Прошивка роутера Zyxel Keenetic (нужны подсказки)

Сообщения от роутера ДОБУКВЕННО такие же, как и по ссылке?

Какие-нибудь шаманства типа
forum.ixbt.com/topic.cgi?id=14:54600-83

вот добрался до всего. попробовал ещё раз. ага. теперь данные появляются при подключенной UTP , шнурке и запущенном гипертерминале. TFTPD32 даже запускать не потребовалось
вот лог.

0

3: System Boot system code via Flash.
## Booting image at bf050000 ...
   Image Name:   ZyXEL KEENETIC Series
   Created:      2012-05-29  21:01:34 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1188623 Bytes =  1.1 MB
   Load Address: 80000000
   Entry Point:  8033b000
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 8033b000) ...
## Giving linux memsize in MB, 32

Starting kernel ...


LINUX started...

 THIS IS ASIC
Linux version 2.6.23.17 (developers@ndmsystems.com) (gcc version 4.1.2) #1 Wed M
ay 30 00:59:31 MSK 2012

 The CPU frequency set to 384 MHz
32M RAM Detected!
CPU revision is: 0001964c
Determined physical RAM map:
 memory: 02000000 @ 00000000 (usable)
Built 1 zonelists in Zone order.  Total pages: 8128
Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock4 rootfstype=squash
fs noinitrd
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 16kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
Cache parity protection disabled
cause = 50808000, status = 11000000
PID hash table entries: 128 (order: 7, 512 bytes)
calculating r4koff... 0005dc00(384000)
CPU frequency 384.00 MHz
Using 192.000 MHz high precision timer.
console [ttyS1] enabled
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 28920k/32768k available (2725k kernel code, 3848k reserved, 578k data, 1
28k init, 0k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
Generic PHY: Registered new driver
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
Time: MIPS clocksource has been installed.
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
devfs: 2004-01-31 Richard Gooch (rgooch@atnf.csiro.au)
devfs: boot_options: 0x1
fuse init (API version 7.8)
squashfs: version 3.0 (2006/03/15) Phillip Lougher
io scheduler noop registered
io scheduler deadline registered (default)
Ralink gpio driver initialized
HDLC line discipline: version $Revision: 4.8 $, maxframe=4096
N_HDLC line discipline registered.
Serial: 8250/16550 driver $Revision: 1.3 $ 2 ports, IRQ sharing disabled
serial8250: ttyS0 at I/O 0xb0000500 (irq = 37) is a 16550A
serial8250: ttyS1 at I/O 0xb0000c00 (irq = 12) is a 16550A
loop: module loaded
MAC_ADRH -- : 0x00000000
MAC_ADRL -- : 0x00000000
Ralink APSoC Ethernet Driver Initilization. v2.0  256 rx/tx descriptors allocate
d, mtu = 1500!
NAPI enable, weight = 0, Tx Ring = 256, Rx Ring = 256
MAC_ADRH -- : 0x0000000c
MAC_ADRL -- : 0x432880eb
PROC INIT OK!
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
MPPE/MPPC encryption/compression module registered
NET: Registered protocol family 24
PPPoL2TP kernel driver, V0.18.4
PPTP driver version 0.8.3.37
ralink flash device: 0x800000 at 0x1f000000
Ralink SoC physically mapped flash: Found 1 x16 devices at 0x0 in 16-bit bank
 Amd/Fujitsu Extended Query Table at 0x0040
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
Creating 7 MTD partitions on "Ralink SoC physically mapped flash":
0x00000000-0x00030000 : "U-Boot"
0x00030000-0x00040000 : "U-Config "
0x00040000-0x00050000 : "RF-EEPROM"
0x00050000-0x00180000 : "Kernel"
0x00180000-0x005f0000 : "RootFS"
0x005f0000-0x00600000 : "Config"
0x00600000-0x00800000 : "Storage"
usbcore: registered new interface driver cdc_acm
drivers/usb/class/cdc-acm.c: v0.25:USB Abstract Control Model driver for USB mod
ems and ISDN adapters
usbcore: registered new interface driver usblp
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
usbcore: registered new interface driver usbserial
drivers/usb/serial/usb-serial.c: USB Serial support registered for generic
usbcore: registered new interface driver usbserial_generic
drivers/usb/serial/usb-serial.c: USB Serial Driver core
drivers/usb/serial/usb-serial.c: USB Serial support registered for airprime
usbcore: registered new interface driver airprime
drivers/usb/serial/usb-serial.c: USB Serial support registered for FTDI USB Seri
al Device
usbcore: registered new interface driver ftdi_sio
drivers/usb/serial/ftdi_sio.c: v1.4.3:USB FTDI Serial Converters Driver
drivers/usb/serial/usb-serial.c: USB Serial support registered for GSM modem (1-
port)
usbcore: registered new interface driver option
drivers/usb/serial/option.c: USB Driver for GSM modems: v0.7.1
drivers/usb/serial/usb-serial.c: USB Serial support registered for pl2303
usbcore: registered new interface driver pl2303
drivers/usb/serial/pl2303.c: Prolific PL2303 USB to serial adaptor driver
usbcore: registered new interface driver cdc_ether
usbcore: registered new interface driver rndis_host
u32 classifier
    Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (1024 buckets, 4096 max)
ctnetlink v0.93: registering with nfnetlink.
nf_conntrack_rtsp v0.6.21 loading
nf_nat_rtsp v0.6.21 loading
ip_tables: (C) 2000-2006 Netfilter Core Team
Type NAT: Restricted Cone
ClusterIP Version 0.8 loaded successfully
TCP bic registered
TCP cubic registered
TCP westwood registered
TCP highspeed registered
TCP hybla registered
TCP htcp registered
TCP vegas registered
TCP scalable registered
NET: Registered protocol family 1
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear 
All bugs added by David S. Miller 
decode /dev/mtdblock4
VFS: Mounted root (squashfs filesystem) readonly.
Mounted devfs on /dev
Freeing unused kernel memory: 128k freed
init started: BusyBox v1.8.2 (2012-05-19 23:20:31 MSK)
starting pid 645, tty '': '/etc/rc.sysinit'
Algorithmics/MIPS FPU Emulator v1.5
LED driver vers. 1.7 loaded.
IPP2P v0.8.2 loading
Load Timer Module(Wdg/Soft)
Start powerstat module.
Read power status register: 0x00000001.
Status: Power was not turned off.
dwc_otg: version 2.72a 24-JUN-2008
DWC_otg: Core Release: 2.66a
DWC_otg: Periodic Transfer Interrupt Enhancement - disabled
DWC_otg: Multiprocessor Interrupt Enhancement - disabled
DWC_otg: Using DMA mode
DWC_otg: Device using Buffer DMA mode
dwc_otg lm0: DWC OTG Controller
dwc_otg lm0: new USB bus registered, assigned bus number 1
dwc_otg lm0: irq 18, io mem 0x00000000
DWC_otg: Init: Port Power? op_state=1
DWC_otg: Init: Power Port (0)
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
drivers/usb/serial/usb-serial.c: USB Serial support registered for Sierra USB mo
dem (1 port)
drivers/usb/serial/usb-serial.c: USB Serial support registered for Sierra USB mo
dem (3 port)
usbcore: registered new interface driver sierra
rt2860v2_ap: module license 'unspecified' taints kernel.
Configuring network topology
MAC_ADRH -- : 0x0000cc5d
MAC_ADRL -- : 0x4e4bfa4e

phy_tx_ring = 0x019d6000, tx_ring = 0xa19d6000

phy_rx_ring0 = 0x019d7000, rx_ring0 = 0xa19d7000
CDMA_CSG_CFG = 81000007
GDMA1_FWD_CFG = 710000
No need to change the port 0 setting...
No need to change the port 1 setting...
No need to change the port 2 setting...
No need to change the port 3 setting...
No need to change the port 4 setting...
done.
done.
device eth2.1 entered promiscuous mode
device eth2 entered promiscuous mode
Unhandled kernel unaligned access[#1]:
Cpu 0
$ 0   : 00000000 00000000 81982e00 2a810104
$ 4   : ffffa2aa 00000000 00000000 8110f000
$ 8   : 00000020 80136cf0 00000002 c16baaa2
$12   : 3d098000 00000000 e1f69180 00000001
$16   : 0000000c 00000001 8107db00 80373a64
$20   : 8110f000 8035b640 8110f000 80370000
$24   : 00000002 000f41fc
$28   : 8031c000 8031dd78 00000020 801dca58
Hi    : 000f4240
Lo    : 00000000
epc   : 800527c8 put_page+0x0/0x2dc     Tainted: P
ra    : 801dca58 skb_release_data+0xcc/0x158
Status: 1100dc03    KERNEL EXL IE
Cause : 00800010
BadVA : ffffa2aa
PrId  : 0001964c
Modules linked in: rt2860v2_ap(P) hfsplus sierra dwc_otg lm powerstat ralink_wdt
 xt_mark xt_mac ipt_webstr ipt_ipp2p rtled nf_nat_pptp nf_nat_proto_gre nf_connt
rack_pptp nf_conntrack_proto_gre nf_nat_h323 nf_conntrack_h323
Process swapper (pid: 0, threadinfo=8031c000, task=8031e188)
Stack : 8109d938 8109d938 8109d938 8001b7ac 8107db00 8107db00 00002a81 801dc600
        8001c4f8 8001c54c 00000004 00000004 80373a4c 801e422c 00000600 8037ad20
        801dd398 802e0000 8107db00 81a6ab60 8107db00 81a6ab60 81177000 000008e0
        80370000 00000001 801630bc 8016309c 8003c9fc 8031de60 80361b58 803b5108
        81177000 8001c54c 8110f14c 8110f000 80373628 fffb8bb6 80373638 80320000
        ...
Call Trace:
[<800527c8>] put_page+0x0/0x2dc
[<801dca58>] skb_release_data+0xcc/0x158
[<801dc600>] kfree_skbmem+0x14/0x164
[<801e422c>] netif_receive_skb+0x21c/0x570
[<801630bc>] raeth_clean+0x2b8/0x454
[<801e7350>] net_rx_action+0xa8/0x1f4
[<80028940>] __do_softirq+0x84/0x118
[<80028a3c>] do_softirq+0x68/0x70
[<80001598>] rt2880_irqdispatch+0x110/0x118
[<80001b38>] ret_from_irq+0x0/0x4
[<80001698>] r4k_wait+0x4/0xc
[<80003ba4>] cpu_idle+0x30/0x50
[<8033bcb8>] start_kernel+0x2e0/0x340


Code: 00001021  03e00008  27bd0018 <8c820000> 30424000  144000b2  00803021  3c08
8036  2502b640
Kernel panic - not syncing: Fatal exception in interrupt
Rebooting in 1 seconds..

U-Boot 1.1.3 (Mar 29 2012 - 18:41:07)

Board: Ralink APSoC DRAM:  32 MB
relocate_code Pointer at: 81fb4000
config usb..
flash_protect ON: from 0xBF000000 to 0xBF019EA3
flash_protect ON: from 0xBF030000 to 0xBF030FFF
============================================
Ralink UBoot Version: 3.3.4_ZyXEL
--------------------------------------------
ASIC 3052_MP2 (Port5<->None)
DRAM component: 256 Mbits SDR
DRAM bus: 32 bit
Total memory: 64 MBytes
Flash component: NOR Flash
Date:Mar 29 2012  Time:18:41:07
============================================
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:128, ways:4, linesz:32 ,total:16384

 ##### The CPU freq = 384 MHZ ####

 SDRAM bus set to 32 bit
 SDRAM size = 32 Mbytes
 Firmware test register status: 0x00000001

Please choose the operation:
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   9: Load Boot Loader code then write to Flash via TFTP.
 1
You choosed 2

 0



2: System Load Linux Kernel then write to Flash via TFTP.
 Warning!! Erase Linux in Flash then burn new one. Are you sure?(Y/N)
 Please Input new ones /or Ctrl-C to discard
        Input device IP (10.10.10.123) ==:10.10.10.123
        Input server IP (10.10.10.3) ==:10.10.10.3
        Input Linux Kernel filename () ==:rt305x_firmware.bin

 netboot_common, argc= 3

 NetTxPacket = 0x81FE60C0

 KSEG1ADDR(NetTxPacket) = 0xA1FE60C0

 NetLoop,call eth_halt !

 NetLoop,call eth_init !
Trying Eth0 (10/100-M)

 Waitting for RX_DMA_BUSY status Start... done

 Header Payload scatter function is Disable !!

 ETH_STATE_ACTIVE!!
Using Eth0 (10/100-M) device
TFTP from server 10.10.10.3; our IP address is 10.10.10.123
Filename 'rt305x_firmware.bin'.

 TIMEOUT_COUNT=10,Load address: 0x80100000
Loading: *
 Normal Mode,Packet received from CPU port,plen=44

 Normal Mode,Packet received from CPU port,plen=11231

 Normal Mode,Packet received from CPU port,plen=5832

ArpTimeoutCheck
T T T T T T T T T T
Retry count exceeded; starting again
Trying Eth0 (10/100-M)

 ETH_STATE_ACTIVE!!

ArpTimeoutCheck

ArpTimeoutCheck
Using Eth0 (10/100-M) device
TFTP from server 10.10.10.3; our IP address is 10.10.10.123
Filename 'rt305x_firmware.bin'.

 TIMEOUT_COUNT=10,Load address: 0x80100000
Loading: *
ArpTimeoutCheck
T T T T T T T T T T
Retry count exceeded; starting again
Trying Eth0 (10/100-M)

 ETH_STATE_ACTIVE!!

ArpTimeoutCheck

ArpTimeoutCheck
Using Eth0 (10/100-M) device
TFTP from server 10.10.10.3; our IP address is 10.10.10.123
Filename 'rt305x_firmware.bin'.

 TIMEOUT_COUNT=10,Load address: 0x80100000
Loading: *
ArpTimeoutCheck
T T T T T T T T T T
Retry count exceeded; starting again
Trying Eth0 (10/100-M)

 ETH_STATE_ACTIVE!!

ArpTimeoutCheck

ArpTimeoutCheck
Using Eth0 (10/100-M) device
TFTP from server 10.10.10.3; our IP address is 10.10.10.123
Filename 'rt305x_firmware.bin'.

 TIMEOUT_COUNT=10,Load address: 0x80100000
Loading: *
ArpTimeoutCheck
T T T T T T T T T T
Retry count exceeded; starting again
Trying Eth0 (10/100-M)

 ETH_STATE_ACTIVE!!

ArpTimeoutCheck

ArpTimeoutCheck
Using Eth0 (10/100-M) device
TFTP from server 10.10.10.3; our IP address is 10.10.10.123
Filename 'rt305x_firmware.bin'.

 TIMEOUT_COUNT=10,Load address: 0x80100000
Loading: *
ArpTimeoutCheck
T  @  @  @  @  @  @  @  @  @  @  @ T  @  @  @  @  @  @  @  @  @  @  @ T  @  @  @
  @  @  @  @  @  @  @  @ T  @  @  @  @  @  @  @  @  @  @  @ T  @  @  @  @  @  @
 @  @  @  @  @ T  @  @  @  @  @  @  @  @  @  @  @ T  @  @  @  @  @  @  @  @  @
@  @ T  @  @  @  @  @  @  @  @  @  @  @ T  @  @  @  @  @  @  @  @  @  @  @ T  @
 @  @  @  @  @  @  @  @  @  @
Retry count exceeded; starting again
Trying Eth0 (10/100-M)

 ETH_STATE_ACTIVE!!

ArpTimeoutCheck
 @  @  @  @  @  @  @  @  @  @  @
ArpTimeoutCheck
 @  @  @  @  @  @  @  @  @  @  @ Using Eth0 (10/100-M) device
TFTP from server 10.10.10.3; our IP address is 10.10.10.123
Filename 'rt305x_firmware.bin'.

 TIMEOUT_COUNT=10,Load address: 0x80100000
Loading:  @  @  @  @  @  @  @  @  @  @  @
ArpTimeoutCheck
 @  @  @  @  @  @  @  @  @  @  @ T  @  @  @  @  @  @  @  @  @  @  @ T  @  @  @
@  @  @  @  @  @  @  @ T  @  @  @  @  @  @  @  @  @  @  @ T  @  @  @  @  @  @  @
  @  @  @  @ T  @  @  @  @  @  @  @  @  @  @  @ T  @  @  @  @  @  @  @  @  @  @
 @ T  @  @  @  @  @  @  @  @  @  @  @ T  @  @  @  @  @  @  @  @  @  @  @ T  @  @
  @  @  @  @  @  @  @  @  @ T  @  @  @  @  @  @  @  @  @  @  @
Retry count exceeded; starting again
Trying Eth0 (10/100-M)

 ETH_STATE_ACTIVE!!

ArpTimeoutCheck
 @  @  @  @  @  @  @  @  @  @  @
ArpTimeoutCheck
 @  @  @  @  @  @  @  @  @  @  @ Using Eth0 (10/100-M) device
TFTP from server 10.10.10.3; our IP address is 10.10.10.123
Filename 'rt305x_firmware.bin'.

 TIMEOUT_COUNT=10,Load address: 0x80100000
Loading:  @  @  @  @  @  @  @  @  @  @  @
ArpTimeoutCheck
 @  @  @  @  @  @  @  @  @  @  @ T  @  @  @  @  @  @  @  @  @  @  @ T  @  @  @
@  @  @  @  @  @  @  @ T  @  @  @  @  @  @  @  @  @  @  @ T  @  @  @  @  @  @  @
  @  @  @  @ T  @  @  @  @  @  @  @  @  @  @  @ T  @  @  @  @  @  @  @  @  @  @
 @ T  @  @  @  @  @  @  @  @  @  @  @ T  @  @  @  @  @  @  @  @  @  @  @ T  @  @
  @  @  @  @  @  @  @  @  @ T  @  @  @  @  @  @  @  @  @  @  @
Retry count exceeded; starting again
Trying Eth0 (10/100-M)

 ETH_STATE_ACTIVE!!

ArpTimeoutCheck
 @  @  @  @  @  @  @  @  @  @  @
ArpTimeoutCheck
 @  @  @  @  @  @  @  @  @  @  @ Using Eth0 (10/100-M) device
TFTP from server 10.10.10.3; our IP address is 10.10.10.123
Filename 'rt305x_firmware.bin'.

 TIMEOUT_COUNT=10,Load address: 0x80100000
Loading:  @  @  @  @  @  @  @  @  @  @  @
ArpTimeoutCheck
 @  @  @  @  @  @  @  @  @  @  @ T  @  @  @  @  @  @  @  @  @  @  @ T  @  @  @
@  @  @  @  @  @  @  @ T  @  @  @  @  @  @  @  @  @  @  @ T  @  @  @  @  @  @  @
  @  @  @  @ T  @  @  @  @  @  @  @  @  @  @  @ T  @  @  @  @  @  @  @  @  @  @
 @ T  @  @  @  @  @  @  @  @  @  @  @ T  @  @  @  @  @  @  @  @  @  @  @ T  @  @
  @  @  @  @  @  @  @  @  @ T  @  @  @  @  @  @  @  @  @  @  @
Retry count exceeded; starting again
Trying Eth0 (10/100-M)

 ETH_STATE_ACTIVE!!

ArpTimeoutCheck
 @  @  @  @  @  @  @  @  @  @  @
ArpTimeoutCheck
 @  @  @  @  @  @  @  @  @  @  @ Using Eth0 (10/100-M) device
TFTP from server 10.10.10.3; our IP address is 10.10.10.123
Filename 'rt305x_firmware.bin'.

 TIMEOUT_COUNT=10,Load address: 0x80100000
Loading:  @  @  @  @  @  @  @  @  @  @  @
ArpTimeoutCheck
 @  @  @  @  @  @  @  @  @  @  @ T  @  @  @  @  @  @  @  @  @  @  @ T  @  @  @
@  @  @  @  @  @  @  @ T  @  @  @  @  @  @  @  @  @  @  @ T  @  @  @  @  @  @  @
  @  @  @  @ T  @  @  @  @  @  @  @  @  @  @  @ T  @  @  @  @  @  @  @  @  @  @
 @ T  @  @  @  @  @  @  @  @  @  @  @ T  @  @  @  @  @  @  @  @  @  @  @ T  @  @
  @  @  @  @  @  @  @  @  @ T  @  @  @  @  @  @  @  @  @  @  @

habrahabr.ru/post/192414/

нашёл я доступ к программатору с искомым переходником. и поддер;кой 29L***** на мой взгляд, это самое действенное решение + ещё и флешку можно проверить
кто может поделится полным дампом полной прошивки для этого Zyxel Keenetic?
вот не любитель я "внутрисхемного программирования" ибо: если прошивку может лить любой лошара, не выпаивая мсх, то любой лошара может и убить прошиваемое оборудование таким же способом. (ну вот не люблю я прошиваемые вещи. оборонное прошлое - там всё исключительно аппаратно)