Help with nvr5208-8p-4ks2e or Model: SEN-K8320SP2

Matzekais

n3wb
Jan 27, 2021
4
1
Germany
Hello,
I have an old NVR. On the type plate it says Dahua Model : SEN-K8320SP2 According to the config tool it is a nvr5208-8p-4ks2e
Tried to install a new firmware, since then the device hangs in a boot loop.
No matter which firmware I try, it does not boot anymore.
Currently DH_NVR5XXX-4KS2_MultiLang_V4.001.0000003.2.R.201010 is installed.
But I also tried it with the
DH_NVR5XXX-4KS2_MultiLang_V3.216.0000002.0.R.20181106
DH_NVR5XXX-4KS2_Internal_V3.216.0000000.0.R.20180530
DH_NVR5XXX-4KS2_MultiLang_V3.215.0000001.0.R.20180326
tried, but here always comes the message
Code:
hisilicon # run dr
stmmac_init,692,0x70431,3
#################################################
done
Bytes transferred = 22356032 (1552040 hex)
boottype=1:
dh_wdt_stop called
flash_do_flwrite,723,ret:-29,flash_sn:1
   Header CRC Checking ... OK
   Data CRC Checking ... OK
    check failed
not support version.flwrite error!
dh_wdt_start called
secure flwrite error!
do_flwrite_secure failed
hisi▒

I use the RS232 interface

can someone please help me or has an idea?

thank you
Matthias
 
@olWhatshisnameinUK
@altairstevenson
 
  • Like
Reactions: Matzekais
Hi, this is what the bootloop says :-(

Code:
DDR Training Suc



U-Boot 2010.06-svn4440 (Jan 03 2020 - 14:54:14)

In:    serial
Out:   serial
Err:   serial
BDB:   partid =e; addr = 0x53c0000
squashfs use gzip
SCU:   load slave image WARNING! unknown slave_kernel.img format!
OK
spi env sysbackup=0
Read backup misc byte ...
backup tc exist !!!
ok!
GpioI2cMcuRecvAck 114 err
__FUNCTION__ = GpioI2cReadByteMcu, __LINE__ = 244
GpioI2cReadByteMcu faield
[is2uProduct] get failed
PRODUCT:1U
stmmac_init,692,0x70431,3
Hit any key to stop autoboot:  0
stmmac_init,692,0x70431,3
stmmac_init,692,0x70431,3
NET_autoLipDetect timeout
stmmac_init,692,0x70431,3

ARP Retry count exceeded; starting again
## Booting kernel from Legacy Image at 42000000 ...
   Image Name:   Linux-3.10.0_hi3536
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    3001632 Bytes = 2.9 MiB
   Load Address: 40008000
   Entry Point:  40008000
   Loading Kernel Image ... OK
OK

Starting kernel ...
Uncompressing Linux... done, booting the kernel.
 
this is what the bootloop says :-(
Hmm.. some errors, but not a lot of detail, it's in 'quiet mode'.

Suggestion :

Keep * pressed till it autorepeats, then power on the NVR.
This should interrupt the bootloader.
Then use these commands :

printenv
setenv dh_keyboard=0
saveenv
reset

and see if that gives more detail, in particular the one that triggers the reboot.
 
  • Like
Reactions: looney2ns
i do not have the command printenv and unfortunately not more infos after dh_keyboard = 0

Code:
hisilicon # printenv
Unknown command 'printenv' - try 'help'
hisilicon # setenv dh_keyboard=0
## Error: illegal character '=' in variable name "dh_keyboard=0"
hisilicon # setenv dh_keyboard = 0
hisilicon # saveenv
Saving Environment to NAND...
Erasing Nand...
Writing to Nand... done
hisilicon # reset
resetting ...


DDR Training Suc



U-Boot 2010.06-svn4440 (Jan 03 2020 - 14:54:14)

In:    serial
Out:   serial
Err:   serial
BDB:   partid =e; addr = 0x53c0000
squashfs use gzip
SCU:   load slave image WARNING! unknown slave_kernel.img format!
OK
spi env sysbackup=0
Read backup misc byte ...
backup tc exist !!!
ok!
GpioI2cMcuRecvAck 114 err
__FUNCTION__ = GpioI2cReadByteMcu, __LINE__ = 244
GpioI2cReadByteMcu faield
[is2uProduct] get failed
PRODUCT:1U
stmmac_init,692,0x70431,3
Hit any key to stop autoboot:  0
stmmac_init,692,0x70431,3
stmmac_init,692,0x70431,3
NET_autoLipDetect timeout
stmmac_init,692,0x70431,3

ARP Retry count exceeded; starting again
## Booting kernel from Legacy Image at 42000000 ...
   Image Name:   Linux-3.10.0_hi3536
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    3001632 Bytes = 2.9 MiB
   Load Address: 40008000
   Entry Point:  40008000
   Loading Kernel Image ... OK
OK

Starting kernel ...
Uncompressing Linux... done, booting the kernel.
 
i do not have the command printenv and unfortunately not more infos after dh_keyboard = 0
Oops, it looks like my memory was not accurate - it's a few years since I played with a Dahua device, apologies.

try these, after pressing Return a couple of times after interrupting the bootloader :

printenv
setenv dh_keyboard 0
saveenv
reset
 
  • Like
Reactions: looney2ns
unfortunately still not more infos


Code:
DDR Training Suc



U-Boot 2010.06-svn4440 (Jan 03 2020 - 14:54:14)

In:    serial
Out:   serial
Err:   serial
BDB:   partid =e; addr = 0x53c0000
squashfs use gzip
SCU:   load slave image WARNING! unknown slave_kernel.img format!
OK
spi env sysbackup=0
Read backup misc byte ...
backup tc exist !!!
ok!
GpioI2cMcuRecvAck 114 err
__FUNCTION__ = GpioI2cReadByteMcu, __LINE__ = 244
GpioI2cReadByteMcu faield
[is2uProduct] get failed
PRODUCT:1U
stmmac_init,692,0x70431,3
Hit any key to stop autoboot:  0
stmmac_init,692,0x70431,3
stmmac_init,692,0x70431,3
NET_autoLipDetect timeout
stmmac_init,692,0x70431,3

ARP Retry count exceeded; starting again
## Booting kernel from Legacy Image at 42000000 ...
   Image Name:   Linux-3.10.0_hi3536
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    3001632 Bytes = 2.9 MiB
   Load Address: 40008000
   Entry Point:  40008000
   Loading Kernel Image ... OK
OK

Starting kernel ...
Uncompressing Linux... done, booting the kernel.


i have found xhprintenv under help
but that does not output anything

Code:
hisilicon # help
?       - alias for 'help'
autoup  - load update file from server
boot    - boot kernel from uboot
bootm   - boot application image from memory
decjpg  - jpgd   - decode jpeg picture.

devid   - devid      - set hardware id and save to flash

eracfg  - eracfg - erase config sectors

eralogo - eralogo - erase logo sectors

fb_set  - fb_set     - get shift key

fb_test - fb_test      - frontboard read/write test

get_key - get_key     - get shift key

help    - print command description/usage
hwid    - hwid      - set hardware id and save to flash

kaimendaji-      - kai men da ji

lock_otp- lock_otp - otp lock

lock_status- lock_status - get otp lock status

mac     - mac      - set mac address and save to flash

mac1    - mac1      - set mac1 address and save to flash

nand    - NAND sub-system
nandops - flwrite - write img data into FLASH from memory

otp_printf- otp_printf - printf otp value

partload- partload      - load binary file from a partition

ping    - send ICMP ECHO_REQUEST to network host
reset   - Perform RESET of the CPU
run     - run commands in an environment variable
saveenv - save environment variables to persistent storage
setenv  - set environment variables
show_hello-      - hello world

showlogo- showlogo   - show the logo picture on screen.

startgx - startgx   - open graphics layer.
        - startgx [layer addr stride x y w h]

startvl - startvl   - open video layer.
        - startvl [layer addr stride x y w h]

startvo - startvo   - open interface of vo device.
        - startvo [dev type sync]
stopgx  - stopgx   - close graphics layer.
        - stopgx [layer]
stopvl  - stopvl   - close video layer.
        - stopvl [layer]
stopvo  - stopvo   - close interface of vo device.
        - stopvo [dev]
version - print monitor version
vobgset - setvobg   - set vo backgroud color.
        - setvobg [dev color]
xhprint -      - hello world

xhprintenv- print environment variables
hisilicon # xhprintenv
hisilicon #
 
  • Like
Reactions: looney2ns