Author Topic: DSOX2000 and 3000 series - licence , have anyone tried to hack that scope ?  (Read 1106751 times)

0 Members and 3 Guests are viewing this topic.

Offline maurit

  • Contributor
  • Posts: 21
  • Country: it
Chinese TTL <> RS232  (3,3 V.) with MAX3232.

1299409-0
 

Offline maurit

  • Contributor
  • Posts: 21
  • Country: it
 :-+   :-+   :-+
Problem solved !!!!!!!
It was the underperforming TTL <> RS232 Chinese interface.
I shortened the rs232 cable to the PC and the transfer started immediately.

Now I will update the Firmware and Options.

Thanks to all.
 

Offline maurit

  • Contributor
  • Posts: 21
  • Country: it
 
The following users thanked this post: 2N3055

Online tv84

  • Super Contributor
  • ***
  • Posts: 3212
  • Country: pt
 

Offline maurit

  • Contributor
  • Posts: 21
  • Country: it
Dear tv84,
I didn't understand the statement: Thread closed
Thanks for any clarification.
 

Offline analogRF

  • Frequent Contributor
  • **
  • Posts: 955
  • Country: ca
Dear tv84,
I didn't understand the statement: Thread closed
Thanks for any clarification.

when the link was not removed yet, I think it was clear why  ;) :-DD
 

Offline lastguy

  • Contributor
  • Posts: 28
  • Country: us
when the link was not removed yet, I think it was clear why  ;) :-DD
illogical
 

Offline Howardlong

  • Super Contributor
  • ***
  • Posts: 5315
  • Country: gb
(Attachment Link) (Attachment Link)
Each 3000T calculates a unique password(most of the time anyway).
thx then how to get to the status where telnet asks for ac name and passwd? I got this:
C:\>telnet 10.76.171.133 23
Connecting To 10.76.171.133...Could not open connection to the host, on port 23: Connect failed
C:\>


With port 23, I didn’t telnet DSOX3014T either.
So I made a file to let 3000T jump to WinCE desktop.
(Attachment Link)

Just before lockdown, I travelled to Hong Kong on Emirates, and the in flight entertainment remote crashed.

Unfortunately I didn't have a USB keyboard or serial adapter with me, or I'd have unlocked some additional options.



« Last Edit: October 21, 2021, 08:58:20 am by Howardlong »
 
The following users thanked this post: PA0PBZ

Online tv84

  • Super Contributor
  • ***
  • Posts: 3212
  • Country: pt
Unfortunately I didn't have a USB keyboard or serial adapter with me, or I'd have unlocked some additional options.

:) Nonetheless, it was good that it wasn't linked to the flight management system.
 
The following users thanked this post: Howardlong

Offline TheSteve

  • Supporter
  • ****
  • Posts: 3743
  • Country: ca
  • Living the Dream
Or maybe it is connected to the flight system - you just never know :)

For those wondering the 3000t series appears to enable telnet and then disable it a few seconds later. So the only way to telnet in is to connect at just the right time and then kill the infiniivision task so it doesn't kill the session. Generally you also need to calculate a custom password for each scope. Normally a script would be used to login and kill the task. Details are many pages back in this thread.

And lastly if anyone is looking for an MSO cable these two are a crazy good deal and won't last long(not mine, no affiliation with the seller):

https://www.ebay.com/itm/363589547314
VE7FM
 
The following users thanked this post: Howardlong, Hexley

Offline wp_wp

  • Regular Contributor
  • *
  • Posts: 59
  • Country: cn
I also write a file to let 4000A scope jump to WinCE desktop.

« Last Edit: October 23, 2021, 01:50:43 pm by wp_wp »
 

Offline TheSteve

  • Supporter
  • ****
  • Posts: 3743
  • Country: ca
  • Living the Dream
I also write a file to let 4000A scope jump to WinCE desktop.

Very nice, will you be posting the files?
VE7FM
 

Offline maurit

  • Contributor
  • Posts: 21
  • Country: it
Good morning,
if you are interested I have some DSOX-Lan cards left with 3D printed frames.
As in the pictures.
I sell for 40 Euros + shipping.
I ship from Italy.
 

Offline lastguy

  • Contributor
  • Posts: 28
  • Country: us
I also write a file to let 4000A scope jump to WinCE desktop.
WP_WP: would you mind to share these file?
anybody can confirm a bootable currently (AMAZON/EBAY) available USB stick?
 

Offline lastguy

  • Contributor
  • Posts: 28
  • Country: us
I also write a file to let 4000A scope jump to WinCE desktop.

Very nice, will you be posting the files?
I found a paper with downloadable file to do similar things: https://ripitapart.com/2018/10/15/gaining-access-to-the-windows-ce-desktop-and-doom-on-the-keysight-dsox1102g-oscilloscope/
or just download this and follow readme: https://www.dropbox.com/s/1xq7g7he942ynr5/ScopeLiberator-Release-2.0.zip?dl=0
Tried on 3000T, once Run lighted typed two times [Wkey] R \usb\a.bat, 2nd type is near by Keysight read logo, get to wince but no mouse icon.
« Last Edit: October 27, 2021, 11:18:27 pm by lastguy »
 

Offline TheSteve

  • Supporter
  • ****
  • Posts: 3743
  • Country: ca
  • Living the Dream
Just have to get the timing perfect.  >:D >:D >:D

Logging in via telnet is probably easier though.
VE7FM
 

Online Bud

  • Super Contributor
  • ***
  • Posts: 6877
  • Country: ca
Facebook-free life and Rigol-free shack.
 

Offline HardDrive

  • Newbie
  • Posts: 6
  • Country: my
Does anyone by any chance have a copy of this file lying around? (the original link is no longer working)
Quote
DSOX 3000T Series:  FW:  7.31.2020012842_patched
md5: <63DDE0129A9516C81DCF380F228BB08A>

After updating to the latest 7.40.2021031200, I can no longer access the Web interface without the scope crashing.
This used to work with the older 7.31 FW.

My scope is an MSOX3104T with a "DSOXLAN" installed.
Normally, I would get a "LAN VGA option module fault" even with the older FW when it boots, but this has not caused it to crash.
However, with the newer 7.40 and 7.35 FW, as long as there is an attempt to load the web interface, the scope would crash immediately.

Wondering whether anyone else has encountered this issue? Thanks!
« Last Edit: October 30, 2021, 05:55:56 am by HardDrive »
 

Offline pepperoni7

  • Contributor
  • Posts: 13
  • Country: de
...
My scope is an MSOX3104T with a "DSOXLAN" installed.
Normally, I would get a "LAN VGA option module fault" even with the older FW when it boots, but this has not caused it to crash.
However, with the newer 7.40 and 7.35 FW, as long as there is an attempt to load the web interface, the scope would crash immediately.

Wondering whether anyone else has encountered this issue? Thanks!

My DSOXLAN board has a jumper to short pin 78 and 80 (I guess) to "enable" the LAN module.
But then the scope assumes an orginal LAN/VGA board installed. But yours is missing the VGA option, therefore the error message!
The error is not harmful AFAIK but annoying...
If NOT shorting pin 78 to 80 the module seems not to be recognized by the scope (it's not visible in the utility menue), but it still gets an IP adress assigned from DHCP and works perfectly for me, even with FW7.35.
Of course you once must get to know this IP adress and make sure it doesnt get changed by DHCP.
« Last Edit: October 30, 2021, 08:46:39 am by pepperoni7 »
 
The following users thanked this post: HardDrive

Offline HardDrive

  • Newbie
  • Posts: 6
  • Country: my
Thanks, pepperoni7 & tv84,

Unfortunately, reverting back to 7.31 did not resolve the issue.

Poking around in the telnet console, I discovered the crash address 0x4027236C belongs to a module called 'nspm.dll' (related to DNS/WINS namespace provider?)
Inspecting the DLL, it seems to crash after reading the registry 'Ident\Name', hinting something to do with the system name (not exactly sure what is really doing, it was a wild guess).
So I changed the system name from 'msox3104t' to 'mso' and the Web Interface now works (no idea why that worked but it did).

In hindsight, I recently configured DHCP to issue that system name and also updated the FW 7.40 at the same time but did not correlate the new name to the issue.

Everything works now even on the latest 7.40 FW :phew:

Thanks again for the help!  :-+
 

Online 2N3055

  • Super Contributor
  • ***
  • Posts: 6447
  • Country: hr
Does anyone by any chance have a copy of this file lying around? (the original link is no longer working)
Quote
DSOX 3000T Series:  FW:  7.31.2020012842_patched
md5: <63DDE0129A9516C81DCF380F228BB08A>

After updating to the latest 7.40.2021031200, I can no longer access the Web interface without the scope crashing.
This used to work with the older 7.31 FW.

My scope is an MSOX3104T with a "DSOXLAN" installed.
Normally, I would get a "LAN VGA option module fault" even with the older FW when it boots, but this has not caused it to crash.
However, with the newer 7.40 and 7.35 FW, as long as there is an attempt to load the web interface, the scope would crash immediately.

Wondering whether anyone else has encountered this issue? Thanks!

Try scope with static address.
Disconnect scope from the router and try connecting to a PC with crossover cable or just switch with static addressing...
Also try to disable any IPV6 on router.

There is a IPv6 related bug that crashes the scope like that and is connected to router implementation of IPv6. It was happening with Speedport Plus internet router during DHCP 1pv$ and 6 address handout. It didn't matter if you disabled IPv6 on scope and router...
It didn't happen with static address and different router..

 
The following users thanked this post: HardDrive

Offline albertr

  • Regular Contributor
  • *
  • Posts: 56
Re: DSOX2000 and 3000 series - licence , have anyone tried to hack that scope ?
« Reply #2871 on: November 01, 2021, 02:17:32 pm »
A quick question for the experts - what is the difference between MEMUP and memMax options (on a 3000T series if it makes a difference)?
Thanks!
-albertr
 

Offline Venturi962

  • Regular Contributor
  • *
  • Posts: 123
  • Country: us
 

Offline albertr

  • Regular Contributor
  • *
  • Posts: 56
Re: DSOX2000 and 3000 series - licence , have anyone tried to hack that scope ?
« Reply #2873 on: November 01, 2021, 05:04:33 pm »
Also, did anyone already try the DSOX3U2H option that was mentioned in ver. 7.40 F/W pictured below?

-albertr

 

Offline Howardlong

  • Super Contributor
  • ***
  • Posts: 5315
  • Country: gb
Re: DSOX2000 and 3000 series - licence , have anyone tried to hack that scope ?
« Reply #2874 on: November 02, 2021, 11:47:08 pm »
USB high speed decode and trigger doesn't work on 3000T. See up thread starting at post 2786 on page 112. Turns out there was a marketing/technical miscommunication.

LS and FS works.

Edit: even if HS did work, you'd need a 1GHz+ bandwidth scope. It does work on the 4000A and 6000X but they have hardware to support HS that the 3000T doesn't.
« Last Edit: November 03, 2021, 12:02:37 am by Howardlong »
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf