General_All

scanning

Sun, 05 Feb 2012 05:28:27 +0000

First of all im not asking for a how to as i already know how to scan for mac addresses, my main reason for joining this site was to expand my knowledge in sercurity, now for my question .

Im using DHCP force to do all my scanning, now i get config files with a working mac in the same provisioned area, but what im not understanding is how come good working macs that are tied to a config wont work, for example, i know that if CMTS doest grant you permission it will take you to the install page and if your ISP sees two identical macs' it will ban it when it discovers it...but what im not understanding is how come working macs in DHCP with a config will not even accuire a upstream status sometimes, it continues in an endless freq. search. Im using haxoware rev.39. Is this the BPI+ ?

Problem with config file

Sat, 04 Feb 2012 21:02:19 +0000

This is my overview. I've tried to force it to read a default "GOLD.BIN" from the TFTP server as well as editing my own and using the autoserve option. For some reason though it just isn't taking it. It keeps pulling "SILVER.BIN". I'm out of ideas on what to do. Hoping someone can help me out.

assuming it still was possible the way it used to be, how would it have been done?

scripting Haxorware with cURL - upload doesn't work!

Fri, 03 Feb 2012 15:52:49 +0000

I am trying to write a batch script to automate the configuration of Haxorware 1.1 rev39 DIAG using cURL. Everything works fine, except upload. Here's the deal:

I started talking with telnet:

Haxorware integrated telnet daemon
Username: administrator
Password: **********
Welcome.
Favorite[0].freq = 730000000
Attempting Downstream FEC lock @ freq= 730000000 Hz, QAM64/256
CM>
CM> Favorite[1].freq = 745000000
Attempting Downstream FEC lock @ freq= 745000000 Hz, QAM64/256
cFavorite[2].freq = 754000000
Attempting Downstream FEC lock @ freq= 754000000 Hz, QAM64/256
dGo back to 1st favorite
Attempting Downstream FEC lock @ freq= 594000000 Hz, QAM64
CM> cd Attempting Downstream FEC lock @ freq= 602000000 Hz, QAM64
\Attempting Downstream FEC lock @ freq= 610000000 Hz, QAM64
cAttempting Downstream FEC lock @ freq= 618000000 Hz, QAM64
mAttempting Downstream FEC lock @ freq= 626000000 Hz, QAM64
CM> cd \cm
Active Command Table:  CM DOCSIS HAL Commands (cm_hal)
CM -> cm_hal
CM/CmHal> Attempting Downstream FEC lock @ freq= 634000000 Hz, QAM64
sAttempting Downstream FEC lock @ freq= 642000000 Hz, QAM64
cAttempting Downstream FEC lock @ freq= 650000000 Hz, QAM64
aAttempting Downstream FEC lock @ freq= 658000000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 666000000 Hz, QAM64
nAttempting Downstream FEC lock @ freq= 674000000 Hz, QAM64
_Attempting Downstream FEC lock @ freq= 682000000 Hz, QAM64
sAttempting Downstream FEC lock @ freq= 690000000 Hz, QAM64
tAttempting Downstream FEC lock @ freq= 698000000 Hz, QAM64
oAttempting Downstream FEC lock @ freq= 706000000 Hz, QAM64
p0x000049de [DHCP Server Thread] BcmDhcpServerThread::ThreadMain:  (DHCP Server
Thread) Callback request expired:
timerDuration secs = 1
current time secs = 18
elapsed time secs = 1
CM/CmHal> scan_stop

CM/CmHal> cd Attempting Downstream FEC lock @ freq= 714000000 Hz, QAM64
0x00004bd2 [Scan Downstream Thread] BcmVendorCmDownstreamScanThread::ThreadMain:
  (Scan Downstream Thread) Downstream Channel scan stopped!
CM/CmHal> cd \
Active Command Table:  CM DOCSIS Commands (CM)
CM
CM> dir
!			   ?			   REM			 cd			  dir
find_command	help			history		 instances	   ls
man			 pwd			 sleep		   syntax		  system_time
usage
----
con_high		mbufShow		memShow		 mutex_debug	 ping
read_memory	 reset		   routeShow	   run_app		 shell
stackShow	   taskDelete	  taskInfo		taskPrioritySet taskResume
taskShow		taskSuspend	 taskTrace	   usfsShow		version
write_memory	zone
----
[HeapManager] [cm_hal] [docsis_ctl] [embedded_target] [enet_hal] [event_log]
[flash] [forwarder] [ip_hal] [msgLog] [non-vol] [pingHelper] [snmp] [snoop]
[usb_hal]
CM> 0x000074e0 [DHCP Server Thread] BcmDhcpServerThread::ThreadMain:  (DHCP Serv
er Thread) Callback request expired:
timerDuration secs = 1
current time secs = 29
elapsed time secs = 1
CM> 0x00009fd8 [DHCP Server Thread] BcmDhcpServerThread::ThreadMain:  (DHCP Serv
er Thread) Callback request expired:
timerDuration secs = 1
current time secs = 40
elapsed time secs = 1
CM> 0x0000cad0 [DHCP Server Thread] BcmDhcpServerThread::ThreadMain:  (DHCP Serv
er Thread) Callback request expired:
timerDuration secs = 1
current time secs = 51
elapsed time secs = 1
CM>

And then I said to cURL:

N:\ot\Telling\The\Path\>curl --user administrator:NorThePass --upload-file SomeFile.txt http://192.168.100.1/fileupload.cgi

And telnet responded with:

>>> YIKES... looks like you may have a problem! <<<
r0/zero=00000000 r1/at  =fffe0000 r2/v0  =805c72a8 r3/v1  =00000000
r4/a0  =8054aa58 r5/a1  =00000000 r6/a2  =00000000 r7/a3  =00000000
r8/t0  =00000000 r9/t1  =807bc739 r10/t2 =00000055 r11/t3 =00004470
r12/t4 =d0f80886 r13/t5 =00000fe5 r14/t6 =30000000 r15/t7 =00000001
r16/s0 =8054bacc r17/s1 =00000000 r18/s2 =805c72a8 r19/s3 =00000000
r20/s4 =00000001 r21/s5 =0000002a r22/s6 =8054b848 r23/s7 =00000001
r24/t8 =00000000 r25/t9 =00000003 r26/k0 =00000000 r27/k1 =00000001
r28/gp =80458fa0 r29/sp =8054b830 r30/fp =8054b960 r31/ra =8054a514
PC   : 0x8054a534	error addr: 0x00000000
cause: 0x00000008	status:	 0x1000ff03
BCM interrupt enable: fffffff7, status: 00000000
Bad PC or SP.  Can't trace the stack.
Task: Rajko HttpD
---------------------------------------------------
ID:			   0x0006
Handle:		   0x8054b9ac
Set Priority:	 23
Current Priority: 23
State:			SUSP
Stack Base:	   0x8054acd4
Stack Size:	   3280 bytes
Stack Used:	   2316 bytes
																   Stack	 Sta
ck	Stack
  TaskId			   TaskName			  Priority   State	  Size	  Use
d	 Margin
---------- --------------------------------  --------  --------  --------  -----
---  --------
0x8048f818					 Idle Thread	  31		 RUN	 2048	  106
4	   984
0x805131d0		   Network alarm support	   6	   SLEEP	 2256	  123
2	  1024
0x804924c8				 Network support	   7	   SLEEP	 8192	  165
6	  6536
0x80513f20				pthread.00000800	  15		EXIT	 7852	  110
4	  6748
0x8048a1c8						tStartup	  18	   SLEEP	12288	  520
8	  7080
0x8054b9ac					 Rajko HttpD	  23		SUSP	 3280	  231
6	   964
0x807f57c8	  NonVol Device Async Helper	  25	   SLEEP	 3072	   51
6	  2556
0x807ebca8  Motorola Standby Switch Thread	  23	   SLEEP	 4096	   45
2	  3644
0x807ea9b0	  Motorola Vendor Ctl Thread	  23	   SLEEP	 4096	   50
8	  3588
0x807f64e8							WDOG	  17		 RUN	 5120	  278
8	  2332
0x807e8f6c				 BFC Ping Thread	  29	   SLEEP	 6144	   47
2	  5672
0x807e53b0				   ConsoleThread	  27		 RUN	36864	  259
6	 34268
0x807d60f4						 TelnetD	  23		 RUN	 2256	  175
6	   500
0x807c6040					CfgVB Thread	  23	   SLEEP	 4096	   50
8	  3588
0x807c49f0							DHCM	  25	   SLEEP	16384	   51
6	 15868
0x807bec00				Event Log Thread	  25	   SLEEP	 8192	  190
0	  6292
0x8079a340			  Time Of Day Thread	  23	   SLEEP	 6144	   46
0	  5684
0x8079a7b0				CmDocsisIpThread	  23	   SLEEP	 8192	   50
8	  7684
0x80793aa4				 CmBpiManagerThd	  25	   SLEEP	 8192	   50
4	  7688
0x8078fea8					 CmDsxHelper	  23	   SLEEP	 8192	   50
4	  7688
0x807abd74			   CmDocsisCtlThread	  21	   SLEEP	 8192	   51
2	  7680
0x80788d74		  Scan Downstream Thread	  23	   SLEEP	 4096	  174
8	  2348
0x807808f0			  RateShaping Thread	  23	   SLEEP	 4096	   44
4	  3652
0x807f65e0							CMHL	  23	   SLEEP	 4500	   36
8	  4132
0x807f66d8							CMHH	  21	   SLEEP	 4500	   35
2	  4148
0x807f67d0							ENRX	  23	   SLEEP	 4500	  106
4	  3436
0x807f68c8							ENTX	  23	   SLEEP	 4500	   66
0	  3840
0x807f69c0							ELNK	  23	   SLEEP	 4500	   32
4	  4176
0x807f6ab8							USTX	  23	   SLEEP	 4500	   34
4	  4156
0x807f6bb0							USRX	  23	   SLEEP	 4500	   37
6	  4124
0x807f6ca8							UBCT	  19	   SLEEP	 4500	   36
0	  4140
0x807f6da0							USRN	  23	   SLEEP	 4500	   34
4	  4156
0x806a06e8			  DHCP Client Thread	  23	   SLEEP	12288	   51
6	 11772
0x807f6e98						IpHalIst	  23		 RUN	 4500	   85
2	  3648
0x8069a860			  CmPropaneCtlThread	  23	   SLEEP	 8192	  163
6	  6556
0x80697c04					 IGMP Thread	  23	   SLEEP	 4096	   46
4	  3632
0x80694ddc			   NetToMedia Thread	  23	   SLEEP	 4096	   81
6	  3280
0x80692190					 Trap Thread	  23	   SLEEP	16384	   50
8	 15876
0x807f6030					 SNMP Thread	  23	   SLEEP	20480	   85
2	 19628
0x805cf91c			  DHCP Server Thread	  23	   SLEEP	 8192	  200
8	  6184
0x8047b410					tNonVolTimer	  30	   SLEEP	 2048	   29
2	  1756
Done!
0x0000f578 [DHCP Server Thread] BcmDhcpServerThread::ThreadMain:  (DHCP Server T
hread) Callback request expired:
timerDuration secs = 1
current time secs = 62
elapsed time secs = 1
CM>
Connection to host lost.

And cURL said to that:

curl: (56) Recv failure: Connection was reset

And there's no SomeFile.txt in the modem's filesystem...

- I tried without passwords for telnet and GUI, same thing happens.
- I tried without logging to telnet or GUI, same thing happens.
- I tried uploading bootloader, firmware and cert, same thing happens.
- I tried CM/Flash> init and then open bootloader, image1, image2, etc, same thing happens.

Is this a bug, or do I need to find a way to activate document.fileupload.submit(), which obviously has the ability to upload?
Searching the interweb I found a tool called Auto-Haxor-It or something, which uses AutoIt to simulate pressing buttons in a script.
Someone brighter than me found out long ago that it cant't be done using cURL, or can it?

Any suggestions?

SB5100 How Do I Obtain a Config File

Fri, 03 Feb 2012 06:40:10 +0000

Im a n00b so bare with me. Do I create one (if so could anyone direct me to a tutorial).

Factory Mode

Wed, 01 Feb 2012 23:05:20 +0000

Curious as to why some 5100's will not go into factory mode through IP Full View. Seems to be mostly boxes with an AMD chip. Intel and others go right in and reboot. Some boxes just flash the PC activity light real fast but never reboot. Anyone else seen this problem? If I flash the box with a virgin intel flash it goes into factory mode with no problem.

Help with a RCA DCM425C Modem

Wed, 01 Feb 2012 22:43:14 +0000

I have a RCA DCM425C Modem, it use to work with Comcast but now its dead, when I hook it up my computer says it has internet but when I try to go online like google or yahoo it doesn't connect...

Haxorware v1.1 Revision 39

Is there a fix?

5101 says online but

Tue, 31 Jan 2012 13:03:30 +0000

I have a 5101 that was working great but now i cant get online. All the lites are on but says there is no internet conection. Anybody have this problem and what is the solution for it. Here is a pic of the log.

Attached Thumbnails

unable to detect chip on sb5100

Fri, 27 Jan 2012 19:33:05 +0000

I received my modem yesterday along with my serial blackcat cable. i successfully backup my original flash and boot loader. i successfully reflashed with sigma software. i connected it to cable to do online configuration and it was updating new firmware i accidently restarted modem before it finished. i assume it is bricked. now when i hook up jtag and run blackcat software it says cannot find manufacture and does not identify chip as before. what method can i do to load oringinal firmware back on . any help would be greatly appreciated.

Telnet

Wed, 25 Jan 2012 12:38:35 +0000

Im just learning how to use telnet. Lets say I flash my modem. I will put a command in and it will work maybe one time. If I re flash the modem and try the same command it wont work. Thats the same on the opposite also if it didnt work and I reflash it may work .
I use the same file to flash hax lite 39 . Whats up with that.

3 Bricked Modems

Sat, 21 Jan 2012 04:30:04 +0000

I have 2 SB5101's and 1 SB5100.

ALL of them turn on for a second then just off... (No lights). I can detect flash on SB5100 and 1 of the SB5101.

I tried that POKE stuff, I tried the wire on pin 12. ( I have perfect soldering skills ) trust me.. if not i can show you a picture.

I have been trying for about 6 hours now and no luck. Im not sure if this is the place but ...

I have a VNC server setup on my PC (use it for Ipad mostly) but would glady pay someone $10 to teach/show/how to debrick a SB5101 modem. If interested PM me im free all day and night most of the time. Payment via Paypal of course. Or if you want to trade... I own http://AtomSoftTech.com/shop

I have a Parallel JTAG and a Custom Blackcat USB... (made it myself)

Thanks in advance. Also if this was inappropriate in any way just tell me.

Is it possible to cross-compile for 6120?

Mon, 16 Jan 2012 10:24:50 +0000

So earlier today I was looking for a way to cross-compile even the simplest executable C program (via GCC) for my SB6120, but then I started reading up on Montavista... Do you actually have to buy a compiler license from Montavista in order to build C programs on PUMA5 modems?

haxorware 1.1 rev39 speed questions

Sun, 15 Jan 2012 14:11:57 +0000

In Settings section, disable firmware upgrades, tftp enforce bypass, and disable ip filters are checked on my modem. Can these three, in any way, affect the speed stability I get from my ISP?

I use the highest config file in my ISP which is 5MB.bin. Is it better to use force config file or autoserve? When is it necessary to check TFTP Enforce bypass?

Also, for security flexibility, which is better between disabled BPI and BPI+ Bypass? I can use both in my network without any problems but I want to know which is better? I don't want any security at all.

Extract CVC from an Image file

Sat, 14 Jan 2012 19:26:16 +0000

Neat trick assuming you have a firmware image....

rename the firmware to a .p7b extension and double click on it in Windows. Expand the tree on the left by clicking the + sign and choose certificates. On the right, you will see an item Code verification Certificate right click it and choose All Tasks -> Export. Accept all the defaults in the wizard that comes up and choose where to store the CVC. And Voila you now can get the CVC for any firmware image you have.

Please Note: Motorola Firmware can be signed with either their expired CVC or their new valid CVC but if you do not include the correct CVC with the modem config the modem will not upgrade. Use the above mentioned method to make sure you have the right firmware The new Moto CVC expires in 2021 the previous one expired in 2011.

http://docsis.org/node/1275
ABMJR

sb5101 jtag utility v1.3 error writing sector problem

Sat, 14 Jan 2012 09:08:07 +0000

I used the same JTAG cable (I made it myself) to flash haxorware in a handful of modems before and while it worked for some it did not work for others. I get the infamous "error write sector" error when I program a 2MB dump. Even though I uncheck verify written data, in the end it will turn out that the modem will be bricked. Right now, when I power on the modem the lights will stay lit for around 1 second and the nimmediately turn off. I can 'detect' the flash with no problems but the error writing sector error is all over the place.

I did not use any resistor in my jtag cable and it is around 8" in length. Could the cable be the problem here? I made sure that the header installed in the modem is properly soldered. Please help in reviving my modem

And by the way, is the bootloader included in the 2MB dump?

Scanning for certs question

Mon, 09 Jan 2012 07:50:16 +0000

Why am I only getting SB5100 certs? My modem is a SB5101 with Haxorware 1.1 R39. Why can't I get other modems? I read something about this a week ago and can't seem to find the forum.

Thanks,

management bins

Sun, 08 Jan 2012 20:15:44 +0000

quick question, do management bins use the factory motorola page?

Fighting with SNMP OID mapping issues...

Thu, 05 Jan 2012 11:23:12 +0000

I have a SB 6120 running forceware, which of course includes the fabulous new log for SNMP messages. I am having great difficulty figuring out how to programatically "map" the numeric OID values contained in the forceware SNMP log, with the associated textual/string values (which of course do not appear in the log). Here is an example:

Quote

CMD=SNMP_MSG_GET, OID=0.6.1.2.1.10.127.1.2.2.1.17.2.5.0.48.19.6.15.43.6.1.4.1.4491.2.1.20.1.2.1.6.4.5.0.48.19.6.15.43.6.1.4

How does one go about obtaining the textual string value for this OID? I tried using Cisco's online SNMP Object Navigator but it wouldn't return much of anything.
Does anyone know of any scripts I could download which might contain a dictionary/hash table/database of the string values and their associated numeric OID's?

6120 all lights on

Wed, 04 Jan 2012 02:18:49 +0000

Ican detect flash and program but when I reset it just has all lights on , did I brick it?

Can't detect flash?

Sat, 31 Dec 2011 23:04:22 +0000

i did the 10pin header to the board (my soldering is flawless. i've been soldering for 20 years, yes - i know what flux is and how to use it )

i've done the blackcat wire install for 6101's. no problem...

i bought a usbjtagNT, i've installed the drivers, running usbjtagnt software, i get "usb detected" in the bottom right, debug turns ON when i plug in my target (5101)

i hit detect and get:

Copyright © 2010,2011,2012
USB JTAG NT 0.54
Target: SB5101Mod
-detect
IDCODE FFFFFFFF

any ideas as to why?

i've tried different jtagusb drivers, software....

it's driving me nuts

thanks guys

DNS server?

Sat, 31 Dec 2011 07:31:41 +0000

I looked around and saw that some people using D3 modem with Alpha change the DNS server to 4.2.2.1 ; 4.2.2.2 or google DNS. Dose the DNS effect the speed of the modem?

no go past receive light

Sat, 31 Dec 2011 03:45:09 +0000

What would be broken on the modem to not go past receive light. It acts as if it does not see the coax connected at all.

hacking the sbg1000

Thu, 29 Dec 2011 18:51:28 +0000

Hello guys I'm. A ral noob here. I just came across a sbg1000 and was wondering if there is any way of hhacking it like the other motorola modems. If so what's the process

What socket pin to use on my 3m test clip for my 6120

Wed, 28 Dec 2011 02:29:03 +0000

What socket fits on my pins on a 3m clip. I have to flash my 6120 and im trying to get everything I need. Im kinda looking for this cable .

Attached Thumbnails

5101U using "SPI Flash Chip" Not connecting on my ISP..

Mon, 26 Dec 2011 05:34:31 +0000

Installed the SPI Flash Chip ordered from the store July 29th. Today the chip has been installed on a 5101U with no problem. Everything went well while soldering... all lights are ON while the "PC activity" light blinking as normal. Is there any settings i need to change?

Thank you...

Uptime: 37s
Memory: 94KiB/2748KiB (3%)
Status: Operational
DS: 11.9 dBmV/36.5 dB US: 48.0 dBmV
Haxorware
Version 1.1 Revision 39

I try to diagnose local area connection and received "doesn't have a valid IP configuration"

5100mod password

Sun, 25 Dec 2011 21:46:52 +0000

i forgot the password for 5100mod.

any help would be appreciated.

Just got my SB5100 sigma-x2

Sat, 24 Dec 2011 23:40:26 +0000

Hi yall,

Just got my sb5100 with sigma x2. Bought it from ebay. Immediately connect it with out doing anything to it and at first it was working fine then intermittently. I am able to connect to http://192.168.100.1

but when I tried to get connected to: http://192.168.100.1:1337 I get the hard core program it self rather than the GUI interface.

attached is what I got on my screen. This was supposed to be Premod modem. I am a noob and been reading the thread especially on the sb5100. I don't have Jtag or anything like that. Any ideas any one....

Attached Files

Sigma-X2.pdf 32.57K 17 downloads

need Help here sb5100 and rca 315 roadrunner SC or LA area

Thu, 22 Dec 2011 06:23:02 +0000

the modems don't work anymore i want to know if is their any easy tool that i can use to transfer cert to the modem and do the work 100%

with this new software update roadrunner

i need some help i been trying anywhere to read but is seems so hard i cant under stand please if any one had success tell me whats easy way so i can fix my modem

thank lot this is the best forum ever i wish i can find my answer here

if any video link or anything you guys thing will help me just tell me
thanks again

the modem wont pase the 4 light and keep rebooting i thing need a valid cert i have lot of them don't no how to transfer them to the modem

Custom Firmware

Fri, 16 Dec 2011 16:13:41 +0000

Hello everyone, i know i dont post much but no time to most of the time. My name is Jason. I currently PAY for cable and dont plan to change that. But i do own a extra SB5101 and would love to learn how to develop firmware for it. I currently know PIC, ARM, FPGA(SMALL AMOUNT) and some other things like C,C++,C# and some ASM.

I would love to learn what ever i can to create custom firmware and just learn really. Any pointers on what i should read up on and what programs might help. I dont need download links but links to more info would be great. Who knows... if i learn enough i might be the next person to create some neat firmware.

I have a website also. I only post small things there. Im not allowed to post on other projects or jobs i do, mainly because of NDAs (Non-Disclosure Agreements). So any suggestions would be nice.

I have a Parallel JTAG and already have Haxorware running... cloned my friends MAC from a few blocks down and it works ... but since i pay for service anyway, I have no need to use it all the time.

Thanks in advance!

SB6120 w/ dropbear and busybox and ??

Fri, 16 Dec 2011 04:07:35 +0000

My girlfriend (who knows I "fiddle with cable box things") buys me a used SB6120 off E-bay for Christmas.

So I get my shiny newish SB6120 subbed, but every few hours it drops. So I start by checking the help and logs

Help:
Model Name: SB6120
Vendor Name: Motorola
Firmware Name: SB612X-1.0.3.0-SCM03-NOSH
Boot Version: PSPU-Boot 1.0.0.4m1
Hardware Version: 3.0
Serial Number: (removed)
Firmware Build Time: May 18 2009 14:46:47

The firmware is way out of date...

Dec 15 2011 10:26:49 4-Error E106.0 SW upgrade Failed before download - TFTP Max Retry Exceeded
Dec 15 2011 10:26:49 4-Error E105.0 SW upgrade Failed before download - File not Present
Dec 15 2011 10:26:27 6-Notice E102.0 SW Download INIT - Via Config file d11_m_sb6120_silver_c01.c
Dec 15 2011 10:26:26 6-Notice I401.0 TLV-11 - unrecognized OID;CM-MAC=(Removed);CMTS-MAC=(Removed);CM-QOS=1.1;CM-VER=3.0;

So, I'm like WTF? Why isn't my firmware upgrading? Someone owned it before me so I start to wonder... I try SSH and I get a login prompt. Another WTF... few attempts later...
Login: root
password: sbhacker
and I'm in... At this point I'm thinking it's a modded modem, so I'm throwing commands at it...

# cd /nvram/1/security
# tftp -l cm_cert.cer -p 192.168.100.10
tftp: timeout
tftp: timeout
tftp: timeout
tftp: timeout
tftp: timeout
tftp: last timeout

# ping 192.168.100.10
PING 192.168.100.10 (192.168.100.10): 56 data bytes
64 bytes from 192.168.100.10: icmp_seq=0 ttl=128 time=0.0 ms
64 bytes from 192.168.100.10: icmp_seq=1 ttl=128 time=0.0 ms
64 bytes from 192.168.100.10: icmp_seq=2 ttl=128 time=0.0 ms
64 bytes from 192.168.100.10: icmp_seq=3 ttl=128 time=0.0 ms

Something isn't working right and I just want it to stop dropping.

# rm -rf /nvram/enable_updates
# echo "1" >/nvram/enable_updates
# rm -rf /nvram/disable_fw_update
# echo "0" >/nvram/disable_fw_update
# reboot

In the logs:

Dec 16 2011 01:11:17 4-Error E106.0 SW upgrade Failed before download - TFTP Max Retry Exceeded
Dec 16 2011 01:11:17 4-Error E105.0 SW upgrade Failed before download - File not Present
Dec 16 2011 01:10:55 6-Notice E102.0 SW Download INIT - Via Config file d11_m_sb6120_silver_c01.c
Dec 16 2011 01:10:54 6-Notice I401.0 TLV-11 - unrecognized OID;CM-MAC=(removed);CMTS-MAC=(removed);CM-QOS=1.1;CM-VER=3.0;

So, it still didn't overwrite the firmware.

I look around a little more

# /usr/sbin/cli
Console, CLI version 1.0.0.5
mainMenu> system
system> startup
startup> show

Current Startup Settings
========================
Automatic startup: Enabled
Current startup script filename: /etc/scripts/sys_startup.sh

# cat /etc/scripts/sys_startup.sh
#!/bin/sh

runall -U 4 -D 4

Any thoughts or CLI command suggestions to get to factory?

U10C035 certs backup/restore question

Fri, 16 Dec 2011 02:56:06 +0000

First and foremost thanks in advance for taking the time to read, and hopefully answer my questions.

Under normal circumstances I wouldn't post a question, I have always found my answers by reading through the forums for the last year and a half. I have a u10c035 subbed, but owned by me. I have successfully flashed forceware 1.1r12. But I believe I have a cert issue.

what I have done:
8mb dump
flashed noisy bootloader(which I dont think was necesary)
flashed forceware to UBFI1 (using usbjtagnt)
unsquashed dump found:
ambit_mfg_cert.cer
euro_mfg_cert.cer
mfg_cert.cer
euro_root_pub_key.bin
root_pub_key.bin
the files were found in /etc/docsis/security

now my understanding was if the modem already had good certs, I wouldnt have to "restore" certs. I could be wrong, just what I interpreted.

looking into the filesystem of forceware under /nvram/1/security (could be wrong just thinking of the top of my head) I see links to certs in /etc/docsis/security

what the modem does:
even though the US(upstream) light stays out, I have verified cable sync through status page. I have 4 downstream channels, and one usable upstream channel.

I havent noticed any auth-reject messages in log
It never gets a wan address, it stays on 192.168.100.20

Modem status:pre_registration

according to this post http://www.sbhacker....om-puma5-dumps/

my certs should be in /etc/certs and the file names should be:
mtacertReplaceMe.cer
mtacertReplaceMe.bin

but I found them in /etc/docsis/security with totally different names

Solutions Tried

So I flashed modem back to stock
verified internet access
flashed a full sb6120 dump( as recommended in a post I read)
then flashed forceware back to ubf1 and still no dice.

I did verify tuner settings, selected U10C035 in both slots as my actual modem and as the model for certs.

Can somebody please point me in the right direction, if it matters i'm on comcrap, Bpi is enabled(bpi bypass hasnt worked in this area for about 9 months)

Once again, thanks in advance, I really do appreciate the help.

Finding the max download/upload speed of your node regardless of modem.

Wed, 14 Dec 2011 21:02:08 +0000

Is it possible to find the max download/upload speed of your line regardless of the modem you are using? Just to know if you are getting the full speed with whatever config you might be using.

AMBIT U10C019 modem wireless ROUTER

Mon, 12 Dec 2011 05:01:40 +0000

Does anyone know where the jtag points are on this machine. If there's no jtag connection what flash chip can be targeted? The chip is BCM3349KPBG so I'm hoping Haxoware will work fine on it. Thank you for your input

Attached Thumbnails

Sigma 1.06 on a SB5100

Mon, 05 Dec 2011 15:54:39 +0000

I have a subbed SB5100 with Sigma 1.06 installed and it won't work now on Comcast Detroit. Flashing it back to stock works. Can anyone point me in the right direction to get it working with Sigma or another software? Thanks

Telnet Log Help!

Sat, 26 Nov 2011 17:07:02 +0000

Can someone help me out I'm still trying to figure out whats wrong with it. Thanks.

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2011.11.01 20:50:11 =~=~=~=~=~=~=~=~=~=~=~=
Haxorware integrated telnet daemon

Username: root
Password: *****
Welcome.

Running the system...

BcmCmDocsisStatusEventCodes::kCmIsNotOperational
CamDeleteAddress: Deleted address from cam segment 0

CM> Non-Vol Settings successfully written to the device.

@@@@@ In ResetRngState, fRemainingInitRngPowerSteps 17

mot_scanList: Setting override freq @ 7000000
Scanning DS Channel at 7000000 Hz... (Initial target freq)

mot_scanList: Setting override freq @ 0
Favorite[1].freq = 711000000
Attempting Downstream FEC lock @ freq= 711000000 Hz, QAM64/256

******************************************
DOWNSTREAM STATUS
******************************************
Tuner Frequency = 711000000 Hz
Carrier Offset = 0 Hz
Symbol rate = 5360537 sym/sec
SNR = 34 dB
QAM Mode = QAM256
Tuner AGC = 0xfff00000
IF AGC = 0x17bc176c
Power Level = -7 dB
QAM = LOCKED
FEC = LOCKED
******************************************

CM> Non-Vol Settings successfully written to the device.

@@@@@ In ResetRngState, fRemainingInitRngPowerSteps 17

mot_scanList: Setting override freq @ 651000000
Scanning DS Channel at 651000000 Hz... (Initial target freq)

******************************************
DOWNSTREAM STATUS
******************************************
Tuner Frequency = 651000000 Hz
Carrier Offset = 1 Hz
Symbol rate = 5360537 sym/sec
SNR = 35 dB
QAM Mode = QAM256
Tuner AGC = 0xfff00000
IF AGC = 0x17bb0624
Power Level = -7 dB
QAM = LOCKED
FEC = LOCKED
******************************************

CM> Selecting UCD for Us Channel 7

RNG-RSP Adj: tim=1778 power=0 freq=0 Stat=Continue

RNG-RSP Adj: tim=0 power=0 freq=0 Stat=Continue

RNG-RSP Adj: tim=0 power=0 freq=0 Stat=Success

******************************************
UPSTREAM STATUS
******************************************
Upstream Status = UP
Upstream Channel = 7
Upstream Frequency = 36200000 Hz
Upstream Power = 45 dBmV
Ranging SID = 0x137b
Upstream Symbol Rate = 5120000 sym/sec
******************************************

Starting IP Initialization with DHCP...

CM> ARPing for default GW IP = x.x.x.x
MAC = x:x:x:x:x:x
DHCP completed successfully!
DHCP: IP address = x.x.x.x

Starting Time Of Day...
Current system time -> Tue Nov 01 19:51:04 2011

System start time -> Tue Nov 01 19:49:45 2011

Starting Tftp of configuration file...
Resuming SNMP Thread
tftp-enforce bypass is DISABLED
Storing received cfg of size 8044 to memory
TLV-11[1]: 1.3.6.1.2.1.69.1.3.3.0 -> 2 (i32)
TLV-11[2]: 1.3.6.1.2.1.69.1.2.1.2.1 -> 68.85.0.0
TLV-11[3]: 1.3.6.1.2.1.69.1.2.1.3.1 -> 255.255.0.0
TLV-11[4]: 1.3.6.1.2.1.69.1.2.1.4.1 -> hDaFHJG7
TLV-11[5]: 1.3.6.1.2.1.69.1.2.1.5.1 -> 3 (i32)
TLV-11[6]: 1.3.6.1.2.1.69.1.2.1.6.1 -> HEX:40 00
TLV-11[7]: 1.3.6.1.2.1.69.1.2.1.7.1 -> 4 (i32)
TLV-11[8]: 1.3.6.1.2.1.69.1.2.1.2.2 -> 68.86.0.0
TLV-11[9]: 1.3.6.1.2.1.69.1.2.1.3.2 -> 255.254.0.0
TLV-11[10]: 1.3.6.1.2.1.69.1.2.1.4.2 -> hDaFHJG7
TLV-11[11]: 1.3.6.1.2.1.69.1.2.1.5.2 -> 3 (i32)
TLV-11[12]: 1.3.6.1.2.1.69.1.2.1.6.2 -> HEX:40 00
TLV-11[13]: 1.3.6.1.2.1.69.1.2.1.7.2 -> 4 (i32)
TLV-11[14]: 1.3.6.1.2.1.69.1.2.1.2.3 -> 69.252.0.0
TLV-11[15]: 1.3.6.1.2.1.69.1.2.1.3.3 -> 255.255.0.0
TLV-11[16]: 1.3.6.1.2.1.69.1.2.1.4.3 -> hDaFHJG7
TLV-11[17]: 1.3.6.1.2.1.69.1.2.1.5.3 -> 3 (i32)
TLV-11[18]: 1.3.6.1.2.1.69.1.2.1.6.3 -> HEX:40 00
TLV-11[19]: 1.3.6.1.2.1.69.1.2.1.7.3 -> 4 (i32)
TLV-11[20]: 1.3.6.1.2.1.69.1.2.1.2.4 -> 76.96.0.0
TLV-11[21]: 1.3.6.1.2.1.69.1.2.1.3.4 -> 255.255.128.0
TLV-11[22]: 1.3.6.1.2.1.69.1.2.1.4.4 -> hDaFHJG7
TLV-11[23]: 1.3.6.1.2.1.69.1.2.1.5.4 -> 3 (i32)
TLV-11[24]: 1.3.6.1.2.1.69.1.2.1.6.4 -> HEX:40 00
TLV-11[25]: 1.3.6.1.2.1.69.1.2.1.7.4 -> 4 (i32)
TLV-11[26]: 1.3.6.1.2.1.69.1.2.1.2.5 -> 69.241.0.0
TLV-11[27]: 1.3.6.1.2.1.69.1.2.1.3.5 -> 255.255.128.0
TLV-11[28]: 1.3.6.1.2.1.69.1.2.1.4.5 -> hDaFHJG7
TLV-11[29]: 1.3.6.1.2.1.69.1.2.1.5.5 -> 3 (i32)
TLV-11[30]: 1.3.6.1.2.1.69.1.2.1.6.5 -> HEX:40 00
TLV-11[31]: 1.3.6.1.2.1.69.1.2.1.7.5 -> 4 (i32)
TLV-11[32]: 1.3.6.1.2.1.69.1.2.1.2.6 -> 172.16.0.0
TLV-11[33]: 1.3.6.1.2.1.69.1.2.1.3.6 -> 255.240.0.0
TLV-11[34]: 1.3.6.1.2.1.69.1.2.1.4.6 -> hDaFHJG7
TLV-11[35]: 1.3.6.1.2.1.69.1.2.1.5.6 -> 3 (i32)
TLV-11[36]: 1.3.6.1.2.1.69.1.2.1.6.6 -> HEX:40 00
TLV-11[37]: 1.3.6.1.2.1.69.1.2.1.7.6 -> 4 (i32)
TLV-11[38]: 1.3.6.1.2.1.69.1.2.1.2.7 -> 24.40.0.0
TLV-11[39]: 1.3.6.1.2.1.69.1.2.1.3.7 -> 255.255.192.0
TLV-11[40]: 1.3.6.1.2.1.69.1.2.1.4.7 -> hDaFHJG7
TLV-11[41]: 1.3.6.1.2.1.69.1.2.1.5.7 -> 3 (i32)
TLV-11[42]: 1.3.6.1.2.1.69.1.2.1.6.7 -> HEX:40 00
TLV-11[43]: 1.3.6.1.2.1.69.1.2.1.7.7 -> 4 (i32)
TLV-11[44]: 1.3.6.1.2.1.69.1.2.1.2.8 -> 24.40.64.0
TLV-11[45]: 1.3.6.1.2.1.69.1.2.1.3.8 -> 255.255.240.0
TLV-11[46]: 1.3.6.1.2.1.69.1.2.1.4.8 -> hDaFHJG7
TLV-11[47]: 1.3.6.1.2.1.69.1.2.1.5.8 -> 3 (i32)
TLV-11[48]: 1.3.6.1.2.1.69.1.2.1.6.8 -> HEX:40 00
TLV-11[49]: 1.3.6.1.2.1.69.1.2.1.7.8 -> 4 (i32)
TLV-11[50]: 1.3.6.1.2.1.69.1.2.1.2.9 -> 147.191.0.0
TLV-11[51]: 1.3.6.1.2.1.69.1.2.1.3.9 -> 255.255.0.0
TLV-11[52]: 1.3.6.1.2.1.69.1.2.1.4.9 -> hDaFHJG7
TLV-11[53]: 1.3.6.1.2.1.69.1.2.1.5.9 -> 3 (i32)
TLV-11[54]: 1.3.6.1.2.1.69.1.2.1.6.9 -> HEX:40 00
TLV-11[55]: 1.3.6.1.2.1.69.1.2.1.7.9 -> 4 (i32)
TLV-11[56]: 1.3.6.1.2.1.69.1.2.1.2.10 -> 165.137.0.0
TLV-11[57]: 1.3.6.1.2.1.69.1.2.1.3.10 -> 255.255.0.0
TLV-11[58]: 1.3.6.1.2.1.69.1.2.1.4.10 -> hDaFHJG7
TLV-11[59]: 1.3.6.1.2.1.69.1.2.1.5.10 -> 3 (i32)
TLV-11[60]: 1.3.6.1.2.1.69.1.2.1.6.10 -> HEX:40 00
TLV-11[61]: 1.3.6.1.2.1.69.1.2.1.7.10 -> 4 (i32)
TLV-11[62]: 1.3.6.1.2.1.69.1.2.1.2.11 -> 169.152.0.0
TLV-11[63]: 1.3.6.1.2.1.69.1.2.1.3.11 -> 255.255.0.0
TLV-11[64]: 1.3.6.1.2.1.69.1.2.1.4.11 -> hDaFHJG7
TLV-11[65]: 1.3.6.1.2.1.69.1.2.1.5.11 -> 3 (i32)
TLV-11[66]: 1.3.6.1.2.1.69.1.2.1.6.11 -> HEX:40 00
TLV-11[67]: 1.3.6.1.2.1.69.1.2.1.7.11 -> 4 (i32)
TLV-11[68]: 1.3.6.1.2.1.69.1.2.1.2.12 -> 10.32.0.0
TLV-11[69]: 1.3.6.1.2.1.69.1.2.1.3.12 -> 255.252.0.0
TLV-11[70]: 1.3.6.1.2.1.69.1.2.1.4.12 -> hDaFHJG7
TLV-11[71]: 1.3.6.1.2.1.69.1.2.1.5.12 -> 3 (i32)
TLV-11[72]: 1.3.6.1.2.1.69.1.2.1.6.12 -> HEX:40 00
TLV-11[73]: 1.3.6.1.2.1.69.1.2.1.7.12 -> 4 (i32)
TLV-11[74]: 1.3.6.1.2.1.69.1.6.1.0 -> 1 (i32)
TLV-11[75]: 1.3.6.1.2.1.69.1.6.3.0 -> 2 (i32)
TLV-11[76]: 1.3.6.1.2.1.69.1.6.2.1.2.12 -> 4 (i32)
TLV-11[77]: 1.3.6.1.2.1.69.1.6.2.1.3.12 -> 0 (i32)
TLV-11[78]: 1.3.6.1.2.1.69.1.6.2.1.4.12 -> 1 (i32)
TLV-11[79]: 1.3.6.1.2.1.69.1.6.2.1.5.12 -> 2048 (i32)
TLV-11[80]: 1.3.6.1.2.1.69.1.6.2.1.2.13 -> 4 (i32)
TLV-11[81]: 1.3.6.1.2.1.69.1.6.2.1.3.13 -> 0 (i32)
TLV-11[82]: 1.3.6.1.2.1.69.1.6.2.1.4.13 -> 1 (i32)
TLV-11[83]: 1.3.6.1.2.1.69.1.6.2.1.5.13 -> 2054 (i32)
TLV-11[84]: 1.3.6.1.2.1.69.1.6.2.1.2.14 -> 4 (i32)
TLV-11[85]: 1.3.6.1.2.1.69.1.6.2.1.3.14 -> 0 (i32)
TLV-11[86]: 1.3.6.1.2.1.69.1.6.2.1.4.14 -> 1 (i32)
TLV-11[87]: 1.3.6.1.2.1.69.1.6.2.1.5.14 -> 34525 (i32)
TLV-11[88]: 1.3.6.1.2.1.69.1.6.4.1.2.36 -> 4 (i32)
TLV-11[89]: 1.3.6.1.2.1.69.1.6.4.1.5.36 -> 3 (i32)
TLV-11[90]: 1.3.6.1.2.1.69.1.6.4.1.11.36 -> 6 (i32)
TLV-11[91]: 1.3.6.1.2.1.69.1.6.4.1.12.36 -> 25 (i32)
TLV-11[92]: 1.3.6.1.2.1.69.1.6.4.1.13.36 -> 25 (i32)
TLV-11[93]: 1.3.6.1.2.1.69.1.6.4.1.2.37 -> 4 (i32)
TLV-11[94]: 1.3.6.1.2.1.69.1.6.4.1.5.37 -> 3 (i32)
TLV-11[95]: 1.3.6.1.2.1.69.1.6.4.1.11.37 -> 17 (i32)
TLV-11[96]: 1.3.6.1.2.1.69.1.6.4.1.12.37 -> 520 (i32)
TLV-11[97]: 1.3.6.1.2.1.69.1.6.4.1.13.37 -> 520 (i32)
TLV-11[98]: 1.3.6.1.2.1.69.1.6.4.1.2.38 -> 4 (i32)
TLV-11[99]: 1.3.6.1.2.1.69.1.6.4.1.3.38 -> 1 (i32)
TLV-11[100]: 1.3.6.1.2.1.69.1.6.4.1.4.38 -> 1 (i32)
TLV-11[101]: 1.3.6.1.2.1.69.1.6.4.1.5.38 -> 2 (i32)
TLV-11[102]: 1.3.6.1.2.1.69.1.6.4.1.6.38 -> 2 (i32)
TLV-11[103]: 1.3.6.1.2.1.69.1.6.4.1.7.38 -> 0.0.0.0
TLV-11[104]: 1.3.6.1.2.1.69.1.6.4.1.8.38 -> 0.0.0.0
TLV-11[105]: 1.3.6.1.2.1.69.1.6.4.1.9.38 -> 10.0.0.0
TLV-11[106]: 1.3.6.1.2.1.69.1.6.4.1.10.38 -> 255.0.0.0
TLV-11[107]: 1.3.6.1.2.1.69.1.6.4.1.11.38 -> 256 (i32)
TLV-11[108]: 1.3.6.1.2.1.69.1.6.4.1.12.38 -> 1 (i32)
TLV-11[109]: 1.3.6.1.2.1.69.1.6.4.1.13.38 -> 65535 (i32)
TLV-11[110]: 1.3.6.1.2.1.69.1.6.4.1.14.38 -> 1 (i32)
TLV-11[111]: 1.3.6.1.2.1.69.1.6.4.1.15.38 -> 65535 (i32)
TLV-11[112]: 1.3.6.1.2.1.69.1.6.4.1.2.39 -> 4 (i32)
TLV-11[113]: 1.3.6.1.2.1.69.1.6.4.1.3.39 -> 2 (i32)
TLV-11[114]: 1.3.6.1.2.1.69.1.6.4.1.4.39 -> 1 (i32)
TLV-11[115]: 1.3.6.1.2.1.69.1.6.4.1.5.39 -> 2 (i32)
TLV-11[116]: 1.3.6.1.2.1.69.1.6.4.1.6.39 -> 2 (i32)
TLV-11[117]: 1.3.6.1.2.1.69.1.6.4.1.7.39 -> 0.0.0.0
TLV-11[118]: 1.3.6.1.2.1.69.1.6.4.1.8.39 -> 0.0.0.0
TLV-11[119]: 1.3.6.1.2.1.69.1.6.4.1.9.39 -> 0.0.0.0
TLV-11[120]: 1.3.6.1.2.1.69.1.6.4.1.10.39 -> 0.0.0.0
TLV-11[121]: 1.3.6.1.2.1.69.1.6.4.1.11.39 -> 256 (i32)
TLV-11[122]: 1.3.6.1.2.1.69.1.6.4.1.12.39 -> 1 (i32)
TLV-11[123]: 1.3.6.1.2.1.69.1.6.4.1.13.39 -> 65535 (i32)
TLV-11[124]: 1.3.6.1.2.1.69.1.6.4.1.14.39 -> 1 (i32)
TLV-11[125]: 1.3.6.1.2.1.69.1.6.4.1.15.39 -> 65535 (i32)
TLV-11[126]: 1.3.6.1.2.1.69.1.6.4.1.2.40 -> 4 (i32)
TLV-11[127]: 1.3.6.1.2.1.69.1.6.4.1.3.40 -> 2 (i32)
TLV-11[128]: 1.3.6.1.2.1.69.1.6.4.1.4.40 -> 1 (i32)
TLV-11[129]: 1.3.6.1.2.1.69.1.6.4.1.5.40 -> 1 (i32)
TLV-11[130]: 1.3.6.1.2.1.69.1.6.4.1.6.40 -> 2 (i32)
TLV-11[131]: 1.3.6.1.2.1.69.1.6.4.1.7.40 -> 0.0.0.0
TLV-11[132]: 1.3.6.1.2.1.69.1.6.4.1.8.40 -> 0.0.0.0
TLV-11[133]: 1.3.6.1.2.1.69.1.6.4.1.9.40 -> 172.16.0.0
TLV-11[134]: 1.3.6.1.2.1.69.1.6.4.1.10.40 -> 255.240.0.0
TLV-11[135]: 1.3.6.1.2.1.69.1.6.4.1.11.40 -> 17 (i32)
TLV-11[136]: 1.3.6.1.2.1.69.1.6.4.1.12.40 -> 1 (i32)
TLV-11[137]: 1.3.6.1.2.1.69.1.6.4.1.13.40 -> 65535 (i32)
TLV-11[138]: 1.3.6.1.2.1.69.1.6.4.1.14.40 -> 67 (i32)
TLV-11[139]: 1.3.6.1.2.1.69.1.6.4.1.15.40 -> 67 (i32)
TLV-11[140]: 1.3.6.1.2.1.69.1.6.4.1.2.41 -> 4 (i32)
TLV-11[141]: 1.3.6.1.2.1.69.1.6.4.1.3.41 -> 2 (i32)
TLV-11[142]: 1.3.6.1.2.1.69.1.6.4.1.4.41 -> 1 (i32)
TLV-11[143]: 1.3.6.1.2.1.69.1.6.4.1.5.41 -> 1 (i32)
TLV-11[144]: 1.3.6.1.2.1.69.1.6.4.1.6.41 -> 2 (i32)
TLV-11[145]: 1.3.6.1.2.1.69.1.6.4.1.7.41 -> 0.0.0.0
TLV-11[146]: 1.3.6.1.2.1.69.1.6.4.1.8.41 -> 0.0.0.0
TLV-11[147]: 1.3.6.1.2.1.69.1.6.4.1.9.41 -> 68.80.0.0
TLV-11[148]: 1.3.6.1.2.1.69.1.6.4.1.10.41 -> 255.248.0.0
TLV-11[149]: 1.3.6.1.2.1.69.1.6.4.1.11.41 -> 6 (i32)
TLV-11[150]: 1.3.6.1.2.1.69.1.6.4.1.12.41 -> 1 (i32)
TLV-11[151]: 1.3.6.1.2.1.69.1.6.4.1.13.41 -> 65535 (i32)
TLV-11[152]: 1.3.6.1.2.1.69.1.6.4.1.14.41 -> 80 (i32)
TLV-11[153]: 1.3.6.1.2.1.69.1.6.4.1.15.41 -> 80 (i32)
TLV-11[154]: 1.3.6.1.2.1.69.1.6.4.1.2.42 -> 4 (i32)
TLV-11[155]: 1.3.6.1.2.1.69.1.6.4.1.3.42 -> 2 (i32)
TLV-11[156]: 1.3.6.1.2.1.69.1.6.4.1.4.42 -> 1 (i32)
TLV-11[157]: 1.3.6.1.2.1.69.1.6.4.1.5.42 -> 1 (i32)
TLV-11[158]: 1.3.6.1.2.1.69.1.6.4.1.6.42 -> 2 (i32)
TLV-11[159]: 1.3.6.1.2.1.69.1.6.4.1.7.42 -> 0.0.0.0
TLV-11[160]: 1.3.6.1.2.1.69.1.6.4.1.8.42 -> 0.0.0.0
TLV-11[161]: 1.3.6.1.2.1.69.1.6.4.1.9.42 -> 68.87.0.0
TLV-11[162]: 1.3.6.1.2.1.69.1.6.4.1.10.42 -> 255.255.0.0
TLV-11[163]: 1.3.6.1.2.1.69.1.6.4.1.11.42 -> 256 (i32)
TLV-11[164]: 1.3.6.1.2.1.69.1.6.4.1.12.42 -> 1 (i32)
TLV-11[165]: 1.3.6.1.2.1.69.1.6.4.1.13.42 -> 65535 (i32)
TLV-11[166]: 1.3.6.1.2.1.69.1.6.4.1.14.42 -> 1 (i32)
TLV-11[167]: 1.3.6.1.2.1.69.1.6.4.1.15.42 -> 65535 (i32)
TLV-11[168]: 1.3.6.1.2.1.69.1.6.4.1.2.43 -> 4 (i32)
TLV-11[169]: 1.3.6.1.2.1.69.1.6.4.1.3.43 -> 2 (i32)
TLV-11[170]: 1.3.6.1.2.1.69.1.6.4.1.4.43 -> 1 (i32)
TLV-11[171]: 1.3.6.1.2.1.69.1.6.4.1.5.43 -> 1 (i32)
TLV-11[172]: 1.3.6.1.2.1.69.1.6.4.1.6.43 -> 2 (i32)
TLV-11[173]: 1.3.6.1.2.1.69.1.6.4.1.7.43 -> 0.0.0.0
TLV-11[174]: 1.3.6.1.2.1.69.1.6.4.1.8.43 -> 0.0.0.0
TLV-11[175]: 1.3.6.1.2.1.69.1.6.4.1.9.43 -> 68.32.0.0
TLV-11[176]: 1.3.6.1.2.1.69.1.6.4.1.10.43 -> 255.224.0.0
TLV-11[177]: 1.3.6.1.2.1.69.1.6.4.1.11.43 -> 6 (i32)
TLV-11[178]: 1.3.6.1.2.1.69.1.6.4.1.12.43 -> 1 (i32)
TLV-11[179]: 1.3.6.1.2.1.69.1.6.4.1.13.43 -> 65535 (i32)
TLV-11[180]: 1.3.6.1.2.1.69.1.6.4.1.14.43 -> 80 (i32)
TLV-11[181]: 1.3.6.1.2.1.69.1.6.4.1.15.43 -> 80 (i32)
TLV-11[182]: 1.3.6.1.2.1.69.1.6.4.1.2.44 -> 4 (i32)
TLV-11[183]: 1.3.6.1.2.1.69.1.6.4.1.3.44 -> 2 (i32)
TLV-11[184]: 1.3.6.1.2.1.69.1.6.4.1.4.44 -> 2 (i32)
TLV-11[185]: 1.3.6.1.2.1.69.1.6.4.1.5.44 -> 2 (i32)
TLV-11[186]: 1.3.6.1.2.1.69.1.6.4.1.6.44 -> 2 (i32)
TLV-11[187]: 1.3.6.1.2.1.69.1.6.4.1.7.44 -> 0.0.0.0
TLV-11[188]: 1.3.6.1.2.1.69.1.6.4.1.8.44 -> 0.0.0.0
TLV-11[189]: 1.3.6.1.2.1.69.1.6.4.1.9.44 -> 68.80.0.0
TLV-11[190]: 1.3.6.1.2.1.69.1.6.4.1.10.44 -> 255.248.0.0
TLV-11[191]: 1.3.6.1.2.1.69.1.6.4.1.11.44 -> 6 (i32)
TLV-11[192]: 1.3.6.1.2.1.69.1.6.4.1.12.44 -> 1 (i32)
TLV-11[193]: 1.3.6.1.2.1.69.1.6.4.1.13.44 -> 65535 (i32)
TLV-11[194]: 1.3.6.1.2.1.69.1.6.4.1.14.44 -> 80 (i32)
TLV-11[195]: 1.3.6.1.2.1.69.1.6.4.1.15.44 -> 80 (i32)
TLV-11[196]: 1.3.6.1.2.1.69.1.6.4.1.2.45 -> 4 (i32)
TLV-11[197]: 1.3.6.1.2.1.69.1.6.4.1.3.45 -> 2 (i32)
TLV-11[198]: 1.3.6.1.2.1.69.1.6.4.1.4.45 -> 0 (i32)
TLV-11[199]: 1.3.6.1.2.1.69.1.6.4.1.5.45 -> 3 (i32)
TLV-11[200]: 1.3.6.1.2.1.69.1.6.4.1.6.45 -> 1 (i32)
TLV-11[201]: 1.3.6.1.2.1.69.1.6.4.1.7.45 -> 0.0.0.0
TLV-11[202]: 1.3.6.1.2.1.69.1.6.4.1.8.45 -> 0.0.0.0
TLV-11[203]: 1.3.6.1.2.1.69.1.6.4.1.9.45 -> 0.0.0.0
TLV-11[204]: 1.3.6.1.2.1.69.1.6.4.1.10.45 -> 0.0.0.0
TLV-11[205]: 1.3.6.1.2.1.69.1.6.4.1.2.46 -> 4 (i32)
TLV-11[206]: 1.3.6.1.2.1.69.1.6.4.1.3.46 -> 2 (i32)
TLV-11[207]: 1.3.6.1.2.1.69.1.6.4.1.4.46 -> 2 (i32)
TLV-11[208]: 1.3.6.1.2.1.69.1.6.4.1.5.46 -> 1 (i32)
TLV-11[209]: 1.3.6.1.2.1.69.1.6.4.1.6.46 -> 2 (i32)
TLV-11[210]: 1.3.6.1.2.1.69.1.6.4.1.7.46 -> 0.0.0.0
TLV-11[211]: 1.3.6.1.2.1.69.1.6.4.1.8.46 -> 0.0.0.0
TLV-11[212]: 1.3.6.1.2.1.69.1.6.4.1.9.46 -> 0.0.0.0
TLV-11[213]: 1.3.6.1.2.1.69.1.6.4.1.10.46 -> 0.0.0.0
TLV-11[214]: 1.3.6.1.2.1.69.1.6.4.1.11.46 -> 256 (i32)
TLV-11[215]: 1.3.6.1.2.1.69.1.6.4.1.12.46 -> 1 (i32)
TLV-11[216]: 1.3.6.1.2.1.69.1.6.4.1.13.46 -> 65535 (i32)
TLV-11[217]: 1.3.6.1.2.1.69.1.6.4.1.14.46 -> 1 (i32)
TLV-11[218]: 1.3.6.1.2.1.69.1.6.4.1.15.46 -> 65535 (i32)
TLV-11[219]: 1.3.6.1.2.1.69.1.6.4.1.2.50 -> 4 (i32)
TLV-11[220]: 1.3.6.1.2.1.69.1.6.4.1.3.50 -> 2 (i32)
TLV-11[221]: 1.3.6.1.2.1.69.1.6.4.1.4.50 -> 2 (i32)
TLV-11[222]: 1.3.6.1.2.1.69.1.6.4.1.5.50 -> 2 (i32)
TLV-11[223]: 1.3.6.1.2.1.69.1.6.4.1.6.50 -> 2 (i32)
TLV-11[224]: 1.3.6.1.2.1.69.1.6.4.1.7.50 -> 0.0.0.0
TLV-11[225]: 1.3.6.1.2.1.69.1.6.4.1.8.50 -> 0.0.0.0
TLV-11[226]: 1.3.6.1.2.1.69.1.6.4.1.9.50 -> 172.16.0.0
TLV-11[227]: 1.3.6.1.2.1.69.1.6.4.1.10.50 -> 255.240.0.0
TLV-11[228]: 1.3.6.1.2.1.69.1.6.4.1.11.50 -> 17 (i32)
TLV-11[229]: 1.3.6.1.2.1.69.1.6.4.1.12.50 -> 1 (i32)
TLV-11[230]: 1.3.6.1.2.1.69.1.6.4.1.13.50 -> 65535 (i32)
TLV-11[231]: 1.3.6.1.2.1.69.1.6.4.1.14.50 -> 67 (i32)
TLV-11[232]: 1.3.6.1.2.1.69.1.6.4.1.15.50 -> 67 (i32)
TLV-11[233]: 1.3.6.1.2.1.69.1.6.4.1.2.55 -> 4 (i32)
TLV-11[234]: 1.3.6.1.2.1.69.1.6.4.1.3.55 -> 2 (i32)
TLV-11[235]: 1.3.6.1.2.1.69.1.6.4.1.4.55 -> 2 (i32)
TLV-11[236]: 1.3.6.1.2.1.69.1.6.4.1.5.55 -> 2 (i32)
TLV-11[237]: 1.3.6.1.2.1.69.1.6.4.1.6.55 -> 2 (i32)
TLV-11[238]: 1.3.6.1.2.1.69.1.6.4.1.7.55 -> 0.0.0.0
TLV-11[239]: 1.3.6.1.2.1.69.1.6.4.1.8.55 -> 0.0.0.0
TLV-11[240]: 1.3.6.1.2.1.69.1.6.4.1.9.55 -> 68.32.0.0
TLV-11[241]: 1.3.6.1.2.1.69.1.6.4.1.10.55 -> 255.224.0.0
TLV-11[242]: 1.3.6.1.2.1.69.1.6.4.1.11.55 -> 6 (i32)
TLV-11[243]: 1.3.6.1.2.1.69.1.6.4.1.12.55 -> 1 (i32)
TLV-11[244]: 1.3.6.1.2.1.69.1.6.4.1.13.55 -> 65535 (i32)
TLV-11[245]: 1.3.6.1.2.1.69.1.6.4.1.14.55 -> 80 (i32)
TLV-11[246]: 1.3.6.1.2.1.69.1.6.4.1.15.55 -> 80 (i32)
TLV-11[247]: 1.3.6.1.2.1.69.1.6.4.1.2.56 -> 4 (i32)
TLV-11[248]: 1.3.6.1.2.1.69.1.6.4.1.3.56 -> 2 (i32)
TLV-11[249]: 1.3.6.1.2.1.69.1.6.4.1.4.56 -> 2 (i32)
TLV-11[250]: 1.3.6.1.2.1.69.1.6.4.1.5.56 -> 2 (i32)
TLV-11[251]: 1.3.6.1.2.1.69.1.6.4.1.6.56 -> 2 (i32)
TLV-11[252]: 1.3.6.1.2.1.69.1.6.4.1.7.56 -> 0.0.0.0
TLV-11[253]: 1.3.6.1.2.1.69.1.6.4.1.8.56 -> 0.0.0.0
TLV-11[254]: 1.3.6.1.2.1.69.1.6.4.1.9.56 -> 68.87.0.0
TLV-11[255]: 1.3.6.1.2.1.69.1.6.4.1.10.56 -> 255.255.0.0
TLV-11[256]: 1.3.6.1.2.1.69.1.6.4.1.11.56 -> 256 (i32)
TLV-11[257]: 1.3.6.1.2.1.69.1.6.4.1.12.56 -> 1 (i32)
TLV-11[258]: 1.3.6.1.2.1.69.1.6.4.1.13.56 -> 65535 (i32)
TLV-11[259]: 1.3.6.1.2.1.69.1.6.4.1.14.56 -> 1 (i32)
TLV-11[260]: 1.3.6.1.2.1.69.1.6.4.1.15.56 -> 65535 (i32)
TLV-11[261]: 1.3.6.1.4.1.1166.1.19.3.100.5.0 -> 1 (i32) UNKNOWN, ignoring.
TLV-11[262]: 1.3.6.1.4.1.1166.1.19.3.1.50.1.0 -> 1 (i32) UNKNOWN, ignoring.
TLV-11[263]: 1.3.6.1.4.1.1166.1.19.3.1.63.0 -> 1 (i32) UNKNOWN, ignoring.
TLV-11[264]: 1.3.6.1.6.3.18.1.1.1.8.114.101.97.100.119.114.105.116.101 -> 4 (i32)
TLV-11[265]: 1.3.6.1.6.3.18.1.1.1.2.114.101.97.100.119.114.105.116.101 -> hDaFHJG7
TLV-11[266]: 1.3.6.1.6.3.18.1.1.1.3.114.101.97.100.119.114.105.116.101 -> readwritesec
TLV-11[267]: 1.3.6.1.6.3.18.1.1.1.7.114.101.97.100.119.114.105.116.101 -> 2 (i32)
TLV-11[268]: 1.3.6.1.6.3.16.1.2.1.5.1.12.114.101.97.100.119.114.105.116.101.115.101.99 -> 4 (i32)
TLV-11[269]: 1.3.6.1.6.3.16.1.2.1.3.1.12.114.101.97.100.119.114.105.116.101.115.101.99 -> readwritegroup
TLV-11[270]: 1.3.6.1.6.3.16.1.2.1.4.1.12.114.101.97.100.119.114.105.116.101.115.101.99 -> 2 (i32)
TLV-11[271]: 1.3.6.1.6.3.16.1.2.1.5.2.12.114.101.97.100.119.114.105.116.101.115.101.99 -> 4 (i32)
TLV-11[272]: 1.3.6.1.6.3.16.1.2.1.3.2.12.114.101.97.100.119.114.105.116.101.115.101.99 -> readwritegroup
TLV-11[273]: 1.3.6.1.6.3.16.1.2.1.4.2.12.114.101.97.100.119.114.105.116.101.115.101.99 -> 2 (i32)
TLV-11[274]: 1.3.6.1.6.3.16.1.4.1.9.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112.0.1.1 -> 4 (i32)
TLV-11[275]: 1.3.6.1.6.3.16.1.4.1.4.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112.0.1.1 -> 1 (i32)
TLV-11[276]: 1.3.6.1.6.3.16.1.4.1.5.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112.0.1.1 -> docsisManagerView
TLV-11[277]: 1.3.6.1.6.3.16.1.4.1.6.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112.0.1.1 -> docsisManagerView
TLV-11[278]: 1.3.6.1.6.3.16.1.4.1.8.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112.0.1.1 -> 2 (i32)
TLV-11[279]: 1.3.6.1.6.3.16.1.4.1.9.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112.0.2.1 -> 4 (i32)
TLV-11[280]: 1.3.6.1.6.3.16.1.4.1.4.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112.0.2.1 -> 1 (i32)
TLV-11[281]: 1.3.6.1.6.3.16.1.4.1.5.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112.0.2.1 -> docsisManagerView
TLV-11[282]: 1.3.6.1.6.3.16.1.4.1.6.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112.0.2.1 -> docsisManagerView
TLV-11[283]: 1.3.6.1.6.3.16.1.4.1.8.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112.0.2.1 -> 2 (i32)
Time Of Day completed...
SB5101 CM Agent w/ BRCM Factory Support processing TLV-11's
SNMP packet sent to x.x.x.x:x
283 TLV-11's OK.
BPI initialization completed. Calling ConfigOperational().
Enabling network access for all CPE ports.

mot_scanList: Writing to Flash!
BcmCmDocsisStatusEventCodes::kCmIsOperational
Suspending SNMP Thread

Help setting up SB5101 with Scientific Atlanta mac

Fri, 25 Nov 2011 06:37:59 +0000

i bought a brand new sb5101 i currently have scientific atlanta 2100r2 i can post specifics to who ever agrees to help but so far its been hopeless.. keep getting stuck at walledgarden and when it connects and shows operational...soon as i ping anything it resets.

pls help..
ill +karma whoever does

I can't access192.168.100.1:666 any longer

Tue, 22 Nov 2011 04:28:27 +0000

Neither 192.168.100.1:1337 SB5100 Modem.

315rca sB5100MOD 192.168.100.1:666

Anyone have this problem accessing 192.168.100.1:666?

how program arris tm802g with alpha or force????

Sat, 19 Nov 2011 06:03:16 +0000

hi does any one know how program tm802g with alpha or forceware ... i was trying with NT but nothing any idea ... thanks

unstable .. could it because of the node?

Sun, 13 Nov 2011 17:22:54 +0000

Hi, I have a little problem right now with the mac and cert. I got some certs and mac should comes with them, but then its hard to get online with those certs. When I am able to get the mod-modem online, the isp page appears after few mins. Could it because of bad certs and mac?
ps. trying 5100 certs on 5101 and stealth with 5100 specs.

How to connect 2 clients simultaneously for faster internet using ddwrt

Fri, 11 Nov 2011 21:47:58 +0000

I was wondering if there is a way to connect 2 AP's simultaneously using ddwrt in client mode.

Basically connect to multiple AP's and then combine the bandwidth

I have internet at home and also live close enough to work to pick up that signal as well

Thanks!

Need help with a netgear wndr3700 openwrt for multiwan

Mon, 19 Sep 2011 21:59:31 +0000

Currently dd-wrt does not support multiwan for netgear wndr3700. I read that openwrt does but I can't figure out how to set it up. I tried for a few days but too confused in following outdated guides and guides for ddwrt and not openwrt.

Does anyone have the same modem that can help?

Need help with a netgear wndr3700 openwrt for multiwan

Mon, 19 Sep 2011 21:52:54 +0000

How to just change the MAC?

Mon, 19 Sep 2011 03:59:36 +0000

Hi all, I already got Boost Plus with OOL. I also got a SB6120. My plan is to purchase a second SB6120 and then load the valid MAC which I currently got into the new one, so then both can get online and no scanning for others MAC. Will that work and how to just change the MAC? Thanks.

Dirty Cheap Serial Mod to a SB5100 (or other). MC1489

Fri, 16 Sep 2011 03:15:26 +0000

Here's a quick, dirty and cheap way of getting a serial port on a SB5100 or other. It uses an MC1489 quad level shifter (half of a MAX232). The 1489 doesn't need the extra garbage like caps for the charge pump on the MAX232. i bought 4 MC1489's for a dollar, so it's cheap!

Here's a schematic:
.

.
Here's my implementation. Note the chip is upside down and pin 7 (ground) is bent over and soldered directly to the board. I ran a serial cable out a hole I drilled in the back of the modem and used some wire and a tie wrap for strain relief. The signal and cable ground are soldered to an appropriate ground on the board. Vcc for the MC1489 is drawn from U9. The board connections (SB5100) for Rx and Tx go to the pads of U12 (pins 9 and 11).
.
This can easily be implemented on other modems as long as you know where the Rx and Tx connections are. Most modes will have a convenient 5v supply somewhere.
.

.
Here's a look at the U9 Vcc connection:
.

Where to Start?

Wed, 14 Sep 2011 02:51:11 +0000

Hi, I have a modem SB5101 bought from a cable guy. Every time the modem is not working I have to give him $40 to fix it. It was 3 times already.
I just found this website. And I tried to read all the post but it is kind of overwhelming. I do not know where to start.

I am not asking for detail instruction. I just need a start.
I would really appreciate if someone can tell me what topic I need to read. I will research and do it myself.

I know I have to buy a Jtag Cable modem from eBay. That was how I found this website

http://www.ebay.com/...=item335676f804

Quick question: Are this cable and video on the website all I need?

Thanks in advance for all your help.

Where to Start?

Wed, 14 Sep 2011 02:50:38 +0000

config file

Tue, 13 Sep 2011 00:16:21 +0000

I have two haxorware modems...
one is 1.0rc6
the other 1.1 r39

on the one with rc6 to download the current config I can just go to overview and click the file
name under configuration file...
But 1.1 R39 doesnt have the same info there...
Is there a way I can do it on 1.1R39?

thanks

Light pattern question. Is my modem dead?

Mon, 12 Sep 2011 07:53:03 +0000

So I bought my sigma sb5100 used off eBay about 2 years ago and it has been going strong up until this past weak. Lots of random restarts, at first it was about every half hour, but sometimes it would just restart over and over again for hours and then randomly stay on for an hour or more.

Every time it would restart these 4 lights would come on all at the same time for a second or two: receive online activity and standby. The it would proceed to boot through the lights as it should and sometimes it would even get Internet connection for a minute and the restart again.

Now when I plug it in the same 4 lights come on and just stay on... And the modem does absolutely nothing can't even reach the sigma or modem software/ firmware

Is my modem dead? This light pattern seems weird

sb5100mod 1.04 beta help!!!!

Sun, 11 Sep 2011 05:23:06 +0000

i click the wrong buttons and now i cant get in both html and telnet i have a earlier config anyway i can Load Config form TFTP without logging in??? im really trying not to reflash it....

MOD 1.0.4 OPERATIONAL

Wed, 07 Sep 2011 22:44:22 +0000

HI. i just load the mod 1.0.4 after that i set the docsis 1.1 but it still operational. can't force confg file anymore so i'm trying to use a different DNS and nothing work....... what should be the next step..........

Tutorial: Stitch toghter a full Flash file from the Boot Loader and Firmware Files (Image0)

Tue, 06 Sep 2011 14:16:27 +0000

I was tinkering with a bricked SB5100 and wanted to load a full Flash file to it rather than a boot loader then a firmware file. I'm also a bit lazy so I like to start the jtag process and walk away for a while . Using the Linux "dd" command was the simplest way to accomplish this. For windows users, there is a similar program named "rawrite". The Linux command is covered here...

1. Gather up the files you want to stitch together, I used:

SB5100_NOSH.bin (stock full flash, but you modems un-modded backup flash will do)

SB5100MoD.1.0.4.Beta.bin (firmware image)

SIGMAX-BL_v2.6-LITE.bin (boot loader)

2. Get file sizes:

#ls -l

-rw-r--r-- 1 root root   32768 May  9  2005 SIGMAX-BL_v2.6-LITE.bin

-rw-r--r-- 1 root root  971236 Jul 10  2008 SB5100MoD.1.0.4.Beta.bin

-rwxr-xr-x 1 root root 2097152 Sep  3 18:23 SB5100_NOSH.bin

3. We know where the different images reside in the flash memory of our modems but we have to calculate the start/offset bytes and length in decimal where they will be placed when stitching together our flash file.

boot loader starts @ 0x9fc00000 (beginning of flash) length 0x8000 (32768 in decimal)

our start address will be:

zero (at the beginning) and length 32768


image0 starts @ 0x9fc10000 length 0xf0000 (983040 in decimal)

our start address will be:

0x9fc10000 - 0x9fc00000 = 0x10000 = 65536 and  length = 983040


image1 starts @ 0x9fd00000 length 0xf0000 (983040 in decimal)

our start address will be:

0x9fd00000 - 0x9fc00000 = 0x100000 = 1048576 length = 983040

4. run the dd command to add the boot loader:

#dd if=SIGMAX-BL_v2.6-LITE.bin of=SB5100_NOSH.bin obs=1 bs=1 count=32768 conv=notrunc

where if = input file, of = output file, obs = output block size in bytes, bs = block size in bytes, count = count in bytes, and conv = notrunc means to not truncate the file.

5. run the dd command to add image0:

#dd if=SB5100MoD.1.0.4.Beta.bin of=SB5100_NOSH.bin seek=65536 obs=1 bs=1 count=983040 conv=notrunk

where seek=65536 is the offset (start) of image0

6. run the dd command to add image1:

#dd if=SB5100MoD.1.0.4.Beta.bin of=SB5100_NOSH.bin seek=1048576 obs=1 bs=1 count=983040 conv=notrunk

7. Rename the file for good measure:

#mv SB5100_NOSH.bin my_full_flash.bin

8. Flash away!

I did get the modem de-bricked and loaded this file to it. Worked like a charm.

5101 Haxoware downstream ranging with 5100 Certs

Tue, 06 Sep 2011 00:30:09 +0000

I am attempting to inject certs from a 5100 into my 5101 with Haxoware R38 they only issue I am having is that the modem is stuck blinking on the receive light.

Procedure taken was to download 2MB dump from SB5100Mod via Download full Flash memory. Open USBJTAG NT and select SB5100Mod as the target and load the 2MB full flash, save the cfg. Import the saved cfg into Haxoware via the Backup and Restore menu. All the mac numbers and serial number matches up perfectly after restore in Haxoware .Signals seems perfect so I don't think its a signal issue. Not sure what to try next.

Downstream

Receive Power -87.2 dBmV
Signal to Noise ratio 16.5 dB

Error

1970-01-01 00:01:15 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:01:15 Critical T002.0 SYNC Timing Synchronization failure - Failed to acquire FEC framing

Clearing CPE table on SB5101 using Haxorware1.1r39

Mon, 05 Sep 2011 06:12:19 +0000

I was reading Der Engel's book "Hacking the cable modem" and I landed on a topic about CPE IP's. I added a pic in this post. Is there a way to clear the CPE table on an SB5101?

Attached Thumbnails

SB5100MOD unable to issue more than 1 cmd

Mon, 05 Sep 2011 01:28:40 +0000

Hi everybody, I think I can fix this issue by re-flashing, but I still want to confirm with you, that this is what is what I need to do,
It has been running for about 2 years now, on the same R.R. N.C. MAC ( I guess I am lucky ), tried to telnet and check some stuff .. the scan does not stop, the modem is able to accept only 1 command, after that it does not respond to any next cmd - no errmsg, nothing - keeps scanning when coax disconnected.... ( example: it changes the path, but will not accept any other cmd after the first cmd issued )
tried 20 different approaches to stop scanning, or accept more than one command ( i am stubborn ) - it seems like the shell dies after 1st command - only displays output - it's like the input goes to /dev/null after the 1st cmd. Since it is running good, I am not wanting to re-flash, but just fix the shell issue.... is it possible?

paz

ps: I should post this in the 5100MOD section - sorry - can not change...

dpc 2100 r2 won't work in my are

Sun, 04 Sep 2011 16:13:08 +0000

this is what it shows in my vent log its a mod with hoxware revision 39 what should i do ? plz help you guys i have 3 days with out my internet

1970-01-01 00:00:16 Critical D003.0 DHCP WARNING - Non-critical field invalid in response. 1970-01-01 00:00:04 Notice M571.1 Ethernet link up - ready to pass packets 1970-01-01 00:00:24 Critical D003.0 DHCP WARNING - Non-critical field invalid in response. 1970-01-01 00:00:24 Notice M573.0 Modem Is Shutting Down and Rebooting... 1970-01-01 00:00:24 Critical Resetting the cable modem due to docsDevResetNow 2011-09-04 16:06:14 Critical I001.0 REG-RSP - invalid format or not recognized 1970-01-01 00:00:18 Critical D003.0 DHCP WARNING - Non-critical field invalid in response. 1970-01-01 00:00:04 Notice M571.1 Ethernet link up - ready to pass packets 2011-09-04 16:05:41 Notice M573.0 Modem Is Shutting Down and Rebooting... 2011-09-04 16:05:41 Critical R004.0 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance o

dpc 2100 r2 won't work in my are

Sun, 04 Sep 2011 16:12:53 +0000

Connection Issues

Sun, 04 Sep 2011 01:02:47 +0000

Been out for a couple days.

First couple days it was connecting but was operational but no connection. Recently it has just been ranging.

I've attached my telnet log. Thank you,

Attached Files

putty.txt 4.3K 11 downloads

Can not load web gui or telnet into modem

Sat, 03 Sep 2011 02:57:13 +0000

Hello,

I have a sb5100 with sb5100mod and I let it scan my node all day for macs and I stepped out of the house. When I got back I could not load the 192.168.100.1:666 page or telnet into it. Before I left the house I could. Do you think my provider did a firmware update and wiped out sb5100mod? Is that possible?

5100E certs into 5101E

Fri, 02 Sep 2011 00:41:11 +0000

Hi,
sorry, this may sound like a noob question to all of you experts here, but how do I make 5100E certs to work on 5101E. I downloaded all of them with snmpcertthread, both in text and registration entries, but still modem won't come online. Do I have to change something in them, or are they good as is? Thanks

SB5101 down -no connection

Thu, 01 Sep 2011 07:03:01 +0000

Today my 2 SB5101 is down. All light still solid green, PC Activity light flashing fast. But no internet connection.
I tried to reset many time, still no work.
But my other 2 SB5100 still working good when i connect same computer, same cable line .
Anyone could help, please !
At TWC, los angeles

4 of them still working with different mac, cert . Just suddenly, 5101 no work today .
I try to fix, then say " no ip config "

Requirements to Flash CM to Stock

Tue, 30 Aug 2011 04:20:07 +0000

I have a SB5101 which I would like to use as a subbed modem. I am going to flash it back to stock as it currently has HaxorWare. What are the requirements get it online again as a sub? Specifically what firmware should I flash onto the modem and do I need to configure it in any other way? I saw another posted that some of the dumps may be blacklisted by ISPs.

- I have Cox.
- I have provided the CM's information to Cox.

Thanks,

occali - occaliforniabt@gmail.com

MCUmall GQ-4X for SB6120

Mon, 29 Aug 2011 06:46:52 +0000

Hey Guys, I have a GQ-4X burner with a SPI in circuit adapter, will I be able to flash the modem with this hardware or should I use a jtag instead?

MCUmall GQ-4X for SB6120

Mon, 29 Aug 2011 06:46:29 +0000

Hey Guys, I have a GQ-4X burner with a SPI in circuit adapter, will I be able to flash the modem with this hardware or should I use a jtag instead?

Got past and the hoops, made it as far as walledgarden screen - member page of ISP

Mon, 29 Aug 2011 03:23:15 +0000

As the title says, I got past all the errors, broadcast maintenance and software upgrade errors on my SB5101 using haxoware. Now i hit the walledgarden's ISP member page and after trying multiple DNS I still can't get past it.

I've been out of the loop for a while since school kept me busy i hadn't messed with the modem anymore but just had time to kill and went at it. Now I honestly got no idea how to get past this ISP welcome page.

Any suggestions? Please help me. I know there must be someone who knows how to go around this doing something else than just changing DNS.

** Disclaimer, I would rather not say to any members how I managed to do this in south florida to avoid exploitation. I will however disclose it to a moderator or web admin if asked and they can share the info as they see fit.

Thank you

Flash copy or Cert Extract over Network

Sun, 28 Aug 2011 07:09:33 +0000

Fellows,

Is it possible to perform a copy of the volatile (2MB) or full (8MB) flash of the SB5101 while over a private network? In example, PC > Router > Modem.
Alternatively, is it possible to perform a cert extraction over the same network setup?
Must these actions be done while connected via JTAG?

This is on a stock modem.

Respectfully,

occali - occaliforniabt@gmail.com

SB5100 ETHERNET OUT PUT

Sat, 27 Aug 2011 00:49:47 +0000

I BOUGHT A SB5100 AT A YARD SALE AND WELL I MOD IT BUT THE ETHERNET OUTPUT CANT CONNECT I GET THE YELLOW TRIANGLE WITH ! DOES ANYONE KNOW YBUT IT LOCK SYNCS BUT WONT ALLOW MY PC TO CONNECT TO IT

SB6120 with forceware, log files

Tue, 23 Aug 2011 21:32:45 +0000

Just got my SB6120 with forceware 1.11. I was just SSH\TELNET-ing and looking for the log files, when I try 'cat forceware/log ' I get 'No Such file or directory' even though I see 'log' when I 'ls' the forceware folder. I'm sure I'm doing something really stupid and I did search, but I can't seem to view my log files. Thanks for any help.

zbend

sbh alpha commands

Mon, 22 Aug 2011 04:45:40 +0000

So I'm trying to find a good guide for the sbh alpha firmware. I got it a long time ago and once upon a time I knew how to tftp the config and flush the event log and do other things. Now all I remember is /usr/sbin/cli docsis/Production/prodset. Where is all the info on using this firmware. Am I missing it?

Ambit 256 Certificates

Sun, 21 Aug 2011 08:13:31 +0000

I have been working on trying to get Haxorware running on an Ambit256 with it's proper certs. The problem is, I have to do a full flash to the modem with a haxorware 2mb dump using the USBJTAG NT and the 5102 config file. Obviously, I invalidated the certs doing this. I'm not exactly sure how to install only haxorware because there is no firmware range for it using the 5102 config. So my only option seems to be to snmp into the cm to retrieve the certs and inject them back into the modem after the haxorware flash.

Somewhere on this forum I read that Ambit certs are proprietary certs that are valid only for Ambit firmware. If this is true then how can I inject the certs from my original Ambit 2mb dump into haxorware, another custom firmware, or shell firmware?. Can anyone shine a light?

Networking 101 – Handy to know before you jump into this hobby

Fri, 19 Aug 2011 13:08:28 +0000

Networking 101 – Handy to know before you jump into this hobby

Here’s a basic fundamental guide on networking 101 for these newbies just now getting into this hobby… This is simply to just get them to learn how exactly networks work so they have all of the necessary network fundamentals down pat which should help em out and not have so much n00b posts after they’ve gone thru this…

Home networks generally have a LAN Address which isn’t accessible via the Internet….Unless you’ve already opened a port for it on the router or upnp does the port managing…
The IP range would be something like 192.168.x.x Anything on this range is in your network and cannot be accessed via iNET unless you open a port and forward it to your LAN IP….
Anytime someone says Change your CPE / NIC mac they mean change either the Router Mac or PC mac whichever is connected to the modem… Most of the time it’s the router mac that needs changin’ so go on and login to your router and change the mac by using the “Clone Mac” option / settings which is basically in most routers these days…. If your directly attached to the Modem and need to change your NIC Mac then just grab macmakeup which should do the job just great.

Anything past the Router / Modem is a WAN network which is the Wide Area Network = WWW = Inter webs!!!
Each modem only pulls 1 WAN/Public IP… To find your IP just go to http://whatismyip.com

Underdeath the WAN IP / WWW IP is a series of HFC Ranges…. 10.x.x.x etc…. This is generally a private setup / range for ISPs to use only… Not really for public use…But this range is like a goldmine for folks who can successfully snmp scan etc… Since they can reap dozens of equipment / device info off this range typcially… But in some cases where you cannot scan since filters are in place or snmp scanning is simply blocked you can try snmp scanning your WAN IP instead… This works good for me on some ISPs like RoadRunner etc…

Each ISP has a different setup… Not all have the same setup…. Meaning you can’t just grab any config file from any isp and upload it to your modem and expect it to work…

Putty is the best Telnet app since you can easily set it up to log all output from your telnet session… Just keep in mind you need to login as soon as the modem powers up so you can capture the reading of the config your ISP is stuffing down the modem.. After this you should be able to find your community string in the log. This is also the best method of seeking assistance if you are having issues with getting online w/ your modem… A output of a telnet log will tell all what’s wrong… A log is the only way you can troubleshoot your issue if any accurately.

Upgrade Firmware Via Telnet

Fri, 19 Aug 2011 13:05:41 +0000

Upgrade Firmware Via Telnet

(If you have to ask how, then your over your head and stick to the JTAG method.)

Another way to update your firmware, it only requires a tftp server and you must have a shell firmware installed.
1.change your ip to 192.168.100.10/255.255.255.0

2.start up your tftp server and make sure it is hosting the firmware.hex.bin to be flash

3.telnet your modem and type this cmd: dlfile
you will be prompted to enter the tftp ip, which will be 192.168.100.10 ,then prompted again for the firmware name, which will be the exact name firmware.hex.bin that you are hosting on your tftp server. Now you will see the some code being executed and see the tftp transfer happen, do not interupt this process!! the modem is writing the firmware to flash and will reset/reboot itself..your new firmware is now installed.

update:
Usually this command will work properly.
dload -f -i 1 192.168.100.10 firmware.bin (Or Haxorware Lite/Diag)

CODE

COMMAND: dload

USAGE: dload [-i Number] [-l] [-f] IpAddress Filename{255}

DESCRIPTION:

Downloads the specified s/w image from the TFTP server and stores it in the image slot specified. The image must be valid for the platform, and must not contain any security, encryption, or digital signatures. It must be a simple image file with only the normal ProgramStore compression header. Parameters:
-i — Specifies the image slot to store the image to.
-l — Allows a large image to be stored, spanning images 1 and 2, if
allowed by the flash driver configuration.
-f — Forces the given image to be accepted, as long as the CRCs are
valid.

Note that you must always specify the TFTP server address and filename; unlike the dload command in the Docsis directory, this command doesn’t make use of any Docsis-specific nonvol settings, so it can’t remember the last values used.

EXAMPLES:

dload 11.24.4.3 vxram_sto.bin — Stores the image to the default image slot.

dload -i 1 11.24.4.3 vxram_sto.bin — Store the image to slot 1.
cd /doc
dload

COMMAND: dload
USAGE: dload [-i Number] [-s] [-l] [-f] [IpAddress] [Filename{127}]

DESCRIPTION:
Causes the CM DOCSIS Control thread to download and store the specified image file via TFTP from the specified TFTP Server IP address. When the download is completed, the next reboot will run this image. If you omit the filename and/or IP address parameters, then we will use the ones stored in non-vol settings.

The -i parameter specifies the image number to be overwritten
(number of images depends on the platform). If omitted then the default image for the platform will be used. If present, the -s causes Secure Download to be used. The -l flag selects image1 as the target and allows a large image to be loaded, if allowed by the flash driver. The -f flag forces the image to be loaded even if the signature or compression types are not valid for the platform.

EXAMPLES:
dload 11.24.4.3 ram_sto.bin — TFTPs ram_sto.bin from the server.
dload -i1 11.24.4.3 ram_sto.bin — Same, but downloads to image1.
dload — Uses the file/server from non-vol settings.
dload -s 11.24.4.3 ram_sto.bin — Secure download.
dload -l 11.24.4.3 ram_sto.bin — Download large image to image1.
dload -f 11.24.4.3 ram3360_sto.bin — Loads a 3360 image onto a 3345 modem.

http://docsismodem.wordpress.com/2010/08/13/upgrade-firmware-via-telnet/

DIAG or LITE for a DPC2100r2

Thu, 18 Aug 2011 17:07:26 +0000

I'm not sure where I've read this but to my understanding this modem cannot support the features of the diag version so I'm in the process of flashing the lite version. if someone tells me otherwise then I will re-flash over with the diag version.

DPC2203

Thu, 18 Aug 2011 16:34:00 +0000

I have a DPC2203 which has a BCM3368 chip. I've looked all over, but there is no information on how to extract anything. It has a 8-pin JTAG port just like the DPC2100R2, but it's not recognized due to theres no script for it.

Does anybody have any information they would like to share?

sb5100 bricked or just damaged

Wed, 17 Aug 2011 19:48:33 +0000

Hi, my first post, been reading these forums a lot, great site.

My question is I have a sb5100 that only the
receive, online, pc activity, and the stand by are constantly on
. It does not function at all, cannot read/detect or go trough the motions as a working modem should.
Now it has not always been like this, it was working just fine before, but I had it always on the floor, the bare board no shell for easy flashing. When noticed said problem I inspected and found two tiny grey "resistors?" were knocked off, (have another sb5100 to verify they were supposed to be there) . Well took some "resistors" and soldered them on but no joy.
Any ideas are greatly appreciated.

DCM315 Mysteriously Turns Off

Tue, 16 Aug 2011 05:39:02 +0000

I do not not why, but for some reason my DCM315 has been turning off like every week. This is the 3rd time. I have a 12V 1A adapter, for some reason when I come back in the day, the modem is OFF. No power cords where pulled nothing. I do some torrenting everyday for a couple of hours. I Seed like 30 4GB bluray movies but, hardly ever go above 500kbps. Maybe too many connections for my dcm315?

The Adapter is attached to one of those PC 10 way surge protectors. I have an Amplifier, RV082, 2 Modems, and a router on the same protector.
Also, for some reason everyday my laptop gets the Little bars with the yellow sign for 1 minute at the most. I think my netgear WNDR3300 radios are messed up.

Here are my power levels.

Does SB5100Mod firmware has Bpi 1.0 Feature?

Sun, 14 Aug 2011 18:26:01 +0000

hi all just like the haxorware has in the bpi settings. Bpi docsis 1.0 does this firmware have that feature to turn it on? if so how would you do it in telnet thanks

No USB JTAG found!

Sat, 13 Aug 2011 22:05:44 +0000

I hate to ask but I need some rather idiot proof help. I'm having to connect using my cell phone and it is ungodly slow, so searching/reading isn't getting me anywhere fast.

I've got an SB5100 flashed with the sb5100mod and I need to return it to stock. Comcast has put my sb4100 on it's end of service list, so it can't connect...hence me using my cell phone.

I have a Blackcat USB jtag and have connected it to the sb5100 10 pin header and fired'r up, but I get "No USB JTAG found!" when using Surfboardhacker USB JTAG software.....blackcat versions don't do a thing either. I installed the USB drivers that came with the USB JTAG software using the setup.exe and installing the driver. In device manager(Win 7 32bit) it showed "BlackcatUSB2" in ports. Later I installed the USB cable modem drivers from motorola's site, directly connected the modem to the laptop using USB(no blackcat), just to see if the laptop would "see" the modem in device manager....it did. I hooked up blackcat again and it asked to install drivers, so I installed the same one's I did before where it showed up in device manager as BlackcatUSB2....but...this time it shows up as AT90USB162, which I assume is the blackcat chip type.

As yet I haven't been able to get the USB to connect to any of the jtag software. In device manager I also have an "Other Devices" unknown device, but that could have already been there from before and probably was.

Before trying the jtag I'd gone into :666 and enabled firmware updates, reboots, etc. to what a normal modem would have. The modem isn't bricked and my USB port is functioning. I just can't get the dang USB JTAG to work. Any ideas?

Please be very specific and provide links if needed. Again, I'm having to connect using my CP, so i can't be searching forever and downloading a lot of files to test. My data plan only has 200mb and I used over 50mb downloading the SB USB JTAG software :/ TIA

sb101 and netgear n600 help

Sat, 13 Aug 2011 17:19:10 +0000

ok I can access the internet when my modem is connected directly to the computer. but when i install my router netgear 600n my computer say i am connected to the internet but all i get is the RR webpage telling me to call them? So i remove the router and go back to direct connect and it works i can access the internet. anybody have this problem

Problems with Mac address & Config File on SB5101

Thu, 11 Aug 2011 17:04:04 +0000

Alright,

I have an SB5101.... I have a giant list of Mac's and Config fliles in a text document that are supposed to be for comcast service.... NOW... When I enter the MAC address, and new config file, it will successfully issue an IP address, but never fully go online. The online light on the modem just keeps blinking.

When I go back to the modem... for some reason, the active Config file it has pinged back isn't the same one I typed in... screen shots enclosed:

can someone please help me as to what I am doing wrong?

Attached Thumbnails

SB5100e Synchronization failure

Thu, 11 Aug 2011 10:26:15 +0000

Hello and greetings from Germany people I have a problem with my moto 5100 cable modem and that he gives me the following error log according to how I can fix this, unfortunately, am only new to the area and where can I get the config ago because I look at in Germany Germany at kabel am

I would be happy if the people speaking German on the German language would help me

I've been on it for me SB5100.Sigma.x2.142.by.FERCSA

Quote

1970-01-01 00:00:33 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:00:22 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:00:15 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:00:15 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:00:08 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:00:08 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:00:07 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:00:06 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:00:06 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:00:05 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:00:04 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:01:09 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:01:09 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:00:28 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:00:27 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:00:17 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing

SB5100e Synchronization failure

Thu, 11 Aug 2011 10:25:48 +0000

Quote

Restore modem with 2mb dump

Thu, 11 Aug 2011 02:45:13 +0000

I am starting to work from home and am setting up my home office above my detached garage. The wireless I have set up in my house (with subed modem...I pay for my internet service) doesn't work in my new office sapce.

I have 2 SB5101s flashed with Haxoware that I am not currently using. Modem A is soldered and I have the orignal 2mb dump. Modem B is also flashed with Haxoware, but it was done with a solderless header (that I don't have any more)

Is there any way to put the 2mb dump on the modem without using the JTAG if it already has Haxoware on it?

I don't want to buy anything to extend the wireless range if I don't have to and I don't want to have to move my modem when I am working in my home office (i know I will have to have one unplugged at all times)

Event log

Wed, 10 Aug 2011 22:16:18 +0000

Can some one read this this and tell what is the next set to take.

Event Log

Time Priority Code Description 2011-08-10 14:27:47 Critical I402.0 TLV-11 - Illegal Set operation failed 2011-08-10 14:27:47 Notice I401.0 TLV-11 - unrecognized OID 2011-08-10 14:27:25 Critical I402.0 TLV-11 - Illegal Set operation failed 2011-08-10 14:27:25 Notice I401.0 TLV-11 - unrecognized OID 1970-01-01 00:02:30 Critical D003.0 DHCP WARNING - Non-critical field invalid in response. 1970-01-01 00:02:21 Critical R002.0 No Ranging Response received - T3 time-out (US 2) 1970-01-01 00:02:15 Critical R002.0 No Ranging Response received - T3 time-out (US 4) 1970-01-01 00:01:36 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire

Attached Files

Event log.rtf 4.62MB 2 downloads
Event log.rtf 4.62MB 2 downloads

Flashing DPC2100R2 with SBHusbjtag

Wed, 10 Aug 2011 16:36:26 +0000

ok im kind of confused here.. Can i flash the dpc2100r2 with just the sbhusbjtag ? im using the sbh usbjtag software but it wont detect the modem. OR do i need this adapter to flash this modem http://www.motomodz.net/servlet/the-19/Parallel-JTAG-Cable/Detail . I thought i would be able to just flash it with the sbhusbjtag since it stated it was compatible with this modem. Thanks

U10C045

Wed, 10 Aug 2011 12:33:55 +0000

::EDIT:: sorry for multiple posts, i got a post error when submitting new topic; ops might want to take a look at that!

Currently evaluating this modem, and trying desperately to get the nt working on it--- currently working with usbbdm to see if i can get the nt to recognize the flash-- here is what i have so far; others are encouraged to chime in and assist if you have anything useful to input-- bdm seems to advise that i need to find an isp point; however i have no knowledge of how to do so with so little information-- any other isp point pioneers have any helpful input to provide; i would gladly try and report back my findings-- will try to post HQ pics soon.

I am using the usbjtagnt

here is what i have:
U10C045 model of cm
MX25L6445EM1-10G flash chip
active serial connection

if i pin it out much like the 6120 or the known ubee-- and attempt to short pin 8 on boot (with some extremely finicky timing) i get "WARNING - the singleton instance is NULL, and someone is accessing it!"

it is my understanding we are dropping pin 8 low to get to the uboot cli; however modem halts at the previously mentioned message upon pin 8 gnding stopping me dead in my tracks.

any input; or "try this" comments would be definitely appreciated; and anyone with knowledge finding isp points with zero knowledge is more than welcome to speak up!

I will edit this post and add pictures of the whole board; and specific components whenever i have the chance to this evening.

SBG900 -> SB5100?

Wed, 10 Aug 2011 02:33:55 +0000

I was wondering if anyone has any pointers on converting an SBG900 to a 5100? I found a download with the necessary binaries, but I'm not quite sure where to go next.

Last year I somehow was able to get Fercsa running on it, but I can't remember for the life of me how I did it. I do remember that it was kind of buggy, so I re-flashed it, now it doesn't boot. Not bricked, just doesn't have a valid firmware anymore.

I'm using a BlackcatUSB FWIW.

Problems with sb5101

Tue, 09 Aug 2011 16:32:16 +0000

My modem worked fine for about a year. All of a sudden stopped working. All the correct lights are on and blinking. Just no internet connection. Subbed modem works fine. I'm not sure if it's new security or what. Thanks.

Time Priority Code Description 2011-08-09 16:17:15 Critical D005.0 TFTP failed - request sent - No Response 2011-08-09 16:16:41 Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out 2011-08-09 16:15:50 Notice M571.1 Ethernet link up - ready to pass packets 1970-01-01 00:00:33 Critical D003.0 DHCP WARNING - Non-critical field invalid in response. 1970-01-01 00:00:05 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing 1970-01-01 00:02:04 Critical D003.0 DHCP WARNING - Non-critical field invalid in response. 1970-01-01 00:00:16 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing 1970-01-01 00:00:16 Notice M571.1 Ethernet link up - ready to pass packets 1970-01-01 00:00:05 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing 2011-08-09 00:11:35 Notice M573.0 Modem Is Shutting Down and Rebooting... 2011-08-09 00:11:34 Critical R004.0 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance o 2011-08-09 00:11:03 Critical T002.0 SYNC Timing Synchronization failure - Failed to acquire FEC framing 2011-08-09 00:10:00 Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out 2011-08-09 00:06:18 Notice M571.4 Ethernet link dormant - not currently active 1970-01-01 00:00:30 Critical D003.0 DHCP WARNING - Non-critical field invalid in response. 1970-01-01 00:00:20 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing 1970-01-01 00:00:20 Notice M571.1 Ethernet link up - ready to pass packets 1970-01-01 00:00:05 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing 1970-01-01 00:00:15 Critical D003.0 DHCP WARNING - Non-critical field invalid in response. 2011-08-06 15:57:59 Notice M571.1 Ethernet link up - ready to pass packets 1970-01-01 00:00:14 Critical D003.0 DHCP WARNING - Non-critical field invalid in response. 1970-01-01 00:00:10 Notice M571.4 Ethernet link dormant - not currently active 1970-01-01 00:00:06 Notice M571.1 Ethernet link up - ready to pass packets 1970-01-01 00:01:55 Critical D003.0 DHCP WARNING - Non-critical field invalid in response. 1970-01-01 00:00:48 Critical R002.0 No Ranging Response received - T3 time-out (US 3) 1970-01-01 00:00:08 Critical R002.0 No Ranging Response received - T3 time-out (US 1) 1970-01-01 00:00:05 Notice M571.1 Ethernet link up - ready to pass packets 2011-08-05 07:20:01 Notice M573.0 Modem Is Shutting Down and Rebooting... 2011-08-05 07:20:01 Critical R004.0 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance o 2011-08-05 07:19:44 Critical T002.0 SYNC Timing Synchronization failure - Failed to acquire FEC framing 2011-08-02 14:28:17 Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out 2011-08-02 10:28:21 Warning D103.0 DHCP RENEW WARNING - Field invalid in response 2011-07-30 04:30:47 Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out 2011-07-29 22:28:22 Warning D103.0 DHCP RENEW WARNING - Field invalid in response 2011-07-27 01:09:32 Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out 2011-07-26 10:28:22 Warning D103.0 DHCP RENEW WARNING - Field invalid in response 2011-07-23 17:23:35 Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out 2011-07-22 22:28:22 Warning D103.0 DHCP RENEW WARNING - Field invalid in response 2011-07-19 11:39:40 Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out 2011-07-19 10:28:21 Warning D103.0 DHCP RENEW WARNING - Field invalid in response 2011-07-16 08:53:29 Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out 2011-07-15 22:28:21 Warning D103.0 DHCP RENEW WARNING - Field invalid in response 2011-07-12 22:51:38 Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out 2011-07-12 10:28:21 Warning D103.0 DHCP RENEW WARNING - Field invalid in response 2011-07-09 02:35:48 Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out 2011-07-08 22:28:21 Warning D103.0 DHCP RENEW WARNING - Field invalid in response 2011-07-07 01:35:29 Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out 1970-01-01 00:00:18 Critical D003.0 DHCP WARNING - Non-critical field invalid in response. 1970-01-01 00:00:14 Notice M571.1 Ethernet link up - ready to pass packets 1970-01-01 00:00:41 Critical D003.0 DHCP WARNING - Non-critical field invalid in response. 1970-01-01 00:00:05 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing 1970-01-01 00:00:05 Notice M571.1 Ethernet link up - ready to pass packets 1970-01-01 00:00:05 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing 2011-06-11 15:31:24 Notice M573.0 Modem Is Shutting Down and Rebooting... 2011-06-11 15:31:24 Critical R004.0 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance o 2011-06-11 15:30:53 Critical T002.0 SYNC Timing Synchronization failure - Failed to acquire FEC framing 2011-06-09 05:00:08 Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out 2011-06-08 23:32:24 Warning D103.0 DHCP RENEW WARNING - Field invalid in response 2011-06-06 14:18:54 Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out 2011-06-05 11:32:24 Warning D103.0 DHCP RENEW WARNING - Field invalid in response 2011-06-03 17:51:39 Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out 2011-06-01 23:32:24 Warning D103.0 DHCP RENEW WARNING - Field invalid in response 2011-05-29 19:11:04 Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out 2011-05-29 11:32:24 Warning D103.0 DHCP RENEW WARNING - Field invalid in response 2011-05-26 17:14:05 Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out 2011-05-25 23:32:24 Warning D103.0 DHCP RENEW WARNING - Field invalid in response 2011-05-23 15:44:20 Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out 1970-01-01 00:00:25 Critical D003.0 DHCP WARNING - Non-critical field invalid in response. 1970-01-01 00:00:09 Critical R002.0 No Ranging Response received - T3 time-out (US 1) 1970-01-01 00:00:15 Critical D003.0 DHCP WARNING - Non-critical field invalid in response. 1970-01-01 00:00:09 Notice M571.4 Ethernet link dormant - not currently active 1970-01-01 00:00:15 Critical D003.0 DHCP WARNING - Non-critical field invalid in response. 1970-01-01 00:00:05 Notice M571.4 Ethernet link dormant - not currently active 1970-01-01 00:07:01 Critical D003.0 DHCP WARNING - Non-critical field invalid in response. 1970-01-01 00:00:06 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing 1970-01-01 00:00:06 Notice M571.1 Ethernet link up - ready to pass packets 1970-01-01 00:00:06 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing 2011-04-05 20:48:51 Notice M573.0 Modem Is Shutting Down and Rebooting... 2011-04-05 20:48:51 Critical R004.0 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance o 2011-04-05 20:48:19 Critical T002.0 SYNC Timing Synchronization failure - Failed to acquire FEC framing 2011-04-05 20:45:50 Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out 2011-04-05 20:37:00 Critical T002.0 SYNC Timing Synchronization failure - Failed to acquire FEC framing 2011-04-05 16:16:36 Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out 2011-04-05 16:13:24 Critical T002.0 SYNC Timing Synchronization failure - Failed to acquire FEC framing 2011-04-05 00:25:21 Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out 1970-01-01 00:00:15 Critical D003.0 DHCP WARNING - Non-critical field invalid in response. 1970-01-01 00:00:05 Notice M571.1 Ethernet link up - ready to pass packets 2011-04-05 00:10:09 Notice M573.0 Modem Is Shutting Down and Rebooting... 2011-04-05 00:10:09 Critical R004.0 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance o 1970-01-01 00:00:22 Critical D003.0 DHCP WARNING - Non-critical field invalid in response. 1970-01-01 00:00:18 Notice M571.1 Ethernet link up - ready to pass packets 1970-01-01 00:00:11 Critical R002.0 No Ranging Response received - T3 time-out (US 1) 2011-04-05 00:04:48 Notice M573.0 Modem Is Shutting Down and Rebooting... 2011-04-05 00:04:48 Critical R004.0 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance o 2011-04-05 00:03:29 Critical T002.0 SYNC Timing Synchronization failure - Failed to acquire FEC framing 2011-04-05 00:03:12 Critical T004.0 SYNC Timing Synchronization failure - Failed to receive MAC SYNC frame within ti 2011-04-04 23:11:51 Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out 1970-01-01 00:00:44 Critical D003.0 DHCP WARNING - Non-critical field invalid in response. 1970-01-01 00:00:20 Critical R002.0 No Ranging Response received - T3 time-out (US 1) 1970-01-01 00:00:14 Notice M572.0 Ds Pulse Failed - Reinitialize MAC...

UPLOAD NONVOLCFG

Tue, 09 Aug 2011 16:14:24 +0000

any one know how to upload the nonvolcfg to an sb5100 with 5100mod this is a DPC2100 3348 no JTAG PORT it was moded with serial i cant find any post about it

sb 4100 help

Mon, 08 Aug 2011 04:04:28 +0000

I know this modem is kind of old, but does any one have a full dump of a sb4100 Fujitsu.

i.e : firmware,flash, and memory"backup" ? all the ones I can find on this site belong to intel.

that they don't mind sharing, it doesn't matter what country its from, i'll gladly accept it

thanks
noel

Please help me, Ranging on Estabilish IP

Sat, 06 Aug 2011 21:16:25 +0000

Hello everyone

I am interested in the following,

When I connect my modem from my service provider, the default WebSTAR EPC2100r2 firmware immediately connect, and direct binding of the cable that comes into my apartment, and when it forks over the splitter. although it is worse signal to connect.

When I attach a hacked modem, SB5101 and epc2100r2 both with haxorware firmware modem not connect writes Ranging complete

Remove this means Acquire Downstream Channel Done Obtain Upstream Parameters Done Upstream Ranging Done Establish IP Connectivity Ranging Retrieve Time of Day waiting Negotiate security waiting Receive configuration waiting Register connection waiting Cable modem status waiting

and then restarted the modem

I do not know but to which the Internet will not work with 2way spliter ( 1 in and 2 out), directly cable to modem work good.

here is a log with cable spliter ( 2way cable spliter )

Event Log
Time Priority Code Description
1970-01-01 00:00:26 Critical D001.0 DHCP FAILED - Discover sent, no offer received
1970-01-01 00:00:07 Critical R002.0 No Ranging Response received - T3 time-out (US 3)
1970-01-01 00:00:03 Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:00:26 Critical D001.0 DHCP FAILED - Discover sent, no offer received
1970-01-01 00:00:26 Notice M573.0 Modem Is Shutting Down and Rebooting...
1970-01-01 00:00:26 Critical Resetting the cable modem due to docsDevResetNow
1970-01-01 00:00:02 Notice M571.4 Ethernet link dormant - not currently active

Here is a picture of my modem and cable and spliter

Please help me

Thanks All

Extracting certs after flashing Haxorware

Thu, 04 Aug 2011 18:53:15 +0000

I have a question, Lets say I have a personally owned CM. I activate it with the cable company etc, Do the certs STAY after I do the "One click Flash"?

In other words, can I extract the certs from haxorware GUI?

Sb5100 locks on "ds" but not on "up"

Wed, 03 Aug 2011 13:01:58 +0000

Could this be Mac issues or configuration?
(Btw I pay for service but i use this for online play n movie d/l)

provisioned backup dumps need some info / help

Wed, 03 Aug 2011 05:17:14 +0000

nvm

sb6120-8m-original full dump

Tue, 02 Aug 2011 03:46:43 +0000

File Name: sb6120-8m-original full dump
File Submitter: bx8055
File Submitted: 31 Jul 2011
File Category: SB61XX Firmaware

this is original dump,get it by NT

Click here to download this file

Hi All...it has been a long time..

Sun, 31 Jul 2011 16:01:44 +0000

Life gets away quick and I have not been keeping up with SBhackers of late.

I would love to play catch up..

An electronic store is opening soon and he wants to buy my modems that I made before.

Remember my guitar modems and skulls etc?? I will be making custome modems for his store.

Lots of fun I think...

How is everyone??? Miss the tech help here.

Has there been any updates for Haxoware?

Hope everyone is doing well....

Happy Modding...

Sigma-X2 V15

Sun, 31 Jul 2011 15:22:51 +0000

I am using Sigma-X2 V15 past few months working perfect...when i used this modem with tp link TL WR740N router internet not working.. all lights got stable but no internet.When i use modem with out router it`s work...

Help please

Thu, 28 Jul 2011 20:22:33 +0000

I have a 6120 flashed too forceware 1.1 need to get it online do I just need valid certs? An if so how do I get them my area just went 3.0

Need original firmware dump for RCA DCM315?? Thank you

Wed, 27 Jul 2011 23:31:20 +0000

Anyone can direct me to the link of the original firmware dump for RCA DCM315??

SB5101 HELP!!!!

Wed, 27 Jul 2011 16:58:51 +0000

Hi guys, i have a sb5101 the problem is the previous owner tried soldering the pins to mod it but screw it up. so those ports are damaged the metal parts that would hold the solder came off. is there any other method that i can use to put haxorware on it? thanks

webstar dpc2100/dpc2100r2 how to change hfc mac address, ethernet, usb mac address and seial

Wed, 27 Jul 2011 00:57:38 +0000

how to change hfc mac address, ethernet, usb mac address and seial # of dpc2100/dpc2100r2?
please help me to find him software and tutorial.

T4 timeout issue resolved but still cant get online with test modem

Tue, 26 Jul 2011 19:17:54 +0000

Please take a look at my telnet log and let me know what I need to do to fix the problem.

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2011.07.26 11:51:29 =~=~=~=~=~=~=~=~=~=~=~=
Haxorware integrated telnet daemon
Username: root
Password: *****
Welcome.
CM>
CM> run
CM>
CM> run_app

Running the system...

Beginning Cable Modem operation...
0x000109a0 [Scan Downstream Thread] BcmVendorCmDownstreamScanThread::ThreadMain: (Scan Downstream Thread) Scanning for a Downstream Channel...
mot_scanList: Setting override freq @ 0
Favorite[0].freq = 687000000
Attempting Downstream FEC lock @ freq= 687000000 Hz, QAM64/256
CM> Found energy at frequency 687000000Hz! Publishing event kEventEnergyDetected...
0x00010bf8 [CmDocsisCtlThread] BcmCmDocsisCtlThread::StartUsInit: (CmDocsisCtlThread) Locked on the downstream. Waiting for UCDs...
******************************************
DOWNSTREAM STATUS
******************************************
Tuner Frequency = 687000000 Hz
Carrier Offset = -3 Hz
Symbol rate = 5360537 sym/sec
SNR = 37 dB
QAM Mode = QAM256
Tuner AGC = 0xfff00000
IF AGC = 0x156aca5e
Power Level = 1 dB
QAM = LOCKED
FEC = LOCKED
******************************************

CM> Calculating maximum number of IP filters:
Each IP filter consumes 1848 bytes of RAM.
Current free RAM is 394052 bytes.
Max heap reserved for IP filters (25%) = 98513
We can support 53 IP filters.
Calculating maximum number of LLC filters:
Each LLC filter consumes 716 bytes of RAM.
Current free RAM is 394052 bytes.
Max heap reserved for LLC filters (25%) = 98513
We can support 137 LLC filters.
Selecting UCD for Us Channel 9
0x0001162a [CmDocsisCtlThread] BcmCmDocsisCtlThread::TestAndLaunchDsTimeSync: (CmDocsisCtlThread) starting ds time sync acquisition...
0x000118be [CmDocsisCtlThread] BcmCmDocsisCtlThread::SyncDsSyncOk: (CmDocsisCtlThread) downstream time sync acquired...
0x000118be [CmDocsisCtlThread] BcmCmDocsisCtlThread::DsSyncOkResumeUsInit: (CmDocsisCtlThread) pre-REG upstream target case...starting initial ranging.
Beginning initial ranging...
Using stored initial upstream power = 39.0 dBmV
0x000118be [CmDocsisCtlThread] BcmCmDocsisCtlThread::SyncDsSyncOk: (CmDocsisCtlThread) rx unexpected kDsSyncOk indication...
Not logging event ID 2307948724, control for level 7 is 0.
CM>
RNG-RSP Adj: tim=2053 power=-3 freq=0 Stat=Continue
CM>
RNG-RSP Adj: tim=0 power=-1 freq=0 Stat=Success
******************************************
UPSTREAM STATUS
******************************************
Upstream Status = UP
Upstream Channel = 9
Upstream Frequency = 30700000 Hz
Upstream Power = 39 dBmV
Ranging SID = 0x1587
Upstream Symbol Rate = 5120000 sym/sec
******************************************
Starting IP Initialization with DHCP...
DHCPc: Waiting 1 seconds before sending Discover; client id htype=1, value=xx:xx:xx:xx:xx:xx
Not logging event ID 2307948624, control for level 7 is 0.
CM> DHCPc: Sending Discover packet; client id htype=1, value=xx:xx:xx:xx:xx:xx
DHCPc: Received an Offer from DHCP server xx:xx:xx:xx:xx:xx (xx.xx.xxx.x); lease client id htype=1, value=xx:xx:xx:xx:xx:xx
CM> DHCPc: Timed out waiting for offers for lease with client id htype=1, value=xx:xx:xx:xx:xx:xx
DHCPc: Sending Request packet; client id htype=1, value=xx:xx:xx:xx:xx:xx
DHCPc: Received an Ack from DHCP server xx:xx:xx:xx:xx:xx (xx.xx.xxx.x); lease client id htype=1, value=xx:xx:xx:xx:xx:xx
Current IP address is default 0.0.0.0.
0x00012e26 [DHCP Client Thread] BcmEcosIpHalIf::ConfigureLeaseImpl: (IP Stack1 HalIf)
Configuring IP stack 1:
IP Address = xx.xx.xxx.xxx (primary IP address)
Subnet Mask = 255.255.xxx.0
Router = xx.xx.xxx.x
IsPrimaryInterface = 1
Logging event: DHCP WARNING - Non-critical field invalid in response.
ARPing for default GW IP = xx.xx.xxx.x
MAC = xx:xx:xx:xx:xx:xx
DHCP completed successfully!
DHCP Settings:
Client Id = htype=1, value=xx:xx:xx:xx:xx:xx
State = Renewing (5)
Static Lease = 0
AutoConfig Mode = IP, Subnet and Router
XID = xxxxxxx
Number of Tries = 0
Max Discover Tries = 6
Max Request Tries = 6
DHCP server MAC addr = xx:xx:xx:xx:xx:xx
Ignore NAKs = 0
My offered IP address = xx.xx.xxx.xxx (primary IP address)
(1) Subnet Mask = 255.255.xxx.0
(3) Router IP address = xx.xx.xxx.x
(54) DHCP Server IP address = xx.xx.xxx.xx
(82) Relay Agent IP address = xx.xx.xxx.x
TFTP Server IP address = xx.xx.xxx.xx
CM Configuration file = [email=""]'?BExV7iMAEeOpItEKJMrB@CiTKwV4KBJ5ki668CDD7iZ1Nj6x_bUm6'[/email]
(2) UTC Time Offset = 0 seconds
(4) Time Server IP address = xx.xx.xxx.xx
(6) Domain Name Server = xx.xx.xxx.xx; xx.xx.xxx.xx
(7) Log Server IP address =
(51) Lease time = 378260 seconds
(58) T1 (renew) = 189130 seconds
(59) T2 (rebind) = 330977 seconds
Lease is infinite = 0

SB5102 CM Agent w/ BRCM Factory Support IpStackEvent: Ip=xx.xx.xxx.xxx, Subnet=xxx.xxx.xxx.x, Gateway=xx.xx.xxx.x
CmSnmpAgent::IpAddressAcquiredEvent for SB5102 CM Agent w/ BRCM Factory Support
IP addr = xx.xx.xxx.xxx
Starting Time Of Day...
0x00012ec6 [CmDocsisIpThread] BcmDocsisTimeOfDayThread::SetTodServerIpAddress: (Time Of Day Thread) ToD servers: xx.xx.xxx.xx
Connecting to ToD server xx.xx.xxx.xx...
Sending UDP ToD request to server...
SNMP Agent Binding to xx.xx.xxx.xxx:xxx
Not logging event ID 2291949724, control for level 7 is 0.
CM> UTC returned by ToD server xxxxxxxxx; UTC offset 0
Current system time -> Tue Jul 26 18:53:05 2011
System start time -> Tue Jul 26 18:51:48 2011
Starting Tftp of configuration file...
Opening file [email=""]'?BExV7iMAEeOpItEKJMrB@CiTKwV4KBJ5ki668CDD7iZ1Nj6x_bUm6'[/email] on xx.xx.xxx.xx for reading...
tftp-enforce bypass is DISABLED
CM> 0x000138da [CmDocsisIpThread] Tftp Client::GetReply: (Tftp Client) Timed out on socket select!
0x000138da [CmDocsisIpThread] Tftp Client::Send: (Tftp Client) Attempt #(1) Backoff (2) Exp Block #(4) Last Block #(3) Recv'd Block #(3)
CM> Storing received cfg of size 3476 to memory
Tftp read < 512 bytes, we have reached end of file.
Tftp transfer complete!
TFTP Settings:
Stack Interface = 1
Server Ip Address = xx.xx.xxx.xx
Server Port Number = xxxxx
Total Blocks Read = 7
Total Bytes Read = 3476
Config file was read! IP Initialization completed...
MAX CPE per CM is being set to 32
TLV-11[1]: 1.3.6.1.2.1.69.1.2.1.2.16 -> 255.255.255.255
TLV-11[2]: 1.3.6.1.2.1.69.1.2.1.3.16 -> 255.255.255.255
TLV-11[3]: 1.3.6.1.2.1.69.1.2.1.4.16 -> Swou9riu
TLV-11[4]: 1.3.6.1.2.1.69.1.2.1.5.16 -> 3 (i32)
TLV-11[5]: 1.3.6.1.2.1.69.1.2.1.6.16 -> HEX:40 00
TLV-11[6]: 1.3.6.1.2.1.69.1.2.1.7.16 -> 4 (i32)
TLV-11[7]: 1.3.6.1.2.1.69.1.2.1.2.18 -> 255.255.255.255
TLV-11[8]: 1.3.6.1.2.1.69.1.2.1.3.18 -> 255.255.255.255
TLV-11[9]: 1.3.6.1.2.1.69.1.2.1.4.18 -> yZaK4E8l
TLV-11[10]: 1.3.6.1.2.1.69.1.2.1.5.18 -> 2 (i32)
TLV-11[11]: 1.3.6.1.2.1.69.1.2.1.6.18 -> HEX:40 00
TLV-11[12]: 1.3.6.1.2.1.69.1.2.1.7.18 -> 4 (i32)
TLV-11[13]: 1.3.6.1.2.1.69.1.2.1.2.20 -> 255.255.255.255
TLV-11[14]: 1.3.6.1.2.1.69.1.2.1.3.20 -> 255.255.255.255
TLV-11[15]: 1.3.6.1.2.1.69.1.2.1.4.20 -> PWJYzA6uO7dk9lL
TLV-11[16]: 1.3.6.1.2.1.69.1.2.1.5.20 -> 3 (i32)
TLV-11[17]: 1.3.6.1.2.1.69.1.2.1.6.20 -> HEX:40 00
TLV-11[18]: 1.3.6.1.2.1.69.1.2.1.7.20 -> 4 (i32)
TLV-11[19]: 1.3.6.1.2.1.69.1.6.1.0 -> 1 (i32)
TLV-11[20]: 1.3.6.1.2.1.69.1.6.2.1.2.20 -> 4 (i32)
TLV-11[21]: 1.3.6.1.2.1.69.1.6.2.1.3.20 -> 0 (i32)
TLV-11[22]: 1.3.6.1.2.1.69.1.6.2.1.4.20 -> 1 (i32)
TLV-11[23]: 1.3.6.1.2.1.69.1.6.2.1.5.20 -> 2048 (i32)
TLV-11[24]: 1.3.6.1.2.1.69.1.6.2.1.2.22 -> 4 (i32)
TLV-11[25]: 1.3.6.1.2.1.69.1.6.2.1.3.22 -> 0 (i32)
TLV-11[26]: 1.3.6.1.2.1.69.1.6.2.1.4.22 -> 1 (i32)
TLV-11[27]: 1.3.6.1.2.1.69.1.6.2.1.5.22 -> 2054 (i32)
TLV-11[28]: 1.3.6.1.2.1.69.1.6.3.0 -> 2 (i32)
TLV-11[29]: 1.3.6.1.2.1.69.1.6.4.1.2.135 -> 4 (i32)
TLV-11[30]: 1.3.6.1.2.1.69.1.6.4.1.4.135 -> 2 (i32)
TLV-11[31]: 1.3.6.1.2.1.69.1.6.4.1.5.135 -> 1 (i32)
TLV-11[32]: 1.3.6.1.2.1.69.1.6.4.1.11.135 -> 6 (i32)
TLV-11[33]: 1.3.6.1.2.1.69.1.6.4.1.14.135 -> 135 (i32)
TLV-11[34]: 1.3.6.1.2.1.69.1.6.4.1.15.135 -> 139 (i32)
TLV-11[35]: 1.3.6.1.2.1.69.1.6.4.1.2.136 -> 4 (i32)
TLV-11[36]: 1.3.6.1.2.1.69.1.6.4.1.4.136 -> 2 (i32)
TLV-11[37]: 1.3.6.1.2.1.69.1.6.4.1.5.136 -> 1 (i32)
TLV-11[38]: 1.3.6.1.2.1.69.1.6.4.1.11.136 -> 17 (i32)
TLV-11[39]: 1.3.6.1.2.1.69.1.6.4.1.14.136 -> 135 (i32)
TLV-11[40]: 1.3.6.1.2.1.69.1.6.4.1.15.136 -> 139 (i32)
TLV-11[41]: 1.3.6.1.2.1.69.1.6.4.1.2.445 -> 4 (i32)
TLV-11[42]: 1.3.6.1.2.1.69.1.6.4.1.4.445 -> 2 (i32)
TLV-11[43]: 1.3.6.1.2.1.69.1.6.4.1.5.445 -> 1 (i32)
TLV-11[44]: 1.3.6.1.2.1.69.1.6.4.1.11.445 -> 6 (i32)
TLV-11[45]: 1.3.6.1.2.1.69.1.6.4.1.14.445 -> 445 (i32)
TLV-11[46]: 1.3.6.1.2.1.69.1.6.4.1.15.445 -> 445 (i32)
TLV-11[47]: 1.3.6.1.2.1.69.1.6.4.1.2.446 -> 4 (i32)
TLV-11[48]: 1.3.6.1.2.1.69.1.6.4.1.4.446 -> 2 (i32)
TLV-11[49]: 1.3.6.1.2.1.69.1.6.4.1.5.446 -> 1 (i32)
TLV-11[50]: 1.3.6.1.2.1.69.1.6.4.1.11.446 -> 17 (i32)
TLV-11[51]: 1.3.6.1.2.1.69.1.6.4.1.14.446 -> 445 (i32)
TLV-11[52]: 1.3.6.1.2.1.69.1.6.4.1.15.446 -> 445 (i32)
TLV-11[53]: 1.3.6.1.2.1.69.1.6.4.1.2.593 -> 4 (i32)
TLV-11[54]: 1.3.6.1.2.1.69.1.6.4.1.4.593 -> 2 (i32)
TLV-11[55]: 1.3.6.1.2.1.69.1.6.4.1.5.593 -> 1 (i32)
TLV-11[56]: 1.3.6.1.2.1.69.1.6.4.1.11.593 -> 6 (i32)
TLV-11[57]: 1.3.6.1.2.1.69.1.6.4.1.14.593 -> 593 (i32)
TLV-11[58]: 1.3.6.1.2.1.69.1.6.4.1.15.593 -> 593 (i32)
TLV-11[59]: 1.3.6.1.2.1.69.1.6.4.1.2.64 -> 4 (i32)
TLV-11[60]: 1.3.6.1.2.1.69.1.6.4.1.4.64 -> 2 (i32)
TLV-11[61]: 1.3.6.1.2.1.69.1.6.4.1.5.64 -> 1 (i32)
TLV-11[62]: 1.3.6.1.2.1.69.1.6.4.1.11.64 -> 17 (i32)
TLV-11[63]: 1.3.6.1.2.1.69.1.6.4.1.12.64 -> 68 (i32)
TLV-11[64]: 1.3.6.1.2.1.69.1.6.4.1.13.64 -> 68 (i32)
TLV-11[65]: 1.3.6.1.2.1.69.1.6.4.1.14.64 -> 67 (i32)
TLV-11[66]: 1.3.6.1.2.1.69.1.6.4.1.15.64 -> 67 (i32)
TLV-11[67]: 1.3.6.1.2.1.69.1.6.4.1.2.66 -> 4 (i32)
TLV-11[68]: 1.3.6.1.2.1.69.1.6.4.1.4.66 -> 1 (i32)
TLV-11[69]: 1.3.6.1.2.1.69.1.6.4.1.5.66 -> 1 (i32)
TLV-11[70]: 1.3.6.1.2.1.69.1.6.4.1.11.66 -> 17 (i32)
TLV-11[71]: 1.3.6.1.2.1.69.1.6.4.1.12.66 -> 67 (i32)
TLV-11[72]: 1.3.6.1.2.1.69.1.6.4.1.13.66 -> 67 (i32)
TLV-11[73]: 1.3.6.1.2.1.69.1.6.4.1.14.66 -> 68 (i32)
TLV-11[74]: 1.3.6.1.2.1.69.1.6.4.1.15.66 -> 68 (i32)
TLV-11[75]: 1.3.6.1.2.1.69.1.6.4.1.2.172 -> 4 (i32)
TLV-11[76]: 1.3.6.1.2.1.69.1.6.4.1.4.172 -> 2 (i32)
TLV-11[77]: 1.3.6.1.2.1.69.1.6.4.1.5.172 -> 2 (i32)
TLV-11[78]: 1.3.6.1.2.1.69.1.6.4.1.9.172 -> 172.16.0.0
TLV-11[79]: 1.3.6.1.2.1.69.1.6.4.1.10.172 -> 255.240.0.0
TLV-11[80]: 1.3.6.1.2.1.69.1.6.4.1.2.681 -> 4 (i32)
TLV-11[81]: 1.3.6.1.2.1.69.1.6.4.1.4.681 -> 0 (i32)
TLV-11[82]: 1.3.6.1.2.1.69.1.6.4.1.5.681 -> 1 (i32)
TLV-11[83]: 1.3.6.1.2.1.69.1.6.4.1.9.681 -> 239.193.253.0
TLV-11[84]: 1.3.6.1.2.1.69.1.6.4.1.10.681 -> 255.255.255.0
TLV-11[85]: 1.3.6.1.2.1.69.1.6.4.1.2.682 -> 4 (i32)
TLV-11[86]: 1.3.6.1.2.1.69.1.6.4.1.4.682 -> 1 (i32)
TLV-11[87]: 1.3.6.1.2.1.69.1.6.4.1.5.682 -> 3 (i32)
TLV-11[88]: 1.3.6.1.2.1.69.1.6.4.1.9.682 -> 10.128.0.0
TLV-11[89]: 1.3.6.1.2.1.69.1.6.4.1.10.682 -> 255.192.0.0
TLV-11[90]: 1.3.6.1.2.1.69.1.6.4.1.2.683 -> 4 (i32)
TLV-11[91]: 1.3.6.1.2.1.69.1.6.4.1.3.683 -> 2 (i32)
TLV-11[92]: 1.3.6.1.2.1.69.1.6.4.1.4.683 -> 1 (i32)
TLV-11[93]: 1.3.6.1.2.1.69.1.6.4.1.5.683 -> 1 (i32)
TLV-11[94]: 1.3.6.1.2.1.69.1.6.4.1.9.683 -> 224.0.0.9
TLV-11[95]: 1.3.6.1.2.1.69.1.6.4.1.10.683 -> 255.255.255.255
TLV-11[96]: 1.3.6.1.2.1.69.1.6.4.1.11.683 -> 17 (i32)
TLV-11[97]: 1.3.6.1.2.1.69.1.6.4.1.2.684 -> 4 (i32)
TLV-11[98]: 1.3.6.1.2.1.69.1.6.4.1.4.684 -> 1 (i32)
TLV-11[99]: 1.3.6.1.2.1.69.1.6.4.1.5.684 -> 1 (i32)
TLV-11[100]: 1.3.6.1.2.1.69.1.6.4.1.9.684 -> 224.0.0.0
TLV-11[101]: 1.3.6.1.2.1.69.1.6.4.1.10.684 -> 240.0.0.0
TLV-11[102]: 1.3.6.1.2.1.69.1.6.4.1.11.684 -> 17 (i32)
Time Of Day completed...
DefaultSnmpAgentClass::SystemTimeChangeEvent for SB5102 CM Agent w/ BRCM Factory Support
Not logging event ID 2291949524, control for level 7 is 0.
Not logging event ID 2291949324, control for level 7 is 0.
SB5102 CM Agent w/ BRCM Factory Support processing TLV-11's
SNMP packet sent to xx.xx.xxx.xxx:xxx
102 TLV-11's OK.
Sending a REG-REQ to the CMTS...
Received a REG-RSP message from the CMTS...
0x00015004 [CmDocsisCtlThread] BcmCmDocsisCtlThread::RegRspMsgEvent: (CmDocsisCtlThread) We registered with a DOCSIS 1.1 config file!
Registration complete!
Process CVC
Co-signer CVC verified
At least one CVC is valid.
DOCSIS CoS/QoS rate shaping enable is now 1
CmSnmpAgent::CmOperationalEvent for SB5102 CM Agent w/ BRCM Factory Support
CmSnmpAgent operating in 1.1 mode, including docsQos, excluding docsBpi
+++ No DH kickstart profiles or snmpCommunityTable entries installed.
We will operate in NMACCESS mode.
SB5102 CM Agent w/ BRCM Factory Support setting V1/V2 view to docsisNmAccessView
SB5102 CM Agent w/ BRCM Factory Support enabling management.
SB5102 CM Agent w/ BRCM Factory Support sending deferred traps...
Done w/ deferred traps.
SB5102 CPE Agent w/ BRCM Factory Support setting V1/V2 view to docsisNmAccessView
0x00015054 [CmDocsisCtlThread] BcmCmDocsisCtlThread::TestAndLaunchBpkm: (CmDocsisCtlThread) BPKM disabled via manufacturing setting.
Enabling network access for all CPE ports.
mot_scanList: Writing to Flash!
BcmCmDocsisStatusEventCodes::kCmIsOperational
Suspending SNMP Thread
0x000150ae [CmDocsisCtlThread] BcmVendorCmApplication::StopDhcpServer: (VendorExtension CmApp) Shutting down DHCP Server...
0x000150ae [CmDocsisCtlThread] BcmStandbySwitchThread::CmIsOperational: (Motorola Standby Switch Thread) Simulating a press of the standby switch to get the state configured properly.
0x000150ae [IGMP Thread] BcmIgmpThread::Starting Igmp Thread...: (IGMP Thread)
0x000150ae [Motorola Standby Switch Thread] BcmStandbySwitchThread::ThreadMain: (Motorola Standby Switch Thread) Standby switch was pressed!
0x000150b8 [Motorola Standby Switch Thread] BcmStandbySwitchThread::ProcessSwitchEvent: (Motorola Standby Switch Thread) Leaving standby mode; restoring previous NACO and DHCP server states, and changing the LEDs.
0x000150b8 [Motorola Standby Switch Thread] BcmVendorCmApplication::StopDhcpServer: (VendorExtension CmApp) Shutting down DHCP Server...
SB5102 CM Event Log w/ BRCM Factory Support sending deferred async messages...
Done w/ deferred msgs
Not logging event ID 2296948624, control for level 7 is 0.
Not logging event ID 2300955525, control for level 7 is 0.
CM>

ambit 256 question

Mon, 25 Jul 2011 00:38:05 +0000

is there any way to get haxorware r39 on this modem without replacing the mx chip because everytime i program this modem it does not work i have tried writing backups from diferent modems like sb5101, sb5102 with no luck

sb5101 sigmax 2

Sun, 24 Jul 2011 18:25:36 +0000

I wanna up to my SB5101 SIGMA X2 130 RC1 a config file whith tftp server,but i need to know ouw to use the TFTP server and if the sigma x 2 130 RC1 support the tftp server
Thnakyu

dcm-315 windows 7 driver help

Sat, 23 Jul 2011 20:25:52 +0000

Need help finding a usb driver for the dcm - 315 .. windows 7 doesnt seem to locate it .. i am actually resorting to installing my driver finder .. but wanted to know if there was another way of possible to do this. well hopefully i get a reply soon thanks

SB6120 in the UK

Sat, 23 Jul 2011 18:22:49 +0000

HI

Has anyone got the SB6120 modem using forceware or anything else working on a UK cable network.

creating a backup of the dump problem

Sat, 23 Jul 2011 10:06:18 +0000

Manufacturer: Broadcom
Part: BCM3349
Version: 0x0
---------------------------------
Load Configuration File: bcm3349.def
IR Length: 0x5
Endian: Big
Protocol: EJTAG
RAM Start Address: 0x80000000
RAM Size: 0x800000
FLASH Start Address: 0x9fc00000
---------------------------------
Read IMPCODE: 0x00040082
EJTAG Version: 1 or 2.0
EJTAG DMA Support: Yes
---------------------------------
Detect FLASH : Unknown (Manufacturer’s: 0x0000 Device: 0x0000)

When I try to getram 9fc00000 200000 I'm getting

jtag> getram 9fc00000 200000
Address out of range

What am I doing wrong here?

I'm using parallel jtag cable with JTAG Utility v1.3.

Getting com crap unauthorized page

Sat, 23 Jul 2011 01:48:38 +0000

Any guidance on what to do? I never seen this before, instead of the commie cast install page; it loads a page that reads we are sorry you have no account with us......help please, and have a great weekend

Brick 5101

Fri, 22 Jul 2011 23:07:24 +0000

MY SB SB5101 is bricked and I cant find the 2mb dump, can any1 link me to one please. btw Im using the blackcat usb

SB5101U help me?

Fri, 22 Jul 2011 18:03:38 +0000

Modem (A)
modem is using (online)
and modem ( B ) (not online)
I tried this with DIAG.bin haxorware11rev39 after address changeMac serial number ...
adjust the frequency, ID ...
Results modem ( B ) still do not use the (not online)
pl?

Attached Thumbnails

DPC2100(r2)need to change setting

Fri, 22 Jul 2011 07:27:39 +0000

how can i change the HFC Parameters like IP Address, TFTP Server, TFTP Filename, ToD Server?

SB5120 only work with USB port but not CAT5!

Fri, 22 Jul 2011 06:26:44 +0000

I'm using a SB5120:

Software Version: SB5120-2.19.0.16-SCM00-NOSH
Hardware Version: 4
MIB Version: II
GUI Version: 1.0
VxWorks Version: 5.4

Everything was working perfectly fine until last week it won't get connect online and only show limited access and on the modem the pc/act won't flashing. I then try to switch out with USB port from the modem and it working fine. I have change different Router and Ethernet cable but still can't get the WiFi to work. Do your think the MagJack port on the modem is bad? Can someone please help me? Thanks in advance!

Cisco DPC 2420??

Fri, 22 Jul 2011 03:55:04 +0000

any info about uncapping Cisco DPC 2420?? I didn't find anything all over the internet :S

Modem Firmware refuse to change [Solved]

Fri, 22 Jul 2011 00:49:07 +0000

*Edit*
I did it wrong and mess up, issue resolve

I have flash an sb5101 before and it work but this one just refuse to

Open up Jtag utility
Detect and save the stock

Load bootloader and image0
program boot and image0

(no error or anything, took a while to finish as usual)
After it finish I close Jtag utility and power off the modem

Power it back on to check and it is still on its original firmware

The boot loader I use is noisy boot loader
Firmware is Haxorware Revision 39

Edit 1
*Hmmm I probably did it wrong, and rush to post on the forum*

I thought I knew what I was doing. Guess not.

Thu, 21 Jul 2011 02:27:33 +0000

So everything has been working fine and dandy until about 4 days ago.
My subbed modem went offline, I looked it had no IP address.
So I called in and sure enough there was a network outage.
No big deal, two days later it came back online. (thank god for tethering)
What did not come back on was my test modem.
I have since then been fighting to no avail to get this damn thing to work.
Tried quite a few different MAC's. The modem says online I just dont ever get an IP for my PC.
The modem itself DOES get a 10.X.X.X IP.
Some advice or help would be greatly appreciated.
Here is the log.
Thanks!

Attached Files

putty.txt 21K 14 downloads

SB5101 reboot

Wed, 20 Jul 2011 17:00:22 +0000

I got haxorware on sb5101,it work fine but after 10 minuts it reboot,i cannot undestand why
Now i swich my modem whith sb5100mod and it work fine,but i cannot undestand why my haxorware modem keep reboting after 10 minuts

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2011.07.23 06:45:56 =~=~=~=~=~=~=~=~=~=~=~=
Haxorware integrated telnet daemon

Username: anagia
Password: ********
Welcome.

CM>
CM> run
CM>
CM> run_app

Running the system...

BcmCmDocsisStatusEventCodes::kCmIsNotOperational
CamDeleteAddress: Deleted address from cam segment 0

CM> Non-Vol Settings successfully written to the device.

@@@@@ In ResetRngState, fRemainingInitRngPowerSteps 17

mot_scanList: Setting override freq @ 7000000
Scanning DS Channel at 7000000 Hz... (Initial target freq)

mot_scanList: Setting override freq @ 0
Go back to 1st favorite
Attempting Downstream FEC lock @ freq= 501000000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 507000000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 513000000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 519000000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 525000000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 531000000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 537000000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 543000000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 549000000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 555000000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 561000000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 567000000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 573000000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 579000000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 585000000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 591000000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 597000000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 603000000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 609000000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 615000000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 621000000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 627000000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 633000000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 639000000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 645000000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 651000000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 657000000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 663000000 Hz, QAM64

******************************************
DOWNSTREAM STATUS
******************************************
Tuner Frequency = 663000000 Hz
Carrier Offset = -19 Hz
Symbol rate = 5056941 sym/sec
SNR = 38 dB
QAM Mode = QAM64
Tuner AGC = 0xfff00000
IF AGC = 0x139a91a9
Power Level = 5 dB
QAM = LOCKED
FEC = LOCKED
******************************************

CM> Sending syslog message from IF 1 to 192.168.100.10:
<133> CABLEMODEM [Motorola Corporation]: <2300955824> T1 No Ucd Timeout - Reinitialize MAC...
BcmTestAndComputeLocalNetIf(): Error! BcmNetIfNumToIpAddr( 1 ) = 0
Non-Vol Settings successfully written to the device.

@@@@@ In ResetRngState, fRemainingInitRngPowerSteps 17

mot_scanList: Setting override freq @ 651000000
Scanning DS Channel at 651000000 Hz... (Initial target freq)

******************************************
DOWNSTREAM STATUS
******************************************
Tuner Frequency = 651000000 Hz
Carrier Offset = -15 Hz
Symbol rate = 5360537 sym/sec
SNR = 38 dB
QAM Mode = QAM256
Tuner AGC = 0xfff00000
IF AGC = 0x1367772b
Power Level = 6 dB
QAM = LOCKED
FEC = LOCKED
******************************************

CM> Selecting UCD for Us Channel 1

RNG-RSP Adj: tim=2583 power=0 freq=0 Stat=Continue

RNG-RSP Adj: tim=0 power=0 freq=0 Stat=Success

******************************************
UPSTREAM STATUS
******************************************
Upstream Status = UP
Upstream Channel = 1
Upstream Frequency = 30000000 Hz
Upstream Power = 40 dBmV
Ranging SID = 0x181
Upstream Symbol Rate = 2560000 sym/sec
******************************************

Starting IP Initialization with DHCP...

CM> ARPing for default GW IP = 10.130.0.1
MAC = 00:30:b8Big Grin4:54:30
DHCP completed successfully!
DHCP: IP address = 10.130.15.90

Starting Time Of Day...
Current system time -> Tue Jul 26 13:39:35 2011

System start time -> Tue Jul 26 13:38:23 2011

Starting Tftp of configuration file...
Resuming SNMP Thread
tftp-enforce bypass is using 192.168.50.134:HSD_hni220_cvcmot_stfilthn2.bin
Initiating fake TFTP Get (tftp-enforce bypass)
Bypass succeeded.File was 6032 bytes
TFTPD Started
Forcing Config TFTP IP to 127.0.0.1
Forcing Config File name to 000E5CD97A54.bin
TFTPD received 1 from 10.130.15.90:1035
Storing received cfg of size 6030 to memory
TFTPD Shut down
TLV-11[1]: 1.3.6.1.2.1.69.1.6.3.0 -> 2 (i32)
TLV-11[2]: 1.3.6.1.2.1.69.1.6.1.0 -> 1 (i32)
TLV-11[3]: 1.3.6.1.2.1.69.1.6.4.1.2.1 -> 4 (i32)
TLV-11[4]: 1.3.6.1.2.1.69.1.6.4.1.3.1 -> 2 (i32)
TLV-11[5]: 1.3.6.1.2.1.69.1.6.4.1.4.1 -> 2 (i32)
TLV-11[6]: 1.3.6.1.2.1.69.1.6.4.1.5.1 -> 1 (i32)
TLV-11[7]: 1.3.6.1.2.1.69.1.6.4.1.7.1 -> 0.0.0.0
TLV-11[8]: 1.3.6.1.2.1.69.1.6.4.1.8.1 -> 0.0.0.0
TLV-11[9]: 1.3.6.1.2.1.69.1.6.4.1.9.1 -> 0.0.0.0
TLV-11[10]: 1.3.6.1.2.1.69.1.6.4.1.10.1 -> 0.0.0.0
TLV-11[11]: 1.3.6.1.2.1.69.1.6.4.1.11.1 -> 17 (i32)
TLV-11[12]: 1.3.6.1.2.1.69.1.6.4.1.12.1 -> 0 (i32)
TLV-11[13]: 1.3.6.1.2.1.69.1.6.4.1.13.1 -> 65535 (i32)
TLV-11[14]: 1.3.6.1.2.1.69.1.6.4.1.14.1 -> 68 (i32)
TLV-11[15]: 1.3.6.1.2.1.69.1.6.4.1.15.1 -> 68 (i32)
TLV-11[16]: 1.3.6.1.2.1.69.1.6.4.1.6.1 -> 2 (i32)
TLV-11[17]: 1.3.6.1.2.1.69.1.6.4.1.19.1 -> 1 (i32)
TLV-11[18]: 1.3.6.1.2.1.69.1.6.4.1.2.2 -> 4 (i32)
TLV-11[19]: 1.3.6.1.2.1.69.1.6.4.1.3.2 -> 2 (i32)
TLV-11[20]: 1.3.6.1.2.1.69.1.6.4.1.4.2 -> 2 (i32)
TLV-11[21]: 1.3.6.1.2.1.69.1.6.4.1.5.2 -> 2 (i32)
TLV-11[22]: 1.3.6.1.2.1.69.1.6.4.1.7.2 -> 0.0.0.0
TLV-11[23]: 1.3.6.1.2.1.69.1.6.4.1.8.2 -> 0.0.0.0
TLV-11[24]: 1.3.6.1.2.1.69.1.6.4.1.9.2 -> 0.0.0.0
TLV-11[25]: 1.3.6.1.2.1.69.1.6.4.1.10.2 -> 0.0.0.0
TLV-11[26]: 1.3.6.1.2.1.69.1.6.4.1.11.2 -> 17 (i32)
TLV-11[27]: 1.3.6.1.2.1.69.1.6.4.1.12.2 -> 0 (i32)
TLV-11[28]: 1.3.6.1.2.1.69.1.6.4.1.13.2 -> 65535 (i32)
TLV-11[29]: 1.3.6.1.2.1.69.1.6.4.1.14.2 -> 67 (i32)
TLV-11[30]: 1.3.6.1.2.1.69.1.6.4.1.15.2 -> 67 (i32)
TLV-11[31]: 1.3.6.1.2.1.69.1.6.4.1.6.2 -> 2 (i32)
TLV-11[32]: 1.3.6.1.2.1.69.1.6.4.1.19.2 -> 1 (i32)
TLV-11[33]: 1.3.6.1.2.1.69.1.6.4.1.2.3 -> 4 (i32)
TLV-11[34]: 1.3.6.1.2.1.69.1.6.4.1.3.3 -> 1 (i32)
TLV-11[35]: 1.3.6.1.2.1.69.1.6.4.1.4.3 -> 0 (i32)
TLV-11[36]: 1.3.6.1.2.1.69.1.6.4.1.5.3 -> 3 (i32)
TLV-11[37]: 1.3.6.1.2.1.69.1.6.4.1.7.3 -> 0.0.0.0
TLV-11[38]: 1.3.6.1.2.1.69.1.6.4.1.8.3 -> 0.0.0.0
TLV-11[39]: 1.3.6.1.2.1.69.1.6.4.1.9.3 -> 0.0.0.0
TLV-11[40]: 1.3.6.1.2.1.69.1.6.4.1.10.3 -> 0.0.0.0
TLV-11[41]: 1.3.6.1.2.1.69.1.6.4.1.11.3 -> 6 (i32)
TLV-11[42]: 1.3.6.1.2.1.69.1.6.4.1.12.3 -> 0 (i32)
TLV-11[43]: 1.3.6.1.2.1.69.1.6.4.1.13.3 -> 65535 (i32)
TLV-11[44]: 1.3.6.1.2.1.69.1.6.4.1.14.3 -> 135 (i32)
TLV-11[45]: 1.3.6.1.2.1.69.1.6.4.1.15.3 -> 139 (i32)
TLV-11[46]: 1.3.6.1.2.1.69.1.6.4.1.6.3 -> 2 (i32)
TLV-11[47]: 1.3.6.1.2.1.69.1.6.4.1.19.3 -> 1 (i32)
TLV-11[48]: 1.3.6.1.2.1.69.1.6.4.1.2.4 -> 4 (i32)
TLV-11[49]: 1.3.6.1.2.1.69.1.6.4.1.3.4 -> 1 (i32)
TLV-11[50]: 1.3.6.1.2.1.69.1.6.4.1.4.4 -> 0 (i32)
TLV-11[51]: 1.3.6.1.2.1.69.1.6.4.1.5.4 -> 3 (i32)
TLV-11[52]: 1.3.6.1.2.1.69.1.6.4.1.7.4 -> 0.0.0.0
TLV-11[53]: 1.3.6.1.2.1.69.1.6.4.1.8.4 -> 0.0.0.0
TLV-11[54]: 1.3.6.1.2.1.69.1.6.4.1.9.4 -> 0.0.0.0
TLV-11[55]: 1.3.6.1.2.1.69.1.6.4.1.10.4 -> 0.0.0.0
TLV-11[56]: 1.3.6.1.2.1.69.1.6.4.1.11.4 -> 17 (i32)
TLV-11[57]: 1.3.6.1.2.1.69.1.6.4.1.12.4 -> 0 (i32)
TLV-11[58]: 1.3.6.1.2.1.69.1.6.4.1.13.4 -> 65535 (i32)
TLV-11[59]: 1.3.6.1.2.1.69.1.6.4.1.14.4 -> 135 (i32)
TLV-11[60]: 1.3.6.1.2.1.69.1.6.4.1.15.4 -> 139 (i32)
TLV-11[61]: 1.3.6.1.2.1.69.1.6.4.1.6.4 -> 2 (i32)
TLV-11[62]: 1.3.6.1.2.1.69.1.6.4.1.19.4 -> 1 (i32)
TLV-11[63]: 1.3.6.1.2.1.69.1.6.4.1.2.5 -> 4 (i32)
TLV-11[64]: 1.3.6.1.2.1.69.1.6.4.1.3.5 -> 1 (i32)
TLV-11[65]: 1.3.6.1.2.1.69.1.6.4.1.4.5 -> 0 (i32)
TLV-11[66]: 1.3.6.1.2.1.69.1.6.4.1.5.5 -> 2 (i32)
TLV-11[67]: 1.3.6.1.2.1.69.1.6.4.1.7.5 -> 0.0.0.0
TLV-11[68]: 1.3.6.1.2.1.69.1.6.4.1.8.5 -> 0.0.0.0
TLV-11[69]: 1.3.6.1.2.1.69.1.6.4.1.9.5 -> 192.168.0.0
TLV-11[70]: 1.3.6.1.2.1.69.1.6.4.1.10.5 -> 255.255.0.0
TLV-11[71]: 1.3.6.1.2.1.69.1.6.4.1.11.5 -> 6 (i32)
TLV-11[72]: 1.3.6.1.2.1.69.1.6.4.1.12.5 -> 0 (i32)
TLV-11[73]: 1.3.6.1.2.1.69.1.6.4.1.13.5 -> 65535 (i32)
TLV-11[74]: 1.3.6.1.2.1.69.1.6.4.1.14.5 -> 161 (i32)
TLV-11[75]: 1.3.6.1.2.1.69.1.6.4.1.15.5 -> 161 (i32)
TLV-11[76]: 1.3.6.1.2.1.69.1.6.4.1.6.5 -> 2 (i32)
TLV-11[77]: 1.3.6.1.2.1.69.1.6.4.1.19.5 -> 1 (i32)
TLV-11[78]: 1.3.6.1.2.1.69.1.6.4.1.2.6 -> 4 (i32)
TLV-11[79]: 1.3.6.1.2.1.69.1.6.4.1.3.6 -> 1 (i32)
TLV-11[80]: 1.3.6.1.2.1.69.1.6.4.1.4.6 -> 0 (i32)
TLV-11[81]: 1.3.6.1.2.1.69.1.6.4.1.5.6 -> 2 (i32)
TLV-11[82]: 1.3.6.1.2.1.69.1.6.4.1.7.6 -> 0.0.0.0
TLV-11[83]: 1.3.6.1.2.1.69.1.6.4.1.8.6 -> 0.0.0.0
TLV-11[84]: 1.3.6.1.2.1.69.1.6.4.1.9.6 -> 192.168.0.0
TLV-11[85]: 1.3.6.1.2.1.69.1.6.4.1.10.6 -> 255.255.0.0
TLV-11[86]: 1.3.6.1.2.1.69.1.6.4.1.11.6 -> 17 (i32)
TLV-11[87]: 1.3.6.1.2.1.69.1.6.4.1.12.6 -> 0 (i32)
TLV-11[88]: 1.3.6.1.2.1.69.1.6.4.1.13.6 -> 65535 (i32)
TLV-11[89]: 1.3.6.1.2.1.69.1.6.4.1.14.6 -> 161 (i32)
TLV-11[90]: 1.3.6.1.2.1.69.1.6.4.1.15.6 -> 161 (i32)
TLV-11[91]: 1.3.6.1.2.1.69.1.6.4.1.6.6 -> 2 (i32)
TLV-11[92]: 1.3.6.1.2.1.69.1.6.4.1.19.6 -> 1 (i32)
TLV-11[93]: 1.3.6.1.2.1.69.1.6.4.1.2.7 -> 4 (i32)
TLV-11[94]: 1.3.6.1.2.1.69.1.6.4.1.3.7 -> 1 (i32)
TLV-11[95]: 1.3.6.1.2.1.69.1.6.4.1.4.7 -> 2 (i32)
TLV-11[96]: 1.3.6.1.2.1.69.1.6.4.1.5.7 -> 2 (i32)
TLV-11[97]: 1.3.6.1.2.1.69.1.6.4.1.7.7 -> 0.0.0.0
TLV-11[98]: 1.3.6.1.2.1.69.1.6.4.1.8.7 -> 0.0.0.0
TLV-11[99]: 1.3.6.1.2.1.69.1.6.4.1.9.7 -> 10.0.0.0
TLV-11[100]: 1.3.6.1.2.1.69.1.6.4.1.10.7 -> 255.0.0.0
TLV-11[101]: 1.3.6.1.2.1.69.1.6.4.1.11.7 -> 17 (i32)
TLV-11[102]: 1.3.6.1.2.1.69.1.6.4.1.12.7 -> 0 (i32)
TLV-11[103]: 1.3.6.1.2.1.69.1.6.4.1.13.7 -> 65535 (i32)
TLV-11[104]: 1.3.6.1.2.1.69.1.6.4.1.14.7 -> 161 (i32)
TLV-11[105]: 1.3.6.1.2.1.69.1.6.4.1.15.7 -> 161 (i32)
TLV-11[106]: 1.3.6.1.2.1.69.1.6.4.1.6.7 -> 2 (i32)
TLV-11[107]: 1.3.6.1.2.1.69.1.6.4.1.19.7 -> 1 (i32)
TLV-11[108]: 1.3.6.1.2.1.69.1.6.4.1.2.8 -> 4 (i32)
TLV-11[109]: 1.3.6.1.2.1.69.1.6.4.1.3.8 -> 1 (i32)
TLV-11[110]: 1.3.6.1.2.1.69.1.6.4.1.4.8 -> 2 (i32)
TLV-11[111]: 1.3.6.1.2.1.69.1.6.4.1.5.8 -> 2 (i32)
TLV-11[112]: 1.3.6.1.2.1.69.1.6.4.1.7.8 -> 0.0.0.0
TLV-11[113]: 1.3.6.1.2.1.69.1.6.4.1.8.8 -> 0.0.0.0
TLV-11[114]: 1.3.6.1.2.1.69.1.6.4.1.9.8 -> 10.0.0.0
TLV-11[115]: 1.3.6.1.2.1.69.1.6.4.1.10.8 -> 255.0.0.0
TLV-11[116]: 1.3.6.1.2.1.69.1.6.4.1.11.8 -> 6 (i32)
TLV-11[117]: 1.3.6.1.2.1.69.1.6.4.1.12.8 -> 0 (i32)
TLV-11[118]: 1.3.6.1.2.1.69.1.6.4.1.13.8 -> 65535 (i32)
TLV-11[119]: 1.3.6.1.2.1.69.1.6.4.1.14.8 -> 161 (i32)
TLV-11[120]: 1.3.6.1.2.1.69.1.6.4.1.15.8 -> 161 (i32)
TLV-11[121]: 1.3.6.1.2.1.69.1.6.4.1.6.8 -> 2 (i32)
TLV-11[122]: 1.3.6.1.2.1.69.1.6.4.1.19.8 -> 1 (i32)
TLV-11[123]: 1.3.6.1.2.1.69.1.6.4.1.2.9 -> 4 (i32)
TLV-11[124]: 1.3.6.1.2.1.69.1.6.4.1.3.9 -> 1 (i32)
TLV-11[125]: 1.3.6.1.2.1.69.1.6.4.1.4.9 -> 0 (i32)
TLV-11[126]: 1.3.6.1.2.1.69.1.6.4.1.5.9 -> 2 (i32)
TLV-11[127]: 1.3.6.1.2.1.69.1.6.4.1.7.9 -> 0.0.0.0
TLV-11[128]: 1.3.6.1.2.1.69.1.6.4.1.8.9 -> 0.0.0.0
TLV-11[129]: 1.3.6.1.2.1.69.1.6.4.1.9.9 -> 0.0.0.0
TLV-11[130]: 1.3.6.1.2.1.69.1.6.4.1.10.9 -> 0.0.0.0
TLV-11[131]: 1.3.6.1.2.1.69.1.6.4.1.11.9 -> 6 (i32)
TLV-11[132]: 1.3.6.1.2.1.69.1.6.4.1.12.9 -> 0 (i32)
TLV-11[133]: 1.3.6.1.2.1.69.1.6.4.1.13.9 -> 65535 (i32)
TLV-11[134]: 1.3.6.1.2.1.69.1.6.4.1.14.9 -> 4444 (i32)
TLV-11[135]: 1.3.6.1.2.1.69.1.6.4.1.15.9 -> 4444 (i32)
TLV-11[136]: 1.3.6.1.2.1.69.1.6.4.1.6.9 -> 2 (i32)
TLV-11[137]: 1.3.6.1.2.1.69.1.6.4.1.19.9 -> 1 (i32)
TLV-11[138]: 1.3.6.1.2.1.69.1.6.4.1.2.11 -> 4 (i32)
TLV-11[139]: 1.3.6.1.2.1.69.1.6.4.1.3.11 -> 1 (i32)
TLV-11[140]: 1.3.6.1.2.1.69.1.6.4.1.4.11 -> 0 (i32)
TLV-11[141]: 1.3.6.1.2.1.69.1.6.4.1.5.11 -> 2 (i32)
TLV-11[142]: 1.3.6.1.2.1.69.1.6.4.1.7.11 -> 0.0.0.0
TLV-11[143]: 1.3.6.1.2.1.69.1.6.4.1.8.11 -> 0.0.0.0
TLV-11[144]: 1.3.6.1.2.1.69.1.6.4.1.9.11 -> 0.0.0.0
TLV-11[145]: 1.3.6.1.2.1.69.1.6.4.1.10.11 -> 0.0.0.0
TLV-11[146]: 1.3.6.1.2.1.69.1.6.4.1.11.11 -> 6 (i32)
TLV-11[147]: 1.3.6.1.2.1.69.1.6.4.1.12.11 -> 0 (i32)
TLV-11[148]: 1.3.6.1.2.1.69.1.6.4.1.13.11 -> 65535 (i32)
TLV-11[149]: 1.3.6.1.2.1.69.1.6.4.1.14.11 -> 445 (i32)
TLV-11[150]: 1.3.6.1.2.1.69.1.6.4.1.15.11 -> 445 (i32)
TLV-11[151]: 1.3.6.1.2.1.69.1.6.4.1.6.11 -> 2 (i32)
TLV-11[152]: 1.3.6.1.2.1.69.1.6.4.1.19.11 -> 1 (i32)
TLV-11[153]: 1.3.6.1.2.1.69.1.6.4.1.2.12 -> 4 (i32)
TLV-11[154]: 1.3.6.1.2.1.69.1.6.4.1.3.12 -> 1 (i32)
TLV-11[155]: 1.3.6.1.2.1.69.1.6.4.1.4.12 -> 0 (i32)
TLV-11[156]: 1.3.6.1.2.1.69.1.6.4.1.5.12 -> 2 (i32)
TLV-11[157]: 1.3.6.1.2.1.69.1.6.4.1.7.12 -> 0.0.0.0
TLV-11[158]: 1.3.6.1.2.1.69.1.6.4.1.8.12 -> 0.0.0.0
TLV-11[159]: 1.3.6.1.2.1.69.1.6.4.1.9.12 -> 0.0.0.0
TLV-11[160]: 1.3.6.1.2.1.69.1.6.4.1.10.12 -> 0.0.0.0
TLV-11[161]: 1.3.6.1.2.1.69.1.6.4.1.11.12 -> 6 (i32)
TLV-11[162]: 1.3.6.1.2.1.69.1.6.4.1.12.12 -> 0 (i32)
TLV-11[163]: 1.3.6.1.2.1.69.1.6.4.1.13.12 -> 65535 (i32)
TLV-11[164]: 1.3.6.1.2.1.69.1.6.4.1.14.12 -> 593 (i32)
TLV-11[165]: 1.3.6.1.2.1.69.1.6.4.1.15.12 -> 593 (i32)
TLV-11[166]: 1.3.6.1.2.1.69.1.6.4.1.6.12 -> 2 (i32)
TLV-11[167]: 1.3.6.1.2.1.69.1.6.4.1.19.12 -> 1 (i32)
TLV-11[168]: 1.3.6.1.2.1.69.1.6.4.1.2.13 -> 4 (i32)
TLV-11[169]: 1.3.6.1.2.1.69.1.6.4.1.3.13 -> 2 (i32)
TLV-11[170]: 1.3.6.1.2.1.69.1.6.4.1.4.13 -> 0 (i32)
TLV-11[171]: 1.3.6.1.2.1.69.1.6.4.1.5.13 -> 2 (i32)
TLV-11[172]: 1.3.6.1.2.1.69.1.6.4.1.7.13 -> 0.0.0.0
TLV-11[173]: 1.3.6.1.2.1.69.1.6.4.1.8.13 -> 0.0.0.0
TLV-11[174]: 1.3.6.1.2.1.69.1.6.4.1.9.13 -> 0.0.0.0
TLV-11[175]: 1.3.6.1.2.1.69.1.6.4.1.10.13 -> 0.0.0.0
TLV-11[176]: 1.3.6.1.2.1.69.1.6.4.1.11.13 -> 17 (i32)
TLV-11[177]: 1.3.6.1.2.1.69.1.6.4.1.12.13 -> 0 (i32)
TLV-11[178]: 1.3.6.1.2.1.69.1.6.4.1.13.13 -> 65535 (i32)
TLV-11[179]: 1.3.6.1.2.1.69.1.6.4.1.14.13 -> 69 (i32)
TLV-11[180]: 1.3.6.1.2.1.69.1.6.4.1.15.13 -> 69 (i32)
TLV-11[181]: 1.3.6.1.2.1.69.1.6.4.1.6.13 -> 2 (i32)
TLV-11[182]: 1.3.6.1.2.1.69.1.6.4.1.19.13 -> 1 (i32)
TLV-11[183]: 1.3.6.1.2.1.69.1.6.4.1.2.18 -> 4 (i32)
TLV-11[184]: 1.3.6.1.2.1.69.1.6.4.1.3.18 -> 1 (i32)
TLV-11[185]: 1.3.6.1.2.1.69.1.6.4.1.4.18 -> 0 (i32)
TLV-11[186]: 1.3.6.1.2.1.69.1.6.4.1.5.18 -> 2 (i32)
TLV-11[187]: 1.3.6.1.2.1.69.1.6.4.1.7.18 -> 0.0.0.0
TLV-11[188]: 1.3.6.1.2.1.69.1.6.4.1.8.18 -> 0.0.0.0
TLV-11[189]: 1.3.6.1.2.1.69.1.6.4.1.9.18 -> 0.0.0.0
TLV-11[190]: 1.3.6.1.2.1.69.1.6.4.1.10.18 -> 0.0.0.0
TLV-11[191]: 1.3.6.1.2.1.69.1.6.4.1.11.18 -> 6 (i32)
TLV-11[192]: 1.3.6.1.2.1.69.1.6.4.1.12.18 -> 0 (i32)
TLV-11[193]: 1.3.6.1.2.1.69.1.6.4.1.13.18 -> 65535 (i32)
TLV-11[194]: 1.3.6.1.2.1.69.1.6.4.1.14.18 -> 1025 (i32)
TLV-11[195]: 1.3.6.1.2.1.69.1.6.4.1.15.18 -> 1025 (i32)
TLV-11[196]: 1.3.6.1.2.1.69.1.6.4.1.6.18 -> 2 (i32)
TLV-11[197]: 1.3.6.1.2.1.69.1.6.4.1.19.18 -> 1 (i32)
TLV-11[198]: 1.3.6.1.2.1.69.1.6.4.1.2.20 -> 4 (i32)
TLV-11[199]: 1.3.6.1.2.1.69.1.6.4.1.3.20 -> 1 (i32)
TLV-11[200]: 1.3.6.1.2.1.69.1.6.4.1.4.20 -> 0 (i32)
TLV-11[201]: 1.3.6.1.2.1.69.1.6.4.1.5.20 -> 2 (i32)
TLV-11[202]: 1.3.6.1.2.1.69.1.6.4.1.7.20 -> 0.0.0.0
TLV-11[203]: 1.3.6.1.2.1.69.1.6.4.1.8.20 -> 0.0.0.0
TLV-11[204]: 1.3.6.1.2.1.69.1.6.4.1.9.20 -> 0.0.0.0
TLV-11[205]: 1.3.6.1.2.1.69.1.6.4.1.10.20 -> 0.0.0.0
TLV-11[206]: 1.3.6.1.2.1.69.1.6.4.1.11.20 -> 6 (i32)
TLV-11[207]: 1.3.6.1.2.1.69.1.6.4.1.12.20 -> 0 (i32)
TLV-11[208]: 1.3.6.1.2.1.69.1.6.4.1.13.20 -> 65535 (i32)
TLV-11[209]: 1.3.6.1.2.1.69.1.6.4.1.14.20 -> 5000 (i32)
TLV-11[210]: 1.3.6.1.2.1.69.1.6.4.1.15.20 -> 5000 (i32)
TLV-11[211]: 1.3.6.1.2.1.69.1.6.4.1.6.20 -> 2 (i32)
TLV-11[212]: 1.3.6.1.2.1.69.1.6.4.1.19.20 -> 1 (i32)
TLV-11[213]: 1.3.6.1.2.1.69.1.6.2.1.2.14 -> 4 (i32)
TLV-11[214]: 1.3.6.1.2.1.69.1.6.2.1.3.14 -> 0 (i32)
TLV-11[215]: 1.3.6.1.2.1.69.1.6.2.1.4.14 -> 1 (i32)
TLV-11[216]: 1.3.6.1.2.1.69.1.6.2.1.5.14 -> 2054 (i32)
TLV-11[217]: 1.3.6.1.2.1.69.1.6.2.1.2.15 -> 4 (i32)
TLV-11[218]: 1.3.6.1.2.1.69.1.6.2.1.3.15 -> 0 (i32)
TLV-11[219]: 1.3.6.1.2.1.69.1.6.2.1.4.15 -> 1 (i32)
TLV-11[220]: 1.3.6.1.2.1.69.1.6.2.1.5.15 -> 2048 (i32)
TLV-11[221]: 1.3.6.1.2.1.69.1.2.1.4.2 -> public
TLV-11[222]: 1.3.6.1.2.1.69.1.2.1.7.2 -> 4 (i32)
TLV-11[223]: 1.3.6.1.2.1.69.1.2.1.5.1 -> 3 (i32)
TLV-11[224]: 1.3.6.1.2.1.69.1.2.1.7.1 -> 4 (i32)
TLV-11[225]: 1.3.6.1.2.1.69.1.2.1.6.1 -> @
TLV-11[226]: 1.3.6.1.2.1.69.1.2.1.5.2 -> 2 (i32)
TLV-11[227]: 1.3.6.1.2.1.69.1.2.1.6.2 -> @
TLV-11[228]: 1.3.6.1.2.1.69.1.2.1.4.1 -> private
Time Of Day completed...
SB5101 CM Agent w/ BRCM Factory Support processing TLV-11's
SNMP packet sent to 10.130.15.90:225
TLV-11 error: 1.3.6.1.2.1.69.1.6.4.1.2.1 -> 4 (i32): INCONSISTENT_VALUE
TLV-11 failure: error status=12, error index=3
Non-Vol BPI Settings successfully written to the device.
Enabling network access for all CPE ports.

mot_scanList: Writing to Flash!
BcmCmDocsisStatusEventCodes::kCmIsOperational
Suspending SNMP Thread

Need help setting up Sigma

Wed, 20 Jul 2011 07:45:42 +0000

So I just got a Sb5100 for free but problem is it hasn't been program yet only premod and flashed. So I was wondering if anyone can point me to the right direction as to how to program it that would be great.

Connection dropping

Tue, 19 Jul 2011 23:27:55 +0000

Hello, I have a CISCO DPC2100R2 and im getting some intermittent disconnection

What do you guys think about my signal ? what are the normal ?

Software Version dpc2100rx-v202r1256-110513Uas-TWC
Receive Power Level -10.1 dBmV
Signal to Noise Ratio 37.2 dBmV
Transmit Power Level 49.5 dBmV
Cable Modem Status Operational

Also, how do i enable the Signal tab on http://192.168.100.1

thanks a lot!

macs getting banned

Tue, 19 Jul 2011 20:16:50 +0000

Does anyone know why my mac addresses are getting banned. I had 2 macs banned in 1 day. Is there a way to keep them up longer?

timewarner

Tue, 19 Jul 2011 02:57:47 +0000

(Time Warner) is not working in staten island ny i tried to change mac no good, all lights stay on. motorola 5100,5101.
any one know whatc going on with TW?

SBV6240 Puma-Based Thoughts?

Mon, 18 Jul 2011 07:38:11 +0000

I'm looking at buying a SBV6240 to replace my !@#$ed up legit SB6120, and the SBV6420 is puma-based, any support in thought?

HELP!!!

Mon, 18 Jul 2011 06:30:39 +0000

okay so i got this modem from a guy who sells them O_O and i have been using it for about 6 months but then it started to have problems so he switched it now the modem i had was a Motorola SB5101 and now i have a scientific Atlanta so first off...did i get a shitier one? and second i want to increase the speed of it! i have done speed test's and it goes to about 9.80MBPS but downloads at 1.20mbps any ways i have no idea of how to increase the speed i would be really happy if someone can do a step my step thing...also i hope im not posting this in the wrong place ohh i have been messing with it here and there so i know i have a haxorware filmware 1.1 rev 39 and i know about the HFC mac address things...i have like 4 from the guy i would call him and he would make me change it to fix my connection O_O anyhow i really really need help to make it go faster cause huh i want to download things and i want to get my money's worth thank you in advance

Corrupted Dump

Sun, 17 Jul 2011 05:37:08 +0000

Hi all

I have a question that I'm hoping someone can lend me a hand with. Long story short, I bricked my modem trying to flash using a pjtag on a computer where the parallel port wasn't exactly what was needed to work. I did make a 2MB backup file using that computer, but because it wasn't read correctly, my modem stays bricked when I program it to the modem on a different computer with a parallel that does work. This is a legit subbed modem that I just wanted to play around on, then flash back to stock. My main concern is this: if I flash someone else's 2MB dump, have I lost my certs? Or am I just hosed all around here and need to buy a new modem?

Thank you in advance

EDIT: I was able to flash haxorware and get online with that, but I'd like to get back to stock to avoid having my account closed. I see this in my error log "TLV-11 - Illegal Set operation failed", which concerns me.

webstar help!!!

Sun, 17 Jul 2011 05:16:43 +0000

i restored the modem non the modem don't wanna work with the net. what steps should i take to get it back to working. i try to access it through manuel ip config it work,as soon as i check obtain ip auto i am no longer able to access the modem.

really slow speed

Sat, 16 Jul 2011 20:46:23 +0000

Hi I got m modem up and the speed is really slow 0.13mb down. How can I get faster speeds? Also how can I get a telnet log? In 192.168.100.1 it shows that im not walledgardened. Please help.

error codes

Sat, 16 Jul 2011 15:16:08 +0000

is there an error code list for haxoware? if so where would it be located?thanks

mac address

Sat, 16 Jul 2011 15:03:10 +0000

are mac address specific to modem models?my sub is a u10co18 ...my mod is a sb5101i...if i can use the subbed mac on the mod is it safe to do...thanks

CVC Cert Files

Sat, 16 Jul 2011 06:11:28 +0000

hey guys. Ive been reading and reading and reading for the past few weeks, But I just cant seem to get this error to go away "Configuration File CVC Validation Failure"

Im trying to do a 1:1 clone and I already used USBJTAGNT to save the cfg from the firmware of my activated modem then did cmnonexpv1.1.1.exe -f cfg.bin -e To extract the Cert files. and uploaded them to the modem...
but still getting the same error. Im using using Haxorware r39 if that makes a difference.

Also, The modem status does get to Operational, but shortly after, My NIC loses the IP Address and turns into a 169 address

And this is on BPI+ Bypass setting

Is there anything Im missing here?

EDIT: I just read the BIG RED NOTE on top. Sorry for posting on the wrong section. Let me know if an Admin is going to move it, or if you want me to post it again on another section.

modem sb5101

Thu, 14 Jul 2011 16:53:10 +0000

Hi all,

I just bought a modem sb5101 from a guy on Craigslist, He set the password on this modem so there is no way for me to change the MAC Address or
config the modem. Is any way that I can reset the password for my own? Thanks. Sorry I am a newbie

Newbie here Really need Help....

Thu, 14 Jul 2011 09:10:46 +0000

Hi,
i just got my Sb6120 and im willing to solder because i dont have 60 dollar to buy jtag nt i think. so what do i need to get it start please someone help me out here and show me the step please. im really new at this n i cant afford comscast every month. so please can anyone send me pix or tell me the part that i need to mod my sb6120 n include as much details as possible thank you

SB5101NU

Wed, 13 Jul 2011 13:43:38 +0000

Hi guys.

I'm getting problem with this version modem:

Software Version: SB5101NU-2.1.2.0-GA-01-NOSH
Hardware Version: 1
MIB Version: II
GUI Version: 1.0

I cant get any info with SNMP:

sol# snmpwalk -v2c -c public 10.10.239.94 system
Timeout: No Response from 10.10.239.94

I tried with other OID but no sucess.

I dont known what I need to do to enable the snmp in this modem. Is there any firmware that I can try?

The logs show this:

Time Priority Code Description
2011-07-13 13:40:55 4-Error E107.0 SW upgrade Failed after download - Incompatible SW file
2011-07-13 13:40:53 6-Notice E102.0 SW Download INIT - Via Config file ncxv9873254
2011-07-13 13:40:52 4-Error E206.0 Improper Configuration File CVC Format
1970-01-01 00:04:04 3-Critical D003.0 DHCP FAILED - Requested Info not supported.
1970-01-01 00:03:53 3-Critical R002.0 No Ranging Response received - T3 time-out (US 5)
1970-01-01 00:03:37 3-Critical R002.0 No Ranging Response received - T3 time-out (US 1)
1970-01-01 00:03:27 3-Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:02:29 3-Critical T002.0 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:02:29 3-Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:02:14 3-Critical T002.0 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:02:13 3-Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:00:09 3-Critical T002.0 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:00:09 3-Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:00:06 6-Notice M571.4 Ethernet link dormant - not currently active

Any help?

Regards.

All lights solid including standby

Wed, 13 Jul 2011 09:45:29 +0000

Hey guys,

My SB5101 has worked great for more than a year. Recently I turned it off and when turned it back on, all the lights including PC Activity and Standby immediately come on and stay on. I cannot access the modem page or the Internet. How can I fix this problem, I don't have any experience with JTAG or anything like that.

2 sb5100s in southeast tx not working

Tue, 12 Jul 2011 22:41:05 +0000

both of my modems green lights are constant but and every now and then the online light blinks and then the modem will reset...what is the problem

sb5100 login

Tue, 12 Jul 2011 18:01:09 +0000

I clicked the wrong button under mod1.0.4beta firware html and hit login password by accident. Now it wants a login pass to enter firm. Didnt read what default pass was so now cant get in. anyone know it? I put original 2mg dump bact on modem then reflashed mod1.0.4beta back and still has login pss?

Frisco

Modem disconnecting every few hours...

Mon, 11 Jul 2011 23:17:13 +0000

This section is for the discussion of SB5101 hardware

Modem error. Can't connect

Mon, 11 Jul 2011 19:12:46 +0000

Thanks for the help in advance! I'm using haxorware rev 39 and can't seem to connect, all the lights are on. Here's my log:

Time Priority Code Description
1970-01-01 00:00:05 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:00:45 Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:05 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:00:05 Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:01:36 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:01:36 Notice M573.0 Modem Is Shutting Down and Rebooting...
1970-01-01 00:01:36 Critical Resetting the cable modem due to docsDevResetNow
1970-01-01 00:00:05 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
2011-07-08 05:21:47 Notice I401.0 TLV-11 - unrecognized OID
2011-07-08 05:21:47 Notice M571.0 Ethernet link down - not ready to pass packets
1970-01-01 00:00:16 Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:15 Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:00:13 Notice M571.4 Ethernet link dormant - not currently active
1970-01-01 00:00:05 Notice M571.1 Ethernet link up - ready to pass packets
2011-07-08 05:21:20 Notice M573.0 Modem Is Shutting Down and Rebooting...
2011-07-08 05:21:20 Critical R004.0 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance o
2011-07-08 05:20:55 Notice I401.0 TLV-11 - unrecognized OID
2011-07-08 05:20:55 Notice M571.0 Ethernet link down - not ready to pass packets
1970-01-01 00:00:26 Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:06 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:00:06 Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:02:00 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:02:00 Notice M573.0 Modem Is Shutting Down and Rebooting...
1970-01-01 00:02:00 Critical Resetting the cable modem due to docsDevResetNow
1970-01-01 00:00:05 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
2011-07-07 18:22:49 Notice I401.0 TLV-11 - unrecognized OID
2011-07-07 18:22:49 Notice M571.0 Ethernet link down - not ready to pass packets
1970-01-01 00:00:13 Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
2011-07-07 18:13:49 Notice I401.0 TLV-11 - unrecognized OID
2011-07-07 18:13:49 Notice M571.0 Ethernet link down - not ready to pass packets
1970-01-01 00:00:14 Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
2011-07-07 18:09:45 Notice M571.0 Ethernet link down - not ready to pass packets
1970-01-01 00:00:17 Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:05 Notice M571.1 Ethernet link up - ready to pass packets
2011-07-07 18:09:15 Notice M573.0 Modem Is Shutting Down and Rebooting...
2011-07-07 18:09:15 Critical R004.0 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance o
2011-07-07 18:08:49 Notice I401.0 TLV-11 - unrecognized OID
2011-07-07 18:08:49 Notice M571.0 Ethernet link down - not ready to pass packets
1970-01-01 00:00:13 Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:22:58 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:22:58 Notice M573.0 Modem Is Shutting Down and Rebooting...
1970-01-01 00:22:58 Critical Resetting the cable modem due to docsDevResetNow
1970-01-01 00:00:05 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:00:18 Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:05 Notice M571.1 Ethernet link up - ready to pass packets
2011-07-07 17:38:30 Notice M573.0 Modem Is Shutting Down and Rebooting...
2011-07-07 17:38:30 Critical R004.0 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance o
1970-01-01 00:00:17 Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:02:17 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:02:17 Notice M573.0 Modem Is Shutting Down and Rebooting...
1970-01-01 00:02:17 Critical Resetting the cable modem due to docsDevResetNow
1970-01-01 00:00:05 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
2011-07-07 17:33:40 Critical T002.0 SYNC Timing Synchronization failure - Failed to acquire FEC framing
2011-07-07 17:28:40 Notice I401.0 TLV-11 - unrecognized OID
1970-01-01 00:00:17 Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:03:04 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:03:04 Notice M573.0 Modem Is Shutting Down and Rebooting...
1970-01-01 00:03:04 Critical Resetting the cable modem due to docsDevResetNow
1970-01-01 00:00:05 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:00:05 Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:00:05 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:01:55 Notice M573.0 Modem Is Shutting Down and Rebooting...
1970-01-01 00:01:55 Critical Resetting the cable modem due to docsDevResetNow
1970-01-01 00:00:05 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:00:05 Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:00:05 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
2011-07-07 17:22:25 Notice M573.0 Modem Is Shutting Down and Rebooting...
2011-07-07 17:22:25 Critical R004.0 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance o
2011-07-07 17:22:12 Critical T002.0 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:00:13 Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:17 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:00:17 Notice M573.0 Modem Is Shutting Down and Rebooting...
1970-01-01 00:00:17 Critical Resetting the cable modem due to docsDevResetNow
1970-01-01 00:00:05 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:00:05 Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:00:50 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:00:49 Notice M573.0 Modem Is Shutting Down and Rebooting...
1970-01-01 00:00:49 Critical Resetting the cable modem due to docsDevResetNow
1970-01-01 00:00:06 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:00:06 Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:00:05 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
2011-07-07 17:15:57 Notice M573.0 Modem Is Shutting Down and Rebooting...
2011-07-07 17:15:57 Critical R004.0 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance o
2011-07-07 17:15:39 Critical T002.0 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:00:16 Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:05 Notice M571.1 Ethernet link up - ready to pass packets
2011-07-07 17:13:22 Notice M573.0 Modem Is Shutting Down and Rebooting...
2011-07-07 17:13:21 Critical R004.0 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance o
1970-01-01 00:05:21 Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:10 Critical R002.0 No Ranging Response received - T3 time-out (US 9)
1970-01-01 00:00:05 Notice M571.1 Ethernet link up - ready to pass packets
2011-07-07 10:30:35 Notice M573.0 Modem Is Shutting Down and Rebooting...
2011-07-07 10:30:35 Critical R004.0 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance o
2011-07-07 10:29:44 Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out
1970-01-01 00:00:44 Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:26 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:00:26 Critical T002.0 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:00:21 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:00:21 Critical T002.0 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:00:08 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing

Clone webstar 2100 on sb5101 haxorware

Mon, 11 Jul 2011 11:31:15 +0000

Hi,
I was wondering if it is possible to clone a webstar 2100 onto a sb5101 on haxorware. What would be the ethernet and usb mac? I can't find it on my modem.

Thanks.

enable telnet 61X0 mib ?

Mon, 11 Jul 2011 09:29:23 +0000

i wanted to know if i have a SHELL enabled 61X0 what would be the MIB to enable telnet ?
does anyone know this

Backdoor Scientific Atlanta - Cisco Web Page

Sun, 10 Jul 2011 20:08:37 +0000

In order to pass in Web Page (http://192.168.100.1) avoiding this;

Quote

This feature is not enabled.

This feature has not been enabled in your cable modem.
Please contact your data services provider for more information about this feature and its availability on the network.
To exit this page, click on the "Back" button on your browser tool bar to return to the previous page or click on the "System" link above.

Download and install curl http://curl.haxx.se/ for your OS. Commands line are;

Scientific Atlanta

curl.exe -d "SAHttpAccessOff=1" "http://192.168.100.1/goform/techsupport.asp"
curl.exe -d "SAHttpAccessAdv=1" "http://192.168.100.1/goform/techsupport.asp"

Cisco

curl.exe -d "SAHttpAccessOff2=1" "http://192.168.100.1/goform/techsupport.asp"
curl.exe -d "SAHttpAccessAdv2=1" "http://192.168.100.1/goform/techsupport.asp"

MTA

curl.exe -d "SAHttpAccessAdv16=1" "http://192.168.100.1/goform/techsupport.asp"

Now You have full access to menu Advaced Web Page while modem not reboot. Testing Scientific Atlanta DPC2203 and Cisco DPC2420 - DPC2425.

Telnet and fooling with bpi, but there are some things I don't understand.

Sun, 10 Jul 2011 18:19:48 +0000

I have been playing with bpi.
I did this:

Enable Bpi only and Disable Bpi+:

cd /n/d
enable bpi false
bpi_version 0
enable bpi true
write

found in this thread.
http://www.sbhacker.net/forum/index.php/topic/4611-bpi-commands-for-sb5100-modem/

When i typed write I got the following message.

Can anyone shed any light on this?
One of the available commands is clear_device, but I got a scarey message.
Do I need to clear and rewrite, or is there something else I should do?
Or maybe it did clear and rewrite it, it seems like that might be what happened.

CM/NonVol/CM DOCSIS NonVol> write

Instance: CM DOCSIS NonVol Settings (0x8074b8b8)

NonVolDeviceDriver::NonVolDriverWrite: WARNING - Dynamic NonVol is 'full' - no mor e free segments; need to erase and start over!
NonVolDeviceDriver::NonVolDriverWrite: WARNING - Erasing flash region; a power fai lure here will cause settings to be lost!
NonVolDeviceDriver::NonVolDriverWrite: WARNING - Permanent NonVol is 'full' - no m ore free segments; need to erase and start over!
NonVolDeviceDriver::NonVolDriverWrite: WARNING - Erasing flash region; a power fai lure here will cause settings to be lost!
Dynamic Non-Vol Settings successfully written to the device.
Permanent Non-Vol Settings successfully written to the device.

CM/NonVol/CM DOCSIS NonVol>

Change (Reflash?) 5101 from Sigma-X2 to Haxorware

Sun, 10 Jul 2011 10:06:47 +0000

A friend gave me his old 5101 w/Sigma X2 142 on it. It gets online (after MAC change, of course) fine, uploads/downloads config files, everything.

The question I have is, since TCNiso is basically DOA now, how would I reflash to Haxorware? Start from the beginning w/jtag, etc? Or can I replace the Sigma w/Hax thru the Sigma GUI? Or would it be easier thru telnet?

Some kind of guide would be nice, if there is one.

Thanks

help me with my moddem plz

Fri, 08 Jul 2011 20:59:51 +0000

hi i am new i bought a modem off of craigslist so that i could do my homework because i cant afford to pay monthly now im am faced with the problem of my modem going down at time and i gotta pay someone to fix it $100 or more or to buy a new modem i would like to learn how to get it online my self so if someone can point me to the guides for timewarner in california or idk what i need i got motorola sb101e thanks help greatly apreciated

sb5101

Fri, 08 Jul 2011 20:09:24 +0000

hi friends, can someone help me how to download & upload certs & what software to use.
thanks for your replies.

watch dog

Fri, 08 Jul 2011 02:16:14 +0000

so as it turns out the sexy little arris 802 modems has some kinda watchdog on it that stop you from accessing the web page after you try to flah it and also keeps the modem from accepting any other fw, cant use 192xxxxxxx, network error in putty, connection refuse, you can flash it back with the original fw the lights will work and in putty you can access telnet but thats as far as i can go, any of the experts can give some insights????

Sb5100 html

Thu, 07 Jul 2011 19:27:38 +0000

Hey I put 5100MoD1.0.4beta on a 5100 and cant seem to find html page.. i can find 192.168.100.1 html page.. but tried :667 :1337 ect What is it to get to page to change mac ect??

Frisco

usbjtag NT sb5101

Thu, 07 Jul 2011 14:06:12 +0000

Dear all,
After a long wait, I finally decided to give it a god and got a usbjtag NT, I am trying to connect the cables to the modem but when I try to detect I am getting this in the software.

-detect
IDCODE FFFFFFFF
Manufacturer not found 7FF

Please advise. I am using a sb5101. Thank you in advance.

Need Assistance Recovering My SB5101

Thu, 07 Jul 2011 04:54:11 +0000

My SB5101 was working fine an dandy until it went bonkers when all I did was change some macs on the MAC page..
Saved & Rebooted and then couldn't get back to the modems webpage, although the modem went online and acquired a working IP and I could browse the WEB...?
I cant even connect to the modems webpage either when its directly connected to my PC either..??

Only thing left I think is to ReFlash HaxorWare back onto it, only prob is im not sure what software I need..?
I have the Parallel Jtag cable & the BlackCat-134 App that I've used with SB5100's in the past, will blackcat work with SB5101's or do I need another software to interface with my Parallel Jtag and my SB5101 to reflash Haxorware back onto it..?

sb5101 connection problem

Wed, 06 Jul 2011 23:10:24 +0000

First of all, thank you everyone in this forum for being so supportive. I've been searching and reading many helpful advice on here for 3 weeks before I decide to post. I think I came close to getting things fixed but still not quite doing it right.

Scenario: I bought a modem and all I did was connect it and it worked flawlessly for 2 months. Started having issues so I called the guy who I bought it from but he changed his number. Did research on my own and figured how to play around with haxoware on the modem. Another problem arise when I couldn't have full access to haxoware settings because the guy put a username and password on it. Yes I did tried EVERY SINGLE default user password from other posts' advice with no luck. I spent a few weeks trying to override the user password and I did ran into a few advice like using telnet but it didn't work for me. Another advice was to re flash the modem. So I went to ebay and bought jtag 10 pin cable along with utilities hoping I could do it myself. Was able to open my modem and got an idea how it was done. Watched youtube videos how to flash it and thought I could do it. But my laptop don't have the parallel port so I went to my friend's house with a desktop but his desktop doesn't have the port for the other end of the jtag cable. I gave up and bought another modem.

Problem: Now the new modem gets no internet connection. The issue at first was I get a blinking online and pc activity light. When I run a diagnose test to fix connection it said that "DHCP for local area network disabled". I followed advice and tried regedit >HKEY local machine > Tcpip > interfaces> DHCP enabled changed to 1. No luck. Then I tried 192.168.100.1 to access haxoware from IE and went to Baseline Privacy changed BPI to disabled saved and reboot. That solved the online blinking lights but still no internet.

I don't know what I'm doing wrong but could it be because my HFC MAC and USB MAC are invalid? I read that somewhere and just thought that it may be the problem. I'm new to this and am interested to learn more. Please provide me with some help and suggestions. Thank you.

WebstarEPC2100R2_uploading nonvols

Wed, 06 Jul 2011 14:05:00 +0000

Can anyone help,

For educational purposes, I have downloaded the NOVOLs from a subbed EPC2100R2 using the Haxorware 10rc6 method and then uploaded the nonvols to a EPC2100R2 runing haxorware 39 lite. But its not working. I cant get past the IP its just fails, is there somthing i'm doing wrong.

5100 up

Tue, 05 Jul 2011 21:04:00 +0000

i have a 5100 up and running ,but for some reason no ethernet light,cant get the motorola page or nothing,can some one please lead me to a post about this problem ,please?

sb5101 subbed bin

Tue, 05 Jul 2011 07:17:45 +0000

I dumped a suubed 5101 2 meb bin.. want to put the mac serial and certs on a 5101 hax modem but didnt write down serial from bar codes. nowhere in the full dump or certs files can i see the serial number.. in hax when i put in certs and mac the serial number stays the same as old modem serial.. where can I find the serial from dump?

Frisco

2 Haxorware 5101's cert questions

Mon, 04 Jul 2011 20:17:19 +0000

I recently got legit service at my house by working a deal with a neighbor (they don't provide service for my house because I'm to far from the tap so i use a AMP).

I've been using a 5101 for a couple years and i have another one as well, i'm wanting to completely clone the registered modem certs and all on the other one modem.

I'm mainly wondering about the certs i do not believe the registered modem is on the original factory certs because i don't have a cert download button, So if i was to somehow get it back to stock signed certs would it effect my connection since its provisioned with the self signed ones?

It's working fine since it's legit now instead of being kicked off and banned everyday but i really want to do a 1:1 clone is this possible?

Thanks i know my ramblings may not make since and i did use search just didn't find the right answers.

2 paralel modem interference

Mon, 04 Jul 2011 11:20:16 +0000

hi.i have 2 motorola sb5101 modem.(paralel)
1.down freq 429 mhz upstream 40 mhz,3 channel
2.down freq 429 mhz, upstream 35mhz,1 channel
interference.....one at time working..
other modem not working,research the freq,and do not connect retry.
the range 30 meter...
apply filter?
what?
please help me!
thanks for information.
http://imageshack.us/photo/my-images/843/signiw.jpg/

DPC2100R2 HELP PLEASE

Mon, 04 Jul 2011 06:16:06 +0000

Hi basically my internet was off for whatever reason, and I didn't read the usbtjtag tutorial telling me not to use 5101 and to use 5101mod to flash my BCM3349. So now what happens is I turn it on and have all 5 lights on solid. If I load up usbjtag NT software, the lights go out, and only two are on (receive, and cable). When I do a detect, this is what I get.

-detect
IDCODE 0334917F
Broadcom BCM3349
IMPCODE 81B6DB6D
Note this is 64bit MIPS,Please fix the xml file

Can anyone offer me some assistance please assume this modem is bricked, but I would like to still try and bring her back. I am using a usbjtagNT with version 0.48.
Modem is DPC2100R2 revision is 2.30B

After flashing, connect, then no connect to Comcast

Sun, 03 Jul 2011 07:50:09 +0000

I flashed my DPC2100R2 v202r1256-060303 with the One click solution. It was able to connect to comcast, which brought up their configuration. It was unable to complete, so I talked to a rep. They asked me to hold reset for 10 seconds, which I did. After that I am no longer able to connect. I can still access the web settings by 192.168.100.1. I thought maybe the firmware got jacked up, so I tried redoing it. When I try that, snmp is unable to communicate with the modem. I did setup tcpip with 192.168.100.10 for the ip and 192.168.100.1 for the gateway. Any help anyone, or other suggestions?

some haxorware cert questions

Sat, 02 Jul 2011 01:19:56 +0000

Hello all.
I have some questions maybe some one here would be able to answer them
i have a 5101 and a webstar 2100 both flashed with haxorware i wanted to inject certs from a hitron d3 modem but any time i enable BPI+ the modem does not work.
I know the certs are working on a D3 modem with out a problem but is there anyway to inject the certs to work on the 5101

i know there is 3 options for cert's but there is no hitron option.

I wanted to know will it not work because there is no section for hitron certs on the haxorware page ?
If that is the case is there any plan on adding those cert types in to haxorware in the near ?

Would be a nice feat to add like what forceware added to the PUMA firmware

if anyone knows how i could take a d3 cert and make it work on a 5101 then please let me know i would love to try that

can a d3 cert be used on a d2 modem ?

Newbie question sorry

Fri, 01 Jul 2011 15:51:28 +0000

I have a premod 6120 on the way with forceware already installed. I have a D3 Mac I want to use that works in my node and has the config I want to use associated with it.
Two questions:
Do I need to inject certs still? If so where do I get them?
How should I have BPI set?

Have a legit cable connection But

Wed, 29 Jun 2011 22:36:26 +0000

greets to all

i have metrocast as my provider and i have a sb5101 modem

its 10mb dl and 512kb upload

i want to get more upload

the question i have is do i need a jtag ? is it possible to mod it without opening the modem ? via ethernet /usb ?

thank you

Help before flash SB5101i

Wed, 29 Jun 2011 14:49:39 +0000

okay first of all thanks for all the support this community is giving.
what are the steps to flash my modem, with a jTag parallel cable.
do i need 2 flash a bootloader?
so many different guides are making me confused :S
all i want to do is spoof my mac to my legit modem so i can access internet and change my config so my speed can return back to its 5mb/s.

many thanks

HELP CHOOSING STOCK DUMP 5101

Wed, 29 Jun 2011 00:50:08 +0000

Hello I am flashing my modem sb5101 back to a stock dump but I see many different dumps just for the 5101. I am on CC and running docsis1.1 so can someone direct me to a correct dump. Thanks..Also for future reference what should I exactly look for when choosing a dump...Is newest version the best choice.I noticed some for the 5101 said only docsis 2.0.

5120 Wont lock

Tue, 28 Jun 2011 19:55:43 +0000

ok so i have a 5120 here that was working fine. Then i flashed a pcx with the 5120 firmware and the pcx wouldnt lock. So i took the metal shielding (carefully) off of the 5120's tuner area to look at it, to see if it was the same or not. Anyways long story short, after I took the metal shielding off of the 5120s tuner area, the 5120 will no longer lock onto a downstream.. I have tried re-flashing it with stock firmware and then flashing a shelled firmware to it and connected via serial and tried to set the ds frequency that way, but still no luck.. Did the cap that was over the tuner need to be there for it to work or something? I dont understand..I am pretty sure I didnt ruin, break or damage the tuner in anyway..I was sooo careful when taking off the cap.

SB 5101i amber light turn on and off

Tue, 28 Jun 2011 16:23:13 +0000

Hi!, i recently buy a motorola surfboard sb 5101i with chip intel, after reading some tutorials over here, i use the program blackcat v128, i flash it with the last version of HAXORWARE downloaded from the official webpage, after that i installed the noisy bootloader, after that i unplugged from electrical power and turn it on again, and the bad news come when just the ambar light of Standby just turn on and turn off, and the other lights stay off. I dont know what else can i do, can somebody help me please!

Thanks!!

Ubee / Ambit U10C035 Flashing questions?

Tue, 28 Jun 2011 09:56:21 +0000

Hello,

Before i get to my questions i just want to point out a few things & thank you for taking the time to read my questions.

1.) I am New to Flashing/Modding/Hacking Cable Modems (been reading about and itching to do so for years now)
2.) I am Not new to Flashing/Modding/jtagging all together
( over the last year i have flashed/Modded/jtgged/unlocked over 200 360's/Wii's/Cellphones so i think i have an idea of what i will be doing)
3.) I am very technically inclined I'm also Quite skilled with a soldering iron.
4.) I have the Ability to follow Detailed Instructions.
5.) I Have Been reading and searching Various Forums for Hours before asking. ( SO DONT YELL @ Me if u were able to find the answers to my questions)
6.) Altho I have Experiance Flashing Differnt Types Of Devices Some of the language Used reguarding modem hacking is new so try to put it in lames terms as much as possible if you can.
---------------------
OK NOW TO THE POINT!
---------------------

Im gonna try n keep it Short and sweet.

I have a Ubee 3.0 Aka Ambit U10C035 and would like to hack/Flash it. From what i have been reading this model Runs flawlessly with the Hacked firmware for the SB6120. I am a Current Customer of Comcast The modem is currently Active(Online) and on my account with comcast.

So im left with these questions

1. How do i? Or Where can i find a Step by Step tutorial that will walk me thru the steps to Dump & flash my firmware?
(I have read " The same way you do the SB6120" But was unable to find a tutorial for that one either)
FOUND ONE!

2. Once I have successfully Flashed the SB6120 firmware to my Ubee U10C035, will my modem continue to work with comcast? or will there be extra steps to get back online? IF so Please Link me or explain in detail if you can.

3. I am already a paying comcast internet customer, i want to mod my modem to lift the speed limits on my modem as im only paying for the standard speed rate of 12mbps. Again Once the firmware has been flashed will these speed restrictions be lifted or will there be additional steps to remove the speed cap? If so please Link me or explain in detail

4. I would like to have a better understanding of what i will be doing when i flash this Modem. If somone can give me a quick break down of the steps? ( for example: with a xbox mod Prep hardware, Dump Firmware, Extract key, Patch key to hacked firmware, Flash firmware, done)

5. If i do flash the hacked firmware will there be a need to continue to pay for the internet service or since im hacked it wouldnt matter?

6. will i be capable of acheiving the max speed of 50mbps with the hacked modem & will this be automatic with the firmware or will there be additional steps? ( i think i read somone saying getting anyfaster than 20mbps is unlikely as of now just wanna verify)

Please Excuse my long post, I wanted to try to be as specific about my questions as possible. Sorry if some of my questions have been answered elsewhere I assure you i have searched!

And Once Thanks Everyone Who took the time to try and help me out.

Hopefully this will not only help me but other fellow Modem noobs answer some of the questions floating around in their head

SB4200 to SB5101i

Tue, 28 Jun 2011 09:07:05 +0000

Okay so before my legit modem, given to me by my ISP, had a speed of 5mb/s.
It is now 500kb/s, so I was pretty upset with that.

Looking around, I saw that the SB5101i seemed to be popular for modding.
So I bought myself 1, and have a 10pin header, with a Parallel jTag cable, which came with a CD of BlackCat.

Now this is where I am stuck. What do I have to do now?
Don't I need to spoof my SB5101i MAC Address to have the same as the SB4200 so I can connect.
Also, I want to be able to set my config file on the SB5101i to 5mb/s.

Thanks.

DCM315 stops at console

Tue, 28 Jun 2011 04:55:41 +0000

I was messing around with telnet and I think I messed up my DCM315 running SB5100MOD. I ran the telnet command auto_console 1 and now the modem does not boot all the way, and I cannot telnet in to use the run command. Can anyone help me out? Thanks

AMBIT 256, no downstream, 2 lights only?

Mon, 27 Jun 2011 14:03:23 +0000

Hi Guys, looking for some advice here if possible. My ambit 256 on 1.1 r39 went off today, after being fine for 4months or so. Now i have LOTS of macs to try,but usually when inputting macs i get 4 lightsd and check my ip address to confirm if its working or not . However, today whenever i try macs there is only the first two light scoming on nomatter what, the power and enet lights. the send and receive do not flash etc, only very briefly after reboot. Any advice guys? Also , on the hax page, it is constantly ranging and wont lock on to a downstream channel? Seems very strange to me, any help is appreciated!!

p.s, the freqs are 402700000, 331000000,and 0. Upstream channel is 2 on eurodoc.

sb5100

Mon, 27 Jun 2011 04:36:38 +0000

my internet was working fine for awhile..out of no where the send stopped flashing on the modem..i know it's an issue with the mac address i believe my mac address got blacklisted...is there a way i could find a list of working mac address?

Arris wmb760

Mon, 27 Jun 2011 03:34:25 +0000

can anything be done with this modem?

Edit the name is wrong its WBM760 not WMB

DPC2100R3 bootloader/FW

Sun, 26 Jun 2011 13:44:22 +0000

Please help. I need a bootloader/fw or full dump for DPC2100r3. I accidentally delete my flash while playing with rs232. Any suggestion or links would be appreciated. Thanks and more power!

Lates Firmware for 5100E + flashing

Sun, 26 Jun 2011 12:08:27 +0000

Hello!

My modem has

SB5100E-2.3.1.8-SCM06-NOSH firmware, but it seems to bee little old.

What is the latest compatible firmware and where to find it?, I have a blackcat LPT programmer.

What are the right commands to use to upgrade it by using jtagtool?

If I update it 5100 mod, will my certs etc remain=

Thanks,

Jugi

How to Disable a self-signed certificates?

Fri, 24 Jun 2011 12:58:19 +0000

Is there a way (what command) to disable a self-signed certificates generator? Or remove existing one?

Is upgrade as good as a re-Flash?

Wed, 22 Jun 2011 20:28:00 +0000

Well, let me tell you some info first so you will understand....I just can't figure it out..Anyway, I have PAID service with a provider...rr....Next, I have 3 modems with Haxoware 1.1 rev.39..on them..2 with diag. and one with lite. starting about 2 weeks ago 1 modem went down..I "THINK" maybe they did a upgrade and I had the "Disable Firmware Upgrades" checked like it said it is suppose to be. Anyway, this modem went down .But, all the lights were still working like they are suppose to except it would not go on line. Yes, the Mac is good, talking to you on it now. Anyway, within 10 days all 3 of my modems ended up like this. You had to unhook the coax, them apply power, wait, then hook up coax to get back on line. Yes, you are back on line but at a real, real slow speed......Now, I did an upgrade by using the GUI page without having the coax hooked up as It would not go to the 192.168.100.1 GUI if you had the coax hooked up. Anyway, the upgrade went through as it should but I am still getting real, real slow speeds..Where it use to bring up a web page in like 5 seconds, now it takes around 15 seconds to bring it all the way up..I can just tell that things are not right. Now, will re-flashing the modem do any thing that the upgrade from lite to Diag. didn't do? I'm still stuck with the black-cat jtag so I didn't want to waste all that time re-flashing the modems if it wasn't going to do any thing more to it. I would guess that since this modem "DIDN'T" take the upgrade from the isp provider that something has messed up in the modems and want connect like it use to nor give me the speeds it use to. I am in Eastern , N.C...If that helps anyone wtih this problem. Anyway, any and all help will be appreciated....I feel they have done something and need a little help in what I should be looking at. Like someone in this area with rr...might have had the same problem and has got theirs fixed.Thanks again.....

P/S..Here is the error I get "REG-RSP- invalid format or not reconized." It still connects but like I said, really slow now....Thanks...

invalid ip?

Wed, 22 Jun 2011 03:05:56 +0000

sb101 was working on rr and then went out now i am getting a invalid IP and connect to my modem direct? the ip windows is show is 169.x.x.x and it should show 192,168.1.1 what is the problem

ambit250

Mon, 20 Jun 2011 18:23:40 +0000

hi all hav had a look on here and a few other forums to see iff any 1 can help me to recover my password.
its a ntl/ambit 250 E08C007-90 LF. there is some info on here but its very vague,can sum kind person point me in the direction to finding my password, there is way for the sb5100mod using telnet but cant really find or clarify on how to do it with haxoware. thanks for your time to read this

Ambit 255 = U10C018.43 LF how to flash it with Haxorware via flash

Mon, 20 Jun 2011 02:57:47 +0000

Ambit 255 = U10C018.43 LF how to flash it with Haxorware via flash serial in another words ethernet cable

can i flash a ambit 255 over serial

Mon, 20 Jun 2011 02:46:17 +0000

i have read that i could flash ambit 250/255 over serial is it possible if it is how can i do it ???? plz help

putting certs on a SBG900 (injecting)

Mon, 20 Jun 2011 02:23:04 +0000

can certs be injected into a SBG900 with an edited .bat file the same way as you would inject certs into a sb5100?

also, will the certs from a 5100-5120 work on a SBG900?

ty

WebSTAR EPC2100R2 Serbia BroadBand ?

Sat, 18 Jun 2011 21:45:42 +0000

Hi,

This is probably kind of noob question for you guys. I have 2 modems WebSTAR EPC2100R2, so i decide to give a try to hoaxware on second one. Flash went ok, new hoaxware is up and running. So after that i unpluged original woriking modem and did copy paste of Cable Modem MAC Address from original working one to lets say hoaxed one and modem acccepted. Then i changed settings to eurodocsys and decide to plug it to a coax network. After few minutes i noticed that modem is still on scaning and when i check log i see two lines going over and over again:
Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
Critical T002.0 SYNC Timing Synchronization failure - Failed to acquire FEC framing

After 20 minutes of this i decide to put back original untouched modem and guess what is is working. Am I doing something wrong, does anybody has similar problems or mayble someone from Serbina/Bosnia/Croatia with some expirience whits this.

Thank you for ideas.

ST

Provisioning Diag Modem

Fri, 17 Jun 2011 21:58:03 +0000

Normally, I read/execute, but today I need some advice.

I'm in an area with Comcast's new security, my diagnostic box is down, and I'm thinking about replacing my sub modem with it. Today, I switched my package to the promotional 15 Mbps / 3 Mbps for 6 months. It's not bad, but I enjoyed the nice 6120 spoof I had going on combined with a d11_m_sb6120_commercialshowcase_c05.cm config.

So, with the pre-mod registered, will I be able to force configs again? If this is possible, will it be blatantly detected as a Haxorware box, with average usage only?

After 6 months, if I don't keep the 15/3 package, speeds are going to suck. Hadn't solely used my subbed box in so long, I'd forgotten how slow 1.5 Mbps / 384 Kbps is. Lol. While streaming HD content on my laptop (Netflix, ABC.com, etc), my son is gaming online, my daughter is on Stardoll, and the wife is Skyping (or whatever). Disaster! Latency is a terrible issue @ that speed.

If it is not a good idea, let me know. I can accept it being game over and keeping the faster package indefinitely...or until a new firmware/fix hits the scene.

Pre-Mod: RCA DCM425
Firmware: Haxorware Version 1.1 Revision 31

Thanks,

Shifter

SB5101 original firmware restore

Thu, 16 Jun 2011 16:28:17 +0000

I have 5101 with Hoaxware and would like to restore original firmware. DO I need JTAG or this can be done from TFTP .... ?

Please advice.

Cross-Compiling Utilities

Wed, 15 Jun 2011 19:44:08 +0000

Hey,

I'm currently experimenting with a Puma5 based modem running an image missing a number of utilities. I know binaries such as wget are typically part of the busybox binary, but has anyone had any experience with creating a standalone binary for Puma5 with some sort of toolchain? I am also interested in a nmap and snmpwalk utility for this ARM proc. As per snmp, I see a built-in snmpcmd:

Usage: snmpcmd -s socket [-t type] [-a address] [-p port] [-c command] [-i ifname] [-d data] [-m target address params] [-n notification]

Yet no man page matches that syntax. Has anyone used this command, and if so can it perform a get/walk? Does anyone have an individual wget binary for this processor or information to compile for it?

Thanks in advance.

Firmware Dump without JTAG

Wed, 15 Jun 2011 02:49:24 +0000

Is there any way to upload/dump a firmware image from one of the two firmware banks, something similar to the dload command, but back to a tftp or serial?

New to Haxorware

Wed, 15 Jun 2011 00:06:56 +0000

Can anybody please give me a step by step guide to installing Haxorware (or any other modded firmware) on my SB6120? All I want is the ability to get higher speeds (Our ISP (Advanced Cable Communications) charges a lot for faster service. Please tell me what equipment and software I need to do this.
I am currently running 64bit Windows 7, is it compatible with whatever software you use to flash the modem? Also I do not have a serial port...
I would really appreciate somebody here enlightening me in this.

I Currently have the following equipment: SB6120, E3000 flashed with DD-WRT, a windows 7 desktop and netbook. Neither has serial.

webstar scientific atlanta dcp2100

Tue, 14 Jun 2011 20:51:37 +0000

Hello all. this is my First Post and i have a problem with Haxorware Version 1.1 Revision 39
installed on my webstar scientific atlanta dcp2100 Modem and when i go to 192.168.100.1 via IExplorer i can see that stucks on retrieve time of Day :
any Help Please ?

here is a Log

1970-01-01 00:01:39	 Critical	 D005.0	 TFTP failed - request sent - No Response
1970-01-01 00:00:14	 Critical	 R002.0	 No Ranging Response received - T3 time-out (US 1)
1970-01-01 00:00:09	 Critical	 R002.0	 No Ranging Response received - T3 time-out (US 3)
1970-01-01 00:00:20	 Critical	 R002.0	 No Ranging Response received - T3 time-out (US 1)
1970-01-01 00:00:17	 Critical	 R003.0	 Init RANGING Critical Ranging Request (17) Retries exhausted
1970-01-01 00:00:09	 Critical	 R002.0	 No Ranging Response received - T3 time-out (US 6)
1970-01-01 00:00:05	 Notice	 M571.1	 Ethernet link up - ready to pass packets
1970-01-01 00:01:23	 Notice	 M573.0	 Modem Is Shutting Down and Rebooting...
1970-01-01 00:01:23	 Critical		 Resetting the cable modem due to docsDevResetNow
1970-01-01 00:00:24	 Critical	 D001.0	 DHCP FAILED - Discover sent, no offer received
1970-01-01 00:00:18	 Critical	 R002.0	 No Ranging Response received - T3 time-out (US 1)
1970-01-01 00:00:15	 Critical	 R003.0	 Init RANGING Critical Ranging Request (17) Retries exhausted
1970-01-01 00:00:09	 Critical	 R002.0	 No Ranging Response received - T3 time-out (US 6)
1970-01-01 00:00:05	 Notice	 M571.1	 Ethernet link up - ready to pass packets
1970-01-01 00:00:36	 Notice	 M573.0	 Modem Is Shutting Down and Rebooting...
1970-01-01 00:00:36	 Critical		 Resetting the cable modem due to docsDevResetNow
1970-01-01 00:00:14	 Critical	 R003.0	 Init RANGING Critical Ranging Request (17) Retries exhausted
1970-01-01 00:00:09	 Critical	 R002.0	 No Ranging Response received - T3 time-out (US 6)
1970-01-01 00:00:05	 Notice	 M571.1	 Ethernet link up - ready to pass packets
1970-01-01 00:01:45	 Notice	 M573.0	 Modem Is Shutting Down and Rebooting...
1970-01-01 00:01:45	 Critical		 Resetting the cable modem due to docsDevResetNow
1970-01-01 00:01:40	 Critical	 D005.0	 TFTP failed - request sent - No Response
1970-01-01 00:01:00	 Critical	 R004.0	 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance o
1970-01-01 00:08:19	 Critical	 R002.0	 No Ranging Response received - T3 time-out (US 1)
1970-01-01 00:07:38	 Critical	 T001.0	 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:07:37	 Notice	 M572.0	 Tftp Init Failed - Reinitialize MAC...
1970-01-01 00:05:38	 Critical	 D005.0	 TFTP failed - request sent - No Response
1970-01-01 00:04:06	 Notice	 M571.1	 Ethernet link up - ready to pass packets
1970-01-01 00:04:04	 Notice	 M571.4	 Ethernet link dormant - not currently active
1970-01-01 00:01:40	 Critical	 D005.0	 TFTP failed - request sent - No Response
1970-01-01 00:08:26	 Critical	 R002.0	 No Ranging Response received - T3 time-out (US 2)
1970-01-01 00:07:51	 Critical	 T001.0	 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:07:50	 Critical	 T002.0	 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:07:44	 Critical	 T001.0	 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:07:43	 Notice	 M572.0	 Tftp Init Failed - Reinitialize MAC...
1970-01-01 00:07:43	 Critical	 D005.0	 TFTP failed - request sent - No Response
1970-01-01 00:07:21	 Notice	 M571.1	 Ethernet link up - ready to pass packets
1970-01-01 00:07:19	 Notice	 M571.4	 Ethernet link dormant - not currently active
1970-01-01 00:05:44	 Critical	 D005.0	 TFTP failed - request sent - No Response
1970-01-01 00:05:21	 Notice	 M571.1	 Ethernet link up - ready to pass packets
1970-01-01 00:05:19	 Notice	 M571.4	 Ethernet link dormant - not currently active
1970-01-01 00:04:15	 Notice	 M571.1	 Ethernet link up - ready to pass packets
1970-01-01 00:04:13	 Notice	 M571.4	 Ethernet link dormant - not currently active
1970-01-01 00:03:44	 Critical	 D005.0	 TFTP failed - request sent - No Response
1970-01-01 00:03:13	 Notice	 M571.1	 Ethernet link up - ready to pass packets
1970-01-01 00:03:11	 Notice	 M571.4	 Ethernet link dormant - not currently active
1970-01-01 00:02:23	 Notice	 M571.1	 Ethernet link up - ready to pass packets
1970-01-01 00:02:21	 Notice	 M571.4	 Ethernet link dormant - not currently active
1970-01-01 00:01:45	 Critical	 D005.0	 TFTP failed - request sent - No Response
1970-01-01 00:01:02	 Critical	 R004.0	 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance o
1970-01-01 00:00:48	 Notice	 M571.1	 Ethernet link up - ready to pass packets
1970-01-01 00:00:45	 Notice	 M571.4	 Ethernet link dormant - not currently active
1970-01-01 00:08:12	 Critical	 R002.0	 No Ranging Response received - T3 time-out (US 1)
1970-01-01 00:08:08	 Critical	 R002.0	 No Ranging Response received - T3 time-out (US 3)
1970-01-01 00:08:03	 Notice	 M572.0	 Tftp Init Failed - Reinitialize MAC...
1970-01-01 00:08:03	 Critical	 D005.0	 TFTP failed - request sent - No Response
1970-01-01 00:07:56	 Notice	 M571.1	 Ethernet link up - ready to pass packets
1970-01-01 00:07:54	 Notice	 M571.4	 Ethernet link dormant - not currently active
1970-01-01 00:07:34	 Notice	 M571.1	 Ethernet link up - ready to pass packets
1970-01-01 00:07:32	 Notice	 M571.4	 Ethernet link dormant - not currently active
1970-01-01 00:07:30	 Notice	 M571.1	 Ethernet link up - ready to pass packets
1970-01-01 00:07:28	 Notice	 M571.4	 Ethernet link dormant - not currently active
1970-01-01 00:05:53	 Critical	 D005.0	 TFTP failed - request sent - No Response
1970-01-01 00:05:04	 Notice	 M571.1	 Ethernet link up - ready to pass packets
1970-01-01 00:05:02	 Notice	 M571.4	 Ethernet link dormant - not currently active
1970-01-01 00:03:49	 Critical	 D005.0	 TFTP failed - request sent - No Response
1970-01-01 00:02:04	 Notice	 M571.1	 Ethernet link up - ready to pass packets
1970-01-01 00:02:02	 Notice	 M571.4	 Ethernet link dormant - not currently active
1970-01-01 00:01:44	 Critical	 D005.0	 TFTP failed - request sent - No Response
1970-01-01 00:01:44	 Notice	 M571.1	 Ethernet link up - ready to pass packets
1970-01-01 00:01:42	 Notice	 M571.4	 Ethernet link dormant - not currently active
1970-01-01 00:01:38	 Notice	 M571.1	 Ethernet link up - ready to pass packets
1970-01-01 00:01:36	 Notice	 M571.4	 Ethernet link dormant - not currently active
1970-01-01 00:00:18	 Critical	 R002.0	 No Ranging Response received - T3 time-out (US 2)
1970-01-01 00:00:09	 Critical	 R002.0	 No Ranging Response received - T3 time-out (US 5)
1970-01-01 00:00:05	 Notice	 M571.1	 Ethernet link up - ready to pass packets
1970-01-01 00:01:31	 Critical	 T002.0	 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:01:31	 Notice	 M573.0	 Modem Is Shutting Down and Rebooting...
1970-01-01 00:01:31	 Critical		 Resetting the cable modem due to docsDevResetNow
1970-01-01 00:01:27	 Critical	 T002.0	 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:00:48	 Critical	 T001.0	 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:00:48	 Critical	 T002.0	 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:00:13	 Critical	 T001.0	 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:00:13	 Critical	 T002.0	 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:00:07	 Critical	 T001.0	 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:00:06	 Critical	 T002.0	 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:00:05	 Notice	 M571.1	 Ethernet link up - ready to pass packets
1970-01-01 00:22:47	 Critical	 T002.0	 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:22:47	 Notice	 M573.0	 Modem Is Shutting Down and Rebooting...
1970-01-01 00:22:47	 Critical		 Resetting the cable modem due to docsDevResetNow
1970-01-01 00:22:46	 Notice	 M572.0	 Ds Lock Failed - Reinitialize MAC...
1970-01-01 00:22:46	 Critical	 T002.0	 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:22:45	 Notice	 M572.0	 Ds Lock Failed - Reinitialize MAC...
1970-01-01 00:22:42	 Critical	 T002.0	 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:22:41	 Notice	 M572.0	 Ds Lock Failed - Reinitialize MAC...
1970-01-01 00:22:38	 Critical	 T002.0	 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:22:37	 Notice	 M572.0	 Ds Lock Failed - Reinitialize MAC...
1970-01-01 00:22:36	 Critical	 T002.0	 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:22:35	 Notice	 M572.0	 Ds Lock Failed - Reinitialize MAC...
1970-01-01 00:22:35	 Critical	 T002.0	 SYNC Timing Synchronization failure - Failed to acquire FEC framing

DPC2100R2 w/ Haxorware won't pass external IP

Tue, 14 Jun 2011 01:44:08 +0000

Hey everyone,

I have recently flashed 5 Scientific Atlanta DPC2100$2's with Haxorware Diag and I'm successfully able to get into the WebGUI - The modem successfully identifies my ISP, it retrieves the config file, ToD server, TFTP server, etc.

However the computer remains with the IP 192.168.100.11 - It is not set to static, I've tried on my PC and my MacBook Pro.

I'm unable to connect to any outside websites.

I've successfully flashed SB5101's without any issues,

The strange thing is, all of these DPC2100R2's are doing this. Any suggestions?

EDIT

Strangely Enough.. After force serving my config file I've created for my SB5101, it worked fine.

The chosen tuner is not supported!!!

Mon, 13 Jun 2011 02:17:19 +0000

I was doing some testing with switching certs on my SB5101 with certs from a SB5100. Not sure if that caused the issue but now I am getting the error "The chosen tuner is not supported!!!" No signal on the SB5101. My question would a flash of the original 2MB dump resolve the "The chosen tuner is not supported!!!" error? Also is it possible to make certs from a SB5100 work on a SB5101 doing one of two following:

Downloading and restoring straight from nonvol download on SB5100Mod GUI, or extracting the certs from the 2MB dump downloaded from SB5100MOD GUI.

5101i Help

Mon, 13 Jun 2011 01:47:23 +0000

So I live in Australia, and my ISP is Optus. I hqve cable internet and my current router is a Sb4100.

So I was told to buy a SB5101, but all of the stores are out of stock.
I am going to buy a 5101i from Ebay.
Once I have bought one, what tools, eg jtag, do I need to buy, and where do I solder it?
Obviously I want to buy the JTAG or hack hardware from here to support you guys, as you have helped me.

Also, which firmware should I put on it, if I just want to have faster speeds (eg, have no speed limit).
So once that, don't I have to spoof my old modem, SB4100, to be able to connect to the node or something?
I'm a complete noob with Modem Hacking, but I have experience with game console modding.

Thanks.

Can't login to modem

Mon, 13 Jun 2011 01:25:38 +0000

Hello, I recently purchased a pre-mod SB5101, and I cannot seem to login to it. I get assigned the IP address of 169.254.141.151, (which is non-routable). I have already attempted to set my IP address to 192.168.100.11, a subnet of 255.255.255.0, and a gateway of 192.168.100.10, but that does not solve the modem connectivity issues. How can I get access to my pre-mod modem?

putty inactive

Sun, 12 Jun 2011 23:39:59 +0000

need help setting up putty. i followed a few tutorials but keep getting an inactive putty screen. unable to connect to my sb5101. all lites r on and connected. please advise.

how can i flash a ambit U10C018

Sun, 12 Jun 2011 19:08:47 +0000

i have a ambit cable modem that i want to flash with hoxware if any body could help me out i have a usbjtag nt can i doint with that or can it be flash like the dpc2100 with just one click no cables

http://www.sbhacker.net/forum/index.php/topic/28076-flashing-the-dpc2100r2-v202r1256-060303-with-one-click/

SB5100 w/ Sigma X2 - How to flash back to stock firmware?

Sun, 12 Jun 2011 18:05:28 +0000

Hello all.

Well, as the topic states, I need your help to flash this SB5100 w/ Sigma X2 pre-installed back to stock firmware so I can get it back online.

This is just another one of those cases where the modem worked for years and then suddendly, boom, online light won't stop flashing because CC is blocking the modem from going online.

I would like, to begin with, just flash the original FW back to the modem just to get it back online for now to make sure it does work the legit way.

Then, I will begin reading, researching, and applying/testing as I see nothing is spoon-fed anymore, which is a good thing.

But please, help me to get started as I am completely clueless on this at the moment.

Right now, I have in front of me the following:

-SB5100 modem with BCM3348KPB chip and Sigma X2 FW
-BlackCat USB JTAG device (PCB 1.7)

My questions are:

1.) What software would be best for flashing the stock FW back to the modem (BlackCat USB?)
2.) Which file is the right file to flash back to the modem as I see various stock/virgin/etc FW's in the FW section
3.) Should I learn how to use TFTP server?

Please and thank you.

sb 6120 hardware advice

Sun, 12 Jun 2011 16:22:08 +0000

i know this topic is probably going to get flamed, but i might as well give it a try.
i'm trying to get the sb6120 but its not clear if i can use blackcat usb to program it. on ebay it some sellers describes that it can program it but i just wanted to verify this information with the community. or is there any other (non soldering) tool i can use to get the job done?

Ambit 256 Problem Help Please

Sun, 12 Jun 2011 07:40:00 +0000

Hello, I got a Ambit 256 Haxoware Version 1.1 Revision 39, i had a 10mg mac was working great, formatted my pc , then i found that the mac went down, try loads of macs , i can only get 76 bytes macs working ive tryed bpi+1.1 still no luck , any above 76bytes i get Operational but no internet , and modem keeps restarting could anybody help if i need to post any more information please comment Thanks, i really need help me with my problem

decompile haxorware

Sun, 12 Jun 2011 03:44:51 +0000

saw a file here somewhere that would allow you to decompile a bin and then recompile it.

anyone know what im looking for? link would be greatful, thanks in advance

Getting Online With A Premod Netgear Modem

Fri, 10 Jun 2011 18:45:42 +0000

Okay, yes i may be a noob when it comes to modems, i purchased a Premodded modem off eBay with Haxoware and now comes the hard part, i don't know how to get online with this thing, how do i configure it to get online? NETGEAR Cable Modem-Router Combo CG814CXXv2 (4-Port Switch) - Premod With Haxorware V1.1 Rev39

Please help me out. Thanks a bunch. And also for those of you who are just going to tell me "oh do your research first or whatever" I actually have, i can't get a detailed or any clear response whatsoever.

sbg6580 cant login remotly

Fri, 10 Jun 2011 17:15:11 +0000

I have configured a sbg6580 for remote access buy when I try to remotly log in I get the the user name and password page but it says wrong user/pw.
when I am on site connected to the LAN the same user/pw works fine.
I have configured this modem on another site and remote login works fine on that one.
Any thoughts?

SB5100 Problems

Fri, 10 Jun 2011 06:10:12 +0000

this is the log i get and reset every 1min and i change the BPI to 1.1 to 1.0 docsis but reset and the overview said in Progress but my area is 1.1 any subj please thanks

2011-06-10 05:49:18 3-Critical 0x04E33A10 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance opportunities received - T4 timeout
2011-06-10 05:48:55 7-Information 0x848E0009 M569.1 Standby mode disabled
2011-06-10 05:48:55 7-Information 0x848E0004 I500.0 Registration Completed
2011-06-10 05:48:54 3-Critical 0x0459E4A4 REG-RSP - invalid format or not recognized
2011-06-10 05:48:54 7-Information 0x848E0001 D507.0 Retrieved Time....... SUCCESS
2011-06-10 05:48:54 7-Information 0x848E0002 D509.0 Retrieved TFTP Config ?BExV7i3EPWdJqxoK9tIZ@CvbSGT5ievwuOLID5nStwHY3r25AmGLP SUCCESS
1970-01-01 00:00:14 7-Information 0x848E0003 D511.0 Retrieved DHCP .......... SUCCESS
1970-01-01 00:00:12 3-Critical 0x040D9A2C DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:07 7-Information 0x848E0005 T500.0 Acquired Upstream .......... SUCCESS
1970-01-01 00:00:06 7-Information 0x848E0006 T501.0 Acquired Downstream (705000000 Hz)........ SUCCESS

D3 Channel Bonding, speed stuck below 40

Fri, 10 Jun 2011 02:16:56 +0000

Hi all,

I'm running a D3 modem on a ~55 meg downstream config. Webui and cli both show four bonded downstream channels, signal well within range, and a SnR of <38, but I'm only getting max speeds of between 30 and 40Mbps.

Wondering if anyone's had any experience with this, maybe something I'm missing...

Thanks in advance.

sniffing macs

Fri, 10 Jun 2011 00:38:42 +0000

Hi,
I have an ambit 255 but I tried recently to sniff for backup macs with dhcp sniffer to no avail. nothing seems to come up. I also tried dhcpforce which failed and cmsniff which said invalid socket. Is there a program I've missed out on or am I doing something wrong?

How can i flash a dpc2100 with a usbjtag.NT

Thu, 09 Jun 2011 15:52:26 +0000

i have a dpc2100 and i want to flash but it only has a lil bit of pins is ther a adapter or how can i connect it plz show me some pictures thanx you guys for reading and helping new bees like me lol

DPC 2100 WITH USBJTAG. NT

Tue, 07 Jun 2011 20:37:48 +0000

HOW TO FLASH SCIENTIFIC ATLANTA DPC2100 R2 WITH USBJTAG .NT DOES SOME BODY GOT PICS ON HOW TO CONNECT IT A 10PIN HEDER WITH THE USBJTAG .NT

HOW CAN I FLASH (RCA DMC315)

Tue, 07 Jun 2011 16:45:54 +0000

i have rac dmc 315 mettal bottom it was flash to sb5100Mod and i think it crash or something and i want to flash it back to sb5100MoD 1.4 beta something like that can u guys plz help me i use this comad with my usbjtag NT

detect
ldram boot (Select proper boot file)
erase boot
sprogram boot (Slow programming)
Power off and on SB5100
detect
ldram 9fc00000(Select the backed up file)
program 9fc00000 200000
cmpram 9fc00000 200000

No connection with Linksys router

Tue, 07 Jun 2011 13:33:55 +0000

Have a 5101 that only connect directly to the computer working fine that way. When I try connection with a Linksys router won't give me internet signal. Used to be working fine and other modem worked fine with that particular router. Any communication protocol that is missing ? Any suggestion ? Appreciated in advanced.

help

Sun, 05 Jun 2011 15:38:46 +0000

1970-01-01 00:00:20 Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:20 Critical D002.0 DHCP FAILED - Request sent, No response
1970-01-01 00:00:21 Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:21 Critical D002.0 DHCP FAILED - Request sent, No response
1970-01-01 00:00:02 Notice M571.1 Ethernet link up - ready to pass packets
2011-06-05 14:59:45 Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
2011-06-05 14:59:33 Critical T002.0 SYNC Timing Synchronization failure - Failed to acquire FEC framing
2011-06-05 14:59:31 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
2011-06-05 14:59:30 Critical T002.0 SYNC Timing Synchronization failure - Failed to acquire FEC framing
2011-06-05 14:59:29 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
2011-06-05 14:59:29 Critical T002.0 SYNC Timing Synchronization failure - Failed to acquire FEC framing
2011-06-05 14:59:29 Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:00:02 Notice M571.1 Ethernet link up - ready to pass packets

help

Sun, 05 Jun 2011 15:37:06 +0000

can't get connet to internet

Sun, 05 Jun 2011 01:34:24 +0000

hi all
I'm new in here. I have the modem sb5100 useing about year.I don't know what happen my modem it's dosen't any more it's mean I can't connet to internet.
the power has it .some green light ..but I can't get connet to internet.
may be I need new firmware ? how do I do.please help me
step to step please
thanks all

SBG901. Anyone know how to configure for Cox in San Diego, CA?

Sat, 04 Jun 2011 22:42:31 +0000

Just got a Motorola SBG901. Anyone know how to configure it for COX in San Diego, CA??

Uber noob...I think I bricked my SB5100

Fri, 03 Jun 2011 01:46:58 +0000

Uber nooblet here.... Ok so I think I bricked my modem, and after 3 days of going through the forums. I cant seem to find an answer. Ive attached the firmware, bootloader, and the bios I flashed to my SB5100. I didnt make a backup of my original firmware, and now I cant see or change my MAC. When I look under the console of my BLACKCATUSB Build 267, it says "Reading Non-Vol configuration data" and " Error: No CFG area Found!". under the 5100 tab, in the MAC section, it says "Configuration data not found" Someone please help!

Bios: SB5100_NOSH.bin
Bootloader: motorola_1.bin
Firmware: SB5100-0.3.1.6-SCM01-NOSH.bin

Attached Thumbnails

Attached Files

SB5100_NOSH.bin 2MB 23 downloads
motorola_1.bin 32K 14 downloads
SB5100-0.3.1.6-SCM01-NOSH.bin 712.51K 16 downloads

what tabs needed to clone 5120

Thu, 02 Jun 2011 14:27:41 +0000

i read that 5120 hardware versions should be matched for a good clone.
? is, which tabs are needed if the hardware doesnt match?
should i try leaving the old boot or other tabs and program only some tabs from desired 90000000?

i tried cloning non active modem, but with 90000000 it doesnt fully clone, it gets stuck with old mac. when i program each tab, the mac changes but the modem will not sync at all. it gets stuck on send light blinking. i guess its because of hardware rev.? this is non active modem, not trying to clone this for tos.

btw i know about cloning the certs but dont wanna go that route.

* One-click Webstar flash utility *

Thu, 02 Jun 2011 12:06:29 +0000

* One-click Webstar flash utility *

This is basically Sker's batch file (which can be found here) encapsulated in a more fancy, user-friendly interface. It will flash the Haxorware 11 rev. 39 diag. firmware onto a DPC/EPC 2100/2100R2 modem with the stock firmware v202r1256-060303 or later.

What do you need to install before running the script?
- LAN card driver

What do you need to do?
- Connect your Webstar modem directly to a computer via an ethernet cable.
- Connect your Webstar modem to the power supply.
- Unrar OneClickFlash.rar
- Run OneClickFlash.bat
- Follow the on-screen instruction

What does the script do?
- Opens up the modem's web page for you to see the firmware version
- Remembers your current network card configuration (IP address, subnet mask, Gateway, DNS, etc.)
- Changes your current network card configuration in order to flash the firmware
- Loads the tftp server (without the installation)
- Loads the snmp services (without the installation)
- Forces the modem to download the Haxorware 11 rev. 39 diag. firmware (Sker's part of the script)
- Unloads the snmp services
- Reverts your network card configuration to the previous state
- Unloads the tftp server

Will it work on your operating system?
- The script has been tested on Win2K, WinXP SP3 32bit and Win7 32bit
- If it doesn't work on your system, contact me, and I'll try to find the solution

Good luck!
P.S. It would be nice of you to hit the green "+" button below if this script helped you...

Attached Files

OneClickFlash.rar 2.89MB 124 downloads

DCM225

Thu, 02 Jun 2011 03:19:16 +0000

I came across an old DCM225 in storage. I searched here but haven't been able to find anything. I'm looking to mod it and would be grateful for any information.

6120 bricked?

Tue, 31 May 2011 12:40:21 +0000

I have a 6120 and one day I went to power cycle it and once I reconnected the power cable all the lights on the front of the modem went solid. No blinking, no activity, no response, no shell... it seems dead.

Is the modem some how bricked?

config file

Tue, 31 May 2011 03:04:53 +0000

I am new to the forums, and I am wondering how I can download my config file from my unmodified SB5101. I already have a viewer to see *.cm files, but I do not know how to download the config.cm.

The difference betewen a USB JTAG and Parallel (oldschool) JTAG

Mon, 30 May 2011 16:28:14 +0000

I just have to ask this.

There are *so many* posts where someone asks a question and the response is "Use a USB JTAG and do this".

I tend to take posts by kind experts on forums at face value, if the guy says I have to use a USB JTAG then that's what has to be used. He knows more than me.

But I think of the USB JTAG is something of a hack and JTAG is a parallel technology, after all. Boundary scan testing, right?

I made a parallel JTAG years and years ago and I have used it many times on many kinds of equipment. I'm an old guy and have been around a very long time.

So is this just someone misspoke, or has never used the old type of JTAG, or is there something that a USB JTAG is what has to be used?

If this is the wrong forum and this post should be in another, mods may feel free to move it. These forums are quite complicated and difficult to navigate. I'm not new to online forums by any means but I couldn't figure out where would be more appropriate to post this question.

Going Back to Factory Firmware

Sat, 28 May 2011 21:55:43 +0000

Hey Guys,

My Motorola Surfboard SB6120 hasn't worked in a while and it seems Comcast has sealed up a lot of the holes that I was exploiting. I only have a Docsis 2 modem now and my hacked SB6120 so I wanted to return it back to the factory firmware so I could call Comcast and have it provisioned to work properly with my paid service. I've read this is possible but I haven't found out how to do it.

Could anyone provide some info on how to do this?

Thanks,

Rex

AVM FRITZBox 6360 cable modem

Sat, 28 May 2011 10:26:39 +0000

Does anyone have experience with modding AVM FRITZBox 6360 cable modem?

connecting new modem

Fri, 27 May 2011 22:17:54 +0000

what pre-configuration steps is required to connect new modem to cable network? (AVM FRITZBox 6360 modem, EuroDOCSIS 3.0, PUMA5 based, new and not tied to specific provider).

Can u use Haxorware on a sb5100

Fri, 27 May 2011 19:52:32 +0000

Can u use Haxorware on a sb5100 plz help i want to learn

What Remedies a modem unable to reach 192.168.100.1:666

Fri, 27 May 2011 19:52:23 +0000

Hey folks,

I’m a little hesitant to post, honestly, because I see how badly newbies with stupid questions get ripped to shreds, but I don’t know where else to ask these questions. I will try to be as detailed as possible with troubleshooting questions but please bear with me as I’m not an expert by any means.

Here is the issue, I have 2 ‘test’ modems. I bought both of these pre-modded and have never had any issues with the actual modems themselves. One is running Haxorware, and having no issues, the other I consider my ‘backup’ and is an RCA DCM315 running SB5100 software. I am a Charter customer and so over the last several months, there have been various issues involving minor tweaks to settings, using new configs, etc. I’ve always been able to access the 5100 mod page and make the necessary changes, until now. The connection died the other day, no big deal, but when I try to go remedy the problem…

Using this 5100 modem, I’m suddenly unable to connect to the 5100mod software page. Generally it’s the 192.168.1.100:666, and I just get a dead display no matter what browser I use or what I try. I can pull up the regular 192.168.1.100 page with no problem, and it allows me to see the basic modem settings, and verify that DHCP is enabled, etc. But despite restarting repeatedly, trying to do so with coax and without, I can never access the damn 5100 mod page.

Because it was pre-modded, I don’t know much about the process of flashing from scratch, but before I dive into that whole minefield, are there any recommendations, tricks or possible fixes to regain my access to the 5100mod page?

lights flashing?

Thu, 26 May 2011 22:31:57 +0000

Let me thank you you in advance for your help i have been unable to figure this out even after reading for a few days maybe your input could help me. Ok basically all the lights on my modem started blinking so i disconnected my coax changed my mac hit save/reboot now all the lightsare still blinking i am getting internet and all the sites still but now i cant connect to
ip 192... never happened to me in the time ive been testing so if you could help out i would appreciate it thank you!

factory tool question

Thu, 26 May 2011 21:33:06 +0000

Hey its my 1st post i just need to know about factory tool for enabling your internet or something please can someone explain? its from this site it says on the tool lol

sorry if this aint the right section.

need help spoofing my sb5101

Thu, 26 May 2011 19:20:20 +0000

Hello guys!
To all the real testers if you guys can provide some help here. It would be appreciated. I'm an intermidiate
tester and need help on how to spoof my sb5101. I had it flashed with Hoaxware 1.1 R39. It was working good but
now the Online light in the front part just keeps blinking. Thanks

sb5101 r39

Thu, 26 May 2011 16:29:07 +0000

Sb5101 r39 haxware problem internet light blinking.help please.

Need original firmware dump for RCA DCM315, please

Thu, 26 May 2011 14:12:09 +0000

Hi everybody,

I have an RCA DCM315 v2.20 plastic bottom modem (AMD flash chip), and I want to be able to use it as a regular subscribed modem with Comcast. The problem is that the modem has Sigma X2 firmware on it, and when I tried to activate it with Comcast, it was working for 2 days but then started rebooting all the time because it can not update. I tried to enable firmware update, but it did not help. After a call to Comcast they did something and the modem got totally bricked (all lights flash for a second and then nothing).

I reflashed it back to Sigma with jtag, but I still can't use it on the network. I don't have the original dump for this modem. Can someone, please, send me an original stock firmware 2MB dump so I can use the modem? Also, as I understand, if I use someone's dump my MAC and serial will change to have matching certs? What if someone else is using the same dump on the network? Will it be a problem?

Also, is it possible to extract the certs from my Sigma X2 dump (matching my MAC and serial) and then use them with someone's else dump?

Thanks a lot.

DCM315: Can't make any changes in SB5100MOD WebGUI

Thu, 26 May 2011 01:13:51 +0000

i'm completely stumped here. i can't make ANY changes in the gui. i can't enable "config changeable" nor "force network access". anything i click is completely locked. the only thing i will say is when i load up 192.168.100.1:666 it doesn't ask for a password. the standard SB5100MOD PW is still there, it just doesn't ask me to access the webgui.

anyway know what i'm missing here?

MOTOROLA SB5100 BRICKED

Wed, 25 May 2011 22:25:26 +0000

HELLO GUYS, I'VE BEEN TRYING TO UNBRICK MY SB5100 USING HARD RESET TECHNIQUE. BUT NO LUCKS. I TRIED TO FOLLOW THIS TUTORIAL http://www.sbhacker....sb5101-debrick/
BUT IT'S TOTALY DIFFERENT FROM MY MODEM. I DON'T KNOW WHERE THE 3.3v AND the pin 12 IS LOCATED. I'M USING A USBJTAG. WHEN I TURN ON THE MODEM THE LIGHTS COME AND GO...PLEASE HELP. THANKS

Noob Hacked modem not working

Wed, 25 May 2011 18:58:31 +0000

First of all let me apologize because I am a noob and made the mistake of purchasing a hacked modem from a referred friend. It worked fine for about a week and just went out, I am connected through Comcast and it shows me the garden wall. I am using a Scientific Atlanta DPC2100 this happened mid week also also and contacted the seller gave him the MAC address and was fixed. So I am trying to figure out what can I do on my end so I wont have to continue contacting the seller any ideas would be greatly appreciated, and yes again I am a noob so please leave your insults at the door

Picture of the 5100

Tue, 24 May 2011 10:52:53 +0000

Hey folks, went back to flash Sigma firmware onto my 5100 after having the 5100MOD on, I let my friend do abit of soldering and i think he may have took one of the surface mounts of the motherboard can anyone give me a Birdseye view picture of the motherboard

Thanks in advance

unlock SBG6580

Mon, 23 May 2011 22:11:22 +0000

hi any one know if is any way to unlock the MOTOROLA SBG6580? i have some setting where i can't change it.

5101e

Mon, 23 May 2011 14:57:46 +0000

i have got a 5101e i have been trying to flash it for the past few days now the chip is ST M29W160BB is does,nt seem to want to flash the chip . I have tryed alsorts of ways . different FW still no joy with

andy

Haxoware 1.1 Rev39 cannot run in my sb5101

Mon, 23 May 2011 05:46:04 +0000

Hey Guys, I'm living in Las Vegas. Yesterday evening, I flashed my Motorola SB5101 to the Haxoware 1.1 rev39. I owned a valid MAC address from COX, the online light always flashing, I can't get on the internet.
Here is my modern log:

Time Priority Code Description
2011-05-22 19:51:15 Error B301.8 Auth Reject - Permanent Authorization Failure
2011-05-22 19:51:15 Critical I402.0 TLV-11 - Illegal Set operation failed
2011-05-22 19:51:13 Notice I401.0 TLV-11 - unrecognized OID
2011-05-22 19:51:10 Information D507.0 Retrieved Time....... SUCCESS
2011-05-22 19:51:08 Information D509.0 Retrieved TFTP Config 138001_vm2.0_d.cfg SUCCESS
1970-01-01 00:00:26 Information D511.0 Retrieved DHCP .......... SUCCESS
1970-01-01 00:00:26 Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:21 Information T500.0 Acquired Upstream .......... SUCCESS
1970-01-01 00:00:20 Critical R002.0 No Ranging Response received - T3 time-out (US 6)
1970-01-01 00:00:20 Information T501.0 Acquired Downstream (843000000 Hz)........ SUCCESS
1970-01-01 00:00:05 Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:02:17 Notice M573.0 Modem Is Shutting Down and Rebooting...
1970-01-01 00:02:16 Critical Resetting the cable modem due to docsDevResetNow

RCA DCM Drivers

Sun, 22 May 2011 15:39:08 +0000

http://www.mediafire.com/?4cg473tnz4dr60f

Thank me later!

Loading backup on JTAG Utility

Sun, 22 May 2011 00:12:01 +0000

I have a 2mb original backup of a 5101 modem which I made with these commands:

getram 9fc00000 200000
save 9fc00000 200000

Then I tried loading this backup onto another 5101 modem w/ haxorware on it using these commands:

ldram 9fc00000
program 9fc00000 200000

After loading the backup onto that modem I tried hooking it up, but all the lights just turn on and then off. Only the activity light turns on when the ethernet cable is connected. I can't get onto the modem at all.
What am I doing wrong here????

If the header on the original modem has a crappy soldering job with some pins longer than the others could that be a problem creating a backup? It took around 10minutes to get the backup onto the pc

EDIT: I think I may have bricked it when I loaded the config that I made with this command:
getram flash
save flash

Help With SB5100E

Sat, 21 May 2011 14:49:27 +0000

hey guys,

I recently purchased 2 x sb5100e because I was told that they can work on a normal DOCSIS. now when I plug them up without modded it it syncs no probs but when I flash them with sb5100mod it goes back to the Euro docsis and its unable to sync even after changing back to North America. Am I close to solving this mystery or do I have a long way to go. Can someone just point me in the right direction? Much appreciated.

What is the purpose of the clip?

Fri, 20 May 2011 20:19:43 +0000

When Jtagging, I don't understand what the purpose of the "clip" is. I've seen it in every tutorial I've read

help with sb5101 restoring from backup

Thu, 19 May 2011 23:08:24 +0000

I am using a blackcat cable and schwarzeKatze build 140, on a sb5101 with haxorware 11 rev39, i am trying to use the 2mb backup i did before to return it to the factory and then reinstall another haxorware version, but i keep getting this error
Data verification failed! Fault address: 0x120002

what im doing wrong? can someone help

Sb5100 Sigma X2 Spoof

Thu, 19 May 2011 20:47:14 +0000

Hey guys I have been reading for days and am trying to get my SB5100 with Sigma X2 back online to test. Can someone please point be in the right direction to spoof this string via telnet?

Model: SB5100
Software Version: SB5100-2.3.8.0-GA-00-NOSH

Can haxorware be installed on a SB5120?

Thu, 19 May 2011 03:20:11 +0000

Is this possible or not?

Home Networking Station

Wed, 18 May 2011 20:40:10 +0000

Hey SBHackers,
I have been working on a Project I’ve come to name “Home Networking Station.” (Let me know what you think about the name as I plan on having the name somewhere on the device. Also feel free to mention better names.) The goal of this project is to house three essential home networking devices in one conveniently sized box.
The three devices are of course:

1) A Modem
2) A Router
3) A Switch

The box is going to be designed to appear as one single device instead of the mentioned three devices being in three separate enclosures. The secondary goal of the box is to have the latest networking standards so all devices will be Gigabit capable devices. I would like the box itself to be upgradeable so there is going to be a little more space than is required for future upgrades. I’m currently designing the box to house these three devices:

1) MOTOROLA SB6120
2) LINKSYS E3000 (should use the E4200? Can anyone provide the width of the PCB of E4200)
3) NETGEAR GS-116
4) Power Supply(Not Sure What I’m going with yet)

I plan on soldering all indicating LEDs to the front of the box by soldering wires to a custom front panel which will have LEDs and custom icons.
I would like the box to be made of Acrylic and my current design uses two sheets bent twice at a 90 degree angle. I need help with anyone who has experience bending Acrylic because I do not know what happens to the acrylic itself. Does it shorten? Would screwing it down across the edges prevent this?

I'm in the process of uploading current pictures I'm sketching.

Anyone have DPC diag fw?

Wed, 18 May 2011 17:53:28 +0000

Anyone know where to get, or what the file name is,
dump or anything of the legit DPC2100 diag firmware?

would really help. thanks!

Arris touchstone TM-802g

Wed, 18 May 2011 17:49:00 +0000

take a look at the latest Aris Puma5 D3 modem, currently use as a viop modem for business in NY. Specs at--> http://www.arrisi.com/product_catalog/_docs/_specsheet/TM802G_TS_16DEC10.pdf
Telnet and ssh access disabled by default "not sure why ".

Attached Thumbnails

Help configuring Sb5101

Tue, 17 May 2011 21:23:51 +0000

Ok i know the rules, shearch firts etc... but i already had done that. i have the modem with the latest haxorware i just need help conecting to an ISP , Liberty, I am usubcribed to the intnernet service but i have the cable feed to my house. what can i do to get online?? and i want to know when the sb5101 is in its factory, with out mod, if i could get the original config files and edit them. Or where i can find the correct config file i am really confused at this point

jtag issue

Tue, 17 May 2011 03:24:42 +0000

Hey guy's thanks for all your patience so far.
Finally soldered my first board, took about 6 times to get the schematics right, i learned alot stripping the cable ohm metering every pin labelling them. nice
Now i ran jtag, detected my chip. ran getram saved my backup , then when i used the 1dram boot . it said bad command, i tried the 1dram image0, i got the same error, bad command.
what could this be.

Help flashing SB5100 back to stock

Mon, 16 May 2011 01:05:49 +0000

I have a SB5100 that I haven't use in years. I have it flashed currently with the Sigma X2 Firmware. My brother is planning to get cable service and asked if he could use it until he buys his own Cable Modem. I don't have the backup I made before I modded it. I've tried looking for the current stock firmware for the device, but I'm a bit confused with all the short names in the files and what they mean. I haven't pay attention to this over the years. I will post what is currently on the device below. I changed the MAC Address and Serial Number back to what the sticker says on the bottom. So I just need to be pointed to the current stock firmware for my region. I would like to have the latest firmware available. I'm located in Canada. Thanks for any help given. I should also note that I would prefer a bin file as I know how to flash that. Unless someone can tellme how to flash the p7 files I saw.

Ok.. I figured out how to flash a p7 file. But it still didn't remove Sigma X2. I think I need to replace the bootloader if I remember correctly. How do I put it back to stock. opps.. n/m.. I forgot to power cycle after I updated. Looks like Sigma X2 is gone for good.

I flashed SB5100-2.3.6.0-SCM00-NOSH-NNDMN.p7. I flashed that file because it had SMC00 in it. I wasn't sure if I could put the GA-00 files on the device. Those files have a higher version number.

Software Version: SB5100-2.3.2.7-SCM00-NOSH
Hardware Version: 1
MIB Version: II
GUI Version: 1.0
VxWorks Version: 5.4

how do i flash sb5100 with usbjtag nt

Sun, 15 May 2011 16:29:14 +0000

i bought a usbjtag but i really don't know how to use it i want to flash my sb5100 with the sb5100mod i try messing with it but i think i broke it up the lights on the modem use to be on and now they turn on and all of the turn off and stay off i think i erase the program on it i am doing this cause i couldn't access the 192.168.100.1:666 page no more so i bought it to try to learn how to flash it so plz help is it brick modem now omg plz help lol

sb5100mod help?

Sun, 15 May 2011 13:57:50 +0000

hi all, iv read every post on here concerning forgoten gui password, tried read_memory 0xbfd40120 but telnet says error, unknown command, tried all default passwords and pressed login and not enter but still no joy, telnet username and password are as default so can access it, can any1 shed any lite on wot i am doin wrong or wot im missing?? by way its a sb5100i wiv intel chip in it, and cheers in advance for readin this

Just soldered Jtag to sb5101 now what?

Sat, 14 May 2011 03:49:09 +0000

I used a printer cable with haynes specs on the schematics.
I soldered directly to the board.(I found this brutal and i will get some 10 pin heads at least.)

I have the newest firmware. I have used haxorware before because my buddy used to mod these things.
So i can use the software and have good macs.
Now is there a guide to help me past this point.
so please take me from here. I have the modem plugged in to the power supply and computer and cable.
when you respond i will assume you are guiding me from step one.
1) Turn computer on.
2)
Thanks to all the posts i've read i have much to learn.
thanks Ivan

Attached Thumbnails

Solid Lights Come On And The Go Out

Fri, 13 May 2011 20:47:53 +0000

Ok i purchased a premodded modem, hooked it up and everything was fine. This is the sb4100. using it fine for months then all of a sudden it stops working. Basically all of the lights come on solid and then go out, then come back and go out, keeps resting itself. This just happened by itself. I never messed with anything... what could this be?

Ps. I researched before posting and can not find a clear answer.

SB5100i

Fri, 13 May 2011 11:55:12 +0000

hi, i just flashed my motorola sb5100i with SIGMA-X Version 1.06 RC4 BETA1, i have put a mac address into it but when i try to connect online all i get from the modem is the send light flashing, any help would be appriciated

5101 haxorware

Thu, 12 May 2011 21:39:19 +0000

This section is for the discussion of SB5101 hardware.
It is NOT for the discussion of how to get your modem working on a docsis network!

Debrick SB5100 Crazy Method!

Thu, 12 May 2011 21:29:31 +0000

Run Jtag Utility Programmer
choise Blackcat LPT Cable ,open,Console,Main
hit detect quickly just after You plug modem power in
ldram 9fc00000 (choise 2M bin for sb5100)
poke fffe230c 3
poke fffe2304 0
poke fffe2300 a
poke fffe2300 9
poke fffe2300 9
poke fffe2300 9
poke fffe2300 9
poke fffe2300 9
poke fffe2300 9
poke fffe2300 9
poke fffe2300 9
poke fffe2300 1c
program 9fc00000 200000
if you get Errors..and receive= Trying again,Busy..etc.. dont do anything just wate and let it Continue
when Complete reboot your modem and see power light on and Receivelight blinking!
Now you can flash the sb5100
Good Luck

help me! 2.19.0.16

Thu, 12 May 2011 05:52:37 +0000

Software Version: SB5120-2.19.0.16-SCM00-NOSH
Hardware Version: 4
MIB Version: II
GUI Version: 1.0
VxWorks Version: 5.4

Time Priority Code Message
2011-05-12 00:49:17 3-Critical R02.0 No Ranging Response received - T3 time-out
2011-05-12 00:48:02 7-Information SNMP: Working in SNMP V1/2c Only NmAccess mode
2011-05-12 00:48:00 7-Information INITIALIZATION COMPLETE - MODEM IS OPERATIONAL
2011-05-12 00:48:00 7-Information B401.0 Authorized
2011-05-12 00:48:00 7-Information SEC: Co-Signer CVC from configuration file was verified
2011-05-12 00:48:00 7-Information REGISTRATION COMPLETE - Waiting for Operational status
2011-05-12 00:47:59 7-Information REG: Capability type <15> isn't supported by CMTS
2011-05-12 00:47:59 7-Information Registration file - downloaded
2011-05-12 00:47:58 7-Information Trying to download Configuration file ...
2011-05-12 00:47:58 7-Information Time of day - retrieved
2011-05-12 00:47:58 7-Information DHCP - parameters acquired
2011-05-12 00:47:58 7-Information DHCP: ACK: Setting (*) CM TFTP Boot file: d11_m_sb5120_silver_c01.cm
2011-05-12 00:47:58 7-Information DHCP: Setting CM IP address to: 96.189.190.96
2011-05-12 00:47:55 7-Information DHCP: Setting (*) CM Syslog Server address to: 0.0.0.0
2011-05-12 00:47:55 7-Information DHCP: Setting (*) CM Time Server address to: 68.87.74.18
2011-05-12 00:47:55 7-Information DHCP: Setting (*) CM Subnet mask to: 255.255.248.0
2011-05-12 00:47:55 7-Information DHCP: Setting (*) CM Gateway address to: 96.189.184.1
2011-05-12 00:47:55 7-Information DHCP: OFFER: Setting (*) CM TFTP Boot file: d11_m_sb5120_silver_c01.cm
2011-05-12 00:47:55 7-Information DHCP select: Setting (*) CM TFTP Server address to: 68.86.47.59
2011-05-12 00:47:55 7-Information DHCP: Offered (*) CM IP address to: 96.189.190.96

Frequency 687000000 Hz
Signal to Noise Ratio 36 dB
QAM QAM256
Network Access Control Object ON
Power Level -2 dBmV
The Downstream Power Level reading is a snapshot taken at the time this page was requested. Please Reload/Refresh this Page for a new reading
Upstream Value
Channel ID 3
Frequency 36400000 Hz
Ranging Service ID 396
Symbol Rate 5.120 Msym/s
Power Level 42 dBmV

My modem keeps looping i had a problem because of noise on the line but it was fix it will work fine for and hour and then get real slow not the ususal 22 down i get im getting less than 1 and restarting .. Is the firmware i have the newest , my modems legit so i have no worries, but its amazing i didnt have these problems before when i was sbhackin. Any suggestion SAVE A NEWB!

No webserver, Reflash?

Thu, 12 May 2011 01:09:03 +0000

Ok i see there is a similar post but mine is slightly different. I have a SB5101 and flashed Haxorware 1.1 rev 39 on it nearly a year ago (according to file ages) and it worked fine till today. I had cloned my original (paid modem) and had been using the clone. Today my brother plugged the original in and you guessed it...the both take turns getting online and bumping the other off. Well i only know he did this because he told me the blackbox (modem) wasn't working. I had been at work all day and this had been going on. I unplug the clone and restart the original. That fixes the internet, however my clone now will not allow me to access the http server (192.168.100.1) all ips are correct and i cant telnet either. So i figure they shut down the http server and now i cant take the mac out or use the clone at all. To flash this back in the day i used a serial/parallel port cable and Schwarze Katze. I found tuts, my backup 2mb flash (of hacked version) and loaded a VM with all i need to reflash. I can see the modem and am currently reading the DRAM. I guess im stuck as to what todo next. I thought maybe the console command : detect,ldram ldram 9fc00000 But i get this
BlackCat> detect
Manufacturer: broadcom

BlackCat> ldram 9fc00000
ldram 9fc00000: unrecognized command
What should i do or am i taking the wrong steps?

Flash 5101 to original

Thu, 12 May 2011 00:34:04 +0000

Hey guys, it's been a while since I've been on here. I'm leasing a modem from ISP and want to use a modem currently flashed with Haxorware. I want to return the modem back to original so I can use it instead of the leased modem but I've forgot how to do it. I used Blackcat to program it before, do I have to use Blackcat to get it back to original or what? Thanks for the help...

SB5101 Docsis 3.0

Wed, 11 May 2011 16:19:02 +0000

Hey all. ive been noticing that twc has been upgrading to docsis 3.0 when it comes to the sb5101s
I work for timewarner and thats how i know.
I have haxorware 1r39 on my modem and i think it is only ugradable to docsis 2.0
is it possible to have it working with 3.0 or do i need another firmware for it. if i am posting in the wrong section what is the correct section to post this

SB5101 Motorolla page

Tue, 10 May 2011 17:26:04 +0000

My sb5101 haxoware rev 39 was working, i had a power outage and when the modem came back on I all the lights were on and it said operational but I couldn't get online even after changing the dns settings on my computers but still nothing. I go to the 192.x.x.x page and it brings up a "Motorolla Page and says operational but its not the haxoware page. I tried reflashing but my blackcat or my usbjtag won't connect to the modem.

What is the config file and were do I get it?

Mon, 09 May 2011 16:59:48 +0000

I understand the config file is needed to properly configure the modem. Im guessing that it is ISP specific? So where or how do I obtain it? Sorry if the is a stupid question. Im just needing more info. I have successfully Flashed my Modem but the Config file has me stumped. Any and all information will be great. Thanks

trying to debrick 5100 with MX Flash, but stuck

Sun, 08 May 2011 16:29:39 +0000

I'm trying to debrick 5100 with MX Flash

the parallel jtag detect the modem when i hit detect quickly just after i plug modem power in

if i try to write flash with blackcat, it starts to write, then it just hangs, even if i leave it set all night (even if i untick verify write)

if i use toms jtag utlity, it will only write if i untick verify write

i have tried the hot swap method with my usb blackcat jtag, it writes to the modem, but then it still wont work

any suggestions?

are the MX flashes a lost cause?

ISP firmware upgrade

Sat, 07 May 2011 17:14:34 +0000

Hi guys im using SB5101 with haxorware 1.1 Rev.39

My settings are

Factory Mode uncheck
Disable Firmware Upgrades check
Force Network Access uncheck
Tftp Enforce Bypass check
Disable IP Filters on startup check
BPI BPI + (docsis1.1)

Im using my original mac but my configuration file is edited (12 mb) and so far I don’t have problem
But today I set configuration file to receive original isp and I sow that they are forcing to upgrade firmware to version SB5101E-2.7.7.0-GA-00-NOSH-NNEMN and my speed that I receve (3mb) is slower that my original (8mb)
In the stealth Software Version SB5101E-2.7.7.0-GA-00-NOSH-NNEMN is the same version that they are forcing me to upgrade because I changed couple of months ago when I sow that they changed in the all area

Can someone tell mi what to change to show them that I have received that firmware version

SB5100 down help needed!!

Fri, 06 May 2011 18:49:03 +0000

Sorry Im a noob here. I messaged a few people who I seen are mods and experts on this site. If that is a violation I do apologize if not a violation I would greatly appreciate help. I got a sb5100 modded with I think sigma or docsis w/ time warner cable and recently my modem's power light just keeps blinking so I got no service I dont know what to do. I would appreciate your help if u know what to do.

If u need to reach me or anything I got aim, yahoo, skype. Thx man

How did I receive a -1 on my rep fellas?

My speeds are acting funny, frustrated.

Thu, 05 May 2011 20:55:04 +0000

Hey everyone,

I have two modems.
One is a 5101 test modem.
The other is a 6580 subbed modem.

The issue is that I cant seem to get over about 1.5mbps on the 5101.

I have tried multiple MAC's with D3 bins, I even turned my modem off and cloned my own subbed one briefly to test.

I am getting 30mbps+ DL on both modems, and 5mbps on my subbed 6580 while only getting 1.5 to 1.7 on the 5101.

I know that these 6580's bond on the DS channels for more bandwidth.
But, from what I see it is using the same single upload channel.
So why is the 5101 going so damn slow in comparison?!

Thanks in advance.

Thomson eCOS Open Source

Thu, 05 May 2011 06:04:13 +0000

Thomson Open Source eCOS

Unzip, click on Index

Attached Files

eCosDoc20.zip 1.8MB 9 downloads

Password Thomson Model Thg540

Thu, 05 May 2011 05:44:50 +0000

Hello!

I need help for Thomson Model THG540 password.
When opening the modem webinterface, in its upper part is the ADVANCED menu.
Click the ADVANCED menu and requires password like in the picture below.
What may be password?
I have tried every kind of password but I did not find.

Attached Files

untitled2.bmp 3.75MB 20 downloads

need 8mb memory for mx chipset

Thu, 05 May 2011 02:14:41 +0000

i have a 5100 i'm trying to unbrick. the download section has 2mb flash, but no 8mb memory for a MX chipset

can somebody please be a donor for a MX 8mb memory and if you're feeling generous please upload the matching 2mb flash, ty

How to hack comcast

Wed, 04 May 2011 17:30:26 +0000

How to hack comcast?

Help with SB5100 and SB5101

Wed, 04 May 2011 06:11:34 +0000

I'm having trouble connecting with both of these. I have tried to re-enter multiple Mac's and still nothing. I got the Mac's a while back from a friend. I haven't quite yet been shown how to pull my own stuff to get them up and running. So if someone could kindly help me out a bit, that would be great. I'll do the work if you could just maybe point me in the right direction. Please and Thank You.

is ther a usbjtag for mac ox compatible ?

Wed, 04 May 2011 01:19:50 +0000

Hi i had a question i have a sb5100 just to test stuff and a rca dmc315 that i use a my ginny pigs but i just got a mac computer i was wondering what usbjtag can i use thats mac compatible??
and what jtag are compatible with the sb5100 and the rca dmc315

cant acces 192.168.100.1 or the :666

Wed, 04 May 2011 01:16:33 +0000

Hii i have a sb5100 i use to acces the page but i think i accidentally did a factory reset on it the one were it says 5 to 30 min is ther a way were i could make it go back to the sb5100mod plz help!!! thanx

sb5100 went down

Mon, 02 May 2011 23:26:17 +0000

Hello everyone. I purchased an sb5100 about two months ago. Everything was working great until it went down about two weeks ago. I tried contacting the gentleman that sold it to me for assistance but he is no longer available. My provider is Time Warner in South Texas. Anybody care to help this newbie out? Any assistance would be strongly appreciated. Thank you in advance.

DCM315 9fE00000

Mon, 02 May 2011 13:20:21 +0000

hi all
when i press detect for plastic dcm315 usnjtabnt i get
9fc00000
9fe00000

what is 9fe00000 and what range is it? i tried getram 9fe00000 200000 but its out of range.
i think 9fe00000 has info on it and if you only flash 9fc00000 it still has orinigal info????

Curious to know what this is?

Mon, 02 May 2011 07:42:23 +0000

Ok,this is my first post. So bare with me on it. I have a RCA DCM 425 modem. I've read through some of the other threads about flashing, haxoware, etc. I opened up my modem the other day to see what I needed to do. Anyway, my question is this. I would kindly like to know if this is a USBJYAG port or what it is exatly? Any help would be much appreciated. Sorry about these pictures but I took them with a cell phone. The first one should be the whole board and the second is what my question is about. It's a white piece with four plugs in it.

Exact Stock Clone of a DPC2100r2

Mon, 02 May 2011 00:52:41 +0000

How would one go by to backup the CM certs, auto config file on a subbed modem incase something where to happen?

how to flash/ reflash

Sat, 30 Apr 2011 09:55:44 +0000

Hi im just wondering what are the steps for flashing/ reflashing haxorware rev.39, ive tryed actually looking for it but most noob tutorials are of sigma and of motorola sb5100 and mines is an sb5101 please help ive been searching for days for a proper tutorial

Thanks
Lester

Ambit 256 help

Sat, 30 Apr 2011 05:54:51 +0000

Hello, I have an Ambit/Ubee 256 and I have a slight problem (If in incorrect section, could you please move it?)

The guy that flashed it left all the timeouts and so tick.
I have untick and 'Save and Reboot' the modem, but when I click save and reboot, it's seems it's not actually saving it, the modem crashes and nothing happens.

I do the same thing but this time only 'Save' IF the modem don't crash, it saves the successfully, but, when I reload the settings page, they're all tick again.

I don't know any other way around this.
Could someone help me reflash or get it to function correctly?

Thank you.
-Scriptr.

locked 5101

Fri, 29 Apr 2011 05:23:31 +0000

Ok I have an sb5101 my girlfriend had at her old apartment well we got a new cable sevice, and I'm getting the send and receive lights flashing at the same time iv researched that this is probably the isp locking that modem, am I correct so far? My question is how the hell do I unlock the modem to run with the new service or change the MAC address to match the one downstairs so they can be used with out having to pay what is it 30 bucks more a month on service. Please help ASAP iv been looking for a solution for 3 days now. Any help is much appreciated thank you.

haxorware 1.1 r39

Fri, 29 Apr 2011 02:07:11 +0000

What would cause a Haxorware modem to become completely unresponsive(no internet, no web gui, no telent)after being given a IP and a normal config? Power, send, receive, online and computer lights all light up how they are supposed to and stay. Using the same settings on another Haxorware modem will go online and work perfectly. I was able to get this from telenet before it locked up.

0x00004ede [CmDocsisCtlThread] BcmVendorCmApplication::StopDhcpServer: (VendorExtension CmApp) Shutting down DHCP Server...
0x00004ee8 [CmDocsisCtlThread] BcmStandbySwitchThread::CmIsOperational: (Motorola Standby Switch Thread) Simulating a press of the standby switch to get the state configured properly.
0x00004ee8 [IGMP Thread] BcmIgmpThread::Starting Igmp Thread...: (IGMP Thread)
0x00004ee8 [Motorola Standby Switch Thread] BcmStandbySwitchThread::ThreadMain: (Motorola Standby Switch Thread) Standby switch was pressed!
0x00004ee8 [Motorola Standby Switch Thread] BcmStandbySwitchThread::ProcessSwitchEvent: (Motorola Standby Switch Thread) Standby switch disabled in nonvol; ignoring event.

Ambit VMNG-300 HowTo??

Fri, 29 Apr 2011 00:31:35 +0000

Hi.

I a noob about cable modem flashing and I try to find info step by step howto flash modem (VMNG-300). For now I get info the VMNG-300 can be flashed same way like sb6120 but... ...non one give info how to flash sb6120. Can someone help me and post HowTo guide step by step what I need and where to start.

I can't find what kind of cable I need and how to do it.

I will be very happy if someone can help me with this thinks.
I need info about ->>€

1. What kind of cable I need , usbjtag, jtag ( also I have spi flasher support 3V and 5V I use this to recover crosshair IV Formula bios)
2. Software needed for this model
3. And how to do this propley way
4. Config files etc ... I try to get my self.

Sorry for bad spelling, and for stupid noob question but I really can't find any detailed info howto.

Thx for any help.

SB5100

Thu, 28 Apr 2011 16:27:22 +0000

Heyy, A couple of months ago my (comcast) modem stopped working i tried changeng the config files and mac but nothing any help would be appreciated, the modem gets stuck on online it just keeps blinking nonstop and it reboots... sad fcae help and ty
Its a sb5100
and when i check the :100 it just says it failed to find ip .

Any way to return sb5101 to stock and provision it...

Wed, 27 Apr 2011 03:32:00 +0000

without a backup of the original flash after flashing haxorware. lol

having trouble in my area with subbed sb6120. Infrastructure for Doscis 3 not fully complete and bonding issues. Have an old SB5101 (haxorware) laying around that I would like to have matching mac/cert on to provision. Any hope of this without my stock firmware? I'm not even sure what file name it would be under, if I did have it somewhere (I know I backed up while flashing, but years ago)

Only other option would be to trade my brand new 6120 for my cousin's used 5101 that I tested here and works. He only lives 5mins away too. Hate to downgrade now and kick myself when D3 rolls out with better subscription plans

dpc2505

Tue, 26 Apr 2011 20:37:26 +0000

I have a dpc2505 here, it has a bcm3381 chip in it. Is there any diagnostic firmware that I can flash to this modem? ? Or is there any way to enable factory mode on this modem or anything else like that?? Thanks for reading!

SB5100

Mon, 25 Apr 2011 21:26:01 +0000

Hello everyone.. before i continue, thanks in advance for any suggestions or comments.

Anyway, i have an sb5100 loaded with sigma x , i cant recall the version. anyway, my area is now bpi enforced. my question is, are these modems still testable or they trash.??

thanks and let me know
thebigone

Is it possible to SOFT-MOD a modem?

Mon, 25 Apr 2011 05:46:52 +0000

Sorry for asking a silly question, but I'm a newbie in here. Is it possible to SOFT-MOD a modem? if so, how? and with what software?

SB5100 HELP PLZ

Sun, 24 Apr 2011 22:49:48 +0000

Hi Everyone. I am new here and don't know a thing about hacking. I have an SB5100 and Xfinity internet that about to end in a month. Right now I have a DOCSIS 3.0 Modem, but I want to mod the SB5100 and use it for faster speeds. Please help Thank you very much.

Mac clone on router

Sun, 24 Apr 2011 19:02:05 +0000

I have sb5101 and router D-link DIR600

until recently I could change my mac address you want, and I always received a different IP address, and now can not do that no member of the LAN card or the router

what happens it impossible to clone the mac address, I can only use 00 11 22 33 44 and 00 43 65 96 44 12 ... any other changes in the router, in part for cloning can not get IP address from my ISP. And with these two put whatever speed I get the same IP address. Do you know which is the problem?if I may observe from isp? soryy on english

how to download config file from flash memory

Sun, 24 Apr 2011 18:54:09 +0000

after i download config file to flash memory how do i get it to my computer? thanks

SB5101 Haxoware version 1.0rc6

Sun, 24 Apr 2011 15:33:15 +0000

Hello everyone.. you see, i have a modem with haxo version 1.0rc6. i am trying to upgrade to 1.1 ver39..i exhausted all my means on trying to upgrade via web gui(192.168.100.1) *firmware upgrade** and just cannot get it upgrade. anyone has a firmware with haxoware 1.1 ver39 included? thanks for all your help.

thebigone

EPC2203 bootloader needed

Sun, 24 Apr 2011 09:45:12 +0000

I just bricked my webstar EPC2203- wrong bootloader... I'm lookig for original bootloader - anyone help me?

Got modded SB6120 but have one question

Sun, 24 Apr 2011 07:31:07 +0000

Hello,
I am not a newbie but might of made a mistake. I have an activated internet line with [NOT NAMED]. The sb6120 came flashed with firmware i had thought. is it true that when i connected it to the cable it re flashed the modem, because 1. its asking for account # for activation and 2. i login to 192.168.100.1 and it shows normal motorola firmware no signs of sbh alpha firmware

Stock Modem - No Xtra Firmware

Sat, 23 Apr 2011 05:03:58 +0000

Curious question. If I get a stock box and push C's in factory mode without adding sig|\/|a or 5100M0d, will the box be ok? Do I NEED to add this FW later to prevent updates to kill the box? Or can I just leave it as it?

Way to reset Modem

Sat, 23 Apr 2011 03:36:05 +0000

I have a SB5101 with haxorware on it, It has been online for a few months, mac got banned, I changed it and it worked for like 10 minutes then rebooted and now all I get is a blinking power light for 30 seconds or so and the reboots. Now the issue is I can no longer get to the haxorware gui. Factory mode was disabled like always. I dont currently have my usb jtag to reflash it, is there anyway to fix this?

loaded haxorware11rev39-DIAG, what now

Fri, 22 Apr 2011 21:30:10 +0000

I have a webstar dpc2100r2 that I was able to use the 1-click method to load haxorware on. what now? are there guides to mucking with the config file?

dead sb5101E

Fri, 22 Apr 2011 16:40:45 +0000

hi guys - my sb5101e has died after i tried to put on hax39 onto it...there are no lights on at all, the lights come on for a split second when i connect the power to it. I have tried various 2megs dump but after blackat has finished writing to it, the modem is still dead...i only have a blackat jtag cable and it takes about 40 minutes to write a 2meg dump to it ?..what am i doing wrong...?...do i need to flash a bootloader as well, if so whic one ?...and in what order ?
i can still connect to it via blackat cable...

cheers

i have a cable modem Scientific Atlanta DPC2100 that i wanna clone is it possible

Fri, 22 Apr 2011 13:23:33 +0000

well i have this cable modem Scientific Atlanta DPC2100 that i want to mod it clone it and make it super fast but i am new to all this so please be specific thanx

Ambit 255 thinks it's a SB5101

Fri, 22 Apr 2011 03:15:08 +0000

My friend tried to upload a non-vol to an ambit 255 and now this ambit modem thinks it's a SB5101, when I plug in Ethernet and scan with nmap there is nothing, but I can ping 192.168.100.1/ When I plug the USB in instead, it won't accept the ambit driver but will accept the SB5101 driver because the ID's are registering as SB5101. I've tried injecting the 5101 hardware id's in the ambit driver inf's and it actually accepts and installs the driver but then freezes windows immediately. In linux it's a different story, the USB works because the module is probably the same anyway, so I can ping over USB but still nothing else, what I was wondering is, does anyone think it would be possible to force this modem to upgrade to ambit_2100r2.bin through SNMP and tftp... I'm always looking for a challenge and this seems like it would be insanely difficult if not impossible without RS232, but I don't have one handy and I would like to think that if can ping back it should be accepting snmp, although if the web server isn't running/communicating correctly then SNMP probably isn't going to work either. Which bitfile and SNMP strings would I use anyway, the one for the ambit or the SB5101?

Send Light Blinking

Thu, 21 Apr 2011 16:22:17 +0000

Hey guys quick question. I flashed my 5100s back to stock bin then pushed certs to it with no issue. I then flashed 5100Mod over and then rebooted the box to test connectivity. Everything worked great for about 2 weeks. Now all of a sudden the 5100s now have the send light blinking non-stop. One friend told me his just fixed itself. Other friend said his is still blinking. I have disable firmware updates enabled and nothing else enabled in the main page. Will reboot disabler or force network access do anything for this issue? Even with valid certs the boxes are still being kicked off? Any ideas?

Disregard. Just confirmed it's the power light blinking and not the send light. Time t read.

5101E Flash Problem

Thu, 21 Apr 2011 11:19:10 +0000

Hi all, I've been trying to flash a SB5101E with a serial BlackCat cable and I've been following the tutorial in the download section, just to make sure I have this correct so far, I connect my BlackCat cable and configure the port settings, power on the modem, start SchwarzwKatze 140 and the modem is recognized, then I flick over to the SB5100 tab and hit program and a dialogue box opens asking me to find Haxorware, I then lead it to a Haxorware file I received with the tutorial called 5101E-11REV30.bin and when I try to program the modem I get an error message saying the file is an invalid lenght, or too big, or it's the wrong file or something....

Any words of advice or did I do something wrong, or is there a step I'm missing before I get to that part?

Cheers in advance for any help.

Plus, when i hit check it tells me the firmware is ecram_sto.bin and it's size is 786243 and the CRC is 36505FC2 if that helps

Thanks again, great forum!

dynamic config

Thu, 21 Apr 2011 00:11:48 +0000

hello, i have a sb5100 using sigma-x 1.06 how do i download dynamic config file? i have tried tftp - i xx get xx but it seems like doesn't work. maybe i have not done it right. please help. thanks

help needed i dont know whats wrong with my modem

Wed, 20 Apr 2011 06:39:40 +0000

hi guys i need help my modem has been down for 2 weeks already i cant seem to make it work i changed the mac address and it still wont work any ideas?

SB51MOD on SB5100 goes to sleep

Tue, 19 Apr 2011 22:51:54 +0000

I have had a cloned SB5100 with SB51mod on it for some time.
Firmware: SB5100MoD v1.0.4 Beta
It has been working well.

It has a DD-WRT router behind it.

The problem is that the connection goes to sleep.
Most of the time it is after I return from being away. Even if I leave something running that updates often. Still goes to sleep.

When this happens the modem UI and the router UI both show the expected WAN address. No problems there.
But I have no internet.
Most of the time I get reconnected by power cycling the SB5100.
This is something of a bother. I have tried some of the keep alive stuff in DDWRT, but nothing has helped.

Is this a problem I can be expected to just have?
Is this because of the cloned nature of this modem?
Alternately what should I look into?

Thanks in advance.

sb5101E Haxorware ver.1.1 Rev.39

Tue, 19 Apr 2011 20:50:28 +0000

Hi @ll!
after flash my sb5101e with Haxorware Re.39i...in 192.168.100.1 i only changed to Eurodocsis 1.0 add server ip and config ..after few secound scanning i get only This in Overview=
Task Status
Acquire Downstream Channel Done
Obtain Upstream Parameters Done
Upstream Ranging In Progress
Establish IP Connectivity Waiting
Retrieve Time of Day Waiting
Negotiate security Waiting
Receive configuration Waiting
Register connection Waiting
Cable modem status Ranging
after few hours wating i get also the same result...who can help please?
Thank you

script?

Tue, 19 Apr 2011 17:33:30 +0000

Where can I find the sb5101u script for usb blackcat 1.7?

ethernet mac address

Tue, 19 Apr 2011 03:55:22 +0000

Hello every, I am new here, like to ask if any one can help me, I accidentally change my Ethernet mac address on my sb5100 and now I can not get back into the configure page on the modem with firefox browser 192.168.100.1:666 , I even try to log into 192.168.100.1 and I no longer able to log into this page also. Please help any one.

SB5100 Clone To Webstar 2100 BCM3349

Sun, 17 Apr 2011 16:57:08 +0000

Dear Expert..

As im sure most of you already know that docsis 1.1 is coming into effect in the uk Big style and now we need to 1:1 Clone modems...

So Question is.. I Have a SB5100

Software Version: SB5100-0.3.1.3-SCM00-NOSH
Hardware Version: 3
MIB Version: II
GUI Version: 1.0
VxWorks Version: 5.4

And i would like to clone it to a Webstar 2100 BCM3349 With Hax 1.1 REV39

The question i have is.. Does The bitfile trick still work with the sb5100 with my current S/W Version or is that obsolete now..

I would like to be able to get the CERTS from the sb5100 Without using a JTAG Interface or is this no longer possible ive looked every were and cant seem to find the correct answer...

Ps i tried doing the snmp to get the certs and i get.. 192.168.100.1 no repose... :|

Thanks in advance..

SB 5120 RS-232 Connection problem

Sun, 17 Apr 2011 09:24:13 +0000

I have a SB 5120 I soldered some wires to the pins and connected them to a serial cable that is attached to my computer. When I try to use putty to see what the modem gives me, it seems like I am getting scrambled or encrypted data. I have tried a few different baud rates and I'm not sure what is going on.

9600
8 data bits
1 stop bits
no parity
flow control none

Any suggestions?

Haxorware 1.1 r39

Sun, 17 Apr 2011 04:52:38 +0000

Hey guys. I have a sb5101 with haxorware 1.1 r39 and i get this error that says permanent authorization failed in the log. I read somewhere that it might me that the mac certificate doesnt match or something. when i install the haxorware the mac changes to its original modem mac. and when i change it to a TWC mac it says that the original modem mac saved as a backup. and when i change it once more it says that its a manual change and it not save. my question is if that is the reason why it doesnt work because the certificate doesnt match the hand written mac or if its something else.
if this isnt the place to post this please tell me where is but sorry in advance if its not
kind regards =)

DCM425 Any Firmware Version - Shouldnt Modding any BCM3349 Chipset Modem Be Easy?

Sat, 16 Apr 2011 13:51:07 +0000

Now guys I have a little experience with digital logic devices I used to Write Firmware for AT MCU's and Save Data to Flash Eproms using 2 wire SPI. Now after modding a SB5101 which had to be the easiest thing I've ever done (ALL CREDIT GOES TO YOU GUYS!). Correct me if I'm wrong I realized the Tom's Software performs I/O with the MCU to Ultimately program the Flash the MCU Via JTAG (I'm old school and like to make cables so I made a PJTAG that I learned from experience should be no longer that 5" of actual cable unless u use a buffer or you get write errors. Now here's my question lets say I bought a SB5101, popped off its flash chip replacing it with data cable soldered to a 48 pin TSOP IC Clip Could'nt I just use it to Clip to the flash of a DCM425, flashing it via the SB5101. I Might have to temporarily cut a couple of pins but it should work in theory. I'm also interested in modding firmware for "unmodifiable" modems because as long as you can code for em you can mod em, I learned that with the Unloopers of yesteryear made the chip do something totally different.

P.S. I just had a duh moment couldn't I make a simple flash reader and writer using the basic functions of a cannibalized BCM4439 MCU because on the datasheet it claims to be an allinone cable modem so Power Jtag and Flash pins Should be all we need to produce a simple Flash R/W Device or I could write code to Program it Via Parallel" Havent really checked out the i/o details of the flash chip though.

Any POSITIVE and USEFUL information would greatly be appreciated.

* Please Do not mention anything that would involve theft of service AKA MAC Address inf etc... I've already had my visit from the Secret Service and aint going back this is just for the FUN of Modding MCU's in modems and routers

Shelled DPC2100R2 Won't Accept Firmware

Sat, 16 Apr 2011 04:19:07 +0000

I tried to use the suggested tutorial flashing through tftp and got Incompatible SW Image, after trying for a few hours, I decided to try the other method of flashing the Ambit_2100R2.bin and that got the modem shelled. I then tried to upgrade to a different firmware through dload -f and continue getting Incompatible SW Image, even though others that have the same firmware (060303) are getting logs saying Configuring Driver for incompatible firmware and Configuring Driver for firmware spanning two images. Anyway here is the telnet log and I expect that it's a access level issue (locked) or the driver doesn't support this kind of upgrading, but when I tried to flash a stock 060303 back to it, it gave me the same error. I'm stuck on the shelled firmware but I know I should be able to write a bit or two in ram and unlock the upgrade feature. I'm leaning towards it being locked because I see control for level 7 is 0 and other people haven't seen this problem on the same firmware?

Starting Tftp of configuration file...
Time Of Day completed...
Logging event: DHCP WARNING - Non-critical field invalid in response.
Logging event: SW Download INIT - Via NMS

CM/DocsisCtl>
CM/DocsisCtl> Not logging event ID 2436694024, control for level 7 is 0.
Logging event: SW upgrade Failed after download - Incompatible SW file
DHCP lease renewed successfully!
Logging event: DHCP RENEW WARNING - Field invalid in response
DHCP lease renewed successfully!

Static IP in SB5100MoD

Fri, 15 Apr 2011 18:38:44 +0000

hi,

I searched high and low but couldn't find information on static IP + autoserving in SB5100Mod.

Then I figured it out myself. Using Telnet;

cd n/d
dhcp_settings
(set them as you wish, like haxorware)
enable dhcp false
enable force_cfgfile true
write

then reboot the modem.

Posting just in case if somebody looks for it. (I actually bought a 5101 because I couldn't get it working)

Enjoy..

webstar

Fri, 15 Apr 2011 13:21:21 +0000

trying to get into the webstar page,192.168.100.1,asks for password for infinite tried loads can't get in ,any way round this or to reset password thanks for any help

Cisco 2100 troubles...anyone?

Thu, 14 Apr 2011 00:18:18 +0000

hi, I have been running my modem for a long time, recently I have been struggling.

im on ComC$#@, Tx. and I will load some new Macs like always scanned far away from home,

but nothing. It wont reach Operational,

Is it this new dam Xfinity.

Helpp.

Running Hax. 1.1 rev.39

thank you

[Updated 2011/04/19] 192.168.100.1 Unreachable

Wed, 13 Apr 2011 22:16:42 +0000

I have a 5101 that was operating normally for over a year. Today, I cycled the MAC/Serial on it and when it rebooted it got stuck on US syncing (solid DS light, blinking US). At this point, the modem would not loading the Haxorware homepage (192.168.100.1) and TELNET was not connecting.
Next, I power cycled the modem and

Unplugged the coax
Set my IP address STATIC to 192.168.100.11, 255.255.255.0, and 192.168.100.1 (IP, SUB, GAT)
Pinged 192.168.100.1 and the response was "Destination host unreachable." until I plugged the modem in and it had a moment to initialize and then when the modem was attempting to DS sync, the ping requests turned to "Request timed out."

If my NIC is set to DHCP, the modem issues a DHCP lease yet I cannot ping the modem.
The modem seems to be stuck on DS syncing but I cannot confirm this beyond the LEDs (Solid POWER, blinking DS). I attached USB-JTAG (BlackCat), flashed HaxorWare R39. The flash was successful but the modem has the same symptoms. I flashed the bootloader, same symptoms. I flashed a 2MB dump of Haxorware R38, same symptoms.

I haven't had this issue before. My concern is how to get the modem to be responsive again; I do not need assistance with configuring it for Internet access. Suggestions please! Flashing stock firmware to the modem had no effect.
(Yes, I have tried two computers. Also, I have another 5101 running currently and it has no issues, even with power cycling / MAC changing.)

Making a 5101 backup modem, from a new unopened 5101

Tue, 12 Apr 2011 21:37:15 +0000

Here in SoCal time warner roadrunner land

I have a 5101 recently installed by the good folks at time warner.

I have another 5101 from a few years back, that I had opened, soldered on the pins for a com cable, made a 2M flash backup, then installed Haxorware, & on & on...

My questions are:

Can I get to the new 5101's cert & mac without opening it up? How? (hint, link, anything)

Can I then install the new unopened 5101's 2M bin file into my older 5101 and have it work as a modem backup? (hint, link, anything)

Can I also take this backup modem with me when I visit family members that have time warner in a different node, and use it there while I visit? (hint, link, anything)

I have been searching here in these forums, reading & learning. For some of you this technical data comes easy. For me, not so easy. Thanks for your brilliant replys in advance.

Help,first time this happens to me

Tue, 12 Apr 2011 19:52:05 +0000

Hi everyone!
I have some experience getting modems working on ISPs in my town without any problems. But now,these days I am cracking my head because I can not get a working internet connection at my other apartment. I flashed,configured 2100r2 without any problems(Haxorware v1.1 rev39),connected it with PC and cable and tried several MAC adresses that I have previously acquired. However,niether of them wanted to work. I am getting same problem all the time, and it is that either "Upstream ranging" can not be Done, or it gets stuck at "Establish IP Connectivity". I even tried to use MAC of a friend that is paying for internet at this ISP,and it got stuck @ "Establish IP COnnectivity"(his modem was ofcourse turned off). I am using MACs that should,must work. I changed modems,refleshed them,changed MACs,settings,frequencies..What am I doing wrong?What seems to be the problem?

BlackCat RC4

Tue, 12 Apr 2011 17:10:25 +0000

HI!
ANYBODY CAN TEL ME WHERE I CAN FIND " BlackCat RC4 "?? THANK YOU IN ADVANCE..

what now?

Tue, 12 Apr 2011 10:24:44 +0000

Had a 425 going good, but got deactivated. now no matter what settings i use, 192.168.100.1 page goes to automated provisioning page andsays unknown mac id- do i need to reflash it or what am i missing? thank you

SB5101n.

Mon, 11 Apr 2011 20:26:35 +0000

Im really new to this, and I was wondering if there was a way to flash my modem without opening it up, like maybe through the ethernet port?

sb5101E Debrick

Sun, 10 Apr 2011 23:06:29 +0000

Need Help!
i debrick my modem with JTAG Utility like this= Detect
poke fffe230c 3
poke fffe2304 0
poke fffe2300 a
poke fffe2300 9
poke fffe2300 9
poke fffe2300 9
poke fffe2300 9
poke fffe2300 9
poke fffe2300 9
poke fffe2300 9
poke fffe2300 9
poke fffe2300 1c
detect (here i receive This=
Read IDCODE: 0x0334917f
Manufacturer: Broadcom
part: BCM3349
Version: 0x0
---------------------------------
Load Configuration File: bcm3349.def
IR Length: 0x5
Endian: Big
Protocol: EJTAG
RAM Start Address: 0x80000000
RAM Size: 0x800000
FLASH Start Address: 0x9fc00000
---------------------------------
Read IMPCODE: 0x00800904
EJTAG Version: 1 or 2.0
EJTAG DMA Support: yes
---------------------------------
Detect FLASH: Intel 28F160C3B
Read CFI data:
- Protocol: INTEL
- FLASH Size: 0x00200000
- Block[0]: Sectors: 0x08, Sector Size: 0x00002000
- Block[1]: Sectors: 0x1f, Sector Size: 0x00010000
With command= ldram 9fc00000 i write sb5101i-haxorware1rev39.bin2M ..after this i get(only 2lids)power-lid konstant ON and receive-lid permanent blinking.after this i try firmwate upgrade with 250hack_dump_telnet.bin,use black kate.
at least i write the sb5101.mod.10.2.by.fercsa.bin,also with black kate(schwarze katze).
after reebot no lid nothing..my modem dead! i can again debrick it but (only with the same way)

WHAT I DID WRONG PLEASE?

Can't connect w/2100r2 already w/ haxorware

Sun, 10 Apr 2011 19:18:10 +0000

I received a 2100r2 already w/ haxorware v1.1r39 and I have no idea how to connect. I got cable. Any help appreciated!!

How to Reboot SB5100 Remotely

Sun, 10 Apr 2011 17:04:51 +0000

I am a newbie in networking in general and a first time poster to this forum. I apologize if I have posted in the wrong group...

But I have a need to remotely reboot my SB5100 in my office for which I am the sysadmin when people report the office internet problems. Is there an easy way for me to do that? I will appreciate it if anyone can point me to where I can get started or where I can get an free or inexpensive tool for the task.

TIA

Spoofing of Modem Identification

Sun, 10 Apr 2011 14:48:42 +0000

How else is a modem model determined besides the modem description string and the version string?

For my ISP, I have

sysDescr
<>

docsDevSwCurrentVers
SB6120-1.0.1.7-SCM00-NOSH

Ever since changing the strings to the 6120 from the default 5100 I get a config like this from the server: 00xxxxxxxx-bc=1-reg=LI-ver=docsis2.0-mfg=Moto-mdl=sb6120-sb5100

It's still identifying its self as a 5100 at the same time a 6120 also. Is there a way to better spoof this or is a bug with sb5100mod?

Thanks in advance.

5100 Telnet Log Error

Sun, 10 Apr 2011 05:35:45 +0000

So I've been pushing certs just fine to 5100's and have had them tested and they work. All of a sudden no matter what cert I push to the 5100, I always seem to get this error:
<131>CABLEMODEM [DOCSIS]:<66030108> Auth Reject - Permanent Authorization Failure MAC addr: xx.xx.xx.xx.xx

The MAC addy isnt one that I pushed with the cert nor is it the MAC of my NIC. What's this error telling me? Just that the certs arent being accepted? Or that the MAC in the error is being rejected?

Thanks in advance for the help. Can't seem to figure it out

Plus I know its a good cert because I tested it on a 5101 first. Then when I pushed it to a 5100 I get that error above. Weird

Haxorware/BPI

Sat, 09 Apr 2011 23:00:32 +0000

Hi guys, I've been using an SB5101 with haxorware 1.1 Rev.39 for 1 year now; everything has worked okay for now.

I've always been using with BPI+ activated, but today I changed it to "BPI 1.0" and "BPI disabled", and to my surprise the modem connected and worked just fine.

My doubt is: should I have the BPI activated??, does it make any difference being that the modem works with or without it?

Thanks.

Pd: sorry for my english

SNMP Cert Scanning in factory mode w/the 5101

Sat, 09 Apr 2011 15:30:38 +0000

gotta figure this out, here in SoCal time warner land

more links, hints, tips, direction would be great!

???

Static IP in Haxorware Lite

Sat, 09 Apr 2011 02:46:49 +0000

Hello,

I have my 5101 online with static IP + autoserve.
It can only go online with static IP, but I hear that that's not available as a menu option in Lite and I really want to have the extra free RAM for Torrent and the like.

Say, if I were to backup my entire non-vol in DIAG, then flash LITE and restore from that nonvol, would I have my static IP configuration working?

I really want to be sure about this beforehand, as my main PC is apparently too cool to have a parallel port and the junker I brought out from the closet took 3 and a half hours to flash DIAG with a parallel cable..

Thanks in advance for the answers guys..

What are the firmware for SB5100?

Fri, 08 Apr 2011 18:24:19 +0000

Hi, all.
....with my understanding the firmware for SB5100 are Sigma and Fercsa. Is there any other firmware which I can put on SB5100? Dose Haxorware work with SB5100?
Thank you for any help.

Got SB5100 but not working anymore. LA area Timewarner.

Thu, 07 Apr 2011 08:13:30 +0000

I been using this modem for about an year.... last week (friday) internet stopped working....
I dont know what to do... here is some my logs.......

1970-01-01 00:00:49 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:00:43 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:00:43 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 01:00:20 3-Critical 0x04E33A10 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance opportunities received - T4 timeout
1970-01-01 00:59:07 3-Critical 0x04E33948 No Ranging Response received - T3 time-out
1970-01-01 00:59:06 7-Information 0x848E0006 T501.0 Acquired Downstream (693000000 Hz)........ SUCCESS
1970-01-01 00:59:06 3-Critical 0x05110008 UCD invalid or channel unusable
1970-01-01 00:59:04 3-Critical 0x04E33A10 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance opportunities received - T4 timeout
1970-01-01 00:57:50 3-Critical 0x04E33948 No Ranging Response received - T3 time-out
1970-01-01 00:57:49 7-Information 0x848E0006 T501.0 Acquired Downstream (693000000 Hz)........ SUCCESS
1970-01-01 00:57:48 3-Critical 0x05110008 UCD invalid or channel unusable
1970-01-01 00:57:46 3-Critical 0x04E33A10 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance opportunities received - T4 timeout
1970-01-01 00:56:36 3-Critical 0x04E33948 No Ranging Response received - T3 time-out
1970-01-01 00:56:35 7-Information 0x848E0006 T501.0 Acquired Downstream (687000000 Hz)........ SUCCESS
1970-01-01 00:56:35 3-Critical 0x05110008 UCD invalid or channel unusable
1970-01-01 00:56:33 3-Critical 0x04E33A10 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance opportunities received - T4 timeout
1970-01-01 00:55:20 3-Critical 0x04E33948 No Ranging Response received - T3 time-out
1970-01-01 00:55:19 7-Information 0x848E0006 T501.0 Acquired Downstream (687000000 Hz)........ SUCCESS
1970-01-01 00:55:18 3-Critical 0x05110008 UCD invalid or channel unusable
1970-01-01 00:55:16 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:54:51 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:54:51 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:54:08 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:54:08 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:54:02 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:54:01 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:54:00 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:53:50 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:53:50 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:53:49 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:53:48 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:53:29 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:52:46 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:52:45 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:52:45 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:52:45 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:52:43 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:52:43 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:52:42 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:52:42 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:52:40 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:52:40 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:52:10 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:52:10 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:52:09 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:52:09 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:52:08 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:52:03 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:51:57 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:51:56 3-Critical 0x04E33A10 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance opportunities received - T4 timeout
1970-01-01 00:50:44 3-Critical 0x04E33948 No Ranging Response received - T3 time-out
1970-01-01 00:50:42 7-Information 0x848E0006 T501.0 Acquired Downstream (705000000 Hz)........ SUCCESS
1970-01-01 00:50:42 3-Critical 0x05110008 UCD invalid or channel unusable
1970-01-01 00:50:40 3-Critical 0x04E33A10 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance opportunities received - T4 timeout
1970-01-01 00:49:26 3-Critical 0x04E33948 No Ranging Response received - T3 time-out
1970-01-01 00:49:25 7-Information 0x848E0006 T501.0 Acquired Downstream (705000000 Hz)........ SUCCESS
1970-01-01 00:49:24 3-Critical 0x05110008 UCD invalid or channel unusable
1970-01-01 00:49:22 3-Critical 0x04E33A10 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance opportunities received - T4 timeout
1970-01-01 00:48:12 3-Critical 0x04E33948 No Ranging Response received - T3 time-out
1970-01-01 00:48:11 7-Information 0x848E0006 T501.0 Acquired Downstream (699000000 Hz)........ SUCCESS
1970-01-01 00:48:11 3-Critical 0x05110008 UCD invalid or channel unusable
1970-01-01 00:48:09 3-Critical 0x04E33A10 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance opportunities received - T4 timeout
1970-01-01 00:46:56 3-Critical 0x04E33948 No Ranging Response received - T3 time-out
1970-01-01 00:46:52 7-Information 0x848E0006 T501.0 Acquired Downstream (699000000 Hz)........ SUCCESS
1970-01-01 00:46:51 3-Critical 0x05110008 UCD invalid or channel unusable
1970-01-01 00:46:49 3-Critical 0x04E33A10 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance opportunities received - T4 timeout
1970-01-01 00:45:36 3-Critical 0x04E33948 No Ranging Response received - T3 time-out
1970-01-01 00:45:35 7-Information 0x848E0006 T501.0 Acquired Downstream (693000000 Hz)........ SUCCESS
1970-01-01 00:45:35 3-Critical 0x05110008 UCD invalid or channel unusable
1970-01-01 00:45:33 3-Critical 0x04E33A10 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance opportunities received - T4 timeout
1970-01-01 00:44:22 3-Critical 0x04E33948 No Ranging Response received - T3 time-out
1970-01-01 00:44:20 7-Information 0x848E0006 T501.0 Acquired Downstream (693000000 Hz)........ SUCCESS
1970-01-01 00:44:19 3-Critical 0x05110008 UCD invalid or channel unusable
1970-01-01 00:44:16 3-Critical 0x04E33A10 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance opportunities received - T4 timeout
1970-01-01 00:43:03 3-Critical 0x04E33948 No Ranging Response received - T3 time-out
1970-01-01 00:43:01 7-Information 0x848E0006 T501.0 Acquired Downstream (687000000 Hz)........ SUCCESS
1970-01-01 00:43:00 3-Critical 0x05110008 UCD invalid or channel unusable
1970-01-01 00:42:58 3-Critical 0x04E33A10 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance opportunities received - T4 timeout
1970-01-01 00:41:48 3-Critical 0x04E33948 No Ranging Response received - T3 time-out
1970-01-01 00:41:47 7-Information 0x848E0006 T501.0 Acquired Downstream (687000000 Hz)........ SUCCESS
1970-01-01 00:41:46 3-Critical 0x05110008 UCD invalid or channel unusable
1970-01-01 00:41:44 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:41:19 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:41:19 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:40:33 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:40:33 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:40:31 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:40:31 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:40:30 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:40:29 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:40:28 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:40:18 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:40:18 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:40:17 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:40:16 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:39:57 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:39:53 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:39:53 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:39:50 3-Critical 0x0501BDC8 SYNC Timing Synchronization failure - Failed to acquire FEC framing
1970-01-01 00:39:50 3-Critical 0x0501BD64 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing

please help Thanks....

Webstar 2100 (not R2) flashing

Wed, 06 Apr 2011 01:46:02 +0000

After a thorough search of all threads, I humbly put forth my questions:

Here, Bad_Ad84 had an idea of flashing a 48-pin TSOP flash on SB5100 with webstar flash, an then desolder it and put it in the webstar 2100 (not R2).

Here's what I've done:
1. Flashed 2100r2 with haxorware via LAN, using one-click method
2. Desoldered the TSOP flash and soldered it to 2100 modem
3. It doesn't work, modem lights the power LED for 5 seconds and then dies.
4. Desoldered the TSOP flash and soldered it back to 2100r2
3. It doesn't work! Modem lights the power LED for 5 seconds and then dies. pJTAG says no flash detected.

I guess these TSOPs are sensitive to high temperatures, i probably fried them...
Or maybe i fried it during second soldering, and the reason it didn't work on 2100 modem is because the modem has bcm3348 and not 3349...

So, my questions:
- Did anyone try this?
- Can it be done?
- Did I fried it?
- Do i need to flash it on 3348 modem (sb5100) to work on webstar 2100 with that same type of CPU?

Sorry for my English,
Thanks in advance

Noob wants to clone an SB6120

Tue, 05 Apr 2011 23:57:59 +0000

I run a website, email server, and all kinds of stuff at home, and I want things to be ultra reliable when I'm gone this summer. I have a backup webserver machine ready to go (Have a remote power switchbox), and was thinking I'd like some cable modem redundancy. I've got an old Linksys Cable Modem now, but wanted to upgrade to Docsis 3.0, and was looking at the SB6120. My idea was to have two SB6120's wired up to the cable line, and to my switch. I'll power control both, keeping one on, and one off. If one fails, I switch it off, and switch the other one on (Using an old fashioned dialup modem to control my power switch box), and everything's fine. No, I don't want both on at the same time, just a replacement if the first one fails, and I'm away. Is this possible or recommended? Is there something else besides what's in flash that acts as an identifier? Will it confuse my Cable company and cause problems?

Clone my own Modem

Tue, 05 Apr 2011 20:53:14 +0000

I have a cable modem (scientific atlantic 2203) with 20mb subscription. I have a old Motorola SB5101E lying around and I was wondering if I could clone my own modem to the motorola and give the modem to my father so he can have free internet access. Is this possible??

not bonding channels

Tue, 05 Apr 2011 19:30:41 +0000

I just recently upgraded to a SB6120 after my ISP started to offer d3 50mb in my area, i set up the modem with the latest firmware and uploaded multi configs but it will only bond to 1 DS channel which is not even the channel my 5101 uses. Any ideas guys?

SOLVED: SB5101 constant reboot or online LED blinking constantly

Mon, 04 Apr 2011 03:51:02 +0000

Problem:

My SB5101 was working until couple of weeks ago when the online LED would just blink constantly, thought it was my line but I tried an Arris and a netgear CG814 and they worked fine, tried 2 other working SB5101 (one from a friend who was using it at the time) and they both experienced the same thing.

Solution:

After a few days of reading I stumbled across a post on another site, I tried it, lo and behold, my SB5101 started working again, here's the original post

heres what i did to get my 5101 v39 running in WPB, FL. i also did it on v32 .

in this order (unplug coaxial and plug directly to modem. no router):
1. goto Haxorware GUI > factory default > factory revert
2. haxorware file manager > anything there click delete. then above that click defragment.
3. now you are back to scratch.
4. goto haxorware settings > check boxes: Disable Firmware Upgrades, Force Network Access, Tftp Enforce Bypass, Disable IP Filters on startup, Ignore T4 (Station Maintenance). CLICK SAVE not reboot.
5.IMPORTANT : Address > enter in the XXX on the sticker of modem (use BPI 1.1 if you use orig XXX...OR...use BPI 1.0 if you use a different XXX....some areas you have to use bpi+bypass). CLICK SAVE not reboot and it will create certs for the modem.
6. Config File > LEAVE IT BLANK (some places you cant force config)
7. BAseline Privacy > use BPI 1.1 if you use orig XXX...OR...use BPI 1.0 if you use a different XXX
8. STEALTH > use whichever one youre supposed to be using (i use 6120 spoof because isp automatically gives me d_11_6120_c01.cm)
Vendor: Motorola
Model: SB6120
Software Version: SB6120-1.0.2.3-SCM00-NOSH (some places have higher software version...but try this one i used)
CLICK SAVE.
NOW REBOOT modem.

9. then plug in the coxaxial and wait about 2-5 minutes to let the modem cycle through...you should see that once it soes what it needs to do, you'll have all 4 solid lights and flashing orange light.

All credit goes to the original poster, just thought I should relay this to those who are having the same problem.

Unable to obtain Downstream Frequency (DS)

Sun, 03 Apr 2011 18:36:07 +0000

Guys, I have two SB5100E, one of them (unmoded) has tried to connect with coaxial cable and obtained DS and UP with no problem. However, another one, which loaded with SB5100Mod Firmware, couldn't obtain the DS.

I have already stay in front of my modem for almost 30 mins but it receive LED still blinking. What is the problem?

Thanks.

sb5100 in dallas

Sat, 02 Apr 2011 20:56:51 +0000

just few days ago my modem wouldn't connect, send/receive lights go steady and online light flashes and then start all over...
at the begin i thought its rebooting loop but i think it never connects and its unable to connect and just keep trying i have tw cable

cracked blackcat doesn't working with Windows XP?

Sat, 02 Apr 2011 16:45:16 +0000

Hi there, my computer with Windows 7 runs Cracked Blackcat (SchwarzeKatze_1.28_Cracked) with no problem. Since mine has no LPT, I installed the blackcat to two of my friends' PC to get it work but it crashed. I can not describe the problem clearly because I have forgot the errors nor have a screen capture. Anybody has same problem here? Thanks.

cant get putty to run

Sat, 02 Apr 2011 14:28:40 +0000

Dont be all over me Im a newbe,
I have a flashed sb6120 and have run filezilla and when
I try to get putty to run i get "network error: no route to host".
any ideas, thanks.

Noob wants to clone a modem

Sat, 02 Apr 2011 04:52:27 +0000

I've got a SB5100, Blackcat JTAG, and I'm going to put SB5100mod on it. I want to clone a campground cable modem (It's a crap RCA that crashes every other night, and the IT guy is SLOW to reboot it), and use it when the original modem crashes. When the original modem gets rebooted, I'll take the clone offline. Will this work? Can I do it without physical access to their crap modem?

some doubts uncap5100

Sat, 02 Apr 2011 03:52:02 +0000

Hello, I’m new here and I hope you can help me with some doubts. I have a sb5100 and I’d like to do an uncap to it, I already did the cable blackcat. This are my doubts:
1. Which of this firmwares and bootloaders do you recommend me to use?

1. SB5100.bin
2. SB5100-2.3.1.3.SCM00-NOSH.bin
3. sb5100.sigma.x2.142.by.fercsa.bin
4. sb5100.stealth.edition.b13.5.bin
5. SB5100_NOSH.bin
6. SIGMAX-BL_v2.6-LITE.bin
7. bootloader.bin

2- When I upload the new firmware and the new bootloader, what’s the next step?
I’m kinda confused, I’ve read many forums and I’ve found a tutorial that explains the process with the SIGMA-X-1.06RC4. In the next step it says I should indicate the server’s ip tftp (tftp ip) and I should also indicate the file of configuration (in the tutorial, the file is called Colombia.cfg), the problem is that I don’t know the name of the configuration file of my internet supplier (Fibertel).
I’ve tried 2 sniffers (DHCPForce v1.1.24 and Coax Thief 1.0.23) and it listes me MACs but without its files of configuration
I’ve also tried to download my file of configuration with Docsdiag and it says “Cable modem not found” it the web site of the program it says that this error can occur of the supplier is blocked or or deactivated the SNMP.

Other programs that I have are: Docsis32Pro, TFTPD32 v2.73, DiFileCPE, schawarzeKatze.

Anyway, I hope somebody can guide me or help me to solve my problem.
Sorry for my English but I’m from Argentina
Kind regards and Thanks!!

sb5101

Fri, 01 Apr 2011 15:55:19 +0000

how do I re-flash my sb5101 modem, when i tried to flash it goes so fast and nothing happened.
any help please.
thanks

5101 flashes ok but then nothing?

Fri, 01 Apr 2011 04:17:04 +0000

Hey all, been a lurker for a while but finally need some more help.

When I first recieved the unit, it was a fully functional and provisioned device from a canceled SHAW account. After doing a backup of everything(2mb, as well as individual bootloader, serial/mac, and FW), I went ahead and PARJTAGd haxorware using Tom's util as well as ShKtz(128). This is when the trouble started. I have modded a couple of 5100 s in the past all working(and still work and flash), but this one doesn't give me anything when I power it up. When plugged in, all the lights come on and then go out. With LAN pluggd in, the LAN LED blinks steadily every once in a while. I cannot ping, telnet, not access http. The arp table shows no entries.

The funny thing is that the CPU and flash both detect fine. The only thing I can think of is that I knocked a resistor off when soldering. Could someone post a hi-res image of the PCB?

haxorware cai rio de janeiro

Thu, 31 Mar 2011 20:38:12 +0000

Alguem sabe me dizer o que esta acontecendo no rio de janeiro.
o haxorware cai toda hora...apos dar o ultimo ragistration complete e volta a scanear....o arquivo de configuracao esta diferente do anterior.
ainda nao sao todas as areas que caem.

alguem me ajuda????!!!!!

5120 Factory mode

Thu, 31 Mar 2011 15:31:44 +0000

Hiya guys, I was wondering if anybody can help me out here. I have a 5120 here, that i flashed with shelled firm. (SB5120-2.19.0.12-SCM03-SH.NNDMN-HeaderRemovedByDtox) I also hooked up a serial connection and am able to access the cli no problem. But I have no idea what commands to do in order to set factory mode. I have typed Help and got a list of the commands for the main directory and also the vxshell dir. I also went into other directories and typed help for a list commands.. But I can't seem to figure it out... If anybody could help me out that would be awesome. Thanks for reading and hopefully helping. :-D

-tL

PS here is a scrcap of the main /vxshell dir. commands

modem lights just reset

Thu, 31 Mar 2011 12:50:40 +0000

hello,
i have a sb5100 just yesterday after the 4 light starts blinking, it keeps blinking and then it just like resets itself and starts all over again. it just keeps doing this. Any help is really appreciated.
thanks

need help to know

Thu, 31 Mar 2011 01:45:57 +0000

what program do you us to run flash in and do u need any hardware to use it

usb and 5100

Wed, 30 Mar 2011 12:04:06 +0000

I have this usb jtag thing and i have some 5100 and some 5101. I got the 5101 to load all the files but i cant get the 5100 to load crap/ i have status , cousoul, and memory tab and that is it. what am i missing . i read over the tut. and cant seem to find any help links when i search for "5100 tut, or IE alike.

How to get cert with new M@c

Wed, 30 Mar 2011 09:01:22 +0000

i flashed my modem with 2mb dum, then scan new m@c but it still offline because the M@c not match with cert . how can i get the cert match with my new m@c ?

sb5101 + all lights on

Wed, 30 Mar 2011 08:18:58 +0000

I recently moved to a new place down the block, same city, same zip.. etc. I had my cable hooked up and brought over my existing SB5101 and was amazed that all the lights lit up without a hassle. Too bad that I got errors I haven't seen before and the internet wasn't working...

Here is my latest log:

2011-03-30 05:49:37 Critical R004.0 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance o
2011-03-30 05:49:15 Critical I001.0 REG-RSP - invalid format or not recognized
1970-01-01 00:00:15 Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:04 Notice M571.1 Ethernet link up - ready to pass packets
2011-03-30 05:48:46 Notice M573.0 Modem Is Shutting Down and Rebooting...
2011-03-30 05:48:46 Critical Resetting the cable modem due to docsDevResetNow

From my understanding. docsDevResetNow was caused when I used the reset option. DHCP Warning is an error that can be ignored from time to time. but REG-RSP and R004.0 is something I haven't experienced before.

SBV5120 eMTA questions

Wed, 30 Mar 2011 06:46:52 +0000

I've read there's a method or so that would at least allow you to change the mac address of a sbv5120.

What I was wondering is if there is Voice attached to that same mac address, if you had the correct mac set, would you also get served the voice config and would their be even the slightest chance it would work? I'm tempted to give it a shot sometime soon as I have a couple of sbv5120's laying around.

Problem regarding my webstar and dd-wrt linksys router

Wed, 30 Mar 2011 06:18:34 +0000

hello,
Just wondering if anyone can relate to my problem,
I have a S.A EPC2100r2 and currenty using a linksys wrt54gs router with a micro dd-wrt firmware, and using a 20meg mac i acquired from a different ubr. all was fine for a month or more now i have to reboot the modem a 2-3 times a day

I was using But I can't get a connection with a virgin media netgear router wgr614v9 at all, I have flashed the poxy VM firmware to latest from netgear first (wasn't going to put a VM firmware netgear router on a hacked modem) changed the last 3 octets of the routers mac all was ok for a month.
but can't get a connection at all with the netgear ... tried spoofing the mac. no joy getting connected at all.
The linksys is a better router to use obviously, i'm thinking they black listed my netgear or it's something to do with the routers mac,
cus my linksys works it's just me having to reboot it 2-3 times a day don't have to change / spoof routers mac just power cycle it
begs the question..... why?
using haxorware Version 1.1 Revision 39
thanks

5101 and the usbjtag help

Tue, 29 Mar 2011 17:11:23 +0000

I bought this usbjtag using it on windows 7. and i cant figure out how to flash this 5101. i received a tut on cd with programs (BCUSB.RC13.5, Fram BCUSB.6.01.EJTAG and BCUSB.1.09.SPI,) i can get the usb to connect but it does not show the flash and or read tab ?> it only showes status and console, and a programing tab to program the spi/hex files? can someone help me out ?

SB5100 keeps reboot (ISP RR)

Tue, 29 Mar 2011 04:34:08 +0000

Hi all.
I bought a SB5100 with FERCSA firmware on it from a friend of mine. After one month working good, now it start to reboot. I did change the MAC from another city but still won't work. My ISP is RR. If someone know how to solve the problem then please help me.
I did try to read and search but could not find the answer. If this question shouldn't ask in here or post in the wrong place please delete it. Thanks alot.

Blinking Red light

Tue, 29 Mar 2011 03:25:29 +0000

Im in Los Angeles and I think TW is doing some kind of up date I have a DCM 315 and a DPC 2100 both worked great until today The 315's Red light just blinks usualy when that happens it just means 2 people are sharing the same mac and they are to close together solution normally was change the mac and good to go now when I change the mac red light just blinks and blinks the DPC 2100 using haxoware goes all the way to ip registration complet and starts over so its not the modems it seems to be somthing TW is doing I heard there was a new file to make these modems work again any help would be appreciated.

Não consigo flashear sb5100

Mon, 28 Mar 2011 20:01:32 +0000

a mais de um tempo, tento recuperar meu sb5100 pois ele do nada parou de responder, do nada msm, pois eu estava mexendo na internet, quando a conexão caiu e depois disso não consegui mais conectar ele, ja tentei a pag de diag no modem que é 192.168.100.1 e nada, tbm a pag 192.168.100.1:666 e tbm nada, os led ficam dois aceso, a du pc, e do power, ja tentei flashear ele diversas vezes, mas sem sucesso, uso jtag utility com cabo paralelo, mas algumas vezes dá erro de leitura no flash, erro whither, erro leitura sector 1200, e dai vai, quando tento instalar sempre da isso, o que sers que aconteceu com ele, queimou acho que não, pois nem taria ligando, acho que esqueci de habilitar o desable firmware upgrade quando o modem estava pegando, mas tem alguma coisa haver, a poeradora de tv a cabo pode mandar o firmware que queime meu modem ???

DPC2203C Help

Mon, 28 Mar 2011 20:00:52 +0000

I have a Scientific Atlanta DPC 2203C (virgin) optimum online service, my question is there a way to remove the bandwith caps for more bandwith speed? what are the requirements in doing so?

NoisyBootLoader vs Stock, whick better?

Mon, 28 Mar 2011 03:48:43 +0000

So just got a few 5101 and flashed them, went without a hitch it is a simple process really. But was wondering.. Whats the difference or advantages from a Stock BootLoader vs a Noisy one. installed 1 modem with stock and diag firm, then noisy and diag. Dont seem to notice a diff with anything.

So i guess what im asking is what does a noisy do compared to stock. Just how it labeled makes me think its better to have over stock.

Im new to Haxoware, tried to research some but didnt find anything that really fit what i was asking. Also this seemed to be most accurate place to post since its not really haxoware but the boot file im asking bout on the 5101 model.

Also on side not this is in wrong section but saves time and server space putting in 1 post, But is their any telnet commands for the 5101 on haxoware V1.1 R39 like for the 5100MoD if their is a link would be much appreciated

reboot loop after restart

Sun, 27 Mar 2011 23:09:02 +0000

Hi guys.

I am totally new to this and really need some help.

I have a sb5101 with Haxorware Rev 39 on it. Haxorware was installed on the modem when I bought it so I don’t have the cable to install any other firmware on it (but I can follow instructions to make one if it is needed to fix my internet).

So I have had internet for about 4 months but last night I was having issues with my Xbox so I restarted the modem (big mistake) and now my modem is stuck in some kind of reboot loop. Apparently my ISP has implemented some new security measures and simply changing mac does not work anymore.... I think it has something to do with DOCSIS 3.0 or certificates or I might be totally on the wrong track. Now I know that many people just say keep researching but I have simply hit the wall on this one since no one is posting relevant info in the forums on this topic (but hint that there is a solution) ... I'm technical person but I don't mess with this kind of things so I really need some help in figuring this out.

So please please someone post more info or send me a pm if posting is not allowed. I really don't know what to do if I don't get some help.

I appreciate any help I can get

Also I live in Dallas if that helps

How to TELNET into your modem

Sun, 27 Mar 2011 22:49:00 +0000

How to TELNET into your modem.

I did not write this, the credit goes to DREWMERC @ Haxorware Forums. It was such a well written document, I felt it should be posted here.

Again, this is what you should use to post "Logs" as to issues with your modem.

Before you start, download and install putty:

Code: Get Putty here

http://the.earth.li/...t/x86/putty.exe

Method 1 is preferred in all cases, method 2 looks worse than it is lol.

Method 1) Using MAX232

Remove power from the modemConnect your MAX232 adapter to the modem header and the PC. This guide assumes you're using

COM1.

Open Putty. Click the logging section of the settings panel. Select the following options:

Session logging: All session output
Click 'browse' and browse to your desktop folder.
Filename: putty.txt
'Always overwrite it'
Untick 'flush log file frequently'

Click back onto the 'session' section of the settings panel:

Connection type: Serial
Serial line: COM1
Speed: 115200
Close window on exit: Never

Click 'open', then plug the power into the modem.
You should see the boot process and connection attempt appear.

Wait for about 20s after the connection has reached the failure point, then close putty and it'll save the txt log as

putty.txt on your desktop.

Method 2) Using ethernet or USB (USB requires that USB drivers are correctly installed)

Remove power from the modem.

Set manual NIC IP 192.168.100.10.

Open Putty. Click the 'session' section of the settings panel:

Connection type: Telnet
Host Name: 192.168.100.1
Port: 23
Close window on exit: Never

Power up the modem. Wait 15 seconds, then click 'open' in putty.
Enter username and password, press enter.

Ignore any crap coming up in the window, it may look like you can't type but you can. May help if you just don't look

at the screen

Type this, pressing enter at the end of each line:

cd doc
up_dis

cd /
cd n/b
auto_console 1
write

Note: The lines above are correct for modems based on the BCM3349 (A250/A255/A256/SB5101/Webstar 2100). If you're

using a BCM3348 modem (A200/SB5100) the line 'cd n/b' changes to 'cd n/c'.

This tells the modem to halt at the console. Close putty and reboot modem using power cable.

When you reboot it, it won't try to connect at first, so you have time to set putty to log all console output to txt

before connecting.

Open Putty. Click the logging section of the settings panel. Select the following options:

Session logging: All session output
Click 'browse' and browse to your desktop folder.
Filename: putty.txt
'Always overwrite it'
Untick 'flush log file frequently'

Click back onto the 'session' section of the settings panel:

Connection type: Telnet
Host Name: 192.168.100.1
Port: 23
Close window on exit: Never

Click 'open', enter username and password and press enter. Type 'run' and press enter. The modem will try to connect.

Wait for about 20s after the connection has reached the failure point, then close putty and it'll save the txt log as

putty.txt on your desktop.

Once you've finished you'll need to set auto_console back to 0 in telnet, or you'll have to type 'run' every time you

reboot modem.

RCA DCM315 Help

Sun, 27 Mar 2011 18:58:09 +0000

I brought a custom modem online about a year ago its a RCA DCM315 china made, (I'm perrty new to all this btw)it stopped working on day, can someone provided some link or whats the best flash frimware, programs i need for this modem...and some instuctions please thank you!!

SB5101U and Haxorware

Sat, 26 Mar 2011 23:58:37 +0000

Alright, so I've had some issues with BPI+ on Haxorware + SB5101U, and I searched a little and saw that other people had similar issues. I was wondering if anyone else can let me know whether this issue is actually there, or is there something screwed up.

In my logs I do get the HEAP oversized error, and a TLV so definitely either Haxorware isn't compatible or certs are bad, I don't think I made any mistake backing them up though, so it *should* be haxorware then.

Please share your experiences!!

Thanks so much!

TCM390: can't write

Sat, 26 Mar 2011 23:32:06 +0000

Hello,
TCM390 is supported by haxorware, but when i try to hit 'p' at startup, there is no result (my ttl cable on uart is good).
How do you unlock the write in tcm390 ?
Thanks

SIGMA

Sat, 26 Mar 2011 11:57:38 +0000

ANY BODY KNOW ANYTHING ABOUT Sigma X Frimware for SB5101's TUNDRA X3

Attached Thumbnails

How to change mac address WebSTAR EPC2100R2 from commandline or SNMP?

Fri, 25 Mar 2011 01:30:29 +0000

How to change mac address WebSTAR EPC2100R2 from commandline or SNMP?

Name: WebSTAR EPC2100R2
Hardware Version: 2.1
Software Version: v2.0.2r1256-060303

SB5101 crashes

Thu, 24 Mar 2011 19:19:34 +0000

OK lets start with the overview, using a SB5101 with Haxorware V1.1 R39 DIAG with 32MB of RAM. I have used this modem for years with no issues. I flashed a new 2MB image now after about 48 of running the GUI will crash and the telnet log will fill up with "warning: eth_recv out of MBUFs" but the modem was still running with no speed loss or connection issues. So I let it run to see what would happen. Once the DHCP renewed then I get a new error message "DEBUG: ... retry sockets" the modem ran for about 6 hours after the DHCP renew then crashed. I assume it's just related to the image I flashed as I have other images and they do not have this issue. Is this just a bad image? or is something else going on?

I didn't post in my ISP (charter) section as I don't think this is ISP issue. Once it rebooted it's back online.

Here the serial output:

warning: eth_recv out of MBUFs
warning: eth_recv out of MBUFs
DHCPc: T1 expired; time to renew lease with client id htype=1, value=xx:xx:xx:xx:xx:xx
DHCPc: Sending Request packet; client id htype=1, value=xx:xx:xx:xx:xx:xx
DHCPc: Received an Ack from DHCP server xx:xx:xx:xx:xx:xx (10.10.10.10); lease client id htype=1, value=xx:xx:xx:xx:xx:xx
ConfigureLease: Nothing changed in the lease; bailing early.
ARPing for default GW IP = 10.10.10.10
DEBUG: Out of sockets - waiting
Logging event: DHCP RENEW WARNING - Field invalid in response
DEBUG: ... retry sockets
DEBUG: Out of sockets - waiting
DEBUG: ... retry sockets
DEBUG: Out of sockets - waiting
DEBUG: ... retry sockets
DEBUG: Out of sockets - waiting
DEBUG: ... retry sockets
DEBUG: Out of sockets - waiting
DEBUG: ... retry sockets
DEBUG: Out of sockets - waiting
warning: eth_recv out of MBUFs
warning: eth_recv out of MBUFs
DEBUG: ... retry sockets
DEBUG: Out of sockets - waiting
DEBUG: ... retry sockets
DEBUG: Out of sockets - waiting
DEBUG: ... retry sockets
DEBUG: Out of sockets - waiting
DEBUG: ... retry sockets
DEBUG: Out of sockets - waiting
DEBUG: ... retry sockets
0x1232fcd2 [DHCP Client Thread] BcmEcosSocket::BcmEcosSocket: ERROR - SOCKET_ERROR: 355
0x1232fcdc [DHCP Client Thread] BcmEcosSocket::BcmEcosSocket: ERROR - SOCKET_ERROR: 355
ERROR - BcmSocketFactory::NewSocket - socket descriptor is NULL!

******************** CRASH ********************

Exception code/type: 2 / TLB (load/fetch)

r0/zero=00000000 r1/at =fffffffe r2/v0 =00000000 r3/v1 =00000002
r4/a0 =80440000 r5/a1 =00000000 r6/a2 =00000038 r7/a3 =81ac0954
r8/t0 =80421824 r9/t1 =80420000 r10/t2 =80306534 r11/t3 =00000000
r12/t4 =00000000 r13/t5 =80000000 r14/t6 =00000000 r15/t7 =00000000
r16/s0 =81ba5ad8 r17/s1 =81ba556c r18/s2 =80362a48 r19/s3 =8051af24
r20/s4 =00000001 r21/s5 =81ba90c0 r22/s6 =81ba90c8 r23/s7 =803a0000
r24/t8 =00000000 r25/t9 =00000000 r26/k0 =80490318 r27/k1 =00000001
r28/gp =80458fa0 r29/sp =81ba9070 r30/fp =81ba91a0 r31/ra =800258a8

PC : 0x800258a8 error addr: 0x00000000
cause: 0x00000008 status: 0x1000ff03

BCM interrupt enable: ffffffff, status: 00000011
Instruction at PC: 0x8c430000

entry 800257b0 called from 800ea7b8
entry 800e9d48 called from 800efeac
entry 800efd78 called from 801dbe10
entry 801dbd08 called from 80242f64
entry 80242eb8 called from 802fb2e4
entry 802fb2ac called from 802fb2a4
entry 802fb2ac Return address (00000000) invalid or not found. Trace stops.

Current thread = 81ba9328
Current time is 03/24/2011 06:21:48

>>> YIKES... looks like you may have a problem! <<<

r0/zero=00000000 r1/at =fffffffe r2/v0 =00000000 r3/v1 =00000002
r4/a0 =80440000 r5/a1 =00000000 r6/a2 =00000038 r7/a3 =81ac0954
r8/t0 =80421824 r9/t1 =80420000 r10/t2 =80306534 r11/t3 =00000000
r12/t4 =00000000 r13/t5 =80000000 r14/t6 =00000000 r15/t7 =00000000
r16/s0 =81ba5ad8 r17/s1 =81ba556c r18/s2 =80362a48 r19/s3 =8051af24
r20/s4 =00000001 r21/s5 =81ba90c0 r22/s6 =81ba90c8 r23/s7 =803a0000
r24/t8 =00000000 r25/t9 =00000000 r26/k0 =80490318 r27/k1 =00000001
r28/gp =80458fa0 r29/sp =81ba9070 r30/fp =81ba91a0 r31/ra =800258a8

PC : 0x800258a8 error addr: 0x00000000
cause: 0x00000008 status: 0x1000ff03

BCM interrupt enable: ffffffff, status: 00000000
Instruction at PC: 0x8c430000

entry 800257b0 called from 800ea7b8
entry 800e9d48 called from 800efeac
entry 800efd78 called from 801dbe10
entry 801dbd08 called from 80242f64
entry 80242eb8 called from 802fb2e4
entry 802fb2ac called from 802fb2a4
entry 802fb2ac Return address (00000000) invalid. Trace stops.

Task: DHCP Client Thread
---------------------------------------------------
ID: 0x0020
Handle: 0x81ba9328
Set Priority: 23
Current Priority: 23
State: SUSP
Stack Base: 0x81ba61e0
Stack Size: 12288 bytes
Stack Used: 2448 bytes
Stack Stack Stack
TaskId TaskName Priority State Size Used Margin
---------- -------------------------------- -------- -------- -------- -------- --------
0x805131d0 Network alarm support 6 SLEEP 2256 1872 384
0x804924c8 Network support 7 SLEEP 8192 2160 6032
0x80513f20 pthread.00000800 15 EXIT 7852 1104 6748
0x8048a1c8 tStartup 18 SLEEP 12288 5208 7080
0x8054b9ac Rajko HttpD 23 SLEEP 3280 3236 44
0x81ff579c NonVol Device Async Helper 25 SLEEP 3072 1008 2064
0x81febc7c Motorola Standby Switch Thread 23 SLEEP 4096 1432 2664
0x81fea984 Motorola Vendor Ctl Thread 23 SLEEP 4096 512 3584
0x81ff64e8 WDOG 17 RUN 5120 1824 3296
0x81fe8940 BFC Ping Thread 29 SLEEP 6144 484 5660
0x81fe8704 ConsoleThread 27 SLEEP 36864 2036 34828
0x81fc6fe0 CfgVB Thread 23 SLEEP 4096 2636 1460
0x81fc5a1c DHCM 25 SLEEP 16384 512 15872
0x81fbf84c Event Log Thread 25 SLEEP 8192 2080 6112
0x81f9b7a8 Time Of Day Thread 23 SLEEP 6144 1668 4476
0x81f9bc18 CmDocsisIpThread 23 SLEEP 8192 2188 6004
0x81f94e14 CmBpiManagerThd 25 SLEEP 8192 2768 5424
0x81f912a8 CmDsxHelper 23 SLEEP 8192 1848 6344
0x81fad1dc CmDocsisCtlThread 21 SLEEP 8192 5988 2204
0x81f8a188 Scan Downstream Thread 23 SLEEP 4096 1736 2360
0x81f86f64 RateShaping Thread 23 SLEEP 4096 1480 2616
0x81ff65e0 CMHL 23 SLEEP 4500 1556 2944
0x81ff66d8 CMHH 21 SLEEP 4500 1124 3376
0x81ff67d0 ENRX 23 SLEEP 4500 2200 2300
0x81ff68c8 ENTX 23 SLEEP 4500 1140 3360
0x81ff69c0 ELNK 23 SLEEP 4500 772 3728
0x81ff6ab8 USTX 23 SLEEP 4500 344 4156
0x81ff6bb0 USRX 23 SLEEP 4500 376 4124
0x81ff6ca8 UBCT 19 SLEEP 4500 360 4140
0x81ff6da0 USRN 23 SLEEP 4500 344 4156
0x81ba9328 DHCP Client Thread 23 SUSP 12288 2448 9840
0x81ff6e98 IpHalIst 23 SLEEP 4500 1256 3244
0x81ba348c CmPropaneCtlThread 23 SLEEP 8192 1632 6560
0x81ba0830 IGMP Thread 23 SLEEP 4096 1580 2516
0x81b9ef34 NetToMedia Thread 23 SLEEP 4096 1652 2444
0x81b9b14c Trap Thread 23 SLEEP 16384 512 15872
0x81ff6030 SNMP Thread 23 SUSP 20480 5384 15096
0x81ad6130 DHCP Server Thread 23 SLEEP 8192 1528 6664
0x8048f818 Idle Thread 31 RUN 2048 1064 984
Done!
CM>
Piggyback LZMA decompression 1.0.2

Detected LZMA compressed image... decompressing...
Target Address: 0x80010000
..................
Decompressed length: 4719004
eCos - hal_diag_init
Init device '/dev/ttydiag'
Init tty channel: 80450d30
Init device '/dev/tty0'
Init tty channel: 80450d50
Init device '/dev/haldiag'
HAL/diag SERIAL init
Init device '/dev/ser0'
BCM 33XX SERIAL init - dev: 0.2
Set output buffer - buf: 0x8048e6e0 len: 2048
Set input buffer - buf: 0x8048eee0 len: 2048
BCM 33XX SERIAL config
Detected 32M of RAM
0x0000000a [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers: (BFC Target) Configuring/Loading Flash driver...
0x00000014 [tStartup] FlashDeviceDriver::FlashDriverInit: (Flash Driver C API) WARNING - Failed to detect flash device 0 using SPI!
Haxorware sees that storage drivers have initialized OK. Continuing.(BFC Target) Loading ProgramStore driver...

0x0000001e [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers: (BFC Target) Loading BootloaderStore driver...
0x00000028 [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers: (BFC Target) Loading NonVol driver...
0x00000028 [tStartup] BcmBfcStdEmbeddedTarget::InitStorageDrivers: (BFC Target) Storage drivers initialized successfully.
0x00000032 [tStartup] BcmBfcStdEmbeddedTarget::InitDeviceAbstractions: (BFC Target) Creating singletons for ProgramStore/BootloaderStore/NonVol devices...
Detecting the next image number that we will store to by default...
0x3c Computing CRC32 over image2 to ensure that it is valid...
ProgramStoreDeviceDriver::ProgramStoreDriverIsHeaderValid: WARNING - ProgramStore header HCS check failed!
ProgramStoreDeviceDriver::ProgramStoreDriverIsImageValid: WARNING - Header isn't valid!
0x3c Done computing CRC32!
By default, we will dload to image number 2!

0x00000046 [tStartup] BcmBfcStdEmbeddedTarget::InitDeviceAbstractions: (BFC Target) Device abstraction singletons created successfully.

Kinda lost.. i need help.

Thu, 24 Mar 2011 10:15:59 +0000

Alright well the situation is pretty much this. i got my SB5105 from a friend and ive been toying around with it. it has the Jtag connector an Haxorware 39 but it won't connect. it gets the up and down but won't go online. ive been reading about just re flashing the 2mb flash but like i said i didn't modify it so i don't have the original backup. what should i do? is there a file i can download to put it back to stock and try all over again? thanks for your help

NO LED after flashing Haxorware

Thu, 24 Mar 2011 04:02:43 +0000

So, this is very odd. I have a SB5101 with intel flash.

I use a pJTAG with blackcat patched for SB5101

I use windows XP 32bit.

I can flash my own 2mb dump without an issue and modem works fine.

However, I flash the modem with haxorware 1.39 LITE with the SB5100 tab ( then flash firmware), and the modem powers on with no LED. the modem just won't work.

Then, i can simply flash it back with my 2mb dump and modem will be fine again.

i tried this with jtag Utility and follow all the commands, but same result.

any suggestion?

Motorola SB5100 not working

Wed, 23 Mar 2011 22:04:16 +0000

So I have my sb5100 i got a few months back and i've been using with no problems at my anterior location, i moved a few miles to another place and my modem doesn't work i dnt even get a Default Gateway or nothing when i go to cmd and type the usual ipconfig I took the modem to the place I used to live where it used to work and it still worked properly.
Could this be a need of a need mac address? or what is it? I havent tried anything since i dont want to mess it up.
any tips or ideas are welcome/
thanks in advance!

Haxorware noob questio

Wed, 23 Mar 2011 14:13:30 +0000

Hi just did my first reflash and apparently everything went well, only two questions/problems
1- Had no bootloader and couldn't find one so went straight to flashing ( Dont know if Haxorware uses Bootloader but seeing that in other articles they talk about sigma x2 and bootloader I assume Haxorware use the Bootloader to please correct me if im wrong)
2- Cant enter the Haxorware page entering the 192.168.100.x and do to that cant change the mac

I know its probably covered somewhere but I have looked and read everything for hours and have not found the answer and thats why I decided to start the topic
Thanks

Restoring sb6120 to factory

Wed, 23 Mar 2011 08:28:06 +0000

Hey guys, just wondering if you can point me in the right direction. I have a friend who's giving me his 6120 and i'm planning to use sub it. His modem currently has alpha 1.1 with original mac on it right now. From what I know, he mentioned that the modem was also banned on his node. He also does not have the original dump. So how do I go about restoring back to factory so I can sub it with cc?

sb5101

Tue, 22 Mar 2011 23:20:13 +0000

Boston area. sb5101, sb5100 online light flashing. I tried a couple of things no results. it's been flashing for about 2 weeks.
if someone can give a hint it will be great. or PM me please ----thanks

help me please motorola sb5100

Tue, 22 Mar 2011 17:49:30 +0000

hello
the reason for this post is to ask your help with. cfg file and look for mac Do Not know how to speed up my internet as fast as possible right now i have the sb5100 modem'm from mexico I hope your help thanks!
sorry if this is not going to qui'm new to the forum and if I could provide the download link and they would appreciate more.

sb5100 won't get online

Tue, 22 Mar 2011 16:34:15 +0000

im trying to get my sb5100 back online with valid mac but it keeps restarting im using sb5100mod v1.0.4 beta and i live in boston ma i was told to use sigma x2 with bpi+hack but it still does the samething

problem with net-snmp and .bat file

Tue, 22 Mar 2011 01:37:41 +0000

problem solved. i was using wrong version of net-snmp

================================================
i'm trying to load certs via .bat file

i have net snmp installed, i put modem into factory mode, but every time i run .bat file it looks like it wants to run, but i get a window pop up says snmp has encountered a problem and do i want to send a report?

anyone have this problem, what's the solution?

5101 differance question

Tue, 22 Mar 2011 01:33:28 +0000

what other 5101 use the jtag 10 pin connectors I know the 5101U does not and is more work than i want to do. so if anyone can tell me if the 5101E and 5101i will have a 10pin jtag port i can use i thank you ahead of time.

Motorola SB6121 Bare Metal Pictures - As Requested

Mon, 21 Mar 2011 23:09:40 +0000

Sorry, I didn't really have ideal lighting but I think these should be decent. I hope they help the cause.

Thanks,
Mike

Edit: Attached .zip archive for those wanting to download.

Attached Thumbnails

Attached Files

SB6121.zip 30.22MB 45 downloads

2bricks in 3days(no im not building a house)

Mon, 21 Mar 2011 00:09:46 +0000

ive flashed my sb5100i(intel flash) with sb5100mod a while ago worked just fine.
one day decided to mess with the swversion setting and i set it to sb5101 found the string here in the forums.
and then boom modem restarts lights on after 5sec every light is off, modem dead.
so i bought a new one this time its an sb5100E with the crappy st flash, soldered in the pins connected into my comp, blackcat, flashing sb5100mod...boom brick im like wtf?!
so i figured i go try another comp, plugged in my new sb5100e into my old comp, blackcat,toms jtag utility recognises the cpu,flash just fine. however i cant flash the bootloader it just wouldnt let me write the 0x0(blackcat) or 9fc00000(jtag utility) tried with peek+poke ldram boot+program boot,ldram 9fc00000+program 9fc00000 200000,blackcat bootloader flash.with or without data verification. i can flash the firmware just fine, why not the bootloader?my cable is fine i made it myself, my soldering is fine and my comp is must be fine cuz i flashed my old sb5100i with this comp.there are 2 things that i didnt try 1. hard reset(cant find the tut for the ST flash) 2. usbjtag(im really poor cant afford more than 10$) any help/tips would be appreciated.

reading the Modem

Sun, 20 Mar 2011 20:38:05 +0000

I just purchased a SB5101 and I'm trying to read the software in my Modem.I just hooked the cable up to the computer and nothing happens. Is there software I need to link to the modem ? I'm a newbee and I'm trying to connect to road runner ? Thanks zzyzxxx

Haxorware 1.1 rev39 - SB5101 - HELP PLEASE!!

Sat, 19 Mar 2011 00:20:30 +0000

Hi, i kind of a noob in terms of modems but i use to have a D-link dcm202 and i bought an Motorola SB5101 with the haxorware 1.1 rev 39 to use with my cable company, so i chanced the mac and serial number and got to use the internet with np but later on i tryed to use the config file resource and use a mod config file, and it didnt work, so i also try to use at the same time the options Tffp enforce bypass, disable ip filters on startup and ignore T1, T2, T3 and T4, so then i got to connect but i couldn't open any page, like the internet was really REALLY slow, but the ping test its all normal, so i put all the configs back to normal, but i still got that problem with the speed, i tryed other modem, other pc, have tested the cables and all, called the cable company who dont look to know about any problem, i still got normal ip, and my cable tv its working normal, do someone can share some light of knowledge and guide me in this terrible situation? could the company at some level blocked the mac address on they servers?
Thx in advanced for anyone who helps.

5101 Just a little help!!

Thu, 17 Mar 2011 00:02:51 +0000

I finally got my modem into haxoware but i cant connect to the internet.. I have all my lights and it
shows that the modem is operational finally but no internet!!! Please just a hint and i will appreciate it...

I can't get my babies back online :-(

Wed, 16 Mar 2011 21:59:30 +0000

I know I'm on the new security area and someone say I need valid cert + mac , I don't know if that's true, or if that the only way to go back in the game, if some know tue answer please le me know (pm me or type here)....

Thank you

I'm been testing everything I read and nothing seems to be working for me, I even re install haxoware v39 with a dumb bin and still nothing, this is getting really frustrated, and for those that only know to answer read , I'm reading a lot but not good results , so please pm if you can share some good info with me. Thanks

Help SB 5100 setup

Wed, 16 Mar 2011 02:33:27 +0000

Hello

Any one can help me how to setup sb5100

Thx

clone sb5101U to sb5101

Tue, 15 Mar 2011 02:11:41 +0000

Okay guys i wanna know if i can clone sb5101U Motorola modem to sb5101??

If you 'ruined' your modem....

Mon, 14 Mar 2011 16:43:54 +0000

so i had two identical UBEEs, one i ruined firmware,certs, everything. the other was perfect (with alpha already loaded). and i needed a way to restore my ruined one (so ruined, when the lights would boot up, it would look like night rider)

after about a night of working and sleeping on it, i woke up today and got it.

so for those who have 'bricked' their UBEEs and cant get them to start, here are two 'dump' files, one to replace IMAGE1 and the other to be written to IMAGE2.

(btw, i had tried the 6120 dump, but didnt work, still had same light blinking crazyness issue)

Preloaded with alpha (cuz, well, that's what i had)

btw, ubf1 does not boot, you must restore 1 then restore 2 and then tell the modem to boot and it will.

Enjoy hope this can benefit someone.

Attached Files

image2.bin 4.06MB 21 downloads
image1.bin 3.91MB 18 downloads

Which Jtag

Mon, 14 Mar 2011 05:28:55 +0000

I am going to purchase a jtag nt, already got a test clip. Got a 6120 im trying to toy around with but i also want the option of doing lower grade modems as well mainly dpc2100 and 5101-5120 modems.

I went to the usbjtag website but the nt there has a straight plug on it *i'm a noob to this* i was trying to avoid soldering with getting the test clip but now i don't know if i am buying the write jtag as its 60 dollars not going to order it and have it show up being the wrong thing. I saw most pics of test clips with several cords coming out of the top of the clip not a full plug like what comes with the jtag nt. Am i getting the wrong thing or can i put attach the plug on the end of the jtag nt to the test clip, hook it on the spi chip and be good to go in detecting and flashing?

*edit* stupid question on now. Answered it myself, bought the jtagnt and a octo cable. simple enough sorry for the stupidness

help cant upload

Sun, 13 Mar 2011 23:26:34 +0000

Hi guys i have a Motorola 5101 and it was working fine but few days ago the modem doesn't upload, i put a working mac address but the online light blinks and never upload, i keep changing mac address but it doesn't work.
what do you guys recommend

HELP

Sun, 13 Mar 2011 20:08:13 +0000

Hi i have quest, now with this new security , let say if i have all info the friend moderm some provider all be able to clone his modem , and put working in my house or not the clone not work no more with new security thank you for any help

get certs from full 5120 2mb image file

Sun, 13 Mar 2011 16:58:27 +0000

i have 5100/5101 full 2MB image file and i was able to export/get certs from them fine by

ldram 9fc00000
save cfg
cmnonexp.exe

but how do i export/get certs from full 5120 2mb image file

flash problem this my 3rd modem

Sun, 13 Mar 2011 04:57:20 +0000

hi all this is my 3rd modem brick 2 already all lights off plz help me T_T

detect (should tell you what kind of cpu and flash chip is in your modem)
ldram boot (optional for haxorware but required for sb5100, select the bootloader bin file)

ldram image0 (select your firmware, Haxorware for the 5101, SB5100Mod for the SB5100x)
this step select the the 2mb dump.bin or the SB5100MoD.1.0.4.Beta.bin?

ldram image1 (SB5100Mod for SB5100 ONLY, SB5101 with Haxorware SKIP THIS STEP)
i got little confuse in this 2 steps,i duno which file should i select
the 2mb dump.bin or the SB5100MoD.1.0.4.Beta.bin?
thank you for replying appriciated

program boot
program image0
program image1

DPC2100R2 with lights out

Sun, 13 Mar 2011 03:51:40 +0000

I got two DPC2100R2 modems with the 1st light going on for a second upon power up than they all shut off until you repowering it on again.

I'm trying to PJTAG with a custom webstar cable I just ordered using TOM's utility 1.3 but detect is showing a connection failure. I matched up all the pins and verified they are correct.

Are these things gone or does anyone know something I can use to restart them?

Thanks

Is there a more current Haxorware Authorized Reseller list?

Sun, 13 Mar 2011 01:03:30 +0000

I am looking at a SB6120 to add to my modem list. (currently I only have a sb5120)
Anyway, there is a premod on eBay I was looking at.
The guy has the Haxorware .img and is on the Haxorware Authorized Reseller list. (bohemia1984)
However, the page has not been updated since 11/12/2010 and this sellers registration expires on 12/01/10.
So I have no way of knowing if this guy updated his reseller license and is still authorized to sell them or not.
I am sorry if this is in the wrong section, but I didn't know where else to pose this question.
Can anyone tell me if I am OK buying from this guy?
(I want to make sure I am doing it right and supporting the people that do the hard work)
Thanks!

R.C.A. DCM 315 fix?

Sat, 12 Mar 2011 19:41:27 +0000

I currently Have a modded Comcast R.C.A. DCM 315 and I want to be able to change the HFC MAC &
CPE USB MAC Address but the firmware that it has doesn't let me, any way I could change it?

This are my modem specs.

R.C.A. DCM 315
Motorola firmware
Software Version: SB5100-2.3.2.5-SCM01-NOSH
Hardware Version: 1
MIB Version: II
GUI Version: 1.0
VxWorks Version: 5.4

I appreciate the help.

comcast and the 5100 help please

Fri, 11 Mar 2011 18:31:14 +0000

ok i got my 5100 set all green lights and activity lights working but i cant connect to internet. i changed the DNS to 4221 and 4222 did not work so i tried 4224 and 4226 still nothing. i used sb5100.sigma.x2.142.by.fercsa and SIGMAX-BL_v2.6-LITE
1. Disable firmware updates (enabled)
2. Reboot Disabler (enabled)
3. Force Network Access (tried both)
4. SNMP Port 161

my subscribed modem works great can anyone help. i used to use haxaware but i read that u should not use it.

[Manual] Get a certificate for wireless SBG900 for the new DOCSIS 2.0 by dexter_one

Fri, 11 Mar 2011 05:06:33 +0000

Sorry for the translation, my language is Spanish and I did write to the Google translator.

Greetings to the whole community SBHacker my nickname is dexter_one and I like to share this tutorial I did with you. Have if this tutorial achievement earn access to the VIP

With Friends sbhacker.net (English) and sbhacker.net (Spanish) I learned this and it is clear that this is for purely educational, I am not responsible for any use that may be given to this information.

For that we need:
*1 modem SBG900 para experimentar * 1 modem SBG900 to experience
*1 Modem SBG900 para clonar * 1 to clone SBG900 Modem
*Software InSSIDer o netstumbler * Software or netstumbler InSSIDer

InSSIDer- http://www.metageek.net/products/inssider/
Netstumbler – http://www.netstumbler.com/downloads/

*Software Clonacertis – edit: dw5304 removed link to deposit files..
* Lots of patience

The way in which we will obtain the certificate for our dear ISP with DOCSIS 2.0 will consist of certificates borrow another cable modem.

NOTE: As the certificates must be used in a different node with respect to which they were obtained, it is recommended to do this with a laptop.

1 .- Procedure to install some software to scan WiFi networks nearby. In which case they have Windows XP I recommend netstumbler or if you have Windows Vista and Seven and I recommend that netstumbler InSSIDer not work in Windows XP.

2 .- also will install the software clonacertis.

3 .- After installing both software will proceed to launch the software InSSIDer (because I use Windows 7) to scan the wireless networks around us, as shown in the image:

It is observed that the Vendor is not recognized as Motorola but as Gemtek Technology, with this and know that this is a SBG900 and best of all, it has no security enabled or that the network is open.
In such case that the network is closed with WEP can search google how to break the WEP, there are thousands of manuals in this regard.

4 .- If the network is open proceed to connect or if it is closed ... then open it and connect. To verify that we have connected properly proceed to go to our favorite browser and type: 192.168.100.1
If you see an image like the one shown below, we have found a SBG900

5 .- proceed to run the software clonacertis as shown in the image:

6 .- We will click the Save Certificate in PC

7 .- We hope to restart the SBG900 and see the progress of the software.

8 .- We ask you to name the certificate store and ready.

9 .- If there is no problem whatsoever until the final clonacertis will tell you that you have saved properly certified.

In this step we will have the SBG900 of cloned neighbors, ready to upload to a SBG900 that we have inactive.

NOTE: it is noteworthy that to obtain the certificates must be obtained from a location other than where will you run your SBG900.
In short get a certificate from a NODE different from yours, because if you put the certificate on the same node will NEVER work because restarting the SBG900 payment.

10 .- Once we have our certificates in our PC, we will charge our SBG900

11 .- This clonacertis begin again and we will click the option to load certificates Modem.

12 .- Again we restart our SBG900

13 .- If all goes well we will be asked to insert the certificate path.

14 .- Select the certificate and let the clonacertis work.

15 .- If there is a mistake to clonacertis will tell you loaded the certificate without problem.

16 .- Ready we will have a certificate from a modem 100% legal.

SiGMa X2 Build 142

Thu, 10 Mar 2011 17:46:39 +0000

Hi All,
I m new here. I just buy SB5100 with SiGMa X2 build 142
I go to 192.168.100.1

The online light never solid I could not do any thing else .
I don't know what to do
Please anyone teach me more detail how to do to get this modem online ?
Thanks

SB5101 CLONING

Thu, 10 Mar 2011 14:14:38 +0000

CAN I CLONE A SB5101N TO A SB 5101? I HAVE A SB5101 AND IT DOESN'T WORK AT HOME. BUT IF I TAKE IT TO MY FRIENDS IT WORKS FINE?

sb5100 got screwed up

Thu, 10 Mar 2011 02:32:57 +0000

It was working just fine, but I was trying out a bunch of different config macs to see what kind of speeds they're getting. In the middle of that, I got all solid lights except the power light was blinking. Since then, the sb5100 web gui and sb5100mod web gui became inaccessible even after reboots and pulling out the coaxial cable. So, I go into the telnet session and started messing around. I used some kind of reset command (stupid me...) and since that happened the modem just stopped responding to anything. I proceed to reflash sb5100mod and sigmax bootloader with blackcat and all lights stay dark. Modem unresponsive. I use jtag utility with the sb5100 command to flash. Power light blinks, PC activity light works, dhcp does not work, no web gui. I tried doing both methods again using SB5100E-2.3.1.8-SCM00-NOSH.bin as flash and motorola_2.bin as bootloader and I get the same results. What can I do?

sb5101E haxorware 1.1 rev39 does not find DS-frequ

Wed, 09 Mar 2011 18:12:24 +0000

hi all,

need your help. my sb5101e scans the whole frequencyband but does not find the downstream frequ.
I have configuered the modem per webgui to Annex A (eurodocsis) an european frequencyplan...
I also have configured it by console via telnet...

but when i look to the WEBGUI status>signal> Downstream it shows:

Downstream
Frequency 465 MHz
Status Not synced
Annex DOCSIS <<<<<<<<<<<<<<<<<<<<-----
Modulation Unknown
Receive Power 36.7 dBmV
Signal to Noise ratio 22.0 dB

So there the modem is still set to DOCSIS and not EURODOCSIS....how can i switch my SB5101E to ERUODOCSIS Mode??

Did the console telnet commands changed in haxorware 1.1r39?? there is no "halif" directory to set annex A (=1)?? where can i find?
Does anyone has the new commands?

Which tuner do i have to use for SB5101E??

PLEase Help
THX 2 ALL

Telnet command

Wed, 09 Mar 2011 16:52:47 +0000

Hello, I just flashed with haxorware1.1 rev39.. Does anybody know the telnet command to disable factory mode,,snmp filters and all the other commands ,,thank you

Motorola SB5101U- How-To flash with BlackCatusb v1.7

Wed, 09 Mar 2011 02:47:03 +0000

How-To flashing Haxorware with BlackCatusb v1.7
this is my first tutorial....so please be kind...lol

things needed:

blackcatusb v1.7 (program to spi mode)
sb5101U script (thanks to D3m0n @ blackcatusb.net) SB5101U.rar 1.18K 92 downloads
haxorware haxorware11rev39-DIAG.rar 1.12MB 82 downloads
some soldering skills or a test clip
an external 5v power source
(made mine off of a regular usb cord, cut off the head find the 5v...done)

first solder the 6 wires to the spi chip
(as picture states...exclude the hold# wire as i found it not neccesary)

second Connect soldered wires to BCusb (follow spi pin out above)

third connect BCusb to computer

fourth get the ext. 5v and touch the exposed vcc wire( all the modem lights should power up) and remove ext 5v
the lights should stay on
now...
jump the ISP

now apply the external 5v power source to the VCC wire and leave it there

start up the blackcat software

once it detects MX chip

load sb5101U script

AND BACKUP UP EVERYTHING

then flash haxorware in the 5101 tab

thats all your done

disconnect usb cable from BCusb, remove the 5v power source and disconnect ISP

now plug in power adapter to modem and test

I have few questions regarding Webstar 2100R2

Tue, 08 Mar 2011 18:12:56 +0000

I have few questions regarding Webstar 2100R2.

First I want to know how to dump original firmware, then I would like to know how to dump original config file, second thing is which tool should I use to edit the original config file.

5100 and black cat jtag help

Tue, 08 Mar 2011 05:26:37 +0000

ok its been some time since i did this and it seems that the process have changed.

before i used the jtag cable and haxorware11rev31, with blackcat build 140.. well i upgraded my pc to run windows 7 64bit. and black car jtag give me an error invalid win32 application. Im not sure if i have to use the usb program but i was hoping not having to because i have done it old school. but if i have to to it usb school will someone let me know.

so if someone will direct me in the right direction ill thank you now.

please post me links and anything else i might need, or could use. i have searched the sb site but as a last resort i have posted this du to not finding the proper program.

network slow after the new security came out

Tue, 08 Mar 2011 04:01:52 +0000

network slow after the new security came out
is there anyway to make it faster?
before like download speed atleast 18mb
upload speed 2 mb
but now download speed only around 5 mb
and one more question
what is the different between docsis2.0 and docsis1.1
does docsis2.0 faster?

SB5101i - activate on paying account, resets & resets & resets TWC

Tue, 08 Mar 2011 03:04:44 +0000

Hi, I purchased an SB5101i and attempted to activate it on my existing TWC account using the MAC address and settings it came with out of the box (it has Haxorware 1.1 v39). When the TWC tech added my MAC and tried to send it activation signals it would boot up and get right to the end (almost all lights solid green) then start over (re-boot) and do it again...and again...and again. Any ideas? I just want to go faster. Not trying to steal anything.

i got a working mac but....

Mon, 07 Mar 2011 23:23:28 +0000

i got a working mac and it was cool for a few hours today then all of a sudden it went back to kicking me from games every 15 minutes, when im on laptop the reboot dont bother the connection its only on xbox live, i think i may need to spoof the mac but im not sure as im a noob to this. plz could sum1 help me thanks.

SB5101 issues

Mon, 07 Mar 2011 22:12:57 +0000

Heya guys, new to the forum and i am having some issues with my SB5101 and figured this would be the best place to go. I get random disconnects and reboots from my modem. I have had my ISP come out here and my lines are fine, they say its my modem. So any ideas what would cause the reboots and disconnects, is my modem done for? any help would be great, thanks guys!!!!

My Log

2011-03-07 03:51:41 3-Critical R004.0 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance o
2011-03-07 03:51:08 3-Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out
2011-03-07 01:27:23 6-Notice M571.1 Ethernet link up - ready to pass packets
2011-03-07 01:27:13 6-Notice M571.4 Ethernet link dormant - not currently active
2011-03-07 01:20:46 3-Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out
1970-01-01 00:00:15 3-Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:03 6-Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:00:02 6-Notice M571.4 Ethernet link dormant - not currently active
2011-03-05 20:25:41 6-Notice M573.0 Modem Is Shutting Down and Rebooting...
2011-03-05 20:25:41 3-Critical R004.0 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance o
2011-03-05 20:25:08 3-Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out
1970-01-01 05:02:58 3-Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 05:02:46 3-Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:00:09 6-Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:00:09 3-Critical T001.0 SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
1970-01-01 00:00:02 6-Notice M571.4 Ethernet link dormant - not currently active
2011-03-05 08:03:39 6-Notice M573.0 Modem Is Shutting Down and Rebooting...
2011-03-05 08:03:39 3-Critical R004.0 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance o
2011-03-05 08:03:39 3-Critical T002.0 SYNC Timing Synchronization failure - Failed to acquire FEC framing
2011-03-05 05:44:34 3-Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out
1970-01-01 00:00:15 3-Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:03 6-Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:00:02 6-Notice M571.4 Ethernet link dormant - not currently active
1970-01-01 00:00:16 3-Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:03 6-Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:00:02 6-Notice M571.4 Ethernet link dormant - not currently active
2011-03-04 21:53:14 6-Notice M573.0 Modem Is Shutting Down and Rebooting...
2011-03-04 21:53:14 3-Critical R004.0 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance o
2011-03-04 21:52:42 3-Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out
1970-01-01 00:00:16 3-Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:03 6-Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:00:02 6-Notice M571.4 Ethernet link dormant - not currently active
2011-03-04 20:47:13 6-Notice M573.0 Modem Is Shutting Down and Rebooting...
2011-03-04 20:47:13 3-Critical R004.0 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance o
2011-03-04 20:46:40 3-Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out
1970-01-01 00:00:15 3-Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:03 6-Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:00:02 6-Notice M571.4 Ethernet link dormant - not currently active
2011-03-04 17:04:57 6-Notice M573.0 Modem Is Shutting Down and Rebooting...
2011-03-04 17:04:57 3-Critical R004.0 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance o
2011-03-04 17:04:24 3-Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out
1970-01-01 00:00:18 3-Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:06 3-Critical R002.0 No Ranging Response received - T3 time-out (US 1)
1970-01-01 00:00:03 6-Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:00:02 6-Notice M571.4 Ethernet link dormant - not currently active
2011-03-04 16:19:31 6-Notice M573.0 Modem Is Shutting Down and Rebooting...
2011-03-04 16:19:31 3-Critical R004.0 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance o
2011-03-04 16:18:59 3-Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out
1970-01-01 00:00:16 3-Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:08 3-Critical R002.0 No Ranging Response received - T3 time-out (US 1)
1970-01-01 00:00:03 6-Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:00:02 6-Notice M571.4 Ethernet link dormant - not currently active
2011-03-04 14:20:10 6-Notice M573.0 Modem Is Shutting Down and Rebooting...
2011-03-04 14:20:10 3-Critical R004.0 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance o
2011-03-04 14:19:37 3-Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out
1970-01-01 00:00:15 3-Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:03 6-Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:00:02 6-Notice M571.4 Ethernet link dormant - not currently active
2011-03-04 12:21:03 6-Notice M573.0 Modem Is Shutting Down and Rebooting...
2011-03-04 12:21:03 3-Critical R004.0 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance o
2011-03-04 12:20:30 3-Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out
1970-01-01 00:00:14 3-Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:04 6-Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:00:03 6-Notice M571.4 Ethernet link dormant - not currently active
2011-03-03 23:37:12 6-Notice M573.0 Modem Is Shutting Down and Rebooting...
2011-03-03 23:37:12 3-Critical R004.0 Received Response to Broadcast Maintenance Request, But no Unicast Maintenance o
2011-03-03 23:36:39 3-Critical R005.0 Started Unicast Maintenance Ranging - No Response received - T3 time-out
1970-01-01 00:00:16 3-Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:03 6-Notice M571.1 Ethernet link up - ready to pass packets
1970-01-01 00:00:02 6-Notice M571.4 Ethernet link dormant - not currently active

something went wrong with my setting page

Sun, 06 Mar 2011 21:00:40 +0000

guys i need a quick help
to fix this
i access my 192.168.100.1
and uncheck dhcp
but now for some reason
i can't long into the haxpage anymore
ver 39
please give me some instruction please

JTAGGING the 5101U

Sun, 06 Mar 2011 20:24:35 +0000

Forgive me if this is a stupid question but has anyone tried a simple jtag (100 ohm inline resistors) to flash the 5101U using JKEYS or WALL via parallel port. If not, does anyone have a schematic for the usbjtagNT? What kind of chip does it use? Any help is appreciated.

Restore modem to factory settings

Sun, 06 Mar 2011 17:39:11 +0000

HI everyone

I have a sb5100 modem that I will like to flash to factory defaults. The modem has sigma 2X and is been collecting dust for some time now.

I’m planning to replace my current rented modem (rent just went up again), if anyone can point me to the correct files I will appreciated

Thanks

Having trouble with Motorolla SB5101

Sun, 06 Mar 2011 03:08:00 +0000

Hello everyone sorry I'm not sure if this is the correct place to type my problem but when I try to connect via haxorware 1.1 rev 39
it won't sink up and I get "1970-01-01 00:00:10 Critical R002.0 No Ranging Response received - T3 time-out (US 2)" under
the event log. Can anyone please tell me what I can do to prevent this?

dpc2100 in Cicero IL

Sun, 06 Mar 2011 03:02:39 +0000

hi guy my brother has a dpc2100 work.he lives about 2 miles from my house in Chicago. we tried to installed it in my house and it only works for about 2 min and then it boot. we tried in my sisters which lives the next Town over only afew blocks away and it works and also tried in another house in the same town i live in and it does not work what can i do.? any help pls?

DCM305 mac address

Sat, 05 Mar 2011 23:11:53 +0000

So I got this RCA DCM305 modem from a friend that had already been modded and is working fine, but I was wondering how do I change the mac address if I ever need to do so. I'm new to modding and all so if someone can point me to a guide or tutorial that would be great.

Moved form LA to Palm Spring, SB510MOD'ed moded is notworking

Sat, 05 Mar 2011 09:22:42 +0000

Hello, I am an uber-nerd at testing modems. I have moved form Los Angeles to Palm Springs and my sb5100 modem will not work. When active cable line is connected it restart when the modem tries to get online. It worked once then I unplugged it. The isp is the same for LA and PS. I have checked my signal and it is good the cables are good quality with compression connectors. So I dont think it is that. I understand about mac collecting, do I need to change my mac? How would I collect new mac's when I cant get online. In La I was getting 16 dn and 2up. when the modem did work that one time it only got 3 dn and .7 up.

Help with my SB6120 pls!

Sat, 05 Mar 2011 08:38:49 +0000

Hi, this is my very first post. I have searched the forum for hours and could not find an answer to my problem. I bought a pre-modded modem and did all the settings. Was even able to log in. However, once i specify a config.cm it will not connect. I have attached pictures of my log. What should I do? I'm with comcast. My internet has also been dropping a lot lately. If I take out the config.cm file it will run ok but lots of drops. I tried to use the config file that comcast is pushing but still to no avail. If I take out the config.cm it will show that comcast tries to push a file. I have this file, so I make it into my config.cm and use putty to put it in my modem. When I do, it will show the errors on the pic. Can anyone guide me?

sbg6580 question

Sat, 05 Mar 2011 07:07:22 +0000

I work at Cox internet tech support and I had a customer call in with a new 6580 modem. Added to account and showed 8 downstream 4 up which is obviously the stated specs on the website. However we only allow channel bonding for dl and only up to 4. So 1 up 4 down. This modem also said something special that doesn't show on any other modem. It said factory mode enabled next to the modems firmware. That doesn't show on any other modem. I want to know if we as a company push firmware that only allows 4 channel down or if this was a Motorola mistakes sending out a modem in debug mode or something. Very interesting to me figured one of the users here of all places could get that answered for me

5101 and snmp commands

Thu, 03 Mar 2011 21:37:37 +0000

Ok im not sure how but when i run snmp commands its uncaping me lol i go from my set 10mbit to up to 60mbit. Im using snmp and was just goofing around and noticed id get extreme speeds i havet figured out exacty what command does it yet. Im just wondering what im causing lol i thk i might be uncapping the entire network lol.

---[ Read only OIDs

1.3.6.1.2.1.1.1.0 = System Description
1.3.6.1.2.1.1.3.0 = Modem up time
1.3.6.1.2.1.4 = Some useful information (walk)
1.3.6.1.2.1.4.20.1.1.0 = HFC IP (getnext)
1.3.6.1.2.1.4.20.1.3.0 = HFC Subnet (getnext)
1.3.6.1.2.1.10.127.1.1.3.1.3.1 = Maximum upload bandwidth
1.3.6.1.2.1.10.127.1.1.3.1.5.1 = Maximum download bandwidth
1.3.6.1.2.1.10.127.1.1.4.1 = Current status (walk)
1.3.6.1.2.1.17.4.3.1.1.0 = Hosts behind modem
1.3.6.1.2.1.69.1.4.4.0 = TFTP Configuration file server IP
1.3.6.1.2.1.69.1.4.5.0 = Configuration file name
1.3.6.1.2.1.69.1.3.5.0 = Current firmware
1.3.6.1.2.1.69.1.4.2.0 = DHCP Server IP
1.3.6.1.2.1.69.1.4.3.0 = Time Server IP
1.3.6.1.2.1.69.1.5.8.1.7 = View Log (walk)

---[ Read / Write OIDs

1.3.6.1.2.1.69.1.1.3.0 = Boot modem (1=boot now)
1.3.6.1.2.1.69.1.3.1.0 = TFTP Firmware server IP
1.3.6.1.2.1.69.1.3.2.0 = Firmware filename
1.3.6.1.2.1.69.1.3.3.0 = Firmware update status (1=update now, 2=update on boot, 3=disable updates)
1.3.6.1.2.1.69.1.5.2.0 = SNMP Traps server IP (0.0.0.0 = disabled)
1.3.6.1.2.1.69.1.5.3.0 = SNMP Traps status (1=enabled, 4=disabled)
1.3.6.1.4.1.1166.1.19.3.1.14.0 = SNMP Port
1.3.6.1.4.1.1166.1.19.3.1.15.0 = SNMP Traps port
1.3.6.1.4.1.1166.1.19.3.1.17.0 = HTML Server status (1=enabled, 2=disabled)

Firmware user friendly

Wed, 02 Mar 2011 23:07:30 +0000

What is the best firmware to work on Manhattan NYC to use a SB5100. Thanks in advance.

Which Modems Dont Need Soldering?

Wed, 02 Mar 2011 20:40:06 +0000

I know that the RCA 315 Chinese model is the easiest to mod, however, they are beginning to get hard to find. Is there another model out there that uses the USC JTAG method and can be modified for SIGMA?

Unbrick DPC2100r2 Max232

Wed, 02 Mar 2011 10:58:00 +0000

I have DPC2100r2 v202r1256-060303...and it is bricked..how to unbrick this modem with max232???Please help me..

Unable to flash sb5101(help!!!)

Wed, 02 Mar 2011 01:35:26 +0000

hey guys help me!
here are problems i m facing-

and some of my ss-
http://profile.imageshack.us/user/kris4416/

my modem is sb5101 and my flash chip is hynix.
please move to the post to 5101. Bymistake i posted in 5100.sorry for that!

epc2100r2 keeps kicking me from xbox games

Mon, 28 Feb 2011 22:32:50 +0000

im playing in game or even when im not my modem lights all go out bar the pc and power, then the lights come on again in this order recieve,send then cable light blinks a fw times then goes solid, this is breakin me as im losein out on xp etc plzcan sum1 help asap thanks.

need mac address

Mon, 28 Feb 2011 19:26:40 +0000

Okay guys last night My rca dcm315 cable modem stopped working. I was wondering if anybody knows what's up with that. in the past I change the mac address then I will get online. today I tried all the mac addresses I have none of them are working.

Can't "Save" or "Save and Reboot" Haxorware Settings

Mon, 28 Feb 2011 01:11:28 +0000

I am using Haxorware v 1.1 Rev 39.
I want to change some settings (in the addresses tab)
but when i change the stuff and press "Save and Reboot"
nothing happens!!!
same thing with the "save" button
Please help me ASAP
Thank you.

Will anyone sell me a "Mod Kit"? well really a pre flashed chip for my ambit 256

Mon, 28 Feb 2011 00:48:07 +0000

I need a pre flashed chip with haxorware already loaded into in for my ambit 256 modem, i was gonna buy 1 on ebay but the person suddenly stopped selling them. any help would be appreciated thanks.

SB5100/ SIGMA WITH SNIFFER TAB/FOR NEW security

Sun, 27 Feb 2011 11:18:39 +0000

HI , long time ago i tried a firmware on the sb5100 that had a sniffer tab, i think it was the firmware 1.06 but when i tried to flash it with that i keep bricking the modem an i had unbricked it.

also i tried the sb4200 with the firmware nosh 2.02 which has the sniffer tab, works great but i dont know how to change the bpi on that firmware.

the reason i want the sb5100 with the sniffer tab is since the new security requires a config file to get online it would be great to have the sb5100 sitting down for 2 days scanning and then try all the config till i find one with a boost speed.

does any one knows the firmware with the tab or have the full flash hacked bin ?

Help and clarification with config file and firmware

Sat, 26 Feb 2011 22:30:51 +0000

Hi,

I have a SB5100 modem with the mod and I have sb5100 from the ISP for my account.. I am from India and my ISP is *****band. I haven't been able to find out a lot of information on my ISP with regards to the UBR address and shared key, nodes/zone etc. I will get straight to the point. [After a lot of reading I humbly put forth my questions]

I was able to download the config file *account number*.cm opened with docsis editor and compared to find out that it has a shared key

Question : Is there anyway I can upload it after editing somehow bypassing the shared key string check ?
Research : I know truncating the hash string wont help because sb5100mod doesnt accept config files without the security string or I could Hack the shared key (could take months, years depending on the complexity not at all feasible)

Question : I have been able to download a faster config file as well [1mbps-yep thats all I seek 1-2mbps no more no less] is there anyway of forcing it to the modem ?
Research and result : Logs show registration failed| modem keeps looping back to the start up sequence and within a minute or two my original config file is forced to the modem inspite of selecting TFTP or Flash option Tried out other various work arounds given in the forum.

Question : I am using my ISP rented modems mac ID on the modded modem, can I safely uncap on my account without being detected using all the stealth settings in the firmware?
Research : It's not the wisest decision, but a possibility?

I would be most greatful if you could point me in the right direction. I have read noob 101 and 'what to do after you got it to run' and various other useful posts.
I would also like to apologize in advance if I am unknowingly breaking any posting rules .

Thank you
Sincerely another Newb.

SB5100 Weird Issues

Sat, 26 Feb 2011 18:52:46 +0000

I have a SB5100 I am looking at for a friend, so, I cant tell you the history of this as it is unknown. He wants to have a factory flash on there, but he cant communicate with it. When I tried to see the modem screen when directly plugging it into my computer, you get nothing at a 192.168.100.1. The power light will go solid, then the receive will just blink. (no cable connected except for power cord and ethernet cable)

He has a header in there for a jtag so I attempted to jtag communicate with it, but it will not recognize anything connected. I also tried using the web browser and still nothing. I did manage to go to a command prompt and ping the modem which it says its there and no packet loss..but that is about it.

How can I communicate with this?

Most importantly, if I can not get the jtag utilities to recognize it, how can one go about reflashing it using a parallel jtag cable? Is there another method that can be used? Or should I tell him that this is all junk?

SB5100Premod TWCRR

Sat, 26 Feb 2011 06:13:17 +0000

I am a newb and i have read alot of the topics and forums and cant see to find the answer. But i have a SB5100 premod sigma-x2 isp twcrr and i was told for it to work i would need to change the HFC MAC Address only is this true or is there more that needs to be done ? plz help am running on wifi and i need my modem back thanks

5101 Enable SSH

Fri, 25 Feb 2011 20:19:16 +0000

Hi,
Can somebody please explain me howto enable ssh on the 5101?

I already inserted '/non-vol/userif/ssh_enable 1' (setting was: SSH Access Enabled = 0)
rebooted and when I type in '/non-vol/userif/ssh_enable' now, I see:
SSH Access Enabled = 1

Unfortunately, no ssh access...

Hidden menu / alternate login for SBG901

Fri, 25 Feb 2011 18:28:02 +0000

I just stumbled upon something interesting with the SBG901. The normal default login for this modem is admin / motorola. I accidently typed root/admin insted and realized that i got into a diffetent menue. Both are almost exactly the same but the root login will also show you the config file you are using and your cm ip address. Below are a couple of screen shots to show the difference. The first is with the admin login and the second is with the root login. Alos if you click on the config file you can view its details as if you are in vultureware. I'm pretty sure most veterans here already know this but I thought i would post anyway.

RB

Attached Thumbnails

HFC MAC address

Fri, 25 Feb 2011 17:55:18 +0000

Can anybody tell how to change HFC MAC address on SB5100Mod.. thank you

Is there any way flash a sb6120 via ethernet

Fri, 25 Feb 2011 03:37:57 +0000

Hi, some reason I cant find any jtag cable and i was wondering if I could flash firmware via Ethernet or can i have some body do it for me? or buy a premoded one.

thanks

SB5100Mod

Wed, 23 Feb 2011 18:33:12 +0000

Hello people, where can I get the Sb5100MOD ?, thank you

Cisco DPQ2160

Wed, 23 Feb 2011 18:15:02 +0000

Any one have any info on this modem?

I looked at the data sheet but it doesn't say much.

I was hoping it could run Hax but I can't find any system specs (chipset/ram).
I don't know where it falls in line with their other modems.

I think it's like $35 so I might pick one up if someone can shed some light on the device.

Thanks.

Future of Haxorware?

Wed, 23 Feb 2011 17:47:11 +0000

Hi Folks,

Just wondering if there are plans to roll out a Haxorware update.
As ISP security (in General) have been beefing up, all I can do is clone certificates and not inject faster configs. (since they change every time i boot up)

There are rumors that my isp is going to start an even newer security measure which will even prevents clones from operating unauthorized nodes.

Put a fork in it, i guess it's the end of the road. Hell of a ride though.

thanks guys!

Ambit 256 with H1.1 Rev39 - What no MAC?

Wed, 23 Feb 2011 10:42:56 +0000

boot

Wed, 23 Feb 2011 10:29:14 +0000

hola...alguien me podria ayudar con el boot de estos firm
r
Download File Download SB5101N-2.7.2.0-GA-00-DIAG-NNDMN.rar
Download File Download SB5101N-2.7.0.2-LAB-00-DIAG-NNDMN.rar
Download File Download SB5101N-2.7.0.1-GA-00-DIAG-NNDMN.rar
Download File Download SB5101E-2.7.5.0-GA-00-DIAG-NNEMN.rar
Download File Download SB5101E-2.7.5.0-LAB00-LTSH-NNEMN.rar
Download File Download SB5101N-2.6.4.0-GA-00-DIAG-NNDMN.rar
Download File Download SB5101E-2.7.3.0-GA-00-DIAG-NNEMN.rar
Download File Download SB5101E-2.6.2.0-SCM02-DIAG-NNEMN.rar
Download File Download SB5101E-2.4.4.0-SCM00-DIAG-NNEMN.rar
Download File Download SB5101E-2.5.2.0-SCM01-DIAG-NNEMN.rar
Download File Download SB5101E-2.6.2.0-SCM00-DIAG-NNEMN.rar
Download File Download SB5101E-2.4.3.0-SCM00-DIAG-NNEMN.rar
Download File Download SB5101E-2.4.1.5-SCM01-DIAG-NNEMN.rar
Download File Download SB5101E-2.4.1.6-SCM02-DIAG-NNEMN.rar
Download File Download SB5101E-2.4.1.5-ENG01-DIAG-NNEMN.rar
Download File Download SB5101E-2.4.1.4-SCM99-DIAG-NNEMN.rar
Download File Download SB5101E-2.4.1.3-SCM00-DIAG-NNEMN.rar
Download File Download SB5101-2.7.6.0-GA-00-DIAG-NNDMN.rar
Download File Download SB5101E-2.4.1.0-ENG99-SH-NNEMN.rar
Download File Download SB5101-2.6.2.0-SCM00-DIAG-NNDMN.rar
Download File Download SB5101-2.6.0.0-SCM00-DIAG-NNDMN.rar
Download File Download SB5101-2.5.3.1-ENG00-DIAG-NNDMN.rar
Download File Download SB5101-2.5.0.0-ENG01-DIAG-NNDMN.rar
Download File Download SB5101-2.5.2.0-SCM01-DIAG-NNDMN.rar
Download File Download SB5101-2.4.4.0-SCM00-DIAG-NNDMN.rar
Download File Download SB5101-2.4.3.0-SCM00-DIAG-NNDMN.rar
Download File Download SB5101-2.4.2.0-SCM00-DIAG-NNDMN.rar
Download File Download SB5101-2.4.1.4-SCM99-DIAG-NNDMN.rar
Download File Download SB5101-2.4.1.5-SCM01-DIAG-NNDMN.rar
Download File Download SB5101-2.4.1.6-SCM02-DIAG-NNDMN.rar
Download File Download SB5101-2.4.1.4-SCM98-DIAG-NNDMN.rar
Download File Download SB5101-2.4.1.3-SCM00-DIAG-NNDMN.rar
Download File Download SB5101-2.4.1.1-SCM14-DIAG-NNDMN.rar
Download File Download SB5101-2.4.0.1-SCM-SH-NNDMN.rar

Haxorware GUI Worked for 30 minutes...

Wed, 23 Feb 2011 04:45:52 +0000

...and now it's completely inaccessible. I just got a modem in from an ebay seller, fired it up and went to the 192.168.100.1 GUI, and set it up as a clone to replace a modem I already had. I disconnected the old modem, popped the coax on the new modem, and powered it up. A few minutes later, the Haxorware SB5101 was online and working.

I went for a run and came home and tried to access the 192.168.100.1 GUI again - no dice. I checked my ipconfig and it's showing TWC issued IP info, gateway, etc... Weird.

I disconnected the coax, left the modem off most of the night, and fired it back up w/o a coax connection - just an ethernet connection and power. Now it seems like DHCP isn't working at all on the modem - it's giving me nothing. When I manually input IP information in the IPv4 tab (192.168.100.10 IP, 255.255.255.0 mask, 192.168.100.1 gateway, 192.168.100.1 DNS), ipconfig reads right, but still - no GUI @ 192.168.100.1. I tried pinging it, and expectedly... nothing.

What the heck? Why did Haxorware decide to just vanish on me? I can't ping it, telnet to it, or access it via the GUI... but the modem DOES work when I plug it back up to the coax. Obviously, I bought this thing to mess with Haxorware, so this isn't going to work.

Does anyone have any ideas? I know the obvious answer is "reflash it and try again", but I didn't get a JTAG cable. I guess that is the next step, but someone sure would make my day if they posted up with an easier fix for this problem...

Copy 5100 to another 5100

Tue, 22 Feb 2011 18:58:08 +0000

I have a 5100 here running 5100MOD with no problems. Works great.

I have another 5100 I got my hands on that I want to setup for a friend. Already has JTAG, and Blackcat reads it fine.

Can I do a full memory read all on mine, and then write the 8mb file to the other one so it copies whatever settings and config I am running?

premods with haxorware for sale

Tue, 22 Feb 2011 05:25:25 +0000

so i guess XXX.net has a license to sell haxorware modems?

SB5100 On TWC

Mon, 21 Feb 2011 08:33:24 +0000

Just recently got an SB5100 pre modded with Haxorware. I already am paying to 10mbps net with Time Warner/Roadrunner. How do i get it online and uncapped? Zero experience in this subject matter :/

PLEASE HELP/need a basic rundown on how to change the mac address on my new modem to the mac address from my old modem

Mon, 21 Feb 2011 08:11:56 +0000

i just ran across a SB5101 modem my roomate used to work for comcast. id like to change the mac address of the modem to the one on my current modem without having to contact my service provider. im not sure if its already here in the forums and im just retarded but please any help would be appreciated im having alot of trouble figuring this out. Dont be discuraged because i sound like a noob. im very inteligent and a quick learner,just in a hurry to get this done. thank you for any help u may be able to offer

SM5100 with SB5100Mod - How to get original Ethernet MAC Address

Mon, 21 Feb 2011 03:58:52 +0000

I have a SB5100 modem and i need help on getting original the Ethernet MAC Address. How can i get this?

Thank you.

EPC2100R2 Can't flash it

Mon, 21 Feb 2011 03:17:22 +0000

Hello guys,

I am pretty much over with ideas, don't know what else i can do. I followed a tutorial on uncaping EPC2100R2 (mine is BCM3349) over the web. Any help would be greatly appreciated, or any advise you can give me. Modem doesn't look completely killed to me but it is completely inaccessible.

I flashed it via web gui with ambit_2100R2, bank 1, following the tutorial. After modem restarted i couldn't continue writing haxorware cause it simply refused telnet connection. It was on XP, telnet is fine, i even tried from other machine so there was really no hope connecting with telnet. I can't access it via web on 192.168.100.1 (that is as expected as i read i can only access it when ambit flashed via telnet).

I built quickly rs232 serial adapter, with max232 etc, and i connected via terminal. So it responses, but i can't do anything there either. After a couple of lines it just starts 'scanning frequencies' and that's it, constantly scanning. There is a line of text which says press 1,2 or 'p' in the first 2 seconds. I tried resetting for who knows how many times so i could catch it and press 'p' but no way i could enter into any menu. After those lines it starts scanning again.

As i had no luck with rs232 i made another parallel port adapter to use with jtag. It is a simple thing to build so i doubt i made a mistake, but again, maybe there is something so please advise. I connected it via parallel port but both jtag utility and 'schwarze katze' can't find it. (blackcat cable is not connected). I checked the cable and all the wires for several times and i can't find if i did something wrong. One of the lights is constantly on and the next one is blinking. When lan cable is connected another light comes on so it looks like it is somehow responding.
Now i am simply out of ideas. I made a big mistake playing with it today cause it was the modem i actually use for the internet. My dear friend and a neighbour shared his internet connection so i can go online.

If there is anything i can do to revive it i will highly appreciate it.

Kind regards

TTL - Ubee (Ambit) U10C035

Sun, 20 Feb 2011 03:55:00 +0000

I have a Ubee modem and a ttl adapter and im having a hard time getting the serial/TTL to work.

What's the pinout? Do i need to do anything special?

Thank you

Sb5101 dead light fix using pjtag w/ blackcat

Sun, 20 Feb 2011 03:16:09 +0000

For people with pjtag that tried toms jtag utility on 5101 and have dead lights:

install black cat build 128
download and apply the black sb5101 patch
open black cat program click the "flash" tab
click "detect"
click "write"
choose 2m backup
in the "start address" box enter 9fc00000
click "ok"
after flash complete restart modem
modem is revived

This is the only thing that worked for me.

Also after unbricking i used the black cat program sb5100 tab to flash the modem with haxorware. My modem is now unbricked and working perfect with haxorware

SB5101 - Loses Internet After A Couple Days

Sat, 19 Feb 2011 02:27:34 +0000

Good Afternoon,

I am having issues with my modem. I can get on for about 3-5 days then it completely loses internet connection. I am currently using a Monster Lowloss 2GHz Splitter to split the cable to my Comcast TV box. I also tried a 6dB Filter on the back of the modem since one post claim that fixed their issues, which seemed to match mine. Other then that, please assist and hopefully you see an error since I have time countless combination's to try and get this thing to have a consistent run with a disconnect.

http://www.amazon.com/Gigahertz-Low-Loss-Splitters-Satellite-MKII/dp/B000Y97Q86

Here are my settings:
DNS: 8.8.8.8. and 8.8.4.4.
Stealth Software Version: SB5101-2.7.8.0-GA-00-NOSH
BPI: BPI (Docsis 1.0)
Config File: Disabled
HFC Mac: Mac from Paying Customer (Uncle)
Ethernet Mac: Mac on the bottom of hacked modem
USB Mac: Mac on the bottom of hacked modem
Disable Firmware Upgrades: Checked
Force Network Access: Checked
Tftp Enforce Bypass: Checked

Here is an Event Log from one whole working loop, start to disconnect.

------Time------------Priority---Code--------------Description---------
2011-02-14 15:47:13 - Critical - I402.0 - TLV-11 - Illegal Set operation failed
2011-02-14 15:47:13 - Notice - I401.0 - TLV-11 - unrecognized OID
1970-01-01 00:00:04 - Notice - M571.1 - Ethernet link up - ready to pass packets
2011-02-14 15:46:39 - Notice - M573.0 - Modem Is Shutting Down and Rebooting...
2011-02-14 15:46:39 - Critical - ***** - Resetting the cable modem due to docsDevResetNow
2011-02-14 18:08:32 - Critical - R005.0 - Started Unicast Maintenance Ranging - No Response received - T3 time-out
2011-02-14 18:03:50 - Error - C401.0 - DCC-ACK not received
2011-02-14 18:03:34 - Critical - R002.0 - No Ranging Response received - T3 time-out (US 5)
2011-02-14 17:53:31 - Critical - R005.0 - Started Unicast Maintenance Ranging - No Response received - T3 time-out
2011-02-14 17:33:33 - Critical - R002.0 - No Ranging Response received - T3 time-out (US 5)
2011-02-14 15:47:13 - Critical - I402.0 - TLV-11 - Illegal Set operation failed
2011-02-14 15:47:13 - Notice - I401.0 - TLV-11 - unrecognized OID
1970-01-01 00:00:04 - Notice - M571.1 - Ethernet link up - ready to pass packets
2011-02-14 15:46:39 - Notice - M573.0 - Modem Is Shutting Down and Rebooting...
2011-02-14 15:46:39 - Critical - ***** - Resetting the cable modem due to docsDevResetNow

Here are my signals

DCM-315 help?

Fri, 18 Feb 2011 21:26:34 +0000

Hey! i have a DCM-315 that used to work with a clone macs and stop working recently. I tried to use it with a config and it still now working any help getting back online would be appreciated. I was trying to flash 5100MOD beta in it and can't seem to be flash. I also had a sb5100 that i used to go on with a clone mac that stop working too, but i fix now bc it has sb5100MOD cant seem to fix the dcm315 sigma. Help please thanks

Rca Dcm 315 Metal/Plastic bottom

Fri, 18 Feb 2011 17:51:24 +0000

FIXED LOL

Flashing the Ambit 256

Fri, 18 Feb 2011 15:12:31 +0000

I put together this simple guide to help anyone who wants to mod their Ambit/Ubee 256. It took me some time to figure out these easy steps. So enjoy!!!!

1.You must have USBNT Jtag. You must have the following files. Ambit 256.pdf, Ambit 256 Bootloader, MX_REV_39_Full.Bin. I have conveniently added these files for you.

2. Once you have downloaded these files take apart your machine and connect your USBNT jtag to the flash chip in your machine. Follow the guide Ambit256.pdf for the proper configuration. (I personally soldered the wires it was easier for me, but most people say to use test clip.)

3. After you have your USBNT JTAG connected to the flash chip, open your USBNT software UJ MODEM [b.]

4.Next go to the SB 5102 tab and select Detect. You should see Flash Device: MXl***** <------- Flash chip ID starts like that. Now go to the system tab and select target SB 5102.[/b] Make SURE to make a BACKUP FIRST by clicking save.
Now go to Range and select Boot. Load the Ambit 256 bootloader.bin. Click write. this will erase original bootloader and program the custom one. Click on detect again and then in the Range menu select ALL. Load the REV 2MB file and click write. This will erase original firmware and program HAX 1.1 vers 39. Click on the verify button it should say data OK.

5.Now unsolder the ISP bridge and plug in your machine. Make sure Ethernet cable is connected from your machine/modem to your MOB/COMP.

6.Check 192.168.100.1 to see if HAX gui page loads up. Once it does load adjust your working settings. Once that's done, close it and don't worry about it cause you cant do s*it with it anyways. At least for now.

7. Your machine will just scan and never lock signal. So you have to access Telnet via putty with HAX GUI page closed and no cable connected to your machine. As soon as you log into Telnet you will see a crap load of scanning frequencies so as fast as you can type the following in order, one at a time.
cd /d
scan_stop (if done properly scanning should stop or slow down alot.)

Finally type
cd /n/h
cm_tuner 22
write
After that you might need to do this also:
cd /d
goto_ds 327 or use 567

(if done you should notice changes in telnet.) You can now unplug your modem and plug it back in with the (RF)cable connected to it.I did not make any of it I just put this little guide together.If you know for a fact something is forgotten or wrong please correct. This was the ONLY WAY I COULD get the Ambit 256 to work. So Big time-Credit goes to all the people who created the files,hardware and software.

Attached Files

MX_Rev39_full.bin 2MB 52 downloads
Ambit256bootloader.bin 64K 48 downloads
Ambit 256.pdf 688.88K 119 downloads

Unlocking

Thu, 17 Feb 2011 20:22:57 +0000

Hello! Not sure if I can ask this here... I have internet in my home... Have a motorola sb5101... It gives me the connection right away,but is asking me to register for cox service,as it was a friend of mines old modem...I do not want to register.. I know there is a way to clear that info,but not exactly sure how to bypass registering for service. And it does allow me to go online,just not pass the signup page for service..Any help is appreciated.Thanks!

insertin non-vol

Thu, 17 Feb 2011 20:03:54 +0000

hi iv saved the non-vol out of a 256 to edit an thought cmnonexp101_win32 cud put it back in but no. duz any 1 kno a prog or how to put it back wi hex workshop (like putin haxo on a original image ) any help much apreciated. i have searched for answers but no luck

SB5100 Does not DHCP

Wed, 16 Feb 2011 19:13:39 +0000

Hey,
So I just recently got my SB5100Mod and when I plug it in, connect the ethernet cord I do not get a dhcp IP from the modem and the Recive light keeps flashing anyone know whats wrong and how to fix this?

MODEL info does not change

Wed, 16 Feb 2011 07:42:18 +0000

Ok i been looking at this and it seems to me that Haxorware is not changing the MODEL of the modem when it reports to the ISP how do i know well i was doing some sniffing around and playing with a 5101E i spoofed everything correct but when i checked the modem on the ISP page i could see one thing sticking out

check it out and you will see it aswell

as u can see by the pic that it still thinks that the modem is a 5101E even after changing the setting in haxorware page.
my question is can i change this info threw TELNET because this is sticking out like a sore thumb

HELP HELP HELP

changed control panel ip address problem

Wed, 16 Feb 2011 04:13:19 +0000

I was trying to change it to 192.168.100.xxx but i think i typed .5xx instead. now i know not to use a number greater than 255, but I was careless and messed up. the modem is a dcp2100...r2. It was flashed haxorware with the ethernet/tftp method so it does not have the pins soldered for the jtag, which is the only way i can think of to fix it. is there a way around this without re-flashing with jtag/nt.
I cant access gui through 192.168.100.1 I think i messed up the dhcp server only........ maybe it can be fixed through USB?

Unable to load 5100Mod on SB5100

Tue, 15 Feb 2011 18:33:36 +0000

Anybody got this?
I got a few SB5100 with SB5100-2.3.7.1-GA-00-NOSH on them, field pulls.
USBjtag detects them, I can backup the firmware, load SB5100mod only(image0)successfully, but cannot access 192.168.100.1:666. Help page shows SB5100-2.3.7.1-GA-00-NOSH is still there.It goes online to the registration page. However, on RCA DCM315 SB5100mod loads and I can reach 192.168.100.1:666.
Any idea?

Duvida de iniciante

Tue, 15 Feb 2011 02:25:36 +0000

ola, gostaria de saber se sendo assinante da NET na menor velocidade de internet e com um modem desbloqueado preciso fazer alguma coisa especifica para conseguir usar a velocidade maxima de internet??

vlw

Back up tutoial??

Tue, 15 Feb 2011 01:42:50 +0000

Hi all is there a Tutorial for Backing up the original Haxoware 1.1 RV 39 in a 5101? I see the back up screen with the NonVol and 2MB flash and the Nonvol Box below it with Brouse and upload button BUt there is no file name or file that anything backs up to. Am I missing something or what?? Thanks Bohanna

help sb5100

Mon, 14 Feb 2011 22:16:13 +0000

i was wondering if sb5100 is up..
and if it is what is the best firware.

SB5100 DOESNT STOP SCANING FREQUENCY

Mon, 14 Feb 2011 22:15:49 +0000

each time that i connect telnet the sb5100 doesnt stop scanning all the frequency
he go back to the 1st favorite,
can anyone help ?

STOCK DCM315 firmware dumps

Mon, 14 Feb 2011 07:35:38 +0000

Does anyboby have DCM315 REV2.20A made in China original 2Mb dumps. Please share. Lost my data due to computer crash.

event log check plz

Mon, 14 Feb 2011 02:39:56 +0000

hi i just got a sb5101 with haxorware1.1 rev39 and im trying to get online but i cant. i know theres something wrong in my settings since im a newbie .when i try to connect all my modem's lights get solid but got no internet access... plz help.. here's the event log...

2011-02-14 02:27:25 Critical I001.0 REG-RSP - invalid format or not recognized
1970-01-01 00:00:15 Critical D003.0 DHCP WARNING - Non-critical field invalid in response.
1970-01-01 00:00:04 Notice M571.1 Ethernet link up - ready to pass packets
2011-02-14 02:26:57 Notice M573.0 Modem Is Shutting Down and Rebooting...

can't get in to 192.168.100.1

Sun, 13 Feb 2011 17:55:09 +0000

I have a modem sb5100 it has sixma2 as firmware and I flashed with SB5100MOD via blackcatusb, now I can get in into the modem settings(192.168.100.1) can any one help me out with that

Haxorware 1.0rc6

Sun, 13 Feb 2011 14:21:00 +0000

1. I see there is a newer version haxorware should i upgrade to new version?

2. If i should please tell me what section of the forums i should look in to show me how thanks im a real noob.

Original SB5101 firmware

Sat, 12 Feb 2011 23:45:24 +0000

Where can I find the original sb5101 firmware from? I'm looking to reload the original factory firmware to use on Comcast in Chicago. Instructions would also be helpful. I checked the downloads section and can't figure out which file I need. Additionally, the "search" on this site doesn't appear to work. Thanks in advance.

webstar 2100 JTAG

Sat, 12 Feb 2011 16:05:07 +0000

Anyone got the a diagram of the pins modem side please..

SB5101E Flashing problems.....OrigianlFW + haxoware

Sat, 12 Feb 2011 11:59:00 +0000

hi all,

need some help from u Pro´s
i have a SB5101E and have treid serval times to flash Haxoware newest SW-FW. have already lost many hours to get Haxoware FW running and read losts of tutorials with different FWs....but i can´t get it work...modem starts after flashing just with the following LED status:
1) once PWR-LED
2) all LED flash once
3) no LED is flashing.....

when i try to get Original (stock) FW to flash....it doesn´t work often..

i just have managed to flash and run original FW just twice...always when i powered of the modem after flashing for some hours??

I have tried to flash with Blackcat as well as Toms JTAG util....
any solutions how i can finish my work?? do u guys have the right FW to flash
have tried

1) 5101E-11REV30 > with daks guide
2) haxorware11rev32 > with JTAG util
3) haxorware11rev39-LITE > with JTAG util
4) SB5101 - Intel TE28F160C3BD > with JATG

as well with BlackCAT ...

is it better to flash by Serial?? which flashingversion is the best?
did u have same problems?

my HW:
0x0334917f = 53776767
Manufacturer: broadcom
Part: bcm3349
Connected to Flash: Intel I28F160C3B

Please help...Thanks a lot

regards

Flashing The DPC2100R2 When firmware is other then v202r1256-060303

Sat, 12 Feb 2011 06:14:37 +0000

i finally got it to work like a fireball

pin 2 from jtag to pin 22,23,24,25 of DSUB25M are really important but habitually not mentionned on others shematics that i found before.

1- check into your box for jtag pin header. some box have no header depending on the year
of manufacture. if your dpc2100r2 have jtag pin header (8 pin)you are ok. if not you have
to buy a DPC 2100 Jtag Adaptor from SBH and soldner it.
like this or do it yourself

2- buy a jtag cable from SBH to work with the DPC 2100 Jtag Adaptor from SBH or do a pjtag cable made like me :

(the pictures are not mine)(na old DSUB25M (lpt) cable with a floppy cable that i keep 8 pin needed and cut the rest)
(other doesnt work) and 12 inch max to avoid writting error problem

3- plug jtag or pjtag cable and rj45

4- set network connection to 192.168.100.10 and 255.255.255.0 leave the rest blank
start solarwind tftp server(freeware)at 192.168.100.10
plug pjtag cable from LTP port to modem 8 pin and power on

5- START the Toms jtag utility 1.3
BACKUP YOUR STOCK MODEM FIRST;

detect (should tell you what kind of cpu and flash chip is in your modem)
getram flash
save flash (set the filename and a safe location where you want to store it)

exit the Jtag Util program (clears it's memory and stored values)

Load the Jtag util program again.

To program firmware;
----IMPORTANT FIRST , LEAVE THE BOOTLOADER ALONE ON THIS BOX CUZ YOU COULD BRICK IT-----
detect (should tell you what kind of cpu and flash chip is in your modem)
ldram image0 (select your firmware, Haxorware for the dpc2100r2)
program image0

wait about 20 min till write process finish

Disconnect power to modem then disconnect Jtag, power up modem and you are done.

i read that rarelly some poeple have difficulty to flash the dpc2100r2 having flash writing error.

i suggest to do the trick 2 or 3 time till all ram bad write block error are successful:

detect (should tell you what kind of cpu and flash chip is in your modem)
ldram image0 (select your firmware, Haxorware for the dpc2100r2)
program image0

i am new to "testing" modems with help from bible forum of Surfboard Hacker
i could have forgot something but i made this little tutorial (my first) that i wish could help others.

THX SBH my new hobby

SB5100 Stuck @ Power Light Flashing...

Sat, 12 Feb 2011 01:45:38 +0000

This is a modded SB5100, or already flashed...

I got this modem from a friend in Washington. It worked great out there through his ISP. He bought a new modded SB6200 and gave me the old one.

I tried it here in Denver but it kept cycling through and never stopped at the ONLINE (constant) light. Then I attempted as a noobie to change the configuration and accidentally changed:

* Reboot Disabler: Disable ===> Reboot Disabler: Enable

Now, the modem won't boot up anymore. I am a noobie and didn't know what I was doing.

Could someone please help me remedy this issue? My next question is will this modem work for the Denver area?

Thank you in advance for your help. This is a great forum. There's lots for me to learn. Keep up the great work everyone.

please help me with comcst inga with upto date configgs

Fri, 11 Feb 2011 20:53:57 +0000

modems been down since july and have just got a ca-42 but i already have hax installed from last boot till cmst got me ...can someone give me someinsite to get it back going?v1.1 31 Hwas running config SB5101N_2.7.2.0_GA_00_NOSH_NNDMN AND FILE D11_M_SB_5101_SHOWCASE_CO5.CM. PLEASE HELP

10 Minute time limit?

Fri, 11 Feb 2011 19:39:34 +0000

I don't know whats going on, but every 10 minutes my modem falls on its face (I have tried a few to make sure it wasnt hardware.... As soon as I ipconfig /release and renew. Its fine for another 10 mins. If I try to ping, it says general failure. Exactly like clockwork. In an area without isp support right now, so...Dont know where else to try for help.

Thanks

Boomin

Unknown flash type! on 5101

Fri, 11 Feb 2011 16:33:04 +0000

HI
I need help here. I was replacing the flash on my 5101, with usbjtag NT, while doing this it erased the flash completely and my computer froze!!. I had to reboot it. But after that I can not do any thing other than just detect. The message on the consol is
-detect
IDCODE 0334917F
Broadcom BCM3349
IMPCODE 00800904
EJTAG V1, V2.0
DMA supoorted
Unknown flash type!
Report these two value to http://www.usbjtag.com/vbforum ffff,ffff

Is there any way to rewrite the flash with the usbjtag? I have Blackcat jtag too, but it does not detect the modem at all!!
Please reply. Thank you

ERROR: Autonegotiation timeout

Fri, 11 Feb 2011 05:06:09 +0000

Ok guys been doing these Ambit 250 for about 2 yrs and just recently I have come across this problem. I use Hyper Terminal and with just about 3 or 4 modems in the last 3 months I've gotten this "Autonegotiation started waiting for completion...ERORR: Autonegotiation timeout" What does this mean? Has this ever happened to anyone else?

Upgrading from 1.0 to 1.1v39 Haxorware help

Fri, 11 Feb 2011 03:14:17 +0000

I know I sound like a total noob, but I'm having a problem doing this upgrade, and I need some help.
This what I've been trying, please tell me what I'm doing wrong.
1. change my network settings to 192.168.100.10 sub mask 255.255.255.0
2. I start tftpd and set server to 192.168.100.10 choose the rev.39 bin minimized tftpd.
3. started hyper terminal set to tcp/ip winstock. ip address 192.168.100.1 click "ok" and it keeps saying unable to connect. If anybody has ant insight please help. I'm running XP

Wrong Settings?

Thu, 10 Feb 2011 21:55:20 +0000

I have a Scientific Atlanta 2100. When i went to the haxorware address, (192.168.100.1) it said the settings were for motorola SB5101. Is this normal?

The modem seems to go off about once every 3 months, and only has a download speed of around 30kb/s. When it goes off, we get someone to fix it, but it always seems to come back as such slow download speed.

Not sure what settings etc i need to post here, but it's using Haxorware version 1.1 revision 39.
Downstream
Frequency 331 MHz
Status Locked
Annex DOCSIS
Modulation QAM256
Symbol Rate 5360537 sym/sec
Receive Power 2.0 dBmV
Signal to Noise ratio 41.0 dB

Upstream
Frequency 29 MHz
Channel ID 4
Status Ready
Mode TDMA
Symbol Rate 2560000 sym/sec
Transmit Power 45.0 dBmV

SB6120 Restart POST FORM

Thu, 10 Feb 2011 15:34:45 +0000

I don't own one of these modems and I am looking for the POST FORM or a Wireshark dump of requesting the modem to restart from it's GUI.

Wireless Serial

Wed, 09 Feb 2011 05:05:51 +0000

Ok, I'm sure everyone loves sitting next to their modems when they are playing around with them, but i couldn't so i had to come up with a way that i could still have a serial connection to my modem but be two floors up. Well i had a few Xbee Radios laying around that would let me do just that here's what the ones i have look like

What these things are are little UART, or in most peoples words serial based modems. hey can operate in two modes, passive and API. i used the API mode in my senior design because i needed packet routing, but in this point to point case transparent is the only one we can use because the cable modem is spewing raw serial data. First i tried to run them at the modems default 115200 baud but i was dropping characters so i had to drop the baud down to 9600 which is actually what i prefer. it has the old school text window fill look haha. so first i had to set the baud rate in uboot, to do this use a usb to serial adapter.

U-Boot 1.2.0 (Apr 15 2008 - 17:24:31)
PSPU-Boot 1.0.0.4

DRAM:  64 MB
Found SPANSION Flash
Flash: 16 MB
In:	serial
Out:   serial
Err:   serial
Press SPACE to abort autoboot in 3 second(s)
=> showenv
Unknown command 'showenv' - try 'help'
=> printenv
bootcmd=while itest.b 1 == 1;do;if itest.b ${ACTIMAGE} == 1;then echo *** ACTIMA
GE = 1, will try to boot UBFI1 stored @${UBFIADDR1};aimgname=UBFI1; aubfiaddr=${
UBFIADDR1};bimgname=UBFI2; bubfiaddr=${UBFIADDR2}; bimgnum=2;else if itest.b ${A
CTIMAGE} == 2;then echo *** ACTIMAGE = 2, will try to boot UBFI2 stored @${UBFIA
DDR2};aimgname=UBFI2; aubfiaddr=${UBFIADDR2};bimgname=UBFI1; bubfiaddr=${UBFIADD
R1}; bimgnum=1;else echo *** ACTIMAGE invalid; exit;fi;fi;if autoscr $aubfiaddr;
then echo *** $aimgname bootscript executed successfully.;echo Start booting...o
otm ${LOADADDR};fi;echo *** $aimgname is corrupted, try $bimgname...;setenv ACTI
MAGE $bimgnum;if autoscr $bubfiaddr;then echo *** $bimgname bootscript executed
successfully.;echo Check image...;if imi ${LOADADDR};then echo Save updated ACTI
MAGE...;saveenv;echo Image OK, start booting...;bootm ${LOADADDR};fi;fi;echo Bac
kup image also corrupted...exit.;exit;done;
bootdelay=3
UBFIADDR1=0x48040000
UBFIADDR2=0x487F0000
sdelay=
update1=tftpboot 0x80000100 ${UBFINAME1} && protect off ${UBFIADDR1} +${filesize
} && erase ${UBFIADDR1} +${filesize} && sleep ${sdelay} && cp.b ${fileaddr} ${UB
FIADDR1} ${filesize} && protect on ${UBFIADDR1} +$tpboot 0x80000100 ${UBFINAME2}
 && protect off ${UBFIADDR2} +${filesize} && erase ${UBFIADDR2} +${filesize} &&
sleep ${sdelay} && cp.b ${fileaddr} ${BFIADDR2} DR2} +${filesize} && sleep ${sde
lay} && setenv ACTIMAGE 2 && saveenv
update_uboot=tftpboot 0x80000100 u-boot.bin && protect off 0x48000000 +${filesiz
e} && erase 0x48000000 +${filesize} && sleep ${sdelay} && cp.b ${fileaddr} 0x480
00000 ${filesize} && protect on 0x48000000 +${filesize}
update_uimage=tftpboot 0x80000100 uImage && protect off ${UBFIADDR1} +${filesize
} && erase ${UBFIADDR1} +${filesize} && sleep ${sdelay} && cp.b ${fileaddr} ${UB
FIADDR1} ${filesiz} && protect on ${UBFIADDR1} +${filesize}
update_sqfs=tftpboot 0x80000100 sqfs.img && protect off ${UBFIADDR2} +${filesize
} && erase ${UBFIADDR2} +${filesize} && sleep ${sdelay} && cp.b ${fileaddr} ${UB
FIADDR2} ${filesize} && protect on ${UBFIADDR2} +${filesize}
erase_env=protect off 1:2-3 && erase 1:2-3 && protect on 1:2-3
netretry=no
ubootpartsize=0x20000
envpartsize=0x10000
boardtype=tnetc550
UBFINAME1=dpc3000-v2-081211a.bin
UBFINAME2=dpc3000-v301r2372-081211a.bin
ethaddr=00:15:A4:XX:XX:XX
consolesecurity=disable
baudrate=9600
actimage=0
usbhostaddr=00.23.be.XX.XX.XX
filesize=36a800
fileaddr=80000100
gatewayip=192.168.100.10
netmask=255.255.255.0
ipaddr=192.168.100.1
serverip=192.168.100.10
ACTIMAGE=1
rootinfo=/dev/mtdblock6
evalval=0x40f78
mtdinfo=0x20000(U-Boot)ro,0x10000(env1),0x10000(env2),0x7b0000@0x40000(UBFI1),0x
7b0000@0x7f0000(UBFI2),0xcdc88@0x40f78(Kernel),0x29bc00(RootFileSystem)
bootargs=root=/dev/mtdblock6 mtdparts=spansion:0x20000(U-Boot)ro,0x10000(env1),0
x10000(env2),0x7b0000@0x40000(UBFI1),0x7b0000@0x7f0000(UBFI2),0xcdc88@0x40f78(Ke
rnel),0x29bc00(RootFileSystem),0x50000@0xfb0000(nvram) console=ttyS0,9600n8 etha
ddr0=00:15:A4:XX:XX:XXusbhostaddr=00.23.be.XX.XX.XX
LOADADDR=0x48040f2c
stdin=serial
stdout=serial
stderr=serial
ver=U-Boot 1.2.0 (Apr 15 2008 - 17:24:31)
PSPU-Boot 10.4

Environment size: 3255/65531 bytes
=>

in here we see that the baudrate var is already set to 9600 but on yours it probably set to 115200 as the default.
to change this type

setenv baudrate 9600[enter]

Now its asking you to change your baud rate to 9600 for your console baud and hit enter, after you do this save the environment by typing

saveenv[enter]

now that the uboot baud is 9600 we have to set the firmware to be also, in order to do that type boot and set your console back to 115200bps and run this after it finishes booting,

cli docsis/Production/prodset

and when you get to the baudrate setting set it to 9600bps, and write it out.
reboot the modem and set your console back to 9600 and power cycle the modem and double check everything stayed as it should.

thats the easy part, now for the fun one.
for this to work you need a couple things
2x Xbee Radios, there are a ton of different antenna options, i needed some serious range so i went with the pro RPSMA versions and used some high gain wifi antennas but you dont have too, you can use the basic xbees with chip antennas and that should get you most of the way across a large house. here's a link to those -> http://www.sparkfun.com/products/8664

1x USB to Xbee Adaptor -> http://www.sparkfun.com/products/8687

1x Xbee Breakout Board -> http://www.sparkfun.com/products/8276
2x Xbee Sockets -> http://www.sparkfun.com/products/8272

and of course some solder, iron and some wire.

how to hook up the modems is the fun part, Parker has a good serial pinout for the DPC3k's here -> http://www.sbhacker....000-with-uboot/
Basically it goes like this
DPC XBEE
-----------------------------
TX ------------- DIN
RX ------------- DOUT
Ground ------- GND
3.3V pad ----- VCC

on this board there are 12v(really ~14v), 5, and 3.3 volt regulators
if you look in this pic you will see where ive got my wire soldered to, its a large power trace off of the voltage regulator thats perfect for this, ive also found a 5v just in front of the big RF cover of the cable demodulator use a DMM to poke around to find it ill post a pic up later with good spots.
http://carbinehunters.com/gallery/main.php?g2_view=core.DownloadItem&g2_itemId=7424
after youve got both sockets soldered down and everything soldered up to the board plug in your xbee in both cradles and plug the USB cable in.
After its fully assembled the Xbee Adapter will look like this
http://carbinehunters.com/gallery/main.php?g2_itemId=7440

then fire up your favorite serial terminal i like terra term..... and set your com port and start TESTING!

If it doesn't work double check your settings on both sides, and on the boards check the status LED's make sure the power LED is on and when your trying to talk to the modem the RSSI lights are lit, if the RSSI lights are not lit but the serial lights are flashing it usually means your two radios are too far apart.

For full sized images check out my gallery here -> http://carbinehunter...?g2_itemId=7406

Carbinefreak

Critical No Ranging Response received -T3 time-out

Tue, 08 Feb 2011 19:10:48 +0000

I've flashed my SB5100 with SB5100Mod but the third light is always blinking and the log has:
Critical No Ranging Response received -T3 time-out

SB5101/5100

Tue, 08 Feb 2011 15:41:10 +0000

my sb5101 5100 went but my subd sb4200 is up and running, can i used a sb4200 string on the sb5101 and the 5100?

Need Sb6120 virgin dump 8mb

Tue, 08 Feb 2011 08:50:26 +0000

There's one dump I found on the forum, but it's been banned I was wondering if theres any dumps anyone has that are preferably virgin and not subbed before. I was thinking of buying another sb6120 to screw around with but why my just flash my current one, haha. Please let me know! And send it to me!

I know that there are some dumps out there that are subbed those are fine too, but I'm just trying to play around with the sb6120 with bpi+ enabled,

Thanks so much!!

I think I corrupted my certs...

Tue, 08 Feb 2011 08:30:23 +0000

Trying to take the ez route...

I think I corrupted my certs to my 6120. I flashed about a year ago with soldered on connections (needless to say, they are not still connected. My modem is only Alpha software. Is there an easier way to "fix" this than re-soldering the jtag wires? Maybe I am just being lazy, but I still haven't seen 50MB other than on my subbed modem! Anyone have an easy way to get from Alpha to Beta and full flash without reworking this damn thing?

thanks

Boomin

and one last thing...isn't Alpha always first and then Beta after?? Or am I reading these threads wrong...Short version: which one is the lateset???

question (noob here)

Tue, 08 Feb 2011 07:09:40 +0000

Flashing an SB5120 using Parallel JTAG cable

Tue, 08 Feb 2011 04:06:01 +0000

I am trying to flash an SB5120 using a blackcat parallel jtag cable that I built myself. Here's the pinout that I'm using:

Jtag Pin -> Parallel Pin -> Name
1 -> 9 -> TRST
2 -> 25 -> GND
3 -> 8 -> TDI
4 -> 24 -> GND
5 -> 11 -> TDO
6 -> 23 -> GND
7 -> 7 -> TMS
8 -> 22 -> GND
9 -> 6 -> TCK
10 -> none -> GND
11 -> none -> RST
12 -> none -> Key
13 -> none -> DINT
14 -> none -> Voltage Ref

The software I've tried is Blackcat V128, Tom's Jtag Utility, and the modified jtagspi.

None of them work, and none of them detect the firmware or CPU, also, I've tried the reset command, but none of them recognize it (always say script not found).

I've also checked for continuity all the way from the solder points on the back of the modem PCB to the pins on the parallel cable that go into the PC.

I've been able to program an SB5100, an SB5101, and an SB6120, but this one's giving me trouble.

Any advice would be appreciated, I'm guessing my problem is with my pinouts, but I can't find a very definitive guide on how to make a parallel jtag cable for this model, so I tried to piece the information together.

SB5101 Factory(original) firmware

Tue, 08 Feb 2011 01:17:50 +0000

Hi, I am new to this forum. Maybe this question has been asked before. Can anyone tell me where I can get the factory(original) firmware that was shipped with the SB5101?

EPC2203 as SIP VOIP gw for ethernet?

Mon, 07 Feb 2011 22:02:47 +0000

Hi!

This might be very stupid question. Would it be possible to use EPC2203 hardware as a SIP gateway for ethernet? I mean connect ethernet port to home RJ45 network and use tel1 to connect analog phone to take sip calls? I have DSL connection and one EPC2203-NS left over.

Thanks!
Raido

sb5101-sb5100

Mon, 07 Feb 2011 16:19:39 +0000

Can some one help me out here can a sb5101 run as a sb5100?

what can my "ISP" see when the diag modem is connected?

Mon, 07 Feb 2011 14:58:37 +0000

I've set up my diagnostic modem with ease thanks to the various FAQs here, and have been toying around with the settings. my question is that what can my ISP actually see when my diagnostic modem is up and running? as far as i've been around here in the forums, i think these are:

MAC of modem
MAC of computer connected to modem
modem identifiers - hfc mac, usb mac, serial number (?)
certificate type (?)
config file (?)

not sure but does my isp see the autoserved config file or the downloaded config file from the tftp server?

HAX 1.1 Rv 39 bricked?

Sun, 06 Feb 2011 12:58:34 +0000

hi all

having trouble with my modem i recebtly deleated the ethernet mac in hax setup page think it would go bk to the original one saved and rebooted modem, now i cany access 192.168.100.1 tried everything including manuel set up of 192.168.100.1 still no luck.

when its set to automatic

dhcp is enabled but i get ip of 162.etc windows default

can reflash as i bought this modem, i only have a standerd sub with fits into the back,

any ideas please

How to restore stock firmware?

Sun, 06 Feb 2011 00:09:33 +0000

Comcast thinks this modem is a sb6120 because I spoofed it before. What's the easiest way to get the stock firmware back on the modem without losing certs? Comcast keeps trying to download and install the sb6120 firmware and it fails because I have a sb5101.

SB5100MOD BPI+ SAID (EC=8) ERROR ????

Sat, 05 Feb 2011 23:38:04 +0000

i got the new used modem and flashed with SB5100MOD and have the working mac on it and all the lights come on green and online also green and solid but have this message in the 192.168.100.1 so help me out guys don't know what im doing wrong

* 2011-02-05 17:48:16 5-Warning 0x03F000DE Map Reject - Downstream Traffic Flow Not Mapped to BPI+ SAID (EC=8)
* 2011-02-05 17:47:57 3-Critical 0x040D9A2C DHCP WARNING - Non-critical field invalid in response.
* 2011-02-05 17:47:47 3-Critical 0x04E33948 No Ranging Response received - T3 time-out
* 1970-01-01 00:01:04 3-Critical 0x040D9A2C DHCP WARNING - Non-critical field invalid in response.
* 1970-01-01 00:00:50 3-Critical 0x04E33948 No Ranging Response received - T3 time-out

Hacking the Thompson DCM475 Modem, Need help...

Fri, 04 Feb 2011 17:44:05 +0000

Hello Guys, have anyone try doing the Thompson DCM475?

If so, can someone provide me a link "to how" is done. Thanks in advance for the response.

Configuration in Orlando SB5101

Fri, 04 Feb 2011 15:45:40 +0000

Hey I have a SB5101 with haxorware 1.1 R39 that I am trying to get working
Im in Orlando and my ISP is BrightH0use.
Im being told that here is different and that all I need is a valid mac and thats it.
My question is what config do i need to have in the settings to make it work with just the mac? what do i do with the bpi? ip? etc.

Thanks in advance.

AMBIT U10C007 rev 2

Fri, 04 Feb 2011 05:14:15 +0000

Hello,

I am wondering if this CM can be done - so far max232 gives the following - no dedicated jtag port...
cannot break the boot process to force it to go into recovery/tftp mode... if detects crc err it reloading 1st & 2nd copy of the image from the flash... until it finally crashes...

Quote

BCM3348A1
1346890
MemSize: .........................16M
Flash detected @0xbe000000

Signature: 3348

Broadcom BootLoader Version: 2.1.5 Gnu
Build Date: Mar 9 2004
Build Time: 14:43:53

Image 1 Program Header:
Signature: 3348
Control: 0005
Major Rev: 0002
Minor Rev: 0000
Build Time: 2005/10/25 09:25:44 Z
File Length: 1746701 bytes
Load Address: 80010000
Filename: vxram_sto.bin
HCS: 89a4
CRC: 2710eef8

Image 2 Program Header:
Signature: 3348
Control: 0005
Major Rev: 0002
Minor Rev: 0000
Build Time: 2007/9/12 01:39:36 Z
File Length: 1750433 bytes
Load Address: 80010000
Filename: vxram_sto.bin
HCS: 02d2
CRC: 9c1dc77b

.

Performing CRC on Image 2...
Detected LZMA compressed image... decompressing...
Target Address: 0x80010000
.....................................
Decompressed length: 9701311

Executing Image 2...

3348
Create task Eri1, priority set to 200, stacksize=2048
NFS client support not included.
usrRoot:usrNetInit: complete!
Loading symbol table from admin:/vxWorks.st.sym ...Error opening admin:/vxWorks.st.sym: status = 0xd0001

Hello... and welcome to the wonderful world of vxWorks!!

CmTargetLowLevelInit: Loading Flash/ProgramStore/NonVol drivers...
Place Backup into region # 30
CmTargetLowLevelInit: Creating singletons for ProgramStore/BootloaderStore/NonVol devices...

Detecting the next image number that we will store to by default...
0x14 Computing CRC32 over image2 to ensure that it is valid...
0x10e Done computing CRC32!
By default, we will dload to image number 1!

CableTrafficMon Started!

**********************************
Install Reset Switch Callout
**********************************
BcmRipClientThread::GetSingletonInstance: WARNING - the singleton instance is NULL, and someone is accessing it!

Reading Permanent settings from non-vol...
Checksum for permanent settings: 0x191ac4c8
Settings were read and verified.

Reading Dynamic settings from non-vol...
Checksu

yes, Checksu is the last thing it spits out, than goes into the freq scan

Paralell JTAG on USB port?

Fri, 04 Feb 2011 02:37:04 +0000

Hi guys, I was wondering how to connect a JTAG (which I see is a paralell port on the computer side) to a USB port on my laptop? I do NOT have parallel ports on my laptop or any other accesible computer. And I feel USBJTAG is a bit out of my wallet, considering the cheap cost of the whole cablemodem itself.

I just bricked my modem (DPC2100R2 HW v 2.1), the lights remain lid all the time. Any good advice would be highly appreciated.

Thanks.

Routing

Thu, 03 Feb 2011 23:29:48 +0000

Hello guys... please help on this...

The thing is... I can "touch" my desired Gateway which is a real ip machine, but I can't get a route to it from my machine, the modem can and I can ping to it and my question is how to change the routing table?
I'm not in the modem now, but when it's got operational there's two 'interfaces' 'ipstack1' 'ipstack2'(something like that), one is the local ethernet port where I got the usual private IP and access the webgui or telnet and the another interface got another private IP but it has on the wan port and got access to the network, but in a "success" case, it will give me "route" to this network by the local ethernet port then I will get a IP directly from the dhcp server...

I have tryed to change the routing table but the CM> shell didnt have anything but the 'ipconfig' command, but in that case I need to setup up another interface... as I can remember now, the interfaces go like bmc0 bmc1 bmc3 and so on... please help me here, must have a way to work on the routing part of the modem...

felco,
thanks

edit: I have a more direct question now, maybe you guys can drop this info for me(please do that). My cable got a Class A Private IP. What I want to do is to have access from my machine to this exactly network. I just need a route to this network.

I should ask... Am I missing something here? Because, this is about BPI Bypass vs BPI 1.0 issue... in the 1.0 network, my modem seens to route everything to the cable network that comes from the local interface of the modem, and in the BPI Bypass mode it's not routing anything, is like everything drops. I'm so close, help me on this, please... gime something

please help a noob

Thu, 03 Feb 2011 17:13:58 +0000

Hello all,
ok i have searched & searched for and answer and I havent found one yet. please help. I bought a premodded sigma x 1.06 sb5100. i use bittorrent to download stuff. and the modem crashes EVERY 3 days. what can I do so it wont crash anymore.

Ambit 250 Resurrection

Thu, 03 Feb 2011 04:13:25 +0000

My 250 is now dead, when i first connected it, i could get the 1,2,p option, while it was flashing it froze (right after the part where i put in r39diag.bin) now nothing work, nothing show up on putty anymore, couldnt even access 192.168.100.1, tested my usb-ttl yea my serial is working fine.

I took screenshots when i first got the modem
Boot Code Version : 2.1.6d .......aka noisy bootloader (1,2,p)...also the same bootloader that came with Water's console unlocker package
Software Version : 2.93.1007

I tried Water's console unlocker, which only work for 2.94.1094, so it didnt work for me. Also tried all softjtag (3.01, 3.10, BBB's mod for sb5101 3.10) none of them could connect.

beside lifting the tsop, anything else i could try?

5101U

Thu, 03 Feb 2011 02:23:35 +0000

I have been reading a lot of posts. They keep saying USBjtag NT. I have the older USB clone (SB) are there any scripts I can use to do my 5101U?
Thanks guys

Question about flashing

Wed, 02 Feb 2011 22:14:37 +0000

Hello, Im new to the site and the whole modem jtag scene. I have a SB5101 modem and I used this tutorial to flash the modem with the haxorware. http://www.sbhacker.net/forum/index.php/topic/9504-program-5100-5101-commands/. Now my question is, where do I go from here, I went to 192.168.100.1 and everything checks out good but I cant connect online. The Comcast activation website pops up. Is there is a tutorial for me to follow that maybe Ive missed. Thanks

RCA DCM425 no internet!!

Wed, 02 Feb 2011 00:16:09 +0000

Hello all and thanks in advance but i am looking for some help with my modem.. All lights
are blinking normally except for the cable link light that is blinking very slowly and of course
there is no internet connection.. I am able to connect to the diagnostics web page and
everything shows a good status but i noticed that where it says Link to PC = 0 .. Any
help will be appreciated...

Bricked SB5102

Mon, 31 Jan 2011 23:02:59 +0000

Hi, i tryed to flash a SB5102 modem but while attempting to detect it now when i plug it in i get all the lights on then they go off and stay off including the power light i didn't read or write anyting to it ... i've been told its bricked is there any way to debrick it and does anyone have a good dump for the sb5102 its got the broadcom chip.
thank you

Boot file for SB5101 needed

Mon, 31 Jan 2011 20:08:02 +0000

Need to debrick a sb5101 can some one send me the boot file please?

SB4100 EOL so got a modded SB5101

Sun, 30 Jan 2011 20:52:59 +0000

SB4100 EOL so got a modded SB5101, can I use all the info from the sb4100?
I have limitted knowledge so just curious.

DPC2100r2 signal

Sat, 29 Jan 2011 15:10:11 +0000

hey guys i have a question ive set up my modem using the 1 click method it works great btw and have 10Mb connection the problem is that every 30 minutes my connection drops to 0.25 Kbps then jumps back up to 10 Mb anyone know of a fix or had a similar problem thanks in advance.

now its every 15 mins or so

Stock Dcm-315 all lights flashing at once

Sat, 29 Jan 2011 14:55:18 +0000

abcdefghijklmnop