wget ftp://ftp.a-link.com/wnap/WNAP_e206Aeng1_web.zip unzip WNAP_e206Aeng1_web.zip hexdump -C WNAP_e206Aeng1_web.bin > WNAP_e206Aeng1_web.bin.txt 00007840 00 01 00 00 00 01 00 00 00 01 65 5a 42 5a 68 39 |..........eZBZh9| === 0000784c BZh 0x0000784c == 30796 dd if=WNAP_e206Aeng1_web.bin of=file1.bz2 bs=1 skip=30796 bunzip2 file1 dd if=WNAP_e206Aeng1_web.bin of=file2.bz2 bs=1 skip=30796 count=91480 30796+91480=122276 == 0x1DDA4 0001dda0 6b 24 1b 20 00 65 63 73 72 6f 80 40 00 00 00 03 |k$. .ecsro.@....| Kernel marks: 0001f8c0 10 10 10 10 10 10 10 41 41 41 41 41 41 01 01 01 |.......AAAAAA...| 0001fdb0 00 00 00 00 00 00 5d 00 00 80 00 86 00 35 00 00 |......]......5..| 0001fdb6 == 130486 FILE5 LZMA [crope@localhost e206Aeng1]$ lzmainfo file5 file5 Uncompressed size: 3 MB (3473542 bytes) Dictionary size: 8 MB (2^23 bytes) Literal context bits (lc): 3 Literal pos bits (lp): 0 Number of pos bits (pb): 2 0001fdf0 24 42 49 4e c4 37 27 17 aa 09 f9 4a ce f2 0c 96 |$BIN.7'....J....| 0001fdf1 130545 Looks like firmware uses squashfs with LZMA (and thats why, missign LZMA-squashfs, I cannot mount it correctly): 0001f980 02 02 02 02 02 02 4d 61 6c 6c 6f 63 20 65 72 72 |......Malloc err| 0001f990 6f 72 0a 00 00 00 4d 65 6d 6f 72 79 20 65 72 72 |or....Memory err| 0001f9a0 6f 72 0a 00 00 00 4c 5a 4d 41 3a 20 44 65 63 6f |or....LZMA: Deco| 0001f9b0 64 69 6e 67 20 65 72 72 6f 72 20 3d 20 20 00 00 |ding error = ..| 0001f9c0 00 00 4f 75 74 20 6f 66 20 6d 65 6d 6f 72 79 00 |..Out of memory.|