Author Topic: Hacking the Rigol MSO5000 series oscilloscopes  (Read 324587 times)

0 Members and 10 Guests are viewing this topic.

Offline Cerebus

  • Super Contributor
  • ***
  • Posts: 6229
  • Country: gb
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1850 on: September 19, 2020, 02:19:15 pm »
I applied the patch to my scope, too.
Today I noticed that my channel 1 and 2 are a bit off.
This means when nothing is connected to the probes one shows a lower voltage then the other channel.

Attached a picture of all four channels without a probe connected, averaged and maximum memory depth set to 1k - to see it clearly.
It is visible that the channels are not exactly zeroed.

Does that mean my scope is damaged?
Or is it working and a difference of up to 300µV is totally fine?


Best,
Philipp


EDIT:
I did a self-calibration of the scope before I took the picture.
It was up and running for around 2 hours before, so should be warmed up enough.


EDIT 2:
The difference scales with the voltage per division setting.
With 2V per division it is around 3mV off.

What you read from the instrument with no probes connected is pretty meaningless. What would you expect to read with nothing connected? (I'd expect to read the Johnson-Nyquist noise of the the 1M terminating impedance. 1M@20ºC, 300MHz => 2.2mV rms, ~13mV ptp).

Remember that this is an 8 bit instrument with a 3% DC gain accuracy specification. So if you've got it set to 2V/div that's a 16V range which gives you an LSB of 16V/2^8 = 16V/256 = 62.5 mV. So that 3mV offset is less than one LSB (the minimum step difference that the instrument can measure) by a factor of twenty - it is well beyond what the instrument is actually capable of resolving even before you take the specified accuracy into consideration. It is nothing more or less than an artefact of the scope trying to calibrate itself by using lots of averaging, in practical measurement terms it means nothing.

Your expectation that 3mV might mean something at 2V/div is a very strong indicator that you don't understand the basics of the instrument or its limitations. I'd suggest a bit more basic study is required or you're in danger of misunderstanding what the scope is really telling you about what you're measuring with it. Don't expect an 8 bit scope (or for that matter, any scope) to deliver much in the way of accuracy or precision.
Anybody got a syringe I can use to squeeze the magic smoke back into this?
 

Offline diegooo1972

  • Contributor
  • Posts: 8
  • Country: it
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1851 on: September 26, 2020, 08:34:01 am »
Please correct me if I'm wrong.
I just need to upgrade the scope to v00.01.03.00.01 firmware version and the apply the patch.
Is that right ?
 

Offline srjaynes49

  • Contributor
  • Posts: 11
  • Country: us
  • 70 is the new 50!
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1852 on: September 26, 2020, 06:17:25 pm »
As a former Tektronix sales engineer, I spent HOURS with a yellow highlighter pointing out scope specs to users and prospective users. One of my biggest offenders were the semiconductor manufacturers trying to set timing values on the IC testers to 0.5% with 3.0% instruments.  Wrong tool for the job. I finally wrote a white-paper on how to set the timings with an averaging time-interval counter. I also copied the accuracy tables for the most popular scopes, as they varied significantly series to series. I carried a dozen copies with me all the time to educate prospects and customers alike. Tek’s training for sales engineers in those days was 8 hours a day, hands-on for about 4 months at their training center in Beaveron, Or.. I attended the school the summer of 1972. At the time I was the youngest person to have completed the course. Those were THE days my friend.  I still love test and measurement instruments especially my hacked Rigol MSO5074.  Still have a Tek 475 and several TM500 modules including the same type DC503A I recommended to the semiconductor companies.  I also still have my 2nd digital storage scope, an OWON 7102v with the battery option.  It’s great for field use. I wish my Rigol had a battery option!  With the power analysis function it would be THE machine for solar power systems diagnostics!
Nothing clever to read here...
 
The following users thanked this post: eklein

Offline srjaynes49

  • Contributor
  • Posts: 11
  • Country: us
  • 70 is the new 50!
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1853 on: September 26, 2020, 08:47:39 pm »
Oops wrong photo. This image is the “modified sine wave” from a cheap 12v DC to 120v AC inverter.
Nothing clever to read here...
 

Offline c_pi

  • Newbie
  • Posts: 2
  • Country: de
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1854 on: October 06, 2020, 07:25:51 pm »
Hello,

I just registered here to ask the following question:

I ordered a MSO5074 to use it with the patch @350MHz and with the options enabled.
Today I received a MSO5104 with FW 00.01.03.00.01 instead of the MSO5074.
I tried to apply the patch via USB-Stick with the files from

https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg3024342/#msg3024342 and
https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg3025330/#msg3025330

... but the Scope shows the "wrong check sum" error.

Am I doing something wrong? Or does the patch not work with the MSO5104?

Thank you for your help!
 

Offline riccardo.pittini

  • Contributor
  • Posts: 48
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1855 on: October 06, 2020, 07:28:53 pm »

I just wanted to highlight one thing (MSO5074):
- I tried patching a scope (v00.01.03.00.01, hw1.01) however checksum was wrong, the scope had a build (v00.01.03.00.01) dated mid may!!!
- Simply re-flashed the original build v00.01.03.00.01 from end of april. Patched and all was good :)

So it seems that they made two different build for v00.01.03.00.01, with different dates/contents. It would be interesting to understand if there are any real/important changes.
« Last Edit: October 26, 2020, 07:46:03 am by riccardo.pittini »
 

Offline riccardo.pittini

  • Contributor
  • Posts: 48
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1856 on: October 06, 2020, 07:30:14 pm »
just reflash the v00.01.03.00.01 build from end of April, and try again.

Probably you gor a scope with a v00.01.03.00.01 build from mid may, hence the different checksum.
 
The following users thanked this post: neutron, c_pi

Offline c_pi

  • Newbie
  • Posts: 2
  • Country: de
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1857 on: October 06, 2020, 07:53:58 pm »
Thank you very much for your help!

It's great, that the patches are available - thanks for your great work!

In fact the firmware version 00.01.03.00.01 had a build stamp from 2020-05-18.

I reflashed the Firmware from the Rigol page and now It was possible to run the patches.
 
The following users thanked this post: neutron

Offline S. Petrukhin

  • Frequent Contributor
  • **
  • Posts: 413
  • Country: ru
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1858 on: October 08, 2020, 06:30:48 am »
I wish my Rigol had a battery option!  With the power analysis function it would be THE machine for solar power systems diagnostics!

Battary for you RIGOL:     :-//
And sorry for my English.
 
The following users thanked this post: dc8wan, srjaynes49

Offline neutron

  • Newbie
  • Posts: 2
  • Country: us
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1859 on: October 22, 2020, 09:02:26 pm »
just reflash the v00.01.03.00.01 build from end of April, and try again.

Probably you got a scope with a v00.01.03.00.01 build from mid may, hence the different checksum.

Thanks for posting this info!

I just got a MSO5074 with that same mid-May version of the v00.01.03.00.01 firmware (listed onscreen as Build:  2020-05-18 11:42:06)
The patch checksums didn't work.

After I rolled back to the April version of the v00.01.03.00.01 firmware (listed on-screen as Build:  2020-03-30 15:56:36), the patching worked!   ;D

Thank you to all who contributed to this effort!  It is impressive and apprecitated!
« Last Edit: October 22, 2020, 09:08:06 pm by neutron »
 

Offline dl9lc

  • Newbie
  • Posts: 1
  • Country: de
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1860 on: October 24, 2020, 08:09:59 am »
Last weeek i bought a 5074 and downgraded the firmware to the state of 2020-03-30.
Thanks to the easy summery everything works as charme.
The scope seems not so bad. The jitter in timebase seem to be around 250ps p/p referenced to a HP 10811 - not to bad for this class.
The genarator is not the best and a bit noisy, but better than nothing.
Many thanks to all how have made this patch possible.
vy 73 dl9lc
 

Offline oliv3r

  • Regular Contributor
  • *
  • Posts: 121
  • Country: nl
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1861 on: October 24, 2020, 11:08:39 am »
Just for those interested and didn't spot it yet, rigol now has a 'service manual'
  • It is only for the 5000-E but should be the same. It really only contains a blow up and a teardown/reassembly guide but still ... pretty cool.
  • [0]:
https://www.rigol.eu/Public/Uploads/uploadfile/files/ftp/%E6%96%B0%E8%B5%84%E6%96%99%E5%BA%93-%E5%90%AB%E6%89%8B%E5%86%8C%E5%9B%BA%E4%BB%B6%E8%BD%AF%E4%BB%B6/%E5%AE%98%E7%BD%91%E8%B5%84%E6%96%99/DS/%E6%89%8B%E5%86%8C/MSO5000-E/EN/MSO5000-E_ServiceGuide_EN.pdf
 
The following users thanked this post: Gandalf_Sr, tcottle, bmx, sjm

Offline oliv3r

  • Regular Contributor
  • *
  • Posts: 121
  • Country: nl
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1862 on: October 24, 2020, 11:12:47 am »
Has anybody take them up on their offer? It does say it in quite verbatim:
Quote
The open source software is provided for free. RIGOL uses third-party open source
software subject to the specified licenses. You are entitled to use the open source
software subject to their respective license. If you or any third party wants to obtain
the complete corresponding source code for the software from us, please contact:
RIGOL (SUZHOU) TECHNOLOGIES
E-mail: service@rigol.com
Website: www.rigol.com
This offer is valid for three years after you received the software.

I did ask them for the software, so lets see what happens next :) (but would be nice to know if others already did this  too)

So I never received a reply. So yesterday, I've sent a request to the European office, and got a reply promptly. They asked where I've sent the previous request too, and that they would prepare the files I requested (I requested all sources for all products :p)

They said they'd send them to me on november 17th. No idea why it is taking so long, maybe that's the day they'll open their github.com/rigol repo?

Anyway, fingers crossed!

P.S. they moved the GPL pdf to the official download location (the old one yields a 404 now). so the new link for those that don't want to go into the sign-up wall is: https://www.rigol.eu/Public/Uploads/uploadfile/files/ftp/DS/MSO5000%20Open%20Source%20Acknowledgment.pdf (looks the same url though? hmm ...)
« Last Edit: October 24, 2020, 11:36:40 pm by oliv3r »
 

Offline S. Petrukhin

  • Frequent Contributor
  • **
  • Posts: 413
  • Country: ru
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1863 on: October 24, 2020, 02:01:36 pm »
Has anybody take them up on their offer? It does say it in quite verbatim:
Quote
The open source software is provided for free. RIGOL uses third-party open source
software subject to the specified licenses. You are entitled to use the open source
software subject to their respective license. If you or any third party wants to obtain
the complete corresponding source code for the software from us, please contact:
RIGOL (SUZHOU) TECHNOLOGIES
E-mail: service@rigol.com
Website: www.rigol.com
This offer is valid for three years after you received the software.

I did ask them for the software, so lets see what happens next :) (but would be nice to know if others already did this  too)

So I never received a reply. So yesterday, I've sent a request to the European office, and got a reply promptly. They asked where I've sent the previous request too, and that they would prepare the files I requested (I requested all sources for all products :p)

They said they'd send them to me on november 17th. No idea why it is taking so long, maybe that's the day they'll open their github.com/rigol repo?

Anyway, fingers crossed!

What a turn! You "blew up the bomb" and you will now be feared in Rigol.  :-DD
But, they can provide the code executed by the processor that runs in the OS. And this is just the user interface, if I'm not mistaken. The main work is done in the FPGA and they are not required to publicate this code.

Probably the Rigol guys are reading this thread. Guys, come out, don't be afraid of open source - third-party firmware that will inevitably appear will make your product even more popular.  :clap: I think people will love your product if you become open. This path was followed by PC-giving the opportunity to independently assemble computers and expand them, thereby sharply breaking away from the closed Apple, which is held in the market of show-offs.  :)

If this thread is not read by Rigol specialists, oliv3r, please pass these thoughts on to them. :)
« Last Edit: October 24, 2020, 02:05:28 pm by S. Petrukhin »
And sorry for my English.
 

Offline oliv3r

  • Regular Contributor
  • *
  • Posts: 121
  • Country: nl
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1864 on: October 25, 2020, 09:33:52 pm »
Has anybody take them up on their offer? It does say it in quite verbatim:
Quote
The open source software is provided for free. RIGOL uses third-party open source
software subject to the specified licenses. You are entitled to use the open source
software subject to their respective license. If you or any third party wants to obtain
the complete corresponding source code for the software from us, please contact:
RIGOL (SUZHOU) TECHNOLOGIES
E-mail: service@rigol.com
Website: www.rigol.com
This offer is valid for three years after you received the software.

I did ask them for the software, so lets see what happens next :) (but would be nice to know if others already did this  too)

So I never received a reply. So yesterday, I've sent a request to the European office, and got a reply promptly. They asked where I've sent the previous request too, and that they would prepare the files I requested (I requested all sources for all products :p)

They said they'd send them to me on november 17th. No idea why it is taking so long, maybe that's the day they'll open their github.com/rigol repo?

Anyway, fingers crossed!

What a turn! You "blew up the bomb" and you will now be feared in Rigol.  :-DD
But, they can provide the code executed by the processor that runs in the OS. And this is just the user interface, if I'm not mistaken. The main work is done in the FPGA and they are not required to publicate this code.

Probably the Rigol guys are reading this thread. Guys, come out, don't be afraid of open source - third-party firmware that will inevitably appear will make your product even more popular.  :clap: I think people will love your product if you become open. This path was followed by PC-giving the opportunity to independently assemble computers and expand them, thereby sharply breaking away from the closed Apple, which is held in the market of show-offs.  :)

If this thread is not read by Rigol specialists, oliv3r, please pass these thoughts on to them. :)

Course the 4 FPGA's are interesting too; but lets treat those as 'hardware' for now :)

once we know the interfaces between the hardware, FPGA and the software, we could even start to re-write the FPGA software :p

But for now, lets first see Rigol uphold the GPL :)
 

Offline S. Petrukhin

  • Frequent Contributor
  • **
  • Posts: 413
  • Country: ru
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1865 on: October 25, 2020, 10:20:01 pm »

Course the 4 FPGA's are interesting too; but lets treat those as 'hardware' for now :)

once we know the interfaces between the hardware, FPGA and the software, we could even start to re-write the FPGA software :p

But for now, lets first see Rigol uphold the GPL :)

I don't know much about licensing. If I'm not mistaken, using Linux with a GPL license requires publishing the source code of running programs? Can we apply to R&S in the same way?  :popcorn:
And sorry for my English.
 

Offline Sergey Astakhov

  • Contributor
  • Posts: 5
  • Country: ru
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1866 on: October 25, 2020, 11:57:01 pm »
I don't know much about licensing. If I'm not mistaken, using Linux with a GPL license requires publishing the source code of running programs?

Nope. It's depends on the type of use of the GPL code.
It's definitely required only if you include some GPL code or static link them.
Simple using GPL program do not impose publishing.
 

Offline Alfgan

  • Contributor
  • Posts: 15
  • Country: lt
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1867 on: November 01, 2020, 07:20:40 pm »
After a who day I managed to upgrade my MSO, thanks everyone for your hard work so that a young engineer like me could get such an amazing scope.

Whole bunch of projects ahead :)
 
The following users thanked this post: uski

Offline luky315

  • Regular Contributor
  • *
  • Posts: 139
  • Country: at
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1868 on: November 16, 2020, 11:32:19 am »
I tried to "have a look" on my DS7014 FW 01.02.00.05 (newest)
SSH is deactivated in this version, but it was possible to reactivate it with the script from mabl
https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg2234076/#msg2234076

unfortunately the root:root login is not working, I only get an acces denied message:
login as: root
root@10.0.0.18's password:
Access denied

admin:rigol won't work either.

Has anyone more infos for this scope?
 

Offline S. Petrukhin

  • Frequent Contributor
  • **
  • Posts: 413
  • Country: ru
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1869 on: November 16, 2020, 11:38:56 am »
They said they'd send them to me on november 17th. No idea why it is taking so long, maybe that's the day they'll open their github.com/rigol repo?

Anyway, fingers crossed!


Tomorrow is the scheduled response date.  :popcorn:
And sorry for my English.
 

Offline srjaynes49

  • Contributor
  • Posts: 11
  • Country: us
  • 70 is the new 50!
Re: Hacking the Rigol MSO5000 series oscilloscopes - Battery Power
« Reply #1870 on: November 16, 2020, 03:59:36 pm »
I have a portable inverter with a fairly large battery.  It's not the same as having an internal battery.  Portable inverter, mine included, are notorious for having very poor A/C waveforms.  They're supposed to be "modified sine-waves" but they look much more like a square-wave when examined.  I hate to subject my equipment to such poor quality mains power.  I have a much older OWON 100MHz, 2-channel scope with battery option.  I'll likely continue to use that instrument in the field for my solar installation consulting.  /Users/stevenjaynes/Pictures/Inverter Waveforms/IMG_4918.jpg
Nothing clever to read here...
 

Offline Sergey Astakhov

  • Contributor
  • Posts: 5
  • Country: ru
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1871 on: November 16, 2020, 04:13:17 pm »
unfortunately the root:root login is not working, I only get an acces denied message:
login as: root
root@10.0.0.18's password:
Access denied

admin:rigol won't work either.

Has anyone more infos for this scope?

Try Rigol201
If password is differs from MSO5x, you can try to crack them, like this - https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg2072749/#msg2072749
« Last Edit: November 16, 2020, 04:14:55 pm by Sergey Astakhov »
 

Offline luky315

  • Regular Contributor
  • *
  • Posts: 139
  • Country: at
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1872 on: November 16, 2020, 04:48:10 pm »
Rigol201 works as password, but the SSH connection is not working: ls is showing an empty root directory.
Something has changed...
 

Offline S. Petrukhin

  • Frequent Contributor
  • **
  • Posts: 413
  • Country: ru
Re: Hacking the Rigol MSO5000 series oscilloscopes - Battery Power
« Reply #1873 on: November 16, 2020, 06:11:38 pm »
I have a portable inverter with a fairly large battery.  It's not the same as having an internal battery.  Portable inverter, mine included, are notorious for having very poor A/C waveforms.  They're supposed to be "modified sine-waves" but they look much more like a square-wave when examined.  I hate to subject my equipment to such poor quality mains power.  I have a much older OWON 100MHz, 2-channel scope with battery option.  I'll likely continue to use that instrument in the field for my solar installation consulting.  /Users/stevenjaynes/Pictures/Inverter Waveforms/IMG_4918.jpg

An uneven sinusoid is unpleasant to the reactive load, which likes harmonic waves. The oscilloscope has a switching power supply, the task of your inverter is just to charge the capacitors after the rectifier in the high part and maintain their charge, supplying energy.

Yes, the curvature of the sinusoid will also interfere with the charging of capacitors. But you don't do in the field, where there is no outlet, where you can't stretch an extension cord - that is, in the open field, laboratory high-precision measurements.  :-//
And sorry for my English.
 

Offline omgoleus

  • Contributor
  • Posts: 12
  • Country: us
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1874 on: November 18, 2020, 03:51:58 am »
Hi All! Just joined so I could post, after spending... well, multiple hours reading the history of this amazing journey.

just reflash the v00.01.03.00.01 build from end of April, and try again.

Probably you got a scope with a v00.01.03.00.01 build from mid may, hence the different checksum.

Thanks for posting this info!

I just got a MSO5074 with that same mid-May version of the v00.01.03.00.01 firmware (listed onscreen as Build:  2020-05-18 11:42:06)
The patch checksums didn't work.

After I rolled back to the April version of the v00.01.03.00.01 firmware (listed on-screen as Build:  2020-03-30 15:56:36), the patching worked!   ;D

Thank you to all who contributed to this effort!  It is impressive and apprecitated!

I also just got a MSO5072 with the mid-May firmware, same number and build timestamp listed above.
I went ahead and used the well-worn ssh enabler, ssh in, use the command line to copy the appEntry file onto a USB stick at /media/sda1 and took it to another computer to do the MD5.
If you have any kind of unix computer (linux or Mac) simply type
$ md5 /Volumes/USB_DRIVE/appEntry
or whatever the appropriate path is for you. md5 should be present by default in most unix-like systems.
MD5 (appEntry) = 783a31ebdc0d4acb7b9dc244155ba1c6
From everything I'm seeing here, it seems like this piece of info should be enough to get the patcher to work? Am I misunderstanding?
I'll try it and post a followup.
Thanks for this amazing community effort!
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf