<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Message</TITLE>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1106" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>A mate of mine has a super-dooper desoldering tool,
but the pins on the flash chip might be a challenge for even that. And how
would you go about putting it back on afterwards? Looks like we might have
to make a sacrafice at the altar of reverse-engineering. But it may be for
the greater good. :)</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Tom, I'll keep on trying other methods (including
begging the manufacturers) and use your kind offer as a last
resort.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>BTW I've just done a bit more google research on
the WLAP, and man, there's shitloads of rebadged WLAPs out there. Lots of
different suppliers, lots of different model numbers. but they all look
the same (some are different colours). And they all have exactly the same
spec sheet, word for word. Which made them easy to find with google.
:) I'll stick a list of all the websites and model numbers on the Wiki
entry for the SVEC WLAP when I get a chance. Might help all those people
out there with differently badged APs to band together in a reverse-engineering
collective.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Dan</FONT></DIV>
<BLOCKQUOTE dir=ltr
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=tparker@netspace.net.au href="mailto:tparker@netspace.net.au">Tom
Parker</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=melbwireless@wireless.org.au
href="mailto:melbwireless@wireless.org.au">'Melbourne Wireless'</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Wednesday, April 30, 2003 7:24
PM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> RE: [MLB-WIRELESS] SVEC FD1811
(aka WLAP) Firmware</DIV>
<DIV><FONT face=Arial size=2></FONT><FONT face=Arial size=2></FONT><FONT
face=Arial size=2></FONT><FONT face=Arial size=2></FONT><FONT face=Arial
size=2></FONT><FONT face=Arial size=2></FONT><FONT face=Arial
size=2></FONT><FONT face=Arial size=2></FONT><BR></DIV>
<DIV>
<DIV><SPAN class=020252009-30042003><FONT face=Arial color=#0000ff
size=2>Sorry, I looked at the wiki finally. There is an SMD Atmel
flash chip in the lower right corner of the image.</FONT></SPAN></DIV>
<DIV><SPAN class=020252009-30042003><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=020252009-30042003><FONT face=Arial color=#0000ff size=2>I
can read this for you, but it will be hard to get off the board (all pins will
need to be straight and clean to fit in the programmer).</FONT></SPAN></DIV>
<DIV><SPAN class=020252009-30042003><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=020252009-30042003><FONT face=Arial color=#0000ff
size=2>Cheers,</FONT></SPAN></DIV>
<DIV><SPAN class=020252009-30042003><FONT face=Arial color=#0000ff
size=2>Tom</FONT></SPAN></DIV></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<P><FONT size=2>----------------------------------<BR>Tom Parker <A
href="mailto:tparker@netspace.net.au">tparker@netspace.net.au</A><BR><A
href="http://www.wiresncode.com/projects"
target=_blank>http://www.wiresncode.com/projects</A><BR><BR> </FONT> </P>
<BLOCKQUOTE dir=ltr
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B>
owner-melbwireless@wireless.org.au
[mailto:owner-melbwireless@wireless.org.au]<B>On Behalf Of </B>Tom
Parker<BR><B>Sent:</B> Wednesday, 30 April 2003 6:51 PM<BR><B>To:</B>
'Melbourne Wireless'<BR><B>Subject:</B> RE: [MLB-WIRELESS] SVEC FD1811 (aka
WLAP) Firmware<BR><BR></FONT></DIV>
<DIV><SPAN class=240004908-30042003><FONT face=Arial color=#0000ff
size=2>Have you guys opened these up? What kind of chip is the flash
chip.</FONT></SPAN></DIV>
<DIV><SPAN class=240004908-30042003><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=240004908-30042003><FONT face=Arial color=#0000ff
size=2>I've got access to gear that can read/write just about any kind of
chip/package - but it might in involve some nasty soldering it is
SMD.</FONT></SPAN></DIV>
<DIV><FONT face=Arial color=#0000ff size=2></FONT> </DIV>
<DIV><SPAN class=240004908-30042003><FONT face=Arial color=#0000ff
size=2>Cheers,</FONT></SPAN></DIV>
<DIV><SPAN class=240004908-30042003><FONT face=Arial color=#0000ff
size=2>Tom</FONT></SPAN></DIV>
<P><FONT size=2>----------------------------------<BR>Tom Parker
tparker@netspace.net.au<BR><A href="http://www.wiresncode.com/projects"
target=_blank>http://www.wiresncode.com/projects</A><BR><BR> </FONT>
</P>
<BLOCKQUOTE dir=ltr
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B>
owner-melbwireless@wireless.org.au
[mailto:owner-melbwireless@wireless.org.au]<B>On Behalf Of </B>Fenn
Bailey<BR><B>Sent:</B> Wednesday, 30 April 2003 12:20 PM<BR><B>To:</B>
'Melbourne Wireless'<BR><B>Cc:</B> 'Dan Flett'<BR><B>Subject:</B> RE:
[MLB-WIRELESS] SVEC FD1811 (aka WLAP) Firmware<BR><BR></FONT></DIV>
<DIV><SPAN class=924461102-30042003><FONT face="Courier New" size=2>I had
a bit of a play with these (with Jamie's assistance) and basically ran
into exactly the same problem.</FONT></SPAN></DIV>
<DIV><SPAN class=924461102-30042003><FONT face="Courier New"
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=924461102-30042003><FONT face="Courier New" size=2>You
can see a bit of a summary here: <A
href="http://melbourne.wireless.org.au/wiki/?SVECWLAP">http://melbourne.wireless.org.au/wiki/?SVECWLAP</A></FONT></SPAN></DIV>
<DIV><SPAN class=924461102-30042003><FONT face="Courier New"
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=924461102-30042003><FONT face="Courier New" size=2>By the
looks of it, your findings should be added to this. </FONT></SPAN></DIV>
<DIV><SPAN class=924461102-30042003><FONT face="Courier New"
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=924461102-30042003><FONT face="Courier New" size=2>One of
the major issues is that they don't _appear_ to implement standard TFTP -
it looks like a slightly whacky variant, which doesn't speak well for it
fully implementing TFTP (eg: GET as well as PUT).</FONT></SPAN></DIV>
<DIV><SPAN class=924461102-30042003><FONT face="Courier New"
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=924461102-30042003><FONT face="Courier New" size=2>The
main hurdle is finding a working copy of the firmware. I don't know if you
found the same thing, but the ethernet port appears to completely die when
you flash them with Linksys firmware, which makes further TFTP flashing
somewhat difficult. However, the linksys USB client appears to flash it
fine.</FONT></SPAN></DIV>
<DIV><SPAN class=924461102-30042003><FONT face="Courier New"
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=924461102-30042003><FONT face="Courier New" size=2>The
best bet that I can think of is reverse-engineering the USB interface to
it (I imagine it would be quite simple) and seeing if you can read the
firmware out this way. I have had success doing this sort of
thing with DSL modems in the past (albeit via serial ports), but the
principle is much the same.</FONT></SPAN></DIV>
<DIV><SPAN class=924461102-30042003><FONT face="Courier New"
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=924461102-30042003><FONT face="Courier New"
size=2>Unfortunately, I don't have the time to fiddle with this at the
moment, but if anyone knows of good USB sniffing software, or a good way
to do this - it would be most appreciated.</FONT></SPAN></DIV>
<DIV><SPAN class=924461102-30042003><FONT face="Courier New"
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=924461102-30042003><FONT face="Courier New"
size=2>Cheers,</FONT></SPAN></DIV>
<DIV><SPAN class=924461102-30042003><FONT face="Courier New"
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=924461102-30042003> <FONT
face="Courier New" size=2>Fenn.</FONT></SPAN></DIV>
<BLOCKQUOTE dir=ltr
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV></DIV>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left><FONT
face=Tahoma size=2>-----Original Message-----<BR><B>From:</B>
owner-melbwireless@wireless.org.au
[mailto:owner-melbwireless@wireless.org.au] <B>On Behalf Of </B>Dan
Flett<BR><B>Sent:</B> Wednesday, 30 April 2003 10:52 AM<BR><B>To:</B>
Melbourne Wireless<BR><B>Subject:</B> [MLB-WIRELESS] SVEC FD1811 (aka
WLAP) Firmware<BR><BR></FONT></DIV>
<DIV><FONT face=Arial size=2>Hi all,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I have a SVEC FD1811 AP which is rather
sick since I flashed it with Linksys firmware. So to try to nurse
it back to health I've been trying to find any firmware which will make
it work again. I've noticed that the SVEC FD1811 has many twin (ie
rebadged) brothers sold by different suppliers. But none of them
offer a firmware download. The SVEC AP, like many other APs out
there (including the Linsys WAP11 v1) uses the Atmel AT76c510
chipset. Today I think I found an important difference between the
SVEC and most other 510-based APs.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I found this site:</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2><A
href="http://www.toptrend.com.tw/Technical%20support%20for%20WLAN-1.htm">http://www.toptrend.com.tw/Technical%20support%20for%20WLAN-1.htm</A></FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>As far as I can tell, Toptrend write the
firmware for the Atmel 510-based APs. Most of them have Intersil
radio chipsets in them. I guessed this by looking at the firmware
version number on the page above. But the SVEC FD1811 (and I
assume, all of the rebadged SOHO-WLAPs out there) use RFMD radio
chipsets. The version number of the firmware listed on Toptrend's
site is the same as what is in my other, still working SVEC
AP: </FONT><FONT face=Arial size=2>V0.0.1.16</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>So can anyone suggest how I might get a
hold of this firmware? It isn't available for download
anywhere. SVEC won't send it out. I'm goint
to email Toptrend and see if they'll send it to me. Jamie
Moir and I have tried to extract the good firmware out of a working
SVEC AP using TFTP but with no success. That's not to say it isn't
possible though. Is anyone willing to devote a bit of time to
tinker with my malfunctioning AP?</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial
size=2>Dan</FONT></DIV></BLOCKQUOTE></BLOCKQUOTE></BLOCKQUOTE></BLOCKQUOTE></BODY></HTML>