RedBoot> fis list
... Read from 0xbffe0000-0xbffeefff to 0x80ff0000:
Name              FLASH addr  Mem addr    Length      Entry point
RedBoot           0xBFC00000  0x8003B400  0x00030000  0xBFC00000
Linux             0xBFC30000  0x80041000  0x00070000  0x80186040
rootfs            0xBFCA0000  0x8003B400  0x00340000  0x8003B400
FIS directory     0xBFFE0000  0xBFFE0000  0x0000F000  0x00000000
RedBoot config    0xBFFEF000  0xBFFEF000  0x00001000  0x00000000
RedBoot>
RedBoot> load -r -b %{FREEMEMLO}
�ing dee�!K4__��... waiting for BOOTP information
Ethernet eth0: MAC address 00:0f:b5:77:72:22
IP: 10.0.16.21/255.255.255.0, Gateway: 10.0.16.4
Default server: 10.0.16.36

RedBoot(tm) bootstrap and debug environment [ROMRAM]
Non-certified release, version UNKNOWN - built 12:18:02, Jul 22 2006

Copyright (C) 2000, 2001, 2002, 2003, 2004 Red Hat, Inc.

RAM: 0x80000000-0x81000000, [0x8003b2e8-0x80fe1000] available
FLASH: 0xbfc00000 - 0xbfffffff, 64 blocks of 0x00010000 bytes each.
RedBoot> load -r -b %{FREEMEMLO} openwrt-ar531x-2.4-root.jffs2-64k
Using default protocol (TFTP)
Raw file loaded 0x8003b400-0x8021b3ff, assumed entry at 0x8003b400
RedBoot> help fis
Manage FLASH images
   fis {cmds}
Create an image
  fis create [-b <mem_base>] [-l <image_length>] [-s <data_length>]
      [-f <flash_addr>] [-e <entry_point>] [-r <ram_addr>] [-n] <name>
Delete an image from FLASH Image System [FIS]
  fis delete name
Erase FLASH contents
  fis erase -f <flash_addr> -l <length>
Display free [available] locations within FLASH Image System [FIS]
  fis free
Initialize FLASH Image System [FIS]
  fis init [-f]
Display contents of FLASH Image System [FIS]
  fis list [-c] [-d]
Load image from FLASH Image System [FIS] into RAM
  fis load [-d] [-l] [-b <memory_load_address>] [-c] name
Write raw data directly to FLASH
  fis write -f <flash_addr> -b <mem_base> -l <image_length>
RedBoot> fis write -f 0xbfca0000
*** invalid 'fis' command: required parameter missing
Usage:
  fis create [-b <mem_base>] [-l <image_length>] [-s <data_length>]
      [-f <flash_addr>] [-e <entry_point>] [-r <ram_addr>] [-n] <name>
  fis delete name
  fis erase -f <flash_addr> -l <length>
  fis free
  fis init [-f]
  fis list [-c] [-d]
  fis load [-d] [-l] [-b <memory_load_address>] [-c] name
  fis write -f <flash_addr> -b <mem_base> -l <image_length>
RedBoot> fis write -f 0xbfca0000 -l 1966080 -b 0x8003b400
* CAUTION * about to program FLASH
            at 0xbfca0000..0xbfe7ffff from 0x8003b400 - continue (y/n)? y
... Erase from 0xbfca0000-0xbfe7ffff: ..............................
... Program from 0x8003b400-0x8021b400 to 0xbfca0000: ..............................
RedBoot> fis load -l linux
... Read from 0xbffe0000-0xbffeefff to 0x80ff0000:
Unpacking....................................................................
Image loaded from 0x80041000-0x801b0000
... Read from 0xbffe0000-0xbffeefff to 0x80ff0000:
RedBoot> exec
Now booting linux kernel:
 Base address 0x80080000 Entry 0x80186040
 Cmdline :
CPU revision is: 00019064
Primary instruction cache 16kB, physically tagged, 4-way, linesize 16 bytes.
Primary data cache 16kB, 4-way, linesize 16 bytes.
Linux version 2.4.32 (mikea@brick) (gcc version 3.4.6 (OpenWrt-2.0)) #4 Sat Nov 18 11:27:44 GMT 2006
Determined physical RAM map:
 memory: 01000000 @ 00000000 (usable)
On node 0 totalpages: 4096
zone(0): 4096 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: console=ttyS0,9600
Using 92.000 MHz high precision timer.
Calibrating delay loop... 183.50 BogoMIPS
Memory: 14244k/16384k available (1290k kernel code, 2140k reserved, 92k data, 68k init, 0k highmem)
Dentry cache hash table entries: 2048 (order: 2, 16384 bytes)
Inode cache hash table entries: 1024 (order: 1, 8192 bytes)
Mount cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 4096 (order: 2, 16384 bytes)
Checking for 'wait' instruction...  unavailable.
POSIX conformance testing by UNIFIX
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
Initializing RT netlink socket
Starting kswapd
devfs: v1.12c (20020818) Richard Gooch (rgooch@atnf.csiro.au)
devfs: boot_options: 0x1
JFFS2 version 2.1. (C) 2001 Red Hat, Inc., designed by Axis Communications AB.
pty: 256 Unix98 ptys configured
Serial driver version 5.05c (2001-07-08) with no serial options enabled
ttyS00 at 0xb1100003 (irq = 37) is a 16550A
MTD driver for SPI flash.
spiflash: Probing for Serial flash ...
spiflash: Found SPI serial Flash.
4194304: size
Creating 5 MTD partitions on "spiflash":
0x00000000-0x00030000 : "RedBoot"
0x00030000-0x000a0000 : "Linux"
0x000a0000-0x003e0000 : "rootfs"
0x003e0000-0x003ef000 : "FIS directory"
mtd: partition "FIS directory" doesn't end on an erase block -- force read-only
0x003ef000-0x003f0000 : "RedBoot config"
mtd: partition "RedBoot config" doesn't start on an erase block boundary -- force read-only
Initializing Cryptographic API
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP, IGMP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 1024 bind 2048)
ip_conntrack version 2.1 (5953 buckets, 5953 max) - 328 bytes per conntrack
ip_tables: (C) 2000-2002 Netfilter core team
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
NET4: Ethernet Bridge 008 for NET4.0
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (jffs2 filesystem) readonly.
Mounted devfs on /dev
Freeing unused kernel memory: 68k freed
init started:  BusyBox v1.1.3 (2006.11.21-12:11+0000) multi-call binary
Algorithmics/MIPS FPU Emulator v1.5

Please press Enter to activate this console. jffs2.bbc: SIZE compression mode activated.
Data bus error, epc == c00b4c48, ra == c00b5200
Oops in traps.c::do_be, line 385: