BBルータ解剖
 
NTTE/NTTW Web Caster X400V

個人的な雑感

IP電話機能付きのルータで、ルータにてセキュリティ対策ができるという売りの 製品のようです。個人的には値段に見合う魅力とは感じませんが、家族が PC を 使っていて心配な場合は便利ではないかと思います。発売当初は不具合等で動作が 安定しなかったようですが、ファームウェアのアップデートで安定するように なったようです。デザインは近未来的な感じがして、悪くはないと思います。 2005年9月に発売終了したそうです。2006.1.10

CPU と OS

CPU は IXP425-400MHz を搭載しているようです。OS はファームウェアから、

Linux version 2.4.18_mvl30-ixdp425

とあり、MontaVista Linux で動作しているようです。それと、ファームウェアの いくつかの場所で oki の文字があるので OKI 製だと思われます。


アップデートファームの取り出し
確認ファーム Version : 03.00.0001

NTT 東日本 のページからファームウェアをダウンロードしてきます。 ファームウェアファイル x400v-03000001.bin は gzip ファイルなので、ファイル名の変更をして 解凍します。

[toyota@skywalker]% mv 400v-03000001.bin 400v-03000001.gz
[toyota@skywalker]% gunzip 400v-03000001.gz

解凍してできたファイル 400v-03000001 の最初の部分は以下のようになっています。

VR21W Ver:03.00.0001
ROOTIMG.BIN,03.00.0001,2005/11/26 22:50,5898240,2df7a9ebf3af4daa74f70dac664c4324
KERNEL.BIN,03.00.0001,2005/11/26 22:50,882356,c8515256abc3590b8a7a845db4a4c4a4
CALLTBL.DEF,03.00.0001,2005/11/26 22:50,94,b5426e5026e6ccb05fff54980c1905f5

X400V の内部形式名は VR21W と言うようで、それに続くデータは
格納されているファイル名,バージョン,日付,ファイルサイズ,md5チェックサム
のようです。
最後のファイルはファイルサイズを見ればわかりますが、小さいファイルで、中身は 良くわからないデータでしたので、取り出すのは省略します。最初の2つのファイルを 取り出してみます。

[toyota@skywalker]% dd if=X400V-03000001 of=rootimg.bin bs=1 skip=1536 count=5898240
[toyota@skywalker]% dd if=X400V-03000001 of=kernel.bin.gz bs=1 skip=5911636 count=870896

最初のファイル rootimg.bin は 0x1985 から始まっているので、jffs2 ファイルシステムの イメージのようです。試しに、 jffs2dump をしてみます。 jffs2dump は mtd のツールに 入っているコマンドです。

[toyota@skywalker]% jffs2dump -c rootimg.bin
Wrong bitmask at 0x00000000, 0x8519
Wrong hdr_crc at 0x0003cb04, 0xf425e8ef instead of 0x97b2e71b
Wrong bitmask at 0x0003cb08, 0xb225
Wrong hdr_crc at 0x00071928, 0x2d224703 instead of 0x7686b6f2
...


とエラーが出ます。どうやらエンディアン違いのようですので、 -b オプションを 付けます。

[toyota@skywalker]% jffs2dump -b -c rootimg.bin
Dirent node at 0x00000000, totlen 0x0000002b, #pino 1, version 0, #ino 2, nsize 3, name bin
Inode node at 0x0000002c, totlen 0x00000044, #ino 2, version 1, isize 0, csize 0, dsize 0, offset 0
...


このままですと、 jffs2reader で読んだときにエラーが出るので、エンディアンの 変換を行います。

[toyota@skywalker]% jffs2dump -b -e rootimg2.bin -c rootimg.bin

これで jffs2reader コマンドが認識してくれるので、実行します。

[toyota@skywalker]% jffs2reader rootimg2.bin
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /dev/
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /dev/pts/
crw-r--r-- 1    0        0           1, 202 Mar 14 2003 /dev/vodspa1
crw-r--r-- 1    0        0           7, 201 Mar 14 2003 /dev/kudp7
crw-r--r-- 1    0        0           6, 201 Mar 14 2003 /dev/kudp6
crw-r--r-- 1    0        0           5, 201 Mar 14 2003 /dev/kudp5
crw-r--r-- 1    0        0           4, 201 Mar 14 2003 /dev/kudp4
crw-r--r-- 1    0        0           3, 201 Mar 14 2003 /dev/kudp3
crw-r--r-- 1    0        0           2, 201 Mar 14 2003 /dev/kudp2
crw-r--r-- 1    0        0           0, 202 Mar 14 2003 /dev/vodspa0
crw-r--r-- 1    0        0           1, 201 Mar 14 2003 /dev/kudp1
crw-r--r-- 1    0        0           0, 201 Mar 14 2003 /dev/kudp0
crw-rw-r-- 1    0        0           0, 124 Feb 12 2003 /dev/bri_driver
brw-rw-rw- 1    0        0           6,  31 Aug 19 2002 /dev/mtd6
crw-rw-r-- 1    0        0           0, 123 Jul 10 2002 /dev/rst
crw-rw-r-- 1    0        0           1,   1 Jul  8 2002 /dev/mem
brw-rw-rw- 1    0        0           5,  31 Jul  8 2002 /dev/mtd5
brw-rw-rw- 1    0        0           4,  31 Jul  8 2002 /dev/mtd4
crw-rw-r-- 1    0        0           5,   3 May  9 2002 /dev/ttyp5
crw-rw-r-- 1    0        0           4,   3 May  9 2002 /dev/ttyp4
crw-rw-r-- 1    0        0           3,   3 May  9 2002 /dev/ttyp3
crw-rw-r-- 1    0        0           2,   3 May  9 2002 /dev/ttyp2
crw------- 1    0        0           1,   3 May  9 2002 /dev/ttyp1
crw------- 1    0        0           0,   3 May  9 2002 /dev/ttyp0
crw-r--r-- 1    0        0           1,   4 May  9 2002 /dev/tty1
crw-rw-r-- 1    0        0           0,   4 May  8 2002 /dev/tty0
crw-rw-r-- 1    0        0           0,   5 May  8 2002 /dev/tty
brw-rw-r-- 1    0        0           1,   1 May  8 2002 /dev/ram1
crw-rw-r-- 1    0        0           5,   2 May  9 2002 /dev/ptyp5
crw-rw-r-- 1    0        0           4,   2 May  9 2002 /dev/ptyp4
crw-rw-r-- 1    0        0           3,   2 May  9 2002 /dev/ptyp3
crw-rw-r-- 1    0        0           2,   2 May  9 2002 /dev/ptyp2
crw-rw-r-- 1    0        0           1,   2 May  9 2002 /dev/ptyp1
crw-rw-r-- 1    0        0           0,   2 May  9 2002 /dev/ptyp0
crw-rw-r-- 1    0        0         178,   2 May  9 2002 /dev/ptya2
crw-rw-r-- 1    0        0         177,   2 May  9 2002 /dev/ptya1
crw-rw-r-- 1    0        0         176,   2 May  9 2002 /dev/ptya0
crw-r--r-- 1    0        0           0, 108 May 10 2002 /dev/ppp
crw-rw-rw- 1    0        0           3,   1 May 15 2002 /dev/null
brw-rw-rw- 1    0        0           3,  31 Jun 25 2002 /dev/mtd3
brw-rw-rw- 1    0        0           2,  31 Jun 25 2002 /dev/mtd2
brw-rw-rw- 1    0        0           1,  31 Jun 25 2002 /dev/mtd1
brw-rw-rw- 1    0        0           0,  31 Jun 25 2002 /dev/mtd0
crw-rw-rw- 1    0        0           0, 120 Jun 24 2002 /dev/led
brw-rw-r-- 1    0        0         250,   1 May  8 2002 /dev/initrd
crw-rw-r-- 1    0        0           1,   5 Mar 14 2003 /dev/console
crw-rw-r-- 1    0        0           0, 200 Jun 24 2002 /dev/avdsp0
crw-rw-rw- 1    0        0           0, 121 Dec 11 2002 /dev/co_driver
crw-rw-rw- 1    0        0           0, 122 Dec 11 2002 /dev/sl_driver
brw-rw-r-- 1    0        0           0,   1 May  8 2002 /dev/ram0
brw-rw-rw- 1    0        0           7,  31 Sep 26 2003 /dev/mtd7
brw-rw-rw- 1    0        0           8,  31 Sep 26 2003 /dev/mtd8
brw-rw-rw- 1    0        0           9,  31 Sep 26 2003 /dev/mtd9
crw-rw-rw- 1    0        0           0,  90 May  8 2004 /dev/mtdchar0
crw-rw-rw- 1    0        0          16,  90 May  8 2004 /dev/mtdchar16
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /etc/
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /etc/init.d/
-rwxr-xr-x 1    0        0             2629 Sep 26 11:11 /etc/init.d/rcS
-rwxr-xr-x 1    0        0              182 Oct 29 2004 /etc/inittab
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /lib/
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /lib/iptables/
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /lib/iptables/libipt_DNAT.so
-rwxr-xr-x 1    0        0             3260 Nov 26 22:50 /lib/iptables/libipt_FTOS.so
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /lib/iptables/libipt_LOG.so
-rwxr-xr-x 1    0        0             3212 Nov 26 22:50 /lib/iptables/libipt_MARK.so
-rwxr-xr-x 1    0        0             3648 Nov 26 22:50 /lib/iptables/libipt_MASQUERADE.so
-rwxr-xr-x 1    0        0             2364 Nov 26 22:50 /lib/iptables/libipt_MIRROR.so
-rwxr-xr-x 1    0        0             3680 Nov 26 22:50 /lib/iptables/libipt_REDIRECT.so
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /lib/iptables/libipt_REJECT.so
-rwxr-xr-x 1    0        0             3576 Nov 26 22:50 /lib/iptables/libipt_SAME.so
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /lib/iptables/libipt_SNAT.so
-rwxr-xr-x 1    0        0             3460 Nov 26 22:50 /lib/iptables/libipt_TCPMSS.so
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /lib/iptables/libipt_TOS.so
-rwxr-xr-x 1    0        0             3836 Nov 26 22:50 /lib/iptables/libipt_TTL.so
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /lib/iptables/libipt_ULOG.so
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /lib/iptables/libipt_ah.so
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /lib/iptables/libipt_esp.so
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /lib/iptables/libipt_icmp.so
-rwxr-xr-x 1    0        0             3560 Nov 26 22:50 /lib/iptables/libipt_iplimit.so
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /lib/iptables/libipt_length.so
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /lib/iptables/libipt_limit.so
-rwxr-xr-x 1    0        0             3712 Nov 26 22:50 /lib/iptables/libipt_mac.so
-rwxr-xr-x 1    0        0             3648 Nov 26 22:50 /lib/iptables/libipt_mark.so
-rwxr-xr-x 1    0        0             1632 Nov 26 22:50 /lib/iptables/libipt_multiport.so
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /lib/iptables/libipt_owner.so
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /lib/iptables/libipt_psd.so
-rwxr-xr-x 1    0        0             3828 Nov 26 22:50 /lib/iptables/libipt_size.so
-rwxr-xr-x 1    0        0             2412 Nov 26 22:50 /lib/iptables/libipt_standard.so
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /lib/iptables/libipt_state.so
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /lib/iptables/libipt_string.so
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /lib/iptables/libipt_tcp.so
-rwxr-xr-x 1    0        0             3988 Nov 26 22:50 /lib/iptables/libipt_tcpmss.so
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /lib/iptables/libipt_tos.so
-rwxr-xr-x 1    0        0             3952 Nov 26 22:50 /lib/iptables/libipt_ttl.so
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /lib/iptables/libipt_udp.so
-rwxr-xr-x 1    0        0             2372 Nov 26 22:50 /lib/iptables/libipt_unclean.so
-rwxr-xr-x 1    0        0             3960 Nov 26 22:50 /lib/ipsecpass.so
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /lib/libupnp.so
-rw-r--r-- 1    0        0             4096 Sep  9 2003 /lib/libpthread-0.9.so
lrwxrwxrwx 1    0        0               37 Nov 26 22:50 /lib/libqDecoder.so  -> ../usr/local/trend/lib/libqDecoder.so
lrwxrwxrwx 1    0        0               34 Nov 26 22:50 /lib/libglcfg.so  -> ../usr/local/trend/lib/libglcfg.so
lrwxrwxrwx 1    0        0               36 Nov 26 22:50 /lib/libglcntrl.so  -> ../usr/local/trend/lib/libglcntrl.so
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /lib/librc4enc.so
-rw-r--r-- 1    0        0             4096 Sep  8 2003 /lib/libz.so.1.1.3
-rw-r--r-- 1    0        0             4096 Sep  8 2003 /lib/libutil-2.2.5.so
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /lib/ld-2.2.5.so
-rw-r--r-- 1    0        0             4096 Sep  8 2003 /lib/libnss_dns-2.2.5.so
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /lib/libc-2.2.5.so
-rw-r--r-- 1    0        0             4096 Sep  8 2003 /lib/libdl-2.2.5.so
-rw-r--r-- 1    0        0             4096 Sep  8 2003 /lib/libresolv-2.2.5.so
-rw-r--r-- 1    0        0             4096 Sep  8 2003 /lib/libnsl-2.2.5.so
-rw-r--r-- 1    0        0             4096 Sep  8 2003 /lib/libcrypt-2.2.5.so
-rw-r--r-- 1    0        0             4096 Sep  8 2003 /lib/libnss_files-2.2.5.so
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /lib/libuuid.so.1.2
lrwxrwxrwx 1    0        0               11 Nov 26 22:50 /lib/ld.so.1  -> ld-2.2.5.so
-rw-r--r-- 1    0        0             4096 Sep  8 2003 /lib/libm-2.2.5.so
lrwxrwxrwx 1    0        0               21 Nov 26 22:50 /lib/libnss_files.so.2  -> libnss_files-2.2.5.so
lrwxrwxrwx 1    0        0               18 Nov 26 22:50 /lib/libresolv.so.2  -> libresolv-2.2.5.so
lrwxrwxrwx 1    0        0               16 Nov 26 22:50 /lib/libutil.so.1  -> libutil-2.2.5.so
-rw-r--r-- 1    0        0             4096 Sep  8 2003 /lib/libstdc++.so.5.0.1
lrwxrwxrwx 1    0        0               15 Nov 26 22:50 /lib/libnsl.so.1  -> libnsl-2.2.5.so
lrwxrwxrwx 1    0        0               14 Nov 26 22:50 /lib/libdl.so.2  -> libdl-2.2.5.so
lrwxrwxrwx 1    0        0               19 Nov 26 22:50 /lib/libnss_dns.so.2  -> libnss_dns-2.2.5.so
lrwxrwxrwx 1    0        0               13 Nov 26 22:50 /lib/libc.so.6  -> libc-2.2.5.so
lrwxrwxrwx 1    0        0               14 Nov 26 22:50 /lib/libuuid.so.1  -> libuuid.so.1.2
lrwxrwxrwx 1    0        0               14 Nov 26 22:50 /lib/libuuid.so  -> libuuid.so.1.2
-rw-r--r-- 1    0        0             4096 Sep  8 2003 /lib/libgcc_s.so.1
lrwxrwxrwx 1    0        0               11 Nov 26 22:50 /lib/ld-linux.so.2  -> ld-2.2.5.so
lrwxrwxrwx 1    0        0               13 Nov 26 22:50 /lib/libm.so.6  -> libm-2.2.5.so
lrwxrwxrwx 1    0        0               18 Nov 26 22:50 /lib/libstdc++.so.5  -> libstdc++.so.5.0.1
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /lib/libcrypt.so.1  -> libcrypt-2.2.5.so
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /lib/libpthread.so.0  -> libpthread-0.9.so
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /sbin/
lrwxrwxrwx 1    0        0               14 Nov 26 22:50 /sbin/halt  -> ../bin/busybox
lrwxrwxrwx 1    0        0               14 Nov 26 22:50 /sbin/init  -> ../bin/busybox
lrwxrwxrwx 1    0        0               14 Nov 26 22:50 /sbin/insmod  -> ../bin/busybox
lrwxrwxrwx 1    0        0               14 Nov 26 22:50 /sbin/klogd  -> ../bin/busybox
lrwxrwxrwx 1    0        0               14 Nov 26 22:50 /sbin/lsmod  -> ../bin/busybox
lrwxrwxrwx 1    0        0               14 Nov 26 22:50 /sbin/modprobe  -> ../bin/busybox
lrwxrwxrwx 1    0        0               14 Nov 26 22:50 /sbin/reboot  -> ../bin/busybox
lrwxrwxrwx 1    0        0               14 Nov 26 22:50 /sbin/syslogd  -> ../bin/busybox
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /sbin/brctl
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /sbin/udhcpc
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /sbin/ip
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /sbin/tc
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /sbin/iptables
lrwxrwxrwx 1    0        0               16 Nov 26 22:50 /sbin/getty  -> ../bin/tinylogin
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /sbin/arp
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /sbin/ifconfig
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /sbin/route
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /sbin/mii-tool
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /sbin/ebtables
-rwsr-xr-x 1    0        0             4096 Nov 26 22:50 /sbin/swmii-tool
-r-xr-xr-x 1    0        0             4096 Nov 26 22:50 /sbin/glcntrl
-r-xr-xr-x 1    0        0             4096 Nov 26 22:50 /sbin/gldaemon
-r-xr-xr-x 1    0        0              618 Nov 26 22:45 /sbin/gldaemon.sh
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /sbin/ath_drv_api
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /tmp/
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /usr/
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /usr/bin/
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/basename  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/chvt  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/clear  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/cut  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/dirname  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/du  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/env  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/expr  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/find  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/free  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/head  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/id  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/killall  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/logger  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/mask2prefix  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/mkfifo  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/printf  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/reset  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/sort  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/tail  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/tr  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/traceroute  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/tty  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/uniq  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/uptime  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/wc  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/which  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/whoami  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/xargs  -> ../../bin/busybox
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/bin/yes  -> ../../bin/busybox
-rwxr-xr-x 1    0        0             2027 Nov 26 22:50 /usr/bin/dumpleases
lrwxrwxrwx 1    0        0               19 Nov 26 22:50 /usr/bin/passwd  -> ../../bin/tinylogin
-rwxr-xr-x 1    0        0             3552 Nov 26 22:50 /usr/bin/setsid
-rwxr-xr-x 1    0        0             3856 Nov 26 22:50 /usr/bin/notify_upnp
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/bin/notify_para
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/bin/notify_dns
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/bin/mtd4_erase
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/bin/mtd5_erase
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/bin/timeoutsctl
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/bin/firm-check
lrwxrwxrwx 1    0        0               10 Nov 26 22:50 /usr/bin/firm-download  -> firm-check
lrwxrwxrwx 1    0        0               10 Nov 26 22:50 /usr/bin/firm-update  -> firm-check
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/bin/auto-updated
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/bin/wget
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/bin/upnpd
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/bin/reaim
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/bin/security-check
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/bin/security-get-version
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/bin/security-download
-rwxr-xr-x 1    0        0             3996 Nov 26 22:50 /usr/bin/firm-security-download
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/bin/security-config
-rwxr-xr-x 1    0        0             3516 Nov 26 22:50 /usr/bin/flash_write_end
-rwxr-xr-x 1    0        0             4096 Dec  8 2004 /usr/bin/bridge.sh
-rwxr-xr-x 1    0        0              588 Oct 29 2004 /usr/bin/dhcpserver
-rwxr-xr-x 1    0        0              688 Oct 29 2004 /usr/bin/dns
-rwxr-xr-x 1    0        0             4096 Nov 14 11:47 /usr/bin/dns-relay
-rwxr-xr-x 1    0        0              829 Oct 29 2004 /usr/bin/icmpstealth
-rwxr-xr-x 1    0        0              318 Oct 29 2004 /usr/bin/inetd
-rwxr-xr-x 1    0        0             3521 Oct 29 2004 /usr/bin/iplimit_sh
-rwxr-xr-x 1    0        0              985 Nov 26 2004 /usr/bin/iptdev
-rwxr-xr-x 1    0        0             2510 Oct 29 2004 /usr/bin/napt
-rwxr-xr-x 1    0        0             1447 Oct 29 2004 /usr/bin/netbios-filter
-rwxr-xr-x 1    0        0             1783 Oct 29 2004 /usr/bin/network-pre-setup.sh
-rwxr-xr-x 1    0        0             3362 Oct 29 2004 /usr/bin/network-setup-VR11A.sh
-rwxr-xr-x 1    0        0             4096 Sep  2 11:03 /usr/bin/network-setup.sh
-rwxr-xr-x 1    0        0              807 Oct 29 2004 /usr/bin/notify_voip
-rwxr-xr-x 1    0        0             1236 Sep  2 11:03 /usr/bin/ntpc
-rwxr-xr-x 1    0        0             1673 Oct 29 2004 /usr/bin/port_forward
-rwxr-xr-x 1    0        0             1341 Oct 29 2004 /usr/bin/pppoa.sh
-rw-r--r-- 1    0        0              797 Feb  3 2005 /usr/bin/pppoe-comfunc
-rwxr-xr-x 1    0        0             4096 Feb  4 2005 /usr/bin/pppoe-manual
-rwxr-xr-x 1    0        0             4096 Dec 14 2004 /usr/bin/pppoe.sh
-rwxr-xr-x 1    0        0             4096 Oct 29 2004 /usr/bin/remote_mainte
-rwxr-xr-x 1    0        0             4096 Dec 24 2004 /usr/bin/rip
-rwxr-xr-x 1    0        0             1453 Sep  2 11:03 /usr/bin/route_sec
-rwxr-xr-x 1    0        0             2796 Oct 29 2004 /usr/bin/router.sh
-rwxr-xr-x 1    0        0             2035 Oct 29 2004 /usr/bin/server_port
-rwxr-xr-x 1    0        0              359 Oct 29 2004 /usr/bin/syslog
-rwxr-xr-x 1    0        0              398 Oct 29 2004 /usr/bin/tcpstealth
-rwxr-xr-x 1    0        0              826 Oct 29 2004 /usr/bin/udpstealth
-rwxr-xr-x 1    0        0              556 Oct 29 2004 /usr/bin/upnp_cp.sh
-rwxr-xr-x 1    0        0             1664 Nov 26 2004 /usr/bin/upnp_igd.sh
-rwxr-xr-x 1    0        0             1242 Oct 29 2004 /usr/bin/upnp_wanif
-rwxr-xr-x 1    0        0              384 Oct 29 2004 /usr/bin/upnpd_port_add
-rwxr-xr-x 1    0        0              384 Oct 29 2004 /usr/bin/upnpd_port_del
-rwxr-xr-x 1    0        0              170 Oct 29 2004 /usr/bin/upnpd_port_flush
-rwxr-xr-x 1    0        0              740 Oct 29 2004 /usr/bin/virtual_computer
-rwxr-xr-x 1    0        0             4096 Oct 29 2004 /usr/bin/voip_call_shaping
-rwxr-xr-x 1    0        0             1490 Oct 29 2004 /usr/bin/voip_port
-rwxr-xr-x 1    0        0             1076 Oct 29 2004 /usr/bin/vpnpass.sh
-r-sr-sr-x 1    0        0             4096 Nov 26 22:50 /usr/bin/file_update
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /usr/sbin/
lrwxrwxrwx 1    0        0               17 Nov 26 22:50 /usr/sbin/chroot  -> ../../bin/busybox
-r-sr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/sbin/pppd
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/sbin/pppstats
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/sbin/pppoe
-r-xr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/sbin/thttpd
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/sbin/udhcpd
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/sbin/inetd
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/sbin/in.telnetd
-rwxr-xr-x 1    0        0             3504 Nov 26 22:50 /usr/sbin/mkusers
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/sbin/ftpd
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/sbin/ntpclient
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/sbin/syslogd
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/sbin/nkf
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/sbin/notify_ip
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/sbin/wgetctld
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/sbin/ipsecpassset
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/sbin/ipsecpassctld
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/sbin/dhcpd
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/sbin/routed
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/sbin/dnrd
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/sbin/gnas
-rwxr-xr-x 1    0        0             4096 Oct 29 2004 /usr/sbin/Dyn_dns_sh
-rwxr-xr-x 1    0        0             4096 Nov  8 11:35 /usr/sbin/adsl-connect
-rwxr-xr-x 1    0        0             4096 Sep  2 11:03 /usr/sbin/adsl-start
-rwxr-xr-x 1    0        0             2210 Sep  2 11:03 /usr/sbin/adsl-status
-rwxr-xr-x 1    0        0             3074 Sep  2 11:03 /usr/sbin/adsl-stop
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/sbin/fltreq
-rwxr-xr-x 1    0        0               33 Oct 29 2004 /usr/sbin/kill-pppoe
-rwxr-xr-x 1    0        0             4096 Sep  2 11:03 /usr/sbin/pppoa-connect
-rwxr-xr-x 1    0        0             4096 Sep  2 11:03 /usr/sbin/pppoa-start
-rwxr-xr-x 1    0        0             2217 Sep  2 11:03 /usr/sbin/pppoa-status
-rwxr-xr-x 1    0        0             2097 Sep  2 11:03 /usr/sbin/pppoa-stop
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/sbin/ledreq
-rw-r--r-- 1    0        0             4096 Nov 26 22:50 /usr/sbin/_rom_file_bin
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/sbin/rom-up
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /usr/share/
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /usr/share/udhcpc/
-rwxr-xr-x 1    0        0              588 Nov 26 22:50 /usr/share/udhcpc/default.bound
-rwxr-xr-x 1    0        0               77 Nov 26 22:50 /usr/share/udhcpc/default.deconfig
-rwxr-xr-x 1    0        0              588 Nov 26 22:50 /usr/share/udhcpc/default.renew
-rwxr-xr-x 1    0        0              272 Nov 26 22:50 /usr/share/udhcpc/default.script
drwxr-xr-x 1    0        0                0 Nov 26 22:46 /usr/share/locale/
drwxr-xr-x 1    0        0                0 Nov 26 22:46 /usr/share/locale/ja/
drwxr-xr-x 1    0        0                0 Nov 26 22:46 /usr/share/locale/ja/LC_MESSAGES/
-rw-r--r-- 1    0        0              337 Nov 26 22:46 /usr/share/locale/ja/LC_MESSAGES/GLLog.mo
-rw-r--r-- 1    0        0             1556 Nov 26 22:46 /usr/share/locale/ja/LC_MESSAGES/NetTC.mo
-rw-r--r-- 1    0        0              832 Nov 26 22:46 /usr/share/locale/ja/LC_MESSAGES/ah_options.mo
-rw-r--r-- 1    0        0              121 Nov 26 22:46 /usr/share/locale/ja/LC_MESSAGES/anti_hacker_log.mo
-rw-r--r-- 1    0        0              343 Nov 26 22:46 /usr/share/locale/ja/LC_MESSAGES/av_options.mo
-rw-r--r-- 1    0        0              273 Nov 26 22:46 /usr/share/locale/ja/LC_MESSAGES/avlog.mo
-rw-r--r-- 1    0        0             2259 Nov 26 22:46 /usr/share/locale/ja/LC_MESSAGES/connection_settings.mo
-rw-r--r-- 1    0        0             2723 Nov 26 22:46 /usr/share/locale/ja/LC_MESSAGES/debug_log.mo
-rw-r--r-- 1    0        0              836 Nov 26 22:46 /usr/share/locale/ja/LC_MESSAGES/email_notify.mo
-rw-r--r-- 1    0        0              767 Nov 26 22:46 /usr/share/locale/ja/LC_MESSAGES/fwupgrade.mo
-rw-r--r-- 1    0        0              804 Nov 26 22:46 /usr/share/locale/ja/LC_MESSAGES/index.htm.mo
-rw-r--r-- 1    0        0             1139 Nov 26 22:46 /usr/share/locale/ja/LC_MESSAGES/ip_sharing.mo
-rw-r--r-- 1    0        0             1784 Nov 26 22:46 /usr/share/locale/ja/LC_MESSAGES/ipfwd.mo
-rw-r--r-- 1    0        0             4096 Nov 26 22:46 /usr/share/locale/ja/LC_MESSAGES/isgl.mo
-rw-r--r-- 1    0        0             2438 Nov 26 22:46 /usr/share/locale/ja/LC_MESSAGES/isp_settings.mo
-rw-r--r-- 1    0        0             1250 Nov 26 22:46 /usr/share/locale/ja/LC_MESSAGES/ondemand_connect.mo
-rw-r--r-- 1    0        0              187 Nov 26 22:46 /usr/share/locale/ja/LC_MESSAGES/passwd.mo
-rw-r--r-- 1    0        0               63 Nov 26 22:46 /usr/share/locale/ja/LC_MESSAGES/protection_check.mo
-rw-r--r-- 1    0        0              824 Nov 26 22:46 /usr/share/locale/ja/LC_MESSAGES/proxy_setting.mo
-rw-r--r-- 1    0        0             3548 Nov 26 22:46 /usr/share/locale/ja/LC_MESSAGES/quicksetup.mo
-rw-r--r-- 1    0        0              325 Nov 26 22:46 /usr/share/locale/ja/LC_MESSAGES/support.mo
-rw-r--r-- 1    0        0              900 Nov 26 22:46 /usr/share/locale/ja/LC_MESSAGES/ug_status.mo
-rw-r--r-- 1    0        0              461 Nov 26 22:46 /usr/share/locale/ja/LC_MESSAGES/update_log.mo
drwxr-xr-x 1    0        0                0 Nov 26 22:46 /usr/local/
drwxr-xr-x 1    0        0                0 Nov 26 22:46 /usr/local/trend/
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /usr/local/trend/bin/
-rwxr-xr-x 1    0        0              795 Oct 29 2004 /usr/local/trend/bin/daemon_control.sh
-r-xr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/local/trend/bin/glcfg
-r-xr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/local/trend/bin/glcfg_migrate
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/local/trend/bin/getencid
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/local/trend/bin/md5
-rwxr-xr-x 1    0        0             3968 Nov 26 22:50 /usr/local/trend/bin/trans
-r-xr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/local/trend/bin/dmgr
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/local/trend/bin/isgl
-rwxr-xr-x 1    0        0             4096 Sep  2 11:03 /usr/local/trend/bin/update_loader.sh
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/local/trend/bin/my_wait
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/local/trend/bin/parser_ini
-rwxr-xr-x 1    0        0             3684 Nov 26 22:50 /usr/local/trend/bin/mylock1
-rwxr-xr-x 1    0        0              490 Oct 29 2004 /usr/local/trend/bin/query_update_progress.sh
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/local/trend/bin/httpchk
-rwxr-xr-x 1    0        0             1410 Oct 29 2004 /usr/local/trend/bin/force_update.sh
-rwxr-xr-x 1    0        0             1076 Oct 29 2004 /usr/local/trend/bin/force_redir_cancel.sh
-rwxr-xr-x 1    0        0             4096 Oct 29 2004 /usr/local/trend/bin/chkver.sh
-rwxr-xr-x 1    0        0             3680 Nov 26 22:50 /usr/local/trend/bin/chk_ptn_eng
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/local/trend/bin/logon
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/local/trend/bin/redir
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /usr/local/trend/lib/
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /usr/local/trend/lib/log/
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/local/trend/lib/log/intrusionlog.so
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/local/trend/lib/log/default.so
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/local/trend/lib/log/vlog.so
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/local/trend/lib/log/updatelog.so
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /usr/local/trend/lib/alert/
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/local/trend/lib/alert/mail.so
-r-xr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/local/trend/lib/libqDecoder.so
-r-xr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/local/trend/lib/libglcfg.so
-r-xr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/local/trend/lib/libglcntrl.so
-rwxr-xr-x 1    0        0             3362 Nov 26 22:50 /usr/local/trend/lib/libvlog.so
-r-xr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/local/trend/lib/libdmgr_c.so
lrwxrwxrwx 1    0        0               19 Nov 26 22:50 /usr/local/trend/lib/libvsapi.so  -> /flash2/libvsapi.so
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /usr/local/trend/sbin/
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /usr/local/trend/sbin/GLLog
lrwxrwxrwx 1    0        0               11 Nov 26 22:50 /usr/local/trend/etc  -> /flash2/etc
drwxr-xr-x 1    0        0                0 Nov 26 22:46 /usr/local/www/
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /usr/local/www/EmailNotifications/
-rw-r--r-- 1    0        0             1328 Oct 29 2004 /usr/local/www/EmailNotifications/hacker_notify.txt
-rw-r--r-- 1    0        0             1256 Jan  6 2005 /usr/local/www/EmailNotifications/regist_error_msg.en_US
-rw-r--r-- 1    0        0             1256 Jan  6 2005 /usr/local/www/EmailNotifications/need_regist_msg.en_US
-rw-r--r-- 1    0        0              870 Sep  2 11:03 /usr/local/www/EmailNotifications/need_update_msg.en_US
-rw-r--r-- 1    0        0              366 Oct 29 2004 /usr/local/www/EmailNotifications/communication_error_msg.en_US
-rw-r--r-- 1    0        0             1238 Sep  2 11:03 /usr/local/www/EmailNotifications/update_notify.txt
-rw-r--r-- 1    0        0             1115 Sep  2 11:03 /usr/local/www/EmailNotifications/check_notify.txt
drwxr-xr-x 1    0        0                0 Nov 26 22:46 /usr/lib/
drwxr-xr-x 1    0        0                0 Nov 26 22:46 /usr/lib/locale/
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /usr/lib/locale/ja/
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /usr/lib/locale/ja/LC_MESSAGES/
-rw-r--r-- 1    0        0               93 Oct 29 2004 /usr/lib/locale/ja/LC_MESSAGES/SYS_LC_MESSAGES
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /var/
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /home/
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /home/www/
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /flash/
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /flash/lib/
-rw-r--r-- 1    0        0             4096 Nov 26 22:50 /flash/lib/dsr.o
-rw-r--r-- 1    0        0             4096 Nov 26 22:50 /flash/lib/csr.o
-rw-r--r-- 1    0        0             4096 Nov 26 22:50 /flash/lib/ixp425_eth.o
-rw-r--r-- 1    0        0             4096 Nov 26 22:50 /flash/lib/ath.o
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /flash/conf/
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /flash/log/
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /flash/rp-pppoe.so
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /flash/VoIP.BIN
-rw-r--r-- 1    0        0             4096 Nov 26 22:50 /flash/avdsp.o
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /flash/PARA.BIN
-rwxr-xr-x 1    0        0             4096 Nov 26 22:50 /flash/SYS.BIN
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /image/
-rwxr-xr-x 1    0        0             1211 Oct 20 19:31 /image/dev.tgz
-rw-r--r-- 1    0        0             4096 Nov 26 22:50 /image/etc.tgz
-rw-r--r-- 1    0        0              259 Nov 26 22:50 /image/var.tgz
-rw-r--r-- 1    0        0             4096 Nov 26 22:50 /image/www.tgz
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /mnt/
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /mnt/disk2/
drwxr-xr-x 1    0        0                0 Nov 26 22:46 /mnt/disk1/
drwxr-xr-x 1    0        0                0 Nov 26 22:46 /mnt/disk3/
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /proc/
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /www/
drwxr-xr-x 1    0        0                0 Nov 26 22:50 /flash2/
lrwxrwxrwx 1    0        0               11 Nov 26 22:50 /linuxrc  -> bin/busybox
-rwxr-xr-x 1    0        0               36 Oct 29 2004 /.profile

この中の /image/etc.tgz を取り出して、解凍してみます。

[toyota@skywalker]% jffs2reader rootimg2.bin -f /image/etc.tgz > etc.tgz
[toyota@skywalker]% tar xvfz etc.tgz

tar コマンドで予期せぬ EOF のエラーが出るようですが、取り出すことはできました。 中を見てみます。

[toyota@skywalker]% tree etc
etc
|-- dnrd
|-- ethertypes
|-- fstab
|-- inetd.conf
|-- init.d
|   |-- rc.startup
|   `-- rcS
|-- inittab
|-- linuxigd
|   `-- gateconnSCPD.xml
|-- passwd
|-- protocols
|-- rgw.conf
|-- rpc
|-- securetty
|-- services
`-- udhcpd.conf

3 directories, 14 files


passwd ファイルには root, nobody, mainte, engineer ユーザが存在します。 nobody ユーザ以外はパスワードハッシュがありますし、 rc.startup では inetd を起動しているようなので、ひょっとしたらログインできるのかも しれません。

もう一つのファイル kernel.bin.gz は gunzip で解凍します。 kernel ファイル ですので、あとは眺めるだけです。kernel の詳細なバージョンは

Linux version 2.4.18_mvl30-ixdp425 (nishimura@wpc2272) (gcc 3.2.1 20020930 (MontaVista)) #1 2005 11月 26日 土曜日 22:37:38 JST

です。休日出勤ご苦労様です。


Team Yokohama X-VACCINE & Tatsuyoshi Networks
もどる