Page 6 of 18 FirstFirst ... 4567816 ... LastLast
Results 76 to 90 of 264

Thread: Microsoft MN700 hack project

  1. #76

    USB on MN-700

    Well, I'm mostly a software guy, but I have done a bit of tinkering with hardware in the past. I'm afraid I can't produce pictures of proper quality of the PCB, perhaps someone else can help out here?

    cheers!
    /Stig

  2. #77

    System log from mn-700

    Here is the log...

    Jan 1 01:00:04 syslogd started: BusyBox v1.00 (2005.05.11-18:29+0000)
    Jan 1 01:00:04 dnsmasq[54]: started, version 2.17 cachesize 150
    Jan 1 01:00:04 dnsmasq[54]: DHCP, IP range 192.168.1.2 -- 192.168.1.254, lease time 24h
    Jan 1 01:00:04 dnsmasq[54]: DHCP, /tmp/dnsmasq.log will be written every 28800s
    Jan 1 01:00:04 dnsmasq[54]: read /etc/hosts - 5 addresses
    Jan 1 01:00:04 dnsmasq[54]: reading /tmp/resolv.conf
    Jan 1 01:00:04 kernel: MPPE/MPPC encryption/compression module registered
    Jan 1 01:00:04 kernel: Amd/Fujitsu Extended Query Table v1.1 at 0x0040
    Jan 1 01:00:04 kernel: Physically mapped flash: Swapping erase regions for broken CFI table.
    Jan 1 01:00:04 kernel: number of CFI chips: 1
    Jan 1 01:00:04 kernel: Flash device: 0x400000 at 0x1fc00000
    Jan 1 01:00:04 kernel: Physically mapped flash: squashfs filesystem found at block 941
    Jan 1 01:00:04 kernel: Creating 5 MTD partitions on "Physically mapped flash":
    Jan 1 01:00:04 kernel: 0x00000000-0x00040000 : "pmon"
    Jan 1 01:00:04 kernel: 0x00040000-0x003e0000 : "linux"
    Jan 1 01:00:04 kernel: 0x000eb5b4-0x003e0000 : "rootfs"
    Jan 1 01:00:04 kernel: 0x003f0000-0x00400000 : "nvram"
    Jan 1 01:00:04 kernel: 0x003e0000-0x003f0000 : "config"
    Jan 1 01:00:04 kernel: sflash: chipcommon not found
    Jan 1 01:00:04 kernel: NET4: Linux TCP/IP 1.0 for NET4.0
    Jan 1 01:00:04 kernel: IP Protocols: ICMP, UDP, TCP
    Jan 1 01:00:04 kernel: IP: routing cache hash table of 512 buckets, 4Kbytes
    Jan 1 01:00:04 kernel: TCP: Hash tables configured (established 1024 bind 2048)
    Jan 1 01:00:04 kernel: ip_conntrack version 2.1 (128 buckets, 1024 max) - 344 bytes per conntrack
    Jan 1 01:00:04 kernel: ip_conntrack_pptp version 1.9 loaded
    Jan 1 01:00:04 kernel: ip_nat_pptp version 1.5 loaded
    Jan 1 01:00:04 kernel: ip_tables: (C) 2000-2002 Netfilter core team
    Jan 1 01:00:04 kernel: ipt_time loading
    Jan 1 01:00:04 kernel: NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
    Jan 1 01:00:04 kernel: IPv6 v0.8 for NET4.0
    Jan 1 01:00:04 kernel: IPv6 over IPv4 tunneling driver
    Jan 1 01:00:04 kernel: NET4: Ethernet Bridge 008 for NET4.0
    Jan 1 01:00:04 kernel: 802.1Q VLAN Support v1.7 Ben Greear <greearb@candelatech.com>
    Jan 1 01:00:04 kernel: All bugs added by David S. Miller <davem@redhat.com>
    Jan 1 01:00:04 kernel: FAT: bogus logical sector size 2560
    Jan 1 01:00:04 kernel: FAT: bogus logical sector size 2560
    Jan 1 01:00:04 kernel: NTFS: Unable to set blocksize 512.
    Jan 1 01:00:04 kernel: VFS: Mounted root (squashfs filesystem) readonly.
    Jan 1 01:00:04 kernel: Mounted devfs on /dev
    Jan 1 01:00:04 kernel: Freeing unused kernel memory: 72k freed
    Jan 1 01:00:04 kernel: Warning: unable to open an initial console.
    Jan 1 01:00:04 kernel: Algorithmics/MIPS FPU Emulator v1.5
    Jan 1 01:00:04 kernel: eth0: Broadcom BCM47xx 10/100 Mbps Ethernet Controller 3.90.7.0
    Jan 1 01:00:04 kernel: eth1: Broadcom BCM47xx 10/100 Mbps Ethernet Controller 3.90.7.0
    Jan 1 01:00:04 kernel: PCI: Enabling device 01:01.0 (0004 -> 0006)
    Jan 1 01:00:04 kernel: eth2: Broadcom BCM4325 802.11 Wireless Controller 3.90.23.0
    Jan 1 01:00:04 kernel: device eth0 entered promiscuous mode
    Jan 1 01:00:04 kernel: device eth2 entered promiscuous mode
    Jan 1 01:00:04 kernel: br0: port 2(eth2) entering listening state
    Jan 1 01:00:04 kernel: br0: port 1(eth0) entering listening state
    Jan 1 01:00:04 kernel: br0: port 2(eth2) entering learning state
    Jan 1 01:00:04 kernel: br0: port 1(eth0) entering learning state
    Jan 1 01:00:04 kernel: br0: port 2(eth2) entering forwarding state
    Jan 1 01:00:04 kernel: br0: topology change detected, propagating
    Jan 1 01:00:04 kernel: br0: port 1(eth0) entering forwarding state
    Jan 1 01:00:04 kernel: br0: topology change detected, propagating
    Jan 1 01:00:05 kernel: usb.c: registered new driver usbdevfs
    Jan 1 01:00:05 kernel: usb.c: registered new driver hub
    Jan 1 01:00:05 kernel: usb-ohci.c: USB OHCI at membase 0xb8004000, IRQ 2
    Jan 1 01:00:05 kernel: usb-ohci.c: usb-00:04.0, PCI device 14e4:4715
    Jan 1 01:00:05 kernel: usb.c: new USB bus registered, assigned bus number 1
    Jan 1 01:00:05 kernel: hub.c: USB hub found
    Jan 1 01:00:05 kernel: hub.c: 2 ports detected
    Jan 1 01:00:06 kernel: lp0: using parport0 (polling).
    Jan 1 01:00:07 kernel: usb.c: registered new driver usblp
    Jan 1 01:00:07 kernel: printer.c: v0.13: USB Printer Device Class driver
    Jan 1 01:00:07 kernel: hub.c: new USB device 00:04.0-2, assigned address 2
    Jan 1 01:00:07 kernel: usb.c: USB device not accepting new address=2 (error=-145)
    Jan 1 01:00:07 kernel: hub.c: new USB device 00:04.0-2, assigned address 3
    Jan 1 01:00:07 kernel: usb.c: USB device not accepting new address=3 (error=-145)
    Jan 1 01:00:07 kernel: hub.c: new USB device 00:04.0-1, assigned address 4
    Jan 1 01:00:07 kernel: usb.c: USB device not accepting new address=4 (error=-145)
    Jan 1 01:00:08 kernel: hub.c: new USB device 00:04.0-1, assigned address 5
    Jan 1 01:00:08 kernel: usb.c: USB device not accepting new address=5 (error=-145)
    Jan 1 01:00:09 kernel: usb.c: registered new driver audio
    Jan 1 01:00:09 kernel: audio.c: v1.0.0:USB Audio Class driver
    Jan 1 01:00:09 kernel: Linux video capture interface: v1.00
    Jan 1 01:00:10 udhcpc[80]: udhcpc (v0.9.9-pre) started
    Jan 1 01:00:10 kernel: lp driver: get device ID
    Jan 1 01:00:10 kernel: neg fail
    Jan 1 01:00:11 dnsmasq[54]: read /etc/hosts - 5 addresses
    Jan 1 01:00:11 dnsmasq[54]: reading /tmp/resolv.conf
    Jan 1 01:00:11 dhcp client: deconfig: lease is lost
    Jan 1 01:00:12 kernel: lp driver: get device ID
    Jan 1 01:00:12 dropbear[94]: Running in background
    Jan 1 01:00:12 kernel: neg fail
    Jan 1 00:00:12 kernel: neg fail
    Jan 1 00:00:12 kernel: lp driver: get device ID
    Jan 1 00:00:12 kernel: neg fail
    Jan 1 00:00:12 kernel: neg fail
    Jan 1 00:00:13 udhcpc[80]: Lease of 10.0.0.3 obtained, lease time 259200
    Jan 1 00:00:13 dnsmasq[54]: read /etc/hosts - 5 addresses
    Jan 1 00:00:13 dnsmasq[54]: reading /tmp/resolv.conf
    Jan 1 00:00:13 dnsmasq[54]: using nameserver 212.242.40.51#53
    Jan 1 00:00:13 dnsmasq[54]: using nameserver 212.242.40.3#53
    Jan 1 00:00:14 dhcp client: bound IP : 10.0.0.3 from 10.0.0.1
    Jan 1 00:00:18 kernel: lp driver: get device ID
    Jan 1 00:00:18 kernel: neg fail
    Jan 1 00:00:18 kernel: neg fail
    May 12 23:51:38 kernel: lp driver: get device ID
    May 12 23:51:38 kernel: neg fail
    May 12 23:51:38 kernel: neg fail
    May 12 23:51:44 ntp client: Synchronizing time with time.nist.gov ...
    May 12 23:51:44 kernel: lp driver: get device ID
    May 12 23:51:44 kernel: neg fail
    May 12 23:51:44 kernel: neg fail
    May 12 23:51:50 kernel: lp driver: get device ID
    May 12 23:51:50 kernel: neg fail
    May 12 23:51:50 kernel: neg fail
    May 12 23:51:56 kernel: lp driver: get device ID
    May 12 23:51:56 kernel: neg fail
    May 12 23:51:56 kernel: neg fail
    May 12 23:52:02 kernel: lp driver: get device ID
    May 12 23:52:02 kernel: neg fail
    May 12 23:52:02 kernel: neg fail
    May 12 23:52:08 kernel: lp driver: get device ID
    May 12 23:52:08 kernel: neg fail
    May 12 23:52:08 kernel: neg fail
    May 12 23:52:14 kernel: lp driver: get device ID
    May 12 23:52:14 kernel: neg fail
    May 12 23:52:14 kernel: neg fail
    May 12 23:52:20 kernel: lp driver: get device ID
    May 12 23:52:20 kernel: neg fail
    May 12 23:52:20 kernel: neg fail

  3. #78
    Join Date
    Dec 2003
    Location
    Russian Federation
    Posts
    8,356
    Ok, you're out of luck then. It's seems USB port is not wired out of the chip.

  4. #79
    No usb hardwired out of chip??? Maybe it's still mod-able??? Here are the pics just in case. Let me know which resistors you need to know the resistance of, cause it's still kinda hard to read.





    I don't know if that helps...if not, I can delete this post since it takes up a bit of space : ].

  5. #80
    Success!

    For my first trials to flash I used the parallel port of my notebook. Both Linux and Windows tools didn't worked: the written cfe always differed from the binary I used to flash.
    Today I tried it with an old Pentium using the Linux tool: it worked perfectly after 2 trials.

    Maybe the notebook port isn't shielded enough and captures too much "interference".

    Now, I use the latest firmware from Oleg's page and all seems to be fine :-)

    Again, thank you for this great work!

  6. #81
    Can someone just post the bootloader and how to modify it correctly. This is extremely inefficient if everyone has to PM Oleg to get a bootloader.

    Specific questions I have

    1. Where can I obtain the bootloader? (link please)

    2. When modifying it does the MAC have to match the actual MAC of the MN-700 or the MAC I intend to use?

    3. Once the MN-700 is updated with the new bootloader what utility do we use to update the firmware? (link if possible please)


    Thanks for your help

  7. #82
    Join Date
    Dec 2003
    Location
    Russian Federation
    Posts
    8,356
    Quote Originally Posted by CMoZ
    Can someone just post the bootloader and how to modify it correctly. This is extremely inefficient if everyone has to PM Oleg to get a bootloader.
    That's fine, and it's automated. So, just PM me MAC addresses.

    Specific questions I have

    1. Where can I obtain the bootloader? (link please)

    2. When modifying it does the MAC have to match the actual MAC of the MN-700 or the MAC I intend to use?
    You could use any MAC address of your choice.

    3. Once the MN-700 is updated with the new bootloader what utility do we use to update the firmware? (link if possible please)
    ASUS Firmware Restoration Tool, browse ASUS wl500g downloads section on their website for utilities.

  8. #83
    Just wanted to post a reply on this thread thanking Oleg and all the other people that have posted info on this project, thanks oleg for the bootloader, excellent work on it BTW. I finally have my mn-700 running custom firmware, and it performs much better so far, haven't had much time to play with it yet though. It took me about 20 tries to get the bootloader installed, the wrtjtag-modified.exe kept hanging up during updates, but it eventually worked. I'm almost positive it had something to do with the configuration of my workstation. But, Nevertheless, it works now. Thanks for this thread.

  9. #84
    Well, I am posting this message via wireless internet through my MN-700 that is now running the 1.9.2.7-5 firmware. Thanks to everyone with the info for this project, especially Oleg with the bootloader, it went rather smoothly.

    It took me about 6 hours from cable assembly to connecting to the internet. I got my cable made right on the first try! It cost me about $5 in parts from the local electronics shop. It found the chip with no problems, although I thought something was wrong as it was freezing after "rebooting processor". I added the /noreset switch and it worked fine after that. I had to flash in Windows because I wasn't sure what to change in the source code for Linux.

    There should be a check for 0x1 as an ID - you should add 0xc2 as one of the possibilities.
    I am not sure what that means. I am new to Linux so even though I already flashed in windows, could someone explain this a little more in depth so I can learn?

    Thanks again for this!

  10. #85

    Post A step-by-step guide to reflash the MN-700

    Since I am so grateful for the work put into this project and I like to give back the community, I will type a quick step-by-step guide for those that were asking for one.

    This mod requires you to open your hardware and to solder on the board. If you are uncomfortable with desoldering/soldering or unwilling to risk frying your router in the process, this mod may not be for you. If you are like me and had one lying around because you upgraded the piece of crap with something better, then have at it.

    There are really only three steps, but they are a little involved.

    1) Build a JTAG cable
    This is outlined in the earlier posts, but all you need to do is follow these diagrams:





    You will need:
    1 - Male DB-25 Connector (with solder cups)
    4 - 100ohm resistors
    1 - 5 to 12 wire ribbon cable (only 5 wires will be connected)
    1 - 12 pin connector
    1 - 12 pin header

    The pictures of the actual cable in the pdf posted earlier are reversed so just follow the diagram above. My DB-25 connector was labeled with pin numbers next to the solder cups. From the back (looking at the solder cups) it looked like:



    Once you open up the case of the MN-700, you will find the pin numbers for the JTAG port are printed on the board so it should be pretty easy to follow. The finished cable should be no longer than 25cm or about 10 inches, otherwise you will have too much noise in the line. You can use a parallel port extension cord to reach the back of your computer, but I just pulled out my computer and piled up some reams of paper to support the router while flashing.

    The last thing, and most time consuming for myself, was to clean out the JTAG port holes on the board and solder in the 12-pin header. You need a soldering iron and either a solder sucker or solder braid to clean out the holes.

    Once you have all of this done you are ready to move on to the next step.


    2) Use cable to backup/flash bootloader

    First you need to get a copy of the modified bootloader from Oleg. Send him a private message with your MAC address of the router and he will hook you up (and make sure you thank him).

    Now you can use software either under Windows or Linux. Using a Linux distribution will flash about twice as fast compared to windows, but either work. Since I had to use Windows, as I am sure a lot of people will, I will outline that. First get a copy of your software, which I have mirrored.

    Windows
    Linux

    In windows extract the zip to a known location. Then go to start > run and type "cmd" and hit enter. This brings up the command prompt. Browse to the directory you unzipped to and type "wrtjtag-modified" and hit enter. It will display all of the options and switches to use. For example you will want to backup your bootloader from the router in case you run into trouble. To do this type

    Code:
    wrtjtag-modified -backup:cfe /noreset
    Connect the JTAG cable and plug in the power to the router, then hit enter. It will start to backup the bootloader. If you get an error you've built your cable wrong.

    Next you need to flash the bootloader you obtained from Oleg. Place it in the directory you are running the program from and rename it to "cfe.BIN". Type

    Code:
    wrtjtag-modified -flash:cfe /noreset
    Once you hit enter it will start flashing the new bootloader onto the router. If it completes successfully, continue on to the next step. The hard part is over.

    3) Flash new firmware with ASUS firmware utility

    Head on over to ASUS website and download the utilities package for the WL-500. Included is a firmware restoration tool we will use to flash the new firmware. You will also need the firmware you are planning on using. I used the 1.9.2.7-5 firmware found on this website. You will also need to turn off all network devices except for the one needed to connect to the router (disable them in the device manager).

    Install the ASUS utilities and open the firmware restoration tool. Click "Browse" to tell it where you downloaded your firmware to and hit "Open". To start the firmware update click on "Upload". Once completed you will have a brand new "WL-500g". Hope this helps! Good Luck!
    Last edited by sbyers77; 13-06-2005 at 20:05.

  11. #86

    Serial Port(s)?

    Thanks to the great info I found here, I have managed to reflash my bootloader and firmware to a REAL OS. Who needs WinCE!? Linux rocks!

    Now the sky is the limit, and I'd like to add a serial (can I add 2) port to my mn700, so I can adapt it to my home automation system. I haven't found any specific info on the mn700 (I might just not be looking in the right lace) serial ports.

    Is the pinout the same as the wl500g? On the openwrt site they indicate you need to convert 3.3V to 12V with a MAX233A, but nothing more.

    Can anyone provide any help?

    Thanks!

  12. #87
    Join Date
    Dec 2003
    Location
    Russian Federation
    Posts
    8,356
    Quote Originally Posted by pcbroch
    Now the sky is the limit, and I'd like to add a serial (can I add 2) port to my mn700, so I can adapt it to my home automation system. I haven't found any specific info on the mn700 (I might just not be looking in the right lace) serial ports.

    Is the pinout the same as the wl500g? On the openwrt site they indicate you need to convert 3.3V to 12V with a MAX233A, but nothing more.
    It's not so simple. mn700 requires uart to be soldered on the back side of the PCB...

  13. #88

    Wink

    I'd be happy to do it, if only I knew which parts to use. Has it been done? Is the info available?

    I'm willing to lend my MN700 to science

  14. #89
    Join Date
    Dec 2003
    Location
    Russian Federation
    Posts
    8,356
    Quote Originally Posted by pcbroch
    I'd be happy to do it, if only I knew which parts to use. Has it been done? Is the info available?
    Unfortunatly no. Should be similar to wrt54g 1.x, which requires uart (read seattle wireless).

  15. #90

    Configured as AP and now can't login anymore.

    I have my MN700 (running the WL firmware) all configured and running fine. Now I configured it as an AP and I can't login to the web interface anymore? What have I done? How can I fix it? Reflash?

    Thanks!

    Edit:

    Actually, I got it back... Somehow, it reverted to "DHCP" for it's IP address, I have no idea why. I reverted to static and voila... feel free to delete this post.
    Last edited by pcbroch; 07-07-2005 at 21:43.

Page 6 of 18 FirstFirst ... 4567816 ... LastLast

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •