Bricked NVR, nbd7024h-p need serial console help.

[alastairstevenson]

Very happy to say, my NVR is fully functional again, thanks to
jftech.com support. I owe them, so grateful. They sent me the needed update.img file, which I copied over to my NVR by TFTP, running command "run up" from serial console and having the update file inside the same directory as TFTP server on my window

That's a brilliant result, really good to hear!
You were just poised to do that, having figured out the serial console and the bootloader commands - just needing the right firmware image file.
It's great when Tech Support does what it's supposed to do. Presumably you've added them to your Christmas Card list.

 

[icebox]

Most definitely as are you, if I could mail you one
BTW even with a fully working NVR, after interrupting the bootloader, it will still restart/boot up shortly there after interrupting it.
Not much time to play with u-boot, perhaps because the autoboot timer is set to zero.
The newest firmware is more secure, only open ports for web gui,ONVIF,Media,RTSP. 4 out of 65001 ports. No telnet.
Also has a new settings for changing IPC's and upgrading each cameras firmware as well. (not that I would do that)
update.img is already the newest firmware. I was advised by Jftech to make sure to use the newest firmware for security reasons.

 

[icebox]

Here's the update.img file for everyone, it's compressed with winrar, uncompress it first from the .rar extension. 12mb size.
Someone was asking me for it, so I figured I try to post it here again. It worked this time.

 

[ekramulhaque]

Anyone can tell me how to connect TTL to Motherboard for this NVR?

 

[bheremans]

Here is a picture how I connected my longse : https://photos.google.com/share/AF1...?key=OTZJMVJSMEh1YUZtZzRQWjZfcVg1RXN6cGlseHVB

 

[ekramulhaque]

Please tell me which port and how to connect?
I mean wire connection?
I give my dvr picture,this xm dvr.

 

[seniman]

Near the audio port is UART0 as you can see in my uploaded image.

Then you should soldered 2pcs 1K 0603 resistor at orange square in my picture.
Or you can shorted it by tin, but I think it will more difficult than soldering 0603 resistor.
If you don't have 0603 resistor you can shorted it.

I have SDK for Hi3520D V200, anyone need it I can share it. Hopefully we can customized it as needed.

 

[ekramulhaque]

Near the audio port is UART0 as you can see in my uploaded image.

Then you should soldered 2pcs 1K 0603 resistor at orange square in my picture.
Or you can shorted it by tin, but I think it will more difficult than soldering 0603 resistor.
If you don't have 0603 resistor you can shorted it.

I have SDK for Hi3520D V200, anyone need it I can share it. Hopefully we can customized it as needed.

i can't stop boot.i send you some photo ,is that everything is ok ?

 

[alastairstevenson]

When it's finished booting does anything you type get echoed?

You'd need to have Control-C pressed so it auto repeats before you power on.

 

[ekramulhaque]

When it's finished booting does anything you type get echoed?

You'd need to have Control-C pressed so it auto repeats before you power on.

When i turn on power, i try to press CTRL and C button, but did not show nothing.that time keyboard button not work.

 

[ekramulhaque]

i am trying to short this terminal i did't use register. Is that need to connect with 5v to mainboard terminal?

 

[alastairstevenson]

No - do not connect the +5v wire.

 

[seniman]

Your wire connection is fine because you have got echoed data from the serial.

The echoed console seems normal.

In my DVR when I turn the DVR on the same time I press Ctrl + C in keyboard, Then I can get another console command prompted :
hisilicon #

You should pressed the Ctrl + C several times during DVR power on. By release the C button and pressed it again, while keep pressed the Ctrl button.

 

[seniman]

Screenshot_126.jpg This my DVR console without interrupting Ctrl + C

And then 2 photos below show up in DVR HDMI display (no pressed Ctrl + C)
IMG_20190819_193309.jpeg is DVR display when booting

IMG_20190819_193331.jpeg is DVR display after booting when console ended with :
Starting kernel ...

Uncompressing Linux... done, booting the kernel.


And the Screenshot_127.jpg is DVR console when I press Ctrl + C in my laptop keyboard.

 

[alastairstevenson]

Your wire connection is fine because you have got echoed data from the serial.

The echoed console seems normal

i don't see any echoed data. Where do you see that?
Echoed is where characters that you type appear on the screen.

I'd speculate that the TX from the USB to TTL adaptor is not connected to the RX on the board.
The RX on the adaptor is connected to TX on the board as the screen shows the output OK.

 

[seniman]

i can't stop boot.i send you some photo ,is that everything is ok ?

i don't see any echoed data. Where do you see that?
Echoed is where characters that you type appear on the screen.

I'd speculate that the TX from the USB to TTL adaptor is not connected to the RX on the board.
The RX on the adaptor is connected to TX on the board as the screen shows the output OK.

@ekramulhaque maybe you should pressed Ctrl + C several time, then you can enter another prompted console displayed as :
hisilicon #

After you entered this console then you can see what you typed will be echoed back to your screen

 

[ekramulhaque]

Can anyone tell me how i can connect my motherboard with TTL cable?
I drop my 8 channel and 16 channel DVR photo.

 

[cranz32]

Near the audio port is UART0 as you can see in my uploaded image.

Then you should soldered 2pcs 1K 0603 resistor at orange square in my picture.
Or you can shorted it by tin, but I think it will more difficult than soldering 0603 resistor.
If you don't have 0603 resistor you can shorted it.

I have SDK for Hi3520D V200, anyone need it I can share it. Hopefully we can customized it as needed.

Do you still have a copy of SDK for Hi3520D V200? here is my email if i may have a copy of it: delacruzallanjay@gmail.com
Thanks..

 

[cranz32]

Very happy to say, my NVR is fully functional again, thanks to
jftech.com support. I owe them, so grateful. They sent me the needed update.img file, which I copied over to my NVR by TFTP, running command "run up" from serial console and having the update file inside the same directory as TFTP server on my windows pc.
It did it in under 5minutes thankfully before the NVR would automatically reboot.
So I'm very thankful to alastairstevenson guiding me as well, when no one else could or would.
Thank you!
I tried to upload file here, but it would fail, I guess it's too big.
If anyone needs it, let me know, I'll gladly share it.

All my settings like cameras/password were all retained, didn't lose anything.
The serial output from the flash:

U-Boot 2010.06-svn201 (Dec 05 2014 - 13:49:36)

Check spi flash controller v350... Found
Spi(cs1) ID: 0xC2 0x20 0x18 0xC2 0x20 0x18
Spi(cs1): Block:64KB Chip:16MB Name:"MX25L128XX"
In:    serial
Out:   serial
Err:   serial
USB:   scanning bus for devices... 1 USB Device(s) found
0 Storage Device(s) found
PHY 0x02: OUI = 0x1374, Model = 0x07, Rev = 0x02
change register for AR8035
CONFIG RGMII
MAC:   00-0B-3F-00-00-01
Press CTRL-C to abort autoboot in 0 secondshisilicon # printenv
bootcmd=sf probe 0;sf read 84000000 f20000 20000;logoload 0x84000000;decjpg;sf read 84000000 50000 4A0000;fload 84000000;bootm 0x82000000
bootdelay=1
baudrate=115200
bootfile="uImage"
restore=1
da=mw.b 0x82000000 ff 1000000;tftp 0x82000000 u-boot.bin.img;sf probe 0;flwrite
du=mw.b 0x82000000 ff 1000000;tftp 0x82000000 user-x.cramfs.img;sf probe 0;flwrite
dr=mw.b 0x82000000 ff 1000000;tftp 0x82000000 romfs-x.cramfs.img;sf probe 0;flwrite
dw=mw.b 0x82000000 ff 1000000;tftp 0x82000000 web-x.cramfs.img;sf probe 0;flwrite
dl=mw.b 0x82000000 ff 1000000;tftp 0x82000000 logo-x.cramfs.img;sf probe 0;flwrite
dc=mw.b 0x82000000 ff 1000000;tftp 0x82000000 custom-x.cramfs.img;sf probe 0;flwrite
up=mw.b 0x82000000 ff 1000000;tftp 0x82000000 update.img;sf probe 0;flwrite
tk=mw.b 0x82000000 ff 1000000;tftp 0x82000000 zImage.img; bootm 0x82000000
dd=mw.b 0x82000000 ff 1000000;tftp 0x82000000 mtd-x.jffs2.img;sf probe 0;flwrite
ipaddr=192.168.1.10
serverip=192.168.1.1
netmask=255.255.255.0
gatewayip=192.168.0.1
ethaddr=00:0b:3f:00:00:01
bootargs=mem=180M console=ttyAMA0,115200 root=/dev/mtdblock1 rootfstype=cramfs mtdparts=hi_sfc:320K(boot),4736K(romfs),5824K(usr),1536K(web),3072K(custom),128K(logo),768K(mtd)
appSystemLanguage=English
appVideoStandard=NTSC
stdin=serial
stdout=serial
stderr=serial
verify=n
ver=U-Boot 2010.06-svn201 (Dec 05 2014 - 13:49:36)

Environment size: 1359/65532 bytes
hisilicon # run up
miiphy_register: non unique device name '0:2'
PHY 0x02: OUI = 0x1374, Model = 0x07, Rev = 0x02
change register for AR8035
CONFIG RGMII
MAC:   00-0B-3F-00-00-01
TFTP from server 192.168.1.1; our IP address is 192.168.1.10
Download Filename 'update.img'.
Download to address: 0x82000000
Downloading: #################################################
done
Bytes transferred = 12652928 (c11180 hex)
16384 KiB hi_sfc at 0:0 is now current device
PACK_ID OK

## Checking Image at 0x82000040 ...
   Header CRC Checking ... OK
   Image Name:   linux
   Image Type:   ARM Linux Standalone Program (gzip compressed)
   Data Size:    2920448 Bytes = 2.8 MiB
   Load Address: 00c20000
   Entry Point:  00f20000
   Data CRC Checking ... OK
Programing start at: 0x00c20000
Programing end at: 0x00f20000
Erasing at 0xf20000 -- 100% complete.
done.
Erased sectors.
Saving Image to Flash ...
Writing at 0xf20000 -- 100% complete.
done.
PACK_ID OK

## Checking Image at 0x822c9080 ...
   Header CRC Checking ... OK
   Image Name:   linux
   Image Type:   ARM Linux Standalone Program (gzip compressed)
   Data Size:    20480 Bytes = 20 KiB
   Load Address: 00f20000
   Entry Point:  00f40000
   Data CRC Checking ... OK
Programing start at: 0x00f20000
Programing end at: 0x00f40000
Erasing at 0xf40000 -- 100% complete.
done.
Erased sectors.
Saving Image to Flash ...
Writing at 0xf40000 -- 100% complete.
done.
PACK_ID OK

## Checking Image at 0x822ce0c0 ...
   Header CRC Checking ... OK
   Image Name:   linux
   Image Type:   ARM Linux Kernel Image (gzip compressed)
   Data Size:    3989504 Bytes = 3.8 MiB
   Load Address: 00050000
   Entry Point:  004f0000
   Data CRC Checking ... OK
Programing start at: 0x00050000
Programing end at: 0x004f0000
Erasing at 0x4f0000 -- 100% complete.
done.
Erased sectors.
Saving Image to Flash ...
Writing at 0x4f0000 -- 100% complete.
done.
PACK_ID OK

## Checking Image at 0x8269c100 ...
   Header CRC Checking ... OK
   Image Name:   linux
   Image Type:   ARM Linux Kernel Image (gzip compressed)
   Data Size:    4411392 Bytes = 4.2 MiB
   Load Address: 004f0000
   Entry Point:  00aa0000
   Data CRC Checking ... OK
Programing start at: 0x004f0000
Programing end at: 0x00aa0000
Erasing at 0xaa0000 -- 100% complete.
done.
Erased sectors.
Saving Image to Flash ...
Writing at 0xaa0000 -- 100% complete.
done.
PACK_ID OK

## Checking Image at 0x82ad1140 ...
   Header CRC Checking ... OK
   Image Name:   linux
   Image Type:   ARM Linux Standalone Program (gzip compressed)
   Data Size:    1310720 Bytes = 1.3 MiB
   Load Address: 00aa0000
   Entry Point:  00c20000
   Data CRC Checking ... OK
Programing start at: 0x00aa0000
Programing end at: 0x00c20000
Erasing at 0xc20000 -- 100% complete.
done.
Erased sectors.
Saving Image to Flash ...
Writing at 0xc20000 -- 100% complete.
done.
hisilicon # reset
resetting ...

A fresh start, with the NVR starting up correctly:

U-Boot 2010.06-svn201 (Dec 05 2014 - 13:49:36)

Check spi flash controller v350... Found
Spi(cs1) ID: 0xC2 0x20 0x18 0xC2 0x20 0x18
Spi(cs1): Block:64KB Chip:16MB Name:"MX25L128XX"
In:    serial
Out:   serial
Err:   serial
USB:   scanning bus for devices... 1 USB Device(s) found
0 Storage Device(s) found
PHY 0x02: OUI = 0x1374, Model = 0x07, Rev = 0x02
change register for AR8035
CONFIG RGMII
MAC:   00-0B-3F-00-00-01
Press CTRL-C to abort autoboot in 0 seconds16384 KiB hi_sfc at 0:0 is now current device

CFG_BOOT_ADDR:0x0
### /UbootLogo UbootLogoload complete: 21986 bytes loaded to 0x88200000
jpeg decoding ...
<<addr=0x88200000, size=0xb85f9, vobuf=0x88200000>>
<<imgwidth=800, imgheight=600, linebytes=1600>>
decode success!!!!
decode jpeg success.
decode jpeg!

CFG_BOOT_ADDR:0x58050000
### boot load complete: 2808640 bytes loaded to 0x82000000
### SAVE TO 80008000 !
## Booting kernel from Legacy Image at 82000000 ...
   Image Name:   linux
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2808576 Bytes = 2.7 MiB
   Load Address: 80008000
   Entry Point:  80008000
   Loading Kernel Image ... OK
OK

Starting kernel ...

Uncompressing Linux... done, booting the kernel.

Do you still have a copy of these files?
here is my email if i may have a copy of it: delacruzallanjay@gmail.com
Thanks..