_msm 7824900.sdhci: sdhci_msm_pm_qos_parse_irq: error -22 reading irq cpu
[ 0.416332] sdhci_msm 7824900.sdhci: sdhci_msm_pm_qos_parse: PM QoS voting for IRQ will be disabled
[ 0.416346] sdhci_msm 7824900.sdhci: sdhci_msm_pm_qos_parse: PM QoS voting for cpu group will be disabled
[ 0.419006] sdhci_msm 7824900.sdhci: No vmmc regulator found
[ 0.419023] sdhci_msm 7824900.sdhci: No vqmmc regulator found
[ 0.419459] mmc0: SDHCI controller on 7824900.sdhci [7824900.sdhci] using 32-bit ADMA in legacy mode
[ 0.447983] sdhci_msm 7864900.sdhci: sdhci_msm_probe: ICE device is not enabled
[ 0.448007] of_get_named_gpiod_flags: can't parse 'cd-gpios' property of node '/soc/sdhci@07864900[0]'
[ 0.448225] sdhci_msm 7864900.sdhci: sdhci_msm_pm_qos_parse_irq: error -22 reading irq cpu
[ 0.448238] sdhci_msm 7864900.sdhci: sdhci_msm_pm_qos_parse: PM QoS voting for IRQ will be disabled
[ 0.448252] sdhci_msm 7864900.sdhci: sdhci_msm_pm_qos_parse: PM QoS voting for cpu group will be disabled
[ 0.454552] sdhci_msm 7864900.sdhci: No vmmc regulator found
[ 0.454569] sdhci_msm 7864900.sdhci: No vqmmc regulator found
[ 0.455039] mmc1: SDHCI controller on 7864900.sdhci [7864900.sdhci] using 32-bit ADMA in legacy mode
[ 0.485704] of_get_named_gpiod_flags: parsed 'gpios' property of node '/soc/gpio-leds/autodog_led[0]' - status (0)
[ 0.485733] of_get_named_gpiod_flags: parsed 'gpios' property of node '/soc/gpio-leds/autodog_led[0]' - status (0)
[ 0.486457] usbcore: registered new interface driver usbhid
[ 0.486469] usbhid: USB HID core driver
[ 0.487732] bimc-bwmon 408000.qcom,cpu-bwmon: BW HWmon governor registered.
[ 0.488308] devfreq soc:qcom,cpubw: Couldn't update frequency transition information.
[ 0.488626] coresight-fuse a601c.fuse: QPDI fuse not specified
[ 0.488714] coresight-fuse a601c.fuse: Fuse initialized
[ 0.492111] coresight-csr 6001000.csr: CSR initialized
[ 0.492745] coresight-tmc 6026000.tmc: Byte Counter feature enabled
[ 0.493133] sps:BAM 0x06084000 is registered.
[ 0.493485] coresight-tmc 6026000.tmc: TMC initialized
[ 0.493890] coresight-tmc 6025000.tmc: TMC initialized
[ 0.495437] coresight-tpiu 6020000.tpiu: sdc voltage supply not specified or available
[ 0.495651] nidnt boot config: 0
[ 0.496524] coresight-tpiu 6020000.tpiu: NIDnT on SDCARD only mode
[ 0.496726] coresight-tpiu 6020000.tpiu: TPIU initialized
[ 0.498151] coresight-replicator 6024000.replicator: REPLICATOR initialized
[ 0.498859] coresight-stm 6002000.stm: STM initialized
[ 0.499350] coresight-hwevent 606c000.hwevent: Hardware Event driver initialized
[ 0.502039] sps:BAM 0x078c4000 is registered.
[ 0.502089] IPA HW is not supported on this target
[ 0.505218] mmc0: new high speed SDIO card at address 0001
[ 0.505814] coresight-remote-etm soc:rpm_etm0: Remote ETM initialized
[ 0.506346] coresight-remote-etm soc:modem_etm0: Remote ETM initialized
[ 0.521903] Netfilter messages via NETLINK v0.30.
[ 0.521967] nf_conntrack version 0.5.0 (2475 buckets, 9900 max)
[ 0.522367] ctnetlink v0.93: registering with nfnetlink.
[ 0.522666] ip_set: protocol 6
[ 0.522805] ipip: IPv4 over IPv4 tunneling driver
[ 0.523492] ip_tables: (C) 2000-2006 Netfilter Core Team
[ 0.523650] arp_tables: (C) 2002 David S. Miller
[ 0.523717] TCP: cubic registered
[ 0.523732] Initializing XFRM netlink socket
[ 0.524144] NET: Registered protocol family 10
[ 0.525050] ip6_tables: (C) 2000-2006 Netfilter Core Team
[ 0.525262] sit: IPv6 over IPv4 tunneling driver
[ 0.525795] NET: Registered protocol family 17
[ 0.525837] NET: Registered protocol family 15
[ 0.525899] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
[ 0.525934] Bridge firewalling registered
[ 0.525950] Ebtables v2.0 registered
[ 0.526534] NET: Registered protocol family 27
[ 0.528887] gpiochip_find_base: found new base at 853
[ 0.529013] gpiochip_add: registered GPIOs 853 to 884 on device: slave-kernel
[ 0.529248] gpiochip_find_base: found new base at 821
[ 0.529349] gpiochip_add: registered GPIOs 821 to 852 on device: master-kernel
[ 0.529771] of_get_named_gpiod_flags: parsed 'qcom,gpio-proxy-unvote' property of node '/soc/qcom,mss@4080000[0]' - status (0)
[ 0.530512] of_get_named_gpiod_flags: parsed 'qcom,gpio-err-fatal' property of node '/soc/qcom,mss@4080000[0]' - status (0)
[ 0.530531] of_get_named_gpiod_flags: parsed 'qcom,gpio-err-ready' property of node '/soc/qcom,mss@4080000[0]' - status (0)
[ 0.530545] of_get_named_gpiod_flags: parsed 'qcom,gpio-stop-ack' property of node '/soc/qcom,mss@4080000[0]' - status (0)
[ 0.530559] of_get_named_gpiod_flags: parsed 'qcom,gpio-force-stop' property of node '/soc/qcom,mss@4080000[0]' - status (0)
[ 0.530574] of_get_named_gpiod_flags: parsed 'qcom,gpio-shutdown-ack' property of node '/soc/qcom,mss@4080000[0]' - status (0)
[ 0.532609] of_get_named_gpiod_flags: parsed 'gpios' property of node '/soc/qcom,smp2pgpio_test_smp2p_15_in[0]' - status (0)
[ 0.532675] of_get_named_gpiod_flags: parsed 'gpios' property of node '/soc/qcom,smp2pgpio_test_smp2p_15_out[0]' - status (0)
[ 0.532727] of_get_named_gpiod_flags: parsed 'gpios' property of node '/soc/qcom,smp2pgpio_test_smp2p_1_in[0]' - status (0)
[ 0.532779] of_get_named_gpiod_flags: parsed 'gpios' property of node '/soc/qcom,smp2pgpio_test_smp2p_1_out[0]' - status (0)
[ 0.613335] ubi0: attaching mtd15
[ 1.745374] ubi0: scanning is finished
[ 1.752415] ubi0: attached mtd15 (name "system", size 314 MiB)
[ 1.752431] ubi0: PEB size: 262144 bytes (256 KiB), LEB size: 253952 bytes
[ 1.752441] ubi0: min./max. I/O unit sizes: 4096/4096, sub-page size 4096
[ 1.752450] ubi0: VID header offset: 4096 (aligned 4096), data offset: 8192
[ 1.752458] ubi0: good PEBs: 1255, bad PEBs: 4, corrupted PEBs: 0
[ 1.752467] ubi0: user volume: 3, internal volumes: 1, max. volumes count: 128
[ 1.752477] ubi0: max/mean erase counter: 4/1, WL threshold: 4096, image sequence number: 1328192
[ 1.752487] ubi0: available PEBs: 0, total reserved PEBs: 1255, PEBs reserved for bad PEB handling: 36
[ 1.752525] RNDIS_IPA module is loaded.
[ 1.753139] file system registered
[ 1.753227] mbim_init: initialize 1 instances
[ 1.753305] mbim_init: Initialized 1 ports
[ 1.753534] ubi0: background thread "ubi_bgt0d" started, PID 118
[ 1.755043] rndis_qc_init: initialize rndis QC instance
[ 1.755329] Number of LUNs=8
[ 1.755344] Mass Storage Function, version: 2009/09/11
[ 1.755355] LUN: removable file: (no medium)
[ 1.755422] Number of LUNs=2
[ 1.755492] LUN: removable file: (no medium)
[ 1.755554] LUN: removable read only CD-ROM file: (no medium)
[ 1.755563] Number of LUNs=2
[ 1.755840] android_usb gadget: android_usb ready
[ 1.755858] msm_hsusb msm_hsusb: [ci13xxx_start] hw_ep_max = 32
[ 1.755908] msm_hsusb msm_hsusb: CI13XXX_CONTROLLER_RESET_EVENT received
[ 1.755923] msm_hsusb msm_hsusb: CI13XXX_CONTROLLER_UDC_STARTED_EVENT received
[ 1.756524] of_get_named_gpiod_flags: parsed 'gpios' property of node '/soc/gpio_keys/fact_reset[0]' - status (0)
[ 1.756574] gpio-75 (fact_reset): gpiod_set_debounce: missing set() or set_debounce() operations
[ 1.756906] input: gpio-keys as /devices/soc:gpio_keys/input/input1
[ 1.757338] qcom,qpnp-rtc qpnp-rtc-5: setting system clock to 1970-01-01 00:04:38 UTC (278)
[ 1.758870] parse_legacy_cluster_params(): Ignoring cluster params
[ 1.758902] /soc/qcom,lpm-levels/qcom,pm-cluster@0: No CPU phandle, assuming single cluster
[ 1.760859] qcom,cc-debug-mdm9607 1800000.qcom,debug: Registered Debug Mux successfully
[ 1.761172] mem_acc_corner: disabling
[ 1.761195] clock_late_init: Removing enables held for handed-off clocks
[ 1.762774] ALSA device list:
[ 1.762785] No soundcards found.
[ 1.762884] Warning: unable to open an initial console.
[ 1.770170] UBIFS (ubi0:0): background thread "ubifs_bgt0_0" started, PID 124
[ 1.885359] UBIFS (ubi0:0): UBIFS: mounted UBI device 0, volume 0, name "rootfs"
[ 1.885378] UBIFS (ubi0:0): LEB size: 253952 bytes (248 KiB), min./max. I/O unit sizes: 4096 bytes/4096 bytes
[ 1.885390] UBIFS (ubi0:0): FS size: 63741952 bytes (60 MiB, 251 LEBs), journal size 9404416 bytes (8 MiB, 38 LEBs)
[ 1.885399] UBIFS (ubi0:0): reserved for root: 0 bytes (0 KiB)
[ 1.885412] UBIFS (ubi0:0): media format: w4/r0 (latest is w4/r0), UUID 275BF51F-306C-432F-8342-B64B5DBB329D, small LPT model
[ 1.887839] VFS: Mounted root (ubifs filesystem) on device 0:12.
[ 1.888277] Freeing unused kernel memory: 304K (c0a84000 - c0ad0000)
[ 2.475807] UBIFS (ubi0:0): background thread "ubifs_bgt0_0" stops
[ 2.640267] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" started, PID 170
[ 2.695293] UBIFS (ubi0:1): recovery needed
[ 2.821056] UBIFS (ubi0:1): recovery completed
[ 2.821145] UBIFS (ubi0:1): UBIFS: mounted UBI device 0, volume 1, name "usrfs"
[ 2.821157] UBIFS (ubi0:1): LEB size: 253952 bytes (248 KiB), min./max. I/O unit sizes: 4096 bytes/4096 bytes
[ 2.821170] UBIFS (ubi0:1): FS size: 181829632 bytes (173 MiB, 716 LEBs), journal size 9404416 bytes (8 MiB, 38 LEBs)
[ 2.821180] UBIFS (ubi0:1): reserved for root: 0 bytes (0 KiB)
[ 2.821193] UBIFS (ubi0:1): media format: w4/r0 (latest is w4/r0), UUID E6CF1CBF-EAA0-4DE1-8602-E1F07B2CE845, small LPT model
[ 2.856531] ubi1: attaching mtd9
[ 3.050644] ubi1: scanning is finished
[ 3.056653] ubi1: attached mtd9 (name "modem", size 55 MiB)
[ 3.056668] ubi1: PEB size: 262144 bytes (256 KiB), LEB size: 253952 bytes
[ 3.056678] ubi1: min./max. I/O unit sizes: 4096/4096, sub-page size 4096
[ 3.056687] ubi1: VID header offset: 4096 (aligned 4096), data offset: 8192
[ 3.056696] ubi1: good PEBs: 223, bad PEBs: 0, corrupted PEBs: 0
[ 3.056704] ubi1: user volume: 1, internal volumes: 1, max. volumes count: 128
[ 3.056714] ubi1: max/mean erase counter: 3/1, WL threshold: 4096, image sequence number: 35657280
[ 3.056723] ubi1: available PEBs: 0, total reserved PEBs: 223, PEBs reserved for bad PEB handling: 40
[ 3.058926] ubi1: background thread "ubi_bgt1d" started, PID 179
[ 3.206937] UBIFS (ubi1:0): UBIFS: mounted UBI device 1, volume 0, name "modem", R/O mode
[ 3.206956] UBIFS (ubi1:0): LEB size: 253952 bytes (248 KiB), min./max. I/O unit sizes: 4096 bytes/4096 bytes
[ 3.206968] UBIFS (ubi1:0): FS size: 42917888 bytes (40 MiB, 169 LEBs), journal size 7110656 bytes (6 MiB, 28 LEBs)
[ 3.206977] UBIFS (ubi1:0): reserved for root: 0 bytes (0 KiB)
[ 3.206991] UBIFS (ubi1:0): media format: w4/r0 (latest is w4/r0), UUID B631A95C-0B08-430B-8955-2C51A799A5C5, small LPT model
[ 3.443957] subsys-restart: __subsystem_get(): Changing subsys fw_name to modem
[ 3.460021] pil-q6v5-mss 4080000.qcom,mss: modem: loading from 0x82a00000 to 0x87800000
[ 3.500262] pil-q6v5-mss 4080000.qcom,mss: Debug policy not present - msadp. Continue.
[ 3.500983] pil-q6v5-mss 4080000.qcom,mss: Loading MBA and DP (if present) from 0x8fd00000 to 0x8fe00000
[ 3.549125] pil-q6v5-mss 4080000.qcom,mss: MBA boot done
[ 4.924464] enable_store: android_usb: already disabled
[ 4.924959] lun0: unable to open backing file: /dev/mmcblk0
[ 5.130584] read descriptors
[ 5.130611] read strings
[ 5.140271] msm_hsusb msm_hsusb: CI13XXX_CONTROLLER_CONNECT_EVENT received
[ 5.250382] QTI:start
[ 5.258030] msm_otg 78d9000.usb: Avail curr from USB = 100
[ 5.258329] android_work: android_work: did not send uevent (0 0 (null))
[ 5.348502] android_work: android_work: sent uevent USB_STATE=CONNECTED
[ 5.360301] android_work: android_work: sent uevent USB_STATE=DISCONNECTED
[ 5.432899] USB QCMAP NL IOCTL Snd GETNEIGH Succ
[ 5.458316] android_work: android_work: sent uevent USB_STATE=CONNECTED
[ 7.530002] cgid: starting
[ 7.583060] cgid: cmd failed 1, rm -r /data/lighttpd-tmp/*
[ 7.587585] cgid: running
[ 9.969683] android_usb gadget: high-speed config #1: 86000c8.android_usb
[ 9.969734] diag: USB channel diag connected
[ 9.969845] msm_otg 78d9000.usb: Avail curr from USB = 500
[ 9.970151] gbam_connect_work: gbam_connect_work: Bam channel is not ready
[ 10.020199] android_work: android_work: sent uevent USB_STATE=CONFIGURED
[ 10.399584] pil-q6v5-mss 4080000.qcom,mss: modem: Brought out of reset
[ 10.467649] pil-q6v5-mss 4080000.qcom,mss: Subsystem error monitoring/handling services are up
[ 10.467701] pil-q6v5-mss 4080000.qcom,mss: modem: Power/Clock ready interrupt received
[ 10.467988] M-Notify: General: 7
[ 10.586531] diag: In diag_send_feature_mask_update, control channel is not open, p: 0, c0c0d698
[ 10.600353] apr_tal:Modem Is Up
[ 10.709609] embms:start/load
[ 10.989982] msm_thermal:set_enabled enabled = 0
[ 11.345443] eMBMs Tunneling Module:start
[ 11.523562] random: dbus-uuidgen urandom read with 45 bits of entropy available
[ 11.780871] QTI_PPP:start
[ 11.843809] sps:BAM 0x04044000 is registered.
[ 11.844024] sps:BAM 0x04044000 (va:0xd0e20000) enabled: ver:0x27, number of pipes:6
[ 12.490562] ++++ /etc/rc5.d/S99power_config -> ENABLE-FTRACE
[ 12.760827] netd: starting
[ 12.762087] panic_download is 0.
[ 12.765071] netd: load_config: unrecognize mobile_reg_apn_name =
[ 12.765098] netd: load_config: unrecognize mobile_reg_username =
[ 12.765113] netd: load_config: unrecognize mobile_reg_password =
[ 12.765127] netd: load_config: unrecognize mobile_reg_authtype = 0
[ 12.765141] netd: load_config: unrecognize gateway_domain = mydtu.com
[ 12.766014] netd: load_config: unrecognize ping_server = www.baidu.com
[ 12.766038] netd: load_config: unrecognize cgiservice = 1
[ 12.766057] netd: load_config: unrecognize wifimac = 84:1E:24:00:09:DF
[ 12.871388] mbimd: Proc start
[ 12.931690] mbim_open: Open mbim driver
[ 12.931706] mbim_open: Lock mbim_dev->open_excl for open
[ 12.931714] mbim_open: USB cable not connected
[ 12.931722] mbim_open: Exit, mbim file opened
[ 13.120701] Realtek WLAN driver - version 1.7 (2017-05-15)
[ 13.120719] Adaptivity function - version 9.1
[ 13.120729] wlan_index:0 1, 10,0x8179024c,0x0,0
[ 13.122613] rtw_drv_init: sdio_func_id is "mmc0:0001:1"
[ 13.122629] =====>>INSIDE rtl8192cd_init_one <<=====
[ 13.122636] init for root device
[ 13.123066] Device Name = RTKWiFi0
[ 13.123077] VIF_NUM=1
[ 13.123086] sizeof(struct rtl8192cd_priv) = 12008
[ 13.180899] register wiphy device:ce7c6140
[ 13.277286] =====>>EXIT rtl8192cd_init_one <<=====
[ 13.277305] =====>>INSIDE rtl8192cd_init_one <<=====
[ 13.277312] init for vxd device
[ 13.277321] sizeof(struct rtl8192cd_priv) = 12008
[ 13.311734] =====>>EXIT rtl8192cd_init_one <<=====
[ 13.311752] =====>>INSIDE rtl8192cd_init_one <<=====
[ 13.311759] init for virtual device
[ 13.311768] sizeof(struct rtl8192cd_priv) = 12008
[ 13.322606] =====>>EXIT rtl8192cd_init_one <<=====
[ 13.950535] libphy: emac-mdio: probed
[ 14.256215] Atheros 8031 ethernet 7c40000.qcom,ema:00: GPIO lookup for consumer reset
[ 14.256234] Atheros 8031 ethernet 7c40000.qcom,ema:00: using device tree for GPIO lookup
[ 14.256249] of_get_named_gpiod_flags: can't parse 'reset-gpios' property of node '/soc/qcom,emac@7c40000/ethernet-phy@0[0]'
[ 14.256260] of_get_named_gpiod_flags: can't parse 'reset-gpio' property of node '/soc/qcom,emac@7c40000/ethernet-phy@0[0]'
[ 14.256271] Atheros 8031 ethernet 7c40000.qcom,ema:00: using lookup tables for GPIO lookup
[ 14.256284] Atheros 8031 ethernet 7c40000.qcom,ema:00: lookup for GPIO reset failed
[ 14.640645] device wlan0 entered promiscuous mode
[ 14.661373] device eth0 entered promiscuous mode
[ 14.934778] netd: uim_update_card_status: card_status_valid = 1
[ 14.934805] netd: uim_update_card_status: index_gw_pri = 0
[ 14.934819] netd: uim_update_card_status: index_1x_pri = 65535
[ 14.934832] netd: uim_update_card_status: index_gw_sec = 65535
[ 14.934844] netd: uim_update_card_status: index_1x_sec = 65535
[ 14.934857] netd: uim_update_card_status: card_state = 1
[ 14.934870] netd: uim_update_card_status: upin pin_state = 0 pin_retries = 0 puk_retries = 0
[ 14.934884] netd: uim_update_card_status: error_code = 0
[ 14.934897] netd: uim_update_card_status: app_type = 2 app_state = 7
[ 14.934912] netd: uim_update_card_status: pin1 pin_state = 3 pin_retries = 3 puk_retries = 10
[ 14.934926] netd: uim_update_card_status: pin2 pin_state = 1 pin_retries = 3 puk_retries = 10
[ 14.936966] netd: uim_update_imsi: sim app type = 2 imsi = 460040615701885
[ 15.193762] netd: uim_update_imsi: mcc = 460 mnc = 04 apn_name = cmiot
[ 15.231138] netd: nas_update_serving_system: registration_state = 2 cs_attach_state = 2 ps_attach_state = 2 selected_network = 2
[ 15.240344] netd: nas_update_sys_info: wcdma domain 0
[ 15.292377] IPv6: ADDRCONF(NETDEV_UP): br0: link is not ready
[ 15.657207] netd: nas_ind: msg_id = 0x24
[ 15.657284] netd: nas_ind: registration_state = 2 cs_attach_state = 2 ps_attach_state = 2 selected_network = 2
[ 15.657359] netd: nas_ind: msg_id = 0x4e
[ 15.657406] netd: nas_ind: lte domain 4
[ 15.750593] [PHY_ConfigBBWithParaFile][PHY_REG_PG_88E]
[ 16.259888] ===> Load_88E_Firmware
[ 16.410899] random: nonblocking pool is initialized
[ 16.620473] <=== Load_88E_Firmware
[ 16.633666] Switch to channel 7 before doing 88E IQK
[ 16.942249] netd: nas_ind: msg_id = 0x24
[ 16.942328] netd: nas_ind: registration_state = 1 cs_attach_state = 1 ps_attach_state = 1 selected_network = 2
[ 16.942416] netd: nas_ind: msg_id = 0x4e
[ 16.942462] netd: nas_ind: lte
[ 16.942478] netd: nas_ind: lte domain 3
[ 16.942594] netd: nas_ind: msg_id = 0x4e
[ 16.942635] netd: nas_ind: lte
[ 16.942649] netd: nas_ind: lte domain 3
[ 16.942716] netd: nas_ind: msg_id = 0x24
[ 16.942744] netd: nas_ind: registration_state = 1 cs_attach_state = 1 ps_attach_state = 1 selected_network = 2
[ 16.942876] netd: nas_ind: msg_id = 0x61
[ 16.986117] netd: nas_ind: msg_id = 0x24
[ 16.986183] netd: nas_ind: registration_state = 1 cs_attach_state = 1 ps_attach_state = 1 selected_network = 2
[ 17.239151] gain offset : invalid data
[ 17.241513] br0: port 1(wlan0) entered forwarding state
[ 17.241579] br0: port 1(wlan0) entered forwarding state
[ 17.242569] IPv6: ADDRCONF(NETDEV_CHANGE): br0: link becomes ready
[ 17.270754] cfg80211: Calling CRDA for country: EU
[ 17.396103] netd: running
[ 18.909712] netd: nas_ind: msg_id = 0x24
[ 18.909780] netd: nas_ind: registration_state = 1 cs_attach_state = 1 ps_attach_state = 1 selected_network = 2
[ 18.910714] netd: nas_ind: msg_id = 0x4e
[ 18.910779] netd: nas_ind: lte
[ 18.910796] netd: nas_ind: lte domain 3
[ 19.598730] qcom-emac 7c40000.qcom,emac eth0: TX queues 1, TX descriptors 512
[ 19.598751] qcom-emac 7c40000.qcom,emac eth0: RX queues 1, Rx descriptors 256
[ 19.684168] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[ 19.693764] USB QCMAP NL IOCTL Snd GETNEIGH Succ
[ 20.002050] netd: mobile_data_connect_callback: lte
[ 20.002085] netd: mobile_data_connect_callback: lte domain 3
[ 20.002106] netd: mobile_data_connect_callback2: apn_name = cmiot
[ 20.002120] netd: mobile_data_connect_callback2: username =
[ 20.002133] netd: mobile_data_connect_callback2: password =
[ 20.002147] netd: mobile_data_connect_callback2: authtype = 0
[ 20.021136] netd: wds_ind: msg_id = 0x22
[ 20.021174] netd: wds_ind: connection_status = 2
[ 20.430346] cfg80211: Calling CRDA to update world regulatory domain
[ 20.430966] cfg80211: World regulatory domain updated:
[ 20.430980] cfg80211: DFS Master region: unset
[ 20.430989] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time)
[ 20.431001] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A)
[ 20.431012] cfg80211: (2457000 KHz - 2482000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A)
[ 20.431023] cfg80211: (2474000 KHz - 2494000 KHz @ 20000 KHz), (N/A, 2000 mBm), (N/A)
[ 20.431034] cfg80211: (5170000 KHz - 5250000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
[ 20.431044] cfg80211: (5250000 KHz - 5330000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
[ 20.431055] cfg80211: (5490000 KHz - 5710000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
[ 20.431066] cfg80211: (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
[ 20.431990] cfg80211: (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm), (N/A)
[ 21.023732] netd: mobile_data_update_route_dns: pdp_type = 0
[ 21.023796] netd: mobile_data_update_route_dns: primary_DNS_IPv4_address_preference = 211.136.20.203
[ 21.023817] netd: mobile_data_update_route_dns: secondary_DNS_IPv4_address_preference = 211.136.17.107
[ 21.023833] netd: mobile_data_update_route_dns: authentication_preference = 0x0
[ 21.023849] netd: mobile_data_update_route_dns: ipv4_address_preference = 10.123.157.135
[ 21.023864] netd: mobile_data_update_route_dns: profile type = 0 index = 3
[ 21.023880] netd: mobile_data_update_route_dns: ipv4_gateway_addr = 10.123.157.136
[ 21.023895] netd: mobile_data_update_route_dns: ipv4_subnet_mask = 255.255.255.240
[ 21.023909] netd: mobile_data_update_route_dns: mtu = 1500
[ 21.023922] netd: mobile_data_update_route_dns: ip_family = 4
[ 21.057215] netd: wan_state_change: connected = 1
[ 21.871902] USB QCMAP NL IOCTL Snd GETNEIGH Succ
[ 22.101830] USB QCMAP NL IOCTL Snd GETNEIGH Succ
[ 22.513021] [rtw_cmd_thread] bDriverStopped(1) OR bSurpriseRemoved(0)
[ 22.513141] [rtw_dev_unload] cmd_thread terminate
[ 22.513266] [rtw_dev_unload] xmit_thread
[ 22.513286] rtw_xmit_thread: bDriverStopped(1) OR bSurpriseRemoved(0)
[ 22.513362] terminate
[ 22.572890] [PHY_ConfigBBWithParaFile][PHY_REG_PG_88E]
[ 22.932681] ===> Load_88E_Firmware
[ 23.144642] <=== Load_88E_Firmware
[ 23.150153] Switch to channel 7 before doing 88E IQK
[ 23.464756] gain offset : invalid data
[ 23.474172] USB QCMAP NL IOCTL Snd GETNEIGH Succ
[ 31.312398] netd: nas_ind: msg_id = 0x24
[ 31.312480] netd: nas_ind: registration_state = 1 cs_attach_state = 1 ps_attach_state = 1 selected_network = 2
[ 31.312791] netd: nas_ind: msg_id = 0x4e
[ 31.312859] netd: nas_ind: lte
[ 31.312879] netd: nas_ind: lte domain 3
[ 32.280165] br0: port 1(wlan0) entered forwarding state
[ 62.313255] netd: nas_ind: msg_id = 0x24
[ 62.313333] netd: nas_ind: registration_state = 1 cs_attach_state = 1 ps_attach_state = 1 selected_network = 2
[ 62.313426] netd: nas_ind: msg_id = 0x4e
[ 62.313492] netd: nas_ind: lte
[ 62.313514] netd: nas_ind: lte domain 3
[ 105.552547] netd: nas_ind: msg_id = 0x24
[ 105.552617] netd: nas_ind: registration_state = 1 cs_attach_state = 1 ps_attach_state = 1 selected_network = 2
[ 105.552854] netd: nas_ind: msg_id = 0x4e
[ 105.552924] netd: nas_ind: lte
[ 105.552944] netd: nas_ind: lte domain 3
[ 207.896761] netd: nas_ind: msg_id = 0x24
[ 207.896833] netd: nas_ind: registration_state = 1 cs_attach_state = 1 ps_attach_state = 1 selected_network = 2
[ 207.897073] netd: nas_ind: msg_id = 0x4e
[ 207.897145] netd: nas_ind: lte
[ 207.897166] netd: nas_ind: lte domain 3
[ 447.957907] netd: nas_ind: msg_id = 0x24
[ 447.957984] netd: nas_ind: registration_state = 1 cs_attach_state = 1 ps_attach_state = 1 selected_network = 2
[ 447.958246] netd: nas_ind: msg_id = 0x4e
[ 447.958321] netd: nas_ind: lte
[ 447.958341] netd: nas_ind: lte domain 3
分析日志的结果，发现用的是高通的平台，模块为MDM9X07系列的9607，上面写着呢。
那就搜索下MDM9X07平台的资料吧，具体的可以参加我提供的下载链接：
https://download.csdn.net/download/leekwen/10563103
文件系统为UBIFS，这个需要在linux下用mtd仿真一个分区，再进行挂载！
该系统主要的配置文件放在了/data/netd目录下，具体的如下：
/data # ls -l
ls -l
total 8
drwxr-xr-x 2 root root 160 Apr 11 2018 configs <---空
-rw-r--r-- 1 root root 236 Apr 11 2018 dturs232.conf
-rw-r--r-- 1 root root 206 Apr 11 2018 dturs485.conf
drwxrwxrwx 2 root root 160 Jan 1 08:01 lighttpd-tmp <---空
drwxr-xr-x 2 root root 160 Apr 11 2018 logs <---空
drwxr-xr-x 3 root root 744 Jul 25 2018 netd
/data/netd # ls -l
ls -l
total 292
-rw-r--r-- 1 root root 282113 Apr 11 2018 apns-conf.xml <-----APN配置文件
-rw-r--r-- 1 root root 0 Apr 11 2018 hostapd.accept <---MAC地址白名单
-rw-r--r-- 1 root root 959 Jan 1 08:00 hostapd.conf <----wifi 配置文件
-rw-r--r-- 1 root root 0 Apr 11 2018 hostapd.deny <----MAC地址黑名单
-rw-r--r-- 1 root root 1111 Jan 1 08:00 netd.conf <----网络接口配置文件
-rw-r--r-- 1 root root 44 Apr 11 2018 superuser <----特权用户及秘钥
drwxr-xr-x 2 root root 232 Jul 25 2018 traffics <---4G流量数据大小
-rw-r--r-- 1 root root 84 Apr 11 2018 wpa_supplicant.conf <---WPA配置文件 此文件未用
再分析下进程和端口吧！
/var/volatile/tmp # ps aux
PID USER TIME COMMAND
1 root 0:01 init [5]
2 root 0:00 [kthreadd]
3 root 0:08 [ksoftirqd/0]
5 root 0:00 [kworker/0:0H]
7 root 0:00 [rcu_preempt]
8 root 0:00 [rcu_sched]
9 root 0:00 [rcu_bh]
10 root 0:00 [khelper]
11 root 0:00 [netns]
12 root 0:00 [perf]
13 root 0:00 [msm_watchdog]
14 root 0:00 [smd_channel_clo]
15 root 0:00 [smsm_cb_wq]
16 root 0:00 [kworker/u2:1]
17 root 0:00 [deferwq]
18 root 0:00 [kworker/0:1]
19 root 0:00 [irq/52-cpr]
20 root 0:00 [mpm]
21 root 0:10 [kworker/u2:2]
22 root 0:00 [writeback]
23 root 0:00 [crypto]
24 root 0:00 [bioset]
25 root 0:00 [kblockd]
26 root 0:00 [system]
27 root 0:00 [devfreq_wq]
28 root 0:00 [cfg80211]
29 root 0:00 [power_off_alarm]
30 root 0:00 [kswapd0]
31 root 0:00 [fsnotify_mark]
42 root 0:00 [glink_ssr_wq]
43 root 0:00 [apr_driver]
44 root 0:00 [diag_real_time_]
45 root 0:00 [diag_wq]
46 root 0:00 [DIAG_USB_diag]
47 root 0:00 [diag_cntl_wq]
48 root 0:00 [diag_dci_wq]
49 root 0:00 [DIAG_SMD_MODEM_]
50 root 0:00 [DIAG_SMD_MODEM_]
51 root 0:00 [DIAG_SMD_MODEM_]
52 root 0:00 [DIAG_SMD_MODEM_]
53 root 0:00 [DIAG_SMD_MODEM_]
54 root 0:00 [DIAG_SMD_LPASS_]
55 root 0:00 [DIAG_SMD_LPASS_]
56 root 0:00 [DIAG_SMD_LPASS_]
57 root 0:00 [DIAG_SMD_LPASS_]
58 root 0:00 [DIAG_SMD_LPASS_]
59 root 0:00 [DIAG_SMD_WCNSS_]
60 root 0:00 [DIAG_SMD_WCNSS_]
61 root 0:00 [DIAG_SMD_WCNSS_]
62 root 0:00 [DIAG_SMD_WCNSS_]
63 root 0:00 [DIAG_SMD_WCNSS_]
64 root 0:00 [DIAG_SMD_SENSOR]
65 root 0:00 [DIAG_SMD_SENSOR]
66 root 0:00 [DIAG_SMD_SENSOR]
67 root 0:00 [DIAG_SMD_SENSOR]
68 root 0:00 [DIAG_SMD_SENSOR]
69 root 0:00 [DIAG_SOCKMODEM_]
70 root 0:00 [DIAG_SOCKMODEM_]
71 root 0:00 [DIAG_SOCKMODEM_]
72 root 0:00 [DIAG_SOCKMODEM_]
73 root 0:00 [DIAG_SOCKMODEM_]
74 root 0:00 [DIAG_SOCKLPASS_]
75 root 0:00 [DIAG_SOCKLPASS_]
76 root 0:00 [DIAG_SOCKLPASS_]
77 root 0:00 [DIAG_SOCKLPASS_]
78 root 0:00 [DIAG_SOCKLPASS_]
79 root 0:00 [DIAG_SOCKWCNSS_]
80 root 0:00 [DIAG_SOCKWCNSS_]
81 root 0:00 [DIAG_SOCKWCNSS_]
82 root 0:00 [DIAG_SOCKWCNSS_]
83 root 0:00 [DIAG_SOCKWCNSS_]
84 root 0:00 [DIAG_SOCKSENSOR]
85 root 0:00 [DIAG_SOCKSENSOR]
86 root 0:00 [DIAG_SOCKSENSOR]
87 root 0:00 [DIAG_SOCKSENSOR]
88 root 0:00 [DIAG_SOCKSENSOR]
89 root 0:00 [DIAG_CNTL_SOCKE]
90 root 0:00 [k_gserial]
91 root 0:00 [k_ipa_usb]
92 root 0:00 [uether]
93 root 0:00 [k_gbridge]
94 root 0:00 [therm_core:noti]
95 root 0:00 [therm_core:noti]
96 root 0:00 [therm_core:noti]
97 root 0:00 [therm_core:noti]
98 root 0:00 [therm_core:noti]
99 root 0:00 [irq/216-tsens_i]
100 root 0:00 [therm_core:noti]
101 root 0:00 [therm_core:noti]
102 root 0:00 [cfinteractive]
103 root 0:00 [irq/170-7824900]
104 root 0:18 [irq/155-mmc0]
106 root 0:00 [irq/253-7864900]
107 root 0:00 [irq/157-mmc1]
108 root 0:00 [soc:rpm_etm0]
109 root 0:00 [usb_bam_wq]
110 root 0:00 [qmi_svc_event_w]
111 root 0:00 [msm_ipc_router]
112 root 0:00 [soc:modem_etm0]
113 root 0:00 [ipv6_addrconf]
114 root 0:00 [irq/441-modem]
115 root 0:00 [sysmon_wq]
116 root 0:00 [bam_dmux_rx]
117 root 0:00 [bam_dmux_tx]
118 root 0:00 [ubi_bgt0d]
119 root 0:00 [k_bam_data]
120 root 0:00 [f_mtp]
122 root 0:00 [msm_thermal:fre]
123 root 0:00 [msm_thermal:the]
170 root 0:00 [ubifs_bgt0_1]
179 root 0:00 [ubi_bgt1d]
188 root 0:04 psmd
415 root 0:00 ipacm_perf
448 root 0:00 /sbin/adbd
458 root 0:00 [k_gsmd]
460 root 0:00 [k_gbam]
461 root 0:03 [file-storage]
475 root 0:00 /usr/bin/qti
515 root 0:00 /usr/bin/keyd
526 root 0:00 /sbin/syslogd -n -C64
531 root 0:00 /usr/bin/webcgid
553 root 0:00 [kworker/0:2]
555 root 0:00 [IPCRTR]
557 root 0:00 [modem_IPCRTR]
584 root 0:00 /usr/bin/qmuxd
588 root 0:00 /usr/bin/thermal-engine
596 root 0:00 /usr/bin/netmgrd
627 root 0:00 /usr/bin/thermal_low
636 www-data 0:00 /usr/sbin/lighttpd -f /etc/lighttpd.conf
658 messageb 0:00 /usr/bin/dbus-daemon --system
667 root 0:00 /sbin/reboot-daemon
669 diag 0:00 /usr/bin/diagrebootapp
675 root 0:00 /usr/bin/atfwd_daemon
708 root 0:01 /usr/bin/netd
747 root 0:00 /usr/bin/dturs232 /data/dturs232.conf
780 root 0:00 /usr/bin/pdc_daemon
793 root 0:00 /usr/bin/mbimd
1013 root 0:00 hostapd -B -P /var/run/hostapd.pid -e /var/tmp/hostapd.entropy.bin /data/netd/hostapd.conf
1019 nobody 0:00 dnsmasq -x /var/run/dnsmasq.pid -l /var/run/dnsmasq.leases -i br0 -I lo -z --dhcp-range=br0,192.168.100.100,192.168.100.200,255.255.255.0,43200 --address=/mydtu.com/192.168.100.1 --address=/androapmi.yu.me/192.168.100.1 --address=/ioapmi.yu.me/192.168.100.1 --dhcp-option-force=6,192.168.100.1
1068 root 0:00 [irq/325-emac_wo]
1137 root 0:00 [rtw_xmit/wlan0]
1138 root 0:09 [rtw_cmd/wlan0]
1292 root 0:00 [kworker/u2:0]
1306 root 0:00 /system/bin/sh -
1316 root 0:00 ps aux
端口和服务的提供如下：
/data/netd # netstat -tunlp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:5037 0.0.0.0:* LISTEN 448/adbd
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 629/lighttpd
tcp 0 0 0.0.0.0:5555 0.0.0.0:* LISTEN 448/adbd
tcp 0 0 192.168.100.1:53 0.0.0.0:* LISTEN 1012/dnsmasq
tcp 0 0 fe80::200:deff:fead:beef:53 :::* LISTEN 1012/dnsmasq
udp 0 0 192.168.100.1:53 0.0.0.0:* 1012/dnsmasq
udp 0 0 0.0.0.0:67 0.0.0.0:* 1012/dnsmasq
udp 0 0 fe80::200:deff:fead:beef:53 :::* 1012/dnsmasq
启动的进程，截取一两个:
/etc/rc.d/init.d # cat ebtables
#!/bin/bash
#
# init script for the Ethernet Bridge filter tables
#
# Written by Dag Wieers <dag@wieers.com>
# Modified by Rok Papez <rok.papez@arnes.si>
# Bart De Schuymer <bdschuym@pandora.be>
#
# chkconfig: - 15 85
# description: Ethernet Bridge filtering tables
#
# config: /etc/ebtables/ebtables (text)
# /etc/ebtables/ebtables.<table> (binary)
source /etc/init.d/functions
source /etc/sysconfig/network
# Check that networking is up.
[ ${NETWORKING} = "no" ] && exit 0
[ -x /usr/sbin/ebtables ] || exit 1
[ -x /usr/sbin/ebtables-save ] || exit 1
[ -x /usr/sbin/ebtables-restore ] || exit 1
RETVAL=0
prog="ebtables"
desc="Ethernet bridge filtering"
umask 0077
#default configuration
EBTABLES_TEXT_FORMAT="yes"
EBTABLES_BINARY_FORMAT="yes"
EBTABLES_MODULES_UNLOAD="yes"
EBTABLES_SAVE_ON_STOP="no"
EBTABLES_SAVE_ON_RESTART="no"
EBTABLES_SAVE_COUNTER="no"
config=/etc/ebtables/$prog-config
[ -f "$config" ] && . "$config"
start() {
echo -n $"Starting $desc ($prog): "
if [ "$EBTABLES_BINARY_FORMAT" = "yes" ]; then
for table in $(ls /etc/ebtables/ebtables.* 2>/dev/null | sed -e 's/.*ebtables\.//' -e '/save/d' ); do
/usr/sbin/ebtables -t $table --atomic-file /etc/ebtables/ebtables.$table --atomic-commit || RETVAL=1
done
else
/usr/sbin/ebtables-restore < /etc/sysconfig/ebtables || RETVAL=1
fi
if [ $RETVAL -eq 0 ]; then
success "$prog startup"
rm -f /var/lock/subsys/$prog
else
failure "$prog startup"
fi
echo
}
stop() {
echo -n $"Stopping $desc ($prog): "
for table in $(grep '^ebtable_' /proc/modules | sed -e 's/ebtable_\([^ ]*\).*/\1/'); do
/usr/sbin/ebtables -t $table --init-table || RETVAL=1
done
if [ "$EBTABLES_MODULES_UNLOAD" = "yes" ]; then
for mod in $(grep -E '^(ebt|ebtable)_' /proc/modules | cut -f1 -d' ') ebtables; do
rmmod $mod 2> /dev/null
done
fi
if [ $RETVAL -eq 0 ]; then
success "$prog shutdown"
rm -f /var/lock/subsys/$prog
else
failure "$prog shutdown"
fi
echo
}
restart() {
stop
start
}
save() {
echo -n $"Saving $desc ($prog): "
if [ "$EBTABLES_TEXT_FORMAT" = "yes" ]; then
if [ -e /etc/ebtables/ebtables ]; then
chmod 0600 /etc/ebtables/ebtables
mv -f /etc/ebtables/ebtables /etc/ebtables/ebtables.save
fi
/usr/sbin/ebtables-save > /etc/ebtables/ebtables || RETVAL=1
fi
if [ "$EBTABLES_BINARY_FORMAT" = "yes" ]; then
rm -f /etc/ebtables/ebtables.*.save
for oldtable in $(ls /etc/ebtables/ebtables.* 2>/dev/null | grep -vF 'ebtables.save'); do
chmod 0600 $oldtable
mv -f $oldtable $oldtable.save
done
for table in $(grep '^ebtable_' /proc/modules | sed -e 's/ebtable_\([^ ]*\).*/\1/'); do
/usr/sbin/ebtables -t $table --atomic-file /etc/ebtables/ebtables.$table --atomic-save || RETVAL=1
if [ "$EBTABLES_SAVE_COUNTER" = "no" ]; then
/usr/sbin/ebtables -t $table --atomic-file /etc/ebtables/ebtables.$table -Z || RETVAL=1
fi
done
fi
if [ $RETVAL -eq 0 ]; then
success "$prog saved"
else
failure "$prog saved"
fi
echo
}
case "$1" in
start)
start
;;
stop)
[ "$EBTABLES_SAVE_ON_STOP" = "yes" ] && save
stop
;;
restart|reload)
[ "$EBTABLES_SAVE_ON_RESTART" = "yes" ] && save
restart
;;
condrestart)
[ -e /var/lock/subsys/$prog ] && restart
RETVAL=$?
;;
save)
save
;;
status)
/usr/sbin/ebtables-save
RETVAL=$?
;;
*)
echo $"Usage $0 {start|stop|restart|condrestart|save|status}"
RETVAL=1
esac
exit $RETVAL
/etc/rc.d/init.d #
如果要测试的话，我会通过ADB push一个脚本进去，时刻监控着网络是否会掉线，运行时长等等信息。
淘宝搜了下MDM9607模块，180以上吧，而且不是有名的厂家生产的。
看来这个不起眼的黑盒子的价格，远远高过一个4G路由器的价格了。
由于方案不同，与我们自己在OP上搭建的4G路由器还是有些区别的。
不过，每个厂家的方案不同，对技术的要求也不同。
希望下次多给我们寄几个样品，反正也没有费用，测试完毕后，原样返回给他们。
顺便搜了一下MDM9X07系列的模块资料：
具有全网通能力的骁龙X5 LTE调制解调器（9x07）支持LTE Category 4，
最高可达150 Mbps的下载速率。MDM9207-1调制解调器在下行链路支持LTE Category 1，
最高达10 Mbps的速度，同时支持节电模式（Power Save Mode, PSM），
使用两节AA电池可实现最多长达10年的续航时间。这些调制解调器兼容全球主要蜂窝标准，
同时还支持Linux OS、ARM Cortex A7处理器、并已预集成支持MU-MIMO技术的
Qualcomm® VIVE™ 802.11ac Wi-Fi、Bluetooth 4.2、低功耗蓝牙（Bluetooth Low Energy）和全球导航卫星系统（GNSS）。
为了提供设计简易性，该芯片可跨整个芯片平台支持可扩展软件复用，
从而降低设计复杂性、减少开发成本和实现更快的产品商用。
登录界面，很丑，真丑。
内页：
好了，就这样吧，这界面我看不下去了。
声明：该文观点仅代表作者本人，转载请注明来自看雪