HIKVISION mtd Brick Recovery Guide

[whoslooking]

Ok next one

https://www.dropbox.com/s/i88eaoge0mx0t29/525.zip?dl=0

 

[Karol Perkowski]

Same thing.

 

[whoslooking]

I think you may have to do this with a complete power pull on the camera, rather than resetting the POE port.

 

[Karol Perkowski]

OK. I can do that after work today.

 

[alastairstevenson]

The bootloader isn't going to peek at the firmware file until it's fully downloaded it.
So the basic problem is figuring out why the tftp server isn't being probed. Assuming the camera is actually still trying to do that.

 

[Karol Perkowski]

I setup a port mirror on the switch last night and didn't see much coming out of the camera. So I'm going to bring a ethernet tap home from work and see if the issue persists. I'm sure that the bootloader is corrupt, just based on how it's acting. Anyone know a place selling a serial cable for these camera's?

 

[alastairstevenson]

These connectors fit OK. You may be able to get them quicker elsewhere.

http://www.aliexpress.com/item/Micro-JST-ZH-1-5mm-Pitch-4-Pin-Female-connector-with-wire-and-Male-PCB-connector/1664241613.html

eBay has results for "Micro JST ZH 1.5mm Pitch" with maybe closer sellers.

And on eBay, a search for 'TTL to serial USB' or 'PL2303HX' gives hundreds of hits, for just a few dollars / pounds / Euros.

 

[Karol Perkowski]

I went ahead and order the following.

http://www.ebay.com/itm/111593270026
http://www.ebay.com/itm/180953299346
http://www.ebay.com/itm/201429406150

Hopefully everything comes sometime mid next week. But overall thanks for the support guys. It looks like the bootloader maybe okay, so it shouldn't be too hard to recover from this.

 

[Karol Perkowski]

Here are my findings. I took a laptop, switch, broken camera and hooked them all up directly. This is by passing my normal poe switch. I took a 12v power supply and powered the camera that way. I addressed the laptop as 192.0.0.128/8 (255.0.0.0). Then ran wireshark and the tftp server. I found that the camera sent it's magic packet but couldn't reproduce this again. So I did some digging around and try to just create a static arp entry on the laptop. Tried it again and bang the camera downloaded the digicap.dav. I did this with 3 firmware releases (5.3.0, 5.2.5, and 5.1.6). I get to the step that says "Completed file [blah blah blah] transmit". However nothing after. Am I not waiting long enough??

 

[Karol Perkowski]

@whoslooking - I also tried that 4line firmware. No luck and by the way. I'm a idiot. I found the camera boxes and it appears the broken one was made on 06/2015 and 5.3.0 150513. Yet it was loaded with 5.2.5 141201.

 

[whoslooking]

Looks like Karol you have a broken one, shame as most can be recovered but if it won't take the tftp I'm at a loss,

It would seem that most of the 5.30 models from China have been downgraded to 5.25 until a block is added in the newer models they will still ship on 5.25

 

[Karol Perkowski]

Well that's made my morning.

 

[Karol Perkowski]

@whoslooking - So what was that mtdx talk on another thread about? I was reading that thread and didn't get a clear picture if it's possibly the same issue.

 

[whoslooking]

Changing the mtd 5&6 changes the language settings of the camera.
From Chinese to En/ml

 

[Karol Perkowski]

Ah. Gotcha. It's for those people that don't brick the camera.

 

[wifi75]

hello, can you help me?
I copy mtdblock5 & 6 from another my worked camera and I replace one .
Now my cam not start, I try to replace firmware by tftp server but nothing...

How ca I do?

 

[whoslooking]

That's never a good idea, copy you original mtd files back as per this guide.

The mtd files 5&6 are not changed by an update.

 

[wifi75]

Yes already replace after update original firmware but camera not start.
and if I ping camera...see below

 

[whoslooking]

Make sure the original files are not modified in any way, if you made an error they won't work.

 

[wifi75]

sure...
I think that my camera is now garbage.... :sad: