Kitz Forum

Broadband Related => Router Monitoring Software => Topic started by: fosseperme on December 28, 2017, 11:19:38 AM

Title: Access DSLstats Tp Link VR2800v
Post by: fosseperme on December 28, 2017, 11:19:38 AM
does anyone know how to access dslstats with this model? note that I have already tried this guide http://forum.kitz.co.uk/index.php/topic,14377.msg357441.html#msg357441 (http://forum.kitz.co.uk/index.php/topic,14377.msg357441.html#msg357441) without success because probably the xdsl broadcom chip of vr2800v is different than VR 600/900/2800

Title: Re: Access DSLstats Tp Link VR2800v
Post by: roseway on December 28, 2017, 12:41:29 PM
I can't find out much about this model. Assuming that it does use Broadcom DSL chip, then the essential requirement is to obtain telnet access to the Busybox shell. I'm afraid I can't help with that, but if you find a way, then DSLstats should work with it.
Title: Re: Access DSLstats Tp Link VR2800v
Post by: ejs on December 28, 2017, 05:08:14 PM
Which model setting was used to make the config file? The VR900 model setting is the one most likely to work.
Title: Re: Access DSLstats Tp Link VR2800v
Post by: fosseperme on December 28, 2017, 07:16:08 PM
Which model setting was used to make the config file? The VR900 model setting is the one most likely to work.

i tried all models, also VR900 model settings, but my webgui don t accept the encrypted config file, says "file not valid". Because the xdsl chipset of vr2800v (BCM63136V+BCM6303) is different than chipset of VR900/2600/2800. You should realize a new version of statposter with a model setting for vr2800v
Title: Re: Access DSLstats Tp Link VR2800v
Post by: ejs on December 28, 2017, 08:56:07 PM
I can try, but I will need a sample config.bin file saved by the 2800v, and I do not have much free time to do the work for the next 2 weeks at least. It may not be possible to make it work if TP-Link have changed their firmware significantly, it won't be anything to do with the different Broadcom chips.
Title: Re: Access DSLstats Tp Link VR2800v
Post by: fosseperme on December 28, 2017, 09:11:13 PM
Here the file conf.bin of vr2800v https://drive.google.com/file/d/1oJKAoAFhQNfgf3Pa6caEmuYUgdR1fi-1/view?usp=sharing (https://drive.google.com/file/d/1oJKAoAFhQNfgf3Pa6caEmuYUgdR1fi-1/view?usp=sharing)
Please, please see if you can for tonight or tomorrow to release me at least one test version, I'll give you a donation as you like. I need to lower the snr via telnet and only by unlocking the shell can I do it
Title: Re: Access DSLstats Tp Link VR2800v
Post by: ejs on December 30, 2017, 06:01:42 PM
I've had a quick look, and the bad news is I think it will not be possible for me to fix it, because the problem is that the file ends up too big.

You could try deleting things from the unencrypted file that you don't need, to make the file smaller. I think the trouble with doing that is if you delete too much, then the router won't work properly.
Title: Re: Access DSLstats Tp Link VR2800v
Post by: fosseperme on December 30, 2017, 10:06:16 PM
I've had a quick look, and the bad news is I think it will not be possible for me to fix it, because the problem is that the file ends up too big.

You could try deleting things from the unencrypted file that you don't need, to make the file smaller. I think the trouble with doing that is if you delete too much, then the router won't work properly.

I tried to delete things from the unencrypted file that I don't need and the file now is small, but the gui now don't accept the new file because says that is not valid  :(
Title: Re: Access DSLstats Tp Link VR2800v
Post by: fosseperme on December 31, 2017, 06:58:18 AM
UPDATE: The problem is that the file bin is too large because in the final .bin generated by statposter there are spaces between the strings that don't there are in the original .bin
See the images ejs

(https://preview.ibb.co/byfurb/Immagine.png)

You must update Statposter with a new model for vr2800v
Title: Re: Access DSLstats Tp Link VR2800v
Post by: ejs on January 01, 2018, 10:50:59 AM
I expect working files created for other models look like that in RouterPassView.

StatPOSTer adds 2 bytes of zeroes after each 16 bytes of input, it does not do anything about ends of lines of text. I don't think that's the problem. The file ends up larger because it is not actually compressed, I do not know what compression routine is used, me attempting to reverse engineer the compression method would take a very long time.

You must update Statposter with a new model for vr2800v

I expect the tone of this did not translate well, but finding ways to inject commands into numerous TP-Link models that I don't even own has a very low priority in terms of things I need to do. Much easier to buy a different device from another company that does what you want. I only bought a 8970v1 because it was cheap and in theory capable of running OpenWRT, I don't actually use it, and I doubt I'll ever get around to putting OpenWRT on it either. I would not buy another TP-Link router.
Title: Re: Access DSLstats Tp Link VR2800v
Post by: fosseperme on January 01, 2018, 12:23:23 PM
And if I try to charge a bin of 2600/2800 (modified by statposter) on the webgui of the my 2800v? It can be compatible? Anyone that has 2600/2800 (that are a model of router similar to 2800v except for voip) can post here a bin? I want try....
Title: Re: Access DSLstats Tp Link VR2800v
Post by: fosseperme on January 01, 2018, 12:50:51 PM
I expect working files created for other models look like that in RouterPassView.

StatPOSTer adds 2 bytes of zeroes after each 16 bytes of input, it does not do anything about ends of lines of text. I don't think that's the problem. The file ends up larger because it is not actually compressed, I do not know what compression routine is used, me attempting to reverse engineer the compression method would take a very long time.

Here there is a method of compression that work on tplink :)

http://teknoraver.net/software/hacks/tplink/ (http://teknoraver.net/software/hacks/tplink/)
Title: Re: Access DSLstats Tp Link VR2800v
Post by: ejs on January 01, 2018, 01:13:28 PM
That's where I got the encryption key and method from back in 2015. On the 8970v1, the config.bin file is only encrypted, and not compressed. On later models, including the 9980, the config file is both encrypted and compressed (made smaller, like in a zip file, but it's not an actual zip file).

I think someone else reported that they succeeded by putting the `telnet -p 1023 -l login` bit into the wireless network name, simply using the web interface as usual. I think I tried all sorts of things like that with my 8970v1 and nothing worked, but it may work on other models with different wireless components.
Title: Re: Access DSLstats Tp Link VR2800v
Post by: fosseperme on January 01, 2018, 01:34:13 PM
That's where I got the encryption key and method from back in 2015. On the 8970v1, the config.bin file is only encrypted, and not compressed. On later models, including the 9980, the config file is both encrypted and compressed (made smaller, like in a zip file, but it's not an actual zip file).

I think someone else reported that they succeeded by putting the `telnet -p 1023 -l login` bit into the wireless network name, simply using the web interface as usual. I think I tried all sorts of things like that with my 8970v1 and nothing worked, but it may work on other models with different wireless components.

not work :(
Title: Re: Access DSLstats Tp Link VR2800v
Post by: fosseperme on January 01, 2018, 11:42:36 PM
I decrypted in Linux the file system of 2800v  ;D
This is the link for download it http://www.filedropper.com/ubifs-root (http://www.filedropper.com/ubifs-root)
Ejs now you can help me?
Title: Re: Access DSLstats Tp Link VR2800v
Post by: ejs on January 04, 2018, 08:47:07 PM
Thank you, but I am quite capable of using binwalk myself. The file system is not encrypted.

A few days ago I was reading the Wikipedia article on LZ77 compression, and I suspect that may be what's used on the config files. Even if I am correct, I still don't have the time to do the necessary work, and if it's going to encourage more people to actually use TP-Link routers, I'd rather not bother really.
Title: Re: Access DSLstats Tp Link VR2800v
Post by: fosseperme on January 05, 2018, 09:45:37 AM
Thank you, but I am quite capable of using binwalk myself. The file system is not encrypted.

A few days ago I was reading the Wikipedia article on LZ77 compression, and I suspect that may be what's used on the config files. Even if I am correct, I still don't have the time to do the necessary work, and if it's going to encourage more people to actually use TP-Link routers, I'd rather not bother really.

i tried to compress in LZ77 and the file obtained is very small (7KB), similar to that generated by the router, but the the router don't accept it, says "file not valid". However Tplink release me the GPL code for vr2800v at this link http://static.tp-link.com/resources/gpl/GPL_VR2800vV1.tar.gz
it can be useful?
Title: Re: Access DSLstats Tp Link VR2800v
Post by: ejs on January 06, 2018, 08:10:52 PM
The GPL source code released does not include the source code for various proprietary software components, including most of the custom TP-Link software. So no, it's not useful, it does not contain the source code for the part you are interested in.
Title: Re: Access DSLstats Tp Link VR2800v
Post by: fosseperme on January 06, 2018, 11:33:44 PM
I have resolved the mistery...the problem is checksum!!!
I tried to modify the md5 hash of the original bin with this software http://imristo.com/hash-manager-change-the-hash-of-any-file/ (http://imristo.com/hash-manager-change-the-hash-of-any-file/) and i take, on the original bin file, the same error (file error) of the bin modified!
Title: Re: Access DSLstats Tp Link VR2800v
Post by: foxtrot_yankee on September 21, 2020, 04:18:26 PM
Sorry to bump an old thread. Did your last post mean you got it working?