Author Topic: Sniffing the Rigol's internal I2C bus (Read 1184623 times)

grego · « **Reply #575 on:** July 23, 2013, 01:50:19 PM »

Quote from: BravoV on July 23, 2013, 11:12:32 AM

Damn, so this works also at DS4xxx series, great news.

Edit : Fyi, I keep saving the offline version of this whole thread, just in case Dave received a cease & desist love letter from Rigol's lawyer.

Seriously? Confirmed to work on the 4000 series too?

BravoV · « **Reply #576 on:** July 23, 2013, 01:53:44 PM »

Quote from: grego on July 23, 2013, 01:50:19 PM

Quote from: BravoV on July 23, 2013, 11:12:32 AM
Damn, so this works also at DS4xxx series, great news.

Edit : Fyi, I keep saving the offline version of this whole thread, just in case Dave received a cease & desist love letter from Rigol's lawyer.

Seriously? Confirmed to work on the 4000 series too?

One post above me, here re-quoting the photo, it says DS4024.

true · « **Reply #577 on:** July 23, 2013, 02:00:41 PM »

Quote from: BravoV on July 23, 2013, 01:53:44 PM

One post above me, here re-quoting the photo, it says DS4024.

DSA9? Oh wait, I read, DSH9. I'll note that on the webgen.

----

I've updated the webgenerator with the new version so keys should work better. Also have a DS4K version (same thing but you enter you own option characters).

Uup · « **Reply #578 on:** July 23, 2013, 02:59:56 PM »

Yes, DSH9 is correct.

I used the last code that cybernet asked DS4k owners to try, in post #259 back on page 18 of this thread. Although he indicates that DSH9 is for 8 options but it actually enables 5 options. I think there are currently only 5 "official" options for the DS4k.

roli_bark · « **Reply #579 on:** July 23, 2013, 03:11:36 PM »

Nice !,
What about the DS4024 500mhz BW option ?

Uup · « **Reply #580 on:** July 23, 2013, 03:29:46 PM »

Quote from: roli_bark on July 23, 2013, 03:11:36 PM

Nice !,
What about the DS4024 500mhz BW option ?

I was thinking the same thing. I'm going to experiment with different codes and see if it's possible.

ve7xen · « **Reply #581 on:** July 23, 2013, 04:34:10 PM »

Quote from: BravoV on July 23, 2013, 11:12:32 AM

Edit : Fyi, I keep saving the offline version of this whole thread, just in case Dave received a cease & desist love letter from Rigol's lawyer.

I've also been mirroring the key files/information at http://www.gotroot.ca/rigol/

I have also built binaries of true's latest source for i386 and x86_64 Linux and placed them there also, if anyone is too lazy to build it themselves. (And geeze, can't take MIRACL seriously. A crypto library that doesn't even use a Makefile??)

Thanks to everyone that's contributed to this reversing. This is a triumph!

tinhead · « **Reply #582 on:** July 23, 2013, 06:18:10 PM »

time for DSA815?

mickpah · « **Reply #583 on:** July 23, 2013, 06:27:25 PM »

I thought I had this fixed last night , but no.
I have a 2072 now stuck as a 2202, not so bad, original trial licenses still active, but no way any of the key gens seem to work for me.
It is a 13 character serial if this makes a difference.
compiled code myself, ran precompiled incase I couldn't follow simple instructions
getting a bit beyond frustrated now

UberSteve · « **Reply #584 on:** July 23, 2013, 06:50:39 PM »

Quote from: mickpah on July 23, 2013, 06:27:25 PM

getting a bit beyond frustrated now

What firmware are you running? Maybe try upgrading to the latest, if not already running it?

mickpah · « **Reply #585 on:** July 23, 2013, 06:53:53 PM »

Quote from: UberSteve on July 23, 2013, 06:50:39 PM

Quote from: mickpah on July 23, 2013, 06:27:25 PM
getting a bit beyond frustrated now

What firmware are you running? Maybe try upgrading to the latest, if not already running it?

yep did that, rolled back two versions and forward again. no change.

just get this when sending the keys with scpi usb or lan

* Error£¡£¡£¡
VISA: (Hex 0xBFFF0015) Timeout expired before operation completed.
-> :SYSTem:OPTion:INSTall

ve7xen · « **Reply #586 on:** July 23, 2013, 07:04:43 PM »

The scope will ignore a key if you leave the '-' in there. It should just be the string of characters, if you send via SCPI.

You should get either an Option Installed or some error message on screen shortly after.

Maalobs · « **Reply #587 on:** July 23, 2013, 07:12:02 PM »

Or use the on-screen keyboard on the scope to enter your license code, it's actually quite fast to use.

mickpah · « **Reply #588 on:** July 23, 2013, 07:22:26 PM »

thanks all, yes I was dropping the - and even tried via the screen, in the end it worked.
I used a new seed with every attempt, not sure if I struck a lucky seed ?
Bottom line - I'm now a happy camper, could feel myself getting all OCD.
Now to void the warranty on my DP831 - I haven't seen any internal pic anywhere yet. Really hoping that is blackfin based too..

Hirez and lan world be nice

mklimasz · « **Reply #589 on:** July 23, 2013, 07:28:34 PM »

I'd like to confirm the gen (Windows version) works perfectly - entered keys via screen, now my 2072 is permanently transformed into 2202 with options installed. Great work!

Carrington · « **Reply #590 on:** July 23, 2013, 09:46:09 PM »

Quote from: ve7xen on July 23, 2013, 04:34:10 PM

I've also been mirroring the key files/information at http://www.gotroot.ca/rigol/

I love it, it is so much more compact and less confusing.

Uup · « **Reply #591 on:** July 23, 2013, 10:35:24 PM »

Quote from: ve7xen on July 23, 2013, 04:34:10 PM

I've also been mirroring the key files/information at http://www.gotroot.ca/rigol/

It's great to have all that info in the one place for easy access, thanks!

However, some of the zip files are corrupt... (dstool.zip, RiGen-1.zip, ScopeCommander.zip)

tinhead · « **Reply #592 on:** July 23, 2013, 10:43:27 PM »

Quote from: Uup on July 23, 2013, 10:35:24 PM

However, some of the zip files are corrupt... (dstool.zip, RiGen-1.zip, ScopeCommander.zip)

no, they not

roli_bark · « **Reply #593 on:** July 23, 2013, 10:43:28 PM »

Also, I speculate that the keys.txt is different for the DS40xx line.

For example - there's no Mem option - they come all the same - , but there should be 100/200/350/500mhz options.

XaS · « **Reply #594 on:** July 23, 2013, 10:46:08 PM »

Thank you guys, this is just awesome! I can confirm that the Win GUI (I was lazy this morning

) worked perfectly on my 2072 with 00.01.00.05. After updating to 01.01.00.02 the options are still enabled. (I didn't try to upgrade to an 2202 yet.)

MfG XaS

olsenn · « **Reply #595 on:** July 23, 2013, 10:54:40 PM »

Wow, I haven't been following this post, but it looks like it might be awesome! So has there been a key generator built for the DSA815? Or does this only work with the DS2000 oscilloscopes?

colinbeeforth · « **Reply #596 on:** July 23, 2013, 11:31:25 PM »

I had the same experience as Xas, my DS2072 is now far more interesting. Congratulations to those who contributed, you have my gratitude and total admiration for such incredible sleuthing skills. Brilliant work!

I'll be able to retire my old LeCroy 9310A, I have a reasonable alternative now.

Cheers, Colin

DL5TOR · « **Reply #597 on:** July 23, 2013, 11:41:55 PM »

Quote from: olsenn on July 23, 2013, 10:54:40 PM

Wow, I haven't been following this post, but it looks like it might be awesome! So has there been a key generator built for the DSA815? Or does this only work with the DS2000 oscilloscopes?

As of right now there is no implemetion for the DSA815. But I am working on it

metalphreak · « **Reply #598 on:** July 24, 2013, 12:03:20 AM »

Quote from: roli_bark on July 23, 2013, 10:43:28 PM

Also, I speculate that the keys.txt is different for the DS40xx line.

For example - there's no Mem option - they come all the same - , but there should be 100/200/350/500mhz options.

Has anyone confirmed that all the bandwidth variations of the DS4000 series have the same internals? I wouldn't be surprised if the 350/500mhz models have a different front end to the 100/200mhz models.

roli_bark · « **Reply #599 on:** July 24, 2013, 12:26:11 AM »

See here:
http://www.eevblog.com/forum/reviews/rigol-ds4014-decided-it-would-be-more-fun-to-be-a-ds4054/

Hench, it looks like it's the same HW.


EEVblog Main Site	EEVblog on Youtube	EEVblog on Twitter	EEVblog on Facebook

Author Topic: Sniffing the Rigol's internal I2C bus (Read 1184623 times)

Share me