Author Topic: Hack of Sigllent spectrum analyzer ssa3021X?  (Read 105207 times)

0 Members and 1 Guest are viewing this topic.

Offline papousek

  • Contributor
  • Posts: 13
  • Country: jp
Hack of Sigllent spectrum analyzer ssa3021X?
« on: May 13, 2016, 05:15:26 PM »
I been waiting for reviews and being really interested to buy one since i saw the hack of  ssa3021X from the post: (http://www.eevblog.com/forum/testgear/siglent-ssa3000x-spectrum-analyzers/100/) .

it seems the SSA3021X (Original 2.1G and options closed) are upgraded to 3.2G, full options opened.  :-+ :-+
it's impossible for me to judge if the hack really works since i dont have one,,,,anyone who got one at hand can do me a favor to review or to try the hack?

anyway,, 1600 bucks are not a easy budget for me.
Tks in advance
 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #1 on: May 13, 2016, 05:44:02 PM »
It seems to me you'd want to grab the current FW update just in case it gets pulled.  :-\
Not sure if it has opened the hole to allow the upgrade but just in case it has here's the link:

http://www.siglentamerica.com/USA_website_2014/Firmware&Software/firmware/SSA-firmware-0705.rar
~7.5 Mb
Avid Rabid Hobbyist & NZ Siglent Distributor
 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Avid Rabid Hobbyist & NZ Siglent Distributor
 

Offline Deuze

  • Contributor
  • Posts: 15
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #3 on: May 17, 2016, 11:27:21 AM »
Hi Papousek,
Here is some info you may want to know. In order to investigate whether it is a accident event.  I install the old FW again and find out the 'hack' was gone. But when I upgrade to FW07.05 again and do the same thing to it. The 'hack' appeared again! So I think it means people can really hack it with these steps.   ;) Wunderbar
Always on a trip....
 

Offline drieg

  • Regular Contributor
  • *
  • Posts: 81
  • Country: cz
    • Silcon Electronics
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #4 on: June 21, 2016, 12:07:22 AM »
Latest SSA3021X and SSA3032X units are hardware identical and SSA3021X is also calibrated up to 3.2GHz, so yes, SSA3021X is "upgradable" to SSA3032X  ;)
Bricked Rigol? This thread might be of any help.
 
The following users thanked this post: rf-loop

Online nctnico

  • Super Contributor
  • ***
  • Posts: 13285
  • Country: nl
    • NCT Developments
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #5 on: June 21, 2016, 12:19:02 AM »
Hi Papousek,
Here is some info you may want to know. In order to investigate whether it is a accident event.  I install the old FW again and find out the 'hack' was gone. But when I upgrade to FW07.05 again and do the same thing to it. The 'hack' appeared again! So I think it means people can really hack it with these steps.   ;) Wunderbar
The biggest question is whether a future firmware upgrade undoes the 'hack'.
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #6 on: June 21, 2016, 12:47:13 AM »
Hi Papousek,
Here is some info you may want to know. In order to investigate whether it is a accident event.  I install the old FW again and find out the 'hack' was gone. But when I upgrade to FW07.05 again and do the same thing to it. The 'hack' appeared again! So I think it means people can really hack it with these steps.   ;) Wunderbar
The biggest question is whether a future firmware upgrade undoes the 'hack'.

With Rigol this afraid and question have been many years, starting from old times DS1052E. ;)
(I  remember well these RS232 and terminal things what also I have done... and eevery next FW update we afraid if this all have gone... )
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Online nctnico

  • Super Contributor
  • ***
  • Posts: 13285
  • Country: nl
    • NCT Developments
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #7 on: June 21, 2016, 03:02:53 AM »
Hi Papousek,
Here is some info you may want to know. In order to investigate whether it is a accident event.  I install the old FW again and find out the 'hack' was gone. But when I upgrade to FW07.05 again and do the same thing to it. The 'hack' appeared again! So I think it means people can really hack it with these steps.   ;) Wunderbar
The biggest question is whether a future firmware upgrade undoes the 'hack'.
With Rigol this afraid and question have been many years, starting from old times DS1052E. ;)
(I  remember well these RS232 and terminal things what also I have done... and eevery next FW update we afraid if this all have gone... )
That may be but if downgrading undoes the 'hack' in the SSA3000 then upgrading is likely to do the same because appearantly the hack doesn't update the memory where the enabled options are stored. If the options where enabled permanently by the hack then they would remain after downgrading.
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 

Offline continuo

  • Frequent Contributor
  • **
  • Posts: 301
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #8 on: June 21, 2016, 04:53:23 AM »
I don't understand, what exactly is the hack on this one? Just an upgrade with the official firmware or is there something else to do? And will this hack enable the Tracking Gen as well?  :-//
 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #9 on: June 21, 2016, 05:52:47 AM »
I don't understand, what exactly is the hack on this one? Just an upgrade with the official firmware or is there something else to do? And will this hack enable the Tracking Gen as well?  :-//
First mentioned here:
http://www.eevblog.com/forum/testgear/siglent-ssa3000x-spectrum-analyzers/msg938261/#msg938261

Avid Rabid Hobbyist & NZ Siglent Distributor
 

Online nctnico

  • Super Contributor
  • ***
  • Posts: 13285
  • Country: nl
    • NCT Developments
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #10 on: June 21, 2016, 05:56:02 AM »
I don't understand, what exactly is the hack on this one? Just an upgrade with the official firmware or is there something else to do? And will this hack enable the Tracking Gen as well?  :-//
First mentioned here:
http://www.eevblog.com/forum/testgear/siglent-ssa3000x-spectrum-analyzers/msg938261/#msg938261
We still need confirmation the options stay enabled in future firmware updates otherwise it isn't a hack but a bug. It would be sad when people make their purchase based on the availability of the full-featured SA for the base price only to find out they can only use an old firmware version which doesn't have the latest features.
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 

Offline drieg

  • Regular Contributor
  • *
  • Posts: 81
  • Country: cz
    • Silcon Electronics
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #11 on: June 21, 2016, 06:12:52 AM »
I don't understand, what exactly is the hack on this one? Just an upgrade with the official firmware or is there something else to do? And will this hack enable the Tracking Gen as well?  :-//
First mentioned here:
http://www.eevblog.com/forum/testgear/siglent-ssa3000x-spectrum-analyzers/msg938261/#msg938261
It is possible to turn SSA3021X into SSA3032X and enable all the options unofficially in a different (permanent) way as well ;)
« Last Edit: June 21, 2016, 06:24:59 AM by drieg »
Bricked Rigol? This thread might be of any help.
 

Offline PsychoBoy

  • Contributor
  • Posts: 6
  • Country: pl
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #12 on: June 21, 2016, 06:17:42 AM »
We still need confirmation the options stay enabled in future firmware updates otherwise it isn't a hack but a bug. It would be sad when people make their purchase based on the availability of the full-featured SA for the base price only to find out they can only use an old firmware version which doesn't have the latest features.
I would hardly call it hack since, man - you don't have to do anything, just upgrade FW, wtf :D? It's certainly a bug.
To me what is more important is to test it now if it really is capable of 3.2GHz span on 2.1GHz model and do all these enabled options work as well, because once you know the technical capabilities are the same then we can do hacks on software. Also if it works it's great base to start working on real hack - I mean for example you could dump memory from EEPROM when you had old FW and then dump once again when upgraded to new one, and see what's changed (maybe nothing unfortunately if it's related to real software bug like IDK wrong date checking?). By the way if it is possible to get trial versions for 48h, isn't it possible to manually adjust RTC clock and find and replace date in memory, I know it's pain in ass solution, but anyway.
 

Offline drieg

  • Regular Contributor
  • *
  • Posts: 81
  • Country: cz
    • Silcon Electronics
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #13 on: June 21, 2016, 06:37:02 AM »
..
To me what is more important is to test it now if it really is capable of 3.2GHz span on 2.1GHz model and do all these enabled options work as well, ..
The answer to both your questions is yes.
Bricked Rigol? This thread might be of any help.
 
The following users thanked this post: PsychoBoy

Offline PsychoBoy

  • Contributor
  • Posts: 6
  • Country: pl
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #14 on: June 21, 2016, 06:43:24 AM »
It is possible to turn SSA3021X into SSA3032X and enable all the options unofficially in a different (permanent) way as well ;)
Great info, would you mind to share your method?
The answer to both your questions is yes.
Then this is really nice. All Rigol hackers please take a look at this one!
 

Offline drieg

  • Regular Contributor
  • *
  • Posts: 81
  • Country: cz
    • Silcon Electronics
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #15 on: June 21, 2016, 07:32:03 AM »
I actually can't because I'm a distributor of Siglent (and Rigol) test gear. Sorry for that.
But  don't worry, there are many talented guys who will figure out soon. My guess is, that these units will quickly become very popular due its hackability (like Rigol units).

Small hint: read tinhead's thread;)
« Last Edit: June 21, 2016, 07:41:00 AM by drieg »
Bricked Rigol? This thread might be of any help.
 
The following users thanked this post: PsychoBoy

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #16 on: June 21, 2016, 07:58:08 AM »
I actually can't because I'm a distributor of Siglent (and Rigol) test gear. Sorry for that.
But  don't worry, there are many talented guys who will figure out soon. My guess is, that these units will quickly become very popular due its hackability (like Rigol units).

Small hint: read tinhead's thread;)
Thanks for the hint drieg.
Looking at his threads:
http://www.eevblog.com/forum/profile/?area=showposts;sa=topics;u=2790

Would I be correct the clues are in this one?
http://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/
Avid Rabid Hobbyist & NZ Siglent Distributor
 
The following users thanked this post: PsychoBoy

Offline Pinkus

  • Frequent Contributor
  • **
  • Posts: 444
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #17 on: June 21, 2016, 08:24:30 PM »
I actually can't because I'm a distributor of Siglent (and Rigol) test gear. Sorry for that.
I only can recommend Drieg as a distributor/reseller for Rigol and Siglent devices. I know him for years now. He is always very helpful (even months or years after the purchase!) and can help you whenever EVERY other reseller can't. So if you want to purchase such stuff, ask him for a quote.
 

Offline janekivi

  • Frequent Contributor
  • **
  • Posts: 266
  • Country: ee
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #18 on: June 25, 2016, 06:28:38 AM »
Does it have telnet?

You know what I'm thinking here... ;)
 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #19 on: June 25, 2016, 07:43:21 AM »
Does it have telnet?

You know what I'm thinking here... ;)
Early in Daves teardown and his only cursory inspection of the processor PCB he identifies a header that he calls as a Jtag and then another for programming.  :-\
http://www.eevblog.com/forum/blog/eevblog-892-siglent-ssa3021x-spectrum-analyser-teardown/
Avid Rabid Hobbyist & NZ Siglent Distributor
 

Offline janekivi

  • Frequent Contributor
  • **
  • Posts: 266
  • Country: ee
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #20 on: June 25, 2016, 07:51:16 AM »
Some kind of telnet prompt from LAN port? In shadow may be DES / crypt(3) root password.
 

Offline Pinkus

  • Frequent Contributor
  • **
  • Posts: 444
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #21 on: June 25, 2016, 08:55:01 AM »
Some kind of telnet prompt from LAN port? In shadow may be DES / crypt(3) root password.
Yes, telnet deamon is active - see screenshot.
But I do not know how to proceed from here.
 

Online nctnico

  • Super Contributor
  • ***
  • Posts: 13285
  • Country: nl
    • NCT Developments
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #22 on: June 25, 2016, 09:47:58 AM »
They didn't remove the banner? Maybe they kept the default Arago password as well: root
« Last Edit: June 25, 2016, 09:49:41 AM by nctnico »
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 

Offline Pinkus

  • Frequent Contributor
  • **
  • Posts: 444
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #23 on: June 25, 2016, 08:02:48 PM »
They didn't remove the banner? Maybe they kept the default Arago password as well: root
I am not a hacker, but  of course I already tried this (and some other) most obvious password without success.
 

Offline janekivi

  • Frequent Contributor
  • **
  • Posts: 266
  • Country: ee
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #24 on: June 25, 2016, 09:53:41 PM »
You can try crack this from SSA3000X_D07P03.ADS
xE062W/htPFyU
UNIX descrypt
 

Offline nowlan

  • Frequent Contributor
  • **
  • Posts: 641
  • Country: au
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #25 on: June 26, 2016, 12:34:07 AM »
does it need a salt?
 

Offline janekivi

  • Frequent Contributor
  • **
  • Posts: 266
  • Country: ee
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #26 on: June 26, 2016, 12:49:34 AM »
I think it is DES / crypt(3) and 2 first byte is salt and for
https://hashcat.net/oclhashcat/
it is -m 1500
 

Online TurboTom

  • Frequent Contributor
  • **
  • Posts: 295
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #27 on: July 02, 2016, 09:41:24 PM »
I also got myself one of these SA's and more or less directly hooked a USB-serial converter to the internal UART port (after I checked the signals with a scope). Serial port settings are 115200, n, 8, 1, no handshake. I labeled the UART lines in one of Dave's photos. It is easy to connect to the three required lines with a 2.54mm header with the pins slightly deformed and pushed into the holes so they make contact with the pads / hole plating of the PCB. It's not even necessary to remove the metal shielding from the back of the instrument to access this port and no soldering required whatsoever.

I attached a bootlog of the analyzer but since I'm not too much into hacking or programming, I'm also not too sure what to do next... Arago Project standard login doesn't work as well as anything I thought of (as Pinkus already reported). Yet, U-Boot is working and I can stop the bootup process and enter the U-Boot menu. I'm not sure if this helps to make some progress.

It seems in order to force the analyzer into the "Werewolf Mode"  ;) (see the other thread), it's only necessary to change the date to 1st January 1970. If the date is reset to correct parameters, the analyzer will become a "Sheep" again... That's with firmware 07.05.

Cheers,
Thomas
 

Online nctnico

  • Super Contributor
  • ***
  • Posts: 13285
  • Country: nl
    • NCT Developments
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #28 on: July 03, 2016, 01:30:57 AM »
You might be able to access the Linux filesystem through U-boot and overwrite the password file from there but it will take some carefull experimenting because you could brick the SA.
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 

Offline cio74

  • Regular Contributor
  • *
  • Posts: 163
  • Country: gb
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #29 on: July 03, 2016, 04:38:08 AM »
What is this hacking process supposed to do?
 

Online TurboTom

  • Frequent Contributor
  • **
  • Posts: 295
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #30 on: July 03, 2016, 04:59:01 AM »
What hack? As I interpret the situation, there is no "Hack" for the analyzer available so far. Changing the date to the first possible setting in the unix (Linux) operating system apparently puts the SA in a (intended or unintended by the manufacturer) "special" mode which removes the software limits. If this will still work after the evaluation period (48 hours) has passed and if a 2.1GHz device is calibrated over the full 3.2GHz is so far also unknown. As far as I can tell, the tracking generator hasn't stellar performance in the 2.1GHz range (though my device is from the new batch with the supposedly improved TG) and between 2.3 and 3.2 GHz there are excursions down to -5dB and up to +2dB. I would say, it isn't calibrated above 2.1GHz or Siglent configures especially selected versions for 3.2GHz that perform better in the upper frequency range. What's also not too amusing is that RBW is limited to 30kHz and above when the TG is active. For what reason? Seems like the TG performance really needs some improvement (hopefully possible in software). So far this "peeking around" in the booting process and file system focuses on a better understanding how the analyzer works.

Cheers,
Thomas
 

Offline kmike

  • Contributor
  • Posts: 18
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #31 on: July 03, 2016, 05:15:48 AM »
I also got myself one of these SA's and more or less directly hooked a USB-serial converter to the internal UART port (after I checked the signals with a scope). Serial port settings are 115200, n, 8, 1, no handshake. I labeled the UART lines in one of Dave's photos. It is easy to connect to the three required lines with a 2.54mm header with the pins slightly deformed and pushed into the holes so they make contact with the pads / hole plating of the PCB. It's not even necessary to remove the metal shielding from the back of the instrument to access this port and no soldering required whatsoever.

I attached a bootlog of the analyzer but since I'm not too much into hacking or programming, I'm also not too sure what to do next... Arago Project standard login doesn't work as well as anything I thought of (as Pinkus already reported). Yet, U-Boot is working and I can stop the bootup process and enter the U-Boot menu. I'm not sure if this helps to make some progress.

It seems in order to force the analyzer into the "Werewolf Mode"  ;) (see the other thread), it's only necessary to change the date to 1st January 1970. If the date is reset to correct parameters, the analyzer will become a "Sheep" again... That's with firmware 07.05.

Cheers,
Thomas

Looking at the log:
- one would have to stop U-Boot
- add init=/bin/sh to the bootargs
- check how the filesystem is mounted, if mounted read-only then remount rw
- change the root password

Be careful if You want to try this method!

br,
mike
 

Offline nugglix

  • Regular Contributor
  • *
  • Posts: 173
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #32 on: July 03, 2016, 05:19:36 AM »
What's also not too amusing is that RBW is limited to 30kHz and above when the TG is active.

Any details and sources for that?
Would like to know before I buy that thing.

Cheers
 

Offline cio74

  • Regular Contributor
  • *
  • Posts: 163
  • Country: gb
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #33 on: July 03, 2016, 06:01:33 AM »
Thanks Thomas, I think most are after the TG software option? This is 160 EUR + VAT on the Siglent.eu wesbsite.

Or is it more and I am missing it...
 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #34 on: July 03, 2016, 06:47:43 AM »
What hack? As I interpret the situation, there is no "Hack" for the analyzer available so far......

If this will still work after the evaluation period (48 hours) has passed and if a 2.1GHz device is calibrated over the full 3.2GHz is so far also unknown. As far as I can tell, the tracking generator hasn't stellar performance in the 2.1GHz range (though my device is from the new batch with the supposedly improved TG) and between 2.3 and 3.2 GHz there are excursions down to -5dB and up to +2dB. I would say, it isn't calibrated above 2.1GHz or Siglent configures especially selected versions for 3.2GHz that perform better in the upper frequency range.
Will activation of the self cal improve what you are reporting?
Avid Rabid Hobbyist & NZ Siglent Distributor
 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #35 on: July 03, 2016, 07:02:13 AM »
Thanks Thomas, I think most are after the TG software option? This is 160 EUR + VAT on the Siglent.eu wesbsite.

Or is it more and I am missing it...
Lots more, some of the options are many 100's in whatever currency.

EMI-SSA3000X    EMI Measurement Kit (Software)
AMK-SSA3000X   Advanced Measurement Kit (Software)
Refl-SSA3000X   Reflect Measurement Kit (Software)
TG-SSA3000X   Tracking Generator Kit (Software)
Avid Rabid Hobbyist & NZ Siglent Distributor
 

Offline cio74

  • Regular Contributor
  • *
  • Posts: 163
  • Country: gb
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #36 on: July 03, 2016, 08:18:25 AM »
So you're saying they are poor and can't afford it. Basically that's the root of the issue, not enough income to support the purchase.
 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #37 on: July 03, 2016, 08:27:42 AM »
So you're saying they are poor and can't afford it. Basically that's the root of the issue, not enough income to support the purchase.
NO.

Everybody wants something for free, don't you?

However just as the HW is one cost, accessories to enable complex measurement/s to be made are another and just like scopes a good set of accessories with cost just as much as the base unit, or more.
Avid Rabid Hobbyist & NZ Siglent Distributor
 

Online TurboTom

  • Frequent Contributor
  • **
  • Posts: 295
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #38 on: July 03, 2016, 08:44:05 AM »
Here's a screenshot of the message I get if I try to reduce the resolution bandwidth below 30kHz while the tracking generator is turned on. Since the message only appears for a relatively short time, and it isn't possible to save the screen with the message directly on USB-Stick, the photo with my cell phone didn't turn out too well. Anyway, it's readable. Yet, I don't understand why there's the lower limit for RBW with the TG open. Rigol's DSA800TG series hasn't got this shortcoming.

Cheers,
Thomas
 
The following users thanked this post: videobruce, nugglix

Offline cio74

  • Regular Contributor
  • *
  • Posts: 163
  • Country: gb
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #39 on: July 03, 2016, 08:47:50 AM »
Sorry, it does not make much sense, you will have to pay for those probes and accessories if you want/need them, regardless of their cost.
 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #40 on: July 03, 2016, 09:16:24 AM »
Yet, I don't understand why there's the lower limit for RBW with the TG open. Rigol's DSA800TG series hasn't got this shortcoming.
I've had a scan through the http://www.eevblog.com/forum/testgear/siglent-ssa3000x-spectrum-analyzers/
thread for answers but maybe I missed it.

rf-loop may have some comment.....
Avid Rabid Hobbyist & NZ Siglent Distributor
 
The following users thanked this post: nugglix

Online TurboTom

  • Frequent Contributor
  • **
  • Posts: 295
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #41 on: July 03, 2016, 09:20:46 AM »
I just did a quick scan of the manual http://www.siglentamerica.com/USA_website_2014/Documents/UserManual/SSA3000X_User%20Manual_UM0703X_E02A.pdf and neither I found any information regarding this behavior -- strange! I guess I'll have to hook up another analyzer to the TG output of the SSA3000X and see if I'll find anything "strange"...
 
The following users thanked this post: nugglix

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #42 on: July 03, 2016, 02:33:58 PM »
Here's a screenshot of the message I get if I try to reduce the resolution bandwidth below 30kHz while the tracking generator is turned on. Since the message only appears for a relatively short time, and it isn't possible to save the screen with the message directly on USB-Stick, the photo with my cell phone didn't turn out too well. Anyway, it's readable. Yet, I don't understand why there's the lower limit for RBW with the TG open. Rigol's DSA800TG series hasn't got this shortcoming.

Cheers,
Thomas

With TG minimum RBW is 30kHz. (this is also most narrow filter what can not go to FFT mode)
What is problem with it?  Do it have too fast response or what?

Here is one small example, Nominal center frequency 21.953MHz, width ~3.5kHz Band Pass filter.  (in this example filter under test have problem)
With RBW30 also used Span is 30kHz!   (note also used VBW)
With TG  there is some DUT between TG output and SA input. This is your "filter" and it have most relevance, not SA RBW filter.
Of course this 30kHz Span is not limit. If narrow filter under test there  can use more narrow Span.




As sidenote here is limits with different RBW widths.

Sweep Span limits using FFT or Sweep (SWP) mode

Spectrum analyzer. (TG Off)
10Hz, FFT 33.83MHz, SWP ---

30Hz, FFT 106.6MHz, SWP 330kHz
100Hz, FFT 318MHz, SWP 3.7MHz
300Hz, FFT 793.6MHz, SWP 33,3MHz
1kHz, FFT 2.1GHz, SWP 371MHz

3kHz, FFT, SWP 2.1GHz
10kHz, FFT, SWP 2.1GHz

Spectrum analyzer + TG in use.
30kHz, FFT ---, SWP 2.1GHz
100kHz, FFT ---, SWP 2.1GHz
300kHz, FFT ---, SWP 2.1GHz
1000kHz, FFT ---, SWP 2.1GHz
« Last Edit: July 03, 2016, 02:54:48 PM by rf-loop »
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 
The following users thanked this post: tautech, nugglix

Online MasterTech

  • Frequent Contributor
  • **
  • Posts: 544
  • Country: 00
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #43 on: July 03, 2016, 04:04:28 PM »
So the effective rbw is much less than 30khz although the displayed one is 30khz... weird but it works
 
The following users thanked this post: nugglix

Offline KE5FX

  • Frequent Contributor
  • **
  • Posts: 692
  • Country: us
    • KE5FX.COM
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #44 on: July 03, 2016, 04:17:34 PM »
At lower bandwidths (presumably < 30 kHz), the sweep generator is not sweeping continuously.  It takes discrete steps in both frequency and time, captures a block of samples, and converts them to the frequency domain all at once. 

In other words, if the analyzer uses an FFT to implement its 100 Hz RBW, there is no moment in time when (e.g.) a signal of 10.000100 MHz is in the passband but a signal of 10.000500 MHz isn't.  So there's nothing to "track."
 
The following users thanked this post: nugglix

Offline nugglix

  • Regular Contributor
  • *
  • Posts: 173
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #45 on: July 03, 2016, 05:46:23 PM »
Also went through the manual and didn't find any hint.

Thanks for the clarification!

Cheers
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #46 on: July 03, 2016, 05:52:35 PM »
So the effective rbw is much less than 30khz although the displayed one is 30khz... weird but it works


Effective filter is DUT between TG out and SA in!

(I do not know what happend to my last message with more deep explanations but it is gone... and just now not time to write it all agen)



If TG is used for narrow and/or  steep shape filters user need be careful with SWEEP speed adjustment! In this case SA's defaults are not at all good for use.
RBW30kHz sweep speed default is very far too fast. User need understand basic fundamentals about theory and/or have practical experience enough for understand how to adjust system for acceptable result.  It need know how fast frequency can change! (DUT response time)
Look my previous image where is 21.9MHz 3.5kHz filter example. With 30kHz RBW SA can sweep much much more fast but why I have reduced Sweep time. Of course. Effective filter is between TG out and SA in and adjustments need do in this case for it, not for RBW30kHz gaussian type  filter in SA.
In some cases RBW30kHz step response speed is limiting factor but in other case filter under test give limits and user need take care about this.


Just for information
Here attached  SA  RBW30kHz filter top shape.  Think filter "speed" - simplified, if you go too fast or level change too fast  it do not have time to reach top.

-0.1dB BW 5.6kHz
-1.0dB BW 17.3kHz
-3.0dB BW 29.9kHz
-6.0dB BW 42.3kHz

(Filter shape factor -3dB / -60dB is around 1:4.5)

« Last Edit: July 03, 2016, 06:00:09 PM by rf-loop »
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Online TurboTom

  • Frequent Contributor
  • **
  • Posts: 295
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #47 on: July 04, 2016, 12:23:52 AM »
Okay, I did some more in-depth testing of the TG behavior of the SSA3000X and got some interesting results. Especially considering the information provided in the last few posts made me want to understand how the SSA is scanning the frequency range and if the TG is outputting a discrete set of frequencies or if it is "really" sweeping through. Since a test with another SA didn't turn out conclusive (both scanning at arbitrary frequencies/speeds), I decided to hook up the TG output to my scope. The SSA was configured at a center frequency of 10MHz and a span of 3MHz, sweep time 5 seconds. And that's a clip of what i got: http://www.turbinemuseum.de/files/HF_Wobble.3gp It's obvious that upon the sweep itself, there's a kind of frequency wobble superimposed, maybe to provide the bandwidth within one of the 30kHz "slots" that are (supposedly) analyzed at a time. But it's also well possible that the "wobble" is just an artefact of the PLL when it locks onto the new frequency during the sweep.

I then checked the TG at zero span to find out if the center frequency has "macroscopic" increments or if it's more or less continuously adjustable -- I found the latter to be the case.

After that, I wanted to understand if the TG frequency at a slow-rate sweep moves in increments (besides the wobble) and I decided to look at the signal with a delay of 30µs after the trigger. Once again, settings were 10MHz center frequency, 3MHz span but this time 1000 seconds sweep time. It appears that the "average" frequency sweeps continuously, see here: http://www.turbinemuseum.de/files/Smooth_Sweep.3gp

I did the same tests with the Rigol SA for comparison. This instrument sweeps the selected frequency range at increments that match the span divided by the number of horizontal pixels available on the display. This means, provided the "wobble" of the Siglent SA TG is intentional, the siglent will detect a very narrow BW "event" when it's within an "increment" whereas it's pure coincidence on the Rigol if the TG at larger increments "hits" the specific frequency that a DUT characteristic changes significantly. I.e. the Siglent TG is better at "finding" resonances and the like at wide spans while the Rigol TG is better suited for analyzing devices at narrow spans.

If considering these findings, it also becomes obvious that initially Siglent planned to implement more analog bandwidth settings (by means of the two four-point switches in the last IF section and the unpopulated filter circuitry in between) but finally decided to go the digital route. Yet, it should be possible to implement digital filtering as well without the FFT function and then the RBW would probably permit lower values with the TG running.

For comparison I tested a high accuracy crystal (first photo) on the Siglent (the best I could get  with RBW 30kHz, VBW 10Hz and span 10kHz), the same settings on a Rigol DSA815TG and finally on the same instrument with RBW 100Hz and VBW 10Hz. Only in the last configuration, both series- and parallel resonance are clearly visible while the first parameter set on the rigol is completely useless. The Siglent at least detects the series resonance fairly accurately while the parallel resonance is covered with artefacts (why?). Maybe I made some mistake with my settings? At least as yet to me it seems the 30kHz RBW limit with the TG active is a major shortcoming on the SSA3000X.
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #48 on: July 04, 2016, 03:56:06 AM »
Just as simple as can and also xtal loading really rotten but this is not problem because this is not xtal test but just for example about display.

Btw...(Sunday evening puzzle ;) )  in old times we have done thousands of sweep using logamp, detector,  sweep gen and just oscilloscope. Where is RBW filter? Just as wide as scope response is. ;)


« Last Edit: July 04, 2016, 03:59:35 AM by rf-loop »
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 
The following users thanked this post: nugglix

Online TurboTom

  • Frequent Contributor
  • **
  • Posts: 295
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #49 on: July 05, 2016, 06:15:47 AM »
root password is "ding1234"  8)
 
The following users thanked this post: Pinkus, pmcouto, siggi, kado, nugglix, bitseeker

Online MasterTech

  • Frequent Contributor
  • **
  • Posts: 544
  • Country: 00
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #50 on: July 05, 2016, 06:47:02 AM »
root password is "ding1234"  8)
Kudos to you!
 

Online TurboTom

  • Frequent Contributor
  • **
  • Posts: 295
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #51 on: July 05, 2016, 04:21:37 PM »
root password is "ding1234"  8)
Kudos to you!

Actually I don't deserve the merits but rather janekivi who provided the relavant information in this post: http://www.eevblog.com/forum/testgear/hack-of-sigllent-spectrum-analyzer-ssa3021x/msg969909/#msg969909

Cheers,
Tom
 

Online TurboTom

  • Frequent Contributor
  • **
  • Posts: 295
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #52 on: July 06, 2016, 05:31:59 AM »
Today I had a little time to play around in the files system of the analyzer, but so far I wasn't able to identify the file that configures the device as a 3021 or a 3032.

Yet, there's an interesting directory "/usr/bin/siglent/firmdata0/" that contains a file "fun_opt_valid_config.xml". This file defines the evaluation period of the add-on options. They can easily be adjusted to higher values (first the corresponding partition has to be re-mounted read-write, then the file can be edited). Deleting the file will cause a new one to be generated during the next bootup with the standard 48 hours test period reenabled.

There's one more funny file in this directory which (almost...) caused me some headaches, named "monster.txt ". This file is seven bytes long and just contains the phrase "hack!!!" The file only appears after the analyzer date had been set to 1st January 1970 and hence the software restriction circumvented. It's important to notice that there's a space behind the extension "txt" and so the name cannot be entered on the console. Wildcards etc. have to be used to access it. If an analyzer that had been used in "Werewolf Mode"  ;) has to be returned for repair and the file system is still accessible, it's probably a good idea to delete this file (after resetting the date to something "reasonable" of course).

There's another "monster.txt" that just contains the phrase "NULL" in "/usr/bin/siglent/usr" but this doesn't appear to be an indicator of any "tampering" it seems. It also doesn't have the added "space" behind the file name, so it's accessible without any tricks.

It's quite funny that during bootup, regardless of the device model, always calibration data for the whole 3.2GHz range are loaded.

Anybody else poking around in the analyzer?
« Last Edit: July 06, 2016, 05:42:10 AM by TurboTom »
 
The following users thanked this post: kado

Offline cio74

  • Regular Contributor
  • *
  • Posts: 163
  • Country: gb
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #53 on: July 06, 2016, 05:51:47 AM »
I know you'll be surprised but some of us are actually considering buying the options we need.


 

Online nctnico

  • Super Contributor
  • ***
  • Posts: 13285
  • Country: nl
    • NCT Developments
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #54 on: July 06, 2016, 06:35:44 AM »
There's one more funny file in this directory which (almost...) caused me some headaches, named "monster.txt ". This file is seven bytes long and just contains the phrase "hack!!!" The file only appears after the analyzer date had been set to 1st January 1970 and hence the software restriction circumvented. It's important to notice that there's a space behind the extension "txt" and so the name cannot be entered on the console.
You can enter the name on the console by putting the filename between "".
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 
The following users thanked this post: TurboTom

Offline phs

  • Contributor
  • Posts: 7
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #55 on: July 30, 2016, 11:36:23 AM »
FYI:

Recently received SSA 3021X -w- TG option
SW1    100.01.02.07.06
HW     07.03.00
Cal date: early July

Can telnet/log in as root via LAN.  Tried changing date/time:

# date -u 010100001970

Date/time is successfully updated, and it can be verified on the unit LCD.  System Info/Option: All options stay the same, showing just TG Permanent.

Power-cycle unit (did reboot from CLI) and date reverts to current date, options not changed.

Change date successfully to epoch via System/Data & Time on unit keypad.  All options stay the same.  Reboot.  Date stays @ epoch, options still unchanged.

That was all with firmware that was originally installed on the unit when received, v6.  Installed the v5 firmware Tautech linked to, and repeated all of the above.  Still no werewolf to be found, boo hoo...

Conclusion:  The version 6 firmware, or having an option pre-installed, like the TG, operator error, or some other issue prevents this unit from entering "werewolf mode".

Or, maybe they changed the v5 firmware?  I noticed in one of the pics from the post from Deuze that the firmware version was "100.01.02.07.05.h".  My version 5 shows "100.01.02.07.05".  Deuze's HW version is also different than this one, but all else looks the same.

Anyway, just wanted to let folks know, in case this may affect their purchase decision, or these additional data points are helpful in general.

Unfortunately, I'm just a low-life lurker who has way more projects than I can handle right now.  However, if I discover anything more interesting, I will absolutely let you folks know.  Love the characters on these forums, by the way, and best of luck to all!
 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #56 on: July 30, 2016, 11:40:53 AM »
Can we have an update as to which FW versions have been used to enable "werewolf" (3.2 GHz) mode?

Anybody want to write an upgrading  "For Dummies" guide?
Avid Rabid Hobbyist & NZ Siglent Distributor
 

Online MasterTech

  • Frequent Contributor
  • **
  • Posts: 544
  • Country: 00
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #57 on: July 30, 2016, 03:46:05 PM »
phs, what about editing the fun_opt_valid_config file that TurboTom mentioned above?
 

Offline phs

  • Contributor
  • Posts: 7
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #58 on: July 30, 2016, 11:43:59 PM »
Hi MasterTech,

At this point I trust that editing fun_opt_valid_config.xml works, but I'm hoping there is a better solution.

Edit to clarify sentence...
« Last Edit: July 30, 2016, 11:45:56 PM by phs »
 

Offline peterdb

  • Contributor
  • Posts: 12
  • Country: nl
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #59 on: August 05, 2016, 09:04:17 PM »
Can we have an update as to which FW versions have been used to enable "werewolf" (3.2 GHz) mode?

Anybody want to write an upgrading  "For Dummies" guide?

Hacking the SSA3021x for experienced dummies.

Login to the machine using telnet or a direct serial connection all described earlier in this thread.

Optionally plugin an USB stick in the system for securing backups from the system.
It will be automatically mounted at /usr/bin/siglent/usr/mass_storage/U-disk0

the “mount” command shows you what’s mounted where and if it’s in rw or ro mode.

make a backup of the relevant folders in the /usr/bin/siglant folder in case you break anything.
example:
cp -R /usr/bin/siglent/usr/backup /usr/bin/siglent/usr/mass_storage/U-disk0/SSA3021x_backup
cp -R /usr/bin/siglent/firmdata0 /usr/bin/siglent/usr/mass_storage/U-disk0/SSA3021x_firmdata0

If you feel comfortable it’s time to start hacking.

Stop your analyser with this command.
killall ecomb
Your spectrum analyser display will go into freeze and stop operating, but don't worry it’s computer is still running.

Killing is necessary because the spectrum analyser is monitoring the /usr/bin/siglent/firmdata0 folder and we want to play with the contents of this folder, and it’s using almost all the cpu time, so your console becomes more responsive as a bonus.

now remount the firmdata0 folder in rw mode with this command.

mount -o remount,rw /usr/bin/siglent/firmdata0

now edit the system info file with “vi”
vi /usr/bin/siglent/firmdata0/NSP_system_info.xml

change the licence node into this:

<license><_3032>TRUE</_3032><_3030>FALSE</_3030><_3021>FALSE</_3021><_tTG>TRUE</_tTG><_tEMI>TRUE</_tEMI><_tMeas>TRUE</_tMeas><_tCAT>TRUE</_tCAT><_TG>TRUE</_TG><_EMI>TRUE</_EMI><_Meas>TRUE</_Meas><_CAT>TRUE</_CAT></license></system_information>

Notice that temporally licences have a lower case “t” in front of them.
To make them permanent just add them at the end without the “t” as shown above.

now use the “sync” command to write all data to disk.

now remount the firmdata0 folder in ro mode with this command.

mount -o remount,ro /usr/bin/siglent/firmdata0

It’s now time to start the analyser again with this command:
/usr/bin/siglent/ecomb &

The analyser starts logging to the console.
The hack is complete and all options should be permanent and you have 3.2 GHz bandwidth.

you should now give the "reboot" command to reboot the machine.
There is still one little thing you need to take care of.
Wipe the user data because it was stored when the machine thought is was a SSA3021x where it’s now a 3022x, and this results in errors in the logs because the XML isn’t compatible.
Goto: System —> Pwr On/Preset —> Reset & Clear to remove all previously local stored user data.

That was easy, actually a little bit to easy as I might say.
« Last Edit: August 05, 2016, 09:20:00 PM by peterdb »
 
The following users thanked this post: ebclr, kado, klaus11

Offline kado

  • Contributor
  • Posts: 32
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #60 on: August 06, 2016, 12:33:43 AM »
@peterdb
thanks a lot for your guide.
Since i am not very familiar with linux, vi and telnet i have some questions:

what fw version have you edited? 7.05 or 7.07
is the "sync" a vi command or linux? Type in sync on linux promt without any parameter?
what does sync do?

In vi after editing is finished i have to :wq! for write and quit is that correct?

Thanks for help
Karsten
« Last Edit: August 06, 2016, 12:36:02 AM by kado »
 

Online nctnico

  • Super Contributor
  • ***
  • Posts: 13285
  • Country: nl
    • NCT Developments
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #61 on: August 06, 2016, 12:51:01 AM »
sync is a Linux command and it doesn't need parameters. When it comes to vi you better read a tutorial first: http://www.howtogeek.com/102468/a-beginners-guide-to-editing-text-files-with-vi/
I have used vi in the past but had a skilled operator sitting behind the keyboard and I told him the changes I wanted. He insisted we should use vi for a complex text editing job ^-^
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 

Offline peterdb

  • Contributor
  • Posts: 12
  • Country: nl
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #62 on: August 06, 2016, 12:53:04 AM »
@Kado

I used fw version 7.07 but it would surprise me if this doesn’t work with 7.05

sync is a linux command that writes all data that is currently somewhere in the cache to disk so you can remount the volume without loosing data, but not using the command will probably work as well.

sync works without any parameters.

vi is ended with the :wq! command, and if your lost somewhere jou can always abort with :q!
No data will be saved and you can try to edit again.

Once your in vi you can navigate to the part you want to edit with your cursors and then press i to enter edit mode.
pressing escape leaves the edit mode.

If you want to delete a character move your cursor over it and press x when not in edit mode of course.

 

Offline kado

  • Contributor
  • Posts: 32
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #63 on: August 06, 2016, 01:01:25 AM »
@nico and peter

thank you both for your advice.
Will read the vi tutorial first, then give it a try on my machine.
Karsten
« Last Edit: August 06, 2016, 01:05:02 AM by kado »
 

Offline peterdb

  • Contributor
  • Posts: 12
  • Country: nl
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #64 on: August 06, 2016, 01:09:46 AM »
If you want to practice on a similar OS as the spectrum analyser try the virtual BusyBox
https://busybox.net/live_bbox/live_bbox.html

The spectrum analyser OS is based on this BusyBox distribution, so you can practice al your commands.
 

Offline kado

  • Contributor
  • Posts: 32
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #65 on: August 06, 2016, 03:23:38 AM »
@ all

peters guide is working !!! Could upgrade with success, but lost SN  :-\

BTW: if you are gone in FW 07.05 into "Werewolf Mode" you should remove the file "monster.txt " which TurboTom mentioned in this thread because if this file is present the actual FW showed in SYS Info has an .h appended. (h = hack !?)

So now have 3.2 GHz and all Options Sta: ON and Valid: Permanent, but SN now 0123456789 !!!

Karsten
 

Offline peterdb

  • Contributor
  • Posts: 12
  • Country: nl
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #66 on: August 06, 2016, 03:39:39 AM »
Strange, I did not loose my SN during the procedure.

But no worries, the SN is stored in the same file you had to edit to get it working, so just repeat the procedure, but now re-enter the original serial number.

You made a backup I hope to retrieve the original serial?

Peter
 

Offline kado

  • Contributor
  • Posts: 32
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #67 on: August 06, 2016, 03:51:20 AM »
Ohh O.K. you dont lost your SN, let see what i have made wrong!?

FYI: i also lost the original Host ID, so have to put in a new IP-Adress after reboot! (DHCP active)
I have edited the file with the vi, not copy anything from your text. Maybe any typos...
I will try to edit the SN in the NSP_system_info.xml file.

Again thanks for your help
Karsten
 

Offline kado

  • Contributor
  • Posts: 32
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #68 on: August 06, 2016, 04:11:59 AM »
think anything is going wrong:

after reboot and new telnet session the file dont contend the lincence node i has edited and has only 237 bytes:
-rw-r--r--    1 root     root           237 Aug  5 19:04 NSP_system_info.xml

[email protected]:/usr/bin/siglent/firmdata0# cat NSP_system_info.xml
<?xml version="1.0" encoding="UTF-8"?>
<nsp_system_info_root>
  <device>
    <system_information>
      <serial_number>
        <chip>0123456789</chip>
      </serial_number>
    </system_information>
  </device>
</nsp_system_info_root>
This is looking without mounting filesystem to rw.
Karsten
 

Offline peterdb

  • Contributor
  • Posts: 12
  • Country: nl
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #69 on: August 06, 2016, 04:33:17 AM »
this is what the file should look like:

<?xml version="1.0" encoding="UTF-8"?>
<nsp_system_info_root>
  <device>
    <system_information>
      <serial_number>
        <chip>0000000000000</chip>
      </serial_number>
    <license><_3032>TRUE</_3032><_3030>FALSE</_3030><_3021>FALSE</_3021><_tTG>TRUE</_tTG><_tEMI>TRUE</_tEMI><_tMeas>TRUE</_tMeas><_tCAT>TRUE</_tCAT><_TG>TRUE</_TG><_EMI>TRUE</_EMI><_Meas>TRUE</_Meas><_CAT>TRUE</_CAT></license></system_information>
  </device>
</nsp_system_info_root>

I made my <chip>00000000000</chip> zero only for the post.

Are you sure you stopped the analyser with the “killall ecomb” command prior to mounting the filesystem in rw mode.

Did the analyser go into freeze?
The analyser must be stopped before you continue with remounting the file system.
the ecomb process is also the process that makes the monster.txt file and acts as a watchdog, so it may not run during editing.

after you edited the file make sure you remount the system in ro mode
check with the mount command that firmdata0 is really in read-only mode
before you start the analyser with the /usr/bin/siglent/ecomb & command.

dont forget the & sign.
It runs the analyser in the background.

Once the analyser is running give the reboot command, and then it will make a backup of the system_info file in a regular way.

also make sure there are no other files in the firmdata0 folder then these:
NSP_system_info.xml
NSP_trends_config_info.xml
calib
fun_opt_valid_config.xml
 

Offline peterdb

  • Contributor
  • Posts: 12
  • Country: nl
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #70 on: August 06, 2016, 04:47:31 AM »
another way of fixing this is to edit the NSP_system_info.xml in the backup folder in here:

/usr/bin/siglent/usr/backup

then delete the NSP_system_info.xml in the firmdata0 folder bij the procedure where you stop the analyser with the kill command and remount the firmdata0 in rw mode.
after the file is deleted and you gave the sync command unplug the power.

After powering up the earlier edited backup file will be restored.

But only use this as a last resort.
« Last Edit: August 06, 2016, 04:49:05 AM by peterdb »
 

Online TurboTom

  • Frequent Contributor
  • **
  • Posts: 295
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #71 on: August 06, 2016, 04:55:05 AM »
Okay, since it's now public anyway, please see the attached method that I figured out. The good news is that also the 1HZ RBW is now working even though it's quite slow (but for obvious reasons).

Cheers,
Thomas

P.S.: I found out that in order to make the instrument more responsive during the telnet session, it's not necessary to kill any application but to just open the "System -> System Info" screen.


Edit: Updated Attachment -- This modified version of the patch instructions will work up to firmware 7.07, will not activate the 1Hz and 3MHz RBW options but is compatible with the firmware update to the new 8.01 version without losing the "liberated" options. Apply it before updating the firmware, even if you used the "old" patch before!
« Last Edit: November 13, 2016, 11:01:43 AM by TurboTom »
 
The following users thanked this post: videobruce, kado, klaus11, MF-jockey, dk5ya

Offline peterdb

  • Contributor
  • Posts: 12
  • Country: nl
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #72 on: August 06, 2016, 05:28:29 AM »
Compliments Thomas,

This is defiantly a more safer way of doing it and it could also help Karsten to fix his problem.
Consider implementing my hack for obtaining a permanent licence this could be a winner.

Cheers,

Peter
 

Offline kado

  • Contributor
  • Posts: 32
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #73 on: August 06, 2016, 05:31:48 AM »
@peter and tom

i have edited the NSP_system_info.xml fully new by hand with vi! After mount ro and start ecomb & and reboot i got my SN back  :-+
All Options stay ON  :-+

Should i test anything before power off / on 230V again?

Greetings
Karsten
 

Offline kado

  • Contributor
  • Posts: 32
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #74 on: August 06, 2016, 05:33:44 AM »
@tom

where are the differences between your guide and peters ?
should i make it again by your guide?

Karsten
 

Offline peterdb

  • Contributor
  • Posts: 12
  • Country: nl
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #75 on: August 06, 2016, 05:39:40 AM »
@Karsten

This is really good news!! :)

The differences between Thomas method and mine are the way the permanent licences are obtained, and the way the hack is distributed.

So if everything works, no need to change anything.

Cheers,

Peter

 

Offline kado

  • Contributor
  • Posts: 32
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #76 on: August 06, 2016, 05:43:20 AM »
thanks peter for info!

Is there realy a 1 Hz RBW ? I could get only 10 Hz RBW until now.

Karsten
 

Online TurboTom

  • Frequent Contributor
  • **
  • Posts: 295
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #77 on: August 06, 2016, 05:52:31 AM »
Karsten -

yes there is a 1Hz RBW mode that had been activated in the "Werewolf Mode" of the 07.05 firmware. So it had to be possible to enable this "officially" as well, which is done by including the definition <_t1HZ>TRUE</_t1HZ> and/or <_1HZ>TRUE</_1HZ> in the options definition line. I found that editing the fun_opt_valid_config.xml with the <tEffect> parameter set to -1 for the desired options also enables them permanently. So there are several methods to achieve the desired goal.

Cheers,
Thomas
« Last Edit: August 06, 2016, 05:54:05 AM by TurboTom »
 

Offline kado

  • Contributor
  • Posts: 32
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #78 on: August 06, 2016, 06:12:17 AM »
@tom and peter

O.K. got it.
I tried toms method via USB stick and it works! Also now the 1Hz RBW  :-+
Thank you both for your "online" help, so now i can go to bed without headage...

Karsten
 
The following users thanked this post: peterdb

Online TurboTom

  • Frequent Contributor
  • **
  • Posts: 295
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #79 on: August 06, 2016, 07:20:01 AM »
I'm sure if Siglent doesn't lock this door, this SA will become the favorite instrument among the hobby users and they will sell huge quantities (relatively speaking). On the other hand, Rigol will probably notice a painful drop in sales of their DSA800 series (up to the DSA832) since the "improved" Siglent offers so much more for the money. The SSA3021X may become what the DS1000Z is among the oscilloscopes or the FLIR E4 among the thermal imagers...

Cheers,
Thomas
 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #80 on: August 06, 2016, 08:52:50 AM »
Karsten -

yes there is a 1Hz RBW mode that had been activated in the "Werewolf Mode" of the 07.05 firmware.
I wasn't sure of that from a few weeks back so I hunted back through the threads and AFAIKT 7.07 had been released for a short while so I find it hard to believe rf-loop would keep using 7.05. He may chime in and confirm just which FW he used at the time.
Avid Rabid Hobbyist & NZ Siglent Distributor
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #81 on: August 06, 2016, 04:31:45 PM »
Karsten -

yes there is a 1Hz RBW mode that had been activated in the "Werewolf Mode" of the 07.05 firmware.
I wasn't sure of that from a few weeks back so I hunted back through the threads and AFAIKT 7.07 had been released for a short while so I find it hard to believe rf-loop would keep using 7.05. He may chime in and confirm just which FW he used at the time.

Every single test, image, data, etc  what I  have published in this EEVblog forum have used  100.01.02.07.05h only.

If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 
The following users thanked this post: tautech

Offline peterdb

  • Contributor
  • Posts: 12
  • Country: nl
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #82 on: August 08, 2016, 05:46:17 PM »
Karsten -

yes there is a 1Hz RBW mode that had been activated in the "Werewolf Mode" of the 07.05 firmware. So it had to be possible to enable this "officially" as well, which is done by including the definition <_t1HZ>TRUE</_t1HZ> and/or <_1HZ>TRUE</_1HZ> in the options definition line. I found that editing the fun_opt_valid_config.xml with the <tEffect> parameter set to -1 for the desired options also enables them permanently. So there are several methods to achieve the desired goal.

Cheers,
Thomas

In the fun_opt_valid_config.xml you also find a <t3M> option besides the <t1HZ> option.
Enabling the <t3M> option extends the range of the Resolution Bandwidth (RBW) filter to 3 MHz, where it’s now limited to 1MHz

Cheers,
Peter
 
The following users thanked this post: Pinkus, videobruce, kado, TurboTom, Deuze

Offline brucer37

  • Contributor
  • Posts: 13
  • Country: au
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #83 on: August 19, 2016, 09:45:51 PM »
There is still one little thing you need to take care of.
Wipe the user data because it was stored when the machine thought is was a SSA3021x where it’s now a 3022x, and this results in errors in the logs because the XML isn’t compatible.
Goto: System —> Pwr On/Preset —> Reset & Clear to remove all previously local stored user data.

My SSA3021X came with 07.06 firmware. This version does not have a Reset & Clear. I presume earlier firmware versions also do not. I have since upgraded to 07.07.
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #84 on: August 19, 2016, 10:32:26 PM »
There is still one little thing you need to take care of.
Wipe the user data because it was stored when the machine thought is was a SSA3021x where it’s now a 3022x, and this results in errors in the logs because the XML isn’t compatible.
Goto: System —> Pwr On/Preset —> Reset & Clear to remove all previously local stored user data.

My SSA3021X came with 07.06 firmware. This version does not have a Reset & Clear. I presume earlier firmware versions also do not. I have since upgraded to 07.07.

7.07 is first version where is Reset&Clear.
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Offline peterdb

  • Contributor
  • Posts: 12
  • Country: nl
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #85 on: August 20, 2016, 02:09:48 AM »
Correct the 7.07 firmware has the reset & clear.

The reset & clear is necessary to prevent errors in the logs while reading the user preferences configuration xml’s during boot time once it’s changed into a SSA3022x.
You'll find the config xml’s here:
/usr/bin/siglent/usr/config

you find the logs here:
/usr/bin/siglent/usr/log

The “New.ERROR” log always points to the latest error log
If after a reboot of the analyser this log does not show XML read errors the reset & clear is not necessary.

In the PwrOn/Preset menu you can store your own preset, and this will probably also fix it because it overwrites the previous configuration.

As far as I’m aware your SA will also work fine even with the errors in the log.
I presume the errors will automatically disappear over time due to normal use.

Now you know where everything can be found, you can check for yourself if any action is needed.
 

Offline dk5ya

  • Newbie
  • Posts: 4
  • Country: de
    • 50 MHz and up
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #86 on: August 28, 2016, 02:46:43 AM »
Gentleman,

kind regards to Tom and the group. Got my 3021X today, unpacking, checking for Ser. N°, 10 minutes later it became a 3032X  :)
Sold my old HP 8592B instead few days ago since I'm no longer active beyond 3 gigs.
Ah, what a brand new world having a rather sharp and coulered screen in front instead of the old ray tubes.

Udo

« Last Edit: August 28, 2016, 03:11:26 AM by dk5ya »
 

Offline pascal_sweden

  • Super Contributor
  • ***
  • Posts: 1379
  • Country: no
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #87 on: August 28, 2016, 03:21:34 AM »
Nice upgrade from a dinosaur to a state of the art full color spectrum analyzer :)
 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #88 on: August 28, 2016, 05:27:57 AM »
Gentleman,

kind regards to Tom and the group. Got my 3021X today, unpacking, checking for Ser. N°, 10 minutes later it became a 3032X  :)

And with FW 7.07.  8) I wasn't sure if that was possible, thanks for the confirmation.

Welcome to the forum dk5ya
Avid Rabid Hobbyist & NZ Siglent Distributor
 

Offline MF-jockey

  • Contributor
  • Posts: 10
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #89 on: August 31, 2016, 05:38:29 AM »
Dear tinkerers,

I also have a 3021X patched to 3032X since some days, many thanks to Tom for the easy USB-Stick method.

Today I want to enter the EMI mode, but it wasn't present at the menue. What must I do to get the EMI function?
« Last Edit: August 31, 2016, 06:30:25 AM by MF-jockey »
 

Offline dk5ya

  • Newbie
  • Posts: 4
  • Country: de
    • 50 MHz and up
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #90 on: August 31, 2016, 07:11:19 AM »
Today I want to enter the EMI mode, but it wasn't present at the menue. What must I do to get the EMI function?
Pity, same here. No way to load EMI mode via mode select. Not part of the menu.
 

Offline dk5ya

  • Newbie
  • Posts: 4
  • Country: de
    • 50 MHz and up
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #91 on: August 31, 2016, 08:13:41 AM »
Anybody out there with a patched 3021 and FW 7.07 who could try a series of reflection measurements? Ain't working here for whatever reason.  :-\ Just a lot of BS on the screen, no phase angles, just nasty noise.

Edit: Checked several 1/2" cellflex jumpers with my VNA and with the Siglent. While the VNA shows reflection perfectly the Siglent is just producing a bunch of BS.

U.
« Last Edit: August 31, 2016, 08:22:48 AM by dk5ya »
 

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #92 on: August 31, 2016, 08:59:45 AM »
Hi,

I have the Siglent SSA3021X.

Look at the two pictures. I think you are looking for "EMI" at the wrong place! It is an optional filter setting in the BW menu (picture 1)

The second pictures shows the reflection measurement.

Perhaps I missunderstood you guys or previous firmware releases (which I didn't install), had different menus.

EDIT: Didn't understand what you meant with reflection measurement not working - apparently you did enter the option, but you are not seing the expected signal. Did you configure the Amplitude, RWB and sweep accordingly to your signal? This software option actually comes as a kit with a reflection bridge. You don't need to use that one in particular. See here: http://www.siglent.eu/rbssa3x20.html

Regards
« Last Edit: August 31, 2016, 09:10:23 AM by Bicurico »
 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #93 on: August 31, 2016, 09:10:07 AM »
FYI a very recent SSA3032X that I've got from the factory and sold to a forum member had the latest (7.07) FW installed ex factory.
Gentleman,

kind regards to Tom and the group. Got my 3021X today, unpacking, checking for Ser. N°, 10 minutes later it became a 3032X  :)
dk5ya's post a few day back shows the  :-/O can be done with latest FW and all options showing as enabled.

We can only ask if dk5ya bought his 3021X with any options installed. He did not make this clear.  :-//
Or were they all enabled with  :-/O
Avid Rabid Hobbyist & NZ Siglent Distributor
 

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #94 on: August 31, 2016, 09:11:56 AM »
The plain SSA3021X without any options and shipped FW 07.07 can be hacked and all options activated through telnet.

Regards
 
The following users thanked this post: tautech

Offline pherdie

  • Contributor
  • Posts: 16
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #95 on: August 31, 2016, 09:48:31 AM »
I'm using a MiniCircuits directional coupler with the reflection function. Appears to be working fine for me. Measured values are approximately those expected for the displayed image.


Anybody out there with a patched 3021 and FW 7.07 who could try a series of reflection measurements? Ain't working here for whatever reason.  :-\ Just a lot of BS on the screen, no phase angles, just nasty noise.

Edit: Checked several 1/2" cellflex jumpers with my VNA and with the Siglent. While the VNA shows reflection perfectly the Siglent is just producing a bunch of BS.

U.
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #96 on: August 31, 2016, 04:16:48 PM »
Dear tinkerers,

I also have a 3021X patched to 3032X since some days, many thanks to Tom for the easy USB-Stick method.

Today I want to enter the EMI mode, but it wasn't present at the menue. What must I do to get the EMI function?

EMI-SSA3000X /EMI Measurement Kit (Software)

You can select  EMI filters in BW menu. (200Hz, 9kHz, 120kHz (-6dB))
QUASI peak in Detector menu.
Also you can adjust Dwell time from 0 to 10s

AMK-SSA3000X /Advanced measurement Software

You see these measurements in measurement menu:
Channel power,
Adjacent channel power ratio,
Time domain power,
Occupied bandwidth,
Third-order intercept,


Refl-SSA3000X /Reflect Measurement Kit (Software)

Push MODE button
There you see:
Spectrum Analyzer
Reflection Meas

(Without this Refl Option, in MODE menu only Spectrum analyzer)

TG-SSA3000X /Tracking Generator Kit (Software)
TG can use.


I have used  Mini-Circuits directional coupler ZFDC-20-5  (N)  With tracking gen.
(If need better directivity etc then can use what ever better Return Loss Bridge (RLB) .)
This can use also of course with Reflection Meas Option. (Also same measurements can do without this option. Just need TG, Bridge and slide rule)

If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Offline MF-jockey

  • Contributor
  • Posts: 10
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #97 on: August 31, 2016, 05:15:47 PM »

EMI-SSA3000X /EMI Measurement Kit (Software)

You can select  EMI filters in BW menu. (200Hz, 9kHz, 120kHz (-6dB))


Thanks rf-loop, yes I can select it  :)

But I'm a little confused about mode menu description at Manual, there is called a switch to EMI also.

Do you know, how to load the EMI limit value lines?
« Last Edit: August 31, 2016, 05:29:27 PM by MF-jockey »
 

Offline dk5ya

  • Newbie
  • Posts: 4
  • Country: de
    • 50 MHz and up
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #98 on: August 31, 2016, 05:27:23 PM »
We can only ask if dk5ya bought his 3021X with any options installed. He did not make this clear.  :-//
Or were they all enabled with  :-/O
No I didn't, it was just a plain 3021X. Meanwhile the suspect was caught, poor reflection measurement was caused by a rather ancient directional coupler out of my junk box with a sma jack that was loose  |O. Don't try reflection measurement in the middle of the night  :-[.

EMI mode: the manual is somewhat unclear saying EMI mode has to be selected in MENU mode but BW mode is the right one.

Everything working fine now here.
 
The following users thanked this post: tautech

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #99 on: August 31, 2016, 05:57:55 PM »
@MF-jockey

I think you have old User Manual, version UM0703X-E01A.

Current version is:

UM0703X-E02A

There:

"Mode| Selects the Spec Analyzer\Reflection Meas"

But also this current version is not like real User Manual  including all detailed information,  it is more like "Quick Start Manual"

SSA3000X documents:

http://siglenteu.com/prodcut-wd.aspx?id=1252&tid=18&T=2
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 
The following users thanked this post: MF-jockey

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #100 on: August 31, 2016, 07:46:19 PM »

Do you know, how to load the EMI limit value lines?

I think you can make what kind of limit lines what you want. (there is many sources for limit values)

Here is just example. (this limit line is not EMI limits, it is just free hand edited some kind of limit line.)
There is 2 limit lines what can show on the screen and both can include max 100 points.

Attached image.

Attached .lim file.  (limit line) (do not touch inside file, just edit file name, only remove last .txt)
Attached .STA file  (SSA settings) (do not touch inside file, just edit file name, only remove last .txt)

If you want try, reset SSA to all defaults.

Load .STA  (settings) 
Load .lim   (limit line as in image)

After loading .STA spectrum go to EMI RBW 9kHz, Start 100kHz, Stop 30MHz, horizontal scale log. Level show dBuV
(I'm not sure if this .STA works in your unit with different FW etc so it perhaps do not set all settings right)

If settings works ok and after loading also .lim (limit curve) then your display looks like this image.
If not, try first BW EMI off and back on and select 9kHz EMI RBW.
If can not get this working with these files then these are not compatible due to different version.

Note that limit lines are based to x-freq, y-level coordinate points so if you change level settings or frequency settings, limit line stay as defined.






Before use these in SSA:
Attached .lim file.  (limit line) (do not touch inside file, just edit file name, only remove last .txt)
Attached .STA file  (SSA settings) (do not touch inside file, just edit file name, only remove last .txt)
« Last Edit: August 31, 2016, 07:58:45 PM by rf-loop »
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 
The following users thanked this post: MF-jockey

Offline ebclr

  • Super Contributor
  • ***
  • Posts: 1569
  • Country: 00
Siglent Tracking Generator Kit (Software) for spectrum analyzer SSA3021X/SSA3032
« Reply #101 on: September 17, 2016, 09:39:08 PM »
Is this Tracking Generator also hackable or need any kind of board to work  not included on the basic unit ??

 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Is this Tracking Generator also hackable or need any kind of board to work  not included on the basic unit ??

Every SSA3000X (sold outside China *) )  have full TG hardware.
It need only activate by licence key what you can buy. Official price in europe 169.00 eur (VAT 0 price).

For other things in your question you need only carefully read this topic and you find (nice) answer.
Specially starting from this. and continue reading and soon you find also @TurboTom message including attachedt zip file. Inside there is .txt file. Read it.

*) Inside  China there is available more SSA3000X models. (these can see only Siglent China domestic  chinese language sides)
« Last Edit: September 17, 2016, 10:58:14 PM by rf-loop »
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Offline ebclr

  • Super Contributor
  • ***
  • Posts: 1569
  • Country: 00
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #103 on: September 18, 2016, 12:45:48 AM »
Another question where in US have the best deal for this instrument List price 1595 USD, anybody know promotions or better price in USA
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #104 on: September 18, 2016, 01:30:00 AM »
Another question where in US have the best deal for this instrument List price 1595 USD, anybody know promotions or better price in USA

You can try Saelig EEVblog member discount. Perhaps ypu can ask using PM from EEVblog member "rickv14623"
http://www.saelig.com/category/siglent-spectrum-analyzers.htm
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Offline ebclr

  • Super Contributor
  • ***
  • Posts: 1569
  • Country: 00
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #105 on: September 18, 2016, 01:45:47 AM »
Thanks coupon didn't work I asked one let's wait for Saelig reply
 

Offline Jester

  • Regular Contributor
  • *
  • Posts: 189
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #106 on: September 18, 2016, 02:38:22 AM »
I purchased one from Saelig, I requested the EEVBOG discount and they provided a quote with the discount. Great value.
 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #107 on: September 18, 2016, 05:55:11 AM »
Thanks coupon didn't work I asked one let's wait for Saelig reply
Check your PM's and email.  ;)
Avid Rabid Hobbyist & NZ Siglent Distributor
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #108 on: September 22, 2016, 08:30:26 PM »
Some times need look signal what is low and near much higher level signal.

This image perhaps give some idea how it works.

Here is 0dBm 4MHz AM modulated signal. Modulation % is quite low but generator setting is not very accurate for this (8644B).

There is also weak  signal from other signal generator. Only  5Hz off from 0dBm signal and level ~ -71dBm







It is clear that in this case using RBW 10Hz can not do anything but measure power level what is  inside this filter.
Trace 1 is using 1Hz RBW
Trace 2 with 10Hz RBW and also measured shape factor. (-3dB level width is checked also and it is 10Hz)


« Last Edit: September 22, 2016, 08:38:10 PM by rf-loop »
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Offline bozidarms

  • Regular Contributor
  • *
  • Posts: 94
  • Country: ch
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #109 on: September 30, 2016, 06:03:57 PM »
Hi to the group,
can, please somebody help / i have try  Telnet login to SSA3021x / login " root" , and next password, but than i cannot tip any character for password "ding1234"|O
Thanks

Supplement - someway have login - but what now :-// sorry for my behavior but i am not pc expert att all :palm:
Supplement1 - SUCCESS - :clap: :-+ :-+ :-+ apology to the group
« Last Edit: September 30, 2016, 06:52:31 PM by bozidarms »
 

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #110 on: September 30, 2016, 06:43:41 PM »
1) It is "root", not " root".
2) Telnet can be slow, especially if you do not open the SETTINGS/SYSTEM INFO screen.

What hardware revision/firmware version are you running?

Regards,
Vitor
 

Offline Pinkus

  • Frequent Contributor
  • **
  • Posts: 444
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #111 on: September 30, 2016, 06:50:32 PM »
OK, I understand (added 'supplement' at 06:40) that you already got the login now.
Given this I just can say:

C'mon. It is all in this thread. And this thread has currently only 5 pages.
I would understand if somebody cannot find an information in a 50 or 100 page thread. But I think it can be expected that you will find the "hack for dummies" instructions in a 5 page thread.

Hint 1: look right in the middle
Hint 2: it might be also helpful to learn the commands of a unix/linux editor. You will find plenty of helpful pages with Google.


 

Offline bozidarms

  • Regular Contributor
  • *
  • Posts: 94
  • Country: ch
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #112 on: September 30, 2016, 06:55:07 PM »
Thanks for quick responses - have succeeded :-+
Regards
Vitor -
 SW1   100.01.02.07.07.
 SW2   20160606-2
 SW3   000000D1
 HW     07.03.00
Tnx

SPECIAL THANKS - besonderer Dank -  to Turbo Tom  :-+ :-+ :-+
« Last Edit: September 30, 2016, 07:34:49 PM by bozidarms »
 
The following users thanked this post: k4rlhp

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #113 on: September 30, 2016, 08:39:21 PM »
So what was the problem preventing the login? Would be nice to know!

Regards,
Vitor
 

Offline bozidarms

  • Regular Contributor
  • *
  • Posts: 94
  • Country: ch
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #114 on: September 30, 2016, 09:15:02 PM »
Unfortunately i was - that was my very first time(Telnet and other software stuff...) :palm:
Regards
« Last Edit: October 05, 2016, 09:05:20 PM by bozidarms »
 

Offline DL4RAJ

  • Contributor
  • Posts: 28
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #115 on: November 07, 2016, 02:45:59 AM »
Hi all,

I have my SSA3021X since two weeks now.
and want to thank all smart contributors about the firmware.
Sort of collective intelligence.-:/
Now follow a few measurements of the SA which I've performed.

Sideband noise.
I've used an ultra clean 10MHz OCXO from Wenzel (Streamline) with a spec'ed
phase noise of -165dBc/Hz @ 1kHz (or greater) offset.
The SA showed a sideband noise of -112dBm/Hz on 10MHz at 10kHz offset.
This translates to -98.36dBc/Hz when referred to peak carrier.
For comparison:A HP70200C is spec'd with -108dBc/Hz under the same conditions.

TG
The restriction of the minimum RBW to 30kHz limits the dynamic range of S21 measurements
to 70dB due to the raised DANL.
This may or may be not an issue depending on the DUT.
E.g. a high quality crystal filter on 5.645MHz was measured once with the Siglent and once with a low cost
VNA,see http://w5big.com/vna2180.htm.
The SSA cannot show the full ultimate stopband attenuation down to -110dB while the VNA can.
For a simple HF LP-filter 70dB dynamic range is adequate.

3Hz and 1Hz RBW
These two non-factory "options" are of limited use.
They work down to signal levels of about -130dBm.
Below this level amplitude accuracy drops dramatically.
E.g. at -133dBm the indicated level is off by 4dB (low) and a -140dBm signal
isn't visible any more while a -143dBm signal at a RBW of 10Hz is clearly visible

TG Addendum
I'have hooked up the TG to a SDR,see the screenshots.
One can see the discrete frequency hops and in the zoomed-in capture
there seem very small continous frequency sweeps visible.
That fits with what was reported earlier in this thread.

Regards

Clemens

 
« Last Edit: January 18, 2017, 07:15:02 AM by DL4RAJ »
 

Offline videobruce

  • Frequent Contributor
  • **
  • Posts: 349
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #116 on: November 07, 2016, 03:07:07 AM »
Quote
I'have hooked up the TG to a SDR
What is this Persues??  ???
 

Offline painting

  • Newbie
  • Posts: 2
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #117 on: November 07, 2016, 03:12:31 AM »
What is this Persues??  ???

Looks to be this:
http://microtelecom.it/perseus/



Sent from my iPhone using Tapatalk
 
The following users thanked this post: videobruce

Offline videobruce

  • Frequent Contributor
  • **
  • Posts: 349
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #118 on: November 07, 2016, 07:01:37 AM »
Like I'm suppose to know what that is.   :-//
 

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #119 on: November 10, 2016, 11:19:03 PM »
Just a note:

A new firmware was released, which apparently disables activated options and is not downgradable.

Extraction of the firmware revealed that the password is unchanged.

No further information exists regarding the possibility of reactivating the options.

Current advise is to NOT upgrade and wait for people with P08.01 to tell if TELNET access and activation hack is possible.

Regards
 
The following users thanked this post: kado, DL4RAJ

Offline videobruce

  • Frequent Contributor
  • **
  • Posts: 349
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #120 on: November 11, 2016, 12:48:34 AM »
Probably why the update took longer.  :--

 

Offline janekivi

  • Frequent Contributor
  • **
  • Posts: 266
  • Country: ee
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #121 on: November 11, 2016, 06:56:44 AM »
I look into update scripts and before there was only NSP_system_info.xml
and now it needs nsp_data_b too, which is NSP binary data, I think...
This is the new file in firmware. 128 bytes = 16 x 8, probably crypted.
And somehow is suitable for everyone...

But this can't be difficult. You need to increase sales... for cristmas time. What you do...
There is needed little shaking but not earthquake. You make this upgrade and this must
be solvable in suitable time. So every potential buyer-hobbyist who was not sure before
but like this toy, might lose his opportunity and like buy it now before they lock it with next
radical update. Next upgrade of course has the same effect. But only if this showstopper
is being solved. Otherwise you lost all who buy them with counted money or for toy.
Normal professionals don't use and can't use hacked tools anyway.
(Why not, we can. No, you can't provide service with tool, which tomorrow don't have
needed bandwidth or options.)
(Counted money - you count every cent and think weeks before spending anything)
 
The following users thanked this post: kado, DL4RAJ

Online nctnico

  • Super Contributor
  • ***
  • Posts: 13285
  • Country: nl
    • NCT Developments
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #122 on: November 11, 2016, 08:04:15 AM »
For small companies using a piece of hacked equipment doesn't need to be a problem especially with cheap Chinese gear which probably never sees the inside of the manufacturer's calibration department anyway. However losing the options (3.2GHz) with each firmware update and no guarantee they come back makes the SSA3000 series very uninteresting compared to a used spectrum analyser. I was very tempted to buy a SSA3021X but with Siglent plugging the holes I'm happy I went for a used on instead.
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 
The following users thanked this post: videobruce

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #123 on: November 11, 2016, 08:21:28 AM »
I bought mine way ahead of the actual date I had planed to buy one, to make sure I get a hackable unit.

I was then surprised that the hole was not fixed over the period of several months. I was wondering "Could it be that they want to mimic what Rigol did?".

Now that the hole is fixed, I am glad I have mine: I would never get this amount of functionality (not just the extra frequency range, but especially the advanced measurments, too) for 1449 Euro.

Buying a second hand SSA is not that easy an alternative!

Believe me, I have purchased lots of measuring equipment second hand and for years I look at spectrum analysers, especially on German eBay. It seems they have some magic with them, making them more expensive, the older they get. I just did a quick search: you literally get nothing for less than 4.000 Euro and those are all pretty old (actually there is one, that seems moderatly interesting - http://www.ebay.de/itm/Advantest-U3641N-Spectrum-Analyzer-9kHz-3GHz-/262392475296).But what if you buy a second hand unit and it comes broken, uncalibrated, develops a fault within days or weeks, etc.? And any SSA with more than 5-10 years is probably outdated when it comes to processing power.

Unless you need some huge frequency range, where a new unit would literally cost a 5 digit number and you could get a second hand one for a 4 digit number, I would steer away from them. Too complex, too difficult to repair, too difficult to get spare parts.

In my opinion, the Siglent SSA3021X is great value and let's be honest: even without hacking it, it is a spectacular device for its price range. Siglent does not need to push it through pseudo-hacking.

Regards,
Vitor
 

Online nctnico

  • Super Contributor
  • ***
  • Posts: 13285
  • Country: nl
    • NCT Developments
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #124 on: November 11, 2016, 08:42:12 AM »
You forget that your current firmware version still may have flaws and you won't have future enhancements Siglent may add IF you want to continue to use the liberated options.

BTW Used test equipment in Europe is usually very expensive so most of mine comes from overseas.
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #125 on: November 11, 2016, 08:47:14 AM »
I know that, but when I purchased mine, I did my research and concluded that the current state of the firmware was good enough for me. I don't really care about PNG file format and I prefer to use a noise source over the TG for my applications.

Also, I doubt you get new FW for older units and they certainly have bugs, too.

But of course you are right: I might end up in a situation where I have to decide between keeping the hacked options or getting the new options from a newer FW. However, in that case I still have the option to purchase the missing keys, like the one for advanced measurements.

Also, knowing that the hardware is there and it is just software-locked gives the hope one might end up hacking it again... Still better, than having different hardware between models.

And I guess my unit just got more valuable over night! lol

Regards,
Vitor
 

Offline bozidarms

  • Regular Contributor
  • *
  • Posts: 94
  • Country: ch
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #126 on: November 12, 2016, 01:04:51 AM »
Hi to all,

despite the momentary situation, SSA3000X is and stay one marvelous instrument,
with price (and given possibilities for that price) unattainable from every other manufacturer.

I hope that Siglent is wise enough,  to make right decision. :D

Regards
 

Offline videobruce

  • Frequent Contributor
  • **
  • Posts: 349
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #127 on: November 12, 2016, 02:40:44 AM »
I contacted a dealer via e-mail if he had existing stock and received this reply;
Quote
Thank you for your interest in our unit.
Currently, we sold all our stock. The new stock will be available as of next Friday Nov 18th.
We are currently running a 5% discount on Siglent units, if you are interested in moving ahead with this analyzer, please send us your email and we will forward the update price.
I called another dealer and was told (not surprisingly) that they don't 'stock' these, they come from Siglent (which seems very typical for all of these T&M dealers).

Interesting about the date of availability.  ;)
 

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #128 on: November 12, 2016, 03:28:32 AM »
That was the same with me. When I purchased the device it said "IN STOCK", yet the device had to come from China to EU first and only then was shipped to me.

The truth is, that it kind of makes sense. A SSA is not a mass consumer product and I imagine there are not that many being sold. So it would not make much sense for a small to medium distributor to actually stock them, when the retail price is almost 1500 Euro!

If you place yourself in the distributor role, you would do exactly the same or close business very quickly.

And again: Even without any hack - the Siglent SSA3021X is a fantastic product at this price and there is no other option in this class. You get a full 9kHz to 2.1GHz sweep spectrum analyzer at 1449 Euro. End of story.

Regards,
Vitor
 

Offline DL4RAJ

  • Contributor
  • Posts: 28
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #129 on: November 12, 2016, 04:04:47 AM »
(actually there is one, that seems moderatly interesting - http://www.ebay.de/itm/Advantest-U3641N-Spectrum-Analyzer-9kHz-3GHz-/262392475296).
Regards,
Vitor

Moderately interesting,that's true.
It has a 75Ohm input and no TG.

Unless you need some huge frequency range, where a new unit would literally cost a 5 digit number and you could get a second hand one for a 4 digit number, I would steer away from them. Too complex, too difficult to repair, too difficult to get spare parts.

In my opinion, the Siglent SSA3021X is great value and let's be honest: even without hacking it, it is a spectacular device for its price range

I agree with you on this.

Regards
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Offline janekivi

  • Frequent Contributor
  • **
  • Posts: 266
  • Country: ee
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #131 on: November 12, 2016, 05:51:27 AM »
You already had funeral ceremony ... ?
OK, but christmas already here, I'm back from work and had time to sit down.
After scrolling this file up and down quickly and slowly, my eyes... did start shutting down.
But in some state I saw this code in this nsp_data_b file.
Code: [Select]
<?xml version="1.0" encoding="UTF-8"?>?<sn_backup_root>?  <factory>TRUE</factory>?  <pro_mode>TRUE</pro_mode>?</sn_backup_root>?
 

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #132 on: November 12, 2016, 05:55:13 AM »
No funeral ceremony!

The games have just started!  :)

Regards
 

Offline DL4RAJ

  • Contributor
  • Posts: 28
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #133 on: November 12, 2016, 08:04:18 AM »
The new firmware offers some appealing features (except #5):
1. Add “PNG“ file type for screenshot.
2. Support TG in RBW less than 30 kHz.
3. Modify default TG output power, -20 dBm in spectrum analyzer mode and 0 dBm in reflection measure mode, and some other TG issues.
4. Updating the format of “LIM“ file. After this firmware , the old limit files will not be supported. You can re?????? them through “EasySpectrum” free software easily.
5. After this firmware, do not support downgrade operation.

Particularly #2 seems most interesting because it lowers the noise floor when using TG and thus
extends dynamic range of measurements of highly selective filters,see
http://www.eevblog.com/forum/testgear/hack-of-sigllent-spectrum-analyzer-ssa3021x/?action=dlattach;attach=268127;image

Regards
 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #134 on: November 12, 2016, 08:20:45 AM »
Another remaining and very concerning issue with P08.01 FW is that the remaining Option trial times vanish.  :rant:  :wtf:

I have just sent a stern email to Siglent about this.

My advice is DO NOT install P08.01 FW at this time.
Avid Rabid Hobbyist & NZ Siglent Distributor
 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #135 on: November 12, 2016, 07:31:50 PM »
I contacted a dealer via e-mail if he had existing stock and received this reply;
Quote
Thank you for your interest in our unit.
Currently, we sold all our stock. The new stock will be available as of next Friday Nov 18th.
We are currently running a 5% discount on Siglent units, if you are interested in moving ahead with this analyzer, please send us your email and we will forward the update price.
I called another dealer and was told (not surprisingly) that they don't 'stock' these, they come from Siglent (which seems very typical for all of these T&M dealers).

Interesting about the date of availability.  ;)
AFAIK all USA stock is held in Ohio at the Siglent US subsidiary and if they're out of stock then only "on hand" dealer stock will be available.
Did you try Saelig ?
http://www.eevblog.com/forum/testgear/equipment-discounts-from-saelig/

Avid Rabid Hobbyist & NZ Siglent Distributor
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #136 on: November 13, 2016, 07:18:45 PM »
This quoted is last message (now) in SSA3000X thread. (I will quote all after last FW 8.01 things from there to here. This thread is right place for SSA mods....

So please wait

from http://www.eevblog.com/forum/testgear/siglent-ssa3000x-spectrum-analyzers/
Quote from: SSA3000 thread


*** These posts should really be moved to the "Hack of Sigllent spectrum analyzer ssa3021X?" @thread... Can some MOD do this, please? ***

Regards,
Vitor

Lets hope all "how to try hack or how to hack" etc is important to move to this thread:

http://www.eevblog.com/forum/testgear/hack-of-sigllent-spectrum-analyzer-ssa3021x/

It looks like moderators are not interested about this.

The situation in which all messed up should be avoided.

Without MOD help it is possible also to other way. Some people can make one message where is quoted all this kind of messages. The chronology is also an important.

But, still I think that doing it now is better than later. After then there is small chronology mess with hack thread messages. But if do not it now, later it is perhaps more hard.

What is good point to start quote and copy to hack thread. I recommend that starting from first message about new 8.01FW.

I will do it starting from message 502 in this thread by tautech. Even when it confflict time order in hack thread.

I will do it but please do not send new messages to this or hack tread until done.
Later after done, please post all hack related messages to hack thread, only.   (use and test results wwith hacked or factory condition SSA of course to what ever thread.

So, please do not send new message until done!
« Last Edit: November 13, 2016, 08:25:24 PM by rf-loop »
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #137 on: November 13, 2016, 08:24:39 PM »
New FW for the SSA3kX
http://www.siglentamerica.com/USA_website_2014/Firmware&Software/firmware/SSA3000X-P08.01.rar
P08.01
7.2 Mb

From the changelog:
1. Add “PNG“ file type for screenshot.
2. Support TG in RBW less than 30 kHz.
3. Modify default TG output power, -20 dBm in spectrum analyzer mode and 0 dBm in reflection measure mode, and some other TG issues.
4. Updating the format of “LIM“ file. After this firmware , the old limit files will not be supported. You can re?????? them through “EasySpectrum” free software easily.
5. After this firmware, do not support downgrade operation.

Warning: A quick check revealed to me that the root password has changed!

Because you cannot downgrade the firmware, you would be stuck at the moment!

Regards,
Vitor

And the liberated options are also gone.

So BEWARE!

My quick check shows exactly the same files in \passwd folder
so nothing changed there...


You are right.  :palm:

Both passwd and shadow are the same, at least for root.

I must have gotten stressed, as I was lecturing while doing the anlysis through RDP.

Sorry.

Regards,
Vitor


To make up for my mistake, here is a Windows tool that will convert an *.ADS file into a *.ZIP file.

It will open with 7Zip, but the resulting ZIP is not free of errors. Most can be extracted, though.

All credits go to janekivi for his brilliant insights, which he shared.

Have fun.

Regards


http://www.eevblog.com/forum/testgear/siglent-ssa3000x-spectrum-analyzers/?action=dlattach;attach=269048


And the liberated options are also gone.

So BEWARE!

Have you tried activating them again through TELNET?

It kind of makes sense for Siglent to replace the edited license file with a new one, as offical customers will have the activation code to reactivate everything.

I wonder if they only reset the evaluation time settings or the actual activation settings: the hacks described in the other thread point to two different ways of doing the hack. One way is to change the eval period to infinite, the other consists in setting the option as activated.

Regards


Have you tried activating them again through TELNET?

Yes.
Seems to be a completely different method now.

There is a new file w/ entered license keys.
The liberation method described above doesn't work anymore.

Cheers


Sorry to hear that.

Probably the application executable checks the signature of the authorised options. Without the key, nothing can be done, which is why they didn't even bother to replace the root password.

I would say that Siglent spectrum analyzers are locked again and probably for good.

Regard


Two things I noticed after upgrading from P07.07 (100.01.02.07.07) to P08.01 (01.02.08.01)

I had enabled all options and changed the model from SSA3021X to SSA3032X prior to the upgrade.
After the upgrade all options were lost but the model stayed with SSA3032X. In addition the newly created NSP_sn_bandwidth.xml has been appended with a license key for 3032.

Firmware downgrade is very simple. If you overwite ecomb (5054420 Bytes) with the previous ecomb (5007948 Bytes) from P07.07 all options are back.

ecomb is the main application located at /usr/bin/siglent. In order to replace ecomb you need to temporarily remount the rootfs as rw (read-write).

mount rootfs -o remount,rw
cd /usr/bin/siglent
cp /usr/bin/siglent/usr/mass_storage/U-disk0/ecomb . (in case the downgrade ecomb is located at USB stick)
sync
mount rootfs -o remount,ro
shutdown -r now


Thanks!

For all: The ecomb file can be accessed easily by converting the P07.07 ADS firmware file with the tool I attached a few posts before.

Open the resulting ZIP with 7Zip and extract ecomb.

So this is step 1: downgrade is possible again!

One thought:

If you can just copy ecomb from P07.07 and it works fine with all options back, how about writing a script for /etc to alternate between one ecomb and the other? Like you turn the SSA on and get P08.01. Turn it on again and you get P07.07 and so on. Even better would be some kind of boot menu...

*** These posts should really be moved to the "Hack of Sigllent spectrum analyzer ssa3021X?" @thread... Can some MOD do this, please? ***

Regards,
Vitor


Well, the situation isn't as hopeless as initially assumed: if you use peterdb's method of "liberating" the machine (http://www.eevblog.com/forum/testgear/hack-of-sigllent-spectrum-analyzer-ssa3021x/msg998095/#msg998095) and modify the license node in /usr/bin/siglent/firmdata0/NSP_system_info.xml to look like this:

<license><_3032>TRUE</_3032><_3021>FALSE</_3021><_TG>TRUE</_TG><_EMI>TRUE</_EMI><_Meas>TRUE</_Meas><_CAT>TRUE</_CAT></license></system_information>

and make sure all traces of previous hacking are eliminated -- don't forget to delete the "monster.txt " (not sure if all this is really necessary) and then apply the firmware update, a set of license codes will be generated automatically and the options will stay active (just tried it on my SSA*X).

The new firmware apparently doesn't support 1Hz and 3MHz RBW anymore. Operation with the tracking generator active has been improved, yet when operated in the area that normally is covered in FFT mode, it continues to sweep and gets unbelievably slow. I always thought the Rigol DSA was a dog but if you have to use the Siglent in this high-res TG modes, you'll get a new definition of "slow"! Yet, the results are better than before, the SSA hasn't got a problem to properly measure the parallel resonance of my high-accuracy 1MHz glass-tube crystal. But still, when zooming further into the spectrum, funny artefacts become visible, yet I'ld say the result is now completely usable as it is. Did I tell it's slow?  ;)

So much for now, I may report back once I had more time to play with it.

Cheers,
Thomas


Hi,

Finally got some time...

I upgraded mine and had no problem. All options remain active.

As I thought:

Quote
I wonder if they only reset the evaluation time settings or the actual activation settings: the hacks described in the other thread point to two different ways of doing the hack. One way is to change the eval period to infinite, the other consists in setting the option as activated.

Those who actually activated the option instead of messing with the trial time will have those options with P08.01.

I confirm that the 3MHz RBW is gone. Maximum RBW is 1MHz.

I have not tested the 1Hz RBW, as I did not activate it.

So apparently, Siglent is not being too harsh.  :-+

Regards


There is a new version of the EasySpectrum software, too:

ReleaseDate
2016/11/10 18:04:23
Version: P03.02

Note:
1. Support manually IP connection.
2. Support editing and exporting “Correction” file.
3. Support editing and exporting “Limit” file, and off-line editing.
4. Add scale line to “Spectrum Monitor” mode

Regards



...

So apparently, Siglent is not being too harsh.  :-+

...

True but I guess for those who will purchase the machine with a firmware newer than 7.07, things may look different. Apparently, during the update 7.07 -> 8.01 the encrypted license codes will be generated if the corresponding files are correctly "prepared". During this update, the machine boots twice (at least mine) - would be interesting to know what it's doing there  ;).

And since a "proper" downgrade of the firmware is inhibited now (at least Siglent states this - I believe them and didn't test it), this "easy road" will be closed for future machines. There might be other options, for example if a set of files in the /usr/bin/siglent/firmdata0/ directory of a "liberated" machine gets leaked, it might run as well on a new machine, of course cloning the serial number of the "donor".

Cheers,
Thomas


P.S.  I modifed the attachment in my "patch instructions post" to be compatible with the firmware update (they have to be applied before the performing the update!) -- see here: http://www.eevblog.com/forum/testgear/hack-of-sigllent-spectrum-analyzer-ssa3021x/msg998366/#msg998366


As mentioned before, you can downgrade, copying the P07.07 ecomb file on top of the current one.

This would allow modifying the license file and then copying back the P08.01 ecomb file.

I have not tested this, though.

Regards


These are copy (quote) from SSA3000X thread. All msg including and after tautech message #502.

Please continue all SSA3000X modification messages here. If you guote from these quoted msg do not forget include original member name from quote.

Keep these introductions, test and other discussion in SSA3000X thread.

All modifications related instructions and study to this "hack" thread for avoid mess.



If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 
The following users thanked this post: videobruce, tautech, nugglix

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #138 on: November 13, 2016, 08:58:33 PM »
Please continue in this thread  all SSA3000X "modifications - hack" and hack study messages to this thread.
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Online TurboTom

  • Frequent Contributor
  • **
  • Posts: 295
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #139 on: November 13, 2016, 11:37:16 PM »
Thanks @rf-loop for relocating the recent SSA "improvement" posts to the proper thread.

Today I had a good laugh - Siglent made "liberating" the machine after the update even easier for us: Just delete all files (but not! the "calib" directory) from the directories /usr/bin/siglent/firmdata0/ and /usr/bin/siglent/usr/backup/ (of course after backing up to USB pen drive). If you reboot the SSA after this, the serial number will be displayed as "xxxxxxxx" but all options will be enabled along with 1Hz and 3MHz RBW, so nothing lost against firmware 7.07. In case the machine needs to be sold / repaired, the deleted contents can be copied back and everything returns to normal. Probably upon the next F/W update, Siglent will close this hole for good reason, so enjoy it as long as it's available  8).

Cheers,
Thomas

P.S. I also attached a screenshot of a TG scan of my "difficult" crystal that the SSA had problems to analyze with the 7.07 F/W.
 
The following users thanked this post: nugglix, DL4RAJ

Offline nugglix

  • Regular Contributor
  • *
  • Posts: 173
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #140 on: November 14, 2016, 12:52:26 AM »
Confirmed the joke     :-DD

Thanks for finding that out.
 

Offline bozidarms

  • Regular Contributor
  • *
  • Posts: 94
  • Country: ch
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #141 on: November 14, 2016, 06:54:22 AM »
Turbo Tom -  :-+ :-+ :-+
 

Offline xenonfire

  • Newbie
  • Posts: 3
  • Country: se
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #142 on: November 17, 2016, 05:44:34 AM »
I'm planning to order a new SSA3021X.
Do you guys think that I could hack my machine and get all options ?  :popcorn:
 

Online TurboTom

  • Frequent Contributor
  • **
  • Posts: 295
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #143 on: November 17, 2016, 06:42:04 AM »
@xenonfire:

for the 8.01 firmware yes, what the future will bring, noone knows.

Cheers,
Thomas
 

Offline DL4RAJ

  • Contributor
  • Posts: 28
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #144 on: November 21, 2016, 02:02:40 AM »
 

Offline DL4RAJ

  • Contributor
  • Posts: 28
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #145 on: November 21, 2016, 06:17:45 AM »
To make up for my mistake, here is a Windows tool that will convert an *.ADS file into a *.ZIP file.
It will open with 7Zip, but the resulting ZIP is not free of errors. Most can be extracted, though.
Regards

Here the tool did not work on a W7/64 machine.
The resulting ***ADS.zip file could not be opened or extracted at all with 7Zip .
The error message says just this "...could not be opened as archive..."
What might be the reason?

Regards
 

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #146 on: November 21, 2016, 06:35:06 AM »
The ZIP will be still corrupted, but everything essential is extractable. Check if you are using a recent 7zip version.

Also, this tool only works for firmware files of the SSA3921X.

Regards,
Vitor
 

Offline DL4RAJ

  • Contributor
  • Posts: 28
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #147 on: November 21, 2016, 09:18:02 AM »
Check if you are using a recent 7zip version.

Thanks,that did the trick.
I had v9.2,now it's v16.04 and it works.

BTW:Is there a difference between the *genuine* files
NSP_system_info.xml
and
fun_opt_valid_config.xml
of FW 7.07 and FW 8.1?

Regards
 

Offline jobber

  • Contributor
  • Posts: 9
  • Country: ru
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #148 on: November 30, 2016, 08:21:32 AM »
Hey!

Thank you for the awesome hack and instructions. I just successfully unlocked all the features on my SSA with sw 7.07.

Now I wanted to upgradeto firmware v8.01 but it doesn't seem to be working - there is no progress bar and it nothing is happening for almost 20min now. How long should the upgrade process take? Have anyone experienced similar problem?

Edit: I turned off and on the device and tried again. Immediately after pressing upgrade "System upgrade failed" message is displayed and nothing happens.
« Last Edit: November 30, 2016, 08:36:03 AM by jobber »
 

Offline jobber

  • Contributor
  • Posts: 9
  • Country: ru
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #149 on: November 30, 2016, 06:28:41 PM »
I tried to upgrade once again with version 7.07 and after 40% device restarted and never came back from boot screen.  :-[ I see green light flashing inside the housing but nothing is happening. Is there a way to restore it back or will I have to send it back for service?
 

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #150 on: November 30, 2016, 06:43:56 PM »
Can you still telnet to the device?
How did you restart the second flash attempt?
It shouldn't be possible to downgrade.
Either you did something wrong with the hack or you might have a bad flash.
Consider restoring to unpacked version and then open a support case.

Regards,
Vitor
 

Offline jobber

  • Contributor
  • Posts: 9
  • Country: ru
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #151 on: November 30, 2016, 07:02:12 PM »
Hi.

Thank you for your reply!

No, I think network is not up during boot screen.

I tried to upgrade to 8.01 but without success (device stayed operational on v 7.07). Then I tried to upload v7.07 firmware to see if this is working. It went to 40%, rebooted and stayed in boot screen.

For the hack I followed @TurboTom instruction and they worked. Before that made a backup firmdata0 folder and also tried to make a backup of ecomb file but I coudn't because it was in use. Maybe that was the source of the problem at the first place.

I is possible to access console with USB?
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #152 on: November 30, 2016, 07:04:07 PM »
I tried to upgrade once again with version 7.07 and after 40% device restarted and never came back from boot screen.  :-[ I see green light flashing inside the housing but nothing is happening. Is there a way to restore it back or will I have to send it back for service?

It is very clearly said in every place. After 8.01 can NOT downgrade. 

In first place.

And all times when do what ever FW update it need do using USB stick what really works reliable with equipment and it need be true proofed with tests BEFORE any attempt to FW update. This is so clear thing that this do not need write instructions.

Also, least with every other Siglent equipment. USB need be in native FAT32 format. It must have single partition. Its connection to USB bus need be as reliable as also power to oscilloscope. During whole update process, do not touch USB (for avoid any possible contact fail)

Also after stored .ADS file to USB stick it is very good practice to check it match with original unzipped file.

During FW update from 7 to 8 version SSA do several self restarts (boots) before it is ready.

It do not really take 20min.  So in first place something have gone wrong.
I have updated more than one SSA (and whole load of other Siglent equipments and never meet any problem)  and update works just rock solid when do it exactly as instructions and out from instructions of course first be sure that USB is sure ok and update .ADS file is exactly ok in root of USB.

What was idea for update 7.07 after failed 8.01 update.Why?  Just for fun or with some knowleedge what to do. Is it better first study and after then think what to do.
 
Now, do NOT ANYTHING more before you know exatly what is safe to do next.

One question.

You say you have modified 7.07 before you start update FW update for 8.01
Who told you this can do and is it possible there have been some exeption when you have done it - example accidentally. There is several possible modifications and methods in FW 7 versions. It need know exactly what can do and what can not do, except if you can yourself analyze what can and what not.
Do you remmeber if there was perhaps h letter after FW version number last time before this all.. 

I "can not"  give any instructions how to continue.
 
But two questions and depending your answer perhaps some peoples here can try kindly help you.

But at this time my recommendation is:  do not try update any more or change anything before there is real knowledge what to do next for avoid possible more deep problems.

Q 1.: Do you have reliable copy of original some files (before any first change in system).
Q 2.: Do you have now normal access to SSA system (via LAN) with PC  or what ever telnet terminal? Or is SSA now as "dead"?


« Last Edit: November 30, 2016, 07:16:09 PM by rf-loop »
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Offline jobber

  • Contributor
  • Posts: 9
  • Country: ru
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #153 on: November 30, 2016, 07:53:48 PM »
Hey.

Upgrade to 8.01 never finished. Immediately after starting the upgrade error message "System upgrade failed" message appeared and SSA stayed on version 7.07 (I think there was no h letter at the end). I thought that restoring to the same version (7.07) would clean the system so I could then upgrade to later version. Yes, it was an unproven method but I did't expect any problems, an error message at most. It is clear now that I was wrong.

The USB stick was almost new, in fat32 and I didn't touch it during the process.

The modification I made was to switch original "NSP_system_info" with the one provided in the one of the previous posts but with edited serial number.

Q 1.: Do you have reliable copy of original some files (before any first change in system).
I have a copy of "firmdata0" directory (calibration, NSPfiles, fun_opt file), nothing more.

Q 2.: Do you have now normal access to SSA system (via LAN) with PC  or what ever telnet terminal? Or is SSA now as "dead"?
Not via LAN. I have not tried any other options because I am not familiar with them.

I will definitely wait now before doing any further actions but I am afraid there is really not much to be done.

Thank you for your help and support. Much appreciated indeed!
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #154 on: November 30, 2016, 08:31:17 PM »
Hey.

Upgrade to 8.01 never finished. Immediately after starting the upgrade error message "System upgrade failed" message appeared and SSA stayed on version 7.07 (I think there was no h letter at the end). I thought that restoring to the same version (7.07) would clean the system so I could then upgrade to later version. Yes, it was an unproven method but I did't expect any problems, an error message at most. It is clear now that I was wrong.

The USB stick was almost new, in fat32 and I didn't touch it during the process.

The modification I made was to switch original "NSP_system_info" with the one provided in the one of the previous posts but with edited serial number.

Q 1.: Do you have reliable copy of original some files (before any first change in system).
I have a copy of "firmdata0" directory (calibration, NSPfiles, fun_opt file), nothing more.

Q 2.: Do you have now normal access to SSA system (via LAN) with PC  or what ever telnet terminal? Or is SSA now as "dead"?
Not via LAN. I have not tried any other options because I am not familiar with them.

I will definitely wait now before doing any further actions but I am afraid there is really not much to be done.

Thank you for your help and support. Much appreciated indeed!

One more.

When you now turn on it. What all signs about its life you get before you now touch anything but powewr on. Perhaps you can take some picture.
Screen, some leds on etc.
Can you share this knowledge to peoples who perhaps may know things and may perhaps try give some help before hands up.

After documeenting this state perhaps then (well documented) if you can get any response from some buttons. (do any button give any sign about  life ..)

You can also try:
(these are just from my random tests and not based to any official knowledge)

Power on and immediately start  continuously and fastly "firing" button "Mode" whole boot time.
Perhaps nothing happen?? Shut off.  (perhaps mistake in my test "records")

Power on and immediately start  continuously and fast "firing" button "System" whole boot time. (works some times)
Perhaps nothing?  If nothing...

 If nothing...

Boot again and push "System" and keep  when  power up and keep it continuously pushed down until SSA boot. (Perhaps this is most right...)

You can try these some more than just once.

With these 2 last, I can  get my SSA to weak up  and surprising something is really reset or something... as 1GHz model SSA3010X  !!  (if boot after this just normally, it is back normal model again)
If still nothing...lets hope some one have some other things...

If you get it wake up somehow in this or some other special model... do not turn off. After then is time to talk with SSA.

But, I afraid your's can not wake up with some button trick.
But, it do not cost anything...
« Last Edit: November 30, 2016, 09:36:22 PM by rf-loop »
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #155 on: November 30, 2016, 08:49:32 PM »
Here is result from boot with "button trick" with my individual SSA

Note that before this it works normally and all official options valid permanent.

Now it is 1GHz model and without any licenses (and other way it works as normal 1GHz model.

If I now shut off it and power up normally, it is again all what was before... normal model and valid official licenses etc.

Just after "button trick" boot...


Note also that is in some kind of factory reset state because normally it keep user set display image mode after example Preset and Reset.  Now it is returned back to "Inverse" mode.
« Last Edit: November 30, 2016, 09:24:32 PM by rf-loop »
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Online TurboTom

  • Frequent Contributor
  • **
  • Posts: 295
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #156 on: November 30, 2016, 09:42:38 PM »
@jobber

sorry to hear about your problem with the firmware update and the now bricked machine. I assume you applied the latest patch ("NSP_system_info" change only). This shouldn't have caused any difficulties with the update on an otherwise "clean" system. How long did you own the SA and did you use the "werewolf mode" with F/W 7.05? If you did, a file "Monster.txt" will have been generated that just contains the phrase "hacked!" or the like, of which I don't know if it changes the situation or not. On my machine, I deleted all the evidence of previous tampering before applying the latest update. I also experimented recently with possible up- or downgrade options after the update to 8.01 without any succes so far (but also without any collateral damage...). I recommend trying rf-loop's instructions to revive the instrument and possibly get telnet access again.

If all this fails, and depending on how skilled you are with Linux, you may open the machine and access the TTL level serial port inside. This port is up directly after switch-on and the bootup console is mapped to it. At least this will tell you where the bootup process fails and if it gets far enough, you may interrupt the bootup to enter the UBOOT tool. This would allow you to load a new system image to your SA, provided one of us can generate one -- but I guess this should be possible. Since you've got a backup of your SA's calibration data, restoring the device to proper working condition isn't an issue after that.

Cheers,
Thomas
« Last Edit: December 04, 2016, 08:21:51 AM by TurboTom »
 

Offline jobber

  • Contributor
  • Posts: 9
  • Country: ru
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #157 on: November 30, 2016, 10:46:34 PM »
Thanks for your quick responses and ideas!

When press the the power button this is what happens:
- short beep,
- Mode and TG buttons lid on,
- after few seconds LCD screens turns on with Siglent logo on it (splash screen),
and that is it.

I moved it around a bit and noticed that green LED on LAN port is turned on and I can se a green led flashing inside on the PCB the through the vent holes (on same side as USB and LAN ports are). I don't know if this flashing LED is normal but I think it could be an error indicator.

There is no response when pressing buttons and I can only turn it off by holding power button for few seconds. I have tried pressing and holding system and mode buttons after power on but nothing happened - I will try a couple more times later today.

I also connected it with USB cable to se if this is working and I get the "USB device not recognized" message but I didn't have any drivers installed at that time.


@TurboTom, yes, I used patch that you mentioned. The device was one day old and almost unused. I also checked if there was any "Monster" file but I could not see any. For now I would like to avoid opening the device but a boot message from debug console would definitely give some answers.

Would it possible to get some access UBOOT via USB device port on the back?
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #158 on: December 01, 2016, 12:18:55 AM »
Comment about LED's
Normally when booting front panel TG and Mode button leds on.
Normally when it is powered empty LAN connector green LED is on.
Green LED inside, continuously blinking, is normal.
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Online TurboTom

  • Frequent Contributor
  • **
  • Posts: 295
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #159 on: December 01, 2016, 06:07:21 AM »
....
The device was one day old and almost unused.

....

Would it possible to get some access UBOOT via USB device port on the back?

It's always risky to modify a brand-new device that had not undergone an appropriate "shake-down period". The "infant mortality" is someting that always needs to be considered. So the problem that you're facing now may well be the result of a flaw in the SA that was there right from the start, and even without the hack or even without your attempt to update the firmware, it may have failed. Of course it's difficult to prove now.

As far as I know, the only way to access the UBOOT menu is via a terminal connected to the UART interface inside the instrument. It's only necessary to remove the outer (plastic) rear cover, the pads of the UART interface can be accessed through an opening in the metal shield. A three-pin header (2.54 spacing) with slightly deformed pins can be inserted so it makes contact to the pad hole plating and routed outside via three wires. I used my SSA like this with this wire secured to the casing with some adhesive tape while I was initially experimenting with it (before the login data was discovered and telnet access became possible).

But honestly, with an instrument that's maybe a week in my possession and fails like you report, I would actually switch to "dumb mode" and try to have it replaced under warranty. I think there's a good chance nobody will notice that you tampered with it.

Cheers,
Thomas
 

Online nctnico

  • Super Contributor
  • ***
  • Posts: 13285
  • Country: nl
    • NCT Developments
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #160 on: December 01, 2016, 06:36:46 AM »
I second that: just return it and state the firmware update didn't work. Make sure to take pictures and note the serial number of the unit you are sending back so you can check whether it got damaged and you got the same unit back or a different one.
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #161 on: December 01, 2016, 07:29:45 AM »
@jobber
Sorry to hear of your misfortune but the sad fact is if you f**k around with hacks these are the risks you take. Expensive brick.  :palm:
For your sake I do hope it is a rare product failure and not something you've done.  :scared:
Good luck.
Avid Rabid Hobbyist & NZ Siglent Distributor
 

Offline jobber

  • Contributor
  • Posts: 9
  • Country: ru
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #162 on: December 01, 2016, 08:03:47 AM »
Thank you guys for all the support!

I did some experimenting with buttons but with no luck. I think that file system or some essential files got corrupt and it doesn't pass UBOOT.  I will contact support and ask if there is any recovery that could be used in events when upgrade fails. I will let you know what they will have to say.

It would be nice to know what exactly caused the device to fail so we could at least learn something.

@TurboTom do you think it would really be possible to recover it with cloned image file and UBOOT?
 

Online TurboTom

  • Frequent Contributor
  • **
  • Posts: 295
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #163 on: December 01, 2016, 09:20:48 AM »
Provided there isn't any further (hardware) damage that caused the instrument to fail, I'm pretty sure it should be possible to recover the machine. I once had a similar problem with a Hantek HDG2002B arbitrary function generator (I know the Siglent is another league...), and I was able to recover it from a (reported) NAND FLASH error by rewriting a file system image, albeit it was one that I've backed up from exactly the same machine some time before. Things may become awkward if bad blocks in memory are present in your machine since these locations won't be mapped correctly if uploading a foreign image.

All the best,
Thomas
 

Offline Tobey

  • Contributor
  • Posts: 9
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #164 on: December 04, 2016, 05:53:16 AM »
Received my new SSA 3021X yesterday and trying to upgrade through Telnet but I cannot login using "root" and password "ding1234".  I am using Putty and
typing "root" for login but when I try to enter a password it will not take one and the screen will time out.  I have tried this many times and used other Telnet
programs without any luck.  I am stuck.  Have they changed the login name? It seems everyone else is able to login, but not me.  My machine info is:

SW1   100.01.02.07.07
SW2   20160606-2
SW3   000000D1
HW    07.03.00

Calibration date  2016-10-26

Amy help will be much appreciated.
 

Offline DL4RAJ

  • Contributor
  • Posts: 28
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #165 on: December 04, 2016, 06:11:30 AM »
... Have they changed the login name? It seems everyone else is able to login, but not me. 

After having started Telnet you have to connect to your SSA
using its IP address which you find when you go into System -> LAN.
You can freely assign any appropriate IP address to your SSA.
Type into the command line 'o 192.168.xx.xx' (without the ' ).
After having established connection you'll be able to log in.

regards
« Last Edit: December 04, 2016, 09:04:57 PM by DL4RAJ »
 

Offline Tobey

  • Contributor
  • Posts: 9
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #166 on: December 04, 2016, 07:27:32 AM »
Yes I did connect with the SSA through the IP address, no trouble.  It returned the Arago Project screen with   "am335x-evm login:"   as the login with a cursor
to enter the login name.  I used "root" and when I hit enter the  "Password"  was displayed on the next line also with a cursor.  However, when I try to enter
"ding1234"  as the password I get no response; it will not accept any input at the cursor from the keyboard.  It is acting like the login could have changed and not
accepting the password.  I do not know what to do at this point to gain access through Telnet.
Thank you for your help!
 

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #167 on: December 04, 2016, 07:30:57 AM »
Hi,
Telnet access is sometimes slow. I mean really slow. Open the setup - about screen on the Siglent. This will speed the telnet access up.
Basically, just wait a minute for the login to happen.

Regards,
Vitor
 

Offline Tobey

  • Contributor
  • Posts: 9
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #168 on: December 04, 2016, 10:00:22 AM »
Thanks Bicurico and DL4RAJ for the input, but still cannot login to Telnet.  Every thing seems to be working as it should but just no response.  Bicurico, I do not see a setup screen on SSA except for the System>Interface>Lan.
Is there something I am missing?
Thanks.
 

Online TurboTom

  • Frequent Contributor
  • **
  • Posts: 295
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #169 on: December 04, 2016, 12:05:07 PM »
@Tobey
I don't believe in F/W 7.07 the login was changed, regardless of the purchase date of the SSA. Please also keep in mind that the Linux login is case sensitive. All the letters have to be lower case. The Info page mentioned is accessed on my machine (currently F/W 8.01 "improved") by pressing "System" -> "System Info" after full boot-up. While this screen is displayed, the sweep engine (ecomb) is halted and the O/S background activity isn't affected by it. Please try again exactly as described and report your results.

If you've still got 7.07 running, you may consider updating to 8.81 since this firmware version has the "standard" login configured (unless in between Siglent has applied some changes -- you may try to use an "older" download).

Whatsoever, I hope you'll be able to "liberate" your SSA.

All the best,
Thomas
 

Offline Tobey

  • Contributor
  • Posts: 9
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #170 on: December 04, 2016, 12:42:12 PM »
Thanks for the reply Thomas.
I tried to login as you suggested while in "System" -> "System Info", no caps lock on, all lower case.  Still no luck.  The response time in Telnet seems very good while inputing the login "root" and the responding of the Password request, as good as most other programs I've used.  But as before, no response to the input of the password "ding1234".  I guess
I will need to try updating to a different sw version as you suggest.  I'll play around some more and use a different computer and LAN connection before I do that.  Maybe others have the same problem and will give some feedback.
Thanks so much for the help, it is greatly appreciated.
 

Offline DL4RAJ

  • Contributor
  • Posts: 28
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #171 on: December 04, 2016, 09:12:32 PM »
... But as before, no response to the input of the password "ding1234". 

You did not happen to press backspace before entering "ding1234" ?
I guess you know that there has to be one 'space' between password prompt
and the password itself.

When you type in the password nothing happens on the screen,
i.e. the cursor is staying on the same position as before!


Just enter "ding1234" and then press the enter key.

regards
« Last Edit: December 05, 2016, 12:23:33 AM by DL4RAJ »
 

Offline DL4RAJ

  • Contributor
  • Posts: 28
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #172 on: December 04, 2016, 09:37:23 PM »
@Tobey

If you've still got 7.07 running, you may consider updating to 8.81 since this firmware version has the "standard" login configured (unless in between Siglent has applied some changes -- you may try to use an "older" download).

Whatsoever, I hope you'll be able to "liberate" your SSA.

All the best,
Thomas

Tom

I wonder if an *unmodified* 7.07 FW version which has been upgraded to 8.01
can be liberated.
When a *modified* 7.07 has been upgraded to 8.01 the 'liberation" is done as per your suggestion:
"Just delete all files (but not! the "calib" directory) from the directories /usr/bin/siglent/firmdata0/ and /usr/bin/siglent/usr/backup/ (of course after backing up to USB pen drive)."
Now,after this action which brings back all options, the SSA still remembers the added non-factory
1Hz and 3MHz RBWs which where contained in the *modified* NSP_system_info.xml file of FW7.07.
So my guess is that this info must have been stored somewhere else in the SSA's file System,
not only in the /firmdata0 and /backup directories.
How else should the SSA with FW8.01 "know" these BWs?
The same might be true for the other "liberation" mods.

regards
 

Online TurboTom

  • Frequent Contributor
  • **
  • Posts: 295
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #173 on: December 04, 2016, 11:53:15 PM »
I think the 3.2GHz / 1HZ / 3MHz parameters along with the extended measurement options are just the design limits of the SSA3000X. It appears that as long as the instrument is not "personalized" (i.e. S/N assigned and other limits defined), the "ecomb" application (that's the main SA program) runs with all options enabled, for example for production testing / calibration. So the SA doesn't need to "remember" a previous (hacked) configuration, it just activates all the functions it has. At least this appears to be a reasonable explanation.

Cheers,
Thomas
 

Offline Tobey

  • Contributor
  • Posts: 9
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #174 on: December 05, 2016, 03:05:15 AM »
DL4RAJ thanks for the response.
Yes you are correct:
When you type in the password nothing happens on the screen,
i.e. the cursor is staying on the same position as before!

I tried what you suggested, pressed backspace, nothing happens.  I even tried a new computer and a new LAN connection; I did change the IP address
on the new Lan connection, by the way.  I have no problem getting in to the SSA and opening the Araco Project screen and the prompt for the login.  The machine takes my login"root" and it advances
to the next line "Password" with the cursor.  However, the input to the cursor has no response from the keyboard.  It is acting, in my opinion, like the login word is wrong and giving no response at the
password prompt.  I saw where Bozidarms at Reply#112 had the same SSA setup info on his machine as I do, yet he was able to get in to SSA!  Is it possible that they have changed the login and password?
I have made sure that I am using all lower case and no extra spaces before the login "root".  I have tried everything suggested in this thread and still no luck!  Are there any other logins other than "root" and "ding1234" that anyone is aware of?  I am at a brick wall.
Thanks for all the help.
 

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #175 on: December 05, 2016, 03:16:05 AM »
Do not flash P08.01. It will limit your future choices.
But do try to flash a stock P07.07.
It could be that your root password was changed in factory. This would indeed close the loop hole, especially if future FW versions do not contain the passwd file,  or leave the existing one intact.
I am not sure if reflashing P07.07 will restore your password to default,  but it is worth a try.

Regards,
Vitor
 

Offline DL4RAJ

  • Contributor
  • Posts: 28
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #176 on: December 05, 2016, 03:22:09 AM »
DL4RAJ thanks for the response.
Yes you are correct:
When you type in the password nothing happens on the screen,
i.e. the cursor is staying on the same position as before!

I tried what you suggested, pressed backspace,

Despite there is nothing happening ON THE SCREEN the password is gettting into the system
while you are typing .Don't press 'Backspace' after entering but 'Enter' !

regards
 

Offline Tobey

  • Contributor
  • Posts: 9
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #177 on: December 05, 2016, 04:19:30 AM »
I did a sw update to 07.03 and still the same problem, I cannot get past the "Password" prompt.  Re-updated again to 07.07, still no go.  I am a little hesitant to upgrade to
08.01 at this time because I cannot login to the SSA in the older update versions.  I would have tried other sw versions but that was all I could find at Siglent.  Hoping someone knows how to get into the SSA that will work!
Thanks everybody!
 

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #178 on: December 05, 2016, 04:44:20 AM »
Don't dispair, nor do anything in a rush.

IMHO, there are the following possibilities:

a) Your device has been edited in factory to carry a different root password - I don't really believe that
b) Your device has a fault
c) Your network has a fault
d) Your computer(s) has/have a fault when it comes to telnet

Try this:

a) Use PuTTYinstead of telnet
b) Here is how it looks on my side:
Code: [Select]
_____                    _____           _         _
|  _  |___ ___ ___ ___   |  _  |___ ___  |_|___ ___| |_
|     |  _| .'| . | . |  |   __|  _| . | | | -_|  _|  _|
|__|__|_| |__,|_  |___|  |__|  |_| |___|_| |___|___|_|
              |___|                    |___|

Arago Project http://arago-project.org am335x-evm

Arago 2013.05 am335x-evm


am335x-evm login: root
Password:
Login incorrect

am335x-evm login: root
Password:
[email protected]:~#

Note that in the first attempt, I entered a wrong password!

c) Try downloading and flashing this firmware, which does use the known root password (checked with CRC32 code = 8470CDE0): http://www.siglentamerica.com/USA_website_2014/Firmware&Software/firmware/SSA3000X-P07.07.rar

d) This HAS to work, if not, something is wrong (defective device, network or computer).

Good luck.

Regards,
Vitor


 

Offline Tobey

  • Contributor
  • Posts: 9
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #179 on: December 05, 2016, 05:00:09 AM »
Success at last!  After reloading sw P07.07 I tried to enter SSA again and got in.  It must have been my fault.  When trying to enter the password, the cursor was having no response as if
nothing was being typed, and I assumed it was not taking the pw.  So, I entered "ding1234", even though there was no response at the cursor, and pressed Enter.  I was in.  I feel foolish that
I assumed there was no response from the machine.  I am do not use Linux very much.  Is this the way password entry works on the SSA?  I will now try to "liberate" the SSA.
Thanks all of you for your help, I am very appreciative!
 

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #180 on: December 05, 2016, 05:03:39 AM »
What you experienced is the Windows telnet, which does sometimes lack feedback. This is why I recommended PuTTY.
With the Rigol DS1054Z it is even worse, no response at all, unless you issue a propper command.

Regards,
Vitor
 

Offline DL4RAJ

  • Contributor
  • Posts: 28
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #181 on: December 05, 2016, 05:17:44 AM »
When trying to enter the password, the cursor was having no response as if
nothing was being typed, and I assumed it was not taking the pw.  So, I entered "ding1234", even though there was no response at the cursor, and pressed Enter.  I was in. 


You may want to re-read what I had decribed in my previous posts.
Exactly THIS:
"Despite there is nothing happening ON THE SCREEN the password is gettting into the System while you are typing .
Don't press 'Backspace' after entering but 'Enter' !"


regards




« Last Edit: December 05, 2016, 05:19:42 AM by DL4RAJ »
 

Offline Tobey

  • Contributor
  • Posts: 9
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #182 on: December 05, 2016, 06:01:49 AM »
Thanks DL4RAJ.

I did read your post about nothing happening on the screen and that is what caused me to rethink how
the password was entering the system.  Your help was taken to heart and worked!  I thank you very much
for your input and the help of everyone.  I'll try to "liberate" the SSA within the next few hours.

Again, thank you.

 

Offline Tobey

  • Contributor
  • Posts: 9
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #183 on: December 05, 2016, 04:21:19 PM »
Liberated my SSA 3021X tonight!  Now a 3032X with all options permanent.  I am going to leave the firmware at P07.07 for the
time being.

Many thanks for the help everyone. It was much appreciated.
 

Offline jobber

  • Contributor
  • Posts: 9
  • Country: ru
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #184 on: December 11, 2016, 08:19:29 AM »
Hey! I decided to connect to the debug port to see what is going on during boot. I looks like the kernel can not start but the UBOOT is working. I have attached the log for you to see and comment.
 

Online TurboTom

  • Frequent Contributor
  • **
  • Posts: 295
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #185 on: December 11, 2016, 09:54:47 AM »
@jobber:

Seems like there went something wrong with the defect management in your nand flash chip, i.e. defective blocks haven't been mapped out properly or have developed after the SSA has been installed. This can be just the result of repeated firmware updates even though it  definitely shouldn't be. I'm almost certain that this problem isn't related the your hacking attempts at all and would have occured even if you had updated the firmware on an otherwise "clean" machine. Have you got a chance to have the SSA replaced under warranty or is this option not available (for whatever reason)? In the first case, I strongly recommend to go for it. If not, things become more difficult but not impossible. I can provide images of all the partitions but the way to go would be to prepare a micro SD memory card with a bootable operating system (there's a slot on the digital PCB close to the USB device connector) and get the machine running from this, run a new defect scan (don't know if this is even possible) and install the system on an otherwise blank, freshly re-partitioned hardware. This would be a lot of work and require considerable skills but if this job is successful, it means that with this sd card, any failed system can be re-installed. I guess that's the way the SSA3000X machines are installed at the Siglent factory.

Please find attached a boot log of my machine (must have been a 7.05 firmware I guess).

All the best,
Thomas
 

Offline videobruce

  • Frequent Contributor
  • **
  • Posts: 349
  • Country: us
Text attachment of modifications
« Reply #186 on: December 12, 2016, 06:27:19 AM »
I attached a .doc file of all the related posts starting Nov 9th regarding modifications up to the above post.
The username is in bold with the date following (no time) at the beginning of every entry. I did not included any quotes with any of the posts since that replay usually responded to the previous post. Comments such as "regards" or thanks were not included to keep the document as short as possible. A few posts were combined into one when one followed the other from the same poster.

Hope this helps as it's not easy to follow this, considering that document is 10 pages long (nor was it easy to C&P all of those posts, then remove all the unnecessary text.)   :o
(v2 corrected some missed bold text for username's)
« Last Edit: December 12, 2016, 06:43:13 AM by videobruce »
 

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #187 on: December 18, 2016, 10:15:44 AM »
That is about 5MHz, not 5GHz!

The signal of your GPS antenna is probably so faint, that your SSA3021X picked up something at 2.493333MHz.

Regards,
Vitor
 
The following users thanked this post: kr5j

Offline videobruce

  • Frequent Contributor
  • **
  • Posts: 349
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #188 on: December 19, 2016, 12:04:25 AM »
Wrong thread
 
The following users thanked this post: rf-loop, nugglix

Offline B1nary

  • Contributor
  • Posts: 26
  • Country: ca
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #189 on: December 21, 2016, 06:19:26 AM »
New SSA3021X just arrived with 8.01 installed. It cannot be rolled back to an older FW - I tried 7.03 and 7.07. Snooping around I didn't see a file anywhere called NSP_system_info.xml. The files I found are NSP_sn_bandwidth.xml, NSP_trends_config_info.xml, calib, fun_opt_valid_config.xml and nsp_data-b. It seems the upgrade path may have been closed after the 7.07 FW. Has anyone been successful after the 8.01 update?
 

Offline bozidarms

  • Regular Contributor
  • *
  • Posts: 94
  • Country: ch
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #190 on: December 21, 2016, 11:26:54 AM »
Hi,
yes upgrade is still possible  ;)- read in the thread before.
Regards
« Last Edit: December 21, 2016, 12:02:15 PM by bozidarms »
 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #191 on: December 21, 2016, 11:34:55 AM »
Hi,
yes upgrade is still possible  ;)- red in thread before.
Regards
Might a new guide for dummies be required ?

I'm one and I'd have no idea where to start.  :scared:
Avid Rabid Hobbyist & NZ Siglent Distributor
 
The following users thanked this post: videobruce

Offline bozidarms

  • Regular Contributor
  • *
  • Posts: 94
  • Country: ch
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #192 on: December 21, 2016, 11:57:54 AM »
Unfortunately, i am not a right man for software at all.
I have done that, but i have had more luck than knowledge :palm:.
Just read more times a  whole thread and try to understand
what is all about.
Good luck!
 
« Last Edit: December 21, 2016, 12:01:13 PM by bozidarms »
 

Offline videobruce

  • Frequent Contributor
  • **
  • Posts: 349
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #193 on: December 21, 2016, 11:15:14 PM »
Might a new guide for dummies be required ?
I'm one and I'd have no idea where to start.  :scared:
There isn't enough in this thread to do it properly except for the 1% that are at the software 'code writing' level.   :-//
Too many assumptions that everyone else is (or should be) at that level.  :--
 

Offline BlauerElefant

  • Newbie
  • Posts: 2
  • Country: at
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #194 on: December 30, 2016, 03:58:36 AM »
I could go back to 7.07 with the ecomb copy-trick. Thanks for the help!

Can I ask you a few things?
a) If I had that monster.txt file - where would it be?

b) I had 08.01 on my machine, copied the 07.07 ecomb back on the machine. Then I deleted the "new" files in the firmdata0.
Now I have
NSP_system_info.xml
NSP_trends_config_info.xml
fun_opt_valid_config.xml
and the calib folder in there

Is this right?

c) When I try to update again with the "peter" method now the machine says "Update could not be cpmpleted" (yes, with typo...) - I guess because of downgrading...
In my /usr/bin/siglent/upgrade folder I have two files with 0 bytes each
datafs.img
and
firmdata0.img

Is this normal? Could this be the reason why I cannot update anymore? Should/Can I remove them? Do you have them on a proper 08.01 installation?
Or could there be somewhere else files that are a problem for the update? Any suggestion?

Thanks for your help... :)

Edit: I attached the three small Error / Warning / Info-files that are generated when I try to upgrade... I'm not good enough into Linux to know what it is the real issue. To me is looks like a mounting thing? Or a owner / chmod thing? Maybe there is a good Linux guy here that can help me?
« Last Edit: December 31, 2016, 06:45:25 AM by BlauerElefant »
 

Offline kr5j

  • Contributor
  • Posts: 14
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #195 on: January 01, 2017, 07:54:00 AM »
It was mentioned in one of the comments that a 50-75 ohms capability was added in a FW update.
I have I think the latest FW 1.2.8.1 and cannot find a choice of 50 or 75 ohms on any of the screens.
 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #196 on: January 01, 2017, 09:39:43 AM »
It was mentioned in one of the comments that a 50-75 ohms capability was added in a FW update.
I have I think the latest FW 1.2.8.1 and cannot find a choice of 50 or 75 ohms on any of the screens.
Welcome to the forum.

You are quite right, it was FW version 7.07.

2.   Add “input impedance switching function between 50? and 75?”


I'm running the latest FW but I'll have a check if it's there for you.  :popcorn:
Avid Rabid Hobbyist & NZ Siglent Distributor
 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #197 on: January 01, 2017, 10:01:37 AM »
It was mentioned in one of the comments that a 50-75 ohms capability was added in a FW update.
I have I think the latest FW 1.2.8.1 and cannot find a choice of 50 or 75 ohms on any of the screens.
Welcome to the forum.

You are quite right, it was FW version 7.07.

2.   Add “input impedance switching function between 50? and 75?”

To Find the 50 or 75 \$\Omega\$ selection:

Amplitude> Corrections> RF: 50 or 75 \$\Omega\$


Edit
Reply linked here too:
http://www.eevblog.com/forum/testgear/siglent-ssa3000x-spectrum-analyzers/
« Last Edit: January 01, 2017, 10:09:01 AM by tautech »
Avid Rabid Hobbyist & NZ Siglent Distributor
 

Offline B1nary

  • Contributor
  • Posts: 26
  • Country: ca
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #198 on: January 03, 2017, 02:47:55 PM »
Hi,
yes upgrade is still possible  ;)- red in thread before.
Regards
Might a new guide for dummies be required ?

I'm one and I'd have no idea where to start.  :scared:
I've read this forum several times and as is started in this post we, yes me as well, need a upgrade for dummies step by step guide. It's confusing to read to replace ecomb from 8 with the one from 7 and then what?? You can now roll back upgrades? That's great if I read that correctly but chances are high I didn't. There are some pretty incredibly talented users in this form and if one or a few could help those of us who need the upgrades for dummies methods I think we and everyone else who is trying to do the upgrade and failing or just afraid to try would be very grateful.

Does please and thank you work?  :-+

 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #199 on: January 03, 2017, 03:15:36 PM »
Hi,
yes upgrade is still possible  ;)- red in thread before.
Regards
Might a new guide for dummies be required ?

I'm one and I'd have no idea where to start.  :scared:
I've read this forum several times and as is started in this post we, yes me as well, need a upgrade for dummies step by step guide. It's confusing to read to replace ecomb from 8 with the one from 7 and then what?? You can now roll back upgrades? That's great if I read that correctly but chances are high I didn't. There are some pretty incredibly talented users in this form and if one or a few could help those of us who need the upgrades for dummies methods I think we and everyone else who is trying to do the upgrade and failing or just afraid to try would be very grateful.

Does please and thank you work?  :-+
I feel your frustration too and I believe the reason that nobody's offered a guide is they think it will get reported to Siglent and the chance to improve them will cease as the holes will be closed. Fact is these are flying out the door almost faster than they're being produced and are at least their #2 best seller.

If the members here think Siglent is unaware of this thread and its contents, well............you're joking, right ?
Are they frustrated by this ? I guess they might be but they've never expressed such to me.

I say: go for it and IF holes get closed I'm quite sure there's enough smart guys here to find a way in again.  ;)
Avid Rabid Hobbyist & NZ Siglent Distributor
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #200 on: January 03, 2017, 08:41:15 PM »
Hi,
yes upgrade is still possible  ;)- red in thread before.
Regards
Might a new guide for dummies be required ?

I'm one and I'd have no idea where to start.  :scared:
I've read this forum several times and as is started in this post we, yes me as well, need a upgrade for dummies step by step guide. It's confusing to read to replace ecomb from 8 with the one from 7 and then what?? You can now roll back upgrades? That's great if I read that correctly but chances are high I didn't. There are some pretty incredibly talented users in this form and if one or a few could help those of us who need the upgrades for dummies methods I think we and everyone else who is trying to do the upgrade and failing or just afraid to try would be very grateful.

Does please and thank you work?  :-+

You have not read.
This message is mandatory to read:

http://www.eevblog.com/forum/testgear/hack-of-sigllent-spectrum-analyzer-ssa3021x/msg1069844/#msg1069844

self-censorship: <deleted funny paragraph>
« Last Edit: January 03, 2017, 10:16:48 PM by rf-loop »
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Online TurboTom

  • Frequent Contributor
  • **
  • Posts: 295
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #201 on: January 03, 2017, 08:57:38 PM »
As far as I know, so far nobody has been able to run a "proper" update after the manual "downgrade" from F/W 8.01 to 7.07 by just exchanging the "ecomb" application file. Since most (all??) of those who contributed to the "DIY improvements" of the instrument so far own older machines that initially had FW 7.0x installed and thus have the options and full bandwidth active allready, there won't be much motivation for them for further experimentation.

To "properly" hack a machine that came with F/W 8.01, the script of the 7.07 -> 8.01 update would have to be analyzed and checked if all the steps that are executed in there could be reversed. Only if this is possible, a downgrade to 7.0x would be an option that permits that application of the "old" hack and re-update to 8.01 with the standard update file.

I showed a method to enable the "test mode" with all the options, full frequency range and even 3MHz and 1Hz RBW active. I'm pretty sure that Siglent will lock this hole with the next F/W update. This modification and also the reverse functionality could be easily put in a script. But I also think that those who tamper with their machines should be knowing what they are doing. There's always a risk of bricking the instrument when messing with it in such a way and in my opinion (others may have a different one...), some basic knowledge of the operating system and what's going on internally will be the best insurance from fatal (to the instrument that is) errors. And I guess the information found in this thread makes it almost as easy as it gets to apply the improvements. It's all within the last four pages of the thread.

Just noticed, rf-loop made it even easier for the newbies... So be sure to cut&paste and save a copy of his post before he deletes it again (as he told he will -- sorry, too late...).

Cheers,
Thomas
« Last Edit: January 03, 2017, 11:23:58 PM by TurboTom »
 

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #202 on: January 03, 2017, 09:34:09 PM »
TurboTom is correct:

Onwers of devices shipped with FW prior to P08.01 have had the opportunity to hack their device and ENABLE the missing options. These stay enabled after the P08.01 upgrade, except 3MHz and 1Hz RBW.

On top of that, by removing/renaming the already mentioned files, the P08.01 firmware will assume that it is in manufacturer mode, where ALL OPTIONS are enabled for an unknown serial number.

Conclusion:

1) The hack is permanent for older devices (if done correctly).
2) The hack is temporary for all devices (including new devices shipped with P08.01) on FW P08.01.
3) Next FW will probably invalidate the easy P08.01 hack.

History of hacks:

1) A "werewolf mode" FW appeared by accident on SIGLENT.COM, that enabled all options (P05)
2) The Telnet login/password was discovered
3) It was discovered that the timed options could be made permanent by putting silly values in them (this would lead to a non-permanent hack upon P08.01 upgrade)
4) It was discovered that all options could be autorised by changing missing options status to TRUE
5) Siglent ceased using a simple file listing TRUE/FALSE on options and instead uses the corresponding activation keys starting with P08.01
6) It was discovered that deleting/renaming 4 files, all options get authorised by default - as the device behaves as a stock device without serial number

Conclusion:

1) Everyone right now can enable all options
2) If a newer FW is released, do not upgrade, if you want maintain the hacked status
3) Existing users with hacked device are not that keen to do experiments, as the machine costs 1500 Euro (+VAT) and can be damaged by doing so
4) Siglent may not be "hunting" the hackers but are certainly closing the doors enabling the hacks
5) Did the hack increase sales? I would say yes (at least that was a big motivation for me to get the device, as it made it much more attractive). Will Siglent be permissive because of that? Nobody knows!
6) If you cannot be bothered to read a thread with JUST 9 PAGES, then you are not in a position to demand anything!  ;)

Regards,
Vitor
 
The following users thanked this post: videobruce, nugglix, tefe

Offline lz1pro

  • Contributor
  • Posts: 7
  • Country: bg
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #203 on: January 04, 2017, 06:30:55 AM »
Hello to all and Happy New Year!

I'm new in this forum. So I broke my new SSA3000X whit fw 08.01 .

After attempt to downgrade  to 7.07 whit copy file ecomb broke my NAND rootfs. The problem is on the screen I only see the Siglent logo and nothing happens after that.
I still have access via UART interface and U-boot.
Please, can anybody help to restore my NAND?

I have a backup copy of firmdata0 and /usr/bin/siglent/usr/backup/.

Regards
Yanko
 
« Last Edit: January 04, 2017, 06:38:02 AM by lz1pro »
 

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #204 on: January 04, 2017, 07:25:52 AM »
How did you break the NAND rootfs? Please give as much info as possible.

@all: Somewhere (can't remember) I uploaded a tool that extracts the firmware contents to an almost regular ZIP archive. You can then uncompress most of it.

Doing so will show you 2-3 shell batchfiles (*.sh), one is called "siglentlib.sh". It kind of shows what is done during the upgrade.

Since you can decompress any firmware version, you can i.e. compare the differences between the P07.07 and the P08.01 upgrade.

Hope this helps.

Regards,
Vitor
 

Online TurboTom

  • Frequent Contributor
  • **
  • Posts: 295
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #205 on: January 04, 2017, 10:22:56 AM »
@lz1pro

Could Siglent have a real problem here? Your failure mode appears very much similar to Jobber's: http://www.eevblog.com/forum/testgear/hack-of-sigllent-spectrum-analyzer-ssa3021x/msg1088378/#msg1088378 .
Yet, he reported that this happened on his instrument during the attempt to update from native 7.07 to 8.01. We should really keep an eye on this. Could it be possible that Siglent got hold of a series of faulty or counterfeit NAND flash chips? The error message is a clear indication of a faulty block in the NAND that should have been mapped out.
If your SSA is still in the warranty period, I would consider to have it replaced. It shouldn't be possible to trace your hacking attempts easily with this kind of error.

Good luck,
Thomas
 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #206 on: January 04, 2017, 10:32:44 AM »
@lz1pro

Could Siglent have a real problem here? Your failure mode appears very much similar to Jobber's: http://www.eevblog.com/forum/testgear/hack-of-sigllent-spectrum-analyzer-ssa3021x/msg1088378/#msg1088378 .
Yet, he reported that this happened on his instrument during the attempt to update from native 7.07 to 8.01. We should really keep an eye on this. Could it be possible that Siglent got hold of a series of faulty or counterfeit NAND flash chips? The error message is a clear indication of a faulty block in the NAND that should have been mapped out.
If your SSA is still in the warranty period, I would consider to have it replaced. It shouldn't be possible to trace your hacking attempts easily with this kind of error.

Good luck,
Thomas
Sadly this may not be the case, check the changelog for Version: P08.01:

5. After this firmware, do not support downgrade operation

http://www.siglentamerica.com/gjjrj-xq.aspx?id=4973&tid=15

This may be something we all need take note of.
Avid Rabid Hobbyist & NZ Siglent Distributor
 

Offline lz1pro

  • Contributor
  • Posts: 7
  • Country: bg
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #207 on: January 04, 2017, 06:02:06 PM »
How did you break the NAND rootfs? Please give as much info as possible.

@all: Somewhere (can't remember) I uploaded a tool that extracts the firmware contents to an almost regular ZIP archive. You can then uncompress most of it.

Doing so will show you 2-3 shell batchfiles (*.sh), one is called "siglentlib.sh". It kind of shows what is done during the upgrade.

Since you can decompress any firmware version, you can i.e. compare the differences between the P07.07 and the P08.01 upgrade.

Hope this helps.

Regards,
Vitor

It's a good idea to start play with "siglentlib.sh", but first I need to boot from an SD card to can access shell. I trying to find image to boot from SD card, but without success.
Any suggestion will be fine.

Regards,
Yanko
 

Offline KeBeNe

  • Contributor
  • Posts: 16
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #208 on: January 05, 2017, 04:23:14 AM »

Hello,

I have the same problem as lz1pro with the hack, device was delivered with 8.01.

regards
 

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #209 on: January 05, 2017, 04:59:34 AM »
Neither of you describe what you guys did that led to breaking the root filesystem!

Please explain step by step what you did and when your device broke.

It won't be easy to recover, as I at least have no idea how to boot, flash or install a new rootfs.

I think the answer is somewhere in the siglentlib.sh file. But I guess you need a working fs to start with.

In worst case scenario you need to JTAG the flash, but for that you need a flash dump. This again needs someone with a good device to open it (losing warranty ans risking damage), in order to dump the flash contents.

Perhaps there is an easier way, but I guess nobody knows how to do that.

Is there anything you can do from the serial shell?

Also, I agree with TurboTom: just request a repair under warranty claiming that this happens during a firmware upgrade...

Regards,
Vitor
 

Offline lz1pro

  • Contributor
  • Posts: 7
  • Country: bg
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #210 on: January 05, 2017, 05:11:50 AM »
@KeBeNe
Hello here,
can you tell  when is done, after attempt to mount the rootfs or command like this "mount -o remount,rw /"?
It is will be helpful for another user that  tray to downgrade.
Hire is the link whit same problem on another device: http://linux-mtd.infradead.narkive.com/aO9xNZvZ/temporarily-remounting-rootfs-as-rw-leads-to-kernel-panic-on-reboot

Regards,
Yanko
 

Online nctnico

  • Super Contributor
  • ***
  • Posts: 13285
  • Country: nl
    • NCT Developments
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #211 on: January 05, 2017, 05:29:55 AM »
It is very important to use the 'sync' command before cycling power because otherwise data may not be written to the filesystem yet which leads to incomplete or missing files.
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 

Offline janekivi

  • Frequent Contributor
  • **
  • Posts: 266
  • Country: ee
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #212 on: January 05, 2017, 05:36:12 AM »
Somewhere I posted 08.01 in zip format and decoded nsp_data_b too.
In img files I look with ubidump, maybe there is better utility for this.

08.01.zip firmware
 
The following users thanked this post: kado, fact

Offline KeBeNe

  • Contributor
  • Posts: 16
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #213 on: January 05, 2017, 02:54:40 PM »
Hello,

I've done,

-FW 7.07 (Siglent FW-tool + 7zip)
-ecomb from FW7.07 to usb stick
-SSA3021X connected via Telnet (Putty)
-Login: root, PW: ding1234 - all ok
- first, backup "cp -R /usr/bin/siglent /usr/bin/siglent/usr/mass_storage/U-disk0/SSA3021x_backup" -ok
- then "mount rootfs -o remount, rw" -ok
- "cd/usr/bin/siglent" -ok
- "cp/usr/bin/siglent/usr/mass_storage/U-disk0/ecomb" -ok
- "sync" -ok
- "mount rootfs -o remount, ro" -ok
- "shutdown -r" -ok
As far as everything ok, device makes a reboot, downgrade to 7.07 but still not possible.

I thought, I switch times and again, so a complete reboot, then the device stopped at "Siglent", no more start


regards René
« Last Edit: January 05, 2017, 03:10:20 PM by KeBeNe »
 

Online ExplodingLemur

  • Contributor
  • Posts: 6
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #214 on: January 05, 2017, 03:12:20 PM »
Does anyone have the 7.07 firmware image converted to a zip file?  I want to compare the upgrade scripts.  I think an 8.01 device can be reverted to 7.07 with some manual file copies.
 

Online ExplodingLemur

  • Contributor
  • Posts: 6
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #215 on: January 05, 2017, 03:14:47 PM »
KeBeNe, at this point can you still get a shell on the device?  If so I'll try to get you a set of instructions.
 

Online TurboTom

  • Frequent Contributor
  • **
  • Posts: 295
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #216 on: January 05, 2017, 07:00:19 PM »
I think when messing around with ecomb, it is mandatory to first stop this process since that's the main application that's running in background.

Type "ps [enter]" to show the processes that are currently running on the system. Note the process number of ecomb, let's assume it's 374.
To terminate the process, type "kill 374 [enter]". After this, repeat the "ps" command to make sure ecomb is no longer running.

After this, it should be less risky to copy / replace it but anyway, my own experiments with this didn't show any substantial use of it, at least as long as the "firmdata0 hack" is available. Actually, I would recommend to just leave the root FS mounted read-only and don't mess with it anymore (of course this wouldn't help those who already have a broken machine).

All the best,
Thomas
 
The following users thanked this post: rf-loop, KeBeNe, tautech, ExplodingLemur, DL4RAJ

Offline fact

  • Contributor
  • Posts: 13
  • Country: nl
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #217 on: January 05, 2017, 10:12:43 PM »
@janekivi What utility do you use to convert the ADS-file to a fully extractable zip?
 

Offline lz1pro

  • Contributor
  • Posts: 7
  • Country: bg
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #218 on: January 06, 2017, 01:30:12 AM »
Hi to all,

My SSA3000X is back to living. :)
So I want  to say BIG Thanks to TurboTom for help and support.
Thank you very much Thomas!

Regards,
Yanko
 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #219 on: January 06, 2017, 01:43:02 AM »
Hi to all,

My SSA3000X is back to living. :)
So I want  to say BIG Thanks to TurboTom for help and support.
Thank you very much Thomas!

Regards,
Yanko
Nice.  :-+

It would be polite to further thank Tom, use the button.
Avid Rabid Hobbyist & NZ Siglent Distributor
 

Offline fact

  • Contributor
  • Posts: 13
  • Country: nl
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #220 on: January 06, 2017, 03:03:47 AM »
Experimenting with a 'clean" TI SD-card image gave this output:

Code: [Select]
P
U-Boot SPL 2013.01.01 (Jan 11 2016 - 14:14:06)
Start buzzer++
Stop buzzer--nand_init+++++
nand_init-----
>>spl_load_lcd_fpga++
LCD init()++
Lcd_Init()++
SetUpLCD()++
SetUpLCD()--
len=1228852, height=600, width=1024
Logo from nandflash: base=0x81000000; end=0x8112c01f; end-base=0x12c01f; rwsize=0x12c020; r=0x0
Lcd_Init()--
>>spl_load_lcd_fpga--


U-Boot 2013.01.01 (Jan 11 2016 - 14:14:06)

I2C:   ready
DRAM:  128 MiB
NAND:  256 MiB
MMC:   OMAP SD/MMC: 0, OMAP SD/MMC: 1
Using default environment

set_default_env::4309
Net:   <ethaddr> not set. Validating first E-fuse MAC
cpsw
Hit any key to stop autoboot
mmc0 is current device
SD/MMC found on device 0
reading uEnv.txt
** Unable to read file uEnv.txt **
reading uImage
** Unable to read file uImage **
** File not found /boot/uImage **
Could not find uImage
U-Boot#

So adding a valid uEnv.txt and uImage might do the trick.....
 

Offline KeBeNe

  • Contributor
  • Posts: 16
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #221 on: January 06, 2017, 03:52:06 AM »
 

Offline KeBeNe

  • Contributor
  • Posts: 16
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #222 on: January 06, 2017, 04:01:20 AM »
KeBeNe, at this point can you still get a shell on the device?  If so I'll try to get you a set of instructions.

Thanks for the offer, I have returned my device and get a new one, I would not want to destroy the guarantee seal.

Perhaps lz1pro can briefly describe how he has made it to bring his device back to life.
 

Offline lz1pro

  • Contributor
  • Posts: 7
  • Country: bg
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #223 on: January 06, 2017, 04:52:49 AM »
In my way to restore need to access SD card slot and UART interface. So there is no possibility to access them, without manipulate the warranty sticker.
Regards,
Yanko
 

Offline fact

  • Contributor
  • Posts: 13
  • Country: nl
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #224 on: January 06, 2017, 06:02:07 AM »
You could always drill a hole in the side for access. The sticker remains undamaged that way.  :)
 
The following users thanked this post: lz1pro

Offline fact

  • Contributor
  • Posts: 13
  • Country: nl
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #225 on: January 06, 2017, 06:15:32 AM »
@KeBeNe
The tool transforms the ADS in a crippled zip where some files have invalid CRC's making it impossible to extract these files.
I'm looking for a way to get all files from the ADS like janekivi's zip file allows.
 

Offline janekivi

  • Frequent Contributor
  • **
  • Posts: 266
  • Country: ee
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #226 on: January 06, 2017, 06:20:37 AM »
You could always drill a hole in the side for access. The sticker remains undamaged that way.  :)
Once video card broke in desktop computer. After removing side grill for cpu fan and
unscrewing psu 4 screws I managed to get it out without scratch on sticker...

Edit -> Sorry, was wrong url before:
Here is older firmware V100.01.02.07.07.zip firmware
--------------------------------------------------------

About those things we talk here:
http://www.eevblog.com/forum/testgear/siglent-ads-firmware-file-format/
« Last Edit: January 07, 2017, 10:41:59 PM by janekivi »
 
The following users thanked this post: videobruce, fact

Offline fact

  • Contributor
  • Posts: 13
  • Country: nl
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #227 on: January 06, 2017, 06:49:36 AM »
The link in your last post also points to 8.01.
 
The following users thanked this post: kado

Offline lz1pro

  • Contributor
  • Posts: 7
  • Country: bg
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #228 on: January 07, 2017, 02:45:17 AM »
Hi,
Is there anyone in the forum with firmware 7.07?

Regards,
Yanko
 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #229 on: January 07, 2017, 05:33:19 AM »
Avid Rabid Hobbyist & NZ Siglent Distributor
 

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #230 on: January 07, 2017, 05:47:51 AM »
@tautech: Lz1pro is of course looking for someone with P07.07 installed, so that a flash dump can be made.

Regards,
Vitor
 

Offline Johncanfield

  • Contributor
  • Posts: 33
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #231 on: January 07, 2017, 08:41:22 AM »
Just received my 3021X yesterday  :-+. Saelig just received a shipment about a week ago and they put one on the truck for me the same day. This one is pretty fresh - just calibrated 13 December.
 

Offline bozidarms

  • Regular Contributor
  • *
  • Posts: 94
  • Country: ch
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #232 on: January 07, 2017, 07:53:03 PM »
Welcome to the club, Johncanfield.
Have a pleasant time, with this wonderful instrument.
Regards
 
The following users thanked this post: Johncanfield

Offline ebclr

  • Super Contributor
  • ***
  • Posts: 1569
  • Country: 00
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #233 on: January 07, 2017, 08:05:11 PM »
Found on amazing terminal

http://mobaxterm.mobatek.net/

Another SSA3021X upgraded sucessfull
« Last Edit: January 07, 2017, 08:30:35 PM by ebclr »
 
The following users thanked this post: nugglix

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #234 on: January 08, 2017, 06:08:10 AM »
Found on amazing terminal

http://mobaxterm.mobatek.net/

Another SSA3021X upgraded sucessfull
Firmware version ?
Avid Rabid Hobbyist & NZ Siglent Distributor
 

Offline ebclr

  • Super Contributor
  • ***
  • Posts: 1569
  • Country: 00
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #235 on: January 08, 2017, 12:37:12 PM »
07.03.00
 
The following users thanked this post: tautech

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #236 on: January 08, 2017, 01:10:49 PM »
07.03.00
Thanks, that's quite an early one. The later ones are here:
http://www.siglentamerica.com/gjjrj.aspx?id=15&page=1
8.01 is the version that attempts to restrict FW downgrade and improvements.
Check the "More Information" tabs and info in this thread before you select a version that you'd consider installing.

Enjoy.  ;)
Avid Rabid Hobbyist & NZ Siglent Distributor
 

Online ExplodingLemur

  • Contributor
  • Posts: 6
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #237 on: January 08, 2017, 01:37:30 PM »
I've got 8.01 installed on mine (just arrived today), and I've been looking at the 8.01 upgrade image scripts to see what I'd need to do to back this out to a prior version.  However I'm unable to mount the root filesystem as RW:
Code: [Select]
[email protected]:/usr/bin/siglent# mount rootfs -o remount,rw
mount: mounting rootfs on / failed: Bad message

/proc/mounts shows:
Code: [Select]
rootfs / rootfs rw 0 0
ubi0:rootfs / ubifs ro,relatime 0 0

I'm guessing there's a u-boot option that flags the root partition as read-only?
Aha, looks like that's set at boot, with
Code: [Select]
console=ttyO0,115200n8 quiet root=ubi0:rootfs ro ubi.mtd=7,2048 rootfstype=ubifs rootwait=1t ip=none (visible in /proc/cmdline)

So, I'm not too familiar with u-boot, and even less so with UBIFS on top of UBI on top of MTD.  I've just tried attaching another UBI device to the U-Boot and U-Boot Env MTD devices with no luck.
Code: [Select]
[email protected]:/etc# ubiattach -p /dev/mtd4ro -d 3
ubiattach: error!: cannot attach "/dev/mtd4ro"
           error 22 (Invalid argument)
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #238 on: January 08, 2017, 08:01:01 PM »
I've got 8.01 installed on mine (just arrived today), and I've been looking at the 8.01 upgrade image scripts to see what I'd need to do to back this out to a prior version.

Why?????

Why you do not just use original genuine FW8.01 in "super mode"?
Much less any risk.
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Offline DL4RAJ

  • Contributor
  • Posts: 28
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #239 on: January 08, 2017, 09:30:23 PM »
I've got 8.01 installed on mine (just arrived today), and I've been looking at the 8.01 upgrade image scripts to see what I'd need to do to back this out to a prior version.

Why?????

Why you do not just use original genuine FW8.01 in "super mode"?
Much less any risk.

That's exactly what I'm asking myself since a while.
Why are people with FW8.01 messing around with downgrade efforts braking possibly the OS of the SSA
instead of make use of the super simple and safe modification into "super mode"
which Turbo Tom has provided in this thread??
Nothing could be easier and it is easily reversible.

Regards

 

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #240 on: January 08, 2017, 10:42:25 PM »
Hi,


(1) Flash backup

@ebclr: Would you be willing to do a backup of your three partitions (ubi0_0, ubi1_0 and ubi2_0, which correspond to rootfs, usr and firmware0)?

All you need to do is:

1) telnet to your SSA
2) insert a USB disk
3) execute these three commands:
dd if=/dev/ubi0_0 of=/usr/bin/siglent/usr/mass_storage/U-disk0/ubi0_0-P0703.img
dd if=/dev/ubi1_0 of=/usr/bin/siglent/usr/mass_storage/U-disk0/ubi1_0-P0703.img
dd if=/dev/ubi2_0 of=/usr/bin/siglent/usr/mass_storage/U-disk0/ubi2_0-P0703.img

@all: It would be great to have these backups for P07.07, so please, if anyone has P07.07 installed, can you do such backup?

(2) Flash

@all: The filesystems used by the SSA reside on a flash memory chip. There are three partitions: the rootfs partition with the OS, the usr partition with the ecomb file amongst other and the firmware0 partition.

My guess to why some SSA broke was this:

a) The user replaced ecomb from P08.08 with ecomb from P07.07.
b) The user run the P07.07 upgrade, because this ecomb will accept the firmware update script of P07.07 - before P0.08 there was no downgrade check.
c) The SSA got broke. Why? Because the P07.07 just assumed that the partition size for UBI1_0 and UBI2_0 were correct (they never changed before). So, without resizing the rootfs (UBI0_0) partition, the usr and firmware0 partition are flashed starting from the WRONG flash memory address, thus effectively overwriting part of the rootfs!

Stupid but easy mistake...

(3)

@ExplodingLemur:

You are heading on fast lane to brick your SSA!

I think that the only way to downgrade to P07.07 is by writing a modified upgrade script, which uses the flash memory address of P07.07 to make sure, all partitions are correctly resized. The problem is, that I am not sure if the correct flash address is known/written in former upgrade batch files, because apparently it used to be the same. This is all guesses I am doing.

So, first of all, we need to figure out the memory organisation of the flash file to then edit the siglent.sh and edit the memory addresses.

Also, we need a copy of the P07.xx rootfs partition, which seems to be missing in the P07.xx fimrware upgrade - or - we need to disable the check that verifies if that partition needs upgrade.

(4)

@all: The question is: but WHY? Why do people want to downgrade, if there is a fully working hack for P08.01?

Answer: the next firmware might have all holes closed and be not hackable - would be nice to have a plan B then!

And then, this thread is about hacking: hacking is fun and insteresting and there might be no other reason...

Regards,
Vitor
« Last Edit: January 08, 2017, 10:47:12 PM by Bicurico »
 

Online TurboTom

  • Frequent Contributor
  • **
  • Posts: 295
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #241 on: January 09, 2017, 12:46:42 AM »
As it appears, the /dev/ubi?_? devices are not the raw file systems, moreover they are not the complete contents of the NAND. I rather recommend to make 13 images of the /dev/mtdblock0 ... /dev/mtdblock12 devices in order to have a backup of the complete NAND with (from the O/S) hidden partitions and such.

Usage / Purpose of the NAND Flash Partitions in Siglent SSA3000X F/W 8.01

Device No.    | Size kByte  | Usage
----------------+---------------+------------------------------------------------------------------------
mtdblock0    | 128             | MLO (Memory Locator, X-Loader -- first file to be accessed during boot)
mtdblock1    | 128             | 1st copy of MLO
mtdblock2    | 128             | 2nd copy of MLO
mtdblock3    | 128             | 3rd copy of MLO
mtdblock4    | 1920           | U-Boot image
mtdblock5    | 128             | U-Boot environment / not used currently
mtdblock6    | 3072           | Siglent boot logo
mtdblock7    | 44032         | root F/S (ubi0_0)
mtdblock8    | 6144           | Linux Kernel Image
mtdblock9    | 6144           | ???FPGA Configuration???
mtdblock10  | 51200         | FIRMDATA0 (ubi2_0 -- /usr/bin/siglent/firmdata0 )
mtdblock11  | 51200         | FIRMDATA1 / not used currently
mtdblock12  | 97792         | DATAFS (ubi1_0 -- /usr/bin/siglent/usr )


So to modify Bicurico's first paragraph, please let me suggest to do the following steps:

_________

1) telnet to your SSA
2) insert a USB disk
3) execute these commands (sorry, more than three...):
ps
  - now look for the process number of ecomb (it's the first number in the line that ends with ./ecomb, say it's 723)
kill 723 (or whichever process number your ecomb instance had assigned)

dd if=/dev/mtdblock0 of=/usr/bin/siglent/usr/mass_storage/U-disk0/mtdblock0-P0703.img
dd if=/dev/mtdblock1 of=/usr/bin/siglent/usr/mass_storage/U-disk0/mtdblock1-P0703.img
dd if=/dev/mtdblock2 of=/usr/bin/siglent/usr/mass_storage/U-disk0/mtdblock2-P0703.img
dd if=/dev/mtdblock3 of=/usr/bin/siglent/usr/mass_storage/U-disk0/mtdblock3-P0703.img
dd if=/dev/mtdblock4 of=/usr/bin/siglent/usr/mass_storage/U-disk0/mtdblock4-P0703.img
dd if=/dev/mtdblock5 of=/usr/bin/siglent/usr/mass_storage/U-disk0/mtdblock5-P0703.img
dd if=/dev/mtdblock6 of=/usr/bin/siglent/usr/mass_storage/U-disk0/mtdblock6-P0703.img
dd if=/dev/mtdblock7 of=/usr/bin/siglent/usr/mass_storage/U-disk0/mtdblock7-P0703.img
dd if=/dev/mtdblock8 of=/usr/bin/siglent/usr/mass_storage/U-disk0/mtdblock8-P0703.img
dd if=/dev/mtdblock9 of=/usr/bin/siglent/usr/mass_storage/U-disk0/mtdblock9-P0703.img
dd if=/dev/mtdblock10 of=/usr/bin/siglent/usr/mass_storage/U-disk0/mtdblock10-P0703.img
dd if=/dev/mtdblock11 of=/usr/bin/siglent/usr/mass_storage/U-disk0/mtdblock11-P0703.img
dd if=/dev/mtdblock12 of=/usr/bin/siglent/usr/mass_storage/U-disk0/mtdblock12-P0703.img

sync

shutdown -r now

_________

The advantage of having the mtdblock images is that they can be directly re-written to the NAND from the U-Boot shell in case a file system is really messed up. I'm not sure if this is directly possible with the ubi images.
I hope this makes sense...

Cheers,
Thomas
 

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #242 on: January 09, 2017, 01:07:20 AM »
Thanks TurboTom.

Indeed I am not that literate when it comes to filesystems...
...and their backup by means of dd.

It would be great to find a way to reflash this backup without having to open the SSA, hence avoiding any warranty loss.

I am not sure if that is possible: how to access the U-boot shell through ethernet? Is there any secret key-combination on power-up?

Regards,
Vitor
 

Online TurboTom

  • Frequent Contributor
  • **
  • Posts: 295
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #243 on: January 09, 2017, 02:03:24 AM »
I don't think it would be possible to interrupt U-Boot without opening the SSA's enclosure. That is, unless Siglent utilized the unused contacts of the RJ45 100 base T interface (which are four) to route the UART interface outside (on some Hantek gear it is arranged that way). But anyway, in order to make a file system image available to U-Boot, the box has to be opened since U-Boot doesn't provide a driver for a USB disk. This is only possible via the internal Micro SD card slot (or the UART interface, but that's less comfortable and takes ages).

There are instructions in many threads how to remove a warranty void sticker without breaking it, i may add that application of a moderate amount of heat (hair dryer or the like) can make a big difference.

So in my opinion, opening the box is a real no-brainer, and an individual, before tampering with these instruments, always has the choice to pay for the added functionality without risking warranty (okay 1Hz and 3MHz RBW cannot be licensed from Siglent). Whenever I'm playing around with one of my "gadgets", I'm completely aware of the small risk of bricking it and if it happens, it's in my own responsibility and nobody else's. So if the warranty void sticker gets damaged, then losing the warranty is simply the price you have to pay for hacking... A fair deal I would say.

Cheers,
Thomas

 

Offline fact

  • Contributor
  • Posts: 13
  • Country: nl
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #244 on: January 09, 2017, 02:10:31 AM »
For people suffering a bricked 8.01 SSA (like me), it would be nice to have these mtdblock images too for 8.01.
So if anyone is up to it.......
 

Offline Johncanfield

  • Contributor
  • Posts: 33
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #245 on: January 09, 2017, 02:21:42 AM »
Just received my 3021X yesterday  :-+. Saelig just received a shipment about a week ago and they put one on the truck for me the same day. This one is pretty fresh - just calibrated 13 December.
I'm surprised mine left the factory with 7.03 firmware. I suppose I should not upgrade in case I get brave enough to hack it.
 
The following users thanked this post: MasterTech

Online Emo

  • Contributor
  • Posts: 41
  • Country: nl
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #246 on: January 09, 2017, 03:25:17 AM »
Johncanfield,

Are you sure you have FW 7.03 and not HW 7.03? in the image in your earlier post it says SW 1.2.8.1 = FW 8.01
 
The following users thanked this post: Johncanfield

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #247 on: January 09, 2017, 05:21:08 AM »
Johncanfield,

Are you sure you have FW 7.03 and not HW 7.03? in the image in your earlier post it says SW 1.2.8.1 = FW 8.01
Quite correct Emo, it's an easy mistake to make. John's is indeed loaded with 8.1.
Avid Rabid Hobbyist & NZ Siglent Distributor
 

Offline Johncanfield

  • Contributor
  • Posts: 33
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #248 on: January 09, 2017, 06:48:48 AM »
Ah-so. I originally thought HW meant hardware so I was correct.  Oh well.  :palm:
 

Offline jobber

  • Contributor
  • Posts: 9
  • Country: ru
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #249 on: January 10, 2017, 07:29:49 AM »
Hey all!

Let me just quickly recap my story about bricked SSA. I have sent it back for repair (under warranty) and received it upgraded to the latest version and fully unlocked! ;D It looks like they only flashed the faulty partition and left the user data intact. I am not sure if they didn't notice the modifications or they just let me go with it.  I would recommend anyone with bricked device that is still under warranty to try and send it back. It could be the easiest solution.

Successful hacking in 2017!
 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #250 on: January 10, 2017, 08:14:18 AM »
Hey all!

Let me just quickly recap my story about bricked SSA. I have sent it back for repair (under warranty) and received it upgraded to the latest version and fully unlocked! ;D It looks like they only flashed the faulty partition and left the user data intact. I am not sure if they didn't notice the modifications or they just let me go with it.  I would recommend anyone with bricked device that is still under warranty to try and send it back. It could be the easiest solution.

Successful hacking in 2017!
We ask who is "they" ?  :-//
Avid Rabid Hobbyist & NZ Siglent Distributor
 

Offline ebclr

  • Super Contributor
  • ***
  • Posts: 1569
  • Country: 00
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #251 on: January 10, 2017, 09:58:36 AM »
Flash dump 100.0..02.07.07

http://www.luximetro.com/SSA3021X.rar
 
The following users thanked this post: Pinkus, KeBeNe, fact, ekeppel, lz1pro

Offline jobber

  • Contributor
  • Posts: 9
  • Country: ru
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #252 on: January 15, 2017, 09:23:17 AM »
Hey all!

Let me just quickly recap my story about bricked SSA. I have sent it back for repair (under warranty) and received it upgraded to the latest version and fully unlocked! ;D It looks like they only flashed the faulty partition and left the user data intact. I am not sure if they didn't notice the modifications or they just let me go with it.  I would recommend anyone with bricked device that is still under warranty to try and send it back. It could be the easiest solution.

Successful hacking in 2017!
We ask who is "they" ?  :-//

Technicians at Siglent repair center  ;)
 
The following users thanked this post: tautech

Offline cesarpaz

  • Contributor
  • Posts: 9
  • Country: es
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #253 on: January 15, 2017, 11:04:09 AM »
Hello everyone.
After reading and deciding which spectrum analyzer I buy, I am thinking of buying a Siglent SSA3021X and then converting it into a Siglent SSA3032X. I would like to know what is the opinion of the final result to the users who have made this conversion, is it worth? Give some problems Thank you very much.
 

Offline ebclr

  • Super Contributor
  • ***
  • Posts: 1569
  • Country: 00
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #254 on: January 16, 2017, 06:10:32 PM »
Until firmware 7.07 flawless, and easy
 

Offline bozidarms

  • Regular Contributor
  • *
  • Posts: 94
  • Country: ch
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #255 on: January 16, 2017, 07:25:15 PM »
Till now, everything OK / marvelous piece of equipment!
 

Offline radiotech9409

  • Newbie
  • Posts: 4
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #256 on: January 17, 2017, 02:04:00 AM »
i got my SSA3021x a couple days ago.  It came with sw 1.2.8.1.  I performed the patch_instruction_new provided by TurboTom.  However, it appears that the latest firmware hides/places the file NSP_system_info.xml somewhere else.  When i performed the back up step for the NSP_system_info, telnet gave a message:  file was not found.  i created one based on turboTom's instruction and wrote it in the system.  However, it seems that the file does not do anything.  Any help is appreciated.
 

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #257 on: January 17, 2017, 02:11:04 AM »
Hi,

I would suggest:

1) Do a full backup using the dd command as described earlier in this thread. In worst case scenario, this will allow you to fully restore the flash contents.
2) Do a second backup using the cp command and copy all relevant files/folder, which has been explained, too. This is required to restore the device prior to RMA or firmware upgrade.
3) Take your time to navigate in the telnet shell through all folder, to get yourself familiar with file structure. This is required to avoid problems/worst case scenario.
4) The hack involves renaming three files to dummy names. Once you figure it out, it takes you 1 minute. Then all the hacking fun is gone. Unless you REALLY need the enhanced frequency range, take your time.
5) Learn how to use the instrument before hacking it - that will allow you to check if it is working correctly.

Regards,
Vitor
 

Offline radiotech9409

  • Newbie
  • Posts: 4
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #258 on: January 17, 2017, 01:55:50 PM »
it seems that you referred to TurboTom's post that pointed to:"Just noticed, rf-loop made it even easier for the newbies... So be sure to cut&paste and save a copy of his post before he deletes it again (as he told he will -- sorry, too late...).  I came a bit late, so I didn't have the chance to read rf-loop's instruction.  I wonder if anyone got a hold of the rf-loop's instruction?
 

Offline radiotech9409

  • Newbie
  • Posts: 4
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #259 on: January 17, 2017, 02:44:58 PM »
Thanks so much.  Got your instructions.  I will post my progress later.
 

Offline steverino

  • Regular Contributor
  • *
  • Posts: 177
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #260 on: January 18, 2017, 01:12:11 PM »
Thanks so much.  Got your instructions.  I will post my progress later.
Curiosity has me wondering if I missed something in the referenced rf-loop instructions.  Could someone please forward these instructions to me.

Thanks, Steve
 

Offline pe1oxp

  • Contributor
  • Posts: 34
  • Country: nl
  • ~ Life is too short for QRP ~
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #261 on: January 18, 2017, 06:04:49 PM »
it seems that you referred to TurboTom's post that pointed to:"Just noticed, rf-loop made it even easier for the newbies... So be sure to cut&paste and save a copy of his post before he deletes it again (as he told he will -- sorry, too late...).  I came a bit late, so I didn't have the chance to read rf-loop's instruction.  I wonder if anyone got a hold of the rf-loop's instruction?

That's why I couldn't find the instructions also? I'm also interrested in upgrading my SSA3021x
Can someone help me with these instructions, I have read the thread but not so familiar with Telnet and the used file system
 

Offline ebclr

  • Super Contributor
  • ***
  • Posts: 1569
  • Country: 00
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #262 on: January 19, 2017, 12:15:54 AM »
1st step install mobaxterm

Connect the instrument to your router

turn the instrument, and see if they get a IP from your router by dhcp

Use that ip to connect to the instrument

user root
pasword ding1234

 
The following users thanked this post: steverino

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #263 on: January 20, 2017, 10:29:19 PM »

<deleted: error>
« Last Edit: January 21, 2017, 07:34:40 AM by rf-loop »
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Offline sq6emm

  • Newbie
  • Posts: 2
  • Country: pl
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #264 on: January 20, 2017, 10:39:28 PM »
Just for your information.

Ordered SSA3021X on 2016/01/10 in Poland. Distributor said it will be with 1.2.8.1 firmware  :(

Today 2016/01/20 SSA arrived. Unboxed, turned on and...

Voila! 100.01.02.07.07 !

10 minutes later, with NSP...xml file hack and reboot I have SSA3022X with ALL OPTIONS Sta: ON Vaild: Permanent!

Thank you so much EEVBLOG CONTRIBUTORS!:)

Regards,

Dawid SQ6EMM
« Last Edit: January 20, 2017, 11:16:54 PM by sq6emm »
 

Offline pe1oxp

  • Contributor
  • Posts: 34
  • Country: nl
  • ~ Life is too short for QRP ~
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #265 on: January 21, 2017, 03:53:57 AM »
Quote
Is it possible that some kind people who have this mysterious file can  share it here as message attachment?

Unfortunately I only have a printout of it to read it on my way home in the bus, thought I could save it when I came home from work.
Maybe someone saved the file?
« Last Edit: January 21, 2017, 09:46:40 AM by pe1oxp »
 

Online ExplodingLemur

  • Contributor
  • Posts: 6
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #266 on: January 21, 2017, 04:41:42 AM »
Unfortunately I only have a printout of it to read it on my way home in the bus, thought I could save it when I came home from work.
Maybe someone saved the file?

Can you snap a photo or scan it and put it up on imgur?  We could transcribe it from that.
 

Offline pe1oxp

  • Contributor
  • Posts: 34
  • Country: nl
  • ~ Life is too short for QRP ~
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #267 on: January 21, 2017, 04:51:03 AM »
Unfortunately I only have a printout of it to read it on my way home in the bus, thought I could save it when I came home from work.
Maybe someone saved the file?

Can you snap a photo or scan it and put it up on imgur?  We could transcribe it from that.

A scan will be possible when there is nobody else who has saved it.
I was just thinking and must have saved it on my computer at work. Otherwise it must be in the Temp-directory. I will have a look on Monday.
 
The following users thanked this post: rf-loop, ExplodingLemur

Offline kloetpatra

  • Contributor
  • Posts: 8
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #268 on: January 21, 2017, 05:28:19 AM »
Am I correct, that only Firmware versions till 1.02.07.07 can be unlocked so far?
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #269 on: January 21, 2017, 05:31:22 AM »
Am I correct, that only Firmware versions till 1.02.07.07 can be unlocked so far?

No. Please read this thread more carefully. ;)
« Last Edit: January 21, 2017, 07:42:45 PM by rf-loop »
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 
The following users thanked this post: ExplodingLemur

Offline pe1oxp

  • Contributor
  • Posts: 34
  • Country: nl
  • ~ Life is too short for QRP ~
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #270 on: January 21, 2017, 10:00:54 AM »
A scan will be possible when there is nobody else who has saved it.
I was just thinking and must have saved it on my computer at work. Otherwise it must be in the Temp-directory. I will have a look on Monday.


I did a quick search and found the information.
MD5 is: f2c4867771222a38f23ebb64d4420d5a
 
The following users thanked this post: steverino, tautech, nugglix, ExplodingLemur, DL4RAJ

Offline 3s1d

  • Contributor
  • Posts: 5
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #271 on: January 21, 2017, 11:16:37 AM »
Hi everybody,

I read through the whole thread (11pages, took me forever)... It started out great but the end is a bit frustrating.
I'd really like to buy and permanently unlock this device but it will most probably ship with 8.01  :--

As I understand it, nobody who has an unlock device, has had a look into the nsp_data_b file? Its supposed to be a XML file inside an UBI image? Maybe the the options are hidden there?

Greetinx
Juergen
 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #272 on: January 21, 2017, 08:26:23 PM »
A scan will be possible when there is nobody else who has saved it.
I was just thinking and must have saved it on my computer at work. Otherwise it must be in the Temp-directory. I will have a look on Monday.


I did a quick search and found the information.
MD5 is: f2c4867771222a38f23ebb64d4420d5a
And who would have thought the Chinese author of the .txt file you attached wrote such very good and easy to understand English.  :clap:  ;)
Avid Rabid Hobbyist & NZ Siglent Distributor
 

Offline pe1oxp

  • Contributor
  • Posts: 34
  • Country: nl
  • ~ Life is too short for QRP ~
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #273 on: January 23, 2017, 05:55:22 AM »
My source, the Chinese author forgot some lines in the description, he warned me to be careful

Do not use CHAPTER 2   Or  "full FLASH backup to USB" part in Chapter 8.
ERROR: Missing command lines.  Corrected version is under work.


Please be patient!
 
The following users thanked this post: videobruce

Offline papousek

  • Contributor
  • Posts: 13
  • Country: jp
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #274 on: January 31, 2017, 01:29:24 PM »
 :) :)
Thanks guys.
i got my SSA3021X for a few months, "UPGRADED" it to 3.2G with full options.
very nice SA, as well as my SDG2042X.  (@cesarpaz, yes, it worth the money
 

Offline kr5j

  • Contributor
  • Posts: 14
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #275 on: February 01, 2017, 08:11:33 AM »
Finally was able to view the GPS L1 signal with the SSA3021X. Settings were:

Frequency: 1575.42 MHz
Span: 70 MHz
Amplitude: -97.80 dBm, Pre-Amp On, Atten = 0 dB, Scale: 1 dB/Division
Trace: Max Hold
BW: RBW = VBW = 100 kHz

See screen save.
 

Offline kr5j

  • Contributor
  • Posts: 14
  • Country: us
Re: GPS Signal viewwed on a SSA3021X
« Reply #276 on: February 01, 2017, 08:32:33 AM »
I forgot to add the signal was from an amplified GPS antenna (looks like a small puck) by using a BNC T adapter so that the DC power could be connected to the antenna.
 

Offline KE5FX

  • Frequent Contributor
  • **
  • Posts: 692
  • Country: us
    • KE5FX.COM
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #277 on: February 01, 2017, 09:00:41 AM »
GPS signals are usually below the thermal floor.  Can you turn the antenna upside down or otherwise block it to verify that's what you're seeing?   You may be looking at the excess noise of the preamp, viewed through a SAW filter that's also inside the active antenna.
 

Offline kr5j

  • Contributor
  • Posts: 14
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #278 on: February 01, 2017, 02:46:43 PM »
I will try that tomorrow and get a screen save. I have another spectrum analyzer which shows the same waveform but it is an Agilent unit and has a much lower noise floor than the Siglent so the amplitude is more pronounced. We'll see if the scan looks the same or is flat when I flip the antenna over. Thanks for the idea.
 

Offline nugglix

  • Regular Contributor
  • *
  • Posts: 173
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #279 on: February 01, 2017, 06:58:10 PM »
Looks like this is not the right thread.
 

Offline kr5j

  • Contributor
  • Posts: 14
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #280 on: February 02, 2017, 09:18:03 AM »
Yep its just noise through a filter!
 

Offline KE5FX

  • Frequent Contributor
  • **
  • Posts: 692
  • Country: us
    • KE5FX.COM
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #281 on: February 02, 2017, 09:20:50 AM »
Yep its just noise through a filter!

Look on the bright side, you've "hacked" your spectrum analyzer to turn it into a noise figure meter! :)  It's on-topic after all.
 
The following users thanked this post: casinada

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #282 on: February 02, 2017, 07:30:55 PM »
Yep its just noise through a filter!

Look on the bright side, you've "hacked" your spectrum analyzer to turn it into a noise figure meter! :)  It's on-topic after all.

Technically this have nothing to do with hack - nothing. Exept that he used hacked SA. Without hack result is exactly same in this case.  Hack do not change any single thing what is affecting in this case AFAIK. If you have "alternative truth" in this matter I am happy if I hear it.
;)
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Offline nugglix

  • Regular Contributor
  • *
  • Posts: 173
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #283 on: February 03, 2017, 09:57:18 AM »
What feedback?
It's all described above.

And yes, it's solely your decision, you can't hold the "community" responsible is case of failure.
 

Offline videobruce

  • Frequent Contributor
  • **
  • Posts: 349
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #284 on: February 05, 2017, 05:09:36 AM »
Until firmware 7.07 flawless, and easy
"Easy"????
Easy for who, a VERY select few?  ???
 

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #285 on: February 05, 2017, 05:14:51 AM »
@videobruce: What do you need?

Regards,
Vitor
 

Offline videobruce

  • Frequent Contributor
  • **
  • Posts: 349
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #286 on: February 05, 2017, 06:35:52 AM »
WE don't need more u-boob videos.  What, no one reads anymore?

Ever try to highlight videos??   :--
 

Offline Kitt

  • Newbie
  • Posts: 4
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #287 on: February 08, 2017, 03:53:50 PM »
Hi everyone - My 3021 arrived 2 days ago and is still in the box.  No time to even open and check it.  I ordered it with TG.  As soon as I get chance I will take a look and see what its firmware is.  I suspect it is 8.01, so will be back with questions once I am ready to try and liberate it.

Cheers.
 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #288 on: February 08, 2017, 05:21:45 PM »
Hi everyone - My 3021 arrived 2 days ago and is still in the box.  No time to even open and check it.  I ordered it with TG.  As soon as I get chance I will take a look and see what its firmware is.  I suspect it is 8.01, so will be back with questions once I am ready to try and liberate it.

Cheers.
Welcome to the forum.

I think it will be 8.01, the last unit I got from the factory was 8.01.
Evidently it's not a problem, just do your homework and don't be in a hurry.
Avid Rabid Hobbyist & NZ Siglent Distributor
 

Offline pe1oxp

  • Contributor
  • Posts: 34
  • Country: nl
  • ~ Life is too short for QRP ~
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #289 on: February 10, 2017, 07:55:19 AM »
Our Chinese friend did some good work again, a new version of his Instructions to modify the SSA3021x is ready.
This Instructions replaces V0.3!
Thanks!

File MD5 sum: 007bc1ae20eb6835f993cbdd9ce64bd5
 
The following users thanked this post: tautech, ekeppel

Offline videobruce

  • Frequent Contributor
  • **
  • Posts: 349
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #290 on: February 10, 2017, 08:56:42 AM »
He sure knows how to spread things out..................
Too bad none are available 'till March 1 here.  :--
Quote
we checked with the warehouse in SOLON OHIO, and they have been experiencing delays due to the Asian holidays.
 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #291 on: February 10, 2017, 09:31:16 AM »
Our Chinese friend did some good work again, a new version of his Instructions to modify the SSA3021x is ready.
This Instructions replaces V0.3!
Thanks!

File MD5 sum: 007bc1ae20eb6835f993cbdd9ce64bd5
Don't you mean HER ?  ;)
Avid Rabid Hobbyist & NZ Siglent Distributor
 

Offline sq6emm

  • Newbie
  • Posts: 2
  • Country: pl
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #292 on: February 16, 2017, 12:47:54 AM »
Anyone knows "magic keys" that will allow to enter calibration menu in SSA? Something similar to magic keys on Rigol DSA?
 

Offline Mark11

  • Contributor
  • Posts: 5
  • Country: hr
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #293 on: February 20, 2017, 06:12:13 AM »
I want to backup all the files from my SSA3021X, just in case.  ;)

I have installed MobaXterm and can telnet to SSA but I have not any experience with telnet.

Could someone give me ''for dummies'' instructions how to copy directories with all the files from SSA to USB.

Thanks.
Martin
 

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #294 on: February 20, 2017, 06:27:18 AM »
Please get familiar with Telnet/Busybox/Linux (in reverse order), first.

It is easy to cause damage through a simply typo - remember that you are logged in as root!

The command you need is "mv", but you may need to use options like "-r" for recursive. But: you cannot just copy the relevant folders of the Siglent software, as the USB disk is mounted inside the application folder and hence it would be a catch-22.

Get the document everyon is talking about in the last few pages of this thread and read it carefully: it explaines everything in detail, even for people less experienced.

Cheers,
Vitor
 
The following users thanked this post: Mark11

Offline kcbrown

  • Frequent Contributor
  • **
  • Posts: 366
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #295 on: February 20, 2017, 07:39:42 AM »
The command you need is "mv", but you may need to use options like "-r" for recursive. But: you cannot just copy the relevant folders of the Siglent software, as the USB disk is mounted inside the application folder and hence it would be a catch-22.

If it's got anything close to a recent command set, then "cp" should have a "-x" option that will prevent it from traversing across filesystems.  With that option (hence, "cp -rx ..." instead of "cp -r ..."), you should be able to copy the relevant folders of the Siglent software to the USB drive.

Do a "cp --help" to see the options it supports before trying the above, just to be sure.  If it's actually using BusyBox then it probably won't support the "-x" option.
« Last Edit: February 20, 2017, 07:42:39 AM by kcbrown »
 
The following users thanked this post: Mark11

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #296 on: February 20, 2017, 07:44:24 AM »
Please allow me to correct myself. For a backup you obviously want to do a cp and not a mv.

 
The following users thanked this post: Mark11

Offline Mark11

  • Contributor
  • Posts: 5
  • Country: hr
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #297 on: February 20, 2017, 06:54:18 PM »
Thanks Vitor and kcbrown.
I am going to read.
 

Online TurboTom

  • Frequent Contributor
  • **
  • Posts: 295
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #298 on: February 20, 2017, 07:12:26 PM »
Mark11 -

the "cp" command lets you only access those partitions that are mounted in the file system. Moreover, the files to be copied must not be access restricted. But it's well worth to have a file copy of the calibration directory and the original configuration / license files of your machine. For a complete safety backup, it's prudent to use the "dd" command like I explained here: http://www.eevblog.com/forum/testgear/hack-of-sigllent-spectrum-analyzer-ssa3021x/msg1109033/#msg1109033. You won't be able to access individual files easily but it's possible to revive a machine with a broken file system.

I join in with Bicurico's recommendation to make yourself familiar with Linux (and especially the console commands) at least a little since it's quite easy to break something... On the other hand, almost everything can be fixed as well, that is if you know how it's done  ;).

Cheers,
Thomas
 
The following users thanked this post: Mark11

Offline dpenev

  • Regular Contributor
  • *
  • Posts: 89
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #299 on: February 21, 2017, 10:04:55 AM »
Hello,

I have decide to make a backup of my Analyzer, just in case.
All mtd partitions copies OK except the rootfs

It is on 100.01.02.07.07

[email protected]:~# dd if=/dev/mtdblock7 of=/usr/bin/siglent/usr/mass_storage/U-disk0/mtdblock7-P0707.img
dd: /dev/mtdblock7: Input/output error 

the ubi device copies without issue.

dd if=/dev/ubi0_0 of=/usr/bin/siglent/usr/mass_storage/U-disk0/backup/ubi0_0-P0703.img

I have tried with and without ecomb  and still the same issue.
With ecomb killed I can read more data from the rootfs.
I have tried several times (without ecomb) and the Input/output error appears on the same place (I get each time the same 37760KB file)

In the boot log I don't see issue with the ubi mounting

[    0.310511] UBI: attaching mtd7 to ubi0
[    0.310530] UBI: physical eraseblock size:   131072 bytes (128 KiB)
[    0.310541] UBI: logical eraseblock size:    126976 bytes
[    0.310550] UBI: smallest flash I/O unit:    2048
[    0.310560] UBI: VID header offset:          2048 (aligned 2048)
[    0.310570] UBI: data offset:                4096
[    0.721635] UBI: max. sequence number:       4
[    0.736210] UBI: attached mtd7 to ubi0
[    0.736223] UBI: MTD device name:            "File System"
[    0.736233] UBI: MTD device size:            43 MiB
[    0.736242] UBI: number of good PEBs:        344
[    0.736250] UBI: number of bad PEBs:         0
[    0.736258] UBI: number of corrupted PEBs:   0
[    0.736266] UBI: max. allowed volumes:       128
[    0.736274] UBI: wear-leveling threshold:    4096
[    0.736282] UBI: number of internal volumes: 1
[    0.736291] UBI: number of user volumes:     1
[    0.736298] UBI: available PEBs:             0
[    0.736307] UBI: total number of reserved PEBs: 344
[    0.736316] UBI: number of PEBs reserved for bad PEB handling: 9
[    0.736326] UBI: max/mean erase counter: 1/0
[    0.736334] UBI: image sequence number:  447755961
[    0.736445] UBI: background thread "ubi_bgt0d" started, PID 479

So all this is strange. Anyone observing something similar?

I am afraid I may have a nand flash issue which may reveal on the firmware update.   

Thanks
Dimitar
 

Online TurboTom

  • Frequent Contributor
  • **
  • Posts: 295
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #300 on: February 21, 2017, 07:40:14 PM »
Dimitar,

this may be an indication for a bad block in your NAND FLASH. That's actually not uncommon, the same as you (almost) won't find hard disks without bad blocks, yet they are automatically remapped inthe HDs. The OS should hide the bad blocks in NAND memory as well, yet, since "dd" accesses the raw data of the chip, errors may appear. To read the partition, you may try the command

Code: [Select]
dd conv=noerror,sync if=/dev/mtdblock7 of=/usr/bin/siglent/usr/mass_storage/U-disk0/mtdblock7-P0707.img
I'm not sure if this switch works on the DD version implemented in the SSA3000X since I haven't got a machine with bad blocks to test. In case you need to restore your machine, you should be fine as long as you write back the original file as "dd'ed".

Cheers,
Thomas
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #301 on: February 21, 2017, 09:47:18 PM »
Dimitar,

this may be an indication for a bad block in your NAND FLASH. That's actually not uncommon, the same as you (almost) won't find hard disks without bad blocks, yet they are automatically remapped inthe HDs. The OS should hide the bad blocks in NAND memory as well, yet, since "dd" accesses the raw data of the chip, errors may appear. To read the partition, you may try the command

Code: [Select]
dd conv=noerror,sync if=/dev/mtdblock7 of=/usr/bin/siglent/usr/mass_storage/U-disk0/mtdblock7-P0707.img
I'm not sure if this switch works on the DD version implemented in the SSA3000X since I haven't got a machine with bad blocks to test. In case you need to restore your machine, you should be fine as long as you write back the original file as "dd'ed".

Cheers,
Thomas

dd conv=noerror

 is not implemented in this "busybox".
« Last Edit: February 21, 2017, 09:49:54 PM by rf-loop »
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Offline dpenev

  • Regular Contributor
  • *
  • Posts: 89
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #302 on: February 22, 2017, 12:29:41 AM »
Hi Gents,

OK, so in case of bad blocks we don't have a way to backup at the mtd level.
Has anyone managed to reflash some MTD partition from uboot?
Has anyone managed to reflash an UBI volume from uboot?
Do you know what nand flash chip the Analyzer is using (if I have to replace it)
Are only those two directories unique as per instrument
   /usr/bin/siglent/firmdata0
   /usr/bin/siglent/usr/backup
Do we know where the update script is located for 7.07?
I want to check what it does so eventually get some idea what can happen.

I hope I will not need all this info but knowing me I will update to 8.01 soon :)

Sorry for the long questions list and thank you in advance!
Dimitar 
 

Offline Dima

  • Newbie
  • Posts: 2
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #303 on: February 22, 2017, 07:24:38 AM »
Hi Dimitar,
I guess the flash chip is the Micron-MT29F2G08ABAEAWP.
You can see it on Dave's tear down video. Datasheet is easy to find, just google.
The chip you get for a few bugs at digikey.
Reading and writing to the flash you will find many projects on the web. A cheap method would be
to use the FT 2232h -56Q mini module via usb. Best buy also a TSOP 48 socket adaptor, so contacting  the chip will get no pain.
But i am afraid you will need some good soldering skills and have to open the analyzer.
Anyway, this is great idea.

Cheers
Dima
 
The following users thanked this post: electronus

Offline steverino

  • Regular Contributor
  • *
  • Posts: 177
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #304 on: February 22, 2017, 11:55:32 AM »
...
The chip you get for a few bugs at digikey.
...
Any particular species of bug?  :)
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #305 on: February 22, 2017, 06:47:45 PM »
Hi Gents,

OK, so in case of bad blocks we don't have a way to backup at the mtd level.
Has anyone managed to reflash some MTD partition from uboot?
Has anyone managed to reflash an UBI volume from uboot?
Do you know what nand flash chip the Analyzer is using (if I have to replace it)
Are only those two directories unique as per instrument
   /usr/bin/siglent/firmdata0
   /usr/bin/siglent/usr/backup
Do we know where the update script is located for 7.07?
I want to check what it does so eventually get some idea what can happen.

I hope I will not need all this info but knowing me I will update to 8.01 soon :)

Sorry for the long questions list and thank you in advance!
Dimitar

What is problem?

If normal FW update fails due to flash problem, your SSA have 3 year factory warranty (if not expanded to 4 or 5 year warranty) . If it fails just call Siglent for repair.
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Offline dpenev

  • Regular Contributor
  • *
  • Posts: 89
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #306 on: February 22, 2017, 07:45:48 PM »
Hi rf-loop,

Yes you are perfectly right. I am just such a kind of person who tries so solve his problem himself if possible. (often it is better for the nature)
Keep also in mind that if I have to send the instrument back for repairmen it means 1 month without it right?
Take into account we already have MT29F2G08ABAEAWP in stock and we have facility to replace it if necessary.
If I know that reflashing wouldn't take me much time I will go to this option for sure.
But as far as i understand no one has done it yet?
 
In addition I thought talking about my Analyzer here may be interesting for somebody else.

But once again I still don't have issue, probably just some small possibility for an issue in the future.

Additional note. nand flashes often goes in two flavors. Free and not free (less expensive) of bad blocks.
Our experience with the version having bad blocks is that it is often problematic later in the product life.
It is bad that Siglent has used nand flash chips having bad blocks. They use read only file systems but still ...

Thanks
Dimitar 

 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #307 on: February 22, 2017, 08:11:54 PM »
Hi rf-loop,

Yes you are perfectly right. I am just such a kind of person who tries so solve his problem himself if possible. (often it is better for the nature)
Keep also in mind that if I have to send the instrument back for repairmen it means 1 month without it right?
Take into account we already have MT29F2G08ABAEAWP in stock and we have facility to replace it if necessary.
If I know that reflashing wouldn't take me much time I will go to this option for sure.
But as far as i understand no one has done it yet?
Maybe not, but to do so would ruin any chance of a future warranty claim if needed.
 
Quote
In addition I thought talking about my Analyzer here may be interesting for somebody else.
It is, but not at the cost of possibly losing your warranty.

Avid Rabid Hobbyist & NZ Siglent Distributor
 
The following users thanked this post: videobruce

Offline dpenev

  • Regular Contributor
  • *
  • Posts: 89
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #308 on: February 22, 2017, 09:27:34 PM »
Indeed!
 

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #309 on: February 22, 2017, 09:38:37 PM »
It is OK to discuss hardware-modifications and repairs. The SSA3021X is still a fairly new device and probably all units are still covered by maintenance.

However, in 2 years time, many will be without warranty and I expect to see some being sold in the second hand market.

People will start hacking them and sooner or later the need of flash repair will arise. So why not discuss it now?

I am by no means an expert in flash memory IC's, but there is something very positive about the SSA3021X: the serial number is stored in a regular file within the file system contained in the flash. Some manufacturers chose to store some special data like serial numbers in READ/WRITE protected memory banks of flash IC's. In these cases, exchanging such IC is difficult!

With the SSA3021X I would expect it to be fairly doable: desolder the flash IC, get a replacement flash IC, program it externally (at least up to U-Boot), solder it and use the U-Boot console to flash the reamining firmware.

But I agree with tautech and rf-loop: nobody tried to do that, because it wasn't necessary to do so up to now and because all devices are covered by warranty - if the flash fails, including the hacked ones!

Regards,
Vitor
 

Online TurboTom

  • Frequent Contributor
  • **
  • Posts: 295
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #310 on: February 22, 2017, 09:48:05 PM »
Hi Gents,

OK, so in case of bad blocks we don't have a way to backup at the mtd level.
Has anyone managed to reflash some MTD partition from uboot?
Has anyone managed to reflash an UBI volume from uboot?
....

I can confirm that some individuals successfully re-flashed their kernel / root partitions from U-Boot. I'm not sure if they had bad blocks in their FLASH chips but I doubt it, at least not in the corresponding partitions.

The easy road (and the only that I know of) is via the internal Micro SD card socket since U-Boot checks for presence of a memory card during boot-up. It may well be possible to run the whole SA via a properly configured FS on a Micro SD - that's probably the way initial installation is accomplished at the factory. To gain access to the Micro SD card slot, the instrument needs to be disassembled (case opened / IIRC rear shielding removed). It's probably also possible to back-up the NAND partitions (with proper defect management) via U-Boot to Micro SD. But all this can be considered high-risk activity since a mistake may ruin your day... (read: your SA).

Anyway, we've got complete NAND images of F/W 7.03 and 8.01 in the "community" so what's really important is to back up the configuration and calibration of your machine (on a FS base) since this is individual to each SA. If you need other images that are common to all machines, there will be a way to help.

All the best,
Thomas
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #311 on: February 22, 2017, 10:47:05 PM »


Anyway, we've got complete NAND images of F/W 7.03 and 8.01 in the "community" so what's really important is to back up the configuration and calibration of your machine (on a FS base) since this is individual to each SA. If you need other images that are common to all machines, there will be a way to help.

All the best,
Thomas

And this is important to do.  In FW 7 least calibration data because this can not copy from any other maachine.
And if FW 8  cal data but now there is  also other extremely important things what can not copy from other unit. There is example individual product model license. Without it, it is SSA3010X.

Also all other technical things are intersting and and also for possible some future needs it is good to have more and more valid information and knowledge collected.  All this is good and finally it may even rise product value for users and including also users after 3 year or  after >10 years.


If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Offline dpenev

  • Regular Contributor
  • *
  • Posts: 89
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #312 on: February 22, 2017, 11:03:29 PM »
I agree, the calibration is important.
In this respect can someone confirm(or share some thoughts) that those two directories contain all the unique data for a given Analyzer?
    /usr/bin/siglent/firmdata0
   /usr/bin/siglent/usr/backup

As per the update I did a quick check and the update is happening calling functions from /usr/lib/siglentlib.sh
Probably "check_and_upgrade()"
So basically they just do "nandwrite mtdN image" from linux. In theory nandwrite is bad block aware, so I and other having bad blocks should be OK.
But I will cross fingers when I do my update :(



   

 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #313 on: February 22, 2017, 11:52:09 PM »
I agree, the calibration is important.
In this respect can someone confirm(or share some thoughts) that those two directories contain all the unique data for a given Analyzer?
    /usr/bin/siglent/firmdata0
   /usr/bin/siglent/usr/backup

As per the update I did a quick check and the update is happening calling functions from /usr/lib/siglentlib.sh
Probably "check_and_upgrade()"
So basically they just do "nandwrite mtdN image" from linux. In theory nandwrite is bad block aware, so I and other having bad blocks should be OK.
But I will cross fingers when I do my update :(

   

I can not true confirm these two directories but I can confirm with disclaimer: as far as I know.
As also can find in someone made instruction text V05 what can find in this thread.

Quote
bad block.
I have updated equipment what have this situation  and in this case not any problem.

Quote
calibration is important.

Yes, and also very important model license key. (it is in one .xml file in these folders if SSA have FW 8.
In FW 7  update process to FW 8 system generate this license key for model what it is currently when it have FW 7.  Later it can not generate (exept factory) (1).  FW 7 update to FW 8 is big upgrade. It also make big improvement for TG.

(1) exept: roll back to FW 7 and  again to FW 8  but this need - know how to do.
« Last Edit: February 23, 2017, 12:10:58 AM by rf-loop »
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Offline dpenev

  • Regular Contributor
  • *
  • Posts: 89
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #314 on: February 23, 2017, 12:50:21 AM »
Quote
Quote
bad block.
I have updated equipment what have this situation  and in this case not any problem.

Oh rf-loop, this is  very relaxing!
How do you know you have bad blocks, partition dump from using dd command?
Was your bad blocks on the mtdblock7/rootfs?

Thanks
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #315 on: February 23, 2017, 01:34:21 AM »
Quote
Quote
bad block.
I have updated equipment what have this situation  and in this case not any problem.

Oh rf-loop, this is  very relaxing!
How do you know you have bad blocks, partition dump from using dd command?
Was your bad blocks on the mtdblock7/rootfs?

Thanks

Yes in block7 (after around 10M...err, others all ok. )
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Offline dpenev

  • Regular Contributor
  • *
  • Posts: 89
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #316 on: February 23, 2017, 01:35:49 AM »
good! I will update later on today.
Thanks
 

Offline Mark11

  • Contributor
  • Posts: 5
  • Country: hr
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #317 on: February 23, 2017, 06:12:53 AM »
Thanks Vitor, kcbrown and Thomas for pointing me to the right direction.
As you have suggested I started with Linux.
I bought a book Just Enough Linux by Malcolm Maclean two months ago.
My intention was to start playing with Raspberry Pi but now it has
proved to be best spent two dollars (yes 2 US$). It was not necessary
to learn a lot about Linux. Just a few basic commands to navigate file
system in the terminal and some commands as /, cd, ls, cp, pwd, mkdir,
rm, mv ... and I finaly understood what I have to do. I installed Ubuntu,
opened terminal and practised until I got the basic idea how it all works.
Then I read Mr. Li Xiu Ying's instruction again.
The rest is history.  ;)

Thans guys. You are the best!

Martin
 

Offline dpenev

  • Regular Contributor
  • *
  • Posts: 89
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #318 on: February 24, 2017, 03:37:14 AM »
Hi All,

I have updated my Analyzer to V01.02.08.01.
Even thought I seems to have some bad blocks (dd dump reports input/output error) on the mtdblock7 the update went OK
I got few reboots during the update and now I am on V01.02.08.01.

Thank you all for the help!
Dimitar
 

Offline arturfra

  • Contributor
  • Posts: 9
  • Country: it
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #319 on: February 24, 2017, 06:43:51 AM »
Hi guys, I've a SSA3021X with 7.07 fw hacked with all options permanent enabled and until 3.2Ghz, just now I've upgraded to fw 8.01 and now it remains with 3.2Ghz feature but with all option OFF (only TG on because I've a valid licence key), Is it possible to activate all the options as before I made without loosing the serial number and then without delete the famous files ??

thanks in advance
« Last Edit: February 24, 2017, 06:45:50 AM by arturfra »
 

Offline videobruce

  • Frequent Contributor
  • **
  • Posts: 349
  • Country: us
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #320 on: February 24, 2017, 10:20:56 AM »
V 1.2.8.2 is out. Who will be the 1st to try???  ;D

http://www.siglentamerica.com/USA_website_2014/Firmware&Software/firmware/SSA3000X-Firmware-Update.rar

Quote
1. This firmware must be upgraded from V1.2.8.1 or later. If your SSA3000X has an earlier version, please to V1.2.8.1 first and then proceed to uplate to the latest version.
 2. Add socket/telnet-scpi, you can operate remote control through LAN port without NI-VISA installed. Please check SSA3000X Programming Guide for more details.
 3. Change two limit lines in different colours.
 4. When quit from TG, stay in“Auto”sweep.
 5. Lower some spurs when FFT.
 6. Improve the stability.


(Link updated to a direct link for download)
« Last Edit: February 25, 2017, 12:17:59 AM by videobruce »
 
The following users thanked this post: nugglix

Offline nugglix

  • Regular Contributor
  • *
  • Posts: 173
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #321 on: February 24, 2017, 06:40:33 PM »
V 1.2.8.2 is out. Who will be the 1st to try???  ;D

http://siglentamerica.com/prodcut-gjjrj.aspx?id=5113&tid=227&T=2

Thanks for the info!

Download doesn't work atm, so I can't!
 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 10288
  • Country: nz
    • Taupaki Technologies Ltd.
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #322 on: February 24, 2017, 06:53:56 PM »
V 1.2.8.2 is out. Who will be the 1st to try???  ;D

http://siglentamerica.com/prodcut-gjjrj.aspx?id=5113&tid=227&T=2

Thanks for the info!

Download doesn't work atm, so I can't!
This one does,(the Download button) just clicked on it to get a copy for my archives.
http://www.siglentamerica.com/gjjrj-xq.aspx?id=5128&tid=15

7.36 Mb .rar
Avid Rabid Hobbyist & NZ Siglent Distributor
 

Offline nugglix

  • Regular Contributor
  • *
  • Posts: 173
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #323 on: February 24, 2017, 07:09:56 PM »
Tried that already.
There is something seriously broken atm.
Transfer stops after a few kB, if you pause/resume it works for another few kB.
Transfer rate is around 5kB/s, which I consider a bit on the low side...

Will have a look at it from time to time.
 

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #324 on: February 24, 2017, 07:12:35 PM »
Strange.

I could download the file without problems and did so a few times, just to check.

I downloaded the new EasySpectrum and Programming Manual, with no issues either.

I guess your ISP must be having some issues.

Try this link: https://mediacdn.eu/m/media/wysiwyg/siglent/Downloads/Firmware/SSA3000X-Firmware-Update.rar

It is from http://www.siglent.eu/Downloads

Regards,
Vitor
 
The following users thanked this post: tautech

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #325 on: February 24, 2017, 07:37:05 PM »
Update:

I unpacked the FW file with my tool (linked somewhere in this thread).

The contents have changed a little, as there is no passwd folder anymore. Some files are the same (see CRC).

My guess is that this FW update is a "small" update, mainly exchanging the ecomb executable, which would explain why you need to install P08.01 before installing P08.02. Telnet probably works as before, with same root login and known password.

However, I did not try the update, yet, so the risk is on you.

Regards,
Vitor
« Last Edit: February 24, 2017, 07:38:43 PM by Bicurico »
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2502
  • Country: fi
  • Starting with DLL21
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #326 on: February 24, 2017, 08:21:08 PM »
DO NOT try update directly to 8.02 from any FW7.x version!
(I do not know if there is security check for prevent to do it accidentally)

Only FW7.x to 8.01 update procedure can generate product model license key (etc)  what FW 7.x did not use at all.


One test. It works least with my individual unit.

There was 8.01 in my unit and  mod (as in instructions) and with this mod also no serial number. 
First I removed mod following these instructions.

Instructions:   http://www.eevblog.com/forum/testgear/hack-of-sigllent-spectrum-analyzer-ssa3021x/msg1132969/#msg1132969

Then  restart and look all ok. Now there is also original serial number (if someone worry it)

Update to 8.02
(also it rebooting during update)

noted that all works ok.

mod again with instructions.

result. Ok.

« Last Edit: February 24, 2017, 08:33:47 PM by rf-loop »
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 
The following users thanked this post: videobruce, BlauerElefant

Online Bicurico

  • Frequent Contributor
  • **
  • Posts: 538
  • Country: pt
    • VMA's Satellite Blog
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #327 on: February 24, 2017, 08:39:30 PM »
Thank you for the test!  :-+

This new FW is actually the answer of Siglent to a request I made (they didn't do it for me, of course - at least I wouldn't think so):

It allows SCPI commands through a regular telnet connection. This opens doors to people like me to program custom applications that use the SSA3021X remotely.

Without any promise, imagine this: a software similar to my "VMA Simple Spectrum Analyser" (made for the cheap ADF4350, ADF4351, MAX2870 range of devices, like the NWT4000 - discussed in a different thread) in a special version for the SSA3021X, offering all the "advanced" measurements, but based on measurements of a propper spectrum analyser!

Thumbs up for Siglent!

Regards,
Vitor
 

Offline nugglix

  • Regular Contributor
  • *
  • Posts: 173
  • Country: de
Re: Hack of Sigllent spectrum analyzer ssa3021X?
« Reply #328 on: February 24, 2017, 08:53:51 PM »
Strange.

I could download the file without problems and did so a few times, just to check.

I downloaded the new EasySpectrum and Programming Manual, with no issues either.

I guess your ISP must be having some issues.

Try this link: