OpenWrt Forum Archive

Topic: AR7191 - H3C 2620 agn

The content of this topic has been archived on 3 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Post #1
y0r
30 Jan 2018, 22:05

Hi,
I have an old fit AP "H3C 2620AGN". Sadly it's not possible to transform this AP from fit to fat mode but I won't put this nice piece of hardware into the trash.
Do you think it's possible to get openwrt running on?

Some serial output:

Compiled Date       : Feb  4 2013
CPU Type            : AR7191
CPU L1 Cache        : 32KB
CPU Clock Speed     : 600MHz
Memory Type         : DDR SDRAM
Memory Size         : 128MB
Memory Speed        : 400MHz
BootWare Size       : 511KB
Flash Size          : 16MB
PCB Version         : Ver.A


============ boot-shim v5.07-RAM-128M startup... =========


 The time of press reset button: < 5 seconds --- continuing execute 

 go to safetyloader 
+


============ safetyloader v5.07-RAM-128M startup... =========

Ethernet eth0: MAC address 00:0d:0b:0a:01:01
IP: 169.254.2.111/255.255.255.0
== Executing application or web service in 2.000 seconds - enter ^C to abort

System is starting...
Press Ctrl+D to access BASIC-BOOTWARE MENU
Booting Normal Extend BootWare.
The Extend BootWare is self-decompressing........................Done!

****************************************************************************
*                                                                          *
*                 H3C WA2620-AGN BootWare, Version 2.01                    *
...

:wq!
y0r

Post #2
y0r
30 Jan 2018, 22:06

Playing around with binwalk:

binwalk wa2600a_fat.bin 

DECIMAL       HEXADECIMAL     DESCRIPTION
--------------------------------------------------------------------------------
7544          0x1D78          U-Boot version string, "U-Boot 1.1.4 (Jan  6 2013 - 14:38:45)H3C"
183976        0x2CEA8         CRC32 polynomial table, big endian
198552        0x30798         Copyright string: "Copyright (c) J.S.A.Kapp 94-96."
210084        0x334A4         7-zip archive data, version 0.2
349456        0x55510         U-Boot version string, "U-Boot 1.1.4 (2014-09-01 - 13:57:42)H3C"
545648        0x85370         CRC32 polynomial table, big endian
560852        0x88ED4         Copyright string: "Copyright (c) J.S.A.Kapp 94-96."
570028        0x8B2AC         7-zip archive data, version 0.2
847332        0xCEDE4         7-zip archive data, version 0.2
Post #3
y0r
30 Jan 2018, 22:10 
$binwalk comware.elf_fat 

DECIMAL       HEXADECIMAL     DESCRIPTION
--------------------------------------------------------------------------------
0             0x0             ELF, 32-bit MSB MIPS-II executable, MIPS, version 1 (SYSV)
782560        0xBF0E0         Linux kernel version "2.6.16.29 (y02217@os-build-dl380) (gcc version 3.4.3) #0 Mon Aug 5 09:07:43 UTC 2013"
958688        0xEA0E0         gzip compressed data, maximum compression, from Unix, last modified: 2013-08-05 09:07:43
1277773       0x137F4D        PC bitmap, OS/2 2.x format,, -29149 x 4
19299216      0x1267B90       Base64 standard index table
19299284      0x1267BD4       Base64 standard index table
19346165      0x12732F5       Neighborly text, "neighbors Diagnostic-information"
19347380      0x12737B4       Neighborly text, "Neighbor Discovery"
19415704      0x1284298       SHA256 hash constants, big endian
19540412      0x12A29BC       SHA256 hash constants, big endian
19852752      0x12EEDD0       Neighborly text, "Neighbork in progress"
19855844      0x12EF9E4       Copyright string: "Copyright (c) 1998-%s Huawei Tech. Co., Ltd. All rights reserved."
19855912      0x12EFA28       Copyright string: "Copyright (c) 2004-%s Hangzhou H3C Tech. Co., Ltd. All rights reserved."
19855984      0x12EFA70       Copyright string: "Copyright (c) 2004-%s 3Com Corp. and its licensors. All rights reserved."
19856060      0x12EFABC       Copyright string: "Copyright (c) 2004-%s NEC Corporation. All rights reserved."
19856120      0x12EFAF8       Copyright string: "Copyright (c) 2004-%s Hangzhou DPtech Tech. Co., Ltd."
19856176      0x12EFB30       Copyright string: "Copyright (c) 2004-%s. All rights reserved."
19856220      0x12EFB5C       Copyright string: "Copyright (c) 2008-%s Beijing Aproud Tech. Co., Ltd. All rights reserved."
19856296      0x12EFBA8       Copyright string: "Copyright (c) 2010 Hewlett-Packard Development Company, L.P."
19856360      0x12EFBE8       Copyright string: "Copyright (c) 2010-%s Hewlett-Packard Development Company, L.P."
19856780      0x12EFD8C       XML document, version: "1.0"
19856820      0x12EFDB4       XML document, version: "1.0"
19883618      0x12F6662       Unix path: /../software/igsp/mcs/src/mcs_mlds.c
19893234      0x12F8BF2       Unix path: /../software/igsp/mcs/src/mcs_utl.c
19899754      0x12FA56A       Unix path: /../software/igsp/mcs/src/mcs_igm.c
19902702      0x12FB0EE       Unix path: /../software/igsp/l2mpub/src/l2m_sockaddr.c
19905308      0x12FBB1C       OpenSSH RSA public key
19905320      0x12FBB28       OpenSSH DSA public key
20268968      0x13547A8       HTML document header
20269094      0x1354826       HTML document footer
20330903      0x1363997       Neighborly text, "neighbor solicit: %-10lu neighbor advert:  %-10lu  router solicit:  %-10lu router advert:  %-10lu"
20330934      0x13639B6       Neighborly text, "neighbor advert:  %-10lulu router advert:  %-10lu"
20331551      0x1363C1F       Neighborly text, "neighbor solicit: %-10lu neighbor advert:  %-10lu  router solicit:  %-10lu router advert:  %-10lu"
20331582      0x1363C3E       Neighborly text, "neighbor advert:  %-10lulu router advert:  %-10lu"
20347985      0x1367C51       Neighborly text, "neighbors all3 { $20 | $19 | $18 | $4 $5 | $6 { $13 $14 | $15 } }  [ $25  | $8 { $9 | $10 | $11 } $12 ] "
20350048      0x1368460       Neighborly text, "neighbors max-learning-num %u lid Interface!"
20350905      0x13687B9       Neighborly text, "neighbors ipv6 neighbors "
20350974      0x13687FE       Neighborly text, "neighbors  nd "
20351066      0x136885A       Neighborly text, "neighbor ved: "
20351087      0x136886F       Neighborly text, "neighbor op:"
20355396      0x1369944       Neighborly text, "neighbor %s %s interface %s %s n-instance %s %s"
20355436      0x136996C       Neighborly text, "neighbor %s %s %d %s vpn-instance %s %s%d %s %s"
20355484      0x136999C       Neighborly text, "neighbor %s %s %d %s %s-instance %s %s"
20355516      0x13699BC       Neighborly text, "neighbor %s %s interface %s vpn-instance %s %sr %s %s interface %s %s"
20355572      0x13699F4       Neighborly text, "neighbor %s %s interface %s %sNA_VrrpSend!"
20356720      0x1369E70       Neighborly text, "Neighbor Statistic Data:s ---"
20474566      0x1386AC6       Unix path: /../software/ose/mem/memory.c
20482126      0x138884E       Unix path: /../software/ose/os/com/event/event.c
20482214      0x13888A6       Unix path: /../software/ose/os/com/sem/sem.c
20483282      0x1388CD2       Unix path: /../software/ose/os/com/task/task.c
20483958      0x1388F76       Unix path: /../software/ose/os/com/time/systime.c
20526978      0x1393782       Unix path: /../software/vfs/src/vfs_lio.c
20530774      0x1394656       Unix path: /../software/vfs/src/vfs_fat_blkdev.c
20531186      0x13947F2       Unix path: /../software/devm/src/dev_btm.c
20537374      0x139601E       Unix path: /../software/devm/src/dev_cli.c
20557894      0x139B046       Unix path: /../software/devm/src/dev_disp.c
20559314      0x139B5D2       Unix path: /../software/devm/src/dev_drm.c
20563134      0x139C4BE       Unix path: /../software/devm/src/dev_drv.c
20568934      0x139DB66       Unix path: /../software/devm/src/dev_dsm.c
20569278      0x139DCBE       Unix path: /../software/devm/src/dev_pub.c
20573682      0x139EDF2       Unix path: /../software/devm/src/dev_bsm.c
20573914      0x139EEDA       Unix path: /../software/devm/src/dev_util.c
20578518      0x13A00D6       Unix path: /../software/devm/src/dev_manu.c
20580102      0x13A0706       Unix path: /../software/devm/src/dev_kd.c
20580182      0x13A0756       Unix path: /../software/devm/src/dev_frame.c
20739146      0x13C744A       Unix path: /../software/vlan/src/vlan_bdrn.c
20739282      0x13C74D2       Unix path: /../software/vlan/src/vlan_cfg.c
20747374      0x13C946E       Unix path: /../software/vlan/src/vlan_data.c
20752294      0x13CA7A6       Unix path: /../software/vlan/src/vlan_drv.c
20804998      0x13D7586       Unix path: /../software/vlan/src/vlan_init.c
20812314      0x13D921A       Unix path: /../software/vlan/src/vlan_dyn.c
20862532      0x13E5644       Copyright string: "copyright-info enable"
20869248      0x13E7080       Copyright string: "copyright-info"
20886598      0x13EB446       Copyright string: "copyright law and international treaties.  *"
20963547      0x13FE0DB       Neighborly text, "NeighborLosser in trap message"
20971298      0x13FFF22       Neighborly text, "Neighbor table is full and number of items is [integer]."
20975524      0x1400FA4       XML document, version: ""
20982514      0x1402AF2       Unix path: /../software/igsp/mcs/src/mcs_avl.c
20987458      0x1403E42       Unix path: /../software/igsp/mcs/src/mcs_cm.c
21002798      0x1407A2E       Unix path: /../software/igsp/mcs/src/mcs_dstr.c
21005226      0x14083AA       Unix path: /../software/igsp/mcs/src/mcs_ext.c
21199648      0x1437B20       Neighborly text, "neighbor-solicitation0"
21199672      0x1437B38       Neighborly text, "neighbor-advertisement"
21412323      0x146B9E3       Neighborly text, "neighbor cache)!ess on the IO board!"
21435497      0x1471469       Neighborly text, "neighbor cache entries ighbor cache entries "
21435558      0x14714A6       Neighborly text, "neighbor cache entries Verbose Info for NB Entry "
21436858      0x14719BA       Neighborly text, "neighbor solicitation interval ission interval (millisecond) "
21437221      0x1471B25       Neighborly text, "Neighbor solicitation isements "
21438977      0x1472201       Neighborly text, "Neighbor Entries countource MAC "
21498240      0x1480980       Ubiquiti firmware header, third party, ~CRC32: 0x4547494E, version: "_END"
21506822      0x1482B06       Unix path: /../software/vfs/src/vfs_flsh.c
21612536      0x149C7F8       Neighborly text, "Neighbor Advertisementp Report"
21612560      0x149C810       Neighborly text, "Neighbor Solicitationet dump"
21627086      0x14A00CE       Neighborly text, "neighbor channel list of AP %d's radio %d.%d's radio %d OP set is %d."
21636465      0x14A2571       Neighborly text, "neighbor reportn failure"
21636590      0x14A25EE       Neighborly text, "neighbor list failedh status configuration failed"
21649102      0x14A56CE       Neighborly text, "neighbor hash table Unable to initialise RRM structures"
21649142      0x14A56F6       Neighborly text, "neighbor hash tableInvalid input paramters, setting channel failed"
21649637      0x14A58E5       Neighborly text, "Neighbor location updation timer started for load balancing Neighbor timer creation failed"
21649701      0x14A5925       Neighborly text, "Neighbor timer creation failedlters"
21650475      0x14A5C2B       Neighborly text, "neighborn neighbor info Failed "
21650540      0x14A5C6C       Neighborly text, "neighbor info Failed annel hash table"
21650582      0x14A5C96       Neighborly text, "neighborry"
21650657      0x14A5CE1       Neighborly text, "Neighbor hash tableble to send channel reports"
21650791      0x14A5D67       Neighborly text, "neighbor reportsreports sent"
21650824      0x14A5D88       Neighborly text, "neighbor reports indication"
21650845      0x14A5D9D       Neighborly text, "Neighbor reports sentd frames sent on radio, count : %d "
21652772      0x14A6524       Neighborly text, "Neighbor Info for load balancing to AC. bor Info for load balancing to AC Successfully. "
21652830      0x14A655E       Neighborly text, "Neighbor Info for load balancing to AC Successfully. neighbor list notification sent for radio %d"
21652893      0x14A659D       Neighborly text, "neighbor list notification sent for radio %dr list notification failed for radio %d"
21652949      0x14A65D5       Neighborly text, "neighbor list notification failed for radio %ddeletion failed"
21652997      0x14A6605       Neighborly text, "Neighbor timer deletion failedr deleted "
21653029      0x14A6625       Neighborly text, "Neighbor location updation timer deleted e %d changed to %d"
21654032      0x14A6A10       Neighborly text, "neighbor %s is %d. mode, frame come from invalid channel."
21664552      0x14A9328       Neighborly text, "Neighbor World Co., Ltd.co Systems, Inc."
21725837      0x14B828D       LANCOM OEM file
21769161      0x14C2BC9       TP-Link firmware header, firmware version: 26996.24931.26729, image version: " Co., Ltd.", product ID: 0x2C4C7464, product version: 771752005, kernel load address: 0x726E6174, kernel entry point: 0x696F6E61, kernel offset: 1634617199, kernel length: 542008692, rootfs offset: 2003792491, rootfs length: 1932271689, bootloader offset: 1851993600, bootloader length: 72
21796312      0x14C95D8       TP-Link firmware header, firmware version: 8276.25955.26734, image version: " Co., Ltd.", product ID: 0x64696F20, product version: 1415930728, kernel load address: 0x6174696F, kernel entry point: 0x6E205465, kernel offset: 1818720556, kernel length: 541290286, rootfs offset: 740314228, rootfs length: 1680736256, bootloader offset: 1415934561, bootloader length: 1298229093
21841002      0x14D446A       TROC filesystem, 1126190415 file entries
21853536      0x14D7560       Sega MegaDrive/Genesis raw ROM dump, Name: " NETWORKS", ", LTD.",
21867463      0x14DABC7       Neighborly text, "neighbor %s, cannot get client roleame from client %s, invalid ifindex"
21880349      0x14DDE1D       Neighborly text, "neighbor informationpired for client %s"
21913306      0x14E5EDA       Neighborly text, "neighbor reportmory for interface queue"
21913608      0x14E6008       Neighborly text, "Neighbor report is added successfullyhannel report dropped"
21913744      0x14E6090       Neighborly text, "Neighbor %s is deleted successfullyuccessfully"
21913837      0x14E60ED       Neighborly text, "neighbor while aging't get LWAPP server EOM interfacs"
21916731      0x14E6C3B       Neighborly text, "neighbor.mary channel by a neighbor."
21916812      0x14E6C8C       Neighborly text, "neighbor.le in 20/40MHz."
21989599      0x14F88DF       Neighborly text, "neighboron neighbor list is full "
21989627      0x14F88FB       Neighborly text, "neighbor [%s] successfully.nable to create station neighbor "
21989665      0x14F8921       Neighborly text, "neighbor list is full led to Send Station Neighbor Info to AC. "
21989714      0x14F8952       Neighborly text, "neighbor  Station Neighbor Info to AC Successfully. "
21989748      0x14F8974       Neighborly text, "Neighbor Info to AC. ssfully. "
21989786      0x14F899A       Neighborly text, "Neighbor Info to AC Successfully. st Rate "
21995868      0x14FA15C       Neighborly text, "neighbor ifindexiled to validate data frame"
22026638      0x150198E       Neighborly text, "Neighbor Countood"
22031356      0x1502BFC       Neighborly text, "neighbor node for merging %02x%02x-%02x%02x-%02x%02x to %02x%02x-%02x%02x-%02x%02x.x-%02x%02x-%02x%02x."
22031458      0x1502C62       Neighborly text, "neighbor node due to memory shortage."
22031496      0x1502C88       Neighborly text, "Neighbor report is emptytabase."
22031568      0x1502CD0       Neighborly text, "Neighbor report is updated successfullyto add neighbor"
22031638      0x1502D16       Neighborly text, "neighborsh."
22043980      0x1505D4C       Neighborly text, "Neighbor Dead Timer Expirehange"
22057552      0x1509250       Neighborly text, "neighbor report from AP to ACneighbor list from AP to AC"
22057615      0x150928F       Neighborly text, "neighbor list from AP to ACfrom AC to AP"
22064198      0x150AC46       Neighborly text, "neighbor reportation"
22064246      0x150AC76       Neighborly text, "neighbor information"
22078050      0x150E262       Unix path: /../../../../../adapter/src/config/wa_drv_config.c
22078770      0x150E532       Unix path: /../../../../../adapter/src/config/wa_drv_qacl_capability.c
22079050      0x150E64A       Unix path: /../../../../../adapter/src/devlink/wa_drv_devlink.c
22079986      0x150E9F2       Unix path: /../../../../../adapter/src/public/wa_drv_comware.c
22083441      0x150F771       Copyright string: "Copyright (c) 2004-%s Hangzhou H3C Technologies Co., Ltd. All rights reserved."
22083551      0x150F7DF       Copyright string: "Copyright (c) 2004-%s 3Com Corporation and its licensors, All rights reserved."
22083684      0x150F864       Copyright string: "Copyright (c) 2004-%s Hewlett-Packard Development Company, L.P."
22083805      0x150F8DD       Copyright string: "Copyright(c) 1998-%s Huawei Tech. Co.,Ltd. All rights reserved."
22112054      0x1516736       Unix path: /../../../../../adapter/src/public/wa_drv_device.c
22123438      0x15193AE       Unix path: /../../../../../adapter/src/public/wa_drv_intf.c
22126806      0x151A0D6       Unix path: /../../../../../adapter/src/public/wa_drv_record.c
22129626      0x151ABDA       Unix path: /../../../../../adapter/src/public/wa_drv_task.c
22130042      0x151AD7A       Unix path: /../../../../../product/common/src/conf/fat/acl6_conf.c
22130122      0x151ADCA       Unix path: /../../../../../product/common/src/conf/fat/acl_conf.c
22130198      0x151AE16       Unix path: /../../../../../product/common/src/conf/fat/arp_conf.c
22130302      0x151AE7E       Unix path: /../../../../../product/common/src/conf/fat/config_conf.c
22130542      0x151AF6E       Unix path: /../../../../../product/common/src/conf/fat/dev_conf.c
22130682      0x151AFFA       Unix path: /../../../../../product/common/src/conf/fat/eth_conf.c
22130962      0x151B112       Unix path: /../../../../../product/common/src/conf/fat/ifnet_conf.c
22131102      0x151B19E       Unix path: /../../../../../product/common/src/conf/fat/ipfw_conf.c
22131206      0x151B206       Unix path: /../../../../../product/common/src/conf/fat/ipmc_conf.c
22131290      0x151B25A       Unix path: /../../../../../product/common/src/conf/fat/ipv4pro_conf.c
22131378      0x151B2B2       Unix path: /../../../../../product/common/src/conf/fat/ipv6pmtu_conf.c
22131458      0x151B302       Unix path: /../../../../../product/common/src/conf/fat/ipv6pro_conf.c
22131538      0x151B352       Unix path: /../../../../../product/common/src/conf/fat/mac_conf.c
22131630      0x151B3AE       Unix path: /../../../../../product/common/src/conf/fat/mcs_conf.c
22131710      0x151B3FE       Unix path: /../../../../../product/common/src/conf/fat/nd_conf.c
22131806      0x151B45E       Unix path: /../../../../../product/common/src/conf/fat/ntp_conf.c
22131934      0x151B4DE       Unix path: /../../../../../product/common/src/conf/fat/oem_conf.c
22132014      0x151B52E       Unix path: /../../../../../product/common/src/conf/fat/os_conf.c
22132194      0x151B5E2       Unix path: /../../../../../product/common/src/conf/fat/ppmng_conf.c
22132306      0x151B652       Unix path: /../../../../../product/common/src/conf/fat/qos_conf.c
22132402      0x151B6B2       Unix path: /../../../../../product/common/src/conf/fat/sec_conf.c
22132478      0x151B6FE       Unix path: /../../../../../product/common/src/conf/fat/vlan_conf.c
22135222      0x151C1B6       Unix path: /../../../../../wdp/src/wdp_debug.c
22136490      0x151C6AA       Unix path: /../../../../../wdp/src/wdp_main.c
22137118      0x151C91E       Unix path: /../../../../../wdp/src/wdp_wlan.c
22141762      0x151DB42       Unix path: /../../../../../product/wa2610/code/src/adp/ewt_dev.c
22142034      0x151DC52       Unix path: /../../../../../product/wa2610/code/src/adp/wa2610_drv_adp.c
22146294      0x151ECF6       Unix path: /../../../../../product/wa2610/code/src/adp/wa2610_drv_wlan.c
22146466      0x151EDA2       Unix path: /../../../../../product/wa2610/code/src/eth/common/eth_ar934x_mac.c
22156414      0x152147E       Unix path: /../../../../../product/wa2610/code/src/eth/common/eth_ar9_mac.c
22162906      0x1522DDA       Unix path: /../../../../../product/wa2610/code/src/eth/common/eth_mac.c
22170550      0x1524BB6       Unix path: /../../../../../product/wa2610/code/src/eth/common/ewt_dev_eth_ioctl.c
22192278      0x152A096       Unix path: /../../../../../product/wa2610/code/src/eth/bcm5461/eth_bcm54612e_phy.c
22193614      0x152A5CE       Unix path: /../../../../../product/wa2610/code/src/eth/bcm5461/eth_bcm54618_phy.c
22194542      0x152A96E       Unix path: /../../../../../product/wa2610/code/src/eth/bcm5461/eth_bcm5461_phy.c
22196898      0x152B2A2       Unix path: /../../../../../product/wa2610/code/src/eth/ar803x/eth_ar803x_phy.c
22197414      0x152B4A6       Unix path: /../../../../../product/wa2610/code/src/eth/ar934x/eth_ar934x_phy.c
22199262      0x152BBDE       Unix path: /../../../../../product/wa2610/code/src/eth/ar934x/eth_ar934x_swinit.c
22202782      0x152C99E       Unix path: /../../../../../product/wa2610/code/src/eth/vsc8601/eth_vsc8601_phy.c
22206770      0x152D932       Unix path: /../../../../../product/wa2610/code/src/flash/macronix/norflash_mx.c
22224274      0x1531D92       Unix path: /../../../../../adapter/src/public/wa_drv_forward.c
22235150      0x153480E       Unix path: /../../../../../product/chip/atheros/addon/control/src/ath_addon_athcrypt.c
22235902      0x1534AFE       Unix path: /../../../../../product/chip/atheros/addon/control/src/ath_addon_bss.c
22236474      0x1534D3A       Unix path: /../../../../../product/chip/atheros/addon/control/src/ath_addon_cmdproc.c
22236690      0x1534E12       Unix path: /../../../../../product/chip/atheros/addon/control/src/ath_addon_common.c
22245978      0x153725A       Unix path: /../../../../../product/chip/atheros/addon/control/src/ath_addon_display.c
22259750      0x153A826       Unix path: /../../../../../product/chip/atheros/addon/control/src/ath_addon_rsncrypt.c
22261554      0x153AF32       Unix path: /../../../../../product/chip/atheros/addon/control/src/ath_addon_sib.c
22262434      0x153B2A2       Unix path: /../../../../../product/chip/atheros/addon/data/src/ath_addon_ampdu.c
22263886      0x153B84E       Unix path: /../../../../../product/chip/atheros/addon/data/src/ath_addon_beacon.c
22264294      0x153B9E6       Unix path: /../../../../../product/chip/atheros/addon/data/src/ath_addon_rxtx.c
22265126      0x153BD26       Unix path: /../../../../../product/chip/atheros/common/wlan/src/ath_pktflt.c
22303890      0x1545492       Unix path: /../../../../../product/chip/atheros/sdk/lmac/ath_dev/ath_main.c
22331446      0x154C036       Unix path: /../../../../../wdp/src/wdp_power.c
22419422      0x15617DE       Unix path: /../software/devm/src/dev_env.c
22424966      0x1562D86       Unix path: /../software/edev/edevspec/edev_runtime.c
22425726      0x156307E       Unix path: /../software/edev/fiber/fiber_cfg.c
22489073      0x15727F1       Neighborly text, "NeighborAdvertisementsmpOutRouterAdvertisements"
22489109      0x1572815       Neighborly text, "NeighborSolicitsmpOutRouterSolicits"
22489544      0x15729C8       Neighborly text, "NeighborAdvertisementscmpInRouterAdvertisements"
22489580      0x15729EC       Neighborly text, "NeighborSolicitscmpInRouterSolicits"
23237010      0x1629192       Unix path: /../software/mac/imac_ic.c
...
Post #4
y0r
31 Jan 2018, 22:16

The very first loader is Redboot (safetyloader). But it seems to be not a regular one because it does not recognize commands like fconfig or ip_address. But you can load an external image via xmodem. Sadly I don't know which RAM address I could use with the -b flag. Variables are not working. I will post the help output tomorrow. Maybe someone has an idea and a generic 71xx image will boot.

Cheers,
y0r

Post #5
y0r
1 Feb 2018, 23:05

Well, I spent some hours on trying to flash this sweetie but I don't get it.
I've used ".../toh/evaluation.boards/pb44" for help but I was not able to burn the loaded data from RAM to flash. Some commands are not used by this redboot.
I'm a bit confused about the RAM and flash addresses. "fis create" always shows me, that the address I would to use is a RAM address. But in "version" it's shown as address in flash!?

SafetyLoader> version
Bootloader version 5.07-RAM- [RAM]

Board: pb44
RAM: 0x81000000-0x88000000, [0x8203dd10-0x87fb4000] available
FLASH: 0xbf000000 - 0xc0000000, 64 blocks of 0x00040000 bytes each.

SafetyLoader> bspinit
... Erase from 0xbffc0000-0xc0000000: .
... Program from 0x81032e40-0x81032e62 at 0xbffc0000: .


SafetyLoader> fis create -b 0xbf000000 -e 0xbf000000 -l 0x0001000 vmlinux
** WARNING: RAM address: 0xbf000000 may be invalid
   valid range is 0x81000000-0x88000000
... Erase from 0xbf180000-0xbf181000: .
... Program from 0xbf000000-0xbf001000 at 0xbf180000: Vaddr=0xbf180000

Can't program region at 0xbf180000: Unknown error
(I've tried to create a small one just for testing.)


SafetyLoader> help
Set/Query the system console baud rate
   baudrate [-b <rate>]
Enable/Disable boot abort flag
   boot_abort [-s] [0|1]
Initiate Board data
   bspinit
Manage FLASH images
   fis {cmds}
Execute code at a location
   go [-w <timeout>] [-c] [-n] [entry]
Help about help?
   help [<topic>]
Start web service to upgrade firmware
   start_web
Load a file
   load [-r] [-v] [-d] [-h <host>] [-p <TCP port>][-m <varies>] [-c <channel_number>]
        [-b <base_address>] <file_name>
Set/change MAC address
   mac_address [ -r | -s <XX:XX:XX:XX:XX:XX> ]
Set/change mfg value
   mfg_status [-s <value>]
Network connectivity test
   ping [-v] [-n <count>] [-l <length>] [-t <timeout>] [-r <rate>]
        [-i <IP_addr>] -h <IP_addr>
Reset the system
   reset
Set/change serial number
   serial_number [ -s <XXXXXX...> ]
Display RedBoot version information
   version
Display (hex dump) a range of memory
   x -b <location> [-l <length>] [-s] [-1|2|4]
exec liteon's linux located ram
   execramlinux [-r <mem address>]
SafetyLoader>

start_web starts a tiny webserver for uploading firmware:

Warning!!! Firmware Error

When you see this screen, it means that the firmware of this device has been damaged. To recover the system, click the Browse button below to locate the firmware on your computer, then click Update and Reboot. Once the firmware is updated successfully, the device will automatically reboot.

Any further ideas?

Post #6
y0r
3 Feb 2018, 14:08

No one? sad

Post #7
y0r
3 Feb 2018, 19:55

Oops, I erased the entire flash. :3 Anyway the loader was crappy... But now I need a Redboot loader for MIPS32 24Kc to flash via JTAG. http://ecos.sourceware.org/hardware.html only has for only 4Kx or 5Kx. Do I have to cross compile one? Or is there a kind of repository I can download a pre compiled?

The discussion might have continued from here.