DVR DR163Z(EU)

[aavan]

Есть DVR DR163Z(EU),аппарат работает.Принесли для замены HDD и тут выяснилось,что пароль админа забыт.Подключил UART это лог загрузки:

U-Boot 2008.10-svn12 (Nov 27 2010 - 12:54:50)

DRAM: 256 MB
Flash: 16 MB
In: serial
Out: serial
Err: serial
MAC: 00-0B-3F-00-00-01
Press CTRL-C to abort autoboot in can't find corresponding entry
DS1307_ADDR detect error
. done
Un-Protected 1 sectors
Erasing Flash...
. done
Erased 1 sectors
Writing to Flash... done
. done
Protected 1 sectors
### boot load complete: 1402024 bytes loaded to 0xc1000000
### SAVE TO c0c00000 !
## Booting kernel from Legacy Image at c1000000 ...
Image Name: linux
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 1401960 Bytes = 1.3 MB
Load Address: c0c00000
Entry Point: c0c00000
Loading Kernel Image ... OK
OK

Starting kernel ...

Uncompressing Linux.......................................................................................... done, booting the kernel.


Это HELP:

U-Boot 2008.10-svn12 (Nov 27 2010 - 12:54:50)

DRAM: 256 MB
Flash: 16 MB
In: serial
Out: serial
Err: serial
MAC: 00-0C-3E-3E-0E-85
Press CTRL-C to abort autoboot in u-boot # help
? - alias for 'help'
base - print or set address offset
boot - boot default, i.e., run 'bootcmd'
bootd - boot default, i.e., run 'bootcmd'
bootm - boot application image from memory
bootp - boot image via network using BOOTP/TFTP protocol
cmp - memory compare
cp - memory copy
crc32 - checksum calculation
erase - erase FLASH memory
ext2load- load binary file from a Ext2 filesystem
ext2ls - list files in a directory (default /)
fatinfo - print information about filesystem
fatload - load binary file from a dos filesystem
fatls - list files in a directory (default /)
flinfo - print FLASH memory information
fload - load binary file from a filesystem image for system boot
flwrite - write data into FLASH memory
fsinfo - print information about filesystems
fsload - load binary file from a filesystem image
go - start application at address 'addr'
help - print online help
lip - set local ip address but not save to flash
lload - load logo file
loadb - load binary file over serial line (kermit mode)
loady - load binary file over serial line (ymodem mode)
loop - infinite loop on address range
ls - list files in a directory (default /)
mac - set mac address and save to flash
md - memory display
mii - MII utility commands
mm - memory modify (auto-incrementing)
mtest - simple RAM test
mw - memory write (fill)
nand - NAND sub-system
nboot - boot from NAND device
nm - memory modify (constant address)
ping - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
protect - enable or disable FLASH write protection
rarpboot- boot image via network using RARP/TFTP protocol
reset - Perform RESET of the CPU
run - run commands in an environment variable
saveenv - save environment variables to persistent storage
setenv - set environment variables
setvobg - set vo backgroud color.
- setvobg [dev color]sip - set server ip address but not save to flash
startgx - open graphics layer.
- startgx [layer addr stride x y w h]
startvo - open interface of vo device.
- startvo [dev type sync]stopgx - close graphics layer.
- stopgx [layer]stopvo - close interface of vo device.
- stopvo [dev]tftp - download or upload image via network using TFTP protocol
usb - USB sub-system
usbboot - boot from USB device
version - print monitor version
xmtest - test the hard ware and output result to LED
ydump - YAFFS device struct
yls - yaffs ls
ymkdir - YAFFS mkdir
ymount - mount yaffs
ymv - YAFFS mv
yrd - read file from yaffs
yrdm - read file to memory from yaffs
yrm - YAFFS rm
yrmdir - YAFFS rmdir
yumount - unmount yaffs
ywr - write file to yaffs
ywrm - write file from memory to yaffs

Это printenv:

u-boot # printenv
bootargs=mem=72M console=ttyAMA0,115200 root=1f01 rootfstype=cramfs mtdparts=physmap-flash.0:640K(boot),3M(romfs),6784K(usr),1536K(web),3200K(custom),128K(logo),1M(mtd) busclk=220000000
bootcmd=lload;xmtest;fload;bootm 0xC1000000
slave_bootcmd=bootm e0300000 e0a00000
bootdelay=1
baudrate=115200
ipaddr=192.168.1.10
serverip=192.168.1.1
netmask=255.255.0.0
bootfile="uImage"
da=protect off all;tftp 0xC1000000 u-boot.bin.img;flwrite
du=tftp 0xC1000000 user-x.cramfs.img;flwrite
dr=tftp 0xC1000000 romfs-x.cramfs.img;flwrite
dw=tftp 0xC1000000 web-x.cramfs.img;flwrite
dl=tftp 0xC1000000 logo-x.cramfs.img;flwrite
dc=tftp 0xC1000000 custom-x.cramfs.img;flwrite
up=tftp 0xC1000000 update.img;flwrite
tk=fload;tftp 0xC1000000 zImage.img; bootm 0xC1000000
dd=tftp 0xC1000000 mtd-x.jffs2.img;flwrite
ds=tftp 0xC1000000 slvfs-x.cramfs.img;flwrite
ethaddr=00:0c:3e:3e:0e:85
xmerr=ffffff99
stdin=serial
stdout=serial
stderr=serial
verify=n
ver=U-Boot 2008.10-svn12 (Nov 27 2010 - 12:54:50)

Environment size: 982/131068 bytes
u-boot #

Нужно удалить раздел mtd,Размер раздела получился h100000,смещение hF00000.
Перед удалением решил сохранить дамп,и не получилось.Сливать пытался командой cp.b 0xC1000000 0x0 0x1000000 её uboot не выполнил ,не выдавая никаких сообщений через 10 секунд после ввода уйдя в перезагрузку.В чём моя ошибка?

[dede]

попробовать не сразу 10000000, а половину

[aavan]

Не получилось и половину-вот вывод лога:

Boot 2008.10-svn12 (Nov 27 2010 - 12:54:50)

DRAM: 256 MB
Flash: 16 MB
In: serial
Out: serial
Err: serial
MAC: 00-0B-3F-00-00-01
Press CTRL-C to abort autoboot in u-boot # cp.b 0xc1000000 0x0 0x800000


U-Boot 2008.10-svn12 (Nov 27 2010 - 12:54:50)

DRAM: 256 MB
Flash: 16 MB
In: serial
Out: serial

Осознавая свою невежественность,допускаю что напортачил с адресами,прошу-проверьте пожалуйста.

[dede]

Да вроде все верно... не знаю, что еще посоветовать, попробуйте на тфтп напрямую память заливать, без копирования в ОЗУ.... но обычно рег такого не любит и зависает

[aavan]

В help есть команда protect,с ней не может быть связано нежелание рега делиться информацией?

[dede]

нет