Hack of Sigllent spectrum analyzer ssa3021X?

[B1nary]

Sometimes the imagination is far better than the truth - even if the truth is pretty nice ...
We treat each other fairly well - imagination runs wild, B1nary leaves rest unsaid.[/i]

[Joel_l]

I just ordered one of these. Backordered until April 7th. Hope nothing has changed. Anxious to see how it all works.

[lollokara]

Hi Guys, I'm new in this forum, i just bought the ssa3021X it will arrive soon, anyone of you know anything on how to downgrade the bad boy in case it comes with the 8.something ? Any help would be really appreciated 

[rf-loop]

how to downgrade the bad boy in case it comes with the 8.something ?

Why?

[Joel_l]

My guess is in case Siglent closed the hack hole on later updates.

I'm still waiting for mine. Supposedly back in stock to ship today.

[tautech]

Hi Guys, I'm new in this forum, i just bought the ssa3021X it will arrive soon, anyone of you know anything on how to downgrade the bad boy in case it comes with the 8.something ? Any help would be really appreciated 

Welcome to the forum.

Read again reply #326 

My guess is in case Siglent closed the hack hole on later updates.

I'm still waiting for mine. Supposedly back in stock to ship today.

As above.

[Joel_l]

Just checked on my SA order. Apparently the batch going to Siglent has been sitting in LA customs for two weeks and are still there. Maybe will be on their way tomorrow. So unless ordered from someone who actually had them in stock, we are stuck.

[Sparky]

Just checked on my SA order. Apparently the batch going to Siglent has been sitting in LA customs for two weeks and are still there. Maybe will be on their way tomorrow. So unless ordered from someone who actually had them in stock, we are stuck.

Apologies for a little off-topic, but many recent posts are about ordering/shipping of SSA3021X, so I thought okay to ask where people are ordering the unit from?  I'm in USA so thinking my best option is Saelig.

I noticed some distributors claiming it is discontinued with no stock?  That doesn't make sense -- it seems the unit is in demand and only recently (few months before end of 2016) becoming more readily available...

[tautech]

Apologies for a little off-topic, but many recent posts are about ordering/shipping of SSA3021X, so I thought okay to ask where people are ordering the unit from?  I'm in USA so thinking my best option is Saelig.

Ask of EEVblog member discount here:
https://www.eevblog.com/forum/testgear/equipment-discounts-from-saelig/

Yep, a bit OT and should be in the main thread:
https://www.eevblog.com/forum/testgear/siglent-ssa3000x-spectrum-analyzers/

I noticed some distributors claiming it is discontinued with no stock?  That doesn't make sense -- it seems the unit is in demand and only recently (few months before end of 2016) becoming more readily available...

TE are no longer authorised distributors and it makes no sense that they should still have a page for SSA3000X. 

[Joel_l]

They are only saying it is discontinued from their catalog, not a discontinued product.

The update to my order ( USA ) was that Siglent is waiting for their next batch.

[lollokara]

Thanks, i haven't got it while reading that post that the new version is still hackable. Thanks a lot

[NikWing]

I've ordered a 3021x on Friday, should arrive soon
really curious now

[NikWing]

Device came with fw 8.2
mod works like a charm (the fun_opt file is missing though and backup of mtdblock7 returns an input/output error, so can't be backup'd)

[Kitsyboy]

I received my unit this week. It came with firmware 1.2.8.2
I did several experiments with the described mod and found out that it is ALL in the file NSP_sn_bandwith in the firmdata0 directory. so the procedure can be even simpler, just rename this file and the factory mode is operational

[Kitsyboy]

sorry for the type error: file name must be NSP_sn_bandwidth of course

[Kitt]

I have not done the mod yet.  I am on firmware 8.1.  Are you saying all that is required is to rename NSP_SN_BANDWIDTH file in the firmdata0 directory will enable the features.?

Sent from my SM-T357T using Tapatalk

[videobruce]

TE are no longer authorized distributors and it makes no sense that they should still have a page for SSA3000X.

I inquired about why that line wasn't carried anymore, but only got a 'canned' (meaningless) response. AFAIC, their agreement with Rigol is the reason. 

[pascal_sweden]

Batronix in Europe carries both Rigol and Siglent, so there is no exclusivity agreement there.

But of course it can be so with TEquipment.

[Kitsyboy]

Hello Kitt, basically the answer is yes. I used the guide from answer 289 as starting point. This excellent guide shows all the steps to enable the factory mode of the analyser ( no serial number all options enabled). The guide tells you to backup several files in the firmdata directory and the backup directory. After having followed the guide I felt confident to experiment a little. I wanted to make as little changes as possible to the original files so I restored each of them individually and tried to see the result. Here I found out that the NSP_sn_bandwidth was the only file which really made the difference. It is a xml file in which each option is enabled by a special hex code. This hex code is computed from the name option and the serial number. ( a real challenge will be to find the algorithm for this calculation. A good starting point would be to take the 8.1 firmware. This version has the possibility to calculate these numbers because previous firmwares did not use this protection scheme. I think that people with some knowledge of ARM processors mus be able to decompile/disassemble this version which might reveal its secrets.

[Joel_l]

I got word that my SA is shipping out today. Must mean that Siglent in the US has them back in stock. I'll update with FW and other findings.

Joel

[dotto]

I bought SSA3021x but my version is 1.2.8.2 (20170214-3)....
I tried to follow instructions v05 but I couldn't find fun_opt_valid_config.xml file...
I renamed the other filenames as described in instruction but after reboot nothing happened...

See files in firmdata0:

root@am335x-evm:/usr/bin/siglent/usr/backup# cd /usr/bin/siglent/firmdata0
root@am335x-evm:/usr/bin/siglent/firmdata0# ls -l
-rw-r--r--    1 root     root           448 May 16 22:33 NSP_sn_bandwidth.xml
-rw-r--r--    1 root     root           448 May 16 22:23 NSP_sn_bandwidthx.xml
-rw-r--r--    1 root     root           150 May 16 22:35 NSP_trends_config_info.xml
-rw-rw-r--    1 1000     1000           606 Dec 28  2015 NSP_trends_config_infox.xml
drwxrwxr-x    2 1000     1000          4240 Apr 20 19:16 calib
-rw-r--r--    1 root     root           504 May 16 22:33 nsp_data_b
-rw-r--r--    1 root     root           504 May 16 22:23 nsp_data_bx

see backup files:

root@am335x-evm:/# cd /usr/bin/siglent/usr/backup
root@am335x-evm:/usr/bin/siglent/usr/backup# ls -l
-rw-r--r--    1 root     root           448 May 16 22:55 NSP_sn_bandwidth.xml
-rw-r--r--    1 root     root           448 May 16 22:23 NSP_sn_bandwidthx.xml
-rw-r--r--    1 root     root           606 Jan  1  2000 NSP_trends_config_infox.xml
drwxr-xr-x    2 root     root          4240 Apr 20 19:16 calib
-rw-r--r--    1 root     root           504 May 16 22:55 nsp_data_b
-rw-r--r--    1 root     root           504 May 16 22:23 nsp_data_bx


I can see new files but it works without hack.

Anyone can help me? 

Thanks,

Dotto.

[rf-loop]

See files in firmdata0:

root@am335x-evm:/usr/bin/siglent/usr/backup# cd /usr/bin/siglent/firmdata0
root@am335x-evm:/usr/bin/siglent/firmdata0# ls -l
-rw-r--r--    1 root     root           448 May 16 22:33 NSP_sn_bandwidth.xml
-rw-r--r--    1 root     root           448 May 16 22:23 NSP_sn_bandwidthx.xml
-rw-r--r--    1 root     root           150 May 16 22:35 NSP_trends_config_info.xml
-rw-rw-r--    1 1000     1000           606 Dec 28  2015 NSP_trends_config_infox.xml
drwxrwxr-x    2 1000     1000          4240 Apr 20 19:16 calib
-rw-r--r--    1 root     root           504 May 16 22:33 nsp_data_b
-rw-r--r--    1 root     root           504 May 16 22:23 nsp_data_bx

see backup files:

root@am335x-evm:/# cd /usr/bin/siglent/usr/backup
root@am335x-evm:/usr/bin/siglent/usr/backup# ls -l
-rw-r--r--    1 root     root           448 May 16 22:55 NSP_sn_bandwidth.xml
-rw-r--r--    1 root     root           448 May 16 22:23 NSP_sn_bandwidthx.xml
-rw-r--r--    1 root     root           606 Jan  1  2000 NSP_trends_config_infox.xml
drwxr-xr-x    2 root     root          4240 Apr 20 19:16 calib
-rw-r--r--    1 root     root           504 May 16 22:55 nsp_data_b
-rw-r--r--    1 root     root           504 May 16 22:23 nsp_data_bx

How you have done this mess...
now there is original and renamed files together.  Why?
You have perhaps made things with your own methods instead of some instructions. Things need do exactly and not just nearly exactly.

[dotto]

Hi rf-loop!
Thanks for your reply.

I followed the exact instruction v05.

Yes, the analyzer created new files.... before restart I just had files with "namex.xml" but now the system recreated new files.... including backup folder.

before restart:

NSP_sn_bandwidthx.xml
NSP_trends_config_infox.xml
calib - I didn't change it....
nsp_data_bx.xml


after restart: new xml files....
 
 

[Joel_l]

Restore your sa back to new. Then just rename the file mentioned in post 363/364. Works fine.

[dotto]

Joel_l,
Thanks for your answer...

I restored the sa....

See original files:

root@am335x-evm:/# cd /usr/bin/siglent/firmdata0
root@am335x-evm:/usr/bin/siglent/firmdata0# ls -l
-rw-r--r--    1 root     root           448 May 16 12:56 NSP_sn_bandwidth.xml
-rw-rw-r--    1 1000     1000           606 Dec 28  2015 NSP_trends_config_info.xml
drwxrwxr-x    2 1000     1000          4240 Apr 20 19:16 calib
-rw-r--r--    1 root     root           504 May 16 12:56 nsp_data_b

root@am335x-evm:/usr/bin/siglent/firmdata0# cd /usr/bin/siglent/usr/backup
root@am335x-evm:/usr/bin/siglent/usr/backup# ls -l
-rw-r--r--    1 root     root           448 May 16  2017 NSP_sn_bandwidth.xml
-rw-r--r--    1 root     root           606 Jan  1  2000 NSP_trends_config_info.xml
drwxr-xr-x    2 root     root          4240 Apr 20 19:16 calib
-rw-r--r--    1 root     root           504 May 16  2017 nsp_data_b


As described in post 363/364, I changed just NSP_sn_bandwidth.xml to NSP_sn_bandwidthx.xml

See below:
root@am335x-evm:/usr/bin/siglent/usr/backup# ls -l
-rw-r--r--    1 root     root           448 May 16  2017 NSP_sn_bandwidthx.xml
-rw-r--r--    1 root     root           606 Jan  1  2000 NSP_trends_config_info.xml
drwxr-xr-x    2 root     root          4240 Apr 20 19:16 calib
-rw-r--r--    1 root     root           504 May 16  2017 nsp_data_b

root@am335x-evm:/usr/bin/siglent/firmdata0# ls -l
-rw-r--r--    1 root     root           448 May 16 12:56 NSP_sn_bandwidthx.xml
-rw-rw-r--    1 1000     1000           606 Dec 28  2015 NSP_trends_config_info.xml
drwxrwxr-x    2 1000     1000          4240 Apr 20 19:16 calib
-rw-r--r--    1 root     root           504 May 16 12:56 nsp_data_b

After sync command, I tried ls -l, and the bandwidth file show again.... 

root@am335x-evm:/usr/bin/siglent/firmdata0# ls -l
-rw-r--r--    1 root     root           448 May 16 13:12 NSP_sn_bandwidth.xml
-rw-r--r--    1 root     root           448 May 16 12:56 NSP_sn_bandwidthx.xml
-rw-rw-r--    1 1000     1000           606 Dec 28  2015 NSP_trends_config_info.xml
drwxrwxr-x    2 1000     1000          4240 Apr 20 19:16 calib
-rw-r--r--    1 root     root           504 May 16 13:12 nsp_data_b

I didn't restart at this moment!