Author Topic: DSOX2000 and 3000 series - licence , have anyone tried to hack that scope ?  (Read 1106824 times)

0 Members and 3 Guests are viewing this topic.

Online TK

  • Super Contributor
  • ***
  • Posts: 1722
  • Country: us
  • I am a Systems Analyst who plays with Electronics
I did it, I did it !!! :phew:
Many thanks to everyone, especially PhillyFlyers and his team! :-+
The most recent firmware they patched works as it should! 8)
which .lnk configuration did you end up using?  You can add BW35 to enable 350MHz option

EDIT: 350MHz option requires the HW mod in addition to the SW hack
« Last Edit: August 10, 2021, 02:57:03 pm by TK »
 

Online TheSteve

  • Supporter
  • ****
  • Posts: 3743
  • Country: ca
  • Living the Dream
I did it, I did it !!! :phew:
Many thanks to everyone, especially PhillyFlyers and his team! :-+
The most recent firmware they patched works as it should! 8)
which .lnk configuration did you end up using?  You can add BW35 to enable 350MHz option

He was adding it before but it will never work as his scope is limited to 200 MHz without a hardware mod.
VE7FM
 

Online TK

  • Super Contributor
  • ***
  • Posts: 1722
  • Country: us
  • I am a Systems Analyst who plays with Electronics
I did it, I did it !!! :phew:
Many thanks to everyone, especially PhillyFlyers and his team! :-+
The most recent firmware they patched works as it should! 8)
which .lnk configuration did you end up using?  You can add BW35 to enable 350MHz option

He was adding it before but it will never work as his scope is limited to 200 MHz without a hardware mod.
Yes, you are right...  350MHz needs the hw mod
 

Offline Volchenok82

  • Newbie
  • Posts: 7
  • Country: ru
  • Cats are everywhere ...
I used this set of parameters:

90#infiniiVisionLauncher.exe -l D3000BDLB -l BW35 -l SCPIPS -l SEC -l MSO -l MEMUP -l WAVEGEN

But as you correctly noted, it did not work, because there is a hardware limitation in the bandwidth of this model!  If someone wrote here that he managed to programmatically increase the bandwidth from 200 to 350 or even up to 500 MHz - do not believe ...
 :popcorn:

« Last Edit: August 10, 2021, 06:00:18 pm by Volchenok82 »
 

Offline wp_wp

  • Regular Contributor
  • *
  • Posts: 59
  • Country: cn
With HW mod,you can hack MSOX3024T to 500MHz。
 

Online TheSteve

  • Supporter
  • ****
  • Posts: 3743
  • Country: ca
  • Living the Dream
With HW mod,you can hack MSOX3024T to 500MHz。

Or 1 GHz, or even 1.5 GHz :)

https://www.eevblog.com/forum/testgear/keysight-3000t-scope-1-ghz-hardware-upgrade-mod/

500 MHz is much less work though.
VE7FM
 
The following users thanked this post: wp_wp

Offline Volchenok82

  • Newbie
  • Posts: 7
  • Country: ru
  • Cats are everywhere ...
With HW mod,you can hack MSOX3024T to 500MHz。

Thanks for the offer!   :P

I saw post  #1013 how this can be done, I will think about it in the future - I am not yet mature enough to open it and re-solder something there!   :-/O
 

Offline Volchenok82

  • Newbie
  • Posts: 7
  • Country: ru
  • Cats are everywhere ...
« Last Edit: August 12, 2021, 06:27:56 pm by Volchenok82 »
 

Offline lzqing

  • Contributor
  • Posts: 12
  • Country: cn
I am try to write serial number to my DSOX2022A, when i fix it from corrupted NAND flash ,but now the serial number is Unset status;
I plan to try leaked SecureDataTool , get error below , anybody has old files backup and could you share me 'Agilent.Cdf.Core.Kernel.dll'. I think FW2.0 or 1.10 include this file.


\usb> \usb\AgilentConfidential_SecureDataTool_Client.exe Get-SerialNumber -ResultFile "\usb\GetSerialNumberResult.txt" -ErrorFile "\usb\GetSerialNumberErrorFile.txt"
Caption: AgilentConfidential_SecureDataTool_Client.exe
Title  : Error
Text   : An unexpected error has occurred in AgilentConfidential_SecureDataTool_Client.exe.
Select Quit and then restart this program, or select Details for more information.

Can't find PInvoke DLL 'Agilent.Cdf.Core.Kernel.dll'.

Details: AgilentConfidential_SecureDataTool_Client.exe
MissingMethodException
Can't find PInvoke DLL 'Agilent.Cdf.Core.Kernel.dll'.

   at Agilent.Cdf.Api.Security.P500SecureStream.get_Length()
   at eh.aa(SecureStreamId A_0, ci A_1)
   at eh.p()
   at Agilent.Cdf.Api.Security.SecureStorage.ReadCommonArea()
   at Agilent.Cdf.Tools.SecureDataTool.GetSerialNumberCommand.BeginProcessing()
   at b2.a.p(b2 A_0)
   at b2.a.n(IEnumerable`1 A_0, b A_1)
   at b2.b.e(a A_0, IEnumerable`1 A_1)
   at b2.h(IEnumerable`1 A_0)
   at g2.a(String[] A_0)
 

Offline lzqing

  • Contributor
  • Posts: 12
  • Country: cn
No,should be Agilent.Cdf.Core.Kernel.dll 。
 

Offline wp_wp

  • Regular Contributor
  • *
  • Posts: 59
  • Country: cn
Have you tested?
I tested.
With Agilent.Cdf.Api.dll,you can not modify serial number and model number.
You must have Agilent.Cdf.Core.Kernel.dll also.
 

Offline dagolard

  • Contributor
  • Posts: 13
  • Country: ch
Hi all.

I´m not the big hacker, so I hope you forgive me my dumb question.

I have a MSO-X 2014A with blackscreen and want to find out, it´s the NAND Error or something else. If NAND, I want to send it in for free repair.

- installed TERA TERM
- Connected serial PC port to the PCB with settings 115200/8/0/1
- switched on the scope.

Result - see picture

What I´m doing wrong?
 

Offline PlainName

  • Super Contributor
  • ***
  • Posts: 6796
  • Country: va
Quote
- Connected serial PC port to the PCB with settings 115200/8/0/1

Should that be 115200/8/N/1 ?
 

Offline dagolard

  • Contributor
  • Posts: 13
  • Country: ch
You are right. It is 8/N/1. Sorry.
 

Offline PlainName

  • Super Contributor
  • ***
  • Posts: 6796
  • Country: va
No problem. That kind of thing is easy (for others) to spot since we've all done it enough to recognise it quickly :)
 

Offline dagolard

  • Contributor
  • Posts: 13
  • Country: ch
So - except of the wrong term any ideas?
 

Offline Bud

  • Super Contributor
  • ***
  • Posts: 6877
  • Country: ca
Try a different terminal software.
Facebook-free life and Rigol-free shack.
 

Online Hexley

  • Regular Contributor
  • *
  • Posts: 197
  • Country: us
- Connected serial PC port to the PCB with settings 115200/8/0/1

Did you use a logic-level serial adapter? The scope has 3V3 signals, so a standard serial port is not compatible.
 

Offline dagolard

  • Contributor
  • Posts: 13
  • Country: ch
No, I didn´t. :(
So I have to get one...
 

Offline dagolard

  • Contributor
  • Posts: 13
  • Country: ch
 

Online Hexley

  • Regular Contributor
  • *
  • Posts: 197
  • Country: us
Or this https://www.amazon.com/DSD-TECH-SH-U09C5-Converter-Support/dp/B07WX2DSVB/ if you set the jumper to 3.3V you should be OK.
 

Online TheSteve

  • Supporter
  • ****
  • Posts: 3743
  • Country: ca
  • Living the Dream
If you also connected the TX line from the PC to the scope then you tortured the processor UART a little - but it likely survived just fine.
VE7FM
 

Offline dagolard

  • Contributor
  • Posts: 13
  • Country: ch
I hope I didn't destroy anything...
 

Offline dagolard

  • Contributor
  • Posts: 13
  • Country: ch
Ready for weekend...
 

Offline dagolard

  • Contributor
  • Posts: 13
  • Country: ch
Okay, that´s the result I get....

U-Boot 2010.03 (Oct 18 2011 - 14:28:06)Agilent P500

CPU:   SPEAr600
DRAM:  128 MiB
Flash: 512 KiB
NAND:  fsmc-ecc1 128 MiB
In:    serial
Out:   serial
Err:   serial
SerNum:serial number not programmed
Chip:  BD Board Rev: 4
Net:   smsc
Press space to stop autoboot:  0
## Booting kernel from Legacy Image at f8050000 ...
   Image Name:   PBOOT
   Created:      2011-08-24  22:35:34 UTC
   Image Type:   ARM Linux Kernel Image (gzip compressed)
   Data Size:    36045 Bytes = 35.2 KiB
   Load Address: 00000000
   Entry Point:  00000000
   Uncompressing Kernel Image ... OK

Starting kernel ...


Debug serial initialized ........OK

Microsoft Windows CE Bootloader Common Library Version 1.4 Built Aug 24 2011 15:15:48
Microsoft Windows CE 6.0 Ethernet Bootloader for the Agilent P500 board
Adaptation performed by Agilent Technologies (c) 2008


System ready!
Preparing for download...
 Loading image 1 from memory at 0xD0600000
O
BL_IMAGE_TYPE_BIN

X
XXXXXOOOOXXOOOOOOOOXOXOOOOOOOOXOOXOXOOOOERROR: Checksum failure (expected=0x167CF58  computed=0x167D64E)
****** Checksum failure on record 13, ABORT!!! ******

Completed file(s):
-------------------------------------------------------------------------------
  • : Address=0x80361000  Length=0x13064E8  Name="" Target=RAM

 Loading image 1 failed, trying next one
 Loading image 2 from memory at 0xD1600000

BL_IMAGE_TYPE_UNKNOWN

 Loading image 2 failed, trying next one
 All images failed

Press r to reset


NAND or no NAND Failure?

 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf