Author Topic: EEVblog #978 - Keysight 1000X Hacking  (Read 423003 times)

0 Members and 6 Guests are viewing this topic.

Offline TK

  • Super Contributor
  • ***
  • Posts: 1722
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #450 on: November 10, 2017, 05:14:57 pm »
I don't think so. It looks like user calibration stops at first detected error. I also replaced components on frontends. I don't change  U40, U35 and U401. Below is photo of my hack. Resistors without making code are 16.2ohm.
Can you indicate which components did you change in the front end section?
 

Offline hv222

  • Regular Contributor
  • *
  • Posts: 66
  • Country: pl
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #451 on: November 10, 2017, 05:27:13 pm »
I made hack using yours tutorial - photos attached to quoted post :P I left on board decoupling capacitors and ferite beads from removed amplifier.


EDUX front end mod to DSOX partial results.

I did the following mod to see if I can get 200MHz modding the front end on the EDUX to mimic the DSOX front end.

I worked on CH2 and the result is partial because I was not able to replace the LMH6550 to LMH6552 because it requires a package change from VSSOP to WSON.  The PCB has the footprint for both package types.

First picture shows the table of Vpp, Vmax and VRMS measurements of the different stages of the mod compared to the micsig TO1104 (just as validation of values).
The EDUX with just the resistor swap to make it think it is a DSOX: you get 70MHz, as is indicated on the utility/service/about this scope screen.
The EDUX with the resistor swap + the software hack (infiniiVisionLauncher.exe from /Secure): you get 120MHz, but utility/service/about this scope screen shows 200MHz.
The EDUX with the resistor swap + the software hack + the partial front end mod: you get less than 50MHz, as the front end mod removes the additional OPAMP that was added to the EDUX in the front end, and as it does not have the LMH6552 yet, it cannot get to 200MHz.

Second picture shows the hardware mod of the front end.  The hardware mod is partial because I am waiting for the solder paste to arrive to be able to solder the WSON Package

Third picture is the original DSOX (From Dave's Teardown)
« Last Edit: November 10, 2017, 05:29:25 pm by hv222 »
 
The following users thanked this post: TK

Offline thuttu77

  • Newbie
  • Posts: 8
  • Country: fi
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #452 on: November 10, 2017, 06:02:22 pm »
Can some one tell me working values to ID 23 I got my edux go to 70MHz 2GSa SGM etc but I cant get signal at all
I had 12k on top and 33k on bottom on left side set when connector is up of them so it should get 0.91V
EDIT: that were wrong but bith 15k and 15k I should get ID 24 and no signbal at all also trtied 12k and 8k but no signal either it was  0.98V


Thanks a lot I ll try those also it does put me think if I did actually change wrong resistor set since I didnt find pic what would say which one is ID0 and which one is ID1 but when I did look those values
maybe my 12k vas actually 121k so i did change wrong id bit.

Yes that was the fault it works at 70MHz 2Gsa now thanks sadly its still edux so no CAN/LIN trial
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1722
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #453 on: November 11, 2017, 06:25:52 pm »
I have almost complete schematic of main PCB. I don't found more hardware differences. I add missing trigger and generator components and it is work. I change resistor divider on main board to have ID 24. I don't change resistor dividers on BLT board, so I have DSOX1002G with 70MHz bandwith. Scope passing user calibration.

Code: [Select]
**** External Trigger Level ****
/1 Trig B1 = 5303.000, B0 = 35789.000
/5 Trig B1 = 1071.000, B0 = 35789.000
/1 Trig 2 B1 = 17283.000, B0 = 28593.000
/5 Trig 2 B1 = 3492.000, B0 = 28593.000
**** CAL PASSED **** Time: 2 seconds


I'm going to make some test with wave gen, because I don't know the right values of capacitors and inductors.
Do you mind posting the full calibration output?  My unit is failing user calibration but at a different point during the test as before.  Before it was failing during External Trigger Level calibration.
 

Offline hv222

  • Regular Contributor
  • *
  • Posts: 66
  • Country: pl
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #454 on: November 11, 2017, 06:42:25 pm »
Code: [Select]
XXXXXXXXXXXrom_offset=0x0.
XXImageStart = 0x80361000, ImageLength = 0x1A80C40, LaunchAddr = 0x80362000

Completed file(s):
-------------------------------------------------------------------------------
[0]: Address=0x80361000  Length=0x1A80C40  Name="" Target=RAM
 Loading image 1 succeeded.
ROMHDR at Address 80361044h
Preparing launch...
RTC: 2080-73-25   7:165:123.3 UTC
Launching windows CE image by jumping at address 0x  362000

Windows CE Kernel for ARM (Thumb Enabled) Built on Mar  8 2013 at 17:05:33
Setting up for a Cold Reboot
Done Setting up for a Cold Reboot
Windows CE Firmware Init
BSP 1.0.0 for the SPEARHEAD600AB board (built Sep 28 2016)
Adaptation performed by ADENEO (c) 2005
+OALIntrInit
-OALIntrInit(rc = 1)
Initialize driver globals Zeros area...
pDrvGlobalArea 0xa0060000  size 0x800 (0xa0060800 -0xa0060000)
Initialize driver globals Zeros area...done
 OALKitlStart
Firmware Init Done.
OALIoctlHalEnterI2cCriticalSection init i2c cs
++SER_Init: context Drivers\Active\14
SER_Init, dwIndex:2
SER2 got sysintr:0x00000017
SER2 Serial Port, new baud rate:0x1c200  (UARTCLK:48000000 IBRD:0x1a FBRD:0x2)
OHCI\system.c, GCFG_USBH1_SW_RST
OHCI\system.c, GCFG_USBH2_SW_RST
LAN PHY NOT detected.
DeleteP500EnetRegistry:
   \Comm\GMAC 0x0
   \Comm\GMAC1 0x0
   \Comm\Tcpip\Linkage 0x0
   \Drivers\Virtual 0x0
   \Drivers\BuiltIn\LIN 0x5
LIN: Data Valid
BALDWIN_DDI: cBaldwinHwIf::Init: Initializing...
BALDWIN_DDI: cBaldwinHwIf::Init: Scope successfully identified.
BALDWIN_DDI: cBaldwinHwIf::Init: Success!
Device load time:
   NANDFLASH: 0 ms
   SNANDFLASH: 0 ms
SHIM DLL, LoadRealDll [PalIO.dll] for [AgilentPalIO.dll]
SHIM [AgilentPalIO.dll] Get Process Addresses
LaunchInfiniiVision:
BLT Module Config 03 - UNKNOWN
=========================================
BLT Product Config 24
   Bandwidth   : 200MHz
   #Channel    : 2
   Board Rev   : FPR
   Clk Gating  : Baldwin
   Sample Rate : 4GSa
   LAN PHY     : No
BLT Module Config 03
   Rev         : LP0
   Sample Rate : 0GSa/s
=========================================
BLT_PRODUCT_CONFIG_0, 1.249v, ID4
BLT_PRODUCT_CONFIG_1, 0.699v, ID2
BLT_MODULE_CONFIG_0, 0.953v, ID3
BLT_MODULE_CONFIG_1, 0.010v, ID0
CANINE_BOARD_REV, 0.005v, ID0
CANINE_MODEL_NAME: MARSUPIAL, 1.742v, ID6, MARSUPIAL
CANINE_EXTMODULE, 2.485v, ID8, SWID8
CANINE_MSO_REV, 0.648v, ID2, SWID2
SHIM DLL, LoadRealDll [PalSStorage.dll] for [AgilentPalSStorage.dll]
SHIM [AgilentPalSStorage.dll] Get Process Addresses
Released build, Sep 28 2016, 00:17:51
Initializing FPGA...
************************************
FPGA Type: Marsupial
Ver: 1.067 Released
Build Time: Tue Jun 14 17:13:42 2016
Build Machine: 2UA5461ZWH
************************************
cMarsupialCalMgr::cMarsupialUserCalFactors::cMarsupialUserCalFactors size 146412
cMarsupialCalMgr::cMarsupialServiceCalFactors::cMarsupialServiceCalFactors size 704
cMarsupialCalMgr::cMarsupialFactoryCalFactors::cMarsupialFactoryCalFactors size 896
Calibration mode User
Recall \Secure\cal\FactoryCal2.dat - ok
Recall \Secure\cal\ServiceCal1.dat - ok
Recall \Secure\cal\UserCal8.dat - ok
Cal Date Wed Sep 28 21:00:56 2016
will do USB phy workaround: CheckCRC
Startup sequence is complete.
Saved configuration invalid
System has been running 15.505870 seconds
Start Up Sequence 6.783193
Memory Load 52%
   System Physical Memory 37.957 / 73.465 MB
   Process Virtual Memory 47.125 / 1024.000 MB
-----> InfiniiVision is running <-----
Performing USER calibraion
######################## Channel 1 ########################
**** Baldwin Interpolator ****
  fiPreDelay = 0x10
    fiCalResult = 186
    fiWide      = 319
Final Cal Factor = 0x10
**** CAL PASSED **** Time: 1 seconds
**** Talon Calibrator ****
Calibrate AC Signal
  Channel 1: Offset 0x20800  GainIndex 7  GainVern 0x1db0
  Channel 2: Offset 0x20800  GainIndex 7  GainVern 0x1db0
Calibrate DC Signal
  # Pts (out of 20): 20  B1 = 174796.670513  B0 = 126533.918357
  # Pts (out of 20): 20  B1 = 175067.254517  B0 = 127236.403807
  Testing...
    Vin = -0.200000  AvgQLvl = 29.500000 VinActual = -0.192383
    Vin = 0.000000  AvgQLvl = 135.750000 VinActual = 0.015137
    Vin = 0.200000  AvgQLvl = 237.750000 VinActual = 0.214355
**** CAL PASSED **** Time: 1 seconds
**** Talon ****
**Talon Init Cal**
  Slice Offset = 20
Slice offset correction successful
  Using all slices for calibration
**Talon Dac Cal**
Gain Dac Iteration 1: Deltas 17 | Max 1 | Min -1
Gain Dac Iteration 2: Deltas 15 | Max 1 | Min -1
Gain Dac Iteration 3: Deltas 10 | Max 1 | Min -1
Offset Dac Iteration 1: Deltas 46 | Max 4 | Min -4
Offset Dac Iteration 2: Deltas 3 | Max 4 | Min -3
**Talon Pipeline Cal**
*** Talon pipeline cal ***
# pts not used = 0
Offset Adjustment = -26.950562
Gain Adjustment = 1.012901
**Talon4 Timing Cal**
Freq: 39.999510MHz
QMax 0xb0    QMin 0x4c
Min Per: 2.476667e-008    Max Per: 2.521667e-008
Harmonic Used: 1
MajorPass 1 | Deltas 13 | Max Dac  8 | Min Dac -8
MajorPass 2 | Deltas 5 | Max Dac 10 | Min Dac -11
MajorPass 3 | Deltas 3 | Max Dac 10 | Min Dac -12
MinorPass 1 | Deltas 158 | Max Dac  30 | Min Dac -30
MinorPass 2 | Deltas 108 | Max Dac  27 | Min Dac -27
  Minor Timing Vernier is clipped
MinorPass 3 | Deltas 118 | Max Dac  45 | Min Dac -36
**Talon Pipeline Cal**
*** Talon pipeline cal ***
# pts not used = 0
Offset Adjustment = -42.678711
Gain Adjustment = 1.035890
  Using partial slices for calibration
**Talon Dac Cal**
Gain Dac Iteration 1: Deltas 2 | Max 1 | Min -1
Gain Dac Iteration 2: Deltas 2 | Max 1 | Min 0
Gain Dac Iteration 3: Deltas 1 | Max 1 | Min -1
Offset Dac Iteration 1: Deltas 0 | Max 4 | Min -2
Offset Dac Iteration 2: Deltas 0 | Max 4 | Min -2
**Talon Pipeline Cal**
*** Talon pipeline cal ***
# pts not used = 0
**** CAL PASSED **** Time: 115 seconds
**** DC Gain ****
28000, 0.803184 : -2198997.135356, 1794200.024167
28400, 0.803002 : -29029.664756 , 51710.891089 
28800, 0.789223 : -4200.567536  , 32115.186246 
29200, 0.693998 : -4646.586593  , 32424.722662 
29600, 0.607913 : -5128.856222  , 32717.900875 
30000, 0.529923 : -5979.597839  , 33168.728756 
30400, 0.463029 : -6986.488023  , 33634.948372 
30800, 0.405776 : -7563.188668  , 33868.959587 
31200, 0.352888 : -9357.434490  , 34502.127660 
31600, 0.310141 : -9687.211917  , 34604.405286 
32000, 0.268850 : -11759.342809 , 35161.497326 
32400, 0.234834 : -13786.815707 , 35637.617555 
32800, 0.205821 : -14908.454951 , 35868.474576 
33200, 0.178991 : -18061.577867 , 36432.854209 
33600, 0.156844 : -19163.373466 , 36605.664488 
34000, 0.135971 : -23393.586226 , 37180.851064 
34400, 0.118872 : -26654.510367 , 37568.484848 
34800, 0.103866 : -29222.552894 , 37835.215947 
35200, 0.090177 : -35467.695246 , 38398.387097 
35600, 0.078900 : -39981.765550 , 38754.545455 
36000, 0.068895 : -43979.942105 , 39030.000000 
36400, 0.059800 : -59432.354196 , 39954.054054 
36800, 0.053070 : -382434.279177, 57095.652174 
37200, 0.052024 : 0.000000      , 0.000000     
Reference range = 0.463V
Coarse gain ratio
   0.1x = 0.357 (1.296V)
   0.4x = 1.000 (0.463V)
   0.8x = 2.826 (0.164V)
   2.0x = 7.838 (0.059V)
Gain#   MIN        MAX        %OL 
0      0.006637  0.102469
1      0.018409  0.284215
2      0.052024  0.803184
3      0.145566  2.247370
4      0.299542  4.624569
5      0.830831 12.827039
6      2.347910 36.248934
7      6.569627 101.427236
ADC half speed gain ratio = 0.965 (0.480V)
**** CAL PASSED **** Time: 15 seconds
**** Offset Error ****
AC Coupling
   Gain# 0 [29428 (0.006637V) - 37978 (0.080000V), 45pts]
   Gain# 1 [29556 (0.080000V) - 32661 (0.216000V), 45pts]
   Gain# 2 [29502 (0.216000V) - 32787 (0.624000V), 45pts]
   Gain# 3 [29765 (0.624000V) - 32690 (1.600000V), 45pts]
   Gain# 4 [29559 (1.600000V) - 32034 (3.520000V), 45pts]
   Gain# 5 [29618 (3.520000V) - 32723 (9.600000V), 45pts]
   Gain# 6 [29510 (9.600000V) - 32840 (28.000000V), 45pts]
   Gain# 7 [29433 (28.000000V) - 32718 (80.500000V), 45pts]
DC Coupling
   Gain# 0 [29428 (0.006637V) - 37978 (0.080000V), 45pts]
   Gain# 4 [29559 (1.600000V) - 32034 (3.520000V), 45pts]
AC Coupling
   Gain# 0 [29428 (0.006637V) - 37978 (0.080000V), 45pts]
   Gain# 1 [29556 (0.080000V) - 32661 (0.216000V), 45pts]
   Gain# 2 [29502 (0.216000V) - 32787 (0.624000V), 45pts]
   Gain# 3 [29765 (0.624000V) - 32690 (1.600000V), 45pts]
   Gain# 4 [29559 (1.600000V) - 32034 (3.520000V), 45pts]
   Gain# 5 [29618 (3.520000V) - 32723 (9.600000V), 45pts]
   Gain# 6 [29510 (9.600000V) - 32840 (28.000000V), 45pts]
   Gain# 7 [29433 (28.000000V) - 32718 (80.500000V), 45pts]
DC Coupling
   Gain# 0 [29428 (0.006637V) - 37978 (0.080000V), 45pts]
   Gain# 4 [29559 (1.600000V) - 32034 (3.520000V), 45pts]
0 retry out of 920 offset searched
**** CAL PASSED **** Time: 22 seconds
**** Trigger Level ****
div -3, pos slope dac = 0x956D, neg slope dac = 0x94C1, avg = 38167.000
div -2, pos slope dac = 0x92E7, neg slope dac = 0x923B, avg = 37521.000
div -1, pos slope dac = 0x9065, neg slope dac = 0x8FB7, avg = 36878.000
div 0, pos slope dac = 0x8DDD, neg slope dac = 0x8D31, avg = 36231.000
div 1, pos slope dac = 0x8B59, neg slope dac = 0x8AAD, avg = 35587.000
div 2, pos slope dac = 0x88D5, neg slope dac = 0x8827, avg = 34942.000
div 3, pos slope dac = 0x8651, neg slope dac = 0x85A3, avg = 34298.000
Trig 1 B1 = -644.857, B0 = 36232.000
div -3, pos slope dac = 0x9563, neg slope dac = 0x94C5, avg = 38164.000
div -2, pos slope dac = 0x92DD, neg slope dac = 0x9241, avg = 37519.000
div -1, pos slope dac = 0x905B, neg slope dac = 0x8FBB, avg = 36875.000
div 0, pos slope dac = 0x8DD3, neg slope dac = 0x8D35, avg = 36228.000
div 1, pos slope dac = 0x8B4F, neg slope dac = 0x8AB3, avg = 35585.000
div 2, pos slope dac = 0x88CB, neg slope dac = 0x882D, avg = 34940.000
div 3, pos slope dac = 0x8645, neg slope dac = 0x85A7, avg = 34294.000
Trig 2 B1 = -644.929, B0 = 36229.286
div -3, pos slope dac = 0x9561, neg slope dac = 0x94C5, avg = 38163.000
div -2, pos slope dac = 0x92DD, neg slope dac = 0x9243, avg = 37520.000
div -1, pos slope dac = 0x905B, neg slope dac = 0x8FBD, avg = 36876.000
div 0, pos slope dac = 0x8DD1, neg slope dac = 0x8D39, avg = 36229.000
div 1, pos slope dac = 0x8B51, neg slope dac = 0x8AB5, avg = 35587.000
div 2, pos slope dac = 0x88CB, neg slope dac = 0x882D, avg = 34940.000
div 3, pos slope dac = 0x8647, neg slope dac = 0x85AD, avg = 34298.000
Trig 3 B1 = -644.429, B0 = 36230.429
Trig 1 - AC offset 18.000000
Trig 2 - AC offset 24.714286
Trig 1 - LF Rej offset 19.000000
Trig 2 - LF Rej offset 23.714286
Trig 1 - HF_Rej offset -5.000000
Trig 2 - HF_Rej offset 1.714286
Trig 1 - AC_HF_REJ offset 17.000000
Trig 2 - AC_HF_REJ offset 23.714286
**** CAL PASSED **** Time: 29 seconds
**** Trigger Hysteresis ****
Hyst dac = 12288, pos slope dac = 0x8DCF, neg slope dac = 0x8D39, range =  150, div = 0.233
Hyst dac = 14336, pos slope dac = 0x8DE9, neg slope dac = 0x8D1F, range =  202, div = 0.313 +
Hyst dac = 16384, pos slope dac = 0x8E07, neg slope dac = 0x8D01, range =  262, div = 0.406 +
Hyst dac = 18432, pos slope dac = 0x8E23, neg slope dac = 0x8CE7, range =  316, div = 0.490 +
Hyst dac = 20480, pos slope dac = 0x8E41, neg slope dac = 0x8CC9, range =  376, div = 0.583 +
Hyst dac = 22528, pos slope dac = 0x8E5D, neg slope dac = 0x8CA9, range =  436, div = 0.676 +
Hyst dac = 24576, pos slope dac = 0x8E77, neg slope dac = 0x8C8B, range =  492, div = 0.763 +
Hyst dac = 26624, pos slope dac = 0x8E97, neg slope dac = 0x8C6F, range =  552, div = 0.856 +
Hyst dac = 28672, pos slope dac = 0x8EB7, neg slope dac = 0x8C4F, range =  616, div = 0.955 +
Hyst dac = 30720, pos slope dac = 0x8ED9, neg slope dac = 0x8C33, range =  678, div = 1.051 +
Hyst dac = 32768, pos slope dac = 0x8EF5, neg slope dac = 0x8C0F, range =  742, div = 1.151 +
Hyst dac = 34816, pos slope dac = 0x8F1B, neg slope dac = 0x8BF1, range =  810, div = 1.256 +
Hyst dac = 36864, pos slope dac = 0x8F3B, neg slope dac = 0x8BD1, range =  874, div = 1.355 +
Hyst dac = 38912, pos slope dac = 0x8F5B, neg slope dac = 0x8BAF, range =  940, div = 1.458 +
Hyst dac = 40960, pos slope dac = 0x8F81, neg slope dac = 0x8B89, range = 1016, div = 1.576 +
Trig Hyst B1 = 21244.935, B0 = 8087.976
**** CAL PASSED **** Time: 15 seconds
**** External Trigger Level ****
/1 Trig B1 = 5303.000, B0 = 35789.000
/5 Trig B1 = 1071.000, B0 = 35789.000
/1 Trig 2 B1 = 17283.000, B0 = 28593.000
/5 Trig 2 B1 = 3492.000, B0 = 28593.000
**** CAL PASSED **** Time: 2 seconds
**** Wave Gen ****
[calibrator] = 0x3fb40 Q | -52958.38 Q/V
[0: DIV1  + DIV1 ] = 0x1ef83 Q | 10182.00 Q/V | (calV=2.481175V) 34.770434 V
[1: DIV4  + DIV1 ] = 0x1fbf0 Q | 10180.80 Q/V | (calV=2.501644V) 8.559135 V
[2: DIV16 + DIV1 ] = 0x1fedd Q | 10181.20 Q/V | (calV=0.638709V) 2.156434 V
[3: DIV64 + DIV1 ] = 0x1ffac Q | 10181.60 Q/V | (calV=0.159427V) 0.556634 V
[4: DIV1  + DIV23] = 0x1ef5e Q | 237355.00 Q/V | (calV=0.449561V) 1.478780 V
[5: DIV4  + DIV23] = 0x1fbd1 Q | 237300.00 Q/V | (calV=0.110313V) 0.367590 V
[6: DIV16 + DIV23] = 0x1fec1 Q | 237302.50 Q/V | (calV=0.025020V) 0.092401 V
[7: DIV64 + DIV23] = 0x1ff8f Q | 237305.00 Q/V | (calV=0.006930V) 0.023951 V
[0: DIV1  + DIV1 ] = 34.432553 V (overwrite)
**** CAL PASSED **** Time: 62 seconds
**** Wavegen Trigger Level Offset ****
Wavegen Trig Offset = 0x8BDC
**** CAL PASSED **** Time: 1 seconds
**** Baldwin Trig Time Qual ****
Set CalConfigScope range 1.000000E-005, delay -1.000000E-006
    Top       : 2.663317
    Base      : -29.095478
  Vert Scale : 80.000000
  Vert Offset: -14.547739
  Trig Level : -14.547739
  Horz Range : 1.000000e-007
  Horz Delay : 1.500000e-008
CalConfigScope range 1.000000E-007, delay 1.500000E-008
--- Internal Timer ---
    tVolt for Edge Trigger = 2.321820 ns
    Zero Time = 2.321820 ns
  *Int Osc Freq*
    Oscillator Freq: 365.431424 MHz
Set CalConfigScope range 5.000000E-008, delay -5.000000E-009
CalConfigScope range 5.000000E-008, delay 1.000000E-008
  *Int Find Min Time*
    Zero Time Timer 0 : 1425.986842 ps
    Zero Time Timer 1 : 1435.505520 ps
  *Int Find Min Time*
    Timer 0:
      Dac 0 Time 1495.927318 ps
      Dac 31 Time 2612.768451 ps
      Dac 62 Time 3728.070175 ps
      Dac 93 Time 4937.560916 ps
      Dac 124 Time 6082.236842 ps
    Fine Dac Gain 37.088424 ps/DacCode
    Timer 1:
      Dac 0 Time 1360.882675 ps
      Dac 31 Time 2612.768451 ps
      Dac 62 Time 3771.173624 ps
      Dac 93 Time 4899.945175 ps
      Dac 124 Time 6066.611842 ps
    Fine Dac Gain 37.737532 ps/DacCode
  *Int Fast Path*
    Fast Dac Zero Time 1058.799342 ps
      Dac 0 Time 993.695175 ps
      Dac 31 Time 1855.764141 ps
      Dac 62 Time 3027.639141 ps
      Dac 93 Time 4229.147762 ps
      Dac 124 Time 5376.777072 ps
    Fine Dac Gain 35.934024 ps/DacCode
--- Sync Timer ---
Set CalConfigScope range 5.000000E-007, delay -5.000000E-008
  MClk Frequency = 200003217.296184
  *Calibrating PdSel*
  PdSel 0 : Min 61 Max 117
    PdSel = 0
    Min Fine Dac = 133
  *Fine Dac*
    Sync Timer minimum Time : 2.197807e-008
      Dac 133 Val: -2.187226e-008
      Dac 227 Val: -2.645236e-008
      Dac 321 Val: -3.072026e-008
      Dac 415 Val: -3.511049e-008
      Dac 509 Val: -3.963172e-008
    Fine Dac Gain: 2.127560e+010 DacCode/second
    Fine Dac Gain: 47.002201 ps/DacCode
**** CAL PASSED **** Time: 2 seconds
**** Baldwin Setup and Hold ****
--- Vertical Settings ---
Set CalConfigScope range 1.000000E-005, delay -1.000000E-006
    Top       : 2.537677
    Base      : -28.819107
  Vert Scale : 80.000000
  Vert Offset: -14.409554
  Trig Level : -14.409554
  Horz Range : 1.000000e-007
  Horz Delay : 1.500000e-008
CalConfigScope range 1.000000E-007, delay 1.500000E-008
  *Clk Path*
      Long Delay Dac 0 Time 1713.267544 ps
      Long Delay Dac 31 Time -8185.911017 ps
      Long Delay Dac 62 Time -18179.824561 ps
      Long Delay Dac 93 Time -28031.250000 ps
      Long Delay Dac 124 Time -38019.067797 ps
    Zero Pt with long delay : 1721.444767 ps
    Long Delay Gain         : 320.354870 ps / daccode
    Trombone Delay Gain   : 75.315361 ps / daccode
  *Data Path*
    Min TVolt = -7812.500000ps
    Max TVolt = -1718.750000ps
  DataPath Offset = 1093.750000ps
  ClockPath Offset = 3440.194767ps
**** CAL PASSED **** Time: 3 seconds
**** Baldwin Pattern Trig ****
**Pattern Delay Cal**
Set CalConfigScope range 1.000000E-005, delay -1.000000E-006
    Top       : 2.675927
    Base      : -29.082867
  Vert Scale : 80.000000
  Vert Offset: -14.541434
  Trig Level : -14.541434
  Horz Range : 1.000000e-007
  Horz Delay : 1.500000e-008
CalConfigScope range 1.000000E-007, delay 1.500000E-008
  Zero Time = 2.322917ns
    DeltaT = 1 : Time Delta = 3.074533ns
    DeltaT = 2 : Time Delta = 6.132184ns
    DeltaT = 3 : Time Delta = 9.174479ns
  DeltaT Gain  : 3.058109ns/code
  DelatT Offset: 0.008136ns
    TBone = 1 : Time Delta = 0.060082ns
    TBone = 9 : Time Delta = 0.704613ns
    TBone = 17 : Time Delta = 1.247396ns
    TBone = 25 : Time Delta = 1.881106ns
    TBone = 33 : Time Delta = 2.540551ns
    TBone = 41 : Time Delta = 3.161458ns
    TBone = 49 : Time Delta = 3.713003ns
    TBone = 57 : Time Delta = 4.313757ns
  TBone Gain  : 3.058109ns/code
  TBone Offset: 0.008136ns
Compensation of 1.750000ns:
  DeltaT: 0
  Tbone : 22
**Xtrig Delay Cal**
  Final Qual Delay Setting: 5
**** CAL PASSED **** Time: 1 seconds
######################## Channel 2 ########################
**** DC Gain ****
28400, 0.805823 : -30996.983448 , 53378.091873 
28800, 0.792919 : -4179.202628  , 32113.768461 
29200, 0.697207 : -4678.478035  , 32461.866667 
29600, 0.611709 : -5175.307561  , 32765.781711 
30000, 0.534419 : -5899.224153  , 33152.656355 
30400, 0.466613 : -6978.636687  , 33656.324582 
30800, 0.409295 : -7536.208175  , 33884.536082 
31200, 0.356218 : -9263.090091  , 34499.683210 
31600, 0.313036 : -9912.029735  , 34702.824859 
32000, 0.272681 : -11481.866905 , 35130.890052 
32400, 0.237844 : -13579.173863 , 35629.721362 
32800, 0.208387 : -14595.917331 , 35841.597338 
33200, 0.180982 : -17902.339420 , 36440.000000 
33600, 0.158638 : -19801.684686 , 36741.309255 
34000, 0.138438 : -22264.330751 , 37082.233503 
34400, 0.120472 : -26422.127457 , 37583.132530 
34800, 0.105333 : -29338.281993 , 37890.301003 
35200, 0.091699 : -34948.790103 , 38404.780876 
35600, 0.080254 : -38814.806707 , 38715.044248 
36000, 0.069949 : -43860.731579 , 39068.000000 
36400, 0.060829 : -54825.914474 , 39735.000000 
36800, 0.053533 : -337390.242914, 54861.538461 
37200, 0.052348 : 0.000000      , 0.000000     
Reference range = 0.467V
Coarse gain ratio
   0.1x = 0.358 (1.305V)
   0.4x = 1.000 (0.467V)
   0.8x = 2.824 (0.165V)
   2.0x = 7.853 (0.059V)
Gain#   MIN        MAX        %OL 
0      0.006666  0.102608
1      0.018534  0.285302
2      0.052348  0.805823
3      0.146377  2.253281
4      0.300765  4.629898
5      0.836280 12.873463
6      2.362034 36.360515
7      6.604833 101.672997
ADC half speed gain ratio = 0.962 (0.485V)
**** CAL PASSED **** Time: 15 seconds
**** Offset Error ****
AC Coupling
   Gain# 0 [29441 (0.006666V) - 37946 (0.080000V), 45pts]
   Gain# 1 [29590 (0.080000V) - 32695 (0.216000V), 45pts]
   Gain# 2 [29510 (0.216000V) - 32840 (0.624000V), 45pts]
   Gain# 3 [29774 (0.624000V) - 32744 (1.600000V), 45pts]
   Gain# 4 [29587 (1.600000V) - 32062 (3.520000V), 45pts]
   Gain# 5 [29628 (3.520000V) - 32778 (9.600000V), 45pts]
   Gain# 6 [29541 (9.600000V) - 32871 (28.000000V), 45pts]
   Gain# 7 [29461 (28.000000V) - 32746 (80.500000V), 45pts]
DC Coupling
   Gain# 0 [29441 (0.006666V) - 37946 (0.080000V), 45pts]
   Gain# 4 [29587 (1.600000V) - 32062 (3.520000V), 45pts]
AC Coupling
   Gain# 0 [29441 (0.006666V) - 37946 (0.080000V), 45pts]
   Gain# 1 [29590 (0.080000V) - 32695 (0.216000V), 45pts]
   Gain# 2 [29510 (0.216000V) - 32840 (0.624000V), 45pts]
   Gain# 3 [29774 (0.624000V) - 32744 (1.600000V), 45pts]
   Gain# 4 [29587 (1.600000V) - 32062 (3.520000V), 45pts]
   Gain# 5 [29628 (3.520000V) - 32778 (9.600000V), 45pts]
   Gain# 6 [29541 (9.600000V) - 32871 (28.000000V), 45pts]
   Gain# 7 [29461 (28.000000V) - 32746 (80.500000V), 45pts]
DC Coupling
   Gain# 0 [29441 (0.006666V) - 37946 (0.080000V), 45pts]
   Gain# 4 [29587 (1.600000V) - 32062 (3.520000V), 45pts]
0 retry out of 920 offset searched
**** CAL PASSED **** Time: 25 seconds
**** Trigger Level ****
div -3, pos slope dac = 0x954F, neg slope dac = 0x94A3, avg = 38137.000
div -2, pos slope dac = 0x92CB, neg slope dac = 0x921D, avg = 37492.000
div -1, pos slope dac = 0x9049, neg slope dac = 0x8F9F, avg = 36852.000
div 0, pos slope dac = 0x8DC5, neg slope dac = 0x8D17, avg = 36206.000
div 1, pos slope dac = 0x8B3F, neg slope dac = 0x8A93, avg = 35561.000
div 2, pos slope dac = 0x88BF, neg slope dac = 0x8815, avg = 34922.000
div 3, pos slope dac = 0x863D, neg slope dac = 0x858F, avg = 34278.000
Trig 1 B1 = -643.143, B0 = 36206.857
div -3, pos slope dac = 0x9541, neg slope dac = 0x94AB, avg = 38134.000
div -2, pos slope dac = 0x92BF, neg slope dac = 0x9227, avg = 37491.000
div -1, pos slope dac = 0x903D, neg slope dac = 0x8FA7, avg = 36850.000
div 0, pos slope dac = 0x8DB5, neg slope dac = 0x8D23, avg = 36204.000
div 1, pos slope dac = 0x8B3B, neg slope dac = 0x8AA1, avg = 35566.000
div 2, pos slope dac = 0x88B5, neg slope dac = 0x881D, avg = 34921.000
div 3, pos slope dac = 0x8631, neg slope dac = 0x8593, avg = 34274.000
Trig 2 B1 = -643.000, B0 = 36205.714
div -3, pos slope dac = 0x959F, neg slope dac = 0x9517, avg = 38235.000
div -2, pos slope dac = 0x931F, neg slope dac = 0x9293, avg = 37593.000
div -1, pos slope dac = 0x909B, neg slope dac = 0x9013, avg = 36951.000
div 0, pos slope dac = 0x8E1D, neg slope dac = 0x8D89, avg = 36307.000
div 1, pos slope dac = 0x8B99, neg slope dac = 0x8B11, avg = 35669.000
div 2, pos slope dac = 0x8913, neg slope dac = 0x8887, avg = 35021.000
div 3, pos slope dac = 0x8695, neg slope dac = 0x8601, avg = 34379.000
Trig 3 B1 = -642.643, B0 = 36307.857
Trig 1 - AC offset 42.142857
Trig 2 - AC offset 43.285714
Trig 1 - LF Rej offset 42.142857
Trig 2 - LF Rej offset 48.285714
Trig 1 - HF_Rej offset -4.857143
Trig 2 - HF_Rej offset 0.285714
Trig 1 - AC_HF_REJ offset 41.142857
Trig 2 - AC_HF_REJ offset 48.285714
**** CAL PASSED **** Time: 29 seconds
**** Trigger Hysteresis ****
Hyst dac = 12288, pos slope dac = 0x8DB1, neg slope dac = 0x8D1F, range =  146, div = 0.227
Hyst dac = 14336, pos slope dac = 0x8DCD, neg slope dac = 0x8D05, range =  200, div = 0.311 +
Hyst dac = 16384, pos slope dac = 0x8DE7, neg slope dac = 0x8CE9, range =  254, div = 0.395 +
Hyst dac = 18432, pos slope dac = 0x8E07, neg slope dac = 0x8CCD, range =  314, div = 0.488 +
Hyst dac = 20480, pos slope dac = 0x8E23, neg slope dac = 0x8CAD, range =  374, div = 0.582 +
Hyst dac = 22528, pos slope dac = 0x8E41, neg slope dac = 0x8C93, range =  430, div = 0.669 +
Hyst dac = 24576, pos slope dac = 0x8E5F, neg slope dac = 0x8C75, range =  490, div = 0.762 +
Hyst dac = 26624, pos slope dac = 0x8E7B, neg slope dac = 0x8C55, range =  550, div = 0.855 +
Hyst dac = 28672, pos slope dac = 0x8E9F, neg slope dac = 0x8C35, range =  618, div = 0.961 +
Hyst dac = 30720, pos slope dac = 0x8EBF, neg slope dac = 0x8C17, range =  680, div = 1.057 +
Hyst dac = 32768, pos slope dac = 0x8ED9, neg slope dac = 0x8BF7, range =  738, div = 1.147 +
Hyst dac = 34816, pos slope dac = 0x8EFD, neg slope dac = 0x8BD7, range =  806, div = 1.253 +
Hyst dac = 36864, pos slope dac = 0x8F21, neg slope dac = 0x8BB7, range =  874, div = 1.359 +
Hyst dac = 38912, pos slope dac = 0x8F43, neg slope dac = 0x8B91, range =  946, div = 1.471 +
Hyst dac = 40960, pos slope dac = 0x8F63, neg slope dac = 0x8B71, range = 1010, div = 1.570 +
Trig Hyst B1 = 21092.986, B0 = 8241.704
Hyst dac = 12288, pos slope dac = 0x8E13, neg slope dac = 0x8D99, range =  122, div = 0.190
Hyst dac = 14336, pos slope dac = 0x8E29, neg slope dac = 0x8D7F, range =  170, div = 0.265 +
Hyst dac = 16384, pos slope dac = 0x8E47, neg slope dac = 0x8D61, range =  230, div = 0.358 +
Hyst dac = 18432, pos slope dac = 0x8E61, neg slope dac = 0x8D45, range =  284, div = 0.442 +
Hyst dac = 20480, pos slope dac = 0x8E7F, neg slope dac = 0x8D2B, range =  340, div = 0.529 +
Hyst dac = 22528, pos slope dac = 0x8E9D, neg slope dac = 0x8D11, range =  396, div = 0.616 +
Hyst dac = 24576, pos slope dac = 0x8EB7, neg slope dac = 0x8CEF, range =  456, div = 0.710 +
Hyst dac = 26624, pos slope dac = 0x8ED7, neg slope dac = 0x8CD3, range =  516, div = 0.803 +
Hyst dac = 28672, pos slope dac = 0x8EF3, neg slope dac = 0x8CB1, range =  578, div = 0.899 +
Hyst dac = 30720, pos slope dac = 0x8F0F, neg slope dac = 0x8C91, range =  638, div = 0.993 +
Hyst dac = 32768, pos slope dac = 0x8F2F, neg slope dac = 0x8C77, range =  696, div = 1.083 +
Hyst dac = 34816, pos slope dac = 0x8F4B, neg slope dac = 0x8C55, range =  758, div = 1.180 +
Hyst dac = 36864, pos slope dac = 0x8F6F, neg slope dac = 0x8C33, range =  828, div = 1.288 +
Hyst dac = 38912, pos slope dac = 0x8F93, neg slope dac = 0x8C13, range =  896, div = 1.394 +
Hyst dac = 40960, pos slope dac = 0x8FB1, neg slope dac = 0x8BF1, range =  960, div = 1.494 +
Hyst dac = 43008, pos slope dac = 0x8FD1, neg slope dac = 0x8BD1, range = 1024, div = 1.593 +
Trig Hyst (2) B1 = 21337.714, B0 = 8659.335
**** CAL PASSED **** Time: 31 seconds
**** Channel Delays ****
--- Vertical Settings ---
    Top       : 0.251256
    Base      : -29.095478
  Final Scale : 80.000000
  Final Offset (POS_SLOPE): -14.547739
  Final Offset (NEG_SLOPE): -14.547739

edge trigger delay factors
iteration:          0
analog trigger channel : 1
pos polarity path delay adjustment (Sec) : 2.32219828e-009
pos edge, bi edge delay factor (312.5e-15 Sec counts): -1569
neg edge delay factor (312.5e-15 Sec counts): -1569
analog trigger channel : 2
pos polarity path delay adjustment (Sec) : 1.50453629e-009
pos edge, bi edge delay factor (312.5e-15 Sec counts): -4185
neg edge delay factor (312.5e-15 Sec counts): -4185
analog trigger channel : 2
pos polarity path delay adjustment (Sec) : 9.296875e-010
Chan2 TC2 pos edge, bi edge delay factor (312.5e-15 Sec counts): -8525
Chan2 TC2 neg edge delay factor (312.5e-15 Sec counts): -8525
external trigger channel
pos edge, bi edge delay factor (312.5e-15 Sec counts): 1091
neg edge delay factor (312.5e-15 Sec counts): 1091
iteration:          1
analog trigger channel : 1
pos polarity path delay adjustment (Sec) : 1.07758621e-011
pos edge, bi edge delay factor (312.5e-15 Sec counts): -1535
neg edge delay factor (312.5e-15 Sec counts): -1535
analog trigger channel : 2
pos polarity path delay adjustment (Sec) :          0
pos edge, bi edge delay factor (312.5e-15 Sec counts): -4185
neg edge delay factor (312.5e-15 Sec counts): -4185
analog trigger channel : 2
pos polarity path delay adjustment (Sec) : -2.52016129e-012
Chan2 TC2 pos edge, bi edge delay factor (312.5e-15 Sec counts): -8532
Chan2 TC2 neg edge delay factor (312.5e-15 Sec counts): -8532
external trigger channel
pos edge, bi edge delay factor (312.5e-15 Sec counts): 1108
neg edge delay factor (312.5e-15 Sec counts): 1108

timeout trigger delay factors
iteration:          0
analog trigger channel : 1
pos polarity path delay adjustment (Sec) : 3.53825431e-009
pos edge, bi edge delay factor (312.5e-15 Sec counts): -878
neg edge delay factor (312.5e-15 Sec counts): -878
analog trigger channel : 2
pos polarity path delay adjustment (Sec) : 1.12239583e-009
pos edge, bi edge delay factor (312.5e-15 Sec counts): -8608
neg edge delay factor (312.5e-15 Sec counts): -8608
external trigger channel
pos edge, bi edge delay factor (312.5e-15 Sec counts): -4742
neg edge delay factor (312.5e-15 Sec counts): -4742
iteration:          1
analog trigger channel : 1
pos polarity path delay adjustment (Sec) : -4.31034483e-012
pos edge, bi edge delay factor (312.5e-15 Sec counts): -891
neg edge delay factor (312.5e-15 Sec counts): -891
analog trigger channel : 2
pos polarity path delay adjustment (Sec) : -3.52822581e-012
pos edge, bi edge delay factor (312.5e-15 Sec counts): -8618
neg edge delay factor (312.5e-15 Sec counts): -8618
external trigger channel
pos edge, bi edge delay factor (312.5e-15 Sec counts): -4754
neg edge delay factor (312.5e-15 Sec counts): -4754

setup & hold trigger delay factors
iteration:          0
S&H Delay, pos slope (Sec): 1.62446121e-009
S&H Delay, pos slope factor (312.5e-15 Sec counts): -3302
S&H Delay, neg slope factor (312.5e-15 Sec counts): -3302
iteration:          1
S&H Delay, pos slope (Sec): -2.69396552e-012
S&H Delay, pos slope factor (312.5e-15 Sec counts): -3310
S&H Delay, neg slope factor (312.5e-15 Sec counts): -3310

multi-channel delay factors
iteration:          0
Ch 1 Pattern Delay, pos slope (Sec): 1.53286638e-009
(chan1PattDly[POS_SLOPE]) Ch 1 Pattern Delay, pos slope factor (312.5e-15 Sec counts): -1495
(chan1PattDly[NEG_SLOPE]) Ch 1 Pattern Delay, neg slope factor (312.5e-15 Sec counts): -1495
Ch 1 Pattern Delay, mixed, pos slope delay (Sec): 1.65409483e-009
(chan1PattDlyMixed[POS_SLOPE]) Ch 1 Pattern Delay, mixed, pos slope factor (312.5e-15 Sec counts): -6707
(chan1PattDlyMixed[NEG_SLOPE]) Ch 1 Pattern Delay, mixed, neg slope factor (312.5e-15 Sec counts): -6707
Ch 1 State Delay, pos slope (Sec): 1.52209052e-009
(chan1StateDly[POS_SLOPE]) Ch 1 State Delay, pos slope factor (312.5e-15 Sec counts): -1429
(chan1StateDly[NEG_SLOPE]) Ch 1 State Delay, neg slope factor (312.5e-15 Sec counts): -1429
Ch 1 Timer Delay, mixed, pos slope (Sec): 1.77262931e-009
(chan1TimerDlyMixed[POS_SLOPE]) Ch 1 Timer Delay, mixed, pos slope factor (312.5e-15 Sec counts): -9328
(chan1TimerDlyMixed[NEG_SLOPE]) Ch 1 Timer Delay, mixed, neg slope factor (312.5e-15 Sec counts): -9328
iteration:          1
Ch 1 Pattern Delay, pos slope (Sec): 2.60416667e-012
(chan1PattDly[POS_SLOPE]) Ch 1 Pattern Delay, pos slope factor (312.5e-15 Sec counts): -1487
(chan1PattDly[NEG_SLOPE]) Ch 1 Pattern Delay, neg slope factor (312.5e-15 Sec counts): -1487
Ch 1 Pattern Delay, mixed, pos slope delay (Sec):          0
(chan1PattDlyMixed[POS_SLOPE]) Ch 1 Pattern Delay, mixed, pos slope factor (312.5e-15 Sec counts): -6707
(chan1PattDlyMixed[NEG_SLOPE]) Ch 1 Pattern Delay, mixed, neg slope factor (312.5e-15 Sec counts): -6707
Ch 1 State Delay, pos slope (Sec): 8.08189655e-012
(chan1StateDly[POS_SLOPE]) Ch 1 State Delay, pos slope factor (312.5e-15 Sec counts): -1403
(chan1StateDly[NEG_SLOPE]) Ch 1 State Delay, neg slope factor (312.5e-15 Sec counts): -1403
Ch 1 Timer Delay, mixed, pos slope (Sec): 2.69396552e-012
(chan1TimerDlyMixed[POS_SLOPE]) Ch 1 Timer Delay, mixed, pos slope factor (312.5e-15 Sec counts): -9319
(chan1TimerDlyMixed[NEG_SLOPE]) Ch 1 Timer Delay, mixed, neg slope factor (312.5e-15 Sec counts): -9319
**** CAL PASSED **** Time: 4 seconds
**** Analog Channel Skews ****
--- Vertical Settings ---
    Top       : 0.251256
    Base      : -29.095478
  Final Scale : 80.000000
  Final Offset (POS_SLOPE): -14.547739
  Final Offset (NEG_SLOPE): -14.547739
skew for channel: 2
adjustment (Sec) =: -3.98185484e-010
2Gsa/s factor in 312.5e-15 Sec counts: -1273
skew for channel: 2
adjustment (Sec) =: 2.52016129e-012
2Gsa/s factor in 312.5e-15 Sec counts: -1265
skew for channel: 1
adjustment (Sec) =: -8.09151786e-011
1GSa/s factor in 312.5e-15 Sec counts: -258
skew for channel: 2
adjustment (Sec) =: -9.73958333e-010
1GSa/s factor in 312.5e-15 Sec counts: -3116
skew for channel: 1
adjustment (Sec) =: -8.09151786e-011
1GSa/s factor in 312.5e-15 Sec counts: -516
skew for channel: 2
adjustment (Sec) =: -7.55208333e-011
1GSa/s factor in 312.5e-15 Sec counts: -3357
**** CAL PASSED **** Time: 1 seconds
-----< Memory Status >-----
Memory Load 50% -> 53%: 3%
  Physical Used (MB) 36.570 -> 38.348: 1.777

Total Calibration Time: 375
Lowest Frame Temp : 17.750000
Highest Frame Temp: 18.750000
Update Cal Header
Factory Cal Mode
   Revision     : 2
   Cal Mode     : Factory
   Cal Satus    : CAL_OK
   Firmware Ver : 01.01.2016092800
   Cal Temp     : 24.250000 C
   Cal Date     : Tue Jul 18 09:11:14 2017
   Cal Duration : 351s

Service Cal Mode
   Revision     : 1
   Cal Mode     : Service
   Cal Satus    : CAL_OK
   Firmware Ver : 01.01.2016092800
   Cal Temp     : 24.750000 C
   Cal Date     : Tue Jul 18 09:11:14 2017
   Cal Duration : 351s

User Cal Mode
   Revision     : 8
   Cal Mode     : User
   Cal Satus    : CAL_OK
   Firmware Ver : 01.01.2016092800
   Cal Temp     : 18.250000 C
   Cal Date     : Wed Sep 28 00:06:52 2016
   Cal Duration : 375s


**********************************
 Calibration PASSED
    Board: 0
    Inst: xxxxxxxxxx(serial number)
    Date: Wed Sep 28 00:06:53 2016
    Duration:  6.3 minutes
    Inst Temp: 18.5 degrees C
**********************************

I looks like it is possible to add LAN option.  :popcorn:
Code: [Select]

LaunchInfiniiVision:
BLT Module Config 03 - UNKNOWN
=========================================
BLT Product Config 24
   Bandwidth   : 200MHz
   #Channel    : 2
   Board Rev   : FPR
   Clk Gating  : Baldwin
   Sample Rate : 4GSa
   LAN PHY     : Yes
BLT Module Config 03
   Rev         : LP0
   Sample Rate : 0GSa/s
=========================================




 
The following users thanked this post: TK

Offline TK

  • Super Contributor
  • ***
  • Posts: 1722
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #455 on: November 11, 2017, 07:16:09 pm »
When User calibration fails, the last known calibration data is restored:

Code: [Select]
**** CAL FAILED ****
Recall \Secure\cal\FactoryCal2.dat - ok
Recall \Secure\cal\ServiceCal1.dat - ok
Recall \Secure\cal\UserCal8.dat - ok
Cal Date Wed Mar 22 09:18:21 2017
Update Cal Failed Header

What is the point of updating the Cal Failed Header so every time the scope boots it shows uncalibrated warning message?  Technically the scope is not uncalibrated, it is calibrated to the latest good known values recalled from Usercal8.dat.
 

Offline hv222

  • Regular Contributor
  • *
  • Posts: 66
  • Country: pl
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #456 on: November 11, 2017, 07:49:50 pm »
I had same problem with user calibration when generator components was missing. Scope showed notification that it is uncalibrated after every boot.
 

Offline Brumby

  • Supporter
  • ****
  • Posts: 12288
  • Country: au
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #457 on: November 12, 2017, 12:42:53 am »
What is the point of updating the Cal Failed Header so every time the scope boots it shows uncalibrated warning message?  Technically the scope is not uncalibrated, it is calibrated to the latest good known values recalled from Usercal8.dat.

To remind you that something isn't 100%.

Without a noticeable warning, users may forget that the unit has an "issue".  It's easily ignorable after boot up - but you really don't want to be allowed to forget about it.

Besides, what if there was a real calibration issue - not related to a hack?
 

Offline hv222

  • Regular Contributor
  • *
  • Posts: 66
  • Country: pl
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #458 on: November 12, 2017, 09:27:20 am »
My scope has PCB REV A004

I have REV A005 which is related with BLT rev 003 and BLT_MODULE_CONFIG_0, 1.068v, ID3.
REV A004 is related with BLT rev 002 and BLT_MODULE_CONFIG_0, 0.687v, ID2.
Firmware looks the same in both cases. Maybe here is problem with calibration. I don't notices differences in hardware between A004 and A005. In BLT PCB I noticed one difference - bias resistors for memory. I set my scope to ID2 on BLT_MODULE_CONFIG_0 and it works. I noticed difference in device load time. On ID3 it is 0ms, on ID2 it is 1ms. However I can't handle the responsibility, when something goes wrong. I forgot to check user calibration on this setting. Here are resistors for BLT_MODULE_CONFIG_0.

Other option is that I rework all integrated circuits on main board while reverse engineering Maybe I broke something.
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1722
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #459 on: November 12, 2017, 02:36:52 pm »
I wrongly assumed that user calibration was failing at the same point as before (External Trigger Level).  It advances and fails trying to finish some CH1 calibration before switching to CH2.  And I am having the same failure in both ID 24 (DSOX) and ID 22 (original EDUX) modes, so I am suspecting it must be some modification to the frontend I did.

Code: [Select]
**** External Trigger Level ****
/1 Trig B1 = 5303.000, B0 = 35740.000
/5 Trig B1 = 1071.000, B0 = 35740.000
/1 Trig 2 B1 = 17283.000, B0 = 28463.000
/5 Trig 2 B1 = 3492.000, B0 = 28463.000
**** CAL PASSED **** Time: 2 seconds
**** Wave Gen ****
[calibrator] = 0x3fb48 Q | -52958.38 Q/V
[0: DIV1  + DIV1 ] = 0x1eb87 Q | 10133.60 Q/V | (calV=2.518676V) 33.462407 V
[1: DIV4  + DIV1 ] = 0x1fa97 Q | 10132.40 Q/V | (calV=2.505949V) 8.296394 V
[2: DIV16 + DIV1 ] = 0x1ffdb Q | 10132.80 Q/V | (calV=0.639389V) 2.089760 V
[3: DIV64 + DIV1 ] = 0x1fff4 Q | 10132.40 Q/V | (calV=0.160163V) 0.540750 V
[4: DIV1  + DIV23] = 0x1eb63 Q | 235987.50 Q/V | (calV=0.450675V) 1.427369 V
[5: DIV4  + DIV23] = 0x1fa86 Q | 235982.50 Q/V | (calV=0.109747V) 0.356415 V
[6: DIV16 + DIV23] = 0x1ffcd Q | 235985.00 Q/V | (calV=0.024963V) 0.089604 V
[7: DIV64 + DIV23] = 0x1ffe5 Q | 235987.50 Q/V | (calV=0.006987V) 0.023206 V
[0: DIV1  + DIV1 ] = 33.225354 V (overwrite)
**** CAL PASSED **** Time: 62 seconds
**** Wavegen Trigger Level Offset ****
Wavegen Trig Offset = 0x8BA1
**** CAL PASSED **** Time: 1 seconds
**** Baldwin Trig Time Qual ****
Set CalConfigScope range 1.000000E-005, delay -1.000000E-006
FAILED!  Top meas failed to return good value
**** CAL FAILED ****
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1722
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #460 on: November 12, 2017, 02:42:34 pm »
Code: [Select]

LaunchInfiniiVision:
BLT Module Config 03 - UNKNOWN
=========================================
BLT Product Config 24
   Bandwidth   : 200MHz
   #Channel    : 2
   Board Rev   : FPR
   Clk Gating  : Baldwin
   Sample Rate : 4GSa
   LAN PHY     : Yes
BLT Module Config 03
   Rev         : LP0
   Sample Rate : 0GSa/s
=========================================

I see something wrong with your startup.  It is giving "BLT Module Config 03 - UNKNOWN" error and the sample rate is 0GSa/s.

On my scope, I don't get the UNKNOWN error (as my BLT Module Config is 02) and the sample rate is 5GSa/s.

Did your BLT module came originally set to Config 03?
 

Offline hv222

  • Regular Contributor
  • *
  • Posts: 66
  • Country: pl
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #461 on: November 12, 2017, 03:41:56 pm »
Yes, Original value was 03. I played with resistor dividers and BLT configurations above 02 as marked as unknown. It is probably information about BLT PCB revision. I have no idea what is problem with your scope now. Did you check solder points on connectors between main and BLT board? It's easy to broke it while removing BLT PCB. I totally broke solder points under 2 connectors while first BLT board removing, but after resoldering it works well. Please also check outside 47ohm resistors between LMH6552 and LC low pass filter in frontends. Here are differential signal split points to ADC and to U401.
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1722
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #462 on: November 12, 2017, 04:22:24 pm »
What capacitor and inductor values have you used at the end of the frontend, after the differential amplifier?
 

Offline hv222

  • Regular Contributor
  • *
  • Posts: 66
  • Country: pl
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #463 on: November 12, 2017, 04:23:43 pm »
I don't change these components.
 
The following users thanked this post: TK

Offline TK

  • Super Contributor
  • ***
  • Posts: 1722
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #464 on: November 12, 2017, 05:09:21 pm »
This is the best I got by changing different settings:

Code: [Select]
**** Baldwin Trig Time Qual ****
Set CalConfigScope range 1.000000E-005, delay -1.000000E-006
    Top       : 1.658292
    Base      : -1.557789
  Vert Scale : 80.000000
  Vert Offset: -0.778894
  Trig Level : -0.778894
  Horz Range : 1.000000e-007
  Horz Delay : 1.500000e-008
CalConfigScope range 1.000000E-007, delay 1.500000E-008
--- Internal Timer ---
Could not perform TVolt measurement on edge trigger
**** CAL FAILED ****

Compared to your scope that passes User Calibration:

Code: [Select]
**** Baldwin Trig Time Qual ****
Set CalConfigScope range 1.000000E-005, delay -1.000000E-006
    Top       : 2.663317
    Base      : -29.095478
  Vert Scale : 80.000000
  Vert Offset: -14.547739
  Trig Level : -14.547739
  Horz Range : 1.000000e-007
  Horz Delay : 1.500000e-008
CalConfigScope range 1.000000E-007, delay 1.500000E-008
--- Internal Timer ---
    tVolt for Edge Trigger = 2.321820 ns
    Zero Time = 2.321820 ns

Base on Mine: -1.557789.  Base on Yours: -29.095478

But most of the time, I get:

Code: [Select]
**** Baldwin Trig Time Qual ****
Set CalConfigScope range 1.000000E-005, delay -1.000000E-006
    Top       : 1.256281
FAILED!  Base meas failed to return good value
**** CAL FAILED ****
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1722
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #465 on: November 12, 2017, 05:11:01 pm »
I don't change these components.
Have you applied the FRA patch released by Keysight?
 

Offline hv222

  • Regular Contributor
  • *
  • Posts: 66
  • Country: pl
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #466 on: November 12, 2017, 06:23:40 pm »
No. I haven't.
« Last Edit: November 12, 2017, 06:32:19 pm by hv222 »
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1722
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #467 on: November 12, 2017, 08:23:08 pm »
I think the FRA patch released by Keysight breaks the copyright message after the spash screen.  Where it used to say "Keysight Technologies..." it says "ght Technologies..."  after the patch is installed. 

Can anyone with the FRA patch installed verify?
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1722
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #468 on: November 12, 2017, 09:07:20 pm »
Maybe the user calibration on my scope has to do with a triggering problem.  I realized it is not triggering correctly on rising edge.  I need to set the trigger level about 10% of the lower bottom of the signal and above to start triggering.  Falling edge triggers correctly.  I suspect it is the LOW PASS FILTER capacitor and inductor values that I tried to match to a 2000X, but I may be completely wrong...
 

Offline hv222

  • Regular Contributor
  • *
  • Posts: 66
  • Country: pl
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #469 on: November 12, 2017, 09:23:52 pm »
All scopes have some hysteresis on trigger. Problem is related with CH1, CH2 or both? I check it on my scope. Rising edge need to little (about 10%) over bottom and falling edge trigger little under top of signal. I will try to install FRA patch, but before it I want to finish LAN adapter. Telnet can be helpful if something goes wrong. Do you have other Keysight scope like 2000x or something?
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1722
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #470 on: November 12, 2017, 09:26:39 pm »
The trigger "issue" I have is with both CH1 and CH2.  But based on your description, it is within normal range.  I have an MSOX3024A.
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1722
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #471 on: November 14, 2017, 01:41:03 am »
I think I am getting close to the problem.  I noticed the signal is unbalanced.  I am feeding a square wave from the signal generator, 1Vpp, 1KHz, offset 0V.  I am seeing -531mV to +482mV on CH1, -523mV to +509mV on CH2.  I put back the original components in the LPF outside the differential amplifier, but there is no change in the signal levels.  I suspect this issue is related to the user calibration problem.

I will measure the differential outputs and post some pictures.
« Last Edit: November 14, 2017, 01:51:01 am by TK »
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1722
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #472 on: November 14, 2017, 02:14:51 am »
I don't change these components.
Did you replace the LMH6550 on the EDUX for the LMH6552?
 

Offline hv222

  • Regular Contributor
  • *
  • Posts: 66
  • Country: pl
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #473 on: November 14, 2017, 08:50:55 am »
Yes, I'm using LMH6552. After replace components I had problem with offset, but it's gone after user calibration, except 500uV/div. This setting is very noisy and with small offset. Try also measure voltages on differential out to VCM/ADC ref voltage (LMH6552 pin 2).
 

Offline hv222

  • Regular Contributor
  • *
  • Posts: 66
  • Country: pl
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #474 on: November 18, 2017, 12:11:44 am »
I add PHY LAN8700C, but it looks like it not have MAC address assigned  - FF-FF-FF-FF-FF-FF. I'm not sure about pull up/down configuration of PHY. I made some reverse engineering of 2000x, 3000x and 4000x teardown photos, but it's not enough clear where pull resistors are going - probably GND. Now are 10k pull down resistors to RXD0, RXD1, RXD2, RXD3 lines. LED's are connected like in recommended schematic for MII mode - PHY application. I try to read M25P40 memory and also play with wire shark to check out communication.

Code: [Select]

LAN PHY detected.
 EDeviceLoadEeprom, MAC address not programmed.
-EDeviceLoadEeprom 03:04:05:06:07:08
Phy found addr 31 (ticks=3327)
WaitForLink Start (ticks=3329)
No Link (ticks=4331)
<--EDeviceInitialize

GMAC DMA status register = 0x0
LIN: Data Valid
BALDWIN_DDI: cBaldwinHwIf::Init: Initializing...
BALDWIN_DDI: cBaldwinHwIf::Init: Scope successfully identified.
BALDWIN_DDI: cBaldwinHwIf::Init: Success!
WaitForLink Start (ticks=6338)
Link Detected (ticks=6339)

 GMAC Init : 100 Mbit/s FULL DUPLEX (MII)
Flushed Transmit Buffer
phyCfg->dwSpeed 0x64
phyCfg->bFullDuplex 0x1
<--EDeviceInitialize

GMAC DMA status register = 0x600004
DriverStart
GMAC Device enable interrupt
cable attached
Device load time:
   NANDFLASH: 0 ms
   SNANDFLASH: 0 ms
SHIM DLL, LoadRealDll [PalIO.dll] for [AgilentPalIO.dll]
SHIM [AgilentPalIO.dll] Get Process Addresses
LaunchInfiniiVision:
BLT Module Config 03 - UNKNOWN
 
The following users thanked this post: skander36


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf