Author Topic: EEVblog #978 - Keysight 1000X Hacking  (Read 152485 times)

0 Members and 1 Guest are viewing this topic.

Offline TK

  • Super Contributor
  • ***
  • Posts: 1145
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #550 on: December 27, 2018, 03:08:01 am »
I tested the bandwidth after installing the FERCSA hack on the EDUX-1002G unit.  It has the DSOX-1102G front end mod.

-3dB is around 150-160MHz

It can reliably measure frequency up to 360-380MHz but with significant signal attenuation.
Did you replace the LP filter too? After the LMH6552, because the 150-160MHz a little bit low, I can measure a 200-205MHz pulse without any attenuation. Unfortunately I can't go above this right now, but looks like the scope still has some juice in it.

I had to dig into my notes, but I found it, so these are the components what I used:
LQP18MN47NG02D (47nH)
CL10C4R7BB8NNND (4.7pF C0G)
At one point I had the LP filter replaced but I found it to have more noise than the standard values, so I rolled back.  I will try the values you suggested and see if I can measure 200MHz without attenuation.
 

Online TheSteve

  • Supporter
  • ****
  • Posts: 3021
  • Country: ca
  • GHz
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #551 on: December 27, 2018, 04:34:21 am »
You will always get more noise with increased bandwidth.
VE7FM
 
The following users thanked this post: TK

Offline hv222

  • Regular Contributor
  • *
  • Posts: 63
  • Country: pl
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #552 on: December 27, 2018, 10:33:47 pm »
Schematic of function generator and group of components located between analog front-end and function generator. This group probably handle the signal offset and part of user calibration. Some power supply components like ferrite beads and decoupling capacitors can be missing in power supply lines. I will appreciate I someone can measure capacitors and inductors values in function generator. Is amplitude of generated signal constant while changing frequency? I add generator function to my scope, but signal shape is not satisfied :(

U31 and U33 are SN74HCT04PW
U46 and U47 are TL274
« Last Edit: December 27, 2018, 10:38:37 pm by hv222 »
 
The following users thanked this post: bitseeker

Offline hv222

  • Regular Contributor
  • *
  • Posts: 63
  • Country: pl
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #553 on: December 27, 2018, 10:49:52 pm »
Schematic of connectors between two boards and LCD FFC connector. Pin numbers are not equal to pin numbers provided by connector manufacturer. Geometrical location on schematic is matching with connectors location on analog board. Connectors are FCI / Amphenol Bergstak series. 40pin, 2 rows, 0.8mm pitch. 61082-04xxxxxx.
 
The following users thanked this post: bitseeker

Offline mikeselectricstuff

  • Super Contributor
  • ***
  • Posts: 12028
  • Country: gb
    • Mike's Electric Stuff
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #554 on: December 30, 2018, 12:29:07 pm »
On the new 4-channel DSOX1204G ( FW 2.00) , they seem to have added a "Host ID", in the form DSOX1204G,CNnnnnnnnn,xxxxxxxxxxxxxxxx where n is the serial no. and x are alphanumerics.
There is an option to save this to a USB stick - help on this says it is used for redeeming licenses.

Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 

Offline mikeselectricstuff

  • Super Contributor
  • ***
  • Posts: 12028
  • Country: gb
    • Mike's Electric Stuff
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #555 on: December 30, 2018, 04:11:34 pm »
The new DSOX1204G runs Linux, so back to square one...
Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 

Offline hv222

  • Regular Contributor
  • *
  • Posts: 63
  • Country: pl
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #556 on: December 30, 2018, 05:17:30 pm »
@mikeselectricstuff

Could you add more photos of 4ch version also with key board?

I try to share full schematic of 2ch version. It will be good point to compare both scopes.
 

Offline mikeselectricstuff

  • Super Contributor
  • ***
  • Posts: 12028
  • Country: gb
    • Mike's Electric Stuff
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #557 on: December 30, 2018, 05:21:30 pm »
@mikeselectricstuff

Could you add more photos of 4ch version also with key board?

I try to share full schematic of 2ch version. It will be good point to compare both scopes.
Not much time at the moment - let me know if there's anything specific
Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 

Offline hv222

  • Regular Contributor
  • *
  • Posts: 63
  • Country: pl
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #558 on: January 02, 2019, 12:44:26 pm »
It looks like 4ch scope have bigger NAND memory - 2Gb instead of 1Gb in 2ch scope. All Micron memories was replaced by Winbond. SDRAM memories remains same size.
 

Online fanOfeeDIY

  • Supporter
  • ****
  • Posts: 330
  • Country: jp
    • YouTube Channel
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #559 on: January 06, 2019, 02:59:10 pm »
If the new models going to use Linux and have soft power switch, it is possible to reduce the booting time.

I uploaded the video which it is used on the product. Chatting about the suspend to memory is mentioned in the later in the video.

 

Offline mikeselectricstuff

  • Super Contributor
  • ***
  • Posts: 12028
  • Country: gb
    • Mike's Electric Stuff
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #560 on: January 06, 2019, 03:58:47 pm »
The new 1204 has a real power switch
Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 

Offline bitseeker

  • Super Contributor
  • ***
  • Posts: 7904
  • Country: us
  • Lots of engineer-tweakable parts inside!
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #561 on: January 07, 2019, 03:15:31 am »
Hopefully, that's a sign that Keysight equipment designs will be more conscious of vampire power consumption.
I TEA.
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1145
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #562 on: January 07, 2019, 11:13:27 am »
Hopefully, that's a sign that Keysight equipment designs will be more conscious of vampire power consumption.
Agilent/Keysight scopes always had hard (real) power switches
 

Offline mikeselectricstuff

  • Super Contributor
  • ***
  • Posts: 12028
  • Country: gb
    • Mike's Electric Stuff
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #563 on: January 07, 2019, 11:17:38 am »
Hopefully, that's a sign that Keysight equipment designs will be more conscious of vampire power consumption.
Agilent/Keysight scopes always had hard (real) power switches
Nope.

Youtube channel:Taking wierd stuff apart. Very apart.
Mike's Electric Stuff: High voltage, vintage electronics etc.
Day Job: Mostly LEDs
 

Offline LapTop006

  • Supporter
  • ****
  • Posts: 455
  • Country: au
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #564 on: January 07, 2019, 01:12:10 pm »
If the new models going to use Linux and have soft power switch, it is possible to reduce the booting time.

I uploaded the video which it is used on the product. Chatting about the suspend to memory is mentioned in the later in the video.

Not really, if the system is done well the boot time into application should be sub 5 seconds, getting the analog side ready for use likely takes almost as long, and would be needed on a return from suspend anyway.
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1145
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #565 on: January 07, 2019, 01:42:38 pm »
Hopefully, that's a sign that Keysight equipment designs will be more conscious of vampire power consumption.
Agilent/Keysight scopes always had hard (real) power switches
Nope.

Sorry, I based my conclusion on the 1000X series and the 54622D (and other vintage HP / Agilent instruments)
 

Offline vladsol

  • Contributor
  • Posts: 11
  • Country: 00
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #566 on: January 21, 2019, 11:44:49 am »
So... Have tried someone to patching files in, re-packing and flashing the nk.bin? :)

after all,  we all are interested in unlocking the licensed features :)
« Last Edit: January 21, 2019, 11:48:19 am by vladsol »
 

Offline IanMacdonald

  • Frequent Contributor
  • **
  • Posts: 944
  • Country: gb
    • IWR Consultancy
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #567 on: January 22, 2019, 07:21:03 am »
Hopefully, that's a sign that Keysight equipment designs will be more conscious of vampire power consumption.

6.5W may not sound much but over a year it adds up to about £8 at UK power rates, so over the life of the item it might add a significant part of its purchase cost.
 

Offline vladsol

  • Contributor
  • Posts: 11
  • Country: 00
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #568 on: January 23, 2019, 07:37:48 pm »
I've found (maybe, this is not a news?:) ) that signature check is done in Agilent.Cdf.Api.Licensing.dl )
I patched this file to skip checking the signature in the license file. Now i need to try to replace this file in nk.bin, and install with the fw update.
 

Offline Bud

  • Super Contributor
  • ***
  • Posts: 3542
  • Country: ca
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #569 on: January 23, 2019, 07:58:35 pm »
Let us know then if that worked...
Facebook-free life and Rigol-free shack.
 

Offline FERCSA

  • Contributor
  • Posts: 36
  • Country: hu
    • www.fercsa.com
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #570 on: January 23, 2019, 11:39:24 pm »
@vladsol It's already done. Only one page back.. and you should find a modified ksx file which activates all the official and unofficial options, later one can't be activated with any license. Also if Keysight really switch over to linux on the 1xx2 series too, it's just not worth the time and effort to dig deeper into the current firmware.

@TK Did you have time to replace your LP filter?

@Mike Any news about a firmware update for the 4ch version?
Don't ask. I'm the same guy who gave you ultra fast internet in the '00s..
 #FERCSA
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1145
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #571 on: January 23, 2019, 11:51:36 pm »
@TK Did you have time to replace your LP filter?
Not yet.  I have the parts in the arrow shopping cart and waiting to order some additional components
 

Offline vladsol

  • Contributor
  • Posts: 11
  • Country: 00
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #572 on: January 24, 2019, 03:57:12 am »
@FERCSA, I apologize, have not seen before. This is great news :) Thank you!
Installed on DSOX1102G
Serial decoding is working. The power analyzer, unfortunately, does not work.
« Last Edit: January 24, 2019, 08:37:28 am by vladsol »
 

Offline Bud

  • Super Contributor
  • ***
  • Posts: 3542
  • Country: ca
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #573 on: February 06, 2019, 06:42:40 am »
Keysight EDUX and DSOX are on sale at Element 14. The EDUX is $503 Canuck coins , equivalent of only $383 Yankee bucks. Coupled with the hack in this thread - insane value. Got one, shipping was $20 CAD.
Facebook-free life and Rigol-free shack.
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1145
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: EEVblog #978 - Keysight 1000X Hacking
« Reply #574 on: February 06, 2019, 11:55:22 am »
There is a Keysight promotion: 15% for scopes <= 200MHz, 25% for >=350MHz

https://www.keysight.com/main/editorial.jspx?cc=US&lc=eng&ckey=3015601&nid=-32110.1203277.00&id=3015601

It does not include the new 4-channel 1000X series
 
The following users thanked this post: Bud


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf