Flash Serial Linksys e900

Post new topic   Reply to topic    DD-WRT Forum Index -> Hardware basado en Broadcom
Author Message
gcadin
DD-WRT Novice


Joined: 18 Aug 2023
Posts: 2

PostPosted: Fri Aug 18, 2023 2:21    Post subject: Flash Serial Linksys e900 Reply with quote
Hola, este es mi primer post en el foro y la verdad es que necesito ayuda, hace un tiempo tenia un linksys e900 funcionando normal, necesitaba configurarlo como repetidor por lo que busqué en la web y me aparecia dd-wrt como solución, resulta que en esa instancia alfo falló en la actualización del firmware, no sé si fue el firmware incorrecto o un fallo con el proceso del reset 30/30/30, por lo que me di cuenta de que lo había brickeado y que necesitaria un usb-ttl para poder hacer el flasheo vía serial, hoy en día tengo el usb-ttl pero me surgen algunos problemas, intentaba flashear con la rom stock, primero tuve problemas con el ttftp y no se conectaba al servidor, supongo que será problemas con la configuración, vi muchos videos y aunque el prompt es CFE los comandos no son similares o no me funcionan, si alguien pudiese ayudarme, u orientarme, he leido casi todos los casos en el foro, adjuntaré algunas pantallazos de la consola

Esto es lo que muestra al encender el router

Code:

Decompressing...done
Start to blink diag led ...


CFE version 5.100.138.11 based on BBP 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: 08/08/18 13:32:27 HKT (hhm@sw3)
Copyright (C) 2000-2008 Broadcom Corporation.

Initializing Arena
Initializing Devices.

No DPN
This is a Serial Flash
Boot partition size = 262144(0x40000)
Found an ST compatible serial flash with 128 64KB blocks; total size 8MB
Partition information:
boot    #00   00000000 -> 0003FFFF  (262144)
trx     #01   00040000 -> 0004001B  (28)
os      #02   0004001C -> 007EFFFF  (8060900)
nvram   #03   007F0000 -> 007FFFFF  (65536)
Partition information:
boot    #00   00000000 -> 0003FFFF  (262144)
trx     #01   00040000 -> 007EFFFF  (8060928)
nvram   #02   007F0000 -> 007FFFFF  (65536)
BCM47XX_GMAC_ID
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.100.138.11
CPU type 0x19749: 300MHz
Total memory: 32768 KBytes

CFE mem:    0x80700000 - 0x807AE1E0 (713184)
Data:       0x80743450 - 0x80747530 (16608)
BSS:        0x80747530 - 0x807481E0 (3248)
Heap:       0x807481E0 - 0x807AC1E0 (409600)
Stack:      0x807AC1E0 - 0x807AE1E0 (8192)
Text:       0x80700000 - 0x80743450 (275536)

Boot version: v5.3.7
The boot is CFE
mac_init(): Find mac [24:f5:a2:e9:27:fb] in location 0
Nothing...

### CLKDIV= 0x8080842, SFlashClkDiv=8 clkdivsf=2 ###

### Change it to 0x2080842 (2) ###
CMD: [ifconfig eth0 -addr=192.168.1.1 -mask=255.255.255.0]
Device eth0:  hwaddr 24-F5-A2-E9-27-FB, ipaddr 192.168.1.1, mask 255.255.255.0
        gateway not set, nameserver not set
CMD: [go;]
Check CRC of image1
  Len:     0x780000     (7864320)       (0xBC040000)
  Offset0: 0x1C         (28)            (0xBC04001C)
  Offset1: 0x9D0        (2512)  (0xBC0409D0)
  Offset2: 0x15D400     (1430528)       (0xBC19D400)
  Header CRC:    0xF09A96E2
  Calculate CRC: 0xF09A96E2
Image 1 is OK
Try to load image 1.
Waiting for 3 seconds to upgrade ...
CMD: [load -raw -addr=0x807ae1e0 -max=0x1851e20 :]
Loader:raw Filesys:tftp Dev:eth0 File:: Options:(null)
Loading: _tftpd_open(): retries=0/3
_tftpd_open(): retries=1/3
_tftpd_open(): retries=2/3

### Start=401052669 E=720315549 Delta=319262880 ###
Failed.
Could not load :: Timeout occured
CMD: [boot -raw -z -addr=0x80001000 -max=0x6ff000 flash0.os:]
Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)
Loading: .. 3916 bytes read

### Start=723396731 E=724035768 Delta=639037 ###
Entry at 0x80001000
Closing network.
Starting program at 0x80001000
Linux version 2.6.24.111 (root@linux) (gcc version 4.1.2) #15162 Fri May 22 00:56:47 +04 2020
CPU revision is: 00019749
Found a 8MB ST compatible serial flash
Determined physical RAM map:
 memory: 02000000 @ 00000000 (usable)
Zone PFN ranges:
  Normal          0 ->     8192
  HighMem      8192 ->     8192
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0:        0 ->     8192
Built 1 zonelists in Zone order.  Total pages: 8192
Kernel command line: console=ttyS0,115200 root=1f02 rootfstype=squashfs noinitrd
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
PID hash table entries: 256 (order: 8, 1024 bytes)
CPU: BCMd144 rev 1 at 300 MHz
Using 150.000 MHz high precision timer.
console [ttyS0] enabled
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 25924k/32768k available (3486k kernel code, 6828k reserved, 1374k data, 220k init, 0k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
Generic PHY: Registered new driver
PCI: no core
PCI: no core
PCI: Fixing up bus 0
NET: Registered protocol family 2
Time: MIPS clocksource has been installed.
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
devfs: 2004-01-31 Richard Gooch (rgooch@atnf.csiro.au)
devfs: boot_options: 0x1
squashfs: version 3.0 (2006/03/15) Phillip Lougher
io scheduler noop registered
io scheduler deadline registered (default)
HDLC line discipline: version $Revision: 4.8 $, maxframe=4096
N_HDLC line discipline registered.
Serial: 8250/16550 driver $Revision: 1.90 $ 4 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x0 (irq = 8) is a 16550A
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
MPPE/MPPC encryption/compression module registered
NET: Registered protocol family 24
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
et_module_init: passivemode set to 0x0
eth0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.100.138.9
pflash: found no supported devices
bootloader size: 262144
nvram size: 65536
sflash: Filesystem type: squashfs, size=0x61baef
partition size = 6433792
Creating 5 MTD partitions on "sflash":
0x00000000-0x00040000 : "cfe"
0x00040000-0x007f0000 : "linux"
0x0019d400-0x007c0000 : "rootfs"
mtd: partition "rootfs" doesn't start on an erase block boundary -- force read-only
0x007f0000-0x00800000 : "nvram"
0x007c0000-0x007f0000 : "ddwrt"
Broadcom Watchdog Timer: 0.07 initialized.
u32 classifier
    Performance counters on
    Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (1024 buckets, 4096 max)
ctnetlink v0.93: registering with nfnetlink.
IPv4 over IPv4 tunneling driver
GRE over IPv4 tunneling driver
ip_tables: (C) 2000-2006 Netfilter Core Team
ClusterIP Version 0.8 loaded successfully
TCP bic registered
TCP cubic registered
TCP westwood registered
TCP highspeed registered
TCP hybla registered
TCP htcp registered
TCP vegas registered
TCP scalable registered
NET: Registered protocol family 1
NET: Registered protocol family 17
Welcome to PF_RING 3.2.1
(C) 2004-06 L.Deri <deri@ntop.org>
NET: Registered protocol family 27
PF_RING: bucket length    128 bytes
PF_RING: ring slots       4096
PF_RING: sample rate      1 [1=no sampling]
PF_RING: capture TX       No [RX only]
PF_RING: transparent mode Yes
PF_RING initialized correctly.
PF_RING: registered /proc/net/pf_ring/
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
decode 1f02
SQUASHFS error: Failed to allocate read_data block
List of all partitions:
1f00        256 mtdblock0 (driver?)
1f01       7872 mtdblock1 (driver?)
1f02       6283 mtdblock2 (driver?)
1f03         64 mtdblock3 (driver?)
1f04        192 mtdblock4 (driver?)
No filesystem could mount root, tried:  squashfs
Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(31,2)


al iniciar y cancelar inicio automatico + help con comandos


Code:

Decompressing...done
Start to blink diag led ...


CFE version 5.100.138.11 based on BBP 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: 08/08/18 13:32:27 HKT (hhm@sw3)
Copyright (C) 2000-2008 Broadcom Corporation.

Initializing Arena
Initializing Devices.

No DPN
This is a Serial Flash
Boot partition size = 262144(0x40000)
Found an ST compatible serial flash with 128 64KB blocks; total size 8MB
Partition information:
boot    #00   00000000 -> 0003FFFF  (262144)
trx     #01   00040000 -> 0004001B  (28)
os      #02   0004001C -> 007EFFFF  (8060900)
nvram   #03   007F0000 -> 007FFFFF  (65536)
Partition information:
boot    #00   00000000 -> 0003FFFF  (262144)
trx     #01   00040000 -> 007EFFFF  (8060928)
nvram   #02   007F0000 -> 007FFFFF  (65536)
BCM47XX_GMAC_ID
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.100.138.11
CPU type 0x19749: 300MHz
Total memory: 32768 KBytes

CFE mem:    0x80700000 - 0x807AE1E0 (713184)
Data:       0x80743450 - 0x80747530 (16608)
BSS:        0x80747530 - 0x807481E0 (3248)
Heap:       0x807481E0 - 0x807AC1E0 (409600)
Stack:      0x807AC1E0 - 0x807AE1E0 (8192)
Text:       0x80700000 - 0x80743450 (275536)

Boot version: v5.3.7
The boot is CFE
mac_init(): Find mac [24:f5:a2:e9:27:fb] in location 0
Nothing...

### CLKDIV= 0x8080842, SFlashClkDiv=8 clkdivsf=2 ###

### Change it to 0x2080842 (2) ###
CMD: [ifconfig eth0 -addr=192.168.1.1 -mask=255.255.255.0]
Device eth0:  hwaddr 24-F5-A2-E9-27-FB, ipaddr 192.168.1.1, mask 255.255.255.0
        gateway not set, nameserver not set
Automatic startup canceled via Ctrl-C / ESC
CFE> ^C
CFE> ^C
CFE> help
CMD: [help]
Available commands:

upgrade             Upgrade Firmware
et                  Broadcom Ethernet utility.
modify              Modify flash data.
nvram               NVRAM utility.
reboot              Reboot.
flash               Update a flash memory device
memtest             Test memory.
f                   Fill contents of memory.
e                   Modify contents of memory.
d                   Dump memory.
u                   Disassemble instructions.
batch               Load a batch file into memory and execute it
go                  Verify and boot OS image.
boot                Load an executable file into memory and execute it
load                Load an executable file into memory without executing it
save                Save a region of memory to a remote file via TFTP
ttcp                TCP test command.
tcp constest        tcp console test.
tcp listen          port listener.
tcp connect         TCP connection test.
rlogin              mini rlogin client.
client              Show the client of the dhcp server.
ping                Ping a remote IP host.
arp                 Display or modify the ARP Table
ifconfig            Configure the Ethernet interface
show clocks         Show current values of the clocks.
show heap           Display information about CFE's heap
show memory         Display the system physical memory map.
show devices        Display information about the installed devices.
unsetenv            Delete an environment variable.
printenv            Display the environment variables
setenv              Set an environment variable.
help                Obtain help for CFE commands

For more information about a command, enter 'help command-name'
*** command status = 0
CFE>


algunos comandos de interes (nvram show)

Code:

CFE> nvram show
CMD: [nvram show]
os_ram_addr=80001000
antswctl2g=0x1
rxchain=0x3
boardrev=0x1155
et_pwrsave=0
et0macaddr=24:f5:a2:e9:27:fb
boot_wait=on
watchdog=3000
maxp2ga0=0x48
maxp2ga1=0x48
et0mdcport=0
reset_gpio=10
bxa2g=0x3
pmon_ver=CFE 5.100.138.11
vlan2ports=4 5
ofdm2gpo=0x44444444
gpio7=wps_status_led
gpio8=wps_led
gpio9=wps_button
mcs2gpo0=0x3333
mcs2gpo1=0x6663
cfe_ping_timeout=2
mcs2gpo2=0x3333
wl_msglevel=0x1
triso2g=0x3
mcs2gpo3=0x6663
sromrev=8
mcs2gpo4=0x6666
mcs2gpo5=0x6666
mcs2gpo6=0x6666
boardtype=0x058e
mcs2gpo7=0x6666
aa2g=0x3
lan_netmask=255.255.255.0
extpagain2g=0x2
tssipos2g=0x1
boardpwrctl=0xa00
bw40po=0x0
itt2ga0=0x20
itt2ga1=0x20
vlan2hwname=et0
ag0=0x4
ag1=0x2
pa2gw2a0=0xFAFC
pa2gw2a1=0xFA8C
xtalfreq=20000
antswitch=0x0
blink_diag_led=1
boardflags2=0x00000000
wait_time=3
tftp_recv_timeout=3
clkdivsf=2
ledbh0=11
ledbh1=11
ledbh2=11
bwduppo=0x0
ledbh3=11
txchain=0x3
ledbh5=7
tftpd_ipaddr=192.168.1.254
rssismc2g=0xf
rxpo2g=0xff
rssisav2g=0x7
leddc=0xffff
tftp_rrq_timeout=3
pa2gw1a0=0x1400
pa2gw1a1=0x15ED
clkfreq=300,150,75
lan_ipaddr=192.168.1.1
vlan1hwname=et0
sdram_config=0x103
vlan1ports=0 1 2 3 5*
ccode=0
boot_hw_ver=1.0
boardflags=0x710
rssismf2g=0xf
wandevs=et0
sdram_refresh=0x0000
sdram_ncdl=0x00000000
devid=0x4329
macaddr=00:90:4C:01:50:2a
pdetrange2g=0x2
cck2gpo=0x0
regrev=0
mfg_wait=off
et0phyaddr=30
landevs=vlan1 wl0
boot_hw_model=E900
tftp_max_retries=5
pa2gw0a0=0xFE7E
pa2gw0a1=0xFE62
sdram_init=0x0000
stbcpo=0x0
tri2g=0xff
cddpo=0x0
boot_ver=v5.3.7
boardnum=42
size: 1511 bytes (64025 left)
*** command status = 0
CFE>


printenv

Code:


CFE> printenv
CMD: [printenv]
Variable Name        Value
-------------------- --------------------------------------------------
BOOT_CONSOLE         uart0
CFE_VERSION          1.0.37
CFE_BOARDNAME        BCM947XX
CFE_MEMORYSIZE       32768
NET_DEVICE           eth0
NET_IPADDR           192.168.1.1
NET_NETMASK          255.255.255.0
NET_GATEWAY          0.0.0.0
NET_NAMESERVER       0.0.0.0
STARTUP              go;
*** command status = 0
CFE>



estoy ejecutando el tftpd y en la carpeta raiz tengo un archivo llamado linksys.bin con la rom stock, he intentado algunos comandos para flashear pero no funcionan

Code:

CFE> upgrade
CMD: [upgrade]

     Usage:
     upgrade code.bin
     upgrade boot.bin
     upgrade linux.bin
     upgrade cfe.bin
     upgrade mfg.bin client
     upgrade mfg.bin (same as "upgrade mfg.bin server")

*** command status = -2
CFE> upgrade code.bin
CMD: [upgrade code.bin]
CMD: [flash -ctheader : flash1.trx]
Reading :: _tftpd_open(): retries=0/3
_tftpd_open(): retries=1/3
_tftpd_open(): retries=2/3
Failed.: Timeout occured


supongo que es por error con el servidor tftp, si especifico la ip logra conectarse al servidor tftpd pero me tira error

Code:

CFE> flash 192.168.1.66:linksys.bin flash0.trx
CMD: [flash 192.168.1.66:linksys.bin flash0.trx]
Reading 192.168.1.66:linksys.bin: _tftp_open(): retries=0/3
Done. 7746560 bytes read, fname=(null)
Invalid header seal.  This is not a CFE flash image.
*** command status = -1
CFE>



si alguien me pudiese orientar, muchas gracias
Sponsor
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 14249
Location: Texas, USA

PostPosted: Fri Aug 18, 2023 3:15    Post subject: Reply with quote
https://wiki.dd-wrt.com/wiki/index.php/Linksys_E900

https://wiki.dd-wrt.com/wiki/index.php/Serial_Recovery

https://forum.openwrt.org/t/bricked-linksys-e900/116424

https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=325141

_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
DD-WRT Releases 2023 (PolitePol)
DD-WRT Releases 2023 (RSS Everything)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Hardware basado en Broadcom All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum