Ambit 250 and Ambit 256 wont come online now, both running haxoware

[chr1s74]

ive got 2 modems--a 255 and a canadian u10c018---both are on 1.1 rev 38

this is the log off the canadian junk!

1970-01-01 00:09:45CriticalT002.0SYNC Timing Synchronization failure - Failed to acquire FEC framing1970-01-01 00:09:44CriticalT001.0SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing1970-01-01 00:09:44CriticalT002.0SYNC Timing Synchronization failure - Failed to acquire FEC framing1970-01-01 00:09:43CriticalT001.0SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing1970-01-01 00:09:43CriticalT002.0SYNC Timing Synchronization failure - Failed to acquire FEC framing1970-01-01 00:09:43CriticalT001.0SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing1970-01-01 00:09:42CriticalT002.0SYNC Timing Synchronization failure - Failed to acquire FEC framing1970-01-01 00:09:42CriticalT001.0SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing1970-01-01 00:09:42CriticalT002.0SYNC Timing Synchronization failure - Failed to acquire FEC framing1970-01-01 00:09:37CriticalT001.0SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing1970-01-01 00:09:37CriticalT002.0SYNC Timing Synchronization failure - Failed to acquire FEC framing1970-01-01 00:09:30CriticalT001.0SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing1970-01-01 00:09:30CriticalT002.0SYNC Timing Synchronization failure - Failed to acquire FEC framing1970-01-01 00:09:30CriticalT001.0SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing1970-01-01 00:09:29CriticalR003.0Init RANGING Critical Ranging Request (17) Retries exhausted1970-01-01 00:08:53CriticalR002.0No Ranging Response received - T3 time-out (US 4)1970-01-01 00:08:50CriticalR003.0Init RANGING Critical Ranging Request (17) Retries exhausted1970-01-01 00:08:10CriticalR002.0No Ranging Response received - T3 time-out (US 3)1970-01-01 00:08:06CriticalR003.0Init RANGING Critical Ranging Request (17) Retries exhausted1970-01-01 00:07:15CriticalR002.0No Ranging Response received - T3 time-out (US 2)1970-01-01 00:07:11CriticalR003.0Init RANGING Critical Ranging Request (17) Retries exhausted1970-01-01 00:06:38CriticalR002.0No Ranging Response received - T3 time-out (US 1)1970-01-01 00:06:32CriticalR003.0Init RANGING Critical Ranging Request (17) Retries exhausted1970-01-01 00:04:43CriticalR002.0No Ranging Response received - T3 time-out (US 2)1970-01-01 00:04:39CriticalR003.0Init RANGING Critical Ranging Request (17) Retries exhausted1970-01-01 00:03:12CriticalR002.0No Ranging Response received - T3 time-out (US 1)1970-01-01 00:03:08CriticalR003.0Init RANGING Critical Ranging Request (17) Retries exhausted1970-01-01 00:01:37CriticalR002.0No Ranging Response received - T3 time-out (US 4)1970-01-01 00:01:31CriticalR003.0Init RANGING Critical Ranging Request (17) Retries exhausted1970-01-01 00:00:11CriticalR002.0No Ranging Response received - T3 time-out (US 3)1970-01-01 00:00:05NoticeM571.1Ethernet link up - ready to pass packets1970-01-01 00:01:18NoticeM573.0Modem Is Shutting Down and Rebooting...1970-01-01 00:01:18CriticalResetting the cable modem due to docsDevResetNow1970-01-01 00:00:56CriticalR002.0No Ranging Response received - T3 time-out (US 3)1970-01-01 00:00:52CriticalR003.0Init RANGING Critical Ranging Request (17) Retries exhausted1970-01-01 00:00:09CriticalR002.0No Ranging Response received - T3 time-out (US 1)1970-01-01 00:00:05NoticeM571.1Ethernet link up - ready to pass packets1970-01-01 00:01:17NoticeM573.0Modem Is Shutting Down and Rebooting...1970-01-01 00:01:17CriticalResetting the cable modem due to docsDevResetNow1970-01-01 00:01:02CriticalR002.0No Ranging Response received - T3 time-out (US 1)1970-01-01 00:00:58CriticalR003.0Init RANGING Critical Ranging Request (17) Retries exhausted1970-01-01 00:00:11CriticalR002.0No Ranging Response received - T3 time-out (US 3)1970-01-01 00:00:38NoticeM573.0Modem Is Shutting Down and Rebooting...CriticalR002.0No Ranging Response received - T3 time-out (US 4)1970-01-01 00:01:26CriticalR003.0Init RANGING Critical Ranging Request (17) Retries exhausted1970-01-01 00:00:46CriticalR002.0No Ranging Response received - T3 time-out (US 2)1970-01-01 00:00:42CriticalR003.0Init RANGING Critical Ranging Request (17) Retries exhausted1970-01-01 00:00:08CriticalR002.0No Ranging Response received - T3 time-out (US 3)1970-01-01 00:02:05NoticeM573.0Modem Is Shutting Down and Rebooting...1970-01-01 00:02:05CriticalResetting the cable modem due to docsDevResetNow1970-01-01 00:01:23CriticalR002.0No Ranging Response received - T3 time-out (US 4)1970-01-01 00:01:19CriticalR003.0Init RANGING Critical Ranging Request (17) Retries exhausted1970-01-01 00:00:08CriticalR002.0No Ranging Response received - T3 time-out (US 3)1970-01-01 00:00:06NoticeM571.1Ethernet link up - ready to pass packets


this is the log off the 255--

1970-01-01 00:01:29 Critical R002.0 No Ranging Response received - T3 time-out (US 4)
1970-01-01 00:01:26 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted
1970-01-01 00:00:46 Critical R002.0 No Ranging Response received - T3 time-out (US 2)
1970-01-01 00:00:42 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted
1970-01-01 00:00:08 Critical R002.0 No Ranging Response received - T3 time-out (US 3)
1970-01-01 00:02:05 Notice M573.0 Modem Is Shutting Down and Rebooting...
1970-01-01 00:02:05 Critical Resetting the cable modem due to docsDevResetNow
1970-01-01 00:01:23 Critical R002.0 No Ranging Response received - T3 time-out (US 4)
1970-01-01 00:01:19 Critical R003.0 Init RANGING Critical Ranging Request (17) Retries exhausted
1970-01-01 00:00:08 Critical R002.0 No Ranging Response received - T3 time-out (US 3)
1970-01-01 00:00:06 Notice M571.1 Ethernet link up - ready to pass packets


this is all i get!!!

help!lol

[Foxylady]

Have the same issue, modem will not come back online, 255 with working macs.
Anyone have any further on this?
Many thanks

[sr20]

Originally Posted by Foxylady

Have the same issue, modem will not come back online, 255 with working macs.
Anyone have any further on this?
Many thanks

Posted in a few threads mate. A lot of areas have just gone fully dynamic with BPI+ on the 10 and 20m MACS.

Try a 2meg MAC, old Docsis 1.0 frequency, don't force anything

sr20

[G77]

with you now sr20. yes, they've done exactly what your talking about in my area.

the new freq now wont accept anything and the old freq will only accept macs with assigned docsis 1.0 configs. some 20mb macs are still getting docsis 1.0 configs depending on where they come from (which i know). Obv, im using these.

need a new exploit.

[sr20]

Originally Posted by G77

with you now sr20. yes, they've done exactly what your talking about in my area.

the new freq now wont accept anything and the old freq will only accept macs with assigned docsis 1.0 configs. some 20mb macs are still getting docsis 1.0 configs depending on where they come from (which i know). Obv, im using these.

need a new exploit.

Nasty isn't it. Yeah i've only got 2x 20meg 1.0's out of like 200. Not easy to come by

sr20

[G77]

heh, we need a way to get 'physical access' to the modems over hfc, lol

[sr20]

Originally Posted by G77

heh, we need a way to get 'physical access' to the modems over hfc, lol

Yeah the Americans can do it via SNMP, but it's disabled on VM by the settings in the configs. So even if we mod our own modems to be able to send SNMP queries over HFC, the sub modems won't respond with the certs cos not in factory mode..

****ing about with bitfiles could be an option for someone to look @, force subs into factory mode.

sr20

[kevin1877uk]

hi guys, big thanks for the post, very new to this, i guess with all have to be new to this at some point, very interesting and i'm sure i'll get there at some point and then think what the heck was all the fuss over, thanks ant for you post, very interesting read and i did start to do it what you said than i came across a problem, and not really sure of what to do, maybe if i go away and get a coffee and come back to it later i'll get it. but if i don't could you throw some light on to it for me

you said

Then run the tftp server from solar winds

Click file then configure, then highlight tftp root, then click the haxoware11rev32.bin file then click ok.

i got to this part then i don't know what to do, highlight tftp root then what?? where do i click haxoware??

well, i'm going to get that coffee, the computer done my head in for one day, take care guys and many thanks for the post

[ant16151189]

have you put haxorware11rev32.bin in the tftp root folder, if you havent it wont come up in solarwinds when you press configure.

i have attached screenshot of what it should show.

[chr1s74]

well thats all well and good but what i cant understand is that ive got modems that work which are set up exactly the same way as the one that does not--ie rev38 hax. its just the ranging thats the issue?--ive given up on the canadian one altogether!