R0 / DS-2CD2x32 BrickfixV2 brick recovery and full upgrade tool - enhanced.

alastairstevenson · Jun 29, 2019

tgeorge said:
Tried it on a lab lan with a separate power supply and it worked as charm.

Excellent! That's good to hear, thanks for sharing, it will help others.

kgbvisiongroup · Jun 29, 2019

I dont see in devtype codes list model DS-2DE7184-A

alastairstevenson · Jun 29, 2019

Is that an R0 series camera? I have not heard of that model.
What does prtHardInfo show for the devType?

kgbvisiongroup · Jun 29, 2019

Camera in list RO DS-2DE7184-A https://www.use-ip.co.uk/forum/threads/finding-the-latest-hikvision-firmware-for-your-ptz-updated-8th-april-2019.2002
This info on pictures attach

alastairstevenson · Jun 29, 2019

OK, in that case you can see the devType with a telnet or SSH access and using the prtHardInfo command.

kgbvisiongroup · Jun 29, 2019

I log on telent with root and 12345 say
-sh: prtHardInfo: not found

alastairstevenson · Jun 29, 2019

kgbvisiongroup said:
I log on telent with root and 12345 say
-sh: prtHardInfo: not found

That's unusual - that's a standard command that exists across multiple model series, including R0.

kgbvisiongroup · Jun 29, 2019

I was on my way to Brickfixv2, I got to the codelist, and that's where I stopped, now it's gone, how do I find it. Please help me, my cam is bricked

alastairstevenson · Jun 29, 2019

kgbvisiongroup said:
Please help me, my cam is bricked

It's not bricked, it's just running the min-system recovery environment.
To get back, use the Hikvision tftp updater to re-apply the original firmware.
At the telnet command line use the command 'update'

alastairstevenson said:
That's unusual - that's a standard command that exists across multiple model series, including R0.

The prtHardInfo command is only valid when the normal running firmware is active.

alastairstevenson · Jun 29, 2019

But if the devType in mtd6ro is not FF98 then it doesn't need to be changed.

kgbvisiongroup · Jun 29, 2019

I fixed the camera, which I set the first firmwall over tftp Directory listing of http://86.49.187.98/Hikvision/Firmware/IP Cameras/R0 - PTZ series
It was worth it to torture all night, but I found a solution, thank you guys!!!!!!!!!!!!!!!!!

alastairstevenson · Jun 30, 2019

Well done, glad that you got there.

hikhop · Jul 6, 2019

Thank you for your comprehensive tutorial. Upgraded my Chinese DS-2CD2632F-IS from CN5.25 directly to EN5.45 without a hitch and seems to be working perfectly. The EN brickfix would not complete tftp.
Your generosity is much appreciated, thanks again.

Per Johansson · Jul 7, 2019

Hi, first of all, thanks for the tuturial. One of my three cameras had been "hacked by Putin", so I found out it was a Chinese rip-off I had bought some years ago. The list as Device Type "DS-2CD3132-I".

Yesterday I followed the instructions and tried to fix the hacked one. It took several attempts, first the HIK tool failed to load the EN version, but it was successfull loading the CN.
When I had changed the binaries to my model number and language 01, and reloaded it, and tried to install the actual firmware, stage 3 failed to upgrade firmware.
I now loaded the EN version, which this time worked. After this all stages worked fine, and the camera was fixed.

Now I am trying the next camera, which has not had any problems.

- I notice that loading both the EN and CN version of your firmware works on this one.
- Problem is that when logged in with PuTTY (login ok), and trying to do the first step, I just get "Permisson denied" when typing "/dav /fixup.sh".

- tftpd32 is up and running at that time, not blocked by firewall (moved it to a new folder and thus got the question again, knowing I approved it). Both it and PuTTY is running as administrator, just to make sure (tested both)

I've tried loading both EN and CN firmware versions, restarting the camera, etc etc. Any clue as to what permission might be denied at this stage?

Thanks

Per Johansson · Jul 7, 2019

Sorry, please ignore above.. I wrote "/dav /fixup.sh" with a space. Removed and it worked. First time I read the manual a bit better, today I got too cocky. Worked like a charm, thanks.

I leave this here instead of delete the evidence of my dumbness, for anyone elses benefit.

alastairstevenson · Jul 7, 2019

Well done for getting there, and for sharing for the benefit of others.

tgeorge · Jul 7, 2019

tgeorge said:
Tried it on a lab lan with a separate power supply and it worked as charm.
I also did 4 more chinese DC-2CD2532F-IS with success, so thanks for your work and support!

Installed the cams on production site and everything was working fine until yesterday that i had a power failure and 2 of them keeps rebooting.
The cameras are powered over POE switch, i also tryied with seperate power supply but both of them keeps rebooting.
For the period that cams are alive i can ping them but i have no access over telnet or web interface.
The only thing i managed to get is a wireshark capture of the 27 frames that keeps repeating

Code:

No.     Time           Source                Destination           Protocol Length Info
      1 0.000000000    bc:ad:29:07:5a:f5     Broadcast             ARP      60     Who has 192.0.0.128?  Tell 192.0.0.64

Frame 1: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0
Ethernet II, Src: bc:ad:29:07:5a:f5 (bc:ad:29:07:5a:f5), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)

No.     Time           Source                Destination           Protocol Length Info
      2 14.370589000   fe80::bead:29ff:fe07:5af5 ff02::16              ICMPv6   90     Multicast Listener Report Message v2

Frame 2: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) on interface 0
Ethernet II, Src: bc:ad:29:07:5a:f5 (bc:ad:29:07:5a:f5), Dst: IPv6mcast_16 (33:33:00:00:00:16)
Internet Protocol Version 6, Src: fe80::bead:29ff:fe07:5af5 (fe80::bead:29ff:fe07:5af5), Dst: ff02::16 (ff02::16)
Internet Control Message Protocol v6

No.     Time           Source                Destination           Protocol Length Info
      3 15.270464000   fe80::bead:29ff:fe07:5af5 ff02::2               ICMPv6   70     Router Solicitation from bc:ad:29:07:5a:f5

Frame 3: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) on interface 0
Ethernet II, Src: bc:ad:29:07:5a:f5 (bc:ad:29:07:5a:f5), Dst: IPv6mcast_02 (33:33:00:00:00:02)
Internet Protocol Version 6, Src: fe80::bead:29ff:fe07:5af5 (fe80::bead:29ff:fe07:5af5), Dst: ff02::2 (ff02::2)
Internet Control Message Protocol v6

No.     Time           Source                Destination           Protocol Length Info
      4 15.440712000   ::                    ff02::1:ff07:5af5     ICMPv6   78     Neighbor Solicitation for 2a02:587:7921:d500:bead:29ff:fe07:5af5

Frame 4: 78 bytes on wire (624 bits), 78 bytes captured (624 bits) on interface 0
Ethernet II, Src: bc:ad:29:07:5a:f5 (bc:ad:29:07:5a:f5), Dst: IPv6mcast_ff:07:5a:f5 (33:33:ff:07:5a:f5)
Internet Protocol Version 6, Src: :: (::), Dst: ff02::1:ff07:5af5 (ff02::1:ff07:5af5)
Internet Control Message Protocol v6

No.     Time           Source                Destination           Protocol Length Info
      5 48.668357000   bc:ad:29:07:5a:f5     Broadcast             ARP      60     Gratuitous ARP for 192.168.16.154 (Request)

Frame 5: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0
Ethernet II, Src: bc:ad:29:07:5a:f5 (bc:ad:29:07:5a:f5), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request/gratuitous ARP)

No.     Time           Source                Destination           Protocol Length Info
      6 51.951065000   bc:ad:29:07:5a:f5     Broadcast             0x8033   416    Ethernet II

Frame 6: 416 bytes on wire (3328 bits), 416 bytes captured (3328 bits) on interface 0
Ethernet II, Src: bc:ad:29:07:5a:f5 (bc:ad:29:07:5a:f5), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Data (402 bytes)

0000  21 01 01 f6 00 00 00 00 06 04 01 02 8f 2b bc ad   !............+..
0010  29 07 5a f5 c0 a8 10 9a ff ff ff ff ff ff 00 00   ).Z.............
0020  00 00 ff ff ff 00 44 53 2d 32 43 44 32 35 33 32   ......DS-2CD2532
0030  46 2d 49 53 32 30 31 36 30 33 32 31 43 43 43 48   F-IS20160321CCCH
0040  35 38 34 32 32 31 37 33 37 00 00 00 00 00 00 00   584221737.......
0050  00 00 00 00 00 00 00 00 98 14 00 00 1f 40 00 00   .............@..
0060  00 00 00 00 00 00 56 35 2e 34 2e 34 31 62 75 69   ......V5.4.41bui
0070  6c 64 20 31 37 30 33 31 32 00 00 00 00 00 00 00   ld 170312.......
0080  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0090  00 00 00 00 00 00 56 35 2e 30 2c 20 62 75 69 6c   ......V5.0, buil
00a0  64 20 31 35 30 37 30 38 00 00 00 00 00 00 00 00   d 150708........
00b0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
00c0  00 00 00 00 00 00 32 30 31 39 2d 30 37 2d 30 37   ......2019-07-07
00d0  20 30 36 3a 34 33 3a 31 31 00 00 00 00 00 00 00    06:43:11.......
00e0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
00f0  00 00 00 00 00 00 02 9c 4b 77 00 00 00 00 2a 02   ........Kw....*.
0100  05 87 79 21 d5 00 be ad 29 ff fe 07 5a f5 00 00   ..y!....)...Z...
0110  00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 4f   ..............@O
0120  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0130  00 00 00 00 00 00 00 00 00 00 00 00 00 00 23 c2   ..............#.
0140  00 00 00 00 00 00 00 00 00 00 44 53 2d 32 43 44   ..........DS-2CD
0150  56 54 2d 48 53 46 2d 53 00 00 00 00 00 00 00 00   VT-HSF-S........
0160  00 00 44 53 2d 32 43 44 32 35 33 32 46 2d 49 53   ..DS-2CD2532F-IS
0170  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0180  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0190  00 00                                             ..

No.     Time           Source                Destination           Protocol Length Info
      7 51.979762000   fe80::bead:29ff:fe07:5af5 ff02::16              ICMPv6   90     Multicast Listener Report Message v2

Frame 7: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) on interface 0
Ethernet II, Src: bc:ad:29:07:5a:f5 (bc:ad:29:07:5a:f5), Dst: IPv6mcast_16 (33:33:00:00:00:16)
Internet Protocol Version 6, Src: fe80::bead:29ff:fe07:5af5 (fe80::bead:29ff:fe07:5af5), Dst: ff02::16 (ff02::16)
Internet Control Message Protocol v6

No.     Time           Source                Destination           Protocol Length Info
      8 51.983460000   192.168.16.154        224.0.0.22            IGMPv3   60     Membership Report / Join group 224.0.0.251 for any sources

Frame 8: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0
Ethernet II, Src: bc:ad:29:07:5a:f5 (bc:ad:29:07:5a:f5), Dst: IPv4mcast_16 (01:00:5e:00:00:16)
Internet Protocol Version 4, Src: 192.168.16.154 (192.168.16.154), Dst: 224.0.0.22 (224.0.0.22)
Internet Group Management Protocol

No.     Time           Source                Destination           Protocol Length Info
      9 52.014391000   192.168.16.154        224.0.0.22            IGMPv3   62     Membership Report / Join group 239.255.255.250 for any sources / Join group 224.0.0.251 for any sources

Frame 9: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0
Ethernet II, Src: bc:ad:29:07:5a:f5 (bc:ad:29:07:5a:f5), Dst: IPv4mcast_16 (01:00:5e:00:00:16)
Internet Protocol Version 4, Src: 192.168.16.154 (192.168.16.154), Dst: 224.0.0.22 (224.0.0.22)
Internet Group Management Protocol

No.     Time           Source                Destination           Protocol Length Info
     10 52.044393000   192.168.16.154        239.255.255.250       UDP      994    Source port: 37020  Destination port: 37020

Frame 10: 994 bytes on wire (7952 bits), 994 bytes captured (7952 bits) on interface 0
Ethernet II, Src: bc:ad:29:07:5a:f5 (bc:ad:29:07:5a:f5), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa)
Internet Protocol Version 4, Src: 192.168.16.154 (192.168.16.154), Dst: 239.255.255.250 (239.255.255.250)
User Datagram Protocol, Src Port: 37020 (37020), Dst Port: 37020 (37020)
Data (952 bytes)

0000  3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31   <?xml version="1
0010  2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54   .0" encoding="UT
0020  46 2d 38 22 3f 3e 0d 0a 3c 48 65 6c 6c 6f 3e 3c   F-8"?>..<Hello><
0030  54 79 70 65 73 3e 68 65 6c 6c 6f 3c 2f 54 79 70   Types>hello</Typ
0040  65 73 3e 0d 0a 3c 44 65 76 69 63 65 54 79 70 65   es>..<DeviceType
0050  3e 33 38 39 33 32 3c 2f 44 65 76 69 63 65 54 79   >38932</DeviceTy
0060  70 65 3e 0d 0a 3c 44 65 76 69 63 65 44 65 73 63   pe>..<DeviceDesc
0070  72 69 70 74 69 6f 6e 3e 44 53 2d 32 43 44 32 35   ription>DS-2CD25
0080  33 32 46 2d 49 53 3c 2f 44 65 76 69 63 65 44 65   32F-IS</DeviceDe
0090  73 63 72 69 70 74 69 6f 6e 3e 0d 0a 3c 44 65 76   scription>..<Dev
00a0  69 63 65 53 4e 3e 44 53 2d 32 43 44 32 35 33 32   iceSN>DS-2CD2532
00b0  46 2d 49 53 32 30 31 36 30 33 32 31 43 43 43 48   F-IS20160321CCCH
00c0  35 38 34 32 32 31 37 33 37 3c 2f 44 65 76 69 63   584221737</Devic
00d0  65 53 4e 3e 0d 0a 3c 43 6f 6d 6d 61 6e 64 50 6f   eSN>..<CommandPo
00e0  72 74 3e 38 30 30 30 3c 2f 43 6f 6d 6d 61 6e 64   rt>8000</Command
00f0  50 6f 72 74 3e 0d 0a 3c 48 74 74 70 50 6f 72 74   Port>..<HttpPort
0100  3e 39 31 35 34 3c 2f 48 74 74 70 50 6f 72 74 3e   >9154</HttpPort>
0110  0d 0a 3c 4d 41 43 3e 62 63 2d 61 64 2d 32 39 2d   ..<MAC>bc-ad-29-
0120  30 37 2d 35 61 2d 66 35 3c 2f 4d 41 43 3e 0d 0a   07-5a-f5</MAC>..
0130  3c 49 50 76 34 41 64 64 72 65 73 73 3e 31 39 32   <IPv4Address>192
0140  2e 31 36 38 2e 31 36 2e 31 35 34 3c 2f 49 50 76   .168.16.154</IPv
0150  34 41 64 64 72 65 73 73 3e 0d 0a 3c 49 50 76 34   4Address>..<IPv4
0160  53 75 62 6e 65 74 4d 61 73 6b 3e 32 35 35 2e 32   SubnetMask>255.2
0170  35 35 2e 32 35 35 2e 30 3c 2f 49 50 76 34 53 75   55.255.0</IPv4Su
0180  62 6e 65 74 4d 61 73 6b 3e 0d 0a 3c 49 50 76 34   bnetMask>..<IPv4
0190  47 61 74 65 77 61 79 3e 3c 2f 49 50 76 34 47 61   Gateway></IPv4Ga
01a0  74 65 77 61 79 3e 0d 0a 3c 49 50 76 36 41 64 64   teway>..<IPv6Add
01b0  72 65 73 73 3e 32 61 30 32 3a 35 38 37 3a 37 39   ress>2a02:587:79
01c0  32 31 3a 64 35 30 30 3a 62 65 61 64 3a 32 39 66   21:d500:bead:29f
01d0  66 3a 66 65 30 37 3a 35 61 66 35 3c 2f 49 50 76   f:fe07:5af5</IPv
01e0  36 41 64 64 72 65 73 73 3e 0d 0a 3c 49 50 76 36   6Address>..<IPv6
01f0  47 61 74 65 77 61 79 3e 3a 3a 3c 2f 49 50 76 36   Gateway>::</IPv6
0200  47 61 74 65 77 61 79 3e 0d 0a 3c 49 50 76 36 4d   Gateway>..<IPv6M
0210  61 73 6b 4c 65 6e 3e 36 34 3c 2f 49 50 76 36 4d   askLen>64</IPv6M
0220  61 73 6b 4c 65 6e 3e 0d 0a 3c 44 48 43 50 3e 66   askLen>..<DHCP>f
0230  61 6c 73 65 3c 2f 44 48 43 50 3e 0d 0a 3c 41 6e   alse</DHCP>..<An
0240  61 6c 6f 67 43 68 61 6e 6e 65 6c 4e 75 6d 3e 30   alogChannelNum>0
0250  3c 2f 41 6e 61 6c 6f 67 43 68 61 6e 6e 65 6c 4e   </AnalogChannelN
0260  75 6d 3e 0d 0a 3c 44 69 67 69 74 61 6c 43 68 61   um>..<DigitalCha
0270  6e 6e 65 6c 4e 75 6d 3e 31 3c 2f 44 69 67 69 74   nnelNum>1</Digit
0280  61 6c 43 68 61 6e 6e 65 6c 4e 75 6d 3e 0d 0a 3c   alChannelNum>..<
0290  53 6f 66 74 77 61 72 65 56 65 72 73 69 6f 6e 3e   SoftwareVersion>
02a0  56 35 2e 34 2e 34 31 62 75 69 6c 64 20 31 37 30   V5.4.41build 170
02b0  33 31 32 3c 2f 53 6f 66 74 77 61 72 65 56 65 72   312</SoftwareVer
02c0  73 69 6f 6e 3e 0d 0a 3c 44 53 50 56 65 72 73 69   sion>..<DSPVersi
02d0  6f 6e 3e 56 35 2e 30 2c 20 62 75 69 6c 64 20 31   on>V5.0, build 1
02e0  35 30 37 30 38 3c 2f 44 53 50 56 65 72 73 69 6f   50708</DSPVersio
02f0  6e 3e 0d 0a 3c 42 6f 6f 74 54 69 6d 65 3e 32 30   n>..<BootTime>20
0300  31 39 2d 30 37 2d 30 37 20 30 36 3a 34 33 3a 31   19-07-07 06:43:1
0310  31 3c 2f 42 6f 6f 74 54 69 6d 65 3e 0d 0a 3c 52   1</BootTime>..<R
0320  65 73 65 74 41 62 69 6c 69 74 79 3e 66 61 6c 73   esetAbility>fals
0330  65 3c 2f 52 65 73 65 74 41 62 69 6c 69 74 79 3e   e</ResetAbility>
0340  0d 0a 3c 44 69 73 6b 4e 75 6d 62 65 72 3e 30 3c   ..<DiskNumber>0<
0350  2f 44 69 73 6b 4e 75 6d 62 65 72 3e 0d 0a 3c 41   /DiskNumber>..<A
0360  63 74 69 76 61 74 65 64 3e 74 72 75 65 3c 2f 41   ctivated>true</A
0370  63 74 69 76 61 74 65 64 3e 0d 0a 3c 50 61 73 73   ctivated>..<Pass
0380  77 6f 72 64 52 65 73 65 74 41 62 69 6c 69 74 79   wordResetAbility
0390  3e 74 72 75 65 3c 2f 50 61 73 73 77 6f 72 64 52   >true</PasswordR
03a0  65 73 65 74 41 62 69 6c 69 74 79 3e 0d 0a 3c 2f   esetAbility>..</
03b0  48 65 6c 6c 6f 3e 0d 0a                           Hello>..

No.     Time           Source                Destination           Protocol Length Info
     11 52.069392000   192.168.16.154        224.0.0.22            IGMPv3   60     Membership Report / Join group 224.0.0.251 for any sources

Frame 11: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0
Ethernet II, Src: bc:ad:29:07:5a:f5 (bc:ad:29:07:5a:f5), Dst: IPv4mcast_16 (01:00:5e:00:00:16)
Internet Protocol Version 4, Src: 192.168.16.154 (192.168.16.154), Dst: 224.0.0.22 (224.0.0.22)
Internet Group Management Protocol

No.     Time           Source                Destination           Protocol Length Info
     12 52.075384000   192.168.16.154        224.0.0.22            IGMPv3   62     Membership Report / Join group 239.255.255.250 for any sources / Join group 224.0.0.251 for any sources

Frame 12: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0
Ethernet II, Src: bc:ad:29:07:5a:f5 (bc:ad:29:07:5a:f5), Dst: IPv4mcast_16 (01:00:5e:00:00:16)
Internet Protocol Version 4, Src: 192.168.16.154 (192.168.16.154), Dst: 224.0.0.22 (224.0.0.22)
Internet Group Management Protocol

No.     Time           Source                Destination           Protocol Length Info
     13 52.478600000   192.168.16.154        224.0.0.251           MDNS     396    Standard query 0x0000  ANY DS-2CD2532F-IS20160321CCCH584221737.local, "QU" question ANY DS-2CD2532F-IS20160321CCCH584221737.local, "QU" question ANY DS-2CD2532F-IS20160321CCCH584221737.local, "QU" question ANY HIKVISION DS-2CD2532F-IS - 584221737._http._tcp.local, "QU" question ANY HIKVISION DS-2CD2532F-IS - 584221737._psia._tcp.local, "QU" question ANY HIKVISION DS-2CD2532F-IS - 584221737._CGI._tcp.local, "QU" question

Frame 13: 396 bytes on wire (3168 bits), 396 bytes captured (3168 bits) on interface 0
Ethernet II, Src: bc:ad:29:07:5a:f5 (bc:ad:29:07:5a:f5), Dst: IPv4mcast_fb (01:00:5e:00:00:fb)
Internet Protocol Version 4, Src: 192.168.16.154 (192.168.16.154), Dst: 224.0.0.251 (224.0.0.251)
User Datagram Protocol, Src Port: 5353 (5353), Dst Port: 5353 (5353)
Domain Name System (query)

No.     Time           Source                Destination           Protocol Length Info
     14 52.479015000   fe80::bead:29ff:fe07:5af5 ff02::fb              MDNS     416    Standard query 0x0000  ANY DS-2CD2532F-IS20160321CCCH584221737.local, "QU" question ANY DS-2CD2532F-IS20160321CCCH584221737.local, "QU" question ANY DS-2CD2532F-IS20160321CCCH584221737.local, "QU" question ANY HIKVISION DS-2CD2532F-IS - 584221737._http._tcp.local, "QU" question ANY HIKVISION DS-2CD2532F-IS - 584221737._psia._tcp.local, "QU" question ANY HIKVISION DS-2CD2532F-IS - 584221737._CGI._tcp.local, "QU" question

Frame 14: 416 bytes on wire (3328 bits), 416 bytes captured (3328 bits) on interface 0
Ethernet II, Src: bc:ad:29:07:5a:f5 (bc:ad:29:07:5a:f5), Dst: IPv6mcast_fb (33:33:00:00:00:fb)
Internet Protocol Version 6, Src: fe80::bead:29ff:fe07:5af5 (fe80::bead:29ff:fe07:5af5), Dst: ff02::fb (ff02::fb)
User Datagram Protocol, Src Port: 5353 (5353), Dst Port: 5353 (5353)
Domain Name System (query)

No.     Time           Source                Destination           Protocol Length Info
     15 52.752444000   192.168.16.154        224.0.0.251           MDNS     396    Standard query 0x0000  ANY DS-2CD2532F-IS20160321CCCH584221737.local, "QM" question ANY DS-2CD2532F-IS20160321CCCH584221737.local, "QM" question ANY DS-2CD2532F-IS20160321CCCH584221737.local, "QM" question ANY HIKVISION DS-2CD2532F-IS - 584221737._http._tcp.local, "QM" question ANY HIKVISION DS-2CD2532F-IS - 584221737._psia._tcp.local, "QM" question ANY HIKVISION DS-2CD2532F-IS - 584221737._CGI._tcp.local, "QM" question

Frame 15: 396 bytes on wire (3168 bits), 396 bytes captured (3168 bits) on interface 0
Ethernet II, Src: bc:ad:29:07:5a:f5 (bc:ad:29:07:5a:f5), Dst: IPv4mcast_fb (01:00:5e:00:00:fb)
Internet Protocol Version 4, Src: 192.168.16.154 (192.168.16.154), Dst: 224.0.0.251 (224.0.0.251)
User Datagram Protocol, Src Port: 5353 (5353), Dst Port: 5353 (5353)
Domain Name System (query)

No.     Time           Source                Destination           Protocol Length Info
     16 52.753431000   fe80::bead:29ff:fe07:5af5 ff02::fb              MDNS     416    Standard query 0x0000  ANY DS-2CD2532F-IS20160321CCCH584221737.local, "QM" question ANY DS-2CD2532F-IS20160321CCCH584221737.local, "QM" question ANY DS-2CD2532F-IS20160321CCCH584221737.local, "QM" question ANY HIKVISION DS-2CD2532F-IS - 584221737._http._tcp.local, "QM" question ANY HIKVISION DS-2CD2532F-IS - 584221737._psia._tcp.local, "QM" question ANY HIKVISION DS-2CD2532F-IS - 584221737._CGI._tcp.local, "QM" question

Frame 16: 416 bytes on wire (3328 bits), 416 bytes captured (3328 bits) on interface 0
Ethernet II, Src: bc:ad:29:07:5a:f5 (bc:ad:29:07:5a:f5), Dst: IPv6mcast_fb (33:33:00:00:00:fb)
Internet Protocol Version 6, Src: fe80::bead:29ff:fe07:5af5 (fe80::bead:29ff:fe07:5af5), Dst: ff02::fb (ff02::fb)
User Datagram Protocol, Src Port: 5353 (5353), Dst Port: 5353 (5353)
Domain Name System (query)

No.     Time           Source                Destination           Protocol Length Info
     17 52.900422000   fe80::bead:29ff:fe07:5af5 ff02::16              ICMPv6   90     Multicast Listener Report Message v2

Frame 17: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) on interface 0
Ethernet II, Src: bc:ad:29:07:5a:f5 (bc:ad:29:07:5a:f5), Dst: IPv6mcast_16 (33:33:00:00:00:16)
Internet Protocol Version 6, Src: fe80::bead:29ff:fe07:5af5 (fe80::bead:29ff:fe07:5af5), Dst: ff02::16 (ff02::16)
Internet Control Message Protocol v6

No.     Time           Source                Destination           Protocol Length Info
     18 53.029287000   fe80::bead:29ff:fe07:5af5 ff02::16              ICMPv6   90     Multicast Listener Report Message v2

Frame 18: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) on interface 0
Ethernet II, Src: bc:ad:29:07:5a:f5 (bc:ad:29:07:5a:f5), Dst: IPv6mcast_16 (33:33:00:00:00:16)
Internet Protocol Version 6, Src: fe80::bead:29ff:fe07:5af5 (fe80::bead:29ff:fe07:5af5), Dst: ff02::16 (ff02::16)
Internet Control Message Protocol v6

No.     Time           Source                Destination           Protocol Length Info
     19 53.149363000   fe80::bead:29ff:fe07:5af5 ff02::16              ICMPv6   110    Multicast Listener Report Message v2

Frame 19: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) on interface 0
Ethernet II, Src: bc:ad:29:07:5a:f5 (bc:ad:29:07:5a:f5), Dst: IPv6mcast_16 (33:33:00:00:00:16)
Internet Protocol Version 6, Src: fe80::bead:29ff:fe07:5af5 (fe80::bead:29ff:fe07:5af5), Dst: ff02::16 (ff02::16)
Internet Control Message Protocol v6

No.     Time           Source                Destination           Protocol Length Info
     20 53.153435000   192.168.16.154        224.0.0.22            IGMPv3   62     Membership Report / Leave group 224.0.0.251 / Join group 239.255.255.250 for any sources

Frame 20: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0
Ethernet II, Src: bc:ad:29:07:5a:f5 (bc:ad:29:07:5a:f5), Dst: IPv4mcast_16 (01:00:5e:00:00:16)
Internet Protocol Version 4, Src: 192.168.16.154 (192.168.16.154), Dst: 224.0.0.22 (224.0.0.22)
Internet Group Management Protocol

No.     Time           Source                Destination           Protocol Length Info
     21 53.169421000   fe80::bead:29ff:fe07:5af5 ff02::16              ICMPv6   110    Multicast Listener Report Message v2

Frame 21: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) on interface 0
Ethernet II, Src: bc:ad:29:07:5a:f5 (bc:ad:29:07:5a:f5), Dst: IPv6mcast_16 (33:33:00:00:00:16)
Internet Protocol Version 6, Src: fe80::bead:29ff:fe07:5af5 (fe80::bead:29ff:fe07:5af5), Dst: ff02::16 (ff02::16)
Internet Control Message Protocol v6

No.     Time           Source                Destination           Protocol Length Info
     22 53.173431000   192.168.16.154        224.0.0.22            IGMPv3   62     Membership Report / Leave group 224.0.0.251 / Join group 239.255.255.250 for any sources

Frame 22: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0
Ethernet II, Src: bc:ad:29:07:5a:f5 (bc:ad:29:07:5a:f5), Dst: IPv4mcast_16 (01:00:5e:00:00:16)
Internet Protocol Version 4, Src: 192.168.16.154 (192.168.16.154), Dst: 224.0.0.22 (224.0.0.22)
Internet Group Management Protocol

No.     Time           Source                Destination           Protocol Length Info
     23 53.179430000   192.168.16.154        224.0.0.22            IGMPv3   62     Membership Report / Leave group 239.255.255.250 / Leave group 224.0.0.251

Frame 23: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0
Ethernet II, Src: bc:ad:29:07:5a:f5 (bc:ad:29:07:5a:f5), Dst: IPv4mcast_16 (01:00:5e:00:00:16)
Internet Protocol Version 4, Src: 192.168.16.154 (192.168.16.154), Dst: 224.0.0.22 (224.0.0.22)
Internet Group Management Protocol

No.     Time           Source                Destination           Protocol Length Info
     24 53.193595000   192.168.16.154        224.0.0.22            IGMPv3   62     Membership Report / Leave group 239.255.255.250 / Leave group 224.0.0.251

Frame 24: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0
Ethernet II, Src: bc:ad:29:07:5a:f5 (bc:ad:29:07:5a:f5), Dst: IPv4mcast_16 (01:00:5e:00:00:16)
Internet Protocol Version 4, Src: 192.168.16.154 (192.168.16.154), Dst: 224.0.0.22 (224.0.0.22)
Internet Group Management Protocol

No.     Time           Source                Destination           Protocol Length Info
     25 57.809260000   fe80::bead:29ff:fe07:5af5 ff02::16              ICMPv6   90     Multicast Listener Report Message v2

Frame 25: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) on interface 0
Ethernet II, Src: bc:ad:29:07:5a:f5 (bc:ad:29:07:5a:f5), Dst: IPv6mcast_16 (33:33:00:00:00:16)
Internet Protocol Version 6, Src: fe80::bead:29ff:fe07:5af5 (fe80::bead:29ff:fe07:5af5), Dst: ff02::16 (ff02::16)
Internet Control Message Protocol v6

No.     Time           Source                Destination           Protocol Length Info
     26 58.353669000   192.168.16.154        224.0.0.22            IGMPv3   60     Membership Report / Leave group 239.255.255.250

Frame 26: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0
Ethernet II, Src: bc:ad:29:07:5a:f5 (bc:ad:29:07:5a:f5), Dst: IPv4mcast_16 (01:00:5e:00:00:16)
Internet Protocol Version 4, Src: 192.168.16.154 (192.168.16.154), Dst: 224.0.0.22 (224.0.0.22)
Internet Group Management Protocol

No.     Time           Source                Destination           Protocol Length Info
     27 58.370673000   192.168.16.154        224.0.0.22            IGMPv3   60     Membership Report / Leave group 239.255.255.250

Frame 27: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0
Ethernet II, Src: bc:ad:29:07:5a:f5 (bc:ad:29:07:5a:f5), Dst: IPv4mcast_16 (01:00:5e:00:00:16)
Internet Protocol Version 4, Src: 192.168.16.154 (192.168.16.154), Dst: 224.0.0.22 (224.0.0.22)
Internet Group Management Protocol

No.     Time           Source                Destination           Protocol Length Info
     28 85.367910000   bc:ad:29:07:5a:f5     Broadcast             ARP      60     Who has 192.0.0.128?  Tell 192.0.0.64

Frame 28: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) on interface 0
Ethernet II, Src: bc:ad:29:07:5a:f5 (bc:ad:29:07:5a:f5), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)

Any suggestions please ?

alastairstevenson · Jul 7, 2019

tgeorge said:
Any suggestions please ?

I don't see anything of concern in that packet capture - it looks normal enough and the camera is pretty close to full bootup before the restart.

I'd speculate, without a lot of confidence, that maybe there is a configuration inconsistency or corruption that's finally throwing it.
I'm trying to recall if the DS-2CD2532 has a reset button - but maybe it would be easiest to just do a Hikvision tftp updater re-install of the 5.4.41 firmware, which will implicitly wipe the configuration and put the camera in an Inactive state.

P100D · Jul 8, 2019

Hello alastairstevenson,

I kindly ask for your help and advice. I read many of the posts here but I'm confused on what steps I need to take to be able to upgrade my camera.
So I have a DS-2CD2432F-IW running on V5.2.5 build 141201 english menus (currently not bricked). Its serial number contains CCWR ins it. Honestly I'm not sure what the status of this camera is. I remember a while ago I tried to upgrade it and it bricked. Then I found a post did the work and managed to restored it. Now, some years after, I want to upgrade it to 5.4.5_170123 due to security concerns (someone recently hacked it).

Could you please tell me what process to follow in this case?

Many thanks!
# prtHardInfo

Start at 2019-07-07 22:16:46

Serial NO

S-2CD2432F-IWxxxxxCCWRxxxx

V5.2.5 build 141201

hardwareVersion = 0x0

hardWareExtVersion = 0x0

encodeChans = 1

decodeChans = 1

alarmInNums = 1

alarmOutNums = 1

ataCtrlNums = 0

flashChipNums = 0

ramSize = 0x4000000

networksNums = 1

language = 1

devType = 38930

net reboot count = 0

SD status = 0 (1:noraml;0:none)

Path: .

Working Copy Root Path: /data1/data_liwenwei/work/frontend_software_platform_5.2.7_R0

URL: https://192.0.0.140/Camera/Platform..._platform/frontend_software_platform_5.2.7_R0

Repository Root: https://192.0.0.140/Camera

Repository UUID: df2d70c3-7593-7941-af1e-571b313c0946

Revision: 103727

Node Kind: directory

Schedule: normal

Last Changed Author: liwenwei

Last Changed Rev: 103727

Last Changed Date: 2014-12-01 20:51:32 +0800 (Mon, 01 Dec 2014)

alastairstevenson · Jul 8, 2019

On the face of it that appears to be an EN camera that should be able to be upgraded without any need to change its hardware signature.
Do you have any recollection of what was done to brick it on the update you tried a while back?

If you do try the updates, do then in stages, not skipping major versions.
You'll find a good selection of the R0 firmware in the downloads section of this forum.

Search

Search

R0 / DS-2CD2x32 BrickfixV2 brick recovery and full upgrade tool - enhanced.

alastairstevenson

kgbvisiongroup

n3wb

alastairstevenson

kgbvisiongroup

n3wb

alastairstevenson

kgbvisiongroup

n3wb

alastairstevenson

kgbvisiongroup

n3wb

alastairstevenson

alastairstevenson

kgbvisiongroup

n3wb

alastairstevenson

hikhop

n3wb

Per Johansson

n3wb

Attachments

Per Johansson

n3wb

alastairstevenson

tgeorge

n3wb

Attachments

alastairstevenson

P100D

n3wb

alastairstevenson