Tutorial: How to recover dead AZBox

[andressis2k]

Tutorial that explains how to recover dead box.
Useful if you can't access to the STB by network, and USB menu doesn't works.

Includes Spanish guide, English guide, and all necessary files.

I'm sorry if English version contains misspellings, but my english isn't very good

http://www.megaupload.com/?d=FSIYK9CW
http://www.multiupload.com/MZFLCYUQ3N

Regards

[david1]

Thanks for this great tutorial.
Worked fine on my Elite with "geek :p" message on display.

[lucky13]

will this work on prem + ?

[simon30000]

i followed this tutorial. it worked a treat ,i highly recomend using if your box is stuck in booting with no ip..i used diffrent cable though.
google usb ttl to serial cable, u wil find it on eb#y
bt change wires around to have in order
pin1 tx blue
pin2 vcc yellow
pin3 gnd black
pin4 rx red

then attach to az

[happyhammer]

Does anyone have any suggestions to recover an elite box which also seems to have a defective serial connection so i cannot enter CRL-C to get to the YAMON prompt. The unit is stuck in booting and hangs a a point of detecting the Ethernet port. I have been unable to get the JTAG to work.


=====================
Using UART port 0 as console.
Board ID.: "852-E2"
Chip Revision: 0x8634:0x86 .. Matched.
Setting up H/W from XENV block at 0x8c000000.
Setting <SYSCLK avclk_mux> to 0x00000000.
Setting <SYSCLK hostclk_mux> to 0x00000100.
Setting <IRQ rise edge trigger lo> to 0xff28ca00.
Setting <IRQ fall edge trigger lo> to 0x0000c000.
Setting <IRQ rise edge trigger hi> to 0x0000009f.
Setting <IRQ fall edge trigger hi> to 0x00000000.
Setting <IRQ GPIO map> to 0x20090820.
Setting <PB default timing> to 0x10101010.
Setting <PB timing0> to 0x10101010.
Setting <PB Use timing0> to 0x000003f4.
Setting <PB timing1> to 0x00110101.
Setting <PB Use timing1> to 0x000003f3.
Setting <PB timing2> to 0x105f1010.
Setting <PB Use timing2> to 0x000003f8.
PB cs config: 0x000e0040 (use 0x000e0040)
Enabled Devices: 0x00021ace
BM/IDE PCIHost Ethernet I2CM I2CS USB PCIDev2 PCIDev3 SCARD
MAC: 00:02:14:15:5d:3a
PCI IRQ routing:
IDSEL 2: INTA(#14) INTB(#14) INTC(#14) INTD(#14)
IDSEL 3: INTA(#15) INTB(#15) INTC(#15) INTD(#15)
Smartcard pin assignments:
OFF pin = 0
5V pin = 1
CMD pin = 2
Setting up Clean Divider 2 to 96000000Hz.
Setting up Clean Divider 4 to 33333333Hz.
Setting up Clean Divider 5 to 25000000Hz.
Setting up Clean Divider 6 to 20000000Hz.
Setting up Clean Divider 7 to 20000000Hz.
GPIO dir/data = 0x76000038/0x76000000
UART0 GPIO mode/dir/data = 0x6e/0x00/0x00
UART1 GPIO mode/dir/data = 0x6e/0x00/0x00
XENV block processing completed.
Found existing memcfg: DRAM0(0x08000000), DRAM1(0x08000000)
Heap/Temp/Temp1/Dest start at 0x14000000/0x16000000/0x15000000/0x12000000.
Default boot index: 0
Scanning ROMFS image at 0x8c040000 (0x48040000) .. Found.
ROMFS found at 0x8c040000, Volume name = YAMON_XRPC
Found 1 file(s) to be processed in ROMFS.
Processing xrpc_xload_yamon_ES4_prod.bin (start: 0x8c040090, size: 0x0002fe84)
Checking zboot file signature .. Not found.
Trying xrpc_xload format .. OK
Checking zboot file signature at 0x13000000 .. OK
Decompressing to 0x91200000 .. OK (453328/0x6ead0).
Load time total 173/255 msec.
Execute final at 0x91200000 ..



********************************* *
* YAMON ROM Monitor
* Revision 02.06-SIGMADESIGNS-01-2.8.0.1
********************************* *
Memory: code: 0x11000000-0x11040000, 0x11200000-0x11204000
reserved data: 0x11240000-0x12440000, PCI memory: 0x12440000-0x12840000
Environment variable 'start' exists. After 1 seconds
it will be interpreted as a YAMON command and executed.
Press Ctrl-C (or do BREAK) to bypass this.

xosPe0 serial#94f9be38fc043589c09643574a 101028 subid 0x50
xenv cs2 ok
power supply: ok
dram0 ok (9)
dram1 ok (a)
zboot (0) ok
>
********************************* *****
* SMP863x zboot start ...
* Version: 2.4.0-2.8.0.1
* Started at 0x91000000.
* Configurations (chip revision: 6):
* Use 8KB DRAM as stack.
* Support XLoad format.
* Enabled BIST mode.
* Enabled memory test mode.
* Use internal memory for stage0/1.
********************************* *****
Boot from flash (0x48000000) mapped to 0x8c000000.
Found XENV block at 0x8c000000.
CPU clock frequency: 300.37MHz.
System clock frequency: 200.25MHz.
DRAM0 dunit_cfg/delay0_ctrl (0xf34111ba/0x000a7777).
DRAM1 dunit_cfg/delay0_ctrl (0xf34111ba/0x000a7786).
Using UART port 0 as console.
Board ID.: "852-E2"
Chip Revision: 0x8634:0x86 .. Matched.
Setting up H/W from XENV block at 0x8c000000.
Setting <SYSCLK avclk_mux> to 0x00000000.
Setting <SYSCLK hostclk_mux> to 0x00000100.
Setting <IRQ rise edge trigger lo> to 0xff28ca00.
Setting <IRQ fall edge trigger lo> to 0x0000c000.
Setting <IRQ rise edge trigger hi> to 0x0000009f.
Setting <IRQ fall edge trigger hi> to 0x00000000.
Setting <IRQ GPIO map> to 0x20090820.
Setting <PB default timing> to 0x10101010.
Setting <PB timing0> to 0x10101010.
Setting <PB Use timing0> to 0x000003f4.
Setting <PB timing1> to 0x00110101.
Setting <PB Use timing1> to 0x000003f3.
Setting <PB timing2> to 0x105f1010.
Setting <PB Use timing2> to 0x000003f8.
PB cs config: 0x000e0040 (use 0x000e0040)
Enabled Devices: 0x00021ace
BM/IDE PCIHost Ethernet I2CM I2CS USB PCIDev2 PCIDev3 SCARD
MAC: 00:02:14:15:5d:3a
PCI IRQ routing:
IDSEL 2: INTA(#14) INTB(#14) INTC(#14) INTD(#14)
IDSEL 3: INTA(#15) INTB(#15) INTC(#15) INTD(#15)
Smartcard pin assignments:
OFF pin = 0
5V pin = 1
CMD pin = 2
Setting up Clean Divider 2 to 96000000Hz.
Setting up Clean Divider 4 to 33333333Hz.
Setting up Clean Divider 5 to 25000000Hz.
Setting up Clean Divider 6 to 20000000Hz.
Setting up Clean Divider 7 to 20000000Hz.
GPIO dir/data = 0x76000038/0x76000000
UART0 GPIO mode/dir/data = 0x6e/0x00/0x00
UART1 GPIO mode/dir/data = 0x6e/0x00/0x00
XENV block processing completed.
Found existing memcfg: DRAM0(0x08000000), DRAM1(0x08000000)
Heap/Temp/Temp1/Dest start at 0x14000000/0x16000000/0x15000000/0x12000000.
Default boot index: 0
Scanning ROMFS image at 0x8c040000 (0x48040000) .. Found.
ROMFS found at 0x8c040000, Volume name = YAMON_XRPC
Found 1 file(s) to be processed in ROMFS.
Processing xrpc_xload_yamon_ES4_prod.bin (start: 0x8c040090, size: 0x0002fe84)
Checking zboot file signature .. Not found.
Trying xrpc_xload format .. OK
Checking zboot file signature at 0x13000000 .. OK
Decompressing to 0x91200000 .. OK (453328/0x6ead0).
Load time total 173/255 msec.
Execute final at 0x91200000 ..



********************************* *
* YAMON ROM Monitor
* Revision 02.06-SIGMADESIGNS-01-2.8.0.1
********************************* *
Memory: code: 0x11000000-0x11040000, 0x11200000-0x11204000
reserved data: 0x11240000-0x12440000, PCI memory: 0x12440000-0x12840000
Environment variable 'start' exists. After 1 seconds
it will be interpreted as a YAMON command and executed.
Press Ctrl-C (or do BREAK) to bypass this.

xrpc succeeded
Checking zboot signature.. it's a zboot file, signature OK.
Decompressing to 0x90020000 ..
Output length: 0x0096843a(9864250)
load compressed zboot file from 0xb3000000 to 0x90020000 OK
Linux version 2.6.15-sigma (kevin@kevin-laptop) (gcc version 3.4.2) #138 PREEMPT Thu Jan 22 21:35:07 KST 2009
Configured for SMP863x (revision ES6/RevA), detected SMP8634 (revision ES9/RevC).
SMP863x/SMP865x Enabled Devices under Linux/XENV 0x48000000 = 0x00021ace
BM/IDE PCIHost Ethernet I2CM I2CS USB PCIDev2 PCIDev3 SCARD
Valid MEMCFG found at 0x10000fc0.
CPU revision is: 00019069
Determined physical RAM map:
memory: 02fe0000 @ 10020000 (usable)
User-defined physical RAM map:
memory: 06be0000 @ 10020000 (usable)
On node 0 totalpages: 93184
DMA zone: 93184 pages, LIFO batch:31
DMA32 zone: 0 pages, LIFO batch:0
Normal zone: 0 pages, LIFO batch:0
HighMem zone: 0 pages, LIFO batch:0
Built 1 zonelists
Kernel command line: mem=108m console=ttyS0,115200
Primary instruction cache 16kB, physically tagged, 2-way, linesize 16 bytes.
Primary data cache 16kB, 2-way, linesize 16 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
PID hash table entries: 2048 (order: 11, 32768 bytes)
Using 150.188 MHz high precision timer.
Console: colour dummy device 80x25
Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
Memory: 97280k/110464k available (4425k kernel code, 13164k reserved, 1007k data, 4200k init, 0k highmem)
Calibrating delay loop... 296.96 BogoMIPS (lpj=148480)
Mount-cache hash table entries: 512
Checking for 'wait' instruction... available.
NET: Registered protocol family 16
tangox: creating TLB mapping for 0x20000000 at 0xc0000000, size 0x08000000.
PCI: Initializing SMP863x/SMP865x PCI host controller
PCI: Remapped PCI I/O space 0x58000000 to 0xc8020000, size 64 kB
PCI: Remapped PCI config space 0x50000000 to 0xc8004000, size 10 kB
PCI: device 1 disabled
PCI: device 4 disabled
PCI: Configured SMP863x/SMP865x as PCI slave with 128MB PCI memory
PCI: Region size is 16384KB
PCI: Map DMA memory 0x10020000-0x16c00000 for PCI at 0x11000000
SCSI subsystem initialized
usbcore: registered new driver usbfs
usbcore: registered new driver hub
tangox frequency scaling module installed.
Created /proc/cpucache_info entry.
NTFS driver 2.1.25 [Flags: R/W DEBUG].
JFFS2 version 2.2. (C) 2001-2003 Red Hat, Inc.
SGI XFS with no debug enabled
Initializing Cryptographic API
io scheduler noop registered
io scheduler anticipatory registered
io scheduler deadline registered
io scheduler cfq registered
Software Watchdog Timer: 0.07 initialized. soft_noboot=0 soft_margin=60 sec (nowayout= 0)
Serial: 8250/16550 driver $Revision: 1.90 $ 2 ports, IRQ sharing disabled
serial8250: ttyS0 at MMIO 0x0 (irq = 9) is a 16550A
serial8250: ttyS1 at MMIO 0x0 (irq = 10) is a 16550A
loop: loaded (max 8 devices)
nbd: registered device at major 43
tango2_enet: ethernet driver for SMP863x internal mac

[emmcee]

Many Thanks to andressis2k for this tutorial. One more Azbox is back from the dead :bowing-036: You truly are awesome!!

I also bought a USB -> TTL adaptor on eb@y (5 euro from Hong Kong) and I have a tip for anyone who does the same:

Connect RX to TX and TX to RX. I stupidly connected TX to TX and RX to RX and spent 4 hours doing this: :banghead:

Also, my TTL device had 3.3V and 5V outputs - you need to connect the 5V output to VCC on the Azbox.

[rcm1379]

Hello,

I can´t recover my elite.
In the yamon console when I tray to inicialize the network with "net init" it stops at: "(MAC 00:02:14:13:f8:0c, tx_desc/rx_desc = 16/32)" and I cant do nothing more....


YAMON> setenv bootserver 192.168.10.102
Updating XENV block at 0x48000000.
.
XENV verification OK.
YAMON> setenv gateway 192.168.10.1
Updating XENV block at 0x48000000.
.
XENV verification OK.
YAMON> setenv ipaddr 192.168.10.103
Updating XENV block at 0x48000000.
.
XENV verification OK.
YAMON> setenv subnetmask 255.255.255.0
Updating XENV block at 0x48000000.
.
XENV verification OK.
YAMON> net init
Ethernet driver for EM86XX (v1.0)
(MAC 00:02:14:13:f8:0c, tx_desc/rx_desc = 16/32)

Can you help me?!

Thanks

Note: if I don´t do "CTR+C" in the begining I will stop at:
"tango2_enet: ethernet driver for SMP863x internal mac "

[ralfi]

@andressis2k
Hello , i have translate your Tutorial from English in German. Is this OK?
Where can i show you it at first?
Where can i public it ?

Thank you
Ralfi

[ardidurres]

Help needed
I also have a dead az premium and with e nokia DKU -5 cable used to connect az and show Yamon on put ty.
But have this problems
1. If I connect vcc the az goes with yamon but continues to load errors infinitely.
2. If I use only GND, TX and RX with no VCC az gets connected Ctrl-C works and YAMON> shows at the end. But I can not write the commands setenv .... the cursor does not appear after Yamon>
It gives the error:
xrpc failed (9)--- if a xtask is using a cipher or if you reboot
--- xrpc will fail with RM_BUSY
Checking zboot signature.. it's not zboot file.
Error : Internal, code = ffffffff

Anyone can tell what problem do I have?
I do not know how idiot is Opensat not to have fixed a serial port after the az and the soft utilities to recover it.
The pins they have, it has been so difficult to fix a serial port behind the decoder as every decoder.

[johnd508]

Thanks, going to give this a shot tonight.

[jumegon77]

Hola andressis2k, primero muchisimas gracias por el magnifico tutorial, es lo mejor que he encontrado en la red y se agradece tu currazo, no se lo pegan muchos.
Te explico, mi principal problema fue que quise modificar las particiones de la DOM segun otro foro, pero me parece que en el intento de dar permisos y poder modificarlo algo cambie que ya no podia reinstalar firmwares, ya sabes mount -o... y cambio de permisos a su archivo y/o carpeta.
Total que al meter el usb con la DOM de 2GB me daba error de fail extract, y poniendo la original se quedaba colgado en el 2% del 3/4. Mi solucion, al ver que queria tener acceso y modificar algo de FLASH(por si he modificado algo importante para la actualizacion): HE INSTALADO E2 y funciona, pero no me hago con algo aun verde, teniendo ya acceso por telnet y ftp, y he pasado directamente al paso 8 de tu manual, ahorrandome el HW y progrmas. HE falsheado segun tu manual y no me ha dado error ninguno, he reboteado y no habia firmware ninguno, lo he hecho con el USB puesto y me hace lo mismo, con la DOM original ha pasado de colgarse en el 2% al 3% pero se cuelga igual y no llega, con la DOM de 2GB me sigue dando error para extraer el patch.bin.
Mi pregunta, ¿con lo que he hecho he flasheado realmente? ya mas de fabrica¿no lo puedo dejar?
¿Se te ocurre algo?
Muchisimas gracias

[Hectore]

@jumegon77
Holala ! In english please !
Regards.

[jumegon77]

Sorry, I thought I can write you in spanish because of andressis2k make a spanish version of his tutorial, but I trnaslete you nicely, sorry for my translation:
"Hello Andressis2k, first thank you very much for the wonderful tutorial, it is the best I've found on the web and appreciates your hard work, do not hit many people.
I can't upgrade my azbox HD premium by patch.bin on my USB. I think, my main problem was that I wanted to modify the partitions.txt of the DOM according to another forum, but I think that in trying to modify permissions I changed something that I could not reinstall firmware, you know mount-o ... and change file permissions and/or folder.
Finally, with 2GB DOM it becames "fail extract error", and placing the original DOM hung up in the 2% of 3 / 4. My solution, seeing that I wanted to access and modify some of FLASH (in case I changed something important for the update): I installed E2 and it works, but I dislike it at this moment, having already telnet and ftp access, and I passed directly to step 8 of your manual. I have flash according to your manual and error has not given me, it rebooted correctly but there was no firmware, I've done with the USB patch.bin and it did the same, with the original DOM it hung on the 2% to 3% with 2GB DOM still gives me error to extract the patch.bin from the USB stick.
My question is: have I really flash it? all folders and permissions are in factory defaults? what have I to do for get the best installation? what HW's or SW's must be modified or evaluated for know the problem?
Can you think of something?
Thank you so much"

[kerrywez]

Hi All I was having a nice time watching great channels on my box, but decided to overclock the chip, this caused the screen to go blank, just a black screen. I tried to reinstall E2, using the USB, it seemed to install OK, but on the reboot it stalled on the reboot. I have a Premium and did a successful recovery before, but this time I am having some trouble with it. I was able to connect to the box with putty, but the only how to I that at the time was not the one which is here and with the storm we had here, for the last 36 hours, my wifi broadband was down so I was not able to download this one, which is the one I used to get the box back last time.

Now when I connect putty does not start right, I have tried over 20 times and though it connects to the box it will not go right, I will try and attach a screen grab of what I am getting, so some of you more knowledgeable guys can have a look and maybe see something that would help to identify what the problem is. I did have one of the wires to the connector come adrift at one stage, but as far as I can see I have all the wires in the right place and all are connected in the right order. Any help will be very much appreciated and welcome.

Best regards Wez:respect-055:

[rudiniiwwa]

Help needed
I also have a dead az premium and with e nokia DKU -5 cable used to connect az and show Yamon on put ty.
But have this problems
1. If I connect vcc the az goes with yamon but continues to load errors infinitely.
2. If I use only GND, TX and RX with no VCC az gets connected Ctrl-C works and YAMON> shows at the end. But I can not write the commands setenv .... the cursor does not appear after Yamon>
It gives the error:
xrpc failed (9)--- if a xtask is using a cipher or if you reboot
--- xrpc will fail with RM_BUSY
Checking zboot signature.. it's not zboot file.
Error : Internal, code = ffffffff

Anyone can tell what problem do I have?
I do not know how idiot is Opensat not to have fixed a serial port after the az and the soft utilities to recover it.
The pins they have, it has been so difficult to fix a serial port behind the decoder as every decoder.
I have the same problem. Are you fix that??

[kerrywez]

I have returned my box to OpenSat, in Portugal, and they are fixing it for me. I would advise anyone sending their box to them to take the HDD out of it first, because it cost me a fortune to post it to them as it was over 3 kg.

Regards Wez

[iq180]

i have looked at the files that you are useing and that is not
what i have been useing to recover the az boxes=elite=premium=and premium
plus what i have been useing works great.
my computer crashed and i lost all my web info.
dont remember where i got it from but the site has penguin on the front.
but i do have the file with the how to use on a usb stik.:cheers2:

[kerrywez]

Just an update, I mailed OpenSat last night and they send me back a reply saying that it was in line to be repaired, reading between the lines I would say they have got a lot to repair.

Regards Wez

[Blagi]

How about trying this first, just to be on the safe side:


Hello,

Put the original patch.bin on your memory stick.
When you are in rescue mode use JAZUP v1.3, jazup'll copy the official Kernel.
When Jazup reboot your azbox you drop on the official update screen.
Use USB upgrade option.

Regards.
Hectore

[kerrywez]

Just another update, the box was dispatched last Friday, but I have not received it yet, it was in Northampton last night and is now in transit, should have it by tomorrow, it is coming by TNT, cost €11.85, that is some difference from the €44 the bloody postage service here in Ireland charged me to send the box to Portugal.

Regards Wez

[Shinobi]

Thankyou very much for such a comprehensive & great tutorial & worked a treat!
:respect-069:

[MbTsM]

CTRL+C
cannot stop
cable dku-5
what problem please any help
azbox premium plus

[pubs]

Hi
I have read the tutorial from top to bottom and can not get it to work, here is my problem.
First off it says to cross the rx and tx leads which i did but then i got no response from putty however if i uncross them so its tx-tx and rx-rx i can get the yamon interface and halt it using ctrl-c.
Ok from there i followed the tut to the letter and everything went well, i loaded vmlinux.bin and everything looked fine, i then typed the go command and this is what i recieved.


em86xx_eth ethernet stop
Linux version 2.6.22.19-19-the_ripper (root@debian) (gcc version 4.3.2 (Debian 4.3.2-1.1) ) #185 PREEMPT Mon May 31 16:44:40 CEST 2010
Configured for SMP863x (revision ES6+/RevA+), detected SMP8634 (revision ES9/RevC).
Detected CPU/System/DSP Frequencies: 347.62/231.75/347.62MHz
SMP86xx Enabled Devices under Linux/XENV 0x48000000 = 0x00021ace
BM/IDE PCIHost Ethernet I2CM I2CS USB PCIDev2 PCIDev3 SCARD
Valid MEMCFG found at 0x10000fc0.
CPU revision is: 00019069
Determined physical RAM map:
memory: 06be0000 @ 10020000 (usable)
User-defined physical RAM map:
memory: 06ae0000 @ 10020000 (usable)
Wasting 2098176 bytes for tracking 65568 unused pages
Initrd not found or empty - disabling initrd
On node 0 totalpages: 92928
DMA zone: 726 pages used for memmap
DMA zone: 0 pages reserved
DMA zone: 92202 pages, LIFO batch:31
Normal zone: 0 pages used for memmap
Built 1 zonelists. Total pages: 92202
Kernel command line: mem=107m console=ttyS0,115200
Primary instruction cache 16kB, 2-way, physically tagged, linesize 16 bytes.
Primary data cache 16kB, 2-way, virtually tagged, cache aliases, linesize 16 bytes
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
PID hash table entries: 2048 (order: 11, 8192 bytes)
Using 173.813 MHz high precision timer.
Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
Memory: 96384k/109440k available (4018k kernel code, 12948k reserved, 1013k data, 4408k init, 0k highmem)
Calibrating delay loop... 343.04 BogoMIPS (lpj=171520)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
tangox: creating TLB mapping for 0x20000000 at 0xc0000000, size 0x08000000.
PCI: Initializing SMP86xx PCI host controller
PCI: Remapped PCI I/O space 0x58000000 to 0xc8020000, size 64 kB
PCI: Remapped PCI config space 0x50000000 to 0xc8004000, size 10 kB
PCI: device 1 disabled
PCI: device 4 disabled
PCI: Configured SMP86xx as PCI slave with 128MB PCI memory
PCI: Region size is 16384KB
PCI: Map DMA memory 0x10020000-0x16b00000 for PCI at 0x11000000
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
Time: TANGOX clocksource has been installed.
NET: Registered protocol family 2
IP route cache hash table entries: 4096 (order: 2, 16384 bytes)
TCP established hash table entries: 16384 (order: 5, 131072 bytes)
TCP bind hash table entries: 16384 (order: 4, 65536 bytes)
TCP: Hash tables configured (established 16384 bind 16384)
TCP reno registered
CPU 0 Unable to handle kernel paging request at virtual address 56a77b10, epc == 9050cfe8, ra == 9050d3b8
Oops[#1]:
Cpu 0
$ 0 : 00000000 96aa0000 56a77b08 00000008
$ 4 : 00000063 00000001 00000009 002605ba
$ 8 : 00000001 00426810 90960000 56a77b10
$12 : 90532000 00426810 90960000 9040f188
$16 : 00000003 000003b7 00000000 00000146
$20 : 90960000 00000005 00000001 90960000
$24 : 00000010 9007fb0c
$28 : 90ce2000 90ce3e58 0000000f 9050d3b8
Hi : 2a7c871d
Lo : fde56be0
epc : 9050cfe8 inflate_codes+0x1bc/0x5bc Not tainted
ra : 9050d3b8 inflate_codes+0x58c/0x5bc
Status: 10001c03 KERNEL EXL IE
Cause : 70808008
BadVA : 56a77b10
PrId : 00019069
Modules linked in:
Process swapper (pid: 1, threadinfo=90ce2000, task=90ce1898)
Stack : 0000000b 00000000 96a768fc ffffffff 0000003f 000001ff 90960000 9040f188
00000000 96a62000 00000011 90960000 90960000 0000011e 0000001e 90960000
90960000 9050e664 96a6c008 96a59808 00000009 00000006 9040f268 96a27284
90ce3ecc 900ea160 96a6c008 96a59808 00000009 00000006 90960000 90532000
00000000 9052fdc0 00000000 00426810 90960000 90532000 00000000 00000000
...
Call Trace:
[<9050cfe8>] inflate_codes+0x1bc/0x5bc
[<9050e664>] inflate_dynamic+0x5f8/0x63c
[<9050f1d8>] unpack_to_rootfs+0x95c/0xa94
[<9050f33c>] populate_rootfs+0x2c/0xd8
[<9050b37c>] kernel_init+0xd4/0x338
[<90028d00>] kernel_thread_helper+0x10/0x18


Code: 00a31824 000318c0 00435821 <91680000> 2d020011 1040002b 00a08821 ae87906c 91620001
Kernel panic - not syncing: Attempted to kill init!


Is there anybody out there thats got more brains than me knows what this means?

Thanks in advance

Pubs

[arcibald]

Hi
.......
em86xx_eth ethernet stop
Linux version 2.6.22.19-19-the_ripper (root@debian) (gcc version 4.3.2 (Debian 4.3.2-1.1) ) #185 PREEMPT Mon May 31 16:44:40 CEST 2010
Configured for SMP863x (revision ES6+/RevA+), detected SMP8634 (revision ES9/RevC).
Detected CPU/System/DSP Frequencies: 347.62/231.75/347.62MHz
..........

Is there anybody out there thats got more brains than me knows what this means?

Thanks in advance

Pubs

You have ... hardware acceleration enable !

Before you repeat the kernel upgrade with YAMON, must set x.pll3 to normal frequency clock divider ... with this command and reboot AZBox:



YAMON> setxenv -b x.pll3 0x01020057


Rgs ... Arci

[pubs]

Hi
Thanks for you reply, i had already disabled hardware accelerater but looking at the readout i seem to have both values set.

* YAMON ROM Monitor
* Revision 02.06-SIGMADESIGNS-01-2.8.0.1
********************************* *
Memory: code: 0x11000000-0x11040000, 0x11200000-0x11204000
reserved data: 0x11240000-0x12440000, PCI memory: 0x12440000-0x12840000
Environment variable 'start' exists. After 1 seconds
it will be interpreted as a YAMON command and executed.
Press Ctrl-C (or do BREAK) to bypass this.

YAMON> setxenv
(0x00) 4 a.avclk_mux 0x00000000
(0x00) 8 a.board_id "852-E2"
(0x00) 4 a.cd2_freq 0x05b8d800
(0x00) 4 a.cd4_freq 0x01fca055
(0x00) 4 a.cd5_freq 0x017d7840
(0x00) 4 a.cd6_freq 0x01312d00
(0x00) 4 a.cd7_freq 0x01312d00
(0x00) 4 a.chip_rev 0x86340086
(0x00) 4 a.enable_devices 0x00021ace
(0x00) 4 a.gpio_data 0x76000000
(0x00) 4 a.gpio_dir 0x76000038
(0x00) 4 a.gpio_irq_map 0x20090820
(0x00) 4 a.hostclk_mux 0x00000100
(0x00) 4 a.irq_fall_edge_hi 0x00000000
(0x00) 4 a.irq_fall_edge_lo 0x0000c000
(0x00) 4 a.irq_rise_edge_hi 0x0000009f
(0x00) 4 a.irq_rise_edge_lo 0xff28ca00
(0x00) 4 a.pb_cs_config 0x000e0040
(0x00) 4 a.pb_def_timing 0x10101010
(0x00) 4 a.pb_timing0 0x10101010
(0x00) 4 a.pb_timing1 0x00110101
(0x00) 4 a.pb_timing2 0x105f1010
(0x00) 4 a.pb_use_timing0 0x000003f4
(0x00) 4 a.pb_use_timing1 0x000003f3
(0x00) 4 a.pb_use_timing2 0x000003f8
(0x00) 4 a.pcidev1_irq_route 0x01010101
(0x00) 4 a.pcidev2_irq_route 0x01010101
(0x00) 4 a.pcidev3_irq_route 0x02020202
(0x00) 4 a.pcidev4_irq_route 0x02020202
(0x00) 4 a.scard_5v_pin 0x00000001
(0x00) 4 a.scard_cmd_pin 0x00000002
(0x00) 4 a.scard_off_pin 0x00000000
(0x00) 4 a.uart0_baudrate 0x0001c200
(0x00) 4 a.uart0_gpio_data 0x00000000
(0x00) 4 a.uart0_gpio_dir 0x00000000
(0x00) 4 a.uart0_gpio_mode 0x00007f6e
(0x00) 4 a.uart1_baudrate 0x00002580
(0x00) 4 a.uart1_gpio_data 0x00000000
(0x00) 4 a.uart1_gpio_dir 0x00000000
(0x00) 4 a.uart1_gpio_mode 0x00007f6e
(0x00) 4 a.uart_console_port 0x00000000
(0x00) 4 a.uart_used_ports 0x00000002
(0x00) 4 l.cs0_size 0x00000000
(0x00) 4 l.cs1_size 0x00000000
(0x00) 4 l.cs2_part1_offset 0x00000000
(0x00) 4 l.cs2_part1_size 0x00020000
(0x00) 4 l.cs2_part2_offset 0x00020000
(0x00) 4 l.cs2_part2_size 0x00020000
(0x00) 4 l.cs2_part3_offset 0x00040000
(0x00) 4 l.cs2_part3_size 0x00040000
(0x00) 4 l.cs2_part4_offset 0x00080000
(0x00) 4 l.cs2_part4_size 0x00680000
(0x00) 4 l.cs2_part5_offset 0x00700000
(0x00) 4 l.cs2_part5_size 0x00100000
(0x00) 4 l.cs2_parts 0x00000005
(0x00) 4 l.cs2_size 0x00800000
(0x00) 4 l.cs3_size 0x00000000
(0x00) 4 x.boot 0x00020000
(0x00) 4 x.csf 0x00000002
(0x00) 4 x.d0.cfg 0xf34111ba
(0x00) 4 x.d0.dl0 0x000a4444
(0x00) 4 x.d1.cfg 0xf34111ba
(0x00) 4 x.d1.dl0 0x000a4444
(0x00) 4 x.ds 0x00020080
(0x00) 4 x.dt 0x00000001
(0x00) 4 x.mux 0x00000701
(0x00) 42 y.start "xrpc 0xac080090; load zbf 0xb3000000; go"
(0x00) 3 y.startdelay "1"
(0x00) 4 z.boot0 0x00040000
(0x00) 4 z.boot1 0x00080000
(0x00) 4 z.boot2 0x00040000
(0x00) 4 z.boot3 0x00080000
(0x00) 16 a.build_date "TD210:20090123"
(0x00) 19 a.eth_mac "00.02.14.16.C7.3D"
(0x00) 31 a.linux_cmd "mem=107m console=ttyS0,115200"
(0x00) 4 x.pll3 0x01020065
(0x00) 4 x.p113 0x01020057
(0x00) 15 y.ipaddr "192.168.1.100"
(0x00) 15 y.subnetmask "255.255.255.0"
(0x00) 13 y.gateway "192.168.1.1"
(0x00) 13 y.bootserver "192.168.1.4"
81 records, 1753 bytes

YAMON>

Is there a way to remove the other value or is this how it should be?

Thanks in advance

Pubs

[pubs]

Hi
just had another look and i can see what i did wrong i used the number 1 instead of the letter l, if it wasnt for you drawing my attention to it i would never have noticed.

Thanks alot

Pubs

[skumar]

dear sir
after transfer vmlinux file
pl help login name and password
i try root and azbox , no use login problem pl help me sir

[freshmaker]

õxosPe0 serial#631e84636a466ac8a752865635 80caf3 subid 0x50
xenv cs2 ok
xosPe0 serial#631e84636a466ac8a752865635 80caf3 subid 0x50
xenv cs2 ok
power supply: ok
dram0 ok (8)
dram1 ok (9)
zboot (0) ok
>
********************************* *****
* SMP863x zboot start ...
* Version: 2.4.0-2.8.0.1
* Started at 0x91000000.
* Configurations (chip revision: 6):
* Use 8KB DRAM as stack.
* Support XLoad format.
* Enabled BIST mode.
* Enabled memory test mode.
* Use internal memory for stage0/1.
********************************* *****
Boot from flash (0x48000000) mapped to 0x8c000000.
Found XENV block at 0x8c000000.
CPU clock frequency: 300.37MHz.
System clock frequency: 200.25MHz.
DRAM0 dunit_cfg/delay0_ctrl (0xf34111ba/0x000a8787).
DRAM1 dunit_cfg/delay0_ctrl (0xf34111ba/0x000a6676).
Using UART port 0 as console.
Board ID.: "852-E2"
Chip Revision: 0x8634:0x86 .. Matched.
Setting up H/W from XENV block at 0x8c000000.
Setting <SYSCLK avclk_mux> to 0x00000000.
Setting <SYSCLK hostclk_mux> to 0x00000100.
Setting <IRQ rise edge trigger lo> to 0xff28ca00.
Setting <IRQ fall edge trigger lo> to 0x0000c000.
Setting <IRQ rise edge trigger hi> to 0x0000009f.
Setting <IRQ fall edge trigger hi> to 0x00000000.
Setting <IRQ GPIO map> to 0x20090820.
Setting <PB default timing> to 0x10101010.
Setting <PB timing0> to 0x10101010.
Setting <PB Use timing0> to 0x000003f4.
Setting <PB timing1> to 0x00110101.
Setting <PB Use timing1> to 0x000003f3.
Setting <PB timing2> to 0x105f1010.
Setting <PB Use timing2> to 0x000003f8.
PB cs config: 0x000e0040 (use 0x000e0040)
Enabled Devices: 0x00021ace
BM/IDE PCIHost Ethernet I2CM I2CS USB PCIDev2 PCIDev3 SCARD
MAC: 00:02:14:15:51:6f
PCI IRQ routing:
IDSEL 2: INTA(#14) INTB(#14) INTC(#14) INTD(#14)
IDSEL 3: INTA(#15) INTB(#15) INTC(#15) INTD(#15)
Smartcard pin assignments:
OFF pin = 0
5V pin = 1
CMD pin = 2
Setting up Clean Divider 2 to 96000000Hz.
Setting up Clean Divider 4 to 33333333Hz.
Setting up Clean Divider 5 to 25000000Hz.
Setting up Clean Divider 6 to 20000000Hz.
Setting up Clean Divider 7 to 20000000Hz.
GPIO dir/data = 0x76000038/0x76000000
UART0 GPIO mode/dir/data = 0x6e/0x00/0x00
UART1 GPIO mode/dir/data = 0x6e/0x00/0x00
XENV block processing completed.
Found existing memcfg: DRAM0(0x08000000), DRAM1(0x08000000)
Heap/Temp/Temp1/Dest start at 0x14000000/0x16000000/0x15000000/0x12000000.
Default boot index: 0
Scanning ROMFS image at 0x8c040000 (0x48040000) .. Found.
ROMFS found at 0x8c040000, Volume name = YAMON_XRPC
Found 1 file(s) to be processed in ROMFS.
Processing xrpc_xload_yamon_ES4_prod.bin (start: 0x8c040090, size: 0x0002fe84)
Checking zboot file signature .. Not found.
Trying xrpc_xload format .. OK
Checking zboot file signature at 0x13000000 .. OK
Decompressing to 0x91200000 .. OK (453328/0x6ead0).
Load time total 173/255 msec.
Execute final at 0x91200000 ..



********************************* *
* YAMON ROM Monitor
* Revision 02.06-SIGMADESIGNS-01-2.8.0.1
********************************* *
Memory: code: 0x11000000-0x11040000, 0x11200000-0x11204000
reserved data: 0x11240000-0x12440000, PCI memory: 0x12440000-0x12840000
Environment variable 'start' exists. After 1 seconds
it will be interpreted as a YAMON command and executed.
Press Ctrl-C (or do BREAK) to bypass this.

xrpc failed (9)--- if a xtask is using a cipher or if you reboot
--- xrpc will fail with RM_BUSY
Checking zboot signature.. it's not zboot file.
Error : Internal, code = ffffffff
YAMON>
i cant't write in putty soo what i dooo wronggg :( i just halt with ctlr c and show YAMON > but can't write help me pls

[kunter]

Everything went OK but filezilla can't connect to azbox. There is message: incorrect username. I can't log in through yamon too.
AZBOX login:root
Password:azbox
No capital letters ofcourse..
Any tips guys?

[el9]

boot (1) failed
xosPe0 serial#7edb8d94a237a3900e9414b2a7 6f330e subid 0x50
xenv cs2 failed
xenv cs3 failed¡øxosPe0 serial#7edb8d94a237a3900e9414b2a7 6f330e subid 0x50
xenv cs2 failed
xenv cs3 failedxosPe0 serial#7edb8d94a237a3900e9414b2a7 6f330e subid 0x50
xenv cs2 failed
xenv cs3 failed¡øpower supply: ok
dram0 ok (9)
zboot (1) failed

[el9]

boot (1) failed
xosPe0 serial#7edb8d94a237a3900e9414b2a7 6f330e subid 0x50
xenv cs2 failed
xenv cs3 failed¡øxosPe0 serial#7edb8d94a237a3900e9414b2a7 6f330e subid 0x50
xenv cs2 failed
xenv cs3 failedxosPe0 serial#7edb8d94a237a3900e9414b2a7 6f330e subid 0x50
xenv cs2 failed
xenv cs3 failed¡øpower supply: ok
dram0 ok (9)
zboot (1) failed

alguien que me de la mano por favor azbox ultra le puse el e2 haora la luz flashea i nada mas gracias

[john_graydon]

Where Can I get the vmlinux file as the mega links are down.???

[zeini]

Look in azboxfaq.eu (http://www.azboxfaq.eu/content/5/57/en/my-azbox-hd-fails-to-boot-booting.html?highlight=booting)

[john_graydon]

Yes it does work on Premium +

[john_graydon]

Thanks Zeini. The problem was that the other vmlinux file did not work and also after you enter in GO you transfer files back into azbox backup_kernel and update. Then you log in to it and not the other way around as in earlier tutorials. Thanks again for the files Zeini and they work 100%.

[mack936]

can you still repair/recover the azbox boot (1) failures? i also purchased the usb to ttl and when i open putty i get the same results as was posted here with the zboot failure! i don't know where you are located,but,i'm in s florida and wish to get my elite working again.

[goody5555]

hi need help please followed tut to the letter and all went well right up to the reboot stage
when the azbox reboots it boots back into yamon and appears to stop so do i have to take the lead off before it reboots
or how long should i wait after i get the rebooting in putty screen ? cos if i switch the azbox off and back on again it goes back into rebooting loop and wont boot off usb stick
also if i go through the full process again and get to the filezilla part to transfer the files the backup file is still in the dir but the update file in tmp has gone ?

[gorgeit]

xosPe0 serial#820febe7f9abab9f5e08fd3d33 fd0e73 subid 0x50
xenv cs2 failed
xenv cs3 failedĄřpower supply: ok
dram0 ok (9)
zboot (1) failed

Is there any news?
Please help.

I have the same issue is there an alternative other than the jtag solder or
Returning to opensat .
Thanks

[Dawnman]

Hello,

I have AZBOX HD PREMIUM +,
After upgrading to a newer image and had a new kernal, I decided to restore the receiver to original batch and that is when I got stuck in booting.
I followed & used files from AZBOX web site but won't work.

I tried all batches using USB but it won't reach to read from USB and also have no IP address yet to use AZUP,
I used PUTTY and connect using the wires as instructed in the recovery procedure. When I run putty I can not get it to terminate by using CTRL + C and I don't have the BREAK key. I used the on screen keyboard but not working too. I used another PC with BREAK/PAUSE key but still.
Could anyone help please, it is getting so nutty.
BTW, this is what I am getting;

---------------
xosPe0 serial#352a2a2698769e4a2045520c84 4aba59 subid 0x50
xenv cs2 ok
xosPe0 serial#352a2a2698769e4a2045520c84 4aba59 subid 0x50
xenv cs2 ok
xosPe0 serial#352a2a2698769e4a2045520c84 4aba59 subid 0x50
xenv cs2 ok
power supply: failed
dram0 ok (8)
dram1 ok (a)
zboot (0) ok
>
********************************* *****
* SMP863x zboot start ...
* Version: 2.4.0-2.8.0.1
* Started at 0x91000000.
* Configurations (chip revision: 6):
* Use 8KB DRAM as stack.
* Support XLoad format.
* Enabled BIST mode.
* Enabled memory test mode.
* Use internal memory for stage0/1.
********************************* *****
Boot from flash (0x48000000) mapped to 0x8c000000.
Found XENV block at 0x8c000000.
CPU clock frequency: 300.37MHz.
System clock frequency: 200.25MHz.
DRAM0 dunit_cfg/delay0_ctrl (0xf34111ba/0x000a7888).
DRAM1 dunit_cfg/delay0_ctrl (0xf34111ba/0x00098886).
Using UART port 0 as console.
Board ID.: "852-E2"
Chip Revision: 0x8634:0x86 .. Matched.
Setting up H/W from XENV block at 0x8c000000.
Setting <SYSCLK avclk_mux> to 0x00000000.
Setting <SYSCLK hostclk_mux> to 0x00000100.
Setting <IRQ rise edge trigger lo> to 0xff28ca00.
Setting <IRQ fall edge trigger lo> to 0x0000c000.
Setting <IRQ rise edge trigger hi> to 0x0000009f.
Setting <IRQ fall edge trigger hi> to 0x00000000.
Setting <IRQ GPIO map> to 0x20090820.
Setting <PB default timing> to 0x10101010.
Setting <PB timing0> to 0x10101010.
Setting <PB Use timing0> to 0x000003f4.
Setting <PB timing1> to 0x00110101.
Setting <PB Use timing1> to 0x000003f3.
Setting <PB timing2> to 0x105f1010.
Setting <PB Use timing2> to 0x000003f8.
PB cs config: 0x000e0040 (use 0x000e0040)
Enabled Devices: 0x00021ace
BM/IDE PCIHost Ethernet I2CM I2CS USB PCIDev2 PCIDev3 SCARD
MAC: 00:02:14:19:a5:c8
PCI IRQ routing:
IDSEL 2: INTA(#14) INTB(#14) INTC(#14) INTD(#14)
IDSEL 3: INTA(#15) INTB(#15) INTC(#15) INTD(#15)
Smartcard pin assignments:
OFF pin = 0
5V pin = 1
CMD pin = 2
Setting up Clean Divider 2 to 96000000Hz.
Setting up Clean Divider 4 to 33333333Hz.
Setting up Clean Divider 5 to 25000000Hz.
Setting up Clean Divider 6 to 20000000Hz.
Setting up Clean Divider 7 to 20000000Hz.
GPIO dir/data = 0x76000038/0x76000000
UART0 GPIO mode/dir/data = 0x6e/0x00/0x00
UART1 GPIO mode/dir/data = 0x6e/0x00/0x00
XENV block processing completed.
Found existing memcfg: DRAM0(0x08000000), DRAM1(0x08000000)
Heap/Temp/Temp1/Dest start at 0x14000000/0x16000000/0x15000000/0x12000000.
Default boot index: 0
Scanning ROMFS image at 0x8c040000 (0x48040000) .. Found.
ROMFS found at 0x8c040000, Volume name = YAMON_XRPC
Found 1 file(s) to be processed in ROMFS.
Processing xrpc_xload_yamon_ES4_prod.bin (start: 0x8c040090, size: 0x0002fe84)
Checking zboot file signature .. Not found.
Trying xrpc_xload format .. OK
Checking zboot file signature at 0x13000000 .. OK
Decompressing to 0x91200000 .. OK (453328/0x6ead0).
Load time total 173/255 msec.
Execute final at 0x91200000 ..



********************************* *
* YAMON ROM Monitor
* Revision 02.06-SIGMADESIGNS-01-2.8.0.1
********************************* *
Memory: code: 0x11000000-0x11040000, 0x11200000-0x11204000
reserved data: 0x11240000-0x12440000, PCI memory: 0x12440000-0x12840000
Environment variable 'start' exists. After 1 seconds
it will be interpreted as a YAMON command and executed.
Press Ctrl-C (or do BREAK) to bypass this.

ROMFS found at 0xac080000, Volume name = MIPS_LINUX_XRPC
ac080040 : Name = ., Type = dir, Size = 00000000, Next = 00000040
ac080060 : Name = .., Type = hard link, Size = 00000000, Next = 00000060
ac080090 : Name = xrpc_xload_vmlinux_ES4_prod.bin, Type = file, Size = 0064bf44, Next = 00000000
Checking zboot signature.. it's not zboot file.
Error : Internal, code = ffffffff
YAMON>
------------------------------------

I appreciate your support.

[Carp95]

Checking zboot signature.. it's not zboot file.
Error : Internal, code = ffffffff

You are using wrong backup kernel

from 2.6xxxx kernel you need backup-kernel
from 3.xxx kernel you need backup-kernel_3.44

[Dawnman]

You are using wrong backup kernel

from 2.6xxxx kernel you need backup-kernel
from 3.xxx kernel you need backup-kernel_3.44

Pleae Carp95, tell me how to fix that. I really need all details and explanations you could offer. If any files also needed, please provide.

I would really appreciate it.

[Carp95]

You can find the complete package for kernel 3.xx here (incl how-to )

h__p://www.azbox-enigma.eu/RTi/forum/downloads.php?do=file&id=58

[Dawnman]

Thank you for your support.
I am sorry I am giving you a hard time but I could not download the files; I have registered and can access the site but this is what I got;

Forbidden
You don't have permission to access /download/RecoverAzboxKernel344.rar on this server.

Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDo***ent to handle the request.


--------------------------------------------------------------------------------

Apache/2 Server at www.azboxshop.nl Port 80
---------------------------------------------


This is what I got.
lucky me!

------------------------
I was able to download the files from other site but the procedure is the same one I am using.


MY PROBLEM IS I CAN NOT GET PUTTY TO TERMINATE BY CTRL +C. IT WON'T STOP SO I CAN NOT TAKE OVER THE RECEIVER TO COMPLETE THE PROCEDURE.

ANY IDEA WHY IT IS NOT TERMINATING & NOT RESPONDING (AFTER I HIT CTRL+C)????

[Carp95]

You probebly are using windows 7 and putty 32 bits install 64 bits putty

[Dawnman]

I am using Win Xp and Win 7 both 32 bit. I tried installing putty 64 bit but it won't run.

I am stll can not get putty to terminate when I hit CTRL +C. I have another PC with BREAK key, still not terminating.

[fs1]

Trying to recover dead box

Hi all
I have connected box up to:

Step 4: Loading and starting Rescue Linux

Type the following command: load -b tftp://192.168.X.XX/vmlinux.bin 0x90020000

after i type the following command i get error message:

Error: internal, code = a038


Anyone any idea what is going wrong?

[fs1]

Here are instructions for a dead Azbox Elite if anyone can help. Box is stuck in a booting loop.

[fs1]

Anyone?

[donki]

Try HERE (https://www.satpimps.co.uk/showthread.php?161037-zboot-%281%29-failed&p=870581&posted=1#post870581)