シリアルコンソール

PC-P1LAN の中を見た とき、J1 という４ピンヘッダがありシリアルではないかと推測した。
Junker さんから J1 はシリアルコンソールであることの確認、 結線や通信パラメータの情報までいただいた。

追試する。

ケーブルの作成

9-KE の先には LinkStation/玄箱用に結線したコネクタがつながっているので、 その先と J1 とを接続するケーブルが必要となる。
9-KE 側は LinkStation に半田付けするためのコネクタ（FDD の電源と同じも の）P1LAN 側は AT ケースから TURBO スイッチのケーブルを切り取ってきて 使用した
（「 AT ケース」とか「TURBO スイッチ」とか、わかる人いるのかな？？？）
9-KE 側※P1LAN 側
1RXD2
2TXD3
4GND4
※ＰＣから見た信号

電源ＯＮ

Tera Term Pro を起動し、"Setup" → "Serial port" で
PortCOM1
Baud rate115200
Data7 bit
Paritynone
Stop1 bit
Flo controlnone
に設定。

P1LAN の電源を入れる。

でーたぁ 



U-Boot 1.0.0 (Oct  2 2005 - 20:17:34)

U-Boot code: 00C00000 -> 00C35F10  BSS: -> 00C3996C
DRAM Configuration:
Bank #0: 00900000 64 MB
Manuf. ID @ 0x00100000: 0x00000001
Device ID @ 0x00100001: 0x000000ba
Flash: 512 kB
In:    serial
Out:   serial
Err:   serial
Initializing Ethernet
Hit any key to stop autoboot:  0 
RARP broadcast 1
Got Not_PROT_RARP(0x800)
Got RARP(0x8035)
 Hardware Type      = 1
 Protocol Type      = 2048
 Length of Hardware = 6
 Length of Protocol = 4
 Operation Code     = 4
 Sender's MAC/IP    = 00:07:40:CE:xx:yy / 192.168.1.37
 Target's MAC/IP    = 00:0D:0B:C8:aa:bb / 192.168.1.254

TFTP from server 192.168.1.37; our IP address is 192.168.1.254
Filename '/firm/uImage'.
Load address: 0x1000000
Loading: L....H....L....H....L....H....L....H....L....H....L....H....L....H....L....H....
	 L....H....L....H....L....H....L....H....L....H....L....H....L....H....L....H....
	 L....H....L....H....L....H....L....H....L....H....L....H....
done
Bytes transferred = 898316 (db50c hex)
TFTP from server 192.168.1.37; our IP address is 192.168.1.254
Filename '/firm/initrd.boot'.
Load address: 0x2000000
Loading: Got RARP(0x8035)
 Hardware Type      = 1
 Protocol Type      = 2048
 Length of Hardware = 6
 Length of Protocol = 4
 Operation Code     = 4
 Sender's MAC/IP    = 00:07:40:CE:xx:yy / 192.168.1.37
 Target's MAC/IP    = 00:0D:0B:C8:aa:bb / 192.168.1.254

L....H....L....H....L....H....L....H....L....H....L....H....L....H....L....H....
	 L....H....L....H....L....H....L....H....L....H....L....H....L....H....L....H....
	 L....H....L....H....L....H....L....H....L....H....L....H....L....H....L....H....
	 L....H....L....H....L....H....L....H....L....H....L....H....L....H....L....H....
	 L....H....L....H....L....H....L....H....L....H....L....H....L....H....L....H....
	 L....H....L....H....L....H....L....H....L....H....L....H....L....H....L....H....
	 L....H....L....H....L....H....L....H....L....H....L....H....L....H....L....H....
	 L....H....L....H....L....H....L....H....L....H....L....H....L....H....L....H....
	 L....H....L....H....L....H....L....H....L....H....L....H....L....H....L....H....
	 L....H....L....H....L....H....L....H....L....H....L....H....L....H....L....H....
	 L....H....L....H....L....H....L....H....L....H....L....H....L....H....L....H....
	 L....H....L....H....L....H....L....H....L....H....L....H....L....H....L....H....
	 L....H....L....H....L....H....L....H....L....H....L....H....L....H....L....H....
	 L....H....L....H....L....H....L....H....L....H....L....H....L....H....L....H....
	 L....H....L....H....L....H....L....H....L....H....L....H....L....H....L....H....
	 L....H....L....H....L....H....L....H....L....H....L....H....L....H....L....H....
	 L....H....L....H....L....H....L....H....L....H....L....H....L....H....L....H....
	 L....H....L....H....L....H....L....H....L....H....L....H....L....H....L....H....
	 L....H....L....H....L....H....L....H....L....H....L....H....L....H....L....H....
	 L....H....L....H....L....H....L....H....L....H....L....H....L....H....L....H....
	 L....H....L....H....L....H....L....H....L....H....L....H....L....H....L....H....
	 L....H....L....H....L....H....L....H....L....H....L....H....L....H....L....H....
	 L....H....
done
Bytes transferred = 7248264 (6e9988 hex)
## Booting image at 01000000 ...
   Image Name:   Linux-2.6.5-it0
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    898252 Bytes = 877.2 kB
   Load Address: 00908000
   Entry Point:  00908000
   Verifying Checksum ... OK
OK
## Loading Ramdisk Image at 02000000 ...
   Image Name:   RAM Disk
   Image Type:   ARM Linux RAMDisk Image (gzip compressed)
   Data Size:    7248200 Bytes =  6.9 MB
   Load Address: 00000000
   Entry Point:  00000000
   Verifying Checksum ... OK

Starting kernel ...

Uncompressing Linux............................................................... done, booting the kernel.
Linux version 2.6.5-it0 (ushijima@VMpages: 11264
  DMA zone: 0 pages, LIFO batch:1
  Normal zone: 11264 pages, LIFO batch:2
  HighMem zone: 0 pages, LIFO batch:1
Built 1 zonelists
Kernel command line: root=/dev/ram0 rw mem=44M
PID hash table entries: 256 (order 8: 2048 bytes)
Memory: 44MB = 44MB total
Memory: 35448KB available (1612K co 301K data, 72K init)
Calibrating delay loop... 100.96 BogoMIPS
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
checking if image is initramfs... entries: 256 (order 8: 2048 bytes)
Memory: 44MB = 44MB total
Memory: 35448KB available (1612K co 301K data, 72K init)
Calibrating delay loop... 100.96 BogoMIPS
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
checking if image is initramfs...it isn't (no cpio magic); looks like an initrd
Freeing initrd memory: 7078K
CPU: Testing write buffer cohttyS0 at MMIO 0xe0030300 (irq = 12) is a IT SoC
ttyS1 at MMr
physmap flash device: 80000 at 100partitions on "phys_mapped_flash":
0x00000000-0x00040000 : "bootloader"
0x00040000-0x00050000 : "bootenv"
0x00050000-0x00080000 : "data"
Ingenient Technologies I2C Adapter
NET: Registered protocol family 2
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 4096 bind 8192)
NET: Registered protocol family 1
NET: Registered protocol family 17
RAMDISK: Compressed image found at block 0
00 : "bootloader"
0x00040000-0x00050000 : "bootenv"
0x00050000-0x00080000 : "data"
Ingenient Technologies I2C Adapter
NET: Registered protocol family 2
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 4096 bind 8192)
NET: Registered protocol family 1
NET: Registered protocol family 17
RAMDISK: Compressed image found at block 0
VFS: Mounted root (ext2 filesystem).
Freeing init memory: 72K
eth0: link down
eth0: link up, 100Mbps, full-duplex, lpa 0x45E1
sendto:  count 1   sync 1
sendto:  count 0   sync 0
sendto:  count 1   sync 0
Using /lib/modules/2.6.5-it0/extra/imanage.ko
imanage: module license 'Ingenient Technologies, Inc.' taints kernel.
Ingenient Technolntroller
	Ingenient Technologies CCD Controller
	Ingenient Technologies OSD Controller
	Ingenient Technologies Preview Engine Controller
	Ingenient Technologies Video Capture System
Using /lib/modules/2.6.5-it0/extra/idecode.ko
idecode: module license 'Ingenient Technologies, Inc.' taints kernel.
Ingenient Technologies A/V Decoder Driver (c) 2004
Using /lib/modules/2.6.5-it0/extra/mpeg2.ko
mpeg2: module license 'Ingenient Technologies, Inc.' taints kernel.
Ingenient Technologies - MPEG2 Decode Plugin
Using /lib/modules/2.6.5-it0/extra/mpeg2_pcm_dts kernel.
Ingenient Technologies - PCM Encode/Decode Plugin
Using /lib/modules/2.6.5-it0/extra/dm320reg.ko
dm320reg: module license 'Buffalo Inc.' taints kernel.
kbd  /dev/ttyS1
nx11: display bpp = 16, bits_per_rgb 6
key device= 1
kbd  /dev/ttyS1
KEYINPUT 1

PC-P1LAN login:
（一部伏せ字）

入力できない

ログインしようとしたら、、、
キー入力できない事がわかった。
完全に入力できないわけではなく、 ';'を押すとスペース、'w'を押すと'D'が入力されたりと ムチャクチャである。

Junker さんも 「ケーブルの相性有り」と書かれているので、9-KE だとだめなのであろう。

困った。

Junker さんはどんなケーブルを使われているんだろう？？？

ハックの記録
PC-P1LAN をハックしよう 		→
initrd.boot のヘッダ部
Copyright (C) 2006 Yasunari Yamashita. All Rights Reserved.
yasunari ＠ yamasita.jp 山下康成＠京都府向日市