What are the ES series Console & TDM codes? [Ex-Link]

[E3V3A]

So I finally got "UART" and "debug" outputs, after some failed attempts. (Due to confusing and incomplete Wiki instructions.)
However, I can't get to the TDM. I tried several different codes, including the ones for the ES7000 in this thread. They don't work.

Any suggestions?

BTW. How do you guys find these codes anyway. Perhaps I can help finding them?

[juusso]

Feel free to try all from here. No other codes are known and strangewhy you don`t get success. Might your Tx isn`t working properly(you see debug output) and you just got Rx failed (can`t send any command)...

[E3V3A]

I have no idea what's (not) going on. I just don't get any loopback with those codes, although my cable passes loopback (shorting Rx/Tx). Checked GND, ok.

I have only found 3 codes for loopback, what others do you suggest?

Code: Select all

20102011
23331003
10041004

[E3V3A]

Apparently, in this thread, someone were able to find the TDM menu code in the exeDSP binary by reverse engineering it. So if we knew were to look, perhaps we could find the Console access (and loopback) code in a similar way? (Since the ones above doesn't seem to work on my FW version.)

[aiahsam]

So I finally got "UART" and "debug" outputs, after some failed attempts. (Due to confusing and incomplete Wiki instructions.) .......

could you post an updated / better instructions for getting UART and debug output working ?

[juusso]

EVA, have you tried 1198282 to unlock console first?
after this TDM code is 20089999.

[E3V3A]

could you post an updated / better instructions for getting UART and debug output working ?

I'm working on that right now.

EVA, have you tried 1198282 to unlock console first? after this TDM code is 20089999.

Success!! Excellent! Thank you, now we can move on...

But my debug output is annoying, and I'm getting bogged down with these:

Code: Select all

[Smart Hub Debug(1)] [Plugin::Network] Check Validation is failed.
[MOIP_CAMERA/Fatal] 6312 : no file:/mtd_down/emps/empCamera
[NET_MW/Fatal] 6313 : [IsValidIP][line:679] Invalid IP
[NET_MW/Fatal] 6314 : [IsValidIP][line:679] Invalid IP
[Smart Hub Debug(1)] GetServiceConfig {
   "CategoryType" : "LED",
   "ChipInfo" : "X10+",
   "LocalSet" : "EU",
   "Model" : "UE5700",
   "ProductType" : "TV",
   "ZeroLeft" : "TTX/MIX",
   "ZeroLeftCode" : 2,
   "ZeroRight" : "PRE-CH",
   "ZeroRightCode" : 1
}
[Smart Hub Debug(1)] [CIS block Log] Smart Hub Block : 1
[Smart Hub Debug(1)] [CIS block Log] No CISResult file !!!
[Smart Hub Debug(1)] [CIS block Log] getCISResult => NO_FILE
[Smart Hub Debug(1)] DUID: <censored>
[Smart Hub Debug(1)] MAC: <censored>
[NET_MW/Fatal] 6315 : [IsValidIP][line:679] Invalid IP

[/size]

Any ideas how to turn this off?

[juusso]

ahaa, you`ve missed console unlock before you can send any command

[E3V3A]

^^ Yes, I guess that is a misleading thread title... I'll change it.

[damnoodle]

This is my first post. I wanna say how great these forms are.

I have sat back and absorbed as much info as i could and modified were needed however I'm now stuck.

I have followed the wiki for the ex link, I have a FTDI TTL-232R-3V3-AJ and after finding plugging it in directly (not reading carefully enough) I realized there is no communication. I then read to switch the TX -RX. After I've done this I was receiving incoherent symbols. I then switched the ground and RX. After this change the log changed into clear text. However, I have not been able to send 1198282 to unlock the console to get send 20089999. I type the "1198282" and pressed enter in the blind while waiting for echo back when typing 20089999 for TDM. Nothing happens. I have tested my TTL-232R-3V3-AJ by a RX-TX jump and I received loopback. I thought that if my ground and RX was incorrect then possibly my TX - ground was reversed. I tried to correct this issue by swapping but no result. I have also tried other unlock codes like 20102011, etc... but it was a no go. The Service Menu is Set to Debug and watchdog off. I have also tried with hotel mode on and off. I did notice that the jumper cable I'm using to swap the TX RX GND adds 1.5 to 2 ohms to the circuit. Could this be a problem?

Thanks