Author Topic: EEVblog #978 - Keysight 1000X Hacking (Read 501100 times)

TK · « **Reply #275 on:** March 20, 2017, 01:00:26 pm »

Quote from: Bud on March 20, 2017, 04:34:47 am

Quote from: TK on March 19, 2017, 03:34:22 pm
I was able to get 100MHz on EDUX using Product ID 03 (it has the same issues with Channel 2 as described previously), but could not get 200MHz, so there must be some differences in the front end (the extra EL5166ISZ

Can you measure the bandwidth of the front end? Source signal to the scope input and measure the output of the lmh6552 on one shoulder.

There is another difference in the front end. The EDUX model has a chip marked 6335 AL 1A instead of the LMH6552. I am trying to find the part pinout.

krasimir.k · « **Reply #276 on:** March 20, 2017, 04:05:46 pm »

LMH6550 has marking AL1A and it is differential amplifier, but there is no 6335 code mark in the datasheet.
Both components have the same pin-out.
LMH6550 has 90 MHz 0.1-dB Bandwidth, LMH6552 has 450-MHz 0.1 dB.

brumster · « **Reply #277 on:** March 20, 2017, 07:02:08 pm »

Without wanting to side-track the discussion of getting an EDUX up to 100MHz and beyond - has anyone found the isolated product or module config that enables the serial decode (if it even exists on the resistors so far exposed)? I've not seen anything in the video or the forum posts that really explains which part of the code - if any - relates to the software features? I know Dave spotted in the video that some features got disabled during his investigations, but has anyone categorically discovered what enables it - effectively an EDUX with the serial decode enabled?

The reason I ask is because I'm wondering if it's not something that's possible - because when ordering, the serial decode upgrade was a license option that you had to purchase along with the product; it wasn't a separately listed "hardware" product (despite the naming convention of "EDUX1EMBD") . Which makes me think serial decode - at least on the EDUX model - is not something hackable? Apologies if I "missed a memo"

mikeselectricstuff · « **Reply #278 on:** March 20, 2017, 07:08:17 pm »

All decodes will be enabled by software licenses, but there may be additional qualification/enable based on model links. When fiddling with the links I saw various permutations of licenses appearing and disappearing.

Fungus · « **Reply #279 on:** March 20, 2017, 08:58:22 pm »

Quote from: brumster on March 20, 2017, 07:02:08 pm

makes me think serial decode - at least on the EDUX model - is not something hackable?

You can purchase it separately later so it's not a hardware hack, it's a software hack. AFAIK nobody's looked into software hacks yet.

(it might not even be possible, there's not actually many 'scopes on the market that can be software hacked to enable options).

bitseeker · « **Reply #280 on:** March 20, 2017, 09:37:49 pm »

Is there also a hardware requirement for the serial decode? The EDUX doesn't have the same number of protocols supported that the DSOX does.

TK · « **Reply #281 on:** March 20, 2017, 09:42:31 pm »

Quote from: bitseeker on March 20, 2017, 09:37:49 pm

Is there also a hardware requirement for the serial decode? The EDUX doesn't have the same number of protocols supported that the DSOX does.

My guess is that SPI decoding is missing on the EDUX because it requires the use of EXT TRIG input as 3rd channel, and EDUX has limited capabilities on this input compared to the DSOX. But keysight charges the same $$$ for serial decode for EDUX and DSOX even when SPI is missing on EDUX.

bitseeker · « **Reply #282 on:** March 20, 2017, 09:47:09 pm »

Ah, yes, that makes sense.

mikeselectricstuff · « **Reply #283 on:** March 20, 2017, 09:49:11 pm »

Quote from: TK on March 20, 2017, 09:42:31 pm

Quote from: bitseeker on March 20, 2017, 09:37:49 pm
Is there also a hardware requirement for the serial decode? The EDUX doesn't have the same number of protocols supported that the DSOX does.

My guess is that SPI decoding is missing on the EDUX because it requires the use of EXT TRIG input as 3rd channel, and EDUX has limited capabilities on this input compared to the DSOX. But keysight charges the same $$$ for serial decode for EDUX and DSOX even when SPI is missing on EDUX.

is there any limitation other than voltage range, which isn't a problem for SPI ?

TK · « **Reply #284 on:** March 20, 2017, 11:49:50 pm »

Quote from: mikeselectricstuff on March 20, 2017, 09:49:11 pm

Quote from: TK on March 20, 2017, 09:42:31 pm
Quote from: bitseeker on March 20, 2017, 09:37:49 pm
Is there also a hardware requirement for the serial decode? The EDUX doesn't have the same number of protocols supported that the DSOX does.

My guess is that SPI decoding is missing on the EDUX because it requires the use of EXT TRIG input as 3rd channel, and EDUX has limited capabilities on this input compared to the DSOX. But keysight charges the same $$$ for serial decode for EDUX and DSOX even when SPI is missing on EDUX.
is there any limitation other than voltage range, which isn't a problem for SPI ?

In EDUX mode (Product ID 22) Bus function does not allow user to select EXT as a signal for the BUS. You can only select CH1 and CH2. In DSOX mode (Product ID 24) you can add all 3 inputs to a BUS. Even when the manual says that EXT TRIG input has only 1 voltage range, you can change the probe attenuation and it automatically changes the voltage range. i.e. with probe 1:1 voltage range goes up to 8V. If you change probe to 10:1, voltage range goes up to 80V. I have not tested other probe attenuation values.

Unless triggering from EXT, the button is disabled and if you press it, the scope says: The external trigger view (the signal's digital waveform) is not available in EDUX1000-Series oscilloscopes when the trigger source is not 'EXT' or when the serial bus decode is enabled.

Unfortunately I don't have the decode option to test if SPI gets enabled in EDUX scopes with Product ID 24.

I am about to populate the missing components on the EXT Trig input section to see if the self test error goes away.

mrpackethead · « **Reply #285 on:** March 21, 2017, 03:12:30 am »

how it progressing?

Quote from: TheSteve on March 13, 2017, 09:37:01 pm

Quote from: mrpackethead on March 13, 2017, 08:03:19 pm
makes me wonder can a 3000 series be upgrade from 100Mhz to 1Ghz?

3000A can be upgraded to 500 MHz
3000T can almost certainly be upgraded to 1 GHz (The mod is in progress, I'll have more info in another week or two)

Edit - I should add both of these mods require hardware changes.

tek2232 · « **Reply #286 on:** March 21, 2017, 08:50:15 am »

Quote

I am about to populate the missing components on the EXT Trig input section to see if the self test error goes away.

Interesting hack TK

EEVblog · « **Reply #287 on:** March 21, 2017, 09:16:16 am »

Quote from: brumster on March 20, 2017, 07:02:08 pm

Without wanting to side-track the discussion of getting an EDUX up to 100MHz and beyond - has anyone found the isolated product or module config that enables the serial decode (if it even exists on the resistors so far exposed)? I've not seen anything in the video or the forum posts that really explains which part of the code - if any - relates to the software features? I know Dave spotted in the video that some features got disabled during his investigations, but has anyone categorically discovered what enables it - effectively an EDUX with the serial decode enabled?

It seems to be an AND function.
The scope needs to be in a certain config mode (set by the resistors, e.g. Mode "24") and by the license keys.
If you lack one or the other then the functionality disappears.

TK · « **Reply #288 on:** March 22, 2017, 12:29:19 am »

Quote from: tek2232 on March 21, 2017, 08:50:15 am

Quote
I am about to populate the missing components on the EXT Trig input section to see if the self test error goes away.

Interesting hack TK

I soldered all the components on the EXT trig input section. Self test passes, but still getting user calibration error. It advances a lot more, but it finally fails. The user calibration algorithm implemented for DSOX does not like the EDUX hardware.

I am closing the scope for now

mikeselectricstuff · « **Reply #289 on:** March 22, 2017, 12:48:41 am »

Quote from: TK on March 22, 2017, 12:29:19 am

Quote from: tek2232 on March 21, 2017, 08:50:15 am

Quote
I am about to populate the missing components on the EXT Trig input section to see if the self test error goes away.

Interesting hack TK

I soldered all the components on the EXT trig input section. Self test passes, but still getting user calibration error. It advances a lot more, but it finally fails. The user calibration algorithm implemented for DSOX does not like the EDUX hardware.

I am closing the scope for now

remember you can get some selfcal diags from the serial port which may give some clues

3db · « **Reply #290 on:** March 22, 2017, 07:48:32 am »

@TK
Thanks for your time and effort.

TK · « **Reply #291 on:** March 22, 2017, 01:22:07 pm »

Quote from: mikeselectricstuff on March 22, 2017, 12:48:41 am

Quote from: TK on March 22, 2017, 12:29:19 am
Quote from: tek2232 on March 21, 2017, 08:50:15 am

Quote
I am about to populate the missing components on the EXT Trig input section to see if the self test error goes away.

Interesting hack TK

I soldered all the components on the EXT trig input section. Self test passes, but still getting user calibration error. It advances a lot more, but it finally fails. The user calibration algorithm implemented for DSOX does not like the EDUX hardware.

I am closing the scope for now
remember you can get some selfcal diags from the serial port which may give some clues

EDUX1002G Product ID 22 (factory) complete log: BOOT, Hardware Self Test (PASS), User Calibration (PASS)

Code: [Select]

U-Boot 2010.03 (Oct 18 2011 - 14:28:06)Agilent P500

CPU:   SPEAr600
DRAM:  128 MiB
Flash: 512 KiB
NAND:  internal ecc 128 MiB

Debug serial initialized ........OK
RTC: 2024-17-3   4:100:43.58 UTC

Microsoft Windows CE Bootloader Common Library Version 1.4 Built May  7 2015 01:38:03
Microsoft Windows CE 6.0 Ethernet Bootloader for the Agilent P500 board
Adaptation performed by Agilent Technologies (c) 2008

PHY not found.

System ready!
Preparing for download...
RTC: 2024-17-3   4:100:43.58 UTC
 Loading image 1 from memory at 0xD0600000
O
BL_IMAGE_TYPE_BIN

X
XXXXOOOOXXOOOOOOOOXOXOOOOOOOOXOOOXOOOOXXOOOOOOOOOXOOOOXOXXOXOXXOXOXOXOXXXXOOXXXOOOOOOXXOXXOXXXXXXOOOXXXOXXOOOXXXOXXOOOOXOOXXOOOXOOOOXOXOOOOOXOOOXOOXOXXOXOXXXXXXOXXXXOOOXOOOXOXOOOOXOOOOXOXOXOOOOOOXX
OOOXOOXOOOOXOOOOXOOXXOOXOOOOOOOOOXOOOOXOOOOOOXOXOOOOXOXOOOOOOOXXOOXOOXOXOOOXOOOXOOXXOXOXOOOXOXXXXXOXOXXXOXXXXOXOXXOOOXXXXOXXXXOXXXXXXXOXXXXXXOXXOXXOXXOOXXOXXXOXXXXOOOXXX
OOOXXXOXXOOXOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOXXOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOXXXXXOOOXOXOOXOOXXXXXXXXXXXXXrom_offset=0x0.
XXImageStart = 0x80361000, ImageLength = 0x1A80C40, LaunchAddr = 0x80362000

Completed file(s):
-------------------------------------------------------------------------------
[0]: Address=0x80361000  Length=0x1A80C40  Name="" Target=RAM
 Loading image 1 succeeded.
ROMHDR at Address 80361044h
Preparing launch...
RTC: 2024-17-3   4:100:44.1 UTC
Launching windows CE image by jumping at address 0x  362000

Windows CE Kernel for ARM (Thumb Enabled) Built on Mar  8 2013 at 17:05:33
Setting up for a Cold Reboot
Done Setting up for a Cold Reboot
Windows CE Firmware Init
BSP 1.0.0 for the SPEARHEAD600AB board (built Sep 28 2016)
Adaptation performed by ADENEO (c) 2005
+OALIntrInit
-OALIntrInit(rc = 1)
Initialize driver globals Zeros area...
pDrvGlobalArea 0xa0060000  size 0x800 (0xa0060800 -0xa0060000)
Initialize driver globals Zeros area...done
 OALKitlStart
Firmware Init Done.
OALIoctlHalEnterI2cCriticalSection init i2c cs
++SER_Init: context Drivers\Active\14
SER_Init, dwIndex:2
SER2 got sysintr:0x00000017
SER2 Serial Port, new baud rate:0x1c200  (UARTCLK:48000000 IBRD:0x1a FBRD:0x2)
OHCI\system.c, GCFG_USBH1_SW_RST
OHCI\system.c, GCFG_USBH2_SW_RST
LAN PHY NOT detected.
DeleteP500EnetRegistry:
   \Comm\GMAC 0x0
   \Comm\GMAC1 0x0
   \Comm\Tcpip\Linkage 0x0
   \Drivers\Virtual 0x0
   \Drivers\BuiltIn\LIN 0x5
LIN: Data Valid
BALDWIN_DDI: cBaldwinHwIf::Init: Initializing...
BALDWIN_DDI: cBaldwinHwIf::Init: Scope successfully identified.
BALDWIN_DDI: cBaldwinHwIf::Init: Success!
Device load time:
   NANDFLASH: 0 ms
   SNANDFLASH: 0 ms
SHIM DLL, LoadRealDll [PalIO.dll] for [AgilentPalIO.dll]
SHIM [AgilentPalIO.dll] Get Process Addresses
LaunchInfiniiVision:
=========================================
BLT Product Config 22
   Bandwidth   : 70MHz
   #Channel    : 2
   Board Rev   : FPR
   Clk Gating  : Baldwin
   Sample Rate : 4GSa
   LAN PHY     : No
BLT Module Config 02
   Rev         : LP3
   Sample Rate : 5GSa/s
=========================================
BLT_PRODUCT_CONFIG_0, 0.689v, ID2
BLT_PRODUCT_CONFIG_1, 0.694v, ID2
BLT_MODULE_CONFIG_0, 0.689v, ID2
BLT_MODULE_CONFIG_1, 0.007v, ID0
CANINE_BOARD_REV, 0.002v, ID0
CANINE_MODEL_NAME: MARSUPIAL, 1.740v, ID6, MARSUPIAL
CANINE_EXTMODULE, 2.485v, ID8, SWID8
CANINE_MSO_REV, 0.645v, ID2, SWID2
SHIM DLL, LoadRealDll [PalSStorage.dll] for [AgilentPalSStorage.dll]
SHIM [AgilentPalSStorage.dll] Get Process Addresses
Released build, Sep 28 2016, 00:17:51
Initializing FPGA...
************************************
FPGA Type: Marsupial
Ver: 1.067 Released
Build Time: Tue Jun 14 17:13:42 2016
Build Machine: 2UA5461ZWH
************************************
cMarsupialCalMgr::cMarsupialUserCalFactors::cMarsupialUserCalFactors size 146412
cMarsupialCalMgr::cMarsupialServiceCalFactors::cMarsupialServiceCalFactors size 704
cMarsupialCalMgr::cMarsupialFactoryCalFactors::cMarsupialFactoryCalFactors size 896
Calibration mode User
Recall \Secure\cal\FactoryCal2.dat - ok
Recall \Secure\cal\ServiceCal1.dat - ok
Recall \Secure\cal\UserCal8.dat - ok
Cal Date Wed Mar 22 20:32:43 2017
will do USB phy workaround: CheckCRC
Startup sequence is complete.
System has been running 15.272385 seconds
Start Up Sequence 5.643599
Memory Load 50%
   System Physical Memory 36.191 / 73.465 MB
   Process Virtual Memory 44.500 / 1024.000 MB
-----> InfiniiVision is running <-----
** self test: PASSED : DDR Mem Bus
** self test: PASSED : Acquisition Memory
** self test: PASSED : ADC
** self test: PASSED : MegaZoom SIPO
** self test: PASSED : TrigComp & Mux
** self test: PASSED : FirmwareStatus
Performing USER calibraion
######################## Channel 1 ########################
**** Baldwin Interpolator ****
  fiPreDelay = 0x10
    fiCalResult = 192
    fiWide      = 359
Final Cal Factor = 0x10
**** CAL PASSED **** Time: 1 seconds
**** Talon Calibrator ****
Calibrate AC Signal
  Channel 1: Offset 0x20400  GainIndex 7  GainVern 0x1db0
  Channel 2: Offset 0x20400  GainIndex 7  GainVern 0x1db0
Calibrate DC Signal
  # Pts (out of 20): 20  B1 = 164566.442655  B0 = 127787.527900
  # Pts (out of 20): 20  B1 = 164413.595754  B0 = 128047.469140
  Testing...
    Vin = -0.200000  AvgQLvl = 25.500000 VinActual = -0.200195
    Vin = 0.000000  AvgQLvl = 129.750000 VinActual = 0.003418
    Vin = 0.200000  AvgQLvl = 233.500000 VinActual = 0.206055
**** CAL PASSED **** Time: 2 seconds
**** Talon ****
**Talon Init Cal**
  Slice Offset = 20
Slice offset correction successful
  Using all slices for calibration
**Talon Dac Cal**
Gain Dac Iteration 1: Deltas 14 | Max 1 | Min -1
Gain Dac Iteration 2: Deltas 4 | Max 1 | Min -1
Gain Dac Iteration 3: Deltas 4 | Max 1 | Min -1
Offset Dac Iteration 1: Deltas 39 | Max 3 | Min -3
Offset Dac Iteration 2: Deltas 6 | Max 3 | Min -3
**Talon Pipeline Cal**
*** Talon pipeline cal ***
# pts not used = 0
Offset Adjustment = -29.031982
Gain Adjustment = 1.018970
**Talon4 Timing Cal**
Freq: 39.999902MHz
QMax 0xb4    QMin 0x4b
Min Per: 2.486970e-008    Max Per: 2.514583e-008
Harmonic Used: 1
MajorPass 1 | Deltas 24 | Max Dac  8 | Min Dac -8
MajorPass 2 | Deltas 5 | Max Dac  9 | Min Dac -10
MajorPass 3 | Deltas 3 | Max Dac  8 | Min Dac -10
MinorPass 1 | Deltas 120 | Max Dac  23 | Min Dac -23
  Minor Timing Vernier is clipped
MinorPass 2 | Deltas 103 | Max Dac  37 | Min Dac -34
**Talon Pipeline Cal**
*** Talon pipeline cal ***
# pts not used = 0
Offset Adjustment = -46.060181
Gain Adjustment = 1.036238
  Using partial slices for calibration
**Talon Dac Cal**
Gain Dac Iteration 1: Deltas 0 | Max 1 | Min 0
Gain Dac Iteration 2: Deltas 0 | Max 1 | Min 0
Gain Dac Iteration 3: Deltas 0 | Max 1 | Min 0
Offset Dac Iteration 1: Deltas 0 | Max 2 | Min -3
Offset Dac Iteration 2: Deltas 0 | Max 2 | Min -3
**Talon Pipeline Cal**
*** Talon pipeline cal ***
# pts not used = 0
Offset Adjustment = -0.911255
**** CAL PASSED **** Time: 113 seconds
**** DC Gain ****
28400, 0.758482 : -30827.981533 , 51782.456140
28800, 0.745506 : -4489.511874  , 32146.959632
29200, 0.656410 : -4969.442724  , 32461.990950
29600, 0.575918 : -5494.668378  , 32764.477799
30000, 0.503120 : -6325.395779  , 33182.433405
30400, 0.439883 : -7364.605815  , 33639.564124
30800, 0.385569 : -7972.753845  , 33874.047187
31200, 0.335398 : -9751.359308  , 34470.588235
31600, 0.294378 : -10675.546460 , 34742.648846
32000, 0.256909 : -12236.733617 , 35143.732591
32400, 0.224221 : -14216.787600 , 35587.702265
32800, 0.196085 : -15441.080381 , 35827.768014
33200, 0.170180 : -19225.327652 , 36471.772429
33600, 0.149374 : -21069.483781 , 36747.242206
34000, 0.130390 : -23810.229639 , 37104.607046
34400, 0.113590 : -27891.983292 , 37568.253968
34800, 0.099249 : -30613.152393 , 37838.327526
35200, 0.086183 : -37870.580762 , 38463.793103
35600, 0.075621 : -42038.156636 , 38778.947368
36000, 0.066105 : -46241.972299 , 39056.842105
36400, 0.057455 : -59364.694168 , 39810.810811
36800, 0.050717 : -266241.658692, 50303.030303
37200, 0.049215 : 0.000000      , 0.000000
Reference range = 0.440V
Coarse gain ratio
   0.1x = 0.359 (1.227V)
   0.4x = 1.000 (0.440V)
   0.8x = 2.833 (0.155V)
   2.0x = 7.823 (0.056V)
Gain#   MIN        MAX        %OL
0      0.006291  0.096949
1      0.017369  0.267690
2      0.049215  0.758482
3      0.137233  2.114988
4      0.284519  4.384904
5      0.785594 12.107306
6      2.225927 34.305218
7      6.206885 95.658372
ADC half speed gain ratio = 0.965 (0.456V)
**** CAL PASSED **** Time: 15 seconds
**** Offset Error ****
AC Coupling
   Gain# 0 [29278 (0.006291V) - 37738 (0.080000V), 45pts]
   Gain# 1 [29398 (0.080000V) - 32503 (0.216000V), 45pts]
   Gain# 2 [29329 (0.216000V) - 32659 (0.624000V), 45pts]
   Gain# 3 [29581 (0.624000V) - 32551 (1.600000V), 45pts]
   Gain# 4 [29427 (1.600000V) - 31902 (3.520000V), 45pts]
   Gain# 5 [29444 (3.520000V) - 32594 (9.600000V), 45pts]
   Gain# 6 [29367 (9.600000V) - 32697 (28.000000V), 45pts]
   Gain# 7 [29274 (28.000000V) - 32559 (80.500000V), 45pts]
DC Coupling
   Gain# 0 [29278 (0.006291V) - 37738 (0.080000V), 45pts]
   Gain# 4 [29427 (1.600000V) - 31902 (3.520000V), 45pts]
AC Coupling
   Gain# 0 [29278 (0.006291V) - 37738 (0.080000V), 45pts]
   Gain# 1 [29398 (0.080000V) - 32503 (0.216000V), 45pts]
   Gain# 2 [29329 (0.216000V) - 32659 (0.624000V), 45pts]
   Gain# 3 [29581 (0.624000V) - 32551 (1.600000V), 45pts]
   Gain# 4 [29427 (1.600000V) - 31902 (3.520000V), 45pts]
   Gain# 5 [29444 (3.520000V) - 32594 (9.600000V), 45pts]
   Gain# 6 [29367 (9.600000V) - 32697 (28.000000V), 45pts]
   Gain# 7 [29274 (28.000000V) - 32559 (80.500000V), 45pts]
DC Coupling
   Gain# 0 [29278 (0.006291V) - 37738 (0.080000V), 45pts]
   Gain# 4 [29427 (1.600000V) - 31902 (3.520000V), 45pts]
0 retry out of 920 offset searched
**** CAL PASSED **** Time: 21 seconds
**** Trigger Level ****
div -3, pos slope dac = 0x94B5, neg slope dac = 0x93C7, avg = 37950.000
div -2, pos slope dac = 0x9243, neg slope dac = 0x9155, avg = 37324.000
div -1, pos slope dac = 0x8FD5, neg slope dac = 0x8EE1, avg = 36699.000
div 0, pos slope dac = 0x8D63, neg slope dac = 0x8C73, avg = 36075.000
div 1, pos slope dac = 0x8AEB, neg slope dac = 0x89FF, avg = 35445.000
div 2, pos slope dac = 0x887F, neg slope dac = 0x8791, avg = 34824.000
div 3, pos slope dac = 0x860B, neg slope dac = 0x851B, avg = 34195.000
Trig 1 B1 = -625.679, B0 = 36073.143
div -3, pos slope dac = 0x9537, neg slope dac = 0x9457, avg = 38087.000
div -2, pos slope dac = 0x92CF, neg slope dac = 0x91EB, avg = 37469.000
div -1, pos slope dac = 0x905F, neg slope dac = 0x8F7D, avg = 36846.000
div 0, pos slope dac = 0x8DF1, neg slope dac = 0x8D0D, avg = 36223.000
div 1, pos slope dac = 0x8B85, neg slope dac = 0x8AA1, avg = 35603.000
div 2, pos slope dac = 0x8915, neg slope dac = 0x882F, avg = 34978.000
div 3, pos slope dac = 0x86A5, neg slope dac = 0x85C1, avg = 34355.000
Trig 2 B1 = -622.179, B0 = 36223.000
div -3, pos slope dac = 0x953D, neg slope dac = 0x9457, avg = 38090.000
div -2, pos slope dac = 0x92CF, neg slope dac = 0x91EB, avg = 37469.000
div -1, pos slope dac = 0x905F, neg slope dac = 0x8F7D, avg = 36846.000
div 0, pos slope dac = 0x8DEF, neg slope dac = 0x8D0D, avg = 36222.000
div 1, pos slope dac = 0x8B81, neg slope dac = 0x8A9F, avg = 35600.000
div 2, pos slope dac = 0x8913, neg slope dac = 0x8831, avg = 34978.000
div 3, pos slope dac = 0x86A9, neg slope dac = 0x85C3, avg = 34358.000
Trig 3 B1 = -622.286, B0 = 36223.286
Trig 1 - AC offset 30.857143
Trig 2 - AC offset 34.000000
Trig 1 - LF Rej offset 30.857143
Trig 2 - LF Rej offset 31.000000
Trig 1 - HF_Rej offset -2.142857
Trig 2 - HF_Rej offset -2.000000
Trig 1 - AC_HF_REJ offset 29.857143
Trig 2 - AC_HF_REJ offset 31.000000
**** CAL PASSED **** Time: 29 seconds
**** Trigger Hysteresis ****
Hyst dac = 12288, pos slope dac = 0x8D43, neg slope dac = 0x8C8F, range =  180, div = 0.288 +
Hyst dac = 14336, pos slope dac = 0x8D5F, neg slope dac = 0x8C71, range =  238, div = 0.380 +
Hyst dac = 16384, pos slope dac = 0x8D7F, neg slope dac = 0x8C55, range =  298, div = 0.476 +
Hyst dac = 18432, pos slope dac = 0x8D9F, neg slope dac = 0x8C35, range =  362, div = 0.579 +
Hyst dac = 20480, pos slope dac = 0x8DBD, neg slope dac = 0x8C13, range =  426, div = 0.681 +
Hyst dac = 22528, pos slope dac = 0x8DDD, neg slope dac = 0x8BF3, range =  490, div = 0.783 +
Hyst dac = 24576, pos slope dac = 0x8DFD, neg slope dac = 0x8BD1, range =  556, div = 0.889 +
Hyst dac = 26624, pos slope dac = 0x8E1F, neg slope dac = 0x8BB1, range =  622, div = 0.994 +
Hyst dac = 28672, pos slope dac = 0x8E3F, neg slope dac = 0x8B8B, range =  692, div = 1.106 +
Hyst dac = 30720, pos slope dac = 0x8E63, neg slope dac = 0x8B69, range =  762, div = 1.218 +
Hyst dac = 32768, pos slope dac = 0x8E87, neg slope dac = 0x8B45, range =  834, div = 1.333 +
Hyst dac = 34816, pos slope dac = 0x8EA9, neg slope dac = 0x8B23, range =  902, div = 1.442 +
Hyst dac = 36864, pos slope dac = 0x8ECD, neg slope dac = 0x8B01, range =  972, div = 1.554 +
Trig Hyst B1 = 19290.253, B0 = 7182.611
**** CAL PASSED **** Time: 13 seconds
**** External Trigger Level ****
/5 Trig B1 = 1071.000, B0 = 35562.000
**** CAL PASSED **** Time: 1 seconds
**** Wave Gen ****
[calibrator] = 0x3fb46 Q | -52958.38 Q/V
[0: DIV1  + DIV1 ] = 0x1eb85 Q | 10128.80 Q/V | (calV=2.523585V) 33.527634 V
[1: DIV4  + DIV1 ] = 0x1fa87 Q | 10132.80 Q/V | (calV=2.500246V) 8.304389 V
[2: DIV16 + DIV1 ] = 0x1ffd4 Q | 10131.60 Q/V | (calV=0.640371V) 2.092969 V
[3: DIV64 + DIV1 ] = 0x1fff1 Q | 10131.60 Q/V | (calV=0.159918V) 0.541709 V
[4: DIV1  + DIV23] = 0x1eb7e Q | 235835.00 Q/V | (calV=0.448673V) 1.429883 V
[5: DIV4  + DIV23] = 0x1fa79 Q | 235895.00 Q/V | (calV=0.109935V) 0.357028 V
[6: DIV16 + DIV23] = 0x1ffc4 Q | 235900.00 Q/V | (calV=0.025001V) 0.089740 V
[7: DIV64 + DIV23] = 0x1ffe1 Q | 235900.00 Q/V | (calV=0.006987V) 0.023281 V
[0: DIV1  + DIV1 ] = 33.258736 V (overwrite)
**** CAL PASSED **** Time: 62 seconds
**** Wavegen Trigger Level Offset ****
Wavegen Trig Offset = 0x8BC8
**** CAL PASSED **** Time: 1 seconds
**** Baldwin Trig Time Qual ****
Set CalConfigScope range 1.000000E-005, delay -1.000000E-006
    Top       : 1.055276
    Base      : -21.055276
  Vert Scale : 80.000000
  Vert Offset: -10.527638
  Trig Level : -10.527638
  Horz Range : 1.000000e-007
  Horz Delay : 1.500000e-008
CalConfigScope range 1.000000E-007, delay 1.500000E-008
--- Internal Timer ---
    tVolt for Edge Trigger = 3.469388 ns
    Zero Time = 3.469388 ns
  *Int Osc Freq*
    Oscillator Freq: 385.830187 MHz
Set CalConfigScope range 5.000000E-008, delay -5.000000E-009
CalConfigScope range 5.000000E-008, delay 1.000000E-008
  *Int Find Min Time*
    Zero Time Timer 0 : 1322.512755 ps
    Zero Time Timer 1 : 1335.012755 ps
  *Int Find Min Time*
    Timer 0:
      Dac 0 Time 1314.439838 ps
      Dac 31 Time 2438.738717 ps
      Dac 62 Time 3554.023172 ps
      Dac 93 Time 4597.512755 ps
      Dac 124 Time 5794.387755 ps
    Fine Dac Gain 35.866677 ps/DacCode
    Timer 1:
      Dac 0 Time 1333.971088 ps
      Dac 31 Time 2447.252338 ps
      Dac 62 Time 3547.512755 ps
      Dac 93 Time 4638.007547 ps
      Dac 124 Time 5725.637755 ps
    Fine Dac Gain 35.400286 ps/DacCode
  *Int Fast Path*
    Fast Dac Zero Time 924.315640 ps
      Dac 0 Time 962.877338 ps
      Dac 31 Time 1726.599294 ps
      Dac 62 Time 2838.378140 ps
      Dac 93 Time 3944.387755 ps
      Dac 124 Time 5041.262755 ps
    Fine Dac Gain 33.466320 ps/DacCode
--- Sync Timer ---
Set CalConfigScope range 5.000000E-007, delay -5.000000E-008
  MClk Frequency = 199988766.929841
  *Calibrating PdSel*
  PdSel 0 : Min 68 Max 126
    PdSel = 0
    Min Fine Dac = 142
  *Fine Dac*
    Sync Timer minimum Time : 2.180598e-008
      Dac 142 Val: -2.180064e-008
      Dac 234 Val: -2.590689e-008
      Dac 326 Val: -2.996173e-008
      Dac 418 Val: -3.413265e-008
      Dac 510 Val: -3.825799e-008
    Fine Dac Gain: 2.236198e+010 DacCode/second
    Fine Dac Gain: 44.718762 ps/DacCode
**** CAL PASSED **** Time: 2 seconds
######################## Channel 2 ########################
**** DC Gain ****
28400, 0.755586 : -35017.815055 , 54858.964143
28800, 0.744163 : -4604.228171  , 32226.296490
29200, 0.657286 : -4977.050724  , 32471.347678
29600, 0.576918 : -5372.537640  , 32699.511002
30000, 0.502465 : -6337.037908  , 33184.138428
30400, 0.439344 : -7330.668540  , 33620.683903
30800, 0.384779 : -7875.870590  , 33830.465950
31200, 0.333990 : -9976.698728  , 34532.122588
31600, 0.293897 : -10538.934747 , 34697.362110
32000, 0.255943 : -12327.449620 , 35155.119215
32400, 0.223495 : -14222.445921 , 35578.640777
32800, 0.195370 : -15420.125577 , 35812.631579
33200, 0.169430 : -19402.807018 , 36487.417219
33600, 0.148814 : -20536.148549 , 36656.074766
34000, 0.129337 : -23949.513839 , 37097.547684
34400, 0.112635 : -28537.245386 , 37614.285714
34800, 0.098618 : -30518.998538 , 37809.722222
35200, 0.085511 : -38215.093821 , 38467.826087
35600, 0.075044 : -40691.998051 , 38653.703704
36000, 0.065214 : -47002.521813 , 39065.240642
36400, 0.056704 : -62336.677865 , 39934.751773
36800, 0.050287 : -266347.623604, 50193.939394
37200, 0.048786 : 0.000000      , 0.000000
Reference range = 0.439V
Coarse gain ratio
   0.1x = 0.357 (1.229V)
   0.4x = 1.000 (0.439V)
   0.8x = 2.832 (0.155V)
   2.0x = 7.836 (0.056V)
Gain#   MIN        MAX        %OL
0      0.006226  0.096424
1      0.017227  0.266811
2      0.048786  0.755586
3      0.136493  2.113981
4      0.281521  4.360160
5      0.778981 12.064762
6      2.206009 34.166386
7      6.171981 95.590852
ADC half speed gain ratio = 0.967 (0.454V)
**** CAL PASSED **** Time: 15 seconds
**** Offset Error ****
AC Coupling
   Gain# 0 [29262 (0.006226V) - 37722 (0.080000V), 45pts]
   Gain# 1 [29393 (0.080000V) - 32498 (0.216000V), 45pts]
   Gain# 2 [29345 (0.216000V) - 32630 (0.624000V), 45pts]
   Gain# 3 [29607 (0.624000V) - 32532 (1.600000V), 45pts]
   Gain# 4 [29417 (1.600000V) - 31892 (3.520000V), 45pts]
   Gain# 5 [29461 (3.520000V) - 32566 (9.600000V), 45pts]
   Gain# 6 [29360 (9.600000V) - 32690 (28.000000V), 45pts]
   Gain# 7 [29278 (28.000000V) - 32563 (80.500000V), 45pts]
DC Coupling
   Gain# 0 [29262 (0.006226V) - 37722 (0.080000V), 45pts]
   Gain# 4 [29417 (1.600000V) - 31892 (3.520000V), 45pts]
AC Coupling
   Gain# 0 [29262 (0.006226V) - 37722 (0.080000V), 45pts]
   Gain# 1 [29393 (0.080000V) - 32498 (0.216000V), 45pts]
   Gain# 2 [29345 (0.216000V) - 32630 (0.624000V), 45pts]
   Gain# 3 [29607 (0.624000V) - 32532 (1.600000V), 45pts]
   Gain# 4 [29417 (1.600000V) - 31892 (3.520000V), 45pts]
   Gain# 5 [29461 (3.520000V) - 32566 (9.600000V), 45pts]
   Gain# 6 [29360 (9.600000V) - 32690 (28.000000V), 45pts]
   Gain# 7 [29278 (28.000000V) - 32563 (80.500000V), 45pts]
DC Coupling
   Gain# 0 [29262 (0.006226V) - 37722 (0.080000V), 45pts]
   Gain# 4 [29417 (1.600000V) - 31892 (3.520000V), 45pts]
0 retry out of 920 offset searched
**** CAL PASSED **** Time: 23 seconds
**** Trigger Level ****
div -3, pos slope dac = 0x94B1, neg slope dac = 0x93C3, avg = 37946.000
div -2, pos slope dac = 0x9243, neg slope dac = 0x9153, avg = 37323.000
div -1, pos slope dac = 0x8FD7, neg slope dac = 0x8EE5, avg = 36702.000
div 0, pos slope dac = 0x8D67, neg slope dac = 0x8C7D, avg = 36082.000
div 1, pos slope dac = 0x8AF9, neg slope dac = 0x8A0B, avg = 35458.000
div 2, pos slope dac = 0x888F, neg slope dac = 0x879F, avg = 34839.000
div 3, pos slope dac = 0x861F, neg slope dac = 0x8531, avg = 34216.000
Trig 1 B1 = -621.500, B0 = 36080.857
div -3, pos slope dac = 0x9535, neg slope dac = 0x9453, avg = 38084.000
div -2, pos slope dac = 0x92D1, neg slope dac = 0x91E9, avg = 37469.000
div -1, pos slope dac = 0x9061, neg slope dac = 0x8F81, avg = 36849.000
div 0, pos slope dac = 0x8DF9, neg slope dac = 0x8D15, avg = 36231.000
div 1, pos slope dac = 0x8B8B, neg slope dac = 0x8AAD, avg = 35612.000
div 2, pos slope dac = 0x8921, neg slope dac = 0x883F, avg = 34992.000
div 3, pos slope dac = 0x86B9, neg slope dac = 0x85D5, avg = 34375.000
Trig 2 B1 = -618.500, B0 = 36230.286
div -3, pos slope dac = 0x958B, neg slope dac = 0x94B1, avg = 38174.000
div -2, pos slope dac = 0x9323, neg slope dac = 0x9247, avg = 37557.000
div -1, pos slope dac = 0x90B3, neg slope dac = 0x8FDD, avg = 36936.000
div 0, pos slope dac = 0x8E4B, neg slope dac = 0x8D6D, avg = 36316.000
div 1, pos slope dac = 0x8BDF, neg slope dac = 0x8B03, avg = 35697.000
div 2, pos slope dac = 0x8973, neg slope dac = 0x8899, avg = 35078.000
div 3, pos slope dac = 0x8707, neg slope dac = 0x862D, avg = 34458.000
Trig 3 B1 = -619.464, B0 = 36316.571
Trig 1 - AC offset 24.142857
Trig 2 - AC offset 21.714286
Trig 1 - LF Rej offset 24.142857
Trig 2 - LF Rej offset 23.714286
Trig 1 - HF_Rej offset -0.857143
Trig 2 - HF_Rej offset -0.285714
Trig 1 - AC_HF_REJ offset 22.142857
Trig 2 - AC_HF_REJ offset 22.714286
**** CAL PASSED **** Time: 29 seconds
**** Trigger Hysteresis ****
Hyst dac = 12288, pos slope dac = 0x8D47, neg slope dac = 0x8C97, range =  176, div = 0.283 +
Hyst dac = 14336, pos slope dac = 0x8D67, neg slope dac = 0x8C7B, range =  236, div = 0.380 +
Hyst dac = 16384, pos slope dac = 0x8D87, neg slope dac = 0x8C57, range =  304, div = 0.489 +
Hyst dac = 18432, pos slope dac = 0x8DA5, neg slope dac = 0x8C39, range =  364, div = 0.586 +
Hyst dac = 20480, pos slope dac = 0x8DC3, neg slope dac = 0x8C1D, range =  422, div = 0.679 +
Hyst dac = 22528, pos slope dac = 0x8DE5, neg slope dac = 0x8BFB, range =  490, div = 0.788 +
Hyst dac = 24576, pos slope dac = 0x8E05, neg slope dac = 0x8BD9, range =  556, div = 0.895 +
Hyst dac = 26624, pos slope dac = 0x8E27, neg slope dac = 0x8BB7, range =  624, div = 1.004 +
Hyst dac = 28672, pos slope dac = 0x8E45, neg slope dac = 0x8B95, range =  688, div = 1.107 +
Hyst dac = 30720, pos slope dac = 0x8E69, neg slope dac = 0x8B71, range =  760, div = 1.223 +
Hyst dac = 32768, pos slope dac = 0x8E8D, neg slope dac = 0x8B4F, range =  830, div = 1.335 +
Hyst dac = 34816, pos slope dac = 0x8EAF, neg slope dac = 0x8B29, range =  902, div = 1.451 +
Hyst dac = 36864, pos slope dac = 0x8ED5, neg slope dac = 0x8B03, range =  978, div = 1.574 +
Trig Hyst B1 = 19126.789, B0 = 7223.520
Hyst dac = 12288, pos slope dac = 0x8E2B, neg slope dac = 0x8D89, range =  162, div = 0.262 +
Hyst dac = 14336, pos slope dac = 0x8E4F, neg slope dac = 0x8D6D, range =  226, div = 0.365 +
Hyst dac = 16384, pos slope dac = 0x8E69, neg slope dac = 0x8D4F, range =  282, div = 0.455 +
Hyst dac = 18432, pos slope dac = 0x8E89, neg slope dac = 0x8D2F, range =  346, div = 0.559 +
Hyst dac = 20480, pos slope dac = 0x8EA9, neg slope dac = 0x8D0F, range =  410, div = 0.662 +
Hyst dac = 22528, pos slope dac = 0x8EC7, neg slope dac = 0x8CF1, range =  470, div = 0.759 +
Hyst dac = 24576, pos slope dac = 0x8EE7, neg slope dac = 0x8CD1, range =  534, div = 0.862 +
Hyst dac = 26624, pos slope dac = 0x8F05, neg slope dac = 0x8CB1, range =  596, div = 0.962 +
Hyst dac = 28672, pos slope dac = 0x8F2B, neg slope dac = 0x8C8B, range =  672, div = 1.085 +
Hyst dac = 30720, pos slope dac = 0x8F4D, neg slope dac = 0x8C6D, range =  736, div = 1.188 +
Hyst dac = 32768, pos slope dac = 0x8F71, neg slope dac = 0x8C47, range =  810, div = 1.308 +
Hyst dac = 34816, pos slope dac = 0x8F8F, neg slope dac = 0x8C25, range =  874, div = 1.411 +
Hyst dac = 36864, pos slope dac = 0x8FB3, neg slope dac = 0x8BFD, range =  950, div = 1.534 +
Trig Hyst (2) B1 = 19226.804, B0 = 7416.887
**** CAL PASSED **** Time: 26 seconds
**** Channel Delays ****
--- Vertical Settings ---
    Top       : 0.389447
    Base      : -20.917085
  Final Scale : 80.000000
  Final Offset (POS_SLOPE): -10.458543
  Final Offset (NEG_SLOPE): -10.458543

edge trigger delay factors
iteration:          0
analog trigger channel : 1
pos polarity path delay adjustment (Sec) : 3.540625e-009
pos edge, bi edge delay factor (312.5e-15 Sec counts): 2330
neg edge delay factor (312.5e-15 Sec counts): 2330
analog trigger channel : 2
pos polarity path delay adjustment (Sec) : 2.70432692e-009
pos edge, bi edge delay factor (312.5e-15 Sec counts): -346
neg edge delay factor (312.5e-15 Sec counts): -346
analog trigger channel : 2
pos polarity path delay adjustment (Sec) : 2.01622596e-009
Chan2 TC2 pos edge, bi edge delay factor (312.5e-15 Sec counts): -5048
Chan2 TC2 neg edge delay factor (312.5e-15 Sec counts): -5048
external trigger channel
pos edge, bi edge delay factor (312.5e-15 Sec counts): 3040
neg edge delay factor (312.5e-15 Sec counts): 3040
iteration:          1
analog trigger channel : 1
pos polarity path delay adjustment (Sec) :          0
pos edge, bi edge delay factor (312.5e-15 Sec counts): 2330
neg edge delay factor (312.5e-15 Sec counts): 2330
analog trigger channel : 2
pos polarity path delay adjustment (Sec) :          0
pos edge, bi edge delay factor (312.5e-15 Sec counts): -346
neg edge delay factor (312.5e-15 Sec counts): -346
analog trigger channel : 2
pos polarity path delay adjustment (Sec) : 2.89351852e-012
Chan2 TC2 pos edge, bi edge delay factor (312.5e-15 Sec counts): -5039
Chan2 TC2 neg edge delay factor (312.5e-15 Sec counts): -5039
external trigger channel
pos edge, bi edge delay factor (312.5e-15 Sec counts): 3040
neg edge delay factor (312.5e-15 Sec counts): 3040
**** CAL PASSED **** Time: 2 seconds
**** Analog Channel Skews ****
--- Vertical Settings ---
    Top       : 0.389447
    Base      : -20.917085
  Final Scale : 80.000000
  Final Offset (POS_SLOPE): -10.458543
  Final Offset (NEG_SLOPE): -10.458543
skew for channel: 2
adjustment (Sec) =: -3.57572115e-010
2Gsa/s factor in 312.5e-15 Sec counts: -1143
skew for channel: 2
adjustment (Sec) =: 3.00480769e-012
2Gsa/s factor in 312.5e-15 Sec counts: -1133
skew for channel: 1
adjustment (Sec) =: -8.83152174e-011
1GSa/s factor in 312.5e-15 Sec counts: -282
skew for channel: 2
adjustment (Sec) =: -9.53125e-010
1GSa/s factor in 312.5e-15 Sec counts: -3049
skew for channel: 1
adjustment (Sec) =: -8.7890625e-011
1GSa/s factor in 312.5e-15 Sec counts: -562
skew for channel: 2
adjustment (Sec) =: -8.125e-011
1GSa/s factor in 312.5e-15 Sec counts: -3308
**** CAL PASSED **** Time: 1 seconds
-----< Memory Status >-----
Memory Load 48% -> 51%: 3%
  Physical Used (MB) 35.105 -> 36.965: 1.859

Total Calibration Time: 357
Lowest Frame Temp : 17.500000
Highest Frame Temp: 19.250000
Update Cal Header
Factory Cal Mode
   Revision     : 2
   Cal Mode     : Factory
   Cal Satus    : CAL_OK
   Firmware Ver : 01.00.2016091301
   Cal Temp     : 29.250000 C
   Cal Date     : Thu Sep 29 13:36:40 2016
   Cal Duration : 413s

Service Cal Mode
   Revision     : 1
   Cal Mode     : Service
   Cal Satus    : CAL_OK
   Firmware Ver : 01.00.2016091301
   Cal Temp     : 24.500000 C
   Cal Date     : Thu Sep 29 13:48:43 2016
   Cal Duration : 363s

User Cal Mode
   Revision     : 8
   Cal Mode     : User
   Cal Satus    : CAL_OK
   Firmware Ver : 01.01.2016092800
   Cal Temp     : 17.750000 C
   Cal Date     : Wed Mar 22 20:50:48 2017
   Cal Duration : 357s


**********************************
 Calibration PASSED
    Board: 0
    Inst: CNXXXXXXXX
    Date: Wed Mar 22 20:50:49 2017
    Duration:  6.0 minutes
    Inst Temp: 18.8 degrees C
**********************************

EDUX1002G Product ID 24 (hack) complete log: BOOT, Hardware Self Test (PASS), User Calibration (FAIL)

Code: [Select]

U-Boot 2010.03 (Oct 18 2011 - 14:28:06)Agilent P500

CPU:   SPEAr600
DRAM:  128 MiB
Flash: 512 KiB
NAND:  internal ecc 128 MiB

Debug serial initialized ........OK
RTC: 2024-17-3   4:100:2.12 UTC

Microsoft Windows CE Bootloader Common Library Version 1.4 Built May  7 2015 01:38:03
Microsoft Windows CE 6.0 Ethernet Bootloader for the Agilent P500 board
Adaptation performed by Agilent Technologies (c) 2008

PHY not found.

System ready!
Preparing for download...
RTC: 2024-17-3   4:100:2.12 UTC
 Loading image 1 from memory at 0xD0600000
O
BL_IMAGE_TYPE_BIN

X
XXXXOOOOXXOOOOOOOOXOXOOOOOOOOXOOOXOOOOXXOOOOOOOOOXOOOOXOXXOXOXXOXOXOXOXXXXOOXXXOOOOOOXXOXXOXXXXXXOOOXXXOXXOOOXXXOXXOOOOXOOXXOOOXOOOOXOXOOOOOXOOOXOOXOXXOXOXXXXXXOXXXXOOOXOOOXOXOOOOXOOOOXOXOXOOOOOOXX
OOOXOOXOOOOXOOOOXOOXXOOXOOOOOOOOOXOOOOXOOOOOOXOXOOOOXOXOOOOOOOXXOOXOOXOXOOOXOOOXOOXXOXOXOOOXOXXXXXOXOXXXOXXXXOXOXXOOOXXXXOXXXXOXXXXXXXOXXXXXXOXXOXXOXXOOXXOXXXOXXXXOOOXXX
OOOXXXOXXOOXOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOXXOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOXXXXXOOOXOXOOXOOXXXXXXXXXXXXXrom_offset=0x0.
XXImageStart = 0x80361000, ImageLength = 0x1A80C40, LaunchAddr = 0x80362000

Completed file(s):
-------------------------------------------------------------------------------
[0]: Address=0x80361000  Length=0x1A80C40  Name="" Target=RAM
 Loading image 1 succeeded.
ROMHDR at Address 80361044h
Preparing launch...
RTC: 2024-17-3   4:100:27.22 UTC
Launching windows CE image by jumping at address 0x  362000

Windows CE Kernel for ARM (Thumb Enabled) Built on Mar  8 2013 at 17:05:33
Setting up for a Cold Reboot
Done Setting up for a Cold Reboot
Windows CE Firmware Init
BSP 1.0.0 for the SPEARHEAD600AB board (built Sep 28 2016)
Adaptation performed by ADENEO (c) 2005
+OALIntrInit
-OALIntrInit(rc = 1)
Initialize driver globals Zeros area...
pDrvGlobalArea 0xa0060000  size 0x800 (0xa0060800 -0xa0060000)
Initialize driver globals Zeros area...done
 OALKitlStart
Firmware Init Done.
OALIoctlHalEnterI2cCriticalSection init i2c cs
++SER_Init: context Drivers\Active\14
SER_Init, dwIndex:2
SER2 got sysintr:0x00000017
SER2 Serial Port, new baud rate:0x1c200  (UARTCLK:48000000 IBRD:0x1a FBRD:0x2)
OHCI\system.c, GCFG_USBH1_SW_RST
OHCI\system.c, GCFG_USBH2_SW_RST
LAN PHY NOT detected.
DeleteP500EnetRegistry:
   \Comm\GMAC 0x0
   \Comm\GMAC1 0x0
   \Comm\Tcpip\Linkage 0x0
   \Drivers\Virtual 0x0
   \Drivers\BuiltIn\LIN 0x5
LIN: Data Valid
BALDWIN_DDI: cBaldwinHwIf::Init: Initializing...
BALDWIN_DDI: cBaldwinHwIf::Init: Scope successfully identified.
BALDWIN_DDI: cBaldwinHwIf::Init: Success!
Device load time:
   NANDFLASH: 0 ms
   SNANDFLASH: 0 ms
SHIM DLL, LoadRealDll [PalIO.dll] for [AgilentPalIO.dll]
SHIM [AgilentPalIO.dll] Get Process Addresses
LaunchInfiniiVision:
=========================================
BLT Product Config 24
   Bandwidth   : 200MHz
   #Channel    : 2
   Board Rev   : FPR
   Clk Gating  : Baldwin
   Sample Rate : 4GSa
   LAN PHY     : No
BLT Module Config 02
   Rev         : LP3
   Sample Rate : 5GSa/s
=========================================
BLT_PRODUCT_CONFIG_0, 1.249v, ID4
BLT_PRODUCT_CONFIG_1, 0.699v, ID2
BLT_MODULE_CONFIG_0, 0.689v, ID2
BLT_MODULE_CONFIG_1, 0.010v, ID0
CANINE_BOARD_REV, 0.002v, ID0
CANINE_MODEL_NAME: MARSUPIAL, 1.738v, ID6, MARSUPIAL
CANINE_EXTMODULE, 2.488v, ID8, SWID8
CANINE_MSO_REV, 0.650v, ID2, SWID2
SHIM DLL, LoadRealDll [PalSStorage.dll] for [AgilentPalSStorage.dll]
SHIM [AgilentPalSStorage.dll] Get Process Addresses
Released build, Sep 28 2016, 00:17:51
Initializing FPGA...
************************************
FPGA Type: Marsupial
Ver: 1.067 Released
Build Time: Tue Jun 14 17:13:42 2016
Build Machine: 2UA5461ZWH
************************************
cMarsupialCalMgr::cMarsupialUserCalFactors::cMarsupialUserCalFactors size 146412
cMarsupialCalMgr::cMarsupialServiceCalFactors::cMarsupialServiceCalFactors size 704
cMarsupialCalMgr::cMarsupialFactoryCalFactors::cMarsupialFactoryCalFactors size 896
Calibration mode User
Recall \Secure\cal\FactoryCal2.dat - ok
Recall \Secure\cal\ServiceCal1.dat - ok
Recall \Secure\cal\UserCal8.dat - ok
Cal Date Wed Mar 22 09:18:21 2017
will do USB phy workaround: CheckCRC
Startup sequence is complete.
System has been running 15.415766 seconds
Start Up Sequence 5.853515
Memory Load 50%
   System Physical Memory 36.234 / 73.465 MB
   Process Virtual Memory 44.500 / 1024.000 MB
-----> InfiniiVision is running <-----
** self test: PASSED : DDR Mem Bus
** self test: PASSED : Acquisition Memory
** self test: PASSED : ADC
** self test: PASSED : MegaZoom SIPO
** self test: PASSED : TrigComp & Mux
** self test: PASSED : FirmwareStatus
Performing USER calibraion
######################## Channel 1 ########################
**** Baldwin Interpolator ****
  fiPreDelay = 0x10
    fiCalResult = 192
    fiWide      = 359
Final Cal Factor = 0x10
**** CAL PASSED **** Time: 1 seconds
**** Talon Calibrator ****
Calibrate AC Signal
  Channel 1: Offset 0x20400  GainIndex 7  GainVern 0x1db0
  Channel 2: Offset 0x20400  GainIndex 7  GainVern 0x1db0
Calibrate DC Signal
  # Pts (out of 20): 20  B1 = 164635.035055  B0 = 127786.161411
  # Pts (out of 20): 20  B1 = 163868.032391  B0 = 128081.489449
  Testing...
    Vin = -0.200000  AvgQLvl = 26.750000 VinActual = -0.197754
    Vin = 0.000000  AvgQLvl = 129.250000 VinActual = 0.002441
    Vin = 0.200000  AvgQLvl = 233.250000 VinActual = 0.205566
**** CAL PASSED **** Time: 2 seconds
**** Talon ****
**Talon Init Cal**
  Slice Offset = 20
Slice offset correction successful
  Using all slices for calibration
**Talon Dac Cal**
Gain Dac Iteration 1: Deltas 16 | Max 1 | Min -1
Gain Dac Iteration 2: Deltas 7 | Max 1 | Min -1
Gain Dac Iteration 3: Deltas 6 | Max 1 | Min -1
Offset Dac Iteration 1: Deltas 36 | Max 3 | Min -3
Offset Dac Iteration 2: Deltas 9 | Max 3 | Min -4
**Talon Pipeline Cal**
*** Talon pipeline cal ***
# pts not used = 0
Offset Adjustment = -39.444336
Gain Adjustment = 1.022831
**Talon4 Timing Cal**
Freq: 39.999870MHz
QMax 0xb3    QMin 0x4b
Min Per: 2.483829e-008    Max Per: 2.514962e-008
Harmonic Used: 1
MajorPass 1 | Deltas 26 | Max Dac  9 | Min Dac -10
MajorPass 2 | Deltas 11 | Max Dac  6 | Min Dac -10
MajorPass 3 | Deltas 5 | Max Dac  8 | Min Dac -11
MinorPass 1 | Deltas 141 | Max Dac  30 | Min Dac -31
MinorPass 2 | Deltas 60 | Max Dac  21 | Min Dac -24
MinorPass 3 | Deltas 122 | Max Dac  26 | Min Dac -30
**Talon Pipeline Cal**
*** Talon pipeline cal ***
# pts not used = 0
Offset Adjustment = -45.454102
Gain Adjustment = 1.044315
  Using partial slices for calibration
**Talon Dac Cal**
Gain Dac Iteration 1: Deltas 0 | Max 1 | Min 0
Gain Dac Iteration 2: Deltas 0 | Max 1 | Min 0
Gain Dac Iteration 3: Deltas 0 | Max 1 | Min 0
Offset Dac Iteration 1: Deltas 0 | Max 2 | Min -3
Offset Dac Iteration 2: Deltas 0 | Max 2 | Min -3
**Talon Pipeline Cal**
*** Talon pipeline cal ***
# pts not used = 0
Offset Adjustment = -4.397644
**** CAL PASSED **** Time: 115 seconds
**** DC Gain ****
28400, 0.753064 : -31378.481203 , 52030.000000
28800, 0.740316 : -4547.605971  , 32166.666667
29200, 0.652358 : -4969.442724  , 32441.855204
29600, 0.571866 : -5522.297132  , 32758.013828
30000, 0.499432 : -6357.434687  , 33175.108538
30400, 0.436514 : -7452.056605  , 33652.926209
30800, 0.382837 : -8023.721221  , 33871.780822
31200, 0.332985 : -9882.986206  , 34490.888639
31600, 0.292512 : -10701.552664 , 34730.328867
32000, 0.255134 : -12305.286746 , 35139.495798
32400, 0.222628 : -14403.237274 , 35606.557377
32800, 0.194856 : -15468.265382 , 35814.084507
33200, 0.168997 : -19481.096977 , 36492.239468
33600, 0.148464 : -20968.913453 , 36713.126492
34000, 0.129388 : -24071.163663 , 37114.520548
34400, 0.112771 : -28250.722627 , 37585.852090
34800, 0.098612 : -30506.856725 , 37808.333333
35200, 0.085500 : -38034.522670 , 38451.948052
35600, 0.074983 : -42038.156636 , 38752.153110
36000, 0.065468 : -46733.908175 , 39059.574468
36400, 0.056909 : -61873.061527 , 39921.126761
36800, 0.050444 : -266241.658692, 50230.303030
37200, 0.048942 : 0.000000      , 0.000000
Reference range = 0.437V
Coarse gain ratio
   0.1x = 0.359 (1.218V)
   0.4x = 1.000 (0.437V)
   0.8x = 2.831 (0.154V)
   2.0x = 7.833 (0.056V)
Gain#   MIN        MAX        %OL
0      0.006248  0.096136
1      0.017289  0.266023
2      0.048942  0.753064
3      0.136514  2.100536
4      0.282584  4.348108
5      0.781953 12.031897
6      2.213572 34.060181
7      6.174361 95.004743
ADC half speed gain ratio = 0.958 (0.456V)
**** CAL PASSED **** Time: 15 seconds
**** Offset Error ****
AC Coupling
   Gain# 0 [29243 (0.006248V) - 37838 (0.080000V), 45pts]
   Gain# 1 [29368 (0.080000V) - 32518 (0.216000V), 45pts]
   Gain# 2 [29320 (0.216000V) - 32650 (0.624000V), 45pts]
   Gain# 3 [29571 (0.624000V) - 32541 (1.600000V), 45pts]
   Gain# 4 [29392 (1.600000V) - 31912 (3.520000V), 45pts]
   Gain# 5 [29437 (3.520000V) - 32587 (9.600000V), 45pts]
   Gain# 6 [29335 (9.600000V) - 32710 (28.000000V), 45pts]
   Gain# 7 [29244 (28.000000V) - 32574 (80.500000V), 45pts]
DC Coupling
   Gain# 0 [29243 (0.006248V) - 37838 (0.080000V), 45pts]
   Gain# 4 [29392 (1.600000V) - 31912 (3.520000V), 45pts]
AC Coupling
   Gain# 0 [29243 (0.006248V) - 37838 (0.080000V), 45pts]
   Gain# 1 [29368 (0.080000V) - 32518 (0.216000V), 45pts]
   Gain# 2 [29320 (0.216000V) - 32650 (0.624000V), 45pts]
   Gain# 3 [29571 (0.624000V) - 32541 (1.600000V), 45pts]
   Gain# 4 [29392 (1.600000V) - 31912 (3.520000V), 45pts]
   Gain# 5 [29437 (3.520000V) - 32587 (9.600000V), 45pts]
   Gain# 6 [29335 (9.600000V) - 32710 (28.000000V), 45pts]
   Gain# 7 [29244 (28.000000V) - 32574 (80.500000V), 45pts]
DC Coupling
   Gain# 0 [29243 (0.006248V) - 37838 (0.080000V), 45pts]
   Gain# 4 [29392 (1.600000V) - 31912 (3.520000V), 45pts]
0 retry out of 920 offset searched
**** CAL PASSED **** Time: 21 seconds
**** Trigger Level ****
div -3, pos slope dac = 0x9481, neg slope dac = 0x93AD, avg = 37911.000
div -2, pos slope dac = 0x920F, neg slope dac = 0x913F, avg = 37287.000
div -1, pos slope dac = 0x8FA9, neg slope dac = 0x8ED1, avg = 36669.000
div 0, pos slope dac = 0x8D39, neg slope dac = 0x8C65, avg = 36047.000
div 1, pos slope dac = 0x8ACD, neg slope dac = 0x89F5, avg = 35425.000
div 2, pos slope dac = 0x885F, neg slope dac = 0x878B, avg = 34805.000
div 3, pos slope dac = 0x85EF, neg slope dac = 0x851B, avg = 34181.000
Trig 1 B1 = -621.357, B0 = 36046.429
div -3, pos slope dac = 0x9509, neg slope dac = 0x943F, avg = 38052.000
div -2, pos slope dac = 0x929D, neg slope dac = 0x91D5, avg = 37433.000
div -1, pos slope dac = 0x9033, neg slope dac = 0x8F6D, avg = 36816.000
div 0, pos slope dac = 0x8DCB, neg slope dac = 0x8CFF, avg = 36197.000
div 1, pos slope dac = 0x8B5D, neg slope dac = 0x8A99, avg = 35579.000
div 2, pos slope dac = 0x88F3, neg slope dac = 0x882D, avg = 34960.000
div 3, pos slope dac = 0x8687, neg slope dac = 0x85C3, avg = 34341.000
Trig 2 B1 = -618.429, B0 = 36196.857
div -3, pos slope dac = 0x9509, neg slope dac = 0x943D, avg = 38051.000
div -2, pos slope dac = 0x929D, neg slope dac = 0x91D7, avg = 37434.000
div -1, pos slope dac = 0x9035, neg slope dac = 0x8F6F, avg = 36818.000
div 0, pos slope dac = 0x8DC7, neg slope dac = 0x8CFF, avg = 36195.000
div 1, pos slope dac = 0x8B5D, neg slope dac = 0x8A95, avg = 35577.000
div 2, pos slope dac = 0x88EF, neg slope dac = 0x882D, avg = 34958.000
div 3, pos slope dac = 0x868B, neg slope dac = 0x85C3, avg = 34343.000
Trig 3 B1 = -618.464, B0 = 36196.571
Trig 1 - AC offset 56.571429
Trig 2 - AC offset 57.142857
Trig 1 - LF Rej offset 56.571429
Trig 2 - LF Rej offset 55.142857
Trig 1 - HF_Rej offset -0.428571
Trig 2 - HF_Rej offset 0.142857
Trig 1 - AC_HF_REJ offset 55.571429
Trig 2 - AC_HF_REJ offset 55.142857
**** CAL PASSED **** Time: 29 seconds
**** Trigger Hysteresis ****
Hyst dac = 12288, pos slope dac = 0x8D29, neg slope dac = 0x8C71, range =  184, div = 0.296 +
Hyst dac = 14336, pos slope dac = 0x8D49, neg slope dac = 0x8C53, range =  246, div = 0.396 +
Hyst dac = 16384, pos slope dac = 0x8D65, neg slope dac = 0x8C35, range =  304, div = 0.489 +
Hyst dac = 18432, pos slope dac = 0x8D85, neg slope dac = 0x8C17, range =  366, div = 0.589 +
Hyst dac = 20480, pos slope dac = 0x8DA3, neg slope dac = 0x8BF5, range =  430, div = 0.692 +
Hyst dac = 22528, pos slope dac = 0x8DC5, neg slope dac = 0x8BD5, range =  496, div = 0.798 +
Hyst dac = 24576, pos slope dac = 0x8DE3, neg slope dac = 0x8BB3, range =  560, div = 0.901 +
Hyst dac = 26624, pos slope dac = 0x8E05, neg slope dac = 0x8B91, range =  628, div = 1.011 +
Hyst dac = 28672, pos slope dac = 0x8E27, neg slope dac = 0x8B6F, range =  696, div = 1.120 +
Hyst dac = 30720, pos slope dac = 0x8E49, neg slope dac = 0x8B4B, range =  766, div = 1.233 +
Hyst dac = 32768, pos slope dac = 0x8E6D, neg slope dac = 0x8B29, range =  836, div = 1.345 +
Hyst dac = 34816, pos slope dac = 0x8E8F, neg slope dac = 0x8B05, range =  906, div = 1.458 +
Hyst dac = 36864, pos slope dac = 0x8EB5, neg slope dac = 0x8AE3, range =  978, div = 1.574 +
Trig Hyst B1 = 19194.518, B0 = 7001.237
**** CAL PASSED **** Time: 13 seconds
**** External Trigger Level ****
/1 Trig B1 = 5303.000, B0 = 35552.000
/5 Trig B1 = 1071.000, B0 = 35552.000
**** CAL FAILED ****
Recall \Secure\cal\FactoryCal2.dat - ok
Recall \Secure\cal\ServiceCal1.dat - ok
Recall \Secure\cal\UserCal8.dat - ok
Cal Date Wed Mar 22 09:18:21 2017
Update Cal Failed Header
Factory Cal Mode
   Revision     : 2
   Cal Mode     : Factory
   Cal Satus    : CAL_OK
   Firmware Ver : 01.00.2016091301
   Cal Temp     : 29.250000 C
   Cal Date     : Thu Sep 29 13:36:40 2016
   Cal Duration : 413s

Service Cal Mode
   Revision     : 1
   Cal Mode     : Service
   Cal Satus    : CAL_OK
   Firmware Ver : 01.00.2016091301
   Cal Temp     : 24.500000 C
   Cal Date     : Thu Sep 29 13:48:43 2016
   Cal Duration : 363s

User Cal Mode
   Revision     : 8
   Cal Mode     : User
   Cal Satus    : CAL_FAILED
   Firmware Ver : 01.01.2016092800
   Cal Temp     : 17.250000 C
   Cal Date     : Wed Mar 22 20:32:43 2017
   Cal Duration : 290s


**********************************
 Calibration FAILED
    Board: 0
    Inst: CNXXXXXXXX
    Date: Wed Mar 22 20:32:44 2017
    Duration:  4.8 minutes
    Inst Temp: 17.3 degrees C
**********************************

Before and after pictures to follow

TK · « **Reply #292 on:** March 22, 2017, 01:30:00 pm »

Quote from: mikeselectricstuff on March 22, 2017, 12:48:41 am

Quote from: TK on March 22, 2017, 12:29:19 am
Quote from: tek2232 on March 21, 2017, 08:50:15 am

Quote
I am about to populate the missing components on the EXT Trig input section to see if the self test error goes away.

Interesting hack TK

I soldered all the components on the EXT trig input section. Self test passes, but still getting user calibration error. It advances a lot more, but it finally fails. The user calibration algorithm implemented for DSOX does not like the EDUX hardware.

I am closing the scope for now
remember you can get some selfcal diags from the serial port which may give some clues

Before and After pictures. I don't have the values for the capacitors in "After2". I used 1uF ceramic for decoupling and filtering 5V supply and 100nF for the other 2 caps.

TK · « **Reply #293 on:** March 22, 2017, 05:48:46 pm »

Quote from: mikeselectricstuff on March 22, 2017, 12:48:41 am

Quote from: TK on March 22, 2017, 12:29:19 am
Quote from: tek2232 on March 21, 2017, 08:50:15 am

Quote
I am about to populate the missing components on the EXT Trig input section to see if the self test error goes away.

Interesting hack TK

I soldered all the components on the EXT trig input section. Self test passes, but still getting user calibration error. It advances a lot more, but it finally fails. The user calibration algorithm implemented for DSOX does not like the EDUX hardware.

I am closing the scope for now
remember you can get some selfcal diags from the serial port which may give some clues

Log from mikeselectricstuff's DSOX1102G

Code: [Select]

**** External Trigger Level ****
/1 Trig B1 = 5303.000, B0 = 35846.000
/5 Trig B1 = 1071.000, B0 = 35846.000
/1 Trig 2 B1 = 17283.000, B0 = 28351.000
/5 Trig 2 B1 = 3492.000, B0 = 28351.000
**** CAL PASSED **** Time: 2 seconds

Log from EDUX1002G with Product ID 22 (original)

Code: [Select]

**** External Trigger Level ****
/5 Trig B1 = 1071.000, B0 = 35562.000
**** CAL PASSED **** Time: 1 seconds

Log from EDUX1002G with Product ID 24 (hacked)

Code: [Select]

**** External Trigger Level ****
/1 Trig B1 = 5303.000, B0 = 35552.000
/5 Trig B1 = 1071.000, B0 = 35552.000
**** CAL FAILED ****

I noticed EDUX user calibration is not doing "Trig 2"

JPortici · « **Reply #294 on:** March 22, 2017, 06:33:09 pm »

maybe trig 2 is with other range?

krasimir.k · « **Reply #295 on:** March 23, 2017, 06:59:15 am »

Quote from: JPortici on March 22, 2017, 06:33:09 pm

maybe trig 2 is with other range?

According the datasheet, EDUX model has only +/- 8V range, DSOX has additionally +/- 1.6V.
This is ratio 5.
"/1" or "/5" probably means 1.6V and 8V range respectively (More logical to be opposite, but log data shows only /5 for EDUX, which have 8V range only).
In the DSOX log, there are two lines for Trig2 which contain both ranges (/1 and /5), so Trig2 is not related to the second range.

B1 and B0 are gain/offset coefficients (but I have no idea, which one is the gain or the offset).

mrpackethead · « **Reply #296 on:** March 23, 2017, 09:52:17 am »

Dave, while watching your videos, i noted that the scope showed a date of October 2016... Does the scope need to have its clock set or was this as a result of the hacks..

TK · « **Reply #297 on:** March 23, 2017, 02:19:06 pm »

Quote from: krasimir.k on March 23, 2017, 06:59:15 am

Quote from: JPortici on March 22, 2017, 06:33:09 pm
maybe trig 2 is with other range?
According the datasheet, EDUX model has only +/- 8V range, DSOX has additionally +/- 1.6V.
This is ratio 5.
"/1" or "/5" probably means 1.6V and 8V range respectively (More logical to be opposite, but log data shows only /5 for EDUX, which have 8V range only).
In the DSOX log, there are two lines for Trig2 which contain both ranges (/1 and /5), so Trig2 is not related to the second range.

B1 and B0 are gain/offset coefficients (but I have no idea, which one is the gain or the offset).

I spotted one additional hardware difference between EDUX and DSOX regarding the External Input.

There are 2 resistors to the right of the LEFT CPU board socket. The DSOX has only the lower resistor populated with value 30.1 ohms (marking 47X) and the EDUX has only the upper resistor populated with a 0 ohm jumper (marking 000). When I switched the resistors to the correct DSOX configuration, I was able to get a very consistent digital trace for the External Input. The resistor seems to be related to the EXT_VIEW signal that comes from the Analog comparator on the EXT INPUT section. Before switching this resistor, the trace was fluctuating rapidly between logic 0 and 1 unless triggering from External Input. Now I see a nice digital trace when triggering on CH1 or CH2 and I can even use EXT INPUT to create an Analog Bus and get bus values in HEX (only 1-3 bit bus).

But still User Calibration FAILS...

tek2232 · « **Reply #298 on:** March 23, 2017, 03:00:41 pm »

That is some good progress TK, thanks for your effort, the calibration error messages stays the same.?

TK · « **Reply #299 on:** March 23, 2017, 07:38:27 pm »

Quote from: tek2232 on March 23, 2017, 03:00:41 pm

That is some good progress TK, thanks for your effort, the calibration error messages stays the same.?

Yes, it fails at the same point.


EEVblog Main Site	EEVblog on Youtube	EEVblog on Twitter	EEVblog on Facebook	EEVblog on Odysee

Author Topic: EEVblog #978 - Keysight 1000X Hacking (Read 501100 times)

Share me