[jwhat]

Hi Weblacky,

I transferred dump to Ubuntu and used "hexdump" to produce a "nicer" view. Here is full configuration section for 800 MHz CPU

00000060 00 00 00 15 54 9b af 85 69 70 32 37 63 6f 6e 66 |....T...ip27conf|
00000070 00 00 00 00 2f af 08 00 00 00 00 00 0b eb c2 00 |..../...........|
00000080 00 00 00 00 00 13 12 d0 00 00 00 01 00 00 00 10 |................|
00000090 00 00 00 02 00 00 00 ee 00 00 00 10 00 00 00 10 |................|
000000a0 00 00 00 06 00 00 00 d3 00 00 00 00 00 00 00 00 |................|

so putting this into ip27config.h :

#define CONFIG_INFO_OFFSET 0x60

typedef struct ip27config_s { /* KEEP IN SYNC w/ start.s & below */
uint time_const; /* Time constant */
/* 4 byes 0x15 == 21 */
uint r10k_mode; /* R10k boot mode bits */
/* 4 bytes 0x549baf85 == Reported via PO/CAC "cfg" Register */
__uint64_t magic; /* CONFIG_MAGIC */
/* 8 bytes 0x69703237636f6e66 = "ip27conf" */
__uint64_t freq_cpu; /* Hz */
/* 8 bytes 0x2faf0800 == 800,000 */
__uint64_t freq_hub; /* Hz */
/* 8 bytes 0x0bebc200 == 200,000 */
__uint64_t freq_rtc; /* Hz */
/* 8 byes 0x1312d0 == 1,250,000 */
uint ecc_enable; /* ECC enable flag */
/* 4 byes 0x01 == 1 */
uint fprom_cyc; /* FPROM_CYC speed control */
/* 4 byes 0x10 == 16 */
uint mach_type; /* Inidicate SN0 (0) or Sn00 (1) */
/ * 4 bytes 0x02 == 2 (== SN11) */
uint check_sum_adj; /* Used after config hdr overlay */
/* to make the checksum 0 again */
/* 4 bytes 0xee == 238 */
uint flash_count; /* Value incr'd on each PROM flash */
/* 4 bytes 0x10 == 16 (Number of flash counts */
uint fprom_wr; /* FPROM_WR speed control */
/* 4 bytes 0x10 == 16 */
uint pvers_vers; /* Prom version number */
/* 4 bytes 0x06 == 6 */
uint pvers_rev; /* Prom revision number */
/* 4 bytes 0xd3 == 211 */
uint config_type; /* To support special configurations
* If bit 0 is set it means that
* we are looking 12P4I config
*/
/* 4 bytes 0x0 == 0 */
} ip27config_t;


EDIT:

Also as per boot diags: copying PROM code to memory ............... Copy PROM (0x9000000018000000) to RAM (0x9600000001a00000), len 0x168648
You can read PROM via POD/CAC directly using address: 0x9000000018000000
So it maybe possible that you can also write directly to these memory locations using the corresponding store commands:

>> A 000 001c01: Store byte: sb ADDR [VAL [COUNT]]
>> A 000 001c01: Store half-word: sh ADDR [VAL [COUNT]]
>> A 000 001c01: Store word: sw ADDR [VAL [COUNT]]
>> A 000 001c01: Store double-word: sd ADDR [VAL [COUNT]]
>> A 000 001c01: Store and verify: sdv ADDR VAL


Cheers from Oz,


jwhat/John