Huawei HG612 Hacking

Can someone please tell me what file I should be using from here http://huaweihg612hacking.wordpress.com/about/ to upload to the modem for unlocking.
I have the toolkit and got to the page to select the file but am now stumped.

Follow the instructions? http://huaweihg612hacking.files.wordpress.com/2011/1...

but which file? It doesn't state..

Am i being blind?

EDIT.... I assume the unlocked_sp10 but there is nothing in that folder...

Edited by deleted (Sat 04-Feb-12 15:18:57)

I can see a zip file with 3 files inside.

Is there on your link and batboys instructions. Is the bit that mentions images to confuse things.

Goes to this.

https://docs.google.com/leaf?id=0B6wW18mYskvBYzQ5NDg...

Unlocked firmware.

Easy enough to do. Just run a second lead from the white modem using the now working LAN2 to a spare port on the router and can get to all the good stuff on the computer and the modems own web pages whenever as modem is linked to the network using the 2nd lead.

Then try this.
Not easy, At least I thought so as only took me about 18 hours to get right.

http://forums.thinkbroadband.com/fibre/f/4083372-hua...

So was what I found.
unlocked one. easy stuff or not as matbe does not say. I might have just took a guess when doing this.

Found you bit now can see thread again as writting my bit.

Needs winzip or something to unzip the files to a place or folder and then there ready to go as in instructions.

I did and not the world cleverest so ok. have a go.

I must be missing something here....
when i open "unlocked_sp10 " the folder is empty. unlocked_sp06 has a read me saying to use the sp10..

Thanks for the link... File are in there but not on the original link i posted....

Will give it a go now....

Click out link and do the download bit at the top (sort of) right. Save to a place, I choose desktop. Click the zip folder that it is and open and let winzip do it's think.

What I did and it shows on the screen shot as desktop in background.

Unzip to another place. I got white modem file in my documents.

Easy stuff.

https://picasaweb.google.com/101665468320484615712/D...

from Daniel

Nice one.

Unlocking is the easy bit.

Doing the graph logging thing, hard.

Not if you follow it all carefully and are good at computers, me made a right mess of it all.

The unlocking things gives you things to do in black boxes like 80's stylee or it's own web pages are good.

Hours ( not quite!) of fun.

All done now, cheers all....

# xdslcmd info --show
xdslcmd: ADSL driver and PHY status
Status: Showtime
Retrain Reason: 0
Max: Upstream rate = 6727 Kbps, Downstream rate = 41092 Kbps
Path: 0, Upstream rate = 6727 Kbps, Downstream rate = 34336 Kbps

Link Power State: L0
Mode: VDSL2 Annex B
VDSL2 Profile: Profile 17a
TPS-TC: PTM Mode
Trellis: U:ON /D:ON
Line Status: No Defect
Training Status: Showtime
Down Up
SNR (dB): 6.6 6.0
Attn(dB): 0.0 0.0
Pwr(dBm): 12.1 3.0

hg612_unlocked_sp10_firmware.zip contains

Directory of hg612_unlocked_sp10_firmware

26/11/2011 20:42 933,345 hg612_unlock_instructions_v1.3.pdf
04/02/2012 15:47 <DIR> original_sp10_firmware
04/02/2012 15:47 <DIR> unlocked_sp10_firmware
1 File(s) 933,345 bytes

Directory of hg612_unlocked_sp10_firmware\original_sp10_firmware

30/08/2011 01:27 3,494,109 bcm96368MVWG_fs_kernel_HG612V100R001C01B028SP10
1 File(s) 3,494,109 bytes

Directory of hg612_unlocked_sp10_firmware\unlocked_sp10_firmware

31/08/2011 20:54 3,494,109 bcm96368MVWG_fs_kernel_HG612V100R001C01B028SP10unlocked002
1 File(s) 3,494,109 bytes

Total Files Listed:
3 File(s) 7,921,563 bytes
8 Dir(s) 173,879,046,144 bytes free

I got this, when I get the right words to start it. Always forget and do wrong.


Welcome Visiting Huawei Home Gateway
Copyright by Huawei Technologies Co., Ltd.
Login:admin
Password:
ATP># xdslcmd info --show
^
ATP> xdslcmd info --show
^
ATP>xdslcmd info --show
^
ATP>sh


BusyBox v1.9.1 (2010-10-15 17:59:06 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

# xdslcmd info --show
xdslcmd: ADSL driver and PHY status
Status: Showtime
Retrain Reason: 0
Max: Upstream rate = 22723 Kbps, Downstream rate = 65064 Kbps
Path: 0, Upstream rate = 1999 Kbps, Downstream rate = 39998 Kbps

Link Power State: L0
Mode: VDSL2 Annex B
VDSL2 Profile: Profile 17a
TPS-TC: PTM Mode
Trellis: U:ON /D:ON
Line Status: No Defect
Training Status: Showtime
Down Up
SNR (dB): 13.4 29.0
Attn(dB): 0.0 0.0
Pwr(dBm): 12.4 4.6
VDSL2 framing
Path 0
B: 239 31
M: 1 2
T: 64 36
R: 0 16
S: 0.1909 0.9922
L: 10055 645
D: 1 1
I: 240 80
N: 240 80
Counters
Path 0
OHF: 2051297668 1252520
OHFErr: 47483 27
RS: 0 4293794
RSCorr: 0 142
RSUnCorr: 0 0

Path 0
HEC: 27946 0
OCD: 0 0
LCD: 0 0
Total Cells: 1586415109 0
Data Cells: 170033990 0
Drop Cells: 0
Bit Errors: 0 0

ES: 11653 27
SES: 121 0
UAS: 18 18
AS: 6291737

Path 0
INP: 0.00 0.00
PER: 3.05 13.39
delay: 0.00 0.00
OR: 65.46 57.33

Bitswap: 35272 560

#

In reply to a post by Daniel_g:

Then try this.
Not easy, At least I thought so as only took me about 18 hours to get right.

http://forums.thinkbroadband.com/fibre/f/4083372-hua...

A new & improved setting up process is very close to being released.

If it takes anyone longer than 18 minutes to set up in the near future, I'd be surprised.

Edited by deleted (Sun 05-Feb-12 00:29:50)

just opened mine up and was very happy to see the results:

Text
1 23 45 6	# xdslcmd info --state xdslcmd: ADSL driver and PHY statusStatus: Showtime Retrain Reason: 0Max: Upstream rate = 37188 Kbps, Downstream rate = 100336 Kbps Path: 0, Upstream rate = 10000 Kbps, Downstream rate = 39998 Kbps

[img]http://www.speedtest.net/result/1753517280.png[/img]

Just did mine ...


# xdslcmd info --state
xdslcmd: ADSL driver and PHY status
Status: Showtime
Retrain Reason: 0
Max: Upstream rate = 2410 Kbps, Downstream rate = 19696 Kbps
Path: 0, Upstream rate = 2400 Kbps, Downstream rate = 18545 Kbps

# xdslcmd info --show
xdslcmd: ADSL driver and PHY status
Status: Showtime
Retrain Reason: 0
Max: Upstream rate = 2413 Kbps, Downstream rate = 18792 Kbps
Path: 0, Upstream rate = 2400 Kbps, Downstream rate = 18545 Kbps

Link Power State: L0
Mode: VDSL2 Annex B
VDSL2 Profile: Profile 17a
TPS-TC: PTM Mode
Trellis: U:ON /D:ON
Line Status: No Defect
Training Status: Showtime
Down Up
SNR (dB): 6.3 6.3
Attn(dB): 0.0 0.0
Pwr(dBm): 9.9 5.9

In reply to a post by jjpearce:

Just did mine ...

That's even worse than my connection.

What do you see in xdslcmd info --pbParams

That will show attenutation etc.

& how far would you say you are from the cabinet & do you know if any aluminium cabling is included in your D-side?

Not sure about aluminium. Line length approx 967m.


# xdslcmd info --pbParams
xdslcmd: ADSL driver and PHY status
Status: Showtime
Retrain Reason: 0
Max: Upstream rate = 2407 Kbps, Downstream rate = 19896 Kbps
Path: 0, Upstream rate = 2400 Kbps, Downstream rate = 18545 Kbps

Discovery Phase (Initial) Band Plan
US: (0,95) (868,1207) (1972,2783)
DS: (32,859) (1216,1963) (2792,3939)
Medley Phase (Final) Band Plan
US: (0,95) (868,1207)
DS: (32,859) (1216,1963)
VDSL Port Details Upstream Downstream
Attainable Net Data Rate: 2407 kbps 19896 kbps
Actual Aggregate Tx Power: 5.9 dBm 9.8 dBm
============================================================================
VDSL Band Status U0 U1 U2 U3 D1 D2 D3
Line Attenuation(dB): 10.2 59.4 61.8 N/A 23.3 67.7 0.1
Signal Attenuation(dB): 14.9 58.8 N/A N/A 23.3 67.7 N/A
SNR Margin(dB): 6.3 6.4 N/A N/A 7.4 0.0 N/A
TX Power(dBm): -3.9 5.5 N/A N/A 9.8 -128.0 N/A

In reply to a post by jjpearce:

Not sure about aluminium. Line length approx 967m.

These are my pbParams stats:-

Text

1 23 45 67 89 1011 1213 1415 1617 1819 2021 2223 2425 2627 2829

# xdslcmd info --pbParams xdslcmd: ADSL driver and PHY statusStatus: Showtime Retrain Reason: 0Max:    Upstream rate = 6220 Kbps, Downstream rate = 32216 Kbps Path:   0, Upstream rate = 6209 Kbps, Downstream rate = 29699 Kbps  Discovery Phase (Initial) Band PlanUS: (0,95) (868,1207) (1972,2783) DS: (32,859) (1216,1963) (2792,3939) Medley Phase (Final) Band Plan US: (0,95) (868,1207) DS: (32,859) (1216,1963)        VDSL Port Details       Upstream        DownstreamAttainable Net Data Rate:       6220 kbps         32216 kbps Actual Aggregate Tx Power:        6.2 dBm          12.3 dBm============================================================================   VDSL Band Status        U0      U1      U2      U3      D1      D2      D3  Line Attenuation(dB):  8.2     52.3    63.8     N/A    21.4    62.6    0.1    Signal Attenuation(dB):  14.5    51.5     N/A     N/A    21.4    62.6     N/A           SNR Margin(dB):  6.0     6.2      N/A     N/A    4.2     4.2      N/A            TX Power(dBm): -4.3     5.8      N/A     N/A    10.9    6.4      N/A   # # xdslcmd info --Bits xdslcmd: ADSL driver and PHY status Status: ShowtimeRetrain Reason: 0 Max:    Upstream rate = 6220 Kbps, Downstream rate = 32216 KbpsPath:   0, Upstream rate = 6209 Kbps, Downstream rate = 29699 Kbps

An engineer's JDSU reported a line length of 1000m, but I believe it to be around 850m in reality.

I did get higher speeds for the first month.

Have you ever achieved higher speeds than at present?

The attenuation figures suggest maybe a 100 metre difference between the lines.

But I find it interesting that @jjpearce's transmit powers seem to be a lot lower! I wonder why that is?

From my understanding, power levels are adjusted (if necessary) at each cabinet, lowering them if crosstalk onto ADSL connections, where signals are already weakened by travelling long distances from the exchange, would be either a real, or a perceived issue.

I would guesstimate that my cabinet is around 4.3km from the exchange & I have wondered if that could be one reason why my speeds have deteriorated. i.e. that power levels have been reduced since the first month's higher speeds.

Unfortunately I do not have any connection stats from that first month for comparison against my current stats.

Alternatively, a 20Mb sync speed cap (for whatever reason) would produce an IP profile of around 19.4Mb & throughput as shown by speedtest.net of around 18.7Mb (maximum) at a quiet time.

Edited by deleted (Mon 06-Feb-12 07:14:42)

In reply to a post by Bald_Eagle1:

From my understanding, power levels are adjusted (if necessary) at each cabinet, lowering them if crosstalk onto ADSL connections, where signals are already weakened by travelling long distances from the exchange, would be either a real, or a perceived issue.

Yes - but the reduction only happens in the first 1-2 MHz. ie exactly where the ADSL and ADSL2+ frequency bands are.

The power levels over the higher frequencies can carry on as normal - so shouldn't affect (say) the values seen in the D2 and D3 bands.

I would guesstimate that my cabinet is around 4.3km from the exchange & I have wondered if that could be one reason why my speeds have deteriorated. i.e. that power levels have been reduced since the first month's higher speeds.

It is certainly a possibility - but without the detailed graphs, we'll never know.

Those cabinets close to the exchange should show less of a reduction in power (especially at lower frequencies), but over a larger portion of the 2MHz. Those cabinets farther away will see the power restricted more, but over fewer frequencies - under the assumption that the higher ADSL/ADSL2+ frequencies are no longer capable of sustaining data that far out. The furthest cabs will see a restriction only as high as 600kHz.

Picture of the power restrictions is in here, on page 31. The masks could have changed for the 17a profile, but probably only to account for the shift in bandplan (ie the 3-3.75MHz bit changing from up to down).

Looking at those, it is hard to tell whether you'll lose or gain by the choice of mask.

Incidentally - you can see this effect of the masks on the graphs we've been getting from the modems:

My original line is closer to the exchange, and shows the reduction in SNR up to tone 500, but note that the peak around tone 100 is 10dB higher than the peak around tone 500.

Conversely, my new line is farther from the exchange, and shows the reduction in SNR only up to tone 350. However, this time the peak at tone 100 is now around 5dB lower than the peak at tone 400.

Downloaded the files and thinking of giving it a go. Does one have to disconnect the LAN1 lead first or not? It is not clear from the instructions if it should be/can be left connected.

TIA

DrT