TJTAG - EJTAG De-Brick tool - IMPORTANT CHANGE:See 1st Post.

Post new topic   This topic is locked: you cannot edit posts or make replies.    DD-WRT Forum Index -> General Questions
Goto page Previous  1, 2, 3 ... 82, 83, 84
Author Message
mrc_torres
DD-WRT Novice


Joined: 24 Jan 2009
Posts: 40
Location: Sorocaba, Sao Paulo, Brazil

PostPosted: Mon Oct 10, 2011 15:46    Post subject: Reply with quote
Now I'm able to access the router via JTAG with another (short) cable, but even recognizing the CPU and flash memory I did not get success in DD-WRT redboot rewrite (the normal, not microredboot).
Which parameters on the command line should I use with the DIR-300 A1 to restore redboot from a custom.bin file with ap61.rom inside?
Sponsor
RogFanther
DD-WRT User


Joined: 24 May 2008
Posts: 156

PostPosted: Mon Oct 10, 2011 20:45    Post subject: Reply with quote
You could try to extract the redboot from the factory firmware file, and reflash that. Then reflash the ap61.ram from the serial interface.

Or backup a good redboot from a known working router, and reflash that.
1of16
DD-WRT Novice


Joined: 16 Mar 2011
Posts: 18

PostPosted: Wed Oct 12, 2011 16:09    Post subject: Reply with quote
just tried to unbrick my WRT54GS v4, but I'm getting an odd error-message:

Code:
==========================================
 EJTAG Debrick Utility v2.1.4-Tornado-MOD
==========================================

Probing bus ... Done

Instruction Length set to 0

CPU Chip ID: 00000000000000000000000000000000 (00000000)
*** CHIP DETECTION OVERRIDDEN ***

    - EJTAG IMPCODE ....... : 00000000000000000000000000000000 (00000000)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS32
    *** DMA Mode Forced Off ***

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... DMA Write Addr = ff300000  Data = ERROR ON WRITE
Done
Halting Processor ... <Processor Entered Debug Mode!> ... Done


And then nothing happens and the tjtag process runs at 100% (ubuntu linux 10.04).

any ideas? I don't think, that my jtag-cable is too long, cause I used an old IDE-cable... Wink[/quote]
RogFanther
DD-WRT User


Joined: 24 May 2008
Posts: 156

PostPosted: Wed Oct 12, 2011 16:41    Post subject: Reply with quote
What is the complete command line you are using with tjtag? Also, re-check your cable soldering.
1of16
DD-WRT Novice


Joined: 16 Mar 2011
Posts: 18

PostPosted: Wed Oct 12, 2011 17:33    Post subject: Reply with quote
thanks for your answer!
I tried
Code:
./tjtag -probeonly /skipdetect /nodma
./tjtag -probeonly /skipdetect
./tjtag -probeonly

but in the end its the same result...

I checked my cable twice...but I'll do it again.
Btw. shall I connect the 12th jtag-pin with ground or not? on some schematics its is connected, on some not.
barryware
DD-WRT Guru


Joined: 26 Jan 2008
Posts: 13049
Location: Behind The Reset Button

PostPosted: Wed Oct 12, 2011 18:12    Post subject: Reply with quote
show output from:

./tjtag -probeonly /noemw /nocwd

_________________
[Moderator Deleted] Shocked
1of16
DD-WRT Novice


Joined: 16 Mar 2011
Posts: 18

PostPosted: Thu Oct 13, 2011 12:14    Post subject: Reply with quote
barryware wrote:
show output from:

./tjtag -probeonly /noemw /nocwd


awesome! thank you, now its working !
1of16
DD-WRT Novice


Joined: 16 Mar 2011
Posts: 18

PostPosted: Thu Oct 13, 2011 13:48    Post subject: Reply with quote
ok...now I'm puzzled:

I erased the nvram, the kernel, flashed a new CFE, erased the nvram and the kernel again and the power-led is still blinking continuously, so the WRT54GS v4 is still bricked?!
don't know what to do now Sad
RogFanther
DD-WRT User


Joined: 24 May 2008
Posts: 156

PostPosted: Thu Oct 13, 2011 17:32    Post subject: Reply with quote
read the cfe from the router, and compare it to the file you used to flash. See if they are equal
1of16
DD-WRT Novice


Joined: 16 Mar 2011
Posts: 18

PostPosted: Mon Oct 17, 2011 16:23    Post subject: Reply with quote
they are equal...

is the router bricked beyond repairs?
barryware
DD-WRT Guru


Joined: 26 Jan 2008
Posts: 13049
Location: Behind The Reset Button

PostPosted: Mon Oct 17, 2011 18:56    Post subject: Reply with quote
1of16 wrote:
ok...now I'm puzzled:

I erased the nvram, the kernel, flashed a new CFE, erased the nvram and the kernel again and the power-led is still blinking continuously, so the WRT54GS v4 is still bricked?!
don't know what to do now Sad


you erased the kernel. The power light will be blinking. if you ping the router, you should get a responce with a ttl=100.

remember to set a static ip on your pc

it is waiting for you to flash firmware (kernel) via tftp.

_________________
[Moderator Deleted] Shocked
1of16
DD-WRT Novice


Joined: 16 Mar 2011
Posts: 18

PostPosted: Mon Oct 17, 2011 19:23    Post subject: Reply with quote
ok...stupid me...that was it. now the router is working again! thank you all!

I'll update the wiki-site for jtag...so others wont do the same stupid mistakes Wink
granacik84
DD-WRT Novice


Joined: 30 Oct 2011
Posts: 3

PostPosted: Thu Nov 10, 2011 18:17    Post subject: Dir-300 jtag Reply with quote
Hello did anybody help me?

tjtag3 -probeonly
I got:

==============================================
EJTAG Debrick Utility v3.0.1 Tornado-MOD
==============================================

Probing bus ... Done

Instruction Length set to 5

CPU Chip ID: 00000000000000000000000000000001 (00000001)
*** Found a Atheros AR531X/231X CPU chip ***

- EJTAG IMPCODE ....... : 00000000000000000100000000000000 (00004000)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : No
- EJTAG Implementation flags: R4k NoDMA MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done
Clearing Watchdog ... ^C

and still freeze
sometime i got:

=============================================
EJTAG Debrick Utility v3.0.1 Tornado-MOD
==============================================

Probing bus ... Done

Instruction Length set to 5

CPU Chip ID: 00000000000000000000000000000001 (00000001)
*** Found a Atheros AR531X/231X CPU chip ***

- EJTAG IMPCODE ....... : 00000000000000000000000000000000 (00000000)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done
Clearing Watchdog ... Done

Enabling Atheros Flash Read/Write ... Done

.RE-Probing Atheros processor....
Probing Flash at (Flash Window: 0x1fc00000) ...
Done

*** Unknown or NO Flash Chip Detected ***

*** REQUESTED OPERATION IS COMPLETE ***

Resuming Processor ...

with tjtag3 -probeonly /flash_debug

==============================================
EJTAG Debrick Utility v3.0.1 Tornado-MOD
==============================================

Probing bus ... Done

Instruction Length set to 5

CPU Chip ID: 00000000000000000000000000000001 (00000001)
*** Found a Atheros AR531X/231X CPU chip ***

- EJTAG IMPCODE ....... : 00000000000000000000000000000000 (00000000)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done
Clearing Watchdog ... Done
spi_flash_read 0x1fc00000
spi_flash_mmr 0x11300000
spi_flash_mmr_size 0x0000000c
spi_flash_ctl 0x00000000
spi_flash_opcode 0x00000004
spi_flash_data 0x00000008
spi_ctl_start 0x00000100
spi_ctl_busy 0x00010000

Enabling Atheros Flash Read/Write ... Done

.RE-Probing Atheros processor....
Probing Flash at (Flash Window: 0x1fc00000) ...

Debug AMD Vendid : 00000000000000000000000000000001 (00000001)
Debug AMD Devdid : 00000000000000000000000000000000 (00000000)

Debug SST Vendid : 00000000000000000100000000000001 (00004001)
Debug SST Devdid : 00000000000000000000000000000000 (00000000)

Debug BSC-SCS Vendid :00000000000000000000000000100000 (00000020)
Debug BCS-SCS Devdid :00000000000000000000000000000000 (00000000)
REGREAD32 data 0x00000000 spi_flash_mmr 0x11300000 reg 0x00000000
REG 0x00000004 REGWRITE32 0x0000009f
SPI_FLASH_OPCODE 0x00000004 PTR_OPCODE 0x0000009f
REG 0x00000000 REGWRITE32 0x00000131
SPI_FLASH_CTL SEND -> 0x00000000 reg 0x00000131
REGREAD32 data 0x00000011 spi_flash_mmr 0x11300000 reg 0x00000000
REGREAD32 data 0x00000000 spi_flash_mmr 0x11300000 reg 0x00000008

Debug SPI id : 00000000000000000000000000000000 (00000000)

Debug SPI Vendid : 00000000000000000000000000000000 (00000000)
Debug SPI Devdid : 00000000000000000000000000000000 (00000000)
Done

*** Unknown or NO Flash Chip Detected ***

*** REQUESTED OPERATION IS COMPLETE ***

Resuming Processor ...
thanks for answerd
Tornado
DD-WRT Developer/Maintainer


Joined: 07 Jun 2006
Posts: 2087
Location: Odessa, Ukraine

PostPosted: Sun Nov 13, 2011 16:45    Post subject: FYI Reply with quote
If you use tjtag in combination with /skip_detect, you must also set the instruction length /instrlen: ?
_________________
Want JTAG support - Donate a router
or Donate with PayPal !

My preferred parallel jtag adapter:
TIAO Parallel adapter

Tjtag website - http://tjtag.com

Compiling DD-WRT on:
AMD Phenom II X6 1090T @ 3926.667 Mhz

Aptosid X64 - Debian SID X64
Ubuntu 10.10 X64 - Arch X64
Tornado
DD-WRT Developer/Maintainer


Joined: 07 Jun 2006
Posts: 2087
Location: Odessa, Ukraine

PostPosted: Sun Nov 13, 2011 17:06    Post subject: FYI - TJTAG Reply with quote
I have decided that after working on Tjtag for almost 6 years, and very few donations, that tjtag will only be available from http://tjtag.com

In order to receive tjtag, I will require a min. $5.00 donation, to help me cover cost. You may contact me with your requests, and for help with processors not in tjtag at my e-mail address tornado@tjtag.com

I'm sorry it has come to this....

Regards,

Tornado

_________________
Want JTAG support - Donate a router
or Donate with PayPal !

My preferred parallel jtag adapter:
TIAO Parallel adapter

Tjtag website - http://tjtag.com

Compiling DD-WRT on:
AMD Phenom II X6 1090T @ 3926.667 Mhz

Aptosid X64 - Debian SID X64
Ubuntu 10.10 X64 - Arch X64
Goto page Previous  1, 2, 3 ... 82, 83, 84 Display posts from previous:    Page 84 of 84
Post new topic   This topic is locked: you cannot edit posts or make replies.    DD-WRT Forum Index -> General Questions All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum