Author Topic: Hacking the Rigol MSO5000 series oscilloscopes  (Read 901789 times)

beatman, JCS666 and 7 Guests are viewing this topic.

Offline Deckardsvr

  • Newbie
  • Posts: 3
  • Country: fr
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1950 on: March 02, 2021, 05:29:58 pm »
Same here, my MSO5074 is fully unlocked, great job people :-+

Fw : 00.01.03.00.01
Hw : 01.01.000
Boot  : 2018.06.27
Build : 2020-05-18 11:42:06

here's what i did, 3 files on a USB Key :
- 'DS5000Update.GEL' file from post #1298
- 'mayBuildPatch.bspatch' and 'patch.txt' files from post #1901 (inside the archive 01_03_00_01_MayBuild_patch.tar.gz)

On the Scope : Utility, System, Help, Local Upgrade
White screen : Success, reboot, Self Cal and voila, nice and easy !
 

Offline sjm

  • Contributor
  • Posts: 14
  • Country: fi
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1951 on: March 04, 2021, 10:43:04 am »
Haha I actually printed these parts, without the "box", black PLA and aligned the probe holder part horizontally on the heatbed!
My CR-6 SE was able to do the overhangs quite okay.

Also, in my opinion, the accessory box should have a thin (1mm?) bottom just to make attaching it easier.
Now it only has side walls, right?

1186100-0
1186104-1

 :)

BR, -sjm
« Last Edit: March 04, 2021, 10:44:49 am by sjm »
 
The following users thanked this post: Grippy, Ogawa Mitsuaki

Online MegaVolt

  • Frequent Contributor
  • **
  • Posts: 910
  • Country: by
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1952 on: March 04, 2021, 11:18:19 am »
 

Offline Gandalf_Sr

  • Super Contributor
  • ***
  • Posts: 1729
  • Country: us
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1953 on: March 05, 2021, 10:55:37 am »
@sjm

Nice job on the 3D prints, they look really clean.  What printer did you use?
If at first you don't succeed, get a bigger hammer
 

Offline sjm

  • Contributor
  • Posts: 14
  • Country: fi
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1954 on: March 05, 2021, 01:26:45 pm »
(Where the heck did my previous reply disappear...)

Anyway, the 3D printer is Creality CR-6 SE and I would NOT recommend it for the faint of heart.
At least, check this out:  https://gist.github.com/Sebazzz/030d21c606413e22cbd77d8df9fb8b17
...aaand this one too:  https://gist.github.com/Sebazzz/ff4d716c8d2ad9bab1e87b3fc4238281

While the printer's overall design and mechanics are well done, there are quite a few problems, quality issues, overlooks, sorta kinda design flaws and all that.
You better prepare for heavy checking, adjusting, disassemblind and maybe some modifications.
That being said, I am happily running the Community Firmware in my printer.

***

Pics of the assembled & attached probe holder follow.

1186988-0
1186992-1

BR, -sjm
« Last Edit: March 05, 2021, 01:29:18 pm by sjm »
 

Offline Ogawa Mitsuaki

  • Newbie
  • Posts: 6
  • Country: jp
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1955 on: March 05, 2021, 03:05:28 pm »
Hello everyone.

I also created a type that can be assembled on the right side of the MSO5000.
Please use "Right-MSO5000_ProbeHolder".

In the JPEG image, the size seems to be different, but the actual size is the same on the left and right.

I also modified him to:
1) Corrected the size of the part that fits in the gap.

2) A 1mm bottom plate has been added to the accessory box. Since the general-purpose type has the same shape, please use the file "Right-MSO5000_AccessoryCase.stl" or "Left-MSO5000_ShapedConnection.stl" if you need it.

Thank you.
« Last Edit: March 05, 2021, 11:59:33 pm by Ogawa Mitsuaki »
 
The following users thanked this post: thm_w, luma, Grippy, sjm

Offline mvn

  • Newbie
  • Posts: 1
  • Country: ru
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1956 on: March 06, 2021, 08:45:46 pm »
Hey!
Does the rising time decrease after unlocking? Or is it determined by the hardware of the model? (In datasheet: MSO5074≤5 ns, MSO5354≤1 ns). I see a 10 MHz square wave on an old oscilloscope(Bandwidth 100 MHz,rising time≤3.5 ns)  and on the MSO5074 after unlocking, there is no difference.
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1722
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1957 on: March 07, 2021, 01:30:16 am »
Hey!
Does the rising time decrease after unlocking? Or is it determined by the hardware of the model? (In datasheet: MSO5074≤5 ns, MSO5354≤1 ns). I see a 10 MHz square wave on an old oscilloscope(Bandwidth 100 MHz,rising time≤3.5 ns)  and on the MSO5074 after unlocking, there is no difference.
What is the source of the 10MHz signal?  If it has 3.5ns it will not get any faster looking at it with a 350MHz or a GHz scope
 

Offline mrTheWheel

  • Newbie
  • Posts: 3
  • Country: nl
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1958 on: March 13, 2021, 09:19:46 am »
I just received a brand new 5072 today and come with the fw ver 01.01.04.08.

Those three files from skander36 are perfectly work.

Enclosed with all the files from skander36 and backup GEL file from TV84.

My workflow are :
(Please read carefully especially handle the same name GEL files).

1. Format the USB Drive (FAT32 Format);
2. Copy the DS5000Update.GEL.backup.doc to the USB Drive;
3. Rename it by delete the "backup.doc" extension;
4. Attach the USB Drive to scope;
5. Press Utility/System/Help/Local upgrade;
6. After finished the screen will have message told you to reboot the scope;
7. Turn off the scope;
8. Attach the USB drive back to your Mac / PC;
9. Copy all the file except the GEL files and folder back to your Mac / PC for your backup;
10. Format the USB Drive (FAT32 Format);
11. Copy another three files to the USB Drive, rename them by remove the ".doc" extension;
12. Attach the USB Drive back to the Scope, turn it on;
14. Wait for the screen shows that USB Drive was attached.
15. Press Utility/System/Help/Local upgrade
16. The screen will turn to white background and follow the instruction to press any keys.
17. After the upgrade process is finished, the scope will reboot.
18. Done! Enjoy!

Please correct me if any mistake or typo. Thanks!

Thank you so much for all of you to contribute here!

Hi All, I did exactly the above but now I have a Scope with all the same options I already had .. but no longer FOREVER but only for a very limited time!

After the first update I did not check but the firmware is still 00.01.03.00.01 (also I can not find a newer firmware version on the Rigol download site..).

I run the backupscript by TV84 but do not have a backup of the original appEntry file ...

Where did I go wrong and is the recoverable?

Please help :-(

Here's a patch for 01.03.00.01.

Before: 2efa4605b83bf1af48bf6736bfae3255
After: 965a689e7e5f29c180db4a2aaf21ce6b

Here is another flavor of patch for 01.03.00.01 that will disable the "phone home" firmware upgrade check in addition to enabling options.

Found this reply and the (01_03_00_01.bspatch file) .. it worked!!!

Thank you all so much!!
« Last Edit: March 13, 2021, 10:03:17 am by mrTheWheel »
 
The following users thanked this post: sjm

Offline hve

  • Contributor
  • Posts: 47
  • Country: nl
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1959 on: March 15, 2021, 05:36:08 pm »
I have sshd by default enabled on the Rigol scope would be interesting to see if we can improve on the external data collection interface.

Currently I use python (pyvisa) to collect traces via the 1Gb ethernet interface and then use pulseview or sigrok to analyse and view the traces. But the process is rather cumbersome due to the amount of data and the inefficiency of the "VISA: virtual instrument software architecture" protocol I assume.

Using the Zync development tools the installation additional software should be possible, maybe for a data collection deamon of some sort...

Are there already people working on some open source extentions to the firmware for this scope?



 

Offline realswift

  • Newbie
  • Posts: 2
  • Country: au
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1960 on: March 17, 2021, 07:42:58 am »
Can confirm patched successfully my brand new MSO5074 with firmware versionn 1.03.00.01 using instructions from post #1901

Thanks to everyone for your efforts.

I will add to the instructions of post #1901 that you need to extract the tar.gz file and put the patch.txt and mayBuildPatch.bspatch into the root of the drive along with DS5000.gel for it to work.

 

Offline ytterligare

  • Regular Contributor
  • *
  • Posts: 81
  • Country: it
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1961 on: March 18, 2021, 08:12:28 pm »

Found this reply and the (01_03_00_01.bspatch file) .. it worked!!!


Thank you, I too was stuck with an md5 error, then I found YOUR message and now everything is ok !   :-+

Thanks to all the people that worked hard for this !

A.
 

Offline Grippy

  • Newbie
  • Posts: 4
  • Country: us
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1962 on: March 21, 2021, 12:22:47 am »
I think one thing this was missing was a badge fix.

Comic Sans since it's mildly sketchy of course, along with Ultravision II,  but you can change that yourself in the PSD attached.

Printed on a normal inkjet on glossy self-adhesive paper off Amazon.
 
 
The following users thanked this post: thm_w, ve2mrx, MegaVolt, serg_77, Ogawa Mitsuaki

Offline quakeman

  • Newbie
  • Posts: 8
  • Country: de
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1963 on: March 27, 2021, 12:44:46 pm »
Currently I use python (pyvisa) to collect traces via the 1Gb ethernet interface and then use pulseview or sigrok to analyse and view the traces. But the process is rather cumbersome due to the amount of data and the inefficiency of the "VISA: virtual instrument software architecture" protocol I assume.

I wrote a little Python Script which can access the scope and control it directly via the SCPI commands. For the moment i can only get a screenshot, the complete buffer of sampled data as bin-file with all relevant settings or do some tests. Instead of pyvisa i use raw socket communication with the scope. My script optionally converts the bin-file in the VCD/CSV format and i mostly use the VCD format to analyze the signal in gtkwave.

But the transfer rate from scope to pc via ethernet ist quite low. I get at max 5MB/s and when continously transfering a large amount of data i get ~3,6MB as mean value. When i transfer the whole 200 MPoints buffer it takes around 55s.

One problem is that i have to split the data into segments if they are larger than a specific amount of Bytes. I experienced that the transfer gets very instable when transferring data larger than  ~13800000 Bytes (try&error). Don't know if this problem ist on the scope or my pc side. So i split the data into segments of 10000000 Bytes and get them from the scope which works reliable.
 
The following users thanked this post: fozzyvis

Offline biased-cold

  • Newbie
  • Posts: 1
  • Country: us
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1964 on: March 28, 2021, 01:55:47 am »
mso7k bspatch for fw 00.01.02.00.06 appEntry based on the typoknig no "phone home" mso5k bspatch.

md5 before patch: b4f877d515927afa48de4c33171eccc2
md5 after patch: 17b882c2bfd08f4e8ec0456916137f7d

 
The following users thanked this post: luky315

Offline mironex

  • Newbie
  • Posts: 8
  • Country: pl
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1965 on: March 31, 2021, 10:25:13 pm »
Hi, I have some questions:
1. This patch is relate to certain version of firmware?
Or it could be use for each version?
What about when Rigol release new version?
2. To rollback patch I should just install once ageing current firmware?
3. Do you now what are these files:
a)  DS5000Update.GEL
b)  appEntry_01_01_04_08.bpatch
are there these files are licenses or executables
 

Offline MartinMajewski

  • Newbie
  • Posts: 6
  • Country: de
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1966 on: April 08, 2021, 10:11:53 am »
Hi there,

would it be possible to summarize the modding process on the first page? I have modded my first MSO5074 a year ago and want to do the same on another one. However, it is a real burden to find the correct post where the files are linked. Please, don't make me and others go through 79 Pages again. Thank you.
 

Offline MartinMajewski

  • Newbie
  • Posts: 6
  • Country: de
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1967 on: April 08, 2021, 10:18:44 am »
Okay, so to get more bookmarks into this overly long thread, this is what I've found:

https://www.eevblog.com/forum/testgear/hacking-the-rigol-mso5000-series-oscilloscopes/msg3105598/?topicseen#msg3105598

This seems like the proper "how-to" summary with links to all files.
 

Offline Cerebus

  • Super Contributor
  • ***
  • Posts: 10576
  • Country: gb
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1968 on: April 08, 2021, 01:01:58 pm »
Hi there,

would it be possible to summarize the modding process on the first page?

No. The way SMF (the forum software) works basically means that the thread's OP needs to edit the 1st message and keep it updated as the thread develops. The thread's OP is a '10 poster' who is barely active and last on in Feb 2021, so the chances of them (1) noticing a PM asking them to do that, and (2) being engaged enough to put the work in, are I'm sorry to say, small.

There are several posts scattered through the thread that summarise the state of the art at that point, but of course you have to go and find those.

Sorry, I know it's not what you wanted to hear. I'm not up to speed on the current state or I'd post a summary. If I get time in the next few days I will, but don't hold your breath.
Anybody got a syringe I can use to squeeze the magic smoke back into this?
 

Online tv84

  • Super Contributor
  • ***
  • Posts: 3213
  • Country: pt
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1969 on: April 08, 2021, 02:06:00 pm »
However, it is a real burden to find the correct post where the files are linked. Please, don't make me and others go through 79 Pages again. Thank you.

 :wtf: Do you prefer to develop the process yourself???

I must be on a good day... here
 

Offline Cerebus

  • Super Contributor
  • ***
  • Posts: 10576
  • Country: gb
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1970 on: April 08, 2021, 03:31:50 pm »
However, it is a real burden to find the correct post where the files are linked. Please, don't make me and others go through 79 Pages again. Thank you.

 :wtf: Do you prefer to develop the process yourself???

I must be on a good day... here

Oh, c'mon. In any of these threads where something useful develops over a long time the useful nuggets get scattered throughout the thread. This thread is almost 2000 messages long, to berate someone because they find trawling through that burdensome (which it is)  is unfair and unreasonable. Just because you know where the good stuff is buried without having to search for it doesn't give you the right to be rude to those who don't and demonstrates a severe lack of empathy - pray that if you have to rely on the kindness of strangers you don't encounter the same attitude.

Props however, for also providing a useful pointer.
Anybody got a syringe I can use to squeeze the magic smoke back into this?
 
The following users thanked this post: MartinMajewski, crgarcia, oldjackbob

Online tv84

  • Super Contributor
  • ***
  • Posts: 3213
  • Country: pt
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1971 on: April 08, 2021, 05:28:57 pm »
FYI to discover the kind of information that the user demanded being handed in a plate requires the equivalent of reading this whole thread dozen of times.

Also, I didn't know where the info was, i just surfed back a few pages. Something that the user finds a real burden to do.

I always hope to rely on the kindness of strangers that, as I, help others without expecting or demanding nothing in exchange.

 
The following users thanked this post: thm_w

Offline db6178

  • Newbie
  • Posts: 3
  • Country: il
  • Wait, am I still here? Why?
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1972 on: April 09, 2021, 08:12:51 am »
I just liberated my new MSO5074 yesterday, FW 01.03.00.01 build 2020-05-18, easy peasy and purring like a pussy.

I've attached the necessary files and describe below what I did for the convenience of others. Nothing new, it all comes from previous posts.

Steps I took to liberate the scope:
  • Verified installed FW is version 01.03.00.01 build date May 18, 2020 (Utility => System => About)
  • Copied three files, that can be extracted from attached .7z archive, to root of empty 8GB FAT32 USB drive
  • Started up scope
  • Inserted drive to front panel USB port
  • Utility => System => Help => Local upgrade
  • "Upgrade system firware?" => OK
  • Let the scope do its thing - takes a minute or two, or five, go with the flow
  • Reboot scope
  • Verified all options now licensed ...forever... (Utility => System =>  Help => Option list)
  • Bob's your uncle
I suppose I shiouuld recalibrate now too, which according to Olliver goes like this:

  • Make sure that the instrument has been operating for at least 30 minutes
  • Disconnect all input channels (including probes)
  • Utility => System => Self-Cal => Start
  • Self calibration takes ~ 35 minutes to complete
  • When complete, reboot the scope
I verified that all options were upgraded ...forever... (notwithstanding what the effects may be of any future official FW updates I may decide to apply). I did not verify that the patch disables the "phone home" firmware upgrade check, but I have no reason to think it doesn't. This patch does not enable the sshd daemon. To ssh as root into the scope, follow mabl's instructions - which needs to be reapplied after each scope reboot whenever you want SSH access.

This is not going to work for you if your installed FW is not version 01.03.00.01 and having build date May 18, 2020. In that case you will need to adjust the patch.txt file in accordance with instructions that can be found in other posts.

Where the files and info came from:

« Last Edit: April 13, 2021, 02:18:18 am by db6178 »
Sometimes it's better to dispose than to fix.
 

Offline db6178

  • Newbie
  • Posts: 3
  • Country: il
  • Wait, am I still here? Why?
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1973 on: April 09, 2021, 08:38:36 am »
« Last Edit: April 10, 2021, 07:54:31 pm by db6178 »
Sometimes it's better to dispose than to fix.
 

Offline keenox

  • Contributor
  • Posts: 34
  • Country: ro
Re: Hacking the Rigol MSO5000 series oscilloscopes
« Reply #1974 on: April 09, 2021, 08:57:49 am »
Hi guys!
I just received my MSO5074. I also got the offer with included MSO5000-BND (which I understand I will receive as a separate license). If I want to try the hack will I lose the included licence? What happens if I switch back to the original firmware? Thanks!
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf