okay thank you!
I'm sure you're knowing what you do, else I woud not have had flashed the image.
But such things can always happen.
I come back when the converter arrives. 8-)
(Last edited by lowmaster on 10 Apr 2018, 23:59)
Topic: The support for D-LINK DIR-510L - 4000mAh, 2x USB
The content of this topic has been archived between 6 Feb 2018 and 5 May 2018. Unfortunately there are posts – most likely complete pages – missing.
Page 3 of 4
Okay, I have got the equpment,
opened the device,
removed the foil to access the connection points: RX TX GND +
installed win 10 driver
downloaded realterm
soldered wires to rx tx and gnd
...
Please connect tx, rx and gnd to converter. Converter to computer.
Please download putty:
https://www.putty.org/
In first window please serial, COMX (Your COM port) and speed 57600. Then click "open".
Then please start the device, copy all bootlog and paste here.
this is the output i'm getting:
CDM56CDL_U03 Jboot B796
JRecovery Version R1.2 2013/10/04 18:32
SPI FLASH: MX25l12805d 16M
.
.with reset button pressed:
CDM56CDL_U03 Jboot B796Reset button had been pressed
JRecovery Version R1.2 2013/10/04 18:32
SPI FLASH: MX25l12805d 16M
.
.(Last edited by lowmaster on 13 Apr 2018, 15:35)
And after that nothing happen?
nope
"Recovery" suggests that it may be waiting to TFTP something.
that would explain why lan gets active for a minute...
any suggestions for the procedure to do something?
Please try send ctrl + c or enter. Ypu should see bootloader console. Please paste command list of Your jboot (press ? and enter).
CDM56CDL_U03 Jboot B796
JRecovery Version R1.2 2013/10/04 18:32
SPI FLASH: MX25l12805d 16M
.
...Boot addr = 0x80400000
.................This is code for propper bootling. first dot line means rading config partition. In rest of jboot routers next phase is booting (third line). In Your router, is another phase durring boot. It read third partition before recovery mode. I haven't this partition. I think, it is:
0x000000e70000-0x000000ef0000 : "Storage"
0x000000ef0010-0x000000ff0010 : "UI"
lowmaster, which partition backup You make?
I'm trying several key combination by now without success
the only thing is when I press enter while the text above scolls the 2 dots are in 1 line
CDM56CDL_U03 Jboot B796
JRecovery Version R1.2 2013/10/04 18:32
SPI FLASH: MX25l12805d 16M
..I backuped:
bootloader.bin
config.bin
mdt2.bin
mdt3.bin
mdt4.bin
mdt5.bin
mdt6.bin
BTW,
on the other side of the board I found similar jtags which are labeled like this:
gnd / data / clk / vup
I'm wondering what this is for?
(Last edited by lowmaster on 14 Apr 2018, 21:57)
Could You upload it somewere and give link?
Do You have spi programmer or raspberry pi or banana pi or something like that?
The labeled places could be i2c too.
I dont think I have a programmer like that. but if its not expensive i can buy one
http://174.137.163.116/bootloader.bin
http://174.137.163.116/mdt1.bin
http://174.137.163.116/mdt2.bin
http://174.137.163.116/mdt3.bin
http://174.137.163.116/mdt4.bin
http://174.137.163.116/mdt5.bin
http://174.137.163.116/mdt6.bin
(Last edited by lowmaster on 15 Apr 2018, 18:51)
Can You paste all images? This haven't 16MB.
This have reasoonable price:
https://www.ebay.de/itm/USB-Programmer- … SwE8daVc2k
And if You don't want solder, You can use something like this:
https://www.ebay.de/itm/SOIC8-SOP8-Test … M#shpCntId
This set can unbrick almost every router. 
okay
I think I will need all 2 packages then.
links updated
(Last edited by lowmaster on 15 Apr 2018, 19:03)
I found the problem. The space between 0x000000010000 (end of bootloader) and 0x000000210000 (start of kernel) is the difference between DIR-510 and another jboot devices. Bootloader have hidden partiiton.
I'am not sure, that we can make router working without mtd0 dump.
Does anybody have DIR-510L and can make dump? I look on ebay but there is zero devices.
I bought a new one off amazon for 39 euros yesterday
so maybe tomorrow I have it here.
but is mdt0 not the bootloader.bin??
(Last edited by lowmaster on 16 Apr 2018, 04:00)
lowmaster wrote:
I bought a new one off amazon for 39 euros yesterday
so maybe tomorrow I have it here.
but is mdt0 not the bootloader.bin??
Yes, bootloader.bin is mtd0. If You upload it to device, it will be unbricked.
When You unbrick device, we can try upload proper image.
chkdsk wrote:
lowmaster wrote:I bought a new one off amazon for 39 euros yesterday
so maybe tomorrow I have it here.
but is mdt0 not the bootloader.bin??
Yes, bootloader.bin is mtd0. If You upload it to device, it will be unbricked.
When You unbrick device, we can try upload proper image.
Noooo!!!
lowmaster, do not flash that 16M file to the old router!
The /dev/mtd0 is the "Whole" - the full backup specific to every router, that backup should be kept on a safe place.
Create that backup and name it "dlink_dir-510l-whole-xxxxxxx.bin", where xxxxxxx is the router's MAC address.
Do you have the backup bootloader.bin (which is 16 MByte) from 2018-04-09 12:10:34?
Before killing the new router too, please provide some basic info after logging into router through ssh/telnet/uart!
dmesg
cat /proc/cpuinfo
cat /proc/meminfo
cat /proc/interrupts
cat /proc/partitions
cat /proc/mtd
cat /proc/iomem
cat /proc/bus/usb/devices
./gpiodump-mipsel-static - from jclehner/gpiodump-mt7620
ifconfig -a
brctl show
Please provide a screenshot from the emergency flashing site of the working router - please include the browser's address bar too!
Could you access that page of the bricked router too?
Emergency Flashing topic @ DLINK
@xabolcs
The router is bricked. We talk about reflash with SPI programmer.
Now I see! ... But it should be renamed from bootloader.bin!
Here is the binwalk output of http://174.137.163.116/bootloader.bin
DECIMAL HEXADECIMAL DESCRIPTION
--------------------------------------------------------------------------------
13188 0x3384 LZMA compressed data, properties: 0x5D, dictionary size: 8388608 bytes, uncompressed size: 89456 bytes
65592 0x10038 LZMA compressed data, properties: 0x5D, dictionary size: 33554432 bytes, uncompressed size: 2694312 bytes
942080 0xE6000 Squashfs filesystem, little endian, version 4.0, compression:gzip, size: 1205152 bytes, 843 inodes, blocksize: 131072 bytes, created: 2013-08-28 12:36:26
2162744 0x210038 LZMA compressed data, properties: 0x5D, dictionary size: 33554432 bytes, uncompressed size: 4185244 bytes
3670016 0x380000 Squashfs filesystem, little endian, version 4.0, compression:gzip, size: 9789140 bytes, 1314 inodes, blocksize: 131072 bytes, created: 2018-02-15 05:12:45
14614528 0xDF0000 Squashfs filesystem, little endian, version 4.0, compression:gzip, size: 157665 bytes, 14 inodes, blocksize: 131072 bytes, created: 2016-09-07 08:38:08
15138816 0xE70000 JFFS2 filesystem, little endian
15663120 0xEF0010 Squashfs filesystem, little endian, version 4.0, compression:gzip, size: 988560 bytes, 435 inodes, blocksize: 131072 bytes, created: 2016-09-08 06:11:20
16711744 0xFF0040 Zlib compressed data, default compressionokay, all stuff arrived today. Now I have this:
What can I do now?
8-)
This is the recovery page of the new router. It comes up when press and hold reset while it boots. the upper LED blinks fast in this mode, then you can connect to its wlan named dir510l without a wireless-key:
The bricked one does not come up with anything useful. Just the Lan port comes up and goes down after a minute. I checked all common IP's of d-link ant tp-link routers to connect, but nothing. No dhcp in any direction. No packets received, just sent from the Notebooks LAN interface.
The results of the commands:
dmesg
abled
Calibrating delay loop... 386.04 BogoMIPS (lpj=772096)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
NET: Registered protocol family 16
RALINK_GPIOMODE = 9d
RALINK_GPIOMODE = 9d
PPLL_CFG1=0xe6c000
MT7620 PPLL lock
PPLL_DRV =0x80080504
start PCIe register access
RALINK_PCI_PCICFG_ADDR = 1000f0
*************** MT7620 PCIe RC mode *************
bio: create slab <bio-0> at 0
vgaarb: loaded
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
pci 0000:00:00.0: reg 14: [mem 0x00000000-0x0000ffff]
pci 0000:00:00.0: supports D1
pci 0000:00:00.0: PME# supported from D0 D1 D3hot
pci 0000:00:00.0: PME# disabled
pci 0000:01:00.0: reg 10: [mem 0x00000000-0x000fffff]
pci 0000:01:00.0: PME# supported from D0 D3hot D3cold
pci 0000:01:00.0: PME# disabled
pci 0000:01:00.1: reg 10: [mem 0x00000000-0x000fffff]
pci 0000:01:00.1: supports D1
pci 0000:01:00.1: PME# supported from D0 D1 D3hot D3cold
pci 0000:01:00.1: PME# disabled
pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x201fffff]
pci 0000:00:00.0: BAR 1: assigned [mem 0x20200000-0x2020ffff]
pci 0000:00:00.0: BAR 1: set to [mem 0x20200000-0x2020ffff] (PCI address [0x20200000-0x2020ffff]
pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff]
pci 0000:01:00.0: BAR 0: set to [mem 0x20000000-0x200fffff] (PCI address [0x20000000-0x200fffff]
pci 0000:01:00.1: BAR 0: assigned [mem 0x20100000-0x201fffff]
pci 0000:01:00.1: BAR 0: set to [mem 0x20100000-0x201fffff] (PCI address [0x20100000-0x201fffff]
pci 0000:00:00.0: PCI bridge to [bus 01-01]
pci 0000:00:00.0: bridge window [io disabled]
pci 0000:00:00.0: bridge window [mem 0x20000000-0x201fffff]
pci 0000:00:00.0: bridge window [mem pref disabled]
PCI: Setting latency timer of device 0000:00:00.0 to 64
BAR0 at slot 0 = 0
bus=0x0, slot = 0x0
res[0]->start = 0
res[0]->end = 0
res[1]->start = 20200000
res[1]->end = 2020ffff
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
bus=0x1, slot = 0x0
res[0]->start = 20000000
res[0]->end = 200fffff
res[1]->start = 0
res[1]->end = 0
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
bus=0x1, slot = 0x0
res[0]->start = 20100000
res[0]->end = 201fffff
res[1]->start = 0
res[1]->end = 0
res[2]->start = 0
res[2]->end = 0
res[3]->start = 0
res[3]->end = 0
res[4]->start = 0
res[4]->end = 0
res[5]->start = 0
res[5]->end = 0
Switching to clocksource MIPS
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
UDP hash table entries: 256 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
NET: Registered protocol family 1
PCI: CLS 80 bytes, default 32
RT3xxx EHCI/OHCI init.
squashfs: version 4.0 (2009/01/31) Phillip Lougher
JFFS2 version 2.2 (NAND) (ZLIB) (RTIME) (c) 2001-2006 Red Hat, Inc.
msgmni has been set to 245
Block layer SCSI generic (bsg) driver version 0.4 loaded (major 254)
io scheduler noop registered (default)
pci_hotplug: PCI Hot Plug PCI Core version: 0.5
Ralink gpio driver initialized
Enable Ralink GDMA Controller Module
GDMA IP Version=3
spidrv_major = 217
Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x10000500 (irq = 37) is a 16550A
serial8250: ttyS1 at MMIO 0x10000c00 (irq = 12) is a 16550A
brd: module loaded
deice id : c2 20 18 c2 20 (2018c220)
MX25L12805D(c2 2018c220) (16384 Kbytes)
mtd .name = raspi, .size = 0x01000000 (0M) .erasesize = 0x00000010 (0K) .numeraseregions = 4096
Creating 8 MTD partitions on "raspi":
0x000000000000-0x000001000000 : "Whole"
0x000000000000-0x000000010000 : "Bootloader"
0x000000210000-0x000000380000 : "Kernel"
0x000000380000-0x000000df0000 : "RootFS"
0x000000df0000-0x000000e70000 : "MyDLink"
0x000000e70000-0x000000ef0000 : "Storage"
0x000000ef0010-0x000000ff0010 : "UI"
mtd: partition "UI" doesn't start on an erase block boundary -- force read-only
0x000000ff0000-0x000001000000 : "Config"
rdm_major = 253
SMACCR1 -- : 0x0000000c
SMACCR0 -- : 0x432880f8
Ralink APSoC Ethernet Driver Initilization. v3.0 256 rx/tx descriptors allocated, mtu = 1500!
SMACCR1 -- : 0x0000000c
SMACCR0 -- : 0x43288071
PROC INIT OK!
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
NET: Registered protocol family 24
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
u32 classifier
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (1965 buckets, 7860 max)
ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Restricted Cone
arp_tables: (C) 2002 David S. Miller
TCP cubic registered
NET: Registered protocol family 17
Bridge firewalling registered
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
Freeing unused kernel memory: 168k freed
Algorithmics/MIPS FPU Emulator v1.5
Raeth v3.0 (Tasklet,SkbRecycle)
phy_tx_ring = 0x07fbc000, tx_ring = 0xa7fbc000
phy_rx_ring0 = 0x07fbd000, rx_ring0 = 0xa7fbd000
SMACCR1 -- : 0x0000000c
SMACCR0 -- : 0x43288071
CDMA_CSG_CFG = 81000000
GDMA1_FWD_CFG = 20710000
phy 0, reg 0, val 0x3900
phy 0, reg 0, val 0x3900
switch register base addr to system register 0xb0000000
write offset 0x60, value 0x695
phy 1, reg 0, val 0x3900
phy 2, reg 0, val 0x3900
phy 3, reg 0, val 0x3900
phy 4, reg 0, val 0x3900
phy 0, reg 0, val 0x3300
phy 0, reg 0, val 0x3300
device eth2 entered promiscuous mode
NET: Registered protocol family 10
device eth2.1 entered promiscuous mode
br0: port 1(eth2.1) entering learning state
br0: port 1(eth2.1) entering learning state
ramtd_erase: addr:ff0000 len:0
ramtd_write: to:ff0000 len:10
ramtd_write: to:ff0010 len:55e
ramtd_write: to:ff0000 len:1
addrconf_dad_completed 7
rt2860v2_ap: module license 'unspecified' taints kernel.
Disabling lock debugging due to kernel taint
addrconf_dad_completed 7
addrconf_dad_completed 7
addrconf_dad_completed 7
Length of MAC:6
mac:78:54:2e:9d:3b:33:
----
=== pAd = c05f4000, size = 1142176 ===
RTMPAllocTxRxRingMemory, Status=0
RTMPAllocAdapterBlock, Status=0
AP Driver version-2.7.1.6
Length of MAC:6
mac:78:54:2e:9d:3b:34:
----
PCI: Setting latency timer of device 0000:01:00.0 to 64
=== pAd = c0c02000, size = 1632552 ===
RTMPAllocTxRxRingMemory, Status=0
RTMPAllocAdapterBlock, Status=0
device_id =0x7650
==>MT76x0_WLAN_ChipOnOff(): OnOff:1, pAd->WlanFunCtrl:0x0, Reg-WlanFunCtrl=0xff000002
MACVersion = 0x76502000
load fw spent 12ms
RX DESC a7714000 size = 2048
RX1 DESC a7715000 size = 2048
cfg_mode=14
cfg_mode=14
wmode_band_equal(): Band Not Equal!
1. Phy Mode = 49
2. Phy Mode = 49
ext_pa_current_setting = 1
3. Phy Mode = 49
AntCfgInit: primary/secondary ant 0/1
ChipStructAssign(): RALINK6590 hook !
MCS Set = ff 00 00 00 01
MT76x0_ChipBBPAdjust():rf_bw=2, ext_ch=1, PrimCh=44, HT-CentCh=46, VHT-CentCh=42
APStartUp(): AP Set CentralFreq at 42(Prim=44, HT-CentCh=46, VHT-CentCh=42, BBP_BW=2)
Main bssid = 78:54:2e:9d:3b:34
== rt28xx_init, Status=0
0x1300 = 00064300
RTMPDrvOpen(1):Check if PDMA is idle!
RTMPDrvOpen(2):Check if PDMA is idle!
device rai0 entered promiscuous mode
br0: port 2(rai0) entering learning state
br0: port 2(rai0) entering learning state
addrconf_dad_completed 7
RX DESC a766b000 size = 2048
RTMP_TimerListAdd: add timer obj c068c6f0!
RTMP_TimerListAdd: add timer obj c0657828!
RTMP_TimerListAdd: add timer obj c06577fc!
RTMP_TimerListAdd: add timer obj c06577d0!
RTMP_TimerListAdd: add timer obj c05fc2d4!
RTMP_TimerListAdd: add timer obj c05fbec8!
RTMP_TimerListAdd: add timer obj c05fc2a4!
RTMP_TimerListAdd: add timer obj c05fc64c!
RTMP_TimerListAdd: add timer obj c05fc39c!
RTMP_TimerListAdd: add timer obj c05fc3cc!
RTMP_TimerListAdd: add timer obj c05fc58c!
RTMP_TimerListAdd: add timer obj c05fc5bc!
RTMP_TimerListAdd: add timer obj c05ff78c!
RTMP_TimerListAdd: add timer obj c05ff380!
RTMP_TimerListAdd: add timer obj c05ff75c!
RTMP_TimerListAdd: add timer obj c05ffb04!
RTMP_TimerListAdd: add timer obj c05ff854!
RTMP_TimerListAdd: add timer obj c05ff884!
RTMP_TimerListAdd: add timer obj c05ffa44!
RTMP_TimerListAdd: add timer obj c05ffa74!
RTMP_TimerListAdd: add timer obj c0602c44!
RTMP_TimerListAdd: add timer obj c0602838!
RTMP_TimerListAdd: add timer obj c0602c14!
RTMP_TimerListAdd: add timer obj c0602fbc!
RTMP_TimerListAdd: add timer obj c0602d0c!
RTMP_TimerListAdd: add timer obj c0602d3c!
RTMP_TimerListAdd: add timer obj c0602efc!
RTMP_TimerListAdd: add timer obj c0602f2c!
RTMP_TimerListAdd: add timer obj c06060fc!
RTMP_TimerListAdd: add timer obj c0605cf0!
RTMP_TimerListAdd: add timer obj c06060cc!
RTMP_TimerListAdd: add timer obj c0606474!
RTMP_TimerListAdd: add timer obj c06061c4!
RTMP_TimerListAdd: add timer obj c06061f4!
RTMP_TimerListAdd: add timer obj c06063b4!
RTMP_TimerListAdd: add timer obj c06063e4!
RTMP_TimerListAdd: add timer obj c06095b4!
RTMP_TimerListAdd: add timer obj c06091a8!
RTMP_TimerListAdd: add timer obj c0609584!
RTMP_TimerListAdd: add timer obj c060992c!
RTMP_TimerListAdd: add timer obj c060967c!
RTMP_TimerListAdd: add timer obj c06096ac!
RTMP_TimerListAdd: add timer obj c060986c!
RTMP_TimerListAdd: add timer obj c060989c!
RTMP_TimerListAdd: add timer obj c060ca6c!
RTMP_TimerListAdd: add timer obj c060c660!
RTMP_TimerListAdd: add timer obj c060ca3c!
RTMP_TimerListAdd: add timer obj c060cde4!
RTMP_TimerListAdd: add timer obj c060cb34!
RTMP_TimerListAdd: add timer obj c060cb64!
RTMP_TimerListAdd: add timer obj c060cd24!
RTMP_TimerListAdd: add timer obj c060cd54!
RTMP_TimerListAdd: add timer obj c060ff24!
RTMP_TimerListAdd: add timer obj c060fb18!
RTMP_TimerListAdd: add timer obj c060fef4!
RTMP_TimerListAdd: add timer obj c061029c!
RTMP_TimerListAdd: add timer obj c060ffec!
RTMP_TimerListAdd: add timer obj c061001c!
RTMP_TimerListAdd: add timer obj c06101dc!
RTMP_TimerListAdd: add timer obj c061020c!
RTMP_TimerListAdd: add timer obj c06133dc!
RTMP_TimerListAdd: add timer obj c0612fd0!
RTMP_TimerListAdd: add timer obj c06133ac!
RTMP_TimerListAdd: add timer obj c0613754!
RTMP_TimerListAdd: add timer obj c06134a4!
RTMP_TimerListAdd: add timer obj c06134d4!
RTMP_TimerListAdd: add timer obj c0613694!
RTMP_TimerListAdd: add timer obj c06136c4!
RTMP_TimerListAdd: add timer obj c0659c2c!
RTMP_TimerListAdd: add timer obj c0659820!
RTMP_TimerListAdd: add timer obj c0659bfc!
RTMP_TimerListAdd: add timer obj c0659fa4!
RTMP_TimerListAdd: add timer obj c0659cf4!
RTMP_TimerListAdd: add timer obj c0659d24!
RTMP_TimerListAdd: add timer obj c0659c5c!
RTMP_TimerListAdd: add timer obj c0659c8c!
RTMP_TimerListAdd: add timer obj c0659cbc!
RTMP_TimerListAdd: add timer obj c0659fd8!
RTMP_TimerListAdd: add timer obj c066305c!
RTMP_TimerListAdd: add timer obj c0663178!
RTMP_TimerListAdd: add timer obj c0663088!
RTMP_TimerListAdd: add timer obj c065a394!
RTMP_TimerListAdd: add timer obj c05f9564!
RTMP_TimerListAdd: add timer obj c05fca1c!
RTMP_TimerListAdd: add timer obj c05ffed4!
RTMP_TimerListAdd: add timer obj c060338c!
RTMP_TimerListAdd: add timer obj c0606844!
RTMP_TimerListAdd: add timer obj c0609cfc!
RTMP_TimerListAdd: add timer obj c060d1b4!
RTMP_TimerListAdd: add timer obj c061066c!
RTMP_TimerListAdd: add timer obj c065a0a4!
APSDCapable[0]=0
APSDCapable[1]=0
APSDCapable[2]=0
APSDCapable[3]=0
APSDCapable[4]=0
APSDCapable[5]=0
APSDCapable[6]=0
APSDCapable[7]=0
APSDCapable[8]=0
APSDCapable[9]=0
APSDCapable[10]=0
APSDCapable[11]=0
APSDCapable[12]=0
APSDCapable[13]=0
APSDCapable[14]=0
APSDCapable[15]=0
default ApCliAPSDCapable[0]=0
eth2: no IPv6 routers present
eth2.1: no IPv6 routers present
2a:55:44:e4:05:1a:
br0: no IPv6 routers present
cb:eb:01:93:83:88:b2:c3:4f:8f:
50:b2:65:62:c1:a3:cb:f9:52:8e:b0:b1:79:c9:b6:97:
eth2.2: no IPv6 routers present
1. Phy Mode = 9
2. Phy Mode = 9
E2PROM: D0 target power=0xff20
E2PROM: 40 MW Power Delta= 0
3. Phy Mode = 9
RTMP_TimerListAdd: add timer obj c05f9128!
AntCfgInit: primary/secondary ant 0/1
Initialize RF Central Registers for E2 !!!
Initialize RF Central Registers for E3 !!!
Initialize RF Channel Registers for E2 !!!
Initialize RF Channel Registers for E3 !!!
Initialize RF DCCal Registers for E2 !!!
Initialize RF DCCal Registers for E3 !!!
D1 = -3, D2 = 9, CalCode = 28 !!!
RT6352_Temperature_Init : BBPR49 = 0xfffffffd
RT6352_Temperature_Init : TemperatureRef25C = 0xfffffff3
Current Temperature from BBP_R49=0xfffffff5
TX BW Filter Calibration !!!
RX BW Filter Calibration !!!
LOFT Calibration Done!
IQCalibration Start!
IQCalibration Done! CH = 0, (gain= 1, phase=3d)
IQCalibration Start!
IQCalibration Done! CH = 1, (gain= 0, phase=3c)
TX IQ Calibration Done!
RTMPSetPhyMode: channel is out of range, use first channel=0
MCS Set = ff ff 00 00 01
SYNC - BBP R4 to 20MHz.l
RTMP_TimerListAdd: add timer obj c065a938!
The 4-BSSID mode is enabled, the BSSID byte5 MUST be the multiple of 4
Main bssid = 78:54:2e:9d:3b:33
== rt28xx_init, Status=0
0x1300 = 00064380
br0: port 1(eth2.1) entering forwarding state
device ra0 entered promiscuous mode
br0: port 3(ra0) entering learning state
br0: port 3(ra0) entering learning state
addrconf_dad_completed 7
rai0: no IPv6 routers present
br0: port 2(rai0) entering forwarding state
br0: port 3(ra0) entering forwarding state
ip6_tables: (C) 2000-2006 Netfilter Core Team
Ralink APSoC Hardware Watchdog Timer
Started WatchDog Timer.
Started WatchDog Timer. LoadVlaue: 36600 sysclk: 145000000 TIMEOUT: 60
Stopped WatchDog Timer.
Disable Kernel Mode Watchdog
Started WatchDog Timer.
Started WatchDog Timer. LoadVlaue: 36600 sysclk: 145000000 TIMEOUT: 60
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
rt3xxx-ehci rt3xxx-ehci: Ralink EHCI Host Controller
rt3xxx-ehci rt3xxx-ehci: new USB bus registered, assigned bus number 1
rt3xxx-ehci rt3xxx-ehci: irq 18, io mem 0x101c0000
rt3xxx-ehci rt3xxx-ehci: USB 0.0 started, EHCI 1.00
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
rt3xxx-ohci rt3xxx-ohci: RT3xxx OHCI Controller
rt3xxx-ohci rt3xxx-ohci: new USB bus registered, assigned bus number 2
rt3xxx-ohci rt3xxx-ohci: irq 18, io mem 0x101c1000
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
usb 1-1: new high speed USB device using rt3xxx-ehci and address 2
hub 1-1:1.0: USB hub found
hub 1-1:1.0: 4 ports detected
RTMP_TimerListAdd: add timer obj c06a2498!
RTMP_TimerListAdd: add timer obj c06a2650!
RTMP_TimerListAdd: add timer obj c06f6ffc!
AP SETKEYS DONE - WPA2, AuthMode(7)=WPA2PSK, WepStatus(6)=AES, GroupWepStatus(4)=TKIP
RTMP_TimerListAdd: add timer obj c06f7038!
Rcv Wcid(1) AddBAReq
Start Seq = 00000053
RTMP_TimerListAdd: add timer obj c06fedac!
#cat /proc/cpuinfo
system type : Ralink SoC
processor : 0
cpu model : MIPS 24Kc V5.0
BogoMIPS : 386.04
wait instruction : yes
microsecond timers : yes
tlb_entries : 32
extra interrupt vector : yes
hardware watchpoint : yes, count: 4, address/irw mask: [0x0ff8, 0x0ff8, 0x0503, 0x0ff8]
ASEs implemented : mips16 dsp
shadow register sets : 1
core : 0
VCED exceptions : not available
VCEI exceptions : not available
#cat /proc/meminfo
MemTotal: 125940 kB
MemFree: 82020 kB
Buffers: 5220 kB
Cached: 15280 kB
SwapCached: 0 kB
Active: 6972 kB
Inactive: 16616 kB
Active(anon): 3368 kB
Inactive(anon): 1380 kB
Active(file): 3604 kB
Inactive(file): 15236 kB
Unevictable: 0 kB
Mlocked: 0 kB
SwapTotal: 0 kB
SwapFree: 0 kB
Dirty: 0 kB
Writeback: 0 kB
AnonPages: 3128 kB
Mapped: 2424 kB
Shmem: 1660 kB
Slab: 11720 kB
SReclaimable: 816 kB
SUnreclaim: 10904 kB
KernelStack: 560 kB
PageTables: 600 kB
NFS_Unstable: 0 kB
Bounce: 0 kB
WritebackTmp: 0 kB
CommitLimit: 62968 kB
Committed_AS: 12804 kB
VmallocTotal: 1048372 kB
VmallocUsed: 8040 kB
VmallocChunk: 1025688 kB
#cat /proc/interrupts
CPU0
3: 448 Ralink eth2
4: 18379 Ralink ra0
5: 72859 Ralink timer
6: 0 Ralink ralink_gpio
7: 0 Ralink Ralink_DMA
12: 4419 Ralink serial
13: 5600 Ralink rai0
17: 0 Ralink Ralink_ESW
18: 24 Ralink ehci_hcd:usb1, ohci_hcd:usb2
37: 2262 Ralink serial
ERR: 0
#cat /proc/partitions
major minor #blocks name
31 0 16384 mtdblock0
31 1 64 mtdblock1
31 2 1472 mtdblock2
31 3 10688 mtdblock3
31 4 512 mtdblock4
31 5 512 mtdblock5
31 6 1024 mtdblock6
31 7 64 mtdblock7
#cat /proc/mtd
dev: size erasesize name
mtd0: 01000000 00001000 "Whole"
mtd1: 00010000 00001000 "Bootloader"
mtd2: 00170000 00001000 "Kernel"
mtd3: 00a70000 00001000 "RootFS"
mtd4: 00080000 00001000 "MyDLink"
mtd5: 00080000 00001000 "Storage"
mtd6: 00100000 00001000 "UI"
mtd7: 00010000 00001000 "Config"
#cat /proc/iomem
00000000-07ffffff : System RAM
00000000-0030769b : Kernel code
0030769c-003cdf1f : Kernel data
101c0000-101c0fff : rt3xxx-ehci
101c0000-101c0fff : ehci_hcd
101c1000-101c1fff : rt3xxx-ohci
101c1000-101c1fff : ohci_hcd
20000000-2fffffff : PCI MEM1
20000000-201fffff : PCI Bus 0000:01
20000000-200fffff : 0000:01:00.0
20000000-200fffff : 0000:01:00.0
20100000-201fffff : 0000:01:00.1
20200000-2020ffff : 0000:00:00.0
#cat /proc/bus/usb/devices
T: Bus=02 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#= 1 Spd=12 MxCh= 1
B: Alloc= 0/900 us ( 0%), #Int= 0, #Iso= 0
D: Ver= 1.10 Cls=09(hub ) Sub=00 Prot=00 MxPS=64 #Cfgs= 1
P: Vendor=1d6b ProdID=0001 Rev= 2.06
S: Manufacturer=Linux 2.6.36 ohci_hcd
S: Product=RT3xxx OHCI Controller
S: SerialNumber=rt3xxx-ohci
C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr= 0mA
I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub ) Sub=00 Prot=00 Driver=hub
E: Ad=81(I) Atr=03(Int.) MxPS= 2 Ivl=255ms
T: Bus=01 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#= 1 Spd=480 MxCh= 1
B: Alloc= 0/800 us ( 0%), #Int= 1, #Iso= 0
D: Ver= 2.00 Cls=09(hub ) Sub=00 Prot=00 MxPS=64 #Cfgs= 1
P: Vendor=1d6b ProdID=0002 Rev= 2.06
S: Manufacturer=Linux 2.6.36 ehci_hcd
S: Product=Ralink EHCI Host Controller
S: SerialNumber=rt3xxx
C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr= 0mA
I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub ) Sub=00 Prot=00 Driver=hub
E: Ad=81(I) Atr=03(Int.) MxPS= 4 Ivl=256ms
T: Bus=01 Lev=01 Prnt=01 Port=00 Cnt=01 Dev#= 2 Spd=480 MxCh= 4
D: Ver= 2.00 Cls=09(hub ) Sub=00 Prot=01 MxPS=64 #Cfgs= 1
P: Vendor=058f ProdID=6254 Rev= 1.00
C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr=100mA
I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub ) Sub=00 Prot=00 Driver=hub
E: Ad=81(I) Atr=03(Int.) MxPS= 1 Ivl=256ms
#ifconfig -a
apcli0 Link encap:Ethernet HWaddr 7A:54:2E:9D:3B:33
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
apclii0 Link encap:Ethernet HWaddr 7A:54:2E:9D:3B:34
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
br0 Link encap:Ethernet HWaddr 78:54:2E:9D:3B:33
inet addr:192.168.0.1 Bcast:192.168.0.255 Mask:255.255.255.0
inet6 addr: fe80::7a54:2eff:fe9d:3b33/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1633 errors:0 dropped:0 overruns:0 frame:0
TX packets:471 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:10
RX bytes:59862 (58.4 KiB) TX bytes:68283 (66.6 KiB)
eth2 Link encap:Ethernet HWaddr 00:0C:43:28:80:71
inet6 addr: fe80::20c:43ff:fe28:8071/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:1316 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:87145 (85.1 KiB)
Interrupt:3
eth2.1 Link encap:Ethernet HWaddr 78:54:2E:9D:3B:33
inet6 addr: fe80::7a54:2eff:fe9d:3b33/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:1292 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:84925 (82.9 KiB)
eth2.2 Link encap:Ethernet HWaddr 78:54:2E:9D:3B:32
inet6 addr: fe80::7a54:2eff:fe9d:3b32/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:14 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:1352 (1.3 KiB)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:431 errors:0 dropped:0 overruns:0 frame:0
TX packets:431 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:47328 (46.2 KiB) TX bytes:47328 (46.2 KiB)
ra0 Link encap:Ethernet HWaddr 78:54:2E:9D:3B:33
inet6 addr: fe80::7a54:2eff:fe9d:3b33/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1689 errors:0 dropped:0 overruns:0 frame:0
TX packets:383 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:117585 (114.8 KiB) TX bytes:40499 (39.5 KiB)
Interrupt:4
ra1 Link encap:Ethernet HWaddr 7A:54:2E:9C:3B:33
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
rai0 Link encap:Ethernet HWaddr 78:54:2E:9D:3B:34
inet6 addr: fe80::7a54:2eff:fe9d:3b34/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
Interrupt:13
rai1 Link encap:Ethernet HWaddr 7A:54:2E:9C:3B:34
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
wds0 Link encap:Ethernet HWaddr 78:54:2E:9D:3B:33
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
wds1 Link encap:Ethernet HWaddr 78:54:2E:9D:3B:33
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
wds2 Link encap:Ethernet HWaddr 78:54:2E:9D:3B:33
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
wds3 Link encap:Ethernet HWaddr 78:54:2E:9D:3B:33
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
wdsi0 Link encap:Ethernet HWaddr 78:54:2E:9D:3B:34
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
wdsi1 Link encap:Ethernet HWaddr 78:54:2E:9D:3B:34
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
wdsi2 Link encap:Ethernet HWaddr 78:54:2E:9D:3B:34
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
wdsi3 Link encap:Ethernet HWaddr 78:54:2E:9D:3B:34
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
#brctl show
bridge name bridge id STP enabled interfaces
br0 8000.78542e9d3b33 no eth2.1
rai0
ra0
## ./gpiodump-mipsel-static
GPIOMODE = 0x00000795
SUTIF_SHARE_MODE = 0, disabled [default]
WDT_RST_MODE = 0, WDT_RST_N [default]
PA_G_GPIO_MODE = 0, normal
ND_SD_GPIO_MODE = 0, NAND
PERST_GPIO_MODE = 0, PERST_N
EPHY_LED_GPIO_MODE = 0, normal [default]
WLED_GPIO_MODE = 0, normal
SPI_REFCLK0_MODE = 0, normal
SPI_GPIO_MODE = 0, normal [default]
RGMII2_GPIO_MODE = 1, GPIO [default]
RGMII1_GPIO_MODE = 1, GPIO [default]
MDIO_GPIO_MODE = 3, reserved
UARTL_GPIO_MODE = 0, normal
UARTF_SHARE_MODE = 5, GPIO,UARTF
I2C_GPIO_MODE = 1, GPIO [default]
#(Last edited by lowmaster on 18 Apr 2018, 04:18)
ok.
First step is install software:
https://www.youtube.com/watch?v=L0ChYNwunUE
Second, how to use Clips:
https://www.youtube.com/watch?v=wUWroks_Rd0
3:
Put clips on MX25L12835FM. If MX25L12835FM have diffenent case than so-8 ( clips does't fit), You must resolder memory to programmer.
4:
Use app CH341a Programmer and reflash the flash. (If You use clips, turn router on. Some devices must be in reset durring flashing.) You use bootloader.bin file (whole mtd0).
5: Unplug clips/ resolder and reboot the device
oookay,
I had to de-solder... then writing bootloader.bin was successfull,
but verify failed
also if I compare the new content from the chip after read and save, it is not the same like the sourcefile...
I though before I put the chip back, I ask if this is okay
tried to erase with flashrom:
flashrom -c MX25L12835F/MX25L12845E/MX25L12865E -E
flashrom v0.9.9-97-g29333a0 on Windows 6.2 (x86)
flashrom is free software, get the source code at https://flashrom.org
Calibrating delay loop... OK.
Found Macronix flash chip "MX25L12835F/MX25L12845E/MX25L12865E" (16384 kB, SPI) on ch341a_spi.
Erasing and writing flash chip... FAILED at 0x00000001! Expected=0xff, Found=0x00, failed byte count from 0x00000000-0x00000fff: 0xfb6
ERASE FAILED!
Looking for another erase function.
FAILED at 0x00000001! Expected=0xff, Found=0x00, failed byte count from 0x00000000-0x00007fff: 0x7eb7
ERASE FAILED!
Looking for another erase function.
FAILED at 0x00000001! Expected=0xff, Found=0x00, failed byte count from 0x00000000-0x0000ffff: 0xc6f1
ERASE FAILED!
Looking for another erase function.
FAILED at 0x00000001! Expected=0xff, Found=0x00, failed byte count from 0x00000000-0x00ffffff: 0x470fcc
ERASE FAILED!
Looking for another erase function.
FAILED at 0x00000001! Expected=0xff, Found=0x00, failed byte count from 0x00000000-0x00ffffff: 0x470fcc
ERASE FAILED!
Looking for another erase function.
No usable erase functions left.
FAILED!
Your flash chip is in an unknown state.
Please report this on IRC at chat.freenode.net (channel #flashrom) or
mail flashrom@flashrom.org, thanks!(Last edited by lowmaster on 19 Apr 2018, 11:09)
okay, pin #2 had no contact. now it looks better:
flashrom -f -w C:\bootloader.bin -c MX25L12835F/MX25L12845E/MX25L12865E
flashrom v0.9.9-97-g29333a0 on Windows 6.2 (x86)
flashrom is free software, get the source code at https://flashrom.org
Calibrating delay loop... OK.
Found Macronix flash chip "MX25L12835F/MX25L12845E/MX25L12865E" (16384 kB, SPI) on ch341a_spi.
Reading old flash chip contents... done in 2 min and 9 sec.
Erasing and writing flash chip... Erase/write done in 6 min and 16 sec.
Verifying flash... VERIFIED in 2 min and 11 sec.
Process completed in 10 min and 36 sec.Written file and file extracted from chip are now exactly the same.. trying to resolder it to the router now
(Last edited by lowmaster on 19 Apr 2018, 12:04)
Great. I hope that device will boot after resoldering.
Page 3 of 4