Products > Test Equipment

Hacking the Rigol DHO800/900 Scope

(1/553) > >>

sebyon:
Placeholder thread for hacking the Rigol DHO800/900 scope.

The general discussion thread can be found here.

https://www.eevblog.com/forum/testgear/rigols-new-dho800-oscilloscope-unbox-teardown/

@hubertyoung has provided a DHO804 FW1.14 image with the DHO924 vendor file preloaded. It can be extracted using 7zip then flash using HDD Raw Copy Tool (compressed image).

https://mega.nz/file/UjBC3KRY#Kqv1BCHNQdPcUGMfR8IqbuUwHUsUhU4GpO1keTAXqf8

@Luc7777 provided some guidelines on how has has achieved this.


--- Quote from: Luc7777 on September 22, 2023, 06:48:48 am ---Hi,


* This is what I've done:
1. Run the Win32 Disk Imager
2. Backup the SD
3. Flash the SD with the image from the link
4. Run the claibartation (offset gone) - device identifies as DHO804
5. Connect the scope to ethernet
6  Run adb:
    6.1 adb devices
    6.2 adb connect 192.xxx.x.xxx:55555
    6.3 "adb pull /rigol/data/vendor.bin"
    6.4 backup the generated vendor bin file from the adb folder to a new location
    6.5 copy in the adb folder the DHO924 image
    6.6 "adb push vendor.bin /rigol/data"
*
--- End quote ---

MOD EDIT:
Here is the latest instructions:




--- Quote from: Serg65536 on November 02, 2023, 10:17:10 pm ---DHO800/DHO900 UNLOCK TOOLS

1) Install GOLang distribution

2) In the "run_DHO_Tools.bat":
- set the GO installation directory path
- set the IpAddress variable (your scope's address is on the IO tab of the "Utility" window)
- change options list, if DHO900
- change scopeID, if DHO900
- if you don't want to create a backup file and pull it to the computer, delete line 35, or make it comment like this:
rem call "adb\05 make Backup And pull it - adb rm updateGEL, sh buildGEL, pull.bat"

3) Run the "run_DHO_Tools.bat"

4) Send the generated SCPI commands to the scope via the SCPI browser tab, opened by the script. Common command view:
:SYSTem:OPTion:INSTall DHOX00-<option>@XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

Scope reboot is not needed.

5) Check BW limit on the "About" tab and the memory depth (for the DHO804) on the "Options" tab of the "Utility" window.

PS: To remove installed options use the "adb\03 adb remove ALL options.bat" file or the ":SYSTem:OPTion:UNINstall" command from p268 of the DHO800/DHO900 Programming Guide.

UPDATE REASON: extending the description text.

--- End quote ---

EEVblog:
From here:
https://www.eevblog.com/forum/testgear/rigols-new-dho800-oscilloscope-unbox-teardown/msg5072767/#msg5072767


--- Quote from: Nx-1997 on September 22, 2023, 01:30:40 am ---Here is the DHO804 FW1.14 image (Thanks to @hubertyoung) with the DHO924 vendor file preloaded. Extract using 7zip then flash using HDD Raw Copy Tool (compressed image). If there is an vertical offset then use self cal or extended self cal.

https://mega.nz/file/UjBC3KRY#Kqv1BCHNQdPcUGMfR8IqbuUwHUsUhU4GpO1keTAXqf8

--- End quote ---

and


--- Quote from: Luc7777 on September 22, 2023, 06:48:48 am ---
--- Quote from: Nx-1997 on September 22, 2023, 01:30:40 am ---Here is the DHO804 FW1.14 image (Thanks to @hubertyoung) with the DHO924 vendor file preloaded. Extract using 7zip then flash using HDD Raw Copy Tool (compressed image). If there is an vertical offset then use self cal or extended self cal.

https://mega.nz/file/UjBC3KRY#Kqv1BCHNQdPcUGMfR8IqbuUwHUsUhU4GpO1keTAXqf8

--- End quote ---

Hi,


* This is what I've done:
1. Run the Win32 Disk Imager
2. Backup the SD
3. Flash the SD with the image from the link
4. Run the claibartation (offset gone) - device identifies as DHO804
5. Connect the scope to ethernet
6  Run adb:
    6.1 adb devices
    6.2 adb connect 192.xxx.x.xxx:55555
    6.3 "adb pull /rigol/data/vendor.bin"
    6.4 backup the generated vendor bin file from the adb folder to a new location
    6.5 copy in the adb folder the DHO924 image
    6.6 "adb push vendor.bin /rigol/data"
*
--- End quote ---

dreamcat4:
initial thoughts for hacking external awg support, link to a prior discussion. just to layout the main options:


--- Quote from: dreamcat4 on September 19, 2023, 07:01:32 pm ---well yes, there is the choice of hacking the firmware alone, to trigger some actions that then communicates over one of the general purpose digital interfaces on the scope (whether that is via the ethernet, or usb, or something else). the advantage of that is then should not require any hardware mods / hacking whatsoever. which gives itself a potential to keep a viable product warranty...

then there's the idea of minimally hacking the pcb awg section there, to install some low level mcu digital interface within the scope....

[more]...

--- End quote ---

this was after some people had been asking about the real internal awg module

https://www.eevblog.com/forum/testgear/rigols-new-dho800-oscilloscope-unbox-teardown/msg5045164/?topicseen#msg5045164

Nikki Smith:
For use with the DHO900 (and hopefully the DHO800 after a few mods?) I've created a new v3.1 of the 16-channel LA clone board that is cheaper to make and easier to hand-solder:
https://climbers.net/sbc/clone-pla2216-logic-probe-analyzer/

The PCB has dual footprints for the quad-channel SN65LVDS391, so you can use SOIC or TSSOP packages depending on which is cheaper (or available in stock).

KiCad source files included, as are GERBERs and BOMs for LCSC & Mouser. Should be around US$15 incl components and PCB.
!! I haven't tested it !! Just waiting for the components to arrive...

The DHO800 at a minimum will need a hole cut into the front panel for the 50-way IDC connector, and a socket soldered onto the motherboard. Some people have said the 2 missing memory chips are required to use the logic analyser functionality, but I don't think that has been confirmed yet? The missing chips are GigaDevice GDP2BFLM-CA, 96-ball FBGA:
https://www.gigadevice.com.cn/Public/Uploads/uploadfile/files/20230704/DS-00823-GDP2BFLM-Rev1.1.pdf

Nikki Smith:
I've started an attempt to clone the plugin AFG module from a DHO900.

In theory this could be used to add the same AFG functionality to a hacked DHO800. At a minimum 2x5-pin and 2x20-pin 1.27mm SMD headers would need to be soldered to the motherboard, and possibly other missing components.

I've gone as far as I can just working from photos: the attached DHO900 AFG.zip contains KiCad schematic & PCB layout, hi-res photos and spreadsheet of the major components. Hopefully other people with the actual AFG hardware will be mad enough to continue the effort, tracing the tracks and measuring the capacitors & inductors.

It is a busy board with a lot of passives, but I haven't seen any expensive/custom components yet.

Navigation

[0] Message Index

[#] Next page

There was an error while thanking
Thanking...
Go to full version
Powered by SMFPacks Advanced Attachments Uploader Mod