HikVision Assistance

[DMN44]

Hi guys,


I need some help with 2x Hikvision DS-2CD4012F-A camera's and this seems the best place to ask.


The Background,

The above mentioned camera's were working fine and powered via a 12volt battery with a solar panel and a charge controller. They ran for a couple of weeks and then suddenly both cameras's went down.




The Issue,

Currently both camera's power on and I am able to ping then via the address 192.0.0.64. I am also able to logon via SSH on port 22 and then presented with a busybox console. No other ports seems to be open and I cannot get to any web interfaces. It seems to me that they load to the busybox section and then dont proceed to the next step, launch the firmware with the web interface?



Troubledshooting,

So far I have tried the following:
1. Resetting the camera's back to default and connect to the default IP address of 192.168.1.64 (as per the manual) on ports 80, 443, 8000, 9000. At this point connecting to IP adress 192.0.0.64 on port 22 works.
2. Tried to find the devices using the SADP software. Not found.
3. Used the Hikvision tftpserv.exe application to load the latest firmware and when that didnt work I loaded the baseline V5.2.0 firmware.
4. I used the Hiktools (05R1) on this website to change the language on the baseline firmware to english and re-applied the firmware just in case and that didnt work either.




Question,

I am not an expert with busybox or linux for that matter and I hoping that someone can provide some guidance on what they believe the next steps are or perhaps point out something I did wrong in order to assist me to get these camera's working.

 

[alastairstevenson]

You might be able to get some information or clues about the problem from the kernel log.
Depending on whether you get to a normal busybox or the psh restricted version, you can try the following commands to grab a copy:
cat /proc/kmsg
then Control-C to get out and grab the screen rollback (I'm assuming the use of PuTTY or equivalent).
or
dmesg
and grab the screen rollback.

 

[DMN44]

Hi Alastair, thank for your reply.

The command you suggested returns the following results. I don't understand it all so I am hoping you spot something.

# cat /proc/kmsg
<5>Linux version 2.6.37_DM385_IPNC_3.00.00 (luohui@ipcteam2) (gcc version 4.4.6 (crosstool-NG 1.13.2) ) #1 Mon Jul 21 13:55:51 CST 2014
<4>CPU: ARMv7 Processor [413fc082] revision 2 (ARMv7), cr=10c53c7f
<4>CPU: VIPT nonaliasing data cache, VIPT aliasing instruction cache
<4>Machine: dm385ipnc
<6>reserved size = 0 at 0x0
<4>Memory policy: ECC disabled, Data cache writeback
<6>OMAP chip is DM385 1.0
<6>SRAM: Mapped pa 0x402f1000 to va 0xfe400000 size: 0xf000
<7>On node 0 totalpages: 32768
<7>free_area_init_node: node 0, pgdat c0573340, node_mem_map c05af000
<7> Normal zone: 256 pages used for memmap
<7> Normal zone: 0 pages reserved
<7> Normal zone: 32512 pages, LIFO batch:7
<7>pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
<7>pcpu-alloc: [0] 0
<4>Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32512
<5>Kernel command line: console=ttyS0,115200n8 mem=128M ip=192.0.0.64:::255.255.255.0 eth=c0:56:e3:bd:3d:ea
<4>cpsw: kernel boot params Ethernet address: c0:56:e3:bd:3d:ea
<6>PID hash table entries: 512 (order: -1, 2048 bytes)
<6>Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
<6>Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
<6>Memory: 128MB = 128MB total
<5>Memory: 124088k/124088k available, 6984k reserved, 0K highmem
<5>Virtual kernel memory layout:
<5> vector : 0xffff0000 - 0xffff1000 ( 4 kB)
<5> fixmap : 0xfff00000 - 0xfffe0000 ( 896 kB)
<5> DMA : 0xffc00000 - 0xffe00000 ( 2 MB)
<5> vmalloc : 0xc8800000 - 0xf8000000 ( 760 MB)
<5> lowmem : 0xc0000000 - 0xc8000000 ( 128 MB)
<5> modules : 0xbf000000 - 0xc0000000 ( 16 MB)
<5> .init : 0xc0008000 - 0xc011c000 (1104 kB)
<5> .text : 0xc011c000 - 0xc053a000 (4216 kB)
<5> .data : 0xc053a000 - 0xc0573a00 ( 231 kB)
<6>SLUB: Genslabs=11, HWalign=64, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
<6>NR_IRQS:375
<6>IRQ: Found an INTC at 0xfa200000 (revision 5.0) with 128 interrupts
<6>Total of 128 interrupts on 1 active controller
<6>GPMC revision 6.0
<4>Trying to install interrupt handler for IRQ368
<4>Trying to install interrupt handler for IRQ369
<4>Trying to install interrupt handler for IRQ370
<4>Trying to install interrupt handler for IRQ371
<4>Trying to install interrupt handler for IRQ372
<4>Trying to install interrupt handler for IRQ373
<4>Trying to install interrupt handler for IRQ374
<3>Trying to install type control for IRQ375
<3>Trying to set irq flags for IRQ375
<6>OMAP clockevent source: GPTIMER1 at 20000000 Hz
<4>Console: colour dummy device 80x30
<6>Calibrating delay loop... 999.42 BogoMIPS (lpj=4997120)
<6>pid_max: default: 32768 minimum: 301
<4>Mount-cache hash table entries: 512
<6>CPU: Testing write buffer coherency: ok
<6>devtmpfs: initialized
<4>omap_voltage_early_init: voltage driver support not added
<6>regulator: core version 0.5
<6>regulator: dummy:
<6>NET: Registered protocol family 16
<3>omap_voltage_domain_lookup: Voltage driver init not yet happened.Faulting!
<4>omap_voltage_add_dev: VDD specified does not exist!
<6>OMAP GPIO hardware version 0.1
<6>OMAP GPIO hardware version 0.1
<6>OMAP GPIO hardware version 0.1
<6>OMAP GPIO hardware version 0.1
<6>omap_mux_init: Add partition: #1: core, flags: 4
<4>disable internal pulldown/pullup resistor of the sd pins
<6>PWM0 init success.
<6>PWM1 init success.
<4>bio: create slab <bio-0> at 0
<5>SCSI subsystem initialized
<4>omap2_mcspi: probe of omap2_mcspi.3 failed with error -2
<4>omap2_mcspi: probe of omap2_mcspi.4 failed with error -2
<6>usbcore: registered new interface driver usbfs
<6>usbcore: registered new interface driver hub
<6>usbcore: registered new device driver usb
<6>USBSS revision 4ea2080b
<6>omap_i2c omap_i2c.1: bus 1 rev4.0 at 100 kHz
<6>Switching to clocksource gp timer
<6>musb-hdrc: version 6.0, host, debug=0
<6>musb-hdrc musb-hdrc.0: dma type: pio
<6>MUSB controller-0 revision 4ea20800
<6>usb2phy: computed values rxcalib(15)DACs(26 12 13)
<6>usb2phy: override computed values rxcalib(15)DACs(26 12 13)
<6>usb2phy_config: musb(0) rxcalib done, rxcalib read value 6f6d596e
<7>musb-hdrc: ConfigData=0xde (UTMI-8, dyn FIFOs, bulk combine, bulk split, HB-ISO Rx, HB-ISO Tx, SoftConn)
<7>musb-hdrc: MHDRC RTL version 2.0
<7>musb-hdrc: setup fifo_mode 4
<7>musb-hdrc: 28/31 max ep, 16384/16384 memory
<6>musb-hdrc musb-hdrc.0: MUSB HDRC host driver
<6>musb-hdrc musb-hdrc.0: new USB bus registered, assigned bus number 1
<6>hub 1-0:1.0: USB hub found
<6>hub 1-0:1.0: 1 port detected
<6>musb-hdrc musb-hdrc.0: USB Host mode controller at c881e000 using PIO, IRQ 18
<7>Registered /proc/driver/musb_hdrc.0
<6>musb-hdrc musb-hdrc.1: dma type: pio
<6>MUSB controller-1 revision 4ea20800
<6>usb2phy: computed values rxcalib(15)DACs(28 12 12)
<6>usb2phy: override computed values rxcalib(15)DACs(28 12 12)
<6>usb2phy_config: musb(1) rxcalib done, rxcalib read value 6f6e5966
<7>musb-hdrc: ConfigData=0xde (UTMI-8, dyn FIFOs, bulk combine, bulk split, HB-ISO Rx, HB-ISO Tx, SoftConn)
<7>musb-hdrc: MHDRC RTL version 2.0
<7>musb-hdrc: setup fifo_mode 4
<7>musb-hdrc: 28/31 max ep, 16384/16384 memory
<6>musb-hdrc musb-hdrc.1: MUSB HDRC host driver
<6>musb-hdrc musb-hdrc.1: new USB bus registered, assigned bus number 2
<6>hub 2-0:1.0: USB hub found
<6>hub 2-0:1.0: 1 port detected
<6>musb-hdrc musb-hdrc.1: USB Host mode controller at c8822800 using PIO, IRQ 19
<7>Registered /proc/driver/musb_hdrc.1
<6>NET: Registered protocol family 2
<6>IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
<6>TCP established hash table entries: 4096 (order: 3, 32768 bytes)
<6>TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
<6>TCP: Hash tables configured (established 4096 bind 4096)
<6>TCP reno registered
<6>UDP hash table entries: 256 (order: 0, 4096 bytes)
<6>UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
<6>NET: Registered protocol family 1
<6>RPC: Registered udp transport module.
<6>RPC: Registered tcp transport module.
<6>RPC: Registered tcp NFSv4.1 backchannel transport module.
<6>PMU: registered new PMU device of type 0
<6>omap-iommu omap-iommu.0: ducati registered
<6>omap-iommu omap-iommu.1: sys registered
<6>JFFS2 version 2.2. (NAND) © 2001-2006 Red Hat, Inc.
<6>msgmni has been set to 242
<6>io scheduler noop registered
<6>io scheduler cfq registered (default)
<6>omap_uart.0: ttyS0 at MMIO 0x48020000 (irq = 72) is a OMAP UART0
<6>console [ttyS0] enabled
<6>brd: module loaded
<4>m25p80 spi1.0: found w25q128, expected m25p16
<6>m25p80 spi1.0: w25q128 (16384 Kbytes)
<5>0x000000000000-0x000000020000 : "bld"
<5>0x000000020000-0x000000030000 : "env"
<5>0x000000030000-0x000000040000 : "enc"
<5>0x000000040000-0x000000050000 : "usr"
<5>0x000000050000-0x000000350000 : "sys"
<5>0x000000350000-0x000000e60000 : "app"
<5>0x000000e60000-0x000001000000 : "cfg"
<6>davinci_mdio davinci_mdio.0: davinci mdio revision 1.6
<6>davinci_mdio davinci_mdio.0: detected phy mask fffffdff
<6>davinci_mdio.0: probed
<6>davinci_mdio davinci_mdio.0: phy[9]: device 0:09, driver unknown
<6>PPP generic driver version 2.4.2
<6>PPP Deflate Compression module registered
<6>PPP BSD Compression module registered
<6>PPP MPPE Compression module registered
<6>NET: Registered protocol family 24
<6>usbcore: registered new interface driver asix
<6>usbcore: registered new interface driver cdc_ether
<6>usbcore: registered new interface driver net1080
<6>usbcore: registered new interface driver rndis_host
<6>usbcore: registered new interface driver cdc_subset
<6>usbcore: registered new interface driver zaurus
<6>Initializing USB Mass Storage driver...
<6>usbcore: registered new interface driver usb-storage
<6>USB Mass Storage support registered.
<6>mice: PS/2 mouse device common for all mice
<6>rtc-pcf8563 1-0051: chip found, driver version 0.4.3
<6>rtc-pcf8563 1-0051: rtc core: registered rtc-pcf8563 as rtc0
<6>i2c /dev entries driver
<6>OMAP Watchdog Timer Rev 0x00: initial timeout 100 sec
<6>Netfilter messages via NETLINK v0.30.
<6>nf_conntrack version 0.5.0 (1938 buckets, 7752 max)
<6>ip_tables: (C) 2000-2006 Netfilter Core Team
<6>TCP cubic registered
<6>NET: Registered protocol family 10
<6>lo: Disabled Privacy Extensions
<6>Mobile IPv6
<6>ip6_tables: (C) 2000-2006 Netfilter Core Team
<6>IPv6 over IPv4 tunneling driver
<6>sit0: Disabled Privacy Extensions
<6>ip6tnl0: Disabled Privacy Extensions
<6>NET: Registered protocol family 17
<6>sctp: Hash tables configured (established 4096 bind 8192)
<7>sctp: sctp_init_sock(sk: c70a8000)
<6>lib80211: common routines for IEEE802.11 drivers
<7>lib80211_crypt: registered algorithm 'NULL'
<5>Registering the dns_resolver key type
<6>VFP support v0.3: implementor 41 architecture 3 part 30 variant c rev 3
<3>omap_voltage_late_init: Voltage driver support not added
<6>Power Management for TI81XX.
<6>Detected MACID=c0:56:e3:bd:3d:ea
<6>rtc-pcf8563 1-0051: setting system clock to 2016-05-02 16:47:32 UTC (1462207652)
<3>PHY 0:00 not found
<3>PHY 0:01 not found
<3>PHY 0:02 not found
<3>PHY 0:03 not found
<3>PHY 0:04 not found
<3>PHY 0:05 not found
<3>PHY 0:06 not found
<3>PHY 0:07 not found
<3>PHY 0:08 not found
<4>davinci_mdio davinci_mdio.0: resetting idled controller
<7>
<7>CPSW phy 0:09 found : id is : 0x8201
<6>ADDRCONF(NETDEV_UP): eth0: link is not ready
<4>IP-Config: Complete:
<4> device=eth0, addr=192.0.0.64, mask=255.255.255.0, gw=255.255.255.255,
<4> host=192.0.0.64, domain=, nis-domain=(none),
<4> bootserver=255.255.255.255, rootserver=255.255.255.255, rootpath=
<6>Freeing init memory: 1104K
<6>PHY: 0:09 - Link is Up - 100/Full
<6>ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
<6>base module init version-74255.
<4>hikcomm: module license 'Proprietary' taints kernel.
<4>Disabling lock debugging due to kernel taint
<0>[ kernel version: svn-80266 ]
<6>PRCM for DucatiSS is in Progress
<6>Clock is Active
<6>Tests Executed: f
<6>Tests Executed: 90
<6>DUCATI_BASE_ADDR:
<6>DUCATI_BASE_ADDR virt =0xf9020000
<6>DUCATI_BASE_ADDR:a9baf7d4
<6> PRCM for DucatiSS is Done Successfully
<6>PRCM for I2c is in Progress......
<6>done.
<6> PRCM for mailbox is in Progress
<6> mailbox Clocks are active
<6> PRCM for mailbox is Done Successfully
<6> Power Enabled.....
<6> PRCM for DSS in Progress, Please wait.....
<6> PRCM for DSS ModuleMode in Progress, Please wait.....
<6> PRCM for DSS Done Successfully.....
<6>Netra Video PLL Init is in Progress, Please wait .....
<6>Netra Video PLL Init is Done.....
<6> PRCM for OCMCRAM0 Initialization Done
<6>register cmem driver successed.
<6>IPC 3D :
<6> name:uart2,
<6>adding uart2, minor = 0
<6>Successfully insmod uart232 module!
<6>audio module: built on Jul 14 2014 at 13:18:36
<6> Reference Linux version 2.6.37
<6> File /ipcteam/luohui/data/svn/dm385/v3.0/misc/modules/audio/audio.c
<5>adding device /dev/dsp
<5>select audio codec [ak4954]
<6><ak4954_probe>audio codec's ID = 0
<4>write ak4954 0x00:0x00
<4>write ak4954 0x00:0xc7
<4>write ak4954 0x01:0x3c
<4>write ak4954 0x02:0x04
<4>write ak4954 0x03:0x00
<4>write ak4954 0x04:0x34
<4>write ak4954 0x05:0x53
<4>write ak4954 0x06:0x00
<4>write ak4954 0x07:0x04
<4>write ak4954 0x08:0x00
<4>write ak4954 0x09:0x3a
<4>write ak4954 0x0a:0x40
<4>write ak4954 0x0b:0x00
<4>write ak4954 0x0c:0xf1
<4>write ak4954 0x0d:0xc1
<4>write ak4954 0x0e:0x9e
<4>write ak4954 0x0f:0x00
<4>write ak4954 0x10:0x00
<4>write ak4954 0x11:0x00
<4>write ak4954 0x12:0x00
<4>write ak4954 0x13:0x0c
<4>write ak4954 0x14:0x0c
<4>write ak4954 0x15:0x00
<4>write ak4954 0x16:0x00
<4>write ak4954 0x17:0x00
<4>write ak4954 0x18:0x00
<4>write ak4954 0x19:0x00
<4>write ak4954 0x1a:0x00
<4>write ak4954 0x1b:0x07
<4>write ak4954 0x1c:0x03
<4>write ak4954 0x1d:0x03
<4>write ak4954 0x1e:0x9d
<4>write ak4954 0x1f:0x1c
<4>write ak4954 0x20:0xc6
<4>write ak4954 0x21:0x26
<4>write ak4954 0x22:0xb4
<4>write ak4954 0x23:0x1f
<4>write ak4954 0x24:0x67
<4>write ak4954 0x25:0x1f
<4>write ak4954 0x26:0x0a
<4>write ak4954 0x27:0x90
<4>write ak4954 0x28:0x00
<4>write ak4954 0x29:0x20
<4>write ak4954 0x2a:0xed
<4>write ak4954 0x2b:0x1f
<4>write ak4954 0x2c:0x00
<4>write ak4954 0x2d:0x00
<4>write ak4954 0x2e:0xed
<4>write ak4954 0x2f:0x1f
<4>write ak4954 0x30:0x00
<4>write ak4954 0x31:0x00
<4>write ak4954 0x32:0x00
<4>write ak4954 0x33:0x00
<4>write ak4954 0x34:0xab
<4>write ak4954 0x35:0xc4
<4>write ak4954 0x36:0xab
<4>write ak4954 0x37:0xe4
<4>write ak4954 0x38:0x00
<4>write ak4954 0x39:0x00
<4>write ak4954 0x3a:0x0c
<4>write ak4954 0x3b:0xd6
<4>write ak4954 0x3c:0xab
<4>write ak4954 0x3d:0xe4
<4>write ak4954 0x3e:0x00
<4>write ak4954 0x3f:0x00
<4>write ak4954 0x40:0xf4
<4>write ak4954 0x41:0x29
<4>write ak4954 0x42:0xab
<4>write ak4954 0x43:0xe4
<4>write ak4954 0x44:0x00
<4>write ak4954 0x45:0x00
<4>write ak4954 0x46:0x00
<4>write ak4954 0x47:0x00
<4>write ak4954 0x48:0xab
<4>write ak4954 0x49:0xe4
<4>write ak4954 0x4a:0x00
<4>write ak4954 0x4b:0x00
<4>write ak4954 0x4c:0xf4
<4>write ak4954 0x4d:0x29
<4>write ak4954 0x4e:0xab
<4>write ak4954 0x4f:0xe4
<4>write ak4954 0x50:0x00
<4>write ak4954 0x51:0x00
<4>write ak4954 0x52:0x11
<4>write ak4954 0x53:0x90
<4>write ak4954 0x54:0x8a
<4>write ak4954 0x55:0x07
<4>write ak4954 0x56:0xc3
<4>write ak4954 0x57:0x06
<4>write ak4954 0x58:0x86
<4>write ak4954 0x59:0x2d
<4>write ak4954 0x5a:0xb0
<4>write ak4954 0x5b:0x1f
<4>write ak4954 0x5c:0x9f
<4>write ak4954 0x5d:0x20
<4>write ak4954 0x5e:0x00
<4>write ak4954 0x5f:0x00
<4>write ak4954 0x60:0x00
<4>write ak4954 0x61:0x6f
<4>write ak4954 0x62:0x18
<4>write ak4954 0x63:0x0c
<4>write ak4954 0x64:0x10
<4>write ak4954 0x65:0x09
<4>write ak4954 0x66:0x08
<4>write ak4954 0x67:0x08
<4>write ak4954 0x68:0x7f
<4>write ak4954 0x69:0x1d
<4>write ak4954 0x6a:0x03
<4>write ak4954 0x6b:0x00
<4>write ak4954 0x6c:0x18
<4>write ak4954 0x6d:0x0c
<4>write ak4954 0x6e:0x10
<4>write ak4954 0x6f:0x06
<4>write ak4954 0x70:0x08
<4>write ak4954 0x71:0x04
<4>write ak4954 0x72:0x7f
<4>write ak4954 0x73:0x4e
<4>write ak4954 0x74:0x0c
<4>write ak4954 0x75:0x00
<4>write ak4954 0x76:0x1c
<4>write ak4954 0x77:0x10
<4>write ak4954 0x78:0x10
<4>write ak4954 0x79:0x0c
<4>write ak4954 0x7a:0x08
<4>write ak4954 0x7b:0x09
<4>write ak4954 0x7c:0x7f
<4>write ak4954 0x7d:0x12
<4>write ak4954 0x7e:0x07
<4>write ak4954 0x7f:0x01
<4>write ak4954 0x80:0x36
<4>write ak4954 0x81:0x01
<4>write ak4954 0x82:0x6b
<4>write ak4954 0x83:0x22
<4>write ak4954 0x84:0xb0
<4>write ak4954 0x85:0x1f
<4>write ak4954 0x86:0x9f
<4>write ak4954 0x87:0x20
<4>write ak4954 0x88:0x5f
<4>write ak4954 0x89:0x09
<4>write ak4954 0x8a:0xbf
<4>write ak4954 0x8b:0x32
<4>write ak4954 0x8c:0x22
<4>write ak4954 0x8d:0x1d
<4>write ak4954 0x8e:0xbd
<4>write ak4954 0x8f:0x25
<5>audio codec AK4954 initialized!
<5>audio codec AK4954 init
<7>lib80211_crypt: registered algorithm 'CCMP'
<7>lib80211_crypt: registered algorithm 'TKIP'
<7>lib80211_crypt: registered algorithm 'WEP'
<6>AK4954:set input volum 50
<6>ipc_stop_cpu procid is 1
<6>ipc_stop_cpu procid is 0
<6>boot addr is 0x88017d41
<6>block1: phys=0x00000000,size=60 download
<6>block2: phys=0x00003800,size=4756 download
<6>block3: phys=0x88000000,size=108388 download
<6>block4: phys=0x8801a768,size=7276 download
<6>block5: phys=0x88418ed0,size=558532 download
<6>block6: phys=0x884ade44,size=512 download
<6>pgctrl=0x88017d41
<6>rstctrl_reg=0x0000000f
<6>M3_vid is in Progress, Please wait.....
<6>done.
<7>eth0: no IPv6 routers present

 

[alastairstevenson]

With the proviso that I'm not familiar with the Hikvision DS-2CD4012F-A camera - so far, so normal, as far as I can see.
I didn't see any significant hardware errors in that kernel log.

What's not showing though are the 'application' startup messages, the lack of successful execution of which are presumably why there is no high-level facilities being offered by the camera.
A couple of things to suggest:
Just check if 'dmesg' gives any or any more information.
If you are sure the camera is not Chinese region, it looks to me like the firmware published here may be for your model : http://www.hikvisioneurope.com/portal/index.php?dir=Product Firmware/Cameras/DS-2CD4XX2,4XX4,6412FWD/
A firmware refresh, using the tftp updater method as the only one available, might yield a result.

Beyond that, unless you have a warranty source you can pull on, we're into more detailed and techy fault-finding that would not really be practical via web postings.

What I'd do next is to :
Find the app startup script, likely to be an 'initrun.sh', and check out the app startup commands.
It might be able to be found with 'find / -name *.sh -print' at which point 'cat full_filename_found' would show what's in it and explore from there. But I'm going to refrain from suggesting any speculative commands.