Cg3300 netgear

[U129718]

I have a CG3300 cablemodem of Netgear Company. I want to read the flash ( text in top S70FL256P ) and reading in internet I can see that is the same as S25FL129P and is 32MB in size. The last 16MB is a complete clone of what is on the first 16MB.

First I try to read flash, and I copy this attached files in config file of USBJTAGnt version 0.58 but the file I get has errors, there was no Mac Address or serial CM information. I upgrade the USBJTAG no 0.69 version, and now I can not select the xml files in config program file.

I know the flash is similar to other modems, NETGEAR CG4000TD - VMDG485, TG862G.

Can you help me to read the flash?? Which target is the right one to select in USBJTAG for this type of flash??

Conneting to serial port in motherboard, I can get:

U-Boot 1.2.0 (Dec 19 2012 - 10:21:05)
PSPU-Boot 1.0.18.24

DRAM: 128 MB
Spansion S25FL129P flash found
Spansion S25FL129P flash found
Flash: 32 MB
In: serial
Out: serial
Err: serial
Press SPACE to abort autoboot in 3 second(s)
*** ACTIMAGE = 2, will try to boot UBFI2 stored @0x4c000000
## Executing script at 4c000000
============== Running script =========
*** Running from UBFI2 partition @0x4c000000
Load address = 0x4c002154 (0x2154)
Kernel address = 0x4c0021a0 (0x21a0)
kernel size = 0x11b260
FS address = 0x4c11d400 (0x11d400)
FS size = 0x4c5400
NVRAM offset = 0xfb0000
NVRAM size = 0x50000
*** UBFI2 bootscript executed successfully.
Start booting...
## Booting image at 4c002154 ...
Image Name: Multi Image File
Image Type: ARM Linux Multi-File Image (uncompressed)
Data Size: 6162028 Bytes = 5.9 MB
Load Address: 80a00000
Entry Point: 80a00000
Contents:
Image 0: 1159776 Bytes = 1.1 MB
Image 1: 5002240 Bytes = 4.8 MB
Verifying Checksum ... OK
OK

Starting kernel ...

Starting LZMA Uncompression Algorithm.
Compressed file is LZMA format.

[U129718]

Hello.

selecting the target TVMDG485.xml I can get the boot file. I attached it. I can easily read in offset 15240 that this type of flash is not supported with the USBjTAG NT. Is it really true?? can anyboby help me to read this flash completely??? Getting the nvram file, there is no data in it. Probably I am doing something wrong. Help.

Thanks friends...

[usbbdm]

I will take a look of the datasheet when I have a chance. If it is newer chip and needs some development. I will try to see how can I get the chip to test first. IF it is just a simple XML change then anyone should be able to do it.

[usbbdm]

Hello.

selecting the target TVMDG485.xml I can get the boot file. I attached it. I can easily read in offset 15240 that this type of flash is not supported with the USBjTAG NT. Is it really true?? can anyboby help me to read this flash completely??? Getting the nvram file, there is no data in it. Probably I am doing something wrong. Help.

Thanks friends...

If you want I can take a look remotely via teamviewer and see if it is a simple fix with XML.

[U129718]

If you want I can take a look remotely via teamviewer and see if it is a simple fix with XML.

Thanks. Sent you a prívate messege with user and password if the connection.

[usbbdm]

I am confused what I see. How come the software detects as 16M flash 25L128 when you said it is 32M flash. Unless there is TWO flash chip. Then you need to backup each flash.

[U129718]

I am confused what I see. How come the software detects as 16M flash 25L128 when you said it is 32M flash. Unless there is TWO flash chip. Then you need to backup each flash.

I am confused as well You can confirm yesterday that USBJTAG NT detect the 16M flash 25L128. I attached you the files from both serial connetions and photos of the motherboard, flash and serial ports of the modem.

Have anybody a proposal to go on with the project?? reading the whole 32Mflash..

Thanks

[usbbdm]

The flash itself is 16M not 32M.
It might have second flash somewhere.

[U129718]

The flash itself is 16M not 32M.
It might have second flash somewhere.

May be I can send more Photos in orden to locate and find the other flash. Can you help me?? Thanks

[usbbdm]

Only the serial log says it is 32M. No other evidence it is 32M or two flash chip.
So easy thing to do is clone only 16M to another modem and see if it is cloned. If it is then it is only 16M flash.

[U129718]

Only the serial log says it is 32M. No other evidence it is 32M or two flash chip.
So easy thing to do is clone only 16M to another modem and see if it is cloned. If it is then it is only 16M flash.

Ok. I will try to do it and tell you results. Thanks.

[U129718]

I have the real working cg3300 modem. I read the flash and copy it to mine. It do not works. The Mac Address of the modem do not change when I go to modem webpage. Have you ever connect usbjtag NT to a 25L256 flash and it detect it??

Maybe the problem is the detection of the flash?? I read all components of the motherboard and there is no more flashes. Only the one you can see in Photos.

[usbbdm]

This modem has 128 not 256 flash. I do not have a 256 flash to play with.

[usbbdm]

I have the real working cg3300 modem. I read the flash and copy it to mine. It do not works. The Mac Address of the modem do not change when I go to modem webpage. Have you ever connect usbjtag NT to a 25L256 flash and it detect it??

Maybe the problem is the detection of the flash?? I read all components of the motherboard and there is no more flashes. Only the one you can see in Photos.

You might be right, NT might not support 25L256 in 0.69. I might need to modify the software to support flash higher than 128.

[U129718]

You might be right, NT might not support 25L256 in 0.69. I might need to modify the software to support flash higher than 128.

What a pity. This will make the USBJTAG NT better. Might you estimate how long it will take to implement-upgrade the software for this type of flash?

Thanks for you time and kindness.