I just flashed my wl500gp with "openwrt-brcm47xx-2.6-squashfs.trx"

Before flashing there was a working DD-WRT installed on the router...
and after flashing .. and waiting for over 7 minutes..

nothing.
No Power-LED, no way to get into recovery-mode, no Pin9-Trick, nothing!

Everything left is the following signals on the address- / data-lines of the flash-chip half a second after powering on:

AAAA DDDD AAAAAAAAAAAAAAAAAAAAAA DDDDDDDDDDDDDDDD
BBBB BBBB 0000000000111111111122 0000000000111111
4321 4321 0123456789012345678901 0123456789012345

0004 0800 0010000000000000000000 0000000000010000
Trig.
0001 1000 1000000000000000000000 0000000000001000
0002 0000 0100000000000000000000 0000000000000000
0003 0000 1100000000000000000000 0000000000000000
1002 53d0 0100000000001000000000 0000101111001010
1003 4083 1100000000001000000000 1100000100000010
1004 7790 0010000000001000000000 0000100111101110
1005 4083 1010000000001000000000 1100000100000010
1006 8f40 0110000000001000000000 0000001011110001
1007 4083 1110000000001000000000 1100000100000010
1008 0000 0001000000001000000000 0000000000000000
1009 4080 1001000000001000000000 0000000100000010
01c0 498c 0000001110000000000000 0011000110010010
01c1 1000 1000001110000000000000 0000000000001000
01c2 0020 0100001110000000000000 0000010000000000
01c3 241a 1100001110000000000000 0101100000100100
14da 0b4f 0101101100101000000000 1111001011010000
14db 0820 1101101100101000000000 0000010000010000
14dc 0000 0011101100101000000000 0000000000000000
14dd 0000 1011101100101000000000 0000000000000000
14dc 0000 0011101100101000000000 0000000000000000

1st row: decoded addresses,
2nd row: decoded data
3rd row: address-lines
4th row: data-lines

... took me about 5 hours with an oscilloscope to get these signals...

So .. is there anyone who has same / similar experiences - or who can explain what's going on?
Is there a way to read / write to the flash-chip of thw WL500gP - in circuit or soldered out? - what hardware do I need?!
Are there schematics around of the WL500gP (found a CE-Document for a WL500gx, but nothing for gP

Does anyone have an idea of how this could have happened?! - seems like something really bad happened .. destroyed bootloader?! .. but .. how?!

Kind regards and have an nice day...

Tasso

Hi,

I had a similar experience exactly when tryed to replace a working DD-WRT image with Kamikaze. After the flashing procedure, the router was no longer responding on pings.. nor was accepting a new image via TFTP.

What I have done was (after reading somewhere on the internet) to press the RESET button while the router is powered down, then while still holding down the RESET button to power on the router. The RESET button should not be released for about 30 seconds. After that, I used the Asus utility to upload an original image to the router (got the latest from Asus web site).

When the Asus firmware was uploaded and restored to the router, it was alive again

Then I reflashed it with Kamikaze. And I am still using Kamikaze on it without any problems so far..

I am just guesing, that DD-WRT is probably destroying some NVRAM variables, used by the Asus recovery mode.

I hope this helps.

Edit: If you mange to upload a new firmware to the router, please wait a little longer... leave it for 30 minutes at least.

Regars,
Zdravko

(Last edited by znanev on 28 Jan 2008, 14:14)

Thank you!! .. I'll give it a try and tell about the results - but tomorrow (don't have the router here).
At least you gave me some hope for tomorrow. ;-)

Kind regards...
Tasso

No success. Sorry.
Looks like I do really have to buy a Flashprogrammer + TSOP-adapter for about 1000 $ - or find someone who has it already... :-(

did you connect a serial console to the router? it works with the "hold the reset button while powering on" mode... and with a serial connection you're able to trace to flash process

I even connected an oscilloscope to the serial console-lines (long before "reading" the flash-bus), but .. nothing! - not even a small RST.

The bootloader (CFE) has to work to get some signals on the serial lines... without a bootloader and minimal function of the CPU it will be hard to read from a serial console or to write to the flash... at least on a board like the ASUS WL500gP without JTAG or any other option to access the flash without CPU. :-(
The only way will be a flash-programmer with 48pin TSOP-Socket for lots of money or .. second option .. maybe 21 + 16 line buffers, lots of wires, and writing to the bad flash-chip (or even better a new one for 18$) in a working WL500gP.
But .. the last idea will way sure kill a second Router AND a flash-chip instead of bringing up the first one...

By the way .. is there anybody near Berlin who has got access to a flash-programmer and a TSOP48-Socket and is able and willing to help me?