BUFFALO INC. LinkStation series LS-WSGL678 login: 87438+1 records in 87438+1 records out ---- rcDown(standbying) ---- tar: Removing leading `/' from member names ===== shutdown_proc.sh stopping ===== Save current configuration files delete unnecessary samba lock files on //etc/samba/lock... tar: Removing leading `/' from member names tar: Removing leading `/' from member names Stop daemonwatch:done. Stop logchkd:killall: logchkd: no process killed done. Stop lsprcvd:Stop services: crondStop inetd:done. Stop errormon:killall: errormon: no process killed done. Stop clientUtil_server:rm: cannot remove `/var/run/clientUtil_server-eth0.pid': No such file or directory Shutting down FTPD services: Shutting down SMB services: Shutting down NMB services: Cleanup msdfs symbolic links... [Success] Shutting down WINBIND services: killall: winbindd: no process killed Shutting down PAMSMBD services: killall: pamsmbd: no process killed Stop servecies: atalkd afpd /sbin/hotplug [module] /sbin/hotplug [module] /sbin/hotplug [module] Can't unregister LS-WSGL678:Workstation@* Can't unregister LS-WSGL678:netatalk@* killall: atalkd: no process killed killall: afpd: no process killed killall: papd: no process killed Starting Bonjour services: done stop Shutting down HTTPD services: /usr/local/apache/bin/apachectl stop: httpd stopped killall: speedy: no process killed Deconfiguration network interface: lo eth0 Stop kernelmon:killall: /proc/buffalo/kernevnt: no process killed done. Stopping module subsystem ... Shutting down webaxs ... [Failed. ] killall: mt-daapd: no process killed clearing printer queue Printer lp@LS-WSGL678: Printer lp-ps@LS-WSGL678: Stop services: lpd clearing printer queue Printer 'lp@localhost' - cannot open connection - Connection refused Make sure the remote host supports the LPD protocol Printer 'lp-ps@localhost' - cannot open connection - Connection refused Make sure the remote host supports the LPD protocol Stop services: rarpd tftpd rarpcfgd fwupdated. killall: miconmon_exec.sh: no process killed Stop errormon:killall: errormon: no process killed done. killall: apcupsd: no process killed killall: omronupsd: no process killed errormon ver.1.01(BuildDate Jul 15 2008 15:16:01 compiled for LS-WSGL Series) Started Shutting down kernel logger: Shutting down system logger: [Success] ===== umount_disk.sh stopping ===== \n==== unmounting all disks ==== umount2: Invalid argument umount: /mnt/usbdisk1: Illegal seek umount2: Invalid argument umount: /mnt/usbdisk2: not mounted /sbin/hotplug [block] /sbin/hotplug [block] umount2: Invalid argument umount: /mnt/array1: Illegal seek umount2: Invalid argument umount: /mnt/usbdisk1: Illegal seek /sbin/hotplug [block] swapoff: /dev/md10: Invalid argument [Failed ] ===== start_data_array.sh stopping ===== umount2: Invalid argument umount: /mnt/array1: Illegal seek md: md2 stopped. mdadm: stopped /dev/md2 [Success] ===== sendsigs.sh stopping ===== umount: /proc: device is busy umount: /proc: device is busy [Success] ===== usb.sh stopping ===== FATAL: Could not open /lib/modules/2.6.16.16-arm1/modules.dep.temp for writing: Read-only file system usbcore: deregistering driver usblp /sbin/hotplug [drivers] /sbin/hotplug [module] usbcore: deregistering driver usb-storage /sbin/hotplug [drivers] /sbin/hotplug [module] /sbin/hotplug [drivers] USB: ehci_platform_remove ehci_platform ehci_platform.16781: remove, state 1 usb usb2: USB disconnect, address 1 /sbin/hotplug [usb] /sbin/hotplug [usb_device] [/etc/hotplug.d/usb_device/buffalo.hotplug] usb_device /sbin/hotplug [usb] ehci_platform ehci_platform.16781: USB bus 2 deregistered /sbin/hotplug [usb_host] USB: ehci_platform_remove ehci_platform ehci_platform.4523: remove, state 1 usb usb1: USB disconnect, address 1 /sbin/hotplug [usb] /sbin/hotplug [usb_device] [/etc/hotplug.d/usb_device/buffalo.hotplug] usb_device /sbin/hotplug [usb] ehci_platform ehci_platform.4523: USB bus 1 deregistered /sbin/hotplug [usb_host] /sbin/hotplug [drivers] /sbin/hotplug [module] /sbin/hotplug [drivers] /sbin/hotplug [class] usbcore: deregistering driver usbfs /sbin/hotplug [drivers] /sbin/hotplug [class] usbcore: deregistering driver hub /sbin/hotplug [drivers] /sbin/hotplug [class] /sbin/hotplug [bus] /sbin/hotplug [bus] /sbin/hotplug [bus] /sbin/hotplug [module] [Success] Service stopping :/etc/init.d/atalk.sh ...Stop servecies: atalkd afpd Can't unregister LS-WSGL678:Workstation@* Can't unregister LS-WSGL678:netatalk@* killall: atalkd: no process killed killall: afpd: no process killed killall: papd: no process killed killall: mDNSResponderPosix: no process killed Starting Bonjour services: /etc/init.d/bonjour.sh: line 13: /etc/bonjour.config: Read-only file system /etc/init.d/bonjour.sh: line 14: /etc/bonjour.config: Read-only file system /etc/init.d/bonjour.sh: line 15: /etc/bonjour.config: Read-only file system /etc/init.d/bonjour.sh: line 25: /etc/bonjour.config: Read-only file system /etc/init.d/bonjour.sh: line 26: /etc/bonjour.config: Read-only file system /etc/init.d/bonjour.sh: line 27: /etc/bonjour.config: Read-only file system /etc/init.d/bonjour.sh: line 28: /etc/bonjour.config: Read-only file system done [Success.] unloading :appletalk ... NET: Unregistered protocol family 5 /sbin/hotplug [module] /sbin/hotplug [module] /sbin/hotplug [module] [Success.] unloading :psnap ... [Success.] unloading :llc ... [Success.] Service stopping :/etc/init.d/ftpd.sh ...Shutting down FTPD services: killall: proftpd: no process killed [Failed. ] Service stopping :/etc/init.d/stalk.sh ...[Skipped.] Service stopping :/etc/init.d/smb.sh ...Shutting down SMB services: killall: smbd: no process killed Shutting down NMB services: killall: nmbd: no process killed Cleanup msdfs symbolic links... [Success] Shutting down WINBIND services: killall: winbindd: no process killed Shutting down PAMSMBD services: killall: pamsmbd: no process killed [Failed. ] umount2: Invalid argument umount: /mnt/usbdisk1: Illegal seek unloading :vfat ... [Success.] unloading :fat ... [Success.] Service stopping :/etc/init.d/ftpd.sh ...Shutting down FTPD services: killall: proftpd: no process killed [Failed. ] Service stopping :/etc/init.d/atalk.sh ...Stop servecies: atalkd afpd /sbin/hotplug [module] /sbin/hotplug [module] /sbin/hotplug [module] NET: Registered protocol family 5 Can't unregister LS-WSGL678:Workstation@* Can't unregister LS-WSGL678:netatalk@* killall: atalkd: no process killed killall: afpd: no process killed killall: papd: no process killed killall: mDNSResponderPosix: no process killed Starting Bonjour services: /etc/init.d/bonjour.sh: line 13: /etc/bonjour.config: Read-only file system /etc/init.d/bonjour.sh: line 14: /etc/bonjour.config: Read-only file system /etc/init.d/bonjour.sh: line 15: /etc/bonjour.config: Read-only file system /etc/init.d/bonjour.sh: line 25: /etc/bonjour.config: Read-only file system /etc/init.d/bonjour.sh: line 26: /etc/bonjour.config: Read-only file system /etc/init.d/bonjour.sh: line 27: /etc/bonjour.config: Read-only file system /etc/init.d/bonjour.sh: line 28: /etc/bonjour.config: Read-only file system done [Success.] Service stopping :/etc/init.d/smb.sh ...Shutting down SMB services: killall: smbd: no process killed Shutting down NMB services: killall: nmbd: no process killed Cleanup msdfs symbolic links... [Success] Shutting down WINBIND services: killall: winbindd: no process killed Shutting down PAMSMBD services: killall: pamsmbd: no process killed [Failed. ] umount2: Invalid argument umount: /mnt/usbdisk1: Illegal seek unloading :ntfs ... [Success.] Service stopping :/etc/init.d/ftpd.sh ...Shutting down FTPD services: killall: proftpd: no process killed [Failed. ] Service stopping :/etc/init.d/atalk.sh ...Stop servecies: atalkd afpd Can't unregister LS-WSGL678:Workstation@* Can't unregister LS-WSGL678:netatalk@* killall: atalkd: no process killed killall: afpd: no process killed killall: papd: no process killed killall: mDNSResponderPosix: no process killed Starting Bonjour services: /etc/init.d/bonjour.sh: line 13: /etc/bonjour.config: Read-only file system /etc/init.d/bonjour.sh: line 14: /etc/bonjour.config: Read-only file system /etc/init.d/bonjour.sh: line 15: /etc/bonjour.config: Read-only file system /etc/init.d/bonjour.sh: line 25: /etc/bonjour.config: Read-only file system /etc/init.d/bonjour.sh: line 26: /etc/bonjour.config: Read-only file system /etc/init.d/bonjour.sh: line 27: /etc/bonjour.config: Read-only file system /etc/init.d/bonjour.sh: line 28: /etc/bonjour.config: Read-only file system done [Success.] Service stopping :/etc/init.d/smb.sh ...Shutting down SMB services: killall: smbd: no process killed Shutting down NMB services: killall: nmbd: no process killed Cleanup msdfs symbolic links... [Success] Shutting down WINBIND services: killall: winbindd: no process killed Shutting down PAMSMBD services: killall: pamsmbd: no process killed [Failed. ] umount2: Invalid argument umount: /mnt/usbdisk1: Illegal seek umount2: No such file or directory umount: /proc/bus/usb: Illegal seek unloading :ehci_marvell_hcd ... [Success.] unloading :usb_storage ... [Success.] unloading :usbcore ... [Success.] ===== errormon.sh stopping ===== Stop errormon:done. [Success] ----- rcDown Finished. ---- RETVAL=1, but anyway go on the resume process. killall: sh: no process killed /sbin/hotplug [block] pwrmgr[1478]: mkdir new pwrmgr dir failed: File exists pwrmgr: mkdir new pwrmgr dir failed: File exists Starting pid 8374, console /dev/ttyS0: '/etc/init.d/rcDown' put nologin create ram-rootfs use /boot/initrd.buffalo down all processes restart init(1) with no respawn in inittab(5) kills the survived processes remove /etc/nologin unmount some file-systems. and turn off swaps mount new rootfs copy the PC-list and inittab(5) into new rootfs change rootfs restart new rootfs Starting pid 8380, console /dev/ttyS0: '/bin/umount' The system is going down NOW !! Sending SIGTERM to all processes. Sending SIGKILL to all processes. md: md0 in immediate safe mode md: md10 in immediate safe mode md: md1 in immediate safe mode init started: BusyBox v1.1.1 (2008.07.15-06:14+0000) multi-call binary Starting pid 8385, console /dev/ttyS0: '/bin/umount' Starting pid 8389, console /dev/ttyS0: '/bin/mount' Starting pid 8392, console /dev/ttyS0: '/etc/init.d/standby.rcS' --- rcStart (initrd standby mode) --- ===== exec:create_devlink.sh ===== ===== exec:sethostname.sh ===== configure files from Buffalo parameters. ===== exec:restore_config.sh ===== mount: mount point /boot does not exist Update configuration files ** fail. not fount initfile.tar.gz ===== exec:networking.sh ===== create network files.. IP=[dhcp], netmask=[], dgw=[], dns1=[], dns2=[] killall: dhcpcd: no process killed route: SIOC[ADD|DEL]RT: No such process Configuration network interface: lo eth0 requesting DHCP tout=30[s] networking.sh: dhcp requesting... DontDownIface alwaysFork eth0: link down eth0: link up<5>, full duplex<5>, speed 1 Gbps<5> sendto: count 6 sync 1 sendto: count 5 sync 0 sendto: count 6 sync 0 dhcpcd.exe: interface eth0 has been configured with new IP=192.168.2.45 GATEWAY=192.168.2.1 ** networking.sh dhcp fin. configure files from Buffalo parameters. ===== exec:create_usblink.sh ===== umount2: No such file or directory umount: /boot: Illegal seek ===== exec:closeSysMd.sh ===== md: md0 stopped. md: unbind無事、スリープモードになった。md: export_rdev(sda1) md: unbind md: export_rdev(sdb1) mdadm: stopped /md: md1 stopped. dev/md0 md: unbind md: export_rdev(sda2) md: unbind md: export_rdev(sdb2) mdadm: stopped /md: md10 stopped. dev/md1 md: unbind md: export_rdev(sdb5) md: unbind md: export_rdev(sda5) mdadm: stopped /dev/md10 ===== exec:miconmon.sh ===== err: Core Driver (ERROR) 0 0: Edma Error Reg 0x28 Core Driver (ERROR) 0 0: Flush DMA, type=CALLBACK, commands 0 (on EDMA 0) sh: cannot create /proc/buffalo/gpio/power_control/hdd1: Directory nonexistent ===== exec:kernelmon.sh ===== Starting kernelmon:===== exec:clientUtil_servd.sh ===== Starting clientUtil_server:starting on eth0 ===== exec:pmcd.sh ===== KERNELMOn (lanact 0 full) Starting pid 8808, console /dev/ttyS0: '/usr/local/sbin/pwrmgr' Starting pid 8812, console /dev/ttyS0: '/sbin/getty' KERNELMOn (lanact 1000 full) LS-WSGL678 login:
LS-WSGL678 login: root login[8812]: root login on `ttyS0' BusyBox v1.1.1 (2008.07.15-06:14+0000) Built-in shell (ash) Enter 'help' for a list of built-in commands. # mount /dev/rootfs on / type unknown (rw) proc on /proc type proc (rw) sysfs on /sys type sysfs (rw) # df Filesystem 1k-blocks Used Available Use% Mounted on /dev/ram0 15351 13922 1429 91% / # ps PID Uid VmSize Stat Command 1 root 568 S init 2 root SWN [ksoftirqd/0] 3 root SW< [events/0] 4 root SW< [khelper] 5 root SW< [kthread] 11 root SW< [kblockd/0] 38 root SW [pdflush] 39 root SW [pdflush] 41 root SW< [aio/0] 40 root SW [kswapd0] 42 root SW< [xfslogd/0] 43 root SW< [xfsdatad/0] 44 root SW [crypto] 45 root SW [crypto_ret] 168 root SW< [scsi_eh_0] 169 root SW< [scsi_eh_1] 192 root SW [mtdblockd] 8595 root 200 S /sbin/dhcpcd -L /etc/dhcpc -h LS-WSGL678 -t 15 -x -y 8697 root 616 S /bin/sh /usr/local/sbin/kernelmon 8727 root 276 S /usr/local/sbin/clientUtil_server -i eth0 8749 root 692 S /bin/bash2 /usr/local/sbin/pmcd_exec.sh start 8810 root 484 S /usr/local/sbin/pwrmgr -dbs -l /etc/pwrmgr/pclist -r 8812 root 860 S -sh 8839 root 508 S cat /proc/buffalo/kernevnt 339 root 416 S sleep 3 340 root 796 R ps #EMMode, RAMRoot と同じ?。
ということは、シリアルコンソールがなくとも、 電源 SW を AUTO にしてしばらく待てば、 EMMode, RAMRoot 相当にできるという事?。
ここに telnet でログインできれば、
しめしめ、あとは sda, sdb にアクセスし放題。
ハックキットもインストールできる。
# /usr/sbin/telnetd # ps PID Uid VmSize Stat Command 1 root 568 S init : : 8812 root 944 S -sh 8839 root 508 S cat /proc/buffalo/kernevnt 23748 root 1052 R /bin/bash2 /usr/local/bin/backup_control.sh check 23795 root 260 S /usr/sbin/telnetd 23870 root 796 R ps #動いた。
yasunari@sil:~$ telnet mini.yamasita.jp Trying 192.168.2.45... Connected to mini.yamasita.jp. Escape character is '^]'. Connection closed by foreign host. yasunari@sil:~$だー。
スリープモード には telnet できひんのか。
|
← 関西オープンソース2008 / 関西コミュニティ大決戦:ブース位置 |
ハックの記録 LinkStation/玄箱 をハックしよう |
→ RamRoot に telnet |