|
|
呵呵。其实很简单。用jtag刷一下cfe。就可以ping通路由了。没什么必要拆flash。
下面的是我用diy的8230刷好300n的cfe后的ttl信息。
CFE version 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: Thu Jun 1 10:37:58 CST 2006 (root@localhost.localdomain)
Copyright (C) 2000,2001,2002,2003 Broadcom Corporation.
Initializing Arena
Initializing Devices.
No DPN
This is a Parallel Flash
Partition information:
boot #00 00000000 -> 0003FFFF (262144)
trx #01 00040000 -> 0004001B (28)
os #02 0004001C -> 007F7FFF (8093668)
nvram #03 007F8000 -> 007FFFFF (32768)
Partition information:
boot #00 00000000 -> 0003FFFF (262144)
trx #01 00040000 -> 007F7FFF (8093696)
nvram #02 007F8000 -> 007FFFFF (32768)
et0: Broadcom BCM47xx 10/100 Mbps Ethernet Controller 4.80.17.0
et1: Broadcom BCM47xx 10/100 Mbps Ethernet Controller 4.80.17.0
CPU type 0x29006: 264MHz
Total memory: 65536 KBytes
Total memory used by CFE: 0x80300000 - 0x803A5880 (678016)
Initialized Data: 0x8033AE80 - 0x8033DBE0 (11616)
BSS Area: 0x8033DBE0 - 0x8033F880 (7328)
Local Heap: 0x8033F880 - 0x803A3880 (409600)
Stack Area: 0x803A3880 - 0x803A5880 (8192)
Text (code) segment: 0x80300000 - 0x8033AE80 (241280)
Boot area (physical): 0x003A6000 - 0x003E6000
Relocation Factor: I:00000000 - D:00000000
Boot version: v3.9
The boot is CFE
mac_init(): Find mac [00:18:39:B2:4D:B6] in location 0
Nothing...
No eou key find
CMD: [ifconfig eth0 -addr=192.168.1.1 -mask=255.255.255.0]
Device eth0: hwaddr 00-18-39-B2-4D-B6, ipaddr 192.168.1.1, mask 255.255.255.0
gateway not set, nameserver not set
CMD: [go;]
Check CRC of image1
Len: 0x390000 (3735552) (0xBC040000)
Offset0: 0x1C (28) (0xBC04001C)
Offset1: 0x8E4 (2276) (0xBC0408E4)
Offset2: 0xD0C00 (855040) (0xBC110C00)
Header CRC: 0x20C06D10
Calculate CRC: 0x20C06D10
Image 1 is OK
Try to load image 1.
CMD: [load -raw -addr=0x803a5880 -max=0x3a0000 :]
Loader:raw Filesys:tftp Dev:eth0 File:: Options null)
Loading: Failed.
Could not load :: Timeout occured
CMD: [boot -raw -z -addr=0x80001000 -max=0x3a0000 flash0.os:]
Loader:raw Filesys:raw Dev:flash0.os File: Optionsnull)
Loading: .. 3732 bytes read
Entry at 0x80001000
Closing network.
et0: link down
Starting program at 0x80001000
CPU revision is: 00029006
Linux version 2.4.35 (eko@dd-wrt) (gcc version 3.4.6 (OpenWrt-2.0)) #446 Wed Apr 2 14:50:32 CEST 2008
Setting the PFC to its default value
Determined physical RAM map:
memory: 04000000 @ 00000000 (usable)
On node 0 totalpages: 16384
zone(0): 16384 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200
CPU: BCM4704 rev 8 at 264 MHz
Using 132.000 MHz high precision timer.
Calibrating delay loop... 263.78 BogoMIPS
Dentry cache hash table entries: 8192 (order: 4, 65536 bytes)
Inode cache hash table entries: 4096 (order: 3, 32768 bytes)
Mount cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer cache hash table entries: 4096 (order: 2, 16384 bytes)
Page-cache hash table entries: 16384 (order: 4, 65536 bytes)
Checking for 'wait' instruction... unavailable.
POSIX conformance testing by UNIFIX
PCI: Fixing up bus 0
PCI: Fixing up bridge
PCI: Fixing up bus 1
Initializing RT netlink socket
Starting kswapd
devfs: v1.12c (20020818) Richard Gooch (rgooch@atnf.csiro.au)
devfs: boot_options: 0x1
squashfs: version 3.0 (2006/03/15) Phillip Lougher
pty: 256 Unix98 ptys configured
Serial driver version 5.05c (2001-07-08) with MANY_PORTS SHARE_IRQ SERIAL_PCI enabled
ttyS00 at 0xb8000300 (irq = 3) is a 16550A
ttyS01 at 0xb8000400 (irq = 3) is a 16550A
Broadcom Watchdog Timer: 0.05, timer margin: 30 sec
PCI: Enabling device 01:01.0 (0004 -> 0006)
Universal TUN/TAP device driver 1.5 (C)1999-2002 Maxim Krasnyansky
Amd/Fujitsu Extended Query Table v1.1 at 0x0040
number of CFI chips: 1
cfi_cmdset_0002: Disabling fast programming due to code brokenness.
Flash device: 0x800000 at 0x1c000000
bootloader size: 262144
Physically mapped flash: Filesystem type: squashfs, size=0x2bc5cc
Creating 5 MTD partitions on " hysically mapped flash":
0x00000000-0x00040000 : "cfe"
0x00040000-0x007f0000 : "linux"
0x00110c00-0x003d0000 : "rootfs"
mtd: partition "rootfs" doesn't start on an erase block boundary -- force read-only
0x007f0000-0x00800000 : "nvram"
0x003d0000-0x007f0000 : "ddwrt"
sflash not supported on this router
Initializing Cryptographic API
IP Protocols: ICMP, UDP, TCP, IGMP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 4096 bind 8192)
ip_conntrack version 2.1 (512 buckets, 4096 max) - 336 bytes per conntrack
ip_tables: (C) 2000-2002 Netfilter core team
ipt_random match loaded
netfilter PSD loaded - (c) astaro AG
ipt_osf: Startng OS fingerprint matching module.
ipt_IPV4OPTSSTRIP loaded
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly.
Mounted devfs on /dev
Booting device: Linksys WRT300N v1
No such device
nvram_commit(): end
br0: Bad file descriptor
eth0: Operation not supported
br0: Bad file descriptor
eth2: Operation not supported
wl0.1: No such device
wl0.2: No such device
wl0.3: No such device
eth2: Invalid argument
eth2: Invalid argument
eth1: Operation not supported
eth1: Operation not supported
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
eth1: Operation not supported
[ 本帖最后由 qwea 于 2008-4-24 00:23 编辑 ] |
|
简体中文
繁體中文
English
日本語
Deutsch
한국 사람
بالعربية
TÜRKÇE
português
คนไทย
IP卡
狗仔卡
发表于 2008-4-19 02:27
置顶卡
沉默卡
喧嚣卡
顶贴卡
显身卡