Joined: 06 Jun 2006 Posts: 7463 Location: Dresden, Germany
Posted: Thu Oct 05, 2006 0:42 Post subject: Re: GS manual reversion firmware finally available
db90h wrote:
I finally got around to tracking down why OpenWrt would brick WRT54GS v5.x units. It's been fixed now in OpenWrt and a reversion firmware is available (though consider this ALPHA):
To use: TFTP the TRX, or flash the BIN with the web UI. Telnet in after reboot and follow instructions.
Note that I've also added support to bsptool for setting the THIRD mac address in the BOOTP block.
i always thought, this is a dd-wrt forum _________________ "So you tried to use the computer and it started smoking? Sounds like a Mac to me.." - Louis Rossmann https://www.youtube.com/watch?v=eL_5YDRWqGE&t=60s
I finally got around to tracking down why OpenWrt would brick WRT54GS v5.x units. It's been fixed now in OpenWrt and a reversion firmware is available (though consider this ALPHA):
Posted: Fri Oct 06, 2006 1:53 Post subject: Re: GS manual reversion firmware finally available
BrainSlayer wrote:
db90h wrote:
I finally got around to tracking down why OpenWrt would brick WRT54GS v5.x units. It's been fixed now in OpenWrt and a reversion firmware is available (though consider this ALPHA):
I have a WRT54GS v5 already with the dd-wrt v23 SP2. I have a question.
In the future, can I upgrade to the micro specific version rom of my router or should I just stick to the micro generic version??
Can anyone tell me how to use the "vxworks boot" prompt to dump the image (over serial console), and capture it, ie: with "d 0,5000000" (for 8mb 0x800000) ram until it gets an exception error. then again with the boot image decompressed in memory (with " l " command). then using some hex to bin convert the file, then use IDA to disassemble it? my board is ARM940T, what options do I use in IDA? anyone have some experience? I don't know if I can jtag the unit with just parallel port and resistors. Thanks
Why am I getting
Mistake! There was an attempt of an automatic insert of the message in a forum. Your message is sent to hell. Try still times who knows - can it will turn out? Still probably, that you too long wrote the message - then pass to page back, copy the text, update page, insert the copied text and press button "Send".
OT: Can someone help me reassemble this file? (I want a COFF-Arm-Little ARM940T) and to load it in IDA, is it possible to recreate the text, bss, sections or get the symbol table? Its a vxworks image. I manage to find "debug reconfigure-rom and debug start-test-server, but I have no idea what start-test-server does expect open port 9997)
Please tell me what other boards I can post for help.. Thanks
can someone tell me where i went wrong? i definitely ran embed.sh, here is as far as i went -
root@OpenWrt:/# cd /etc/bsptools/
root@OpenWrt:/etc/bsptools# ./embed.sh XX-XX-XX-XX-XX-XX XX-XX-XX-XX-XX-XZ CDFB1
F639743
bsptool v0.2 - (c)2006 Jeremy Collake - http://www.bitsum.com
MAC1 supplied: XX-XX-XX-XX-XX-XX
MAC2 supplied: XX-XX-XX-XX-XX-XZ
Serial supplied: CDFB1F639743
Viewing BOOTP block ...
BOOTP block
codep : 0x57475635
checksum : 0x55d8 (calculated: 0x55cf)
bootcode ver : 0x1000102
model : WRT54G
vendor : LINKSYS
country : US
serial # : CDFB0F2A0131
hardware ver : 1.0
pciid : 0xffff
mac1 : XX-XX-XX-XX-XX-XX
mac2 : XX-XX-XX-XX-XX-XZ
boot string : tffs:(0,0)host:/fl/vxWorks.bin h=192.168.1.100 e=192.168.1.1:fff
fff00 u=target tn=targetname f=0x8
Rewriting BOOTP block ...
Viewing modified BOOTP block ...
BOOTP block
codep : 0x57475635
checksum : 0x5682 (calculated: 0x5682)
bootcode ver : 0x1000102
model : WRT54G
vendor : LINKSYS
country : US
serial # : CDFB1F639743
hardware ver : 1.0
pciid : 0xffff
mac1 : XX-XX-XX-XX-XX-XX
mac2 : XX-XX-XX-XX-XX-XZ
boot string : tffs:(0,0)host:/fl/vxWorks.bin h=192.168.1.100 e=192.168.1.1:fff
fff00 u=target tn=targetname f=0x8
BOOTP changes done.
root@OpenWrt:/etc/bsptools# ./flash.sh
WARNING: flashing VxWorks BSP.. do not abort this process! Wait!
Unlocking nvram ...
Erasing nvram ...
Bad trx header
If this is a firmware in bin format, like some of the
original firmware files are, use following command to convert to trx:
dd if=firmware.bin of=firmware.trx bs=32 skip=1
TRX check failed!
Unlocking mtd0 ...
Writing from /etc/bsptools/part1.bin to mtd0 ... [w]
Bad trx header
If this is a firmware in bin format, like some of the
original firmware files are, use following command to convert to trx:
dd if=firmware.bin of=firmware.trx bs=32 skip=1
TRX check failed!
Unlocking mtd1 ...
Writing from /tmp/part2.bin to mtd1 ... [w]
i've tried the pin shorting method to get it back with no luck, looks like i'll ebay a jtag cable .
Joined: 11 Nov 2008 Posts: 9 Location: Hong Kong PRC
Posted: Tue Nov 11, 2008 21:52 Post subject: changing MAC address after flashed to ddwrt micro
i have not catch on the note of the MAC changing,
and find the MAC issue after playing v23 sp2 and v24 sp1 a few day.
how can i changed my MAC address now , is ther any other way to change it other than revert back to the original Vxworks Linksys firmware than flash ddwrt again ?
Also i tested v24 sp1 , it lockup randomly from 10 to 15 min , both webGUI and telnet locked up , even ping the router can't get reply. i try to stop some service but now work , fnaly gav up and go back to v23 sp2. i'm wonder will openwrt get better ? can any oe post the donwload link for the micro openwrt image ?
for ddwrt i got a VLAN problem , my ISP using VDSL model via PPPoE, and can login 2 time , ie have 2 IP.
i connect two wrt54g to the modem via a switch hub , now i don't wanna to have 3 box here (2 routerbox , 1 hub box) , so i assigned two lanport to the WAN port valan (see picture)
it don't work , when if all 3 port in the same vlan1,only one the v5 can get dail up and obtain IP . than i try to creat vlan2 it done ! both router can obain own IP now . do anyone know why ?
For those looking for a way to revert the WRT54GS v5 and v6 units, the revert file is located here. It has been for quite some time (timestamp says March 2007). _________________ WRT54G v3 - v24 r14471M NEWD Eko - AP
WRT350N v1.0
WRT600N v1.1 - halfway there!
Se7en is Darker...