Author Topic: Sniffing the Rigol's internal I2C bus  (Read 1825184 times)

0 Members and 2 Guests are viewing this topic.

Offline zibadun

  • Regular Contributor
  • *
  • Posts: 112
  • Country: us
Sniffing the Rigol's internal I2C bus
« Reply #725 on: July 31, 2013, 01:17:12 am »
Something that would still be cool is a firmware hack (now that we know we can load custom firmware) that allows going to 1 nS or even 500 pS timebase.  We know that it is possible from the fram hacking days - now just to find that byte or two in firmware that limits it to 2 nS...

Gez you make it sound so easy...
at 500 picosecond you will see exactly one sample per division?  Or do we hack the sampling rate also. Can't be more than a couple of bytes to go to 10 Gsps ;)
 

Offline alank2

  • Super Contributor
  • ***
  • Posts: 2183
Re: Sniffing the Rigol's internal I2C bus
« Reply #726 on: July 31, 2013, 01:23:31 am »
Gez you make it sound so easy...

With the talent here it would be a great tweak!
 

Offline Leonard Tatzig

  • Newbie
  • Posts: 5
  • Country: de
Re: Sniffing the Rigol's internal I2C bus
« Reply #727 on: July 31, 2013, 10:54:25 am »
Ok guys, yesterday it was just to know how to hack this scope.
Today it is a serious problem:
 

Offline Leonard Tatzig

  • Newbie
  • Posts: 5
  • Country: de
Re: Sniffing the Rigol's internal I2C bus
« Reply #728 on: July 31, 2013, 10:56:32 am »
Date of Calibration 09-Jul-2013
 

Offline jeremy

  • Super Contributor
  • ***
  • Posts: 1079
  • Country: au
Re: Sniffing the Rigol's internal I2C bus
« Reply #729 on: July 31, 2013, 10:58:44 am »
Hi Leonard,

Have you tried to unlock?
 

Offline Leonard Tatzig

  • Newbie
  • Posts: 5
  • Country: de
Re: Sniffing the Rigol's internal I2C bus
« Reply #730 on: July 31, 2013, 11:02:11 am »
Right now I'm still at work (it's 1 p.m. in Germany). Maybe in the evening when I'm home...
 

Offline jeremy

  • Super Contributor
  • ***
  • Posts: 1079
  • Country: au
Re: Sniffing the Rigol's internal I2C bus
« Reply #731 on: July 31, 2013, 11:09:14 am »
It would be surprising to see that they have fixed it; this is a hardware revision change and not a software one. If it is indeed related to this, it is probably just the potting of some bits and pieces as well as obfuscation of the jtag port. Seems like not a good enough reason to jump the revision to 2.0 though.
 

Offline PA0PBZ

  • Super Contributor
  • ***
  • Posts: 5121
  • Country: nl
Re: Sniffing the Rigol's internal I2C bus
« Reply #732 on: July 31, 2013, 11:21:13 am »
Ok guys, yesterday it was just to know how to hack this scope.
Today it is a serious problem:

I got one yesterday, serial starts the same and I think it is the same batch. Not sure if it was hardware 2.0 but I think so, will check when I get home. Unlocked without a problem  :-+
Keyboard error: Press F1 to continue.
 

Offline Leonard Tatzig

  • Newbie
  • Posts: 5
  • Country: de
Re: Sniffing the Rigol's internal I2C bus
« Reply #733 on: July 31, 2013, 11:25:20 am »
Ok guys, yesterday it was just to know how to hack this scope.
Today it is a serious problem:

I got one yesterday, serial starts the same and I think it is the same batch. Not sure if it was hardware 2.0 but I think so, will check when I get home. Unlocked without a problem  :-+

Hartstikke bedankt!
 

Offline Carrington

  • Super Contributor
  • ***
  • Posts: 1202
  • Country: es
Re: Sniffing the Rigol's internal I2C bus
« Reply #734 on: July 31, 2013, 12:38:02 pm »
Ok guys, yesterday it was just to know how to hack this scope.
Today it is a serious problem:

Was hoped, but:
I wonder what they changed?  Maybe a board valid for both the DS2000-S version and DS2000? With support for L.A.?
We will have to wait until someone take it apart.  ::)
My English can be pretty bad, so suggestions are welcome. ;)
Space Weather.
Lightning & Thunderstorms in Real Time.
 

Offline PA0PBZ

  • Super Contributor
  • ***
  • Posts: 5121
  • Country: nl
Re: Sniffing the Rigol's internal I2C bus
« Reply #735 on: July 31, 2013, 12:41:18 pm »
Mine will be over 24 hours old when I get home, so if it is 2.0 indeed I might just take a screwdriver and...  :-/O
Keyboard error: Press F1 to continue.
 

Offline Carrington

  • Super Contributor
  • ***
  • Posts: 1202
  • Country: es
Re: Sniffing the Rigol's internal I2C bus
« Reply #736 on: July 31, 2013, 12:45:55 pm »
Mine will be over 24 hours old when I get home, so if it is 2.0 indeed I might just take a screwdriver and...  :-/O

Seriously? I'm already impatient.  :scared:
My English can be pretty bad, so suggestions are welcome. ;)
Space Weather.
Lightning & Thunderstorms in Real Time.
 

Offline PA0PBZ

  • Super Contributor
  • ***
  • Posts: 5121
  • Country: nl
Re: Sniffing the Rigol's internal I2C bus
« Reply #737 on: July 31, 2013, 03:40:01 pm »
I just checked and it is hardware version 2.0 indeed. Now I have to eat and go the the gym, so I hope to be able to open it up and make some pictures later this evening.
Keyboard error: Press F1 to continue.
 

Offline PA0PBZ

  • Super Contributor
  • ***
  • Posts: 5121
  • Country: nl
Re: Sniffing the Rigol's internal I2C bus
« Reply #738 on: July 31, 2013, 05:14:02 pm »
I wonder what they changed?  Maybe a board valid for both the DS2000-S version and DS2000? With support for L.A.?

Yes, this is a board with the LA support, but unfortunately it is not populated and one of the things missing is a big BGA.
Pictures after the gym, be patient  ;)
Keyboard error: Press F1 to continue.
 

Offline Carrington

  • Super Contributor
  • ***
  • Posts: 1202
  • Country: es
Re: Sniffing the Rigol's internal I2C bus
« Reply #739 on: July 31, 2013, 05:51:20 pm »
I guess it!  8)
Will be the DS2000-[D,Z or ?] (with LA) much more expensive than without LA?
Maybe will be better if you create a new thread for this new revision of HW.
« Last Edit: July 31, 2013, 06:06:36 pm by Carrington »
My English can be pretty bad, so suggestions are welcome. ;)
Space Weather.
Lightning & Thunderstorms in Real Time.
 

Offline PA0PBZ

  • Super Contributor
  • ***
  • Posts: 5121
  • Country: nl
Re: Sniffing the Rigol's internal I2C bus
« Reply #740 on: July 31, 2013, 08:22:54 pm »
Maybe will be better if you create a new thread for this new revision of HW.

I did, see https://www.eevblog.com/forum/testgear/rigol-ds2000-hardware-version-2-0
Keyboard error: Press F1 to continue.
 

Offline adcajo

  • Newbie
  • Posts: 3
Re: Sniffing the Rigol's internal I2C bus
« Reply #741 on: August 01, 2013, 03:25:06 pm »
Anybody actual verified the 70 -> 200 MHz ? Other turned-on-options are easy to verify, but not everybody has equipment to test the new bandwith...
 

Offline Wim13

  • Regular Contributor
  • *
  • Posts: 241
  • Country: nl
Re: Sniffing the Rigol's internal I2C bus
« Reply #742 on: August 01, 2013, 03:43:53 pm »
Yes we did measure the bandwidth...BUT..

For all these new gold diggers, before you turn your gold to lead... >:D

The bandwidth is only valid in the latest Firmware..
See picture of a 2072, measured with different options.


The problem is the frimware versions...

Version 00.00.01.00.05 ONLY supports codes DSAB...DSAH
it does not support bandwidth changes.., YES it shows but is not.

Version 00.01.01.00.02, support codes DSAB...DSAZ

Codes DSA2...9  have no use, they open the model 2102, as also 2202, at the same time, >:D
it is possible that Rigol use these codes for something else, we dont know,
maybe for some other maintenance options. And yes they seems to work oke.

Firmware History:

00.00.01.00.02
00.00.01.00.05

00.01.00.00.03

00.01.01.00.02 Latest.
« Last Edit: August 01, 2013, 03:46:54 pm by Wim13 »
 

Offline Orange

  • Frequent Contributor
  • **
  • Posts: 346
  • Country: nl
Re: Sniffing the Rigol's internal I2C bus
« Reply #743 on: August 01, 2013, 05:17:47 pm »
Something that would still be cool is a firmware hack (now that we know we can load custom firmware) that allows going to 1 nS or even 500 pS timebase.  We know that it is possible from the fram hacking days - now just to find that byte or two in firmware that limits it to 2 nS...
When I did my initial EEPROM experiments, the 1 nSec containd a nasty bug. please read
https://www.eevblog.com/forum/testgear/sniffing-the-rigol%27s-internal-i2c-bus/msg247223/#msg247223
Perhaps this is fixed now with the latest FW, but why should they. The 1 nSec is normally not available on the scope
 

Offline trevorklat

  • Newbie
  • Posts: 1
  • Country: us
Re: Sniffing the Rigol's internal I2C bus
« Reply #744 on: August 02, 2013, 12:54:43 am »
Brand new DS2072 owner here. Upgraded to latest official Rigol firmware. Used synapsis' Windows-based RiGen-1.zip program to generate license code for a 2202 with all official options (DSAZ). It worked perfectly and now all options are installed and it retained my original S/N. FWIW, I used the input panel on the scope to enter the license code.

I have read this entire thread and I wish to thank everyone who has worked so hard to come up with this ingenious solution.
 :clap:
1cross + 3nails = 4given
 

Offline etc6849

  • Contributor
  • Posts: 20
Re: Sniffing the Rigol's internal I2C bus
« Reply #745 on: August 02, 2013, 01:33:40 am »
Wim13: thanks for the bandwidth plot and the post!  I'm a new soon to be gold digger, and this makes me want to try the hack!
 

Offline kliklax

  • Newbie
  • Posts: 2
Re: Sniffing the Rigol's internal I2C bus
« Reply #746 on: August 02, 2013, 04:40:35 am »
Brand new DS2072 owner here. Upgraded to latest official Rigol firmware. Used synapsis' Windows-based RiGen-1.zip program to generate license code for a 2202 with all official options (DSAZ). It worked perfectly and now all options are installed and it retained my original S/N. FWIW, I used the input panel on the scope to enter the license code.

I have read this entire thread and I wish to thank everyone who has worked so hard to come up with this ingenious solution.
 :clap:

What version of hardware and software did you start with?  I was wondering if the version 2 hardware is being shipped in the US yet.
 

Offline Monkey

  • Newbie
  • Posts: 4
Re: Sniffing the Rigol's internal I2C bus
« Reply #747 on: August 02, 2013, 09:47:14 am »
Brand new DS2072 owner here. Upgraded to latest official Rigol firmware. Used synapsis' Windows-based RiGen-1.zip program to generate license code for a 2202 with all official options (DSAZ). It worked perfectly and now all options are installed and it retained my original S/N. FWIW, I used the input panel on the scope to enter the license code.

I have read this entire thread and I wish to thank everyone who has worked so hard to come up with this ingenious solution.
 :clap:

What version of hardware and software did you start with?  I was wondering if the version 2 hardware is being shipped in the US yet.

I'm also a new owner of a DS2072 and done what trevorklat has done above with the new Hardware V2. Everything is working great as far as I know :-+. I have noticed in the Channel Menu there is an selection called "Input" which is greyed out 1M ohms. Does any body knows what this is for? I have a pic below which shows this menu item. The pic below shows a 25Mhz Sinewave with an Amplitude of 4vpp. This is the Maximum Bandwidth I can test with this scope.
« Last Edit: August 02, 2013, 11:07:19 am by Monkey »
 

Offline flolic

  • Frequent Contributor
  • **
  • Posts: 386
  • Country: hr
    • http://filiplolic.com/
Re: Sniffing the Rigol's internal I2C bus
« Reply #748 on: August 02, 2013, 09:51:27 am »

 I have noticed in the Channel Menu there is an selection called "Input" which is greyed out 1M ohms. Does any body knows what this is for?


In version 2 hardware there is possibility to switch input impedance to 50 ohms. But that option is currently not enabled in firmware.
 

Offline Carrington

  • Super Contributor
  • ***
  • Posts: 1202
  • Country: es
Re: Sniffing the Rigol's internal I2C bus
« Reply #749 on: August 02, 2013, 10:47:57 am »
I'm also a new owner of a DS2072 and done what trevorklat has done above with the new Hardware V2.

Sorry, but where trevorklat says that his is the 2.0 version?  :-//
Or what you mean is, that yours DS2072 is 2.0 HW Ver.
« Last Edit: August 02, 2013, 10:49:36 am by Carrington »
My English can be pretty bad, so suggestions are welcome. ;)
Space Weather.
Lightning & Thunderstorms in Real Time.
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf