Author Topic: DSOX2000 and 3000 series - licence , have anyone tried to hack that scope ?  (Read 1106718 times)

Azusa and 3 Guests are viewing this topic.

Offline TK

  • Super Contributor
  • ***
  • Posts: 1722
  • Country: us
  • I am a Systems Analyst who plays with Electronics
My network cable is direct connection network cable, not cross network cable. I don't have cross network cable, so I can't test it

Then you should connect via router/switch, just in case.
I connected the oscilloscope through the router
When I use Ping or Telnet, UART receives a prompt: not UDP
What is the problem? Do I have any way to repair this oscilloscope?
My guess is that it is trying to boot from a network server to download and flash a new firmware image
 

Offline zhangmi2021

  • Newbie
  • Posts: 5
  • Country: cn
My network cable is direct connection network cable, not cross network cable. I don't have cross network cable, so I can't test it

Then you should connect via router/switch, just in case.
I connected the oscilloscope through the router
When I use Ping or Telnet, UART receives a prompt: not UDP
What is the problem? Do I have any way to repair this oscilloscope?
My guess is that it is trying to boot from a network server to download and flash a new firmware image
yes ,I have succeeded. Download the firmware from the network, start it, and then fix the ink
thanks every one
 

Offline Jean-Michel

  • Newbie
  • Posts: 4
  • Country: be
Hello,
Being new to the site, please be patient with me :-)

I have a DSOX4024A and I managed to unlock the options according to your messages, except the bandwidth which remains at 200 mhZ, even with the BW50 option.

Is it possible to unlock the BW apr soft or must it be done by Hard?

Thank you for your return

Jean-michel
 

Offline analogRF

  • Frequent Contributor
  • **
  • Posts: 955
  • Country: ca
Hello,
Being new to the site, please be patient with me :-)

I have a DSOX4024A and I managed to unlock the options according to your messages, except the bandwidth which remains at 200 mhZ, even with the BW50 option.

Is it possible to unlock the BW apr soft or must it be done by Hard?

Thank you for your return

Jean-michel

200MHz cannot be upgraded to higher BW by software alone. Needs circuit modifications on all 4 front ends
100MHz->200MHz software only
350MHz->500MHz software only
 

Offline Jean-Michel

  • Newbie
  • Posts: 4
  • Country: be
Many thanks

It’s difficult to modify ?

Jm
 

Offline analogRF

  • Frequent Contributor
  • **
  • Posts: 955
  • Country: ca
Many thanks

It’s difficult to modify ?

Jm

yes it is in my view. I have never done it but TheSteve has implemented and posted full details on the forum . I dont have the link at hand.
I think it was for a 3000X but it should be the same for 4000X front end. Others may correct me.
 

Offline Mortys

  • Contributor
  • Posts: 11
  • Country: es
Ok,

Here are the latest patched firmwares, for the 1000X, 2000X, 3000A, 3000T, 4000X......



These firmwares have the usual patches for the license check and the 'unreleased/unfinalized software' things


*** Note:  ***

I have made these installs even EASIER, after the upgrade completes the install process will also make a backup of the oem lnk file that it installs during the upgrade, and then attempt to copy 'infiniivision.lnk' from the same USB stick you are doing the upgrade with...

so in otherwords, have your 'infiniivision.lnk' file READY, and on the root of your USB drive along with the patched firmware upgrade!
(this replaces having to telnet into your scope after the upgrade and having to put the .lnk file back on)

The install script at the end does these two actions:

copy \Secure\Startup\infiniivision.lnk infiniivision.lnk.original  (backs up oem file being replaced)
copy \usb\infiniivision.lnk \Secure\Startup\infiniivision.lnk     (copies .lnk file from your USB to the startup folder)

So have these TWO files on your USB:

1) infiniivision.lnk
2) upgrade_file.ksx




*** NOTE:  FOR THE 1000X....  ************************************
      This is 'BUD's' patched firmware!!  All credit goes to him and the 1000x hacking folks!  there is NO .LNK file required for this patch, just install the FW!  I repeat, there is NO .lnk file required for the
      1000x hacking

DSOX 1000X Series:  FW:  01.20.2019061038_patched  https://mega.nz/file/nrpW3T4Z#gLnn__QchpYL5FuQXLawyso2_ReaXgn-jF4MzcRZSAA
md5: <8D128F5691BCB7D178CFB8E48F3784B9>

*************************************************************

DSOX 2000X Series:  FW:  02.65.20210307001_patched  https://mega.nz/file/mzgGjBpC#yLNWn8cGjJlsLeH_fVZ3tYyPZILYJ3EtGK8F84oEFw8
md5: <AF47DDB93F9CC88911ADC65F4E55F97D>

DSOX 3000A Series:  FW:  02.65.20210307001_patched  https://mega.nz/file/j3hEzbCa#4sYGoVawZt62XnoC3ZZvUAEyf575Q6o_-iYIr-whH4w
md5: <B5EBDEEA00BCBF4DCE77D173F212B8F6>

DSOX 3000T Series:  FW:  7.40.2021031200_patched  https://mega.nz/file/rz5UXbrL#FXRPSRjLlFN16amBWt_Si74-nS8OjW5xWZPLqmBeynU
md5: <C1AA8839085890FC058D27C501AF4F08>

DSOX 4000X Series:  FW:  7.40.2021031202_patched  https://mega.nz/file/nrxwAb6R#gNp4CCdwl_oyhAzxuJSI9OopUPjbmnu7fn8E8ejeGDg
md5: <7C30FD851FB6A4B461130D61FE9C0E0C>

Please let me know if there are any issues with any of these!

good morning I have a dso 2002A I have read all the messages and I still do not know how to do it right I am afraid of blocking my oscilloscope
  I don't know where to get the files from
  1) infiniivision.lnk
2) upgrade_file.ksx
Could you help me, I am very clumsy with this programming thing, I am already an elderly person
thanks for your understanding and a greeting
 

Offline tian1043

  • Newbie
  • Posts: 1
  • Country: cn
I tried the corresponding patch file on my DSOX3012T machine, it can be upgraded normally, but the option has not changed, I am sure the accuracy of the lnk file, and then I try to log in to the device via telnet, and find that the password is wrong, which prevents me from logging in to the device. It is estimated that this is why the upgrade is not successful, whether the machine has changed the telnet password and all subsequent file operations have not been completed

Ok,

Here are the latest patched firmwares, for the 1000X, 2000X, 3000A, 3000T, 4000X......



These firmwares have the usual patches for the license check and the 'unreleased/unfinalized software' things


*** Note:  ***

I have made these installs even EASIER, after the upgrade completes the install process will also make a backup of the oem lnk file that it installs during the upgrade, and then attempt to copy 'infiniivision.lnk' from the same USB stick you are doing the upgrade with...

so in otherwords, have your 'infiniivision.lnk' file READY, and on the root of your USB drive along with the patched firmware upgrade!
(this replaces having to telnet into your scope after the upgrade and having to put the .lnk file back on)

The install script at the end does these two actions:

copy \Secure\Startup\infiniivision.lnk infiniivision.lnk.original  (backs up oem file being replaced)
copy \usb\infiniivision.lnk \Secure\Startup\infiniivision.lnk     (copies .lnk file from your USB to the startup folder)

So have these TWO files on your USB:

1) infiniivision.lnk
2) upgrade_file.ksx




*** NOTE:  FOR THE 1000X....  ************************************
      This is 'BUD's' patched firmware!!  All credit goes to him and the 1000x hacking folks!  there is NO .LNK file required for this patch, just install the FW!  I repeat, there is NO .lnk file required for the
      1000x hacking

DSOX 1000X Series:  FW:  01.20.2019061038_patched  https://mega.nz/file/nrpW3T4Z#gLnn__QchpYL5FuQXLawyso2_ReaXgn-jF4MzcRZSAA
md5: <8D128F5691BCB7D178CFB8E48F3784B9>

*************************************************************

DSOX 2000X Series:  FW:  02.65.20210307001_patched  https://mega.nz/file/mzgGjBpC#yLNWn8cGjJlsLeH_fVZ3tYyPZILYJ3EtGK8F84oEFw8
md5: <AF47DDB93F9CC88911ADC65F4E55F97D>

DSOX 3000A Series:  FW:  02.65.20210307001_patched  https://mega.nz/file/j3hEzbCa#4sYGoVawZt62XnoC3ZZvUAEyf575Q6o_-iYIr-whH4w
md5: <B5EBDEEA00BCBF4DCE77D173F212B8F6>

DSOX 3000T Series:  FW:  7.40.2021031200_patched  https://mega.nz/file/rz5UXbrL#FXRPSRjLlFN16amBWt_Si74-nS8OjW5xWZPLqmBeynU
md5: <C1AA8839085890FC058D27C501AF4F08>

DSOX 4000X Series:  FW:  7.40.2021031202_patched  https://mega.nz/file/nrxwAb6R#gNp4CCdwl_oyhAzxuJSI9OopUPjbmnu7fn8E8ejeGDg
md5: <7C30FD851FB6A4B461130D61FE9C0E0C>

Please let me know if there are any issues with any of these!
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1722
  • Country: us
  • I am a Systems Analyst who plays with Electronics
I tried the corresponding patch file on my DSOX3012T machine, it can be upgraded normally, but the option has not changed, I am sure the accuracy of the lnk file, and then I try to log in to the device via telnet, and find that the password is wrong, which prevents me from logging in to the device. It is estimated that this is why the upgrade is not successful, whether the machine has changed the telnet password and all subsequent file operations have not been completed

Ok,

Here are the latest patched firmwares, for the 1000X, 2000X, 3000A, 3000T, 4000X......



These firmwares have the usual patches for the license check and the 'unreleased/unfinalized software' things


*** Note:  ***

I have made these installs even EASIER, after the upgrade completes the install process will also make a backup of the oem lnk file that it installs during the upgrade, and then attempt to copy 'infiniivision.lnk' from the same USB stick you are doing the upgrade with...

so in otherwords, have your 'infiniivision.lnk' file READY, and on the root of your USB drive along with the patched firmware upgrade!
(this replaces having to telnet into your scope after the upgrade and having to put the .lnk file back on)

The install script at the end does these two actions:

copy \Secure\Startup\infiniivision.lnk infiniivision.lnk.original  (backs up oem file being replaced)
copy \usb\infiniivision.lnk \Secure\Startup\infiniivision.lnk     (copies .lnk file from your USB to the startup folder)

So have these TWO files on your USB:

1) infiniivision.lnk
2) upgrade_file.ksx




*** NOTE:  FOR THE 1000X....  ************************************
      This is 'BUD's' patched firmware!!  All credit goes to him and the 1000x hacking folks!  there is NO .LNK file required for this patch, just install the FW!  I repeat, there is NO .lnk file required for the
      1000x hacking

DSOX 1000X Series:  FW:  01.20.2019061038_patched  https://mega.nz/file/nrpW3T4Z#gLnn__QchpYL5FuQXLawyso2_ReaXgn-jF4MzcRZSAA
md5: <8D128F5691BCB7D178CFB8E48F3784B9>

*************************************************************

DSOX 2000X Series:  FW:  02.65.20210307001_patched  https://mega.nz/file/mzgGjBpC#yLNWn8cGjJlsLeH_fVZ3tYyPZILYJ3EtGK8F84oEFw8
md5: <AF47DDB93F9CC88911ADC65F4E55F97D>

DSOX 3000A Series:  FW:  02.65.20210307001_patched  https://mega.nz/file/j3hEzbCa#4sYGoVawZt62XnoC3ZZvUAEyf575Q6o_-iYIr-whH4w
md5: <B5EBDEEA00BCBF4DCE77D173F212B8F6>

DSOX 3000T Series:  FW:  7.40.2021031200_patched  https://mega.nz/file/rz5UXbrL#FXRPSRjLlFN16amBWt_Si74-nS8OjW5xWZPLqmBeynU
md5: <C1AA8839085890FC058D27C501AF4F08>

DSOX 4000X Series:  FW:  7.40.2021031202_patched  https://mega.nz/file/nrxwAb6R#gNp4CCdwl_oyhAzxuJSI9OopUPjbmnu7fn8E8ejeGDg
md5: <7C30FD851FB6A4B461130D61FE9C0E0C>

Please let me know if there are any issues with any of these!
Read post https://www.eevblog.com/forum/testgear/dsox2000-and-3000-series-licence-have-anyone-tried-to-hack-that-scope/msg3563584/#msg3563584
 

Offline oaba

  • Contributor
  • Posts: 35
  • Country: ie
Hi.
I have a corrupted firmware on a DSOX2024A.
It does not boot. I would need the 2.35 firmware to fix it.
I can not find it to dowload. If you have a link please?
 

Offline oaba

  • Contributor
  • Posts: 35
  • Country: ie
Sorry but I was typing wrong. Was reading too much posts. :)
I need the 2.35 firmware for the DSO4024A. if you have it please?
« Last Edit: June 18, 2021, 10:29:58 pm by oaba »
 

Online TheSteve

  • Supporter
  • ****
  • Posts: 3743
  • Country: ca
  • Living the Dream
Sorry but I was typing wrong. Was reading too much posts. :)
I need the 2.35 firmware for the DSO4024A. if you have it please?

I'd be surprised if 2.35 existed for a 4000 series scope, and I assume you mean a DSOX4024A. I've never seen anything lower then 3.x for the 4000 series.
VE7FM
 

Offline wp_wp

  • Regular Contributor
  • *
  • Posts: 59
  • Country: cn
Sorry but I was typing wrong. Was reading too much posts. :)
I need the 2.35 firmware for the DSO4024A. if you have it please?
for the 4000A X-series scopes,the first firmware is 4000XSeries.03.00.201209XXXX.agx
 

Offline oaba

  • Contributor
  • Posts: 35
  • Country: ie
Hi Wp_Wp
My issue is the flash got corrupted. I was reading a post how to fix it trhough serial connection.
And it said the 2.35 firmware was the last one that accepted the boot from USB.

Is there other method to fix my firmwre?
Or the 3.0 is the way to go'?
 

Offline wp_wp

  • Regular Contributor
  • *
  • Posts: 59
  • Country: cn
For 4000X series scope,if it has NAND corruption problem,you can have two method to repair it:
1.from v3.12 or older firmwares to make a set files to recover it
2.from newer(maybe v7.31 or later)firmware,you can get a special kernel file to recover it
 

Offline wp_wp

  • Regular Contributor
  • *
  • Posts: 59
  • Country: cn
Hi Wp_Wp
My issue is the flash got corrupted. I was reading a post how to fix it trhough serial connection.
And it said the 2.35 firmware was the last one that accepted the boot from USB.

Is there other method to fix my firmwre?
Or the 3.0 is the way to go'?
V2.35 is for 2000X、3000X,not for 3000X-T and 4000X.
For 4000X,as far as I know,V3.12 firmware is the last one that accepted the boot from USB.
 

Offline oaba

  • Contributor
  • Posts: 35
  • Country: ie
Do you have any of those file or the description of the method?
Pllease?
I do not know what the firmware was on it originally. I did not see that information in the serial com.
« Last Edit: June 19, 2021, 12:39:17 pm by oaba »
 

Offline oaba

  • Contributor
  • Posts: 35
  • Country: ie
Debug serial initialized ........OK

Microsoft Windows CE Bootloader Common Library Version 1.4 Built Aug 12 2011 11:03:19
Microsoft Windows CE 6.0 Ethernet Bootloader for the Agilent P500 board
Adaptation performed by Agilent Technologies (c) 2008

image2 value is out of range 0 so it will be ignored.
  It must be a hexadecimal integer between 0xd00000000 and 0xd7ffffff or between 0x800000000 and 0x87ffffff.

System ready!
Preparing for download...
 Loading image 1 from memory at 0xD0400000
O
BL_IMAGE_TYPE_BIN

X
XXXXXOOOOXXOOOOOOOOXOXXOOOOOOOIncorrect Data 1 EccResult: 3c3330 EccError: c0c03c EccRead: fcf30c
 EBOOT_ReadFlash failed offset 4ad764
 EBOOT_ReadFlash failed location d04b4000
ODeCompressFlash: CeCompressDecode() failed
 CeDecompressFlashBlock failed
****** Data record 11 corrupted, ABORT!!! ******

Completed file(s):
-------------------------------------------------------------------------------
  • : Address=0x80361000  Length=0x4E09D90  Name="" Target=RAM

 Loading image 1 failed, trying next one
 All images failed

Press r to reset

 

Offline wp_wp

  • Regular Contributor
  • *
  • Posts: 59
  • Country: cn
Do you have any of those file or the description of the method?
Pllease?
I do not know what the firmware was on it originally. I did not see that information in the serial com.
what the firmware was on it is not important.
the important thing is when you press space in keyboard,and turn on the scope,can you see P500> prompt,or other information,for example, d)download from ethernet now,or d)download from platform builder now.
the information will determine what method you should use.
 
The following users thanked this post: oaba

Offline Bud

  • Super Contributor
  • ***
  • Posts: 6877
  • Country: ca
Search this thread for "Ymodem" to learn how upload firmware via serial.
Facebook-free life and Rigol-free shack.
 
The following users thanked this post: oaba

Offline oaba

  • Contributor
  • Posts: 35
  • Country: ie
I presedd space. That stopped the boot.
And i have got the prompt. But I do not see any options.

Press space to stop autoboot:  0
p500>
 

Offline oaba

  • Contributor
  • Posts: 35
  • Country: ie
I went to help

There is an option to load the bin from serial or ymodem mode.

I will read a bit so as suggested. ymodem I guess way faster than serial.
How can I get to find the bin file?
 

Offline oaba

  • Contributor
  • Posts: 35
  • Country: ie
I have read the firmware version I transfer over to the unit has to be similar to the (corrupted) one on the NAND, or the boot may not get far.
????? How will I know wat was on it?
I was reading about how to load binary file over serial line (ymodem mode).
But I would need the firmware file. The one can boot from USB.
« Last Edit: June 19, 2021, 03:17:51 pm by oaba »
 

Offline Bud

  • Super Contributor
  • ***
  • Posts: 6877
  • Country: ca
I have read the firmware version I transfer over to the unit has to be similar to the (corrupted) one on the NAND, or the boot may not get far.
????? How will I know wat was on it?

Your serial log says:
Quote
: Address=0x80361000  Length=0x4E09D90  Name="" Target=RAM
You will need to find the firmware version which bin file matches the Length.
Facebook-free life and Rigol-free shack.
 
The following users thanked this post: oaba

Offline Bud

  • Super Contributor
  • ***
  • Posts: 6877
  • Country: ca
I went to help

There is an option to load the bin from serial or ymodem mode.

I will read a bit so as suggested. ymodem I guess way faster than serial.
How can I get to find the bin file?

Serial is a type of connection. Ymodem  is  a protocol. Saying Ymodem is faster than serial does not make sense. It is like saying TCP is faster than Ethernet.
Facebook-free life and Rigol-free shack.
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf