-
#200 Reply
Posted by
MihaiV
on 27 Dec, 2021 19:41
-
Hello,
Before scorching the MXS (again) to reflow it, I played a little with the TTL console at J5.
At power on it sends a "+" followed by "Entry point: 0x00060040, address range: 0x00060000-0x003bef68".
Ctrl-C during power-up did not get me to RedBoot.
I pulled down E29 with 1k and that solved it.
Here it is:
RedBoot(tm) bootstrap and debug environment [ROMRAM]
Non-certified release, version v2_0_74 - built 15:56:18, Sep 27 2007)
Platform: Fluke Clem (ARM9)
Copyright (C) 2000, 2001, 2002, 2003, 2004 Red Hat, Inc.
Copyright (C) 2003, 2004, 2005, 2006, 2007 eCosCentric Limited
RAM: 0x00000000-0x007fb500, [0x0004dcb0-0x005d8500] available
FLASH: 0x10000000-0x107fffff, 63 x 0x20000 blocks, 4 x 0x8000 blocks
Next, I poked around the console, especially following the lines from frenky (post 59). My returns are the same, except that the app loads, clem.img.fs is ok.
RedBoot>fconfig -l
Run script at boot: false
Use BOOTP for network configuration: false
Gateway IP address: 0.0.0.0
Local IP address: 192.168.9.133
Local IP address mask: 255.255.0.0
Default server IP address: 192.168.100.100
Console baud rate: 115200
DNS server IP address: 0.0.0.0
Set eth0 network hardware address [MAC]: true
eth0 network hardware address [MAC]: 0x00:0x80:0x40:0x00:0x22:0x85
GDB connection port: 9000
Force console for special debug messages: false
Network debug at boot time: false
RedBoot>fis list
Name FLASH addr Mem addr Length Entry point
RedBoot 0x10000000 0x10000000 0x00040000 0x00000000
fs 0x10040000 0x00000000 0x007A0000 0xFFFFFFFF
FIS directory 0x107E0000 0x107E0000 0x0001F000 0x00000000
RedBoot config 0x107FF000 0x107FF000 0x00001000 0x00000000
RedBoot> fs info
Filesystems available:
devfs
jffs2
Devices available:
/dev/flash/
RedBoot> fs list
fs: No filesystems mounted
RedBoot> fs mount -d /dev/flash/ -t jffs2 /hmm1
fs mount: mount(/dev/flash/,/hmm1,jffs2) failed 2
RedBoot> fs mount -d /dev/flash/ -t devfs /hmm1
RedBoot> fs info
Filesystems available:
devfs
jffs2
Devices available:
/dev/flash/
Mounted filesystems:
Device Filesystem Mounted on
/dev/flash/ devfs /hmm1
RedBoot> fs list
fs list: no such directory /
RedBoot> d -b 0x107FF000 -l 0x00001000
107FF000: 00 10 00 00 CE FA AD 0B 01 0C 01 00 62 6F 6F 74 |............boot|
107FF010: 5F 73 63 72 69 70 74 00 00 00 00 00 04 11 01 0C |_script.........|
107FF020: 62 6F 6F 74 5F 73 63 72 69 70 74 5F 64 61 74 61 |boot_script_data|
107FF030: 00 62 6F 6F 74 5F 73 63 72 69 70 74 00 66 69 73 |.boot_script.fis|
107FF040: 20 75 6E 6C 6F 63 6B 20 66 73 0A 66 73 20 6D 6F | unlock fs.fs mo|
107FF050: 75 6E 74 20 2D 64 20 2F 64 65 76 2F 66 6C 61 73 |unt -d /dev/flas|
107FF060: 68 2F 66 69 73 2F 66 73 20 2D 74 20 6A 66 66 73 |h/fis/fs -t jffs|
107FF070: 32 20 2F 0A 6C 6F 61 64 20 2D 6D 20 66 69 6C 65 |2 /.load -m file|
107FF080: 20 2F 73 79 73 74 65 6D 2F 61 70 70 73 2F 63 6C | /system/apps/cl|
107FF090: 65 6D 2E 69 6D 67 0A 66 73 20 75 6D 6F 75 6E 74 |em.img.fs umount|
107FF0A0: 20 2F 0A 67 6F 20 2D 63 20 2D 6E 0A 0A 00 00 00 | /.go -c -n.....|
107FF0B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF0C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF210: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF220: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF230: 00 00 00 00 00 00 00 00 00 00 00 00 00 02 14 01 |................|
107FF240: 0C 62 6F 6F 74 5F 73 63 72 69 70 74 5F 74 69 6D |.boot_script_tim|
107FF250: 65 6F 75 74 00 62 6F 6F 74 5F 73 63 72 69 70 74 |eout.boot_script|
107FF260: 00 01 00 00 00 01 06 01 00 62 6F 6F 74 70 00 00 |.........bootp..|
107FF270: 00 00 00 05 14 00 06 62 6F 6F 74 70 5F 6D 79 5F |.......bootp_my_|
107FF280: 67 61 74 65 77 61 79 5F 69 70 00 62 6F 6F 74 70 |gateway_ip.bootp|
107FF290: 00 00 00 00 00 05 0C 00 06 62 6F 6F 74 70 5F 6D |.........bootp_m|
107FF2A0: 79 5F 69 70 00 62 6F 6F 74 70 00 C0 A8 09 85 05 |y_ip.bootp......|
107FF2B0: 11 00 06 62 6F 6F 74 70 5F 6D 79 5F 69 70 5F 6D |...bootp_my_ip_m|
107FF2C0: 61 73 6B 00 62 6F 6F 74 70 00 FF FF 00 00 05 10 |ask.bootp.......|
107FF2D0: 01 00 62 6F 6F 74 70 5F 73 65 72 76 65 72 5F 69 |..bootp_server_i|
107FF2E0: 70 00 C0 A8 64 64 02 12 01 00 63 6F 6E 73 6F 6C |p...dd....consol|
107FF2F0: 65 5F 62 61 75 64 5F 72 61 74 65 00 00 C2 01 00 |e_baud_rate.....|
107FF300: 05 07 01 00 64 6E 73 5F 69 70 00 00 00 00 00 01 |....dns_ip......|
107FF310: 09 01 00 65 74 68 30 5F 65 73 61 00 01 00 00 00 |...eth0_esa.....|
107FF320: 06 0E 01 09 65 74 68 30 5F 65 73 61 5F 64 61 74 |....eth0_esa_dat|
107FF330: 61 00 65 74 68 30 5F 65 73 61 00 00 80 40 00 22 |a.eth0_esa...@."|
107FF340: 85 00 00 02 09 01 00 67 64 62 5F 70 6F 72 74 00 |.......gdb_port.|
107FF350: 28 23 00 00 01 13 01 00 69 6E 66 6F 5F 63 6F 6E |(#......info_con|
107FF360: 73 6F 6C 65 5F 66 6F 72 63 65 00 00 00 00 00 02 |sole_force......|
107FF370: 14 01 13 69 6E 66 6F 5F 63 6F 6E 73 6F 6C 65 5F |...info_console_|
107FF380: 6E 75 6D 62 65 72 00 69 6E 66 6F 5F 63 6F 6E 73 |number.info_cons|
107FF390: 6F 6C 65 5F 66 6F 72 63 65 00 00 00 00 00 01 0A |ole_force.......|
107FF3A0: 01 00 6E 65 74 5F 64 65 62 75 67 00 00 00 00 00 |..net_debug.....|
107FF3B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF3C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF3D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF3E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF3F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF410: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF420: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF430: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF440: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF450: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF460: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF470: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF490: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF4A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF4B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF4C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF4D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF4E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF4F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF510: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF520: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF530: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF540: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF550: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF560: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF570: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF590: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF5A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF5B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF5C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF5D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF5E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF5F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF610: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF620: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF630: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF640: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF650: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF660: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF670: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF690: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF6A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF6B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF6C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF6D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF6E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF6F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF710: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF720: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF730: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF740: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF750: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF760: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF770: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF790: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF7A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF7B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF7C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF7D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF7E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF7F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF810: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF820: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF830: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF840: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF850: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF860: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF870: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF890: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF8A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF8B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF8C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF8D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF8E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF8F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF910: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF920: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF930: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF940: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF950: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF960: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF970: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF990: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF9A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF9B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF9C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF9D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF9E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FF9F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFA00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFA10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFA20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFA30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFA40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFA50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFA60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFA70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFA80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFA90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFAA0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFAB0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFAC0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFAD0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFAE0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFAF0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFB00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFB10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFB20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFB30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFB40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFB50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFB60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFB70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFB80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFB90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFBA0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFBB0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFBC0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFBD0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFBE0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFBF0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFC00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFC10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFC20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFC30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFC40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFC50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFC60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFC70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFC80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFC90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFCA0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFCB0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFCC0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFCD0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFCE0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFCF0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFD00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFD10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFD20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFD30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFD40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFD50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFD60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFD70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFD80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFD90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFDA0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFDB0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFDC0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFDD0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFDE0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFDF0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFE00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFE10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFE20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFE30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFE40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFE50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFE60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFE70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFE80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFE90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFEA0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFEB0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFEC0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFED0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFEE0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFEF0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFF00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFF10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFF20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFF30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFF40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFF50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFF60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFF70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFF80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFF90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFFA0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFFB0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFFC0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFFD0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFFE0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
107FFFF0: 00 00 00 00 00 00 00 00 AD DE AD DE C2 D7 ED EA |................|
The script from RedBoot Config
fis unlock fs
fs mount -d /dev/flash/fis/fs -t jffs2 /
load -m file /system/apps/clem.img
fs umount /
go -c -n
runs with no errors and brings me to the same result, entry point...
Is there a way to check the RAM? I only found flash operation commands but nothing related to RAM.
-
#201 Reply
Posted by
kjk24
on 30 Dec, 2021 06:49
-
Hi MihaiV,
the ram is usable at redboot see older post,
there are some ram commands avail
like
w4 0x00221000 0xa2120200
mem32 0x8000000,1
J-Link>w4 0x221000,0x80000000
Writing 80000000 -> 00221000
J-Link>mem32 0x8000000,10
08000000 = FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
08000010 = FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
08000020 = FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
08000030 = FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF
J-Link>w4 0x221000,0x80010000
Writing 80010000 -> 00221000
--------------------
bootscript :
4. fconfig -l show config
5. fconfig -i
Initialize non-volatile configuration - continue (y/n)? y
Run script at boot: true
Boot script:
Enter script, terminate with empty line
>> fis unlock fs
>> fs mount -d /dev/flash/fis/fs -t jffs2 /
>> load -m file /system/apps/clem.img
>> fs umount /
>> go -c -n -w 10000
>>
Boot script timeout (1000ms resolution): 10
Use BOOTP for network configuration: false
Gateway IP address: 0.0.0.0
Local IP address: 192.168.9.133
Local IP address mask: 255.255.0.0
Default server IP address: 192.168.100.100
Console baud rate: 115200
DNS server IP address: 0.0.0.0
Set eth0 network hardware address [MAC]: true
eth0 network hardware address [MAC]: 0x00:0x80:0x40:0x00:0x22:0x85
GDB connection port: 9000
Force console for special debug messages: true
Console number for special debug messages: 0
Network debug at boot time: false
Update RedBoot non-volatile configuration - continue (y/n)? y
@ cristaux66
you need jtag to the msp and MSPFlasher, the hex file for it.
and flash it.
-
#202 Reply
Posted by
MihaiV
on 30 Dec, 2021 20:41
-
Hello kjk24,
We are lucky enough to have a J-link Pro at work! Unfortunately I suck at programming, so I will certainly need more help on setup, commands and such.
I understand that I must install J-MEM and J-Flash from Segger.
I see a file at post 163, (MC9328MXS_1.jflash), with some "steps" inside it (various write and read commands) . Is it a script that runs RAM tests or just a configuration file?
I ran the boot script in redboot step by step and it runs without errors. It loads the clem.img, it mounts it and after the "go -c -n" it prints a "+" and "Entry point ..." and the green led turns off. I see something more at the "go" command, the -w and 10000 that is not in the boot script inside my meter. I'll try it again.
The meter is a 287/NUC (whatever NUC means).
My PCB is marked as REV 015, but there is also a sticker on the PCB with "287 R.020 AJ764496". So i guess it has REV 20 on it, as R277, R125 and R121 are populated (so assembled ModellA, ID0). Also, VR1, VR2, VR3, VR4 and other parts are not populated.
I'll get to the J-link after 5th January. Until then I'll read some more about the J-link tools and check the RAM lines with the scope. Play with hardware 'til i get to the software.
By the way, the Micron part marking decoder indicates that PW755 is for Micron MT45W2MW16BGB-701 IT, and it appears to fit the footprint (at least the VCC and VSS pins do). Is this the one? I saw in your photos a part number marked ISSI, but the photo was not clear enough to see hte code itself.
Thank you,
MihaiV.
-
#203 Reply
Posted by
kjk24
on 31 Dec, 2021 09:20
-
Hello kjk24,
We are lucky enough to have a J-link Pro at work! Unfortunately I suck at programming, so I will certainly need more help on setup, commands and such.
I understand that I must install J-MEM and J-Flash from Segger.
I see a file at post 163, (MC9328MXS_1.jflash), with some "steps" inside it (various write and read commands) . Is it a script that runs RAM tests or just a configuration file?
Not sure what you mean, the bootscript execute and the device is booting without ram tests.
I ran the boot script in redboot step by step and it runs without errors. It loads the clem.img, it mounts it and after the "go -c -n" it prints a "+" and "Entry point ..." and the green led turns off. I see something more at the "go" command, the -w and 10000 that is not in the boot script inside my meter. I'll try it again.
W is wait, see documentation for redboot.
+ is from the chip bootloader (press somthing and you are in....) after that redboot is loading....
The meter is a 287/NUC (whatever NUC means).
My PCB is marked as REV 015, but there is also a sticker on the PCB with "287 R.020 AJ764496". So i guess it has REV 20 on it, as R277, R125 and R121 are populated (so assembled ModellA, ID0). Also, VR1, VR2, VR3, VR4 and other parts are not populated.
I'll get to the J-link after 5th January. Until then I'll read some more about the J-link tools and check the RAM lines with the scope. Play with hardware 'til i get to the software.
By the way, the Micron part marking decoder indicates that PW755 is for Micron MT45W2MW16BGB-701 IT, and it appears to fit the footprint (at least the VCC and VSS pins do). Is this the one? I saw in your photos a part number marked ISSI, but the photo was not clear enough to see hte code itself.
i have pdfs i dont remamber exactly. i have parts left and a hole DMM without display to sell
MT45W2MW16BGB-708-WT-TR
MT45W4MW16BCGB-701-IT-Micron
Thank you,
MihaiV.
-
#204 Reply
Posted by
MihaiV
on 31 Dec, 2021 17:31
-
Hello kjk24,
I checked the fs_info.txt and I found the same things inside my DMM with few exceptions.
My clem.img has a different size (3594744). Yours has 3593752.
In my health directory are two files, one named SysHealthLog (size 35750) and a BackupSysHealthLog (size 4096). Yours has only the SysHealthLog (size 3933).
The contents of fs is listed below:
RedBoot> fis unlock fs
RedBoot> fs mount -d /dev/flash/fis/fs -t jffs2 /
RedBoot> fs list
1 drwxr-xr-x 1 size 0 .
1 drwxr-xr-x 1 size 0 ..
4 drwxr-xr-x 1 size 0 tmp
5 drwxr-xr-x 1 size 0 user
3 drwxr-xr-x 1 size 0 system
2 drwxr-xr-x 1 size 0 checkpoint
RedBoot> fs cd tmp
RedBoot> fs list
4 drwxr-xr-x 1 size 0 .
1 drwxr-xr-x 1 size 0 ..
RedBoot> fs cd ./
RedBoot> fs list
1 drwxr-xr-x 1 size 0 .
1 drwxr-xr-x 1 size 0 ..
4 drwxr-xr-x 1 size 0 tmp
5 drwxr-xr-x 1 size 0 user
3 drwxr-xr-x 1 size 0 system
2 drwxr-xr-x 1 size 0 checkpoint
RedBoot> fs cd user
RedBoot> fs list
5 drwxr-xr-x 1 size 0 .
1 drwxr-xr-x 1 size 0 ..
10 drwxr-xr-x 1 size 0 setup
11 drwxr-xr-x 1 size 0 stored
9 drwxr-xr-x 1 size 0 calibration
RedBoot> fs cd setup
RedBoot> fs list
10 drwxr-xr-x 1 size 0 .
5 drwxr-xr-x 1 size 0 ..
1051 -rwxr-xr-x 1 size 371 BackupSetupResetData
1052 -rwxr-xr-x 1 size 44 SetupNonResetData
1053 -rwxr-xr-x 1 size 371 SetupResetData
1050 -rwxr-xr-x 1 size 44 BackupSetupNonResetData
RedBoot> fs cd ..
RedBoot> fs list
5 drwxr-xr-x 1 size 0 .
1 drwxr-xr-x 1 size 0 ..
10 drwxr-xr-x 1 size 0 setup
11 drwxr-xr-x 1 size 0 stored
9 drwxr-xr-x 1 size 0 calibration
RedBoot> fs cd stored
RedBoot> fs list
11 drwxr-xr-x 1 size 0 .
5 drwxr-xr-x 1 size 0 ..
12 drwxr-xr-x 1 size 0 meas
14 drwxr-xr-x 1 size 0 peak
13 drwxr-xr-x 1 size 0 minmax
15 drwxr-xr-x 1 size 0 recording
16 drwxr-xr-x 1 size 0 records
RedBoot> fs cd ..
RedBoot> fs list
5 drwxr-xr-x 1 size 0 .
1 drwxr-xr-x 1 size 0 ..
10 drwxr-xr-x 1 size 0 setup
11 drwxr-xr-x 1 size 0 stored
9 drwxr-xr-x 1 size 0 calibration
RedBoot> fs cd calibration
RedBoot> fs list
9 drwxr-xr-x 1 size 0 .
5 drwxr-xr-x 1 size 0 ..
28 -rwxr-xr-x 1 size 1098 CalConstant
RedBoot> fs cd ./
RedBoot> fs list
5 drwxr-xr-x 1 size 0 .
1 drwxr-xr-x 1 size 0 ..
10 drwxr-xr-x 1 size 0 setup
11 drwxr-xr-x 1 size 0 stored
9 drwxr-xr-x 1 size 0 calibration
RedBoot> fs cd ./ !!!!!!!! nu merge
RedBoot> fs list
1 drwxr-xr-x 1 size 0 .
1 drwxr-xr-x 1 size 0 ..
4 drwxr-xr-x 1 size 0 tmp
5 drwxr-xr-x 1 size 0 user
3 drwxr-xr-x 1 size 0 system
2 drwxr-xr-x 1 size 0 checkpoint
RedBoot> fs cd system
RedBoot> fs list
3 drwxr-xr-x 1 size 0 .
1 drwxr-xr-x 1 size 0 ..
6 drwxr-xr-x 1 size 0 apps
7 drwxr-xr-x 1 size 0 health
RedBoot> fs cd apps
RedBoot> fs list
6 drwxr-xr-x 1 size 0 .
3 drwxr-xr-x 1 size 0 ..
8 -rw-r--r-- 1 size 3594744 clem.img // different size
RedBoot> fs cd ..
RedBoot> fs list
3 drwxr-xr-x 1 size 0 .
1 drwxr-xr-x 1 size 0 ..
6 drwxr-xr-x 1 size 0 apps
7 drwxr-xr-x 1 size 0 health
RedBoot> fs cd health
RedBoot> fs list
7 drwxr-xr-x 1 size 0 .
3 drwxr-xr-x 1 size 0 ..
904 -rwxr-xr-x 1 size 35750 SysHealthLog // different size
41 -rwxr-xr-x 1 size 4096 BackupSysHealthLog // new file
RedBoot> fs cd ./
RedBoot> fs list
1 drwxr-xr-x 1 size 0 .
1 drwxr-xr-x 1 size 0 ..
4 drwxr-xr-x 1 size 0 tmp
5 drwxr-xr-x 1 size 0 user
3 drwxr-xr-x 1 size 0 system
2 drwxr-xr-x 1 size 0 checkpoint
RedBoot> fs cd checkpoint
RedBoot> fs list
2 drwxr-xr-x 1 size 0 .
1 drwxr-xr-x 1 size 0 ..
40 -rwxr-xr-x 1 size 4 uid
17 -rwxr-xr-x 1 size 4 sysFilesBytes
Next, I updated the bootscript with the one from the redboot info.txt file you attached.
I introduced the exact instructions, keeping the MAC address:
RedBoot> fconfig -i
Initialize non-volatile configuration - continue (y/n)? y
Run script at boot: true
Boot script:
Enter script, terminate with empty line
>> fis unlock fs
>> fs mount -d /dev/flash/fis/fs -t jffs2 /
>> load -m file /system/apps/clem.img
>> fs umount /
>> go -c -n -w 10000
>>
Boot script timeout (1000ms resolution): 10
Use BOOTP for network configuration: false
Gateway IP address: 0.0.0.0
Local IP address: 192.168.9.133
Local IP address mask: 255.255.0.0
Default server IP address: 192.168.100.100
Console baud rate: 115200
DNS server IP address: 0.0.0.0
Set eth0 network hardware address [MAC]: true
eth0 network hardware address [MAC]: 0x0E:0x00:0x00:0xEA:0x18:0xF0
GDB connection port: 9000
Force console for special debug messages: true
Console number for special debug messages: 0
Network debug at boot time: false
Update RedBoot non-volatile configuration - continue (y/n)? y
RedBoot> reset
... Resetting.
And reset. Here is the output:
+Aborted RBINIT
No network interfaces found
RedBoot(tm) bootstrap and debug environment [ROMRAM]
Non-certified release, version v2_0_74 - built 15:56:18, Sep 27 2007
Platform: Fluke Clem (ARM9)
Copyright (C) 2000, 2001, 2002, 2003, 2004 Red Hat, Inc.
Copyright (C) 2003, 2004, 2005, 2006, 2007 eCosCentric Limited
RAM: 0x00000000-0x007fb500, [0x0004dcb0-0x005d8500] available
FLASH: 0x10000000-0x107fffff, 63 x 0x20000 blocks, 4 x 0x8000 blocks
== Executing boot script in 10.000 seconds - enter ^C to abort
RedBoot> fis unlock fs
RedBoot> fs mount -d /dev/flash/fis/fs -t jffs2 /
RedBoot> load -m file /system/apps/clem.img
Entry point: 0x00060040, address range: 0x00060000-0x003bef68
RedBoot> fs umount /
RedBoot> go -c -n -w 5
About to start execution at 0x00060040 - abort with ^C within 5 seconds
It start execution in 5s because I wanted to see what happens after: nothing different, the green led turns off and the same gray screen appears.
Here is what I don't understand (please correct where I am wrong):
- the clem.img is the application that manages everything and is stored in Flash.
- At boot, the script mounts the JFFS2 partition that contains the clem.img
- Next, we load the clem.img itself. This means it is now loaded in RAM, right?
- Next, the go command initiates execution.
Now about the the redboot_info.txt (also correct me where I am wrong):
- The " fis create fs -n -f 0x10040000 -l 0x007A0000 " command will create in FLASH a new file system, starting at address 0x10040000, with length 0x007A0000. The -n will not alter the flash contents, so there is no danger to overwrite important stuff, right?
- The next instructions load the newly created file system in RAM, starting at the lowest free RAM address and write the clem.img in RAM, correct?:
load fs -r -b %{FREEMEMLO} -m ymodem
fis unlock fs
fis create fs
load clem.img -r -b 0x00050000 -m ymodem
fs write -b 0x00050000 -l 0x003bd617 clem.img
RedBoot>fis list
Name FLASH addr Mem addr Length Entry point
RedBoot 0x10000000 0x10000000 0x00040000 0x00000000
fs 0x10040000 0x00000000 0x007A0000 0xFFFFFFFF
FIS directory 0x107E0000 0x107E0000 0x0001F000 0x00000000
RedBoot config 0x107FF000 0x107FF000 0x00001000 0x00000000
- Next, we run "by hand" the boot script:
RedBoot config:
fis unlock fs
fs mount -d /dev/flash/fis/fs -t jffs2 /
load -m file /system/apps/clem.img
fs umount /
go -c -n -w 10000
- The "fis init" command appears to format the FLASH. Won't I loose the clem.img and everything in flash?
- The "copy files to device" commands at the end of the file appear to duplicate the clem.img and save it to BackupClem.img. Where do I get the "new" clem.img and how do I ulopad it? What exactly happens here?
copy file to device:
boot to redboot
fis unlock fs
fs mount -d /dev/flash/fis/fs -t jffs2 /
fs cd /system/apps/
fs list
fs move clem.img BackupClem.img
load clem.img -r -b 0x00050000 -m ymodem
fs write -b 0x00050000 -l 0x003bd617 clem.img
RedBoot> fs list
6 drwxr-xr-x 1 size 0 .
3 drwxr-xr-x 1 size 0 ..
621 -rwxr-xr-x 1 size 3921431 clem.img
596 -rwxr-xr-x 1 size 3922423 BackupClem.img
RedBoot> reset
Sorry for my lack of computer knowledge, they were overwritten long ago.
Thank you for your time and patience,
MihaiV.
-
#205 Reply
Posted by
booyeah
on 03 Jan, 2022 22:27
-
For the clem.img:
https://www.fluke.com/en-ie/support/software-downloads/fluke-287-and-289-multimeter-firmware-updateThe downloaded 287 update exe creates a folder containing clem_1_16.img.gz which contains the clem.img
Note it also says "Version 1.16 does not apply for units labeled 287/TPWS or 287/NUC." so might want to check which meter you have.
My 287, 289 and the downloaded clem.img are all version 1.6 so have a size of 3593752.
Not sure how you'd check which version you have, but as per kjk24s posts you could create a backup copy of the existing clem.img first.
-
#206 Reply
Posted by
MihaiV
on 04 Jan, 2022 19:32
-
Damn
! It's a NUC!
I don't now what software version I have though. I'm only getting the redboot version, not the application version. I don't have even the DMM's serial number (or I'm looking in the wrong places).
I also do not have an IR189USB cable, but I found some homebrew ones here:
https://www.eevblog.com/forum/buysellwanted/w-t-b-fluke-ir189-usb-usb-cable-280180-series/msg1436629/#msg1436629 I'll try the transistor one first. I already have a FTDI USB-TTL converter and the rest is peanuts.
How can I check if the optical interface works? I guess it should respond to commands (such as ID) or be detected by the update software.
I doubt it would respond at QM
.
In case the optical path is not working, can a Jlink be used to replace the entire content of the flash with a copy from another (working) meter?
MihaiV.
-
#207 Reply
Posted by
Arhigos
on 06 Jan, 2022 13:15
-
Damn ! It's a NUC!
(Attachment Link)
I don't now what software version I have though. I'm only getting the redboot version, not the application version. I don't have even the DMM's serial number (or I'm looking in the wrong places).
I also do not have an IR189USB cable, but I found some homebrew ones here: https://www.eevblog.com/forum/buysellwanted/w-t-b-fluke-ir189-usb-usb-cable-280180-series/msg1436629/#msg1436629
I'll try the transistor one first. I already have a FTDI USB-TTL converter and the rest is peanuts.
How can I check if the optical interface works? I guess it should respond to commands (such as ID) or be detected by the update software.
I doubt it would respond at QM .
In case the optical path is not working, can a Jlink be used to replace the entire content of the flash with a copy from another (working) meter?
MihaiV.
287/nuc is a special version of multimeter for french nuclear power plants and it has different firmware, different hardware and even different shield design. Even if you somehow upload flash from regular model 287 it will not work properly.
To check remote interface use 115200 Baud, no parity, 8 bits, 1 stop bit and it should respond to ID command with model and serial number. Viewforms software will also autodetect and autoconnect to the meter
-
#208 Reply
Posted by
MihaiV
on 08 Jan, 2022 12:35
-
Hello Arhigos,
Indeed I got the dmm from a French seller.
It doesn't appear to have much shielding, in fact there is none at all, on the enclosure or PCB. I attached some photos with it.
As for the hardware, in the placed I looked I couldn't find differences from the meters in this thread. Perhaps they are more subtle or in other places. Could you please point out some of them? Where should I look?
I must mention that the meter was opened before it got to me. The screw heads on the input jacks were slightly damaged, like an unsuitably large screwdriver was used to tighten them. So someone played in there before.
I will return with the result on the optical path. I don't have the Fluke View Forms software, so I'll try it with a serial terminal.
-
#209 Reply
Posted by
MihaiV
on 08 Jan, 2022 12:37
-
And the next attachments.
-
#210 Reply
Posted by
MihaiV
on 08 Jan, 2022 12:39
-
-
#211 Reply
Posted by
Arhigos
on 09 Jan, 2022 12:26
-
Board looks different from other nuc that i saw, but could be just a different revision. Or you could have a board from regular fluke 287 swapped inside the nuc case. The one i saw had a big resistors under resistor network and shield was different so that modified PCB can fit inside the meter.
Also, maybe i missing that, but what was the current draw when meter turns on? Also, it seems like you missing beeper for some reason. Did you just removed beeper?
-
#212 Reply
Posted by
MihaiV
on 10 Jan, 2022 16:43
-
Hello,
Thanks for the details. Maybe only the LCD bezel with the NUC inscription is changed.
I removed the beeper to be able to apply heat from under the MXS. Being plastic, I figured it could get some damage.
The back-up capacitor had a trace of corrosion so I removed it before anything else.
F1 fuse was missing from the beginning. Only F2 was installed.
I also changed the MXS crystal, as the original one was not oscillating at all. But the boot splash screen displayed without it. I used a low capacitance probe for it. With the new one it is strong and stable.
The current draw is each phase is:
- in sleep (9V applied, meter off): 36uA;
- during boot (while green led is on): 44mA
- after boot (led off, screen gray): 15.2mA
Boot appears to be divided in two: for ~1s it draws 7mA, then for 0.5s it draws 10mA and after this the led turns on and it jumps to 44mA.
After the power on button is pressed the beeper makes a very short beep (barely audible, 10us) and the same thing just before the screen goes gray.
I must mention that the 5V rail for the analog side is not enabled, the MSP keeps the regulator disabled, so those 15mA are only for the digital side.
-
#213 Reply
Posted by
Arhigos
on 14 Jan, 2022 15:41
-
- after boot (led off, screen gray): 15.2mA
I must mention that the 5V rail for the analog side is not enabled, the MSP keeps the regulator disabled, so those 15mA are only for the digital side.
Yeah that sounds little bit low. It should be somewhere over 20mA.
Have you checked l1 and l2 inductors?
-
#214 Reply
Posted by
MihaiV
on 15 Jan, 2022 18:52
-
L1 and L2 are ok, and so are all regulators. I have 1.805V at TP18, 2.950 at E35, 21.174V at E41 and 3.055 at TP32.
U17 is also OK, meaning it provides 5V for a moment, but is quickly disabled by the MSP430.
Yesterday I breadboarded and validated a IR serial link using a FTDI and I'm building it on proto-board.
I configured the link in loopback (IR led looking straight at the phototransistor) and I started the FlukeView. With a port sniffer I observed several identifications commands sent by Forms: ID, ~ID, *IDN? with 115200 and 9600 baud.
Just to make sure, the IR receiver is CR13, the component with the dark package, right?
-
#215 Reply
Posted by
MihaiV
on 12 Feb, 2022 17:10
-
Hello,
I made a optical USB adapter (as in reply nr. 2 here:
https://www.eevblog.com/forum/buysellwanted/w-t-b-fluke-ir189-usb-usb-cable-280180-series/msg1436629/#msg1436629). I built the one without comparators and tested it in optical loopback mode at 115200 baud.
Stuck it in the meter's "eyes" and no response. I traced the signal through the photodiode, R150 to U23 (an OPA364). Also tried it with TX inverted, but in both cases there was no response on the IR led. The signal looks good, even at 57600 max baud coming from the FlukeView forms software. Interesting fact that the negative supply of U23 comes through a diode in CR12. Perhaps to keep the inputs/output in proper operating range (even though it is RRIO).
I have one more lead with the Jlink, to check RAM operation as kjk24 instructed above, but after that I'm out of ideas.
-
#216 Reply
Posted by
Arhigos
on 17 Feb, 2022 05:52
-
At this point i think you probably have bad bga flash chip or corrupted flash, or dead cpu.
You will not get ir communication until arm processor is fully boot up. You have 2 ethernet connectors for that kind of debug, but I don't know how to use them.
-
#217 Reply
Posted by
maximalcho
on 18 Feb, 2022 08:57
-
Hi MihaiV
did you try to connect fluke with J-Link because I fail. I try to connect it according to J-Link pinout without success.
I have another jtag programmer with which I manage to connect to MXS but I do not have access to flash memory or maybe flash is dead.
-
#218 Reply
Posted by
MihaiV
on 25 Feb, 2022 19:18
-
Hi maximalcho,
I was away for the week so I didn't have a chance to try it.
Will try something this weekend and posts results (if any) here.
-
#219 Reply
Posted by
maximalcho
on 11 Mar, 2022 06:41
-
i fixed my multimeter.I changed flash ic and program with one of dumps from here.The multimeter is now fully functional.
-
#220 Reply
Posted by
MihaiV
on 11 Mar, 2022 19:50
-
Congratulations, hope you enjoy the meter for a long time!
May I ask what flash contents and what component part number you used? You used the Jlink or another programmer?
Thanks,
Mihai V.
-
#221 Reply
Posted by
maximalcho
on 12 Mar, 2022 06:51
-
First I used dump from kjk24 (thank you kjk24) reply #153 and program last dump from archive (_ok_0x10000000-0x101E0010).Multimeter start but not fully load (my multimeter was fully dead) then i program dump from AnJu (Спасибо AnJu ) reply #83 and thadaaa the multimeter came back to life.And because the АnJu dump is from 287 and mine is 289, I made an official update for 289 via the Ir port just in case.I used the jlink programmer and I ordered the flash ic from digikey
https://www.digikey.bg/en/products/detail/alliance-memory-inc/PC28F640P30TF65A/13543373.
PS:To make connection with Jlink
LCD must be connected ! Оtherwise mxs is in sleep mode and no connection can be made.
-
#222 Reply
Posted by
maximalcho
on 12 Mar, 2022 07:14
-
One more thing.First when i program dump from kjk24 my multimeter stuck at the same screen like yours from reply #166.You can try to program with jlink a dump from AnJu and if you are lucky the multimeter will come to life.
-
#223 Reply
Posted by
MihaiV
on 12 Mar, 2022 17:27
-
Hello,
Thank you!
I tried today something. Here goes:
I managed to connect to the target using Jflash and the configuration file from post #163, from kaiser. The log output is:
Connecting ...
- Connecting via USB to probe/ programmer device 0
- Probe/ Programmer firmware: J-Link Pro V4 compiled Sep 24 2021 16:41:59
- Device "ARM7" selected.
- Target interface speed: 30 kHz (Fixed)
- VTarget = 3.071V
- TotalIRLen = 4, IRPrint = 0x01
- JTAG chain detection found 1 devices:
- #0 Id: 0x1092001D, IRLen: 04, ARM920T Core
- Identified core does not match configuration. (Found: ARM9, Configured: ARM7)
- CP15.0.0: 0x41129200: ARM, Architecture 4T
- CP15.0.1: 0x0D172172: ICache: 16kB (64*8*32), DCache: 16kB (64*8*32)
- Cache type: Separate, Write-back, Format A
- Executing init sequence ...
- Initialized successfully
- Adaptive clocking not supported for selected CPU core. Only supported for -S cores.
- Auto JTAG speed: 8000 kHz
- Target interface speed: 8000 kHz (Auto)
- Found 1 JTAG device. Core ID: 0x1092001D (None)
- Connected successfully
Next, I tried to read the flash contents: Target>Manual Programming>Read back>Entire chip.
The response is:
Reading selected sectors ...
- 67 of 67 sectors selected, 1 range, 0x10000000 - 0x107FFFFF
- Start of determining flash info (Bank 0 @ 0x10000000)
- End of determining flash info
- Flash bank info:
- 63 * 128 KB @ 0x10000000
- 4 * 32 KB @ 0x107E0000
- Start of preparing flash programming
- ERROR: Failed to read back RAMCode for verification.
- ERROR: Failed to prepare for programming.
Failed to download RAMCode!
- End of preparing flash programming
- Start of restoring
- End of restoring
- ERROR: Failed to read back target memory
Disconnecting ...
- Disconnected
And a warning message (photo 3).
Next, I tried to connect using the command line (JLink commander). Connected ok and saved the entire contents of the flash using savebin command, starting from address 0x10000000.
And it worked, i have a copy of the flash contents, from 0x10000000 to 0x107FFFFF. This means that the flash chip and the connections to it are ok.
I attached it below.
I checked its contents with the dump from AnJu, as indicated by maximalcho (Thansks!). They are very similar.
I tried to check the RAM, as indicated by kjk24 in post 201, using the w4 and mem32 commands.
However, there is no response. I tried with single bytes and I do not get an output. See photo 2.
Reading works using the mem8 command on flash (see photo 1). The output fits with the contents i got using the savebin command.
Does it mean i have a bad ram, or with bad connections?
Is itpossible to brick the meter if I upload the contents from AnJu ("2.fs 0x10040000.bin" starting from address 0x10040000 and "3.FIS directory 0x107E0000.bin" from address 0x107E0000) and having a bad ram?
Especially if using "Use target ram" option enabled?
Thank you,
MihaiV.
-
#224 Reply
Posted by
maximalcho
on 12 Mar, 2022 19:15
-
Once you have a full dump on your flash chip I don't think you can brick the multimeter.If the ram is really damaged when trying to program flash it will probably give an error in the worst case the device will stop but when you change the ram you will be able to restore it.If you try to program flash and it doesn't work you may have tried to reball the memory or just to reflow.Try to change the core type in the configuration file because it is not correct at the moment, but keep in mind that when you change it you have to reconfigure the type of flash memory and its address.