Hikvision - Clearing Passwords and/or Loading Firmware via TTL Serial

mirki013069 · May 6, 2020

iTuneDVR said:
Show help

HKVS $ setenv bootcmd ';help'

? - alias for 'help'
bootm - boot application image from memory
brush - brush a flash image to the Flash, Be Carefully.
bubt - Burn an boot image on the Boot Flash.
cpld - write cpld info to encrypt media
cramfsload- cramfsload - load binary file from a filesystem image
cramfsls- cramfsls - list files in a directory (default /)
ddr - ddr training function
erase_env- erase envirement info on flash
getinfo - print hardware information
help - print command description/usage
loadb - load binary file over serial line (kermit mode)
loady - load binary file over serial line (ymodem mode)
md - memory display
mii - MII utility commands
mm - memory modify (auto-incrementing address)
mtestall- RAM read/write test
mw - memory write (fill)
pflash - print the compatibility list of flash.
ping - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
reset - Perform RESET of the CPU
run - run commands in an environment variable
saveenv - save environment variables to persistent storage
setenv - set environment variables
tftp - tftp - download or upload image via network using TFTP protocol
update - Update the digicap of the device.
version - print monitor version

iTuneDVR · May 6, 2020

mirki013069 said:
***

ATTENTION!! PLEASE READ THIS NOTICE CAREFULLY ! *

Don't power off or anything that interrupt it ! * ,

The upgrade process will finish in 3 minutes ! *

If this program fails, machine might be unusable ! *

***

Erasing cfg file ... Done

I saw this & must be ok if it real.
After update firmware realy change?
Maybe flash is locked.

If yoh have flashprogrammer, make image & then try clean all after boot & boot env. After it must be config & cramfs app image

mirki013069 · May 6, 2020

iTuneDVR said:
I saw this & must be ok if it real.
After update firmware realy change?
Maybe flash is locked.

If yoh have flashprogrammer, make image & then try clean all after boot & boot env. After it must be config & cramfs app image

yes, I think that flash is locked and there is a hidden command to unlock it. I don't have flashprogrammer unfortunally.

iTuneDVR · May 6, 2020

So, find a master, who can do it.

PattyMorr · May 28, 2020

CN Original Camera 2017 (B) Version Lost password. TTL Com4 /TFtp32 , 13MB

Before Firmware Update
DS-2CD1221D-I3 Active 192.168.1.4 8000 V5.4.24build 170124 192.168.1.1 V1.0 build 161228 1/10/1970 5:40

I Had a hard time Looking for a suitable Cn Firmware and found a list here :

海康设备升级程序包DS-2CD1X21、1X11、1X01(B)系列网络摄像机升级程序包_慈溪市君安安防监控有限公司

慈溪市君安安防监控有限公司是一家致力于从事安防监控行业的工程实施、项目维保及产品销售的专业化公司。公司拥有雄厚的技术力量，先进的仪器设备，提供安防监控系统的各行业设计规划，工程施工以及集成安防系统的全套产品，致力于专业安防技术向民用市场的推广及转化。我公司针对住宅小区、商场、超市、学校、家庭、工厂、酒店、写字楼以及企事业单位的安防监控系统，制定出了满足各类安防监控系统的维护保养服务措施。

www.nbjaaf.com

By changing last number from 2260 to 2265 many other Cn FWs

After Firmware Update : password is still unknown, active on SADP and time did not change
DS-2CD1221D-I3 Active 192.168.1.4 8000 V5.4.41build 170804 192.168.1.1 V1.0 build 161228 1/11/1970 6:34

Camera is supposed to be type R2 as listed but none of those CN firmware work. The One working is IPC_E0_CN_STD_5.4.41_170804

Time/Date was the only thing I was able to change by removing the Cmos Battery . Not reset button., Not ttl header.

Did not received any results with all this commands, just blinking cursor after each command

setenv ipaddr 192.0.0.64
setenv serverip 192.0.0.128
setenv bootargs console=ttyS0,115200n8 root=/dev/ram0 rw initrd=0x42000000 init=/bin/sh
setenv bootcmd 'tftp 0x42000000 uImage; update'

setenv bootcmd ';update'
setenv bootcmd ';help'

Successful FW U with different versions of tftp

Will appreciate any help/ guidance

Patty

alastairstevenson · May 29, 2020

PattyMorr said:
Did not received any results with all this commands, just blinking cursor after each command

That's normal, all those commands are doing is changing the running values of the referenced environment variables.
But it seems you have been able to connect to the serial console, despite "Not ttl header"

Suggestion :
Interrupt the bootloader and show what commands there are with
help
Also list the current environment variables with
printenv

Then issue the
reset
command and allow the camera to boot up.
Copy the log to a text editor (maybe Notepad) and attach here under the 'code' tags (the dropdown to the right of the emoticon in the menu bar) for inspection.

It's an unfamiliar camera, so a bit of fact-finding will be needed before any ideas on how to reset to defaults.

PattyMorr · May 29, 2020

Thanks a lot for quick reply.

Here from Help
U-Boot 2010.06-253629 (Feb 06 2017 - 15:45:03)

Flash: 16 MiB
DRAM: 256 MiB
Hit Ctrl+u to stop autoboot: 0
HKVS # help
? - alias for 'help'
base - print or set address offset
bootm - boot application image from memory
bootp - boot image via network using BOOTP/TFTP protocol
cmp - memory compare
cp - memory copy
crc32 - checksum calculation
ext2load- load binary file from a Ext2 filesystem
ext2ls - list files in a directory (default /)
fatinfo - print information about filesystem
fatload - load binary file from a dos filesystem
fatls - list files in a directory (default /)
getinfo - print hardware information
loadb - load binary file over serial line (kermit mode)
loady - load binary file over serial line (ymodem mode)
loop - infinite loop on address range
md - memory display
mii - MII utility commands
mm - memory modify (auto-incrementing address)
mmc - MMC sub system
mmcinfo - mmcinfo <dev num>-- display MMC info
mtest - simple RAM read/write test
mw - memory write (fill)
nm - memory modify (constant address)
ping - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
rarpboot- boot image via network using RARP/TFTP protocol
reset - Perform RESET of the CPU
saveenv - save environment variables to persistent storage
sdk_help- print command description/usage
setenv - set environment variables
usb - USB sub-system
usbboot - boot from USB device
version - print monitor version
format - format flash except bootloader area
go - start application at address 'addr'
gos - go xxx.bin thru serial
help - print command description/usage
loadk - load kernel to DRAM
update - update digicap.dav with net
updateb - update bootloader with net
updatebsd- update bootloader with sd
updatesd- update digicap.dav with sd
upf - update firmware with net, format and update (factory use)
upfsd - update firmware with sd, format and updatesd (factory use)

And here the Printenv:

HKVS # printenv
bootargs=console=ttyAMA0,115200
bootcmd=loadk;bootm 0x80007fc0
bootdelay=3
baudrate=115200
netmask=255.255.255.0
bootfile="uImage"
bldfile="u-boot_e0.bin"
trspt=0
ipaddr=192.0.0.64
serverip=192.0.0.128
stdin=serial
stdout=serial
stderr=serial
verify=n
ethaddr=18:68:cb:0b:6d:9a
ver=U-Boot 2010.06-253629 (Feb 06 2017 - 15:45:03)

Environment size: 329/65480 bytes
HKVS #

I use Windows 10 Pro 32 bits, LAN directly to camera .Think I got lost with the PuTTy event log as it just produce this few lines:

2020-05-29 07:15:56 Opening serial device COM4
2020-05-29 07:15:56 Configuring baud rate 115200
2020-05-29 07:15:56 Configuring 8 data bits
2020-05-29 07:15:56 Configuring 1 data bits
2020-05-29 07:15:56 Configuring no parity
2020-05-29 07:15:56 Configuring XON/XOFF flow control

In code I pasted all text from clipboard after reset. My apologies in advance for the long text and odd formatted log.

Code:

U-Boot 2010.06-253629 (Feb 06 2017 - 15:45:03)

Flash: 16 MiB
DRAM:  256 MiB
Hit Ctrl+u to stop autoboot:  0
UP_PORT : phy status change : LINK=UP : DUPLEX=FULL : SPEED=100M
|NUL ethaddr| TFTP server not found
auto update with sd is not supported
load kernel to 0x80007fc0 ... Done!
## Booting kernel from Legacy Image at 80007fc0 ...
   Image Name:   Linux-3.0.8
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    3498832 Bytes = 3.3 MiB
   Load Address: 80008000
   Entry Point:  80008000
   XIP Kernel Image ... OK
OK

Starting kernel ...

▒Starting udev:      [ OK ]
diagnose_way = 14, repair_way = 0, interval = 60
route: ioctl 0x890c failed: No such process
cp: can't stat 'ss': No such file or directory
cp: can't stat 'hostapd.lzma': No such file or directory
chmod: /dav/libcrypto.so: Read-only file system
/home
ln: setAgingMode: File exists
ln: getAgingMode: File exists
ln: setAgingTime: File exists
ln: getAgingTime: File exists
Insmod ko start...
mv: can't rename 'e0_modules/8192cu.ko': No such file or directory
insmod: can't insert '/home/ipc_stm8.ko': unknown symbol in module, or unknown parameter
Insmod ko end...
Press Ctrl-C to stop ...
Bingo  not en file 0x 8000005d  0x ffffff00
Unix bus   -4 .
sys_cmd cp -f  /dav/davinci_bak  /home/davinci.lzma

netprocess Infomation FSP_network_protocol_5.4.2_for_g1:
version: 1.7.1.204140 [18:41:34-Dec 16 2016].
Path: /Camera/Platform/Branches/branches_FSP_network_protocol/FSP_network_protocol_5.4.2_for_g1
Last Changed Rev: 230348
Last Changed Date: 2016-10-24 19:46:38 +0800 (Mon, 24 Oct 2016)


Enter DB_main-------------------
shared memory address is: 0x404a7000, sizeof(DEVICECONFIG) = 891344
wait davinci set default...
[01-11 16:11:30][pid:306][IPC][ERROR]daemon can not find Dst process.load_type 0x10012 is_need_ack 1
[01-11 16:11:30][pid:315][IPC][ERROR] from daemon ack, dst not work  len 0 , load_type is [0x10012]
[01-11 16:11:30][pid:315][UNI_IF][ERROR]65554:ipc_unix_call_service failed, ret = -3.
[01-11 16:11:30][pid:315][UNI_IF][ERROR]communicaite_to_davinci failed!!!
[01-11 16:11:31][pid:306][IPC][ERROR]daemon can not find Dst process.load_type 0x10012 is_need_ack 1
[01-11 16:11:31][pid:315][IPC][ERROR] from daemon ack, dst not work  len 0 , load_type is [0x10012]
[01-11 16:11:31][pid:315][UNI_IF][ERROR]65554:ipc_unix_call_service failed, ret = -3.
[01-11 16:11:31][pid:315][UNI_IF][ERROR]communicaite_to_davinci failed!!!
App Start ...
[01-11 16:11:32][pid:306][IPC][ERROR]daemon can not find Dst process.load_type 0x10012 is_need_ack 1
[01-11 16:11:32][pid:315][IPC][ERROR] from daemon ack, dst not work  len 0 , load_type is [0x10012]
[01-11 16:11:32][pid:315][UNI_IF][ERROR]65554:ipc_unix_call_service failed, ret = -3.
[01-11 16:11:32][pid:315][UNI_IF][ERROR]communicaite_to_davinci failed!!!
[01-11 16:11:33][pid:306][IPC][ERROR]daemon can not find Dst process.load_type 0x10012 is_need_ack 1
[01-11 16:11:33][pid:315][IPC][ERROR] from daemon ack, dst not work  len 0 , load_type is [0x10012]
[01-11 16:11:33][pid:315][UNI_IF][ERROR]65554:ipc_unix_call_service failed, ret = -3.
[01-11 16:11:33][pid:315][UNI_IF][ERROR]communicaite_to_davinci failed!!!
[01-11 16:11:34][pid:306][IPC][ERROR]daemon can not find Dst process.load_type 0x10012 is_need_ack 1
[01-11 16:11:34][pid:315][IPC][ERROR] from daemon ack, dst not work  len 0 , load_type is [0x10012]
[01-11 16:11:34][pid:315][UNI_IF][ERROR]65554:ipc_unix_call_service failed, ret = -3.
[01-11 16:11:34][pid:315][UNI_IF][ERROR]communicaite_to_davinci failed!!!
[01-11 16:11:35][pid:306][IPC][ERROR]daemon can not find Dst process.load_type 0x10012 is_need_ack 1
[01-11 16:11:35][pid:315][IPC][ERROR] from daemon ack, dst not work  len 0 , load_type is [0x10012]
[01-11 16:11:35][pid:315][UNI_IF][ERROR]65554:ipc_unix_call_service failed, ret = -3.
[01-11 16:11:35][pid:315][UNI_IF][ERROR]communicaite_to_davinci failed!!!
[01-11 16:11:36][pid:306][IPC][ERROR]daemon can not find Dst process.load_type 0x10012 is_need_ack 1
[01-11 16:11:36][pid:315][IPC][ERROR] from daemon ack, dst not work  len 0 , load_type is [0x10012]
[01-11 16:11:36][pid:315][UNI_IF][ERROR]65554:ipc_unix_call_service failed, ret = -3.
[01-11 16:11:36][pid:315][UNI_IF][ERROR]communicaite_to_davinci failed!!!
IEfile uncompressed.
BusyBox v1.2.1 Protect Shell (psh)
Enter 'help' for a list of davinci system commands.

# [01-11 16:11:37][pid:306][IPC][ERROR]daemon can not find Dst process.load_type 0x10012 is_need_ack 1
[01-11 16:11:37][pid:315][IPC][ERROR] from daemon ack, dst not work  len 0 , load_type is [0x10012]
[01-11 16:11:37][pid:315][UNI_IF][ERROR]65554:ipc_unix_call_service failed, ret = -3.
[01-11 16:11:37][pid:315][UNI_IF][ERROR]communicaite_to_davinci failed!!!
Unix bus  End
=========main
=========user_sysinit  =====
[01-11 16:11:37][pid:0][OTHER][ERROR]CUSTOM_PATH open error.No such file or directory
[01-11 16:11:37][pid:0][OTHER][ERROR]analysis_custom_devtype error

-------Goint to init_database-922298
davinci enter init_database
shared memory address is: 0x405d2000, sizeof(DEVICECONFIG) = 891344
davinci init_shared_memory success.
powerLineFrequencyMode = 0
[01-11 16:11:38][pid:0][UNI_IF][ERROR]stream request out range 3(2)
After set_devcfg_default, database need to init
[01-11 16:11:38][pid:306][IPC][ERROR]daemon can not find Dst process.load_type 0x10026 is_need_ack 1
[01-11 16:11:38][pid:314][IPC][ERROR] from daemon ack, dst not work  len 0 , load_type is [0x10026]
[01-11 16:11:38][pid:314][DATABASE][ERROR][uni_process/DB_uni_process.c 203][get_devcapa_data]65574:ipc_unix_call_service failed, ret = -3.
[01-11 16:11:38][pid:314][DATABASE][ERROR][main/DB_main.c 141][main]get capa chan_num failed...
going to init database:1
Davinci wait for init dababase
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

[01-11 16:11:39][pid:314][DATABASE][DEBUG][main/dbutil.c 1611][db_checkandrecovery]db_main check num=0
[01-11 16:11:39][pid:314][DATABASE][DEBUG][main/dbutil.c 1616][db_checkandrecovery]main db is ok
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

[01-11 16:11:40][pid:314][DATABASE][ERROR][main/dbutil.c 8183][init_database]db version = 301056


db_enc_version = 16777472

[01-11 16:11:40][pid:314][DATABASE][DEBUG][main/dbutil.c 6427][db_getdata_byversion]Direct read from the database
S: cmd_check_capa_support  ,ack -1

[01-11 16:11:40][pid:314][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack -1

[01-11 16:11:40][pid:314][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack -1

[01-11 16:11:40][pid:314][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack -1

[01-11 16:11:40][pid:314][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack -1

[01-11 16:11:40][pid:314][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack -1

[01-11 16:11:40][pid:314][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack -1

[01-11 16:11:40][pid:314][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack 1

[01-11 16:11:40][pid:314][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 1
S: cmd_check_capa_support  ,ack -1

[01-11 16:11:40][pid:314][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack -1

[01-11 16:11:40][pid:314][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack -1

[01-11 16:11:40][pid:314][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack -1

[01-11 16:11:40][pid:314][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
[01-11 16:11:40][pid:314][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[10].get is null
[01-11 16:11:40][pid:314][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[34].get is null
[01-11 16:11:40][pid:314][DATABASE][ERROR][main/dbshell.c 4213][db_get_local_port]unknown port_type: 5
[01-11 16:11:40][pid:314][DATABASE][ERROR][main/dbshell.c 4458][db_get_local_port_ext]unknown port_type: 5
[01-11 16:11:40][pid:314][DATABASE][DEBUG][main/dbshell.c 20085][db_get_ipdome_ptzparam] ipdome_ptzparam_table is not exist
[01-11 16:11:40][pid:314][DATABASE][DEBUG][main/dbshell.c 16750][db_get_roi_param] roi_param_table is not exist
get 0-0-0-0.000000-0-0-0
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[93].get is null
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[94].get is null
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[95].get is null
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[96].get is null
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[97].get is null
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[98].get is null
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[99].get is null
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[100].get is null
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[121].get is null
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[122].get is null
[01-11 16:11:41][pid:314][DATABASE][DEBUG][main/dbshell.c 43086][db_get_sdi_local_output_config]select sdi_local_output_enable, local_output_hd from front_other_config where idx=1;
[01-11 16:11:41][pid:314][DATABASE][DEBUG][main/dbshell.c 43226][db_get_sdi_485_enable_config]select rs485_enable from serial_config_table where serial_type=2;


db_enc_version = 16777472

davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 528][get_alldata_from_db]device do not support color filter
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-11 16:11:41][pid:314][DATABASE][DEBUG][main/dbutil.c 1762][add_column]add column pt_mode to table ipdome_osdparam_table
[01-11 16:11:41][pid:314][DATABASE][DEBUG][main/dbutil.c 1767][add_column]column pt_mode already exists in table ipdome_osdparam_table
[01-11 16:11:41][pid:314][DATABASE][DEBUG][main/dbutil.c 1762][add_column]add column revise_mode to table revise_gps_param_config
[01-11 16:11:41][pid:314][DATABASE][DEBUG][main/dbutil.c 1767][add_column]column revise_mode already exists in table revise_gps_param_config
[01-11 16:11:41][pid:314][DATABASE][DEBUG][main/dbutil.c 1762][add_column]add column byBackgroundPic to table intelligent_face_detect_config
[01-11 16:11:41][pid:314][DATABASE][DEBUG][main/dbutil.c 1767][add_column]column byBackgroundPic already exists in table intelligent_face_detect_config
[01-11 16:11:41][pid:314][DATABASE][DEBUG][main/dbutil.c 1762][add_column]add column satellite_interval to table ntp_config_info
[01-11 16:11:41][pid:314][DATABASE][DEBUG][main/dbutil.c 1767][add_column]column satellite_interval already exists in table ntp_config_info
[01-11 16:11:41][pid:314][DATABASE][ERROR][main/dbutil.c 8193][init_database]ipc_db_backup need backup.
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

[01-11 16:11:42][pid:314][DATABASE][DEBUG][main/DB_main.c 156][main]After init_database...
goint to set_semvalue 1...
This is database process,  table_name = 301056,load_type = 0x6001f
channel_no = 0, sensor_no = 0, smd_type = 0, scene_no = 0
EN_GET_OLD_DB_VERSION----
current_db_version = 301056,  old_db_version = 301056
current_db_version = (301056-1176),  old_db_version = (301056-1176)
database init success, davinci wait sem success
init_database success...

-------end to init_database-922302
This is database process,  table_name = 0,load_type = 0x6001d
channel_no = 891344, sensor_no = 0, smd_type = 0, scene_no = 0
EN_CHECK_DEVCFG_THE_SAME----
---------------------This is backup_dev_cfg-------------------

database going to sleep----------
reboot reason is not valid, do nothing
<init_run>4352:capture_mode(17) value. 125967385
<MEGA_DSP>Platform Value:
<MEGA_DSP>Main mux type [0x4].
<MEGA_DSP>Sub   mux type [0x4].
<MEGA_DSP>Thi  mux type [0x2].
<MEGA_DSP>audio enc type[0x2].
<MEGA_DSP>voicetalk type[0x2].
<MEGA_DSP>Need PS SysHdr[0].
tar: can't open '/dav/r2_modules.tar.gz': No such file or directory
rmmod: can't unload 'hi3518_adec': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_aenc': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_ao': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_ai': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_sio': unknown symbol in module, or unknown parameter
rmmod: can't unload 'acodec': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hidmac': unknown symbol in module, or unknown parameter
remove audio
rmmod: can't unload 'uart232': unknown symbol in module, or unknown parameter
rmmod: can't unload 'ssp_iris': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_ive': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_vda': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_region': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_rc': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_jpege': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_h264e': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_chnl': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_group': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_venc': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_vou': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_vpss': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_isp': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_viu': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_dsu': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_tde': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hiuser': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_sys': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_base': unknown symbol in module, or unknown parameter
rmmod: can't unload 'mmz': unknown symbol in module, or unknown parameter
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

insert audio
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

[01-11 16:11:46][pid:0][SYSINIT][ERROR]device not support RS485
[01-11 16:11:46][pid:0][HW_IF][ERROR]r2 transfer_485_config_options error [options:57]
fpga_info.beuse is 0, not use fgpa
<lib>pDspInitParaArmlib = 0x406ac008,share buf len 0x834ac, fontInfo=0x4072f498, vpfont=0x413ca008, fontLen=766080
 ******viType :   [20]********************************************
ISP_Create:sensor id = 33.
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

<lib> dspTaskCreat ok!
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

AEC_Init error framelen(640)
[Func]:MPI_AI_AecInit [Line]:369 [Info]:aec open fail.
AEC_Init error framelen(640)
[Func]:MPI_AI_AecInit [Line]:369 [Info]:aec open fail.
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

host cmd. start!!!!!! HostSetAesSecretKey 0 !!!!!!!!
NOTIFY:HostSetAesSecretKey not Enable![01-11 16:11:49][pid:0][DSP][ERROR]Initial: the permanent code is disable.
[01-11 16:11:49][pid:0][UNI_IF][ERROR]The device don't support audio
[PSWD][0070]:public_base64_len 188  len 140
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

[01-11 16:11:50][pid:315][UNI_IF][ERROR]



 ===Davinci  Init Finish...
This is database process,  table_name = 0,load_type = 0x61026
channel_no = 0, sensor_no = 0, smd_type = 0, scene_no = 0
S: cmd_get_enable_list

--------------usrapp:maxEnChanNo = 1 ----------------
[01-11 16:11:51][pid:0][SYSLOG][ERROR]no main log. system log will not work.
[01-11 16:11:51][pid:315][UNI_IF][ERROR]
 isDm365WifiIPCAM=0
S: cmd_check_capa_support  ,ack -1

[01-11 16:11:54][pid:0][DSP][ERROR]read_logofile_to_buf failed: width=0, height=0
streamRecord[1]: start...
appweb: 1: MPR services are ready
<lib>cmd error!!cmd =39, err==0xffffffff(-1)
[01-11 16:11:59][pid:0][CAPA][ERROR]Get capa error, the type is [0], the pData is NULL .
[01-11 16:11:59][pid:0][PREVIEW][ERROR]in pDevCfgParam max packetlen = 1440
[01-11 16:11:59][pid:0][PREVIEW][ERROR]packetlen = 1440
[01-11 16:11:59][pid:0][PREVIEW][ERROR]g_metadata_mem[1].base = 2cdb7c8
[01-11 16:11:59][pid:0][PREVIEW][ERROR]g_metadata_mem[1].totalsize = 92160
[01-11 16:11:59][pid:0][PREVIEW][ERROR]g_metadata_mem[1].ridx = 0
[01-11 16:11:59][pid:0][PREVIEW][ERROR]g_metadata_mem[1].widx = 0
[01-11 16:11:59][pid:0][PREVIEW][ERROR]g_metadata_mem[1].packetlen = 1440
[01-11 16:11:59][pid:0][PREVIEW][ERROR]g_metadata_mem[1].peer_packetlen = 1440
appweb: 1: Starting host named: "::"
appweb: 1: Starting host named: "httpsHost"
appweb: 1: appwebTask: mprStartEventsThread Success.....

This is database process,  table_name = 65793,load_type = 0x61027
channel_no = 9010, sensor_no = 0, smd_type = 9020, scene_no = 1447774536
[01-11 16:12:03][pid:0][ALARM_EXP][ERROR]hwif_setalarmout err.
start_rtsp_server: maxEnChanNo=1, is_support_mpeg4=1
[01-11 16:12:03][pid:0][DSP][ERROR]key_warning......curR 527188, curW 544716, if_idx 0
[01-11 16:12:03][pid:0][DSP][ERROR]key_warning......curR 527188, curW 544716, if_idx 394824
[01-11 16:12:03][pid:0][RECORD][ERROR]if run here need check date iframeidx 525888, rec rdidx 0, wt idx 17528
[01-11 16:12:03][pid:0][RECORD][ERROR]warning...now throw a frame,,,be calful,
[01-11 16:12:03][pid:0][RECORD][ERROR]if run here need check date iframeidx 394824, rec rdidx 0, wt idx 17528
[01-11 16:12:03][pid:0][RECORD][ERROR]warning...now throw a frame,,,be calful,
[01-11 16:12:03][pid:0][HW_IF][ERROR]icr_type:2 error.
[01-11 16:12:03][pid:0][PTZ][ERROR]read  PTZFILEHEAD error!,1 0
[01-11 16:12:03][pid:0][PTZ][ERROR]fread erro 2242
This is database process,  table_name = 65793,load_type = 0x61027
channel_no = 9010, sensor_no = 0, smd_type = 9020, scene_no = 1447774536
This is database process,  table_name = 65793,load_type = 0x61027
channel_no = 9010, sensor_no = 0, smd_type = 9020, scene_no = 1447774536
[01-11 16:12:04][pid:0][SYSINIT][ERROR]all player header have got success!
This is database process,  table_name = 0,load_type = 0x61026
channel_no = 0, sensor_no = 0, smd_type = 0, scene_no = 0
This is database process,  table_name = 65793,load_type = 0x61027
channel_no = 9010, sensor_no = 0, smd_type = 9020, scene_no = 1447774536
[01-11 16:12:04][pid:0][ONVIF][ERROR]is_discovery_init, before wait_net_available
[01-11 16:12:04][pid:0][ONVIF][ERROR]mcast_setloop_ex
start_ezviz_service, dinfo 4d2ac7ec, token 4d2ace94
[01-11 16:12:04][3][632]access token begin
decrypt begin
decrypt end
[01-11 16:12:04][3][632]access token success
[01-11 16:12:04][1][632]################ezviz main start################
[01-11 16:12:04][1][632]################ezviz main start, over################
[01-11 16:12:04][2][634]main routine begin
[01-11 16:12:04][2][634]session init finish!
[01-11 16:12:04][2][634]port init finish!
[01-11 16:12:04][1][634]port no mapped
[01-11 16:12:04][2][635]check remote session thread begin
start dev log ctrl!
[01-11 16:12:04][3][637]process message routine begin...
[01-11 16:12:04][3][638]open socket 67 success
[01-11 16:12:04][3][638]BindToDeviceName
[01-11 16:12:04][3][638]start to accept new connection, listen port 9010
[01-11 16:12:04][3][639]open socket 68 success
[01-11 16:12:04][3][639]BindToDeviceName
[01-11 16:12:04][3][639]start to accept new connection, listen port 9020
[01-11 16:12:04][3][640]detec_stun_routine begin
[01-11 16:12:04][3][640]detec_stun_routine start.........
[01-11 16:12:04][1][640]the stun server is not valid
[01-11 16:12:04][3][640]open socket 70 success
[01-11 16:12:04][3][640]BindToDeviceName
[01-11 16:12:04][3][640]start to connect lbs dev.ys7.com:8555, type 1...
[01-11 16:12:04][3][641]start udp hole punch thread..., link count = 3
[01-11 16:12:05][pid:0][ONVIF][ERROR]ptz not support
[01-11 16:12:12][pid:0][UNI_IF][ERROR]device ip is zero
[01-11 16:12:14][pid:0][UNI_IF][ERROR]device IP changed,new ip [192.168.1.4], reinit UPnP
[01-11 16:12:14][1][637]getaddrinfo error, return -2: Name or service not known
[01-11 16:12:14][1][637]ezviz_das DNS dev.ys7.com parse error
[01-11 16:12:14][1][640]getaddrinfo error, return -2: Name or service not known
[01-11 16:12:14][1][640]connect lbs domain dev.ys7.com:8555 error, errno 0: Success
[01-11 16:12:14][3][640]close socket 70 success
[01-11 16:12:14][3][640]on_get_user_id 0x28982c
[01-11 16:12:14][3][640]userid 0000000000000000
[01-11 16:12:14][3][640]detec_stun_routine end, sleep 300 s
[01-11 16:12:19][3][637]process message routine begin...
[01-11 16:12:29][pid:0][UNI_IF][ERROR]upnp_portmap_search_server fialed, result[-11]--:0-Failed,1-Success,2-TimeOut.
[01-11 16:12:29][1][637]getaddrinfo error, return -2: Name or service not known
[01-11 16:12:29][1][637]ezviz_das DNS dev.ys7.com parse error
[01-11 16:12:34][3][637]process message routine begin...
[01-11 16:12:43][pid:0][UNI_IF][ERROR]upnp_portmap_search_server fialed, result[-11]--:0-Failed,1-Success,2-TimeOut.
[01-11 16:12:44][1][637]getaddrinfo error, return -2: Name or service not known
[01-11 16:12:44][1][637]ezviz_das DNS dev.ys7.com parse error
[01-11 16:12:49][3][637]process message routine begin...
[01-11 16:12:59][1][637]getaddrinfo error, return -2: Name or service not known
[01-11 16:12:59][1][637]ezviz_das DNS dev.ys7.com parse error
[01-11 16:13:02][pid:0][UNI_IF][ERROR]upnp_portmap_search_server fialed, result[-11]--:0-Failed,1-Success,2-TimeOut.
[01-11 16:13:04][3][637]process message routine begin...
[01-11 16:13:15][1][637]getaddrinfo error, return -2: Name or service not known
[01-11 16:13:15][1][637]ezviz_das DNS dev.ys7.com parse error
[01-11 16:13:20][3][637]process message routine begin...
[01-11 16:13:30][1][637]getaddrinfo error, return -2: Name or service not known
[01-11 16:13:30][1][637]ezviz_das DNS dev.ys7.com parse error
[01-11 16:13:31][pid:0][UNI_IF][ERROR]upnp_portmap_search_server fialed, result[-11]--:0-Failed,1-Success,2-TimeOut.
[01-11 16:13:35][3][637]process message routine begin...
[01-11 16:13:45][1][637]getaddrinfo error, return -2: Name or service not known
[01-11 16:13:45][1][637]ezviz_das DNS dev.ys7.com parse error
[01-11 16:13:50][3][637]process message routine begin...
[01-11 16:14:00][pid:0][UNI_IF][ERROR]upnp_portmap_search_server fialed, result[-11]--:0-Failed,1-Success,2-TimeOut.
[01-11 16:14:00][1][637]getaddrinfo error, return -2: Name or service not known
[01-11 16:14:00][1][637]ezviz_das DNS dev.ys7.com parse error
[01-11 16:14:05][3][637]process message routine begin...
[01-11 16:14:15][1][637]getaddrinfo error, return -2: Name or service not known
[01-11 16:14:15][1][637]ezviz_das DNS dev.ys7.com parse error
[01-11 16:14:20][3][637]process message routine begin...
[01-11 16:14:28][pid:0][UNI_IF][ERROR]upnp_portmap_search_server fialed, result[-11]--:0-Failed,1-Success,2-TimeOut.
[01-11 16:14:30][1][637]getaddrinfo error, return -2: Name or service not known
[01-11 16:14:30][1][637]ezviz_das DNS dev.ys7.com parse error
[01-11 16:14:35][3][637]process message routine begin...
[01-11 16:14:45][1][637]getaddrinfo error, return -2: Name or service not known
[01-11 16:14:45][1][637]ezviz_das DNS dev.ys7.com parse error
[01-11 16:14:50][3][637]process message routine begin...
[01-11 16:14:57][pid:0][UNI_IF][ERROR]upnp_portmap_search_server fialed, result[-11]--:0-Failed,1-Success,2-TimeOut.
[01-11 16:15:00][1][637]getaddrinfo error, return -2: Name or service not known
[01-11 16:15:00][1][637]ezviz_das DNS dev.ys7.com parse error
[01-11 16:15:05][3][637]process message routine begin...

alastairstevenson · May 29, 2020

PattyMorr said:
Here from Help

OK, no serial flash commands (sf) so one less route to try.
But it does confirm it's an E0 series camera.
Are you sure it is a CN camera?

It looks like the console log is partly suppressed.
Suggestion, for more info :
Let the camera boot up normall, then clear the PuTTY scrollback.
Presss Return a couple of times, you should get a # prompt.

Use the command
prtHardInfo
Then the command
dmesg
And copy the scrollback to clipboard and save in Notepad or similar to attach here.

You have what you believe is valid firmware for the camera.
Did you try the Hikvision tftp updater?

TFTPServ

Hikvision IP Camera Emergency Firmware Recovery TFTP. Check this thread for info on how to use this tool to un-brick your Hikvision camera.

ipcamtalk.com

Worth trying while you have console access.
With the digicap.dav in the same folder as the tftpserve.exe program, and the PC IP address set to 192.0.0.128 and both the camera and PC wired to a switch or router, and ideally powered by 12v
Clear the PuTTY scrollback.
Start tftpserve.exe and click OK to the Windows firewall prompt.
Power on the camera.
Observe the result, just watching the console log.

PattyMorr · May 29, 2020

To confirm is a CN original camera out of a red box , attached a picture of camera and the box for the replacement.
Yes, I tried the HK tft updater with same results Acivated not psw reseted.

This came out of prtHardInfo and dmesg

Code:

#
# [01-11 18:32:47][3][637]process message routine begin...

# [01-11 18:32:57][1][637]getaddrinfo error, return -2: Name or service not known
[01-11 18:32:57][1][637]ezviz_das DNS dev.ys7.com parse error
[01-11 18:33:01][pid:0][UNI_IF][ERROR]upnp_portmap_search_server fialed, result[-11]--:0-Failed,1-Success,2-TimeOut.
[01-11 18:33:02][3][637]process message routine begin...
[01-11 18:33:12][1][637]getaddrinfo error, return -2: Name or service not known
[01-11 18:33:12][1][637]ezviz_das DNS dev.ys7.com parse error
^M
# #
# [01-11 18:33:17][3][637]process message routine begin...

#
#
#
# prtHardInfo
Start at 1970-01-11 16:11:49
Serial NO :DS-2CD1221D-I320170310AACH728870315
V5.4.41 build 170804
NetProcess Version: 1.7.1.204140 [18:41:34-Dec 16 2016]
Db Encrypt Version: 65537
Db Major Version: 1176
Db svn info:
Path: /Camera/Platform/Branches/branches_frontend_software_platform/db_process_for_5.4.20
Last Changed Rev: 201703
Last Changed Date: 2016-06-17 09:43:40 +0800 (Fri, 17 Jun 2016)
hardwareVersion = 0x0
hardWareExtVersion      = 0x0
encodeChans             = 1
decodeChans             = 1
alarmInNums             = 0
alarmOutNums            = 0
ataCtrlNums             = 0
flashChipNums           = 0
ramSize                 = 0x100
networksNums            = 1
language                        = 2
devType                 = 0x22438
net reboot count        = 0
vi_type                 = 20
Unkonwn SVN Info!!!


# [01-11 18:33:27][1][637]getaddrinfo error, return -2: Name or service not known
[01-11 18:33:27][1][637]ezviz_das DNS dev.ys7.com parse error
[01-11 18:33:29][pid:0][UNI_IF][ERROR]upnp_portmap_search_server fialed, result[-11]--:0-Failed,1-Success,2-TimeOut.
[01-11 18:33:32][3][637]process message routine begin...
[01-11 18:33:42][1][637]getaddrinfo error, return -2: Name or service not known
[01-11 18:33:42][1][637]ezviz_das DNS dev.ys7.com parse error
[01-11 18:33:47][3][637]process message routine begin...
[01-11 18:33:57][1][637]getaddrinfo error, return -2: Name or service not known
[01-11 18:33:57][1][637]ezviz_das DNS dev.ys7.com parse error
[01-11 18:33:58][pid:0][UNI_IF][ERROR]upnp_portmap_search_server fialed, result[-11]--:0-Failed,1-Success,2-TimeOut.

#
#
# [01-11 18:34:02][3][637]process message routine begin...

#
# dmesg
[    0.000000] Linux version 3.0.8 (donggaopeng@Cpl-Frt-BSP) #1 Wed Dec 14 15:45:52 CST 2016
[    0.000000] CPU: ARM926EJ-S [41069265] revision 5 (ARMv5TEJ), cr=00053177
[    0.000000] CPU: VIVT data cache, VIVT instruction cache
[    0.000000] Machine: r2
[    0.000000] Memory policy: ECC disabled, Data cache writeback
[    0.000000] AXI bus clock 200000000.
[    0.000000] On node 0 totalpages: 28672
[    0.000000] free_area_init_node: node 0, pgdat c064d624, node_mem_map c066c000
[    0.000000]   Normal zone: 224 pages used for memmap
[    0.000000]   Normal zone: 0 pages reserved
[    0.000000]   Normal zone: 28448 pages, LIFO batch:7
[    0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
[    0.000000] pcpu-alloc: [0] 0
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 28448
[    0.000000] Kernel command line: console=ttyAMA0,115200 mtdparts=hi_sfc:256k(bld)ro,64k(env),64k(enc)ro,64k(usr),3584k(sys),10688k(app),1664k(cfg) mem=128M ip=192.0.0.64:::255.255.255.0 eth=18:68:cb:0b:6d:9a rst=0
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Memory: 112MB = 112MB total
[    0.000000] Memory: 107080k/107080k available, 7608k reserved, 0K highmem
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xfff00000 - 0xfffe0000   ( 896 kB)
[    0.000000]     DMA     : 0xffc00000 - 0xffe00000   (   2 MB)
[    0.000000]     vmalloc : 0xc7800000 - 0xfe000000   ( 872 MB)
[    0.000000]     lowmem  : 0xc0000000 - 0xc7000000   ( 112 MB)
[    0.000000]     modules : 0xbf000000 - 0xc0000000   (  16 MB)
[    0.000000]       .init : 0xc0008000 - 0xc01ca000   (1800 kB)
[    0.000000]       .text : 0xc01ca000 - 0xc062b000   (4484 kB)
[    0.000000]       .data : 0xc062c000 - 0xc064dca0   ( 136 kB)
[    0.000000]        .bss : 0xc064dcc4 - 0xc066b760   ( 119 kB)
[    0.000000] SLUB: Genslabs=13, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS:32 nr_irqs:32 32
[    0.000000] sched_clock: 32 bits at 100MHz, resolution 10ns, wraps every 42949ms
[    0.000000] Console: colour dummy device 80x30
[    0.000673] Calibrating delay loop... 218.72 BogoMIPS (lpj=1093632)
[    0.070081] pid_max: default: 32768 minimum: 301
[    1.531924] Card authentication succeeded
[    1.532234] Mount-cache hash table entries: 512
[    1.533519] CPU: Testing write buffer coherency: ok
[    1.537119] NET: Registered protocol family 16
[    1.538220] Serial: AMBA PL011 UART driver
[    1.538540] uart:0: ttyAMA0 at MMIO 0x20080000 (irq = 5) is a PL011 rev2
[    1.538730] console [ttyAMA0] enabled
[    1.548947] bio: create slab <bio-0> at 0
[    1.550991] usbcore: registered new interface driver usbfs
[    1.551412] usbcore: registered new interface driver hub
[    1.551894] usbcore: registered new device driver usb
[    1.554657] cfg80211: Calling CRDA to update world regulatory domain
[    1.556546] Switching to clocksource timer1
[    1.574045] NET: Registered protocol family 2
[    1.574378] IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
[    1.575232] TCP established hash table entries: 4096 (order: 3, 32768 bytes)
[    1.576020] TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
[    1.576422] TCP: Hash tables configured (established 4096 bind 4096)
[    1.576452] TCP reno registered
[    1.576488] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    1.576627] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    1.577458] NET: Registered protocol family 1
[    1.578268] RPC: Registered named UNIX socket transport module.
[    1.578313] RPC: Registered udp transport module.
[    1.578339] RPC: Registered tcp transport module.
[    1.578363] RPC: Registered tcp NFSv4.1 backchannel transport module.
[    2.125886] mmc0 power register success!
[    2.160482] nfs4filelayout_init: NFSv4 File Layout Driver Registering...
[    2.162973] JFFS2 version 2.2. © 2001-2006 Red Hat, Inc.
[    2.165740] msgmni has been set to 209
[    2.171553] io scheduler noop registered
[    2.171971] io scheduler cfq registered (default)
[    2.179880] brd: module loaded
[    2.180854] SPI id table Version 1.22
[    2.180893] Hisilicon Spi Flash Controller V350 Device Driver, Version 1.10
[    2.181503] SPI (cs1) ID: 0xEF 0x40 0x18 0x00 0x00 0x00
[    2.181564] winbond uid: 0xd2, 66, 74, 20, a3, 1a, 22, 2a
[    2.191910] SPI FLASH start_up_mode is 3 Bytes
[    2.191964] W25Q128BV, block size: 64KB, chip size: 16MB
[    2.192059] 7 cmdlinepart partitions found on MTD device hi_sfc
[    2.192092] Creating 7 MTD partitions on "hi_sfc":
[    2.192135] 0x000000000000-0x000000040000 : "bld"
[    2.194347] 0x000000040000-0x000000050000 : "env"
[    2.196441] 0x000000050000-0x000000060000 : "enc"
[    2.198648] 0x000000060000-0x000000070000 : "usr"
[    2.200930] 0x000000070000-0x0000003f0000 : "sys"
[    2.203225] 0x0000003f0000-0x000000e60000 : "app"
[    2.205555] 0x000000e60000-0x000001000000 : "cfg"
[    2.208306] Fixed MDIO Bus: probed
[    2.327515] r2_mii: probed
[    2.440602] PHY r2_mii:03 found : id is : 0x1cc816
[    2.446088] rtl8201f_set_EEE: set eee capability successfully
[    2.446405] PPP generic driver version 2.4.2
[    2.446967] PPP Deflate Compression module registered
[    2.447007] PPP BSD Compression module registered
[    2.470363] PPP MPPE Compression module registered
[    2.470413] NET: Registered protocol family 24
[    2.470782] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    2.471212] usb-ehci usb-ehci.0: HIUSB EHCI
[    2.471583] usb-ehci usb-ehci.0: new USB bus registered, assigned bus number 1
[    2.471975] usb-ehci usb-ehci.0: irq 15, io mem 0x100b0000
[    2.490160] usb-ehci usb-ehci.0: USB 0.0 started, EHCI 1.00
[    2.491670] hub 1-0:1.0: USB hub found
[    2.491771] hub 1-0:1.0: 1 port detected
[    2.492705] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    2.493155] usb-ohci usb-ohci.0: HIUSB OHCI
[    2.493332] usb-ohci usb-ohci.0: new USB bus registered, assigned bus number 2
[    2.493504] usb-ohci usb-ohci.0: irq 16, io mem 0x100a0000
[    2.555572] hub 2-0:1.0: USB hub found
[    2.555673] hub 2-0:1.0: 1 port detected
[    2.556907] usbcore: registered new interface driver cdc_acm
[    2.556948] cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters
[    2.557177] usbcore: registered new interface driver cdc_wdm
[    2.558108] rtc rtc: rtc core: registered rtc as rtc0
[    2.558691] r2 watchdog driver v1.0. initial timeout 60 sec
[    2.561241] Netfilter messages via NETLINK v0.30.
[    2.561459] nf_conntrack version 0.5.0 (1673 buckets, 6692 max)
[    2.563815] ip_tables: (C) 2000-2006 Netfilter Core Team
[    2.564069] TCP cubic registered
[    2.564104] Initializing XFRM netlink socket
[    2.567328] NET: Registered protocol family 10
[    2.571414] ip6_tables: (C) 2000-2006 Netfilter Core Team
[    2.571605] IPv6 over IPv4 tunneling driver
[    2.574699] NET: Registered protocol family 17
[    2.574856] NET: Registered protocol family 15
[    2.576667] sctp: Hash tables configured (established 4096 bind 8192)
[    2.578430] sctp: sctp_init_sock(sk: c6330000)
[    2.578589] lib80211: common routines for IEEE802.11 drivers
[    2.578626] lib80211_crypt: registered algorithm 'NULL'
[    2.578654] Registering the dns_resolver key type
[    2.578785] VFP support v0.3: not present
[    2.579766] registered taskstats version 1
[    2.580150] card disconnected!
[    2.580299] rtc rtc: setting system clock to 1970-01-11 16:11:17 UTC (922277)
[    3.092240] ADDRCONF(NETDEV_UP): eth0: link is not ready
[    4.100656] IP-Config: Complete:
[    4.100699]      device=eth0, addr=192.0.0.64, mask=255.255.255.0, gw=255.255.255.255,
[    4.100761]      host=192.0.0.64, domain=, nis-domain=(none),
[    4.100788]      bootserver=255.255.255.255, rootserver=255.255.255.255, rootpath=
[    4.102242] Freeing init memory: 1800K
[    6.441065] PHY: r2_mii:03 - Link is Up - 100/Full
[    6.441307] ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   11.649433] base module init.
[   11.671133] sspi: module license 'Proprietary' taints kernel.
[   11.671180] Disabling lock debugging due to kernel taint
[   11.699090] [motor_init]: insmod motor module successfully
[   11.758246] ipc_stm8: Unknown symbol HI_I2C_Read (err 0)
[   11.758314] ipc_stm8: Unknown symbol HI_I2C_Write (err 0)
[   11.789549] watch module init.
[   17.050144] eth0: no IPv6 routers present
[   29.340760] Hisilicon Media Memory Zone Manager
[   29.382198] Hisilicon UMAP device driver interface: v3.00
[   29.434645] pa:87000000, va:c7a00000
[   29.434683] load sys.ko ...OK!
[   29.607562] load viu.ko ...OK!
[   29.642722] ISP Mod init!
[   29.705316] load vpss.ko ....OK!
[   29.795802] load vou.ko ....OK!
[   29.838749] load venc.ko ...OK!
[   29.879307] load group.ko ...OK!
[   29.916806] load chnl.ko ...OK!
[   29.957492] load h264e.ko ...OK!
[   29.986850] load jpege.ko ...OK!
[   30.028807] load rc.ko ...OK!
[   30.058529] load region.ko ....OK!
[   30.101567] load vda.ko ....OK!
[   30.171390] hi_i2c init is ok!
[   30.175666] <is_wireless_control_device>dev_typ-22438
[   30.175695] I2C_400K!
[   30.207611] ssp_frameform: framemode=0,spo=1, sph=1, datawidth=12
[   30.207653] ssp initial ok!
[   30.240551] IPC
[   30.240596]     name:uart2,
[   30.240927] adding uart2, minor = 0
[   30.241355] Successfully insmod uart232 module!
[   30.343873] Kernel: ssp initial ok!
[   30.400304] acodec inited!
[  845.842277] ***link down status changed***.
[  845.842342] PHY: r2_mii:03 - Link is Down
[  846.576136] ADDRCONF(NETDEV_UP): eth0: link is not ready
[  847.843092] ***link down status changed***.
[  847.843158] PHY: r2_mii:03 - Link is Down
[  848.843195] PHY: r2_mii:03 - Link is Up - 100/Full
[  848.843664] ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[  859.251039] eth0: no IPv6 routers present
[ 1566.842965] ***link down status changed***.
[ 1566.843029] PHY: r2_mii:03 - Link is Down
[ 1567.885400] ADDRCONF(NETDEV_UP): eth0: link is not ready
[ 1569.843949] PHY: r2_mii:03 - Link is Up - 100/Full
[ 1569.844421] ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[ 1579.891728] eth0: no IPv6 routers present
[ 2768.924727] ***link down status changed***.
[ 2768.924792] PHY: r2_mii:03 - Link is Down
[ 2769.396005] ADDRCONF(NETDEV_UP): eth0: link is not ready
[ 2770.924984] PHY: r2_mii:03 - Link is Up - 100/Full
[ 2770.925465] ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[ 2781.202954] eth0: no IPv6 routers present
[ 3610.044441] ***link down status changed***.
[ 3610.044505] PHY: r2_mii:03 - Link is Down
[ 3610.834438] ADDRCONF(NETDEV_UP): eth0: link is not ready
[ 3612.045055] ***link down status changed***.
[ 3612.045121] PHY: r2_mii:03 - Link is Down
[ 3613.045467] PHY: r2_mii:03 - Link is Up - 100/Full
[ 3613.045934] ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[ 3623.403793] eth0: no IPv6 routers present
[ 3971.084871] ***link down status changed***.
[ 3971.084934] PHY: r2_mii:03 - Link is Down
[ 3972.157375] ADDRCONF(NETDEV_UP): eth0: link is not ready
[ 3974.085586] PHY: r2_mii:03 - Link is Up - 100/Full
[ 3974.086058] ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[ 3984.384120] eth0: no IPv6 routers present
[ 5173.245971] ***link down status changed***.
[ 5173.246034] PHY: r2_mii:03 - Link is Down
[ 5173.780599] ADDRCONF(NETDEV_UP): eth0: link is not ready
[ 5175.247117] PHY: r2_mii:03 - Link is Up - 100/Full
[ 5175.247586] ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[ 5185.315474] eth0: no IPv6 routers present
[ 6014.286575] ***link down status changed***.
[ 6014.286641] PHY: r2_mii:03 - Link is Down
[ 6015.260222] ADDRCONF(NETDEV_UP): eth0: link is not ready
[ 6016.287335] ***link down status changed***.
[ 6016.287401] PHY: r2_mii:03 - Link is Down
[ 6017.288477] PHY: r2_mii:03 - Link is Up - 100/Full
[ 6017.288991] ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[ 6027.946166] eth0: no IPv6 routers present
[ 6736.368073] ***link down status changed***.
[ 6736.368133] PHY: r2_mii:03 - Link is Down
[ 6736.690595] ADDRCONF(NETDEV_UP): eth0: link is not ready
[ 6738.370601] PHY: r2_mii:03 - Link is Up - 100/Full
[ 6738.371325] ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[ 6748.776889] eth0: no IPv6 routers present
[ 7457.409543] ***link down status changed***.
[ 7457.409629] PHY: r2_mii:03 - Link is Down
[ 7458.102091] ADDRCONF(NETDEV_UP): eth0: link is not ready
[ 7459.410101] ***link down status changed***.
[ 7459.410175] PHY: r2_mii:03 - Link is Down
[ 7460.410007] PHY: r2_mii:03 - Link is Up - 100/Full
[ 7460.410599] ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[ 7471.247675] eth0: no IPv6 routers present
[ 7938.411750] ***link down status changed***.
[ 7938.411836] PHY: r2_mii:03 - Link is Down
[ 7939.372614] ADDRCONF(NETDEV_UP): eth0: link is not ready
[ 7942.411093] PHY: r2_mii:03 - Link is Up - 100/Full
[ 7942.411673] ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[ 7952.998221] eth0: no IPv6 routers present
# [01-11 18:34:12][1][637]getaddrinfo error, return -2: Name or service not known
[01-11 18:34:12][1][637]ezviz_das DNS dev.ys7.com parse error
[01-11 18:34:17][3][637]process message routine begin...
[01-11 18:34:26][pid:0][UNI_IF][ERROR]upnp_portmap_search_server fialed, result[-11]--:0-Failed,1-Success,2-TimeOut.
[01-11 18:34:27][1][637]getaddrinfo error, return -2: Name or service not known
[01-11 18:34:27][1][637]ezviz_das DNS dev.ys7.com parse error
[01-11 18:34:32][3][637]process message routine begin...
[01-11 18:34:42][1][637]getaddrinfo error, return -2: Name or service not known
[01-11 18:34:42][1][637]ezviz_das DNS dev.ys7.com parse error
[01-11 18:34:47][3][637]process message routine begin...
[01-11 18:34:55][pid:0][UNI_IF][ERROR]upnp_portmap_search_server fialed, result[-11]--:0-Failed,1-Success,2-TimeOut.
[01-11 18:34:57][1][637]getaddrinfo error, return -2: Name or service not known
[01-11 18:34:57][1][637]ezviz_das DNS dev.ys7.com parse error
[01-11 18:35:02][3][637]process message routine begin...
[01-11 18:35:12][1][637]getaddrinfo error, return -2: Name or service not known
[01-11 18:35:12][1][637]ezviz_das DNS dev.ys7.com parse error
[01-11 18:35:17][3][637]process message routine begin...
[

Process with TFTP Server Updater, it did process two times until I closed the App

This is from Putty:

Code:

U-Boot 2010.06-253629 (Feb 06 2017 - 15:45:03)

Flash: 16 MiB
DRAM:  256 MiB
Hit Ctrl+u to stop autoboot:  0
HKVS # reset
resetting ...


U-Boot 2010.06-253629 (Feb 06 2017 - 15:45:03)

Flash: 16 MiB
DRAM:  256 MiB
Hit Ctrl+u to stop autoboot:  0
UP_PORT : phy status change : LINK=UP : DUPLEX=FULL : SPEED=100M
TFTP server found
UP_PORT : phy status change : LINK=UP : DUPLEX=FULL : SPEED=100M
TFTP from server 192.0.0.128; our IP address is 192.0.0.64
Download Filename 'digicap.dav'.
Download to address: 0x81000000
Downloading: #  [ Connected ]
################################        [ 1.000 MB]
################################        [ 2.000 MB]
################################        [ 3.000 MB]
################################        [ 4.000 MB]
################################        [ 5.000 MB]
################################        [ 6.000 MB]
################################        [ 7.000 MB]
################################        [ 8.000 MB]
################################        [ 9.000 MB]
################################        [10.000 MB]
################################        [11.000 MB]
################################        [12.000 MB]
################################        [13.000 MB]
########################
done
Bytes transferred = 14432124 (dc377c hex)
Found 1 packets.
Skip file _cfgUpgClass
Erasing [sys] .........................................................done
Writing [sys] .................................................................done
write uImage len: 3498896 ok
Erasing [app] .................................................................done
Writing [app] .................................................................done
write app.img len: 10932224 ok

Upgrade success!
auto reboot now
resetting ...


U-Boot 2010.06-253629 (Feb 06 2017 - 15:45:03)

Flash: 16 MiB
DRAM:  256 MiB
Hit Ctrl+u to stop autoboot:  0
UP_PORT : phy status change : LINK=UP : DUPLEX=FULL : SPEED=100M
TFTP server found
UP_PORT : phy status change : LINK=UP : DUPLEX=FULL : SPEED=100M
TFTP from server 192.0.0.128; our IP address is 192.0.0.64
Download Filename 'digicap.dav'.
Download to address: 0x81000000
Downloading: #  [ Connected ]
################################        [ 1.000 MB]
################################        [ 2.000 MB]
################################        [ 3.000 MB]
################################        [ 4.000 MB]
################################        [ 5.000 MB]
################################        [ 6.000 MB]
################################        [ 7.000 MB]
################################        [ 8.000 MB]
################################        [ 9.000 MB]
################################        [10.000 MB]
################################        [11.000 MB]
################################        [12.000 MB]
################################        [13.000 MB]
########################
done
Bytes transferred = 14432124 (dc377c hex)
Found 1 packets.
Skip file _cfgUpgClass
Erasing [sys] .........................................................done
Writing [sys] .................................................................done
write uImage len: 3498896 ok
Erasing [app] .................................................................done
Writing [app] .................................................................done
write app.img len: 10932224 ok

Upgrade success!
auto reboot now
resetting ...


U-Boot 2010.06-253629 (Feb 06 2017 - 15:45:03)

Flash: 16 MiB
DRAM:  256 MiB
Hit Ctrl+u to stop autoboot:  0
UP_PORT : phy status change : LINK=UP : DUPLEX=FULL : SPEED=100M
|RCV UDP pack timeout| TFTP server not found
auto update with sd is not supported
load kernel to 0x80007fc0 ... Done!
## Booting kernel from Legacy Image at 80007fc0 ...
   Image Name:   Linux-3.0.8
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    3498832 Bytes = 3.3 MiB
   Load Address: 80008000
   Entry Point:  80008000
   XIP Kernel Image ... OK
OK

Starting kernel ...

▒Starting udev:      [ OK ]
diagnose_way = 14, repair_way = 0, interval = 60
route: ioctl 0x890c failed: No such process
cp: can't stat 'ss': No such file or directory
cp: can't stat 'hostapd.lzma': No such file or directory
chmod: /dav/libcrypto.so: Read-only file system
/home
ln: setAgingMode: File exists
ln: getAgingMode: File exists
ln: setAgingTime: File exists
ln: getAgingTime: File exists
Insmod ko start...
mv: can't rename 'e0_modules/8192cu.ko': No such file or directory
insmod: can't insert '/home/ipc_stm8.ko': unknown symbol in module, or unknown parameter
Insmod ko end...
Press Ctrl-C to stop ...
Bingo  not en file 0x 8000005d  0x ffffff00
Unix bus   -4 .
sys_cmd cp -f  /dav/davinci_bak  /home/davinci.lzma

netprocess Infomation FSP_network_protocol_5.4.2_for_g1:
version: 1.7.1.204140 [18:41:34-Dec 16 2016].
Path: /Camera/Platform/Branches/branches_FSP_network_protocol/FSP_network_protocol_5.4.2_for_g1
Last Changed Rev: 230348
Last Changed Date: 2016-10-24 19:46:38 +0800 (Mon, 24 Oct 2016)


Enter DB_main-------------------
shared memory address is: 0x403e0000, sizeof(DEVICECONFIG) = 891344
wait davinci set default...
[01-11 18:50:20][pid:306][IPC][ERROR]daemon can not find Dst process.load_type 0x10012 is_need_ack 1
[01-11 18:50:20][pid:315][IPC][ERROR] from daemon ack, dst not work  len 0 , load_type is [0x10012]
[01-11 18:50:20][pid:315][UNI_IF][ERROR]65554:ipc_unix_call_service failed, ret = -3.
[01-11 18:50:20][pid:315][UNI_IF][ERROR]communicaite_to_davinci failed!!!
^C[01-11 18:50:21][pid:306][IPC][ERROR]daemon can not find Dst process.load_type 0x10012 is_need_ack 1
[01-11 18:50:21][pid:315][IPC][ERROR] from daemon ack, dst not work  len 0 , load_type is [0x10012]
[01-11 18:50:21][pid:315][UNI_IF][ERROR]65554:ipc_unix_call_service failed, ret = -3.
[01-11 18:50:21][pid:315][UNI_IF][ERROR]communicaite_to_davinci failed!!!
App Start ...
[01-11 18:50:22][pid:306][IPC][ERROR]daemon can not find Dst process.load_type 0x10012 is_need_ack 1
[01-11 18:50:22][pid:315][IPC][ERROR] from daemon ack, dst not work  len 0 , load_type is [0x10012]
[01-11 18:50:22][pid:315][UNI_IF][ERROR]65554:ipc_unix_call_service failed, ret = -3.
[01-11 18:50:22][pid:315][UNI_IF][ERROR]communicaite_to_davinci failed!!!
[01-11 18:50:23][pid:306][IPC][ERROR]daemon can not find Dst process.load_type 0x10012 is_need_ack 1
[01-11 18:50:23][pid:315][IPC][ERROR] from daemon ack, dst not work  len 0 , load_type is [0x10012]
[01-11 18:50:23][pid:315][UNI_IF][ERROR]65554:ipc_unix_call_service failed, ret = -3.
[01-11 18:50:23][pid:315][UNI_IF][ERROR]communicaite_to_davinci failed!!!
[01-11 18:50:24][pid:306][IPC][ERROR]daemon can not find Dst process.load_type 0x10012 is_need_ack 1
[01-11 18:50:24][pid:315][IPC][ERROR] from daemon ack, dst not work  len 0 , load_type is [0x10012]
[01-11 18:50:24][pid:315][UNI_IF][ERROR]65554:ipc_unix_call_service failed, ret = -3.
[01-11 18:50:24][pid:315][UNI_IF][ERROR]communicaite_to_davinci failed!!!
[01-11 18:50:25][pid:306][IPC][ERROR]daemon can not find Dst process.load_type 0x10012 is_need_ack 1
[01-11 18:50:25][pid:315][IPC][ERROR] from daemon ack, dst not work  len 0 , load_type is [0x10012]
[01-11 18:50:25][pid:315][UNI_IF][ERROR]65554:ipc_unix_call_service failed, ret = -3.
[01-11 18:50:25][pid:315][UNI_IF][ERROR]communicaite_to_davinci failed!!!
[01-11 18:50:26][pid:306][IPC][ERROR]daemon can not find Dst process.load_type 0x10012 is_need_ack 1
[01-11 18:50:26][pid:315][IPC][ERROR] from daemon ack, dst not work  len 0 , load_type is [0x10012]
[01-11 18:50:26][pid:315][UNI_IF][ERROR]65554:ipc_unix_call_service failed, ret = -3.
[01-11 18:50:26][pid:315][UNI_IF][ERROR]communicaite_to_davinci failed!!!
IEfile uncompressed.
BusyBox v1.2.1 Protect Shell (psh)
Enter 'help' for a list of davinci system commands.

# [01-11 18:50:27][pid:306][IPC][ERROR]daemon can not find Dst process.load_type 0x10012 is_need_ack 1
[01-11 18:50:27][pid:315][IPC][ERROR] from daemon ack, dst not work  len 0 , load_type is [0x10012]
[01-11 18:50:27][pid:315][UNI_IF][ERROR]65554:ipc_unix_call_service failed, ret = -3.
[01-11 18:50:27][pid:315][UNI_IF][ERROR]communicaite_to_davinci failed!!!
Unix bus  End
=========main
=========user_sysinit  =====
[01-11 18:50:27][pid:0][OTHER][ERROR]CUSTOM_PATH open error.No such file or directory
[01-11 18:50:27][pid:0][OTHER][ERROR]analysis_custom_devtype error

-------Goint to init_database-931828
davinci enter init_database
shared memory address is: 0x4061b000, sizeof(DEVICECONFIG) = 891344
davinci init_shared_memory success.
powerLineFrequencyMode = 0
[01-11 18:50:28][pid:0][UNI_IF][ERROR]stream request out range 3(2)
After set_devcfg_default, database need to init
S: cmd_get_capa_data  ,ack 1 --sizeof(ret)= 4

[01-11 18:50:28][pid:314][DATABASE][ERROR][uni_process/DB_uni_process.c 216][get_devcapa_data]communicaite_to_davinci 65574 : service_result 1
going to init database:1
Davinci wait for init dababase
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

[01-11 18:50:29][pid:314][DATABASE][DEBUG][main/dbutil.c 1611][db_checkandrecovery]db_main check num=0
[01-11 18:50:29][pid:314][DATABASE][DEBUG][main/dbutil.c 1616][db_checkandrecovery]main db is ok
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

[01-11 18:50:30][pid:314][DATABASE][ERROR][main/dbutil.c 8183][init_database]db version = 301056


db_enc_version = 16777472

[01-11 18:50:30][pid:314][DATABASE][DEBUG][main/dbutil.c 6427][db_getdata_byversion]Direct read from the database
S: cmd_check_capa_support  ,ack -1

[01-11 18:50:30][pid:314][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack -1

[01-11 18:50:30][pid:314][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack -1

[01-11 18:50:30][pid:314][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack -1

[01-11 18:50:30][pid:314][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack -1

[01-11 18:50:30][pid:314][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack -1

[01-11 18:50:30][pid:314][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack -1

[01-11 18:50:30][pid:314][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack 1

[01-11 18:50:30][pid:314][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 1
S: cmd_check_capa_support  ,ack -1

[01-11 18:50:30][pid:314][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack -1

[01-11 18:50:30][pid:314][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack -1

[01-11 18:50:30][pid:314][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack -1

[01-11 18:50:30][pid:314][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
[01-11 18:50:30][pid:314][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[10].get is null
[01-11 18:50:30][pid:314][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[34].get is null
[01-11 18:50:30][pid:314][DATABASE][ERROR][main/dbshell.c 4213][db_get_local_port]unknown port_type: 5
[01-11 18:50:30][pid:314][DATABASE][ERROR][main/dbshell.c 4458][db_get_local_port_ext]unknown port_type: 5
[01-11 18:50:31][pid:314][DATABASE][DEBUG][main/dbshell.c 20085][db_get_ipdome_ptzparam] ipdome_ptzparam_table is not exist
[01-11 18:50:31][pid:314][DATABASE][DEBUG][main/dbshell.c 16750][db_get_roi_param] roi_param_table is not exist
get 0-0-0-0.000000-0-0-0
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[93].get is null
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[94].get is null
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[95].get is null
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[96].get is null
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[97].get is null
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[98].get is null
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[99].get is null
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[100].get is null
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[121].get is null
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[122].get is null
[01-11 18:50:31][pid:314][DATABASE][DEBUG][main/dbshell.c 43086][db_get_sdi_local_output_config]select sdi_local_output_enable, local_output_hd from front_other_config where idx=1;
[01-11 18:50:31][pid:314][DATABASE][DEBUG][main/dbshell.c 43226][db_get_sdi_485_enable_config]select rs485_enable from serial_config_table where serial_type=2;
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param



db_enc_version = 16777472

[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 528][get_alldata_from_db]device do not support color filter
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-11 18:50:31][pid:314][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-11 18:50:31][pid:314][DATABASE][DEBUG][main/dbutil.c 1762][add_column]add column pt_mode to table ipdome_osdparam_table
[01-11 18:50:31][pid:314][DATABASE][DEBUG][main/dbutil.c 1767][add_column]column pt_mode already exists in table ipdome_osdparam_table
[01-11 18:50:31][pid:314][DATABASE][DEBUG][main/dbutil.c 1762][add_column]add column revise_mode to table revise_gps_param_config
[01-11 18:50:31][pid:314][DATABASE][DEBUG][main/dbutil.c 1767][add_column]column revise_mode already exists in table revise_gps_param_config
[01-11 18:50:31][pid:314][DATABASE][DEBUG][main/dbutil.c 1762][add_column]add column byBackgroundPic to table intelligent_face_detect_config
[01-11 18:50:31][pid:314][DATABASE][DEBUG][main/dbutil.c 1767][add_column]column byBackgroundPic already exists in table intelligent_face_detect_config
[01-11 18:50:31][pid:314][DATABASE][DEBUG][main/dbutil.c 1762][add_column]add column satellite_interval to table ntp_config_info
[01-11 18:50:31][pid:314][DATABASE][DEBUG][main/dbutil.c 1767][add_column]column satellite_interval already exists in table ntp_config_info
[01-11 18:50:32][pid:314][DATABASE][ERROR][main/dbutil.c 8193][init_database]ipc_db_backup need backup.
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

[01-11 18:50:32][pid:314][DATABASE][DEBUG][main/DB_main.c 156][main]After init_database...
goint to set_semvalue 1...
This is database process,  table_name = 301056,load_type = 0x6001f
channel_no = 0, sensor_no = 0, smd_type = 0, scene_no = 0
EN_GET_OLD_DB_VERSION----
current_db_version = 301056,  old_db_version = 301056
current_db_version = (301056-1176),  old_db_version = (301056-1176)
database init success, davinci wait sem success
init_database success...

-------end to init_database-931832
This is database process,  table_name = 0,load_type = 0x6001d
channel_no = 891344, sensor_no = 0, smd_type = 0, scene_no = 0
EN_CHECK_DEVCFG_THE_SAME----
reboot reason is not valid, do nothing
<init_run>4352:capture_mode(17) value. 125967385
---------------------This is backup_dev_cfg-------------------

database going to sleep----------
<MEGA_DSP>Platform Value:
<MEGA_DSP>Main mux type [0x4].
<MEGA_DSP>Sub   mux type [0x4].
<MEGA_DSP>Thi  mux type [0x2].
<MEGA_DSP>audio enc type[0x2].
<MEGA_DSP>voicetalk type[0x2].
<MEGA_DSP>Need PS SysHdr[0].
tar: can't open '/dav/r2_modules.tar.gz': No such file or directory
rmmod: can't unload 'hi3518_adec': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_aenc': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_ao': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_ai': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_sio': unknown symbol in module, or unknown parameter
rmmod: can't unload 'acodec': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hidmac': unknown symbol in module, or unknown parameter
remove audio
rmmod: can't unload 'uart232': unknown symbol in module, or unknown parameter
rmmod: can't unload 'ssp_iris': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_ive': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_vda': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_region': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_rc': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_jpege': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_h264e': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_chnl': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_group': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_venc': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_vou': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_vpss': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_isp': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_viu': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_dsu': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_tde': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hiuser': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_sys': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_base': unknown symbol in module, or unknown parameter
rmmod: can't unload 'mmz': unknown symbol in module, or unknown parameter
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

insert audio
[01-11 18:50:36][pid:0][SYSINIT][ERROR]device not support RS485
[01-11 18:50:36][pid:0][HW_IF][ERROR]r2 transfer_485_config_options error [options:57]
fpga_info.beuse is 0, not use fgpa
<lib>pDspInitParaArmlib = 0x408fe008,share buf len 0x834ac, fontInfo=0x40981498, vpfont=0x413bf008, fontLen=766080
 ******viType :   [20]********************************************
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

ISP_Create:sensor id = 33.
<lib> dspTaskCreat ok!
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

AEC_Init error framelen(640)
[Func]:MPI_AI_AecInit [Line]:369 [Info]:aec open fail.
AEC_Init error framelen(640)
[Func]:MPI_AI_AecInit [Line]:369 [Info]:aec open fail.
host cmd. start!!!!!! HostSetAesSecretKey 0 !!!!!!!!
NOTIFY:HostSetAesSecretKey not Enable![01-11 18:50:38][pid:0][DSP][ERROR]Initial: the permanent code is disable.
[01-11 18:50:38][pid:0][UNI_IF][ERROR]The device don't support audio
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

[PSWD][0070]:public_base64_len 188  len 140
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

[01-11 18:50:39][pid:315][UNI_IF][ERROR]



 ===Davinci  Init Finish...
This is database process,  table_name = 0,load_type = 0x61026
channel_no = 0, sensor_no = 0, smd_type = 0, scene_no = 0
S: cmd_get_enable_list

--------------usrapp:maxEnChanNo = 1 ----------------
[01-11 18:50:40][pid:0][SYSLOG][ERROR]no main log. system log will not work.
[01-11 18:50:40][pid:315][UNI_IF][ERROR]
 isDm365WifiIPCAM=0
S: cmd_check_capa_support  ,ack -1

[01-11 18:50:43][pid:0][DSP][ERROR]read_logofile_to_buf failed: width=0, height=0
streamRecord[1]: start...
appweb: 1: MPR services are ready
appweb: 1: Starting host named: "::"
appweb: 1: Starting host named: "httpsHost"
appweb: 1: appwebTask: mprStartEventsThread Success.....

[01-11 18:50:46][pid:0][ALARM_EXP][ERROR]hwif_setalarmout err.
Get ISP Interrupt Failed with ec 0x1!
<lib>cmd error!!cmd =39, err==0xffffffff(-1)
[01-11 18:50:46][pid:0][CAPA][ERROR]Get capa error, the type is [0], the pData is NULL .
[01-11 18:50:46][pid:0][PREVIEW][ERROR]in pDevCfgParam max packetlen = 1440
[01-11 18:50:46][pid:0][PREVIEW][ERROR]packetlen = 1440
[01-11 18:50:46][pid:0][PREVIEW][ERROR]g_metadata_mem[1].base = 2819268
[01-11 18:50:46][pid:0][PREVIEW][ERROR]g_metadata_mem[1].totalsize = 92160
[01-11 18:50:46][pid:0][PREVIEW][ERROR]g_metadata_mem[1].ridx = 0
[01-11 18:50:46][pid:0][PREVIEW][ERROR]g_metadata_mem[1].widx = 0
[01-11 18:50:46][pid:0][PREVIEW][ERROR]g_metadata_mem[1].packetlen = 1440
[01-11 18:50:46][pid:0][PREVIEW][ERROR]g_metadata_mem[1].peer_packetlen = 1440
[01-11 18:50:46][pid:0][HW_IF][ERROR]icr_type:2 error.
start_rtsp_server: maxEnChanNo=1, is_support_mpeg4=1
[01-11 18:50:46][pid:0][PTZ][ERROR]read  PTZFILEHEAD error!,1 0
[01-11 18:50:46][pid:0][PTZ][ERROR]fread erro 2242
This is database process,  table_name = 65793,load_type = 0x61027
channel_no = 9010, sensor_no = 0, smd_type = 9020, scene_no = 1447774536
This is database process,  table_name = 65793,load_type = 0x61027
channel_no = 9010, sensor_no = 0, smd_type = 9020, scene_no = 1447774536
This is database process,  table_name = 65793,load_type = 0x61027
channel_no = 9010, sensor_no = 0, smd_type = 9020, scene_no = 1447774536
[01-11 18:50:47][pid:0][SYSINIT][ERROR]all player header have got success!
This is database process,  table_name = 0,load_type = 0x61026
channel_no = 0, sensor_no = 0, smd_type = 0, scene_no = 0
This is database process,  table_name = 65793,load_type = 0x61027
channel_no = 9010, sensor_no = 0, smd_type = 9020, scene_no = 1447774536
[01-11 18:50:47][pid:0][ONVIF][ERROR]is_discovery_init, before wait_net_available
[01-11 18:50:47][pid:0][ONVIF][ERROR]mcast_setloop_ex
start_ezviz_service, dinfo 4d3847ec, token 4d384e94
[01-11 18:50:47][3][633]access token begin
decrypt begin
decrypt end
[01-11 18:50:47][3][633]access token success
[01-11 18:50:47][1][633]################ezviz main start################
[01-11 18:50:47][1][633]################ezviz main start, over################
[01-11 18:50:47][2][635]main routine begin
[01-11 18:50:47][2][635]session init finish!
[01-11 18:50:47][2][635]port init finish!
[01-11 18:50:47][1][635]port no mapped
[01-11 18:50:47][2][636]check remote session thread begin
start dev log ctrl!
[01-11 18:50:47][3][638]process message routine begin...
[01-11 18:50:47][3][639]open socket 68 success
[01-11 18:50:47][3][639]BindToDeviceName
[01-11 18:50:47][3][639]start to accept new connection, listen port 9010
[01-11 18:50:47][3][640]open socket 69 success
[01-11 18:50:47][3][640]BindToDeviceName
[01-11 18:50:47][3][640]start to accept new connection, listen port 9020
[01-11 18:50:47][3][641]detec_stun_routine begin
[01-11 18:50:47][3][641]detec_stun_routine start.........
[01-11 18:50:47][1][641]the stun server is not valid
[01-11 18:50:47][3][641]open socket 70 success
[01-11 18:50:47][3][641]BindToDeviceName
[01-11 18:50:47][3][641]start to connect lbs dev.ys7.com:8555, type 1...
[01-11 18:50:47][3][642]start udp hole punch thread..., link count = 3
[01-11 18:50:48][pid:0][ONVIF][ERROR]ptz not support
[01-11 18:50:55][pid:0][UNI_IF][ERROR]device ip is zero
[01-11 18:50:57][pid:0][UNI_IF][ERROR]device IP changed,new ip [192.168.1.4], reinit UPnP
[01-11 18:50:57][1][638]getaddrinfo error, return -2: Name or service not known
[01-11 18:50:57][1][638]ezviz_das DNS dev.ys7.com parse error
[01-11 18:50:57][1][641]getaddrinfo error, return -2: Name or service not known
[01-11 18:50:57][1][641]connect lbs domain dev.ys7.com:8555 error, errno 0: Success
[01-11 18:50:57][3][641]close socket 70 success
[01-11 18:50:57][3][641]on_get_user_id 0x28982c
[01-11 18:50:57][3][641]userid 0000000000000000
[01-11 18:50:57][3][641]detec_stun_routine end, sleep 300 s

alastairstevenson · May 29, 2020

Interesting that the tftp updater works normally and the update program does a successful update but it doesn't get back to the tftp updater status.
And annoying and disappointing that it doesn't wipe the configuration as part of the update, as normally happens.

On the dmesg - I'd hoped for a little more information in the log on the partition layout and the types of file system in use, but it's not got that detail.
This firmware is looking quite locked down.
It's not known about by the usually repacker tools, and won't unpack.

Ideally we need to get to a root shell, somehow inhibiting psh (which blocks most useful commands) so that the config partition can be accessed and the configuration file deleted.

I think this is optimistic to get to a root shell, but easy enough to try -
Interrupt the bootloader, and use

setenv bootargs console=ttyAMA0,115200 init=/bin/sh single debug=9
saveenv
reset

And when it boots up, press Return a couple of times, and use
help
to see if it's psh or a normal shell that's running.

PattyMorr · May 29, 2020

This is after commands

setenv bootargs console=ttyAMA0,115200 init=/bin/sh single debug=9
saveenv
reset
help

Code:

U-Boot 2010.06-253629 (Feb 06 2017 - 15:45:03)

Flash: 16 MiB
DRAM:  256 MiB
Hit Ctrl+u to stop autoboot:  0
HKVS # setenv bootargs console=ttyAMA0,115200 init=/bin/sh single debug=9
HKVS # saveenv
Saving Environment to SPI Flash...
Erasing SPI flash, offset 0x00040000 size 64K ....done
Writing to SPI flash, offset 0x00040000 size 64K ...................done
HKVS # reset
resetting ...


U-Boot 2010.06-253629 (Feb 06 2017 - 15:45:03)

Flash: 16 MiB
DRAM:  256 MiB
Hit Ctrl+u to stop autoboot:  0
UP_PORT : phy status change : LINK=UP : DUPLEX=FULL : SPEED=100M
|NUL ethaddr| TFTP server not found
auto update with sd is not supported
load kernel to 0x80007fc0 ... Done!
## Booting kernel from Legacy Image at 80007fc0 ...
   Image Name:   Linux-3.0.8
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    3498832 Bytes = 3.3 MiB
   Load Address: 80008000
   Entry Point:  80008000
   XIP Kernel Image ... OK
OK

Starting kernel ...

[    0.000000] Linux version 3.0.8 (donggaopeng@Cpl-Frt-BSP) #1 Wed Dec 14 15:45:52 CST 2016
[    0.000000] CPU: ARM926EJ-S [41069265] revision 5 (ARMv5TEJ), cr=00053177
[    0.000000] CPU: VIVT data cache, VIVT instruction cache
[    0.000000] Machine: r2
[    0.000000] Memory policy: ECC disabled, Data cache writeback
[    0.000000] AXI bus clock 200000000.
[    0.000000] On node 0 totalpages: 28672
[    0.000000] free_area_init_node: node 0, pgdat c064d624, node_mem_map c066c000
[    0.000000]   Normal zone: 224 pages used for memmap
[    0.000000]   Normal zone: 0 pages reserved
[    0.000000]   Normal zone: 28448 pages, LIFO batch:7
[    0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
[    0.000000] pcpu-alloc: [0] 0
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 28448
[    0.000000] Kernel command line: console=ttyAMA0,115200 init=/bin/sh single debug=9 mtdparts=hi_sfc:256k(bld)ro,64k(env),64k(enc)ro,64k(usr),3584k(sys),10688k(app),1664k(cfg) mem=128M ip=192.0.0.64:::255.255.255.0 eth=18:68:cb:0b:6d:9a rst=0
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Memory: 112MB = 112MB total
[    0.000000] Memory: 107080k/107080k available, 7608k reserved, 0K highmem
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xfff00000 - 0xfffe0000   ( 896 kB)
[    0.000000]     DMA     : 0xffc00000 - 0xffe00000   (   2 MB)
[    0.000000]     vmalloc : 0xc7800000 - 0xfe000000   ( 872 MB)
[    0.000000]     lowmem  : 0xc0000000 - 0xc7000000   ( 112 MB)
[    0.000000]     modules : 0xbf000000 - 0xc0000000   (  16 MB)
[    0.000000]       .init : 0xc0008000 - 0xc01ca000   (1800 kB)
[    0.000000]       .text : 0xc01ca000 - 0xc062b000   (4484 kB)
[    0.000000]       .data : 0xc062c000 - 0xc064dca0   ( 136 kB)
[    0.000000]        .bss : 0xc064dcc4 - 0xc066b760   ( 119 kB)
[    0.000000] SLUB: Genslabs=13, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS:32 nr_irqs:32 32
[    0.000000] sched_clock: 32 bits at 100MHz, resolution 10ns, wraps every 42949ms
[    0.000000] Console: colour dummy device 80x30
[    0.000672] Calibrating delay loop... 218.72 BogoMIPS (lpj=1093632)
[    0.070081] pid_max: default: 32768 minimum: 301
[    1.531929] Card authentication succeeded
[    1.532234] Mount-cache hash table entries: 512
[    1.533521] CPU: Testing write buffer coherency: ok
[    1.537129] NET: Registered protocol family 16
[    1.538245] Serial: AMBA PL011 UART driver
[    1.538570] uart:0: ttyAMA0 at MMIO 0x20080000 (irq = 5) is a PL011 rev2
[    1.786989] console [ttyAMA0] enabled
[    1.800854] bio: create slab <bio-0> at 0
[    1.806787] usbcore: registered new interface driver usbfs
[    1.812782] usbcore: registered new interface driver hub
[    1.818553] usbcore: registered new device driver usb
[    1.826425] cfg80211: Calling CRDA to update world regulatory domain
[    1.834732] Switching to clocksource timer1
[    1.856510] NET: Registered protocol family 2
[    1.861261] IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
[    1.868980] TCP established hash table entries: 4096 (order: 3, 32768 bytes)
[    1.876879] TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
[    1.883746] TCP: Hash tables configured (established 4096 bind 4096)
[    1.890141] TCP reno registered
[    1.893316] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    1.899269] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    1.906401] NET: Registered protocol family 1
[    1.911626] RPC: Registered named UNIX socket transport module.
[    1.917572] RPC: Registered udp transport module.
[    1.922356] RPC: Registered tcp transport module.
[    1.927073] RPC: Registered tcp NFSv4.1 backchannel transport module.
[    2.481349] mmc0 power register success!
[    2.519864] nfs4filelayout_init: NFSv4 File Layout Driver Registering...
[    2.529140] JFFS2 version 2.2. © 2001-2006 Red Hat, Inc.
[    2.537397] msgmni has been set to 209
[    2.546831] io scheduler noop registered
[    2.551247] io scheduler cfq registered (default)
[    2.563994] brd: module loaded
[    2.567895] SPI id table Version 1.22
[    2.571651] Hisilicon Spi Flash Controller V350 Device Driver, Version 1.10
[    2.579224] SPI (cs1) ID: 0xEF 0x40 0x18 0x00 0x00 0x00
[    2.584566] winbond uid: 0xd2, 66, 74, 20, a3, 1a, 22, 2a
[    2.600466] SPI FLASH start_up_mode is 3 Bytes
[    2.604949] W25Q128BV, block size: 64KB, chip size: 16MB
[    2.610395] 7 cmdlinepart partitions found on MTD device hi_sfc
[    2.616331] Creating 7 MTD partitions on "hi_sfc":
[    2.621196] 0x000000000000-0x000000040000 : "bld"
[    2.628140] 0x000000040000-0x000000050000 : "env"
[    2.635086] 0x000000050000-0x000000060000 : "enc"
[    2.642122] 0x000000060000-0x000000070000 : "usr"
[    2.648976] 0x000000070000-0x0000003f0000 : "sys"
[    2.655995] 0x0000003f0000-0x000000e60000 : "app"
[    2.663100] 0x000000e60000-0x000001000000 : "cfg"
[    2.670652] Fixed MDIO Bus: probed
[    2.797779] r2_mii: probed
[    2.920601] PHY r2_mii:03 found : id is : 0x1cc816
[    2.931104] rtl8201f_set_EEE: set eee capability successfully
[    2.937154] PPP generic driver version 2.4.2
[    2.942041] PPP Deflate Compression module registered
[    2.947115] PPP BSD Compression module registered
[    2.975060] PPP MPPE Compression module registered
[    2.979884] NET: Registered protocol family 24
[    2.984774] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    2.991826] usb-ehci usb-ehci.0: HIUSB EHCI
[    2.996342] usb-ehci usb-ehci.0: new USB bus registered, assigned bus number 1
[    3.004018] usb-ehci usb-ehci.0: irq 15, io mem 0x100b0000
[    3.020167] usb-ehci usb-ehci.0: USB 0.0 started, EHCI 1.00
[    3.027239] hub 1-0:1.0: USB hub found
[    3.031157] hub 1-0:1.0: 1 port detected
[    3.036017] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    3.042720] usb-ohci usb-ohci.0: HIUSB OHCI
[    3.047066] usb-ohci usb-ohci.0: new USB bus registered, assigned bus number 2
[    3.054506] usb-ohci usb-ohci.0: irq 16, io mem 0x100a0000
[    3.125590] hub 2-0:1.0: USB hub found
[    3.129423] hub 2-0:1.0: 1 port detected
[    3.134687] usbcore: registered new interface driver cdc_acm
[    3.140442] cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters
[    3.148687] usbcore: registered new interface driver cdc_wdm
[    3.155524] rtc rtc: rtc core: registered rtc as rtc0
[    3.161236] r2 watchdog driver v1.0. initial timeout 60 sec
[    3.169280] Netfilter messages via NETLINK v0.30.
[    3.174259] nf_conntrack version 0.5.0 (1673 buckets, 6692 max)
[    3.182594] ip_tables: (C) 2000-2006 Netfilter Core Team
[    3.188144] TCP cubic registered
[    3.191464] Initializing XFRM netlink socket
[    3.198944] NET: Registered protocol family 10
[    3.207462] ip6_tables: (C) 2000-2006 Netfilter Core Team
[    3.213107] IPv6 over IPv4 tunneling driver
[    3.220476] NET: Registered protocol family 17
[    3.225062] NET: Registered protocol family 15
[    3.231413] sctp: Hash tables configured (established 4096 bind 8192)
[    3.239609] sctp: sctp_init_sock(sk: c6330000)
[    3.244263] lib80211: common routines for IEEE802.11 drivers
[    3.249945] lib80211_crypt: registered algorithm 'NULL'
[    3.255230] Registering the dns_resolver key type
[    3.260148] VFP support v0.3: not present
[    3.265152] registered taskstats version 1
[    3.269545] card disconnected!
[    3.272806] rtc rtc: setting system clock to 1970-01-12 00:08:26 UTC (950906)
[    3.792469] ADDRCONF(NETDEV_UP): eth0: link is not ready
[    4.800650] IP-Config: Complete:
[    4.803907]      device=eth0, addr=192.0.0.64, mask=255.255.255.0, gw=255.255.255.255,
[    4.811685]      host=192.0.0.64, domain=, nis-domain=(none),
[    4.817453]      bootserver=255.255.255.255, rootserver=255.255.255.255, rootpath=
▒[    4.826772] Freeing init memory: 1800K


BusyBox v1.19.3 (2016-12-14 15:42:27 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

# [    5.921005] PHY: r2_mii:03 - Link is Up - 100/Full
[    5.926028] ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   16.000090] eth0: no IPv6 routers present

#
#
# help
Built-in commands:
------------------
        . : [ [[ alias bg break cd chdir command continue echo eval exec
        exit export false fg getopts hash help jobs kill let local printf
        pwd read readonly return set shift source test times trap true
        type ulimit umask unalias unset wait

#

alastairstevenson · May 29, 2020

PattyMorr said:
This is after commands

setenv bootargs console=ttyAMA0,115200 init=/bin/sh single debug=9
saveenv
reset
help

That's good!
A root shell prompt. More than I expected.
Now we need to find out how the config partition is mounted, so that the config file can be deleted.

So, let's try this, it's likely how the normal bootup continues :

/etc/init.d/rcS

That will generate loads of logs entries which can be ignored.
Hopefully at the and of it there will still be a # prompt and not a reboot.
In which case - keeping a record of the log

mount

To see how the cfg partition is handled.
Then

ls -al /

and maybe
ls -al /config

If there is a devcfg.db listed, then

rm /config/*.cfg

It's quite difficult doing this on unfamiliar firmware in this to-and-fro way - but you're doing really well.
So much easier when you have hands-on.
The idea is that if we can find the configuration file and simply delete it, that will reset to defaults.
Then put the bootargs variable back the way it was and job done.

PattyMorr · May 29, 2020

Perfect . I am open to keep going with this.

Did not reboot or reset , not able to stop at any promt , probably use Ctrl C when asked?. either way I hit a couple of enter and send the commands

Code:

# /etc/init.d/rcS
Starting udev:      [ OK ]
diagnose_way = 14, repair_way = 0, interval = 60
route: ioctl 0x890c failed: No such process
cp: can't stat 'ss': No such file or directory
cp: can't stat 'hostapd.lzma': No such file or directory
chmod: /dav/libcrypto.so: Read-only file system
/home
ln: setAgingMode: File exists
ln: getAgingMode: File exists
ln: setAgingTime: File exists
ln: getAgingTime: File exists
Insmod ko start...
mv: can't rename 'e0_modules/8192cu.ko': No such file or directory
[ 6577.446741] base module init.
[ 6577.471135] sspi: module license 'Proprietary' taints kernel.
[ 6577.477011] Disabling lock debugging due to kernel taint
[ 6577.509991] [motor_init]: insmod motor module successfully
[ 6577.577820] ipc_stm8: Unknown symbol HI_I2C_Read (err 0)
[ 6577.583186] ipc_stm8: Unknown symbol HI_I2C_Write (err 0)
insmod: can't insert '/home/ipc_stm8.ko': unknown symbol in module, or unknown parameter
[ 6577.608701] watch module init.
Insmod ko end...
Press Ctrl-C to stop ...
Bingo  not en file 0x 8000005d  0x ffffff00
Unix bus   -4 .
sys_cmd cp -f  /dav/davinci_bak  /home/davinci.lzma

netprocess Infomation FSP_network_protocol_5.4.2_for_g1:
version: 1.7.1.204140 [18:41:34-Dec 16 2016].
Path: /Camera/Platform/Branches/branches_FSP_network_protocol/FSP_network_protocol_5.4.2_for_g1
Last Changed Rev: 230348
Last Changed Date: 2016-10-24 19:46:38 +0800 (Mon, 24 Oct 2016)


Enter DB_main-------------------
shared memory address is: 0x403d7000, sizeof(DEVICECONFIG) = 891344
wait davinci set default...
[01-12 01:58:04][pid:310][IPC][ERROR]daemon can not find Dst process.load_type 0x10012 is_need_ack 1
[01-12 01:58:04][pid:319][IPC][ERROR] from daemon ack, dst not work  len 0 , load_type is [0x10012]
[01-12 01:58:04][pid:319][UNI_IF][ERROR]65554:ipc_unix_call_service failed, ret = -3.
[01-12 01:58:04][pid:319][UNI_IF][ERROR]communicaite_to_davinci failed!!!
[01-12 01:58:05][pid:310][IPC][ERROR]daemon can not find Dst process.load_type 0x10012 is_need_ack 1
[01-12 01:58:05][pid:319][IPC][ERROR] from daemon ack, dst not work  len 0 , load_type is [0x10012]
[01-12 01:58:05][pid:319][UNI_IF][ERROR]65554:ipc_unix_call_service failed, ret = -3.
[01-12 01:58:05][pid:319][UNI_IF][ERROR]communicaite_to_davinci failed!!!
App Start ...
[01-12 01:58:06][pid:310][IPC][ERROR]daemon can not find Dst process.load_type 0x10012 is_need_ack 1
[01-12 01:58:06][pid:319][IPC][ERROR] from daemon ack, dst not work  len 0 , load_type is [0x10012]
[01-12 01:58:06][pid:319][UNI_IF][ERROR]65554:ipc_unix_call_service failed, ret = -3.
[01-12 01:58:06][pid:319][UNI_IF][ERROR]communicaite_to_davinci failed!!!
[01-12 01:58:07][pid:310][IPC][ERROR]daemon can not find Dst process.load_type 0x10012 is_need_ack 1
[01-12 01:58:07][pid:319][IPC][ERROR] from daemon ack, dst not work  len 0 , load_type is [0x10012]
[01-12 01:58:07][pid:319][UNI_IF][ERROR]65554:ipc_unix_call_service failed, ret = -3.
[01-12 01:58:07][pid:319][UNI_IF][ERROR]communicaite_to_davinci failed!!!
[01-12 01:58:08][pid:310][IPC][ERROR]daemon can not find Dst process.load_type 0x10012 is_need_ack 1
[01-12 01:58:08][pid:319][IPC][ERROR] from daemon ack, dst not work  len 0 , load_type is [0x10012]
[01-12 01:58:08][pid:319][UNI_IF][ERROR]65554:ipc_unix_call_service failed, ret = -3.
[01-12 01:58:08][pid:319][UNI_IF][ERROR]communicaite_to_davinci failed!!!
[01-12 01:58:09][pid:310][IPC][ERROR]daemon can not find Dst process.load_type 0x10012 is_need_ack 1
[01-12 01:58:09][pid:319][IPC][ERROR] from daemon ack, dst not work  len 0 , load_type is [0x10012]
[01-12 01:58:09][pid:319][UNI_IF][ERROR]65554:ipc_unix_call_service failed, ret = -3.
[01-12 01:58:09][pid:319][UNI_IF][ERROR]communicaite_to_davinci failed!!!
[01-12 01:58:10][pid:310][IPC][ERROR]daemon can not find Dst process.load_type 0x10012 is_need_ack 1
[01-12 01:58:10][pid:319][IPC][ERROR] from daemon ack, dst not work  len 0 , load_type is [0x10012]
[01-12 01:58:10][pid:319][UNI_IF][ERROR]65554:ipc_unix_call_service failed, ret = -3.
[01-12 01:58:10][pid:319][UNI_IF][ERROR]communicaite_to_davinci failed!!!
IEfile uncompressed.
# [01-12 01:58:11][pid:310][IPC][ERROR]daemon can not find Dst process.load_type 0x10012 is_need_ack 1
[01-12 01:58:11][pid:319][IPC][ERROR] from daemon ack, dst not work  len 0 , load_type is [0x10012]
[01-12 01:58:11][pid:319][UNI_IF][ERROR]65554:ipc_unix_call_service failed, ret = -3.
[01-12 01:58:11][pid:319][UNI_IF][ERROR]communicaite_to_davinci failed!!!
Unix bus  End
=========main
=========user_sysinit  =====
[01-12 01:58:12][pid:0][OTHER][ERROR]CUSTOM_PATH open error.No such file or directory
[01-12 01:58:12][pid:0][OTHER][ERROR]analysis_custom_devtype error

-------Goint to init_database-957492
davinci enter init_database
shared memory address is: 0x4059f000, sizeof(DEVICECONFIG) = 891344
davinci init_shared_memory success.
powerLineFrequencyMode = 0
[01-12 01:58:12][pid:0][UNI_IF][ERROR]stream request out range 3(2)
After set_devcfg_default, database need to init
[01-12 01:58:12][pid:310][IPC][ERROR]daemon can not find Dst process.load_type 0x10026 is_need_ack 1
[01-12 01:58:12][pid:318][IPC][ERROR] from daemon ack, dst not work  len 0 , load_type is [0x10026]
[01-12 01:58:12][pid:318][DATABASE][ERROR][uni_process/DB_uni_process.c 203][get_devcapa_data]65574:ipc_unix_call_service failed, ret = -3.
[01-12 01:58:12][pid:318][DATABASE][ERROR][main/DB_main.c 141][main]get capa chan_num failed...
going to init database:1
Davinci wait for init dababase
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

[01-12 01:58:13][pid:318][DATABASE][DEBUG][main/dbutil.c 1611][db_checkandrecovery]db_main check num=0
[01-12 01:58:13][pid:318][DATABASE][DEBUG][main/dbutil.c 1616][db_checkandrecovery]main db is ok
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

[01-12 01:58:14][pid:318][DATABASE][ERROR][main/dbutil.c 8183][init_database]db version = 301056


db_enc_version = 16777472

[01-12 01:58:14][pid:318][DATABASE][DEBUG][main/dbutil.c 6427][db_getdata_byversion]Direct read from the database
S: cmd_check_capa_support  ,ack -1

[01-12 01:58:14][pid:318][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack -1

[01-12 01:58:14][pid:318][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack -1

[01-12 01:58:14][pid:318][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack -1

[01-12 01:58:14][pid:318][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack -1

[01-12 01:58:14][pid:318][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack -1

[01-12 01:58:14][pid:318][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack -1

[01-12 01:58:14][pid:318][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack 1

[01-12 01:58:14][pid:318][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 1
S: cmd_check_capa_support  ,ack -1

[01-12 01:58:14][pid:318][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack -1

[01-12 01:58:14][pid:318][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack -1

[01-12 01:58:14][pid:318][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
S: cmd_check_capa_support  ,ack -1

[01-12 01:58:14][pid:318][DATABASE][DEBUG][uni_process/DB_uni_process.c 137][communicaite_to_davinci]communicaite_to_davinci 65566 : service_result 255
[01-12 01:58:14][pid:318][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[10].get is null
[01-12 01:58:14][pid:318][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[34].get is null
[01-12 01:58:14][pid:318][DATABASE][ERROR][main/dbshell.c 4213][db_get_local_port]unknown port_type: 5
[01-12 01:58:14][pid:318][DATABASE][ERROR][main/dbshell.c 4458][db_get_local_port_ext]unknown port_type: 5
[01-12 01:58:14][pid:318][DATABASE][DEBUG][main/dbshell.c 20085][db_get_ipdome_ptzparam] ipdome_ptzparam_table is not exist
[01-12 01:58:15][pid:318][DATABASE][DEBUG][main/dbshell.c 16750][db_get_roi_param] roi_param_table is not exist
get 0-0-0-0.000000-0-0-0
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[93].get is null
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[94].get is null
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[95].get is null
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[96].get is null
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[97].get is null
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[98].get is null
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[99].get is null
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[100].get is null
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[121].get is null
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 545][get_alldata_from_db]tables_fun[122].get is null
[01-12 01:58:15][pid:318][DATABASE][DEBUG][main/dbshell.c 43086][db_get_sdi_local_output_config]select sdi_local_output_enable, local_output_hd from front_other_config where idx=1;
[01-12 01:58:15][pid:318][DATABASE][DEBUG][main/dbshell.c 43226][db_get_sdi_485_enable_config]select rs485_enable from serial_config_table where serial_type=2;
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param



db_enc_version = 16777472

[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 538][get_alldata_from_db]device do not support intell monitor
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 528][get_alldata_from_db]device do not support color filter
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 518][get_alldata_from_db]device do not support judicial
[01-12 01:58:15][pid:318][DATABASE][DEBUG][main/dbutil.c 1762][add_column]add column pt_mode to table ipdome_osdparam_table
[01-12 01:58:15][pid:318][DATABASE][DEBUG][main/dbutil.c 1767][add_column]column pt_mode already exists in table ipdome_osdparam_table
[01-12 01:58:15][pid:318][DATABASE][DEBUG][main/dbutil.c 1762][add_column]add column revise_mode to table revise_gps_param_config
[01-12 01:58:15][pid:318][DATABASE][DEBUG][main/dbutil.c 1767][add_column]column revise_mode already exists in table revise_gps_param_config
[01-12 01:58:15][pid:318][DATABASE][DEBUG][main/dbutil.c 1762][add_column]add column byBackgroundPic to table intelligent_face_detect_config
[01-12 01:58:15][pid:318][DATABASE][DEBUG][main/dbutil.c 1767][add_column]column byBackgroundPic already exists in table intelligent_face_detect_config
[01-12 01:58:15][pid:318][DATABASE][DEBUG][main/dbutil.c 1762][add_column]add column satellite_interval to table ntp_config_info
[01-12 01:58:15][pid:318][DATABASE][DEBUG][main/dbutil.c 1767][add_column]column satellite_interval already exists in table ntp_config_info
[01-12 01:58:15][pid:318][DATABASE][ERROR][main/dbutil.c 8193][init_database]ipc_db_backup need backup.
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

[01-12 01:58:16][pid:318][DATABASE][DEBUG][main/DB_main.c 156][main]After init_database...
goint to set_semvalue 1...
This is database process,  table_name = 301056,load_type = 0x6001f
channel_no = 0, sensor_no = 0, smd_type = 0, scene_no = 0
EN_GET_OLD_DB_VERSION----
current_db_version = 301056,  old_db_version = 301056
current_db_version = (301056-1176),  old_db_version = (301056-1176)
database init success, davinci wait sem success
init_database success...

-------end to init_database-957496
This is database process,  table_name = 0,load_type = 0x6001d
channel_no = 891344, sensor_no = 0, smd_type = 0, scene_no = 0
EN_CHECK_DEVCFG_THE_SAME----
reboot reason is not valid, do nothing
<init_run>4352:capture_mode(17) value. 125967385
---------------------This is backup_dev_cfg-------------------

database going to sleep----------
<MEGA_DSP>Platform Value:
<MEGA_DSP>Main mux type [0x4].
<MEGA_DSP>Sub   mux type [0x4].
<MEGA_DSP>Thi  mux type [0x2].
<MEGA_DSP>audio enc type[0x2].
<MEGA_DSP>voicetalk type[0x2].
<MEGA_DSP>Need PS SysHdr[0].
tar: can't open '/dav/r2_modules.tar.gz': No such file or directory
rmmod: can't unload 'hi3518_adec': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_aenc': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_ao': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_ai': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_sio': unknown symbol in module, or unknown parameter
rmmod: can't unload 'acodec': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hidmac': unknown symbol in module, or unknown parameter
remove audio
rmmod: can't unload 'uart232': unknown symbol in module, or unknown parameter
rmmod: can't unload 'ssp_iris': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_ive': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_vda': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_region': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_rc': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_jpege': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_h264e': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_chnl': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_group': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_venc': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_vou': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_vpss': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_isp': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_viu': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_dsu': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_tde': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hiuser': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_sys': unknown symbol in module, or unknown parameter
rmmod: can't unload 'hi3518_base': unknown symbol in module, or unknown parameter
rmmod: can't unload 'mmz': unknown symbol in module, or unknown parameter
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

[ 6595.040427] Hisilicon Media Memory Zone Manager
[ 6595.084480] Hisilicon UMAP device driver interface: v3.00
[ 6595.138738] pa:87000000, va:c7a00000
[ 6595.142337] load sys.ko ...OK!
[ 6595.318543] load viu.ko ...OK!
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

[ 6595.363958] ISP Mod init!
[ 6595.422460] load vpss.ko ....OK!
[ 6595.519294] load vou.ko ....OK!
[ 6595.571994] load venc.ko ...OK!
[ 6595.619116] load group.ko ...OK!
[ 6595.659625] load chnl.ko ...OK!
[ 6595.703601] load h264e.ko ...OK!
[ 6595.736259] load jpege.ko ...OK!
[ 6595.781801] load rc.ko ...OK!
[ 6595.814604] load region.ko ....OK!
[ 6595.860745] load vda.ko ....OK!
[ 6595.933462] hi_i2c init is ok!
[ 6595.940904] <is_wireless_control_device>dev_typ-22438
[ 6595.945972] I2C_400K!
[ 6595.981070] ssp_frameform: framemode=0,spo=1, sph=1, datawidth=12
[ 6595.987287] ssp initial ok!
[ 6596.022902] IPC
[ 6596.024512]     name:uart2,
[ 6596.027898] adding uart2, minor = 0
[ 6596.031802] Successfully insmod uart232 module!
[ 6596.134770] Kernel: ssp initial ok!
[ 6596.186894] acodec inited!
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

insert audio
[01-12 01:58:20][pid:0][SYSINIT][ERROR]device not support RS485
[01-12 01:58:20][pid:0][HW_IF][ERROR]r2 transfer_485_config_options error [options:57]
fpga_info.beuse is 0, not use fgpa
<lib>pDspInitParaArmlib = 0x40679008,share buf len 0x834ac, fontInfo=0x406fc498, vpfont=0x40d88008, fontLen=766080
 ******viType :   [20]********************************************
ISP_Create:sensor id = 33.
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

<lib> dspTaskCreat ok!
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

AEC_Init error framelen(640)
[Func]:MPI_AI_AecInit [Line]:369 [Info]:aec open fail.
AEC_Init error framelen(640)
[Func]:MPI_AI_AecInit [Line]:369 [Info]:aec open fail.
host cmd. start!!!!!! HostSetAesSecretKey 0 !!!!!!!!
NOTIFY:HostSetAesSecretKey not Enable![01-12 01:58:22][pid:0][DSP][ERROR]Initial: the permanent code is disable.
[01-12 01:58:22][pid:0][UNI_IF][ERROR]The device don't support audio
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

[PSWD][0070]:public_base64_len 188  len 140
davinci receive cmd_query_davinci_param.
S: cmd_query_davinci_param

[01-12 01:58:23][pid:319][UNI_IF][ERROR]



 ===Davinci  Init Finish...
--------------usrapp:maxEnChanNo = 1 ----------------
[01-12 01:58:24][pid:0][SYSLOG][ERROR]no main log. system log will not work.
This is database process,  table_name = 0,load_type = 0x61026
channel_no = 0, sensor_no = 0, smd_type = 0, scene_no = 0
S: cmd_get_enable_list

[01-12 01:58:24][pid:319][UNI_IF][ERROR]
 isDm365WifiIPCAM=0
S: cmd_check_capa_support  ,ack -1

[01-12 01:58:27][pid:0][DSP][ERROR]read_logofile_to_buf failed: width=0, height=0
streamRecord[1]: start...
appweb: 1: MPR services are ready
<lib>cmd error!!cmd =39, err==0xffffffff(-1)
[01-12 01:58:33][pid:0][CAPA][ERROR]Get capa error, the type is [0], the pData is NULL .
[01-12 01:58:33][pid:0][PREVIEW][ERROR]in pDevCfgParam max packetlen = 1440
[01-12 01:58:33][pid:0][PREVIEW][ERROR]packetlen = 1440
[01-12 01:58:33][pid:0][PREVIEW][ERROR]g_metadata_mem[1].base = 26cc6b8
[01-12 01:58:33][pid:0][PREVIEW][ERROR]g_metadata_mem[1].totalsize = 92160
[01-12 01:58:33][pid:0][PREVIEW][ERROR]g_metadata_mem[1].ridx = 0
[01-12 01:58:33][pid:0][PREVIEW][ERROR]g_metadata_mem[1].widx = 0
[01-12 01:58:33][pid:0][PREVIEW][ERROR]g_metadata_mem[1].packetlen = 1440
[01-12 01:58:33][pid:0][PREVIEW][ERROR]g_metadata_mem[1].peer_packetlen = 1440
appweb: 1: Starting host named: "::"
appweb: 1: Starting host named: "httpsHost"
appweb: 1: appwebTask: mprStartEventsThread Success.....

This is database process,  table_name = 65793,load_type = 0x61027
channel_no = 9010, sensor_no = 0, smd_type = 9020, scene_no = 1447774536
[01-12 01:58:35][pid:0][ALARM_EXP][ERROR]hwif_setalarmout err.
start_rtsp_server: maxEnChanNo=1, is_support_mpeg4=1
Get ISP Interrupt Failed with ec 0x1!
[01-12 01:58:35][pid:0][HW_IF][ERROR]icr_type:2 error.
[01-12 01:58:35][pid:0][DSP][ERROR]key_warning......curR 1417808, curW 1432724, if_idx 0
[01-12 01:58:35][pid:0][DSP][ERROR]key_warning......curR 1417808, curW 1432724, if_idx 1046040
[01-12 01:58:35][pid:0][RECORD][ERROR]if run here need check date iframeidx 1046040, rec rdidx 0, wt idx 14916
[01-12 01:58:35][pid:0][RECORD][ERROR]warning...now throw a frame,,,be calful,
[01-12 01:58:36][pid:0][PTZ][ERROR]read  PTZFILEHEAD error!,1 0
[01-12 01:58:36][pid:0][PTZ][ERROR]fread erro 2242
This is database process,  table_name = 65793,load_type = 0x61027
channel_no = 9010, sensor_no = 0, smd_type = 9020, scene_no = 1447774536
This is database process,  table_name = 65793,load_type = 0x61027
channel_no = 9010, sensor_no = 0, smd_type = 9020, scene_no = 1447774536
[01-12 01:58:36][pid:0][SYSINIT][ERROR]all player header have got success!
This is database process,  table_name = 0,load_type = 0x61026
channel_no = 0, sensor_no = 0, smd_type = 0, scene_no = 0
This is database process,  table_name = 65793,load_type = 0x61027
channel_no = 9010, sensor_no = 0, smd_type = 9020, scene_no = 1447774536
[01-12 01:58:37][pid:0][ONVIF][ERROR]is_discovery_init, before wait_net_available
[01-12 01:58:37][pid:0][ONVIF][ERROR]mcast_setloop_ex
start_ezviz_service, dinfo 4d2cf7ec, token 4d2cfe94
[01-12 01:58:37][3][636]access token begin
decrypt begin
decrypt end
[01-12 01:58:37][3][636]access token success
[01-12 01:58:37][1][636]################ezviz main start################
[01-12 01:58:37][1][636]################ezviz main start, over################
[01-12 01:58:37][2][638]main routine begin
[01-12 01:58:37][2][638]session init finish!
[01-12 01:58:37][2][638]port init finish!
[01-12 01:58:37][1][638]port no mapped
[01-12 01:58:37][2][639]check remote session thread begin
start dev log ctrl!
[01-12 01:58:37][3][641]process message routine begin...
[01-12 01:58:37][3][642]open socket 68 success
[01-12 01:58:37][3][642]BindToDeviceName
[01-12 01:58:37][3][642]start to accept new connection, listen port 9010
[01-12 01:58:37][3][643]open socket 69 success
[01-12 01:58:37][3][643]BindToDeviceName
[01-12 01:58:37][3][643]start to accept new connection, listen port 9020
[01-12 01:58:37][3][644]detec_stun_routine begin
[01-12 01:58:37][3][644]detec_stun_routine start.........
[01-12 01:58:37][1][644]the stun server is not valid
[01-12 01:58:37][3][644]open socket 70 success
[01-12 01:58:37][3][644]BindToDeviceName
[01-12 01:58:37][3][644]start to connect lbs dev.ys7.com:8555, type 1...
[01-12 01:58:37][3][645]start udp hole punch thread..., link count = 3
[01-12 01:58:38][pid:0][ONVIF][ERROR]ptz not support
[01-12 01:58:44][pid:0][UNI_IF][ERROR]device ip is zero
[01-12 01:58:46][pid:0][UNI_IF][ERROR]device IP changed,new ip [192.168.1.4], reinit UPnP
[01-12 01:58:47][1][641]getaddrinfo error, return -2: Name or service not known
[01-12 01:58:47][1][641]ezviz_das DNS dev.ys7.com parse error
[01-12 01:58:47][1][644]getaddrinfo error, return -2: Name or service not known
[01-12 01:58:47][1][644]connect lbs domain dev.ys7.com:8555 error, errno 0: Success
[01-12 01:58:47][3][644]close socket 70 success
[01-12 01:58:47][3][644]on_get_user_id 0x28982c
[01-12 01:58:47][3][644]userid 0000000000000000
[01-12 01:58:47][3][644]detec_stun_routine end, sleep 300 s
[01-12 01:58:52][3][641]process message routine begin...
[01-12 01:59:01][pid:0][UNI_IF][ERROR]upnp_portmap_search_server fialed, result[-11]--:0-Failed,1-Success,2-TimeOut.
[01-12 01:59:02][1][641]getaddrinfo error, return -2: Name or service not known
[01-12 01:59:02][1][641]ezviz_das DNS dev.ys7.com parse error
[01-12 01:59:07][3][641]process message routine begin...
[01-12 01:59:14][pid:0][UNI_IF][ERROR]upnp_portmap_search_server fialed, result[-11]--:0-Failed,1-Success,2-TimeOut.
[01-12 01:59:17][1][641]getaddrinfo error, return -2: Name or service not known
[01-12 01:59:17][1][641]ezviz_das DNS dev.ys7.com parse error
[01-12 01:59:22][3][641]process message routine begin...
[01-12 01:59:32][1][641]getaddrinfo error, return -2: Name or service not known
[01-12 01:59:32][1][641]ezviz_das DNS dev.ys7.com parse error
[01-12 01:59:33][pid:0][UNI_IF][ERROR]upnp_portmap_search_server fialed, result[-11]--:0-Failed,1-Success,2-TimeOut.
[01-12 01:59:37][3][641]process message routine begin...
[01-12 01:59:46][pid:0][UNI_IF][ERROR]upnp_portmap_search_server fialed, result[-11]--:0-Failed,1-Success,2-TimeOut.
[01-12 01:59:47][1][641]getaddrinfo error, return -2: Name or service not known
[01-12 01:59:47][1][641]ezviz_das DNS dev.ys7.com parse error


# [01-12 01:59:52][3][641]process message routine begin...
[01-12 01:59:59][pid:0][UNI_IF][ERROR]upnp_portmap_search_server fialed, result[-11]--:0-Failed,1-Success,2-TimeOut.

#
#
# [01-12 02:00:02][1][641]getaddrinfo error, return -2: Name or service not known
[01-12 02:00:02][1][641]ezviz_das DNS dev.ys7.com parse error
[01-12 02:00:07][3][641]process message routine begin...
[01-12 02:00:12][pid:0][UNI_IF][ERROR]upnp_portmap_search_server fialed, result[-11]--:0-Failed,1-Success,2-TimeOut.

#
#
# [01-12 02:00:17][1][641]getaddrinfo error, return -2: Name or service not known
[01-12 02:00:17][1][641]ezviz_das DNS dev.ys7.com parse error
mount[01-12 02:00:22][3][641]process message routine begin...

rootfs on / type rootfs (rw)
proc on /proc type proc (rw,relatime)
none on /sys type sysfs (rw,relatime)
ramfs on /home type ramfs (rw,relatime)
udev on /dev type tmpfs (rw,relatime)
devpts on /dev/pts type devpts (rw,relatime,mode=600,ptmxmode=000)
/dev/mtdblock5 on /dav type cramfs (ro,relatime)
/dev/mtdblock6 on /devinfo type jffs2 (rw,relatime)
none on /proc/bus/usb type usbfs (rw,relatime)
# [01-12 02:00:26][pid:0][UNI_IF][ERROR]upnp_portmap_search_server fialed, result[-11]--:0-Failed,1-Success,2-TimeOut.
[01-12 02:00:32][1][641]getaddrinfo error, return -2: Name or service not known
[01-12 02:00:32][1][641]ezviz_das DNS dev.ys7.com parse error

#
# [01-12 02:00:37][3][641]process message routine begin...
[01-12 02:00:39][pid:0][UNI_IF][ERROR]upnp_portmap_search_server fialed, result[-11]--:0-Failed,1-Success,2-TimeOut.
[01-12 02:00:47][1][641]getaddrinfo error, return -2: Name or service not known
[01-12 02:00:47][1][641]ezviz_das DNS dev.ys7.com parse error

# [01-12 02:00:52][pid:0][UNI_IF][ERROR]upnp_portmap_search_server fialed, result[-11]--:0-Failed,1-Success,2-TimeOut.

#
#
# [01-12 02:00:52][3][641]process message routine begin...
ls -al /
drwxrwxrwx   18 admin    root             0 Jan 12 00:09 .
drwxrwxrwx   18 admin    root             0 Jan 12 00:09 ..
-rw-------    1 admin    root            36 Jan 12 02:00 .ash_history
drwxrwxrwx    2 admin    root             0 Jan 12 01:57 bin
drwxrwxr-x    1 1052     28             780 Jan  1 00:00 dav
drwxrwxrwt    4 admin    root          2980 Jan 12 01:58 dev
drwxr-xr-x    3 admin    root             0 Jan 12 01:58 devinfo
drwxrwxrwx    5 admin    root             0 Dec 14  2016 etc
drwxr-xr-x    8 admin    root             0 Jan 12 01:59 home
lrwxrwxrwx    1 admin    root             9 Dec 14  2016 init -> sbin/init
drwxrwxrwx    2 admin    root             0 Jan 12 01:57 lib
lrwxrwxrwx    1 admin    root            11 Dec 14  2016 linuxrc -> bin/busybox
drwxrwxrwx   13 admin    root             0 May  2  2013 mnt
drwxrwxrwx    2 admin    root             0 Oct 17  2011 opt
dr-xr-xr-x   53 admin    root             0 Jan  1 00:00 proc
drwxrwxrwx    2 admin    root             0 Sep  9  2011 root
drwxrwxrwx    2 admin    root             0 Dec 14  2016 sbin
drwxrwxrwx    2 admin    root             0 Sep  9  2011 srv
drwxr-xr-x   11 admin    root             0 Jan 12 01:57 sys
drwxrwxrwx    2 admin    root             0 Sep  9  2011 tmp
drwxrwxrwx    4 admin    root             0 Jan 12 01:59 var
# [01-12 02:01:02][1][641]getaddrinfo error, return -2: Name or service not known
[01-12 02:01:02][1][641]ezviz_das DNS dev.ys7.com parse error
[01-12 02:01:05][pid:0][UNI_IF][ERROR]upnp_portmap_search_server fialed, result[-11]--:0-Failed,1-Success,2-TimeOut.
[01-12 02:01:07][3][641]process message routine begin...

#
# ls -al /config
ls: /config: No such file or directory
# [01-12 02:01:17][1][641]getaddrinfo error, return -2: Name or service not known
[01-12 02:01:17][1][641]ezviz_das DNS dev.ys7.com parse error
[01-12 02:01:19][pid:0][UNI_IF][ERROR]upnp_portmap_search_server fialed, result[-11]--:0-Failed,1-Success,2-TimeOut.
[01-12 02:01:22][3][641]process message routine begin...
[01-12 02:01:32][pid:0][UNI_IF][ERROR]upnp_portmap_search_server fialed, result[-11]--:0-Failed,1-Success,2-TimeOut.
[01-12 02:01:32][1][641]getaddrinfo error, return -2: Name or service not known
[01-12 02:01:32][1][641]ezviz_das DNS dev.ys7.com parse error
[01-12 02:01:37][3][641]process message routine begin...

#
#
# [01-12 02:01:45][pid:0][UNI_IF][ERROR]upnp_portmap_search_server fialed, result[-11]--:0-Failed,1-Success,2-TimeOut.

# [01-12 02:01:47][1][641]getaddrinfo error, return -2: Name or service not known
[01-12 02:01:47][1][641]ezviz_das DNS dev.ys7.com parse error

#
#
#
# rm /config/*.cfg
rm: can't remove '/config/*.cfg': No such file or directory
# [01-12 02:01:52][3][641]process message routine begin...
no interrupts
reset eth0.
[ 6811.188844] ***link down status changed***.
[ 6811.193067] PHY: r2_mii:03 - Link is Down
[01-12 02:01:53][pid:0][SADP][ERROR]get_capture_packet failed, caplen=-1
[ 6812.282776] ADDRCONF(NETDEV_UP): eth0: link is not ready
[ 6814.200913] PHY: r2_mii:03 - Link is Up - 100/Full
[ 6814.214859] ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[01-12 02:01:59][pid:0][UNI_IF][ERROR]upnp_portmap_search_server fialed, result[-11]--:0-Failed,1-Success,2-TimeOut.
[01-12 02:02:02][1][641]getaddrinfo error, return -2: Name or service not known
[01-12 02:02:02][1][641]ezviz_das DNS dev.ys7.com parse error
[ 6824.487093] eth0: no IPv6 routers present
[01-12 02:02:07][3][641]process message routine begin...
[01-12 02:02:12][pid:0][UNI_IF][ERROR]upnp_portmap_search_server fialed, result[-11]--:0-Failed,1-Success,2-TimeOut.
[01-12 02:02:17][1][641]getaddrinfo error, return -2: Name or service not known
[01-12 02:02:17][1][641]ezviz_das DNS dev.ys7.com parse error
[01-12 02:02:22][3][641]process message routine begin...
[

alastairstevenson · May 29, 2020

PattyMorr said:
/dev/mtdblock6 on /devinfo type jffs2 (rw,relatime)

mtdblock6 is the cfg partition.

So the file(s) are probably in /devinfo
So

ls -al /devinfo

Check for anything that looks like a configuration file. Then we'll delete it.

alastairstevenson · May 29, 2020

The file might be called

ipc_db
and
ipc_db_backup

in which case the command to delete them would be

rm /devinfo/ipc_db*

After which the bootargs variable, in bootloader, needs to be put back as it was :

setenv bootargs console=ttyAMA0,115200
saveenv
reset

And we keep our fingers crossed that SADP now shows the camera as 'Inactive' so you can Activate it with your own strong password.

alastairstevenson · May 29, 2020

I think you're just about to regain access to the camera.
I'll find out in the morning - I'm off for some shuteye.
Good luck!

PattyMorr · May 29, 2020

Got lost somewhere

# rm /devinfo/ipc_db*
rm: can't remove '/devinfo/ipc_db*': No such file or directory

watchful_ip · May 29, 2020

ls -al /devinfo

PattyMorr · May 29, 2020

Went back and repeated the process until I had a prompt from here

setenv bootargs console=ttyAMA0,115200 init=/bin/sh single debug=9
saveenv
reset
help
#

Then before
/etc/init.d/rcS

I did

Code:

# help
Built-in commands:
------------------
        . : [ [[ alias bg break cd chdir command continue echo eval exec
        exit export false fg getopts hash help jobs kill let local printf
        pwd read readonly return set shift source test times trap true
        type ulimit umask unalias unset wait

# ls -al /devinfo
drwxrwxrwx    2 root     root             0 Dec  7  2011 .
drwxrwxrwx   18 root     root             0 Jan 12 02:42 ..
# ls -al /devinfo
drwxrwxrwx    2 root     root             0 Dec  7  2011 .
drwxrwxrwx   18 root     root             0 Jan 12 02:42 ..
#

Or do I need to doit again after this?
/etc/init.d/rcS

watchful_ip · May 29, 2020

Ideally the configuration should have been cleared now.

ok restore the bootargs line to original, saveenv and reset (i.e. boot the camera as normal)

Is it now inactive on SADP?

If not, then perhaps it was nessecary to mount /devinfo first. If so by all means

cat /etc/init.d/rcS

and determine how to mount it, and remove any config files you find there.

(to be honest I've only skim read the above history so not sure exactly what you tried but the goal is simply to delete the config files and reboot whereupon they will be recreated and you can set a new password)

Search

Hikvision - Clearing Passwords and/or Loading Firmware via TTL Serial

mirki013069

n3wb

iTuneDVR

Pulling my weight

mirki013069

n3wb

iTuneDVR

Pulling my weight

PattyMorr

n3wb

海康设备升级程序包DS-2CD1X21、1X11、1X01(B)系列网络摄像机升级程序包_慈溪市君安安防监控有限公司

alastairstevenson

PattyMorr

n3wb

alastairstevenson

TFTPServ

PattyMorr

n3wb

alastairstevenson

PattyMorr

n3wb

alastairstevenson

PattyMorr

n3wb

alastairstevenson

alastairstevenson

alastairstevenson

PattyMorr

n3wb

watchful_ip

Pulling my weight

PattyMorr

n3wb

watchful_ip

Pulling my weight