Topic: motorola wr850g 32mb ram Anyone flash anything into this?

specs:

bcm4712
adm6996L
32mb RAM
SST39vf3201 - 4mb flash
12 pin ejtag
9 pin serial port

Anyone successfully flash any non-motorola firmware into this thing?
Any idea how to ejtag firmware in?

Everytime I tftp something in, it restarts with the motorola firmware.

to turn on bootwait:
1.reset router to default with firmware 4.03
2.login to the router's web page and go to /frame_debug.asp
3. type in: nvram set boot_wait=on
type in: nvram commit
4. then reboot and do tftp.

serial port:
plug in your serial cable just like on the wrt54gv2

here's the serial output (I can't get a menu though):

Copyright (C) 2000,2001,2002,2003 Broadcom Corporation.

Initializing Arena.
Initializing Devices.
et0: Broadcom BCM47xx 10/100 Mbps Ethernet Controller 3.50.21.0
CPU type 0x29007: 200MHz
Total memory: 0x2000000 bytes (32MB)

Total memory used by CFE:  0x8032BAD0 - 0x804313F0 (1071392)
Initialized Data:          0x8032BAD0 - 0x8032E040 (9584)
BSS Area:                  0x8032E040 - 0x8032F3F0 (5040)
Local Heap:                0x8032F3F0 - 0x8042F3F0 (1048576)
Stack Area:                0x8042F3F0 - 0x804313F0 (8192)
Text (code) segment:       0x80300000 - 0x80309510 (38160)
Boot area (physical):      0x00432000 - 0x00472000
Relocation Factor:         I:00000000 - D:00000000

Device eth0:  hwaddr 00-0C-xx-xx-xx-xx, ipaddr 192.168.10.1, mask 255.255.255.0
        gateway not set, nameserver not set

    *CFE for Motorola WR850G v2.03, Release date: Jan. 13, 2004

Reading :: Failed.: Timeout occured
Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)
Loading: ............ 1552384 bytes read
Entry at 0x80001000
Closing network.
Starting program at 0x80001000
We got BCM4712 board...
Broadcom 3.51.21.0 version.
===== Set default value =====
Now set [os_ram_addr] to [80001000]
Now set [boardrev] to [0x10]
Now set [watchdog] to [0]
Now set [boot_wait] to [off]
Now set [et0mdcport] to [0]
Now set [pmon_ver] to [CFE 3.51.21.0]
Now set [vlan0ports] to [0 1 2 3 5*]
Now set [os_flash_addr] to [bfc40000]
Now set [sromrev] to [2]
Now set [boardtype] to [0x0101]
Now set [gpio2] to [adm_eecs]
Now set [gpio3] to [adm_eesk]
Now set [gpio4] to [adm_eedi]
Now set [gpio5] to [adm_rc]
Now set [wl0id] to [0x4320]
Now set [ag0] to [255]
Now set [wl0gpio0] to [0]
Now set [wl0gpio1] to [0]
Now set [wl0gpio2] to [0]
Now set [wl0gpio3] to [0]
Now set [wl0gpio4] to [0]
Now set [wl0gpio5] to [0]
Now set [boardflags2] to [0]
Now set [pa0itssit] to [62]
Now set [cctl] to [0]
Now set [pa0maxpwr] to [60]
Now set [clkfreq] to [200]
Now set [aa0] to [3]
Now set [vlan1hwname] to [et0]
Now set [vlan1ports] to [4 5]
Now set [scratch] to [a0180000]
Now set [ccode] to [0]
Now set [boardflags] to [0x0188]
Now set [sdram_init] to [0x0]
Now set [sdram_config] to [0x0032]
Now set [sdram_refresh] to [0x0000]
Now set [sdram_ncdl] to [0x21]
Now set [et0phyaddr] to [30]
Now set [pa0b0] to [0x119a]
Now set [pa0b1] to [0xfb93]
Now set [pa0b2] to [0xfea5]
Now set [vlan0hwname] to [et0]
Now set [dl_ram_addr] to [a0001000]
Now set [boardnum] to [44]
Now set [lan_ifname] to [br0]
Now set [lan_ifnames] to [vlan0 eth1 wds0.2 wds0.3 wds0.4 wds0.5]
Now set [wan_ifname] to [vlan1]
Now set [wan_ifnames] to [vlan1]
===================================
wlconf: vlan0 failed (-1)
wds0.2: No such device
wlconf: wds0.2 failed (-1)
interface wds0.2 does not exist!
wds0.3: No such device
wlconf: wds0.3 failed (-1)
interface wds0.3 does not exist!
wds0.4: No such device
wlconf: wds0.4 failed (-1)
interface wds0.4 does not exist!
wds0.5: No such device
wlconf: wds0.5 failed (-1)
interface wds0.5 does not exist!
wan_port_report_from_gpio return 0
Is_WAN_Cable_Connected ... WAN side cable is disconnected ... Ok
wan_port_report_from_gpio return 0
Is_WAN_Cable_Connected ... WAN side cable is disconnected ... Ok
WAN_LED_Control ... Now, WAN side cable is not connected.
info, udhcp client (v0.9.8) started

Re: motorola wr850g 32mb ram Anyone flash anything into this?

specs:

bcm4712
adm6996L
32mb RAM
SST39vf3201 - 4mb flash
12 pin ejtag
9 pin serial port

Anyone successfully flash any non-motorola firmware into this thing?
Any idea how to ejtag firmware in?

Everytime I tftp something in, it restarts with the motorola firmware.

to turn on bootwait:
1.reset router to default with firmware 4.03
2.login to the router's web page and go to /frame_debug.asp
3. type in: nvram set boot_wait=on
type in: nvram commit
4. then reboot and do tftp.

serial port:
plug in your serial cable just like on the wrt54gv2

here's the serial output (I can't get a menu though):

Copyright (C) 2000,2001,2002,2003 Broadcom Corporation.

Initializing Arena.
Initializing Devices.
et0: Broadcom BCM47xx 10/100 Mbps Ethernet Controller 3.50.21.0
CPU type 0x29007: 200MHz
Total memory: 0x2000000 bytes (32MB)

Total memory used by CFE:  0x8032BAD0 - 0x804313F0 (1071392)
Initialized Data:          0x8032BAD0 - 0x8032E040 (9584)
BSS Area:                  0x8032E040 - 0x8032F3F0 (5040)
Local Heap:                0x8032F3F0 - 0x8042F3F0 (1048576)
Stack Area:                0x8042F3F0 - 0x804313F0 (8192)
Text (code) segment:       0x80300000 - 0x80309510 (38160)
Boot area (physical):      0x00432000 - 0x00472000
Relocation Factor:         I:00000000 - D:00000000

Device eth0:  hwaddr 00-0C-xx-xx-xx-xx, ipaddr 192.168.10.1, mask 255.255.255.0
        gateway not set, nameserver not set

    *CFE for Motorola WR850G v2.03, Release date: Jan. 13, 2004

Reading :: Failed.: Timeout occured
Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)
Loading: ............ 1552384 bytes read
Entry at 0x80001000
Closing network.
Starting program at 0x80001000
We got BCM4712 board...
Broadcom 3.51.21.0 version.
===== Set default value =====
Now set [os_ram_addr] to [80001000]
Now set [boardrev] to [0x10]
Now set [watchdog] to [0]
Now set [boot_wait] to [off]
Now set [et0mdcport] to [0]
Now set [pmon_ver] to [CFE 3.51.21.0]
Now set [vlan0ports] to [0 1 2 3 5*]
Now set [os_flash_addr] to [bfc40000]
Now set [sromrev] to [2]
Now set [boardtype] to [0x0101]
Now set [gpio2] to [adm_eecs]
Now set [gpio3] to [adm_eesk]
Now set [gpio4] to [adm_eedi]
Now set [gpio5] to [adm_rc]
Now set [wl0id] to [0x4320]
Now set [ag0] to [255]
Now set [wl0gpio0] to [0]
Now set [wl0gpio1] to [0]
Now set [wl0gpio2] to [0]
Now set [wl0gpio3] to [0]
Now set [wl0gpio4] to [0]
Now set [wl0gpio5] to [0]
Now set [boardflags2] to [0]
Now set [pa0itssit] to [62]
Now set [cctl] to [0]
Now set [pa0maxpwr] to [60]
Now set [clkfreq] to [200]
Now set [aa0] to [3]
Now set [vlan1hwname] to [et0]
Now set [vlan1ports] to [4 5]
Now set [scratch] to [a0180000]
Now set [ccode] to [0]
Now set [boardflags] to [0x0188]
Now set [sdram_init] to [0x0]
Now set [sdram_config] to [0x0032]
Now set [sdram_refresh] to [0x0000]
Now set [sdram_ncdl] to [0x21]
Now set [et0phyaddr] to [30]
Now set [pa0b0] to [0x119a]
Now set [pa0b1] to [0xfb93]
Now set [pa0b2] to [0xfea5]
Now set [vlan0hwname] to [et0]
Now set [dl_ram_addr] to [a0001000]
Now set [boardnum] to [44]
Now set [lan_ifname] to [br0]
Now set [lan_ifnames] to [vlan0 eth1 wds0.2 wds0.3 wds0.4 wds0.5]
Now set [wan_ifname] to [vlan1]
Now set [wan_ifnames] to [vlan1]
===================================
wlconf: vlan0 failed (-1)
wds0.2: No such device
wlconf: wds0.2 failed (-1)
interface wds0.2 does not exist!
wds0.3: No such device
wlconf: wds0.3 failed (-1)
interface wds0.3 does not exist!
wds0.4: No such device
wlconf: wds0.4 failed (-1)
interface wds0.4 does not exist!
wds0.5: No such device
wlconf: wds0.5 failed (-1)
interface wds0.5 does not exist!
wan_port_report_from_gpio return 0
Is_WAN_Cable_Connected ... WAN side cable is disconnected ... Ok
wan_port_report_from_gpio return 0
Is_WAN_Cable_Connected ... WAN side cable is disconnected ... Ok
WAN_LED_Control ... Now, WAN side cable is not connected.
info, udhcp client (v0.9.8) started

Get me one, and I make it work smile BTW, the serial is TTL internal or just nomal internal? Eg. did You need a converter chip?
I contacted with Motorola about the firmware sources, and they refused to release it. So imho we have to call in FSF.

Re: motorola wr850g 32mb ram Anyone flash anything into this?

I got the cfe menu from the serial console.

How do you flash the firmware on from the serial console??

here are the options:
CFE> help
Available commands:

et                  Broadcom Ethernet utility.
nvram               NVRAM utility.
reboot              Reboot.
flash               Update a flash memory device
autoboot            Automatic system bootstrap.
batch               Load a batch file into memory and execute it
go                  Verify and boot OS image.
boot                Load an executable file into memory and execute it
load                Load an executable file into memory without executing it
save                Save a region of memory to a remote file via TFTP
ping                Ping a remote IP host.
arp                 Display or modify the ARP Table
ifconfig            Configure the Ethernet interface
unsetenv            Delete an environment variable.
printenv            Display the environment variables
setenv              Set an environment variable.
help                Obtain help for CFE commands

the help for the "flash" command:
SUMMARY
Update a flash memory device
USAGE
     flash [options] filename [flashdevice]

Copies data from a source file name or device to a flash memory device.
The source device can be a disk file (FAT filesystem), a remote file(TFTP) or a flash device.  The destination device may be a flash or eeprom.
If the destination device is your boot flash (usually flash0), the flash command will restart the firmware after the flash update is complete

  OPTIONS

     -noerase     Don't erase flash before writing
     -offset=*    Begin programming at this offset in the flash device
     -size=*      Size of source device when programming from flash to flash
     -noheader    Override header verification, flash binary without checking

I figure the command would be:
"flash -noheader x.trx flash0"

but how would you specify where the x.trx file is?

is there a way to create a ram disk on the router and then somehow load the x.trx file into the ram disk?

The reason for flashing this way is because the router keeps rebooting to the motorola firmware when a new firmware is tftp'd in.

PS: the serial port is TTL level.  it is the same as on the wrt54g.  you can use the same cable as the one for the linksys.  I use a cell phone serial cable.

Re: motorola wr850g 32mb ram Anyone flash anything into this?

I got this message "Module ID error" after I tftp'd Satori4 into the wr850g. 

Is there a way to figure out what to change the header to in order to not get a module id error?

I tried copying the motorola header into satori but that didn't work.

Here's the CFE output while I tftp'd:

CFE> go
Reading :: ..........Done. 2727936 bytes read
header= 48H 44H 52H 30H 0H A0H 29H 0H
Module ID error!!
Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)
Loading: ............ 1552384 bytes read
Entry at 0x80001000

Re: motorola wr850g 32mb ram Anyone flash anything into this?

I flashed a firmware into the wr850g and get this error.  Is there a way to fix this??

from the CFE console:


CFE version 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: Tue Jan 13 14:34:16 CST 2004 (xavier@localhost.localdomain)
Copyright (C) 2000,2001,2002,2003 Broadcom Corporation.

Initializing Arena.
Initializing Devices.
et0: Broadcom BCM47xx 10/100 Mbps Ethernet Controller 3.50.21.0
CPU type 0x29007: 200MHz
Total memory: 0x2000000 bytes (32MB)

Total memory used by CFE:  0x8032BAD0 - 0x804313F0 (1071392)
Initialized Data:          0x8032BAD0 - 0x8032E040 (9584)
BSS Area:                  0x8032E040 - 0x8032F3F0 (5040)
Local Heap:                0x8032F3F0 - 0x8042F3F0 (1048576)
Stack Area:                0x8042F3F0 - 0x804313F0 (8192)
Text (code) segment:       0x80300000 - 0x80309510 (38160)
Boot area (physical):      0x00432000 - 0x00472000
Relocation Factor:         I:00000000 - D:00000000

Device eth0:  hwaddr xx-xx-xx-xx-xx-xx, ipaddr xx.xx.xx.xx, mask xx.xx.xx.xx
        gateway not set, nameserver not set

    *CFE for Motorola WR850G v2.03, Release date: Jan. 13, 2004

Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)
Loading: .............. 2011136 bytes read
Entry at 0x80001000
Closing network.
Starting program at 0x80001000
CPU revision is: 00029007
Primary instruction cache 8kb, linesize 16 bytes (2 ways)
Primary data cache 4kb, linesize 16 bytes (2 ways)
Linux version 2.4.20 (gcc version 3.2.3)
Determined physical RAM map:
memory: 01000000 @ 00000000 (usable)
On node 0 totalpages: 4096
zone(0): 4096 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: root=/dev/mtdblock2 noinitrd console=ttyS0,115200
CPU: BCM4712 rev 1 at 200 MHz
Calibrating delay loop... 199.47 BogoMIPS
Memory: 13988k/16384k available (1745k kernel code, 2396k reserved, 124k data, 7
6k init, 0k highmem)
Dentry cache hash table entries: 2048 (order: 2, 16384 bytes)
Inode cache hash table entries: 1024 (order: 1, 8192 bytes)
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer-cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 4096 (order: 2, 16384 bytes)
Checking for 'wait' instruction...  unavailable.
POSIX conformance testing by UNIFIX
PCI: Disabled
PCI: Fixing up bus 0
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
Initializing RT netlink socket
Starting kswapd
devfs: v1.12c (20020818) Richard Gooch (rgooch@atnf.csiro.au)
devfs: boot_options: 0x1
pty: 256 Unix98 ptys configured
Serial driver version 5.05c (2001-07-08) with MANY_PORTS SHARE_IRQ SERIAL_PCI en
abled
ttyS00 at 0xb8000300 (irq = 3) is a 16550A
ttyS01 at 0xb8000400 (irq = 0) is a 16550A
HDLC line discipline: version $Revision: 1.1.1.4 $, maxframe=4096
N_HDLC line discipline registered.
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
MPPE/MPPC encryption/compression module registered
imq driver loaded.
Universal TUN/TAP device driver 1.5 (C)1999-2002 Maxim Krasnyansky
SST Query Table vÿ. at 0x0000
number of JEDEC chips: 1
0: offset=0x0,size=0x1000,blocks=1024
1: offset=0x400000,size=0x10000,blocks=64
Flash device: 0x400000 at 0x1c000000
Physically mapped flash: squashfs filesystem found at block 1001
Creating 4 MTD partitions on "Physically mapped flash":
0x00000000-0x00040000 : "pmon"
0x00040000-0x003f0000 : "linux"
0x000fa414-0x003f0000 : "rootfs"
mtd: partition "rootfs" doesn't start on an erase block boundary -- force read-o
nly
0x003f0000-0x00400000 : "nvram"
sflash: found no supported devices
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP, IGMP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 1024 bind 2048)
Linux IP multicast router 0.06 plus PIM-SM
ip_conntrack version 2.1 (3079 buckets, 24632 max) - 368 bytes per conntrack
ip_tables: (C) 2000-2002 Netfilter core team
IPP2P v0.6 loading
ipt_random match loaded
netfilter PSD loaded - (c) astaro AG
ipt_osf: Startng OS fingerprint matching module.
ipt_time loading
ipt_IPV4OPTSSTRIP loaded
arp_tables: (C) 2002 David S. Miller
ip_queue: failed to register queue handler
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
Ebtables v2.0 registered<6>NET4: Ethernet Bridge 008 for NET4.0
Bridge firewalling registered
802.1Q VLAN Support v1.7 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly.
Mounted devfs on /dev
Freeing unused kernel memory: 76k freed
Using /lib/modules/2.4.20/kernel/drivers/net/et/et.o
Warning: loading et will taint the kernel: no license
  See http://www.tux.org/lkml/#export-tainted for information about tainted modu
les
Using /lib/modules/2.4.20/kernel/drivers/net/wl/wl.o
Warning: loading wl will taint the kernel: no license
  See http://www.tux.org/lkml/#export-tainted for information about tainted modu
les
Using /lib/modules/2.4.20/kernel/drivers/net/adm6996/adm6996.o
Using /lib/modules/2.4.20/kernel/drivers/net/mac/writemac.o
Warning: loading writemac will taint the kernel: no license
  SOops in fault.c::do_page_fault, line 192:
$0 : 00000000 c00b0000 ffffffff 00006570 00000000 ffffffff 00000008 00000000
$8 : 00000001 0000c00a 00000000 801ef31a 00000000 00000000 ffffffff 00000000
$16: 000000bf c00ae720 bfc00000 0000235b 80fc9e50 c00ad4d4 00000008 00000001
$24: 00000000 2abe5130                   80fc8000 80fc9e10 00000000 c00ad300
Hi : 00000000
Lo : 00000a60
epc  : c00ad518    Tainted: P
Status: 1000fc03
Cause : 00000008
Process insmod (pid: 21, stackpage=80fc8000)
Stack:    c00ae4d3 00000000 801d9d24 000001f0 c00ad000 80010fe0 ffffffff
00000008 80ef0c40 00000060 c00adf8c c00ada28 c00ae4b0 c00aef59 00000000
00000000 80ef0c40 00000060 00000008 00000001 00000000 800304d0 803bfb40
10024000 c00ad000 00000000 80030518 8002ce34 802d5460 000000c2 c00ad000
ffffffea 10022000 8001254c 000007df 00000002 00000001 801cc060 00000060
c00a4000 ...
Call Trace:   [<c00ae4d3>] [<80010fe0>] [<c00adf8c>] [<c00ada28>] [<c00ae4b0>]
[<c00aef59>] [<800304d0>] [<80030518>] [<8002ce34>] [<8001254c>] [<c00ad060>]
[<800085a4>] [<80001e58>]

Code: 00803821  24860008  24080001 <8ce20000> 3c03c00b  8c63e758  94c40000  2508
ffff  00621821
ee http://www.tux.org/lkml/#export-tainted for information about tainted modules
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 25d07, size 440e
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 25d07, size 440e
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 25d07, size 440e
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 25d07, size 440e
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 25d07, size 440e
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 25d07, size 440e
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 25d07, size 440e
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 25d07, size 440e
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 25d07, size 440e
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 25d07, size 440e
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 25d07, size 440e
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 25d07, size 440e
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 25d07, size 440e
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 25d07, size 440e
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 25d07, size 440e
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 25d07, size 440e
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 2a115, size 4c46
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 2a115, size 4c46
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 2a115, size 4c46
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 2a115, size 4c46
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 2a115, size 4c46
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 2a115, size 4c46
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 2a115, size 4c46
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 2a115, size 4c46
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 2a115, size 4c46
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 2a115, size 4c46
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 2a115, size 4c46
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 2a115, size 4c46
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 2a115, size 4c46
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 2a115, size 4c46
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 2a115, size 4c46
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 2a115, size 4c46
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 4e8ea, size 38bf
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 4e8ea, size 38bf
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 4e8ea, size 38bf
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 4e8ea, size 38bf
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 4e8ea, size 38bf
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 4e8ea, size 38bf
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 4e8ea, size 38bf
SQUASHFS error: zlib_fs returned unexpected result 0xfffffffd
SQUASHFS error: Unable to read page, block 4e8ea, size 38bf

Re: motorola wr850g 32mb ram Anyone flash anything into this?

It's clear from the output that it's not the openwrt firmware.

Re: motorola wr850g 32mb ram Anyone flash anything into this?

It's clear from the output that it's not the openwrt firmware.

i'm just trying out different linksys custom firmwares on the wr850g to see if it works.

in summary:
to flash a firmware through tftp, you need to have the motorola header and the correct crc to pass the motorola crc check.

you can bypass the motorola header and crc check by connecting through a serial port and using the -noheader option.  once you get a linksys firmware on, you can then flash using the web update.

but firmwares with certain squashfs setups don't work so you have to reflash using the serial port.
any clues on getting it to work would be appreciated.

Re: motorola wr850g 32mb ram Anyone flash anything into this?

Duh! Forgive the dope factor, if applicable:
I've got one of these routers for playing with, I wonder if the CFE source at:
http://sibyte.broadcom.com/public/resources/#cfe
would provide any insights into hackin'?

Re: motorola wr850g 32mb ram Anyone flash anything into this?

Hi-

I've been looking at the V4.03 and V5.13 WR850G firmware and I notice that the first 8 bytes of the firmware (headers) look like this (from hexdump):

V4.03 WR850G_V403.trx 3047432 bytes
52 e3 3b 45 10 57 70 50...

V5.13 WR850G_V513.trx 3076104 bytes
3a d8 e4 5c 10 57 70 50....

so the second 4 bytes are the same. Any ideas how to compute the first 4 bytes?

Re: motorola wr850g 32mb ram Anyone flash anything into this?

Just for information, I managed to install the 20050202 snapshot on a Motorola WR850G. I first downgraded the Motorola firmware from V5.13 to V4.03. With the older firmware I was then able to go to http://router_ip/frame_debug.asp and set boot_wait=on.  After this I used a tftp client set to 192.168.10.1 and "put" openwrt-linux.trx as the router was rebooting after a reset. I was amazed that it worked, and the WR850G is happily running just fine!  YMMV.

Re: motorola wr850g 32mb ram Anyone flash anything into this?

Yawlhoo,
Is wireless working with that snapshot?
I flashed it with the experimental thinking the crc on the snapshots would fail..  and wireless does not work on that experimental

Re: motorola wr850g 32mb ram Anyone flash anything into this?

Everything appears to work fine.  I have the Motorola WR850G in one room talking to a WRT54GS in another room by WDS, and the Motorola router works exactly as it did when it ran the Motorola firmware.  Frankly, given the discussion I had read on the Motorola, I was surprised to find it flashes this easily and works so well.

Re: motorola wr850g 32mb ram Anyone flash anything into this?

Good one Yawlhoo.
I confirmed that. Tried that this morning
Yes, it works.

Downgrade to firmware 4.03
then
http://192.168.10.1/frame_debug.asp

then
1) nvram set boot_wait=on
2) nvram commit.

Have your tftp server ready to send openwrt-linux.trx to unit.

Thanks to yawlhoo

yikes

Re: motorola wr850g 32mb ram Anyone flash anything into this?

and the Motorola router works exactly as it did when it ran the Motorola firmware

Maybe even better now that it has an unrestricted Linux firmware  smile

Yeah, now I'm not too sure why people are cracking their WR850Gs open to bypass crc using the console.

I'll give this a try soon.

Re: motorola wr850g 32mb ram Anyone flash anything into this?

I had issues with the wireless on the WR850G, but erasing my NVRAM fixed it.

Re: motorola wr850g 32mb ram Anyone flash anything into this?

Ok..  I flashed my unit with openwrt...
For some reason, the router can access the network..
I can ping google.com or any local ip address from the telnet... however, I can access the internet from a machine connected to the router..

Is there something special that needs to be set?

Re: motorola wr850g 32mb ram Anyone flash anything into this?

FYI: A simple restart fixed this problem!!!

Re: motorola wr850g 32mb ram Anyone flash anything into this?

I had issues with the wireless on the WR850G, but erasing my NVRAM fixed it.

My issue right now is that wireless doesn't work..  I can see the accesspoint..  but for some reason, dhcp doesnt work on it.. and when i manually set it, it still doesnt work..  Am I missing something?

For anyone else trying thing..
for DHCP to work for the switch, you need to edit the dnsmasq.conf file.. change '192.168.1' to 192.168.10

I'll post again if i figure out how to get wireless to work

Re: motorola wr850g 32mb ram Anyone flash anything into this?

I had issues with the wireless on the WR850G, but erasing my NVRAM fixed it.

My issue right now is that wireless doesn't work..  I can see the accesspoint..  but for some reason, dhcp doesnt work on it.. and when i manually set it, it still doesnt work..  Am I missing something?

For anyone else trying thing..
for DHCP to work for the switch, you need to edit the dnsmasq.conf file.. change '192.168.1' to 192.168.10

I'll post again if i figure out how to get wireless to work

I bet that was your issue smile
anyways.. the command to reset the nvram is
mtd erase nvram
reboot

Re: motorola wr850g 32mb ram Anyone flash anything into this?

I found the reason why wireless doesnt work is because I have the WPA values set.  Apparently, when WPA is set, you can associate with the AP..  but beyond that, you cant do anything...
Maybe I'm not configuring WPA correctly?

Re: motorola wr850g 32mb ram Anyone flash anything into this?

For info and FWIW: I wanted to get OpenWRT going on my WR850G simply so I could configure it the way I wanted to.  However as it turned out, after I succeeded in the initial flash described somewhat above, I just left it running more or less "as is", as a "slave", using WDS to a WRT54GS in another room, the latter doing the connection to the internet, DHCP, etc. etc.

Looking at my current nvram settings, I see that the Motorola is indeed configured for the 192.168.10.0 net among other "weird" setting (from an OpenWRT firmware standpoint)!

Re: motorola wr850g 32mb ram Anyone flash anything into this?

Has anyone had luck getting WEP or WPA to work?

Ok.. a reboot fixed WEP.. but reboots dont seem to fix WPA

Everytime I set it, Windows says it's enabled, but when I type a key in, it always fails to connect..
Hmm.. I really don't want to run an open network...  Maybe I should just use PPTP to protect the wireless network.. and only allow the pptp port to pass..  That's less than elegant though.

Re: motorola wr850g 32mb ram Anyone flash anything into this?

What are the pins to restore the flash to default for this unit?

What is the serial pin-out to access the CFE?

Anyone knows !!!

Re: motorola wr850g 32mb ram Anyone flash anything into this?

What are the pins to restore the flash to default for this unit?

What is the serial pin-out to access the CFE?

Anyone knows !!!

Are you talking about restoring to the Motorola firmware?
I believe you should be able to just enable boot_wait (if it isnt already) and tftp it back in.

The CFE pinouts should be here:
http://openwrt.org/OpenWrtDocs/Hardware/Motorola/WR850G?highlight=%28OpenWrtDocs%2FHardware%29

Re: motorola wr850g 32mb ram Anyone flash anything into this?

At,
I tried that. It does not work for me.
I have a pl2303 prolific connected to the serial but I'm not sure about the pinout