Краткая преамбула: приехала с али IP камера Hiseeu 1080p FHD-FHY
"Работало" это чудо исключительно через родное приложение для смартфона Yoosee или CMS
По заверениям китайцев поддержки onvif нет.
Однако была найдена ссылка на поток вида
Код: Выделить всё
rtsp:/192.168.0.2/onvif1После включения из коробки шустренько обновилась до 21.1.0.95
Удалось понять что устроена она на основе платы Gwelltimes.
На просторах вычитал что до определенного времени yoosee поддерживали onvif. Решил сделать даунгрейд. Скачал IPCTool, прошивку 21.00.00.26 (самое свежее из доступного в инете) и залил в камеру.
В итоге она не пингуется, в сети никак не видится, IP не получает и сама себе не назначает, с SD карты не обновляется и циклично перезагружается. В итоге пришлось отложить молоток и гвозди (строитель я, не программист, не айтишник и тд. Так что прошу заранее понять и простить за возможно глупые мысли или неверные термины) и взять в руки паяльник. Параллельно упросил китайца выслать текущую прошивку. Прислал не полную, а только "обновление" как раз 21.10.00.95 и IPCTool V01.00.00.62_en. Прошивка бинарник, не архив.
В одной из тем 4пда попытался задать вопросы, но там очень, очень, очень активная тишина...
В данный момент нашел и подключился к UART.
Полный цикличный лог загрузки (U-boot удается тормознуть):
Код: Выделить всё
▒~0昀▒▒x▒昘▒x▒▒▒▒mode 1
Version 1.0.3
SPI NOR ID code:0x20 0x70 0x17
SPI jump setting is 3 bytes mode
Boot image offset: 0x10000. size: 0x20000. Booting Image .....
U-Boot 2013.01 (May 18 2007 - 01:03:39)
DRAM: 64 MiB
ROM CODE has enable I cache
SPI mode
Using default environment
In: serial
Out: serial
Err: serial
-------------------------------
ID: 8136110
AC: 200 HC: 200 P1: 590 P2: 600 P3: 540
C6: 590 DR: 786
J: 196 H1: 196
-------------------------------
Net: GMAC set RMII mode
reset PHY
No ethernet found.
Hit any key to stop autoboot: 0
SF: Got idcodes
00000000: 20 70 17 20 p.
SF: Detected XM25QH64A with page size 64 KiB, total 8 MiB
flash is 3byte mode
## Booting kernel from Legacy Image at 02000000 ...
Image Name: gm8136
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 1530360 Bytes = 1.5 MiB
Load Address: 02000000
Entry Point: 02000040
Verifying Checksum ... OK
XIP Kernel Image ... OK
OK
Not define this ID
: mem=64M gmmem=30M console=ttyS0,115200 user_debug=31 init=/squashfs_init root= /dev/mtdblock2 rootfstype=squashfs
Starting kernel ...
Uncompressing Linux... done, booting the kernel.
Booting Linux on physical CPU 0
Linux version 3.3.0 (user25@ubuntu) (gcc version 4.4.0 20100318 (experimental) ( Buildroot 2012.02) ) #48 PREEMPT Sat Jun 30 00:15:32 PDT 2007
CPU: FA6 [66056263] revision 3 (ARMv5TE), cr=0000397f
CPU VIPT aliasing data cache, VIPT aliasing instruction cache
Machine: Grain-Media GM8136 series
Memory policy: ECC disabled, Data cache writeback
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16256
Kernel command line: mem=64M gmmem=30M console=ttyS0,115200 user_debug=31 init=/ squashfs_init root=/dev/mtdblock2 rootfstype=squashfs
PID hash table entries: 256 (order: -2, 1024 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 64MB = 64MB total
Memory: 60956k/60956k available, 4580k reserved, 0K highmem
Virtual kernel memory layout:
vector : 0xffff0000 - 0xffff1000 ( 4 kB)
fixmap : 0xfff00000 - 0xfffe0000 ( 896 kB)
vmalloc : 0x84800000 - 0xff000000 (1960 MB)
lowmem : 0x80000000 - 0x84000000 ( 64 MB)
modules : 0x7f000000 - 0x80000000 ( 16 MB)
.text : 0x80008000 - 0x803993f8 (3653 kB)
.init : 0x8039a000 - 0x803b4000 ( 104 kB)
.data : 0x803b4000 - 0x803d05e0 ( 114 kB)
.bss : 0x803d0604 - 0x803e070c ( 65 kB)
NR_IRQS:64
gm_jiffies_init, system HZ: 100, pClk: 100000000
console [ttyS0] enabled
Calibrating delay loop... 589.00 BogoMIPS (lpj=2945024)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
Setting up static identity map for 0x2bd078 - 0x2bd0c0
devtmpfs: initialized
FMEM: 7680 pages(0x1e00000 bytes) from bank0 are reserved for Frammap.
FMEM: Logical memory ends up at 0x84000000, init_mm:0x80004000(0x4000), PAGE_OFF SET:0x80000000(0x0),
FMEM: FA726 Test and Debug Register: 0x0
NET: Registered protocol family 16
PMU: Mapped at 0xfe000000
FMEM Idle Process Up.
IC: GM8135, version: 0x1
iotable: VA: 0xfe000000, PA: 0x90c00000, Length: 4096
iotable: VA: 0xfe001000, PA: 0x90700000, Length: 4096
iotable: VA: 0xfe002000, PA: 0x90800000, Length: 4096
iotable: VA: 0xfe003000, PA: 0x90900000, Length: 4096
iotable: VA: 0xfe004000, PA: 0x90d00000, Length: 4096
iotable: VA: 0xfe005000, PA: 0x96000000, Length: 4096
bio: create slab <bio-0> at 0
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
Switching to clocksource fttmr010:1
cfg80211: Calling CRDA to update world regulatory domain
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
UDP hash table entries: 256 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
NET: Registered protocol family 1
RPC: Registered named UNIX socket transport module.
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
RPC: Registered tcp NFSv4.1 backchannel transport module.
Video Timer(timer3) Max 42000ms in 0xfa56ea00 HZ.
ftdmac020 ftdmac020.0: DMA engine driver: irq 1, mapped at 0x84804000
GM CPU frequency driver
CPUFREQ support for gm initialized
squashfs: version 4.0 (2009/01/31) Phillip Lougher
JFFS2 version 2.2. (NAND) © 2001-2006 Red Hat, Inc.
msgmni has been set to 119
io scheduler noop registered
io scheduler deadline registered (default)
gpiochip_add: registered GPIOs 0 to 31 on device: ftgpio010.0
probe ftgpio010.0 OK, at 0x84856000
gpiochip_add: registered GPIOs 32 to 63 on device: ftgpio010.1
probe ftgpio010.1 OK, at 0x84858000
Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
serial8250: ttyS0 at I/O 0xfe001000 (irq = 21) is a 16550A
serial8250: ttyS1 at I/O 0xfe002000 (irq = 22) is a 16550A
serial8250: ttyS2 at I/O 0xfe003000 (irq = 25) is a 16550A
brd: module loaded
loop: module loaded
Not for SPI-NAND pin mux
SPI020 init
SPI020 uses AHB DMA mode
FTSPI020 enable DMA handshake 0x3
SPI020 gets DMA channel 0
ftspi020 ftspi020.0: Faraday FTSPI020 Controller at 0x92300000(0x8485a000) irq 5 4.
spi spi0.0: setup: bpw 8 mode 0
CLK div field set 1, clock = 30000000Hz
ERASE SECTOR 64K
SPI_FLASH spi0.0: XM25QH64A (8192 Kbytes)
Creating 6 MTD partitions on "nor-flash":
0x000000010000-0x000000030000 : "UBOOT"
0x000000030000-0x000000220000 : "KERNEL"
0x000000220000-0x000000540000 : "ROOTFS"
0x000000540000-0x000000590000 : "ROM"
0x000000590000-0x000000800000 : "APP"
0x000000000000-0x000000800000 : "ALL"
Probe FTSPI020 SPI Controller at 0x92300000 (irq 54)
GMAC version 2.3, queue number tx = 128, rx = 32
ftgmac100-0-mdio: probed
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
FOTG2XX Controller Initialization
Enter Device A
Drive Vbus because of ID pin shows Device A
fotg210 fotg210.0: FOTG2XX
fotg210 fotg210.0: new USB bus registered, assigned bus number 1
fotg210 fotg210.0: irq 9, io mem 0x93000000
fotg210 fotg210.0: USB 2.0 started, EHCI 1.00
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
i2c /dev entries driver
ftiic010 ftiic010.0: irq 18, mapped at 84860000
GM I2C Driver Version: 1.0.0
sdhci: Secure Digital Host Controller Interface driver
sdhci: Copyright(c) Pierre Ossman
mmc0: SDHCI controller on ftsdc021.0 [ftsdc021.0] using ADMA
sdhci-pltfm: SDHCI platform and OF driver helper
TCP cubic registered
NET: Registered protocol family 17
NET: Registered protocol family 15
lib80211: common routines for IEEE802.11 drivers
VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
devtmpfs: mounted
Freeing init memory: 104K
mmc0: new high speed SDHC card at address 0007
mmcblk0: mmc0:0007 SD8GB 7.21 GiB
mmcblk0: p1
usb 1-1: new high-speed USB device number 2 using fotg210
busybox: /linuxrc: Read-only file system
Mounting root fs rw ...
Mounting other filesystems ...
Setting hostname ...
Bringing up interfaces ...
/bin/sh: run-parts: not found
Mounting user's MTD partion
mke2fs 1.42.8 (20-Jun-2013)
Discarding device blocks: done
Filesystem label=
OS type: Linux
Block size=1024 (log=0)
Fragment size=1024 (log=0)
Stride=0 blocks, Stripe width=0 blocks
4096 inodes, 16384 blocks
819 blocks (5.00%) reserved for the super user
First data block=1
Maximum filesystem blocks=16777216
2 block groups
8192 blocks per group, 8192 fragments per group
2048 inodes per group
Superblock backups stored on blocks:
8193
Allocating group tables: done
Writing inode tables: done
Writing superblocks and filesystem accounting information: done
Frammap: DDR0: memory base=0x1800000, memory size=0x1e00000, align_size = 4K.
Frammap: version 1.1.2, and the system has 1 DDR.
----------------------------------------------------------------
ddr name: frammap0
base: 0x1800000
end: 0x3600000
size: 0x1e00000 bytes
memory allocated: 0x0 bytes
memory free: 0x1e00000 bytes
max available slice: 0x1e00000 bytes
memory allocate count: 0
clear address: 0x1800000
dirty pages: 0
clear pages: 7680
size alignment: 0x1000
=========================================================================
Start startup!
startup 0 0
no key detect
vStarNpc:
=========================================================================
/ # WDT base virtual address = 848ac000
ftwdt010dog_ioctl, watchdog is enabled! timeout: 5s
eeprom cer crc error
No Certificate
dwCurMDThreadhold =15 dwNewThreadhold =3
>>>>>>> in 100w or 200w MD param <<<<<<<<<
capture motion not initial
MD_Test: capture_motion_info_init error at mdt_idx(0)
info: RTC has been used before, no need to init it
<1>Sun Jan 1 01:01:01 2010
<3>Fri Jan 1 01:01:01 2010
>>>>>>>>>>>>SetRtspNewPasswordType(1)
vMesgQBufInit
vDevLogQThreadStart star!
iClientSocketFd = 4
fgAddLogMesgBodyToQ 1
timeOut,vTimerSendLogMesgBody 16 bytes
psMesgQBuf->dwMesgID = 0
i2c i2c-0: NAK!
i2c i2c-0: I2C TX data 0x60 timeout!
cEmailAddr[0] isi2c i2c-0: NAK!
0xffFail to finish I2C transaction, error =-1
i2c i2c-0: I2C TX data 0x60 timeout!
Fail to finish Ii2c i2c-0: NAK!
2C transaction, error =-1
**Func:fgCmosTypeInit,Line:438 dwCMOSPID = 0x0000
i2c i2c-0: I2C TX data 0x60 timeout!
Fail to finish Ii2c i2c-0: NAK!
2C transaction, error =-1
i2c i2c-0: I2C TX data 0x60 timeout!
Fail to finish Ii2c i2c-0: NAK!
2C transaction, error =-1
i2c i2c-0: I2C TX data 0x60 timeout!
Fail to finish Ii2c i2c-0: NAK!
2C transaction, error =-1
i2c i2c-0: I2C TX data 0x60 timeout!
Fail to finish Ii2c i2c-0: NAK!
2C transaction, error =-1
i2c i2c-0: I2C TX data 0x60 timeout!
Fail to finish Ii2c i2c-0: NAK!
2C transaction, error =-1
i2c i2c-0: I2C TX data 0x60 timeout!
Fail to finish Ii2c i2c-0: NAK!
2C transaction, error =-1
i2c i2c-0: I2C TX data 0x60 timeout!
Fail to finish Ii2c i2c-0: NAK!
2C transaction, error =-1
i2c i2c-0: I2C TX data 0x60 timeout!
Fail to finish Ii2c i2c-0: NAK!
2C transaction, error =-1
i2c i2c-0: I2C TX data 0x60 timeout!
Fail to finish Ii2c i2c-0: NAK!
2C transaction, error =-1
i2c i2c-0: I2C TX data 0x60 timeout!
Fail to finish Ii2c i2c-0: NAK!
2C transaction, error =-1
i2c i2c-0: I2C TX data 0x60 timeout!
Fail to finish Ii2c i2c-0: NAK!
2C transaction, error =-1
i2c i2c-0: I2C TX data 0x60 timeout!
Fail to finish Ii2c i2c-0: NAK!
2C transaction, error =-1
i2c i2c-0: I2C TX data 0x60 timeout!
Fail to finish Ii2c i2c-0: NAK!
2C transaction, error =-1
i2c i2c-0: I2C TX data 0x60 timeout!
Fail to finish Ii2c i2c-0: NAK!
2C transaction, error =-1
i2c i2c-0: I2C TX data 0x60 timeout!
Fail to finish Ii2c i2c-0: NAK!
2C transaction, error =-1
psMesgQBuf->dwMesgID = 0
i2c i2c-0: I2C TX data 0x60 timeout!
Fail to finish Ii2c i2c-0: NAK!
2C transaction, error =-1
i2c i2c-0: I2C TX data 0x60 timeout!
Fail to finish Ii2c i2c-0: NAK!
2C transaction, error =-1
i2c i2c-0: I2C TX data 0x60 timeout!
Fail to finish Ii2c i2c-0: NAK!
2C transaction, error =-1
i2c i2c-0: I2C TX data 0x60 timeout!
Fail to finish Ii2c i2c-0: NAK!
2C transaction, error =-1
i2c i2c-0: I2C TX data 0x60 timeout!
Fail to finish Ii2c i2c-0: NAK!
2C transaction, error =-1
i2c i2c-0: I2C TX data 0x60 timeout!
Fail to finish Ii2c i2c-0: NAK!
2C transaction, error =-1
i2c i2c-0: I2C TX data 0x60 timeout!
Fail to finish Ii2c i2c-0: NAK!
2C transaction, error =-1
i2c i2c-0: I2C TX data 0x78 timeout!
Fail to finish Ii2c i2c-0: NAK!
2C transaction, error =-1
i2c i2c-0: I2C TX data 0x78 timeout!
Fail to finish Ii2c i2c-0: NAK!
2C transaction, error =-1
i2c i2c-0: I2C TX data 0x40 timeout!
Fail to finish I2C transaction, error =-1
/bin/sh: /npc/mtd/vg_boot.sh: not found
default SC1045 CMOS.
*************vNetMg_Init******************
vRtspServderThreadStar star!
vHandSelectThreadStar star!
accept ************HW reset
******
user: pwd: dwSmtpPort:0
Disk init
[err] gm_init:
Open "/dev/vpd" fail! please check insert module driver flow.
vDiskProc begin
<ioctl "VPD_ENV_UPDATE" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
vNewIrCutHanldeFun to filter, day
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
<ioctl "VPD_SET_PALETTE_TABLE_V1" fail>
<ioctl "VPD_SEND_LOGMSG" fail(9)>
Set osd palette failed: Bad file descriptor
Enter UISsInit
psMesgQBuf->dwMesgID = 0
found disk1
have find sdcard will mount disk1=1
>>>>> mounting <<<<<
mount disk1 OK
Exit UISsInit
>>>>>>>>>>>>>>>>>> help
#### read ap wifi password:0000000000000000
phy speed is 10, half duplex
HW reset
pgd = 837a8000
[00007fff] *pgd=037a0831, *pte=00000000, *ppte=00000000
Pid: 97, comm: npc
CPU: 0 Tainted: G O (3.3.0 #48)
PC is at 0x76f41684
LR is at 0x76f2c5a8
pc : [<76f41684>] lr : [<76f2c5a8>] psr: a0000010
sp : 7ea8d940 ip : 76f5d6a8 fp : 7ea8dc4c
r10: 00000000 r9 : 00000000 r8 : 00000004
r7 : 00319d20 r6 : ffffffff r5 : 00007fff r4 : 76f5a33c
r3 : 00000000 r2 : 00000000 r1 : 00319d20 r0 : 00000004
Flags: NzCv IRQs on FIQs on Mode USER_32 ISA ARM Segment user
Control: 0000397f Table: 037a8000 DAC: 00000015
[<8000eff4>] (unwind_backtrace+0x0/0xf4) from [<8000fce0>] (__do_user_fault+0x94 /0xa0)
[<8000fce0>] (__do_user_fault+0x94/0xa0) from [<8000ff28>] (do_page_fault+0x1b8/ 0x360)
[<8000ff28>] (do_page_fault+0x1b8/0x360) from [<80008310>] (do_DataAbort+0x34/0x 98)
[<80008310>] (do_DataAbort+0x34/0x98) from [<8000965c>] (__dabt_usr+0x3c/0x40)
Exception stack(0x81107fb0 to 0x81107ff8)
7fa0: 00000004 00319d20 00000000 00000000
7fc0: 76f5a33c 00007fff ffffffff 00319d20 00000004 00000000 00000000 7ea8dc4c
7fe0: 76f5d6a8 7ea8d940 76f2c5a8 76f41684 a0000010 ffffffff
fgAddLogMesgBodyToQ 2
time out
vForceSendLogMesgBody 32 bytes
Restarting system.
▒~0昀▒▒x▒昘▒x▒▒▒▒mode 1
Version 1.0.3
SPI NOR ID code:0x20 0x70 0x17
SPI jump setting is 3 bytes mode
Boot image offset: 0x10000. size: 0x20000. Booting Image .....
U-Boot 2013.01 (May 18 2007 - 01:03:39)
DRAM: 64 MiB
ROM CODE has enable I cache
SPI mode
Using default environment
In: serial
Out: serial
Err: serial
-------------------------------
ID: 8136110
AC: 200 HC: 200 P1: 590 P2: 600 P3: 540
C6: 590 DR: 786
J: 196 H1: 196
-------------------------------
Net: GMAC set RMII mode
reset PHY
No ethernet found.
Hit any key to stop autoboot: 0
Gwelltimes#
Gwelltimes#Код: Выделить всё
Gwelltimes# printenv
baudrate=115200
bootcmd=sf probe 0:0;run lm;bootm 0x2000000
bootdelay=1
cmd1=mem=64M gmmem=30M console=ttyS0,115200 user_debug=31 init=/squashfs_init root=/dev/mtdblock2 rootfstype=squashfs
cmd2=mem=128M gmmem=90M console=ttyS0,115200 user_debug=31 init=/squashfs_init root=/dev/mtdblock2 rootfstype=squashfs
cmd3=mem=256M gmmem=190M console=ttyS0,115200 user_debug=31 init=/squashfs_init root=/dev/mtdblock2 rootfstype=squashfs
cmd4=mem=512M gmmem=432M console=ttyS0,115200 user_debug=31 init=/squashfs_init root=/dev/mtdblock2 rootfstype=squashfs
lm=sf read 0x02000000 z
stderr=serial
stdin=serial
stdout=serial
Environment size: 637/65532 bytes
Код: Выделить всё
Gwelltimes# ?
? - alias for 'help'
boot - boot default, i.e., run 'bootcmd'
bootd - boot default, i.e., run 'bootcmd'
bootm - boot application image from memory
bootp - boot image via network using BOOTP/TFTP protocol
cmp - memory compare
cp - memory copy
crc32 - checksum calculation
env - environment handling commands
erase - erase FLASH memory
flinfo - print FLASH memory information
go - start application at address 'addr'
help - print command description/usage
l2cache_test- Perform test of L2 cache
md - memory display
memtester- memory tester
mm - memory modify (auto-incrementing address)
mtest - simple RAM read/write test
mw - memory write (fill)
nm - memory modify (constant address)
printenv- print environment variables
protect - enable or disable FLASH write protection
reset - Perform RESET of the CPU
run - run commands in an environment variable
setenv - set environment variables
sf - SPI flash sub-system
sspi - SPI utility command
tftpboot- boot image via network using TFTP protocol
version - print monitor, compiler and linker version
Gwelltimes#
Код: Выделить всё
=========================================================================
Start startup!
startup 0 0
no key detect
vStarNpc:
=========================================================================
/ # WDT base virtual address = 848ac000
Код: Выделить всё
/ # ps w
PID USER VSZ STAT COMMAND
1 root 992 S {squashfs_init} /gm/bin/busybox ash /squashfs_init
2 root 0 SW [kthreadd]
3 root 0 SW [ksoftirqd/0]
4 root 0 SW [kworker/0:0]
5 root 0 SW [kworker/u:0]
6 root 0 SW< [khelper]
7 root 0 SW [kdevtmpfs]
8 root 0 SW< [netns]
9 root 0 DW [FMEM_IDLE]
10 root 0 SW [sync_supers]
11 root 0 SW [bdi-default]
12 root 0 SW< [kblockd]
13 root 0 SW [khubd]
14 root 0 SW [kworker/0:1]
15 root 0 SW< [cfg80211]
16 root 0 SW< [rpciod]
17 root 0 SW [khungtaskd]
18 root 0 SW [kswapd0]
19 root 0 SW [fsnotify_mark]
20 root 0 SW< [nfsiod]
21 root 0 SW< [ftspi020.0]
22 root 0 SW [kworker/u:1]
23 root 0 SW [mtdblock0]
24 root 0 SW [mtdblock1]
25 root 0 SW [mtdblock2]
26 root 0 SW [mtdblock3]
27 root 0 SW [mtdblock4]
28 root 0 SW [mtdblock5]
31 root 0 SW [kworker/u:2]
51 root 1000 S {linuxrc} init
68 root 0 SWN [jffs2_gcd_mtd3]
75 root 0 RWN [jffs2_gcd_mtd4]
95 root 3160 R /npc/npc
96 root 1000 S /bin/sh
99 root 992 R ps wЕсли подсовывать kill -9 95 то для текущей загрузки получается войти в busybox.
Это с отключенной платой расширения (WiFi + SD). С подключенной все примерно такое же, только /npc/npc имеет PID 97
Методом тыка удается тормознуть загрузку варварским способом подтыкивая ps w && kill -9 97 && ps w Можно обойтись и просто kill -9 97, но с выводом процессов нагляднее виден результат выполнения kill.
Итого на текущий момент имею командную строку busibox.
немного всякой инфы:
Код: Выделить всё
/ # cat /proc/version
Linux version 3.3.0 (user25@ubuntu) (gcc version 4.4.0 20100318 (experimental) (Buildroot 2012.02) ) #48 PREEMPT Sat Jun 30 00:15:32 PDT 2007
/ # cat /proc/cpuinfo
Processor : FA6 rev 3 (v5l)
BogoMIPS : 146.75
Features : swp half
CPU implementer : 0x66
CPU architecture: 5TE
CPU variant : 0x0
CPU part : 0x626
CPU revision : 3
Hardware : Grain-Media GM8136 series
Revision : 0000
Serial : 0000000000000000
/ # df -h
Filesystem Size Used Available Use% Mounted on
/dev/root 3.0M 3.0M 0 100% /
devtmpfs 29.8M 0 29.8M 0% /dev
tmpfs 29.8M 0 29.8M 0% /dev
tmpfs 15.5M 205.0K 14.5M 1% /tmp
tmpfs 29.8M 4.0K 29.8M 0% /var
tmpfs 29.8M 0 29.8M 0% /bin
tmpfs 29.8M 0 29.8M 0% /usr
tmpfs 29.8M 0 29.8M 0% /sbin
tmpfs 20.0M 0 20.0M 0% /dev/shm
/dev/mtdblock3 320.0K 204.0K 116.0K 64% /rom
/dev/ram0 15.5M 205.0K 14.5M 1% /mnt/ramdisk
/dev/ram0 15.5M 205.0K 14.5M 1% /etc
/dev/ram0 15.5M 205.0K 14.5M 1% /tmp
/dev/mtdblock4 2.4M 2.1M 316.0K 87% /npc
/ # df -ha
Filesystem Size Used Available Use% Mounted on
/dev/root 3.0M 3.0M 0 100% /
devtmpfs 29.8M 0 29.8M 0% /dev
tmpfs 29.8M 0 29.8M 0% /dev
tmpfs 15.5M 205.0K 14.5M 1% /tmp
tmpfs 29.8M 4.0K 29.8M 0% /var
tmpfs 29.8M 0 29.8M 0% /bin
tmpfs 29.8M 0 29.8M 0% /usr
tmpfs 29.8M 0 29.8M 0% /sbin
/dev/sys 0 0 0 0% /sys
none 0 0 0 0% /proc
devpts 0 0 0 0% /dev/pts
tmpfs 20.0M 0 20.0M 0% /dev/shm
/dev/mtdblock3 320.0K 204.0K 116.0K 64% /rom
/dev/ram0 15.5M 205.0K 14.5M 1% /mnt/ramdisk
/dev/ram0 15.5M 205.0K 14.5M 1% /etc
/dev/ram0 15.5M 205.0K 14.5M 1% /tmp
/dev/mtdblock4 2.4M 2.1M 316.0K 87% /npc
Код: Выделить всё
/ # ls -R /mnt
/mnt:
SD USB disc0 disc1 mtd nfs ramdisk
/mnt/SD:
/mnt/USB:
/mnt/disc0:
/mnt/disc1:
/mnt/mtd:
/mnt/nfs:
/mnt/ramdisk:
123.txt hosts lost+found passwd template_8136
Wireless inetd.conf motd profile udhcpd.conf
fstab init.d mtab resolv.conf version.ini
group inittab network services
host.conf issue nsswitch.conf shadow
/mnt/ramdisk/Wireless:
RT2870AP RT2870STA RTL8188
/mnt/ramdisk/Wireless/RT2870AP:
RT2870AP.dat
/mnt/ramdisk/Wireless/RT2870STA:
RT2870STA.dat RT2870STA_7601.dat
/mnt/ramdisk/Wireless/RTL8188:
hostapd.conf
/mnt/ramdisk/init.d:
rc.mtd rc.reboot rc.sysinit
/mnt/ramdisk/lost+found:
/mnt/ramdisk/network:
if-down.d if-post-down.d if-pre-up.d if-up.d interfaces
/mnt/ramdisk/network/if-down.d:
/mnt/ramdisk/network/if-post-down.d:
/mnt/ramdisk/network/if-pre-up.d:
/mnt/ramdisk/network/if-up.d:
Либо как обычно не хватает знаний.
Традиционные 2 вопроса :
Что делать?
Куды бечь?
Где хотя бы почитать про этот npc/npc то?
Ах, да: прошивку-обновление от китайца я засунул в binwalk. Там живет jffs2. Судя по названиям папок и структуре, в данный момент на камере аналогом расположения является каталог /npc
Пока что пытаюсь понять как подсунуть сюда файлы из прошивки китайца и продолжить загрузку, чтобы хоть до первого сброса питания камера была чуть живее. Тогда и "обновиться" можно попробовать как-то.
Рою в сторону загрузки файлов хотя бы через консоль. Пока ничего не понимаю.
Понимаю что букв очень много, но постарался максимально понятно обрисовать текущую ситуацию. Буду признателен за любую помощь/советы/ критику по дальнейшим действиям.
