Login

shadowhacker27 · (This post was last modified: 20-03-2013, 11:16 PM by shadowhacker27.)

Hey guys,

My Sb5101 boxes have been acting up lately. I have two of them and they keep rebooting when they get to the online light after I reconnect the power. Sometimes it stay blinking on the online light, sometimes it will soft reboot itself (starting from receive, Power light doesn't turn off).
They were both working fine until I disconnected them from the power source in both my houses. They have different HFC MACs and I have tried a couple of MACs with no positive results.

Under the Logs, I see

-Registration Failure, re-scanning downtream
-M572.0 Neg or Bad Reg Rsp - Reinitialize MAC
-I402.0 TLV-11 Illegal set operation failed
among others, but these are the only ones that don't say SUCCESS

Any idea what's going on?

ABMJR · 20-03-2013, 11:34 PM

Illegal set op says it all..Post a TELNET log. If you dont know how, then search for it here or on Google and then submit it

shadowhacker27 · (This post was last modified: 20-03-2013, 11:53 PM by shadowhacker27.)

(20-03-2013, 11:34 PM)ABMJR Wrote: Illegal set op says it all..Post a TELNET log.

Thanks for the reply. Which part of the log should I insert? The part where the TLV-11 illegal set op log starts or the huge document that putty just created?

I ask because I don't want to mess it up for the people who are helping me.

southernyankey1970 · 20-03-2013, 11:56 PM

The entire log after you edit any and all identifying ip #'s.

you're spoofing anther modem or you are forcing a cfg most likely.

ABMJR · 21-03-2013, 12:15 AM

What ISP is this?

TLV could point to a wrong CVC value...

If its COMCAST, then, well, what else.

shadowhacker27 · (This post was last modified: 21-03-2013, 12:29 AM by shadowhacker27.)

(21-03-2013, 12:15 AM)ABMJR Wrote: What ISP is this?

TWC NYC

---

THIS IS THE LOG
-
-
-
-

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2013.03.20 18:46:38 =~=~=~=~=~=~=~=~=~=~=~=
Haxorware integrated telnet daemon

Username: root
Password: *****
Welcome.

CM>
CM> run
CM>
CM> run_app

Running the system...

Beginning Cable Modem operation...

0x00019ed8 [Scan Downstream Thread] BcmVendorCmDownstreamScanThread::ThreadMain: (Scan Downstream Thread) Scanning for a Downstream Channel...

mot_scanList: Setting override freq @ 0
Favorite[0].freq = 351000000
Attempting Downstream FEC lock @ freq= 351000000 Hz, QAM64/256

CM> Found energy at frequency 351000000Hz! Publishing event kEventEnergyDetected...
0x0001a130 [CmDocsisCtlThread] BcmCmDocsisCtlThread::StartUsInit: (CmDocsisCtlThread) Locked on the downstream. Waiting for UCDs...

******************************************
DOWNSTREAM STATUS
******************************************
Tuner Frequency = 351000000 Hz
Carrier Offset = 1 Hz
Symbol rate = 5360537 sym/sec
SNR = 36 dB
QAM Mode = QAM256
Tuner AGC = 0xfff00000
IF AGC = 0x134ff26e
Power Level = 9 dB
QAM = LOCKED
FEC = LOCKED
******************************************

CM> Calculating maximum number of IP filters:
Each IP filter consumes 1852 bytes of RAM.
Current free RAM is 241540 bytes.
Max heap reserved for IP filters (25%) = 60385
We can support 32 IP filters.
Calculating maximum number of LLC filters:
Each LLC filter consumes 728 bytes of RAM.
Current free RAM is 241540 bytes.
Max heap reserved for LLC filters (25%) = 60385
We can support 82 LLC filters.
A target Us Chan Id was specified (4), but doesn't exist OR can't be used! Selecting the first available Us Channel Id...
Selecting UCD for Us Channel 6

0x0001ab6c [CmDocsisCtlThread] BcmCmDocsisCtlThread::TestAndLaunchDsTimeSync: (CmDocsisCtlThread) starting ds time sync acquisition...
0x0001ae00 [CmDocsisCtlThread] BcmCmDocsisCtlThread::SyncDsSyncOk: (CmDocsisCtlThread) downstream time sync acquired...
0x0001ae00 [CmDocsisCtlThread] BcmCmDocsisCtlThread: Big Grin

sSyncOkResumeUsInit: (CmDocsisCtlThread) pre-REG upstream target case...starting initial ranging.
Beginning initial ranging...
Using stored initial upstream power = 42.0 dBmV
0x0001ae00 [CmDocsisCtlThread] BcmCmDocsisCtlThread::SyncDsSyncOk: (CmDocsisCtlThread) rx unexpected kDsSyncOk indication...
Logging event: Acquired Downstream (351000000 Hz)........ SUCCESS

CM>
RNG-RSP Adj: tim=1217 power=-24 freq=0 Stat=Continue

CM>
RNG-RSP Adj: tim=1 power=-11 freq=0 Stat=Continue

CM>
RNG-RSP Adj: tim=0 power=0 freq=0 Stat=Success

******************************************
UPSTREAM STATUS
******************************************
Upstream Status = UP
Upstream Channel = 6
Upstream Frequency = 23800000 Hz
Upstream Power = 34 dBmV
Ranging SID = 0x1945
Upstream Symbol Rate = 5120000 sym/sec
******************************************

Starting IP Initialization with DHCP...
DHCPc: Waiting 2 seconds before sending Discover; client id htype=1, value=##.###.##.##
Logging event: Acquired Upstream .......... SUCCESS

CM> DHCPc: Sending Discover packet; client id htype=1, value=##.###.##.##
DHCPc: Received an Offer from DHCP server ##.###.##.## (##.###.##.##); lease client id htype=1, value=##.###.##.##

CM> DHCPc: Timed out waiting for offers for lease with client id htype=1, value=##.###.##.##
DHCPc: Sending Request packet; client id htype=1, value=##.###.##.##
DHCPc: Received an Ack from DHCP server ##.###.##.## (##.###.##.##); lease client id htype=1, value=##.###.##.##
Current IP address is default 0.0.0.0.
0x0001d524 [DHCP Client Thread] BcmEcosIpHalIf::ConfigureLeaseImpl: (IP Stack1 HalIf)
Configuring IP stack 1:
IP Address = ##.###.##.##(primary IP address)
Subnet Mask = 255.255.248.0
Router = ##.###.##.##
IsPrimaryInterface = 1

Logging event: DHCP WARNING - Non-critical field invalid in response.
ARPing for default GW IP = ##.###.##.##
MAC = #.#.#.#.#.#.##.#.#
DHCP completed successfully!

DHCP Settings:
Client Id = htype=1, value=##.###.##.##
State = Renewing (5)
Static Lease = 0
AutoConfig Mode = IP, Subnet and Router
XID = 0x2ca8b4a2
Number of Tries = 0
Max Discover Tries = 6
Max Request Tries = 6
DHCP server MAC addr = #.#.#.#.#.#.##.#.#
Ignore NAKs = 0
My offered IP address = ##.###.##.## (primary IP address)
(1) Subnet Mask = 255.255.248.0
(3) Router IP address = ##.###.##.##
(54) DHCP Server IP address = ##.###.##.##
(82) Relay Agent IP address = ##.###.##.##
TFTP Server IP address = ##.###.##.##
CM Configuration file = '?BBgdiTUACA1VVEgKKb46@Cim+OiXkdib1Z_cZmzQ7zZXS+wsOgTYq'
(2) UTC Time Offset = -18000 seconds
(4) Time Server IP address = ##.###.##.##
(6) Domain Name Server = ##.###.##.## ; ##.###.##.##
(7) Log Server IP address = ##.###.##.##
(51) Lease time = 1168711 seconds
(58) T1 (renew) = 584355 seconds
(59) T2 (rebind) = 1022622 seconds
Lease is infinite = 0

SB5102 CM Agent w/ BRCM Factory Support IpStackEvent: Ip=##.###.##.##, Subnet=255.255.248.0, Gateway=##.###.##.##
CmSnmpAgent::IpAddressAcquiredEvent for SB5102 CM Agent w/ BRCM Factory Support
IP addr = ##.###.##.##
Starting Time Of Day...
0x0001d5ce [CmDocsisIpThread] BcmDocsisTimeOfDayThread::SetTodServerIpAddress: (Time Of Day Thread) ToD servers: ##.###.##.##
Connecting to ToD server ##.###.##.##
Sending UDP ToD request to server...
SNMP Agent Binding to ##.###.##.##
Logging event: Retrieved DHCP .......... SUCCESS

CM> UTC returned by ToD server 3572808516; UTC offset -18000
Current system time -> Wed Mar 20 17:48:36 2013

System start time -> Wed Mar 20 17:46:36 2013

Starting Tftp of configuration file...
Opening file '?BBgdiTUACA1VVEgKKb46@Cim+OiXkdib1Z_cZmzQ7zZXS+wsOgTYq' on ##.###.##.##for reading...
tftp-enforce bypass is DISABLED
Storing received cfg of size 3387 to memory
Tftp read < 512 bytes, we have reached end of file.
Tftp transfer complete!
TFTP Settings:
Stack Interface = 1
Server Ip Address = ##.###.##.##
Server Port Number = 60###
Total Blocks Read = 7
Total Bytes Read = 3387

Config file was read! IP Initialization completed...
MAX CPE per CM is being set to 32
TLV-11[1]: #.#.#.#.#.#.##.#.#.1.2.16 -> 255.255.255.255
TLV-11[2]: #.#.#.#.#.#.##.#.#.1.3.16 -> 255.255.255.255
TLV-11[3]: #.#.#.#.#.#.##.#.#.1.4.16 -> RR_nycmny_nyc_m0d3m5
TLV-11[4]: #.#.#.#.#.#.##.#.#.1.5.16 -> 3 (i32)
TLV-11[5]: #.#.#.#.#.#.##.#.#.1.6.16 -> HEX:40 00
TLV-11[6]: #.#.#.#.#.#.##.#.#.1.7.16 -> 4 (i32)
TLV-11[7]: #.#.#.#.#.#.##.#.#.1.2.18 -> 255.255.255.255
TLV-11[8]: #.#.#.#.#.#.##.#.#.1.3.18 -> 255.255.255.255
TLV-11[9]: #.#.#.#.#.#.##.#.#.1.4.18 -> yZaK4E8l
TLV-11[10]: #.#.#.#.#.#.##.#.#.1.5.18 -> 2 (i32)
TLV-11[11]: #.#.#.#.#.#.##.#.#.1.6.18 -> HEX:40 00
TLV-11[12]: #.#.#.#.#.#.##.#.#.1.7.18 -> 4 (i32)
TLV-11[13]: #.#.#.#.#.#.##.#.#.1.2.19 -> 255.255.255.255
TLV-11[14]: #.#.#.#.#.#.##.#.#.1.3.19 -> 255.255.255.255
TLV-11[15]: #.#.#.#.#.#.##.#.#.1.4.19 -> Teo6D9iS2MPb6cb
TLV-11[16]: #.#.#.#.#.#.##.#.#.1.5.19 -> 2 (i32)
TLV-11[17]: #.#.#.#.#.#.##.#.#.1.6.19 -> HEX:40 00
TLV-11[18]: #.#.#.#.#.#.##.#.#.1.7.19 -> 4 (i32)
TLV-11[19]: #.#.#.#.#.#.##.#.#.1.2.20 -> 255.255.255.255
TLV-11[20]: #.#.#.#.#.#.##.#.#.1.3.20 -> 255.255.255.255
TLV-11[21]: #.#.#.#.#.#.##.#.#.1.4.20 -> mwz0UhmeyYDO/7C
TLV-11[22]: #.#.#.#.#.#.##.#.#.1.5.20 -> 3 (i32)
TLV-11[23]: #.#.#.#.#.#.##.#.#.1.6.20 -> HEX:40 00
TLV-11[24]: #.#.#.#.#.#.##.#.#.1.7.20 -> 4 (i32)
TLV-11[25]: #.#.#.#.#.#.##.#.#.1.0 -> 1 (i32)
TLV-11[26]: #.#.#.#.#.#.##.#.#.2.1.2.20 -> 4 (i32)
TLV-11[27]: #.#.#.#.#.#.##.#.#.2.1.3.20 -> 0 (i32)
TLV-11[28]: #.#.#.#.#.#.##.#.#.2.1.4.20 -> 1 (i32)
TLV-11[29]: #.#.#.#.#.#.##.#.#.2.1.5.20 -> 2048 (i32)
TLV-11[30]: #.#.#.#.#.#.##.#.#.2.1.2.22 -> 4 (i32)
TLV-11[31]: #.#.#.#.#.#.##.#.#.2.1.3.22 -> 0 (i32)
TLV-11[32]: #.#.#.#.#.#.##.#.#.2.1.4.22 -> 1 (i32)
TLV-11[33]: #.#.#.#.#.#.##.#.#.2.1.5.22 -> 2054 (i32)
TLV-11[34]: #.#.#.#.#.#.##.#.#.3.0 -> 1 (i32)
TLV-11[35]: #.#.#.#.#.#.##.#.#.4.1.2.10 -> 4 (i32)
TLV-11[36]: #.#.#.#.#.#.##.#.#.4.1.3.10 -> 2 (i32)
TLV-11[37]: #.#.#.#.#.#.##.#.#.4.1.4.10 -> 0 (i32)
TLV-11[38]: #.#.#.#.#.#.##.#.#.4.1.5.10 -> 3 (i32)
TLV-11[39]: #.#.#.#.#.#.##.#.#.4.1.9.10 -> ##.###.##.##
TLV-11[40]: #.#.#.#.#.#.##.#.#.4.1.10.10 -> 255.255.255.248
TLV-11[41]: #.#.#.#.#.#.##.#.#.4.1.2.11 -> 4 (i32)
TLV-11[42]: #.#.#.#.#.#.##.#.#.4.1.3.11 -> 2 (i32)
TLV-11[43]: #.#.#.#.#.#.##.#.#.4.1.4.11 -> 0 (i32)
TLV-11[44]: #.#.#.#.#.#.##.#.#.4.1.5.11 -> 3 (i32)
TLV-11[45]: #.#.#.#.#.#.##.#.#.4.1.7.11 -> ##.###.##.##
TLV-11[46]: #.#.#.#.#.#.##.#.#.4.1.8.11 -> 255.255.255.248
TLV-11[47]: #.#.#.#.#.#.##.#.#.4.1.2.20 -> 4 (i32)
TLV-11[48]: #.#.#.#.#.#.##.#.#.4.1.4.20 -> 2 (i32)
TLV-11[49]: #.#.#.#.#.#.##.#.#.4.1.5.20 -> 1 (i32)
TLV-11[50]: #.#.#.#.#.#.##.#.#.4.1.11.20 -> 17 (i32)
TLV-11[51]: #.#.#.#.#.#.##.#.#.4.1.12.20 -> 68 (i32)
TLV-11[52]: #.#.#.#.#.#.##.#.#.4.1.13.20 -> 68 (i32)
TLV-11[53]: #.#.#.#.#.#.##.#.#.4.1.14.20 -> 67 (i32)
TLV-11[54]: #.#.#.#.#.#.##.#.#.4.1.15.20 -> 67 (i32)
TLV-11[55]: #.#.#.#.#.#.##.#.#.4.1.2.21 -> 4 (i32)
TLV-11[56]: #.#.#.#.#.#.##.#.#.4.1.3.21 -> 2 (i32)
TLV-11[57]: #.#.#.#.#.#.##.#.#.4.1.4.21 -> 0 (i32)
TLV-11[58]: #.#.#.#.#.#.##.#.#.4.1.5.21 -> 3 (i32)
TLV-11[59]: #.#.#.#.#.#.##.#.#.4.1.11.21 -> 17 (i32)
TLV-11[60]: #.#.#.#.#.#.##.#.#.4.1.12.21 -> 67 (i32)
TLV-11[61]: #.#.#.#.#.#.##.#.#.4.1.13.21 -> 68 (i32)
TLV-11[62]: #.#.#.#.#.#.##.#.#.4.1.14.21 -> 67 (i32)
TLV-11[63]: #.#.#.#.#.#.##.#.#.4.1.15.21 -> 68 (i32)
TLV-11[64]: #.#.#.#.#.#.##.#.#.4.1.2.30 -> 4 (i32)
TLV-11[65]: #.#.#.#.#.#.##.#.#.4.1.3.30 -> 2 (i32)
TLV-11[66]: #.#.#.#.#.#.##.#.#.4.1.4.30 -> 0 (i32)
TLV-11[67]: #.#.#.#.#.#.##.#.#.4.1.5.30 -> 3 (i32)
TLV-11[68]: #.#.#.#.#.#.##.#.#.4.1.9.30 -> ##.###.##.##
TLV-11[69]: #.#.#.#.#.#.##.#.#.4.1.10.30 -> 255.255.255.255
TLV-11[70]: #.#.#.#.#.#.##.#.#.4.1.2.31 -> 4 (i32)
TLV-11[71]: #.#.#.#.#.#.##.#.#.4.1.3.31 -> 2 (i32)
TLV-11[72]: #.#.#.#.#.#.##.#.#.4.1.4.31 -> 0 (i32)
TLV-11[73]: #.#.#.#.#.#.##.#.#.4.1.5.31 -> 3 (i32)
TLV-11[74]: #.#.#.#.#.#.##.#.#.4.1.7.31 -> ##.###.##.##
TLV-11[75]: #.#.#.#.#.#.##.#.#.4.1.8.31 -> 255.255.255.255
Time Of Day completed...
DefaultSnmpAgentClass::SystemTimeChangeEvent for SB5102 CM Agent w/ BRCM Factory Support
Logging event: Retrieved TFTP Config ?BBgdiTUACA1VVEgKKb46@Cim+OiXkdib1Z_cZmzQ7zZXS+wsOgTYq SUCCESS
Logging event: Retrieved Time....... SUCCESS
SB5102 CM Agent w/ BRCM Factory Support processing TLV-11's
SNMP packet sent to ##.###.##.##
Insufficient heap to handle SNMP packet - TOO_BIG.
(PDU = 89256, heap = 88280)
TLV-11 failure: error status=1, error index=0
Invalid TLV-11's: 1 wrong values, 0 duplicate sets.
SNMP Error'd but Haxorware doesn't care AT ALL!
Onwards mateys!

Sending a REG-REQ to the CMTS...
Logging event: TLV-11 - Illegal Set operation failed
Received a REG-RSP message from the CMTS...
0x0001dace [CmDocsisCtlThread] BcmCmDocsisCtlThread::RegRspMsgEvent: (CmDocsisCtlThread) ERROR -
REG-RSP response code NOT ok! rsp code = 8 (kRejRequiredParamNotPresent)
0x0001dace [CmDocsisCtlThread] BcmCmDocsisCtlThread::SyncRestartErrorEvent: (CmDocsisCtlThread) reason: 17 (kNegOrBadRegRsp)
Logging event: Registration failure, re-scanning downstream
Logging event: Neg Or Bad Reg Rsp - Reinitialize MAC...
Deleting DOCSIS 1.0 CoS Settings for SID 0x1945
0x0001db96 [CmDocsisCtlThread] BcmDocsisCmHalIf: Big Grin

eleteAllServiceFlows: (DOCSIS CableModem HalIf) Deleting all Upstream and Downstream Service Flows, along with associated Classifiers and PHS rules...
Stopping DHCP/ToD/TFTP (client requested)...
The ToD thread was stopped.
DHCPc: Releasing the lease with client id htype=1, value=
DHCPc: Sending Release packet; client id htype=1, value=
0x0001dba0 [DHCP Client Thread] BcmDhcpClientIf::SendDhcpPacket: (DHCP ClientIf for IP Stack1) WARNING - Failed to send packet!
0x0001dba0 [DHCP Client Thread] BcmDhcpClientIf::SendRelease: (DHCP ClientIf for IP Stack1) WARNING - Failed to create/send Release packet! Oh, well, no biggie...
0x0001dba0 [DHCP Client Thread] BcmEcosIpHalIf::RemoveLeaseImpl: (IP Stack1 HalIf) Removing lease IP address ##.###.##.## from IP stack 1
0x0001dbaa [DHCP Client Thread] BcmEcosIpHalIf::RemoveLeaseImpl: (IP Stack1 HalIf) This is the last address on the stack; shutting the stack down:numberOfAddresses=1
0x0001dbaa [DHCP Client Thread] BcmEcosIpHalIf::ShutdownIpStackImpl: (IP Stack1 HalIf)
Shutting down IP stack 1
SB5102 CM Agent w/ BRCM Factory Support IpStackEvent: Ip=0.0.0.0, Subnet=0.0.0.0, Gateway=0.0.0.0
DefaultSnmpAgentClass::RestartPendingEvent for SB5102 CM Agent w/ BRCM Factory Support
CmSnmpAgent::ResetMibDefaults not restting due to factory mode
SB5102 CM Agent w/ BRCM Factory Support sending deferred traps...
Done w/ deferred traps.
SB5102 CM Event Log w/ BRCM Factory Support sending deferred async messages...
Sending syslog message from IF 1 to ##.###.##.##
<134> CABLEMODEM [Motorola Corporation]: <2307948724> Acquired Downstream (351000000 Hz)........ SUCCESS
BcmTestAndComputeLocalNetIf(): Error! BcmNetIfNumToIpAddr( 1 ) = 0
Sending syslog message from IF 1 to ##.###.##.##
<134> CABLEMODEM [Motorola Corporation]: <2307948624> Acquired Upstream .......... SUCCESS
BcmTestAndComputeLocalNetIf(): Error! BcmNetIfNumToIpAddr( 1 ) = 0
Sending syslog message from IF 1 to ##.###.##.##
<130> CABLEMODEM [DOCSIS]: <68000300> DHCP WARNING - Non-critical field invalid in response.
BcmTestAndComputeLocalNetIf(): Error! BcmNetIfNumToIpAddr( 1 ) = 0
Sending syslog message from IF 1 to ##.###.##.##
<134> CABLEMODEM [Motorola Corporation]: <2291949724> Retrieved DHCP .......... SUCCESS
BcmTestAndComputeLocalNetIf(): Error! BcmNetIfNumToIpAddr( 1 ) = 0
Sending syslog message from IF 1 to ##.###.##.##
<134> CABLEMODEM [Motorola Corporation]: <2291949524> Retrieved TFTP Config ?BBgdiTUACA1VVEgKKb46@Cim+OiXkdib1Z_cZmzQ7zZXS+wsOgTYq SUCCESS
BcmTestAndComputeLocalNetIf(): Error! BcmNetIfNumToIpAddr( 1 ) = 0
Sending syslog message from IF 1 to ##.###.##.##
<134> CABLEMODEM [Motorola Corporation]: <2291949324> Retrieved Time....... SUCCESS
BcmTestAndComputeLocalNetIf(): Error! BcmNetIfNumToIpAddr( 1 ) = 0
Sending syslog message from IF 1 to ##.###.##.##
<130> CABLEMODEM [DOCSIS]: <73040200> TLV-11 - Illegal Set operation failed
BcmTestAndComputeLocalNetIf(): Error! BcmNetIfNumToIpAddr( 1 ) = 0
Sending syslog message from IF 1 to ##.###.##.##
<134> CABLEMODEM [Motorola Corporation]: <2436694040> Registration failure, re-scanning downstream
BcmTestAndComputeLocalNetIf(): Error! BcmNetIfNumToIpAddr( 1 ) = 0
Sending syslog message from IF 1 to ##.###.##.##:
<133> CABLEMODEM [Motorola Corporation]: <2300955824> Neg Or Bad Reg Rsp - Reinitialize MAC...
BcmTestAndComputeLocalNetIf(): Error! BcmNetIfNumToIpAddr( 1 ) = 0
Done w/ deferred msgs
SB5102 CM Agent w/ BRCM Factory Support defering traps.
SB5102 CM Agent w/ BRCM Factory Support setting V1/V2 view to unrestricted
SB5102 CPE Agent w/ BRCM Factory Support setting V1/V2 view to docsisNmAccessView
Non-Vol Settings successfully written to the device.
0x0001dccc [CmDocsisCtlThread] BcmCmDocsisCtlThread::ResetRngState: (CmDocsisCtlThread)

@@@@@ In ResetRngState, fRemainingInitRngPowerSteps 17
0x0001dccc [Scan Downstream Thread] BcmVendorCmDownstreamScanThread::ThreadMain: (Scan Downstream Thread) Downstream Channel scan stopped!
0x0001dce0 [Scan Downstream Thread] BcmVendorCmDownstreamScanThread::ThreadMain: (Scan Downstream Thread) Scanning for a Downstream Channel...

mot_scanList: Setting override freq @ 351000000
Scanning DS Channel at 351000000 Hz... (Initial target freq)
Non-Vol Settings successfully written to the device.

CM> Found energy at frequency 351000000Hz! Publishing event kEventEnergyDetected...
0x0001df2e [CmDocsisCtlThread] BcmCmDocsisCtlThread::StartUsInit: (CmDocsisCtlThread) Locked on the downstream. Waiting for UCDs...

******************************************
DOWNSTREAM STATUS
******************************************
Tuner Frequency = 351000000 Hz
Carrier Offset = 1 Hz
Symbol rate = 5360537 sym/sec
SNR = 35 dB
QAM Mode = QAM256
Tuner AGC = 0xfff00000
IF AGC = 0x13639b85
Power Level = 8 dB
QAM = LOCKED
FEC = LOCKED
******************************************

CM> A target Us Chan Id was specified (4), but doesn't exist OR can't be used! Selecting the first available Us Channel Id...
Selecting UCD for Us Channel 6

0x0001e9e2 [CmDocsisCtlThread] BcmCmDocsisCtlThread::TestAndLaunchDsTimeSync: (CmDocsisCtlThread) starting ds time sync acquisition...
0x0001ec80 [CmDocsisCtlThread] BcmCmDocsisCtlThread::SyncDsSyncOk: (CmDocsisCtlThread) downstream time sync acquired...
0x0001ec80 [CmDocsisCtlThread] BcmCmDocsisCtlThread: Big Grin

sSyncOkResumeUsInit: (CmDocsisCtlThread) pre-REG upstream target case...starting initial ranging.
Beginning initial ranging...
Using stored initial upstream power = 42.0 dBmV
0x0001ec80 [CmDocsisCtlThread] BcmCmDocsisCtlThread::SyncDsSyncOk: (CmDocsisCtlThread) rx unexpected kDsSyncOk indication...
Logging event: Acquired Downstream (351000000 Hz)........ SUCCESS

RNG-RSP Adj: tim=1227 power=-24 freq=0 Stat=Continue

CM>
RNG-RSP Adj: tim=0 power=-10 freq=0 Stat=Continue

CM>
RNG-RSP Adj: tim=0 power=0 freq=-258 Stat=Success

******************************************
UPSTREAM STATUS
******************************************
Upstream Status = UP
Upstream Channel = 6
Upstream Frequency = 23800000 Hz
Upstream Power = 34 dBmV
Ranging SID = 0x316
Upstream Symbol Rate = 5120000 sym/sec
******************************************

Starting IP Initialization with DHCP...
DHCPc: Waiting 2 seconds before sending Discover; client id htype=1, value=##.###.##.##
Logging event: Acquired Upstream .......... SUCCESS

CM> DHCPc: Sending Discover packet; client id htype=1, value=##.###.##.##
DHCPc: Received an Offer from DHCP server ##.###.##.## (##.###.##.##); lease client id htype=1, value=##.###.##.##

CM> DHCPc: Timed out waiting for offers for lease with client id htype=1, value=##.###.##.##
DHCPc: Sending Request packet; client id htype=1, value=##.###.##.##
DHCPc: Received an Ack from DHCP server ##.###.##.## (##.###.##.##); lease client id htype=1, value=##.###.##.##
Current IP address is default 0.0.0.0.
0x000216a6 [DHCP Client Thread] BcmEcosIpHalIf::ConfigureLeaseImpl: (IP Stack1 HalIf)
Configuring IP stack 1:
IP Address = ##.###.##.## (primary IP address)
Subnet Mask = ##.###.##.##
Router = ##.###.##.##
IsPrimaryInterface = 1

Logging event: DHCP WARNING - Non-critical field invalid in response.
ARPing for default GW IP = ##.###.##.##
MAC = ##.###.##.##
DHCP completed successfully!

DHCP Settings:
Client Id = htype=1, value=##.###.##.##
State = Renewing (5)
Static Lease = 0
AutoConfig Mode = IP, Subnet and Router
XID = 0x2ca8b4a4
Number of Tries = 0
Max Discover Tries = 6
Max Request Tries = 6
DHCP server MAC addr = #.#.#.#.#.#.##.#.#
Ignore NAKs = 0
My offered IP address = ##.###.##.## (primary IP address)
(1) Subnet Mask = ##.###.##.##
(3) Router IP address = ##.###.##.##
(54) DHCP Server IP address = ##.###.##.##
(82) Relay Agent IP address = ##.###.##.##
TFTP Server IP address = ##.###.##.##
CM Configuration file = '?BBgdiTUACA1VVEgKKb46@Cim+OrrDJcpazFbVap0Sa8hiQtdekR_o'
(2) UTC Time Offset = -18000 seconds
(4) Time Server IP address = ##.###.##.##
(6) Domain Name Server = ##.###.##.##; ##.###.##.##
(7) Log Server IP address = ##.###.##.##
(51) Lease time = 1168694 seconds
(58) T1 (renew) = 584347 seconds
(59) T2 (rebind) = 1022607 seconds
Lease is infinite = 0

SB5102 CM Agent w/ BRCM Factory Support IpStackEvent: Ip=##.###.##.##, Subnet=##.###.##.##, Gateway=##.###.##.##
CmSnmpAgent::IpAddressAcquiredEvent for SB5102 CM Agent w/ BRCM Factory Support
IP addr = ##.###.##.##
Starting Time Of Day...
0x0002176e [CmDocsisIpThread] BcmDocsisTimeOfDayThread::SetTodServerIpAddress: (Time Of Day Thread) ToD servers: ##.###.##.##
Connecting to ToD server ##.###.##.##
Sending UDP ToD request to server...
SNMP Agent Binding to ##.###.##.##
Logging event: Retrieved DHCP .......... SUCCESS

CM> UTC returned by ToD server 3572808533; UTC offset -18000
Current system time -> Wed Mar 20 17:48:53 2013

System start time -> Wed Mar 20 17:46:36 2013

Starting Tftp of configuration file...
Opening file '?BBgdiTUACA1VVEgKKb46@Cim+OrrDJcpazFbVap0Sa8hiQtdekR_o' on ##.###.##.## for reading...
tftp-enforce bypass is DISABLED

CM> Storing received cfg of size 3387 to memory
Tftp read < 512 bytes, we have reached end of file.
Tftp transfer complete!
TFTP Settings:
Stack Interface = 1
Server Ip Address = ##.###.##.##
Server Port Number = 61###
Total Blocks Read = 7
Total Bytes Read = 3387

Config file was read! IP Initialization completed...
MAX CPE per CM is being set to 32
TLV-11[1]: #.#.#.#.#.#.##.#.#.1.2.16 -> 255.255.255.255
TLV-11[2]: #.#.#.#.#.#.##.#.#.1.3.16 -> 255.255.255.255
TLV-11[3]: #.#.#.#.#.#.##.#.#.1.4.16 -> RR_nycmny_nyc_m0d3m5
TLV-11[4]: #.#.#.#.#.#.##.#.#.1.5.16 -> 3 (i32)
TLV-11[5]: #.#.#.#.#.#.##.#.#.1.6.16 -> HEX:40 00
TLV-11[6]: #.#.#.#.#.#.##.#.#.1.7.16 -> 4 (i32)
TLV-11[7]: #.#.#.#.#.#.##.#.#.1.2.18 -> 255.255.255.255
TLV-11[8]: #.#.#.#.#.#.##.#.#.1.3.18 -> 255.255.255.255
TLV-11[9]: #.#.#.#.#.#.##.#.#.1.4.18 -> yZaK4E8l
TLV-11[10]: #.#.#.#.#.#.##.#.#.1.5.18 -> 2 (i32)
TLV-11[11]: #.#.#.#.#.#.##.#.#.1.6.18 -> HEX:40 00
TLV-11[12]: #.#.#.#.#.#.##.#.#.1.7.18 -> 4 (i32)
TLV-11[13]: #.#.#.#.#.#.##.#.#.1.2.19 -> 255.255.255.255
TLV-11[14]: #.#.#.#.#.#.##.#.#.1.3.19 -> 255.255.255.255
TLV-11[15]: #.#.#.#.#.#.##.#.#.1.4.19 -> Teo6D9iS2MPb6cb
TLV-11[16]: #.#.#.#.#.#.##.#.#.1.5.19 -> 2 (i32)
TLV-11[17]: #.#.#.#.#.#.##.#.#.1.6.19 -> HEX:40 00
TLV-11[18]: #.#.#.#.#.#.##.#.#.1.7.19 -> 4 (i32)
TLV-11[19]: #.#.#.#.#.#.##.#.#.1.2.20 -> 255.255.255.255
TLV-11[20]: #.#.#.#.#.#.##.#.#.1.3.20 -> 255.255.255.255
TLV-11[21]: #.#.#.#.#.#.##.#.#.1.4.20 -> mwz0UhmeyYDO/7C
TLV-11[22]: #.#.#.#.#.#.##.#.#.1.5.20 -> 3 (i32)
TLV-11[23]: #.#.#.#.#.#.##.#.#.1.6.20 -> HEX:40 00
TLV-11[24]: #.#.#.#.#.#.##.#.#.1.7.20 -> 4 (i32)
TLV-11[25]: #.#.#.#.#.#.##.#.#.1.0 -> 1 (i32)
TLV-11[26]: #.#.#.#.#.#.##.#.#.2.1.2.20 -> 4 (i32)
TLV-11[27]: #.#.#.#.#.#.##.#.#.2.1.3.20 -> 0 (i32)
TLV-11[28]: #.#.#.#.#.#.##.#.#.2.1.4.20 -> 1 (i32)
TLV-11[29]: #.#.#.#.#.#.##.#.#.2.1.5.20 -> 2048 (i32)
TLV-11[30]: #.#.#.#.#.#.##.#.#.2.1.2.22 -> 4 (i32)
TLV-11[31]: #.#.#.#.#.#.##.#.#.2.1.3.22 -> 0 (i32)
TLV-11[32]: #.#.#.#.#.#.##.#.#.2.1.4.22 -> 1 (i32)
TLV-11[33]: #.#.#.#.#.#.##.#.#.2.1.5.22 -> 2054 (i32)
TLV-11[34]: #.#.#.#.#.#.##.#.#.3.0 -> 1 (i32)
TLV-11[35]: #.#.#.#.#.#.##.#.#.4.1.2.10 -> 4 (i32)
TLV-11[36]: #.#.#.#.#.#.##.#.#.4.1.3.10 -> 2 (i32)
TLV-11[37]: #.#.#.#.#.#.##.#.#.4.1.4.10 -> 0 (i32)
TLV-11[38]: #.#.#.#.#.#.##.#.#.4.1.5.10 -> 3 (i32)
TLV-11[39]: #.#.#.#.#.#.##.#.#.4.1.9.10 -> ##.###.##.##
TLV-11[40]: #.#.#.#.#.#.##.#.#.4.1.10.10 -> 255.255.255.248
TLV-11[41]: #.#.#.#.#.#.##.#.#.4.1.2.11 -> 4 (i32)
TLV-11[42]: #.#.#.#.#.#.##.#.#.4.1.3.11 -> 2 (i32)
TLV-11[43]: #.#.#.#.#.#.##.#.#.4.1.4.11 -> 0 (i32)
TLV-11[44]: #.#.#.#.#.#.##.#.#.4.1.5.11 -> 3 (i32)
TLV-11[45]: #.#.#.#.#.#.##.#.#.4.1.7.11 -> ##.###.##.##
TLV-11[46]: #.#.#.#.#.#.##.#.#.4.1.8.11 -> 255.255.255.248
TLV-11[47]: #.#.#.#.#.#.##.#.#.4.1.2.20 -> 4 (i32)
TLV-11[48]: #.#.#.#.#.#.##.#.#.4.1.4.20 -> 2 (i32)
TLV-11[49]: #.#.#.#.#.#.##.#.#.4.1.5.20 -> 1 (i32)
TLV-11[50]: #.#.#.#.#.#.##.#.#.4.1.11.20 -> 17 (i32)
TLV-11[51]: #.#.#.#.#.#.##.#.#.4.1.12.20 -> 68 (i32)
TLV-11[52]: #.#.#.#.#.#.##.#.#.4.1.13.20 -> 68 (i32)
TLV-11[53]: #.#.#.#.#.#.##.#.#.4.1.14.20 -> 67 (i32)
TLV-11[54]: #.#.#.#.#.#.##.#.#.4.1.15.20 -> 67 (i32)
TLV-11[55]: #.#.#.#.#.#.##.#.#.4.1.2.21 -> 4 (i32)
TLV-11[56]: #.#.#.#.#.#.##.#.#.4.1.3.21 -> 2 (i32)
TLV-11[57]: #.#.#.#.#.#.##.#.#.4.1.4.21 -> 0 (i32)
TLV-11[58]: #.#.#.#.#.#.##.#.#.4.1.5.21 -> 3 (i32)
TLV-11[59]: #.#.#.#.#.#.##.#.#.4.1.11.21 -> 17 (i32)
TLV-11[60]: #.#.#.#.#.#.##.#.#.4.1.12.21 -> 67 (i32)
TLV-11[61]: #.#.#.#.#.#.##.#.#.4.1.13.21 -> 68 (i32)
TLV-11[62]: #.#.#.#.#.#.##.#.#.4.1.14.21 -> 67 (i32)
TLV-11[63]: #.#.#.#.#.#.##.#.#.4.1.15.21 -> 68 (i32)
TLV-11[64]: #.#.#.#.#.#.##.#.#.4.1.2.30 -> 4 (i32)
TLV-11[65]: #.#.#.#.#.#.##.#.#.4.1.3.30 -> 2 (i32)
TLV-11[66]: #.#.#.#.#.#.##.#.#.4.1.4.30 -> 0 (i32)
TLV-11[67]: #.#.#.#.#.#.##.#.#.4.1.5.30 -> 3 (i32)
TLV-11[68]: #.#.#.#.#.#.##.#.#.4.1.9.30 -> ##.###.##.##
TLV-11[69]: #.#.#.#.#.#.##.#.#.4.1.10.30 -> 255.255.255.255
TLV-11[70]: #.#.#.#.#.#.##.#.#.4.1.2.31 -> 4 (i32)
TLV-11[71]: #.#.#.#.#.#.##.#.#.4.1.3.31 -> 2 (i32)
TLV-11[72]: #.#.#.#.#.#.##.#.#.4.1.4.31 -> 0 (i32)
TLV-11[73]: #.#.#.#.#.#.##.#.#.4.1.5.31 -> 3 (i32)
TLV-11[74]: #.#.#.#.#.#.##.#.#.4.1.7.31 -> ##.###.##.##
TLV-11[75]: #.#.#.#.#.#.##.#.#.4.1.8.31 -> 255.255.255.255
Time Of Day completed...
DefaultSnmpAgentClass::SystemTimeChangeEvent for SB5102 CM Agent w/ BRCM Factory Support
Logging event: Retrieved TFTP Config ?BBgdiTUACA1VVEgKKb46@Cim+OrrDJcpazFbVap0Sa8hiQtdekR_o SUCCESS
Logging event: Retrieved Time....... SUCCESS
SB5102 CM Agent w/ BRCM Factory Support processing TLV-11's
SNMP packet sent to ##.###.##.##
Insufficient heap to handle SNMP packet - TOO_BIG.
(PDU = 89256, heap = 73264)
TLV-11 failure: error status=1, error index=0
Invalid TLV-11's: 1 wrong values, 0 duplicate sets.
SNMP Error'd but Haxorware doesn't care AT ALL!
Onwards mateys!

Sending a REG-REQ to the CMTS...
Logging event: TLV-11 - Illegal Set operation failed
Received a REG-RSP message from the CMTS...
0x00021ce6 [CmDocsisCtlThread] BcmCmDocsisCtlThread::RegRspMsgEvent: (CmDocsisCtlThread) ERROR -
REG-RSP response code NOT ok! rsp code = 8 (kRejRequiredParamNotPresent)
0x00021ce6 [CmDocsisCtlThread] BcmCmDocsisCtlThread::SyncRestartErrorEvent: (CmDocsisCtlThread) reason: 17 (kNegOrBadRegRsp)
Logging event: Registration failure, re-scanning downstream
Logging event: Neg Or Bad Reg Rsp - Reinitialize MAC...
Non-Vol Settings successfully written to the device.
Deleting DOCSIS 1.0 CoS Settings for SID 0x316
0x00021dae [CmDocsisCtlThread] BcmDocsisCmHalIf: Big Grin

eleteAllServiceFlows: (DOCSIS CableModem HalIf) Deleting all Upstream and Downstream Service Flows, along with associated Classifiers and PHS rules...
Stopping DHCP/ToD/TFTP (client requested)...
The ToD thread was stopped.
DHCPc: Releasing the lease with client id htype=1, value=
DHCPc: Sending Release packet; client id htype=1, value=
0x00021db8 [DHCP Client Thread] BcmDhcpClientIf::SendDhcpPacket: (DHCP ClientIf for IP Stack1) WARNING - Failed to send packet!
0x00021db8 [DHCP Client Thread] BcmDhcpClientIf::SendRelease: (DHCP ClientIf for IP Stack1) WARNING - Failed to create/send Release packet! Oh, well, no biggie...
0x00021db8 [DHCP Client Thread] BcmEcosIpHalIf::RemoveLeaseImpl: (IP Stack1 HalIf) Removing lease IP address ##.###.##.## from IP stack 1
0x00021dc2 [DHCP Client Thread] BcmEcosIpHalIf::RemoveLeaseImpl: (IP Stack1 HalIf) This is the last address on the stack; shutting the stack down:numberOfAddresses=1
0x00021dc2 [DHCP Client Thread] BcmEcosIpHalIf::ShutdownIpStackImpl: (IP Stack1 HalIf)
Shutting down IP stack 1
SB5102 CM Agent w/ BRCM Factory Support IpStackEvent: Ip=0.0.0.0, Subnet=0.0.0.0, Gateway=0.0.0.0
DefaultSnmpAgentClass::RestartPendingEvent for SB5102 CM Agent w/ BRCM Factory Support
CmSnmpAgent::ResetMibDefaults not restting due to factory mode
SB5102 CM Agent w/ BRCM Factory Support sending deferred traps...
Done w/ deferred traps.
SB5102 CM Event Log w/ BRCM Factory Support sending deferred async messages...
Sending syslog message from IF 1 to 192.###.###.##:
<134> CABLEMODEM [Motorola Corporation]: <2307948724> Acquired Downstream (351000000 Hz)........ SUCCESS
BcmTestAndComputeLocalNetIf(): Error! BcmNetIfNumToIpAddr( 1 ) = 0
Sending syslog message from IF 1 to 192.###.###.##:
<134> CABLEMODEM [Motorola Corporation]: <2307948624> Acquired Upstream .......... SUCCESS
BcmTestAndComputeLocalNetIf(): Error! BcmNetIfNumToIpAddr( 1 ) = 0
Sending syslog message from IF 1 to 192.###.###.##:
<130> CABLEMODEM [DOCSIS]: <68000300> DHCP WARNING - Non-critical field invalid in response.
BcmTestAndComputeLocalNetIf(): Error! BcmNetIfNumToIpAddr( 1 ) = 0
Sending syslog message from IF 1 to 192.###.###.##:
<134> CABLEMODEM [Motorola Corporation]: <2291949724> Retrieved DHCP .......... SUCCESS
BcmTestAndComputeLocalNetIf(): Error! BcmNetIfNumToIpAddr( 1 ) = 0
Sending syslog message from IF 1 to 192.###.###.##:
<134> CABLEMODEM [Motorola Corporation]: <2291949524> Retrieved TFTP Config ?BBgdiTUACA1VVEgKKb46@Cim+OrrDJcpazFbVap0Sa8hiQtdekR_o SUCCESS
BcmTestAndComputeLocalNetIf(): Error! BcmNetIfNumToIpAddr( 1 ) = 0
Sending syslog message from IF 1 to 192.###.###.##:
<134> CABLEMODEM [Motorola Corporation]: <2291949324> Retrieved Time....... SUCCESS
BcmTestAndComputeLocalNetIf(): Error! BcmNetIfNumToIpAddr( 1 ) = 0
Sending syslog message from IF 1 to 192.###.###.##:
<130> CABLEMODEM [DOCSIS]: <73040200> TLV-11 - Illegal Set operation failed
BcmTestAndComputeLocalNetIf(): Error! BcmNetIfNumToIpAddr( 1 ) = 0
Sending syslog message from IF 1 to 192.###.###.##:
<134> CABLEMODEM [Motorola Corporation]: <2436694040> Registration failure, re-scanning downstream
BcmTestAndComputeLocalNetIf(): Error! BcmNetIfNumToIpAddr( 1 ) = 0
Sending syslog message from IF 1 to 192.###.###.##:
<133> CABLEMODEM [Motorola Corporation]: <2300955824> Neg Or Bad Reg Rsp - Reinitialize MAC...
BcmTestAndComputeLocalNetIf(): Error! BcmNetIfNumToIpAddr( 1 ) = 0
Done w/ deferred msgs
SB5102 CM Agent w/ BRCM Factory Support defering traps.
SB5102 CM Agent w/ BRCM Factory Support setting V1/V2 view to unrestricted
SB5102 CPE Agent w/ BRCM Factory Support setting V1/V2 view to docsisNmAccessView
Non-Vol Settings successfully written to the device.
0x00021eda [CmDocsisCtlThread] BcmCmDocsisCtlThread::ResetRngState: (CmDocsisCtlThread)

@@@@@ In ResetRngState, fRemainingInitRngPowerSteps 17
0x00021ee4 [Scan Downstream Thread] BcmVendorCmDownstreamScanThread::ThreadMain: (Scan Downstream Thread) Downstream Channel scan stopped!
0x00021eee [Scan Downstream Thread] BcmVendorCmDownstreamScanThread::ThreadMain: (Scan Downstream Thread) Scanning for a Downstream Channel...

mot_scanList: Setting override freq @ 0
Favorite[1].freq = 345000000
Attempting Downstream FEC lock @ freq= 345000000 Hz, QAM64/256

CM> Found energy at frequency 345000000Hz! Publishing event kEventEnergyDetected...
0x0002213c [CmDocsisCtlThread] BcmCmDocsisCtlThread::StartUsInit: (CmDocsisCtlThread) Locked on the downstream. Waiting for UCDs...

******************************************
DOWNSTREAM STATUS
******************************************
Tuner Frequency = 345000000 Hz
Carrier Offset = 1 Hz
Symbol rate = 5360537 sym/sec
SNR = 36 dB
QAM Mode = QAM256
Tuner AGC = 0xfff00000
IF AGC = 0x135d95a1
Power Level = 8 dB
QAM = LOCKED
FEC = LOCKED
******************************************

I hid every ip except the 0.0.0.0, and also the MAC used on the logged modem

ABMJR · 21-03-2013, 12:44 AM

Thats a pretty large PDU Field (89256)...More than you have...(73264)

Something is wrong.

Quote:Insufficient heap to handle SNMP packet - TOO_BIG.
(PDU = 89256, heap = 73264)

I bet haxorware has been recognized as that would be the only piece in the "Shell" to cause the stack/heap to fall short..The reboot is trying to get/ask as that is what that command/PDU Field is for..

I think I know what I would do, but I wont post it as that lets the cat out of the bag..

I would drop haxorware and install your virgin bin and start from scratch. Also change your NIC MAC of whatever is after the CM..

southernyankey1970 · 21-03-2013, 01:08 AM

I would drop haxorware and install your virgin bin and start from scratch. Also change your NIC MAC of whatever is after the CM..

Agree 100%.

shadowhacker27 · 21-03-2013, 01:20 AM

(21-03-2013, 12:44 AM)ABMJR Wrote: Thats a pretty large PDU Field (89256)

I think I know what I would do, but I wont post it as that lets the cat out of the bag..

not even on a PM

southernyankey1970 · 21-03-2013, 01:24 AM

Nope! You have the best available answer already. I'm very interested in the cause of your TLV 11 as that is always a showstopper. Are you using different cm vendor certs on your hax cm?

Login
Username:
Password:	Lost Password?
	Remember me