Hack of Sigllent spectrum analyzer ssa3021X?

[tautech]

Hey all!

Let me just quickly recap my story about bricked SSA. I have sent it back for repair (under warranty) and received it upgraded to the latest version and fully unlocked! It looks like they only flashed the faulty partition and left the user data intact. I am not sure if they didn't notice the modifications or they just let me go with it.  I would recommend anyone with bricked device that is still under warranty to try and send it back. It could be the easiest solution.

Successful hacking in 2017!

We ask who is "they" ? 

[ebclr]

Flash dump 100.0..02.07.07

http://www.luximetro.com/SSA3021X.rar

[jobber]

Hey all!

Let me just quickly recap my story about bricked SSA. I have sent it back for repair (under warranty) and received it upgraded to the latest version and fully unlocked! It looks like they only flashed the faulty partition and left the user data intact. I am not sure if they didn't notice the modifications or they just let me go with it.  I would recommend anyone with bricked device that is still under warranty to try and send it back. It could be the easiest solution.

Successful hacking in 2017!

We ask who is "they" ? 

Technicians at Siglent repair center 

[cesarpaz]

Hello everyone.
After reading and deciding which spectrum analyzer I buy, I am thinking of buying a Siglent SSA3021X and then converting it into a Siglent SSA3032X. I would like to know what is the opinion of the final result to the users who have made this conversion, is it worth? Give some problems Thank you very much.

[ebclr]

Until firmware 7.07 flawless, and easy

[bozidarms]

Till now, everything OK / marvelous piece of equipment!

[radiotech9409]

i got my SSA3021x a couple days ago.  It came with sw 1.2.8.1.  I performed the patch_instruction_new provided by TurboTom.  However, it appears that the latest firmware hides/places the file NSP_system_info.xml somewhere else.  When i performed the back up step for the NSP_system_info, telnet gave a message:  file was not found.  i created one based on turboTom's instruction and wrote it in the system.  However, it seems that the file does not do anything.  Any help is appreciated.

[Bicurico]

Hi,

I would suggest:

1) Do a full backup using the dd command as described earlier in this thread. In worst case scenario, this will allow you to fully restore the flash contents.
2) Do a second backup using the cp command and copy all relevant files/folder, which has been explained, too. This is required to restore the device prior to RMA or firmware upgrade.
3) Take your time to navigate in the telnet shell through all folder, to get yourself familiar with file structure. This is required to avoid problems/worst case scenario.
4) The hack involves renaming three files to dummy names. Once you figure it out, it takes you 1 minute. Then all the hacking fun is gone. Unless you REALLY need the enhanced frequency range, take your time.
5) Learn how to use the instrument before hacking it - that will allow you to check if it is working correctly.

Regards,
Vitor

[radiotech9409]

it seems that you referred to TurboTom's post that pointed to:"Just noticed, rf-loop made it even easier for the newbies... So be sure to cut&paste and save a copy of his post before he deletes it again (as he told he will -- sorry, too late...).  I came a bit late, so I didn't have the chance to read rf-loop's instruction.  I wonder if anyone got a hold of the rf-loop's instruction?

[radiotech9409]

Thanks so much.  Got your instructions.  I will post my progress later.

[steverino]

Thanks so much.  Got your instructions.  I will post my progress later.

Curiosity has me wondering if I missed something in the referenced rf-loop instructions.  Could someone please forward these instructions to me.

Thanks, Steve

[pe1oxp]

it seems that you referred to TurboTom's post that pointed to:"Just noticed, rf-loop made it even easier for the newbies... So be sure to cut&paste and save a copy of his post before he deletes it again (as he told he will -- sorry, too late...).  I came a bit late, so I didn't have the chance to read rf-loop's instruction.  I wonder if anyone got a hold of the rf-loop's instruction?

That's why I couldn't find the instructions also? I'm also interrested in upgrading my SSA3021x
Can someone help me with these instructions, I have read the thread but not so familiar with Telnet and the used file system

[ebclr]

1st step install mobaxterm

Connect the instrument to your router

turn the instrument, and see if they get a IP from your router by dhcp

Use that ip to connect to the instrument

user root
pasword ding1234

[rf-loop]

<deleted: error>

[sq6emm]

Just for your information.

Ordered SSA3021X on 2016/01/10 in Poland. Distributor said it will be with 1.2.8.1 firmware 

Today 2016/01/20 SSA arrived. Unboxed, turned on and...

Voila! 100.01.02.07.07 !

10 minutes later, with NSP...xml file hack and reboot I have SSA3022X with ALL OPTIONS Sta: ON Vaild: Permanent!

Thank you so much EEVBLOG CONTRIBUTORS!:)

Regards,

Dawid SQ6EMM

[pe1oxp]

Is it possible that some kind people who have this mysterious file can  share it here as message attachment?

Unfortunately I only have a printout of it to read it on my way home in the bus, thought I could save it when I came home from work.
Maybe someone saved the file?

[ExplodingLemur]

Unfortunately I only have a printout of it to read it on my way home in the bus, thought I could save it when I came home from work.
Maybe someone saved the file?

Can you snap a photo or scan it and put it up on imgur?  We could transcribe it from that.

[pe1oxp]

Unfortunately I only have a printout of it to read it on my way home in the bus, thought I could save it when I came home from work.
Maybe someone saved the file?

Can you snap a photo or scan it and put it up on imgur?  We could transcribe it from that.

A scan will be possible when there is nobody else who has saved it.
I was just thinking and must have saved it on my computer at work. Otherwise it must be in the Temp-directory. I will have a look on Monday.

[kloetpatra]

Am I correct, that only Firmware versions till 1.02.07.07 can be unlocked so far?

[rf-loop]

Am I correct, that only Firmware versions till 1.02.07.07 can be unlocked so far?

No. Please read this thread more carefully.

[pe1oxp]

A scan will be possible when there is nobody else who has saved it.
I was just thinking and must have saved it on my computer at work. Otherwise it must be in the Temp-directory. I will have a look on Monday.

I did a quick search and found the information.
MD5 is: f2c4867771222a38f23ebb64d4420d5a

[3s1d]

Hi everybody,

I read through the whole thread (11pages, took me forever)... It started out great but the end is a bit frustrating.
I'd really like to buy and permanently unlock this device but it will most probably ship with 8.01 

As I understand it, nobody who has an unlock device, has had a look into the nsp_data_b file? Its supposed to be a XML file inside an UBI image? Maybe the the options are hidden there?

Greetinx
Juergen

[tautech]

A scan will be possible when there is nobody else who has saved it.
I was just thinking and must have saved it on my computer at work. Otherwise it must be in the Temp-directory. I will have a look on Monday.

I did a quick search and found the information.
MD5 is: f2c4867771222a38f23ebb64d4420d5a

And who would have thought the Chinese author of the .txt file you attached wrote such very good and easy to understand English.   

[pe1oxp]

My source, the Chinese author forgot some lines in the description, he warned me to be careful

Do not use CHAPTER 2   Or  "full FLASH backup to USB" part in Chapter 8.
ERROR: Missing command lines.  Corrected version is under work.


Please be patient!

[papousek]

 
Thanks guys.
i got my SSA3021X for a few months, "UPGRADED" it to 3.2G with full options.
very nice SA, as well as my SDG2042X.  (@cesarpaz, yes, it worth the money