Da quello che abbiamo potuto vedere la cosa funziona così, quando il router non ha nessuna configurazione nella memoria esso pesca la configurazione dalla scheda e se la memorizza, nei successivi avvii non fa altro che confrontare i parametri della scheda con quelli memorizzati..

ATTENZIONE: Se modifica i parametri memorizzati il router scriverà i nuovi parametri sulla scheda e voi avrete perso tutte le configurazioni (ci è successo a noi :P)

Vi allego l'intero output del boot preso da seriale

CFE version 1.0.37-3.4 for BCM96348 (32bit,SP,BE)
Build Date: mar gen 24 09:26:30 CET 2006 ([email protected])
Copyright (C) 2003,2004,2005 Telsey Telecommunications.

Boot Address 0xbfc00000

Initializing Arena.
Initializing Devices.
Parallel flash device: name MX29LV640T, id 0x22c9, size 8192KB
Auto-negotiation timed-out
10 MB Half-Duplex (assumed)
Check consistency for image tag [1]: Found good image at partition [1]
Check consistency for image tag [2]: Found good image at partition [2]
CPU type 0x29107: 256MHz, Bus: 128MHz, Ref: 32MHz
Total memory: 16777216 bytes (16MB)

Total memory used by CFE:  0x80401000 - 0x80526D90 (1203600)
Initialized Data:          0x8041E440 - 0x80420270 (7728)
BSS Area:                  0x80420270 - 0x80424D90 (19232)
Local Heap:                0x80424D90 - 0x80524D90 (1048576)
Stack Area:                0x80524D90 - 0x80526D90 (8192)
Text (code) segment:       0x80401000 - 0x8041E440 (119872)
Boot area (physical):      0x00527000 - 0x00567000
Relocation Factor:         I:00000000 - D:00000000

Board IP address                  : 192.168.1.1  
Host IP address                   : 192.168.1.100  
Gateway IP address                :   
Run from flash/host (f/h)         : f  
Default host run file name        : vmlinux  
Default host flash file name      : bcm963xx_fs_kernel  
Boot delay (0-9 seconds)          : 1  
Boot image (0=latest, 1=previous) : 0  
Board Id Name                     : MAGIC  
Psi size in KB                    : 24
Number of MAC Addresses (1-32)    : 8  
Base MAC Address                  : 00:03:6f:1e:1d:90  
Ethernet PHY Type                 : Internal
Memory size in MB                 : 16

mac server test........................

### 
### Not default mac address
### 00 03 6f 1e 1d 90 
*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 110
Booting from latest image (0xc0000000) ...
Code Address: 0x80010000, Entry Address: 0x80191018
Decompression OK!
Entry at 0x80191018
Closing network.
Starting program at 0x80191018
Linux version 2.6.8.1 (car...@carpao_lab) (gcc version 3.4.2) #1 Fri Aug 4 
17:38:11 CEST 2006

Parallel flash device: name MX29LV640T, id 0x22c9, size 8192KB

Total Flash size: 8192K with 135 sectors

MAGIC prom init

CPU revision is: 00029107

Determined physical RAM map:

 memory: 00fa0000 @ 00000000 (usable)

On node 0 totalpages: 4000

  DMA zone: 4000 pages, LIFO batch:1

  Normal zone: 0 pages, LIFO batch:1

  HighMem zone: 0 pages, LIFO batch:1

Built 1 zonelists

Kernel command line: root=31:0 ro noinitrd

brcm mips: enabling icache and dcache...

Primary instruction cache 16kB, physically tagged, 2-way, linesize 16 bytes.

Primary data cache 8kB 2-way, linesize 16 bytes.

PID hash table entries: 64 (order 6: 512 bytes)

Using 128.000 MHz high precision timer.

Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)

Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)

Memory: 14076k/16000k available (1328k kernel code, 1904k reserved, 207k data, 
72k init, 0k highmem)

Calibrating delay loop... 254.77 BogoMIPS

Mount-cache hash table entries: 512 (order: 0, 4096 bytes)

Checking for 'wait' instruction...  unavailable.

NET: Registered protocol family 16

Can't analyze prologue code at 8015aa24

PPP generic driver version 2.4.2

NET: Registered protocol family 24

Using noop io scheduler

bcm963xx_mtd driver v1.0

bcm963xx_mtd: rootfs_addr = 0xBF800100, kernel_addr = 0xBFAC1100

brcmboard: brcm_board_init entry

Confirm button interrupt has been configured

bcm963xx_serial driver v2.0

NET: Registered protocol family 2

IP: routing cache hash table of 512 buckets, 4Kbytes

TCP: Hash tables configured (established 512 bind 1024)

NET: Registered protocol family 1

NET: Registered protocol family 17

Ebtables v2.0 registered

NET: Registered protocol family 8

NET: Registered protocol family 20

802.1Q VLAN Support v1.8 Ben Greear <[email protected]>

All bugs added by David S. Miller <[email protected]>

VFS: Mounted root (squashfs filesystem) readonly.

Freeing unused kernel memory: 72k freed


init started:  BusyBox v1.00 (2006.08.04-15:44+0000) multi-call binary
Algorithmics/MIPS FPU Emulator v1.5



BusyBox v1.00 (2006.08.04-15:44+0000) Built-in shell (msh)
Enter 'help' for a list of built-in commands.


Loading drivers and kernel modules... 

atmapi: module license 'Proprietary' taints kernel.

blaadd: blaa_detect entry

adsl: adsl_init entry

Broadcom BCMPROCFS v1.0 initialized

Broadcom BCM6348B0 Ethernet Network Device v0.3 Aug  4 2006 17:36:49

Config Internal PHY Through MDIO

BCM63xx_ENET: Auto-negotiation timed-out

BCM63xx_ENET: 10 MB Half-Duplex (assumed)

eth0: MAC Address: 00:03:6F:1E:1D:90

Broadcom BCM6348B0 Ethernet Network Device v0.3 Aug  4 2006 17:36:49

Config External PHY Through MDIO

mii_init: mii hardware reset

BCM63xx_ENET: Auto-negotiation timed-out

BCM63xx_ENET: 10 MB Half-Duplex (assumed)

eth1: MAC Address: 00:03:6F:1E:1D:91

Telsey BCM6348B0 USB Network Device v0.4 Aug  4 2006 17:36:52

usb0: MAC Address: 00 03 6F 1E 1D 92

usb0: Host MAC Address: 00 03 6F 1E 1D 93

MAGIC USB configuration

Telsey smart card: tda8007_module_init

tda8007: Found TDA 8007BHL/C2

loading Broadcom WIFI module
PCI: Setting latency timer of device 0000:00:01.0 to 64

PCI: Enabling device 0000:00:01.0 (0004 -> 0006)

wl0: Broadcom BCM4318 802.11 Wireless Controller 3.131.35.0.cpe0.0

dgasp: kerSysRegisterDyingGaspHandler: wl0 registered 

wlctl: wlctl: smartcardmngr:Initializing SmartCardMngr
smartcardmngr:SMART CARD INSERTED
Answer To Reset:

TS = 3b

T0 = ff

TA1 = 94

TB1 = 00

TC1 = ff

TD1 = 80

TD2 = b1

TA3 = fe

TB3 = 45

TD3 = 1f

TA4 = 03

HB 1 = 00 Status information the end of the historical bytes.

HB 2 = 68 Pressuing data object of length 8

HB 3 = d2 

HB 4 = 76 

HB 5 = 00 

HB 6 = 00 

HB 7 = 28 

HB 8 = fe 

HB 9 = 05 

HB10 = 22 

HB11 = 31 

HB12 = 80 

HB13 = 00 

HB14 = 90 

HB15 = 00 

TCK = 1e

sc_connect_card: _sc_parse_atr prima
sc_connect_card: _sc_parse_atr dopo
sc_connect_card ctx->card_drivers[0]=MICARDO 2.1
mcrd_init exiting
smartcardmngr:isMyCard?
smartcardmngr:my card serial number      : BE:80:05:FD:85:0B:EF:6A:00:FF:00:10
smartcardmngr:inserted card serial number: BE:80:05:FD:85:0B:EF:6A:00:FF:00:10
smartcardmngr:IT'S MY CARD. SAVE A BACKUP COPY OF CURRENT CONFIGURATION
smartcardmngr:execute a backup on smartcard
smartcardmngr:board md5    : A3:6A:26:B2:61:91:3C:B4:04:19:99:70:7F:2C:9D:25
smartcardmngr:smartcard md5: A3:6A:26:B2:61:91:3C:B4:04:19:99:70:7F:2C:9D:25
smartcardmngr:board and smartcard configurations are the same, do not save 
anything
BcmAdsl_Initialize=0xC0057228, g_pFnNotifyCallback=0xC006B564

AdslCoreHwReset: AdslOemDataAddr = 0xA0FFB21C

dgasp: kerSysRegisterDyingGaspHandler: dsl0 registered 

ip_tables: (C) 2000-2002 Netfilter core team

ip_conntrack version 2.1 (125 buckets, 0 max) - 368 bytes per conntrack

ip_conntrack_pptp version 2.1 loaded

ip_nat_pptp version 2.0 loaded

ip_conntrack_h323: init 

ip_nat_h323: initialize the module!

insmod: cannot open module 
`/lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/broadcom/ip_conntrack_ipsec.ko':
 No such file or directory
insmod: cannot open module 
`/lib/modules/2.6.8.1/kernel/net/ipv4/netfilter/broadcom/ip_nat_ipsec.ko': No 
such file or directory

==>   Bcm963xx Software Version: 3.4.19.A2pB019b8.d16m   <==

device usb0 entered promiscuous mode

bcm63xxenet: Command 35318 not supported.

app: configure ethernet eth0 speed failed.
bcm63xxenet: Command 35317 not supported.

app: configure ethernet eth0 duplex type failed.
br0: port 1(usb0) entering learning state

br0: topology change detected, propagating

br0: port 1(usb0) entering forwarding state

device eth0 entered promiscuous mode

br0: port 2(eth0) entering learning state

br0: topology change detected, propagating

br0: port 2(eth0) entering forwarding state

bcm63xxenet: Command 35318 not supported.

app: configure ethernet eth1 speed failed.
bcm63xxenet: Command 35317 not supported.

app: configure ethernet eth1 duplex type failed.
device eth1 entered promiscuous mode

br0: port 3(eth1) entering learning state

br0: topology change detected, propagating

br0: port 3(eth1) entering forwarding state


Setting SSID "Alice-*********"
Setting SSID "Guest"
Setting country code using abbreviation: "IT"
wlctl: Unsupported
wl0 current channel 11
device wl0 entered promiscuous mode

br0: port 4(wl0) entering learning state

br0: topology change detected, propagating

br0: port 4(wl0) entering forwarding state

device wl0.1 entered promiscuous mode

ManageableDeviceSize object not found in PSI
pvc2684d: Interface "nas_8_35" created sucessfully

pvc2684d: Communicating over ATM 0.8.35, encapsulation: LLC

device nas_8_35 entered promiscuous mode

br0: port 6(nas_8_35) entering learning state

br0: topology change detected, propagating

br0: port 6(nas_8_35) entering forwarding state

pvc2684d: Interface "nas_8_36" created sucessfully

pvc2684d: Communicating over ATM 0.8.36, encapsulation: LLC

device usb0 left promiscuous mode

br0: port 1(usb0) entering disabled state

device usb0 entered promiscuous mode

br0: port 1(usb0) entering learning state

br0: topology change detected, propagating

br0: port 1(usb0) entering forwarding state

device eth1 left promiscuous mode

br0: port 3(eth1) entering disabled state

device eth1 entered promiscuous mode

br0: port 3(eth1) entering learning state

br0: topology change detected, propagating

br0: port 3(eth1) entering forwarding state

device eth0 left promiscuous mode

br0: port 2(eth0) entering disabled state

device eth0 entered promiscuous mode

br1: port 1(eth0) entering learning state

br1: topology change detected, propagating

br1: port 1(eth0) entering forwarding state

device nas_8_36 entered promiscuous mode

br1: port 2(nas_8_36) entering learning state

br1: topology change detected, propagating

br1: port 2(nas_8_36) entering forwarding state

Cert File empty
Cert File empty
resetEth(): eth0
resetEth(): eth1
BcmTermMngrInit
TermMngr::configRestore()
TermMngr::configRestore() 0 entries in psi, status = 3
TermMngr::connectionNameSet()
TermMngr::connectionNameSet() service = User Session, wan name = ppp_8_35_2,vpi 
= 8, vci = 35, conId = 2
TermMngr::wanStart() Start = 1, bStarted = 0,term natted num = 0, vpi = 8, vci 
= 35
TermMngr::sizeListTermNatted 0 bStart 1 m_bWanStarted 0
BcmWiseconMngrInit
WiseconMngr::init()
WiseconMngr::wiseconServerStart()
wisecon-server main
BcmWiFiRepeaterMngrInit
WsFsm::Fsm():
WsFsm::setClientMac(): macAddr = 
sntp: host not found
WiFiRepeaterMngr::init()
Write in a subdirectory pid for wifi repeater process
Login: BcmWan_startInterface: vpi = 8, vci = 35, conId = 1
pWanId status = 0
BcmWan_startInterface: vpi = 8, vci = 36, conId = 1
pWanId status = 0
br1: port 1(eth0) entering disabled state

br0: port 3(eth1) entering disabled state

br0: port 1(usb0) entering disabled state

Setting SSID "Alice-********"
Setting SSID "Guest"
br0: port 4(wl0) entering disabled state

Setting country code using abbreviation: "IT"
wlctl: Unsupported
wl0 current channel 11
br0: port 4(wl0) entering learning state

br0: topology change detected, propagating

br0: port 4(wl0) entering forwarding state

device wl0 is already a member of a bridge; can't enslave it to bridge br0.
device wl0.1 is already a member of a bridge; can't enslave it to bridge br0.
WsFsm::setWlVar(): 
WsFsm::setWepKey(): wepKey = *********** (li abbiamo cancellati tanto per)
WsFsm::setWepKey(): wepHexKey = ****************
WsFsm::setWpaKey(): wpaKey = *************************
WsFsm::saveWlEncryptionConfig():
WsFsm::saveWlEncryptionConfig(): Wpa open Wep enabled
WsFsm::getAuthMode: open
WsFsm::getWepMode: enabled
WsFsm::setEncryptionFlag(): set m_bEncryption = 1
WsFsm::saveWlMacFilterConfig():
WsFsm::saveWlMacFilterConfig disabled
WsFsm::getMacFilterMode: disabled
WsFsm::setMacFilterFlag(): set m_bMacFilter = 0
WsFsm::setLedState():
WsFsm::setIdRequestAuthentication(): 0
Ws::Ws(): set m_uiKeyNumPressed = 0

Password: 
Login incorrect. Try again.
Login: 

Il giorno 26/mag/09, alle ore 15:06, Emanuele Fia ha scritto:

della smart card penso  .... così se si rompe il router mantendendo la stessa smart non bisogna cambiare impostazioni sul pc ...


Il giorno 26 maggio 2009 15.04, OrazioPirataDelloSpazio (Lorenzo) <[email protected]> ha scritto:
Ma la WPA non è scritta sul router (io non ho alice) ? Se la smartcard
viene inserita su un'altro router cosa succede? parte la WLAN del
proprietario del router o del proprietario della smartcard?

Ciao!

Lorenzo

Emanuele Fia ha scritto:
> Scusate ma per le impostazioni wifi non vengono lette dalla smartcard?
>
> Il giorno 25 maggio 2009 23.01, Paride Desimone <[email protected]
> <mailto:[email protected]>> ha scritto:
>
>     Il giorno lun, 25/05/2009 alle 12.26 +0200, OrazioPirataDelloSpazio
>     (Lorenzo) ha scritto:
>     > Al ritorno dal WCW si parlava di come funziona il firmware sui
>     router di
>     > alice.
>     > Cercando al volo su internet ho trovato due cose interessanti:
>     >
>     > 1) il firmware:
>     >
>     http://rs46.rapidshare.com/files/45790707/AGW2-PLUS_flash_image_8MB.w
>     > 2) un articolo sul reverse engineer di questo firmware
>     > http://www.piccato.it/wikies/openwgate/backup_e_restore
>     >
>     > La parola chiave sembra quindi essere "accesso seriale"!
>
>     A tal proposito vorrei porvi due domande:
>
>     1) Non e' che avete fatto una copia del firmware originale, perche' io
>     l'ho semplicemente sovrascritto, e quello attuale (usr
>     nonmiricordocosa), e' alquanto instabile, si pianta spesso e spesso
>     debbo riflasharlo, perche' sembra sputtanarsi ed anche dopo un reboot,
>     non si ripristina piu'
>
>     2) avete lo schema del cavo seriale ed uno schema di dove connetterlo
>     sul router?
>
>     Paride
>
>     _______________________________________________
>     Wireless mailing list
>     [email protected] <mailto:[email protected]>
> ------------------------------------------------------------------------
>
> _______________________________________________
> Wireless mailing list
> [email protected]
> http://ml.ninux.org/mailman/listinfo/wireless
>

_______________________________________________
Wireless mailing list
[email protected]
http://ml.ninux.org/mailman/listinfo/wireless

_______________________________________________
Wireless mailing list
[email protected]
http://ml.ninux.org/mailman/listinfo/wireless

_______________________________________________
Wireless mailing list
[email protected]
http://ml.ninux.org/mailman/listinfo/wireless

Rispondere a