AHB7004T-GS-V3 V2.02
доступа к telnet нет.
Изначально проблема была в том, что не подходил пароль. Написал китайцу, и он сгенерировал пароль на определённые даты. Эти пароль подходили, но после ввода пароля DVR уходил в ребут. Затем скачал прошивку General_General_AHB7004T-GS-V3_V4.02.R11.7601.Nat.OnvifC.20170810.bin и загрузил её через UART. После этого пароли, которые сгенерировал китаец перестали подходить и стандартные тоже. И я снова написал китайцу и попросил прошивку. Он прислал 0142-C6NHS-8_C8NHS_C4MH_MHK_MHK_AHB7004T-MH-V2_V4.02.R11.7601.OnvifC.20170630.bin. Это тоже не помогло. Как можно решить эту проблему?
Сделал дамп romfs. В etc/passwd (пароль xc3511), а в etc/passwd- (пароль helpme).
Лог загрузки
Код: Выделить всё
U-Boot 2010.06-svn339 (Jan 11 2016 - 09:29:05)
Check Flash Memory Controller v100 ... Found
SPI Nor(cs 0) ID: 0xc2 0x20 0x18
Block:64KB Chip:16MB Name:"MX25L128XX"
SPI Nor total size: 16MB
In: serial
Out: serial
Err: serial
USB: scanning bus for devices... 2 USB Device(s) found
0 Storage Device(s) found
PHY 0x02: OUI = 0x01F0, Model = 0x0F, Rev = 0x01
change register for 8710
CONFIG MII
ETH0: PHY(phyaddr=2, rgmii) link UP: DUPLEX=FULL : SPEED=100M
MAC: 00-0B-3F-00-00-01
Press CTRL-C to abort autoboot in 2 seconds16384 KiB hi_fmc at 0:0 is now current device
CFG_BOOT_ADDR:0x0
### /UbootLogo UbootLogoload complete: 49802 bytes loaded to 0x8e800000
jpeg decoding ...
<<addr=0x8e800000, size=0xb85f9, vobuf=0x8f000000>>
<<imgwidth=800, imgheight=600, linebytes=1600>>
decode success!!!!
decode jpeg success.
decode jpeg!
OpenDev vo:0 intf_type:36 out_sync:16
srcAddr 0x82000000, dstAddr 0x82000000
find_squashfs_file: name bin, start_block 0, offset 2552, type 1
find_squashfs_file: name boot, start_block 0, offset 2656, type 1
read inode: name boot, sb 0, of 2656, type 1
find_squashfs_file: name zImage.img, start_block 0, offset 2584, type 2
read inode: name zImage.img, sb 0, of 2584, type 2
### FS load complete: 2366136 bytes loaded to 0x82000000
## Booting kernel from Legacy Image at 82000000 ...
Image Name: linux
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 2366072 Bytes = 2.3 MiB
Load Address: 80008000
Entry Point: 80008000
Loading Kernel Image ... OK
OK
Starting kernel ...
Uncompressing Linux... done, booting the kernel.
Код: Выделить всё
hisilicon # printenv
bootcmd=sf probe 0;sf read 0x84000000 0xf60000 0x20000;logoload 0x84000000;decjpg;sf read 0x82000000 0x50000 0x500000;squashfsload 82000000;bootm 0x82000000
bootdelay=1
baudrate=115200
ethaddr=00:0b:3f:00:00:01
ipaddr=192.168.1.10
serverip=192.168.1.12
netmask=255.255.0.0
gatewayip=192.168.1.1
bootfile="uImage"
da=mw.b 0x82000000 ff 1000000;tftp 0x82000000 u-boot.bin.img;sf probe 0;flwrite
du=mw.b 0x82000000 ff 1000000;tftp 0x82000000 user-x.cramfs.img;sf probe 0;flwrite
dr=mw.b 0x82000000 ff 1000000;tftp 0x82000000 romfs-x.cramfs.img;sf probe 0;flwrite
dw=mw.b 0x82000000 ff 1000000;tftp 0x82000000 web-x.cramfs.img;sf probe 0;flwrite
dl=mw.b 0x82000000 ff 1000000;tftp 0x82000000 logo-x.cramfs.img;sf probe 0;flwrite
dc=mw.b 0x82000000 ff 1000000;tftp 0x82000000 custom-x.cramfs.img;sf probe 0;flwrite
up=mw.b 0x82000000 ff 1000000;tftp 0x82000000 update.img;sf probe 0;flwrite
tk=mw.b 0x82000000 ff 1000000;tftp 0x82000000 zImage.img; bootm 0x82000000
dd=mw.b 0x82000000 ff 1000000;tftp 0x82000000 mtd-x.jffs2.img;sf probe 0;flwrite
appVideoStandard=PAL
appSystemLanguage=Russian
bootargs=mem=74M console=ttyAMA0,115200 root=/dev/mtdblock1 rootfstype=squashfs mtdparts=hi_sfc:320K(boot),3968K(romfs),7104K(usr),1536K(web),2816K(custom),128K(logo),512K(mtd) coherent_pool=2M
stdin=serial
stdout=serial
stderr=serial
verify=n
ver=U-Boot 2010.06-svn339 (Jan 11 2016 - 09:29:05)
Environment size: 1384/65532 bytesКод: Выделить всё
hisilicon # help
? - alias for 'help'
base - print or set address offset
bootm - boot application image from memory
bootp - boot image via network using BOOTP/TFTP protocol
cmp - memory compare
cp - memory copy
crc32 - checksum calculation
ddr - ddr training function
decjpg - jpgd - decode jpeg picture.
fatinfo - print information about filesystem
fatload - load binary file from a dos filesystem
fatls - list files in a directory (default /)
flwrite - SPI flash sub-system
getinfo - print hardware information
go - start application at address 'addr'
help - print command description/usage
lload - lload - load logo file
loadb - load binary file over serial line (kermit mode)
loady - load binary file over serial line (ymodem mode)
logoload- logoload - load binary file from a filesystem image for system boot
loop - infinite loop on address range
md - memory display
mii - MII utility commands
mm - memory modify (auto-incrementing address)
mtest - simple RAM read/write test
mw - memory write (fill)
nm - memory modify (constant address)
ping - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
rarpboot- boot image via network using RARP/TFTP protocol
reset - Perform RESET of the CPU
run - run commands in an environment variable
saveenv - save environment variables to persistent storage
setenv - set environment variables
setvobg - setvobg - set vo backgroud color.
- setvobg [dev color]
sf - SPI flash sub-system
squashfsload- fsload - load binary file from a filesystem image
startgx - startgx - open graphics layer.
- startgx [layer addr stride x y w h]
startvl - startvl - open video layer.
- startvl [layer addr stride x y w h]
startvo - startvo - open interface of vo device.
- startvo [dev type sync]
stopgx - stopgx - close graphics layer.
- stopgx [layer]
stopvl - stopvl - close video layer.
- stopvl [layer]
stopvo - stopvo - close interface of vo device.
- stopvo [dev]
tftp - tftp - download or upload image via network using TFTP protocol
usb - USB sub-system
usbboot - boot from USB device
version - print monitor version
