Quick review: Hikvision DS-7108N-SN
- Thread starter MikeSav
- Start date
So what you are saying is that if I use the same language flag change on the native Chinese firmware (using the same tool as for the camera firmware), it will not reset to Chinese anymore, not even after a factory reset? Did you actually try a factory reset? Are you aware of CmdrBond's warning above?
If so, that is good to know. Maybe other people already knew this, but I did not, thanks.
If so, that is good to know. Maybe other people already knew this, but I did not, thanks.
I was not doing factory reset but on login page I have Chinese and English and all other menu are English. For now I dont have time to try factory reset, I will do it in future (sorry but im going away...). I made with tool using the flag "lang 2"
Solved my issue, which was a router one. Anyway, would be nice to have telnet or ssh on NVR; would help for troubleshooting...
In case someone have issues on a DD-WRT router with LAN ports (no ping between them) here is a possible solution: DD-WRT Forum :: View topic - LAN Ports problems TL-WR740Nv4 DD-WRT v24-sp2 18777
On NVR side, I succeed to upgrade to 3.0.21 (from 3.0.13) and the English menu remained!
The Chinese camera are working with NVR using ONVIF. Now, I can start troubleshooting on HIK camera which seems dead.
In case someone have issues on a DD-WRT router with LAN ports (no ping between them) here is a possible solution: DD-WRT Forum :: View topic - LAN Ports problems TL-WR740Nv4 DD-WRT v24-sp2 18777
On NVR side, I succeed to upgrade to 3.0.21 (from 3.0.13) and the English menu remained!
The Chinese camera are working with NVR using ONVIF. Now, I can start troubleshooting on HIK camera which seems dead.
alastairstevenson
Staff member
just curious - was this the result of something that was specifically done to it, or just a random event?
Seems when installing I didn't isolated correctly the connector and I found water on the ETH connector
Camera was powered thru a splitter, as the switch isn't POE.Now, camera power-on (I see the LED from IR) but I cannot find it when connecting to it; I am trying to connect directly with the laptop.
alastairstevenson
Staff member
That's usually a troublesome method - best to connect as normal to a switch or router.
If you don't have SADP, worth installing.
It will find the camera whatver IP address it's using, or if it's in 'min-system' mode. Hangzhou Hikvision Digital Technology Co. Ltd.
I opened a separate thread: DS-2CD3T10 bricked: no network access
I made that mistake once.Seems when installing I didn't isolated correctly the connector and I found water on the ETH connector
Now, camera power-on (I see the LED from IR) but I cannot find it when connecting to it; I am trying to connect directly with the laptop.
Tape is *not* enough, no matter how many layers: RJ45 8Pin Interface Ethernet IP68 Waterproof Cable Plug Socket Wire Connector | eBay
As an eBay Associate IPCamTalk earns from qualifying purchases.
For what its worth. I took the file http://download.hikvision.com/UploadFile/Soft/NVR/NVR_(78_71_4_8路_SN)_V3.0.21_170417.zip and applied the language flag as per
Code:
hiktools05R1.exe lang digicapNVR_DS-7108N-SN_V3.0.21_170417.dav 1
resulted in:
Head raw data(108b) :
00000000 E9 9A F7 B6 54 AE DD D3 42 B8 A3 AB B5 CB B5 BE ....T...B.......
00000010 CF BC FE D6 E6 DD D3 BA 46 5C 54 40 34 4A 41 45 ........F\T@4JAE
00000020 43 01 29 35 22 2C 45 46 5C 54 40 34 B5 BE BA CD C.)5",EF\T@4....
00000030 FE D6 CA DD C6 B9 AC 83 AA BF CB B5 BE BA CD BC ................
00000040 BE A3 BE BC C8 DC 8D DF DE B9 9B D2 C0 A0 DD FE ................
00000050 CA DD D3 BA B9 A3 AB BF CB B5 BE BA CD BC FE D6 ................
00000060 25 D2 BA B9 D3 EE 91 CB 15 DA B0 DA
Head decoded data(108b) :
00000000 53 57 4B 48 82 64 00 00 F8 01 00 00 0A 00 00 00 SWKH.d..........
00000010 02 00 00 00 2C 00 00 00 FF FF FF FF FF FF FF FF ....,...........
00000020 FF FF FF FF FF FF FF FF FF FF FF FF 00 00 00 00 ................
00000030 00 00 00 00 15 03 15 20 01 00 00 00 00 00 00 00 ..... ........
00000040 68 69 63 6F 72 65 2E 74 61 72 2E 6C 7A 6D 61 00 hicore.tar.lzma.
00000050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000060 F8 01 00 00 70 45 2E 00 A0 64 0A 17
Magic number : 0x484B5753
iHeaderCheckSum : 0x00006482 [25730]
iHeadTotalLen : 0x000001F8 [504]
iFileNum : 0x0000000A [10]
iLanguage : 0x00000002 [2] CN
iDeviceClass : 0x0000002C
iOEMCode : 0xFFFFFFFF
iFirmwareVer : 0xFFFFFFFF
iFeature: 0xFFFFFFFF
Calculated CheckSum : 0x00006482 [25730]
Full decoded data (with full files block):
00000000 53 57 4B 48 82 64 00 00 F8 01 00 00 0A 00 00 00 SWKH.d..........
00000010 02 00 00 00 2C 00 00 00 FF FF FF FF FF FF FF FF ....,...........
00000020 FF FF FF FF FF FF FF FF FF FF FF FF 00 00 00 00 ................
00000030 00 00 00 00 15 03 15 20 01 00 00 00 00 00 00 00 ..... ........
00000040 68 69 63 6F 72 65 2E 74 61 72 2E 6C 7A 6D 61 00 hicore.tar.lzma.
00000050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000060 F8 01 00 00 70 45 2E 00 A0 64 0A 17 75 49 6D 61 ....pE...d.uIma
00000070 67 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ge..............
00000080 00 00 00 00 00 00 00 00 00 00 00 00 68 47 2E 00 ............hG..
00000090 F0 F7 16 00 99 0C 6C 0B 61 70 70 2E 74 61 72 2E .....l.app.tar.
000000A0 6C 7A 6D 61 00 00 00 00 00 00 00 00 00 00 00 00 lzma............
000000B0 00 00 00 00 00 00 00 00 58 3F 45 00 F0 F0 0D 00 ........X?E.....
000000C0 D3 62 F0 06 64 76 72 43 6D 64 2E 74 61 72 2E 67 .b..dvrCmd.tar.g
000000D0 7A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 z...............
000000E0 00 00 00 00 48 30 53 00 28 30 00 00 BE 01 18 00 ....H0S.(0.....
000000F0 76 65 72 73 69 6F 6E 63 74 72 2E 74 61 72 2E 6C versionctr.tar.l
00000100 7A 6D 61 00 00 00 00 00 00 00 00 00 00 00 00 00 zma.............
00000110 70 60 53 00 D0 25 01 00 15 30 92 00 68 69 73 69 p`S..%..0..hisi
00000120 2E 74 61 72 2E 6C 7A 6D 61 00 00 00 00 00 00 00 .tar.lzma.......
00000130 00 00 00 00 00 00 00 00 00 00 00 00 40 86 54 00 ............@.T.
00000140 C0 9D 0C 00 BB 99 47 06 72 61 6D 64 69 73 6B 2E ......G.ramdisk.
00000150 67 7A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 gz..............
00000160 00 00 00 00 00 00 00 00 00 24 61 00 D8 A8 0A 00 .........$a.....
00000170 76 29 4F 05 77 65 62 73 2E 74 61 72 2E 6C 7A 6D v)O.webs.tar.lzm
00000180 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a...............
00000190 00 00 00 00 D8 CC 6B 00 60 48 09 00 39 2F 9F 04 ......k.`H..9/..
000001A0 73 74 61 72 74 2E 73 68 00 00 00 00 00 00 00 00 start.sh........
000001B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
000001C0 38 15 75 00 88 07 00 00 F8 C2 03 00 6E 65 77 5F 8u.........new_
000001D0 31 30 2E 62 69 6E 00 00 00 00 00 00 00 00 00 00 10.bin..........
000001E0 00 00 00 00 00 00 00 00 00 00 00 00 C0 1C 75 00 .............u.
000001F0 68 03 00 00 AC DA 01 00 Language changed to 1I did the upgrade, and interestingly, yes it worked and everything remained english... However two of my cameras (DS-2CD2135F-IS) which are chinese [never modded by the seller or myself] now refuse to showup....
as many others have seen, in the camera section the language mismatch warning error
So in an attempt to backtrack.
I grabbed the rar from this post DS-7108N-SN V3.0.18 build 151231 for Chines NVR (Eng/Rus)
renamed it to digicapNVR_DS-7108N-SN_V3.0.18_151231.dav
unpacked it and installed it as-is from the rar.
After the reboot all of my cameras returned on-screen. No language mismatches
English remained, however now on the login page prior to entering username/password the drop down only has english listed. Previously to any of these firmware changes it had a decent selection of languages... maybe 5 or 6....
Interestingly... that shows up as per the below
Code:
hiktools05R1.exe digicapNVR_DS-7108N-SN_V3.0.18_151231.dav
results in:
HIK firmware header converter 0.5R
Head raw data(108b) :
00000000 E9 9A F7 B6 D1 AD DD D3 42 B8 A3 AB B5 CB B5 BE ........B.......
00000010 CF BC FE D6 E6 DD D3 BA 46 5C 54 40 34 4A 41 45 ........F\T@4JAE
00000020 43 01 29 35 22 2C 45 46 5C 54 40 34 B5 BE BA CD C.)5",EF\T@4....
00000030 FE D6 CA DD C6 B9 AC 83 AA BF CB B5 BE BA CD BC ................
00000040 A3 83 B0 B2 DD DC A3 AB BF CB B5 BE BA CD BC FE ................
00000050 CA DD D3 BA B9 A3 AB BF CB B5 BE BA CD BC FE D6 ................
00000060 25 D2 BA B9 53 5C A9 CB 2C B2 D6 C6
Head decoded data(108b) :
00000000 53 57 4B 48 07 67 00 00 F8 01 00 00 0A 00 00 00 SWKH.g..........
00000010 02 00 00 00 2C 00 00 00 FF FF FF FF FF FF FF FF ....,...........
00000020 FF FF FF FF FF FF FF FF FF FF FF FF 00 00 00 00 ................
00000030 00 00 00 00 15 03 15 20 01 00 00 00 00 00 00 00 ..... ........
00000040 75 49 6D 61 67 65 00 00 00 00 00 00 00 00 00 00 uImage..........
00000050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000060 F8 01 00 00 F0 F7 16 00 99 0C 6C 0B
Magic number : 0x484B5753
iHeaderCheckSum : 0x00006707 [26375]
iHeadTotalLen : 0x000001F8 [504]
iFileNum : 0x0000000A [10]
iLanguage : 0x00000002 [2] CN
iDeviceClass : 0x0000002C
iOEMCode : 0xFFFFFFFF
iFirmwareVer : 0xFFFFFFFF
iFeature: 0xFFFFFFFF
Calculated CheckSum : 0x00006707 [26375]
Full decoded data (with full files block):
00000000 53 57 4B 48 07 67 00 00 F8 01 00 00 0A 00 00 00 SWKH.g..........
00000010 02 00 00 00 2C 00 00 00 FF FF FF FF FF FF FF FF ....,...........
00000020 FF FF FF FF FF FF FF FF FF FF FF FF 00 00 00 00 ................
00000030 00 00 00 00 15 03 15 20 01 00 00 00 00 00 00 00 ..... ........
00000040 75 49 6D 61 67 65 00 00 00 00 00 00 00 00 00 00 uImage..........
00000050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000060 F8 01 00 00 F0 F7 16 00 99 0C 6C 0B 61 70 70 2E .........l.app.
00000070 74 61 72 2E 6C 7A 6D 61 00 00 00 00 00 00 00 00 tar.lzma........
00000080 00 00 00 00 00 00 00 00 00 00 00 00 E8 F9 16 00 ...............
00000090 00 43 09 00 E5 DB 9B 04 64 76 72 43 6D 64 2E 74 .C......dvrCmd.t
000000A0 61 72 2E 67 7A 00 00 00 00 00 00 00 00 00 00 00 ar.gz...........
000000B0 00 00 00 00 00 00 00 00 E8 3C 20 00 28 30 00 00 .........< .(0..
000000C0 D9 1B 18 00 68 69 63 6F 72 65 2E 74 61 72 2E 6C ..hicore.tar.l
000000D0 7A 6D 61 00 00 00 00 00 00 00 00 00 00 00 00 00 zma.............
000000E0 00 00 00 00 10 6D 20 00 38 40 2E 00 CF 0D 0B 17 .....m .8@.....
000000F0 68 69 73 69 2E 74 61 72 2E 6C 7A 6D 61 00 00 00 hisi.tar.lzma...
00000100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000110 48 AD 4E 00 B0 9C 0C 00 32 A0 48 06 6E 65 77 5F H.N.....2.H.new_
00000120 31 30 2E 62 69 6E 00 00 00 00 00 00 00 00 00 00 10.bin..........
00000130 00 00 00 00 00 00 00 00 00 00 00 00 F8 49 5B 00 .............I[.
00000140 68 03 00 00 48 DC 01 00 72 61 6D 64 69 73 6B 2E h...H...ramdisk.
00000150 67 7A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 gz..............
00000160 00 00 00 00 00 00 00 00 60 4D 5B 00 D8 A8 0A 00 ........`M[.....
00000170 76 29 4F 05 73 74 61 72 74 2E 73 68 00 00 00 00 v)O.start.sh....
00000180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00000190 00 00 00 00 38 F6 65 00 F0 07 00 00 8B FA 03 00 ....8.e.........
000001A0 76 65 72 73 69 6F 6E 63 74 72 2E 74 61 72 2E 6C versionctr.tar.l
000001B0 7A 6D 61 00 00 00 00 00 00 00 00 00 00 00 00 00 zma.............
000001C0 28 FE 65 00 D8 25 01 00 FB 58 92 00 77 65 62 73 (.e..%...X..webs
000001D0 2E 74 61 72 2E 6C 7A 6D 61 00 00 00 00 00 00 00 .tar.lzma.......
000001E0 00 00 00 00 00 00 00 00 00 00 00 00 00 24 67 00 .............$g.
000001F0 20 B9 09 00 DC EF D7 04
Last edited:
alastairstevenson
Staff member
Yes, that's correct.
When changing the language in the firmware header, you are mainly affecting one of the file verification checks that's done prior to the upgrade process taking place.
The firmware internally has a multiplicity of version labels that are checked against the NVR hardware signature block to see what's been decided as allowed combinations.
Examples:
Code:
version.region=overseas
version.major=3
version.minor=4
version.soft=90
firewareID=0000000100000001000002000000002a00000001000000020003
base.buildtime=161008
last.buildtime=161008
openssl.version=v1
version.region=overseas_ml
version.major=3
version.minor=4
version.soft=90
firewareID=0000000100000001000002000000003d00000001000000020005
base.buildtime=160926
last.buildtime=160926
openssl.version=v1Thanks. At a glance i can see a difference. But looking at the example.... Im guessing those version numbers are from camera firmware rather than NVR's.. am i right? Not that it matters as I realise there are similarities.
I guess my question would be - where to from here to edit the other sections.
Normally I would try what I have read elsewhere.... find a english/ML firmware and change it to Chinese lang in the header and give that a crack. But as the DS-7108's are chinese only - no english/ML official firmwares out there to my knowlegde I suspect thats a dead end.
I cant ssh/telnet onto the NVR to hex edit, sort of as per How to flash multilanguage firmware to chinese DS-7608N-E2/8P and all DS-76,78,79-Ex
So I have broken both the 3.0.18 and newer 3.0.21 files and will see if I can see some key differences.
Code:
./hikpack -t k41 -x digicap.davDS-7108N-SN_V3.0.18_build151231 -o contents_nvr_3.0.18/
Magic : 484b5753
hdr_crc : 00006707 (OK)
lang_id : 00000002
date_hex: 20150315
devclass: 0000002c
File: uImage, CRC OK
File: app.tar.lzma, CRC OK
File: dvrCmd.tar.gz, CRC OK
File: hicore.tar.lzma, CRC OK
File: hisi.tar.lzma, CRC OK
File: new_10.bin, CRC OK
File: ramdisk.gz, CRC OK
File: start.sh, CRC OK
File: versionctr.tar.lzma, CRC OK
File: webs.tar.lzma, CRC OK
=== Tail record:
File: new_20.bin, CRC OK
Code:
./hikpack -t k41 -x digicap.davDS-7108N-SN_V3.0.21_build170417 -o contents_nvr_3.0.21
Magic : 484b5753
hdr_crc : 00006482 (OK)
lang_id : 00000002
date_hex: 20150315
devclass: 0000002c
File: hicore.tar.lzma, CRC OK
File: uImage, CRC OK
File: app.tar.lzma, CRC OK
File: dvrCmd.tar.gz, CRC OK
File: versionctr.tar.lzma, CRC OK
File: hisi.tar.lzma, CRC OK
File: ramdisk.gz, CRC OK
File: webs.tar.lzma, CRC OK
File: start.sh, CRC OK
File: new_10.bin, CRC OK
=== Tail record:
File: new_20.bin, CRC OKAll the files outputted seem to be corrupted. Even with the reported CRC OK.
alastairstevenson
Staff member
No, those files were from NVR firmware. Check out the 3.4.90 version numbers - 76/77/78 series.
With the exception of uImage, they are all encrypted, using the 'ded' program.
You should be able to decrypt them using the hikpack tool.
Try start.sh first as the result is a text file, easily checked.
Out of curiosity I downloaded the firmware file you referenced.
Here is a worked example of how to unpack and extract :
Code:
alastair@PC-I5 ~/cctv/NVRFirmware/3.0.21 $ ll
total 15008
drwxr-xr-x 2 alastair alastair 4096 Sep 28 18:21 ./
drwxrwxr-x 30 alastair alastair 4096 Sep 28 17:55 ../
-rw-r--r-- 1 alastair alastair 7676924 Apr 17 04:04 digicap.dav
-rw-r--r-- 1 alastair alastair 7674623 Sep 28 18:07 NVR_(78_71_4_8路_SN)_V3.0.21_170417.zip
alastair@PC-I5 ~/cctv/NVRFirmware/3.0.21 $ hikpack_2.5 -t k41 -x digicap.dav -o contents
Magic : 484b5753
hdr_crc : 00006482 (OK)
lang_id : 00000002
date_hex: 20150315
devclass: 0000002c
File: hicore.tar.lzma, CRC OK
File: uImage, CRC OK
File: app.tar.lzma, CRC OK
File: dvrCmd.tar.gz, CRC OK
File: versionctr.tar.lzma, CRC OK
File: hisi.tar.lzma, CRC OK
File: ramdisk.gz, CRC OK
File: webs.tar.lzma, CRC OK
File: start.sh, CRC OK
File: new_10.bin, CRC OK
=== Tail record:
File: new_20.bin, CRC OK
alastair@PC-I5 ~/cctv/NVRFirmware/3.0.21 $ cp contents/versionctr.tar.lzma .
alastair@PC-I5 ~/cctv/NVRFirmware/3.0.21 $ hikpack_2.5 -t k41 -d versionctr.tar.lzma -o dec_versionctr.tar.lzma
alastair@PC-I5 ~/cctv/NVRFirmware/3.0.21 $ unlzma --single-stream dec_versionctr.tar.lzma
alastair@PC-I5 ~/cctv/NVRFirmware/3.0.21 $ tar -xvf dec_versionctr.tar
hiklogo
ipcdis.png
logo.jpg
nolink
noresource
showlogo
sysVersion.bin
vca_encrypt_3520D.ko
alastair@PC-I5 ~/cctv/NVRFirmware/3.0.21 $ cat sysVersion.bin
standardalastair@PC-I5 ~/cctv/NVRFirmware/3.0.21 $
raboliot
n3wb
- Joined
- Oct 24, 2017
- Messages
- 1
- Reaction score
- 0
Thank you for your example. I tried to flash the chinese firmware on my chinese ds-7108n-sn/p but after it was unable to boot. So it was supposed to be compatible. So what is the latest firmware for DS-710[4/8] series ? 3.0.21 ou 3.13 ?
Best regards
Best regards
Hi all, I currently have a imported NVR which is a DS-7108N-SN/P, would like to upgrade the firmware to v3.0.21, has anyone done this? If so what is the best approach USB stick or via TFTP? Also do any of the later versions add PTZ function. If anyone has a copy of the V3.0.10 as a backup I would like to acquire a copy. If I was to up grade to v21 is there any other changes that would be required.
Cheers
K
Cheers
K
I've not found/seen a 3.0.21 which isn't going to cause your unit to revert to its native Chinese language.
DS-7108N-SN V3.0.18 build 151231 for Chines NVR (Eng/Rus) has a modified 3.0.18 which kept the English and didn't present any language mismatch errors with my other cameras
DS-7108N-SN V3.0.18 build 151231 for Chines NVR (Eng/Rus) has a modified 3.0.18 which kept the English and didn't present any language mismatch errors with my other cameras
Even on the official Chinese website there is no update since V3.0.21 build170417, so since over a year.
Its been running fine for me, in English, but I surely make sure I am never going to do a full reset.
I did grab that 18 though, just in case, thanks, because the current English fallback I have is 13.
Its been running fine for me, in English, but I surely make sure I am never going to do a full reset.
I did grab that 18 though, just in case, thanks, because the current English fallback I have is 13.
hanggaw
n3wb
- Joined
- Feb 3, 2018
- Messages
- 10
- Reaction score
- 1
Hello all. For those of you who updated to 3.0.21, is the PTZ function on NVR working properly?
I get an "operation failed or no permission" error whenever I try to use the PTZ or presets.
My current firmware is 3.0.13 and am using a HikVision PT cam.
Thanks.
I get an "operation failed or no permission" error whenever I try to use the PTZ or presets.
My current firmware is 3.0.13 and am using a HikVision PT cam.
Thanks.