Excellent!I now have 3 camera's in English and running later firmware, completed my last one this morning.
Another good result, well done.
Excellent!I now have 3 camera's in English and running later firmware, completed my last one this morning.
...
At this point, Stage 1 of 3 is ready to be executed.
At the telnet command prompt, type:
/dav/fixup.sh
and watch the on-screen messages.
- On success with Stage 1, check the PC folder that the tftp server is running in for the presence of the file 'mtd6ro_orig'. You may have to hit F5 to refresh. Make a copy of mtd6ro_orig rename to mtd6ro_mod. Do the 'enhanced mtd hack' on it, using the instructions in the spoiler below.
Upgraded a set of 4 DS-2CD2332-I cameras from shipped firmware to V5.4.0 build 160530.
Had just installed XProtect VMS 2019 R1 as the licence was expiring on the previous version and needed to upgrade the camera firmware.
Was thinking I would need to replace the cameras till I discovered this tread.
Thank you so much for your generosity.
I tried to get it to start over again at Stage 1 - by deleting the ..._stage2.txt file - but that didn't work.
To save re-installing the brickfixV2 firmware you can go back to Stage1 by re-creating the flag file at the shell prompt - the contents is not important :Is there a way to get the min-system mode to go through the updater step again, where I'm running the Hikvision tftp updater process, and it's waiting for the "test tftpserver" message from the camera?
echo "Fixup stage1 completed - rollback payload dropped" > /dav/fixup_stage1.txt
To save re-installing the brickfixV2 firmware you can go back to Stage1 by re-creating the flag file at the shell prompt - the contents is not important :
Code:echo "Fixup stage1 completed - rollback payload dropped" > /dav/fixup_stage1.txt
OK, as a candidate to update to in the Stage3?I followed the steps and installed one of the firmware versions linked in the instructions.
Maybe pick an earlier version of the firmware than the 5.4.5 which generally works OK.Any way to - from the command line while telnet'd into the camera - kick off the process where it goes out and looks for the tftp server to download from?
Just a thought - the reboot into the min-system mode might be due to an objection to the mtd6_mod contents.
How confident are you with the changes to that?
The very early versions of firmware are more tolerant of things like the checksum not being matched.
Oddly enough (and I was confused originally too) this is the newest version, the 5.4.5 is the older version.So, I am trying to use the next lower version (5.4.41)
Probably just because it's not mounted.the /dav directory is empty.
Oddly enough (and I was confused originally too) this is the newest version, the 5.4.5 is the older version.
And is less reliable to use as the upgrade target in Stage3 than the 5.4.5 version.
But the very early versions, such as the @whoslooking '5.3.0 to 5.2.5 downgrader' should provide a safety net as a start point.
Probably just because it's not mounted.
tftp -g -r digicap.dav -b 1400 192.0.0.128
/bin/upgrade /digicap.dav
[2019-04-18 23:46:44] TFTP server[192.0.0.128] initialized
[2019-04-18 23:46:53] Device[192.0.0.64] test tftpserver
U-Boot 1.3.4-100728 (Nov 11 2014 - 13:58:34)
ARM Clock: 480MHz
DDR Clock: 336MHz
Hit Ctrl+u to stop autoboot: 0
|RCV UDP pack timeout|
Unknown command:null
nand booting ...
load kernel...
load ramdisk...
[ 0.431047] [ kernel version: svn-174544 ]
init started: BusyBox v1.19.3 (2016-05-23 16:23:55 CST)
starting pid 378, tty '': '/etc/init.d/rcS'
Starting udev: [ OK ]
UBI device number 1, total 192 LEBs (24772608 bytes, 23.6 MiB), available 0 LEB)
waiting for /dev/ubi1_0.
pri_iUpgSuccCnt:0x1, sec_iUpgSuccCnt:0x1
UBI device number 3, total 32 LEBs (4128768 bytes, 3.9 MiB), available 0 LEBs ()
waiting for /dev/ubi3_0.
Check dir /davinci ok! (0)
UBI device number 4, total 32 LEBs (4128768 bytes, 3.9 MiB), available 0 LEBs ()
waiting for /dev/ubi4_0.
Check dir /config ok! (0)
diagnose_way = 15, repair_way = 1, interval = 30
route: ioctl 0x890c failed: No such process
mount: mounting none on /proc/bus/usb failed: No such file or directory
/dav
map_size = 0x300000
nr_item = 3
addr_offset = 0x0 filename = orccode.bin
addr_offset = 0x200000 filename = orcme.bin
addr_offset = 0x2a0000 filename = default_binary.bin
mmap returns 0x4029d000
loading ./orccode.bin...addr = 0x4029d000, size = 0x1a0a91
loading ./orcme.bin...addr = 0x4049d000, size = 0x3a4fc
loading ./default_binary.bin...addr = 0x4053d000, size = 0x40000
===============================
u_code version = 2016/4/6 3.0
===============================
The system is going down NOW!
Sent SIGTERM to all processes
Sent SIGKILL to all processes
Requesting system reboot
[ 10.993883] Restarting system.
U-Boot 1.3.4-100728 (Nov 11 2014 - 13:58:34)
ARM Clock: 480MHz
DDR Clock: 336MHz
Hit Ctrl+u to stop autoboot: 0
begin to enter mini system
U-Boot 1.3.4-100728 (Nov 11 2014 - 13:58:34)
ARM Clock: 480MHz
DDR Clock: 336MHz
Hit Ctrl+u to stop autoboot: 3
HKVS # update
U-Boot 1.3.4-100728 (Nov 11 2014 - 13:58:34)
ARM Clock: 480MHz
DDR Clock: 336MHz
Hit Ctrl+u to stop autoboot: 1
HKVS # update digicap.dav
U-Boot 1.3.4-100728 (Nov 11 2014 - 13:58:34)
ARM Clock: 480MHz
DDR Clock: 336MHz
Hit Ctrl+u to stop autoboot: 1
HKVS # tftpboot
[ INFO][BLD]TFTP: MAC: c4:2f:90:03:e1:bc
[ INFO][BLD]TFTP: TFTP from server 192.168.0.13; our IP address is 192.168.0.20
[ INFO][BLD]TFTP: Filename: 'digicap.dav'
[ INFO][BLD]TFTP: ##############################################################
[ INFO][BLD]TFTP: ##############################################################
[ INFO][BLD]TFTP: ##############################################################
[ INFO][BLD]TFTP: #########################
[ INFO][BLD]TFTP: File size is 18558206 bytes (18123 KB)
HKVS #
HKVS #
That's good.When I tried to upgrade the 1st one through the GUI it get bricked…
Thanks to your post I've been able to fix it!!! Thanks a lot!!
And that's not so good.When no Hikvision TFTP server is listening it boots whith errors then reboots to enter "mini system" and then freezes
bootargs=console=ttyS0 initrd=0xc0a00000,0x400000 rw root=/dev/ram dbg=0 init=/bin/sh
# /etc/init.d/rcS
U-Boot 1.3.4-100728 (Nov 11 2014 - 13:58:34)
ARM Clock: 480MHz
DDR Clock: 336MHz
Hit Ctrl+u to stop autoboot: 0
|RCV UDP pack timeout|
Unknown command:null
nand booting ...
load kernel...
load ramdisk...
init started: BusyBox v1.19.3 (2016-05-23 16:23:55 CST)
starting pid 378, tty '': '/etc/init.d/rcS'
Starting udev: [ OK ]
UBI device number 1, total 192 LEBs (24772608 bytes, 23.6 MiB), available 0 LEBs (0 bytes), LEB size 129024 bytes (126.0 KiB)
waiting for /dev/ubi1_0.
pri_iUpgSuccCnt:0x1, sec_iUpgSuccCnt:0x1
UBI device number 3, total 32 LEBs (4128768 bytes, 3.9 MiB), available 0 LEBs (0 bytes), LEB size 129024 bytes (126.0 KiB)
waiting for /dev/ubi3_0.
Check dir /davinci ok! (0)
UBI device number 4, total 32 LEBs (4128768 bytes, 3.9 MiB), available 0 LEBs (0 bytes), LEB size 129024 bytes (126.0 KiB)
waiting for /dev/ubi4_0.
Check dir /config ok! (0)
diagnose_way = 15, repair_way = 1, interval = 30
route: ioctl 0x890c failed: No such process
mount: mounting none on /proc/bus/usb failed: No such file or directory
/dav
map_size = 0x300000
nr_item = 3
addr_offset = 0x0 filename = orccode.bin
addr_offset = 0x200000 filename = orcme.bin
addr_offset = 0x2a0000 filename = default_binary.bin
mmap returns 0x402eb000
loading ./orccode.bin...addr = 0x402eb000, size = 0x1a0a91
loading ./orcme.bin...addr = 0x404eb000, size = 0x3a4fc
loading ./default_binary.bin...addr = 0x4058b000, size = 0x40000
===============================
u_code version = 2016/4/6 3.0
===============================
/home/initrun.sh: line 80: /dav/guard.sh: not found
ln: /dev/rtc: File exists
=====check_config start=====
===db file doesn't exist===
===db file doesn't exist===
==== both config files are broken====
pppoed==>pppoed ret -1.
netprocess version[getaddrinfo security]: 1.6.1 [14:12:02-Apr 5 2016].
[04-22 08:20:24][pid:836][STRM_ANLS][ERROR]connect call failed errno 2
[04-22 08:20:24][pid:836][STRM_ANLS][ERROR]list node num is [0], load_type is [10012].
No need to recover kernel pri partition.
No need to recover ramdisk pri partition.
IEfile uncompressed.
Chain INPUT (policy ACCEPT)
target prot opt source destination
DROP tcp -- anywhere anywhere tcp dpt:ssh
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
flushed:
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
starting pid 853, tty '': '-/bin/psh'
BusyBox v1.19.3 (2016-05-23 16:23:55 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.
# no rx packets
reset eth0.
no rx packets
reset eth0.
no tx packets
reset eth0.
/usr/sbin/set_sysflag -m 0
# no rx packets
reset eth0.
no tx packets
reset eth0.
no rx packets
reset eth0.
davinci not found and watchdog not initialized! auto reboot system!
begin to set enter minisys flag~~
The system is going down NOW!
Sent SIGTERM to all processes
Sent SIGKILL to all processes
Requesting system reboot
Yes, that's worth trying. I'm not sure what device will show under, tryI think maybe I could use an SD card to exchange data with the CAM since I've got a shell now...
I think that's because the sys_flag to initiate the reboot into min-system mode resets itself.What is weird is that now I can start without the "init=/bin/sh" arg and get a prompt for a while before the reboot occurs.