Arecont AV12275DN, damaged firmware

Nov 6, 2021
1
0
fl
I attempted to reflash an Arecont AV12275DN and managed to screw up the upload and now it is bricked. It boots up and just kind of sits there now, doesn't pull an IP address, seems to have some activity on the port but nothing significant.

Is there anything I can do to force load the firmware? I have reached out to the company but it's the weekend and I'm not expecting anything back for a few days. It looks like it has some debug headers on it, one seems to say "RS232" and has 3 pins so maybe that is some sort of a serial output.

Update: The 3 pin "RS232" is some sort of serial port. I have a TTL adapter on it and it's outputting the startup text and stops on "initialize frame descriptor queues" and says it has an IP address (of what I gave it) and then a bunch of other boot up stuff. I guess something from this firmware is wrong and I need some way to shove new firmware into it.

Here is the output, sometimes I get more but usually it's this:
Code:
ver 14 - EPC
FW Sector = 0x44
SPI Manufacturer/Device ID = 0x010216
SPI Size = 0x00800000 bytes
Booting................ Done!
====entering main=====
@@ before: isFwReset=171, pipeline_1_sel=0
@@ WDT reset => start FPGA reboot
rebooting...
after reboot??
@@ FPGA reboot completed
@@ after: isFwReset=171 pipeline_1_sel=0
Microblaze ID=5
Microblaze frequency =  Hz
set Reset on Sensor
set Reset on Sensor
Releasing Reset on Sensor
Releasing Reset on Sensor
Quad ID=11065
sensorId=65535
sensorId=0xFFFF
sensor=0
force_model=0x1
sensor=0
firmware ver = 65203
proc ver = 16809
net ver = 6100
reg[0,30]=E201
reg[0,29]=A04
write reg[0,29]=0x903
write reg[0,29]=0x904
write reg[0,29]=0xA04
pixel clock freq=55000000 Hz
Microblaze frequency = 78125000 Hz
MICRO_FREQ = 78
setting DNA to good...
reg[0,30]=E200
FLASH_SETTINGS_SECTOR=67
FIRMWARE_SECTOR=68
1reg[0,29]=A04
first_time = 0x0
Not first time: reading IP from flash...
ip = 10.10.10.3
MAC = 00-1A-07-14-21-FD
force_model = 0x122
internal PN = 0x10141000
Quad ID=11065
sensorId=65535
sensorId=0xFFFF
sensor=0
force_model=0x122
hardware support: 0xE7F40
Init: pregs_size=0x2400
firmware ver = 65203
proc ver = 16809
net ver = 6100
w=2048 h=1536
[init_ar330] mono_id=0x2604
mono reset I2CWrite16Reg=0x10DC
[DevInfo] not first time, use saved settings
[ntp] Cur GMT time: Thu Jan  1 00:00:00 1970
[ntp] Cur local time: Wed Dec 31 16:00:00 1969
[ntp] ISO 8601:2000: -0800 16:00 1969-12-31
PDT
[ntp] TZ=PST8PDT,M3.2.0,M11.1.0
@@ init chroma addr
[ntp] Cur GMT time: Thu Jan  1 00:00:00 1970
[ntp] Cur local time: Wed Dec 31 16:00:00 1969
[ntp] ISO 8601:2000: -0800 16:00 1969-12-31
PDT
[ntp] TZ=PST8PDT,M3.2.0,M11.1.0
[soap] handler count 90
[onvif] InitElementTable() item count 100
[SysSocket] port 80 @ slot 0
[SysSocket] port 80 @ slot 1
Profiler init done
reg[2,28b]=1
reg[2,28b]=1
init fq with default image size: x0=0 x1=1024 y0=0 y1=768
initialize frame descriptor queues
 
Last edited: