Joined: 06 Nov 2010 Posts: 42 Location: Harlem, GA
Posted: Fri Jan 20, 2012 3:13 Post subject:
I lost a day of dev work to resolve an issue with one of my Senao EOC2611P's. Aparently the DD-WRT Team's plan to make money, is to extort money from owners of EOC2611P's- You cannot remove DD-WRT without paying for a license; unless your really crafty.
None the less, to extract the .bin files from the FW, your best bet is to use a linux environment. Download the Sapido's v1.0.36 Firmware; and execute these 3 commands:
# dd if=RB-1132_EN_v1.0.36.bin of=webpages-gw.bin ibs=1 count=293444 skip=32918
# dd if=RB-1132_EN_v1.0.36.bin of=linux.bin ibs=1 count=1116178 skip=326362
# dd if=RB-1132_EN_v1.0.36.bin of=root.bin ibs=1 count=5922834 skip=1442540
webpages-gw.bin is 0x47A44 bytes long; beginning at offset 0x8096
linux.bin is 0x110812 bytes long; beginning at offset 0x4FADA
root.bin is 0x5A6012 bytes long; beginning at offset 0x1602EC
I've finally had some success with getting a self-compiled kernel to run stable on the Sapido RB-1132v2 (running for 48 hours now). WLAN and MIB access is not functional yet; but the framework is inplace.
I have the linux.bin and root.bin uploaded at http://theigb.com/sapido/test47/ .. Do not try these unless you already have the 3 files above, and understand how to put them back.
I cannot get this to run on an RTL8196B (RB-1132v1) because of the bootloader. The bootloader does not like this root.bin.
The RTL1132v1 looks for "sqsh" at 0x00210000; while the new image yields "hsqs". I tried manipulating the kernel to understand sqsh instead of hsqs; but all I can get is a VFS Kernel Panic on the RTL8196B
Additionally, trying to re-compile the bootloader for the RTL8196B has been unsuccessfull. I have 13 RB-1132v1's in my "todo" stack for when I get JTAG working on the RTL8196B :/
If anyone comes across source for rtl8196b-bootcode, I would very much appreciate it. the rtl8196c-bootcode yeilds nothing but bricks on the B (slightly different opcode).
BTW- in that file; you might want to check out rtl-squashfs2.0.tar.gz; I have not had a chance to check yet; but I'd put money on it being able to create the RB-1132v1's squashfs.
Anyhow, I've got alot of new sources to diff; and so little time to do it :/
Really cool to see this thing revived from the dead by basically one dude. Thanks for doing most of the legwork thus far, Conjur. Can't wait to dust off my sapido and actually use it some day!
Awesome news, Conjur.
Say, are these Realteks similar enough?
I've been messing with a TEW-652BRP V2.1R. Same ol' 8196B chip in it. The source is horrible, most commands are cgi script built into httpd. But I compiled it successfully and change it to set client mode at boot.
It'd be nice to get some real firmware on it.
Thanks.
Joined: 06 Nov 2010 Posts: 42 Location: Harlem, GA
Posted: Sat Jan 28, 2012 21:38 Post subject:
http://theigb.com/sapido/rel2/fw.bin
(Sapido RB-1132v2 only; upload via tftp)
(no DD-WRT web interface; just uses the realtek SDK webui for now)
getting much closer; have the SDK kernel source broken down into .tar.gz's for the arch, soc, wifi card, and board-specific; and a few .patch's; compiling from a basic linux 2.6.30-9 tarball
is it normal to leave arch-specific code in the netfilter code? I can't find a good way to "port" that code out into a module :/
Joined: 06 Nov 2010 Posts: 42 Location: Harlem, GA
Posted: Tue Jan 31, 2012 0:49 Post subject:
Well, I'm at a stand-still again.
When you over-write the boot-loader, and it doesn't work (bricks the unit):
1) Powering the SPI Flash, to manually re-program it, in-turn powers the cpu, which holds the chip-select pin high; and I can't manually re-program the spi flash without desoldering it from the board :/
2) The RTL8196C JTAG pins do not have tracks going anywhere; and are too close together to tap them individually (I'm not very handy at micro-soldering)
3) The SPI Flash chip is super-glued to the PCB; and desoldering it pulls a few layers off of the board; including the tracks that run under it.
Long story short- I'm out of RTL8196C units, and I'd rather slam my head into the cement outside than re-write my code for the 8196BU.
Are there any boards out there, with an RTL8196C; that have pins 96-100 tracked out to jumpers, or atleast pads?
The pins go counter-clockwise, starting at the dimple in the bottom left:
bottom row: 1-38
right-hand side: 39-64
top row: 65-102
left-hand side: 103-128
(see attached pic for a better idea of the pin layout)
Hi, I flashed my Router wrongly and I am unable to restore back to factory condition.
My Router is based on RTL8198
The bootloader is working but I cannot get the web interface now.
I followed your instruction on root.bin, linux.bin and webpages-gw.
I didn't know the firmware offset but I found the images on the vendor release SDK.
Both root.bin and linux.bin works it started flashing but I can't get webpages-gw.bin. I tried rename some file but it doesn't recognise, checksum error maybe?
Btw I also found that the tftp recognise fw.bin as well and it seems to contain linux.bin and root.bin concatenated together.
Can you take a look at the images and tell me how to get webpage-gw.bin working? I attached all the images below.
What is working: fw.bin, linux.bin, root.bin, nfjrom.bin
The rest doesn't work. Router is WNR1008 Prolink
http://www.mediafire.com/?4e75wz4uams3j
Thanks.
Joined: 24 Oct 2008 Posts: 1079 Location: Latin America
Posted: Sun Apr 22, 2012 13:28 Post subject:
conjur wrote:
Are there any boards out there, with an RTL8196C; that have pins 96-100 tracked out to jumpers, or atleast pads?
Actually, I have two Sapido RB-1732 (AKA Amigo BR280n).
FCCID = U6A-BR280N
Realtek RTL8196C @400MHz
8MB Serial Flash, 32MB SDRAM
Wireless Chip: Realtek RTL8192CE (MAC+BB+RF) 2T2R with external high power (1Watt) amplifier.
5 10/100 ports. 1 USB 2.0 port (3.5G). 2 fixed 5dB antennae.
I have telnet access to it
I see what it seems a serial port and a JTAG port (to its higher pins, as noted above).
Nothing specially bad with the latest factory firmware. Anyways, I think it would be nice to have dd-wrt available for it.
rb-1732.PNG
Description:
(Fuzzy) Photo from the FCC Application.
Filesize:
977.49 KB
Viewed:
83541 Time(s)
_________________ If you want support, please read first the announcements and forum rules.
Si usted desea ayuda, por favor lea primero los anuncios y las reglas del foro.
Posted: Thu Jun 28, 2012 10:20 Post subject: rb-1632
conjur wrote:
http://theigb.com/sapido/rel2/fw.bin
(Sapido RB-1132v2 only; upload via tftp)
(no DD-WRT web interface; just uses the realtek SDK webui for now)
getting much closer; have the SDK kernel source broken down into .tar.gz's for the arch, soc, wifi card, and board-specific; and a few .patch's; compiling from a basic linux 2.6.30-9 tarball
is it normal to leave arch-specific code in the netfilter code? I can't find a good way to "port" that code out into a module :/
i am successfully installed rel2 on sapido rb-1632
please make dd-wrt for this devices! thank you.
_________________ If you want support, please read first the announcements and forum rules.
Si usted desea ayuda, por favor lea primero los anuncios y las reglas del foro.