Author Topic: Sniffing the Rigol's internal I2C bus  (Read 1825219 times)

0 Members and 3 Guests are viewing this topic.

Offline grego

  • Frequent Contributor
  • **
  • Posts: 330
  • Country: us
Re: Sniffing the Rigol's internal I2C bus
« Reply #575 on: July 23, 2013, 03:50:19 am »
Damn, so this works also at DS4xxx series, great news.  :clap:

Edit : Fyi, I keep saving the offline version of this whole thread, just in case Dave received a cease & desist love letter from Rigol's lawyer.

Seriously?  Confirmed to work on the 4000 series too?
 

Offline BravoV

  • Super Contributor
  • ***
  • Posts: 7547
  • Country: 00
  • +++ ATH1
Re: Sniffing the Rigol's internal I2C bus
« Reply #576 on: July 23, 2013, 03:53:44 am »
Damn, so this works also at DS4xxx series, great news.  :clap:

Edit : Fyi, I keep saving the offline version of this whole thread, just in case Dave received a cease & desist love letter from Rigol's lawyer.

Seriously?  Confirmed to work on the 4000 series too?

One post above me, here re-quoting the photo, it says DS4024.


Offline true

  • Frequent Contributor
  • **
  • Posts: 329
  • Country: us
  • INTERNET
Re: Sniffing the Rigol's internal I2C bus
« Reply #577 on: July 23, 2013, 04:00:41 am »
One post above me, here re-quoting the photo, it says DS4024.

DSA9? Oh wait, I read, DSH9. I'll note that on the webgen.

----

I've updated the webgenerator with the new version so keys should work better. Also have a DS4K version (same thing but you enter you own option characters).
« Last Edit: July 23, 2013, 04:02:19 am by true »
 

Offline Uup

  • Regular Contributor
  • *
  • Posts: 82
  • Country: au
Re: Sniffing the Rigol's internal I2C bus
« Reply #578 on: July 23, 2013, 04:59:56 am »
Yes, DSH9 is correct.

I used the last code that cybernet asked DS4k owners to try, in post #259 back on page 18 of this thread. Although he indicates that DSH9 is for 8 options but it actually enables 5 options. I think there are currently only 5 "official" options for the DS4k.
« Last Edit: July 23, 2013, 05:04:18 am by Uup »
 

Offline roli_bark

  • Regular Contributor
  • *
  • Posts: 170
Re: Sniffing the Rigol's internal I2C bus
« Reply #579 on: July 23, 2013, 05:11:36 am »
Nice !,
What about the DS4024 500mhz BW option ?
 

Offline Uup

  • Regular Contributor
  • *
  • Posts: 82
  • Country: au
Re: Sniffing the Rigol's internal I2C bus
« Reply #580 on: July 23, 2013, 05:29:46 am »
Nice !,
What about the DS4024 500mhz BW option ?

I was thinking the same thing. I'm going to experiment with different codes and see if it's possible.
« Last Edit: July 23, 2013, 05:35:15 am by Uup »
 

Offline ve7xen

  • Super Contributor
  • ***
  • Posts: 1192
  • Country: ca
    • VE7XEN Blog
Re: Sniffing the Rigol's internal I2C bus
« Reply #581 on: July 23, 2013, 06:34:10 am »
Edit : Fyi, I keep saving the offline version of this whole thread, just in case Dave received a cease & desist love letter from Rigol's lawyer.
I've also been mirroring the key files/information at http://www.gotroot.ca/rigol/

I have also built binaries of true's latest source for i386 and x86_64 Linux and placed them there also, if anyone is too lazy to build it themselves. (And geeze, can't take MIRACL seriously. A crypto library that doesn't even use a Makefile??)

Thanks to everyone that's contributed to this reversing. This is a triumph!  :-+
73 de VE7XEN
He/Him
 

Offline tinhead

  • Super Contributor
  • ***
  • Posts: 1918
  • Country: 00
    • If you like my hacks, send me a donation
Re: Sniffing the Rigol's internal I2C bus
« Reply #582 on: July 23, 2013, 08:18:10 am »
time for DSA815?  >:D
I don't want to be human! I want to see gamma rays, I want to hear X-rays, and I want to smell dark matter ...
I want to reach out with something other than these prehensile paws and feel the solar wind of a supernova flowing over me.
 

Offline mickpah

  • Regular Contributor
  • *
  • Posts: 148
  • Country: au
    • Yeti Hacks
Re: Sniffing the Rigol's internal I2C bus
« Reply #583 on: July 23, 2013, 08:27:25 am »
I thought I had this fixed last night , but no.
I have a 2072 now stuck as a 2202, not so bad, original trial licenses still active, but no way any of the key gens seem to work for me.
It is a 13 character serial if this makes a difference.
compiled code myself, ran precompiled incase I couldn't follow simple instructions
getting a bit beyond frustrated now  |O
 

Offline UberSteve

  • Contributor
  • Posts: 21
  • Country: au
Re: Sniffing the Rigol's internal I2C bus
« Reply #584 on: July 23, 2013, 08:50:39 am »
getting a bit beyond frustrated now  |O

What firmware are you running? Maybe try upgrading to the latest, if not already running it?
 

Offline mickpah

  • Regular Contributor
  • *
  • Posts: 148
  • Country: au
    • Yeti Hacks
Re: Sniffing the Rigol's internal I2C bus
« Reply #585 on: July 23, 2013, 08:53:53 am »
getting a bit beyond frustrated now  |O

What firmware are you running? Maybe try upgrading to the latest, if not already running it?
yep did that, rolled back two versions and forward again. no change.

just get this when sending the keys with scpi usb or lan

 * Error£¡£¡£¡
VISA:  (Hex 0xBFFF0015) Timeout expired before operation completed.
-> :SYSTem:OPTion:INSTall 
 

Offline ve7xen

  • Super Contributor
  • ***
  • Posts: 1192
  • Country: ca
    • VE7XEN Blog
Re: Sniffing the Rigol's internal I2C bus
« Reply #586 on: July 23, 2013, 09:04:43 am »
The scope will ignore a key if you leave the '-' in there. It should just be the string of characters, if you send via SCPI.

You should get either an Option Installed or some error message on screen shortly after.
73 de VE7XEN
He/Him
 

Offline Maalobs

  • Contributor
  • Posts: 16
  • Country: se
Re: Sniffing the Rigol's internal I2C bus
« Reply #587 on: July 23, 2013, 09:12:02 am »
Or use the on-screen keyboard on the scope to enter your license code, it's actually quite fast to use.
 

Offline mickpah

  • Regular Contributor
  • *
  • Posts: 148
  • Country: au
    • Yeti Hacks
Re: Sniffing the Rigol's internal I2C bus
« Reply #588 on: July 23, 2013, 09:22:26 am »
thanks all, yes I was dropping the  - and even tried via the screen, in the end it worked.
I used a new seed with every attempt, not sure if I struck a lucky seed ?
Bottom line - I'm now  a happy camper, could feel myself getting all OCD.
Now to void the warranty on my DP831 - I haven't seen any internal pic anywhere yet. Really hoping that is blackfin based too..  >:D
Hirez and lan world be nice
 

Offline mklimasz

  • Newbie
  • Posts: 3
  • Country: pl
Re: Sniffing the Rigol's internal I2C bus
« Reply #589 on: July 23, 2013, 09:28:34 am »
I'd like to confirm the gen (Windows version) works perfectly - entered keys via screen, now my 2072 is permanently transformed into 2202 with options installed. Great work!  :-+
 

Offline Carrington

  • Super Contributor
  • ***
  • Posts: 1202
  • Country: es
Re: Sniffing the Rigol's internal I2C bus
« Reply #590 on: July 23, 2013, 11:46:09 am »
I've also been mirroring the key files/information at http://www.gotroot.ca/rigol/

I love it, it is so much more compact and less confusing.  :-+
My English can be pretty bad, so suggestions are welcome. ;)
Space Weather.
Lightning & Thunderstorms in Real Time.
 

Offline Uup

  • Regular Contributor
  • *
  • Posts: 82
  • Country: au
Re: Sniffing the Rigol's internal I2C bus
« Reply #591 on: July 23, 2013, 12:35:24 pm »
I've also been mirroring the key files/information at http://www.gotroot.ca/rigol/


It's great to have all that info in the one place for easy access, thanks!  :-+

However, some of the zip files are corrupt... (dstool.zip, RiGen-1.zip, ScopeCommander.zip)

 

Offline tinhead

  • Super Contributor
  • ***
  • Posts: 1918
  • Country: 00
    • If you like my hacks, send me a donation
Re: Sniffing the Rigol's internal I2C bus
« Reply #592 on: July 23, 2013, 12:43:27 pm »
However, some of the zip files are corrupt... (dstool.zip, RiGen-1.zip, ScopeCommander.zip)

no, they not
I don't want to be human! I want to see gamma rays, I want to hear X-rays, and I want to smell dark matter ...
I want to reach out with something other than these prehensile paws and feel the solar wind of a supernova flowing over me.
 

Offline roli_bark

  • Regular Contributor
  • *
  • Posts: 170
Re: Sniffing the Rigol's internal I2C bus
« Reply #593 on: July 23, 2013, 12:43:28 pm »
Also, I speculate that the keys.txt is different for the DS40xx line.

For example - there's no Mem option - they come all the same - , but there should be 100/200/350/500mhz options.
 

Offline XaS

  • Contributor
  • Posts: 19
  • Country: ch
Re: Sniffing the Rigol's internal I2C bus
« Reply #594 on: July 23, 2013, 12:46:08 pm »
Thank you guys, this is just awesome! I can confirm that the Win GUI (I was lazy this morning  ;) ) worked perfectly on my 2072 with 00.01.00.05. After updating to 01.01.00.02 the options are still enabled. (I didn't try to upgrade to an 2202 yet.)

MfG XaS
 

Offline olsenn

  • Frequent Contributor
  • **
  • Posts: 993
Re: Sniffing the Rigol's internal I2C bus
« Reply #595 on: July 23, 2013, 12:54:40 pm »
Wow, I haven't been following this post, but it looks like it might be awesome! So has there been a key generator built for the DSA815? Or does this only work with the DS2000 oscilloscopes?
 

Offline colinbeeforth

  • Contributor
  • Posts: 33
Re: Sniffing the Rigol's internal I2C bus
« Reply #596 on: July 23, 2013, 01:31:25 pm »
I had the same experience as Xas, my DS2072 is now far more interesting. Congratulations to those who contributed, you have my gratitude and total admiration for such incredible sleuthing skills.  Brilliant work!

I'll be able to retire my old LeCroy 9310A, I have a reasonable alternative now.

Cheers, Colin
 

Offline DL5TOR

  • Contributor
  • Posts: 35
  • Country: de
Re: Sniffing the Rigol's internal I2C bus
« Reply #597 on: July 23, 2013, 01:41:55 pm »
Wow, I haven't been following this post, but it looks like it might be awesome! So has there been a key generator built for the DSA815? Or does this only work with the DS2000 oscilloscopes?

As of right now there is no implemetion for the DSA815. But I am working on it
 

Offline metalphreak

  • Frequent Contributor
  • **
  • Posts: 815
  • Country: au
  • http://d.av.id.au
    • D.av.id.AU
Re: Sniffing the Rigol's internal I2C bus
« Reply #598 on: July 23, 2013, 02:03:20 pm »
Also, I speculate that the keys.txt is different for the DS40xx line.

For example - there's no Mem option - they come all the same - , but there should be 100/200/350/500mhz options.

Has anyone confirmed that all the bandwidth variations of the DS4000 series have the same internals? I wouldn't be surprised if the 350/500mhz models have a different front end to the 100/200mhz models.

Offline roli_bark

  • Regular Contributor
  • *
  • Posts: 170
Re: Sniffing the Rigol's internal I2C bus
« Reply #599 on: July 23, 2013, 02:26:11 pm »
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf