Welcome to Bimmerfest -- The #1 Online Community for BMW related information! Please enjoy the discussion forums below and share your experiences with the 200,000 current, new and past BMW owners. The forums are broken out by car model and into other special interest sections such as BMW European Delivery and a special forum to voice your questions to the many BMW dealers on the site to assist our members!

Please follow the links below to help get you started!

Go Back   Bimmerfest - BMW Forums > The Best of Bimmerfest! > BMW Coding and Programming

BMW Coding and Programming
Discuss coding options and features on your BMW here.

Reply
 
Thread Tools Display Modes
  #1  
Old 05-24-2014, 09:28 AM
cronek cronek is offline
Registered User
Location: Belgium
 
Join Date: Dec 2012
Posts: 29
Mein Auto: 2014 F30 320d msport
Getting network access to HU_NBT

With the wifi hardware removed, I looked into another way of getting network connectivity to the NBT system. I connected my ENET cable and sniffed traffic, a saw some DHCP DISCOVER packets coming from 2 different MAC addresses, and one of these addresses had the Harman/Becker (who produces the NBT) OUI (first bytes of the MAC address identifying the manufacturer of the NIC).

I set up a dhcp server on my PC (using tftpd64) and after a while had two DHCP leases assigned:



The 192.168.222.1 is whatever it is that ESYS connects to. I'll investigate this, as well as the traffic generated by ESYS later.

The 192.168.222.2 is the NBT. I nmapped it:



And as you can see the SSH and telnet ports are unfortunately closed.
port 80 is listening, and has the lighttpd running on it that I discovered previously through the wifi connection.

The main page gives you a 404 error



The same subdirs are still present (/core and /trace).
However the trace dir doesn't contain logs this time (on my previous car this contained full debug logs of everything the NBT did, as well as boot logs etc.)




The other two ports didn't give me much, they disconnect immediately after connecting. I'll look into these some more in the future but my laptop battery was getting low.
The fact that ports 22 and 23 are unfiltered (not blocked by NBT's firewall, unlike most other ports) is interesting, there should be a way to enable ssh/telnet...

Anyone else feel like jumping into this?

Last edited by cronek; 05-24-2014 at 12:32 PM.
Reply With Quote
Advertisement
  #2  
Old 05-24-2014, 09:59 AM
cronek cronek is offline
Registered User
Location: Belgium
 
Join Date: Dec 2012
Posts: 29
Mein Auto: 2014 F30 320d msport
by the way the IPCE_WEBSERVER value in the HU_NBT FDL is still set to nicht_aktiv here, so it needn't be changed to get this.
Reply With Quote
Reply

Bookmarks


Forum Navigation
Go Back   Bimmerfest - BMW Forums > The Best of Bimmerfest! > BMW Coding and Programming
Today's Posts Search
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On



Forum Jump


All times are GMT -7. The time now is 07:01 AM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.
© 2001-2011 performanceIX, Inc. All Rights Reserved .: guidelines .:. privacy .:. terms