设为首页收藏本站

恩山无线论坛

 找回密码
 立即注册

QQ登录

只需一步,快速开始

搜索
楼主: hackpascal

【2017-1-16】AR/QCA/MTK Breed,功能强大的多线程 Bootloader

    [复制链接]
发表于 2015-10-22 11:55 | 显示全部楼层
本帖最后由 smilemoon 于 2015-10-22 12:02 编辑

wr800n v1 能刷842ND V2,今天刷了H大神的最新的 Breed r777 [2015-10-18],可以正常启动了,但是用842NDV2官方的uboot和大神的不死uboot,就是偶尔启动成功
今天刷了Breed 测试了800N V1的 RESET GPIO#18
breed> btntst
Press Ctrl+C to stop.

GPIO#18 changed to 0
GPIO#18 changed to 1

breed> gpio led
GPIO    status  name
11      off     usb
12      off     lan4
13      off     wlan
14      on      sys
15      off     qss
18      off     wan
19      off     lan1
20      off     lan2
21      off     lan3


启动TTL信息
===================================
Boot and Recovery Environment for EmbeddedDevices
Build date 2015-10-18 [git-bb5218f]
Version 1.0 (r777)

DRAM: 32MB
Platform: Atheros AR9341 rev 3
Board: Atheros AP123 reference board
Clocks: CPU: 560MHz, DDR: 400MHz, AHB:200MHz, Ref: 25MHz
Flash: Winbond W25Q64 (8MB) on ath79-spi
ag71xx-eth: MAC address is invalid, usingdefault settings.
ag71xx-eth: Using MAC address00:13:74:00:00:01
eth0: Atheros AR8228/AR8229 rev 1

Network started on eth0, inet addr192.168.1.1, netmask 255.255.255.0

Press any key to interrupt autoboot ...0   

Trying to boot firmware from 0x9f020000 ...
TP-LINK firmware image header detected.
   Image Name:   08420002
   Data Size:    845472 Bytes
   Load Address: 80002000
   Entry Point:  801aeb70
Uncompressing data (LZMA) ... done.
Flushing cache ... done.

Starting kernel at 0x801aeb70...

Booting Atheros AR934x
flash_size passed from bootloader = 8
Ram size passed from bootloader =33554432
CPU revision is: 0001974c (MIPS 74Kc)
ath_sys_frequency: cpu srif ddr srif cpu560 ddr 400 ahb 200
Determined physical RAM map:
memory: 02000000 @ 00000000 (usable)
Zone PFN ranges:
Normal   0x00000000 ->0x00002000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
   0: 0x00000000 -> 0x00002000
Built 1 zonelists in Zone order, mobilitygrouping on.  Total pages: 8128
Kernel command line: console=ttyS0,115200root=31:2 rootfstype=squashfs init=/sbin/initmtdparts=ath-nor0:128k(u-boot),1024k(kernel),6912k(rootfs),64k(config),64k(art)mem=32M
PID hash table entries: 128 (order: 7, 512bytes)
Dentry cache hash table entries: 4096(order: 2, 16384 bytes)
Inode-cache hash table entries: 2048(order: 1, 8192 bytes)
Primary instruction cache 64kB, VIPT,4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, VIPT, cachealiases, linesize 32 bytes
Writing ErrCtl register=000000c0
Readback ErrCtl register=000000c0
Memory: 30036k/32768k available (1742kkernel code, 2732k reserved, 498k data, 116k init, 0k highmem)
NR_IRQS:128
plat_time_init: plat time init done
Calibrating delay loop... 279.55 BogoMIPS(lpj=559104)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
bio: create slab <bio-0> at 0
NET: Registered protocol family 2
IP route cache hash table entries: 1024(order: 0, 4096 bytes)
TCP established hash table entries: 1024(order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order:0, 4096 bytes)
TCP: Hash tables configured (established1024 bind 1024)
TCP reno registered
NET: Registered protocol family 1
ATH GPIOC major 0
squashfs: version 4.0 (2009/01/31) PhillipLougher
msgmni has been set to 58
alg: No test for cipher_null(cipher_null-generic)
alg: No test for ecb(cipher_null)(ecb-cipher_null)
alg: No test for digest_null(digest_null-generic)
alg: No test for compress_null(compress_null-generic)
alg: No test for lzma (lzma-generic)
alg: No test for stdrng (krng)
alg: No test for stdrng (ansi_cprng)
io scheduler noop registered
io scheduler deadline registered (default)
Serial: 8250/16550 driver, 1 ports, IRQsharing disabled
serial8250.0: ttyS0 at MMIO 0xb8020000 (irq= 19) is a 16550A
console [ttyS0] enabled
PPP generic driver version 2.4.2
NET: Registered protocol family 24
5 cmdlinepart partitions found on MTDdevice ath-nor0
Creating 5 MTD partitions on"ath-nor0":
0x000000000000-0x000000020000 :"u-boot"
0x000000020000-0x000000120000 :"kernel"
0x000000120000-0x0000007e0000 :"rootfs"
0x0000007e0000-0x0000007f0000 :"config"
0x0000007f0000-0x000000800000 :"art"
->Oops: flash id 0xef4017 .
Ooops, why the devices couldn't beeninitialed?
TCP cubic registered
NET: Registered protocol family 17
athwdt_init: Registering WDT success
ath_otp_init: Registering OTP success
ath_clksw_init: Registering Clock SwitchInterface success
VFS: Mounted root (squashfs filesystem)readonly on device 31:2.
Freeing unused kernel memory: 116k freed
init started:  BusyBox v1.01 (2013.06.28-02:15+0000)multi-call binary
This Board use 2.6.31
xt_time: kernel timezone is -0000
nf_conntrack version 0.5.0 (512 buckets,5120 max)
CONFIG_NF_CT_ACCT is deprecated and will beremoved soon. Please use
nf_conntrack.acct=1 kernel parameter,acct=1 nf_conntrack module option or
sysctl net.netfilter.nf_conntrack_acct=1 toenable it.
ip_tables: (C) 2000-2006 Netfilter CoreTeam
insmod: cannot open module`/lib/modules/2.6.31/kernel/iptable_raw.ko': No such file or directory
insmod: cannot open module`/lib/modules/2.6.31/kernel/flashid.ko': No such file or directory
PPPoL2TP kernel driver, V1.0
PPTP driver version 0.8.3
insmod: cannot open module`/lib/modules/2.6.31/kernel/harmony.ko': No such file or directory
NET: Registered protocol family 15
Initializing XFRM netlink socket
/proc/sys/vfs_c
Now flash open!
(none) mips #3 Fri Jun 28 10:10:08 CST 2013(none)
(none) login: Now flash open!
ATHR_GMAC: Length per segment 1536
ATHR_GMAC: fifo cfg 3 01f00140
ATHR_GMAC: RX TASKLET - Pkts per Intr:32
mac:1 Registering S27....
ATHR_GMAC: Max segments per packet :   1
ATHR_GMAC: Max tx descriptor count :   40
ATHR_GMAC: Max rx descriptor count :   128
ATHR_GMAC: Mac capability flags    :  2D82
ATHR_GMAC: RX TASKLET - Pkts per Intr:32
mac:0 Registering S27....
ATHR_GMAC: Max segments per packet :   1
ATHR_GMAC: Max tx descriptor count :   40
ATHR_GMAC: Max rx descriptor count :   128
ATHR_GMAC: Mac capability flags    :  2582
athr_gmac_ring_alloc Allocated 640 at0x81ebc800
athr_gmac_ring_alloc Allocated 2048 at0x81cb7000
WASP ----> S27 PHY MDIO
Setting Drop CRC Errors, Pause Frames andLength Error frames
ATHRS27: resetting s27
ATHRS27: s27 reset done
++++ athrs27_igmp_setup once
port0 vid is 0xb000b
port1 vid is 0x30003
port2 vid is 0x50005
port3 vid is 0x70007
port4 vid is 0x90009
++ PVID: 0x0000000b, bitmap: 0x0000001f
++ PVID: 0x00000003, bitmap: 0x0000001f
++ PVID: 0x00000005, bitmap: 0x0000001f
++ PVID: 0x00000007, bitmap: 0x0000001f
++ PVID: 0x00000009, bitmap: 0x0000001f
vtable vid: 0x00000002, bitmap 0x00000003
vtable vid: 0x00000004, bitmap 0x00000005
vtable vid: 0x00000006, bitmap 0x00000007
vtable vid: 0x00000008, bitmap 0x00000009
vtable vid: 0x0000000a, bitmap 0x0000000b
vtable vid: 0x0000000c, bitmap 0x0000000d
vtable vid: 0x0000000e, bitmap 0x0000000f
vtable vid: 0x00000010, bitmap 0x00000011
vtable vid: 0x00000012, bitmap 0x00000013
vtable vid: 0x00000014, bitmap 0x00000015
vtable vid: 0x00000016, bitmap 0x00000017
vtable vid: 0x00000018, bitmap 0x00000019
vtable vid: 0x0000001a, bitmap 0x0000001b
vtable vid: 0x0000001c, bitmap 0x0000001d
vtable vid: 0x0000001e, bitmap 0x0000001f
vtable vid: 0x00000020, bitmap 0x00000021
Setting PHY...
athr_gmac_ring_alloc Allocated 640 at0x81e30c00
athr_gmac_ring_alloc Allocated 2048 at0x81e3e000
WASP ----> S27 PHY MDIO
Setting Drop CRC Errors, Pause Frames andLength Error frames
Setting PHY...
device eth0 entered promiscuous mode
athr_gmac_ring_free Freeing at 0x81e30c00
athr_gmac_ring_free Freeing at 0x81e3e000
athr_gmac_ring_alloc Allocated 640 at0x81e30c00
athr_gmac_ring_alloc Allocated 2048 at0x81f0d800
WASP ----> S27 PHY MDIO
Setting Drop CRC Errors, Pause Frames andLength Error frames
Setting PHY...
Now flash open!
athr_gmac_ring_free Freeing at 0x81ebc800
athr_gmac_ring_free Freeing at 0x81cb7000
athr_gmac_ring_alloc Allocated 640 at0x81ebc800
athr_gmac_ring_alloc Allocated 2048 at0x81ea0800
WASP ----> S27 PHY MDIO
Setting Drop CRC Errors, Pause Frames andLength Error frames
Setting PHY...
enet1 port4 up
ATHR_GMAC: Enet Unit:1 PHY:4 is UP RGMii100Mbps full duplex
ATHR_GMAC: done cfg2 0x7215 ifctl 0x0miictrl  
WASP ----> S27 PHY MDIO
Setting Drop CRC Errors, Pause Frames andLength Error frames
br0: port 1(eth0) entering forwarding state
nf_conntrack_rtsp v0.6.21 loading
nf_nat_rtsp v0.6.21 loading
asf: module license 'Proprietary' taintskernel.
Disabling lock debugging due to kerneltaint
ath_hal: 0.9.17.1 (AR5416, AR9380, REGOPS_FUNC,WRITE_EEPROM, 11D)
ath_rate_atheros: Copyright (c) 2001-2005Atheros Communications, Inc, All Rights Reserved
ath_dev: Copyright (c) 2001-2007 AtherosCommunications, Inc, All Rights Reserved
ath_ahb: 9.2.0_U10.1020 (Atheros/multi-bss)
__ath_attach: Set global_scn[0]
ACBKMinfree = 48
ACBEMinfree = 32
ACVIMinfree = 16
ACVOMinfree = 0
CABMinfree = 48
UAPSDMinfree = 0
Restoring Cal data from Flash
ath_get_caps[5113] rx chainmask mismatchactual 3 sc_chainmak 0
ath_get_caps[5088] tx chainmask mismatchactual 3 sc_chainmak 0
wifi0: Atheros 9340: mem=0xb8100000, irq=2
wlan_vap_create : enter.devhandle=0x80d682c0, opmode=IEEE80211_M_HOSTAP, flags=0x1
wlan_vap_create : exit.devhandle=0x80d682c0, opmode=IEEE80211_M_HOSTAP, flags=0x1.
VAP device ath0 created


***********************************

DESSSID SET=TP-LINK_137B00
ieee80211_ioctl_siwmode:imr.ifm_active=131712, new mode=3, valid=1


***********************************
athr_gmac_ring_free Freeing at 0x81ebc800
athr_gmac_ring_free Freeing at 0x81ea0800
br0: port 1(eth0) entering disabled state
athr_gmac_ring_alloc Allocated 640 at0x81ebc800
athr_gmac_ring_alloc Allocated 2048 at0x81ea0000
WASP ----> S27 PHY MDIO
Setting Drop CRC Errors, Pause Frames andLength Error frames
Setting PHY...


***********************************
device ath0 entered promiscuous mode
br0: port 2(ath0) entering forwarding state
ieee80211_ioctl_siwmode:imr.ifm_active=1442432, new mode=3, valid=1
br0: port 2(ath0) entering disabled state

DESSSID SET=TP-LINK_137B00


***********************************
br0: port 2(ath0) entering forwarding state
enet1 port4 up
ATHR_GMAC: Enet Unit:1 PHY:4 is UP RGMii100Mbps full duplex
ATHR_GMAC: done cfg2 0x7215 ifctl 0x0miictrl  
WASP ----> S27 PHY MDIO
Setting Drop CRC Errors, Pause Frames andLength Error frames
br0: port 1(eth0) entering forwarding state
fuse init (API version 7.12)
usbcore: registered new interface driverusbfs
usbcore: registered new interface driverhub
usbcore: registered new device driver usb
ehci_hcd: USB 2.0 'Enhanced' HostController (EHCI) Driver
Port Status 1c000004
ath-ehci ath-ehci.0: ATH EHCI
ath-ehci ath-ehci.0: new USB busregistered, assigned bus number 1
ehci_reset Intialize USB CONTROLLER in hostmode: 13
ehci_reset Port Status 1c000000
ath-ehci ath-ehci.0: irq 3, io mem0x1b000000
ehci_reset Intialize USB CONTROLLER in hostmode: 13
ehci_reset Port Status 1c000000
ath-ehci ath-ehci.0: USB 2.0 started, EHCI1.00
usb usb1: configuration #1 chosen from 1choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
SCSI subsystem initialized
Initializing USB Mass Storage driver...
usbcore: registered new interface driverusb-storage
USB Mass Storage support registered.
kcg 323 :GPL NetUSB up!
kc  90 : run_telnetDBGDServer start
kc 227 : init_DebugD end
INFO17B7: NetUSB 1.02.29, 0002061F : Dec 112012 10:20:50
INFO17B9: AUTH ISOC
INFO17BA: filterAudio
usbcore: registered new interface driver KCNetUSB General Driver
INFO0110: init proc : PAGE_SIZE 4096
INFO1819: Check mac address
INFO168B: infomap c0f5bf20
INFO168E: sleep to wait br0 to wake up
INFO02D0: use dev Name br0
INFO1697: sleep to wait br0 end.
INFO16B0: UDP_BROAD 7437 tcpPort:625868800
INFO02D0: use dev Name br0
INFO1597: tcpConnector() started...
ATHR_GMAC: GE0 RX DMA ENABLE
INFO1474: Bind to br0



点评

Restarting system. Boot and Recovery Environment for Embedded Devices Copyright (C) 2015 HackPascal Build date 2015-10-18 [git-bb5218f] Version 1.0 (r777) DRAM: 32MB Platform: Atheros AR934  详情 回复 发表于 2015-10-26 21:27
发表于 2015-10-22 17:47 | 显示全部楼层
BreedEnter  WIN10 下不能用。。。

点评

WinPcap_4.1.3 版, Win 10 64下实测可用  发表于 2016-1-7 22:12
winpacp在win10里面用不了,不是我的原因,跟我说没卵用  发表于 2015-10-22 18:14
发表于 2015-10-22 18:37 | 显示全部楼层
好吧,我就说怎么没用!!!
发表于 2015-10-23 02:06 | 显示全部楼层
小米MINI路由器SSH后刷了楼主的Breed,然后刷了RT-AC54U-GPIO-30-xiaomimini-128M_3.4.3.9-096-10-9.trx,玩了一阵后进Breed设成小米启动方式,保存。接着直接刷了小米官方的miwifi_r1cm_firmware_4156a_2.5.22.bin,发现原来在最开始刷机前的设置和WIFI密码什么的都还在(登录是root/原来我设的密码)。难道是我刷机后没有恢复出厂设置的缘故?但我明明刷成RT-AC54U-GPIO-30-xiaomimini-128M_3.4.3.9-096-10-9.trx时看了WIFI的SSID和密码都变了啊(而且登录也变成了admin\admin)
发表于 2015-10-23 12:53 | 显示全部楼层
大师,fir302M刷Breed后,重启直接进Breed,但如果连了TTL的话能正常进系统,FLASH换过25L64和25Q64都是这样的问题。
发表于 2015-10-23 13:16 | 显示全部楼层
yyjdelete 发表于 2015-10-20 10:46
是说的FIR302M么, 为什么我只找到r424(20150209)???

请教一下,是否直接去掉R36电阻就可以了?还要不要改动其它电路?谢谢。

点评

还有,如果你拿电烙铁焊工不精,去掉R36电阻后,直接就从R36右边的那个点点上想办法联通道歉R33电阻的右边的那个点点上。而我是直接在中间弄个发光二极管联通了,  详情 回复 发表于 2015-10-24 12:40
他不懂,还是我来给你张高清的,注意飞的线不要与R33焊点、原焊盘及那裸露出来的铜皮短路了! [attachimg]119172[/attachimg]  详情 回复 发表于 2015-10-24 12:32
发表于 2015-10-23 21:24 | 显示全部楼层
强大的恩山
发表于 2015-10-24 00:55 | 显示全部楼层
感谢大神,极硬货HC5663可以用吗
发表于 2015-10-24 07:39 | 显示全部楼层
10.18里Lenovo y1也就是newifi mini 不知道为什么只能认32M内存,导致padavan固件不停地重启

点评

对于你的这种个别问题,我表示真的没办法 我的所有路由(y1 y1s fir300m mw300rv6 ai-br100 hc5861)测试都正常 我没有能够复现你这种问题的机器,没法解决  详情 回复 发表于 2015-10-24 14:09
发表于 2015-10-24 12:32 | 显示全部楼层
roto 发表于 2015-10-23 13:16
请教一下,是否直接去掉R36电阻就可以了?还要不要改动其它电路?谢谢。

他不懂,还是我来给你张高清的,注意飞的线不要与R33焊点、原焊盘及那裸露出来的铜皮短路了!
76_853420_f0d83eee71d4e02.jpg


发表于 2015-10-24 12:40 | 显示全部楼层
本帖最后由 hello_limin 于 2015-10-24 12:42 编辑
roto 发表于 2015-10-23 13:16
请教一下,是否直接去掉R36电阻就可以了?还要不要改动其它电路?谢谢。

还有,如果你拿电烙铁焊工不精,去掉R36电阻后,直接就从R36右边的那个点点上想办法联通R33电阻的右边的那个点点上。而我是直接在中间弄个发光二极管联通了,
 楼主| 发表于 2015-10-24 14:09 | 显示全部楼层
anoid 发表于 2015-10-24 07:39
10.18里Lenovo y1也就是newifi mini 不知道为什么只能认32M内存,导致padavan固件不停地重启

对于你的这种个别问题,我表示真的没办法
我的所有路由(y1 y1s fir300m mw300rv6 ai-br100 hc5861)测试都正常
我没有能够复现你这种问题的机器,没法解决

点评

不知道是不是同时更新固件和breed的原因,已刷回上一版breed,感谢楼主的工作,确实很好  详情 回复 发表于 2015-10-24 16:44
发表于 2015-10-24 14:20 | 显示全部楼层
v1.6 改16m rom的703n可否刷这个?已经刷了u-boot
发表于 2015-10-24 16:44 | 显示全部楼层
hackpascal 发表于 2015-10-24 14:09
对于你的这种个别问题,我表示真的没办法
我的所有路由(y1 y1s fir300m mw300rv6 ai-br100 hc5861)测试 ...

不知道是不是同时更新固件和breed的原因,已刷回上一版breed,感谢楼主的工作,确实很好
发表于 2015-10-25 13:40 | 显示全部楼层
breed-ar724x.bin        AR724X 通用,百兆有线,波特率 115200,复位键 GPIO#11,QSS 键 GPIO#12
breed-ar724x-ubnt.bin        AR724X 通用,百兆有线,波特率 115200,QSS 键 GPIO#12

这两个Breed有什么区别吗???我的 TP841 v7  AR7241+9287的芯片 刷哪个???
发表于 2015-10-25 20:43 | 显示全部楼层
谢谢分享 。。。。
发表于 2015-10-25 23:50 | 显示全部楼层
LG 6000和841 v7 方案相同 刷了最新的会反复进入bread  12 28目前再用其他都不可以
发表于 2015-10-26 12:03 | 显示全部楼层
本帖最后由 wowfans 于 2015-10-26 13:46 编辑

能出个941N V6  / 2041N V1 (AR9344 + ar9381 )的 8M  / 16M闪存容量版本的breed吗?原版4M太小了,想换个闪存,或者提供一个修改方法?
-------------

老大麻烦看下我这么搞有没有问题。

好吧,刚才翻了楼主大神的之前的U-BOOT的帖子,貌似之前的u-boot都自动识别闪存容量,所以新的breed应该是具有该特性的。
另外好像2041n v1虽然硬件配置和941n v6一样,就多了一个turbo按钮,但据说貌似不能用941n v6的专用breed,得用ar9344通用的breed。

因为卖家也不太会玩,但他有编程器,可以更换FLASH,刷入编程器固件。
于是我想这样组合,制造编程器固件,不知道是否可行。

硬件: 2041n v1,硬改8M闪存

编程器固件由一下3部分顺序粘贴:
1。老大的breed-ar9344.bin百兆通用版最新版。 这个大小83KB,我会将其从0位置开始写入,占据大小是128KB,83~128KB区间全是00


2。openwrt-ar71xx-generic-tl-wr941nd-v6-cn-squashfs-factory.bin  这个文件是openwrt官网的最新的10.18日的固件,大小正好3840KB(3.75MB),后面的用00填充64KB 再继续填充4096KB,整个区域大小是=3840+64+4096 = 8000KB

3。再从8128KB的位置开始写入老大对应的ar9344+ar9381的ART,这个是64KB。

于是整个编程器固件大小就是128KB+8000KB+64KB=8192KB,正好是8MB

应该没问题吧。。。。还需要补充什么吗?

U-BOOT部分肯定没问题,老大的breed自动识别闪存大小,主要是4MB的openwrt系统是否能自动识别闪存是8MB的??后期箱装软件会不会提示空间不足?(实际上还剩一大半)
发表于 2015-10-26 12:17 | 显示全部楼层
hackpascal 发表于 2015-3-21 22:38
小米 Mini 固件启动设置

进入 Breed 恢复控制台

顶一下,希望换芯片能成功……
发表于 2015-10-26 14:49 | 显示全部楼层
楼主,我手里有一批7620a 魔豆路由器101C 有兴趣折腾吗?免费提供研发啊啊啊 我也是个爱好者
您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

QQ|手机版|小黑屋|Archiver|恩山无线论坛 ( 苏ICP备05084872号-1  

GMT+8, 2017-3-25 01:48

Powered by Discuz! X3.2

© 2001-2013 Comsenz Inc.

快速回复 返回顶部 返回列表