Haxorware Forums

Fix. So here is the event log: http://pastebin.com/jx80n1T5 and here is the subsequent telnet log from the same time period: http://pastebin.com/YUgT2wQr. For those too impatient to load a page, i have attached the telnet log to the bottom of this post.
Thanks for the help!
gbradm

*******************************************************


Transcript from Android Terminal Emulator
Brad <george.@gmail.com> Sat, Nov 10, 2012 at 6:25 PM
To: George Bradley <george.@gmail.com>
u0_a64@android:/ $ telnet 192.168.1.117

Entering character mode
Escape character is '^]'.

Haxorware integrated telnet daemon

Username: root
Password: ********
Welcome.
Attempting Downstream FEC lock @ freq= 613750000 Hz, QAM64
CM>

Error - Unknown command: ''
CM> Attempting Downstream FEC lock @ freq= 619750000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 625750000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 631750000 Hz, QAM64
Favorite[0].freq = 681000000
Attempting Downstream FEC lock @ freq= 681000000 Hz, QAM64/256
Go back to 1st favorite
Attempting Downstream FEC lock @ freq= 115750000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 493750000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 127750000 Hz, QAM64
Favorite[0].freq = 681000000
Attempting Downstream FEC lock @ freq= 681000000 Hz, QAM64/256
Go back to 1st favorite
Attempting Downstream FEC lock @ freq= 121750000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 499750000 Hz, QAM256
*********************************
********* *********
********* EDITED *********
********* *********
*********************************
Attempting Downstream FEC lock @ freq= 505750000 Hz, QAM256
Attempting Downstream FEC lock @ freq= 337750000 Hz, QAM256
Found energy at frequency 337750000Hz! Publishing event kEventEnergyDetected...
Attempting Downstream FEC lock @ freq= 331750000 Hz, QAM256
Attempting Downstream FEC lock @ freq= 325750000 Hz, QAM256
Attempting Downstream FEC lock @ freq= 139750000 Hz, QAM256
Favorite[0].freq = 681000000
Attempting Downstream FEC lock @ freq= 681000000 Hz, QAM64/256
0x00721dc0 [CmDocsisCtlThread] BcmCmDocsisCtlThread::StartUsInit: (CmDocsisCtlThread) Locked on the downstream. Waiting for UCDs...

******************************************
DOWNSTREAM STATUS
******************************************
Tuner Frequency = 681000000 Hz
Carrier Offset = -1 Hz
Symbol rate = 5360537 sym/sec
SNR = 37 dB
QAM Mode = QAM256
Tuner AGC = 0xfff00000
IF AGC = 0x136311eb
Power Level = 5 dB
QAM = LOCKED
FEC = LOCKED
******************************************

Calculating maximum number of IP filters:
Each IP filter consumes 1856 bytes of RAM.
Current free RAM is 246932 bytes.
Max heap reserved for IP filters (25%) = 61733
We can support 33 IP filters.
Calculating maximum number of LLC filters:
Each LLC filter consumes 724 bytes of RAM.
Current free RAM is 246932 bytes.
Max heap reserved for LLC filters (25%) = 61733
We can support 85 LLC filters.
CM> Selecting UCD for Us Channel 2

0x00722626 [CmDocsisCtlThread] BcmCmDocsisCtlThread::TestAndLaunchDsTimeSync: (CmDocsisCtlThread) starting ds time sync acquisition...
0x007228c4 [CmDocsisCtlThread] BcmCmDocsisCtlThread::SyncDsSyncOk: (CmDocsisCtlThread) downstream time sync acquired...
0x007228c4 [CmDocsisCtlThread] BcmCmDocsisCtlThread::DsSyncOkResumeUsInit: (CmDocsisCtlThread) pre-REG upstream target case...starting initial ranging.
Beginning initial ranging...
Using stored initial upstream power = 41.0 dBmV
0x007228ce [CmDocsisCtlThread] BcmCmDocsisCtlThread::SyncDsSyncOk: (CmDocsisCtlThread) rx unexpected kDsSyncOk indication...
Logging event: Acquired Downstream (681000000 Hz)........ SUCCESS
RNG-RSP Adj: tim=4000 power=-6 freq=0 Stat=Continue
RNG-RSP Adj: tim=0 power=0 freq=0 Stat=Continue
RNG-RSP Adj: tim=0 power=0 freq=0 Stat=Continue
RNG-RSP Adj: tim=0 power=0 freq=0 Stat=Continue
RNG-RSP Adj: tim=0 power=0 freq=0 Stat=Success

******************************************
UPSTREAM STATUS
******************************************
Upstream Status = UP
Upstream Channel = 2
Upstream Frequency = 28200000 Hz
Upstream Power = 40 dBmV
Ranging SID = 0x57f
Upstream Symbol Rate = 5120000 sym/sec
******************************************

Starting IP Initialization with DHCP...
DHCPc: Waiting 1 seconds before sending Discover; client id htype=1, value=00:11:e3:c6:d5:db
Logging event: Acquired Upstream .......... SUCCESS
CM> DHCPc: Sending Discover packet; client id htype=1, value=00:11:e3:c6:d5:db
DHCPc: Received an Offer from DHCP server c4:71:fe:76:98:e2 (96.70.158.1); lease client id htype=1, value=00:11:e3:c6:d5:db
CM> DHCPc: Timed out waiting for offers for lease with client id htype=1, value=00:11:e3:c6:d5:db
DHCPc: Sending Request packet; client id htype=1, value=00:11:e3:c6:d5:db
DHCPc: Received an Ack from DHCP server c4:71:fe:76:98:e2 (96.70.158.1); lease client id htype=1, value=00:11:e3:c6:d5:db
Current IP address is default 0.0.0.0.
0x00724502 [DHCP Client Thread] BcmEcosIpHalIf::ConfigureLeaseImpl: (IP Stack1 HalIf)
Configuring IP stack 1:
IP Address = 73.13.183.182 (primary IP address)
Subnet Mask = 255.255.254.0
Router = 73.13.182.1
IsPrimaryInterface = 1

Logging event: DHCP WARNING - Non-critical field invalid in response.
ARPing for default GW IP = 73.13.182.1
MAC = c4:71:fe:76:98:e2
DHCP completed successfully!

DHCP Settings:
Client Id = htype=1, value=00:11:e3:c6:d5:db
State = Renewing (5)
Static Lease = 0
AutoConfig Mode = IP, Subnet and Router
XID = 0x675b7106
Number of Tries = 0
Max Discover Tries = 6
Max Request Tries = 6
DHCP server MAC addr = c4:71:fe:76:98:e2
Ignore NAKs = 0
My offered IP address = 73.13.183.182 (primary IP address)
(1) Subnet Mask = 255.255.254.0
(3) Router IP address = 73.13.182.1
(54) DHCP Server IP address = 69.252.196.132
(82) Relay Agent IP address = 96.70.158.1
TFTP Server IP address = 68.86.58.223
CM Configuration file = 'd11_m_dcm425_silver_c01.cm'
(2) UTC Time Offset = -18000 seconds
(4) Time Server IP address = 69.252.196.198
(6) Domain Name Server = 68.87.68.162; 68.87.74.162
(7) Log Server IP address = 0.0.0.0
(51) Lease time = 503770 seconds
(58) T1 (renew) = 251885 seconds
(59) T2 (rebind) = 440798 seconds
Lease is infinite = 0

SB5102 CM Agent w/ BRCM Factory Support IpStackEvent: Ip=73.13.183.182, Subnet=255.255.254.0, Gateway=73.13.182.1
CmSnmpAgent::IpAddressAcquiredEvent for SB5102 CM Agent w/ BRCM Factory Support
IP addr = 73.13.183.182
Starting Time Of Day...
0x007245a2 [CmDocsisIpThread] BcmDocsisTimeOfDayThread::SetTodServerIpAddress: (Time Of Day Thread) ToD servers: 69.252.196.198
Connecting to ToD server 69.252.196.198...
Sending UDP ToD request to server...
SNMP Agent Binding to 73.13.183.182:225
Logging event: Retrieved DHCP .......... SUCCESS
CM> UTC returned by ToD server 3561574874; UTC offset -18000
Current system time -> Sat Nov 10 17:21:14 2012

System start time -> Sat Nov 10 15:16:25 2012

Starting Tftp of configuration file...
Opening file 'd11_m_dcm425_silver_c01.cm' on 68.86.58.223 for reading...
tftp-enforce bypass is DISABLED
Storing received cfg of size 4938 to memory
Tftp read < 512 bytes, we have reached end of file.
Tftp transfer complete!
TFTP Settings:
Stack Interface = 1
Server Ip Address = 68.86.58.223
Server Port Number = 69
Total Blocks Read = 10
Total Bytes Read = 4938

Config file was read! IP Initialization completed...
MAX CPE per CM is being set to 32
TLV-11[1]: 1.3.6.1.2.1.69.1.3.3.0 -> 2 (i32)
TLV-11[2]: 1.3.6.1.2.1.69.1.2.1.2.1 -> 68.85.0.0
TLV-11[3]: 1.3.6.1.2.1.69.1.2.1.3.1 -> 255.255.0.0
TLV-11[4]: 1.3.6.1.2.1.69.1.2.1.4.1 -> hDaFHJG7
*********************************
********* *********
********* EDITED *********
********* *********
*********************************
TLV-11[172]: 1.3.6.1.2.1.69.1.6.4.1.15.73 -> 65535 (i32)
Time Of Day completed...
DefaultSnmpAgentClass::SystemTimeChangeEvent for SB5102 CM Agent w/ BRCM Factory Support
Logging event: Retrieved TFTP Config d11_m_dcm425_silver_c01.cm SUCCESS
Logging event: Retrieved Time....... SUCCESS
SB5102 CM Agent w/ BRCM Factory Support processing TLV-11's
SNMP packet sent to 73.13.183.182:225
Insufficient heap to handle SNMP packet - TOO_BIG.
(PDU = 204084, heap = 31372)
TLV-11 failure: error status=1, error index=0
Invalid TLV-11's: 1 wrong values, 0 duplicate sets.
SNMP Error'd but Haxorware doesn't care AT ALL!
Onwards mateys!

Sending a REG-REQ to the CMTS...
Received a REG-RSP message from the CMTS...
0x007251aa [CmDocsisCtlThread] BcmCmDocsisCtlThread::RegRspMsgEvent: (CmDocsisCtlThread) We registered with a DOCSIS 1.1 config file!
Registration complete!
Process CVC
Co-signer CVC verified
At least one CVC is valid.
DOCSIS CoS/QoS rate shaping enable is now 1
CmSnmpAgent::CmOperationalEvent for SB5102 CM Agent w/ BRCM Factory Support
CmSnmpAgent operating in 1.1 mode, including docsQos, excluding docsBpi
+++ No DH kickstart profiles or snmpCommunityTable entries installed.
We will operate in NMACCESS mode.
SB5102 CM Agent w/ BRCM Factory Support setting V1/V2 view to docsisNmAccessView
SB5102 CM Agent w/ BRCM Factory Support enabling management.
SB5102 CM Agent w/ BRCM Factory Support sending deferred traps...
Done w/ deferred traps.
SB5102 CPE Agent w/ BRCM Factory Support setting V1/V2 view to docsisNmAccessView
0x00725204 [CmDocsisCtlThread] BcmCmDocsisCtlThread::TestAndLaunchBpkm: (CmDocsisCtlThread) BPKM disabled via manufacturing setting.
Enabling network access for all CPE ports.

mot_scanList: Writing to Flash!
NonVolDeviceDriver::NonVolDriverWrite: WARNING - Current segment size < buffer size! Increasing the segment size!
BcmCmDocsisStatusEventCodes::kCmIsOperational
Suspending SNMP Thread
0x007254c0 [CmDocsisCtlThread] BcmVendorCmApplication::StopDhcpServer: (VendorExtension CmApp) Shutting down DHCP Server...
0x007254c0 [CmDocsisCtlThread] BcmStandbySwitchThread::CmIsOperational: (Motorola Standby Switch Thread) Simulating a press of the standby switch to get the state configured properly.
0x007254ca [IGMP Thread] BcmIgmpThread::Starting Igmp Thread...: (IGMP Thread)
0x007254d4 [Motorola Standby Switch Thread] BcmStandbySwitchThread::ThreadMain: (Motorola Standby Switch Thread) Standby switch was pressed!
0x007254d4 [Motorola Standby Switch Thread] BcmStandbySwitchThread::ProcessSwitchEvent: (Motorola Standby Switch Thread) Standby switch disabled in nonvol; ignoring event.
Logging event: TLV-11 - Illegal Set operation failed
Sending syslog message from IF 1 to 192.168.1.10:
<130> CABLEMODEM [DOCSIS]: <73040200> TLV-11 - Illegal Set operation failed
SB5102 CM Event Log w/ BRCM Factory Support sending deferred async messages...
Sending syslog message from IF 1 to 192.168.1.10:
<130> CABLEMODEM [DOCSIS]: <84000200> SYNC Timing Synchronization failure - Failed to acquire FEC framing
Sending syslog message from IF 1 to 192.168.1.10:
<133> CABLEMODEM [Motorola Corporation]: <2300955725> Ethernet link up - ready to pass packets
Sending syslog message from IF 1 to 192.168.1.10:
<130> CABLEMODEM [DOCSIS]: <84000100> SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
Sending syslog message from IF 1 to 192.168.1.10:
<130> CABLEMODEM [DOCSIS]: <84000100> SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
Sending syslog message from IF 1 to 192.168.1.10:
<130> CABLEMODEM [DOCSIS]: <84000100> SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
Sending syslog message from IF 1 to 192.168.1.10:
<130> CABLEMODEM [DOCSIS]: <84000100> SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
Sending syslog message from IF 1 to 192.168.1.10:
*********************************
********* *********
********* EDITED *********
********* *********
*********************************
Sending syslog message from IF 1 to 192.168.1.10:
<130> CABLEMODEM [DOCSIS]: <84000100> SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
Sending syslog message from IF 1 to 192.168.1.10:

Your on Comcast and are operational but no Public IP, And the modem re-boots.

This is where you are 169'ed

mot_scanList: Writing to Flash!
NonVolDeviceDriver::NonVolDriverWrite: WARNING - Current segment size < buffer size! Increasing the segment size!
BcmCmDocsisStatusEventCodes::kCmIsOperational
Suspending SNMP Thread
0x007254c0 [CmDocsisCtlThread] BcmVendorCmApplication::StopDhcpServer: (VendorExtension CmApp) Shutting down DHCP Server...

So is there a fix or some where i should look for some thing else to read? Thanks

(11-11-2012, 12:07 AM)ABMJR Wrote: [ -> ]Your on Comcast and are operational but no Public IP, And the modem re-boots.

This is where you are 169'ed

mot_scanList: Writing to Flash!
NonVolDeviceDriver::NonVolDriverWrite: WARNING - Current segment size < buffer size! Increasing the segment size!
BcmCmDocsisStatusEventCodes::kCmIsOperational
Suspending SNMP Thread
0x007254c0 [CmDocsisCtlThread] BcmVendorCmApplication::StopDhcpServer: (VendorExtension CmApp) Shutting down DHCP Server...

Your trying to be pushed a F/W update but SNMP i disabled...Do you have "Disable SNMP after registration " checked/ticked/

Yes I do.

(11-11-2012, 12:20 AM)ABMJR Wrote: [ -> ]Your trying to be pushed a F/W update but SNMP i disabled...Do you have "Disable SNMP after registration " checked/ticked/

---

I take it i should unchecked it?

(11-11-2012, 12:20 AM)ABMJR Wrote: [ -> ]Your trying to be pushed a F/W update but SNMP i disabled...Do you have "Disable SNMP after registration " checked/ticked/

yes...

Okay i disabled that option.. and rebooted the modem. Here is the telnet log:

u0_a64@android:/ $ telnet 192.168.1.117

Entering character mode
Escape character is '^]'.

Haxorware integrated telnet daemon

Username: root
Password: ********
Welcome.
Attempting Downstream FEC lock @ freq= 631750000 Hz, QAM64
CM>
CM> Attempting Downstream FEC lock @ freq= 637750000 Hz, QAM64
Attempting Downstream FEC lock @ freq= 643750000 Hz, QAM64
**********************************************************
******* **********
******* EDITED **********
******* **********
**********************************************************
Attempting Downstream FEC lock @ freq= 781750000 Hz, QAM64
Found energy at frequency 781750000Hz! Publishing event kEventEnergyDetected...
Attempting Downstream FEC lock @ freq= 787750000 Hz, QAM64
**********************************************************
******* **********
******* EDITED **********
******* **********
**********************************************************
Attempting Downstream FEC lock @ freq= 847750000 Hz, QAM64
Favorite[0].freq = 675000000
Attempting Downstream FEC lock @ freq= 675000000 Hz, QAM64/256
0x00011a44 [CmDocsisCtlThread] BcmCmDocsisCtlThread::StartUsInit: (CmDocsisCtlThread) Locked on the downstream. Waiting for UCDs...

******************************************
DOWNSTREAM STATUS
******************************************
Tuner Frequency = 675000000 Hz
Carrier Offset = -16 Hz
Symbol rate = 5360537 sym/sec
SNR = 38 dB
QAM Mode = QAM256
Tuner AGC = 0xfff00000
IF AGC = 0x133ce893
Power Level = 6 dB
QAM = LOCKED
FEC = LOCKED
******************************************

Calculating maximum number of IP filters:
Each IP filter consumes 1836 bytes of RAM.
Current free RAM is 239312 bytes.
Max heap reserved for IP filters (25%) = 59828
We can support 32 IP filters.
Calculating maximum number of LLC filters:
Each LLC filter consumes 720 bytes of RAM.
Current free RAM is 239312 bytes.
Max heap reserved for LLC filters (25%) = 59828
We can support 83 LLC filters.
CM> Selecting UCD for Us Channel 1

0x0001223c [CmDocsisCtlThread] BcmCmDocsisCtlThread::TestAndLaunchDsTimeSync: (CmDocsisCtlThread) starting ds time sync acquisition...
0x000124da [CmDocsisCtlThread] BcmCmDocsisCtlThread::SyncDsSyncOk: (CmDocsisCtlThread) downstream time sync acquired...
0x000124da [CmDocsisCtlThread] BcmCmDocsisCtlThread::DsSyncOkResumeUsInit: (CmDocsisCtlThread) pre-REG upstream target case...starting initial ranging.
Beginning initial ranging...
Using stored initial upstream power = 38.0 dBmV
0x000124da [CmDocsisCtlThread] BcmCmDocsisCtlThread::SyncDsSyncOk: (CmDocsisCtlThread) rx unexpected kDsSyncOk indication...
Logging event: Acquired Downstream (675000000 Hz)........ SUCCESS
RNG-RSP Adj: tim=4000 power=0 freq=0 Stat=Continue
RNG-RSP Adj: tim=0 power=0 freq=0 Stat=Continue
RNG-RSP Adj: tim=0 power=0 freq=0 Stat=Continue
RNG-RSP Adj: tim=0 power=0 freq=0 Stat=Continue
RNG-RSP Adj: tim=0 power=0 freq=0 Stat=Success

******************************************
UPSTREAM STATUS
******************************************
Upstream Status = UP
Upstream Channel = 1
Upstream Frequency = 34900000 Hz
Upstream Power = 39 dBmV
Ranging SID = 0x57f
Upstream Symbol Rate = 5120000 sym/sec
******************************************

Starting IP Initialization with DHCP...
DHCPc: Waiting 1 seconds before sending Discover; client id htype=1, value=00:11:e3:c6:d5:db
Logging event: Acquired Upstream .......... SUCCESS
CM> DHCPc: Sending Discover packet; client id htype=1, value=00:11:e3:c6:d5:db
DHCPc: Received an Offer from DHCP server c4:71:fe:76:98:e2 (96.70.158.1); lease client id htype=1, value=00:11:e3:c6:d5:db
CM> DHCPc: Timed out waiting for offers for lease with client id htype=1, value=00:11:e3:c6:d5:db
DHCPc: Sending Request packet; client id htype=1, value=00:11:e3:c6:d5:db
DHCPc: Received an Ack from DHCP server c4:71:fe:76:98:e2 (96.70.158.1); lease client id htype=1, value=00:11:e3:c6:d5:db
Current IP address is default 0.0.0.0.
0x000141ae [DHCP Client Thread] BcmEcosIpHalIf::ConfigureLeaseImpl: (IP Stack1 HalIf)
Configuring IP stack 1:
IP Address = 73.13.183.182 (primary IP address)
Subnet Mask = 255.255.254.0
Router = 73.13.182.1
IsPrimaryInterface = 1

Logging event: DHCP WARNING - Non-critical field invalid in response.
ARPing for default GW IP = 73.13.182.1
MAC = c4:71:fe:76:98:e2
DHCP completed successfully!

DHCP Settings:
Client Id = htype=1, value=00:11:e3:c6:d5:db
State = Renewing (5)
Static Lease = 0
AutoConfig Mode = IP, Subnet and Router
XID = 0x4826f16a
Number of Tries = 0
Max Discover Tries = 6
Max Request Tries = 6
DHCP server MAC addr = c4:71:fe:76:98:e2
Ignore NAKs = 0
My offered IP address = 73.13.183.182 (primary IP address)
(1) Subnet Mask = 255.255.254.0
(3) Router IP address = 73.13.182.1
(54) DHCP Server IP address = 69.252.196.132
(82) Relay Agent IP address = 96.70.158.1
TFTP Server IP address = 68.86.58.223
CM Configuration file = 'd11_m_dcm425_silver_c01.cm'
(2) UTC Time Offset = -18000 seconds
(4) Time Server IP address = 69.252.196.198
(6) Domain Name Server = 68.87.68.162; 68.87.74.162
(7) Log Server IP address = 0.0.0.0
(51) Lease time = 444063 seconds
(58) T1 (renew) = 222031 seconds
(59) T2 (rebind) = 388555 seconds
Lease is infinite = 0

SB5102 CM Agent w/ BRCM Factory Support IpStackEvent: Ip=73.13.183.182, Subnet=255.255.254.0, Gateway=73.13.182.1
CmSnmpAgent::IpAddressAcquiredEvent for SB5102 CM Agent w/ BRCM Factory Support
IP addr = 73.13.183.182
Starting Time Of Day...
0x00014244 [CmDocsisIpThread] BcmDocsisTimeOfDayThread::SetTodServerIpAddress: (Time Of Day Thread) ToD servers: 69.252.196.198
Connecting to ToD server 69.252.196.198...
Sending UDP ToD request to server...
SNMP Agent Binding to 73.13.183.182:225
Logging event: Retrieved DHCP .......... SUCCESS
CM> UTC returned by ToD server 3561634581; UTC offset -18000
Current system time -> Sun Nov 11 09:56:21 2012

System start time -> Sun Nov 11 09:54:59 2012

Starting Tftp of configuration file...
Opening file 'd11_m_dcm425_silver_c01.cm' on 68.86.58.223 for reading...
tftp-enforce bypass is DISABLED
Storing received cfg of size 4938 to memory
Tftp read < 512 bytes, we have reached end of file.
Tftp transfer complete!
TFTP Settings:
Stack Interface = 1
Server Ip Address = 68.86.58.223
Server Port Number = 69
Total Blocks Read = 10
Total Bytes Read = 4938

Config file was read! IP Initialization completed...
MAX CPE per CM is being set to 32
TLV-11[1]: 1.3.6.1.2.1.69.1.3.3.0 -> 2 (i32)
TLV-11[2]: 1.3.6.1.2.1.69.1.2.1.2.1 -> 68.85.0.0
TLV-11[3]: 1.3.6.1.2.1.69.1.2.1.3.1 -> 255.255.0.0
**********************************************************
******* **********
******* EDITED **********
******* **********
**********************************************************
TLV-11[172]: 1.3.6.1.2.1.69.1.6.4.1.15.73 -> 65535 (i32)
Time Of Day completed...
DefaultSnmpAgentClass::SystemTimeChangeEvent for SB5102 CM Agent w/ BRCM Factory Support
SB5102 CM Agent w/ BRCM Factory Support processing TLV-11's
SNMP packet sent to 73.13.183.182:225
Insufficient heap to handle SNMP packet - TOO_BIG.
(PDU = 204084, heap = 25596)
TLV-11 failure: error status=1, error index=0
Invalid TLV-11's: 1 wrong values, 0 duplicate sets.
SNMP Error'd but Haxorware doesn't care AT ALL!
Onwards mateys!

Sending a REG-REQ to the CMTS...
Received a REG-RSP message from the CMTS...

MAC MGT msg buf, len=280
00 11 e3 c6 d5 db c4 71 fe 76 98 38 01 0a 00 00 | .......q.v.8....
03 01 07 00 05 7f 00 05 2d 01 01 01 02 01 02 03 | ........-.......
01 01 04 01 01 06 01 01 07 01 0f 08 01 10 0a 01 | ................
01 0b 01 18 0c 01 01 0f 01 00 10 04 00 00 00 01 | ................
11 01 01 13 01 01 18 55 01 02 00 01 02 04 00 00 | .......U........
0b 0f 03 02 05 7f 04 0a 73 69 6c 76 65 72 5f 75 | ........silver_u
70 00 06 01 07 07 01 01 08 04 00 21 91 c0 09 04 | p..........!....
00 4c 4b 40 0a 04 00 00 00 00 0b 02 00 00 0c 02 | .LK@............
00 00 0d 02 00 c8 0e 02 40 00 0f 01 02 10 04 00 | ........@.......
00 00 00 17 02 03 20 1b 04 00 40 16 40 19 2e 01 | ...... ...@.@...
02 00 02 02 04 00 00 0b 10 04 0a 73 69 6c 76 65 | ...........silve
72 5f 64 6e 00 06 01 07 07 01 01 08 04 00 fb c5 | r_dn............
20 09 04 00 98 96 80 1b 04 01 94 5b a0 19 2c 01 | ..........[..,.
02 00 66 02 04 00 00 01 6f 04 08 78 63 61 6c 5f | ..f.....o..xcal_
64 6e 00 06 01 07 07 01 01 08 04 00 97 0f e0 09 | dn..............
04 00 98 96 80 1b 04 01 2f a6 60 17 1b 01 01 65 | ......../.`....e
03 02 00 66 02 02 00 01 04 04 00 00 01 6f 06 01 | ...f.........o..
01 09 05 01 03 a0 a0 ff | ........


MAC MGT header:
dest addr: 00:11:e3:c6:d5:db
src addr: c4:71:fe:76:98:38
msg len: 0x10a (266)
DSAP: 0
SSAP: 0
control: 0x3
version: 0x1
msg_type: 0x7 REG_RSP
fka reserved: 0

MSG PDU:
primary sid: 0x57f
response code: 0 (kConfOk)

CM modem capabilities: T=0x05 (005) L=0x2d (045) V=
concat support: T=0x01 (001) L=0x01 (001) V=0x01 (1)
DOCSIS version: T=0x02 (002) L=0x01 (001) V=0x02 (2)
frag support: T=0x03 (003) L=0x01 (001) V=0x01 (1)
PHS support: T=0x04 (004) L=0x01 (001) V=0x01 (1)
BPI version: T=0x06 (006) L=0x01 (001) V=0x01 (1)
num DS SAID's: T=0x07 (007) L=0x01 (001) V=0x0f (15)
num US Sid's: T=0x08 (008) L=0x01 (001) V=0x10 (16)
TxEq Taps per Symbol: T=0x0a (010) L=0x01 (001) V=0x01 (1)
num TxEq Taps: T=0x0b (011) L=0x01 (001) V=0x18 (24)
DCC support: T=0x0c (012) L=0x01 (001) V=0x01 (1)
Unknown type. Ignore!: T=0x0f (015) L=0x01 (001) V=00 | .
Unknown type. Ignore!: T=0x10 (016) L=0x04 (004) V=00 00 00 01 | ....
L2VPN capability: T=0x11 (017) L=0x01 (001) V=0x01 (1)
DUT filtering support: T=0x13 (019) L=0x01 (001) V=0x01 (1)

v1.1 US flow sets: T=0x18 (024) L=0x55 (085) V=
CM flow ref: T=0x01 (001) L=0x02 (002) V=0x0001 (1)
sfid: T=0x02 (002) L=0x04 (004) V=0x00000b0f (2831)
sid: T=0x03 (003) L=0x02 (002) V=0x057f (1407)
service class name: T=0x04 (004) L=0x0a (010) V='silver_up'
73 69 6c 76 65 72 5f 75 70 00 | silver_up.
QoS param set type: T=0x06 (006) L=0x01 (001) V=0x07 (7)
traffic priority: T=0x07 (007) L=0x01 (001) V=0x01 (1)
max tx rate, bps: T=0x08 (008) L=0x04 (004) V=0x002191c0 (2200000)
max burst, MAC bytes: T=0x09 (009) L=0x04 (004) V=0x004c4b40 (5000000)
res tx rate, bits/sec: T=0x0a (010) L=0x04 (004) V=0x00000000 (0)
res rate pkt size: T=0x0b (011) L=0x02 (002) V=0x0000 (0)
inactivity Active,sec: T=0x0c (012) L=0x02 (002) V=0x0000 (0)
inactivity Admit, sec: T=0x0d (013) L=0x02 (002) V=0x00c8 (200)
max concat burst, byt: T=0x0e (014) L=0x02 (002) V=0x4000 (16384)
us bw sched strategy: T=0x0f (015) L=0x01 (001) V=0x02 (2)
CM us req/tx options: T=0x10 (016) L=0x04 (004) V=0x00000000 (0)
IP ToS overwrite: T=0x17 (023) L=0x02 (002) V=03 20 | .
Unknown type. Ignore!: T=0x1b (027) L=0x04 (004) V=00 40 16 40 | .@.@

v1.1 DS flow sets: T=0x19 (025) L=0x2e (046) V=
CM flow ref: T=0x01 (001) L=0x02 (002) V=0x0002 (2)
sfid: T=0x02 (002) L=0x04 (004) V=0x00000b10 (2832)
service class name: T=0x04 (004) L=0x0a (010) V='silver_dn'
73 69 6c 76 65 72 5f 64 6e 00 | silver_dn.
QoS param set type: T=0x06 (006) L=0x01 (001) V=0x07 (7)
traffic priority: T=0x07 (007) L=0x01 (001) V=0x01 (1)
max tx rate, bps: T=0x08 (008) L=0x04 (004) V=0x00fbc520 (16500000)
max burst, MAC bytes: T=0x09 (009) L=0x04 (004) V=0x00989680 (10000000)
Unknown type. Ignore!: T=0x1b (027) L=0x04 (004) V=01 94 5b a0 | ..[.

v1.1 DS flow sets: T=0x19 (025) L=0x2c (044) V=
CM flow ref: T=0x01 (001) L=0x02 (002) V=0x0066 (102)
sfid: T=0x02 (002) L=0x04 (004) V=0x0000016f (367)
service class name: T=0x04 (004) L=0x08 (008) V='xcal_dn' 78 63 61 6c 5f 64 6e 00 | xcal_dn.
QoS param set type: T=0x06 (006) L=0x01 (001) V=0x07 (7)
traffic priority: T=0x07 (007) L=0x01 (001) V=0x01 (1)
max tx rate, bps: T=0x08 (008) L=0x04 (004) V=0x00970fe0 (9900000)
max burst, MAC bytes: T=0x09 (009) L=0x04 (004) V=0x00989680 (10000000)
Unknown type. Ignore!: T=0x1b (027) L=0x04 (004) V=01 2f a6 60 | ./.`

v1.1 DS classifier: T=0x17 (023) L=0x1b (027) V=
CM classifier ref: T=0x01 (001) L=0x01 (001) V=0x65 (101)
CM flow reference: T=0x03 (003) L=0x02 (002) V=0x0066 (102)
CMTS classifier id: T=0x02 (002) L=0x02 (002) V=0x0001 (1)
CMTS flow id: T=0x04 (004) L=0x04 (004) V=0x0000016f (367)
Activation state: T=0x06 (006) L=0x01 (001) V=0x01 (1)

IP classifier sets: T=0x09 (009) L=0x05 (005) V=
ToS range and mask: T=0x01 (001) L=0x03 (003) V=a0 a0 ff | ...
0x00014f3c [CmDocsisCtlThread] BcmCmDocsisCtlThread::ParseAndValidateRegRspMsg: (CmDocsisCtlThread) ERROR - REG-RSP parse error. continuing.
0x00014f3c [CmDocsisCtlThread] BcmCmDocsisCtlThread::RegRspMsgEvent: (CmDocsisCtlThread) We registered with a DOCSIS 1.1 config file!
Registration complete!
Process CVC
Co-signer CVC verified
At least one CVC is valid.
DOCSIS CoS/QoS rate shaping enable is now 1
CmSnmpAgent::CmOperationalEvent for SB5102 CM Agent w/ BRCM Factory Support
CmSnmpAgent operating in 1.1 mode, including docsQos, excluding docsBpi
+++ No DH kickstart profiles or snmpCommunityTable entries installed.
We will operate in NMACCESS mode.
SB5102 CM Agent w/ BRCM Factory Support setting V1/V2 view to docsisNmAccessView
SB5102 CM Agent w/ BRCM Factory Support enabling management.
SB5102 CM Agent w/ BRCM Factory Support sending deferred traps...
Done w/ deferred traps.
SB5102 CPE Agent w/ BRCM Factory Support setting V1/V2 view to docsisNmAccessView
BPI+ Bypass enabled
Enabling network access for all CPE ports.

mot_scanList: Writing to Flash!
BcmCmDocsisStatusEventCodes::kCmIsOperational
0x00015252 [CmDocsisCtlThread] BcmVendorCmApplication::StopDhcpServer: (VendorExtension CmApp) Shutting down DHCP Server...
0x00015252 [CmDocsisCtlThread] BcmStandbySwitchThread::CmIsOperational: (Motorola Standby Switch Thread) Simulating a press of the standby switch to get the state configured properly.
0x0001525c [IGMP Thread] BcmIgmpThread::Starting Igmp Thread...: (IGMP Thread)
0x0001525c [Motorola Standby Switch Thread] BcmStandbySwitchThread::ThreadMain: (Motorola Standby Switch Thread) Standby switch was pressed!
0x00015266 [Motorola Standby Switch Thread] BcmStandbySwitchThread::ProcessSwitchEvent: (Motorola Standby Switch Thread) Standby switch disabled in nonvol; ignoring event.
Logging event: Retrieved TFTP Config d11_m_dcm425_silver_c01.cm SUCCESS
Sending syslog message from IF 1 to 192.168.1.10:
<134> CABLEMODEM [Motorola Corporation]: <2291949524> Retrieved TFTP Config d11_m_dcm425_silver_c01.cm SUCCESS
Logging event: Retrieved Time....... SUCCESS
Sending syslog message from IF 1 to 192.168.1.10:
<134> CABLEMODEM [Motorola Corporation]: <2291949324> Retrieved Time....... SUCCESS
Logging event: TLV-11 - Illegal Set operation failed
Sending syslog message from IF 1 to 192.168.1.10:
<130> CABLEMODEM [DOCSIS]: <73040200> TLV-11 - Illegal Set operation failed
Logging event: REG-RSP - invalid format or not recognized
Sending syslog message from IF 1 to 192.168.1.10:
<130> CABLEMODEM [DOCSIS]: <73000100> REG-RSP - invalid format or not recognized
SB5102 CM Event Log w/ BRCM Factory Support sending deferred async messages...
Sending syslog message from IF 1 to 192.168.1.10:
<130> CABLEMODEM [DOCSIS]: <84000100> SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
Sending syslog message from IF 1 to 192.168.1.10:
<130> CABLEMODEM [DOCSIS]: <84000100> SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
Sending syslog message from IF 1 to 192.168.1.10:
**********************************************************
******* **********
******* EDITED **********
******* **********
**********************************************************
<130> CABLEMODEM [DOCSIS]: <84000100> SYNC Timing Synchronization failure - Failed to acquire QAM/QPSK symbol timing
Sending syslog message from IF 1 to 192.168.1.10:
<134> CABLEMODEM [Motorola Corporation]: <2307948724> Acquired Downstream (675000000 Hz)........ SUCCESS
Sending syslog message from IF 1 to 192.168.1.10:
<134> CABLEMODEM [Motorola Corporation]: <2307948624> Acquired Upstream .......... SUCCESS
Sending syslog message from IF 1 to 192.168.1.10:
<130> CABLEMODEM [DOCSIS]: <68000300> DHCP WARNING - Non-critical field invalid in response.
Sending syslog message from IF 1 to 192.168.1.10:
<134> CABLEMODEM [Motorola Corporation]: <2291949724> Retrieved DHCP .......... SUCCESS
Done w/ deferred msgs
Logging event: Registration Completed
Sending syslog message from IF 1 to 192.168.1.10:
<134> CABLEMODEM [Motorola Corporation]: <2296948624> Registration Completed
Non-Vol Settings successfully written to the device.
CM>
CM> ping 208.67.222.222

Pinging 208.67.222.222...

Reply from 96.70.158.1: bytes=74 seq=0 time=10 ms TTL=255
Warning: Ping Reply is the wrong size (got 74 bytes, expected 64 bytes)...

Stopping pings due to keypress...

Ping statistics:
Pings sent: 1 (1 per second); Replies received: 1 (1 per second)
Bytes sent: 64 (64 per second); Bytes received: 74 (74 per second)
0 replies passed verification (1 failed)
Min time: 10 ms; Max time: 10 ms; Avg time: 10 ms; Total time: 50 ms

CM> ping 4.2.2.2

Pinging 4.2.2.2...

Stopping pings due to keypress...

Ping statistics:
Pings sent: 1 (1 per second); Replies received: 0 (0 per second)
Bytes sent: 64 (64 per second); Bytes received: 0 (0 per second)
0 replies passed verification (0 failed)
Min time: 0 ms; Max time: 0 ms; Avg time: 0 ms; Total time: 1050 ms

CM>

There shud be 2 CVC's...The MFC'er original and the one with the F/W signed by the ISP..

[b[Registration complete!
Process CVC
Co-signer CVC verified
At least one CVC is valid.[/b]

You fail the TLV-11 submission

<130> CABLEMODEM [DOCSIS]: <73040200> TLV-11 - Illegal Set operation failed
Logging event: REG-RSP - invalid format or not recognized
Sending syslog message from IF 1 to 192.168.1.10:
<130> CABLEMODEM [DOCSIS]: <73000100> REG-RSP - invalid format or not recognized

okay, well i didn't really know what todo with your response so i googled that error you where talking about and it didn't really lead me anywhere. So i tried enabling bpi, bpi+, and bpi+pass_through. I have attached the log files to this reply... If this is the wrong direction, please feel free to point me in the right one.
Brad
no bpi OR bpi_passthrough
bpi
bpi+

You know...The very prescence of Haxorware has been verified by the CMTS!

Think about that for a minute or two.