Author Topic: TDS 1000,2000,3000 BW Hack  (Read 69695 times)

0 Members and 1 Guest are viewing this topic.

Offline rfdesTopic starter

  • Regular Contributor
  • *
  • Posts: 186
  • Country: us
TDS 1000,2000,3000 BW Hack
« on: July 15, 2017, 05:55:08 pm »
Gents -
I've seen this come up a number of times as to how to extend the BW of these scopes.  Here is some information that I will share, although I have only tested several models and it did work on the two non lettered versions that I have.

I particular, I was able to update a TDS3034 to TDS3054 (non-lettered) and a TDS1001 to TDS1012
I will leave it up to the group to try this out on the 'B' and 'C' models to see if it works.

In regards to the TDS3000 models, the non-lettered and B models only will accommodate fw ver 3.41.  V3.41 does not work.  I had to downgrade to 3.39, perform the change and upgrade back to 3.41.  This worked.  The TDS3000 C models have not be tried.

If any of this information has already been posted, I am unaware.  Please use at your own risk.
You will need to setup your TekVisa OpenChoice tools and run the Talk/Listener tool in order to force
SCPI commands to your unit, either through USB or GPIB.

Use *IDN? to check communications
For the TDS3000 series (downgraded to 3.39, then re-updated to  3.41)
Send the following:
        PASSWORD PITBULL
        MCONFIG TDS3054

You will not get any feedback from the unit.  Reboot the unit and check to see if it worked.  Again, with V3.39 it worked great.

For the TDS1000/2000
        PASSWORD PITBULL
        MODEL TDS20xx  (with xx = model #)

I have not tested with 'B' and 'C' models so report back what you find out.
Good luck.
 

Online Fraser

  • Super Contributor
  • ***
  • Posts: 13148
  • Country: gb
Re: TDS 1000,2000,3000 BW Hack
« Reply #1 on: July 15, 2017, 06:13:02 pm »
Thanks, I will give it a go.

Fraser
If I have helped you please consider a donation : https://gofund.me/c86b0a2c
 

Offline tautech

  • Super Contributor
  • ***
  • Posts: 28139
  • Country: nz
  • Taupaki Technologies Ltd. Siglent Distributor NZ.
    • Taupaki Technologies Ltd.
Re: TDS 1000,2000,3000 BW Hack
« Reply #2 on: July 16, 2017, 05:42:45 am »
Thanks rfdes  :-+

We looked at this a while back in this thread but never got far:
https://www.eevblog.com/forum/testgear/tektronix-tds1000b-series-hacks/


Avid Rabid Hobbyist
Siglent Youtube channel: https://www.youtube.com/@SiglentVideo/videos
 

Offline aquaman8

  • Newbie
  • Posts: 4
  • Country: ca
Re: TDS 1000,2000,3000 BW Hack
« Reply #3 on: July 17, 2017, 02:31:18 pm »
Great information and thanks for all the hard work!

Any idea where I can find previous versions of the firmware for the TDS3000 series? I know that version 3.39 is referred to, but are  earlier versions available as well? If so, where?

Thanks,

Mitch
 

Offline Vtech

  • Regular Contributor
  • *
  • Posts: 58
  • Country: pl
Re: TDS 1000,2000,3000 BW Hack
« Reply #4 on: July 19, 2017, 02:41:53 pm »
Here it is:
http://www.hakanh.com/dl/docs/3.39.zip

It comes from interesting page about performance verification software of Tek scopes: http://www.hakanh.com/dl/TDS_pv.htm
 

Offline Vtech

  • Regular Contributor
  • *
  • Posts: 58
  • Country: pl
Re: TDS 1000,2000,3000 BW Hack
« Reply #5 on: July 20, 2017, 12:01:48 pm »
I can confirm that this hack works on TDS3034B and TDS3032.

"B" series has the same firmware as non lettered series. I've downgraded the firmware to 3.39, did the hack via RS232 and upgraded back to 3.41 (it's so hard to find 3.5" floppy disks and working FDD these days). Don't forget to do calibration after the whole procedure!
For TDS3032 I used "MCONFIG TDS3052" and for TDS3034B "MCONFIG TDS3054B". Upgrading the bandwidth to 500 MHz also upgrades sampling rate to 5 GSPS. This is really impressive and gives those old dogs new life.

This hack creates nice combo with application dongles hack (https://www.eevblog.com/forum/projects/tektronix-tds3000-oscilloscope-modules-tds3uam/).
 

Offline Hydron

  • Frequent Contributor
  • **
  • Posts: 978
  • Country: gb
Re: TDS 1000,2000,3000 BW Hack
« Reply #6 on: July 21, 2017, 10:10:37 pm »
Thanks for the great tips about upgrading the TDS3000B series!

I just tried it on a fw 3.27 TDS3014B and it now happily runs up to 500MHz. Didn't even need to use TekVISA, you can enter the commands via ethernet using the scope's own webpage (B series have built in ethernet).

I have just realised that there was a 600MHz version too - does anyone know if TDS3064B is an option as well? I can't try it myself until monday.
« Last Edit: July 21, 2017, 10:27:35 pm by Hydron »
 
The following users thanked this post: analogRF, lern01

Offline rfdesTopic starter

  • Regular Contributor
  • *
  • Posts: 186
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #7 on: August 04, 2017, 04:21:34 pm »
I forgot to mention that this hack will also work for the TDS200 series units.
i.e. to upgrade a TDS 210 to TDS 220

        PASSWORD PITBULL
        MODEL TDS 220

I really don't know if people still use these scopes any longer.
 

Offline alm

  • Super Contributor
  • ***
  • Posts: 2840
  • Country: 00
Re: TDS 1000,2000,3000 BW Hack
« Reply #8 on: August 04, 2017, 04:37:04 pm »
I am sure there will be some people still using TDS 200 scopes. If bandwidth and acquisition rate is sufficient, than it is still a decent analog scope replacement in my opinion. As long as you do not expect to be able to zoom in after acquisition, but neither will an analog scope ;).
 
The following users thanked this post: Someone

Offline Vtech

  • Regular Contributor
  • *
  • Posts: 58
  • Country: pl
Re: TDS 1000,2000,3000 BW Hack
« Reply #9 on: August 08, 2017, 03:36:21 pm »
I am happily reporting that option TDS3064B is working!
TDS3014B upgraded to 600MHz 5GS/s from 100MHz 1.25GS/s version.
 

Offline darkstar49

  • Frequent Contributor
  • **
  • Posts: 309
Re: TDS 1000,2000,3000 BW Hack
« Reply #10 on: August 17, 2017, 08:35:50 pm »

Hello together,

did anyone check whether the sampling rate effectively increased ??? It's somehow hard to believe that Tek used 5GS/s ADC's in the 301x and 303x models...

I once had an MSO3014, which I upgraded to 500Mhz (with a key), but also played around with some system commands... could change model name & Co, but definitely without affecting it's "real" performance...

I've got a 3014 to check... but if the 305x's hardware is different, what is the 'real' effect of this mod ??

Cheers
 
 

Offline texaspyro

  • Super Contributor
  • ***
  • Posts: 1407
Re: TDS 1000,2000,3000 BW Hack
« Reply #11 on: August 17, 2017, 09:28:26 pm »

It's somehow hard to believe that Tek used 5GS/s ADC's in the 301x and 303x models...


It's even harder to believe that they would spend the gazillion dollars it would have taken to fab separate custom DAC chips for the 3014/3024/3034/3054.  I read somewhere that a guy compared the 3014 and 3054 DAC module part numbers and they were the same... and, of course, everything you read on the internet is true!
 
The following users thanked this post: Someone, extervision, WattsThat

Offline darkstar49

  • Frequent Contributor
  • **
  • Posts: 309
Re: TDS 1000,2000,3000 BW Hack
« Reply #12 on: August 17, 2017, 09:36:54 pm »


Mmmmh...  sounds somehow promising...    I'll make myself after the 3.39 fw, as I suspect that it's no longer on Tek's site (but I might be wrong...??)
 

Offline chronos42

  • Regular Contributor
  • *
  • Posts: 137
  • Country: de
Re: TDS 1000,2000,3000 BW Hack
« Reply #13 on: August 18, 2017, 06:24:01 am »
I have tried to upgrade a Tek TDS2014 to a TDS 2024 and used this commands, posted by rfdes

For the TDS1000/2000
        PASSWORD PITBULL
        MODEL TDS20xx  (with xx = model #)

But I had no luck, scope is still TDS 2014.
Connection via GPIB was established and I have tried different software to send the commands.
It seems that the scope could read it, but it does nothing. But when I made an intentional error like PetBULL instead of PITBULL it gaves back an error.

Firmware is 4.12.

Is it not working with this firmware or did I overlooked something?
Any hints?

Thanks
« Last Edit: August 18, 2017, 03:24:01 pm by chronos42 »
 

Offline Old Don

  • Regular Contributor
  • *
  • Posts: 163
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #14 on: August 18, 2017, 11:55:22 am »
Years ago I purchased a small startup company's daisywheel printer that came with 4K or optional 16K buffers. I paid the extra couple $100's for the 16K version. It arrived as 4K. Called the company and got put through to engineering and when they heard the problem they told me to open the unit up and cut a trace and I'd have the 16K model.  :wtf:  :palm:

Also, some years ago it was So other than maybe hand sorting to weed out slow boards after board assembly I can see Tek just using software patches to offer various models with the same hardware. ossible to purchase CPU's and add/remove resistors/jumpers on the top to change the operating frequency of a slow one to a more expensive faster one since that was the only difference in some cases. Early production run CPU's might have had problems at faster speeds, but once they got production up and running they all worked at the faster speeds. Now the makers make sure speeds are set inside the packaging and can't be fooled with like in the earlier days.

So while I don't have first hand info, but other than maybe hand sorting to weed out slow boards after board assembly, I can see Tek just using software patches to offer various models with the same hardware. You can add options to the TDS models with software patches so why not speeds?
Retired - Formerly: Navy ET, University of Buffalo Electronic Tech, Field Engineer and former laptop repair business owner
 

Offline rfdesTopic starter

  • Regular Contributor
  • *
  • Posts: 186
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #15 on: August 19, 2017, 01:53:35 am »
I forgot to mention that for the TDS1000/2000 and TDS200 instruments, the BW update will not be saved unless a full calibration adjustment  is performed before the unit is shutdown.
 
The following users thanked this post: Someone, tautech, jdutky

Offline chronos42

  • Regular Contributor
  • *
  • Posts: 137
  • Country: de
Re: TDS 1000,2000,3000 BW Hack
« Reply #16 on: August 19, 2017, 05:25:35 am »
Hi rfdes,

so that means first enter the password, after that make a new adjustment with 200MHz upper bandwith. I will give it a try, many thanks you for the hint.
 
The following users thanked this post: engiadina, jdutky

Offline snoopy

  • Frequent Contributor
  • **
  • Posts: 767
  • Country: au
    • Analog Precision
Re: TDS 1000,2000,3000 BW Hack
« Reply #17 on: August 19, 2017, 05:49:23 am »
Years ago I purchased a small startup company's daisywheel printer that came with 4K or optional 16K buffers. I paid the extra couple $100's for the 16K version. It arrived as 4K. Called the company and got put through to engineering and when they heard the problem they told me to open the unit up and cut a trace and I'd have the 16K model.  :wtf:  :palm:


That sounds like the story of the dude who used to fix steam engines by bashing them with a hammer.
"That will be 50 dollars thankyou very much ! "
"What ! but you only hit it with  a hammer ! "
"Yep 1 dollar to hit it and another 49 dollars for knowing where to hit it" :D LOL

cheers
 

Offline sorenkir

  • Regular Contributor
  • *
  • Posts: 140
  • Country: fr
Re: TDS 1000,2000,3000 BW Hack
« Reply #18 on: August 19, 2017, 05:33:14 pm »
I forgot to mention that this hack will also work for the TDS200 series units.
i.e. to upgrade a TDS 210 to TDS 220

        PASSWORD PITBULL
        MODEL TDS 220

I really don't know if people still use these scopes any longer.

Hi,

I have tried this. OK, the scope reports it is a TDS220:

*IDN? --> TEKTRONIX,TDS 220,0,CF:91.1CT FV:v1.19 TDS2CM:CMV:v1.04

but the physical bandwidth is not changed. The -3dB point is still around 80MHz.
There must be something else to do to increase bandwidth...

Michel.
 
The following users thanked this post: edavid

Offline carl_lab

  • Frequent Contributor
  • **
  • Posts: 418
  • Country: de
Re: TDS 1000,2000,3000 BW Hack
« Reply #19 on: August 20, 2017, 08:37:18 am »
Can somebody else who made the hack, check real bandwidth, please?
 

Offline Hydron

  • Frequent Contributor
  • **
  • Posts: 978
  • Country: gb
Re: TDS 1000,2000,3000 BW Hack
« Reply #20 on: August 20, 2017, 03:34:18 pm »
I don't have a "leveled sine wave generator" that goes high enough to check properly, but I did a quick test with the output of a spectrum analyser tracking generator and the TDS3014B is definitely running somewhere close to what I'd expect from a TDS3054B. Have not tried the TDS3064B code yet, but someone else said that it works too.
 
The following users thanked this post: carl_lab

Offline texaspyro

  • Super Contributor
  • ***
  • Posts: 1407
Re: TDS 1000,2000,3000 BW Hack
« Reply #21 on: August 20, 2017, 04:01:39 pm »
Does anybody know if a TDS30xx (non-B version) can be turned into a TDS3064?
 

Offline Vtech

  • Regular Contributor
  • *
  • Posts: 58
  • Country: pl
Re: TDS 1000,2000,3000 BW Hack
« Reply #22 on: August 25, 2017, 11:08:08 am »
I turned TDS3032 into TDS3052. I think this is the max for non B version. There was never TDS3064 version sold by Tek.

For both versions I can confirm that the sampling rate increases to 5 GS/s. I've checked number of points per division on 1ns timescale with dots mode on. I haven't tested bandwidth properly but I did some measurements with fast signals and response on a TDS3014B unit hacked to TDS3064B is definitely well beyond 100MHz.
 

Offline texaspyro

  • Super Contributor
  • ***
  • Posts: 1407
Re: TDS 1000,2000,3000 BW Hack
« Reply #23 on: August 25, 2017, 11:46:02 am »
I hooked one of those cheap-ish 30 MHz .. 4.4 GHz touchscreen ADF4351 based sweepers to a TDS3034 -> TDS3054.  It outputs a square-ish wave (but it's built on a two layer circuit board, so who knows what the waveform really looks like).   

Anyway,  amplitude and square-ish-ness start to drop off around 300 MHz.   The amplitude is down 50% at 1 GHz.   Trigger and sampling go to crap at around 1.1 GHz.   I did not re-cal the scope after setting the upgrade.

Above 700 MHz there is some coupling into other channels.  At 1 GHZ I have 500 mV P-P on the chan 1 input  and disconnected chan 4 has a 10 mV P-P image of chan 1.

I need to break out a leveled sine wave generator to do a real test...
 

Offline Vtech

  • Regular Contributor
  • *
  • Posts: 58
  • Country: pl
Re: TDS 1000,2000,3000 BW Hack
« Reply #24 on: August 25, 2017, 01:49:47 pm »
I've just done some test on TDS3014B hacked to TDS3064B using RIGOL DSA815TG. Tracking gen in Rigol isn't perfectly flat but I've tried to calibrate it using DSA815 itself. I've used zero span option and compared output level at higher frequencies to output at 50MHz. I did separate comparison for each higher frequency switching between this frequency and 50MHz setting (If you let DSA815 run for a while the level drifts by as much as 1dB. It also changes when DSA is doing self calibration in the background from time to time but those drifts seem to be in SA part not in TG. TG is not flat but it is fairly stable in time). Tests were done on channel 1 of the scope with internal 50 \$\Omega\$ termination, after calibration. Level was measured using cursors on the screen in peak-peak value.

Results are:

Freq:        Scope level [mV p-p]       unadjusted dB level      Sig gen correction     corrected dB level
50 MHz     652                                   0                                   0                               0
100 MHz   622                                   -0.41                             -0.3                          -0.11
200 MHz   610                                   -0.58                             -0.2                          -0.38
300 MHz   550                                   -1.48                             0.1                           -1.58
400 MHz   516                                   -2.03                             0                              -2.03
500 MHz   462                                   -2.99                             -0.75                        -2.24
600 MHz   434                                   -3.54                             -0.8                          -2.74
700 MHz   386                                   -4.55                             -0.7                          -3.85

I'd guess that I'm no more than 1dB off on my measurements. 3dB point appears to be above 600MHz. Above 750MHz something strange began to happen with the trace. It looked like there was additional low frequency modulation (similar to aliasing but it couldn't be it). I'm not sure what was it.
 
The following users thanked this post: Hydron, vmax

Offline Hydron

  • Frequent Contributor
  • **
  • Posts: 978
  • Country: gb
Re: TDS 1000,2000,3000 BW Hack
« Reply #25 on: August 26, 2017, 05:51:38 pm »
Thanks for the tests with the DSA815TG. I also have access to one of these and was intending on doing a similar test (with both the Tek scope and others) - good to know the tracking generator doesn't vary too wildly!
 

Offline carl_lab

  • Frequent Contributor
  • **
  • Posts: 418
  • Country: de
Re: TDS 1000,2000,3000 BW Hack
« Reply #26 on: August 29, 2017, 01:17:20 pm »
I forgot to mention that this hack will also work for the TDS200 series units.
i.e. to upgrade a TDS 210 to TDS 220

        PASSWORD PITBULL
        MODEL TDS 220
I've tried this way:

sent: *IDN?
received: TEKTRONIX,TDS210,0,CF:91CT FV:v.2.03 TDS2CM:v1.04

sent: PASSWORD PITBULL
sent: MODEL TDS 220

Checked menu utility/system status: TDS210, firmware etc. <unchanged>
sent: *IDN?
received: TEKTRONIX,TDS210,0,CF:91CT FV:v.2.03 TDS2CM:v1.04 <unchanged>

-3dB bandwith before: 83MHz, after: unchanged.


What went wrong?  :-\
« Last Edit: August 30, 2017, 06:17:47 am by carl_lab »
 

Offline texaspyro

  • Super Contributor
  • ***
  • Posts: 1407
Re: TDS 1000,2000,3000 BW Hack
« Reply #27 on: August 29, 2017, 01:39:58 pm »
Try with and withhout a space between the TDS and 220?   Also after sending the MODEL command, send *IDN to see if the change worked.   Also, one guy reported that you need to fully recalibrate the scope after doing the MODEL and before powering it down.
 
The following users thanked this post: carl_lab

Offline carl_lab

  • Frequent Contributor
  • **
  • Posts: 418
  • Country: de
Re: TDS 1000,2000,3000 BW Hack
« Reply #28 on: August 29, 2017, 02:11:01 pm »
Try with and withhout a space between the TDS and 220?
Tried with and without space this time.
Also tried MCONFIG TDS220 (with and without a space between the TDS and 220).

Also after sending the MODEL command, send *IDN? to see if the change worked.
Still unchanged...

Tried that on another TDS210 with firmware 1.06 instead of 2.03 without success.  :-\

Also tried hacking a TDS1002 with half success.
After doing that, *IDN? replied TDS1012 as wanted, but without a new calibration, it was reset to TDS1002 as reported before.

Is there a trick to avoid the needed calibration after hacking the scope? I don't have a scope calibrator at the moment, so I tried manual calibration using DC calibrator and leveled RF generator, but I mixed something up, and calibration failed.
Obviously after first failed calibration step, model is reset to TDS1002 automatically.
« Last Edit: August 30, 2017, 05:06:54 pm by carl_lab »
 

Offline carl_lab

  • Frequent Contributor
  • **
  • Posts: 418
  • Country: de
Re: TDS 1000,2000,3000 BW Hack
« Reply #29 on: September 18, 2017, 02:40:04 pm »
Scope calibrator is back in lab, so I tried that TDS210 with firmware 1.06 again, including adjustment.
Adjustment ran through without failure, but nothing changed.
Bandwidth ~80MHz, IDN was reset automatically to TSD210 after adjustment (before adjustment and after hacking it was TDS220).

Update:
I also tried a TDS1002 with firmware 2.06, including adjustment.
Adjustment ran through without failure, but nothing changed.
IDN was reset automatically to TSD1002 after adjustment (checked bandwidth: ~84MHz).

So this hack doesn't work for TDS 210 or TDS 1002 !  :-\

I forgot to mention that for the TDS1000/2000 and TDS200 instruments, the BW update will not be saved unless a full calibration adjustment  is performed before the unit is shutdown.
I used automatic Fluke Met/Cal adjustment procedure (I removed one *RST command in the beginning not to reset the scope), but that didn't make the hack operating anyway.
« Last Edit: September 21, 2017, 01:00:53 pm by carl_lab »
 
The following users thanked this post: edavid

Offline Hydron

  • Frequent Contributor
  • **
  • Posts: 978
  • Country: gb
Re: TDS 1000,2000,3000 BW Hack
« Reply #30 on: November 09, 2017, 03:49:38 pm »
Just checked a TDS3014B->TDS3054B upgraded unit with this: https://www.eevblog.com/forum/projects/yet-another-fast-edge-pulse-generator/

I was unable to upgrade all the way to TDS3064B (may have a too-early firmware), but it looks like the 500MHz upgrade was very successful:
 

Offline skennedy

  • Contributor
  • Posts: 44
  • Country: au
Re: TDS 1000,2000,3000 BW Hack
« Reply #31 on: December 02, 2017, 04:01:07 am »
I purchased a TDS3014B that came with 3.41. I downgraded the firmware to 3.39 and I now have a TDS3064B with version 3.41.

The scope needs to be calibrated as it now has a big DC offset and triggering is pretty terrible also. I have some instruments that can provide the low ripple DC and a 80MHz AC signal. Running through the calibration test I can get almost to the end.

The pulse generator that is required is a little more difficult for me to find. How accurate does it need to be? We have a 3ns rise time pulse generator but it certainly doesn't go to -2.2V. What is everyone else using? Can I use an FPGA or similar to generate a high rise time? Or maybe a fast comparator?
 

Offline texaspyro

  • Super Contributor
  • ***
  • Posts: 1407
Re: TDS 1000,2000,3000 BW Hack
« Reply #32 on: December 02, 2017, 05:11:43 am »
Just checked a TDS3014B->TDS3054B upgraded unit with this:

Upgrade of a 3034 (non-b) to 3054 also worked... 3.39 fw.  Verified with Bodner's pulser.

Why is it necessary to downgrade 3.41 to 3.39?  Did they remove the magic spell in the 3.41 firmware?  The person I got the scope from did the hack and I don't think it ever had 3.41 on it. It had all the previous firmware floppies with it, but no 3.41  Does 3.41 bring anything useful to the party?
 

Offline ChrisLX200

  • Supporter
  • ****
  • Posts: 458
  • Country: gb
Re: TDS 1000,2000,3000 BW Hack
« Reply #33 on: December 02, 2017, 05:29:11 am »
I had not noticed this thread before. I have a 3014B, recently upgraded to 3.41 fw, so I will try this hack ASAP. Got the older 3.39 fw from the link earlier in this thread so should be good to go, but will have to re-install TekVisa (I deleted it after it caused problems - continually reporting device disconnected).

So to be clear - after the upgrade hack a recallibration is required before use?
 

Offline Hydron

  • Frequent Contributor
  • **
  • Posts: 978
  • Country: gb
Re: TDS 1000,2000,3000 BW Hack
« Reply #34 on: December 02, 2017, 09:09:38 am »
The one I tried this on didn't seem to need a cal afterwards. This was just from use and quick testing though, don't have the equipment required for the cal/verification.
 

Offline skennedy

  • Contributor
  • Posts: 44
  • Country: au
Re: TDS 1000,2000,3000 BW Hack
« Reply #35 on: December 03, 2017, 04:43:10 am »
I'm not sure if you need to but my scope certainly did. Perhaps the lack of calibration was pre-existing as I didn't do a lot of testing before I upgraded the bandwidth. I have been able to calibrate using a Keithley 2450 sourcemeter, a R&S sma100a rf siggen and a pulse generator from Berkeley Nucleonics that we have in the work lab. It obviously isn't NIST certified but a lot better than before. Needless to say the entire process took well over an hour.
 

Offline ChrisLX200

  • Supporter
  • ****
  • Posts: 458
  • Country: gb
Re: TDS 1000,2000,3000 BW Hack
« Reply #36 on: December 19, 2017, 10:38:48 pm »
Confirm that the hack worked for my TDS3014B, which is now functioning as a TDS3054B. Now about to replace the firmware with 3.41 again..

Edit: Updated firmware and ran the self-cal, seems to be OK. Image shows the scope is running at 5.00GS/s (signal a 25MHz square wave - the max freq from my Siglent SDG1025 - 1V p-p, zero offset.
« Last Edit: December 20, 2017, 12:04:48 am by ChrisLX200 »
 

Offline darkstar49

  • Frequent Contributor
  • **
  • Posts: 309
Re: TDS 1000,2000,3000 BW Hack
« Reply #37 on: January 31, 2018, 06:58:07 am »

just pimped-up a TDS3014B, no issue.

Btw, no need for GPIB, the web-interface perfectly does the job for the B-series (or a TDS3EM equipped non-B)

 

Offline texaspyro

  • Super Contributor
  • ***
  • Posts: 1407
Re: TDS 1000,2000,3000 BW Hack
« Reply #38 on: January 31, 2018, 07:01:13 am »
Btw, no need for GPIB, the web-interface perfectly does the job for the B-series (or a TDS3EM equipped non-B)

Or the serial port if you have a comm module with one of those.
 

Offline sobakava

  • Contributor
  • Posts: 14
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #39 on: February 24, 2018, 08:28:25 pm »
Has anybody tried to do this with TDS3xxxC series?
 

Offline mcguire

  • Newbie
  • Posts: 8
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #40 on: February 28, 2018, 08:16:17 pm »
FYI, I've verified that the procedure detailed at the beginning of this thread works on a TDS3012 (no letter suffix) with no issues.  I downgraded from v3.41 to v3.39, applied, the hack, and reinstalled v3.41.  I set the model to TDS3052.  I used the command functionality in the web interface from a browser while the oscilloscope was connected to my network.

Quick and dirty measurement with a Bodnar pulser (38ps rise time measured on an 11801A+SD26) showed a rise time of 2.3ns before the hack, and 1.0ns after.  No other measurements performed as of yet.

I did notice that there was a significant DC offset after the hack.  I'm pretty sure that wasn't there beforehand.  Running signal path compensation took care of it, now it's perfect.

                                   -Dave
 

Offline Dogsled

  • Newbie
  • Posts: 2
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #41 on: February 28, 2018, 10:41:12 pm »
Successfully updated  a 3032b to xx52B, procedure as previously described.

Now looking for some of those Blank module chips parts? so I can glue in an Eprom for the options. Anyone out there know where to get those?

Thanks to all, this has been extremely helpful, I will outline what I did (and what worked)  for the options upgrade once I have all the parts.
Jon
 

Offline mcguire

  • Newbie
  • Posts: 8
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #42 on: February 28, 2018, 11:08:36 pm »
In reference to my TDS3012 upgrade above, I've just counted the samples, it's sampling at 5GHz.

                      -Dave
 

Offline Andrey_irk

  • Regular Contributor
  • *
  • Posts: 100
  • Country: ru
Re: TDS 1000,2000,3000 BW Hack
« Reply #43 on: March 01, 2018, 05:11:34 am »
The only scope I have nearby is top-of-the-line TDS2024B. Pity. 
So, shall we expect prices on these scopes to rise?
 

Offline Hydron

  • Frequent Contributor
  • **
  • Posts: 978
  • Country: gb
Re: TDS 1000,2000,3000 BW Hack
« Reply #44 on: March 01, 2018, 09:01:37 am »
Terrible memory depth counts against them unfortunately. Still, when you're just looking at an edge or two the memory isn't an issue and the free bandwidth is nice.
 

Offline xi

  • Contributor
  • Posts: 16
  • Country: fr
Re: TDS 1000,2000,3000 BW Hack
« Reply #45 on: May 14, 2018, 11:46:48 pm »
    I am reporting success too, with my TDS 3014B converted to a TDS 3064B :-+
    I got this scope in an auction sale, and now I have a really fast sampling rate, thanks for the hack!

    The upgrade process is not difficult, but I got some troubles with upgrading the firmware, so I am posting some infos for helping others:

    You will need:
    - a network connection between the TDS 30xxB and a computer with a web browser.
    - 4 floppy disks 3"1/2 1.44MB (at least one).
    - the firmware v3.39 (see above posts).

    • Configure network
    Plug the ethernet cable
    On the scope: go to Utility -> I/O -> Ethernet Network Settings and enable DHCP/BOOTP
    After a few seconds, the oscilloscope will display its IP address, just enter it in your web browser.
    (Your network must run a DHCP server, otherwise you have to configure a static IP address)


  • Check firmware version
One way to check the firmware is to send the command "*IDN?" from the "data" tab of the TDS's web page:


  • Downgrade to v3.39
If your TDS is running version 3.41, the hack won't work, you have to downgrade to an older version. If your current firmware version is older than 3.41, it should work directly (see other posts), so you can jump to next step.
Be careful with the updates, some versions has some quirks, read Tektronix recommendations! (for example, version 1.0 must be upgraded really carefully because of a bug in this version. Switching from version prior to 2.20 to version above 2.21 will need a recalibration, ...)

So let's upgrade / downgrade the firmware using floppy disks. I don't know if there are other means to change the firmware? I didn't find any...
I had formatted and prepared some floppy disks on an old computer, but the TDS refused to boot on it, so I strongly advice to format the floppy directly on the TDS: use save/recall menu:


If something is wrong with the floppy, the TDS scope will display "Mass storage error":

So try another floppy! Many of my old floppies were bad (particularly the Sony ones) ; back in time of 5"1/4 floppy, I had noticed that BASF one were more reliable than others ; so I searched for some old 3"1/2 BASF floppy disks and, guess what, they all worked in the TDS ;)

Once formatted in the scope, you have to unzip and copy the firmware v3.39 to the floppy disks. The content of each directory (disk1 to disk4) must be copied on four separate floppy disks, without creating any directory.
Take care to label each floppy disk with the name "disk1" to "disk4", this is needed by the TDS.
Once formatted by the oscilloscope, I run these commands on my Linux server (the only one that stills has a floppy disk drive):
[/list]
Code: [Select]
mlabel a:disk1 && mount /media/floppy/ && cp -av /home/share/temp/firmware_v3.39/disk1/* /media/floppy/ && umount /media/floppy(don't forget to change all the "disk1" to "disk2" for the next floppy, etc...)

Last step is to stop the scope, insert the first floppy into the TDS and power it on. If you followed the above instructions, the scope will ask if you want to downgrade / upgrade the firmware: just follow the instructions :)

  • Bandwith hack
Connect again to the web interface and check that firmware version is lower than v3.41, using "*IDN?" command for example.

Now send the correct commands for hacking the bandwith: for my TDS 3014B it is:
PASSWORD PITBULL
MCONFIG TDS3064B


Power OFF then ON the TDS, and enjoy!

(you can now upgrade again to v3.41, the scope won't loose it's model number)
« Last Edit: May 14, 2018, 11:55:39 pm by xi »
 
The following users thanked this post: ce_lab, graybeard, amindavid11, nathankwan

Offline stevewind77

  • Newbie
  • Posts: 8
  • Country: de
Re: TDS 1000,2000,3000 BW Hack
« Reply #46 on: May 20, 2018, 02:34:35 pm »
Hi all,

I have a TDS3032C which I try to upgrade without success.
The problem is that the c version has usb instead of Floppy drive.
The firmware version 3.39 for the older B model is on 4 floppy disks in a form of .dat files but the C version is not able to boot-up from an usb floppy.
It can only accept .img files.
Is there any experience about this? Maybe convert the .dat files to an .img or format the stick as it would be a floppy?
Any ideas?

Thanks
« Last Edit: May 20, 2018, 08:41:48 pm by stevewind77 »
 
The following users thanked this post: graybeard

Offline stevewind77

  • Newbie
  • Posts: 8
  • Country: de
Re: TDS 1000,2000,3000 BW Hack
« Reply #47 on: May 20, 2018, 09:00:51 pm »
I had a look inside just to check if I can add a regular floppy instead of the usb.
I found interesting things inside.
There is no usb connection from outside but inside I found one which is probably disabled from software.
I also found a dc in, no idea for what is it there.

 

Offline MarkL

  • Supporter
  • ****
  • Posts: 2120
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #48 on: May 21, 2018, 02:11:16 pm »
...
I also found a dc in, no idea for what is it there.
That's a DC Out jack, +14.2 VDC, <=400mA.  From the TDS3054 manual:

  DC power output. Provides ~15 V DC accessory power only when the oscilloscope is connected to the AC power line.

From the TDS3054B manual:

  DC power output. Provides ~15 V DC power to accessories or to the plug-in TDS3PRT thermal printer.

Not shown at all in the TDS3054C manual.
 

Offline stevewind77

  • Newbie
  • Posts: 8
  • Country: de
Re: TDS 1000,2000,3000 BW Hack
« Reply #49 on: May 22, 2018, 05:14:55 pm »
Thanks MarkL for your reply.

So this means it is not a dc input => it is not very valuable  :(
 

Offline MarkL

  • Supporter
  • ****
  • Posts: 2120
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #50 on: May 22, 2018, 07:14:00 pm »
Thanks MarkL for your reply.

So this means it is not a dc input => it is not very valuable  :(
Probably not too valuable for bench use, but I could see it being useful for someone who did a lot work in the field.

You could use the battery pack connector as a "DC In" if you wanted to use the scope with a DC supply or external battery:

  https://www.eevblog.com/forum/repair/tektronix-tds-3014b-power-supply-by-pass/msg767729/#msg767729
 

Offline Nebulex

  • Contributor
  • Posts: 12
  • Country: ch
Re: TDS 1000,2000,3000 BW Hack
« Reply #51 on: June 13, 2018, 07:52:37 pm »
Hello all.
I can confirm that BW upgrade worked on my TPS2014. But only if a full calibration is done after entering the password and model trough the serial interface. The BW limit is now gone up to 200Mhz. So thanks to all who made this upgrade possible. :clap:
 

Offline abyrvalg

  • Frequent Contributor
  • **
  • Posts: 823
  • Country: es
Re: TDS 1000,2000,3000 BW Hack
« Reply #52 on: June 13, 2018, 11:41:44 pm »
Perhaps the ARMDEMO command found in newer models will work on these too?
Code: [Select]
:PASSW INTEKRITY
:ARMDEMO 365,DontMakeTheWookieMad
 

Offline hardcoreman

  • Contributor
  • Posts: 23
  • Country: sk
Re: TDS 1000,2000,3000 BW Hack
« Reply #53 on: June 15, 2018, 05:12:50 am »
battery info:

pinout

gnd
nc
DQ
charge+ (charger circuit in batt. / from scope)
bat+ ( to scope)



DQ - signal from bq2050 fuel gauge...
 

Offline stevewind77

  • Newbie
  • Posts: 8
  • Country: de
Re: TDS 1000,2000,3000 BW Hack
« Reply #54 on: June 17, 2018, 09:39:16 pm »
I sent these instructions with OpenChoice Talker Listener vie Ethernet to my TDS3032C:

PASSWord INTEKRITY
SETMODELID 5
HWAccountant:ACQBandwidth 500

Nothing happened.  :(
Is this format correct?
 

Offline gamalot

  • Super Contributor
  • ***
  • Posts: 1300
  • Country: au
  • Correct my English
    • Youtube
Re: TDS 1000,2000,3000 BW Hack
« Reply #55 on: September 12, 2018, 02:44:09 pm »
TDS3014B upgraded to TDS3064B and all applications activated. Thank you everyone!


Offline walterkeen

  • Newbie
  • Posts: 1
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #56 on: August 12, 2019, 10:49:55 pm »
I've got a TDS3012, and one channel isn't functioning.... However I'd like to explore using this bandwidth hack.

However, I don't have a B or C model, and don't have any I/O modules like a GPIB or Ethernet module.

Is there somewhere that I can find a serial header to issue the commands?
 

Offline zmenee

  • Newbie
  • Posts: 1
  • Country: si
Re: TDS 1000,2000,3000 BW Hack
« Reply #57 on: August 13, 2019, 10:46:14 am »
Just bought a TDS3014B and can also confirm a successful upgrade to a TDS3064B.

I have access to an old HP RF generator so I tried to check the BW extension. The test wasn't too accurate as I don't have a leveled sine generator. I could measure a HF rolloff at 490MHz (-3dB) using coax cable and 50ohm termination. Using a P6139B probe might push the rolloff even lower. So I presume the upgrade is more a TDS3044B which is still more than enough for me.

The scope has a battery pack installed and I can confirm that the 15V DC power output works with no AC power line connected. This is a nice feature as you can test small prototypes in the field.
 

Offline darkstar49

  • Frequent Contributor
  • **
  • Posts: 309
Re: TDS 1000,2000,3000 BW Hack
« Reply #58 on: August 13, 2019, 05:51:10 pm »
TDS3014B upgraded to TDS3064B and all applications activated. Thank you everyone!

LOL !! Love the "modules" !!
Next : an upgraded model & bw sticker on the front...   >:D
 

Offline tonykara

  • Contributor
  • Posts: 12
Re: TDS 1000,2000,3000 BW Hack
« Reply #59 on: September 26, 2019, 09:21:22 pm »
So glad I found this thread! I just bought a TDS3012B-NV (I think I read this was labeled for the US Navy.)
I had to fix a malfunctioning floppy door which took me about 30 minutes.

Installed version 3.39, and got TEKVISA loaded onto an older Windows 7 laptop.
Connected the scope via ethernet to my network, watched a couple shot youtube videos on TEKVISA and upgraded my scope with this:

PASSWORD PITBULL
MCONFIG TDS3052B

It temporarily messed up the calibration (offsets were all wacky), but it's fine now after cal and it now samples at 5GS/s! Checking the rise time with a Picosecond step generator, it's reporting a faster than my Agilent DSO6034A. Thanks to everyone who posted info here.
 

Offline josef

  • Newbie
  • Posts: 1
  • Country: cz
Re: TDS 1000,2000,3000 BW Hack
« Reply #60 on: September 27, 2019, 01:44:51 pm »
Hi,

I connected with scope via ethernet. The command *IDN? work correctly, but comands PASSWORD and MCONFIG doesn't work. Especially I don't know whether I use correct syntax of commands.

Thank you
 

Offline tonykara

  • Contributor
  • Posts: 12
Re: TDS 1000,2000,3000 BW Hack
« Reply #61 on: September 27, 2019, 10:38:39 pm »
josef, what scope do you have? It worked for me. The scope won't show any difference until you power cycle.
« Last Edit: October 03, 2019, 04:55:50 pm by tonykara »
 

Offline james_s

  • Super Contributor
  • ***
  • Posts: 21611
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #62 on: October 21, 2019, 11:31:51 pm »
For those who have a TDS3000 without ethernet or the comm module, I have reverse engineered the RS232 portion of the module which someone has used with success. All you need to do is buy the mating connector for around $10 and wire up a 3.3V serial level shifter or USB to LVTTL serial module and you're good to go.

https://www.eevblog.com/forum/testgear/reverse-engineering-tektronix-tds3gv-module-for-tds3000-series-oscilloscopes/msg2748914/#msg2748914
« Last Edit: October 22, 2019, 02:41:42 am by james_s »
 

Offline feret81

  • Newbie
  • Posts: 6
  • Country: gb
Re: TDS 1000,2000,3000 BW Hack
« Reply #63 on: October 26, 2019, 09:24:03 pm »
Hello mate. I have the 3014b and would like to upgrade it to the 3064b. I have tekvisa and have it communicating with the scope through Ethernet but not sure where i go from there and how to know if it has worked. Is there anyway you could walk me through it somehow.
Its on version 3.15
Your help would be appreciated.

keith
 

Offline james_s

  • Super Contributor
  • ***
  • Posts: 21611
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #64 on: October 26, 2019, 11:53:36 pm »
Did you read the rest of this thread? It's only 3 pages and it contains all the information you need. You don't even need Tekvisa, there's a console in the web page somewhere that you can use to send the commands:

First:
PASSWORD PITBULL

Then:
MCONFIG TDS3064

Then cycle the power and run the SPC routine from the normal calibration menu in the scope and you should be all set.
 

Offline feret81

  • Newbie
  • Posts: 6
  • Country: gb
Re: TDS 1000,2000,3000 BW Hack
« Reply #65 on: October 27, 2019, 06:45:39 am »
Yeah I'd been through it but some people are putting the password up and some not. And do I need to put the b on the end of 3064 or leave it out like you have. Thanks for the reply anyway.
 

Offline james_s

  • Super Contributor
  • ***
  • Posts: 21611
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #66 on: October 27, 2019, 05:40:28 pm »
I don't believe you put the b, but my scope is a plain old TDS3014 without a letter so it didn't apply to me.

You definitely need the password, just send the strings exactly as they are shown, you won't see any effect at the time but when you power cycle the scope it should come up with the new model. I don't think you can really screw this up, if you do it wrong it just won't change.
 

Offline Hydron

  • Frequent Contributor
  • **
  • Posts: 978
  • Country: gb
Re: TDS 1000,2000,3000 BW Hack
« Reply #67 on: October 27, 2019, 05:52:40 pm »
Try setting it to TDS3054B as well as 3064 - the 600MHz option didn't seem to work when I tried it, but the 500MHz did, though I didn't do any mucking about with firmware etc to see if I could get a better result.
 

Offline SMdude

  • Frequent Contributor
  • **
  • Posts: 258
  • Country: au
Re: TDS 1000,2000,3000 BW Hack
« Reply #68 on: November 03, 2019, 08:15:51 am »
Thinking about getting one of these scopes as I want something decent that can be run from a battery and like the hackability so far.
Has anybody thought about updating the sample memory? I see it is only 10k in the TDS3000 series. High speed memory has become a lot faster, bigger and cheaper since these scopes were built.
It would probably require the firmware to be modified to get it to work. Just thought I would put it out there!

Cheers

Edit: Don't think it can be done, see
https://www.eevblog.com/forum/testgear/why-would-modern-digital-scopes-only-offer-2-5kpts-memory-depth/
« Last Edit: November 03, 2019, 09:44:48 am by SMdude »
 

Offline james_s

  • Super Contributor
  • ***
  • Posts: 21611
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #69 on: November 03, 2019, 04:47:23 pm »
Yes lots of people have thought about it, it's not possible to do.

The optional batteries are also rare and crazy expensive. I'm a Tek fan but I'm not sure I could justify buying one of these for what they typically sell for.
 

Offline SMdude

  • Frequent Contributor
  • **
  • Posts: 258
  • Country: au
Re: TDS 1000,2000,3000 BW Hack
« Reply #70 on: November 04, 2019, 10:15:08 am »
For the battery pack, I would roll my own using li-po's and build in a suitable charger.

As for the price, I'll try and find a non working one for a reasonable price. Bit of a risk, but one has to be choosy of what problems it comes with. BTW James nice score on the one you got!

I would be open to other brands, but I don't want something that is clunky and slow or comes with inherent design problems. I have been using an old analog scope for years and really like the way it behaves. It has no bells or whistles! I have used various usb scopes and they just don't cut it.
 

Offline texaspyro

  • Super Contributor
  • ***
  • Posts: 1407
Re: TDS 1000,2000,3000 BW Hack
« Reply #71 on: November 04, 2019, 09:16:10 pm »

As for the price, I'll try and find a non working one for a reasonable price. Bit of a risk, but one has to be choosy of what problems it comes with. BTW James nice score on the one you got!


The -B version of the Tek battery has a safety recall.  Tek will replace it for free.
 

Offline blackfin76

  • Regular Contributor
  • *
  • Posts: 79
  • Country: nl
Re: TDS 1000,2000,3000 BW Hack
« Reply #72 on: November 08, 2019, 06:41:21 pm »
I just pulled the hack on a TDS3012B and a TDS3034, both where a succes. For the TDS3034 I borrowed a TDS3EM ethernet module from work, they don't use it in the weekends. For some reason my Chrome browser wasn't able to display the web page, Firefox had no problem. Anyone else has issues with Chrome.
At first I made a mistake setting the TDS3012B to TDS3064B, it displayed the right version but on doing the SPC it failed and since there is no TDS3062B I had to downgrade to a 5 model.

Personally I love the TDS3000 series, it has been my daily driver for at least 15 years and it has helped me on many projects. It's very reliable in it's measurements even when running it for days and the responsiveness is almost like an analog oscilloscope (which I have much too many ;) ). If you can pick one up for a nice price you won't regret it.
 
The following users thanked this post: ozel

Offline darkstar49

  • Frequent Contributor
  • **
  • Posts: 309
Re: TDS 1000,2000,3000 BW Hack
« Reply #73 on: November 13, 2019, 05:29:31 am »
For the battery pack, I would roll my own using li-po's and build in a suitable charger.

As for the price, I'll try and find a non working one for a reasonable price. Bit of a risk, but one has to be choosy of what problems it comes with. BTW James nice score on the one you got!

Bought quite a bunch of ‘dead’ packs (B and C), the problem was always (up to now) with the cells, have you ever encountered dead electronics on these packs ?
 

Offline Galen

  • Regular Contributor
  • *
  • Posts: 116
  • Country: cn
Re: TDS 1000,2000,3000 BW Hack
« Reply #74 on: December 30, 2019, 04:11:14 am »
For those who have a TDS3000 without ethernet or the comm module, I have reverse engineered the RS232 portion of the module which someone has used with success. All you need to do is buy the mating connector for around $10 and wire up a 3.3V serial level shifter or USB to LVTTL serial module and you're good to go.

https://www.eevblog.com/forum/testgear/reverse-engineering-tektronix-tds3gv-module-for-tds3000-series-oscilloscopes/msg2748914/#msg2748914

Hi, yes, I read that post and it's really great. I'm planning to get a TDS3012/4, but, what software I should use to send the magic command through the serial port (linked to RS232 to USB module) ?
Thanks in advance.
Galen
Delighted when problem fixed
 

Offline james_s

  • Super Contributor
  • ***
  • Posts: 21611
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #75 on: December 30, 2019, 08:25:44 am »
Any number of programs will work. A really simple one  you might already have is the serial monitor tool built into the Arduino IDE.

 

Offline Jwalling

  • Supporter
  • ****
  • Posts: 1517
  • Country: us
  • This is work?
Re: TDS 1000,2000,3000 BW Hack
« Reply #76 on: December 31, 2019, 10:05:57 am »
This is the first C model I've seen with the BW upgrade. I didn't think it was possible!
https://www.ebay.com/itm//333459642909?
Jay

System error. Strike any user to continue.
 

Offline Galen

  • Regular Contributor
  • *
  • Posts: 116
  • Country: cn
Re: TDS 1000,2000,3000 BW Hack
« Reply #77 on: January 01, 2020, 01:28:54 am »
For those who have a TDS3000 without ethernet or the comm module, I have reverse engineered the RS232 portion of the module which someone has used with success. All you need to do is buy the mating connector for around $10 and wire up a 3.3V serial level shifter or USB to LVTTL serial module and you're good to go.

https://www.eevblog.com/forum/testgear/reverse-engineering-tektronix-tds3gv-module-for-tds3000-series-oscilloscopes/msg2748914/#msg2748914

Hi, yes, I read that post and it's really great. I'm planning to get a TDS3012/4, but, what software I should use to send the magic command through the serial port (linked to RS232 to USB module) ?
Thanks in advance.
Galen
Thanks a lot.  I will have a try when get a TDS3012. Now the TDS3000 series too expensive.
Delighted when problem fixed
 

Offline james_s

  • Super Contributor
  • ***
  • Posts: 21611
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #78 on: January 01, 2020, 08:05:59 am »
I think they will be expensive for the foreseeable future. They are well loved, nice instruments to work with and most people know by now that they can all be upgraded to 500MHz and even the cheapest new 500MHz scopes still cost thousands. Despite being an old design you can still buy a brand new TDS3054C but the cost is over $20k.
 

Offline daveyk

  • Frequent Contributor
  • **
  • Posts: 413
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #79 on: March 08, 2020, 08:19:16 pm »
Hey James, in January, I bought a TDS3014 on eBay for $1000.  It has they GPIB interface in it, both option modules (trigger and FFT), four new scope probes (probably 100MHz ones) , a bunch of Pomona cables, BNC to clip lead adapters, terminators, from cover, etc.. A fully loaded purchase for $1000.00!  I performed the BW and Digitization  rate upgrade.   It just passed full yearly certification/Data at Spectrum Technologies as a TDS3054.  I re-labeled it as a TDS3054 and let spectrum know it was upgraded.  They told me it passed all the bandwidth tests for a TDS3054.  So, I am quite happy with it.
 

Offline james_s

  • Super Contributor
  • ***
  • Posts: 21611
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #80 on: March 09, 2020, 12:16:02 am »
I'm shooting myself in the foot here, I really should be telling people they're terrible, a pain to use and unreliable, go buy a new Rigol or something.

The test equipment situation on ebay lately has been pretty crap in general though. Most stuff seems to be sitting there with BIN prices 50%-100%+ higher than the same stuff sells at auctions so of course a lot of it just sits, and sits.
 

Offline volvo_nut_v70

  • Regular Contributor
  • *
  • Posts: 234
  • Country: ca
Re: TDS 1000,2000,3000 BW Hack
« Reply #81 on: March 09, 2020, 09:16:16 pm »
And they don't budge even after a year or more on Ebay..............
 

Offline Gniske

  • Newbie
  • Posts: 2
  • Country: dk
Re: TDS 1000,2000,3000 BW Hack
« Reply #82 on: March 17, 2020, 09:02:55 pm »
Yep, works great with TDS3012B. Upgraded to TDS3052B.

But one thing: you DON'T have to install the OpenChoice talker program. Just use the NI-488.1 Communicator. I am using a USB interface with the scope. Start "NI MAX" up and find the interface and find the scope connected. Press "Communicate with Instrument". And then just send the two commands using the "Write" buttom. As easy as it can be :-)))

I have verified the signal amplitude on a R&S SMIQ signal generator. And yes, the BW  is bigger. Before the upgrade I had 830mVpp on a 300MHz, now I have 2,6Vpp. The source is 1Vrms (2,82Vpp)

I really would like to have known about this 3 years ago ;-) (or 15 years ago! ohhh!)

Peter
« Last Edit: March 17, 2020, 09:55:21 pm by Gniske »
 

Offline stevewind77

  • Newbie
  • Posts: 8
  • Country: de
Re: TDS 1000,2000,3000 BW Hack
« Reply #83 on: March 17, 2020, 10:36:26 pm »
I tested but no success. The TDS3032C I only have the 4.25 as oldest firmware. Has anyone a model C with older fw where the hack could work?
 

Offline stevewind77

  • Newbie
  • Posts: 8
  • Country: de
Re: TDS 1000,2000,3000 BW Hack
« Reply #84 on: March 18, 2020, 11:07:40 am »
In my model was a USB 2.0 Type B hidden under a sticker where the parallel port should be. If I plug it in, nothing happens.
Another interesting thing is the two JTAG connectors and one BDI interface.
I have a segger JTAG debugger but unfortunately it is not supporting the Power PCs yet and the pinout is missing too.
I wonder if these interfaces could help me do the BW hack?
Has anybody a schematic for this TDS3032C model?
 

Offline pmercier

  • Contributor
  • Posts: 42
  • Country: fr
Re: TDS 1000,2000,3000 BW Hack
« Reply #85 on: March 18, 2020, 05:29:10 pm »
If you ever get your hand on them, i would gladly beg for them !!!!

I've the same "useless" USB connector on the back on my C model, tested it too, but no chance. Didn't found an usb endpoint :\

If you can't open it, you don't own it !
 

Offline hoangduongo

  • Newbie
  • Posts: 6
  • Country: 00
Re: TDS 1000,2000,3000 BW Hack
« Reply #86 on: April 15, 2020, 05:03:16 am »
TDS3014B upgraded to TDS3064B and all applications activated. Thank you everyone!
Hi,
I know you posted this long time ago but I can see a BWU module installed, is there a BW dongle hack (aside from the SCPI command method) that I'm unaware of?

Thanks,
Duong
 

Offline gamalot

  • Super Contributor
  • ***
  • Posts: 1300
  • Country: au
  • Correct my English
    • Youtube
Re: TDS 1000,2000,3000 BW Hack
« Reply #87 on: April 15, 2020, 12:33:04 pm »
TDS3014B upgraded to TDS3064B and all applications activated. Thank you everyone!
Hi,
I know you posted this long time ago but I can see a BWU module installed, is there a BW dongle hack (aside from the SCPI command method) that I'm unaware of?

Thanks,
Duong

No, It's just for fun!  >:D
 
The following users thanked this post: hoangduongo

Offline hoangduongo

  • Newbie
  • Posts: 6
  • Country: 00
Re: TDS 1000,2000,3000 BW Hack
« Reply #88 on: April 20, 2020, 02:07:25 pm »
No, It's just for fun!  >:D
Thanks, you really got me there  :-DD
 

Online smaultre

  • Regular Contributor
  • *
  • Posts: 140
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #89 on: July 18, 2020, 03:40:19 pm »
Hello my friends  got a TDS2012B update the firmware to 22.16 . Trying with all combinations via OpenChoiseTalker but no sucess.
Send:
*IDN? -querry (works)
PASSWORD PITBULL (any other passwords from here)
MODEL TDS2022B (any combination B, no B, spaces..)

then reset power

try to run SPC during power reset..

Start a new life here!!!
 

Offline madao

  • Frequent Contributor
  • **
  • Posts: 338
  • Country: de
Re: TDS 1000,2000,3000 BW Hack
« Reply #90 on: September 05, 2020, 06:53:26 am »
Checked on TDS3012 with old firmware: 1.17
It works.

How can i save firmware? (Floppy disc is not problem for me. )
 

Offline volvo_nut_v70

  • Regular Contributor
  • *
  • Posts: 234
  • Country: ca
Re: TDS 1000,2000,3000 BW Hack
« Reply #91 on: September 05, 2020, 03:10:22 pm »
On the 3000 series no need to save the firmware since once the upgrade is applied it stays. You can upgrade to the latest firmware with no issues.

If there ever is an issue you can downgrade to 3.39 do the upgrade and then go back to the latest firmware:

https://www.eevblog.com/forum/testgear/tds-1000-2000-3000-bw-hack/msg1540352/?topicseen#msg1540352
 

Offline graybeard

  • Frequent Contributor
  • **
  • Posts: 431
  • Country: us
  • Consulting III-V RF/mixed signal/device engineer
    • Chris Grossman
Re: TDS 1000,2000,3000 BW Hack
« Reply #92 on: October 29, 2020, 05:18:11 am »
I am reporting success too, with my TDS 3014B converted to a TDS 3064B :-+
I got this scope in an auction sale, and now I have a really fast sampling rate, thanks for the hack!

I just used this method to upgrade a TDS3012B to a TDS3052B.





Thank You
« Last Edit: December 01, 2020, 07:31:22 pm by graybeard »
 

Offline Kibabalu

  • Regular Contributor
  • *
  • Posts: 106
  • Country: de
Re: TDS 1000,2000,3000 BW Hack
« Reply #93 on: November 07, 2020, 05:56:54 am »
It also worked for my TDS3034, it´s now a TDS3054. I checked the sampling rate, 5Gsa/s now, and also the analog bandwidth: A measured rise time of approx. 630ps gives a analog bandwidth of at least 555MHz.

Thanks to all the people here!
« Last Edit: November 07, 2020, 06:05:52 am by Kibabalu »
 

Offline fredboivin

  • Regular Contributor
  • *
  • Posts: 52
  • Country: ca
Re: TDS 1000,2000,3000 BW Hack
« Reply #94 on: December 01, 2020, 02:48:00 am »
Anyone has the v3.41 firmware package? For some reason, the one that we can download from Tek's website is corrupted.

Thanks,
 

Offline Kibabalu

  • Regular Contributor
  • *
  • Posts: 106
  • Country: de
Re: TDS 1000,2000,3000 BW Hack
« Reply #95 on: December 01, 2020, 05:47:25 am »
I did the download and the upgrade one month ago. It's still in my download folder. See attachment.
« Last Edit: December 01, 2020, 06:30:17 am by Kibabalu »
 

Offline Arn

  • Newbie
  • Posts: 7
  • Country: gb
Re: TDS 1000,2000,3000 BW Hack
« Reply #96 on: December 16, 2020, 07:51:00 am »
I can confirm that the BW hack works on a TDS3012 (now 3052).

I didn't have a serial module for my scope, so I used a MC74HC245A transceiver to write a byte onto the data bus and a cheap eBay USB to TTL CP2102 UART Module to interface with a windows10 machine. On the PC side, I used The Tek Vista listener application to send the upgrade commands.

To establish a connection, I had to tie the cts/rts lines together.

I have pictures, diagrams and schematics from the project and if anyone is interested I can post them.
 

Offline volvo_nut_v70

  • Regular Contributor
  • *
  • Posts: 234
  • Country: ca
Re: TDS 1000,2000,3000 BW Hack
« Reply #97 on: December 16, 2020, 02:51:29 pm »
It'd be great if you did post them, it will probably some other poor soul of a test equipment junkie   :)
 

Offline mankan

  • Regular Contributor
  • *
  • Posts: 95
  • Country: se
Re: TDS 1000,2000,3000 BW Hack
« Reply #98 on: December 16, 2020, 05:48:50 pm »
@Arn: Could you not run the serial port without HW flow control instead?
 

Offline Arn

  • Newbie
  • Posts: 7
  • Country: gb
Re: TDS 1000,2000,3000 BW Hack
« Reply #99 on: December 24, 2020, 01:23:24 pm »
Hi everyone.
I thought it might be useful to post my experience with upgrading my TDS3012 using the much-publicised bandwidth hack.
I followed the method published here… https://hackaday.io/project/172242-extension-card-for-tds3000-scopes
I didn’t have access to a communication module, so I hacked together a circuit to write a byte to the 3012’s data bus, I used a 74HC245AN as it is through-hole (and it was what I had).
Setting up the communication proved to be pretty simple; I left the scope coms settings at their default values and configured my cheap eBay usb-ttl module for 9600 baud.
At first I had problems establishing a link but this was solved by tying together the CTS/RTS lines coming from the scope.
After sending the password and upgrade command I immediately shut down the scope and, on restart, it reports that it is a 3052 -success!

The next phase of the project was to evaluate the actual scope bandwidth. I hooked up a mercury-wetted relay to my scope and got a rise time of about 1.5nS (not bad for a rat’s-nest build and using my ‘100Mhz’ ebay probe) but this was hardly definitive so I tried feeding square waves from various signal generators I had lying around the lab but the best I could manage was 1.35nS (using the sync output from a Hantek 1025g)
I decided to build an avalanche pulser as I had a HV PSU.
I used the schematic shown here:
I soldered the components directly onto a BNC plug and tried to keep the connections as short as possible:
Amazingly it worked first time (O.K… second time) and despite being a total lash-up, generated really nice sharp pulses, oscillation began at about 103V (with the values given f=~10KHz)
As you can see, I’m getting around 950pS rise times which around equates to around 400Mhz bandwidth.
Now I’m seriously toying with the idea of buying one of Leo Bodnar’s 40pS pulsers (http://www.leobodnar.com/shop/index.php?main_page=product_info&products_id=295)

 
The following users thanked this post: maxwell3e10, Kibabalu

Offline Arn

  • Newbie
  • Posts: 7
  • Country: gb
Re: TDS 1000,2000,3000 BW Hack
« Reply #100 on: December 24, 2020, 05:32:03 pm »
I forgot to post the pinout for the 100-way connector...here it is

Arn.
 
The following users thanked this post: giosif

Offline Arn

  • Newbie
  • Posts: 7
  • Country: gb
Re: TDS 1000,2000,3000 BW Hack
« Reply #101 on: January 14, 2021, 07:19:45 am »
Here's an update on my TDS30xx upgrade project.

I rebuilt the pulse generator I'd thrown together, this time taking a little more care to ensure that all component lead lengths were as short as I could make them.
 
I also substituted a 2n3904 in place of the 2n222a.

The screen capture shown is taken from the new generator layout.

I get ~500ps risetime which I guess equates to a bandwidth of ~690MHz
 

Offline daveyk

  • Frequent Contributor
  • **
  • Posts: 413
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #102 on: January 14, 2021, 08:04:18 pm »
"I tested but no success. The TDS3032C I only have the 4.25 as oldest firmware. Has anyone a model C with older fw where the hack could work?"

I can not find any messages that note success.  Did you figure it out?  Quite frankly, 300MHz is good enough for what I use it for, but it would be cool to have it as a TDS3054C 8-)

Dave
 

Offline daveyk

  • Frequent Contributor
  • **
  • Posts: 413
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #103 on: January 14, 2021, 08:07:24 pm »
"Has anybody a schematic for this TDS3032C model?"

Interesting looking at your picture.  The C version still used that Dallas Battery memory?  I though by the C version they would have replaced that.

Dave
 

Offline rauldm

  • Regular Contributor
  • *
  • Posts: 155
  • Country: mx
Re: TDS 1000,2000,3000 BW Hack
« Reply #104 on: February 10, 2021, 08:25:07 pm »
I bought a used TDS3012B, I hacked it correctly, is necessary run the autocalibration for delete DC offset, the Firmware update can be work from ethernet?, exists also a disk emulator for USB, anyone tested this for firwmare update?
Regards.
 

Offline rauldm

  • Regular Contributor
  • *
  • Posts: 155
  • Country: mx
Re: TDS 1000,2000,3000 BW Hack
« Reply #105 on: March 02, 2021, 05:38:27 am »
Fortunately I found a new box with 10 floppy disks, I revive my old desktop pc with win 10 and works very fine the floppy driver, I updated to 3.41 firmware without lost  the new bandwidth. I don't found an adventaje over 3.35 firmware with my scope comes. I need buy a FFT  (is more cheap) module for programing the firmware applications unlocks, actually I have DSO-X 2002A unlocked, but I love this old  scope, the 500 MHz and 5 GSa/s really are true improvement to my bench equipment, for example my agilent comes with traning signals like "glitchs" on clock signals, with Pulse trigger I found more easy the glitch with TDS 3012B than my dso-x2002a, is incredible.
Regards
 

Offline Shiv

  • Regular Contributor
  • *
  • Posts: 56
  • Country: es
Re: TDS 1000,2000,3000 BW Hack
« Reply #106 on: March 03, 2021, 09:22:36 am »
Hi all!

I´m trying to do this hack on TDS210 just for fun, but it only half works.

With "PASSWORD PITBULL" + "MODEL TDS220"
*IDN? says I have a TDS 220 until reboot or when entering the service menu.

Can do the trick if you send the commands once you are in service menu.

BUT:
when doing the internal calibration routine, it fails on step 39 (100 MHz for TDS220)
Equipment is not the problem (9500 + 9530 doing the job)
When fails, it shows the signal and it´s around 3.8 div (should be >4.2, what it gets at 60 MHz)

Anybody knows where to find schematics for this scope? Just to see if there are any input capacitor limiting bandwith.

Thank you in advice.
 

Offline amindavid11

  • Contributor
  • Posts: 13
  • Country: ve
Re: TDS 1000,2000,3000 BW Hack
« Reply #107 on: March 05, 2021, 03:43:14 pm »
Not Working on the TDS 2002B

IDN works
putting the password wrong does not give any errors
Tried using TDS 2022B and TDS2022B
Tried calibrating before shutdown
Does not work for me 22.16 |O
 

Offline Alexe2

  • Newbie
  • Posts: 3
  • Country: ru
Re: TDS 1000,2000,3000 BW Hack
« Reply #108 on: April 03, 2021, 03:55:20 pm »
Hi!
Somehow can backup the firmware.
I have a non-standard firmware.
 

Offline james_s

  • Super Contributor
  • ***
  • Posts: 21611
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #109 on: April 04, 2021, 05:15:52 am »
What's non-standard about it?
 

Offline Alexe2

  • Newbie
  • Posts: 3
  • Country: ru
Re: TDS 1000,2000,3000 BW Hack
« Reply #110 on: April 04, 2021, 07:03:35 am »
Yes, you are right, this is an old firmware.
 

Offline Alexe2

  • Newbie
  • Posts: 3
  • Country: ru
Re: TDS 1000,2000,3000 BW Hack
« Reply #111 on: April 11, 2021, 08:41:38 pm »
What voltages and signals are needed to calibrate the oscilloscope?
 

Offline giosif

  • Frequent Contributor
  • **
  • Posts: 877
  • Country: gb
Re: TDS 1000,2000,3000 BW Hack
« Reply #112 on: April 17, 2021, 02:55:24 pm »
I forgot to post the pinout for the 100-way connector...here it is
Arn.

Many thanks for the pinout!
I built the board from the Hackaday site and used the pin numbers on that board.
However, the scope wouldn't boot with the card inserted and I just couldn't understand what I had done wrong.
But then found your pinout here and realized the pin numbering used on the Hackaday board is different/wrong.
After resoldering the wires using your drawing, everything worked like a charm.

For everyone's reference, the "tabs" I've used on the Hackaday board are:
U1 - pin 1 -----> board tab #63
U1 - pin 11 ---> board tab #64
U1 - pin 12 ---> board tab #67
U1 - pin 13 ---> board tab #68
U1 - pin 14 ---> board tab #71
U1 - pin 15 ---> board tab #75
U1 - pin 16 ---> board tab #76
U1 - pin 17 ---> board tab #79
U1 - pin 18 ---> board tab #80
U1 - pin 19 ---> board tab #59
 

Offline JiriB

  • Contributor
  • Posts: 13
  • Country: cz
Re: TDS 1000,2000,3000 BW Hack
« Reply #113 on: November 04, 2021, 04:26:37 pm »
Hi,

Pitbullized 3054B --> 3064B
 

Offline Arn

  • Newbie
  • Posts: 7
  • Country: gb
Re: TDS 1000,2000,3000 BW Hack
« Reply #114 on: December 17, 2021, 07:19:48 am »
Hi everyone,

I finally got round to buying one of leo Bodnar's pulsers.

I get around 550pS risetime on my modified TDS3012 which equates to 638MHz BW.

I can therefore confirm that the upgrade procedure is working

Arn
« Last Edit: December 17, 2021, 07:24:27 am by Arn »
 

Offline Arn

  • Newbie
  • Posts: 7
  • Country: gb
Re: TDS 1000,2000,3000 BW Hack
« Reply #115 on: December 17, 2021, 09:02:22 am »
Quote from: paulber0303
Hi, I plan to update my TDS3012 scope and like you I have no communications ports. I'm looking at how you did it and wonder why you connected ports on the bus (the DX) and not just used the RS232 pinout.

Thank you.
Paul
in
Hi Paul,

For this hack to work, you need to 'fool' the scope that an official Tek interface card has been inserted into the slot; the real card signals to the scope with a word written to the bus which unlocks the serial capability

Arn
 

Offline Arn

  • Newbie
  • Posts: 7
  • Country: gb
Re: TDS 1000,2000,3000 BW Hack
« Reply #116 on: December 17, 2021, 09:49:00 am »
I've been thinking about this hack and wondering if there might be a simpler way of achieving serial capability.

You might be able to just solder 8 10k resistors on the appropriate bus pins  and pull them up/down.

(you need to pullup the CD pin (pin 24) on the bus as well to signal hardware presence)

This might work - although my guess is that the bus might need to be written to at the appropriate  time -i.e bus pin 79 goes high, then the word is written to the bus.

But for the cost of a few resistors it has to be worth a shot.

Arn

« Last Edit: December 17, 2021, 09:56:48 am by Arn »
 

Offline sicco

  • Regular Contributor
  • *
  • Posts: 165
  • Country: nl
Re: TDS 1000,2000,3000 BW Hack
« Reply #117 on: December 17, 2021, 10:14:00 am »
More background in attached pdf's.
After this I did a 'budget' plugin board that has only the USB-FT4232 FTDI, with the two serial ports, optional ESP32 plus optional DS1744W and BDM interface over USB for editing TDS3000 flash rom, ram, RTC and its I2C 'option' modules. See 3rd pdf.

Pulling up/down the relevant 8 bits of the PowerPC databus is not what I'd go for. Better invest in a 74xx245-ish tri-state buffer and set the module identifier bits with that when /CE2 goes low. If you're desperate, then maybe do it with 8 diodes: diodes pull down the 8 bits of the databus when CE2 goes low (cathodes all on CE/2, 8 anodes on 8 databits).

 
The following users thanked this post: hardcoreman, ymrfei

Offline hardcoreman

  • Contributor
  • Posts: 23
  • Country: sk
Re: TDS 1000,2000,3000 BW Hack
« Reply #118 on: March 05, 2022, 02:13:42 pm »
can you share ethernet expansion module flash content for ethernet ? :) i installed 10mbit phy about 2 years ago, trace pins, info was from cpu datasheet... i want see it working. thanks


 

Offline sicco

  • Regular Contributor
  • *
  • Posts: 165
  • Country: nl
Re: TDS 1000,2000,3000 BW Hack
« Reply #119 on: March 05, 2022, 07:33:35 pm »
The flash rom is empty (reads 0xff for all bytes) except for the first ~18. Those hold the MAC address, coded as readable hex characters with colons in between.
As in 01:02:03:04:05:06 in ASCII bytes if the MAC address was 0x010203040506.

However,
1 the first three bytes must be the Tektronix/Sony reserved bytes, as per https://mac.lc/company/sony-tektronix-corp, 00:00:95. If not then it just does not work.
2 it is vital that the NVRAM (DS1742W) has all its Ethernet related bytes set properly. A recovered DS1742/1744 that has had battery dead once, will have lost these CMOS RAM settings, and contrary to other scope settings, a recovery attempt (hold down B TRIG during reboot) will not restore these network settings.

 

Offline sicco

  • Regular Contributor
  • *
  • Posts: 165
  • Country: nl
Re: TDS 1000,2000,3000 BW Hack
« Reply #120 on: March 06, 2022, 04:52:28 pm »
Correction: the MAC address must be 08:00:11:xx:xx:xx. So not 00:00:95:xx:xx:xx as I stated yesterday.
The xx:xx:xx you can pick freely.

See also https://maclookup.app/macaddress/080011

In the binary file I also had put a zero as string terminator, that is byte 17 when starting counting at 0, after the last nibble.

Here is some C code that makes a valid MAC address as a string:

unsigned char random_bytes[6];
int i;

                srand(time(0));

                random_bytes[0] = 0x08;     // Tektronix Inc MAC addresses must start with 080011
                random_bytes[1] = 0x00;
                random_bytes[2] = 0x11;

                for (i=3; i<6; i++)
                    random_bytes = rand() & 0xff;

                for (i=0; i<6; i++)
                {
                    printf ("%02x", random_bytes);
                    if (i<5)
                        printf (":");
                }
                printf("\n");

                F = fopen (TDS3EM_FlashRomFileName, "wt");
                for (i=0; i<6; i++)
                {
                    fprintf (F, "%02x", random_bytes);
                    if (i<5)
                        fprintf (F, ":");
                }
                fprintf (F, "%c", 0);
                i = 12+5+1;
                while (i++ < 32)
                {
                    fprintf (F, "%c", 0xff);
                }
                fclose (F);
                printf ("new file %s is created - but not yet programmed!\n", TDS3EM_FlashRomFileName );

                printf ("copy it to NVRAM? (y/n)");
                ch = getch();
                printf ("%c\n", ch);
                if (ch == 'y')
                {
                    copy_MAC_to_NVRAM (random_bytes);
                }


plus here is how to also load it into the NVRAM. That's mostly for the -b and -c TDS3000 versions that do not work with a TDS3EM because it has the Ethernet PHY chip inside the scope. But this code only works with the BDM interface - that's a backdoor into the tds3000 over the 100 pins connector - details shared before elsewhere on this forum. With that adapter and a Windows PC with USB port you can also re-initialise the DS1742 in-situ so that Ethernet works again.

#define MAC_ADDRESS_IN_NVRAM    0x06F0
void copy_MAC_to_NVRAM (uint8_t *six_bytes)
{
    int i;
    uint32_t address = MAC_ADDRESS_IN_NVRAM;

    printf ("old values: ");
    for (i=0; i<6; i++)
        printf ("%02x:", GetDS1742W (address++));
    printf ("\nnew values: ");
    address -= 6;

    for (i=0; i<6; i++)
        SetDS1742W (address++, *six_bytes++);

    address -= 6;
    for (i=0; i<6; i++)
        printf ("%02x:", GetDS1742W (address++));
    printf ("\n");


}

And also note that if you try to recreate a TDS3EM module, then the module identifier must say it's a TDS3EM. That module identifier byte is read with CE2(?) on the 100 pins connector, typically using a 74XX245 buffer. Details in the circuit diagram of my first 'TDS3k second life board' - that's the one with Ethernet PHY, USB serial, DS1744 NVRAM, ESP32 etc, but without the BDM interface. Details on entry 41 attached pdf in https://www.eevblog.com/forum/repair/reverse-engineer-dallas-ds1742w/25/

If you hardwire the 8 bits for TDS3EM then a TDS3000-b or -c will reject it.


« Last Edit: March 06, 2022, 05:43:51 pm by sicco »
 

Offline whatboy

  • Regular Contributor
  • *
  • Posts: 51
  • Country: mx
Re: TDS 1000,2000,3000 BW Hack
« Reply #121 on: March 14, 2022, 04:43:31 pm »
went from 3032B to 3012B, how do you upgrade firmware from 3.35 to 3.39???
 

Offline sicco

  • Regular Contributor
  • *
  • Posts: 165
  • Country: nl
Re: TDS 1000,2000,3000 BW Hack
« Reply #122 on: March 14, 2022, 05:39:33 pm »
went from 3032B to 3012B, how do you upgrade firmware from 3.35 to 3.39???

Why go from 3032b to 3012b? Why not go 3052b, or, because you have a -b model, why not go 3062b?

To upgrade firmware, the most common option is 5 floppy disks, the binaries for those have been posted as a zip several times in this forum.
Another way to change firmware is to get my BDM interface, connect Windows laptop via USB, and erase and reprogram the flash roms.
 

Offline whatboy

  • Regular Contributor
  • *
  • Posts: 51
  • Country: mx
Re: TDS 1000,2000,3000 BW Hack
« Reply #123 on: March 14, 2022, 07:23:04 pm »
>>Why go from 3032b to 3012b? Why not go 3052b, or, because you have a -b model, why not go 3062b?

Good question, but I did what this thread on the first comment said, and it went down instead of up... WTF???

PASSWORD PITBULL
MCONFIG TDS3054

and that was it... went down instead of up!!!!
 

Offline sicco

  • Regular Contributor
  • *
  • Posts: 165
  • Country: nl
Re: TDS 1000,2000,3000 BW Hack
« Reply #124 on: March 14, 2022, 07:29:53 pm »
>>Why go from 3032b to 3012b? Why not go 3052b, or, because you have a -b model, why not go 3062b?

Good question, but I did what this thread on the first comment said, and it went down instead of up... WTF???

PASSWORD PITBULL
MCONFIG TDS3054

and that was it... went down instead of up!!!!

try this:

PASSWORD PITBULL
MCONFIG TDS3054B

(since you have a -b, you must add the B)
 

Offline gamalot

  • Super Contributor
  • ***
  • Posts: 1300
  • Country: au
  • Correct my English
    • Youtube
Re: TDS 1000,2000,3000 BW Hack
« Reply #125 on: March 14, 2022, 07:30:27 pm »
>>Why go from 3032b to 3012b? Why not go 3052b, or, because you have a -b model, why not go 3062b?

Good question, but I did what this thread on the first comment said, and it went down instead of up... WTF???

PASSWORD PITBULL
MCONFIG TDS3054

and that was it... went down instead of up!!!!

try

PASSWORD PITBULL
MCONFIG TDS3054B

Offline whatboy

  • Regular Contributor
  • *
  • Posts: 51
  • Country: mx
Re: TDS 1000,2000,3000 BW Hack
« Reply #126 on: March 14, 2022, 07:31:09 pm »
>>why not go 3062b?

hMMM... guess I forgot to put the B at the end... now it is a 3064B

Thank you very much!!!

 

Offline whatboy

  • Regular Contributor
  • *
  • Posts: 51
  • Country: mx
Re: TDS 1000,2000,3000 BW Hack
« Reply #127 on: March 14, 2022, 07:34:15 pm »
DAMN it supposed to be 62 not 64... damn it... so damn dumb!!!
 

Offline whatboy

  • Regular Contributor
  • *
  • Posts: 51
  • Country: mx
Re: TDS 1000,2000,3000 BW Hack
« Reply #128 on: March 14, 2022, 07:45:41 pm »
there is no 62 so 52 it is!

 

Offline Grubi

  • Contributor
  • Posts: 11
  • Country: se
Re: TDS 1000,2000,3000 BW Hack
« Reply #129 on: January 06, 2023, 05:33:59 pm »
No one posted here for a year - but... Is it possible to update with mentioned serial command and password:

TDS3014B / v3.26 to TDS3054. It is already updated with all possible options vie EEPROM.
If not - can it be upgraded to some higher model, or not?
Is there a possibility to brick the scope or destroy calibration by using commands used above?

Thanks in advance!
 

Offline rauldm

  • Regular Contributor
  • *
  • Posts: 155
  • Country: mx
Re: TDS 1000,2000,3000 BW Hack
« Reply #130 on: January 08, 2023, 05:32:17 am »
With your actual firmware You can jump of 3014 to 3054 or 64, only need calibrate DC offset ando ready. You can also Buy an used tds3fft stick and programing with all software unlocks for get all funcions, I had a TDS3014b that was converted to TDS3064b, finally I sold, only I have TDS3052B with all unlocks, 500 MHz, and floppy is emulated with USB converter for read & write USB sticks.
 

Offline Dave Wise

  • Regular Contributor
  • *
  • Posts: 131
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #131 on: January 08, 2023, 07:13:04 pm »
Raul, which USB converter did you use?
 

Offline rauldm

  • Regular Contributor
  • *
  • Posts: 155
  • Country: mx
Re: TDS 1000,2000,3000 BW Hack
« Reply #132 on: January 08, 2023, 07:34:30 pm »
 

Offline Dave Wise

  • Regular Contributor
  • *
  • Posts: 131
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #133 on: January 08, 2023, 07:48:45 pm »
$547? Oh wait, that's Pesos, not US-Dollars.  So yes, a very decent price.  Thanks for the link.
 

Offline rauldm

  • Regular Contributor
  • *
  • Posts: 155
  • Country: mx
Re: TDS 1000,2000,3000 BW Hack
« Reply #134 on: January 08, 2023, 07:55:55 pm »
Yes MXN, is amazon.com.mx, but comes of China, works fine, you can save configurations in USB stick, then load in oscilloscope, also you can get screenshots of display, if you found 1.44 MB version you can update the firmware too. This is 720 kB version.
 

Offline alm

  • Super Contributor
  • ***
  • Posts: 2840
  • Country: 00
Re: TDS 1000,2000,3000 BW Hack
« Reply #135 on: January 20, 2023, 11:16:30 pm »
If you flash either drive with the FlashFloppy firmware, then both can act as 1.44 MB drives and have a bunch of extra features.

Offline ghopper

  • Newbie
  • Posts: 6
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #136 on: February 22, 2023, 09:44:03 pm »
Can anyone confirm that this has worked on a TDS2002C?
I just picked up a NIB TDS2002C and wanted to give this upgrade a try.
I suspect that it will and that my challenges are related to getting the software properly set up, but before I keep beating my head on a wall, I want to confirm that I'm not attempting the impossible.
 

Offline ghopper

  • Newbie
  • Posts: 6
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #137 on: February 22, 2023, 10:57:47 pm »
The firmware version is 24.26.  I'm wondering if I need to downgrade the fw version and if so, to what?
After getting everything talking via usb (still getting an occasional I/O error), I used Talker Listener to send the *IDN? command to confirm the communication was working.  After that, I wrote the command PASSWORD PITBULL, and then wrote MODEL TDS2022C.
Then I went back and used Instrument Manager to ID the scope.
No luck.  For giggles I also tried the MCONFIG TDS2022C command.  No joy there either.

I noted that with the 3xxx scopes the version of the firmware mattered.  I'm wondering if that might be the case here.

If that is the case, I'm hoping someone can suggest both a source for the older version(s) of fw (the TEK website only has 24.26), and how far I need to roll it back.

Thanks for any help.
G

 

Offline ghopper

  • Newbie
  • Posts: 6
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #138 on: February 23, 2023, 06:39:18 am »
Having more success, but not all the way there yet.
It turns out that the firmware version is fine, but the passwords was wrong.  At the beginning of the thread, the password indicated was "PITBULL", but that never worked for me.  What did work is "INTEKRITY".

So, now I'm seeing the model as a TDS2022C, until I power cycle it.  Then it's back to a TDS2002C.

I noted that rfdes had made a post saying "I forgot to mention that for the TDS1000/2000 and TDS200 instruments, the BW update will not be saved unless a full calibration adjustment  is performed before the unit is shutdown."  I assume this includes the TDS1000/2000C series as well.

Since I don't want to screw anything up because I misunderstood something (meaning I think I know what is meant, but turns out something entirely different was what was meant...) I looked in both the user manual and the service manual for the 2000C series for the term "calibration adjustment" but never found those terms together.  So I'm hoping someone can explain what actually is meant by that phrase.
 

Offline alm

  • Super Contributor
  • ***
  • Posts: 2840
  • Country: 00
Re: TDS 1000,2000,3000 BW Hack
« Reply #139 on: February 23, 2023, 04:58:17 pm »
Calibration adjustment is described in chapter 5 in the service manual under "adjustment procedure".
 
The following users thanked this post: ghopper

Offline ghopper

  • Newbie
  • Posts: 6
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #140 on: February 23, 2023, 06:42:42 pm »
Thanks for replying.
I'm assuming you're saying that he was referring to the Factory Calibration.  Versus the Self Calibration that is also described in the manuals?
 

Offline alm

  • Super Contributor
  • ***
  • Posts: 2840
  • Country: 00
Re: TDS 1000,2000,3000 BW Hack
« Reply #141 on: February 23, 2023, 08:05:57 pm »
I'd try the self-cal first if you haven't already, because that's trivial. The adjustment procedure as described in the service manual requires specialized equipment that you probably won't have access to.
 
The following users thanked this post: ghopper

Offline ghopper

  • Newbie
  • Posts: 6
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #142 on: February 23, 2023, 09:51:55 pm »
Thanks for following up alm!
I did try the self cal and what that does is knock the scope back to being a TDS2002C. :-(

I have done analog scope calibration (verifications... since the two times I went through the process, the scopes were within spec) so I think I have all of the equipment I need.  I need to double check for a couple of things, but I have a leveled sine wave generator, square wave generator, and a good quality variable power supply so I think I'm GTG.  Well, maybe not exactly.

The one thing I don't think I have is enough identical, BNC terminated, short (the manual says 10"), coax cables to interconnect things.  I have plenty of random length BNC cables, but IIRC only pairs that are the same lengths.  It looks like I only need 3 for a 2 channel scope, but that might be one more than I have.  I assume that if I build 3 from the same parts, that should be just fine.

Interesting that the service manual copy you linked to is different than the one I have been referring to: https://download.tek.com/manual/TDS2000C-TDS1000C-EDU-Service-077044602_RevA.pdf

The one I was looking at included a rather complicated "Performance Verification" section from pages 27-39,  before the (I assume) Factory Calibration (aggravatingly enough called Adjustment Procedure, not factory calibration) section (pages 41- 48)  which is identical to the procedure in the manual you linked to (pages 5-1 through 5-9).

Thanks for the pointers in the right direction!!!  Please let me know where I'm going astray.

Cheers,
Grant
« Last Edit: February 24, 2023, 05:44:22 am by ghopper »
 

Offline rauldm

  • Regular Contributor
  • *
  • Posts: 155
  • Country: mx
Re: TDS 1000,2000,3000 BW Hack
« Reply #143 on: February 24, 2023, 02:54:06 am »
If you flash either drive with the FlashFloppy firmware, then both can act as 1.44 MB drives and have a bunch of extra features.
Also work with 26 pin version?
 

Offline alm

  • Super Contributor
  • ***
  • Posts: 2840
  • Country: 00
Re: TDS 1000,2000,3000 BW Hack
« Reply #144 on: February 24, 2023, 09:56:16 am »
Yes, FlashFloppy works with the 26 pin Gotek drive that fits these scopes: https://github.com/keirf/FlashFloppy/issues/155.

Offline ghopper

  • Newbie
  • Posts: 6
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #145 on: March 03, 2023, 11:04:39 pm »
Thank you to Alm (and Håkan on the Tek forum) for helpful information as well as Dennis Tillman, W7pf for his help.

To close the loop on this question, yes it's entirely possible and not particularly difficult to upgrade a TDS20xxC series.

It takes three pieces/resources/steps.

First is to install the communication software (BOTH packages are required) from Tek, including Openchoice Desktop and TEKVISA.

Then establish communication with the scope (USB cable) via the software and change the model.  First, I read the identity of the scope using the "*IDN?" command via QUERY. Second I sent the PASSWord command and the password INTEKRITY via WRITE (not QUERY).  Older models used PITBULL, but newer models (like the TDS20xxC models) use the newer password.  Then I sent the MODEL command and the new model number "TDS2022C" via WRITE (not QUERY).  Lastly I read the identity of the scope using the "*IDN?" command via QUERY again to see that the model had been changed.

The third step is to run a full factory calibration via the "Adjustment Procedure" instructions via the Service Manual.  If the calibration procedure completes successfully, it will write everything back to storage and the model number change will persist past the power-down of the scope.  The Self Calibration will NOT write the model number change to storage and it will be lost after power-down.

It's not hard to do, but it takes certain resources.  The calibration is the most tedious step and takes a stable power supply that can be adjusted down to 0.015VDC, a leveled sine wave generator, and a square wave generator, as well as a couple of identical coax jumpers, a T and a 50 ohm passthrough terminator.  Check the service manual for the specifics.  With all the messing around, it took around 2-2.5 hours to get this all done.

Cheers,
Grant
 
The following users thanked this post: volvo_nut_v70, alm

Offline rauldm

  • Regular Contributor
  • *
  • Posts: 155
  • Country: mx
Re: TDS 1000,2000,3000 BW Hack
« Reply #146 on: March 14, 2023, 05:46:02 pm »
Yes, FlashFloppy works with the 26 pin Gotek drive that fits these scopes: https://github.com/keirf/FlashFloppy/issues/155.

I flashed the floppy emulator with "flashfloppy", now can emulate with *.img file an 1.44 MB HD floppy disk, also I can to put firmware, downgrade and upgrade it. Is not necessary depress buttons for USB save files like in "original floppy emulator firmware".
Only found a disvantage is you need 7zp for get files from image, is not saved in root directory like before. But 1.44 MB,write and read without press botton and firmware upgrade without obsolete and unestable diskfloppy is a great advantaje.

This article has necesary information for doing it.
https://github.com/andrewpono/TDS3000-Series-Gotek-FlashFloppy

Note: You need open the emulator for see if is STM32, the flashing procedure change but is documented in flashfloppy wiki.
Regards.
 

Offline alm

  • Super Contributor
  • ***
  • Posts: 2840
  • Country: 00
Re: TDS 1000,2000,3000 BW Hack
« Reply #147 on: March 14, 2023, 08:44:42 pm »
Anything you buy right now will be AT32F415 or AT32F435, unless you find some very old (pre mid-2020) stock. I haven't seen any slim drives with AT32F435 yet. There is also the HxC firmware for these drives which does support storing files in a directory instead of inside a floppy image, but it costs €10 and I haven't been able to get this firmware to work with my slim Gotek in my Lecroy WaveRunner2 scope yet (works fine with FlashFloppy). When I have some time I should post on their forum to see if anyone has a solution to get their firmware working, because I would like the storing files in a directory feature.

Offline rauldm

  • Regular Contributor
  • *
  • Posts: 155
  • Country: mx
Re: TDS 1000,2000,3000 BW Hack
« Reply #148 on: March 15, 2023, 04:31:19 am »
Anything you buy right now will be AT32F415 or AT32F435, unless you find some very old (pre mid-2020) stock. I haven't seen any slim drives with AT32F435 yet. There is also the HxC firmware for these drives which does support storing files in a directory instead of inside a floppy image, but it costs €10 and I haven't been able to get this firmware to work with my slim Gotek in my Lecroy WaveRunner2 scope yet (works fine with FlashFloppy). When I have some time I should post on their forum to see if anyone has a solution to get their firmware working, because I would like the storing files in a directory feature.
I bought in amazon on 2021, I flashed with DfuSe.
 

Offline ximtou

  • Newbie
  • Posts: 2
  • Country: fr
Re: TDS 1000,2000,3000 BW Hack
« Reply #149 on: April 19, 2023, 05:22:21 pm »
Bonjour,

J'ai un TDS 3024 4x300mhz
Avec son lecteur de disquettes d'origine qui fonctionne très bien.
Je vous entends parler de mise à jour !?
Ça m'apporterait une meilleur bande passante ? Et la fonction FFT par hasard?
Il y a besoin de remplacer des pièces comme sur le TDS 220 ?

Merci
 

Offline volvo_nut_v70

  • Regular Contributor
  • *
  • Posts: 234
  • Country: ca
Re: TDS 1000,2000,3000 BW Hack
« Reply #150 on: April 20, 2023, 07:21:49 pm »
Un TDS3024 ira à un TDS3052. Pas besoin de changer de pièces. Logiciel uniquement et un moyen de communiquer avec lui. Cette entrée dans le fil le couvre: Ce fil détaille l'application mdule hack

https://www.eevblog.com/forum/testgear/tds-1000-2000-3000-bw-hack/msg1540352/#msg1540352
https://www.eevblog.com/forum/testgear/tek-tds3012-and-tds3024-bw-upgradehack/msg2707222/#msg2707222

 Ce fil détaille l'application mdule hack


https://www.eevblog.com/forum/projects/tektronix-tds3000-oscilloscope-modules-tds3uam/
 

Offline KWF

  • Newbie
  • Posts: 1
  • Country: gb
Re: TDS 1000,2000,3000 BW Hack
« Reply #151 on: May 05, 2023, 05:16:46 am »
Hi All,

I bought the TDS1002 recently and the unit came with TDS2MEM module. I've got a few CF cards laying around so nice feature added. TDS1000 is in good condition, screen is bright and crisp. BNC connectors solid, all functions works. I am happy. However the firmware is in 2.06 version and I assume it is a stock one. On the Tek website there is a page with the newer firmware in version 2.12. After registering and got the approval for the download link I've found out that the archive file contained readme file only. Is anyone able to share the installation files of v.2.12/4.12 for TDS1000/2000 please?

Thanks,
Claudius
 

Offline rauldm

  • Regular Contributor
  • *
  • Posts: 155
  • Country: mx
Re: TDS 1000,2000,3000 BW Hack
« Reply #152 on: May 18, 2023, 05:18:16 am »
Again get 2 TDS3000B, TDS3014B and TDS3034B, I'm working right now with 3034 because nvram battery is dead, my TDS3014B is here. With USB Floppy emulator Flashfloppy firmware for get 1.44 MB and doesn't overwrite my screenshots like original firmware.
 

Offline ToHu

  • Newbie
  • Posts: 7
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #153 on: August 23, 2023, 10:36:05 pm »
I have trouble finding the 3.39 FW, on the tek website they have only 3.41, after registration and approval that i am still waiting for, but i will need 3.39 as well. If someone have it I will appreciate sharing it.
 

Offline volvo_nut_v70

  • Regular Contributor
  • *
  • Posts: 234
  • Country: ca
 
The following users thanked this post: ToHu

Offline ToHu

  • Newbie
  • Posts: 7
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #155 on: August 24, 2023, 07:56:39 pm »
Thanks, now it works.
So i had quite old FW 2.4, it comes that this FW do not recognize the GPIB/RS232/VGA card, i was thinking is a defective com module since the others are supported but obviously the one with the VGA is not. I apply the hack, it works. Another interesting fact, by mistake i send the command for the 2000 series and brick it, non stop restarts and power off/on did not help, at least until I power it off for about an hour may be, and after that is come up as 3034 /as is born/, the i used the proper command and now is 3054.
I am wondering did non B will works as B, I mean if I set it as 3064B, not that I am expecting any difference, may be one more calibration point at/around 600 Mhz .. .
 

Offline volvo_nut_v70

  • Regular Contributor
  • *
  • Posts: 234
  • Country: ca
Re: TDS 1000,2000,3000 BW Hack
« Reply #156 on: August 24, 2023, 08:24:20 pm »
A non B is a non B, the hack doesn't alter that. Be aware that a 3014 can only become a 3054. A 3014B can become a 3064B. There was never a 3062B so a 3012B can only become a 3052B
 

Offline ToHu

  • Newbie
  • Posts: 7
  • Country: us
Re: TDS 1000,2000,3000 BW Hack
« Reply #157 on: August 25, 2023, 03:12:07 am »
I told so, so will not going to try.
 

Offline lern01

  • Regular Contributor
  • *
  • Posts: 74
  • Country: cn
Re: TDS 1000,2000,3000 BW Hack
« Reply #158 on: September 30, 2023, 05:59:20 am »
Thank you very much, can you provide detailed operation steps (using the built-in Ethernet port). Thanks again! My email:lern01@outlook.com
 

Offline DH7DN

  • Regular Contributor
  • *
  • Posts: 128
  • Country: de
    • DH7DN Blog
Re: TDS 1000,2000,3000 BW Hack
« Reply #159 on: January 27, 2024, 07:47:12 pm »
Hello everybody,

thank you very much for providing this kind of information to the Tektronix TDS Series oscilloscope owners. I did an upgrade of my Tektronix TDS 3034B to a TDS 3064B model.

I used the following GPIB commands:
Code: [Select]
PASSWORD PITBULL
MCONFIG TDS3064B
rebooted the device and did a Signal Path Compensation (SPC) to get rid off the newly introduced DC offset and some noise.

The bandwidth measurements of each channel were as follows


I was expecting 600 MHz bandwidth, however, only ~505...520 MHz could be achieved. I used a Leo Bodnar pulser (~30 ps rise time).

Shameless self-promotion  ;D
I have written a blog entry to this upgrade procedure. Added some screenshots and additional information there. Please see:
https://physik.co-i60.com/2024/01/tektronix-tds-3034b-bandwidth-upgrade/


vy 73 de DH7DN, My Blog
 

Offline Name00

  • Newbie
  • Posts: 4
  • Country: ca
Re: TDS 1000,2000,3000 BW Hack
« Reply #160 on: March 16, 2024, 07:08:23 pm »
Can someone do a format on a TDS301x or TDS305x and dd the image for download?

Trying to upgrade and the scope won't read my disks.  :-(  I managed to do 1 but the other floppies have really weak sectors, and I guess the drive isn't able to pick them up, sadly I can't format it and have the scope read the floppy.   Hoping a DD of the img will resolve at this point.  stuck on the update screen for disk 2.

Thanks!
 

Offline sicco

  • Regular Contributor
  • *
  • Posts: 165
  • Country: nl
Re: TDS 1000,2000,3000 BW Hack
« Reply #161 on: March 17, 2024, 02:57:16 pm »
Firmware update via floppy drive is a one way process: from ~5 3.5" diskettes to scope. Not the other way around.
But you can download (to a PC) the image on the floppies from here https://www.tek.com/en/support/software/firmware/tds3000-and-tds3000b-series-firmware-fv341 and then copy that to 5 disks (assuming you have access to an old PC with 3.5" floppy drive...)
 

Offline alm

  • Super Contributor
  • ***
  • Posts: 2840
  • Country: 00
Re: TDS 1000,2000,3000 BW Hack
« Reply #162 on: March 17, 2024, 03:30:08 pm »
You should also be able to replace the floppy drive with a slim Gotek floppy emulator or HxC floppy emulator which allow you to use a USB stick or SD card instead of floppies.


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf