[kiamo]

So I got CFE up. Had to DC VCC and swap TX and RX. But now I'm having trouble getting TFTP2.exe and "flash -noheader : flash1.trx" working.

It just gives me:
CFE> flash -noheader : flash1.trx
Reading :: TFTP Server.
Failed.: Error
*** command status = -1

Not sure how to proceed at present.

[kiamo]

I should probably have included this.

This is what I get when I don't cancel the boot.


CFE version 5.100.127 based on BBP 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: 五 12月 9 10:10:49 CST 2011 (boyau@localhost.localdomain)
Copyright (C) 2000-2008 Broadcom Corporation.

Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
CPU type 0x19749: 600MHz
Tot mem: 131072 KBytes

CFE mem: 0x80700000 - 0x8079D320 (643872)
Data: 0x807330F0 - 0x807363B0 (12992)
BSS: 0x807363B0 - 0x80737320 (3952)
Heap: 0x80737320 - 0x8079B320 (409600)
Stack: 0x8079B320 - 0x8079D320 (8192)
Text: 0x80700000 - 0x807330E8 (209128)

Committing NVRAM...done
Null Rescue Flag.
Boot program checksum is invalid
Hello!! Enter Rescue Mode: (Check error)

Reading :: TFTP Server.
Failed.: Error
Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)
Loading: .. 5100 bytes read
Entry at 0x80001000
Starting program at 0x80001000
Linux version 2.6.22.19 (root@asus) (gcc version 4.2.4) #2 Thu Jul 11 23:04:56 EDT 2013
CPU revision is: 00019749
Determined physical RAM map:
memory: 07fff000 @ 00000000 (usable)
memory: 08000000 @ 87fff000 (usable)
Built 1 zonelists. Total pages: 585216
Kernel command line: root=/dev/mtdblock2 noinitrd console=ttyS0,115200
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
PID hash table entries: 2048 (order: 11, 8192 bytes)
CPU: BCM5300 rev 1 pkg 0 at 600 MHz
Using 300.000 MHz high precision timer.
console [ttyS0] enabled
Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
Memory: 238736k/131068k available (2467k kernel code, 22488k reserved, 497k data, 192k init, 131072k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
PCI: Initializing host
PCI: Reset RC
PCI: Initializing host
PCI: Reset RC
PCI: Fixing up bus 0
PCI/PCIe coreunit 0 is set to bus 1.
PCI: Fixing up bridge
PCI: Fixing up bridge
PCI: Enabling device 0000:01:00.1 (0004 -> 0006)
PCI: Fixing up bus 1
PCI/PCIe coreunit 1 is set to bus 2.
PCI: Fixing up bridge
PCI: Fixing up bridge
PCI: Enabling device 0000:02:00.1 (0004 -> 0006)
PCI: Fixing up bus 2
NET: Registered protocol family 2
Time: MIPS clocksource has been installed.
IP route cache hash table entries: 4096 (order: 2, 16384 bytes)
TCP established hash table entries: 16384 (order: 5, 131072 bytes)
TCP bind hash table entries: 16384 (order: 4, 65536 bytes)
TCP: Hash tables configured (established 16384 bind 16384)
TCP reno registered
highmem bounce pool size: 64 pages
squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher
io scheduler noop registered (default)
HDLC line discipline: version $Revision: 4.8 $, maxframe=4096
N_HDLC line discipline registered.
Serial: 8250/16550 driver $Revision: 1.90 $ 4 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0xb8000300 (irq = is a 16550A
serial8250: ttyS1 at MMIO 0xb8000400 (irq = is a 16550A
PPP generic driver version 2.4.2
MPPE/MPPC encryption/compression module registered
NET: Registered protocol family 24
PPPoL2TP kernel driver, V0.18.3
PPTP driver version 0.8.5
Physically mapped flash: Found 1 x16 devices at 0x0 in 16-bit bank
Amd/Fujitsu Extended Query Table at 0x0040
Physically mapped flash: CFI does not contain boot bank location. Assuming top.
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
Flash device: 0x2000000 at 0x1c000000
Creating 5 MTD partitions on "Physically mapped flash":
0x00000000-0x00040000 : "pmon"
0x00040000-0x01fe0000 : "linux"
0x0016aeac-0x01aa0000 : "rootfs"
0x01fe0000-0x02000000 : "nvram"
0x01ac0000-0x01fe0000 : "jffs2"
Found an serial flash with 0 0KB blocks; total size 0MB
sflash: found no supported devices
dev_nvram_init: _nvram_init
_nvram_init: allocat header: 2183856128, size= 65536
sdhci: Secure Digital Host Controller Interface driver
sdhci: Copyright(c) Pierre Ossman
u32 classifier
OLD policer on
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (2048 buckets, 16384 max)
ipt_time loading
ip_tables: (C) 2000-2006 Netfilter Core Team
net/ipv4/netfilter/tomato_ct.c [Jul 11 2013 19:52:12]
ipt_account 0.1.21 : Piotr Gasidlo <quaker@barbara.eu.org>, http://code.google.com/p/ipt-account/
NET: Registered protocol family 1
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 192k freed
SQUASHFS error: sb_bread failed reading block 0x6458
SQUASHFS error: Unable to read cache block [191634e:181c]
SQUASHFS error: Unable to read directory block [191634e:181c]
Warning: unable to open an initial console.
SQUASHFS error: sb_bread failed reading block 0x6458
SQUASHFS error: Unable to read cache block [191634e:181c]
SQUASHFS error: Unable to read directory block [191634e:181c]
SQUASHFS error: sb_bread failed reading block 0x6458
SQUASHFS error: Unable to read cache block [191634e:181c]
SQUASHFS error: Unable to read directory block [191634e:181c]
SQUASHFS error: sb_bread failed reading block 0x6458
SQUASHFS error: Unable to read cache block [191634e:181c]
SQUASHFS error: Unable to read directory block [191634e:181c]
Kernel panic - not syncing: No init found. Try passing init= option to kernel.

[acid82]

[leo5111]

can this unbrick a tenda 1800r as well? theys say they use the same chipset

[pctechtx]