Hikvision - Clearing Passwords and/or Loading Firmware via TTL Serial

And if the secondary partition has no files to copy over - then maybe jump in the deep end and try the 'update' command at the bootloader.
 
I having difficulty entering these commands. See attached.

Code: 
U-Boot 1.3.4-71557 (Apr  3 2014 - 13:08:34)

ARM Clock: 480MHz
DDR Clock: 336MHz
Hit Ctrl+u to stop autoboot: 2

U-Boot 1.3.4-71557 (Apr  3 2014 - 13:08:34)

ARM Clock: 480MHz
DDR Clock: 336MHz
Hit Ctrl+u to stop autoboot: 0
|RCV UDP pack timeout|
Unknown command:null
nand booting ...
load kernel...
load ramdisk...
[    0.000000] Linux version 2.6.38.8 (chenyuanming@Cpl-Frt-BSP) (gcc version 4.6.1 (Sourcery CodeBench Lite 2011.09-70) )
[    0.000000] #1 PREEMPT Fri Jan 13 20:56:52 CST 2017
[    0.000000] CPU: ARMv6-compatible processor [4117b365] revision 5 (ARMv6TEJ), cr=00c5387f
[    0.000000] CPU: VIPT nonaliasing data cache, VIPT nonaliasing instruction cache
[    0.000000] Machine: Coconut
[    0.000000] Memory policy: ECC disabled, Data cache writeback
[    0.000000] Ambarella: AHB   = 0x60000000[0xf0000000],0x01000000 0
[    0.000000] Ambarella: APB   = 0x70000000[0xf1000000],0x01000000 0
[    0.000000] Ambarella: PPM   = 0xc0000000[0xe0000000],0x00200000 9
[    0.000000] Ambarella: BSB   = 0xc8c00000[0xe8c00000],0x00400000 9
[    0.000000] Ambarella: DSP   = 0xc9000000[0xe9000000],0x07000000 9
[    0.000000] Ambarella: HAL   = 0xc00a0000[0xfee00000],0x0000e708 9
[    0.000000] On node 0 totalpages: 25344
[    0.000000] free_area_init_node: node 0, pgdat c055cf68, node_mem_map c0583000
[    0.000000]   Normal zone: 198 pages used for memmap
[    0.000000]   Normal zone: 0 pages reserved
[    0.000000]   Normal zone: 25146 pages, LIFO batch:7
[    0.000000] bootmem_init: high_memory = 0xc8a00000
[    0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
[    0.000000] pcpu-alloc: [0] 0
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 25146
[    0.000000] Kernel command line: console=ttyS0 initrd=0xc0a00000,0x400000 rw root=/dev/ram dbg=9 debug single KRN_PRT=pri RMD_PRT=pri reserved=0xc6500000,0x100000,99 video=amb0fb:720x480,720x480,1,0
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Memory: 99MB = 99MB total
[    0.000000] Memory: 90680k/90680k available, 10696k reserved, 0K highmem
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xfff00000 - 0xfffe0000   ( 896 kB)
[    0.000000]     DMA     : 0xfe600000 - 0xfee00000   (   8 MB)
[    0.000000]     vmalloc : 0xc9000000 - 0xe0000000   ( 368 MB)
[    0.000000]     lowmem  : 0xc0000000 - 0xc8a00000   ( 138 MB)
[    0.000000]     modules : 0xbf000000 - 0xc0000000   (  16 MB)
[    0.000000]       .init : 0xc0008000 - 0xc002d000   ( 148 kB)
[    0.000000]       .text : 0xc002d000 - 0xc052a000   (5108 kB)
[    0.000000]       .data : 0xc052a000 - 0xc055d620   ( 206 kB)
[    0.000000] Preemptable hierarchical RCU implementation.
[    0.000000]  RCU-based detection of stalled CPUs is disabled.
[    0.000000]  Verbose stalled-CPUs detection is disabled.
[    0.000000] NR_IRQS:224
[    0.000000] sched_clock: 32 bits at 72MHz, resolution 13ns, wraps every 59652ms
[    0.000000] sched_clock: wrong multiply/shift: 1864135111>>27 vs calculated 3728270222>>28
[    0.000000] sched_clock: fix multiply/shift to avoid scheduler hiccups
[    0.000000] Console: colour dummy device 80x30
[    0.000000] console [ttyS0] enabled
[    0.274167] Calibrating delay loop... 525.92 BogoMIPS (lpj=2629632)
[    0.532825] pid_max: default: 32768 minimum: 301
[    0.537829] Mount-cache hash table entries: 512
[    0.543167] CPU: Testing write buffer coherency: ok
[    0.554545] NET: Registered protocol family 16
[    0.569480] Ambarella Coconut:
[    0.572793]  chip id:                5100
[    0.575601]  board type:             3
[    0.578398]  board revision:         10
[    0.581771]  chip name:              a5m
[    0.584666]  HAL version:            176869
[    0.587986]  reference clock:        24000000
[    0.591818]  system configuration:   0x177804ea
[    0.596186]  boot type:              0x00000002
[    0.599674]  hif type:               0x00000000
[    0.628989] bio: create slab <bio-0> at 0
[    0.635664] ambarella-spi ambarella-spi.0: ambarella SPI Controller 0 created
[    0.653172] ambarella-i2c ambarella-i2c.0: Ambarella Media Processor I2C adapter[i2c-0] probed!
[    0.663562] ambarella-i2c ambarella-i2c.1: Ambarella Media Processor I2C adapter[i2c-1] probed!
[    0.673766] i2c i2c-0: Added multiplexed i2c bus 2
[    0.678587] ambarella-i2cmux ambarella-i2cmux.0: mux on ambarella-i2c adapter
[    0.688604] Advanced Linux Sound Architecture Driver Version 1.0.23.
[    0.698667] cfg80211: Calling CRDA to update world regulatory domain
[    0.706520] Switching to clocksource ambarella-cs-timer
[    0.720184] Switched to NOHz mode on CPU #0
[    0.776805] NET: Registered protocol family 2
[    0.781497] IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.789620] TCP established hash table entries: 4096 (order: 3, 32768 bytes)
[    0.797048] TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
[    0.803704] TCP: Hash tables configured (established 4096 bind 4096)
[    0.810073] TCP reno registered
[    0.813314] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.819183] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.826144] NET: Registered protocol family 1
[    0.831259] RPC: Registered udp transport module.
[    0.836132] RPC: Registered tcp transport module.
[    0.840854] RPC: Registered tcp NFSv4.1 backchannel transport module.
[    0.847822] Trying to unpack rootfs image as initramfs...
[    0.855625] rootfs image is not initramfs (no cpio magic); looks like an initrd
[    0.895911] Freeing initrd memory: 4096K
[    0.912750] msgmni has been set to 185
[    0.925444] alg: No test for stdrng (krng)
[    0.929687] io scheduler noop registered
[    0.933916] io scheduler deadline registered
[    0.938362] io scheduler cfq registered (default)
[    0.946726] ambarella-fb ambarella-fb.0: probe p[720x480] v[720x576] c[1] b[0] l[736] @ [0xc5980000:0x00068000]!
[    0.958829] ambarella-uart.0: ttyS0 at MMIO 0x70005000 (irq = 9) is a ambuart
[    1.005350] brd: module loaded
[    1.022065] loop: module loaded
[    1.028512] NAND device: Manufacturer ID: 0x01, Chip ID: 0xf1 (AMD NAND 128MiB 3,3V 8-bit)
[    1.037136] ambarella_nand_config_flash: 0x02e00140, 0x02c00140
[    1.043603] Bad block table found at page 65472, version 0x01
[    1.049828] Bad block table found at page 65408, version 0x01
[    1.055968] nand_read_bbt: Bad block at 0x0000008a0000
[    1.061140] nand_read_bbt: Bad block at 0x000002a00000
[    1.066388] nand_read_bbt: Bad block at 0x000004da0000
[    1.071546] nand_read_bbt: Bad block at 0x000006960000
[    1.083285] ambarella-nand ambarella-nand: ambarella_nand_probe: Partition infomation found!
[    1.091775] Creating 18 MTD partitions on "ambnand":
[    1.096843] 0x000000000000-0x000000020000 : "bst"
[    1.105430] 0x000000020000-0x000000120000 : "ptb"
[    1.113835] 0x000000120000-0x000000220000 : "bld"
[    1.122185] 0x000000220000-0x000000320000 : "hal"
[    1.130746] 0x000000320000-0x000000420000 : "ano_ptb"
[    1.139724] 0x000000420000-0x0000004a0000 : "env"
[    1.148399] 0x0000004a0000-0x000000520000 : "param"
[    1.157265] 0x000000520000-0x000000620000 : "dpt"
[    1.166038] 0x000000620000-0x000001020000 : "rcvy"
[    1.174906] 0x000001020000-0x000001820000 : "krn_pri"
[    1.183894] 0x000001820000-0x000002020000 : "krn_sec"
[    1.192791] 0x000002020000-0x000002420000 : "rmd_pri"
[    1.201635] 0x000002420000-0x000002820000 : "rmd_sec"
[    1.210698] 0x000002820000-0x000004020000 : "app_pri"
[    1.219839] 0x000004020000-0x000005820000 : "app_sec"
[    1.229097] 0x000005820000-0x000005c20000 : "cfg_pri"
[    1.238296] 0x000005c20000-0x000006020000 : "cfg_sec"
[    1.247580] 0x000006020000-0x000007020000 : "dbg"
[    1.263114] PPP generic driver version 2.4.2
[    1.268745] PPP Deflate Compression module registered
[    1.274157] PPP BSD Compression module registered
[    1.468777] Ambarella MII Bus: probed
[    1.474130] ambarella-eth ambarella-eth.0: MAC Address[44:19:b6:30:02:23].
[    1.481746] console [netcon0] enabled
[    1.485591] netconsole: network logging started
[    1.491595] mousedev: PS/2 mouse device common for all mice
[    1.498368] input: AmbInput as /devices/virtual/input/input0
[    1.505173] ambarella_gpio_irq_set_wake: irq[75] = girq[11] = 1
[    1.511119] ambarella-input ambarella-input: AmbInput probed!
[    1.517980] ambarella-adc ambarella-adc: ADC Host Controller [polling mode] probed!
[    1.527389] ambarella-rtc ambarella-rtc: rtc core: registered ambarella-rtc as rtc0
[    1.535761] i2c /dev entries driver
[    1.543932] ambarella-wdt ambarella-wdt: Ambarella Media Processor Watch Dog Timer[ambarella-wdt].
[    1.559360] ALSA device list:
[    1.562603]   No soundcards found.
[    1.566176] Netfilter messages via NETLINK v0.30.
[    1.571034] nf_conntrack version 0.5.0 (1480 buckets, 5920 max)
[    1.577843] ip_tables: (C) 2000-2006 Netfilter Core Team
[    1.583467] TCP cubic registered
[    1.587105] NET: Registered protocol family 10
[    1.594097] Mobile IPv6
[    1.596669] ip6_tables: (C) 2000-2006 Netfilter Core Team
[    1.602440] IPv6 over IPv4 tunneling driver
[    1.610231] NET: Registered protocol family 17
[    1.615596] sctp: Hash tables configured (established 4096 bind 8192)
[    1.622523] sctp: sctp_init_sock(sk: c58b2b20)
[    1.627103] lib80211: common routines for IEEE802.11 drivers
[    1.632902] lib80211_crypt: registered algorithm 'NULL'
[    1.641995] ambarella-rtc ambarella-rtc: setting system clock to 2004-01-15 11:11:53 UTC (1074165113)
[    1.652447] RAMDISK: gzip image found at block 0
[    2.523031] VFS: Mounted root (ext2 filesystem) on device 1:0.
[    2.529061] Freeing init memory: 148K
init started: BusyBox v1.19.3 (2017-01-13 20:51:32 CST)
starting pid 376, tty '': '-/bin/sh'


BusyBox v1.19.3 (2017-01-13 20:51:32 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

# mkdir /dav2
# /usr/sbin/ubiattach -m 14 -d 2 /dev/ubi_ctrl
ubiattach: error!: UBI is not present in the system
# /usr/sbin/ubiattach -m 14 -d 2 /dev/ubi_ctrl
ubiattach: error!: UBI is not present in the system
# /bin/mount -t ubifs /dev/ubi2_0 /dav2
mount: mounting /dev/ubi2_0 on /dav2 failed: Invalid argument

alastairstevenson said:
OK - here we go.
At the root shell where you last entered those commands :

mkdir /dav2
/usr/sbin/ubiattach -m 14 -d 2 /dev/ubi_ctrl
/bin/mount -t ubifs /dev/ubi2_0 /dav2
ls -al /dav2

And if that last command lists a couple of dozen files, they can be copied over to the primary partition -

cp /dav2/* /dav
/bin/umount /dav2
/usr/sbin/ubidetach /dev/ubi_ctrl -d 2

reboot
Click to expand...
 
OK. I've done the "Update" command. I didn't seee any erros: When I unplug and plug the ethernet back in, below is the results:

PS: I used the EN version in the brickfixV2EN.dav and renamed it to digicap.dav and then executed Update command

When I enter help, I can now see prtHardInfo, but when I enter it I get an error:

Code: 
cmd_exec: exec prtHardInfo error.



Code: 
U-Boot 1.3.4-71557 (Apr  3 2014 - 13:08:34)
ARM Clock: 480MHz
DDR Clock: 336MHz
Hit Ctrl+u to stop autoboot: 0
|RCV UDP pack timeout|
Unknown command:null
nand booting ...
load kernel...
load ramdisk...
[    0.000000] Linux version 2.6.38.8 (chenyuanming@Cpl-Frt-BSP) (gcc version 4.6.1 (Sourcery CodeBench Lite 2011.09-70) )
[    0.000000] #18 PREEMPT Thu Jan 21 17:27:08 CST 2016
[    0.000000] CPU: ARMv6-compatible processor [4117b365] revision 5 (ARMv6TEJ), cr=00c5387f
[    0.000000] CPU: VIPT nonaliasing data cache, VIPT nonaliasing instruction cache
[    0.000000] Machine: Coconut
[    0.000000] Memory policy: ECC disabled, Data cache writeback
[    0.000000] Ambarella: AHB   = 0x60000000[0xf0000000],0x01000000 0
[    0.000000] Ambarella: APB   = 0x70000000[0xf1000000],0x01000000 0
[    0.000000] Ambarella: PPM   = 0xc0000000[0xe0000000],0x00200000 9
[    0.000000] Ambarella: BSB   = 0xc8c00000[0xe8c00000],0x00400000 9
[    0.000000] Ambarella: DSP   = 0xc9000000[0xe9000000],0x07000000 9
[    0.000000] Ambarella: HAL   = 0xc00a0000[0xfee00000],0x0000e708 9
[    0.000000] On node 0 totalpages: 25344
[    0.000000] free_area_init_node: node 0, pgdat c0563180, node_mem_map c0589000
[    0.000000]   Normal zone: 198 pages used for memmap
[    0.000000]   Normal zone: 0 pages reserved
[    0.000000]   Normal zone: 25146 pages, LIFO batch:7
[    0.000000] bootmem_init: high_memory = 0xc8a00000
[    0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
[    0.000000] pcpu-alloc: [0] 0
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 25146
[    0.000000] Kernel command line: console=ttyS0 initrd=0xc0a00000,0x400000 rw root=/dev/ram dbg=0 KRN_PRT=pri RMD_PRT=pri reserved=0xc6500000,0x100000,99 video=amb0fb:720x480,720x480,1,0
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Memory: 99MB = 99MB total
[    0.000000] Memory: 90656k/90656k available, 10720k reserved, 0K highmem
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xfff00000 - 0xfffe0000   ( 896 kB)
[    0.000000]     DMA     : 0xfe600000 - 0xfee00000   (   8 MB)
[    0.000000]     vmalloc : 0xc9000000 - 0xe0000000   ( 368 MB)
[    0.000000]     lowmem  : 0xc0000000 - 0xc8a00000   ( 138 MB)
[    0.000000]     modules : 0xbf000000 - 0xc0000000   (  16 MB)
[    0.000000]       .init : 0xc0008000 - 0xc002d000   ( 148 kB)
[    0.000000]       .text : 0xc002d000 - 0xc052f000   (5128 kB)
[    0.000000]       .data : 0xc0530000 - 0xc0563820   ( 207 kB)
[    0.000000] Preemptable hierarchical RCU implementation.
[    0.000000]  RCU-based detection of stalled CPUs is disabled.
[    0.000000]  Verbose stalled-CPUs detection is disabled.
[    0.000000] NR_IRQS:224
[    0.000000] sched_clock: 32 bits at 72MHz, resolution 13ns, wraps every 59652ms
[    0.000000] sched_clock: wrong multiply/shift: 1864135111>>27 vs calculated 3728270222>>28
[    0.000000] sched_clock: fix multiply/shift to avoid scheduler hiccups
[    0.000000] Console: colour dummy device 80x30
[    0.000000] console [ttyS0] enabled
[    0.273333] Calibrating delay loop... 525.92 BogoMIPS (lpj=2629632)
[    0.532817] pid_max: default: 32768 minimum: 301
[    0.537820] Mount-cache hash table entries: 512
[    0.543137] CPU: Testing write buffer coherency: ok
[    0.554563] NET: Registered protocol family 16
[    0.569478] Ambarella Coconut:
[    0.572778]  chip id:                5100
[    0.575584]  board type:             3
[    0.578380]  board revision:         10
[    0.581755]  chip name:              a5m
[    0.584650]  HAL version:            176869
[    0.587970]  reference clock:        24000000
[    0.591795]  system configuration:   0x177804ea
[    0.596162]  boot type:              0x00000002
[    0.599650]  hif type:               0x00000000
[    0.628871] bio: create slab <bio-0> at 0
[    0.635552] ambarella-spi ambarella-spi.0: ambarella SPI Controller 0 created
[    0.652991] ambarella-i2c ambarella-i2c.0: Ambarella Media Processor I2C adapter[i2c-0] probed!
[    0.663391] ambarella-i2c ambarella-i2c.1: Ambarella Media Processor I2C adapter[i2c-1] probed!
[    0.673584] i2c i2c-0: Added multiplexed i2c bus 2
[    0.678400] ambarella-i2cmux ambarella-i2cmux.0: mux on ambarella-i2c adapter
[    0.688412] Advanced Linux Sound Architecture Driver Version 1.0.23.
[    0.698493] cfg80211: Calling CRDA to update world regulatory domain
[    0.706348] Switching to clocksource ambarella-cs-timer
[    0.720181] Switched to NOHz mode on CPU #0
[    0.776392] NET: Registered protocol family 2
[    0.781089] IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.789207] TCP established hash table entries: 4096 (order: 3, 32768 bytes)
[    0.796636] TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
[    0.803288] TCP: Hash tables configured (established 4096 bind 4096)
[    0.809658] TCP reno registered
[    0.812906] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.818778] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.825726] NET: Registered protocol family 1
[    0.830830] RPC: Registered udp transport module.
[    0.835710] RPC: Registered tcp transport module.
[    0.840430] RPC: Registered tcp NFSv4.1 backchannel transport module.
[    0.847412] Trying to unpack rootfs image as initramfs...
[    0.855256] rootfs image is not initramfs (no cpio magic); looks like an initrd
[    0.895632] Freeing initrd memory: 4096K
[    0.902469] [ kernel version:  svn-174544 ]
[    0.906739] mmc0 power register success!
[    0.910686] mmc1 power register success!
[    0.914990] reboot times :1
[    0.943311] msgmni has been set to 185
[    0.955970] alg: No test for stdrng (krng)
[    0.960218] io scheduler noop registered
[    0.964434] io scheduler deadline registered
[    0.968877] io scheduler cfq registered (default)
[    0.977211] ambarella-fb ambarella-fb.0: probe p[720x480] v[720x576] c[1] b[0] l[736] @ [0xc5980000:0x00068000]!
[    0.989280] ambarella-uart.0: ttyS0 at MMIO 0x70005000 (irq = 9) is a ambuart
[    1.035168] brd: module loaded
[    1.051889] loop: module loaded
[    1.058378] NAND device: Manufacturer ID: 0x01, Chip ID: 0xf1 (AMD NAND 128MiB 3,3V 8-bit)
[    1.067000] ambarella_nand_config_flash: 0x02e00140, 0x02c00140
[    1.073448] Bad block table found at page 65472, version 0x01
[    1.079668] Bad block table found at page 65408, version 0x01
[    1.085813] nand_read_bbt: Bad block at 0x0000008a0000
[    1.090980] nand_read_bbt: Bad block at 0x000002a00000
[    1.096226] nand_read_bbt: Bad block at 0x000004da0000
[    1.101385] nand_read_bbt: Bad block at 0x000006960000
[    1.112966] ambarella-nand ambarella-nand: ambarella_nand_probe: Partition infomation found!
[    1.121460] Creating 18 MTD partitions on "ambnand":
[    1.126534] 0x000000000000-0x000000020000 : "bst"
[    1.135084] 0x000000020000-0x000000120000 : "ptb"
[    1.143472] 0x000000120000-0x000000220000 : "bld"
[    1.151831] 0x000000220000-0x000000320000 : "hal"
[    1.160410] 0x000000320000-0x000000420000 : "ano_ptb"
[    1.169376] 0x000000420000-0x0000004a0000 : "env"
[    1.178069] 0x0000004a0000-0x000000520000 : "param"
[    1.186973] 0x000000520000-0x000000620000 : "dpt"
[    1.195710] 0x000000620000-0x000001020000 : "rcvy"
[    1.204598] 0x000001020000-0x000001820000 : "krn_pri"
[    1.213510] 0x000001820000-0x000002020000 : "krn_sec"
[    1.222503] 0x000002020000-0x000002420000 : "rmd_pri"
[    1.231293] 0x000002420000-0x000002820000 : "rmd_sec"
[    1.240382] 0x000002820000-0x000004020000 : "app_pri"
[    1.249512] 0x000004020000-0x000005820000 : "app_sec"
[    1.258776] 0x000005820000-0x000005c20000 : "cfg_pri"
[    1.267967] 0x000005c20000-0x000006020000 : "cfg_sec"
[    1.277294] 0x000006020000-0x000007020000 : "dbg"
[    1.292788] PPP generic driver version 2.4.2
[    1.298383] PPP Deflate Compression module registered
[    1.303786] PPP BSD Compression module registered
[    1.498620] Ambarella MII Bus: probed
[    1.503973] ambarella-eth ambarella-eth.0: MAC Address[44:19:b6:30:02:23].
[    1.511579] console [netcon0] enabled
[    1.515423] netconsole: network logging started
[    1.521487] mousedev: PS/2 mouse device common for all mice
[    1.528216] input: AmbInput as /devices/virtual/input/input0
[    1.535004] ambarella_gpio_irq_set_wake: irq[75] = girq[11] = 1
[    1.540952] ambarella-input ambarella-input: AmbInput probed!
[    1.547812] ambarella-adc ambarella-adc: ADC Host Controller [polling mode] probed!
[    1.557201] ambarella-rtc ambarella-rtc: rtc core: registered ambarella-rtc as rtc0
[    1.565556] i2c /dev entries driver
[    1.573783] ambarella-wdt ambarella-wdt: Ambarella Media Processor Watch Dog Timer[ambarella-wdt].
[    1.589178] ALSA device list:
[    1.592406]   No soundcards found.
[    1.595984] Netfilter messages via NETLINK v0.30.
[    1.600845] nf_conntrack version 0.5.0 (1480 buckets, 5920 max)
[    1.607616] ip_tables: (C) 2000-2006 Netfilter Core Team
[    1.613222] TCP cubic registered
[    1.616852] NET: Registered protocol family 10
[    1.623867] Mobile IPv6
[    1.626431] ip6_tables: (C) 2000-2006 Netfilter Core Team
[    1.632056] IPv6 over IPv4 tunneling driver
[    1.639945] NET: Registered protocol family 17
[    1.645299] sctp: Hash tables configured (established 4096 bind 8192)
[    1.652077] sctp: sctp_init_sock(sk: c58a9b20)
[    1.656765] lib80211: common routines for IEEE802.11 drivers
[    1.662552] lib80211_crypt: registered algorithm 'NULL'
[    1.671640] ambarella-rtc ambarella-rtc: setting system clock to 2004-01-15 12:04:29 UTC (1074168269)
[    1.681834] RAMDISK: gzip image found at block 0
[    2.551563] VFS: Mounted root (ext2 filesystem) on device 1:0.
[    2.557710] Freeing init memory: 148K
init started: BusyBox v1.19.3 (2016-05-23 16:23:55 CST)
starting pid 378, tty '': '/etc/init.d/rcS'
Starting udev:      [ OK ]
[    4.474467] UBI: attaching mtd13 to ubi1
[    4.478420] UBI: physical eraseblock size:   131072 bytes (128 KiB)
[    4.484806] UBI: logical eraseblock size:    129024 bytes
[    4.490215] UBI: smallest flash I/O unit:    2048
[    4.494994] UBI: sub-page size:              512
[    4.499620] UBI: VID header offset:          512 (aligned 512)
[    4.505506] UBI: data offset:                2048
[    4.566468] UBI: max. sequence number:       4104
[    4.592262] UBI: attached mtd13 to ubi1
[    4.596116] UBI: MTD device name:            "app_pri"
[    4.601258] UBI: MTD device size:            24 MiB
[    4.617677] UBI: number of good PEBs:        191
[    4.622517] UBI: number of bad PEBs:         1
[    4.626975] UBI: number of corrupted PEBs:   0
[    4.631418] UBI: max. allowed volumes:       128
[    4.636155] UBI: wear-leveling threshold:    4096
[    4.640866] UBI: number of internal volumes: 1
[    4.645386] UBI: number of user volumes:     1
[    4.649836] UBI: available PEBs:             0
[    4.654343] UBI: total number of reserved PEBs: 191
[    4.659232] UBI: number of PEBs reserved for bad PEB handling: 2
[    4.665288] UBI: max/mean erase counter: 153/134
[    4.669908] UBI: image sequence number:  536022130
[    4.674786] UBI: background thread "ubi_bgt1d" started, PID 628
UBI device number 1, total 191 LEBs (24643584 bytes, 23.5 MiB), available 0 LEBs (0 bytes), LEB size 129024 bytes (126.0 KiB)
waiting for /dev/ubi1_0.
[    4.749571] UBIFS: recovery needed
[    4.792269] UBIFS: recovery completed
[    4.796134] UBIFS: mounted UBI device 1, volume 0, name "app_pri"
[    4.802441] UBIFS: file system size:   22708224 bytes (22176 KiB, 21 MiB, 176 LEBs)
[    4.810118] UBIFS: journal size:       1161216 bytes (1134 KiB, 1 MiB, 9 LEBs)
[    4.817426] UBIFS: media format:       w4/r0 (latest is w4/r0)
[    4.823377] UBIFS: default compressor: lzo
[    4.827490] UBIFS: reserved for root:  1072565 bytes (1047 KiB)
pri_iUpgSuccCnt:0x1, sec_iUpgSuccCnt:0x1
[    4.900207] UBI: attaching mtd15 to ubi3
[    4.904256] UBI: physical eraseblock size:   131072 bytes (128 KiB)
[    4.910531] UBI: logical eraseblock size:    129024 bytes
[    4.916011] UBI: smallest flash I/O unit:    2048
[    4.920722] UBI: sub-page size:              512
[    4.925403] UBI: VID header offset:          512 (aligned 512)
[    4.931243] UBI: data offset:                2048
[    4.945535] UBI: max. sequence number:       1397
[    4.973449] UBI: attached mtd15 to ubi3
[    4.977303] UBI: MTD device name:            "cfg_pri"
[    4.990761] UBI: MTD device size:            4 MiB
[    4.995678] UBI: number of good PEBs:        32
[    5.000219] UBI: number of bad PEBs:         0
[    5.004775] UBI: number of corrupted PEBs:   0
[    5.009226] UBI: max. allowed volumes:       128
[    5.013909] UBI: wear-leveling threshold:    4096
[    5.018620] UBI: number of internal volumes: 1
[    5.023121] UBI: number of user volumes:     1
[    5.027572] UBI: available PEBs:             0
[    5.032015] UBI: total number of reserved PEBs: 32
[    5.036852] UBI: number of PEBs reserved for bad PEB handling: 2
[    5.042972] UBI: max/mean erase counter: 116/107
[    5.047604] UBI: image sequence number:  164414979
[    5.052488] UBI: background thread "ubi_bgt3d" started, PID 637
UBI device number 3, total 32 LEBs (4128768 bytes, 3.9 MiB), available 0 LEBs (0 bytes), LEB size 129024 bytes (126.0 KiB)
waiting for /dev/ubi3_0.
[    5.127841] UBIFS: recovery needed
[    5.152723] UBIFS: recovery completed
[    5.156611] UBIFS: mounted UBI device 3, volume 0, name "cfg_pri"
[    5.162919] UBIFS: file system size:   2193408 bytes (2142 KiB, 2 MiB, 17 LEBs)
[    5.170242] UBIFS: journal size:       1032193 bytes (1008 KiB, 0 MiB, 6 LEBs)
[    5.177554] UBIFS: media format:       w4/r0 (latest is w4/r0)
[    5.183465] UBIFS: default compressor: lzo
[    5.187573] UBIFS: reserved for root:  103599 bytes (101 KiB)
Check dir /davinci ok! (0)
[    5.236961] UBI: attaching mtd16 to ubi4
[    5.240913] UBI: physical eraseblock size:   131072 bytes (128 KiB)
[    5.247300] UBI: logical eraseblock size:    129024 bytes
[    5.252779] UBI: smallest flash I/O unit:    2048
[    5.257491] UBI: sub-page size:              512
[    5.262238] UBI: VID header offset:          512 (aligned 512)
[    5.268083] UBI: data offset:                2048
[    5.280883] UBI: max. sequence number:       1395
[    5.302248] UBI: attached mtd16 to ubi4
[    5.306107] UBI: MTD device name:            "cfg_sec"
[    5.311249] UBI: MTD device size:            4 MiB
[    5.331113] UBI: number of good PEBs:        32
[    5.335801] UBI: number of bad PEBs:         0
[    5.340258] UBI: number of corrupted PEBs:   0
[    5.344810] UBI: max. allowed volumes:       128
[    5.349437] UBI: wear-leveling threshold:    4096
[    5.354213] UBI: number of internal volumes: 1
[    5.358665] UBI: number of user volumes:     1
[    5.363172] UBI: available PEBs:             0
[    5.367627] UBI: total number of reserved PEBs: 32
[    5.372471] UBI: number of PEBs reserved for bad PEB handling: 2
[    5.378488] UBI: max/mean erase counter: 116/107
[    5.383153] UBI: image sequence number:  1096207250
[    5.388077] UBI: background thread "ubi_bgt4d" started, PID 647
UBI device number 4, total 32 LEBs (4128768 bytes, 3.9 MiB), available 0 LEBs (0 bytes), LEB size 129024 bytes (126.0 KiB)
waiting for /dev/ubi4_0.
[    5.463329] UBIFS: recovery needed
[    5.485722] UBIFS: recovery completed
[    5.489615] UBIFS: mounted UBI device 4, volume 0, name "cfg_sec"
[    5.495922] UBIFS: file system size:   2193408 bytes (2142 KiB, 2 MiB, 17 LEBs)
[    5.503388] UBIFS: journal size:       1032193 bytes (1008 KiB, 0 MiB, 6 LEBs)
[    5.510623] UBIFS: media format:       w4/r0 (latest is w4/r0)
[    5.516534] UBIFS: default compressor: lzo
[    5.520651] UBIFS: reserved for root:  103599 bytes (101 KiB)
Check dir /config ok! (0)
Enter bsp debug mode and exec /home/initrun.sh to continue
starting pid 657, tty '': '-/bin/psh'
BusyBox v1.2.1-171136 Protect Shell (psh)
Enter 'help' for a list of davinci system commands.
# help
Support Commands:
taskShow                        printPart                       prtHardInfo
getPreviewStatus                setIp                           setV6ip
setGateway                      dspStatus                       outputClose
outputOpen                      getDebug                        setDebug
debugLog                        getIrstate                      getMtu
camCmd                          getCamVer                       getIrstate
getLux                          getMcuInfo                      getMotion
getRawdata                      setIrcmd                        setRectFrame
updateCamera                    setLaserMode                    getLaserMode
setIrMode                       getIrMode                       setBaiguangMode
getBaiguangMode                 setYTLock                       InquireFanSwitch
StartLaser                      CloseLaser                      LaserMotReset
EnlargeCur                      ReduceCur                       SetCur
LaserMotDirect                  LaserTeleOffset                 LaserWideOffset
InqSwitch                       InqCurrent                      InqCurMotDirect
getMcuStateInfo                 setFastFocus                    getTrackStatus
getSelfcheckResult              setLdcMode                      getLdcMode
getPreviewStatus                appCmd                          camCmd
ezoomlens_start_t2_test         prtLensCurve                    getLensCurve
getIp                           gdbcfg                          {Test1}
{Test2}                         {Test3}                         {Test4}
{TestN}                         {TestY}                         getIsp
getISP                          getisp                          setIsp
setISP                          setisp                          regread
regwrite                        setAgingMode                    getAgingMode
setAgingTime                    getAgingTime                    setLensZoomPos
getLensZoomPos                  dm365                           ss
showKey                         showServer                      showUpnp
showStatus                      showDefence                     setLBS
setAlarm                        cloudService                    t1
ifconfig                        netstat                         ping
ping6                           top                             iostat
mpstat                          ps                              reset
dmesg                           iwpriv                          exit
getDateInfo                     diagnose                        help
zhimakaimen
#


alastairstevenson said:
And if the secondary partition has no files to copy over - then maybe jump in the deep end and try the 'update' command at the bootloader.
Click to expand...
 
Last edited:
mwoo68 said:
I having difficulty entering these commands
Click to expand...
I realised a while after I posted them that I'd forgotten to specify that /etc/init.d/rcS needs to be executed to bring the environment to a fully initiallised state when the 'debug single' bootargs parameters are in place. Apologies.

mwoo68 said:
OK. I've done the "Update" command.
Click to expand...
That's good, the 'min-system recovery environment' is still working OK.

mwoo68 said:
PS: I used the EN version in the brickfixV2EN.dav and renamed it to digicap.dav and then executed Update command
Click to expand...
The brickfixV2 is no longer needed.

At the bootloader, try the update command with the digicap.dav from the 5.4.5 firmware.
But before that, maybe now would be a good point to remove those extra parameters and revert to the original bootargs, though you could keep the dbg=9 to provide the extra detail in the transcript.
Having had the mtd6ro_mod applied, the camera has been converted to EN and the stock firmware should work OK, if the flash memory behaves.
 
OK. After update of the Hikvision 5.4.5. Several reboots later and seeing a pile of errors scroll on the Putty screen, I was sure another fail. And was ready to toss the camera away. But I noticed in the background SADP program, listed a camera at 192.168.1.64. I quickly changed the IP to be a part of my local network and voila, I was able to login from Explorer. Everything seems to be in order, except maybe WIFI and in SADP, I am getting two cameras with same IP shown. In attached picture shows a MAC address that I am not familiar with. I know this mac address travels with the camera as I change the IP address, it changes as well. Not sure where this MAC address comes from. Can this be the WIFI address that I tried to setup?

Next on the agenda. A BIG thank you for persevering with me and helping me get this camera back alive. I was so close in tossing this out...

Michael


alastairstevenson said:
I realised a while after I posted them that I'd forgotten to specify that /etc/init.d/rcS needs to be executed to bring the environment to a fully initiallised state when the 'debug single' bootargs parameters are in place. Apologies.


That's good, the 'min-system recovery environment' is still working OK.


The brickfixV2 is no longer needed.

At the bootloader, try the update command with the digicap.dav from the 5.4.5 firmware.
But before that, maybe now would be a good point to remove those extra parameters and revert to the original bootargs, though you could keep the dbg=9 to provide the extra detail in the transcript.
Having had the mtd6ro_mod applied, the camera has been converted to EN and the stock firmware should work OK, if the flash memory behaves.
Click to expand...
 

Attachments

  • query.jpg
    query.jpg
    288.1 KB · Views: 36
So it's working? Great!
In the 2 MAC addresses - the Ethernet and WiFi interfaces have separate MAC addresses, and traffic passes between them internally so both are visible. It looks like the same IP address is set on both interfaces.

On a working camera serial console bootup there are loads of entries that look like or are errors, but that's normal on these devices.
 
Yup. All good. Thanks again.

alastairstevenson said:
So it's working? Great!
In the 2 MAC addresses - the Ethernet and WiFi interfaces have separate MAC addresses, and traffic passes between them internally so both are visible. It looks like the same IP address is set on both interfaces.

On a working camera serial console bootup there are loads of entries that look like or are errors, but that's normal on these devices.
Click to expand...
 
Bytes transferred = 16327239 (f92247 hex)
cramfs.img checkSum ok !
Erasing SPI flash...done
Writing SPI flash...done
Upgrade check ......error!
timeout for link [5000]!
MAC: C4-2F-90-97-D6-1B
TFTP from server 192.0.0.128; our IP address is 192.0.0.64
Download Filename 'digicap.dav'.
Download to address: 0x80008000
Downloading: #################################################
done
Bytes transferred = 16327239 (f92247 hex)
cramfs.img checkSum ok !
Erasing SPI flash...done
Writing SPI flash...done
Upgrade check ......error!
timeout for link [5000]!
MAC: C4-2F-90-97-D6-1B
TFTP from server 192.0.0.128; our IP address is 192.0.0.64
Download Filename 'digicap.dav'.
Download to address: 0x80008000
 
Actually my issue is that
I am unable to save changes with my NVR
every time i reboot the settings get restored to previous settings
what is the solution for this problem
i tried updating my NVR using via pendrive, Lan by logging into device, and finally i tried this TTL method
 
And does it give you the confirmation that settings were saved when you click on the save button?
Maybe try a few different areas for saving and see what happens.
 
ya it shows setting saved
i tried changing ip neltwork
date and time
record schdule
everywhere it shows as saved
after upon reboot it restore back to previous setting
 
That is strange.
The settings are stored in the flash memory.
I have a recollection that someone had a similar problem and replaced the battery on the main board. But as far as I know, that just keeps the clock running when power is off.
 
You must log in or register to reply here.
Top Bottom