Logic Sniffer: Upgrade mode protocol

From DP

Jump to: navigation , search

Contents

Overview

The upgrade mode uses 4 byte commands. To read the flash ROM JEDEC ID send

0x01 0x00 0x000x00

Bytes 2,3,4 are don't care bytes in this command.

Most people will use OLS-loader (formerly PUMP_loader) to send these commands and update the ROM.

Commands

0x00 VERSION

Returns version in this format:

H 0x01 F 0x02 0x01 B 0x02

  • Hardware v1
  • Firmware v2.1
  • Bootloader v2

0x01 JEDEC ID

read out flash ROM JEDEC ID and send back 4 bytes

Logic Sniffer ROM JEDEC IDs
ROM chip Size JEDEC ID
AT45DB041D 4Mbit 0x1f240000
AT45DB021D 2Mbit 0x1f230000
W25X40 4Mbit 0xef301300
W25X20 2Mbit 0xef301200

0x02 WRITE

packet of 0x84+ A3 A2 A1 + data page (264)+CRC

0x03 READ

packet of 0x03 A3 A2 A1 returns page of data

0x04 ERASE

chip, may take up to 12 seconds

0x05 STATUS

returns ROM status byte

0x06 GET SELFTEST

get result of last self test (ie to grab startup self-test error code)

  • ERROR_1V2 0b1
  • ERROR_2V5 0b10
  • ERROR_PROGB 0b100
  • ERROR_DONE 0b1000
  • ERROR_ROMID 0b10000
  • ERROR_UPDATE 0b100000

0x07 DO SELFTEST

Do a self-test, returns 1 byte error code.

E:\>ols-loader.exe -p:COM5 -selftest
Logic Sniffer ROM loader v0.2 (September 10, 2010)
Opening serial port 'COM5' @ 921600 ... OK
Found OLS HW: 1, FW: 2.1, Boot: 2
Found flash: ATMEL AT45DB041D
ERROR: 2V5 supply failed self-test :(
ERROR: PROG_B pull-up failed self-test :(
ERROR: DONE pull-up failed self-test :(

The OLS-loader utility can run the self-test and interpret the results.

$ BOOTLOADER

jump to bootloader

0xff RESET

return to normal mode (full reset)

Retrieved from "http://dangerousprototypes.com/docs/Logic_Sniffer:_Upgrade_mode_protocol"