Login  Register

Re: [FIRMWARE] Itus Networks Shield Firmware Upgrade *WIP*

Posted by Roadrunnere42 on Aug 16, 2019; 4:52pm
URL: https://itus.accessinnov.com/FIRMWARE-Itus-Networks-Shield-Firmware-Upgrade-WIP-tp1726p1834.html

I'm having trouble with the new image here is what I have done.
1. switch to router
2. mount /dev/mmcblk0p1 /overlay
3. copy image to overlay
4. umount /overlay
5. could not see the file /.norwits when still in router mode (was not sure if I  should have rebooted in gateway and then looked for /.norwits, but as it stood no ip address was present)
6. switched to gateway and rebooted, no ip address given out so could not connect.

so I reset the shield back to factory setting and sp1.51 booted fine, so i copied the new image across, still no ip address, this time connected the serial cable and the output is below

[    0.000000] Linux version 4.19.65 (grommish@norwits) (gcc version 7.4.0 (OpenWrt GCC 7.4.0 r10665-efaace1f8b)) #0 SMP Sun Aug 11 19:12:34 2019
[    0.000000] Skipping L2 locking due to reduced L2 cache size
[    0.000000] CVMSEG size: 3 cache lines (384 bytes)
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 000d9602 (Cavium Octeon III)
[    0.000000] FPU revision is: 00739600
[    0.000000] Checking for the multiply/shift bug... no.
[    0.000000] Checking for the daddiu bug... no.
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 0000000009400000 @ 0000000005c00000 (usable)
[    0.000000]  memory: 0000000000c00000 @ 000000000f200000 (usable)
[    0.000000]  memory: 000000002f000000 @ 0000000020000000 (usable)
[    0.000000]  memory: 0000000004a795b0 @ 0000000001100000 (usable)
[    0.000000] Wasting 243712 bytes for tracking 4352 unused pages
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Using passed Device Tree.
[    0.000000] software IO TLB: mapped [mem 0x06800000-0x06840000] (0MB)
[    0.000000] Primary instruction cache 78kB, virtually tagged, 39 way, 16 sets, linesize 128 bytes.
[    0.000000] Primary data cache 32kB, 32-way, 8 sets, linesize 128 bytes.
[    0.000000] Zone ranges:
[    0.000000]   DMA32    [mem 0x0000000000000000-0x00000000efffffff]
[    0.000000]   Normal   empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000005b78fff]
[    0.000000]   node   0: [mem 0x0000000005c00000-0x000000000effffff]
[    0.000000]   node   0: [mem 0x000000000f200000-0x000000000fdfffff]
[    0.000000]   node   0: [mem 0x0000000020000000-0x000000004effffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x000000004effffff]
[    0.000000] random: get_random_bytes called from start_kernel+0x94/0x500 with crng_init=0
[    0.000000] percpu: Embedded 19 pages/cpu s39712 r8192 d29920 u77824
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 253376
[    0.000000] Kernel command line:  bootoctlinux 0x20000000 numcores=2 serial#=752011191521-36838 console=ttyS0,115200
[    0.000000] Dentry cache hash table entries: 131072 (order: 8, 1048576 bytes)
[    0.000000] Inode-cache hash table entries: 65536 (order: 7, 524288 bytes)
[    0.000000] Memory: 916056K/1027556K available (5458K kernel code, 311K rwdata, 1332K rodata, 52464K init, 16677K bss, 111500K reserved, 0K cma-res
erved)
[    0.000000] SLUB: HWalign=128, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000] rcu:     CONFIG_RCU_FANOUT set to non-default value of 32.
[    0.000000] rcu:     RCU restricting CPUs from NR_CPUS=16 to nr_cpu_ids=2.
[    0.000000] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2
[    0.000000] NR_IRQS: 127
[    0.000000] CIB interrupt controller probed: 800107000000e000 23
[    0.000000] CIB interrupt controller probed: 800107000000e200 12
[    0.000000] CIB interrupt controller probed: 800107000000e400 6
[    0.000000] CIB interrupt controller probed: 800107000000ec00 15
[    0.000000] CIB interrupt controller probed: 800107000000e600 4
[    0.000000] CIB interrupt controller probed: 800107000000e800 11
[    0.000000] CIB interrupt controller probed: 800107000000e900 11
[   24.538515] clocksource: OCTEON_CVMCOUNT: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns
[   24.549570] Calibrating delay loop (skipped) preset value.. 2000.00 BogoMIPS (lpj=1000000)
[   24.557819] pid_max: default: 32768 minimum: 301
[   24.562487] Mount-cache hash table entries: 2048 (order: 2, 16384 bytes)
[   24.569104] Mountpoint-cache hash table entries: 2048 (order: 2, 16384 bytes)
[   24.576617] Checking for the daddi bug... no.
[   24.581289] rcu: Hierarchical SRCU implementation.
[   24.586250] smp: Bringing up secondary CPUs ...
[   24.590858] SMP: Booting CPU01 (CoreId  1)...
[   24.595154] CPU1 revision is: 000d9602 (Cavium Octeon III)
[   24.595157] FPU revision is: 00739600
[   24.595265] smp: Brought up 1 node, 2 CPUs
[   24.610515] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns
[   24.620126] futex hash table entries: 512 (order: 4, 65536 bytes)
[   24.626496] NET: Registered protocol family 16
[   24.635441] PCIe: Initializing port 0
[   24.642181] PCIe: BIST2 FAILED for port 0 (0x0000000000000003)
[   24.745172] random: fast init done
[   26.647881] PCIe: Link timeout on port 0, probably the slot is empty
[   26.654181] PCIe: Initializing port 1
[   26.661052] PCIe: BIST FAILED for port 1 (0xffffffffffffffff)
[   28.671759] PCIe: Link timeout on port 1, probably the slot is empty
[   28.684050] SCSI subsystem initialized
[   28.687837] usbcore: registered new interface driver usbfs
[   28.693244] usbcore: registered new interface driver hub
[   28.698519] usbcore: registered new device driver usb
[   28.703687] PCI host bridge to bus 0000:00
[   28.707638] pci_bus 0000:00: root bus resource [mem 0x1000000000000]
[   28.713967] pci_bus 0000:00: root bus resource [io  0x0000]
[   28.719532] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[   28.726313] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[   28.735699] clocksource: Switched to clocksource OCTEON_CVMCOUNT
[   28.742149] NET: Registered protocol family 2
[   28.746777] tcp_listen_portaddr_hash hash table entries: 512 (order: 1, 8192 bytes)
[   28.754301] TCP established hash table entries: 8192 (order: 4, 65536 bytes)
[   28.761400] TCP bind hash table entries: 8192 (order: 5, 131072 bytes)
[   28.767953] TCP: Hash tables configured (established 8192 bind 8192)
[   28.774271] UDP hash table entries: 512 (order: 2, 16384 bytes)
[   28.780137] UDP-Lite hash table entries: 512 (order: 2, 16384 bytes)
[   28.786589] NET: Registered protocol family 1
[   29.007848] Crashlog allocated RAM at address 0x3f00000
[   29.013088] workingset: timestamp_bits=62 max_order=18 bucket_order=0
[   29.024548] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[   29.030387] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[   29.042391] io scheduler noop registered
[   29.046180] io scheduler deadline registered (default)
[   29.051745] octeon_gpio 1070000000800.gpio-controller: OCTEON GPIO driver probed.
[   29.059303] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[   29.065955] console [ttyS0] disabled
[   29.069405] 1180000000800.serial: ttyS0 at MMIO 0x1180000000800 (irq = 44, base_baud = 37500000) is a OCTEON
[   29.079211] console [ttyS0] enabled
[   29.079211] console [ttyS0] enabled
[   29.086157] bootconsole [early0] disabled
[   29.086157] bootconsole [early0] disabled
[   29.094414] 1180000000c00.serial: ttyS1 at MMIO 0x1180000000c00 (irq = 45, base_baud = 37500000) is a OCTEON
[   29.104518] octeon_rng octeon_rng: Octeon Random Number Generator
[   29.110768] cacheinfo: Failed to find cpu0 device node
[   29.115937] cacheinfo: Unable to detect cache hierarchy for CPU 0
[   29.124754] loop: module loaded
[   29.128383] libphy: mdio_octeon: probed
[   29.132272] [Firmware Warn]: /soc@0/mdio@1180000001800/ethernet-phy@0: Whitelisted compatible string. Please remove
[   29.152525] irq: gpio-controller@1070000000800 didn't like hwirq-0x7 to VIRQ48 mapping (rc=-22)
[   29.161376] [Firmware Warn]: /soc@0/mdio@1180000001800/ethernet-phy@1: Whitelisted compatible string. Please remove
[   29.180797] irq: gpio-controller@1070000000800 didn't like hwirq-0x7 to VIRQ48 mapping (rc=-22)
[   29.189651] [Firmware Warn]: /soc@0/mdio@1180000001800/ethernet-phy@2: Whitelisted compatible string. Please remove
[   29.209086] irq: gpio-controller@1070000000800 didn't like hwirq-0x7 to VIRQ48 mapping (rc=-22)
[   29.217935] [Firmware Warn]: /soc@0/mdio@1180000001800/ethernet-phy@3: Whitelisted compatible string. Please remove
[   29.237377] irq: gpio-controller@1070000000800 didn't like hwirq-0x7 to VIRQ48 mapping (rc=-22)
[   29.246218] mdio_octeon 1180000001800.mdio: Probed
[   29.251220] libphy: Fixed MDIO Bus: probed
[   29.255411] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[   29.261958] ehci-pci: EHCI PCI platform driver
[   29.266444] ehci-platform: EHCI generic platform driver
[   29.271759] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[   29.277972] ohci-platform: OHCI generic platform driver
[   29.283331] usbcore: registered new interface driver usb-storage
[   29.289392] octeon_wdt: Initial granularity 5 Sec
[   30.182140] Interface 0 has 4 ports (SGMII)
[   30.186384] Interface 1 has 4 ports (SGMII)
[   30.191141] Interface 3 has 4 ports (LOOP)
[   30.201583] NET: Registered protocol family 10
[   30.207963] Segment Routing with IPv6
[   30.211725] NET: Registered protocol family 17
[   30.216214] 8021q: 802.1Q VLAN Support v1.8
[   30.221097] OF: fdt: not creating '/sys/firmware/fdt': CRC check failed
[   30.250254] Freeing unused kernel memory: 52464K
[   30.254898] This architecture does not have kernel memory protection.
[   30.261352] Run /init as init process
Waiting for external root for Gateway: /dev/mmcblk1p3 : 0
[   31.341712] random: crng init done
Waiting for external root for Gateway: /dev/mmcblk1p3 : 1
Waiting for external root for Gateway: /dev/mmcblk1p3 : 2
Waiting for external root for Gateway: /dev/mmcblk1p3 : 3
Waiting for external root for Gateway: /dev/mmcblk1p3 : 4
Waiting for external root for Gateway: /dev/mmcblk1p3 : 5
Waiting for external root for Gateway: /dev/mmcblk1p3 : 6
Waiting for external root for Gateway: /dev/mmcblk1p3 : 7
Waiting for external root for Gateway: /dev/mmcblk1p3 : 8
Waiting for external root for Gateway: /dev/mmcblk1p3 : 9
Waiting for external root for Gateway: /dev/mmcblk1p3 : 10
Waiting for external root for Gateway: /dev/mmcblk1p3 : 11
Waiting for external root for Gateway: /dev/mmcblk1p3 : 12
Waiting for external root for Gateway: /dev/mmcblk1p3 : 13
Waiting for external root for Gateway: /dev/mmcblk1p3 : 14
Waiting for external root for Gateway: /dev/mmcblk1p3 : 15
Waiting for external root for Gateway: /dev/mmcblk1p3 : 16
Waiting for external root for Gateway: /dev/mmcblk1p3 : 17
[   48.933624] mmc1: new DDR MMC card at address 0001
[   48.938822] mmcblk1: mmc1:0001 P1XXXX 3.60 GiB
[   48.943491] mmcblk1boot0: mmc1:0001 P1XXXX partition 1 2.00 MiB
[   48.949528] mmcblk1boot1: mmc1:0001 P1XXXX partition 2 2.00 MiB
[   48.955541] mmcblk1rpmb: mmc1:0001 P1XXXX partition 3 128 KiB, chardev (252:0)
[   48.963557]  mmcblk1: p1 p2 p3 p4
Waiting for external root for Gateway: /dev/mmcblk1p3 : 18
Found /sys/block/mmcblk1/mmcblk1p3 : 19
Creating /dev/mmcblk1[   49.334145] EXT4-fs (mmcblk1p3): mounting ext3 file system using the ext4 subsystem
p3
Mounting external root for Gateway /dev/mmcblk1p3 on /extroot
[   49.521239] EXT4-fs (mmcblk1p3): recovery complete
[   49.528738] EXT4-fs (mmcblk1p3): mounted filesystem with ordered data mode. Opts: (null)
Found /extroot/init
Firstboot flag: 0
[   49.745626] init: Console is alive
[   49.749177] init: - watchdog -
[   49.882126] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[   49.907045] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[   49.923832] init: - preinit -
[   50.106638] eth0: 1000 Mbps Full duplex, port 0, queue 0
[   50.112099] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[   51.158868] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   53.175608] mount_root: mounting /dev/root
[   53.180389] EXT4-fs (mmcblk1p3): re-mounted. Opts: (null)
[   53.195494] urandom-seed: Seeding with /etc/urandom.seed
[   53.230121] eth0: Link down
[   53.237075] procd: - early -
[   53.240041] procd: - watchdog -
[   53.767757] procd: - watchdog -
[   53.771084] procd: - ubus -
[   53.825173] procd: - init -
Please press Enter to activate this console.
[   53.983975] urngd: v1.0.0 started.
[   54.009639] kmodloader: loading kernel modules from /etc/modules.d/*
[   54.043878] Mirror/redirect action on
[   54.052458] u32 classifier
[   54.055203]     input device check on
[   54.058887]     Actions configured
[   54.093266] usbcore: registered new interface driver ums-alauda
[   54.099729] usbcore: registered new interface driver ums-cypress
[   54.106297] usbcore: registered new interface driver ums-datafab
[   54.112889] usbcore: registered new interface driver ums-freecom
[   54.119894] usbcore: registered new interface driver ums-isd200
[   54.126451] usbcore: registered new interface driver ums-jumpshot
[   54.133185] usbcore: registered new interface driver ums-karma
[   54.139738] usbcore: registered new interface driver ums-sddr09
[   54.146249] usbcore: registered new interface driver ums-sddr55
[   54.152870] usbcore: registered new interface driver ums-usbat
[   54.174874] xt_time: kernel timezone is -0000
[   54.183135] PPP generic driver version 2.4.2
[   54.188494] NET: Registered protocol family 24
[   54.194591] kmodloader: done loading kernel modules from /etc/modules.d/*
[   56.712252] br-lan: port 1(eth1) entered blocking state
[   56.717533] br-lan: port 1(eth1) entered disabled state
[   56.722981] device eth1 entered promiscuous mode
[   56.729084] br-lan: port 1(eth1) entered blocking state
[   56.734349] br-lan: port 1(eth1) entered forwarding state
[   56.739897] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   56.769592] eth2: 1000 Mbps Full duplex, port 2, queue 2
[   56.776024] br-lan: port 2(eth2) entered blocking state
[   56.781317] br-lan: port 2(eth2) entered disabled state
[   56.786791] device eth2 entered promiscuous mode
[   56.791515] br-lan: port 2(eth2) entered blocking state
[   56.796774] br-lan: port 2(eth2) entered forwarding state
[   56.806958] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[   57.751046] br-lan: port 1(eth1) entered disabled state
[   57.756511] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[   57.763637] br-lan: port 2(eth2) entered disabled state
[   57.815028] br-lan: port 2(eth2) entered blocking state
[   57.820317] br-lan: port 2(eth2) entered forwarding state
[   64.992960] eth0: 1000 Mbps Full duplex, port 0, queue 0
[   64.998309] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready


On Fri, 16 Aug 2019 at 11:42, Gnomad [via Itus Networks Owners Forum] <[hidden email]> wrote:
Per your suggestion Grommish, I've posted a new `/etc/snort/updaterules.sh` which now also handles IP blacklists.  

Example updaterules.sh output

The new script also selects the emerging threats files to use from a `/etc/snort/updaterules.emerging-threats.txt` file, to make it easy to include or exclude new ones. I've updated my pull request with all the new files at https://github.com/Grommish/Itus_Shield_v2/pull/1/commits

Could be worth retrofitting some of this to the old fw_upgrade.sh for other punters too..  e.g. given defunct Zeus download now inserts dodgy lines into snort.rules.  However to be honest, I'm thinking your new image is the way forward Grommish!

OpenWrt SNAPSHOT, r10391-3d8d528939



If you reply to this email, your message will be added to the discussion below:
http://itus.accessinnov.com/FIRMWARE-Itus-Networks-Shield-Firmware-Upgrade-WIP-tp1726p1833.html
To start a new topic under Technical Discussion, email [hidden email]
To unsubscribe from Itus Networks Owners Forum, click here.
NAML