Howdy Tomatototalatarians! Check this out! (This is on a WRT54GL 1.1) (I know I shouldve done some nvram dumps :wall Code: login as: root firstname.lastname@example.org's password: Tomato v1.04.0944 BusyBox v1.2.2 (2007.01.24-17:12+0000) Built-in shell (ash) Enter 'help' for a list of built-in commands. # cd / # ls bin cifs2 etc jffs mnt proc root tmp var cifs1 dev home lib opt rom sbin usr www # cd /tmp # wget http://192.168.170.50/code.trx # md5sum code.trx 2b38158cae4a18c7e257c8cb4daff929 code.trx # mtd-write -i code.trx [B][3 seconds.. nothing is output...] ^C[/B] # mtd-write -i code.trx System is busy # mtd- mtd-erase mtd-unlock mtd-write # mtd- mtd-erase mtd-unlock mtd-write # mtd-unlock Usage: mtd-unlock -d part # mtd-write -i code.trx -d linux System is busy # ifconfig br0 Link encap:Ethernet HWaddr 00:18:39:CF:1E:FD inet addr:192.168.170.1 Bcast:192.168.170.255 Mask:255.255.255.0 ...... # uptime 23:18:17 up 3 days, 21:18, load average: 0.00, 0.00, 0.00 [B]At this point my web interface was dead...[/B] # killall httpd # httpd [B]Still dead, can log in and out though and everything seemed fine...[/B] # mtd-write -i code.trx -d linux System is busy # ps PID Uid VmSize Stat Command 1 root 476 S init noinitrd 2 root SW [keventd] 3 root SWN [ksoftirqd_CPU0] 4 root SW [kswapd] 5 root SW [bdflush] 6 root SW [kupdated] 7 root SW [mtdblockd] 20 root 252 S buttons 97 root 288 S ntpsync --init 99 root 336 S syslogd -m 60 -L -s 50 100 root 316 S klogd 107 root 400 S dropbear -p 22 108 nobody 408 S dnsmasq 112 root 292 S rstats 113 root 364 S crond 2861 root 676 S dropbear -p 22 2862 root 468 S -sh 2886 root 276 S httpd 2887 root 336 R ps # cd / # ls bin cifs2 etc jffs mnt proc root tmp var cifs1 dev home lib opt rom sbin usr www # reboot Rebooting... [B]BYE BYE ROUTER[/B] Well, now I'm a bit stuck :| The router is so far beyond reach, but I suppose I'll have to cut and break and climb to get to it.... Basically, I haven't got a clue what it's doing, seeing as I can't see the power lights etc. The LAN connection lights up when the power goes up, but I've tried pinging anything it could possibly be, and tftp'ing to it... nada. nothing. not a blip. Now, I have 3 questions, besides the OBVIOUS "WHAT IS IT DOING?!!?": 1) What IP would it have if it's waiting for me to tftp something? 2) Would it be waiting? 3) Will it wait if I manage to press the reset button, (without dripping sweat everywhere..) Thanks..... any advice/info is appreciated. I've looked and looked, hey, maybe I should find a bootup printout and try guess where it's dying. My guess is that my first mtd-write, wrote a little bit over the start.... So theres some Tomato 1.06, possibly a blank few bytes, and then a bunch of Tomato 1.04. Here's to hoping TFTP does the trick..... because I reaaaaly don't feel like building JTAG interfaces.... or... do Do I? Now, what's all this boot_wait stuff? What's it's default settings? (Seeing as that I haven't touched it....) And is the default IP neccesarily 192.168.1.1? Will it be after a reset?