Author
Message
imran DD-WRT Novice Joined: 10 Dec 2008 Posts: 26
Posted: Tue Dec 23, 2008 10:15 Post subject:
I am using the JTAG cable as shown below , please let me know if there is any fault in it
Also I am using a 14 pin cable and its oin 13 and 14 are not being used ... can it cause any problem
Description:
Filesize:
6.9 KB
Viewed:
39177 Time(s)
Description:
Download
Filename:
jtagcable.doc
Filesize:
102 KB
Downloaded:
1253 Time(s)
Back to top
Sponsor
kisbetu DD-WRT User Joined: 10 Dec 2008 Posts: 55
Posted: Tue Dec 23, 2008 11:35 Post subject:
Tornado wrote: did you tie 3v to pin 1 with a 100ohm resister ?
Imran!
Tornado asked about a PLUS resistor, connecting JTAG header's pin1 to 3,3V.
Did You connect it?
Back to top
Tornado DD-WRT Developer/Maintainer Joined: 07 Jun 2006 Posts: 2087 Location: Odessa, Ukraine
Posted: Tue Dec 23, 2008 17:10 Post subject:
@imran
You do not want to tie jtag pin 12 to ground, I tie only to pin 6 on the jtag pin on the router
Let me know ?
_________________ Want JTAG support - Donate a router
or Donate with PayPal !
My preferred parallel jtag adapter:
TIAO Parallel adapter
Tjtag website - http://tjtag.com
Compiling DD-WRT on:
AMD Phenom II X6 1090T @ 3926.667 Mhz
Aptosid X64 - Debian SID X64
Ubuntu 10.10 X64 - Arch X64
Back to top
imran DD-WRT Novice Joined: 10 Dec 2008 Posts: 26
Posted: Wed Dec 24, 2008 11:07 Post subject:
I have connected all four pins as shown in that picture. Do you mean to say that I need to connect only pin6, all other three pins should be open ?
Back to top
Tornado DD-WRT Developer/Maintainer Joined: 07 Jun 2006 Posts: 2087 Location: Odessa, Ukraine
Posted: Wed Dec 24, 2008 13:45 Post subject:
What Im saying is, is that I only connect pin 18-25 from the parallel port to pin 6 on the target board. You can tie others but you have to make sure they are only ground pins. For Broadcom based boxes you do not want to connect to pin 12 on the jtag connecter as a ground.
_________________ Want JTAG support - Donate a router
or Donate with PayPal !
My preferred parallel jtag adapter:
TIAO Parallel adapter
Tjtag website - http://tjtag.com
Compiling DD-WRT on:
AMD Phenom II X6 1090T @ 3926.667 Mhz
Aptosid X64 - Debian SID X64
Ubuntu 10.10 X64 - Arch X64
Back to top
Victek DD-WRT Novice Joined: 05 Jan 2008 Posts: 7
Posted: Fri Dec 26, 2008 22:31 Post subject:
WRT160N V.1.0 jtag v3 working, here is the pinout. ah! /fc:98 in this case, check for different flash memory.
Paralel Port-----------> PCB WRT 160N (JP1)
Pin 2 (TDI) ----------------------.> Pad RH6
Pin 3 (TCK)----------------------.> Pad RH14
Pin 4 (TMS)----------------------.> Pad RH11
Pin 13 (TD0)---------------------,> Pad RH7
Pin 20-25 (GND) ---------------,> Pad RH15
more info an test here: http://www.adslzone.net/postt174111.html
Regards
Last edited by Victek on Mon Dec 29, 2008 18:54; edited 1 time in total
Back to top
Shawn360 DD-WRT Guru Joined: 26 Jul 2008 Posts: 1237
Posted: Fri Dec 26, 2008 23:35 Post subject:
Victek wrote: WRT160N jtag v3 working, here is the pinout. ah! /fc:99
Paralel Port-----------> PCB WRT 160N (JP1)
Pin 2 (TDI) ----------------------.> Pad RH6
Pin 3 (TCK)----------------------.> Pad RH14
Pin 4 (TMS)----------------------.> Pad RH11
Pin 13 (TD0)---------------------,> Pad RH7
Pin 20-25 (GND) ---------------,> Pad RH15
more info an test here: http://www.adslzone.net/postt174111.html
Regards
Support for 8bit buses is working at least for WRT160N great.
Back to top
Tornado DD-WRT Developer/Maintainer Joined: 07 Jun 2006 Posts: 2087 Location: Odessa, Ukraine
Posted: Sat Dec 27, 2008 5:00 Post subject:
Shawn, did you test this on the WRT160N ? I was having some problems with 8 bit on Atheros, but I don't have any 8bit bus devices to work with either.
_________________ Want JTAG support - Donate a router
or Donate with PayPal !
My preferred parallel jtag adapter:
TIAO Parallel adapter
Tjtag website - http://tjtag.com
Compiling DD-WRT on:
AMD Phenom II X6 1090T @ 3926.667 Mhz
Aptosid X64 - Debian SID X64
Ubuntu 10.10 X64 - Arch X64
Back to top
kisbetu DD-WRT User Joined: 10 Dec 2008 Posts: 55
Posted: Sat Dec 27, 2008 8:26 Post subject:
Hi Tornado!
Some weeks ago I made tests with a 160N, but I had to give it back.
When You published v3-RC1, the guy tried it.
This is the "result":
==============================================
EJTAG Debrick Utility v3.0 RC1 Tornado-MOD
==============================================
Probing bus ... Done
Instruction Length set to 8
CPU Chip ID: 10010100011100000100000101111111 (9470417F)
*** Found a Broadcom BCM4704 KPBG Rev 9 CPU chip ***
- EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS32
Issuing Processor / Peripheral Reset ... ECR: 0x00248108 Done
Enabling Memory Writes ... Mem 0x0000001a
Done
Halting Processor ...
00000000001000001000000100000000 (00208100)
00000000001000000000000100000000 (00200100)
<Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Probing Flash at (Flash Window: 0x1fc00000) ...
Done
*** Unknown or NO Flash Chip Detected ***
*** REQUESTED OPERATION IS COMPLETE ***
C:\Documents and Settings\Apa\Release-RC1\Windows>
His flash chip is Eon EN29LV320AB.
As the router is far away from me, I cannot test it anymore.
Back to top
Shawn360 DD-WRT Guru Joined: 26 Jul 2008 Posts: 1237
Back to top
Tornado DD-WRT Developer/Maintainer Joined: 07 Jun 2006 Posts: 2087 Location: Odessa, Ukraine
Posted: Sat Dec 27, 2008 9:36 Post subject:
@kisbetu
I have added support for 8bit bus, but like I said, I can't really test it, no 8bit bus routers Eko has tested it a little for me...but its still hard doing testing that way.
_________________ Want JTAG support - Donate a router
or Donate with PayPal !
My preferred parallel jtag adapter:
TIAO Parallel adapter
Tjtag website - http://tjtag.com
Compiling DD-WRT on:
AMD Phenom II X6 1090T @ 3926.667 Mhz
Aptosid X64 - Debian SID X64
Ubuntu 10.10 X64 - Arch X64
Back to top
Tornado DD-WRT Developer/Maintainer Joined: 07 Jun 2006 Posts: 2087 Location: Odessa, Ukraine
Posted: Sat Dec 27, 2008 10:51 Post subject:
@Shawn360
Ok, but this is reading, not writing, BIG difference
_________________ Want JTAG support - Donate a router
or Donate with PayPal !
My preferred parallel jtag adapter:
TIAO Parallel adapter
Tjtag website - http://tjtag.com
Compiling DD-WRT on:
AMD Phenom II X6 1090T @ 3926.667 Mhz
Aptosid X64 - Debian SID X64
Ubuntu 10.10 X64 - Arch X64
Back to top
Victek DD-WRT Novice Joined: 05 Jan 2008 Posts: 7
Posted: Sat Dec 27, 2008 12:01 Post subject:
You're correct I posted the pinout, I can read BUT I can't write.
Back to top
wpaynter DD-WRT Novice Joined: 29 Dec 2008 Posts: 4
Posted: Mon Dec 29, 2008 2:45 Post subject:
I have used the jtag pinout provided by Victek and used tjtagv3-RC1 from Tornado and have success backing up a few of the various pieces (CFE,NVRAM) of the firmware of a WRT160N.
Then I tried to erase the nvram and it stopped half way.
The first code block shows the output of that command:
Code: bt linux-32 # ./tjtag3 -erase:nvram /fc:99
==============================================
EJTAG Debrick Utility v3.0 RC1 Tornado-MOD
==============================================
Probing bus ... Done
Instruction Length set to 8
CPU Chip ID: 10010100011100000100000101111111 (9470417F)
*** Found a Broadcom BCM4704 KPBG Rev 9 CPU chip ***
- EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS32
Issuing Processor / Peripheral Reset ... ECR: 0x00248108 Done
Enabling Memory Writes ... Mem 0x0000001a
Done
Halting Processor ...
00000000001000001000000100000000 (00208100)
00000000001000000000000100000000 (00200100)
<Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Manual Flash Selection ... Done
Flash Vendor ID: 00000000000000000000000001111111 (0000007F)
Flash Device ID: 00000000000000000010001011110110 (000022F6)
*** Manually Selected a EON EN29LV320 2Mx16 TopB (4MB) Flash Chip ***
- Flash Chip Window Start .... : 1fc00000
- Flash Chip Window Length ... : 00400000
- Selected Area Start ........ : 1fff0000
- Selected Area Length ....... : 00010000
*** You Selected to Erase the NVRAM.BIN ***
=========================
Erasing Routine Started
=========================
Total Blocks to Erase: 8
Erasing block: 64 (addr = 1fff0000)...Done
Erasing block: 65 (addr = 1fff2000)...Done
Erasing block: 66 (addr = 1fff4000)...Done
Erasing block: 67 (addr = 1fff6000)...Done
Erasing block: 68 (addr = 1fff8000)...
It freezes there.
Then I tried to see if I could write to those first blocks that look to be erased. (I filled a NVRAM.BIN file with /dev/urandom and tried to flash it)
The next code block shows the output of that command:
Code:
bt linux-32 # ./tjtag3 -flash:nvram /fc:99 /noerase
==============================================
EJTAG Debrick Utility v3.0 RC1 Tornado-MOD
==============================================
Probing bus ... Done
Instruction Length set to 8
CPU Chip ID: 10010100011100000100000101111111 (9470417F)
*** Found a Broadcom BCM4704 KPBG Rev 9 CPU chip ***
- EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS32
Issuing Processor / Peripheral Reset ... ECR: 0x00248108 Done
Enabling Memory Writes ... Mem 0x0000001a
Done
Halting Processor ...
00000000001000001000000100000000 (00208100)
00000000001000000000000100000000 (00200100)
<Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Manual Flash Selection ... Done
Flash Vendor ID: 00000000000000000000000001111111 (0000007F)
Flash Device ID: 00000000000000000010001011110110 (000022F6)
*** Manually Selected a EON EN29LV320 2Mx16 TopB (4MB) Flash Chip ***
- Flash Chip Window Start .... : 1fc00000
- Flash Chip Window Length ... : 00400000
- Selected Area Start ........ : 1fff0000
- Selected Area Length ....... : 00010000
*** You Selected to Flash the NVRAM.BIN ***
=========================
Flashing Routine Started
=========================
Loading NVRAM.BIN to Flash Memory...
It freezes there.
I have tried many times and it is a consistent problem.
is there anything I can do to create an error log or something to assist troubleshooting the problem?
Back to top
Victek DD-WRT Novice Joined: 05 Jan 2008 Posts: 7
Posted: Mon Dec 29, 2008 3:12 Post subject:
Try /nodma , like this
Quote:
victek@Servidor:/jtag# ./tjtag3 -erase:nvram /fc:99 /nodma
==============================================
EJTAG Debrick Utility v3.0 RC1 Tornado-MOD
==============================================
Probing bus ... Done
Instruction Length set to 8
CPU Chip ID: 10010100011100000100000101111111 (9470417F)
*** Found a Broadcom BCM4704 KPBG Rev 9 CPU chip ***
- EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS32
*** DMA Mode Forced Off ***
Issuing Processor / Peripheral Reset ... ECR: 0x00200100 Done
Enabling Memory Writes ... Mem 0x0000001a
Done
Halting Processor ...
00000000001000001000000100000000 (00208100)
00000000001000000000000100000000 (00200100)
<Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Manual Flash Selection ... Done
Flash Vendor ID: 00000000000000000000000001111111 (0000007F)
Flash Device ID: 00000000000000000010001011110110 (000022F6)
*** Manually Selected a EON EN29LV320 2Mx16 TopB (4MB) Flash Chip ***
- Flash Chip Window Start .... : 1fc00000
- Flash Chip Window Length ... : 00400000
- Selected Area Start ........ : 1fff0000
- Selected Area Length ....... : 00010000
*** You Selected to Erase the NVRAM.BIN ***
=========================
Erasing Routine Started
=========================
Total Blocks to Erase: 8
Erasing block: 64 (addr = 1fff0000)...Done
Erasing block: 65 (addr = 1fff2000)...Done
Erasing block: 66 (addr = 1fff4000)...Done
Erasing block: 67 (addr = 1fff6000)...Done
Erasing block: 68 (addr = 1fff8000)...Done
Erasing block: 69 (addr = 1fffa000)...Done
Erasing block: 70 (addr = 1fffc000)...Done
Erasing block: 71 (addr = 1fffe000)...Done
=========================
Erasing Routine Complete
=========================
elapsed time: 1 seconds
*** REQUESTED OPERATION IS COMPLETE ***
victek@Servidor:/jtag#
But I'm not sure we are selecting the proper flash chip.. after my reading to EON datasheet:
http://pdf1.alldatasheet.co.kr/datasheet-pdf/view/207689/EON/EN29LV320AB-70TP.html
I have to select Bottom Boot Sector chip (pls correct me if I'm wrong, read page 4 of the document), so fc:98
Flash ID chip
EN29LV320AB-70TCP
173S21E
0736SDA
Then, memory address changes all over (see page 7).
Back to top