Bricked NVR, nbd7024h-p need serial console help.

alastairstevenson

Staff member
Joined
Oct 28, 2014
Messages
15,930
Reaction score
6,778
Location
Scotland
Very happy to say, my NVR is fully functional again, thanks to
jftech.com support. I owe them, so grateful. They sent me the needed update.img file, which I copied over to my NVR by TFTP, running command "run up" from serial console and having the update file inside the same directory as TFTP server on my window
That's a brilliant result, really good to hear!
You were just poised to do that, having figured out the serial console and the bootloader commands - just needing the right firmware image file.
It's great when Tech Support does what it's supposed to do. Presumably you've added them to your Christmas Card list.
 

icebox

n3wb
Joined
Feb 13, 2016
Messages
22
Reaction score
8
Most definitely as are you, if I could mail you one :)
BTW even with a fully working NVR, after interrupting the bootloader, it will still restart/boot up shortly there after interrupting it.
Not much time to play with u-boot, perhaps because the autoboot timer is set to zero.
The newest firmware is more secure, only open ports for web gui,ONVIF,Media,RTSP. 4 out of 65001 ports. No telnet.
Also has a new settings for changing IPC's and upgrading each cameras firmware as well. (not that I would do that)
update.img is already the newest firmware. I was advised by Jftech to make sure to use the newest firmware for security reasons.
 

icebox

n3wb
Joined
Feb 13, 2016
Messages
22
Reaction score
8
Here's the update.img file for everyone, it's compressed with winrar, uncompress it first from the .rar extension. 12mb size.
Someone was asking me for it, so I figured I try to post it here again. It worked this time.
 

Attachments

seniman

n3wb
Joined
Aug 16, 2019
Messages
4
Reaction score
1
Location
Medan
Near the audio port is UART0 as you can see in my uploaded image.

Then you should soldered 2pcs 1K 0603 resistor at orange square in my picture.
Or you can shorted it by tin, but I think it will more difficult than soldering 0603 resistor.
If you don't have 0603 resistor you can shorted it.

I have SDK for Hi3520D V200, anyone need it I can share it. Hopefully we can customized it as needed.
 

Attachments

Joined
Dec 18, 2015
Messages
13
Reaction score
1
Near the audio port is UART0 as you can see in my uploaded image.

Then you should soldered 2pcs 1K 0603 resistor at orange square in my picture.
Or you can shorted it by tin, but I think it will more difficult than soldering 0603 resistor.
If you don't have 0603 resistor you can shorted it.

I have SDK for Hi3520D V200, anyone need it I can share it. Hopefully we can customized it as needed.

i can't stop boot.i send you some photo ,is that everything is ok ?
 

Attachments

alastairstevenson

Staff member
Joined
Oct 28, 2014
Messages
15,930
Reaction score
6,778
Location
Scotland
When it's finished booting does anything you type get echoed?

You'd need to have Control-C pressed so it auto repeats before you power on.
 
Joined
Dec 18, 2015
Messages
13
Reaction score
1
When it's finished booting does anything you type get echoed?

You'd need to have Control-C pressed so it auto repeats before you power on.
When i turn on power, i try to press CTRL and C button, but did not show nothing.that time keyboard button not work.
 
Joined
Dec 18, 2015
Messages
13
Reaction score
1
i am trying to short this terminal i did't use register. Is that need to connect with 5v to mainboard terminal?
 

seniman

n3wb
Joined
Aug 16, 2019
Messages
4
Reaction score
1
Location
Medan
Your wire connection is fine because you have got echoed data from the serial.

The echoed console seems normal.

In my DVR when I turn the DVR on the same time I press Ctrl + C in keyboard, Then I can get another console command prompted :
hisilicon #

You should pressed the Ctrl + C several times during DVR power on. By release the C button and pressed it again, while keep pressed the Ctrl button.
 
Last edited:

seniman

n3wb
Joined
Aug 16, 2019
Messages
4
Reaction score
1
Location
Medan
Screenshot_126.jpg This my DVR console without interrupting Ctrl + C

And then 2 photos below show up in DVR HDMI display (no pressed Ctrl + C)
IMG_20190819_193309.jpeg is DVR display when booting

IMG_20190819_193331.jpeg is DVR display after booting when console ended with :
Starting kernel ...

Uncompressing Linux... done, booting the kernel.


And the Screenshot_127.jpg is DVR console when I press Ctrl + C in my laptop keyboard.
 

Attachments

alastairstevenson

Staff member
Joined
Oct 28, 2014
Messages
15,930
Reaction score
6,778
Location
Scotland
Your wire connection is fine because you have got echoed data from the serial.

The echoed console seems normal
i don't see any echoed data. Where do you see that?
Echoed is where characters that you type appear on the screen.

I'd speculate that the TX from the USB to TTL adaptor is not connected to the RX on the board.
The RX on the adaptor is connected to TX on the board as the screen shows the output OK.
 

seniman

n3wb
Joined
Aug 16, 2019
Messages
4
Reaction score
1
Location
Medan
i can't stop boot.i send you some photo ,is that everything is ok ?
i don't see any echoed data. Where do you see that?
Echoed is where characters that you type appear on the screen.

I'd speculate that the TX from the USB to TTL adaptor is not connected to the RX on the board.
The RX on the adaptor is connected to TX on the board as the screen shows the output OK.
@ekramulhaque maybe you should pressed Ctrl + C several time, then you can enter another prompted console displayed as :
hisilicon #

After you entered this console then you can see what you typed will be echoed back to your screen
 

cranz32

n3wb
Joined
May 1, 2022
Messages
2
Reaction score
0
Location
Philippines
Near the audio port is UART0 as you can see in my uploaded image.

Then you should soldered 2pcs 1K 0603 resistor at orange square in my picture.
Or you can shorted it by tin, but I think it will more difficult than soldering 0603 resistor.
If you don't have 0603 resistor you can shorted it.

I have SDK for Hi3520D V200, anyone need it I can share it. Hopefully we can customized it as needed.
Do you still have a copy of SDK for Hi3520D V200? here is my email if i may have a copy of it: delacruzallanjay@gmail.com
Thanks..
 

cranz32

n3wb
Joined
May 1, 2022
Messages
2
Reaction score
0
Location
Philippines
Very happy to say, my NVR is fully functional again, thanks to
jftech.com support. I owe them, so grateful. They sent me the needed update.img file, which I copied over to my NVR by TFTP, running command "run up" from serial console and having the update file inside the same directory as TFTP server on my windows pc.
It did it in under 5minutes thankfully before the NVR would automatically reboot.
So I'm very thankful to alastairstevenson guiding me as well, when no one else could or would.
Thank you!
I tried to upload file here, but it would fail, I guess it's too big.
If anyone needs it, let me know, I'll gladly share it.

All my settings like cameras/password were all retained, didn't lose anything.
The serial output from the flash:
Code:
U-Boot 2010.06-svn201 (Dec 05 2014 - 13:49:36)

Check spi flash controller v350... Found
Spi(cs1) ID: 0xC2 0x20 0x18 0xC2 0x20 0x18
Spi(cs1): Block:64KB Chip:16MB Name:"MX25L128XX"
In:    serial
Out:   serial
Err:   serial
USB:   scanning bus for devices... 1 USB Device(s) found
0 Storage Device(s) found
PHY 0x02: OUI = 0x1374, Model = 0x07, Rev = 0x02
change register for AR8035
CONFIG RGMII
MAC:   00-0B-3F-00-00-01
Press CTRL-C to abort autoboot in 0 secondshisilicon # printenv
bootcmd=sf probe 0;sf read 84000000 f20000 20000;logoload 0x84000000;decjpg;sf read 84000000 50000 4A0000;fload 84000000;bootm 0x82000000
bootdelay=1
baudrate=115200
bootfile="uImage"
restore=1
da=mw.b 0x82000000 ff 1000000;tftp 0x82000000 u-boot.bin.img;sf probe 0;flwrite
du=mw.b 0x82000000 ff 1000000;tftp 0x82000000 user-x.cramfs.img;sf probe 0;flwrite
dr=mw.b 0x82000000 ff 1000000;tftp 0x82000000 romfs-x.cramfs.img;sf probe 0;flwrite
dw=mw.b 0x82000000 ff 1000000;tftp 0x82000000 web-x.cramfs.img;sf probe 0;flwrite
dl=mw.b 0x82000000 ff 1000000;tftp 0x82000000 logo-x.cramfs.img;sf probe 0;flwrite
dc=mw.b 0x82000000 ff 1000000;tftp 0x82000000 custom-x.cramfs.img;sf probe 0;flwrite
up=mw.b 0x82000000 ff 1000000;tftp 0x82000000 update.img;sf probe 0;flwrite
tk=mw.b 0x82000000 ff 1000000;tftp 0x82000000 zImage.img; bootm 0x82000000
dd=mw.b 0x82000000 ff 1000000;tftp 0x82000000 mtd-x.jffs2.img;sf probe 0;flwrite
ipaddr=192.168.1.10
serverip=192.168.1.1
netmask=255.255.255.0
gatewayip=192.168.0.1
ethaddr=00:0b:3f:00:00:01
bootargs=mem=180M console=ttyAMA0,115200 root=/dev/mtdblock1 rootfstype=cramfs mtdparts=hi_sfc:320K(boot),4736K(romfs),5824K(usr),1536K(web),3072K(custom),128K(logo),768K(mtd)
appSystemLanguage=English
appVideoStandard=NTSC
stdin=serial
stdout=serial
stderr=serial
verify=n
ver=U-Boot 2010.06-svn201 (Dec 05 2014 - 13:49:36)

Environment size: 1359/65532 bytes
hisilicon # run up
miiphy_register: non unique device name '0:2'
PHY 0x02: OUI = 0x1374, Model = 0x07, Rev = 0x02
change register for AR8035
CONFIG RGMII
MAC:   00-0B-3F-00-00-01
TFTP from server 192.168.1.1; our IP address is 192.168.1.10
Download Filename 'update.img'.
Download to address: 0x82000000
Downloading: #################################################
done
Bytes transferred = 12652928 (c11180 hex)
16384 KiB hi_sfc at 0:0 is now current device
PACK_ID OK

## Checking Image at 0x82000040 ...
   Header CRC Checking ... OK
   Image Name:   linux
   Image Type:   ARM Linux Standalone Program (gzip compressed)
   Data Size:    2920448 Bytes = 2.8 MiB
   Load Address: 00c20000
   Entry Point:  00f20000
   Data CRC Checking ... OK
Programing start at: 0x00c20000
Programing end at: 0x00f20000
Erasing at 0xf20000 -- 100% complete.
done.
Erased sectors.
Saving Image to Flash ...
Writing at 0xf20000 -- 100% complete.
done.
PACK_ID OK

## Checking Image at 0x822c9080 ...
   Header CRC Checking ... OK
   Image Name:   linux
   Image Type:   ARM Linux Standalone Program (gzip compressed)
   Data Size:    20480 Bytes = 20 KiB
   Load Address: 00f20000
   Entry Point:  00f40000
   Data CRC Checking ... OK
Programing start at: 0x00f20000
Programing end at: 0x00f40000
Erasing at 0xf40000 -- 100% complete.
done.
Erased sectors.
Saving Image to Flash ...
Writing at 0xf40000 -- 100% complete.
done.
PACK_ID OK

## Checking Image at 0x822ce0c0 ...
   Header CRC Checking ... OK
   Image Name:   linux
   Image Type:   ARM Linux Kernel Image (gzip compressed)
   Data Size:    3989504 Bytes = 3.8 MiB
   Load Address: 00050000
   Entry Point:  004f0000
   Data CRC Checking ... OK
Programing start at: 0x00050000
Programing end at: 0x004f0000
Erasing at 0x4f0000 -- 100% complete.
done.
Erased sectors.
Saving Image to Flash ...
Writing at 0x4f0000 -- 100% complete.
done.
PACK_ID OK

## Checking Image at 0x8269c100 ...
   Header CRC Checking ... OK
   Image Name:   linux
   Image Type:   ARM Linux Kernel Image (gzip compressed)
   Data Size:    4411392 Bytes = 4.2 MiB
   Load Address: 004f0000
   Entry Point:  00aa0000
   Data CRC Checking ... OK
Programing start at: 0x004f0000
Programing end at: 0x00aa0000
Erasing at 0xaa0000 -- 100% complete.
done.
Erased sectors.
Saving Image to Flash ...
Writing at 0xaa0000 -- 100% complete.
done.
PACK_ID OK

## Checking Image at 0x82ad1140 ...
   Header CRC Checking ... OK
   Image Name:   linux
   Image Type:   ARM Linux Standalone Program (gzip compressed)
   Data Size:    1310720 Bytes = 1.3 MiB
   Load Address: 00aa0000
   Entry Point:  00c20000
   Data CRC Checking ... OK
Programing start at: 0x00aa0000
Programing end at: 0x00c20000
Erasing at 0xc20000 -- 100% complete.
done.
Erased sectors.
Saving Image to Flash ...
Writing at 0xc20000 -- 100% complete.
done.
hisilicon # reset
resetting ...
A fresh start, with the NVR starting up correctly:
Code:
U-Boot 2010.06-svn201 (Dec 05 2014 - 13:49:36)

Check spi flash controller v350... Found
Spi(cs1) ID: 0xC2 0x20 0x18 0xC2 0x20 0x18
Spi(cs1): Block:64KB Chip:16MB Name:"MX25L128XX"
In:    serial
Out:   serial
Err:   serial
USB:   scanning bus for devices... 1 USB Device(s) found
0 Storage Device(s) found
PHY 0x02: OUI = 0x1374, Model = 0x07, Rev = 0x02
change register for AR8035
CONFIG RGMII
MAC:   00-0B-3F-00-00-01
Press CTRL-C to abort autoboot in 0 seconds16384 KiB hi_sfc at 0:0 is now current device

CFG_BOOT_ADDR:0x0
### /UbootLogo UbootLogoload complete: 21986 bytes loaded to 0x88200000
jpeg decoding ...
<<addr=0x88200000, size=0xb85f9, vobuf=0x88200000>>
<<imgwidth=800, imgheight=600, linebytes=1600>>
decode success!!!!
decode jpeg success.
decode jpeg!

CFG_BOOT_ADDR:0x58050000
### boot load complete: 2808640 bytes loaded to 0x82000000
### SAVE TO 80008000 !
## Booting kernel from Legacy Image at 82000000 ...
   Image Name:   linux
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2808576 Bytes = 2.7 MiB
   Load Address: 80008000
   Entry Point:  80008000
   Loading Kernel Image ... OK
OK

Starting kernel ...

Uncompressing Linux... done, booting the kernel.
Do you still have a copy of these files?
here is my email if i may have a copy of it: delacruzallanjay@gmail.com
Thanks..
 
Top