Haxorware Forums
5101e probs - Printable Version

+- Haxorware Forums (http://www.haxorware.com/forums)
+-- Forum: General (http://www.haxorware.com/forums/forumdisplay.php?fid=6)
+--- Forum: Modems (http://www.haxorware.com/forums/forumdisplay.php?fid=7)
+--- Thread: 5101e probs (/showthread.php?tid=2045)

Pages: 1 2

RE: 5101e probs - shocky - 16-10-2012

i no its all about certs these days not just the macs,i thought seeing i have 2 480s 1 subbed and one not i thought iff i used my original dump from my subbed and put a mac in starting with same range as my subbed one it may of worked,but as i have been reading each cert is unique,and this special command which is not documented does it have something to do with bypassing the authentication during the handshake?or am i way off??

RE: 5101e probs - shocky - 22-10-2012

does that command banish cvc errors by any chance??

RE: 5101e probs - shocky - 24-10-2012

hi guys,managed to get online with 5101e using 76byte config
here is my haxo error log:

Status

Overview

Signal

Event Log

Configuration

Settings

Frequency

Addresses

Config File

Baseline Privacy

Advanced

Static IP

Stealth

Downloader

File Manager

Web Shell


Factory Defaults

Backup and Restore

Firmware upgrade


About


Reboot
Event Log
Time Priority Code Description
1970-01-01 00:00:16 Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:08 Critical R002.0 No Ranging Response received - T3 time-out (US 1)
1970-01-01 00:00:04 Notice M571.1 Ethernet link up - ready to pass packets
2012-10-24 20:15:43 Notice M573.0 Modem Is Shutting Down and Rebooting...
2012-10-24 20:15:43 Critical Resetting the cable modem due to docsDevResetNow
2012-10-24 20:14:22 Information I500.0 Registration Completed
2012-10-24 20:14:21 Information D507.0 Retrieved Time....... SUCCESS
2012-10-24 20:14:21 Information D509.0 Retrieved TFTP Config kfoA,.iyewrkldJKDHSU SUCCESS
1970-01-01 00:00:18 Information D511.0 Retrieved DHCP .......... SUCCESS
1970-01-01 00:00:17 Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:14 Information T500.0 Acquired Upstream .......... SUCCESS
1970-01-01 00:00:12 Critical R002.0 No Ranging Response received - T3 time-out (US 1)
1970-01-01 00:00:10 Information T501.0 Acquired Downstream (331000000 Hz)........ SUCCESS
1970-01-01 00:01:17 Critical T002.0 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:01:16 Information Received UP-DIS message from CMTS! Disabling DOCSIS state machine and Us/Ds tra
2012-10-24 20:05:19 Information I500.0 Registration Completed
2012-10-24 20:05:18 Information D507.0 Retrieved Time....... SUCCESS
2012-10-24 20:05:18 Information D509.0 Retrieved TFTP Config ,.iyewrkldJKDHSUBsgv SUCCESS
1970-01-01 00:02:08 Information D511.0 Retrieved DHCP .......... SUCCESS
1970-01-01 00:02:08 Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:02:04 Information T500.0 Acquired Upstream .......... SUCCESS
1970-01-01 00:01:53 Critical R002.0 No Ranging Response received - T3 time-out (US 1)
1970-01-01 00:01:50 Information T501.0 Acquired Downstream (331000000 Hz)........ SUCCESS
2012-10-24 20:00:43 Critical T002.0 SYNC Timing Synchronization failure - Failed to acquire FEC framing
2012-10-24 20:00:42 Information Received UP-DIS message from CMTS! Disabling DOCSIS state machine and Us/Ds tra
2012-10-24 20:00:18 Information I500.0 Registration Completed
2012-10-24 20:00:17 Information D507.0 Retrieved Time....... SUCCESS
2012-10-24 20:00:17 Information D509.0 Retrieved TFTP Config ldJKDHSUBsgvca69834n SUCCESS
1970-01-01 00:00:30 Information D511.0 Retrieved DHCP .......... SUCCESS
1970-01-01 00:00:30 Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:25 Information T500.0 Acquired Upstream .......... SUCCESS
1970-01-01 00:00:12 Critical R002.0 No Ranging Response received - T3 time-out (US 1)
1970-01-01 00:00:10 Information T501.0 Acquired Downstream (331000000 Hz)........ SUCCESS
2012-10-24 19:51:14 Information I500.0 Registration Completed
2012-10-24 19:51:13 Information D507.0 Retrieved Time....... SUCCESS
2012-10-24 19:51:13 Information D509.0 Retrieved TFTP Config kfoA,.iyewrkldJKDHSU SUCCESS
1970-01-01 00:00:21 Information D511.0 Retrieved DHCP .......... SUCCESS
1970-01-01 00:00:20 Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:15 Information T500.0 Acquired Upstream .......... SUCCESS
1970-01-01 00:00:10 Critical R002.0 No Ranging Response received - T3 time-out (US 1)
1970-01-01 00:00:10 Information T501.0 Acquired Downstream (331000000 Hz)........ SUCCESS
1970-01-01 00:00:43 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:00:43 Notice M573.0 Modem Is Shutting Down and Rebooting...
1970-01-01 00:00:43 Critical Resetting the cable modem due to docsDevResetNow
1970-01-01 00:00:20 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing

my question is what does this mean :1970-01-01 00:01:16 Information Received UP-DIS message from CMTS! Disabling DOCSIS state machine and Us/Ds tra

and here is my telnet log too

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2012.10.24 21:04:38 =~=~=~=~=~=~=~=~=~=~=~=
Haxorware integrated telnet daemon

Username: SHAKEY
Password: ******
Welcome.

CM>
CM> run
CM>
CM> run_app


Running the system...


Beginning Cable Modem operation...

0x00019bd6 [Scan Downstream Thread] BcmVendorCmDownstreamScanThread::ThreadMain: (Scan Downstream Thread) Scanning for a Downstream Channel...

mot_scanList: Setting override freq @ 0
Favorite[0].freq = 331000000
Attempting Downstream FEC lock @ freq= 331000000 Hz, QAM64/256

CM> Found energy at frequency 331000000Hz! Publishing event kEventEnergyDetected...
0x00019fd2 [CmDocsisCtlThread] BcmCmDocsisCtlThread::StartUsInit: (CmDocsisCtlThread) Locked on the downstream. Waiting for UCDs...

******************************************
DOWNSTREAM STATUS
******************************************
Tuner Frequency = 331000000 Hz
Carrier Offset = -4 Hz
Symbol rate = 5360537 sym/sec
SNR = 38 dB
QAM Mode = QAM256
Tuner AGC = 0xfff00000
IF AGC = 0x1488051e
Power Level = 3 dB
QAM = LOCKED
FEC = LOCKED
******************************************


CM> Selecting UCD for Us Channel 1

0x0001ade2 [CmDocsisCtlThread] BcmCmDocsisCtlThread::TestAndLaunchDsTimeSync: (CmDocsisCtlThread) starting ds time sync acquisition...
0x0001b062 [CmDocsisCtlThread] BcmCmDocsisCtlThread::SyncDsSyncOk: (CmDocsisCtlThread) downstream time sync acquired...
0x0001b062 [CmDocsisCtlThread] BcmCmDocsisCtlThread:Big GrinsSyncOkResumeUsInit: (CmDocsisCtlThread) pre-REG upstream target case...starting initial ranging.
Beginning initial ranging...
Using default (wacky stored value) initial upstream power = 8.0 dBmV
0x0001b06c [CmDocsisCtlThread] BcmCmDocsisCtlThread::SyncDsSyncOk: (CmDocsisCtlThread) rx unexpected kDsSyncOk indication...
Logging event: Acquired Downstream (331000000 Hz)........ SUCCESS

CM> Adjusting the initial ranging power to 33.0 dBmV...
Logging event: No Ranging Response received - T3 time-out (US 1)

CM> Adjusting the initial ranging power to 46.0 dBmV...
Logging event: No Ranging Response received - T3 time-out (US 1)

CM>
RNG-RSP Adj: tim=2458 power=60 freq=0 Stat=Continue

CM>
RNG-RSP Adj: tim=0 power=14 freq=0 Stat=Success

******************************************
UPSTREAM STATUS
******************************************
Upstream Status = UP
Upstream Channel = 1
Upstream Frequency = 18800000 Hz
Upstream Power = 61 dBmV
Ranging SID = 0x4c7
Upstream Symbol Rate = 2560000 sym/sec
******************************************

Calculating maximum number of IP filters:
Each IP filter consumes 1860 bytes of RAM.
Current free RAM is 291548 bytes.
Max heap reserved for IP filters (25%) = 72887
We can support 39 IP filters.
Calculating maximum number of LLC filters:
Each LLC filter consumes 716 bytes of RAM.
Current free RAM is 291528 bytes.
Max heap reserved for LLC filters (25%) = 72882
We can support 101 LLC filters.
Starting IP Initialization with DHCP...
DHCPc: Waiting 1 seconds before sending Discover; client id htype=1, value=00:19:47:00:00:00
Logging event: Acquired Upstream .......... SUCCESS

CM> DHCPc: Sending Discover packet; client id htype=1, value=00:19:47:00:00:00
DHCPc: Received an Offer from DHCP server 00:21:1b:bf:5c:01 (10.50.104.1); lease client id htype=1, value=00:19:47:00:00:00

CM> DHCPc: Timed out waiting for offers for lease with client id htype=1, value=00:19:47:00:00:00
DHCPc: Sending Request packet; client id htype=1, value=00:19:47:00:00:00
DHCPc: Received an Ack from DHCP server 00:21:1b:bf:5c:01 (10.50.104.1); lease client id htype=1, value=00:19:47:00:00:00
Current IP address is default 0.0.0.0.
0x0001f45a [DHCP Client Thread] BcmEcosIpHalIf::ConfigureLeaseImpl: (IP Stack1 HalIf)
Configuring IP stack 1:
IP Address = 10.50.109.144 (primary IP address)
Subnet Mask = 255.255.248.0
Router = 10.50.104.1
IsPrimaryInterface = 1

Logging event: DHCP WARNING - Non-critical field invalid in response.
ARPing for default GW IP = 10.50.104.1
MAC = 00:21:1b:bf:5c:01
DHCP completed successfully!

DHCP Settings:
Client Id = htype=1, value=00:19:47:00:00:00
State = Renewing (5)
Static Lease = 0
AutoConfig Mode = IP, Subnet and Router
XID = 0x2b0cee8f
Number of Tries = 0
Max Discover Tries = 6
Max Request Tries = 6
DHCP server MAC addr = 00:21:1b:bf:5c:01
Ignore NAKs = 0
My offered IP address = 10.50.109.144 (primary IP address)
(1) Subnet Mask = 255.255.248.0
(3) Router IP address = 10.50.104.1
(54) DHCP Server IP address = 62.253.131.161
(82) Relay Agent IP address = 10.50.104.1
TFTP Server IP address = 10.50.104.1
CM Configuration file = ',.iyewrkldJKDHSUBsgv'
(2) UTC Time Offset = 0 seconds
(4) Time Server IP address = 10.137.103.1
(6) Domain Name Server =
(7) Log Server IP address =
(51) Lease time = 411879 seconds
(58) T1 (renew) = 205939 seconds
(59) T2 (rebind) = 360394 seconds
Lease is infinite = 0


SB5102 CM Agent w/ BRCM Factory Support IpStackEvent: Ip=10.50.109.144, Subnet=255.255.248.0, Gateway=10.50.104.1
CmSnmpAgent::IpAddressAcquiredEvent for SB5102 CM Agent w/ BRCM Factory Support
IP addr = 10.50.109.144
Starting Time Of Day...
0x0001f4fa [CmDocsisIpThread] BcmDocsisTimeOfDayThread::SetTodServerIpAddress: (Time Of Day Thread) ToD servers: 10.137.103.1
Connecting to ToD server 10.137.103.1...
Sending UDP ToD request to server...
SNMP Agent Binding to 10.50.109.144:225
Logging event: Retrieved DHCP .......... SUCCESS
UTC returned by ToD server 3560097918; UTC offset 0
Current system time -> Wed Oct 24 20:05:18 2012

System start time -> Wed Oct 24 20:03:10 2012

Starting Tftp of configuration file...
Opening file ',.iyewrkldJKDHSUBsgv' on 10.50.104.1 for reading...
tftp-enforce bypass is DISABLED
Storing received cfg of size 76 to memory
Tftp transfer complete!
TFTP Settings:
Stack Interface = 1
Server Ip Address = 10.50.104.1
Server Port Number = 69
Total Blocks Read = 1
Total Bytes Read = 76

Config file was read! IP Initialization completed...
MAX CPE per CM is being set to 32
Time Of Day completed...
DefaultSnmpAgentClass::SystemTimeChangeEvent for SB5102 CM Agent w/ BRCM Factory Support
Sending a REG-REQ to the CMTS...
Logging event: Retrieved TFTP Config ,.iyewrkldJKDHSUBsgv SUCCESS
Logging event: Retrieved Time....... SUCCESS
Received a REG-RSP message from the CMTS...
0x0001f66c [CmDocsisCtlThread] BcmCmDocsisCtlThread::RegRspMsgEvent: (CmDocsisCtlThread) We registered with a DOCSIS 1.0 config file!
Adding DOCSIS 1.0 CoS Settings for SID 0x4c7

Class Of Service Settings:
SID = 0x4c7
Max Us Burst = 1600 bytes
Max Us Rate = 542000 bits per second
Max Bucket size = 24288 bits
Bits In Bucket = 24288
Last Bucket Update Time = 129615 ms
Last Bucket Flush Time = 129615 ms
Packet Delay Time = 0 ms

Global CONCAT has been enabled for all upstream queues.
The CONCAT threshold is set to 2 packets (128 packets max).
Fragmentation is ENABLED in DOCSIS 1.0 mode!
Registration complete!
Process CVC
0x0001f680 [CmDocsisCtlThread] CmSecureDownload:TonguerocessConfigFileManufAndCosignerCvcs: (Secure Software Download) WARNING - No CVC included in config file; software upgrade can't be performed!
0x0001f680 [CmDocsisCtlThread] BcmCmDocsisCtlThread:TonguerocessCVC: (CmDocsisCtlThread) ERROR - Config file does not include a valid CVC!
DOCSIS CoS/QoS rate shaping enable is now 1
CmSnmpAgent::CmOperationalEvent for SB5102 CM Agent w/ BRCM Factory Support
CmSnmpAgent operating in 1.0 mode, including docsBpi, excluding docsQos
+++ No DH kickstart profiles or snmpCommunityTable entries installed.
We will operate in NMACCESS mode.
SB5102 CM Agent w/ BRCM Factory Support setting V1/V2 view to docsisNmAccessView
SB5102 CM Agent w/ BRCM Factory Support enabling management.
SB5102 CM Agent w/ BRCM Factory Support sending deferred traps...
Done w/ deferred traps.
SB5102 CPE Agent w/ BRCM Factory Support setting V1/V2 view to docsisNmAccessView
0x0001f68a [CmDocsisCtlThread] BcmCmDocsisCtlThread::TestAndLaunchBpkm: (CmDocsisCtlThread) BPKM disabled via provisioned config file setting.
Enabling network access for all CPE ports.

mot_scanList: Writing to Flash!
NonVolDeviceDriver::NonVolDriverWrite: WARNING - Current segment size < buffer size! Increasing the segment size!
0x0001f900 [CmDocsisCtlThread] BcmDocsisCmHalIf::ConfigOperational: (DOCSIS CableModem HalIf) Running IGMP in DOCSIS 1.0 mode!
BcmCmDocsisStatusEventCodes::kCmIsOperational
Suspending SNMP Thread
0x0001f90a [CmDocsisCtlThread] BcmVendorCmApplication::StopDhcpServer: (VendorExtension CmApp) Shutting down DHCP Server...
0x0001f90a [CmDocsisCtlThread] BcmStandbySwitchThread::CmIsOperational: (Motorola Standby Switch Thread) Simulating a press of the standby switch to get the state configured properly.
0x0001f914 [IGMP Thread] BcmIgmpThread::Starting Igmp Thread...: (IGMP Thread)
0x0001f914 [Motorola Standby Switch Thread] BcmStandbySwitchThread::ThreadMain: (Motorola Standby Switch Thread) Standby switch was pressed!
0x0001f914 [Motorola Standby Switch Thread] BcmStandbySwitchThread:TonguerocessSwitchEvent: (Motorola Standby Switch Thread) Standby switch disabled in nonvol; ignoring event.
SB5102 CM Event Log w/ BRCM Factory Support sending deferred async messages...
Sending syslog message from IF 1 to 192.168.100.10:
<134> CABLEMODEM [Motorola Corporation]: <2307948724> Acquired Downstream (331000000 Hz)........ SUCCESS
Sending syslog message from IF 1 to 192.168.100.10:
<130> CABLEMODEM [DOCSIS]: <82000200> No Ranging Response received - T3 time-out (US 1)
Sending syslog message from IF 1 to 192.168.100.10:
<130> CABLEMODEM [DOCSIS]: <82000200> No Ranging Response received - T3 time-out (US 1)
Sending syslog message from IF 1 to 192.168.100.10:
<134> CABLEMODEM [Motorola Corporation]: <2307948624> Acquired Upstream .......... SUCCESS
Sending syslog message from IF 1 to 192.168.100.10:
<130> CABLEMODEM [DOCSIS]: <68000300> DHCP WARNING - Non-critical field invalid in response.
Sending syslog message from IF 1 to 192.168.100.10:
<134> CABLEMODEM [Motorola Corporation]: <2291949724> Retrieved DHCP .......... SUCCESS
Sending syslog message from IF 1 to 192.168.100.10:
<134> CABLEMODEM [Motorola Corporation]: <2291949524> Retrieved TFTP Config ,.iyewrkldJKDHSUBsgv SUCCESS
Sending syslog message from IF 1 to 192.168.100.10:
<134> CABLEMODEM [Motorola Corporation]: <2291949324> Retrieved Time....... SUCCESS
Done w/ deferred msgs
Logging event: Registration Completed
Sending syslog message from IF 1 to 192.168.100.10:
<134> CABLEMODEM [Motorola Corporation]: <2296948624> Registration Completed

CM>

can anyone shed anylight on what security is enabled iff possible??/
big thanks

RE: 5101e probs - haroldstein - 24-10-2012

(14-10-2012, 07:38 PM)shocky Wrote: thanks,the only trouble i have is that my subbed modem is a vmdg480 not 5101e,i have made backups from previous modems ive played with but none of them were online.iv only had a 280 then got upgraded to a crappy 480 so what are my options??
and thanks again

you could use a usbjtagnt along with a Test Clip.
I would not recommend soldering since this is a sub unit.
Unless you are an expert.

RE: 5101e probs - drewmerc - 25-10-2012

(24-10-2012, 10:18 PM)shocky Wrote: hi guys,managed to get online with 5101e using 76byte config
here is my haxo error log:

big thanks

stb config only to be used for downloading the tv guide


RE: 5101e probs - kornwood - 25-10-2012

Shocky you are in 1.0 security from what I could tell from the config and no CVC enjoy it

RE: 5101e probs - ABMJR - 25-10-2012

0x0001f900 [CmDocsisCtlThread] BcmDocsisCmHalIf::ConfigOperational: (DOCSIS CableModem HalIf) Running IGMP in DOCSIS 1.0 mode!
BcmCmDocsisStatusEventCodes::kCmIsOperational

RE: 5101e probs - southernyankey1970 - 25-10-2012

(25-10-2012, 02:27 AM)kornwood Wrote: Shocky you are in 1.0 security from what I could tell from the config and no CVC enjoy it

EEEEEEWWWWWWW!

Dial up!

RE: 5101e probs - shocky - 25-10-2012

thanks for the replies guys,and exactly,crappy dialup,anything i can do to correct this?
my sub is a 480 and i dont no anyone who as a subbed 5101e,all our area as gone to 480s and i do get the cvc error when i put a 1.1 mac in that starts 00:14:e8. i get it to go ip complete then a second later it starts rescanning the frequency and then groes through the same loop.
i have been reading up on ambjr and southernyankey1970s post bout this and some makes sense but lots dont. wish there was a "dummies guide to...." thought i was pretty ok with these but think i have been beaten,guts me to think how much i pay for 60mb and only get 20 most of the time.
theresgoto be something im missin