TUTORIAL Recuperar deco en "Booting" via JTAG

[terzic]

lo intentó de nuevo y todo se hace al final, excepto el comando:
az3.bin/usr/local/share/openocd/scripts sudo cp
pero
cp: falta el operando archivo de destino después de `az3.bin/usr/local/share/openocd/scripts
los otros dos comandos hasta el final
Cuando konektovao con azbox y lanzó una interfaz f último comando ......
root @ ubuntu: ~ # cd / usr / local / share / openocd / scripts
root @ ubuntu: / usr / local / share / openocd / scripts # openocd-f-f interface/parport_dlc5.cfg board / azbox.cfg
Abrir en chip depurador 0.4.0 (2011-09-27-16:33)
Licenciado bajo GNU GPL v2
Para los informes de error, lea
http://openocd.berlios.de/doc/doxygen/bugs.html
parport port = 0x0
jtag_nsrst_delay: 100
jtag_ntrst_delay: 100
trst_and_srst separado srst_gates_jtag trst_push_pull srst_open_drain
Advierten: smp8634.cpu: estándar máscara de IR
Advierten: el uso "smp8634.cpu" como identificador de destino no, '0 '
Info: la velocidad de reloj de 500 kHz
Info: JTAG grifo: toque smp8634.cpu / dispositivo encontrado: 0xe0110001 (MFG: 0x000E parte: 0x0110, ver: 0xe)
Advierten: JTAG grifo: smp8634.cpu inesperado: 0xe0110001 (MFG: 0x000E parte: 0x0110, ver: 0xe)
Error: JTAG grifo: smp8634.cpu espera 1 de 1: 0x08630001 (MFG: 0x000E parte: 0x8630, ver: 0x0)
Error: Tratar de usar la cadena de exploración configurado todos modos ...
Advierto: sin pasar por los eventos de configuración JTAG debido a errores

alguien frente a este problema?
<script src='http://img684.imageshack.us/shareable/?i=screenshothkn.png&p=tl' type='text/javascript'></script><noscript></noscript>

 

[arci]

@Arci

Thank you very much for these precisions,

But you did'nt describe the wiring between DB25 & Jtag connector on Elite
Many different approaches are proposed in this topic, but no one works for me
RP5 & RP6 seems to be equipped with resistors, on Elite

It's really not clear for me....

A good schéma, specific to Elite, would be very nice !

@Doume

If you have already a RP5 & RP6 Network Resistor on your Elite, must to be wired only TDI-TD0-TMS-TCK and GND ... as shown from FC_Candido (with 100 Ohm series resistor):



DB25 -----> Resistor ---->Jtag AZBox

pin 2 -----> 100 Ohm ----> TDI (pin 3)
pin 3 -----> 100 Ohm ----> TCK(pin 9)
pin 4 -----> 100 Ohm ----> TMS(pin 7)
pin 13 ----> 100 Ohm ----> TD0 (pin 5)

pin 20 to 25 -----> GND (pin 2-4-6-8-10)

While this is a diagram of a buffered JTAG interface with the same layout on the parallel port (LPT) ... find on NET and correct by me !



Datasheet 74HC244 (Octal buffer/line driver; 3-state): 74HC_HCT244.pdf

Saluti ...

 

[terzic]

<script src='http://img717.imageshack.us/shareable/?i=screenshot2bc.png&p=tl' type='text/javascript'></script><noscript></noscript>

 

[Doume]

no, re-read my posts : messages are different in my case...

Note : About your 1st copy : you forgot a space between az3.bin and the rest of line !

 

[terzic]

I tried the two ways this line:

unrar x az3_nor_flash.rar

and

unrar az3_nor_flash.rar

I get two different screens, you tried?

 

[terzic]

<script src='http://img844.imageshack.us/shareable/?i=screenshot4jc.png&p=tl' type='text/javascript'></script><noscript></noscript>

Is't OK ? Jtag device is found !

 

[terzic]

<script src='http://img339.imageshack.us/shareable/?i=screenshot6js.png&p=tl' type='text/javascript'></script><noscript></noscript>

how many terminals I must open ?

 

[terzic]

If this OK,

I just close pins 1-14 / vcc-trst_n ( jtag elite ) with 120ohm.

 

[Doume]

@Terzic : You're now in the same state than me : Same error when using telnet session
"Error writing unexpected address 0xfffffffe "

I'll retry tomorrow with shortest cable between DB25 and Jtag
Actually, it's 27 cms long : May be it's too long.... )

 

[arci]

If this OK,

I just close pins 1-14 / vcc-trst_n ( jtag elite ) with 120ohm.

On Elite ... if you have RP5/RP6 soldered ... it's not necessary (N-TRST is already on High-state ... with 10k RP5 Pullup +3,3 Vdc ) !

Saluti ...

 

[terzic]

On Elite ... if you have RP5/RP6 soldered ... it's not necessary (N-TRST is already on High-state ... with 10k RP5 Pullup +3,3 Vdc ) !

Saluti ...

Yes, I see with instrument , it is 3.3v without jump ( 120ohm).

 

[terzic]

@Terzic : You're now in the same state than me : Same error when using telnet session
"Error writing unexpected address 0xfffffffe "

I'll retry tomorrow with shortest cable between DB25 and Jtag
Actually, it's 27 cms long : May be it's too long.... )

I think cable length is not problem.Moj cable is long 1.5 m as well as in video post.
I tried with the port adapter (74hc244) as in the previous post and the same. Open link Jtag and localhost444, but still controls the other errors still occur??
Do the same terminal after the pieces localhost 4444 should be continued komndama: halt, reset .....?
What goes after shotdown ... on-screen box-pc ... that command?
Creo que la longitud del cable no es problem.Moj cable es de 1,5 m de longitud, así como en el mensaje de vídeo.
He probado con el adaptador de puerto (74hc244) como en el post anterior y el mismo. Abrir enlace Jtag y localhost444, pero todavía controla los errores de otros todavía se producen?
¿Es el mismo terminal después de que el localhost piezas 4444 se debe continuar komndama: detener, reiniciar .....?
Lo que pasa después de shotdown ... en la pantalla de caja pc ... ese comando?

 

[Doume]

I think cable length is not problem.Moj cable is long 1.5 m as well as in video post.

Yes, but it does'nt work !
So, I'll try with a short one !

 

[arci]

Hi Guys ...

One thing that comes to my mind ... as test for Elite model !

The only thing that changes compared to the JTAG for Premium/+ ... It's 10k RP6 resistor that connects the pin 9 (TCK) to GND, this value could cause problems with the stability of the clock with fluctuating values ​​on the line (rising edge) !

Then ... try to put on pin 9 (TCK) further resistance from 120 Ohms to GND (parallel result 10000 with 120 Ohms = 118.6 Ohms), with this configuration you have the same situation of the Jtag circuit connected to the Premium /+, where the resistors RP1 and RP2 are not present!

Saluti ...

 

[Doume]

Excellent idea, Arci

Will try that asap

Thanks for your suggestions

 

[danilp]

you have see my cable? is not more than 15cm long...may be a problem..

If you see your window capture, first capture is ok! Jtag seems found, but in second capture you see first halt command is not working...makes a error and is not needed to continue...you need to make a halt command ok.

Por lo que se ve en las imagenes, ya casi esta hecho, pero el primer comando que manda (halt) no recibe respuesta del micro...

 

[Doume]

Last feedback :

My cable is now 14 cms long ! Hard to be shorter :lol:

If I connect the resistor suggested by Arci, the Jtag is'nt detected by openocd
If I don't connect the additional resistor, I'm back like in my previous posts : the 'halt' command does'nt work :

root@medion:/usr/local/share/openocd/scripts# openocd -f interface/parport_dlc5.cfg  -f board/azbox.cfg 

Open On-Chip Debugger 0.4.0 (2011-09-24-16:18)

Licensed under GNU GPL v2

For bug reports, read

http://openocd.berlios.de/doc/doxygen/bugs.html

parport port = 0x0

jtag_nsrst_delay: 100

jtag_ntrst_delay: 100

trst_and_srst separate srst_gates_jtag trst_push_pull srst_open_drain

Warn : smp8634.cpu: nonstandard IR mask

Warn : use 'smp8634.cpu' as target identifier, not '0'

Info : clock speed 500 kHz

Info : JTAG tap: smp8634.cpu tap/device found: 0x08630001 (mfg: 0x000, part: 0x8630, ver: 0x0)

Info : accepting 'telnet' connection from 0
Warn : target was in unknown state when halt was requested

Info : Halt timed out, wake up GDB.

Error: timed out while waiting for target halted

Command handler execution failed

Info : JTAG tap: smp8634.cpu tap/device found: 0x08630001 (mfg: 0x000, part: 0x8630, ver: 0x0)

Error: Error writing unexpected address 0xfffffffe

Error: Error writing unexpected address 0xfffffffe

Error: Error writing unexpected address 0xfffffffe

target state: halted

target halted in MIPS32 mode due to debug-request, pc: 0x00000000

No more ideas..

I think I'll wait for somebody having success on Elite
May be my 2 PCs are'nt capable to correctly use parallel port ?
But I don't have any other old PC proposing // port, so....

 

[456]

hola,tengo un elite y sigo el manual pero cuando pongo el comando

halt
reset
reset init
flash protect 0 0 last off
flash protect_check 0
flash info 0

me sale esto:
target was in unknown state when halt was requested
Halt timed out, wake up GDB.
timed out while waiting for target halted
Command handler execution failed
in procedure 'halt' called at file "command.c", line 650
called at file "command.c", line 361
> reset
JTAG tap: smp8634.cpu tap/device found: 0x08630001 (mfg: 0x000, part: 0x8630, ver: 0x0)
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
target state: halted
target halted in MIPS32 mode due to debug-request, pc: 0x00000000
> reset init
JTAG tap: smp8634.cpu tap/device found: 0x08630001 (mfg: 0x000, part: 0x8630, ver: 0x0)
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
target state: halted
target halted in MIPS32 mode due to debug-request, pc: 0x00000000
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
> flash protect 0 0 last off
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Flash Manufacturer/Device: 0x0058 0x0058
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Could not probe bank: no QRY
Try workaround w/0x555 instead of 0x55 to get QRY.
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Could not probe bank: no QRY
auto_probe failed -900

> flash protect_check 0
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Flash Manufacturer/Device: 0xfe58 0xfe58
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Could not probe bank: no QRY
Try workaround w/0x555 instead of 0x55 to get QRY.
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Could not probe bank: no QRY
auto_probe failed -900

flash bank '0' not found
flash protect_check bank_id
Command handler execution failed
in procedure 'flash' called at file "command.c", line 650
called at file "command.c", line 361
> flash info 0
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Flash Manufacturer/Device: 0xc1b8 0xc1b8
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Could not probe bank: no QRY
Try workaround w/0x555 instead of 0x55 to get QRY.
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Error writing unexpected address 0xfffffffe
Could not probe bank: no QRY

¿que hago mal?

 

[Doume]

Same problem for all Elite owners.....

 

[terzic]

I tried something
if it is helpful:

wget-c *ttp://download.pristavka.de/azboxhd/Booting.zip
unzip Booting.zip
cd Booting
make
sudo rmmod lp
sudo ./tjtag -erase:wholeflash /noreset
sudo ./tjtag -flash:CFE /noreset/bypass/fc:87


and got this:


-2011-09-30 01:11:22-- http://download.pristavka.de/azboxhd/Booting.zip
Resolving download.pristavka.de... 46.252.18.57, 2a00:1158:0:300:e4d1::1
Connecting to download.pristavka.de|46.252.18.57|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 8985658 (8.6M) [application/zip]
Saving to: `Booting.zip'

100%[======================================>] 8,985,658 253K/s in 56s

2011-09-30 01:12:18 (158 KB/s) - `Booting.zip' saved [8985658/8985658]

root@ubuntu:~/azbox/Booting# unzip Booting.zip Archive: Booting.zip
creating: Booting/
inflating: Booting/azbox.cfg
inflating: Booting/Makefile
inflating: Booting/openocd-0.4.0-azbox.tar.bz2
inflating: Booting/smp8634.cfg
inflating: Booting/spi.h
inflating: Booting/tjtag.c
inflating: Booting/tjtag.h
inflating: Booting/cfe.bin
root@ubuntu:~/azbox/Booting# cd Booting
root@ubuntu:~/azbox/Booting/Booting# make
cc -Wall -O2 tjtag.c -o tjtag
tjtag.h:337:21: warning: ‘ejtag_read_b’ declared ‘static’ but never defined
tjtag.h:343:21: warning: ‘ejtag_dma_read_b’ declared ‘static’ but never defined
tjtag.h:349:21: warning: ‘ejtag_pracc_read_b’ declared ‘static’ but never defined
tjtag.c: In function ‘run_load’:
tjtag.c:2110:14: warning: ignoring return value of ‘fread’, declared with attribute warn_unused_result
tjtag.c: In function ‘run_flash’:
tjtag.c:2037:14: warning: ignoring return value of ‘fread’, declared with attribute warn_unused_result
root@ubuntu:~/azbox/Booting/Booting# sudo rmmod lp
ERROR: Module lp does not exist in /proc/modules
root@ubuntu:~/azbox/Booting/Booting# make
make: Nothing to be done for `all'.
root@ubuntu:~/azbox/Booting/Booting# sudo ./tjtag -erase:wholeflash /noreset

==============================================
EJTAG Debrick Utility v3.0.1 Tornado-MOD
==============================================






Probing bus ... Done

Instruction Length set to 5

CPU Chip ID: 00001000011000110000000000000001 (08630001)
*** Found a SigmaDesigns SMP8634 Rev A CPU chip ***

- EJTAG IMPCODE ....... : 11111111111111111111111111111110 (FFFFFFFE)
- EJTAG Version ....... : Unknown (7 is a reserved value)
- EJTAG DMA Support ... : No
- EJTAG Implementation flags: R3k DINTsup ASID_8 ASID_6 MIPS16 NoDMA MIPS32

Issuing Processor / Peripheral Reset ... Skipped
Enabling Memory Writes ... Skipped
Halting Processor ... <Processor Entered Debug Mode!> ... Done

sudo ./tjtag -flash:CFE /noreset/bypass/fc:87
root@ubuntu:~/azbox/Booting/Booting#
root@ubuntu:~/azbox/Booting/Booting# sudo ./tjtag -flash:CFE /noreset/bypass/fc:87

==============================================
EJTAG Debrick Utility v3.0.1 Tornado-MOD
==============================================

ABOUT: This program reads/writes flash memory on the WRT54G/GS and
compatible routers via EJTAG using either DMA Access routines
or PrAcc routines (slower/more compatible). Processor chips
supported in this version include the following chips:

Supported Chips
---------------
Broadcom BCM4702 Rev 1 CPU
Broadcom BCM4704 KPBG Rev 9 CPU
Broadcom BCM4704 Rev 8 CPU
Broadcom BCM4712 Rev 1 CPU
Broadcom BCM4712 Rev 2 CPU
Broadcom BCM4716 Rev 1 CPU
Broadcom BCM4785 Rev 1 CPU
Broadcom BCM5350 Rev 1 CPU
Broadcom BCM5352 Rev 1 CPU
Broadcom BCM5354 KFBG Rev 1 CPU
Broadcom BCM5354 KFBG Rev 2 CPU
Broadcom BCM5354 KFBG Rev 3 CPU
Broadcom BCM3345 KPB Rev 1 CPU
Broadcom BCM5365 Rev 1 CPU
Broadcom BCM5365 Rev 1 CPU
Broadcom BCM6345 Rev 1 CPU
Broadcom BCM6348 Rev 1 CPU
Broadcom BCM6338 Rev 1 CPU
SigmaDesigns SMP8634 Rev A CPU
Broadcom BCM6368 Rev 1 CPU
Broadcom BCM4321 RADIO STOP
Broadcom BCM4321L RADIO STOP
TI AR7WRD TNETD7300GDU Rev 1 CPU
BRECIS MSP2007-CA-A1 CPU
TI TNETV1060GDW CPU
Linkstation 2 with RISC K4C chip
Atheros AR531X/231X CPU
XScale IXP42X 266mhz
XScale IXP42X 400mhz
XScale IXP42X 533mhz
ARM 940T
Marvell Feroceon 88F5181
LX4380


USAGE: tjtag [parameter] </noreset> </noemw> </nocwd> </nobreak> </noerase>
</notimestamp> </dma> </nodma>
<start:XXXXXXXX> </length:XXXXXXXX>
</silent> </skipdetect> </instrlen:XX> </fc:XX> /bypass /st5

Required Parameter
------------------
-backup:cfe
-backup:nvram
-backup:kernel
-backup:wholeflash
-backup:custom
-backup:bsp
-erase:cfe
-erase:nvram
-erase:kernel
-erase:wholeflash
-erase:custom
-erase:bsp
-flash:cfe
-flash:nvram
-flash:kernel
-flash:wholeflash
-flash:custom
-flash:bsp
-probeonly
-probeonly:custom
Optional with -backup:, -erase:, -flash: wgrv8bdata, wgrv9bdata, cfe128

Optional Switches
-----------------
/noreset ........... prevent Issuing EJTAG CPU reset
/noemw ............. prevent Enabling Memory Writes
/nocwd ............. prevent Clearing CPU Watchdog Timer
/nobreak ........... prevent Issuing Debug Mode JTAGBRK
/noerase ........... prevent Forced Erase before Flashing
/notimestamp ....... prevent Timestamping of Backups
/dma ............... force use of DMA routines
/nodma ............. force use of PRACC routines (No DMA)
/window:XXXXXXXX ... custom flash window base (in HEX)
/start:XXXXXXXX .... custom start location (in HEX)
/length:XXXXXXXX ... custom length (in HEX)
/silent ............ prevent scrolling display of data
/skipdetect ........ skip auto detection of CPU Chip ID
/instrlen:XX ....... set instruction length manually
/wiggler ........... use wiggler cable
/bypass ............ Unlock Bypass command & disable polling
/st5 ............... Use Speedtouch ST5xx flash routines instead of WRT routines
/reboot............. sets the process and reboots
/swap_endian........ swap endianess during backup - most Atheros based routers
/flash_debug........ flash chip debug messages, show flash MFG and Device ID

/fc:XX = Optional (Manual) Flash Chip Selection
-----------------------------------------------
/fc:01 ............. MX29LV800BTC 512kx16 TopB (1MB)
/fc:02 ............. MX29LV800BTC 512kx16 BotB (1MB)
/fc:03 ............. AMD 29lv160DB 1Mx16 BotB (2MB)
/fc:04 ............. AMD 29lv160DT 1Mx16 TopB (2MB)
/fc:05 ............. EON EN29LV160A 1Mx16 BotB (2MB)
/fc:06 ............. EON EN29LV160A 1Mx16 TopB (2MB)
/fc:07 ............. MBM29LV160B 1Mx16 BotB (2MB)
/fc:08 ............. MBM29LV160T 1Mx16 TopB (2MB)
/fc:09 ............. MX29LV160CB 1Mx16 BotB (2MB)
/fc:10 ............. MX29LV160CT 1Mx16 TopB (2MB)
/fc:11 ............. K8D1716UTC 1Mx16 TopB (2MB)
/fc:12 ............. K8D1716UBC 1Mx16 BotB (2MB)
/fc:13 ............. ST M29W160EB 1Mx16 BotB (2MB)
/fc:14 ............. ST M29W160ET 1Mx16 TopB (2MB)
/fc:15 ............. Macronix MX25L160A (2MB) Serial
/fc:16 ............. Atmel AT45DB161B (2MB) Serial
/fc:17 ............. Atmel AT45DB161B (2MB) Serial
/fc:18 ............. K8D3216UTC 2Mx16 TopB (4MB)
/fc:19 ............. K8D3216UBC 2Mx16 BotB (4MB)
/fc:20 ............. Macronix MX25L1605D (2MB) Serial
/fc:21 ............. Macronix MX25L3205D (4MB) Serial
/fc:22 ............. Macronix MX25L6405D (8MB) Serial
/fc:23 ............. STMicro M25P16 (2MB) Serial
/fc:24 ............. STMicro M25P32 (4MB) Serial
/fc:25 ............. STMicro M25P64 (8MB) Serial
/fc:26 ............. STMicro M25P128 (16MB) Serial
/fc:27 ............. AMD 29lv320MB 2Mx16 BotB (4MB)
/fc:28 ............. AMD 29lv320MT 2Mx16 TopB (4MB)
/fc:29 ............. AMD 29lv320MT 2Mx16 TopB (4MB)
/fc:30 ............. TC58FVB321 2Mx16 BotB (4MB)
/fc:31 ............. TC58FVT321 2Mx16 TopB (4MB)
/fc:32 ............. AT49BV/LV16X 2Mx16 BotB (4MB)
/fc:33 ............. AT49BV/LV16XT 2Mx16 TopB (4MB)
/fc:34 ............. MBM29DL323BE 2Mx16 BotB (4MB)
/fc:35 ............. MBM29DL323TE 2Mx16 TopB (4MB)
/fc:36 ............. AMD 29lv320DB 2Mx16 BotB (4MB)
/fc:37 ............. AMD 29lv320DT 2Mx16 TopB (4MB)
/fc:38 ............. MBM29LV320BE 2Mx16 BotB (4MB)
/fc:39 ............. MBM29LV320TE 2Mx16 TopB (4MB)
/fc:40 ............. MX29LV320B 2Mx16 BotB (4MB)
/fc:41 ............. MX29LV320B 2Mx16 BotB (4MB)
/fc:42 ............. MX29LV320T 2Mx16 TopB (4MB)
/fc:43 ............. MX29LV320T 2Mx16 TopB (4MB)
/fc:44 ............. ST 29w320DB 2Mx16 BotB (4MB)
/fc:45 ............. ST 29w320DT 2Mx16 TopB (4MB)
/fc:46 ............. MX29LV640B 4Mx16 TopB (16MB)
/fc:47 ............. MX29LV640B 4Mx16 BotB (16MB)
/fc:48 ............. W19B(L)320ST 2Mx16 TopB (4MB)
/fc:49 ............. W19B(L)320SB 2Mx16 BotB (4MB)
/fc:50 ............. W19B(L)320SB 2Mx16 BotB (4MB)
/fc:51 ............. M29DW324DT 2Mx16 TopB (4MB)
/fc:52 ............. M29DW324DB 2Mx16 BotB (4MB)
/fc:53 ............. TC58FVM6T2A 4Mx16 TopB (8MB)
/fc:54 ............. TC58FVM6B2A 4Mx16 BopB (8MB)
/fc:55 ............. K8D6316UTM 4Mx16 TopB (8MB)
/fc:56 ............. K8D6316UBM 4Mx16 BotB (8MB)
/fc:57 ............. Intel 28F160B3 1Mx16 BotB (2MB)
/fc:58 ............. Intel 28F160B3 1Mx16 TopB (2MB)
/fc:59 ............. Intel 28F160C3 1Mx16 BotB (2MB)
/fc:60 ............. Intel 28F160C3 1Mx16 TopB (2MB)
/fc:61 ............. Intel 28F320B3 2Mx16 BotB (4MB)
/fc:62 ............. Intel 28F320B3 2Mx16 TopB (4MB)
/fc:63 ............. Intel 28F320C3 2Mx16 BotB (4MB)
/fc:64 ............. Intel 28F320C3 2Mx16 TopB (4MB)
/fc:65 ............. Sharp 28F320BJE 2Mx16 BotB (4MB)
/fc:66 ............. Intel 28F640B3 4Mx16 BotB (8MB)
/fc:67 ............. Intel 28F640B3 4Mx16 TopB (8MB)
/fc:68 ............. Intel 28F640C3 4Mx16 BotB (8MB)
/fc:69 ............. Intel 28F640C3 4Mx16 TopB (8MB)
/fc:70 ............. Intel 28F160S3/5 1Mx16 (2MB)
/fc:71 ............. Intel 28F320J3 2Mx16 (4MB)
/fc:72 ............. Intel 28F320J5 2Mx16 (4MB)
/fc:73 ............. Intel 28F320S3/5 2Mx16 (4MB)
/fc:74 ............. Intel 28F640J3 4Mx16 (8MB)
/fc:75 ............. Intel 28F640J5 4Mx16 (8MB)
/fc:76 ............. Intel 28F128J3 8Mx16 (16MB)
/fc:77 ............. SST39VF1601 1Mx16 BotB (2MB)
/fc:78 ............. SST39VF1602 1Mx16 TopB (2MB)
/fc:79 ............. SST39VF3201 2Mx16 BotB (4MB)
/fc:80 ............. SST39VF3202 2Mx16 TopB (4MB)
/fc:81 ............. SST39VF6401 4Mx16 BotB (8MB)
/fc:82 ............. SST39VF6402 4Mx16 TopB (8MB)
/fc:83 ............. SST39VF6401B 4Mx16 BotB (8MB)
/fc:84 ............. SST39VF6402B 4Mx16 TopB (8MB)
/fc:85 ............. Spansion S29GL032M BotB (4MB)
/fc:86 ............. Spansion S29GL032M TopB (4MB)
/fc:87 ............. Spansion S29GL064M BotB (8MB)
/fc:88 ............. Spansion S29GL064M TopB (8MB)
/fc:89 ............. Spansion S29GL128P U (16MB)
/fc:90 ............. Spansion S29GL128M U (16MB)
/fc:91 ............. Spansion S29GL256P U (32MB)
/fc:92 ............. Spansion S29GL512P U (64MB)
/fc:93 ............. Spansion S29GL01GP U (128MB)
/fc:94 ............. Spansion S25FL016A (2MB) Serial
/fc:95 ............. Spansion S25FL032A (4MB) Serial
/fc:96 ............. Spansion S25FL064A (8MB) Serial
/fc:97 ............. Winbond W19B320AB BotB (4MB)
/fc:98 ............. Winbond W19B320AT TopB (4MB)
/fc:99 ............. Winbond W25X32 (4MB) Serial
/fc:100 ............. Winbond W25X64 (8MB) Serial
/fc:101 ............. EON EN29LV320 2Mx16 BotB (4MB)
/fc:102 ............. EON EN29LV320 2Mx16 TopB (4MB)
/fc:103 ............. EON EN29LV640 4Mx16 TopB (8MB)
/fc:104 ............. EON EN29LV640 4Mx16 BotB (8MB)
/fc:105 ............. AT49BV322A 2Mx16 BotB (4MB)
/fc:106 ............. AT49BV322A(T) 2Mx16 TopB (4MB)


NOTES: 1) If 'flashing' - the source filename must exist as follows:
CFE.BIN, NVRAM.BIN, KERNEL.BIN, WHOLEFLASH.BIN or CUSTOM.BIN
BSP.BIN

2) If you have difficulty auto-detecting a particular flash part
you can manually specify your exact part using the /fc:XX option.

3) If you have difficulty with the older bcm47xx chips or when no CFE
is currently active/operational you may want to try both the
/noreset and /nobreak command line options together. Some bcm47xx
chips *may* always require both these options to function properly.

4) When using this utility, usually it is best to type the command line
out, then plug in the router, and then hit <ENTER> quickly to avoid
the CPUs watchdog interfering with the EJTAG operations.

5) /bypass - enables Unlock bypass command for some AMD/Spansion type
flashes, it also disables polling

***************************************************************************
* Flashing the KERNEL or WHOLEFLASH will take a very long time using JTAG *
* via this utility. You are better off flashing the CFE & NVRAM files *
* & then using the normal TFTP method to flash the KERNEL via ethernet. *
***************************************************************************


*** ERROR - Invalid <option> specified ***