tetheredboot looses connection after "Uploading iBSS.n90ap" about iphone-dataprotection HOT 15 CLOSED

does the device screen turns white (before or after the program fails) ?

Nope - the device stayed black and dead. I had to do a hard reset to revive it.
So my guess was that there is a communication problem.

I fixed that problem by installing another libusb (sudo port install) and 
recompile tetheredboot. Now the device gets white and it starts booting.

Now tetheredboot ends with:

----
Waiting 10 seconds for the device to pop up...
opening device 05ac:1281...
Setting to configuration 1
Setting to interface 0:0
Preparing to upload iBSS payload
[==================================================] 100.0%
Executing iBSS payload
Waiting 10 seconds for the device to pop up...
opening device 05ac:1281...
Setting to configuration 1
Setting to interface 0:0
Preparing to upload devicetree
Checking if DeviceTree.n90ap already exists
Preparing to fetch firmware image from Apple's servers
Fetching Firmware/all_flash/all_flash.n90ap.production/DeviceTree.n90ap.img3...
[==================================================] 100.0%
Resetting device counters
Uploading DeviceTree.n90ap to device
[==================================================] 100.0%
Preparing to upload ramdisk
[==================================================] 100.0%
Executing ramdisk
libusb:error [darwin_transfer_status] transfer error: timed out
Preparing to upload kernelcache
Checking if kernelcache already exists
Resetting device counters
[==================================================] 100.0%
libusb:error [darwin_transfer_status] transfer error: timed out
Exiting libpois0n
----

Don't really know if this is sucess or not.
On the device I get:
---
...
Listening on port 1999
Running /sbin/sshd
AppleBCMWLAN: handleIOKitBusyWatchdogTimeout(): Error no successful firmware 
download after 60000 ms!! Giving up ...
---

followed by warnings "limiting USB input current"

So the device is up and running, it reacts on USB (dis-)connect events,
sshd has been started -- but I still can't connect to it :-(
tcprelay reports incoming requests but not connection

Any hint what I have to look out for?

ok so the ramdisk boots fine, this looks like some kind of usb issue, i never 
had the "limiting USB input current" warnings on my test setup. Does the device 
show up in system profiler ? Could you also post the tcprelay output ? Thanks

I guess that we can ignore the "current" thing - it is related to charging 
limitations. I also get a message "Charging not supported with this 
accessories" when I connect the running device via USB. They all disappear if I 
remove the USB extension cable.

tcypreplay does not show anything interesting:

$ python tcprelay.py -t 22:2222 5900:5900 1999:1999 1234:1234
Forwarding local port 2222 to remote port 22
Forwarding local port 5900 to remote port 5900
Forwarding local port 1999 to remote port 1999
Forwarding local port 1234 to remote port 1234
Incoming connection to 2222

There is no answer and/or status if I try to connect to any of the ports.

System profiler shows an iphone connected to USB (serial number: blah)

There are a couple of other errors in the output on the iphone like: 

GetMasterBlock: Error 16 opening /dev/md0

I just don't know what is relevant.

ok, not a usb bug then. This is weird, since "Running /sbin/sshd" is displayed 
it should be ok. I'll try to reproduce the issue and dig further.

Is the exit of tetheredboot ok?

---
Resetting device counters
[==================================================] 100.0%
libusb:error [darwin_transfer_status] transfer error: timed out
Exiting libpois0n
----

Is there a way to check, if tcprelay is really talking to the device?
Can I do some kind of "ping" over ther USB line, to see if the device is alive?


fyi: I will be away from my lab from tomorrow until next monday, so I can't do 
any further testing. 

yes, if the ramdisk boots with verbose output on the device screen then 
tetherboot should be ok.
I've attached a modified usbmux.py script with debug prints, could you post the 
ouput ?

Otherwise, this is not a real solution but you can also try using tetherboot 
under windows (a compiled binary is available on the download page).

# ssh -p 2222 root@localhost

Incoming connection to 2222
connect /var/run/usbmuxd
self.listener.listen()
listen
sendpacket
self.socket.send(data)
getreply
self.socket.recv(4)
---
# nc localhost 1234

Incoming connection to 1234
connect /var/run/usbmuxd
self.listener.listen()
listen
sendpacket
self.socket.send(data)
getreply
self.socket.recv(4)

On my Windows XP test system, tetheredboot.exe crashes after saying "Fetching 
kernelcache.release" leaving the device black and dead.

Just checked: tetheredboot.exe also crashes on Windows Vista using:

tetheredboot.exe -p payload -r myramdisk.dmg

Same on Windows 7 - crash after "Fetching kernelcache.release"
Double checked in admin mode

i can't look into it that much this week, does it crashes or does the process 
just exits ? also are you running windows in a virtual machine ?

It crashes. I am offered to send info to Microsoft. I can try to extract, 
whatever you need and send it to you (just drop me a mail to ju_at_heisec.de).
To avoid problems with USB, I did not use VMs but real hardware in all 3 cases.

Maybe we should split this in to issues:

1) no communication with jailbroken iphone 
2) Windows tetheredboot.exe crashes

I'm trying this same thing, on iphone 4 on 4.3.2 and when I get to the part to 
/ mount I get this error:

GetMasterBlock: Error 16 opening /dev/md0

Can someone help?