Agilent MSO 5000/6000/7000 - anyone hacked these scopes?

[Fungus]

How about 300M to 500M? Does anyone know?
There seems to be a major difference here too because 300M is 2Gs/s but 500M is 4Gs/s so I am assuming it is not possible?

Is there a paid-for upgrade path?

If not, then... 

[HighVoltage]

Since the 6000 is very similar to the 7000, it is probably the same for the upgrade.

Bandwidth upgrade for the 7000 by software license was not an option.
And every 7000 scope that I had apart, had a different main board.
So, I am pretty sure, Keysight had a different main PCB for each Bandwidth they offered.
I had a 350 MHz, 500 MHz and a 1 GHz of the 7000 B series apart.

[mikeselectricstuff]

How about 300M to 500M? Does anyone know?
There seems to be a major difference here too because 300M is 2Gs/s but 500M is 4Gs/s so I am assuming it is not possible?

Is there a paid-for upgrade path?

I don't recall, but if there was, it was by a board-swap

[KM5TZ]

I have a DSO7054A and the internal 50ohm termination appears bad on channel 1. I've not opened it yet but reviewed some of the internal pics posted and dont see an obvious 50ohm resistor. Is the termination built in to the Teledyne relay as suggested here?

On mine at least, the 50ohm termination is built into the Agilent 1NB7 IC. The Teledyne relay is a switchable attenuator sitting in front of that termination. However, since yours is a 500MHz model, it shouldn't have the Teledyne relay installed at all. I'm not sure where the termination is for those models.

How often do you use all 4 channels on 50 ohms.. ? Maybe swap it with Ch4 ?

Scope (DSO7054A) fails self cal... the only thing I have found wrong with it is the 50 ohm input on CH1. If the termination is in the 1NB7 then I'd likely need to replace it. I'm guessing that would mean finding a scrap scope to harvest one from. Failure message is digitizer, failed, init for talon cal on CH1. Only reference I can find to this online https://community.keysight.com/forums/s/question/0D52L00005IdpUHSAZ/mso7104a-user-cal-issue is something about stuck buts on ADC but the displayed waveforms look fine and in FFT mode i see no difference between channels.

update:  I replaced the damaged 50 ohm termination and the unit now successfully runs self cal and everything works great!

[Jamez]

Could you please point me to the correct steps to enable the service menu?

Service menu on MSO7000

telnet <ip> 5810
username: panther
password: pictures

-> cmd
[vxWorks]# mem modify -w 1 0x009A2187
0x009a2187:  0x00-0x01
0x009a2188:  0x00-.

“cmd”
then press enter.  At [vxWorks]# prompt, type
“mem modify -w 1 0x009A2187”
then press enter. 
Then type “0x01” and press enter again. 
Then type “.” and press enter again.


 Then open up the service menu
utility -> options -> licenses -> options
enable 'service mode', 'all licenses', and 'mso'

reboot scope

Done


====================
Only for 6000 series type this in the vxWorks console:
   mem modify -w 1 0x00966E67
vxWorks response should be:
   0x00966e67:    0x00-
Now type "0x01" after "0x00-" to enable service menu.
new vxWorks response should be:
   0x00966e68:    0x00-
Now type "." after "0x00-" to exit.

Now go to "Options" -> "Licenses".

hello my 6102A scope has 6.20 FW installed, after entering the code above, the  service mode options is unavailable,  where did I do wrong,  Is a work around  available?

thanks

I have the same issue with a 7054B scope and 6.20 FW installed. When I go to "Utility" - > "Options" -> "Licenses" there is no "Options" just a prompt to enter License String


Where did I go wrong?

[Chrestos SV1GAP]

Perhaps an Agilent MSO 5000/6000/7000 at 1:18

[HighVoltage]

I have the same issue with a 7054B scope and 6.20 FW installed. When I go to "Utility" - > "Options" -> "Licenses" there is no "Options" just a prompt to enter License String
(Attachment Link)

Where did I go wrong?

This service option hack has been proven many times to work also with FW 6.20
Please follow the instructions above in detail and I am sure it will work.

[kawal]

I have the same issue with FW 6.20 and DSO6012A. So maybe this is not working with the latest firmware.

[HighVoltage]

Maybe try to go back to an older FW.

[kawal]

Older firmware is no longer available from keysight but 6.20 is
Get the tools to modify the file:
The tools to unpack and repack are available here.
https://www.eevblog.com/forum/testgear/agilent-mso-500060007000-anyone-hacked-these-scopes/?action=dlattach;attach=1068768
The instructions for 6.20 are here
https://www.eevblog.com/forum/testgear/agilent-mso-500060007000-anyone-hacked-these-scopes/msg963722/#msg963722
usage:
unjzp.exe sys6000.jzp sys.bi sys.txt
use hex editor to edit sys6000.bin 6.20.0000:

002E80F8: 94 21 F8 E0 7C 08 02 A6 -> change to -> 38 60 00 00 4E 80 00 20

repack :
packjzp.exe sys.bin sys6000.jzp sys.txt

install to scope
Install licenses via 3 letter codes
ALL for all


 MS - Factory MSO
MSO - MSO
FPG - FPGA Probe
001 - Acq Memory 1M
002 - Acq Memory 2M
004 - Acq Memory 4M
008 - Acq Memory 8M
AMM - Acq Memory Max
LSS - Low speed serial decode
AMS - Automotive serial decode
CAN - CAN trigger
BAT - Battery operation
ALT - FPGA Altera
FRS - Flex Ray serial decode
PWR - Power application
232 - UART/RS232 serial decode
DSW - Distributor license (package)
SGM - Segmented Memory
LMT - Limit Mask Test
TEL - Telecom Mask Test
1MV - 1mv Chan Scale Lmt
FRC - Flex Ray Compliance (package)
MST - Measurement Statistics
E00 - Enhancement 00
SND - I2S serial decode
FLX - Flex Ray serial decode package
DIS - Distributor license (package)
TOM - Tomotherapy LAN reset license
553 - MIL-STD-1553 serial decode
CIR - Circular segmented memory license

If you need to change the license or get an error message on bootup that one of the options is not compatible you can delete the license file via telnet

1) Telnet into the scope:
   $ telnet <ipaddr> 5810

2) log in with login :panther password :pictures
   [vxWorks]# cd bin
   [vxWorks]# rm license.lic
   [vxWorks]# reboot


The easy way that I can confirm works is using telnet to enable special options

log in via telnet and run the command

setServiceMode(1)

Then you get the option to add licenses and more . This menu will go away next reboot.

[tv84]

Why continue to patch the device when you can generate the licenses? 

[kawal]

Why continue to patch the device when you can generate the licenses? 

I know you are trying to help but the help is not very helpful.
I cant read 100s of posts to figure out something again. Is there a one page instruction available to the patching you mentioned?
I actually read that post before and had no clue what was going on. 
 

[tv84]

A member just confirmed that the license.lic file has this format:

Code: [Select]

[vxWorks]# pwd
C:/bin
[vxWorks]# cat license.lic
FMS-4BA50E9C7B5F-000000000
So, it's pretty easy to insert the licenses via menu without any patchings.

You just have to generate the flexlm licenses with the usual keygen (for hints see other threads) and insert the option code + 12-char license signature + "000000000" in the menu.

In the license string, when generating the license signatures, you must use the option long name! Not the 3-char short name. That short name is only for inserting in the license menu.  See here for the short/long names.

Real example:

Calculate the license with the keygen:

FEATURE factoryMso agilent 1.0 permanent uncounted 4BA50E9C7B5F HOSTID=ID_STRING=001122334455

Now insert via menu:

FMS-4BA50E9C7B5F-000000000

[ktgun]

So, it's pretty easy to insert the licenses via menu without any patchings.

...

You just have to generate the flexlm licenses with the usual keygen (for hints see other threads) and insert the option code + 12-char license signature + "000000000" in the menu.

Works great! Thx!
" alt="" class="bbc_img" />

[Howardlong]

Folks

I'm looking for the 5000/6000 6.16 version of firmware file sys6000.jzp. The 6.20 version available on the Keysight website has the same bug on the 6000 that's present on the 7000 that I documented below: that was resolved by downgrading the 7000's firmware back to 6.16.

Any help is appreciated.

[Howardlong]

Folks

I'm looking for the 5000/6000 6.16 version of firmware file sys6000.jzp. The 6.20 version available on the Keysight website has the same bug on the 6000 that's present on the 7000 that I documented below: that was resolved by downgrading the 7000's firmware back to 6.16.

Any help is appreciated.

Thanks to the quick response of a forum member, this is now resolved. FWIW, also see post #642 in this thread from user swperk. My Google foo was looking for the sys6000.jzp, not expecting it to be in a zip file.

[HighVoltage]

I never had a 6000 series scope.
But I read somewhere that the Firmware is the same between the 7000 and 6000 series. Is that correct?
 
The 7000 series scope still has some benefits over all the new Keysight scopes.
Especially the very fast FFT.
Does the 6000 series scope also have such fast FFT?

[Howardlong]

I never had a 6000 series scope.
But I read somewhere that the Firmware is the same between the 7000 and 6000 series. Is that correct?
 
The 7000 series scope still has some benefits over all the new Keysight scopes.
Especially the very fast FFT.
Does the 6000 series scope also have such fast FFT?

The 5000 & 6000 both use the sys6000.jzp firmware, but the 7000 uses sys7000.jzp. There are some minor differences in the front panel between the 6000A and the 7000A. On the 7000A, some of the rotary knobs have push functions, but the functionality is otherwise identical.

There is an additional search feature on the 7000B, together with more front panel changes, and all knobs have push functions, although the 7000A and 7000B use the same sys7000.jzp firmware. One other minor benefit of the 7000B over the 6000A/7000A is the back button allowing slightly more straightforward menu navigation.

The biggest benefits on the 7000 over the 6000 is the bigger screen. Both enjoy fast boot and super responsive UIs.

I don't really use scope FFT functions enough to be able to comment on that.

The most obvious practical functional benefit of the newer DSOX3000 and 4000 to me is that you can have dual serial decode, but I am sure that others may have other reasons!

Edit: forgot to add, for some reason GPIB is standard on the 5000 & 6000, whereas an optional GPIB to LAN adapter is required for the 7000A/B.

[ptech1231]

Hi all!

I got a steal for a DSO6054a at a local auction for just over 800 USD and went to pick it up today. This scope is great! I've only used lower end stuff during my undergrad and only use the lower end stuff at work.

It's a super nice scope. It's very fast and responsive even when doing a bunch of stuff. I tested the scope with a TEK demo board I had laying around.

I also tried the FW hacking to get all the fine grained control of the options and it worked like a charm with only 1 hiccup. I had to go to the keysight website to get the gsp6000 and lib6000 files and had to make sure the modified FW file was named sys6000. Other than that I was able to easily install the files via USB without needing to do the emergency boot (basically load the files onto a USB and then go to utilities > file manager > usb drive > select file and hit load)

[KE5FX]

Absolutely, they are among the all-time great scopes.  Sleepers, too... almost entirely unappreciated by the cognoscenti.

[HighVoltage]

The responsiveness of a 6000 or 7000 series scope is only appreciated, when you use a fancy 3000x or 4000x or 6000x for a while and go back to the older scope.

Especially the FFT function is far too slow in the modern scopes.

Congratulations on the low cost DSO6054A.

[cos]

Agilent JZP tools
Windows version 0.2


A set of tools for Agilent JZP compression format.
A well-known LZSS algorithm with custom header is used.

Compression speed is far from being optimal, compressing a 10MiB file takes around 1 minute on i7 machine, but it works
Bugfixed compressor produces same files as originals now.
Example:

unjzp sys.jzp sys.bin sys_rev.txt
packjzp sys.bin sys_new.jzp sys_rev.txt
sys_new.jzp will match sys.jzp exactly

Will this run under Windows 10 and if so how?

[Howardlong]

See attached screenshot: this is in Windows 11 though. The unzip is quick, but the zip takes quite a few seconds.

[nctnico]

The responsiveness of a 6000 or 7000 series scope is only appreciated, when you use a fancy 3000x or 4000x or 6000x for a while and go back to the older scope.

Especially the FFT function is far too slow in the modern scopes.

Sure about that? I tried to use FFT on my 7104A but that was horribly slow when set to 128k points. Like one update every 10 seconds IIRC.

[Howardlong]

The responsiveness of a 6000 or 7000 series scope is only appreciated, when you use a fancy 3000x or 4000x or 6000x for a while and go back to the older scope.

Especially the FFT function is far too slow in the modern scopes.

Sure about that? I tried to use FFT on my 7104A but that was horribly slow when set to 128k points. Like one update every 10 seconds IIRC.

I think we’re talking about the responsiveness to control inputs, not the time it takes to do an FFT.

For decodes it’s instantaneous, and that’s a feature I use 100x more than an FFT.

There is a better DSO for UI responsiveness with similar specs, the Agilent 54642D. All 546xx scopes are super swift.

But then, more responsive is a CRO. But no FFT, no decode.