Clone Boxes

nafan said:

:clapping:

That's a great news !

You did it with a simple JTAG (5 x 100 ohms resistors) adapter ?

I haven't got 100 ohms resistors at home (only have 220 ohms and higher...) but will buy some on monday.

Thank you very much for your feedback.


PS : On my other DM500S, I've installed Nabilo-V08 and it works like a charm.
The only thing I haven't found yet is the "Quick-button" menu to allow recording when "Radio" button is pressed...

Click to expand...

Yes simple jtag 5x100 ohms 20cm wires (only network is not working now maby mac address)

hapi said:

Need different mac:adress in binary network do not work with 00:00:00:00:00

Click to expand...

You mean that the MAC adress is set to "00:00:00:00:00:00" in the bootloader ?
Setting it to "00:09:34:..." in "init" file is ok, or is there something else to do before flashing with JTAG ?

hapi said:

Yes simple jtag 5x100 ohms 20cm wires (only network is not working now maby mac address)

Click to expand...

Ok :thum:

But changing MAC adress without a telnet access seems quite difficult, isn't it ?

jep

It was wrong image not alps default one in (jtag500 blimg)that enabled network.
On tuner txt "NXP"

hapi said:

It was wrong image not alps default one in (jtag500 blimg)that enabled network.
On tuner txt "NXP"

Click to expand...

dam me no tuner default image sry m8
alps bootloader no network no tuner aargh!! ;D

So you can't find a good bootloader bin ?

Is there a software to read the bootloader of a working DM500S ?
If so, I can make a dump next week (as soon as I get 100 ohms resistors).

Hi, I've a 500c, and I've flashed it like you said. It Works, but I've no turner. I think this is becouse I need a Cable Bootloader.... Do you know where to get it ??

Thanks in advance

I'm afraid I don't know.

All I can tell you is that the best way to get it would be reading the bootloader from a working box

Yes, but, how can I read it ?? I have one ok, I have Jtag... But I don't have software...
Do you know wich one could I use ??

No, unfortunatly, I don't !

And I think it is code protected... so you have to write a specific byte in order to be able to read something else than FFs.
Not so easy in fact. ;(

But if we can get 500s bootloader, I hope someone might have 500c bootloader......

alaska said:

Hi, I've a 500c, and I've flashed it like you said. It Works, but I've no turner. I think this is becouse I need a Cable Bootloader.... Do you know where to get it ??

Thanks in advance

Click to expand...

hello alaska
you said,it works.am Trying to Understand you.how you mean it works but you have no tuner.Sorry.If it works you should have a connection with your box and flash it with dreamup.
Sorry maybe am wrong,but tell us more.Mybe someone helps you.

most probably he means that the green led turns on. am i right alaska? anybody got a good DM500s bootloader?

I don't have a clone to test these but here are some DM500 bootloaders:


Use at your own risk (but if your box is dead what have you got to lose?).

well I just bought the dreambox repair software from no links to commercial sites I have 1 original dreambox and 1 clone. both where crashed due to gemini software (adios amigos). thank god dreambox repair helped me. i only needed a serial cable and no J-Tag.

i really recommand it to you guys

http:// no links to commercial sites

my grandma doubts about someone who links twice .. so i should be sure in the first place..


good job guys .. i hope we can come up with a full tutorial include s the bootloader thing ..:thum:

hello

dmesg from default blimg i have dm500-C clone

Linux version 2.6.9 (dm7020@pc1) (gcc version 3.4.4) #7 Fri Mar 14 07:02:03 Local time zone must be set--see zic manu
On node 0 totalpages: 8192
DMA zone: 8192 pages, LIFO batch:2
Normal zone: 0 pages, LIFO batch:1
HighMem zone: 0 pages, LIFO batch:1
Built 1 zonelists
Kernel command line: console=null root=/dev/mtdblock5 rootfstype=squashfs ro
PID hash table entries: 256 (order: 8, 4096 bytes)
Console: colour dummy device 80x25
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 29952k available (1764k kernel code, 612k data, 76k init, 0k highmem)
Calibrating delay loop... 250.88 BogoMIPS (lpj=125440)
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
NET: Registered protocol family 16
Squashfs 2.2-r2 (released 2005/09/08) (C) 2002-2005 Phillip Lougher
devfs: 2004-01-31 Richard Gooch ([email protected])
devfs: boot_options: 0x1
JFFS2 version 2.2. (NAND) (C) 2001-2003 Red Hat, Inc.
Initializing Cryptographic API
Serial: 8250/16550 driver $Revision: 1.90 $ 7 ports, IRQ sharing disabled
ttyS0 at MMIO 0x0 (irq = 20) is a 16550A
ttyS1 at MMIO 0x0 (irq = 21) is a 16550A
ttyS2 at MMIO 0x0 (irq = 22) is a 16550A
loop: loaded (max 8 devices)
ne.c:v1.10 9/23/94 Donald Becker ([email protected])
Last modified Nov 1, 2000 by Paul Gortmaker
NE*000 ethercard probe at 0xc3060600:<4>eth0: interrupt from stopped card
00 33 22 22 33 11
eth0: NE2000 found at 0xc3060600, using IRQ 25.
Using deadline io scheduler
dreambox: flash mapping: 800000 at 7f800000
DreamBOX rev3+: Found 1 x16 devices at 0x0 in 16-bit bank
Intel/Sharp Extended Query Table at 0x0031
Using buffer write method
cfi_cmdset_0001: Erase suspend on write enabled
0: offset=0x0,size=0x20000,blocks=64
disable flash VPP
Creating 7 MTD partitions on "DreamBOX rev3+":
0x00000000-0x00500000 : "DreamBOX cramfs+squashfs"
0x00500000-0x007c0000 : "DreamBOX jffs2"
0x007c0000-0x00800000 : "DreamBOX OpenBIOS"
0x00000000-0x007c0000 : "DreamBOX (w/o bootloader)"
0x00000000-0x00800000 : "DreamBOX (w/ bootloader)"
0x00120000-0x00500000 : "DreamBOX SquashedFS"
0x00000000-0x00120000 : "DreamBOX Cramfs"
mice: PS/2 mouse device common for all mice
i2c /dev entries driver
IBM IIC driver v2.1
ibm-iic0: using standard (100 kHz) mode
NET: Registered protocol family 2
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 2048 bind 4096)
NET: Registered protocol family 1
NET: Registered protocol family 17
VFS: Mounted root (squashfs filesystem) readonly.
Mounted devfs on /dev
Freeing unused kernel memory: 76k init
Warning: unable to open an initial console.
head: module license 'Proprietary' taints kernel.
framebuffer mem base: a0900000
0/0: 00004000 81f00000
0/1: 00000000 00000000
1/0: 20003000 80f00000
1/1: 00000000 00000000
trying to memset ..
ok.
fb_find_mode returned 0
allocated major 250 for denc.
[DENC] set PAL
[DENC] disable WSS
core: Loaded IBM STB02xx core driver
audio init
AUDIO_CLEAR_BUFFER
demux: init
xp0_clk_stop
fe: write ret=-121
stv: wake up failed
stb04_pig: $Id: stb04_pig.c,v 1.15 2007/02/28 21:34:47 ghost Exp $
[DENC] set mode to FBAS
[DENC] set mode to FBAS
VIDEO_SELECT_SOURCE
open video clip-mode
VIDEO_CLEAR_BUFFER
VIDEO_PLAY / VIDEO_CONTINUE, state 1 0
write 1 event's ...
VIDEO_STOP, state 0
[DENC] set mode to FBAS
VIDEO_SELECT_SOURCE
VIDEO_CLEAR_BUFFER
VIDEO_PLAY / VIDEO_CONTINUE, state 1 0
VIDEO_STOP, state 0
set event: 00000049
[DENC] set mode to RGB
[DENC] set mode to FBAS
[DENC] set PAL
[DENC] set mode to RGB
[DENC] set mode to FBAS
[DENC] set PAL
[DENC] set WSS 4:3
[DENC] set PAL

and this is orginal dm500-S that i have

Linux version 2.6.9 (tux@tux) (gcc version 3.4.4) #1 Tue Feb 26 17:05:38 CET 2008
On node 0 totalpages: 8192
DMA zone: 8192 pages, LIFO batch:2
Normal zone: 0 pages, LIFO batch:1
HighMem zone: 0 pages, LIFO batch:1
Built 1 zonelists
Kernel command line: console=null root=/dev/mtdblock5 rootfstype=squashfs ro
PID hash table entries: 256 (order: 8, 4096 bytes)
Console: colour dummy device 80x25
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 29992k available (1740k kernel code, 592k data, 80k init, 0k highmem)
Calibrating delay loop... 250.36 BogoMIPS (lpj=125184)
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
NET: Registered protocol family 16
Squashfs 2.2-r2 (released 2005/09/08) (C) 2002-2005 Phillip Lougher
devfs: 2004-01-31 Richard Gooch ([email protected])
devfs: boot_options: 0x1
JFFS2 version 2.2. (NAND) (C) 2001-2003 Red Hat, Inc.
Serial: 8250/16550 driver $Revision: 1.90 $ 7 ports, IRQ sharing disabled
ttyS0 at MMIO 0x0 (irq = 20) is a 16550A
ttyS1 at MMIO 0x0 (irq = 21) is a 16550A
ttyS2 at MMIO 0x0 (irq = 22) is a 16550A
loop: loaded (max 8 devices)
ne.c:v1.10 9/23/94 Donald Becker ([email protected])
Last modified Nov 1, 2000 by Paul Gortmaker
NE*000 ethercard probe at 0xc3060600:<4>eth0: interrupt from stopped card
00 09 xx xx xx xx
eth0: NE2000 found at 0xc3060600, using IRQ 25.
Universal TUN/TAP device driver 1.5 (C)1999-2002 Maxim Krasnyansky
Using deadline io scheduler
dreambox: flash mapping: 800000 at 7f800000
DreamBOX rev3+: Found 1 x16 devices at 0x0 in 16-bit bank
Intel/Sharp Extended Query Table at 0x0031
Using buffer write method
cfi_cmdset_0001: Erase suspend on write enabled
0: offset=0x0,size=0x20000,blocks=64
disable flash VPP
Creating 7 MTD partitions on "DreamBOX rev3+":
0x00000000-0x00500000 : "DreamBOX cramfs+squashfs"
0x00500000-0x007c0000 : "DreamBOX jffs2"
0x007c0000-0x00800000 : "DreamBOX OpenBIOS"
0x00000000-0x007c0000 : "DreamBOX (w/o bootloader)"
0x00000000-0x00800000 : "DreamBOX (w/ bootloader)"
0x00120000-0x00500000 : "DreamBOX SquashedFS"
0x00000000-0x00120000 : "DreamBOX Cramfs"
mice: PS/2 mouse device common for all mice
i2c /dev entries driver
IBM IIC driver v2.1
ibm-iic0: using standard (100 kHz) mode
NET: Registered protocol family 2
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 2048 bind 4096)
NET: Registered protocol family 1
NET: Registered protocol family 17
VFS: Mounted root (squashfs filesystem) readonly.
Mounted devfs on /dev
Freeing unused kernel memory: 80k init
Warning: unable to open an initial console.
head: module license 'Proprietary' taints kernel.
framebuffer mem base: a0900000
0/0: 00004000 81f00000
0/1: 00000000 00000000
1/0: 20003000 80f00000
1/1: 00000000 00000000
trying to memset ..
ok.
fb_find_mode returned 0
allocated major 250 for denc.
[DENC] set PAL
[DENC] disable WSS
core: Loaded IBM STB02xx core driver
audio init
AUDIO_CLEAR_BUFFER
demux: init
xp0_clk_stop
registering frontend...
disable continuous tone
stb04_pig: $Id: stb04_pig.c,v 1.16 2007/06/12 19:28:18 ghost Exp $
[DENC] set mode to FBAS
[DENC] set mode to FBAS
VIDEO_SELECT_SOURCE
open video clip-mode
VIDEO_CLEAR_BUFFER
VIDEO_PLAY / VIDEO_CONTINUE, state 1 0
write 1 event's ...
VIDEO_STOP, state 0
set event: 00000049
[DENC] set mode to RGB
[DENC] set mode to FBAS
[DENC] set PAL
[DENC] set mode to RGB
[DENC] set mode to FBAS
[DENC] set PAL
[DENC] set WSS 4:3
[DENC] set PAL

hi

Have some body 'howto' read bootloader from flash. Thx

I want to know how to read the bootloader from a working DM500S.

I made it ,write the ALPS bootloader to my dead DM500S but it does not working yet ..

have somebody know why it ?