Re: Thomson TG585v7

The problem is that a lot of the time you end up stuck at a particular version regardless.
Examples:
Android 1.5-2.1 all use 2.6.29 kernel
Android 2.2 uses 2.6.32 kernel (barely released on any devices and already 3 versions behind)
TARPIT netfilter target - latest patch is for 2.6.29. I ported it to 2.6.30, but after that there are other changes that require extra work to port it, and it more effort than I can be bothered to put in, so I'm sticking with it.
Pretty much ANY major full fat Linux distribution - they stick with the kernel it was released with, and only apply necessary patches.

Unless there is a particularly important feature added in a later version that you need to use, then I guess that's far enough. But how likely is it that this will happen, especially when the hardware in question is fixed and non-upgradable?

Either way, as you say, the problem is that v6 hardware is slightly different and a lot of this thread might not apply to it.

Re: Thomson TG585v7

In that case, what i'd do is get a source release tarball for a modem similar to yours. It'll more than likely be linux 1.6.8, gcc 4.3. A few makefile hacks to build your own apps and you should be away. The only problem is with the Thomson||Speedtouch||Technicolor bootloader, it's crap. If you fancy trying it, theres a community of us who have got a redboot loader to run on a bt homehub v1/1.5 but it isn't for the faint hearted, theres a very high probability of stuffing your device. If you're familiar with jtag and its application give it a try.

The thread http://www.psidoc.com/forum/viewthread.php?thread_id=139&rowstart=0
The redboot source http://www.psidoc.com/forum/viewthread.php?thread_id=139&pid=700#post_677
The platform.o http://www.psidoc.com/forum/viewthread.php?thread_id=139&pid=700#post_700

Re: Thomson TG585v7

I am watching with interest. I'd just like to throw in some details about my own device I've been tinkering with. It is very similar to the ones mentioned in this thread. It's an Alice WLAN 1121 (SIEMENS S1621-Z220-A) from Germany.

So far I have hooked up a serial terminal and booted a ramdisk image over the network. There is no firmware available for download for this device so I am not going to flash it until I have everything working that I need.

To make openwrt boot the kernel, I had to add a new device to board_bcm963xx.c. I basically copied the entry for 96338W and made a new one for 96338W2.

Are we not able to use the broadcom-wl driver because of this SDIO thing? This page says that my BCM4312 should be supported: http://wiki.archlinux.org/index.php/Broadcom_BCM43XX.

Anyway, I'm quite new to openwrt but I will help were I can. I am happy to write a wiki page for this device with the information I have so far if it's not too premature.

Here is a dump from the serial console from the original firmware:

CFE version 1.0.37-12.1 for BCM96338 (32bit,SP,BE)
Build Date: Fri Nov 14 16:18:28 CST 2008 (root@localhost.localdomain)
Copyright (C) 2000-2006 Broadcom Corporation.

Boot Address 0xbfc00000

Initializing Arena.
Initializing Devices.
Parallel flash device: name MX29LV320AB, id 0x22a8, size 4096KB
CPU type 0x29010: 240MHz
Total memory: 16777216 bytes (16MB)

Total memory used by CFE:  0x80401000 - 0x805281D0 (1208784)
Initialized Data:          0x8041D700 - 0x8041F9F0 (8944)
BSS Area:                  0x8041F9F0 - 0x804261D0 (26592)
Local Heap:                0x804261D0 - 0x805261D0 (1048576)
Stack Area:                0x805261D0 - 0x805281D0 (8192)
Text (code) segment:       0x80401000 - 0x8041D6F8 (116472)
Boot area (physical):      0x00529000 - 0x00569000
Relocation Factor:         I:00000000 - D:00000000

Board IP address                  : 192.168.1.1:ffffff00  
Host IP address                   : 192.168.1.159  
Gateway IP address                :   
Run from flash/host (f/h)         : h  
Default host run file name        : 308nfs6358  
Default host flash file name      : bcm963xx_fs_kernel  
Boot delay (0-9 seconds)          : 1
Board Id (0-9)                    : 96338W2
Number of MAC Addresses (1-32)    : 11  
Base MAC Address                  : 00:1e:40:da:92:5a  
PSI Size (1-64) KBytes            : 24  

*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 110
Booting from only image (0xbfc10000) ...
Code Address: 0x80010000, Entry Address: 0x801ad018
Decompression OK!
Entry at 0x801ad018
Closing network.
Starting program at 0x801ad018
Linux version 2.6.8.1 (root@localhost.localdomain) (gcc version 3.4.2) #1 Fri Nov 21 15:48:30 CST 2008
Parallel flash device: name MX29LV320AB, id 0x22a8, size 4096KB
96338W2 prom init
CPU revision is: 00029010
Determined physical RAM map:
memory: 00fa0000 @ 00000000 (usable)
On node 0 totalpages: 4000
DMA zone: 4000 pages, LIFO batch:1
Normal zone: 0 pages, LIFO batch:1
HighMem zone: 0 pages, LIFO batch:1
Built 1 zonelists
Kernel command line: root=31:0 ro noinitrd console=ttyS0,115200
brcm mips: enabling icache and dcache...
Primary instruction cache 16kB, physically tagged, 2-way, linesize 16 bytes.
Primary data cache 8kB 2-way, linesize 16 bytes.
PID hash table entries: 64 (order 6: 512 bytes)
Using 120.000 MHz high precision timer.
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 13924k/16000k available (1439k kernel code, 2056k reserved, 208k data, 68k init, 0k highmem)
KLOB Pool 1 Initialized: 1048576 bytes <0x80e00000 ... 0x80f00000>
Calibrating delay loop... 239.20 BogoMIPS
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
Checking for 'wait' instruction...  unavailable.
NET: Registered protocol family 16
Total Flash size: 4096K with 71 sectors
File system address: 0xbfc10100
Blk# BlkOff Blks  MemLen Partition Name
 0   1408    1    1024 NVRAM
69  40960    1   24576 Config 2
70  32768    1    8192 Scratch PAD
70  40960    1   24576 Config 1
Can't analyze prologue code at 80176654
Initializing Cryptographic API
PPP generic driver version 2.4.2
NET: Registered protocol family 24
Using noop io scheduler
bcm963xx_mtd driver v1.0
brcmboard: brcm_board_init entry
SES: Button Interrupt 0x0 is enabled
SES: LED GPIO 0x8004 is enabled
initLed: led[0]: mask=0x0000, state=0
initLed: led[1]: mask=0x0002, state=0
initLed: led[2]: mask=0x0010, state=0
initLed: led[3]: mask=0x0001, state=0
initLed: led[4]: mask=0x0020, state=1
Serial: BCM63XX driver $Revision: 3.00 $
ttyS0 at MMIO 0xfffe0300 (irq = 10) is a BCM63XX
NET: Registered protocol family 2
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 512 bind 1024)
Initializing IPsec netlink socket
NET: Registered protocol family 1
NET: Registered protocol family 17
NET: Registered protocol family 15
Ebtables v2.0 registered
NET: Registered protocol family 8
NET: Registered protocol family 20
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 68k freed
init started:  BusyBox v1.00 (2008.11.21-07:57+0000) multi-call binary
Algorithmics/MIPS FPU Emulator v1.5


BusyBox v1.00 (2008.11.21-07:57+0000) Built-in shell (msh)
Enter 'help' for a list of built-in commands.


Loading drivers and kernel modules...

atmapi: module license 'Proprietary' taints kernel.
adsl: adsl_init entry
blaadd: blaa_detect entry
Broadcom BCMPROCFS v1.0 initialized
Broadcom BCM6338A2 Ethernet Network Device v0.3 Nov 21 2008 15:45:54
Config Ethernet Switch Through MDIO Pseudo PHY Interface
ethsw: found bcm5325e!
dgasp: kerSysRegisterDyingGaspHandler: eth0 registered
eth0: MAC Address: 00:1E:40:DA:92:5A
SDIOH mode switch from 1 to 2
available commands: sdio sdioh

---SDIO init SUCCEEDED--- blockmode capable

chipid 0x4014312
chip is bcm4312, use 512 bytes blksize
bcmsdh_attach, sdioh_attach successful, bcmsdh->sdioh 0x80e9a760
wl: srom not detected, using main memory mapped srom info (wombo board)
wl0: wlc_attach: use mac addr from the system pool by id: 0x776c0000
wl0: MAC Address: 00:1E:40:DA:92:5B
wl0: Broadcom BCM4318 802.11 Wireless Controller 4.170.16.0.cpe2.1sd1
dgasp: kerSysRegisterDyingGaspHandler: wl0 registered
Trying to free free IRQ25
BcmAdsl_Initialize=0xC00663E8, g_pFnNotifyCallback=0xC0080FE4
AnnexCParam=0x7FFF7EB8 AnnexAParam=0x00003981 adsl2=0x00000000
pSdramPHY=0xA0FFFFF8, 0xFFBFFFDF 0x7FFFFFFF
AdslCoreHwReset:  AdslOemDataAddr = 0xA0FF9504
AnnexCParam=0x7FFF7EB8 AnnexAParam=0x00003981 adsl2=0x00000000
dgasp: kerSysRegisterDyingGaspHandler: dsl0 registered
ATM proc init !!!
ip_tables: (C) 2000-2002 Netfilter core team
ip_conntrack version 2.1 (125 buckets, 0 max) - 384 bytes per conntrack
ip_conntrack_pptp version 2.1 loaded
ip_nat_pptp version 2.0 loaded
ip_ct_h323: init success
ip_nat_h323: init success
BRCM NAT Caching v1.0 Nov 20 2007 10:22:27
BRCM NAT Cache: Hooking hit function @ c00a1088
ip_conntrack_rtsp v0.01 loading
ip_nat_rtsp v0.01 loading

==>   Bcm963xx Software Version: 3.12L.01.B2pB023k.d20k_rc2   <==

device eth0 entered promiscuous mode
br0: port 1(eth0) entering learning state
br0: topology change detected, propagating
br0: port 1(eth0) entering forwarding state
defaultWPAKEY2=====================177647c793aac9
mac======177647c793aac9
dest2======MTc3NjQ3Yzc5M2FhYzk=
dest======MTc3NjQ3Yzc5M2Fh
defaultWPAKEY1=====================MTc3NjQ3Yzc5M2Fh
Setting SSID "TUCKER-ALICE1"
Setting country code using abbreviation: "DE"
device wl0 entered promiscuous mode
br0: port 2(wl0) entering learning state
br0: topology change detected, propagating
br0: port 2(wl0) entering forwarding state
startWsc@3229 cfg_state=[1] wsc_mode=enabled
WlMngr::startWsc: client-pbc mode
*********************************************
Wi-Fi Simple Config Application - Intel Corp.
Version: Build 1.0.5, November 19 2006
*********************************************
Created @ Nov 20 2007 10:51:36
Initializing stack...button monitor start...!
OK
Now starting stack
get mac = 00 1E 40 DA 92 5B
UdpLib: Entered udp_open
UdpLib: Socket open successful, sd: 12
UdpLib: Entered udp_bind
UdpLib: Binding successful for socket [12]
UdpLib: Entered udp_read
UdpLib: Entered udp_open
UdpLib: Socket open successful, sd: 13
UdpLib: Entered udp_bind
UdpLib: Binding successful for socket [13]
UdpLib: Entered udp_read
UdpLib: Entered udp_open
UdpLib: Socket open successful, sd: 11
UdpLib: Entered udp_write: len 5
UdpLib: Read 5 bytes
UdpLib: Entered udp_read
BcmRfc2684_init interface is not up nas_0_1_32!
pvc2684ctl -a -v 0.1.32 -f &
pvc2684d: Interface "nas_0_1_32" created sucessfully

pvc2684d: Communicating over ATM 0.1.32, encapsulation: LLC

device nas_0_1_32 entered promiscuous mode
br0: port 3(nas_0_1_32) entering learning state
br0: topology change detected, propagating
br0: port 3(nas_0_1_32) entering forwarding state
BcmRfc2684_init interface is not up nas_0_2_32!
pvc2684ctl -a -v 0.2.32 &
pvc2684d: Interface "nas_0_2_32" created sucessfully

pvc2684d: Communicating over ATM 0.2.32, encapsulation: LLC

device nas_0_2_32 entered promiscuous mode
br0: port 4(nas_0_2_32) entering learning state
br0: topology change detected, propagating
br0: port 4(nas_0_2_32) entering forwarding state
BcmRfc2684_init interface is not up nas_0_2_33!
pvc2684ctl -a -v 0.2.33 &
pvc2684d: Interface "nas_0_2_33" created sucessfully

pvc2684d: Communicating over ATM 0.2.33, encapsulation: LLC

device nas_0_2_33 entered promiscuous mode
br0: port 5(nas_0_2_33) entering learning state
br0: topology change detected, propagating
br0: port 5(nas_0_2_33) entering forwarding state
BcmRfc2684_init interface is not up nas_0_1_34!
pvc2684ctl -a -v 0.1.34 &
pvc2684d: Interface "nas_0_1_34" created sucessfully

pvc2684d: Communicating over ATM 0.1.34, encapsulation: LLC

device nas_0_1_34 entered promiscuous mode
br0: port 6(nas_0_1_34) entering learning state
br0: topology change detected, propagating
br0: port 6(nas_0_1_34) entering forwarding state
BcmRfc2684_init interface is not up nas_0_8_35!
pvc2684ctl -a -v 0.8.35 &
pvc2684d: Interface "nas_0_8_35" created sucessfully

pvc2684d: Communicating over ATM 0.8.35, encapsulation: LLC

device nas_0_8_35 entered promiscuous mode
br0: port 7(nas_0_8_35) entering learning state
br0: topology change detected, propagating
br0: port 7(nas_0_8_35) entering forwarding state
device eth0 left promiscuous mode
br0: port 1(eth0) entering disabled state
eth0.2: MAC Address: 00:1E:40:DA:92:5A
eth0.3: MAC Address: 00:1E:40:DA:92:5A
eth0.4: MAC Address: 00:1E:40:DA:92:5A
UdpLib: Entered udp_write: len 21
UdpLib: Entered udp_write: len 125
UdpLib: Entered udp_read
UdpLib: Read 21 bytes

******* MODE: AP with built-in Registrar and UPnP Proxy *******
wsc_del_ie: no valid ie was saved, len = -1
WSC: Build-in Registrar, wait for start command....
eth0.5: MAC Address: 00:1E:40:DA:92:5A
UdpLib: Entered udp_read
UdpLib: Read 125 bytes
wsc_del_ie: no valid ie was saved, len = -1
device wl0 left promiscuous mode
br0: port 2(wl0) entering disabled state
device nas_0_2_32 left promiscuous mode
br0: port 4(nas_0_2_32) entering disabled state
device nas_0_2_33 left promiscuous mode
br0: port 5(nas_0_2_33) entering disabled state
device nas_0_1_34 left promiscuous mode
br0: port 6(nas_0_1_34) entering disabled state
device nas_0_8_35 left promiscuous mode
br0: port 7(nas_0_8_35) entering disabled state
device wl0 entered promiscuous mode
br0: port 1(wl0) entering learning state
br0: topology change detected, propagating
br0: port 1(wl0) entering forwarding state
device eth0.2 entered promiscuous mode
br0: port 2(eth0.2) entering learning state
br0: topology change detected, propagating
br0: port 2(eth0.2) entering forwarding state
device eth0.3 entered promiscuous mode
br0: port 4(eth0.3) entering learning state
br0: topology change detected, propagating
br0: port 4(eth0.3) entering forwarding state
device eth0.4 entered promiscuous mode
br0: port 5(eth0.4) entering learning state
br0: topology change detected, propagating
br0: port 5(eth0.4) entering forwarding state
device eth0.5 entered promiscuous mode
br1: port 1(eth0.5) entering learning state
br1: topology change detected, propagating
br1: port 1(eth0.5) entering forwarding state
device nas_0_2_32 entered promiscuous mode
br1: port 2(nas_0_2_32) entering learning state
br1: topology change detected, propagating
br1: port 2(nas_0_2_32) entering forwarding state
device nas_0_2_33 entered promiscuous mode
br1: port 3(nas_0_2_33) entering learning state
br1: topology change detected, propagating
br1: port 3(nas_0_2_33) entering forwarding state
device nas_0_1_34 entered promiscuous mode
br1: port 4(nas_0_1_34) entering learning state
br1: topology change detected, propagating
br1: port 4(nas_0_1_34) entering forwarding state
device nas_0_8_35 entered promiscuous mode
br0: port 6(nas_0_8_35) entering learning state
br0: topology change detected, propagating
br0: port 6(nas_0_8_35) entering forwarding state
get_manual_ppp 0
br0: port 2(eth0.2) entering disabled state
br0: port 4(eth0.3) entering disabled state
br0: port 5(eth0.4) entering disabled state
br1: port 1(eth0.5) entering disabled state

And one from openwrt:

                                                                       
CFE version 1.0.37-12.1 for BCM96338 (32bit,SP,BE)                                                                
Build Date: Fri Nov 14 16:18:28 CST 2008 (root@localhost.localdomain)                                             
Copyright (C) 2000-2006 Broadcom Corporation.                                                                     
                                                                                                                  
Boot Address 0xbfc00000                                                                                           
                                                                                                                  
Initializing Arena.                                                                                               
Initializing Devices.                                                                                             
Parallel flash device: name MX29LV320AB, id 0x22a8, size 4096KB                                                   
CPU type 0x29010: 240MHz                                                                                          
Total memory: 16777216 bytes (16MB)                                                                               
                                                                                                                  
Total memory used by CFE:  0x80401000 - 0x805281D0 (1208784)                                                      
Initialized Data:          0x8041D700 - 0x8041F9F0 (8944)                                                         
BSS Area:                  0x8041F9F0 - 0x804261D0 (26592)                                                        
Local Heap:                0x804261D0 - 0x805261D0 (1048576)                                                      
Stack Area:                0x805261D0 - 0x805281D0 (8192)                                                         
Text (code) segment:       0x80401000 - 0x8041D6F8 (116472)                                                       
Boot area (physical):      0x00529000 - 0x00569000                                                                
Relocation Factor:         I:00000000 - D:00000000                                                                
                                                                                                                  
Board IP address                  : 192.168.1.1:ffffff00                                                          
Host IP address                   : 192.168.1.10                                                                  
Gateway IP address                :                                                                               
Run from flash/host (f/h)         : h                                                                             
Default host run file name        : openwrt-brcm63xx-vmlinux-nowlan.elf                                           
Default host flash file name      : bcm963xx_fs_kernel                                                            
Boot delay (0-9 seconds)          : 3                                                                             
Board Id (0-9)                    : 96338W2                                                                       
Number of MAC Addresses (1-32)    : 11                                                                            
Base MAC Address                  : 00:1e:40:da:92:5a                                                             
PSI Size (1-64) KBytes            : 24                                                                            
                                                                                                                  
*** Press any key to stop auto run (3 seconds) ***                                                                
Auto run second count down: 2                                                                                     
web info: Waiting for connection on socket 0.                                                                     
CFE>                                                                                                              
CFE> r                                                                                                            
0x80010000/3869688 0x803c0bf8/137688 Entry at 0x80014310                                                          
Closing network.                                                                                                  
Starting program at 0x80014310                                                                                    
Linux version 2.6.32.16 (luke@xenon.fritz.box) (gcc version 4.3.3 (GCC) ) #1 Tue Oct 26 00:59:57 CEST 2010        
Detected Broadcom 0x6338 CPU revision a2                                                                          
CPU frequency is 240 MHz                                                                                          
16MB of RAM installed                                                                                             
registering 8 GPIOs                                                                                               
board_bcm963xx: CFE version: 1.0.37-12.1                                                                          
bootconsole [early0] enabled                                                                                      
CPU revision is: 00029010 (Broadcom BCM6338)                                                                      
board_bcm963xx: board name: 96338W2                                                                               
Determined physical RAM map:                                                                                      
 memory: 01000000 @ 00000000 (usable)                                                                             
Initrd not found or empty - disabling initrd                                                                      
Zone PFN ranges:                                                                                                  
  Normal   0x00000000 -> 0x00001000                                                                               
Movable zone start PFN for each node                                                                              
early_node_map[1] active PFN ranges                                                                               
    0: 0x00000000 -> 0x00001000                                                                                   
Built 1 zonelists in Zone order, mobility grouping off.  Total pages: 4064                                        
Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200                  
PID hash table entries: 64 (order: -4, 256 bytes)                                                                 
Dentry cache hash table entries: 2048 (order: 1, 8192 bytes)                                                      
Inode-cache hash table entries: 1024 (order: 0, 4096 bytes)                                                       
Primary instruction cache 16kB, VIPT, 2-way, linesize 16 bytes.                                                   
Primary data cache 8kB, 2-way, VIPT, no aliases, linesize 16 bytes                                                
Memory: 12240k/16384k available (2053k kernel code, 4144k reserved, 361k data, 1364k init, 0k highmem)            
Hierarchical RCU implementation.                                                                                  
NR_IRQS:128                                                                                                       
Calibrating delay loop... 238.59 BogoMIPS (lpj=477184)                                                            
Mount-cache hash table entries: 512                                                                               
NET: Registered protocol family 16                                                                                
bio: create slab <bio-0> at 0                                                                                     
Switching to clocksource MIPS                                                                                     
NET: Registered protocol family 2                                                                                 
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)                                                    
TCP established hash table entries: 512 (order: 0, 4096 bytes)                                                    
TCP bind hash table entries: 512 (order: -1, 2048 bytes)                                                          
TCP: Hash tables configured (established 512 bind 512)                                                            
TCP reno registered                                                                                               
NET: Registered protocol family 1                                                                                 
audit: initializing netlink socket (disabled)                                                                     
type=2000 audit(5.261:1): initialized                                                                             
squashfs: version 4.0 (2009/01/31) Phillip Lougher                                                                
Registering mini_fo version $Id$                                                                                  
JFFS2 version 2.2. (NAND) (SUMMARY)  ?? 2001-2006 Red Hat, Inc.                                                   
msgmni has been set to 23                                                                                         
io scheduler noop registered                                                                                      
io scheduler deadline registered (default)                                                                        
gpiodev: gpio device registered with major 254                                                                    
gpiodev: gpio platform device registered with access mask FFFFFFFF                                                
bcm63xx_uart.0: ttyS0 at MMIO 0xfffe0300 (irq = 10) is a bcm63xx_uart                                             
console [ttyS0] enabled, bootconsole disabled                                                                     
console [ttyS0] enabled, bootconsole disabled                                                                     
bcm963xx_flash: 0x00400000 at 0x1fc00000                                                                          
bcm963xx: Found 1 x16 devices at 0x0 in 16-bit bank                                                               
 CFI mfr 0x000000c2                                                                                               
 CFI id  0x000022a8                                                                                               
 Amd/Fujitsu Extended Query Table at 0x0040                                                                       
  Amd/Fujitsu Extended Query version 1.1.                                                                         
number of CFI chips: 1                                                                                            
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.                                          
bcm963xx_flash: Read Signature value of CFE1CFE1                                                                  
bcm963xx_flash: CFE bootloader detected                                                                           
bcm963xx_flash: CFE boot tag found with version 6 and board type 96338W2                                          
bcm963xx_flash: Partition 0 is CFE offset 0 and length 10000                                                      
bcm963xx_flash: Partition 1 is kernel offset 32c100 and length 84830                                              
bcm963xx_flash: Partition 2 is rootfs offset 3b0930 and length 3f6d0                                              
bcm963xx_flash: Partition 3 is nvram offset 3f0000 and length 10000                                               
bcm963xx_flash: Partition 4 is linux offset 10000 and length 3e0000                                               
bcm963xx_flash: Spare partition is 3c0000 offset and length 30000                                                 
Creating 5 MTD partitions on "bcm963xx":                                                                          
0x000000000000-0x000000010000 : "CFE"                                                                             
0x00000032c100-0x0000003b0930 : "kernel"                                                                          
mtd: partition "kernel" must either start or end on erase block boundary or be smaller than an erase block -- fory
0x0000003b0930-0x0000003f0000 : "rootfs"                                                                          
mtd: partition "rootfs" must either start or end on erase block boundary or be smaller than an erase block -- fory
mtd: partition "rootfs" set to be root filesystem                                                                 
split_squashfs: no squashfs found in "bcm963xx"                                                                   
0x0000003f0000-0x000000400000 : "nvram"                                                                           
0x000000010000-0x0000003f0000 : "linux"                                                                           
bcm63xx_wdt started, timer margin: 30 sec                                                                         
Registered led device: adsl                                                                                       
Registered led device: ses                                                                                        
Registered led device: ppp-fail                                                                                   
Registered led device: power                                                                                      
Registered led device: stop                                                                                       
TCP westwood registered                                                                                           
NET: Registered protocol family 17                                                                                
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>                                                     
All bugs added by David S. Miller <davem@redhat.com>                                                              
Freeing unused kernel memory: 1364k freed                                                                         
- preinit -                                                                                                       
Press the [f] key and hit [enter] to enter failsafe mode                                                          
- regular preinit -                                                                                               
- init -                                                                                                          
                                                                                                                  
Please press Enter to activate this console. eth0: link forced UP - 100/full - flow control off/off               
Compat-wireless backport release: compat-wireless--2010-09-02-9-gf63dbfd                                          
Backport based on wireless-2.6.git v2.6.36-rc4-47529-g4697e4e                                                     
cfg80211: Calling CRDA to update world regulatory domain                                                          
cfg80211: World regulatory domain updated:                                                                        
    (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp)                                             
    (2402000 KHz - 2472000 KHz @ 40000 KHz), (300 mBi, 2000 mBm)                                                  
    (2457000 KHz - 2482000 KHz @ 20000 KHz), (300 mBi, 2000 mBm)                                                  
    (2474000 KHz - 2494000 KHz @ 20000 KHz), (300 mBi, 2000 mBm)                                                  
    (5170000 KHz - 5250000 KHz @ 40000 KHz), (300 mBi, 2000 mBm)                                                  
    (5735000 KHz - 5835000 KHz @ 40000 KHz), (300 mBi, 2000 mBm)                                                  
roboswitch: Probing device eth0: found a 5325! It's a 5350.                                                       
There is already a switch registered on the device 'eth0'                                                         
Broadcom 43xx driver loaded [ Features: PL, GPIO LED Mask: 0x000f, Firmware-ID: FW13 ]                            
PPP generic driver version 2.4.2                                                                                  
ip_tables: (C) 2000-2006 Netfilter Core Team                                                                      
NET: Registered protocol family 24                                                                                
nf_conntrack version 0.5.0 (212 buckets, 848 max)                                                                 
                                                                                                                  
                                                                                                                  
                                                                                                                  
BusyBox v1.15.3 (2010-10-26 00:39:42 CEST) built-in shell (ash)                                                   
Enter 'help' for a list of built-in commands.                                                                     
                                                                                                                  
  _______                     ________        __                                                                  
 |       |.-----.-----.-----.|  |  |  |.----.|  |_                                                                
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|                                                               
 |_______||   __|_____|__|__||________||__|  |____|                                                               
          |__| W I R E L E S S   F R E E D O M                                                                    
 Backfire (10.03, r23591) --------------------------                                                              
  * 1/3 shot Kahlua    In a shot glass, layer Kahlua                                                              
  * 1/3 shot Bailey's  on the bottom, then Bailey's,                                                              
  * 1/3 shot Vodka     then Vodka.                                                                                
 ---------------------------------------------------                                                              
root@OpenWrt:/#

Re: Thomson TG585v7

One idea for debrick modem jejejej, i`m reflash modem with wholeflash, but no recovery jeje

80 (edited by routednbooted 2010-11-22 14:09:31)

Re: Thomson TG585v7

humberto121,

I assume from what you are saying that you have bricked your router when flashing the wholeflash back via jtag.

Did you switch the endianness of the backup before flashing it back?

81 (edited by humberto121 2010-11-22 16:37:40)

Re: Thomson TG585v7

I backup (wholeflash), but with flashed cfe brick and terminal serial  display text "Decompress Botloader"I turn the modem is turned on only the red power LED. I try recovery with wholesflash:

./tjtag3 -flash:wholeflash /fc:85 /bypass /st5
In ubuntu, but didn't working

82 (edited by humberto121 2010-11-22 19:34:58)

Re: Thomson TG585v7

Ups i recovery flash with wholeflash and

./tjtag3 -erase:nvram /fc:85 /bypass /st5

Flash cfe and terminal serial 115200 display here messasge

Reupload please you cfe big_smile


CFE version 1.0.37-6.5.17 for BCM96338 (32bit,SP,BE)

Copyright (C) 2000-2005 Broadcom Corporation.

Boot Address 0xbfc00000

Initializing Arena.

Initializing Devices.

Parallel flash device id 2257 is not supported.

Get Ether Mac Info Failed, use internal as default !

Unknown PHY type

** Image information not found. **

**Exception 32: EPC=00000000, Cause=00000000 (Interrupt)

                RA=00403700, VAddr=32355034

        0  ($00) = 00000000     AT ($01) = 00000000

        v0 ($02) = 00000000     v1 ($03) = 8052815D

        a0 ($04) = 00000000     a1 ($05) = 80420000

        a2 ($06) = 80420000     a3 ($07) = 80420000

        t0 ($08) = 80420000     t1 ($09) = 00000000

        t2 ($10) = 00000000     t3 ($11) = 35464C30

        t4 ($12) = 496D6167     t5 ($13) = 666F726D

        t6 ($14) = 6E206E6F     t7 ($15) = 756E642E

        s0 ($16) = 0A000000     s1 ($17) = 00000000

        s2 ($18) = 00000000     s3 ($19) = 8041FB10

        s4 ($20) = 80426178     s5 ($21) = 8041A4A8

        s6 ($22) = 80426C20     s7 ($23) = 80435EF4

        t8 ($24) = B9BFA7BF     t9 ($25) = 80426178

        k0 ($26) = 80420000     k1 ($27) = 8041A4A8

        gp ($28) = 8040EAA8     sp ($29) = 80420000

        fp ($30) = 00000000     ra ($31) = 00403700

CFE version 1.0.37-6.5.17 for BCM96338 (32bit,SP,BE)

Copyright (C) 2000-2005 Broadcom Corporation.

Boot Address 0xbfc00000

83 (edited by humberto121 2010-11-24 09:25:36)

Re: Thomson TG585v7

Please reup link big_smile http://rapidshare.com/files/420538739/cfe.bin.zip

Re: Thomson TG585v7

Hi there!

Is there chance that THOMSON ST780iWL could be supported?

Tnx.

OpenWRT trunk r27772 @ SX763
OpenWRT backfire 10.03 @ DSL-G684T

Re: Thomson TG585v7

link down http://rapidshare.com/files/420538739/cfe.bin.zip

Re: Thomson TG585v7

I think this is the one. its the only one i have with the name cfe.bin.zip http://www.mediafire.com/?33pzii8e3nxx7pi

Re: Thomson TG585v7

i have a tg585 V7 A2, and is missing D1 from backplane, what is the value for this diode? for now i power up with 19V DC, and is dead, nothing. Any ideea?

Re: Thomson TG585v7

Both my device sticker and psu say 22VDC @ 545mA, center positive. Maybe your psu is not the right one?

Diode D1 markings,
The 'S' is a manufacturer logo..

'S'050F
SM240A

D2 is the same.

Re: Thomson TG585v7

my psu is a psu from my notebook. and is fine. i notice that close to D1 is a chip and close to D2 is the same circuit. is it posibile that the modem will not start because of missing D1? the circuit close to D1 and D2 is posible a power regulator?

Re: Thomson TG585v7

Check for voltage at either side of D11, if no voltage, check R908 (just behind the DC jack, it's a sort of thermistor)

D1 and D2 look like protection for the regulators U3 and U4 from inductors L3 and L5. The voltage at the outside (the end away from the diodes) of L3 is ~3.3V and L5 is ~1.8V.

Re: Thomson TG585v7

on L3, i have 0.88V, not even closer to ~3.3V. i replace the missing diode with GS1G. I thing is ok. Do you have any ideea what the voltahe is so low?

Re: Thomson TG585v7

Is pin 4 of the regulator(?) chip still connected to +V.

I had a look but i have not yet found a data sheet for this chip, have you? I assume it is some sort of Pulse Width Modulated (maybe?) Voltage Regulator Module?

Re: Thomson TG585v7

i don't find any datasheet. the chip has 5 pins, and the first four is conected to +V. i am right?

Re: Thomson TG585v7

Looked like just pin 4. I'll have to dismantle it again to check. Hold tight and i'll get back to you, im a bit busy atm.

Re: Thomson TG585v7

any news? do you have any ID ? yahoo?hotmail?

Re: Thomson TG585v7

I'm having the same problem as humberto121 using the cfe from the last upload.
Can someone reupload the cfe or point me in the right direction to resolve this issue




CFE version 1.0.37-6.5.17 for BCM96338 (32bit,SP,BE)
Copyright (C) 2000-2005 Broadcom Corporation.

Boot Address 0xbfc00000

Initializing Arena.
Initializing Devices.
Parallel flash device id 2257 is not supported.
Get Ether Mac Info Failed, use internal as default !
Unknown PHY type

** Image information not found. **

**Exception 32: EPC=00000000, Cause=00000000 (Interrupt)
                RA=00403700, VAddr=32355034

        0  ($00) = 00000000     AT ($01) = 00000000
        v0 ($02) = 00000000     v1 ($03) = 8052815D
        a0 ($04) = 00000000     a1 ($05) = 80420000
        a2 ($06) = 80420000     a3 ($07) = 80420000
        t0 ($08) = 80420000     t1 ($09) = 00000000
        t2 ($10) = 00000000     t3 ($11) = 35464C30
        t4 ($12) = 496D6167     t5 ($13) = 666F726D
        t6 ($14) = 6E206E6F     t7 ($15) = 756E642E
        s0 ($16) = 0A000000     s1 ($17) = 00000000
        s2 ($18) = 00000000     s3 ($19) = 8041FB10
        s4 ($20) = 80426178     s5 ($21) = 8041A4A8
        s6 ($22) = 80426C20     s7 ($23) = 80435EF4
        t8 ($24) = 4C62F9CE     t9 ($25) = 80426178
        k0 ($26) = 80420000     k1 ($27) = 8041A4A8
        gp ($28) = 8040EAA8     sp ($29) = 80420000
        fp ($30) = 00000000     ra ($31) = 00403700

Re: Thomson TG585v7

routednbooted helo.......please help me with information

Re: Thomson TG585v7

Guys,

I am looking forward to running OpenWRT on a lot of Thomson models, even DOCSIS ones with miniPCI slot. They would be useful for AP/clients, I don't need the DOCSIS port.

I hope this project reaches maturity such that it would be extremely easy to make any Thomson model work with OpenWRT.

Best Regards.

Re: Thomson TG585v7

@ soulraven, i've been a bit busy with my new baby. let me know if you still need help.

@ NetworkPro, you have mail.

@ seb25 and humberto121, find your answer here, https://forum.openwrt.org/viewtopic.php?pid=106119#p106119 Read at least the following four posts also.

Re: Thomson TG585v7

routednbooted: Congratulations on your new baby to grow big and strong.
yes, i still need help, i can't manage to start the modem