RT-N66U BCM4706 Support

This site is best viewed in a modern browser with JavaScript enabled.

socal87

volkan-k wrote:
socal87 wrote: Some of us do not have the option to use a parallel adapter, as we are working with newer machines without parallel ports (or in my case, a laptop without an extender interface).
In that case you will need to buy a USB-to-Parallel adapter (or extender interface), too.
AFAIK Both TJTAG and BrJTAG supports selecting port other than default of 0x378, so JTAG cables should work with USB-to-Parallel adapter.

According to >>this page<<, a USB to Parallel adapter will not work with the parallel JTAG board.
Also as I mentioned previously, it seems as though some of the issues we are having are software issues with zjtag; I was under the impression that you were one of the developers for zjtag?
For instance, using zjtag0.6, I can talk to the CPU using different test clock freqs. With zjtag1.0, only 30MHz seems to work. Also, writing to flash in my case is prevented by DMA errors; use of the /dma switch causes zjtag to hang. In addition, it would seem that disconnecting the nTRST lead allows erasing and flash, but zjtag will hang again.

[deleted]

socal87 wrote: According to >>this page<<, a USB to Parallel adapter will not work with the parallel JTAG board.
Also as I mentioned previously, it seems as though some of the issues we are having are software issues with zjtag; I was under the impression that you were one of the developers for zjtag?
For instance, using zjtag0.6, I can talk to the CPU using different test clock freqs. With zjtag1.0, only 30MHz seems to work. Also, writing to flash in my case is prevented by DMA errors; use of the /dma switch causes zjtag to hang. In addition, it would seem that disconnecting the nTRST lead allows erasing and flash, but zjtag will hang again.

I don't know who wrote the page, maybe it was written when JTAG software wasn't supporting port selection, but you better ask TIAO Corp. (DiyGadget.com) to make sure that there is no hardware limitation in Parallel JTAG Cable.
It may be a hardware issue as Processor do NOT enter debug mode. In some cases ( DSL-2640U, for example ) corrupt cfe or firmware hangs the processor before it can enter debug mode. Yes, I'm current developer of zJTAG, but currently can't see any bugs in the zJTAG. I have been following many forums, It seems like nobody can get RT-N66U's JTAG to work (except W1SS) and all software fails.
All MIPS systems support PrAcc mode by nature. The DMA mode is optional and not as widely supported as the normal mode. It may be the reason of hangs with /dma if your router doesn't support DMA mode in JTAG. I don't think there is a bug with /dma code, but I will try to check it this weekend for you.
TIAO Corp. promised to sponsor a RT-N66U as a test device for debugging. Hopefully I will be able to help RT-N66U users soon.

socal87

The RT-AC66U is a very similar platform, also based on the Broadcom 4706, so official support for the N66 should carry over to the AC66 as well. In fact, the location of the JTAG contacts are exactly the same.

[deleted]

Could you please try /nodma ?

socal87

volkan-k wrote: Could you please try /nodma ?

That causes crashes too.
I will start listing what causes zjtag to crash.

socal87

Looks like I need to start from scratch, or something's wrong with my board. So far, the only response I get from the CPU is with /l1:0, regardless of /instrlen. This is what I get:

CPU Chip ID: 11011011011101001011001111101000 (DB74B3E8)
    CPU Manufacturer :Unknown(id=3E8)
    CPU Device ID :B74B
    CPU Revision  :13

All other dividers get all F or 0, regardless of boot + enter timing.
zjtag1.0 reports no CPU found with all 0s, while zjtag0.6 reports AMD/Atheros.
zjtag1.0 hangs with use of /nodma switch.
Something more than a few of us have noticed is this error when trying to write to flash:

FT Write data to FT2232 error occur!

I believe this has been mentioned before; is there an explanation behind it so we can try to work out why it's happening?
Also, I feel I should clarify something: Previously when I said zjtag "hangs", I meant it crashes. Windows error message pops up saying it's stopped working.
As far as an actual hang, I've noticed at least two cases:
Here:

Halting Processor ... <Processor Entered Debug Mode!> ...

And here:

Clearing Watchdog ...

I don't think these are necessarily software issues, however, and seem more related to getting a good boot.
More notes: IR chain length when using /L1:0 and powered up is always 1. IR chain length when using L1:0 or L1:1 is sometimes 8 when powered off.

[deleted]

Hi,
Today, i continue with the same results. I received the great asistance of W1SS, and i've been testing without new results. For me, I think that it would be important to confirm how to connect TUMPA and ASUS. I've been connected with this schema:
ROUTER TUMPA
1 = nTrst ------ 3
3 = tdi ------ 5
5 = tdo ------ 13
7 = tms ------ 7
9 = tck ------ 9
1 VTAR (Vref) not connected
2 ~ 10 = ground ALL pins goes joined to GND? Pin 1 goes connected or on the air?
Other thing important for me would be the state of lights. When does the router CPU be initialized to flashing process?

socal87

Pin #2 on the TUMPA 20 pin JTAG is not connected to anything. Pins 4-20 are ground. I believe all 5 even numbered pins on N66 J2 should be ground, and in fact I soldered all mine together.
As for state of lights...I have only had 3 glow softly this whole time, with the exception of a few blinks here and there but always back to the 3. If your CFE is bad, the lights aren't going to tell you anything.

[deleted]

if you have an sd card installed.. remove it..
talking to some of the other hardware guru's.. it may be that the jtag gpio is being used for the sd card reader.. not confirmed.. but probable..

socal87

No SD card installed here.
You think the JTAG GPIO is being used for the card reader? Do you mean to say it performs both functions? It has been established that J2 is indeed an active JTAG interface, and as W1SS has shown, can be used for recovery. I believe at this point we have moved past that. Please refer your fellow devs to the entirety of this thread, as well as these two:
http://www.dd-wrt.com/phpBB2/viewtopic.php?t=167147
http://www.dd-wrt.com/phpBB2/viewtopic.php?t=164504

[deleted]

One possibility: watchdog
If your hardware has a watchdog, then you must ensure that it does not reset the CPU when the JTAG wants to halt it. If the watchdog resets the CPU you would typically get a "CPU not halted" type of error you described.
If the CPU has an internal watchdog circuit, on some CPUs it is automatically "paused" when the JTAG halts the CPU. But on others, that doesn't happen, and you need to ensure the watchdog is disabled while doing JTAG debugging.
If your circuit has a watchdog circuit that is external to the CPU, then typically you need to be able to disable it in some way (typically the hardware designer provides some sort of switch/jumper on the board to do so).

[deleted]

If it stalls at "clearing watchdog", try adding the /nocwd switch.
Sometimes, in order to get things to flash correctly, you have to use switches like the /noemw or /noreset. Did you try /noemw ?
Another way around this... at least it worked for me in the past... if it freezes... unplug the unit and plug it back in with the zjtag command line still running.

socal87

Didn't try /noemw but I will. As for the /nocwd, that seems to also cause a lot of zjtag crashes. I have used /noreset consistently, as we have found that erasing/writing flash seems to be possible once the CPU is initialized.
I'll fire my board back up and try some more today, but I don't expect any progress...I may have a hard brick, as for some reason zjtag can no longer properly identify my CPU.
Tried again today...didn't get a positive ID as Broadcom, or IR chain length of 5, but I tried anyway.

D:\zjtag>zjtag -probeonly /noreset /skipdetect
        ==============================================
               zJTAG EJTAG Debrick Utility v1.0
        ==============================================
 Set I/O speed to 30000 KHz
USB TAP device has been initialized. Please confirm VREF signal connected!
Press any key to continue... ONCE target board is powered on!
Probing bus ... Done
Detected IR chain Length is 1
CPU assumed running under LITTLE endian
CPU Chip ID: 11011011011101001011001111101000 (DB74B3E8)
*** CHIP DETECTION OVERRIDDEN ***
    - EJTAG IMPCODE ....... : 00000000000000000000000000000000 (00000000)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS32
Issuing Processor / Peripheral Reset ... Skipped
Enabling Memory Writes ... Done
Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped
Probing Flash at Address: 0x1FC00000 ...
DMA Write(x2) Addr = 1fc0aaaa  Data = ERROR ON WRITE
Detected Chip ID (VenID:DevID = 00FF : FFFF)
DMA Write(x2) Addr = 1fc00000  Data = ERROR ON WRITE
DMA Write(x2) Addr = 1fc00000  Data = ERROR ON WRITE
DMA Write(x2) Addr = 1fc0aaaa  Data = ERROR ON WRITE
DMA Write(x2) Addr = 1fc0aaaa  Data = ERROR ON WRITE
*** Unknown or NO Flash Chip Detected ***
 *** REQUESTED OPERATION IS COMPLETE ***

I didn't expect it to work, but I kept trying:

D:\zjtag>zjtag -flash:cfe /noreset /l1:0 /instrlen:5 /fc:088 /delay:50 /skipdetect
        ==============================================
               zJTAG EJTAG Debrick Utility v1.0
        ==============================================
*** INFO - sleep <50> (ms) per internal command ***
 Set I/O speed to 30000 KHz
USB TAP device has been initialized. Please confirm VREF signal connected!
Press any key to continue... ONCE target board is powered on!
Probing bus ... Done
Detected IR chain Length is 1
Instruction Length set to 5
CPU assumed running under LITTLE endian
CPU Chip ID: 11011011011101001011001111101000 (DB74B3E8)
*** CHIP DETECTION OVERRIDDEN ***
    - EJTAG IMPCODE ....... : 00000000000000000000000000000000 (00000000)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS32
Issuing Processor / Peripheral Reset ... Skipped
Enabling Memory Writes ... Done
Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped
*** Manually Selected a Spansion S29GL128N/P Uni  (16MB) from AMD/Spansion
    - Flash Chip Window Start .... : 1C000000
    - Flash Chip Window Length ... : 01000000
    - Selected Area Start ........ : 1C000000
    - Selected Area Length ....... : 00040000
*** You Selected to Flash the CFE.BIN ***
=========================
Flashing Routine Started
=========================
Total Blocks to Erase: 2
Erasing block: 1 (addr = 1C000000)...DMA Write(x2) Addr = 1c000000  Data = ERROR ON
WRITE
Done
Erasing block: 2 (addr = 1C020000)...DMA Write(x2) Addr = 1c000554  Data = ERROR ON
WRITE
DMA Write(x2) Addr = 1c000aaa  Data = ERROR ON WRITE
DMA Write(x2) Addr = 1c000aaa  Data = ERROR ON WRITE
DMA Write(x2) Addr = 1c000554  Data = ERROR ON WRITE
DMA Write(x2) Addr = 1c000000  Data = ERROR ON WRITE
Done
Loading CFE.BIN to Flash Memory...
 dma write not correctly !!
 3C12B800 - 80FA00FA
 dma write not correctly !!
 24075350 - 7D00FA00
 dma write not correctly !!
 8E510000 - 80FA00FA
 dma write not correctly !!
 340AFFFF - 7D00FA00
 dma write not correctly !!
 022A5024 - 80FA00FA
 dma write not correctly !!
 1547000F - 7D00FA00
 dma write not correctly !!
 00000000 - 80FA00FA
 dma write not correctly !!
 3C0A00F0 - 7D00FA00
 dma write not correctly !!
 022A5024 - 80FA00FA
 dma write not correctly !!
 3C070010 - 7D00FA00
 dma write not correctly !!
 11470040 - 80FA00FA
 dma write not correctly !!
 00000000 - 7D00FA00
 dma write not correctly !!
 24070311 - 80FA00FA
 dma write not correctly !!
 8E4B0090 - 7D00FA00
 dma write not correctly !!
 10EB003C - 80FA00FA
 dma write not correctly !!
 00000000 - 7D00FA00
 dma write not correctly !!
 AE470090 - 80FA00FA
 dma write not correctly !!
 240B0001 - 7D00FA00
 dma write not correctly !!
 AE4B0080 - 80FA00FA
 dma write not correctly !!
 1000FFFF - 7D00FA00
 dma write not correctly !!
 00000000 - 80FA00FA
 dma write not correctly !!
 24075354 - 7D00FA00
 dma write not correctly !!
 15470034 - 80FA00FA
 dma write not correctly !!
 00000000 - 7D00FA00
 dma write not correctly !!
 3C0A000F - 80FA00FA
 dma write not correctly !!
 022A5024 - 7D00FA00
 dma write not correctly !!
 3C0B0003 - 80FA00FA
 dma write not correctly !!
 014B082A - 7D00FA00
 dma write not correctly !!
 14200005 - 80FA00FA
 dma write not correctly !!
 00000000 - 7D00FA00
 dma write not correctly !!
 3C040133 - 80FA00FA
 dma write not correctly !!
 240A0002 - 7D00FA00
 dma write not correctly !!
 AE4A0658 - 80FA00FA
 dma write not correctly !!
 AE44065C - 7D00FA00
 dma write not correctly !!
 24042000 - 80FA00FA
 dma write not correctly !!
 3C050680 - 7D00FA00
 dma write not correctly !!
 3C070200 - 80FA00FA
 dma write not correctly !!
 240A0001 - 7D00FA00
 dma write not correctly !!
 AE4A0658 - 80FA00FA
 dma write not correctly !!
 AE45065C - 7D00FA00
 dma write not correctly !!
 240A0000 - 80FA00FA
 dma write not correctly !!
 AE4A0658 - 7D00FA00
 dma write not correctly !!
 AE44065C - 80FA00FA
 dma write not correctly !!
 240A0003 - 7D00FA00
 dma write not correctly !!
 AE4A0658 - 80FA00FA
 dma write not correctly !!
 AE47065C - 7D00FA00
 dma write not correctly !!
 8E4A0600 - 80FA00FA
 dma write not correctly !!
 314A007C - 7D00FA00
 dma write not correctly !!
 1540000F - 80FA00FA
 dma write not correctly !!
 00000000 - 7D00FA00
 dma write not correctly !!
 3C0A0007 - 80FA00FA
 dma write not correctly !!
 354AFFFF - 7D00FA00
 dma write not correctly !!
 AE4A0618 - 80FA00FA
 dma write not correctly !!
 AE4A061C - 7D00FA00
 dma write not correctly !!
 240A0001 - 80FA00FA
 dma write not correctly !!
 AE4A0660 - 7D00FA00
 dma write not correctly !!
 3C0A6666 - 80FA00FA
 dma write not correctly !!
 354A6602 - 7D00FA00
 dma write not correctly !!
 AE4A0664 - 80FA00FA
 dma write not correctly !!
 3C0A000F - 7D00FA00
 dma write not correctly !!
 354AFFFF - 80FA00FA
 dma write not correctly !!
 AE4A0618 - 7D00FA00
 dma write not correctly !!
 AE4A061C - 80FA00FA
 dma write not correctly !!
 00000000 - 7D00FA00
 dma write not correctly !!
 3C081FA0 - 80FA00FA
 dma write not correctly !!
 3508000C - 7D00FA00
 dma write not correctly !!
 4088B006 - 80FA00FA
 dma write not correctly !!
 3C091FA0 - 7D00FA00
 dma write not correctly !!
 8D2A0014 - 80FA00FA
 dma write not correctly !!
 3C01C000 - 7D00FA00
 dma write not correctly !!
 01415825 - 80FA00FA
 dma write not correctly !!
 AD2B0014 - 7D00FA00
 dma write not correctly !!
 3C08FF40 - 80FA00FA
 dma write not correctly !!
 3508000C - 7D00FA00
 dma write not correctly !!
 4088B006 - 80FA00FA
 dma write not correctly !!
 40086000 - 7D00FA00
 dma write not correctly !!
 3C0905C7 - 80FA00FA
 dma write not correctly !!
 3529FFEE - 7D00FA00
 dma write not correctly !!
 01094024 - 80FA00FA
 dma write not correctly !!
 3409FF00 - 7D00FA00
FT Write data to FT2232 error occur!
FT Write data to FT2232 error occur!
FT Write data to FT2232 error occur!
^C

W1SS thinks this may be a buffer issue with the TUMPA board, at least as far as the last error...

socal87

Let's take a step back and focus on getting the router to respond. amadian and W1SS, please help me out here.
Here's what the output is on a 30MHz test clock, regardless of /instrlen:

D:\zjtag>zjtag -probeonly /noreset /l1:0 /skipdetect
        ==============================================
               zJTAG EJTAG Debrick Utility v1.0
        ==============================================
 Set I/O speed to 30000 KHz
USB TAP device has been initialized. Please confirm VREF signal connected!
Press any key to continue... ONCE target board is powered on!
Probing bus ... Done
Detected IR chain Length is 1
CPU assumed running under LITTLE endian
CPU Chip ID: 11111011011101001011001111101000 (FB74B3E8)
*** CHIP DETECTION OVERRIDDEN ***
    - EJTAG IMPCODE ....... : 00000000000000000000000000000000 (00000000)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS32
Issuing Processor / Peripheral Reset ... Skipped
Enabling Memory Writes ... Done
Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done
Clearing Watchdog ... DMA Write(x4) Addr = b8000080  Data = ERROR ON WRITE
Done
Loading CPU Configuration Code ... Skipped
Probing Flash at Address: 0x1FC00000 ...
DMA Write(x2) Addr = 1fc0aaaa  Data = ERROR ON WRITE
Detected Chip ID (VenID:DevID = 0000 : FFFF)
DMA Write(x2) Addr = 1fc00000  Data = ERROR ON WRITE
DMA Write(x2) Addr = 1fc00000  Data = ERROR ON WRITE
*** Unknown or NO Flash Chip Detected ***
 *** REQUESTED OPERATION IS COMPLETE ***

And here's what I get with different test clocks:

D:\zjtag>zjtag -probeonly /noreset /l1:1 /skipdetect
        ==============================================
               zJTAG EJTAG Debrick Utility v1.0
        ==============================================
 Set I/O speed to 15000 KHz
USB TAP device has been initialized. Please confirm VREF signal connected!
Press any key to continue... ONCE target board is powered on!
Probing bus ... Done
Detected IR chain Length is 0
CPU assumed running under LITTLE endian
CPU Chip ID: 00000000000000000000000000000000 (00000000)
*** CHIP DETECTION OVERRIDDEN ***
    - EJTAG IMPCODE ....... : 00000000000000000000000000000000 (00000000)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS32
Issuing Processor / Peripheral Reset ... Skipped
Enabling Memory Writes ... Done
Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped
Probing Flash at Address: 0x1FC00000 ...
Detected Chip ID (VenID:DevID = 0000 : 0000)
*** Unknown or NO Flash Chip Detected ***
 *** REQUESTED OPERATION IS COMPLETE ***

D:\zjtag>zjtag -probeonly /noreset /l1:2 /skipdetect
        ==============================================
               zJTAG EJTAG Debrick Utility v1.0
        ==============================================
 Set I/O speed to 10000 KHz
USB TAP device has been initialized. Please confirm VREF signal connected!
Press any key to continue... ONCE target board is powered on!
Probing bus ... Done
Detected IR chain Length is 0
CPU assumed running under LITTLE endian
CPU Chip ID: 00000000000000000000000000000000 (00000000)
*** CHIP DETECTION OVERRIDDEN ***
    - EJTAG IMPCODE ....... : 00000000000000000000000000000000 (00000000)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS32
Issuing Processor / Peripheral Reset ... Skipped
Enabling Memory Writes ... Done
Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped
Probing Flash at Address: 0x1FC00000 ...
Detected Chip ID (VenID:DevID = 0000 : 0000)
*** Unknown or NO Flash Chip Detected ***
 *** REQUESTED OPERATION IS COMPLETE ***

D:\zjtag>zjtag -probeonly /noreset /l1:3 /skipdetect
        ==============================================
               zJTAG EJTAG Debrick Utility v1.0
        ==============================================
 Set I/O speed to 7500 KHz
USB TAP device has been initialized. Please confirm VREF signal connected!
Press any key to continue... ONCE target board is powered on!
Probing bus ... Done
Detected IR chain Length is 0
CPU assumed running under LITTLE endian
CPU Chip ID: 00000000000000000000000000000000 (00000000)
*** CHIP DETECTION OVERRIDDEN ***
    - EJTAG IMPCODE ....... : 00000000000000000000000000000000 (00000000)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS32
Issuing Processor / Peripheral Reset ... Skipped
Enabling Memory Writes ... Done
Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped
Probing Flash at Address: 0x1FC00000 ...
Detected Chip ID (VenID:DevID = 0000 : 0000)
*** Unknown or NO Flash Chip Detected ***
 *** REQUESTED OPERATION IS COMPLETE ***

And so it goes. Now here's the interesting part...I turned the router off, and:

D:\zjtag>zjtag -probeonly /noreset /l1:0 /skipdetect
        ==============================================
               zJTAG EJTAG Debrick Utility v1.0
        ==============================================
 Set I/O speed to 30000 KHz
USB TAP device has been initialized. Please confirm VREF signal connected!
Press any key to continue... ONCE target board is powered on!
Probing bus ... Done
Detected IR chain Length is 24
CPU assumed running under LITTLE endian
CPU Chip ID: 10000001000000000000000000000001 (81000001)
*** CHIP DETECTION OVERRIDDEN ***
    - EJTAG IMPCODE ....... : 10000001000000000000000000000001 (81000001)
    - EJTAG Version ....... : Unknown (4 is a reserved value)
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k DINTsup MIPS64
Issuing Processor / Peripheral Reset ... Skipped
Enabling Memory Writes ... Skipped
Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped
Probing Flash at Address: 0x1FC00000 ...
Detected Chip ID (VenID:DevID = 0001 : 8100)
*** Unknown or NO Flash Chip Detected ***
 *** REQUESTED OPERATION IS COMPLETE ***

Very interesting indeed.
And to humor volkan-k:

D:\zjtag>zjtag -probeonly /noreset /skipdetect /noemw /nocwd
        ==============================================
               zJTAG EJTAG Debrick Utility v1.0
        ==============================================
 Set I/O speed to 30000 KHz
USB TAP device has been initialized. Please confirm VREF signal connected!
Press any key to continue... ONCE target board is powered on!
Probing bus ... Done
Detected IR chain Length is 1
CPU assumed running under LITTLE endian
CPU Chip ID: 11011011011101001011001111101000 (DB74B3E8)
*** CHIP DETECTION OVERRIDDEN ***
    - EJTAG IMPCODE ....... : 00000000000000000000000000000000 (00000000)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS32
Issuing Processor / Peripheral Reset ... Skipped
Enabling Memory Writes ... Skipped
Halting Processor ... <Processor Entered Debug Mode!> ... Done
Clearing Watchdog ... Skipped
Loading CPU Configuration Code ... Skipped
Probing Flash at Address: 0x1FC00000 ...
DMA Write(x2) Addr = 1fc0aaaa  Data = ERROR ON WRITE
Detected Chip ID (VenID:DevID = 00FF : 0000)
DMA Write(x2) Addr = 1fc000aa  Data = ERROR ON WRITE
DMA Write(x2) Addr = 1fc00000  Data = ERROR ON WRITE
*** Unknown or NO Flash Chip Detected ***
 *** REQUESTED OPERATION IS COMPLETE ***

Use of the /nodma switch causes zjtag to crash.
This is what we WANT to see:

Detected IR chain Length is 5
Instruction Length set to 27
CPU Chip ID: 00010000000010001100000101111111 (1008C17F)
    CPU Manufacturer :Broadcom(id=17E)
    CPU Device ID :008C
    CPU Revision  :1

Seeing this generally means the CPU has been initialized and should, in theory, accept a flash.

[deleted]

socal87, i've got initialize with the sequence:
IMPORTANT: pin 1 connected
zjtag -probeonly /cable:0 /instrlen:27 /L1:3 /noreset /skipdetect
When i launch the command, almost all lights switch on, and the router stay witch power LED on (ONLY). In several rare cases, i got three usual lights on and power led on simultaneously. I didn't got to know what make this situation.
zjtag -probeonly /cable:0 /instrlen:27 /L1:3 /noreset
When i launch the command, again three usual lights switch on, and it shows Broadcom message.

[deleted]

Could you please try linking between Router's VCC (pin 1 of J1 ) and Router's TRST (Pin 1 of J2) with a 100 ohm resistor link in a cable.? And let us know the result.

mstombs (LinksysInfo.org) wrote:Ti AR7 (also mipsel) does need an extra connection for jtag tools to work: Pin 1 TRST must be pulled high.

[deleted]

My RT-N66U arrived and I'm currently testing Asuswrt-Merlin - build 3.0.0.4.354.28 BETA 1 (19-Apr-2013) DualWAN and Repeater mode added EXPERIMENTAL build. So far so good.. I will try Tomato and DD-WRT builds in next weeks and see if it will get bricked. Just wanted to try some EXPERIMENTAL software before bricking it :

Please let me know if pulling TRST high with hardware link solved your problem or not.

[deleted]

socal87 wrote: zjtag1.0 hangs with use of /nodma switch.

Should be fixed in zJTAG ver1.1. Could you please try latest version and let us know the result?

The already available basic integer types were deemed insufficient, because their actual sizes are implementation defined and may vary across different systems.

zJTAG now uses Fixed width integer types to be compatible with both 32-bit and 64-bit systems. Thanks to Damien Mascord (tusker.org) for his contributions.
Looking forward to hear from you!

socal87

Seems my compadres have more or less disappeared...I got some shorter leads for connecting the TUMPA to the router, but without any assistance, I haven't been able to get any further. Also, I started working 60+ hour weeks, so I haven't had much time to do anything.

Hopefully I will find some time one of these coming days.

W1SS

socal87 wrote: Seems my compadres have more or less disappeared...

I'm still here brother, been busy with a project which is almost finalized... Let me know when you are next on.
Cheers

« Previous Page Next Page »