Hantek - Tekway - DSO hack - get 200MHz bw for free

[tinhead]

Despite being rather old 2009's design

so what, as long it works and "someone is buying it" who cares?

Big named manufacturers are doing nothing else, even other chinese manufacturers (just see that crap Rigol DS1000D or DS1000E - still there). So why should small company spend money for innovation? But hey, they did it in 2009, it tooks years before others changed their displays (and i'm not talking only about size only, but as well backlight or display manufacturer).

this scope is now manufactured by MCP Shanghai.

MCP is not manufacturing anything, on the other side everybody who have some budget to spend can get rebadged Tekway.

[tinhead]

I tried backing up the firmware to USB stick first but it doesn't work, says there are no new firmware files on the stick.

Please don't shoot me if any of this has been discussed somewhere earlier in these 150 pages...

Can I hack this Voltcraft ? I found some hints saying there were problems with it (new hardware ?).

well, i will shoot you (actually i should shoot or fuck everybody who start reading book from page 150 and not the VERY FIRST !!!).

Really, just check the first page:

bold "- before you hack made a backup", aha, you have version with SN > 15000, so what there? "S/N > 15000 ... PM me", where i can already tell you, i will not answer any PMs anymore. Why? well, use search, and you will find that backup can be done with (already integrated in models with SN > 15000)  nanddump tool and was ALWAYS possible with e.g. tar.

now let's continue, first page, bold "- the bandwidth hack" - then, read this shit " As far i fucking know, all DSO/MSO/Handhelds since 2009 can be hacked". So no idea what you mean with "I found some hints saying there were problems with it", i don't know any. I can even tell you that even not yet released models can be hacked.

[tinhead]

I have ordered an MSO5074FG oscilloscope (with integrated logic analyzer and function generator)

you know what, check that:

- Hantek website says 1GS/s
- their current pictures or info material 1GS/s
- their first inforamtion about these models (that was 2yrs ago), look here
https://www.eevblog.com/forum/reviews/new-hantek-gears-released/
is talking about 1GS/s ofr 5074F and 2GS/s for other models (but they never released them as DSO/MSO5xxx series but 7xxx, one can see them on Hantek chinese website).

- but there is picture of the actual unit, with 2GS/s ?!??! or is ot only me complettly blind?




thats crazy, one can clearly see here 2GSa/s,



where here another actual unit shows clearly 1GSa/s :\

http://www.hantek.org/asken/iaskdetail.aspx?id=2014030822583972

[khach]

the major difference between Welec and Tekway designs is:
- Welec - all in FPGA
vs.
- Tekway DPO in FPGA, UI in ARM, with mapped (via CPLD) memory

Welec implement softcore CPU with UI writted in pure C. So, it possible to move Welec UI to ARM with new HAL layer. At the first step  original Tekway FPGA image  used. At linux src drivers s3c2440-spi.c contain FPGA load routines.
Also s3c2440-fpga_noirq_1000b.c  contain full info about interaction from FPGA to linux. But comments in Chinese and algo is not clear for me.

[tinhead]

At the first step  original Tekway FPGA image  used. At linux src drivers s3c2440-spi.c contain FPGA load routines.
Also s3c2440-fpga_noirq_1000b.c  contain full info about interaction from FPGA to linux. But comments in Chinese and algo is not clear for me.

the first GPL they published (you can get it here ftp://ftp.gpl-devices.org/pub/vendors/Voltcraft/ )
there is archive desktop\linux-2.6.13_800x480_option2_lz_120410.tar.gz

In that archive you will find not only drivers sources but as well test app (for fpga.exe and setio) , with some interessting registers.
On the early Tekways, there were as well two executables : getdata and testacq. There was as well script calling that fpga.exe
On latest models there are test apps as well.

Anyway, i've copied all that files together, as well some infos i found in other places, see attachement. You can as well disassemble of the debug firmwares, but i think fpga.exe, getdata and testacq are already good enought to get the data from fpga.

[Level42]

I tried backing up the firmware to USB stick first but it doesn't work, says there are no new firmware files on the stick.

Please don't shoot me if any of this has been discussed somewhere earlier in these 150 pages...

Can I hack this Voltcraft ? I found some hints saying there were problems with it (new hardware ?).

well, i will shoot you (actually i should shoot or fuck everybody who start reading book from page 150 and not the VERY FIRST !!!).

Really, just check the first page:

bold "- before you hack made a backup", aha, you have version with SN > 15000, so what there? "S/N > 15000 ... PM me", where i can already tell you, i will not answer any PMs anymore. Why? well, use search, and you will find that backup can be done with (already integrated in models with SN > 15000)  nanddump tool and was ALWAYS possible with e.g. tar.

now let's continue, first page, bold "- the bandwidth hack" - then, read this shit " As far i fucking know, all DSO/MSO/Handhelds since 2009 can be hacked". So no idea what you mean with "I found some hints saying there were problems with it", i don't know any. I can even tell you that even not yet released models can be hacked.

Well, it's always nice to get a warm welcome to a forum, so thanks a lot ! 

FYI, I _DID_ read post nr.1 but it is of absolutely ZERO use Mr.Know-it-all....

First of all, my model, the Voltcraft DSO-1062D isn't even listed on anything with the serialnr.>15000. It is only mentioned with <15000.
So, that was not exactly very clear.

Yes my serial number is above 17000 and I wasn't going to PM you because I didn't want to bother you. It would be handier to just put the CORRECT and FULL info there on how to do it step by step.

"Nanddump tool" and "tar" doesn't ring a bell with newbies....sorry, I have no clue what you mean.

If you looked at my picture, I posted a firmware version that has not been mentioned in those 150 pages so hey, maybe, I thought someone would be interested or has tried it already with this version....

[tinhead]

So, that was not exactly very clear.

really? i doubt that, see For all others (not listed above)

"Nanddump tool" and "tar" doesn't ring a bell with newbies....sorry, I have no clue what you mean.

google broken or what?

[n8ddd]

if someone want to backup the firmware for voltcraft dso1062d new hardware,should start reading from this post

https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg326382/#msg326382

[rosasharn]

I have ordered an MSO5074FG oscilloscope (with integrated logic analyzer and function generator)

thats crazy, one can clearly see here 2GSa/s,



where here another actual unit shows clearly 1GSa/s :\

http://www.hantek.org/asken/iaskdetail.aspx?id=2014030822583972

I checked all MSO5074F data on Hantek website, it is 1GSa/s. I think the 2GSa/s is an printing error.
http://www.hantek.com/en/ProductDetail_127.html

[rosasharn]

Yes, already briefly discussed on the forum. No one has one. Maybe they aren't on the market, just announced.

It's on offer now.

[tinhead]

I checked all MSO5074F data on Hantek website, it is 1GSa/s. I think the 2GSa/s is an printing error.

the seller said "he maid that picture from an unit at Hantek site", so probably early or dev unit, whatsoever.
The real unit does have 1GS/s printed, and it 1GS/s. Another user here in forum got one and will write soon an review,
ith some interessting pictures

[simonmc]

Hi there,

First post. I have read this whole thread several times and i have decided to purchase one of these 'scopes at the end of the month. However i am undecided which model to get. I will get one of the lower bandwidth models and hack it to 200MHz, but which one?

The P model is the cheapest but has the least memory. The BMV and MSO seem to be around the same price on aliexpress. I am undecided between these. From what i have read the MSO's LA seems to have problems. Is this any closer to being fixed? I like the idea of having a LA built into the scope, but i do have cheap ebay USB logic analyser. The BMV has bigger memory and a video help (although im not sure about how useful this is). With a price difference of about £6 between the BM, BMV and the MSO in that order, i'm a little confused as to which one to get. 

[tinhead]

However i am undecided which model to get. I will get one of the lower bandwidth models and hack it to 200MHz, but which one?

up to now all can be hacked, however some need hardware modifications.

The P model is the cheapest but has the least memory.

right, there are even cheaper i think, DSO4102B which is 500MS/s but int he new enclosure. Now the question is,
is this only "like P model" PCB with slowed down ADC or diifferent ADC or what so ever ... so bit risk (but new enclosure, hmm)

When 40k memory is enought for you, then take it. However, note that later you will be unable to add memory.
For sure the 1M/2M slowing UI on B/BMV models, but sometimes it does not matter it UI is fast or slow, sometimes the bigger memory is what one need (when i need fast responding UI i can always switch to 4k or 40k on other models)

The BMV and

well yeah, 2M are alays better than 1M

MSO seem to be around the same price on aliexpress. I am undecided between these.

which one, MSO5074F(G) or MSO5062D? The MSO5xxxD they do have LA on separate PCB,
there are still lot of bugs. I would not recommend it to buy it if you wish use LA already yet.
The MSO574F(or FG) seems to be better, at least from what i saw is LA complettly changed.
I think they did it for reason (not only because they added DDS), however yu will need to wait
for an review.

From what i have read the MSO's LA seems to have problems. Is this any closer to being fixed?

as said above

I like the idea of having a LA built into the scope, but i do have cheap ebay USB logic analyser.

the question is what analyzer you have, when one of these salease/uesbee then of course is
that one included in HanTekway MSO much better. Not only because of sampling speed, but as
well trigger system (triggers, in 10mV steps trigger levels - something what saleae can't).
But when you got an proper usb LA, with trigger out and variable trigger levels, well then you
don't need any another one.

The BMV has bigger memory and a video help (although im not sure about how useful this is).

memory as said above, it is always good to have "more". Video, hmm, for sure one can use
that (not officialy enabled) enternet and watch some porn streamings, but hmm, today
everybody have faster smartphone than the Samsung SoC in BMV models. For teaching/help system, sure,
but not for anything else.

With a price difference of about £6 between the BM, BMV and the MSO in that order, i'm a little confused as to which one to get. 

.. and it will be not easier, they released - or will soon - some other models (e.g. dso4102b), crazy Hantek people. 


Btw, it is good idea to check other manifacturers, Sgilent SDS2xxx series or Rigol DS1xxxZ/DS2000 are definitely much better than Hantek models.

[wolfienuke]

I just wanted to pop in to ask everyone a quick question...

Is anyone interested in a new open source Hantek DSO/MSO made for Mac OS X?

I know there is a tool out there, but is in German and is written in Real Basic. I have been programming for Mac for about 15 years and am quite disappointed in the lack of software support for these devices. I have probed the USB bus with my MSO5074FG and have found that almost all functionality can be done via USB (including logic and function generator) quite easily.

Obviously to support more devices than the one model I own, I would need some community help eventually to ensure compatibility with various models.

If there is a large enough interest, I would love to start a new topic and discuss how REAL engineers would like to design DSO/MSO software.

[rosasharn]

The P model is the cheapest but has the least memory.

P model is very high cost performance.
I have one, and it works great!

[simonmc]

Thanks guys,
       You have given me alot to think about. Yes logic analyser i have is only a 8 bit clone, but i does seem to work.
 I will have a look at the other scopes you mentioned but i am limited on budget. The rigol ds1xxxz does visually look a nice scope. i do use one of the older rigols at work when the teks aren't available. Also seems to be a big thread on those. I better get reading.

[campodea]

Is anyone interested in a new open source Hantek DSO/MSO made for Mac OS X?

Although the existing DSO USB tool fulfills my basic needs I sure would love to see a nicer
OS X version!

[wolfienuke]

Is anyone interested in a new open source Hantek DSO/MSO made for Mac OS X?

Although the existing DSO USB tool fulfills my basic needs I sure would love to see a nicer
OS X version!

Well, I was thinking of adding some new functionality like:

1. Automatic Oscilloscope detection and connection via built-in Apple USB framework. (Already complete)
2. Direct creation of Matlab files from raw data or other Matlab integration.
3. Cursor control and measurements using mouse.
4. Either Logic Decoding or output to existing logic decoding software.
5. Direct control of integrated Function Generator.
6. Saving continuous waveforms to video files.
7. Better window layout for common functions.
8. Triggering control and automatic waveform data download on trigger.
9. Any other good ideas from the community...

[dom0]

I've got a Hantek DSO5102B here, firmware is the old 2.06.3 120112.1 and so it was bound to brick itself. I think it's the setup file bug (where you have to delete /param/sav/run1kb* and so on), because it boots and displays the main screen but then hangs.

I tried connecting via USB and I get it listed on lsusb. I then proceeded with this tool: http://peter.dreisiebner.at/dso-usb-tool/
However, it just crashes after connecting.

Now, I got a few USB/UART converters, some are 3.3 V. However, I'm unable to locate the UART connector inside, this image shows it to the right of the shielded box: http://embdev.net/articles/File:Tekway_MSO_uart_hw1007.jpg
However, on my board here there isn't a pin row there. J901 is about 3-4 cm more to the right than on the picture and about there where the UART pin row is on the picture is nothing and a mounting hole on my board. Where J901 starts in the picture is a J700 with 2×5 pins and 2.5 mm pitch on my board.
I looked for any revision label or something on the board, but found nothing. In the far top left corner there is just some "made in china all rights reserved bla bla" stuff.
I also noticed that on the image the PCB is a tin-plated one but mine has gold plating/ENIG?

Any idea where I can find the UART on this model?

/e: Issue probably resolved. I found a 6 pin J801 between the two FPC connectors J900 and J702.

[astraios]

I recently bought a used Hantek DSO5102B from ebay.
I'm not sure what hardware version this model is.
On System Information it says hw version 0x555583e8. I have attached a screenshot
I attempted to update the firmware (it had a 2.06.2) and it seems it didn't like the firmware on the Hantek site.
I was getting 0xfe and 0xf7 errors. The only firmware that worked was tinhead's (thanks man) dst1kb_2.06.3__130814.1_.up when I renamed it to dst1kb_2.06.3_15102b_fact(130814.1).up.

Any idea on what hardware version I got? It's probably an old one, I opened up the scope and wanted to see the version number on the pcb but I couldn't find any (or I missed it).
The pcb of the power supply had a 1.02 version number.

By the way, I saw a picture of the pcb somewhere and it had heatsinks on the ADCs and on the Altera Cyclone 3 FPGA chip.
In my case, there are heatsinks on the ADCs, but not on the FPGA chip.
Should I put a heatsink there, or it doesn't get hot enough?
Also, no fan is installed.

[tinhead]

I recently bought a used Hantek DSO5102B from ebay.
I'm not sure what hardware version this model is.
On System Information it says hw version 0x555583e8.

ehm, they cheated on you, this is an really old hw you got.

I was getting 0xfe and 0xf7 errors. The only firmware that worked was tinhead's (thanks man) dst1kb_2.06.3__130814.1_.up when I renamed it to dst1kb_2.06.3_15102b_fact(130814.1).up.

right, there is no firmware support for that hardware anymore. For sure firmwares 2.6.x will run on it (be happy you didn't got hw1005 which is actually younger as yours but with hardware bugs), but on the other side you bought it 8 months after Hantek/Tekway stopped production of any S3C2440 based DSOs (and your is using that SoC).

I don't know, but i would probably send it back and request an new one (or some money back, it is NOS item and not NEW item)

Any idea on what hardware version I got? It's probably an old one, I opened up the scope and wanted to see the version number on the pcb but I couldn't find any (or I missed it).
The pcb of the power supply had a 1.02 version number.

you have hw0 !!!, from a SN i would say produced in Oct 2010 or so. This is the very first version, wondering who sold you that 

By the way, I saw a picture of the pcb somewhere and it had heatsinks on the ADCs and on the Altera Cyclone 3 FPGA chip.
In my case, there are heatsinks on the ADCs, but not on the FPGA chip.
Should I put a heatsink there, or it doesn't get hot enough?
Also, no fan is installed.

right, there was first version with no fans at all, then they added some for asias market, then they added heatsink on ADC, then on FPGA as well, then added fan, then repalced it by cheaper model.

[tinhead]

I've got a Hantek DSO5102B here, firmware is the old 2.06.3 120112.1 and ...

/e: Issue probably resolved. I found a 6 pin J801 between the two FPC connectors J900 and J702.

ehm it looks like you got old model as well, the UART J801 was only on HW0 between J900 and J702 ...

check my post just above this one, there is another one user who got same 3yrs old hardware :\

[astraios]

you have hw0 !!!, from a SN i would say produced in Oct 2010 or so. This is the very first version, wondering who sold you that 

I see, I was suspecting a hw0 version too. It was a used unit, I wasn't expecting the latest version, but I wasn't expecting the oldest version either.
I got it for about half the price compared to how much a new unit costs (at least for my area), so I thought to give it a try.

Do you believe the version I got (hw0) is vastly inferior (regarding signal accuracy / performance etc.) to the latest version (hw1007) Hantek DSO5102B?

right, there is no firmware support for that hardware anymore. For sure firmwares 2.6.x will run on it (be happy you didn't got hw1005 which is actually younger as yours but with hardware bugs), but on the other side you bought it 8 months after Hantek/Tekway stopped production of any S3C2440 based DSOs (and your is using that SoC).

If I ever need a different firmware version, (I doubt it, your firmware 130814.1 works great, but I wanted to ask anyway) should I assume that Tekway firmwares (for the DST1102B) should work on my Hantek DSO5102B? Tekway's firmware filename is "dst1kb_2.06.3_01102b_fe(120423.0).up".
However this looks to me like an older firmware version (so probably not worth it). I assume the number "120423" is a date code and means April 23rd 2012, is that correct?

[davidefa]

I received a few days ago my new scope: a hantek dso1122s.
Yesterday decided to try the bandwidth hack, with my surprise, I found that hantek had 'already hacked my scope' ( the scope already had the file /dst1202b in it and the 2ns timebase is already available ).
Sadly the only thing I can do is change the 'name' of the scope ( i think I should have to change logotype anf logotype.dis )... but I'm too lazy for that.
In conclusion I'm not happy for what hantek did to my scope... ;-)

P.S. thanks for the great informations included in this thread
P.P.S. my unit was advertised as having 2M memory, but it has only 1M

[Neverther]

I also got HW 0x555583e8, but I bought it in the beginning of 2011 as somewhat used from active forum user also seen on this thread.
Still running sw 2.06.3 110806.0 as I havent seen any real reason to upgrade.
SN: T 1G/008 003163.

Picky about USB keys as connecting some crash it.