Wrt54g v6 not Wrt54gs

[evil666]

Sure I can attempt to replicate it i just need the area to flash the boot file. What is it. On my normal jtag it says via printer port some one instructed me the use the following and its always worked.
wrt54g -flash:custom /window:1fc00000 /start:1cf00000 /length:00050000 /noemw

so is the flash area 1fc00000? Is there more to it like 1fc00000 500000?
Help me out here.

[usbbdm]

I got another Microsoft MNN700 router and I can not program even with 0.19. Looks like 0.20 has a lot things to be fixed.

BTW. when you read memory with wrt54g.c, what speed do you get?
I wanted to prove the theory that any printer JTAG can do fast speed and I might post a video after play with wrt54g.c.

[tester5]

anyone seen those cable routers? any good? they send data throw cable coax.....

[evil666]

I got another Microsoft MNN700 router and I can not program even with 0.19. Looks like 0.20 has a lot things to be fixed.

BTW. when you read memory with wrt54g.c, what speed do you get?
I wanted to prove the theory that any printer JTAG can do fast speed and I might post a video after play with wrt54g.c.

I will check when I get home.
Can any one tell me the memory locations to program the boot file.

[evil666]

anyone seen those cable routers? any good? they send data throw cable coax.....

Yes comcast has them. I have only seen one.

[usbbdm]

Boot is 1fc00000 and this is the same as 9fc00000 when you do EJTAG.

1fc00000
9fc00000
bfc00000
are all the same when you dma read. Sometime you can only use 9fc00000.

[evil666]

Boot is 1fc00000 and this is the same as 9fc00000 when you do EJTAG.

1fc00000
9fc00000
bfc00000
are all the same when you dma read. Sometime you can only use 9fc00000.

so when I start to program i do
ldram 9fc00000
program 9fc00000?
or is there more to it. like 9fc00000 200000?
Let me know and I will try this tonight and let you know how it goes. And get that read speed to you aswell. Also if I do a full 2mb backup how do I program it back? 9fc00000 200000? I think I tried but it didn't work. Is the boot file included on the 2mb backup? If not, that would explaint he reason why I couldn't?

[usbbdm]

Boot is 1fc00000 and this is the same as 9fc00000 when you do EJTAG.

1fc00000
9fc00000
bfc00000
are all the same when you dma read. Sometime you can only use 9fc00000.

so when I start to program i do
ldram 9fc00000
program 9fc00000?
or is there more to it. like 9fc00000 200000?
Let me know and I will try this tonight and let you know how it goes. And get that read speed to you aswell. Also if I do a full 2mb backup how do I program it back? 9fc00000 200000? I think I tried but it didn't work. Is the boot file included on the 2mb backup? If not, that would explaint he reason why I couldn't?

The speed I am asking is the wrt54g.c not USB JTAG. I will also do it myself to compare. A full backup and program back will always work. Boot is the CFE on this router. On USB JTAG use address 9fc00000. On wrt54g.c I think is 1fc00000. They all map to the same address. (bfc00000 when boot up).

[tester5]

..personal router.....not form ips...basicaly converts rg45data into rg6coax signal..

[evil666]

Boot is 1fc00000 and this is the same as 9fc00000 when you do EJTAG.

1fc00000
9fc00000
bfc00000
are all the same when you dma read. Sometime you can only use 9fc00000.

so when I start to program i do
ldram 9fc00000
program 9fc00000?
or is there more to it. like 9fc00000 200000?
Let me know and I will try this tonight and let you know how it goes. And get that read speed to you aswell. Also if I do a full 2mb backup how do I program it back? 9fc00000 200000? I think I tried but it didn't work. Is the boot file included on the 2mb backup? If not, that would explaint he reason why I couldn't?

The speed I am asking is the wrt54g.c not USB JTAG. I will also do it myself to compare. A full backup and program back will always work. Boot is the CFE on this router. On USB JTAG use address 9fc00000. On wrt54g.c I think is 1fc00000. They all map to the same address. (bfc00000 when boot up).

I am not sure of the speed I get. I have ddwrt on there so i am not sure if it will affect it. We talking cpu on it or network wise I know I get atleast 35 megabit cause what my modem does for dl. Network pc to pc I get full 100 when using ftp for transfer.

So once again what command to i put into the program to flash the boot file sector.
ldram XXXXXX
program xxxxxx xxxxx
what should the x's be. lol i have asked this a thousand times already for this boot file.

[usbbdm]

Forget about the speed I am asking. I will find this myself.

To program boot
ldram cfe
program cfe

That will work for USB JTAG.

[evil666]

Thank you. You rock.

[evil666]

Forget about the speed I am asking. I will find this myself.

To program boot
ldram cfe
program cfe

That will work for USB JTAG.

Unfortunatly when I use those commands it says
-ldram cfe
-program cfe
Erase starts...
And stays there for ever. The flashing status bar does not move.

[usbbdm]

Looks like your router is bricked (or again). I will play a little more on these routers. Please wait a little while since I am focusing on 0.20 release. Just got my SBV4200 today and I will start to investigating it.

I need to do
1. being able to debrick SB4x00 easily.
2. debrick WRT54GS easily.
3. hope I can add MN700 support this time.
4. fix the detect lockups. Normally when device is bricked, detects some time locks up. I should use slower routing to do detect as it is more likely to lockup. It may not return the actual flash type but letting people constantly unplug USB JTAG to get it close is a little annoying.

[MaXt]

Is there a flash rescue method for WRT routers? I replaced the flash but reading back the flash manufacturer and ID is wrong. Do I have to peek and poke values before I can detect the flash? Thanks!