Hikvision - Clearing Passwords and/or Loading Firmware via TTL Serial

ex-r-wagon · Oct 25, 2018

Thanks for the reply.

I guess I was not as detailed as I needed to be.

First you are correct it is a switch that connects both the PC and the NVR together.

Second I am using Tftpd64 by Jounin. I see the geen lights blinking on the switch for both ethernet cables connected to the PC and NVR. I do not understand what this means "For this serial-console-driven update - you can use your normal IP address range for the activity" unless you are saying that I don't have to set the IP in the PC to 192.0.0.128.

Third I first tried to do the firmware update only using Tftpd64 running on the PC with the PC and the NVR connected together via the switch. Again I set the IP of the PC to 192.0.0.128, started the Tftpd64, selected the IP in the menu, then powered on the NVR. I never saw any messages/activity on the TFTP screen.

alastairstevenson · Oct 25, 2018

ex-r-wagon said:
unless you are saying that I don't have to set the IP in the PC to 192.0.0.128.

Yes, that's correct. If it's convenient you can just leave the PC address as-is and reference it accordingly, and specify an address in the same range for the NVR.

ex-r-wagon said:
I never saw any messages/activity on the TFTP screen.

I was assuming the use of the Hikvision tftp updater, which informs of the IP address it's running on, and any of the proprietary handshakes it receives from a Hikvision device probing for it.

ex-r-wagon said:
Second I am using Tftpd64 by Jounin.

Try the tftpd32 - that may behave differently.

ex-r-wagon · Oct 25, 2018

Brilliant!

Changing to Tftpd32 worked, allowing a firmware upgrade and resetting the password to allow inputting a new pasword.

Thank you

lupino82 · Oct 26, 2018

can someone tell me where I can connect on JST ZH to this board?, I have two entries on this board this model is DS-7216 HGHI-SH/A(B) I have attached a picture. Thank you very much for your support

antonio1 · Jan 16, 2019

Hi,

because I don't have TTL to serial device I connected the DVR directly to COM1 port. But I have the same problem as Petrov had it, at booting the screen show lines to unknown chars. I followed your discuss and from my experience I think it is the problem of speed matching, but any speed tested I still have same stupid chars. How could I solve this problem? I'm really in this shit because of Hikvision which delivered a not good firmware even if my model was on the list the firmware was not tested I think.

alastairstevenson · Jan 16, 2019

antonio1 said:
because I don't have TTL to serial device I connected the DVR directly to COM1 port.

Was this a DB9 connector on the back of the DVR, or was it a small 4-pin connector on the main board?
The DB9 connector will likely be RS232, the connector on the board will be TTL serial.
Presumably your PC COM1 is RS232.

Most of the serial interfaces run at 115200 baud, 8bits no parity.
But some DB9 connected interfaces operate at 9600 baud.

Did you make up the cable yourself, or is it pre-made?

antonio1 · Jan 16, 2019

you are really fast, thank you being here to help. On DVR side I don't have DB9 so I used same as Petrov the cable from inside got from audio signal to connect through cables as short as possible directly to my RS232 of the PC. I also can say that if I change RX with TX I have no chars on screen, nothing moving, so according to description I think the connection is good. To be sure of good work I set the same speed also in putty and also in COM1 parameters of the PC. Maybe the image attach helps you.

moped · Jan 16, 2019

antonio1 said:
you are really fast, thank you being here to help. On DVR side I don't have DB9 so I used same as Petrov the cable from inside got from audio signal to connect through cables as short as possible directly to my RS232 of the PC. I also can say that if I change RX with TX I have no chars on screen, nothing moving, so according to description I think the connection is good. To be sure of good work I set the same speed also in putty and also in COM1 parameters of the PC. Maybe the image attach helps you.

It’s not rs232 (computer) serial. You will need to get a serial UART USB adapter.

antonio1 · Jan 16, 2019

UART USB adapter just convert USB to RS232, why directly from RS232 does not work? isn't it serial communication?

moped · Jan 16, 2019

antonio1 said:
UART USB adapter just convert USB to RS232, why directly from RS232 does not work? isn't it serial communication?

Similar but not the same.

Most microcontrollers these days have built in UARTs (universally asynchronous receiver/transmitter) that can be used to receive and transmit data serially. UARTs transmit one bit at a time at a specified data rate (i.e. 9600bps, 115200bps, etc.). This method of serial communication is sometimes referred to as TTL serial (transistor-transistor logic). Serial communication at a TTL level will always remain between the limits of 0V and Vcc, which is often 5V or 3.3V. A logic high ('1') is represented by Vcc, while a logic low ('0') is 0V.

The serial port on your computer complies with the RS-23 telecommunications standard. RS-232 signals are similar to your microcontroller's serial signals in that they transmit one bit at a time, at a specific baud rate, with or without parity and/or stop bits. The two differ solely at a hardware level. By the RS-232 standard a logic high ('1') is represented by a negative voltage – anywhere from -3 to -25V – while a logic low ('0') transmits a positive voltage that can be anywhere from +3 to +25V. On most PCs these signals swing from -13 to +13V.

Super cheap online:
https://www.google.com/search?safe=off&sa=X&rlz=1CDGOYI_enUS812US812&hl=en-US&biw=414&bih=620&tbm=shop&ei=gLc_XM2fD8fUsAX86LTQBA&q=ttl+serial+cable+to+usb

antonio1 · Jan 16, 2019

thank you for explanations, I didn't try this because of cost but because of as fast as possible with what I have, for me it takes about 3 weeks to get that device. Ok, according to your clarification I have to come back here with results after I get the device. OK.

tangent · Jan 16, 2019

antonio1 said:
thank you for explanations, I didn't try this because of cost but because of as fast as possible with what I have, for me it takes about 3 weeks to get that device. Ok, according to your clarification I have to come back here with results after I get the device. OK.

It took me less than a minute to find 3 of these at a Romanian supplier.
CP2102 USB to UART Converter Module Red
PL2303 USB to UART Converter
FT232RL USB to Serial Converter

** Obviously other suppliers make more sense for anyone looking for these who isn't in Romania **

antonio1 · Jan 17, 2019

Thank you for help with shopping, but optimus digital is online market which takes minimum 1 week for deliver, I will try to find direct on market today, maybe I have good luck and tonight I come back with good news.
Thank you again, I visited the Optimus digital shop online, I contacted them and assured me of maximum 5 day, this is shortest solution for me at this moment, so I ordered, let's wait and see the results.

antonio1 · Jan 23, 2019

Hi,

I'm back after achieving the TTL device. Everything is prepared, well configured and connected. When I start the procedure to interrupt the booting I can't introduce any update command. I have the same problem which greg63 user had it but nobody solved. Impossible to start update even if anything I type is displayed, what commands are for the prompt HKVS$ ?
If I let it to boot a little and I fast type update then I have the answer: <<'update' Not Supported, Try 'help' >>

What should I do?
Thank you,

moped · Jan 23, 2019

antonio1 said:
Hi,

I'm back after achieving the TTL device. Everything is prepared, well configured and connected. When I start the procedure to interrupt the booting I can't introduce any update command. I have the same problem which greg63 user had it but nobody solved. Impossible to start update even if anything I type is displayed, what commands are for the prompt HKVS$ ?
If I let it to boot a little and I fast type update then I have the answer: <<'update' Not Supported, Try 'help' >>

What should I do?
Thank you,

Try suggestions from this reply:
Hikvision - Clearing Passwords and/or Loading Firmware via TTL Serial

Just to confirm - you didn't load the wrong firmware on this or something right?

Thanks,
Rob

antonio1 · Jan 23, 2019

So I checked lot of messages here and I tried a little bit the hard way. I used the command lines below:
setenv ipaddr 192.0.0.64
setenv serverip 192.0.0.128
setenv bootargs console=ttyS2,115200n8 root=/dev/ram0 rw initrd=0x42000000
setenv bootcmd 'tftp 0xc0700000 uImage; tftp 0x42000000 digicap.dav; boot 0xc0700000'

At "Downloading:" line I have 'TTTTTTTTTTTTT' instead of '###########' then the message
"Retry count exceeded; starting again"

I think some addresses are not good for my device or what should I do to upgrade in this hard way method?

thank you,

antonio1 · Jan 24, 2019

Ok, I do progress by trying and trying. The problem was TFTPD64 configuration. Beside this something is missing in description, it is important to select "bind TFTP to this address:" and to indicate the address otherelse after restart it will not save the configuration. Also for TFTPD64 I recommend in GLOBAL not just uncheck DHCP Server but assure that just TFTP server is checked because we need just this.
Back to my problem, I did the download to the device following the command lines above but when I boot I still have problem, I think not booting with the new firmware because has errors and the device still continue to restart at every 40 sec. I modified after reading over internet the last command line as below:
this - setenv bootcmd 'tftp 0xc0700000 uImage; tftp 0x42000000 digicap.dav; boot 0xc0700000'
with this - setenv bootcmd 'tftp 0xc0700000 uImage; tftp 0x42000000 digicap.dav; bootm 0xc0700000'

But still stuck in booting with the new firmware. I wonder, is it a way to flash a minimal firmware which gives me the possibility to interrupt booting and to use the command update? Or what other hard command is missing to make the device to boot with the firmware downloaded?

thank you,

ste92 · Jan 26, 2019

I have a big problem with my DVR 7208 huhi k1 you can run this guide? damn hikvision updates to the cabbage on their website

alastairstevenson · Jan 26, 2019

antonio1 said:
when I boot I still have problem, I think not booting with the new firmware because has errors and the device still continue to restart at every 40 sec.

The serial console should provide some clues as to why the device is rebooting.
The full log can be lengthy and cryptic, but should provide good information as to the cause.

antonio1 · Jan 26, 2019

if you can see the meaning of error please tell me, here below is the log:

Code:

U-Boot 2010.06-svn (May 25 2017 - 18:00:13)[V1.4.5]

Hit ctrl+u to stop autoboot: 0
HKVS $ setenv ipaddr 192.0.0.64
HKVS $ setenv serverip 192.0.0.128
HKVS $ setenv bootargs console=ttyS2,115200n8 root=/dev/ram0 rw initrd=0x42000000
HKVS $ setenv bootcmd 'tftp 0xc0700000 uImage; tftp 0x42000000 digicap.dav; bootm 0xc0700000'
timeout for link [4999]!
MAC: B4-A3-82-BC-57-15
TFTP from server 192.0.0.128; our IP address is 192.0.0.64
Download Filename 'digicap.dav'.
Download to address: 0x42000000
Downloading: #################################################
done
Bytes transferred = 17772908 (10f316c hex)
data abort
pc : [<4dc1038c>] lr : [<4dc1078c>]
sp : 4d9ff0f0 ip : 4d9ff62a fp : 4dc38488
r10: 4d9ff194 r9 : 00000000 r8 : 4d9fffe0
r7 : 00000000 r6 : c0700000 r5 : 4dc3b004 r4 : c0700000
r3 : 00000000 r2 : 00000010 r1 : 00000000 r0 : c0700000
Flags: nZCv IRQs off FIQs off Mode SVC_32
Resetting CPU ...

resetting ...


U-Boot 2010.06-svn (May 25 2017 - 18:00:13)[V1.4.5]

Hit ctrl+u to stop autoboot: 0
### CRAMFS load complete: 4233112 bytes loaded to 0x42000000
## Booting kernel from Legacy Image at 42000000 ...
Verifying RSA ... OK
Loading Kernel Image ... OK
OK

Starting kernel ...

[ 4.682865] init(1) called reboot syscall, cmd: 0x0.
Thu Jan 1 00:00:04 UTC 1970

mv: can't rename 'ubi*': No such file or directory
Starting udev: [ OK ]
/usr/bin/hrsaverify: verify "/tmp/start.sh" success!
/usr/bin/hrsaverify: truncate "/tmp/start.sh" to 6528(1980 hex) success!


sdbg: serverip:192.0.0.128
fastboot is
language is 1
devtype is ab67
/
----------<1> tar guir webs ----------
BusyBox v1.2.1 Protect Shell (psh)
Enter 'help' for a list of davinci system commands.

# [ 9.178225] hi_gmac_v200 100a0000.ethernet eth0: Link is Up - 1Gbps/Full - flow control rx/tx
ded in[/home/hik/gui_res.tar.lzma]/out[/home/app/gui_res.tar.lzma] ioctl faild. errno[5]
tar: unexpected EOF
tar: short read
----------<2> show logo ----------
read: pDevCfg->cfgHead.paraVersionis [0x170816];
read: iCkSum is [0x82d]; pDevCfg->cfgHead.paraChecksum is [0x82d]
scriptCmd: ./load -i 0.
./load: line 30: 0x1c: not found
a is ab67
b is 0xffe20888
AD pll is
VI_CLOSE_NUM is 0
DS_7208HU_K
DS_7108HU_K
mmz allot OK DS_7208HUH_K
loadKY2017 Start
./load: line 30: c: not found

0x120F0800: 0x00000170 --> 0x00000038
[END]

0x120f0898: 0x00000170 --> 0x00000038
[END]
ViCloseCnt is Not All Closed
close tde module alpha filter
loadAd tp2823:0,tp2824:0,tp2833C:2,tp2827C:0,tp2828:0,nvp6114a:0 nvp6124b:0 nvp6134:2,nvp6134b:0
cmdBuf:insmod extdrv/tp2823.ko I2C_dev_Choose=1
cmdBuf:insmod extdrv/nvp6134_ex.ko I2C_dev_Choose=1
insert audio
load K71 ok
/
----------<4> del no use res ----------
cp: can't stat '/home/app/hisi/modules/setDebug_mux': No such file or directory
start savelog proc!!!!!
iSCSI daemon with pid=373 started!Jan 8 17:56:33 udevd-work[130]: kernel-provided name 'sdb' and NAME= 'sdf' disagree, please use SYMLINK+= or change the kernel to provide the proper name

fun:hisi_main_module_init, line:11183 >>>>>>ATA is Not Scan Done! Please Wait<<<<<<
pdev_hard_info->ataCtrlNums=2
file:src/pal_api.c,line:576, pal_module_init successfully
[CRIT]read_execl_guide_cfg()1157:start
[INFO]get_flash_cards_info()410:ignore [msmouse].

[CRIT]get_flash_cards_info()451:********can not find any usb device!********
[CRIT]read_execl_guide_cfg()1167:get flash cards info failed. iRet[-1]
read execl guide cfg failed. iRet[-1]file:src/pal_api.c,line:537, pal_module_init has been called
remove error
hisi_bsp_info_close[1]
:1
t1: wait storage [2] and gui[2] and hicore[2] and ipcm[0] and toolserver[0]
fun:hisi_watchdog_init, line:5487 hisi_watchdog_init(/dev/watchdog, 28) ok iDogTimeOut:25 Sec!
/*********************init_global_error_lib*/, init_global_error_lib start!
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~phy on eth0 is link up
-----------------get_net_link status == 1
:1
init_lzma_mem alloc size 1048576
initNetIf set_eth_mode start ========
[DHCP] default pIpAddr: 192.168.1.64, pNetMask: 255.255.255.0
fun:hisi_dsp_init, line:2819 --------------init dsp --------------------
<LIB>DspInitParaAllocMem OK! addr is 0xb4400000
fun:hisi_main_dsp_init, line:1990 Device Main Vo Chan is 2[0]
menuDispChan = 0
This is new 2827!
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:0 chan 0 Now Use OS Mem, not MMZ MEM
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:1 chan 0 Now Use OS Mem, not MMZ MEM
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:0 chan 1 Now Use OS Mem, not MMZ MEM
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:1 chan 1 Now Use OS Mem, not MMZ MEM
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:0 chan 2 Now Use OS Mem, not MMZ MEM
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:1 chan 2 Now Use OS Mem, not MMZ MEM
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:0 chan 3 Now Use OS Mem, not MMZ MEM
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:1 chan 3 Now Use OS Mem, not MMZ MEM
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:0 chan 4 Now Use OS Mem, not MMZ MEM
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:1 chan 4 Now Use OS Mem, not MMZ MEM
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:0 chan 5 Now Use OS Mem, not MMZ MEM
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:1 chan 5 Now Use OS Mem, not MMZ MEM
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:0 chan 6 Now Use OS Mem, not MMZ MEM
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:1 chan 6 Now Use OS Mem, not MMZ MEM
<LIB>Func: AppMapShareMemPool, li[ 19.802549] hi_gmac_v200 100a0000.ethernet eth0: Link is Down
ne 917, PoolMode:0 chan 7 Now Use OS Mem, not MMZ MEM
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:1 chan 7 Now Use OS Mem, not MMZ MEM
Chan[0] Sup Borrow MMZ memory to meet ana net pool[2]!
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:3 chan 0 Now Use OS Mem, not MMZ MEM
Chan[1] Sup Borrow MMZ memory to meet ana net pool[2]!
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:3 chan 1 Now Use OS Mem, not MMZ MEM
Chan[2] Sup Borrow MMZ memory to meet ana net pool[2]!
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:3 chan 2 Now Use OS Mem, not MMZ MEM
Chan[3] Sup Borrow MMZ memory to meet ana net pool[2]!
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:3 chan 3 Now Use OS Mem, not MMZ MEM
Chan[4] Sup Borrow MMZ memory to meet ana net pool[2]!
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:3 chan 4 Now Use OS Mem, not MMZ MEM
Chan[5] Sup Borrow MMZ memory to meet ana net pool[2]!
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:3 chan 5 Now Use OS Mem, not MMZ MEM
Chan[6] Sup Borrow MMZ memory to meet ana net pool[2]!
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:3 chan 6 Now Use OS Mem, not MMZ MEM
Chan[7] Sup Borrow MMZ memory to meet ana net pool[2]!
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:3 chan 7 Now Use OS Mem, not MMZ MEM
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:6 chan 0 Now Use OS Mem, not MMZ MEM
Chan[0] Sup Borrow MMZ memory to meet ipc net pool[7]!
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:6 chan 1 Now Use OS Mem, not MMZ MEM
Chan[1] Sup Borrow MMZ memory to meet ipc net pool[7]!
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:6 chan 2 Now Use OS Mem, not MMZ MEM
Chan[2] Sup Borrow MMZ memory to meet ipc net pool[7]!
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:6 chan 3 Now Use OS Mem, not MMZ MEM
Chan[3] Sup Borrow MMZ memory to meet ipc net pool[7]!
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:4 chan 0 Now Use OS Mem, not MMZ MEM
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:5 chan 0 Now Use OS Mem, not MMZ MEM
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:4 chan 1 Now Use OS Mem, not MMZ MEM
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:5 chan 1 Now Use OS Mem, not MMZ MEM
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:4 chan 2 Now Use OS Mem, not MMZ MEM
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:5 chan 2 Now Use OS Mem, not MMZ MEM
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:4 chan 3 Now Use OS Mem, not MMZ MEM
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:5 chan 3 Now Use OS Mem, not MMZ MEM
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:10 chan 0 Now Use OS Mem, not MMZ MEM
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:12 chan 0 Now Use OS Mem, not MMZ MEM
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:12 chan 1 Now Use OS Mem, not MMZ MEM
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:12 chan 2 Now Use OS Mem, not MMZ MEM
<LIB>Func: AppMapShareMemPool, line 917, PoolMode:12 chan 3 Now Use OS Mem, not MMZ MEM
<LIB>*** [APP_PROCESS] DSP_LIB Build Time: [Sep 28 2018 19:04:59] *** sizeof(DSPINITPARA) 3109016
<DSP> pos error ---[InitPosMem] err, not support pos---
[ 24.308757] hi_gmac_v200 100a0000.ethernet eth0: Link is Up - 1Gbps/Full - flow control rx/tx
111vcaVpssGroup = 27
111vcaVpssGroup = 28
<DSP>vca DspVcaInitOsd OK!
<DSP>vca Init vca success
<DSP>vca DspVcaInitMetaDataPack: ok
<DSP>vca DspVcaScdInit chanNum = 2
<DSP>vca scdChan:0
<DSP>vca scdChan:1
<DSP>vca DspVcaScdInit OK!
<DSP>vca smdChan:0
<DSP>vca smdChan:1
<LIB>AppAllocLogoShareBuf 1. u32TotalShareBufSize:5308416 ShareLogoVirAddr:0xaffd4000
<LIB>AppAllocLogoShareBuf 2. u32TotalShareBufSize:5373952 ShareExtLogoVirAddr:0xaffc4000
<LIB>AppAllocLogoShareBuf is OK
<LIB>1.Share Buffer Size 27394048
<LIB>2.Share Buffer Size 31719424
<LIB>3.Share Buffer Size 35061760
<LIB><AppAllocMenuMem> dispMode 5
<LIB>chan 0, menuShareBuf virtRgbAddr is 0xad3a2000, menuBufSize 16588800
<LIB>chan 1, menuShareBuf virtRgbAddr is 0xad2d7000, menuBufSize 829440
<LIB>4.Share Buffer Size 70305792
<LIB>DspAllocShareMemSize OK Total Share Buffer Size 70305792
<LIB>pid:379 tid:502 name:tskPlusDataFunc

<LIB>startMagic :DSP_START_OK
hisi_main_dsp_init:DSPINITPARA=3109016
************g_pDspInitPara[0xb4400000], menuShareBuf 0[0xb44700f4, pAddr=0x8f2e2000, vAddr=0xad3a2000, w:3840,h2160,p:3840] 1[0xb4470108, pAddr=0x902b4000, vAddr=0xad2d7000, w:720,h576,p:720],
hisi_freelogo_buffer is succsse 0
fun:hisi_dsp_init, line:2840 ------ dsp is init Ok iRetVal:0---------
!!!!!!!!!!!!!!!!!!!!!!!!!DSP Init Ok!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
fun:hisi_fill_4_screen_param, line:1739 window dispInfo[w:1920, h:1080], step(960, 536), last(960, 960)
fun:hisi_fill_8_screen_param, line:1937 window dispInfo[w:704, h:576], step(176, 144), last(176, 144)
<LIB>PhyAddr 0x94f74000, VirAddr 0xabd6b000, size 1048576 APPLY OK!!!
fun:hisi_get_mem_from_dsp, line:364 VirAddr: 0xabd6b000, PhyAddr: 0x94f74000
init_stream_buf, pInStreamBuf:0xabd6b000, pOutStreamBuf:0xabdeb000
------------> pthreadSpawn handle_pppoe_cfg_cmd
wait storage [2] and gui[2]
===================handle_pppoe_cfg_cmd=====================
=============pppoe============FOREVER=====================================
:1
:1
<LIB>PhyAddr 0x95074000, VirAddr 0xab1f3000, size 1048576 APPLY OK!!!
fun:hisi_get_mem_from_dsp, line:364 VirAddr: 0xab1f3000, PhyAddr: 0x95074000
maxIPCcount[12] maxAnalogCount[8]
t1: wait storage [0] and gui[0] and hicore[0] and ipcm[0] and toolserver[0]
part /dev/sda stor_get_db_total_files alloc 148 byte mem.
part /dev/sda stor_get_record_file_detail_task beging 669400
part /dev/sda stor_get_record_file_detail_task :db_update_curdb_range_time start 669400
### key info: [ipcm_svc_init]ipcm svc inited. ###
<LIB>PhyAddr 0x951d7000, VirAddr 0xa9b3f000, size 65536 APPLY OK!!!
fun:hisi_get_mem_from_dsp, line:364 VirAddr: 0xa9b3f000, PhyAddr: 0x951d7000
<LIB>PhyAddr 0x951e7000, VirAddr 0xa9b2f000, size 65536 APPLY OK!!!
fun:hisi_get_mem_from_dsp, line:364 VirAddr: 0xa9b2f000, PhyAddr: 0x951e7000
<LIB>PhyAddr 0x951f7000, VirAddr 0xa9b1f000, size 65536 APPLY OK!!!
fun:hisi_get_mem_from_dsp, line:364 VirAddr: 0xa9b1f000, PhyAddr: 0x951f7000
<LIB>PhyAddr 0x95207000, VirAddr 0xa9b0f000, size 65536 APPLY OK!!!
fun:hisi_get_mem_from_dsp, line:364 VirAddr: 0xa9b0f000, PhyAddr: 0x95207000
<LIB>PhyAddr 0x95217000, VirAddr 0xa9aff000, size 65536 APPLY OK!!!
fun:hisi_get_mem_from_dsp, line:364 VirAddr: 0xa9aff000, PhyAddr: 0x95217000
<LIB>PhyAddr 0x95227000, VirAddr 0xa9aef000, size 65536 APPLY OK!!!
fun:hisi_get_mem_from_dsp, line:364 VirAddr: 0xa9aef000, PhyAddr: 0x95227000
<LIB>PhyAddr 0x95237000, VirAddr 0xa9adf000, size 65536 APPLY OK!!!
fun:hisi_get_mem_from_dsp, line:364 VirAddr: 0xa9adf000, PhyAddr: 0x95237000
<LIB>PhyAddr 0x95247000, VirAddr 0xa9acf000, size 65536 APPLY OK!!!
fun:hisi_get_mem_from_dsp, line:364 VirAddr: 0xa9acf000, PhyAddr: 0x95247000
<LIB>PhyAddr 0x95257000, VirAddr 0xa9abf000, size 65536 APPLY OK!!!
fun:hisi_get_mem_from_dsp, line:364 VirAddr: 0xa9abf000, PhyAddr: 0x95257000
<LIB>PhyAddr 0x95267000, VirAddr 0xa9aaf000, size 65536 APPLY OK!!!
fun:hisi_get_mem_from_dsp, line:364 VirAddr: 0xa9aaf000, PhyAddr: 0x95267000
<LIB>PhyAddr 0x95277000, VirAddr 0xa9a9f000, size 65536 APPLY OK!!!
fun:hisi_get_mem_from_dsp, line:364 VirAddr: 0xa9a9f000, PhyAddr: 0x95277000
<LIB>PhyAddr 0x95287000, VirAddr 0xa9a8f000, size 65536 APPLY OK!!!
fun:hisi_get_mem_from_dsp, line:364 VirAddr: 0xa9a8f000, PhyAddr: 0x95287000
<LIB>PhyAddr 0x95297000, VirAddr 0xa9a7f000, size 65536 APPLY OK!!!
fun:hisi_get_mem_from_dsp, line:364 VirAddr: 0xa9a7f000, PhyAddr: 0x95297000
<LIB>PhyAddr 0x952a7000, VirAddr 0xa9a6f000, size 65536 APPLY OK!!!
fun:hisi_get_mem_from_dsp, line:364 VirAddr: 0xa9a6f000, PhyAddr: 0x952a7000
<LIB>PhyAddr 0x952b7000, VirAddr 0xa9a5f000, size 65536 APPLY OK!!!
fun:hisi_get_mem_from_dsp, line:364 VirAddr: 0xa9a5f000, PhyAddr: 0x952b7000
<LIB>PhyAddr 0x952c7000, VirAddr 0xa9a4f000, size 65536 APPLY OK!!!
fun:hisi_get_mem_from_dsp, line:364 VirAddr: 0xa9a4f000, PhyAddr: 0x952c7000
<LIB>PhyAddr 0x952d7000, VirAddr 0xa99cf000, size 524288 APPLY OK!!!
fun:hisi_get_mem_from_dsp, line:364 VirAddr: 0xa99cf000, PhyAddr: 0x952d7000
<LIB>PhyAddr 0x95357000, VirAddr 0xa994f000, size 524288 APPLY OK!!!
fun:hisi_get_mem_from_dsp, line:364 VirAddr: 0xa994f000, PhyAddr: 0x95357000
<LIB>PhyAddr 0x953d7000, VirAddr 0xa98cf000, size 524288 APPLY OK!!!
fun:hisi_get_mem_from_dsp, line:364 VirAddr: 0xa98cf000, PhyAddr: 0x953d7000
<LIB>PhyAddr 0x95457000, VirAddr 0xa984f000, size 524288 APPLY OK!!!
fun:hisi_get_mem_from_dsp, line:364 VirAddr: 0xa984f000, PhyAddr: 0x95457000
big_bit_mask p[0xabd65708], idx[-1] error!func[big_bit_mask],line[63]
+++++++++++++++++++First save_error_no, time_t:669375
[01-08 17:56:41][2][695]check remote session thread begin
[01-08 17:56:41][2][698]check file session heartbeat begin
viLostProc:Chan 1 VI lost.
viLostProc:Chan 2 VI lost.
[01-08 17:56:41][3][683]RemoteSession::~RemoteSession()
[01-08 17:56:41][3][683]RemoteSession::Free
[01-08 17:56:41][3][683]RemoteSession::~RemoteSession()
[01-08 17:56:41][3][683]RemoteSession::Free
[01-08 17:56:41][3][683]RemoteSession::~RemoteSession()
[01-08 17:56:41][3][683]RemoteSession::Free
[01-08 17:56:41][3][683]RemoteSession::~RemoteSession()
[01-08 17:56:41][3][683]RemoteSession::Free
[01-08 17:56:41][1][683]p2pLinkManage Destruct Ok
tttttchan=1,vaddr=0xb494a000
#####line:1895,iChan[1],iInchan[61],bflag[2],iVideoType[0x72],currCompParaType[0x0],currEncResolution[0x1b]
file[init/dvr.c],func[setSubStreamRecStatus],line[2004], iChan:[1],iRec:[0],iSubRec:[1]
file[init/dvr.c],func[setSubStreamRecStatus],line[2005], iChan:[1],szRecCount:[1],szSubRecCount:[1]
tttttchan=2,vaddr=0xb407e000
file[init/dvr.c],func[setSubStreamRecStatus],line[2004], iChan:[2],iRec:[0],iSubRec:[0]
file[init/dvr.c],func[setSubStreamRecStatus],line[2005], iChan:[2],szRecCount:[1],szSubRecCount:[0]
tttttchan=3,vaddr=0xb3cfc000
file[init/dvr.c],func[setSubStreamRecStatus],line[2004], iChan:[3],iRec:[0],iSubRec:[0]
file[init/dvr.c],func[setSubStreamRecStatus],line[2005], iChan:[3],szRecCount:[1],szSubRecCount:[0]
tttttchan=4,vaddr=0xb397a000
file[init/dvr.c],func[setSubStreamRecStatus],line[2004], iChan:[4],iRec:[0],iSubRec:[0]
file[init/dvr.c],func[setSubStreamRecStatus],line[2005], iChan:[4],szRecCount:[1],szSubRecCount:[0]
tttttchan=5,vaddr=0xb35f8000
file[init/dvr.c],func[setSubStreamRecStatus],line[2004], iChan:[5],iRec:[0],iSubRec:[0]
file[init/dvr.c],func[setSubStreamRecStatus],line[2005], iChan:[5],szRecCount:[1],szSubRecCount:[0]
tttttchan=6,vaddr=0xb3276000
file[init/dvr.c],func[setSubStreamRecStatus],line[2004], iChan:[6],iRec:[0],iSubRec:[0]
file[init/dvr.c],func[setSubStreamRecStatus],line[2005], iChan:[6],szRecCount:[1],szSubRecCount:[0]
tttttchan=7,vaddr=0xb2ef4000
file[init/dvr.c],func[setSubStreamRecStatus],line[2004], iChan:[7],iRec:[0],iSubRec:[0]
file[init/dvr.c],func[setSubStreamRecStatus],line[2005], iChan:[7],szRecCount:[1],szSubRecCount:[0]
tttttchan=8,vaddr=0xb2b72000
file[init/dvr.c],func[setSubStreamRecStatus],line[2004], iChan:[8],iRec:[0],iSubRec:[0]
file[init/dvr.c],func[setSubStreamRecStatus],line[2005], iChan:[8],szRecCount:[1],szSubRecCount:[0]
@@@@do not need poc test@@@@
!!!!!!!!!!!!!!!sc_hicore is start ok!!!!!!!!!!!!!!!!
START SMD!!!!!!!!!!
<DSP>vca 11QueVcaChan vcaChan:0,realChan:0
<DSP>vca DspVcaSmdQueChan smdChan:0,vcaChan:0
<DSP>vca 1HostSMDStart 704, 576 pSmdCtrl->analyseParam.VcaWidth = 176, pSmdCtrl->analyseParam.VcaHeight = 144
<DSP>vca SMD_Open ok,vcaW:176,vcaH:144
<DSP>vca dst 7 27 2
<DSP>vca fun:DspVcaSetDataFrameRate src:30,dst:12
<DSP>vca chan 0 HostStartSmd success
<DSP>vca chan 0 set SMD rule successa
<DSP>vca rule_num:1
<DSP>vca ID:1, TYPE:0, event_type:1
<DSP>vca x:0.237000, y:0.469000
<DSP>vca x:0.526000, y:0.316000
START SMD!!!!!!!!!!
<DSP>vca 11QueVcaChan vcaChan:1,realChan:1
<DSP>vca DspVcaSmdQueChan smdChan:1,vcaChan:1
<DSP>vca 1HostSMDStart 704, 576 pSmdCtrl->analyseParam.VcaWidth = 176, pSmdCtrl->analyseParam.VcaHeight = 144
<DSP>vca SMD_Open ok,vcaW:176,vcaH:144
<DSP>vca dst 7 28 2
<DSP>vca fun:DspVcaSetDataFrameRate src:30,dst:12
<DSP>vca chan 1 HostStartSmd success
<DSP>vca chan 1 set SMD rule successa
<DSP>vca rule_num:1
<DSP>vca ID:1, TYPE:0, event_type:1
<DSP>vca x:0.795000, y:0.847000
<DSP>vca x:0.942000, y:0.436000
file:smd/smd_proc.c,line:2256, smdCtrlTask:set chan smd failed.
file:smd/smd_proc.c,line:2256, smdCtrlTask:set chan smd failed.
file:smd/smd_proc.c,line:2256, smdCtrlTask:set chan smd failed.
file:smd/smd_proc.c,line:2256, smdCtrlTask:set chan smd failed.
file:smd/smd_proc.c,line:2256, smdCtrlTask:set chan smd failed.
file:smd/smd_proc.c,line:2256, smdCtrlTask:set chan smd failed.
file:smd/smd_proc.c,line:2256, smdCtrlTask:set chan smd failed.
file:smd/smd_proc.c,line:2256, smdCtrlTask:set chan smd failed.
file:smd/smd_proc.c,line:2256, smdCtrlTask:set chan smd failed.
file:smd/smd_proc.c,line:2256, smdCtrlTask:set chan smd failed.
file:smd/smd_proc.c,line:2256, smdCtrlTask:set chan smd failed.
file:smd/smd_proc.c,line:2256, smdCtrlTask:set chan smd failed.
read_rs485: recv data 1
0
@@@@do not need poc test@@@@
Device Is Ready
1+0 records in
1+0 records out
65536 bytes (64.0KB) copied, 0.008619 seconds, 7.3MB/s
[ERROR]:savelog.c[1140] iCurrTime[669402] iTempTime[668178]

[ERROR]:savelog.c[1326] flash can not be Operate and quit!

LibLibLib: <HIKVQD_Process> pass at line:1158
LibLibLib: <HIKVQD_Process> pass at line:1158

Hikvision - Clearing Passwords and/or Loading Firmware via TTL Serial

n3wb

n3wb

n3wb

Attachments

Young grasshopper

Young grasshopper

Attachments

Getting the hang of it

Young grasshopper

Getting the hang of it

Young grasshopper

Young grasshopper

Young grasshopper

Getting the hang of it

Young grasshopper

Young grasshopper

Getting the hang of it

Young grasshopper