• December 11, 2019, 08:02:43 AM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Pages: [1] 2

Author Topic: DNS-320 (RevB2): how to break u-boot  (Read 23192 times)

tthsn

  • Level 1 Member
  • *
  • Posts: 6
DNS-320 (RevB2): how to break u-boot
« on: January 17, 2014, 09:30:25 PM »

Hi all,

I've got a new DNS-320 from Chinese market.

    - hardware version: B2
    - software version: 1.00

Wishing to replace the firmware with Debian. So I found the the Serial port pinout in mainboard.
To communicate to the NAS, open the serial port at 115200 baud, 8-n-1, flow control off. Power on the nas.
I am able to see it boot, however it seems that D-link put in some petty measures to stop tinkering.

    U-Boot 1.1.4 (Apr 19 2012 - 11:21:19) Marvell version: 3.6.0.DNS-320B.01

    U-Boot code: 00600000 -> 0067FFF0  BSS: -> 006CFB00

    Soc: 88F6702 A1 CPU running @ 1000Mhz L2 running @ 500Mhz
    SysClock = 400Mhz , TClock = 166Mhz

    DRAM (DDR2) CAS Latency = 5 tRP = 5 tRAS = 18 tRCD=6
    DRAM CS[0] base 0x00000000   size 128MB
    DRAM Total size 128MB  16bit width
    Addresses 8M - 0M are saved for the U-Boot usage.
    Mem malloc Initialization (8M - 7M): Done
    NAND:128 MB
    Flash:  0 kB

    CPU : Marvell Feroceon (Rev 1)

    Streaming disabled
    Write allocate disabled


    USB 0: host mode
    PEX 0: interface detected no Link.
    Net:   egiga0 [PRIME]
    Hit any key to stop autoboot:  0

- "press any key" won't stop autoboot.

After the system is booted, console prompt me that "Please press Enter to activate this console."

- but "press any key" won't active this console

So is there any break-in code/method to enter u-boot console and shell?

Thanks!

« Last Edit: January 17, 2014, 09:32:20 PM by tthsn »
Logged

albert

  • Level 5 Member
  • *****
  • Posts: 510
    • SoHo NAS Forum
Re: DNS-320 (RevB2): how to break u-boot
« Reply #1 on: January 18, 2014, 06:13:47 PM »

Try this, press space-bar key and 1 to get into u-boot console prompt.
Logged
D-Link DNS-320 rev A1 (FW: 2.05) [FFP-0.7]
PCI NAS-01G (FW: Encore ENNHD-1000 4.10)
PCI NAS-01G (FW: OpenNAS 1.9]

tthsn

  • Level 1 Member
  • *
  • Posts: 6
Re: DNS-320 (RevB2): how to break u-boot
« Reply #2 on: January 19, 2014, 05:31:42 PM »

Hi albert,

Yes I've tried, but "Space+1" won't stop u-boot.

How to verify uart hardware of dns-320 is OK?
Logged

albert

  • Level 5 Member
  • *****
  • Posts: 510
    • SoHo NAS Forum
Re: DNS-320 (RevB2): how to break u-boot
« Reply #3 on: January 20, 2014, 06:46:33 AM »

DNS-320 H/W A1 use the same U-Boot version and "space+1" worked.

Code: [Select]
Marvell_DNS320>> version

U-Boot 1.1.4 (Jun  7 2010 - 10:33:37) Marvell version: 3.4.14.DNS320_02

Try pressing the keys way before the "Hit any key to stop autoboot:  0" prompt appear.
Logged
D-Link DNS-320 rev A1 (FW: 2.05) [FFP-0.7]
PCI NAS-01G (FW: Encore ENNHD-1000 4.10)
PCI NAS-01G (FW: OpenNAS 1.9]

tthsn

  • Level 1 Member
  • *
  • Posts: 6
Re: DNS-320 (RevB2): how to break u-boot
« Reply #4 on: January 20, 2014, 05:58:56 PM »



Yes, I've tried press "Space, 1" before the prompt. Still won't stop u-boot.

Maybe the Marvell 88F6702-A1 SOC can only send (TX) data but can't read (RX) data.
- How to test the UART part of the SOC?

Or the "unlock code" has changed?
- How to reverse to find the "unlock code"?

 ???
« Last Edit: January 20, 2014, 06:24:20 PM by tthsn »
Logged

albert

  • Level 5 Member
  • *****
  • Posts: 510
    • SoHo NAS Forum
Re: DNS-320 (RevB2): how to break u-boot
« Reply #5 on: January 21, 2014, 06:25:59 AM »

Think you got the pin-out from PL2303 and NAS set wrongly, only TxD (yellow) is set correctly.

PL2303   NAS
Vcc   -   not use
TxD   -   RxD (pin 1)
RxD   -   TxD (pin 5)
Gnd   -   Gnd (pin 4)
« Last Edit: January 21, 2014, 06:29:02 AM by albert »
Logged
D-Link DNS-320 rev A1 (FW: 2.05) [FFP-0.7]
PCI NAS-01G (FW: Encore ENNHD-1000 4.10)
PCI NAS-01G (FW: OpenNAS 1.9]

tthsn

  • Level 1 Member
  • *
  • Posts: 6
Re: DNS-320 (RevB2): how to break u-boot
« Reply #6 on: January 23, 2014, 03:17:10 AM »

Yes, albert, you are right!!

And here is the UART pinout, the connector is soldered by a friend of mine.



1 - RX
2 - empty
3 - ?
4 - GND (no hole in the board, so connect GND to FAN connector)
5 - TX

« Last Edit: February 06, 2014, 10:43:56 PM by tthsn »
Logged

albert

  • Level 5 Member
  • *****
  • Posts: 510
    • SoHo NAS Forum
Re: DNS-320 (RevB2): how to break u-boot
« Reply #7 on: January 23, 2014, 03:33:53 AM »

Do you mind posting a detail picture of the PCB as well as the console log during the system start-up? Thank in advance.
Logged
D-Link DNS-320 rev A1 (FW: 2.05) [FFP-0.7]
PCI NAS-01G (FW: Encore ENNHD-1000 4.10)
PCI NAS-01G (FW: OpenNAS 1.9]

albert

  • Level 5 Member
  • *****
  • Posts: 510
    • SoHo NAS Forum
Re: DNS-320 (RevB2): how to break u-boot
« Reply #8 on: January 29, 2014, 10:55:17 PM »

Any update on this?
Logged
D-Link DNS-320 rev A1 (FW: 2.05) [FFP-0.7]
PCI NAS-01G (FW: Encore ENNHD-1000 4.10)
PCI NAS-01G (FW: OpenNAS 1.9]

tthsn

  • Level 1 Member
  • *
  • Posts: 6
Re: DNS-320 (RevB2): how to break u-boot
« Reply #9 on: February 06, 2014, 10:24:38 PM »

Sorry for the late reply. I came back from a visit to my parents' home, where we don't have a cable connection.

Here is the shot.

Top View



Bottom View

« Last Edit: February 06, 2014, 10:58:34 PM by tthsn »
Logged

tthsn

  • Level 1 Member
  • *
  • Posts: 6
Re: DNS-320 (RevB2): how to break u-boot
« Reply #10 on: February 06, 2014, 10:28:42 PM »

The following is the console log:

Code: [Select]
#
# boot
#

** MARVELL BOARD: DB-88F6702A-BP LE

U-Boot 1.1.4 (Apr 19 2012 - 11:21:19) Marvell version: 3.6.0.DNS-320B.01

U-Boot code: 00600000 -> 0067FFF0  BSS: -> 006CFB00

Soc: 88F6702 A1 CPU running @ 1000Mhz L2 running @ 500Mhz
SysClock = 400Mhz , TClock = 166Mhz

DRAM (DDR2) CAS Latency = 5 tRP = 5 tRAS = 18 tRCD=6
DRAM CS[0] base 0x00000000   size 128MB
DRAM Total size 128MB  16bit width
Addresses 8M - 0M are saved for the U-Boot usage.
Mem malloc Initialization (8M - 7M): Done
NAND:128 MB
Flash:  0 kB

CPU : Marvell Feroceon (Rev 1)

Streaming disabled
Write allocate disabled


USB 0: host mode
PEX 0: interface detected no Link.
Net:   egiga0 [PRIME]
Hit any key to stop autoboot:  0

NAND read: device 0 offset 0x100000, size 0x300000
load addr ....  =a00000

 3145728 bytes read: OK

NAND read: device 0 offset 0x600000, size 0x300000
load addr ....  =f00000

 3145728 bytes read: OK
## Booting image at 00a00000 ...
   Image Name:   Linux-2.6.31.8
   Created:      2012-01-17  10:46:18 UTC
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2610908 Bytes =  2.5 MB
   Load Address: 00008000
   Entry Point:  00008000
   Verifying Checksum ... OK
OK
## Loading Ramdisk Image at 00f00000 ...
   Image Name:   Ramdisk
   Created:      2012-07-06  11:53:44 UTC
   Image Type:   ARM Linux RAMDisk Image (gzip compressed)
   Data Size:    1750186 Bytes =  1.7 MB
   Load Address: 00e00000
   Entry Point:  00e00000
   Verifying Checksum ... OK

Starting kernel ...

Uncompressing Linux... done, booting the kernel.
Linux version 2.6.31.8 (jack@swtest5) (gcc version 4.3.2 (sdk3.3-ct-ng-1.4.1) ) #3 Tue Jan 17 18:46:16 CST 2012
CPU: Feroceon 88FR131 [56251311] revision 1 (ARMv5TE), cr=00053977
CPU: VIVT data cache, VIVT instruction cache
Machine: Feroceon-KW
Using UBoot passing parameters structure
Memory policy: ECC disabled, Data cache writeback
Built 1 zonelists in Zone order, mobility grouping off.  Total pages: 32512
Kernel command line: root=/dev/ram console=ttyS0,115200 :::DB88FXX81:egiga0:none
PID hash table entries: 512 (order: 9, 2048 bytes)
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Memory: 128MB = 128MB total
Memory: 115468KB available (4924K code, 334K data, 136K init, 0K highmem)
Hierarchical RCU implementation.
NR_IRQS:128
Console: colour dummy device 80x30
Calibrating delay loop... 999.42 BogoMIPS (lpj=4997120)
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
NET: Registered protocol family 16
Feroceon L2: Enabling L2
Feroceon L2: Cache support initialised.

CPU Interface
-------------
SDRAM_CS0 ....base 00000000, size 128MB
SDRAM_CS1 ....disable
SDRAM_CS2 ....disable
SDRAM_CS3 ....disable
PEX0_MEM ....base e0000000, size 128MB
PEX0_IO ....base f2000000, size   1MB
PEX1_MEM ....no such
PEX1_IO ....no such
INTER_REGS ....base f1000000, size   1MB
NFLASH_CS ....base fa000000, size   2MB
SPI_CS ....base f4000000, size  16MB
BOOT_ROM_CS ....no such
DEV_BOOTCS ....no such
CRYPT_ENG ....base f0000000, size   2MB

  Marvell Development Board (LSP Version KW_LSP_5.1.3_patch29)-- DB-88F6702A-BP  Soc: 88F6702 A1 LE

 Detected Tclk 166666667 and SysClk 400000000
MV Buttons Device Load
Marvell USB EHCI Host controller #0: c403e740
PEX0 interface detected no Link.
PCI: bus0: Fast back to back transfers enabled
mvPexLocalBusNumSet: ERR. Invalid PEX interface 1
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
NET: Registered protocol family 1
Trying to unpack rootfs image as initramfs...
rootfs image is not initramfs (no cpio magic); looks like an initrd
Freeing initrd memory: 1708K
RTC has been updated!!!
rtc mv_rtc: rtc core: registered kw-rtc as rtc0
RTC registered
cpufreq: Init kirkwood cpufreq driver
XOR registered 4 channels
XOR 2nd invalidate WA enabled
cesadev_init(c000ed5c)
mvCesaInit: sessions=640, queue=64, pSram=f0000000
MV Buttons Driver Load
VFS: Disk quotas dquot_6.5.2
Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
squashfs: version 4.0 (2009/01/31) Phillip Lougher
Installing knfsd (copyright (C) 1996 okir@monad.swb.de).
NTFS driver 2.1.29 [Flags: R/O].
JFFS2 version 2.2. (NAND) ?? 2001-2006 Red Hat, Inc.
fuse init (API version 7.12)
msgmni has been set to 229
alg: No test for cipher_null (cipher_null-generic)
alg: No test for ecb(cipher_null) (ecb-cipher_null)
alg: No test for digest_null (digest_null-generic)
alg: No test for compress_null (compress_null-generic)
alg: No test for lzma (lzma-generic)
alg: No test for stdrng (krng)
alg: No test for hmac(digest_null) (hmac(digest_null-generic))
Block layer SCSI generic (bsg) driver version 0.4 loaded (major 253)
io scheduler noop registered
io scheduler anticipatory registered (default)
Initializing ths8200_init
Initializing dove_adi9889_init
Serial: 8250/16550 driver, 4 ports, IRQ sharing disabled
serial8250.0: ttyS0 at MMIO 0xf1012000 (irq = 33) is a 16550A
console [ttyS0] enabled
serial8250.1: ttyS1 at MMIO 0xf1012100 (irq = 34) is a 16550A
brd: module loaded
loop: module loaded
Integrated Sata device found
IRQ 21/mvSata: IRQF_DISABLED is not guaranteed on shared IRQs
scsi0 : Marvell SCSI to SATA adapter
scsi1 : Marvell SCSI to SATA adapter
Loading Marvell Ethernet Driver:
  o Cached descriptors in DRAM
  o DRAM SW cache-coherency
  o 2 Giga ports supported
  o Single RX Queue support - ETH_DEF_RXQ=0
  o Single TX Queue support - ETH_DEF_TXQ=0
  o TCP segmentation offload (TSO) supported
  o Large Receive offload (LRO) supported
  o Receive checksum offload supported
  o Transmit checksum offload supported
  o Network Fast Processing (Routing) supported - (Disabled)
  o Driver ERROR statistics enabled
  o Proc tool API enabled
  o SKB Reuse supported - (Disabled)
  o SKB Recycle supported - (Disabled)
  o Rx descripors: q0=128
  o Tx descripors: q0=532
  o Loading network interface(s):
     o register under mv88fx_eth platform
     o egiga0, ifindex = 2, GbE port = 0

Warning: Giga 1 is Powered Off

mvFpRuleDb (c4569000): 1024 entries, 4096 bytes
Counter=0, opIdx=6, overhead=16
Counter=1, opIdx=2, overhead=0
Counter=2, opIdx=1, overhead=18
Counter=3, opIdx=2, overhead=0
NAND device: Manufacturer ID: 0xad, Chip ID: 0xf1 (Hynix NAND 128MiB 3,3V 8-bit)
Scanning device for bad blocks
Bad eraseblock 739 at 0x000005c60000
Using static partition definition
Creating 7 MTD partitions on "nand_mtd":
0x000000000000-0x000000100000 : "u-boot"
0x000000100000-0x000000600000 : "uImage"
0x000000600000-0x000000b00000 : "ramdisk"
0x000000b00000-0x000006f00000 : "image"
0x000006f00000-0x000007900000 : "rescue firmware"
0x000007900000-0x000007e00000 : "config"
0x000007e00000-0x000008000000 : "my-dlink"
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
ehci_marvell ehci_marvell.70059: Marvell Orion EHCI
ehci_marvell ehci_marvell.70059: new USB bus registered, assigned bus number 1
ehci_marvell ehci_marvell.70059: irq 19, io base 0xf1050100
ehci_marvell ehci_marvell.70059: USB 2.0 started, EHCI 1.00
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
uhci_hcd: USB Universal Host Controller Interface driver
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
mice: PS/2 mouse device common for all mice
i2c /dev entries driver
md: linear personality registered for level -1
md: raid0 personality registered for level 0
md: raid1 personality registered for level 1
device-mapper: ioctl: 4.15.0-ioctl (2009-04-01) initialised: dm-devel@redhat.com
usbcore: registered new interface driver usbhid
usbhid: v2.6:USB HID core driver
TCP cubic registered
NET: Registered protocol family 17
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
rtc mv_rtc: setting system clock to 2000-01-01 00:00:00 UTC (946684800)
md: Waiting for all devices to be available before autodetect
md: If you don't use raid, use raid=noautodetect
md: Autodetecting RAID arrays.
md: Scanned 0 and added 0 devices.
md: autorun ...
md: ... autorun DONE.
RAMDISK: gzip image found at block 0
EXT4-fs (ram0): no journal
EXT4-fs (ram0): delayed allocation enabled
EXT4-fs: mballoc enabled
EXT4-fs (ram0): mounted filesystem without journal
VFS: Mounted root (ext4 filesystem) on device 1:0.
Freeing init memory: 136K
init started: BusyBox v1.11.2 (2012-06-28 16:57:05 CST)
starting pid 538, tty '': '/etc/rc.sh'
** Mounting /etc/fstab
umount: proc: not mounted
umount: proc: not mounted
umount: /usr/local/modules: not mounted
sh: can't open /usr/sbin/pre_usb.sh
insmod: applet not found
umount: /usr/local/tmp/image.cfs: not found
umount: /usr/local/tmp: not mounted
first good block is 0
image len = 25034752 , image checksum = 8b73f1e3
dump image checksum=8b73f1e3
rmmod: applet not found
ln: /lib/./libnss_dns-2.8.so: File exists
ln: /lib/./libnss_dns.so.2: File exists
ln: /usr/sbin/./system_init: File exists
mknod: /dev/REG: File exists
hardware init
GbE port 0: TxEnable WA - Enabled, deep=1, tx_en_bk=1

mtd check v1.01.05292012
/usr/local/config free size is 4747264
** copy config files
cp: cannot stat '/usr/local/config/user.log.old': No such file or directory
usbcore: registered new interface driver usblp
** set loopback interface
old ver:20120712
new ver:20120712
first good block is 0
ECC failed: 0
ECC corrected: 0
Number of bad blocks: 0
Number of bbt blocks: 0
Block size 131072, page size 2048, OOB sizegiga0: mac address changed
e 64
Dumping data starting at 0x00000000 and ending at 0x00000800...
mac1 = 11:22:33:44:55:66
lan0:ifconfig egiga0 hw ether 11:22:33:44:55:66
egiga0: link up, full duplex, speed 100 Mbps
egiga0: started
DNS-320B function
NET: Registered protocol family 10
lo: Disabled Privacy Extensions
IPv6 over IPv4 tunneling driver
sit0: Disabled Privacy Extensions
ip6tnl0: Disabled Privacy Extensions
IPv4 over IPv4 tunneling driver
tunl0: Disabled Privacy Extensions
net.ipv6.conf.default.accept_dad = 2
net.ipv6.conf.egiga0.accept_dad = 2
net.ipv6.conf.default.dad_transmits = 1
net.ipv6.conf.egiga0.dad_transmits = 1
net.ipv6.conf.default.forwarding = 0
net.ipv6.conf.default.accept_redirects = 1
*** execute rc.init.sh
awk: /var/run/udhcpc0.pid: No such file or directory
udhcpc (v1.11.2) started
Sending discover...
Sending select for 192.168.6.167...
Lease of 192.168.6.167 obtained, lease time 21600
sh: you need to specify whom to kill
crond[1313]: crond (busybox 1.11.2) started, log level 8

deleting routers
route: SIOCDELRT: No such process
call load_module network
ip: RTNETLINK answers: Operation not supported
ip: RTNETLINK answers: Operation not supported
crond[1355]: crond (busybox 1.11.2) started, log level 8

*** get Time from rtc and set it into system ****
rtc: RTC time = 2014/1/18 Sat 3:4:26
Sat Jan 18 03:04:26 UTC 2014
*** set Time Zone ****
Sat Jan 18 11:04:26 CST 2014
*** Do not adjust RTC time ***

Module IPC SERVER Version:(1.00.20090706)

ads=0
created mail daemon thread 0
ifconfig: egiga1: error fetching interface information: Device not found
Generating RSA private key, 1024 bit long modulus
............................++++++
.............................................++++++
e is 65537 (0x10001)
killall: chk_blockip: no process killed
Command: wget -T5 -t3 -q http://cfaj.freeshell.org/ipaddr.cgi -O /tmp/exip.0
2014-01-18 11:04:33: (../../src/log.c.166) server started
2014-01-18 11:04:41: (../../src/server.c.1396) [note] graceful shutdown started
2014-01-18 11:04:41: (../../src/log.c.166) server started
2014-01-18 11:04:41: (../../src/server.c.1512) server stopped by UID = 0 PID = 1445
system daemon v1.03.0529212
chk_io v1.02.20120118
cp: cannot stat '/usr/local/config/ups_slave.dat': No such file or directory

mfg_start version 1.00(2012-07-12)

Sat Jan 18 11:04:43 2014


Please press Enter to activate this console. 2014-01-18 11:04:44: (../../src/server.c.1
2014-01-18 11:04:44: (../../src/log.c.166) server started
2014-01-18 11:04:44: (../../src/server.c.1512) server stopped by UID = 0 PID = 1445
LED_POWER_ON



#
# restart
#

killall: quotacheck: no process killed
killall: mmfm: no process killed
killall: mmfc: no process killed
Killed
killall: rsync: no process killed
killall: sshd: no process killed
killall: apkg: no process killed
killall: snmpd: no process killed
killall: system_daemon: no process killed
The system is going down NOW!
Sending SIGTERM to all processes
Block size   total    free    used     max
----------   -----   -----   ----2014-01-18 11:07:03: (../../src/server.c.1512) server stopped by UID = 0 PID = 1
../../src/lighttpd-angel.c.140: child (pid=1603) exited normally with exitcode: 0
Sending SIGKILL to all processes
Requesting system reboot
md: stopping all md devices.
Restarting system.
Reseting !!


and the u-boot console:

Code: [Select]
Marvell>> ?
?       - alias for 'help'
SatR - sample at reset sub-system, relevent for DB only
base    - print or set address offset
boot    - boot default, i.e., run 'bootcmd'
bootd   - boot default, i.e., run 'bootcmd'
bootext2    dev:boot_part1,boot_part2 addr boot_image linux_dev_name
bootm   - boot application image from memory
bootp   - boot image via network using BootP/TFTP protocol
bubt    - Burn an image on the Boot Nand Flash.
chpart  - change active partition
cmp     - memory compare
cmpm    - Compare Memory
cp      - memory copy
cpumap - Display CPU memory mapping settings.
crc32   - checksum calculation
date    - get/set/reset date & time
dclk    - Display the MV device CLKs.
dhcp    - invoke DHCP client to obtain IP/boot params
diskboot- boot from IDE device
echo    - echo args to console
eeprom  - EEPROM sub-system
erase   - erase FLASH memory
ext2load- load binary file from a Ext2 filesystem
ext2ls  - list files in a directory (default /)
fatinfo - print information about filesystem
fatload - load binary file from a dos filesystem
fatls   - list files in a directory (default /)
fi      - Find value in the memory.
flinfo  - print FLASH memory information
fsinfo  - print information about filesystems
fsload  - load binary file from a filesystem image
g       - start application at cached address 'addr'(default addr 0x40000)
go      - start application at address 'addr'
help    - print online help
icrc32  - checksum calculation
ide     - IDE sub-system
iloop   - infinite loop on address range
imd     - i2c memory display
iminfo  - print header information for application image
imm[.b, .s, .w, .l]     - i2c memory modify (auto-incrementing)
imw     - memory write (fill)
inm     - memory modify (constant address)
iprobe  - probe to discover valid I2C chip addresses
ir      - reading and changing MV internal register values.
loop    - infinite loop on address range
ls      - list files in a directory (default /)
map     - Diasplay address decode windows
md      - memory display
me      - PCI master enable
mm      - memory modify (auto-incrementing)
mmcinit - init mmc card
mp      - map PCI BAR
mtdparts- define flash/nand partitions
mtest   - simple RAM test
mw      - memory write (fill)
nand                   - NAND sub-system
nboot   - boot from NAND device
nbubt   - Burn a boot loader image on the Boot Nand Flash.
nm      - memory modify (constant address)
pci     - list and access PCI Configuration Space
phyRead - Read PCI-E Phy register
pciePhyWrite    - Write PCI-E Phy register
phyRead - Read Phy register
phyWrite        - Write Phy register
ping    - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
protect - enable or disable FLASH write protection
rarpboot- boot image via network using RARP/TFTP protocol
rcvr    - Satrt recovery process (Distress Beacon with TFTP server)
reset   - Perform RESET of the CPU
resetenv        - Return all environment variable to default.
run     - run commands in an environment variable
saveenv - save environment variables to persistent storage
se      - PCI Slave enable
setenv  - set environment variables
sflash  - read, write or erase the external SPI Flash.
sg      - scanning the PHYs status
sp      - Scan PCI bus.
switchRegRead   - Read switch register
switchRegWrite  - Write switch register
Temp    - read chip Tj temp
tftpboot- boot image via network using TFTP protocol
usb     - USB sub-system
usbboot - boot from USB device
version - print monitor version
Logged

albert

  • Level 5 Member
  • *****
  • Posts: 510
    • SoHo NAS Forum
Re: DNS-320 (RevB2): how to break u-boot
« Reply #11 on: February 07, 2014, 03:08:06 AM »

1 - RX
2 - empty
3 - ?
4 - GND (no hole in the board, so connect GND to FAN connector)
5 - TX

Pin 3 = Vcc 3.3v (not require by PL2303 since power drawing from PC USB port)
Logged
D-Link DNS-320 rev A1 (FW: 2.05) [FFP-0.7]
PCI NAS-01G (FW: Encore ENNHD-1000 4.10)
PCI NAS-01G (FW: OpenNAS 1.9]

albert

  • Level 5 Member
  • *****
  • Posts: 510
    • SoHo NAS Forum
Re: DNS-320 (RevB2): how to break u-boot
« Reply #12 on: February 07, 2014, 03:09:06 AM »

And many thanks for the PCB shots and console log, should come in handy someday.
Logged
D-Link DNS-320 rev A1 (FW: 2.05) [FFP-0.7]
PCI NAS-01G (FW: Encore ENNHD-1000 4.10)
PCI NAS-01G (FW: OpenNAS 1.9]

emuluke

  • Level 1 Member
  • *
  • Posts: 3
Re: DNS-320 (RevB2): how to break u-boot
« Reply #13 on: November 15, 2014, 06:16:06 AM »

Hi! I hope somebody can help.
I soldered the USB, but no luck in getting it to talk to my Windows 7 serial port monitor.
Can you please point me in the rigght direction?
Picture here

USB cable here
http://www.ebay.de/itm/151304116477?_trksid=p2059210.m2749.l2649&ssPageName=STRK%3AMEBIDX%3AIT
Logged

albert

  • Level 5 Member
  • *****
  • Posts: 510
    • SoHo NAS Forum
Re: DNS-320 (RevB2): how to break u-boot
« Reply #14 on: November 24, 2014, 09:20:58 AM »

Where did you solder the GND to? And what settings did you use for console program?
Logged
D-Link DNS-320 rev A1 (FW: 2.05) [FFP-0.7]
PCI NAS-01G (FW: Encore ENNHD-1000 4.10)
PCI NAS-01G (FW: OpenNAS 1.9]
Pages: [1] 2