Author Topic: DSOX2000 and 3000 series - licence , have anyone tried to hack that scope ?  (Read 803642 times)

krokodyl1220 and 2 Guests are viewing this topic.

Offline wheedal

  • Newbie
  • Posts: 4
  • Country: us
Re: DSOX2000 and 3000 series - licence , have anyone tried to hack that scope ?
« Reply #2850 on: September 17, 2021, 08:07:13 pm »
Re: MSO logic analyzer function cables
Nice! --someone on Ebay has new old stock 54620-61601 kits for $80.
------------------------------
and Gone.
wow, that was fast --they had quite a few --someone bought them all.  Guess I'm glad I got mine
« Last Edit: September 17, 2021, 08:13:29 pm by wheedal »
 

Offline Howardlong

  • Super Contributor
  • ***
  • Posts: 5128
  • Country: gb
Re: DSOX2000 and 3000 series - licence , have anyone tried to hack that scope ?
« Reply #2851 on: September 17, 2021, 10:16:29 pm »
I have access to LS / FS USB decoding on mine.  Perhaps HS is tied to Scope Bandwidth. 

Easiest way to transfer files is with USB, will appear as a directory over Telnet.

Yes, you need (a) 1GHz sample rate or greater and (b) at least a 4000A. HS doesn't work on a 3000T. There's no USB trigger/decode at all on 3000A or 2000.

There is some marketing material out there that suggested the 3104T would support it. When I evaluated it, I couldn't get HS to work, although the DUT decoded fine on a Tek MDO4000.

In the end it turned out to be an error in the marketing material.

Even with HS, you're still going to need expensive diff probes.
 
The following users thanked this post: analogRF, Venturi962

Offline lastguy

  • Contributor
  • Posts: 18
  • Country: us
Re: DSOX2000 and 3000 series - licence , have anyone tried to hack that scope ?
« Reply #2852 on: September 19, 2021, 10:16:26 pm »
Where can I found instructions on how to use PhillyFlyers' patches? which eth card or telnet etc s/w tool shall I use? do I need to hard wire the serial port on PCB? Do I still need USB boot when power cycle?

Highest affordable one for me might be 2000x, I'm a slave of Fannie&Freddie.  SynGen h/w is built in but no AWG capability? Can 2CH be upgraded to 4CH? DSO2002a (not MSO) can also unlock logic channel?
I looked h/w modification, photos seems to be 3000x, are they same for 2000x? Digikey 0603 resistors needs 5K pcs, aliexpress kit are E24. Where did you get parts from ? I'm in California.

More important, acc name and passwd for telnet?

thanks the building is too high to climb might take me months。

 
« Last Edit: September 21, 2021, 04:22:01 am by lastguy »
 

Offline dagolard

  • Contributor
  • Posts: 13
  • Country: ch
Re: DSOX2000 and 3000 series - licence , have anyone tried to hack that scope ?
« Reply #2853 on: September 23, 2021, 04:17:54 pm »
My scope is back. Repaired and calibrated. ;)

Now a question: is there a "easy way" to activate missing licenses? Actually I have only MSO, BW10, EDK, DVM and RML.
I.e. OSV and the Generator I would like to have...

 

Offline CebroEtec

  • Newbie
  • Posts: 2
  • Country: pt
Re: DSOX2000 and 3000 series - licence , have anyone tried to hack that scope ?
« Reply #2854 on: September 23, 2021, 05:51:45 pm »
hello!


I have a DSO-X-2002A oscilloscope with problably a NAND problem, but i am not sure, could you guys help me? It stays like in the picture below...

I have some USB to TTL boards, could i connect it to the points in the pcb of the oscilloscope and conect via usb port in my pc to check the boot problem or i am missing something?
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1682
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: DSOX2000 and 3000 series - licence , have anyone tried to hack that scope ?
« Reply #2855 on: September 23, 2021, 07:41:02 pm »
hello!


I have a DSO-X-2002A oscilloscope with problably a NAND problem, but i am not sure, could you guys help me? It stays like in the picture below...

I have some USB to TTL boards, could i connect it to the points in the pcb of the oscilloscope and conect via usb port in my pc to check the boot problem or i am missing something?
Get the 3.3V version of the USB to TTL adapter or board.  USB voltage still 5V, but RX and TX levels must be 3.3V
 

Offline YetAnotherTechie

  • Regular Contributor
  • *
  • Posts: 203
  • Country: pt
Re: DSOX2000 and 3000 series - licence , have anyone tried to hack that scope ?
« Reply #2856 on: September 23, 2021, 09:02:18 pm »
start here https://www.eevblog.com/forum/testgear/agilent-dsox3054a-not-booting-possible-nand-corruption-help!/msg3449794/#msg3449794
and go here too
https://www.eevblog.com/forum/testgear/dsox2000-and-3000-series-licence-have-anyone-tried-to-hack-that-scope/msg2136181/#msg2136181

Search "eevblog nand" on google and "keysight nand" here on the top right.
Your very first action should be make a full backup of the nand, before you start issuing commands that change the flash system.  It's a filesystem, and it's corrupted, every write is unpredictable, even reading is dangerous if the system does on the fly ECC writes. If you don't have a backup and discover that your factory calibration or identity files are corrupted or missing no one will be able to help you.
« Last Edit: September 23, 2021, 09:04:37 pm by YetAnotherTechie »
 

Offline CebroEtec

  • Newbie
  • Posts: 2
  • Country: pt
Re: DSOX2000 and 3000 series - licence , have anyone tried to hack that scope ?
« Reply #2857 on: September 23, 2021, 09:47:48 pm »
Thank for the advices!

So, I will connect my USB to TTL board using 3.3v for the oscilloscope pcb.

@YetAnotherTechie, thanks for the help. I am reading all the posts in this sub since a week ago, and i am learning a lot! But I do not remember anyone saying how can we backup the NAND, or am i missing something? What i understood was that by the serial connection we can read the system doing the boot up, and uploading new firware files, am i wrong?
 

Offline YetAnotherTechie

  • Regular Contributor
  • *
  • Posts: 203
  • Country: pt
Re: DSOX2000 and 3000 series - licence , have anyone tried to hack that scope ?
« Reply #2858 on: September 24, 2021, 01:43:44 am »
its in the code section of the first message of the first link i gave you......
also see
https://www.eevblog.com/forum/testgear/dsox2000-and-3000-series-licence-have-anyone-tried-to-hack-that-scope/msg1021864/?topicseen#msg1021864
stop uboot enter "help"
use commands bdinfo, coninfo, flinfo,fsinfo,iminfo,imls,printenv to get information.

use nand info
from there nand read to the offset of free ram mentioned in the posts, and transfer to the pc, using "saves"

Unless you've used putty before i recommend you practice using it somewhere else, or use another program, it's very easy to let muscle memory make a right click, and in putty that pastes everything on the clipboard to the command line followed by enter. It's a Murphy incarnated.
 
The following users thanked this post: CebroEtec

Offline dagolard

  • Contributor
  • Posts: 13
  • Country: ch
Re: DSOX2000 and 3000 series - licence , have anyone tried to hack that scope ?
« Reply #2859 on: September 25, 2021, 03:25:26 pm »
Nobody?  :'(
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1682
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: DSOX2000 and 3000 series - licence , have anyone tried to hack that scope ?
« Reply #2860 on: September 25, 2021, 03:42:03 pm »
Nobody?  :'(
Nobody?  There is plenty of information on this exact same thread on how to achieve what you are looking for. If by “easy way” you mean not even looking back posts, then you will not get any help here..,
 

Offline dagolard

  • Contributor
  • Posts: 13
  • Country: ch
Re: DSOX2000 and 3000 series - licence , have anyone tried to hack that scope ?
« Reply #2861 on: September 25, 2021, 05:53:25 pm »
These are 115 pages, and english isn´t my native language. That´s why a hint to the page would be helpful. But if you don´t want to help simply ignore my request.

By the way: even I helped others with a link, see page 114... 🙄
 
« Last Edit: September 25, 2021, 06:20:36 pm by dagolard »
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1682
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: DSOX2000 and 3000 series - licence , have anyone tried to hack that scope ?
« Reply #2862 on: September 25, 2021, 08:01:41 pm »
These are 115 pages, and english isn´t my native language. That´s why a hint to the page would be helpful. But if you don´t want to help simply ignore my request.

By the way: even I helped others with a link, see page 114... 🙄
https://www.eevblog.com/forum/testgear/dsox2000-and-3000-series-licence-have-anyone-tried-to-hack-that-scope/msg3562918/#msg3562918
 
The following users thanked this post: dagolard

Offline lastguy

  • Contributor
  • Posts: 18
  • Country: us
Re: DSOX2000 and 3000 series - licence , have anyone tried to hack that scope ?
« Reply #2863 on: September 29, 2021, 02:18:46 am »
These are 115 pages, and english isn´t my native language. That´s why a hint to the page would be helpful. But if you don´t want to help simply ignore my request.

By the way: even I helped others with a link, see page 114... 🙄
https://www.eevblog.com/forum/testgear/dsox2000-and-3000-series-licence-have-anyone-tried-to-hack-that-scope/msg3562918/#msg3562918
TK,
thanks I did see this while I'm still climbing the floor.
I tried to telnet using Eth card, holding down space while boot scope, yet whenever the remote session got activated on my laptop, the scope boot already done, so I see ">" then no cmd can be used. (1st msg is "Welcome to Keysight...")

Anybody can package installed folder of cab mgr and upload here? the company is not more thus no download - all US web just link to this co.
Another question is, what is the last version can boot from USB?

thx for any help
« Last Edit: September 29, 2021, 10:09:13 pm by lastguy »
 

Offline lastguy

  • Contributor
  • Posts: 18
  • Country: us
Re: DSOX2000 and 3000 series - licence , have anyone tried to hack that scope ?
« Reply #2864 on: September 29, 2021, 09:13:22 pm »
These are 115 pages, and english isn´t my native language. That´s why a hint to the page would be helpful. But if you don´t want to help simply ignore my request.
below is initial steps, then read the link TK given above for latest s/w.
https://www.eevblog.com/forum/testgear/dsox2000-and-3000-series-licence-have-anyone-tried-to-hack-that-scope/msg322242/#msg322242

do you have the cab mgr s/w? if yes then you can export the .cab (use 7zip for release file first) and modify the .lnk file by adding at the end:-l All -l BW20 -l SCPIPS
a safe way is to boot from USB, I've not able to try whether it is ok for latest version. what's your s/w version?

simplest way as you asked is on floor #301: https://www.eevblog.com/forum/testgear/dsox2000-and-3000-series-licence-have-anyone-tried-to-hack-that-scope/300/
« Last Edit: September 30, 2021, 01:09:13 am by lastguy »
 

Offline lastguy

  • Contributor
  • Posts: 18
  • Country: us
Re: DSOX2000 and 3000 series - licence , have anyone tried to hack that scope ?
« Reply #2865 on: September 30, 2021, 07:13:43 pm »
I read original 7.40 or PhillyFlyers packed, both .lnk shows: 56#"\Program Files\infiniiVision\infiniivisionLauncher.exe"
and now infiniiVisionLauncher.exe is in folder named [INSTALLDIR], which seems, during boot the [INSTALLDIR] content will be copied to \Program Files\infiniiVision\ before .lnk cmd be called.
Thus previous USB boot won't work, any work around? I'm not familiar with WINCE.

Does PhillyFlyers' pkg unlocked all features or need user to repack the pkg? what is the BW? which USB format tool shall be used? is Rufus (FreeDOS style boot) ok?
« Last Edit: October 01, 2021, 11:39:12 pm by lastguy »
 

Offline lastguy

  • Contributor
  • Posts: 18
  • Country: us
No body want to help me?
I got non-English version cab manager installation pkg, if someone sent me a link to download English one - just zip the installed folder, I'd be able to release a pkg to be installed on windows 10.
Original pkg cannot be installed on windows 10, and no pkg can be downloaded from US web, all are links to original company web which is non existed.
« Last Edit: October 01, 2021, 11:37:45 pm by lastguy »
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1682
  • Country: us
  • I am a Systems Analyst who plays with Electronics
In my case, I don't know how to help because I don't understand what you are trying to accomplish.  There is a hack already that enables all the options you like and I included the link for you to download the files.  It is as simple as downloading the installation file, then copy it to the USB stick and copy also the infiniivision.lnk file with the options you want to enable.
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1682
  • Country: us
  • I am a Systems Analyst who plays with Electronics
I read original 7.40 or PhillyFlyers packed, both .lnk shows: 56#"\Program Files\infiniiVision\infiniivisionLauncher.exe"
and now infiniiVisionLauncher.exe is in folder named [INSTALLDIR], which seems, during boot the [INSTALLDIR] content will be copied to \Program Files\infiniiVision\ before .lnk cmd be called.
Thus previous USB boot won't work, any work around? I'm not familiar with WINCE.

Does PhillyFlyers' pkg unlocked all features or need user to repack the pkg? what is the BW? which USB format tool shall be used? is Rufus (FreeDOS style boot) ok?
You don't need to boot from the USB.  Just copy the patched firmware and the desired infiniivision.lnk file (where you indicate which options you want to enable), power on the scope, when boot is finished, insert the USB drive, then go to utility -> file browser, select the patched firmware and voila, options enabled after scope reboots.
 

Offline 2lostkiwis

  • Newbie
  • Posts: 3
I have been following this thread for a long time. And have the latest firmware patched on my DSO-X 3034A. I got the 500MHz upgrade which I tested with fast rise time pulse generator from Leo Bodnar. Really appreciate eveyones work on getting this working. One thing that is not clear to me, is exactly what options I should have in the link file. I currently have:

Code: [Select]
50#infiniivisionLauncher.exe -l all -l BW50 -l SCPIPS
Can anyone give me the correct list of what I should have? Just in case I am missing anything...
 

Offline msuthar

  • Contributor
  • Posts: 13
  • Country: in
Hi,
You can try this :

32#infiniivisionLauncher.exe -l ALL

-l ALL   enables all "trial" licences but without time limit, that's why there are "*" following each license.
or
-l DIS    Distributor license (memMax,EMBD,AUTO,COMP,SGM,MASK,WAVEGEN,ASV,PLUS) 
 

Offline msuthar

  • Contributor
  • Posts: 13
  • Country: in
Add more if any item  is missing :

-l D2000AUTA   Automotive Software for 2000 X-Series      (Automotive Software Package CAN LIN  ,serial trigger,Mask limit testing )
-l D2000GENA   General purpose Software for 2000 X-Series           (Embeded Software Package I2C,SPI,UART-RS232/422/485 serial trigger Mask limit testing )
-l D2000BDLA   Software Bundle for 2000 X-Series              (Ultimate Bundle Software Package I2C,SPI,UART(RS232/422/485) CAN LIN serial trigger Mask limit testing )
-l D2000AUTB   Automotive Software for 2000 X-Series      (Automotive Software Package CAN LIN  ,serial trigger,Mask limit testing )
-l D2000GENB   General purpose Software for 2000 X-Series           (Embeded Software Package I2C,SPI,UART-RS232/422/485 serial trigger Mask limit testing )
-l D2000BDLB   Software Bundle for 2000 X-Series              (Ultimate Bundle Software Package I2C,SPI,UART(RS232/422/485) CAN LIN serial trigger Mask limit testing

-l All              All Licenses
-l rmAll           No Licenses
-l DIS      Distributor license
-l MSO      MSO
-l FPG      FPGA Probe ??
-l ALT      FPGA Altera ??
-l memNo           Acq Memory Dflt
-l MEMUP           Acq Memory Max
-l memMax   Acq Memory Max
-l EMBD      Embedded serial decode and trigger
-l AUTO      Automotive serial decode and trigger
-l AUDIO           Audio serial decode and trigger
-l AERO      1553 & 429 serial decodes
-l FLEX      Flex Ray serial decode
-l FRC      Flex Ray Compliance
-l FLEXC           Flex Ray Plus
-l PWR      Power application
-l COMP      UART/RS232 serial decode and trigger
-l SGM      Segmented Memory
-l SGMC      Circular Segmented Memory
-l MASK      Mask limit testing
-l TEL      Telecom Mask Test
-l BW50      500MHz Bandwidth
-l BW20      200MHz Bandwidth
-l BW10      100MHz Bandwidth
-l WAVEGEN   WaveGen license
-l ADVMATH   Advance Math
-l VID      Enhanced Video Triggering
-l ASV      Agilent  Spectrum Visuliser  license for OSV -Oscilloscope Spectrum Visualizer PC Software
-l TOM      Tomotherapy
-l FWD      F8AEAE82 ??
-l PLUS      Enhancements - math, memory, update rate For DSOX2000 PLUS
-l CABLE           Cable Calibration, Ratio and Phase measure in Analyse Menu
-l SCPIPS           Infiniium Mode SCPI Commands supports
-l RML      Remote Log
-l DVM      Digital Voltmeter
-l EDK      Education kit license
--perf               adds more items  in measure display
« Last Edit: October 06, 2021, 04:15:16 pm by msuthar »
 
The following users thanked this post: dunkemhigh

Offline MarkL

  • Supporter
  • ****
  • Posts: 1799
  • Country: us
...
-l FWD      F8AEAE82 ??
...
This license allows the scope to load earlier firmware versions.  Tech support once generated this license for me which allowed me to back out a firmware upgrade that introduced a nasty bug.  "FWD" probably means "firmware downgrade".

Maybe they were trying to be non-obvious by calling it F8AEAE82.

FYI, for your list.
 
The following users thanked this post: msuthar

Offline lastguy

  • Contributor
  • Posts: 18
  • Country: us
I don't want to over write scope firmware in NVM, thus I want USB boot.
I have Eth card but no RS232, I can telnet (windows telnet or teraterm) get welcome msg and >>, but cannot run any cmd - no effect, cannot show any fold or file.
« Last Edit: October 06, 2021, 08:40:39 pm by lastguy »
 

Offline Bud

  • Super Contributor
  • ***
  • Posts: 4953
  • Country: ca
Seems you are telneting to port 5024 which is SCPI interface ( try entering *IDN? ). You should telnet to port 23.
Facebook-free life and Rigol-free shack.
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf