• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

Thunderbolt 1 Into deep. Notes, Boardviews etc.

Joined
May 22, 2020
Messages
148 (0.10/day)
Location
Ukraine
Some I2C capture from Ethernet EEPROM
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



UPD1:

New dump from new dongle: ST_M95160R_Ethernet3_Firmware.bin

SysInfo:
Apple 57762-A0:

Name: ethernet
Type: Ethernet Controller
Bus: PCI
Vendor ID: 0x14e4
Device ID: 0x1682
Subsystem Vendor ID: 0x106b
Subsystem ID: 0x00f6
Revision ID: 0x0000
Link Width: x1
BSD name: en3
Kext name: AppleBCM5701Ethernet.kext
Firmware version: 57762-a1.15
Location: /System/Library/Extensions/IONetworkingFamily.kext/Contents/PlugIns/AppleBCM5701Ethernet.kext
mDNS offload capable: ac:87:a3:20:40:f0
Version: 10.3.1
Thunderbolt to Gigabit Ethernet Adapter:

Vendor Name: Apple Inc.
Device Name: Thunderbolt to Gigabit Ethernet Adapter
Vendor ID: 0x1
Device ID: 0x8003
Device Revision: 0x1
UID: 0x0001000203DD4220
Apple Serial Number: DTN502506RRDWKHBJ
Route String: 1
Firmware Version: 5.5
Port (Upstream):
Status: Device connected
Link Status: 0x2
Speed: Up to 10 Gb/s x1
Port Micro Firmware Version: 0.0.8


UPD2:

New test Rig:
IMAGE 2023-04-25 03:34:10.jpg
 

Attachments

  • EthernetEEPROM.zip
    8.6 KB · Views: 29
  • WIN CAPTURE.sal.zip
    95.7 KB · Views: 33
  • ST_M95160R_Ethernet3_Firmware.bin.zip
    1,009 bytes · Views: 29
Last edited:
Joined
May 22, 2020
Messages
148 (0.10/day)
Location
Ukraine
DROM MODDING:

offset 0x4C0 = CRC-8 checksum of UUID, next 8 bytes
Calculate here <=

"Polynomial: 0x7
Initial Value: 0x0
Final Xor Value: 0xdb"

offset 0x4C9 = CRC-32C starting from next byte (0x01), with length through one byte (0x6E) !!!!!
(Keep in mind, that Generated CheckSum Should be converted from big endian to little endian )

Calculate here <=


EthernetDROM.png



RESULT AFTER PATCHING:
EthernetDROM_Patched.png
Drom Patched BIN added



UPD2.
After Flashing DROM From ThunderLink NS 1101, thunderbolt controller refuses to identify the Ethernet, because of some port info hardcoded there



UPD3. New rom offsets

tst06_SomeNewOffsets+.bin
It's just for better understanding of code parts
 

Attachments

  • tst01.bin.zip
    956 bytes · Views: 28
  • tst06_SomeNewOffsets+.bin.zip
    987 bytes · Views: 30
Last edited:
Joined
May 22, 2020
Messages
148 (0.10/day)
Location
Ukraine

Attachments

  • WIN CAPTURE.txt
    19.1 KB · Views: 41
  • MAC CAPTURE.txt
    677 bytes · Views: 34
Joined
May 22, 2020
Messages
148 (0.10/day)
Location
Ukraine
Short DROM
dromPcie.png
 

Attachments

  • TBT_04-ShortDROM+4KB.bin.zip
    909 bytes · Views: 26
  • TBT_04-ShortDROM+4KB_v2.bin.zip
    914 bytes · Views: 26
Last edited:
Joined
May 22, 2020
Messages
148 (0.10/day)
Location
Ukraine
TPS22924x 2A is N-Chanel On-Resistance Load Switch used to open 3.3v aux when Cortex-m0 have GPIO signal to wake system
 
Joined
May 22, 2020
Messages
148 (0.10/day)
Location
Ukraine
I WAS READY TO CLOSE THE PROJECT AS I HAVE ALREADY DAMAGED 4x THUNDERBOLT DONGLES, TRYING TO ANALYZE DATA AND OTHER STUFF, WAS GATHERING THE REPORT ABOUT LAST FINDINGS AND DECIDED TO GATHER ALL DATA AT ONE PACK, AND... IT WAS AMAZING, WHAT I HAVE FOUND THERE!

I am not a professional engineer, but a hobbyist, like to modify everything that goes to my hands. So the reason why I have no success with Apple design thunderbolt dongle, is because of the special sauce by Apple. It was right in front of the eyes, so I missed it too many times. The answer is on image:




UPD1:
END OF PROJECT STATEMENT (First step):

I have successfully modified dongle and make it working with Broadcom Wifi by Apple. Working on manual for project legacy
:peace:
 

Attachments

  • TWIK.jpg
    TWIK.jpg
    520.5 KB · Views: 45
Last edited:
Joined
May 22, 2020
Messages
148 (0.10/day)
Location
Ukraine
END OF PROJECT

This story is about some researches and discoveries of Thunderbolt technology is ending. So that is results:

1. The connection of Apple Thunderbolt to Ethernet Dongle to Apple Wifi card from iMac:
01_ConnectionDiagram.jpg
2. Theory of how dongle caddy should look like:
02A_TBTCaddyConcept.jpg02B_TBTCaddyConcept.jpg
3. How the rough soldering look like:
03_DongleConnected.jpg
4. How PCI Config space look like when this setup is connected:
04_RAM_Win.jpg
5. How Modification appears at MacOs System Information:
05_PCI_Mac.jpg
6. The same, but at windows:
05_PCI_Win.jpg
7. Adding the first test PCB Prototype Caddy for adapter, 2400 dpi quality:
TBT_Prototype_Side_A_Mirrored.png
TBT_Prototype_Side_B_Mirrored.png

8. Adding firmware with 5 versions of UUID with DROM patching (actually cosmetics, but whatever)
DSL2210+LPC1112_ROMS.ZIP


Thanks for your attention!
If someone is planing to design a caddy PCB, please contact me for teamwork!
The legacy goal: make a PCB in which you can easily insert DSL2210 PCB via Thunderbolt connector to it and solder an FPC cable to create a simple bridge. This board will be a good option to connect sound cards or other interesting stuff
 

Attachments

  • DSL2210+LPC1112_ROMS.zip
    4.9 KB · Views: 30
  • Images.zip
    1.2 MB · Views: 29
  • PROTOTYPE PCB.zip
    298.9 KB · Views: 33
Last edited:
Joined
May 22, 2020
Messages
148 (0.10/day)
Location
Ukraine
The final solution:

Full x1 pcie 2.0, 5Gps speed, power savings features

13292910-1BC7-494B-9553-5CF64CD5E2AD.jpegE6BC4485-DCAF-42CB-9E60-574B42E618DC.jpegE47B768A-196E-40BA-9245-E5664399EE30.jpeg
 
Top