SPI flash and EEPROM dump of the ODI DFP-34x-2c2

[lehoangnb]

Its for ODI DFP-34x-2c2 with 8MB MX25L6433F flash and 24C04 EEPROM

SPI Flash info

• Flash name: MX25L6433F SPI 8MB
• File name: ODI_DFP-34X-2C2_factory_8M_v220923.bin
• sha256: 5e3572c2c6821b8f345d6564ae547aaf734b227c678744b276d311cb97006cd7
• Both layout is running 220923 @Anime4000 modified firmware

EEPROM info

• EEPROM name: 24C04 4K (512B) I2C (SOT23 package)
• File name: ODI_DFP-34X-2C2_eeprom_4K.bin
• sha256: 6342c4bdefee80e1ca238615c3840184eaec5cdae48dc403111bb5b09f96fef0

Notice

• Use only 3.3V level for both Flash and EEPROM
• In most case, flashing eeprom is not necessary

Download

ODI_DFP-34X-2C2_full_dump_v220923.zip

[Headcrabed]

Besides, eeprom need to be modified to switch to 2500basex mode for host device.

[Anime4000]

I linking this to main README.md

[duskyzaoKING]

Hi. Do you have the original .bin of the ODI? I lost access to the IP interface, and i dont wat to do UART as i have a RT809H programmer. Will flash direct the .bin with aligator clip. I will restore original firmware and then change to M114_sfp_ODI_PPPOE_210702 firmware because they do PPPoE auth. Do your firmware do PPPoE Auth ? I have a Chinese Switch Layer 3 and i am having a lot of probleming with low speed only using my switch L3. Maybe my switch have a problem with HiSGMII PHY, HiSGMII MAC and 2500Base-X? I lost access when i changed to LAN_SDS_MODE 6. As i did no know about your work, i bought the version DFP-34G-2C2 instead of DFP-34X-2C2. But as i checked in the repo, the newer version like mine come with realtek chip, maybe RTL9602(i lost access now but i checked in past in /proc/cpuinfo). So i am using always the X version of firmware. Do you know if i will loose anything using the G version? (mine using realtek chip too)

[duskyzaoKING]

The problem is my config has a flash set SDS that I lost access in IP interface. When you flash the firmware they preserve this config, so I still without access. But I done UART and switched backed SDS and recovery IP access.

lost entire night trying to do UART, and the morning I checked I lost one capacitor and two resistor 🤦‍♂️. As I have two units I checked the capacitors nF in other board and I am doing reverse engineering to find in one of my iPhone donate boards one capacitor and two resistors with same value. Already found the capacitor, just need to find resistor 🙏

[Headcrabed]

Pull out and plug in fiber 5 times in 30 seconds would reset everything(except loid stuff)

[duskyzaoKING]

I didn’t know. But this erase SDS value too? The parameter to get 2.5GB

[Headcrabed]

My stock firmware has a option to change speed mode in web interface, and it works when that blocked me out.

[duskyzaoKING]

Trying to Finding this two micro resistors 😂😂

[duskyzaoKING]

@Anime4000 i flashed you BIN but they didn’t come with your interface customization. Maybe is it in the eprom? I only flashed the SPI

[Anime4000]

@lehoangnb I have question,
My stick using different brand SPI Flash, something off-brand called CFEON.
It should be similar to MXIC MX25L6433F right?

[duskyzaoKING]

You can check in datasheet of the two SPI Flash. But i can confirm its compatible, because i flashed your .bin and mine SPI its MXIC and worked ok. The bin didnt come with your logo customization, but came with your OMCI info and other things

[Anime4000]

the GUI Customization not yet public 😅 just to make sure no issue or glitch

[lehoangnb]

Maybe similar if both have same size, (but be aware, kernel in firmware must have driver for SPI flash)

[Anime4000]

Alright, just to be safe, read multiple time, backup multiple time, compare and verify multiple time, I'll get back once required tool arrive

[Anime4000]

I let everyone know,
STICK3V08 do not have 24C04F EEPROM thus cannot change SFP I2C

but I found C2 Debugger pads

I tried program SFP I2C 0x50 via CH341a I2C,...
with V06 stick, you can do that, but not V08 stick, some what have write protect...

[Headcrabed]

Wait, ODI has changed PCB design..?

[Anime4000]

A little update regarding to V08 stick I2C EEPROM, I have compiled @bigbigmdm SFP-Master (Linux only) to Windows

which this need another driver that works with libusb Linux on Windows

the V08 I2C has Write Protect, this piece of program can set password and write!
few user has verified, which this will make modifying SFP easier for OpenWRT or other SFP Host to work

all of this thanks to @lehoangnb make me believe stick can modify thus I going to find a solution to write SFP on the cheap

yea, I mod the CH341a Black to 3.3V

[bigbigmdm]

Hello @Anime4000 ! Can you send me a windows version of my IMSProg?

[Anime4000]

Hi @bigbigmdm Thank You very much your SFP-Master, which really help modifying GPON Sticks here
I have fork your SFP-Master and made some changes for cross compilation via MSYS2 (MinGW64)
https://github.com/Anime4000/SFP-Master/releases

I also detailed how to compile on Windows,

should I merge request? or leave Windows build to me?

[vuducdong]

A little update regarding to V08 stick I2C EEPROM, I have compiled @bigbigmdm SFP-Master (Linux only) to Windows

which this need another driver that works with libusb Linux on Windows

the V08 I2C has Write Protect, this piece of program can set password and write! few user has verified, which this will make modifying SFP easier for OpenWRT or other SFP Host to work

all of this thanks to @lehoangnb make me believe stick can modify thus I going to find a solution to write SFP on the cheap

yea, I mod the CH341a Black to 3.3V

Bro, this game is fun, how to buy CH341A SFP Adapter? :D

[Anime4000]

@lehoangnb that CH341A SFP Adapter (Gerber File) need to order custom PCB via JLCPCB or PCBWay, there is BOM (Bill of Material) can order at difference place, and need self solder,

last time I order PCB MOQ is 5, I only need one

[bigbigmdm]

Thank you, @Anime4000 ! I don't want to merge pull request. It might cause a conflict with the Linux file structure. Please leave the Windows version in your branch. Can i place the link to your branch in my readme.md file?

[Anime4000]

@bigbigmdm sure thing 👍 I'll manage the Windows builds

[bigbigmdm]

@Anime4000 , would you be willing to port my IMSProg to the Windows platform as well?

[Anime4000]

@bigbigmdm sure, I'll try make Windows Port as well

[Anime4000]

@bigbigmdm I have ported your IMSProg to Windows!
And test Z110 2.5GbE ONU, I didn't do chip-off reading, just quick test and it works
https://github.com/Anime4000/IMSProg

[bigbigmdm]

Thank you, @Anime4000 !!!
It's very good work!

[Headcrabed]

@Anime4000 Do you have a detailed instruction on i2c operation for changing v08 stick eeprom? Such tool above should not work if I want to modify eeprom directly using my router i2c.

[Anime4000]

tool above for CH341a and his PCB that I ordered from JLCPCB
based on traces to SFP pin, there is Tx Disable need to pull via resistor and ground,
also V08 stick is password write protected, in combination with Tx Disable

[bigbigmdm]

@Anime4000 , Jumper J3 is TxEnable (SFP pin 3), connected to ground with R3. You can open it,

[Headcrabed]

So pulling tx disable is not actually needed for programming eeprom?

[Anime4000]

during testing, it was connected, maybe you can try.

Password can be find in V06 sticks due to static EEPROM, look at 0x17B - 0x17E

[bigbigmdm]

Can you please tell me if the OTP register of the MX6433F chip on your device is empty?