Hi! I have an old IP camera D-Link DCS5220. The software is closed, not allowing any access to the hardware settings. Mention of any experiments with openwrt for this model I also did not find.
Although the source firmware codes are available for download at the https://sourceforge.net/projects/officialdlinkfirmware/files/DCS-5220/.
Tell me how I can access the configuration files of the camera? Inside this camera there is a mini PCI module with RT2560F chip, which is failed now. I decided to replace the old module with a new one Broadcom BCM94322, with support for 802.11, but I'm afraid that the system will not find a driver for it.
With the hope of my own head.DLL and hands.DLL, I managed telnet- access to the camera. There are some screen with dmsg and ps ax executed on DCS5220.
~ $ dmesg
Linux version 2.4.26-vrs1 (root@rd1-1) (gcc version 3.3.2) #1742 Fri Jul 20 09:2 0:51 CST 2007
CPU: FA526id(wb) revision 1
Machine: Vivotek VVTK1000
Ignoring unrecognised tag 0x00000000
Ignoring unrecognised tag 0x00000000
On node 0 totalpages: 6144
zone(0): 6144 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: root=/dev/ram rw initrd=0x800000,4194304 mem=24M ahbclk=110 592000 pciclk=27648000
Relocating machine vectors to 0xffff0000
IRQ timer at interrupt number 0x08 clock 55296000
Calibrating delay loop... 136.80 BogoMIPS
Memory: 24MB = 24MB total
Memory: 18172KB available (1496K code, 430K data, 68K init)
Dentry cache hash table entries: 4096 (order: 3, 32768 bytes)
Inode cache hash table entries: 2048 (order: 2, 16384 bytes)
Mount cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 8192 (order: 3, 32768 bytes)
CPU: Testing write buffer: pass
POSIX conformance testing by UNIFIX
PCI: bus0: Fast back to back transfers disabled
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
Initializing RT netlink socket
Starting kswapd
Journalled Block Device driver loaded
JFFS2 version 2.2. (C) 2001-2003 Red Hat, Inc.
pty: 256 Unix98 ptys configured
Serial driver version 5.05c (2001-07-08) with no serial options enabled
ttyS00 at 0xf9890000 (irq = 3) is a <NULL>
ttyS01 at 0xf98b0000 (irq = 4) is a <NULL>
RAMDISK driver initialized: 16 RAM disks of 8192K size 1024 blocksize
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
Uniform Multi-Platform E-IDE driver Revision: 7.00beta4-2.4
ide: Assuming 33MHz system bus speed for PIO modes; override with idebus=xx
VVTK1000 flash device: 800000 at 10000000
init_vvtk1000_flash_map() -- type: cfi_probe
VVTK1000 flash: Found 1 x16 devices at 0x0 in 8-bit mode
Amd/Fujitsu Extended Query Table at 0x0040
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
Using VVTK1000 partition definition
Creating 2 MTD partitions on "VVTK1000 flash":
0x00000000-0x00600000 : "kernel"
0x00600000-0x00800000 : "jffs2"
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP, IGMP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 2048 bind 4096)
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
Fast Floating Point Emulator V0.9 (c) Peter Teichmann.
RAMDISK: Compressed image found at block 0
Freeing initrd memory: 4096K
VFS: Mounted root (ext2 filesystem).
Freeing init memory: 68K
IRQ UART at interrupt number 0x3
WDT device driver version 1.0.0.1
GPIOI2C device driver version 1.0.0.5
RTC device driver version 1.0.0.1
GPIO Device Driver version 1.1.0.0.
I2C slave device driver version 1.1.0.0. (H/W Rev. 0x10500)
Queue driver installed !!
MTR device driver version 1.0.0.4
I2S w/ UDA1345TS driver v 1.1.0.1. Copyright 2004 Vivotek, Inc.
i2s_intc_value: 0x0000a431
i2s_intc_value: 0x0000a431
hwinfo 1.1.0.0 initialized.
CFC Device Driver version 1.0.0.0.
VVDC_Clk_init_module: VVDC Clock Delay is 0x00503030.
VVDC_Clk_cleanup_module: Module removed ok!
8139too Fast Ethernet driver 0.9.26
eth0: RealTek RTL8139 at 0xc28b7000, 00:ab:cd:ab:cd:ef, IRQ 1
eth0: Identified 8139 chip type 'RTL-8100B/8139D'
eth0: link up, 100Mbps, full-duplex, lpa 0x45E1
enable_irq(31) unbalanced from c2880b18
enable_irq(29) unbalanced from c288639c
enable_irq(30) unbalanced from c2884330
enable_irq(7) unbalanced from c2896c54
upnpdd: unhandled page fault at pc=0x0000c840, lr=0xbf7ffd40 (bad address=0xdf7f fcbc, code 5)
pc : [<0000c840>] lr : [<bf7ffd40>] Tainted: P
sp : bf7ffc54 ip : 07ffffff fp : 0001bec0
r10: 000170e8 r9 : 00000000 r8 : 00002802
r7 : 00017550 r6 : 00000000 r5 : df7ffd3c r4 : 00000001
r3 : 00000020 r2 : 00000040 r1 : 00000006 r0 : bf7ffd40
Flags: nzCv IRQs on FIQs on Mode USER_32 Segment user
Control: 397F Table: 00B0C000 DAC: 00000015
~ $
~ $ ps ax
PID Uid VmSize Stat Command
1 root 344 S init
2 root SW [keventd]
3 root SWN [ksoftirqd_CPU0]
4 root SW [kswapd]
5 root SW [bdflush]
6 root SW [kupdated]
7 root SW [mtdblockd]
30 root SWN [jffs2_gcd_mtd1]
80 root 260 S /sbin/watchdog 60 5
89 root 200 S /usr/sbin/hresetd /dev/gpio4
179 root 320 S /sbin/syslogd -m 0 -o 64000
196 root 336 S /usr/sbin/drmd
198 root 336 S /usr/sbin/drmd
199 root 336 S /usr/sbin/drmd
233 root 312 S /usr/sbin/inetd /etc/inetd.conf
254 root 316 S /usr/sbin/urecorder
265 root 320 S /usr/sbin/smbrecorder
288 root 260 S /usr/sbin/swatchdog -t 60 -p /var/run/swatchdog.farseer.pid -a /usr/bin/soft-reboot-bg
293 root 2716 S /usr/sbin/farseer.out -d -c /tmp/farseer.fifo
294 root 2716 S /usr/sbin/farseer.out -d -c /tmp/farseer.fifo
296 root 2716 S /usr/sbin/farseer.out -d -c /tmp/farseer.fifo
297 root 2716 S /usr/sbin/farseer.out -d -c /tmp/farseer.fifo
298 root 2716 S /usr/sbin/farseer.out -d -c /tmp/farseer.fifo
299 root 2716 S /usr/sbin/farseer.out -d -c /tmp/farseer.fifo
300 root 2716 S /usr/sbin/farseer.out -d -c /tmp/farseer.fifo
321 root 2716 S /usr/sbin/farseer.out -d -c /tmp/farseer.fifo
322 root 2716 S /usr/sbin/farseer.out -d -c /tmp/farseer.fifo
323 root 2716 S /usr/sbin/farseer.out -d -c /tmp/farseer.fifo
329 root 2716 S /usr/sbin/farseer.out -d -c /tmp/farseer.fifo
330 root 2716 S /usr/sbin/farseer.out -d -c /tmp/farseer.fifo
337 root 2716 S /usr/sbin/farseer.out -d -c /tmp/farseer.fifo
338 root 2716 S /usr/sbin/farseer.out -d -c /tmp/farseer.fifo
354 root 372 S /usr/sbin/crond -l 0
435 root 188 S /usr/sbin/ledctrl /dev/cfc2 1000000
454 root 836 S /bin/sh /usr/bin/detectnet
458 root 364 S /sbin/getty -L ttyS0 38400 vt100
21042 root 372 S telnetd
21045 admin 440 S -sh
21207 root Z [sh]
21208 root 268 S sleep 2
21212 admin 364 R ps ax
~ $ ls /dev/
cfc0 dsp0 gpio2 gpio_i2c hda13 hda4 i2c mtd0 ptmx ptyp4 ram2 stdin tty1 tty7 ttyp1 ttyp7 watchdog
cfc1 dsp1 gpio3 hda hda14 hda5 i2c_slave mtd1 pts ptyp5 ram3 stdout tty2 ttyAM0 ttyp2 urandom wdt
cfc2 fd gpio4 hda1 hda15 hda6 i2s mtdblock1 ptyp0 ptyp6 ramdisk tracer tty3 ttyAM1 ttyp3 vma_ae zero
cmmap gpio gpio5 hda10 hda16 hda7 log mtr1 ptyp1 ptyp7 random tracerU tty4 ttyS0 ttyp4 vma_be
console gpio0 gpio6 hda11 hda2 hda8 mem null ptyp2 ram0 rtc tty tty5 ttyS1 ttyp5 vma_me
dsp gpio1 gpio7 hda12 hda3 hda9 mmap ppp ptyp3 ram1 stderr tty0 tty6 ttyp0 ttyp6 vma_vpe
~ $
~ $ cat /proc/cpuinfo
Processor : FA526id(wb) rev 1 (v4l)
BogoMIPS : 136.80
Features : swp half thumb
Hardware : Vivotek VVTK1000
Revision : 0000
Serial : 0000000000000000
~ $ lsmod
Module Size Used by Tainted: P
8139too 12460 1
mii 2344 0 [8139too]
cfc 1264 1
hwinfo 2200 0 (unused)
vaudio 4112 1
motor 5424 1
mmap 1136 1
cmmap 1128 1
vma_ae 2792 0 (unused)
vma_be 2856 2
vma_me 2616 4
vma_vpe 4040 1
i2c_slave 3304 0 (unused)
gpio 2552 8
rtc 2908 0 (unused)
gpio_i2c 2584 1 [rtc]
wdt 992 1
~ $ uname -a
Linux Network-Camera 2.4.26-vrs1 #1742 Fri Jul 20 09:20:51 CST 2007 armv4l unknown
~ # df -h
Filesystem Size Used Available Use% Mounted on
/dev/ramdisk 4.9M 4.7M 0 100% /
/dev/mtdblock1 2.0M 896.0k 1.1M 44% /mnt/flash
none 10.0M 16.0k 10.0M 0% /mnt/ramdisk
Аnd now I'm in search for serial pin (and gpio too 
) on camera board.
There is a serial port output in the code spoiler:
The system is going down NOW !!
Sending SIGTERM to all processes.
Sending SIGKILL to all processes.
Please stand by while rebooting the system.flushing ide devices:
Restarting system.
ARMboot 1.1.0 (Nov 23 2006 - 17:31:45)
Vivotek EVM version 1.6.0.0 (System:110592000, UART:18432000)
ARMboot code: 00000000 ~ 000355f8
DRAM Configuration:
Bank #0 at 0x10000000 32 MB
Bank #1 at 0x00000000 0 KB
Flash: 8 MB
VVTK1000 PCI Driver for ARMBoot
....Found PCI Device at (0,0,0) ID=0x4321159B
Erasing sector 1 ... ok.
.
.
ARMboot 1.1.0 (Nov 23 2006 - 17:31:45)
Vivotek EVM version 1.6.0.0 (System:110592000, UART:18432000)
ARMboot code: 00000000 ~ 000355f8
DRAM Configuration:
Bank #0 at 0x10000000 32 MB
Bank #1 at 0x00000000 0 KB
Flash: 8 MB
VVTK1000 PCI Driver for ARMBoot
....Found PCI Device at (0,0,0) ID=0x4321159B
.
.
.
.
.
.
.
.
parameter: 68 45 00503030
.
.
....Found PCI Device at (11,0,0) ID=0x813910EC
ethaddr: 00:AB:CD:AB:CD:EF
Hit any key to stop autoboot: 1 0
## Booting image at 10020000 ...
Image Name: linux-2.4.26
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 2934880 Bytes = 2866 kB = 2 MB
Load Address: 00408000
Entry Point: 00408000
Verifying Checksum ... OK
Loading Kernel Image ... OK
Starting kernel ...
Uncompressing Linux............................................................. done, booting the kernel.
Linux version 2.4.26-vrs1 (klaymen@rd1-2.vivotek.tw) (gcc version 3.3.2) #1 Mon Oct 20 20:33:14 CST 2008
CPU: FA526id(wb) revision 1
Machine: Vivotek VVTK1000
Ignoring unrecognised tag 0x00000000
Ignoring unrecognised tag 0x00000000
On node 0 totalpages: 6144
zone(0): 6144 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: root=/dev/ram rw initrd=0x800000,4194304 mem=24M ahbclk=110592000 pciclk=27648000
IRQ timer at interrupt number 0x08 clock 55296000
Calibrating delay loop... 136.80 BogoMIPS
Memory: 24MB = 24MB total
Memory: 18172KB available (1496K code, 430K data, 68K init)
Dentry cache hash table entries: 4096 (order: 3, 32768 bytes)
Inode cache hash table entries: 2048 (order: 2, 16384 bytes)
Mount cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 8192 (order: 3, 32768 bytes)
CPU: Testing write buffer: pass
POSIX conformance testing by UNIFIX
PCI: bus0: Fast back to back transfers disabled
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
Initializing RT netlink socket
Starting kswapd
Journalled Block Device driver loaded
JFFS2 version 2.2. (C) 2001-2003 Red Hat, Inc.
pty: 256 Unix98 ptys configured
Serial driver version 5.05c (2001-07-08) with no serial options enabled
ttyS00 at 0xf9890000 (irq = 3) is a <NULL>
ttyS01 at 0xf98b0000 (irq = 4) is a <NULL>
RAMDISK driver initialized: 16 RAM disks of 8192K size 1024 blocksize
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
Uniform Multi-Platform E-IDE driver Revision: 7.00beta4-2.4
ide: Assuming 33MHz system bus speed for PIO modes; override with idebus=xx
VVTK1000 flash device: 800000 at 10000000
init_vvtk1000_flash_map() -- type: cfi_probe
VVTK1000 flash: Found 1 x16 devices at 0x0 in 8-bit mode
Amd/Fujitsu Extended Query Table at 0x0040
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
Using VVTK1000 partition definition
Creating 2 MTD partitions on "VVTK1000 flash":
0x00000000-0x00600000 : "kernel"
0x00600000-0x00800000 : "jffs2"
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP, IGMP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 2048 bind 4096)
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
Fast Floating Point Emulator V0.9 (c) Peter Teichmann.
RAMDISK: Compressed image found at block 0
Freeing initrd memory: 4096K
VFS: Mounted root (ext2 filesystem).
Freeing init memory: 68K
IRQ UART at interrupt number 0x3
init started: BusyBox v1.00 (2006.01.16-08:12+0000) multi-call binary
init started: BusyBox v1.00 (2006.01.16-08:12+0000) multi-call binary
Starting pid 10, console /dev/ttyS0: '/etc/init.d/rcS'
ifconfig: Warning: cannot open /proc/net/dev. Limited output.: No such file or directory
ifconfig: eth0: error fetching interface information: Device not found
Using /drivers/wdt.o
WDT device driver version 1.0.0.1
Using /drivers/gpio_i2c.o
GPIOI2C device driver version 1.0.0.5
Using /drivers/rtc.o
RTC device driver version 1.0.0.1
Using /drivers/gpio.o
GPIO Device Driver version 1.1.0.0.
Using /drivers/i2c_slave.o
I2C slave device driver version 1.1.0.0. (H/W Rev. 0x10500)
Using /drivers/vma_vpe.o
Using /drivers/vma_me.o
Queue driver installed !!
Using /drivers/vma_be.o
Using /drivers/vma_ae.o
Using /drivers/cmmap.o
Using /drivers/mmap.o
Using /drivers/motor.o
MTR device driver version 1.0.0.4
Using /drivers/vaudio.o
I2S driver v 1.4.0.1. Copyright 2004 Vivotek, Inc.
for UDA1345
i2s_intc_value: 0x0000a430
i2s_intc_value: 0x0000a430
Using /drivers/hwinfo.o
hwinfo 1.1.0.0 initialized.
Using /drivers/cfc.o
CFC Device Driver version 1.0.0.0.
/etc/init.d/rcS: 44: /mnt/flash/patch/apply_patch: not found
Starting restore: update system configuration...
cp: unable to remove `./etc/rcK.d/K07bootlogger': Success
cp: unable to remove `./etc/rcK.d/K97smbrecord': No such file or directory
cp: unable to remove `./etc/rcK.d/K69upnpdd': No such file or directory
cp: unable to remove `./etc/rcK.d/K94watchdog': No such file or directory
cp: unable to remove `./etc/rcK.d/K44inetd': No such file or directory
cp: unable to remove `./etc/rcK.d/K88sysklogd': No such file or directory
cp: unable to remove `./etc/rcK.d/K09eventd': No such file or directory
cp: unable to remove `./etc/rcK.d/K60ddnsc': No such file or directory
cp: unable to remove `./etc/rcK.d/K67upnpigdcp': No such file or directory
cp: unable to remove `./etc/rcK.d/K20urecorder': No such file or directory
cp: unable to remove `./etc/rcK.d/K95led': No such file or directory
cp: unable to remove `./etc/rcK.d/K05heartbeat': No such file or directory
cp: unable to remove `./etc/rcK.d/K90network': No such file or directory
cp: unable to remove `./etc/rcK.d/K93hresetd': No such file or directory
cp: unable to remove `./etc/rcK.d/K96restore': No such file or directory
cp: unable to remove `./etc/rcK.d/K10farseer': No such file or directory
cp: unable to remove `./etc/rcK.d/K75netfs~': No such file or directory
cp: unable to remove `./etc/rcK.d/K40bbcrond': No such file or directory
cp: unable to remove `./etc/rcK.d/K21smbrecorder': No such file or directory
cp: unable to remove `./etc/rcK.d/K70drmd': No such file or directory
modifying root privilege...
.
The system is going down NOW !!
The system is going down NOW !!
Starting led: /dev/cfc0 1
.
Starting watchdog: .
Starting hresetd:
Sendi
Sending SIGKILL to all processes.
Please stand by while rebooting the system.
flushing ide devices:
Restarting system.
ARMboot 1.1.0 (Nov 23 2006 - 17:31:45)
Vivotek EVM version 1.6.0.0 (System:110592000, UART:18432000)
ARMboot code: 00000000 ~ 000355f8
DRAM Configuration:
Bank #0 at 0x10000000 32 MB
Bank #1 at 0x00000000 0 KB
Flash: 8 MB
VVTK1000 PCI Driver for ARMBoot
....Found PCI Device at (0,0,0) ID=0x4321159B
Erasing sector 1 ... ok.
.
.
ARMboot 1.1.0 (Nov 23 2006 - 17:31:45)
Vivotek EVM version 1.6.0.0 (System:110592000, UART:18432000)
ARMboot code: 00000000 ~ 000355f8
DRAM Configuration:
Bank #0 at 0x10000000 32 MB
Bank #1 at 0x00000000 0 KB
Flash: 8 MB
VVTK1000 PCI Driver for ARMBoot
....Found PCI Device at (0,0,0) ID=0x4321159B
ARMboot 1.1.0 (Nov 23 2006 - 17:31:45)
Vivotek EVM version 1.6.0.0 (System:110592000, UART:18432000)
ARMboot code: 00000000 ~ 000355f8
DRAM Configuration:
Bank #0 at 0x10000000 32 MB
Bank #1 at 0x00000000 0 KB
Flash: 8 MB
VVTK1000 PCI Driver for ARMBoot
....Found PCI Device at (0,0,0) ID=0x4321159B
.
.
.
.
.
.
.
.
parameter: 68 45 00503030
.
.
....Found PCI Device at (11,0,0) ID=0x813910EC
ethaddr: 00:AB:CD:AB:CD:EF
Hit any key to stop autoboot: 1 0
## Booting image at 10020000 ...
Image Name: linux-2.4.26
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 2934880 Bytes = 2866 kB = 2 MB
Load Address: 00408000
Entry Point: 00408000
Verifying Checksum ... OK
Loading Kernel Image ... OK
Starting kernel ...
Uncompressing Linux............................................................. done, booting the kernel.
Linux version 2.4.26-vrs1 (klaymen@rd1-2.vivotek.tw) (gcc version 3.3.2) #1 Mon Oct 20 20:33:14 CST 2008
CPU: FA526id(wb) revision 1
Machine: Vivotek VVTK1000
Ignoring unrecognised tag 0x00000000
Ignoring unrecognised tag 0x00000000
On node 0 totalpages: 6144
zone(0): 6144 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: root=/dev/ram rw initrd=0x800000,4194304 mem=24M ahbclk=110592000 pciclk=27648000
IRQ timer at interrupt number 0x08 clock 55296000
Calibrating delay loop... 136.80 BogoMIPS
Memory: 24MB = 24MB total
Memory: 18172KB available (1496K code, 430K data, 68K init)
Dentry cache hash table entries: 4096 (order: 3, 32768 bytes)
Inode cache hash table entries: 2048 (order: 2, 16384 bytes)
Mount cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 8192 (order: 3, 32768 bytes)
CPU: Testing write buffer: pass
POSIX conformance testing by UNIFIX
PCI: bus0: Fast back to back transfers disabled
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
Initializing RT netlink socket
Starting kswapd
Journalled Block Device driver loaded
JFFS2 version 2.2. (C) 2001-2003 Red Hat, Inc.
pty: 256 Unix98 ptys configured
Serial driver version 5.05c (2001-07-08) with no serial options enabled
ttyS00 at 0xf9890000 (irq = 3) is a <NULL>
ttyS01 at 0xf98b0000 (irq = 4) is a <NULL>
RAMDISK driver initialized: 16 RAM disks of 8192K size 1024 blocksize
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
Uniform Multi-Platform E-IDE driver Revision: 7.00beta4-2.4
ide: Assuming 33MHz system bus speed for PIO modes; override with idebus=xx
VVTK1000 flash device: 800000 at 10000000
init_vvtk1000_flash_map() -- type: cfi_probe
VVTK1000 flash: Found 1 x16 devices at 0x0 in 8-bit mode
Amd/Fujitsu Extended Query Table at 0x0040
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
Using VVTK1000 partition definition
Creating 2 MTD partitions on "VVTK1000 flash":
0x00000000-0x00600000 : "kernel"
0x00600000-0x00800000 : "jffs2"
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP, IGMP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 2048 bind 4096)
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
Fast Floating Point Emulator V0.9 (c) Peter Teichmann.
RAMDISK: Compressed image found at block 0
Freeing initrd memory: 4096K
VFS: Mounted root (ext2 filesystem).
Freeing init memory: 68K
IRQ UART at interrupt number 0x3
init started: BusyBox v1.00 (2006.01.16-08:12+0000) multi-call binary
init started: BusyBox v1.00 (2006.01.16-08:12+0000) multi-call binary
Starting pid 10, console /dev/ttyS0: '/etc/init.d/rcS'
ifconfig: Warning: cannot open /proc/net/dev. Limited output.: No such file or directory
ifconfig: eth0: error fetching interface information: Device not found
Using /drivers/wdt.o
WDT device driver version 1.0.0.1
Using /drivers/gpio_i2c.o
GPIOI2C device driver version 1.0.0.5
Using /drivers/rtc.o
RTC device driver version 1.0.0.1
Using /drivers/gpio.o
GPIO Device Driver version 1.1.0.0.
Using /drivers/i2c_slave.o
I2C slave device driver version 1.1.0.0. (H/W Rev. 0x10500)
Using /drivers/vma_vpe.o
Using /drivers/vma_me.o
Queue driver installed !!
Using /drivers/vma_be.o
Using /drivers/vma_ae.o
Using /drivers/cmmap.o
Using /drivers/mmap.o
Using /drivers/motor.o
MTR device driver version 1.0.0.4
Using /drivers/vaudio.o
I2S driver v 1.4.0.1. Copyright 2004 Vivotek, Inc.
for UDA1345
i2s_intc_value: 0x0000a430
i2s_intc_value: 0x0000a430
Using /drivers/hwinfo.o
hwinfo 1.1.0.0 initialized.
Using /drivers/cfc.o
CFC Device Driver version 1.0.0.0.
/etc/init.d/rcS: 44: /mnt/flash/patch/apply_patch: not found
Starting restore: .
Starting led: /dev/cfc0 1
.
Starting watchdog: .
Starting hresetd: .
Starting synctime: .
Starting ptburn: .
Starting network: /dev/cfc1 1
Copied 256 bytes from address 0x00002000 in flash to /tmp/pci_scan_dump
Using /drivers/vvdc_clk.o
Warning: loaup0: 00000068
dilow0: 00000045
ngup1: 00000064
vlow1: 0000003f
vdVVDC_Clk_init_module: VVDC Clock Delay is 0x00503030.
c_clk will taint the kernel: no license
See http://www.tux.org/lkml/#export-tainted for information about tainted modules
VVDC_Clk_cleanup_module: Module removed ok!
Using /lib/modules/2.4.26-vrs1/kernel/drivers/net/mii.o
Using /lib/modules/2.4.26-vrs1/kernel/drivers/net/8139too.o
8139too Fast Ethernet driver 0.9.26
eth0: RealTek RTL8139 at 0xc28b7000, 00:ab:cd:ab:cd:ef, IRQ 1
eth0: link up, 100Mbps, full-duplex, lpa 0x45E1
eth0: negotiated 100baseTx-FD, link ok
Usage: /usr/sbin/setdns dns1 dns2 ... dnsN
.
/dev/cfc1 0
Starting syslogd: .
run-parts: /etc/rcS.d/S50upnpigdcp exited with return code 1: Success
Starting inetd: .
Starting crond: .
Starting urecorder: .
Starting smbrecorder: .
Stop pan/tilt burning program...Stopping ptburn: no /usr/bin/ptburn found; none killed.
.
Starting swatchdog: .
Starting farseer.out: enable_irq(31) unbalanced from c2880b18
enable_irq(29) unbalanced from c288639c
enable_irq(30) unbalanced from c2884330
enable_irq(7) unbalanced from c2896c54
.
Starting ddnsc: DDNS client is disabled
run-parts: /etc/rcS.d/S86ddnsc exited with return code 1: Success
Starting upnpdd: enable 1
.
Starting drmd: .
Starting eventd: Stopping crond: stopped crond (pid 232).
.
Starting crond: .
.
Starting system boot messages: Sending startup log
BusyBox v1.00 (2006.01.16-08:12+0000) multi-call binary
Usage: rm [OPTION]... FILE...
rm: cannot remove `/mnt/ramdisk/eventd./*': No such file or directory
.
Starting ledctrl: /dev/cfc0 1
.
Starting smbmount: rm: cannot remove `/var/spool/cron/root-crontabs/smbmount.crontab': No such file or directory
Reloading configuration crond: .
lo no wireless extensions.
eth0 no wireless extensions.
cp: /mnt/flash/etc/daylight.c
Starting pid 491, console /dev/ttyS0: '/sbin/getty'
Network-Camera login:
The system pc : [<00015230>] lr : [<0000e4d4>] Tainted: P
issp : bf1ff020 ip : 4005ed4c fp : 00000003
gr10: 4005ea40 r9 : 00000000 r8 : 00000000
oir7 : 00000000 r6 : 0000000f r5 : 00086320 r4 : 00087d70
ngr3 : 00000000 r2 : 00000000 r1 : 00000000 r0 : 00000000
dFlags: nZCvow IRQs on FIQs on Mode USER_32 Segment user
n Control: 397F Table: 00990000 DAC: 00000015
NOW pc : [<00015230>] lr : [<0000e4d4>] Tainted: P
!!sp : bf5ff940 ip : 4005ed4c fp : 00082f90
r10: 4005ea40 r9 : 00000000 r8 : 00000000
Ser7 : 00000000 r6 : 0000000f r5 : 00086320 r4 : 00087d70
ndr3 : 00000000 r2 : 00000000 r1 : 00000000 r0 : 00000000
inFlags: nZCvg IRQs on FIQs on Mode USER_32 Segment user
SIControl: 397F Table: 00990000 DAC: 00000015
GTERM to all processes.
pc : [<00015230>] lr : [<0000e4d4>] Tainted: P
sp : bffff528 ip : 4005ed4c fp : 00082d4c
r10: 4005ea40 r9 : 00000000 r8 : 00001000
r7 : 401237d0 r6 : 0000000f r5 : 00086320 r4 : 00087d70
r3 : 00000000 r2 : 00001000 r1 : 00000000 r0 : 00000000
Flags: nZCv IRQs on FIQs on Mode USER_32 Segment user
Control: 397F Table: 00990000 DAC: 00000015
pc : [<00015230>] lr : [<0000e4d4>] Tainted: P
sp : befffbe0 ip : 4005ed4c fp : 000e60b0
r10: 4005ea40 r9 : 00000000 r8 : befffcc8
r7 : 00000000 r6 : 0000000f r5 : 00086320 r4 : 00087d70
r3 : 00000000 r2 : befffcc8 r1 : 00000000 r0 : 00000000
Flags: nZCv IRQs on FIQs on Mode USER_32 Segment user
Control: 397F Table: 00990000 DAC: 00000015
pc : [<00015230>] lr : [<0000e4d4>] Tainted: P
sp : be9ff8e8 ip : 4005ed4c fp : 00000210
r10: 4005ea40 r9 : 00000000 r8 : 00000000
r7 : 00000000 r6 : 0000000f r5 : 00086320 r4 : 00087d70
r3 : 00000000 r2 : 00000000 r1 : 00000000 r0 : 00000000
Flags: nZCv IRQs on FIQs on Mode USER_32 Segment user
Control: 397F Table: 00990000 DAC: 00000015
pc : [<00015230>] lr : [<0000e4d4>] Tainted: P
sp : be7ff980 ip : 4005ed4c fp : 00000210
r10: 4005ea40 r9 : 00000000 r8 : 00000000
r7 : 00000000 r6 : 0000000f r5 : 00086320 r4 : 00087d70
r3 : 00000000 r2 : 00000000 r1 : 00000000 r0 : 00000000
Flags: nZCv IRQs on FIQs on Mode USER_32 Segment user
Control: 397F Table: 00990000 DAC: 00000015
pc : [<00015230>] lr : [<0000e4d4>] Tainted: P
sp : be5ffb58 ip : 4005ed4c fp : 00000022
r10: 4005ea40 r9 : 00000000 r8 : 00000000
r7 : be5ffca0 r6 : 0000000f r5 : 00086320 r4 : 00087d70
r3 : 00000000 r2 : 00000000 r1 : 00000000 r0 : 00000000
Flags: nZCv IRQs on FIQs on Mode USER_32 Segment user
Control: 397F Table: 00990000 DAC: 00000015
pc : [<00015230>] lr : [<0000e4d4>] Tainted: P
sp : be3ff9c0 ip : 4005ed4c fp : 00000210
r10: 4005ea40 r9 : 00000000 r8 : 00000000
r7 : 00000000 r6 : 0000000f r5 : 00086320 r4 : 00087d70
r3 : 00000000 r2 : 00000000 r1 : 00000000 r0 : 00000000
Flags: nZCv IRQs on FIQs on Mode USER_32 Segment user
Control: 397F Table: 00990000 DAC: 00000015
Sending SIGKILL to all processes.
Please stand by while rebooting the system.flushing ide devices:
Restarting system.
ARMboot 1.1.0 (Nov 23 2006 - 17:31:45)
Vivotek EVM version 1.6.0.0 (System:110592000, UART:18432000)
ARMboot code: 00000000 ~ 000355f8
DRAM Configuration:
Bank #0 at 0x10000000 32 MB
Bank #1 at 0x00000000 0 KB
Flash: 8 MB
VVTK1000 PCI Driver for ARMBoot
....Found PCI Device at (0,0,0) ID=0x4321159B
Erasing sector 1 ... ok.
.
.
.
.
.
.
.
.
.
.
parameter: 68 45 00503030
.
.
....Found PCI Device at (11,0,0) ID=0x813910EC
ethaddr: 00:AB:CD:AB:CD:EF
Hit any key to stop autoboot: 1 0
## Booting image at 10020000 ...
Image Name: linux-2.4.26
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 2934880 Bytes = 2866 kB = 2 MB
Load Address: 00408000
Entry Point: 00408000
Verifying Checksum ... OK
Loading Kernel Image ... OK
Starting kernel ...
Uncompressing Linux............................................................. done, booting the kernel.
Linux version 2.4.26-vrs1 (klaymen@rd1-2.vivotek.tw) (gcc version 3.3.2) #1 Mon Oct 20 20:33:14 CST 2008
CPU: FA526id(wb) revision 1
Machine: Vivotek VVTK1000
Ignoring unrecognised tag 0x00000000
Ignoring unrecognised tag 0x00000000
On node 0 totalpages: 6144
zone(0): 6144 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: root=/dev/ram rw initrd=0x800000,4194304 mem=24M ahbclk=110592000 pciclk=27648000
IRQ timer at interrupt number 0x08 clock 55296000
Calibrating delay loop... 136.80 BogoMIPS
Memory: 24MB = 24MB total
Memory: 18172KB available (1496K code, 430K data, 68K init)
Dentry cache hash table entries: 4096 (order: 3, 32768 bytes)
Inode cache hash table entries: 2048 (order: 2, 16384 bytes)
Mount cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 8192 (order: 3, 32768 bytes)
CPU: Testing write buffer: pass
POSIX conformance testing by UNIFIX
PCI: bus0: Fast back to back transfers disabled
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
Initializing RT netlink socket
Starting kswapd
Journalled Block Device driver loaded
JFFS2 version 2.2. (C) 2001-2003 Red Hat, Inc.
pty: 256 Unix98 ptys configured
Serial driver version 5.05c (2001-07-08) with no serial options enabled
ttyS00 at 0xf9890000 (irq = 3) is a <NULL>
ttyS01 at 0xf98b0000 (irq = 4) is a <NULL>
RAMDISK driver initialized: 16 RAM disks of 8192K size 1024 blocksize
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
Uniform Multi-Platform E-IDE driver Revision: 7.00beta4-2.4
ide: Assuming 33MHz system bus speed for PIO modes; override with idebus=xx
VVTK1000 flash device: 800000 at 10000000
init_vvtk1000_flash_map() -- type: cfi_probe
VVTK1000 flash: Found 1 x16 devices at 0x0 in 8-bit mode
Amd/Fujitsu Extended Query Table at 0x0040
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
Using VVTK1000 partition definition
Creating 2 MTD partitions on "VVTK1000 flash":
0x00000000-0x00600000 : "kernel"
0x00600000-0x00800000 : "jffs2"
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP, IGMP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 2048 bind 4096)
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
Fast Floating Point Emulator V0.9 (c) Peter Teichmann.
RAMDISK: Compressed image found at block 0
Freeing initrd memory: 4096K
VFS: Mounted root (ext2 filesystem).
Freeing init memory: 68K
IRQ UART at interrupt number 0x3
init started: BusyBox v1.00 (2006.01.16-08:12+0000) multi-call binary
init started: BusyBox v1.00 (2006.01.16-08:12+0000) multi-call binary
Starting pid 10, console /dev/ttyS0: '/etc/init.d/rcS'
ifconfig: Warning: cannot open /proc/net/dev. Limited output.: No such file or directory
ifconfig: eth0: error fetching interface information: Device not found
Using /drivers/wdt.o
WDT device driver version 1.0.0.1
Using /drivers/gpio_i2c.o
GPIOI2C device driver version 1.0.0.5
Using /drivers/rtc.o
RTC device driver version 1.0.0.1
Using /drivers/gpio.o
GPIO Device Driver version 1.1.0.0.
Using /drivers/i2c_slave.o
I2C slave device driver version 1.1.0.0. (H/W Rev. 0x10500)
Using /drivers/vma_vpe.o
Using /drivers/vma_me.o
Queue driver installed !!
Using /drivers/vma_be.o
Using /drivers/vma_ae.o
Using /drivers/cmmap.o
Using /drivers/mmap.o
Using /drivers/motor.o
MTR device driver version 1.0.0.4
Using /drivers/vaudio.o
I2S driver v 1.4.0.1. Copyright 2004 Vivotek, Inc.
for UDA1345
i2s_intc_value: 0x0000a430
i2s_intc_value: 0x0000a430
Using /drivers/hwinfo.o
hwinfo 1.1.0.0 initialized.
Using /drivers/cfc.o
CFC Device Driver version 1.0.0.0.
/etc/init.d/rcS: 44: /mnt/flash/patch/apply_patch: not found
Starting restore: restore default setting...
Erased 8192 bytes from address 0x00002000 in flash
The system is goi
Sending SIGKILL to all processes.
Please stand by while rebooting the system.
flushing ide devices:
Restarting system.
ARMboot 1.1.0 (Nov 23 2006 - 17:31:45)
Vivotek EVM version 1.6.0.0 (System:110592000, UART:18432000)
ARMboot code: 00000000 ~ 000355f8
DRAM Configuration:
Bank #0 at 0x10000000 32 MB
Bank #1 at 0x00000000 0 KB
Flash: 8 MB
VVTK1000 PCI Driver for ARMBoot
....Found PCI Device at (0,0,0) ID=0x4321159B
Erasing sector 1 ... ok.
.
.
.
.
.
.
.
.
.
.
parameter: 68 46 00503030
.
.
....Found PCI Device at (11,0,0) ID=0x813910EC
ethaddr: 00:AB:CD:AB:CD:EF
Hit any key to stop autoboot: 1 0
## Booting image at 10020000 ...
Image Name: linux-2.4.26
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 2934880 Bytes = 2866 kB = 2 MB
Load Address: 00408000
Entry Point: 00408000
Verifying Checksum ... OK
Loading Kernel Image ... OK
Starting kernel ...
Uncompressing Linux............................................................. done, booting the kernel.
Linux version 2.4.26-vrs1 (klaymen@rd1-2.vivotek.tw) (gcc version 3.3.2) #1 Mon Oct 20 20:33:14 CST 2008
CPU: FA526id(wb) revision 1
Machine: Vivotek VVTK1000
Ignoring unrecognised tag 0x00000000
Ignoring unrecognised tag 0x00000000
On node 0 totalpages: 6144
zone(0): 6144 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: root=/dev/ram rw initrd=0x800000,4194304 mem=24M ahbclk=110592000 pciclk=27648000
IRQ timer at interrupt number 0x08 clock 55296000
Calibrating delay loop... 136.80 BogoMIPS
Memory: 24MB = 24MB total
Memory: 18172KB available (1496K code, 430K data, 68K init)
Dentry cache hash table entries: 4096 (order: 3, 32768 bytes)
Inode cache hash table entries: 2048 (order: 2, 16384 bytes)
Mount cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 8192 (order: 3, 32768 bytes)
CPU: Testing write buffer: pass
POSIX conformance testing by UNIFIX
PCI: bus0: Fast back to back transfers disabled
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
Initializing RT netlink socket
Starting kswapd
Journalled Block Device driver loaded
JFFS2 version 2.2. (C) 2001-2003 Red Hat, Inc.
pty: 256 Unix98 ptys configured
Serial driver version 5.05c (2001-07-08) with no serial options enabled
ttyS00 at 0xf9890000 (irq = 3) is a <NULL>
ttyS01 at 0xf98b0000 (irq = 4) is a <NULL>
RAMDISK driver initialized: 16 RAM disks of 8192K size 1024 blocksize
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
Uniform Multi-Platform E-IDE driver Revision: 7.00beta4-2.4
ide: Assuming 33MHz system bus speed for PIO modes; override with idebus=xx
VVTK1000 flash device: 800000 at 10000000
init_vvtk1000_flash_map() -- type: cfi_probe
VVTK1000 flash: Found 1 x16 devices at 0x0 in 8-bit mode
Amd/Fujitsu Extended Query Table at 0x0040
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
Using VVTK1000 partition definition
Creating 2 MTD partitions on "VVTK1000 flash":
0x00000000-0x00600000 : "kernel"
0x00600000-0x00800000 : "jffs2"
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP, IGMP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 2048 bind 4096)
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
Fast Floating Point Emulator V0.9 (c) Peter Teichmann.
RAMDISK: Compressed image found at block 0
Freeing initrd memory: 4096K
VFS: Mounted root (ext2 filesystem).
Freeing init memory: 68K
IRQ UART at interrupt number 0x3
init started: BusyBox v1.00 (2006.01.16-08:12+0000) multi-call binary
init started: BusyBox v1.00 (2006.01.16-08:12+0000) multi-call binary
Starting pid 10, console /dev/ttyS0: '/etc/init.d/rcS'
ifconfig: Warning: cannot open /proc/net/dev. Limited output.: No such file or directory
ifconfig: eth0: error fetching interface information: Device not found
Using /drivers/wdt.o
WDT device driver version 1.0.0.1
Using /drivers/gpio_i2c.o
GPIOI2C device driver version 1.0.0.5
Using /drivers/rtc.o
RTC device driver version 1.0.0.1
Using /drivers/gpio.o
GPIO Device Driver version 1.1.0.0.
Using /drivers/i2c_slave.o
I2C slave device driver version 1.1.0.0. (H/W Rev. 0x10500)
Using /drivers/vma_vpe.o
Using /drivers/vma_me.o
Queue driver installed !!
Using /drivers/vma_be.o
Using /drivers/vma_ae.o
Using /drivers/cmmap.o
Using /drivers/mmap.o
Using /drivers/motor.o
MTR device driver version 1.0.0.4
Using /drivers/vaudio.o
I2S driver v 1.4.0.1. Copyright 2004 Vivotek, Inc.
for UDA1345
i2s_intc_value: 0x0000a430
i2s_intc_value: 0x0000a430
Using /drivers/hwinfo.o
hwinfo 1.1.0.0 initialized.
Using /drivers/cfc.o
CFC Device Driver version 1.0.0.0.
/etc/init.d/rcS: 44: /mnt/flash/patch/apply_patch: not found
Starting restore: .
Starting led: /dev/cfc0 1
.
Starting watchdog: .
Starting hresetd: .
Starting synctime: .
Starting ptburn: .
Starting network: /dev/cfc1 1
Copied 256 bytes from address 0x00002000 in flash to /tmp/pci_scan_dump
Using /drivers/vvdc_clk.o
Warning: loaup0: 00000068
dilow0: 00000046
ngup1: 00000064
vlow1: 0000003e
vdVVDC_Clk_init_module: VVDC Clock Delay is 0x00503030.
c_clk will taint the kernel: no license
See http://www.tux.org/lkml/#export-tainted for information about tainted modulesVVDC_Clk_cleanup_module: Module removed ok!
Using /lib/modules/2.4.26-vrs1/kernel/drivers/net/mii.o
Using /lib/modules/2.4.26-vrs1/kernel/drivers/net/8139too.o
8139too Fast Ethernet driver 0.9.26
eth0: RealTek RTL8139 at 0xc28b7000, 00:ab:cd:ab:cd:ef, IRQ 1
eth0: link up, 100Mbps, full-duplex, lpa 0x45E1
eth0: negotiated 100baseTx-FD, link ok
Usage: /usr/sbin/setdns dns1 dns2 ... dnsN
.
/dev/cfc1 0
Starting syslogd: .
run-parts: /etc/rcS.d/S50upnpigdcp exited with return code 1: Success
Starting inetd: .
Starting crond: .
Starting urecorder: .
Starting smbrecorder: .
Stop pan/tilt burning program...Stopping ptburn: no /usr/bin/ptburn found; none killed.
.
Starting swatchdog: .
Starting farseer.out: enable_irq(31) unbalanced from c2880b18
enable_irq(29) unbalanced from c288639c
enable_irq(30) unbalanced from c2884330
enable_irq(7) unbalanced from c2896c54
.
Starting ddnsc: DDNS client is disabled
run-parts: /etc/rcS.d/S86ddnsc exited with return code 1: Success
Starting upnpdd: enable 1
.
Starting drmd: .
Starting eventd: Stopping crond: stopped crond (pid 232).
.
Starting crond: .
.
Starting system boot messages: Sending startup log
BusyBox v1.00 (2006.01.16-08:12+0000) multi-call binary
Usage: rm [OPTION]... FILE...
rm: cannot remove `/mnt/ramdisk/eventd./*': No such file or directory
.
Starting ledctrl: /dev/cfc0 1
.
Starting smbmount: rm: cannot remove `/var/spool/cron/root-crontabs/smbmount.crontab': No such file or directory
Reloading configuration crond: .
lo no wireless extensions.
eth0 no wireless extensions.
cp: /mnt/flash/etc/daylight.crontab: No such file or directory
Starting pid 491, console /dev/ttyS0: '/sbin/getty'
Network-Camera login:
Now I'm looking for any information that will help me unpack the firmware to my camera (like http://dose.0wnz.at/ipcams/ for example). Also I find GPL firmwares from https://tsd.dlink.com.tw (in down now, for my model).
OK. Update. There is binwalk check of last DCS-5220 Firmware:
$binwalk 1.05.pkg
DECIMAL HEXADECIMAL DESCRIPTION
--------------------------------------------------------------------------------
54 0x36 uImage header, header size: 64 bytes, header CRC: 0xED44A4CC, created: 2009-02-17 05:35:14, image size: 2934880 bytes, Data Address: 0x408000, Entry Point: 0x408000, data CRC: 0xA49BACCF, OS: Linux, CPU: ARM, image type: OS Kernel Image, compression type: none, image name: "linux-2.4.26"
11770 0x2DFA gzip compressed data, maximum compression, from Unix, last modified: 2008-10-20 12:35:13
897238 0xDB0D6 gzip compressed data, maximum compression, has original file name: "initrd.img", from Unix, last modified: 2009-02-17 05:35:12
2935070 0x2CC91E gzip compressed data, from Unix, last modified: 2009-02-17 05:35:15
3606730 0x3708CA CRC32 polynomial table, little endian
3639872 0x378A40 gzip compressed data, from Unix, last modified: 2009-02-17 05:35:15
So there is only gzip packed files inside. And they beautiful unpacked by binwalk -e command and we can see next files: "2CC91E", "2DFA", "378A40" and initrd.img
There is info (binwalk/files) about it.
2CC91E
$ file 2CC91E
2CC91E: POSIX tar archive (GNU)
$ binwalk 2CC91E
DECIMAL HEXADECIMAL DESCRIPTION
--------------------------------------------------------------------------------
0 0x0 POSIX tar archive (GNU)
2DFA
$ file 2DFA
2DFA: data
$ binwalk 2DFA
DECIMAL HEXADECIMAL DESCRIPTION
--------------------------------------------------------------------------------
136261 0x21445 Certificate in DER format (x509 v3), header length: 4, sequence length: 5484
1202797 0x125A6D Certificate in DER format (x509 v3), header length: 4, sequence length: 1424
1204917 0x1262B5 Certificate in DER format (x509 v3), header length: 4, sequence length: 1400
1230781 0x12C7BD Certificate in DER format (x509 v3), header length: 4, sequence length: 5564
1239265 0x12E8E1 Certificate in DER format (x509 v3), header length: 4, sequence length: 1452
1239301 0x12E905 Certificate in DER format (x509 v3), header length: 4, sequence length: 1448
1239337 0x12E929 Certificate in DER format (x509 v3), header length: 4, sequence length: 1472
1459716 0x164604 CRC32 polynomial table, little endian
1467252 0x166374 CRC32 polynomial table, little endian
1469395 0x166BD3 Copyright string: "Copyright 1995-1998 Mark Adler "
1470748 0x16711C Linux kernel version "2.4.26-vrs1 (klaymen@rd1-2.vivotek.tw) (gcc version 3.3.2) #1 Mon Oct 20 20:33:14 CST 2008"
1732974 0x1A716E Unix path: /368/370/370A/372
1768737 0x1AFD21 PARity archive data - Index file
378A40
$ file 378A40
378A40: POSIX tar archive (GNU)
$ binwalk 378A40
DECIMAL HEXADECIMAL DESCRIPTION
--------------------------------------------------------------------------------
0 0x0 POSIX tar archive (GNU)
initrd.img
$ file initrd.img
initrd.img: Linux rev 0.0 ext2 filesystem data, UUID=00000000-0000-0000-0000-000000000000
$ binwalk initrd.img
DECIMAL HEXADECIMAL DESCRIPTION
--------------------------------------------------------------------------------
0 0x0 Linux EXT filesystem, rev 0.0, ext2 filesystem data, UUID=00000000-0000-0000-0000-000000000000
9896 0x26A8 Unix path: /home/vivotek/lsp/vivaldi-2.0.0.0_8M32M/kernel/linux-2.4
12840 0x3228 Unix path: /mnt/flash/etc/network
18600 0x48A8 Unix path: /mnt/flash/etc/samba
352256 0x56000 ELF, 32-bit LSB shared object, ARM, version 1 (ARM)
483445 0x76075 Certificate in DER format (x509 v3), header length: 4, sequence length: 4097
673792 0xA4800 ELF, 32-bit LSB shared object, ARM, version 1 (ARM)
690176 0xA8800 ELF, 32-bit LSB shared object, ARM, version 1 (ARM)
695296 0xA9C00 ELF, 32-bit LSB shared object, ARM, version 1 (ARM)
781312 0xBEC00 ELF, 32-bit LSB shared object, ARM, version 1 (ARM)
790528 0xC1000 ELF, 32-bit LSB shared object, ARM, version 1 (ARM)
820384 0xC84A0 Unix path: /opt/Vivotek/lsp/buildroot-2.0.0.0/toolchain_build_arm_nofpu/gcc-3.3.2/gcc/config/arm/lib1funcs.asm
821604 0xC8964 Unix path: /opt/Vivotek/lsp/buildroot-2.0.0.0/toolchain_build_arm_nofpu/gcc-3.3.2/gcc/config/arm
821760 0xC8A00 Unix path: /opt/Vivotek/lsp/buildroot-2.0.0.0/toolchain_build_arm_nofpu/gcc-3.3.2/gcc/config/arm
821922 0xC8AA2 Unix path: /opt/Vivotek/lsp/buildroot-2.0.0.0/toolchain_build_arm_nofpu/gcc-3.3.2/gcc/config/arm
822078 0xC8B3E Unix path: /opt/Vivotek/lsp/buildroot-2.0.0.0/toolchain_build_arm_nofpu/gcc-3.3.2/gcc/config/arm
822239 0xC8BDF Unix path: /opt/Vivotek/lsp/buildroot-2.0.0.0/toolchain_build_arm_nofpu/gcc-3.3.2/gcc/config/arm
829495 0xCA837 Unix path: /opt/Vivotek/lsp/buildroot-2.0.0.0/toolchain_build_arm_nofpu/gcc-3.3.2/gcc/config/arm/lib1funcs.asm
832512 0xCB400 ELF, 32-bit LSB shared object, ARM, version 1 (ARM)
924672 0xE1C00 ELF, 32-bit LSB relocatable, ARM, version 1 (ARM)
947200 0xE7400 ELF, 32-bit LSB relocatable, ARM, version 1 (ARM)
953344 0xE8C00 ELF, 32-bit LSB shared object, ARM, version 1 (ARM)
960512 0xEA800 ELF, 32-bit LSB shared object, ARM, version 1 (ARM)
965632 0xEBC00 ELF, 32-bit LSB shared object, ARM, version 1 (ARM)
1049600 0x100400 ELF, 32-bit LSB shared object, ARM, version 1 (ARM)
1071104 0x105800 ELF, 32-bit LSB shared object, ARM, version 1 (ARM)
1135616 0x115400 Executable script, shebang: "/bin/sh"
1138688 0x116000 Executable script, shebang: "/bin/sh"
1138828 0x11608C Unix path: /mnt/flash/etc/.restore-default"
1138884 0x1160C4 Unix path: /mnt/flash/etc/network/interfaces"
1140043 0x11654B Unix path: /mnt/flash/etc/.upgrade ]; then
1140246 0x116616 Unix path: /mnt/flash/etc/passwd > /tmp/passwd_with_root_removed
1140572 0x11675C Unix path: /mnt/flash/etc/passwd
1140609 0x116781 Unix path: /mnt/flash/etc/.upgrade
1142784 0x117000 Executable script, shebang: "/bin/sh"
1143808 0x117400 Executable script, shebang: "/bin/sh"
1144065 0x117501 Unix path: /var/spool/cron/root-crontabs"
1144832 0x117800 Executable script, shebang: "/bin/sh"
1145856 0x117C00 Executable script, shebang: "/bin/sh"
1146102 0x117CF6 Unix path: /var/spool/cron/root-crontabs/$prog.crontab"
1148928 0x118800 Executable script, shebang: "/bin/sh"
1149952 0x118C00 Executable script, shebang: "/bin/sh"
1152000 0x119400 Executable script, shebang: "/bin/sh"
1154048 0x119C00 Executable script, shebang: "/bin/sh"
1163264 0x11C000 Executable script, shebang: "/bin/sh"
1164288 0x11C400 Executable script, shebang: "/bin/sh"
1165312 0x11C800 Executable script, shebang: "/bin/sh"
1167360 0x11D000 Executable script, shebang: "/bin/sh"
1169408 0x11D800 Executable script, shebang: "/bin/sh"
1170432 0x11DC00 Executable script, shebang: "/bin/sh"
1171456 0x11E000 Executable script, shebang: "/bin/sh"
1172722 0x11E4F2 Unix path: /mnt/flash/patch/apply_patch
1173227 0x11E6EB Unix path: /mnt/flash/etc/rcS.d/S04restore" ]; then
1173355 0x11E76B Unix path: /mnt/flash/etc/daylight.crontab /var/spool/cron/root-crontabs
1173504 0x11E800 Executable script, shebang: "/bin/sh"
1174528 0x11EC00 Executable script, shebang: "/bin/sh"
1174646 0x11EC76 Unix path: /usr/local/bin/ddnsc
1177600 0x11F800 Executable script, shebang: "/bin/sh"
1178624 0x11FC00 Executable script, shebang: "/bin/sh"
1180672 0x120400 Executable script, shebang: "/bin/sh"
1182720 0x120C00 Executable script, shebang: "/bin/sh"
1182958 0x120CEE Unix path: /var/spool/cron/root-crontabs/$prog.crontab"
1184768 0x121400 Executable script, shebang: "/bin/sh"
1185792 0x121800 Executable script, shebang: "/bin/sh"
1189106 0x1224F2 Unix path: /www.isi.edu/in-notes/iana/assignments/protocol-numbers
1200128 0x125000 gzip compressed data, from Unix, last modified: 2009-02-17 05:35:12
1218560 0x129800 ELF, 32-bit LSB shared object, ARM, version 1 (ARM)
1229824 0x12C400 ELF, 32-bit LSB shared object, ARM, version 1 (ARM)
1235968 0x12DC00 ELF, 32-bit LSB shared object, ARM, version 1 (ARM)
1278976 0x138400 ELF, 32-bit LSB shared object, ARM, version 1 (ARM)
1291264 0x13B400 ELF, 32-bit LSB shared object, ARM, version 1 (ARM)
1299456 0x13D400 ELF, 32-bit LSB shared object, ARM, version 1 (ARM)
1307648 0x13F400 ELF, 32-bit LSB shared object, ARM, version 1 (ARM)
1317888 0x141C00 ELF, 32-bit LSB shared object, ARM, version 1 (ARM)
1326080 0x143C00 ELF, 32-bit LSB shared object, ARM, version 1 (ARM)
1333248 0x145800 ELF, 32-bit LSB shared object, ARM, version 1 (ARM)
1342464 0x147C00 ELF, 32-bit LSB shared object, ARM, version 1 (ARM)
1351680 0x14A000 ELF, 32-bit LSB shared object, ARM, version 1 (ARM)
1366016 0x14D800 ELF, 32-bit LSB shared object, ARM, version 1 (ARM)
1373184 0x14F400 ELF, 32-bit LSB shared object, ARM, version 1 (ARM)
1386496 0x152800 Executable script, shebang: "/bin/sh"
1387520 0x152C00 Executable script, shebang: "/bin/sh"
1388544 0x153000 Executable script, shebang: "/bin/sh"
1389568 0x153400 Executable script, shebang: "/bin/sh"
1390592 0x153800 Executable script, shebang: "/bin/sh"
1390692 0x153864 HTML document header
1391652 0x153C24 HTML document footer
1391688 0x153C48 HTML document footer
1392640 0x154000 Executable script, shebang: "/bin/sh"
1393664 0x154400 Executable script, shebang: "/bin/sh"
1394688 0x154800 Executable script, shebang: "/bin/sh"
1396212 0x154DF4 HTML document header
1396343 0x154E77 HTML document footer
1396736 0x155000 Executable script, shebang: "/bin/sh"
1397760 0x155400 Executable script, shebang: "/bin/sh"
1398784 0x155800 Executable script, shebang: "/bin/sh"
1398994 0x1558D2 HTML document header
1399069 0x15591D HTML document footer
1399808 0x155C00 Executable script, shebang: "/bin/sh"
1399991 0x155CB7 HTML document header
1400227 0x155DA3 HTML document footer
1400832 0x156000 Executable script, shebang: "/bin/sh"
1401856 0x156400 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
1408076 0x157C4C HTML document header
1408123 0x157C7B HTML document footer
1408232 0x157CE8 HTML document header
1408300 0x157D2C HTML document footer
1408308 0x157D34 HTML document header
1408374 0x157D76 HTML document footer
1408384 0x157D80 HTML document header
1408450 0x157DC2 HTML document footer
1408460 0x157DCC HTML document header
1408526 0x157E0E HTML document footer
1411072 0x158800 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
1415836 0x159A9C HTML document header
1415900 0x159ADC HTML document footer
1418240 0x15A400 Executable script, shebang: "/bin/sh"
1419264 0x15A800 Executable script, shebang: "/bin/sh"
1420288 0x15AC00 Executable script, shebang: "/bin/sh"
1422336 0x15B400 Executable script, shebang: "/bin/sh"
1423360 0x15B800 Executable script, shebang: "/bin/sh"
1424384 0x15BC00 Executable script, shebang: "/bin/sh"
1426432 0x15C400 Executable script, shebang: "/bin/sh"
1435648 0x15E800 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
1496064 0x16D400 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
1502208 0x16EC00 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
1549312 0x17A400 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
1563648 0x17DC00 Executable script, shebang: "/bin/sh"
1564672 0x17E000 Executable script, shebang: "/bin/sh"
1565696 0x17E400 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
1575936 0x180C00 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
1593436 0x18505C Unix path: /opt/Vivotek/lsp/vivaldi-2.0.0.0/tools/arm-linux/etc/inetd.conf
1597440 0x186000 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
1639848 0x1905A8 Unix path: /opt/Vivotek/lsp/vivaldi-2.0.0.0/tools/arm-linux/var/run/ftpd.pid
1641080 0x190A78 Unix path: /opt/Vivotek/lsp/vivaldi-2.0.0.0/tools/arm-linux/etc/ftpwelcome
1644456 0x1917A8 Unix path: /opt/Vivotek/lsp/vivaldi-2.0.0.0/tools/arm-linux/etc/ftpusers
1648640 0x192800 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
1655808 0x194400 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
1682825 0x19AD89 Certificate in DER format (x509 v3), header length: 4, sequence length: 1304
1682829 0x19AD8D Certificate in DER format (x509 v3), header length: 4, sequence length: 5376
1691056 0x19CDB0 Copyright string: "Copyright (C) 1998,2001,2002 Free Software Foundation, Inc."
1698816 0x19EC00 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
1741120 0x1A9140 Unix path: /rd2-3/subversion/Library/Systems/isom/tags/2_3_0_0/app/urecorder.c $
1745920 0x1AA400 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
1849892 0x1C3A24 Copyright string: "Copyright (c) 2006 Vivotek Inc."
1867820 0x1C802C Base64 standard index table
1871872 0x1C9000 Executable script, shebang: "/bin/sh"
1873920 0x1C9800 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
1881112 0x1CB418 Copyright string: "Copyright (c) 2006-2010 Vivotek Inc."
1884160 0x1CC000 Executable script, shebang: "/bin/sh"
1885184 0x1CC400 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
1902592 0x1D0800 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
1917952 0x1D4400 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
1932164 0x1D7B84 Unix path: /opt/Vivotek/lsp/vivaldi-2.0.0.0/tools/arm-linux/bin/login
1936384 0x1D8C00 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
1944576 0x1DAC00 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
1950720 0x1DC400 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
1971200 0x1E1400 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
2326680 0x238098 Unix path: /mnt/flash/www/language.html
2404752 0x24B190 HTML document header
2404799 0x24B1BF HTML document footer
2415968 0x24DD60 Base64 standard index table
2441640 0x2541A8 HTML document header
2441767 0x254227 HTML document footer
2441776 0x254230 HTML document header
2441896 0x2542A8 HTML document footer
2441904 0x2542B0 HTML document header
2442062 0x25434E HTML document footer
2448384 0x255C00 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
2462724 0x259404 Unix path: /opt/Vivotek/lsp/vivaldi-2.0.0.0/tools/arm-linux/bin/rsh
2464073 0x259949 Copyright string: "Copyright (c) 1983, 1990, 1992, 1993"
2466816 0x25A400 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
2542857 0x26CD09 Certificate in DER format (x509 v3), header length: 4, sequence length: 1804
2555588 0x26FEC4 Copyright string: "Copyright (c) 2006 Vivotek Inc."
2561116 0x27145C Unix path: /cgi-bin/ddns/members/update_dns.cgi?host=%s&myip=%s
2569924 0x2736C4 Base64 standard index table
2582528 0x276800 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
2609192 0x27D028 HTML document header
2609225 0x27D049 HTML document footer
2609904 0x27D2F0 XML document, version: "1.0"
2614272 0x27E400 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3108852 0x2F6FF4 Unix path: /etc/samba/var/locks
3202540 0x30DDEC CRC32 polynomial table, little endian
3205324 0x30E8CC Base64 standard index table
3255296 0x31AC00 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3271680 0x31EC00 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3278848 0x320800 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3296256 0x324C00 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3304448 0x326C00 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3316736 0x329C00 Executable script, shebang: "/bin/sh"
3320832 0x32AC00 Executable script, shebang: "/bin/sh"
3321856 0x32B000 Executable script, shebang: "/bin/sh"
3322880 0x32B400 Executable script, shebang: "/bin/sh"
3324928 0x32BC00 Executable script, shebang: "/bin/sh"
3325098 0x32BCAA Unix path: /mnt/flash/etc/rcS.d/*
3325952 0x32C000 Executable script, shebang: "/bin/sh"
3325978 0x32C01A Unix path: /var/spool/cron/root-crontabs/daylight.crontab"
3326709 0x32C2F5 Unix path: /mnt/flash/etc/daylight.crontab &
3326932 0x32C3D4 Unix path: /mnt/flash/etc/daylight.crontab
3328000 0x32C800 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3338240 0x32F000 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3344384 0x330800 Executable script, shebang: "/bin/sh"
3345408 0x330C00 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3352576 0x332800 Executable script, shebang: "/bin/sh"
3354624 0x333000 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3373952 0x337B80 Copyright string: "Copyright (c) 1997 Ralf S. Engelschall, All rights reserved."
3374496 0x337DA0 Base64 standard index table
3374968 0x337F78 Base64 standard index table
3378176 0x338C00 Executable script, shebang: "/bin/sh"
3379200 0x339000 Executable script, shebang: "/bin/sh"
3380224 0x339400 Executable script, shebang: "/bin/sh"
3381554 0x339932 Unix path: /mnt/flash/etc/.upgrade
3382482 0x339CD2 Unix path: /172.16.5.30/rd1wiki/index.php/Upgrading_time_too_long_problem_%28All_7k%29
3383296 0x33A000 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3389440 0x33B800 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3397632 0x33D800 Executable script, shebang: "/bin/sh"
3398656 0x33DC00 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3407548 0x33FEBC CRC32 polynomial table, little endian
3410944 0x340C00 Executable script, shebang: "/bin/sh"
3414016 0x341800 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3420868 0x3432C4 CRC32 polynomial table, little endian
3422676 0x3439D4 Copyright string: "Copyright (C) 2000 Arcom Control Systems Ltd"
3425280 0x344400 Executable script, shebang: "/bin/sh"
3426304 0x344800 Executable script, shebang: "/bin/sh"
3428352 0x345000 Executable script, shebang: "/bin/sh"
3428712 0x345168 Neighborly text, "Neighborhood$TMP_FILE | sed 's/&/&/g'`"
3429376 0x345400 Executable script, shebang: "/bin/sh"
3430400 0x345800 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3497592 0x355E78 CRC32 polynomial table, little endian
3506176 0x358000 Executable script, shebang: "/bin/sh"
3507200 0x358400 Executable script, shebang: "/bin/sh"
3508224 0x358800 Executable script, shebang: "/bin/sh"
3509248 0x358C00 Executable script, shebang: "/bin/sh"
3510272 0x359000 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3517440 0x35AC00 Executable script, shebang: "/bin/sh"
3518464 0x35B000 Executable script, shebang: "/bin/sh"
3521536 0x35BC00 Executable script, shebang: "/bin/sh"
3522560 0x35C000 Executable script, shebang: "/bin/sh"
3525632 0x35CC00 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3559972 0x365224 Unix path: /usr/local/share/pci.ids
3565568 0x366800 Executable script, shebang: "/bin/sh"
3566592 0x366C00 Executable script, shebang: "/bin/sh"
3569664 0x367800 Executable script, shebang: "/bin/sh"
3571712 0x368000 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3578544 0x369AB0 Unix path: /mnt/flash/etc/LookingForSniffer
3580928 0x36A400 Executable script, shebang: "/bin/sh"
3581952 0x36A800 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3589120 0x36C400 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3599360 0x36EC00 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3621292 0x3741AC Unix path: /usr/local/share/pci.ids
3627008 0x375800 Executable script, shebang: "/bin/sh"
3628032 0x375C00 Executable script, shebang: "/bin/sh"
3628131 0x375C63 Unix path: /127.0.0.1/cgi-bin/admin/setparam.cgi?system_daylight=$1 -O /dev/null
3629056 0x376000 Executable script, shebang: "/bin/sh"
3631104 0x376800 Executable script, shebang: "/bin/sh"
3632128 0x376C00 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3652608 0x37BC00 Executable script, shebang: "/bin/sh"
3653632 0x37C000 Executable script, shebang: "/bin/sh"
3655680 0x37C800 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3660872 0x37DC48 Copyright string: "Copyright (c) 2006 Vivotek Inc."
3662056 0x37E0E8 Unix path: /opt/Vivotek/lsp/buildroot-2.0.0.0/toolchain_build_arm_nofpu/gcc-3.3.2/gcc/config/arm/lib1funcs.asm
3662788 0x37E3C4 Unix path: /opt/Vivotek/lsp/buildroot-2.0.0.0/toolchain_build_arm_nofpu/gcc-3.3.2/gcc/config/arm
3662944 0x37E460 Unix path: /opt/Vivotek/lsp/buildroot-2.0.0.0/toolchain_build_arm_nofpu/gcc-3.3.2/gcc/config/arm
3663095 0x37E4F7 Unix path: /opt/Vivotek/lsp/buildroot-2.0.0.0/toolchain_build_arm_nofpu/gcc-3.3.2/gcc/config/arm
3667297 0x37F561 Unix path: /opt/Vivotek/lsp/buildroot-2.0.0.0/toolchain_build_arm_nofpu/gcc-3.3.2/gcc/config/arm/lib1funcs.asm
3670016 0x380000 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3737864 0x390908 Copyright string: "Copyright (c) 2006 Vivotek Inc."
3742832 0x391C70 Unix path: /cgi-bin/ddns/members/update_dns.cgi?host=%s&myip=%s
3749936 0x393830 Base64 standard index table
3762176 0x396800 Executable script, shebang: "/bin/sh"
3769344 0x398400 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3783680 0x39BC00 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3807382 0x3A1896 Copyright string: "Copyright (C) 2001 Roaring Penguin Software Inc."
3815424 0x3A3800 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3841024 0x3A9C00 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3872768 0x3B1800 Executable script, shebang: "/bin/sh"
3872993 0x3B18E1 Copyright string: "Copyright (C) 2000 Roaring Penguin Software Inc."
3881984 0x3B3C00 Executable script, shebang: "/bin/sh"
3882143 0x3B3C9F Copyright string: "Copyright (C) 2000-2001 Roaring Penguin Software Inc."
3885056 0x3B4800 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3912704 0x3BB400 Executable script, shebang: "/bin/sh"
3912913 0x3BB4D1 Copyright string: "Copyright (C) 2000 Roaring Penguin Software Inc."
3915776 0x3BC000 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3950592 0x3C4800 Executable script, shebang: "/bin/sh"
3950801 0x3C48D1 Copyright string: "Copyright (C) 2000 Roaring Penguin Software Inc."
3955712 0x3C5C00 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
3963904 0x3C7C00 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
4020825 0x3D5A59 Certificate in DER format (x509 v3), header length: 4, sequence length: 4614
4169040 0x3F9D50 Unix path: /usr/lib/pppd/2.4.3
4171828 0x3FA834 Unix path: /sys/net/ipv4/ip_forward
4172964 0x3FACA4 Unix path: /sys/net/ipv4/ip_dynaddr
4200448 0x401800 ELF, 32-bit LSB executable, ARM, version 1 (ARM)
4468421 0x442EC5 Certificate in DER format (x509 v3), header length: 4, sequence length: 5376
4599099 0x462D3B POSIX tar archive (GNU), owner user name: "hz"
First I extract simple tar archives (378A40 and 2CC91E) by $ $ tar -xvf
2CC91E
$ tar -xvf 2CC91E
www/
www/ret.html
www/logout.html
www/common.js
www/navbar/
www/navbar/statusnav.html
www/navbar/helpnav.html
www/navbar/setupnav.html
www/navbar/helpnav.js
www/navbar/topnav.html
www/navbar/maintainnav.html
www/navbar/homenav.html
www/client.html
www/help/
www/help/htool.html
www/help/menu.html
www/help/hadv.html
www/help/hhome.html
www/help/hstatus.html
www/plugindef.js
www/clientset.js
www/indexreal.html
www/RtspVaPgDec.cab
www/dlink.css
www/realqt.mov
www/index.html
www/camctrl.js
www/setup/
www/setup/accesslist.html
www/setup/devinfo.html
www/setup/config_index.html
www/setup/audiovideo.html
www/setup/wireless.html
www/setup/definepatrolname.js
www/setup/videoclip.html
www/setup/network.html
www/setup/edituser.html
www/setup/application.html
www/setup/accesslist.js
www/setup/firmwareupdate.html
www/setup/time_date.js
www/setup/wireless.js
www/setup/maintain.html
www/setup/netstat.js
www/setup/config.html
www/setup/recording.html
www/setup/ddns.js
www/setup/ddns.html
www/setup/network.js
www/setup/snapshot1.html
www/setup/security.html
www/setup/security.js
www/setup/audiovideo.js
www/setup/time_date.html
www/setup/wizard/
www/setup/wizard/wizardutil.js
www/setup/wizard/network.html
www/setup/wizard/wiznetwork.js
www/setup/wizard/wizard.html
www/setup/wizard/motion.html
www/setup/wizard/wizmotion.js
www/setup/patrolname.js
www/setup/image.html
www/setup/mailftp.html
www/setup/motion.html
www/setup/camctrl.html
www/setup/syslog.html
www/snapshot.html
www/webinfo.html
www/home.html
www/pic/
www/pic/ctrlhome.gif
www/pic/helpzoom.jpg
www/pic/helppause.jpg
www/pic/helpstop.jpg
www/pic/ctrldown.gif
www/pic/autopan.gif
www/pic/ctrlup_g.gif
www/pic/wlan_masthead.gif
www/pic/ctrlleft.gif
www/pic/sideright1.gif
www/pic/ctrldown_g.gif
www/pic/ctrlright_g.gif
www/pic/helpvolume.jpg
www/pic/ctrlhome_g.gif
www/pic/stop.gif
www/pic/ctrlleft_g.gif
www/pic/sideleft1.gif
www/pic/ctrlright.gif
www/pic/autopatrol.gif
www/pic/helpmute.jpg
www/pic/sideleft2.gif
www/pic/sideright2.gif
www/pic/short_modnum.gif
www/pic/ctrlup.gif
www/pic/wireless_bottom.gif
378A40
$ tar -xvf 378A40
setup/
setup/writewebpage
setup/writebootimage
setup/install
setup/writebootenv
setup/.svn/
setup/.svn/props/
setup/.svn/format
setup/.svn/prop-base/
setup/.svn/prop-base/writel1l2.svn-base
setup/.svn/prop-base/writewebpage.svn-base
setup/.svn/prop-base/writebootenv.svn-base
setup/.svn/prop-base/install.svn-base
setup/.svn/prop-base/writebootimage.svn-base
setup/.svn/all-wcprops
setup/.svn/entries
setup/.svn/text-base/
setup/.svn/text-base/writel1l2.svn-base
setup/.svn/text-base/writewebpage.svn-base
setup/.svn/text-base/writebootenv.svn-base
setup/.svn/text-base/install.svn-base
setup/.svn/text-base/writebootimage.svn-base
setup/.svn/tmp/
setup/.svn/tmp/props/
setup/.svn/tmp/prop-base/
setup/.svn/tmp/text-base/
setup/writel1l2
And then mount the initrd.img to copy information from it and analyze it.
$ sudo mount -o loop initrd.img /home/imagefile/
There are next folders inside of initrd.img :
$ ls
bin dev drivers etc home lib linuxrc lost+found mnt proc root sbin tmp usr var
Also, I found that firmware from 5220 A1 and from 5220 A2 are identical. And now my A1 cam working on 1.05 (03/18/2009) A2 firmware version from _ww.dlink.com.sg/dcs-5220/
UPD. Wireshark-ed firmware process log (from webUI):
335 438.799789 192.168.0.99 192.168.0.56 FTP 114 Response: 220 Network-Camera FTP server (GNU inetutils 1.4.2) ready.
337 438.800105 192.168.0.56 192.168.0.99 FTP 66 Request: USER admin
339 438.803092 192.168.0.99 192.168.0.56 FTP 88 Response: 331 Password required for admin.
341 438.803503 192.168.0.56 192.168.0.99 FTP 61 Request: PASS
342 438.805896 192.168.0.99 192.168.0.56 FTP 81 Response: 230 User admin logged in.
344 438.806687 192.168.0.56 192.168.0.99 FTP 62 Request: TYPE I
345 438.818062 192.168.0.99 192.168.0.56 FTP 74 Response: 200 Type set to I.
347 438.818488 192.168.0.56 192.168.0.99 FTP 60 Request: PASV
348 438.820099 192.168.0.99 192.168.0.56 FTP 100 Response: 227 Entering Passive Mode (192,168,0,99,4,1)
353 438.821111 192.168.0.56 192.168.0.99 FTP 70 Request: STOR flash.pkg
354 438.838508 192.168.0.99 192.168.0.56 FTP 112 Response: 150 Opening BINARY mode data connection for 'flash.pkg'.
356 438.839333 192.168.0.99 192.168.0.56 FTP 81 Response: 214-firmware upgrade begin
358 438.843916 192.168.0.56 192.168.0.99 FTP-DATA 5894 [TCP Window Full] FTP Data: 5840 bytes (PASV) (STOR flash.pkg)
360 438.845280 192.168.0.56 192.168.0.99 FTP-DATA 2406 FTP Data: 2352 bytes (PASV) (STOR flash.pkg)
381 439.300480 192.168.0.99 192.168.0.56 FTP 123 Response: It will takes about 3-5 minutes.<br> 385 439.426777 192.168.0.99 192.168.0.56 FTP 128 Response: Do not turn off the power or remove the network cable during upgrade!<br>
391 439.926748 192.168.0.99 192.168.0.56 FTP 123 Response: System will restart automatically when upgrade is finished.<br>
395 440.399163 192.168.0.99 192.168.0.56 FTP 123 Response: Please wait...<br> 1763 460.987774 192.168.0.56 192.168.0.99 FTP-DATA 4671 FTP Data: 4617 bytes (PASV) (STOR flash.pkg)
1775 478.867766 192.168.0.99 192.168.0.56 FTP 69 Response: Processing<br>