Author Topic: Hacking the Rigol DHO800/900 Scope  (Read 1352250 times)

0 Members and 17 Guests are viewing this topic.

Online Fungus

  • Super Contributor
  • ***
  • Posts: 16798
  • Country: 00
Re: Hacking the Rigol DHO800/900 Scope
« Reply #125 on: October 22, 2023, 04:35:08 pm »
When I run adb connect 192.XXXXXXX after a while the message "failed to connect 192.XXXXXXXX" appears.
When I try it again, message "already conneted to 192.XXXXXXXX" appears.

Do you have anything else connected, eg. a phone on USB?

Try doing "adb disconnect"
 

Offline Martin72

  • Super Contributor
  • ***
  • Posts: 6083
  • Country: de
  • Testfield Technician
Re: Hacking the Rigol DHO800/900 Scope
« Reply #126 on: October 22, 2023, 04:38:03 pm »
The scope is connected via LAN cable to the router, webserver access is no problem, scope is online.
My smartphone is also connected via wlan to the router.
EDIT: second pic attached
« Last Edit: October 22, 2023, 04:42:03 pm by Martin72 »
 

Offline Martin72

  • Super Contributor
  • ***
  • Posts: 6083
  • Country: de
  • Testfield Technician
Re: Hacking the Rigol DHO800/900 Scope
« Reply #127 on: October 22, 2023, 05:10:46 pm »
Second try with another pc (notebook), same results.

Offline rpro

  • Contributor
  • Posts: 45
  • Country: us
Re: Hacking the Rigol DHO800/900 Scope
« Reply #128 on: October 22, 2023, 05:24:17 pm »
Second try with another pc (notebook), same results.

Use  scope-ip-address:55555 (five 5's)

The scope should connect right away. If it is hanging, reboot the scope and PC and try again, with the five 5's (not 4).  Hope this helps.
 
The following users thanked this post: Martin72

Offline Martin72

  • Super Contributor
  • ***
  • Posts: 6083
  • Country: de
  • Testfield Technician
Re: Hacking the Rigol DHO800/900 Scope
« Reply #129 on: October 22, 2023, 05:37:26 pm »
This was it  :-+

And now...tadaa.. ;)
 
The following users thanked this post: Fungus

Online Fungus

  • Super Contributor
  • ***
  • Posts: 16798
  • Country: 00
Re: Hacking the Rigol DHO800/900 Scope
« Reply #130 on: October 22, 2023, 05:42:38 pm »
 

Online Fungus

  • Super Contributor
  • ***
  • Posts: 16798
  • Country: 00
Re: Hacking the Rigol DHO800/900 Scope
« Reply #131 on: October 22, 2023, 05:46:41 pm »
Note that your serial number is in vendor.bin so it will change when you do this.

I predict a lot of 'scopes out there with identical serial numbers...
 
The following users thanked this post: Martin72, artik

Offline Martin72

  • Super Contributor
  • ***
  • Posts: 6083
  • Country: de
  • Testfield Technician
Re: Hacking the Rigol DHO800/900 Scope
« Reply #132 on: October 22, 2023, 05:48:30 pm »
 ;D

So, before calibration, only channel 1 have a "huge" offset.
BTW, did you notice that you now have 200µV/Div. ?


Online Fungus

  • Super Contributor
  • ***
  • Posts: 16798
  • Country: 00
Re: Hacking the Rigol DHO800/900 Scope
« Reply #133 on: October 22, 2023, 05:58:29 pm »
BTW, did you notice that you now have 200µV/Div. ?

Oh, yeah...  :-+
 

Offline Martin72

  • Super Contributor
  • ***
  • Posts: 6083
  • Country: de
  • Testfield Technician
Re: Hacking the Rigol DHO800/900 Scope
« Reply #134 on: October 22, 2023, 06:07:07 pm »
Offset is not getting better after calibration...
More, it varies with the different V/div steps.
Is there are solution for it ?

Edit:

Quote
so you are running OS 01.01.19?

I think not.

Offline Mechatrommer

  • Super Contributor
  • ***
  • Posts: 11700
  • Country: my
  • reassessing directives...
Re: Hacking the Rigol DHO800/900 Scope
« Reply #135 on: October 22, 2023, 06:10:44 pm »
I predict a lot of 'scopes out there with identical serial numbers...
hubertyoung's serial number... who cares? ;D

So, before calibration, only channel 1 have a "huge" offset.
BTW, did you notice that you now have 200µV/Div. ?
so you are running OS 01.01.19? with legit in-scope upgrade method? and then use adb or souldevelop's tool to push hubertyoungs DHO924 verdor.bin? can you check offset for all channels at 200uV, 500uV, 1mV/div etc to b correct? i got all kind of weirdness when overwriting DHO924's vendor.bin into OS V01.00...

Offset is not getting better after calibration...
More, it varies with the different V/div steps.
Is there are solution for it ?

Edit:
Quote
so you are running OS 01.01.19?
I think not.
so you got the weirdness thaat i experienced... up to 1 or 5V/div has some nasty offset, but when going up to 10V/div offset is correct again.
later i will try upgrade my legi V01.00 to V01.19 fungus provided and see what happens if i overwrite the DHO924 vendor.bin alone. if calibration ok, then thats should be the better hack. upgrade to DHO924, but still using latest (bug fixed) OS...
Nature: Evolution and the Illusion of Randomness (Stephen L. Talbott): Its now indisputable that... organisms “expertise” contextualizes its genome, and its nonsense to say that these powers are under the control of the genome being contextualized - Barbara McClintock
 

Online Fungus

  • Super Contributor
  • ***
  • Posts: 16798
  • Country: 00
Re: Hacking the Rigol DHO800/900 Scope
« Reply #136 on: October 22, 2023, 06:14:53 pm »
Quote
so you are running OS 01.01.19?

I think not.

If you press "About" three times you get the extended firmware version number...  :)

Offset is not getting better after calibration...

Did self-cal report success?

There's extended calibration options if you enable debug mode as above. Don't ask me what they do though. Some of them said "failed" on mine when I tried them.
 

Offline Martin72

  • Super Contributor
  • ***
  • Posts: 6083
  • Country: de
  • Testfield Technician
Re: Hacking the Rigol DHO800/900 Scope
« Reply #137 on: October 22, 2023, 06:17:21 pm »
Quote
Did self-cal report success?

Yes..

Online Fungus

  • Super Contributor
  • ***
  • Posts: 16798
  • Country: 00
Re: Hacking the Rigol DHO800/900 Scope
« Reply #138 on: October 22, 2023, 06:37:49 pm »
Quote
Did self-cal report success?

Yes..

I just went to 924 again and I have an offset on channel 3. I'm sure I didn't have that before...  :-\
 

Offline Martin72

  • Super Contributor
  • ***
  • Posts: 6083
  • Country: de
  • Testfield Technician
Re: Hacking the Rigol DHO800/900 Scope
« Reply #139 on: October 22, 2023, 06:44:37 pm »
It varies...

So, after upgrading following your link, the version shows this (Pic).
After that doing the self-cal again, offset problems still persists.
I think I´ll going back to 804..


Offline Mechatrommer

  • Super Contributor
  • ***
  • Posts: 11700
  • Country: my
  • reassessing directives...
Re: Hacking the Rigol DHO800/900 Scope
« Reply #140 on: October 22, 2023, 06:50:22 pm »
It varies...
So, after upgrading following your link, the version shows this (Pic).
After that doing the self-cal again, offset problems still persists.
I think I´ll going back to 804..
go back to original 804, do the legit upgrade to 01.19, then push vendor.bin again. this is what i'm going to try, but not tonight...
Nature: Evolution and the Illusion of Randomness (Stephen L. Talbott): Its now indisputable that... organisms “expertise” contextualizes its genome, and its nonsense to say that these powers are under the control of the genome being contextualized - Barbara McClintock
 

Offline Martin72

  • Super Contributor
  • ***
  • Posts: 6083
  • Country: de
  • Testfield Technician
Re: Hacking the Rigol DHO800/900 Scope
« Reply #141 on: October 22, 2023, 07:06:33 pm »
Quote
go back to original 804

Dit it, everything´s fine again.
It would probably be better if one could intervene specifically in one's own bin file, but that is beyond my abilities, clear case. ;)

Quote
do the legit upgrade to 01.19
I had taken the link from Fungus, it seems that it is not, if you look at my picture "version" (that was after the firmwareupgrade).

Offline Martin72

  • Super Contributor
  • ***
  • Posts: 6083
  • Country: de
  • Testfield Technician
Re: Hacking the Rigol DHO800/900 Scope
« Reply #142 on: October 22, 2023, 07:24:20 pm »
There must be something in the (very small) .bin file that "changes" the offset, because what I have noticed in the last 2 hours is that the offset "varies" depending on the setting of the sensitivity.
For example, you can see a small offset at 5V/div, which should then be "huge" if you go further down.
But this is not so, it is sometimes smaller, sometimes larger.
If I didn't know better, one could think that there are calibration data in the .bin file that don't fit to another scope.
Or it has something to do with the additional 200µV/div, which does not exist in the 800, that something gets mixed up.

Online Fungus

  • Super Contributor
  • ***
  • Posts: 16798
  • Country: 00
Re: Hacking the Rigol DHO800/900 Scope
« Reply #143 on: October 22, 2023, 07:26:30 pm »
I'm trying to understand some of the early posts in this thread:

https://www.eevblog.com/forum/testgear/hacking-the-rigol-dho800900-scope/msg5074867/#msg5074867

It seems that all that's in vendor.bin is a model number, a serial number, and a MAC address.

In that case: The options that you get are based only on the model number in that file. They aren't selected individually.


The post after that one doesn't make much sense:

https://www.eevblog.com/forum/testgear/hacking-the-rigol-dho800900-scope/msg5075035/#msg5075035

Quote
"simply replacing the vendor.bin will cause a 5mV-10mV offset to appear, and it can't be eliminated by self-cal."

Why should that be?
 

Online Fungus

  • Super Contributor
  • ***
  • Posts: 16798
  • Country: 00
Re: Hacking the Rigol DHO800/900 Scope
« Reply #144 on: October 22, 2023, 07:29:03 pm »
There must be something in the (very small) .bin file that "changes" the offset, because what I have noticed in the last 2 hours is that the offset "varies" depending on the setting of the sensitivity.
For example, you can see a small offset at 5V/div, which should then be "huge" if you go further down.

That's easy: Each individual range will have its own offset/scale values, all created during calibration.

 

Offline Martin72

  • Super Contributor
  • ***
  • Posts: 6083
  • Country: de
  • Testfield Technician
Re: Hacking the Rigol DHO800/900 Scope
« Reply #145 on: October 22, 2023, 07:30:47 pm »
Quote
Why should that be?
We are currently experiencing that this is the case.
Why this is so, currently no idea, maybe it still comes.


Online Fungus

  • Super Contributor
  • ***
  • Posts: 16798
  • Country: 00
Re: Hacking the Rigol DHO800/900 Scope
« Reply #146 on: October 22, 2023, 09:24:10 pm »
I found out you can load any firmware you want. It doesn't complain about downgrades...

I've just gone back to 1.00, I wanted to check something.
 

Online Fungus

  • Super Contributor
  • ***
  • Posts: 16798
  • Country: 00
Re: Hacking the Rigol DHO800/900 Scope
« Reply #147 on: October 22, 2023, 09:39:57 pm »
I analyzed their apk software using IDA and found that hdcode was indeed used, and this part of the call was made before the system was calibrated, so this can be explained by overriding the vendor.bin Upgrading the DHO800 to the DHO900 will have an offset zero potential and be very noisy. So it's also not clear to me why they don't get the model ID directly through the information inside the vendor.bin. :-//

Could you expand on this? We're trying this upgrade now and hitting this problem.
 

Online Fungus

  • Super Contributor
  • ***
  • Posts: 16798
  • Country: 00
Re: Hacking the Rigol DHO800/900 Scope
« Reply #148 on: October 22, 2023, 09:43:59 pm »
I found out you can load any firmware you want. It doesn't complain about downgrades...

I've just gone back to 1.00, I wanted to check something.

I confirmed it!

With firmware 1.00 I see this in my "Options":


After upgrading to firmware 1.01 I see this:

 

Offline Martin72

  • Super Contributor
  • ***
  • Posts: 6083
  • Country: de
  • Testfield Technician
Re: Hacking the Rigol DHO800/900 Scope
« Reply #149 on: October 22, 2023, 10:00:03 pm »
We had already established that today.
For me, however, this also means that something can still happen with our 800 models.
With a little patience and cleverness (which I certainly do not have in this matter), you could make an 824 with 50 Mpts memory from the 804.


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf