Author Topic: Sniffing the Rigol's internal I2C bus  (Read 1450359 times)

0 Members and 2 Guests are viewing this topic.

Offline cybernet

  • Regular Contributor
  • *
  • Posts: 247
  • Country: 00
  • pm deactivated, use the search function ...
Re: Sniffing the Rigol's internal I2C bus
« Reply #200 on: June 28, 2013, 10:29:09 pm »
cybernet good work - what do you mean by crc cracking?


= bootloader checks a CRC (i assume) -> making it possible to load our own software, with a patched firmware i can boost TB to 500ps ;-)
___________________
"all rights reversed :-)"
R0=-0x18;
UNLINK;
RTS;
 

Offline alank2

  • Super Contributor
  • ***
  • Posts: 1966
Re: Sniffing the Rigol's internal I2C bus
« Reply #201 on: June 28, 2013, 10:32:41 pm »
edited
« Last Edit: July 10, 2013, 05:18:51 am by alank2 »
 

Offline marmad

  • Super Contributor
  • ***
  • Posts: 2979
  • Country: aq
    • DaysAlive
Re: Sniffing the Rigol's internal I2C bus
« Reply #202 on: June 28, 2013, 10:33:01 pm »
Why do you say downgrade to FW 05 from FW 03 - would that be upgrade?

Is there somewhere that details the FW release versions and also has them available for download?

Alan - the actual FW version numbers are:

FW#00.00.01.00.05
FW#00.01.00.00.03

People here can give you copies of either FW if/when you need them, but I have to say - I suspect delays of Rigol gear to NA (and elsewhere) are likely to get longer ;D

Edit: The currently known bugs (by FW release) are detailed here.
« Last Edit: June 28, 2013, 10:36:18 pm by marmad »
 

Offline alank2

  • Super Contributor
  • ***
  • Posts: 1966
Re: Sniffing the Rigol's internal I2C bus
« Reply #203 on: June 28, 2013, 10:34:16 pm »
FW 05 came out first, then a subsequent version was released.. FW 03

[sarcasm]that makes sense[/sarcasm]

I know Rigol doesn't have a firmware list/repository - I was hoping we did here someplace.
 

Offline cybernet

  • Regular Contributor
  • *
  • Posts: 247
  • Country: 00
  • pm deactivated, use the search function ...
Re: Sniffing the Rigol's internal I2C bus
« Reply #204 on: June 28, 2013, 10:36:36 pm »
= bootloader checks a CRC (i assume) -> making it possible to load our own software, with a patched firmware i can boost TB to 500ps ;-)

Do you know the location of the CRC?  Is it a CRC32?  Is it encrypted or changed in some way?

nope - when u find it, let us know ;-)
___________________
"all rights reversed :-)"
R0=-0x18;
UNLINK;
RTS;
 

Offline alank2

  • Super Contributor
  • ***
  • Posts: 1966
Re: Sniffing the Rigol's internal I2C bus
« Reply #205 on: June 28, 2013, 10:37:43 pm »
Alan - the actual FW version numbers are:
FW#00.00.01.00.05
FW#00.01.00.00.03

So there have only been two releases then?  Can you PM these to me?  I can PM you my email address if that is easier.

People here can give you copies of either FW if/when you need them, but I have to say - I suspect delays of Rigol gear to NA (and elsewhere) are likely to get longer ;D

TEquipment says they should be receiving some in a couple days, we shall see how long it takes to get the one I ordered.
 

Offline alank2

  • Super Contributor
  • ***
  • Posts: 1966
Re: Sniffing the Rigol's internal I2C bus
« Reply #206 on: June 28, 2013, 10:42:21 pm »
nope - when u find it, let us know ;-)
« Last Edit: July 10, 2013, 05:19:51 am by alank2 »
 

Offline marmad

  • Super Contributor
  • ***
  • Posts: 2979
  • Country: aq
    • DaysAlive
Re: Sniffing the Rigol's internal I2C bus
« Reply #207 on: June 28, 2013, 10:44:14 pm »
TEquipment says they should be receiving some in a couple days, we shall see how long it takes to get the one I ordered.
Well, I hope it works out - but as reported by van-c here, Tequipment told him 10-12 days on June 25th - and he already had one on order for awhile.
 

Offline marmad

  • Super Contributor
  • ***
  • Posts: 2979
  • Country: aq
    • DaysAlive
Re: Sniffing the Rigol's internal I2C bus
« Reply #208 on: June 28, 2013, 11:06:09 pm »
So there have only been two releases then?  Can you PM these to me?  I can PM you my email address if that is easier.
Early DS2000s came with FW#00.00.01.00.02 - although I've never seen anyone with a copy of that GEL.

FW#00.00.01.00.05 is here.

FW#00.01.00.00.03 is here.
« Last Edit: June 28, 2013, 11:22:36 pm by marmad »
 

Offline Carrington

  • Super Contributor
  • ***
  • Posts: 1201
  • Country: es
Re: Sniffing the Rigol's internal I2C bus
« Reply #209 on: June 28, 2013, 11:06:57 pm »
Hi!
Get one of the latest models have any advantage?

http://www.batronix.com/shop/index.html
Availability: The supply of this article (DS2072) is expected in approx. 11 to 21 days.

Excellent work, congratulations.  ;)
My English can be pretty bad, so suggestions are welcome. ;)
Space Weather.
Lightning & Thunderstorms in Real Time.
 

Offline marmad

  • Super Contributor
  • ***
  • Posts: 2979
  • Country: aq
    • DaysAlive
Re: Sniffing the Rigol's internal I2C bus
« Reply #210 on: June 28, 2013, 11:09:59 pm »
Availability: The supply of this article (DS2072) is expected in approx. 11 to 21 days.

Translation from Sales-Speak to Human: "We don't know when it will be available. Check back in 3 weeks to see if we know then."  ;D
 

Offline Carrington

  • Super Contributor
  • ***
  • Posts: 1201
  • Country: es
Re: Sniffing the Rigol's internal I2C bus
« Reply #211 on: June 28, 2013, 11:11:47 pm »
Availability: The supply of this article (DS2072) is expected in approx. 11 to 21 days.

Translation from Sales-Speak to Human: "We don't know when it will be available. Check back in 3 weeks to see if we know then."  ;D

I understand, thanks.  ;D
My English can be pretty bad, so suggestions are welcome. ;)
Space Weather.
Lightning & Thunderstorms in Real Time.
 

Offline marmad

  • Super Contributor
  • ***
  • Posts: 2979
  • Country: aq
    • DaysAlive
Re: Sniffing the Rigol's internal I2C bus
« Reply #212 on: June 28, 2013, 11:18:43 pm »
« Last Edit: June 28, 2013, 11:23:34 pm by marmad »
 

Offline JohannP

  • Contributor
  • Posts: 10
  • Country: za
Re: Sniffing the Rigol's internal I2C bus
« Reply #213 on: June 28, 2013, 11:22:38 pm »
Gentlemen & woman

I am drooling to get a fix like this on the DS4000 series scope's. Has somebody test this and what were the results?

Good work done so far on the DS2000 series.

Best regards.

Johann
 

Offline alank2

  • Super Contributor
  • ***
  • Posts: 1966
Re: Sniffing the Rigol's internal I2C bus
« Reply #214 on: June 28, 2013, 11:33:18 pm »
TEquipment says they should be receiving some in a couple days, we shall see how long it takes to get the one I ordered.
Well, I hope it works out - but as reported by van-c here, Tequipment told him 10-12 days on June 25th - and he already had one on order for awhile.

Yesterday I was told by tequipment that they have an order coming in within 2-3 days and that 6 were still not sold from that order...
« Last Edit: June 29, 2013, 04:34:05 am by alank2 »
 

Offline alank2

  • Super Contributor
  • ***
  • Posts: 1966
Re: Sniffing the Rigol's internal I2C bus
« Reply #215 on: June 28, 2013, 11:36:23 pm »
So there have only been two releases then?  Can you PM these to me?  I can PM you my email address if that is easier.
Early DS2000s came with FW#00.00.01.00.02 - although I've never seen anyone with a copy of that GEL.

FW#00.00.01.00.05 is here.

FW#00.01.00.00.03 is here.

Thanks
« Last Edit: July 10, 2013, 05:20:26 am by alank2 »
 

Offline alank2

  • Super Contributor
  • ***
  • Posts: 1966
Re: Sniffing the Rigol's internal I2C bus
« Reply #216 on: June 28, 2013, 11:46:49 pm »
What is the size of the eeprom that the firmware lives on?

Is the firmware compressed in any way?
 

Offline cybernet

  • Regular Contributor
  • *
  • Posts: 247
  • Country: 00
  • pm deactivated, use the search function ...
Re: Sniffing the Rigol's internal I2C bus
« Reply #217 on: June 28, 2013, 11:47:48 pm »
What is the size of the eeprom that the firmware lives on?

Is the firmware compressed in any way?

not compressed, check the first pages of this thread its all there what u need to get hints to the CRC.
___________________
"all rights reversed :-)"
R0=-0x18;
UNLINK;
RTS;
 

Offline cybernet

  • Regular Contributor
  • *
  • Posts: 247
  • Country: 00
  • pm deactivated, use the search function ...
Re: Sniffing the Rigol's internal I2C bus
« Reply #218 on: June 28, 2013, 11:55:54 pm »
LLLLLLL-RLGLLDS-DSA9LLL-LLLLLLL -> option installed (semi permanent)
LLLLLLL-RLGLLDS-VSA9LLL-LLLLLLL -> trial installed - the "V" denotes the trial option

still, BOTH keys are lost on powercycling with FW 05 ... so its definitly either just a test for their license keys or a field test option ;-)
___________________
"all rights reversed :-)"
R0=-0x18;
UNLINK;
RTS;
 

Offline alank2

  • Super Contributor
  • ***
  • Posts: 1966
Re: Sniffing the Rigol's internal I2C bus
« Reply #219 on: June 29, 2013, 12:03:06 am »
edited
« Last Edit: July 10, 2013, 05:20:46 am by alank2 »
 

Offline cybernet

  • Regular Contributor
  • *
  • Posts: 247
  • Country: 00
  • pm deactivated, use the search function ...
Re: Sniffing the Rigol's internal I2C bus
« Reply #220 on: June 29, 2013, 12:04:05 am »
I scanned the first 3 pages - what happens if you try to modify a single byte you deem safe to modify and load the modified firmware?  Does it reject loading it, or reject booting with it?

dont know ;-) try it and report back ;-)
___________________
"all rights reversed :-)"
R0=-0x18;
UNLINK;
RTS;
 

Offline alank2

  • Super Contributor
  • ***
  • Posts: 1966
Re: Sniffing the Rigol's internal I2C bus
« Reply #221 on: June 29, 2013, 12:08:55 am »
edited
« Last Edit: July 10, 2013, 05:20:58 am by alank2 »
 

Online egonotto

  • Regular Contributor
  • *
  • Posts: 184
Re: Sniffing the Rigol's internal I2C bus
« Reply #222 on: June 29, 2013, 01:21:21 am »
Hello Wim13,

you wrote: "YES it can be deleted..., just tried, do:  uninstall"

how can I do an uninstall ?

DSAA does not work. DS2072 does not accept it.

Best regards,
egonotto
« Last Edit: June 29, 2013, 01:24:01 am by egonotto »
 

Offline marmad

  • Super Contributor
  • ***
  • Posts: 2979
  • Country: aq
    • DaysAlive
Re: Sniffing the Rigol's internal I2C bus
« Reply #223 on: June 29, 2013, 01:30:36 am »
Yesterday I was told by tequipment that they have an order coming in within 2-3 days and that 6 were still not sold from that older...

Again, I hope for your sake that's true, but just be aware: since this thread started (May 18th) there hasn't been a single new owner of a DS2072 posting from NA in the main Rigol thread. There have been many new owners posting from the EU (and elsewhere), but it appears even that stock has now dried up.

Edit: I'm very curious as to when this changes.
« Last Edit: June 29, 2013, 01:37:21 am by marmad »
 

Offline marmad

  • Super Contributor
  • ***
  • Posts: 2979
  • Country: aq
    • DaysAlive
Re: Sniffing the Rigol's internal I2C bus
« Reply #224 on: June 29, 2013, 01:34:57 am »
Hello Wim13,

you wrote: "YES it can be deleted..., just tried, do:  uninstall"

how can I do an uninstall ?

DSAA does not work. DS2072 does not accept it.

Best regards,
egonotto

Using a SCPI command via Rigol Ultra Sigma:

Connect DSO via USB; boot the DSO; start Ultra Sigma; open SCPI Control Panel; type (or copy and paste) the following:

:SYSTem:OPTion:INSTall XXXXXXXXXXXXXXXXXXXXXXXXXXX  (the code)

then, if you want to get rid of it, immediately enter (without reboot):

:SYSTem:OPTion:UNINSTall

Edit: Corrected - via information from Wim13.  ;)
« Last Edit: June 29, 2013, 02:21:47 am by marmad »
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf