Author Topic: Sniffing the Rigol's internal I2C bus  (Read 1837420 times)

0 Members and 2 Guests are viewing this topic.

Offline BitBucket

  • Newbie
  • Posts: 3
  • Country: 00
Re: Sniffing the Rigol's internal I2C bus
« Reply #1450 on: November 23, 2013, 07:06:18 pm »
According to my Rigol distri techy, trial keys are being accepted only once.
You cannot repeatedly set the same option to 'Trial'.
He wasn't clear about trial for 1 option or for all options in general.
I cannot confirm this from own experience.


HTH,
BitBucket
 

Offline Teneyes

  • Frequent Contributor
  • **
  • Posts: 498
  • Country: ca
Re: Sniffing the Rigol's internal I2C bus
« Reply #1451 on: November 23, 2013, 07:11:47 pm »
most likely just another screwup by shitty chinese programming.
Like using 56000 ,instead of 57600 for 56K baud
IiIiIiIiIi  --  curiosity killed the cat but, satisfaction brought it back
 

Offline Teneyes

  • Frequent Contributor
  • **
  • Posts: 498
  • Country: ca
Re: Sniffing the Rigol's internal I2C bus
« Reply #1452 on: November 23, 2013, 07:16:08 pm »

Sorry, I don't (wish I had thought to save it!)
I did use the riglol-x86_64-linux binary mirrored here:
-Clayton

@ Bandgap   Did you use that windows Keygen that adds 2 extra Bytes?
IiIiIiIiIi  --  curiosity killed the cat but, satisfaction brought it back
 

Offline cybernet

  • Regular Contributor
  • *
  • Posts: 247
  • Country: 00
  • pm deactivated, use the search function ...
Re: Sniffing the Rigol's internal I2C bus
« Reply #1453 on: November 23, 2013, 07:26:02 pm »
your DS2302 sets the freq to 350Mhz btw ... here is a dump of possible models (taken from the function that builds it)

supported model types:
Code: [Select]
model         freq       type id
-----------------------------------------------
DS2072   70Mhz        0x16
DS2102  100Mhz       0x0
DS2202  200Mhz       0x1
DS2302  350Mhz       0x2
DS2502  500Mhz       0x4
___________________
"all rights reversed :-)"
R0=-0x18;
UNLINK;
RTS;
 

Offline bandgap

  • Contributor
  • Posts: 47
  • Country: us
  • .: no electrons here :.
    • Bandgap.net
Re: Sniffing the Rigol's internal I2C bus
« Reply #1454 on: November 23, 2013, 07:39:52 pm »

Sorry, I don't (wish I had thought to save it!)
I did use the riglol-x86_64-linux binary mirrored here:
-Clayton

@ Bandgap   Did you use that windows Keygen that adds 2 extra Bytes?

No I did not. When I successfully converted to DS2302, I use the riglol-x86-64-linux binary here: http://www.gotroot.ca/rigol/.

-Clayton
 

Offline AndersAnd

  • Frequent Contributor
  • **
  • Posts: 572
  • Country: dk
Re: Sniffing the Rigol's internal I2C bus
« Reply #1455 on: November 23, 2013, 08:11:30 pm »
your DS2302 sets the freq to 350Mhz btw ... here is a dump of possible models (taken from the function that builds it)

supported model types:
Code: [Select]
model         freq       type id
-----------------------------------------------
DS2072   70Mhz        0x16
DS2102  100Mhz       0x0
DS2202  200Mhz       0x1
DS2302  350Mhz       0x2
DS2502  500Mhz       0x4
I guess they have changed 350Mhz to 300 MHz in the DS2000A firmware, as they are now actually selling a DS2302A model with a specified BW of 300 MHz: http://www.rigol.com/prodserv/281/

I wonder if the HW is actually capable of a 500 MHz BW.
 

Offline cybernet

  • Regular Contributor
  • *
  • Posts: 247
  • Country: 00
  • pm deactivated, use the search function ...
Re: Sniffing the Rigol's internal I2C bus
« Reply #1456 on: November 23, 2013, 08:34:51 pm »
my bet is, it sets the LMH6518 - and the timebase - rest is up to "hardware" + selfcal i guess, depending on whats gettind through, but i have nothing that goes over 200Mhz to test it.
___________________
"all rights reversed :-)"
R0=-0x18;
UNLINK;
RTS;
 

Offline Carrington

  • Super Contributor
  • ***
  • Posts: 1202
  • Country: es
Re: Sniffing the Rigol's internal I2C bus
« Reply #1457 on: November 23, 2013, 08:52:13 pm »
Woow 500MHz.

More news:

CAN-DS2000A:
CAN trigger and decode for DS2000 and DS2000A.
Source: http://www.tequipment.net/RigolPricelist.html
« Last Edit: November 23, 2013, 08:55:07 pm by Carrington »
My English can be pretty bad, so suggestions are welcome. ;)
Space Weather.
Lightning & Thunderstorms in Real Time.
 

Offline Avotronics

  • Regular Contributor
  • *
  • Posts: 58
  • Country: gb
    • Rigol Hacks
Re: Re: Sniffing the Rigol's internal I2C bus
« Reply #1458 on: November 23, 2013, 09:45:58 pm »
I'm gonna get the DS2072 but can't just at the minute, maybe after xmas.
Just wondering; If I end up with a DS2072A does that mean I'd be currently stuck at 70MHz?
I think someone needs to upload a JTAG memory dump of JTAG DS2000A series before it can be hacked.
Noone has uploaded a dump from DS2000A yet and only very few has reported getting a DS2000A series yet.

Hmm. Well I'd provide that if I had the A version. Trouble is I might end up being stuck with 70MHz if its non hackable. Might have to find a non A.

Sent from my Nexus 4 using Tapatalk

Why would you buy something ready made when you can make it yourself with half the features for twice the money!
 

Offline bob11746

  • Newbie
  • Posts: 4
Re: Sniffing the Rigol's internal I2C bus
« Reply #1459 on: November 24, 2013, 12:49:14 am »
I purchased a DS2102 several months ago.  When I first opened the box, the front panel said DS2202.  I said Yippee! they screwed up! ;D  That was short lived :(, the firmware internally said it was a DS2102 as well as the paperwork that went with it.  So with the 2202 moniker on the front, this unit is begging for a hack.

I've been reading these blogs and you guys are great, but there are so many procedures talked about I'm a little confused as to what I need to do, is there anywhere a concise set of instructions on how to hack my 2102 to a 2202?  Is it as simple as using the windows key gen?  Can it be hacked to a 2302?  Do I need that Ultra Sigma software?

Thanks,
Bob
 

Offline Avotronics

  • Regular Contributor
  • *
  • Posts: 58
  • Country: gb
    • Rigol Hacks
Sniffing the Rigol's internal I2C bus
« Reply #1460 on: November 24, 2013, 01:02:45 am »
I purchased a DS2102 several months ago.  When I first opened the box, the front panel said DS2202.  I said Yippee! they screwed up! ;D  That was short lived :(, the firmware internally said it was a DS2102 as well as the paperwork that went with it.  So with the 2202 moniker on the front, this unit is begging for a hack.

I've been reading these blogs and you guys are great, but there are so many procedures talked about I'm a little confused as to what I need to do, is there anywhere a concise set of instructions on how to hack my 2102 to a 2202?  Is it as simple as using the windows key gen?  Can it be hacked to a 2302?  Do I need that Ultra Sigma software?

Thanks,
Bob

Bob, I agree there is a need for clear and concise instructions. Problem is that the hacks don't seem to be providing consistent results. That said, its more likely users are not following the same upgrade path, I.e. following the exact same instructions. If you want the current recommended procedure, its below, but you may wish to have confirmation of those instructions from AndersAnd.

Two thirds of the way down this post.

https://www.eevblog.com/forum/testgear/sniffing-the-rigol's-internal-i2c-bus/msg324768/?topicseen#msg324768
« Last Edit: November 24, 2013, 01:10:25 am by Avotronics »
Why would you buy something ready made when you can make it yourself with half the features for twice the money!
 

Offline AndersAnd

  • Frequent Contributor
  • **
  • Posts: 572
  • Country: dk
Re: Sniffing the Rigol's internal I2C bus
« Reply #1461 on: November 24, 2013, 02:04:10 am »
I've been reading these blogs and you guys are great, but there are so many procedures talked about I'm a little confused as to what I need to do, is there anywhere a concise set of instructions on how to hack my 2102 to a 2202?  Is it as simple as using the windows key gen?  Can it be hacked to a 2302?  Do I need that Ultra Sigma software?
Just follow my step-by-step guide methodically here: 
https://www.eevblog.com/forum/testgear/sniffing-the-rigol%27s-internal-i2c-bus/msg324768/#msg324768

Can it be hacked to a 2302?
No there's no known way to upgrade to DS2302. You can only upgrade to DS2202.
One member somehow ended up with a DS2302 while trying to upgrade to DS2202, but he doesn't know exactly how this happened and noone has been able to replicate it.

Do I need that Ultra Sigma software?
No, just enter the generated key directly in the right scope menu using the scopes knobs and buttons. No softwqre is needed.
 

Offline mickpah

  • Regular Contributor
  • *
  • Posts: 148
  • Country: au
    • Yeti Hacks
Re: Sniffing the Rigol's internal I2C bus
« Reply #1462 on: November 24, 2013, 07:18:11 am »
HI
anyone tried entering a key after their DO832 has had the thermal retrofit ?
The job sheet shows new firmware 1.08 was installed as well.
I'm not having much luck. but not sure I'm doing it correctly either, not that there much I can for wrong other than a typo.
getting a sinking feeling Rigol have changed the key algorithm 
 

Offline bandgap

  • Contributor
  • Posts: 47
  • Country: us
  • .: no electrons here :.
    • Bandgap.net
Re: Sniffing the Rigol's internal I2C bus
« Reply #1463 on: November 24, 2013, 02:21:10 pm »
Can it be hacked to a 2302?
No there's no known way to upgrade to DS2302. You can only upgrade to DS2202.
One member somehow ended up with a DS2302 while trying to upgrade to DS2202, but he doesn't know exactly how this happened and noone has been able to replicate it.

I'm pretty certain a couple of us have been able to get a DS2302. I can't remember the other person, but he's earlier in the thread. I read about his success and then minutes later was successful myself at doing it. The rest of what you say is correct, though. We don't know exactly how it happened.  :-[

-Clayton
 

Offline marmad

  • Super Contributor
  • ***
  • Posts: 2979
  • Country: aq
    • DaysAlive
Re: Sniffing the Rigol's internal I2C bus
« Reply #1464 on: November 24, 2013, 02:30:25 pm »
I'm pretty certain a couple of us have been able to get a DS2302. I can't remember the other person, but he's earlier in the thread. I read about his success and then minutes later was successful myself at doing it. The rest of what you say is correct, though. We don't know exactly how it happened.  :-[

But has anyone actually tested the 300MHz bandwidth as happened after the other 'upgrades'?
 

Offline Carrington

  • Super Contributor
  • ***
  • Posts: 1202
  • Country: es
Re: Sniffing the Rigol's internal I2C bus
« Reply #1465 on: November 24, 2013, 03:21:34 pm »
I'm pretty certain a couple of us have been able to get a DS2302. I can't remember the other person, but he's earlier in the thread. I read about his success and then minutes later was successful myself at doing it. The rest of what you say is correct, though. We don't know exactly how it happened.  :-[

But has anyone actually tested the 300MHz bandwidth as happened after the other 'upgrades'?

Good question.
My English can be pretty bad, so suggestions are welcome. ;)
Space Weather.
Lightning & Thunderstorms in Real Time.
 

Offline bob11746

  • Newbie
  • Posts: 4
Re: Sniffing the Rigol's internal I2C bus
« Reply #1466 on: November 24, 2013, 04:28:53 pm »
AndersAnd,
Thanks for the reply.  I noticed that you suggest upgrading the firmware to the latest, yet others are concerned that one of these days the latest firmware update will prevent using keys that allow upgrading any farther than the instrument you purchased.  I just requested a firmware update and they asked for my FW#, model, and serial number.  I suspect it's only a matter of time before Rigol takes affirmative action and we're talking about the "good old days" of hacking an upgrade.

My current firmware is 00.01.00 and the HW is 1.0.  These sound pretty early compared to others on this blog, yet I only purchased it April of this year.
 

studio25

  • Guest
Re: Sniffing the Rigol's internal I2C bus
« Reply #1467 on: November 24, 2013, 09:10:39 pm »
HI
anyone tried entering a key after their DO832 has had the thermal retrofit ?
The job sheet shows new firmware 1.08 was installed as well.
I'm not having much luck. but not sure I'm doing it correctly either, not that there much I can for wrong other than a typo.
getting a sinking feeling Rigol have changed the key algorithm

Rigol has changed the DP832 keys.

How it works:
1 Download firmware at http://www.riglol.3owl.com/firmware/DP832.rar
2 Downgrade firmware to 01.06.00
3 Generate Key on riglol.3owl.com
4 Install the keys
5 Upgrade firmware to 01.08.00
 

Offline mickpah

  • Regular Contributor
  • *
  • Posts: 148
  • Country: au
    • Yeti Hacks
Re: Sniffing the Rigol's internal I2C bus
« Reply #1468 on: November 24, 2013, 09:25:53 pm »
thank you !  :-+
 

Offline glano

  • Newbie
  • Posts: 4
Re: Sniffing the Rigol's internal I2C bus
« Reply #1469 on: November 25, 2013, 06:13:56 am »
Can anyone mirror the DP832.rar?  Seems like http://www.riglol.3owl.com/ is getting DDOS something fierce.
 

Offline Avotronics

  • Regular Contributor
  • *
  • Posts: 58
  • Country: gb
    • Rigol Hacks
Sniffing the Rigol's internal I2C bus
« Reply #1470 on: November 25, 2013, 08:48:06 am »

Can anyone mirror the DP832.rar?  Seems like http://www.riglol.3owl.com/ is getting DDOS something fierce.

It's working for me, but I'll mirror the firmwares too here: http://rigol.avotronics.co.uk
I'll get to that later today, for some reason its been mirroring riglol.3.owl main page but not the firmware directory.
Why would you buy something ready made when you can make it yourself with half the features for twice the money!
 

Offline Avotronics

  • Regular Contributor
  • *
  • Posts: 58
  • Country: gb
    • Rigol Hacks
Re: Sniffing the Rigol's internal I2C bus
« Reply #1471 on: November 25, 2013, 07:31:13 pm »
I've mirrored the firmware(s) at http://rigol.avotronics.co.uk
For some reason I'm having trouble mirroring subdirectories at 3owl but I'm using a workaround for now.
Why would you buy something ready made when you can make it yourself with half the features for twice the money!
 

Offline AndersAnd

  • Frequent Contributor
  • **
  • Posts: 572
  • Country: dk
Re: Sniffing the Rigol's internal I2C bus
« Reply #1472 on: November 25, 2013, 07:35:47 pm »
HI
anyone tried entering a key after their DO832 has had the thermal retrofit ?
The job sheet shows new firmware 1.08 was installed as well.
I'm not having much luck. but not sure I'm doing it correctly either, not that there much I can for wrong other than a typo.
getting a sinking feeling Rigol have changed the key algorithm

Rigol has changed the DP832 keys.

How it works:
1 Download firmware at http://www.riglol.3owl.com/firmware/DP832.rar
2 Downgrade firmware to 01.06.00
3 Generate Key on riglol.3owl.com
4 Install the keys
5 Upgrade firmware to 01.08.00
I've mirrored the firmware(s) at http://rigol.avotronics.co.uk
For some reason I'm having trouble mirroring subdirectories at 3owl but I'm using a workaround for now.
So the mirror link is http://rigol.avotronics.co.uk/riglol/firmware/DP832.rar
Maybe add a link to the firmware page/file on this front page: http://www.riglol.3owl.com and add a note about not upgrading to 01.08.00 before entering keys.
« Last Edit: November 25, 2013, 07:37:38 pm by AndersAnd »
 

Offline tirulerbach

  • Contributor
  • Posts: 33
Re: Sniffing the Rigol's internal I2C bus
« Reply #1473 on: November 25, 2013, 08:33:40 pm »
Hello,

I got a brand new unmodified DS2202_A_. So I would like to help to enhance the situation...  :-DD

I don't have mature experience in hacking this sort of stuff. How can I help you guys? Are there any pointers how to create a memory dump from this beast? Where to send the dump?  :-//

Please don't hesitate do contact me with your requests...  :-+
 

Offline Rigby

  • Super Contributor
  • ***
  • Posts: 1476
  • Country: us
  • Learning, very new at this. Righteous Asshole, too
Re: Sniffing the Rigol's internal I2C bus
« Reply #1474 on: November 25, 2013, 08:50:42 pm »
Hello,

I got a brand new unmodified DS2202_A_. So I would like to help to enhance the situation...  :-DD

I don't have mature experience in hacking this sort of stuff. How can I help you guys? Are there any pointers how to create a memory dump from this beast? Where to send the dump?  :-//

Please don't hesitate do contact me with your requests...  :-+

Where'd you get it?
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf