Cg3300 netgear

Post by **usbbdm** » Fri Jul 11, 2014 8:32 am

U129718 wrote:What a pity. This will make the USBJTAG NT better. Might you estimate how long it will take to implement-upgrade the software for this type of flash?

Thanks for you time and kindness.

It will take a few hours if I have the chip.
However I am not 100% sure your chip is 25L256 based on the conversation we had and teamviewer session.

U129718 · Post by **U129718** » Sat Jul 12, 2014 1:19 am

usbbdm wrote:It will take a few hours if I have the chip.
However I am not 100% sure your chip is 25L256 based on the conversation we had and teamviewer session.

All right!!
How can we go on with the proyect?? Should I have to desold the chip and send it to you, or can you get one by your side??
I only have one in my cable modem And I would like it back to program it and test de modem. I am from Spain.
I can prepare a permanent teamviewer sessión for you with the usbtag connected to the flash to test your developments by your self. Is it another option??

Thanks.

andy m · Post by **andy m** » Sat Jul 12, 2014 8:21 am

nice too see some one doing a bit work on the vmdg 485 it hard thn u think it is

andy m · Post by **andy m** » Sat Jul 12, 2014 8:25 am

U129718 wrote:I have a CG3300 cablemodem of Netgear Company. I want to read the flash ( text in top S70FL256P ) and reading in internet I can see that is the same as S25FL129P and is 32MB in size. The last 16MB is a complete clone of what is on the first 16MB.

First I try to read flash, and I copy this attached files in config file of USBJTAGnt version 0.58 but the file I get has errors, there was no Mac Address or serial CM information. I upgrade the USBJTAG no 0.69 version, and now I can not select the xml files in config program file.

I know the flash is similar to other modems, NETGEAR CG4000TD - VMDG485, TG862G.

Can you help me to read the flash?? Which target is the right one to select in USBJTAG for this type of flash??

Conneting to serial port in motherboard, I can get:

U-Boot 1.2.0 (Dec 19 2012 - 10:21:05)
PSPU-Boot 1.0.18.24

DRAM: 128 MB
Spansion S25FL129P flash found
Spansion S25FL129P flash found
Flash: 32 MB
In: serial
Out: serial
Err: serial
Press SPACE to abort autoboot in 3 second(s)
*** ACTIMAGE = 2, will try to boot UBFI2 stored @0x4c000000
## Executing script at 4c000000
============== Running script =========
*** Running from UBFI2 partition @0x4c000000
Load address = 0x4c002154 (0x2154)
Kernel address = 0x4c0021a0 (0x21a0)
kernel size = 0x11b260
FS address = 0x4c11d400 (0x11d400)
FS size = 0x4c5400
NVRAM offset = 0xfb0000
NVRAM size = 0x50000
*** UBFI2 bootscript executed successfully.
Start booting...
## Booting image at 4c002154 ...
Image Name: Multi Image File
Image Type: ARM Linux Multi-File Image (uncompressed)
Data Size: 6162028 Bytes = 5.9 MB
Load Address: 80a00000
Entry Point: 80a00000
Contents:
Image 0: 1159776 Bytes = 1.1 MB
Image 1: 5002240 Bytes = 4.8 MB
Verifying Checksum ... OK
OK

Starting kernel ...

Starting LZMA Uncompression Algorithm.
Compressed file is LZMA format.

snmp is enabled on this just need to enable telnet

andy m · Post by **andy m** » Sat Jul 12, 2014 8:27 am

U129718 wrote:Hello.

selecting the target TVMDG485.xml I can get the boot file. I attached it. I can easily read in offset 15240 that this type of flash is not supported with the USBjTAG NT. Is it really true?? can anyboby help me to read this flash completely??? Getting the nvram file, there is no data in it. Probably I am doing something wrong. Help.

Thanks friends...

I have had the same problem with this and it is a right fart on

andy m · Post by **andy m** » Sat Jul 12, 2014 8:30 am

see if this might help with the chip as it might be protected chip I have seen on another site got to be modified

Post by **usbbdm** » Sat Jul 12, 2014 8:31 am

I think remote session should be fine but takes a little bit longer.
I prefer an English speaking with relative closer time zone to work with. Typing over the session is not fun.

andy m · Post by **andy m** » Sat Jul 12, 2014 8:32 am

usb to ttl 3.3 or 5v does,nt even power the chip as it disconnects the NT and ya got to find the ISP point on the board located on one of those 8 pin chips

andy m · Post by **andy m** » Sat Jul 12, 2014 9:17 am

we have same chip and it is hard to figure out how to how to get the full dump instead of the uboot all the rest is corrupted after read the dump

U129718 · Post by **U129718** » Sat Jul 12, 2014 12:07 pm

usbbdm wrote:I think remote session should be fine but takes a little bit longer.
I prefer an English speaking with relative closer time zone to work with. Typing over the session is not fun.

Fine. I can prepare a PC for next monday afternoon ( morning in USA ) with my usbtag connected to the 25L256 flash. Teamviewer ..... Do you need any other thing??? I will send you a prívate messege when all is done.

Is it Ok for you??

andy m · Post by **andy m** » Sat Jul 12, 2014 12:50 pm

make you might need 3.7v to pin2 power the chip

U129718 · Post by **U129718** » Sat Jul 12, 2014 1:57 pm

andy m wrote:make you might need 3.7v to pin2 power the chip

Do you think it is a voltage problemm?? I connect pin2 to 3,3 vdc. Do you think more voltage, lesa than 5V, should be better for reading the whole flash??

andy m · Post by **andy m** » Sun Jul 13, 2014 12:22 am

yeah plus have you found he isp point on the motherboard ... ISP point will be one of those 8 pins chip pin 1

U129718 · Post by **U129718** » Mon Jul 14, 2014 8:09 am

usbbdm wrote:I think remote session should be fine but takes a little bit longer.
I prefer an English speaking with relative closer time zone to work with. Typing over the session is not fun.

Hello USBBDM,
You have private messege with the access to the flash thought teamviewer application. Better second message with permanent access.
Thanks

andy m · Post by **andy m** » Mon Jul 14, 2014 8:20 am

did you manage to read the full dump from the spi chip it self as it wil;l only give you half the dump as the other part odes not appear

USB JTAG

Cg3300 netgear

Teamviewer access to CG3300 flash

Who is online