what is flash memory full Part No. on Cisco EPC3000/DPC3000? SPANSION S25FL064xxxxxxxxx

i have a 5101E motorola with haxoware lite i have this error on my log E207.0 Configuration File CVC Validation Failure, i know my certificate is damage i also know that i cant scan on TWC for new macs or config files.

1. how do i get the novol file from a modem provisioned with TWC or how can i do it get the certificates from it

I am wondering how I can get a nonvol from sb5101 virgin dumps. More specifically I am trying to pull certs from them. I noticed an animated GIF that drew posted, although it requires usb jtag and I can't find the cracked version anywhere, and the sbhacker link is broken. So I am wondering what is the easiest way to get the nonvol from the dump, so I can then pull the certs from the nonvol?

wheres the tutu to insert certs to 5101 runing sigma...
thank you

I have BPI+ cable modem certificate and BPI+ manufacturer certificate. But where to get Root CA certificate and CM Private key?

Overall which chipset is better for a legit modem: BCM3368 or Puma4 ? and why...

I am all the way to fully operational on my haxo 39 sb5101 but I still cant get online. my isp is comcrap and im getting d11_walledgarden.cm. what do I do?

---

I also get on log illegal set. is that as bad as it sounds?

I've read & read several forums before I started but I end up bricking my SB6121. This is what I did...

USBJTAGNT_____SPI________ISP
Pin1----------------------------->R153 (R/S)
Pin3-------------->Pin15
Pin5-------------->Pin8
Pin9-------------->Pin16
Pin11------------>Pin7
Pin2------------->Pin10 (GRN)

I connected the jtag open up the program, jtag detected, plug the power on the modem, green light on, hit ID but flash was not detected. I tried letting the modem boot up, then connecting the jtag & still got the same result. I verified connection points and tried again. Once I power the modem the send, received & ethernet light are on but no power light? Modem is bricked!

I'm confused about the ISP point & what procedure to follow? I was going to used external power but since I have a known ISP point decided to go with this setup here...
http://www.haxorware.com/forums/thread-2596.html

BTW: I also tried Pin2 ISP (U7) to USBJATNT Pin1 but modem doesn't power.

As per title, I have a stale arp and do not know how to clear it. I only use this modem with my ps3 online, so how to clear the whole table or just that one entry, doesnt matter. My searches yeilded results such as using a script, but this is generally done from isp end. I'd like to acheive this without reflashing to clear it. Anyone have any ideas? Thank you.

I can connect any other device to the modem and it works fine, it's just the ps3. I have also connected the same ps3 to my sub line and it works fine there to. So I assume stale arp.

also running the latest hax0rware on this one, diag.

Hi everyone!

first off all I'm going to tell you my problem.

six months ago I get my first and only sb5101 with Haxoware Version 1.1 Revision 39, everything was working perfect 27 Mb aprox (forced config), but from 3 weeks to now I just have 1 Mb, (that's the legal speed that I'm Paying) also I'm using the Mac Addres from my legal modem into my Sb5101.
i'll tried with diferent BPI settings but nothing works.

here's my Telnet Log (no real MAC's by the way)

Quote:Haxorware integrated telnet daemon

Username: root
Password: *****
Welcome.
CM>
CM> cd0x0001757a [DHCP Server Thread] BcmDhcpServerThread::ThreadMain: (DHCP Server Thread) Callback request expired:
timerDuration secs = 1
current time secs = 95
elapsed time secs = 1
CM> cd n/b

Active Command Table: BFC Application Settings Commands (bfcApp)

CM -> non-vol -> bfcApp

CM/NonVol/BfcApp> 0x0001a0c2 [DHCP Server Thread] BcmDhcpServerThread::ThreadMain: (DHCP Server Thread) Callback request expired:
timerDuration secs = 1
current time secs = 106
elapsed time secs = 1
CM/NonVol/BfcApp> 0x0001cc0a [DHCP Server Thread] BcmDhcpServerThread::ThreadMain: (DHCP Server Thread) Callback request expired:
timerDuration secs = 1
current time secs = 117
elapsed time secs = 1
CM/NonVol/BfcApp> auto_console 0

Automatically stop at console = 0

CM/NonVol/BfcApp> 0x0001f360 [DHCP Server Thread] BcmDhcpServerThread::ThreadMain: (DHCP Server Thread) Callback request expired:
timerDuration secs = 1
current time secs = 127
elapsed time secs = 1
CM/NonVol/BfcApp> write

Dynamic Non-Vol Settings successfully written to the device.
Permanent Non-Vol Settings successfully written to the device.

CM/NonVol/BfcApp> cd0x00021e8a [DHCP Server Thread] BcmDhcpServerThread::ThreadMain: (DHCP Server Thread) Callback request expired:
timerDuration secs = 1
current time secs = 138
elapsed time secs = 1
CM/NonVol/BfcApp> cd /

Active Command Table: CM DOCSIS Commands (CM)

CM
----------------------------------------------------
----------------------------------------------------
CM> run_app


Running the system...


Beginning Cable Modem operation...

0x000238ca [Scan Downstream Thread] BcmVendorCmDownstreamScanThread::ThreadMain: (Scan Downstream Thread) Scanning for a Downstream Channel...

mot_scanList: Setting override freq @ 0
Favorite[0].freq = 729000000
Attempting Downstream FEC lock @ freq= 729000000 Hz, QAM64/256

CM> Found energy at frequency 729000000Hz! Publishing event kEventEnergyDetected...
0x00023b18 [CmDocsisCtlThread] BcmCmDocsisCtlThread::StartUsInit: (CmDocsisCtlThread) Locked on the downstream. Waiting for UCDs...

******************************************
DOWNSTREAM STATUS
******************************************
Tuner Frequency = 729000000 Hz
Carrier Offset = 4 Hz
Symbol rate = 5360537 sym/sec
SNR = 32 dB
QAM Mode = QAM256
Tuner AGC = 0xfff00000
IF AGC = 0x189850e5
Power Level = -14 dB
QAM = LOCKED
FEC = LOCKED
******************************************

CM> Selecting UCD for Us Channel 4

0x000246bc [CmDocsisCtlThread] BcmCmDocsisCtlThread::TestAndLaunchDsTimeSync: (CmDocsisCtlThread) starting ds time sync acquisition...
0x00024946 [CmDocsisCtlThread] BcmCmDocsisCtlThread::SyncDsSyncOk: (CmDocsisCtlThread) downstream time sync acquired...
0x00024946 [CmDocsisCtlThread] BcmCmDocsisCtlThread::DsSyncOkResumeUsInit: (CmDocsisCtlThread) pre-REG upstream target case...starting initial ranging.
Beginning initial ranging...
Using stored initial upstream power = 42.0 dBmV
0x00024946 [CmDocsisCtlThread] BcmCmDocsisCtlThread::SyncDsSyncOk: (CmDocsisCtlThread) rx unexpected kDsSyncOk indication...
Not logging event ID 2307948724, control for level 7 is 0.
RNG-RSP Adj: tim=4408 power=0 freq=0 Stat=Continue
CM> 0x00024d38 [DHCP Server Thread] BcmDhcpServerThread::ThreadMain: (DHCP Server Thread) Callback request expired:
timerDuration secs = 1
current time secs = 150
elapsed time secs = 1
RNG-RSP Adj: tim=0 power=0 freq=0 Stat=Success

******************************************
UPSTREAM STATUS
******************************************
Upstream Status = UP
Upstream Channel = 4
Upstream Frequency = 34800000 Hz
Upstream Power = 42 dBmV
Ranging SID = 0xb4a
Upstream Symbol Rate = 2560000 sym/sec
******************************************

Calculating maximum number of IP filters:
Each IP filter consumes 1872 bytes of RAM.
Current free RAM is 478060 bytes.
Max heap reserved for IP filters (25%) = 119515
We can support 63 IP filters.
Calculating maximum number of LLC filters:
Each LLC filter consumes 736 bytes of RAM.
Current free RAM is 478060 bytes.
Max heap reserved for LLC filters (25%) = 119515
We can support 162 LLC filters.
Starting IP Initialization with DHCP...
DHCPc: Waiting 2 seconds before sending Discover; client id htype=1, value=48:00:00:00:00:00
Not logging event ID 2307948624, control for level 7 is 0.
CM> DHCPc: Sending Discover packet; client id htype=1, value=48:00:00:00:00:00
DHCPc: Received an Offer from DHCP server 00:07:7d:2f:00:00 (10.203.128.1); lease client id htype=1, value=48:00:00:00:00:00
CM> DHCPc: Timed out waiting for offers for lease with client id htype=1, value=48:00:00:00:00:00
DHCPc: Sending Request packet; client id htype=1, value=48:00:00:00:00:00
DHCPc: Received an Ack from DHCP server 00:07:7d:2f:00:00 (10.203.128.1); lease client id htype=1, value=48:00:00:00:00:00
Current IP address is default 0.0.0.0.
0x00025e68 [DHCP Client Thread] BcmEcosIpHalIf::ConfigureLeaseImpl: (IP Stack1 HalIf)
Configuring IP stack 1:
IP Address = 10.203.220.00 (primary IP address)
Subnet Mask = 255.255.192.0
Router = 10.203.192.0
IsPrimaryInterface = 1

ARPing for default GW IP = 10.203.192.0
MAC = 00:07:7d:2f:00:00
DHCP completed successfully!

DHCP Settings:
Client Id = htype=1, value=48:00:00:00:00:00
State = Renewing (5)
Static Lease = 0
AutoConfig Mode = IP, Subnet and Router
XID = 0x6e34a65f
Number of Tries = 0
Max Discover Tries = 6
Max Request Tries = 6
DHCP server MAC addr = 00:07:7d:2f:00:00
Ignore NAKs = 0
My offered IP address = 10.203.220.00 (primary IP address)
(1) Subnet Mask = 255.255.192.0
(3) Router IP address = 10.203.192.0
(54) DHCP Server IP address = 189.204.97.162
(82) Relay Agent IP address = 10.203.128.0
TFTP Server IP address = 189.204.97.162
CM Configuration file = '^1/7C3D7787/'
(2) UTC Time Offset = -21600 seconds
(4) Time Server IP address = 189.204.97.162; 189.204.97.182
(6) Domain Name Server = 189.204.97.162
(7) Log Server IP address = 127.0.0.1
(51) Lease time = 259200 seconds
(58) T1 (renew) = 129600 seconds
(59) T2 (rebind) = 226800 seconds
Lease is infinite = 0

(122) PacketCable/CableHome -== SubOptions ==-
SubOpt(1) Primary Dhcp Server = 0.0.0.0


SB5102 CM Agent w/ BRCM Factory Support IpStackEvent: Ip=10.203.220.00, Subnet=255.255.192.0, Gateway=10.203.192.0
CmSnmpAgent::IpAddressAcquiredEvent for SB5102 CM Agent w/ BRCM Factory Support
IP addr = 10.203.220.00
Starting Time Of Day...
0x00025f1c [CmDocsisIpThread] BcmDocsisTimeOfDayThread::SetTodServerIpAddress: (Time Of Day Thread) ToD servers: 189.204.97.162; 189.204.97.182
Connecting to ToD server 189.204.97.162...
Sending UDP ToD request to server...
SNMP Agent Binding to 10.203.220.219:225
Not logging event ID 2291949724, control for level 7 is 0.
CM> UTC returned by ToD server 3606660258; UTC offset -21600
Current system time -> Wed Apr 16 12:04:18 2014

System start time -> Wed Apr 16 12:01:43 2014

Starting Tftp of configuration file...
Opening file '^1/7C3D7787/' on 189.204.97.162 for reading...
tftp-enforce bypass is using 189.204.97.162:^1/7C3D7787/
Initiating fake TFTP Get (tftp-enforce bypass)
Bypass succeeded.File was 2672 bytes
TFTPD Started
CM> Forcing Config TFTP IP to 127.0.0.1
Forcing Config File name to 29xma.bin
TFTPD received 1 from 10.203.220.219:1028
Storing received cfg of size 655 to memory
TFTPD Shut down
Tftp read < 512 bytes, we have reached end of file.
Tftp transfer complete!
TFTP Settings:
Stack Interface = 1
Server Ip Address = 189.204.97.162
Server Port Number = 1029
Total Blocks Read = 2
Total Bytes Read = 655

Config file was read! IP Initialization completed...
MAX CPE per CM is being set to 32
Time Of Day completed...
DefaultSnmpAgentClass::SystemTimeChangeEvent for SB5102 CM Agent w/ BRCM Factory Support
TLV-11[1]: 1.3.6.1.2.1.69.1.2.1.2.1 -> 10.3.1.0
TLV-11[2]: 1.3.6.1.2.1.69.1.2.1.3.1 -> 255.255.0.0
TLV-11[3]: 1.3.6.1.2.1.69.1.2.1.4.1 -> cbadmcmrw
TLV-11[4]: 1.3.6.1.2.1.69.1.2.1.5.1 -> 3 (i32)
TLV-11[5]: 1.3.6.1.2.1.69.1.2.1.6.1 -> @
TLV-11[6]: 1.3.6.1.2.1.69.1.2.1.7.1 -> 4 (i32)
TLV-11[7]: 1.3.6.1.2.1.69.1.2.1.2.2 -> 10.3.1.0
TLV-11[8]: 1.3.6.1.2.1.69.1.2.1.3.2 -> 255.255.0.0
TLV-11[9]: 1.3.6.1.2.1.69.1.2.1.4.2 -> hd
TLV-11[10]: 1.3.6.1.2.1.69.1.2.1.5.2 -> 2 (i32)
TLV-11[11]: 1.3.6.1.2.1.69.1.2.1.6.2 -> @
TLV-11[12]: 1.3.6.1.2.1.69.1.2.1.7.2 -> 4 (i32)
TLV-11[13]: 1.3.6.1.2.1.69.1.2.1.2.3 -> 172.20.0.0
TLV-11[14]: 1.3.6.1.2.1.69.1.2.1.3.3 -> 255.255.0.0
TLV-11[15]: 1.3.6.1.2.1.69.1.2.1.4.3 -> hd
TLV-11[16]: 1.3.6.1.2.1.69.1.2.1.5.3 -> 2 (i32)
TLV-11[17]: 1.3.6.1.2.1.69.1.2.1.6.3 -> @
TLV-11[18]: 1.3.6.1.2.1.69.1.2.1.7.3 -> 4 (i32)
TLV-11[19]: 1.3.6.1.2.1.69.1.2.1.2.4 -> 172.20.0.0
TLV-11[20]: 1.3.6.1.2.1.69.1.2.1.3.4 -> 255.255.0.0
TLV-11[21]: 1.3.6.1.2.1.69.1.2.1.4.4 -> cbadmcmrw
TLV-11[22]: 1.3.6.1.2.1.69.1.2.1.5.4 -> 3 (i32)
TLV-11[23]: 1.3.6.1.2.1.69.1.2.1.6.4 -> @
TLV-11[24]: 1.3.6.1.2.1.69.1.2.1.7.4 -> 4 (i32)
Not logging event ID 2291949524, control for level 7 is 0.
Not logging event ID 2291949324, control for level 7 is 0.
SB5102 CM Agent w/ BRCM Factory Support processing TLV-11's
SNMP packet sent to 10.203.220.219:225
24 TLV-11's OK.
Sending a REG-REQ to the CMTS...
Received a REG-RSP message from the CMTS...

MAC MGT msg buf, len=125
48 00 00 00 00 00 00 07 7d 2f 00 00 00 6f 00 00 | HZ..f...}/...o..
03 01 07 00 0b 4a 00 05 2d 01 01 01 02 01 02 03 | .....J..-.......
01 01 04 01 01 06 01 01 07 01 0f 08 01 10 0a 01 | ................
01 0b 01 18 0c 01 01 0f 01 00 10 04 00 00 00 01 | ................
11 01 01 13 01 01 18 1d 01 02 00 01 02 04 00 00 | ................
1d 4d 03 02 0b 4a 06 01 07 07 01 01 08 04 00 72 | .M...J.........r
70 e0 0f 01 02 19 16 01 02 00 02 02 04 00 00 1e | p...............
a1 06 01 07 07 01 01 08 04 01 c1 d4 40 | ............@



MAC MGT header:
dest addr: 48:00:00:00:00:00
src addr: 00:07:7d:2f:00:00
msg len: 0x6f (111)
DSAP: 0
SSAP: 0
control: 0x3
version: 0x1
msg_type: 0x7 REG_RSP
fka reserved: 0

MSG PDU:
primary sid: 0xb4a
response code: 0 (kConfOk)


CM modem capabilities: T=0x05 (005) L=0x2d (045) V=
concat support: T=0x01 (001) L=0x01 (001) V=0x01 (1)
DOCSIS version: T=0x02 (002) L=0x01 (001) V=0x02 (2)
frag support: T=0x03 (003) L=0x01 (001) V=0x01 (1)
PHS support: T=0x04 (004) L=0x01 (001) V=0x01 (1)
BPI version: T=0x06 (006) L=0x01 (001) V=0x01 (1)
num DS SAID's: T=0x07 (007) L=0x01 (001) V=0x0f (15)
num US Sid's: T=0x08 (008) L=0x01 (001) V=0x10 (16)
TxEq Taps per Symbol: T=0x0a (010) L=0x01 (001) V=0x01 (1)
num TxEq Taps: T=0x0b (011) L=0x01 (001) V=0x18 (24)
DCC support: T=0x0c (012) L=0x01 (001) V=0x01 (1)
Unknown type. Ignore!: T=0x0f (015) L=0x01 (001) V=00 | .
Unknown type. Ignore!: T=0x10 (016) L=0x04 (004) V=00 00 00 01 | ....
L2VPN capability: T=0x11 (017) L=0x01 (001) V=0x01 (1)
DUT filtering support: T=0x13 (019) L=0x01 (001) V=0x01 (1)

v1.1 US flow sets: T=0x18 (024) L=0x1d (029) V=
CM flow ref: T=0x01 (001) L=0x02 (002) V=0x0001 (1)
sfid: T=0x02 (002) L=0x04 (004) V=0x00001d4d (7501)
sid: T=0x03 (003) L=0x02 (002) V=0x0b4a (2890)
QoS param set type: T=0x06 (006) L=0x01 (001) V=0x07 (7)
traffic priority: T=0x07 (007) L=0x01 (001) V=0x01 (1)
max tx rate, bps: T=0x08 (008) L=0x04 (004) V=0x007270e0 (7500000)
us bw sched strategy: T=0x0f (015) L=0x01 (001) V=0x02 (2)


v1.1 DS flow sets: T=0x19 (025) L=0x16 (022) V=
CM flow ref: T=0x01 (001) L=0x02 (002) V=0x0002 (2)
sfid: T=0x02 (002) L=0x04 (004) V=0x00001ea1 (7841)
QoS param set type: T=0x06 (006) L=0x01 (001) V=0x07 (7)
traffic priority: T=0x07 (007) L=0x01 (001) V=0x01 (1)
max tx rate, bps: T=0x08 (008) L=0x04 (004) V=0x01c1d440 (29480000)

0x00026584 [CmDocsisCtlThread] BcmCmDocsisCtlThread::ParseAndValidateRegRspMsg: (CmDocsisCtlThread) ERROR - REG-RSP parse error. continuing.
0x00026584 [CmDocsisCtlThread] BcmCmDocsisCtlThread::RegRspMsgEvent: (CmDocsisCtlThread) We registered with a DOCSIS 1.1 config file!
Logging event: REG-RSP - invalid format or not recognized
Registration complete!
Process CVC
0x00026598 [CmDocsisCtlThread] CmSecureDownload::ProcessConfigFileManufAndCosignerCvcs: (Secure Software Download) WARNING - No CVC included in config file; software upgrade can't be performed!
0x00026598 [CmDocsisCtlThread] BcmCmDocsisCtlThread::ProcessCVC: (CmDocsisCtlThread) ERROR - Config file does not include a valid CVC!
DOCSIS CoS/QoS rate shaping enable is now 1
CmSnmpAgent::CmOperationalEvent for SB5102 CM Agent w/ BRCM Factory Support
CmSnmpAgent operating in 1.1 mode, including docsQos, excluding docsBpi
+++ No DH kickstart profiles or snmpCommunityTable entries installed.
We will operate in NMACCESS mode.
SB5102 CM Agent w/ BRCM Factory Support setting V1/V2 view to docsisNmAccessView
SB5102 CM Agent w/ BRCM Factory Support enabling management.
SB5102 CM Agent w/ BRCM Factory Support sending deferred traps...
Done w/ deferred traps.
SB5102 CPE Agent w/ BRCM Factory Support setting V1/V2 view to docsisNmAccessView
BPI+ Bypass enabled
Enabling network access for all CPE ports.

mot_scanList: Writing to Flash!
BcmCmDocsisStatusEventCodes::kCmIsOperational
Suspending SNMP Thread
0x000265d4 [CmDocsisCtlThread] BcmVendorCmApplication::StopDhcpServer: (VendorExtension CmApp) Shutting down DHCP Server...
0x000265d4 [CmDocsisCtlThread] BcmStandbySwitchThread::CmIsOperational: (Motorola Standby Switch Thread) Simulating a press of the standby switch to get the state configured properly.
0x000265d4 [IGMP Thread] BcmIgmpThread::Starting Igmp Thread...: (IGMP Thread)
0x000265d4 [Motorola Standby Switch Thread] BcmStandbySwitchThread::ThreadMain: (Motorola Standby Switch Thread) Standby switch was pressed!
0x000265de [Motorola Standby Switch Thread] BcmStandbySwitchThread::ProcessSwitchEvent: (Motorola Standby Switch Thread) Standby switch disabled in nonvol; ignoring event.
SB5102 CM Event Log w/ BRCM Factory Support sending deferred async messages...
Sending syslog message from IF 1 to 127.0.0.1:
<133> CABLEMODEM [Motorola Corporation]: <2300955725> Ethernet link up - ready to pass packets
Done w/ deferred msgs
Not logging event ID 2296948624, control for level 7 is 0.
CM>

Any Idea??

Regards

I just spent 5 hours trying to flash a cm to no avail! I couldn't get my NT to write ANYTHING w/o making a brick!
It's been quite awhile since I tested anything new, apparently! I found 9 5100's in my node and I wanted to see if I could get one goin..

Everything would cmpram fail and I went as far as resetting 3 different computers to clean images for nothing1lmfao!Downloaded tons of vb suites...win updates...you name it.

I was just about to order a new NT and I noticed the usb cable had a flat spot in it where I obviously rolled my damn chair over it...


me big dummy sometimes...

Good for a laugh...Happy Easter!

Hello there

I'm new to this forum as you can see. I registred to ask question about my modem and I want to know if its blocked somehow or something similar.


Well I've flashed to haxorware about 2 years ago was using it all untill now never had any problems.
This morning internet went down for a hour or so came back and then I tried to surf abit and went again down. So I checked my macs switched it same crap it wont pass upstream. I suspect that i got blocked somehow but I'm not quite sure if that is possible. If it is do I need to change modem and reflash it or?

Here is my Ds and Us


Frequency 754 MHz
Status Locked
Annex EuroDOCSIS
Modulation QAM256
Symbol Rate 6952000 sym/sec
Receive Power -19.5 dBmV
Signal to Noise ratio 28.5 dB

Upstream


Frequency 58 MHz
Channel ID 2
Status Ranging
Mode ATDMA
Transmit Power 40.2 dBmV

Thanks

E

My friend recently bought a modem and wants to test and check it out I recently heard from a family member that people around here are selling clones so i would like to know how to tell if it's a clone

Hello guys, something weird is going on and i just can't seem to understand it. I have like 4 testing modems. I have 1 which was up and running with a mac + certs since BPI+ is enabled in my area. Now a few days ago my modem went down. It seems to go online but a few seconds later it reboots. I keep getting this message.

Received Response to Broadcast Maintenance Request, But no Unicas
t Maintenance opportunities received - T4 timeout
Logging event: Modem Is Shutting Down and Rebooting...

So that modem keeps rebooting.

Now the weird thing is that i took the same mac and certs and put it one of my other modem and it worked but the same thing started happening after about 2 days. Now i put it on my third modem and it is currently working also. Any thoughts as to what is happening? I have gotten lazy and haven't been keeping up since my testing days.

On my first modem i enabled the ignore t4 station maintenance option and it fixed it for about a day but after that the modem would not go online, on the second modem that didn't work though. Any thoughts and help would be greatly appreciated. Anything i could read on ideas? anything would be helpful.

I am doing a little bit of spring cleaning and decided I would fix a couple bricked modems now that I got my NT. Both of them became bricked the same way, by upgrading firmware via haxrware GUI and then having the connection cut out due to an issue with my former ethernet adapter.

My issue is that I can't detect both modems:

The first modem I was actually able to detect after a few tries and then I tried the poke method of debricking. I installed a 2mb sb5101 flash dump on it and unplugged power/plugged it back in and the lights came on for a little longer before going out. Now I can't detect it at all. Here is a log from that one:


Now my second modem was completely untouched since I bricked it, the same way as the first. The issue with this one is that it won't detecta aswell. I try the poke method on this one and it just says manufacturer not found, which is different from the first. Here is a log of that:


The thing is that I am using a brand new solderless header pin, and I am wondering if it is not connecting to the board properly. When I stick it in the holes it barely goes in, and one little touch will knock it out of place.

Does it look like a bad connection or a standard bricked modem? How can I proceed from here? Since I cant detect I am limited to the poke method to debrick it and that isn't working, can anyone shed some light? Huge PITA.

Hello gentlemen, a noob like me could get some tips from the pros forum?

I have a 5101 but I'm thinking about getting one with forceware or any other program that can be set up by SNMP.

I was also thinking about getting a programmer, BlackcatUSB or UsbJtagNT, this second is expensive it hurts, but it seems worth it for what they say.

I have a dpc3925 dropped by here too, I saw on another forum that you can be set in factory mode to send certificates.

Taking into account what I said above what you think is best for me? Catch a programmer and try to program in dpc3925 or pick another modem with forceware? If the programmer is the option that you recommend, which one do you think I should take? If the modem is the option, what modem do you think I should take?

Thanks in advance for everything I learned by forum posts.

Hugs!

******************************************
DOWNSTREAM STATUS
******************************************
Tuner Frequency = 699000000 Hz
Carrier Offset = -1 Hz
Symbol rate = 5360537 sym/sec
SNR = 38 dB
QAM Mode = QAM256
Tuner AGC = 0xfff00000
IF AGC = 0x15eae9fb
Power Level = -1 dB
QAM = LOCKED
FEC = LOCKED
******************************************


CM> Selecting UCD for Us Channel 19

0x000081a6 [CmDocsisCtlThread] BcmCmDocsisCtlThread::TestAndLaunchDsTimeSync: (CmDocsisCtlThread) starting ds time sync acquisition...
0x0000843a [CmDocsisCtlThread] BcmCmDocsisCtlThread::SyncDsSyncOk: (CmDocsisCtlThread) downstream time sync acquired...
0x0000843a [CmDocsisCtlThread] BcmCmDocsisCtlThread::DsSyncOkResumeUsInit: (CmDocsisCtlThread) pre-REG upstream target case...starting initial ranging.
Beginning initial ranging...
Using default initial upstream power = 8.0 dBmV
0x00008444 [CmDocsisCtlThread] BcmCmDocsisCtlThread::SyncDsSyncOk: (CmDocsisCtlThread) rx unexpected kDsSyncOk indication...
Not logging event ID 2307948724, control for level 7 is 0.

CM> Adjusting the initial ranging power to 33.0 dBmV...
Logging event: No Ranging Response received - T3 time-out (US 19)

CM> Adjusting the initial ranging power to 46.0 dBmV...
Logging event: No Ranging Response received - T3 time-out (US 19)

CM>
RNG-RSP Adj: tim=2467 power=13 freq=0 Stat=Continue

CM> 0x00009376 [DHCP Server Thread] BcmDhcpServerThread::ThreadMain: (DHCP Server Thread) Callback request expired:
timerDuration secs = 1
current time secs = 37
elapsed time secs = 1

RNG-RSP Adj: tim=0 power=0 freq=0 Stat=Continue

CM>
RNG-RSP Adj: tim=0 power=0 freq=0 Stat=Success

******************************************
UPSTREAM STATUS
******************************************
Upstream Status = UP
Upstream Channel = 19
Upstream Frequency = 30200000 Hz
Upstream Power = 50 dBmV
Ranging SID = 0xf96
Upstream Symbol Rate = 5120000 sym/sec
******************************************

Starting IP Initialization with DHCP...
DHCPc: Waiting 1 seconds before sending Discover; client id htype=1, value=
Not logging event ID 2307948624, control for level 7 is 0.

CM> DHCPc: Sending Discover packet; client id htype=1, value=00:xx:xx:xx:b6:xx
DHCPc: Received an Offer from DHCP server xx:xx:xx:xx:xx:xx (96.xxx.xxx.1); lease client id htype=1, value=xx:xx:xx:xx:xx:xx

CM> DHCPc: Timed out waiting for offers for lease with client id htype=1, value=xx:xx:xx:xx:xx:xx
DHCPc: Sending Request packet; client id htype=1, value=xx:xx:xx:xx:xx:xx
DHCPc: Received an Ack from DHCP server xx:xx:xx:xx:xx:xx(96.xxx.xxx.1); lease client id htype=1, value=xx:xx:xx:xx:xx:xx
Current IP address is default 0.0.0.0.
0x0000a974 [DHCP Client Thread] BcmEcosIpHalIf::ConfigureLeaseImpl: (IP Stack1 HalIf)
Configuring IP stack 1:
IP Address = xx.xxx.xx.xx (primary IP address)
Subnet Mask = 255.255.248.0
Router = xx.xxx.xx.1
IsPrimaryInterface = 1

Logging event: DHCP WARNING - Non-critical field invalid in response.
ARPing for default GW IP = 96.xxx.xx.1
MAC = 00:xx:xx:3b:xx:xx
DHCP completed successfully!

DHCP Settings:
Client Id = htype=1, value=00:xxe:xx:b6:xx
State = Renewing (5)
Static Lease = 0
AutoConfig Mode = IP, Subnet and Router
XID = 0x7ebcc832
Number of Tries = 0
Max Discover Tries = 6
Max Request Tries = 6
DHCP server MAC addr = 00:xx:5c:xx:a0:xx
Ignore NAKs = 0
My offered IP address = xx.xxx.xx.xx (primary IP address)
(1) Subnet Mask = 255.255.248.0
(3) Router IP address = xx.xxx.xx.1
(54) DHCP Server IP address = xx.xxx.xx.4
(82) Relay Agent IP address = 96.xxx.xxx.1
TFTP Server IP address = 96.xxx.xxx.1
CM Configuration file = 'd11_walledgarden.cm'
(2) UTC Time Offset = -18000 seconds
(4) Time Server IP address = 69.xxx.xxx.77
(6) Domain Name Server = 68.87.64.146; 68.87.75.194
(7) Log Server IP address = 0.0.0.0
(51) Lease time = 20521 seconds
(58) T1 (renew) = 10260 seconds
(59) T2 (rebind) = 17955 seconds
Lease is infinite = 0


SB5102 CM Agent w/ BRCM Factory Support IpStackEvent: Ip=96.xxx.xx.47, Subnet=255.255.248.0, Gateway=96.xxx.xx.1
CmSnmpAgent::IpAddressAcquiredEvent for SB5102 CM Agent w/ BRCM Factory Support
IP addr = 96.xxx.48.xx
Starting Time Of Day...
0x0000aa14 [CmDocsisIpThread] BcmDocsisTimeOfDayThread::SetTodServerIpAddress: (Time Of Day Thread) ToD servers: x9.252.xxx.77
Connecting to ToD server 69.xxx.208.xx...
Sending UDP ToD request to server...
SNMP Agent Binding to x6.xxx.xx.47:225
Not logging event ID 2291949724, control for level 7 is 0.

CM> UTC returned by ToD server 3607943255; UTC offset -18000
Current system time -> Thu May 01 09:27:35 2014

System start time -> Thu May 01 09:26:52 2014

Starting Tftp of configuration file...
Opening file 'd11_walledgarden.cm' on 96.xxx.xxx.1 for reading...
tftp-enforce bypass is using 96.xxx.xxx.1:d11_walledgarden.cm
Initiating fake TFTP Get (tftp-enforce bypass)

CM> Bypass succeeded.File was 6816 bytes
TFTPD Started
Forcing Config TFTP IP to 127.0.0.1
Forcing Config File name to d11_m_sb5101_bciwidebandstarter_c05.cm
TFTPD received 1 from 96.xxx.xx.xx:1035
Storing received cfg of size 4609 to memory
TFTPD Shut down
Tftp read < 512 bytes, we have reached end of file.
Tftp transfer complete!
TFTP Settings:
Stack Interface = 1
Server Ip Address = 96.xxx.132.1
Server Port Number = 1036
Total Blocks Read = 10
Total Bytes Read = 4609

Config file was read! IP Initialization completed...
MAX CPE per CM is being set to 32
Time Of Day completed...
DefaultSnmpAgentClass::SystemTimeChangeEvent for SB5102 CM Agent w/ BRCM Factory Support
TLV-11[1]: 1.3.6.1.2.1.69.1.3.3.0 -> 2 (i32)
TLV-11[2]: 1.3.6.1.2.1.69.1.2.1.2.1 -> 0.0.0.0
TLV-11[3]: 1.3.6.1.2.1.69.1.2.1.3.1 -> 0.0.0.0
TLV-11[4]: 1.3.6.1.2.1.69.1.2.1.4.1 -> hDaFHJG7
TLV-11[5]: 1.3.6.1.2.1.69.1.2.1.5.1 -> 3 (i32)
TLV-11[6]: 1.3.6.1.2.1.69.1.2.1.6.1 -> HEX:40 00
TLV-11[7]: 1.3.6.1.2.1.69.1.2.1.7.1 -> 4 (i32)
TLV-11[8]: 1.3.6.1.2.1.69.1.2.1.2.2 -> 255.255.255.255
TLV-11[9]: 1.3.6.1.2.1.69.1.2.1.3.2 -> 255.255.255.255
TLV-11[10]: 1.3.6.1.2.1.69.1.2.1.4.2 -> hDaFHJG7
TLV-11[11]: 1.3.6.1.2.1.69.1.2.1.5.2 -> 3 (i32)
TLV-11[12]: 1.3.6.1.2.1.69.1.2.1.6.2 -> HEX:40 00
TLV-11[13]: 1.3.6.1.2.1.69.1.2.1.7.2 -> 4 (i32)
TLV-11[14]: 1.3.6.1.2.1.69.1.6.1.0 -> 1 (i32)
TLV-11[15]: 1.3.6.1.2.1.69.1.6.2.1.2.12 -> 4 (i32)
TLV-11[16]: 1.3.6.1.2.1.69.1.6.2.1.3.12 -> 0 (i32)
TLV-11[17]: 1.3.6.1.2.1.69.1.6.2.1.4.12 -> 1 (i32)
TLV-11[18]: 1.3.6.1.2.1.69.1.6.2.1.5.12 -> 2048 (i32)
TLV-11[19]: 1.3.6.1.2.1.69.1.6.2.1.2.13 -> 4 (i32)
TLV-11[20]: 1.3.6.1.2.1.69.1.6.2.1.3.13 -> 0 (i32)
TLV-11[21]: 1.3.6.1.2.1.69.1.6.2.1.4.13 -> 1 (i32)
TLV-11[22]: 1.3.6.1.2.1.69.1.6.2.1.5.13 -> 2054 (i32)
TLV-11[23]: 1.3.6.1.2.1.69.1.6.2.1.2.14 -> 4 (i32)
TLV-11[24]: 1.3.6.1.2.1.69.1.6.2.1.3.14 -> 0 (i32)
TLV-11[25]: 1.3.6.1.2.1.69.1.6.2.1.4.14 -> 1 (i32)
TLV-11[26]: 1.3.6.1.2.1.69.1.6.2.1.5.14 -> 34525 (i32)
TLV-11[27]: 1.3.6.1.2.1.69.1.6.3.0 -> 2 (i32)
TLV-11[28]: 1.3.6.1.2.1.69.1.6.4.1.2.10 -> 4 (i32)
TLV-11[29]: 1.3.6.1.2.1.69.1.6.4.1.5.10 -> 3 (i32)
TLV-11[30]: 1.3.6.1.2.1.69.1.6.4.1.11.10 -> 17 (i32)
TLV-11[31]: 1.3.6.1.2.1.69.1.6.4.1.14.10 -> 135 (i32)
TLV-11[32]: 1.3.6.1.2.1.69.1.6.4.1.15.10 -> 139 (i32)
TLV-11[33]: 1.3.6.1.2.1.69.1.6.4.1.2.11 -> 4 (i32)
TLV-11[34]: 1.3.6.1.2.1.69.1.6.4.1.5.11 -> 3 (i32)
TLV-11[35]: 1.3.6.1.2.1.69.1.6.4.1.11.11 -> 6 (i32)
TLV-11[36]: 1.3.6.1.2.1.69.1.6.4.1.14.11 -> 135 (i32)
TLV-11[37]: 1.3.6.1.2.1.69.1.6.4.1.15.11 -> 139 (i32)
TLV-11[38]: 1.3.6.1.2.1.69.1.6.4.1.2.20 -> 4 (i32)
TLV-11[39]: 1.3.6.1.2.1.69.1.6.4.1.11.20 -> 17 (i32)
TLV-11[40]: 1.3.6.1.2.1.69.1.6.4.1.14.20 -> 68 (i32)
TLV-11[41]: 1.3.6.1.2.1.69.1.6.4.1.15.20 -> 68 (i32)
TLV-11[42]: 1.3.6.1.2.1.69.1.6.4.1.2.40 -> 4 (i32)
TLV-11[43]: 1.3.6.1.2.1.69.1.6.4.1.5.40 -> 2 (i32)
TLV-11[44]: 1.3.6.1.2.1.69.1.6.4.1.11.40 -> 6 (i32)
TLV-11[45]: 1.3.6.1.2.1.69.1.6.4.1.14.40 -> 1080 (i32)
TLV-11[46]: 1.3.6.1.2.1.69.1.6.4.1.15.40 -> 1080 (i32)
TLV-11[47]: 1.3.6.1.2.1.69.1.6.4.1.2.60 -> 4 (i32)
TLV-11[48]: 1.3.6.1.2.1.69.1.6.4.1.5.60 -> 3 (i32)
TLV-11[49]: 1.3.6.1.2.1.69.1.6.4.1.11.60 -> 6 (i32)
TLV-11[50]: 1.3.6.1.2.1.69.1.6.4.1.14.60 -> 445 (i32)
TLV-11[51]: 1.3.6.1.2.1.69.1.6.4.1.15.60 -> 445 (i32)
TLV-11[52]: 1.3.6.1.2.1.69.1.6.4.1.2.70 -> 4 (i32)
TLV-11[53]: 1.3.6.1.2.1.69.1.6.4.1.3.70 -> 1 (i32)
TLV-11[54]: 1.3.6.1.2.1.69.1.6.4.1.4.70 -> 2 (i32)
TLV-11[55]: 1.3.6.1.2.1.69.1.6.4.1.5.70 -> 3 (i32)
TLV-11[56]: 1.3.6.1.2.1.69.1.6.4.1.6.70 -> 1 (i32)
TLV-11[57]: 1.3.6.1.2.1.69.1.6.4.1.7.70 -> 0.0.0.0
TLV-11[58]: 1.3.6.1.2.1.69.1.6.4.1.8.70 -> 0.0.0.0
TLV-11[59]: 1.3.6.1.2.1.69.1.6.4.1.9.70 -> 239.32.0.0
TLV-11[60]: 1.3.6.1.2.1.69.1.6.4.1.10.70 -> 255.252.0.0
TLV-11[61]: 1.3.6.1.2.1.69.1.6.4.1.11.70 -> 6 (i32)
TLV-11[62]: 1.3.6.1.2.1.69.1.6.4.1.12.70 -> 1 (i32)
TLV-11[63]: 1.3.6.1.2.1.69.1.6.4.1.13.70 -> 65535 (i32)
TLV-11[64]: 1.3.6.1.2.1.69.1.6.4.1.14.70 -> 1 (i32)
TLV-11[65]: 1.3.6.1.2.1.69.1.6.4.1.15.70 -> 65535 (i32)
TLV-11[66]: 1.3.6.1.2.1.69.1.6.4.1.2.71 -> 4 (i32)
TLV-11[67]: 1.3.6.1.2.1.69.1.6.4.1.3.71 -> 1 (i32)
TLV-11[68]: 1.3.6.1.2.1.69.1.6.4.1.4.71 -> 2 (i32)
TLV-11[69]: 1.3.6.1.2.1.69.1.6.4.1.5.71 -> 3 (i32)
TLV-11[70]: 1.3.6.1.2.1.69.1.6.4.1.6.71 -> 1 (i32)
TLV-11[71]: 1.3.6.1.2.1.69.1.6.4.1.7.71 -> 0.0.0.0
TLV-11[72]: 1.3.6.1.2.1.69.1.6.4.1.8.71 -> 0.0.0.0
TLV-11[73]: 1.3.6.1.2.1.69.1.6.4.1.9.71 -> 239.32.0.0
TLV-11[74]: 1.3.6.1.2.1.69.1.6.4.1.10.71 -> 255.252.0.0
TLV-11[75]: 1.3.6.1.2.1.69.1.6.4.1.11.71 -> 17 (i32)
TLV-11[76]: 1.3.6.1.2.1.69.1.6.4.1.12.71 -> 1 (i32)
TLV-11[77]: 1.3.6.1.2.1.69.1.6.4.1.13.71 -> 65535 (i32)
TLV-11[78]: 1.3.6.1.2.1.69.1.6.4.1.14.71 -> 1 (i32)
TLV-11[79]: 1.3.6.1.2.1.69.1.6.4.1.15.71 -> 65535 (i32)
TLV-11[80]: 1.3.6.1.2.1.69.1.6.4.1.2.72 -> 4 (i32)
TLV-11[81]: 1.3.6.1.2.1.69.1.6.4.1.3.72 -> 1 (i32)
TLV-11[82]: 1.3.6.1.2.1.69.1.6.4.1.4.72 -> 2 (i32)
TLV-11[83]: 1.3.6.1.2.1.69.1.6.4.1.5.72 -> 3 (i32)
TLV-11[84]: 1.3.6.1.2.1.69.1.6.4.1.6.72 -> 1 (i32)
TLV-11[85]: 1.3.6.1.2.1.69.1.6.4.1.7.72 -> 0.0.0.0
TLV-11[86]: 1.3.6.1.2.1.69.1.6.4.1.8.72 -> 0.0.0.0
TLV-11[87]: 1.3.6.1.2.1.69.1.6.4.1.9.72 -> 232.52.0.0
TLV-11[88]: 1.3.6.1.2.1.69.1.6.4.1.10.72 -> 255.252.0.0
TLV-11[89]: 1.3.6.1.2.1.69.1.6.4.1.11.72 -> 6 (i32)
TLV-11[90]: 1.3.6.1.2.1.69.1.6.4.1.12.72 -> 1 (i32)
TLV-11[91]: 1.3.6.1.2.1.69.1.6.4.1.13.72 -> 65535 (i32)
TLV-11[92]: 1.3.6.1.2.1.69.1.6.4.1.14.72 -> 1 (i32)
TLV-11[93]: 1.3.6.1.2.1.69.1.6.4.1.15.72 -> 65535 (i32)
TLV-11[94]: 1.3.6.1.2.1.69.1.6.4.1.2.73 -> 4 (i32)
TLV-11[95]: 1.3.6.1.2.1.69.1.6.4.1.3.73 -> 1 (i32)
TLV-11[96]: 1.3.6.1.2.1.69.1.6.4.1.4.73 -> 2 (i32)
TLV-11[97]: 1.3.6.1.2.1.69.1.6.4.1.5.73 -> 3 (i32)
TLV-11[98]: 1.3.6.1.2.1.69.1.6.4.1.6.73 -> 1 (i32)
TLV-11[99]: 1.3.6.1.2.1.69.1.6.4.1.7.73 -> 0.0.0.0
TLV-11[100]: 1.3.6.1.2.1.69.1.6.4.1.8.73 -> 0.0.0.0
TLV-11[101]: 1.3.6.1.2.1.69.1.6.4.1.9.73 -> 232.52.0.0
TLV-11[102]: 1.3.6.1.2.1.69.1.6.4.1.10.73 -> 255.252.0.0
TLV-11[103]: 1.3.6.1.2.1.69.1.6.4.1.11.73 -> 17 (i32)
TLV-11[104]: 1.3.6.1.2.1.69.1.6.4.1.12.73 -> 1 (i32)
TLV-11[105]: 1.3.6.1.2.1.69.1.6.4.1.13.73 -> 65535 (i32)
TLV-11[106]: 1.3.6.1.2.1.69.1.6.4.1.14.73 -> 1 (i32)
TLV-11[107]: 1.3.6.1.2.1.69.1.6.4.1.15.73 -> 65535 (i32)
TLV-11[108]: 1.3.6.1.6.3.18.1.1.1.8.114.101.97.100.119.114.105.116.101 -> 4 (i32)
TLV-11[109]: 1.3.6.1.6.3.18.1.1.1.2.114.101.97.100.119.114.105.116.101 -> hDaFHJG7
TLV-11[110]: 1.3.6.1.6.3.18.1.1.1.3.114.101.97.100.119.114.105.116.101 -> readwritesec
TLV-11[111]: 1.3.6.1.6.3.18.1.1.1.7.114.101.97.100.119.114.105.116.101 -> 2 (i32)
TLV-11[112]: 1.3.6.1.6.3.16.1.2.1.5.1.12.114.101.97.100.119.114.105.116.101.115.101.99 -> 4 (i32)
TLV-11[113]: 1.3.6.1.6.3.16.1.2.1.3.1.12.114.101.97.100.119.114.105.116.101.115.101.99 -> readwritegroup
TLV-11[114]: 1.3.6.1.6.3.16.1.2.1.4.1.12.114.101.97.100.119.114.105.116.101.115.101.99 -> 2 (i32)
TLV-11[115]: 1.3.6.1.6.3.16.1.2.1.5.2.12.114.101.97.100.119.114.105.116.101.115.101.99 -> 4 (i32)
TLV-11[116]: 1.3.6.1.6.3.16.1.2.1.3.2.12.114.101.97.100.119.114.105.116.101.115.101.99 -> readwritegroup
TLV-11[117]: 1.3.6.1.6.3.16.1.2.1.4.2.12.114.101.97.100.119.114.105.116.101.115.101.99 -> 2 (i32)
TLV-11[118]: 1.3.6.1.6.3.16.1.4.1.9.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112​.0.1.1 -> 4 (i32)
TLV-11[119]: 1.3.6.1.6.3.16.1.4.1.4.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112​.0.1.1 -> 1 (i32)
TLV-11[120]: 1.3.6.1.6.3.16.1.4.1.5.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112​.0.1.1 -> docsisManagerView
TLV-11[121]: 1.3.6.1.6.3.16.1.4.1.6.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112​.0.1.1 -> docsisManagerView
TLV-11[122]: 1.3.6.1.6.3.16.1.4.1.8.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112​.0.1.1 -> 2 (i32)
TLV-11[123]: 1.3.6.1.6.3.16.1.4.1.9.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112​.0.2.1 -> 4 (i32)
TLV-11[124]: 1.3.6.1.6.3.16.1.4.1.4.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112​.0.2.1 -> 1 (i32)
TLV-11[125]: 1.3.6.1.6.3.16.1.4.1.5.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112​.0.2.1 -> docsisManagerView
TLV-11[126]: 1.3.6.1.6.3.16.1.4.1.6.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112​.0.2.1 -> docsisManagerView
TLV-11[127]: 1.3.6.1.6.3.16.1.4.1.8.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112​.0.2.1 -> 2 (i32)
TLV-11[128]: 1.3.6.1.4.1.1166.1.19.3.1.25.0 -> 1 (i32)
SB5102 CM Agent w/ BRCM Factory Support processing TLV-11's
SNMP packet sent to 96.133.48.47:225
0x0000be8c [DHCP Server Thread] BcmDhcpServerThread::ThreadMain: (DHCP Server Thread) Callback request expired:
timerDuration secs = 1
current time secs = 48
elapsed time secs = 1
128 TLV-11's OK.
Sending a REG-REQ to the CMTS...
Not logging event ID 2291949524, control for level 7 is 0.
Not logging event ID 2291949324, control for level 7 is 0.
128 TLV-11's OK.
Sending a REG-REQ to the CMTS...
Not logging event ID 2291949524, control for level 7 is 0.
Not logging event ID 2291949324, control for level 7 is 0.
Received a REG-RSP message from the CMTS...
0x0000bf54 [CmDocsisCtlThread] BcmCmDocsisCtlThread::RegRspMsgEvent: (CmDocsisCtlThread) ERROR -
REG-RSP response code NOT ok! rsp code = 11 (kRejAuthFailureBadHmac)
0x0000bf54 [CmDocsisCtlThread] BcmCmDocsisCtlThread::SyncRestartErrorEvent: (CmDocsisCtlThread) reason: 17 (kNegOrBadRegRsp)Not logging event ID 2436694040, control for level 7 is 0.
Logging event: Neg Or Bad Reg Rsp - Reinitialize MAC...
Deleting DOCSIS 1.0 CoS Settings for SID 0xf96
0x0000c01c [CmDocsisCtlThread] BcmDocsisCmHalIf::DeleteAllServiceFlows: (DOCSIS CableModem HalIf) Deleting all Upstream and Downstream Service Flows, along with associated Classifiers and PHS rules...
Stopping DHCP/ToD/TFTP (client requested)...
The ToD thread was stopped.
DHCPc: Releasing the lease with client id htype=1, value=00:xxe:xx:b6:xx
DHCPc: Sending Release packet; client id htype=1, value=00:xxe:xx:b6:xx
0x0000c026 [DHCP Client Thread] BcmDhcpClientIf::SendDhcpPacket: (DHCP ClientIf for IP Stack1) WARNING - Failed to send packet!
0x0000c026 [DHCP Client Thread] BcmDhcpClientIf::SendRelease: (DHCP ClientIf for IP Stack1) WARNING - Failed to create/send Release packet! Oh, well, no biggie...
0x0000c026 [DHCP Client Thread] BcmEcosIpHalIf::RemoveLeaseImpl: (IP Stack1 HalIf) Removing lease IP address 96.1xx.xx.xx from IP stack 1
0x0000c030 [DHCP Client Thread] BcmEcosIpHalIf::RemoveLeaseImpl: (IP Stack1 HalIf) This is the last address on the stack; shutting the stack down:numberOfAddresses=1
0x0000c030 [DHCP Client Thread] BcmEcosIpHalIf::ShutdownIpStackImpl: (IP Stack1 HalIf)
Shutting down IP stack 1
SB5102 CM Agent w/ BRCM Factory Support IpStackEvent: Ip=0.0.0.0, Subnet=0.0.0.0, Gateway=0.0.0.0

CM> DefaultSnmpAgentClass::RestartPendingEvent for SB5102 CM Agent w/ BRCM Factory Support
SB5102 CM Agent w/ BRCM Factory Support resetting to default state.
SB5102 CM Agent w/ BRCM Factory Support destroying users...
Pausing trap thread
SB5102 CM Agent w/ BRCM Factory Support destroying notifies...
Resuming trap thread
SB5102 CM Agent w/ BRCM Factory Support destroying views...
SB5102 CM Agent w/ BRCM Factory Support sending deferred traps...
Done w/ deferred traps.
SB5102 CM Event Log w/ BRCM Factory Support sending deferred async messages...
Done w/ deferred msgs
SB5102 CM Agent w/ BRCM Factory Support defering traps.
SB5102 CM Agent w/ BRCM Factory Support setting V1/V2 view to unrestricted
SB5102 CPE Agent w/ BRCM Factory Support setting V1/V2 view to docsisCpeView
Non-Vol Settings successfully written to the device.
0x0000c15c [CmDocsisCtlThread] BcmCmDocsisCtlThread::ResetRngState: (CmDocsisCtlThread)

---

Starting Tftp of configuration file...
Opening file 'd11_walledgarden.cm' on 96.xxx.xxx.1 for reading...
tftp-enforce bypass is using 96.186.132.1:d11_walledgarden.cm
Initiating fake TFTP Get (tftp-enforce bypass)

CM> Bypass succeeded.File was 6816 bytes
TFTPD Started
Forcing Config TFTP IP to 127.0.0.1
Forcing Config File name to d11_m_sb5101_bciwidebandstarter_c05.cm
TFTPD received 1 from 96.133.48.47:1042
Storing received cfg of size 4609 to memory
TFTPD Shut down
Tftp read < 512 bytes, we have reached end of file.
Tftp transfer complete!
TFTP Settings:
Stack Interface = 1
Server Ip Address = 96.xxx.xxx.1
Server Port Number = 1043
Total Blocks Read = 10
Total Bytes Read = 4609

Config file was read! IP Initialization completed...
MAX CPE per CM is being set to 32
Time Of Day completed...
DefaultSnmpAgentClass::SystemTimeChangeEvent for SB5102 CM Agent w/ BRCM Factory Support
TLV-11[1]: 1.3.6.1.2.1.69.1.3.3.0 -> 2 (i32)
TLV-11[2]: 1.3.6.1.2.1.69.1.2.1.2.1 -> 0.0.0.0
TLV-11[3]: 1.3.6.1.2.1.69.1.2.1.3.1 -> 0.0.0.0
TLV-11[4]: 1.3.6.1.2.1.69.1.2.1.4.1 -> hDaFHJG7
TLV-11[5]: 1.3.6.1.2.1.69.1.2.1.5.1 -> 3 (i32)
TLV-11[6]: 1.3.6.1.2.1.69.1.2.1.6.1 -> HEX:40 00
TLV-11[7]: 1.3.6.1.2.1.69.1.2.1.7.1 -> 4 (i32)
TLV-11[8]: 1.3.6.1.2.1.69.1.2.1.2.2 -> 255.255.255.255
TLV-11[9]: 1.3.6.1.2.1.69.1.2.1.3.2 -> 255.255.255.255
TLV-11[10]: 1.3.6.1.2.1.69.1.2.1.4.2 -> hDaFHJG7
TLV-11[11]: 1.3.6.1.2.1.69.1.2.1.5.2 -> 3 (i32)
TLV-11[12]: 1.3.6.1.2.1.69.1.2.1.6.2 -> HEX:40 00
TLV-11[13]: 1.3.6.1.2.1.69.1.2.1.7.2 -> 4 (i32)
TLV-11[14]: 1.3.6.1.2.1.69.1.6.1.0 -> 1 (i32)
TLV-11[15]: 1.3.6.1.2.1.69.1.6.2.1.2.12 -> 4 (i32)
TLV-11[16]: 1.3.6.1.2.1.69.1.6.2.1.3.12 -> 0 (i32)
TLV-11[17]: 1.3.6.1.2.1.69.1.6.2.1.4.12 -> 1 (i32)
TLV-11[18]: 1.3.6.1.2.1.69.1.6.2.1.5.12 -> 2048 (i32)
TLV-11[19]: 1.3.6.1.2.1.69.1.6.2.1.2.13 -> 4 (i32)
TLV-11[20]: 1.3.6.1.2.1.69.1.6.2.1.3.13 -> 0 (i32)
TLV-11[21]: 1.3.6.1.2.1.69.1.6.2.1.4.13 -> 1 (i32)
TLV-11[22]: 1.3.6.1.2.1.69.1.6.2.1.5.13 -> 2054 (i32)
TLV-11[23]: 1.3.6.1.2.1.69.1.6.2.1.2.14 -> 4 (i32)
TLV-11[24]: 1.3.6.1.2.1.69.1.6.2.1.3.14 -> 0 (i32)
TLV-11[25]: 1.3.6.1.2.1.69.1.6.2.1.4.14 -> 1 (i32)
TLV-11[26]: 1.3.6.1.2.1.69.1.6.2.1.5.14 -> 34525 (i32)
TLV-11[27]: 1.3.6.1.2.1.69.1.6.3.0 -> 2 (i32)
TLV-11[28]: 1.3.6.1.2.1.69.1.6.4.1.2.10 -> 4 (i32)
TLV-11[29]: 1.3.6.1.2.1.69.1.6.4.1.5.10 -> 3 (i32)
TLV-11[30]: 1.3.6.1.2.1.69.1.6.4.1.11.10 -> 17 (i32)
TLV-11[31]: 1.3.6.1.2.1.69.1.6.4.1.14.10 -> 135 (i32)
TLV-11[32]: 1.3.6.1.2.1.69.1.6.4.1.15.10 -> 139 (i32)
TLV-11[33]: 1.3.6.1.2.1.69.1.6.4.1.2.11 -> 4 (i32)
TLV-11[34]: 1.3.6.1.2.1.69.1.6.4.1.5.11 -> 3 (i32)
TLV-11[35]: 1.3.6.1.2.1.69.1.6.4.1.11.11 -> 6 (i32)
TLV-11[36]: 1.3.6.1.2.1.69.1.6.4.1.14.11 -> 135 (i32)
TLV-11[37]: 1.3.6.1.2.1.69.1.6.4.1.15.11 -> 139 (i32)
TLV-11[38]: 1.3.6.1.2.1.69.1.6.4.1.2.20 -> 4 (i32)
TLV-11[39]: 1.3.6.1.2.1.69.1.6.4.1.11.20 -> 17 (i32)
TLV-11[40]: 1.3.6.1.2.1.69.1.6.4.1.14.20 -> 68 (i32)
TLV-11[41]: 1.3.6.1.2.1.69.1.6.4.1.15.20 -> 68 (i32)
TLV-11[42]: 1.3.6.1.2.1.69.1.6.4.1.2.40 -> 4 (i32)
TLV-11[43]: 1.3.6.1.2.1.69.1.6.4.1.5.40 -> 2 (i32)
TLV-11[44]: 1.3.6.1.2.1.69.1.6.4.1.11.40 -> 6 (i32)
TLV-11[45]: 1.3.6.1.2.1.69.1.6.4.1.14.40 -> 1080 (i32)
TLV-11[46]: 1.3.6.1.2.1.69.1.6.4.1.15.40 -> 1080 (i32)
TLV-11[47]: 1.3.6.1.2.1.69.1.6.4.1.2.60 -> 4 (i32)
TLV-11[48]: 1.3.6.1.2.1.69.1.6.4.1.5.60 -> 3 (i32)
TLV-11[49]: 1.3.6.1.2.1.69.1.6.4.1.11.60 -> 6 (i32)
TLV-11[50]: 1.3.6.1.2.1.69.1.6.4.1.14.60 -> 445 (i32)
TLV-11[51]: 1.3.6.1.2.1.69.1.6.4.1.15.60 -> 445 (i32)
TLV-11[52]: 1.3.6.1.2.1.69.1.6.4.1.2.70 -> 4 (i32)
TLV-11[53]: 1.3.6.1.2.1.69.1.6.4.1.3.70 -> 1 (i32)
TLV-11[54]: 1.3.6.1.2.1.69.1.6.4.1.4.70 -> 2 (i32)
TLV-11[55]: 1.3.6.1.2.1.69.1.6.4.1.5.70 -> 3 (i32)
TLV-11[56]: 1.3.6.1.2.1.69.1.6.4.1.6.70 -> 1 (i32)
TLV-11[57]: 1.3.6.1.2.1.69.1.6.4.1.7.70 -> 0.0.0.0
TLV-11[58]: 1.3.6.1.2.1.69.1.6.4.1.8.70 -> 0.0.0.0
TLV-11[59]: 1.3.6.1.2.1.69.1.6.4.1.9.70 -> 239.32.0.0
TLV-11[60]: 1.3.6.1.2.1.69.1.6.4.1.10.70 -> 255.252.0.0
TLV-11[61]: 1.3.6.1.2.1.69.1.6.4.1.11.70 -> 6 (i32)
TLV-11[62]: 1.3.6.1.2.1.69.1.6.4.1.12.70 -> 1 (i32)
TLV-11[63]: 1.3.6.1.2.1.69.1.6.4.1.13.70 -> 65535 (i32)
TLV-11[64]: 1.3.6.1.2.1.69.1.6.4.1.14.70 -> 1 (i32)
TLV-11[65]: 1.3.6.1.2.1.69.1.6.4.1.15.70 -> 65535 (i32)
TLV-11[66]: 1.3.6.1.2.1.69.1.6.4.1.2.71 -> 4 (i32)
TLV-11[67]: 1.3.6.1.2.1.69.1.6.4.1.3.71 -> 1 (i32)
TLV-11[68]: 1.3.6.1.2.1.69.1.6.4.1.4.71 -> 2 (i32)
TLV-11[69]: 1.3.6.1.2.1.69.1.6.4.1.5.71 -> 3 (i32)
TLV-11[70]: 1.3.6.1.2.1.69.1.6.4.1.6.71 -> 1 (i32)
TLV-11[71]: 1.3.6.1.2.1.69.1.6.4.1.7.71 -> 0.0.0.0
TLV-11[72]: 1.3.6.1.2.1.69.1.6.4.1.8.71 -> 0.0.0.0
TLV-11[73]: 1.3.6.1.2.1.69.1.6.4.1.9.71 -> 239.32.0.0
TLV-11[74]: 1.3.6.1.2.1.69.1.6.4.1.10.71 -> 255.252.0.0
TLV-11[75]: 1.3.6.1.2.1.69.1.6.4.1.11.71 -> 17 (i32)
TLV-11[76]: 1.3.6.1.2.1.69.1.6.4.1.12.71 -> 1 (i32)
TLV-11[77]: 1.3.6.1.2.1.69.1.6.4.1.13.71 -> 65535 (i32)
TLV-11[78]: 1.3.6.1.2.1.69.1.6.4.1.14.71 -> 1 (i32)
TLV-11[79]: 1.3.6.1.2.1.69.1.6.4.1.15.71 -> 65535 (i32)
TLV-11[80]: 1.3.6.1.2.1.69.1.6.4.1.2.72 -> 4 (i32)
TLV-11[81]: 1.3.6.1.2.1.69.1.6.4.1.3.72 -> 1 (i32)
TLV-11[82]: 1.3.6.1.2.1.69.1.6.4.1.4.72 -> 2 (i32)
TLV-11[83]: 1.3.6.1.2.1.69.1.6.4.1.5.72 -> 3 (i32)
TLV-11[84]: 1.3.6.1.2.1.69.1.6.4.1.6.72 -> 1 (i32)
TLV-11[85]: 1.3.6.1.2.1.69.1.6.4.1.7.72 -> 0.0.0.0
TLV-11[86]: 1.3.6.1.2.1.69.1.6.4.1.8.72 -> 0.0.0.0
TLV-11[87]: 1.3.6.1.2.1.69.1.6.4.1.9.72 -> 232.52.0.0
TLV-11[88]: 1.3.6.1.2.1.69.1.6.4.1.10.72 -> 255.252.0.0
TLV-11[89]: 1.3.6.1.2.1.69.1.6.4.1.11.72 -> 6 (i32)
TLV-11[90]: 1.3.6.1.2.1.69.1.6.4.1.12.72 -> 1 (i32)
TLV-11[91]: 1.3.6.1.2.1.69.1.6.4.1.13.72 -> 65535 (i32)
TLV-11[92]: 1.3.6.1.2.1.69.1.6.4.1.14.72 -> 1 (i32)
TLV-11[93]: 1.3.6.1.2.1.69.1.6.4.1.15.72 -> 65535 (i32)
TLV-11[94]: 1.3.6.1.2.1.69.1.6.4.1.2.73 -> 4 (i32)
TLV-11[95]: 1.3.6.1.2.1.69.1.6.4.1.3.73 -> 1 (i32)
TLV-11[96]: 1.3.6.1.2.1.69.1.6.4.1.4.73 -> 2 (i32)
TLV-11[97]: 1.3.6.1.2.1.69.1.6.4.1.5.73 -> 3 (i32)
TLV-11[98]: 1.3.6.1.2.1.69.1.6.4.1.6.73 -> 1 (i32)
TLV-11[99]: 1.3.6.1.2.1.69.1.6.4.1.7.73 -> 0.0.0.0
TLV-11[100]: 1.3.6.1.2.1.69.1.6.4.1.8.73 -> 0.0.0.0
TLV-11[101]: 1.3.6.1.2.1.69.1.6.4.1.9.73 -> 232.52.0.0
TLV-11[102]: 1.3.6.1.2.1.69.1.6.4.1.10.73 -> 255.252.0.0
TLV-11[103]: 1.3.6.1.2.1.69.1.6.4.1.11.73 -> 17 (i32)
TLV-11[104]: 1.3.6.1.2.1.69.1.6.4.1.12.73 -> 1 (i32)
TLV-11[105]: 1.3.6.1.2.1.69.1.6.4.1.13.73 -> 65535 (i32)
TLV-11[106]: 1.3.6.1.2.1.69.1.6.4.1.14.73 -> 1 (i32)
TLV-11[107]: 1.3.6.1.2.1.69.1.6.4.1.15.73 -> 65535 (i32)
TLV-11[108]: 1.3.6.1.6.3.18.1.1.1.8.114.101.97.100.119.114.105.116.101 -> 4 (i32)
TLV-11[109]: 1.3.6.1.6.3.18.1.1.1.2.114.101.97.100.119.114.105.116.101 -> hDaFHJG7
TLV-11[110]: 1.3.6.1.6.3.18.1.1.1.3.114.101.97.100.119.114.105.116.101 -> readwritesec
TLV-11[111]: 1.3.6.1.6.3.18.1.1.1.7.114.101.97.100.119.114.105.116.101 -> 2 (i32)
TLV-11[112]: 1.3.6.1.6.3.16.1.2.1.5.1.12.114.101.97.100.119.114.105.116.101.115.101.99 -> 4 (i32)
TLV-11[113]: 1.3.6.1.6.3.16.1.2.1.3.1.12.114.101.97.100.119.114.105.116.101.115.101.99 -> readwritegroup
TLV-11[114]: 1.3.6.1.6.3.16.1.2.1.4.1.12.114.101.97.100.119.114.105.116.101.115.101.99 -> 2 (i32)
TLV-11[115]: 1.3.6.1.6.3.16.1.2.1.5.2.12.114.101.97.100.119.114.105.116.101.115.101.99 -> 4 (i32)
TLV-11[116]: 1.3.6.1.6.3.16.1.2.1.3.2.12.114.101.97.100.119.114.105.116.101.115.101.99 -> readwritegroup
TLV-11[117]: 1.3.6.1.6.3.16.1.2.1.4.2.12.114.101.97.100.119.114.105.116.101.115.101.99 -> 2 (i32)
TLV-11[118]: 1.3.6.1.6.3.16.1.4.1.9.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112​.0.1.1 -> 4 (i32)
TLV-11[119]: 1.3.6.1.6.3.16.1.4.1.4.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112​.0.1.1 -> 1 (i32)
TLV-11[120]: 1.3.6.1.6.3.16.1.4.1.5.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112​.0.1.1 -> docsisManagerView
TLV-11[121]: 1.3.6.1.6.3.16.1.4.1.6.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112​.0.1.1 -> docsisManagerView
TLV-11[122]: 1.3.6.1.6.3.16.1.4.1.8.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112​.0.1.1 -> 2 (i32)
TLV-11[123]: 1.3.6.1.6.3.16.1.4.1.9.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112​.0.2.1 -> 4 (i32)
TLV-11[124]: 1.3.6.1.6.3.16.1.4.1.4.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112​.0.2.1 -> 1 (i32)
TLV-11[125]: 1.3.6.1.6.3.16.1.4.1.5.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112​.0.2.1 -> docsisManagerView
TLV-11[126]: 1.3.6.1.6.3.16.1.4.1.6.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112​.0.2.1 -> docsisManagerView
TLV-11[127]: 1.3.6.1.6.3.16.1.4.1.8.14.114.101.97.100.119.114.105.116.101.103.114.111.117.112​.0.2.1 -> 2 (i32)
TLV-11[128]: 1.3.6.1.4.1.1166.1.19.3.1.25.0 -> 1 (i32)
SB5102 CM Agent w/ BRCM Factory Support processing TLV-11's
SNMP packet sent to 96.133.48.47:225


*
*
* ecroot.cpp : eCosNewHandler() - Operator new failed to allocate memory (not
* enough contiguous memory to satisfy the request)!
*
* Deliberately crashing and rebooting so that we don't hang forever...
*
*


>>> YIKES... looks like you may have a problem! <<<

r0/zero=00000000 r1/at =fffffffe r2/v0 =00000000 r3/v1 =807f6738
r4/a0 =80440000 r5/a1 =807f6738 r6/a2 =00000001 r7/a3 =8047b470
r8/t0 =805c6930 r9/t1 =1000ff00 r10/t2 =00000000 r11/t3 =c8000000
r12/t4 =804514f8 r13/t5 =807ec3ec r14/t6 =64000000 r15/t7 =807ec410
r16/s0 =00000800 r17/s1 =80788318 r18/s2 =80566638 r19/s3 =80400000
r20/s4 =80736974 r21/s5 =80430000 r22/s6 =11110016 r23/s7 =11110017
r24/t8 =00000000 r25/t9 =00000032 r26/k0 =807f66d8 r27/k1 =807f6030
r28/gp =80458fa0 r29/sp =806aebb0 r30/fp =806aec80 r31/ra =8033c330

PC : 0x80247394 error addr: 0x00000000
cause: 0x0000000c status: 0x1000ff03

BCM interrupt enable: ffffbfff, status: 00000000
Instruction at PC: 0xa0000000

entry 80247368 called from 8033c328
entry 8033c2e0 called from 8033c3b4
entry 8033c3ac called from 801a44ec
entry 801a44b4 called from 801a3944
entry 801a3938 called from 80107f60
entry 80107f20 called from 80112c00
entry 80112b50 called from 80265318
entry 80263938 called from 802fb2e4
entry 802fb2ac called from 802fb2a4
entry 802fb2ac Return address (00000000) invalid. Trace stops.

Task: CMHH
---------------------------------------------------
ID: 0x0019
Handle: 0x807f66d8
Set Priority: 21
Current Priority: 21
State: SUSP
Stack Base: 0x806adb24
Stack Size: 4500 bytes
Stack Used: 1192 bytes
Stack Stack Stack
TaskId TaskName Priority State Size Used Margin
---------- -------------------------------- -------- -------- -------- -------- --------
0x80513f20 pthread.00000800 15 EXIT 7852 1104 6748
0x8048a1c8 tStartup 18 SLEEP 12288 5208 7080
0x8054b9ac Rajko HttpD 23 SLEEP 3280 2300 980
0x807f579c NonVol Device Async Helper 25 RUN 3072 992 2080
0x807ebc7c Motorola Standby Switch Thread 23 SLEEP 4096 440 3656
0x807ea984 Motorola Vendor Ctl Thread 23 SLEEP 4096 512 3584
0x807f64e8 WDOG 17 RUN 5120 2792 2328
0x807e4c4c BFC Ping Thread 29 SLEEP 6144 484 5660
0x807dfb50 ConsoleThread 27 RUN 36864 1820 35044
0x807d4e2c TelnetD 23 RUN 2256 1764 492
0x807c4e14 CfgVB Thread 23 SLEEP 4096 2632 1464
0x807c37c4 DHCM 25 SLEEP 16384 504 15880
0x807bded4 Event Log Thread 25 RUN 8192 2208 5984
0x8079959c Time Of Day Thread 23 SLEEP 6144 1656 4488
0x80799a0c CmDocsisIpThread 23 SLEEP 8192 2568 5624
0x80792d48 CmBpiManagerThd 25 SLEEP 8192 572 7620
0x8078f1c8 CmDsxHelper 23 SLEEP 8192 504 7688
0x807aafd0 CmDocsisCtlThread 21 SLEEP 8192 5824 2368
0x80788094 Scan Downstream Thread 23 SLEEP 4096 1748 2348
0x80784e70 RateShaping Thread 23 SLEEP 4096 444 3652
0x807f65e0 CMHL 23 RUN 4500 1160 3340
0x807f66d8 CMHH 21 SUSP 4500 1192 3308
0x807f67d0 ENRX 23 RUN 4500 1112 3388
0x807f68c8 ENTX 23 SLEEP 4500 788 3712
0x807f69c0 ELNK 23 SLEEP 4500 324 4176
0x807f6ab8 USTX 23 SLEEP 4500 344 4156
0x807f6bb0 USRX 23 SLEEP 4500 376 4124
0x807f6ca8 UBCT 19 SLEEP 4500 360 4140
0x807f6da0 USRN 23 SLEEP 4500 344 4156
0x806a4c68 DHCP Client Thread 23 SLEEP 12288 2580 9708
0x807f6e98 IpHalIst 23 RUN 4500 908 3592
0x8069ede0 CmPropaneCtlThread 23 SLEEP 8192 1636 6556
0x8069ade0 IGMP Thread 23 SLEEP 4096 460 3636
0x806994e4 NetToMedia Thread 23 SLEEP 4096 1752 2344
0x80696898 Trap Thread 23 SLEEP 16384 516 15868
0x807f6030 SNMP Thread 23 RUN 20480 5372 15108
0x805c2554 DHCP Server Thread 23 SLEEP 8192 1532 6660
0x8047b410 tNonVolTimer 30 SLEEP 2048 1028 1020
0x8048f818 Idle Thread 31 RUN 2048 1064 984
0x805131d0 Network alarm support 6 SLEEP 2256 1232 1024
0x804924c8 Network support 7 SLEEP 8192 1872 6320
Done!

Can someone please point me to documentation on what is md5'd in the CMTS MIC? I am trying to understand specifically how DOCSIS 3 security model would prevent a user from getting a legitimate subbed config for one tier and then changing to a different (cheaper) tier and continuing to use the previous config. I'm very much enjoying learning about how DOCSIS 3 security feature work and would love to read some documentation on how these are implemented on the CMTS.

Thanks in advance!

Does anyone know how to change HFC MAC&serial on Ambit 250?
I take this modem from Virgin to UPC because I get from them rubbish modem/router (Thomson TWG870UG) but UPC refused activate this modem. How to change MAC&serial?