ryn0909

i wish i would have seen this post earlier, i have an itx dvr similar to yours

Hi, i got this wireless camera from a friend who lost the receiver to it. unfortunatly he doesnt know who the maufacturer is. ive attached pics of the camera. the only identifying marks on it are on the circuit boards inside: H-4LA 20030905 and H-4CO4 051026

that link doesnt work

Im looking for a mainboard for my ITX anf-1648 standalone dvr unit. The mainboard is labeled MAFS116c and it carries a TI davinci dm6467 processor.

are they still spoken for?? if not ill take them

I have an ITX ANF1648 standalone dvr and i bricked it. im trying to find someone who does dvr repair at the board level, namely JTAG. because im pretty sure thats what its gonna take to be able to bring this unit back to life. so if anyone knows of a company or individual who does this kind of repair, pls let me know

here a link to my ftp server so u can download the firmware file, once you dl it, let me me know i pm'd you the link

ill send it to ya later today

anyones help is greatly appreciated....

and here is the PRINTENV log.... DM6467 EVM # printenv printenv bootargs=console=ttyS0,115200n8 ninitrd rw ip=192.168.100.79:192.168.100.10:192.168.100.1:255.255.255.0 root=/dev/nfs nfsroot=192.168.100.10:/home/evm/filesys,nolock mem=120M eth=00:11:60:ff:00:79 baudrate=115200 rootpath=/home/evm/filesys_anf bootfile=_anf_1648/anf1648_uImage.900M kerimgfile=_anf_1648/anf1648_uImage.900M ubootfile=_anf_1648/anf1648_uboot.bin stdin=serial filesize=940 fileaddr=84000000 netmask=255.255.255.0 ipaddr=192.168.100.79 serverip=192.168.100.10 bootnand=nboot.i 80200000 0 $(nand_ker_base) param1=setenv bootargs console=ttyS0,115200n8 noinitrd rw param2=setenv bootargs $(bootargs) ip=$(ipaddr):$(serverip):$(gatewayip):$(netmask):anfdvr:eth0: param2_noip=setenv bootargs $(bootargs) ip=::::NFDVR:eth0:off param3=setenv bootargs $(bootargs) root=/dev/nfs nfsroot=$(nfshost):$(rootpath),nolock param3_yaffs2=setenv bootargs $(bootargs) root=/dev/mtdblock9 rootfstype=yaffs2 param3_jffs2=setenv bootargs $(bootargs) root=/dev/mtdblock9 rootfstype=jffs2 param4=setenv bootargs $(bootargs) mem=120M eth=$(ethaddr) mkparam=run param1 param2 param3 param4 mkparam_yaffs2=run param1 param2 param3_yaffs2 param4 mkparam_yaffs2_noip=run param1 param2_noip param3_yaffs2 param4 mkparam_jffs2_noip=run param1 param2_noip param3_jffs2 param4 setbfile=set bootfile $(kerimgfile) bootcmd7=goboot;run mkparam_yaffs2_noip bootnand;bootm; bmode7=setenv bootcmd $(bootcmd7) uur=tftp 84000000 $(ubootfile); fw_uboot_ublup tftp tmp_addr=0x84000000 nand_ker_len=0x400000 nand_ker_base=0x800000 nand_ker_limit=0xc00000 ulkerimg=tftp $(tmp_addr) $(kerimgfile) nand_ker_up=run ulkerimg nand_ker_er nand_ker_wr nand_ker_wr=nand write $(tmp_addr) $(nand_ker_base) $(nand_ker_len) $(nand_ker_limit) nand_ker_rd=nand read $(tmp_addr) $(nand_ker_base) $(nand_ker_len) $(nand_ker_limit) nand_ker_er=nand erase $(nand_ker_base) $(nand_ker_len) nand_bmp_base=0x600000 nand_bmp_limit=0x800000 logo=run nand_bmp_rd nand_bmp_go ulbmplogo=tftp $(tmp_addr) $(logobmpfile) nand_bmp_up=run ulbmplogo nand_bmp_er nand_bmp_wr nand_bmp_wr=nand write $(tmp_addr) $(nand_bmp_base) $(nand_bmp_len) $(nand_bmp_limit) nand_bmp_rd=nand read $(tmp_addr) $(nand_bmp_base) $(nand_bmp_len) $(nand_bmp_limit) nand_bmp_er=nand erase $(nand_bmp_base) $(nand_bmp_len) bootcmd=goboot;run mkparam_yaffs2_noip bootnand;bootm; passwd=qwerty gatewayip=192.168.1.1 stdout=serial stderr=serial model_type=ANF_1648 nand_bmp_len=0x200000 signal_type=ntsc ethaddr=00:11:5F:06:80:61 bootdelay=1

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2015.05.11 01:25:37 =~=~=~=~=~=~=~=~=~=~=~= help help ? - alias for 'help' alarm - alarm in all_set_env - environment variable setting alpu - alpu test anf1648_spot [[input ch] or [off]] [output ch] - anf1648 spot test ata - ata test port(0,1,2,3) atm0424_spot [ch_num(1~4) or 0 is all off] - atm0424 spot test atm1624_spot [ch_num(0~15) or off] - atm1624 spot test atm_fs_wr [filename] - atm filesystem write ex) atm_fs_write [jffs2 image name] autoscr - run script from memory base - print or set address offset bdinfo - print Board Info structure beef_test [usec] boot - boot default, i.e., run 'bootcmd' bootd - boot default, i.e., run 'bootcmd' bootm - boot application image from memory bootp - boot image via network using BootP/TFTP protocol bz - bz [on] or [off] cls - clear screen cmp - memory compare coninfo - print console devices and information cp - memory copy cp_rev - nand flash reverse copy crc32 - checksum calculation ddc test - ddc testdhcp - invoke DHCP client to obtain IP/boot params disp_fw_ver - f/w version display driver_test - dt [sensor] or [panel] or [reset] or [js] or [rc] [st] echo - echo args to console env_erase [nor or nand] erase - erase FLASH memory fact mk_master [filename] [address] - firmware file load(from tftp) fact nand_copy [reverse or none_reverse] - nand copy fact nand_erase - nand erase and create bbt fact init - nand init fact nand_dump [cnt] - nand dump as page cnt fact markbad [nand_chipsel(0or1)] [offset] - nand markbad in oob data fact markbad_release [nand_chipsel(0or1)] [offset] - nand bad block mark release fact lcd - lcd display test fact buzzer - buzzer test fact uur - uboot upgrade (CS2=>CS3) fact chipsel [chip_num] - nand chip select change factv fs - verify filesystem factv ker - verify kernel factv fpga - verify fpga fan - fan [on] or [off] flinfo - print FLASH memory information fpga up [tftp or nand] - fgpa upgrade fpga rd [addr] - fgpa addr dump fpga er [blk_num] - fgpa block erase fpga id - fgpa id read fs1648 - fs1648 init fw_hparam get - get boot param fw_hparam set eth [mac address] - set mac address fw_hparam set pt [pannel type] - set pannel type fw_hparam set hw_ver [hw_ver] - set h/w version fw_hparam set vendor [vendor name] - set vendor name fw_param_erase - firmware paremeter erase fw_seq_read - current seqence read fw_seq_up - sequence number pdate fw_ublup - uboot upgrade with nand or tftp fw_uboot_ublup - uboot upgrade with nand or tftp go - start application at address 'addr' goboot - firmware boot select godown - firmware down grade help - print online help hhh icrc32 - checksum calculation iloop - infinite loop on address range imd - i2c memory display iminfo - print header information for application image imls - list all images found in flash imm - i2c memory modify (auto-incrementing) imw - memory write (fill) inm - memory modify (constant address) iprobe - probe to discover valid I2C chip addresses itest - return true/false on integer compare lcd_test - lcd test [clr] or lcd test [x] [y] [string] led test loadb - load binary file over serial line (kermit mode) loads - load S-Record file over serial line loady - load binary file over serial line (ymodem mode) loop - infinite loop on address range mcompare - compare between memory and memory md - memory display mdin220 init - midin220 intialize mdin220 write [reg] [data] - midin220 reg write mdin220 read [reg] - midin220 reg read mdin220 id - midin220 read device id mdin240 init - mdin240 intialize mdin240 write [reg] [data] - mdin240 reg write mdin240 read [reg] - mdin240 reg read mdin240 mwrite [reg] [data] [data].. - mdin240 reg write mdin240 mread [reg] [length] - mdin240 reg read mdin240 id - mdin240 read device id mdin240_init - mdin240 initnitializemm - memory modify (auto-incrementing) mtest - simple RAM test mw - memory write (fill) nand - NAND sub-system nand_bmp_up_pong - bmp write in pong bmp sectioin nand_rw_test - nand read / write testnnand_test - nand test nboot - boot from NAND device nfs - boot image via network using NFS protocol njw check - njw1156a device check njw read l - left volume read njw read r - right volume read njw write l [val] - left volume write njw write r [val] - right volume write nm - memory modify (constant address) ntest - just nand test command - ntest bad [block_num] - ntest erase [block_num] [page_num] - ntest read [block_num] [page_num] ping - send ICMP ECHO_REQUEST to network host printenv- print environment variables protect - enable or disable FLASH write protection qc_test - enter qc test(one more press keypad '1') rarpboot- boot image via network using RARP/TFTP protocol relay - relay test renv - env_reloadreset - Perform RESET of the CPU rs485 [uart num] - rs485 [uart num] rtc - rtc init - rtc read - rtc write year mon day hour minute second [wday] => wday for ds1339 run - run commands in an environment variable saa7121 - saa7121 saveenv - save environment variables to persistent storage sc_rc - sc_rc setenv - set environment variables sleep - delay execution for some time spi_init- spi init spi_read- spi_read addr(hex) length(hex) spi_write- spi_write addr(hex) data(hex) test_rc - remocon test tftpboot- boot image via network using TFTP protocol timer [sec] - timer tick test timer_test - timer test tw286x init - tw286x initialize tw286x rd [register] - tw286x register read tw286x wr [chip_num] [register] [data] - tw286x register read uart init [uart_num] [is_loopBack_enable] - uart init uart rx [uart_num] - receive string uart tx [uart_num] [string] - transmit string uart tx.g [uart_num] [genesis cmd] - tx.g is for genesys command uart2 test uart_p - uart print read value 50 uart_r - uart read uart_r2 - uart 2 read uart_w - uart write uart_w2 - uart2 write fw_uboot_check - uboot upgrade variable check uwrite - uboot upgrade command version - print monitor version video_test color_bar - video color bar test video_test gray_scale [divide] - video gray scale test vmux_init - video mux initialize vp [display_img] - display image from nand vp [display_clr] - diaplay clear (white) vp [pal] - pal logo test vp_cap - video capture test vp_rise - Set vpif clock 27MHz yyy - uart init DM6467 EVM #

UPDATE I finally managed to stop the AUTOBOOT via the rs232 connection to my pc. apparently there is a key sequence that you must press using the RC (remote control) it goes as follows: L mouse button, R mouse button, rewind button, fast forward button then pause button. the unit will give a few short beeps as it powers on from standby mode. That key sequence allows the boot process to be interrupted by using the * key on the numerical keypad section of the keyboad. so i am now able to get a command prompt, such as: DM6467 EVM# ......Ill post updates as i continue to make progress.....

do u mean a new "folder" or an actual "file" ???

well i managed to fix the problem with the rj45 port. the problem was in the firmware. after a gazillion factory resets and system reboots, it finally corrected itself. I was also able to get their tech support guy to send me the link to download the firmware file. but now the dvr doesnt see the firmware file on my usb flash drive. it sees the flashdrive itself and shows it as removable storage in the system menu, but the firmware file doesnt show up in the list. im using a san disk cruzer micro 4gb formatted fat32. i just dont get it..... any ideas??

ok well i finally managed to get my hands on the firmware file for this unit. its quite large in size (89.4mb) and it has a .nbn extension. can i modify this file to set the autoboot delay to 3? if so, can i use a hex editor to do so?