[How To] Get real TELNET support after rooting F series

[Tamagnun]

[edit: new version 0.2.4 for MST devices also!]

Bugficks has released a ptys.ko library that allows to obtain real telnet connection, if used in combination with the E-series busybox; so I've prepared this simple guide to add to your routed F-Series TV the real telnet support.

What has to be done:
1) expand the content of ZIP file under /mtd_rwcommon, so /mtd_rwcommon/telnet and subdirs will be created
2) grant the script files by typing:

Code: Select all

chmod +x /mtd_rwcommon/telnet/telnetd

3) grant the busybox file by typing:

Code: Select all

chmod +x /mtd_rwcommon/telnet/busybox

4) create a symbolic link to the ash shell by typing:

Code: Select all

ln -s /mtd_rwcommon/telnet/busybox /mtd_rwcommon/telnet/ash

6) start the telnet service by executing the script

Code: Select all

/mtd_rwcommon/telnet/telnetd

7) real telnet session is now available for putty on 2223 port

Please note:
a) the script is ready for FXP devices, for the MST devices please let's read the comments and make the highlighted updates modify the /mtd_rwcommon/telnet/telnetd script as described at remark line #6
b) pwd doesn't work, use /tmp/bin/pwd instead
c) set doensn't produce any output, no idea to solve...
d) if the insmod ptys.ko command generates an error due to a different vermagic level, please hexedit the ptys.ko module with the level present in your fw version!

I have tested only on my PS64F8500 fw 1111.3, SRS_module.ko works also, uncomment line #25 if you're interested to use it, but on my device is not required to obtain the real telnet feature!
Please, they will use this tool let's post a message with TV model, fw version and (if required to change it) the vermagic level.

All the programs and drivers has been provided by bugficks, thank to him, I've only packaged his product and written this basic guide.

[Tamagnun]

Twenty downloads in 5 days means, I hope, twenty users have tried this solution by bugficks: could you post some feedback please, always reporting TV model and fw version?

To help the developers, not for me...

Thx!

[juusso]

not true report, but here is some unexpected reboot after approximately 5 minutes after tv start. This noticed on both, mst and fxp series. I can't troubleshoot it yet, logs are quite normal, justmaybe exlink cable could help. Anyone else have reboot issue?

[indraf]

UA40F6400AM @1115.1

i got this message:

Code: Select all

shell>/mtd_rwcommon/telnet/telnetd
************ /mtd_rwcommon/telnet/telnetd  ***********
"X12 0139" KERNEL MODULE VERSION : "0115.1129, DTV, X12, release, DVB_ISDB_BRANCH" 
T-MST12UABC       T-MST12UABC-1115.1  	2013-11-25
insmod: can't insert '/mtd_rwcommon/telnet/lib/fxp/ptys.ko': invalid module format
ptys: version magic '0152, release SMP preempt mod_unload ARMv7 p2v8 ' should be '0115, release SMP preempt mod_unload ARMv7 '
...
...
...
----
tcp        0      0 0.0.0.0:2223            0.0.0.0:*               LISTEN      3995/busybox

edit:
no problem, got it working after change telnetd to mst
and no reboot after 5min start

[Chinchilla]

Hello,
My TV is a UE55F6500.
Firmware is the "T-MST12DEUC-1116.0"
"X12 0136" KERNEL MODULE VERSION: "0112.1126, DTV, X12, release, DEU_BRANCH"
In the /mtd_rwcommon/telnet/telnetd script I've switched to MST devices.
In the ... /mst/ptys.ko and in the ....mst/SRS_module.ko I have the "vermagic level" changed from 0115 to 0112.
Still will not work real telnet.
Here is the log to

Code: Select all

************ /mtd_rwcommon/telnet/telnetd  ***********
"X12 0136" KERNEL MODULE VERSION : "0112.1126, DTV, X12, release, DEU_BRANCH" 
T-MST12DEUC       T-MST12DEUC-1116.0  	2013-11-12
insmod: can't insert '/mtd_rwcommon/telnet/lib/mst/ptys.ko': invalid module format
mmcblk0p24: Meta: 6156KB     Data: 216KB
Module len 21500 truncated
ARS_module 7404 0 - Live 0xbf20c000 (P)
usb_storage 32412 1 - Live 0xbf3c6000
exfat_fs 15600 0 - Live 0xbf3bf000 (P)
exfat_core 46112 1 exfat_fs, Live 0xbf3b0000 (P)
tntfs 419736 0 - Live 0xbf346000 (P)
ath6kl_usb 314804 0 - Live 0xbf2f8000
cfg80211 154568 1 ath6kl_usb, Live 0xbf2cf000
compat 320 0 - Live 0xbf2cb000
bthid 2792 0 - Live 0xbf2c7000
hid_chicony 1068 0 - Live 0xbf2c3000
hid_apple 4016 0 - Live 0xbf2bf000
hid_microsoft 1864 0 - Live 0xbf2bb000
mousedev 7708 0 - Live 0xbf2b6000
evdev 6688 0 - Live 0xbf2b1000
usbhid 13152 0 - Live 0xbf2aa000
hid 40668 5 bthid,hid_chicony,hid_apple,hid_microsoft,usbhid, Live 0xbf29d000
mdrv_emac 17380 0 - Live 0xbf287000
snd_pcm 47612 0 - Live 0xbf278000
snd_page_alloc 2600 1 snd_pcm, Live 0xbf274000
snd_hwdep 3700 0 - Live 0xbf270000
snd_rawmidi 12836 0 - Live 0xbf269000
snd_seq_device 3612 1 snd_rawmidi, Live 0xbf265000
snd_timer 13652 1 snd_pcm, Live 0xbf25e000
snd 28168 5 snd_pcm,snd_hwdep,snd_rawmidi,snd_seq_device,snd_timer, Live 0xbf254000
soundcore 444 1 snd, Live 0xbf250000
v4l2_common 4340 0 - Live 0xbf24d000
videodev 64676 1 v4l2_common, Live 0xbf23a000
v4l2_int_device 1436 0 - Live 0xbf238000
samsung_mstar 1700660 0 - Live 0xbf06b000
btusb 34020 1 - Live 0xbf05f000
samsung_mali 91060 25 - Live 0xbf045000
tzdrv 28524 56 - Live 0xbf03d000
ehci_hcd 43484 0 - Live 0xbf02f000
usbcore 100516 7 usb_storage,ath6kl_usb,usbhid,btusb,ehci_hcd, Live 0xbf013000
PreInit 61596 0 - Live 0xbf000000
----
tcp        0      0 0.0.0.0:2223            0.0.0.0:*               LISTEN      7435/busybox

With input from:

telnet 192.168.0.139 2223
Trying 192.168.0.139...
Connected to 192.168.0.139.
Escape character is '^]'.
Connection closed by foreign host.

Sorry for my very bad english.....

[bugficks]

as long as ptys.ko isnt loaded it wont work.
can you post 'dmesg' output after executing script?
or you could just try samygo extensions, telnet should work out of the box w/ it

[Chinchilla]

Thank you for the quick response
Yes it is already clear
but why will not load the module file.
Here is the output of the log and then "dmesg"

Code: Select all

shell>/mtd_rwcommon/telnet/telnetd
************ /mtd_rwcommon/telnet/telnetd  ***********
"X12 0136" KERNEL MODULE VERSION : "0112.1126, DTV, X12, release, DEU_BRANCH" 
T-MST12DEUC       T-MST12DEUC-1116.0    2013-11-12
insmod: can't insert '/mtd_rwcommon/telnet/lib/mst/ptys.ko': invalid module format
Module len 21500 truncated
ARS_module 7404 0 - Live 0xbf20c000 (P)
usb_storage 32412 1 - Live 0xbf3c6000
exfat_fs 15600 0 - Live 0xbf3bf000 (P)
exfat_core 46112 1 exfat_fs, Live 0xbf3b0000 (P)
tntfs 419736 0 - Live 0xbf346000 (P)
ath6kl_usb 314804 0 - Live 0xbf2f8000
cfg80211 154568 1 ath6kl_usb, Live 0xbf2cf000
compat 320 0 - Live 0xbf2cb000
bthid 2792 0 - Live 0xbf2c7000
hid_chicony 1068 0 - Live 0xbf2c3000
hid_apple 4016 0 - Live 0xbf2bf000
hid_microsoft 1864 0 - Live 0xbf2bb000
mousedev 7708 0 - Live 0xbf2b6000
evdev 6688 0 - Live 0xbf2b1000
usbhid 13152 0 - Live 0xbf2aa000
hid 40668 5 bthid,hid_chicony,hid_apple,hid_microsoft,usbhid, Live 0xbf29d000
mdrv_emac 17380 0 - Live 0xbf287000
snd_pcm 47612 0 - Live 0xbf278000
snd_page_alloc 2600 1 snd_pcm, Live 0xbf274000
snd_hwdep 3700 0 - Live 0xbf270000
snd_rawmidi 12836 0 - Live 0xbf269000
snd_seq_device 3612 1 snd_rawmidi, Live 0xbf265000
snd_timer 13652 1 snd_pcm, Live 0xbf25e000
snd 28168 5 snd_pcm,snd_hwdep,snd_rawmidi,snd_seq_device,snd_timer, Live 0xbf254000
soundcore 444 1 snd, Live 0xbf250000
v4l2_common 4340 0 - Live 0xbf24d000
videodev 64676 1 v4l2_common, Live 0xbf23a000
v4l2_int_device 1436 0 - Live 0xbf238000
samsung_mstar 1700660 0 - Live 0xbf06b000
btusb 34020 1 - Live 0xbf05f000
samsung_mali 91060 25 - Live 0xbf045000
tzdrv 28524 56 - Live 0xbf03d000
ehci_hcd 43484 0 - Live 0xbf02f000
usbcore 100516 7 usb_storage,ath6kl_usb,usbhid,btusb,ehci_hcd, Live 0xbf013000
PreInit 61596 0 - Live 0xbf000000
----
tcp        0      0 0.0.0.0:2223            0.0.0.0:*               LISTEN      9985/busybox
shell>dmesg
mmcblk0p24: Meta: 6156KB     Data: 216KB
mmcblk0p24: Meta: 6156KB     Data: 216KB
mmcblk0p24: Meta: 6156KB     Data: 216KB
mmcblk0p24: Meta: 6156KB     Data: 216KB
shell>

The output of "ps" right after calling of "shell> /mtd_rwcommon/telnet/telnetd"

Code: Select all

shell>ps
PID   USER     TIME   COMMAND
    1 root       0:00 init
    2 root       0:00 [kthreadd]
    3 root       0:01 [ksoftirqd/0]
    6 root       0:00 [migration/0]
    7 root       0:00 [migration/1]
    9 root       0:00 [ksoftirqd/1]
   10 root       0:00 [khelper]
   11 root       0:00 [sync_supers]
   12 root       0:00 [bdi-default]
   13 root       0:00 [kblockd]
   15 root       0:00 [kdtvlogd]
   16 root       0:00 [kswapd0]
   17 root       0:00 [fsnotify_mark]
   18 root       0:00 [vdbinder]
   20 root       0:07 [mmcqd/0]
   21 root       0:00 [mmcqd/0boot0]
   22 root       0:00 [mmcqd/0boot1]
   34 root       0:00 -/bin/sh
   49 root       0:00 [emmcfs-writebac]
   58 root       0:00 [emmcfs-writebac]
   63 root       0:00 [emmcfs-writebac]
   65 root       0:00 [khubd]
   67 root       0:00 {exe} ash /mtd_exe/rc.local
   70 root       0:09 ./servicemanager_csp -vdbinder
   83 root       0:00 [mali-pmm-wq]
   85 root       0:00 {exe} ash ./launch_exeAPP.sh
   86 root      85:07 ./exeTV -vdbinder
   87 root      13:26 ./exeAPP -vdbinder
  231 root       0:00 [emmcfs-writebac]
  265 root       0:00 /mtd_appdata/Runtime/bin/X -logfile /mtd_rwarea/Xlog.txt -modulepath /mtd_appdata/Runtime/XorgLibs -config /mtd_appdata/Runtime/bin/xorg.conf
  271 root       0:02 Compositor -vdbinder
  381 root       0:00 [emmcfs-writebac]
  389 root       0:00 [emmcfs-writebac]
  390 root       0:00 [emmcfs-writebac]
  406 root       0:00 /mtd_cmmlib/BT_LIB/bsa_server -all=0 -diag=0 -hci=0 -l2c=0 -app=0 -btm=0 -sdp=0 -rfc=0 -gap=0 -a2d=0 -avdt=0 -avrc=0 -mca=0 -d /dev/btusb0 -u /dtv/
  467 root       0:00 [kworker/u:2]
  468 root       0:00 [cfg80211]
  471 root       0:00 [ath6kl]
  481 root       0:00 [loop0]
  495 root       0:41 /mtd_appext/WidgetEngine/WidgetEngine
  496 root       0:00 /mtd_cmmlib/WIFI_LIB/QCA/wpa_supplicant -Dnl80211 -ip2p0 -c/mtd_rwarea/network/p2p_dual.conf -N -Dnl80211 -iwlan0 -c/mtd_rwarea/network/wpa_sta.conf -e /mtd_rwarea/network/entropy.dat -t -B -O /tmp/wpa_supplicant
  503 root       0:00 [kworker/u:3]
  623 root       4:26 /mtd_down/widgets/normal/20131000001/bin/BrowserLauncher
  691 root       0:00 [scsi_eh_0]
  692 root       0:00 [usb-storage]
  698 root       0:00 [scsi-poller]
  784 root       0:02 /mtd_down/emps/empWebBrowser/bin/WebKitWebProcess 13
  806 root       0:13 /mtd_exe/Webkit/WebKitWebProcess 11 WE
  829 root       0:00 /tmp/bin/busybox tcpsvd -vE 0.0.0.0 21 /tmp/bin/busybox ftpd -w /
  830 root       0:00 /tmp/bin/remshd
  832 root       0:04 {UEP_killer.sh} /bin/sh /tmp/bin/UEP_killer.sh
  869 root       0:00 [ARS_MON]
  967 root       0:00 /mtd_exe/WebServerApp/bin/lighttpd -D -f /mtd_exe/WebServerApp/webserver/lighttpd.conf -s
 1231 root       0:00 [loop4]
 5823 root       0:00 /tmp/bin/remshd
 5995 root       0:00 sh -c cat /proc/kmsg  
 5996 root       0:00 cat /proc/kmsg
 6961 root       0:00 /tmp/bin/remshd
 8407 root       0:00 [kworker/1:1]
 8902 root       0:00 [kworker/0:1]
 9790 root       0:00 [kworker/1:2]
 9791 root       0:00 [kworker/0:0]
 9985 root       0:00 /mtd_rwcommon/telnet/busybox telnetd -p 2223 -l /mtd_rwcommon/telnet/ash
10441 root       0:00 sleep 10
10451 root       0:00 [flush-8:0]
10452 root       0:00 [flush-179:0]
10463 root       0:00 sh -c ps  
10464 root       0:00 ps
shell>

Here for 10sec to see under the pid 9985 the start of real telnet
this pid is no longer available after 10sec
"samygo extensions" I'm going to look at it

[bugficks]

sorry, need log: 'cat /dtv/telnet.log'
my guess is youve patched .ko files wrong or you are trying to insmod the unpatched .ko files:)

[Chinchilla]

please, but is no different than the already posted

Code: Select all

shell>cat /dtv/telnet.log
************ /mtd_rwcommon/telnet/telnetd  ***********
"X12 0136" KERNEL MODULE VERSION : "0112.1126, DTV, X12, release, DEU_BRANCH" 
T-MST12DEUC       T-MST12DEUC-1116.0    2013-11-12
tcp        0      0 0.0.0.0:2223            0.0.0.0:*               LISTEN      9985/busybox
insmod: can't insert '/mtd_rwcommon/telnet/lib/mst/ptys.ko': invalid module format
Module len 21500 truncated
mmcblk0p24: Meta: 6156KB     Data: 216KB
ARS_module 7404 0 - Live 0xbf20c000 (P)
usb_storage 32412 1 - Live 0xbf3c6000
exfat_fs 15600 0 - Live 0xbf3bf000 (P)
exfat_core 46112 1 exfat_fs, Live 0xbf3b0000 (P)
tntfs 419736 0 - Live 0xbf346000 (P)
ath6kl_usb 314804 0 - Live 0xbf2f8000
cfg80211 154568 1 ath6kl_usb, Live 0xbf2cf000
compat 320 0 - Live 0xbf2cb000
bthid 2792 0 - Live 0xbf2c7000
hid_chicony 1068 0 - Live 0xbf2c3000
hid_apple 4016 0 - Live 0xbf2bf000
hid_microsoft 1864 0 - Live 0xbf2bb000
mousedev 7708 0 - Live 0xbf2b6000
evdev 6688 0 - Live 0xbf2b1000
usbhid 13152 0 - Live 0xbf2aa000
hid 40668 5 bthid,hid_chicony,hid_apple,hid_microsoft,usbhid, Live 0xbf29d000
mdrv_emac 17380 0 - Live 0xbf287000
snd_pcm 47612 0 - Live 0xbf278000
snd_page_alloc 2600 1 snd_pcm, Live 0xbf274000
snd_hwdep 3700 0 - Live 0xbf270000
snd_rawmidi 12836 0 - Live 0xbf269000
snd_seq_device 3612 1 snd_rawmidi, Live 0xbf265000
snd_timer 13652 1 snd_pcm, Live 0xbf25e000
snd 28168 5 snd_pcm,snd_hwdep,snd_rawmidi,snd_seq_device,snd_timer, Live 0xbf254000
soundcore 444 1 snd, Live 0xbf250000
v4l2_common 4340 0 - Live 0xbf24d000
videodev 64676 1 v4l2_common, Live 0xbf23a000
v4l2_int_device 1436 0 - Live 0xbf238000
samsung_mstar 1700660 0 - Live 0xbf06b000
btusb 34020 1 - Live 0xbf05f000
samsung_mali 91060 25 - Live 0xbf045000
tzdrv 28524 56 - Live 0xbf03d000
ehci_hcd 43484 0 - Live 0xbf02f000
usbcore 100516 7 usb_storage,ath6kl_usb,usbhid,btusb,ehci_hcd, Live 0xbf013000
PreInit 61596 0 - Live 0xbf000000
----
tcp        0      0 0.0.0.0:2223            0.0.0.0:*               LISTEN      9985/busybox
shell>

my guess is youve patched .ko files wrong or you are trying to insmod the unpatched .ko files:)

No, I only have the files "/mtd_rwcommon/telnet/lib/mst/ptys.ko" and "/mtd_rwcommon/telnet/lib/SRS_module.ko" patched by "vermagic level = 0115" to "vermagic level = 0112".
That's all and should, according to the kernel message "X12 0136" KERNEL MODULE VERSION: "0112.1126, DTV, X12, release, DEU_BRANCH" ok it?

[bugficks]

hmm weird, there should be more in log.

yar its the right thing to patch but as long as you get "insmod: can't insert '/mtd_rwcommon/telnet/lib/mst/ptys.ko': invalid module format" nothing will work. hence i was assuming wrong patch or you forgot to upload files after patching
usually dmesg shows smth like: "version magic 'xxxx preempt mod_unload ARMv7 ' should be yyyy preempt mod_unload ARMv7" or any other reason it failed to insmod .ko