Couldn't we think of booting the iLiad directly via a TFTP-Server addressing the iLiad through its MAC address? Does anyone know if the iLiad has a serial interface?

Also check out this PDF: Running Linux on ARM Platforms (http://www.arm.com/linux/ARM-Linux-Notes.pdf)

Pretty sure it does. Part of the core bootstrap includes the OpenEmbedded tool setserial.

Then it should be relatively easy to boot the iLiad via TFTP, especially since we have the compressed linux image.

is it possible to redirect (ettercap?) to a custom ids server and download that way?

The 91c111 and the PXA-255 support a firmware downloading feature.

The PXA-255 has a well defined JTAG interface for driving it (and downloading firmware) that may be hooked to the USB interface through extended USB registers (a common embedded system hack).

The PXA-255 has a light weight and a full hardware handshake UART for RS-232C.

I don't know which of the above (or some other means) iRex implemented in their design. I'd put my money on the USB JTAG interface though, it is the most straight forward and provides pretty complete hardware debugging support.

One other clue, their developer posting made a reference to a debug environment that was unfamiliar to me. Someone could run that reference down in Google...

scotty, can you post us the reference to the debug environment? That's very exciting news if we don't have to open the iLiad in order to access its serial interface.

...One other clue, their developer posting made a reference to a debug environment that was unfamiliar to me. Someone could run that reference down in Google...
http://www.lauterbach.de/icd.html
Thats what i found with google "lauterbach debugger" and going through their products listing searching for JTAG.

Or possibly this device:
http://www.lauterbach.de/frames.html?bdmarm.html

Thanks for the Google work, I'm guessing my clicking on English only in my preferences kept me from finding it...

More on JTAG: http://en.wikipedia.org/wiki/JTAG
More on Philips USB chip said to be in iLiad: http://jp.semiconductors.philips.com/acrobat/datasheets/ISP1362-04.pdf

The Philips USB chip has the three test pins... but the above PDF doesn't document how to open up any support the chip might have for USB debug access. iRex may have a hacked Travel Hub that allows yanking a pin to enable/disable JTAG access. This kind of hack allows for easier diagnostics of returned defective units, which is why this kind of support gets my money as it allows all units to be JTAG'd for repair, not just "development" units.

I'd put my money on the USB JTAG interface though, it is the most straight forward and provides pretty complete hardware debugging support.

At some point, some iRex guy told that a full reflash couldn't be done by the iRex programmers themselves, but only in some hardware repair center. (Anybody can find that or tell me I remember it wrong?) Since then, I'm no longer convinced that the JTAG interface is accessible through the connector.

I've been wondering where the boot code lives.

The MSystems device seems to have the kernel and user document filesystems but can't hold the reset, POST, configure and boot loader.

Maybe they were speaking to that?

For thoso who want a gentle introduction to what is a JTAG, and how to use a JTAG from Linux to program a Linux device (an iPAQ in the example), here are some links:

http://web.archive.org/web/20041029023806/http://evilg.home.t-link.de/jtag-howto/
HP iPaq H5450 JTAG HOWTO

http://openwince.sourceforge.net/jtag/
JTAG Tools (Linux)

http://repair4pda.org/handheld_jtag.html
How to Build a JTAG Interface for PDA or Handheld PC

http://openwince.sourceforge.net/jtag/iPAQ-3600/
How to connect the cables on an iPAQ for JTAG flash programming and a sample work session with Linux JTAG Tools

http://axl.freeyellow.com/iPAQ/images/xilinx-DLC5-pp2jtag.pdf
Schematics of a simple DIY JTAG adaptor (parallel port to JTAG), supported by Linux JTAG Tools (it seems to be the one used in the previous example).

Now we only have to know if the pins of the JTAG are in the iliad connector or if it's necessary to open the iliad to reach the nedded points.