OpenWrt Forum Archive

Topic: need help fixing a bricked wr850G (Console output included)

The content of this topic has been archived on 13 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Hi

I flashed my Motorola WR850G with the latest snapshot of OpenWrt and ran into a problem. I think te flash completed succefully. I enabled boot wait so i was able to restart the router and send another firmware via TFTP. But none of them worked.

Finally i built a RS-232 to TTL serial cable for this and the console output is included below . Can someone point me in the right direction.

The final message seems to be "debug, Sending discover..." and then it just sits there.

Thanks



CFE version 1.0.37 for BCM947XX (32bit,SP,LE)                                             
Build Date: Thu Jul 29 16:20:32 CST 2004 (xavier@cvs.gemtek.com.tw)                                                                   
Copyright (C) 2000,2001,2002,2003 Broadcom Corporation.                                                       

Initializing Arena.                   
Initializing Devices.                     
et0: Broadcom BCM47xx 10/100 Mbps Ethernet Controller 3.50.21.0                                                               
CPU type 0x29007: 200MHz                       
Total memory: 0x2000000 bytes (32MB)                                   

Total memory used by CFE:  0x8032C060 - 0x80431560 (1070336)                                                           
Initialized Data:          0x8032C060 - 0x8032E1B0 (8528)                                                         
BSS Area:                  0x8032E1B0 - 0x8032F560 (5040)                                                         
Local Heap:                0x8032F560 - 0x8042F                                             
Stack Area:                0x8042F560 - 0x80431560 (8192)                                                         
Text (code) segment:       0x80300000 - 0x80309860 (39008)                                                         
Boot area (physical):      0x00432000 - 0x00472000                                                 
Relocation Factor:         I:00000000 - D:00000000                                                 

Checking MAC address...                       
MAC address is correct.                       

Device eth0:  hwaddr xx-xx-xx-xx-xx-xx, ipaddr 192.168.10.1, mask 255.255.255.0                                                                               
        gateway not set, nameserver not set                                           

    *CFE for Motorola WR850G v4.00[FEM1], Release date: Jul. 29, 2004                                                                     

Reading :: Failed.: Timeout occured                                   
Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)                                                         
Loading: ............ 1634304 bytes read                                       
Entry at 0x80001000                   
Closing network.               
Starting program at 0x80001000                             
CPU revision is: 00029007                         
Primary instruction cache 8kb, linesize 16 bytes (2 ways)                                                         
Primary data cache 4kb, linesize 16 bytes (2 ways)                                                 
Linux version 2.4.20 (mbm@reboot2.lan) (gcc version 3.3.3) #1 Wed Feb 2 04:14:00 EST 2005         
Determined physical RAM map:                           
memory: 01000000 @ 00000000 (usable)                                     
On node 0 totalpages: 4096                         
zone(0): 4096 pages.                   
zone(1): 0           
zone(2): 0 pages.                 
Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs init=/etc/preinit noinitrd console=ttyS0,115200                           
CPU: BCM4712 rev 1 at 200 MHz                             
Calibrating delay loop... 199.47 BogoMIPS                                         
Memory: 14188k/16384k available (1411k kernel code, 2196k reserved, 100k data, 68k init, 0k highmem)                   
Dentry cache hash table entries: 2048 (order: 2, 16384 bytes)                                                             
Inode cache hash table entries: 1024 (order: 1, 8192 bytes)                                                           
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)                                                         
Buffer-cache hash table entries: 1                                 
Page-cache hash table entries: 4096 (order: 2, 16384 bytes)                                                           
Checking for 'wait' instruction...  unavailable.                                               
POSIX conformance testing by UNIFIX                                   
PCI: Disabled             
PCI: Fixing up bus 0                   
Linux NET4.0 for Linux 2.4                         
Based upon Swansea University Computer Society NET3.039                                                       
Initializing RT netlink socket                             
Starting kswapd               
devfs: v1.12c (20020818) Richard Gooch (rgooch@atnf.csiro.au)                                                             
devfs: boot_options: 0x1                       
JFFS2 version 2.1. (C) 2001 Red Hat, Inc., designed by Axis Communications AB. pty: 256 Unix98 ptys configured                               
Serial driver version 5.05c (2001-07-08) with MANY_PORTS SHARE_IRQ SERIAL_PCI enabled     
ttyS00 at 0xb8000300 (irq = 3) is a 16550A                                         
ttyS01 at 0xb8000400 (irq = 0) is a 16550A                                         
Software Watchdog Timer: 0.05, timer margin: 60 sec                                                   
loop: loaded (max 8 devices)                           
PPP generic driver version 2.4.2                               
Amd/Fujitsu Extended Query Table v1.1 at 0x0040                                               
number of CFI chips: 1                     
Flash device: 0x400000 at 0x1c000000                                   
Physically mapped flash: squashfs filesystem found at block 914                                                               
Creating 5 MTD partitions on "Physically mapped flash":                                                       
0x00000000-0x00040000 : "pmon"                             
0x00040000-0x003f0000 : "linux"                               
0x000e49b0-0x001b71a1 : "rootfs"                               
mtd: partition "rootfs" doesn't start on an erase block boundary -- force read-only   
0x003f0000-0x00400000 : "nvram"                               
0x001c0000-0x003f0000 : "OpenWrt"                                 
sflash: found no supported devices                                 
NET4: Linux TCP/IP 1.0 for NET4.0                                 
IP Protocols: ICMP, UDP, TCP                           
IP: routing cache hash table of 512 buckets, 4Kbytes                                                   
TCP: Hash tables configured (established 1024 bind 2048)                                                       
ip_conntrack version 2.1 (5953 buckets, 5953 max) - 352 bytes p                                                             
ip_conntrack_pptp version 1.9 loaded                                   
ip_nat_pptp version 1.5 loaded                             
ip_tables: (C) 2000-2002 Netfilter core team                                           
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.                                                   
NET4: Ethernet Bridge 008 for NET4.0                                   
Bridge firewalling registered                             
802.1Q VLAN Support v1.7 Ben Greear <greearb@candelatech.com>                                                             
All bugs added by David S. Miller <davem@redhat.com>                                                   
VFS: Mounted root (squashfs filesystem) readonly.                                                 
Mounted devfs on /dev                     
Freeing unused kernel memory: 68k freed                                       
Algorithmics/MIPS FPU Emulator v1.5                                   
Using /lib/modules/2.4.                     
diag boardtype: 00000101device                 
using v2 hardwaree br0 doesn't exi
Unlocking mtd4e it         
mount: Mounting none on /dev failed: Device or resource busymcast address to master interface                           
mount: Mounting none on /proc failed: Device or resource busycuous mode                                   
# wds0.2 ignor
umount: /rom/proc: No such file or directory           
# wds0.3 ignored: can't find/cre
umount: /rom/dev: No such file or directory0.4 ignored: can't find/create             
init started:  BusyBox v1.00 (2005.02.02-09:17+0000) multi-call binary                     
br0: port 2(eth1) entering listening state     
kernel.panic = 3               
net.ipv4.ip_forward = 1entering listening stat
net.ipv4.icmp_echo_ignore_broadcasts = 1   
br0: port 2(eth1) entering learning
net.ipv4.icmp_ignore_bogus_error_responses = 1br0: port 2(eth1) entering forwarding state   
net.ipv4.tcp_fin_timeout = 30         
br0: topology chan
net.ipv4.tcp_keepal                 
Using /lib/modules/2.4.20/wl.oudhcpc (v0.9.9-pre) started   
eth1: Broadcom BCM43XX 802.11 Wireless Controller  3.50.21.10 (Compiled in . att
device eth0 entered promiscuous mode
SIOCGIFFLAGS: No such device
bridge br0 doesn't exist; can't delete it
vlan0: add 01:00:5e:00:00:01 mcast address to master interface
device eth1 entered promiscuous mode
# wds0.2 ignored: can't find/create
# wds0.3 ignored: can't find/create
# wds0.4 ignored: can't find/create
# wds0.5 ignored: can't find/create
br0: port 2(eth1) entering listening state
br0: port 1(vlan0) entering listening state
br0: port 2(eth1) entering learning state
br0: port 2(eth1) entering forwarding state
br0: topology change detected, propagating
br0: port 1(vlan0) entering learning state
br0: port 1(vlan0) entering forwarding state
br0: topology change detected, propagating
vlan1: Setting MAC address to  00 12 25 56 4d 90.
info, udhcpc (v0.9.9-pre) started
vlan1: add 01:00:5e:00:00:01 mcast address to master interface
debug, Sending discover...
#  ignored: can't find/create
debug, Sending discover...

it appears to have booted fine

the last message is it attempting to get a dhcp

I am unable to telnet into the router at all from both LAN and WAN side.

I do see it aquiring an IP from DHCP on the WAN side.

Is there something that i a missing. I thought the telnet came with OpenWRT.

Thanks for your help.

finally i got it fixed. I had to flash via the console using the flash -noheader option.

I used the firmware "openwrt-generic-jffs2-4MB.trx"

This seem to have solved the problem of getting the openwrt on to the router. Now all set to play with the new open source firmware.

Also how do i get back to the OEM firmware if i have to. When i try to load it using the same flash -noheader option, it flashes fine but at reboot it says "Invalid boot block on disk".

thanks for all the efforts of the people on this forum.

That makes sense.  The boot time tftp expects an image with the header which openwrt-generic-jffs2-4MB.trx doesn't have.  These no-header images can be flashed by "mtd write openwrt-generic-jffs2-4MB.trx linux", etc.

The linksys stock firmwares and openwrt-*.bin images have the header that includes some model specific information, and these are meant to be used with the boot time tftp, the web interface/tftp in the stock firmware.  It should also work if you don't specify the  -noheader option in the CFE command.

The discussion might have continued from here.