LS-CHL LinkStation Live

eddiepi · **Posted:** Fri Sep 12, 2008 8:12 am

no pictures on this yet
can't quite figure out how to open it without breaking the outter casing

tried acp_commander on it, works fine!

Code:

C:\>java -jar acp_commander.jar -t 192.168.101.40 -o
ACP_commander out of the linkstationwiki.net project.
Used to send ACP-commands to Buffalo linkstation(R) LS-PRO.

WARNING: This is experimental software that might brick your linkstation!


Using random connID value = 5763CECCFF8A
Using target:   LS-CHL209/192.168.101.40
Authenticate:
start telnetd...
Reset root pwd...

You can now telnet to your box as user 'root' providingno / an empty password.

Or that's what I thought...
Unfortunately, for some unknown reason, telnet doesn't work
anyone know of a simple software that can scan for open ports?

ramuk · **Posted:** Fri Sep 12, 2008 12:13 pm

Looks like a mini black XBOX360

they need to stop coming out with new ones, it's getting hard to keep up

Nmap works best as a portscanner
http://en.wikipedia.org/wiki/Nmap

added the device to the front page and made a dummy category for it
http://buffalo.nas-central.org/index.ph ... ory:LS-CHL

wonder if it does anything special to support time machine.

goat · **Posted:** Sat Sep 13, 2008 1:32 am

I wonder how well the bittorrent client keeps up, and whats changed under the hood, (if anything)

its cute, if anything

eddiepi · **Posted:** Wed Sep 17, 2008 4:55 am

taking ramuk's advice,
I turned to Nmap to find the ports.
Did the scan with "aggressive" setting:

Code:

Initiating ARP Ping Scan at 11:32
Scanning 192.168.101.40 [1 port]
Completed ARP Ping Scan at 11:32, 0.13s elapsed (1 total hosts)
Initiating Parallel DNS resolution of 1 host. at 11:32
Completed Parallel DNS resolution of 1 host. at 11:32, 0.02s elapsed
Initiating SYN Stealth Scan at 11:32
Scanning 192.168.101.40 [1715 ports]
Discovered open port 80/tcp on 192.168.101.40
Discovered open port 445/tcp on 192.168.101.40
Discovered open port 515/tcp on 192.168.101.40
Discovered open port 139/tcp on 192.168.101.40
Discovered open port 873/tcp on 192.168.101.40
Discovered open port 6881/tcp on 192.168.101.40
Discovered open port 8080/tcp on 192.168.101.40
Completed SYN Stealth Scan at 11:32, 0.14s elapsed (1715 total ports)
Initiating Service scan at 11:32
Scanning 7 services on 192.168.101.40
Completed Service scan at 11:34, 121.11s elapsed (7 services on 1 host)
Initiating OS detection (try #1) against 192.168.101.40
Retrying OS detection (try #2) against 192.168.101.40
SCRIPT ENGINE: Initiating script scanning.
Initiating SCRIPT ENGINE at 11:34
Completed SCRIPT ENGINE at 11:37, 150.13s elapsed
Host 192.168.101.40 appears to be up ... good.
Interesting ports on 192.168.101.40:
Not shown: 1708 closed ports
PORT     STATE SERVICE     VERSION
80/tcp   open  http        Apache httpd 1.3.39 ((Unix))
|_ HTML title: Site doesn't have a title.
139/tcp  open  netbios-ssn Samba smbd 3.X (workgroup: WORKGROUP)
445/tcp  open  netbios-ssn Samba smbd 3.X (workgroup: WORKGROUP)
515/tcp  open  printer
873/tcp  open  rsync        (protocol version 30)
6881/tcp open  tcpwrapped
8080/tcp open  http-proxy?

MAC Address: 00:1D:73:A3:02:09 (Buffalo)
Device type: general purpose
Running: Linux 2.6.X
OS details: Linux 2.6.22 - 2.6.23
Uptime: 0.065 days (since Wed Sep 17 10:02:56 2008)
Network Distance: 1 hop
TCP Sequence Prediction: Difficulty=215 (Good luck!)
IP ID Sequence Generation: All zeros

Host script results:
|_ NBSTAT: NetBIOS name: LS-CHL209, NetBIOS MAC: 00:00:00:00:00:00
|_ Discover OS Version over NetBIOS and SMB: Unix

Read data files from: C:\Program Files\Nmap
OS and Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 275.984 seconds
           Raw packets sent: 1760 (80.666KB) | Rcvd: 1744 (80.888KB)

telnet to all the ports via putty is useless...

To answer ramuk's question,
Time Machine funtion is there....

I just ain't sure what it does~

And to goat:
bittorrent is of course thru a html UI
clicking on the button from the main UI would open up a new page
BT is done thru port 8080

ramuk · **Posted:** Wed Sep 17, 2008 5:48 am

eddiepi wrote:

To answer ramuk's question,
Time Machine funtion is there....

I just ain't sure what it does~

Hmm I wonder if it uses this information to create a sparse bundle (odd this doesn't seem like a public knowledge thing for Linux)

http://porkrind.org/missives/time-machi ... nux-server

I think you may get stuck trying to figure out how to open up this devices case. ACP commander did not seem to open up an appropriate telnet port (23). Additionally I wonder if once you open the case you may be stuck with the same serial port situation as on the MINI

http://buffalo.nas-central.org/index.ph ... he_LS_MINI

eddiepi · **Posted:** Wed Sep 17, 2008 7:26 am

To Ramuk:

I'm guessing that LS-CHL uses similar (or same) chasis as the HD-CEU2.
If this is true, any attempt to open up the outter casing would result in breaking the notches at the bottom.
And that's not exactly what I want to do at this point...

thedesp · **Joined:** Tue Sep 16, 2008 11:41 pm **Posts:** 21

Does it has the same hardware as the previous Live and Pro ?

chris5287 · **Joined:** Mon Sep 29, 2008 8:25 pm **Posts:** 4

Am I being stupid, as I cannot seem to find this anywhere online to buy in the UK. Where did you guys get it from? Im looking for the 1Tb version. Thanks

thedesp · **Joined:** Tue Sep 16, 2008 11:41 pm **Posts:** 21

Can you get the bittorrent function to work?
Mine is won't connect anywhere...

Kaiten · **Posted:** Mon Sep 29, 2008 10:39 pm

chris5287 wrote:

Am I being stupid, as I cannot seem to find this anywhere online to buy in the UK. Where did you guys get it from? Im looking for the 1Tb version. Thanks

The only place I've seen is here....
http://www.overstock.com/Electronics/Bu ... cid=133635 Shipping to the UK

davy_gravy · **Joined:** Mon Aug 28, 2006 1:15 am **Posts:** 2606

eddiepi wrote:

... any attempt to open up the outter casing would result in breaking the notches at the bottom...

Can anyone confirm this? - is the case on this thing really un-openable? That would be unfortunate and a first - and would really put a damper on some (good) things.

thedesp · **Joined:** Tue Sep 16, 2008 11:41 pm **Posts:** 21

I can get the telnet and ssh to work now.
Using acp_commander > http://buffalo.nas-central.org/index.ph ... _commander
For the SSH, the init script is not the same as in the wiki page.

I have the working one for FW 1.00 right here

Code:

#!/bin/sh

#To be used by daemonwatch process
ACTIVE_FILE=/var/run/active_sshd

SSHD_DSA=/etc/ssh_host_dsa_key
SSHD_RSA=/etc/ssh_host_rsa_key
SSHD_KEY=/etc/ssh_host_key

SSHD=`which sshd`
if [ "${SSHD}" = "" -o ! -x ${SSHD} ] ; then
        echo "sshd is not supported on this platform!!!"
fi

sshd_keygen()
{
        if [ ! -f ${SSHD_KEY} ] ; then
                echo "1st time bootup?"
                echo "key file(${SSHD_KEY}) is not exist!!!"
                echo "Create key file, please wait for a while"
                echo y|ssh-keygen -t dsa -f ${SSHD_KEY} -N ""
                if [ $? -ne 0 ] ; then
                        echo "file(${SSHD_KEY}) is created successfully."
                else
                        echo "file(${SSHD_KEY}) is created failed!"
                fi
        fi
        if [ ! -f ${SSHD_DSA} ] ; then
                echo "1st time bootup?"
                echo "key file(${SSHD_DSA}) is not exist!!!"
                echo "Create key file, please wait for a while"
                echo y|ssh-keygen -t dsa -f ${SSHD_DSA} -N ""
                if [ $? -ne 0 ] ; then
                        echo "file(${SSHD_DSA}) is created successfully."
                else
                        echo "file(${SSHD_DSA}) is created failed!"
                fi
        fi
        if [ ! -f ${SSHD_RSA} ] ; then
                echo "1st time bootup?"
                echo "key file(${SSHD_RSA}) is not exist!!!"
                echo "Create key file, please wait for a while"
                echo y|ssh-keygen -t rsa -f ${SSHD_RSA} -N ""
                if [ $? -ne 0 ] ; then
                        echo "file(${SSHD_RSA}) is created successfully."
                else
                        echo "file(${SSHD_RSA}) is created failed!"
                fi

        fi
}

sshd_start()
{
        sshd_keygen
        ${SSHD}
        touch $ACTIVE_FILE
}

sshd_stop()
{
        killall sshd
        rm -f $ACTIVE_FILE
}


case $1 in
start)
        sshd_start
        ;;
stop)
        sshd_stop
        ;;
restart)
        sshd_stop
        sleep 1
        sshd_start
        ;;
*)
        echo "Unknown argument"
        ;;
esac

exit 0

Then, follow the instruction for including sshd in rcS and daemonwatch from the instruction.

thedesp · **Joined:** Tue Sep 16, 2008 11:41 pm **Posts:** 21

Optware feed here is also working > viewtopic.php?f=19&t=4075&p=39162#p39162
Use the LSPro bootstrap script

thedesp · **Joined:** Tue Sep 16, 2008 11:41 pm **Posts:** 21

output from dmesg
It does look like the same hardware as the LSPro V2

Code:

Linux version 2.6.22.7 (root@build2.dd-hot24.nas.buffalo.local) (gcc version 4.2.0 20070413 (prerelease)) #254 Thu Aug 28 13:54:54 JST 2008
CPU: ARM926EJ-S [41069260] revision 0 (ARMv5TEJ), cr=a0053177
Machine: Feroceon
Using UBoot passing parameters structure
Memory policy: ECC disabled, Data cache writeback
On node 0 totalpages: 32768
  DMA zone: 256 pages used for memmap
  DMA zone: 0 pages reserved
  DMA zone: 32512 pages, LIFO batch:7
  Normal zone: 0 pages used for memmap
CPU0: D VIVT write-back cache
CPU0: I cache: 32768 bytes, associativity 1, 32 byte lines, 1024 sets
CPU0: D cache: 32768 bytes, associativity 1, 32 byte lines, 1024 sets
Built 1 zonelists.  Total pages: 32512
Kernel command line: console=ttyS0,115200 root=/dev/sda2 rw initrd=0x00800040,15M panic=5 func=0 BOOTVER=1.21
PID hash table entries: 512 (order: 9, 2048 bytes)
Console: colour dummy device 80x30
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Memory: 128MB 0MB 0MB 0MB = 128MB total
Memory: 110164KB available (3824K code, 294K data, 120K init)
Calibrating delay loop... 266.24 BogoMIPS (lpj=1331200)
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
NET: Registered protocol family 16
env_format_version = 0x00000005
product_id = 0x00000010
Sys Clk = 200000000, Tclk = 166664740

CPU Interface
-------------
SDRAM_CS0 ....base 00000000, size 128MB 
SDRAM_CS1 ....disable
SDRAM_CS2 ....disable
SDRAM_CS3 ....disable
PEX0_MEM ....base e0000000, size 128MB 
PEX0_IO ....base f2000000, size   1MB 
PCI0_MEM ....base e8000000, size 128MB 
PCI0_IO ....base f2100000, size   1MB 
INTER_REGS ....base f1000000, size   1MB 
DEVICE_CS0 ....no such
DEVICE_CS1 ....base f4000000, size  32MB 
DEVICE_CS2 ....no such
DEV_BOOCS ....base ff800000, size   8MB 
CRYPT_ENG ....base f0000000, size  64KB 

  Marvell Development Board (LSP Version 3.0.5_NAS_GDP_p8)-- BUFFALO_BOARD  Soc: 88F5182 A2

 Detected Tclk 166664740 and SysClk 200000000 
Marvell USB EHCI Host controller #0: c0547600
Marvell USB EHCI Host controller #1: c0547400
IO Request resource failed - Pci If 0
PCI: bus0: Fast back to back transfers enabled
PCI: bus1: Fast back to back transfers enabled
SCSI subsystem initialized
Time: orion_clocksource clocksource has been installed.
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
checking if image is initramfs...it isn't (no cpio magic); looks like an initrd
Freeing initrd memory: 15360K
RTC registered
mvCesaInit: sessions=640, queue=64, pSram=f0000000
Use the XOR engines (acceleration) for enhancing the following functions:
  o RAID 5 Xor calculation
  o kernel memcpy
  o kenrel memzero
  o copy user to/from kernel buffers
Number of XOR engines to use: 2
Use IDMA channels 2 and 3 for enhancing the following function:
VFS: Disk quotas dquot_6.5.1
Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
SGI XFS with ACLs, large block numbers, no debug enabled
SGI XFS Quota Management subsystem
io scheduler noop registered (default)
io scheduler anticipatory registered
io scheduler deadline registered
io scheduler cfq registered
Serial: 8250/16550 driver $Revision: 1.90 $ 4 ports, IRQ sharing disabled
serial8250: ttyS1 at MMIO 0x0 (irq = 4) is a 16550A
serial8250.0: ttyS0 at MMIO 0xf1012000 (irq = 3) is a 16550A
serial8250.0: ttyS2 at MMIO 0xf1012100 (irq = 4) is a 16550A
RAMDISK driver initialized: 3 RAM disks of 32768K size 1024 blocksize
loop: module loaded
Marvell Ethernet Driver 'mv_ethernet':
  o Uncached descriptors in DRAM
  o DRAM SW cache-coherency
  o TCP segmentation offload enabled
  o Checksum offload enabled
  o Rx desc: 128
  o Tx desc: 256
  o Loading network interface ** eth_init_module (0)
'eth0' 
Intergrated Sata device found
scsi0 : Marvell SCSI to SATA adapter
scsi1 : Marvell SCSI to SATA adapter
scsi 0:0:0:0: Direct-Access     SAMSUNG  HD103UJ          1AA0 PQ: 0 ANSI: 5
sd 0:0:0:0: [sda] 1953525168 512-byte hardware sectors (1000205 MB)
sd 0:0:0:0: [sda] Write Protect is off
sd 0:0:0:0: [sda] Mode Sense: 23 00 10 00
sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, supports DPO and FUA
sd 0:0:0:0: [sda] 1953525168 512-byte hardware sectors (1000205 MB)
sd 0:0:0:0: [sda] Write Protect is off
sd 0:0:0:0: [sda] Mode Sense: 23 00 10 00
sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, supports DPO and FUA
 sda: sda1 sda2 sda4 < sda5 sda6 >
sd 0:0:0:0: [sda] Attached SCSI disk
sd 0:0:0:0: Attached scsi generic sg0 type 0
physmap platform flash device: 01000000 at f0000000
CFI: Found no physmap-flash.0 device at location zero
JEDEC: Found no physmap-flash.0 device at location zero
physmap-flash physmap-flash.0: map_probe failed
CFI: Found no cfi_flash_0 device at location zero
Found: SST 39LF020
cfi_flash_0: Found 1 x8 devices at 0x0 in 8-bit bank
cfi_flash_0: Found an alias at 0x40000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x80000 for the chip at 0x0
cfi_flash_0: Found an alias at 0xc0000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x100000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x140000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x180000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x1c0000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x200000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x240000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x280000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x2c0000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x300000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x340000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x380000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x3c0000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x400000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x440000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x480000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x4c0000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x500000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x540000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x580000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x5c0000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x600000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x640000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x680000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x6c0000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x700000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x740000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x780000 for the chip at 0x0
cfi_flash_0: Found an alias at 0x7c0000 for the chip at 0x0
number of JEDEC chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
cmdlinepart partition parsing not available
CFI: Found no cfi_flash_1 device at location zero
JEDEC: Found no cfi_flash_1 device at location zero
mice: PS/2 mouse device common for all mice
md: raid0 personality registered for level 0
md: raid1 personality registered for level 1
raid6: int32x1     20 MB/s
raid6: int32x2     28 MB/s
raid6: int32x4     35 MB/s
raid6: int32x8     31 MB/s
raid6: using algorithm int32x4 (35 MB/s)
md: raid6 personality registered for level 6
md: raid5 personality registered for level 5
md: raid4 personality registered for level 4
raid5: measuring checksumming speed
   arm4regs  :   303.200 MB/sec
   8regs     :   248.800 MB/sec
   32regs    :   270.000 MB/sec
raid5: using function: arm4regs (303.200 MB/sec)
Kernel event proc (C) BUFFALO INC. V.1.00 installed.
MICON ctrl (C) BUFFALO INC. V.1.00 installed.
Buffalo CPU Inerupts Driver (C) BUFFALO INC. Ver.0.01 alpha1 installed.
Buffalo Gpio Control Driver (C) BUFFALO INC. Ver.0.02 installed.
TCP cubic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
md: Autodetecting RAID arrays.
md: autorun ...
md: ... autorun DONE.
RAMDISK: Compressed image found at block 0
VFS: Mounted root (ext2 filesystem).
XFS mounting filesystem sda2
Starting XFS recovery on filesystem: sda2 (logdev: internal)
Ending XFS recovery on filesystem: sda2 (logdev: internal)
kjournald starting.  Commit interval 5 seconds
EXT3-fs warning: checktime reached, running e2fsck is recommended
EXT3 FS on sda1, internal journal
EXT3-fs: recovery complete.
EXT3-fs: mounted filesystem with ordered data mode.
XFS mounting filesystem sda2
Ending clean XFS mount for filesystem: sda2
XFS mounting filesystem sda2
Ending clean XFS mount for filesystem: sda2
VFS: Mounted root (xfs filesystem).
Trying to move old root to /initrd ... okay
Freeing init memory: 120K
Adding 1004020k swap on /dev/sda5.  Priority:-1 extents:1 across:1004020k
kjournald starting.  Commit interval 5 seconds
EXT3-fs warning: checktime reached, running e2fsck is recommended
EXT3 FS on sda1, internal journal
EXT3-fs: mounted filesystem with ordered data mode.
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
ehci_marvell ehci_marvell.4523: Marvell Orion EHCI
ehci_marvell ehci_marvell.4523: new USB bus registered, assigned bus number 1
ehci_marvell ehci_marvell.4523: irq 17, io base 0xf1050100
ehci_marvell ehci_marvell.4523: USB 2.0 started, EHCI 1.00, driver 10 Dec 2004
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
ehci_marvell ehci_marvell.167817: Marvell Orion EHCI
ehci_marvell ehci_marvell.167817: new USB bus registered, assigned bus number 2
ehci_marvell ehci_marvell.167817: irq 12, io base 0xf10a0100
ehci_marvell ehci_marvell.167817: USB 2.0 started, EHCI 1.00, driver 10 Dec 2004
usb usb2: configuration #1 chosen from 1 choice
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
ohci_hcd: 2006 August 04 USB 1.1 'Open' Host Controller (OHCI) Driver
USB Universal Host Controller Interface driver v3.0
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
usbcore: registered new interface driver usblp
drivers/usb/class/usblp.c: v0.13: USB Printer Device Class driver
eth0: change mtu 1500 (buffer-size 1520) to 9676 (buffer-size 9696)
eth reg(9) val=0x0300
eth0: link down
eth0: link up, full duplex, speed 100 Mbps
XFS mounting filesystem sda6
Starting XFS recovery on filesystem: sda6 (logdev: internal)
Ending XFS recovery on filesystem: sda6 (logdev: internal)
NET: Registered protocol family 5
usb 1-1: new high speed USB device using ehci_marvell and address 2
usb 1-1: configuration #1 chosen from 1 choice
scsi2 : SCSI emulation for USB Mass Storage devices
usb-storage: device found at 2
usb-storage: waiting for device to settle before scanning
scsi 2:0:0:0: Direct-Access     WD       2500BEV External 1.75 PQ: 0 ANSI: 0
sd 2:0:0:0: [sdb] 488397168 512-byte hardware sectors (250059 MB)
sd 2:0:0:0: [sdb] Write Protect is off
sd 2:0:0:0: [sdb] Mode Sense: 23 00 00 00
sd 2:0:0:0: [sdb] Assuming drive cache: write through
sd 2:0:0:0: [sdb] 488397168 512-byte hardware sectors (250059 MB)
sd 2:0:0:0: [sdb] Write Protect is off
sd 2:0:0:0: [sdb] Mode Sense: 23 00 00 00
sd 2:0:0:0: [sdb] Assuming drive cache: write through
 sdb: sdb1
sd 2:0:0:0: [sdb] Attached SCSI disk
sd 2:0:0:0: Attached scsi generic sg1 type 0
usb-storage: device scan complete
FAT: utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
NTFS driver 2.1.28 [Flags: R/O MODULE].
NTFS volume version 3.1.
usb 1-1: USB disconnect, address 2

eddiepi · **Posted:** Thu Oct 02, 2008 4:41 am

thedesp wrote:

Can you get the bittorrent function to work?
Mine is won't connect anywhere...

Mine works fine!

are you sure the seeds you use are healthy?

Buffalo NAS-Central Forums

LS-CHL LinkStation Live

Who is online