I got telnet to work on these boxes.
Here's how.
From forum: http://minimodding.com/tiki-view_forum_thread.php?forumId=42&comments_parentId=2184&thread_sort_mode=commentDate_asc
First here's the link to mksquashfs v2.1 (for WINDOWS) - http://www.mmus.us/forum/showthread.php?t=10327&highlight=mksquashfs (external link)
(Need to register)
Also you will need cygwin1.dll and cygz.dll - A Google search will find these 2 files.
Unpacked the cmc1000_firmware_V.5.tar file found here - http://www.cirago.com/cmc1000downloadsfirmwire.htm (external link)
(I used this one , because of the same remote)
Installing of image is the same as on the site.
Need to rename file to install.img and upload to USB flash drive.
For the content of the file see the post from john1
Quote:
I've just downloaded that file, & it's surprising (to me) how small it is.
Here's the contents of the img (tar) file:
total 19640
-rwxrr@ 1 j staff 143300 25 Feb 2009 arial.ttf
-rw-rr@ 1 j staff 586240 25 Feb 2009 bluecore.audio.lzma
-rw-rr@ 1 j staff 396153 25 Feb 2009 bluecore.video.lzma
-rwxrr 1 j staff 1664 25 Feb 2009 configuration.xml
-rwxrr@ 1 j staff 2391616 25 Feb 2009 install_a
-rwxrr@ 1 j staff 163948 25 Feb 2009 mkfs.jffs2
-rwxrr@ 1 j staff 4329472 25 Feb 2009 squashfs1.img
-rw-rr@ 1 j staff 2091 25 Feb 2009 usr.local.etc.tar.bz2
-rwxrr@ 1 j staff 1057128 25 Feb 2009 video_firmware.install.bin
-rw-rr@ 1 j staff 963580 25 Feb 2009 vmlinux.compact.avhdd.bin.lzma
js-mini:cmc1000_firmware_V.5.img.untar j$
It'd be interesting to see how much difference there is in functionality compared to say the O!Play, which has an order of magnitude bigger firmware size ;-)
I did the same as wigout explains.
Quote:
Untarred the downloaded file.
Changed install.img to install.tar
Untarred install.tar
cd /package2
unsquashfs squashfs1.img
cd /squashfs-root
telnetd is commented out of the /etc/inetd.conf:
cat inetd.conf
#
# /etc/inetd.conf A simple inetd.conf
#
#
#
# To re-read this file after changes, just do a 'killall -HUP inetd'
#
#
#ftp stream tcp nowait root /usr/sbin/ftpd ftpd -u 100
#telnet stream tcp nowait root /usr/sbin/telnetd telnetd
#auth stream tcp nowait nobody /usr/sbin/nullidentd nullidentd
www stream tcp nowait www-data /usr/sbin/httpd httpd -h /var/www
#
# End of inetd.conf
It is present in the busybox build:
BusyBox v1.1.3 (2008.10.14-03:11+0000) multi-call binary
Usage: busybox function arguments...
or: function arguments...
BusyBox is a multi-call binary that combines many common Unix
utilities into a single executable. Most people will create a
link to busybox for each function they wish to use and BusyBox
will act like whatever it was invoked as!
Currently defined functions:
[, [, addgroup, adduser, ash, awk, basename, busybox, cat, chmod,
chroot, cp, cut, dd, delgroup, deluser, echo, egrep, fdisk, find,
grep, halt, httpd, ifconfig, inetd, init, insmod, kill, killall,
ln, login, ls, lsmod, lzmacat, mkdir, mke2fs, mkfs.ext2, mkfs.ext3,
mkfs.extk, mknod, mkswap, modprobe, mount, mv, nice, passwd, ping,
pivot_root, poweroff, ps, pwd, readlink, reboot, rm, rmdir, rmmod,
route, sed, sh, sleep, stty, swapoff, swapon, sync, tar, telnetd,
test, tftp, touch, true, udhcpc, udhcpd, umount, unlzma, usleep,
yes
and the /etc/passwd (symlinked to /usr/local/etc/passwd) shows your login/password to be:
root
blank (just press enter)
Curiously enough the configuration.xml file shows:
'company'Realtek Semiconductor Corp.'/company'
'description'This image file is the freezed release of pvr'/description'
'version'0.0.1'/version'
'releaseDate'02/25/09 16:14'/releaseDate'
'signature'1071 Player Installation Packages'/signature'
I haven't noticed either that description (freezed release) or signature (1071 Player) before.
The kernel images all have the lzma ending which is what I expect to see in firmwares designed for NOR rather than NAND- but maybe I'm all wet on that point.
Anyway, I think you can unsquashfs the squashfs1.img, comment (remove the #) from the telnet line in the /etc/inetd.conf and mksquashfs it back up.
I can't remember where I read it, but I think you have to use mksquashfs version 2 or 3- that on these players that use squashfs, mksquashfs 4.0 (the current version of the tool) is too recent.
Anyway, if you do that, and recompress as tar, rename as install.img and reflash, you should be all set.
Let us know how it goes.
-wigout
I replaced /bin/busybox with one from image for Measy E9DVR found here - http://www.measy.com.cn/download/showdownload24_en.htm (external link)
Now Telnet works, but it looks like everything is "read only"
Sites that helped me:
http://www.binrev.com/forums/index.php/topic/43450-hidden-serial-consoles/ (external link)
http://rtd1261.wikidot.com/start (external link)
http://www.mpcclub.com/forum/showthread.php?t=22968 (external link)
Cheers
