Hey friends, how are you doing.
Currently i have bricked my IPMI, and in order to reflash it i need some sort of "running" IPMI ROM by someone of you. You guys can simply use the dUpdate, or lUpdate tool from ATEN with the -d flag in order to dump the ROM.
So now a brief explanation. Using an external flasher i have already tried a bunch of times using the factory images, but unfortunately there is some magic going on the motherbaord which keeps breaking the IPMI ROM (Good to see on binwalk) again and again when using the factory ROM. So i am looking for some ROM file which is running on your systems if possible, in order to find out whats going on during the IPMI initialization process to fix my motherboard.
The chip itself is not bad.
I have ordered 4 more of them in order to check that out. Unfortunately the header section of the image is being corrupted after a normal boot. What is interesting, when I keep the system powered off, and insert the flashed chip, BMC heartbeat led starts flashing. When I turn on the system the flash is being overwritten by something and is dead.
In its sane condition, the IPMI ROM looks like that.
But after the initialization process, the bootloader in the beginning is gone, and is replaced by JFFS2 fragments, rendering the IPMI dead.
So its not supposed to be flashed by an external flasher, and the recovery procudure using dUpdate or lUpdate doesnt work if the IPMI does not respond to calls at all.
So i am looking forward to find someone dumping their IPMI ROMs. Then i can compare them to the factory ones, and find out what is going on.
I am looking forward to hear from you guys. Thanks in advance. Maybe there is someone with some spare time to dump their IPMI ROMs
Currently i have bricked my IPMI, and in order to reflash it i need some sort of "running" IPMI ROM by someone of you. You guys can simply use the dUpdate, or lUpdate tool from ATEN with the -d flag in order to dump the ROM.
So now a brief explanation. Using an external flasher i have already tried a bunch of times using the factory images, but unfortunately there is some magic going on the motherbaord which keeps breaking the IPMI ROM (Good to see on binwalk) again and again when using the factory ROM. So i am looking for some ROM file which is running on your systems if possible, in order to find out whats going on during the IPMI initialization process to fix my motherboard.
The chip itself is not bad.
I have ordered 4 more of them in order to check that out. Unfortunately the header section of the image is being corrupted after a normal boot. What is interesting, when I keep the system powered off, and insert the flashed chip, BMC heartbeat led starts flashing. When I turn on the system the flash is being overwritten by something and is dead.
In its sane condition, the IPMI ROM looks like that.
Code:
DECIMAL HEXADECIMAL DESCRIPTION
--------------------------------------------------------------------------------
59700 0xE934 Copyright string: "Copyright (c) Winbond Limited 2001 - 2006. All rights reserved."
60835 0xEDA3 Copyright string: "Copyright 1995-1998 Mark Adler "
1572864 0x180000 CramFS filesystem, little endian, size: 7970816, version 2, sorted_dirs, CRC 0x8C6D86A4, edition 0, 4910 blocks, 1078 files
9961472 0x980000 Zip archive data, at least v2.0 to extract, compressed size: 1127148, uncompressed size: 2339464, name: kernel.bin
11088768 0xA93380 End of Zip archive, footer length: 22
12058624 0xB80000 CramFS filesystem, little endian, size: 2371584, version 2, sorted_dirs, CRC 0x9D53DC4C, edition 0, 1099 blocks, 218 files
So its not supposed to be flashed by an external flasher, and the recovery procudure using dUpdate or lUpdate doesnt work if the IPMI does not respond to calls at all.
Code:
DECIMAL HEXADECIMAL DESCRIPTION
--------------------------------------------------------------------------------
262144 0x40000 JFFS2 filesystem, little endian
1245416 0x1300E8 JFFS2 filesystem, little endian
1245712 0x130210 JFFS2 filesystem, little endian
1246304 0x130460 JFFS2 filesystem, little endian
1247192 0x1307D8 JFFS2 filesystem, little endian
1247784 0x130A28 JFFS2 filesystem, little endian
1249264 0x130FF0 JFFS2 filesystem, little endian
1249856 0x131240 JFFS2 filesystem, little endian
1250152 0x131368 JFFS2 filesystem, little endian
1250892 0x13164C JFFS2 filesystem, little endian
1252224 0x131B80 JFFS2 filesystem, little endian
1252816 0x131DD0 JFFS2 filesystem, little endian
1253852 0x1321DC JFFS2 filesystem, little endian
1254296 0x132398 JFFS2 filesystem, little endian
1255036 0x13267C JFFS2 filesystem, little endian
1255480 0x132838 JFFS2 filesystem, little endian
1256368 0x132BB0 JFFS2 filesystem, little endian
1258144 0x1332A0 JFFS2 filesystem, little endian
1258440 0x1333C8 JFFS2 filesystem, little endian
1259180 0x1336AC JFFS2 filesystem, little endian
1259920 0x133990 JFFS2 filesystem, little endian
1261252 0x133EC4 JFFS2 filesystem, little endian
1261584 0x134010 JFFS2 filesystem, little endian
1261744 0x1340B0 JFFS2 filesystem, little endian
1263516 0x13479C JFFS2 filesystem, little endian
1263660 0x13482C JFFS2 filesystem, little endian
1264380 0x134AFC JFFS2 filesystem, little endian
1264668 0x134C1C JFFS2 filesystem, little endian
1265532 0x134F7C JFFS2 filesystem, little endian
1265820 0x13509C JFFS2 filesystem, little endian
1266972 0x13551C JFFS2 filesystem, little endian
1267116 0x1355AC JFFS2 filesystem, little endian
1267260 0x13563C JFFS2 filesystem, little endian
1267404 0x1356CC JFFS2 filesystem, little endian
1267548 0x13575C JFFS2 filesystem, little endian
1267692 0x1357EC JFFS2 filesystem, little endian
1267836 0x13587C JFFS2 filesystem, little endian
1267980 0x13590C JFFS2 filesystem, little endian
1268412 0x135ABC JFFS2 filesystem, little endian
1268556 0x135B4C JFFS2 filesystem, little endian
1268700 0x135BDC JFFS2 filesystem, little endian
1269132 0x135D8C JFFS2 filesystem, little endian
1269564 0x135F3C JFFS2 filesystem, little endian
1269708 0x135FCC JFFS2 filesystem, little endian
1269852 0x13605C JFFS2 filesystem, little endian
1269996 0x1360EC JFFS2 filesystem, little endian
1270284 0x13620C JFFS2 filesystem, little endian
1270428 0x13629C JFFS2 filesystem, little endian
1270572 0x13632C JFFS2 filesystem, little endian
1271004 0x1364DC JFFS2 filesystem, little endian
1271148 0x13656C JFFS2 filesystem, little endian
1271724 0x1367AC JFFS2 filesystem, little endian
1271868 0x13683C JFFS2 filesystem, little endian
1272300 0x1369EC JFFS2 filesystem, little endian
1272444 0x136A7C JFFS2 filesystem, little endian
1272732 0x136B9C JFFS2 filesystem, little endian
1273596 0x136EFC JFFS2 filesystem, little endian
1273740 0x136F8C JFFS2 filesystem, little endian
1273884 0x13701C JFFS2 filesystem, little endian
1274604 0x1372EC JFFS2 filesystem, little endian
1274892 0x13740C JFFS2 filesystem, little endian
1275372 0x1375EC Zlib compressed data, compressed
1275556 0x1376A4 JFFS2 filesystem, little endian
1280556 0x138A2C JFFS2 filesystem, little endian
1572864 0x180000 CramFS filesystem, little endian, size: 7970816, version 2, sorted_dirs, CRC 0x8C6D86A4, edition 0, 4910 blocks, 1078 files
9961472 0x980000 Zip archive data, at least v2.0 to extract, compressed size: 1127148, uncompressed size: 2339464, name: kernel.bin
11088768 0xA93380 End of Zip archive, footer length: 22
12058624 0xB80000 CramFS filesystem, little endian, size: 2371584, version 2, sorted_dirs, CRC 0x9D53DC4C, edition 0, 1099 blocks, 218 files
I am looking forward to hear from you guys. Thanks in advance. Maybe there is someone with some spare time to dump their IPMI ROMs
Last edited: