|
|
发表于 2010-8-23 15:16:55
|
显示全部楼层
或批处理文件。
C:\>cd/jtag
C:\jtag>brjtag
===============================================
Broadcom EJTAG Debrick Utility v1.6r-hugebird
===============================================
ABOUT: This program reads/writes flash memory on the Broadcom MIPS(LE)
Chip and compatible routers via EJTAG using either DMA Access
routines or PrAcc routines (slower/more compatible). Processor chips
supported in this version include the following chips:
Supported Chips
---------------
Broadcom BCM4702 Rev 1 CPU
Broadcom BCM4704 KPBG Rev 9 CPU
Broadcom BCM4704 Rev 8 CPU
Broadcom BCM4712 Rev 1 CPU
Broadcom BCM4712 Rev 2 CPU
Broadcom BCM4785 Rev 1 CPU
Broadcom BCM5350 Rev 1 CPU
Broadcom BCM5352 Rev 1 CPU
Broadcom BCM5354 KFBG Rev 1 CPU
Broadcom BCM5354 KFBG Rev 2 CPU
Broadcom BCM5365 Rev 1 CPU
Broadcom BCM5365 Rev 1 CPU
Broadcom BCM6345 Rev 1 CPU
Broadcom BCM6338 Rev 1 CPU
Broadcom BCM6348 Rev 1 CPU
Broadcom BCM6358 Rev 1 CPU
Broadcom BCM6368 Rev 1 CPU
TI AR7WRD TNETD7300GDU Rev 1 CPU
BRECIS MSP2007-CA-A1 CPU
TI TNETV1060GDW CPU
USAGE: BrJtag [parameter] </noreset> </noemw> </nocwd> </nobreak></revendian>
</notimestamp> </dma> </nodma> </noerase></initcpu>
</bypass></forcealign></showppb></clearppb></erasechip>
<window:XXXXXXXX><start:XXXXXXXX> </length:XXXXXXXX>
<port:XXX> </instrlen:XX> </fc:XX></skipdetect>
</tinycfe></wiggler></verbose>
Required Parameter
------------------
-backup:cfe
-backup:tfe
-backup:nvram
-backup:kernel
-backup:ternel
-backup:wholeflash
-backup:custom
-backup:bsp
-erase:cfe
-erase:tfe
-erase:nvram
-erase:kernel
-erase:ternel
-erase:wholeflash
-erase:custom
-erase:bsp
-flash:cfe
-flash:tfe
-flash:nvram
-flash:kernel
-flash:ternel
-flash:wholeflash
-flash:custom
-flash:bsp
-probeonly
Optional Switches
-----------------
/noreset ........... prevent Issuing EJTAG CPU reset
/noemw ............. prevent Enabling Memory Writes
/nocwd ............. prevent Clearing CPU Watchdog Timer
/nobreak ........... prevent Issuing Debug Mode JTAGBRK
/noerase ........... prevent Forced Erase before Flashing
/notimestamp ....... prevent Timestamping of Backups
/dma ............... force use of DMA routines
/nodma ............. force use of PRACC routines (No DMA)
/initcpu............ load CPU configuration code
/revendian.......... reverse chip endian
/window:XXXXXXXX ... custom flash window base&probe address(in HEX)
/start:XXXXXXXX .... custom start location (in HEX)
/length:XXXXXXXX ... custom length (in HEX)
/verbose............ scrolling display of data
/skipdetect ........ skip auto detection of CPU Chip ID
/instrlen:XX ....... set CPU instruction length manually
/wiggler ........... use wiggler cable
/bypass ............ unlock Spansion bypass mode & disable polling
/forcealign......... force erase address align with block boundary
/erasechip.......... erase whole chip, only work with -probeonly
/clearppb........... erase Spansion PPB,only work with -probeonly
/showppb ........... show flash sector protection status
only work with -probeonly
/tinycfe............ one sector tiny CFE support(= TFE or TERNEL)
/port:XXX........... customize parallel port(default XXX is 378)
only work in Windows version
/fc:XX = Optional (Manual) Flash Chip Selection
-----------------------------------------------
/fc:01 ............. MX29LV800BTC 512kx16 TopB (1MB)
/fc:02 ............. MX29LV800BTC 512kx16 BotB (1MB)
/fc:03 ............. AMD 29lv160DB 1Mx16 BotB (2MB)
/fc:04 ............. AMD 29lv160DT 1Mx16 TopB (2MB)
/fc:05 ............. EON EN29LV160A 1Mx16 BotB (2MB)
/fc:06 ............. EON EN29LV160A 1Mx16 TopB (2MB)
/fc:07 ............. MBM29LV160B 1Mx16 BotB (2MB)
/fc:08 ............. MBM29LV160T 1Mx16 TopB (2MB)
/fc:09 ............. MX29LV161B 1Mx16 BotB (2MB)
/fc:10 ............. MX29LV161T 1Mx16 TopB (2MB)
/fc:11 ............. K8D1716UTC 1Mx16 TopB (2MB)
/fc:12 ............. K8D1716UBC 1Mx16 BotB (2MB)
/fc:13 ............. ST M29W160EB 1Mx16 BotB (2MB)
/fc:14 ............. ST M29W160ET 1Mx16 TopB (2MB)
/fc:15 ............. Macronix MX25L160A (2MB)
/fc:16 ............. K8D3216UTC 2Mx16 TopB (4MB)
/fc:17 ............. K8D3216UBC 2Mx16 BotB (4MB)
/fc:18 ............. AMD 29lv320MB 2Mx16 BotB (4MB)
/fc:19 ............. AMD 29lv320MT 2Mx16 TopB (4MB)
/fc:20 ............. AMD 29lv320MT 2Mx16 TopB (4MB)
/fc:21 ............. TC58FVB321 2Mx16 BotB (4MB)
/fc:22 ............. TC58FVT321 2Mx16 TopB (4MB)
/fc:23 ............. AT49BV/LV16X 2Mx16 BotB (4MB)
/fc:24 ............. AT49BV/LV16XT 2Mx16 TopB (4MB)
/fc:25 ............. MBM29DL323BE 2Mx16 BotB (4MB)
/fc:26 ............. MBM29DL323TE 2Mx16 TopB (4MB)
/fc:27 ............. AMD 29lv320DB 2Mx16 BotB (4MB)
/fc:28 ............. AMD 29lv320DT 2Mx16 TopB (4MB)
/fc:29 ............. MBM29LV320BE 2Mx16 BotB (4MB)
/fc:30 ............. MBM29LV320TE 2Mx16 TopB (4MB)
/fc:31 ............. MX29LV320AB 2Mx16 BotB (4MB)
/fc:32 ............. MX29LV320AB 2Mx16 BotB (4MB)
/fc:33 ............. MX29LV320AT 2Mx16 TopB (4MB)
/fc:34 ............. MX29LV320AT 2Mx16 TopB (4MB)
/fc:35 ............. ST 29w320DB 2Mx16 BotB (4MB)
/fc:36 ............. ST 29w320DT 2Mx16 TopB (4MB)
/fc:37 ............. W19B(L)320ST 2Mx16 TopB (4MB)
/fc:38 ............. W19B(L)320SB 2Mx16 BotB (4MB)
/fc:39 ............. M29DW324DT 2Mx16 TopB (4MB)
/fc:40 ............. M29DW324DB 2Mx16 BotB (4MB)
/fc:41 ............. TC58FVM6T2A 4Mx16 TopB (8MB)
/fc:42 ............. TC58FVM6B2A 4Mx16 BopB (8MB)
/fc:43 ............. K8D6316UTM 4Mx16 TopB (8MB)
/fc:44 ............. K8D6316UBM 4Mx16 BotB (8MB)
/fc:45 ............. Intel 28F160B3 1Mx16 BotB (2MB)
/fc:46 ............. Intel 28F160B3 1Mx16 TopB (2MB)
/fc:47 ............. Intel 28F160C3 1Mx16 BotB (2MB)
/fc:48 ............. Intel 28F160C3 1Mx16 TopB (2MB)
/fc:49 ............. Intel 28F320B3 2Mx16 BotB (4MB)
/fc:50 ............. Intel 28F320B3 2Mx16 TopB (4MB)
/fc:51 ............. Intel 28F320C3 2Mx16 BotB (4MB)
/fc:52 ............. Intel 28F320C3 2Mx16 TopB (4MB)
/fc:53 ............. Sharp 28F320BJE 2Mx16 BotB (4MB)
/fc:54 ............. Intel 28F640B3 4Mx16 BotB (8MB)
/fc:55 ............. Intel 28F640B3 4Mx16 TopB (8MB)
/fc:56 ............. Intel 28F640C3 4Mx16 BotB (8MB)
/fc:57 ............. Intel 28F640C3 4Mx16 TopB (8MB)
/fc:58 ............. Intel 28F160S3/5 1Mx16 (2MB)
/fc:59 ............. Intel 28F320J3 2Mx16 (4MB)
/fc:60 ............. Intel 28F320J5 2Mx16 (4MB)
/fc:61 ............. Intel 28F320S3/5 2Mx16 (4MB)
/fc:62 ............. Intel 28F640J3 4Mx16 (8MB)
/fc:63 ............. Intel 28F640J5 4Mx16 (8MB)
/fc:64 ............. Intel 28F128J3 8Mx16 (16MB)
/fc:65 ............. SST39VF1601 1Mx16 BotB (2MB)
/fc:66 ............. SST39VF1602 1Mx16 TopB (2MB)
/fc:67 ............. SST39VF3201 2Mx16 BotB (4MB)
/fc:68 ............. SST39VF3202 2Mx16 TopB (4MB)
/fc:69 ............. SST39VF320 2Mx16 (4MB)
/fc:70 ............. SST39VF6401 4Mx16 BotB (8MB)
/fc:71 ............. SST39VF6402 4Mx16 TopB (8MB)
/fc:72 ............. SST39VF6401B 4Mx16 BotB (8MB)
/fc:73 ............. SST39VF6402B 4Mx16 TopB (8MB)
/fc:74 ............. Spansion S29GL032MR4 BotB (4MB)
/fc:75 ............. Spansion S29GL032MR3 TopB (4MB)
/fc:76 ............. Spansion S29GL064MR4 BotB (8MB)
/fc:77 ............. Spansion S29GL064MR3 TopB (8MB)
/fc:78 ............. Spansion S29GL128M Uni (16MB)
/fc:79 ............. Spansion S29GL128N/P Uni (16MB)
/fc:80 ............. Spansion S29GL064MR0 Uni (8MB)
/fc:81 ............. Spansion S29GL064MR1,2,8,9 Uni(8MB)
/fc:82 ............. Spansion S29GL064MR5,6,7 Uni (8MB)
/fc:83 ............. Spansion S29GL032MR0 Uni (4MB)
/fc:84 ............. Spansion S29GL032MR1,2 Uni (4MB)
NOTES: 1) 'backup:', 'flash:' and 'erase:' - the source filename must exist as
follows: CFE.BIN, NVRAM.BIN, KERNEL.BIN, WHOLEFLASH.BIN or CUSTOM.BIN
BSP.BIN, TFE.BIN, TERNEL.BIN
2) If you have difficulty auto-detecting a particular flash part
you can manually specify your exact part using the /fc:XX option.
3) If you have difficulty with the older bcm47xx chips or when no CFE
is currently active/operational you may want to try both the
/noreset and /nobreak command line options together. Some bcm47xx
chips *may* always require both these options to function properly.
4) When using this utility, usually it is best to type the command line
out, then plug in the router, and then hit <ENTER> quickly to avoid
the CPUs watchdog interfering with the EJTAG operations.
5) /bypass - enables Unlock bypass command for some AMD/Spansion type
flashes, it also disables polling
6) When enable tiny CFE option use 'CFE.BIN + /tinycfe' or TFE.BIN
filename. CFE and KERNEL address are calculated with one bottom
sector size. Almost all BCM63x8 box use one sector size CFE.
7) /initcpu allow load some code to initialize the CPU. This may help
BCM6358 open all EBI address access.
8) '-probeonly /window:xxxxxxxx /erasechip' allow choose a workable
sector address to erase whole chip. This may help on a bricked box
with bad CFE
9) /forcealign - enable erase sectors if the operation window is not
aligned with sector boundary. It's risky! but can help erase some
box NVRAM area whose sector size is large than NVRAM definition
***************************************************************************
* Flashing the KERNEL or WHOLEFLASH will take a very long time using JTAG *
* via this utility. You are better off flashing the CFE & NVRAM files *
* & then using the normal TFTP method to flash the KERNEL via ethernet. *
***************************************************************************
C:\jtag>brjtag -probeonly
===============================================
Broadcom EJTAG Debrick Utility v1.6r-hugebird
===============================================
Probing bus ... Done
Instruction Length set to 5
CPU Chip ID: 00000000000000000000000000000000 (00000000)
*** Unknown or NO CPU Chip ID Detected ***
*** Possible Causes:
1) Router/Modem is not Connected.
2) Router/Modem is not Powered On.
3) Improper JTAG Cable.
4) Unrecognized CPU Chip ID.
C:\jtag>brjtag -probeonly
===============================================
Broadcom EJTAG Debrick Utility v1.6r-hugebird
===============================================
Probing bus ... Done
Instruction Length set to 5
CPU running under BIG endian
CPU Chip ID: 00000110001101011000000101111111 (0635817F)
*** Found a Broadcom BCM6358 Rev 1 CPU chip ***
- EJTAG IMPCODE ....... : 00000000100000011000100100000100 (00818904)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS16 MIPS32
Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done
^C
C:\jtag>brjtag -probeonly
===============================================
Broadcom EJTAG Debrick Utility v1.6r-hugebird
===============================================
Probing bus ... Done
Instruction Length set to 5
CPU running under BIG endian
CPU Chip ID: 00000110001101011000000101111111 (0635817F)
*** Found a Broadcom BCM6358 Rev 1 CPU chip ***
- EJTAG IMPCODE ....... : 00000000100000011000100100000100 (00818904)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
- EJTAG Implementation flags: R4k MIPS16 MIPS32
Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done
我的用了出现这个，啥意思。 |
|
|Archiver|小黑屋|宽带技术网
|网站地图
