Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Stuck on my SB5101 w/haxo default speed (slow)
#1
Hi everyone!

first off all I'm going to tell you my problem.

six months ago I get my first and only sb5101 with Haxoware Version 1.1 Revision 39, everything was working perfect 27 Mb aprox (forced config), but from 3 weeks to now I just have 1 Mb, (that's the legal speed that I'm Paying) also I'm using the Mac Addres from my legal modem into my Sb5101.
i'll tried with diferent BPI settings but nothing works.

here's my Telnet Log (no real MAC's by the way)

Quote:Haxorware integrated telnet daemon

Username: root
Password: *****
Welcome.
CM>
CM> cd0x0001757a [DHCP Server Thread] BcmDhcpServerThread::ThreadMain: (DHCP Server Thread) Callback request expired:
timerDuration secs = 1
current time secs = 95
elapsed time secs = 1
CM> cd n/b

Active Command Table: BFC Application Settings Commands (bfcApp)

CM -> non-vol -> bfcApp

CM/NonVol/BfcApp> 0x0001a0c2 [DHCP Server Thread] BcmDhcpServerThread::ThreadMain: (DHCP Server Thread) Callback request expired:
timerDuration secs = 1
current time secs = 106
elapsed time secs = 1
CM/NonVol/BfcApp> 0x0001cc0a [DHCP Server Thread] BcmDhcpServerThread::ThreadMain: (DHCP Server Thread) Callback request expired:
timerDuration secs = 1
current time secs = 117
elapsed time secs = 1
CM/NonVol/BfcApp> auto_console 0

Automatically stop at console = 0

CM/NonVol/BfcApp> 0x0001f360 [DHCP Server Thread] BcmDhcpServerThread::ThreadMain: (DHCP Server Thread) Callback request expired:
timerDuration secs = 1
current time secs = 127
elapsed time secs = 1
CM/NonVol/BfcApp> write

Dynamic Non-Vol Settings successfully written to the device.
Permanent Non-Vol Settings successfully written to the device.

CM/NonVol/BfcApp> cd0x00021e8a [DHCP Server Thread] BcmDhcpServerThread::ThreadMain: (DHCP Server Thread) Callback request expired:
timerDuration secs = 1
current time secs = 138
elapsed time secs = 1
CM/NonVol/BfcApp> cd /

Active Command Table: CM DOCSIS Commands (CM)

CM
----------------------------------------------------
----------------------------------------------------
CM> run_app


Running the system...


Beginning Cable Modem operation...

0x000238ca [Scan Downstream Thread] BcmVendorCmDownstreamScanThread::ThreadMain: (Scan Downstream Thread) Scanning for a Downstream Channel...

mot_scanList: Setting override freq @ 0
Favorite[0].freq = 729000000
Attempting Downstream FEC lock @ freq= 729000000 Hz, QAM64/256

CM> Found energy at frequency 729000000Hz! Publishing event kEventEnergyDetected...
0x00023b18 [CmDocsisCtlThread] BcmCmDocsisCtlThread::StartUsInit: (CmDocsisCtlThread) Locked on the downstream. Waiting for UCDs...

******************************************
DOWNSTREAM STATUS
******************************************
Tuner Frequency = 729000000 Hz
Carrier Offset = 4 Hz
Symbol rate = 5360537 sym/sec
SNR = 32 dB
QAM Mode = QAM256
Tuner AGC = 0xfff00000
IF AGC = 0x189850e5
Power Level = -14 dB
QAM = LOCKED
FEC = LOCKED
******************************************

CM> Selecting UCD for Us Channel 4

0x000246bc [CmDocsisCtlThread] BcmCmDocsisCtlThread::TestAndLaunchDsTimeSync: (CmDocsisCtlThread) starting ds time sync acquisition...
0x00024946 [CmDocsisCtlThread] BcmCmDocsisCtlThread::SyncDsSyncOk: (CmDocsisCtlThread) downstream time sync acquired...
0x00024946 [CmDocsisCtlThread] BcmCmDocsisCtlThread:Big GrinsSyncOkResumeUsInit: (CmDocsisCtlThread) pre-REG upstream target case...starting initial ranging.
Beginning initial ranging...
Using stored initial upstream power = 42.0 dBmV
0x00024946 [CmDocsisCtlThread] BcmCmDocsisCtlThread::SyncDsSyncOk: (CmDocsisCtlThread) rx unexpected kDsSyncOk indication...
Not logging event ID 2307948724, control for level 7 is 0.
RNG-RSP Adj: tim=4408 power=0 freq=0 Stat=Continue
CM> 0x00024d38 [DHCP Server Thread] BcmDhcpServerThread::ThreadMain: (DHCP Server Thread) Callback request expired:
timerDuration secs = 1
current time secs = 150
elapsed time secs = 1
RNG-RSP Adj: tim=0 power=0 freq=0 Stat=Success

******************************************
UPSTREAM STATUS
******************************************
Upstream Status = UP
Upstream Channel = 4
Upstream Frequency = 34800000 Hz
Upstream Power = 42 dBmV
Ranging SID = 0xb4a
Upstream Symbol Rate = 2560000 sym/sec
******************************************

Calculating maximum number of IP filters:
Each IP filter consumes 1872 bytes of RAM.
Current free RAM is 478060 bytes.
Max heap reserved for IP filters (25%) = 119515
We can support 63 IP filters.
Calculating maximum number of LLC filters:
Each LLC filter consumes 736 bytes of RAM.
Current free RAM is 478060 bytes.
Max heap reserved for LLC filters (25%) = 119515
We can support 162 LLC filters.
Starting IP Initialization with DHCP...
DHCPc: Waiting 2 seconds before sending Discover; client id htype=1, value=48:00:00:00:00:00
Not logging event ID 2307948624, control for level 7 is 0.
CM> DHCPc: Sending Discover packet; client id htype=1, value=48:00:00:00:00:00
DHCPc: Received an Offer from DHCP server 00:07:7d:2f:00:00 (10.203.128.1); lease client id htype=1, value=48:00:00:00:00:00
CM> DHCPc: Timed out waiting for offers for lease with client id htype=1, value=48:00:00:00:00:00
DHCPc: Sending Request packet; client id htype=1, value=48:00:00:00:00:00
DHCPc: Received an Ack from DHCP server 00:07:7d:2f:00:00 (10.203.128.1); lease client id htype=1, value=48:00:00:00:00:00
Current IP address is default 0.0.0.0.
0x00025e68 [DHCP Client Thread] BcmEcosIpHalIf::ConfigureLeaseImpl: (IP Stack1 HalIf)
Configuring IP stack 1:
IP Address = 10.203.220.00 (primary IP address)
Subnet Mask = 255.255.192.0
Router = 10.203.192.0
IsPrimaryInterface = 1

ARPing for default GW IP = 10.203.192.0
MAC = 00:07:7d:2f:00:00
DHCP completed successfully!

DHCP Settings:
Client Id = htype=1, value=48:00:00:00:00:00
State = Renewing (5)
Static Lease = 0
AutoConfig Mode = IP, Subnet and Router
XID = 0x6e34a65f
Number of Tries = 0
Max Discover Tries = 6
Max Request Tries = 6
DHCP server MAC addr = 00:07:7d:2f:00:00
Ignore NAKs = 0
My offered IP address = 10.203.220.00 (primary IP address)
(1) Subnet Mask = 255.255.192.0
(3) Router IP address = 10.203.192.0
(54) DHCP Server IP address = 189.204.97.162
(82) Relay Agent IP address = 10.203.128.0
TFTP Server IP address = 189.204.97.162
CM Configuration file = '^1/7C3D7787/'
(2) UTC Time Offset = -21600 seconds
(4) Time Server IP address = 189.204.97.162; 189.204.97.182
(6) Domain Name Server = 189.204.97.162
(7) Log Server IP address = 127.0.0.1
(51) Lease time = 259200 seconds
(58) T1 (renew) = 129600 seconds
(59) T2 (rebind) = 226800 seconds
Lease is infinite = 0

(122) PacketCable/CableHome -== SubOptions ==-
SubOpt(1) Primary Dhcp Server = 0.0.0.0


SB5102 CM Agent w/ BRCM Factory Support IpStackEvent: Ip=10.203.220.00, Subnet=255.255.192.0, Gateway=10.203.192.0
CmSnmpAgent::IpAddressAcquiredEvent for SB5102 CM Agent w/ BRCM Factory Support
IP addr = 10.203.220.00
Starting Time Of Day...
0x00025f1c [CmDocsisIpThread] BcmDocsisTimeOfDayThread::SetTodServerIpAddress: (Time Of Day Thread) ToD servers: 189.204.97.162; 189.204.97.182
Connecting to ToD server 189.204.97.162...
Sending UDP ToD request to server...
SNMP Agent Binding to 10.203.220.219:225
Not logging event ID 2291949724, control for level 7 is 0.
CM> UTC returned by ToD server 3606660258; UTC offset -21600
Current system time -> Wed Apr 16 12:04:18 2014

System start time -> Wed Apr 16 12:01:43 2014

Starting Tftp of configuration file...
Opening file '^1/7C3D7787/' on 189.204.97.162 for reading...
tftp-enforce bypass is using 189.204.97.162:^1/7C3D7787/
Initiating fake TFTP Get (tftp-enforce bypass)
Bypass succeeded.File was 2672 bytes
TFTPD Started
CM> Forcing Config TFTP IP to 127.0.0.1
Forcing Config File name to 29xma.bin
TFTPD received 1 from 10.203.220.219:1028
Storing received cfg of size 655 to memory
TFTPD Shut down
Tftp read < 512 bytes, we have reached end of file.
Tftp transfer complete!
TFTP Settings:
Stack Interface = 1
Server Ip Address = 189.204.97.162
Server Port Number = 1029
Total Blocks Read = 2
Total Bytes Read = 655

Config file was read! IP Initialization completed...
MAX CPE per CM is being set to 32
Time Of Day completed...
DefaultSnmpAgentClass::SystemTimeChangeEvent for SB5102 CM Agent w/ BRCM Factory Support
TLV-11[1]: 1.3.6.1.2.1.69.1.2.1.2.1 -> 10.3.1.0
TLV-11[2]: 1.3.6.1.2.1.69.1.2.1.3.1 -> 255.255.0.0
TLV-11[3]: 1.3.6.1.2.1.69.1.2.1.4.1 -> cbadmcmrw
TLV-11[4]: 1.3.6.1.2.1.69.1.2.1.5.1 -> 3 (i32)
TLV-11[5]: 1.3.6.1.2.1.69.1.2.1.6.1 -> @
TLV-11[6]: 1.3.6.1.2.1.69.1.2.1.7.1 -> 4 (i32)
TLV-11[7]: 1.3.6.1.2.1.69.1.2.1.2.2 -> 10.3.1.0
TLV-11[8]: 1.3.6.1.2.1.69.1.2.1.3.2 -> 255.255.0.0
TLV-11[9]: 1.3.6.1.2.1.69.1.2.1.4.2 -> hd
TLV-11[10]: 1.3.6.1.2.1.69.1.2.1.5.2 -> 2 (i32)
TLV-11[11]: 1.3.6.1.2.1.69.1.2.1.6.2 -> @
TLV-11[12]: 1.3.6.1.2.1.69.1.2.1.7.2 -> 4 (i32)
TLV-11[13]: 1.3.6.1.2.1.69.1.2.1.2.3 -> 172.20.0.0
TLV-11[14]: 1.3.6.1.2.1.69.1.2.1.3.3 -> 255.255.0.0
TLV-11[15]: 1.3.6.1.2.1.69.1.2.1.4.3 -> hd
TLV-11[16]: 1.3.6.1.2.1.69.1.2.1.5.3 -> 2 (i32)
TLV-11[17]: 1.3.6.1.2.1.69.1.2.1.6.3 -> @
TLV-11[18]: 1.3.6.1.2.1.69.1.2.1.7.3 -> 4 (i32)
TLV-11[19]: 1.3.6.1.2.1.69.1.2.1.2.4 -> 172.20.0.0
TLV-11[20]: 1.3.6.1.2.1.69.1.2.1.3.4 -> 255.255.0.0
TLV-11[21]: 1.3.6.1.2.1.69.1.2.1.4.4 -> cbadmcmrw
TLV-11[22]: 1.3.6.1.2.1.69.1.2.1.5.4 -> 3 (i32)
TLV-11[23]: 1.3.6.1.2.1.69.1.2.1.6.4 -> @
TLV-11[24]: 1.3.6.1.2.1.69.1.2.1.7.4 -> 4 (i32)
Not logging event ID 2291949524, control for level 7 is 0.
Not logging event ID 2291949324, control for level 7 is 0.
SB5102 CM Agent w/ BRCM Factory Support processing TLV-11's
SNMP packet sent to 10.203.220.219:225
24 TLV-11's OK.
Sending a REG-REQ to the CMTS...
Received a REG-RSP message from the CMTS...

MAC MGT msg buf, len=125
48 00 00 00 00 00 00 07 7d 2f 00 00 00 6f 00 00 | HZ..f...}/...o..
03 01 07 00 0b 4a 00 05 2d 01 01 01 02 01 02 03 | .....J..-.......
01 01 04 01 01 06 01 01 07 01 0f 08 01 10 0a 01 | ................
01 0b 01 18 0c 01 01 0f 01 00 10 04 00 00 00 01 | ................
11 01 01 13 01 01 18 1d 01 02 00 01 02 04 00 00 | ................
1d 4d 03 02 0b 4a 06 01 07 07 01 01 08 04 00 72 | .M...J.........r
70 e0 0f 01 02 19 16 01 02 00 02 02 04 00 00 1e | p...............
a1 06 01 07 07 01 01 08 04 01 c1 d4 40 | ............@



MAC MGT header:
dest addr: 48:00:00:00:00:00
src addr: 00:07:7d:2f:00:00
msg len: 0x6f (111)
DSAP: 0
SSAP: 0
control: 0x3
version: 0x1
msg_type: 0x7 REG_RSP
fka reserved: 0

MSG PDU:
primary sid: 0xb4a
response code: 0 (kConfOk)


CM modem capabilities: T=0x05 (005) L=0x2d (045) V=
concat support: T=0x01 (001) L=0x01 (001) V=0x01 (1)
DOCSIS version: T=0x02 (002) L=0x01 (001) V=0x02 (2)
frag support: T=0x03 (003) L=0x01 (001) V=0x01 (1)
PHS support: T=0x04 (004) L=0x01 (001) V=0x01 (1)
BPI version: T=0x06 (006) L=0x01 (001) V=0x01 (1)
num DS SAID's: T=0x07 (007) L=0x01 (001) V=0x0f (15)
num US Sid's: T=0x08 (008) L=0x01 (001) V=0x10 (16)
TxEq Taps per Symbol: T=0x0a (010) L=0x01 (001) V=0x01 (1)
num TxEq Taps: T=0x0b (011) L=0x01 (001) V=0x18 (24)
DCC support: T=0x0c (012) L=0x01 (001) V=0x01 (1)
Unknown type. Ignore!: T=0x0f (015) L=0x01 (001) V=00 | .
Unknown type. Ignore!: T=0x10 (016) L=0x04 (004) V=00 00 00 01 | ....
L2VPN capability: T=0x11 (017) L=0x01 (001) V=0x01 (1)
DUT filtering support: T=0x13 (019) L=0x01 (001) V=0x01 (1)

v1.1 US flow sets: T=0x18 (024) L=0x1d (029) V=
CM flow ref: T=0x01 (001) L=0x02 (002) V=0x0001 (1)
sfid: T=0x02 (002) L=0x04 (004) V=0x00001d4d (7501)
sid: T=0x03 (003) L=0x02 (002) V=0x0b4a (2890)
QoS param set type: T=0x06 (006) L=0x01 (001) V=0x07 (7)
traffic priority: T=0x07 (007) L=0x01 (001) V=0x01 (1)
max tx rate, bps: T=0x08 (008) L=0x04 (004) V=0x007270e0 (7500000)
us bw sched strategy: T=0x0f (015) L=0x01 (001) V=0x02 (2)


v1.1 DS flow sets: T=0x19 (025) L=0x16 (022) V=
CM flow ref: T=0x01 (001) L=0x02 (002) V=0x0002 (2)
sfid: T=0x02 (002) L=0x04 (004) V=0x00001ea1 (7841)
QoS param set type: T=0x06 (006) L=0x01 (001) V=0x07 (7)
traffic priority: T=0x07 (007) L=0x01 (001) V=0x01 (1)
max tx rate, bps: T=0x08 (008) L=0x04 (004) V=0x01c1d440 (29480000)

0x00026584 [CmDocsisCtlThread] BcmCmDocsisCtlThread:TonguearseAndValidateRegRspMsg: (CmDocsisCtlThread) ERROR - REG-RSP parse error. continuing.
0x00026584 [CmDocsisCtlThread] BcmCmDocsisCtlThread::RegRspMsgEvent: (CmDocsisCtlThread) We registered with a DOCSIS 1.1 config file!
Logging event: REG-RSP - invalid format or not recognized
Registration complete!
Process CVC
0x00026598 [CmDocsisCtlThread] CmSecureDownload:TonguerocessConfigFileManufAndCosignerCvcs: (Secure Software Download) WARNING - No CVC included in config file; software upgrade can't be performed!
0x00026598 [CmDocsisCtlThread] BcmCmDocsisCtlThread:TonguerocessCVC: (CmDocsisCtlThread) ERROR - Config file does not include a valid CVC!
DOCSIS CoS/QoS rate shaping enable is now 1
CmSnmpAgent::CmOperationalEvent for SB5102 CM Agent w/ BRCM Factory Support
CmSnmpAgent operating in 1.1 mode, including docsQos, excluding docsBpi
+++ No DH kickstart profiles or snmpCommunityTable entries installed.
We will operate in NMACCESS mode.
SB5102 CM Agent w/ BRCM Factory Support setting V1/V2 view to docsisNmAccessView
SB5102 CM Agent w/ BRCM Factory Support enabling management.
SB5102 CM Agent w/ BRCM Factory Support sending deferred traps...
Done w/ deferred traps.
SB5102 CPE Agent w/ BRCM Factory Support setting V1/V2 view to docsisNmAccessView
BPI+ Bypass enabled
Enabling network access for all CPE ports.

mot_scanList: Writing to Flash!
BcmCmDocsisStatusEventCodes::kCmIsOperational
Suspending SNMP Thread
0x000265d4 [CmDocsisCtlThread] BcmVendorCmApplication::StopDhcpServer: (VendorExtension CmApp) Shutting down DHCP Server...
0x000265d4 [CmDocsisCtlThread] BcmStandbySwitchThread::CmIsOperational: (Motorola Standby Switch Thread) Simulating a press of the standby switch to get the state configured properly.
0x000265d4 [IGMP Thread] BcmIgmpThread::Starting Igmp Thread...: (IGMP Thread)
0x000265d4 [Motorola Standby Switch Thread] BcmStandbySwitchThread::ThreadMain: (Motorola Standby Switch Thread) Standby switch was pressed!
0x000265de [Motorola Standby Switch Thread] BcmStandbySwitchThread:TonguerocessSwitchEvent: (Motorola Standby Switch Thread) Standby switch disabled in nonvol; ignoring event.
SB5102 CM Event Log w/ BRCM Factory Support sending deferred async messages...
Sending syslog message from IF 1 to 127.0.0.1:
<133> CABLEMODEM [Motorola Corporation]: <2300955725> Ethernet link up - ready to pass packets
Done w/ deferred msgs
Not logging event ID 2296948624, control for level 7 is 0.
CM>

Any Idea??

Regards
Reply
#2
Dynamic configs are not your friend
Reply
#3
Wow


Posted a proper log! Nice!

Do yourself a favor and leave your sub alone. In my ISP you'd be done for...change your nic addy on your sub cpu and don't mess with it again is my 1st piece of advice. If they ban you like they would here you'd be trying to do this from your cell phone. Just an observation...

You got going with that for awhile but you need to take that knowledge and work with a different setup. Try some donor certs and compare the logs as this will point you in the right direction. This is the next step and you're doing well...

See how you get help from posting a log instead of "it's been up for 2 years, WTF?" lol

try some different setups and see where it gets you,
Reply
#4
(16-04-2014, 11:30 PM)southernyankey1970 Wrote: Wow


Posted a proper log! Nice!

Do yourself a favor and leave your sub alone. In my ISP you'd be done for...change your nic addy on your sub cpu and don't mess with it again is my 1st piece of advice. If they ban you like they would here you'd be trying to do this from your cell phone. Just an observation...

You got going with that for awhile but you need to take that knowledge and work with a different setup. Try some donor certs and compare the logs as this will point you in the right direction. This is the next step and you're doing well...

See how you get help from posting a log instead of "it's been up for 2 years, WTF?" lol

try some different setups and see where it gets you,

What did you mean with "Do yourself a favor and leave your sub alone."? I didn't get it XD...my english is not that good.

Really thx for your advice I'll try diferent set ups, any clue? becouse every time that i change something like BPI or MAC adress or anything my TFTP Filename change for something like "^1/08FC0EFB/", "^1/4EF75AAB/". that's the ISP dynamic config, right?

thx in advance again.
Reply
#5
You said you're using your subbed mac that you pay for...

DO NOT USE THAT ANYMORE!

1. Haxorware is NOT invisible to the headend unless you know exactly how the CMTS is configured.
2. Your "paid for" account is legally tied to you and therefore totally traceable.
3. What I mean by different setup is to use a different set of test certs so you are NOT traceable(assuming that you are smart enough to change the nic mac addy)
4. Simply changing Hax "settings"does nothing to change the setup once the CMTS has interfaced with and logged your certs..
5.Dynamiccfg's are not my area of expertise but If you are flogging the same set of certs with cfg's that were PROVISIONED to another cm you are just wasting time and effort, not to mention drawing attention to your certs and to the node if the ISP gets really offended.
Reply
#6
Hi! thxs for your answer yankey, the only problem that I have at this point is that I don't know how get Mac's from diferent node, I tried with fastSNMP and I just get Mac´s from my node. there´s an alternative way to find those macs, I dont know anyone on my neighborhood with the ame ISP.

any Idea..

regards
Reply
#7
Private trade. that is how i get mine.

DO NOT START A THREAD ASKING FOR CERTS...just some free advice! Download debrick dumps and try them. if you can force all you really need is valid certs...

Debrick bins are everywhere...
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)