Author Topic: Hantek - Tekway - DSO hack - get 200MHz bw for free  (Read 2189755 times)

0 Members and 3 Guests are viewing this topic.

Offline Slash200

  • Newbie
  • Posts: 2
  • Country: de
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3025 on: October 07, 2019, 06:07:29 pm »


download from my 1drv, from firmware, version, model folder the proper/latest file.

There is even a way to run firmware from Feb 2018 on hw1007 platform (like i do on my old hw1007),
but it's bit tricky (one have to copy over ssh some libs first, updates can be done only over lan/uart by copying latest only executable file).

Is it possible to you provide a manual how to do the update to the Feb 2018 Firmware?
I have firmware 2.06.3(130425.0) installed at the moment.
 

Offline TateRB

  • Newbie
  • Posts: 1
  • Country: us
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3026 on: October 10, 2019, 11:52:39 pm »
This is my first post here after reading this thread for a while and doing some searching.  In the 100+ pages of this topic, I'm sure I missed what I'm looking for. I already have a 200Mhz scope, but need some help with the firmware and backups.

I followed recommendation from someone on here to email support@hantek.com. They sent me a link to a file (See info below) but no info in it. It leaves me wondering what it is and what is changed from the version that is in the scope now.

After reading here, I really want to do a backup before trying anything with it! I don't really want to brick it or put in some firmware that may improve it (or not) without a way to get back to starting point.

My info displayed on the screen
I got a Hantek MSO5202D back in Feb. 2019
SW Ver:     3.2.35(151208.0)
HW VER:      1020x55778344
Ser No:      T1G/112027xxx
LCD,Front.ts:   3.1.0

The boards in mine are:
PS PCB:            V1.00.2
Main PCB:      Serial MB V1.02 2015/3/8
daughter PCB:   DST-LA-Module_V1.00.3

From reading here I believe that mine is based no the S3C2416 SoC because 27xxx is >15000  :)

File Received from Hantek's support: dst1kb_func_mso5000d_190514.up

Instructions from Hantek:
Please unzip the file and copy the .up file to the root directory of your USB stick. The format of the USB stick is must be FAT32, and the storage space is less than 32G.
Insert the USB stick into the scope and press Utility->Firmware Update to do.

« Last Edit: October 10, 2019, 11:59:28 pm by TateRB »
 

Offline lcfvrn

  • Contributor
  • Posts: 16
  • Country: ua
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3027 on: October 14, 2019, 07:36:16 am »
 

Offline Tugo

  • Regular Contributor
  • *
  • Posts: 117
  • Country: si
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3028 on: November 05, 2019, 09:01:28 am »
I bought DSO5072p and I wanted to do the hack.
The problem is that I cannot do a backup on this newer version. I always get a small size BIN files (around 512k-2M). Root should be over 100MB and I don't get that.
I tried backing up with Tools_P_Model and also with a command line over USB (with a help of DSO-USB-Tool). Nothing worked.

Now I have some questions:
Is there anyone who did a backup of newer DSO5072p?
Is it ok if I would use an old backup version into mine? If yes, is there anybody that has this backup so that I can download it?

Please help.
Thank you.

Best regards,
Tomaž
 

Offline edibg

  • Newbie
  • Posts: 1
  • Country: bg
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3029 on: November 19, 2019, 03:04:05 pm »
Hi there

I have MSO5202D, SW 3.2.35 ( 140312.0 ), HW version 1010X55778340, serial number T1G/012 020XXX  - I want to know is there a option to enable averaging in MATH FFT ? 
I need to use noise source as generator and FTT to check few filters but an option for averaging the results will be helpful.

Also asked hantek support for the last firmware, but for now I do not have any replay. On page previous page chsn posted a firmware for HW Version 1010x55558340 - can I use this file to update my firmware, at least it fixes the terrible cursors in FFT ?

EDIT : Hantek replayed after all, and the software is the same as the one provided from chsn.

« Last Edit: November 21, 2019, 05:56:13 am by edibg »
 

Offline kmarty

  • Newbie
  • Posts: 6
  • Country: cz
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3030 on: November 21, 2019, 02:25:36 pm »
Hi,
I recently bought DSO5072P and successfully read whole thread.
Maybe I write something well known, but I didn't find it on this thread. Anyway it is probably better to write twice than never.

Original (older) DSO5000P has 4 NAND partitions:
Code: [Select]
...
Creating 4 MTD partitions on "NAND":
0x000000000000-0x000000100000 : "Bootloader"
0x000000100000-0x000000300000 : "LOGO"
0x000000300000-0x000000700000 : "Kernel"
0x000000700000-0x000008000000 : "ROOTFS"
UBI: attaching mtd3 to ubi0
...

but new(er) models have 8 MTD partitions:
Code: [Select]
...
Creating 8 MTD partitions on "NAND":
0x000000000000-0x000000100000 : "uboot"
0x000000100000-0x000000180000 : "params"
0x000000180000-0x000000380000 : "logo"
0x000000380000-0x000000400000 : "misc"
0x000000400000-0x000000800000 : "kernel"
0x000000800000-0x000004e00000 : "rootfs"
0x000004e00000-0x000005200000 : "kernel_bk"
0x000005200000-0x000008000000 : "recover"
UBI: attaching mtd5 to ubi0
...

Maybe I am wrong, but anyone who used Tools_P_models.zip as is, without any mods, then just made backup od first four partitions and moreover some of them with wrong size. But since kernel is on mtd4 and "root" partition on mtd5, my guess is that nobody has valid backup (on 8 parttitioned NAND).
Approximate sizes of nandumped files:
uboot - 1MB
params - 512kB
logo - 2MB
misc - 512kB
kernel - 4MB
rootfs - 70MB
kernel_bk - 4MB
recover - 46MB


No idea since this change was made.

My DSO5102P is:
sw version: 3.40.0(190125.0)
hw version: 1010xffff8108
lcd_front_ts: 3.3.0


EDIT:
I tried to make "improved" backup tool for P models.
Basicaly it passes through all mtd partitions found in /proc/mtd and dumps them to USB flash.

It has some flaw because in /proc/mtd is also shown mtd8 which is probably unpacked mtd5 (just guessing) and it fails to dump with:
Code: [Select]
/dev/mtd8: Device or resource busyNevertheles mtd0-mtd7 are dumped (in my case, in 4 partitions it should be mtd0-mtd3) as:
Code: [Select]
mtd0-uboot.bin
mtd1-params.bin
mtd2-logo.bin
mtd3-misc.bin
mtd4-kernel.bin
mtd5-rootfs.bin
mtd6-kernel_bk.bin
mtd7-recover.bin

EDIT2: deleted attachment because there is still some doubts
« Last Edit: November 26, 2019, 03:28:21 pm by kmarty »
 
The following users thanked this post: Tugo

Offline Tugo

  • Regular Contributor
  • *
  • Posts: 117
  • Country: si
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3031 on: November 24, 2019, 06:47:41 pm »
I have the same problem as you.
Also I wrote a couple of post before you but didn't get any feedback.
I don't know if nobody has any problems and don't reply or don't have this new version.
A couple of week ago I got those 8 bin files but I don't know how I would make a JTAG repair if I would need to.
Do you think just those 8 bin files are enough to successfully upload it over JTAG and repair DSO if needed?
Is there anybody else that did that and how did you do it?
THANK YOU!
 

Offline kmarty

  • Newbie
  • Posts: 6
  • Country: cz
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3032 on: November 25, 2019, 12:03:53 pm »
Oh, I didn't go so far. I didn't recover DSO, yet.

I just wasn't satisfied with backup result (which clearly wasn't proper backup - too small files and no visible sign of kernel image content nor rootfs "UBI" header). That's why I looked how to make better backup.

Of course I can't prove that my backup is "working backup", I just checked "rootfs" and "recovery" whether they really are UBI images (thery are), kernel images seems to be valid zImages and that's all at this moment.


Anyway, I don't get some things:
...
OOB will be not dumped, if need it you can edit this tool and remove the -o options from the command line inside.

How to use it (restore):
...
then burn with JTAG the fw_backup.bin file (no OOB blocks inside!) to NAND
...
...
the (dumped) data with OOB blocks (which is necessary for restore over JTAG or the method i've published)
...
it is several times here (yes/no/yes/no/yes/no/...)
So what is true? Shall (usable) backup have OOB blocks or not? And shall have it "bad PEBs" too or not?


I'm not familiar with JTAG flashing, but when fw_backup.bin comes by concatenating of several files, it would IMHO works only when files has exact length as NAND partitions (so it has include bad blocks, because without them the next file/partition would start sooner, at the end of previous partition).
If it is true, the dump with option "-b" (i.e. "--omitbad") is not suitable for JTAG (what for, then?). At this moment, with option "-b", it would work only with dump from NAND with no bad PEBs.
« Last Edit: November 25, 2019, 05:50:09 pm by kmarty »
 

Offline kmarty

  • Newbie
  • Posts: 6
  • Country: cz
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3033 on: November 26, 2019, 03:26:38 pm »
Previous post


OK, I made slightly improved dso5kp_backuptool2.up.

It uses own(tinheads) nanddump* and dump method can be modified using TXT files.
When no '*.txt' file is on USB drive, a README.txt and MTDs-available.txt is created.

MTDs-available.txt shows, well, available MTDs shown in /proc/mtd (except the last one, I still have feeling the last mtd is not "real" mtd).
README.txt has follwing content:
Code: [Select]
- Create file 'oob.txt' when you want dumps with OOB or 'omitoob.txt' when don't. Required.

- Create file 'dumpbad.txt' when you want dump including bad PEBs or 'omitbad.txt' when don't. Required.

- Optionally create file 'mtd.txt' with list of MTD partitions which should be dumped (each on separate line).
  Available MTDs are listed in 'MTDs-available.txt' ("dev:" column).
Option files can be empty (it is its names what matters).
When 'mtd.txt' file is missing, all MTDs are dumped.

After dump a debug.log file is created (contains output of nanddump process).

These options are simply because I'm still not sure which dump is for which purpose (except that "omitoob+omitbad" is good for test on PC) so anyone can choose what kind of dump wants.

Please, let me know if you'll want some other changes.


*) Because /usr/sbin/nanddump makes no difference between "--oob" and "--omitoob".
« Last Edit: November 30, 2019, 12:40:56 am by kmarty »
 
The following users thanked this post: Tugo

Offline tv84

  • Super Contributor
  • ***
  • Posts: 3212
  • Country: pt
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3034 on: November 26, 2019, 04:52:27 pm »
If any of you guys could share, with me, the mtd0-uboot.bin I would be interested in having a look at the bootloader. (1st time I looked at this thread...)

The answers to some of your questions are in that file.

TIA
 

Offline kmarty

  • Newbie
  • Posts: 6
  • Country: cz
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3035 on: November 26, 2019, 05:56:33 pm »
Here it is
 

Offline tv84

  • Super Contributor
  • ***
  • Posts: 3212
  • Country: pt
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3036 on: November 26, 2019, 09:07:35 pm »
(my quick 2 cents...  this may be well known but it doesn't hurt...)

This uboot MTD has 2 partitions (?):

- uboot executable  (load address: 0xC3E00000  size: 0x5A800)
- environment variables script

The uboot executable is easily loadable in IDA and you can see that it has many interesting commands: one of them is "menu".

Examples of uboot "menu" commands:
Code: [Select]
int __fastcall sub_C3E1015C(int a1)
{
  int v1; // r4@1
  const char *v2; // r0@2
  const char *v3; // r0@9

  v1 = a1;
  printf("\r\n#####\t Boot for SKY2416/TQ2416 Main Menu\t#####\r\n");
  if ( v1 == 1 )
  {
    printf("#####     EmbedSky USB download mode     #####\r\n\n");
    v2 = "[1] Download u-boot or STEPLDR.nb1 or other bootloader to Nand Flash\r\n";
LABEL_7:
    printf(v2);
    goto LABEL_8;
  }
  if ( v1 == 2 )
    printf("#####     EmbedSky TFTP download mode     #####\r\n\n");
  if ( (unsigned int)(v1 - 2) <= 1 )
  {
    v2 = "[1] Download u-boot.bin to Nand Flash\r\n";
    goto LABEL_7;
  }
LABEL_8:
  printf("[2] Download LOGO (logo.bin) to Nand Flash\r\n");
  printf("[3] Erase the MISC partion\r\n");
  printf("[4] Download Kernel (kernel.bin) to Nand Flash\r\n");
  printf("[5] Download UBIFS image (rootfs.ubi) to Nand Flash\r\n");
  printf("[6] Download Kernel_bk (kernel_bk.bin) to Nand Flash\r\n");
  printf("[7] Download UBIFS image (recover.ubi) to Nand Flash\r\n");
  printf("[8] normal start!\r\n");
  printf("[9] recover start!\r\n");
  printf("[0] Set the boot parameters\r\n");
  printf("[f] Format the Nand Flash\r\n");
  printf("[a] Download User Program\r\n");
  printf("[c] Choice lcd type.\r\n");
  if ( v1 == 1 )
  {
    v3 = "[n] Enter TFTP download mode menu\r\n";
LABEL_12:
    printf(v3);
    goto LABEL_13;
  }
  if ( v1 == 2 )
  {
    printf("[n] Set TFTP parameters(PC IP,SKY2416/TQ2416 IP,Mask IP...)\r\n");
    v3 = "[p] Test network (TQ2416 Ping PC's IP)\r\n";
    goto LABEL_12;
  }
LABEL_13:
  printf("[r] Reboot u-boot\r\n");
  if ( v1 != 1 && (unsigned int)(v1 - 2) <= 1 )
    printf("[s] Download STEPLDR.nb1 to Nand Flash\r\n");
  printf("[t] Test Linux Image (zImage)\r\n");
  if ( (unsigned int)(v1 - 2) <= 1 )
    printf("[q] Return main Menu \r\n");
  return printf("Enter your selection: ");
}

Code: [Select]
int parameter_menu()
{
  printf("\r\n##### Parameter Menu #####\r\n");
  printf("[1] Set NFS boot parameter \r\n");
  printf("[2] Set Yaffs boot parameter for Standard Linux \r\n");
  printf("[3] Set UBIfs boot parameter for Standard Linux \r\n");
  printf("[4] Set parameter \r\n");
  printf("[5] View the parameters \r\n");
  printf("[d] Delete parameter \r\n");
  printf("[s] Save the parameters to Nand Flash \r\n");
  printf("[q] Return main Menu \r\n");
  return printf("Enter your selection: ");
}

Code: [Select]
int LCD_menu()
{
  printf("\r\n##### LCD select Menu #####\r\n");
  printf("[1] T43\" screen.\r\n");
  printf("[2] A70TN92\" screen.\r\n");
  printf("[3] A104\" screen.\r\n");
  printf("[4] VGA1024768\" screen.\r\n");
  printf("[5] W35\" screen.\r\n");
  printf("[6] VGA640480\" screen.\r\n");
  printf("[r] Reboot u-boot\r\n");
  printf("[q] Return Parameter Menu \r\n");
  return printf("Enter your selection: ");
}

I think that, with this great support from the bootloader, any attempt to flash/recover this machine should be done from inside the uboot prompt interactively.



 
The following users thanked this post: Sigurd, Tugo, kmarty

Offline kmarty

  • Newbie
  • Posts: 6
  • Country: cz
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3037 on: November 28, 2019, 01:08:03 pm »
BTW. Today I found some info about unlocking "new" versions of DSO5000P: Hantek DSO5102P review + 200 MHz bandwidth unlock

The part "However, this doesn't seem to work on newer models - the files revert to original state after reboot" is somewhat familiar to me.


Not tested (yet).

EDIT: OK, I did it. DSO behaved exactly as it is described in "review & BW unlock" and works. Didn't checked the real bandwidth (yet).
« Last Edit: November 28, 2019, 01:30:13 pm by kmarty »
 
The following users thanked this post: trinhvanthien, Tugo

Offline Gcs190

  • Newbie
  • Posts: 8
  • Country: es
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3038 on: November 30, 2019, 07:17:36 pm »
I just bought (and received) a DSO8072E, manufactured in 2018.

- Firmware 3.2.35 (171121.0)
- Hardware 1080x900383eb04
- Serial number DSO180xxxx

To increase the bandwidth I used the DSO-Tools shell. Although the configuration shows that the SD is not enabled, it is perfectly functional, yet I have enabled it by editing i2c.log copied with DSO-Tools to a pendrive, editing it on the PC and copying it back to the device.

However, I would like to make a copy of the nand and the instructions of other models to copy the first 4 partitions I think are not valid here, I show the result of "cat / proc / mtd":

dev             sise       erasesize   name
mtd0:   00100000 00020000 "uboot"
mtd1:   00080000 00020000 "param"
mtd2:   00200000 00020000 "logo"
mtd3:   00080000 00020000 "misc"
mtd4:   00080000 00020000 "kernel"
mtd5:   03200000 00020000 "rootfs"
mtd6:   01400000 00020000 "config"
mtd7:   00400000 00020000 "kernel_bk"
mtd8:   02e00000 00020000 "recover"
mtd9:   02f78000 0001f000  "rootfs"
mtd10: 012a6000 0001f000 "config"

What would be the partitions to use in nanddump?

Best Regards
« Last Edit: November 30, 2019, 08:58:37 pm by Gcs190 »
 

Offline kmarty

  • Newbie
  • Posts: 6
  • Country: cz
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3039 on: November 30, 2019, 11:25:46 pm »
I am no expert about that, but my guess is mtd0 to mtd8.
Double check with NAND partitions output in dmesg (shortly after boot).
 
The following users thanked this post: Gcs190, Tugo

Offline Gcs190

  • Newbie
  • Posts: 8
  • Country: es
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3040 on: December 01, 2019, 07:24:27 pm »
I am no expert about that, but my guess is mtd0 to mtd8.
Double check with NAND partitions output in dmesg (shortly after boot).

Thanks for your contribution. I will post if there is any progress ...
By the way, the card I use is an 8Gb SDHC and it works perfectly.
 

Offline Gcs190

  • Newbie
  • Posts: 8
  • Country: es
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3041 on: December 02, 2019, 07:36:06 pm »
Finally I have been able to backup the first 9 partitions, the last 2 give the same error that @kmarty mentioned earlier, I used a nanddump located in /mnt/sd that has allowed me to do it with -o or without it.

The backup size with -o is 128 MB exact.

All from the DSO-USB-Tools, executing the following commands:

/mnt/sd/nanddump -b -o -f /mnt/sd/uboot.bin /dev/mtd0
/mnt/sd/nanddump -b -o -f /mnt/sd/params.bin /dev/mtd1
/mnt/sd/nanddump -b -o -f /mnt/sd/logo.bin /dev/mtd2
/mnt/sd/nanddump -b -o -f /mnt/sd/misc.bin /dev/mtd3
/mnt/sd/nanddump -b -o -f /mnt/sd/kernel.bin /dev/mtd4
/mnt/sd/nanddump -b -o -f /mnt/sd/rootfs.bin /dev/mtd5
/mnt/sd/nanddump -b -o -f /mnt/sd/config.bin /dev/mtd6
/mnt/sd/nanddump -b -o -f /mnt/sd/kernel_bk.bin /dev/mtd7
/mnt/sd/nanddump -b -o -f /mnt/sd/recover.bin /dev/mtd8

I have taken the nanddump from this thread: https://www.eevblog.com/forum/testgear/hantek-hdg2002b-awg-5mhz-or-100mhz-let_s-see!/ (I think it is from @tinhead).
I attached:

 
The following users thanked this post: soesante

Offline astra2k

  • Newbie
  • Posts: 2
  • Country: lv
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3042 on: December 13, 2019, 05:28:48 pm »
Good day.

dso5102p after unsuccessful upgrade stops  starting, by rx tx and USB no connection .
May be some one have dump file for  is34ml01g084-tli for programmator use.
If it is could help.

Thank you.
 

Offline astra2k

  • Newbie
  • Posts: 2
  • Country: lv
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3043 on: December 14, 2019, 05:14:37 pm »
Hello again.
After I write from other same model dump to nand-flash and connect to plate is successful. Log attached.
889548-0
There is original back up :
Quote
fw_backup.bat
copy /b rootfs.00.bin+rootfs.01.bin+rootfs.02.bin+rootfs.03.bin+rootfs.04.bin+rootfs.05.bin+rootfs.06.bin+rootfs.07.bin+rootfs.08.bin+rootfs.09.bin+rootfs.10.bin+rootfs.11.bin+rootfs.12.bin+rootfs.13.bin+rootfs.14.bin+rootfs.15.bin+rootfs.16.bin+rootfs.17.bin rootfs.bin
copy /b recover.00.bin+recover.01.bin+recover.02.bin+recover.03.bin+recover.04.bin+recover.05.bin+recover.06.bin+recover.07.bin+recover.08.bin+recover.09.bin+recover.10.bin+recover.11.bin recover.bin
copy /b uboot.bin+params.bin+logo.bin+misc.bin+kernel.bin+rootfs.bin+kernel_bk.bin+recover.bin fwbackup.bin
del rootfs.*.bin
del recover.*.bin
fwbackup.bin
How bring this backup back ?
« Last Edit: December 14, 2019, 06:45:49 pm by astra2k »
 

Offline steddyman

  • Newbie
  • Posts: 3
  • Country: gb
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3044 on: December 25, 2019, 06:17:24 pm »
Late to party but picked up a Hantek 5202P cause it was the last one and it was only $269 delivered.

The only issue I have with this is the low memory... is it possible to change the flash memory chip on these so it's more like the "B" models? 

I'm also going to do a portable battery mod to run off 5V cause these are so light, I can take them in the field... they are so low priced I don't mind them being out there.
Hi everyone.  First post but i've been following EEVblog on Youtube and reading this forum for a long time.

I have the same question as the one quoted.  I have just bought a 5102P for an exciting retro project (I'll reveal more soon), and note that there are videos on Youtube from people who have followed this upgrade process, and note that their 5102P reports as a 5202B on the About menu afterwards.

Does that mean the difference in memory between the P and the B versions (P has a lot less) is a license setting?  Or do the upgraded P's now reporting as B's have less memory than a real B?

Thanks
 

Offline steddyman

  • Newbie
  • Posts: 3
  • Country: gb
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3045 on: January 10, 2020, 08:35:47 pm »
Anyone?
 

Offline Tugo

  • Regular Contributor
  • *
  • Posts: 117
  • Country: si
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3046 on: January 13, 2020, 05:58:11 pm »
Where did you find that?
Can you post a link to youtube?

Regarding P and B series: hardware is different, P has less memory and that is why it has just 40k memory point compared to 1M point in B series.
 

Offline steddyman

  • Newbie
  • Posts: 3
  • Country: gb
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3047 on: January 20, 2020, 11:09:53 pm »
Do we know that for sure?  Many scope manufacturers repackage the same model in different variants with only software unlocking certain features?

If we do, is the board the same but the memory just not installed?  Could it be added?  As anyone compared the boards of the two series side by side?

Thanks for the response.
 

Offline R4T

  • Newbie
  • Posts: 5
  • Country: bh
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3048 on: February 23, 2020, 08:17:40 am »
I have found UART (it is next to the USB port on the back) and thanks to this descrption:
https://www.eevblog.com/forum/repair/voltcraft-dso-1102d/msg2036896/#msg2036896
i have managed to fix mine oscilloscope.

Hi Konsul,

I have a DSO-1062D S/N T121**** that arrived as a brick (long story - not my scope!) and has never got beyond the start-up logo - Linux isn't starting:

Freeing init memory: 128K
g_serial gadget: high-speed config #1: Generic Serial config
Kernel panic - not syncing: Attempted to kill init!


I have serial comms, obvs; hitting 'spacebar' works OK and I think DNW will work, though haven't tested that it will actually transmit stuff yet. Are you able to send me a link to a kernel image?

Much appreciated if you can help. I am little irritated with panicky kernels!

Thanks, R4T
R4T

A93RJ/G1HTO
 

Offline R4T

  • Newbie
  • Posts: 5
  • Country: bh
Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
« Reply #3049 on: February 29, 2020, 09:44:23 am »
Summarising where I have got to so far, with a bricked DSO-1062D 'scope:

It falls over at the start-up screen, and to the best my knowledge has never got further than this since new.

I established serial communications after some failures and this shows that it is stopping with a Linux 'kernel panic' as shown in my previous post.

For those in the same situation as me (not much of a clue, but willing to have a go!) I have found:

uart port on Voltcraft DSO-1062D HW 1.01 is at the back of the board, right next to the USB port and is labelled J801.  Mine has a header in it, some will just have holes, no doubt.

The pinout on J801 is (left to right, in the attached picture) 1 nc, 2 GND, 3 RXD, 4 TXD, 5 nc. Remember to connect RXD - TXD and TXD to RXD if this is news to you.  You need a usb to ttl device to communicate, the one that works for me is a DSD Tech SH-U09A with a Silicon Labs CP2102 chip - Windows 10 drivers readily available (bought on Amazon, search 'cp2102 usb to ttl').

Port settings are 115200, 8, n, 1 and you will need a terminal emulator program, such as PUTTY https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html

Once you have serial comms, powering up the scope gives a boot log, which gives a clue about what is going on.  I am completely ignorant of Linux, so the full implications of this are somewhat lost on me, but it is very clear that the kernel is coming to a halt and that I now have to find a way forward that allows me to do stuff with the DSO and correct faults - a simple software update requires running Linux...

What clearly does work is that if I hit the space bar on my desktop as I am switching the DSO on, it will give me the Download Mode:

##### EmbedSky BIOS for SKY2416/TQ2416 #####
This Board: SDRAM is 64MB; LCD display size is: 800 X 480
Press Space key to Download Mod 0!
SD:File System init failed!

#####    Boot for SKY2416/TQ2416 Main Menu      #####
#####     EmbedSky USB download mode     #####

[1] Download u-boot or STEPLDR.nb1 or other bootloader to Nand Flash
[2] Download Eboot (eboot.nb0) to Nand Flash
[3] Download Linux Kernel (zImage.bin) to Nand Flash
[4] Download LOGO Picture (logo.bin) to Nand  Flash
[5] Download UBIFS image (root.ubi) to Nand Flash
[6] Download YAFFS image (root.bin) to Nand Flash
[7] Download Program to SDRAM and Run it
[8] Boot the system
[9] Format the Nand Flash
  • Set the boot parameters
[a] Download User Program
[n] Enter TFTP download mode menu
[r] Reboot u-boot
[t] Test Linux Image (zImage)
Enter your selection:


So, the next plan is to try using these options to see if I can get the DSO going. My first thought was to try loading and testing a zImage using option [t] - but the only zImage I have at the moment is the one on the machine that falls over.

I have not downloaded anything to the scope yet, but I have a version of DNW on my Win10 machine to allow me to do this via usb, with luck.

Now thinking I may have to install ubuntu in a VM and compile a kernel for the DSO - but hoping someone can send me a zImage copy that is known to work on the Voltcraft instrument!!!

I hope this pulls together a few ideas for others who are struggling as much as I am!
R4T

A93RJ/G1HTO
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf