Some more cheapies from the weekend – although not hugely successful, provided hours of interest.
- Solidoodle Press
- Ubiquiti Nanostation
- HFW5200-IRA camera
This was a nostalgic purchase, I originally purchased a Solidoodle 2 as my first printer and it was kinda cool to have one of their production models. I purchased it with the intent of buying spare parts and priced accordingly.
It didn’t come with a power supply so I soldered a PC PSU to provide the 12v. I have since found that it’s a 24v system, and by using a 20v 4amp laptop charger, I’ve been able great hot end temps and reasonable heated bed temps.
Initial tests proved successful and it connected to Repetier Host, homed the axis’s and the heated bed and hot end warmed. I have plenty of spares to help fix those issues although if the reviews are anything to go by, it may not be worth the effort/time.
The build plate also needs tightening because it was quite loose with a 2cm+ drop
It came with the power injector which provided power but no ethernet link on either main or secondary. I attached a serial cable to the console port and the boot stopped after DRAM initialization. My bet is that the flash chip is fried – No further work will be done on this device.
This provided the most interest. It booted with POE from a HP switch. by using wireshark and following some guides I was able to see that it was asking for TFTP files.
After much guess work, I connected to the serial port to get extra information. After even more work I was able to get the following information from the camera:
--Partition Information-- name cs offset size flag U-Boot 0 0x0000000000200000 0x0000000000100000 0x00000000 hwid 0 0x0000000000300000 0x0000000000100000 0x00000000 updateflag 0 0x0000000000400000 0x0000000000100000 0x00000000 partition 0 0x0000000000500000 0x0000000000100000 0x00000000 custom 0 0x0000000000600000 0x0000000000340000 0x00000000 product 0 0x0000000000940000 0x0000000000340000 0x00000000 Kernel 0 0x0000000000c80000 0x0000000000580000 0x00000000 romfs 0 0x0000000001200000 0x0000000000800000 0x00000000 web 0 0x0000000001a00000 0x0000000000800000 0x00000000 user 0 0x0000000002200000 0x0000000001980000 0x00000000 syslog 0 0x0000000007200000 0x0000000000400000 0x00000000 config 0 0x0000000007600000 0x0000000000400000 0x00000000 backup 0 0x0000000007a00000 0x0000000000400000 0x00000000 --Help-- ? - alias for 'help' base - print or set address offset bdinfo - print Board Info structure boot - boot default, i.e., run 'bootcmd' bootd - boot default, i.e., run 'bootcmd' bootf - boot from flash bootm - boot application image from memory bootp - boot image via network using BOOTP/TFTP protocol cmp - memory compare coninfo - print console devices and information cp - memory copy crc32 - checksum calculation dcache - enable or disable data cache echo - echo args to console editenv - edit environment variable exit - exit script false - do nothing, unsuccessfully flwrite - flwrite - write data into FLASH memory go - start application at address 'addr' gpio - gpio test hal - Perform RESET of the CPU help - print command description/usage hwid - hwid - set hardware id and save to flash icache - enable or disable instruction cache iminfo - print header information for application image itest - return true/false on integer compare kload - kload - load uImage file from parttion lip - lip - set local ip address but not save to flash loadb - load binary file over serial line (kermit mode) loads - load S-Record file over serial line loady - load binary file over serial line (ymodem mode) loop - infinite loop on address range mac - mac - set mac address and save to flash md - memory display mii - MII utility commands mm - memory modify (auto-incrementing address) mtest - simple RAM read/write test mw - memory write (fill) nand - NAND sub-system nboot - boot from NAND device nm - memory modify (constant address) partition- print partition information ping - send ICMP ECHO_REQUEST to network host printenv- print environment variables rarpboot- boot image via network using RARP/TFTP protocol reset - Perform RESET of the CPU run - run commands in an environment variable saveenv - save environment variables to persistent storage setenv - set environment variables showvar - print local hushshell variables sip - sip - set server ip address but not save to flash sleep - delay execution for some time smi - MII utility commands source - run script from memory sync_uboot- sync_uboot - sync uboot to uboot-bak test - minimal test like /bin/sh tftpboot- tftpboot- boot image via network using TFTP protocol true - do nothing, successfully uartUp - uartUp- update image via uart using uart4 usbdl - The command execute actions over USB --Print Environment-- printenv bootdelay=3 baudrate=115200 ipaddr=192.168.1.108 serverip=192.168.1.1 autoload=yes gatewayip=192.168.1.1 netmask=255.255.255.0 wifiaddr=00:12:34:56:78:91 dh_keyboard=1 appauto=1 sysbackup=1 logserver=127.0.0.1 loglevel=4 autosip=192.168.254.254 autolip=192.168.1.108 autogw=192.168.1.1 autonm=255.255.255.0 ethact=ambarella mac BSN=PC4JA051W00016 HWID=IPC-HFW5200:01:02:02:15:0A:07:01:02:01:01:04:210:03:00:02:04:00:00:00:00:100 devalias=IPC-HFW5200-IRA ID=TGC4MW021W00002 ethaddr=4C:11:BF:87:9B:40 da=tftp 0xc2000000 dhboot.bin.img; flwrite; tftp dhboot-min.bin.img;nand protect off;flwrite;nand protect on dr=tftp 0xc2000000 romfs-x.ubifs.img; flwrite dk=tftp 0xc2000000 kernel.img; flwrite du=tftp 0xc2000000 user-x.ubifs.img; flwrite dw=tftp 0xc2000000 web-x.ubifs.img; flwrite ds=tftp 0xc2000000 dsp-x.ubifs.img; flwrite dc=tftp 0xc2000000 custom-x.ubifs.img; flwrite dt=tftp 0xc2000000 data-x.ubifs.img; flwrite df=tftp 0xc2000000 fpga.img; flwrite up=tftp 0xc2000000 update.img; flwrite tk=tftp 0xc2000000 uImage; bootm bootcmd=nand read 0xc2000000 0x00c80000 0x00580000;bootm 0xc2000000 bootargs=console=ttyS0 mem=138M ubi.mtd=romfs root=ubi0:romfs ro rootfstype=ubifs init=/linuxrc video=amb0fb:720x480,720x480,1,0 lpj=2392064 stdin=serial stdout=serial stderr=serial filesize=48 fileaddr=C5000000 --Boot console infomation-- U-Boot 2010.06-svn503 (Mar 11 2015 - 11:52:02) DRAM: 254 MiB NAND: 128 MiB state:ff,err_count:05 check partition....partition...custom...product...Kernel...romfs...web...user...OK restor partition... write 100% restor custom... write 100% restor product... write 100% (etc...)
After trying many different firmware combinations I stupidly tried to flash the boot firmware… It then took the long sleep and no further console information was available.
The camera didn’t have enough information to fully identify the model and manufacturer, but provided hours entertainment.