Archer D5 uszkoszone firmware


#1

Witam wszystkich.
Mam problem z routerem archer D5. Prawdopodobnie coś z firmware.
Chciałem wgrać firmware z strony producenta ale plik ma 18 MB.
i to jeszcze jakoś nierówno i nie do końca wiem w którym miejscu uciąć.
No i jeszcze pytanie czy procedura wgrywania po serial line jest inna? Wiem że można się podłączyć pod modem i główne cpu.


(Heinz) #2

Witam,

Jakie masz objawy uszkodzonego firmware? Router w ogóle nie wstaje? Masz bootlog z niego?


#3

Logi pozniej mogę wrzucić.
Ale po podłączeniu serial dla głównego cpu - uboot ładuje się jest możliwość załadowania z tftp.
Próbowałem standardowej procedury wgrywania przez tftp.
Pytanie czy wyglada ona tak samo dla routera z modemem?


(Heinz) #4

Dla V1 wygląda to bardzo podobnie do ogólnych instrukcji. Z firmware wycinasz bootloader (0x20200) oraz z końca firmware do modemu.
Dla V2 jest to bardziej skomplikowane. Zatem jaką masz wersję?


#5

v1
Przy wrzucaniu całego firmware to będą poprawne adresy?
tftp 0x81000000 d5boot.bin
erase 0x9f020000 +f80000
cp.b 0x81020200 0x9f020000 0xf80000
reset


(Heinz) #6

Tak. Wygląda to poprawnie.


#7

po wykonaniu tych komend są takie logi:

U-Boot 1.1.4 (Apr 23 2014 - 08:43:14)

ap135 - Scorpion 1.0
DRAM: 128 MB

U-Boot 1.1.4 (Apr 23 2014 - 08:43:14)

ap135 - Scorpion 1.0
DRAM: 128 MB
Flash Manuf Id 0xef, DeviceId0 0x40, DeviceId1 0x18
flash size 16MB, sector count = 256
Flash: 16 MB
Using default environment

In: serial
Out: serial
Err: serial
Net: ath_gmac_enet_initialize...
athrs_sgmii_res_cal: cal value = 0xe
ath_gmac_enet_initialize: reset mask:c02200
Scorpion ----> S17 PHY *
athrs17_reg_init: complete
: cfg1 0x80000000 cfg2 0x7114
eth0: c4:e9:84:43:5d:7a
eth0 up
athrs17_reg_init_wan done
SGMII in forced mode
athr_gmac_sgmii_setup SGMII done
: cfg1 0x800c0000 cfg2 0x7214
eth1: c4:e9:84:43:5d:7b
eth1 up
eth0, eth1
Setting 0x18116290 to 0x4081214f
Hit any key to stop autoboot: 0

Booting image at 80800000 ...

    Uncompressing Kernel Image ... OK

Starting kernel ...

Booting QCA955x
Linux version 2.6.31--LSDK-9.5.2.18 (swd@localhost.localdomain) (gcc version 4.3.3 (GCC) ) #4 Tue Dec 2 10:04:17 CST 2014
flash_size passed from bootloader = 16
arg 1: console=ttyS0,115200
arg 2: root=31:02
arg 3: rootfstype=squashfs
arg 4: init=/sbin/init
arg 5: mtdparts=ath-nor0:128k(u-boot),1152k(kernel),14848k(rootfs),64k(config),64k(romfs),64k(reserve),64k(radio)
arg 6: mem=128M
CPU revision is: 00019750 (MIPS 74Kc)
cpu apb ddr apb ath_sys_frequency: cpu 720 ddr 600 ahb 200
Determined physical RAM map:
memory: 02000000 @ 00000000 (usable)
User-defined physical RAM map:
memory: 08000000 @ 00000000 (usable)
Zone PFN ranges:
Normal 0x00000000 -> 0x00008000
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
0: 0x00000000 -> 0x00008000
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32512
Kernel command line: console=ttyS0,115200 root=31:02 rootfstype=squashfs init=/sbin/init mtdparts=ath-nor0:128k(u-boot),1152k(kernel),14848k(rootfs),64k(config),64k(romfs),64k(reserve),64k(radio) mem=128M
PID hash table entries: 512 (order: 9, 2048 bytes)
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
Writing ErrCtl register=00000000
Readback ErrCtl register=00000000
Memory: 112256k/131072k available (2268k kernel code, 18644k reserved, 600k data, 136k init, 0k highmem)
NR_IRQS:128
plat_time_init: plat time init done
Calibrating delay loop... 359.42 BogoMIPS (lpj=718848)
Mount-cache hash table entries: 512

ALLOC*******
Packet mem: 8030f300 (0xe00000 bytes)


NET: Registered protocol family 16
ath_pcibios_init: bus 0
***** Warning PCIe 0 H/W not found !!!
registering PCI controller with io_map_base unset
ath_pcibios_init: bus 1
ath_pcibios_init(232): PCI 1 CMD write: 0x356
registering PCI controller with io_map_base unset
bio: create slab at 0
pcibios_map_irq: IRQ 76 for bus 1
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
NET: Registered protocol family 1
ATH GPIOC major 0
squashfs: version 4.0 (2009/01/31) Phillip Lougher
fuse init (API version 7.12)
msgmni has been set to 219
alg: No test for stdrng (krng)
io scheduler noop registered
io scheduler deadline registered
io scheduler cfq registered (default)
Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
serial8250.0: ttyS0 at MMIO 0xb8020000 (irq = 19) is a 16550A
console [ttyS0] enabled
brd: module loaded
loop: module loaded
PPP generic driver version 2.4.2
NET: Registered protocol family 24
7 cmdlinepart partitions found on MTD device ath-nor0
Creating 7 MTD partitions on "ath-nor0":
0x000000000000-0x000000020000 : "u-boot"
0x000000020000-0x000000140000 : "kernel"
0x000000140000-0x000000fc0000 : "rootfs"
0x000000fc0000-0x000000fd0000 : "config"
0x000000fd0000-0x000000fe0000 : "romfs"
0x000000fe0000-0x000000ff0000 : "reserve"
0x000000ff0000-0x000001000000 : "radio"
Mirror/redirect action on
u32 classifier
Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (2048 buckets, 10240 max)
CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use
nf_conntrack.acct=1 kernel parameter, acct=1 nf_conntrack module option or
sysctl net.netfilter.nf_conntrack_acct=1 to enable it.
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP cubic registered
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
NET: Registered protocol family 15
Ebtables v2.0 registered
802.1Q VLAN Support v1.8 Ben Greear greearb@candelatech.com
All bugs added by David S. Miller davem@redhat.com
arch/mips/atheros/gpio.c (ath_simple_config_init) JUMPSTART_GPIO: 16
athwdt_init: Registering WDT success
ath_otp_init: Registering OTP success
VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
Freeing unused kernel memory: 136k freed
starting pid 162, tty '': '/etc/init.d/rcS'
mount: mounting devpts on /dev/pts failed: No such device
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
Port Status 1c000004
ath-ehci ath-ehci.0: ATH EHCI
ath-ehci ath-ehci.0: new USB bus registered, assigned bus number 1
ehci_reset Intialize USB CONTROLLER in host mode: 13
ehci_reset Port Status 1c000000
ath-ehci ath-ehci.0: irq 3, io mem 0x1b000000
ehci_reset Intialize USB CONTROLLER in host mode: 13
ehci_reset Port Status 1c000000
ath-ehci ath-ehci.0: USB 2.0 started, EHCI 1.00
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
Port Status 1c000000
ath-ehci1 ath-ehci1.1: ATH EHCI
ath-ehci1 ath-ehci1.1: new USB bus registered, assigned bus number 2
ehci_reset Intialize USB CONTROLLER in host mode: 13
ehci_reset Port Status 1c000000
ath-ehci1 ath-ehci1.1: irq 3, io mem 0x1b400000
ehci_reset Intialize USB CONTROLLER in host mode: 13
ehci_reset Port Status 1c000000
ath-ehci1 ath-ehci1.1: USB 2.0 started, EHCI 1.00
usb usb2: configuration #1 chosen from 1 choice
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
dns_init
domain_name:tplinkmodem.net
PPPoL2TP kernel driver, V1.0

Please press Enter to activate this console. [ dm_readFile ] 2042: can not open xml file /var/tmp/pc/reduced_data_model.xml!, about to open file /etc/reduced_data_model.xml
[ oal_sys_readCfgFlash ] 714: User config length is too long - 6e666967

[ dm_loadCfg ] 2278: Read config from flash failed. ret = 1
[ dm_readFile ] 2042: can not open xml file /var/tmp/pc/default_config.xml!, about to open file /etc/default_config.xml
[ parseConfigNode ] 522: Meet unrecognized object node "PhDDNSCfg", skip the node
[ parseConfigNode ] 527: Meet unrecognized parameter node "PhDDNSCfg", skip the node
[ parseConfigNode ] 522: Meet unrecognized object node "X_TP_WANUSB3gLinkConfig", skip the node
[ parseConfigNode ] 522: Meet unrecognized object node "QueueManagement", skip the node
[ parseConfigNode ] 522: Meet unrecognized object node "VoiceService", skip the node
[ parseConfigNode ] 527: Meet unrecognized parameter node "VoiceService", skip the node
[ parseConfigNode ] 522: Meet unrecognized object node "X_TP_SpeedDialCfg", skip the node
[ parseConfigNode ] 522: Meet unrecognized object node "X_TP_MultiIspDialPlan", skip the node
[ parseConfigNode ] 522: Meet unrecognized object node "X_TP_CallLogCfg", skip the node
init system mode
qca955x_GMAC: Length per segment 1536
955x_GMAC: qca955x_gmac_attach
955x_GMAC: qca955x_set_gmac_caps
Currently in polling mode unit1
mac:1 Registering S17....
qca955x_GMAC: RX TASKLET - Pkts per Intr:200
qca955x_GMAC: Max segments per packet : 1
qca955x_GMAC: Max tx descriptor count : 220
qca955x_GMAC: Max rx descriptor count : 220
qca955x_GMAC: Mac capability flags : 12002200
955x_GMAC: qca955x_gmac_attach
955x_GMAC: qca955x_set_gmac_caps
Currently in polling mode unit0
mac:0 Registering S17....
qca955x_GMAC: RX TASKLET - Pkts per Intr:200
qca955x_GMAC: Max segments per packet : 1
qca955x_GMAC: Max tx descriptor count : 220
qca955x_GMAC: Max rx descriptor count : 220
qca955x_GMAC: Mac capability flags : 10002A00
955x_GMAC: Serdes PLL is locked value 0x1f038116
athr_gmac_ring_alloc Allocated 3520 at 0x87a3e000 for 1 (RX=0)
athr_gmac_ring_alloc Allocated 3520 at 0x87ac0000 for 0 (RX=0)
@@[athr_gmac_rx_alloc]: r->ring_desc is a7b56000 , r->ring_desc_dma is 7b56000 , r->ring_buffer is 87ac0000
955x_GMAC: eth1 in SGMII MODE
Scorpion -----> S17 PHY
[athrs17_reg_init]: entering
_athrs17_mac0_intf SGMII done
[athrs17_reg_init]: complete
955x_SGMII::athr_gmac_sgmii_setup Done
Setting Drop CRC Errors, Pause Frames and Length Error frames
Setting PHY...
[athrs17_disable_vlan_dsl]: Doing Basic init for Vlan for Grouping not enable
Phy setup Complete
955x_GMAC: enet unit:1 is up...
eth1 SGMII 1000Mbps full duplex
955x_GMAC: qca955x_soc_gmac_set_mac_duplex
955x_GMAC: qca955x_soc_gmac_set_link Done
955x_GMAC: done cfg2 0x7215 ifctl 0x0 miictrl
[ oal_sys_getOldTZInfo ] 359: Open TZ file error!
ioctl: No such device
device eth0.6 entered promiscuous mode
device eth0 entered promiscuous mode
br0: port 1(eth0.6) entering forwarding state
device eth0.6 left promiscuous mode
device eth0 left promiscuous mode
br0: port 1(eth0.6) entering disabled state
device eth0.2 entered promiscuous mode
device eth0 entered promiscuous mode
br0: port 1(eth0.2) entering forwarding state
device eth0.3 entered promiscuous mode
br0: port 2(eth0.3) entering forwarding state
device eth0.4 entered promiscuous mode
br0: port 3(eth0.4) entering forwarding state
device eth0.5 entered promiscuous mode
br0: port 4(eth0.5) entering forwarding state
**cal_data_2g
020200023537707500000000
**cal_data_end
**cal_data_5g
4408d8909999090000080808
**cal_data_end
adf: module license 'Proprietary' taints kernel.
Disabling lock debugging due to kernel taint
ath_hal: 0.9.17.1 (AR5416, AR9380, REGOPS_FUNC, WRITE_EEPROM, TX_DATA_SWAP, RX_DATA_SWAP, 11D)
ath_spectral: Version 2.0.0
Copyright (c) 2005-2009 Atheros Communications, Inc. All Rights Reserved
SPECTRAL module built on Dec 18 2014 16:51:08
ath_tx99: Version 2.0
Copyright (c) 2010 Atheros Communications, Inc, All Rights Reserved
ath_dfs: Version 2.0.0
Copyright (c) 2005-2006 Atheros Communications, Inc. All Rights Reserved
ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved
ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved
ath_ahb: 10.2-00155-8 (Atheros/multi-bss)
__ath_attach: Set global_scn[0]
Enterprise mode: 0x53fc0000
Restoring Cal data from Flash
SPECTRAL : get_capability not registered
HAL_CAP_PHYDIAG : Capable
SPECTRAL : Need to fix the capablity check for RADAR (spectral_attach : 231)
SPECTRAL : get_capability not registered
HAL_CAP_RADAR : Capable
SPECTRAL : Need to fix the capablity check for SPECTRAL
(spectral_attach : 236)
SPECTRAL : get_capability not registered
HAL_CAP_SPECTRAL_SCAN : Capable
SPECTRAL : get_tsf64 not registered
spectral_init_netlink 52 NULL SKB
SPECTRAL : No ADVANCED SPECTRAL SUPPORT
SPECTRAL :----- module attached
Green-AP : Green-AP : Attached

ath_get_caps[6148] rx chainmask mismatch actual 7 sc_chainmak 0
ath_get_caps[6123] tx chainmask mismatch actual 7 sc_chainmak 0
ath_attach_dfs[12558] dfsdomain 1
SPECTRAL : module already attached
wifi0: Atheros ???: mem=0xb8100000, irq=2
ath_pci: 10.2-00155-8 (Atheros/multi-bss)
ath_pci_probe
PCI device id is 003c :003c
ath_pci 0000:01:00.0: ath DEBUG: sc=0x86f67000

ol_ath_pci_configure : num_desired MSI set to 0

Using PCI Legacy Interrupt

Enet:1 port1 up
__ol_ath_attach: ath_attach TODO
__ol_ath_attach: dev name wifi1
ol_ath_set_default_tgt_config : AC Minfree buffer allocation through module param (umac.ko)
OL_ACBKMinfree : 0
OL_ACBEMinfree : 0
OL_ACVIMinfree : 0
OL_ACVOMinfree : 0
ol_ath_attach() BMI inited.
ol_ath_attach() BMI Get Target Info.
ol_ath_attach() TARGET TYPE: 7 Vers 0x4100016c
NUM_DEV=1 FWMODE=0x2 FWSUBMODE=0x0 FWBR_BUF 0

ath: factory configuration restored..
Erase from fc0000 with 100 bytes .
Write flash to fc0000, len is 100

Po wykonaniu tych komend logi są jak powyżej.
resetuje się cyklicznie
Czy to oznacza uszkodzenie pamięci?


(Heinz) #8

Sorki za opóźnienie.
Możliwe że "czegoś" dalej brakuje w firmware.
Próbowałeś się podłączyć konsolą do modemu? Może to on wydaje restarty?