Hacking the Rigol MSO5000 series oscilloscopes

[BravoV]

Certainly not in this thread. Take it elsewhere please?

+1

C'mon guys, please, this is technical thread, please take your hate on the Rigol's product and also xenophobic stuffs  out of here, again, please.

Also for the Rigol competing parties, you know who you are, even you keep pretending to be casual end user, it isn't nice to keep bashing this product in this particular "technical" discussion if you don't have any interest on it.

Totally understand you feel really threatened by this Rigol's move, that probably may affect your sales on Rigol competing brand scope that you're selling, again, this is not the right place.

"Constantly" bashing this product and Rigol brand ? Please, again pretty please, vent it here at the official Dave's video blog thread ..

 -> EEVblog #1146 - New Low Cost Rigol MSO5000 Oscilloscope

[TK]

Rigol needs to recover the $$$ from the custom ASIC R&D and using them in as many models as possible makes a lot of sense

[Fungus]

I think its helpful in the background information for working out why Rigol have released a product in the way they have.

Simple: They've been allowing hacks for many years now and know the economics, numbers and demographics of the people doing it.

They know it makes business sense to sell oscilloscopes that way.

ie. They'd rather sell one of these to hacker and make $100 than watch that same hacker buy a Siglent.

PS: What would be the BOM on one of these? I bet they still make a couple of hundred bucks even if they sell one for $999.

(and most people will  pay $999 for a "four channel" model just to get four decent probes)

[tv84]

Rigol needs to recover the $$$ from the custom ASIC R&D and using them in as many models as possible makes a lot of sense

Indeed, the FW has references and looks like it can be used for:

DS/MSO5000, DS/MSO7000, DS/MSO8000 and DS/MSO9000

The app can even be called with the parameter -ds8000 but I have no feedback on what are the consequences besides slightly changing the Info Version menu. If anyone discovers that, please share.

[TopLoser]

Is the same firmware used on the 5000 and 7000 models or do we need to wait for a 5000 version update to know that?

Keysight 2000 and 3000 series used same firmware so I guess it’s possible?

[TopLoser]

Interesting times ahead... Rigol seem to have their future planned round this chipset so frequent updates should be assured.

I’m hoping to get access to a 3 GHz signal generator soon, have the ‘fully featured’ 5074 sweep it with the enabled AFG and see what the response is.

[Commodore8888]

Confirming the rather funny ssh root/root situation.

Couple DS7000s we got at work today. Walked right in. SCP'd some nice screen saver images over while I was in there. Being they're work machines, I didn't want to run right into using --fullopt. Instead, prolly spend Monday picking through what that touches.

Eyeballing a DS5000 right now. Dim screen reports have me a little worried though. It's a different screen than the 7k, so can't use it for reference (which, in person, is fairly decent screen wise).

Those BW strcpy's are a little funny. 4G.....Rigol seems pretty optimistic in the future it seems

[tv84]

Couple DS7000s we got at work today. Walked right in. SCP'd some nice screen saver images over while I was in there. Being they're work machines, I didn't want to run right into using --fullopt. Instead, prolly spend Monday picking through what that touches.

You don't need to make any change. Just get in, kill the app and launch it with the parameter. It's "safe", it's a feature.

[mrpackethead]

the root/root is the default user/pass that Xilinx use in their linux distributions.    It appears Rigol did'nt bother to change it.

Confirming the rather funny ssh root/root situation.

Couple DS7000s we got at work today. Walked right in. SCP'd some nice screen saver images over while I was in there. Being they're work machines, I didn't want to run right into using --fullopt. Instead, prolly spend Monday picking through what that touches.

Eyeballing a DS5000 right now. Dim screen reports have me a little worried though. It's a different screen than the 7k, so can't use it for reference (which, in person, is fairly decent screen wise).

Those BW strcpy's are a little funny. 4G.....Rigol seems pretty optimistic in the future it seems

[martin.hoeer]

@TV84

Please let me know where to enter /rigol/shell/start.sh and the other stuff. I tried ultrasigma and Putty but was not successfull.

Martin

[TopLoser]

I downloaded PUTTY and connected to the IP address that my MSO5000 displayed on the interface info page. Use SSH on default port 22.

Enter the ‘root’, ‘root’ as username and password.

Usual linux ‘cd /rigol/shell’ command to get to the correct directory

Then ‘vi start.sh’ to edit the file

Google VI to find out how to edit the file, it’s not that bad.

[orion242]

Somewhat of a disappointment.  Was hoping to hear the long story on breaking this guy.

Now with info at hand, I'm left wondering do I go MSO7x or MSO5x.  I had the original 1054 and when the 'Z' came out, quickly swapped out.  So 5x or 7x has me ready to again upgrade in the Rigol path.  Would be nice to see Dave address current state of things.

Sells scopes, IMO.   I may not need it at the hobby level, but I want it at the price....  Bigger screens, big plus alone.  Should be able to get a few bucks for what I have currently.  Its an interesting path to market.

[MrW0lf]

Now with info at hand, I'm left wondering do I go MSO7x or MSO5x.

Note that 7 has just as slow FFT as 5 looking ad random demo videos. Far slower than Zynq based or PC scopes. At price point they sell 5 it is more less understandable but for 7 bit weird. Dunno if it can be made better with firmware tweaks or processing power is just not there.

[mrpackethead]

The GEL file format for this interation may be differnet from previous versions;    ( https://www.eevblog.com/forum/testgear/rigol-dsxxxx-gel-firmware-file-format/msg982910/#msg982910  ).     The python scripts that were used previously dont' seem to make much sense.

Anyone got any tips. 


C:\Users\OEM\Downloads>python unpack.py rigolfirmware\firmware.gel.tar
instrument series:      fw4linux.sh
firmware version:
updateType:     0x00000000
found 0 files

writing /header  (40 bytes)

original filesize:      70021120
bytes processed:        40

C:\Users\OEM\Downloads>

[martin.hoeer]

@TopLoser

Thank you for your description. With Putty, I can successfully connect to my MSO5104. It answers the command *IDN? correctly. But I have not been able to gain 'root' access to proceed with the other steps. Can you help me?

Thank you.

Martin

[Kean]

@TopLoser

Thank you for your description. With Putty, I can successfully connect to my MSO5104. It answers the command *IDN? correctly. But I have not been able to gain 'root' access to proceed with the other steps. Can you help me?

Thank you.

Martin

Are you connecting with SSH on port 22?  Sounds like you may be using port 5555.

[Fungus]

Thank you for your description. With Putty, I can successfully connect to my MSO5104. It answers the command *IDN? correctly.

You're on the wrong port. That's not command shell access, it's SCPI access.

[TopLoser]

Yes, use SSH on port 22.

Missed that info out as my scope is 5000 miles away at the moment. I’ve updated the post I made.

[riccardo.pittini]

Has someone tried to verify if the "upgrade" enables also the other two channels on the MSO5XX2? 

[martin.hoeer]

Guys,

thank you for your speedy replies.

With  Putty set to SSH and port 22, I get the reply 'login as:'.
When I enter 'admin', I get the following request: 'admin@'IP address of my scope' password:'.
When I enter 'rigol' I get the reply 'Access denied.'

I thought this was the standard user name and password to be used.

I appreciate your patience with me and look forward to your replies.

Martin

[darthcloud]

Come on read the thread..

[mrpackethead]

when it says login as:   use root
when it asks for password:  use root

 

Guys,

thank you for your speedy replies.

With  Putty set to SSH and port 22, I get the reply 'login as:'.
When I enter 'admin', I get the following request: 'admin@'IP address of my scope' password:'.
When I enter 'rigol' I get the reply 'Access denied.'

I thought this was the standard user name and password to be used.

I appreciate your patience with me and look forward to your replies.

Martin

[TopLoser]

Has someone tried to verify if the "upgrade" enables also the other two channels on the MSO5XX2? 

No they haven’t, but tv84 thinks it won’t.  I’m not sure it’s worth saving 90 euros to find out the hard way. Buy the 4 channel model and you get 2 extra 350MHz probes and a warranty that covers all 4 channels.

But it would be interesting to have somebody verify it.

[iMo]

when it says login as:   use root
when it asks for password:  use root

when it says "login as" use: root
when it asks for "password" use: root

[BravoV]

when it says login as:   use root
when it asks for password:  use root

when it says "login as" use: root
when it asks for "password" use: root

Dunno why, seeing this thread title with the word "hacking" and reading these replies, made me chuckle.