EEVblog Electronics Community Forum

Products => Test Equipment => Topic started by: tinhead on October 24, 2010, 05:01:32 am

Title: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 24, 2010, 05:01:32 am
The topic is about how to hack another one Chinese DSO (Tekway/Hantek) up to 200MHz bandwidth.


-short history

When my Tek TDS754D died some time ago i had to find a replacement. At that time (2009) I ordered few
cheap known china DSOs and tested them in detail:
- UNI-T (UT2102CE)
- Rigol (DS1102E)
- Atten (ADS1102CE)
- Tekway (DST1102B)

Finally i decided to take Tekway DST1102B instead of Rigol DS1102E because :
(ATTEN and UNI-T was at that time simply useless crap)

- 7" high quality display (Innolux AT070TN83 V1) with 800 x 480 resolution
- display viewing angle designed for "on a shelf above the workbench" use
- DPO-like functionality
- 2500 wfrms/s update rate
- Linux OS on good known Samsung ARM S3C2440 SoC
- modern firmware with lot of unique (in the <1k USD DSO price class) features

Tekway call these model "Tekway DSO 2.0 Platform", and yes, there was "DSO 1.0 Platform" in 2008-2009
http://www.tekwayins.com/product.asp?ArticleID=7 (http://www.tekwayins.com/product.asp?ArticleID=7)
but that completely different gear (with 2.5k memory depth, 320x240 display resolution and TEK TDS2000 like firmware)

In the meantime there are as well Hantek DSOs/Handhelds using that Tekway DSO 2.0 platform, as well some rebadged
models (some made by Tekway, other by Hantek) from Extech, PCE, Voltcraft, Protek, ICEL, AKIP, Redsea, Zhongce, etc !!!


-what inside Tekway/Hantek

i have reverse-engineered the hardware and made schematics:

 -hw0 (produced from Dec 2009 to Feb 2011)    ready
  https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg56754/#msg56754 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg56754/#msg56754)
 
 -hw1005 (produced from Feb 2011 to Jun 2011)    ready errata in work
 
 -hw1007 (produced Jun 2011 to xxx 2013 , DSOs and MSOs with S/N < 15000)    ready
  https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg214613/#msg214613 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg214613/#msg214613)

 -handheld hw1001 (S/N < 15000)    in work
 
 -DSO5xxxP hw1.0    on to do list I've made alrady schematics of the new input circuit: 
  https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg264085/#msg264085 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg264085/#msg264085)


- before you hack made a backup - if you wish
 
It make sense to make backup of whole NAND flash (firmware+setting) before any hack attempt.
I have prepared easy to use "firmware update" files, simply choose your model, download the tool
and read the included Readme.txt to proceed.

For all following "B" model benchtop DSO with S/N < 15000
 - Tekway DST1062B, DST1102B, DST1202B
 - Hantek DSO5062B, DSO5102B, DSO5202B
 - Voltcraft DSO-3062C, DSO-1062D
 - Zhongce DF1202CL, DF1102CL, DF1062CL
 - Protek 3006, 3010, 3110, 3120

https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg35683/#msg35683 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg35683/#msg35683)


For all following "BM/BMV" models benchtop DSO with S/N < 15000
 - Hantek DSO5062BM, DSO5102BM, DSO5202BM
 - Hantek DSO5062BMV, DSO5102BMV, DSO5202BMV

https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg111917/ (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg111917/)


For all following "B" and "D" models benchtop MSO with S/N < 15000
 - Tekway MST1062B, MST1102B, MST1202B
 - Hantek MSO5062D, MSO5102D, MSO5202D
 - Voltcraft MSO5062B, MSO5102B

https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg185074/#msg185074 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg185074/#msg185074)


For all following "B", "BV" and "S" models handheld DSO with S/N < 15000
 - Hantek DSO1062B, DSO1102B, DSO1202B
 - Hantek DSO1062BV, DSO1102BV, DSO1202BV
 - Hantek DSO1062S, DSO1122S, DSO1152S
 - Extech MS6060, MS6100, MS6200

https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg86825/#msg86825 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg86825/#msg86825)


For all following "P" models benchtop DSO with ANY S/N
 - Hantek DSO5072P, DSO5102P, DSO5202P
 - Falcon DSO100C1G (this one http://falconindia.biz/products_desc2.aspx?id=120 (http://falconindia.biz/products_desc2.aspx?id=120) )

https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg264194/#msg264194 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg264194/#msg264194)

For the cute old Tekway DST1000/DST3000/DST4000 please PM me.

For all others (not listed above) DSO/MSO/Handhelds  (e.g. with S/N > 15000) please use integrated command line tool "nanddump", do a search in thread to check how that might work.


When you need to restore previously created backup, check the Readme.txt from backup tools above and/or following links:
https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg75015/#msg75015 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg75015/#msg75015)
http://www.mikrocontroller.net/articles/Tekway_MSO (http://www.mikrocontroller.net/articles/Tekway_MSO)


- the bandwidth hack

As far i know, all DSO/MSO/Handhelds since 2009 (so yes, even the latest "P" models) can be hacked.
To hack the bandwidth all you need to do is to rename one file in DSO root directory
- when you have 60MHz/70MHz model (no matter if benchtop or handheld) you must rename /dst1062b to /dst1202b
- when you have 100MHz model (no matter if benchtop or handheld) you must rename /dst1102b to /dst1202b
- when you have 150MHz model (no matter if benchtop or handheld) you must rename /dst1152b to /dst1202b

then after second reboot (yes, you have to reboot twice) the new bandwidth (and when you decided to go
up to 200MHz bandwidth the 2ns/DIV timbase as well) will be available.

To do this you can use that tool (then simply choose what bandwidth you wish and click on "Change bandwidth")

https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg91877/ (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg91877/)

or that tool (then go to "Shell F2" tab and execute there for example  "mv /dst1062b /dst1202b")

http://peter.dreisiebner.at/dso-usb-tool/ (http://peter.dreisiebner.at/dso-usb-tool/)

or you can connect via UART to DSOs Linux shell and work from there. You will of course need to open the enclosure
and connect to PC via UART to USB converter (e.g. ebay CP2102 UART to USB etc). For the UART pinout check pictures below.


- optional - the bootlogo hack

you might wish to change the boot screen logo as well (not necessary for bandwidth hack).

For all following "B" model benchtop DSO with S/N < 15000
- Tekway DST1062B, DST1102B, DST1202B
- Hantek DSO5062B, DSO5102B, DSO5202B
- Voltcraft DSO1062D, DSO3062C
- Zhongce DF1202CL, DF1102CL, DF1062CL (i don't have logos from Zhongce)

Download, when missing, all the boot logos
http://www.mikrocontroller.net/attachment/136103/all_logos.zip (http://www.mikrocontroller.net/attachment/136103/all_logos.zip)
and copy to yor DSOs /logo directory

You will have as well to edit /logotype and /logotype.dis files. The best is to use "vi" editor on the DSO shell,
you might as well copy these two file to PC and edit there. All you need is to change the DSO name from
what it is to what you wish to see, e.g. for Hantek DSO5062B you need to change in /logotype the dst1062b to dst1202b
and in /logotype.dis the hantek_DSO5062B to hantek_DSO5202B.

If you have questions - use search, or ask in this thread.


For all other following benchtop and handheld models with S/N < 15000
- Hantek Handheld DSO1062B/BV, DSO1102B/BV, DSO1202B/BV
- Hantek Handheld DSO1062S, DSO1102S, DSO1152S
- Tekway MSO MST1062B, MST1102B, MST1202B
- Hantek MSO MSO5062D, MSO5102D, MSO5202D
- Voltcraft MSO MSO5062D, MSO5102D, MSO5202D
- Hantek DSO DSO5062BV/BMV, DSO5102BV/BMV, DSO5202BV/BMV
- Extech MS6060, MS6100, MS6200

you have to edit a specific execuatable (as the logo is compiled into it), all necessary tools are here:
https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg200040/#msg200040 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg200040/#msg200040)

For all other following benchtop and handheld models with S/N > 15000 (exept "P" models, they can have ANY S/N)
- Hantek DSO5072P, DSO5102P, DSO5202P
- Hantek MSO5074F, MSO5074FG
- Tekway/Hantek MSO7000B series
- Tekway/Hantek DSO/Handheld/MSO with S/N > 15000 and hw1.0 or hw1.10 (so all with S3C2416 SoC)

All i can tell for now is that the boot logo seems to be compiled into display driver


-optional - frontend hack (models with SN < 15000)

It seem that since some time Hantek/Tekway/Voltcraft is using not that great combination of resistors in frontend, it was nearly perfect originaly but they changed it to what is today. Saving everywhere (or for reason to gie all hackers bad respons?) ^^
No matter, we can fix it easily, for more information and lot of measurment results see
https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg212054/#msg212054 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg212054/#msg212054)


-optional - EEPROM licensing hack
sometimes one need or wish to enable some extra things, like LAN, more memory, video, etc. The licensing for these functions is stored in EEPROM, see here how to make use of them:
https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg467313/#msg467313 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg467313/#msg467313)


-bug list

see attached - note, this list is not up to date, i have to work on it :\[/s]


-SDK, LabView, other hardware hacks, tons of other things

simply check the post below

-Hantek's OneDrive

https://onedrive.live.com/?#cid=6C60A056648D9011 (https://onedrive.live.com/?id=6C60A056648D9011%21107&cid=6C60A056648D9011&group=0)



-and finally my OneDrive with hacks, firmwares, tools, etc:

my 1drive share .. PM me if does not work for you (https://1drv.ms/f/s!AiY46m4u993EgSg4ZGmBREL7uZRz)

If you like what there and wish to support me/my hacks, then feel free to donate,
there is PayPal "donate button" when you click on my "home website" icon @ my eevblog forum profile.

Title: Re: Another one china DSO hack - 200MHz
Post by: tinhead on October 24, 2010, 05:03:32 am
:ALL OTHER HACKS and INFOS:


If you wish to connect to the UART, check attached pictures

all other hacks temp removed ... in last 4yrs there was so much said, hacked and released that one can easily get lost. Wht i'm doing now is to sort all that knownledge, and split into models/hw version sections. All that information will be the posten here and of course on my OneDrive (see above post for link).

Title: Re: Another one china DSO hack - 200MHz
Post by: Hypernova on October 24, 2010, 07:48:11 am
Nifty, you would think the other vendors have learned a thing or two after the rigol incident.
Title: Re: Another one china DSO hack - 200MHz
Post by: cybergibbons on October 24, 2010, 09:44:46 am
Thanks - that's really interesting.

As far as I know, both the GW-Instek and Rigol scopes deal with all of the display logic in the FPGA, so have quite limited ability. The UI on these scopes looks a lot more fancy.
Title: Re: Another one china DSO hack - 200MHz
Post by: saturation on October 24, 2010, 10:48:54 am
Awesome job, tinman and welcome the eevblog, what a great way to start.

Don't know much about tekway, but now its worth looking in to.



Title: Re: Another one china DSO hack - 200MHz
Post by: saturation on October 24, 2010, 11:11:27 am
I have a sneaking suspicion letting the hack info continue and not be suppressed is actually good for business. 

Consider:

If sales of the Rigol 1052E double, it would compensate for each single lost sale of the 1102E

But If the 1102E is really just a factory hacked 1052E, then the manufacturing cost to make either scopes is equal, so they are not losing any sales at all, just making more.  The excess inventory of 1102E can always have their case stickers changed and firmware reburned to downgrade them into 1052E.  So the only cost to make an 1102E over a 1052E is labor to do the firmware and casing decal changes.

If the owner bricks his scope and asks for factory repair, the unit is not under warranty, and now not only did they make a sale on a scope, they can charge for repair

Rigol now has a bigger reputation, free publicity, more people own it, know its electronics intimately and thus have a better appreciation of its capabilities, and will consider buying their other products now too

So, its a win win.

If you look at the trends in electronics, there is a market of makers and hackers so manufacturers are addressing their wants.  Hakko's new iron, the FX888, Agilent's DMM skins, Hakko 936 skins etc., certainly isn't directed towards professional electronics.

(http://www.hakko.com/english/oshirase/images/090330_04.jpg)

(http://cp.home.agilent.com/upload/cmc_upload/CLP_HHSkin2.jpg)

(http://c0456141.cdn.cloudfiles.rackspacecloud.com/images/large/hak/hak936-rc-r.jpg)

Which prompted Fluke to make this ad:

http://register.fluke.com/globalforms/goyellow/index.html (http://register.fluke.com/globalforms/goyellow/index.html)

(http://register.fluke.com/globalforms/goyellow/images/index_032.jpg)



Nifty, you would think the other vendors have learned a thing or two after the rigol incident.
Title: Re: Another one china DSO hack - 200MHz
Post by: Hypernova on October 24, 2010, 12:10:42 pm
I have a sneaking suspicion letting the hack info continue and not be suppressed is actually good for business. 

Consider:

If sales of the Rigol 1052E double, it would compensate for each single lost sale of the 1102E

But If the 1102E is really just a factory hacked 1052E, then the manufacturing cost to make either scopes is equal, so they are not losing any sales at all, just making more.  The excess inventory of 1102E can always have their case stickers changed and firmware reburned to downgrade them into 1052E.  So the only cost to make an 1102E over a 1052E is labor to do the firmware and casing decal changes.

If the owner bricks his scope and asks for factory repair, the unit is not under warranty, and now not only did they make a sale on a scope, they can charge for repair

Rigol now has a bigger reputation, free publicity, more people own it, know its electronics intimately and thus have a better appreciation of its capabilities, and will consider buying their other products now too

So, its a win win.

If you look at the trends in electronics, there is a market of makers and hackers so manufacturers are addressing their wants.  Hakko's new iron, the FX888, Agilent's DMM skins, Hakko 936 skins etc., certainly isn't directed towards professional electronics.

Nifty, you would think the other vendors have learned a thing or two after the rigol incident.

Well, that certainly reminds me of the conspiracy theory that Microsoft was loose on copy protection in the early years to ensure that they get the market share in first.
Title: Re: Another one china DSO hack - 200MHz
Post by: PsI-On on October 24, 2010, 01:08:38 pm
Hi tinman,

Can you post some more pictures please?

Looks like I'll be picking one of these up in China next month ;o)

Thanks.
Title: Re: Another one china DSO hack - 200MHz
Post by: Mechatrommer on October 24, 2010, 01:28:34 pm
cant find it in ebay, just the 200MHz version. maybe they are pulling all 100MHz back to upgrade to 2.04.SP1 FW? ??? just speculation, not related to anyone who is still live or dead.
Title: Re: Another one china DSO hack - 200MHz
Post by: PsI-On on October 24, 2010, 01:42:51 pm
They're listed on www.taobao.com (http://www.taobao.com)

Be warned, checking prices on taobao.com will leave you feeling sick every time!

-P
Title: Re: Another one china DSO hack - 200MHz
Post by: tinhead on October 24, 2010, 02:00:56 pm
cant find it in ebay, just the 200MHz version. maybe they are pulling all 100MHz back to upgrade to 2.04.SP1 FW? ??? just speculation, not related to anyone who is still live or dead.

a month ago electrolab.com had some 100MHz versions. It can have something to do with the rumoured Hantek/Tekway deal,
but it can be just whatever. The distributor in Germany have still enough in stock, and of course taobao is full of sellers anyway.


Nifty, you would think the other vendors have learned a thing or two after the rigol incident.

Well, there are many competitors on low cost DSO market. That why probably every company have to reduce the costs.
You can hack almost all low cost DSOs, the question for me was only "which SOC/µC inside, which OS".

With Samsung S3C2440 and Linux 2.6.13 was easy thing, much easier than with TI DSP or pure FPGA based DSOs.
Title: Re: Another one china DSO hack - 200MHz
Post by: tinhead on October 24, 2010, 02:15:54 pm
maybe they are pulling all 100MHz back to upgrade to 2.04.SP1 FW? ???

i don't think that they will every try. By design the DSO is using these few config files, as this is Linux these can be always changed.
Of course Tekway/Hantek can try to disable UART port, JTAG can't be disabled. But even if, you will be still able to make backup
of the firmware via JTAG, to "patch" it on your mini2440 board and to restore it back to DSO.

The only chance is to change the PCB (the low pass filter around AD8370), which costs more money.
EDIT: Actually there are some differences between model,  however a hacked 60Mhz DSO can be still good up to 180MHz (-3db)
which is i think good value.
Title: Re: Another one china DSO hack - 200MHz
Post by: slburris on October 24, 2010, 02:24:41 pm
Any idea if Tekway makes Hantek's handheld oscilloscopes too?

Do you know if the Hantek DSO-1060 could be modified to be
a DSO-1200?  This would change a 60Mhz scope into a 200Mhz scope.

Great information, I bet there's going to be tons of discussion
about this topic!

Scott
Title: Re: Another one china DSO hack - 200MHz
Post by: tinhead on October 24, 2010, 02:27:59 pm
Hi tinman,

Can you post some more pictures please?

Looks like I'll be picking one of these up in China next month ;o)

Thanks.

sure, some PCB pics attached. As you can see the PCB is very nice routed, these guys did good job

For the outside pics check the tekway/hantek websites.

Btw, the DSO is fanless, which is good.
Title: Re: Another one china DSO hack - 200MHz
Post by: tinhead on October 24, 2010, 02:33:29 pm
Any idea if Tekway makes Hantek's handheld oscilloscopes too?

Do you know if the Hantek DSO-1060 could be modified to be
a DSO-1200?  This would change a 60Mhz scope into a 200Mhz scope.

Great information, I bet there's going to be tons of discussion
about this topic!

Scott


the other Hantek DSOs are made by Hantek itself (or others), but definitely not by Tekway.

Tekway started to made DSOs 3years ago and they never had handheld based devices.
Title: Re: Another one china DSO hack - 200MHz
Post by: slburris on October 24, 2010, 02:34:55 pm
I've posted a pointer to this thread over at RCGroups site.

Scott
Title: Re: Another one china DSO hack - 200MHz
Post by: Mechatrommer on October 24, 2010, 02:53:24 pm
whats with the blank capacitor? top left near the samsung? 4th picture
Title: Re: Another one china DSO hack - 200MHz
Post by: PsI-On on October 24, 2010, 03:10:37 pm
Looks like it's probably some sort of sounder, I can see what might be a transistor drive circuit feeding off the negative pin!

Maybe battery backup?!
Title: Re: Another one china DSO hack - 200MHz
Post by: tinhead on October 24, 2010, 03:18:55 pm
whats with the blank capacitor? top left near the samsung? 4th picture

That's where the buzzer was soldered. During debuging the uncofigured Samsung SOC was making me crazy
(driving the buzzer high), so i removed it.

Title: Re: Another one china DSO hack - 200MHz
Post by: PsI-On on October 24, 2010, 03:34:41 pm
I wonder if you can redirect the terminal session to the 7" LCD and use a USB keyboard (that would make an awesome hackable scope)
Title: Re: Another one china DSO hack - 200MHz
Post by: tinhead on October 24, 2010, 05:15:55 pm
I wonder if you can redirect the terminal session to the 7" LCD and use a USB keyboard (that would make an awesome hackable scope)

The DSO is like a friendlyarm 2440 board, with FPGA and ADC connected via I/O.
Afaik you will have to recompile the 2.6.13 kernel to redirect terminal session to the TFT.

So in principle yes, with recompiled kernel you can redirect the terminal to TFT, use a usb keyboard
(or on screen like xvkbd with touch screen if you connect one) and if you need the DSO functionality
you have only to start the DSO app from the shell (/dso.exe). Of course the /dso.exe line in rcS
need to be commented out.
Title: Re: Another one china DSO hack - 200MHz
Post by: tinhead on October 24, 2010, 05:26:06 pm
attached fast rise time 10MHz (1ns rise time) test signal measurement.

It is not really perfect example just because the 50Ohm termination
and cable loss, but already 1.8ns which give you an idea what's possible.
Title: Re: Another one china DSO hack - 200MHz
Post by: PsI-On on October 25, 2010, 11:03:09 am
Tinman, have you tried this hack on the DST1062B?

Do you know if the DST1062B has the same components as the DST1102B?

Thanks.
Title: Re: Another one china DSO hack - 200MHz
Post by: ngkee22 on October 25, 2010, 02:11:27 pm
I did find this one for sale, but it is already at 200Mhz.

http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=270568563296&ssPageName=STRK:MEWAX:IT (http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=270568563296&ssPageName=STRK:MEWAX:IT)
Title: Re: Another one china DSO hack - 200MHz
Post by: tinhead on October 25, 2010, 03:56:12 pm
I did find this one for sale, but it is already at 200Mhz.

http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=270568563296&ssPageName=STRK:MEWAX:IT (http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=270568563296&ssPageName=STRK:MEWAX:IT)

yes, right now "Electrolab" have only 200MHz, but they had 100MHz during last months, e.g.

http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=270603792546 (http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=270603792546)

However they never had 60Mhz versions, maybe just question of profit ?
They known Measurements Equipment provider, just ask them for 60Mhz.


Probably the same (pprofit question) is for "GoodluckSell"

http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=280552591608 (http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=280552591608)

If you compare the price on ebay on taobao.com you will see that a 60Mhz Tekway/Hantek should costs about 400-450$.
Title: Re: Another one china DSO hack - 200MHz
Post by: tinhead on October 25, 2010, 05:09:57 pm
Tinman, have you tried this hack on the DST1062B?

Do you know if the DST1062B has the same components as the DST1102B?

Thanks.

Afaik yes, EDIT: check the later in this thread published schematic
Title: Re: Another one china DSO hack - 200MHz
Post by: tinhead on October 31, 2010, 11:15:11 pm
from Rigol thread ...

that's the self-calibration unit, it runs with 125Mhz.
 
Do you mean that it has a 125Meg oscillator on board which is used for the sole purpose of selfcalibration???



I'm replying here just because this have nothing to do with Rigol:

Tekway is using 100MHz XO, however due only 4 ADCs in last 3 highest timebase ranges the FPGA PLL output is set to 125MHz.
Exact the same clock is used for normative-actual value comparison, there are some presets (files) in the firmware for pulse, edge and overtime compare.
Title: Re: Another one china DSO hack - 200MHz
Post by: tinhead on November 13, 2010, 04:42:42 pm
another user in forum recieved Hantek DSO, he reported already that the jtAG pin header is not soldered, so you will have to solder 20pin 2mm header or just to use attached firmware update which will do firmweare backup to USB stick for you.

How to use :

1. unzip the attached fw2dump.zip. You will find 3 files (dst1kb_9.99.9_cli(111111.0).up, nanddump and asgard)
2. unplug any USB cables from your DSO first!
3. copy dst1kb_9.99.9_cli(111111.0).up to usb stick (delete all other files from stick!), put into DSO and execute the firmware updated.
4. after update switch off DSO and unplug the stick, switch on the DSO back. The firmware version will be not changed, but thats ok
5. copy the "nanddump" and "asgard" to usb stick (delete everything else from the stick!), plug into DSO and wait 10-15 sec.
6. plug the DSO via USB to your PC. If the LED on your stick didn't started to blink, unplug the USB cable and plug it again after
   additional 15 seconds (this is because how the usb agent is working on the DSO)
7. the LED on usb stick will start now to blink, the DSO is dumping itself to the usb stick. This can take up to 5 minutes, so just be patient.
   Sometimes the usb agent on DSO is a bit slow/srtange acting, so watch your LED - if not blinking retry just and wait few secs more between step 6 and 8
8. After the 5 mins unplug the stick first, then the usb cable (or the selfdump will start again)


On the usb stck the "asgard" file has been now renamed to "asgard.done", this is just protection to now execute it over and over again.
You will find 3 additional files :
boot.bin (thats the vivi bootloader)
kernel.bin (the kernel)
root.bin (root FS)

All dumps are done with NAND OOB blocks, so we can restore them any time later if we need to original version.

This step can be executed on all devices, Hantek/Tekway or Protek, it is modifying only usg.agent and works even with older Tekway DSOs (A series which have kernel 2.4), so we good for a while. it is kernel 2.4 and 2.6 compatible, and it will not break linux itself.

for Tekway/Hantek DSO user:
you can use the asgard script to whatever you like, the DSO will now enumerate for attached usb ticks, if any present for file named asgard on it, if present it will execute the asgard scipt. Of course be careful with copying/moving things.

for Hantek DSO users:if you have such dump, zip/rar it and post it here, so i can then prepare a hacked firmware updated to allow you to "update" your DSO to 200MHz without UART/terminal/JTAG, like for Tekway DSOs.


General note:
if one of my updates is stopping to work, with firmware update error then you can be sure nothing broken on your scope.
Then probably Tekway or Hantek did changed the gpg magic and we have dump firmware over JTAG to find the magic again.

if during the hack the DSO is reporting that the firmware is older than installed or didn't worked, then let me know your firmware version number - then i will have to increase the number too.

EDIT: I updated this firmware-selfdump hack to version 9.99.9 making it firmware versiond indenepndant (works with all known Tekway/Hantek firmware versions now)



updated, go to here:
https://www.eevblog.com/forum/index.php?topic=1571.msg35683#msg35683 (https://www.eevblog.com/forum/index.php?topic=1571.msg35683#msg35683)
Title: Re: Another one china DSO hack - 200MHz
Post by: tinhead on November 14, 2010, 02:48:56 am
here we go ... again

i got Hantek firmware dump from another user here in forum (thx G***!) and installed on my Tekway DSO, it is booting without any issues.

With this firmware i was able to prepare a hack which will switch your Hantek DSO5062B or DSO5102B to DSO5202B
- so again we have 200MHz bw for free - this time for Hantek DSO's


All you need to do is to copy the attached dst1kb_2.06.9_cli(101031.0).up to USB stick and run a firmware update on your Hantek DSO.

If you have higher version of firmware on your Hantek DSO already, please make a firmware dump with JTAG or with:

https://www.eevblog.com/forum/index.php?topic=1571.msg23807#msg23807 (https://www.eevblog.com/forum/index.php?topic=1571.msg23807#msg23807)

and post it here or send me a message


Check here (generic hack for all versions):
https://www.eevblog.com/forum/index.php?topic=1571.msg24564#msg24564 (https://www.eevblog.com/forum/index.php?topic=1571.msg24564#msg24564)


There is only one thing missing, Hantek didn't included boot logos for all models, so you DSO will still shows up during boot your old model name, but who really cares about boot logo.

The System Status shows up right version, the TTScope is displaying 200MHz model and of course we have 200MHz bw and 2ns time base.

Some technical things:

Hantek have newer verion of firmware as Tekway so few things changed, if you wish to play with JTAG/UART way of hacking you will have
(additionally to all those steps described in my first post) to edit another one file in root directory (logotype.dis).
You will need to edit it and change whatever you see there to "hantek_DSO5202B". If you don't do it the the bootlogo will
be not loaded, but your DSO will still boot-up.

What's new in Hantek firmware 2.06.2 (compared to Tekway 2.05.xx)
- French/German/Chinese/English/Japanese menu language supported instead of only Chinese/English
- CSV export to USB (up to 40k samples only, but better than nothinig)
- a bit better export menu (much easier to recognize what your saving)
- more colors for menu/submenu/background (black/green/pink/yellow/blue instead of only blue)
- trigger works now stable up to 300MHz (of course after hacked to 200MHz bw)

What Hantek made worse than Tekway:
- TTScope virtual panel is crippled, the developer who did changed the virtual TFT size was probably blind or not aware that
   this DSO have wide-screen TFT ... anyway, i did changed the affected EnglishResource.dll, so just unzip the attached
   into your TTScope\Language directory (overwrite the org. file)


For Tekway DSO users:
i will publish in the next days an 2.06.2 firmware update for Tekway DSOs, this update will change your Tekway DSO to Hantek DSO,
so you will be able to use the new features too. Most files seems to be same, but i need to compare and debug them a bit before i post anything.


check here :
https://www.eevblog.com/forum/index.php?topic=1571.msg24564#msg24564 (https://www.eevblog.com/forum/index.php?topic=1571.msg24564#msg24564)

Wondering if Hantek will ever publish the firmware source code, it is GPL licensed so normaly they should do it.
It would be easier to compile own hacks. my current dev environment is a mix of some Samsung S3C2440 boards, no easy to match memory mappings
and other things to compile for example WiFi modules (i think would be nice to be able to save CSV/waveforms/snapshots over WLAN)

.
Title: Re: Another one china DSO hack - 200MHz
Post by: g***! on November 14, 2010, 09:43:13 am
Hello there, great article....I got a bit of a buzz when I switched my computer on and saw my firmware running on your Tekway!
I did notice that TT Scope's driver does not want to party with windows 7!
I have not tried the downlosd yet....but will do very shortly....I wonder will this cause a surge in Tekway/Hantek sales. 
It certainly appears a much safer mod to do than the Rigol one!  I will post the photos of the internals later, need to tidy them a bit first....now i'm off to install some firmware!
Title: Re: Another one china DSO hack - 200MHz
Post by: g***! on November 14, 2010, 10:03:22 am
Yes tinhead, there is now a 200Mhz DSO5102B!  I will let the scope warm up for an hour or so, and then re-adjust the scope probes.  Should I do a recallibration as well?
Title: Re: Another one china DSO hack - 200MHz
Post by: saturation on November 14, 2010, 11:10:15 am
FANTASTIC!  You guys are awesome, this is what real EE is all about!
Title: Re: Another one china DSO hack - 200MHz
Post by: tinhead on November 14, 2010, 03:50:49 pm
Yes tinhead, there is now a 200Mhz DSO5102B!  I will let the scope warm up for an hour or so, and then re-adjust the scope probes.  Should I do a recallibration as well?

even if all model are doing self calibration with 125MHz, you still need to recalibrate the DSO.

The TTScope, isn't signed for Win7 ? i believe it is.

and yeah, thanks for the firmware dump, enjoy the 200Mhz BW!



Title: Re: Another one china DSO hack - 200MHz
Post by: g***! on November 14, 2010, 06:43:15 pm
I will try reinstalling the TT scope, in case I have made some fundamental error in the install....I get a no scope connected error, has to be a driver error of some sort. 
Are the Tekway/Hantek firmwares directly interchangeable, what I mean is, if say Tekway brought out an update, could it be applied to a Hantek without having to be modified? 
Many thanks again for the massive effort yesterday, I got quite a surprise when I switched on the PC...to find a working firmware update! ;D
Title: Re: Another one china DSO hack - 200MHz
Post by: tinhead on November 14, 2010, 11:14:17 pm
Many thanks again for the massive effort yesterday, I got quite a surprise when I switched on the PC...to find a working firmware update! ;D

you welcome

Are the Tekway/Hantek firmwares directly interchangeable, what I mean is, if say Tekway brought out an update, could it be applied to a Hantek without having to be modified?  

Before i answer this question let's take a look what inside both DSO:

standard linux dirs:
/bin - no diff
/dev - no diff
/etc - no diff (which is funny, Hantek device is still tagged as Tekway in many scripts)
/lib - new in firmware 2.06.2 is libiconv.so.2.3.0, to support the language switching
/sbin - no diff
/usr - no diff

custom DSO dirs:
/dso/app - no diff
/dso/driver - lcd.ko and fpga.ko updated fw 2.06.2
/usr/bin/gpg149arm - no diif (there is the gpg binary responsible for firmware decryption)
/logo - no diff (there are icns used by DSO UI)
/OurLanguages - this one is new for fw 2.06.2, it contains text files with translation for menu, so in principle you can edit it and add your language
The fw 2.05.xx have hardcoded english/chinese, no really smart but typical for early firmwares

in root dir:

dso.exe - that's the DSO UI, will be started by rcS
fpga.exe - this is a executable used to load/check FPGA
fpga.conf - a very interessting configuration file, depends on settings the FPGA is slower/faster or using different i/o (like for 500MSs models)
help.db - SQLite DB containing help for UI
dn.rbf - FPGA configuration, different for all model families (250MSs models have own, 500MSs have own and 1GSs have own)

and some already mentioned files used for model identification.

The 2.06.2 update script was (you will find this in your fw dump, NAND have always one or more older updates "saved" but visible only in dump):

[DST type]dst1000b
[soft version]2.06.2(101028.0)
[type]123
[cmd] mv /usr/up/tekwayup_client/dso.exe /dso_update.exe
[cmd] rm /logo/ -rf
[cmd] mv /usr/up/tekwayup_client/logo /
[cmd] mv /usr/up/tekwayup_client/dso-lcd.ko /dso/driver/dso-lcd.ko
[cmd] rm /OurLanguages -rf
[cmd] mv /usr/up/tekwayup_client/OurLanguages /
[cmd] mv /usr/up/tekwayup_client/libiconv.so.2.3.0  /lib/libiconv.so.2.3.0
[cmd] rm /lib/libiconv.so.2
[cmd] ln -s /lib/libiconv.so.2.3.0 /lib/libiconv.so.2
[cmd] mv /usr/up/tekwayup_client/help.db /help.db
[cmd] rm /logotype.dis
[cmd] mv /usr/up/tekwayup_client/logotype.dis /logotype.dis
[cmd] rm /sys.inf
[cmd] mv /usr/up/tekwayup_client/sys.inf /sys.inf
[cmd] rm /cur_acq.type
[cmd] sync
[cmd] sync
[cmd] sync
[end]

So in principle yes, currently both firmwares are directly interchangeable - but - that might change.
I would say, don't just download and try to update your DSO, if something geos wrong you will brick your DSO.


For sure, if you have fw backup/dump and JTAG cable you will be able to unbrick your device, but just be warned.

A better way is to check first what inside new firmware, to evaluate it and then to update.
A firmware test can be done on DSO itself :
- connect via UART
- terminate dso.exe (by ctrl+C)
- insert USB stick with decrypted update files (they will be mounted to /mnt folder)
- insmod new .ko modules (if necessary)
- execute new files and test how the device works

Same can be done on Samsung S3C2440 dev board (like FriendyArm 2440), but it is better to do it on DSO just because of
the fact that DSO have all the other hardware (ADCs, FPGA)

To decrypt firmware update:
- download the .up file from Hantek/Tekway website
- download and install GPG
- run gpg -d dstxxxxxxx.up > dstxxxxxx.gz (when asked for password type 0571tekway)
- gunzip the dstxxxxxx.gz
- untar the resulting file (it is dstxxxxxx. )
- untar again the resulting DST1000_4000.tar

To create new/custom firmware
- tar the folder "tekwayup_client" and the upend file to dst1000_4000.up.tar
- tar the resulting dst1000_4000.up.tar to DST1KB_version.tar and remove the .tar extension
  (for example dst1kb_2.06.8(101231.0) )
- Gzip the DST1KB_version to DST1KB_version.gz and remove the .gz extension
- encrypt with gpg -c DST1KB_version (when asked for key type 0571tekway)
- Rename the resulting DST1KB_version.gpg to DST1KB_version.up

What important to know :
- if you type/use wrong password or Tekway/Hantek change the password, your DSO will still not get bricked because the update will get canceled
- use "move" instead of "copy" in "update" script (or chmod 777 filename after copy)
- ensure that whatever inside folder "tekwayup_client" is listed in upend file too
(this means the "upend" file is a list of files and folders contained in "tekwayup_client" folder - but not subfolders and subfiles!)


There is still not clear situation who is ODM and who OEM of these DSOs, which didn't really matter for us.
We know the hardware is identical and we know we can use both firmwares, so who ever write a better firmware - we can use it.



Title: Re: Another one china DSO hack - 200MHz
Post by: tinhead on November 18, 2010, 05:37:44 pm
another one screenshot ...
My previous bw measure was done with 1ns rise time generator, which is normally not sufficient (due cable, terminator loss).

So here we are, i did build the 250ps generator (well, at least on my 500MHz scope it shows 550ps rise time)
and made some measurments on the Tekway/Hantek DSO. The result is 1.3ns which is equal to 270MHz -3db bw.

EDIT: on the snapshot is 1.250ns, so it is between 1.25ns and 1.30ns, but the worst value counts.
Title: Re: Another one china DSO hack - 200MHz
Post by: saturation on November 18, 2010, 06:00:09 pm
NICE, tinman, what did you use generate 250ps?


another one screenshot ...
My previous bw measure was done with 1ns rise time generator, which is normally not sufficient (due cable, terminator loss).

So here we are, i did build the 250ps generator (well, at least on my 500MHz scope it shows 550ps rise time)
and made some measurments on the Tekway/Hantek DSO. The result is 1.3ns which is equal to 270MHz -3db bw.
Title: Re: Another one china DSO hack - 200MHz
Post by: alm on November 18, 2010, 07:38:45 pm
So here we are, i did build the 250ps generator (well, at least on my 500MHz scope it shows 550ps rise time)
and made some measurments on the Tekway/Hantek DSO. The result is 1.3ns which is equal to 270MHz -3db bw.
Did you verify the amplitude with your 500MHz scope? Rise time is measured from 10% to 90% of the signal amplitude, so if the scope shows a lower amplitude due to the attenuation of the high-frequency component, the apparent rise time will be higher. A step is much easier to use than a pulse for this reason.
Title: Re: Another one china DSO hack - 200MHz
Post by: tinhead on November 18, 2010, 07:40:16 pm
NICE, tinman, what did you use generate 250ps?


the Linear Technology, App Note 47.

I didn't had LT1073 but 1073-5 so changed some Rs values in 90V power supply part, but the rest is the same.
Title: Re: Another one china DSO hack - 200MHz
Post by: saturation on November 18, 2010, 08:20:07 pm
Wonderful, and thanks so much for appending the app note pdf too.

NICE, tinman, what did you use generate 250ps?


the Linear Technology, App Note 47.

I didn't had LT1073 but 1073-5 so changed some Rs values in 90V power supply part, but the rest is the same.
Title: Re: Another one china DSO hack - 200MHz
Post by: tinhead on November 18, 2010, 08:50:04 pm
Did you verify the amplitude with your 500MHz scope? Rise time is measured from 10% to 90% of the signal amplitude, so if the scope shows a lower amplitude due to the attenuation of the high-frequency component, the apparent rise time will be higher. A step is much easier to use than a pulse for this reason.

well actually this is like apple and pear, a scope with higher BW will show evtentually** higher amplitude
On the other side 10%/90% are from measured signal amplitude and not the real amplitude.

The only common BW limiter on both DSOs is 20MHz, with such setting both are displaying ~2.5ns rise time and 1Vp.

My result is exact what Tekway/Hantek did specified for 200MHz models, so it isn't something new, it is just a proove of this hack.


** The 250ps rise time are far beyond both DSOs bandwitdh, at least 4-6GHz DSO is necessary to measure such
high rise time/amplitude signal with accuracy lower than 5%.
Title: Re: Another one china DSO hack - 200MHz
Post by: alm on November 18, 2010, 09:13:08 pm
well actually this is like apple and birnes, a scope with higher BW will show evt. higher amplitude. On the other side 10%/90% are
from measured signal amplitude and not the real amplitude.
Just to elaborate why I think amplitude matters:
Assume a really fast (say 250ps 10-90 rise time on a sampling scope with a much faster rise time than that) pulse, and a step (eg. 1kHz square wave, which is much slower than the edge rate) with the same rise time. The step will have a rise time of about 1.75ns on a 200MHz Gaussian scope.

Now replace the step by a pulse. The rise time won't be 1.75ns, since the total pulse with is narrower than that. The pulse will start to fall before the scope's vertical amplifier reached the top. Did the scope just become faster?

Using pulses for bandwidth measurement is hard, in my opinion, which is why Jim Williams made an improved version with charge line. It should be fine for relative tests, but I wouldn't rely on the actual numbers.
Title: Re: Another one china DSO hack - 200MHz
Post by: tinhead on November 18, 2010, 10:59:56 pm
It should be fine for relative tests, but I wouldn't rely on the actual numbers.

Well yes, i did posted before measurments done with 10MHz/1ns rise time square generator, it was still good enough (1.8ns)

The AN47 pulse generator can be easy build by everybody, the rise time will probably vary a bit (but still much faster than most low costs DSOs are)
so a good base for relative comparison of such DSOs.

Title: Re: Another one china DSO hack - 200MHz
Post by: eecfans on November 19, 2010, 11:32:50 am
Really interesting ha. they are useful info for me, because I may have to find a new replacements, too. Tks.
Title: Re: Another one china DSO hack - 200MHz
Post by: tinhead on November 19, 2010, 03:11:11 pm
Finally i got official answer from Tekway and Hantek.
Both companies have same shareholders and since few months sharing development team (welcome to "cost reduction" world),
but they still independant, so both will continue to produce DSOs under own company name.


The SDK kit (for both Hantek and Tekway) is scheduled to be released end of Jauary 2011,
the firmware source code (which is under GPL and have to be published) will be not published,
this seems to be GPL licensing misunderstanding so i will try to explain again both companies what's about.

Hantek have currently no 60MHz devices in stock, just because they not started yet with the production,
the answer is "60MHz device will follow".

Tekway have some 60MHz in stock (over official distributors - see my first post, or directly),
but it seems that there are more people asking for 100/200MHz devices than for the 60MHz.

Personally i think both companies have issues due the components market situation to get components in time, so probably
they prefer to sell higher models to earn more, but that's fair enough.
Title: Re: Another one china DSO hack - 200MHz
Post by: GeoffS on November 19, 2010, 03:19:36 pm

The SDK kit (for both Hantek and Tekway) is scheduled to be released end of Jauary 2011,
the firmware source code (which is under GPL and have to be published) will be not published,
this seems to be GPL licensing misunderstanding so i will try to explain again both companies what's about.

Send an email off to this group (http://gpl-violations.org/about.html). They'll do the chasing up about GPL compliance.
Title: Re: Another one china DSO hack - 200MHz
Post by: tinhead on November 19, 2010, 04:51:28 pm

The SDK kit (for both Hantek and Tekway) is scheduled to be released end of Jauary 2011,
the firmware source code (which is under GPL and have to be published) will be not published,
this seems to be GPL licensing misunderstanding so i will try to explain again both companies what's about.

Send an email off to this group (http://gpl-violations.org/about.html). They'll do the chasing up about GPL compliance.

for now i did analyzed first what under GPL and what not, made a list of all files/modules/libraries and send it to Tekway/Hantek
with a full description. Now it would be easier to understand for them.
Depends on answer i will of course contact gpl-violations.org and/or softwarefreedom.org.
Title: Re: Another one china DSO hack - 200MHz
Post by: Gall on November 19, 2010, 08:42:00 pm
Do they link their proprietary executables statically and/or with GPL (not LGPL) libraries? If yes, they have to publish sources or at least linkable object files of these executables as well.
Title: Re: Another one china DSO hack - 200MHz
Post by: tinhead on November 19, 2010, 09:56:11 pm
Do they link their proprietary executables statically and/or with GPL (not LGPL) libraries? If yes, they have to publish sources or at least linkable object files of these executables as well.

All proprietary executables are dynamically linked, except customized gpg (which will be used for automatic firmware decryption during update), but as the secret key is already known should be not a bid deal to publish the source. Tekway/Hantek know about this hack
and about what we already know/looking for.

Title: Re: Another one china DSO hack - 200MHz
Post by: tinhead on November 19, 2010, 11:27:17 pm
HACK UPDATE
I did updated some stuff and changed all ref. postings to have all hacks/tools in single place

--------------------------------------------------------------------------------------------------------------------------------

Firmware update for Tekway users
This is inofficial version, it will update all Tekway DSO to firmware version 2.06.2
- French/German/Chinese/English menu language supported instead of only Chinese/English
- CSV export to USB (up to 40k samples only, but better than nothinig)
- a bit better export menu (much easier to recognize what your saving)
- more colors for menu/submenu/background (black/green/pink/yellow/blue instead of only blue)
- trigger works now stable up to 300MHz (of course after hacked to 200MHz bw)
- zoom up to 1000x
This firmware update is replacing only binaries, nothing will be hacked or changed.
How to use :
- download attached do_firmware_Tekway_2.06.2.exe and do_firmware_Tekway_2.06.2.r00
(it is packed with WinRAR just because of size limit here in forum)
- unrar or execute it and copy dst1kb_2.06.2_cli(101028.0).up to your USB stick and proceed with firmware update
- reboot, recalibrate your DSO

removed since never firmware available
--------------------------------------------------------------------------------------------------------------------------------

Generic Tekway hack
Hack is now updated to work with any Tekway firmware versions, it will change your DSO model but it will not anylonger replace any binary files
How to use:
- download one of the attached version
   do_Tekway_DST1062B.zip - if you wish to change your DSO to DST1062B (60MHz bw)
   do_Tekway_DST1102B.zip - if you wish to change your DSO to DST1102B (100MHz bw)
   do_Tekway_DST1202B.zip - if you wish to change your DSO to DST1202B (200MHz bw)
- unzip and copy the dst1kb_9.99.9_cli(111111.0).up to your USB stick and proceed with firmware update
- reboot and recalibrate your DSO

--------------------------------------------------------------------------------------------------------------------------------

Generic Hantek hack
Hack is now updated to work with any Hantek firmware versions, it will change your DSO model but it will not anylonger replace any binary files
How to use:
- download one of the attached version
   do_Hantek_DSO5062B.zip - if you wish to change your DSO to DSO5062B (60MHz bw)
   do_Hantek_DSO5102B.zip - if you wish to change your DSO to DSO5102B (100MHz bw)
   do_Hantek_DSO5202B.zip - if you wish to change your DSO to DSO5202B (200MHz bw)
- unzip and copy the dst1kb_9.99.9_cli(111111.0).up to your USB stick and proceed with firmware update
- reboot and recalibrate your DSO

I don't have DSO5062B and DSO5202B boot screen logos, so your DSO will always show during boot DSO5102B.
If you have such logos please let me know. If you wish to change the DSO5102 logos (see attached hantek_logo.zip content)
to "proper" name, then do it and send them back to me (so i will update again this hack).
I would do it, but i prefer to spend my time on other things :)


I got the proper logos for DSO5102B and DSO5202B, for DSO5062B is did my own. Generic hacks in below updated now.


not working anylonger, use UART to hack

--------------------------------------------------------------------------------------------------------------------------------

Firmware Dump utility
as already posted here:
https://www.eevblog.com/forum/index.php?topic=1571.msg23807#msg23807 (https://www.eevblog.com/forum/index.php?topic=1571.msg23807#msg23807)
this tool has been again updated


again updated to work with fw 2.6.x and higher?

https://www.eevblog.com/forum/index.php?topic=1571.msg35683#msg35683 (https://www.eevblog.com/forum/index.php?topic=1571.msg35683#msg35683)

--------------------------------------------------------------------------------------------------------------------------------

Firmware Update Counter Reset
This tool will reset fw-update and DSO-usage counter to 0 on your Hantek/Tekway DSO.
How to use:
- download attached do_ResetUpdateCounter.zip
- unzip and copy the dst1kb_9.99.9_cli(111111.0).up to your USB stick and proceed with firmware update
- reboot and recalibrate your DSO

NOTE: This tool is deleting sys.inf from your DSO root file system. All currently known firmware versions are re-creating this file during reboot,
however be warrned that i'm not responsible for any modifications done by you.


not working, use UART to delete sys.inf

--------------------------------------------------------------------------------------------------------------------------------

ALL Hacks/tools has been tested on both Tekway and Hantek DSOs (DST1xxxB series and DSO5xxxB series) with all currently known
firmware versions, however i'm still not responsible for any resulting issues (warranty, bricked DSO, whatever).


If you brick your DSO with one of in above posted hacks/tools you will still be able to un-brick it via JTAG. "ARM JTAG cable for H-JTAG"
costs 10$, e.g. ebay item 300453556955
If you don't want to play with JTAG and wish to unbrick your DSO, unsolder the NAND memory (K9F1208xxx) and send it to
me (i'm located in Europe ...), i can definitely reprogram the NAND with working firmware (however you will have to know how
to unsolder/solder such IC). A empty NAND will not work, there is some factory calibration data stored, so it is always recommended to have a original firmware backup (created via JTAG/UART or with the "Firmware Dump utility" hack/tool)
Title: Re: Another one china DSO hack - 200MHz
Post by: tinhead on November 20, 2010, 12:07:20 am
attached hack/tools zips ... (updated Nov 28th)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: saturation on November 20, 2010, 11:34:27 am
Just perusing tinheads post, again, awesome!  :D

He's changed my view of the Hantek/Tekway completely.  A worthy equivalent to the Rigol hack threads for higher bandwidth scopes.

Thank you!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mechatrommer on November 20, 2010, 03:52:28 pm
and again.. sorry if i miss something... where can get this hackable DSO model? still didnt show up in my ebay :( ...can the hack update... be updated in the 1st post for ease of referencing? (just a suggestion) as i said.. i may have missed something due to lack of supply. :-\
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: g***! on November 20, 2010, 06:00:18 pm
and again.. sorry if i miss something... where can get this hackable DSO model? still didnt show up in my ebay :( ...can the hack update... be updated in the 1st post for ease of referencing? (just a suggestion) as i said.. i may have missed something due to lack of supply. :-\

I bought mine from GoodLuckBuy.com (Hantek DSO5102B)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: dfnr2 on November 21, 2010, 02:48:54 am
Very interesting.  I'm looking for a scope to fill in while I repair my workhorse scope, a Lecroy 9834 with no video.  I had just been about to pull the trigger on the $415 Instek 1062A, or the $800 big brother 1102A.

This thread caught my eye.  Do you care to do a review on the Hantek scope?  In particular, can this scope be controlled via the USB port?  One thing that I like about the Instek is that it has a documented programming interface, and you can interface it to your own software (such as NI Labview, or Python/VISA).  Does the Tekway have a similar interface?

How does the triggering, display, etc. compare?  How is the brightness/crispness/viewing angle?

Also, anyone had experience ordering from Goodluckbuy.com to the US?  How long did it take?

Many thanks!

Dave
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: .o:0|O|0:o. on November 21, 2010, 03:05:16 am
Is the Tekway Chinese?

.o:0|O|0:o.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 21, 2010, 03:57:53 pm
Is the Tekway Chinese?

.o:0|O|0:o.

yes it is
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 21, 2010, 07:10:56 pm
This thread caught my eye.  Do you care to do a review on the Hantek scope?  In particular, can this scope be controlled via the USB port?  

One thing that I like about the Instek is that it has a documented programming interface, and you can interface
it to your own software (such as NI Labview, or Python/VISA).  Does the Tekway have a similar interface?

How does the triggering, display, etc. compare?  How is the brightness/crispness/viewing angle?


Oki, small Hantek DSO5202B/DSO5102B/DSO5062B - Tekway DST1062B/DST1102B/DST1202B review.

Display :

The DSO is using InnoLux 7" TFT (AT070TN83 V1) with LED backlight,
It is a good display wth high contrast/brightness and do have anti glare.
Viewing angle is 6 o'clock, no differences to 3 o'clock and 9 o'clock. Only in 12 o'clock isn't that good (see display datasheet for more information)
The DSO is using native resolution (800x480), no double/quad pixeling tricks like with UNI-T CEL series.

A very good thing is the DPO-like display persitency, from 0.2s to infinite (Instek Accumulate is like infinite persistency on Hantek/Tekway, so no compare)

There is additionaly TFT refresh rate selectable between 30, 40, 50 aud automatic (which is i think 20 or less) frames/sec.
You can "see and feel" the refresh speed and the waveform changes.


Menu:

Menu on the right side can be switched on/off (in single window mode), it is always on in double window mode.
Menu-speed is fast, a little-bit slower in long memory mode but still ok (this is new in current firmware version, it was amazing slow in fw 2.05.x)


Trigger:

All standard triggers available :
Edge (Falling/Rising)
Pulse (Pos/Neg, "<" ">" "=" "!=", 20ns to 10s pulse width)
Video (All/Odd/Even/LineNumber/AllLines - PAL/SECAM/NTSC)
Slope ("<" ">" "=" "!=", Time and V/sec scale)
Over Time (Pos/Neg, 20ns to 10s)
Alternate (Edge, Pulse, Over Time, Video trigegr per chan available)

Of course all triggers have additialy LF reject, HF reject, Noise reject, AC or DC coupling options
and Ext, Ext/5, AC50

Autoset have additionaly multicycle / singlecycle rising/falling edge waveformtriggers.


Memory :

Sample memory can be switched between 4k, 40k, 512k or 1M (in real time sampling mode) up to 200µs time base (2ms record time)
It will change automatically to 512k in 200µs and higer time base if you in run mode.
In eq. sampling mode you can't change sample memory, however it seems to be using the real time sampling mode values.

Currently there is funny firmware bug (fw 2.06.2), with some specific combination of run&stop/single/time base change/memory length
the DSO is showing wrong data. This means don't use single shot with long memory (everything over 40k) in higher time base than 200µs.
Run/Stop is displaying proper data, single shot too as long you don't change time base. I did send a error log/description to Hantek/Tekway today.

Zoom in double window mode up to 1000x, with holdoff 100ns to 10s. You can set multiple markers, switch or play between markers.
Not sure if the Zoom is more like Rigol or more like Instek (see instek review), wating for some screenshots from Instek users
to compare it - however it would be hard to compare due dual window function available on Hantek/Tekway devices.

Math/FFT:

only CH1+CH2, CH1-CH2, CH2-CH1, CH1xCH2 available.

FFT only Hanning, Flatop and Rectangular with zoom x1 to x10.

In FFT mode no long time memory available anylonger in fw 2.06.2, it was before but i would say good change,
because the DSO wasn't really responsible in FFT with 1m memory mode.

Math/FFT in dual or single window mode available


Measure menu:

11 values can be measured (Freq,Period, Mean, Pk-Pk, Cycl. RMS, Min, Max, Rise time, Fall Time, Pos Width, Neg Width)
however only 8 displayed at same time.


Cursor:

In dual or single window mode available, Time or Voltage but not both at same time.


Other:

Timescale 2ns to 40s, i wish 1ns would be available (instek 1ns to 50s)
Avarage sample 4/8/16/32/64/128 (instek have 2 and 256 too)
XY mode with dual window available (XY and XY atr same time)
Ref. A or B can be only saved to internal memory, setup localy or USB, waveforms to USB only.
CSV export currently only 40k samples, more only via PC software.
The DSO is fanless, however you can add fan if you like, there is everythign prepared for.


Programming:

Well, all functions can be controlled via USB, but there is no SDK published yet (scheduled for end of Jan 2011).




Also, anyone had experience ordering from Goodluckbuy.com to the US?  How long did it take?

ask user g***!, i got my directly from Tekway but from what i understood it was a week (?)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: g***! on November 21, 2010, 07:58:58 pm

Also, anyone had experience ordering from Goodluckbuy.com to the US?  How long did it take?

Many thanks!

Dave

Hi there Dave!

My buying experience was as follows:

From initial order to dispatch was 5 days (probably waiting on stock)
Transit time was 6 days, I'm not in US, but from looking on the website US delivery is typically about 5 days....hope this helps!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 21, 2010, 09:56:21 pm
And here some pictures of Hantek DSO5102B ( thx g***! )

Interessting that some components has been changed (input and trigger circuit) between my
old Tekway (which is very early version) and current Hantek.

All JTAG and I/O extender port pin headers are not soldered, only UART port still there.

All ADCs got now small heatsink.

EDIT : as reported some ppl got heating/death chan issues in the past because of missing heatsink's on ADCs.
I'm not a friend of fanless devices, so i never got any issue because my very early device have small fan.

If you bought a Hantek/Tekway DSO without heatsink on ADCs, send it back! That's probably old stock
and the distributor have to send you a new one.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kramer on November 21, 2010, 10:34:42 pm

Also, anyone had experience ordering from Goodluckbuy.com to the US?  How long did it take?

Many thanks!

Dave
Hi everyone!
Same question - different destination ;)

Anyone had experience ordering from Goodluckbuy.com to Germany?  How long did it take?

Many thanks!

kramer
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 21, 2010, 11:35:38 pm
Same question - different destination ;)
Anyone had experience ordering from Goodluckbuy.com to Germany?  How long did it take?

Ich ...

... not DSO but other things. I did selected DHL (was about 20$ extra fee) and got my items within 8 days (due Customs),
normally it should be up to 5 day only ...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: app-note on November 22, 2010, 10:32:17 am
Excellent step-by-step guide ! I could convince my buddy to sacrifice his Tekway DST1102B for a tear-down and patch session over the weekend.
That's the kind of learning experience I am missing in class.
Tinhead, can you shed some light on how you managed to extract the gpg key ? Might be of interest to other projects as well.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: dfnr2 on November 22, 2010, 10:34:47 am
Great!  Have you by any chance tried out the USB port on the back?  With the drivers installed, does it look like a serial port? Does it implement an SCPI command subset?  

Also, a question about the responsiveness.  I am borrowing a Tek TDS 2024B, and I'm kind of disapointed in the sluggish response to adjustments and button pushes, and the weak passive LCD screen.


Regards,

Dave
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 22, 2010, 01:55:48 pm
Tinhead, can you shed some light on how you managed to extract the gpg key ? Might be of interest to other projects as well.

If I told you it I'd have to shoot you ...

Before i did any debugging i did checked every binary for "tekway" string (to find out which of them are proprietary).
The first match in gpg was the hash key, so there was no need to disassemble/debug the gpg binary anylonger
.. look at the screenshot.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 22, 2010, 03:30:02 pm
Great!  Have you by any chance tried out the USB port on the back?  With the drivers installed, does it look like a serial port? Does it implement an SCPI command subset?  

hard to answer, the PC driver seems to be proprietary partially based on cypress ezusb bulk (but there is no ezusb chip,
(so they just copy/pasted too much ...), service description SvcDesc="Hantek usbtmc".

"usbtmc" looks good for me, but i wasn't able to do anything with it.

I think we have to wait until the SDK (and probably new driver) has been released.


Also, a question about the responsiveness. 

it is very fast with fw 2.06.2, with lower fw versions was depends on which menu and sample/memory settings between "real time" and "real death"
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 23, 2010, 01:12:46 pm
Currently there is funny firmware bug (fw 2.06.2), with some specific combination of run&stop/single/time base change/memory length
the DSO is showing wrong data. This means don't use single shot with long memory (everything over 40k) in higher time base than 200µs.
Run/Stop is displaying proper data, single shot too as long you don't change time base. I did send a error log/description to Hantek/Tekway today.

got nice answer, Hantek/Tekway will release asap updated firmware. Btw, they already aware about this hack ^^
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: dfnr2 on November 23, 2010, 04:13:58 pm
Well, I needed a scope this week, so although I had been leaning toward the instek before finding this thread, I decided to go with the Hantek unit, in part due to the higher bandwidth, and bigger screen at a cheaper price.  I'll post my thoughts in the review section once I've had time to play with it.

I ordered mine from Emtesco/Morton Controls in Colorado.   They appear to be the US official distributor for these Hantek scopes, and also stock some other interesting cheap scopes: https://www.mortoncontrols.com/index.php?main_page=index (https://www.mortoncontrols.com/index.php?main_page=index).  BTW, it sounds as if they will be offering some Black Friday deals on these units.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: saturation on November 23, 2010, 04:37:34 pm
Pray tell, what is your final price like, after S&H, and taxes?

Well, I needed a scope this week, so although I had been leaning toward the instek before finding this thread, I decided to go with the Hantek unit, in part due to the higher bandwidth, and bigger screen at a cheaper price.  I'll post my thoughts in the review section once I've had time to play with it.

I ordered mine from Emtesco/Morton Controls in Colorado.   They appear to be the US official distributor for these Hantek scopes, and also stock some other interesting cheap scopes: https://www.mortoncontrols.com/index.php?main_page=index (https://www.mortoncontrols.com/index.php?main_page=index).  BTW, it sounds as if they will be offering some Black Friday deals on these units.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: dfnr2 on November 23, 2010, 06:02:24 pm
Pray tell, what is your final price like, after S&H, and taxes?

I needed the scope this week (couldn't wait for the Black Friday sale) so I ordered the 100MHz DSO5102B.  It was $630, plus $37 for 2-day shipping, so total $667. No tax since I'm in Texas. Of course, ground shipping would have been much cheaper.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Adama on November 25, 2010, 08:40:22 am
@tinhead,

(Servus) ;-)

As you are the mastermind re. this hack and the scopes involved, what type of scope would you choose/recommend for someone like me, who is just about to buy a new scope (with limited budget but bigger amibitions ;-) ) ?
Hantek, Tekway ???

My understanding aber reading the entire thread is that the tekway offers the better screen and resolution, but the innards seem to be all the same?

Any comment and suggestions are highly appreciated!

Kind regards,

Adama
(from probably one of the most southern parts of Germany) ;D

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 25, 2010, 12:51:40 pm

what type of scope would you choose/recommend for someone like me, who is just about to buy a new scope ith limited budget


i don't know you needs, so i can't recommend anything.

As you from Germany please check first this link

http://www.mikrocontroller.net/articles/Oszilloskop (http://www.mikrocontroller.net/articles/Oszilloskop)

(for those who don't speak german, that's article describing scope types, the diffs - for all those who don't know what they have to look for)


My understanding aber reading the entire thread is that the tekway offers the better screen and resolution, but the innards seem to be all the same?


The "innards" that's just a piece of electronic parts, with same parts you can build a lightsaber, scope or coffeemaker.
Talking about DSOs innards, even it they "same" without software they still not doing anything special.

Tekway/Hantek are 100% identical, just because both companys belongs to same shareholder,
so no matter which of them you take, it would be still the same.

Tekway/Hantek input and trigger circuit is almost same as Rigol is using, so no matter which of them you take,
you still have same input/trigger quality (at least from hardware point of view)

The major difference between Rigol and HanTekway is display, some features in firmware and the UI responsible µC.
I've choose HanTekway because of the diff's, other ppl might don't need bigger display or more DPO-like functionality
but need USB-GPIB adapter, so they will take Rigol.

About the competitors (UNI-T, ATTEN) - well, almost everythign said already, they cheaper - not only in price - but
that's still not a no go for some ppl, everything depends on needs and budget.

Again, as you from Germany, read this :

http://www.martin-lauff.de/utd-2052cel.html (http://www.martin-lauff.de/utd-2052cel.html)


Loser of the day
comment on hackaday :
The was a lot of reports on EE forums from people feeling greedy and getting Tekway instead
of more trusted brand, a lot of Tekway scopes lose a channel or two after couple weeks of usage


... this guy probably worry about his cheap-dso store ... it could be easier for him to ask
Hantek/Tekway for some devices to continue business instead of talking crap ...
Afaik there is no single evidence (at least google don't know any, not even in china) about tekway and broken/losed channels.


i got badly busted :P Indeed some people having early devices got heating issues.
I told Tekway months ago, this can be potential issue, but they send me typical "cost-saver-answer" :

“The components we used in this DSO is industrial level, so these conponents can be worked well under the temperature you tested. For example the AD9288-100, work well under 75°. Of course we have reserved the interface for fan supply, but not used in this series. We have considerd about the situation when the DSO running without the fan. It could be worked well. But we will add the fan in the future if our clients need”

It is good to see that Hantek/Tekway learned and finally installed small heatsinks on ADCs - a combination of overclocked ADC without heatsink and fanless power supply producing additionally lot of heat was not a good idea.

My very early DSO got small fan long time ago, i'm not a friend of component stress because of production-cost saving efforts,
so i never got any issues. I think i will install some small heatsink on ADCs too, like on the new Hantek/Tekway revisions.

So be warned : If you bought a Hantek/Tekway DSO without heatsink on ADCs, send it back! That's probably old stock
and the distributor have to send you a new one.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: dfnr2 on November 26, 2010, 08:23:18 am
Emtesco (https://www.mortoncontrols.com/ (https://www.mortoncontrols.com/)) is having a Black Friday sale on the Hantek scopes (and also on the Rigols).  Since I had ordered the 100 MHz DSO5102B just before the sale, they were kind enough to send me the 200 MHz version DSO5202B, since the sale price is about what I paid.

I have looked over the scope.  No real surprises having seen the pics posted here.  The screen is nice, and the scope is responsive and easy to use, and for a brand new 200 MHz scope, the price can't be beat.  I think there is certainly room for improvement in the firmware.  I wonder how responsive Tekway/Hantek will be to customer suggestions.  My alternative to this was getting the 100 MHz Instek.  The Instek does have some advantages for serious users, but the Hantek could easily have the same advantages with some straightforward firmware enhancements, if they choose to do so.

Overall, I'm pleased with this scope so far.  I will post some thoughts on the unit after I have played with it for a few days.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: g***! on November 26, 2010, 03:36:59 pm
Hi there Dave! 
Good for you, landing the 200Mhz version.
What software version is it running? I think when the little flaws are ironed out of the software, it will turn into quite a nice scope!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 27, 2010, 03:44:26 am
removed ....
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 28, 2010, 05:02:44 pm
... and finally input circuit picture from real 200Mhz device. As expected there are some small
differences between AD8370 and LMH6552 (280R vs. 301R, 330R vs 390R, unknown C + "varicap" vs. unknown C + "varicap").

From what i got reported, the bw is higher than on hacked 100MHz DSOs
(210Mhz vs 260MHz -3db, 240MHz vs. 320MHz -6db - don't compare these valuse to bw pulse measurment, they always higher)
which is of course a bonus for those who buy 200Mhz DSO instead of hacking 60Mhz or 100Mhz model.

I assume the 60MHz model have some differences too, unfortunately i never had a chance to test it by myself.
People who hacked 60MHz DSO reported 200MHz bw, the question is only how accurate they measured
the bw (i think it is between 170-180MHz for hacked 60MHz DSOs).

I ordered 60MHz today, not sure when it arrives (because no stock) but i will report back the results.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: LostInSpace on December 06, 2010, 03:38:02 pm
dfnr2,

If I'm reading this series right, you paid about $650 and they sold you the 200 Mhz labeled scope through their close to black friday sale.  Right? 

Many thanks!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: saturation on December 06, 2010, 04:57:30 pm
An interesting review of Tekway, as a clone of Tektronix:


http://translate.googleusercontent.com/translate_c?hl=en&sl=zh-CN&u=http://tm.eefocus.com/stupid/blog/09-08/174338_65029.html&prev=/search%3Fq%3D3458a%2Breview%2Beefocus%26hl%3Den%26safe%3Doff%26client%3Dfirefox-a%26hs%3DPGy%26rls%3Dorg.mozilla:en-US:official%26prmd%3Div&rurl=translate.google.com&twu=1&usg=ALkJrhhQDHHxxHFcqjNYZo4kvO9LBkAV3Q (http://translate.googleusercontent.com/translate_c?hl=en&sl=zh-CN&u=http://tm.eefocus.com/stupid/blog/09-08/174338_65029.html&prev=/search%3Fq%3D3458a%2Breview%2Beefocus%26hl%3Den%26safe%3Doff%26client%3Dfirefox-a%26hs%3DPGy%26rls%3Dorg.mozilla:en-US:official%26prmd%3Div&rurl=translate.google.com&twu=1&usg=ALkJrhhQDHHxxHFcqjNYZo4kvO9LBkAV3Q)


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 09, 2010, 03:10:38 am
For NA folk good news, the 60MHz Hantek seems to be orderable

https://www.mortoncontrols.com/index.php?main_page=product_info&cPath=66_67&products_id=450 (https://www.mortoncontrols.com/index.php?main_page=product_info&cPath=66_67&products_id=450)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Igor on December 09, 2010, 06:13:03 am
To: tinhead.
What can you say about Oscilloscopes OWON PDS8102T/PDS8202T?
Can I change the first model in the second (100 MHz to 200 MHz)? 
I choose the oscilloscope, and looking at your messages. 
Thank you! 
Igor, Russia.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 09, 2010, 12:51:39 pm
To: tinhead.
What can you say about Oscilloscopes OWON PDS8102T/PDS8202T?
Can I change the first model in the second (100 MHz to 200 MHz)?  
I choose the oscilloscope, and looking at your messages.  
Thank you!  
Igor, Russia.

Igor,

no idea yet. What you can do is, take it apart, make some detailed pictures, create a separate review
thread here in forum (you don't have to write much).
We can see then what inside, and maybe there is a chance.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Igor on December 09, 2010, 06:39:33 pm
Tinhead, I don't have such a device. I just choose.
But most likely choose Hantek DSO5102M, and take your recommendations for upgrading.
And for sure I will contact you.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gall on December 10, 2010, 11:44:22 am
Just received my 100 MHz Hantek. I'm thinking about replacing dso.exe with something that would be more extensible, i.e. with wavelet support in addition to FFT etc. Are there such projects already?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 11, 2010, 08:52:14 pm
Just received my 100 MHz Hantek. I'm thinking about replacing dso.exe with something that would be more extensible, i.e. with wavelet support in addition to FFT etc. Are there such projects already?

Afaik not that i know. To replace the dso.exe we need first to reverse few thigs, like FPGA control, front panel control, to
understand the data coming from FPGA, to udnerstand how the trigger, the input stage and self-calibration are working and how to
control them ... a lot of things for single person.

I'm currently busy with Ethernet addon board and evt. wireless usb stick for this DSO.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gall on December 12, 2010, 08:22:12 am
Yesterday I tried to analyze dso.exe. For now, I suspect that dso.exe contains a small piece of GPLed code (not everything is linked dynamically). It would be great.

What exactly I'd like to add first is another algorithm of sample averaging for low-frequency modes. This would reduce ADC noise and increase effective bit-resolution if the 20 MHz filter is on. (I expect to see a perfect straight line in low-freq, high-voltage modes).

Upd: I made another firmware extract utility. It does exactly the same but does not modify any files on oscilloscope at all. Everyting is done inside the update script on tmpfs. See attached file.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 12, 2010, 01:13:26 pm
Upd: I made another firmware extract utility. It does exactly the same but does not modify any files on oscilloscope at all. Everyting is done inside the update script on tmpfs. See attached file.

The trick with tmpfs is good idea.

@All

Gall's utility is dumping the firmware during firmware update directly (just be more patient), so no need to play with usb stick and usb cable after reboot.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: am2pgs on December 12, 2010, 07:14:47 pm
Tinhead et all,

this has been a very facinating thread for me. I have been looking at affordable scopes for a while , and this thread finally helped make my mind. So I went ahead and ordered the Hantek DSO5102B from Goodluckbuy last week.  I am expecting it any day now.

To start with, I'll have a go at backing up the firmware (in NAND flash) once I get the unit. One question, does the USB firmware dump utility backup the vivi bootloader as well? I am not sure if Nanddump utility could access that partition at all.

Also any idea where in NAND flash the factory settings are stored or what these settings are for?
 
Thanks again,
great job.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 12, 2010, 07:55:56 pm
To start with, I'll have a go at backing up the firmware (in NAND flash) once I get the unit.
One question, does the USB firmware dump utility backup the vivi bootloader as well?
I am not sure if Nanddump utility could access that partition at all.

Again, i can only recommend to backup the firmware. The best way is to do it with JTAG (to have everything not only the 3 "partitions".
The USB firmware dump utility is saving boot, kernel and root "sectors". Vivi is stored in boot dump. Such backup can
be restored only to own NAND and as long NAND was not completly erased.

In case NAND is broken or erased there are two additional things necessary to restore it
- 135168 byte "blank" sector (must be filled with FFh)
- 16896 byte "mizi_tag" sector - this is just a marker (not sure if this is NAND unique, but it worked for me on two DSOs and dev board)

To get a full NAND backup with OOB blocks you have to merge all these files:

copy /B boot.bin + blank.bin + kernel.bin + root.bin + mizi_tag.bin fw_backup.bin

and then the fw_backup.bin is the full NAND backup.

However, in most cases it is enough to have backup of boot, kernel and root FS.

Also any idea where in NAND flash the factory settings are stored or what these settings are for?

afaik there is factory calibration data directly in root of root FS:

tdc_edge125M
tdc_overtime125M
tdc_pulse125M

there are additionally some *.log files directly in root of root FS (not sure what they for, but it seems dso.exe is using them) :

i2c.log
mult_adc.log
tdc.log

Everything else seems to be not unique, so in case something mising/deleted/broken you can still ask someone here to get a copy.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: am2pgs on December 14, 2010, 12:56:05 am
@ Tinhead

Thanks for the extra .bin files. I received my Hantek today, and did a firmware dump.

It is reassuring that the total of the .bin file sizes (including the ones you posted) works out to be the same as the Nand Flash memory size.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 14, 2010, 01:10:09 am
@ Tinhead

Thanks for the extra .bin files. I received my Hantek today, and did a firmware dump.

It is reassuring that the total of the .bin file sizes (including the ones you posted) works out to be the same as the Nand Flash memory size.


you welcome.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Crippled on December 14, 2010, 01:46:54 pm
Is the 60MHz also hackable to 100 or 200MHz?
At which China internet warehouse is it for sale? I know the 100MHz is for sale at goodluckbuy.

thanks  :)

edit
found the 100mhz at taobao.com:


http://translate.googleusercontent.com/translate_c?hl=nl&ie=UTF-8&sl=zh-CN&tl=en&u=http://item.taobao.com/item.htm%3Fid%3D4727827746&prev=_t&rurl=translate.google.com&twu=1&usg=ALkJrhgIAaJdhC3FJaM0olzo1VLJF3Kbdw (http://translate.googleusercontent.com/translate_c?hl=nl&ie=UTF-8&sl=zh-CN&tl=en&u=http://item.taobao.com/item.htm%3Fid%3D4727827746&prev=_t&rurl=translate.google.com&twu=1&usg=ALkJrhgIAaJdhC3FJaM0olzo1VLJF3Kbdw)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gall on December 14, 2010, 03:15:15 pm
Is there a schematic of Hantek input stage, maybe reverse engineered?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 14, 2010, 04:29:49 pm
Is there a schematic of Hantek input stage, maybe reverse engineered?

afaik no, only the part between AD8370 and LMH6552 is known. It is like Rigol input stage,
the varicap D1 is BBY65-02V, C1=C2=160pF

Pin8, Pin9 in the picture are connected to AD8370 and over resistors (they a bit different per model, but it didn't change that much)
to LMH6552 input. The voltages on the picutre are fom Rigol, Tekway/Hantek have different levels
(as we have 20,60,100 and 200MHz bw selectable).

Everything else has been afaik not yet reversed (even not for Rigol)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: am2pgs on December 14, 2010, 09:20:45 pm
Has anybody got the TTscope to work under windows 7 with the DSO5102B?

The application installs but I seem to miss the USB driver.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gall on December 15, 2010, 12:53:25 pm
tinhead, thank you for the schematics!

I was investigating Hantek's noise. Now I'm pretty sure that it is NOT normal ADC sampling noise, it is just too big. Looks like mine has only 6 significant bits while 2 bits measure noise even on strong input signals (5 V/div on 1:1 or 50 V/div on 1:10 probe)! I expected 7.5 significant bits of course.

The nature of the noise is unknown. It is uncorrelated between 1st and 2nd input channels so it cannot be EMI (I've seen interference from FM radio broadcasts on 2 mV range but not here). I suspect it is kind of Johnson-Nyquist noise or something. I hope it can be reduced somehow to less than 1 significant bit.

Of course, some noise is always expected, all DSOs have noise, but low-end ones have more. It is strange that a fast DSO measures strong low-frequency signals worse than just some resistors and comparator hooked to PC parallel port.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: am2pgs on December 16, 2010, 09:33:41 pm
Just converted my DSO5102 to DSO5202 and I can say it really works. What a difference!

The following traces were captured using the same scope, same probe and exactly the same point of measurement, one with the original DSO5102 Firmware, and the other after it was modified to DSO5202.

Not very scientific, but it is a relative test indicating that the frequency response has doubled.

Thanks!

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 24, 2010, 04:29:14 am
Is there a schematic of Hantek input stage, maybe reverse engineered?

i did reversed the complete input stage from ch1 / ch2, and some internal logic control, see attached pdf.
Few controls sognals are still missing, but it think it is good enough to understand the circuit.

The input stage (up to AD8370 input pin) is flat up to 400MHz, so there is room for more improvements (e.g. 350MHz bw ...)

As the input stage is almost equal to Rigol this schematic might be interessting also for Rigol hacks.

EDIT: Updating schematics right now ... be patient

In principle S3C2440 is controlling over i/o the CPLD, the CPLD is controling FPGA/SRAM.
FPGA is capturing data and controling some input stage signals and front panel
(which was a small suprise, i was thinking s3c2440 is doing this).
It can be that there are some other connections between FPGA and S3C2440,
however multilayer board is not easy to reverse with components soldered on it.


The interessting thing is that no matter what kind of C/R/Varicap combination i used, the bw was always the same.
Somehow the CPLD is controling the bw of AD8370, maybe we need to check with LA what's going there (VAG control words)
The DAC LTC2601 is providing always 2.7V to Varicap, no matter what settings (hmm, haven't tested during self calibration yet)
or which model (60,100 or 200MHz), this didn't really make sense.

Normaly this part of the circuit should change the bw (like Rigol is doing) via reverse voltage applied to varicap,
no idea why Hantek/Tekway is not using it - however this is only checked on my very early Tekway,
maybe somone else can test it too (Anode of the Varicap).


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gall on December 25, 2010, 11:31:24 am
Great work! What a Christmas gift! Thank you!!

It's a bad surprise that FPGA seems to go to CPLD and not to ARM directly. Looking at the board, I suspected that CPLD does just very simple thing - connecting SRAM to both FPGA and ARM and mapping SRAM into ARM's address space. Looks like I was wrong. Also looks like that everything is memory mapped.

It is unclear why CPLD is used at all. FPGA should be able to do the same by itself. This may indicate that input stage including ADC and FPGA part is ingeneered by someone else and bought by both Rigol and Hantek, thus CPLD is used as glue logic between ready-made FPGA design and the CPU.

The varicap seems to be used for correction and not for frequency filtering. Its connection does not look like a filter, there are no resistors or inductors between AD8370 and the varicap. Of course, AD8370 has 95 Ohm output impedance but it is not intended to be used in such a way.

I think about analyzing connections between CPLD, FPGA and ARM by using their JTAGs in boundary scan mode.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 25, 2010, 01:49:36 pm
i have to correct myself, both FPGA and CPLD are memory mapped to ARM, and both CPLD and FPGA are controlling some
signals. I know that CPLD is controlling input stage HC595 and generating for example 1kHz, the FPGA front panel and some other
signals. The question is now who is master, probably FPGA and not CPLD ... unfortunately without special equipment we can't see it
and Han/Tek/way will never publish the schematics.

You right, it could be easier to use boundary scan instead of unsoldering components or x-ray PCB. I hope Han/Tek/way will really
publish the firmware sources, it will help defnitely to understand the design.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Frank Q. on December 26, 2010, 12:02:56 pm
Testing a new DST1062 I see, keys and rotary encoders are working not reliable. Often a pressed key is not recognized and has to be pushed once again. Rotary encoders (e.g. VO and Horz. Position) are working if tuned slowly. Faster rotation will result to slower motion. Is this typical to tekway scopes?
Will the 'newer' software described here reduce/kill these errors?

Thanks!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 26, 2010, 12:06:30 pm
[...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Frank Q. on December 26, 2010, 12:09:24 pm
It's 2.06.2 (101028.0)
I think this is the last one.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 26, 2010, 12:12:08 pm
It's 2.06.2 (101028.0)
I think this is the last one.

did you already updated or it was pre-loaded?

I saw similar issues if DSO was not re-selfcalibrated after fw update.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Frank Q. on December 26, 2010, 12:17:52 pm
I didn't made any update, so this is the pre-loaded (original) version.
Before I make any changes I will find out if this scope could make me happy at last :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 26, 2010, 12:37:16 pm
I didn't made any update, so this is the pre-loaded (original) version.
Before I make any changes I will find out if this scope could make me happy at last :)

nice, because there is no official Tekway 2.06.2 fw available, so maybe the distributor did updated for you.
If you don't mind, made a fw backup with this tool :

https://www.eevblog.com/forum/index.php?topic=1571.msg26877#msg26877 (https://www.eevblog.com/forum/index.php?topic=1571.msg26877#msg26877)

Just download, unzip and copy to usb stick the *.up file, plug into the DSO USB port
and run as "firmware update" - it will not farm or change anything on your DSO, it will only dump the
firmware during update process (so just wait 5 mins or so).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Frank Q. on December 26, 2010, 01:17:47 pm
I did it. Inside root.bin there are several places showing 2.06.2.
How should I continue?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 26, 2010, 05:59:06 pm
Frank,

check PM for instructions.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: PsI-On on December 27, 2010, 09:22:10 am
Can anyone tell me how to change the language, all i can see is Mandarin Chinese  :-[

I updated the firmware and now have english  ;D Chinese version seems to only have Mandarin!

Thanks

-P

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 28, 2010, 12:23:26 pm
Santa was here :)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: saturation on December 28, 2010, 01:55:53 pm
Awesome!  He made it safely through Chinese airspace ...

Santa was here :)


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sliverstorm on January 04, 2011, 09:16:39 am
What do you think the odds are we can get LA software running on these things? Do you know how the input from the probes is passed to dso.exe? (fancy memory access, "Everything is a File" /dev instance, ...?)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 04, 2011, 01:36:52 pm

What do you think the odds are we can get LA software running on these things?


for a logic analyzer we need two things:
- the data
- the UI

The UI app need to be of course developed first. It can be controlled over two ways:
-via touch screen (so everybody have to buy a touch screen and connect to ARM)
-via front panel keys

As the keys are controlled over FPGA we need to know how it works (is on my to do list).
Maybe we can use current FPGA design to capture fron panel events and to forward to ARM, but maybe
it need to be a new design.

The more important question is where the LA data will be coming from. There are some possibilities:
- over ch1/ch2 (make no really sense to build LA with two ports)
- over the FPGA pins currently connected to ADCs (there is no header, so soldering necessary ... i think bad idea)
- over the FPGA with new design and some pins (still bad idea)
(side note: the FPGA is interconnected with CPLD which we can't change and to SRAM. Sure the SRAM could be nice
to store LA data, but there are too many "If" to do it without source code and detailed schematics ....)

- over any other available port.
This seems to be the best option, so in principle a small external/internal addon board need to capture the data and to send
it to ARM. There are some open source designs (sump, minila, seedstudio and so on), they can be changed to
do whatever we need.

The S3C2440 ARM is fast enough for DSO UI, so it would be fast enough for LA. The captured data can also provided
over:

- front panel USB port
- ARM UART1
- ARM I/O port (which have 16bit data, 4 address, nOE, nWE, nWAIT, GPIO select 3, nBE1, ext int9, reset signals and 3.3V/GND)

From a usability point of view front panel USB could be the easiest one (plug external LA, push for example F6 for 5sec.
and dso.exe will be killed and own LA ui started...). Over UART1 could be a bit slow and we have to make modification to the
enclosure (probably on the back side). The I/O port is nice, but same as for UART1 enclosure modifications necessary.
I would personaly plug into i/o port a Ethernet addon board (like originaly supposed to be used for).

For Tekway users (like me) modifications to the enclosure are necessary, for Hantek users it is a bit easier. On the front panel
there is a sticker (right over USB port). If you remove it you will see two holes:
- for USB
- for printer/RS232 - DSUB25 (just push the word "waveform" on the sicker and you will feel it)
So in principle Hantek users will  have to remove this sticker, mount a DSUB25 socket and connect external LA over this port
(which can be then connected to UART1 or I/O port).


The external LA could have own memory and sample logic, but it could be a simple (but slower) thing - just a piece of buffers controlled over
nWE/nOE/nGCS3/eInt9 and capturing 16bit data directly to ARM.

So as you can see we have may options and still many open questions. I will continue the hardware reversing, maybe it would be never
used for logic analyzer, but i think it could be helpful to have schematics in case the DSO dies some day.
I don't really count on warranty, probably every distributor know that ppl are playing with firmware, Hantek/Tekway know it anyway.



Do you know how the input from the probes is passed to dso.exe? (fancy memory access, "Everything is a File" /dev instance, ...?)


no, not exactly. There are two device drivers dso-iobank.ko and dso-fpga.ko, they seems to be used to access CPLD and FPGA,
but how exactly the data flow works no idea yet. But feel free take care over this task.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mechatrommer on January 04, 2011, 01:50:40 pm
Santa was here :)
all those santas... do you intend to sell it here? interesting.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 04, 2011, 01:59:56 pm
Santa was here :)
all those santas... do you intend to sell it here? interesting.


no i don't. It was collective order for some ppl who asked for.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: xxbsd on January 06, 2011, 12:41:19 am

- ARM I/O port (which have 16bit data, 4 address, nOE, nWE, nWAIT, GPIO select 3, nBE1, ext int9, reset signals and 3.3V/GND)


Hello tinman,

have you been able to find out the exact io port assignment?
I've already tried to find out myself and I found similar signals. But there are still ambiguities with some pins.
I'm afraid it's nearly impossible to clarify them without unsoldering the cpu.

Thanks a lot
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 06, 2011, 01:05:15 am

- ARM I/O port (which have 16bit data, 4 address, nOE, nWE, nWAIT, GPIO select 3, nBE1, ext int9, reset signals and 3.3V/GND)


Hello tinman,

have you been able to find out the exact io port assignment?
I've already tried to find out myself and I found similar signals. But there are still ambiguities with some pins.
I'm afraid it's nearly impossible to clarify them without unsoldering the cpu.

Thanks a lot



sure, see attached picture.

The DATA0->DATA15 are the ARM D12 -> B15 pins (check the S3C2440 manual).
The RESET signal, there is reset circuit generating it, so it is routed to i/o expansion port and over 2G04 to JTAG/ARM.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 06, 2011, 01:12:49 am

I'm afraid it's nearly impossible to clarify them without unsoldering the cpu.


btw, i did it, so now we know all used/unused pins.
Unfortunately i have still to work from time to time, so reversing is going slow...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Scrts on January 06, 2011, 03:18:28 am
This is nice, can't wait to buy one! :) I hope SDK will be released ASAP.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: saturation on January 06, 2011, 11:43:29 am
You unsoldered that CPU?! Amazing  :o.

Tinhead, you are the Tekway/Hantek hack god for sure.


I'm afraid it's nearly impossible to clarify them without unsoldering the cpu.


btw, i did it, so now we know all used/unused pins.
Unfortunately i have still to work from time to time, so reversing is going slow...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Scrts on January 07, 2011, 12:45:49 am
Hm, there was no strong "OK!" answer for the Tekway DST1062B mod. I have an offer to buy DST1062B or DST1102B. Is it really the same inside through the whole 1062->1102->1202 series is the same hardware? So no point to buy 100MHz scope to mod it to 200MHz? I would save then about 150USD and buy 60MHz one.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 07, 2011, 01:12:32 am
probably you haven't read my postings carefully. All these models are 99.999% the same inside.
There are some more or less cosmetic differences (for higher freq. response):
- 4 resistor arrays in input stage
- 8 resistors in input stage
but in principle you can live with that (or solder new 0.1% resistors and ran self-calibration)

Everything else remains the same.

Afaik Tekways are still hackable via USB (firmware update), the new stock Hantek's not anylonger*
For Hantek you will have to connect via UART0, kill the dso.exe (by ctrl+c + enter)
and modify manually model name (see my first post).


*new stock models firmware is checking current DSO model name with the model name in the firmware (on USB stick).
Of course there is still a way to create a firmware which will lie about model name and hack the DSO, but
honestly i'm too lazy (too busy) to create it. As we can still hack over JTAG or/and UART0 i don't see a need
to spend time on this.

I think everybody should be able to buy TTL UART-> USB adapter (ebay for "cp2102 usb ttl"),
so no issue at all. There are two CP2102 TTL USB adapter models (on ebay), one with GND/RXD/TXD/5V/RST
and one with 5V/GND/RXD/TXD/RST (talking about adapter header pinout).
Just be sure you checked the connections before you connect the adapter to DSO, if you do it wrong - like
i did (5V on DSO GND and GND on DSO RXD) you will kill the ARM µC RXD port, which isn't funny if
you have no IR Rework equipment and spare ARM µC at lab/home.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Scrts on January 07, 2011, 07:24:36 am
Thanks for clearing my mind! I think I am taking that DST1062B :)

Regarding logic analyzer question:
Even two channel logic analyzer would be cool, because it could successfully decode 1-wire, RS232, RS485, I2C protocols. Or even if it would be possible to connect SCK signal to ext trigger channel and two channels to MOSI/MISO, it would be a perfect SPI decoder. I can't wait for the SDK!

A bit offtopic, but regarding the ARM processor:
Where do You buy them? There is a project with S3C2440 uC and farnell/digikey/etc has no such processors on stock.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 07, 2011, 09:38:34 am
A bit offtopic, but regarding the ARM processor:
Where do You buy them? There is a project with S3C2440 uC and farnell/digikey/etc has no such processors on stock.

in my local drug store :)

go to

http://www.digchip.com/datasheets/quote.php?action=search&pn=S3C2440AL-40 (http://www.digchip.com/datasheets/quote.php?action=search&pn=S3C2440AL-40)

select S3C2440AL-40 and create RFQ
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on January 08, 2011, 09:33:46 am
Hello Guys,
We are Hantek 'a agent in France and we can deliver many DSO5102B as our stock is large enough.
Please visit our website: http://elec3i.com (http://elec3i.com)
Hope to deal with you soon. ;)

Best regards,
Pascal
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mechatrommer on January 08, 2011, 10:07:58 am
@pgup62:
1) delete your duplicate (1st) post.
2) sell gossen metrahit or energy dmm.
3) do you talk malay? multilingual ehh?
4) how much dhl/ems shipping cost to malaysia?
Cheers.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 08, 2011, 01:08:34 pm
Hello Guys,
We are Hantek 'a agent in France and we can deliver many DSO5102B as our stock is large enough.
Please visit our website: http://elec3i.com (http://elec3i.com)
Hope to deal with you soon. ;)

Best regards,
Pascal

yeah, i know your website. Btw, what is TTC price ? Is it with TVA or without ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on January 08, 2011, 09:24:14 pm
Selamat Salam Shafri  :o
In fact, I have some friends in Singapour, malay language, they tought me some language tips.
Fortunately, we most of time talk english 8)
TTC means tax included. we use to deliver inside Europe. For Asia, perhaps we can dropship from Hantek. I will inquire this possibility from them.  Dou ke yi !

Regards,
Pascal
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: flyer1059 on January 08, 2011, 10:17:48 pm
Thank you Tinhead and others for a very informative post...

I got my Hantek DSO5102B last week. It was shipped with 2.06.2 software. I haven't hacked it or upgraded it in any way. I have noticed two software bugs in its operation. Is anyone else seeing them too?

1. Using cursors with 2 channels with different volts/div. Triggering is off channel 2. Voltage cursors are on channel 1 - but the scope displays cursor readings using volts/div for channel 1. I am definitely selecting cursors to be sourced by channel 1.

2. Observe a signal on channel 1 and setup triggering using a suitable level and timebase. While observing the waveform press "SINGLE SEQ". The waveform is captured. Change the timebase to another setting. Press "SINGLE SEQ" again. The waveform is captured but at the OLD timebase setting, even though the scope is displaying the NEW timebase on the screen. The workaround is to change the timebase only while the scope is in the RUN mode i.e. the "RUN STOP" button is green.

Apologies if this has been answered already. Can the Hantek DSO5102B standard software be upgraded with Tekway DSO1102B files. Also can either Hantek or Tekway TTscope software be used with my scope?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Scrts on January 08, 2011, 11:09:09 pm
Hello Guys,
We are Hantek 'a agent in France and we can deliver many DSO5102B as our stock is large enough.
Please visit our website: http://elec3i.com (http://elec3i.com)
Hope to deal with you soon. ;)

Best regards,
Pascal

Are there possible discounts for students? I've managed to get a discount @ German Pinsonne electronics to the same price(shipping included) as Yours for DSO5062B. If it is possible to have a discount @ Your company, I will cancel my order there and buy Yours :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 09, 2011, 01:18:48 am
Are there possible discounts for students? I've managed to get a discount @ German Pinsonne electronics to the same price(shipping included) as Yours for DSO5062B. If it is possible to have a discount @ Your company, I will cancel my order there and buy Yours :)

lol, "sparen?"

Be careful, the "Elec3i" price includes TVA (19.5%) which is like MwSt in Germany (19%),
if you have no EU VAT number you will pay evt. twice the VAT (TVA and MwSt).

- no TVA/VAT

The "Elec3i" price is ok...
no, is same as everywhere else.

DSO5102 costs 589 EUR, plus for Germany 19% VAT so we have 700,91EUR which is equal to what e.g. pinsonne
sells (695EUR).

If Elec3i price would be with french VAT it would be of course very good offer.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on January 09, 2011, 11:15:06 am
Please, let me give you a little explanation: :-\
For everybody into Europe, our price si the same TTC or VAT (This means VAT=0.00 EUR !), because for now, we are not charged by VAT taxes because of the taxes policies in France according to our turnover. At the same time, no added taxes for European countries (Germany, UK, Brlgium, Spain, Italy, etc.)
For countries outside Europe, these countries should add their own custom taxe according to every country custom policy, usually around 20% of "product price + Shipping price + insurance" plus anti-dumping taxes and other fees (depending of the importer fees).
We already paid our importation taxe, as this should be for every imported product inside Europe.
Just I wanted to point out that perhaps we can inquire Hantek (we are somewhat in narrow collaboration with Hantek  because some of our staff comes from the same city where their factory is settled) to possibly dropship to people outside Europe, then this wouldn't charge the custom tax from exportation (From France to elsewhere outside Europe: this one will be requested by the importation country if we deliver outside Europe), just the tax from China to the importation country, and for lucky guys perhaps 0, but don't believe this can be possible too much (many people in France got sad when they order from USA and a while later they were requested to pay 20% custom tax...).
I hope my explanation is not too tricky. For special discount requested price  or any special information, everybody can directly communicate with us : pascal@elec3i.com   ;D
Cheers
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 09, 2011, 03:23:55 pm
Pascal,

someone (enduser) in EU have always to pay VAT, so if your price have no french VAT the enduser will have to pay it
in own country. Your price (no-VAT) is typical for B2B, for me as a company owner just perfect (therefore my org. question is TTC=TVA)
 - but the enduser will still to have to pay VAT, everything else is cheating and illegal.

Import TAX is a different story, you as importer have to pay it anyway.

P.S. - normally you can't sell a B2B items to enduser without proper VAT, that's the EU business rules.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on January 09, 2011, 07:11:42 pm
cuo le mei you ? dui bu qi.... :o
Hao ba ! :-\

VAT is included in the price (Even VAT=0) and european customers won't be charged by VAT in their country. This policy has been confirmed by EUROPA service and french custom.
We are then very competitive on DSO52102B , we accept discount prices here for this forum. Let us say we offer shipping delivery inside Europe and we offer extra 30,00 EUR more in the final price ! I let you do all the operations. I think we can argue and we don try to cheat people anyway. ;D
Cheers
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mechatrommer on January 09, 2011, 07:51:35 pm
cuo le mei you ? dui bu qi.... :o
Hao ba ! :-\
you can translate some of chinese ee sites for us.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 09, 2011, 10:30:08 pm
I think we can argue and we don try to cheat people anyway. ;D

... on the other side, if a enduser is not asking explicit for invoice with VAT, who cares :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Scrts on January 10, 2011, 02:06:35 am
Well, if VAT is not mentioned in the invoice or it is marked as added already, then who cares in Europe? :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 10, 2011, 02:48:11 am
Well, if VAT is not mentioned in the invoice or it is marked as added already, then who cares in Europe? :)

sure, nobody .. except other distributors (just because of "unlauteren Wettbewerb" - see http://en.wikipedia.org/wiki/Unfair_Commercial_Practices_Directive (http://en.wikipedia.org/wiki/Unfair_Commercial_Practices_Directive)) and revenue office....

To be very honest, i don't care. If you manage to get it cheaper by cheating the revenue office, then lucky you.

DSO5102B price on elec3i.com is 589EUR, -30EUR for eevblog users is a good total price.
I would say cancel your pins**** order and buy the 100MHz from elec3i.com.

I assume you will anyway hack the device, so it make sense to buy 100MHz model to get better probes (they good up to ~150MHz).

Or buy the DSO5062B and extra 200MHz probes ...


@Pascal

do you have guys any informations when the "C" series (DSO5102C and DSO5062C) will be available?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on January 10, 2011, 10:14:48 am
yes, I will give you this information as soon as possible.
DSO5062C is already on the market (2 x 60MHz, 500MS/s), we will add the product online.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Scrts on January 10, 2011, 04:50:46 pm
Well, if VAT is not mentioned in the invoice or it is marked as added already, then who cares in Europe? :)
DSO5102B price on elec3i.com is 589EUR, -30EUR for eevblog users is a good total price.
I would say cancel your pins**** order and buy the 100MHz from elec3i.com.
...
Or buy the DSO5062B and extra 200MHz probes ...

Well, seems like it won't be any cheaper from elec3i for DSO5062B :-\ If they would offer at least 499EUR - 30EUR(forum user) + 10EUR shipping = 479EUR I am on the order. Also afaik they support PayPal. Anyway, 200MHz probes will be cheaper than 200MHz/60MHz scope price difference :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: am2pgs on January 10, 2011, 08:43:27 pm
This is just my experience and it could be different for other people:

I bought my DSO5102B from the chinese website Goodluckbuy for ~492 EUR and they shipped via DHL express for free. It arrived here in the UK within 7 days and it was in prefectly new condition (the box had seen better days though).

The customs didn't charge me any taxes in the UK, possibly because the value was written as only $40 on the invoice.

I was not bothered about any warranty issues since I wanted to modify the scope anyway.




Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on January 10, 2011, 09:45:54 pm
Well,
I can notice some chinese challengers have illegal practice and I would like people take care of this.
Up to people to accept this, even the idea to get no warranty and so on is an exciting idea.
As a serious company, we deliver legal invoice (our VAT=0, according to french law, is written on it !) with device serial number and we have maintenance parts (main boards, LCD screens, power unit boards, etc). We are ingaged for a 2 years warranty.
We are more than a B2B service, we can develop sofware and translate user's manuals as well. I hope these chinese companies can give you a better service than ours, just I seriously doubt about it. After, sometimes you cannot be sure to receive your parcel, and you can claim what you like, I feel sure you will never be granted for your device. We have contract with HANTEK, and our stock is already in France.
I let people think about risks carefully...




Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: flyer1059 on January 10, 2011, 10:09:17 pm
Hi tinhead

Can you please have a look at my reply #133 and comment.

Regards, flyer1059
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 10, 2011, 10:44:16 pm
1. Using cursors with 2 channels with different volts/div. Triggering is off channel 2. Voltage cursors are on channel 1 - but the scope displays cursor readings using volts/div for channel 1. I am definitely selecting cursors to be sourced by channel 1.

i think you mean "but the scope is displaying cursor reading using volt/div from ch2 (and not ch1)

No, on my 2 DSOs no such errors. If i switch in coursor source menu between channels the proper value will be displayed.


2. Observe a signal on channel 1 and setup triggering using a suitable level and timebase. While observing the waveform press "SINGLE SEQ". The waveform is captured. Change the timebase to another setting. Press "SINGLE SEQ" again. The waveform is captured but at the OLD timebase setting, even though the scope is displaying the NEW timebase on the screen. The workaround is to change the timebase only while the scope is in the RUN mode i.e. the "RUN STOP" button is green.

yes, this is known bug (new since 2.6.x), i did notified Hantek/Tekway about it already.
As a work around you have to select always first "run", change time base, and then use single seq.
Especially if long memory is specified this bug really sucks, but the work around works (so let's hipe next fw will fix it).

Apologies if this has been answered already. Can the Hantek DSO5102B standard software be upgraded with Tekway DSO1102B files. Also can either Hantek or Tekway TTscope software be used with my scope?

you mean the PC software ? The Hantek software works with Tekway and Hantek DSOs, the Tekway only with Tekway :)
This is because of additional DSO names added into some dll files and ini files (look into ttscop\config dir)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Scrts on January 10, 2011, 11:30:17 pm
This is just my experience and it could be different for other people:

I bought my DSO5102B from the chinese website Goodluckbuy for ~492 EUR and they shipped via DHL express for free. It arrived here in the UK within 7 days and it was in prefectly new condition (the box had seen better days though).

Seems like there are no information about warranty, so maybe goodluckbuy doesn't offer any.

I let people think about risks carefully...

Do You offer service for devices that wasn't bought at Your store?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sliverstorm on January 11, 2011, 05:33:57 am
Hmm, I have run into a stumbling block. I have tried to update my 'scope (a Hantek DS5102B) with the files provided in do_Hantek_DSO5202B.zip, and I get:

Software upgrade failed, error 0xf7
Illegal upgrade files detected!

System Status tells me:

model: DSO5102B
soft version: 2.06.2 (101108.0)
hard version: 0x555583e8
serial number: xxxxxxxxxxxx
boot count: 4
upgrade log: 2


Haven't got a JTAG programmer handy, so I'm hoping the USB upgrade method will work.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 11, 2011, 10:48:44 am
Hmm, I have run into a stumbling block. I have tried to update my 'scope (a Hantek DS5102B) with the files provided in do_Hantek_DSO5202B.zip, and I get:

Software upgrade failed, error 0xf7
Illegal upgrade files detected!

Haven't got a JTAG programmer handy, so I'm hoping the USB upgrade method will work.


yes, i said it already here that Hantek did changed fw on new stock models :

https://www.eevblog.com/forum/index.php?topic=1571.msg29262#msg29262 (https://www.eevblog.com/forum/index.php?topic=1571.msg29262#msg29262)

JTAG is usefull for fw backup, only to hack the device use UART.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on January 11, 2011, 01:52:20 pm
Dear Scrts,
Of course not, no service for people who buy outside our shop, because warranty is relative to a device serial number. Another thing too, we cannot garantee devices which were illegaly upgraded (hacked) and I don't know any which will accept this... ;)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 11, 2011, 03:10:25 pm
@Scrts

you have 3 years Hantek warranty for DSO and 1 year for probes (however you have to pay shippment
costs which is why distibutor price is higher than china mainland price)
 - of course until you modify anything on hardware or software side (like 200MHz hack).

Exceptions:
- official beta firmware
- certified addons (like ethernet board which can be installed by enduser)
- modification done by Hantek Maintenace Center

From "Goodluckbuy" you will get no addidtional warranty, only the manufacturer warranty mentioned in above
which is probably enough for all ppl whio will anyway modify the DSO.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Scrts on January 12, 2011, 01:08:10 am
Dear Scrts,
Of course not, no service for people who buy outside our shop, because warranty is relative to a device serial number. Another thing too, we cannot garantee devices which were illegaly upgraded (hacked) and I don't know any which will accept this... ;)

Well, I fully understand Your company :) Just thought You could do some services for money. Lets say got hacked scope, ask 400USD for motherboard exchange and make business :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on January 12, 2011, 10:02:44 am
@scrts,
Yes, we can probably do this, I will confirm later. ;D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Scrts on January 12, 2011, 07:34:36 pm
So I've made my order @ GoodLuckBuy and paid through PayPal and selected free shipping. About an hour later I get an email from the shop and they say, that it is impossible to send the item using free shipping. Neither registered airmail, nor EMS (which would cost additional 30USD), so they asked me to pay additional 40USD for DHL. Its quite annoying, since I live in Lithuania, which is a part of European Union and a guy here had DHL shipping for free to the UK, which is even further. So I've asked how can I pay for DHL, since the invoice is paid and they have to generate another one I suppose?

Finally:
be sure that You won't get a PITA dealing with China suppliers...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on January 12, 2011, 09:24:56 pm
@scrts,
Big big sorry to you.  ??? Today I asked informations from Europe Direct service center and I am waiting informations from french Custom too. I asked some european clients wether they were charged or not with VAT. I think I will get all answers tomorrow. But after many inquiries, it seems that our european clients were not charged with VAT because we are not under VAT policy (french taxe policy for micro-enterprises business). In France our clients do not pay french VAT because of our business status ("micro-entreprise"). It should be the same with all european customers because this process should be equal to everybody in Europe, not only with the french people.
When this will be confirmed, this will mean that our prices is better than Tinhead said, because no VAT and discount here (30 EUR).
@Tinhead,
Please verify VAT policies in Europe because it is not so obvious as you seem to affirm... There are many rules and it gives the feeling that every case is different from another
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Igor on January 13, 2011, 01:45:08 pm
@ tinhead:
I want to buy Tekway DST1102B.
The seller from China said that the device has the English interface, but the system only Chinese.
I think the built-in Help system, etc.  
Can I install full English version of the software of your recommendations?  
Can I count on your help?
In advance thank you.

P.S. What other information about the device, check with the seller for the correct decision about purchasing?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: PsI-On on January 13, 2011, 04:55:52 pm
Hi Igor,

I got a DST1062B in China last month. As you can see from the photo, some of the front panel is in Chinese (not a problem, after a week you'll know what button does what!).
The menu was in Chinese when I got it, took me a while to figure out how to update the firmware.
When I did update with tinheads, the default language was English  ;)

Oh by the way, I paid 2000 Yuan for it, that's about 235 euro  ;D

-PsI
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Igor on January 13, 2011, 07:29:04 pm
@PsI-On:
You can say a seller bought the appliance?
Your price is much lower than I would like to buy DST1102B.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Scrts on January 13, 2011, 09:43:14 pm
Oh by the way, I paid 2000 Yuan for it, that's about 235 euro  ;D

And said this so late...  :-[ Mine is shipping from GoodLuckBuy, had to pay for DHL :-\ Well at least I got soldering tip cleaner for free and tracking of the package ::)

Tell us the supplier!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Igor on January 14, 2011, 09:09:09 am
@All:
Here is the link to the site of the seller DTS1062B and costs 2000 Yuan.
http://youa.baidu.com/item/8ffb93b8ca327c15601fac17 (http://youa.baidu.com/item/8ffb93b8ca327c15601fac17)
I hope someone can buy appliance …
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 14, 2011, 12:40:36 pm
this is exactly what i said before, if you buy in/from china you will get one very cheap, but with some
chinese buttons and crippled firmware (afaik the chinese firmware have less features).

Firmware is not a big deal since the hack and 2.0.6.2 update has been released,
chinese buttons can be easily fixed if you have a printer.

GoodLuckBuy is delivering Hantek's only, and Hantek has changed the enclosure
and buttons design a bit - so they always english - and just due the internal agreements they a bit expensive than Tekway
models (so even if you find one directly in china you will have to pay more than for Tekway chinese model)

So if you need warranty buy from :
mortoncontrols.com
elec3i.com
pinsonne-elektronik.de

if you need only english interface and DOA warranty:
GoodLuckBuy
or whoever on ebay (but be careful and check they really provide DOA warranty)

and if you don't care that much about warranty or front panel/buttons:
baidu.com
taobao.com

It can happens that if you buy in/from china a Tekway model, you will get one of very early models.
They don't have heatsinks on ADCs and FPGA - not a big deal if you install small 12V fan
(and replace the 7812 on power supply board with 7808 or even 7805) or small heatsinks on ADCs at least.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Igor on January 14, 2011, 05:10:30 pm
Unfortunately, many Chinese websites do not have the English version.
It is very difficult to make an order on such site. Often they do not accept international payments because work with the Yuan only.
I'm trying to find a partner in China, so that through him the order on such site, but so far failed.
Only one vendor has agreed to sell me DST1102B with the Chinese system, and costs much more than the Chinese online stores.
I live in Russia, so I don't need the manufacturer's warranty. In Russia there is no service centers Tekway, Hantek, Protek. And send the defective device in repairs in China would be extremely expensive, and it's not profitable.
So I want to buy an inexpensive oscilloscope and will try to modify it. Although experience on hacking the devices I have not.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Bored@Work on January 14, 2011, 05:59:44 pm
Unfortunately, many Chinese websites do not have the English version.
It is very difficult to make an order on such site. Often they do not accept international payments because work with the Yuan only.

The currency as such isn't the problem, Chinese vendor's limited access to international payment systems (credit card, Paypal *spit*) is.

You can hire agencies http://www.google.de/search?q=buy+from+taobao (http://www.google.de/search?q=buy+from+taobao) to deal with Chinese speaking vendors and the Chinese payment system. But they of course take a fee, and I would be very careful when selecting one, so not to end up with a conman. In the end it might not be worth using an agent.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Igor on January 15, 2011, 06:48:49 am
Chinese vendor's limited access to international payment systems (credit card, Paypal *spit*) is.
This is what I meant.

Quote
But they of course take a fee, and I would be very careful when selecting one, so not to end up with a conman. In the end it might not be worth using an agent.
This problem actually exists.
Therefore it is better to work with a proven seller.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on January 20, 2011, 01:36:33 pm
Dear All,
Hao jiu bu jian le !!! ;)
I finally can access the blog again, oops.
We have relationship with chinese vendors and evrything should be done with care:
Some cheap devices sometimes mean : chinese local market. I cannot believe you will get some help or warranty from this market: once you paid, you get your device and bye bye. Many times the motherboard is made of cheap components, no thermo-retractable shrinkable tube to protect mains or other wire connexxions, glue here and there, and so on. Sometimes too, the motherboards are from the second market, a repaired board for instance. But the worse is a copy of a genuine board...  >:(
As previously mentioned, Elec3i offer good prices for the Eevblog users. Now we have discount prices for at leat 3 weeks as we call this : "Les Soldes d'hiver".
It is a traditional french discounting period where you can access cheapest products after winter hollidays.
For now : DSO52102B is 549,00 EUR with VAT=0, discount=30,00 EUR, final price = 519,00 EUR. We charge shipping (packing free) with the price you can find to the french international post office, Coliposte : http://www.colissimo.fr/affranchissementenligne/displayShipment.do (http://www.colissimo.fr/affranchissementenligne/displayShipment.do)
We don't take extra fees for delivery because we have special agreements with our another company : Geyre Electronique SA.
We received the french custom answer for VAT and answers from some european clients : no european clients is charged with VAT after their purchse from Elec3i, because as a micro-enterprise we have special VAT policy. All we sell is VAT=0 in France, and it is equal this policy can be applied to european clients too. So as a conclusion, the prices you can find in our website: http://elec3i.com (http://elec3i.com) are gross prices.  ;D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Scrts on January 21, 2011, 12:42:40 am
Since mine DSO5102B has a new firmware, I have to use UART or JTAG. Is it really UART there is 5V levels? I have my own board with FT232 and 3.3V levels. Also maybe it is possible to get step-by-step manual how to flash firmware using JTAG? I have Segger J-Link :)

I see that the scope top surface above LCD gets warm, since there is no cooler. Is it normal?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 21, 2011, 02:29:53 am
Since mine DSO5102B has a new firmware, I have to use UART or JTAG. Is it really UART there is 5V levels? I have my own board with FT232 and 3.3V levels.

yeah, i said "TTL UART USB converter" just because of easy search on ebay.
The i/o port is LVCMOS of course (3.3V). I know that the ports are 5V tolerant, but i would still
recommend to use "proper" 3.3V levels.

Also maybe it is possible to get step-by-step manual how to flash firmware using JTAG? I have Segger J-Link :)

well, i use H-JTAG USB (for which i wrote OOB NAND drivers) so no idea how to read/write NAND properly (with OOB blocks) over J-Link.
Search for mini2440, s3c2440 + j-link, there are tons of manuals/threads available.

I see that the scope top surface above LCD gets warm, since there is no cooler. Is it normal?

yes, it is. The temperature measured in my DSO (measured on a hot summerday after 2hrs warm-up time):
SNT controller (TOP246YN) - 65°
KA378R33 - 70°
KA 78R05 - 58°
ADCs (without heatsink) - 60°
FPGA (without heatsink) - 60°
BNC plugs - 45°

so as you can see they hot but still within specs. You can install a cooler, there is everything prepared on power supply PCB (7805 + some caps).
It is enough to drive a 12V cooler with 8V or even 5V to make the enclosure temperature much lower (with 5V almost no cooler noise)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Zinahe on January 21, 2011, 08:26:56 pm
tinhead and all,

Thank you for the all the good work.

Do you think this UDT2102CEL http://www.andahammer.com/udt2102cel/ (http://www.andahammer.com/udt2102cel/) can be hacked the same way like it is done on the Tekway ? I know the UT2102CE has been mentioned at the begining of the discussion, but I believe this particular model is different. I could be wrong, but the damn thing looks very  similar to the Tekway version.

(http://www.andahammer.com/assets/Uploads/scopes/_resampled/ResizedImage600363-UT2102FU.jpg)

Regards,

Zinahe A.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 21, 2011, 09:55:15 pm
@Zinahe

if you ever heard about "chinese piece of crap", then it was one of such famous things like the UNI-T CEL.

This is one of these management decision devices, not a new design, just a new display, cheap interpolation (actually not interpolation, 4 pixels will be displayed as one) on a cheap 480x234 display. So what is the resolution ? Exact 240 x 120 ...

So no, don't compare it and no there is nothing "similar" (just think about 7' BMW and VW Golf ..  both are cars - you can drive both but you should not compare). For sure some ppl will buy UNI-T, but to be very honest Rigol is cheaper (and with some luck you hack it)
is having 320x240 resolution and light years better than the UNI-T.

About a hcak possibility : UNI-T is like Rigol FPGA + DSP based - the most critical thing is to hack the DSP firmware. Just check the Rigol thread and you will see it can be possible but only if the manufacturer was too lazy ... If you have a chance to get both 100 and i don't know 60MHz? you can try to compare firmwares .. but that's a lot of work, time and it costs some money.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Tohuwabohu on January 22, 2011, 09:04:49 am

2. Observe a signal on channel 1 and setup triggering using a suitable level and timebase. While observing the waveform press "SINGLE SEQ". The waveform is captured. Change the timebase to another setting. Press "SINGLE SEQ" again. The waveform is captured but at the OLD timebase setting, even though the scope is displaying the NEW timebase on the screen. The workaround is to change the timebase only while the scope is in the RUN mode i.e. the "RUN STOP" button is green.

yes, this is known bug (new since 2.6.x), i did notified Hantek/Tekway about it already.
As a work around you have to select always first "run", change time base, and then use single seq.
Especially if long memory is specified this bug really sucks, but the work around works (so let's hipe next fw will fix it).

This bug seems to be fixed in the 60 Mhz Tekway I received from Pinsonne yesterday.
System Status:
[model] dst1062b
[softversion] 2.06.3(110111.0)
[hardversion] 0x555583e8
[serial number] T 1G/100M ......

I think some of the FFT window options are new.
I can select between Hanning, Flatop, Rectangular, Bartlett and Blackman.

Math menu shows two additional options: CH1/CH2 and CH2/CH1.

Several new options in the Measure Menu:
Delay1-2Rise, Delay1-2Fall, +duty, -duty, Vbase, Vtop, Vamp, Overshot, Preshot, Period Mean, Period RMS
The Help entries for these options are incomplete. Trying to scoll past Delay1-2Fall blocks the scope and the only way to get it into normal operation is the power switch.

English seems to be the only available language in this firmware.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Scrts on January 23, 2011, 02:04:15 am
The i/o port is LVCMOS of course (3.3V). I know that the ports are 5V tolerant, but i would still
recommend to use "proper" 3.3V levels.

Cool, will try that.

so as you can see they hot but still within specs. You can install a cooler, there is everything prepared on power supply PCB (7805 + some caps).
It is enough to drive a 12V cooler with 8V or even 5V to make the enclosure temperature much lower (with 5V almost no cooler noise)

Maybe You remember the diameter of the cooler or the length between mounting holes?
Thanks for helping!

BTW, no news about SDK? I've managed to dump all the firmware, so I am safe to start :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 23, 2011, 02:13:22 am
so as you can see they hot but still within specs. You can install a cooler, there is everything prepared on power supply PCB (7805 + some caps).
It is enough to drive a 12V cooler with 8V or even 5V to make the enclosure temperature much lower (with 5V almost no cooler noise)

Maybe You remember the diameter of the cooler or the length between mounting holes?
Thanks for helping!

[/quote]

standard 50mm cooler.


BTW, no news about SDK? I've managed to dump all the firmware, so I am safe to start :)

no, no news about SDK.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mala_elektronic on January 24, 2011, 07:56:28 am
Hi,
on this side I have written down my experience with the Tekway DST1102B. Maybe someone find it useful.
Here is the Side in German (http://www.martin-lauff.de/tekway-dst1102b.html (http://www.martin-lauff.de/tekway-dst1102b.html))
and here in English (http://translate.google.com/translate?hl=en&sl=de&tl=en&u=http%3A%2F%2Fwww.martin-lauff.de%2Ftekway-dst1102b.html (http://translate.google.com/translate?hl=en&sl=de&tl=en&u=http%3A%2F%2Fwww.martin-lauff.de%2Ftekway-dst1102b.html)) by Google translator.

I have the Firmware version 2.06.1 (101008.0). I wonder if there is an update for my DSO. In the Internet I haven’t found any.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 24, 2011, 10:26:21 am
Hi,
on this side I have written down my experience with the Tekway DST1102B. Maybe someone find it useful.
Here is the Side in German (http://www.martin-lauff.de/tekway-dst1102b.html (http://www.martin-lauff.de/tekway-dst1102b.html))
and here in English (http://translate.google.com/translate?hl=en&sl=de&tl=en&u=http%3A%2F%2Fwww.martin-lauff.de%2Ftekway-dst1102b.html (http://translate.google.com/translate?hl=en&sl=de&tl=en&u=http%3A%2F%2Fwww.martin-lauff.de%2Ftekway-dst1102b.html)) by Google translator.

mr uni-t killer did Tekway review, nice.

I have the Firmware version 2.06.1 (101008.0). I wonder if there is an update for my DSO. In the Internet I haven’t found any.

yes, there is for Tekway 2.6.2 created by me so you could use it but probably it would be better to wait for official 2.6.3
As already posted by someone here, Tekway/Hantek is delivering DSOs with 2.6.3 right now. However there is no update available
on manufacturers website (but you can ask Tekway via email for new fw).
The reason is very simple - due the 200MHz hack they have to post (for now) separate versions per model.

I have it here, i could repackage it for your device and send you via email - so you can update your review :)
There are many changes:
- FFT new features
- PASS/FAIL with many options (3rd page in Utility menu)
- Additional RECORDER (3rd page in Utility menu)
- Additionaly Filters "Bandpass, High, Low- pass" (3rd page in Utility menu)
... still not checked all options as i have it since an hour



Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Scrts on January 24, 2011, 04:59:04 pm
So if the updates are pretty frequent, what about hacked devices updates? Once hacked to the better BW scope, the official firmware will detect the hack or not? I wonder if the firmware update tool check the current version of the software or it checks the hardware. There is possibility, that one day, the hacked scope could be updated (or actually downgraded) only using JTAG.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 24, 2011, 05:39:02 pm
So if the updates are pretty frequent, what about hacked devices updates? Once hacked to the better BW scope, the official firmware will detect the hack or not? I wonder if the firmware update tool check the current version of the software or it checks the hardware. There is possibility, that one day, the hacked scope could be updated (or actually downgraded) only using JTAG.

as for now, all firmware updates are updating to newer version regardless of hacked/not hacked, so if you did hacked to 200MHz model
it will remain 200MHz after fw update.

In the future of course there is a small chance that Hantek will change the firmware to check for example part of SN
- all Hantek models have SN's like T 1G/xxM yyyyyy where xx is model speed and yyyyyy serial number). For Tekway it will be a bit difficult,
all DSOs sold before Nov 2010 have different Model/SN codeing - but of course you can catch them too with some effort.
... but we can then still logon to shell and reprogramm EEPROM so what.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: campodea on January 24, 2011, 09:25:53 pm
I bought my Hantek DSO5102B from elec3i. They were really fast in processing my order and packed the scope very well!

Some things I noticed on the first day of playing with my new toy:

On my unit the measure and cursor buttons have to be pressed about twice as hard as all the other ones.
The ch2 position knob protrudes about 2mm more than the ch1 knob, it was glued (or is stuck) to far out on its shaft.
The TTScope software shows the not very informative message "5" upon clicking the connect button in Vista (in VMWare Fusion, will try on native windows).
The noise is prominent in xy mode, as Mala_elektronic also pointed out in his review.

Apart from that it made a really quite good first impression and I think I would buy it again!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Scrts on January 24, 2011, 10:04:25 pm
The ch2 position knob protrudes about 2mm more than the ch1 knob, it was glued (or is stuck) to far out on its shaft.

Thats strange, mine is OK.

Btw, That TTScope software is slow as hell... Pointless except of using for steady signal screenshots... Like on every scope :) I wonder if the scope has LAN expand module, what software does it support?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 24, 2011, 11:47:54 pm
On my unit the measure and cursor buttons have to be pressed about twice as hard as all the other ones.

disassemble the unit, maybe there is a piece of whatever inbetween.

The ch2 position knob protrudes about 2mm more than the ch1 knob, it was glued (or is stuck) to far out on its shaft.

they normally not glued, you can remove them easily.


The TTScope software shows the not very informative message "5" upon clicking the connect button in Vista (in VMWare Fusion, will try on native windows).

first the driver need to work, then of course the communication with DSO need to work.
The driver works in vmware, however sometimes timing seems to have issues (unexpected disconnect from DSO).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 24, 2011, 11:58:39 pm
Btw, That TTScope software is slow as hell... Pointless except of using for steady signal screenshots... Like on every scope :) I wonder if the scope has LAN expand module, what software does it support?

right, it is slow. I'm not sure if LAN module would made it faster, as for now not sure if the app itself is not sending enough updates to PC or
the PC software is just not able to update screen faster.

If you click on something within the software, the change is immediate on DSO side (but delayed on PC side), so communication PC-> DSO is slow because of PC side - but this still didn't means that DSO-> PC is fast enough.

Originaly Tekway planed to produce LAN Addon board, no idea if this will be ever produced.
For now i'm working on such board, but of course this will be only piece of hardware. USB -> Ethernet redirector driver need to be written too
to allow communication/remote control over LAN (or maybe just "SCPI" <-> DSO translator)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sliverstorm on January 25, 2011, 05:14:08 am

The TTScope software shows the not very informative message "5" upon clicking the connect button in Vista (in VMWare Fusion, will try on native windows).


This can be fixed by adding a measurement to the workspace before hitting the connect button.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: campodea on January 25, 2011, 08:14:00 am
On my unit the measure and cursor buttons have to be pressed about twice as hard as all the other ones.

disassemble the unit, maybe there is a piece of whatever inbetween.

I will have a look sometime, but right now I'm ok with pressing them a little harder...


The ch2 position knob protrudes about 2mm more than the ch1 knob, it was glued (or is stuck) to far out on its shaft.

they normally not glued, you can remove them easily.


True they are not glued. Removed the knob today and scraped away some plastic inside it -> now it goes all the way in.

Regarding TTScope I got this e-mail:

Quote
I discoverd your TTscope hang with the DSO.
I read it in the Eevblog. I wanted to post the answer but i cannot access the
blog most of the time because of DNS propagation again, I suppose.
So here is the issue: Hantek used to deliver bad TTscope and I found that the
TTscope from DSO5202B CDRom works well with DSO5102B. I reported the issue to
Hantek who will correct it with new shipments.
You will receive a link from NextSend server to download new TTscope version.
Follow the instructions and read our bugs report.

Thank you.
Kind regards,
Pascal Geyre
Elec3i
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Scrts on January 26, 2011, 04:58:25 pm
Hacked mine. Added cooler inside, which is already annoying :'(, so thinking about on/off button. Firstly connected through UART, changed all the model names as described (dst1102b->dst1202b), restarted and it showed me DSO5102B logo, so I have ran firmware update with DSO5202B firmware which was complete successfully. Restart showed logo with DSO5202B ;D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: baldrick9 on January 27, 2011, 05:20:04 am
Woohoo - just received my Hantek DSO5102B from goodluckbuy.com (via eBay). Dunno why anyone would pay more than double to buy from the Australian distributor. Maybe warranty? support? something...  but I don't think it's worth more than double the price.

Having said that... The scope's a little bit grubby around some buttons, but not worn - I thought it might be *used*, but upon closer examination I now think not. Perhaps the dealer was just testing/configuring it. Firmware shows as 2.06.2.  Hmmm should I hack it?

Mine has already locked up once - while doing a simple measurement. Maybe it was user error. I'll see if it happens again.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on January 27, 2011, 02:39:28 pm
Dear baldrick9,
IT is very simple :
Chinese from HongKong or Shenzhen used to deliver with prices that is large enough for them. Another thing is that VAT is not charged but your custom should inquire you in a while. I don't know why people don't understand this. When we sell from Europe to Europe, VAT is charged either by the retailer or the customer, it depends of some VAT policies. For ELec3i, our policy is the VAT is charged for us and not charged by the customer. In the case of a purchase from China, individuals will be charged by their country customs plus other fees, this can be 20 percents of the the purchase price. So you can calculate easily:
if you bought from Goodluckbuy (I hope you are a lucky guy ;D). let us say 480 eur, add 20% then you get 576 eur ! Elec3i price is 549 - 30 = 519 eur!!!
After what about Goodluckbuy service ? (warranty, repair department, online service ?) Did you get a commercial invoice ? In case of repairing do you plan to send the device back to China ? Wow, never forget anything and compare the comparable.... ;)
Cheers
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Scrts on January 27, 2011, 07:39:10 pm
I have chosen to void the warranty... Whatever :) I could reupload the previous firmware and send it back to hantek if something happens, but seems like all of the parts inside (FPGA/uC/ADC/etc) are orderable and still in production, so it is possible to change them myself.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 27, 2011, 07:59:36 pm
I have chosen to void the warranty... Whatever :) I could reupload the previous firmware and send it back to hantek if something happens, but seems like all of the parts inside (FPGA/uC/ADC/etc) are orderable and still in production, so it is possible to change them myself.

right, and as soon i'm ready with complette schematics you would be able to trace the potential error.

There is only one exception - CPLD is copy protected and we don't have/knwo what inside. So whatever you do, don't destroy CPLD :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Scrts on January 27, 2011, 09:04:16 pm
So You're reverse engineering the schematics? Afaik the PCB is not 2 layered, so it is pretty hard  :-\
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: baldrick9 on January 28, 2011, 03:07:26 am
In Australia GST (VAT) is not applied to imported shipments valued less than $1,000 AUD i.e when an individual buys from eBay etc.. Electronic test equipment doesn't incur import duty. So I'm not expecting to hear from customs. Maybe this is lucky, compared to other countries. The scope cost me a total of $693 (AUD) including DHL shipping. I understand that I have little-to-no chance of warranty support, but I'm not prepared to pay more than double to get warranty support, that I may not need (it's like insurance - it should not double the price!).

On a more technical note.. my firmware seems to be the slightly newer 2.06.2 (101108.0) - but not the latest 2.06.3

So maybe the only way to hack will be the original way via JTAG or UART?

Sliverstorm - I noticed you had the same version as me and had a problem updating the firmware - how did you fix it? Did you just use the JTAG method?

Thanks to tinhead and all for this thread - it's great stuff!

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on January 28, 2011, 11:26:01 am
Dear baldrick9,
AUD 693 = EUR 502, not double price anyway compared to our european price (519 + shipping Europe < EUR 545) ;)
There will be on the market (Elec3i) LAN and WIFI add-ons for your DSO5000 series (DSO5202B, DSO5102B, DSO5062C). We will retrofit our DSO stock and can do for customers who need to. According to Hantek, the communication speed will be increased compared to the USB link, but for now we have no idea for the real speed. We will report this later. Another thing is that we should be a Hantek repairing center for Europe (to be confirmed in a while). This can be nice for people who don't want to return their scopes to China (Expensive shipping + custom troubles, etc.). We already repair DSO1000 series for people who didn buy from us.  8)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Scrts on January 28, 2011, 12:59:17 pm
Thats nice pgup62! Are You planning to sell WiFi expansion modules separately? What software support Ethernet/WiFi modules?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on January 28, 2011, 01:15:04 pm
Yes this is a possibility for people who want to do by themselves for either Lan and Wifi boards. we will give precisions later and post prices in our website.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 28, 2011, 01:34:05 pm
DONT BUY FROM THEM ! I WILL BE CHEAPER!

hehe, just joking guys. I did ordered some PCBs and was about to announce the production,
but if Elec3i will sell them too (as manufacturer supported version) i will throw my PCBs into trash.

Manufacturer supported is probably better, and i would be not that much cheaper than they,
so no loss at all for you guys.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Chasm on January 28, 2011, 01:55:31 pm
And so they get back at you for the bandwidth hack. 8)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Scrts on January 28, 2011, 02:43:14 pm
hehe, just joking guys. I did ordered some PCBs and was about to announce the production,
but if Elec3i will sell them too (as manufacturer supported version) i will throw my PCBs into trash.

Don't :) What if manufacturers modules will be crap? :P
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 31, 2011, 01:15:25 am
before i change my mine, how many of you guys would buy such LAN-addon board right now?

The price is not calculated yet, so let's just use dummy number 50USD.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Regnirps on January 31, 2011, 02:52:10 am
@Zinahe

if you ever heard about "chinese piece of crap", then it was one of such famous things like the UNI-T CEL.

This is one of these management decision devices, not a new design, just a new display, cheap interpolation (actually not interpolation, 4 pixels will be displayed as one) on a cheap 480x234 display. So what is the resolution ? Exact 240 x 120 ...

So no, don't compare it and no there is nothing "similar" (just think about 7' BMW and VW Golf ..  both are cars - you can drive both but you should not compare). For sure some ppl will buy UNI-T, but to be very honest Rigol is cheaper (and with some luck you hack it)
is having 320x240 resolution and light years better than the UNI-T.

About a hcak possibility : UNI-T is like Rigol FPGA + DSP based - the most critical thing is to hack the DSP firmware. Just check the Rigol thread and you will see it can be possible but only if the manufacturer was too lazy ... If you have a chance to get both 100 and i don't know 60MHz? you can try to compare firmwares .. but that's a lot of work, time and it costs some money.

Hello Tinhead. I have a dozen of these Uni-T scopes as we were thinking of selling them. I would like to examine the inside and can not see how they come apart. Did you get one open without damaging it?

The scopes you have been playing with sound more appropriate since I sell and support all the Mini2440/Mini6410 products. They even use the same Innolux LCD as the FriendlyARM 7" systems. We will be shipping from Hong Kong or Shenzhen to Seattle by sea very soon which will cut our incoming shipping costs considerably. The 6410 would be a nice choice for these. The VFP could make quick work of bigger FFT jobs.

By the way, I wonder if the pixel doubling in some of the Uni-T is less of a cheap upgrade and more of a misguided attempt to have the "look" of the early Tektronix small DSOs that were so immensely popular. The display certainly has a very familiar feel.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mala_elektronic on January 31, 2011, 10:19:33 am
@tinhead
I would take one.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: spookytooth on January 31, 2011, 03:03:35 pm
Hi all... 'upgrading' worked fine using UART connection and the shell.
I managed to upgrade to 200MHz and DSO is working fine. But the .ico files for the other models (except the original one) are not included on my system, so I just copied and renamed the original one but it would be nicer to have the correct one being displayed on startup.
Can somebody post a DST1102 and 1202 icon file please? - Thanks...

@tinhead: maybe you can modify your script to copy the missing/required icon files during 'upgrade' as well?


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 31, 2011, 05:37:00 pm
attached all logos (ico) files, from both Tekway and Hantek models.



Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: spookytooth on January 31, 2011, 10:35:20 pm
Thanks! Looks much better now  ;)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Scrts on February 01, 2011, 03:03:55 am
... since I sell and support all the Mini2440/Mini6410 products.
Maybe You have Your eshop? I am interested in mini2440/6410 boards

before i change my mine, how many of you guys would buy such LAN-addon board right now?
Hm, what about WLAN modules? :) I would be interested in those :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 01, 2011, 03:30:46 am
before i change my mine, how many of you guys would buy such LAN-addon board right now?
Hm, what about WLAN modules? :) I would be interested in those :)
[/quote]

WLAN can be something like:

- USB stick in front panel, like VT6656 (useless, evt. with some modification can work as "remote usb storage" to save setups/screenshots,
   but no shell access)
- USB to WLAN adapter on the back side (useless and unecessary overhead, need to be small (can be but linux not necessary) host translating
   USB to WLAN)
- real memory mapped WLAN module, haven't investigated which chipset can be connected, can be done directly chipset to i/o port or indirectly.

in my opinion only the real memory mapped WLAN module with chipset directly connected to i/o port make sense, everythign else is overhead or unnecessary/useless protocol/port translation from/to/whatever/to/WLAN.

But let's see what HanTekway/Elec3i will develop. The LAN module i build is 10mbit (CS8900A based), fast enough for whatever you need.
Of course i could create a DM9000 based addon board to get 100Mbit, but i'm too lazy (there is ready compiled CS8900A module installed
on HanTekway DSOs - this might change in the future but for now it is sufficient).

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Regnirps on February 01, 2011, 04:39:45 am
... since I sell and support all the Mini2440/Mini6410 products.
Maybe You have Your eshop? I am interested in mini2440/6410 boards

before i change my mine, how many of you guys would buy such LAN-addon board right now?
Hm, what about WLAN modules? :) I would be interested in those :)

www.andahammer.com (http://www.andahammer.com)  I'm not here to push it. A customer put me on to the scope discussion which is pretty interesting and I'd like to open one of the Uni-T wide screen units and check it out. Can not figure how to open it without damage! The S3C2440 based ones are really attractive. I might have a short sale on Uni-T :-) and pick up some of the others in Shenzhen in April, maybe meet the engineers and see whats up.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Regnirps on February 01, 2011, 04:48:04 am
before i change my mine, how many of you guys would buy such LAN-addon board right now?
Hm, what about WLAN modules? :) I would be interested in those :)

WLAN can be something like:

- USB stick in front panel, like VT6656 (useless, evt. with some modification can work as "remote usb storage" to save setups/screenshots,
   but no shell access)
- USB to WLAN adapter on the back side (useless and unecessary overhead, need to be small (can be but linux not necessary) host translating
   USB to WLAN)
- real memory mapped WLAN module, haven't investigated which chipset can be connected, can be done directly chipset to i/o port or indirectly.

in my opinion only the real memory mapped WLAN module with chipset directly connected to i/o port make sense, everythign else is overhead or unnecessary/useless protocol/port translation from/to/whatever/to/WLAN.

But let's see what HanTekway/Elec3i will develop. The LAN module i build is 10mbit (CS8900A based), fast enough for whatever you need.
Of course i could create a DM9000 based addon board to get 100Mbit, but i'm too lazy (there is ready compiled CS8900A module installed
on HanTekway DSOs - this might change in the future but for now it is sufficient).


[/quote]

The old Linux they are using on the S3C2440 (from over 2 years ago and for 2410) needed three tool chains to put together. It usually has TP-Link321 handler and r73 firmware installed somewhere. I don't think you can find a DM9000 setup for that tool chain mess. I have some DVDs with the old software and tools for QQ2410/2440 that I bet are the same thing and the downloads may have never been erased from my hosting site.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 01, 2011, 10:15:35 am
all china DSO have one common thing - the enclosure mechanical construction. Just remove top screws (behind the hangripp so you have to remove it forst), remove bottom screws.

Regards Linux 2.6.13 and DM9000, no there are no issues with drivers.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: baldrick9 on February 03, 2011, 04:37:57 am
Can confirm that the one I received last week has the heatsinks on the ADC's just like the image posted earlier.

The Australian dealer for these wants $1,495 +GST(10%) for the Tekway DST1102b ($AUD). This is crazy stuff!
http://www.triosmartcal.com.au/product_info.php?products_id=1961 (http://www.triosmartcal.com.au/product_info.php?products_id=1961)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Regnirps on February 03, 2011, 07:24:51 pm
all china DSO have one common thing - the enclosure mechanical construction. Just remove top screws (behind the hangripp so you have to remove it forst), remove bottom screws.

Regards Linux 2.6.13 and DM9000, no there are no issues with drivers.

I got into the Uni-T and so far all I see is a Lattice part, an Analog Devices DSP, and some AD A/D converters and an analog amplifier/management chip I need to look up. I have not seem the bottom of the board yet but I have the feeling there is no Samsung ARM and very little likelihood of hacking anything.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Regnirps on February 03, 2011, 09:55:48 pm
I forgot to mention that when I opened the UNi-T, the heavy metal lid to the shielded input section was off and wedged under some structure against the PCB! Now I'll have to open them all I guess. Looks like we will be switching brands if we decide to continue down the instrumentation road.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: saturation on February 04, 2011, 08:13:36 pm
Hello tinman and other Tekway hackers,

Can you check the X-Y function of this scope, either native or hacked version?  Can you generate a lissajou pattern with frequencies >= 100kHz?  If you can, what's the limit before the scope starts to choke?

If you've never done it or heard of it, just connect 2 separate sine wave sources, one for each channel, and set the scope to X-Y mode.  This will create a lissajou pattern.  Its CPU intensive.

What it is:

http://en.wikipedia.org/wiki/Lissajou (http://en.wikipedia.org/wiki/Lissajou)

I've tried it on the Rigol 1052E, and it chokes at 100kHz. 

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 05, 2011, 12:39:34 am
Can you generate a lissajou pattern with frequencies >= 100kHz?  If you can, what's the limit before the scope starts to choke?


no issue up to end of bandwidth, even 190/380MHz has been displayed properly. Starting from 1MHz down to 150Hz there are some small gaps (like on analog scope), but they can be easily "disabled" by the wave persistency setting (e.g. 0.2 sec persistency is fast enough for human eye to produce complette waveform but still fast enough to not produce visual latency). Then from 150 to 20Hz the signal is dropping producing more noice than "waveform".
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Igor on February 05, 2011, 06:37:41 pm
Finally I got my Tekway DST1102B!

Packaging not very aesthetic, pillow, but without significant damage. Check the contents of the box.  
Immediately see a strange gadget that may not be part of the kit – USB hub, which recalls children's toy - colorful rattle. Just yesterday bought his grandson something similar. And here's the USB cable to connect the oscilloscope bundled with a computer was missing.  

The seller had warned me that the device will be the Chinese version, so you see on the front only characters, I sighed heavily, but fainting fell.
A few months ago, purchased from the same seller UTD2102CEL, and got shipped two interchangeable faceplates-English and Chinese.  
Apparently, Tekway saves on a piece of plastic.  

User manual is missing. Even the Chinese version. Instead, delicate brochure for quick installation. Of course, Chinese …  

First time turn ON device. Oh my God, it works!!!  
But to understand the Chinese menu very difficult. Good thing I found online English manual for the device, and already printed it.  
The first tests did not reveal any malfunctions. Knobs revolve, button are pressed, the characters on the display changes. Probably should be.  

Find information about the installed version of the program. It turned out to be pretty old:

model: dst1102b
soft version: 2.03.0 (091231.0).
hard version: 0x555583e9
serial number: T09xx1102bxxxxxx
boot count (?): 49
upgrade log (?): 0

I try to connect the oscilloscope to a PC. PC sees the peripheral and asks you to specify the driver path.
CD find the only one PDF-file - is a Chinese user manual. No program files.
Dead End …
 
I want to see what's inside the device.  
Gently open case, and see that the front metal plate, which closes the display and a button bar, quite dirty. No neat looks and fee for power supply: the traces of the soldering flux and dirty fingers. Take off the upper screen MB. Immediately see whether radiators on chips ADC. They do not exist ... So far it's unpleasant but not fatally. Radiators can glue itself. We'll see that there are in stock and will install.
But first do update on recommendations Tinhead. Here's this and will be soon.  

I have all files and programs that are overlaid Tinhead in this branch of the Forum, and USB cables (A-A and A-B). Special cable type UART or JTAG not, but if necessary, can do it.  On a PC running Windows XP SP3. This is what I have at the moment. I have no experience for hacking such devices.  
I would be very grateful if someone agree to advise me or explain how to properly "step by step" to update the program.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 05, 2011, 08:09:14 pm
Igor,

download

https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=4581 (https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=4581)

and

https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=4582 (https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=4582)

ask me for help, all depends on your fw version

run it on your windows computer, it will unpack the ***.up file somewhere to your harddrive.
Copy this **.up file to empty usb stick, put on DSO, insert stick into DSO.

Wait 4 sec., click utility button (marked in attached picture), click F2, click F5 (or whatever will be displayed, i believe the old fw is asking for F6) to confirm.

After the update is ready switch off DSO, remove usb stick and switch back on.
Now you should have english language instaled, to enable it again Utility, and F2 (probably  multiple time until you see english).

That's all.

You can get english manual from Hantek.com or tekwayins.net.

They a bit outdated but enough for now.

You can use this picture :
http://www.tekwayins.net/pic/1202B.jpg (http://www.tekwayins.net/pic/1202B.jpg)
to print some english labels for your front panel :)

If something not working as described send me PM, i can guide you through.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: saturation on February 05, 2011, 08:30:44 pm
Thanks a million for that quick test, tinhead!  ;D.  Its looking like Tekway is an overall better scope in performance and capacity, over the Rigol, mostly thanks to all the tests and info you provide.  The more I use the Rigol the more the menus getting too crowded bothers me, and I wish for the wider Tekway screen.

I found an undocumented feature if the Rigol I will post on the Rigol thread, since its more appropriate for these readers to know. Some screen grabs are there too.

The persistence function in the Rigol 1052E works so long as the phase is matched and doesn't drift, otherwise it slowly paints the entire view area a nice solid color!

  
Can you generate a lissajou pattern with frequencies >= 100kHz?  If you can, what's the limit before the scope starts to choke?


no issue up to end of bandwidth, even 190/380MHz has been displayed properly. Starting from 1MHz down to 150Hz there are some small gaps (like on analog scope), but they can be easily "disabled" by the wave persistency setting (e.g. 0.2 sec persistency is fast enough for human eye to produce complette waveform but still fast enough to not produce visual latency). Then from 150 to 20Hz the signal is dropping producing more noice than "waveform".

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 05, 2011, 09:18:19 pm

The persistence function in the Rigol 1052E works so long as the phase is matched and doesn't drift, otherwise it slowly paints the entire view area a nice solid color!


luckily the HanTekway DSO have 0.2sec, i believe the lowest persistance on Rigol is 1sec, that's just too much.
Additionally you can change screen refresh rate on HanTekway between auto, 30, 40 and 50 frames.
I did my tests with 50frames/sec (i just love when the screen is updating very fast), but recognized later that
for phase unsync slow XY signals is better to set auto or 30frames/sec to get even better picture than with persistency on 0.2sec.

So you can see there are some features helping a bit out. Someone mentioned already that the noice level in XY mode is very high
on HanTekway DSOs. But to be very honest it seems to be the same "issue" on Rigol (or at least from what i saw on screenshots).

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: saturation on February 06, 2011, 12:02:16 am
Thanks tinhead for those additional Tekway tips.  More adjustments are always helpful, you never know how it can help improve the image!  The only thing I can do with noise is use average mode, since it should cancel each other out and leave the signal alone; alas its disabled in the XY mode!  :'(

Since there are no automated measurements, the last resort is save the image, and manually measure the phase angle using the center of the fat tracing  ;D



The persistence function in the Rigol 1052E works so long as the phase is matched and doesn't drift, otherwise it slowly paints the entire view area a nice solid color!


luckily the HanTekway DSO have 0.2sec, i believe the lowest persistance on Rigol is 1sec, that's just too much.
Additionally you can change screen refresh rate on HanTekway between auto, 30, 40 and 50 frames.
I did my tests with 50frames/sec (i just love when the screen is updating very fast), but recognized later that
for phase unsync slow XY signals is better to set auto or 30frames/sec to get even better picture than with persistency on 0.2sec.

So you can see there are some features helping a bit out. Someone mentioned already that the noice level in XY mode is very high
on HanTekway DSOs. But to be very honest it seems to be the same "issue" on Rigol (or at least from what i saw on screenshots).


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Igor on February 06, 2011, 02:15:39 am
Tinhead, thank you!
I did, now the device is multilingual.  

System status:
model: dst1102b
soft version: 2.06.2 (101028).  
hard version: 0x555583e8  (Change the last digit: 9->8 )
serial number: T09xx1102bxxxxxx
boot count: 62
upgrade log: 1

Can I add another Russian? I'm willing to translate all menus and built-in help.  
How do I upgrade to DST1202B?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 06, 2011, 03:41:01 am

Can I add another Russian? I'm willing to translate all menus and built-in help.  


The help file is SQL Lite v3 DB, you can edit it with your fav. SQL lite editor
Menu is just a text file, it can be translated. The firmware 2.6.2 does support cyrillic characters :
-FontRusAsc22x24
-FontRusAsc19x19

Side note : Not every language can be implemented, the language.lan file is only one part of the story,
the firmware itself need to support it. For 2.6.2 that :

Korean  Korean.lan 
Italian Italian.lan
Spanish Spanish.lan
German  German.lan 
Russian Russian.lan
French  French.lan 
Japan   Japan.lan   
Tridchn Tridchn.lan
Chinese Chinese.lan
English English.lan


In your case there is support already compiled in the dso firmware
but probably Hantek/Tekway not managed (yet) to do proper translation.

Another thing is, you will have to stay on 2.6.2 for now (2.6.3 have too many bugs anyway)
In case you do an update to higher fw version you will have again to change/edit the russian.lan (to match what inside to new menu structure)
If you don't update, your menu will be corrupted :) So it can be a neverending story ...
(until Hantek/Tekway translate by themselve the russian.lan)

But as i said, nothing really hard, it is text file so you can do it easily.

You will have to use for example the English.lan (attached, from 2.6.2 firmware), edit it and save as Russian.lan

Then of course you will have to copy it to /OurLanguages folder of the DSO linuy ... this can be done by special crafted firmware
or for example from USB stick after you connected over UART to the linux shell.

I could prepare such special crafted firmware, but you will have probably to do some testings anyway
(espacially with the help.db translation), so the best for you will be to learn how to connect via UART to DSO linux shell.

On the very first page there are pictures of UART port (UART0), you will have to buy UART-> USB adapter (ebay for "cp2102 usb ttl")
and to use your fav. terminal application (e.g. putty)


How do I upgrade to DST1202B?


well, it is in this thread, but i will do it very simple for you :)

download this

https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=4577 (https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=4577)

copy to usb stick and run firmware update. After reboot you will have DST1202B
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Igor on February 06, 2011, 04:27:09 am
Tinhead – you're the best!  :)

Now I have not "chinese soap dish", and wonderful oscilloscope DST1202B!  

System status:
model: dst1202b
soft version: 2.06.2 (101028)
hard version: 0x555583e8
serial number: T09xx1102bxxxxxx
boot count: 65
upgrade log: 2

I won't rush translation system menu. Will do that once a new version of 2.06.3.

Tinhead, if you need help with translation to Russian, can count on me.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: zare on February 15, 2011, 07:04:00 pm
Looks to me that Tekway DST1102B and Hantek DSO5102B is the same scope, but the Hantek is bit cheaper. Should I expect better quality with Tekway?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 15, 2011, 07:15:49 pm
Looks to me that Tekway DST1102B and Hantek DSO5102B is the same scope

well yes they are.

... but the Hantek is bit cheaper. Should I expect better quality with Tekway?

I know i reported that 60Mhz Hantek have some 1% instead of 0.1% resistors,
but on the other side 1% is still sufficient and they not making a real price difference (that's about 12 resistors per scope).
Other parts have exact the same specs, so what (it was probably just a delivery issues, so they soldered 1% resistrors).

Both companies are delivering with heatsinks on ADCs, both is not soldering the 2.54 headers anylonger (except UART),
both have same probes.

The only real diff (as until of now, but i think that will change too in the future) is that Tekway seems to be soldered a bit cleaner,
which means they have still own production line what probably make the price
diff (as Tekway is only producing these DSOs and Hantek many other things).

So it don't need to be necessary quality driven, it can be marketing/production cost thing.



Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Scrts on February 16, 2011, 09:53:08 pm
Looks to me that Tekway DST1102B and Hantek DSO5102B is the same scope, but the Hantek is bit cheaper. Should I expect better quality with Tekway?


Open a Hantek scope and check PCBs. Its all Tekway inside, every single PCB marked Tekway.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: zare on February 16, 2011, 11:44:05 pm
Thanks guys .. Hantek on order  ;) ..
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on February 18, 2011, 01:26:15 pm
Yes I confirm, even Hantek english user's manual show Tekway front panels instead of their Hantek front panels, a little bit funny  :D, we feel sorry for this.
We are translating this user's manual into french, and put our own pictures (With hantek this time)... ;)
Hantek/Tekway buyers, do not forget Elec3i for your purchase  ;D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 19, 2011, 12:04:25 am
Hantek/Tekway buyers, do not forget Elec3i for your purchase  ;D

Hi Pascal,

i got nice answer from Hantek/Tekway, they will not release the SDK yet (company policy - the firmware have too many bugs
and they wish first to fix them before SDK will be released, this is good idea).

The only bad thing is - they will not release the source code. So you know what this means, they using illegal operating system
(it is actually stolen if you don't publish sources as requested in the GPL) making the whole DSO illegal in European Union.
So you asking ppl now to buying illegal (actually stolen) product ?


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gall on February 19, 2011, 07:43:09 am
I think it's about time to take a legal action about this. Please forward the answer to http://gpl-violations.org/ (http://gpl-violations.org/)

I think about developing the firmware from scratch.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on February 19, 2011, 02:24:26 pm
Tinhead,
You are right and I asked them to release the sources too, I am waiting for their reply. I feel confident something will happen in the right way...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: dfnr2 on February 20, 2011, 04:57:37 pm

i got nice answer from Hantek/Tekway, they will not release the SDK yet (company policy - the firmware have too many bugs
and they wish first to fix them before SDK will be released, this is good idea).

The only bad thing is - they will not release the source code.

Hi Tinhead,

Is the SDK for developing software on a PC communicating with the scope by USB or RS232, or is it for extending functionality built in to the scope?  Judging from their bacground in USB scopes and lack of SCPI, I imagine it's the first option.  The second option would be surprising, but much more interesting.

Regarding the GPL, they may be obligated to provide access to compilable version of the GPL code such as the kernel and any GPL libraries, but still won't be obligated to provide access to the scope application or any of the HDL.  It would be nice to have sources frr these, of course!

Dave
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: project on February 20, 2011, 05:29:20 pm
A friend went back Taiwan bring me back a Hantek DSO5102B in his backpack, about CAD$450 from hantek distributor. Yep, if u got friend in china, then u can have it about $400 or less.

Open up, every piece made by tekway, only little diff on firmware. Has reserved fan connector holes on board and fan bracket, but maybe no need a fan, as let it continue work 4-5 hours highest temp was 43 celsius degree on PSU. Probes come woth it are 150Mhz, yep, I have better, it's not a matter for me.

Before I open it up, I had a feeling that this one is 200Mhz ready, as the SN lable on the back of machine is T 1G/200M 00xxxx, but firmware show T 1G/100M 00xxxx. Yep after I open it up it is 200Mhz ready--44A(280) and 330 risistors on board.

Sadlly, firmware is 2.06.02(101108.0), that means I may not update it just by usb without lie to DSO.

Havn't play it too much, but will do.

Also thanks Tinhead, I almost pull the trigger on Atten ADS1102CAL right before I saw this post.  

Btw I think the front shell and knobs color should be gray instead irovy, as time and heat will let irovy turns to yellowish. 

  
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: project on February 20, 2011, 05:36:19 pm
For above someone asked could not find USB driver for windows 7. You can just install TTscope on CD come with your machine first, and plug DSO in and manual install driver from TTscope installation directory under x:\program file\TTscope\drivers or similar, accept install driver anyway, it'll work. But when u trying to connect it with TTscope, it'll report sort of error and won't work anyhow. 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 20, 2011, 08:26:34 pm
For above someone asked could not find USB driver for windows 7. You can just install TTscope on CD come with your machine first, and plug DSO in and manual install driver from TTscope installation directory under x:\program file\TTscope\drivers or similar, accept install driver anyway, it'll work. But when u trying to connect it with TTscope, it'll report sort of error and won't work anyhow. 

just don't use the TTScope from CD, the one on Hantek website is bit better, especially drivers.

Before I open it up, I had a feeling that this one is 200Mhz ready, as the SN lable on the back of machine is T 1G/200M 00xxxx, but firmware show T 1G/100M 00xxxx. Yep after I open it up it is 200Mhz ready--44A(280) and 330 risistors on board.

oh that's even better for you, after hack to 200MHz bw the calibration will match 100%.

Btw I think the front shell and knobs color should be gray instead irovy, as time and heat will let irovy turns to yellowish. 

actually Hantek is mix of gray and ivory, Tekway's frontpanel is typical ivory (which i like because match to my other already yellowish toys)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: project on February 21, 2011, 07:05:48 am
just don't use the TTScope from CD, the one on Hantek website is bit better, especially drivers.

Yes u are right, TTScope on Hantek website works fine. Thanks again.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ianryeng on February 22, 2011, 05:00:47 am
So after spending a lot of time debating buying Atten, then finding and reading this entire thread (thank you to all of you who have contributed) I no longer am interested in Atten and want to get one of these instead. The questions I have are is there a preference (quality, potential future support, ect) between Hantek and Tekway? Also is the 100MHz version worth $140USD more than the 60 or has anyone here successfully upgraded a 60 to say a 100 or even 200 (money is tight so if its not necessary I don't want to spend it)?

Sorry for all the questions and I appreciate any responses.

Thanks,

-Ian

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: project on February 22, 2011, 01:05:15 pm
So after spending a lot of time debating buying Atten, then finding and reading this entire thread (thank you to all of you who have contributed) I no longer am interested in Atten and want to get one of these instead. The questions I have are is there a preference (quality, potential future support, ect) between Hantek and Tekway? Also is the 100MHz version worth $140USD more than the 60 or has anyone here successfully upgraded a 60 to say a 100 or even 200 (money is tight so if its not necessary I don't want to spend it)?

Sorry for all the questions and I appreciate any responses.

Thanks,

-Ian


This was the question that I had before I got my. Believe Tinhead. Hantek and tekway are identical, all their boards made by tekway, diff maybe just on firmware/logo and frontpanel cosmatic look.

Yes, you can mod 60 to 100 or to 200,or 100 to 200. someone already confirm it. All you need is change some risistors and hack the software. but Three things remind you.
1.Those are SMD resistors, you'll need proper tool and skill to change them (hot gun or smd tweezer iron), and resistors cost money. Mine's lucky, come with 200 ready.
2. For hantek5102B 2.6.2(101108.0), you'll need JTAG way to hack it, or modify USB files to cheat DSO. I don't know tekway.
3. I heard probes come 60Mhz is 80Mhz. You may ask these to confirm. My 100Mhz come with 150Mhz.  Good probes cost quite a bit in NA, 1/10 price in China.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: project on February 22, 2011, 01:11:12 pm
BTW, the headers on my 5102b come with two size. FPAG JTAG header is 2.5mm, ARM JTAG and I/O header are 2mm. Not soldered.

And we don't need remove handle to remove top two screws, only need is open it by 45 degree, you'll got enough space to remove them.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ianryeng on February 22, 2011, 02:13:54 pm
Hey,

Thanks for the quick response and feedback.
If probes are the only real difference I will factor that in and see how much difference there really is in the cost.
In terms of reworking the front end I don't expect too many problems.

Thanks again, I appreciate the feedback. Now I just need to convince my wife...
Hope to be bugging you again soon to mod one of these :)

-Ian
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 22, 2011, 02:23:44 pm
This was the question that I had before I got my. Believe Tinhead. Hantek and tekway are identical, all their boards made by tekway, diff maybe just on firmware/logo and frontpanel cosmatic look.

exact, they identical.

Yes, you can mod 60 to 100 or to 200,or 100 to 200. someone already confirm it.
the whole thread is about the mod, and yes this works.

All you need is change some risistors and hack the software. but Three things remind you.

not exactly, if ~180-190MHz are enough for you then you don't have to change these resistors.


1.Those are SMD resistors, you'll need proper tool and skill to change them (hot gun or smd tweezer iron), and resistors cost money. Mine's lucky, come with 200 ready.

as above ... Btw, i would not recommend to change them if you have no additional test equipment to evt. change the internal compensation.

2. For hantek5102B 2.6.2(101108.0), you'll need JTAG way to hack it, or modify USB files to cheat DSO. I don't know tekway.

right, Hantek for sure Tekway i got reported some models where the hac was still working over USB,
but generally spoken yes you have to do it over uart

3. I heard probes come 60Mhz is 80Mhz. You may ask these to confirm. My 100Mhz come with 150Mhz.  Good probes cost quite a bit in NA, 1/10 price in China.

yeah, that's the major problem. IF you have already good probes you will probably don't care, but if you don't you will have to buy better probes.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tom66 on February 25, 2011, 01:44:23 am
tinhead, do you have the input schematic for this scope? I am trying to learn a bit more about oscilloscope inputs and filters. I lost the original PDF, then you took it down. Would appreciate it, thanks!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: SuperMiguel on February 25, 2011, 05:21:17 am
why do you give the option of 100MHz, 150, and 200? why not just 200? why should any one want to be at 100/150 when they can have 200Mhz??
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ianryeng on February 25, 2011, 05:32:49 am
Aside from the fact that people may want to play around with different limits to see the differences the fact that all firmwares are available would be very convenient in the event of failure to revert to factory settings if you wanted to try and claim the warranty. Just my guess though.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 25, 2011, 12:35:51 pm
tinhead, do you have the input schematic for this scope? I am trying to learn a bit more about oscilloscope inputs and filters. I lost the original PDF, then you took it down. Would appreciate it, thanks!

yeah i do have, currently a bit busy with other things but soon i will publish it, together with Ethernet-addon schematic.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: project on February 25, 2011, 12:39:31 pm
yeah i do have, currently a bit busy with other things but soon i will publish it, together with Ethernet-addon schematic.

Wow?this sounds great, can't wait it.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on February 25, 2011, 02:19:35 pm
why do you give the option of 100MHz, 150, and 200? why not just 200? why should any one want to be at 100/150 when they can have 200Mhz??

I think that some day it is good to open new thread where handle things what are related to analog channel quality and frequency response together with true A/D conversion samplerate.

I think this is important to look these things without connection to one scope manufacturer/model.

These things are fundamentals for understanding digital oscilloscopes and also for avoid some possible "hidden" effects to measuring accuracy and for avoid some problems.

It is not so that as wide analog channel as can made is better - specially if talk about realtime measurements as FFT or single shot or other measurements where we use realtime sampling and not repetitive sampling (Rigol named id "egual time...")

There are some good readings for this:


http://cp.literature.agilent.com/litweb/pdf/5989-5732EN.pdf (http://cp.literature.agilent.com/litweb/pdf/5989-5732EN.pdf)

http://cp.literature.agilent.com/litweb/pdf/5989-5733EN.pdf (http://cp.literature.agilent.com/litweb/pdf/5989-5733EN.pdf)

http://cp.literature.agilent.com/litweb/pdf/5989-3020EN.pdf (http://cp.literature.agilent.com/litweb/pdf/5989-3020EN.pdf)

http://www.emcsociety.org/Presentations/IEEE%20Seminar%20Scopes%20and%20Radar.pdf (http://www.emcsociety.org/Presentations/IEEE%20Seminar%20Scopes%20and%20Radar.pdf)

As long as do not rise (by mod) samplerate there is growing problem with aliasing if make analog channel more wide.
But also this problen must not overlook. Only need undertand that oscilloscope is always some kind of compromise. Good there, error there. What you see is sum of errors summed to original signal under test.

With digital camera you can easy see if picture is good enough for tell what is real what you take picture.
Scope situation is different... only "window" to signal is your scope display... but, sometimes it is wrong. How to avoid this... design scope so that all fundamentals are ok.

Example if you look FFT and signal under test include components what freq go over Nyquist.. what you see.. you see totally lies about signal under test. You can see signal (example just wrong frequency high spike... but real signal do not have it at all. Why... you read papers then you know.
It is like bad radio where you listen signals totally in wrong frequency only becouse front end and mixer etc is toy.

I hope some with good english and more time open new thread for handle these fundamentals...
You do not buy best camera by looking only more pixels... you do not get more good oscilloscope if you look only samplerate and MHz number.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: project on February 25, 2011, 09:44:04 pm
so i just got mine DSO5062B and i tried to updated it to the 200Mhz.. So i went here:
https://www.eevblog.com/forum/index.php?topic=1571.msg24564#msg24564 (https://www.eevblog.com/forum/index.php?topic=1571.msg24564#msg24564)
downloaded do_hantek_DSO5202B.zip extracted it to a flash drive and when i hit update firmware i get an error saying:

Software upgrade failed, error 0xf7 Ilegal upgrade files detected!

System status shows:

model: DSO5062B
soft version: 2.06.2 (101108.0)
hard version: 0x555583e8


This version need hack by UART or JTAG way. Or make a file to cheat the DSO, read few pages back, Tinhead explained this. Guess more people ask, Tinhead may release new version USB files.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 25, 2011, 10:58:56 pm
so i just got mine DSO5062B and i tried to updated it to the 200Mhz.. Software upgrade failed, error 0xf7 Ilegal upgrade files detected!

System status shows:

model: DSO5062B
soft version: 2.06.2 (101108.0)
hard version: 0x555583e8


you really funny guy, complained about warranty but 5min after DSO arrived directly trying to hack.
Waht do you think how many DSO mortoncontrols sold yesterday and how many got shipped today ? So it will be easy for them
to recognize your name .. and that's all about your warranty.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 26, 2011, 12:00:07 am
Guess more people ask, Tinhead may release new version USB files.

i could, but i think it is better to hack via UART, just because of such things:
- if USB hack/update fails because of whatever user will have no clue how to fix broken DSO
- too many versions necessary (H60->H100, H60->H200, H100->H200, H200->H100, H200-> H60, H100->H60, T60->T100, T60->T200,
  T100->T200, T200->T100, T200-> T60, T100->T60  ), user will don't know what/when/why
- i promised Han/Tekway to not create any new USB hacks
- i wish Han/Tekway will spend time on fixing firmware bigs and the SDK - and not on new protections only because
  i created another one USB hack for "lazy" ppl

What i will post is a new firmware dump utility, so everybody will be able (again) to make a backup of installed firmware.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 26, 2011, 12:50:22 am
New Firmware dump utility

this version works with fw 2.5 to 2.6.x (and later?)

Hantek/Tekway did added some protection into firmware update procedure, therefore the fw dump
utility need to be changed too.

Attached fw_backupV3.zip, it contains folders named as DSO names/models, all you have to do is
to copy dst1kb_9.99.9_cli(200101.0).up from proper folder (must be same as your DSO model!) to USB stick
and like always run firmware update (can take up to 5mins)


This tool will not hack nor change anything on your DSO, it will only create dump of your currenty firmware
and save it on the USB flash drive.

UPDATED: new version is V3a (see in universal folder from the attached zip file), it does use special trick
to be model independant.


EDIT: if you get error 0xFE while using the "universal" backup version, then rename the
"special_secret_dst1kb_9.99.9_cli(200101.1).up" to "dst1kb_9.99.9_cli(200101.1).up"
and try again :)


simply download, unpack and read how to use ... it contains also some informations and tools to allow restore of the backup

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Igor on February 26, 2011, 12:04:23 pm
Tinhead, you write: "must be same as your DSO model!"  
I have a DST1102B but the DSO installed DST1202B. Which model do I specify, and do I need to update your software?
I installed your program without saving the original.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: saturation on February 26, 2011, 12:16:33 pm
I think they're watching this thread  ;)

New Firmware dump utility
Hantek/Tekway did added some protection into firmware update procedure, therefore the fw dump
utility need to be changed too.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 26, 2011, 12:24:54 pm
Tinhead, you write: "must be same as your DSO model!"  
I have a DST1102B but the DSO installed DST1202B. Which model do I specify, and do I need to update your software?
I installed your program without saving the original.

well if you hacked to whatever model then this is your new model name an not what printed out on enclore.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on February 26, 2011, 01:33:51 pm
I think they're watching this thread  ;)

New Firmware dump utility
Hantek/Tekway did added some protection into firmware update procedure, therefore the fw dump
utility need to be changed too.

This forum (look link later) they also maybe watch. (Whole this Chinese forum, in some special topics and threads you can find wery avesome things... (but some of course is just garbage... but some threads you can find very extremely professional things... there are also some special highest level knowledge peoples.. as you can see example some voltage reference threads.. (ok... someone do not know enough about LTZ1000 things... ok.. lets look with RTG and other thigs what silicon have eat inside can... hehe. Olso some pictures about "homelab" where is ton Fluke Voltage standards and maybe aalso Josephson on the corner.

I mean this forum in China (you need windows asian language support installed) http://www.ourdev.cn/bbs/bbs_content.jsp?bbs_sn=4529838&bbs_page_no=1&search_mode=1&search_text=Tekway&bbs_id=3053 (http://www.ourdev.cn/bbs/bbs_content.jsp?bbs_sn=4529838&bbs_page_no=1&search_mode=1&search_text=Tekway&bbs_id=3053)

Becouse chinese language it is "littlebit" difficult use and find things but.. go to "home" and start. Interesting. Some times there you can look peoples do things what they want, somewhere peoplses do only what they can... ;)

tinhead is famous man in China...

;)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 26, 2011, 01:37:37 pm
I think they're watching this thread  ;)

sure, they watching very carefuly, especially after this hack has been notified by chinese ppl (from ourdev.cn).
This thread is 99% about the hack, however i do have other thread in different forums about users experiences or
firmware bugs (yeah, currently fw2.6.3 have "too" many - but there is a very good progress and new fw will be ready in few days, so what).

EDIT: hehe you right rf-loop, i think the next time i fly to china i will get killed but also will get some flowers too :P
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on February 28, 2011, 03:23:43 pm
Tinhead bie dan xin, zhong guo ren hen hao !
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 28, 2011, 05:53:04 pm
hehe i actually don't really worry :)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: SoftwareSamurai on March 01, 2011, 12:28:21 pm
- i promised Han/Tekway to not create any new USB hacks
- i wish Han/Tekway will spend time on fixing firmware bigs and the SDK - and not on new protections only because i created another one USB hack for "lazy" ppl

Q. Does that mean the rest of us can't/shouldn't talk about the USB hacks?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 01, 2011, 01:20:57 pm

Q. Does that mean the rest of us can't/shouldn't talk about the USB hacks?

First of all for most ppl a DSO is a measurment device and they will use it for measurments.
However, a manufacturer can't stop ppl playing around, there will be always someone who will touch the hardware\firmware
and always someone talking about, so of course you can talk about it, why not.

You can be sure that this hack will not work forever, sooner or later Han/Tekway will change FPGA design or CPLD design
or even PCB design to provent hacks. For now all they can do was to change the software. If i release a new USB hack they
will again release new software protection - and to be very honest i think there are more important tasks on their to-do list
than new hack-protection.

The SDK was planned for end of January - not yet done, necessary firmware changes are bit buggy so they have to fix them first before SDK
can be released. Additionally Ethernet addon is planned (which is again a big change to firmware) - all these changes are
more important than a "hack for lazy ppl" - which USB hack is.

Someone who knows ARM architecture and familiar with Linux will not destroy DSO by "playing around",
more critical are let say "lazy ppl" who just don't know how to fix if something get wrong during hack.
The USB hack was maybe a good solution for the beginning, but there was also potential risk of device damage.
As i said, i could compile new USB hacks (12 pcs to cover all model changes), but this will increase the risk
(not only for beginners) - which is bad for manufacturer (warranty questions, bad statements about manufacturer and so on).

Therefore no USB hacks (except things which can't harm DSO, like fw-dump/fw-restore, Eth-enabler, whatever),

If you wish to hack buy a UART-> USB converter, learn about linux/vi, and hack via UART - or buy ARM JTAG and S3C2440
based board, backup DSOs NAND content over JTAG, restore to your S3C2440 dev board, hack there is restore back to DSO.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: SoftwareSamurai on March 01, 2011, 02:19:32 pm
Yes, I do understand all of that. My question was more focused on the rest of us discussing USB modding (or modding in general) of these DSOs in this forum.

The reason I ask is because I'm a software engineer (over 20 years experience), I've got a DSO5102B and a USB TTL UART, I've been researching all of this for a little while now, and I'd like to document/discuss my findings with everyone here. But I just wanted to know what your policy was on others posting what could be considered...let's say "sensitive"...information regarding these DSOs. And when I saw your post saying that you promised not to post any more USB hacks, I thought it would be a good idea for me to ask first.

So tinhead, would it be okay with you if I were to start a new thread discussing in detail these DSO's internal workings (with some info regarding USB modding) and modding in general?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 01, 2011, 04:43:11 pm
But I just wanted to know what your policy was on others posting what could be considered...let's say "sensitive"...information regarding these DSOs. And when I saw your post saying that you promised not to post any more USB hacks, I thought it would be a good idea for me to ask first.

So tinhead, would it be okay with you if I were to start a new thread discussing in detail these DSO's internal workings (with some info regarding USB modding) and modding in general?

sure, but no issue at all. You can open a new thread or use this one (maybe even better) to discuss modding/internal things.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 01, 2011, 09:40:26 pm
So let's start other mods with Ethernet-addon schematics.

Attached working schematic (as pdf). There is nothing special except the RJ45 jack which can be

- Tyco 1888250-1 with LEDs (PCB mounted with Harwin Spacers R30-3001102 and double size 2mm pitch header)
[DK A98526-ND, DK 952-1502-ND]
or
- Tyco 5406298-1 without LEDs (PCB mounted with Harwin Spacers R30-3001502 and tripple size 2mm pitch header)
[DK 5406298-1-ND, DK 952-1506-ND]

The PCB itself is 70x62mm, screenshot of dimenssions for PCB with Tyco 1888250-1 RJ45 jack.

RJ45 jack is mounted on bottom side, it is a bit tricky due the fact that there is almost no space (1-3mm, depends on jack)
between jack and RAM on the DSO PCB. Everything else is on top of the PCB (of course except 2mm header) to
reduce EMI (bottom full grounded). The best would be 4layer PCB, but it works with 2layers too.

As the HanTekway DSO have already pre-compiled CS8900A drivers all we have to do is to edit
the /etc/init.d/rcS (just add these line before "/etc/rc.d/init.d/hotplug start" line)

insmod /dso/driver/dso-cs8900.ko
/sbin/ifconfig lo 127.0.0.1
/dso/app/setnet 00:11:38:33:44:55 1.2.3.4

where 1.2.3.4 is the IP address which will be used by DSO

and add this line before "/dso.exe" line

/etc/rc.d/init.d/netd start

This will load the CS8900A driver and start inetd with ftp and telnet enabled.
For FTP you wil of course login first time over telnet add add a user, e.g.
adduser myftp

The "/dso/app/setnet" is HanTekway compiled tool to make the network configuration easier,
however you can of course use ifconfig if you like it.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: SoftwareSamurai on March 02, 2011, 01:23:09 am
Okay, I'd like to share some info regarding the USB Update Firmware.

Note: All my work has been done using my Hantek DSO5102B w/ v2.06.2(101108.0) firmware.

While testing out the USB Update Firmware functionality (and how much I can do with it via the update script), I suddenly hit a wall where the Update Firmware would always fail (error 0xf7) no matter what I did. After tracking it down, I discovered that I had left a CTRL-M (CR) at the end of the logotype.dis file. (Obviously I had attempted to replace the file with one edited on my PC, which uses CR+LF instead of just LF.)

So the Update Firmware is scanning certain files for CTRL-M characters, and if it finds any, it will abort the update process with error 0xf7.

Here's the result of my testing of some files:
   sys.inf - not checked (probably because it's re-created after each successful update)
   tmpdst - not checked (also appears to be re-created after each successful update)
   logotype - not checked (ditto)
   logotype.dis - checked!
   upend - not checked
   update - checked! (but apparently no other files in the tekwayup_client directory are checked)

There may be other files scanned. These are just a few that I've tested directly.

Cheers!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 02, 2011, 02:00:08 am
if you download the fw_backupV3.zip you will see what is always needed to allow an update,
in principle it is only the logotype.dis which need to be present in firmware file
and the content must match the content of logotype.dis in DSO root directory.

The CR+LF issue is just because the firmware update procedure does string compare.

If you decompile dso.exe you will see the "magic" arround ubdb.swi, logotype.dis,
ucUpdateType, ucSysType, ucSysBrand and ucUpdateBrand
- just look for UpdateSysFiles procedure.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: SoftwareSamurai on March 02, 2011, 02:50:21 am
if you download the fw_backupV3.zip you will see what is always needed to allow an update, in principle it is only the logotype.dis which need to be present in firmware file and the content must match the content of logotype.dis in DSO root directory.

I started my experimenting using one of those backup .up files. Eventually I ended up boiling it all down to just the upend file and the update file. I found that I was able to do just about any shell command in the update file. That's why I started experimenting with the USB Update Firmware feature. In fact, one of the first things I did was to do a complete copy of / onto a 4GB thumbdrive (not including things like /dev or /proc, etc).

The logotype.dis file I was referring to is the one located in the root of the main filesystem (/logotype.dis). If that file has a CR in it, the update will fail.

The CR+LF issue is just because the firmware update procedure does string compare.

Apparently so. I guess the string compare includes the LF at the end of the line(s), and fails when it has CR+LF at the end of any line.

If you decompile dso.exe you will see the "magic" arround ubdb.swi, logotype.dis, ucUpdateType, ucSysType, ucSysBrand and ucUpdateBrand - just look for UpdateSysFiles procedure.

Well I haven't gotten to the point of decompiling dso.exe. I've just been experimenting with the update feature. But now that I've got my UART connected and working, it's much easier to "debug" when the update fails.

On your previous subject - I'm looking forward to the Ethernet add-on. I think that would be an excellent "upgrade" for these scopes!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: SoftwareSamurai on March 03, 2011, 03:03:29 am
Q. What's the file format for the .ico files? (e.g. hantek_DSO5202B_mid.ico) Anyone know? It looks like a .png or RGB format to me.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 04, 2011, 01:34:21 am
Q. What's the file format for the .ico files? (e.g. hantek_DSO5202B_mid.ico) Anyone know? It looks like a .png or RGB format to me.

just like typical 8bit bmp (without header so yes only RGB data), BGR, LSB first. The actual data starts on 8 bit position of the file, the first and second positions are bitmap size (e.g. samll icons from icon dir have 14h 00h = 20 pix large).

So the hantek_DSO5202B_mid.ico is 497pix.

EDIT: byte 4h have afaik transparency information stored, so if you wish to replce picture manipulate only the data starting from 8h
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFman on March 04, 2011, 12:24:41 pm
Hi all,

I was about to purchase a Tekway DST1202 from a trader in China. But when the trader asked the manufacturer about supplying a Australian 240V power plug, he was told that they now don't supply Chinese traders with English menu oscilloscopes, they would only supply him oscilloscopes with Chinese menu. He was told this was to protect their overseas agents. He indicated that Hantek also wouldn't supply oscilloscopes with English menu.

I wonder if China have a Trade Practice Act (law), isn't that restricting free trade.

A search on Ebay didn't find any Tekways.

Does anyone know where a Hantek or Tekway DST1202 or DST1102 can be purchased for a reasonable price.

Thanks for your help.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: SoftwareSamurai on March 04, 2011, 12:26:23 pm
Does anyone know where a Hantek or Tekway DST1202 or DST1102 can be purchased for a reasonable price.
What do you consider a "reasonable price"?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on March 04, 2011, 01:13:39 pm
Our prices (Elec3i) are the best in Europe, and for Australia, shipping costs from France are a bit expensive, but perhaps we can support half price for shipping. I can inquire Hantek to dropship to you ;). Although the pins on the Chinese plug are 1 mm (0.039 in) longer, the Australasian plug can be used with mainland Chinese socket, but contrary is not so sure, we must investigate about this. ::)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: saturation on March 04, 2011, 02:39:41 pm
But if they sell it to you, that isn't restricted, isn't it?  Seems like if you buy a Chinese product in China, why should they supply English or any other non-Chinese instructions?

Hi all,

I was about to purchase a Tekway DST1202 from a trader in China. But when the trader asked the manufacturer about supplying a Australian 240V power plug, he was told that they now don't supply Chinese traders with English menu oscilloscopes, they would only supply him oscilloscopes with Chinese menu. He was told this was to protect their overseas agents. He indicated that Hantek also wouldn't supply oscilloscopes with English menu.

I wonder if China have a Trade Practice Act (law), isn't that restricting free trade.

A search on Ebay didn't find any Tekways.

Does anyone know where a Hantek or Tekway DST1202 or DST1102 can be purchased for a reasonable price.

Thanks for your help.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on March 04, 2011, 03:11:24 pm
Tekway


USD 580 and free shipping in this store in mainland China: Store http://www.aliexpress.com/fm-store/312788 (http://www.aliexpress.com/fm-store/312788)


(I have also talk in phone with this store man "Mr Pioneer Huang" But I did not buy becouse I find more economy solution (not only one scope))

Scope in this store http://www.aliexpress.com/product-fm/414433064-DHL-Free-Shipping-Tekway-DST1102B-Oscilloscope-2channels-100MHz-1GSa-s-7-TFT-16-digit-color-800-wholesalers.html (http://www.aliexpress.com/product-fm/414433064-DHL-Free-Shipping-Tekway-DST1102B-Oscilloscope-2channels-100MHz-1GSa-s-7-TFT-16-digit-color-800-wholesalers.html)


In Ali you can also chat with seller and this seller also answer phone if you want check for security. (you ask his phone if you need)
Also you can buy with safe system (seller get money after you get scope - but you send money first...)
This seller write quite good english.

And also you can select with same price Hantek or Tekway (100MHz)
MOQ = 1pcs
price USD580
Shipping = Free by DHL (and I think also to Australia)

Power cord... normal power plug in scope end ... just as nearly all equipment you can buy compatible power cable in your country.
China normal electric is 50Hz 220 - 230Vac. (only what chance is this cable wall end, scope end is always same)

With same price my own opinion is "buy Tekway" mut this is only my opinion.

Also you can use PayPal
There is also Escrow (littlebit more safety) system between you and seller.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFman on March 04, 2011, 10:40:30 pm
Thanks rf-loop and all for your help.

Mr Pioneer Huang was one of the Chinese traders who said that he only had Telway oscilloscopes with Chinese Menu (display). Another Chinese trader said that both Tekway and Hantek would now only supply him with Chinese Menu oscilloscopes. And that the reason was to protect their overseas agents. It was only when he talked to the manufacturers that he found this out.

Maybe it looks as if purchasing oscilloscopes from China is impossible if you want a Tekway or Hantek English menu (display) oscilloscope.

When I say a English Menu, I mean the display on the oscilloscope, not the user instructions as I should be able to download that from the internet.

Is this restricting free trade? I would say yes because you can't purchase a English display oscilloscope from a Chinese trader, you have to go through the manufacturer's agents in another country. Maybe someone who lives in China may want a English Menu display.

Question, will the hack also fix the language problem if there is a command to change the language?

Thanks all for your help.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 04, 2011, 11:39:23 pm
RFman

why you just don't red this thread ? The only difference is the enclosure, so if you can work with chinese fron panel
buy in china - the firmware (so that what will be displayed ) can be changed to one of the supported languages.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: project on March 05, 2011, 12:27:19 am
I finally got time to mod my 5102 today. problem for me is I don't have rs232-ttl/cmos adapter or arm jtag adapter in hand. Spend few mins to figue out that i can build those adapter by myself without waiting shipping. while digging parts, I found a board from a tape library has a max232 with one set rs232-ttl ports not been used, this make thing more easy, get proper cable/wire and connecor, open up DSO, and connect to computer.While DSO booting hit Crtl-C then go into shell, then just did as Tinhead's first post, after reboot with a caliberation, a 200Mhz bw reborn. Copy .ico for 5202 to /logo without delete old 5102 .ico, make thing more perfect.

I check the power board, The reserve fan connector has a dedicated 12v power supply(7812). But I would like the fan run less speed, I connect the fun to 5v on board, not even can hear fan noise.

And next thing is obtain newer firmware, 2.06.2 has few bugs.

Thanks Tinhead again.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 05, 2011, 01:17:51 am

I check the power board, The reserve fan connector has a dedicated 12v power supply(7812). But I would like the fan run less speed, I connect the fun to 5v on board, not even can hear fan noise.


replace the 7812 by 7805, it is oly dedicated for fan, so no big deal - and of course less stress for the 5V on main PCB.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: project on March 05, 2011, 02:25:48 am
replace the 7812 by 7805, it is oly dedicated for fan, so no big deal - and of course less stress for the 5V on main PCB.

That's what I'm gonna to do, but not now.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Igor on March 05, 2011, 06:03:07 am
Question, will the hack also fix the language problem if there is a command to change the language?
See my questions on Tekway DST1102 in the Chinese version of Tinhead, and answers, starting with # 212 in this forum thread.


Pages Tekway and Hantek in the English version from Aliexpress :
http://www.aliexpress.com/fm-store/312788/210894552-414442182/DHL-Free-Shipping-Tekway-DST1062B-Oscilloscope-2channels-60MHz-1GSa-s-7-TFT-16-digit-color-800.html (http://www.aliexpress.com/fm-store/312788/210894552-414442182/DHL-Free-Shipping-Tekway-DST1062B-Oscilloscope-2channels-60MHz-1GSa-s-7-TFT-16-digit-color-800.html)

http://www.aliexpress.com/fm-store/312788/210894552-414433064/DHL-Free-Shipping-Tekway-DST1102B-Oscilloscope-2channels-100MHz-1GSa-s-7-TFT-16-digit-color-800.html (http://www.aliexpress.com/fm-store/312788/210894552-414433064/DHL-Free-Shipping-Tekway-DST1102B-Oscilloscope-2channels-100MHz-1GSa-s-7-TFT-16-digit-color-800.html)

http://www.aliexpress.com/fm-store/312788/210894552-414455314/DHL-Free-Shipping-Tekway-DST1202B-Oscilloscope-2channels-200MHz-1GSa-s-7-TFT-16-digit-color-800.html (http://www.aliexpress.com/fm-store/312788/210894552-414455314/DHL-Free-Shipping-Tekway-DST1202B-Oscilloscope-2channels-200MHz-1GSa-s-7-TFT-16-digit-color-800.html)

http://www.aliexpress.com/fm-store/312788/210894552-414452263/DHL-Free-Shipping-Hantek-DSO5062B-Oscilloscope-2channels-60MHz-1GSa-s-7-TFT-16-digit-color-800.html (http://www.aliexpress.com/fm-store/312788/210894552-414452263/DHL-Free-Shipping-Hantek-DSO5062B-Oscilloscope-2channels-60MHz-1GSa-s-7-TFT-16-digit-color-800.html)

http://www.aliexpress.com/fm-store/312788/210894552-414451305/DHL-Free-Shipping-Hantek-DSO5102M-Oscilloscope-2channels-100MHz-1GSa-s-7-TFT-16-digit-color-800.html (http://www.aliexpress.com/fm-store/312788/210894552-414451305/DHL-Free-Shipping-Hantek-DSO5102M-Oscilloscope-2channels-100MHz-1GSa-s-7-TFT-16-digit-color-800.html)

http://www.aliexpress.com/fm-store/312788/210894552-414454351/DHL-Free-Shipping-Hantek-DSO5202B-Oscilloscope-2channels-200MHz-1GSa-s-7-TFT-16-digit-color-800.html (http://www.aliexpress.com/fm-store/312788/210894552-414454351/DHL-Free-Shipping-Hantek-DSO5202B-Oscilloscope-2channels-200MHz-1GSa-s-7-TFT-16-digit-color-800.html)

Surprisingly, Aliexpress to describe instruments quoted Tinhead (see first post in this thread):

" What inside Tekway DST1xxxB:
4 x AD9288 ADCs (yes, for 1GSs overclocked to 125MHz in 8ns, 4ns and 2ns time base - like Instek GDS1102A)
2 x AD8370 amps (750MHz bw - input stage like Rigol)
2 x LMH6552 amps (1.5GHz bw - input stage like Rigol)
ADCMP562 ECL comparator (for trigger)
Altera Cyclone III FPGA (ADC sampling control and data acquisition)
Altera Max II CPLD (long/short memory management - copy protected)
Samsung S3C2440 (user i/o, UI interface, TFT control)
EEPROM with s/n
some NAND, SRAM and SDRAM memory and of course bunch of other things (no cheap parts which is good)"


Tinhead, You need to receive royalties!  ;D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on March 05, 2011, 06:38:23 am
Thanks rf-loop and all for your help.

Mr Pioneer Huang was one of the Chinese traders who said that he only had Telway oscilloscopes with Chinese Menu (display). Another Chinese trader said that both Tekway and Hantek would now only supply him with Chinese Menu oscilloscopes. And that the reason was to protect their overseas agents. It was only when he talked to the manufacturers that he found this out.

Oh sorry, this time when I ask, he promise english text on the scope face (international model) and I ask many times just this becouse neraly all what I find in china sellers they have chinese version. (just as his picture for Tekway show it is english labeled front panel) So, my information is now "old". (it was around 2-3 weeks ago I ask by chat and also by phone) Also I ask both, Hantek and Tekway.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 05, 2011, 12:06:15 pm
the pictures on aliexpress (Tekway) are from someone else, actually from mala-electronic Tekway review,
https://www.eevblog.com/forum/index.php?topic=1571.msg31659#msg31659 (https://www.eevblog.com/forum/index.php?topic=1571.msg31659#msg31659)
so you should ask the seller about the real fron panael language before you buy.

You can even see on the picture below "Package List: all you see are what you buy!" a nice self-burned DVD with Germans
user manual - from pinsonne-electonic.de.

There is one thing you have to know, due the manufacturers restrictions these DSOs would have no manufacturer warranty outside china,
so if can live with that then aliexpress is right for you (even DOA warranty will be on your own cost). It have nothing to do with distributor
protection, is have only something to do with user satisfaction (if you add the express shipment fee to the aliexpress price and TAX you
will see there is alomost no difference in price - compared aliexpress Hantek 60Mhz and Elec3i price within EU is only 30EUR diff, but full warranty).




Btw, the first revision of Tekway DSOs have dark blue "Tekway logo" and gray model name - the sticker above display,

like this one : https://www.eevblog.com/forum/index.php?topic=1571.msg33560#msg33560 (https://www.eevblog.com/forum/index.php?topic=1571.msg33560#msg33560)

-  most chinese sellers on Taobao will have the first revision.

the second revision (with not soldered jtag and i/o header but with heatsinks on ADCs and FPGA) have
black model name and light blue logo (like from mara-electronic review)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Bored@Work on March 05, 2011, 03:00:19 pm
Be very careful with buying via Alibaba, whatever their name of the day is (Aliexpress, Taobao, ...).

Recently the shit hit the fan as it turned out that at least 2300 fraudulent "gold sellers" (think organized crime) managed to setup shop there, and - this is the worst part - with the help of around 100 Alibaba employees. Alibaba management looked away for two years before they couldn't deny it any more and two managers were made the fall guys. Alibaba and the 2300 thieves ...

If you think Alibaba is squeaky-clean now, and they got rid of all their criminal employees and sellers, well, just Google "Alibaba fraud". It goes on and on and on.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: SoftwareSamurai on March 05, 2011, 03:37:35 pm
Okay, well, back to modding my DSO5102B via the USB Update Firmare...

More info for everyone: (Remember I've got the 2.06.2 firmware.)

Finally got it to work! Turns out the only hitch was that if you include a file named logotype.dis in the .up file, it will be checked for the correct "hantek_DSOxxxxx" label inside. But if you simply rename it to something else (I just renamed it l), it won't be checked. And like I've mentioned before, you only need the update file listed in the upend file. You can include other files without listing them in the upend file since it's all untarred en-masse. Then in the update file, you just need to do something like this:
Code: [Select]
[cmd] cp -f /usr/up/tekwayup_client/l  /logotype.dis
[cmd] chmod 766  /logotype.dis
And you're good to go.

Now as an interesting side-effect, once I've modding my DSO5102B to a DSO5202B, the Update Firmware now fails because it thinks the system is a DSO5202B but the update file is for a DSO5102B. Changing the [DST type] line in the update file doesn't appear to fix it. Hmmm...

Update: Ah, turns out the Update Firmware assumes that the update is for a DSO5102B if there's no logotype.dis file in the .up file! So if you just add a logotype.dis file with "hantek_DSO5202B" in it, it works. So it's possible to create 2 .up files: one for DSO5102B->DSO5202B and one for DSO5202B->DSO5102B. (The latter would be good to have if/when a newer firmware comes out!)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: project on March 05, 2011, 05:59:42 pm
Okay, well, back to modding my DSO5102B via the USB Update Firmare...

Finally got it to work! Turns out the only hitch was that if you include a file named logotype.dis in the .up file, it will be checked for the correct "hantek_DSOxxxxx" label inside. But if you simply rename it to something else (I just renamed it l), it won't be checked. And like I've mentioned before, you only need the update file listed in the upend file. You can include other files without listing them in the upend file since it's all untarred en-masse. Then in the update file, you just need to do something like this:

This is nice information. Even I like to do UART more.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: project on March 05, 2011, 06:33:41 pm
And about Serial Number of the machine.
I haven't figure out where they hide the SN information, definitly not sys.inf. But the 'i2c.log' is where they store the SN update or say i2c op log, that means it's stored in i2c programable chip. My 5102b was T 1G/200m xxxxxx in last OCT in i2c.log which is same on back lable. They factory change the SN to T 1g/100m xxxxxx in last Dec when they ship to distributor. Check yours you may lucky as mine.

Mine got from taiwan distributor(you can find contact information on hantek web site) as cash no invoice price NT$13400 that's about $450-460(This is about $50-60 higher than you can get from China by cash no tax price, but to me it's a trustable source). you can ask him if he can ship and how the price gos. It's 5102b(factory hacked from 5202b) english front panel and multi-lang 2.06.2.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 05, 2011, 08:13:48 pm
Allah help us ... all you have to know about how the firmware check is already in the fwdump tool, just read it.

In pirnciple the check is simple :

just ensure you update file is same as update~, sys.inf same as sys.inf~ and logotype.dis same as logotype.dis~ (talking now about files for your self-made firmware).

Then ensure that for these lines are inside in the update script:

[cmd] rm -f /logotype.dis
[cmd] mv /usr/up/tekwayup_client/logotype.dis /logotype.dis
[cmd] rm /sys.inf
[cmd] mv /usr/up/tekwayup_client/sys.inf /sys.inf
[cmd] rm -f /cur_acq.type
[cmd] touch ubdb.swi
[cmd] rm -f /dst1*
[cmd] touch /dst1202b
[cmd] chmod 777 /dst1202b
[cmd] chmod 777 /*
[cmd] chmod 777 *
[cmd] sync
[cmd] sync
[cmd] sync
[end]

So, if you wish to build own usb hack, all you have to do is to create own logotype.dis with whatever model number (same rule for Tekway or Hantek),
then you have to copy it to your self-build firmware as whatever file name (just don't use logotype.dis or logotype.dis~ names),
then you have to change the update script as following

[cmd] rm -f /logotype.dis
[cmd] mv /usr/up/tekwayup_client/logotype.dis /logotype.dis
[cmd] rm /sys.inf
[cmd] mv /usr/up/tekwayup_client/sys.inf /sys.inf
[cmd] rm -f /cur_acq.type
[cmd] touch ubdb.swi
[cmd] rm -f /dst1*
[cmd] touch /dst1202b
[cmd] chmod 777 /dst1202b
[cmd] chmod 777 /*
[cmd] chmod 777 *
[cmd] sync
[cmd] sync
[cmd] sync
[cmd] mv /usr/up/tekwayup_client/yourcustomlogotype.dis.file /logotype.dis
[cmd] sync
[end]

The fw currently didn't care/check other files, only what described in above. Of course the model inside logotype.dis and logotype.dis~
in your custom firmware MUST match your model (the one from what you will hack, so if you already hacked but wish to hack-back use the new model name) and the [cmd] touch /dst1202b and [cmd] chmod 777 /dst1202b lines must match destination model.

That's all. As said before, for each target model one custom firmware will be necessary (per destination model),
increasing the amount of necessary self-made usb hack files - which is bad for new users.
UART is still the best way, you can't destroy anything and you have full controll over the process.
Custom firmwares are always risky, if you forget to change for example permissions for copied files the DSO might not start,
for a beginner a disaster.


Regards serial number, yes it is stored in eeprom connected to s3c2440, it is easy to change it.
I don't tell you how, but i can tell you one thing - up to last 4 serial numbers and up to last 4 firmware updates are stored in NAND
memory - so whatever so do, be ensure you have a backup of your original NAND content (to be able to restore it i case of warranty).
Yes - the NAND backup contains serial number too, after it has been restored the DSO.exe will write it to EEPROM.




Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: project on March 05, 2011, 11:43:45 pm
it is stored in eeprom connected to s3c2440, it is easy to change it.

No worry, I figured out already, LCD ribbon block the view of that 4L64i. Just not necessary for now. I never touch an ARM, may be need learn a little about min2440 to know the whole system before do anything wild.

But another thing bug me know, while checking my boot log, looks my NAND has a bad block. Can you please confirm with me?

S3C24XX NAND Driver, (c) 2004 Simtec Electronics
s3c2440-nand: mapped registers at c4880000
s3c2440-nand: timing: Tacls 9ns, Twrph0 39ns, Twrph1 9ns
NAND device: Manufacturer ID: 0xec, Chip ID: 0x76 (Samsung NAND 64MiB 3,3V 8-bit)
NAND_ECC_NONE selected by board driver. This is not recommended !!
Scanning device for bad blocks
Bad eraseblock 1518 at 0x017b8000
Creating 3 MTD partitions on "NAND 64MiB 3,3V 8-bit":
0x00000000-0x00030000 : "bootloader"
0x00050000-0x00250000 : "kernel"
0x00250000-0x03ffc000 : "root"

..........

NET: Registered protocol family 1
NET: Registered protocol family 17
yaffs: dev is 32505858 name is "mtdblock2"
yaffs: Attempting MTD mount on 31.2, "mtdblock2"
block 1371 is bad
VFS: Mounted root (yaffs filesystem).
Mounted devfs on /dev


Even looks doesn't make any trouble with the DSO, I think I need make a JTAG for full backup really soon.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 06, 2011, 12:22:29 am
But another thing bug me know, while checking my boot log, looks my NAND has a bad block. Can you please confirm with me?
...
Even looks doesn't make any trouble with the DSO, I think I need make a JTAG for full backup really soon.

Bad blocks are typical for NAND memory (you will always find some with bad blocks in a full tray of brand new NANDs)
the bootloader and then OS YAFFS driver can handle this (normally).

Backup is always good idea, as long you have no ARM JTAG just use the fwdump v3, it will save
bootloader, root and kernel - that's all you evt. need later.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: project on March 06, 2011, 12:34:55 am
Backup is always good idea, as long you have no ARM JTAG just use the fwdump v3, it will save
bootloader, root and kernel - that's all you evt. need later.

Thanks, and I did a v3 backup when you post it, just don't know what are included. I'll make a arm jtag tonight and play around it. I have some hynix 64MBx8bit NAND in hand, will check if I can replace it directly.  

Update: yes it'll works, H-jatag has driver too.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 06, 2011, 02:04:19 am
Update: yes it'll works, H-jatag has driver too.

you will need OOB H-JTAG driver to save/restore OOB blocks too!

you can find NAND-OOB drivers for H-JTAG here

http://www.mikrocontroller.net/topic/163836 (http://www.mikrocontroller.net/topic/163836)

The s3c2440 ARM need to be initialized, the right one init is already included in H-JTAG software, just
load in H-Flasher the ..\HFC Examples\S3C2440+K9F1208.hfc
You can disable flash id check too if H-Flasher don't like Hynix with NAND OOB drivers (or change the driver, whcih is simple)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: project on March 06, 2011, 03:30:10 am
you will need OOB H-JTAG driver to save/restore OOB blocks too!
you can find NAND-OOB drivers for H-JTAG here
http://www.mikrocontroller.net/topic/163836 (http://www.mikrocontroller.net/topic/163836)
The s3c2440 ARM need to be initialized, the right one init is already included in H-JTAG software, just
load in H-Flasher the ..\HFC Examples\S3C2440+K9F1208.hfc
You can disable flash id check too if H-Flasher don't like Hynix with NAND OOB drivers (or change the driver, whcih is simple)

Thanks, I'm reading manual for mini2440 and h-jtag now. looks H-flasher v1.1 can flash s3c2440+k9f1208 and s3c2440+hy27us08121a(which I have now).

Update: After research about NAND bad blocks and OOB, I would not bother replace the chip for now, as most factory will ship NAND flash Chip up to 80 bad blocks for lower price. I checked 1/3 of my stocks, only 1/4 no bad blocks, 1-3 bad blocks are most, very few over 10.  Anyway, I made my LPT-jtag, and order one USB-JTAG, will play it little bit later.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mirgo on March 06, 2011, 06:16:17 pm
Tekway

USD 580 and free shipping in this store in mainland China: Store http://www.aliexpress.com/fm-store/312788 (http://www.aliexpress.com/fm-store/312788)

(I have also talk in phone with this store man "Mr Pioneer Huang" But I did not buy becouse I find more economy solution (not only one scope))

Scope in this store http://www.aliexpress.com/product-fm/414433064-DHL-Free-Shipping-Tekway-DST1102B-Oscilloscope-2channels-100MHz-1GSa-s-7-TFT-16-digit-color-800-wholesalers.html (http://www.aliexpress.com/product-fm/414433064-DHL-Free-Shipping-Tekway-DST1102B-Oscilloscope-2channels-100MHz-1GSa-s-7-TFT-16-digit-color-800-wholesalers.html)


I think you can securely order at this seller. I already bought five items from him in the last 3 month. Fast shippment and good communication (english). I also talked to him regarding the chinese frontpanel - He will prepare a new english frontpanel that will be sold with the scopes in the near future. So if you want to mod anyway and don't care about guaranty, just order there...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on March 06, 2011, 09:39:39 pm
hi Mirgo,
Ni shi zhong guo ren ba ? ;D ( ::) Are you chinese ?  ;))
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFman on March 07, 2011, 02:39:57 am
Thanks all for your help,

Is there any advantage in using a Hantek DSO5102B over a DSO5062B or a DSO5062C (60MHz) when hacking to a DSO5202B (200MHz). Other than the price.

I have now read all the posts in this thread. I don't remember seeing an answer to this question, sorry if there was.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: project on March 07, 2011, 02:41:34 am
two things?

one, hope they change on/off switch to top, not in front. As this is light weight DSO, need hold the body to push the switch.

second, mini2440 chinese manual has much more information than english.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: project on March 07, 2011, 02:58:11 am

Is there any advantage in using a Hantek DSO5102B over a DSO5062B or a DSO5062C (60MHz) when hacking to a DSO5202B (200MHz). Other than the price.


don't count 5062C in, that one will not work or unknow now, it's 500M sa/s, instead 1G.

The 5062b and 5102b basicly same, just different probes, 60Mhz and 100Mhz(good to 150Mhz). you may not need buy new probes for 200Mhz if you buy 5102b.

And 5062b is less available on the market, even hard to find sometime.

If you don't intend to change the input part resistors, 5102b is cal to 200mhz more closer than 5062b, and not absolutely necessary to do so. And if you are lucky as me, you may get one with 200mhz cal already.

other than these, no big diff.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFman on March 07, 2011, 04:09:22 am
Thanks project,

Which model has the power switch on the top ???, I didn't know that Hantek made one with the switch on the top. That wouldn't bother me having the switch on the front, I can just put the other hand on the top of the oscilloscope to stop it moving. but that's a good point.

I was thinking more on the end performance once it has been hacked/converted into a 200MHz oscilloscope.

Interesting, the Chinese manual having more information. Wish I could speak Chinese, I would then be able to read it. Maybe someone will translate it and post it here.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFman on March 07, 2011, 05:19:04 am
Thanks project,

(1) C Model - OK I won't be getting that model.

(2) Probes - Think I will purchase proper 200MHz probes to ensure that I get maximum bandwidth. Probes are not expensive these days. I can always use the old probes on my old 50MHz Tecktrinic 547 valve oscilloscope. Did you know the Tecktronic was the same price as a new car when purchased many years ago.

(3) Input Resistors - Changing SMD components is not a problem for me.
For best performance: Is it that the input resistors on the DSO5062B should be changed; In the DSO5102B it is best if they are changed. Looks like I've missed the messages with regard to this. Do you know what the message numbers are for this.

(4) Question - The DSO5062B with the input resistors changed and with the hack to change it to 200MHz. Is the performance much the same as if a DSO5102B with input resistors changed and hacked to 200MHz.

(5) Not sure what you mean when you say "cal ready" would you please explain this a bit more.

Thanks for your help.

By The Way, Tinhead, thanks for all the work that you have put in for us, you must have spent many hours doing this.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: nukie on March 07, 2011, 11:29:41 am
Tekway


USD 580 and free shipping in this store in mainland China: Store http://www.aliexpress.com/fm-store/312788 (http://www.aliexpress.com/fm-store/312788)


(I have also talk in phone with this store man "Mr Pioneer Huang" But I did not buy becouse I find more economy solution (not only one scope))

Scope in this store http://www.aliexpress.com/product-fm/414433064-DHL-Free-Shipping-Tekway-DST1102B-Oscilloscope-2channels-100MHz-1GSa-s-7-TFT-16-digit-color-800-wholesalers.html (http://www.aliexpress.com/product-fm/414433064-DHL-Free-Shipping-Tekway-DST1102B-Oscilloscope-2channels-100MHz-1GSa-s-7-TFT-16-digit-color-800-wholesalers.html)


In Ali you can also chat with seller and this seller also answer phone if you want check for security. (you ask his phone if you need)
Also you can buy with safe system (seller get money after you get scope - but you send money first...)
This seller write quite good english.

And also you can select with same price Hantek or Tekway (100MHz)
MOQ = 1pcs
price USD580
Shipping = Free by DHL (and I think also to Australia)

Power cord... normal power plug in scope end ... just as nearly all equipment you can buy compatible power cable in your country.
China normal electric is 50Hz 220 - 230Vac. (only what chance is this cable wall end, scope end is always same)

With same price my own opinion is "buy Tekway" mut this is only my opinion.

Also you can use PayPal
There is also Escrow (littlebit more safety) system between you and seller.



Now I hope I posted correctly, this is not an advertisement I don't work for anyone, and hello all this is my first post I am from Melbourne, Australia. Posting my positive experience of sourcing the Tekway from its country of origin.

I want to let you guys know that Mr Pioneer Huang is a genuine and honest seller. He is a MCU programmer himself. I chat with him numerous times regarding the Tekway DSO. He knows his stuff and know them well. He's not like someone who sells some teddy bear, iphone bumper and random items. Today I received my oscilloscope from Mr Huang, and I have also left positive feedback on his aliexpress account. He told me in advance that the scope panel is in Chinese but I couldn't care less as the buttons are in English. The panel can be easily peeled off and I can print one with my printer.

The Tekway arrived within a few days to Australia. Due to his low profit margins(as I understand), Mr Huang had to keep the package as small as possible so he could make some money from the sale. I don't mind as long as it arrive in working condition, I am glad to help him out. This is what I received today from DHL-> Australia Post.


(http://i51.tinypic.com/2eggxm8.jpg)
Seems reasonable condition. No major ding.

(http://i56.tinypic.com/2h2jl82.jpg)
Standard foam protection.

(http://i51.tinypic.com/24vuna8.jpg)
Tekway branded probes, probably a rebranded probe.

(http://i55.tinypic.com/11vig5t.jpg)
Warranty card(hopefully I don't need it), items check list and software on a stupid small mini 3" CD which some slot-in drives wont be able to read :( It will probably end up in the bin when you can always download the latest from the interweb. I know this sounds a bit ignorant because not everyone has internet but if you wish to include software, please at least supply in a standard disc.

(http://i54.tinypic.com/a4msgm.jpg)
Good News! No mechanical damage visible. I have seen a lot worse handled package.

(http://i54.tinypic.com/2ytz49k.jpg)
For the first time I am happy & excited to see a 3 pin Australian IEC plug. Not that I am short of them( I believe everyone on this forum has plenty lying around) but you can actually tell that the seller did the right thing!

(http://i52.tinypic.com/f022rd.jpg)
See what I mean? English buttons plus Chinese panel. Maybe someone here with an English panel could scan and upload so that we could print it out? Or even better, learn Chinese, I don't think it's that hard you only need to memorize the top 9 or so buttons the rest are in common positions.

(http://i56.tinypic.com/359wf1t.jpg)
Sweet 7" 800x480! Unfortunately, my phone camera don't have the dynamic range to capture the true beauty of the display.

(http://i56.tinypic.com/2804ny9.jpg)
As mention before, this unit has the extra tiny heatsink mounted on 4 of the IC chips, above and underside of the PCB. It has no fan. I haven't done much to the insides yet, I might measure the max temperatures of the PSU area when I am free.

Okay now I need to go figure out how to change the chinese menu/firmware to English. Or take up Chinese electronics class  :P
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 07, 2011, 11:38:18 am
Actually both Hantek and Tekway are fair enough to send what in stock, so if distributor did ordered 10 x 100MHz and they have only 6 ready but some 200MHz there they will "re-label" these 200MHz models as 100MHz and send it out.
So very often you will get better than ordered, of course with software reduced bw but electrically exact the same as higher modell.

The hardware differences between models (resistors) are very small:
Input resistors (channels and ext trigger)

    200MHz - 22R 0.1%
    100MHz - 33R 0.1%
     60MHz  - 33R 0.1%

Compensation resistors (channels only)

    200MHz - 10R 0.1%
    100MHz - 12R 0.1%
     60MHz  - 12R 0.1%


OpAmp resistors (4 x per channel)

    200MHz - 280R 0.1%
    100MHz - 301R 0.1%
     60MHz  - 365R 0.1%

OpAmp arrays (2 x per channel)

    200MHz - 33R 1%
    100MHz - 39R 1%
     60MHz  - 47R 1%

Trigger stage

    200MHz - 82R 0.1%
    100MHz - 100R 0.1%
     60MHz  - 100R 0.1%

After "200MHz hack" the bandwidth depends on these resistor a bit (and of course a little bit the waveform, see picture below),
true 200MHz hardware is good up to (-3db) ~220MHz, 100MHz hardware up to 200MHz and 60MHz hardware up to ~185MHz.

Of course you can replace them, but only if you have good equipment to recalibrate the compensation
(actually most ppl having good equipment would buy directly the right one model and save time/money indirect).
Most ppl i know can live with ~185MHz (for org. 60MHz models) and 200MHz (org. 100MHZ models)
bandwidth and bit less trigger sensivity arroung 200MHz freq - just because they not extended the bw to measure the amplitude
exact for 195 or 210MHz signals but to measure more accuracte up to 100MHz signals.

Finally it is your choice (don't forget the probe price too).

Attached pics:
- 200MHz vs 100MHz hardware signal respond/waveform compare (blue-200MHz model, white 100MHz model)
- red marked the different resistors



Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 07, 2011, 11:47:32 am
Mr Huang had to keep the package as small as possible so he could make some money from the sale. I don't mind as long as it arrive in working condition,
yeah, normally there is another one a bit bigger paper box arround the small one, but you ruight as long i did arrived healthy who cares.

See what I mean? English buttons plus Chinese panel. Maybe someone here with an English panel could scan and upload so that we could print it out? Or even better, learn Chinese, I don't think it's that hard you only need to memorize the top 9 or so buttons the rest are in common positions.

http://www.tekwayins.net/pic/1202B.jpg (http://www.tekwayins.net/pic/1202B.jpg)

if not sufficient i can scan my Tekway by chance.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 07, 2011, 11:54:58 am
Hantek DSO5062C

Hey Pascal,

as you have some of these Hantek 500MSs models in stock, any chance to make a picture of the PCB ?
It would be interessting to see what's inside, i did noticed there are some diffs but never had a chance to make a picture of PCB.


@ALL
For most beginners a 500MSs would be good enough anyway, for sure it can't be hacked to 200MHz,
but 60MHz (if someone manage to buy them somewhere, but as i remember Hantek wasn't really interessted to sell them - however Tekway is selling them as DST4062B) can be "extended" to 100MHz bw.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 07, 2011, 11:59:44 am
Okay now I need to go figure out how to change the chinese menu/firmware to English. Or take up Chinese electronics class  :P

tell me the firmware version, click on red marked button and then F1

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: nukie on March 07, 2011, 12:20:56 pm
I think the firmware version is the second line  ??? 2.05.0(100305.0)


Okay now I need to go figure out how to change the chinese menu/firmware to English. Or take up Chinese electronics class  :P

tell me the firmware version, click on red marked button and then F1


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 07, 2011, 12:49:19 pm
I think the firmware version is the second line  ??? 2.05.0(100305.0)


cool (since no USB hack protection), then just do following :

backup the firmware:
download this:
https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=4899 (https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=4899)

unzip the *.up file to empty USB stick, insert the stick in fromt usb port, wait 4 sec.,
click utility button (that was the red marked in attached picture),
click F2, click F5 (or whatever will be displayed, i believe the old fw is asking for F6) to confirm.

The backup can take up to 5 minutes.

After it is ready remove the usb stick, reboot DSO and move everything from usb stick to whatever
folder on your PC, you might need it later.


then (if you wish) hack it to 200MHz

download this :

https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=4577 (https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=4577)

again, unzip the *.up file and do firmware update - this will hack your DSO to 200MHz bw.


then download attached *.up file (THIS IS ONLY FOR TEKWAY DST1202B, don't use it on other DSO models),
that's the latest firmware - and do again firmware update

After all you can change the language in utility, F6, F2 (to switch language).

If you don't wish to hack but need the latest Tekway firmware for your DSO let me know.

EDIT: and yeah, post the results .. it seems that someone else tried this few days ago but never said if it worked :P Maybe just killed the DSO, heh.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: nukie on March 07, 2011, 01:08:21 pm
Hello tinhead,

Thank you for the 200Mhz firmware english hack but I am not ready to alter the Mhz of my scope yet because I am still 'evaluating' the unit. I will save the instructions you posted for future reference, I am sure 200Mhz will be useful.

I see you have mention it's for Tekway DST1202B, it should be fine with DST1102B right?
If you need someone as a guinea pig, I don't mind bringing it up to 200Mhz temporary to validate your instructions, I will report back in 8 hours time zZZ.

I sent PM regarding the 100Mhz firmware. Thank you so much for your contributions.

Vincent.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 07, 2011, 01:30:32 pm
but I am not ready to alter the Mhz of my scope yet because I am still 'evaluating' the unit.

buuuhhhh ! :)

sure, it is always user choice. Attached the official 2.6.3 for Tekway DST1102B,
so you can update your scope to latest vfw version and add english language.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFman on March 07, 2011, 02:12:32 pm
Tinhead, thanks for the resistor change information. Your attached trace photo shows the difference.

Was thinking that it maybe easier to add parallel resistors instead of replacing resistors to get the 200MHz resistor values. Lucky in that the 200MHz values are all lower than the values for 100MHz or 60MHz.

Input resistors (channels and ext trigger)

    200MHz - 22R 0.1%
    100MHz - 33R 0.1% Parallel with 66R 0.1%
     60MHz  - 33R 0.1% Parallel with 66R 0.1%

Compensation resistors (channels only)

    200MHz - 10R 0.1%
    100MHz - 12R 0.1% Parallel with 60R 0.1%
     60MHz  - 12R 0.1% Parallel with 60R 0.1%


OpAmp resistors (4 x per channel)

    200MHz - 280R 0.1%
    100MHz - 301R 0.1% Parallel with 4K 0.1%
     60MHz  - 365R 0.1% Parallel with 1.2K 0.1%

OpAmp arrays (2 x per channel)

    200MHz - 33R 1%
    100MHz - 39R 1% Parallel with 215R 1%
     60MHz  - 47R 1% Parallel with 111R 1%

Trigger stage

    200MHz - 82R 0.1%
    100MHz - 100R 0.1% Parallel with 455R 0.1%
     60MHz  - 100R 0.1% Parallel with 455R 0.1%

Problem is where can you purchase these resistor values in 0.1% and 1%? Do you know what physical size the SMD resistors are.

Tinhead, what equipment do you need to calibrate the oscilloscope when the above resistors have been changed. What is the procedure. Would the normal oscilloscope push button calibration do the job? I don't know much about what the calibration is other than you only have the power cable connected to calibrate.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on March 07, 2011, 02:50:44 pm
Just arrived:

System status shows:

model: DSO5102B
serial T1G/008xxxxxx
soft version: 2.06.3 (110118.0)
hard version: 0x555583e8

First touch... better than expected. I know it is better than Rigol but... I did not expect so much. (yes price is different and it is maybe not very clever compare these.)



Example -3dB point well over 170MHz.. if reference is 1MHz and level 300mVp-p.  (yes I need later check my test lab accuracy.. maybe my HP old workhorse signal gen need careful "flatness calibration" over frequency band 100k to 2G .. I do not trust now...)  it looks like there (in hantek oscilloscope analog front end) is littlebit "M" shape freq response and it makes some special corner shape with fast rising pulse edge.. but... not bad.. but all this need now lot of work for tests.

Edit

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 07, 2011, 03:15:53 pm
to add parallel resistors instead of replacing resistors to get the 200MHz resistor values. Problem is where can you purchase these resistor values in 0.1% and 1%?

bad idea, this will increase the caapacitance.

Do you know what physical size the SMD resistors are.
mouser is haveing alle of them,
22.1R 0.1% or 22R 1% in 0603
280R 0.1% in 0603
10R 0.1% in 0603
82R 1% or 82.5R 0.1% in 0603
33R x 4 1% array in 1206


what equipment do you need to calibrate the oscilloscope when the above resistors have been changed. What is the procedure. Would the normal oscilloscope push button calibration do the job? I don't know much about what the calibration is other than you only have the power cable connected to calibrate.

the one you don't have (400MHz analog or DSO to compare results, 1kHz to 250MHz square/sinus generator, good set of RG316 cables, active and passive probes) but at least a 1kHz and 10kHz signal generator with stable amplitude, true rms dmm to measure the amplitude
and some luck.

The compensation can be changed by the cap value (red marked), the measured amplitude must match the real signal amplitude (square and sinus),
you will of course have to wait at leat 30mins before the DSO would be warm enough and after each step (1 and 10kHz signal) do self-calibration
and compare results again.

Still, i do not recommend to play with compensation without knowledge about and good equipment. For sure you might have luck
and no compensation will be necessary, but i would not bet on that.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 07, 2011, 03:24:08 pm
Just arrived:

welcome in club!

but all this need now lot of work for tests.

true, you always very sceptic so you will definitely test 5x :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: SoftwareSamurai on March 07, 2011, 03:44:38 pm
Attached the official 2.6.3 for Tekway DST1102B, so you can update your scope to latest vfw version and add english language.

(Forgive me if you've already answered these before.)

Q1. Can I load v2.06.3 onto my Hantek 5102B?
Q2. What's the improvements in v2.06.3 from v2.06.2? (i.e. Is it worth upgrading?)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on March 07, 2011, 03:48:01 pm

true, you always very sceptic so you will definitely test 5x :)

Yes, first I need check my calibration generators and sinewave generators calibration..

5x is not enough.

If test full specs temp range, humidity range, pressure range it need more... and also repeating so that can make some opinion about random variations... haha. (yes I do not...)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 07, 2011, 03:51:45 pm
Q1. Can I load v2.06.3 onto my Hantek 5102B?
no, you can't.
Once again, because of the hack protection the firmware is now per model, so each manufacturer and each model
firmwares are different (well the update scripts, if you decryt it and copy manally the DSO.exe and other evt. changed files then it will works for you on any DSO)

Q2. What's the improvements in v2.06.3 from v2.06.2? (i.e. Is it worth upgrading?)

more measurment pre-setups, pass/fail, digital filters, nice recording option and other things, but also some new bugs :)
They should be fixed very soon so maybe is a good idea to wait fir the new fw.

I did posted these Tekway fw's just because of the chinese fw version of "nukie's" DSO.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 07, 2011, 03:54:27 pm
5x is not enough.

If test full specs temp range, humidity range, pressure range it need more... and also repeating so that can make some opinion about random variations... haha. (yes I do not...)

hehe to be very honest i do check each every function and setting after each fw upgrade, HanTekway is doing great job improving
things but sometimes they creating more bugs than improvements :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: gileadlin on March 07, 2011, 04:24:39 pm
hi ,tinhead'
would you make a firmware for tekway1062B(version 2.06) to hack it to 200MHz?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 07, 2011, 05:00:42 pm
hi ,tinhead'
would you make a firmware for tekway1062B(version 2.06) to hack it to 200MHz?

no, why i should ? Read the whole thread and you will learn how to hack or create own hack.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mirgo on March 07, 2011, 06:11:03 pm
hi Mirgo,
Ni shi zhong guo ren ba ? ;D ( ::) Are you chinese ?  ;))

No sorry, I'm from germany and I did not register just to advertise for the chinese shop. I've been following this topic for some weeks now and I just wanted to give my advice for anybody that is afraid of ordering from china. I know you sell the hanteks from france too, but anybody may select his/her prefered source and there are trustworthy sources in china too (not all of them, but they exist).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: PsI-On on March 07, 2011, 07:05:21 pm
I scanned the Chinese panel and replaced the characters with English.

I haven't tried it on for size yet, but it looks close!

-P
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 07, 2011, 07:31:33 pm
yeah, looks like my org. panel (except 1 "kHz" which is on your version khz and Tekway org. version KHZ)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bilko on March 07, 2011, 08:28:24 pm
I scanned the Chinese panel and replaced the characters with English.

I haven't tried it on for size yet, but it looks close!

-P



It's very good but missed out 'PROBE CHECK' decal

Can you get these made in the same material as the original ?

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: PsI-On on March 07, 2011, 09:55:06 pm
Original Panel changed....

tinhead - "Khz" to "KHZ"
yachtronics - added "PROBE CHECK"

I was thinking you could use 'Water-Slide Decal Paper' to make a new front panel, I haven't done this myself so I'm not sure if it'll work!

-P
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: nukie on March 08, 2011, 12:49:06 am
This is my Tekway DST1102B if anyone's interested

My External trigger measures 22R vs the 33R channel input resistors

*Copy from tinhead post, updated with my scope hardware details*

Input resistors (channels and ext trigger)
    100MHz - 33R 0.1% channels
    100MHz - 22R ext trigger

Compensation resistors (channels only)
    100MHz - 12R 0.1%

OpAmp resistors (4 x per channel)
    100MHz - 301R 0.1%

OpAmp arrays (2 x per channel)
    100MHz - 39R 1%

Trigger stage
    100MHz - 100R 1%
    100MHz - 466.5R !!!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 08, 2011, 01:16:32 am
Trigger stage
    100MHz - 466.5R !!!


maybe you on wrong place? I mean this one (red marked) ...

Btw, Tekway is as always clean soldered, i wish Hantek will learn to soldr too ... almost every Hantek was not that clean.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: nukie on March 08, 2011, 01:48:19 am
Sorry, I measured again it's 100R. All good!

Tips for all users, it's good to connect the dso to a UPS battery backup to prevent mains interruption during firmware upgrades.

For those who are interested in recapping the unit, here's the list of caps

SMPS (13)
C6 - 100uF 400v
C8 - 47uF 50v
C11 - 1000uF 16v
C14 - 1000uF 16v
C15 - 22uF 16v
C17 - 2200uF 16v
C18 - 1000uF 25v
C19 - 3300uF 10v
C20 - 1000uF 16v
C22 - 330uF 6.3v
C23 - 1000uF 16v
C25 - 470uF 25v
C36 - 100uF 35v

Main PCB (16)
C512 - 220uF 16v
C514 - 220uF 16v
C636 - 220uF 16v
C675 - 1000uF 10v
C676 - 220uF 16v
C715 - 220uF 16v
C912 - 220uF 16v
C913 - 1000uF 10v
C934 - 220uF 16v
C935 - 1000uF 10v
C936 - 220uF 16v
C942 - 100uF 35v
C943 - 470uF 25v
C944 - 1000uF 10v
C948 - 1000uF 10v
C949 - 1000uF 10v
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 08, 2011, 01:55:10 am
Sorry, I measured again it's 100R. All good!

:)

you don't have to measure, just read what on the resistor, they are EIA code marked:

http://talkingelectronics.com/contents/articles/109/1/Resistors---EIA-markings/Page1.html (http://talkingelectronics.com/contents/articles/109/1/Resistors---EIA-markings/Page1.html)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: project on March 08, 2011, 03:17:39 am
Btw, Tekway is as always clean soldered, i wish Hantek will learn to soldr too ... almost every Hantek was not that clean.

Mine looks fine, but not proper washed, still have un-washed rosin/flux on board, I did wash by myself. I believe all boards are made by Tekway. Slightly diff quality, guess due to diff batch and little adjustment of production line(wave soldering). Hantek's 5000B series Just OEM by tekway, Hantek load custom firmware only. This is quite normal in China now.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFman on March 08, 2011, 06:24:34 am
I scanned the Chinese panel and replaced the characters with English.


Hi PsI-On,

that a good job you did on the English front panel. I may need it, but I haven't decided where I'll purchase my oscilloscope from, I'm waiting for some prices before I choose.

A great Front panel, thanks.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFman on March 08, 2011, 11:22:46 am
I scanned the Chinese panel and replaced the characters with English.


I've made some great front panel labels from A4 size stick on labels:

http://www.kalex.net.au/timesaver-price-list (http://www.kalex.net.au/timesaver-price-list)

Page 15: C3897/A4 10 SHEETS SILVER LABEL $27.50

I used a colour laser printer and stick on clear book covering to protect the print. Kalex also have a can of spray on protection. The silver label colour is simular to the colour of aluminium. Looks great.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 08, 2011, 05:00:17 pm
Tekway/Hantek doing YouScope demo ...

https://www.eevblog.com/forum/index.php?topic=2730.0 (https://www.eevblog.com/forum/index.php?topic=2730.0)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Igor on March 08, 2011, 05:55:30 pm
Tekway/Hantek doing YouScope demo ...
Are you a magician?
I want this demo too!   ;D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 08, 2011, 06:32:39 pm
Tekway/Hantek doing YouScope demo ...
Are you a magician?
I want this demo too!   ;D

http://www.eevblog.com/2011/03/08/eevblog-153-youscope-demo-on-a-digital-scope/ (http://www.eevblog.com/2011/03/08/eevblog-153-youscope-demo-on-a-digital-scope/)

so just dw the wav and let's play left+right channels to ch1+ch2 in XY mode. Is not really good, but still better as Rigol.
I haven't tested with persistency on, so it could be even better setup.

The XY mode on HanTekway isn't really good, especially noice level - so there is definitely room for improvement.
 
Bingo, with 40kpts memory settings is much better, no dropped frames. The 4kpts as in my video was not enough.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFman on March 08, 2011, 09:51:28 pm
what equipment do you need to calibrate the oscilloscope when the above resistors have been changed. What is the procedure. Would the normal oscilloscope push button calibration do the job? I don't know much about what the calibration is other than you only have the power cable connected to calibrate.

but at least a 1kHz and 10kHz signal generator with stable amplitude, true rms dmm to measure the amplitude
and some luck.

The compensation can be changed by the cap value (red marked), the measured amplitude must match the real signal amplitude (square and sinus),
you will of course have to wait at leat 30mins before the DSO would be warm enough and after each step (1 and 10kHz signal) do self-calibration
and compare results again.

Still, i do not recommend to play with compensation without knowledge about and good equipment. For sure you might have luck
and no compensation will be necessary, but i would not bet on that.
[/quote]
Hi Tinhead,
Question: For compensation you refer to 3 components. Do you have to change all 3 components or you only have to adjust the trim capacitor?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 09, 2011, 01:12:14 am
Question: For compensation you refer to 3 components. Do you have to change all 3 components or you only have to adjust the trim capacitor?

if you replace parts in input circuit (or sometimes just solder around), you will have to adjust the compensation (yes, with the trim cap).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on March 09, 2011, 09:18:09 am
tinhead:

Do you have any kind of FW bug list for model: DSO5102B, FW: 2.06.3 (110118.0)?

I have find some "fatal" bug.

If use single shot. After shot if fast turn horizontal time (for "zooming" captured signal in main window) scope system crash... random to whole display and after this system do not make anything what ever button press, excl power off. (only power off reset scope and it returns of course normal)

small cosmetic bug

If use fast horizontal and then shut menu off... left and specially right side display show some random signal. (around half div horizontal... thes area signal looks random)

if use voltage cursors, fast horizontal speed... move cursor(s) vertically ... it do not reset "old" cursor pixels and they stay on the display.. (as long as whole display refresh)

In some case scope UI go extremely slow... signal is updating but all knobs react extremely slowly, even default setup react after many seconds or more... I have not yet find what special all settings is need to show this bug but more than 5 times I have find this situation.

If we have bug list... I think factory repair these bugs more fast.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFman on March 09, 2011, 09:47:11 am
I have finally ordered a Tekway DST1102B 100MHz oscilloscope from Pioneer.

http://www.aliexpress.com/product-fm/414433064-DHL-Free-Shipping-Tekway-DST1102B-Oscilloscope-2channels-100MHz-1GSa-s-7-TFT-16-digit-color-800-wholesalers.html#tabbed-pane (http://www.aliexpress.com/product-fm/414433064-DHL-Free-Shipping-Tekway-DST1102B-Oscilloscope-2channels-100MHz-1GSa-s-7-TFT-16-digit-color-800-wholesalers.html#tabbed-pane)

I will let you all know how this purchase go, I don't anticipate any problems as Pioneer has at this time a 100% positive feedback, refer to the above link :).

When I receive the Tekway I'll upgrade it to a English front panel and Tinhead's firmware to obtain a English Menu display.

Later, I'm going to consider changing the resistors in the channel amplifiers, Trigger section ETC.

Thanks all for your feedback and help.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bilko on March 09, 2011, 12:11:31 pm
I have finally ordered a Tekway DST1102B 100MHz oscilloscope from Pioneer.

http://www.aliexpress.com/product-fm/414433064-DHL-Free-Shipping-Tekway-DST1102B-Oscilloscope-2channels-100MHz-1GSa-s-7-TFT-16-digit-color-800-wholesalers.html#tabbed-pane (http://www.aliexpress.com/product-fm/414433064-DHL-Free-Shipping-Tekway-DST1102B-Oscilloscope-2channels-100MHz-1GSa-s-7-TFT-16-digit-color-800-wholesalers.html#tabbed-pane)

I will let you all know how this purchase go, I don't anticipate any problems as Pioneer has at this time a 100% positive feedback, refer to the above link :).



I ordered a Tekway DST1102B from Pioneer too. Ordered on the 7th, now on its way. He's a good guy, an engineer, not a box shifter. He know what he's talking about so I have every confidence. Will let you know when the scope arrives. Thanks everyone for your help.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on March 09, 2011, 12:12:41 pm
My God, I had visited this Aliexpress website  :o . You can see how no care is made for packaging and handle electronics accessories like probes.
If people only concentrate the price, well why not proposing everything like a kit with components, case, bill of materials and serigraphy masks for each country!
Then people arrange by themselves (soldering, cleaning, testing) and everything is ok. Ok, men, we will give you a 300.00 EUR oscilloscope kit, and wish you good luck ! ;D Just this policy is not ours: we change bad boxes, change power cord with 2.50m (Hantek/tekway is 1.50m, a bit short for convenience), change CD small pocket when this one is damaged. Electronics should be handled with care, not like trash...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bilko on March 09, 2011, 12:36:14 pm
My God, I had visited this Aliexpress website  :o . You can see how no care is made for packaging and handle electronics accessories like probes.
If people only concentrate the price, well why not proposing everything like a kit with components, case, bill of materials and serigraphy masks for each country!
Then people arrange by themselves (soldering, cleaning, testing) and everything is ok. Ok, men, we will give you a 300.00 EUR oscilloscope kit, and wish you good luck ! ;D Just this policy is not ours: we change bad boxes, change power cord with 2.50m (Hantek/tekway is 1.50m, a bit short for convenience), change CD small pocket when this one is damaged. Electronics should be handled with care, not like trash...


Pascal,
We will comment when we receive the goods, we don't see pictures of your setup. You don't have something to hide here do you ? Your equipment came from China and could well have been built in a chicken shed before you received it. Lets wait and see, if your comments are justified I am sure Aliexpress customers will not be afraid to reveal the facts.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 09, 2011, 01:55:53 pm
If people only concentrate the price, well why not proposing everything like a kit with components, case,
bill of materials and serigraphy masks for each country!

Pascal,

there will be always people looking for cheaper than cheap. They don't care about DOA warranty,
don't care about regular warranty, don't care about packaging - only price counts.
Is it right ? Well, depends - but honestly i prefer to have at least DOA warranty on no costs,
which is not given if i buy from any of those "cheap-sellers". Sure, such seller can say
"i will checked before i send out, so no DOA 100%", but that's the half of the story.

This is electronic equipment, it can always fail, especially BGA parts might works for few days and then stop,
and this is common for all products, not only chinese (just see Dave's 12k USD Agilent fail issue).
Next example was a guy from Ukraina, he ordered once - got DOA, ordered next one - broken after few days.
For sure maye he was just stupid, but to be very honest the seller and Tekway confirmed his story,
so shit happens sometimes. Luckily for him the seller was fair enough ...

As you said , you have the lowest price for Hantek in Europe - and that's fine.
You giving full no-DOA warranty (on no costs) and the regular 3yrs warranty
- knowing that many of your customers will manipulate these DSOs - and that's more than fair.

So why still some ppl think they have to buy in china instead of from Elec3i ?

- because they can't pay more than whatever
- because they loves to play russian roulette
- because they think they need to do something "cool", like russian roulette purchase


We can't change "cool" guys, and can't change "russian roulette players"
and can't just add some "candys" for price-driven people - so just don't care about.



Btw, did you saw my question ?

https://www.eevblog.com/forum/index.php?topic=1571.msg36747#msg36747 (https://www.eevblog.com/forum/index.php?topic=1571.msg36747#msg36747)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on March 09, 2011, 02:26:09 pm
It must also remember that many countries ask VAT (and also may ask duties). Inside EU this is simple. No customs office on the "inside" borders. (exept some special goods, example cars etc, harmonization is not yet fully ready.)

But if someone buy (example to Australia) from EU. No any matter if Elec3i have pay (VAT) as he import it from China to France. (no need pay any customs duties becouse it is in EY TARIC codes free from customs but import VAT need pay for total.
But now if he send it to Australia  there is Australian customs office.. there buyer need pay TAX (VAT) agen.
This price is ok in EU. (USD 580 with free shipping to Aus is lot of better price. around 430Eur + VAT  if compare (559 Eur + shipping) + VAT.  If (some country) have VAT 25%  it means 430 * 1,25 = ~540 (eur) and if 559 + ship is example 590 then 590 * 1,25 = ~740 eur. Difference is markable. (this is not accurate but here you find some difference)

Also, now they are talking about Tekway NOT Hantek. They are not exactly same but overall specs and functions are same. Example in China Tekway is lot of better name as hantek. (yes inside scope PC read Tekway in Hantek but with somecomponents may be diff becouse there are also two separate production lines... separate factories. Also you may be know what is difference in  prices. (I'm surpriced Aliexpress seller can sell both with same price. How it is possible... this I do not want speculate. (sky is high and caesar is far away)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bilko on March 09, 2011, 03:12:25 pm
If you are in Europe and want Hantek, I agree why not buy from elec3i. For those outside of Europe, it doesn't make that much sense. If you pay with paypal you have some protection from DOA regardless. You still have to send the unit back at your own expense, either to France or to China. The lower price from China incurs less import duty too. So yes there is a price incentive, also the warranty side is only really effective in Europe if you buy from Europe. The quality of the scopes is variable, you are not guaranteed a better scope just because it was shipped to Europe first.
Hantek's focus is for the export market, whilst Tekway are intended for the internal Chinese market. Hence you will find very few if any Hantek scopes with the Chinese keyboard overlay.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on March 09, 2011, 03:37:18 pm
OK, OK, I don't want to lit the fire, and I really wish everything you buy is OK.
Hantek makes its best to give good quality and service. ;D and free parts for quick maintenance.
I don't really know Aliexpress and people behind them. But what I know is Hantek staff and development. tools and production as I visited them many times.
My staff and cooperation team are half chinese too, we don't criticize but we are aware of possible problems because we have faced them sometimes.
OK, from now I stop posting for this topic. It is better we concentrate improving informations of the products...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFman on March 09, 2011, 09:49:41 pm
My God, I had visited this Aliexpress website  :o . You can see how no care is made for packaging and handle electronics accessories like probes.
If people only concentrate the price, well why not proposing everything like a kit with components, case, bill of materials and serigraphy masks for each country!
Then people arrange by themselves (soldering, cleaning, testing) and everything is ok. Ok, men, we will give you a 300.00 EUR oscilloscope kit, and wish you good luck ! ;D Just this policy is not ours: we change bad boxes, change power cord with 2.50m (Hantek/tekway is 1.50m, a bit short for convenience), change CD small pocket when this one is damaged. Electronics should be handled with care, not like trash...


Hi Pascal,

Question: do you give a three year warranty if we change the resistors and firmware in the oscilloscope?

Who pays for warranty postage? We pay to France and you pay back to us, or we pay both ways, or you pay both ways?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 09, 2011, 10:23:42 pm
Hi Pascal,

Question: do you give a three year warranty if we change the resistors and firmware in the oscilloscope?

hehe, RFman, knowing that a customer might play with the DSO internals is one thing, allowing up front is a different thing.

I would never allow it up front, therefore all my customers got a simple question "shall i do it for you?",
if yes i did it and i'm responsible for potential warranty issues, if no then i placed "tags" in NAND, PCB and input channels cover.

But well, the question is not what i think and allow, the question is what Pascal does.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFman on March 09, 2011, 11:10:35 pm
Hi Pascal,

Question: do you give a three year warranty if we change the resistors and firmware in the oscilloscope?

hehe, RFman, knowing that a custom might play with the DSO internals is one thing, allowing up front is a different thing.

I would never allow it up front, therefore all my customers got a simple question "shall i do it for you?",
if yes i did it and i'm responsible for potential warranty issues, if no then i placed "tags" in NAND, PCB and input channels cover.

But well, the question is not what i think and allow, the question is what Pascal does.

Hi Tinhead,

Oh I see, now I understand. It's just that this was one of the things I considered when ordering my oscilloscope.

I agree, it is up to what Pascal allows as far as to what his warranty is.

Thanks for that information.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFman on March 10, 2011, 03:51:52 am
There was an interesting Tekway DST1102B 100MHz DSO Review article in Silicon Chip magazine January 2011.

http://www.siliconchip.com.au/cms/search/index.html?scope=&keywords=Tekway&Search=Search (http://www.siliconchip.com.au/cms/search/index.html?scope=&keywords=Tekway&Search=Search)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFman on March 10, 2011, 05:00:45 am
I scanned the Chinese panel and replaced the characters with English.

I haven't tried it on for size yet, but it looks close!

-P


Hi PsI-On,

When you added the letters and lines onto the front panel, did you put them on a seperate layer to the background colour. Why I ask is that some dial paper already has a background colour. I would be good if it was possible to print on this without the background. Are you able to generate another image of your front panel without the background colour.


Thanks for a great front panel.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: PsI-On on March 10, 2011, 09:40:30 am
Hi RFman,

Yes all the text is on separate layers, I can generate another image but it will have no graphics. The Photoshop file is about 50MB if you want to play with it PM me your email address and I'll send it to you.

-P
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: renais on March 10, 2011, 01:33:30 pm
Hi guys,

I heard that recently all the new DST 1062B from the traders have been with upgraded firmware version 2.06.3. The new version has hack-prevention which prevents illegal firmware update as we did for ver 2.06.2.

Although firmware upgrading with hacked fimware image by USB is not allowed anymore, , I guess by JTAG we still can backup the image and then change to hacked version, if CPLD and FPGA design are not changed from v2.06.2 to v2.06.3. Has anyone tried and confirmed this? Also kindly correct me if I'm wrong.

Thanks!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on March 10, 2011, 01:49:32 pm
Warranty is applied only if no hardware changes are made by fellows. This means Hantek agents may do for you (add-ons, every hardware maintenance like electronic boards, keyboard and display changes). We asked Hantek to put a customized laser security hologram sticker to prevent case opening.
For firmware, the ones provided by Hantek cannot cancel warranty. For shipment charges, customer pays the shipping to us, and he can choose the best ecnomical way for this, and we will pay the shipment back to the customer: this time, we always choose our international post service (the one we use for the purchase process), and we pay for shipping insurance (the rate is the DSO+shipment value, DSO value is our purchase price). ;)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 10, 2011, 02:02:13 pm
Hi guys,

I heard that recently all the new DST 1062B from the traders have been with upgraded firmware version 2.06.3. The new version has hack-prevention which prevents illegal firmware update as we did for ver 2.06.2.

Although firmware upgrading with hacked fimware image by USB is not allowed anymore, , I guess by JTAG we still can backup the image and then change to hacked version, if CPLD and FPGA design are not changed from v2.06.2 to v2.06.3. Has anyone tried and confirmed this? Also kindly correct me if I'm wrong.

Thanks!

if you would spend 10mins to read this thread you will see that:
- yes we know it
- yes it works still over UART
- yes it can work over USB if you read carefully what i wrote
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Igor on March 10, 2011, 02:24:20 pm
The Photoshop file is about 50MB if you want to play with it PM me your email address and I'll send it to you.
I want to.  ;D
I can show my version *.psd precise sizing.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: SoftwareSamurai on March 11, 2011, 01:41:05 am
You know what would be a really great mod for my DSO5120B? How about a 100 MHz DDS function generator!
.
.
.
Yeah, I know. I'm dreaming. Time to crack open the wallet for a good DDS unit...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: renais on March 11, 2011, 02:45:27 am
Hi guys,

I heard that recently all the new DST 1062B from the traders have been with upgraded firmware version 2.06.3. The new version has hack-prevention which prevents illegal firmware update as we did for ver 2.06.2.

Although firmware upgrading with hacked fimware image by USB is not allowed anymore, , I guess by JTAG we still can backup the image and then change to hacked version, if CPLD and FPGA design are not changed from v2.06.2 to v2.06.3. Has anyone tried and confirmed this? Also kindly correct me if I'm wrong.

Thanks!

if you would spend 10mins to read this thread you will see that:
- yes we know it
- yes it works still over UART
- yes it can work over USB if you read carefully what i wrote

Hi Tinhead,

Thanks for your kind comments, I should have read the thread more carefully!

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kahe40 on March 11, 2011, 09:59:04 am

>>> I should have read the thread more carefully!

I dont think so, there are 24 pages with 350 answers,
it took me one afternoon to read everything,
result was: I know less than before!
(because 95% of the thread is bla-bla-bla...)

I found this page for Hantek Scopes:
http://www.socratesblog.eu/?p=174 (http://www.socratesblog.eu/?p=174)
maybe it helps a little bit.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 11, 2011, 11:26:10 am

I dont think so, there are 24 pages with 350 answers,
it took me one afternoon to read everything,
result was: I know less than before!


seriously, you don't need 200MHz bw DSO if your IQ is too low to use search function

Ask the right question and you will get answer, a very first post like "no idea", "i'm blind", "help me" are useless.
And no, don't ask for pre-compiled USB hacks, use your brain again, everything you need is in here.
Title: Re: Another one china DSO hack - 200MHz
Post by: RFman on March 12, 2011, 07:10:38 am
Tinman, have you tried this hack on the DST1062B?

Do you know if the DST1062B has the same components as the DST1102B?

Thanks.

Afaik yes, all Tekway's are equal inside within model series:
DST1062B=DST1102B=DST1202B
DST4062B=DST4102B
DST3022B=DST3042B

The DST3xxxB are probably like DST4000B, but without SRAM soldered and with different FPGA config applied.
The DST4xxxB are a bit different then DST1xxxB (layout and XO), and of course FPGA config didn't match.
So as already said, hacks within model series are possible, but not accross.

Regards the DST1062B hack, it has been tested and confirmed as working by someone else.

On my DST1102B i can switch firmwares between 60-100-200MHz, there are of course measurable differences,
see attached picture (db vs MHz on screen)

Tekway seems to be broad-minded, the -3db bandwidth is always higher
than the model bandwidth (R&S SMY -> DSO ->T 50Ohm terminated)
Hi Tinhead,

In the plot Frequency/dB that you did with DST1202B fw in your DST1102B Hardware. Did you change the channel amp resistors etc for this plot/trace? I note that with DST1102B fw it is 0dB at 100MHz. If components were not changed, what is the plot/trace like with these changed.

Thanks for your help.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Bored@Work on March 12, 2011, 09:48:03 am

>>> I should have read the thread more carefully!

I dont think so, there are 24 pages with 350 answers,
it took me one afternoon to read everything,
result was: I know less than before!
(because 95% of the thread is bla-bla-bla...)

If you are so retarded that this is over your head, you should bring all your electronics stuff back where you bought it, and ask for your money back. When asked why, tell them you are too stupid to use it.
Title: Re: Another one china DSO hack - 200MHz
Post by: tinhead on March 12, 2011, 01:50:58 pm
Hi Tinhead,

In the plot Frequency/dB that you did with DST1202B fw in your DST1102B Hardware. Did you change the channel amp resistors etc for this plot/trace? I note that with DST1102B fw it is 0dB at 100MHz. If components were not changed, what is the plot/trace like with these changed.

Thanks for your help.

this plot was created on very early 100MHz Tekway hw revision, where some parts are like in currenty 200MHz model
and some ~ like in 100MHz model. I should probably create a "proper" one from each model (current hw revision) hacked/not hacked.

In principle as already mentioned it will be a bit worse if you hack 60MHz to 200MHz bw, and almost equal (to my old plot)
if you hack 100MHz model.

For sure, if you change the few resistors it will looks like on original 200MHz model (current hw revision) - see attached
- sweep from HP8594E , 0-400 MHz in 50 ms.  Channel 1 is connected with a known good LMR-195 N-to-BNC cable
with a 50-ohm terminator on the scope end.  The knee occurs at about 2 ms = 400MHz*27ms/50ms=216 MHz, -3db point is about 266 MHz.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Igor on March 12, 2011, 04:08:49 pm
I draw your option panel to fit the real oscilloscope.
This had to completely disassemble the device. 
Slightly changed design. Design Tekway I don't like.
Color file will do tomorrow. 
What type of file like all-* .CDR, * pdf, * psd or JPEG? 
Please do not throw tomatoes at me!


Quote
Please zip it and replace the attached, it is slowing down this page ...
Edit: Sorry … Corrected.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: nukie on March 13, 2011, 12:50:35 am

>>> I should have read the thread more carefully!

I dont think so, there are 24 pages with 350 answers,
it took me one afternoon to read everything,
result was: I know less than before!
(because 95% of the thread is bla-bla-bla...)

I found this page for Hantek Scopes:
http://www.socratesblog.eu/?p=174 (http://www.socratesblog.eu/?p=174)
maybe it helps a little bit.



Firstly, you should have at least some experience with how the microprocessor works before you attempt to mess with your DSO. I spent more than an afternoon to read and digest, guess what? I got more than I need.

I can see the intention of your post is to advertise the webpage here?
Title: Re: Another one china DSO hack - 200MHz
Post by: RFman on March 13, 2011, 05:38:53 am
Hi Tinhead,

In the plot Frequency/dB that you did with DST1202B fw in your DST1102B Hardware. Did you change the channel amp resistors etc for this plot/trace? I note that with DST1102B fw it is 0dB at 100MHz. If components were not changed, what is the plot/trace like with these changed.

Thanks for your help.

this plot was created on very early 100MHz Tekway hw revision, where some parts are like in currenty 200MHz model
and some ~ like in 100MHz model. I should probably create a "proper" one from each model (current hw revision) hacked/not hacked.

In principle as already mentioned it will be a bit worse if you hack 60MHz to 200MHz bw, and almost equal (to my old plot)
if you hack 100MHz model.

For sure, if you change the few resistors it will looks like on original 200MHz model (current hw revision) - see attached
- sweep from HP8594E , 0-400 MHz in 50 ms.  Channel 1 is connected with a known good LMR-195 N-to-BNC cable
with a 50-ohm terminator on the scope end.  The knee occurs at about 2 ms = 400MHz*27ms/50ms=216 MHz, -3db point is about 266 MHz.

Hi Tinhead,

Am I correct in saying you meant "The knee occurs at 27ms" and not 2ms? 400MHz x (27ms/50ms) = 216MHz. The step at the right of the screen (13.5 divisions from the left) looks to be the point where the sweep ends (400MHz) and starts (0MHz) again. Do you know what the spike is that is at around 4 divisions from the left, looks to me as if something is wrong like a BNC connector problem? There is also a step at around 3.5 divisions from the left, should there be a step?

But all is ok if the -3dB point is 266MHz. I've never measured it but I wonder what it would be when a 200MHz probe is connected and used. That would make it worse. I take it that your test was without a probe, with the 50ohm terminator at the oscilloscope BNC connector.

Later I may change the resistors after I have my Tekway DST1102B running a English UI. Am I correct in saying that if you don't change the resistors (and adjust the compensation etc). And run it at 200MHz. Then you are better to get the Tekway 100MHz and not a 60MHz oscilloscope to convert/hack?

Yes, traces for not hacked and hacked for each model would be interesting and would show a lot on what performance to expect.

Thanks for your help.
Title: Re: Another one china DSO hack - 200MHz
Post by: RFman on March 13, 2011, 07:24:18 am
Hi Tinhead,

In the plot Frequency/dB that you did with DST1202B fw in your DST1102B Hardware. Did you change the channel amp resistors etc for this plot/trace? I note that with DST1102B fw it is 0dB at 100MHz. If components were not changed, what is the plot/trace like with these changed.

Thanks for your help.

this plot was created on very early 100MHz Tekway hw revision, where some parts are like in currenty 200MHz model
and some ~ like in 100MHz model. I should probably create a "proper" one from each model (current hw revision) hacked/not hacked.

In principle as already mentioned it will be a bit worse if you hack 60MHz to 200MHz bw, and almost equal (to my old plot)
if you hack 100MHz model.

For sure, if you change the few resistors it will looks like on original 200MHz model (current hw revision) - see attached
- sweep from HP8594E , 0-400 MHz in 50 ms.  Channel 1 is connected with a known good LMR-195 N-to-BNC cable
with a 50-ohm terminator on the scope end.  The knee occurs at about 2 ms = 400MHz*27ms/50ms=216 MHz, -3db point is about 266 MHz.

Hi Tinhead,

Am I correct in saying you meant "The knee occurs at 27ms" and not 2ms? 400MHz x (27ms/50ms) = 216MHz. The step at the right of the screen (13.5 divisions from the left) looks to be the point where the sweep ends (400MHz) and starts (0MHz) again. Do you know what the spike is that is at around 4 divisions from the left, looks to me as if something is wrong like a BNC connector problem? There is also a step at around 3.5 divisions from the left, should there be a step?

But all is ok if the -3dB point is 266MHz. I've never measured it but I wonder what it would be when a 200MHz probe is connected and used. That would make it worse. I take it that your test was without a probe, with the 50ohm terminator at the oscilloscope BNC connector.

Later I may change the resistors after I have my Tekway DST1102B running a English UI. Am I correct in saying that if you don't change the resistors (and adjust the compensation etc). And run it at 200MHz. Then you are better to get the Tekway 100MHz and not a 60MHz oscilloscope to convert/hack?

Yes, traces for not hacked and hacked for each model would be interesting and would show a lot on what performance to expect.

Thanks for your help.
Title: Re: Another one china DSO hack - 200MHz
Post by: tinhead on March 13, 2011, 02:49:30 pm
Am I correct in saying you meant "The knee occurs at 27ms" and not 2ms? 400MHz x (27ms/50ms) = 216MHz. The step at the right of the screen (13.5 divisions from the left) looks to be the point where the sweep ends (400MHz) and starts (0MHz) again. Do you know what the spike is that is at around 4 divisions from the left, looks to me as if something is wrong like a BNC connector problem? There is also a step at around 3.5 divisions from the left, should there be a step?

But all is ok if the -3dB point is 266MHz. I've never measured it but I wonder what it would be when a 200MHz probe is connected and used. That would make it worse. I take it that your test was without a probe, with the 50ohm terminator at the oscilloscope BNC connector.

Later I may change the resistors after I have my Tekway DST1102B running a English UI. Am I correct in saying that if you don't change the resistors (and adjust the compensation etc). And run it at 200MHz. Then you are better to get the Tekway 100MHz and not a 60MHz oscilloscope to convert/hack?

Yes, traces for not hacked and hacked for each model would be interesting and would show a lot on what performance to expect.

Thanks for your help.

no idea where the spike was coming from, not really important.

In principle yes, if you buy 100MHz model and hack to bw, you will have full -3db by 200MHz (without any hw changes)
instead of something between 180-190MHz if you chose a 60MHz model. It is up to you.
Title: Re: Another one china DSO hack - 200MHz
Post by: project on March 14, 2011, 03:44:57 pm
no idea where the spike was coming from, not really important.

looks like a singal bounce to me, no big deal for the test.
Title: Re: Another one china DSO hack - 200MHz
Post by: dfnr2 on March 14, 2011, 07:48:30 pm
Do you know what the spike is that is at around 4 divisions from the left, looks to me as if something is wrong like a BNC connector problem? There is also a step at around 3.5 divisions from the left, should there be a step?
It's from normal tracking generator function, switching of RF circuits inside the tracking generator prior to the sweep.  It's in the "dead period" during sweep setup, so it's irrelevant.
Title: Re: Another one china DSO hack - 200MHz
Post by: RFman on March 14, 2011, 08:35:39 pm
Do you know what the spike is that is at around 4 divisions from the left, looks to me as if something is wrong like a BNC connector problem? There is also a step at around 3.5 divisions from the left, should there be a step?
It's from normal tracking generator function, switching of RF circuits inside the tracking generator prior to the sweep.  It's in the "dead period" during sweep setup, so it's irrelevant.

0MHz is at the left of the screen. 400MHz is at around 13.5 divisions from the left. That makes the step and spike at around 3.5 and 4 divisions from the left, somewhere between 0MHz and 400MHz. Maybe around 3.75 divisions x(400MHz/13.5) = 111MHz. That's not during sweep setup but is during a sweep at around 111MHz.
Title: Re: Another one china DSO hack - 200MHz
Post by: RFman on March 14, 2011, 08:56:43 pm
no idea where the spike was coming from, not really important.

looks like a singal bounce to me, no big deal for the test.

I was thinking it's maybe a mismatch reflection on the transmission cable between the generator and oscilloscope, but there is only one spike and a step. But this is at around 111MHz which is before our measurements at 200MHz.

Interesting, thanks all for your help.
Title: Re: Another one china DSO hack - 200MHz
Post by: tinhead on March 14, 2011, 09:12:34 pm
0MHz is at the left of the screen. 400MHz is at around 13.5 divisions from the left. That makes the step and spike at around 3.5 and 4 divisions from the left, somewhere between 0MHz and 400MHz. Maybe around 3.75 divisions x(400MHz/13.5) = 111MHz. That's not during sweep setup but is during a sweep at around 111MHz.

no, check the picture, the spike was on 0MHz
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on March 14, 2011, 09:12:55 pm
All these are with Hantek DSO5102B factory condition:


(http://i969.photobucket.com/albums/ae171/Xie_07/frespAc50mV_1H_20M_C_hantek67_4.gif)
Log continuous Sweep 1Hz - 20MHz, markkers around, start 1Hz, 5, 10, 20, 30, 50, 100, 200, 500, 1k, 2k 5k 10k 20k 80k 150k 300k 1M 2M 5M 10M 15M 20M scope AC, 50 ohm terminal in scope BNC (DC mode same over 1M but all below 1M is "flat" enough so that can tell... "flat"



(http://i969.photobucket.com/albums/ae171/Xie_07/f_resp_5_350M_s2_5M_50ohm_hantek70_3.gif)
Step sweep, start 5MHz, next longer is 7,5M. (all steps 2,5MHz, all vertical yellow lines are steps.. and all steps are sama timing but first step after 5MHz is long time (7,5MHz))
Connection: HP8567B, cood cable <2m, terminator (tektronix) 50 ohm in scope BNC



(http://i969.photobucket.com/albums/ae171/Xie_07/fresp_5_360M_2_5Mstep_10dB_50ohm_cursors_hantek70_1.gif)
Same but now connection is HP8567B, same cable, terminator (tektronix), 10dB suhner attenuator, scope BNC.
(I think attenuator reduce scope input reactance bad effects littlebit?? (less "ringing")

Cursors are -3dB if reference (0) is 300mVp-p (6 div) So in this picture ~175MHz
Remember that this kind of test give some image about scope analog front end... (and test settings).
Looking signals with normal capture do not give this feq response! Using scope normal probes also make big difference.






(http://i969.photobucket.com/albums/ae171/Xie_07/PulseShapeRisetime10dBja50ohm_cursors_hantek70_4.gif)
Pulse, rise- and fall time set to 1.3ns (HP pulse generator). Geniksen käskynä tehdä 20ns pulssi. Kytkentä: genis. (Suhner)cable, (tek) terminator, attenuator 10dB (suhner) Scope BNC.
Title: Re: Another one china DSO hack - 200MHz
Post by: RFman on March 14, 2011, 09:34:40 pm
0MHz is at the left of the screen. 400MHz is at around 13.5 divisions from the left. That makes the step and spike at around 3.5 and 4 divisions from the left, somewhere between 0MHz and 400MHz. Maybe around 3.75 divisions x(400MHz/13.5) = 111MHz. That's not during sweep setup but is during a sweep at around 111MHz.

no, check the picture, the spike was on 0MHz

Thanks Tinhead, no wonder I couldn't understand the trace. I was taking 0MHz at the left of the screen just like my old valve/transistor Tektronix 547 oscilloscope. I'm looking forward to getting my Tekway to try all the new functions. Thanks all for correcting me.... :).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Igor on March 15, 2011, 04:38:03 pm
I draw my front panel to fit the real oscilloscope.
For this had to completely disassemble the device.  
Slightly changed design. Design Tekway I don't like.
In the tekway.zip - two good quality file (*.PDF).

(http://img28.imageshack.us/img28/4692/02paneltekway.jpg) (http://img28.imageshack.us/i/02paneltekway.jpg/)

EDIT:
Fixed typo in Tekway_Panel.pdf
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: alm on March 15, 2011, 10:02:10 pm
Same but now connection is HP8567B, same cable, terminator (tektronix), 10dB suhner attenuator, scope BNC.
(I think attenuator reduce scope input reactance bad effects littlebit?? (less "ringing")
Probably reflections causing trouble. A high-impedance input is not a nice resistive circuit like a low-impedance transmission line, which is why all high bandwidth scopes have 50 ohm inputs. It's actually standard practice for scope bandwidth testing to use as much attenuation as possible (limited by the generator's output power), to eliminate exactly this problem.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on March 15, 2011, 11:30:55 pm
Same but now connection is HP8567B, same cable, terminator (tektronix), 10dB suhner attenuator, scope BNC.
(I think attenuator reduce scope input reactance bad effects littlebit?? (less "ringing")
Probably reflections causing trouble. A high-impedance input is not a nice resistive circuit like a low-impedance transmission line, which is why all high bandwidth scopes have 50 ohm inputs. It's actually standard practice for scope bandwidth testing to use as much attenuation as possible (limited by the generator's output power), to eliminate exactly this problem.

Yes, this is why I use it and also want show how it is without.  But many people I have seen using only about 50 ohm terminator.

BTW if someone have Tektronix "input normalizer" (small box with BNC connectors) it is useful tool (it need be just made for this capacitance value what is scope input)... but today can not find very easy.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFman on March 16, 2011, 07:20:51 am
Hi Tinhead and all,

I have just received my Tekway oscilloscope from Pioneer via DHL. It took 7 days from the date of order :). I found the Utility "System information button" position in the English manual that I had downloaded from Teckway's website. It is:

Model: dst1102b
Soft version: 2.05.0 (100305.0)
Hardware version: 0x555583e8

I've purchased a USB UART RS232 3.3V TTL board to enable me to change the Menu Display to English. On reading the instructions again, it said that there was a prehacked version for firmware versions before 2.6.xx.

Are the prehacked versions upgrades still available. Would like to make it a 100MHz or 200MHz oscilloscope with English Menu Display.

I also can't find a USB driver to run TTScop program via USB from my Laptop computer. Any idea where I can download this driver? I have Windows 7 64 bit.

Thanks Tinhead, without your information I wouldn't have a great oscilloscope for such a great price USD$580.00 including DHL shipping to Australia.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: flolic on March 16, 2011, 08:39:40 am
I draw my front panel to fit the real oscilloscope.
For this had to completely disassemble the device.  
Slightly changed design. Design Tekway I don't like.
In the tekway.zip - two good quality file (*.PDF).


Hi Igor, you are missing "i" in a acquire  ;)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 16, 2011, 11:40:25 am
I have just received my Tekway oscilloscope. It is:

Model: dst1102b
Soft version: 2.05.0 (100305.0)
Hardware version: 0x555583e8

aha, so old stock as currently 2.6.3 (110225.0) is programmed by the manufacturer

I've purchased a USB UART RS232 3.3V TTL board to enable me to change the Menu Display to English.

good, as you have USB UART converter use it. You can just download the recent firmware,
for example this one

https://www.eevblog.com/forum/index.php?topic=1571.msg36768#msg36768 (https://www.eevblog.com/forum/index.php?topic=1571.msg36768#msg36768)

and hack after firmware ugrade via UART.

On reading the instructions again, it said that there was a prehacked version for firmware versions before 2.6.xx.

Are the prehacked versions upgrades still available. Would like to make it a 100MHz or 200MHz oscilloscope with English Menu Display.

i did cleaned-up this thread and removed all pre-hacked firmware versions
as they only works with minority of currently available DSOs.

I also can't find a USB driver to run TTScop program via USB from my Laptop computer. Any idea where I can download this driver? I have Windows 7 64 bit.

on Hantek website there is new TTScope version which should work with Win7 64bit.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 16, 2011, 01:17:46 pm
btw, i did said "manafacturer is installing by defualt 2.6.3 (110225.0) now",
this is not yet bug-free firmware, it is still in principle the same as 2.06.3 (110118.0).

Hanek did changed the PCB revision, so small firmware update was necessary, therefore revision 2.6.3 (110225.0).
It can be downloaded from Hantek website.

No idea if Tekway changed the hardware too, so therefore there is not new firmware on Tekway website.

There are no details on hw modification, we have to wait until someone bought a Hantek with new hw version.
They just started the production, so probably few old hardware revision models still available.

Even if Hantek said "minor modifications only" i can tell you already that
display init is different (same display but connected a bit different),
buzzer driver has been changed (connected to different port - probably pin swap with display),
some FPGA design changes (only for new hw revisions).


The firmware update is of course checking the hw revision, so it will not "destroy" old models
(and will not update buzzer, display and FPGA).

Most interessting thing during hw revision check is the information
which will be read by the "readHWVersion" from EEPROM:
- PCB revision
- LCD revision
- TOUCH revision
- FRONT PANEL revision
- USB revision
- NET revision

PCB and DISPLAY are clear, probably some routing changes to support new functions, NET is know, that's the LAN addon,
USB revision (probably) for the planned SCPI support, TOUCH - yeah, we know there will be touch in the future,
and FRONT PANEL - right, Hantek have on the front panel preparation for DB25 plug - probably LA functionality in the future.

I think i will order a new hw revision and check what inside, however not now - i will wait until the Hantek's LAN addon is ready.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: project on March 16, 2011, 06:35:06 pm
Thanks for your information. 5202B(Mod 5102B) Updated to 2.6.3(1100225.0). looks more function than 2.6.2. Utility has 3 pages now. and language packs Now have English, Chinese(simplify), Chinese(traditional)--have it in 2.6.2 but file name was wrong so won't show, Japanese, Franch, Deutsch, korean. Other funtions haven't tested yet.

Update: the 2.6.3 looks more bugs than 2.6.2.
Acquire switch between diff long term will let DSO halt or response slow, longer term, slower.This caused by turn filter on. And by turned filter on will also cause that CH1 display little slow, and vertical position image shift little while changing.  
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: alm on March 16, 2011, 09:43:56 pm
BTW if someone have Tektronix "input normalizer" (small box with BNC connectors) it is useful tool (it need be just made for this capacitance value what is scope input)... but today can not find very easy.

It's just an adjustable capacitor in a box. A 10:1 probe accomplishes exactly the same: making sure the capacitance of all channels is the same so you can swap probes without checking compensation each time. Just compensate the probe to one channel, and adjust the other channels so the signal looks the same. The actual capacitance value doesn't really matter as long as it's within the compensation range of your probes. On scopes were you can adjust the input capacitance (which does not include the Tekway/Hantek scopes, as far as I know)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on March 16, 2011, 10:21:35 pm
BTW if someone have Tektronix "input normalizer" (small box with BNC connectors) it is useful tool (it need be just made for this capacitance value what is scope input)... but today can not find very easy.

It's just an adjustable capacitor in a box. A 10:1 probe accomplishes exactly the same: making sure the capacitance of all channels is the same so you can swap probes without checking compensation each time. Just compensate the probe to one channel, and adjust the other channels so the signal looks the same. The actual capacitance value doesn't really matter as long as it's within the compensation range of your probes. On scopes were you can adjust the input capacitance (which does not include the Tekway/Hantek scopes, as far as I know)

Really? But why they sell these calibration fixtures for every different scope input capacitances seoarately. If it is adjusted capacitance how you can calibrate with it becouse you never know if capacitance is right.
Example here
http://www.classictek.org/index.php?option=com_content&view=category&id=105:calibration-fixtures&Itemid=57&layout=default (http://www.classictek.org/index.php?option=com_content&view=category&id=105:calibration-fixtures&Itemid=57&layout=default)
and there example this : 067-0538-00 Input Normalizer.

Also in tektronix service/calibration manuals ask put this "normalizer"  to scope input (and also extremely fast rising pulse generator) but never it tell that adjust this box capacitance. This box can use in calibration routines for adjusting device under calibration! If you adjust tools for calibration what you then calibrate? This "box" is afaik not itself adjustable becouse it is used for checking adjustment in calibration prosedure. But, also it can use for other purposes.

For every different scope capacitance value need buy different box.
I have never open this "input Normalizer" and I can not tell exactly what is inside.

;)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: alm on March 16, 2011, 10:52:39 pm
Really? But why they sell these calibration fixtures for every different scope input capacitances seoarately.
To be more accurate, it's a fixed cap with a smaller trimmer cap in parallel (18pF // 2-8pF for the 20pF model according to Håkan). There is also a 1Mohm resistor in parallel (so it forms a 1:1 compensated voltage divider if the scope's input capacitance matches the normalizer). They need different ones because you would need a huge adjustment range (=bad resolution) to cover 12pF-47pF or so.

If it is adjusted capacitance how you can calibrate with it becouse you never know if capacitance is right.
Just like every other calibration, by comparing it to a more accurate source (at some point they probably use a capacitance meter). Not sure what the factory calibration procedure was. But I don't see the point about caring about input capacitance, as long as the channels match, everything should be fine. And you can't adjust it on (most) modern scopes anyway.

Also in tektronix service/calibration manuals ask put this "normalizer"  to scope input (and also extremely fast rising pulse generator) but never it tell that adjust this box capacitance.
That would be the service manual for the normalizer, if such a thing exists (it was designed for internal use, so I'm not sure how well it was documented).

This box can use in calibration routines for adjusting device under calibration! If you adjust tools for calibration what you then calibrate?
That's the whole traceability chain of calibration, all the way to the national standards lab. A 3.5/4.5 digit DMM is calibrated by a DMM calibration system, which may be calibrated by a reference DMM, which is calibrated by a voltage and resistor transfer standard, which is calibrated to a Josephson standard, which is a fundamental physical standard which defines the volt. Same for time/frequency, which is traced to a cesium clock. You can derive capacitance from those.

Found the calibration procedure in the TekScopes archive:
Quote from: David Garrido
After searching through some data this is the best info you will find.  Straight from the horses mouth........so to speak.  Both the author of this procedure and the gentleman who inserted it into the microfiche files worked at Tek during the 60's and I am just the means by which it made its way to the digital realm.

If readjustment should be necessary, the internal resistor should first be measured to be sure it is in tolerance.  Then the internal variable capacitor may be adjusted to produce a square—cornered, flat-topped response to a square-wave signal on an oscilloscope it is designed to be used with, in the same way as described in the instructions for adjusting scope input capacitance.  The response of the scope to square waves should first be known to be normal, and the input capacitance to the scope should be known to be within about five per cent of its nominal value at the attenuator setting used.  It is normal for input capacitance to vary slightly from one setting to the next to correspond with slight variations of input resistance.  A Tektronix type 130L-C Meter may be used to measure the scope input capacitance.  Measurement should be made while the scope is operating.  When using the Type 130, to avoid a small possibility of a measurement error due to over driving the input, it is a good idea to use an attenuator setting that corresponds to a deflection factor of about 1 volt per division.     

Written by: Leon Orchard
PE/Elec Evaluation
Inserted by: John Mulvey
Tektronix 3-1-67
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFman on March 17, 2011, 05:23:39 am
btw, i did said "manafacturer is installing by defualt 2.6.3 (110225.0) now",
this is not yet bug-free firmware, it is still in principle the same as 2.06.3 (110118.0).

Hanek did changed the PCB revision, so small firmware update was necessary, therefore revision 2.6.3 (110225.0).
It can be downloaded from Hantek website.

No idea if Tekway changed the hardware too, so therefore there is not new firmware on Tekway website.

There are no details on hw modification, we have to wait until someone bought a Hantek with new hw version.
They just started the production, so probably few old hardware revision models still available.

Even if Hantek said "minor modifications only" i can tell you already that
display init is different (same display but connected a bit different),
buzzer driver has been changed (connected to different port - probably pin swap with display),
some FPGA design changes (only for new hw revisions).


The firmware update is of course checking the hw revision, so it will not "destroy" old models
(and will not update buzzer, display and FPGA).

Most interessting thing during hw revision check is the information
which will be read by the "readHWVersion" from EEPROM:
- PCB revision
- LCD revision
- TOUCH revision
- FRONT PANEL revision
- USB revision
- NET revision

PCB and DISPLAY are clear, probably some routing changes to support new functions, NET is know, that's the LAN addon,
USB revision (probably) for the planned SCPI support, TOUCH - yeah, we know there will be touch in the future,
and FRONT PANEL - right, Hantek have on the front panel preparation for DB25 plug - probably LA functionality in the future.

I think i will order a new hw revision and check what inside, however not now - i will wait until the Hantek's LAN addon is ready.


Hi Tinhead,

From your informstion it looks that, if I load the latest Tekway firmware 2.6.3, it won't hurt the oscilloscope because it 1st checks the version of hardware before it updates.

I'm now thinking that it maybe better if I go straight to the 200MHz version and be finished. Is there a prehack upgrade for that as I'm waiting for the UART RS232 TTL interface to come from Hong Kong. I can't do much with my new Tekway as I can't read Chinese... :)

Yes it looks as if there are a few DST1102b with the old version of software.

Thanks again for all the work that you have put in for us.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on March 17, 2011, 05:58:37 am
I have tested with one single scope:

model: DSO5102B
serial T1G/008xxxxxx
soft version: 2.06.3 (110118.0)
hard version: 0x555583e8

This scope accept new FW what is now shared by Hantek.
( dst1kb_2.06.3_15102b_fact(110225.0).up )

But I do not know what is changed. Fast check I can not find any changes - as expected. (later I look more)
(maybe it do not nearly anything change for this scope becouse HW version?)

It seems reset power up counter and FW upgrade counter. Nice.

----------------

alm: thank your opinion comment about Tek "normalizer".


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFman on March 18, 2011, 11:37:24 am
Hi Tinhead,

I have just updated my Tekway DST1102b to a DST1202b. Everything so far is working OK including the English Menu display... :). After backing up the memory contents, I used version 2.06.3 - 200MHz update.

So far everything has progressed nicely with my Tekway purchase from Pioneer.

Thanks for your help.
Title: The new firmware crack 2.06.3 for Tekway
Post by: wjb444 on March 18, 2011, 02:54:07 pm
from china
Title: Re: The new firmware crack 2.06.3 for Tekway
Post by: tinhead on March 18, 2011, 04:31:44 pm
from china

look at that, wjb444 is here .. welcome!

For those of you asking what these file are for :

dst1kb_2.06.3_01202b_fc(110225.0)(1).up  - this is the latest original firmware for
Tekway DST1202B (or whatever Tekway model hacked to 200MHz).
Don't use it on Hantek (for Hantek you will find exact the same fw version on Hantek website).


dst1kb_2.06.3_1062ridoflim(110315.1).up - this is somehow broken or template for upcoming firmware 2.6.3_110315.1

wjb444 , any idea for what this file is ? (i see what inside, seems to be like fw template only).

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 18, 2011, 07:28:08 pm
ups, the Tekway firmware is broken ...

there are all language files (*.lan) missing ... so after update is only chinese available, heh

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: spookytooth on March 18, 2011, 07:40:42 pm
Yes... right. And for me it did not with with the ..(1).up in the end of the filename. Checking this on the console (UART) showed the error "... unexpected character '(' "
 ;) You need to remove the '(1)' from filename so that ist looks like all update files. And - of course you need to copy back the language files...

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Igor on March 18, 2011, 08:17:30 pm
New design of my Chinese Tekway DST1102B.

(http://img97.imageshack.us/img97/2131/newtekway.jpg) (http://img97.imageshack.us/i/newtekway.jpg/)

(http://img14.imageshack.us/img14/4323/newtekway2.jpg) (http://img14.imageshack.us/i/newtekway2.jpg/)

(http://img821.imageshack.us/img821/4270/newtekway1.jpg) (http://img821.imageshack.us/i/newtekway1.jpg/)    
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 18, 2011, 08:30:34 pm
Yes... right. And for me it did not with with the ..(1).up in the end of the filename. Checking this on the console (UART) showed the error "... unexpected character '(' "
 ;) You need to remove the '(1)' from filename so that ist looks like all update files. And - of course you need to copy back the language files...

yep ..

i think wjb444 even not recognized that the other lan files are missing as he is using chinese, so what, shit happens

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: spookytooth on March 18, 2011, 08:33:48 pm
One of these ching chong language files contained in the hantek version must be corrupt. The system crashed when I tried to switch language thru one of these funny character settings (don't know which one) ....
So here is an update file that contains Chinese, English, French and German and works fine for me.
And there is on additional (empty) file in the update file set called 'special'. This one is unique to Tekway update set. Anybody any idea what this means?

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 18, 2011, 08:58:41 pm
One of these ching chong language files contained in the hantek version must be corrupt. The system crashed when I tried to switch language thru one of these funny character settings (don't know which one) ....
yep,indeed (that's why deleted my posting few sec. ago ...)

So here is an update file that contains Chinese, English, French and German and works fine for me.

good work

And there is on additional (empty) file in the update file set called 'special'. This one is unique to Tekway update set. Anybody any idea what this means?

actually it is special file to do special things ... middle of the firmware update procedure this file will be loaded, if exist .. so let's play
to find out what it can do for us.

Actually Hantek fw is also checking for this file, but they just not used it in last fw (probably Tekway shoudl just remove empty file, whatever)
Title: Re: The new firmware crack 2.06.3 for Tekway
Post by: bilko on March 18, 2011, 09:22:23 pm
from china


dst1kb_2.06.3_1062ridoflim(110315.1).up - this is somehow broken or template for upcoming firmware 2.6.3_110315.1

wjb444 , any idea for what this file is ? (i see what inside, seems to be like fw template only).




Is the clue in the filename ?

dst1kb_2.06.3_1062ridoflim(110315.1).up

rid of limits ?


Title: Re: The new firmware crack 2.06.3 for Tekway
Post by: tinhead on March 18, 2011, 10:04:27 pm
Is the clue in the filename ?
dst1kb_2.06.3_1062ridoflim(110315.1).up
rid of limits ?

you should really not ask so many questions :P

But yet it is, actually the firmware update procedure is checking for the "special" file, if such file exists
the model version will be not checked and the update procedure simple continue to execute what inside the "update" script.

So if you for example have an firmware update file which contains logotype.dis with "tekway_dst1062b", the script
will update the firmware and on some step replace your logotype.dis with the one from your firmware update.
This works of course as universal hack (well, still one per Hantek/Tekway).

But don't forget, you should also move the /dstxxxxx to the same model as the specified in logotype.dis
If you don't the displayed model (in utility-system information) will be changed, but the DSO itself still not changed.

So yes, it mean "get rid of limits", but of course you have to take care of the /dstxxxxB in root dir too (which was not the case in the fw posted by wjb444).

Here is the prove:
I did changed the logotype.dis content to "tekway_dst1102b", compiled the firmware and updated my DSO.
The bootscreen logo is still displaying DST1202B, but the utility-system info DST1102B.
As you can see i have still 2ns/div, which means it is still DST1202B even if the model version displayed in
utility-system info says DST1102B.

If i add into the "update" script a mv /dst1202B /dst1102B and compile the firmware again (and do update)
the model will be really changed.

So yes, this "special" file is removing check of the "current logotype.dis = logotype.dis from firmware update file",
but you have still to care about the /dstxxxxB file in root dir.

I think probably someone from the Tekway/Hantek was pissed of to care each time they soldered new DSO
to look which update file for which model, so they just added a backdoor.
This kind of protection was a joke, so probably they already working on new protection,
so they probably will not care that this backdoor got exploited.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: wjb444 on March 19, 2011, 04:25:13 am
Sorry, my English is poor, I use google automatic translation.
Firmware, I did not break people, it comes from the generation of TEKWAY Agents, so, sorry, I can not answer any questions.
But the firmware is easy to use.


??????????????google ?????
?????????????TEKWAY??,?????????????????
????????
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFman on March 20, 2011, 06:09:20 am
New design of my Chinese Tekway DST1102B.

(http://img97.imageshack.us/img97/2131/newtekway.jpg) (http://img97.imageshack.us/i/newtekway.jpg/)

(http://img14.imageshack.us/img14/4323/newtekway2.jpg) (http://img14.imageshack.us/i/newtekway2.jpg/)

(http://img821.imageshack.us/img821/4270/newtekway1.jpg) (http://img821.imageshack.us/i/newtekway1.jpg/)    


Hi Igor,
Your front panels look great. What type of material did you use. Did you use something like the origional panel where the LED shines through for the VO control? What type of printer did you use to print colour? I perfer your origional panel which was close to Tekway's design, where the channel inputs were grouped with their controls. Is it possible for you to produce a PDF of the correct size for your origional design. How did you do the cut outs?

Thanks for for your help.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFman on March 20, 2011, 06:33:40 am
I have not been able to get Windows 7 to install/update the driver that comes with TTScope in the Driver folder. I've downloaded TTScope from both Tekway and Hentek but the driver will not install in Windows 7. Looks to me as if a different driver is required for windows 7. A search has not found a suitable driver. Has anyone a solution for this problem,

Thanks all.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Igor on March 20, 2011, 08:25:25 am
Your front panels look great.
Thank you!

Quote
Is it possible for you to produce a PDF of the correct size for your origional design. How did you do the cut outs?
I have long picked up material for printing. Watched the film and paper. Stopped on paper density 125.
Printed on Pro Minolta laser printer.
Recommend punctured paper hole LED some buttons V0 to laminated. I did not do so, and LED almost not visible.
Then closed the paper on both sides of the matte laminate thickness 75 µm.
Laser cut holes and path.

In the ZIP: PDF files for printing and cutting.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on March 20, 2011, 08:34:55 am
Get nearly 200MHz without any modifications!
All tests are made with unmodified Hantek DSO5102B.


I make short test becouse many peoples do not use direct cable with termination to scope from DUT.
Most of times peoples use probes of course. So, what is important: scope BW alone or probe+scope BW?
(of course both are important but in practice normal use is with probes.)

Now I make only one "big trick". I did not use probe GND wire. I use normal universal probe adapter to connect center and GND just on the probe tip. (It is BNC and it have hole for probe and it connect GND and tip)
All (I hope) know that making HF measurements using probe GND wire give very bad effect. So normally we use some kind of tip end what connect GND directly. (With Hantek probes there are not these any included in package, not even small "spring" style what price is 1/100 yuan)

This test do not tell anything about this situation when use "long" GND wire.

For some compare I make also test with Agilent/HP old "not bad" probe with Hantek.
Both probes LF compensation I make for exactly same square shape with scope own 1kHz signal.






(http://i969.photobucket.com/albums/ae171/Xie_07/probe_1_1_C.jpg)
Hantek P150 probe (labeled as 100/6MHz).
Now with 1:1 setting. Signal 0,5 - 10MHz.



(http://i969.photobucket.com/albums/ae171/Xie_07/Probe_10_1_C.jpg)
Same hantek probe 10:1 setting. Signal 1 - around 280MHz
I use step sweep and stepping is stopped after around every 50MHz advanced as "poor mans markers".



(http://i969.photobucket.com/albums/ae171/Xie_07/probe_agilent_10_1_C.jpg)
same test but now HP/Agilent "150MHz" probe 10:1, sweep stop around 250MHz (sorry, my mistake)



(http://i969.photobucket.com/albums/ae171/Xie_07/probe_pulse.jpg)
Hantek P150 probe, now mediumfast rising and falling pulses. (pulse generator specs: rise and fall time <=1.3ns not good but enough for this purpose)
(if all is exactly ok, pulse looks symmetric... so there is not perfect frequency response over 0 - 1GHz / ;) But there is scope freq response shape with probe together and lot of transmission line mismatches and also pulese generator itself is not perfect. It is HP8161A with "fast" option (not 50MHz model).


(http://i969.photobucket.com/albums/ae171/Xie_07/HP_probe_pulse_C.jpg)
Same test with HP "150MHz" probe. (littlebit better pulse shape but not big advantage. DC/Ac do not make any difference with this pulse freq)


Conclusion: Not bad. In this price class Hantek with own probes is really good. It is not Tektronix, it is not Agilent but... it is reasonable good scope for normal hobby and also professional use for signals under 100MHz.

(also I have make fine adjustment for CH1 and 2 compensation capacitors (inside scope front end) as perfect as I can do but this do not affect these probe tests becouse all they are made using scope lower voltage band.)

Also I test with probe own GND wire. (later pics - but both are really bad (of course) and nearly as same class)


----------
So if you do not really need advantage what mod may give, do not mod a: if you want factory 3 year warranty, b if you are not sure how to do mod. (fail may give lot of troubles - but still it is "repairable" if you follow exactly what all information you can get reading carefully this forum... in this case Rigol is littlebit different)

But remember, samplerate do not go faster.
This is also very good scope in its price class.

(with mod you get 2ns/div but scope is just same speed, it is only "zoom". You can do it with computer... draw nev vlines with 2ns/div and stretch picture with irfan wiev or other. It gives just same effect. Scope real speed is just same before and after mod.)

Understand aliasing specially if use FFT. With this kind of freq response shape there is lot of and littlebit more aliasing.. nearly as garbage collection. And modification make it more bad. Lot of more bad. If want make good, it need do just opposite as modification. It need reject BW and make it more like brickwall shape. (but who cares FFT quality... maybe not so many)

If you use scope in high temperature. Room temperature high or  if air do not flow very free around scope.

Maybe it is good in this case install small fan inside scope. (no need full speed, you can reduce nominal speed example x0.7 - 0.9 (depends fan type and quality) and you get low noise and it still helps airflow inside scope. It need only small extra amount of air. (example double speed if compare natural free air flow and exance rate)  In this case I recommend fan take outside air and flow is to inside. In this case you can put small filter before fan so all dirty do not free travel to inside.  In normal 22Celsius room temp some components work quite high temp. Clearly over 70C case temperature. It is not good to go any more high. They may last but maybe fail rate start grow.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: project on March 20, 2011, 01:23:04 pm
I have not been able to get Windows 7 to install/update the driver that comes with TTScope in the Driver folder. I've downloaded TTScope from both Tekway and Hentek but the driver will not install in Windows 7. Looks to me as if a different driver is required for windows 7. A search has not found a suitable driver. Has anyone a solution for this problem,

Thanks all.

Didn't see any problem with running on win7 32bit, just use driver under x:\Program Files\TTScope\Driver. If not working for you, install TTScope in xp sp2 compatiable mode.  Don't know 64bit.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: wjb444 on March 21, 2011, 03:28:04 am
My friends say that this firmware is deceived agents, or were cheated by manufacturers, brush machine, no 2ns file
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on March 21, 2011, 08:29:53 am
Time difference between channels. May come from timeshared AD conversion and becouse this is not compensated by system (FW).

(http://i969.photobucket.com/albums/ae171/Xie_07/DSO5102Boriginal_CH1_CH2_timing.jpg)

Mode, average, trig CH1, edge up.

Both channel get same signal but becouse signal split is not as good as it can be (only things what affect timing is ok).
(same cable lenght and same type of cable so trawel time is enough same.)

It may come from timeshared AD conversion. AD samples difference is 1ns but single channel is sampled every 2ns. (2 channel maximum is 500Msa/s for both channels but there are 1ns shift between channel.)

1. sample CH1
1ns time
2. sample CH2
1ns time
3. sample CH1
1ns time... etc

Who can confirm this so that it is exactly this. If not know what is truth, do not confirmate this.

IF it is this reason, I wonder why Tekway/Hantek do this mistake in FW.

It need repair  all ather modes but not Alt trig mode.

Timing is important in oscilloscope and this kind of systematic error is just "bad design".

But also it can solve with short extra lenght cable as poor mans solution...  1ns is not long travel in cable. ;)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFman on March 21, 2011, 11:55:48 am

Both channel get same signal but becouse signal split is not as good as it can be (only things what affect timing is ok).
(same cable lenght and same type of cable so trawel time is enough same.)


If you swap the signal cables between channels does it change?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 21, 2011, 12:41:09 pm

Both channel get same signal but becouse signal split is not as good as it can be (only things what affect timing is ok).
(same cable lenght and same type of cable so trawel time is enough same.)


If you swap the signal cables between channels does it change?

it didn't matter, ch2 is always 1ns behind ch1.

This is actually software error, my DSO (cold) is having 200ps skew time between channels, after warm-up 1ns.

Of course ALT trigger works without skew time, but is not having avg. and long mem mode, so not really a work around.
Even with ext trigger no difference, ext/5 even worse because of bug which has been still not fixed (ext/5 is increasing the 1ns to 3ns or so).

Of course you can create a small loop with RG316 cable for ch1 data and setup trigger on ch2 - hehe, then of course skew time is 0ns.

Skew time is common for many DSOs, but of course every company is reducing it to few ps during manufacturer calibration,
this seems to be not the case anylonger for HanTekway (if i'm not wrong, it wasn't there with very old firmware - but hacked).

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on March 21, 2011, 01:30:09 pm

If you swap the signal cables between channels does it change?

it didn't matter, ch2 is always 1ns behind ch1.

This is actually software error, my DSO (cold) is having 200ps skew time between channels, after warm-up 1ns.

Of course ALT trigger works without skew time, but is not having avg. and long mem mode, so not really a work around.
Even with ext trigger no difference, ext/5 even worse because of bug which has been still not fixed (ext/5 is increasing the 1ns to 3ns or so).

Of course you can create a small loop with RG316 cable for ch1 data and setup trigger on ch2 - hehe, then of course skew time is 0ns.

Skew time is common for many DSOs, but of course every company is reducing it to few ps during manufacturer calibration,
this seems to be not the case anylonger for HanTekway (if i'm not wrong, it wasn't there with very old firmware - but hacked).



RFman: Signal cabeling is same for both channel input BNC point so why cables change make any affect?
(yes of course I also do this but no with any real reason. Becouse cable lenght is same, both cables are good condition and they are exactly same cable type (also manufacturing lot is same...) They are also checked for this accuracy level what even can respect for BNC connector cables. Electrical lenght is much better than +-25ps need. They are checked becouse they are my calibration cables, made for Tektronx and also for some HP scope channel time differencies adjustment (skew calibration). And there need accuracy what is lot of better than 1ns. (travel time is 1ns for 300mm  in empty but in coaxial cable it depends cable and it may be something between 0.9 - 0.7 or something like this so good estimate is around 25cm)


tinhead

This is problem with cheap scopes what have not designed using professionals with long history of experience. (example Tek or HP) Many good scope take high care about it.)
But today it is littlebit different becouse digital scopes. If digitize with 1ns periods resolution is 1ns. Now this 1ns is for 1 channel. In this (and many other scope in same class) two channel maximum samplerate is 500MSa/s. 1 sample every 2ns. can not measure anything with better resolution. Yes, if single shot real time.  Averaging give more. So there must not be human made error in sample and store. Then take care also analog channel itself. This your thermal drift is littlebit strange - why?  (averaging is sometimes nice becouse system have noise and it give some advantage for accuracy. In theoretical ideal signal and sampling this advantage can not get. There are many nice solutions in some systems where adding noise to system give more accuracy ;) )

But in this Hantek case it looks really just like bug. (they have forget..or make some mistake in FW upgrade) I can only quess that memory and capture construction is so made that channels can very easy shift in time axis related to each others.

"Of course you can create a small loop with RG316 cable for ch1 data and setup trigger on ch2 "

why change Trig to CH2. No need.

If delay CH1 signal before scope there is no any reason to think trigger source! It simply means that CH2 signal come earlier as compared to CH1.  Trig do not mean anything. Only meaning is signal timing... becouse we can not put signal travel more fast we can only delay.

I think it do not need picture where  I shift CH2 signal to left so that it is same as CH1 only adding delay to CH1 signal and also so that there is no matter if Trig is CH1 or 2. ;)


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: nukie on March 22, 2011, 11:40:26 pm

If you use scope in high temperature. Room temperature high or  if air do not flow very free around scope.

Maybe it is good in this case install small fan inside scope. (no need full speed, you can reduce nominal speed example x0.7 - 0.9 (depends fan type and quality) and you get low noise and it still helps airflow inside scope. It need only small extra amount of air. (example double speed if compare natural free air flow and exance rate)  In this case I recommend fan take outside air and flow is to inside. In this case you can put small filter before fan so all dirty do not free travel to inside.  In normal 22Celsius room temp some components work quite high temp. Clearly over 70C case temperature. It is not good to go any more high. They may last but maybe fail rate start grow.

I agree with adding a fan! I am building a 8 channel temperature logging with DS1721 to measure 'in case' temperature of the different parts. I will report back in a few weeks. I can feel the heat from the top of the case, my room temperature is only 24c. I bet the parts in it especially the caps in the smps area are choking to death.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 23, 2011, 01:04:51 am

... are choking to death.


actually all components are still within specs, but a slow running fan will of course reduce the potential stress.
If you have good quality fan you can use temp / speed control, if you use a cheap one it is enough to replace the 7812
on power board by 7805 (and run a 12V fan with 5V).

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bilko on March 23, 2011, 01:59:44 am

actually all components are still within specs, but a slow running fan will of course reduce the potential stress.
If you have good quality fan you can use temp / speed control, if you use a cheap one it is enough to replace the 7812
on power board by 7805 (and run a 12V fan with 5V).



Does anybody have the details of the fan (size ?) and are there any pictures of the mod ?
What about using a filter and running the fan to suck the air in ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: project on March 23, 2011, 03:15:25 am
Does anybody have the details of the fan (size ?) and are there any pictures of the mod ?
What about using a filter and running the fan to suck the air in ?

Just open your case , 4 screws, you'll see all your options. believe it's 55mm fan or maybe 50mm and 55mm mount holes.

I'm using larger size, 65 or 75mm fan, and mount only one hole by a long screw to extend fan to the middle of the case, also changed to L7805CV  to power this 12v fan. All these are for reduce noise and creat more air flow.

For this DSO, I'm not very worry about power supply part. It's just a normal switching psu. Anything goes wrong can be easy fixed. What I'm worried are those two BGA chips, BGA+lead-free stuff creat most electronic gabage today. I'll add some heat sinks on them later.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ianryeng on March 23, 2011, 05:54:59 am
Just bought a DSO-5062B  ;D

As a side note at least currently you can get the english version with shipping for $450 while they last (25% off and no I have no connection to them its just a good deal)
https://www.mortoncontrols.com/index.php?main_page=product_info&cPath=58_51&products_id=450 (https://www.mortoncontrols.com/index.php?main_page=product_info&cPath=58_51&products_id=450)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: slburris on March 23, 2011, 03:06:45 pm
Another option for US buyers is

http://www.thefamousbrandsoutlet.com/test-measurement-instruments.html?cat=50 (http://www.thefamousbrandsoutlet.com/test-measurement-instruments.html?cat=50)

Don't be put off by their weird name.  I saw a recommendation
for them on rcgroups about a year ago, and picked up the
Hantek DSO-1060 handheld scope and have been quite happy with
it.

At the time, they didn't carry any of Hantek's bench scopes, but that appears
to have changed.

Still, the Morton Controls seems to be a deal!

Scott
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ianryeng on March 24, 2011, 01:29:31 am
The only thing that I've noticed that I don't like so far is the max 5V/div. Why not 10/dev...at least that way I could work on a 240V system without needing to buy a 100x probe... 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: project on March 24, 2011, 02:15:42 pm
The only thing that I've noticed that I don't like so far is the max 5V/div. Why not 10/dev...at least that way I could work on a 240V system without needing to buy a 100x probe... 


turn to x10, you got 50v/div.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ianryeng on March 24, 2011, 03:30:05 pm
Thank you for the response, I certainly appreciate and I should have been more specific that I meant AC systems.

240VAC with 50v/div doesn't fit with the default setup (unlike the Rigol which will display 10V/div, this was a big issue for us when we bought a LeCroy WaveAce as a second scope in my office and it only supported 5V/div max)

680Vpk-pk/50V = 14 divisions minimum meaning that you would need 10V/div and use 7 of the eight available on the screen to display the waveform.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: project on March 24, 2011, 04:15:16 pm
Thank you for the response, I certainly appreciate and I should have been more specific that I meant AC systems.

240VAC with 50v/div doesn't fit with the default setup (unlike the Rigol which will display 10V/div, this was a big issue for us when we bought a LeCroy WaveAce as a second scope in my office and it only supported 5V/div max)

680Vpk-pk/50V = 14 divisions minimum meaning that you would need 10V/div and use 7 of the eight available on the screen to display the waveform.

Guess you mean you need 10v/div at 1x probe. then you'll need 100x probes for sure on this scope. Or get some scopes support higher input voltage, like 1000vpp at 10x. usually this type DSO accurate at lower voltage. higher frequence, lower voltage. 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: enclis on March 24, 2011, 11:10:09 pm
Finally got my DST1062B from taobao. Easily upgraded it to DST1202. Dont run any benchmark tests on the edge of the bandwidth. There are only 60MHz probes out of the box, so I need to buy another to take appropriate tests. Everything is great!  8) , but I cant connect my oscilloscope to PC via usb. I'm using TTScope 2.0.0.4 software that i've downloaded from Tekway official site but it doesn't work   :'( . And I cant get svg data to my USB flash greater than 40k points >:(, I want to get 512k and 1M points!

Thanks a lot to all forum members in this topic, especially tinhead.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 25, 2011, 01:05:28 am
Finally got my DST1062B from taobao. Easily upgraded it to DST1202. Dont run any benchmark tests on the edge of the bandwidth. There are only 60MHz probes out of the box, so I need to buy another to take appropriate tests. Everything is great!  8) , but I cant connect my oscilloscope to PC via usb. I'm using TTScope 2.0.0.4 software that i've downloaded from Tekway official site but it doesn't work   :'( . And I cant get svg data to my USB flash greater than 40k points >:(, I want to get 512k and 1M points!

Thanks a lot to all forum members in this topic, especially tinhead.

use the software from Hantek website or chinese Tekway website .. there is 2.0.5 too, http://www.tekwayins.com/pic/TTScope.rar (http://www.tekwayins.com/pic/TTScope.rar)
no idea why they not yet copied to the english website.

and yeah, there are no drivers for Win 7 64bit ...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: enclis on March 25, 2011, 01:11:52 pm

use the software from Hantek website or chinese Tekway website .. there is 2.0.5 too, http://www.tekwayins.com/pic/TTScope.rar (http://www.tekwayins.com/pic/TTScope.rar)


Software is works but I still can't get svg data greater than 40k points. In this case PC software is useless for me. Can you get 512k or 1M points out of your oscilloscope?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 25, 2011, 01:17:33 pm
Software is works but I still can't get svg data greater than 40k points. In this case PC software is useless for me. Can you get 512k or 1M points out of your oscilloscope?

with firmware version 2.6.1 the 1M data export is working, with other versions not. It has been confirmed as bug and it will be fixed soon.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: project on March 25, 2011, 04:09:42 pm
Software is works but I still can't get svg data greater than 40k points. In this case PC software is useless for me. Can you get 512k or 1M points out of your oscilloscope?

with firmware version 2.6.1 the 1M data export is working, with other versions not. It has been confirmed as bug and it will be fixed soon.

mine works  to 512k, but not 1M.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 25, 2011, 04:21:24 pm
mine works  to 512k, but not 1M.

that's new for me, which fw version ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: enclis on March 25, 2011, 08:57:53 pm
with firmware version 2.6.1 the 1M data export is working, with other versions not. It has been confirmed as bug and it will be fixed soon.

Will wait eagerly for bug fix.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: dfnr2 on March 27, 2011, 05:32:12 pm
Hello,  I'm posting here since this thread seems to be the gathering place for Hantek/Tekway owners, and my query relates to the scope performance.  I am seeing an artifact at higher sample rates; specifically, distortion of the waveform which is independent of amplitude (and thus of SNR relative to broadband background).  I've attached a screen shot of a capture of a 150 MHz signal, with sinc interpolation.  On the second image (taken in the dual-window zoom mode, which doesn't do the sinc interpolation) shows all the samples within the correct amplitude range.  For both, sample memory is set to 4K, with single channel active.

I believe that the variation in amplitute of the reconstructed sinewave is due to error in timing of the sampling at the highest sample rates, most likey due to imperfect interleaving of the DACS, but possibly just due to clock jitter. The effect is much smaller at lower rates, and with lower bandwidth signals (which don't change as much between samples, so small sample timing errors aren't as noticeable).  The question is:  Do the Tekway/Hantek scopes typically exhibit this kind of error at the highest sampling rates, or do I have a bad unit?

If anyone here has access to a clean 150 MHz sine wave source, can you try the same acquisition, and report whether or not you see the same thing?  Results from more that one person/scope would be helpful.

Thanks!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: saturation on March 28, 2011, 04:33:04 pm
I don't own the Hantek, but a Rigol 1052e.  Try switching your scope from real time to equivalent time sampling, does the sine wave appear better?  The Hantek does 1Gs/s for ~ <= 100MHz with fidelity, but at 150 MHz, you're more likely to see sampling related errors.

If these artifacts were present below 100 MHz, I'd more suspect the Hantek hardware.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RobertB on March 28, 2011, 04:34:21 pm
Hi all!

I received my Hantek DSO5062B today - and from the short glimpse I've got so far I am VERY satisfied - Tank you very much for your work and recommendation tinman!

Just after the DOA-Check I "dismantled" my new gadged - just to find a PCB I can't remember having seen in this thread so far (see attachment)

There is a footprint for a Ethernet jack, for speaker and microphone jack and finally for a micro-SD!

I have not yet tried to "unlock" 200 MHz operation, just wanted to get a quick response on the PCB shot.

BR
Robert
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 28, 2011, 05:04:19 pm

 just to find a PCB I can't remember having seen in this thread so far (see attachment)

There is a footprint for a Ethernet jack, for speaker and microphone jack and finally for a micro-SD!

I have not yet tried to "unlock" 200 MHz operation, just wanted to get a quick response on the PCB shot.

and you got PM now ...

The re-design seems to be more than only few wires between FPGA/SoC ... that's completly new device.
Luckily still the same soft-design (meaning Linux and hack).

These jacks, hmm, good question for what reason they are, as i remember Pascal (from Elec3i) said somethign about external battery.




Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on March 28, 2011, 05:49:51 pm
Robert B

Extremely interesting. I just waiting DSO5102B  before end of this week.... I hope...

Some weeks ago they was with "old" PCB.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RobertB on March 28, 2011, 07:26:33 pm
Hi!

You're welcome! If any is missing, reply within the next 30min or so because after that I want to reassemble my new gadged... Already costed my one heat sink from the ADC mounted on the backside...

I have retrofitted the missing USB Host connector - guess it will work. For the Ethernet I doubt that the jack will be enough - see the pictures.

Resized versions attached, Link to full res: http://rapidshare.com/files/454830015/Hantek.rar (http://rapidshare.com/files/454830015/Hantek.rar)

BR
Robert

btw: found the EEPROM: Microchip 24AA64 64K I2C™ Serial EEPROM with write protect
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RobertB on March 28, 2011, 08:55:15 pm
I must be out of my mind for doing this, but

I plugged in a USB Flash Drive in the retrofitted USB Host connector:

"usbctl: zombie --> [reset] --> default. Device in default state."

So, no luck - but the good news: Everything else still works! ;-)

Next, instead of measuring some test-signals:

The 28-pin footprint shown in P1170503 is connected to the "PHONE1" jack footprint. After some investigation in the Mini2440 schematics (http://www.friendlyarm.net/dl.php?file=mini2440_schematic.zip (http://www.friendlyarm.net/dl.php?file=mini2440_schematic.zip)) it is for 100% sure that this can be used to retrofit a UDA1340: http://www.datasheetcatalog.org/datasheet/philips/UDA1340.pdf (http://www.datasheetcatalog.org/datasheet/philips/UDA1340.pdf)

Looking at the SDIO Pinout I am sure we just have to find the right SD-slot. Unfortunately, the buzzer right in front blocks changing the SD-card, so I guess I will go for some flat ribbon cable... Only thing missing could be the missing pullups.

I still can't find a way to see how a Davicom DM9000 or another Ethernet-PHY could be attached to the board to make use of the ethernet-jack. So to make a sophisticated guess I say the ethernet-part is implemented in the FPGA I can't identify due to its heatsink...


BR
Robert
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 28, 2011, 10:00:36 pm
thanks Robert for the pics!

The not assembled SSOP28 IC between NAND and 74HC4053 (USB mux) is UDA1341TS (connected via IIS).
The SOP8 is an amp for headphones, P1/P2 connectors nears that IC are routed to these phones/mis connectors too (near USB client).
No idea for what a DSO need audio codec, but who cares, this is in principle Linux box with "DSO functionality" so what.

Same for SD card (ok, it can be used as additional memory/boot device), on the old hw revision the SDIO port is
not routed.

So in principle Hantek was nice enough to route all these unused pins to what-they-designed-for.
Probably they will never use sound on DSO, but we can. SD card is nice for hacks too.

Other changes/not assembled parts:
- some status LEDs, but that's not new
- new 60pin 1.27 pitch I/O header  - very nice, much more addons possible than with the old one.
- on bottom side for different DAC IC (instead of LTC2601 on the top side)
- diag connectors ??? within input stage, hmm (lol, input stage open-detector?)
- U12 on bottom, J4 on top and all these parts around J4 (abouve J700 on top) - hmm (i saw that parts
combination somewhere near FPGA, think ...)
- opamp TLV272 replaced by TLV274, no function change, just some savings
- USB mux with 4053 (S3C2440 is having host/client or 2 x host USB ports, the "mux" is probably detecting VUSB
voltage on USB client and swithing off the second USB host on the front side)
- on bottom side really ugly soldered single gate 74hc04 with some resistors as jumpers, let me gues - for EEPROM WP ?
- polyfuse for both front USB ports (good idea)
- "RJ45 jack" routed probably to the long I/O header, so LAN addonboard will be plugged there.
- on the bottom side 6 x 0ohm "jumpers" block connected to FPGA, hmm (model detection?)
- on the bottom side some not assembled resistors/transistor, routed to S3C2440, no idea what for.
- input channels JFET changed to ??? (i can't read the device marking)

Many changes, especially these "jumpers" are interessting for future hacking.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 28, 2011, 10:13:37 pm
I must be out of my mind for doing this, but

I plugged in a USB Flash Drive in the retrofitted USB Host connector:

"usbctl: zombie --> [reset] --> default. Device in default state."

So, no luck - but the good news: Everything else still works! ;-)

this should work, normally the host/device usb port is jumpered (like in attached pic), however you have to tell the S3C2440 what
will be used. The 4053 seems to be connected to them (from what i can see) to act as "mux", or in detector.



Next, instead of measuring some test-signals:

The 28-pin footprint shown in P1170503 is connected to the "PHONE1" jack footprint. After some investigation in the Mini2440 schematics (http://www.friendlyarm.net/dl.php?file=mini2440_schematic.zip (http://www.friendlyarm.net/dl.php?file=mini2440_schematic.zip)) it is for 100% sure that this can be used to retrofit a UDA1340: http://www.datasheetcatalog.org/datasheet/philips/UDA1340.pdf (http://www.datasheetcatalog.org/datasheet/philips/UDA1340.pdf)

Looking at the SDIO Pinout I am sure we just have to find the right SD-slot. Unfortunately, the buzzer right in front blocks changing the SD-card, so I guess I will go for some flat ribbon cable... Only thing missing could be the missing pullups.

yep, that's what i found out too.

I still can't find a way to see how a Davicom DM9000 or another Ethernet-PHY could be attached to the board to make use of the ethernet-jack. So to make a sophisticated guess I say the ethernet-part is implemented in the FPGA I can't identify due to its heatsink...

Hantek told me DM9000, and yes it would be (like once designed by Tekway) a addon-pcb connected to i/o header. From mechanical point of view
the new hw revision is designed much better (RJ45 jack mounted to big PCB instead to "weak" addon).

But hey, you have the hw there, you can easily check if the RJ45 jack (on these parts around it on bottom PCB side) are connected to
the long I/O port.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RobertB on March 28, 2011, 10:24:53 pm
Hi!

No luck with the micro-SD... Soldered a flat ribbon cable to the footprints and to a micro-SD slot. No matter if I insert the start before power up or after powering up - nothing happens. The resistors on the bottom side of the pcb are fine - so I guess software is not capable?

BR
Robert
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 28, 2011, 10:39:12 pm
Hi!

No luck with the micro-SD... Soldered a flat ribbon cable to the footprints and to a micro-SD slot. No matter if I insert the start before power up or after powering up - nothing happens. The resistors on the bottom side of the pcb are fine - so I guess software is not capable?

BR
Robert

of course it need to be enabled, via sd card driver or evt. via direct GPIO access, but it is good to have it routed to the S3C2440.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RobertB on March 29, 2011, 12:37:14 am
Yes, looks like the same (missing piece of software) for the USB-mux. Soldered the resistor I supposed to be the signaling pin in (2.2k, just to make sure not to destroy the S3C2440). Consequently it changes from approx. 0V to 3.3V if there is a cable plugged in on the back (USB B jack) and therefore the xY1 are routed to xZ connecting the USB B jack with the S3C2440.

Wasn't able to figure out how exactly the 1.5k pullup works. The missing resistor is kind of unclear, as it connects 3Y1 and 3Z. Guess 3Z is routed to the S3C2440 as well and gets switched to 3Y1 is the cable is inserted. I have no clue why this is switched at all as this can always be the case even when using the USB A jack at the front (does not harm anything). Maybe because of this there is a bypass as well.

Is there any tool to check what pin toggles when the USB A cable is connected/disconnected? Maybe it would be possible to reconfigure the S3C2440 on the fly...

BR
Robert
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 29, 2011, 03:27:09 am
it works very simple - these 3 input selectors (4053 pin 9,10,11) are connected via 10k resistor (near usb client jack) to VUSB, cap to GND (giving some delay) and missing resistor to unknown GPIO port.
This missing resistor (that's where you soldered the 2.2k) is used (i gues) only if the firmware is forced switching the USB client off and USB Host2 on (no matter if there is VUSB on USB client).
Without this resistor (there is currently no support in firmware for this anyway - btw, what fw version is istalled on your DSO?) this circuit still works, but only via VUSB detection.
By default 4052 is selecting X inputs, so the second host is enabled if no VUSB. If VUSB exists, 4052 is switching USB signals to USB client and the USB_Enable (actually another one GPIO port)
to the 1.5k resistor (which is soldered near USB client jack and routed to 3Y1). This signal (actually the 1.5 resistor between D- and the GPIO port) is necessary to allow proper USB client functionality.
The 3rd resistor between 3Y1 and 3Z is probably for hysteresis.


To monitor GPIO port status there are 3 ways
- boundary scan over JTAG (which is always the best way)
BSDL files are available on Samsung website, but if you have no hardware and knowledge how to use it, then you lost.

- via test app loaded instead of linux.
There are many such test applications for S3C2440 to show the GPIO port status (some over USB which didn't make sense here, others via shell/uart),
but you have to compile them and load to NAND or even better to memory over JTAG.

- via what already on the DSO
Normally you can read GPIO under linux, you will need an GPIO driver and application calling such driver.
Luckily there is such driver availble on HanTekway DSOs - /dso/driver/dso-iobank.ko and there is application calling this driver /dso/app/setio
The "setio" is being used by default like that /dso/app/setio g12 o 1 (where G12 is GPG12 port/pin, "o" is output and "1" the actual data which will be written to that port/pin).
However this app can be user like /dso/app/setio g12 i to display the port value.

So all you need is to connect via UART to the Linux shell, kill the dso.exe by ctrl+c, to connect 3.3V via 2k to the unknown GPIO pin (i mean the one where you soldered 2.2k resistor)
and monitor what changed ... lot of ports/pins to monitor, but you can write a script to loop until change and display what changed.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RobertB on March 29, 2011, 10:59:11 am
it works very simple - these 3 input selectors (4053 pin 9,10,11) are connected via 10k resistor (near usb client jack) to VUSB, cap to GND (giving some delay) and missing resistor to unknown GPIO port.
Yes, this is exactly what I've said and showed in the picture.

This missing resistor (that's where you soldered the 2.2k) is used (i gues) only if the firmware is forced switching the USB client off and USB Host2 on (no matter if there is VUSB on USB client).
Without this resistor (there is currently no support in firmware for this anyway - btw, what fw version is istalled on your DSO?) this circuit still works, but only via VUSB detection.

I don't agree on this. The missing resistor connects to an INPUT, this is where the USB-driver should look at to reconfigure the USB core on the S3C2440. Working against the 4.7k/10k voltage divider of VBUS of USB A jack would work somehow, but would be a design flaw. This is supported by measurements I did when the DSO was running: you get ~0V when no USB-A is in (10k to GND) on BOTH sides (so not even a pullup) and ~3.3V when connected (voltage divider to VBUS) on BOTH sides (so again no pulldown). The pin is not driven at all - this will be the pin to consider for reconfiguring the S3C2440. By the way, I was looking at the Mini2440 - I saw somebody asking about the SEL_USBPAD bit (http://www.armkits.com/download/s3c2440.pdf (http://www.armkits.com/download/s3c2440.pdf)) but I doubt this is enough for reconfiguration. Never saw somebody telling it actually works. To be honest, it is of course more tempting to stick in a small 4-port-hub and avoid the hassle.

By default 4052 is selecting X inputs, so the second host is enabled if no VUSB. If VUSB exists, 4052 is switching USB signals to USB client and the USB_Enable (actually another one GPIO port)
to the 1.5k resistor (which is soldered near USB client jack and routed to 3Y1). This signal (actually the 1.5 resistor between D- and the GPIO port) is necessary to allow proper USB client functionality.

To be precise, by default it connects/selects xY0 with xZ. The jacks' Dx lines are connected to the xY1/2 pins, the S3C2440 Dx lines are connected to the xZ pins.  

The 3rd resistor between 3Y1 and 3Z is probably for hysteresis.

I don't think so. To do this, it would have to have a connection to Sx. This is not the case. I guess 3Z is connected to the pin controlling the 1.5k pullup in the original design. By soldering a zero-ohm resistor to this location you ALWAYS have the pullup-control connected to the USB A jack. Using the actual configuration, its only connected if VBUS is applied. I guess 3Y0 (default) is open (so the 1.5k is flowing on one side in default state).

To monitor GPIO port status there are 3 ways
- boundary scan over JTAG (which is always the best way)
BSDL files are available on Samsung website, but if you have no hardware and knowledge how to use it, then you lost.

- via test app loaded instead of linux.
There are many such test applications for S3C2440 to show the GPIO port status (some over USB which didn't make sense here, others via shell/uart),
but you have to compile them and load to NAND or even better to memory over JTAG.

- via what already on the DSO
Normally you can read GPIO under linux, you will need an GPIO driver and application calling such driver.
Luckily there is such driver availble on HanTekway DSOs - /dso/driver/dso-iobank.ko and there is application calling this driver /dso/app/setio
The "setio" is being used by default like that /dso/app/setio g12 o 1 (where G12 is GPG12 port/pin, "o" is output and "1" the actual data which will be written to that port/pin).
However this app can be user like /dso/app/setio g12 i to display the port value.

So all you need is to connect via UART to the Linux shell, kill the dso.exe by ctrl+c, to connect 3.3V via 2k to the unknown GPIO pin (i mean the one where you soldered 2.2k resistor)
and monitor what changed ... lot of ports/pins to monitor, but you can write a script to loop until change and display what changed.

I will do this when I have time. Have a Segger J-Link, so this is not a problem at all. More of a problem is that we don't have 2.00mm headers on stock in the lab. I don't like to solder plain cable to this socket. I think I will tackle this when upgrading the analog parts, because I don't want to srew/unscrew the frontpanel frequently (the threads in the plastic get stale way to fast even if you're cautious).

Quite probable I will try to get some WiFi-stick running with the DSO to allow ssh (dropbear?) access to avoid the hassle of designing an addon-card we don't have to connections for. I think it takes a broken unit to unsolder the BGAs and "beep" all connections. - And I prefer it won't be mine... ;-)

So, does anybody has some kind of toolchain ready? Some kind of BSP available? What about triggering Hantek/Tekway or - if they are not nice, which I don't think - let FSF making them releasing the relevant sources?

BR
Robert
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 29, 2011, 11:44:37 am
I don't agree on this. The missing resistor connects to an INPUT, this is where the USB-driver should look at to reconfigure the USB core on the S3C2440. Working against the 4.7k/10k voltage divider of VBUS of USB A jack would work somehow, but would be a design flaw. This is supported by measurements I did when the DSO was running: you get ~0V when no USB-A is in (10k to GND) on BOTH sides (so not even a pullup) and ~3.3V when connected (voltage divider to VBUS) on BOTH sides (so again no pulldown). The pin is not driven at all - this will be the pin to consider for reconfiguring the S3C2440. By the way, I was looking at the Mini2440 - I saw somebody asking about the SEL_USBPAD bit (http://www.armkits.com/download/s3c2440.pdf (http://www.armkits.com/download/s3c2440.pdf)) but I doubt this is enough for reconfiguration. Never saw somebody telling it actually works. To be honest, it is of course more tempting to stick in a small 4-port-hub and avoid the hassle.

what Input ? Thie is an SoC I/O port, so you can configure for input or output function. As it is not configured right now by currenty firmware it is acting probably "as input".

Design flaw, hmm, depends. Let's imagine there is option in firmware to switch between "backside client and frontside host", with warnning to the user - in that case there will be no 4.7/10k voltage divider, and even if user plugs in
wrong port nothing will get destroyed. So it is cheap but working solution (however with user asistance).

The SEL_USBPAD is working, however by default most s3c2440 boards developers are too lazy to drive proper drivers, they instaling hard jumpers or even better USB hub chips.

I don't think so. To do this, it would have to have a connection to Sx. This is not the case. I guess 3Z is connected to the pin controlling the 1.5k pullup in the original design. By soldering a zero-ohm resistor to this location you ALWAYS have the pullup-control connected to the USB A jack. Using the actual configuration, its only connected if VBUS is applied. I guess 3Y0 (default) is open (so the 1.5k is flowing on one side in default state).

maybe, was only a gues. The 1.5k is only necessary for usb client port detection.

I will do this when I have time. Have a Segger J-Link, so this is not a problem at all. More of a problem is that we don't have 2.00mm headers on stock in the lab. I don't like to solder plain cable to this socket. I think I will tackle this when upgrading the analog parts, because I don't want to srew/unscrew the frontpanel frequently (the threads in the plastic get stale way to fast even if you're cautious).
j-link works, but don't forget to save NAND dump with OOB blocks in case you wish to restore it some day.

Is it 2mm or 1.27mm header? Looks like 1.27 on pic, but maybe i just saw the dimensions wrong.

Quite probable I will try to get some WiFi-stick running with the DSO to allow ssh (dropbear?) access to avoid the hassle of designing an addon-card we don't have to connections for. I think it takes a broken unit to unsolder the BGAs and "beep" all connections. - And I prefer it won't be mine... ;-)

There is 2.6.13 linux installed (i think, still no idea what firmware you have and what linux version ..see my PM), WiFi-stick like VNT6656 based might work but there is some effort in driver compilation for
2.6.13 kernel. SSH might work too, but telnet is already there, so enough for me.

Beep all conections, this is what i did for the whole DSO. As i had to replace the SoC i shot picture of it, FPGA scanned via boundary scan. But sure, that was for the old hardware revision, for the new you have
we can start from scratch (almost, input and trigger part are same, but conected to different FPGA pins)


So, does anybody has some kind of toolchain ready? Some kind of BSP available? What about triggering Hantek/Tekway or - if they are not nice, which I don't think - let FSF making them releasing the relevant sources?

i know this thread is long, the information about is somewhere in it. To make it shorter - no, no toolchain available for now. You have to build your own, QQ2440 with 2.6.13 is good starting point.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Igor on March 29, 2011, 04:47:40 pm
Russification Tekway DST1102b (or DST1202B?  ;D ) is over!

(http://img849.imageshack.us/img849/1011/tekway1.png) (http://img849.imageshack.us/i/tekway1.png/)


(http://img820.imageshack.us/img820/1171/tekway2.png) (http://img820.imageshack.us/i/tekway2.png/)


Posted in Tekway, and invited them to a Russian.lan.  They even failed to respond...  :-\
Perhaps they are not interested in the Russian market.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 29, 2011, 05:47:07 pm
hey Igor, beautiful!

Tekway maybe not really present, but Hantek have some russian distributor, so i'm sure they will be happy about the translation.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Igor on March 30, 2011, 02:14:59 am
Thanks, Tinhead.  Your assessment of my modest work very important for me. I know Hantek's distributors in Russia. People who aren't very nice chat. Sorry.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ccatt on March 30, 2011, 11:23:19 am
Happy every day!Sorry to trouble you, but I need your help.

My DSO firmware version is 2.6.3,
 by measurement,the last pin of  UART  is 3.3v on the picture,not 0v. if USB UART converter 's "gnd "to the last pin of  UART in DSO , can't  this instrument  be damaged ?  now  rx0 : 0.1v   rx1: 0v

just buy H-JTAG and USB UART converter ,   but the  USB UART converter not  work,

I felt very strange: fw2dump.zip can dump 3   files(boot.bin kernel.bin root.bin  ),but  fw_backupV3.zip  can't.

If only use H-JTAG, What should I do?  How do you define the offset of the 3 file  .

How do I  downgrade to 2.6.2 or  lower?

(dst1kb_2.06.3_1202b_fact(110118.0).up  ) IS THIS ONLY FOR TEKWAY DST1202B?
 
How did the "bin" file compile or decompile?
 
What's changed, Where's changed, Every version firmware?

And finally analyze this, What will I need to access and read for this course?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RobertB on March 30, 2011, 01:10:29 pm
Hi!

Linux version is still 2.6.13. So this is actually totally outdated. I even had problems finding linux-2.6.13-QQ2440-xxxxxx.tgz, which seems to be a working kernel for the mini2440 board. If anybody happens to have hold on this, an upload would be highly appreciated.

My firmware is exactly (even the "build-numbers") what is distributed right now by Hantek as an update.

The JTAG-header is 2.00mm, the 60- (64?) pin IO-connector is 1.27mm.

I am a little concerned about the old kernel. While it should be possible to compile the sd-driver supplied with qq2440, any new drivers will be hard. For example, compat-wireless only supports >= 2.6.24, compat-wireless-old supports 2.6.21. So it will be very hard to get for example AR9170usb to work (or any other recent USB wlan stick).

Further, I was not able to get hold of any hint on the actual kernel config used in the DSO.


BR
Robert
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on March 30, 2011, 02:43:21 pm
I'm not concerned about Linux version. It is embedded linux and for user it is Oscilloscope (not linux entertainment machine).  User do not need even know about system behind display and knobs. It works and linux version do not make any problem afaik. Of course if people want make some modifications and if he want make it as game box or tv or music box he need use 2.6.13 compaible things.

If I'm concerned something it is analog channel and ADC system design and quality. But then I remember - if I think this quality... it is <1k$ scope and in this class it is really unexpected good.

Building guality (main board) seems littlebit better now in these new HW. (I have look only some old and new units so I can tell only these units what I have checked)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Igor on March 30, 2011, 02:58:23 pm
just buy H-JTAG and USB UART converter , but the  USB UART converter not  work
I broke into the brains oscilloscope through such devays:

(http://img7.imageshack.us/img7/4323/17465090.jpg) (http://img7.imageshack.us/i/17465090.jpg/)

http://cgi.ebay.com/USB2-0-RS232-TTL-Converter-Module-PL2303-4pcs-cable-/270726085956?pt=LH_DefaultDomain_0&hash=item3f08883d44 (http://cgi.ebay.com/USB2-0-RS232-TTL-Converter-Module-PL2303-4pcs-cable-/270726085956?pt=LH_DefaultDomain_0&hash=item3f08883d44)

You can apply the service cord from your old mobile phone.

(http://img812.imageshack.us/img812/2097/pl2303pinout2.jpg) (http://img812.imageshack.us/i/pl2303pinout2.jpg/)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mechatrommer on March 30, 2011, 07:01:26 pm
oscilloscope through such devays:
how?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 31, 2011, 12:00:49 am
My DSO firmware version is 2.6.3,
 by measurement,the last pin of  UART  is 3.3v on the picture,not 0v. if USB UART converter 's "gnd "to the last pin of  UART in DSO , can't  this instrument  be damaged ?  now  rx0 : 0.1v   rx1: 0v

yes, +3.3V is correct, my very first picture was wring - updated already to correct pinout.

just buy H-JTAG and USB UART converter ,   but the  USB UART converter not  work,

did you set right paramters in your terminal application ? com port number (the one assigned to your usb uart adapter), 115200 8/N/1 for baudrate are proper values.
If these things are ok you should see something during DSO boot process - if not maybe txd/rxd are connected vice versa - change them and try again.

Which H-JTAG ? USB or LPT version ? It dind't really matter for function, but for speed ...

I felt very strange: fw2dump.zip can dump 3   files(boot.bin kernel.bin root.bin  ),but  fw_backupV3.zip  can't.

this is interessting, you have Tekway right ? I got no issues here on both Hantek and Tekway DSOs.
Can someone test it ? I mean this backup utility:

https://www.eevblog.com/forum/index.php?topic=1571.msg35683#msg35683 (https://www.eevblog.com/forum/index.php?topic=1571.msg35683#msg35683)


If only use H-JTAG, What should I do?  How do you define the offset of the 3 file  .
with H-JTAG, or actually H-Flasher software you can backup the whole NAND or restore it. If you backup via h-jtag/h-flasher you have to ensure that OOB blocks are also saved,
H-Jatg software have be default no drivers doing this - but you can find some here:

http://www.mikrocontroller.net/topic/163836 (http://www.mikrocontroller.net/topic/163836)

If you wish to restore a backup created with the in here posted fw_backup utility (these 3 files) you
will have to merge them to one file (together with 2 other files which ar common for all), as described here:

https://www.eevblog.com/forum/index.php?topic=1571.msg26926#msg26926 (https://www.eevblog.com/forum/index.php?topic=1571.msg26926#msg26926)

The resulting file can be restored via h-jtag/h-flasher (with loaded s3c2440 + OOB drivers)

How do I  downgrade to 2.6.2 or  lower?

in generally if you have already 2.6.3 you can just copy the dso.exe from earlier firmware version to you DSO root file system (a good idea is to make a copy of your existing dso.exe)
You will have to connect via uart to the shell, kill dso.exe process (which will actually happens during login to the shell) , insert usb stick with the older version of dso.exe (in will get mounted automatically into /mnt
and copy the old dso.exe to /

You can download older Tekway firmware (2.5 something) and extract it to get the old dso.exe version.

Additionally to this you will have to copy language files, they are version dependant, they located in /OurLanguages directory. the older firmware version does not have these files, so it is enough to
replace the dso.exe file.

After reboot the you will be ready with downgrade.

(dst1kb_2.06.3_1202b_fact(110118.0).up  ) IS THIS ONLY FOR TEKWAY DST1202B?
[/quote]

yes, it is. Tekway and Hantek are using exact the same dso.exe, help files, almost all drivers ... but not all.
display driver ( /dso/driver/dso-lcd.ko) and logo files (/logo directory) are manufacturer dependant, so don't mix them.

How did the "bin" file compile or decompile?

which bin ? you mean the dso.exe (which is the main dso application) or you mean the 3 files created during backup ?

For the dso.exe any ARM disassembler will be good, for example IDA

For these bin files, you can't them just decompile :)

Actually the boot.bin is single boot loader, it can be decompiled with some advanced tricks, but there is no need to do it.
Kernel.bin is just a copy of kernel, sure this can be extracted but for what reason ?
root.bin is copy of the linux root file system, it is binary copy, with OOB blocks !!!, you can only mount it to other linux computer (look for how to mount YAFFS)
To get the root file system files it is easier to connect over uart to shell and create a tarball to usb stick (or even just copy if you don't care about broken permissions)


What's changed, Where's changed, Every version firmware?
ohh, this is very bad question, actually for 2.6.3 there is description of changes on chinese Tekway website, as you from china it will be easy for you to read it.
What's in older version is writen down in user manual ... unfortunately both Hantek and Tekway are not smart enough to post firmware changes (for each version) on their websites ...

If you wish to see my bug report (having some infos about what inside which version) look here :

http://www.mikrocontroller.net/topic/205820?page=1#2036474 (http://www.mikrocontroller.net/topic/205820?page=1#2036474)


And finally analyze this, What will I need to access and read for this course?

honestly i don't know what you mean ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 31, 2011, 12:05:31 am
I'm not concerned about Linux version. It is embedded linux and for user it is Oscilloscope (not linux entertainment machine).  User do not need even know about system behind display and knobs. It works and linux version do not make any problem afaik. Of course if people want make some modifications and if he want make it as game box or tv or music box he need use 2.6.13 compaible things.

good point, i have even some other (almost new) devices having linux 2.4.18, as long they work i don't really care what kernel version on it.
Sure, 2.4.18 is overkill today, but it works.

For these HanTekway DSOs, 2.6.13 is good enough, for sure it sucks to compile drivers for new hardware line wlan-sticks, but to be very honest it is still possible with some effort.
for all "older" hardware revisions i do have working Ethernet-addon board solution, for the new hardware revision Elec3i is producing addon boards (and Hantek / Tekway as well, but no idea if they will ever sell them to existing customers - which Elec3i will do). Btw, Ele3i is also working on Wireless solution, so you can ask Pascal when they will be available.

But then I remember - if I think this quality... it is <1k$ scope and in this class it is really unexpected good.
Building guality (main board) seems littlebit better now in these new HW. (I have look only some old and new units so I can tell only these units what I have checked)

oh yeah, i saw these pictures posted by Robert and the quality seems to be now much better, overall design seems to be also optimized to remove some hardware bugs (like skew time between channels).
Even the old hardware was worth the money, the new revision is even better.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ccatt on March 31, 2011, 12:31:34 pm
 What's changed, Where's changed, Every version ?  
 Not different apparatus, is firmware(include High to low).
How to decompose the  firmware project?   IS bin ,*.up or other?How do you get the DSO.exe .Have you,the source program?
Use C Language  or  assembly language ?
How to analyze the every part of file ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ccatt on April 05, 2011, 08:46:37 am
not answer?why? Email to me, if it is not inconvenient to you.
Because I wants to do by myself .But I can't. Have no way of doing it; not know where to start.
Finally ,Thanks a lot  .
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: SoftwareSamurai on April 05, 2011, 11:10:36 am
@ccatt

The best place to start is at the beginning of this thread. Read every post. Then you'll have the answers to your questions.

This DSO's internal workings are pretty easy to understand, so if you read this entire thread and still don't understand how this DSO works, you should move onto something else.

Please understand that I'm not trying to be mean or anything. It's just that your questions have already been answered in this thread.

FYI: No, no one here has the source code to the DSO.exe file, so we can't tell you what language it was written in. (I'll take a guess and say C, but what does that matter?)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 05, 2011, 06:59:28 pm
here we go ...

Attached LAN-Addon board files (Eagle 5.11 format) for the hardware revision 0, so all Hantek / Tekway DSOs produced
before April 1st 2011.

The Addon board is CS8900A based, the necessary Linux driver is already preinstalled in all firmware versions.
Network setup here :

https://www.eevblog.com/forum/index.php?topic=1571.msg36087#msg36087 (https://www.eevblog.com/forum/index.php?topic=1571.msg36087#msg36087)

As you can see the PCB is monted with two screews/distance spacers (Harwin Spacers R30-3001102).

It works so far up to 10Mbit, no issues except the fact that the driver is not doing CS8900 reset during soft-reboot,
so for clean reboot i have to power off/on.

The attached Eagle files can be used free/commercially, so no issue if someone (from China?) wish to produce some PCBs.
I will not, just because Hantek/Tekway changed hardware revision no idea how many ppl would buy the Addon-board.

EDIT: hmm, attached files got removed while forum was migrated, so here they are again:
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: e-pirate on April 06, 2011, 11:02:20 am
Hi, folks!
First of all I would like to thank all of you for this topic. I was searching for inexpensive DSO to replace my old analog Russian 60 MHz single channel 65A that I've got for less than 60 backs 5 years ago right before I found this topic. My first choice was Rigol, but after reading of all ~28 pages, I decided to get HanTekWay. So, I've ordered mine Hantek DSO5102M (actually B) from Mr. Pioneer Huang from Aliexpress/Alibaba cause it was only available with English front panel and I'm to lazy to make one by myself. I would strongly recommend Mr. Pioneer as a honest seller and a very helpful person. I received my DSO in a perfect new condition, except the box, but I don't care. I wasn't lucky to get a "new" hardware, but I was lucky enough to get Tekway's 1.00.3 mainboard with 200 MHz ready out of the box. I can see all input stages resistors are 200 MHz version, so, seems that no soldering needed at all. The thing I definitely don't lake at all, is how it all soldered. I thinks kids in kindergarten do better! Resistors and capacitors sometimes are more than a half case out of there place, flux is everywhere and I wasn't able to wash it out with isopropyl alcohol and even with FluxOff! It's sticky and as I'm going to install fan, all this will get tons of dust. One of 4 ADC radiators is missing. Despite all that I'm satisfied with how this thing work and especially screen.
I haven't made any software/hardware upgrade before I get some very-very fast rising edge generator like http://www.i9t.net/fast-pulse/fast-pulse.html (http://www.i9t.net/fast-pulse/fast-pulse.html) to be able to see difference and good probes.
For now, I like to know is at a good idea to apply Cramolin FluxOff to wash PCBs and where SN is stored?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 06, 2011, 11:16:54 am
I wasn't lucky to get a "new" hardware, but I was lucky enough to get Tekway's 1.00.3 mainboard with 200 MHz ready out of the box. I can see all input stages resistors are 200 MHz version, so, seems that no soldering needed at all.
aha, so check the i2c.log, maybe it is rebranded 200MHz model.

The thing I definitely don't lake at all, is how it all soldered. I thinks kids in kindergarten do better! Resistors and capacitors sometimes are more than a half case out of there place, flux is everywhere and I wasn't able to wash it out with isopropyl alcohol and even with FluxOff!
take a picture of that ...

One of 4 ADC radiators is missing.
that's ugly

For now, I like to know is at a good idea to apply Cramolin FluxOff to wash PCBs and
... avoid using PVC and polysterene. ... hmm, i would use pure Isopropanol (99.7%).
Everything except the cap trimmers would have no problems with it.

where SN is stored?
in the EEPROM, located between display connector and front USB.
Additionaly you can see all model changes in the i2c.log file (directly in root dir).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: project on April 06, 2011, 11:44:33 am
For wash the flux, isopropyl alcohol won't work good. Most industrial flux, no clean flux are harder than rosin flux, not dissolved in alcohol or water too much. USE lacquer thinner, banana oil, paint thinner, acetone, xylene, all smell bad and dangerous. a little brush will work faster. take the battery off, wash two or three times, till no sticky feelling. blow dry before power it on.  I think this caused by product line wasn't adjust properly, and QA not good too.

 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 06, 2011, 12:03:01 pm
I think this caused by product line wasn't adjust properly, and QA not good too.

^^ maybe that's why this one was suposed to be for chinese market.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: e-pirate on April 06, 2011, 12:33:06 pm
^^ maybe that's why this one was suposed to be for chinese market.
Nop. Pioneer told me it's original English, besides there were some 5062 from Pioneer with English face for another guy from Russia (not Igor).
I will post some pictures as soon as I get home and have enough time to make photos and upload them to my server.
For the missing radiator.. that sucks, I know, probably I will cut some old PC motherboard chipset radiator with Dremel, not to live it hot, seems that cause edge dramatically change during cold power on and hit up. Seems that it affect only one channel. I will make some test with prob attenuation and replay asap.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: nukie on April 06, 2011, 01:26:12 pm
Isopropyl for rosin flux.

For cleaning the "stubborn' flux, if small area, I usually use Zippo or Ventti lighter fluid. It's superb for cleaning any sticky stuff. Finish off with Isopropyl alcohol because they can leave very little white residue when dry. It's quite expensive in Australia(compared to petrol) but a bottle of 133mL goes a long way for me. This stuff is extremely flammable, well it's called lighter fluid it's used to make flame, so you better be careful when working with it. Keep it away from your solder tool and the likes.

I've been doing this for more than 15 years, no corrosion what so ever on any of my earlier FR4 boards.

Yes I smoke, I smoke rosin not nicotine.  :P
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: e-pirate on April 06, 2011, 01:37:24 pm
BTW, I know there is a shift between waveforms on first and second channel when connected to same source on old hardware version. But I was unable to reproduce that, what I'm doing wrong and how can I see that to handle such a thing in feature?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 06, 2011, 03:51:11 pm
BTW, I know there is a shift between waveforms on first and second channel when connected to same source on old hardware version. But I was unable to reproduce that, what I'm doing wrong and how can I see that to handle such a thing in feature?

depends, it can be that your unit have different firmware, or due some flying components is doing the job better (haha, not a good joke),
or just cable length caused.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: e-pirate on April 06, 2011, 06:11:06 pm
BTW, I know there is a shift between waveforms on first and second channel when connected to same source on old hardware version. But I was unable to reproduce that, what I'm doing wrong and how can I see that to handle such a thing in feature?

depends, it can be that your unit have different firmware, or due some flying components is doing the job better (haha, not a good joke),
or just cable length caused.


Mine is 2.06.3 (110118.0) which isn't latest. I'm asking because if I'm using both channels, basically I'm doing that to monitor two signal synchronously to see what's going on when one changes with the other one. So, if there is a shift, that might be a little bit tricky. So, if this is a hardware bug, it's not a 2 channel oscilloscope, it's a couple of scopes in one case. Having two channels became useless if they are not showing _exactly_same_time_ signal. You will not be able to see a hysteresis, for example.  IMHO.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 06, 2011, 06:21:21 pm
Mine is 2.06.3 (110118.0) which isn't latest. I'm asking because if I'm using both channels, basically I'm doing that to monitor two signal synchronously to see what's going on when one changes with the other one. So, if there is a shift, that might be a little bit tricky. So, if this is a hardware bug, it's not a 2 channel oscilloscope, it's a couple of scopes in one case. Having two channels became useless if they are not showing _exactly_same_time_ signal. You will not be able to see a hysteresis, for example.  IMHO.

we talk about max 1ns difference (and on new hw revision 500ps), it is not that much, but for sure not really nice.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: wjb444 on April 07, 2011, 11:39:11 am
Source 60M 4ns

Not the same as the sampling depth, the waveform will be inconsistent it? :(
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: e-pirate on April 08, 2011, 06:29:07 am
Source 60M 4ns
Not the same as the sampling depth, the waveform will be inconsistent it? :(

What's your fw version?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on April 08, 2011, 08:12:24 am
1. is 500MSa/s
2. and 3. is 400MSa/s

I have also check this with several DSO5102B's and one my opinion is: It change "fake"Sin(x)/x filtering parameters as it change samplerate. It is some kind of compromse and what you look in screen is never what is signal. For making inspections with oscilloscope is good to understand how it works and then thinking what all is between signal under test and what is signal on the screen.

Becouse there is also ADC jitter it need littlebit "overtight" filtering and result look more complex.

Draw some real signal (not theoretical) to paper and then do imagined sampling with paper and pen so that you also add some random errors -- littlebit sampling timing jitter, ADC's unbalance, amplitude analog channel noise etc. Then look best and worst case where are sampled points (And after time jitter also readjust these exatly every 1ns becouse scope "think" they are taken these times and not real times including jitter (so that timing jitter X change to amplitude Y = time jitter means variable signal amplitude modulation. (you can use ADC as modulator in some application)), and fit some curve these points... oh yes... on your paper and pen picture you see nearly exactly same ... look paper... look scope screen.. why it looks just same?

Btw, for time difference measurements with continuous signals.. use high level averaging.

There is littlebit time difference between channels if you put exactly same signal to both BNC connector so that in this point time difference is around zero. Scopes looks like CH2 is around <1ns late. (part of this is coming from time splitted ADC's ans also that maximum sampling speed is 125MSa/s in one ADC. My opinion is that it need correct in FW. 1 channel and 2 channel sampled points need small timeshift or ADC's clock signals timing need change different on 1 and 2 channel use. I hope they make correction later. (but we need remember, this is cheapest possible oscilloscope in its class and in this group it is very good)

What to do for timing... becouse there is no "skew" adjustment -- you can very easy adjust it outside. (specially becouse time difference is nearly constant if scope have warmed and stabilized.)

Measure this time difference and  make short delay line. (if coaxial have speed factor 0.8 then 1ns is 24cm)   (You need BNC M, BNG F, right lenght of 50 ohm coaxial cable) you can very easy adjust time difference under scope resolution. If CH2 is 1ns late simple put 1ns delay line to CH1. In professional good lab scopes have this adjustment. Example in Tektronix 2465 series there is adjustment (CH2 delay (if it is enabled in system cal settings for user)) Many digital scopes do this delay zeroing in the selfcal routines. It looks like this scope do not it (or it have done wrong - as many things in scope - but agen - it is extremely cheap. 10000 scope and 500 scopes are different)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: e-pirate on April 08, 2011, 10:28:16 am
HanTekWay may fix that in the feature since this bug is known and if timeshift stays constant or vary little, it's not gonna be very difficult to make a software fix. IMHO.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on April 08, 2011, 11:46:27 am
Yes.

Also they need check and fix ADC timing sequence related to 1 channel or 2 channel use and related to short and long capture memory use.

I think there is something wrong in sampling clock phasing sequence with alternate 8 phase sampling (1 channel) and parallel alternate 4 phase sampling (2 channel use). Maybe some logical misthinking or simple mistake in some FW update??

But it is difficult to analyze becouse scope have not mode where it show _real_ sampled points on the screen if use fastest horizontal speed.

In one channel use there need be 8 separate ADC so clocked that analog samples are taken 1ns steps. (there is some phasing error becouse signal attenuation do not follow logically as samplerate change.

Also there is one tinhead comment that some FW update maybe have affect somehow this 2 channel skew. maybe this is also related to this possible samplers "phasing" error.  (if example I look CH1 signal with 500MSa/s (2 channel also selected). Then I turn it 1GSa/s. It looks like nothing happend....yes more noise...  what happend if they do not sample sequentially right 8 phase.. with right timing... what if signal is parallel to all adc in 1ch mode but it do 4 + 4 phase sampling... and if 2 channel mode they do sequentially 8 phase sampling but alternately for ADC groups (juts opposite as need do). It explain very easy this 1ns skew AND also situation what looks like no any advantage if change 2 channel use to 1 channel use if look 1 channel high frequency sine.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: e-pirate on April 09, 2011, 06:25:28 pm
I thought why not to replace electrolytic capacitors as they seem to me to be low quality.
To start with PSU: there are:
1. 100 uF x 400 V (150C)
2. 47 uF x 35 V
3. 22 uF x 16 V
4. 1000 uF x 16 V (4 pc)
5. 47 uF x 25 V
6. 1000 uF x 25 V
7. 100 uF x 35 V
I would like to know is there is a way to improve PSU by increasing capacitance or voltages of this caps? Should I use low impedance/ESR caps?
Besides, there are 6 1000 uF x 10 V and 8 220 uF x 16 V and one 470 uF x 25 on mainboard, any suggestions what to with them?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 09, 2011, 07:28:47 pm
I thought why not to replace electrolytic capacitors as they seem to me to be low quality.
To start with PSU: there are:
1. 100 uF x 400 V (150C)
2. 47 uF x 35 V
3. 22 uF x 16 V
4. 1000 uF x 16 V (4 pc)
5. 47 uF x 25 V
6. 1000 uF x 25 V
7. 100 uF x 35 V
I would like to know is there is a way to improve PSU by increasing capacitance or voltages of this caps? Should I use low impedance/ESR caps?
Besides, there are 6 1000 uF x 10 V and 8 220 uF x 16 V and one 470 uF x 25 on mainboard, any suggestions what to with them?

to replace caps without exact knowldge of PSU details it will not improve anything.

Let me tell you about the power supply on these DSOs (this is for the old hardware revisions only)

The PSU is delivering some voltages, especially +5 and +3.3V are important.

Channels and Trigger Input circuit is using own LDO, the ripple is low enough to say that these are good designed.
Still, these LDOs can be replaced by better once, mit higher PSSR and lower noise. These LDOs are located on
the left side of the main PCB.

FPGA is using two additonal LDOs, they good enough (ok, AMS1117 is not the best one, but should have no influence on DSO quality)
SoC is using two additional LDOs too, same as fr FPGA - they can be replaced by better LDOs but not really important.

ADCs and part of trigger circuit is using 3.3V coming directly from the PSU, the ripple is =<  20mV. This is not the best design at all,
especially for ADC/DAC there should be something better in place.

The 3.3V on the PSU will be created from the 5V, decreased a bit by Schottky diode and followed by Fairchild KA378R33.
The Schottky diode is reducing the LDO input voltage to reduce LDOs Power Dissapation, which make sense because the heatsink
is two numbers to small anyway. The Fiarchild KA378R33 is not designed the best choice, the PSSR is low, noice level high and it is
to slow responding. A ugly chinese/cost-reduction design.

A good replacement (note, the 3.3V will be used for other voltages creation too, like FPGA, SoC, and used by all logic ICs - this is
giving some load and need fast response LDOs) could be something like LT1585, of course the ugly Schottky diode need to be removed too
as the LT1585 have a bit higher droupout voltage.

For ADCs and part of the DAC/trigger circuit where this voltage will be used a separate solution is the only way,
there are no LDOs with such low dropout volage (well, there are some , but initial min. voltage is higher than these 3.3V)

As the 3.3V will be anyway generated from the 5V, we can take the 5V and generate proper 3.0V for ADCs,DAC and trigger IC separatelly.
Luckily each part of affected circuit can be easily disonnected from the 3.3V - by removing of the ind. filters on the main pcb.
Top side ADCs are then separated from bottom side ADCs and from DAC/Trigger. Each these groups is using not more
than 90mA (two or single chan, 1GSs, highest resolution, highest memory tested, with high loaded input and ext. trigger)
so with 3 low noise/high PSSR LDOs a really clean and stable voltage can be generated - for example with LP5900SD-3.0

If you look on the Instek DSOs (which is the original design for input/ADCs circuit used later by Hantek/Tekway/Rigol), you will see that
the power supply is generated in proper way, every ADC have all recommended decoupling caps, ADCs having own LDOs and so on.
Then Rigol - they removed some decoupling caps and started with the crap voltage thing (one 3.3V, a cheap low ESR caps),
and then Hantek/Tekway - they removed again some (well, only one per ADC) decoupling caps ... is it really bad ? Well sure,
far away from what AD is recomending for the AD9288, is it working ? Sure, but not the best design.
Why this happens ? Well, as EE you can design nice things, but then you have still to sell them, so it was probably cost reducion thing
afterall. For an EE no a big deal to create proper voltages (or solder 8 decoupling caps like i did), but i don't like it.

To be very honest i recognized this "issues" first as i was testing better (from overclocking and SNR point of view) ADCs (AD9218), they need better power supply and as i started
to trace i found out "ups, someone was too smart and removed too much parts".
Probably Hantek will answer "no our EE tested everything and 20mV ripple is not too much for ADCs" :P

Anyway, even with additional decoupling caps or better 3.3V voltage, i don't think it will have a real big influence
on the skew time issue, or warm-up drift or noise level by 1GSs (but maybe i'm wrong).

I have here tons of high quality LDOs/parts, in a free "minute" i will test it a bit and report back. So for now, don't replace caps as they
not a real issue.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: e-pirate on April 09, 2011, 07:50:55 pm
Huh, this device looks like a DIY kit :) But we can squeeze more out of it, I think. Unfortunately, I'm not a PSU designer at all. and when it comes to switching PSUs - hands up.
BTW, I have no clue what the f... fluxe the use, but acetone did nothing, same sticky surface. And it very-very hard to wash it because outputs are long.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 09, 2011, 08:08:33 pm
Huh, this device looks like a DIY kit :) But we can squeeze more out of it, I think. Unfortunately, I'm not a PSU designer at all. and when it comes to switching PSUs - hands up.

hehe, not really DIY.

This is the common problem, you as EE design something, it works good, they you boss will tell you "reduce the price".
So where you will start ? Well, some caps here and there, smaller heatsink and schotky-diode instead, cheaper LDO (AMS instead of better brand - makes 1USD per LDO, or this Fairchild LDO instead of a good one makes 6 USD).
This is not actually Hantek designers fault, that's actually created by us - we expecting to get nice DSO for small price. Brand manufacturers like Tektronix/Agilent probably don't care, everything what necessary will
be implemented, the customer have to pay anyway x-time the parts value. Chinese manufacturers can't just do the same, they have to reduce the revenue and price, because if not you will not buy it ...

Is this PSU "issue" tragic ? No, actually not. The overall DSO design is good, the PSU "issue" can be easily fixed for 10USD total, so not a big deal. Do i like it ? No, not really, but i haven't expected such good quality
as i bought all these chinese DSOs - and to be very honest at that time (and still today) Tekway (and now Hantek too) was the best choice.

The ancient Rigol screen is just ugly, low framerate, low cost DSP, same PSU "issues" as Hantek. The UNI-Ts are even worse, cheap high noise ADCs, cheap display (even these new with pseudo bright screen),
tons of issues in firmware never fixed, support - no not at all. Siglent/Atten - well, they only fixed on "sell", they don't care about customer feedback. From design perspective somewhere between UNI-T and Rigol.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: e-pirate on April 09, 2011, 09:57:56 pm
I was able to hook up there with my USB<->USART FT232R based board and take a look at what inside. For thous folks who are using *nix on "big" puter, your command will be (make sure to replace /dev/ttyUSB0 with what you have):
Code: [Select]
cu -l /dev/ttyUSB0 -s 115200and to get "almost all" backup type
Code: [Select]
tar -cvpf /mnt/root_backup_originall.tar / --exclude "mnt/*" --exclude "proc/*"
and don't forget to umount /mnt before you rip out thumbdrive.

2 tinhead: do you have any sujestions about "10USD total" PSU fixup?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Igor on April 10, 2011, 02:06:26 am
I think more relevant change power supply to work not only on AC 110-240V, but from DC 12V.
I want to do so as soon as possible.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: e-pirate on April 10, 2011, 11:09:33 am
Here are some photos of my DSO:
(http://www.e-priest.ru/projects/electronics/Hantek_DSO_5xx2/p1020441_pw.jpg) (http://www.e-priest.ru/projects/electronics/Hantek_DSO_5xx2/p1020444_pw.jpg)
(http://www.e-priest.ru/projects/electronics/Hantek_DSO_5xx2/p1020446_pw.jpg) (http://www.e-priest.ru/projects/electronics/Hantek_DSO_5xx2/p1020447_pw.jpg)
(http://www.e-priest.ru/projects/electronics/Hantek_DSO_5xx2/p1020449_pw.jpg) (http://www.e-priest.ru/projects/electronics/Hantek_DSO_5xx2/p1020450_pw.jpg)
(http://www.e-priest.ru/projects/electronics/Hantek_DSO_5xx2/p1020452_pw.jpg) (http://www.e-priest.ru/projects/electronics/Hantek_DSO_5xx2/p1020455_pw.jpg)
(http://www.e-priest.ru/projects/electronics/Hantek_DSO_5xx2/p1020457_pw.jpg) (http://www.e-priest.ru/projects/electronics/Hantek_DSO_5xx2/p1020458_pw.jpg)
(http://www.e-priest.ru/projects/electronics/Hantek_DSO_5xx2/p1020461_pw.jpg) (http://www.e-priest.ru/projects/electronics/Hantek_DSO_5xx2/p1020463_pw.jpg)
(http://www.e-priest.ru/projects/electronics/Hantek_DSO_5xx2/p1020464_pw.jpg) (http://www.e-priest.ru/projects/electronics/Hantek_DSO_5xx2/p1020466_pw.jpg)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 11, 2011, 11:06:52 am
2 tinhead: do you have any sujestions about "10USD total" PSU fixup?

oh well, there are many possible parts. As the 3.3V will be generated from 5V you don't have even to disassemble the PSU for testing,
just connect an LDO to front USB and measure the ripple. On the PSU-side ht 5V ripple is bit higher as on VUSB-side, but if you
have good results you can then try to replace on PSU and measure there.

Semi-direct replacements for the KA378R33:
LT1585CM-3.3 or LT1585CM-ADJ - 3A LDO, ADJ for better PSSR
or
TPS75833 or TPS75801 - 3A LDO
or even PTH04070WAH (or PTH04070WAZT) - which is 3A DC/DC with 10mV/Vpp ripple.

Both LDOs will reduce the ripple on 3.3V only a littebit in compare to KA378R33, but more important is they are designed for
fast transient response. The DC/DC converter need of course some output filter, see Altera/TI PTH04070W appnotes.



For separate ADC power supply something like a combination of some parts:
TPS73701 from 5V to 4.3V-4.5V 1A
TPS7A8001 from 4.3 to 3.0V-3.3V, 1A

The LP5900SD-3.0 (or 3.3) would be even better for 4.3->3.0 conversion, the only problem is you will
need 3 of them. Advantage - less ripple/noise than TPS7A8001, disadvantage - ADCs not powered with same VCC.

All these parts are luckily small, they can be easily placed on small separate PCB fixed to main pcb, see attached picture.
As said before, that's only proposal, i (or someone else) have to check it in detail.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 11, 2011, 11:30:57 am
attached the ripple pictures (believe me, you don't want to see the noise ...) , note the VUSB ripple look
different as the 5V on PSU directly. The 3.3V ripple on the picture is avg. value digitally and analog filtered to see the form,
so the measured amplitude is lower than the real amplitude (with good Analog scope measured 18mV Vpp on ADC directly).

On the new hardware revision the 3.3V ripple seems to be lower, however i don't see any PSU/VCC changes so probably
caused by parts quality. Therefore my measurments are only valid for my actuall unit, it might be that you will see
something different.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: e-pirate on April 11, 2011, 12:32:59 pm
Very interesting!
So, what part quality may be different? Solid devices should be same, any idea?
I'm I right thinking that 3.3V PSU ripple is what we see on idle/connected to ground probe?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 11, 2011, 07:19:22 pm
So, what part quality may be different? Solid devices should be same, any idea?

For example the smps transformer could be developed different, this is custom part so we can't see
if there was a design change. Another possiblity are caps on PSU PCB with maybe different ESR matching better the
PSU design. If you measure around on the PSU you will see that only the 5V is having such massive ripple,
the other voltages are better - even unloaded, so sure there is room for improvement.
I don't have new hardware revision here, but someone else did measured the ripple and i do trust him.

I'm I right thinking that 3.3V PSU ripple is what we see on idle/connected to ground probe?

no, this not work like that.

The PSU ripple/noise have influence on ADC quantization reducing the ENOB.
As the ADCs are overclocked we can't calculate the error, so all we can do is to improve PSRR/noise.

Traditionaly after switching regulator (PSU) a LDO with some ferrite beads will follow to filter the VCC.
Of course EE can save some money and supply the VCC directly from switching regulator (that's what Hantek is doing),
but then a combination of rc snubber/ferrite bead/filter is necessary to decrease ripple/noise (which Hantek didn't did except single ferrite bead).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: e-pirate on April 12, 2011, 02:10:31 pm
BTW, what is a *.bin fs type yaffs or yaffs2? I'm looking for a way to mount root.bin, made by backup utility.

sed and awk are available, as I can see in my tar backup, I have no clue why they need them on DSO, but this gives us ability to "softly" hack a device by batch editing configs and moving/renaming other files. That will help folks, having no UART. And this gonna be more safe than loading bin file. We can backup files prior making modifications.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on April 12, 2011, 05:08:29 pm
As we all know just all discuss in this forum are highly folloved by Tekway/Hantek.
Rigol we teach make mod more difficult.

Hantek need do only some simple changes and all is end.
(yes still it is modable but not so easy as before)

And more they need do work with this mod related things... more there is delay for these develop what they really need do.
If we push them to work with this mod issue it takes resources from some more important things.

Now it is not yet so clever to stop mod (by Hantek) becouse this propability may rise selling...
And maybe there need be some small window still open but...

tinhead have done lot of fine work for this and we can respect highly his superior work if first read carefully all what he have write. Tehere is lot of info and wink how to do.

Discl. This is only my personal opinion and I have not any relationship with Tekway or Hantek.
I do not comment possible comments what this may induce.
:)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: e-pirate on April 13, 2011, 07:43:50 am
I wonder if we are actually breaking any laws by modifying firmware and hardware and making that stuff public.. And especially opening the process itself.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gall on April 13, 2011, 11:07:00 am
It depends on the contry you're living in.

I.e., Russian federal law explicitly permits reverse-engineering and modification of hardware and software, "if it is needed to provide proper interaction between components of the system". This generally conflicts with intellectual property laws (i.e., a software crack IS a "modification for proper interaction (between application and underlying OS/hardware)"), so only court can make a final decision.

Chinese law seems to permit anything.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: e-pirate on April 13, 2011, 12:49:21 pm
Hm-m-m.. Let's ask the question in different way: "Can I or any other person get in trouble with HanTekWay helping other people to hack DSOs"? Basicaly, is HanTekWay is interested in kicking anybodies ass because of this hack?

BTW, HanTekWay seems to break GPL.. That was already with ASUS router and they had to open fw.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Igor on April 13, 2011, 01:23:20 pm
I think there are no problems with the law.
We buy the device and not the program.  Changing the hardware device, we lose  manufacturer's warranty.
But this is not a violation of the rights of the manufacturer. Who can deny you install on a new car the nitrogen booster, or ban you install sports shock absorbers?
Modifying the program,you do not infringe the rights of the producer, until you begin to sell the modified software, or use it for other commercial purposes, only if the program is protected by a patent.
I do not think that a program running under Linux, is a separate trademark product.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: e-pirate on April 13, 2011, 01:32:32 pm
Modification of own DSO not suppose to be a crime, I think. But tinhead made recipe public available. Is that a crime?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bilko on April 13, 2011, 01:46:45 pm
He did the manufacturer a big favour and increased their sales and market share. Most people on this board would not have even considered buying this brand if it was not made public here.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 13, 2011, 02:39:51 pm
Modification of own DSO not suppose to be a crime, I think.

simple said "of course not", as long there is no conflict with the business (best example is Sony) or laws.
However in case of business conflict the court have to judge, not the manufacturer.
So depends on kind of modification and potential law conflict (if you mod your car to fly instead of drive you will break many laws, not only manufacturer IPs) it might be a crime.

Good example for legal mod is the LAN-Addon card, i even got some support from Hantek for it
(as for the old hardware revision is no LAN addon planed there is no business conflict - for the new hardware revision
this question has been not yet answered) - this means i can even produce and sell such LAN-Addon boards.


But tinhead made recipe public available. Is that a crime?

All i did was to publish a "security hole" which is not illegal and to be very honest i notified HanTekway about it (so they know my name).

A different story is for those who did modified own DSO - in this special case (as you using exact the way the manufacturer is using)
it is a "crime", the 100/200MHz bw are "payable options" so in principle everybody who did such mod should at least
pay the potential price difference to the manufacturer.

It would/could (and this depends on country laws) be a different story if someone would develop hardware/software addon
changing the bw (no, not just a batch file changing something but a real addon).

Currently, due GPL infringement HanTekway can't do anything against these who mod their own DSO (and they will probably never do soemthing, just because it costs much more than the potential revenue - they smart enough to know that this will kill the
business - they not brainless like Sony). In worst case it can happens that if you send back your modified DSO to HanTekway for repair
they will send you an invoice.

However i'm sure HanTekway will kick your ass if you shop-owner/distributor selling modified DSOs or selling the mod itself
or helping (even for free) your customers to use this mod as this is direct business conflict (regardless of GPL or whatever).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: e-pirate on April 13, 2011, 06:47:53 pm
Got you. So, simplified answer is that if you are not making money of it - you are safe.
As for me, I'm not a "business" at all, I'm a regular hobbyist, even not modified my DSO (but crackopened, as you can see. I'm trying to open almost everything I get in my hands anyway). And frankly speaking, I bought this device only because of review and it's "open" (read "known") architecture.

For now, my questions are:
1. what fs is used for .bin files?
2. what database language files stored in?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 13, 2011, 07:20:47 pm
For now, my questions are:
1. what fs is used for .bin files?
2. what database language files stored in?

fs is YAFFS, help file (/help.db) is SQLite format 3 and language files are located in /OurLangauges , they are pure text files.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: e-pirate on April 13, 2011, 08:02:33 pm
There are two versions of YAFFS: yaffs and yaffs2, so what is the used one?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 13, 2011, 08:48:01 pm
There are two versions of YAFFS: yaffs and yaffs2, so what is the used one?

yaffs is yaffs, yaffs2 is yaffs v2 ... it doen not really matter, and as said before YAFFS
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: p1ge0n on April 15, 2011, 03:23:15 pm
Hi everybody,

Thanks for you for helping me choose Hantek DSO1502B which has arrived yesterday. I'm very satisfied with it. Today I had a look inside and found that it has new hardware revision PCB. Is it possible to "upgrade" it to 200Mhz? What about resistors? Thank you in advance for advise.

Regards,
Paul
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 15, 2011, 03:41:15 pm
Hi everybody,

Thanks for you for helping me choose Hantek DSO1502B which has arrived yesterday. I'm very satisfied with it. Today I had a look inside and found that it has new hardware revision PCB. Is it possible to "upgrade" it to 200Mhz? What about resistors? Thank you in advance for advise.

Regards,
Paul

sure, you can still use the how-to from page 1 of this thread (meaning over uart/shell) or
as you have new firmware anyway (which includes the "special" hole) you can build your own firmware doing the change for you.
So depends on you, if you know how build firmware and you know how to fix in case of disaster (well actually very easy over uart),
then you can build your own fw (note: the one posted by wjb444 is for Tekway not Hantek, but the way how it works is the same).
If you don't know, just go the secure way - over uart.

The resistors - well, i don't know how often i said "do not play with them unless you have good equipment to re-calibrate the DSO",
but unfortunately ppl just soldering around and wondering later why there is 5ns skew or trigger not working ...
On the other side the 5102B you have is good up to 200MHz with these resistors
(if they for 100MHz unit, it can be you got re-labeled 200mhz unit anyway), so no need to fix it anything anyway.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: p1ge0n on April 16, 2011, 07:14:32 am
Thanks tinhead for the prompt answer. I'll try to do it over uart. Is it possible to determine what version do I have? The resistors values are different compare to what you published for Tekway PCB. I'm not going to replace them, just curious.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 16, 2011, 11:03:00 am
Thanks tinhead for the prompt answer. I'll try to do it over uart. Is it possible to determine what version do I have? The resistors values are different compare to what you published for Tekway PCB. I'm not going to replace them, just curious.

nice, maybe new/improved combination ? shot a picture of one of the input chanels.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: clonecrp on April 17, 2011, 03:26:21 am
e-priest:

Can you send me contact info on your Hantek DSO5102B supplier please...?

Thanks!
Doug
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: e-pirate on April 17, 2011, 10:29:49 am
e-priest:
Can you send me contact info on your Hantek DSO5102B supplier please...?
I've bought it from AliExpress.com, search for "Hantek DSO-5102B".
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: e-pirate on April 17, 2011, 10:57:51 am
Thanks tinhead for the prompt answer. I'll try to do it over uart. Is it possible to determine what version do I have? The resistors values are different compare to what you published for Tekway PCB. I'm not going to replace them, just curious.
And it will be nice if you post a photo of power supply to.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: clonecrp on April 17, 2011, 05:29:22 pm
e-priest:

I see you purchased from them ...

I recently purchased a Hantek DDS-3x25 arbitrary Wave form generator from http://www.thefamousbrandsoutlet.com (http://www.thefamousbrandsoutlet.com) and find they have also have the Hantek 100MHz 2Channel Digital Storage Oscilloscope DSO5102B with warranty => http://www.thefamousbrandsoutlet.com/test-measurement-instruments/benchtop-oscilloscopes/hantek-100mhz-2channel-digital-storage-oscilloscope-dso5102b.html (http://www.thefamousbrandsoutlet.com/test-measurement-instruments/benchtop-oscilloscopes/hantek-100mhz-2channel-digital-storage-oscilloscope-dso5102b.html) ,these guys (Frank) are in Toronto but ship from Niagara Falls, NY with free shipping in the US.

How are your progressing on your mod(s) ?

Please advise...

Thanks!
Doug
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: e-pirate on April 17, 2011, 05:48:04 pm
How are your progressing on your mod(s) ?
Please advise...
Thanks!
Doug
Well, my device OK and works fine, but I'm not going to mod it until I at least I will be able to measure the difference. I'm going to build 350 ps rise edge generator. I crack opened it, you can find some photos on pages above, but nothing special, same 1.00.3 Tekway board inside. Dirty soldering, tons of flux.. but still not bad and much better than expected from 6 hundred backs Chinese toy. It's definitely can be hacked, but I have some unanswered questions. Seems that prices go down.

USD 640 not a bad price for device with warranty, but keep in mind, you will void it if you mod/hack. I actually already forget how you guys in USA deal with VAT or whatever, I've been in US very long ago, I was lucky enough to get mine paying no taxes at all.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: clonecrp on April 18, 2011, 12:00:32 am
e-priest:

Thanks for the rapid response... Really appreciate the shots ...

I think you are fortunate on the price. No VAT here in the US ... at least not for now.

I use a cleaner called carbo-chlor to clean my PCBs ... not to inhale though ... also IBM made a cleaner that works well too Cleaning Fluid Part No. 450608 with contains similar to carbo-chlor but other stuff too:

1,1,1-Trichoroethane <= That's the stuff that does the trick ! Product says it also may have 1,2-Butylene Oxide, Diethylele Ether,Glycol Methylene, Swc-Butanol, Nitromethane.... but the the "Trich" moves all residue away. 

I don't think the carbo-chlor or IBM Cleaning Fluid are sold in U.S. any longer ... the "Trich" also melts some plastics but I haven't seen the melting problem with many PCB components.

Warmest Regards,

Doug
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: e-pirate on April 19, 2011, 01:34:45 pm
What Volts/Div:Coarse/Fine does in channel menu? A can't figure you what changes between Coarse and Fine.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on April 19, 2011, 01:48:51 pm
What Volts/Div:Coarse/Fine does in channel menu? A can't figure you what changes between Coarse and Fine.

Normal steps are example 1 - 2 - 5V / div

Select Fine.

Now turn channel voltage adjust knob. (Vertical:  Volts/div)

It changes example 1.02V - 1.04V - 1.06V - 1.08V - 1.10V / div
(steps are different in different voltage "band") example if go under 1V next is 990mV/div  etc.)


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: e-pirate on April 19, 2011, 02:19:55 pm
Normal steps are example 1 - 2 - 5V / div
Select Fine.
Now turn channel voltage adjust knob. (Vertical:  Volts/div)
It changes example 1.02V - 1.04V - 1.06V - 1.08V - 1.10V / div
(steps are different in different voltage "band") example if go under 1V next is 990mV/div  etc.)
Got it, thank you.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 20, 2011, 06:57:46 pm
As there is no PSRR data for overclocked ADCs i spend some time
and measured it by myself (PSRR of AD9288 under overclocking condition).
As far i can see the PSRR is only about 25db for 50MHz signals (ADC clock 125MHz)
and only 18db for 200MHz signals (ADC clock 125MHz).

This means, with the measured 18mV PSU ripple (before my mod) the ADC error
is about 1mV with 50MHz and 2.25mV with 200MHz signal which is
in worst case about 1/2 LSB of the AD9288.

So why any mods ? Well, the original design (with overclocked AD9288)
was done by Instek, these guys calculated everything proper, no issue at all.

Tekway's design is working too - on paper at least. In real world
we have not a single ADC but at least 2 physical ADC die's, so in worst case
the error need to be multiplied by 2.

(Instek's original design have better power supply, so still no issue at all for Instek DSOs).

This means with input freq. starting from 150MHz the error is above 1/2LSB
and finally about 1 LSB with 200MHz input signal.

1LSB is maybe not much, but i don't like it, therfore i did modified the PSU a littlebit
to improve a bit 5V / 3.3V supply.


The mod is very simple:
4700/10V instead of C19 (3300/10)
1500/10V instead of C14 (1000/16)
3 x 47/6.3V SMD on the bottom side instead of C22 (330/10)

and DC/DC converter (so the PSU is cold now) instead of KA378R33.


The part numbers are:

2 x EEFCD0J470R (Farnell/Element14 9694714) - that's the 47uF SMD caps soldered on bottom side of PSU pcb.
1 x PTH04070WAH (Farnell/Element14 1470479) - dc/dc converter
2 x GRM32ER71A476KE15L (Farnell/Element14 1797018) - soldered as close as possible to PTH04070 pins

1 x EEUFM1A152L (Farnell/Element14 1855213) - 1500uF
1 x EEUFM1A472L (Farnell/Element14 1219459) - 4700uF


The Ti DC/DC sonverter is recommended for Altera FPGA designs, so it will
definitely work better for fast transient /high load as the KA378R33.

After all i did measured the ripple, it is now about 11mV (instead of 18mV) for the 3.3V
and 61mV (instead of 76mV) for the 5V.

The attached 3.3V ripple measurment is again with digital/analog filter, so you can see only 6mV
Vpp ripple, but on good analog scope it is in real 11mV.

This is maybe not that much, but now in worst case the ADC error is a little bit higher that 1/2LSB.

you can compare to what was before :
https://www.eevblog.com/forum/index.php?topic=1571.msg41294#msg41294 (https://www.eevblog.com/forum/index.php?topic=1571.msg41294#msg41294)

Total price of the mode, something about 16USD.
You can of course do it with combination of TPS73701/TPS7A8001 (to produce clean 3.3V from 5V)
but my goal was to reduce the 5V ripple too and replace the unnecessary "heat-engine" (KA378R33).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ccatt on April 23, 2011, 11:13:12 am
 If Tekway disable the UART port,What can I do?My dso 's UART not transmit any message.Before this,I let after-sales department to handle this so-called update .I don't know is or isn't this(http://www.xici.net/#b1293165/door.asp (http://www.xici.net/#b1293165/door.asp))
How am I to open the UART port? what to writer the vivi.bin or the original bootloader ,I want knoe the specific address or offset ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 23, 2011, 12:49:09 pm
If Tekway disable the UART port,What can I do?My dso 's UART not transmit any message.Before this,I let after-sales department to handle this so-called update .I don't know is or isn't this(http://www.xici.net/#b1293165/door.asp (http://www.xici.net/#b1293165/door.asp))
How am I to open the UART port? what to writer the vivi.bin or the original bootloader ,I want knoe the specific address or offset ?

Currently the UART is still open, just connect to uart and boot the DSO. You should see some messages in the window.
You can interrupt the DSO application by CTRL+C and Enter. Sometimes you have to do it during the dso is booting linux or just
multiple times, but it still works.

I don't think they will disable UART port, but if then you have still other way to connect to shell:
- over LAN-Addon board (i posted full schematics and Eagle brd files, so you can produce your own LAN board)
- you can dump the firmware, patch it and restore on s3c2440 board (for test reason). I did it before for older Tekway DSOs,
all you need is to stop the rcS from executing dso.exe by simple hex editing the firmware dump. After that i was able to connect
over UART, do changes and restore back. So this way will alyway work for the current Tekway DSOs (it is Linux, so there is alway a hole).
- we can still create a fake firmware update files, downgrading the firmware to version where UART is working.

So just don't worry, there is nothing they can do against.

Vivi is always loaded from adress 0x0 of the NAND, the maximum length in Tekway DSOs is currently 128kb (the org. Tekway vivi is about 94kb only, but there is 128kb spae reserverd for vivi, i did used matching supervivi and own compiled vivi already) , so you can create your own vivi as long it is not larger than 128kb and "burn" to NAND 0x0 address.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on April 23, 2011, 04:41:42 pm
Hello tinhead, first of all I want to thank you for your time and dedication to this subject, this thread definitively made me decide which DSO to get, my DST1102B is on its way bought from Mr. Pioneer Huang at Aliexpress.

I'll sure take it apart after a quick DOA check, will post 8MPX pics of the boards. The scope will arrive in chinese and I will change it to engish, does this will require a complete firmware change or just some setup? AFAIK the latest FW is 2.6.3 right? But at the Tekway homepage theres only 2.5 version. Where can I find the latest english version? Sorry I have not finished reading all the thread since Im currently in a extensive work project that takes almost all of my time.

I cant wait to have my own scope, currently using a Fluke 199 Scopemeter from the company I work for which does not have all the complete DSO functionality (also, the horizontal black line disease, common for this series fluke scopmeters, is stating to appear)

Can it be possible that I get that new redesigned PCB with SD, Ethernet footprints? Or currently its only possible with Hantek DSOs like RobertB's?

Thanks !
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ccatt on April 23, 2011, 05:33:14 pm
tinhead,thank you!
Yes,I do it in accordance with your same step before ask you,  press the CTRL+C and Enter many times (in SecureCRT and HyperTerminal ).But am I wrong,is it possible in DNW.exe.
but whatever l tried, wouldn't get  any message  in windows .  
My USB  FT232 converter  is normal when connection rx to tx itself.
What time to Post your matching supervivi and own compiled vivi ,and the interrelated files of other ways?
In addition, I do not have the qualifications to DIY LAN.
You know  (Attempt to disassemble the product can damage it and void your warranty),I don't want to miss the boat 3 years easily.Because  JTAG  20 pins not solder.Although I bought the H-JTAG .
If you are interested,I can post my backup files (  boot.bin  kernel.bin  root.bin  )
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on April 23, 2011, 07:03:37 pm
ccatt

maybe you can test it with scope itself if there is signal. (but be careful... repeat... be careful do not damage UART.

Start scope.

Let it run.


Connect probe center pin carefully to UART 0 Tx so that it do not make any short circuit to neighbours.

(all time as scope is on it sends data out from uart! Also if you turn or push some knob UART send it out.
If you do nothing and scope is on with default setup... it sends some short string around 10seconds inteval.

This data stream you can detect with probe. If there is nothing maybe UART 0 Tx is damaged.

UART have not any buffer/protection so it is very extremely easy to defect and it may die very easy!

There need normally connect only UART0 Rx to module Tx and UART0 Tx to module Rx and GND to GND

(my experience is about Hantek and USB to TTL UART made with CP2102)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 23, 2011, 07:06:48 pm
Hello tinhead, first of all I want to thank you for your time and dedication to this subject, this thread definitively made me decide which DSO to get, my DST1102B is on its way bought from Mr. Pioneer Huang at Aliexpress.

I'll sure take it apart after a quick DOA check, will post 8MPX pics of the boards. The scope will arrive in chinese and I will change it to engish, does this will require a complete firmware change or just some setup? AFAIK the latest FW is 2.6.3 right? But at the Tekway homepage theres only 2.5 version. Where can I find the latest english version? Sorry I have not finished reading all the thread since Im currently in a extensive work project that takes almost all of my time.

I cant wait to have my own scope, currently using a Fluke 199 Scopemeter from the company I work for which does not have all the complete DSO functionality (also, the horizontal black line disease, common for this series fluke scopmeters, is stating to appear)

Can it be possible that I get that new redesigned PCB with SD, Ethernet footprints? Or currently its only possible with Hantek DSOs like RobertB's?

Thanks !

i did posted the latest Tekway firmware (2.6.3) on other forum, http://www.mikrocontroller.net/attachment/106249/dst1kb_2.06.3_01102b_fc_110225.0_.up (http://www.mikrocontroller.net/attachment/106249/dst1kb_2.06.3_01102b_fc_110225.0_.up)
You can use it to update your language files.

The reason why Tekway is having only the 2.5.x firmware on the website is the hack itself. They sending via email without any issues firmwares,
but they asking always for what model. This is only because after the hack prevention (try) they need separate firmwares for each model, and
not like before one universal firmware. So it is my fault why there is only 2.5.x. Anyway, i heard from Tekway that this will change soon (meaning they will update the website).


Well, it can be that oyu got the latest hardware, but it can be also old stock. You don#t have even to open, just check the utility->system status.
It the [hardversion] starts with 0x then you have old stock hardware.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 23, 2011, 07:10:31 pm
tinhead,thank you!
Yes,I do it in accordance with your same step before ask you,  press the CTRL+C and Enter many times (in SecureCRT and HyperTerminal ).But am I wrong,is it possible in DNW.exe.
but whatever l tried, wouldn't get  any message  in windows .  
My USB  FT232 converter  is normal when connection rx to tx itself.
What time to Post your matching supervivi and own compiled vivi ,and the interrelated files of other ways?
In addition, I do not have the qualifications to DIY LAN.
You know  (Attempt to disassemble the product can damage it and void your warranty),I don't want to miss the boat 3 years easily.Because  JTAG  20 pins not solder.Although I bought the H-JTAG .
If you are interested,I can post my backup files (  boot.bin  kernel.bin  root.bin  )

maybe uart port is broken, the S3c2440 is easy to destory :) i did it already (and had to re-solder the chip).

The supervivi is on the very first page of this thread, 3rd posting ... :)

And sure, if you have h-jtag and created NAND backup (wth OOB blocks) or if you crated via the utility posted here (so then these 3 files)
you can upload them somewhere and give me the link.
I can then restore it on my dev board and do whatever you like, no problem.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ccatt on April 24, 2011, 06:23:33 am
 thank you,tinhead!
My USB  FT232 converter  must be marked wrong .swap the pin  (tx rx) ,  UART is working.
 :D

link
https://rapidshare.com/files/458915396/dst1062b.rar
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: clonecrp on April 25, 2011, 11:57:07 pm
e-priest:

Received my Hantek 100MHz scope today. How have you progressed w/yours ? ::)

Thanks !

Doug
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: colinbeeforth on April 26, 2011, 03:30:59 pm
Hi tinhead,

Many thanks for your excellent work!

I have recently bought Hantek DSO5102B and have noticed some bizarre behaviour when using it on the 40k acquisition memory setting.

When testing at lower timebase settings, if you go one timebase setting faster, and the sample rate will increase and memory used usually stays around 32k or 25.6k - this is just because of timebase/div x 16divs x sample rate = acquisition memory used.  Normal situation with all DSOs.

At 20uS per division, sample rate is 100MS/s the memory taken is 32k, and the table of data looks like this:

Timebase          Samplerate        Memory
20uS/div           100MS/s            32k
8uS/div             200MS/s            25.6k
4uS/div             400MS/s            25.6k
2uS/div             400MS/s            12.8k
800nS/div          400MS/s            5.12k
400nS/div          400MS/s            2.56k
200nS/div          400MS/s            1.28k
80nS/div            500MS/s            640
40nS/div            1GS/s                640

As the time/div increases from slow, the sample rate is in a 1-2-5 pattern until it reaches 8uS/div, then it switches to 200MS/s, then 400MS/s and locks at 400MS/s for many settings.  This is pretty crazy behaviour.

A LeCroy 9310 using same time base settings and 50k acquisition memory is totally logical, running slower digitising speed for low timebase settings, and speeding up to maximum sample rate, then it decreases memory taken until you reach top time/div setting.  This makes sense.

It is tested by setting the scope to Dots interpolation, and 40k max acquisition memory.  Take a single shot of anything, then when sweep is stopped, increase the timebase control until you see the dots, then use time cursors to measure across ten dots and read time between points and sample rate from cursor display.

Have you experienced this weirdness in your scopes?

Cheers, Colin


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 26, 2011, 06:15:53 pm
Colin,

actually it is very hard to say what is the real sample rate on these scopes. From a ADC clock point of view everything below
8ns/div is sampled with 100MHz x amount of ADC = 800MSs. Starting from 8ns/div up to 2ns/div it is 125MHz x 8 = 1GSs.
That's the measured clock on ADC pins and actually the physical sample rate. So for single channel, 4k this could be
the "real" sample rate. It changes of course as soon two channels are enabled (div by 2).

Probably we should ask the original developer, which i think is someone worked for Instek before (or contractor? maybe).
I stopped to try to understand why something is build in the one or other way, as long it works i'm fine.
Some ideas are very nice, others are price driven.


About the DSO design and measurments:

The DSO is using Altera Cyclone II, if you check the specs you will see the amount of internal SRAM is "big" enough for
only one channel 4k sampling, so everything beyond that is saved into long memory (btw, same for Rigol DSOs - they have 16k per
channel which didn't match the FPGA size as well by factor 4!!). Data shifting costs time anyway, so that's one of
the reasons why Rigol's wfrm/s is much lower than Hantek (just because they shift 4times more data for short memory shot).

Anyway, due the data shifting/short shots into FPGA memory you can't just measure the sample rate by dots difference
(not only that, see below). Someone told me "FFT is displaying sample rate", well yes, it does but it didn't really match
just because in FFT mode the FPGA design is working in a different mode (you can actually see this on the DSO shell,
there is "debug log" running).

The data is finally calculated/mixed together within the FPGA and moved to SoC/UI. This is definitely different than on LeCroy 9310
where the sample rate is physically changing and the memory deep makes more sense (just because of the fact that the LeCroy
is sampling with different rates and the memory is writable on full speed).

Note, the external SRAM here is clocked with 200MHz only so there are some limits within the shifting from FPGA to external SRAM,
in both short and long memory mode (except short mem 1 channel).

If you analyze these dots:
Starting from 4µs/div to 2ns/div the amount of captured data (40k setting) is always 100µs long.
With 4µs/div the diff between dots is 2.5ns, so we have exactly 40000 dots.
With 80ns the diff is changing to 2ns, so we have 50000 dots, then with 40ns the diff is again switching to 1ns
so we have already 100k and finally with 20ns/div the diff is 500ps so we have 200k dots.

I said "finally" because in 8ns/4ns/2ns/div the diff is very small and hard to count exactly, but it seems to be
200ps, 100ps and 50ps.

And it is exact same behaviour with 2 channels enabled or 4k/512k or 1M memory (except of course the recorded data length
and count of dots, but same logic behind - look on 20ns/div and 1M memory - that's 4M dots!).


This is of course with real time mode sampling selected. With equ mode selected and 20ns/div the diff between dots
is 100ps instead of 500ps like in real time mode.

So is Hantek cheating a bit and running the DSO in kind of equ mode where real time is selected ? No, it is not.
This is just result of how they using sin/x interpolation and the way how the DSO is designed.

Therefore don't count the dots, they not one per sample and don't compare to other DSOs as they designed different
(except Rigol and Instek - as they designed similar, Rigol having 2 more ADCs so no 125/100Mhz switching and Instek having
much bigger FPGA so no data shifting in short memory mode, but the idea is the same).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: colinbeeforth on April 27, 2011, 01:56:54 am
Hi tinhead,

Thanks for the lengthy reply, I'll try to understand what you have said in small sections.

I often work with short single pulses, so I need to know what the scope is doing if I am to trust what I see on the screen.  If I want to look at a repeating waveforms I have several analogue scopes I can use that are much faster to drive.  The thing that DSOs do, that beats analogue scopes, is single shot storage of a waveform.  There's not a lot of point talking about DSOs for repeating waveforms, that has already been solved.  So for this discussion, I always refer to single shot operation.

On my LeCroy there is an info screen, one button, anytime and you see all the channel settings, timebase settings, sample rate and memory acquired at a single glance.  It is very clear to me what it is doing, and I know what pulses I can sensibly measure and what is likely to be aliased.  By comparison, the Hantek/Tekway design seems to be hiding that information, so I wonder why.  Also, they hide the change from Real Time operation to Equivalent Time operation, that is deeply annoying.  LeCroy automatically switch to Equivalent Time (they call it RIS, or Repetitive Interleaved Sampling) but it is clearly visible at all times.  The operator really <needs> to know when this is happening, otherwise the data on the screen might be totally undersampled and quite untrustworthy.


You said:
"actually it is very hard to say what is the real sample rate on these scopes." and "Probably we should ask the original developer"

I agree completely with these comments, but are we never likely to find who it was and ask them...


You said:
"The DSO is using Altera Cyclone II, if you check the specs you will see the amount of internal SRAM is "big" enough for
only one channel 4k sampling"

OK, thanks for that information, I'm not experienced with FPGA so their specs are confusing to me.  That would explain the default back to 4k with Autoset.  It does change the way the scope must work, there are many compromises compared to my old LeCroy.  Even though my 9310 is only 100MS/s, I can trust that what I have on the screen, since I know always what sample rate it being used.


You said:
"The data is finally calculated/mixed together within the FPGA and moved to SoC/UI. This is definitely different than on LeCroy 9310
where the sample rate is physically changing and the memory deep makes more sense (just because of the fact that the LeCroy
is sampling with different rates and the memory is writable on full speed)."

I don't know what SoC/UI means.  In the LeCroy, the sample rate changes are completely logical and in keeping with the published limitations and specs.  The Info screen always tells you precisely what is happening.  In my LeCroy, the scope acquisition memory defaults to 10k, but you can select 50k.  Using 50k increases the processing required to display the waveforms, so drops the update rate, but the choice is yours.  As you increase the timebase setting, the scope it will automatically change to RIS (Repetitive Interleaved Sampling) or Equivalent Time automatically, but it clearly tells you this is the case, so you can't be easily fooled alias.


You said:
"I said "finally" because in 8ns/4ns/2ns/div the diff is very small and hard to count exactly, but it seems to be
200ps, 100ps and 50ps."

Of course, this is what it would do for repeating waveforms.  I was testing it for single shot only.  Single shot waveform storage is the banner capability that separates DSOs from analogue scopes, so my focus is on single shot.


You said:
"This is of course with real time mode sampling selected. With equ mode selected and 20ns/div the diff between dots
is 100ps instead of 500ps like in real time mode."

Agreed, but I did all my tests on single shot acquisitions.  I have analogue scopes and didn't buy a a digital scope to show easy repetitive waveforms.


You said:
"So is Hantek cheating a bit and running the DSO in kind of equ mode where real time is selected ? No, it is not.
This is just result of how they using sin/x interpolation and the way how the DSO is designed."

Clearly the maker must work within the limits of physics and with difficult cost restraints.  So, I am not being critical of the makers.  But, there is no reason for not letting the user know what the scope is doing.  There is still something weird happening with the sample rate getting stuck at 400MS/s for so long.  I cannot understand why this should happen.  At higher time base settings, the scope appears to use 500MS/s and 1000MS/s sample rate, so it's not like the digitiser can't do it.  It's not because of a 4k fast RAM limitation, since at 200nS/div, it samples 1.28k at 400MS/s.  It just makes no sense to me.  I can't understand why they break the 1-2-5 sequence of sample rate at lower timbase settings and go to 1-2-4.  I'm looking to explain why it is like this.  I can accept quirks of design, but I like to know <why> it is like that.


You said:
"This is just result of how they using sin/x interpolation and the way how the DSO is designed. "

What?  Surely this must be a mistake.  I saw nothing in the manual about the scope using sinx/x interpolation between actual data points.  I detest sinx/x interpolation.  I used to sell LeCroy DSOs many years ago, and I have seen many many comparisons of different digital scopes.  I finished that work 8 years ago, so I have not seen the latest HP DSOs.  Apparently, they have improved dramatically, but in my past experience, by far the worst alias problems my customers encountered were cases where sinx/x was operating.  Linear interpolation is the safest method.  As soon as you see the very characteristic alpine looking sharp peaks, you know you have undersampling and need to take care to ensure you aren't looking at alias.  Since Hantek/Tekway under the Display menu allows selection of Dots or Vectors, I assumed Vectors meant linear interpolation.  We must find some way to be sure about this, it really matters to me.


You said:
"Therefore don't count the dots, they not one per sample and don't compare to other DSOs"

If the dots are not actual sample points, what else could they be?  Don't forget, I have always used single shot mode and ensured Real Time mode was operating.

Please don't think I am full of criticism, I'm just trying to understand how this thing works, and whether I can trust its single shot screens.  I deal with photomultiplier and gas radiation detectors and fast one-ff pulses matter to me.

As general DSO philosophy, the vital thing is to understand the limitations of the technology so you are not fooled by alias.  Aliasing happens all the time, we just don't often realise it.  Trusting a DSO screen without questioning is a good way to fool yourself.

Another interesting factor is screen alias.  The screen only has a limited number of dots across it, if you squeeze memory down to show the pixels, then data is not being shown and alias can occur.  To my best knowledge, Hantek/Tekway at least make an effort to capture spikes that are present in memory and display something on the screen that grabs your attention and makes you zoom for more info.  LeCroy have always done this.  I believe GW Instek take the trouble also.  Many little modern scopes simply ignore the spike in memory and if luck has it fall into the data that is decimated for screen display, then bad luck, you never see it.  If you ask a Tek salesman about this, they get excited and say the data isn't lost, it's still in memory.  But so what, why would you scroll through anything up to 1 meg of waveform data <every single time> to find something that you don't know is there!!

I have no trouble with instrument and technology limitations.  I have no trouble with compromise made for better cost.  But if you can't find out what those imitations are, how can you ever know when to be alert for alias?  Even a car manual tells you what speeds to use for each gear...

Please keep up the good work, I have very much appreciated your work in informing us all about these scopes.  I'm enjoying tinkering with the HAntek/Tekway scope, the screen readability for my older eyes is very nice, I just don't trust it yet and may never fully, unless I get some answers.  I have emailed this issue to Hantek, who have sent a polite "gone to engineering evaluation" reply, so I wait with interest.  In the mean time, I thought it would be interesting to ask your thoughts on the matter. *smile*

Cheers, Colin
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on April 27, 2011, 09:57:09 am
My DST1102B arrived today :D
Just after a DOA check I opened it up !!
Here the pictures:

(http://img717.imageshack.us/img717/1185/dscn0263k.th.jpg) (http://img717.imageshack.us/i/dscn0263k.jpg/) (http://img198.imageshack.us/img198/1218/dscn0267an.th.jpg) (http://img198.imageshack.us/i/dscn0267an.jpg/) (http://img577.imageshack.us/img577/465/dscn0270.th.jpg) (http://img577.imageshack.us/i/dscn0270.jpg/) (http://img855.imageshack.us/img855/3183/dscn0273.th.jpg) (http://img855.imageshack.us/i/dscn0273.jpg/) (http://img16.imageshack.us/img16/7998/dscn0276e.th.jpg) (http://img16.imageshack.us/i/dscn0276e.jpg/) (http://img593.imageshack.us/img593/4593/dscn0278f.th.jpg) (http://img593.imageshack.us/i/dscn0278f.jpg/) (http://img684.imageshack.us/img684/1089/dscn0284i.th.jpg) (http://img684.imageshack.us/i/dscn0284i.jpg/) (http://img821.imageshack.us/img821/6730/dscn0288b.th.jpg) (http://img821.imageshack.us/i/dscn0288b.jpg/) (http://img51.imageshack.us/img51/970/dscn0287ix.th.jpg) (http://img51.imageshack.us/i/dscn0287ix.jpg/) (http://img807.imageshack.us/img807/1553/dscn0291.th.jpg) (http://img807.imageshack.us/i/dscn0291.jpg/) (http://img29.imageshack.us/img29/3179/dscn0301n.th.jpg) (http://img29.imageshack.us/i/dscn0301n.jpg/)

I tried to find the resistors which determine the lowpass filter value, but I did not find them, I guess they are on the other side and I was lazy to do that.

Something that I noticed is that it gets really hot inside. After 30 minutes of playing with it, when I opened it, all the metal plates were REALLY hot (I dont want to know the ICs). In fact before opening it I noticed a very intense heatwave coming from the top. I installed a 5cmx5cm fan in the place designed for that, and soldered a header in the power supply where it says "fan". Now it runs cool after hours of use. Sure its noisy but if it's a guarantee of a better lifespan i think it's not a big sacrifice, anyway I always have earphones listening some good music ;)


UPDATE: NOW HACKED !!!
At first I was afraid but the procedure seemed to be very easy, so i did it. Now I'm happy and grateful for tinhead :)

During the process:
(http://img90.imageshack.us/img90/9868/dscn0311n.th.jpg) (http://img90.imageshack.us/i/dscn0311n.jpg/)

Voila!
(http://img709.imageshack.us/img709/3541/dscn0316k.th.jpg) (http://img709.imageshack.us/i/dscn0316k.jpg/) (http://img121.imageshack.us/img121/8649/dscn0313y.th.jpg) (http://img121.imageshack.us/i/dscn0313y.jpg/)

I also wanted to do something about the PSU's 3.3v but didnt have much caps or regs lying around so I installed 2 extra 220uF Tantalum caps in the 3.3v output:
(http://img837.imageshack.us/img837/9768/dscn0325ql.th.jpg) (http://img837.imageshack.us/i/dscn0325ql.jpg/)

Tinhead, do you think the tantalums are helping? Im looking towards fully hack the device including Ethernet, PSU mods, etc.

Something curious is that my DSO had a permanent +20mV offset on CH1, I did not took pictures of the shorted probe showing the offset. After the hack and tantalum caps the problem has dissappeared, I dont know why.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 27, 2011, 03:37:53 pm
Colin,

I often work with short single pulses, so I need to know what the scope is doing if I am to trust what I see on the screen.  If I want to look at a repeating waveforms I have several analogue scopes I can use that are much faster to drive.  The thing that DSOs do, that beats analogue scopes, is single shot storage of a waveform.  There's not a lot of point talking about DSOs for repeating waveforms, that has already been solved.  So for this discussion, I always refer to single shot operation.

All my comments above are valid for single shot, the buffer need to be filled no matter
if this is repeating or single event.
The “logic” behind the dots on screen is also valid for average and peak sampling modes,
the resulting count of dots might be different but that’s different story.

On my LeCroy there is an info screen, one button, anytime and you see all the channel settings, timebase settings, sample rate and memory acquired at a single glance.  It is very clear to me what it is doing, and I know what pulses I can sensibly measure and what is likely to be aliased.  By comparison, the Hantek/Tekway design seems to be hiding that information, so I wonder why.  Also, they hide the change from Real Time operation to Equivalent Time operation, that is deeply annoying.  LeCroy automatically switch to Equivalent Time (they call it RIS, or Repetitive Interleaved Sampling) but it is clearly visible at all times.  The operator really <needs> to know when this is happening, otherwise the data on the screen might be totally undersampled and quite untrustworthy.

Right, but that’s the major diff between brand names and china manufacturers. Actually not everything will be displayed and if there is information you can’t really trust.
Why ? Well very simple, all china DSOs (except Rigol 6000) are sampling always with fixed and highest sample rate of the ADCs, the resulting information is just “converted” to kind of sample rate information on the display (if available).  So actually you can’t undersample, the firmware is correcting automatically based on the horizontal settings. Of course they could do it different (meaning the sample rate setting will reflect changes to ADC clock), but then they would need better clock sources, an FPGA PLL is not good enough, some external clock logic would be necessary, probably with good clock jitter attenuators which cost money – so that’s why.


"actually it is very hard to say what is the real sample rate on these scopes." and "Probably we should ask the original developer"
I agree completely with these comments, but are we never likely to find who it was and ask them...

Actually in begin of 2007 a developer named “rgj” started development of a DSO 1.0 platform.
Later, in April 2008 Tekway company was founded and started production of the first DSO models DST3000/DST4000/DST1000 – based on DSO 1.0 platform. End of 2008 this developer worked again on DSO development – named DSO2.0 platform – mid of 2009 Tekway started development and end of 2009 sales of this new (DSO 2.0 platform based) series - DST1000B/DST3000B/DST4000B, which was bought by Hantek shareholders June 2010. Since them developer teams from both companies merged together and started with firmware optimization – of course for both Tekway and Hantek models. (Btw, since them firmware issues started, probably the joined HanTekway team should ask “rgj” how to optimize the firmware …)

No idea if “rgj” was/is working for Tekway or only external resource (which I think),
the fact is this developer is not located in China.
Maybe he/she is reading this thread and will answer us some questions.

At same time Instek and Rigol started of development and later production of very similar DSO.
Coincident?  no, I don’t think so.

You said:
"The DSO is using Altera Cyclone II, if you check the specs you will see the amount of internal SRAM is "big" enough for
only one channel 4k sampling"
OK, thanks for that information, I'm not experienced with FPGA so their specs are confusing to me.  That would explain the default back to 4k with Autoset.  It does change the way the scope must work, there are many compromises compared to my old LeCroy.  Even though my 9310 is only 100MS/s, I can trust that what I have on the screen, since I know always what sample rate it being used.

The Cyclone III, EP3C5 have 414kbits memory, Tekway/Hantek is using 8 ADCs x 8 bit x 4000 point,
so 250kbits, no way to have both channels sampled at same time into internal memory. Rigol is using exact the same FPGA, and sampling 2 x 16k (or it was 2 x 8k? no matter), this can’t match even for single shot, so they already shifting the information to external SRAM during short-memory shot /which is slowing down the design). Instek is using EP3C16, having 515kbits, this is big enough for single 8k or 2 channels 4k. I didn’t found any information about the memory size in short mem setting, but it would be probably 4 or 8k.
I don't know what SoC/UI means.

The SoC is actually ARM9 Samsung application processor responsible for GUI. This baby is reading the sampled data and displaying on screen. It is doing additionally some math/FFT things and the communication to outside world.

In the LeCroy, the sample rate changes are completely logical and in keeping with the published limitations and specs.  The Info screen always tells you precisely what is happening.  In my LeCroy, the scope acquisition memory defaults to 10k, but you can select 50k.  Using 50k increases the processing required to display the waveforms, so drops the update rate, but the choice is yours.  As you increase the timebase setting, the scope it will automatically change to RIS (Repetitive Interleaved Sampling) or Equivalent Time automatically, but it clearly tells you this is the case, so you can't be easily fooled alias.

All china DSOs are doing is exact in same way, except the fact that ADCs are hard-clocked so everything in done in firmware itself.

You said:
"I said "finally" because in 8ns/4ns/2ns/div the diff is very small and hard to count exactly, but it seems to be
200ps, 100ps and 50ps."
Of course, this is what it would do for repeating waveforms.  I was testing it for single shot only.  Single shot waveform storage is the banner capability that separates DSOs from analogue scopes, so my focus is on single shot.
You said:
"This is of course with real time mode sampling selected. With equ mode selected and 20ns/div the diff between dots
is 100ps instead of 500ps like in real time mode."
Agreed, but I did all my tests on single shot acquisitions.  I have analogue scopes and didn't buy a a digital scope to show easy repetitive waveforms.
Me too, there is no difference between single and repetitive run in the logic, except the fact that the memory will be purged and filled again and again and again.

This is just result of how they using sin/x interpolation and the way how the DSO is designed."
Clearly the maker must work within the limits of physics and with difficult cost restraints.  So, I am not being critical of the makers.  But, there is no reason for not letting the user know what the scope is doing.  There is still something weird happening with the sample rate getting stuck at 400MS/s for so long.  I cannot understand why this should happen.  At higher time base settings, the scope appears to use 500MS/s and 1000MS/s sample rate, so it's not like the digitiser can't do it.  It's not because of a 4k fast RAM limitation, since at 200nS/div, it samples 1.28k at 400MS/s.  It just makes no sense to me.  I can't understand why they break the 1-2-5 sequence of sample rate at lower timbase settings and go to 1-2-4.  I'm looking to explain why it is like this.  I can accept quirks of design, but I like to know <why> it is like that.

The 1-2-4 sequence is probably because of clock rates for FPGA/SRAM/ADC and amount of ADCs. (100MHz clocked, 200Mhz clocked, 8ADCs)
They could probably do 1-2-5 but it will cost some FPGA time slowing down waveforms refresh.
I don’t like it, but can live with that, one of the reason why I bought it was the 2500wfrm/s, the other choise would be at that time Rigol with 1-2-5 seq. but 800wfrm/s.

You said:
"This is just result of how they using sin/x interpolation and the way how the DSO is designed. "

What?  Surely this must be a mistake.  I saw nothing in the manual about the scope using sinx/x interpolation between actual data points.  I detest sinx/x interpolation.  I used to sell LeCroy DSOs many years ago, and I have seen many many comparisons of different digital scopes.  I finished that work 8 years ago, so I have not seen the latest HP DSOs.  Apparently, they have improved dramatically, but in my past experience, by far the worst alias problems my customers encountered were cases where sinx/x was operating.  Linear interpolation is the safest method.  As soon as you see the very characteristic alpine looking sharp peaks, you know you have undersampling and need to take care to ensure you aren't looking at alias.  Since Hantek/Tekway under the Display menu allows selection of Dots or Vectors, I assumed Vectors meant linear interpolation.  We must find some way to be sure about this, it really matters to me.

Well, that’s what you can find in the user manual – waveform interpolation : (sin x)/x
therefore you will see aliasing on all china DSOs.
Generally spoken all china DSO have a different understanding of sin x as for example Tektronix has,
however it is hard to guess what they exactly doing without source code.

You said:
"Therefore don't count the dots, they not one per sample and don't compare to other DSOs"
If the dots are not actual sample points, what else could they be?  Don't forget, I have always used single shot mode and ensured Real Time mode was operating.
Physically these dots have to be interpolated dots and not actual sampled points.

Please don't think I am full of criticism, I'm just trying to understand how this thing works, and whether I can trust its single shot screens.  I deal with photomultiplier and gas radiation detectors and fast one-ff pulses matter to me.

I can’t answer this question, these DSOs are comparable to Tektronix TDS2012, is such Tek is good for you then you fine, if not you will have to change it to better model, maybe Agilent DSOX will fit your need.
As general DSO philosophy, the vital thing is to understand the limitations of the technology so you are not fooled by alias.  Aliasing happens all the time, we just don't often realise it.  Trusting a DSO screen without questioning is a good way to fool yourself.
Another interesting factor is screen alias.  The screen only has a limited number of dots across it, if you squeeze memory down to show the pixels, then data is not being shown and alias can occur.  To my best knowledge, Hantek/Tekway at least make an effort to capture spikes that are present in memory and display something on the screen that grabs your attention and makes you zoom for more info.  LeCroy have always done this.  I believe GW Instek take the trouble also.  Many little modern scopes simply ignore the spike in memory and if luck has it fall into the data that is decimated for screen display, then bad luck, you never see it.  If you ask a Tek salesman about this, they get excited and say the data isn't lost, it's still in memory.  But so what, why would you scroll through anything up to 1 meg of waveform data <every single time> to find something that you don't know is there!!

Actually Hantek/Tekway are very similar to Instek, and to be very honest good for spikes detection.
The only thing I’m missing is search function, sure with the double window (F7) you can switch both normal and zoomed view and actually you will see these spikes in normal view, you can set some markes but there is room for improvement.

I have no trouble with instrument and technology limitations.  I have no trouble with compromise made for better cost.  But if you can't find out what those imitations are, how can you ever know when to be alert for alias?  Even a car manual tells you what speeds to use for each gear...

Well, no idea why these guys (now talking about all chinese DSO manufacturers) can’t just write everything down into the manual. Sure, even brand manufacturers are doing this, hiding some information’s, but you can always find such hidden information if you look on the competitor website …
What the do is to write down highlights, sure everything what good need to be known, everything else hidden.
I guess they doing this just because they worry nobody would buy their products. But actually we all know that you will have to pay a lot of money to get really good product, everything else is always compromise.


Please keep up the good work, I have very much appreciated your work in informing us all about these scopes.  I'm enjoying tinkering with the HAntek/Tekway scope, the screen readability for my older eyes is very nice, I just don't trust it yet and may never fully, unless I get some answers.  I have emailed this issue to Hantek, who have sent a polite "gone to engineering evaluation" reply, so I wait with interest.  In the mean time, I thought it would be interesting to ask your thoughts on the matter. *smile*

Sure you welcome and i hope my answer will help a bit to understand some things about chinese DSOs.
I remember how hard was to get any answer from Tekway at the beginning of my Tekway-adventure, especially because I did found some
“strange things” and asked directly. Today the communication is better, especially after Hantek shareholder bought Tekway,
Hantek’s international experience is good for us.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 27, 2011, 04:02:56 pm

I tried to find the resistors which determine the lowpass filter value, but I did not find them, I guess they are on the other side and I was lazy to do that.
they located in the (shielding) input channel part of the PCB, which you already opened - i can see tme on your pics :)

Something that I noticed is that it gets really hot inside. After 30 minutes of playing with it, when I opened it, all the metal plates were REALLY hot (I dont want to know the ICs). In fact before opening it I noticed a very intense heatwave coming from the top. I installed a 5cmx5cm fan in the place designed for that, and soldered a header in the power supply where it says "fan". Now it runs cool after hours of use. Sure its noisy but if it's a guarantee of a better lifespan i think it's not a big sacrifice, anyway I always have earphones listening some good music ;)
right, the most heating comes from PSU, then the input circuit then FPGA and ADC.

My PSU, with the PTH04070 instead of KA378R33 is producing no heat at all, input channel can't be fixed (these chips will get hot)
and FPGA/ADCs have already heatsinks installed. A 12V fan powered with 5V (just replace the 7812 on the PSU by 7805 and connect the fan)
will do the rest.

UPDATE: NOW HACKED !!!
At first I was afraid but the procedure seemed to be very easy, so i did it. Now I'm happy and grateful for tinhead :)

you welcome

I also wanted to do something about the PSU's 3.3v but didnt have much caps or regs lying around so I installed 2 extra 220uF Tantalum
caps in the 3.3v output:

Tinhead, do you think the tantalums are helping? Im looking towards fully hack the device including Ethernet, PSU mods, etc.
you can measure the ripple by yourself :)
The Ethernet mod, yeah, maybe i should produce some PCBs. Few ppl asked already, it seems that the 6mil is to small for home made PCBs.

Something curious is that my DSO had a permanent +20mV offset on CH1, I did not took pictures of the shorted probe showing the offset. After the hack and tantalum caps the problem has dissappeared, I dont know why.

well, the time you spend on hacking the DSO, the device got over the warm-up time so the drift was gone, the explanation for this drift is here

https://www.eevblog.com/forum/index.php?topic=2961.0 (https://www.eevblog.com/forum/index.php?topic=2961.0)

there is nothing wrong about.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on April 27, 2011, 04:21:51 pm
you can measure the ripple by yourself :)
The Ethernet mod, yeah, maybe i should produce some PCBs. Few ppl asked already, it seems that the 6mil is to small for home made PCBs.

Can the scope measure its own ripple by placing the probe in the +3.3v net?

wow 6mil sounds difficult but could be possible, I've done 8mil with a lot of problems, but got good results at last.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 27, 2011, 05:42:52 pm
Can the scope measure its own ripple by placing the probe in the +3.3v net?

sure, the best is with short gnd connection directly near ADCs.

wow 6mil sounds difficult but could be possible, I've done 8mil with a lot of problems, but got good results at last.

well, the Eagle files i posted can be of course changed.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ccatt on April 28, 2011, 12:55:27 pm
Tinhead,You saw that my upload files?Because i didn't have enough power to do that now. Only if i need to  enough to know to  do it .Can you tell me what the difference is between the received files and your previously  files,and reciprocal measures ?(if you can post the better nandflash backup file of dst1602, so much the better.)I only know a little Linux.used all your upgrade applications, always  reported error code . I don't know what Tekway did?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 28, 2011, 08:34:42 pm
Tinhead,You saw that my upload files?Because i didn't have enough power to do that now. Only if i need to  enough to know to  do it .Can you tell me what the difference is between the received files and your previously  files,and reciprocal measures ?(if you can post the better nandflash backup file of dst1602, so much the better.)I only know a little Linux.used all your upgrade applications, always  reported error code . I don't know what Tekway did?

yes i saw and got it, i will check on weekend (quite busy right now)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: clonecrp on May 03, 2011, 03:58:18 am
Tinhead ...

Removed my new Hantek DSO5102B from shipping container here .... applied power .... the display is quite nice at quick look.
... looking around etc ... I notice Acquire Menu - 1M LongMem is not supported by the model. Is this a SW, HW issue or both ?

Very Interesying Features  ;D ... I think I am going to like this

Probably will do Power Supply mods this week ... got the TI PTH04070WAH Chip as sample.

Comments Please ...

Thanks!
Doug
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: clonecrp on May 03, 2011, 05:51:17 am
BTW ... Loaded TTScope Software from Scope CD ... plugged in USB ... and a bad bong ! Usb Driver failed to load ..... won't attach ... eMail off to Hantek Support just to see what happens ...  :(  ??? ..  :'(

Anyone w/similar USB problem ?

Thanks!
Doug 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ECL on May 03, 2011, 07:27:03 pm
BTW ... Loaded TTScope Software from Scope CD ... plugged in USB ... and a bad bong ! Usb Driver failed to load ..... won't attach ... eMail off to Hantek Support just to see what happens ...  :(  ??? ..  :'(

Anyone w/similar USB problem ?

Thanks!
Doug 

The version of TTScope on my CD was nonfunctional.  Use the version on Hantek's website.
Also, see this link, for where to find the driver, after installing TTScope (it says for Win7, but
I had to do the same for WinXP SP3):

http://www.hantek.com.cn//FAQ/Win7DriverInstall.pdf (http://www.hantek.com.cn//FAQ/Win7DriverInstall.pdf)

BTW Greetings everyone.  Been following the EEVB for a while now.  Thanks to everyone's
hard work, on this thread, I decided to buy a Hantek DSO as well.  Honestly, I was leaning toward
another manufacturer, but changed my mind, once I read about the hack, and the data that had
been collected on the scope.  I would not have bought the Hantek, if it hadn't been for this thread.
Hopefully this factors into Hantek's (and all manufacturer's thinking) going forward.  Special thanks
to Tinhead, for all of his hard work, and support! 

ECL -K
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFman on May 03, 2011, 10:32:52 pm
Hi Tinhead.

I've been waiting for the Windows 7 64 bit driver for TTScope. Do you know if this has been released.

Thanks for all the work that you do for us. I also wouldn't have a Tekway 200MHz oscilloscope if it wasn't for you.

RFman.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: clonecrp on May 03, 2011, 11:09:49 pm
Hey Guys !

Once my PS Mod is complete ...  I just might have a spare (one or two)  TI PTH04070WAH Chips if anyone needs one ... Just let me know  ;) .

Doug
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: colinbeeforth on May 04, 2011, 10:14:34 am
Hi tinhead,

Thanks for the very long and thorough reply.   I really appreciate the effort it means.  You have cleared up a major misunderstanding of mine.  Before buying I searched the Hantek manual for sinx/x.  There was no result, so I thought it did not use this limited method.  In the manual, just where you said, there was "sin(x)/x"  The horrible manual writer used brackets., so I did not think it was there.  I am not very happy about this now.  Even if a scope has sinx/x interpolation, most provide it as an option and it can be switched out.  I prefer to use DSOs without it.  sinx/x works ok in limited situations, but you have to be much more careful and watchful for alias problems.  Since Hantek/Tekway don't have an information screen, or even put the sample rate somewhere on the screen like most reputable makers, it is hard to know what the sample rate it uses, and therefore, how can I know whether alias is possible or not?  You can never be sure.  With linear interpolation, it is impossible to under-sample without very obvious spiky looking waveforms.  Linear interpolation is self policing, if there is risk of alias, you see sharp spikes, and it is a big warning to the user to check the signal and acquisition settings since it is under-sampled.

Let's look at a practical example:  If you feed a squarish waveform into the DSO, at say 250MHz.  At the fastest timebase settings the DSO will take 4 samples per repeating cycle.  If the input is a square wave, it will have quite high frequency components, and if you have a 200MHz front end bandwidth, I expect it will round off the sharp edges a bit.  The samples will go into memory, and be displayed with sinx/x interpolation.  This will force sine curves to join the dots.  The screen will display total lies compared to what is being fed into the ADC.  It will look nice rounded sine waves, you will have no reason to be suspicious or mistrust what you see.  If the scope used linear interpolation, you would see sharp spikes, and would immediately realise that you were seeing an alias.  It isn't happy when this happens, since you have limited ways of seeing what is actually there, but at least you know.  An analogue scope of 200MHz bandwidth will show far closer to the truth, although will slew rate limitations softening the sharper edges.  It is still useful to see.  This is why I think sinx/x is dangerous for DSOs, especially for inexperienced users.  Thing is, alias can happen at very slow timebase settings as well, so it isn't just something to worry about at the highest frequencies.

When I looked at the Hantek/Tekway Display mode menu and saw the "Vectors/Dots" switch.  I assumed this was the selection of display interpolation, as being no interpolation (Dots) or when switched on as simple straight line interpolation (Vectors).  I forgive myself for making this mistake - the DSO is very unclear about what this setting actually does.  But I am totally at a loss to describe what the points shown on the screen <actually are> if they are not acquired data points!!  If the dots are totally synthetic, what on earth are the designers thinking!  I can't even imagine what they must be showing me, if those dot displays are not actual sampled points.

You said: "all china DSOs (except Rigol 6000) are sampling always with fixed and highest sample rate of the ADCs, the resulting information is just “converted” to kind of sample rate information on the display (if available).  So actually you can’t undersample,"

I'll deal with this in two parts, the "So you actually can't under-sample" part first:

1:  I think this is not a good way of understanding what is happening.  Any DSO can under-sample.  I don't care who argues, any DSO can alias and show nonsense - I've done it myself and seen it on 1GS/s scopes with 500MHz bandwidth and huge memory that cost $70,000!!  I don't wish to sound horrible, but there can no argument about this.  It is a fact of the universe, like the speed of light.  If you sample in anyway, you can get alias.  We can get into a detailed argument about Nyquist criteria, but I think this may bore the forum senseless.  It is pretty easy to describe in simple language.  Digitising isn't actually complex in practical use, if you think a bit first.  If you sample less than 10 points of any cycle of a repeating waveform, or of a rising or falling edge, you will have a poor understanding of what is actually there.  If you know there is a simple square wave, then maybe 8 points is enough, let's not argue about exact numbers, but how many data points on a graph paper allows you to draw what looks like the signal at the input socket.  You can argue 8 or 10 samples, whatever, you need enough samples for your application, otherwise you don't really know what is there.  Nyquist criteria is two sample points per since wave cycle using sinx/x interpolation and brick wall low pass filtering - this is entirely academic, as sharp low pass filters are quite difficult at RF frequencies, and a DSO input bandwidth is a slow roll off, not a brick wall.  Despite my scope being 3dB down at 100MHz, if there is a large signal at 1000MHz at my input terminal, some of it will get to the ADC.  Therefore alias is quite possible and I maintain, fairly common, just most people aren't aware of it!  Depending on the circumstances of each acquisition, the alias may not be very serious, or it can make the screen display a total lie, it all depends on the exact circumstances, the input waveform and the scope settings.  That is why I want to know what the actual sample rate is, so I can know if I can trust the that the screen is showing me a <real> result.  If you work with fast non-repetitive pulses from scientific radiation detectors, like I do, this isn't just a pointless argument, it really matters to people - not just me.

2:"all china DSOs (except Rigol 6000) are sampling always with fixed and highest sample rate of the ADCs, the resulting information is just “converted” to kind of sample rate information on the display"  OK, thanks for the information, but this doesn't really mean anything important about aliasing or undersampling.  I don't care how fast the ADC runs, if you decimate the data coming from the ADC, and store the points in memory, what matters for alias is the time interval between data points.  If you are acquiring waveforms at a slow timebase setting, and the memory is set to 4k, then the time between samples is (timebase x 16divisions) / 4000 = time between samples.  Then 1 / (timebetweensamples) = samplerate.  This doesn't care if the original ADC ran at 1nS per sample, what is in the memory and what is displayed to the screen is what determines aliasing.  I hope this makes is clearer.  It is perfectly possible to undersample on any DSO, no matter what the ADC hardware speed.  At slower time base settings, the sample rate is basically determined by the amount of memory available for filling.  Logically, longer memory is better.  There are some compromises with the Hantek/Tekway for long memory, but they don't make it clear when and how those compromises happen, an information screen is absolutely necessary!

OK, this is enough for one post, as I have run over some big concepts that take time to think over.

Basically, I believe that a DSO should work for the user, not against the user.   Most Chinese models I have seen don't seem to do this.  It is a shame, I have no trouble with cost based limitations to a design.  Honest disclosure shows respect for the customer.  Would you get into an aeroplane that had "aerobatic" written on it without knowing the exact limits for vertical and inverted acceleration??? *laughs*

Cheers, Colin
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on May 06, 2011, 01:13:50 am
Hello, I've been using my DST1102B (my first scope :D) to design a microcontrolled buck converter and everything has been pure sweetness. The only things ths bugs me is when you save to USB, why does it save a .bmp and .gif of the picture? I can do just fine with .gif, Is there any way to make it only save .gif file? Or better ! is there any way to get fast oscillograph screenshots in the PC without using the slow TTScope?

I've found a way to use Tekway's TTScope in windows 7, Just copy and rename:
<Hantek's TTScope Installation Dir>\config\DSO5202B_eng.ini
to
<Tekway's TTScope Installation Dir>\config\DST1202B_eng.ini

This way I can use Tekway's TTScope, but it's still slow :( I suspect the scope sends *.bmp screenshots instead of some type of compressed image. Is there any third party software ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: clonecrp on May 06, 2011, 02:00:17 am
Hey Colin ... Whew coosh !

Thanks for the info as appreciated by all but ... me ... personally .... ???
I simply want to change my Hantek from 100 to 200  do you have any advice on that ...?

Please advise...'
Thanks !
Doug
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: AnotherRFman on May 06, 2011, 06:49:06 am
Hi Carlos

When you say you have found a way to use Tekway's TTScope with Windows 7, do you mean Windows 7  32 bit or 64 bit. I have had it working with 32 bit Windows 7 from the outset but like other members, I am sweating on the 64 bit version becoming available so I can run it on my desktop machine too.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on May 06, 2011, 07:02:12 am
Sorry, Win 7 32-bit. Mine wasn't working, dunno why.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 07, 2011, 01:41:29 am
Tinhead,You saw that my upload files?Because i didn't have enough power to do that now. Only if i need to  enough to know to  do it .Can you tell me what the difference is between the received files and your previously  files,and reciprocal measures ?(if you can post the better nandflash backup file of dst1602, so much the better.)I only know a little Linux.used all your upgrade applications, always  reported error code . I don't know what Tekway did?

yes i saw and got it, i will check on weekend (quite busy right now)

ccatt

sorry, but due some undone projects there was no time for fun, i will take a look this weekend.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 07, 2011, 01:43:19 am
Tinhead ...

Removed my new Hantek DSO5102B from shipping container here .... applied power .... the display is quite nice at quick look.
... looking around etc ... I notice Acquire Menu - 1M LongMem is not supported by the model. Is this a SW, HW issue or both ?

Very Interesying Features  ;D ... I think I am going to like this

Probably will do Power Supply mods this week ... got the TI PTH04070WAH Chip as sample.

Comments Please ...

Thanks!
Doug
DSO5102B doen support 1M only in one chan mode, so if even this did'nt work then you have an issue with your DSO (if so, tell me fw version)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 07, 2011, 01:47:18 am
Hi Tinhead.

I've been waiting for the Windows 7 64 bit driver for TTScope. Do you know if this has been released.

Thanks for all the work that you do for us. I also wouldn't have a Tekway 200MHz oscilloscope if it wasn't for you.

RFman.

The drivers isn't really that complex, should be not a big deal to develope 64bit version, unfortunately their
to-do list seems to be much longer than free resources :(

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 07, 2011, 02:03:42 am

1:  I think this is not a good way of understanding what is happening.  Any DSO can under-sample.  I don't care who argues, any DSO can alias and show nonsense - I've done it myself and seen it on 1GS/s scopes with 500MHz bandwidth and huge memory that cost $70,000!!  I don't wish to sound horrible, but there can no argument about this. 

sure, that's what these chinese DSOs are doing is like a combination of flat and gausian response. It is far from perfect, but we should not
forget - that low cost DSOs.


It is a fact of the universe, like the speed of light. 


typical humans ... everything beyond horizon is not possible :)


If you sample in anyway, you can get alias. 


and of course you can see alias on these DSOs, no doubt. One of the good things in Hantek/Tekway DSOs is hardware freq. counter,
for most ppl the freq. diff on both display should be an indicator for "somethign wrong on the display".


There are some compromises with the Hantek/Tekway for long memory, but they don't make it clear when and how those compromises happen, an information screen is absolutely necessary!


yeah, that's again price driven issue. Actually for real 1M on full speed they should add some additional SRAMs, FPGA should be a bit faster too.
But they just can't, nobody would even think about to buy chinese DSO for 3k $ if there is Tek or Agilent for same price, just because of brand name.



Basically, I believe that a DSO should work for the user, not against the user.   Most Chinese models I have seen don't seem to do this.  It is a shame, I have no trouble with cost based limitations to a design.  Honest disclosure shows respect for the customer.  Would you get into an aeroplane that had "aerobatic" written on it without knowing the exact limits for vertical and inverted acceleration??? *laughs*


i saw so many errors or strange menu on brand name DSOs, even such nice things like touch screen are useless (at least for me) - sometimes
is hard to understand what the developer was thinking (or not) in first place.

I think for you the best would be to get something like an Agilent DSOX3000, there is enough memory running with full speed, much faster waveform
refresh and some nice addons.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 07, 2011, 02:15:29 am
Hello, I've been using my DST1102B (my first scope :D) to design a microcontrolled buck converter and everything has been pure sweetness. The only things ths bugs me is when you save to USB, why does it save a .bmp and .gif of the picture? I can do just fine with .gif, Is there any way to make it only save .gif file? Or better ! is there any way to get fast oscillograph screenshots in the PC without using the slow TTScope?

I've found a way to use Tekway's TTScope in windows 7, Just copy and rename:
<Hantek's TTScope Installation Dir>\config\DSO5202B_eng.ini
to
<Tekway's TTScope Installation Dir>\config\DST1202B_eng.ini

This way I can use Tekway's TTScope, but it's still slow :( I suspect the scope sends *.bmp screenshots instead of some type of compressed image. Is there any third party software ?

fro Win 7 32bit the software from Hantek website is working perfect. The DSO5102B is still sending back identification "DST1102B",
which req. of course proper ini file. Normally this file was included within the TTScope setup, probably again someone updated and forgot
to add everything - work around is exact what you did.


Regards the screenshots, the DSO is doing BMP from the captured memory, then bmptoppm and ppmtogif :) Sounds crazy but that's the out-of-the-box
tools on linux, so of course the developer could not resist to use them. You can rename the bmptoppm and ppmtogif to something, so you will get only bmp -
or you have to patch firmware to remove the bmp after conversion. However, on the to-do list for future firmwares is an option to select what
will be saved during quick action "save to usb" (picture or/and bin/text file), let's hope this will be implemented soon.

Actually there is a way to get the sampled data from the USB port (and a way to do many custom things), there is a someone working
already on custom SDK, many things are already working but as he is doing without any support from Hantek is costs reverse engineering time.
The good news is, it will be soon published, so please be patient.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ccatt on May 07, 2011, 03:52:43 am
I see.Creation of files takes time.Thanks so much for your time.Compared with a layman myself.your efficiency will Be multiplied several times or even more than .
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: colinbeeforth on May 07, 2011, 02:45:56 pm

Hi tinhead,

I said:  "There are some compromises with the Hantek/Tekway for long memory, but they don't make it clear when and how those compromises happen, an information screen is absolutely necessary!"

Than you said:  "yeah, that's again price driven issue. Actually for real 1M on full speed they should add some additional SRAMs, FPGA should be a bit faster too.
But they just can't, nobody would even think about to buy chinese DSO for 3k $ if there is Tek or Agilent for same price, just because of brand name."

I am not complaining for the sake of it, I understand the compromises in hardware.  I understand memory write times, bus settling times, refresh etc.  I have no problem with compromises used to keep things at a cost the market will pay for.  That's just normal engineering.  Oh, and compared to other Chinese DSOs, Hantek/Tekway are paragons of virtue, some other DSOs are really total rubbish.

Anyway, I've found that so long as you are only using 4k, the FFT screen does show a sample rate.  Why can't they put that on the normal acquisition screen, it wouldn't cost anything?  Why would it wreck their sales?  It 's probably also got a lot to do with culture and their manufacturing environment.

I've been doing some tests with the Hantek DSO, using random fast pulses lately, and like you said, it works fairly well.  However, if we all shrug and go on, it won't teach Chinese manufacturers to make better products.  In 20 years time, if they are open to learning from their customers, they will make better products, and give us good stuff at a reasonable price.  But, we need to tell them what is needed.

Hey, if I had more money, I'd buy Agilent in a heartbeat.  But I don't have that option.  My LeCroy 9310 is really clever, really nice, but only 100MS/S.  Maybe I'm spoiled.  Sadly, the LeCroy power supply maker has gone bust, the switched mode supply has a horrible custom thick film controller (I hate vendor lock in! grr!), it can't be repaired easily, and if it fails, I could buy 4 or 5 Hanteks for the cost of one repair...  So that's why I am looking at the cheaper end of the market.

Thanks again for the excellent work you have done in exploring the software environment of the DSOs, I wish I was better at software, but I'm more of a hardware guy.  Shame we don't live in the same city, we could have some interesting discussions I think.  Oh, it might help if I say that in test equipment and calibration, I like to know - know for sure, not just guess, but you probably figured that out. *waves and smiles*

Cheers, Colin

PS: Maybe I'll send some more email to Hantek, it hasn't done much good yet.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gall on May 08, 2011, 02:27:39 pm
In fact, almost all issues of HanTekWay are software issues. An alternative firmware (maybe including FPGA/CPLD as well, maybe not) could solve them. Hope HanTekWay will eventually go open-source.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: alm on May 08, 2011, 04:28:46 pm
Hope HanTekWay will eventually go open-source.
Why would they do that? What would be the incentive? Most Chinese companies are even more restrictive about documentation and details than companies like Tek and Agilent, and even they have never released the source as far as I know, even when they published full schematics.

The only exception is WELEC, but that's only because they went bankrupt before releasing a good firmware version, and I don't think the open source version is really usable for end users yet. Not sure how much of the firmware they actually released.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 08, 2011, 04:51:40 pm
sooner or later Hantek/Tekway will fix these bugs. For some reason the joined dev. team has to start from scratch, so the original developer "rgj" is not supporting them anylonger ( i guess Hantek thought "we can do it by ourself").
Currently they fixing home made errors, which is typical for learning process when you "overtake" development.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gall on May 09, 2011, 02:21:18 pm
I guess that's why they haven't releases the SDK yet - they just don't have all the sources anymore. I saw such a situation once, I was the one who had to develop new software after the previous main developer ... (to be polite) retired and left only binary compiled version to us.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 09, 2011, 03:16:42 pm
I guess that's why they haven't releases the SDK yet - they just don't have all the sources anymore. I saw such a situation once, I was the one who had to develop new software after the previous main developer ... (to be polite) retired and left only binary compiled version to us.

it is of course hard to get internal informations, but in principle every company worldwide is doing exact the same -
1.you buy a company,
2.you plan merger,
3.you fire people because you don't need additional staff,
4.you will get blamed by customers/your product is not "working"
5.you hire contractors because you don't know what to do,
6.you hire again old teams to fix issues.

The good news is - Hantek is already between stage 5 and 6 (they did tried to fix some firmware issues and produced new once,
they released interim non-public fw versions (especially for new hardware) with big bugs, so finally they dropped pants and told the truth
to distributors about development issues due insuficient staff. That's fair enough and good starting point).

From what i know they have definitely SoC sources and at least CPLD/FPGA binaries and documentaton. Which is in principle enough to compile new
firmware (SoC) versions and to publish SDK, but not sufficient to change hardware revisions. The plan was to publish SDK end of jaunuary,
however due the internal dev. team issues they worked on bug fixing and new hardware revision (which caused new bugs).
Finally they deleted all firmwares from web page, dropped pants, and focused on the "right way to work". This is again a good example
for chinese companies, they working much faster than wester-world companies. I'm working since years with Fortune 100 companies on big projects,
and to be very honest within 6 months you will not get even trough all meetings, still light years far away from real work.
Hantek managed to buy, merge, produce mistakes, drop pants, hire people within 8 months which is incredible fast!,
this is in my opinion another one reason to trust their products
.

This means for us, we have to wait - for official SDK from Hantek/Tekway or for custom partial-SDK which is almost ready.
A user from this forum spend tons of hours decompiling the firmware and documenting things, let's hope he will publish it soon.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Bored@Work on May 09, 2011, 08:07:34 pm
I have no sympathy for companies losing their source code. It is simply gross mismanagement when this happens. Firing people is no excuse for losing assets like source code. In fact, there is no excuse. It is not rocket science keeping track of source code, and the principles aren't new. More like known since 30 or 40 years.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bilko on May 09, 2011, 08:18:56 pm
It sounds like they don't do version control either else they would have the archives. The implications are that they can't backtrack and fix bugs properly, hence flaky f/w
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 09, 2011, 08:36:08 pm
I have no sympathy for companies losing their source code. It is simply gross mismanagement when this happens. Firing people is no excuse for losing assets like source code. In fact, there is no excuse. It is not rocket science keeping track of source code, and the principles aren't new. More like known since 30 or 40 years.

i didn't said they losed source code. Middle of the merger process Hantek designed new hardware revision, and for some reason made
some mistakes within interim firmware, errors which can only happens if you have no sources or if you fired developers
(and new team have not yet "assimilated" the source). As they published in same time some public firmwares they must have at
least part of the source - that's why i said "at least" in my org. posting.

On the other side i know they build new joined team, which means normaly fired some ppl - at least contractors.
The org. developer "rgj" seems to be a contractor. In some countries as contractor you don't own the sources, in some you do.
So it might be that Tekway originaly bought only part of the source, but it can be that they own all sources and the new dev. team
just not managed to understand the source in proper way (which can easily happens in such complex design).
The good part of the story is that they finally recognized this "internal issue", bad aspect of this story that they losed time,
so we will have to wait for bug-free firmware, netwrok support within firmware and SDK a bit longer than promised (and planed by HanTekway).

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 09, 2011, 08:42:11 pm
It sounds like they don't do version control either else they would have the archives. The implications are that they can't backtrack and fix bugs properly, hence flaky f/w

if you disassemble or decompile the firmware you will see many "improvisations" and things that didn't make sense, version control can
only help if you documment your source and of course don't use such "fast bugfix mechanism" for issue resolution.
In the real world, now talking about over 10yrs experience with Fortune 100 companies, something like that didn't exists.
Sure version control exists, but nobody really cares about clean programming - time to fix is important as this costs money!
So why chinese company should be different? No reason at all.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bilko on May 09, 2011, 09:33:17 pm

Sure version control exists, but nobody really cares about clean programming - time to fix is important as this costs money!
So why chinese company should be different? No reason at all.


Clean programming = faster time to fix.
If you let developers run all over the code they cause all sorts of problems and make more bugs than they fix. I worked in industrial automation software development for over 30 years and yes clients were all blue chip automotive and aerospace manufacturers with downtime in the region of $20,000 to $50,000 per minute.
Time to fix was of the essence or people would get laid off.

Not running a proper documented source and VCS is bad and expensive for business and should not be encouraged. The only time it is acceptable is when prototyping or producing products for personal use.

Probably another good reason that HanTekway should release the API, they can concentrate on the hardware and let the developer community decide the functionality of the equipment. Both sides win.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 09, 2011, 11:55:00 pm
Probably another good reason that HanTekway should release the API, they can concentrate on the hardware and let the developer community decide the functionality of the equipment. Both sides win.

full ack, and afaik they got during last days some proposals, up to them to decide. In my opinion is not a shame to let ppl help you,
it is a shame to ignore it.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bilko on May 10, 2011, 12:31:31 am
full ack, and afaik they got during last days some proposals, up to them to decide. In my opinion is not a shame to let ppl help you,
it is a shame to ignore it.

There is absolutely no way that HanTekWay can accumulate the knowledge of thousands of developers on the Internet. Their product will see applications that they never dreamed of. Investing software time for them is a pure waste of money and resources. How can they charge more because of their software 'enhancements'. Its still the same hardware and still the same company. Releasing the API and a 'scope development kit' would attract customers from education, industry, R&D. There isn't a product on the market as capable within this price band. Lets hope that they see sense and pursue this market.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: drieg on May 10, 2011, 12:52:07 pm
Hello to all HanTekWayMen! ;)

I've been watching this thread with interest for some time already and I just could not resist any longer from getting one of these units.
Nice work, tinhead! (https://www.eevblog.com/forum/Themes/default/images/post/thumbup.gif)

In fact I got couple of them. They all are Tekway DST1062B model with English front panel and the DST1102B set of resistors (Rinp = 33R/12R, Ropa = 301R/39R, Rtrig = 100R).

There is a new PCB version inside (Ver1.00.5 2010/11/30, 012-00193FH) which seems to be "ready" for ethernet-on-board and also other stuff (audio AC'97 codec, SD Card interface, 2nd USB,...).

If there is anybody looking for a good price and service in EU, just let me know...

Regards,
drieg.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on May 10, 2011, 01:13:11 pm
Nice to see that there read Hantek. ;)

I have some (100MHz) units with Hantek front panel.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: colinbeeforth on May 11, 2011, 08:55:27 am
I think proper CVS saves time, money and big disasters.  If you lose a critical programmer, others can pick up the threads.  My wife works on software for scheduling nation wide transport systems.  Without CVS, the company would be a train wreck!  Like yachtronics says, only excuse for not using CVS is prototyping or personal projects.  tinhead suggests that many "real world" companies don't do this.  I think he may be right, but the reason why it is needed is in his evidence of bugs and inexplicable software.  It just proves how important discipline in programming is.  It sounds like the Hantek/Tekway source is in a pretty bad way.  It would explain why my scope crashes several times a day, when my LeCroy crashes maybe once per year.  For the LeCroy 93XX scope, the previous 94XX series software was ported across with big rebuilds in the display technology and waveform processing in 3 weeks with a team of 7 guys.  I was told there were some bugs, but I had 9310 serial number 013 for one year, demonstrating it to customers, and I never saw a single bug.  It might help that the team of 7 guys were all Swiss, so maybe there was a culture of precision.  However, to port, modify and extend the software in only 3 weeks with so few bugs shows what can be done.

In reality, the Hantek/Tekway DSO must have far less complex software than the LeCroy, as it does only a fraction of the waveform maths and processing that my 9310 can do.  I know there is better hardware support for averaging in the LeCroy, but it can handle 50k acquisitions without limitations.  Curiously, the Hantek/Tekway also has an ARM processor which must run rings around the LeCroy's old 68020 20 meg processor.  I'm not being critical of anyone, I'm sure the developers of the Hantek/Tekway are trying their best with cost limits to hardware and personnel, but I can't help but think that there is much more potential to be released from that machine and it wouldn't cost so much more to do it.  Don't get me wrong, it's far better then many other products, but it could be a work beating product if the software exploited the hardware to best performance.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 11, 2011, 10:26:59 am
yep, the current fw version have some bugs. Hantek got a long list with bug description and "promised" to fix it within 2 weeks :)
The current version (well, the last whcih was av. on Hantek website) is crashing only once a day instead of few per day,
but still not sufficient. Some measuring ugly bugs are fixed, but others not.

In pirnciple evey version since 2.6.0 have some bugs, the best is still 2.5.x which was developed by Tekway before they got bought by Hantek and (probably) before the developer got replaced - bit less functions but very stable. However, 2.5.x have hard coded english and chinese, 2.6.x not (languages module based) - that's alreay one of the error sources, additionaly the new menu functions are not clean implemented, seems that the return path is lost sometimes producing of course crash.
FPGA/CPLD and Linux are still working, just the GUI crashing, so "only" some part need to be fixed.



Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: colinbeeforth on May 13, 2011, 06:02:40 am
Interesting, I've been checking what sample rate is in operation at different timebase settings and found some oddness with my Hantek DSO5102B 100MHz DSO.

In all the DSOs I've ever seen, the rules are straightforward, if not exactly simple.  Since the amount of acquisition memory is the limiting factor at low timebase settings and the maximum sample rate is the main limiting factor at high timebase settings, the links between these things is as follows:

Number of sample points = time/div x number of divisions (16 in Hantek/Tekway) / time between sample points (or 1/sample rate)

So what normally happens is at low timebase settings, the acquisition memory is filled full or near enough (as the maths don't always work out to exactly fill the available memory).  As you increase each step in timebase setting, the digitiser gets one step faster and the acquisition memory is filled again or near enough.  Eventually, you reach a timbase setting where the sample rate is it its maximum.  The next timebase setting upwards will cause the acquisition memory to not be filled as much, because the sample rate must remain the same, but you will acquire sample over a shorter amount of time.  Eventually, you have to stop at the highest timebase setting when the total amount of memory sampled isn't too low to show across the screen.  For example on a 16 division screen, showing only 16 points would not be very useful, so you have to decide what upper setting to use as a maximum.

What I have found with my Hantek, in single channel 4k memory mode, is this rule is followed at various timebase settings until it reaches 2 uS, when the sample rate is 100MS/S, and the total memory acquired in each 'sweep' is 3200 points.  See what I mean, (2 uS x 16)/10 nS = 3200 (at 100MS/S, the time between points is 10nS)  It doesn't always work out to give 4000.  This is quite normal in all DSOs and just their basic internal mechanics at work.

On my Hantek DSO5102B, at every timebase setting up to and including 2uS, the sample rate is a 1, 2.5 , 5 sequence, like 1MS/S, 2.5MS/s, 5MS/S.

At timebase setting of 800nS, the sample rate switches to 200MS/s, and breaks the pattern of the 23 timebase settings below.
At timebase setting of 400nS, the sample rate switches to 400MS/S.
At timebase setting of 200nS, the sample rate switches to 800MS/S.

From 200nS.div up to 8nS/div, the sample rate stays stuck at 800MS/S.
Finally, at the top timebase setting of 4uS per div, (100MHz model limit) the sample rate jumps to 1GS/S.

Now, this is where it is quite odd and hard to understand.  At 800nS/div, it should be using 250MS/S and at 400nS/div it should be 500MS/S, then for all settings above 200nS it should be 1GS/S.

Strangely for a DSO specced at 1GS/S, you only actually get it at one timebase setting, with many more high speed timebase settings being 800MS/S.

When I first saw a Tekway  scope, I only saw the max sample rate of 800MS/S, so I suspected the manufacturer of cheating on their spec sheet.  I obviously missed trying it at the top 4nS timebase setting.  However, this was a lot of the reason why I didn't buy one six months ago when I saw a demo.  I thought if they would fudge the spec, they would not be trustworthy in other ways.

Now I am beginning to understand, with the help of tinhead's reports on the background of the development group, what has been happening.  It looks to me like they may have lots of software and maybe electronics engineering talent, but somehow have missed to have anyone with strong experience using scopes and test equipment, or with experience of how many other makers work their hardware.  By being different, it upsets customer's expectations.  I used to sell LeCroy DSO against HP and Tek, so I know how many difficult questions customers ask.  They don't just shrug and buy for cheapest price, they really want to know how they work, so they can make a good comparison between different offerings on the market.  Mind you, I am talking about technical and engineer customers.

While I understand that my experience probably isn't the average DSO buyer, and the Hantek will still seem ok to a non-critical or inexperienced user, there are many many experienced technicians and engineers, who will find this scope a bit weird.

I have some guesses as to why the timebase shifts like it does, but without any real information, they remain guesses.  I don't see why the time base gets stuck at 800MS/S.  It should go straight to 1GS/S only limited by the amount of acquisition memory selected.

I'm sure all these modern cheaper DSOs have limitations with memory at fast digitising speed.  4K shows up because it is likely the maximum of fast RAM available in the FPGA chip.  We are talking about very fast data, 1GS/S means an 8 bit data word every 1 nanosecond.  Light travels 30cm in that time, no RAM in the world can cope with 1 nanosecond write times!  All sorts of engineering cleverness is needed to get this to work.  But this means memory size limits, you can't use big cheap DRAM, it's not fast enough at all.  My LeCroy will acquire 50k per channel at fastest time base setting.  It took a lot of demultiplexing to achieve that with static RAM.  At 1GS/S, eight ADCs will deliver an 8 bit word every 8 nanoseconds each.  Even 8 nanoseconds is faster than the fastest silicon SRAM I've seen and far faster than cheaper DRAM.  This little scope is going like blazes to do what it does, so that is very impressive, but no doubt needs tricks to get it to work, and those tricks means some limitations.  Limitations that we have to live with.  I far prefer it when a manufacturers are open and honest about their products' limitations, you feel like you can trust them for taking you into their confidence.

I have sent all this information to Hantek and had helpful replies for them, they know there are some difficulties but seem keen to sort them out.  So I agree with tinhead, they are trying, and maybe a little patience will get us a better result.  It does show you how difficult the world market is though for Chinese manufacturers.  By comparision, Agilent would never send a scope out the door without being totally sure it was up to the standard of an experienced engineer -  But they charge 5 or 10 times as much and Hantek/Tekway is far cheaper.  It reminds me of the old engineer's saying, you can have good, fast, and cheap, pick any two!

Many people underestimate how logn good software takes, but What amazes me is this:  I recently looked at Geoff Graham's website:  http://geoffg.net/ (http://geoffg.net/)  He has done a brilliant job of creating a neat small computer for many different jobs, it was in Silicon Chip recently.  He devised a complete Basic command line interpreter in 8 days!!!  There was about 3 weeks of study behind that plus a lifetime of software experience, but it does make you think.  Software seems to be hard to me, but to some people, it isn't so difficult.  Trying to get the complex programmable hardware in the Hantek DSO to work effectively would be more tricky I'm sure, but you've got a 400MHz ARM processor to help do it with, that is a serious resource.  My LeCroy runs rings around the Hantek with a 20MHz 68020 for maths capability - granted it gets some hardware help for some tasks, but it's 20 times slower, both are 32 bit, and ARM has inbuilt support for LCD displays if I remember correctly.  It should be capable of getting near to LeCroy's signal processing capability!  My Hantek crashes twice a day, my LeCroy maybe once per year, I can't actually remember the last time it crashed.

Maybe Hantek should offer a basic system software and sell an optional maths processing addition, like LeCroy used to sell their scopes.  That would pay for the extra development costs.  Then again, I like the idea of them offering an SDK, there are enough open source smart engineers out there who will happily create a magnificent operating system, and it won't cost Hantek anything.  Building a user community around a product will create it's own success.  It would be first choice over all the other competing Chinese products then.  I can hope.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on May 13, 2011, 06:38:20 am
Quote
From 200nS.div up to 8nS/div, the sample rate stays stuck at 800MS/S.
Finally, at the top timebase setting of 4uS per div, (100MHz model limit) the sample rate jumps to 1GS/S.

AFAIK to 20ns/div it use 100MHz clock.
8, 4 (and2) ns/div it use 125MHz clock for ADC's

I have measured it directly from  ADC's clock lines. (FPGA produce these 8 (4) interleaved clock signals with PLL from 100MHz base time base.)

so, not only 4ns/div.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 13, 2011, 10:58:29 am

Number of sample points = time/div x number of divisions (16 in Hantek/Tekway) / time between sample points (or 1/sample rate)...
What I have found with my Hantek, in single channel 4k memory mode, is this rule is followed at various timebase settings until it reaches 2 uS,
when the sample rate is 100MS/S, and the total memory acquired in each 'sweep' is 3200 points. 
See what I mean, (2 uS x 16)/10 nS = 3200 (at 100MS/S, the time between points is 10nS)  It doesn't always work out to give 4000. 
This is quite normal in all DSOs and just their basic internal mechanics at work.


if you count like that, you should count what behind the menu, the scope is always using this area, menu is only overlay displayed (click F0 to hide it).




I'm sure all these modern cheaper DSOs have limitations with memory at fast digitising speed.  4K shows up because it is likely the maximum of fast RAM available in the FPGA chip.  We are talking about very fast data, 1GS/S means an 8 bit data word every 1 nanosecond.  Light travels 30cm in that time, no RAM in the world can cope with 1 nanosecond write times!  All sorts of engineering cleverness is needed to get this to work.  But this means memory size limits, you can't use big cheap DRAM, it's not fast enough at all. 


Generally spoken this didn't matter because of ADC hold function, the waveform per seconds time (up to 2500 wfrm/s) is describing how fast the data will get collected and processed,
the dead time between can be used for whatever (haven't analyzed how this actuall design works) - the DSO can continuously sample until 4k are full or it can sample/hold every 1ns
The FPGA can handle both, that's only 8 x 8bit data, refreshed every 125MHz on each ADC where the FPGA can sample i/o with 250MHz.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on May 13, 2011, 12:37:04 pm
Hello everyone, I've made the recommended PSU update from tinhead (thanks a lot again for your dedication), well half of it because I didn't had all components in hand and didn't got component needs to spend 40 bucks at mouser to get free shipping (In my country $40.00 USD is the minimum for free shipping)

I didn't had electrolytic caps, so no upgrade there.
The DC-DC Converter capacitors I used are tantalum Low-ESR TPSA106K010R1800
Yes, I know 10uF is not the recommended 47uF, but I think it's enough if the converter is not going to be used at full 3A rated current.
I think I've made a really nice dead-bug soldered module ;)

(http://img689.imageshack.us/img689/8016/dscn0406z.th.jpg) (http://img689.imageshack.us/i/dscn0406z.jpg/) (http://img268.imageshack.us/img268/5361/dscn0402y.th.jpg) (http://img268.imageshack.us/i/dscn0402y.jpg/) (http://img829.imageshack.us/img829/9393/dscn0410p.th.jpg) (http://img829.imageshack.us/i/dscn0410p.jpg/)

Module's trimmer is fine tuned to get 3.300v (if my meter is well calibrated, which I think so)
Unfortunately I didn't took screenshots of the same signal before and after the mod (after the mod I executed a self-calibration)
Maybe it's my imagination, but I really see the waveforms (of the current project I'm working on) with less noise and they look better!

Happy hacks everyone !!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 13, 2011, 12:40:49 pm
Some ppl asked how the DSOs will get manufacturer calibrated, so i decided to look inside the fw.

What i found is nice feature allowing to extend the analog bw. As already said before these DSOs are using variable gain amplifier in
the input stage in combination with digital filter to cut the bw. Each model is having then two kind of settings within the firmware,
the vag opamp settings and digital filter max corner frequency. We can't (easily) manipulate vag settings, but we can use
something what will be afaik used for test and calibration to change the max bw.

How it works:
simply create a file "tst" in root directory of the DSO OS (/tst), edit this file like following

[filter] x

where x is the digital filter max corner frequency (it will be normally read from model, where for example DST1102B
is setting the x to 10 (x10) = 100MHz. This "tst" file is overwritting (temporairy in the memory, so no change to firmware)
the model based settings, so you can use higher values. Of course the VAG opamp will not allow to have flat frequency
response but you will be able to do e.g. FFT or avg. sampling up to 450MHz.

Everything above 450MHz didn't really matter, the overclocked ADCs can not handle much more.
With such setting ( [filter] 45 ) in the tst file my DSO is allowing to capture 400MHz singnals (with -15db attenuation )
and 300MHz signals (with -9db attenuation).

The best rise time with such mod is about 1.05ns (pulse generator), giving 333MHz bw which seems to be
good but in principle we have still -3db on 220MHz, -6db on 250MHz, -9db 300MHz, -15db 400MHz and falling (instead of digital
filter and vag based brick wall on 300MHz). I did used it for example to control 433MHz carrier signal,
which worked beautiful.

So it is not a true bw hack, but at least something. If you don't have another high bw scope and wish to measure/control
higher freq. this solution is good enough. The hadrware freq. counter (in the bottom status line) is anyway working
stable up to 410MHz.

Btw, the /tst file will be used after reboot - so create it and reboot to enable it. Other values works too, for example
if you wish to cut the bw for some reason. Afaik there are other interessting options like disabling of single
ADCs (might be usefull for those who have no warranty ...) or skew time calibration, more later.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mechatrommer on May 13, 2011, 02:25:29 pm
What i found is nice feature allowing to extend the analog bw. As already said before these DSOs are using variable gain amplifier in
the input stage in combination with digital filter to cut the bw...

where x is the digital filter max corner frequency (it will be normally read from model, where for example DST1102B
is setting the x to 10 (x10) = 100MHz. This "tst" file is overwritting (temporairy in the memory, so no change to firmware)
the model based settings, so you can use higher values. Of course the VAG opamp will not allow to have flat frequency
response but you will be able to do e.g. FFT or avg. sampling up to 450MHz.

Everything above 450MHz didn't really matter, the overclocked ADCs can not handle much more.
With such setting ( [filter] 45 ) in the tst file my DSO is allowing to capture 400MHz singnals (with -15db attenuation )
and 300MHz signals (with -9db attenuation).

The best rise time with such mod is about 1.05ns (pulse generator), giving 333MHz bw which seems to be
good but in principle we have still -3db on 220MHz, -6db on 250MHz, -9db 300MHz, -15db 400MHz and falling (instead of digital
filter and vag based brick wall on 300MHz). I did used it for example to control 433MHz carrier signal,
which worked beautiful....
let me repeat this post. this is interesting stuff and have been in my dream. so tinhead, is that means if the x setting is default to x10, then 400++MHz signal will not be able to be detected? ie low amplifier gain? badly attenuated by firm/software?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 13, 2011, 03:55:33 pm
let me repeat this post. this is interesting stuff and have been in my dream. so tinhead, is that means if the x setting is default to x10, then 400++MHz signal will not be able to be detected? ie low amplifier gain? badly attenuated by firm/software?


100Mhz DSO don't have to detect 400Mhz signals :) Sure, depends on scope and design you might see higher freq. signals,
for Hantek/Tekway 200MHz model the signal disapear from display by about 310Mhz, and actually you can't really trust
in what you see for signals above 250Mhz.

So for the "/tst" file:
x is equal to model bw/10, so for 60MHz models 06, for 100MHz models 10, for 150MHz models 15 and finally for 200MHz models 20.

The firmware is doing exact the same calculations (however tst file is overriding them). These settings are for digital filter (implemented in FPGA),
and such filter will be used by Rigol/Hantek/Tekway/Instek (together with VAG opamp) to realize the brick wall filter to reduce bw.

So in principle, during hack from 100 to 200Mhz the model name changes and as the filter is model name based it will be then set to a
specific corner freq. Unfortunately the VAG opamp settings are not easy to change (except bin patching), so to have flat freq. response
we can maximal set that what the firmware know as highest model (200Mhz for Hantek/Tekway, or 150MHz for Rigol/Instek).
No idea is there is a way for something similar like the /tst file on Hantek for Rigol/Instek scpes, they probably have to be bin patched.

On Hantek/Tekway we have Linux, and the manufacturer luckily implemented easy way to override the filter settings by the /tst file.
Maybe is not something for every day use, but i think it is nice to have. Sure it does work only for 4k short memory,
and for best waveform view avg. mode should be enabled (however 400Mhz signal doesn't looks worse than 200Mhz, only attenuated of course)
and yes it does only work for single chanel (as we need to sample 1GSs to capture 400Mhz) but for those who don't have sampling
scopes or fast analog scopes it might be useful. Even the auto settings works for 400Mhz signals. Sure, measurments results need
to be recalculated, but that's not a big deal (knowing the attenuation values for 250, 300 and 400Mhz).

For a full "300 or 400MHz hack" the VAG opamp part of the firmware should to be changed, therefore i will not call it "hack",
it is just a feature.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mechatrommer on May 13, 2011, 04:29:37 pm
100Mhz DSO don't have to detect 400Mhz signals :)
you are right. but 1Gs/s should be able to detect 400MHz according to Nyquist.

For a full "300 or 400MHz hack" the VAG opamp part of the firmware should to be changed, therefore i will not call it "hack",
it is just a feature.
for me , it is a hack... that not everybody can do. last question pls. by enabling 400MHz "feature" (ie disabling brick wall filter), will the lower frequency <=200MHz distorted, affected, contaminated? (or whatever you want to call it). edit: ok i just read about the why "dso bw limit", is to avoid noise, but how about flatness, is it affected?

if the answer is no, then i think this is the most stupidiest effort that the manufacturer did. even if the answer is yes, then they still the same by not giving access to user to enable/disable it. my 2cnts.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 13, 2011, 05:25:56 pm
100Mhz DSO don't have to detect 400Mhz signals :)
you are right. but 1Gs/s should be able to detect 400MHz according to Nyquist.

sure, 1GSs scope can do it, even more than this (however the waveform reconstruction will be not the best)
but 100MHz don't have to do it.

for me , it is a hack... that not everybody can do. last question pls. by enabling 400MHz "feature" (ie disabling brick wall filter), will the lower frequency <=200MHz distorted, affected, contaminated? (or whatever you want to call it). edit: ok i just read about the why "dso bw limit", is to avoid noise, but how about flatness, is it affected?

if the answer is no, then i think this is the most stupidiest effort that the manufacturer did. even if the answer is yes, then they still the same by not giving access to user to enable/disable it. my 2cnts.


well, a blue led instead of red is also hack, so you right.

It can be done by everybody who did hacked via UART, because all you need is to connect to the DSO, killall dso.exe,
create the tst file in root dir with [filter] 45, save it and restart dso application by /dso.exe.
You should then see status message "get corner freq ID =45 from filetst ok"
If this works, you can reboot DSO and enjoy the additional (attenuated) bandwidth.

Sure, there is some additional disortion coming from the higher freq., it have to be there anyway,
therefore the avg. mode or equi. sampling should be used for such measurments.

If you don't have necessary equipment to measure for example 400MHz signal this solution will help you,
it is maybe not a every day situation anyway.

The manufacturer have impelmented user selectable digital filter, but the max freq. is on Hantek/Tekway 247Mhz
and it is an additional filter and not the real bw filter. With the custom SDK, which i hope will
be released soon by the forum user "censored for now" everybody would have a chance to implement
for example a simple shell script to enable/disable the /tst file.

As i have my DSO on the network a quick remote execute is good enough for me for now.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mechatrommer on May 13, 2011, 05:38:35 pm
If you don't have necessary equipment to measure for example 400MHz signal this solution will help you,
yes sure, very sure! it will help alot! -15db is better than nothing. and as you have indicated in earlier post, it did help you.

it is maybe not a every day situation anyway.
yes sure it will not be everyday. but could be a saviour on one particular project in a month.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: saturation on May 13, 2011, 07:08:53 pm
A great discussion!  @colinbeeforth: your posts do get people thinking a lot.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mechatrommer on May 15, 2011, 12:51:39 pm
if the answer is no, then i think this is the most stupidiest effort that the manufacturer did. even if the answer is yes, then they still the same by not giving access to user to enable/disable it. my 2cnts.
i'm sorry. there was a misunderstanding. i was in emotional state that i thought my dso is the same as the discussed hantek. it turned out they are different. but my previous points still stand.

edit: tried to find hantek dso user manual in google but unsuccessful. instead i found this thread is mentioned in hackaday (i did search if its mentioned here, but no) http://hackaday.com/2010/11/24/double-the-hertz-double-the-pleasure/ (http://hackaday.com/2010/11/24/double-the-hertz-double-the-pleasure/) i havent read all the lengthty replies there.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 15, 2011, 02:32:11 pm
if the answer is no, then i think this is the most stupidiest effort that the manufacturer did. even if the answer is yes, then they still the same by not giving access to user to enable/disable it. my 2cnts.
i'm sorry. there was a misunderstanding. i was in emotional state that i thought my dso is the same as the discussed hantek. it turned out they are different. but my previous points still stand.

edit: tried to find hantek dso user manual in google but unsuccessful. instead i found this thread is mentioned in hackaday (i did search if its mentioned here, but no) http://hackaday.com/2010/11/24/double-the-hertz-double-the-pleasure/ (http://hackaday.com/2010/11/24/double-the-hertz-double-the-pleasure/) i havent read all the lengthty replies there.


different ? now i'm lost :)

Hantek user manual is here
http://www.hantek.com.cn/Manual/DSO5000Series/DST%20B%20Series%20Digital%20Storage%20Oscilloscope%20User%20Manual(Ver0.9).pdf (http://www.hantek.com.cn/Manual/DSO5000Series/DST%20B%20Series%20Digital%20Storage%20Oscilloscope%20User%20Manual(Ver0.9).pdf)

Tekway user manual
http://www.tekwayins.net/pic/DST%20B%20Series%20DSO%20User%20Manual(Ver0.9).pdf (http://www.tekwayins.net/pic/DST%20B%20Series%20DSO%20User%20Manual(Ver0.9).pdf)

both have exact the same erros, like wfrm/s (2000 but in real 2500, mentioned in product prospects, review and on the website)
and are of course not updated since 2yrs ... which of course sucks, on the other side why they should update manual if the firmware is chaning weekly.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mechatrommer on May 15, 2011, 02:43:38 pm
different ? now i'm lost :)
coz mine is rigol :P i thought they come from the same root. i should have check the feature earlier. thanx i got the manual already. i was searching dst1102b keyword earlier.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 15, 2011, 02:49:30 pm
different ? now i'm lost :)
coz mine is rigol :P i thought they come from the same root.

ahh, ok. In principle the digital filter and vag opamp are used in exact same way on Rigol, the stupid thing is that
it is hard to change anything there due the DSP bios (instead of Linux like on HanTekway).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: drieg on May 15, 2011, 08:07:08 pm
"Take it apart!"  ;)

Tekway DST1062B, PCB Ver1.00.5 2010/11/30...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: flolic on May 15, 2011, 08:23:48 pm
Drieg, a little explanation?
You removed BGA package, why?  ;D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: drieg on May 15, 2011, 08:44:45 pm
...because I like to know how things work and it's easier like this unless you have x-ray eyes ;D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mechatrommer on May 15, 2011, 08:55:56 pm
You removed BGA package, why?  ;D
look at the avatar.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: flolic on May 15, 2011, 09:13:36 pm
look at the avatar.

Mecha, I know Drieg is our scope doctor  ;)
But I expected more specific answer from him, like "I removed that chip because...."  :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 15, 2011, 10:52:07 pm
Everything above 450MHz didn't really matter, the overclocked ADCs can not handle much more.
With such setting ( [filter] 45 ) in the tst file my DSO is allowing to capture 400MHz singnals (with -15db attenuation )
and 300MHz signals (with -9db attenuation).

The best rise time with such mod is about 1.05ns (pulse generator), giving 333MHz bw which seems to be
good but in principle we have still -3db on 220MHz, -6db on 250MHz, -9db 300MHz, -15db 400MHz and falling (instead of digital
filter and vag based brick wall on 300MHz).

The "tst" file hack:

i did measured it again, this time with active x10 500MHz probe terminated on 50Ohm instead of direct connection from
signal gen to dso (of course terminated) as in the results above.

As the probe is x10 the DSO internal compensation will be not used, giving a bit better response (filter = 45),

100MHz = 0db
150MHz = 0db
200MHz = 0db
250MHz = -3db
300MHz = -6db
350MHz = -9db
400MHz = -12db

which is really nice (easy to calculate measured vs. real values). I did measured with sinus and square waves, there is about ±0.5db
between both which is fair enough.

The scope internal compensation didn't really work proper above 250Mhz giving fancy results, so it make no sense to
use x1 probes with this hack (above 200mv/div) which i think is good enough for 99.99% applications.
I think the compensation circuit could be adapted to work properly, but honestly i don't see any reason to do this.

So in principle, with proper probes, it is a 250MHz bw hack. For me, as already mentioned was not the extra 50MHz
important but the chance to measure 400MHz signals.


"Take it apart!"  ;)

Tekway DST1062B, PCB Ver1.00.5 2010/11/30...

heh, great, thanks for this picture.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: colinbeeforth on May 16, 2011, 08:22:16 am

Hi tinhead, and all,

Quote
if you count like that, you should count what behind the menu, the scope is always using this area, menu is only overlay displayed (click F0 to hide it).

Ah, thank you!  I had not noticed this.  When you remove the menu display, the trigger point on the screen moves, and I had assumed that it was simply scaling the 16 divisions to fit across the larger screen.  I am totally amazed, now it has 19.5 divisions!  What a strange number, although I can see why, they stick with 40 pixels wide per division.  Whoever devised this system originally must have been taking LSD - 19.5 divisions is so weird. *laughs*  Why supply expensive hardware and acquire waveform in memory, and then cover some of it up most of the time?  I use menus all the time, and so will most users.  I hardly ever switch them off, so the extra 3.5 divisions is a waste of design effort and complexity for no gain.

This gets back to a fundamental aspect of design philosophy.  Call is Colin's law of DSOs if you like!!! *laughs*   However, it is a common principle in many fields, particularly aerospace.  All instruments and DSOs should work so that if the customer is inexperienced, and reacts by doing nothing, he/she will get the best result anyway.  How this would work with the Hantek/Tekway scope would be to remove the 'menu off' F0 button, and leave menus always on.  The software would be simpler, as there is no exception mode.  Show the whole acquired waveform on the available space at all times.  That way, you never have to know anything about the DSO to get it to work at its best.  Why even have a non-menu-shown expanded mode?  It doesn't really contribute much, apart from 2 cm of extra screen space.  Simpler all round and no animals would be harmed!! ;D

This is one thing that intrigues me about the Hantek/Tekway design; 16 divisions (in menu mode), the 2, 4, 8 sequence of timebase settings, all look like it was designed by a programmer used to binary and software, not by a scope engineer.  Partly, I like the fact that it breaks old concepts and shows a willingness to try new things, but also, there are quite a few aspects of this scope that are odd or don't work very well.  It makes me think that the designer didn't have a lot of experience with other DSOs, so wasn't sure of the best way to do many things.  *shrugs* Like you said, we will probably never know.

Quote
Generally spoken this didn't matter because of ADC hold function, the waveform per seconds time (up to 2500 wfrm/s) is describing how fast the data will get collected and processed, the dead time between can be used for whatever (haven't analyzed how this actuall design works) - the DSO can continuously sample until 4k are full or it can sample/hold every 1ns The FPGA can handle both, that's only 8 x 8bit data, refreshed every 125MHz on each ADC where the FPGA can sample i/o with 250MHz.

Not sure what you are trying to say here?  The waveform update rate isn't very important to digital scopes, despite the fact that some mainstream DSO makers try to get you to think it is the only number that matters - it is in their interest to promote their banner spec and get you to ignore so many important things that affect the usefulness of a DSO.  They appeal to our natural desire for simplicity, but it is always a mistake to accept at face value what a salesman is telling you!!  I know, I was one!!  I try very hard to get people to think about DSO operation and specs.  There are many factors, DSOs are not simple!  They cannot be, and they are not an equivalent of an analogue scope.  I think they should be called something else, because they do not work like an analogue scope, but I also realise that this is hoping for too much, the name DSO - we are stuck with it now.   A buyer must know quite a lot to be able to make an informed choice.  This is even more important now since low cost models are becoming available with many built in compromises.  Before, you could trust the big makers to not screw it up too badly, although there were big name DSOs that really weren't very good during the early days of DSOs.  Any DSO will work for a school teacher to show a sine wave.  But to use it, even in hobby deign or repair work, it won't do the important things you really badly need.  Why spend money on a DSO when a cheap analogue scope will do as well and be much easier to use??!!

As another thought about update rate... what is the response time of the LCD display, and how fast are its pixels updated?  I don't have a model number or spec on the display LCD used int he Hantek/Tekway DSOs.  If it is typically around 5mS pixel response time, the fastest update rate that can be seen is limited by the LCD response rate.  1/5mS =2000 changes black to white per second = 1000 hertz of a waveform.  So, the fastest that any pixel can turn on and off, is 1000 times per second.  It makes the very high waveform update rates that Tek and HP have been quoting pretty pointless I think.

I'm not saying update rate is unimportant, just that there are other factors, and some of them are more important.  Update rate does become irrelevant, if the DSO triggers on the feature you want to see.  The real banner spec that differentiates digital scopes from analogue is storage and single shot use.  Update rate is irrelevant to single shot use.  If update rate matters so much to a DSO user, they'll get much better results from an analogue scope.  It only becomes an issue if you have no analogue scope and are stuck with a digital scope as your only tool.  That's another reason why it would be more rational to call digital scopes something else, then inexperienced users wouldn't be fooled into thinking that a DSO is a replacement for an analogue scope.

The Hantek/Tekway screen is 800 x 480, which is enough to be useful, at a reasonable cost.  More vertical resolution would have given the designer more flexibility/  A vertical acquisition is 8 bits, so there are 256 steps, and that can be fitted into the 480 vertical with one_pixel = one_step plus borders etc, quite nicely.  Scopes with vertical resolution less than 256 pixels have a difficult job showing a smooth waveform like a sine wave nicely without showing jaggies.  This does bring up another issue, screen alias.  The actual DSO sample rate while very important for some things isn't relevant for this discussion, if you decimate acquired_memory to fit into a limited number of horizontal pixels, that is a form of sampling also, so alias can occur at the pixel level of the screen, unless some tricks are used like memory_to_display_compression_algorithms.  So alias can happen even just showing things on a screen - it's sampling after all!  That's another reason for my opinion that the Hantek/Tekway screen of 800 horizontal pixels is a reasonable decision.  My LeCroy is 810 lines, with vertical raster scanning!! Yes, it's quite unusual, but it achieves 810 x 696 on a common CRT using cheap raster scan and cheap TV monitor components.  The earlier models used full vector display with no raster scan at all, and gave superb displays, but at an impractical cost.  Having seen and used the earlier LeCroy 94XX series, the 93XX was a reasonable compromise, but it was clearly a compromise, the 94XX screens were beautiful to see and being true vector, made lovely waveforms.  It took a large board chock full of expensive ICs to do it though.  Raster scan wasn't as nice, but it was adequate, so long as the resolution was high enough.  Likewise, I reckon the Hantek/Tekway at 800 x 480 is a reasonable compromise and the addition of colour does help with contrast and waveform identification.  With the earlier LeCroys, the eye saving orange phosphor was ok to use long term, but the lack of colour to identify waveforms could occasionally be a nuisance.  Being able to split the screen vertically into 2 or 4 separate graticules was a big help and largely avoided the need for colour.  Hantek/Tekway are perhaps limited there, since they have fewer vertical pixels, although I would have thought the LeCroy way of doing 2 sets of graticules on one screen would be acceptable on the Hantek/Tekway display.  Again, it's like the original designer of the Hantek/Tekway system didn't know much about what other scope makers had found effective in the past.

On a related subject:  I have an older HP54601A, it was given to me by a very kind colleague, although it had a few faults at the time.  I fixed the faults although that took time and special effort to get an IC that was obsolete, so it shows how even big manufacturers get hit by obsolete chips.  Seems to me that many pieces of equipment are having longer lives than the chip makers would have guessed, as many ICs are made obsolete well before the equipment is gone.

I use the HP DSO it for certain jobs.  It was a major step in the early development of DSOs, when HP were able to produce a low price point DSO that sold heaps of them to schools.  It had a really big green CRT screen, and that is why I use it, my eyes are getting older and big screens with good contrast help.  It has only a very short acquisition memory, so it is quite limited for many jobs.  I use my LeCroy 9310 for any serious work though, and using the HP for simpler jobs and that saves the LeCroy.  The LeCroy is a much larger box and eats up my bench space quickly.  Also, if the LeCroy has a failure, I won't be able to afford a LeCroy replacement or even to fix my 9310 - parts are becoming very expensive for them now, and parts obsolescence is a big problem.  Anyway, this explains why I have some experience with other DSOs.  Also, I had to do serious spec comparison in DSO sales situations, I also have experience with using different DSO designer's concepts.  I don't have any experience with using the most recent models of DSO from the bigger makers, but from some long discussions on this forum with other users I am led to believe that the newer range of HP/Agilent scopes are attractive.  I've also used Tek over the years, and have respect for their fast analogue designs, but I'm afraid I don't like their lunchbox DSO designs.  Even the expensive models (over $3k Australian) don't have any sort of acquisition_memory_to_display_compression_algorithm.  I have an email from Tek support in the USA confirming this, I didn't just dream it.  In other words, if you acquire more than about 320 data points, it must be compressed somehow to get it onto a small number of horizontal pixels of an LCD display.  Most of the earlier LCD displays are 320 wide by 240 (234) high.  So how do Tek get the larger memory to display on the limited number of LCD pixels?  They decimate the available memory data and only show a small percentage of the data on the screen.  For example, if they had (imaginary numbers) 3200 data points, they could show 320, so only 1 in every 10 points is actually displayed.  If there was a glitch, 3 data points wide, and it fell into the 9 out of 10 that didn't get shown, you won't see it on the display.  When I asked the Tek sales-guy in Australia about this, he almost shouted the mantra "but the data isn't lost, it's in the memory and you can see it any time by using waveform zoom".  Now, that is quite true, but why would I go through the often tedious process of winding the zoom pot many turns to perhaps see something that <might> be there, but I saw no evidence of in the first immediate view?  In reality, you will get sick of doing this <for every single acquisition you make>!!  In practice, decimating acquired_memory to fit it onto a small low resolution display is not a good idea.  It is easy on your hardware, so convincing your customer to accept it, saves you cost on hardware so you make more profit.  I prefer engineering the equipment not the customer...  The problem becomes far worse the bigger the acquired memory becomes, yet long memory is incredibly useful for tracing data on serial lines like USB, RS232, I2C...  LeCroy 94XX and 93XX series have always used a proper acquired_memory_to_display_compression_algorithm, which I suspect is why some makers have made such a <big thing> of waveform update rate.  LeCroy take a complete data acquisition run, then break the memory into bins, if the display is say 600 horizontal pixels there are 300 bins.  In each bin they sort out the highest voltage and lowest voltage, and display them on two pixels.  That way, if any amplitude deviation, even one memory bit wide is a high or low flyer, you will see it on the screen.  It won't be a fully accurate representation on the low res screen, but you will see something that will grab your interest, and then you can zoom to see exactly what it it.  That's why the "waveform update rate" is lower on older LeCroy DSOs, because they are taking the time to show you everything you need to know.  That's why I have never owned a Tek DSO.  I can't stand the thought of a glitch being there in the memory and not seeing it immediately, the concept frustrates me just thinking about it, you actually captured the event you want, but can't see it...

I have it confirmed from Rigol, that they decimate their data for display the say way Tek do.  When did a designer ever get sacked for copying Tek?  I still don't think it is a best_practice concept though.  I have it confirmed from GWInstek that they have an acquisition_memory_to_display_compression_algorithm in at least the GDS1000A series DSOs and perhaps other models.  I have seen a demonstration of a Tekway DSO that proves there is some sort of compression algorithm being used - although I have no idea how it works, but it does show very small features in a long memory acquisition on a much reduced number of horizontal display pixels.  I'd love to know how such a system works.

OK, so maybe that is enough for now.  Like I said, the true usability of DSOs is not simple, so the Chinese makers are doing the users a dis-service by not explaining in more detail how their scopes work.  I can understand why they would be concerned about telling their competitors what they are doing, but if they don't tell their customers how good they are, maybe the customers will go elsewhere also.  It all comes down to users becoming better informed and choosing wisely.  For many end users, I can understand why this won't happen, since their applications are undemanding and they don't care to understand a lot of complex details.  At least one well know manufacturer has made a fortune selling scopes that in my personal opinion aren't very clever at all.  Many manufacturers have copied them.  There's no doubt in my mind, that making a lot of noise and shouting about a couple of banner specs wins the day for their sales ledgers.  It all depends on what you are using a scope for.  Final test instruments for an electronics manufacturer, or for a field service technician following a "set this, set this, read waveform" sort of handbook, a cheap poorly designed DSO will do enough to complete the job.  When you don't know what will drop on your workbench tomorrow, or what you are going to be building next month, or working in a research lab, it is a different matter.  Even computer monitors use data speeds that were dreams only a few years ago.  DSOs need a set of design features that makes the scope as flexible as possible, so it earns its price and never leaves that nasty feeling when you simply can't see what you need to see to solve a problem.  In the end, it's the tricky problems that cause you grief, and that's what you spent your money to solve, what's the point in having spent money on a DSO that can show you nice sine waves, which you already understand, but won't show you the spike that is really what is causing the unexplained behaviour of a micro you are working on?  You didn't spend the money to show sine waves, but to show you the things that weren't expected...  LeCroy's early scopes excelled at this, finding things that weren't expected.  They were builders of high energy physics instrumentation first, and I think that motivated a lot of their early work.  I'm not sure the market is the same now, but end users are.

We still need to know that what's on the screen of a  DSO screen is true, and know it will earn its keep in the future when it gets thrown jobs that no-one anticipated.

The Hantek/Tekway is the first cheap DSO I've considered worth spending money on, but the operating software is disappointing in quite a few areas.  It could be so much better!

Cheers, Colin
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mechatrommer on May 16, 2011, 09:02:59 am
i think it boils down to performance vs cost. as you say it yourself...
It reminds me of the old engineer's saying, you can have good, fast, and cheap, pick any two!
dso maker (hardware and software) can struggle to maximize and perfect the performance. but later they will charge exponential. or they (engineers and management) can ignore it, and let it flow/blend/balance with the market (profit vs cost). its called business, a "contaminated engineering", imho.

you can buy a perfect scope, or buy hantek and get involved in this thread. pick one.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 16, 2011, 12:34:28 pm
Colin,

there are only 19 divs, you miscounted it. We have also 760x400 effective points on the display.
Why ? Probably easier to divide. Of course it could be fixed view area with a bit larger display,
like on Agilent DSOX but on the other side the F0 Menu On/Off marking is big enough to see it :)

To understand why Tekway chose 800x480 display (or why some things are like this and not different) we have to look back.
They new on the market, so probably they started DSO development from business point of view:
- take µC/DSP platform which is wide available and cheap
(Samsung SoC instead of TI DSP - to be different/better and cheaper than competitors)
- create something "known" but at lower price
(like Tektronix clone)
- chose nice company name assiociated with something ppl know.
(like Tek-way ...)

So Tekway was born, and of course the first product was Tektronix clone. They even made some advertisement
like "our Tektronix clone - but cheaper". I do have such Tekway DST1102 too, you can blind navigate through
menu if you know Tektronix TDS2012 - but of course exact the same disadvantages - slow display update rate,
crap display and 2500 points memory. You can still buy some of these DSOs - designed for chinese market (only chinese fw).

However Tekway realized that ppl don't need another one Tektronix clone - to have a chance on DSO market you have
to develop something better than (chinese) competitors. So the actuall series was born.

To not start from scratch they decided to continue work and improve their DST1000 platfrom.
So instead of Samsung S3C2410 (266MHz) like on DST1000 then chose S3C2440 (400Mhz), added external SRAM and CPLD,
faster and bigger FPGA and bigger display. If you look on the Samsung SoC dev. board market you wil find out
the common biggest display at that time was Innolux AT070TN83 - they wide available, good quality and cheap displays.

All these steps are typical for someone who just started on DSO market, they will need some time (or well, with the Hantek
merger they actually got a "good" name, or at least known name) to be real DSO developers/manufacturers.
However, if i do compare to comeptitors they already better than all of them together (uni-t, atten, rigol) - at least on the paper.

Sure, these firmware bugs are not nice - but the platform is good, so it is easier to fix firmware bugs instead of "fix the platform".
I know that earilier firmwares were working much better, sure with some small bugs around F7 button but everything else was ok.
The "disaster" started as they decided to implement more features, more languages, more menu options and tried to
fix alread known small bugs ... i do undertood why they did it:
- missing features vs. chinese competitors products
- Hantek ruled multilanguage product policy
but honestly don't know why they decided to use not stable firmware version for end user products.

Anyway, maybe they learned from Microsoft ("field evaluation" engineering) and as you said
"designed by a programmer used to binary and software, not by a scope engineer" - so if you don't knwo what
ppl really need develop "something you think it might work" , let end user test it and decide later based on feedback.

If you look on competitors - e.g. UNI-T - they realized very fast "we need bigger display", but instead of display with
biger resolution they chosed bigger display with small resolution, removing all informations from website ... as ppl realized
they got cheatted uni-t promissed to fix the firmware. One year later and after 4 firmware updates no changes on the
display - and probably they will never fix it - the platform is not good enough for better resultion.
Rigol/Atten - they have to start from scratch too - the DSP/display controller platform is not good enough to
handle bigger resolutions, Rigol decided (at least until now) to not cheat customers and is still producing DSOs with 320x240
and "small" display, ATTEN/Siglent did same as UNI-T - big display with small resolution (yhear, the typical buyer will not even recognize it).
The worse part of the story is that many ebay/china shops are selling these Atten/Siglent/UNI-T DSOs under
"big resolution 800x480 DSO" - which isn't truth. As we can see "fix the platform" is not easy step.

Back to "topic" - of course is Tekway/Hantek not a real DSO manufacturer, they doing great job and let's hope they will
fix firmware issues. I know them and i know they doing everything necessary to fix it - however i can't vouch for.

I don't know why all chinese manufacturers hiding details of their products, there is nothing to shame about.
If a product does not have something implemented, well who cares, the truth is better than "cheatting".
Probably they learned from the wester-world competitors - if you need to know something "bad" about
Tektronix - don't ask them, ask Agilent - and vice versa of course. I remember these nice LeCroy
presentations - "refresh rate didn't matter, do single shot and you can find the spike with our software".
Sure, i would probably said the same if my product is slow refreshing. Of course the actuall HanTekway 2500 wrfm/s
are not much, but better than 800. It was not all that long ago that Tektronix prodeuced DPOs with similar refresh rate,
even current low range models are not much better at all. Or look on Hameg - no single word about refresh rate,
but copmetitors know it of course, and yeah it is on Tekway/Hantek level. If you look on my first post in this thread you
will see i was looking for "replacement" for my broken TDS754D. To be very i bough the older Tekway model and was
disapointed (currently using it as DIY Spectrum Analyzer), then bought Tektronix DST2012 - again very
disapointed (luckily i bough it very cheap, with broken front and display). Then i started again to look around chinese product,
tested some and finaly decided to use Tekway. It can't repalce my old TDS754D, but is a good enough.
Today i would probably buy 70Mhz Agilent DSOX2000 (and hack it to higher bw) or Tekway - even with these firmware bugs -
because of the potential within this hardware/software platform.

It is all about the price vs. features. On the other side there is no warranty that high end scope will have perfect firmware,
actually you can buy one of the R&S scopes and you will see how perfectly they freezing every two days, there
are other DSOs with known issues too, nobody is perfect.

So what, good value for money ? Sure, and it does have potential, but jesus, some of the firmware issues need to fixed asap.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 16, 2011, 09:27:34 pm

Not sure what you are trying to say here?  The waveform update rate isn't very important to digital scopes, despite the fact that some mainstream DSO makers try to get you to think it is the only number that matters - it is in their interest to promote their banner spec and get you to ignore so many important things that affect the usefulness of a DSO. .....

I think they should be called something else, because they do not work like an analogue scope, but I also realise that this is hoping for too much, the name DSO - we are stuck with it now. ......

As another thought about update rate... what is the response time of the LCD display, and how fast are its pixels updated?  I don't have a model number or spec on the display LCD used int he Hantek/Tekway DSOs.  If it is typically around 5mS pixel response time, the fastest update rate that can be seen is limited by the LCD response rate.  1/5mS =2000 changes black to white per second = 1000 hertz of a waveform.  So, the fastest that any pixel can turn on and off, is 1000 times per second.  It makes the very high waveform update rates that Tek and HP have been quoting pretty pointless I think.


Colin,

i miss to answer the part above ... so here we go.

the biggest advantage of analog osciloscope was that you could see the real waveform (generally spoken, because even with analog scope you
can measure bullshit) or beautifull random spikes on the phosphor ... the biggest disadvanted was the missing memory. Sure there are some combination
between both techs possible, but let stay on basics techs.

The biggest advantage of DSO is the memory, and vice versa to analog biggest disadvantage are the blind times between sample cycles
caused primarly due serial data processing (-> acq. data -> calculate waveform -> move data to µC -> display data ->).
Even if this process look like a "flow", it is combination of steps, with dead time between, which of course accumulate
to a very high total blind time.

The common misunderstanding is the waveform refresh rate, it does not have anything to do with actual display refresh,
from that point of view everything about 25-200frames/sec should be sufficient. It does have only something to do with the
time the DSO need to acquire, calculate and display the data, which is very slow on typical DSO due the serial process flow.
Same of course for DPOs , however they have significant differences to typical DSOs.

To have a real time digital scope (like a analog scope) we need to process 1000000 waveforms per second.
(Btw, the TDS754D is doing 80000wfrm/s, but only when single channel selected and 50point/frame,
with 5000point/frame and two channels enabled it less that 4000wfrm/s - not that far from HanTekway's 2500wfrm/s
in dual chan and 4000point/frame)

If you compare it to lower range Tektronix DPO with 5000 wfrm/s that's only 0.5% of what really happens and 99.5% blind time
(or 99.75 blind time for Tekway/Hantek ... or 99.92% for Rigol ... or 95% for Agilent DSOX 2k).
So what, is this data important ? Sure, if you have to capture glitches it is important - statement like "with Tekway you have 300%
more chance to capture glitch than with Rigol ..."  funny heh, but it is actually truth.
If you have to watch endless sinus, a 20$ cheap toy-dso like Nano is good enough.

Tekway/Hantek DSOs are more like Tektronix DPOs, the data will be collected and rasterized - the resulting data accumulated and displayed
where spikes/gltiches with less occurrence will get displayed darker and more occurrence brighter to simulate phosphor.
Sure Tek DPOs are doing this job better having 256 stages (Tekway only 16), but it is the same idea.
(Note the difference - typical DSO is not rasterizing and accumulating data, so to see a glitch yuo have to wait
actually until the glitch happens within the sampling window - and then of course it will get display in same color/brightness as normal signal, so it might
, depends on glitch, misslead you)

As this process is (more or less -depends on the implementation) parallel on a DPO, the amount of captured data is higher than on typical DSO,
reducing blind times. The display refresh rate is a different story, lower range Tek DPO is doing display update with 30Hz
(where still the data will be collected, rasterized and moved to the display memory to get accumulated - and that with 5000 wfrm/sec).

Tekway is having 30/40/50Hz and auto (which is autoresponding refresh rate based on event occurance - it is actually good for XY, i pref. to use 50Hz)
display refresh rate (where still like on Tek the data will be collected, rasterized and moved to display controller to get accumulated with 2500 wfrm/sec).


As you own LeCory - for yrs LeCroy was not able to deliver scopes with high wfrm/s rate, they saw it only as Tektronix marketing gag (well, a drunken driver will always tell you others are responsible, he will be alway the best driver in the world) and tried to sell scopes via "big memory" marketing trick.
Sure, sufficient memory is important, but actually you can't sample with 1GSs for minutes (which you will need to see few khz glitch on Rigol/lower cost LeCroy). Luckily this changed, LeCroy is having today scopes with high wfrm/s rate (and sufficient memory) - but we talk now about
chinese products which are comparable to 5-10yrs old middle range scopes (Tek/LeCroy/HP) or even todays lower range Tek/LeCroy/Agilent scopes.

If you have enough money, you can get a good one digital scope which will be better than analog one, but honestly i prefer to drive a nice car
and work on lower/middle range equipment.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: dfnr2 on May 17, 2011, 10:44:23 am
Of course it is good to maximize the refresh rate, but the examples in the HP ads are very artificial.  First of all, those high rates only apply at the shortest sweep rates with the shallowest memory.  Second, you still have to sit there and watch the screen for really rare glitches (1/hr), and unfortunately, you don't really get to choose your glitch rate.  True, if you have 1M waveforms/sec, you may see a glitch that happens 1/hour, and with 1K waveforms/sec, you may never see it, but neither will see a glitch that happens 1/day (without a stakeout), and nobody will look for glitches using that technique.  You will look for events around the glitch and trigger on those, then hunt for the glitch, or you'll try to trigger on the glitch.  Then you check every so often, go home, sleep, check in the morning.  Once you've confirmed your glitch, regardless of update rate, you may want to troubleshoot the cause, which may require triggering about the glitch, and capturing signals.  When you're capturing and analyzing signals, waveform update rate is irrelevant. 

In general, given a choice between a scope with very deep memory, sophisticated memory architecture (segments), and sophisticated triggering versus high waveform rate, I believe the first option would be by far the more useful and versatile scope for most engineering applications.  If you can trigger on the glitch, you prove it's existence, and can explore other waveforms.  Or, you can trigger on the symptom, and find the glitch in memory.

Additionally, the majority of debugging does not involve hunting for gitches; you're more often looking at highly reproducible, deterministic behavior.  In this case as well as the intermittent events, great triggering and deep memory are a boon.  That's why those old Lecroy scopes are such a great deal.  They've got fantastic triggering capability and (even by today's standards) incredibly deep memory with segmentation ability, and are typically much cheaper than similar bandwidth/sample rate HP and Tek scopes with 1/100 the memory, no segments, and less powerful math and triggering.  (According to TeraPeak, last 90 days Ebay final sale prices of 2 working LeCroy 9354 scopes was $300 and $500; and a tek TDS754A was $2600).

Dave
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 17, 2011, 11:50:36 am
Additionally, the majority of debugging does not involve hunting for gitches; you're more often looking at highly reproducible, deterministic behavior.  In this case as well as the intermittent events, great triggering and deep memory are a boon.  That's why those old Lecroy scopes are such a great deal.  They've got fantastic triggering capability and (even by today's standards) incredibly deep memory with segmentation ability, and are typically much cheaper than similar bandwidth/sample rate HP and Tek scopes with 1/100 the memory, no segments, and less powerful math and triggering.  (According to TeraPeak, last 90 days Ebay final sale prices of 2 working LeCroy 9354 scopes was $300 and $500; and a tek TDS754A was $2600).

most EE even don't know how to proper measure things they not work with daily. LeCroy 9345 is for sure good value for money, as my Tek died i didn't saw any reason to buy expensive replcament parts for such old device (you never know what next). I was thinking about other brand named used scopes, but again - you never know what you buy, so finally decided to give a chance non-brand named manufacturer.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: dfnr2 on May 17, 2011, 03:50:05 pm
good one, go home and sleep a bit :)
Done  8)

All that being said, having used scopes for digital, analog, and RF design, and for MRI pulse sequence development, I think one can do most of the stuff you need with triggering no fancier than the current crop of chinese scopes, and deep memory.  That's why I'm fond of this little Hantek--It's tiny, silent, with a stunningly beautiful screen, nice control panel, and has enough features to accomplish a lot of design, service, or testing work, even for a pro.  The screen really makes a difference.  I'm rooting for Hantek to open up the code; but barring that, to start fixing the bugs.  I believe they will--they seem very responsive to their customers.  I would imagine that a good software base and a good HDL base could form the basis for a profitable series of scopes for years to come.

Dave
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 17, 2011, 06:18:09 pm
well someone have to convince the shareholders, actually they blocking any open source / SDK ideas,
which is really "stupid" (stupid is maybe hard word, but there is a chance to have additional benefit and they just refusing it)

There is, except DSO nano, no open source DSO available on the market - and what a supprise, many ppl bought DSO NANO
even knowing that the performance is really poor, but the idea of "to be involved" in something (or well, or have a chance some day)
is fooling ppl and increasing the sales numbers. Another one example - Wittig DSOs - even after the company stop to exists
ppl still developing firmware, for free. Sure they spend a bit longer than necessary to have real revenue, but only because there was almost
no support from manufacturer.

Sure good EE cost money, but actually there are enough good ppl who wish
to get involded - for free - in the Hantek DSO improvement.

Today, even a "open" source prostitute is getting more "customers", even if she already wide open.

Hantek is currently such conservative, they even don't want to supply schematics of the DSOs to official service providers.

So dear shareholders, think about it!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mechatrommer on May 17, 2011, 06:22:53 pm
Today, even a "open" source prostitute is getting more "customers", even if she already wide open.
LOL!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bilko on May 17, 2011, 07:09:06 pm
Now the concept of a relatively high spec scope based on Linux has been proven by Hantekway and the demand for an open source version has been established. I wonder how long it will be before another manufacturer will 'jump in' and sweep the rug from under their feet whilst the shareholders are still thinking about it. Wake up Hantekway, this is the 21st century, business is changing, you still have a chance to take advantage of the situation.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on May 18, 2011, 03:22:15 pm
Just talked to Pioneer Huang, the Aliexpress Hantek and Tekway seller and he told me that he will start shipping the english panel sticker he promised to his buyers in about 2 days, he sent me a pic:

(http://img713.imageshack.us/img713/8895/snv30823.jpg)
(resized within html tags only, save it to view it in high res)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 19, 2011, 03:00:17 pm
@new hardware revision owners

can someone test the /tst hack on new hardware revision ?

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 21, 2011, 10:39:49 pm
@new hardware revision owners

can someone test the /tst hack on new hardware revision ?

nobody ? Drieg ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: drieg on May 23, 2011, 05:55:31 pm
Unfortunately I don't have any 400 MHz source at hand at the moment, so I did test the tst file hack with my fast-pulse generator only.

First picture is original DST1062B, PCB v1.00.5, second picture shows the same unit with the /tst file ([filter] 45) after reboot. The [filter] parameter obviously changes the VGA settings, it has no effect on varicap bias in low pass BW filter.

Although the input circuits are almost indentical for Rigol DS1052E and Tekway DST1062B, it seems the BW control is done in a different way. Tekway don't use primary the low-pass filter with different varicap bias, they're changing gain of input VGA. As tinhead mentioned earlier (e.g. here (https://www.eevblog.com/forum/index.php?topic=553.msg44517#msg44517)):

"Everything happens within FPGA design, where FPGA is talking to CPLD and CPLD is changing the gain of AD8370 (combination of digital low pass filter and gain control)."

This is probably the reason, why the fast pulse amplitude fluctuates on DST1062B while on Rigol DS1052E you can see nice stable pulse. Frankly speaking, I don't understand why Tekway/Hantek chose this way and I don't really understand how this can work when you need to capture fast single-shot signals. What is the single-shot bandwidth then? Based on what data is the gain calculated??
It might work for sinus, but how can this work for square with fast rissing/falling eges?

I've also found out, that the varicap bias in low-pass filter is still the same for DST1062B and DS1202B unit. They must do all BW control in VGA. The low-pass filter is used only for 20MHz BW limit on/off...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 23, 2011, 08:13:42 pm
btw, there is new firmware on Hantek website v2.06.3 (110420.0). However for some reason the dev team forgot to
increase version number in the executable itself, so after update you will still see v2.06.3 (110225.0).

However the dso.exe is from April 2011, so if you do an fw update don't wonder about not updated version number.

For Tekway user - there is no fw available to download, however Tekway is sending via email/support fw with exact same "error".


The firmware itself have only some code changes, no new functions.
From what i can see changes are in these parts of code:
- menu (measure, dual windows wave player, digital filter, recorder),
- language selection,
- data export (math),
- pass/fail,
- default setup,
- FFT draw,
- Wave draw,
- pc communication

Hantek said that this firmware should have language issues fixed (whatever this means, haven't checked because
i use anyway english only).

I think next time i will send an invoice to Hantek/Tekway, something like changelog seems to be too much for them
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: enclis on May 23, 2011, 09:14:30 pm
is there in v2.06.3 (110420.0) a bugfix with 1M samples saving? Can I upgrade my DST1062 with this Hantek fw?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 23, 2011, 09:48:01 pm
is there in v2.06.3 (110420.0) a bugfix with 1M samples saving? Can I upgrade my DST1062 with this Hantek fw?

no, the 1M csv bug is still not fixed. You can't directly use Hantek firmware on Tekway DSO, and vice versa.

What you always can od is to decrypt/unpack firmware content, and manually copy updated files
(this time dso.exe and the content of OurLanguages folder).

You can of course create own firmware upgarde file, but to be very honest to write an email to Tekway
support (our your fav. Tekway dealer) takes 1 minute and tomorrow you will get the firmware.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tom66 on May 23, 2011, 10:35:13 pm
Hi, Tinhead, a while back you said you had a schematic for the inputS... Well I'd be interested in seeing how these modern scopes are designed as I am working on a similar project on the back-burner. Thanks!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: colinbeeforth on May 25, 2011, 12:42:11 pm
Hi tinhead,

There seems to only be one version of firmware.  Is this the same for all 3 models?  Does it change the bandwidth or read some config file and leave bandwidth correct for each model?

Colin
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 25, 2011, 11:05:41 pm
This is probably the reason, why the fast pulse amplitude fluctuates on DST1062B while on Rigol DS1052E you can see nice stable pulse. Frankly speaking, I don't understand why Tekway/Hantek chose this way and I don't really understand how this can work when you need to capture fast single-shot signals. What is the single-shot bandwidth then? Based on what data is the gain calculated??
It might work for sinus, but how can this work for square with fast rissing/falling eges?

I've also found out, that the varicap bias in low-pass filter is still the same for DST1062B and DS1202B unit. They must do all BW control in VGA. The low-pass filter is used only for 20MHz BW limit on/off...

The digital filter does not have any influence on waveform as long the HF component necessary to rebuild the waveform is not filtered out.
It is by default set to bw limit, so the resulting waveform on the display looks similar as with analog filter.
The VAG is used in addition to control the flatness over the whole bw (it is hard to analyze the exact functionality)

Actually Rigol/Instek are doing exact the same, the analog low-pass filter is only an addition to what the firmware is doing
(plus of course the 20MHz filter functionality)

In principle you can add analog filter to Tekway/Hantek too, the waveform looks cleaner up to 20ns/div but as soon you switch to 8/4/2ns ADCs are running with 125Mhz which is producing some "nice artifacts" (amplitude changes). This isn't really bad design, as long the DSO is calibrated properly.
Especialy the factory calibration is very important, the self-calibration data is based anway on it (+ measured data created by DAC)

I did played a bit with the factory calibration, which is without internal information from dev team a real pain. I was able to increase signal quality (and
decrease drasticly). Haven't published anything about because it is not for everybody (yet? will see).

What the diff between Rigol and HanTekway is - well, Rigol is using 5 double ADCs running with 100Mhz, which is easier to synchronize (and reduce potential conversion errors). However, if you check Instek, they using 4 double ADCs like HanTekway - with no issues at all.

So you might ask what really different or wat is exactly the reason for the "nervous" signal ?

That's actually the the FPGA firmware itself. Where Rigol and Instek are doing 800wfrm/s (more or less serial), HanTekway is doing 2500 (more or less parallel).
Set your display refresh to auto or 30Hz, set avr to 4 and the signal looks close to what on Rigol/Instek. Sure pulse signal is still jumping around (well it is doing anyway, that's not a real stable pulse) but the reason is mostly in jitter/calibration. If you do single shot for 200MHz signal on a 200Mhz enabled DSO you will see that every second peak is having same amplitude (where by 300Mhz two ok, third bad and for 400 Mhz two ok, next two bad).
This is a perfect indication for not perfect synchronized ADCs (well, it will be never really perfect due the i/o pin jitter from the FPGA)

Anyway, HanTekway did updated the FPGA design for the new hw models for reason (let's hope they will still support and improve design for old hw!).

Btw, if you look in detail the varicap (and the two series caps) together with the opamps in/out impendace, the resistors network and
wires inductance is in principle a (R)ZLC butterworth low pass filter. You can actually calculate back from the 20MHz and the total capacity
of Varicap/C combination the (R)ZL values and calculate then again the cutoff for lowest varicap capacity. As i remember it was something about 280Mhz?


To be very honest i doubt that HanTekway are having good QC and spending hours for calibration, which we of course love because every
working hr costs money and we don't want to pay  too much ... that's the point. I wish HanTekway could tell me/us how they doing the factory
calibration in detail
(i can guess and track many things, but not everything without spending tons of hrs on that). Sure not everybody will be
able to re-calibrate @home, but for those who have the knowledge and equipment it could be an option.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 25, 2011, 11:12:32 pm
Hi tinhead,

There seems to only be one version of firmware.  Is this the same for all 3 models?  Does it change the bandwidth or read some config file and leave bandwidth correct for each model?

Colin
no, it's not. On chinese webpage for 60Mhz model is available, on english webpage for 100Mhz model ... crazy what? , but there is
explanation why (the firmware on the webpage is only interim version).

HanTekway said that they will publish single firmware (for all models), with some bux fixes in the next few days
(actually they said until end of this week, but we know already that marketing and engineering calendars have different amount of days per week)
so please be patient.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: colinbeeforth on May 26, 2011, 06:44:01 am

Hi tinhead,

Quote
no, it's not. On chinese webpage for 60Mhz model is available, on english webpage for 100Mhz model ... crazy what?

Defintiely a bit crazy.  I found the 100MHz version [dst1kb_2.06.3_15102b_fact(110225.0).up] on the Chinese page.  I tried to upgrade my DSO5102B DSO and it appeared to do everything correctly, saying successful upgrade, power off and then on to run it.  When I turn it on again, the DSO still shows version 110225, and upgrade count is still 0!!  The upgrade simply doesn't work at all.

Quote
What you always can do is to decrypt/unpack firmware content

Sounds like a good idea.  What sort of encryption is used to package the operating software?  <colin at lasielle dot net> if you want to email direct.

Frankly, I am beginning to suspect Hantek/Tekway software development is not run by engineers, maybe talented amateurs - talent, but no discipline.  Lack of changelog, early release of only some versions, upgrades that don't work.  This is not building my confidence in them at all.  ???
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 26, 2011, 10:13:47 am
Sounds like a good idea.  What sort of encryption is used to package the operating software?  <colin at lasielle dot net> if you want to email direct.

To decrypt firmware update:
- download the .up file from Hantek/Tekway website
- download and install GPG / GnuPG
- run gpg -d dstxxxxxxx.up > dstxxxxxx.gz (when asked for password type 0571tekway)
- gunzip the dstxxxxxx.gz
- untar the resulting file (it is dstxxxxxx. )
- untar again the resulting DST1000_4000.tar

Frankly, I am beginning to suspect Hantek/Tekway software development is not run by engineers, maybe talented amateurs - talent, but no discipline.  Lack of changelog, early release of only some versions, upgrades that don't work.  This is not building my confidence in them at all.  ???

knowing the public and not public issues in last 3 months - full ack.

Before Hantek shareholder bought Tekway, so before the original developer "rgj" stopped to work on the hardware/firmware
the situation was totally different - you can still see some echos in the firmware, SVN, changelog/history, comments
in the apps and scripts - things you always expect from a profesional development process.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on May 26, 2011, 04:24:10 pm

Hi tinhead,

Quote
no, it's not. On chinese webpage for 60Mhz model is available, on english webpage for 100Mhz model ... crazy what?

Defintiely a bit crazy.  I found the 100MHz version [dst1kb_2.06.3_15102b_fact(110225.0).up] on the Chinese page.  I tried to upgrade my DSO5102B DSO and it appeared to do everything correctly, saying successful upgrade, power off and then on to run it.  When I turn it on again, the DSO still shows version 110225, and upgrade count is still 0!!  The upgrade simply doesn't work at all.

Quote
What you always can do is to decrypt/unpack firmware content

Sounds like a good idea.  What sort of encryption is used to package the operating software?  <colin at lasielle dot net> if you want to email direct.

Frankly, I am beginning to suspect Hantek/Tekway software development is not run by engineers, maybe talented amateurs - talent, but no discipline.  Lack of changelog, early release of only some versions, upgrades that don't work.  This is not building my confidence in them at all.  ???


New latest FW package (.rar)   is here for all models (be sure you select right model:

http://www.hantek.com/download/dst1kb_2.06.3_15000B_fact(110420.0).rar (http://www.hantek.com/download/dst1kb_2.06.3_15000B_fact(110420.0).rar)

extract it and you find separate FW update for every single models.
There is NOT version 110225.0 on the Hantek official siteds (where from you find this old, it is not anymore officially shared?)

(add: as we all know there is still 110225.0 after update to 110420.0 becouse they forget update version number change in file.. really I do not understand they thinking and lazy loose woking practice. No changelog what is "must" in all FW updates so this is like garbage coillecting in the dark)

Do not use any other sources for FW update but only official Hantek webpage. (exept if you know exactly what you are doing ;)  )
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 26, 2011, 05:26:16 pm
it was fw from the official webpage. To stop the confusion, Hantek updated shortly the file on the webserver.

Those who downloaded the older file found only update for one model, the file what is right now on server does have
updates files for all models.

The version number, well, look in hex editor and you will see, the dso.exe DOES NOT have the number updated,
it is still 2.06.3(110225.0) and not (110420.0)


Even the update script is talking about old number:

[DST type]dst1000b
[soft version]2.06.3(110225.0)

So yes, we assume it is 110420.0 just because it was compiled in April, but after update the DSO will still show you 110225.0

And btw, Tekway is sending exact the same firmware with exact the same version number "bug"
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on May 26, 2011, 06:46:41 pm
it was fw from the official webpage. To stop the confusion, Hantek updated shortly the file on the webserver.

Those who downloaded the older file found only update for one model, the file what is right now on server does have
updates files for all models.

The version number, well, look in hex editor and you will see, the dso.exe DOES NOT have the number updated,
it is still 2.06.3(110225.0) and not (110420.0)


Even the update script is talking about old number:

[DST type]dst1000b
[soft version]2.06.3(110225.0)

So yes, we assume it is 110420.0 just because it was compiled in April, but after update the DSO will still show you 110225.0

And btw, Tekway is sending exact the same firmware with exact the same version number "bug"

O-ou. What is going on...  this sloppiness negligence is going more and more worse.

What happend after springfestival in Hantek. Maybe some better worker did not arrive back to working?

Someone need stop this game and clean table and then continue from clean board with good tight order and rules. Other way they start loose...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: amigo on May 27, 2011, 08:46:09 pm
Phew, I have finally read all 41 pages of this thread...

Let me join everyone in thanking tinhead for his relentless effort to bring us this wonderful improvement and a wealth of information along.

I bought my Hantek DSO5102B last Christmas and did not even fully unpack it until couple of days ago. The firmware on the unit is 2.06.2 (101028.0) and I was able to use the original USB hack to change it to DSO5202B without any problems.

I wonder now, is it worth upgrading to 2.06.3 (110420.0) using the original file vias the USB? Will that cause any problems with the hack, or should I manually copy the files?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 27, 2011, 10:59:49 pm
Phew, I have finally read all 41 pages of this thread...

yeah, i created some shortcuts in my first posting to save some reading time )

I bought my Hantek DSO5102B last Christmas and did not even fully unpack it until couple of days ago.

how come ?

I wonder now, is it worth upgrading to 2.06.3 (110420.0) using the original file vias the USB? Will that cause any problems with the hack,
or should I manually copy the files?

hacked device is working exact as original device, so as you hacked you can use manufacturer firmware updates
(for the target model, which i assume is now 200MHz model).
Manuall copy work of course too, but it's not that handy is you don't have LAN addon board or at least uart port outside DSO.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: amigo on May 28, 2011, 12:26:55 am
yeah, i created some shortcuts in my first posting to save some reading time )
I saw those, but you made many more posts in-between that I found having valuable information. I actually pasted it all into a text file so I can refer to it later and contemplate what's said. :)

Quote
how come ?
I was building a new workbench and my equipment was all stacked aside waiting for the build to finish. It just took sooooo long but here's the product of that labour:
(http://img838.imageshack.us/img838/7144/dsc01907p.th.jpg) (http://img838.imageshack.us/img838/7144/dsc01907p.jpg)

Quote
hacked device is working exact as original device, so as you hacked you can use manufacturer firmware updates
(for the target model, which i assume is now 200MHz model).
Manuall copy work of course too, but it's not that handy is you don't have LAN addon board or at least uart port outside DSO.
Appears it worked via USB, although it says 2.06.3 (110225.0) even though I used the 110420.0 file from their website, weird.

I looked at the latest firmware update and it seems the only difference is in the scripts in the main tekwayup_client/ folder. Binaries are the same according to my diff here for all three versions (5062B, 5102B, 5202B). I wonder why they are separating them now by model if all the binaries are the same.

You mentioned that another member here did some "looking" into the circuits and the code, so I suppose I should not invest time into it if that's going to be presented soon?

What we really need is Hex Rays ARM as that would give us pseudo code, rather than trying to guess through disassembly. Sadly, I do not have it and do not know anyone with it. Kinda pricey at that, too. :\

Someone else asked earlier in the thread about the 2.6.13 QQ2440 kernel source and that was a pain to find (just one source in China) but here it is for everyone else: http://mir.cr/DJHYUIHK (http://mir.cr/DJHYUIHK)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 28, 2011, 01:37:34 am
I was building a new workbench and my equipment was all stacked aside waiting for the build to finish. It just took sooooo long but here's the product of that labour:
(http://img838.imageshack.us/img838/7144/dsc01907p.th.jpg) (http://img838.imageshack.us/img838/7144/dsc01907p.jpg)


heh, that's perfect excuse. Btw, on the pic, 4 x Xantrex/Sorensen power supply ? I like them, good value for money, especialy if you use gpib/uart.

Appears it worked via USB, although it says 2.06.3 (110225.0) even though I used the 110420.0 file from their website, weird.

yep, see the last 5 postings :) Just a "lazy" developer, binary if definitely from April 2011, so only version number not updated.

I looked at the latest firmware update and it seems the only difference is in the scripts in the main tekwayup_client/ folder. Binaries are the same according to my diff here for all
three versions (5062B, 5102B, 5202B). I wonder why they are separating them now by model if all the binaries are the same.
actually as there is new and old hw revision each update is checking first for hw model and then calling the child update script.
As there is routing diff between hardware revisions, in case firmware update includes fpga design (dn.rbf) you have to copy/use the proper one.
You will not kill the fpga by wrong design, but your DSO will not work proper.

And yes, there is no diff in binaries, however due the "hack protection" the update script need to be per model. Reason is very simple, the fw on the DSO is checking the content
of update file and comparing model names, if they match the update will continue. However this protection is mostly a joke, and it seems that HanTekway got pissed off by themself
so they implemented a secret way to skip model check (by the "special" file). However this only works if the fw version on the DSO know it (so must be at least 2.06.3 (110225.0)).
Anyway, as i heard they will soon have only single fw for all models, probably with better protection, which actually didn't really matter.

You mentioned that another member here did some "looking" into the circuits and the code, so I suppose I should not invest time into it if that's going to be presented soon?
What we really need is Hex Rays ARM as that would give us pseudo code, rather than trying to guess through disassembly. Sadly, I do not have it and do not know anyone with it. Kinda pricey at that, too. :\


i draw schematic (i still have to update some sheets from paper to sch) of the old hw revision (which is what you have), the member i mentioned
focused on firmware itself. He disassembled the firmware and analyzed deeper. However as asm analysis cost time he stopped and wrote
own arm decompiler (i think plugin for ida). For sure it might not work that good as Hex Rays, but defnitelly better than nothing (or pure asm).
To buy Hex Rays is not an option (not for single person).

He haven't published yet anything due private work load (so you can still spend some time analyzing too), no idea when he will be "ready",
but i'm bothering him all the time :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: amigo on May 28, 2011, 02:09:37 am
heh, that's perfect excuse. Btw, on the pic, 4 x Xantrex/Sorensen power supply ? I like them, good value for money, especialy if you use gpib/uart.
Yup Sorensen - I got them for $200 on eBay, I think the best deal I ever got judging that you can hook these up parallel, serial, stand-alone. :)

Quote
...
so they implemented a secret way to skip model check (by the "special" file). However this only works if the fw version on the DSO know it (so must be at least 2.06.3 (110225.0)).
Anyway, as i heard they will soon have only single fw for all models, probably with better protection, which actually didn't really matter.
I agree with you all the way when you said they should focus on fixing bugs and not spending resources on protection as that's just going to make people even more interested to go around it. Just look at what's happening with the commercial software and "fancy" ways of protection that all failed miserably. But I guess Hantekway is trying to keep their shareholders happy, too bad the shareholders don't have much insight into it or they would probably long abandoned protections as they are futile.

Quote
i draw schematic (i still have to update some sheets from paper to sch) of the old hw revision (which is what you have), the member i mentioned
focused on firmware itself. He disassembled the firmware and analyzed deeper. However as asm analysis cost time he stopped and wrote
own arm decompiler (i think plugin for ida). For sure it might not work that good as Hex Rays, but defnitelly better than nothing (or pure asm).
To buy Hex Rays is not an option (not for single person).

He haven't published yet anything due private work load (so you can still spend some time analyzing too), no idea when he will be "ready",
but i'm bothering him all the time :)
He wrote a plugin to convert to pseudo code, that's impressive?!

I thought you wouldn't need a plugin to just disassemble with IDA because ARM is already supported, but can't generate pseudo code without Hex Rays ARM...

When can we see those schematics? :)

Say, I'm struggling here with the dumped image of the firmware. I thought we could mount the root.bin as a yaffs(2) but I'm getting nowhere with it? I managed to compile yaffs2 and got mtd-utils and yaffs2utils as well, but it keeps telling me it's not the right image or not a multiple of 2048+64?

I suppose you aren't using vanilla Linux for your debugging but instead the Mini2440 board?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 28, 2011, 02:33:39 am
Yup Sorensen - I got them for $200 on eBay, I think the best deal I ever got judging that you can hook these up parallel, serial, stand-alone. :)

puhh, that's indeed good deal. I bough two (single units) for ~200USD total, however with gpib card which was still very cheap.

He wrote a plugin to convert to pseudo code, that's impressive?!

I thought you wouldn't need a plugin to just disassemble with IDA because ARM is already supported, but can't generate pseudo code without Hex Rays ARM...

to disassmeble IDA is enough, but to decompile back to C you need HexRays plugin (or DIY plugin/decompiler as he did, which is indeed impressive)


When can we see those schematics? :)

soon ...

Say, I'm struggling here with the dumped image of the firmware. I thought we could mount the root.bin as a yaffs(2) but I'm getting nowhere with it? I managed to compile yaffs2 and got mtd-utils and yaffs2utils as well, but it keeps telling me it's not the right image or not a multiple of 2048+64?

I suppose you aren't using vanilla Linux for your debugging but instead the Mini2440 board?

i'm not sure if yaffs2utils is working properly, as i remember there was problem with OOB and small NAND.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: amigo on May 28, 2011, 02:51:05 am
I'm just lazy to hook the FT232R up to the UART port and so I thought to dig through the file system by mounting the image. Maybe I should make a permanent port on the scope and just connect that way but then I have to keep the scope on as well, and I would be messing with a "live" system, too.

I'll figure this yaffs thing out, computers are not smarter than people - we made those suckers after all! :)

Thanks!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jellytot on May 28, 2011, 06:35:02 am
Well I`m not sure what I've done here, but I performed the upgrade on a Hantek DSO5102B
the latest model, but after I upgraded with the latest 5202 firmware I thought to change the logo back
to 5102, so I did and it booted with the 5102 logo but it also changed it to 5102 under system parameters
model type. >:(  So now I was worried and decided to change the logo back to 5202 again,but the boot screen has still got the 5102 logo but the system parameter display is now DSO5202B.
So I thought that maybe to rerun the firmware update again to bring the boot logo back.. :) but the update
failed at stage 8 with the error message "software upgrade failed error 0xf7  Illegal upgrade files detected"
So now I'm worried that I wont be able to upgrade with future updates?? So how serious is it ? will a new upgrade work? Thanks.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 28, 2011, 10:51:32 am
So now I'm worried that I wont be able to upgrade with future updates?? So how serious is it ? will a new upgrade work? Thanks.
you did something wrong, but don't worry, you can't brick HanTekway DSO that easy.

Did you hacked over UART or USB? The best would be to connect via UART and to control
all files (/logotype, /logotype.dis, /tmpdst, /dstxxxxb)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jellytot on May 28, 2011, 12:16:10 pm
Hi Tinhead. Yes I had followed exactly the instructions at the beginning using the uart method and everything worked great. It was only when after the upgrade that I edited the last setting to change the boot logo
back to DSO5102B that I ran into problems where I could not change it back. I tried to edit the files but they are already edited to use DSO5202B. It was Then I thought to run the same new firmware release, thinking that It would bring the logo back and thats were I got the error message. It looks like its running as a DSO5202B though as the band width goes to 2ns  :)  But I`m just worried that it wont take a future update, or is it that the firmware wont overwrite itself. Is it possible to fix ? I didnt think changing a logo would cause the problem >:(

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 28, 2011, 01:11:10 pm
if all files are ref. to 200Mhz:

logotype = dst1202b
logotype.dis = hantek_dso5202b
tmpdst = /dst1202b
/dst1202b

then you don't have to worry. After the hack you to use of course dso5202b firmware update files, it should not
give you an error if all these files in above are correct.

Check all these files, edit sys.inf like

[DST type]
[soft version]
[fpga version]
[start time]-1
[update time]-1

and reboot again.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jellytot on May 28, 2011, 01:47:03 pm
Hi Tinhead. I Still have the problem! as far as I can tell the files are correctly edited but I still get the error ?
is it possible to flash again with the same firmware ?

model DSO5202B
soft version 2.06.3 (110225.0)
hard version 10050x555583e9
s/n T1G/005 xxxxxx 

here is a log of the process. Sorry its so long I edited it places to shorten..
it stops at ierror :247  ??

*** in doing do_update_secret_packet ***
<>get key=134.
(012)mem valid cnt=547..time 10s wave frames = 18...
iUpdateErrCode : 0
have * in update packet
Search_UdiskUpdateXXXFiles
dst1kb_2.06.3_15202b_fact(110420.0).up
(013)mem valid cnt=547..time 10s wave frames = 0...
(014)mem valid cnt=547..time 10s wave frames = 0...
tmp_name : /usr/up/dst1000_4000.up.tmp
gpg: CAST5 encrypted data
pw:0571tekway
gpg: encrypted with 1 passphrase
(015)mem valid cnt=547..time 10s wave frames = 0...
gpg: WARNING: message was not integrity protected
gpg: CAST5 encrypted data
pw:0571tekway
gpg: encrypted with 1 passphrase
(016)mem valid cnt=547..time 10s wave frames = 0...
gpg: WARNING: message was not integrity protected
dst1kb_2.06.3_.up.tar
(017)mem valid cnt=547..time 10s wave frames = 0...
tekwayup_client
tekwayup_client/update.sh
tekwayup_client/update
tekwayup_client/readHWVersion
tekwayup_client/update~
tekwayup_client/boardzero
tekwayup_client/boardzero/dso-lcd.ko
tekwayup_client/boardzero/updatezero.sh
tekwayup_client/boardzero/updatezero.sh~
tekwayup_client/update.sh~
tekwayup_client/sys.inf
tekwayup_client/logotype.dis
tekwayup_client/sys.inf~
tekwayup_client/common
tekwayup_client/common/logo
tekwayup_client/common/logo/hantek_DSO5062B_up.ico
(018)mem valid cnt=547..time 10s wave frames = 0...
tekwayup_client/common/logo/hantek_DSO5062B_mid.ico

tekwayup_client/common/libiconv.so.2.3.0
tekwayup_client/common/help.db
tekwayup_client/common/dso.exe
(019)mem valid cnt=547..time 10s wave frames = 0...
tekwayup_client/common/OurLanguages
tekwayup_client/common/OurLanguages/Tridchn.lan

tekwayup_client/common/OurLanguages/English.lan
tekwayup_client/common/updatecom.sh
tekwayup_client/common/updatecom.sh~
tekwayup_client/board1005
tekwayup_client/board1005/dso-lcd.ko
tekwayup_client/board1005/dso-buzzer.ko
tekwayup_client/board1005/update1005.sh
tekwayup_client/board1005/update1005.sh~
upend
Tar_UpdatePacket ok !!
start update sys files
ucUpdateBrand:hantek
ucSysBrand:hantek
ucUpdateType:DSO5202B
ucSysType:DSO5202B
iError :247

Draw_SingleMenuItem() <disp/menu_disp.c,2569>: 9682896.
(020)mem valid cnt=547..time 10s wave frames = 0...

Please press Enter to activate this console.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 28, 2011, 02:06:59 pm
there must be some special character in the logotype.dis, visualy the compare seems to be ok

ucUpdateBrand:hantek
ucSysBrand:hantek
ucUpdateType:DSO5202B
ucSysType:DSO5202B
iError :247

take the attached file, unzip to usb stick, insert stick and move to / of the DSO.
Then reboot and try update again (and yes, you can run update over and over again)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jellytot on May 28, 2011, 02:56:02 pm
Well Tinhead. You certainly know this instrument  8)  All working fine now  ;D I'm very grateful for your help
with this, I was sure that there was new protection employed in the new firmware...But now I`ll leave well enough alone and just apply the updates when they are released. so what do you think had happened, some corruption when I done the editing or something else? So the boot logo is critical when it comes to applying
firmware updates..? Thankyou once again.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 28, 2011, 06:20:04 pm
you welcome.

Regards the logo, it might be safer to rename the logo files itself (look in /logo directory) instead of changing
the logotype.dis (which will be actually read by the lcd driver to assign proper logo).
The reason is very simple, this file will be also used for model versification during firmware update, so if you have there
some wrong characters (like CR) the compare will always fail and you will be not able to do any fw updates.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: amigo on May 28, 2011, 06:32:44 pm
tinhead,

slightly off topic, but do you ever sleep? :)

I envy your passion and ability to stay up non-stop if you never sleep! :D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: dfnr2 on May 28, 2011, 06:42:20 pm

(http://img838.imageshack.us/img838/7144/dsc01907p.th.jpg) (http://img838.imageshack.us/img838/7144/dsc01907p.jpg)


Just for the record, that's really a beautiful setup.

Dave
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: amigo on May 28, 2011, 06:56:36 pm
Just for the record, that's really a beautiful setup.

Dave
Thanks Dave, here's a bit wider view of that side of the room.

(http://img15.imageshack.us/img15/7788/dsc01904l.th.jpg) (http://img15.imageshack.us/img15/7788/dsc01904l.jpg)

The workbench was a real pain to build and took me months (it was build in that room). I had no plans just a sketch and some wild idea of what I'd like it to look like. It did go through couple of design changes in my head and ended up like this. The two shelfs on top are separate and detach as well as the legs of the bench and the shelf beneath, else none of this could enter or leave the room (too wide/big for the door frame). :D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 28, 2011, 09:18:53 pm
tinhead,

slightly off topic, but do you ever sleep? :)

I envy your passion and ability to stay up non-stop if you never sleep! :D

i did the "worst" thing human being can do - turned hobby into my job.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: amigo on May 28, 2011, 09:56:49 pm
i did the "worst" thing human being can do - turned hobby into my job.

You are right about the worst thing, as I know from my personal experience that all the hobbies I turned into jobs became laborious and I ended up disliking them. Electronics is still a hobby so I put up with it! :D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jellytot on May 29, 2011, 01:25:46 am
That old adage "do something you love and you'll never work a day in your life" isn't exactly true, more like
99% persperation 1% inspiration  ;D still its the satisfaction of finding out what caused the problem and then seeing it work again that motivates, its either that or a form of ocd  ;D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ECL on June 13, 2011, 09:03:11 am

I finally got a chance to wire in an RS-232 translator, and do the hack.
Everything when quite smooth, thanks to the up-to-date summary, on the first page
(thanks tinhead  :)).  My firmware image did not have logo files, for the DSO5202B.  I
downloaded them from the link on page 14, and copied them to the scope, using
a flash drive:

https://www.eevblog.com/forum/index.php?topic=1571.msg32924#msg32924 (https://www.eevblog.com/forum/index.php?topic=1571.msg32924#msg32924)

That was the only step missing from the summary.  It might be useful to add a
link to logo files, on the first page.

While scanning the (post-hack) console output, during boot, I noticed the following:

now run app .....
main///////////////////////////////////////////////////////////////////////////////////////
link_autocheck_event......Complete!
mkdir: Cannot create directory `/param': File exists
mkdir: Cannot create directory `/param/sav': File exists
Kernel version = 0904100...
init kernel event ......[ok].
bank dso
init PC_UART_EVENT......[ok].
found /dst* =
 /dst1202b

DSTtype= dst1202b
maxSps = 2
bandWidth = 20
bandWidth = 6
###  CheckFileIsExist.  failled.
link_autocheck_event......Complete!   

Note the two bandWidth listings.  I have a Hantek DSO5062B, with firmware = 2.06.2 (101108.0).
Before the hack, this was the output:

now run app .....
main///////////////////////////////////////////////////////////////////////////////////////
link_autocheck_event......Complete!
mkdir: Cannot create directory `/param': File exists
mkdir: Cannot create directory `/param/sav': File exists
Kernel version = 0904100...
init kernel event ......[ok].
bank dso
init PC_UART_EVENT......[ok].
found /dst* =
 /dst1062b

DSTtype= dst1062b
maxSps = 2
bandWidth = 06
bandWidth = 2
###  CheckFileIsExist.  failled.
link_autocheck_event......Complete! 

Anyone know what the second bandwidth listing is all about?

Lastly, any strong opinions on the latest firmware?  Better/worse vs. 2.06.2 (101108.0)?

Thanks,

ECL  -K 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 13, 2011, 12:12:43 pm
simple, there is a array with possible bandwidth values,  

[0..6] '02  04  06  08  10  15  20'

so we have 20, 40, 60, 80, 100, 150 and 200MHz.

If the model is set to DST1062B we have 60MHz bw, so the value 06 is selected
which is second value in the array and with DST1202 we have 200MHz, so value 20 which
is the last, also 6th value from the array.

This array will be used to specify the bw filter corner frequency.


Regards the fw version, well hard to say, i remember there are some ugly bugs in 2.6.2,
so it might make sense to update to latest (which have already some bug fixed, but still crashing in measurment-> help menu and
after few minutes when trigger selected to alt. )

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on June 13, 2011, 03:04:54 pm
Hello, could somebody share the latest firmware (for a 100 to 200 Mhz hacked DSO), I sent an Email to Tekway but they did not replied and would like to test the new firmware. Thanks !
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 14, 2011, 03:09:06 pm
Hello, could somebody share the latest firmware (for a 100 to 200 Mhz hacked DSO), I sent an Email to Tekway but they did not replied and would like to test the new firmware. Thanks !

same here, waitng since two weeks and no answer. I know they have some webserver issues, so maybe non of the emails will
get read, let me check with distir here, maybe they know more ...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 14, 2011, 07:00:21 pm
About Factory Calibration

as you maybe know the factory calibration data is used by each Hantek/Tekway DSO to calculate
the self-calibration results agains specific hardware tolerance.

Sure, without this data the DSO will be able to run self-calibration, but you can be sure
the measured results will be wrong and over 5-10Mhz the ADC/FPGA timing constraint will not
work anymore, so you will see only crap on the display (actually they will be not run synchronous)

This factory calibration data is of course unique, each DSO have own due hardware tolerance.

There are (by default) following files on the file system:

tdc_edge125M - this is calibration for Edge Trigger by 1GSs (so each ADC in 125MHz)
tdc_overtime125M - this is calibration for Overtime Trigger by 1GSs (so each ADC in 125MHz)
tdc_pulse125M - this is calibration for Pulse Trigger by 1GSs (so each ADC in 125MHz)
mult_adc.log - this is the timing constraint table created from files above (more or less)
tdc.log

the first 4 files will get generated at factory, the 5th file (tdc.log) during self-calibration based on measured data recalculated
with data from the first 4 files.

In principle, if you do some changes to hardware, like input circuit changes, or clock oscillator changes
or even in some case you resolder something the factory calibration data need to be re-created.
And yeah, imagine if you have no warranty anymore and the NAND flash died, you will need this data
to be re-created too.

Btw, someone asked already before if there is a chance to reduce the waveform interferences,
well actually yes. By default the HanTekway DSOs are using standard quarz oscillators,
from all the models/hardware revisions over the time i know they typically specified somewhere
between 150ps up to 250ps total jitter. The FPGA pin (clock output to ADCs) jitter, as already mentioned in Rigol thread
is constant - however the calculation is based on the input clock quality (which is coming from the quarz oscillator).
This means if the clock signal have 30ps total jitter we have max 650ps jitter on ADC clock,
with 250ps input clock jitter you can calculate how the ADC clock looks like.

I did replaced my quarz oscillator, by low jitter model - FXO-HC736R-100 from Fox Electronics (digikey 631-1176-1-ND),
this baby have only ~25ps total jitter which is already below Altera specs.
However, it is not enough to change this part, the factory calibration need to be executed / re-created.
Therefore i looked around and found that Tekway/Hantek implemented the factory calibration procedure
into the firmware, as a hidden menu.

Now, with the /tst file hack (set to 300MHz bw) the waveform (100MHz test signal) looks like before with 100MHz bw,
where of course most of the HF distortion was removed. So in principe it is much better now, especially
for HF signals. This is still far from perfect but to be very honest there is no way to do it better,
except you design clock domain from scratch, as small addon boards placed directly near ADCs,
which isn't that easy.


How to run/restore Factory Calibration
You will need 10MHz (can be something between 1 and 20MHz, i got best results with 10MHz)
SQUARE signal source. Of course a good one, with low jitter (at least as good as your quarz oscillator used in your DSO)

Don't try to do it with sinus source, it will work for overtime and evt. for edge, but not for pulse calibration.
The necessary rise time can be something between 1ns - 20ns, i got best results with 5ns rise time.

And that's the factory calibration steps :

connect via UART to DSO
kill the dso application by typing
killall dso.exe

If you wish only to play around/test how this work, copy these files somewhere (stick, separate directory)
tdc.log
tdc_edge125M
tdc_edge (if exists, this files is really optional so don't care if you don't have it)
tdc_overtime125M
tdc_overtime  (if exists, this files is really optional so don't care if you don't have it)
tdc_pulse125M
tdc_pulse (if exists, this files is really optional so don't care if you don't have it)
mult_adc.log

You can restore them and everything will be as before (evt. you need to run after restored these files
and RESTARTED your DSO the self calibration once)

create /tdc.new file, by typing
touch /tdc.new

run on the shell (over UART/Terminal) the dso application by typing
/dso.exe

connect 10MHz low jitter square generator to channel 1

Click once "default setup", click once "Autoset",

Go to channel 1 settings, select coupling AC, go to trigger menu
and select Coupling AC, click once Trigger level knob to set trigger to ZERO line.

Select horizontal res. to 4ns/DIV.

Evt. increase the 10MHz aplitude, best distortion results are with aplitude over 8 div,
best small signal result with amplitude over 2 div - you can test what works better for your DSO/needs.

Now we ready for manufacturer calibration. Note that the DSO need some of these steps or it
will not let you re-create the manufacturer calibration files. The AC trigger and AC input
are optional, but as the calibration is checking zerocrossing it make sense to set like this.
You can of course do DC, but then your generator need to create +- waveform.

Now go to trigger menu, select type Edge, now click multiple time (fast) the "trigger Menu" button.
You should get an hidden window displayed.

Select F1 to continue, if you get "force quit!!!" message some of the settings are wrong, start from beginning :)

If everything fine the DSO will display

Creating TDC(1GSps)
Push KEY_F0 to force quit!!!


just wait until is it ready (a minute max.)

now select trigger type to pulse, open second page (F6)
and select "=" and pulse width of your test signal (so for 10MHz 50ns). As we in 4ns/DIV the next possible value
is 48ns, however you can change the horizontal res. to 20ns/DIV, select pulse Width to 50ns and select back the
horizontal res. to 4ns/DIV.

Now again click multiple time (fast) the key "trigger menu", again hidden menu will get displayed, select there F1.

If everything fine the DSO will display

Creating TDC(1GSps)
Push KEY_F0 to force quit!!!


just wait until is it ready (a minute max.)

now select trigger type to O.T. (over time) and select lowest overtime value (should be 24ns)

Now again click multiple time (fast) the key "trigger menu", again hidden menu will get displayed, select there F1.

If everything fine the DSO will display

Creating TDC(1GSps)
Push KEY_F0 to force quit!!!


just wait until is it ready (a minute max.)

That's all, the DSO have now created all necessary factory calibration files.

Now you can disconnect the 10MHz signal generator and run self-calibration.

You can reply all these steps to get best results.

Finally, if you happy, delete the tdc.new file by
rm /tdc.new

or by clicking multiple time (fast) the key "trigger menu" and selecting there F3 from the hidden menu.

what else ...

During the factory calibration the firmware is automaitcally re-loading the created files, so you don't haev to restart the DSO
to run self-calibration.

However, if you break up the factory calibration or wish only to test it, you will need to reboot DSO to reload
your original data (which of course need to be restored first as mentioned above).

The good thing is, you can't damage HanTekway DSO, the linux OS makes backup/restore easy,
now as we know how factory calibration works we can play with whatever we wish (except CPLD programming
which can't be restored - but Hantek have no issues at all to sell/send you replacement CPLD).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ECL on June 14, 2011, 07:19:29 pm
simple, there is a array with possible bandwidth values, 

[0..6] '02  04  06  08  10  15  20'

so we have 20, 40, 60, 80, 100, 150 and 200MHz.

If the model is set to DST1062B we have 60MHz bw, so the value 06 is selected
which is second value in the array and with DST1202 we have 200MHz, so value 20 which
is the last, also 6th value from the array.

This array will be used to specify the bw filter corner frequency.

Ah, yes, that makes sense, thanks!  :)

Regards the fw version, well hard to say, i remember there are some ugly bugs in 2.6.2,
so it might make sense to update to latest (which have already some bug fixed, but still crashing in measurment-> help menu and
after few minutes when trigger selected to alt. )

Thanks, I think I will give the upgrade a whirl.  2.6.2 is okay, but I've gotten it to crash
as well.  Hopefully Hantek/Tekway will fix the crashing bugs soon.  I can live with buggy
software, but lock-ups are a big no-no ...  :)

ECL  -K
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ECL on June 14, 2011, 07:34:29 pm
About Factory Calibration

Fantastic!!!  Great job tinhead!

ECL  -K
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 14, 2011, 11:33:39 pm
Only for those who have firmware version 2.06.3 (110420) installed

since fw version 2.06.2 there is a "bug" which prevents from exporting more than 40k as CSV.

As HanTekway is not doing anything on that i finally got pissed off and patched the firmware.

There is memory depth check in the middle of the "DoKeyOption2InMenuSaveRecallCSV" procedure


      BL   Store_GetStoreDepthLib
      MOV   R3, 0x9C40
      CMP   R0, R3
      LDMGTDB   R11, {R11,SP,PC}

so i did nop'ed it

      BL   Store_GetStoreDepthLib
      MOV   R3, 0x9C40
      CMP   R0, R3
      NOP

and now i can export full 1M long memory as CSV.

If you need this feature, all you have to do is:

- connect over UART
- insert USB Stick with the attached dso.exe (unzip it first ...) and wait until the stick will get mounted
- kill the DSO application by typing "killall dso.exe"
- copy over the dso.exe ( cp /mnt/dso.exe / )
- change file permission ( chmod 777 /dso.exe )
- test it by typing /dso.exe

If everything works you can remove the stick, disconnect from UART and restart the DSO

Btw, it seems that HanTekway did it for a reason (really?), there seems to be a watchdog running,
as the 1M CSV export takes 40 seconds it might happen that the DSO will crash.

The best way to prevent it from crash is to close the file menu right after the file has been written.

And yeah, i did changed the file revision number to what it should be 2.06.3 (110420), i just
don't like wrong numbers (you remember, that was a small "bug", the file got changed by the developer forgto to
increase version number).


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ECL on June 15, 2011, 12:34:44 am

I wonder why they didn't just break up the transactions, into smaller
chunks (16-32K), so the watchdog can get "scratched" regularly?
It sounds like the speed of the USB flash stick will also factor into
how big an export can be performed, without triggering the watchdog?

Short of releasing a complete source package, or a development kit,
I wonder if Hantek/Tekway would be open to the idea of releasing
key source files, where known bugs are likely to reside?  After all, I
doubt there is too much proprietary technology in their file manager
app, or the CSV export routines.  They could publish the file, let the
user community submit changes, and then reintegrate on their end.
They could save a lot of time, and expense, and we could get critical
bugs fixed.  Everybody wins. 

BTW, thanks for getting pissed off  ;)

ECL  -K
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 15, 2011, 01:28:21 am

I wonder why they didn't just break up the transactions, into smaller
chunks (16-32K), so the watchdog can get "scratched" regularly?
It sounds like the speed of the USB flash stick will also factor into
how big an export can be performed, without triggering the watchdog?


hard to trace it, 10x saved o crash. So it happens sometimes only, especially if you
did songle shot and click run instead of close file menu and then continue acc.
So it might be something else causing the self kill.



Short of releasing a complete source package, or a development kit,
I wonder if Hantek/Tekway would be open to the idea of releasing
key source files, where known bugs are likely to reside?  After all, I
doubt there is too much proprietary technology in their file manager
app, or the CSV export routines.  They could publish the file, let the
user community submit changes, and then reintegrate on their end.
They could save a lot of time, and expense, and we could get critical
bugs fixed.  Everybody wins. 

[dream-mode on]
yeah, this would be great ...
[dream-mode off]

but i doubt they will do it

BTW, thanks for getting pissed off  ;)

you welcome!

Btw, i haven't changed the import procedure, it will still refuse 512k and 1M CSV import.
I think that's ok, in most cases we need to export data to do something with it on PC.
If i have to store large raw waveform data (for whatever comp. ) then the recorder is the best way to export and import it.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ECL on June 17, 2011, 08:42:46 pm

For anyone considering adding a fan to the Hantek/Tekway, here are a couple
off the shelf options:

Link Depot FAN-5015-B (15CFM, 29dba): 

http://www.link-depot.com/dc_fan_5015b.html (http://www.link-depot.com/dc_fan_5015b.html)

Startech FAN5X1TX3 (Evercool EC5010M12BA, 8.63 CFM, 23dba):

http://www.startech.com/product/FAN5X1TX3-5x1-cm-TX3-Replacement-Ball-Bearing-Fan-also-includes-a-TX3-to-LP4-adapter (http://www.startech.com/product/FAN5X1TX3-5x1-cm-TX3-Replacement-Ball-Bearing-Fan-also-includes-a-TX3-to-LP4-adapter)

I evaluated both units, in my scope.  Both are 12VDC nominal bias.  The Startech has about half the airflow
of the Link Depot, but is also much quieter.  If you are going for minimum noise, but want a little air moving,
the Startech is the best option.  If noise is not a big issue, I recommend the Link Depot.  Based on the
shielding design, venting and underside mounted ADC's, the Startech is a bit underpowered for the job, in my
opinion.  The noise level of the Link Depot, when the unit is fully assembled, is on par or quieter than other
gear in my lab (PC's, scopes, LA etc ...).  One advantage, to the Startech, is that it comes with a male 3-pin fan
adapter, that can be used to fill the empty (fan power) pads on the power supply. 

ECL  -K
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: colinbeeforth on June 18, 2011, 06:07:35 am
Re fans, take a look at the Sunon "maglev" fans, they use a magnetic levitation system to eliminate running bearings.  I've had experience with lots of equipment running 24 hrs that had constant fan failures.  We solved the problem at modest cost by using the maglev fans.  Traditionally, ball bearing fans have been the choice for lifetime, but I've found the new maglevs were reliable even with full time operation.  For my Hantek, I fitted a 12 volt maglev fan, and replaced the spare unused 7812 regulator on the power supply board with a 7805 (7808 would be ok also) regulator.  The fan has no start up problems and runs very quietly.  I soldered a male connector onto the empty place on the power supply board, and fitted a connector to the fan lead.  It's hard to tell it isn't original.  Despite running quietly it does a good job of cooling.  I hate loud fans.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 24, 2011, 01:59:18 pm
for those who looking for 64bit driver, Hantek relesed them today, they works of course for Tekway too.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: flodins on June 24, 2011, 10:38:52 pm
another DSO hacked, this time in Poland, thanks (:
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 25, 2011, 11:49:03 am
another DSO hacked, this time in Poland, thanks (:

musi dzia?a?, wiadomo kto wymysli? :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: WanaGo on June 26, 2011, 03:42:02 am
Hi Tinhead

So from what I am reading, the Tekway DST1102B is the same as the Hantec DSO5102B?

I am just starting to read up on these now as I have been looking at the Atten ADS1102CML, and also the Rigol DS1052E with hack etc, but the Hantec looks promising albeit more expensive.

http://www.goodluckbuy.com/hantek-digital-storage-oscilloscope-dso5102b-100m-1gs-s-7-wide-screen.html

$640.48 I assume is about as cheap as this comes?

$530 for the Atten 1102CML, which doesnt have a high a resolution as the Hantec.

$370 or so for the Rigol.

Cheers
James
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: colinbeeforth on June 26, 2011, 05:02:15 am
Hi James,
Are you quoting US dollar prices?  Group members are from all over the world.
The models you quote don't have equal hardware so that affects price.  Check carefully the screen resolution, the Hantek/Tekway DSO5102B is 800 horizontal by 480 vertical.  Many other DSOs have vertical resolution less than 256 points which is needed to nicely display an 8 bit sampled waveform.  If you look at a clean sine wave on low screen resolution scopes, they always show jaggies, not smooth curves.  DSOs are not even slightly simple, and comparisons are complex, but the the Hantek/Tekway screen is much nicer.  All the low cost scopes are a compromise, they all have aspects that aren't so good, so you must keep that in mind, you are not getting the equivalent of HP or LeCroy at a cheap price.  If you can afford it, the new range of HP DSOs give much better performance.  That said, the Hantek DSO5102B and the identical Tekway DST1102B are the best performance for dollar 100MHz DSOs on the low cost market.  Last year, Rigol was the best option, but the market changes quickly.  I have two older expensive digital scopes, but use the Hantek because the colour screen is easy to read and the DSO is tiny.  Besides, when my LeCroy 9310M fails, what will I use to diagnose it?  Probably the Hantek!  Best wishes, Colin in Melbourne, Australia
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: WanaGo on June 26, 2011, 05:08:18 am
Thanks Colin

Yes I was quoting US $, it tends to be the most universal $ on forums.

The more reading I do on these the better I like it.

Apart from the screen, It would be great to get a comparison to the ADS1102CML in terms of performance.

Regards
James
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on June 27, 2011, 11:49:52 am
New DSO5102B and 5062B.

FW 2.06.3 (110531.1)
HW 10070x555583e8

first 10 minutes fast looking around.. 

not bad... maybe least one fatal bug is repaired(??) or I have forget how to test..   need more tests (now busy)

5062B -3dB  well over 100MHz ;) 

5102B  -3dB just as before with new (blue) mainboard.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 27, 2011, 12:15:12 pm
nice, 110531.1 ... i hope it will be available public (soon)

Btw, HW 10070 seems to be a new hardware revision, do you see any difference?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on June 27, 2011, 12:32:11 pm
nice, 110531.1 ... i hope it will be available public (soon)

Btw, HW 10070 seems to be a new hardware revision, do you see any difference?

Not opened, not any older for compare with eyes but only  as compared to my memory feels  like littlebit less noisy and maybe ADC mismatching noise less - maybe only dreaming?. Have not now time for test more.

Update: Just littlebit opened and, wow...  Hantek have do development in production quality, specially soldering and cleaning work is now better. Well cleaned (not just as spacecraft electronics but still good) , also nice soldering.  (before just new board was blue... now it is agen green, Ver 1.00.7.)

But this is only one random individual unit. (also I have seen work quality variations before)



Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on June 27, 2011, 01:48:45 pm
Hi,
French "Soldes" in Elec3i (http://elec3i.com/specials.php) for 6 weeks. Eevblog users discount (30EUR) for Hantek DSO5000 series still running. :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 28, 2011, 05:05:59 pm
i did checked the firmware 2.06.3 (110531.1), works really stable.

There are still two "bugs":
- no export for 512k and 1M CSV
- help file in meausre menu is crashing DSO

For those who can't wait for official update:

I updated the help file (no more crashes, reason was simple - special characters inside SQL) and patched
the firmware to allow 512k and 1M CSV export. I leaved import as is, maximal 40k CSV can be re-imported back to DSO.

Attached dso.exe, language files and the help file.

It does work with all known hardware revisions, however you will have to copy these files over UART and
of course change permissions to chmod 777 * (or the DSO will not start-up)


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFman on June 28, 2011, 08:33:21 pm
for those who looking for 64bit driver, Hantek relesed them today, they works of course for Tekway too.

I've been waiting for ages for this 64 bit Driver. But I always have trouble finding anything on the Hantek Website. I've searched everywhere but can't find it. Can someone PLEASE point me in the correct direction with the URL address for the 64 bit Windows 7 Driver for TTscope software.

Thanks all for your help.

RFman.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ECL on June 28, 2011, 09:07:21 pm
Quote
Can someone PLEASE point me in the correct direction with the URL address for the 64 bit Windows 7 Driver for TTscope software

Sure, try here:

http://www.hantek.com.cn/Product/64Driver/DSO5000.rar

ECL  -K
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on June 29, 2011, 11:42:03 am
Could somebody please share the 2.06.3 (110531.1) firmware for Tekway? (for a 100Mhz hacked to 200Mhz device, I guess I should ask for a 200Mhz device right?)
Thanks :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 29, 2011, 01:27:04 pm
ready compiled update file for Tekway DSOs only (with patched 512k/1M CSV export and updated help file)

NOTE: Do not use this on DSO bought after June 1st 2011 (or having hw1007 .. check system info before you run!!!)

On these scopes you have to copy files manually, see this:

https://www.eevblog.com/forum/index.php?topic=1571.msg52173#msg52173

If you already updated and scope is not working properly it is not too late, look here for solution:

https://www.eevblog.com/forum/index.php?topic=1571.msg52500#msg52500
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 29, 2011, 01:27:30 pm
ready compiled update files for Hantek DSOs only (with patched 512k/1M CSV export and updated help file)

NOTE: Do not use this on DSO bought after June 1st 2011 (or having hw1007 .. check system info before you run!!!)

On these scopes you have to copy files manually, see this:

https://www.eevblog.com/forum/index.php?topic=1571.msg52173#msg52173

If you already updated and scope is not working properly it is not too late, look here for solution:

https://www.eevblog.com/forum/index.php?topic=1571.msg52500#msg52500
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Pinkus on June 29, 2011, 10:28:07 pm
Many thanks to Tinhead and all other who are contributing.
I finally changed my 5102 to a 5202 (never took the time for this) and upgraded to the new latest firmware.
Lets hope it is not crashing as often as before. A first test quick seems to promise that it is a better FW now.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: flodins on June 29, 2011, 10:30:30 pm
i'm trying to setup gentoo on this scope, work is going well soon i'll have full linux and scope on one board (:
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFman on June 29, 2011, 11:21:51 pm
Quote
Can someone PLEASE point me in the correct direction with the URL address for the 64 bit Windows 7 Driver for TTscope software

Sure, try here:

http://www.hantek.com.cn/Product/64Driver/DSO5000.rar

ECL  -K

Thanks very much ELC,

RFman
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on June 30, 2011, 04:15:36 am
ready compiled update file for Tekway DSOs only (with patched 512k/1M CSV export and updated help file)

Thank you very much Tinhead !
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on June 30, 2011, 06:57:05 am
ready compiled update files for Hantek DSOs only (with patched 512k/1M CSV export and updated help file)

Thank you very much tinhead about nice work!
I hope that the company Hantek also like to thank and appreciate the work you've done.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Pinkus on June 30, 2011, 08:00:53 am
Mmmmh - first bug found where the scope always crashes??
· Press button "Display"
· Choosing XY instead of YT immediately chrashes my scope.
Hardware: Hantek5102B, pimped to 5202B
HW 10005 (blue PCB), latest FW (110531.1. from Tinheads files dst1kb_2.06.3_15202b_fact)
Can somebody verify that this crash happens everywhere?

One more questions:
I noticed, that in my terminal program the scope says:
root@Tekway-dso /]#
I assume that is OK ??

Update: Logfile (RS232 output) is attached
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 30, 2011, 08:09:19 am
Thank you very much tinhead about nice work!
I hope that the company Hantek also like to thank and appreciate the work you've done.

you welcome.

You mean is it time to ask for free Hantek Handheld DSO ? Or maybe one of the new DSO5000BMV series?
Probably i should, support costs always money. However, they know my address and my real name, so up to them.

As i said BMV series, do you noticed they updated series ? Long memory now with 2M instead of 1M, build-in 2GB flash card.
http://www.hantek.com.cn/english/produce_list.asp?unid=134
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 30, 2011, 08:22:43 am
Mmmmh - first bug found where the scope always crashes??
· Press button "Display"
· Choosing XY instead of YT immediately chrashes my scope.
Can somebody verify that this crash happens everywhere?

yes, i noticed it too. It does have something to do with an overflow during channel activation.
However it works perfect if you enable (just turn on, it does not matter if then on AC/DC/GND) both channels
or actually disable (turn off) both channels before you enable XY mode.

A small bug only, normally you will anyway enable both channels, setup coupling etc. before you go to XY.


One more questions:
I noticed, that in my terminal program the scope says:
root@Tekway-dso /]#
I assume that is OK ??
yes, don't care about that. That's historical thing, both companies belongs to sahe share holders and dev team is also shared,
probably Hantek could update root fs and change hostname, but normally enduser have nothing to do there.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on June 30, 2011, 09:26:31 am
Mmmmh - first bug found where the scope always crashes??
· Press button "Display"
· Choosing XY instead of YT immediately chrashes my scope.
Hardware: Hantek5102B, pimped to 5202B
HW 10005 (blue PCB), latest FW (110531.1. from Tinheads files dst1kb_2.06.3_15202b_fact)
Can somebody verify that this crash happens everywhere?

One more questions:
I noticed, that in my terminal program the scope says:
root@Tekway-dso /]#
I assume that is OK ??

Update: Logfile (RS232 output) is attached

Also with original hantek factory installed 110531.1 FW and version 7 HW (original unmodified DSO5062B and also unmodified DSO5102B)

(BTW it is same type crash what happend with measure menu if use help... (--> Killed.)  Scope did not loose his mind... after crash it follow UART commands.
totally different if compare example zoom window crash in old FW... what is really crash)

So problem is in original Hantek FW and also with new ver 7 HW.

Both Channels off or on, no crash. Only one on -> Killed (not crashed to random but need still power off/on if terminal is not connected to uart.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: flodins on June 30, 2011, 07:27:13 pm
tinhead

Do you know what toolchain they used in hantek? I'm still trying to run chroot on scope.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on June 30, 2011, 07:39:07 pm
NOTE!

Do not use this new here shared 110531.1 FW (tinhead shared  .up) for new HW version 10070 scopes.

this time it is not compatible without some adjustment/repair.

Only for HW 10050 and below afaik.

(original factory installed 110531.1 works of course with new 10070 HW)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 30, 2011, 08:04:37 pm
NOTE!

Do not use this new here shared 110531.1 FW (tinhead shared  .up) for new HW version 10070 scopes.

this time it is not compatible without some adjustment/repair.

Only for HW 10050 and below afaik.

(original factory installed 110531.1 works of course with new 10070 HW)


right, sorry i forgot to tell this because in principle all hw1007 boards have exact the same firmware version .. of course except fixed help file and patched dso.exe to support larger CSV export ... now i see the problem, if someone having
hw1007 try to update over existing "same" firmware then of course the DSO will stop to work properly.

The reason is actually very simple, the update script don't know "yet" hw1007, so it will copy wrong FPGA design.
This will not damage the hardware, but the firmware will not work properly.

In such case you have to:
- copy attached file to USB stick
- insert stick into DSO
- connect over UART
- run this killall dso.exe
- run cp /mnt/dn.rbf /
- run chmod 777 /*
and then start the dso application by typing /dso.exe

as far i can see this should be sufficient.

I case you tried to "fix" with self-calibration you will have to run it again after these steps in above.


Some tech. background:

Since hw1007 the firmware (dso.exe) is checking the hardware revision within few functions and calling in a different
way the FPGA. So if the eeprom/board are 1007 everything fine as long the fpga design is from hw1007.
Now what here happens is that the update script don't know yet hw1007 and definitely copied older fpga design file
overwriting the 1007 version, which of course don't have new functions implemented and the DSO is getting "crazy".
Therefore this simple fix - restore of hw1007 fpga design file (dn.rbf) should helps out.

Even if there is some backward compatibility (actually the dn.rbf from hw1007 works on hw0 too), i would
not recommend to use different version than the one designed for the specific hw revision.
We can test many things, but we don't have view into the sources, so it might be dangerous mixing versions.

The executable itself (dso.exe) is a different story, Hantek will probably some day drop support for hw 0,
but as of now they still supporting and developing only one executable file for all models (even these 500MSs models have the same dso.exe file) and all hw revisions.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 30, 2011, 09:24:02 pm
Thank you very much tinhead about nice work!
I hope that the company Hantek also like to thank and appreciate the work you've done.

you welcome.

You mean is it time to ask for free Hantek Handheld DSO ? Or maybe one of the new DSO5000BMV series?
Probably i should, support costs always money. However, they know my address and my real name, so up to them.


... and now you can write "Don't count your chickens before they hatch"

Actually i was thinking maybe for 5sec. about the update script compatibility with hw1007 ... but at that time i
wasn't thinking about compiled update files, instead of that i posted  files for manual update ...
and later as i finally decided (on request .. yeah, not my fault :P) to compile all these files i was not thinking
anymore about hw1007/update script potenatial compatibility issue .. here we go.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 30, 2011, 10:15:08 pm
tinhead

Do you know what toolchain they used in hantek? I'm still trying to run chroot on scope.

i tell you something, with different linux you will probably get some issues with lcd , definitely with usb,
we don't know the i/o nor memory mapping of cpld and fpga ... so we running blind.

If you need to compile kernel modules for this board, a good starting point is QQ2440 2.6.13 toolchain, gcc 2.95.3 OABI
(however i complied mtd utils with 3.4.1 EABI). A good idea is to look for firendlyarm2440, mini2440, qq2440, tq2440 boards
and 2.6.13 sources/cross toolchains, many things are already really ancient but you will still find them
(someone posted in this thread link for Q2440 sources).

This will work for all things except new hardware like wifi-sticks (ok, there are some working exceptions).

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: flodins on July 01, 2011, 01:20:52 am
tinhead

Do you know what toolchain they used in hantek? I'm still trying to run chroot on scope.

i tell you something, with different linux you will probably get some issues with lcd , definitely with usb,
we don't know the i/o nor memory mapping of cpld and fpga ... so we running blind.

If you need to compile kernel modules for this board, a good starting point is QQ2440 2.6.13 toolchain, gcc 2.95.3 OABI
(however i complied mtd utils with 3.4.1 EABI). A good idea is to look for firendlyarm2440, mini2440, qq2440, tq2440 boards
and 2.6.13 sources/cross toolchains, many things are already really ancient but you will still find them
(someone posted in this thread link for Q2440 sources).

This will work for all things except new hardware like wifi-sticks (ok, there are some working exceptions).

There is no problem with usb or lcd, framebuffer test works, I can display anything on screen. I can't make busybox or other binutils working. Then I whant to put X11 on screen and run some soft with GUI
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 01, 2011, 10:03:10 am
There is no problem with usb or lcd, framebuffer test works, I can display anything on screen. I can't make busybox or other binutils working. Then I whant to put X11 on screen and run some soft with GUI

you misunderstood me, i'm talking about possible DSO application issues not about the hardware itself.
On the hardware level itself you can install whatever, WinCE, µCOS, RTOS, *nix - this is Samsung SoC S3C2440
board + DSO extras.

But there might be an issue when the dso.exe tries to access LCD or accessing USB for DSO<->PC communication or general issues trying to access i/o and mapped memory. Just look into /dso/drivers directory and you will see why drivers you
will need to rebuilt without sources. Sure, maybe these original drivers will work with tainted kernel, but if not
you will have do recompile them .. and we don't have source code for them. And sure, you could disassemble them and recompile, but that's might not work either if you do it wrong.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: flodins on July 02, 2011, 12:50:23 am
Now I know that they use crosstool-0.27 gcc 2.3.2 and glibc 3.4.1 to Fedora Core 4 system (: oh source code could save lot of time, How did you know about "rgj" developer?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on July 02, 2011, 08:53:22 am
Now I know that they use crosstool-0.27 gcc 2.3.2 and glibc 3.4.1 to Fedora Core 4 system (: oh source code could save lot of time, How did you know about "rgj" developer?

This time whole scope was  Tekway. Small company who first copy some Tektronix extremely poor model but after then they develop new scope. They sell also scopes to organization under PLA.


But this kind of fun can also today find inside FW:

"
#2007-9-29  by rgj
if [  -f /$1 ]; then
        echo "have dso_update.exe"
        if [ -f /dso.exe ]; then
                mv /$1 /dso.exe
                echo "do backup and update the sysytem"
        fi
else
        echo "no update file to foud"
fi
echo "now run app ....."
exit 1
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gall on July 04, 2011, 06:00:14 am
i tell you something, with different linux you will probably get some issues with lcd , definitely with usb,
we don't know the i/o nor memory mapping of cpld and fpga ... so we running blind.
Haven't you tried to determine this?

Most likely the peripherals are occupying whole memory banks (nGCS#x) for simplicity. One memory bank of S4C2440 is 128M, and it is quite probbale that the DSO's memory is just mapped to S3C2440's address space. Another memory bank may be used for control registers ant it may be that only 2-3 least significant bits are used while MSBs are completely ignored, resulting in 4-8 io ports occupying the whole 128M bank.

Did you make any other hires photos of the board with components unsoldered? May be we can run the kernel debugger?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 05, 2011, 06:04:44 pm
Haven't you tried to determine this?

Most likely the peripherals are occupying whole memory banks (nGCS#x) for simplicity. One memory bank of S4C2440 is 128M, and it is quite probbale that the DSO's memory is just mapped to S3C2440's address space. Another memory bank may be used for control registers ant it may be that only 2-3 least significant bits are used while MSBs are completely ignored, resulting in 4-8 io ports occupying the whole 128M bank.

i know how this works, it was just a simplified answer who just trying to update Linux version without
deep hadrware knowledge.

Did you make any other hires photos of the board with components unsoldered?

no, not yet. I got some broken boards so i will finalize schematics of hw0 soon.
Unfortunately boundary san was not working properly for all pins (like adress bus, etc.)

May be we can run the kernel debugger?

afaik there is no integrated kernel debugger in 2.6.13

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 05, 2011, 07:33:43 pm
For those who have 2.06.3 (110531.1) installed:

I did modified the English.lan which is the menu file if you specify English UI.

The changes are in principle everywhere, typo corrections, naming changes from chinese-english translation to
proper good-known names, word-wrap fix to all message boxes (Probe check, Firmware updates etc...),
warnings and error messages and so on.

Not that i can't work with "regular" instead of "Pass/Fail mask" or "Open" instead of "Run" or "On",
but it makes definitely sense to not spend time for guessing what the function is actually doing.

Attached two update files:
dst1kb_2.06.3_newlang(110531.1).up - this one is with the proper English
dst1kb_2.06.3_orglang(110531.1).up - this one is the original one, in case you wish to restore back for whatever reason

The update works on both Tekway and Hantek models (update is not model dependant), however
please do not install it if you have different firmware version than 2.06.3 (110531.1) as it might breaks something.

If you like it let me know, maybe Hantek/Tekway will implement it into the next official firmware version.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jellytot on July 06, 2011, 10:33:56 am
Thanks Tinhead. Thats a huge improvement, I think that Hantekway would only be too grateful
to have this work done for them...I hope they do use it in future builds.. :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on July 06, 2011, 12:30:15 pm
Yes, really nice work. Thanks!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jyo on July 06, 2011, 02:15:53 pm
Great job, tinhead. Oscar of the best DSO hacker! ;)
But we are not in Kansas, true? What about a french langage update?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on July 06, 2011, 03:34:53 pm
Hi guy`s!

I read tinhead post about DC/DC converter on 3.3V.

Most easy and low cost way its magamp in current fly-back PSU. Like in standard ATX PSU on 3.3v rail.
No linear IC (~1$), same diode, little more big capacitor and inductor.
And no heat.


By the way, If  add capacity to existing smoothing inductor to form a parallel oscillatory circuit with a frequency converter can be greatly reduced noise frequency conversion.
   
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: JRoque on July 06, 2011, 09:13:23 pm
Hello all. I had to register to thank tinhead for his help. I purchased a Chinese version of the DST1102B for USD $580 including - get this - next day shipping! They sent me a Chinese AC plug but that's fine. The USB port in the back doesn't work.. yikes. They also sent me a front panel sticker in English.

I went through all of this thread and nothing seemed to work. Oh the scope was complaining about something but I have no idea what it was. I got to the last page and found out that my 10070 hw version scope, already with 2.06.3 fw wouldn't take the same fw again. The last file updated by honorable and oh wise one tinhead did it and now my UI is in English.

BTW, my PC complains about an unrecognized device being plugged in. I've seen this issue before with my own USB devices where I've missolder (a word?) the USB chip or a short is drawing too much current. Now that my menu is readable (to me), I'll see what else I find. But this will likely be a hardware issue with the scope USB driver chip - and there goes any savings I had by buying direct from China :-)

Regards,
JR
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 06, 2011, 10:35:15 pm
first of all try to find out what king of message you saw on the screen ...

Regards the USB, well the transciever is integrated into the main µC (Samsung S3C2440), this is a BGA chip so it
might be soldering issue (PB-free sucks). However, it might be something else too (like a cold soldered series resistor
between BGA chip and USB plug, or cable).

Btw,you should connect the DSO to PC after the DSO fully started-up, this is because of the fact that the S3C2440
will send different VID/PID during boot process (actually this is coming from the bootloader) and laetr different one
after Linux on the DSO started-up.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: JRoque on July 06, 2011, 11:52:49 pm
Hi. My guess is that the messages I was seeing before were related to the firmware conflict. They were red in color, does that help? 8=)

I got it to connect... sort of. I powered it off, disconnected it from mains and waited 5 mins (switched on for max drain). I then plugged AC in and booted it. After about 30 seconds I plugged it into the PC and no error! It now says "Tekway Measurement Device" in Windows Device Manager. I launch TTScope and it connects to the scope but it says: "No exsit [sic] configuration files to this machine!", whatever that means. The only thing that seems to work is the "Auto Set" function from the Setup list.

I'm going to try your suggestion of waiting a couple of minutes after booting to see if that helps.

Regards,
JR

PS: I rather shoot myself in the foot than trying to replace a PB-free BGA. Thanks for the warning.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 06, 2011, 11:59:50 pm
I launch TTScope and it connects to the scope but it says: "No exsit [sic] configuration files to this machine!", whatever that means. The only thing that seems to work is the "Auto Set" function from the Setup list.

download the latest ttscope from Hantek website ... it is compatible with Tekway DSO.
http://www.hantek.com.cn/Product/DSO5000Series/DSO5000/TTScope.EXE (http://www.hantek.com.cn/Product/DSO5000Series/DSO5000/TTScope.EXE)

you can also use the latest drivers (there is for 32 and 64bit OSs)
http://www.hantek.com.cn/Product/64Driver/DSO5000.rar (http://www.hantek.com.cn/Product/64Driver/DSO5000.rar)


PS: I rather shoot myself in the foot than trying to replace a PB-free BGA. Thanks for the warning.

hehe, easier as you think, in each every country there a mobile phone/xbox repair stores, they can do it for you.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: JRoque on July 07, 2011, 12:20:54 am
Ok, where do I send you a Paypal donation? That worked flawlessly. See if you can PM me your email address or if you have (you should!) a Paypal donation button somewhere that would work too.

Also, waiting a minute or two for the DSO to fully boot is also working.

Regards and, really, thank you!
JR
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 07, 2011, 01:18:44 am
you welcome, and no, donation is not necessary, my support if free of charge!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: colinbeeforth on July 07, 2011, 04:42:48 am
Hi Tinhead,

Thanks very much for the improved English language file. I greatly appreciate your work on this!

I have been using my Hantek DSO5102B for much of my work lately, and comparing the results to my LeCroy 9310M.  In general, the Hantek is not as logical as the LeCroy, but I understand - it achieves a lot with cheaper hardware.  I am beginning to appreciate it's usefulness, the nice screen and the small bench size.  I wish it would not crash quite so often.  Like you advised me a while back, I've tried not to stress too much about exactly how it achieves what it does, and just use it.  Hantek sent me a list of timebase setting versus digitiser speed, and it's a bit strange, but obviously trying to get around some sort of hardware limitations.  In practical usage, the Hantek screen usually looks like the LeCroy screen, if you are not trying to do something tricky with the LeCroy's waveform processing maths.  I've often used waveform processing to extract information where any other digital scope would be useless, but I'm not doing so much of that research type work these days.  So, I took your advice, and stopped fussing so much, and I'm getting some work done with the scope.  Thanks again for the improved language file, that really does help to make using the machine nicer.  It's a shame that Hantek/Tekway couldn't do that in the first place...  It doesn't look like they will ever admit they need some help.  Cheers, Colin, Melbourne, Australia
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on July 07, 2011, 08:43:45 am

  Hantek sent me a list of timebase setting versus digitiser speed, and it's a bit strange, but obviously trying to get around some sort of hardware limitations. 

Is it possible get this information?
I like to see how they have explain it.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 07, 2011, 04:58:33 pm
Thanks again for the improved language file, that really does help to make using the machine nicer.  It's a shame that Hantek/Tekway couldn't do that in the first place...  It doesn't look like they will ever admit they need some help.

I've send all modified files to Hantek, they promised to review it and implement evt. in later fw versions.

For sure we could blame Hantek, but actually we know that Tekway designed the multilanguage version in the first place,
so some things has been just overtaken. And you probably know how company merger works,
an CEO or even product manager will not look into such technical details (and you can be sure these ppl speak perfect english).
On the other side i know many talented engineers over the world not talking (or actually writing) perfect english.
So it is just something between company overtake/merger and QC. Sure, Hantek website does have
some typos too, but other and bigger companys are not that much better, so what.

For me is important that they reading this thread, in contact with me (and some other ppl here),
that they listening carefully and trying to improve their products. This is more than actually expected from
a non-global player (think just Fluke and their no-response to Dave's issues).

Btw, i said there are new products on Hantek websote, BM and BMV models. I got an confirmation that
they will be not ready before Sep 2011.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: A Hellene on July 07, 2011, 09:57:11 pm
I am trying to see what a modern DSO input stage looks like: the most modern schematic I have found so far is from the Tek 2232 (June 1992 !).
Well, I think that you can consider yourself lucky, since I have just posted(!) the Rigol DS1052E HW58 (2011 March PCB revision) Channel 1 analog front-end schematics (https://www.eevblog.com/forum/index.php?topic=4048.msg53676#msg53676), while trying to troubleshoot my device (https://www.eevblog.com/forum/index.php?topic=3738.0)!



Tinhead,
If you examine the schematics mentioned above you will discover a few differences that exist between them and the DST1102B schematics you have posted earlier.
I hope that helps a little...


-George



[EDIT]: Schematics updated.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 07, 2011, 10:31:38 pm
i remember i posted few times the input stage, it wasn't complette anyway (or actually some copy/paste errors in values)

Attached the latest version, and yes there are some small diffs in attenuator compensation especially, but nothing
really important at all.

As i said before i will post soon the complette schematics, i have to find some time to ping here and there once again
to ensure everything match.

Btw: all important caps has been unsoldered and measured, all others are estimated values in circuit (when possible),
not important decoupling caps/inductors/ferrite bead skipped - every good EE know they are there.
CH2 is a bit different around HC595 as because HC595 within trigger circuit and both input channels HC595
are in same chain (you will see it)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: A Hellene on July 07, 2011, 10:36:46 pm
Thank you, tinhead!

I'll do the same with my DS1052E HW58 (2011.03 batch) schematics, when they become ready for publishing.


-George



[EDIT]: Sorry for the delayed response; I did not see in time the additional information you posted.

I have not removed the capacitors to read their values, so the values in my schematics are estimated (measured on board and calculated). When I will find the time needed to do that I will remove the critical ones (the timing/ filtering/ etc.) and will update the schematics.

Regarding the 'HC595, Rigol uses the faster AHC595 (marked HA595), even though I cannot see the reason why they do that because they are driven (by the BlackFin) with relatively slow signals (10.0MHz) and their fan-out is almost the same. The three AHC595 are also cascaded in the DS1000 and they are also driving the two VGAs. When the processor is addressing the VGAs it sends a 16-bit word and toggles their LATCH input; when the BlackFin is addressing the 595 shift registers it sends a 24-bit word and toggles their RCLK lines that are tied together. The first 595 that controls the Ch1 components takes the MSB, the second 595 that controls the Ch2 components takes the middle byte (the NSB), and the third 595 that drives the Video amplifier (LMH6574) address lines (A1:A0), the HC4053 control and the trigger signal blanking takes the LSB.

On the other hand, the two HC4051 demultiplexers and the DAC are driven by the Lattice LUT in the same manner: The HC4051 share the same address lines (S2:S0) and their /Enable lines are driven individually. The DAC has its own driving lines and produces 10 discrete voltage levels that are demultiplexed by the two HC4051 and buffered & amplified by four of the five TLC274 quad op-amps.

It seems that those two designs (the Rigol and the Tekway/Hantek) are not so different after all...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: A Hellene on July 08, 2011, 09:04:08 am
You are welcome!

But the credit goes to Tinhead, since his work has been an inspiration for many of us.


-George
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: saturation on July 08, 2011, 11:06:32 am
As the forum doesn't have a thank you button, need to express my personal thanks for the decoding of the PCB,  tinhead and Hellene, most excellent work.  I continue to follow all your posts closely!


You are welcome!

But the credit goes to Tinhead, since his work has been an inspiration for many of us.


-George
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: A Hellene on July 08, 2011, 11:53:50 am
Thank you for your kind words, saturation!


-George
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: saturation on July 08, 2011, 01:10:02 pm
Alas, without volume pricing on parts, we'll very likely pay more if we assembled it ourselves, given a free, open hardware design.  That's not adding the time and labor.  Its probably far easier to extend or modify existing hardware to improve its performance, than build from scratch.

When I see so many talented people struggling to make such proprietary DSOs work as expected, despite language, culture and manufacturer's short term-only vision, and put so many efforts in it, I am now sure it is worth trying to develop a decent open source/hardware DSO!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Igor on July 08, 2011, 05:19:25 pm
Tinhead, if in the window “Display” press F4 (Format XY) oscilloscope hangs and stops responding to all buttons. You can only revive the Power button (re-enable).
Do You encountered this error?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on July 08, 2011, 05:59:30 pm
Tinhead, if in the window “Display” press F4 (Format XY) oscilloscope hangs and stops responding to all buttons. You can only revive the Power button (re-enable).
Do You encountered this error?

Mmmmh - first bug found where the scope always crashes??
· Press button "Display"
· Choosing XY instead of YT immediately chrashes my scope.
Can somebody verify that this crash happens everywhere?

yes, i noticed it too. It does have something to do with an overflow during channel activation.
However it works perfect if you enable (just turn on, it does not matter if then on AC/DC/GND) both channels
or actually disable (turn off) both channels before you enable XY mode.

A small bug only, normally you will anyway enable both channels, setup coupling etc. before you go to XY.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: A Hellene on July 09, 2011, 12:00:18 am
Squonk,

Thank you for pointing that out. This was yet another copy error in my schematics... I am sorry about that. I will correct the schematics and re-upload them soon.

Actually, tinhead's version is the right one: In the pictures of both the Rigol and the Tekway front-ends it is clear that the buffered JFET output is fed to the inverting input of the VGA (pin 16) via the 33R2 (marking: 51X) resistor. This is the TP2_1/TP2_2 in Rigol and TP103/TP203 in Hantek/Tekway, for the Ch1/Ch2 respectively. The non-inverting input of the VGA is the TP210/TP111 in Rigol and is driven by a complementary emitter-follower stage with some heavy output decoupling electrolytic capacitors.

Regarding the relays, though I have not looked into it I think that they have a polarized coil of 5V/20mA or so.
A brief search for the Rigol's relays (FT B3GA4.5) revealed this (http://www.fujitsu.com/downloads/MICRO/fcai/relays/ftr-b3.pdf), which confirms the polarised coil of 4.5V/30mA.


-George



[EDIT]: Done!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on July 09, 2011, 08:22:31 am
Hantek relays:

NEC  UD2 - 4.5NU  datasheet (http://www.worldproducts.com/pdfs/uc2ud2.pdf)

I can not see S in typecode between voltage 4.5 and option NU marking.

"Latch type
Nil: Nonlatch type
S: Single coil latch type"


Here you find picture about Hantek HW rev 7 (newest)  front end (http://www.box.net/shared/e24b9paza7m42dgibnbj)


And, also in Rigol

...GA....

"A : Standard type
B : Latching type (1 coil)
"

Btw. I did not understand what is "polarized".

But this I know that there may be monostable, bistable with one or two coils, relays in electronics and even more complex... . As many time they are called "impulse" relays also.

Example HP old digiscopes use 2 coil bistable relays in front end. Power off... and nothing can ghange. Power on and nothing change.

But, what I do not like.... Manufacturer/designer have not read these relays specifications... or simple, he/she do not care.
And why this most bad model in this relay series..  is it price question or "so what" case in design.

I do not like what happends in Hantek input as you start oscilloscope (or off) (not maybe always)

To where and how input is connected after shut off...and in startup time.

This design bug is terrible. I name it bug, maybe some other can accept it but I dont.
What if you have allready high level (example maximum level) voltage connected to input... but of course, develop test lab with peoples who really have not enough experience  how good lab machines need work...  who can teach them? Customers?

Look these schematics, look these agen...and look agen and same time think. Always designer can think... no need care... or: so what.

Voltage and current what come out from CH1, CH2 sometimes in shut off time or startup time... what hell  they are thinking.
But what is source...  (yes this current is not high, voltage is not high but enough to affect sensitive things.

Ok, go to do some (imagined) industrial service work with this. So, that you example try find some problems in situation where all systems are running with full speed... then you keep your scope connected and watching... and there come lunch time... you shut off your scope... (or come back and shut on)  one PID loop swings from one end to one end... after ten seconds whole system is short time heavy disturbed, alarm rings and paper breaks... oh...thank you Hantek... it was only some tens of kilo euro. (imagined worst case scenario ;) )

(this is one reason why Agilent (oh maybe I'm wrong and need say, old Hewlett-Packard)  or Tektronix professional series instrumets (not hobby series) are very cheap in use.)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on July 09, 2011, 10:54:41 am
If I design some day oscilloscope front end (I do not want - If need I copy Tek or old golden years HP) I do not recommend this kind of cheap toy relays at all. They belongs to cheap entertainment equipments. But not to serious _good_ oscilloscope.

Max. switching voltage 250 VAC / 220VDC ! But my scope front reads 300V CAT II  "so what"
Min. switching load * 0.01mA, 10mVDC !    who knows, who care ... and "so what" as long as boss pay my salary...

Of course with this price class oscilloscope it can live with these.

I mean if need something good. If need design _good_ oscilloscope front end put these Rigol-Hantek style front ends to garbage and never tough them. But agen...in this price class they are ok and "not so bad". It is totally different case if go to scopes where price are ten times.

Poor flatness and extremely poor filtering is also problem for these both, Rigol and Hantek, front ends.

Yes with sinewaves no big problem but if need really measure some pulses shape or other littlebit more difficult things... this can not use. Becouse  do not know if you measure your scope or DUT.
But agen, in this price class, with this can live.

This do not mean that I tell Hantek is bad scope. NO, it is very very nice scope in its price class.
But I mean, if want do better (example some open project development)... do not look these front ends at all, only for learning what all mistakes need avoid.

Simply nice test for this design bug...

Connect 2 Hantek scopes "parallel" looking same signal.. example 1MHz sinewave and example both 2mV/div DC. Konnect signal simply by 50 ohm cable with simple T to both scopes CH1
Adjust signal so that both scopes looks same and signal is vertically center.

Shut off a oscilloscope. Look b display. Then agen start this a scope.
Look still this b screen.  maybe it do not this all times but mostly. Why this b display signal swing vertically.

Write User manual agen.

Do not keep any signal connected to scope when you on or off oscilloscope power.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 09, 2011, 11:20:50 am
I noticed in this picture these 3 strange new unpopulated footprints between the AD8370/LMH6552 and the AD8510... Really looks like a crystal with foot capacitors layout, but I am sure this can't be the case.
hehe, no not for cristal, probably temp sensor, however we should track back these pins.

Still, I don't understand the lack of current limiting resistor for the OptoMos: this device is a Cosmo KAQY214S solid-state relay with MOSFet output, with a max forward voltage of 1.5 V, and max forward current of 5 mA.
oh there is one, such things are like decoupling caps and just skipped in my schematics now

Also, although I may understand the reason why the input capacitor before the JFET and the dual BAV99 diodes is angled at 45 degrees to shorten the trace in this particularly sensitive area, however I don't understand why Tekway also angled all the AD8370/LMH6552 stuff this way? Is this to stress their pick-and-place machine? ;D

no, that's basics of HF design in combination of limited space for input circuit.

Do not keep any signal connected to scope when you on or off oscilloscope power.

right, the input is never ever really off.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on July 09, 2011, 11:25:43 am
...
Ok, go to do some (imagined) industrial service work with this. So, that you example try find some problems in situation where all systems are running with full speed... then you keep your scope connected and watching... and there come lunch time... you shut off your scope... (or come back and shut on)  one PID loop swings from one end to one end... after ten seconds whole system is short time heavy disturbed, alarm rings and paper breaks... oh...thank you Hantek... it was only some tens of kilo euro. (imagined worst case scenario ;) )

(this is one reason why Agilent (oh maybe I'm wrong and need say, old Hewlett-Packard)  or Tektronix professional series instrumets (not hobby series) are very cheap in use.)[/size]
In a good design, I would recommend:
  • to put a 2kV spark gap at the input, with very good path to ground for ESD protection, see Dave's videos if you are not sure what I am talking about :o
  • to provide a normally-open GND coupling relay at the input, which would physically disconnect the device under test when the scope is turned off and during start-up transients, to avoid any harm to it, or don't go out for lunch during tests ;D

1. Scope input capacitance and inductances need keep low. Every extra millimeter trace make it more bad.
2. This is not "start up transient" what I'm talking.  Also cutting signal with some relays in input stage... and specially if you want cut both... GND and signal... maybe this can collect more problems than goods.

2kV sparc gap in scope input. What it protects? Maybe something but I do not want any pF more to input. I'm happy about any pF what can take off. I think it is more clever to make small add to input BNC so that peoples who do not know what they are doing can also safely use scopes. (safety plug in... for low freq signal looking) It needs small box and M and F BNC and then these protection components. ;)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on July 09, 2011, 11:35:39 am

right, the input is never ever really off.

But, where it is sometimes connected in (only) boot up time and sometimes (power drop) off time shortly?
(I have not yet inspect what there happend exactly...  next time I have time and front end open, I want look carefully what is going on with there relays in boot time and specially if there is any posibilty that CAL realay do something... if CAL relay do connect... momentarily,...  then it is good to install switch  to front panel... (Cal/no cal ... haha)

(this all start as I test parallel lot of these scopes...  and also one other test procedure... there was one component damage and I'm still not sure if it was natural die or... outside from scope in start up situation come signal.... if this signal what I use was going to wrong road... (to calibration circuits). But this time it is onlu speculation.

But DC swing out from CH input is not very nice... tens of millivolts sometimes (and changing) over boot up time. After boot is just stop. This is not wise.,
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 09, 2011, 11:59:30 am
replace all these cheap relays/optoMOS by more adequate models

well, don't care that much about CAT II specs, 10x probe is standard for me.

replace BAV99 diodes

why? They good enough.

replace the 2 BC846 transistor for current mirror by at least a matched pair (BC846B)
that's already matched pair of BC846B (actually you don't have to much them today anymore)

replace the AD8310/LMH6552/VariCap by the LMH6518 above
for what? Actually you mean AD8370 and not 8310 (or you mean the AD8510 in LF path?)
Anyway, there is no reason to replace them. I can tell you something, Rigol did it in 300MHz CA models
and switched back to AD8370/LMH6552 because this combination works better.
Varicap is actually only part of the story, it 20MHz bw limiter, yes, but it does have only
mariginal influence on HF bw (just calculate back the filter corner freq. given by varicap+caps, out/in imp. and the
resistor networks and you will see it is much higher than necessary. The bw filter is within firmware)

straighten the signal trace as much as possible
hmm, it is stight, then 45° to first opamp then again stright ... the only think i don't like
it are the replays switching ADCs together, but the influence is as far as possible reduced
by self-calibration

keep the signal trace as short as possible and away from other traces
that would be complettly new PCB, much bigger anyway. Hantek/Tekway did it anyway better
(they have at least better shielding) than Rigol/ATTEN where the PSU is so close to ADCs/Trigger
stage/1MSs-500MSs relays that you have already influence.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: alm on July 09, 2011, 01:43:28 pm
I am trying to see what a modern DSO input stage looks like: the most modern schematic I have found so far is from the Tek 2232 (June 1992 !).
There's a more modern service manual for the Tek TDS520 available, I think on tek.com. Not exactly modern, but fairly detailed.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 09, 2011, 02:02:24 pm
Really? Do you have more details on this? Maybe pictures, schematic of it? I am really interested!
well both, but i can't publish as they has been created by someone else who don't wish to publish them,
which i will of course respect. But actually there is not that much difference
(except 50Ohm input switch and resulting gain switch)

This can't be, you have to do anti-aliasing filtering before sampling, not after. Maybe you mean that filtering is controlled by firmware?
no you don't, or not in form of what you interpreted from the schematics. It is hard to say what exactly Rigol/Atten/Instek/UNI-T/Tonghui are doing within the firmware because nobody (yet) reversed it. However it is simple to reverse Hantek/Tekway
as the firmware is on Linux based system, therefore we know some details how this works.
Sure, FPGA/CPLD design are not known, so we can only guess, but already from the application itself we know that
a sharp digital filter is implemented to replcae a typical analog bw filter. As all these DSOs are  (more or less) identical (like Rigol/ATTEN/HanTeway) or the concept identical (UNI-T/Tonghui/Instek vs Rigol/HanTekway) we can assume that
all these non linux based DSOs are doing it exact the same way HanTekway is doing.

For Rigol it has ben already tested before i started to play with it, if you even remove all caps/varicap and even
replace resistors to what HanTekway is having the circuit will not maigally allow 200MHz -3db bw,
even if you solder exact same components are 300MHz CA series is doing it will not works.
So the logical answer was for me "it must be firmware", and after i looked for it i found how at least HanTekway is doing this.

The details are here:
https://www.eevblog.com/forum/index.php?topic=1571.msg45275#msg45275 (https://www.eevblog.com/forum/index.php?topic=1571.msg45275#msg45275)
https://www.eevblog.com/forum/index.php?topic=1571.msg45649#msg45649 (https://www.eevblog.com/forum/index.php?topic=1571.msg45649#msg45649)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: alm on July 09, 2011, 02:16:34 pm
Unfortunately, Tek schematics are only block level after the Tek 2232, so is the TDS520 :-\
Really? Have you checked? The document is called 'TDS 520B Mod CM Digitizing Oscilloscope Component Service Manual', and those schematics don't look like block level to me.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 09, 2011, 02:21:17 pm
that would be complettly new PCB, much bigger anyway. Hantek/Tekway did it anyway better
(they have at least better shielding) than Rigol/ATTEN where the PSU is so close to ADCs/Trigger
stage/1MSs-500MSs relays that you have already influence.

btw, the Owon SDS does have totally different design (meaning PCB size, location, direction) so it would be
interessting to shot of a picture what inside. I hope i can get soon SDS8102.

Currently i'm testing Tonghui TDO3000 series, they have beautiful LC meters but actaully nobody knows their DSOs.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: alm on July 09, 2011, 02:51:49 pm
EDIT: Actually, I found the "Component Level Service Manual"on an exotic website
tek.com is exotic?

but not really useful: Tek was already using hybrid modules for the analog front-end, thanks anyway  :-\
That's a modern DSO for you ;). Lots of custom silicon, even more today than back then. This helps decreasing footprint and costs, and increasing performance. Some SMT passives on FR-4 just doesn't cut it for good HF performance.

Only exception is the low-end brands who just can't justify the investment.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on July 09, 2011, 02:57:36 pm
Before I have tell this "bug" in design related to CH1 and CH2 as scope is booting.

I check it and:

R1CH1 go on just as scope is powered on.  Around +3,5V to coil as long as scope is booting.

So, scope input is directly connected to SELFCAL line (trough 248ohm resistor) as long as it is booting .
(what if I trust input is 1Mohm, but this is not so severe...how about high voltages on the input...)

Is it doing some kind of self test?

But  IMHO this is totally wrong!
Becouse there is no any protection.

Yest they tell that do not connect anything to input if do selfcal. Of course but they do not tell that scope is also connected to unprotected selfcal line as it is booting.

Front end read 300V CAT II.

I think someone need shame now.
How can tell Hantek that this can not do?

Scope may be connected to signal all time, powered or not.
There is no place what warning this.

Example if I have test system made... so that I'm continuously watching some signal with scope. But signal is always on... example some kind of transmitter.

I have made signal cabeling and matching.  Do I need every time take signal cable off if I want power (off) on this scope.
How about if power switch is on but shortly mains breaks.

Yes I understand these chinese boys who design and test these in they lab and only what they randomly think... and test just as they think use of scope. Well, maybe nobody think what all kind of situation scope may be in field.

I have speaked... Ugh
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: alm on July 09, 2011, 04:47:59 pm
I could only find the "Module Level Service Manual" there, I had to search for TDS520 "component level" service manual in order to find it somewhere else.
A search for tds520b on tek.com finds this (http://www2.tek.com/cmswpt/madetails.lotr?ct=MA&cs=msv&ci=9971&lc=EN).

The Tek 2232 was probably one of the latest
As hobbyists, we have no access to either Hybrids or analog ASICs, so both the "old" Tek 2232 and these cheap low-end DSOs are interesting to look at.
Agreed, you learn more from studying the older technology, but it's not how a modern DSO is build. Just like a modern consumer widget often consists of a blob of epoxy on a phenolic PCB.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on July 09, 2011, 04:50:57 pm
I will still continue this HanTekway problem becouse this thread is for these scopes and specially not develop thread for open project front end.

This CH1 and CH2 bug is not at all so nice.

First as before. Both Channels are connected to Selfcal line trough 248 ohm resistor.
After these resistors both channels are connected together and after this they are connected trough 470ohm ressistor to TLV272IDGK output.
And this is not all. It is also connected to MAX II (cpld) pin 36 trough some small resistor and 220nF capacitor. (no dc but...)

You can test.

Measure resistance between CH1 center to CH2 center. Start up scope. Booting time it is around 500ohm.
Try with 300V fast rise ..  yes... after this you can buy new scope.

Someone ask... why ever some connect scope to signals before it have booted. It is good question.
But if it have done... first channel 1 signal and 2 are connected together as 500 ohm resistor. Nice.. yeah..
How about ~700 ohm to TLV272IDGK output?

If you have connected scope to some sensitive circuit... scope FW crash... do you remember connect probes or other signal wires out before boot...

I want go to qingdao and look this clever EE eyes when I show him what happend with his clever design.  After some smoke... yes put smoke back... it works agen.

Please correct if I am wrong!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: alm on July 09, 2011, 05:10:39 pm
Popular 10x probes will add 9Mohm of series resistance. Even 1x scope probes add a few hundred ohms of series resistance. This may make the issue less severe. It does sound like bad design to me, though, inputs should either be 1Mohm or open-circuit when the system is booting/off.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 09, 2011, 05:28:12 pm
Well, that's confusing: for a single ADC, you need to meet was is known as the "Nyquist criterion", see Wikipedia ...

But what I am saying is only good when you have a single ADC...

As there are up to 10 of them, they can be clocked so that each one is sampling with a calibrated period that is 1/10 of the sampling period, thus achieving an effective sampling frequency of 1 GHz. Then, by digital reconstruction, you are able to get a 1 GSPS resolution digital signal, that you can THEN filter digitally to whatever you want below that.

And in this case, I really don't know if what I said for a single ADC is still valid, or if aliasing "magically" cancels itself by using several of them working with such a clock scheme, only requiring a max signal frequency of 1 GHz/2=500 MHz...

... don't take Wikipedia seriously ... 20+ yrs HF and later ARM/FPGA is better than pure theory,
but actually "nothing" in compare to ppl who design scopes since years, aynway.

For real time sampling, with no avarage and continuously signals you should apply Nyquist based on total sample rate,
(with avg. on or equ. sampling the sample rate didn't matter but the time of acq., think sampling scopes),
and for single shot mostly the single ADC clock with combination of random skew between
ADCs have more influence on the waveform than Nyquist (so total sample rate reduced by error factor coming
from skew/jitter + additional aliasing from single ADC clock). Finally don't forgett the non linearity of componets,
PCB itself and tons of other factors.

And of course there is aliasing on almost all DSO below 1GHz bw, some are better and have intelligent filter,
some really worse (especially due additional distortion caused by not properly synched ADCs).

For this particular design just take a look on the app notes and datasheets of the components which has been
used for these DSOs, they has been not chosed by price (only) but primary by reason. For up to 300MHz not bad at all,
sure there are some gaps around max bw, but you will have to pay much more to get something better.
The waveform distortion pure visualy is not worse than on TDS3000, and that's already good enough.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on July 09, 2011, 05:51:08 pm
alm,  Yes, many times scope is used with 10:1 (or sometimes 1:1) probes, but not all time. 

Example I use lot of measurements directly from 50 ohm line or with some special other connection.
Scope have BNC vonnectors for signals, not only for probes. If it can safely use only with 10:1 probes they need be "fixed" probes... ;)

I have use tens of years HP and Tektronix professional scopes, cheaper and more expensive.

I have never see this kind of design bug. Newer in any seriously bade test equipment for real working.

500 ohm directly from CH1 to CH2 center whole boot up time!

Direct unprotected connection ti deep inside scope sensitive electronix from inputs as long as scope is booting.

Do not go any serious real work enviroment for doing any measurements with this before you exactly know what may happend in system under test or what may happend inside scope with these signals what are going inside scope as it boots.

Sometimes scope may loose power accidentally and then power agen or it may do crash and you need boot...

Hantek probe 1x  center - center resistance 250ohm

Ok lets calculate... with probes... there is 1k between channels at boot time. 1V... 1mA. 10V 10mA. 100V, 100mA. Probe is accepted 200Vpk at 1x. Ok lets do it... -200 one probe. +200V other probe. No violations if look specs.

400V _difference_ between CH1 and CH2 center. But still in specs... Scope input. 300V CAT II, Probe 1x 200Vpk.

400mA 400V. Wau. 160W... how many milliseconds is enough...

Of course these are nearly as worst case. But who hell is designer who do not remember "worst case rules for designing"
Now if I do this fully documented...  some persons who can proof what is done and also example video.

How many scope I can destroy so that always Hantek send new ones.

So, I give my recommendation.
Just as in calibration state, DO NOT connect any signals to input this time when you shut off scope or when you start up scope. Of course always you know that powerline can not drop...
(low level signals are not danger to scope trough 1x and specially not at all trough 10x probe...

But remember also what it may affect in your circuit what are under testing. All circuits can not like 1kohm connection between to probe connection points.

I think, Hnatek need immediately solve this design bug. If there need boot time cal connection it need solve different way.


Why here is smoke. After this...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on July 09, 2011, 06:42:04 pm
No any kind of real  antialising filter in front end. Front end is wide open for all signals over full freq span. And some peoples want it even more wide, but real advantage is make it more filtered but with better freq response shape.

8 (or 4+4) ADC clocked with FPGA PLL.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ECL on July 09, 2011, 08:00:27 pm

I think, Hnatek need immediately solve this design bug. If there need boot time cal connection it need solve different way.


I have not thought all of this through, so consider this idea "thinking out loud"  :)

Maybe 2/3 of the boot time is the OS coming up.  After that, the DSO app is run.
I have not observed any scope related state changes, prior to DSO running.  This
leads me to believe that the problem is caused by the initial state of the shift register,
controlling the relay.  Hantek should have added a tristate control, and pullup/down resistors
to all of the outputs, so the controls could be set to a knows state, prior to software initialization.
Looking at tinhead's (very handy) schematic, it appears that we may be able to force the
shift register to clear, by adding a RCD circuit to the SRCLR pin.  I have not checked if this would be
okay, for the rest of the signals, this register controls.  Another option would be to add an OE control
flop, tied to the RCLK term, and pullup/down resistors to the output lines.  The first write, to the SR
would enable the register outputs, until the next power cycle.  There is also the extra (open)
relay pole.  We may be able to do something with that, as well.

ECL  -K

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ECL on July 09, 2011, 08:10:38 pm

Just curious if anyone else is experiencing this behavior?  If I power-on my
Hantek, with a USB stick installed (front port), the stick is not recognized by the
DSO application.  The OS, however, does see the stick, and auto-mounts it.
I need to unplug the stick, and re-insert, before the scope will flag it's presence.
It appears, at least on my unit, that the DSO app needs to see an insertion event,
before it detects the presence of a memory stick.

Does anyone else see this behavior?

Thanks,

ECL  -K

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 09, 2011, 09:02:15 pm
500 ohm directly from CH1 to CH2 center whole boot up time!

are you sure ? When off, the self-calibration relay is not connected, the attenuator not active, so in principle 1.2M input
(the state of relays on my schematic is off mode)

Maybe 2/3 of the boot time is the OS coming up.  After that, the DSO app is run.
I have not observed any scope related state changes, prior to DSO running.  This
leads me to believe that the problem is caused by the initial state of the shift register,
controlling the relay.  Hantek should have added a tristate control, and pullup/down resistors
to all of the outputs, so the controls could be set to a knows state, prior to software initialization.
Looking at tinhead's (very handy) schematic, it appears that we may be able to force the
shift register to clear, by adding a RCD circuit to the SRCLR pin.

if there is not dedicated "enable" signal within CPLD design then the CPLD is controlling the
HC595 already during boot time, and after OS has been loaded switching to the last saved status.

This means if there is an issue then the dso.exe itself should (after the last state has been loaded) enable the HC595,
which is bad idea because we need then (or actually output) to be active to activate last state!
Even a simple solution like RC combination on /OE pin will break the functionality, a i/o controlled (from SoC and dso.exe)
will not work either. The only chance is (if not already done, which we don't know) to control the state of
attenuator/self-calibration control pins by the CPLD itself

However, even without knowledge what inside CPLD we can test it by not allowing the dso.exe and dn.rbf to
be loaded (just comment out these lines in /etc/init.d/rcS). I can't do it during next days, my both DSOs are now
disassembled (testing still a bit "ugly" clock domain hack).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on July 09, 2011, 09:09:20 pm
Yes, all what I can now look is HW5 and HW7 with FW, ..225, 420, 427patch, 531.1... all have this problem and afaik problem was also before. Not nice but can live with it. If need lot of USB things all times, it is good to buy short cable.... no need wear scope USB connector. (specially becouse these quality is just as entertainment quality (all USB connectors not only hantek but who care... today electronic need only 1-3year lifetime and tomorrow we go more short "designed" lifetimes.)..

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 09, 2011, 09:12:16 pm

Just curious if anyone else is experiencing this behavior?  If I power-on my
Hantek, with a USB stick installed (front port), the stick is not recognized by the
DSO application.  The OS, however, does see the stick, and auto-mounts it.
I need to unplug the stick, and re-insert, before the scope will flag it's presence.

yep, i know it. The funny part is, firmware update menu is even trying to access to stick, but
it fails because stick didn't exists (but the stick led is blinking ...) So it seems the firmware
just don't see a specific flag. Not sure if this is really firmware bug or linux hotplug delay bug,
it takes anyway a bit long to recognize usb devices. Maybe a delay before dso.exe will be loaded can help out.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on July 09, 2011, 09:24:01 pm
500 ohm directly from CH1 to CH2 center whole boot up time!

are you sure ? When off, the self-calibration relay is not connected, the attenuator not active, so in principle 1.2M input
(the state of relays on my schematic is off mode)


No, not exactly 500 ohm... but 2x calibration line resistor ;)
And after test long time, lot of shut off and on... sometimes it do not happend. Specially is very short time shut off and immediately on. But if litttlebit more time off... then looks like "always".

As scope is off relay contact is open, just as "rest" state.
After power on, both of  calibration relays get 3,5V to coil and contact close. After whole boot is over you can also hear relay go off. This time I have only HW7 open on my table and measured with it.

But I remeber HW5 scopes (you remember these special fail tests) I many times wonder in my mind why other scopes trace shift vertically momentarily as I shut one scope off..and agen on (for temperature realted things test)... signal was splitted simply self made multiport 50 ohm splitter and all scopes DC coupled. But this time I only write this note on the paper... as "check later what happend power up inside front end" becouse this time I have lot of busy.

Now I have check it with HW7. It is waterproof. Both CAL relays go on during bootup. (I mean bootup as time after power on to time when I can see trace.  Reistors are nearly 248ohm. Both relays on and... CH1 center to CH2 center just "500 ohm".
Btw, if exaxtly: CH2 relay get 3,58V and CH1 relay 3,49V ;)
But why? have they design some kind of startup confidence test... and then forget what it can do in lab...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ECL on July 09, 2011, 11:45:50 pm
Yes, all what I can now look is HW5 and HW7 with FW, ..225, 420, 427patch, 531.1... all have this problem and afaik problem was also before. Not nice but can live with it. If need lot of USB things all times, it is good to buy short cable.... no need wear scope USB connector. (specially becouse these quality is just as entertainment quality (all USB connectors not only hantek but who care... today electronic need only 1-3year lifetime and tomorrow we go more short "designed" lifetimes.)..

yep, i know it. The funny part is, firmware update menu is even trying to access to stick, but
it fails because stick didn't exists (but the stick led is blinking ...) So it seems the firmware
just don't see a specific flag. Not sure if this is really firmware bug or linux hotplug delay bug,
it takes anyway a bit long to recognize usb devices. Maybe a delay before dso.exe will be loaded can help out.

Thanks to both of you  :) 

Good point rf-loop, about an extender cable.  Might save having to replace
the connector, on the mobo, somewhere down the road.  Anyone ever check
if USB hubs are handled correctly?

@tinhead, yeah, funny that the firmware update utility does not force a check
of port/device mount status.  I'll play around with it, and see if I can figure out
what they're doing. 

ECL  -K


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: colinbeeforth on July 10, 2011, 01:02:24 pm
Hi tinhead,

You said: "Currently I'm testing Tonghui TDO3000 series, they have beautiful LC meters but actually nobody knows their DSOs."

Ah, nobody plus one!!!  *laughs*  Early this year I researched the low cost DSO market quite a bit.  Tonghui looked nice, for what little that is worth.  My summary of Tonghui was no local agent, display screen was only 320x240,  and acquisition memory was 4k and therefore too short for serious work.  10k is an absolute minimum to be able to see essential detail in a single line of video.  I used to work with video a bit so it matters to me.

I liked the deeper, more conventional shaped case with storage for probes!!!  One thing with lunch box DSOs, they might take up only a small space, but you can't put them at the bottom of a stack of meters...  :(

Do Tonghui have any new models out that improve the acquisition memory?

Cheers, Colin  Melbourne, Australia
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: zeus on July 10, 2011, 05:16:02 pm
Hi all,

I've been following this thread for a while now as i have a Hantek 5202B.

Wondering if people here can help me.

Well, channel 2 has stopped working and also the vertical position control (it jumps back down to 0). The oscilloscopes self calibration stops at step 13.
Channel 1 seems fine.
Anyone know whats the cause or how to fix.

Sorry if it's wrong place to post. just let me know.
Thanks.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 10, 2011, 06:12:59 pm
Well, channel 2 has stopped working and also the vertical position control (it jumps back down to 0). The oscilloscopes self calibration stops at step 13.
Channel 1 seems fine.
Anyone know whats the cause or how to fix.

this looks like broken ch2, the self-calibration is not checking hardware itself, but if the sampled data is wrong it will fail.

Where you bought it ? It could be that you have warranty case, so depends on where you bought it might be
easy to repair/replace due warranty or a disaster. If you from Europe, i can evt. ask Hantek.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: zeus on July 10, 2011, 07:19:03 pm
Hi tinhead,

I bought it from www.youroscilloscope.com (http://www.youroscilloscope.com). I think they dropship from Hantek china.?
I'm in europe/cyprus.

So do you think i have to ship the oscilloscope back or is there an easier solution, maybe in europe?

Thanks.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 10, 2011, 10:25:38 pm
I bought it from www.youroscilloscope.com (http://www.youroscilloscope.com). I think they dropship from Hantek china.?
first of all try to contact them, for sure Hantek does have warranty, but it might be that the seller will not
accept it, e.g. user error so no warranty or you will have to pay shipment in both directions.

I'm in europe/cyprus.
So do you think i have to ship the oscilloscope back or is there an easier solution, maybe in europe?

"maybe", let's wait for the answer from "youroscilloscope"
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ECL on July 10, 2011, 11:44:30 pm
I'll play around with it, and see if I can figure out
what they're doing. 

Interesting.  I did some experiments with DSO.EXE renamed, so it would
not be automatically executed at startup.  It appears that the OS driver
always detects the USB stick, from powerup, but it does not signal the
stick's presence, to DSO.EXE, until an insert event is observed.  Once an
insert event is observed, DSO.exe will always detect the stick.  DSO.EXE does
not need to be running, during the insert event, for the stick to be detected, the
next time it is run.  The problem does not appear to be a race-condition.  Delaying
the start of DSO.EXE does not help the problem.  Also, accessing the device, from
the OS prompt, prior to starting DSO.EXE, does not help. 

This leads to to believe that the problem can probably be fixed, by forcing a
refresh of the mount and/or interface status.  Unfortunately, I am not as familiar with
driver/kernal level Linux, as I would like to be :)  Perhaps one of the Linux guru's, on
the thread, can take a look, and see if they can figure out how to remount the drive, or
force a state refresh?  Near as I can tell, the driver is not creating a standard /dev.  Instead
they use SCSI emulation, and mount the flash stick directly to /mnt.  I do not see anything
in the fstab, that described the device.  There is an jffs2 entry, but I believe it is for the
onboard flash.   One curious note, when DSO.EXE detects the stick, it automatically does a
directory listing of the drive, which is displayed on the console, along with a note "get udisk first".
I have not found any sign of udisk in the OS image, except for a file called "udisk-flag", which is
always zero bytes.  One other interesting note, from powerup, the OS driver assigns the stick
"sda", but on most subsequent inserts, it assigns the device "sdb".

ECL  -K
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on July 17, 2011, 11:24:41 am
These tests are all done with only one single unit what was originally virgin factory condition (DSO6062B).
Remember that this is only one single random unit.  HW version is 7. FW is (110531.1)
So if you buy later or have buy before situation may be different. So, do not thing that new 5062B is always 5102B with 5062B labels and logo.

All tests:

Sine, source HP8657B
50ohm good 2m length cable and "middle quality" tektronix  50 ohm feed trough terminator in scope BNC.  Input level, 50mV/div. Generator output signal so that scope display 6div p-p at 1MHz (around 107mVrms)
1MHz level  used  as reference level (0dB)
Example: 1MHz, level adjust for 6 div p-p.  Change freq to 100MHz.  Adjust generator level so that scope display agen 6div p-p.  If need add 1.5dB scope have -1.5dB at 100MHz
(here need also watch that there are not any more deep minimum between 1 and 100MHz)
Note about level:  HP flatness and level accuracy better than HP specs but may be example +-0,2dB inside this level and freq area.

Some notes: Cable and connectors attenuation unknown (but not bad). Better method is use accurate splitter in scope end and follow power with accurate level/power meter so that tst system signal flatness can correct)

This is also not good to measure real BW becouse input reactance. 50 ohm termination is not good method becouse it is not matced to 1M 20+-3pF input. It do not see scope input as pure resistive load. SWR is not 1.

A: one channel (CH1), real time, averaged and display so that more than one cycle in display (so mostly 8 - 2ns/div)

B: as A but 80ms/div (scan), mode peak, 4k mem (samplerate 2,5ks/s) and 40k mem (25ks/s) both same)

factory nev DSO5062B  (soft) modified to DSO5202B + filter 45

Note: this is not mistake. B: all looks same, but it is natural becouse I do not have real DSO5202B!
And becouse all done with exactly same scope and becouse scope whole front end construction.


__________A__________B
-1,5dB___100MHz____100MHz
-3,0dB___180MHz____190MHz
-6,0dB___230MHz____245MHz
-10dB ___275MHz____300MHz

Original factory new DSO5062B just as received  (after factory this unit was defined just as DSO5102B  exept: only logotype.dis have DSO5062B and front panel label DSO5062B but all other just as DSO5102B)

__________A__________B
-1,5dB___100MHz____100MHz
-3,0dB___152MHz____190MHz
-6,0dB___180MHz____245MHz
-10dB ___200MHz____300MHz


Original factory new DSO5062B just as received (soft) modified (defined) fully to DSO5062B (all as dst1062b exept hantek 60MHz logotype.dis.)
This is 60MHz model if factory have done it with exactly same main (HW7 and same "bandwidth" sub version) board as 100MHz model and defined it fully to 60MHz.


__________A__________B
-1,5dB____77MHz____100MHz
-3,0dB___102MHz____190MHz
-6,0dB___131MHz____245MHz
-10dB ___140MHz____300MHz

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on July 18, 2011, 09:08:39 am
This is also not good to measure real BW becouse input reactance. 50 ohm termination is not good method becouse it is not matced to 1M 20+-3pF input. It do not see scope input as pure resistive load. SWR is not 1.

Only for information as: What it may be in practice?
Most of peoples of course know this, but many times this effect is underestimated in mind.

I just make small practical test with scope what have 1Mohm/15pF+-2pF input _and_ direct 50ohm imbedance input.
(CH1 and 2 mode selector AC/GND/DC/GND/DC_50ohm)
Scope is in good uncertified calibration and "perfect". Model Tektronix 2465A DM (including opt CT)

same as before: 0dB ref at 1MHz.
Signal gen as before with Hantek.

Two different measurements. In both cases signal level 6div p-p. 50mV/div  -3dB is point where signal level rised by 3dB give 6div p-p signal.

First: CH1: DC1Mohm + separate Tektronix 50ohm feedtrough terminator.
Second:  CH1:  DC_50ohm.

Flatness is extremely good to over 200MHz. Just "flat" but first measurement  give littlebit more variations. (still both are well inside +-0,3dB and there is also generator flatness inaccuracy included)

First: -3dB point  290MHz
Second
-3dB point 375dBm

This show very clearly that this unmatching is not any marginal "perfectionism". It affect lot of as we go to higher frequencies.

Same scope, but model B, manual tell that using internal termination -3dB is same frequancy as -4,7dB point with input as 1Mohm and with external 50ohm termination. (typical)

Now Hantek input is 20 +-3pFand this Tek input is 15 +-2pF

So situation is littlebit more bad with Hantek if use external (normal)50ohm termination. This is always problem with all scopes what do not have real 50ohm inputs and need use external.

With 1Mohm input + 50ohm termination it is not well matched and terminated as real 50ohm! And with high frequencies it make markable effect. (This bad matching can also affect device under test do not function as normal)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 18, 2011, 02:02:16 pm

Now Hantek input is 20 +-3pF


i'm not sure if Hantek ever tested it, the user manual is based on Tekway user manual (v0.9) which
is really old (Dec 2009). There are other errors too in the maual, like the 2000wfrm/s which should
be btw 2500 wfrm/s (as announced, documented in presentations and website and confirmed later).

Anyway, that's only estimated value, Rigol CA or E does have identical input (CA except attenuator) and 15pF±3pF.
 
I have modified my attenuator too (now more or less like Rigol CA) which gives me 11pF when is enabled,
however when disabled (which is then the original curcuit) i can measure 15pF (with 100kHz LCR meter - maybe
not the best way but sufficient for estimated results).

Giving this i assume that Hantek/Tekway does have 15pF±3pF too (like Rigol CA or E) and not 20pF±3pF like in the manual.

Btw, the manual v.09, at time of writing Tekway was using different relais, some other components has
been changed as well.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on July 18, 2011, 03:19:37 pm
Ok, I have not measured it.
So if it is like this Tek then it may affect just as Tek, exept that inductance is unknown.

So or so, but this 15 or 20pF make its effect with external terminator. This I want show.
If it is less than specs then it is littlebit better. Then it affect nearly as Tektronix.

Bad matching do not only difference in BW. It also affect so that BW curve shape looks wavy. (specially with upper frequencies)  (becouse unmatched and standing wave effect, bac trawel wave phase angle change as freq change and it add or subtract signal level)

So this need also remember if do tests that there is this effect.

How to make better external 50ohm temination if scope have not internal 50ohm impedance matched inputs?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 18, 2011, 05:24:36 pm
How to make better external 50ohm temination if scope have not internal 50ohm impedance matched inputs?

with "active" terminator, like e.g. this project :

http://www.mikrocontroller.net/topic/204806 (http://www.mikrocontroller.net/topic/204806)

The guy who working on this project designed already nice active probes:
http://welecw2000a.sourceforge.net/docs/Hardware/Aktiver_Tastkopf_mit_OPA659.pdf (http://welecw2000a.sourceforge.net/docs/Hardware/Aktiver_Tastkopf_mit_OPA659.pdf)


... if scope have not internal 50ohm impedance matched inputs?

attached how a 50R termination looks inside Rigol and ATTEN DSOs, i doubt this constrution is much better than
external solution. Everything else is the same as in HanTekway.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jahonen on July 18, 2011, 08:01:16 pm
I think that it matters what kind of capacitance it is, the amount itself is probably not very important. Lumped capacitance is a bad thing, distributed capacitance is not (think about coaxial, DC inductance or capacitance does not affect AC performance, only resistance and dielectric loss).

Problem with the external terminator is that there is a stub after the terminator causing reflections. The termination resistor should be the very last thing on the transmission line. Internal termination is naturally superior to an external one as it eliminates the stub (depending on the internal construction, of course).

Regards,
Janne
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on July 18, 2011, 08:22:57 pm
@rf-loop: I checked the Tek 2465 schematics, 50 ohm coupling only consists in switching in a 50 ohm resistor in parallel to the 1 M resistor. The only additional trick is to put a thermal sensor on the 50 ohm resistor to check for channel overload.

Anyway, 50 ohm // 1 Mohm = 49.9975 ohm  ::)


This schematic do not show whole truth. As we know all wires have inductance, capacitance and resistance. Whole complex is build so that it is "matched" 50ohm termination. (of course it is not very accurate if we go more high frequencies.)

Do you know looking this schematics what is example inductance in this line where is  "50" ohm reistor.
I have many times repair and service this input attenuator. If think its RF charasteritics need know exactly all dimensions etc.

I have not in home any VNA but still after I have looked inside I "believe" that there have been enough good RF designer who have designed it. :)

But this Atten looks strange. Nothing but 50 ohm resistor... well yes it is 50ohm if think DC. But how is this kind of system with RF.

Also I have deeply looked old HP input attenuator including same 50 ohm terminator. (it is "hybrid" package where also relays are on the thick layer/ceramic hybrid what include  DC/AC(RF) attenuators and matched ternminator. I have no any document about this story but I trust one my friend who tell that he have looked it with VNA and it is really well designed to over 400MHz. If there is not any reactive compensation for this input capacitance it can not be 50 om matched terminator for RF, only for DC. So I really believe that TEK 2465 input attenuator module is much more complex as you see in this service manual schema. (this schema is only indicative, and not all reactive things are shown as component. One strip line is inductance, cpacitance and resistance "network" if we look it as RF signal look it)
example  10nH inductance is "lot of"

I can not see in this schema example this 50ohm resistor inductance and capacitance. ;) So.. but in real world there is lot of these in many place..

So with this Tek input schema we can not tell nearly anything anbout ihow it wok with high frequencies. We need know whole mechanical dimensions. Wires dimensions etc. Around 200-400MHz it is still quite simply... but more high we go... it looks like more complex.)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 18, 2011, 08:34:50 pm
@tinhead:
From which model is this picture from? From all the front-end pictures I have seen so far,
I never observed the ability to get a 50 ohm input termination!

this is actually from Rigol CA, however ATTEN CAL looks same, and yes there are no any pictures of both
available public.

Even worse: in most of these scopes, there is no real GND coupling and the Rigol does not even have AC coupling for trigger...

sure there is GND coupling, the AD8370 PWUP pin is responsible for this.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 18, 2011, 09:18:45 pm
@tinhead: GND coupling should actually isolate completely the DUT from the front-end! At least, this is what I observed in ALL other scopes before. But of course, this costs one additional relay  ;)

sure, but that's additional 2pF in signal path. From a scope point of view "GND coupling" over PWUP pin
is what it suppose to do, from DUT point of view not, but to be very honest who cares.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 18, 2011, 11:59:35 pm
I wouldn't leave this unpowered DSO connected to my DUT, if I were you ;)

why ? I don't see any issues (at least hw0), unpowered DSO from DC point of view have 1.2M to GND, nothing else (att is off, PhotoMOS off, 330pF blocking DC to JFET). From AC point of view i will not kill that fast the JFET, especialy that
i'm always using x10 passive or active probes (except DSO testing where of course shit can happens
when i'm too lazy to power on DSO first).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on July 19, 2011, 05:29:52 am
I completely agree with you rf-loop, of course, a schematic doesn't tell you the whole story :)

EEs at Tek, HP and LeCroy really knew their job: even 20 years later, these scopes are still nice pieces of jewelry!

To give you an idea of what these scopes are made of, please look at this very interesting April 1986 issue of the HP Journal (http://www.hpl.hp.com/hpjournal/pdfs/IssuePDFs/1986-04.pdf), almost dedicated to "Digitizing Oscilloscopes", and to the HP5411OD in particular.

But we should compare what is comparable: these were x$10,000 scopes, vs. $300 ones! These old scopes were built around hybrid circuits with coupled microstrip lines and delay lines, our cheap DSOs are made up of 6-layer FR4 with stock components...

So for sure, you can't expect the same performance from both. Even if progress has made things cheaper, RF rules have not changed  :-[



Yes.

Also I did not mean anything for comparing these. (exept that today these old work horses are still very good for real working. Working value is good if look these old work horses price today)

My only menaing is note that this unmatching really affect and we need always keep it n mind. As I or we tell that xxx scope have -3dB bandwidth example 300MHz it is more or less true. We only know whole test setting "system" BW. This very simple example explain that even with quite "good" test system there may be lot of error. Using example TEk2465 with internal or external terminator give big difference. This do not proof anything about example Hantek. But it give some data for thinking.

Some times ago I ask here something like: What is Tektronix "input normalizer" box what need use for Tek calibrations. Only for adjusting input capacitor. But it is more...and it may give some wink also how to "delete" scope input capacitance and make better match. (it is passive and it make attenuation but  ;)

@tinhead   
thank you. This link to  talking about matching was nice. 
Some day I will make small "matching box"
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on July 19, 2011, 06:51:01 am

To give you an idea of what these scopes are made of, please look at this very interesting April 1986 issue of the HP Journal (http://www.hpl.hp.com/hpjournal/pdfs/IssuePDFs/1986-04.pdf), almost dedicated to "Digitizing Oscilloscopes", and to the HP5411OD in particular.


This is nice article I have read many many years ago. (and now look agen.. HP journal's have been very nice and lot of good articles) I have 54111, (and of course many others but today only some becouse I have sell them out) but today its 1'st power what serve analog and digital power and CRT is bad and I have not get spare part. I get this scope so that  channel front end attenuator unit was bad. But I repair it. After then later power unit get smoke out. (switch controller IC is bad and this special controller IC is really hard to find...)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: patb on July 19, 2011, 01:02:23 pm
Thanks guys for a lot of info in this thread (esp. tinhead). It helped me to choose my first scope. I bought Hantek 200 MHz version (for almost the same price as 100Mhz). I was playing with my new toy for a while and discovered a little strange behavior. When I use only CH1 and cross 200ns time base boundary it switches probably to interlaced mode (my guess, I hear relay click) and I get a little bit different readings. See attached images. The change is subtle but noticable. Is this a normal behavior?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 19, 2011, 01:58:32 pm
When I use only CH1 and cross 200ns time base boundary it switches probably to interlaced mode (my guess, I hear relay click) and I get a little bit different readings. See attached images. The change is subtle but noticable. Is this a normal behavior?

from 40s to 400ns the DSO is using always 4 ADCs per channel, no matter how many channels enabled
(so max 400MSs sampling rate each channel).

From 200ns to 2ns the DSO is using 8 ADCs when single channel enabled (so 800MSs and with 8/4/2ns timebase 1GSs)
and 4 ADCs when both channels enabled (so 400MSs and with 8/4/2ns timebase 500MSs each channel).

As from your observation, sure by using only one channel the DSO (when switching from 400ns to 200ns)
is switching the sample rate from 400MSs to 800MSs, therefore you will see small difference.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: patb on July 19, 2011, 02:15:22 pm
Thank you tinhead for explanation. Actually, I observed that little drop of readings only at 800/400 ns. Not a big deal, but it is always good to know what's going on inside. :)

Cheers!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pionersurg on July 20, 2011, 06:06:08 am
tekway dst1102b  FW 2.06.3 (110531.1) HW 10070x555583e8
I want only load english UI.
If I correcly understand:
1.download 2.06.3_110531.1_FullCSVSave_And_HelpFileCorrected.zip and unzip to usb stick
2.connect to UART (UA0) using RS232 to USB converter (i use pl2303), settings 115200 8n1.
I connect pin2 RX to TX pin on board, pin3 RX to RX pin on board, pin5 GND to GND pin on board.
When power ON terminal emulation program receive many symbols, but no any command prompt. I try different speed setting COM port.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on July 20, 2011, 10:26:19 am
Do NOT connect RS232 standard port to UART port!

You need example USB TTL 3,3V serial adapter

Just like this:
http://cgi.ebay.com/USB-TTL-Converter-Module-buildin-in-CP2102-NEW-/230648740143?pt=LH_DefaultDomain_0&hash=item35b3bc792f (http://cgi.ebay.com/USB-TTL-Converter-Module-buildin-in-CP2102-NEW-/230648740143?pt=LH_DefaultDomain_0&hash=item35b3bc792f)

Maybe you have right adaper.

 (and look carefully how connector is on the HW7!!)

AFAIK also tekway have 15200,8n1  First chek your wires and connectors or adapter.

If it do not work your adapter or connection is fail somehow.
Check carefully that you are relly connected to UART0
on the board (HW7) reading  from front panel end you use pins 2,3 and 4.
UARTplace and direction  is changed after HW5, it is nearly CH1 box.  J801 pin 1 is nearest to front panel. Pin2 is GND

Then problem may be EMI (make good shielded and look also that scope and computer are so that there are not any ground currents.)

As you start your scope it send lot of text to terminal.
If you see there errors. Find problem before you go on with ctrlC

Also my recommendation is. Connect firts GND! Example connector where GND contact littlebit before other pins. and then signals.

UART is directly to ARM. There is not any kind of buffering and protection. It is very "fragile"


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: snoopy on July 21, 2011, 07:43:28 am
Hello everyone,

Just joined up.

I came across this thread looking for info on the Hantek DSO5202B which I subsequently purchased from an ebay seller.

The CRO works really well but I have struck a few issues with this CRO which I wonder if other people have found. I have sent this info off to Hantek but have not heard back from them. The firmware installed is later than what is on the website.

For instance, AC coupling of the input channels inserts a high pass filter that peaks at 100 Hz and rolls off below that. So when you display a 100 Hz sinewave and switch from DC to AC coupling the signal amplitude actually increases !! Ideally the AC coupling should be flat down to 10Hz and roll off below that without any peaking otherwise this is causing an error in the readings.

Also frequency measurement on the bottom of the screen does not correlate with the menu because the bottom screen measurement decimal places are always zero. ie frequency shown in measurement menu is 105.3Hz and frequency shown at the bottom of the screen is 105.00 Hz.

regards
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on July 21, 2011, 09:01:56 am
Hello everyone,

Just joined up.

I came across this thread looking for info on the Hantek DSO5202B which I subsequently purchased from an ebay seller.

The CRO works really well but I have struck a few issues with this CRO which I wonder if other people have found. I have sent this info off to Hantek but have not heard back from them. The firmware installed is later than what is on the website.

For instance, AC coupling of the input channels inserts a high pass filter that peaks at 100 Hz and rolls off below that. So when you display a 100 Hz sinewave and switch from DC to AC coupling the signal amplitude actually increases !! Ideally the AC coupling should be flat down to 10Hz and roll off below that without any peaking otherwise this is causing an error in the readings.

Also frequency measurement on the bottom of the screen does not correlate with the menu because the bottom screen measurement decimal places are always zero. ie frequency shown in measurement menu is 105.3Hz and frequency shown at the bottom of the screen is 105.00 Hz.

regards

I test with HW7 DSO5102B (in this case very same as 5202B)

AC mode (Why?)

If compare to 1kHz sine signal level (set in calculations as 0dB reference)

Measured directly without probe.
Including old Wavetek flatness errors (yes but this my Wavetek is carefully adjusted so that it is surprising flat level - error is significantly below +-0.1dB in this area)
CH1, AC, 500mV/div
signal level 6div p-p @ 0dB

-6dB 10Hz
-3dB 17Hz
0dB 41Hz
+1dB 80Hz
0dB 350Hz - 1kHz

----------

About frequency counter.

Measure menu freq are _calculated_ from ADC captured data.
With low freq it may sometimes be better and more accurate than HW counter. Specially if use averaging.

HW counter work totally different. It counts events in trig line. It is event counter. It counts how many events in time window.
Becouse it is not as modern real timeintervall counters it resolution is highly dsependent about time window setting for counting. How long is gate open window what time it use for counting these pulses. (yes it is just pulse counter. Totally different as modern frequency calculating time interval counters as something like cheap HP53131 or similars. They can solve 9-10 or more decimals in one second.)
 
How many seconds need count if you want count 50Hz signal frequency with 1 or 0.1mHz resolution (mHz is milli Hz) if use simple pulsecounter type frequency counter.  I think no one want waiting.

But this win clearly measure menu freq display if we go more high frequencies.
If you have 999999Hz you have one Hz resolution and counting time is something like 1s.
It give lot of more accuracy with HF signals.
As understand this you can thing which one you look in which case. (yes with low freq it is maybe clever if Hantek shut off these zeroes if they are not meaningfull.


Also it can read  in specs (exept that +-30ppm is lie.. maybe they still do not know how to make tests for specs and what are normal "good" rules for  specifications.:
(I will write it +-150ppm over temp area and including aging. If can not get any other info There meybe need write lifetime aging drift becouse it have NO adjustment! )
maybe they need write this littlebit more clear so that peoples undertand better how it works and what are limits.
It is pure pulse counter.  It "blind" open and close gate and count pulses what come as gate is open. gate time is 1s.
(but if there is example 50Hz, why it do not shut off all zeroes after decimal point. FW bug?

User manual (rev.9)specs
Readout Resolution 6 digits
Accuracy (typical)
±30ppm (including all frequency reference errors and ±1 count
errors)

Frequency Range AC coupled, from 4Hz minimum to rated bandwidth

Signal Source
Pulse Width or Edge Trigger modes: all available trigger sources
_The Frequency Counter measures trigger source at all times,
including when the oscilloscope acquisition pauses due to changes
in the run status, or acquisition of a single shot event has
completed._

Pulse Width Trigger mode: The oscilloscope counts pulses of
significant magnitude inside the _1s measurement window_ that
qualify as triggerable events, such as narrow pulses in a PWM
pulse train if set to < mode and the width is set to a relatively small
time.

Edge Trigger mode: The oscilloscope counts all edges of sufficient
magnitude and correct polarity.

Video Trigger mode: The Frequency Counter does not work
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: snoopy on July 21, 2011, 12:58:02 pm
Hello everyone,

Just joined up.

I came across this thread looking for info on the Hantek DSO5202B which I subsequently purchased from an ebay seller.

The CRO works really well but I have struck a few issues with this CRO which I wonder if other people have found. I have sent this info off to Hantek but have not heard back from them. The firmware installed is later than what is on the website.

For instance, AC coupling of the input channels inserts a high pass filter that peaks at 100 Hz and rolls off below that. So when you display a 100 Hz sinewave and switch from DC to AC coupling the signal amplitude actually increases !! Ideally the AC coupling should be flat down to 10Hz and roll off below that without any peaking otherwise this is causing an error in the readings.

Also frequency measurement on the bottom of the screen does not correlate with the menu because the bottom screen measurement decimal places are always zero. ie frequency shown in measurement menu is 105.3Hz and frequency shown at the bottom of the screen is 105.00 Hz.

regards

I test with HW7 DSO5102B (in this case very same as 5202B)

AC mode (Why?)

If compare to 1kHz sine signal level (set in calculations as 0dB reference)

Measured directly without probe.
Including old Wavetek flatness errors (yes but this my Wavetek is carefully adjusted so that it is surprising flat level - error is significantly below +-0.1dB in this area)
CH1, AC, 500mV/div
signal level 6div p-p @ 0dB

-6dB 10Hz
-3dB 17Hz
0dB 41Hz
+1dB 80Hz
0dB 350Hz - 1kHz

----------

About frequency counter.

Measure menu freq are _calculated_ from ADC captured data.
With low freq it may sometimes be better and more accurate than HW counter. Specially if use averaging.

HW counter work totally different. It counts events in trig line. It is event counter. It counts how many events in time window.
Becouse it is not as modern real timeintervall counters it resolution is highly dsependent about time window setting for counting. How long is gate open window what time it use for counting these pulses. (yes it is just pulse counter. Totally different as modern frequency calculating time interval counters as something like cheap HP53131 or similars. They can solve 9-10 or more decimals in one second.)


thanks for the reply

+1dB 80Hz

so I can see that your's is not flat around 80Hz. Mine peaks right at 100Hz. This is not good and can be very misleading if you are not aware of it :( Hopefully they will be able to fix it up with a firmware upgrade.

And why use AC coupling ? Simply because you may have a small AC signal superimposed on a large DC offset so you want to be able to get rid of the DC component otherwise it is not possible to view the small AC signal with maximum sensitivity.

Regarding the counter at the bottom of the screen I did not know that the two counters were different which explains why they display different results to each other.

regards




Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on July 21, 2011, 02:54:52 pm

And why use AC coupling ? Simply because you may have a small AC signal superimposed on a large DC offset so you want to be able to get rid of the DC component otherwise it is not possible to view the small AC signal with maximum sensitivity.

regards

Yes, this is mostly nearly only reason.

This is not FW related thing. It is HW. 
Analog front end is simple and cheap. It is just like compromise.
If we look example old expensive HP or Tektronix front ends they have lot of adjustments for corrections and corrections for corrections.. more accurate want, there is more small errors what need compensate with some adjustable or not adjustable circuit.

Specially I do not like this way they do AC/DC in front end. From designer I can ask why? Some reason? Any reason?
Or reason is becouse copymachine did not change it. It is problem with copy, you copy also mistakes or bad's. ;)

Also there are all component tolerances. Tolerances may be sometimes in worst case compination and randomly sometimes best case. (example this peaking freq difference - but in this case you have real 5202B what have some different componet values in front end so it may also affect this difference.)

I do not like this front end.  I can not understand this solution for AC/DC. (or maybe if really think every cent)

I have recommend to some my customer (who want more low cut off frequency) to use external DC block.

I make one short experience.

Scope input DC
Probe 1x
Measured
From 50ohm output terminated with 50ohm  feed trough terminator.

For DC block: 100nF capacitor from terminator center to probe tip.
Response "flat"  to around  20Hz
very slowly it satrt drop. 10Hz 3V-pp have drop to 2,9V
1,5Hz it have drop to 2,14V

Lack of time I did not test with 1uF

Probe 10x
as before, 100nF

in practice, nearly flat down to 1Hz.

This can give also idea how to measure extremely low frequencies over high DC. (1uF, 10uF and even more but be careful if voltage is high... becouse..if there is transient... well: after smoke come out from component, equipment do not work...smoke need put back agen)

In lab it is many times needed. DC block. (for common use it may be total block or sometimes only ground connecting "center" block.)  For probe tip DC block, well, everyone can imagine how to do if need.

In some rare case I have use 100uF polypropylene capacitor with some Tektronix. (some reason need measure extremely low freq's over high DC)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: snoopy on July 21, 2011, 03:26:32 pm

And why use AC coupling ? Simply because you may have a small AC signal superimposed on a large DC offset so you want to be able to get rid of the DC component otherwise it is not possible to view the small AC signal with maximum sensitivity.

regards

Yes, this is mostly nearly only reason.

This is not FW related thing. It is HW. 
Analog front end is simple and cheap. It is just like compromise.
If we look example old expensive HP or Tektronix front ends they have lot of adjustments for corrections and corrections for corrections.. more accurate want, there is more small errors what need compensate with some adjustable or not adjustable circuit.

Specially I do not like this way they do AC/DC in front end. From designer I can ask why? Some reason? Any reason?
Or reason is becouse copymachine did not change it. It is problem with copy, you copy also mistakes or bad's. ;)

Also there are all component tolerances. Tolerances may be sometimes in worst case compination and randomly sometimes best case. (example this peaking freq difference - but in this case you have real 5202B what have some different componet values in front end so it may also affect this difference.)

I do not like this front end.  I can not understand this solution for AC/DC. (or maybe if really think every cent)

I have recommend to some my customer (who want more low cut off frequency) to use external DC block.

I make one short experience.

Scope input DC
Probe 1x
Measured
From 50ohm output terminated with 50ohm  feed trough terminator.

For DC block: 100nF capacitor from terminator center to probe tip.
Response "flat"  to around  20Hz
very slowly it satrt drop. 10Hz 3V-pp have drop to 2,9V
1,5Hz it have drop to 2,14V

Lack of time I did not test with 1uF

Probe 10x
as before, 100nF

in practice, nearly flat down to 1Hz.

This can give also idea how to measure extremely low frequencies over high DC. (1uF, 10uF and even more but be careful if voltage is high... becouse..if there is transient... well: after smoke come out from component, equipment do not work...smoke need put back agen)

In lab it is many times needed. DC block. (for common use it may be total block or sometimes only ground connecting "center" block.)  For probe tip DC block, well, everyone can imagine how to do if need.

In some rare case I have use 100uF polypropylene capacitor with some Tektronix. (some reason need measure extremely low freq's over high DC)

Yes, traditionally a DC blocking capacitor would be used and a switch or relay used to short it out for DC coupling. It appears they don't do this in this CRO for some odd reason, maybe to save cost on a relay etc.

A more practical solution would be an external BNC probe adapter with a capacitor and a switch that shorts it out etc.

The whole implementation with this CRO is really quite silly IMHO.

regards

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on July 21, 2011, 05:55:16 pm
Yes.

After I first time see this schema I was surpriced how they have solve AC/DC coupling and also surprised GND "solution" (=nothing)

This frontend principle is well known and I know some, example Tektronix, have use it. But not just exactly same.

This application for this principle is not best of.  Specially just flatness (not only low end but also overall flatness is only "acceptable/good" but far away from perfect (but, think price and other values in this scope). Also I'm not sure how it works with two paths signal phase shift effects.  I have not analyzed and mesure inside scope how it just product this LF flatness problem.

I do not know any Tektronix scope what have this problem and use same principle in front end. And I have handle, repair and sevice and calibrate tens of Tek's.

But IMHO, this hantek solution is still far away from silly.  First you look price! (What is the factory's price. Not factory selling price)

Of course it can be better - all can.

I can not find easy way how it can do without extra costs. Also there must not be any extra things what need factory adjustments becouse costs.

Other problem is that input capacitance is so big (specially if think >200MHz) that it is not good to rise any pF. (better if find solution to drop it - yes it can markable drop if make separate thick layer ceramic hybrid with special relays... but, after then .. why do expensive good front end ... then ned also do better ADC. Oh well, why then do not buy Agilent. So... this is just good compromise with price and specs. (maybe this 1dB peaking around 100Hz is still not bad "real" problem. It is nearly as "cosmetic".  Specially becouse in this rare case that really ned make accurate low freq amplitude measurements over high DC.  (but, this scope is markets in class where price competition is extremely hard)

(20pF reactance is around 40ohm with 200MHz! (But there is opinions that today input C is littlebit less and if all is ok it is not still bad. (Originally expensive work horse Tektronix 350MHz have 15pF so capacitance is not any problem.)


maybe there is some posibility to adjust this LF/DC amp response better with changing littlebit some componets values but... then maybe some other thing go bad?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: snoopy on July 22, 2011, 05:14:48 am
I think this front-end design is not bad, especially for its price and using only stock components.

Regarding the LF loopback, the "corner" point at which it occurs is given by the capacitor in the loop and I don't remember which resistors around. But it occurs at some 100s Hz, and if position is well compensated, should be smooth to HF without too much hiccups. This shouldn't affect the frequency response above that.

In order to understand what's going on, we should put a probe on the AD8370 input (TP2_1), first, then a differential probe between the 2 test points at the LMH6552 output, and see what we get. I suspect that the varicap introduces non-linearities, but I am not sure.

Then what is displayed on the LCD, that's another story... The ADC clock seems to have a lot of jitter, so this is not good for ADC interlacing and may thus produce a lot of distortion, and running without any anti-aliasing filter too is a bad idea, as you may get additional distortion by spectrum folding at the sampling frequency...

do you have the schematic of the front end so I can see what you are talking about ?

regards
david
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: snoopy on July 22, 2011, 11:58:37 am
I think this front-end design is not bad, especially for its price and using only stock components.

Regarding the LF loopback, the "corner" point at which it occurs is given by the capacitor in the loop and I don't remember which resistors around. But it occurs at some 100s Hz, and if position is well compensated, should be smooth to HF without too much hiccups. This shouldn't affect the frequency response above that.

In order to understand what's going on, we should put a probe on the AD8370 input (TP2_1), first, then a differential probe between the 2 test points at the LMH6552 output, and see what we get. I suspect that the varicap introduces non-linearities, but I am not sure.

Then what is displayed on the LCD, that's another story... The ADC clock seems to have a lot of jitter, so this is not good for ADC interlacing and may thus produce a lot of distortion, and running without any anti-aliasing filter too is a bad idea, as you may get additional distortion by spectrum folding at the sampling frequency...

do you have the schematic of the front end so I can see what you are talking about ?

regards
david
You can find it as an attachment to this tinhead's post (https://www.eevblog.com/forum/index.php?topic=1571.msg53703#msg53703).

OK thanks.

I can see the AC/DC relay and DC blocking cap but where is the peaking coming from at 100 Hz ??

Possibly need to simulate it in spice to see what is going on.

regards
david

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: snoopy on July 23, 2011, 02:42:14 am
I can see the AC/DC relay and DC blocking cap but where is the peaking coming from at 100 Hz ??
Please read again my reply above (https://www.eevblog.com/forum/index.php?topic=1571.msg55917#msg55917), when a speak about the corner frequency at some 100s of Hz. It looks like the transition from LF to HF is not well calibrated.

Possibly need to simulate it in spice to see what is going on.
Possible, but not easy... You must make provisions for stray capacitance due to component pins and also to the FR4 PCB (with permeability tolerance of around 50%), and circuit loop inductance and also mutual inductance between circuit loops :P

When you get a model that is close enough to reality, let me know, I will be very interested, and probably others too!

yes but at very low frequencies surely all of those things are not going to be relevant ?

regards
david
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 26, 2011, 12:18:03 pm
placeholder
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 26, 2011, 12:18:24 pm
placeholder ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 26, 2011, 12:18:39 pm
placeholder ?
check next page to see why ..
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 26, 2011, 12:18:56 pm
here we go ...

A complette schematic of Hantek / Tekway hw revision 1.02 and 1.0.3

attached PDF file, if someone need it as Altium version please let me know.

In the schematics are all modules (from PSU to 1kHz out) included, double checked,
however if you find an error let me know please.

I hope i will find time to create similar schematics of HW revision 1.0.7, however not yet, i'm waiting
for these new BM/BMV models (as i think they hw 1.0.7 based)

Have fun!

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: A Hellene on July 26, 2011, 12:46:04 pm
This is a wonderful piece of work, tinhead!
Thank you!

Now, I guess that I will have to run to catch up with you, regarding my abandoned Rigol schematics project! :P


-George
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on July 26, 2011, 03:32:55 pm
Amazing work, Tinhead.

I am thinking right now of jumping to the Hantek scope (returning the damn flickering screen Rigol).  Do you know what the latest word is on the SDK?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on July 26, 2011, 05:01:24 pm
This is wonderful  work!

This is really useful also for service these scopes.

Thank you tinhead!

------

Do anybody have any knowledge or experience about external monitor for this scope?
Something littlebit like this VGA Converter Module for mini2440 S3C2440 ARM9 Board (http://cgi.ebay.com/VGA-Converter-Module-mini2440-S3C2440-ARM9-Board-/190509692561?pt=LH_DefaultDomain_0&hash=item2c5b433691)
.  Is it possible to connect? Example in use where want more big display and not at all use own TFT.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: amigo on July 26, 2011, 09:07:59 pm
tinhead,

(http://www.loungeoflegends.com/outbound/notworthy.gif)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: saturation on July 26, 2011, 09:18:48 pm
A googol of thanks, tinhead, for the schematics! 

(http://satelliteamps.com/CMI/CIMG4450.jpg)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: colinbeeforth on July 27, 2011, 02:44:52 am
Ah! tinhead, you are such a gentleman!  Many thanks for the circuit information, it helps hugely to understand how this machine works.  Thank you again!
Colin
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gall on July 27, 2011, 05:16:23 pm
Many, many, many THANKS!!! Wonderful! I'm really impressed.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ECL on July 27, 2011, 09:42:17 pm
A complette schematic of Hantek / Tekway hw revision 1.02 and 1.0.3

Wow, a truly massive effort!!!

Thanks tinhead, for all of the parts you lifted, nights you spend buzzing out traces,
eye strain, mouse cramps, solder burns, blood loss, grumpy spouse(s), and most of all,
thanks for sharing!  :)

It will help us all to contribute, and piggy-back on your efforts,

ECL  -K
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 27, 2011, 10:15:28 pm
yeah, it was a bit more work than expected, probably it would be easier and cheaper to
ask kikitronix (ebay 280312142026) instead of pinging two weeks long the PCB.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gall on July 28, 2011, 11:55:29 am
Hm. Why CPLD? Why not FPGA only? Did they save some pins? They seem to have XBUS which is quite wide.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 28, 2011, 12:43:58 pm
Hm. Why CPLD? Why not FPGA only? Did they save some pins? They seem to have XBUS which is quite wide.

pick one or more:

- FPGA full
- bigger FPGA costs more than extra CPLD
- Timing for SRAM important
- semi parallel data transfer
- FPGA not full but timing constraints not allowing to have these additional blocks within FPGA
- others (like Rigol) are using CPLD too (lazy developer? no i don't think so, but there is a reson)

Xbus seems to be 16 bit + 3 bit control, all these CPLD pins are on input (when i disable FPGA).
Address counter probably triggered by FPGA, i have to check that in detail.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: nukie on July 28, 2011, 01:57:54 pm
Tinhead - I am speechless... all I could say is, thank you for your work and support to make this wide screen DSO so valuable.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 28, 2011, 04:49:56 pm
Tinhead - I am speechless... all I could say is, thank you for your work and support to make this wide screen DSO so valuable.

you welcome, all of you. To be very honest i'm not doing this because of money (i hope my fiancée never check
all these invoices of dev boards, jtag and so on ) or because i hope on nice gift from Hantek or Tekway
(not that i will reject one, ehm now after i published schematics i will be happy if i don't get an asskick ...)
but only because i think these DSOs are good value for money.

Additionaly (i think)  i'm somehow responsible for better sales numbers, where on the other side i know they losing
some money because of the hack, so therefore my support as a kind of compensation.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gall on July 28, 2011, 06:46:32 pm
Xbus seems to be 16 bit + 3 bit control, all these CPLD pins are on input (when i disable FPGA).
Address counter probably triggered by FPGA, i have to check that in detail.
Maybe XBUS is a 16-bit muxed address/data bus, with r/w, strobe, and mode (or r/w, address strobe, data strobe), also in charge of access to the logic analyzer stuff?

Just my guess, though... You might have to put a logic sniffer to see what's going on between the FPGA and the CPLD.
The important thing is to know what's inside CPLD.

There is a possibility to write alternative software from scratch. Worst case scenario is developing FPGA firmware from scratch too. It is not possible for CPLD and it is unwise to reflash CPLD.

My first guess was that CPLD acts as a bridge between ADCs, MCU and SRAM while FPGA is doing control job. Now I see that it isn't. It is possible that XBUS is just multiplexed ADC output. But this does not explain why XBUS has only 16 wires and why it isn't connected directly to 32 bits of SRAM data bus.

I do not think that CPLD is doing some complex thing. More likely that it's just a couple of latches and/or demuxes or something like 8255.

The good thing is that there's no need to use CPLD to talk to the ADC. But there will be no memory buffer.

BTW, do these low-memory scopes have CPLD too? I noticed that Atten doesn't have a SRAM chip on the board, just empty place. Is it possible that CPLD is turned off in short-memory mode?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 28, 2011, 08:26:57 pm
There is a possibility to write alternative software from scratch. Worst case scenario is developing FPGA firmware from scratch too. It is not possible for CPLD and it is unwise to reflash CPLD.
as we speek about software, do you got my PM about SDK?

The good thing is that there's no need to use CPLD to talk to the ADC. But there will be no memory buffer.

in current design no because the data will be shifted over CPLD, there is no physical data bus connection
between SoC and FPGA.

BTW, do these low-memory scopes have CPLD too? I noticed that Atten doesn't have a SRAM chip on the board, just empty place. Is it possible that CPLD is turned off in short-memory mode?

no idea, i know that Atten CML does have one, but never saw the bottom side of CAL model.
Turned off for sure not, you will not find even single resistor which don't need to be populated.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gall on July 29, 2011, 06:39:06 am
as we speek about software, do you got my PM about SDK?
Now I did, thank you! Please see my reply.

The good thing is that there's no need to use CPLD to talk to the ADC. But there will be no memory buffer.

in current design no because the data will be shifted over CPLD, there is no physical data bus connection
between SoC and FPGA.

Oh really, now I see - LDATA doesn't go to the FPGA! SRAM does. Interesting.

BTW, do these low-memory scopes have CPLD too? I noticed that Atten doesn't have a SRAM chip on the board, just empty place. Is it possible that CPLD is turned off in short-memory mode?

no idea, i know that Atten CML does have one, but never saw the bottom side of CAL model.
Turned off for sure not, you will not find even single resistor which don't need to be populated.
There was even some cheaper than "CAL" model (CL? don't recall). I saw a photo of it's board (really poor soldering job!) and noticed that there is an unpopulated place instead of SRAM. Of course, there's a little possibility that the chip was just removed by the owner.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on July 29, 2011, 12:16:22 pm
tinhead

Can it be fixed booting  bug in the CPLD with
self-calibration relay ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 03, 2011, 12:05:03 pm
heh, there are two "errors" in my schematics:
- FPGA sheet, U13 (Q. oscillator) have wrong value (QSMO_4200 - that's copy/paste error), should be 100MHz
- FPGA sheet, RA06_1 have no value, should be 4 x 1k
- many ferrite bead have no values, well go figure, from what i measured they Wuerth 742792038 could be good.
- on Front Panel sheet UF4 have no decoupling cap, should be 100nF :)

Someone asked my what are the LX1-LX7 on Power Distribution sheet - the answer is "nothing", that's just
the piece of wires between PSU and main PCB. 

tinhead

Can it be fixed booting  bug in the CPLD with
self-calibration relay ?

walt,

we don't have CPLD design from hw0 (where this is working) nor hw1007 (where seems to be bug inside)
and i doubt Hantek/Tekway will provide us one (because then you/others can easy clone their DSO).
But even if we would have both designs, there is no warranty that hw0 design will work on hw1007 board,
this can be only fixed/answered by HanTekway - and i doubt they will even answer it. Not because they
don't know/wish (what) to answer, but because what's next ? Recall action ? Definitely not, a simple
answer is just don't connect any signal while booting and your fine.

And if you really have to boot with signal connected to DSO (for what? the only case might be to be proteced while
DSO crashed) and wish to fix it now, then an inverted RC combination on 595 (in each input channel) will help you.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: A Hellene on August 03, 2011, 01:55:34 pm
Ah, do not worry, tinhead! Copy mistakes are in order when reversing even a single-side PCB --not a six-layer one!

For example, I have also spotted a couple of these errors in the Rigol schematics (https://www.eevblog.com/forum/index.php?topic=3738.msg55197#msg55197) I have posted: The Comparator Hysteresis driver in the "DAC, Demux, Sample & Hold and Buffer" sheet actually is a driver with a 5V0 to 3V3 level-shifter section implemented. By the way, I have de-soldered, cleaned-up and re-balled the Cyclone III FBGA chip, and when I will find some spare time I will draw the digital schematics sleets, too! You see, Rigol has a couple more DAC output signals (a 500.00mHz triangular (not sawtooth) waveform output and a waveform_start(?) signal extra circuitry that do not make any sence to exist in the analog section) that cannot be traced anywhere in the PCB; so, I removed the FPGA to see if these "blind" signals are fed into the Cyclone III.

Though I have not reversed the digital section of the Rigol yet, I think that the Lattice LUT (as well as the CLPD in your device) are RAM address lines generators for the FPGA configuration (which does not seem to have a dedicated address bus for the config. memory, so it probably clocks an external address-bus generator) and the BlackFin that cannot address the 22bit-wide boot-up Spansion FLASH memory alone because it has a 20-bit wide address bus hardware. But I could be wrong; I cannot really tell until I fully reverse the PCB...


-George
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ECL on August 03, 2011, 06:34:03 pm
I would really appreciate a tutorial!

I stumbled across this video a while back.  It does a good job of outlining the process:

How to... Reball ? - BGA Reballing Exercise for 50mm Chip of a Computer Motherboard (https://www.youtube.com/watch?v=97nxZwHG5bA#)

ECL  -K
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 03, 2011, 08:54:22 pm
Nice thanks!

What about de/re-soldering the BGA, then?

i'm using hot air (if i'm lazy) or IR Rework Station (when BGA bigger and black) or
Hot Air/IR Reflow Oven (when BGA expensive or silver). For such Cyclone III hot air will work fine,
for soldering too (BGA not that big, pitch 1mm), IR rework + bottom heater of course too (because the BGA is black).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: A Hellene on August 04, 2011, 03:01:52 am
What?!? :o
I am curious to know how do you do that?
With patience! :P

Allright! Using my home equipment:

I think is is time for a short tutorial on the BGA and Flat Pachage rework process, using home equipment:

Equipment used: A hot-air rework station, a soldering iron, soldering wick (ERSA 2mm/3mm/4mm wide), flux paste (I prefer the RMA flavor but I've only found a no-clean syringe container at the local stores -that is fine for this job), SMD rework solder-wire (sub-millimeter Alpha-Fry 62/36/2) and flux soldering paste (EDSYN 62/36/2 no-clean).
Remember that the activated flux (RA/RMA) based products have only a few months self-life, even if stored in the refrigerator.

This is the rework strategy:
1. Preheat the PCB using 130 degrees hot air for 2-3 minutes, to avoid any thermal expansion artifacts,
2. Use conventional (kitchen) aluminium foil to protect the surrounding components, by cutting off a small window to expose ONLY the target chip to the hot air flow,
3. Desolder the BGA using 300..320 degrees hot air, remove the chip and wait for everything to cool down,
4. Clean the old solder, holding the BGA package in a small plastic vice using solder wick and lots of flux; always clean the used flux (I use medical alcohol of 95 degrees or better),
5. Clean the PCB, as above,
6. Reball the BGA with the soldering iron, Ag-containing solder-wire (I use 62/36/2) and lots of fresh flux; always clean the used flux,
7. [Optional step] Reverse the PCB (that takes tiiiiiiime...),
8. Reball the PCB pads as well, as in step (6), since chip re-balling has not provided the pads with enough solder,
9a. Carefully apply flux soldering paste on the PCB pads only and flux at the chip pads, or
9b. Apply flux in lack of flux soldering paste,
10. Carefully place the BGA package on the PCB (in a single move, if possible) and
11. Preheat the whole PCB area around the chip using 130 degrees hot air for 2-3 minutes,
12. Raise the hot air temperature at 280..300 degrees and apply it to the chip in a slow circular motion,
13. Wait for the molten solder surface tension to move the chip in place when the solder melts,
14. Tap the chip gently towards the PCB, to make sure that all its pads are in contact with the solder underneath,
15. Remove the hot air and wait for everything to cool down naturally (by themselves); always clean the used flux, and
16. Done! Power the device up.

Right now I am at the seventh step...


NOTE: It is not as difficult as it sounds to be; but you need to practice enough before daring to touch your actual device without destroying it!

A second note is about the chip size: As a rule of thumb, use a hot air nozzle of half the diameter of the chip size. For chips smaller than 20mm x 20mm you may skip the PCB preheating step, only if the PCB is very thin. Unfortunately, this is not the case with Rigol's mainboard.

A third and very important note: Always know what you are doing. Always use your common sense! Miracles happen only in fairy tales...

Finally, remember that a good tool is NEVER expensive enough to have it. Just consider the possible extra cost of a damage done by using cheap ("affordable" in the marketing jargon) tools...

-George


[EDIT]: Moved the last part, to avoid further hijacking of this thread.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 04, 2011, 11:48:41 am
ahh, you using the ugly method (self-made "balls"). I tried it once, for K4S561633F because i didn't had right balls here.
The first run was "disaster" (because of the DIE encapsulat in the middle or the RAM chip), second run was finally
working - few weeks later this board started to crashing so i had to resolder again (with proper balls),
since them (more than a year) the board is working (24/7).

Therefore i can only say, buy proper balls, they didn't cost that much to risk the FPGA. Sure the best is to have reballing
set with stencil to place balls, but believe me, even without stencil you can easily place them one by one.
Just put a bit of flux on FPGA - note too much and they will "swim" away, to less and they will not stay in place when
using hot air - better is to use IR (or whatever oven for reballing) - watch them careful during this process, when one
starting to move around remove it and place new one (with tweezers or preheated soldering iron).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: A Hellene on August 04, 2011, 02:14:10 pm
Thank you, tinhead!

This is a great idea! Re-balling manually the BGA chip with standard solder balls is the best solution, in order to have a homogeneous and uniform solder quantity on every pad! Without even the need of the special stencil equipment!

All I will have to do is to wait for the local stores to open after their summer break; or, to place an online order. But, something tells me than I may have not yet finished reversing the PCB...

Anyway, your idea is marvelous! Thank you, again, for the solution you gave me!


- George
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on August 07, 2011, 10:08:56 am
Hi, all!

All the complaints about my English-   to google-translator.
In English I translate all the same it is better   :)

About Hantek noise.
On page 6 "samples | hold offset control" published schemes, it is clear that there is a DAC, switch on 74HC4051, and repeaters on operational amplifiers.
Some circuit have a ripple capacitances, some nothing.

It seems to me that the reason for the strong noise in this part of the scheme. The rest of the analog special crime unnoticed.
My point of view, confirms that the on high-frequency scan, noise is greatly reduced. I.e. with increasing frequency voltage is kept more accurately.

Given that, TLC has a field-effect transistors at the input, input current is low , it begs option to install after the 74- switch   RC-chain in the most critical circuit.
Who has a good analog oscilloscope- could determine which one.

Sincerely, Walt.

P.S.
Or the easiest and cheapest way - much to raise the switching frequency of the reference DAC and switch in firmware.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 12, 2011, 04:25:50 pm
All the complaints about my English-   to google-translator.
In English I translate all the same it is better   :)

:)

About Hantek noise.
On page 6 "samples | hold offset control" published schemes, it is clear that there is a DAC, switch on 74HC4051, and repeaters on operational amplifiers.
Some circuit have a ripple capacitances, some nothing.
right, and actually when you look on PCB these caps are really missing. I have no idea who started first
to same money like that, but when you look on Rigol CA, Rigol E or HanTekway and exact same
position these caps are missing - i don't like it either.

The error is not that high (but it sumirize to other small errors), the potential spikes in analog switch before
switched sample&hold are not that critical, but in a perfect design there would be decoupling can everywhere.

It seems to me that the reason for the strong noise in this part of the scheme. The rest of the analog special crime unnoticed.
My point of view, confirms that the on high-frequency scan, noise is greatly reduced. I.e. with increasing frequency voltage is kept more accurately.
on hw1007 Hantek optimized it a bit

Or the easiest and cheapest way - much to raise the switching frequency of the reference DAC and switch in firmware.
there is nothing we can do as the DAC is controlled by FPGA design


Btw, i'm testing right now two new firmware versions - they not public yet, but i can already tell you the changes:
- FFT is more accurate than before, compared some measurment with my SA and i like it
- Timebase have now fine adjustment (up to 200ps)
- XY bug of course fixed
- CSV export and import works for memeory depth settings
- the actual Sample rate and few other system informations will be displayed in separate infobox

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: patb on August 12, 2011, 05:21:18 pm
Btw, i'm testing right now two new firmware versions - they not public yet, but i can already tell you the changes:
- FFT is more accurate than before, compared some measurment with my SA and i like it
- Timebase have now fine adjustment (up to 200ps)
- XY bug of course fixed
- CSV export and import works for memeory depth settings
- the actual Sample rate and few other system informations will be displayed in separate infobox

Do you know when can we expect it to be released? I assume that this will be official firmware, right?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 12, 2011, 06:31:17 pm
Btw, i'm testing right now two new firmware versions - they not public yet, but i can already tell you the changes:
- FFT is more accurate than before, compared some measurment with my SA and i like it
- Timebase have now fine adjustment (up to 200ps)
- XY bug of course fixed
- CSV export and import works for memeory depth settings
- the actual Sample rate and few other system informations will be displayed in separate infobox

Do you know when can we expect it to be released? I assume that this will be official firmware, right?

i assume very soon, there is a small bug in fine timebase when i'm under 40ns/div (higher ranges works perfect),
they checking right now my bug report. And of course that's official firmware versions.


##########################################################################

I'm working on inoffical version too (patched 110531.1, but will switch to latest version when ready and patch it).
Nothing really big but i noticed a bug in FFT/timebase which i don't like.
When you switch to FFT and compare the frequency span with actual sampling rate everything
below 2us/div (or 50MHz span) is ok - the sampling rate is at least twice the span frequency (2x to 4x).

Now when you switch to 800ns/400ns/200ns/80ns/40ns/20ns/8ns/4ns/2ns the span
is higher than twice sampling rate. This means only 8 from 10 division on the screen are within Nyquist,
and these two division on right side are only crap data. And of course when the test signal
is withing these two division on right side you see automaticall tons of aliasing things.
The fix is very simple - i'm increasing the sample rate (or actualy the clock from 100Mhz to 125MHz)
which gives me then in these timebase settings always higher sample rate - exact 2x span freq.

So far everything works, i can switch on/off (unfortunately not automaticaly for only these affected timebase ranges)
- but sometimes the FFT is crashing.  This is not a heat problem (measured - and if i don't move anything works for days).
It is not that easy to fix such things by modifying firmware with hexeditor, the space i can use for additional functions is
splitted to many jump here and there (everywhere where i found some space in spare menu functions).

Sure, the best option would be when Hantek would compile the firmware to do the same. I know why they
not did it in first place - due sampling memory/record length (it is reduced then), but actually when in FFT
this didn'r really matter (the sampled data is still big enough). I asked them to implement a variable
timebase for FFT, they evaluating right now if this is possible.

If not, well then i will have to show them that this can be done by simple switching of clock frequency,
of course just two clocks is not the same as variable clocks for FFT, but at least it is enought to see
in all 10 divisions proper data.

Attached some pictures to show what i mean and how the patched version works.

And yeah, i know, i can always switch to higher range to see the signal properly again with org. firmware, but when you
have harmonics withing these two division you will see also the aliasing - so not a real workaround.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 16, 2011, 12:32:44 pm
As already posted in Owon thread

https://www.eevblog.com/forum/index.php?topic=4412.msg59464;topicseen#msg59464 (https://www.eevblog.com/forum/index.php?topic=4412.msg59464;topicseen#msg59464)

here some wfrm/s values from Hantek/Tekway values (fw 110531.1) - note these values might vary
a bit from what on your DSO when you have different firmware version, e.g. the latest beta fw i have (110807.0)
is doing always 100 wfrm/s while in FFT mode (which is still accteptable because the accuracy of FFT has been improved)

You can see these values over UART, since some time the firmware is measuring wfrm/s and showing results
every 10s, actually really interessting feature, most manufacturer are hiding such things and
telling only the max. rate.

(sine, half screen Vpp, default DSO settings, 4k memory depth)
2ns/div      - 1350 wfrm/s (100MHz test signal)
20ns/div    - 1820 wfrm/s (10MHz test signal)
200ns/div  - 1450 wfrm/s (1MHz test signal)
2us/div      - 2460 wfrm/s (100kHz test signal)
20us/div    - 2385 wfrm/s (10kHz test signal)
200us/div  - 1000 wfrm/s (1kHz test signal)
2ms/div     - 166 wfrm/s (100Hz test signal)
20ms/div   - 20 wrfm/s (10Hz test signal)


(sine, half screen Vpp, default DSO settings, dots instead of vectors, 4k memory depth)
2ns/div      - 1480 wfrm/s (100MHz test signal)
20ns/div    - 2100 wfrm/s (10MHz test signal)
200ns/div  - 1700 wfrm/s (1MHz test signal)
2us/div      - 2740 wfrm/s (100kHz test signal)
20us/div    - 2600 wfrm/s (10kHz test signal)
200us/div  - 1100 wfrm/s (1kHz test signal)
2ms/div     - 168 wfrm/s (100Hz test signal)
20ms/div   - 20 wrfm/s (10Hz test signal)


(sine, half screen Vpp, default DSO settings, 40k memory depth)
2ns/div      - 432 wfrm/s (100MHz test signal)
20ns/div    - 435 wfrm/s (10MHz test signal)
200ns/div  - 440 wfrm/s (1MHz test signal)
2us/div      - 405 wfrm/s (100kHz test signal)
20us/div    - 295 wfrm/s (10kHz test signal)
200us/div  - 280 wfrm/s (1kHz test signal)
2ms/div     - 135 wfrm/s (100Hz test signal)
20ms/div   - 20 wrfm/s (10Hz test signal)


(FFT full screen - hanning window, sine half span freqency when possible - or max DSO frequency,
half screen Vpp, default DSO settings)
2ns/div      - 222 wfrm/s
20ns/div    - 268 wfrm/s
200ns/div  - 246 wfrm/s
2us/div      - 274 wfrm/s
20us/div    - 275 wfrm/s
200us/div  - 275 wfrm/s
2ms/div     - 150 wfrm/s
20ms/div   - 150 wrfm/s


These values above are of course for one channel measurment, edge trigger measurments.

Interessting is the fact that in alternate trigger mode (both channels half screen 100kHz sine, 2us/div)
in the best case scenario Hantek/Tekway is still doing 2430 wfrm/s, which is really good.

If you don't know what wfrm/s are and "how to eat them" look here:
http://cp.literature.agilent.com/litweb/pdf/5989-7885EN.pdf (http://cp.literature.agilent.com/litweb/pdf/5989-7885EN.pdf)


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on August 16, 2011, 04:33:28 pm
This discussion is continued from Owon SDS7102 review thread... but it makes more sense here.

Well, tinhead, according to Agilent's formula, (at least some of) your wfrms/s are provably incorrect.

Their stated formula:
% DT = Scope’s dead-time percentage
= 100 x [(1/U) – W]/(1/U)
= 100 x (1 – UW)
where
U = Scope’s measured update rate
and
W = Display acquisition window = Timebase setting x number of divisions (which is 19 on full-screen Hantek - probably 20 inside firmware - but I'll use 19)

For example, if I take your specification: 20ms/div = 20 wrfm/s;   that would mean:
100 x (1 - (20*0.38))
And the Hantek has a dead time at 20ms of:  -660%??
Or, with 16 divisions (menu displayed on Hantek):  -540%?

Another example, your spec: 200us/div = 1000 wfrm/s;  would mean:
100 x (1 - (1000*0.0038))
And the Hantek has a dead time at 200us of:  -280%??
Or, with 16 divisions (menu displayed on Hantek):  -220%?

You can see, given Agilent's formula, that your wfrms/s specs are too high.  I have to surmise that either your figures or Agilent's are incorrect; that's why I think your figures need to be /10.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on August 16, 2011, 05:19:31 pm
with 4k capture memory (without dead time).
No matter how many divs is display. It have not so much to do with this. Display is display and capture memory is capture memory imho, display (or display and display memory sometimes)  is only more or less processed "window" to capture memoy adjusted related to place where is trig. (and becouse triggerjitter some scopes also  may highly proces this adjustment.

20ms/div 4k mem samplerate is 10ksa/s.
IF memory is exactly 4000 (for making this simple)
we start capturing. capturing is ready and memory full after 0.4s. If dead time is zero and after zero time start new capturing it make full memory captures 2.5 times per second. So wfms captured/s is 2.5. (In practice it is only possible with continuous "ring memory" untriggered capturing. (yes ringmem capturing and even some kind of oscilloscope is possible of course if we have method to read this memory independent of data transfer to memory.) If now dead time is example 0.1s (it is not) we get exactly 2wfms/s. (exept not exactly... becouse signal and trig and how designer have made this pretrig buffering etc. This is why there read, use enough frequency for signal if measure wfms/s rate.

This is not exactly how some real scope work, only for some kind of poor language imagination.

But this is only if we have "single" ADC what pruce 8 bit datastream and capture mem is 8bit wide single 4000byte memory and all sampled data is stored to memory.

What happends then example 8ns/div = 1Gs/s. With zero dead time.  Filling memory takes 4us. So if zero dead time it means 250000 wfms/s. But of course here dead time take whole show.  IF real wfms/s is now 2500wfms/s it means that ~99% of time scope is blind. (if forget many things and make thinking simple)

Why capture more than display can refresh. This is DPO. Far away from display is "digital phosphor". There is processed "picture" about captured waveforms together. There need be also some way to show what image pixel have more weight than other. There need be pixel intensity (or sometimes color) control realted to captured waveforms. Then it is useful.
Many think that DPO mean "digital display" and TFT or LCD or these make DPO. DPO may also do with old analog picture tube, raster or vector monitor (in practice and in theory but not very clever today but possible.  Intelligent captured data processing make DPO, not TFT display contra tube. Now with DPO display may refresh example 25 times per second but you can see 5000 or more captured waveforms. (just as good old analog scope - oh but yes - better becouse phosphor have limited writing speed and limited and fixed intensity decay time)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on August 16, 2011, 05:29:09 pm
No matter how many divs is display. It have not so much to do with this.

Of course it does (at slower rates), because the scope bases the sampling rate or sampling depth on this.  Sampling rate = Sample depth * (1 / (sec/div * divisions)) - or, inversely - Sample depth = Sample rate / (1 / (sec/div * divisions).  Of course, this follows only up to the maximum sampling rate or depth.

Quote
is only more or less processed "window"

The "window" is sec/div * divisions (or a little more.. see below)

BTW, the Owon display screen always shows 15.2 divisions of the timebase on it, but it ALWAYS calculates sampling rate and creates waveform records (captures) based on 20 divisions - so 4.8 divisions are included in it's calculations, but not visible on screen unless stopped.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on August 18, 2011, 05:09:23 pm
I'm now very confused with these wfms/s.

I do not know what is going on in scope. (Hantek)

What is meaningfull and important is: what we can see.

Ok, becouse my eyes are slow...

I set fixed 50 frames/s udate rate for display.

Then I insert fast sweeping signal so that it can imagine changes in SUT. (Signal under test)

Then becouse my eyes are slow I want look how many capured waveforms I can see in one TFT frame (1/50s)

First, sweeper is set to linear freq sweep. (small amount) Pulse. So that I can calculate hom many falling edges I can see becouse trig is on the rising edge.

I set camera so fast shutter speed that sure there is only one frame.

Mostly I can see 4 falling edges. Sometimes 3, sometimes 5, mostly 4. I can not tell what are more, 3 or 5. With this accuracy I can only tell that average is more close 4 than 3 or 5.
50 frames/sec and average 4 captured waveforms. This is around 200 captured and displayed waveforms/sec.
Also I can see that positions of falling edges vary very highly and also time between these are nearly as random (maybe there influence many things.. about processing chips busy times and also trig is not of course synchronised with capturing so sometimes it need wait more and sometimes less trigpoint and becouse freg linearly change and also forward and backward sweep is different... etc... so. But still, how many falling edges in one frame. This is markable in my opinion.

Scope settings.
4k
dots
menu off
200ns/div
1 channel in use.
signal 100kHz - 120kHz linear sweeping square and sweep time around 1ms
(this time and place I have only one old analog Wavetek sweeper for quick test.)

Scope adjusted so that these falling edges are around center of screen.

Pictures I take with 1/200s shutter. (only rare there is just TFT picture update but no matter becouse I do not look these.
Then I take many fast continuous "burst" of 12 pics. Nearly always 4 and some times 3 sometimes 5, and even 6 but very rare.

Also I try with 20ns/div and around 1MHz and narrow sweep. Around same result with camera.

(becouse eye is more slow, eye can imagine more falling edges..becouse eye "remember" many frames with 50f/s).

Only conclusion what I can tell now is:
This is "finding" is  something what need analyze and think more. (yes I have see it also before but jump over it becouse before it was not so meaningfull to me)

Where is whole truth - maybe somewhere. Maybe some find it.
But I think it is NOT now there where scope itself show wfms/s data.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on August 18, 2011, 09:28:12 pm
Nice chart from .pdf link posted by rfloop - www2.rohde-schwarz.com/file/1ER02_1e.pdf (http://www2.rohde-schwarz.com/file/1ER02_1e.pdf)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on August 18, 2011, 09:59:37 pm
Maybe some think I do not know how digital scopes overall work becouse I use old fashion "oscilloscope camera method" haha.
These simple explanations about "how stuff work" can read everywhere. Also in this Aglent paper. But there is problem to use it directly becouse it is partially adjusted for Agilent scope for selling purpose..
Owon (afaik) and Hantek have not this Agilent InfiniiVision special systems.
"Memory depth was optimized at
each timebase range by selecting
the minimum amount of acquisition
memory
that would also provide the
maximum available sample rate.
Note that with Agilent’s MegaZoom
technology, this is automatic
."

Now case is to find WHAT is Hantek (or Owon) real wfms/s.

This my very very simple camera test show only that something is wrong and not as we have thinked before Hantek. What is wrong, I do not yet know. If one display screen with 1/50s update rate draw only around 4 separate captures it can not be 2500 or 1500wfms/s. Becouse human eye is not so fast I use camera for proof it. Becouse in Hantek we have not good HW method for this becouse there is not "true" trigout (and not any kind of trigout).
Scope UART raport calculated wfms every 10 second. This is NOT wfms/s value. (maybe it is nearly right using some time settings (samplerate) but I did not find it and mainly it show something wrong IF think that this number value is captured wfms/s. It simply can not be, but this is only what I can now think.  Even if I put very low speed so that I can count with clock and eyes how many times scope make waveform. This number value is totally wrong.

So, before someone proof it exactly and also explain his proofment theory and with measurement instead of calculus with imagined variables and constants, I do not believe ~2500wfms/s anymore.

Or if it do it "hidden", what use is it for if it can not show to user.

I have look this question with DSO5102B  HW10070 and FW110806

Note: Also how ever measure it, there need always use enough speed signal in scope input.

There is small difference with display settings "auto" or fixed 50frames/s. But with camera test (just becouse camera is more fast than eyes it can image just one screen frame and frame time is now known. With auto I do not know framerate.

Pictures clearly show that there is not more than 4-5 waveforms  in memory to display. This is reason why I use small amount of freg sweeped square and fast enough base freq and fast enough sweeptime. So that I can separate every capture. It can not drav same pixels but only once with this settings..  Who think that my camera can filter something out from picture? There can not see more waveforms! But yes IF it is example max 300wfms/s it is very good still becouse my old Agilent High-End DSO can not more than about 5-10 wfms/s. (I do not mainly use Hantek, I use HP and Tektronix if I need scope. But these old work horses can not easy store pic to USB so sometimes I use also Hant.)

Scope itself give information about wfms rate. This information can not be right or what we have thinked.

Ps. R&S paper (linked before) is lot of better than Agilent this paper.

With 4ns/div (1Gsa/s 4k) ... Hantek Blind time percent is maybe more than 99,9% But it is not so bad.. it is not 99.99999%


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on August 19, 2011, 08:59:32 am


What I wanted to explain, is that having a large wvfrm/s figure is only useful not to miss an event, if you don't have a "digital phosphor" display.


This is not only wfms/s question. It is still also blind time persentage question.
Propability to find as fast as possible some rare single event is highly related to capturetime and blind time ratio.  capturetime is many times related to our signal what we are looking. Signal is what it is and related to this  we need set t/div (somehow).  So our signal under testing is master and this can not change. Maybe in so,e special scope is some special acquiring mode and scope is clever enough to optimize capture time minimum and also there need not be high blind area out of display if we want look with eyes. (so for this purpose it is also good that there is posibility to set display window just as capturememory lenght. What can do for rise propability to find rare single event, example some glitch in one pulse.  We need reduce t/div so that we still have enough resolution and samplerate. This give more to visible becouse scope have after every capture some blind time what we can not forget. Of course we do all what can do for reduce blind time. All extra stuff off, all measurements, cursors, pixel connections etc off. After then there is blind time what is and this we can not reduce more by user settings.  Blind time is example very easy so that 95% is blind and 5% "is eyes open" what is good value if use fast horizontal speed and most low capture memory for "speeding". Some times it may be that blind time is 99,99% and 0.01% scope is "eyes open" if speed is high and even if wfms/s is quite high.

In this point it start... you rise price to around 1-2kUSD... oh what bullshit still (exept that Agilent have good offer with X2000 series infiniivisoon).. you rise it to 10kUSD--- well, something, maybe you just get cheapest possible R&S includind some few useful options... you rise it 100kUSD. Ok you may have extremely short blind time, extremely fast capturing maybe tens of GSa/s and superfast capturing memory and superfast segmented capture and extremely high speed parallel processing etc.

If wfms/s is slow but blind time percent is also low... well, Using human intelligence you can still do lot of. Even if wfms/s rate is 10 or 100 or 1000Wfms/s.

And always need remember, hunting rare single events in signal stream. It is only one thing. Are you always sure that in all cases oscolloscope is right tool. ;)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on August 19, 2011, 09:15:01 am
A few points:

1) Both the Agilent paper and the R&S paper were written by companies trying to sell their products, so both need to be taken with a grain of salt.  But both papers have basically the same formula (starting with different variables) for calculating blind-time (I prefer the word blind to dead - since dead implies the scope is doing nothing else - but blind just means it can't see, but it's still working).  In the Agilent formula, they assume you already know the total waveform update rate at a sec/div setting, and calculate from that.  For example, with the Tek TDS2000, 100 wfrms/s at 1us/div, the formula is 100 x (1 - (100 * 0.0001)) = a blind-time percentage of 99.90%.  In the R&S formula, they assume you know a single acquisition cycle time and blind-time, and calculate from there.  But you would end up with the same final ratio.

2) If the Hantek is reporting a wfrms/s rate after every 10 seconds, assume that is the total rate of the last 10 seconds.  Tinheads figures above, divided by 10, are very much in line with the figures in the Agilent literature for other scopes - and much more expensive scopes for that matter.  Even with those figures divided by 10, they are VERY respectable rates for a DSO of this price range.

3) The Owon SDS wfrms/s rate is between ~1-25.  This has been confirmed.  So you can see that the Hantek rates (divided by 10) are very good (likely best in class).

4) Given all of this information, I find that the figure quoted by tinhead in the first post of this thread of the Rigol DS1052E achieving 2000 wfrms/s as highly unlikely.  Does anyone know where this figure has originated? Obviously the tiny screen of the Rigol allows faster updating (and less acquisition time), but I still think the figure seems high.

5) If it's not obvious by now, the wfrms/s rate is very much related to screen size.  Having to capture the minimum amount of data needed to cover the horizontal real estate - plus refreshing big LCDs - takes a lot of time - and this is obvious due to the fact that very expensive scopes STILL have the small screen sizes (even though large LCD panels are cheap these days).  The new Agilent series has less pixels to refresh than either the Owon SDS line or the Hantek: it's active waveform area is 640x400 - compared to 760x500 on the Owon SDS - and 770x420 on the Hantek (no menu displayed).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on August 19, 2011, 10:38:53 am
Only some fast comment with sidehand as I'm running.

Hantek do NOT tell wfms/s!

This is exactly what UART0  send out (always):

(copypasted directly from CryptoTerm 1.5 screen)

Quote
(049)mem valid cnt=545..time 10s wave frames = 1150...
(050)mem valid cnt=546..time 10s wave frames = 1177...
(051)mem valid cnt=543..time 10s wave frames = 1163...
(052)mem valid cnt=541..time 10s wave frames = 1178...
(053)mem valid cnt=546..time 10s wave frames = 839...
(054)mem valid cnt=546..time 10s wave frames = 232...
(055)mem valid cnt=545..time 10s wave frames = 231...
(056)mem valid cnt=545..time 10s wave frames = 232...

49 - 52 scope 200ns/div display 50 frames/s
only dots, no any menu display, persist auto.
memory 4k, acq realtime, mode normal
trig auto, rising
Signal, sine  10.0000000MHz input

After 52  I connect signal off in random time compared to counting.
So 53 is not meaningful now and it can forget.
54-56 agen ok and tell how many waveforms are counted. (note, NO signal, scope mode Autotrig, If trig is normal and it do not trig becouse no signal  then count is: ((236)mem valid cnt=546..time 10s wave frames = 0...)

No one know how it count and what it count and how reliable is this counting becouse this is not documented feature afaik (becouse UART is NOT for end user!)
HW10070;FW110806 (set so that dso5062B is as 5102B)

Also: This is not inconsistent with my trivial simple photographic method what I only want use to show that there is something wrong in hypothesis about 2.5kwfms/s. (After then when I woke to doubt it,  after Owon thread rise this question)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: grenert on August 19, 2011, 12:10:05 pm
4) Given all of this information, I find that the figure quoted by tinhead in the first post of this thread of the Rigol DS1052E achieving 2000 wfrms/s as highly unlikely.  Does anyone know where this figure has originated? Obviously the tiny screen of the Rigol allows faster updating (and less acquisition time), but I still think the figure seems high.
Based on the findings of the owner of an Agilent 1000 series scope, it appears that the 1000 series is equivalent to the Rigol 1000B series, which looks to be much higher in their range than the DS1052E. 
http://mightyohm.com/blog/2009/11/agilent-dso1000-firmware-update-confirms-rigol-connection/ (http://mightyohm.com/blog/2009/11/agilent-dso1000-firmware-update-confirms-rigol-connection/)
http://www.rigolna.com/products/digital-oscilloscopes/ (http://www.rigolna.com/products/digital-oscilloscopes/)

Agilent's datasheet for the 1000 series lists a waveform update rate of 400 wfrms/s.
http://www.home.agilent.com/agilent/redirector.jspx?action=ref&lc=eng&cc=US&nfr=-34250.0&ckey=1691876&cname=AGILENT_EDITORIAL (http://www.home.agilent.com/agilent/redirector.jspx?action=ref&lc=eng&cc=US&nfr=-34250.0&ckey=1691876&cname=AGILENT_EDITORIAL)

So it would seem unlikely that the bottom-of-the-line Rigol is five times faster.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 19, 2011, 12:22:24 pm
4) Given all of this information, I find that the figure quoted by tinhead in the first post of this thread of the Rigol DS1052E achieving 2000 wfrms/s as highly unlikely.  Does anyone know where this figure has originated? Obviously the tiny screen of the Rigol allows faster updating (and less acquisition time), but I still think the figure seems high.

these scopes are originaly designed by Tekway:

http://www.tekwayins.net/views2.asp?newsid=205&sess=2 (http://www.tekwayins.net/views2.asp?newsid=205&sess=2)

from any king of prerelease prospects which i got before the scope was ready (see picture)
and of course form usr manual where the 2000wfrm/s has been never corrected to 2500 like on wabpage.
Hantek in principle copied the world formated user manual (and replaced logos/pictures).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on August 19, 2011, 12:39:23 pm
Ahh... and I see you got the Rigol 2000 wfrms/s spec from the Rigol website for the CA series: http://www.rigolna.com/products/digital-oscilloscopes/ds1000ca/ (http://www.rigolna.com/products/digital-oscilloscopes/ds1000ca/)

I wish all manufacturers would just show acquisition rates on the LCD - along with sampling speeds - so that you could use that information to better tune your DSO settings for the particular way you're using it at any given time.  Sometimes wfrms/s is unimportant to what you're doing - and you'd rather use the time for other pre/post-processing.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 19, 2011, 01:17:09 pm
i haven't answered these questions about wfrm/s and Agilent equation because i was waiting for an answer from
Hantek, however they still looking/validating my observations and measurments, so still no answer to that.

But here my temp. answer :


In principle the Agilent equation is correct, but it will not work for any scope with
with DPO-like/virtual-screen/x-zoom window - meaning with more than 10div displayed per window.
Actually everybody is making the divs much wider to get always 10 totally, why Tekway/Owon/Hameg
decided to do it in a different way? i don't know. However, we can make it easy and calculate
wfrm/s per 10DIVs to be able to use Agilent equation.

I was about to answer like above immediately after concerns from marmad,
with a equation to calculate the wfrm/s for 10DIV but then i recognized something is strange
with these results. I got over 3200 wfrm/s for 2us/div and i'm sure HanTekway will not miss to tell
people that the hardware is capable of 3000 wfrm/s - so the equation must be wrong (which is not)
or the scope is showing bullshit in 2us/div range.

On a true DPO/virtual-screen/x-zoom window scope you can show/hide menu and the wfrm/s should remains
the same, well HanTekway is only DPO-like, so you have of course differences (especialy because
the scope is really switching from 16 to 20div) - which is good for calculation.

Based on that we can then calculate the estimated wfrm/s increase per div :

((wfrm/s menu on - wfrm/s full screen) / wfrm/s full screen ) / 4 = that's the wfrm/s increase per 1div
then multiplicated by 10 and with (wfrm/s full screen)
and finally add the (wfrm/s full screen).

So based on that the example of 20ns/div:
20div - 1900 wfrm/s
16div - 2100 wfrm/s
diff 200 wfrm/s by changing 4 div, so 50 per div = 500 wfrm/s extra when the screen would
be 10div wide = 1900 + 500 =2400wfrm/s.

From what Tekway said just before they started to ship first models these scopes can do up to 2500wfrm/s
in 20ns/div - this is the fastest timebase range for the firmware (just before the firmware is switching to 1GSs
which costs time , and the shortest timebase for 800MSs), so comparing the equation for wfrm/s of 10DIV
to the announced 2500 wfrm/s we can "prove" that the equation is correct.

So i wrote down all values (20div and 16div) for all timebase ranges and from 2ns to 800ns everything looks good,
but then 40s/div to 2us/div are much too high. There is a big jump (from 3150wfrm/s by 2us/div to 1781wfrms by 800us/div)
When you look on my previously posted results this peak is also visible.

The explanation seems to be very easy, the wfrm/s calculation is wrong in the firmware, the developer forgot to change
this function when switching from 1:2:5 sample rate ration (40s/div to 2us/div) to 2:4:8 (800ns/div to 2ns/div) sample rate ratio.
It is of course hard to trace the ARM asm code, but something like /4 works seems to be close to what i expect.

And of course no surprise, for long timebase settings there is somewhere a point where you will
get always a zero, and actually when on 20/8/4ms/div there is no increase when we change 16 to 20div
screen (and calculation with these correction from above shows 0)

The last "usefull" rate (calculated as above) is by 2ms/div and giving me ~44wfrm/s (for 10div), so 12% dead time.

Looking closer on the wfrm/s procedure i found out that of course in 40s/div to 40ms/div the procedure
is getting an overflow and is showing wfrm/s values which Agilent can only dream of ... so don't
take these values seriously.

So that's about the values displayedover UART and posted by me before.


Now pure visually, HanTekway seems to be fast (yes your/my eyes can imagine things).
I do have here two other DSOs, one with 400 wfrm/s and TDS2012 with 60-100 wfrm/s, from
a pure visual observation HanTekway is faster. At time of my decision to chose Tekway I did compared
with Rigol too, and also Rigol E was slower - today we know Rigol E have 800 wfrm/s (you remember
maybe Dave's video, 50000events, after ~60second first event was shown on Rigol).

I can setup my Yokogawa FG to create glitches, but this works to measure the shortest glitch size
with a specific frequency and not that god for pure wfrm/s calculations (as there are some random glitches too).

For wfrm/s measurment all i can test with my Yokogawa is 1ms (2step) sweep between two waves,
so this is good up to 2000wfrm/s. With such setup i can see difference when changing the sweep time,
pure visually a big difference on all 3 scopes - when a scope is on limit it starts blanking one or the other waves.
HanTekway is blanking sometimes the one or the other wave when running on 1ms/2step, so 2000 wfrm/s.
However such measurment is having continously the gltich (every second wave is gltich), so DPO-like functionality
might help to think "it is capturing all of them".

For more random glitch there is a different way to do it too , take a µC and program a simple counter with glitch,
here code for Atmega8 running on 8MHz:

int main(void) {
  DDRB |= (1<<PB0);
  unsigned int i = 0;
  while(1) {
    if(i != 0) {
      PORTB &= ~(1<<PB0);
      _delay_us(10);
      PORTB |= (1<<PB0);
      _delay_us(10);
      PORTB &= ~(1<<PB0);
    }
    else {
      PORTB &= ~(1<<PB0);
      _delay_us(15);
      PORTB |= (1<<PB0);
      _delay_us(5);
      PORTB &= ~(1<<PB0);
    }
    i++;
  }
}

This will generate after 65535 cycles a glitch, on a analog scope you will see something about ~1s the glitch.
With this code i have to wait between 5:30min and 6:00 min - meaning HanTekway have only about 200 wfrm/s.

wtf ? yes, 200 wfrm/s in 800ns/div timeabe setting (as i know that the calculated values for everything that bigger
than 800ns/div i'm not measured in these ranges anymore).
Note - Full persistency is slowing down the firmware (you can see over uart the wfrm/s dropping from 2000+ to 1100-1300 wfrm/s).
I was thinking first that maybe this is trigger issue, but setting to trigger on pulse the scope
is refreshing the screen every 1s so it can definitely catch these glitches.

Then i was thinking, maybe Hantek as they bought Tekway and rewrote firmware, maybe they
did something wrong, so i installed the oldes Tekway firmware i have (which was installed on my
early device - that's the firmware which was specified for 2500 wfrm/s by Tekway)- and well,
i have to wait 4:45 minutes to see an event - so ~230 wfrm/s.

So i spend the whole day (yesterday) building different glitch generators (with different rates)
and of course murphy's law catched me - depends on how many glitches there the HanTekway
is capable to catch them fast or really slow.

Best scenario was with 20000wfrm/s gen, worst with 5000 wfrm/s gen - nothing capturd after 20 minutes :P)

This gives me agan to think about the firmware. The counter we can see over UART is
based on postprocessed frames (so sampled, stored, filtered - whatever apply, and shifted to memory from
where they will get displayed). However, there are separate thread doing capture/postprocessing,
statistics and display refresh.

So maybe here is the problem, the DSO is postprocessnig frames with 2500 wfrm/s maximal, but then
the UI thread is skipping result, then of course persistency (or cam pictures) will shows the
true wfrm/s divided by skip-error.

Now when you we know that persistency is slowing down 800ns/div range to 1100-1300 wfrm/s and that
measured and calculated (via picture shot) wfrm/s is about 5 time lower, it's easy to answer
that these DSOs are skipping every 5th wave while displaying. This expalin now the pure visual observation
as then has been done with fastest screen refresh and no persistency - a 500wfrm/s refreshed with 50/s
on screen looks "faster" than a 400wfrm/s or 100 wfrm/s DSO or than whatever Rigol really have - with this
code above you can see on Agilent DSO3000 400wfrm/s, where Tektronix tried to measure it (see picture) and got #
no real result - probably because of same issues - when the gltich is always in the skip window
(display skip or postprocessing blind time) you will not see any results.

Now, let's hope Hantek will have an explanation for that - when the DSO is really skipping 5th wave on display
wel then they have to correct the user manual and webpage - and when all these observations and measurment are
bullshit then they have to provide a proper measurment - and of course even if the UART displayed
value is not for everybody eyes, an answer to the 1:2:5 and 2:4:8 error (so results for 40s-2us/div timebase).



If you have any comments or questions to my posting, please give me some time : i spend last days on reversing/interpreting
the ARM code, building generators, measuring values - now i need some time for my family.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on August 19, 2011, 02:01:19 pm
@tinhead - thanks for all your tests, the detailed response, and all of the info.  It will take some time to digest  :o
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on August 19, 2011, 02:57:58 pm
@tinhead

Note that UART out do not show wfrm/s
Look agen what UART exactly send out!
I can not find any wfrm/s.

"time 10s wave frames = nnnn"

this is what Hantek tell.

Btw, what is meaning of waveforms what can not see or settled. How you set 10div capture.

Only captured waveforms what are really usable and/or also  they can relly see or can use for some useful things are meaningfull. If there are behind processing (before processing) some captured waveforms what can not see or what do not affect anything... they are just to garbage collection.  Also poersonally I'm not interest any kind of calculated unreal speeds. Only what moves me is what can really use in practice and they are meaningfull.

 If I want know what is wfrm/s speed what I can see on the "tube" it is meaningful as long as I want inspect something with my eyes on the "tube".  What my eyes can see it can also measure after find good method.  Now I have seen around 200-300 wfrm/s. Nothing more yet.
Stop capture, also there is ONLY one capture. Where are these others what need be in "digital phosphor" memory. Why they disappear every time I stop capturing. ;) So this DPO "effect" is done only for human eyes as scope is running.



Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 19, 2011, 05:04:16 pm
@tinhead

Note that UART out do not show wfrm/s
Look agen what UART exactly send out!
I can not find any wfrm/s.

"time 10s wave frames = nnnn"

do not expect from the developer to spell that properly, waveforms or waveframes look similar,
there are any other translation mistakes. Imagine when if the original engineer said
"waveframes" and someone later translated it into waveforms ... this could be also be an
explanation ?

No i don't think so, because the previous Tekway model is capable of
398 wfrm/s (i see event every 2:45 seconds with testing with the code above) and they
promised up to 400 wfrm/s,s everything ok.

But of course the firmware is very simple made and there is a big difference to run simple
firmware with less memeory (2.5kpoints) on very similar hardware (ok, 33% slower but similar platfrom)
as complex firmware, with many features, larger samplepoint memory on only only 50% faster hardware,
so it might happens that waveframes are there but UI thread is not able to follow the sun
and is skipping every 5th frame.

Anyway, all that are observation/measurments and speculations - we have to wait on Hantek statement.

?????????2500???????????????


Btw, what is meaning of waveforms what can not see or settled. How you set 10div capture.

i can't, but there is a change in postprocessed waveframes when you switch from 20 to 16div (or vice versa),
the SoC is already running almost on limit so you can assume when we could change to 10divs the
postprocessing/capture thread would be able to use more CPU time just because the UI thread is
using less time.

Only captured waveforms what are really usable and/or also  they can relly see or can use for some useful things are meaningfull. If there are behind processing (before processing) some captured waveforms what can not see or what do not affect anything... they are just to garbage collection.  Also poersonally I'm not interest any kind of calculated unreal speeds. Only what moves me is what can really use in practice and they are meaningfull.

actually all they have to do is to store the postprocessed waveframes (like persistency is doing in UI thread),
compare and write the "event frequency bit" to it - then the UI thread can show the result.
From a cpu time point of view not that big change (no matter where you store), this would be then fix
the skipping issues (of course the reserved memory need to be also moved from UI to capture/postprocessing thread)
and improve the DPO effect, see below

Stop capture, also there is ONLY one capture. Where are these others what need be in "digital phosphor" memory. Why they disappear every time I stop capturing. ;) So this DPO "effect" is done only for human eyes as scope is running.

This will also bring back the digital phoshor effect back - i rememery one of the eraly firmware version was doing this
really nice, no idea why they moved it into UI thread, this is now only while in run mode  there but gone in
stop mode.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on August 19, 2011, 06:03:14 pm
When I put trig to AC...

"time 10s wave frames = nnnn"

nnnn  = ~500 (often vary between 496 - 499.)

(Conclusion removed because of too few observations as well as information about what is really going on a scope.)



Also it is just logical to explain all or some what I have seen by my eyes using different signals  so that it tell how many different captures I can see same time on the screen. This all is very close so that 10s counting need simply divide by ten and you have value for one second. But this is not whole truth becouse with all t/div settings it is not. It looks like some settings divide by 10 is not right and it can see that acquire cycle is more fast. So, this all is so muddy.


I hope I'm wrong. But still if it is truth, it is not very bad. Exept that blind time is long.
I do not understand area after 20ns/div. (8,4,2) what happends there?

I'm also waiting you get info from Hantek but strongly I afraid you do not get truth from Hantek. This FW is more and more after all  "repairs" growed to class: "spaghetti" maybe FW developing is more and more then as: "a desperate attempt by trial and error method" by Hantek ... also this I really hope that I'm wrong.

Do you remember what version it works.. (multiple captures on the screen after stop (without persistence))

Disclaimer:
This all seems so illogical, or at least confusing that it is best that does not now hold any definite statement until more information is obtained by examining and testing the scope in more detail. Something important information is maybe missing, and maybe that's why it seems crazy.
So all opinions what I have write about this wfrm/s case is inaccurate and not truth. Only truth are settings signals and results what I have tell.
On this basis, you can not expect anything other than the ones mentioned in the findings. Conclusions can not take place until a broader and more detailed investigations.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 19, 2011, 09:24:29 pm
... and everything started because i posted something which was not supposed for public eyes :)

In principle nobody will ever check or doubt on what in user manual or manufacturer website,
especially not for more or less no-name manufacturer.

I personaly would even accept the waveframe counter / 10 as waveform, but it does not
match too (1100-1300 waveframes / 10 are still 110/130 wfrm/s and i can see/measure 200-230)
Now these 500 when you set to line trigger are even better, /10 looks good but also /5 ...

i wish i would have the HexRays ARM decompiler, analyzing ARM assembler code is taking so much time.
On the other side as you said, the firmware is up to specific level good written (probably this is the part written by "rgj"),
where you can clearly see variables, function names, what so ever - and then on many places a piece of
junk code - mostly all these repairs/things coded in last 12 months are weird, really weird.

Btw, the translation issue hehe, imagine discussion engineer <-> marketing, or even better
"rgj"<->"engineer in china"<->markeiting.

When you look on the SVN IP address from which the "DSO2 design" is coming you will see it is not China,
it is DSL address in Mexico and i really doubt the developer was on vacation and setup during vacation
SVN to allow ppl on Tekway site to get the code - and this (when i check all fw's) at least twice in 2yrs.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on August 20, 2011, 06:56:50 am
Hi,tinhead!
Can  see the raw data from the ADC via the console?

Something I have some suspicions that the noise is the result of dithering or mathematical artifact.

Because at the ADC input, with shorted at the input on BNC, voltage noise is less than 0.25 bits(<1mV). Reducing supply ripple ADC twice does not lead to any result.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 20, 2011, 12:05:58 pm
Hi,tinhead!
Can  see the raw data from the ADC via the console?

Something I have some suspicions that the noise is the result of dithering or mathematical artifact.

Because at the ADC input, with shorted at the input on BNC, voltage noise is less than 0.25 bits(<1mV). Reducing supply ripple ADC twice does not lead to any result.

walt,

by default not, but as always there is a way to go ...

In principle you can patch/modify firmware to do an action (get the fifo data, or raw data or whatever, convert and printf on uart)
when you for push one of the unused button for example this one  - DoKeyOption5InMenuUtility3
or when the space is too short rewrite one of the useless buttons for example - DoKeyHelp.

Interresting functions are then :

ReadFpgaFifoByForce
GetAllAdcValue
GetAdcModifyValue
DoAutoAcqInScan
DoAutoAcq
DoAcqSequence

There is maybe a way to use the /fpga.exe which can then access the FPGA registers directly,
you will have to check what kind of register will be written here:
write_fpga_device
write_mask_param
write_fpga_switch_param

by the functions above.

attached firmware disassembly.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on August 22, 2011, 11:31:09 am
today we know Rigol E have 800 wfrm/s (you remember maybe Dave's video, 50000events, after ~60second first event was shown on Rigol).

No, no, no!!  Dave's conclusions were wrong.  I don't think it's likely that the Rigol DS1052E (or E series in general) does 800 wfrms/s - if it did, they would advertise it in their specs because that is a VERY good figure (look at the figures in the Agilent literature for much more expensive scopes).  Please, let's put an end to this unverified information right now and not spread it any further.

When talking about the ability of a scope to capture glitches or randomly ocurring events, we talk about the probability - a 99.9% probability.  Probability means something is [not] LIKELY to happen with a certain regularity - but it certainly CAN [not] - without breaking any rule.  Like rolling 6x the number 2 on a die - not LIKELY, but it can happen. The 99.9% probability that something will happen in 1000x amount of time does not exclude, in any way, the possibility that it occurs in 1x.

You CAN NOT find out how fast a scope is (wfrms/s) by running a glitch test a few times - you can only prove how fast it isn't.  This might sound confusing or the same thing written two ways, but there is an important distinction and worth understanding:
Using the probability formula for a 10/s glitch, with a timebase of 100ns (from the R&S literature):
If my scope captures the glitch within 7 seconds - every now and then, or even a few times in a row - it does NOT prove it is a 1,000,000 wfms/s scope.  But if, one time, it takes my scope over 10 minutes to capture the glitch, it DOES prove (at least beyond a reasonable doubt) that it isn't a 1,000,000 wfrms/s or 100,000 wfrms/s scope, because the probability of a scope that fast taking that long to capture the glitch is EXTREMELY low (99.999999.... etc).

If you really want to try to calculate actual wfrms/s by testing the probability of capturing a random glitch, you have to run MANY tests - not just a few.  It's no coincidence that probability theory has the law of large numbers ("If a fair coin is tossed many times, then roughly half of the time it will turn up heads, and the other half it will turn up tails. Furthermore, the more often the coin is tossed, the more likely it should be that the ratio of the number of heads to the number of tails will approach unity."); in other words, the MORE tests run, the greater the chance of working out the correct probability (or in this case, the actual wfrms/s).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 22, 2011, 11:54:24 am
today we know Rigol E have 800 wfrm/s (you remember maybe Dave's video, 50000events, after ~60second first event was shown on Rigol).

No, no, no!!  Dave's conclusions were wrong.  I don't think it's likely that the Rigol DS1052E (or E series in general) does 800 wfrms/s - if it did, they would advertise it in their specs because that is a VERY good figure (look at the figures in the Agilent literature for much more expensive scopes).  Please, let's put an end to this unverified information right now and not spread it any further.

yes, Dave's statement is wrong. You have actually to run for hours (at the best on multiple devices in multiple
time differences - to not catch the blind time for example or to not get fooled by positive event).
Agilent FG/test signal is 500kHz square signal, with one glitch every 50000 clocks .. so in principle 10 glitches
per second (now please don't start to divide these 800wfrm/s becasue this is not that simple).
This is why you can see on Dave's video multiple glitches catched by DSOX2000 (and not "single one").

Anyway, i build yesterday glitch generator (similar to what Agilent doing) , 500kHz square,
glitch every 500, 1k, 2.5k, 5k, 10k and 50k clocks.  I just don't liked the code which i posted before,
it does the work too but every 1.3 second and one single event ever 65535 - for a scopes with
low wfrm/s the event takes forever and the chance to not catch them i very high.

Based on luck i can start the acq. in right moment, so getting waveform captured with calculated
1000-2000wfrm/s, or i can have no luck and start perfectly in blind time - after 30minutes no
single frame captured. Now this is of course when i set to 20ns/div, so only one rising edge visible.
Of course when i set to 2us/div you can see the gltich randomly on every xxx edge (if you can't imagin
how this looks like check Dave's DSOX2000 review).
Of course the probability to see the glitch increas with 500events per clock and decears with
50k eventsper clock - this is why i build all these versions to show the probability.

The interessting thing on HanTekway is that each xxx (random) glitch even all edges are triggering
- this is when the scope capture thread is synced with the glitch - followed by few ms nothing.

I will see maybe i shot a video of all these glitch snapshots with 500/1k/2.5k/5k and 10k.

Attached the code, works on every Atmega with 8k (for lower rates) to 16k (for higher rates), clocked with 20MHz. 
You might wonder why so many nops, well i don't like the delay function because it si producing additional glitches,
a clock-exact nop is better. Even with nop's to 50k code was producing 50ns additional glitch every
10ms, so i corrected it to match too.

To trigger only on gltich you can setup your DSO to trigger on pos. 200ns pulse.

And yeah, you can of course output the 200ns pulse of different port and add it into the base signal
-  for base signal it makes sense to add series termination to slow down rise time - for glitch leave unchanged
- and you will get very similar signal to what on Agilent (except the glitch width, it is 200ns and Agilent 100ns).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on August 22, 2011, 12:27:45 pm
Anyway, i build yesterday glitch generator (similar to what Agilent doing) , 500kHz square,
glitch every 500, 1k, 2.5k, 5k, 10k and 50k clocks.  I just don't liked the code which i posted before,
it does the work too but every 1.3 second and one single event ever 65535 - for a scopes with
low wfrm/s the event takes forever and the chance to not catch them i very high.

Ha, ha... I also wrote a glitch generator yesterday, using the Hantek DDS3X25, for testing the Owon's wfrms/s  :)  After starting to test, I quickly realized I could easily prove how fast the Owon wasn't - but it wasn't so easy to prove EXACTLY how fast it is.  You need A LOT of tests!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on August 22, 2011, 03:51:05 pm
....or i can have no luck and start perfectly in blind time - after 30minutes no single frame captured.

Sorry, tinhead [to be again poking at your figures with a stick ;) ] but this doesn't make sense.  The acquire time/blind time has to shift slightly during capturing, even at the same div/sec setting (I can actually see it doing just that on the Owon with simple tests) - it HAS to, otherwise ALL scopes would be completely blind all the time at certain precise frequencies at each sec/div - and that wouldn't be logical because it's so easy to change that with firmware.

Blind time, acquire time, etc, are all calculated into probability ratios.  If you don't capture a single frame in 30 minutes, it means that your scope CAN'T be a xxxxx wfrms/s scope - because probability theory says there is a 99.9999....% chance that it would have captured the frame otherwise.  As I said in my previous post, it's easy to prove how fast your scope ISN'T with glitches - not how fast it IS.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 22, 2011, 04:14:13 pm
Sorry, tinhead [to be again poking at your figures with a stick  ]
don't sorry if you poke, i don't mind :)

If you don't capture a single frame in 30 minutes, it means that your scope CAN'T be a xxxxx wfrms/s scope - because probability theory says there is a 99.9999....% chance that it would have captured the frame otherwise.  As I said in my previous post, it's easy to prove how fast your scope ISN'T with glitches - not how fast it IS.

if a scope capable of capturing whatever value we now take for Hantek was not able to capture in 30 minutes a single glitch
then i don't have any other explanation (or well, maybe just the firmware i'm using freezed whatever functionalty -
however i saw DSO is operational and capturing data - on screen, uart and debug port).
After a next Stop/Run, without any changes to test/setup condition, glitches got captured as expected.
So just don't try to understand this, these are just observation which i made during tests of HanTekway DSO. 
I wasn't able to replicate this, but it didn't means that i or others will not get them too (again).


And as for the capture process shift, of course it is there, you can see it with the code posted
above really good (e.g. in 2us/div where multiple periods are visible).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on August 22, 2011, 06:06:42 pm
Quote
Anyway, i build yesterday glitch generator (similar to what Agilent doing) , 500kHz square, glitch every 500, 1k, 2.5k, 5k, 10k and 50k clocks....after 30minutes no single frame captured.

Which specific test were you running when you had the 30 minute gap?

Lets take each case one by one - using your glitch rates and sec/div of 20ns (* 20 for the Hantek - but I realize this might be slightly different in your test) - and figure out what the wfrms/s have to be in order to have a 99.9% probability of capturing within 30 minutes:

1000 glitches/s  -  20ns/div *20  -  30 minutes  =   ~10 wfrms/s  -  the statistical formula is:  wfrms/s = ( log ( 1 - ( 99.9 / 100 )) / 1800 {seconds} ) / log ( 1 - ( 1000 {glitches/s} * 0.0000004 {sec/div * div}))
  500 glitches/s  -  20ns/div *20  -  30 minutes  =   ~19 wfrms/s
  250 glitches/s  -  20ns/div *20  -  30 minutes  =   ~38 wfrms/s
  100 glitches/s  -  20ns/div *20  -  30 minutes  =   ~96 wfrms/s
    50 glitches/s  -  20ns/div *20  -  30 minutes  = ~192 wfrms/s
    10 glitches/s  -  20ns/div *20  -  30 minutes  = ~959 wfrms/s

Here they are again, for a 99.9% probability of capturing within 1 minute:

1000 glitches/s  -  20ns/div *20  -  1 minute  =     ~288 wfrms/s  (    ~576 wfrms/s on 10 div screen)
  500 glitches/s  -  20ns/div *20  -  1 minute  =     ~576 wfrms/s  (  ~1151 wfrms/s on 10 div screen)
  250 glitches/s  -  20ns/div *20  -  1 minute  =   ~1151 wfrms/s  (  ~2302 wfrms/s on 10 div screen)
  100 glitches/s  -  20ns/div *20  -  1 minute  =   ~2878 wfrms/s  (  ~5756 wfrms/s on 10 div screen)
    50 glitches/s  -  20ns/div *20  -  1 minute  =   ~5756 wfrms/s  (~11512 wfrms/s on 10 div screen)
    10 glitches/s  -  20ns/div *20  -  1 minute  = ~28782 wfrms/s  (~57564 wfrms/s on 10 div screen)

Again, this does NOT mean that if your scope captures a 10 per second glitch within 1 minute, once in awhile, that it does 28782 wfrms/s - ANY scope can do that.  It means the opposite - if it takes your scope, at least one time, 30 minutes to capture a 10 per second glitch - then it's speed is  <=  959 wfrms/s.  If your scope NEVER takes more than 1 minute maximum to capture a 10 per second glitch (@ 20ns/div - or - 40ns/div on 10 div screens) - congratulations! - you have a scope that is = 28782 wfrms/s [and you're pretty damn lucky  ;) ]

P.S. Both the Hantek and the Owon appear to use 20 divisions for a full-screen capture - which is double the 10 division scopes - so you can basically double their rates in comparison (or halve the competition with 10 division screens).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on August 22, 2011, 07:06:29 pm
BTW, I've been using a the glitch generator I wrote at 1 glitch per second - with a sec/div setting of 1ms.  While clocking the Owon over several minutes, the longest time it took it to capture the glitch was ~32 seconds.

So, wfrms/s =  ( log ( 1 - ( 99.9 / 100 )) / 32 ) / log ( 1 - ( 1 * 0.02)) - and that means that the Owon's wfrms/s (at least at that sec/div setting) <= 10.68  (or ~21 compared to a 10 division scope).

I will check a faster timebase now.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 22, 2011, 07:31:52 pm

Which specific test were you running when you had the 30 minute gap?


don't remember, i think it was with 2000.

Anyway, recorded two small vids:

2us/div view of glitch once every 1000 clock cycles (so 500 glitches/s), screen refresh is 50,
The video looked good on cam but flash is not showing anymore the real speed (sorry, i'm not video junkie)

00009a.flv (https://www.youtube.com/watch?v=34o2Im74sb0#ws)


and the same zoomed 80ns/div (actually it didn't matter that much when in 20ns/div from speed point of view)
EDIT: this one is with peristency on and auto refresh - note, in persistency mode these scopes are slower.

00009b (https://www.youtube.com/watch?v=-qYXerymreA#ws)


Now feel free to run calculations of the wfrm/s ^^

P.S. Both the Hantek and the Owon appear to use 20 divisions for a full-screen capture - which is double the 10 division scopes - so you can basically double their rates in comparison (or halve the competition with 10 division screens).
yes, in 19.5 div mode HanTekway is in real using 20divs, but the 16divs mode is not just a cut,
the firmware is really switching over to 16 (with all calculations, you can see it in the asm code which i posted).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 24, 2011, 02:19:26 am
what a surprise, obd2motor.com have already listed the BM and BMV models, the first person
who can provide firmware dump and pictures of PCB will get from me a nice gift!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on August 24, 2011, 06:19:47 am
Yes, surprising as these DSO are not full ready ;D, Chinese websites used to promote products ahead of time. None on the market before beginning of september and prices should be a glitch higher, what doesn't seem to be the case of this chinese retailer...
BMV series will come first with chinese video help, better is to wait all languages video help. We wonder how will be the spoken translation... :-\
Whatever, Tinhead, what kind of gift you can propose?  ;)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 24, 2011, 01:51:06 pm
Yes, surprising as these DSO are not full ready ;D,
right, Hantek confirmed this once again last night.

BMV series will come first with chinese video help, better is to wait all languages video help.
We wonder how will be the spoken translation... :-\

didn't matter as long it is nice looking young woman with sexy voice

Whatever, Tinhead, what kind of gift you can propose?  ;)

hmm, you a dealer, what can i give a deal (maybe schematics of hw1007?)

For non-dealers i have :
- 50USD (winner to provide paypal acc.)
or
- nice young girl fresh imported from xxx (winner to pay shippment costs)
or
- nice young man fresh imported from yyy (winner to pay shippment costs)

so depends on location "option 2 and 3" might be not a gift anymore.


EDIT: sry, option 2 and 3 sold out.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: A Hellene on August 24, 2011, 02:14:56 pm
What about all those poor SOBs that take pleasure in abusing, torturing and dismembering under-aged minors? Won't they deserve some kind of reward for providing any dumps and pictures of the brand new models they take apart? :P

Mind you, ever the pedophiles have rights in this world...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 24, 2011, 03:18:55 pm
Mind you, ever the pedophiles have rights in this world...

definitely, a "white" pedo would say "we just different, like black ppl, but still human beings"

Anyway, how far are you with Rigol schematics?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: A Hellene on August 24, 2011, 04:14:09 pm
:)

Rigol schematics? What is this thing? :-[
Being extremely busy these days, I have not made any significant progress... Plus the fact that the continuity testers of my DMMs do not really help with those large capacitances the power lines have plus the very low resistance value of the differential line terminators.

Now that I have some time in my hands, I am constructing a special continuity tester based on a tiny45 that is able to distinguish resistances down to mohms if needed and to source up to 4mA test current when shorted. Another thing about this tester is that it can distinguish three programmable resistance ranges using a test voltage of 400mV and report them with three different audible tones. These are very useful features when the PCB is full of large capacitances and small resistances, like the DS1000 PCB is. For example, testing a large capacitance line will sound all the three resistance range tones in sequence and will stop within a time of half a second!

Anyway, by this time the power management and the resistance measuring and reporting modules are already working exactly as designed! Right now, I am adding a setup module in order to define custom resistance ranges and hibernation times without the need of reprogramming the FLASH. The final step, before resuming the DS1000 schematics, will be to put the t45 PCB with a CR2032 cell on board in a small plastic box; I have some spare car-alarm fob remote control enclosures that seem to be perfect to host this little device.


-George
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vlindos on August 24, 2011, 11:17:22 pm
Greetings from Bulgaria!

First - Big Thanks for this thread and tinhead! And then... I finally bought my Hantek - Tekway - DS5201B! From this seller (http://myworld.ebay.com/accuni-express/?_trksid=p4340.l2559l) on eBay. Its was the cheapest place I found out there :) - 299 GBP. I don't care about the warranty since China is far way and there is no local dealers here. Yet more - there is option for returning the purchase within 30 days. Hope that helps the people still wondering how and where to purchase.
The parcel came in within a week. Package was much better than the Tekway package I have seen on this thread (you will see the pictures). I guess the mother company invests more in the marketing.
It is hardware version 10070x55553e8, still hope I would be able to upgrade to 200 mhz even though the package came with 150Mhz probes set. I ordered this (http://www.ebay.com/itm/370532286388?ssPageName=STRK:MEWNX:IT&_trksid=p3984.m1439.l2649) USB TTL. Do you think it will work?

The bad thing... For the whole this thread I have read I didn't found some one to complain about the fan. I saw that most people are saying there is no fan. Yeah - but this has one. And it is loud, very very noisy one. Like most of you I disssembled the scope and after reviewing it - choose the most easy thing to fix the noise. I had added 150 Ohm /1W resitor. The current without the resistor was 40 mAmps and with it ~ 17mAmps. I did tried 0.5W resistors but they gets warm so 1W is better. Using the resistor, the fan is spinning at reasonable speed but at much lower speed than the original. I guess that would be enough but I don't really understand the purpose of that fan. There are holes over the PSU and at the same time the fan is far way from it and it is blowing to outside of the box. What do you think about this ?

Also did self calibration several times and tuned the probes but there is noise you will see on the attached pictures. They use the scope's oscillator (peak 5.2V). It looks like the noise is taking 1/15 the voltage, and so the noise would be ~0.3V. Is only me finding this disturbing? I see some of you had discussed it, but there is no solutions, right ?

In the end I want to say even though the above problems the scope is fantastic for its money and so far it serves well. It has lots of features that some of the low class scopes from the high end brands don't have. Also I would say that the UI is good very good. For example the the large display scope from Agilent that Dave reviewed don't have the option to high the side menus while here these menus are poping out only on certain context in the rest of the time you will be enjoying the big 800x480 display.

See the pics attached. Some of them are a bit blurred. Its due to my camera and photo skills quality. Don't judge me too much.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 25, 2011, 12:41:21 am
It is hardware version 10070x55553e8, still hope I would be able to upgrade to 200 mhz even though the package came with 150Mhz probes set.

yes it will.

I ordered this (http://www.ebay.com/itm/370532286388?ssPageName=STRK:MEWNX:IT&_trksid=p3984.m1439.l2649) USB TTL. Do you think it will work?

yeah, this one is ok.

The bad thing... For the whole this thread I have read I didn't found some one to complain about the fan. I saw that most people are saying there is no fan. Yeah - but this has one. And it is loud, very very noisy one. Like most of you I disssembled the scope and after reviewing it - choose the most easy thing to fix the noise. I had added 150 Ohm /1W resitor. The current without the resistor was 40 mAmps and with it ~ 17mAmps. I did tried 0.5W resistors but they gets warm so 1W is better. Using the resistor, the fan is spinning at reasonable speed but at much lower speed than the original. I guess that would be enough but I don't really understand the purpose of that fan. There are holes over the PSU and at the same time the fan is far way from it and it is blowing to outside of the box. What do you think about this ?

right, since few weeks Tekway and Hantek is installing fan by default.

I asked Hantek what is the reason (because previously it was only as option for high temp environment/countrys),
it seems that some ppl was not happy with the enclosure temperature. In principle the device was designed to work
without fan (and without any heatsink on FPGA/ADCs), later to imporve stability and signal quality heatsink has been
added to ADCs and FPGA. This is actually enough for main PCB, however the PSU itself is still a biggest heat source
- without small air flow the enclosure is getting hot - not really tragic in typical environment, but confusing.
A slow running fan is sufficient, the best solution is to replace the heat source - the 3.3V LDO by DC/DC converter.

If you don't want to replace the 3.3V LDO then just reduce speed of fan, but a resistor ehm yes it work too
but a 7805 (or even 7808) instead of the 7812 on PSU PCB is better.


Also did self calibration several times and tuned the probes but there is noise you will see on the attached pictures. They use the scope's oscillator (peak 5.2V). It looks like the noise is taking 1/15 the voltage, and so the noise would be ~0.3V. Is only me finding this disturbing? I see some of you had discussed it, but there is no solutions, right ?
first of all before you run self calibration do once "default setup".

The noise, hard to see from your pictures (but it seems to be a bit high), just don't shot pictures with your cam,
make a screenshot to USB - set both channels on, coupling GND, 1V/DIV, and 20ms/div, 2us/div and 200ns/div -
then i can compare to what here.

See the pics attached. Some of them are a bit blurred. Its due to my camera and photo skills quality. Don't judge me too much.
i can see your serial ... not that i really care about, but is maybe not wise to talk about haking the device
and to publishing own serial number ...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on August 25, 2011, 02:51:58 am
In fact the fan was installed to lower temperature stresses on components and also to insure long term stability. We use to operate new units over 24 hours tests to avoid forwarding bad units to customers, which can happen because we believe Hantek have no tiime to perform deep tests.
After 24 hours burn-in in room temperature 20-22 deg, we can find the units are really cold. But as Thomas said, replacing the 12V DC regulator with a 5Vdc one should be sufficient (we should try and qualify it). Anyway for warranty purposes, China is far away and not  convenient and it will cost you a lot to send the unit back and to get if again ! This is a cost and a lottery. Elec3i had very few returns for one year, just for the ones who considered warranty, from Italy or Germany, or Finland, they were happy to get their machines repaired or exchanged in less than one week... 8)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on August 25, 2011, 07:05:13 am
Only side note.

Thermal design is not always so easy.
In this special case I have not look how it go exactly inside HanTekway.
But it rise in my head one "de ja vu". (I really do not know thermal data inside scope after some changes - but I have some data without and with slow fan (not public))

This de ja vu:

Inside case is hotter air than outside. Holes are where they are. Inside box there are also high thermal gradiendts.
Free air convection is related ti dimensions, holes, temp gradients etc. There is network of pipe effects. I remember one industrial case where I drop one power losss (reduce heating power) and one hotpot inside cabin go more low temp. But what happend. There start thermal origin problems. One memory go littlebit more slow and enough for problems. Why.

This card was nearly bottom but just over bottom air intake. (cooling was designed with natural convection)
After lot of head pain we find problem. This component temperature have rised. Why? Becouse I reduce other place power loss - for make unit  more cool. Wow. Why this happend? Becouse air flow trough bottom intake was now less. Cooling this memory IC was reduced. (yes timing was also designet too critical but it was not my problem becouse it still have worked well just as it was designed. Design was well made and tested as industrial machines need. (becouse there need extremely high reliability)  I make problem reducing one heat source and then other component go more high. ;)  Think how it can also be (littlebit) inside HanTekway. (I have not measured exactly so I do not know - only think tah there is also this posibility.

So, imho, it is of course clever to reduce this power unit some components power loss for reduce temp. (If think these components it may rise longevity and reliability)
Now there are many hot komponents on the main board inside faraday box. ADC's FPGA mainly. FPGA is BGA. High thermal stress and also variations may after time affect soldering reliability also + component itself age. Now with small (stupid selected) heat sinks they may rise surface temp easy over 60 celsius in around 20 celsius enviroment. If machine is not in ideal free air and enviroment temp is example 40 celsius we may find some komponents surface as high as around 80 - 100C.
Yes as factory tell they are still in specs. hehe. Yes nearly abs max area.

There is two posibilities. Design free convection cooling better. It do not cost anything but littlebit design work and calculations on the table. And some lab tests.  But becouse they do not know how to do - becouse lack of enough experience for this work they go easy way. Add fan. And agen. without thinking. Without any labbing, for finding optimum with noise and enough air flow.

Air flow is just right direction.  If think this unit box and layout. If it can design different then air flow can turn to intake and it make also possible to put some dust filter to air intake.

But now need take fresh air in mainly or markable amount from bottom holes! So I understand fan direction.

Also this unit drift around 1 - 2 hours after power on without fan.. Becouse thermal stabilization need long time - becouse construction is what it is.
Fan can reduce markable this.  If construction have not changed and only add fan. It need only slow airflow.
Also fan and other thermal design must be better than old Tektronix. It need be so that if fan fails machine do not die with overtemp. Watching or thermal designed so that worst case do not kill machine,
Of course I can be wrong.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on August 25, 2011, 07:16:55 am
Rf_loop, hehe déjà vu ! we can practise more french  together :P
Your point of view is pertinent. We believe air flow noise can be reduced if fan is not against the case or something can let the air coming without less stress (number of holes in the case, etc.) or another place in the design.... Speed fan is the characteristic that affects the most the noise disturbance.
Whatever, for people like us surrounded with other noisy machines in our laboratory, the DSO fan is a piece of cake... ;D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on August 25, 2011, 08:07:42 am
Whatever, for people like us surrounded with other noisy machines in our laboratory, the DSO fan is a piece of cake... ;D

Yes, example if I turn on my TEK TM5006 frame includin CG5011 and CG5001 scope calibrators I feel like takeoff with J-11B.
But maybe most heavy noise is in one old one HP test gear what have 3 "turbines" together inside and case. 

In lab there is always noise but it is not very nice. It was -80's when nobody think noise.  Todays peoples play heavy rock with earphiones but then they are extremely critical if some equipment give small noise. But yes - I hope manufacturers keep this noise levels down as possible without super high price.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on August 25, 2011, 03:02:51 pm
In lab there is always noise but it is not very nice. It was -80's when nobody think noise.  Todays peoples play heavy rock with earphiones but then they are extremely critical if some equipment give small noise. But yes - I hope manufacturers keep this noise levels down as possible without super high price.

But also, with modern low-noise fans, there is no excuse (except a couple of dollars) to have a lot of noise.  I paid € 299 for the Rigol DS1052E and it was noisier than 2 PCs running full-time (with a few quiet fans each) in my lab.  Would I have paid, for example, € 302 or € 303 for the same Rigol with a quiet fan?  Absolutely.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vlindos on August 25, 2011, 07:12:34 pm
@tinhead. Thanks for the responses man. You really rule and should be getting sallary from Hantek :P

I have updated the post with the usb short of the noise. Could please take a look and compare ?
Also could you give more info about the 3.3 V LDO to DC/DC converting. I have read your post about the capacitors changing in the PSU board but didn't understand if only the DC/DC replacement would be enough. Could publish more shots ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on August 25, 2011, 07:50:42 pm
Is only me finding this disturbing? I see some of you had discussed it, but there is no solutions, right ?

This is the standard noise for this model.

To find out the true nature of his need to send the unit to vivisections. And no one can say beforehand that no one oscilloscope were harmed.

There may be a dirty power ADC, bad layout, noise on the input, even from the relay coil, switching 1 or 2 channels.
Maybe this is a mathematical artifact, or whatever.

to identify the source of the noise The easiest way its unsolder the relay RL04 by tinhead scheme and connect input pins ADC  with him  reference voltage.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vlindos on August 25, 2011, 09:00:27 pm
Hi walt,
Have you tried actually that? Is there any more pictures?
Could you give us more information about the element - like picture of the main board?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 25, 2011, 09:29:06 pm
@tinhead. Thanks for the responses man. You really rule and should be getting sallary from Hantek :P

I have updated the post with the usb short of the noise. Could please take a look and compare ?
Also could you give more info about the 3.3 V LDO to DC/DC converting. I have read your post about the capacitors changing but didn't understand the part of the DC/DC (i'm ee novice).

the noise look "good" or better said like on typical HanTekway DSO.

Now regards the LDO replcament, i did posted schematics look for it and i did posted a list of part which can be used to replace the LDO.
https://www.eevblog.com/forum/index.php?topic=1571.msg42363#msg42363 (https://www.eevblog.com/forum/index.php?topic=1571.msg42363#msg42363)

In principle you need on each side of DC/DC converter one GRM32ER71A476KE15L, on 3.3V output additionaly two EEFCD0J470R. Then you can replace the
org. caps in 5V path by bigger types, EEUFM1A152L  and EEUFM1A472L. Important is of course to solder these two GRM32ER71A476KE15L as close as
possible to DC/DC converter (PTH04070WAH) pins. this can be a small separate PCB like i and other did.
The noise level will be bit lower, max. the same as org. PSU, but the unnecessary heat from PSU will be gone (maybe someone should produce such replacement kit ...)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vlindos on August 25, 2011, 09:45:12 pm
Very good guidelines tinhead. However I think I will leave this for later since the kit (parts costs) is bit pricey - more than 30 euro without the shipment. I'll see how ti goes after hours of usage and then will think about replacements. Btw have you measured the temperature before and after?
Btw you say the noise level would be lower... why ? How the PSU is related to the ADC measurement paths?

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 25, 2011, 09:51:57 pm
Hi walt,
Have you tried actually that? Is there any more pictures?
Could you give us more information about the element - like picture of the main board?

... before ppl spend now time desoldering parts and measuring things which have none or only less influence on the noise i can already tell you where this noise is coming from.

In principle when more than one ADCs are used (and here we have up to 8th) the gain of ADC / channels must be identical. Now when you look
on the schematics you will see all refin/out of all ADCs are connected together - this is common practice for low budged DSOs but not the
best way (external ref with compensation would be better)

Then of course there is additional noise coming from not 100% exact calibrated input stage (you can't calibrate exact with given components),
and finally the overlcoked ADCs/bit noisy PSU/missing caps on ADCs are giving another part of the noise.

Now the gain difference is producing the major part, you can see it when you disable interleaving and disable all-1 ADC (this can be done by firmware patching and some
nice tricks - i don't want to talk about right now because these are more or less internal things which i observer/reversed and got confirmed by manufacturer - and they
of course don't want to talk about internal things in public - competitors are everywhere and watching). In principle all these AD9288/AD9481/HWD9481 scopes have exact the
same problems - some using bit more interpolation, some slowing down firmware to allow the scope to capture 2 waveforms (to avg a bit), other both things.
Interpolation filter can of course produce some digital noise from nothing when the calibration/gain is not perfect.

And yeah, all ADCs are clocked by FPGA - the jitter is giving the rest, the interleaving is not prfect anymore so no way to calibrate perfectly.
Sure the firmware is trying to arrange signals based on cross zero values while in factory calibration, but this is only static data,
temp drift, voltage drift, gain drift and signal type are dynamic.

But there is nothgin you can do in 5 mintues to get it solved. Sure you can repalce all ADCs by better/different models
(did it already - twice, first run was mistake as no chance to overlock new ADCs, second run - still not ready, need dedicated clocks for that),
replace FPGA clock source by extrem low jitter clock (did it already, bit less distortion for HF signals), evt. repalce complettly FPGA clock for ADCs by
dedicated clock chip (working on it now), add additional caps (did it),
improve input stage (did it), patch a bit firmware (did it) - but then you will realize that the total costs of such hacks/improvements doubled
the price of DSO. So when you don't  want spend money - take these DSOs (and now i mean UNI-T, HanTekway, RIGOL E ser.,
Instek A series, Tonghui, ATTEN, Siglent) as they are - low range but still good DSOs.

And before you ask - was it worth for me to imporve my DSO? Depends - from pure $$ point of view NO (i spend already ore than 1k USD for whatever was necessary to do my work)
from a fun point of view - sure i like my job, from a signal quality improvement point of view - YES.
Will i post improvement if they make sense? Maybe, depends on complexity, a dedicated clock PCB is nothing which can be done at home.
What i definitely will post is LAN addon for current platform (hw1007, should also work with hw1005).

Now Hantek spend of course some time too to find a way to imporve current hardware, the hw1007 calibration is taking a bit more care about potential gain
difference, i heard BM/BMV models will have additional improvement (what kind - no idea yet).

Anyway, if you don't lkie the noise - sell the scope and buy Agilent or the new Tektronix, sure they cost a bit more but as always, you get what you paid for.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 25, 2011, 10:00:52 pm
Btw have you measured the temperature before and after?
enclore temp right over PSU - before "hot", i remember someone measured it, but just disable fan and leave DSO
running for an hour, after - 32°, almost no heat from PSU.

bnc plugs temp - before very hot - again someone measurd it (don't remember where i saw it), now 34°

But it should be something between 20-30° difference. Sure fan will blow away part of that, but in my opinion fan is only
extra thing - you don't have to produce heat in first place.

Btw you say the noise level would be lower... why ? How the PSU is related to the ADC measurement paths?
google "ADC PSRR" and "Power Supply Effects on Noise Performance".
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vlindos on August 25, 2011, 10:01:44 pm
Nice one - again! Great explanation. I am glad you are enjoying it.
I am not EE spec, and so if you are saying that it is too complicated to avoid the noise - then it is. Yes it makes sense to get for what you pay, but you ppl alway try get more. Just curiosity - how much you had been able to lower the noise ?
PS. Fully agreed for the hot source removal. And again great job - 32 degrees are nothing. Guess the engeneer(s) at Tekway was too much in hury (or not at your level - lol) to calc properly the things out. Few dollars above the price with your set of components for PSU might be saved from the old one + the fan.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 25, 2011, 10:37:35 pm
Just curiosity - how much you had been able to lower the noise ?
... a littlebit only. You will always have some small differences between produced units,
the environment EMV influence - but i would say 10% better than original DSO - see picture.

The target was to get levels like when 4 avgs enabled - so from that point of view i failed.

Guess the engeneer(s) at Tekway was too much in hury (or not at your level - lol) to calc properly the things out. Few dollars above the price with your set of components for PSU might be saved from the old one + the fan.

on low budget DSO market there are many competitors, you can be sure every manufacturer is calculating every cent,
a few dollars that's already very high difference. You can on the PSU PCB - the shotky diode cost less than bigger
heatsink and different LDO, so they chose a diode to reduce voltage, smaller heatsink and smalled LDO.
For a single unit of course everybody would say "no problem i would pay 20USD more to get this or that inside",
but actually 99% of buyers are looking on the price first - for 20USD less you will chose different distributor :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on August 26, 2011, 04:21:09 am
Have you tried actually that?

Sorry, I did not exactly put it above the post.

Not yet. Short the input to the ADC reference voltage, we can see that the noise of the input circuits or the noise of the ADC or mathematical artifact.
The easiest way to do it, unsolder the relay

I watched the oscilloscope input AD9288, and did not see anything special, but I have too much low-frequency oscilloscope, to the same single channel.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vlindos on August 26, 2011, 08:21:47 am
Hi tinhead and walt!
I am glad there are people like you ready to help novice like me :)
Now .... tinhead if your screenshot is right you've got very different levels of noise. Without probe attached, pushed Auto Set button and then the measure menu I get:
Pk-Pk - 16 mV  - you get 160uV
Minimum -8 mV - you get 80uV
Maximum - 8 mV - you get 80uV

So you get 1% from the noise I have. If there is no mistake I think these are very significant results.
I am still way from the decision to do complicated mods to achieve these results but again from curiosity - How did you achieve it ? Using all of the the above explained  - including replacements of all of the 8 ADCs? Can you make a ordered list of what exactly you have done - it might be useful for other ppl like you? Also do you think that removal of the relay the way walt suggested would bring insignificant results?

PS. Just a side note. Do you think it would be too illegible if you start open source hardware project. Actually I am not asking for it. You made already enough. But you have lots of knowledge base about it and schemes it would be shame to be not shared (your mods over the original schemes).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 26, 2011, 10:18:18 am
Without probe attached, pushed Auto Set button and then the measure menu ...

Do default setup, set 2us/div, set probe x1, set 2mV/div, set input to GND, enable 20MHz BW limit,
do stop, save screenshot and compare the pixels on picture - not measurmens values.
Measurment is already on limit (so you can't see less than 160uVpp), the next step
is zero (just divide the 2mv/div * 10 div / 256)

How did you achieve it ?

ext ref, enough caps near ADC, better PSU/power distribution/enough caps where they missing/
extrem low noise oscillator/factory calibration with low noise FG (rubidium synched)/replacement of some
passive components by part with less drift.

Can you make a ordered list of what exactly you have done

no, i'm not writing down such things because the improvement was not what i hoped to achieve.
But it is not that hard to DIY, just check the datasheets of components in affected circuit sections
and try to follow manufacurer recommendations.

Do you think it would be too illegible if you start open source hardware project. Actually

such mods can't be declared under open hardware, and btw. since i spend hours to develop LAN ADDON PCB
for hw0, and then canceled production because someone else was about to use my work and produce
them too (say thank to pgup62) i'm not a friend anymore of what so ever open things
- except wide open jung woman's legs.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 26, 2011, 11:04:41 am
maybe someone of you here have a bit of spare time and can try to identify these still unknown components:

SOT23-3, part marking SCJG, pinout 1-VCC, 2-Vout, 3-GND
- this is voltage ref. used in hw1007 instead of LT1790-4.096V

SOT23-5, part marking LJTR, pinout 1-VIN, 2-GND, 3-EN, 4-NC?, 5-VOUT
- this is 2.5V LDO for FPGA PLL
- NCP500 possible replacemenr part so solved

SOT23-3, part marking A33B or A3VE, pinout 1-G, 2-D, 3-S
- this is P-MOSFET driving Display backlight
- this one not really important,
probably something really cheap, "any" ~1A P-MOS will be good.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: A Hellene on August 26, 2011, 01:28:21 pm
I am afraid that the closest match I could find for the LJTR is ON Semi's NCP500 (2.5V, 150mA LDO). But the markings for the 2V5 TSOP-5 package should be "LCT" because "LJ" ts the 3V3 QFN flavor of the NCP500... So the the LJTR part is probably not the NCP500.

I had no luck at all with the other three part codes... I guess that the components are fairly new to have be listed online...


-George
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 26, 2011, 01:45:44 pm
well, maybe clone of NCP500, however pinout match, curret match too - so i take it as possible
replacement part into schematics.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on August 26, 2011, 03:53:00 pm
... before ppl spend now time desoldering parts

Sorry, I wright our post before read yours.
Yet almost reached the limit in this implementation.

Active probes with a little speed, but higher gain can be a good option for the measurement of signals below the noise level Hantek
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ECL on August 26, 2011, 08:25:31 pm
maybe someone of you here have a bit of spare time and can try to identify these still unknown components:

SOT23-3, part marking SCJG, pinout 1-VCC, 2-Vout, 3-GND
- this is voltage ref. used in hw1007 instead of LT1790-4.096V


Diodes Inc AP7313-15SR seems to match, in terms of package marking,
but the SR is a reversed pinout (to the more common 1=ground organization).
Output is 1.5V.

Maxim MAX6145EUR-T matches pinout and voltage, no sign of SC marking code

Could match some of the precision shunt lines, like LM4040 etc

These folks suggest SCxx is a Microchip marking prefix (handy site BTW, good job to the team that runs it!):

http://chip.tomsk.ru/chip/chipdoc.nsf/vc1 (http://chip.tomsk.ru/chip/chipdoc.nsf/vc1)!readform&view=smd&cat=S&start=501&count=500

If so, it might be the MCP1541, which matches voltage output and pinout.

TI REF3040 series may also be a match

ECL  -K
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 08, 2011, 11:47:47 pm
for those who didn't saw it yet:

https://www.eevblog.com/forum/index.php?topic=4730.0 (https://www.eevblog.com/forum/index.php?topic=4730.0)

a nice review of Hantek DSO5xxxB series.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vlindos on September 11, 2011, 11:57:35 am
Hi again
Just wanted to inform you that the CMOS UART port had been removed from the latest hw version.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vlindos on September 11, 2011, 12:43:18 pm
And here is a bit more detailed info how to connect to the Linux console and hack the scope:

1. Get CP2102 USB to UART converter (eBay is good place to get one).
2. Connect the cables from the convertor the J801 port correctly - otherwise they say - you will screw up the scope. See the below pictures below how.
3. Start hyper terminal or any equivalent app. Connections settings are:
bandwidth - 115200
data bits - 8
parity - none
stop bits - 1
flow control - none
4. Start the scope. You will get lots of boot up messages. Press Ctrl-C continiusly until you get the :
Press 'Enter' to enter the console.
5. After you enter - follow the original Tinhead instructions:

vi /sys.inf
vi /tmpdst
vi /logotype
vi /logotype.dis (only for fw 2.6.xx and higher)

and replace all DST1102B by DST1202B
In principle if you only do mv xxxxxx xxxxxxx and reboot twice your DSO, everything else will get updated automatically,
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 11, 2011, 12:57:06 pm
Hi again
Just wanted to inform you that the CMOS UART port had been removed from the latest hw version.

no, it is still there but located on diff. place of the PCB

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vlindos on September 11, 2011, 02:12:17 pm
Yep, its there. Just though that there two UART ports and the one shown on the first page is missing on mine hw version.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vlindos on September 11, 2011, 06:26:22 pm
I had removed the fan "resistor" hack - for the slower speed. I did what tinhead suggested instead - replaced the dedicated LM7812 voltage stabilizer for the fan to L7805. I had also changed the place of the fan and added another one.
PS. Put 2.2 uF (WIMA MKS2) capacitors in addition to the standard capacitors, in the places where tinhead invented the PSU heat removal. Haven't checked for any differences so far. Most probably there wouldn't be any - until I get the cool DC/DC replacement.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on September 11, 2011, 08:33:09 pm
PS. Put 2.2 uF (WIMA MKS2) capacitors in addition to the standard capacitors,

Standard LOwdrop linear regulator to 3.3 volts requires a certain equivalent series resistance at its output to prevent oscillations. Typically 05-1,5 Omagh. Therefore, it is best to put the output of standard tantalum at 68-100mkF.
After limiting diode into input  of the regulator as a filter, you can put a small tantalum, for example 22mkF * 10Volt

If there is no real ground Y capacitors is better to remove.

PI-Expert recommends for TOPswitch  capacitors with low impedance, but they give nothing in this device.

Replacement of ceramic capacitors on film in the   negative feedback circuits TOPswitch does not add too  nothing, and I returned the original back.
Options absolutely no improvement. As of ferrite bid.


It's all for fun
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 11, 2011, 10:02:58 pm
for those of you haveing latest hardware revision (hw1007)
there is on every DSO an uniqu file "chk_base_volt", no idea where or how this file will be created in
first place, but without that file hw1007 might not calibrate properly.
The content of such file is like:

[8mv]179
[20mv]370
[400mv]404
[2000mv]2003

especially the 8vm and 20mv values are very unique. Sure in case of loss there is a trick to
be able to re-calibrate without that file (by changing hw revision) but this trick will remove
all benefits of hw1007 (improved accuracy and reduced distortion).

So once again my advice, create a backup of your DSO.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 12, 2011, 10:57:35 am
About Factory Calibration - reloaded

as already posted here

https://www.eevblog.com/forum/index.php?topic=1571.msg50043#msg50043 (https://www.eevblog.com/forum/index.php?topic=1571.msg50043#msg50043)

the factory calibration can be run by everybody who wish to recalibrate for
whatever reason (hw changed, you think something wrong , etc.)

This factory calibration data is of course unique, each DSO have own due hardware tolerance.

There are (by default) following files on the file system:

tdc_edge125M - this is calibration for Edge Trigger by 1GSs (so each ADC in 125MHz)
tdc_overtime125M - this is calibration for Overtime Trigger by 1GSs (so each ADC in 125MHz)
tdc_pulse125M - this is calibration for Pulse Trigger by 1GSs (so each ADC in 125MHz)
mult_adc.log - this is the timing constraint table created from files above (more or less)
tdc.log

additionaly to these default tdc_xxx125M files there is a way to calibrate the long memory,
this will create the following files:

tdc_edge - this is calibration for Edge Trigger by 800GSs (so each ADC in 100MHz)
tdc_overtime - this is calibration for Overtime Trigger by 800GSs (so each ADC in 100MHz)
tdc_pulse - this is calibration for Pulse Trigger by 800GSs (so each ADC in 100MHz)


Don't get confused now, even when the DSO is sampling with max. 400MSs in long memory mode
the calibration itself is running in 800MSs (this is special FPGA/ADC mode).

The calibration procedure itself is the same as here

https://www.eevblog.com/forum/index.php?topic=1571.msg50043#msg50043 (https://www.eevblog.com/forum/index.php?topic=1571.msg50043#msg50043)

exept the fact that you have to select long memory.
It will work in 40k, 512k and 1M settings, however the 512k/1M takes loooong time to process the
data. It is sufficient to run it also in 40k memory depth mode..
I didn't saw any advantage of running calibration for pulse and overtime in 800MSs/long memory mode,
the edge mode was eough to stabilize a bit more the long memory waveforms.


Whate else?

Well, it seems that the calibration in 1GSs mode as described here

https://www.eevblog.com/forum/index.php?topic=1571.msg50043#msg50043 (https://www.eevblog.com/forum/index.php?topic=1571.msg50043#msg50043)

is exactly what the manufacturer is doing (pure visual compare of factory fresh brand new DSO
calibrated vs. exact the same DSO with factory calibration started by me)

However, there seems to be a way to do it a bit better,
when you change sampling type from "real time" to "equ-time" and run then the factory calibration
the resulting set of tdc_xxx125M files will be more accurate. I can clearly see difference on my DSOs.
Not sure if this is working with all firmware versions, but it does on 110531.1 and 110908.0.

In case this is not working on your DSO and the data is not aligned anymore properly
(how this looks like ? well, set e.g. avg 128 and run calibration, you will see immediately
8ns broad jitter band instead of clear waveform edge) just run the calibration
once again with "real time" sampling type selected.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 12, 2011, 01:04:30 pm
For those of you who bought Tekway or Hantek in last days and have followed firmware version loaded:

2.06.3 - 110728
2.06.3 - 110801
2.06.3 - 110806
2.06.3 - 110808

All these versions have a ugly bug (in my opinion), the long memory is not available when you
select 8ns/div, 4ns/div and 2ns/div timebase. In principle such capability it could be removed for reason
by both manufacturers, but since the zoom is not working then (select 1M, 20ns/div, do stop and zoom to 8ns
- and waveform disapears) i think this is a bug and not a feature.

As both manufacturers not implemented a downgrade functionality in the firmware update it is a bit hard
(except you do over UART) to downgrade to previously working firmware revision.

To make it easier i compiled a downgrade firmware, it will switch back your DSO to 2.06.3 - 110531.1
(the one with 1M CSV and corrected help.db and proper english menu)

All you have to do is just to run it on your DSO. Note - this version is not manufacturer or model dependant,
it works for all 2.06.x firmwares.

How to use :
- download all 3 files, run the exe to get the dst1kb_9.99.9_cli(111111.0).up (this is due size limitation in forum)
- copy dst1kb_9.99.9_cli(111111.0).up  to EMPTY stick
- do regular firmware update
- reboot DSO
- do "default setup"
- do "self calibration"
- send an email to Hantek or/and Tekway , the email contect could be like "wtf is long memory not working on my DSO?"
no, you don't have to, they know it already and fixed already in latest fw version which is unfortunately not
yet available public, therefore my special downgrade version.

If you have saved any REF waveforms or DSO setups with the affected firmware versions please
overwrite them after the self-calibration. This is necessary because the format of these files might be different.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vlindos on September 12, 2011, 09:17:12 pm
Hi, tinhead,
had you though about wifi usb dongle plugin in ?
I think the drivers could be uploaded through the console, we only need to know the kernel vers and architecture. I bet there would be toolchans available.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 12, 2011, 09:39:20 pm
had you though about wifi usb dongle plugin in ?
I think the drivers could be uploaded through the console, we only need to know the kernel vers and architecture. I bet there would be toolchans available.

wifi on backside will not work that easy (as you will have to translate host-client and dso specific protocol),
wireless usb from cypress could work (maybe).

wifi on front side is a different story,  some mods in usb plug script mus be done (this is however not the
biggest problem).

The kernel is 2.6.13, toolchains for QQ2440 will be good (arm-linux-gcc-2.95.3) - however this is exactly the biggest
problem - most wifi adapter have drivers working with 2.6.2x  and later kernel.

As i remember RT2870 was a good candidate for even 2.4 kernels.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vlindos on September 12, 2011, 09:50:19 pm
Drivers could be mod'ed to work with this kern.
Or kernel could be upgraded ?
Or a suitable wifi dongle could be found.

Although I wonder what could be the benefits of all that, It wouldn't make big difference to use the dongle instead of the UART port. Would Hantek ever release the dso.exe source, so we can mod it and make useful things from the network ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 12, 2011, 10:26:20 pm
Drivers could be mod'ed to work with this kern.

maybe, depends on many things


Or kernel could be upgraded ?

not a good idea at all


Or a suitable wifi dongle could be found.

this could be easier as the two above. I do have RT2870 stick here, but since i developed LAN addon card for my
hw0 DSO there was no reason to play anymore with WiFi.

However, the current hw revision have different connector, so i will have to re-develop LAN addon board (on my to-do list)
Not that i have issues with WiFi, but cable is always better in lab than a another one "signal source".

Although I wonder what could be the benefits of all that, It wouldn't make big difference to use the dongle instead of the UART port.

you can in principle use whatever technology to made connection between UART and PC, this can be everything
starting from a simple cable and ending with Satellite transmitter and receiver.
Whatever you decide to use ensure that the piece between is not sending anything to DSO while
DSO is booting - this can stop the DSO at bootloader (delayed power supply or just more intelligent things not sending anything
unless activated).

Probably even this crap will work -> ebay 160550090425 (Wireless Bluetooth Transceiver Module RS232)


Would Hantek ever release the dso.exe source, so we can mod it and make useful things from the network ?

no idea how it will cost to buy Hantek, but this will be probably the only way to get sources of dso.exe
It will be probably (haha) cheaper to buy IDA/X-rays ARM decompiler and spend some weeks to decompile
back to C.

Easiest way (to have nework connectivity implemented into firmware) is to wait a bit - currently Hantek/Tekway are
focused on their new Handheld DSO products (look for DSO1000B on their websites).
These handheld DSOs are 100% based (so far i can see from device drivers, PC software, functionality, user manual)
on Hantek DSO5xxxB/Tekway DST1xxxB DSOs.

Why is this important? Well, because when you download the PC software you will already see that there is LAN
connectivity to Handheld implemented, Hantek confirmed also that they will implement similar connectivity
into DSO5000B series. As long their not ready with that there is a big chance that a firmware (actually only
part of the firmware) from Handheld will allow the bench DSOs to connect over LAN.

Sure, this is now to get full functionality over network, for basic things like pure console access
we don't need anything except whatever technology between UART and PC
or addon LAN PCB (which as i said above is already on my to-do list).

The benefit os LAN-Addon board - it will now console, FTP, etc and later to use the PC software to control/get
snapshots from/to DSO, benefit of whatever technology between UART/PC - cheap and sufficient
for shell connectivity.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vlindos on September 12, 2011, 11:07:31 pm
Lan would be awesome to be used of course for taking pictures and controlling the UI, but also it might be possible to be used for using the DSO memory for signal patterns checking software.
Lets see what capabilities would have the handheld scopes that would come and we will think for reverse engineering.

'Bout the dso.exe source I think companies that make brave steps are doing big progress, and open sourcing the platform would make even the DYI scope wave bigger than now.
DSO5x02 is awesome ground for learning and hacking. I bet that lots of the buyers are doing the hack after this thread. Extending the software would make this toy even nicer.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on September 13, 2011, 05:19:55 pm
Tinhead wrote:
For those of you who bought Tekway or Hantek in last days and have followed firmware version loaded:

2.06.3 - 110728
2.06.3 - 110801
2.06.3 - 110806
2.06.3 - 110808

All these versions have a ugly bug (in my opinion), the long memory is not available when you
select 8ns/div, 4ns/div and 2ns/div timebase.
Well I tried 3 x DSO5102B and 1 x DSO5062B, all with 2.06.3 - 110808.0 from Hantek this morning, and they all work without this bug ! ;)
In principle such capability it could be removed for reason
by both manufacturers, but since the zoom is not working then (select 1M, 20ns/div, do stop and zoom to 8ns
- and waveform disapears) i think this is a bug and not a feature.
The same as above, none of my DSO show a lack of waveform, all is correct.... So, perhaps they changed something and updated the fw with the same fw number? :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 13, 2011, 05:22:05 pm
heh, once again perfect timing, i posted 110531.1 downgrade firmware and
today Hantek released new public fw version 2.06.3 110909

http://www.hantek.com/download/DSO5000B%20Firmware(2.06.3).rar (http://www.hantek.com/download/DSO5000B%20Firmware(2.06.3).rar)

(don't get confused, update file say 110909 but after update you will see 110908)
fixing all these issues in firmwares between 110531.1 and 110901.0


Bugfixes in this firmware:
- long memory bug fixed (known from 110728.0 to 110808.0)
- XY bug fixed (known from 110531.1)
- fine timebase bug fixed (on hw0 only, known from 110728 and 110801.0, sometimes on 110806/8)
- contrast settings bug fixed (don't remember when this bug was observer first, i believe after 110531.1?)
- double window zoom scala bug fixed (known from 110728 and 110801)

New features in this firmware:
- timebase allow fine and coarse settings
- FFT improved, is now much more accurate  (actually constant 100-120 wfrm/s instead of up to 360 wfrm/s as before)
- tracking cursor  implemented
- sysrunparam button  available (utility, page 2, F5) -> you can see all settings at once, also the sampling rate in
  current timebase/memory depth setiing.

Known bugs in this firmware:
-- tracking cursor in FFT mode is not catching signal peak nor manually selectable as marker
-> workaround: just ignore tracking cursor in FFT, use as before the two other cursors

-- the sampling rate of FFT displaying 100MS/s instead of real sampling rate when you enable and then disable dual window (F7)
--> workaround: just turn timebase one position up or down and back. No idea where this crap is coming from, probably
just a default value. It seems to be only bug in 800ns/div to 2ns/div, lower timebase ranges are not affected. It is also visible
when you already in dual window mode with FFT enabled and switch euq. sampling and back to real time sampling.


Known bugs from earlier fw versions:
-- sometimes, when you powered off DSO when it was in Display->Cursor setting position, when you power up
and push immediately after DSO booted up (the first wave screen just showed up and the text "Use V0 to ...")
the firmware will freeze  
-> workaround:
do once default setup, change all settings to your pref. setup and save it once. This is mostly error coming from
setups saved with different firmware version, or just stop pushing every button right after DSO
booted up  (this bug has been found by marmad, he seems to be very detailed doing reviews)


-- Display Type Dots/Vectors Icon on top left side of screen not changing when switching between modes
-> workaround: none yet, sometimes it works when you enable dots, equ. sampling and back real time sampling,
but atucally this is only cosmetic thing of bug.


-- chinenglich menus, all languages, except chinese are not perfectly translated, even english is not what
you would expect on a DSO
-> workaround: i will post today later english menu fix compatible with this firmware version, when you like it tell this
Hantek/Tekway, when not use the original firmware to update again over my version. Not that this is really important to
have, but i just don't like words like "Unlitmited" instead of Unlimited or just limit off, or "Close" instead of "Off" :)


-- FFT span higher than sampling rate divided by 2 in 800ns/DIV to 2ns/DIV. When you enable full screen FFT
in affected timebase settings the 8 grid divider is already sample rate/2 (for example in 400ns/DIV the
sample rate is 400MS/s, the FFT center 125MHz, 8 divider on grid 200MHz and full span 250MHz).
This means everything above 8 grid is showed with wrong amplitude because of not suffient high enough
sampling rate/ span ratio. Sure, you could say now "who cares, the FFT abouve 200MHz is not impoerant",
well that's partially truth - when you ahve harmonics on let say 220MHz, they will produce unnecessary
alias signals below 200MHz only because FFT is nto sampling fast enough.
-> workaround : i will post today later an update to this firmware version correcting this issue.
Basically what this update is doing is to setup the sampling frequency higher in affected timebases.
How this work in deatil - later.


-- default setting button resetting color settings, sure default might be everything set to defualt, but on the other
side why? Color setting is not something DSO-setup related.
-> workaround: none yet


-- no warning to user when zoom limit reached in single window mode  . Description here
https://www.eevblog.com/forum/index.php?topic=1571.msg63195#msg63195 (https://www.eevblog.com/forum/index.php?topic=1571.msg63195#msg63195)
https://www.eevblog.com/forum/index.php?topic=1571.msg63223#msg63223 (https://www.eevblog.com/forum/index.php?topic=1571.msg63223#msg63223)
-> workaround: when you zoom, remember the max values x1000 in dual window, x10000 in single window with dots display,
x20000 in single window with verctor display.


-- Scrolling 1M and 512k sampled signal at 4ns and 2ns timebase doesn't work. The signal disappears and the time scale is "jumping".
-> wirkaround: none yet. This was working fine in 2.03.x firmwares and of the the 2.05 or 2.06, but it does not work anymore again.


-- Digital Filters not working  - the implementation of digital filters is horrible, they doing everythign but not what they should do.
-> workaround: none yet. My proposal - make dotation!!! I will then buy Hantek and fire these engineers!!


Final note:

when you have Tekway please ask Tekway or your fav. dealer to send you latest firmware version.
When you don't wan't to wait, you can still unpack the Hantek firmware and update manually over UART
or use the Hantek firmware directly - note this will replace Tekway logos with Hantek and rename
the DSO to Hantek naming, but it will not break anything
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 13, 2011, 05:25:47 pm
Well I tried 3 x DSO5102B and 1 x DSO5062B, all with 2.06.3 - 110808.0 from Hantek this morning, and they all work without this bug ! ;)

i had here 8 DSOs from Hantek, two other dealers i know (Hantek and Tekway) had at same time also
some new DSOs - all affected by this error.
Hantek got also bug reports and confirmed it to me as a bug. Actually it has been fixed, see above.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on September 13, 2011, 05:28:59 pm
yes, maybe, mine are new from yesterday  :P
Whatever, updating with last version cannot be wrong... 8)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 13, 2011, 06:02:20 pm
yes, maybe, mine are new from yesterday  :P
yeah, perfectly possible, there wa a lot of beta versions in between, at some time
Jonas got pissed off and stopped to answer my mails and i stopped to bother him
to cool down the situation a bit :P You know how "nice" i can be sometimes to other people.

Whatever, updating with last version cannot be wrong... 8)

yeah, it is worth to update. The 110909 (or 110908) is a good firmware, and
for those who don't like it we have a downgrade firmware too, so not a big deal at all.

Pascal, as you there, did you plan to order some of these DSO1000B/S handhelds?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on September 13, 2011, 07:28:30 pm
Known bugs in this firmware:

Hi, tinhead !
Please, tell Hantek don't reset color of screen, when pressed "default configuration button".
It is no sense! 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 13, 2011, 07:31:00 pm
and here as mentioned above my version of the 2.06.3 110909 (110908) firmware

what better :

- chinenglish menu is now english (more or less, any comments?)

- FFT span bug fixed. Now you have in short memory following sample rates,

in single channel:

800ns/DIV - 250MS/s instead of 200MS/s
400ns/DIV - 500MS/s instead of 400MS/s
200ns/DIV - 1GS/s instead of 800MS/s
80ns/DIV - 1GS/s instead of 800MS/s
40ns/DIV - 1GS/s instead of 800MS/s
20ns/DIV - 1GS/s instead of 800MS/s

8ns/DIV, 4ns/DIV, 2ns/DIV - unchanged, 1GSs
40s/DIV to 2us/div - unchanged as they are not bugy.

in dual channel:

800ns/DIV - 2 x 250MS/s instead of 2 x 200MS/s
400ns/DIV - 2 x 500MS/s instead of 2 x 400MS/s
200ns/DIV - 2 x 500MS/s instead of 2 x 400MS/s
80ns/DIV - 2 x 500MS/s instead of 2 x 400MS/s
40ns/DIV - 2 x 500MS/s instead of 2 x 400MS/s
20ns/DIV - 2 x 500MS/s instead of 2 x 400MS/s

8ns/DIV, 4ns/DIV, 2ns/DIV - unchanged, 2 x 500MS/s
40s/DIV to 2us/div - unchanged as they are not bugy.

Long memory mode is unchanged as it can't be used with FFT together. I know i could speed up it to
500MSs instead of 400MSs, but for now i will not do it.

Feedback is of course welcome, post it here, this is inoficiall firmware. Hantek/Tekway has been informed
about this FFT-fullspan bug and asked to fix english menu, so let's hope one of the future fw versions
will have it implemented (well if not i will patch again).

###################################################################

If you wish to know what has been changed, here more deep informations:

The sampling rate will be changed based on timebase id, so when you on 2ns/div the ID is = 0
When you look on that code

FpgaSel800M1G      
      MOV   R12, SP
      STMFD   SP!, {R11,R12,LR,PC}
      SUB   R11, R12, #4
      BL   Fpga_CheckIsShortStore
      CMP   R0, #0
      BEQ   loc_4DAD8
      BL   Dso_GetWindowTBID
      CMP   R0, #2
      BGT   loc_4DAD8
      BL   Fpga_SetOneChipSpsEQ125M
      LDMDB   R11, {R11,SP,PC}
loc_4DAD8         
      BL   Fpga_SetOneChipSpsLE100M
      LDMDB   R11, {R11,SP,PC}
; End of function FpgaSel800M1G

the cmp r0, #2 is checking if the timebase ID is higher or not as 3 (0_1_2 , so 2ns/div, 4ns/div and 8ns/div)
The hack is in principle a simple cmp R0, #8 to allow in the highest 9 timebases to sample with 125MHz (x amount of ADCs).
So as you can see nothing wild, in principle just an extended capability.

###################################################################

How to use:

- warm-up DSO
- download the original Hantek or Tekway 2.06.3 110909 firmware for your model, run an update
- after reboot check if everything ok, if so copy attached update file to empty stick and update the firmware again
- do "default setup"
- run self-calibration
- setup you DSO to you pref. values and save (overwrite) any previous setups.

After reboot you will see the changed menu (only english changed) and the new sample rates in affected timebase modes.

Attached file is splitted due forum restrictions, run the executable to get the dst1kb_9.99.9_cli(111111.0).up file.

For Tekway users - when you don't have the org. firmware from Tekway or your dealer and you don't want to
rebrand your device as mentioned 5 postings above you can still use my custom firmware to enjoy the
updated sample rate and english menus - the org. Tekway (well or Hantek) firmware is only necessary when you
own DSO with firmware version between 110728 and 110808 as it will fix the contrast bug (these versions have bad device driver).
This means when you have 110531.1 on your Tekway you can use my firmware directly.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 13, 2011, 08:41:40 pm
Please, tell Hantek don't reset color of screen, when pressed "default configuration button".
It is no sense!

Hi walt,

indeed, this didn't really make sense - except it does ? I will try to get that fixed (means will ask them).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on September 14, 2011, 06:44:08 am
Quote
Pascal, as you there, did you plan to order some of these DSO1000B/S handhelds?

Yes, of course, Elec3i will do, We can report some investigations about them if Hantek allow us. Hand-held DSO is a good market target and we will continue to promote them. 8)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on September 14, 2011, 08:55:57 am
Downloaded from Hantek side FW 110909.0

Buuh..

Again, the sampling speed and memory as well as scaling the screen messed up.

How hell they do this... maybe they think that not even c tests need make in lab. Customers do first c tests, then b tests... never.

I hope they do not implement now ANY new feature before they repair this buggy softwarespaghetti.

Before they publice new FW they need take paper, pen and start in good order search and check... they need one boss who watch every bit what they do and keep they in good order.
I'm not c tester so I do not report any problem to Hantek becouse they are totally lazy small boys wha do work just as spaghetti programmers do without order, without good documentation.

This is only one and small example:
Set display dots
400us/div
1M memory
capture.
push Utility
look SysRunParam  it show 100MS/s, 800000 sample dots, 800000display dots
Stop
Cursors
Turn sec/div 20ns/div  ok you see dots but not 10ns distance, they are 8ns,
ok turn 8ns/div  oh well now dots are 6.4ns and only left half of screen
try horizontal position: can not move
turn 4ns/div all disappears

Ok same agen but 200us/div
oh, can not select 1M, only 512k
push Utility
look SysRunParam  it show 100MS/s, 400000 sample dots, 400000display dots
cursors
Stop
Sec/div to 20ns
measure 10 dot interval  = 107ns
turn 8ns/div measure dot interval 12.8ns
turn 4ns/div now dots only left half of display
measure dits interval = 6.4ns

and lot of more.

Oscilloscope is not for only show nice pictures... it is measuring tool and specially oriented for time domain measurements.
But what can measure if can not trust what scope show. maybe risetime and all measurements are just this sime bullshit?
Who knows. First is that you need trust your test eguipment. How I can trust this before I check all individual settings and do full measurements and then I can know what this oscilloscope show.

What if I have not any other oscilloscope or test gears..  Then I do measurements and go some place and seriously tell that I have measured this and this... here is numbers - test dta. If I tell that test data is coming from Hantek oscilloscope. Do they cry or laygh. So, for hobby playing with "nice ebents on the screen" it is ok but not any kind of serious work where need get trusted data what accuracy is inside published specifications. These kind of serious work nee Agiloent, Tektronix, R&S... ??

I can not accept this kind of careless loosy paygame working. maybe they play more mahjong than check and test what they have done. Maybe it is not important. But trusted name they do not get never with this kind of game.

Maybe we need one  new study book. "Hantek mathematic fundamentals" so we can ma make corrected calculations betwen truth and scope.
Mode dots, 200us/div 1Mpoints,  10MHz signal from Rubidium standard to scope. Capture.. Stop, change to 8ns/div
measure freq on the screen. 11.7MHz so use 0.855 but specs do not tell that need use this constant for multiply.
Of course then I do other measurements and can find that other way give different. IF I do not know anything about my signal and I need only trust my scope. Which one I know is right... 10M or 11.7MHz. Is it really right to guess that becouse Freq counter give 10MHz do not believe captured data or do not believe 11.7 becouse other kind captured waveform with same scope show different. Oh boys where we are? We nee d first know our signal and then look it with scope.. well. Why need then scope if I know my signal. I have several tons of equipments I can check but why I need then Hantek if I need always check with other machines. First thing what need be over tond of features. Scope signal guality and capturing accuracy and data displayed need be enough accurate. This is not movie and play machine it is as called "test equipment" for making measurements... I think sometimes it is forgetted.

Btw, display vectors have not this problem. So how they make vectors if they do not use these sampled dots, or is it so that display dots are not sampled true dots at all? What is meaning if displayed dots are not sampled datapoints?
If they can scale vector display why not these dots? 

Tracking cursors, really nice thing!
Even better if it can select track t or v
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 14, 2011, 02:38:05 pm
First of all the 200us/div and 1M was not working from the beginning. Right after i recognized it on a very
first firmware i send it as bug report - i don't know when exactly but one on next firmwares was able
to enable 1M in 200us/div but zoom was not working. So i asked again and got answer
that the way how the DSO is designed they can't enable 200us/DIV and 1M - the next fw version then was
not capable again of doing 200us/div and 1M. I thought, what a bummer, but anyway,
it works below and above 200us/div, or just with 512k while in 200us/div.

Now the answer i got was send by Tekway long before they got bought, feel free to send Jonas
an email and ask him why this is like it is, maybe Hantek engineers can do more that Tekway org.
designer was capable of (i doubt that, but let's try).

This is only one and small example:
Set display dots
400us/div
1M memory
capture.
push Utility
look SysRunParam  it show 100MS/s, 800000 sample dots, 800000display dots
Stop
Cursors
Turn sec/div 20ns/div  ok you see dots but not 10ns distance, they are 8ns,
ok turn 8ns/div  oh well now dots are 6.4ns and only left half of screen
try horizontal position: can not move
turn 4ns/div all disappears

Ok same agen but 200us/div
oh, can not select 1M, only 512k
push Utility
look SysRunParam  it show 100MS/s, 400000 sample dots, 400000display dots
cursors
Stop
Sec/div to 20ns
measure 10 dot interval  = 107ns
turn 8ns/div measure dot interval 12.8ns
turn 4ns/div now dots only left half of display
measure dits interval = 6.4ns


Mode dots, 200us/div 1Mpoints,  10MHz signal from Rubidium standard to scope. Capture.. Stop, change to 8ns/div
measure freq on the screen. 11.7MHz so use 0.855 but specs do not tell that need use this constant for multiply.

all 3 examples are with zoom higher than 10 000, if you stay within x10 000 everything will be fine (for dots, vectors see below)
Out of curiosity, with which version you saw this working? Becasue none of the firmwares i have here is or was ever
capable of doing properly zoom > 10 000/20 000, not even the first pre-production firmware from Dec 2009.

Btw, display vectors have not this problem. So how they make vectors if they do not use these sampled dots, or is it so that display dots are not sampled true dots at all? What is meaning if displayed dots are not sampled datapoints?
If they can scale vector display why not these dots? 

no, vector have same problem, due the better interpolation you can use up to 20 000 zoom.

So for example 400us/div zoomed to 20ns/div (x20 000) will still work, but 200us/div zoomed to 8ns/div
not anymore. when you don' t believe (luckily there is fine timebase now, no need to patch timebase table to see it)
change the timebase to 10ns/div and you will see the sampled 10MHz signal (with 512k, 200us/div, 20000 zoom)
have length of 100ns. Now when you do the sample for dots sampled you will see 10ns/div is not working
anymore - that's because it can only 10 000 zoom.

Of course this is kind of bug, but actually hard to restrict the timebase, so this is one
of these things where the user have to think a bit about. When you select 2ns/div you
will immediatelly not wonder why you see only one or two dots or just a ine between 2 dots -
because you reached already the smpling / screen size limit.

Now in dual window mode it is easy to restrict zoom in firmware - there is 1000 max, in single
window due better resolution 10 000 for dots and 20 000 for verctors ut you have
only one timebase, so the conditioning is bit more complex (when limit zoom, how limit zoom,
why limit zoom, why just not display "warning, zoom out of accuracy").

I don't know, maybe Hantek is smart enough and can fix that, but knowing that they
never did it (and i'm sure at least the org. Tekway engineer was knowing this restriction) i doubt
they can do it. Again, make a snapshots and ask Jonas. I can work with that, restrictions
are there to be followed.


200us/div, zoom to 20ns/div, measure 10 dot interval  = 107ns

sure, you have 10 dots, sampled with some jitter, multiply by 10 the jitter and you will get something between
104ns (103.5ns) and 106.5ns (well, 107ns are next to 106.5ns). You can actually see the jitter, when you exactly measure
the time between each dot you will see sometimes the difference, sometimes positive, sometimes negative,
sometimes exact time. There is nothign wrong with that (well, maybe the 500ps trigger accuracy on
paper but 350ps to 650ps in the reality, sure avg 500ns but it should be always below 500ps to
follow western standards of datasheets).



I actually don't give a f** what ppl think about Hantek and the way how they work.

I do know Tekway was different - sure more complex to communicate, but that was typical for small company
(well, actually departement of a big company working on own costs with own company name).
But the product which i chose, bought, tested and later announced here is not bad, actually one of the
best you can get for money - the firmware is (when you forget here and there some small things)
really good one - imagine Owon with this firmare, there will be no competitor on market for
long time.

On the other side these small things in the firmware which we can't change, they could be
implemented better with no cost. Everybody would accept that there is max zoom 1000/10000/20000,
when the manufacturer will not hide this fact but clearly show to user a small warninng (nothing else,
i still wish to see more than 1000/10 000/20 000 zoom !!! even if the accuracy is gone)
- "zoom limit reached, out of accuracy", there is nothing to shame about,
1000/10 000/20 000 zoom are acceptable values.

What not acceptable that the manufacturer is not clearly talking about, this remains me on these
faked sample rate things on Rigol. Of course most chinese manufacturers hiding informations,
not only because of competitors but also because they don't know that in western countrys
a good manufacturer is telling everything about the product .... ups, actually not, actually
every manufacturer is trying to cheat a bit :)


EDIT: you know what, i add it into the bug list from page 60 even if i don't see it as a real bug,
but it should be not that complex for them to add just a small warning.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 14, 2011, 06:15:06 pm
and here as mentioned above my version of the 2.06.3 110909 (110908) firmware

wtf .. only 10 download?

Don't worry, this will not break your scope (and if, you will get new one from me), it will make it faster!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on September 14, 2011, 07:59:31 pm
wtf .. only 10 download?

I have already :)

A special thank you for the calibration method with averaging. That is really what is missing.
Now is not ideal, but not disgusting.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on September 14, 2011, 08:42:06 pm
Mode dots, 200us/div 1Mpoints,  10MHz signal from Rubidium standard to scope. Capture.. Stop, change to 8ns/div
measure freq on the screen. 11.7MHz so use 0.855 but specs do not tell that need use this constant for multiply.

This is not any kind of jitter origin. It do this exactly ald systematic all times, exactly.
There is not basic mathematics, they use some hantek mathematics for scaling. Some place have some mistake.

And this example is only one example.

Why I need play this game. I do not want. This is basic work what need do inside Hantek. What hell they do if they can not do these things how many pixel is one div etc..  I feel very stupid if I need test and measure every feature in scope. If can not zoom something without loosing math... then this posibility need close. What 20000 zooming. This data is exactly in memory, every single sample point. Only what need do is pick up them to screen so that displayed time is right enough.
10:11.7  ... this can not accept. I understand well that always can not show exactly becouse screen have only limited resolution.  It can not be very difficult higher level math if want know what is every sampled point time becouse this sampler is really simple becouse interval is fixed. If it use random sampling method with equal time mode it is littlebit more difficult but this is constant interval sampling. (yes if they use small distange calculation ands then scale it and if programmer do not care and go to error accumulate trap... wel then is just only "lack of enough experience for this work"

Also what about jitter. This need not take account. In calculus there is some sampling speed and then some time interval between samples. Multiply 2 and if you multiply it ten or ten million it is just as it is... zooming factor do not mean anything in this case. 100MS/s means 10ns sampling interval. If there is 2, 4, 8 20 or what ever time/div  just plot these pxels right place.

And this problem do not occur with connect dots mode. Zoomed or not but it keeps 10MHz as 10MHz not 11.7MHz Fun?

I do not want more accuracy than is normal for these machines. But basic fundamentals need be right.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: drieg on September 14, 2011, 09:30:16 pm
I can't but agree with rf-loop on many things. It seems to me too that they have no system of fixing bugs. I mean I'm happy too that they added tracking cursors, but there are still many bugs that should have been already fixed long time ago. Slowly I'm becoming tired reporting again and again same bugs, filming videos (because they almost always ask for it) and asking for the answers after many days of silence (now I'm talking especially about Hantek). I have no time for that and I have to agree with rf-loop again, I'm also not a tester, I'm a customer (not takling now about testing new features like tracking cursors, which I'm always happy to do).

Here are some old bugs that bother me most:

1. Filters - the implementation of digital filters is horrible, my 97 year old grandmother would do it better! The Low Pass filter does only attenuation of amplitude based on selected frequency. It doesn't filter out high frequencies as you go down with the cut-off frequency. Try 1kHz square probe compensation signal and you won't see any "corners rounding" or slowing down the rising edges (until the square looks more like a sine) as you would expect. Back to scool, Hantek engineers!  ;)
On the top of that, selecting any filter massively will slow down the  total response/performance.

Not only Low Pass, but also High Pass filter doesn't work correctly and doesn't show the cut-off freqency correctly when you change timebase settings. Try sine wave, find -3dB cut-off frequency and try to change timebase. The cut-off frequency value changes but the filter settings don't. Then try to press F4 and the value changes again. Crazy  :o

Last thing - select Low Pass and change trigger to Alternate mode. The scope freezees up.

2. Scrolling 1M and 512k sampled signal at 4ns and 2ns timebase doesn't work. The signal disappears and the time scale is "jumping".

3. Display Dots doesn't work in 2ns and 4ns timebase

...

Thanks for the FW patch, tinhead, you're an untiring fighter! :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 14, 2011, 10:18:52 pm
Mode dots, 200us/div 1Mpoints,  10MHz signal from Rubidium standard to scope. Capture.. Stop, change to 8ns/div
measure freq on the screen. 11.7MHz so use 0.855 but specs do not tell that need use this constant for multiply.

again, when you out of limit you can not measure anything  properly, stay within org. timebase/10000 when dots
or /20000 when vectors and you will measure proper values.

This data is exactly in memory, every single sample point. Only what need do is pick up them to screen so that displayed time is right enough.

didn't matter what in memory, when the zoom is only able to calculate back data from memory to display
by max. factor /20000 then it is like that. When the timebase would stop at /20000 you will even not
see any crap values, thats all about (or well, you will probably say then "why i cant zoom to 4ns/div?)

One possible solution as already is notice user about zoom limit, another possible solution is to change the
10000/20000 values by whatever max. possible.

Sure you will see then only a long line cross the screen or maybe one dots on whole screen, but this is
actually what you suppose to see by max. zoom (except the sampled dots are left/right out of screen
and the interpolation can't dispaly anything because no data, but this can be easily fixed by increasing
interpolation window size)


10:11.7  ... this can not accept. I understand well that always can not show exactly becouse screen have only limited resolution.  It can not be very difficult higher level math if want know what is every sampled point time becouse this sampler is really simple becouse interval is fixed.

and once again, when zoom out of what the zoom code allows, the data displayed on display is not anymore valid


Also what about jitter. This need not take account. In calculus there is some sampling speed and then some time interval between samples. Multiply 2 and if you multiply it ten or ten million it is just as it is... zooming factor do not mean anything in this case. 100MS/s means 10ns sampling interval. If there is 2, 4, 8 20 or what ever time/div  just plot these pxels right place.

you wrong, there is no and never 10ns sampling step. Each ADCs is having own clock, the jiter apply to
EVERY clock, so you have always differences. What EVERY interleaved DSO is doing is to align the data
during postprocessing based on calibration data. Now the calibration data is having exact the same random jitter error
so it make possible to align the ADC data to see waveform, but the jitter remains.
All these pixels are in right place (except those which has been calculated back when zoom what out of limit),
when the skew in clock created by jitter was 200ps you will see that, there io no magic math, code or engineer
who can fix that - it has been sampled 200ps later/earlier and it will displayed exact like that.
Now of course when sampling with 400MSs to long memory the effect is higher than when sampling with
1GS to 4k memory, this is not driven by sampling accuracy and time domain differences.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 14, 2011, 10:57:16 pm
I can't but agree with rf-loop on many things. It seems to me too that they have no system of fixing bugs. I mean I'm happy too that they added tracking cursors, but there are still many bugs that should have been already fixed long time ago. Slowly I'm becoming tired reporting again and again same bugs, filming videos (because they almost always ask for it) and asking for the answers after many days of silence (now I'm talking especially about Hantek). I have no time for that and I have to agree with rf-loop again, I'm also not a tester, I'm a customer (not takling now about testing new features like tracking cursors, which I'm always happy to do).

full ack, i love to test something when asked for, but i hate to test everythign and ask myself "is Hantek not having
enough money to give one porduction unit to the engineer?"


1. Filters - the implementation of digital filters is horrible

what filters ? i don't see any filter in the firmware :P
But honetsly, the FIR blackman filter implementation can not be really
shown as filter. Right after they implemented it i said to my customers "it works",
well it was working somehow, but not really exact as it should (slower than today, not really exact)

Now months after these filters has been implemented it is getting worse from one fw revision to another
(rf-loop would say try and error).

I do accept that they slow working (filters, not Hantek), but i can't accept the implementation.
I have not mentioned this as bug, because bug is part of soemthing what implemented, these
filters are not there in my opinion (just play with band pass or stop, what's that?)

2. Scrolling 1M and 512k sampled signal at 4ns and 2ns timebase doesn't work. The signal disappears and the time scale is "jumping".

bingo, i saw this working in one of the 2.05 or 2.06 firmwares, no time to check all of them
but it works perfectly in 2.03.x (yes, 2.03.x). What a crap, they fixed it already (i remember i posted this as bug
and deleted from my list as fixed) and again same bullshit.

3. Display Dots doesn't work in 2ns and 4ns timebase
hmm, you mean when you enable dots, go to 4ns/div and stop you can't see any dots when
you go to 2ns/div ? Well, they are there, believe me. Even in 2ns/div when you stop they are there,
the point is, you always see interpolated dots between, when you would be able to zoom more
(like now from 200us/div to 20ns/div) you wil see them, but let me show you that on attached picture .

What on the picture is firmware with 200ps/div timebase, i did stopped acq. while in 4ns/div
and switched over to 200ps - and bingo, you can see all these points there.

When the interpolation would be really swichable on/off you would see only the real sampled dots
and not the interpolated between, but it is always on. How this looks like ?
Well, check another one picture, this is fw with interpolation off (2ns/div and stopped acq.)


Thanks for the FW patch, tinhead, you're an untiring fighter! :)

... and Hantek is not responding to my emails anymore. Sure i'm sometimes a big asshole
and talking clear words, they should really pay me for support and fight with all of you :)

Anyway, i will once again send them the list of bugs, the last time ? Who knows, maybe
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on September 15, 2011, 05:50:52 am
tinhead , in new firmware, and/or you patched save to usb flash work properly?

I am not sure, may by my flash drive is not good (apacer ah323), but update firmware was from it.
Save picture- not work, oscilloscope report "save complite", but usb drive is empty.  :(

offtop
Gays, with you, i learn English  :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: drieg on September 15, 2011, 06:37:25 am
offtop
Gays, with you, i learn English  :)
..and in the next lesson we'll learn the difference between "gay" and "guy"  ;D
Or did I miss something? Tinhead, you?  :-*
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 15, 2011, 07:43:15 am
tinhead , in new firmware, and/or you patched save to usb flash work properly?

I am not sure, may by my flash drive is not good (apacer ah323), but update firmware was from it.
Save picture- not work, oscilloscope report "save complite", but usb drive is empty.  :(

it is your flash drive.

The firmware work perfectly here to save screenshots, setups and csv export/import changed/unchanged
sampling rates and memory depths.

 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 15, 2011, 07:45:11 am
offtop
Gays, with you, i learn English  :)
..and in the next lesson we'll learn the difference between "gay" and "guy"  ;D
Or did I miss something? Tinhead, you?  :-*

hihi, depends ... now i'm a bit to old for experiments, but years ago it was a good
game to play gay to get a "chick"
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on September 15, 2011, 10:21:22 am
..and in the next lesson we'll learn the difference between "gay" and "guy"  ;D

Sh...t, its to difficult for beginner.   :-[
Next time, I will only use Google-translator
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Crenwick on September 15, 2011, 01:46:07 pm
and here as mentioned above my version of the 2.06.3 110909 (110908) firmware

wtf .. only 10 download?

Don't worry, this will not break your scope (and if, you will get new one from me), it will make it faster!

Hi all !

It's my first post here and it's to say THANKS to Tinhead for the patch. It's installed above last update and works like a charm  ;)

Bernard
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on September 15, 2011, 03:50:56 pm
Hi, all.
I hope here I'm not mistaken.  8)
A couple of screen-shots.
Self-calibration. Simple and by tinhead method.


Noise before- 4 pixels.
Noise after - 3. Trifle, but nice.


probe is very temperature-sensitive, tired every time they set up.
Therefore, the signal at the second screenshot is not perfect.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: drieg on September 15, 2011, 04:15:29 pm
3. Display Dots doesn't work in 2ns and 4ns timebase
hmm, you mean when you enable dots, go to 4ns/div and stop you can't see any dots when
you go to 2ns/div ? Well, they are there, believe me. Even in 2ns/div when you stop they are there,
the point is, you always see interpolated dots between, when you would be able to zoom more
(like now from 200us/div to 20ns/div) you wil see them, but let me show you that on attached picture .

What on the picture is firmware with 200ps/div timebase, i did stopped acq. while in 4ns/div
and switched over to 200ps - and bingo, you can see all these points there.

When the interpolation would be really swichable on/off you would see only the real sampled dots
and not the interpolated between, but it is always on. How this looks like ?
Well, check another one picture, this is fw with interpolation off (2ns/div and stopped acq.)
Yes, that's is. Maybe I don't get the point of diplay Dots feature in Hantek/Tekway, but when I select Dots, I want to see real samples, not the "dotted line". So this doesn't work. If I sample at 20ns timebase (it says 800MSa/s), stop the acquisition and "zoom" timebase to 2ns, I see interval between points of 500ps which would corespond to 2GSa/s of sampling rate ;) If initial timebase is 8, 4, or 2ns, interval is even smaller. So if the display Dots doesn't mean it will show you real samples, what is it good for?

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 15, 2011, 06:04:58 pm
So if the display Dots doesn't mean it will show you real samples, what is it good for?

video, modulations, noise , FFT, etc - signals where the full spectrum can not be shown
with 8/9bit resolution or with vectors.

Interpolation on/off is what i added as minor bug to the fix-now list.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on September 15, 2011, 07:03:21 pm
In one Tektronix (old) digiscope have very nice feature.
If use Sin(x)/x then can select "highlighted" real sample dots.

(of course always can select display dots. In this mode it do not make any calculated "joke" dots. In this mode every displayed dot is just real sampled dots as is. .... Yes I know.. it have been expensive scope. So I do not compare but today these kind of things maybe more easy to implement.

---------------


Just nearly off topic lunch talk...:

In curiosity, this 2440 Tek use CCD for make it fast (not really fast). These old times ADC's was not so fast. So signal was captured to "analog memory" and they use CCD (without light of course). ADC work its own timetable reading CCD cells voltage. How they do "real" Sin(x)/x I do not know. But always line go exactly so that trace go exactly trough sampled real points what also can highlight. Why it is so difficult today?  All processors and other things as FBGA's etc... and they are really fast if compare to this old Tektronix logick and processors. (of course all proramd have carefully done with well optimized assembly) But it is sometimes amazing look how they do things in old times..  we can think that of course becouse equipment price ie ten times or more than these low-end scopes but there need also remember that if they did 100 scopes today some make 1000 or lot of  more. So why they (these chinese manufacturers) do not have money to do development and good FW's?  Maybe it is not money question at all? All they want only be as grey cheap mass. No one want really be high brand name and leader. What we have loose these years?

Oh, and if go more old. I have look old 7000 series analog where is digitizer and so amazing math and analyze functions with separate special keyboard.  Today it is extremely easy implement these to scopes. But when Tek do it... they test all math and things really carefully before start selling. (yes it was lab Rolls-Royce but...)

What are these FW programmers today? Customers need repair they loosy work, just as example tinhead.

I have not find any single bug from these Tektronix. All measurements, display scaling, cursors, voltages... all just perfect. And peoples in many professional labs can trust these (old times).  Peoples in labs around world use these and  trust numbers what equipment give  and all trust  these numbers. No need test if can believe or not - Tek have test that they do just right enough and all was documented. (of course it need that sertified calibration is valid and user have enough experience to do his works. If do this kind of serious work with some cheap buggy scopes it may be just as nightmare.)

What I want Hnatek take bug list. Three GOOD programmers and specialist for electronics... then design and test if buglist is ok. Collect all together. make deadline. Then these peoples go to isolated room. They stay there as long as all problems are solved and fully tested.  They must not listen anybody after deadline. Do they work fully ready and publice new FW. Mature FW.  After this process it is as it is. ready product. With its features, goods and bads. This is product... you look it... it is as it is. You buy... or you do not buy.

Also one note. Old times these leaders did not afraid publice full documents. Schematics, all details with thousend of sides expalanations in theory and practice. All test and calibration details... everything. They did not afraid as chinese or japanese.Everyone can copy...yes. Is it problem. NO. Becouse one secret thing. Quality is difficult to copy! This is key point!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vlindos on September 15, 2011, 08:04:36 pm
Hi there,
I have to post some bad news here. After the change of the L7812 voltage regulator to L7805 and the hack from the DSO5102M to DSO5202M I found out that scope is very noisy on one of its channels. See in the pictures.
I hope the hardware calibration will fix this but it is weirdo that one of the inputs is noise only. Can't wait the Hantek DDS 3X25 to arrive for the hw calibration. Btw I did the soft calibration after heat up I didn't made any difference.

Also after the recent fw upgrade - the official Hantek + tinhead's one I noticed that the update speed drops significantly when tune the scope to ranged > 20 milisecs. Any idea?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 15, 2011, 08:25:49 pm
In one Tektronix (old) digiscope have very nice feature.
If use Sin(x)/x then can select "highlighted" real sample dots.

(of course always can select display dots. In this mode it do not make any calculated "joke" dots. In this mode every displayed dot is just real sampled dots as is. .... Yes I know.. it have been expensive scope. So I do not compare but today these kind of things maybe more easy to implement.

These "joke" dots are not what something chinese developers designed, this is actualy what known manufacturers are doing too.
The only difference is, that you can (well, on some models not) switch interpolation on/off where on HanTekway is always on
and only the way how the interpolation result will be displayed can be changed.

But as you saw i was able to find the right place in firmware and disable interpolation, so there should be no
issue for HanTekway engineers (when they can read and have DSO to test, haha) to implement it too.

I also asked for some other things which might be usefull, like avg. mode for 40k, from a hardware point of view
the can implement 4,8 and 16 avg. when in 40k.

And also some other features which can be easily implemented, like 20k memory depth mode - it is there
but disabled on 1GSs model, for what ? They can re-enable it, this will then work easily with 500MSs, from
my calculations even 1GSs should work.

What else, yeah, equ. sampling is crapy implemented. It works, yes, but they did it in wrong way (they using all ADCs).
It is enough to use 2 ADCs per channel (so sample with 200MSs) when in equ. mode - and collect samples over longer time.
This will reduce dramaticaly the distortion created by the jitter - whn i do it by disabling ADCs and patching firmware
to collect more, the waveform looks really nice (again, when i can patch something they should be able to implement
it into source).

I even proposed them my help in case their engineers don't know what i changed to get good result, of course for free.

Also one note. Old times these leaders did not afraid publice full documents. Schematics, all details with thousend of sides expalanations in theory and practice. All test and calibration details... everything. They did not afraid as chinese or japanese.Everyone can copy...yes. Is it problem. NO. Becouse one secret thing. Quality is difficult to copy! This is key point!

yeah, they afraid about everything. However japanese manufacturers are not that bad, i got service manuals
from Yokogawa after i asked with some help over my japanese customer email account - in EMEA/NA you
can only dream about it to get them.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 15, 2011, 11:00:52 pm
Also after the recent fw upgrade - the official Hantek + tinhead's one I noticed that the update speed drops significantly when tune the scope to ranged > 20 milisecs. Any idea?

ehm, 40ms is already updatting screen twice per second, from 80ms/div the screen scrolls - this is normal behaviour,
i don't see any difference btween my, org. or older versions.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vlindos on September 17, 2011, 09:49:59 pm
Damn you are right. It is logical with lower frequencies on that big display with lots of divs to get lesser updates.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Kampfwurst on September 21, 2011, 08:31:47 pm
Hello

Today i got my Hantek DSO5102B  ;D
Is the Hack to update to 200Mhz still working?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 21, 2011, 08:41:31 pm
Hello

Today i got my Hantek DSO5102B  ;D
Is the Hack to update to 200Mhz still working?

yes it is
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Crenwick on September 22, 2011, 01:50:48 pm
Hello

Today i got my Hantek DSO5102B  ;D
Is the Hack to update to 200Mhz still working?

I did it two weeks ago and it was very easy, only problem was that the USART connector is no more a 0.1" pitch but smaller (not so easy to find or solder...)
 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-freak on September 22, 2011, 11:00:55 pm
The UART connector is a 2mm spaced one.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ZeroKool on October 02, 2011, 10:18:22 pm
Hi Tinman,
Can the Tekway DST1062B (Hantek DSO5062B) be hack to become Tekway DST1202B (Hantek DSO5202B) from  60MHz to 180MHz (200MHZ)? I would like to order this model if it is hackable.

I was about to order the Rigol DS1052E to do the hack until I bump onto this threat, this has been a very facinating thread for me. Even though the Rigol DS1052E seem to be much easier  to hack then the Tekway, however the Tekway (Hantek) with their bigger screen, higher screen resolution and better UI design impress me more. I plan to go ahead and order the Tekway DST1062B (Hantek DSO5062B) and hack it to the 200MHz model once the warranty expire. Reading through the thread in here, there are many hack revision updates since it was originally conceived which got me a little confused as to whether it will still work for the lastest hardware/firmware and what is the latest working hacking tool version to use. I just want to ask some questions to make sure I won't damage or brick my scope when I am ready to perform the hack. Today is 10/02/2011, so any Tekway (Hantek) scope ordered will hopefully come with the latest hardware and firmware version.

-Which Operating System to use (prefer to work with Windows, not familiar with Linux)?: Windows or Linux

-Do I have to modify any hardware?

-Do I have to roll-back the firmware to peform the hack? if so, which firmware version?

-Which utility softwares are used to dump/update the firmware? What is the latest working hacking tool version to use? What is the best hacking method to use for the Tekway DST1062B (Hantek DSO5062B)?

-Which I/O output (Jtag, USB, UART) is recommended for dump/update/backup the firmware? I can solder the missing I/O connector if needed, so long as it make the hacking process easy.

-Do I also need other special equipment/cable to do the hack?

Thanks,
ZeroKool
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: aard3 on October 04, 2011, 05:51:07 am
I'm in the same boat as zerokool... I read through most of the thread, but there are so many posts, I'm wondering what the status of this is also...

I'm pretty sure you need a serial to USB board that you can get off ebay (5v serial, not rs232 levels), and you do the hack over that.

I'm more wondering about if you can hack a 60mhz version to 200mhz, and the quality of the hantek's firmware. It seems like tinman has released his own firmware to fix a couple things... but I'm not sure exactly. I'm a little nervous about some of the reviews (marmad's) talking about it crashing alot  :-\

Anymore info would be greatly appreciated.

Thanks

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on October 04, 2011, 07:15:43 am
It is  3.3V level - not 5V!

(And you connect only TxD, RxD, GND.)

example this (I have buy this and this time seller send it fast but HK potst is going more and more slow... becouse trafic is over capacity):
http://www.ebay.com/itm/USB-2-0-UART-TTL-Serial-Converter-w-Terminal-Strip-/170504226300?pt=LH_DefaultDomain_2&hash=item27b2d805fc (http://www.ebay.com/itm/USB-2-0-UART-TTL-Serial-Converter-w-Terminal-Strip-/170504226300?pt=LH_DefaultDomain_2&hash=item27b2d805fc)

( ebay Item number: 170504226300 )

Then you need 2mm pitch connector! (simple adapter you can do)

Then you need terminal emulator for your PC. For commanding scope via UART.
Yes you can use windows hyperterm but but but... 
Example CryptoTerm 1.5 is good, free and well made. Install only terminal, no need FTP etc things..
It works well with default settings... only need set connection... Com port number and speed etc.

Then you need do some simply things.

Read agen tinhead first in this thread
(there are list of all files what you need handle and it is more simple as you may think)

It is extremely simple but need do exactly and careful.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 04, 2011, 02:31:22 pm
Can the Tekway DST1062B (Hantek DSO5062B) be hack to become Tekway DST1202B (Hantek DSO5202B) from  60MHz to 180MHz (200MHZ)? I would like to order this model if it is hackable.

yes it can

-Which Operating System to use (prefer to work with Windows, not familiar with Linux)?: Windows or Linux

no matter, all you need is Terminal application

-Do I have to modify any hardware?

to get real 200MHz bandwidth (227 exactly) you have to modify hardware, to get ~180-185MHz you don't
have to modify it.

-Do I have to roll-back the firmware to peform the hack? if so, which firmware version?

currently all versions are hackable, no need to rollback anything

-Which utility softwares are used to dump/update the firmware? What is the latest working hacking tool version to use? What is the best hacking method to use for the Tekway DST1062B (Hantek DSO5062B)?

see my first post in this thread

-Which I/O output (Jtag, USB, UART) is recommended for dump/update/backup the firmware? I can solder the missing I/O
connector if needed, so long as it make the hacking process easy.

USB, it is the easiest way (and cheapest), the backup tool (see first post in this thread) is still working

-Do I also need other special equipment/cable to do the hack?

as rf-loop said, 2mm connector and UART<-> USB converter

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: clonecrp on October 06, 2011, 12:44:57 am
An old DVD/CDROM sound cable to PCB (has right connectors on ends .. need wires moved around) worked here for terminal cable @ zero USD. If you are in US or CAnada, Hantek supplier in Toronto is reasonable..
Douglas

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on October 12, 2011, 02:14:44 am
How could I get that nice Mesurement bar instead of the standard one?
I'm using latest tinhead's 110909 firmware
Thanks !

(https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=13478)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on October 12, 2011, 05:04:52 am
It appears after autosetup. It is standard feature.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on October 12, 2011, 09:26:00 am
you mean probe check? I cant find it ! What buttons do I need to push to view this bar?
Im also having a LCD contrast problem I didnt had with 110531.1, contrast resets to minimum on every power-up, is there any workaround? (I have original HW 0x555583e8)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 12, 2011, 10:55:29 am
you mean probe check? I cant find it ! What buttons do I need to push to view this bar?
Im also having a LCD contrast problem I didnt had with 110531.1, contrast resets to minimum on every power-up, is there any workaround? (I have original HW 0x555583e8)

the yellow bar ist standard in the firmware, it pops-up when you push AutoSet button AND when the signal has been identified as square/sinus.

Probe check is another button, after nearly 2yrs i still don't know what the real purpose of that button :)

The contrast is a bug, 110909 firmware is fixing it (partialy, because you have to set value <>8 to get saved),
the actual firmware 110923.1 is fixing it complettly.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Crenwick on October 12, 2011, 11:38:36 am
The contrast is a bug, 110909 firmware is fixing it (partialy, because you have to set value <>8 to get saved),
the actual firmware 110923.1 is fixing it complettly.

Hi,

Where is firmware 110923.1 available ?   ;)

Bernard
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on October 12, 2011, 08:40:26 pm
Thanks tinhead! I also would like to try 110923.1 !!

Probe check is another button, after nearly 2yrs i still don't know what the real purpose of that button :)

The button that I can't find use for is "Force Trigger" Maybe my unit is defective but everytime I press it nothing happens, what is it for?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: alm on October 12, 2011, 08:55:38 pm
Force trigger is useful when you've set the triggering to normal, which makes the scope wait for a trigger before acquiring the signal. By pressing force trigger, you can see the signal (eg. why is it not triggering) without changing triggering settings.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on October 12, 2011, 10:13:32 pm
Force trigger is useful when you've set the triggering to normal, which makes the scope wait for a trigger before acquiring the signal. By pressing force trigger, you can see the signal (eg. why is it not triggering) without changing triggering settings.

Oh nice ! Thanks ! I've tested it and you're right.


the yellow bar ist standard in the firmware, it pops-up when you push AutoSet button AND when the signal has been identified as square/sinus.

I've never used autoset :P in fact I do not like it very much because the wearing out of the relays, it would be very very nice to pop-up this nice yellow bar anytime, and better to choose what measurements to display ! hehe utopic dreams huh?
Title: Re: Another one china DSO hack - 200MHz
Post by: wjb444 on October 14, 2011, 02:53:58 pm
DST1062B Symptom and Analysis

One day suddenly found that the oscilloscope waveform wrong, ripple greatly increased, and the measurements have more ripple, carefully test it, have a direct relationship with the human touch, human contact, the ripple will be more

Which should show a smooth sine wave, the result is superimposed on a large number of ripple ..
 

Then, I received a probe test signal port on the machine


 

Fortunately, in addition to larger ripple

But when I put fingers touched the machine test signal output port,
 

Same as the avalanche signal.

I think that the oscilloscope is broken, the door manufacturer sales, said ground not connected or not connected the probe ground, but I have ruled out two and I tried to use isolation transformers, no effect.

Intended to repair a few days, then normal the next day.

I believe the problem is not solved, not attack it is only temporary, and sure enough, today appeared the same problem, but there is no home digital television signals (add, digital television signals are often not on the door that my family and household, upstairs downstairs has a signal), I doubt there is ground, I measured a little electricity, the results have found that
 

Ground there is always the case with the zero line between the 26V AC, I remember that usually only a few tenths V voltage, which shows ground poorly grounded,
I do not know someone to steal power or bad, because most of the time is good and I will continue to monitor this phenomenon, because the family of digital television has been bad repair.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-freak on October 16, 2011, 09:02:14 pm
At which horizontal frequency did you saw this effect?
Please upload a picture having a better resolution
to let me see all details.

Regards
Peter
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: wjb444 on October 20, 2011, 02:08:44 pm
There voltage AC ground
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on October 23, 2011, 08:32:16 pm
There voltage AC ground

Try this. Hantekway uses common use HighVoltage capacitor (2kV), but its not rial Y-capacitor, which with certification behavior (low leakage and with overvoltage failure mode is break, not shorted, like common use ).

 epcos emi capacitor (http://www.google.com.ua/url?sa=t&rct=j&q=y-capacitor&source=web&cd=4&ved=0CFEQFjAD&url=http%3A%2F%2Fwww.epcos.com%2Fweb%2Fgenerator%2FWeb%2FSections%2FProductCatalog%2FCapacitors%2FFilmCapacitors%2FPDF%2FPDF__EMIGeneralStandard%2Cproperty%3DData__en.pdf%3B%2FPDF_EMIGeneralStandard.pdf&ei=jXikTtudN4_E4gSx4dWzBA&usg=AFQjCNFQ8o00tsrLxZcaYrGrvjQROkzmBQ)

Good y-cap should be covered with icons, certificates for which it was tested

 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Igor on October 24, 2011, 10:08:06 am
Try this. Hantekway uses common use HighVoltage capacitor (2kV), but its not rial Y-capacitor, which with certification behavior (low leakage and with overvoltage failure mode is break, not shorted, like common use ).
https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=16386;image (https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=16386;image)
I am so glad that my photo to someone needed!  :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 24, 2011, 12:23:07 pm
Try this. Hantekway uses common use HighVoltage capacitor (2kV), but its not rial Y-capacitor, which with certification behavior (low leakage and with overvoltage failure mode is break, not shorted, like common use ).

Good y-cap should be covered with icons, certificates for which it was tested

this depends on where you bought your Tekway / Hantek,  DSO produced for domestic market (and when you look on ebay
99.99% of all shops are selling ONLY such DSOs) are in principle not complaint with EU/NA safety requirements.


In DSOs produced for international market you will find proper Y caps, see attached picture.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on October 24, 2011, 07:31:17 pm
I am so glad that my photo to someone needed!  :)

 :)

In DSOs produced for international market you will find proper Y caps, see attached picture.
Nice macro !  :)
 But, I got pure china_borned_unit.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 27, 2011, 06:31:14 pm
as some ppl asked for, here the latest firmware (110923.1) for

Tekway DST1xxxB

http://hotfile.com/dl/133482275/8da8e64/dst1kb_2.06.3_01202b_fe(110923.1).up.html (http://hotfile.com/dl/133482275/8da8e64/dst1kb_2.06.3_01202b_fe(110923.1).up.html)

and Hantek DSO5xxxB

http://hotfile.com/dl/133482188/6a15853/dst1kb_2.06.3_15202b_fact(110923.1).up.html (http://hotfile.com/dl/133482188/6a15853/dst1kb_2.06.3_15202b_fact(110923.1).up.html)

(please ensure you download the proper version)


files deleted - new version available
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on October 27, 2011, 07:17:23 pm
as some ppl asked for, here the latest firmware (110923.1)...

Thank you very much !
I've just updated and yes, contrast bug is fixed !

Do you have the changelog for this version?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: wjb444 on October 28, 2011, 11:51:30 am
Thank you! Will try to tear down safety capacitor, and the results fed up.
Thanks again for enthusiastic people,
I will not forgive the English
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Kampfwurst on October 29, 2011, 02:45:24 pm
I tried the Hantek DSO5xxxB 110923 Firmware. Without success. It says that a illegal Firmware detectet.

What is wrong?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: clonecrp on October 29, 2011, 03:03:04 pm
Thanks Tinhead !  ;D

Kampfwurst - is dst1kb_2.06.3_15202b_fact(110923.1).up the first entry on your thumb drive (@ drive root)?

Cheers !

Doug
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Kampfwurst on October 29, 2011, 11:41:05 pm
yes

I used the same USB Stick than before.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Crenwick on October 30, 2011, 08:22:06 am
Is your DSO a 5202 or an upgraded to 5202 ?

Because this I think that this FW is only valid for the 5202 and not the other two models.

If flashed on my upgraded 5201 without any problem.

Have a nice day
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Kampfwurst on October 30, 2011, 11:57:24 am
i have the DSO5102B
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 30, 2011, 12:02:57 pm
i have the DSO5102B

which is the reason why the update fail, once again:
- always use firmware only for your model (speed, manufacturer)
- always use empty tumb drive
- sometimes (depends on tumb drive) you need to remove ( ) in file name


here the DSO5102B

http://hotfile.com/dl/133877850/2a96996/dst1kb_2.06.3_15102b_fact(110923.1).up.html (http://hotfile.com/dl/133877850/2a96996/dst1kb_2.06.3_15102b_fact(110923.1).up.html)

and DSO5062B firmwares

http://hotfile.com/dl/133761713/8d06e78/dst1kb_2.06.3_15062b_fact(110923.1).up.html (http://hotfile.com/dl/133761713/8d06e78/dst1kb_2.06.3_15062b_fact(110923.1).up.html)

files deleted - new version available
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: wjb444 on October 31, 2011, 11:31:05 am
I removed two X capacitors, and replaced the Y 2KV capacitor high-voltage capacitors, but the results did not improve.
As the frequency or voltage is not normal, to line voltage of about 30V.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: wjb444 on October 31, 2011, 11:33:00 am
I am surprised is that I use 220V isolation transformer, isolation of the grid, but the phenomenon remains
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 31, 2011, 11:51:17 am
I am surprised is that I use 220V isolation transformer, isolation of the grid, but the phenomenon remains

just a stupid question, did you tested the 1khz signal on a different scope?

I see that both probes and both channels are affected, so it can't be the channel front end, it must be
something common for both (like power supply). I would measure (with different DSO) all the power signals,
it can be dying (self oscilating) cap/LDO or one of the bigger caps on PSU unit or rectifier diode (or the RC combination par.
to rectifier diode).

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on October 31, 2011, 04:13:38 pm
As the frequency or voltage is not normal, to line voltage of about 30V.

I understand, the problem manifests itself when touching metal parts of the hand of an oscilloscope?

If so, then through the body and the oscilloscope runs a significant current, leading to noise in the scheme.
Do you have a real three-wire electrical network, with the present grounding?
Current can flow through the other units connected to the outlet. Through the grounding lug.


Try on device in state, like IMG_20111029_173526.jpg , i.e. without grounding.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on October 31, 2011, 04:56:48 pm
which is the reason why the update fail,

step 8, error 0xfb. Failed to decompress upgrade file.   >:(
Checking on 2 different USB storage. :'(
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 31, 2011, 06:16:46 pm
which is the reason why the update fail,

step 8, error 0xfb. Failed to decompress upgrade file.   >:(
Checking on 2 different USB storage. :'(

oh maybe file got broken, which one you tested?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on October 31, 2011, 06:55:59 pm
oh maybe file got broken, which one you tested?

for Hantek 5102.
tinhead, I download file 6 time, and its definitely different files.
 files have different lengths. Upload files in "raw-format" is not good idea, More better in common archive, to test the integrity of the file in standard Windows/Linux PC.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 31, 2011, 07:22:53 pm
oh maybe file got broken, which one you tested?

for Hantek 5102.
tinhead, I download file 6 time, and its definitely different files.
 files have different lengths. Upload files in "raw-format" is not good idea, More better in common archive, to test the integrity of the file in standard Windows/Linux PC.

file was broken, uploaded it again, check list on previous page
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on October 31, 2011, 08:23:22 pm
file was broken, uploaded it again, check list on previous page

sorry, I am retardation a little  :)

I mean file for DSO 5202B

length 2 549 266 byte,
 MD5  generated by Total commander 7.55 
fe93c083c614353257871b7559c68a83 *dst1kb_2.06.3_15202b_fact(110923.1).up
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 31, 2011, 09:56:50 pm
I mean file for DSO 5202B

length 2 549 266 byte,
 MD5  generated by Total commander 7.55 
fe93c083c614353257871b7559c68a83 *dst1kb_2.06.3_15202b_fact(110923.1).up

the org. file on my computer have same MD5 as the one on hotfile, and it work.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on November 01, 2011, 05:56:59 pm
and it work.

As far as I understood, based on the latest version HANTEK and language file from your patch.
Differs only DSO.E?E

I did like to wrote a post https://www.eevblog.com/forum/index.php?topic=1571.msg23984;topicseen#msg23984 (https://www.eevblog.com/forum/index.php?topic=1571.msg23984;topicseen#msg23984).
In your patch replaced the DSO.EXE and packed again.
It worked.  8)

Thanks, tinhead
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFman on November 03, 2011, 06:32:59 am
as some ppl asked for, here the latest firmware (110923.1) for

Tekway DST1xxxB

http://hotfile.com/dl/133482275/8da8e64/dst1kb_2.06.3_01202b_fe(110923.1).up.html (http://hotfile.com/dl/133482275/8da8e64/dst1kb_2.06.3_01202b_fe(110923.1).up.html)

Hi Tinhead,

I received the following error message when I used the above file to update via the USB memory stick: "Software upgrade failed, error 0xf7 illegal upgrade files detected".

My Tekway is:
Model: DST1202B (Has been upgraded from 100MHz).
Soft/Version: 2.06.03 (110118.0)
Hard Version: 0x555583e8.

Thanks for your help,

RFman.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 03, 2011, 10:13:47 am
as some ppl asked for, here the latest firmware (110923.1) for

Tekway DST1xxxB

http://hotfile.com/dl/133482275/8da8e64/dst1kb_2.06.3_01202b_fe(110923.1).up.html (http://hotfile.com/dl/133482275/8da8e64/dst1kb_2.06.3_01202b_fe(110923.1).up.html)

Hi Tinhead,

I received the following error message when I used the above file to update via the USB memory stick: "Software upgrade failed, error 0xf7 illegal upgrade files detected".

My Tekway is:
Model: DST1202B (Has been upgraded from 100MHz).
Soft/Version: 2.06.03 (110118.0)
Hard Version: 0x555583e8.

Thanks for your help,

RFman.


this happens when the company name (tekway) or model name (dst1202b) are with cap letters in logotype.dis
or when there is no CR at the end of the line. You should fix that because every org. update will fail,
however for now see attached special version which is not checking these things


http://hotfile.com/dl/134086905/54cd538/dst1kb_2.06.3_01202b_fe(110923.1)_special.up.html (http://hotfile.com/dl/134086905/54cd538/dst1kb_2.06.3_01202b_fe(110923.1)_special.up.html)

(MD5 check sum is c0d05af7c91f2cd2c552e7a908f10aff *dst1kb_2.06.3_01202b_fe(110923.1)_special.up )


file deleted, new version available
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFman on November 04, 2011, 01:05:37 am

this happens when the company name (tekway) or model name (dst1202b) are with cap letters in logotype.dis
or when there is no CR at the end of the line. You should fix that because every org. update will fail,
however for now see attached special version which is not checking these things

http://hotfile.com/dl/134086905/54cd538/dst1kb_2.06.3_01202b_fe(110923.1)_special.up.html (http://hotfile.com/dl/134086905/54cd538/dst1kb_2.06.3_01202b_fe(110923.1)_special.up.html)

(MD5 check sum is c0d05af7c91f2cd2c552e7a908f10aff *dst1kb_2.06.3_01202b_fe(110923.1)_special.up )

Hi Tinhead, Thanks for going to the trouble of generating a special update. If I use this then I'll have to have a special version for each new update. I wonder if it would be better if I correct the necessary files and that would then allow me to use the normal upgrades which I guess would also include Teckway updates. Am I correct in saying this.

I have already purchases a USB serial interface to allow me to get into the Linux operating system. This should allow me to correct the required files.

But I need to know what to fix in each file and some extra instructions as to what program I need to use to modify the files. Or maybe I can just copy the correct files? I'm no expert in Linux  :(.

As always, thanks again for your help,

RFman.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 04, 2011, 01:12:58 am
I wonder if it would be better if I correct the necessary files and that would then allow me to use the normal upgrades which I guess would also include Teckway updates. Am I correct in saying this.

yeah, it is better.


I have already purchases a USB serial interface to allow me to get into the Linux operating system. This should allow me to correct the required files.

But I need to know what to fix in each file and some extra instructions as to what program I need to use to modify the files. Or maybe I can just copy the correct files? I'm no expert in Linux  :(.

you don't have to be an expert, all you need is to connect over uart to the linux shell, once you in only few files need to be
probably edited (with vi editor), that's simple steps.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFman on November 04, 2011, 01:58:35 am
I wonder if it would be better if I correct the necessary files and that would then allow me to use the normal upgrades which I guess would also include Teckway updates. Am I correct in saying this.

yeah, it is better.


I have already purchases a USB serial interface to allow me to get into the Linux operating system. This should allow me to correct the required files.

But I need to know what to fix in each file and some extra instructions as to what program I need to use to modify the files. Or maybe I can just copy the correct files? I'm no expert in Linux  :(.

you don't have to be an expert, all you need is to connect over uart to the linux shell, once you in only few files need to be
probably edited (with vi editor), that's simple steps.

Hi Tinhead,

Thanks, what files should I change and what should they look like. Are you able to generate a printout or something that would guide me.

And how do I start vi editor?  :)

Thanks a million,

RFman.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on November 04, 2011, 08:48:24 pm
This is example, not true.

You are connected to scope with USB UART using terminal emulator. (if you like you can even use microsoft bullshit hyperterm but I do not recommend it to any kind of use. Use some real emulator. Example Cryptoterm 1.5 or something else. (before use it as pure terminal it may need some small settings so it works just like dummy old RS232 terminal, depend of what terminal you select to emulate it can also show colored things, more nice to use. But maybe if someone have not use real terminals in history they do not miss real terminals functionality and then they can even accept microsoft hyperterm what is just shame... most bad terminal ever what can find on this Tellus.)

what ever terminal  you give keyboard (real terminal can send this):

together pressed |ctrl|C
and then |enter|

now you are here (in root)

[root@Tekway-dso /]#

and you can command example this

ls |enter|

you get long list on the terminal display (root have these names and they can be files, directories etc)

Something like this: (5 underlines is me... maybe you quess why)
one you mod with mv and others with vi

[root@Tekway-dso /]# ls

OurLanguages      fpgabank.conf     logotype.dis      sys.inf
bin               help.db           lost+found        tdc.log
chk_base_volt     home              mnt               tdc_edge125M
cur_acq.type      i2c.log           msg               tdc_overtime125M
dev               icon              mult_adc.log      tdc_pulse125M
dn.rbf            keyprotocol.inf   nfs               test
dso               language.img      opt               tmp
dso.exe           lib               param             tmpdst
dst1102b          linuxrc           proc              ubdb.swi
etc               logo              protocol.inf      usr
fpga.exe          logotype          sbin              var


[root@Tekway-dso /]#


now lets do something small

type (after # there is cursor waiting)

vi logotype|enter|   (|enter| means you just press enter)

you get something like this

- logotype
dst1102b
~


and here you are now with vi editor reading or editing and your cursor in start of file (just under first character).

First, if you do not want touch anything or just make some mistakes and you have changed accidentally it, just go out without saving anything.  give vi command:
:q! |enter|   (or if it do not follow becouse you are not in vi command mode you then |esc|:g!)

(To enter vi command mode: [esc]) example if you are i (insert) you need first enter back to command mode)


you go out from vi and not saving anything and agen you are here
[root@Tekway-dso /]#

ok lets editing:

agen

[root@Tekway-dso /]#vi logotype|enter|

you get



dst1102b
~


you can now edit.

You can move cursor with
h   move left (backspace)
j   move down
k   move up
l   move right (spacebar)


Move cursor under second 1  (dst1102b)

press r, then 2

what happend? ...  1 changed to 2. (r changes next typed mark to cursor pointing place)

now there read dst1202b   and your cursor is where it is.. if need edit more you can move cursor and use  r  (replace)
 only change these numbers and also keep care that if there is uppercase it need stay uppercase etc. do not use inserd etc becouse all strings need be exactly lenght as they are and upper ands lower case is also important.


you can find easy all vi commands bu google search vi editor commands.
(this replace command is safe becouse you can not destroy file lenght and also if there is example <cr> yoy can not accidentally destroy anything)

ok now there is edited this.
You can now store it and quit. Type:

:wq |enter|  or |esc|:wq|enter|

you go back to

[root@Tekway-dso /]#

ok lets check (if want do it with vi):

type agen:


[root@Tekway-dso /]#vi logotype|enter|  (note if you know you just want read only it, no need go vi editor).

if you only read and not change anything or accidentally change something what you not want
just type
:q!

and it quits without saving anything.  (if you first need go to vi command mode press first |esc| and then command example :q!  this need example if you are in insert mode editing text)

If you only want read file then use command cat filename, this can not change anything. (and if file is long, you can use more filename)


You can exercice with vi around of scope but if need exercise,  it is better to make  one file and then exercise with it just as writing first text and then editing it with many ways.

Also if want look more: sightseeings inside scope you need tiny command list like this (http://en.kioskea.net/contents/linux/lincomm.php3))
So if you just looking some files maybe is better look only with command cat filename ,  it is nearly same as old msdos command: type.

maybe something is not correct in my text... it was just from my bad memory without checking.

Just like this you can edit all what need exept.....

first with
ls
command  you get root directory list (ls list files in this directory where you use it) where is your scope model... (same with Hantek and Tekway, dstxxxxb)

if have 100MHz model there read (in root directory): dst1102b

this name can not edit by vi

this you simple change (move) like this

[root@Tekway-dso /]#mv dstxxxxb dstzzzzb|enter|

x is what you know(old) and  z what you want(new).

(tiny mod (example for short time test) is only this model change with mv and restart scope.
(remember also self cal after mod))

if you just mv <oldmodel> <newmodel> |enter| you do not need do anything other but just shut off cope and restart.. you scope works as newmodel but there is wrong boot up picture and systemdata is wrong. In this mode you can not use update for your newmodel. (it is more safe that do not try update FW is model change is not full and perfect)

but for doing all perfect you need edit  some files.
(I have never mod FW110923.1 scope so there may be some differencies, really I do not know. Last time I have used mod was maybe FW110531  and after mod of course updated FW's but not tested if new FW's still can mod exactly same as before)

Please read tinhead comments just starting this whole thread.

all files what need touch are listed there.
Be careful, if there is uppercase or lower case inside file, do just as they are.. do not change uppercase/lowercase inside files)

(mv just change name.) mv tommy bobby  ...and now tommy renamed to  bobby)

before restart scope look and watch carefully that you have typed all just exactly without any minor error.
As long as you have not rebooted you can read all with vi and also re-edit if need.

one example "user manual" for use vi editor (http://www.blacksheepnetworks.com/security/resources/vi-commands.html)

All original info you can find if you follow carefully what tinhead have teached here in thread. He have done lot of fine work with this for all of us and also for helping Hantkek sell more and also Hantek/Tekway to make better scopes.
.
full thanks to tinhead.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 05, 2011, 02:06:29 am
removed
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFman on November 06, 2011, 06:37:29 am

So, now back to the "update" script

[cmd] rm /dst* -rf
[cmd] touch /dst1202b

<- here the model file will be deleted and created again. This file is the magis one for the bandwidth hack

[cmd] rm /logotype.dis
[cmd] mv /usr/up/tekwayup_client/logotype.dis /logotype.dis

<- and here the logotype.dis will be deleted and new one will be copied to root fs of the DSO.

Now what you have to know is, exactly here the firmware is checking the Brand (which might be hantek or tekway)
and the model - for Hantek DSO5062B, DSO5102B, DSO5202B and for Tekway dst1062b, dst1102b, dst1152b, dst1202b.
There are of course Tekway dst4xxxb and dst3xxxb models (as well Hantek N/C series), but i don't care abotu them
as we speek here about 1GSs models.

The firmware is checking then following
ucUpdateBrand = ucSysBrand ?
ucUpdateType = ucSysType ?

if not you will get an error 0x7f

ucSysxxx are read from the logotype.dis of your DSO, usUpdatexxx are from the firmware update file itself

This has been implemented to prevent people from running a wrong update (model, manufacturer - so not only hack protection)
However, in case you update file contains an empty file named "special" (/usr/up/tekwayup_client/special)
exact this update step will be not execute - so you can update from Hantek to Tekway or from whatever model to another one.


Thanks RF-Loop and Tinhead for your help.

RF-Loop,

Thanks for the instructions on how to get into Linux and how to use the Editor. I think I will be now be able to edit and fix my files. I will read the Editor manual, thanks for the link.

Thanks very much for your kind help.

Tinhead,

Thanks for the information on how update works. It sure is involved with a lot of checking etc. It must have taken you ages to work this out.

Would I be correct in saying that my problem is in the above quoted section because I get the error "0x7F".

Do I go into the "logotype.dis" file and Edit it to make sure that the brand and model is correct. Is this the only file I need to modify to allow my Tekway to update in the future? Also do I have to put in "CR", "LF" or what?

Thanks very much for your time and help,

RFman.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vlindos on November 06, 2011, 11:31:59 am
Hi again,
Forgive my stupid question but does the Hantek has the option to save the data from the screen or the memory to a CSV file ?
If does not isn't possible to handle this some how from the shell, I know the hardware calibration puts down the the volts of the captured sourse to a text file. Is there any hole we can use for capturing to CSV file.

CSV file is very useful for creating excel sheets and diagrams but mostly for calculatng the power of impulse and so on.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on November 06, 2011, 01:18:54 pm
Screen can save as picture to USB and/or internal memory.
Captured data can save as .csv to USB.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 06, 2011, 02:22:28 pm
Hi again,
Forgive my stupid question but does the Hantek has the option to save the data from the screen or the memory to a CSV file ?
If does not isn't possible to handle this some how from the shell, I know the hardware calibration puts down the the volts of the captured sourse to a text file. Is there any hole we can use for capturing to CSV file.

CSV file is very useful for creating excel sheets and diagrams but mostly for calculatng the power of impulse and so on.

ehm sure, there is a big button "Save/Recall" , just use it (and select then CSV).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vlindos on November 07, 2011, 11:35:34 pm
Uhm  ::) ... Thanks!
I was searching the Hantek manual for CSV keyword and haven't luck. Thanks for helping the fool.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 08, 2011, 12:16:49 am
Uhm  ::) ... Thanks!
I was searching the Hantek manual for CSV keyword and haven't luck. Thanks for helping the fool.

not your fault, since the user manual has been written (and well, never updated) the firmware has been changed
a lot, not only CSV section missing (also measrments, filters, pass/fail, cursors, many general item from menu structure ...)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: trap15 on November 09, 2011, 11:14:09 pm
Just thank you tinhead, great hack!

For this great source of information, I just want to add my small contribution :
for UART connection, the only think available for me was a DLPDesign USB232M module. But this module needs an 3.3 V host power source to drive Tx correctly. I used the power supply pin referred as "do not use" on your picture (It seems to be a 3.3V Vcc) and it works just fine.

Again thanks for your work
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 16, 2011, 09:15:30 pm
maybe someone of you here have a bit of spare time and can try to identify these still unknown components:

SOT23-3, part marking SCJG, pinout 1-VCC, 2-Vout, 3-GND
- this is voltage ref. used in hw1007 instead of LT1790-4.096V


Diodes Inc AP7313-15SR seems to match, in terms of package marking,
but the SR is a reversed pinout (to the more common 1=ground organization).
Output is 1.5V.

Maxim MAX6145EUR-T matches pinout and voltage, no sign of SC marking code

Could match some of the precision shunt lines, like LM4040 etc

These folks suggest SCxx is a Microchip marking prefix (handy site BTW, good job to the team that runs it!):

http://chip.tomsk.ru/chip/chipdoc.nsf/vc1 (http://chip.tomsk.ru/chip/chipdoc.nsf/vc1)!readform&view=smd&cat=S&start=501&count=500

If so, it might be the MCP1541, which matches voltage output and pinout.

TI REF3040 series may also be a match

ECL  -K

i measured the voltage of the unknown SCJG marked volt. ref. and to be very honest i'm really surprised.
The "cold" voltage is 4.0964V, the "warm" voltage (20° temp diff) is 4.0965V

That's under 1.5ppm temp/°, so really good one volt. ref, much better than the LT1790-4.096V used in hw1.02/1.03
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: e-pirate on November 18, 2011, 10:12:54 am
Hi, folks, I'm been away for some time, but now I'm back :)
So, I have two questions/requests for now:
1) tinhead could you upload your improved English.lan as a plane file, so ppl, having UART can update without using fw updating procedure?
2) folks, having pure native DSO5202B and hw version 1.00.3, can anybody send me a pm with a device SN having replaced last, lets say, two-three digits with 'X'?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: benkev on November 25, 2011, 12:48:34 am
Hi All (and tinhead personally :)).

I am new for this forum and never wrote posts here. I find it really exciting; the forum helped me to chose between inexpensive DSOs in favour of Hantek DSO5102B. I bought it a while ago (hardware 10070x55553e8) and recently hacked it to turn it into DSO5202B. I also tried to increase the knee frequency of the digital filter up to 450 Mhz by creating the /tst file with '[filter] 45', as tinhead advised. However, I encountered some problems. Could anybody help me, or just discuss them?

(1) After the hacking I found out that the oscilloscope does not start dso.exe: after turning on power the LCD screen becomes bright-blue and... it remains in this condition forever, the "DSO5201" logo never appears.
If I connect the onboard UART to the PC (I use a CP2102 chip based USB to Serial bridge) and run pytty at 115200 8-N-1, on the putty terminal console shows up the prompt
Tekway>

   Typing 'help' produces the following list of commands:
Tekway> help
Usage:
   flash [{cmds}]                       -- Manage Flash memory
   cpu [{cmds}]                         -- Manage cpu clocks
   bon [{cmds}]                         -- Manage the bon file system
   reset                                -- Reset the system
   param [eval|show|save [-n]|reset]    -- set/get parameter
   part [add|del|show|reset]            -- Manage MTD partitions
   mem [{cmds}]                         -- Manage Memory
   load [{cmds}]                        -- Load a file to RAM/Flash
   go <addr> <a0> <a1> <a2> <a3>        -- jump to <addr>
   dump <addr> <length>                 -- Display (hex dump) a range of memory.
   call <addr> <a0> <a1> <a2> <a3>      -- jump_with_return to <addr>
   boot [{cmds}]                        -- Booting linux kernel
   help [{cmds}]                        -- Help about help?
   load [{cmds}]                        -- Load a file to RAM/Flash
   load [{cmds}]                        -- Load a file to RAM/Flash
   loadyaffs {...}                      --  to Flash
Tekway>

Typing
Tekway> boot
makes normal Linux boot and starts dso.exe.

Why does not  the oscilloscope boot after power on? (Sometimes it boots normally, though)
What program gives the prompt
Tekway> ?

(2) The boot failure described in (1) only happens when nothing is connected to the onboard UART of the DSO5201B. Strange, but when the onboard UART is connected to the the PC (even if the terminal program on the PC does not run).
The DSO25102B ALWAYS boots normally and starts dso.exe IF the UART is connected to the the PC! Therefore, it is impossible to catch the failure condition in the UART console screen on the PC.

(3) Since I do not have the 2mm pitch female headers or connectors, I had to simply solder three wires to the onboard UART pins: GND, TXD, and RXD. The three wires with 2.54 (or 100 mil) connector now stick out from the back panel. They are always available for connecting to the CP2102 adapter. Can the wires cause such misbehaviour?

(4) I have just upgraded my firmware from 110531.1 to dst1kb_2.06.3_15202b_fact(110909.0).up. The same behaviour.

(5) Is there any boot log file saved to see at what stage the failure occurred?

And, generally, what do you think about this nuisance? Is this a defect of this particular oscilloscope? Or maybe I damaged something while hacking/testing? By the way, when I noticed failure (1), I removed the /tst file with '[filter] 45', thinking it was the reason. It did not help.
Also, it seemed to me that the oscilloscope does not boot because it is heated. Alas, that was not the case. The boot failures have been more and more frequent, and by now it does not boot at all -- without the UART connected to my PC. It is not nuisance, it is a trouble.
 
I have another question. 

Tinhead, you write that you have seen several makes of DSO5000. My board is green. Unfortunately, my model is different from the one for which you published complete schematic. The board I have (hardware 10070x55553e8) has the routes and holes for the Ethernet (RJ45) socket. I have a suspition the main board has all the routes for the Ethernet CS8900A-based
controller. It only needs soldering the RJ-45 and  CS8900A chip. Is this true?

Thanks in advance to everyone who responds.



























Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 25, 2011, 01:43:22 am
Hi benkev

the issue 1, 2, 3 belongs together, they actually not an issue / bug / error.
As soon "something" is connected to the Samsung SoC (S3C2440) UART, the bootloader might stop with the Tekway > prompt, this is because
the bootloader picked up "any character". The best solution is probably pull up / pul down (i don't remember exactly, what i remember someone tested it here)

The bootloader is just before any OS (and far DSO applicaton) are loaded, so it does not have anything to do with firmware version (that's for quastion 4, 5).

Tinhead, you write that you have seen several makes of DSO5000. My board is green. Unfortunately, my model is different from the one for which you published complete schematic. The board I have (hardware 10070x55553e8) has the routes and holes for the Ethernet (RJ45) socket. I have a suspition the main board has all the routes for the Ethernet CS8900A-based
controller. It only needs soldering the RJ-45 and  CS8900A chip. Is this true?

i'm working (in spare time) on the hw1007 schematics (this is the latest hw revision and exactly what you have), it will be ready before christmas :)

The Ethernet chip on hw1007 is DM9000EP, the unpopulated parts on main pcb are for an combination of rs232/LAN, however some are placed (well supposed to be)
on a separate small pcb connected to the i/o port. You will see the details as soon i published the schematics.

In principle you can use the CS8900A too, but of course then you will have "only 10mbit" instead of 100 with DM9000EP and of course
you will have to re-design the PCB which i posted some time ago (as the i/o port pinout has been changed since hw1005)


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 25, 2011, 01:45:01 am
Hi, folks, I'm been away for some time, but now I'm back :)
So, I have two questions/requests for now:
1) tinhead could you upload your improved English.lan as a plane file, so ppl, having UART can update without using fw updating procedure?

the english translation is now part of the original Hantek and Tekway firmwares, so no need to copy them manually anymore.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: benkev on November 25, 2011, 05:14:51 am
Hi benkev

the issue 1, 2, 3 belongs together, they actually not an issue / bug / error.
As soon "something" is connected to the Samsung SoC (S3C2440) UART, the bootloader might stop with the Tekway > prompt, this is because
the bootloader picked up "any character". The best solution is probably pull up / pul down (i don't remember exactly, what i remember someone tested it here) ...

Tinhead, thank you. This is just great. Of course, the 15cm-long wires connected to the onboard UART pins pick up significant RFI, and it sometimes is perceived by the bootloader as a character sent from outside. I soldered a simple terminator plug with two 10k resistors pulling RXD and TSD lines down to GND. With this plug on the UART's wires, my DSO5201B always boots. Tinhead, you really helped me.

...I'm working (in spare time) on the hw1007 schematics (this is the latest hw revision and exactly what you have), it will be ready before christmas :)

This is really good. (I do not know what we, ordinary people, would do without real enthusiasts like you)

The Ethernet chip on hw1007 is DM9000EP, the unpopulated parts on main pcb are for an combination of rs232/LAN, however some are placed (well supposed to be)
on a separate small pcb connected to the i/o port. You will see the details as soon i published the schematics.
In principle you can use the CS8900A too, but of course then you will have "only 10mbit" instead of 100 with DM9000EP and of course you will have to re-design the PCB which i posted some time ago (as the i/o port pinout has been changed since hw1005)

Tinhead, I mentioned  CS8900A because of the lines in the linux boot printout
"Cirrus Logic CS8900A driver for Linux (Modified for SMDK2410)"
and I decided that the driver is only for CS8900A. Good if I am wrong.

1. "The Ethernet chip on hw1007 is DM9000EP" -- do you mean DM9000EP is already present on the board?
2. For the hw1007: is an additional Ethernet board needed, or it would be enough to just solder absent parts on the main board?

Thank you.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on November 25, 2011, 05:46:45 am


(3) Since I do not have the 2mm pitch female headers or connectors, I had to simply solder three wires to the onboard UART pins: GND, TXD, and RXD. The three wires with 2.54 (or 100 mil) connector now stick out from the back panel. They are always available for connecting to the CP2102 adapter. Can the wires cause such misbehaviour?



Yes, sure it can. Disconnect all open wires from uart port. It is extremely sensitive. 
(also these may damage port! There is not any protection and example ESD or EMI induced to wires may damage chip. Your open line is as antenna.)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: benkev on November 25, 2011, 06:03:37 am
rf-loop,
thank you for the warning.
Now I see, the RXD and TXD wires must be pulled up or down. I am going to read the web to find out, up or down, and what resistors to use. By now I decided that 10k is safe enough: ~330uA aximum to the ground will not damage the chip. If you think different, please write.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: benkev on November 25, 2011, 04:21:40 pm
tinhead,
sorry for my silly question (2.), I was tired :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 25, 2011, 11:21:27 pm
tinhead,
sorry for my silly question (2.), I was tired :)

you don't have to sorry, there is nothing silly.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 29, 2011, 09:07:09 pm
How to restore original firmware/NAND

imagine you screwed something up and wish to restore the firmware to the original version
(which you of course saved before wth the backup tools from this thread ... you don't? Well do it now.
If it's already too late then send me PM, i can help you to restore your DSO)


There are two ways :
- over JTAG
- over UART/USB

As most ppl don't have a nice H-JTAG USB (or whatever ARM JTAG) i will skip here the restore over JTAG part,
because if you have one you know how to use it
(all you need in principle is to flash in raw mode, so with OOB blocks the combined backup file fw_backup.bin and reboot)

Restore over UART/USB
You need some tools:
- dnw.exe
- supervivi.bin
- vivi.bin (just in case, see later why)

These tools are attached already here:
https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=4153 (https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=4153)

The dnw.exe need a device driver and inf file, you can find them here:
(from http://www.friendlyarm.net/downloads (http://www.friendlyarm.net/downloads) page)
http://www.friendlyarm.net/dl.php?file=usb-downloaddr-setup_20090421.zip (http://www.friendlyarm.net/dl.php?file=usb-downloaddr-setup_20090421.zip)
http://www.friendlyarm.net/dl.php?file=usb-downloaddr_20090421.zip (http://www.friendlyarm.net/dl.php?file=usb-downloaddr_20090421.zip)

The first one is complette setup program, the second just inf/device drive, use the one you like, both works
For Win64 users: i know there are some dnw.exe/drivers out there for Win64, search for them or use Win32 to restore

Now the first step is to create a complette restore file, the backup tool from this thread is creating 3 dumps:
boot.bin
kernel.bin
root.bin

They are only MTD partitions backups (with NAND OOB blocks), what missing is some empty space
which has been not saved during backup and NAND MTD endblock.
You can find them here:

(https://www.eevblog.com/forum/index.php?topic=1571.msg26930#msg26930 (https://www.eevblog.com/forum/index.php?topic=1571.msg26930#msg26930))

https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=4903 (https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=4903)
https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=4904 (https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=4904)

Download these two files, put them into a folder with boot.bin, root.bin and kernel.bin
and run from dos prompt following:
copy /B boot.bin + blank.bin + kernel.bin + root.bin + mizi_tag.bin fw_backup.bin

The resulting fw_backup.bin is the full backup wich we need to proceed with restore.

Now connect your DSO over UART to your PC, open the terminal application, connect to whatever com port your
DSO is connected to (set 115200, 8n1) and power up your DSO.

While powering up try multiple times to hit space key, if the boot process have not stopped at following screen power off DSO
and try again until you see something like that :

(https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=17576)

This is the bootload prompt. Unfortunately the original Tekway/Hantek bootloader have NO USB support
so we have first to upload another one bootloader (with USB support) - that's the supervivi.bin

IMPORTANT: use only the supervivi.bin provided by me, if you use different version the restore might not work properly
or you screw up the MTD patritions.

To do this type in the bootloader prompt following:

load flash vivi x

and click enter. Now in your terminal application (i'm using hyperterm, sure not the best solution but it works)
chose "Transfer->send file", select the supervivi.bin, select Xmodem as protocol
(the x in what you typed in bootloader prompt means Xprotocol too).

Now you should see somehing like this picture:

(https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=17578)

After this step reboot your DSO, hit again during boot multiple times space key until the DSO stop at such screen:

(https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=17580

This is the supervivi bootloader, type now menu (+enter) to get the bootloader menu system:

[img]https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=17584)

(https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=17586)

The next step is to connect the DSO over USB and to install the device drivers to allow dnw.exe to communicate
with DSO. After you installed drivers run the dnw.exe, if everything worked you should see
in the dnw.exe top status line something like USB:OK

(https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=17582)

If you see this you can continue with fw/NAND restore, if not close dnw.exe, reconnect USB cable and try again.

Now type in the supervivi bootloader menu "r" - this means restore, immediately after that in dnw.exe menu
chose "Usb Port->Transmit/Restore" and chose the previously created full backup fw_backup.bin
Don't wait too long, dnw.exe is sometimes really bitchy with timeouts.

You should see now in the dnw.exe and your terminal application the transfer/flashing progress:

(https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=17588)

(https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=17590)


After the supervivi bootloader flashed the NAND with your fw_backup.bin the menu will be shown again, just
scroll back to see the flashing status, here my example (note, my NAND have one bad block, not a bog deal):

(https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=17592)

That's all, now close dnw.exe, disconnect USB cable from DSO and reboot DSO - you will have
now your original firmware restored.


Note: if you have too many bad NAND sectors the restore might not work, then you will have to buy new empty NAND chip,
solder it and repalce the broken one and of course use ARM JTAG to program the NAND backup (or at least the bootloader).

Extra note: after restore the bootloader is again the original HanTekway vivi.bin (the same as the attached),
if you lazy you can remove it of course by the supervivi.bin - the DSO will still work and you will have
nice way (over USB/dnw.exe) to backup/restore NAND (if you hacking often and have no JTAG cable this is the fastest way)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: drieg on November 29, 2011, 09:41:21 pm
Awesome, thanks a lot!!!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 30, 2011, 10:19:44 am
you welcome Drieg.


Btw, when you look eactly both bootloader (vivi and supervivi) have "boot system" options,
but don't use them during the firmware/NAND restore - it is better to physicaly power off and on to let the
bootloader initialize properly.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 30, 2011, 10:41:22 am
Firmware bugs

As you know there was a "long" list of bugs send to HanTekway. The good news is - they responded very nicely to that,
provided a combined list (bugs and improvements proposal from all users) with schedule.
They currently working on that list and something will be available soon public,  on the Tekway website there
are already some dead links:

(https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=17616)

and Hantek did send few days ago testing version to some ppl. I got it too and tested already a bit,
that's the things already fixed in the test version:

- frequency counter decimal point bug (the counter was skipping one position while switching from e.g. 99.1 to 100.1 MHz)
is now fixed, the counter shows proper values.

- dots/vectors icon bug - now it is changing as supposed to do when you switch between modes

- default setting button "color reset" bug fixed - now you color setting will remain when you push "default setup" button

- horizontal scroll bug in long memory and 8ns/4ns/2ns/DIV - the waveform was disapearing when position has been moved,
now it works perfect.

- in vector/dots mode the zoom was showing only crap (in single window mode, dual window was working good)  above a
 specific zoom level - now it is stopping at max possible value and showing a short "max zoom reached" message.


There are also some bugs on which HanTekway was working at the time as they send out the test firmware (so partialy
fixed or with massive amount of debug information):

- digital filters - at current stage they accepting settings, but waveform is not yet looking perfect
- while enabling FFT in dual window mode the sample rate in status line is sometimes displayed wrong
  (turn the hor. knob one step right/left and  it is ok) - this is partialy fixed in the test version.
- FFT full span higher than Nyquist in 800ns to 2ns/DIV - you remember, i have patched that already but it seems that
  some DSOs (hw1005 only!) have issues with my way ... so HanTekway is working on a different solution for that.
  In the test version i can see already preparation for that, so good sign.

All the proposals/improvements are not yer implemented (which make sense as a stable bug free firmware is more important)
- add avarage sampling in long memory mode
- improve equ sampling (less ADCs to remove jitter)
- add extra 20kpoints or 16kpoint or 8kpoint in memory modes (depends on what possible)
- release SDK


Normally i would post the test version here, but this time there is lot of debug code inside slowing down
the DSO (display update, knobs respond, skipping waveforms in higher timebases), so i decided to not do that
but report to you back guys what the status is.


When i look on the combined issue list (schedule and where they are now) it seems that HanTekway will resolve all these
points still before christmas (i just can't wait for the SDK ... crossing fingers and counting seconds :P)


EDIT: oh well, for those who didn't got that test version but wish to play with it

(MD5 13829cd9b0d91a241865a9de1d73e771):

http://hotfile.com/dl/135986668/411b586/dst1kb_2.06.3_(111124.0).up.html (http://hotfile.com/dl/135986668/411b586/dst1kb_2.06.3_(111124.0).up.html)

Note - as said above, the amount of debug code is slowing down a bit the operations, but on the other side there
are already imporvements so it is your decision ...

... and if you wish the same test firmware with patched out most of the debug code (it is still bit sluggish but better than org. version)
and patched out the FFT full span bug (on hw1005 it might/might not work) feel free to test my version:

(MD5 7abfc8d87f20854b8c372e2bd4bf3bac)

http://hotfile.com/dl/136350073/07ca4ca/dst1kb_2.06.3_(111124.0).up.html (http://hotfile.com/dl/136350073/07ca4ca/dst1kb_2.06.3_(111124.0).up.html)

NOTE: both HanTekway and my version are universal, you can install them on any Hantek DSO5xxxB or Tekway DST1xxxB DSO


Files deleted - new version available
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Crenwick on November 30, 2011, 10:56:52 am
Hip Hip Hantek (and Tinhead  ;) )

That's GREAT news  8)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on November 30, 2011, 11:27:03 am
Could I test it on my Tekway DST1102b ( converted to 200Mhz of course :) ) ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 30, 2011, 11:28:29 am
Could I test it on my Tekway DST1102b ( converted to 200Mhz of course :) ) ?

yes you can, as i said above it works on any Hantek DSO5xxxB or Tekway DST1xxxB DSO
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on November 30, 2011, 02:08:25 pm
Nice work, really nice.

Tinhead DSO5000B, Hantek DSO5..... , Tekway..

TinHanTek DSO5000B
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on December 08, 2011, 05:39:03 pm
which is the reason why the update fail,

step 8, error 0xfb. Failed to decompress upgrade file.   >:(
Checking on 2 different USB storage. :'(

In console

have * in update packet
Search_UdiskUpdateXXXFiles
dst1kb_2.06.3_(111124.0).up  hantek36_1
(006)mem valid cnt=545..time 10s wave frames = 0...
tmp_name : /usr/up/dst1000_4000.up.tmp
gpg: CAST5 encrypted data
pw:0571tekway
gpg: encrypted with 1 passphrase
(007)mem valid cnt=545..time 10s wave frames = 0...
gpg: WARNING: message was not integrity protected
gpg: CAST5 encrypted data
pw:0571tekway
gpg: encrypted with 1 passphrase
(008)mem valid cnt=545..time 10s wave frames = 0...
gpg: WARNING: message was not integrity protected
dst1kb_2.06.3_.up.tar
(009)mem valid cnt=545..time 10s wave frames = 0...
tar: Short header
tekwayup_client
tekwayup_client/update
tekwayup_client/dso.exe
(010)mem valid cnt=545..time 10s wave frames = 0...
(011)mem valid cnt=545..time 10s wave frames = 0...
tar: Write Error: No space left on device
tar: Invalid tar header checksum
Tar_UpdatePacket ok !!
start update sys files
iError :251
Show_UpdateEndWindow end
saved run param ...Save: 0
SaveTypeToFile:write ok 0
ok


WTF?  :o
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 08, 2011, 08:37:26 pm
walt,

you should see something like :

tekwayup_client/update
tekwayup_client/dso.exe
tekwayup_client/special
tekwayup_client/update~
tekwayup_client/OurLanguages
tekwayup_client/OurLanguages/English.lan
tekwayup_client/OurLanguages/French.lan
tekwayup_client/OurLanguages/German.lan
tekwayup_client/OurLanguages/Japan.lan
tekwayup_client/OurLanguages/Korean.lan
tekwayup_client/OurLanguages/Tridchn.lan
tekwayup_client/update.sh~
tekwayup_client/sys.inf
tekwayup_client/sys.inf~
upend


but on your scope it ends up right after dso.exe :

tekwayup_client/update
tekwayup_client/dso.exe
tar: Write Error: No space left on device


This can have two reasons :

1-  there is really no space on NAND (which i doubt, but who knows, maybe too many broken sectors)
Check that, do df -h on the shell

2- the firmware update file you downloaded is corrupt - check the MD5 checksum
A corrupt file can't be unpacked and it's causing memory overflow error, which might result as "no space"
Title: 1000st reply ... Dave, where is my DMM :)
Post by: tinhead on December 08, 2011, 09:57:41 pm
1000st reply ... nice .. and actually funny situation. I was about to make screenshot with
the !1000st reply! from my Tekway :

(https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=17896)

and i did found a nice thing.

Is it bug? Or feature ? You decide ... switch to XY mode, apply waves (for best result just the same sine wave to both channels)
and change contrast, with contrast set to 0 the XY screen is updating much faster than with contrast set to 15


EDIT: It seems that contrast=0 is always allowing fastest screen update, depends on version the slowest
might be between 8 and 11, then again increasing update speed when changing into max direction.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on December 09, 2011, 12:00:33 pm
1-  there is really no space on NAND (which i doubt, but who knows, maybe too many broken sectors)
Check that, do df -h on the shell

I manualy unarchive update file, copy to folder usr/up/  from mnt/  . Space is realy enough.
After I run update script, and all OK

Quote
2- the firmware update file you downloaded is corrupt - check the MD5 checksum
A corrupt file can't be unpacked and it's causing memory overflow error, which might result as "no space"
I unarchive file on USB storage manualy on PC, end after look #1
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on December 09, 2011, 03:58:05 pm


RAMDISK driver initialized: 16 RAM disks of 4096K size 1024 blocksize
loop: loaded (max 8 devices)
nbd: registered device at major 43
Uniform Multi-Platform E-IDE driver Revision: 7.00alpha2
ide: Assuming 50MHz system bus speed for PIO modes; override with idebus=xx
S3C24XX NAND Driver, (c) 2004 Simtec Electronics
s3c2440-nand: mapped registers at c4880000
s3c2440-nand: timing: Tacls 9ns, Twrph0 39ns, Twrph1 9ns
NAND device: Manufacturer ID: 0xec, Chip ID: 0x76 (Samsung NAND 64MiB 3,3V 8-bit)
NAND_ECC_NONE selected by board driver. This is not recommended !!
Scanning device for bad blocks
Bad eraseblock 1797 at 0x01c14000

Creating 3 MTD partitions on "NAND 64MiB 3,3V 8-bit":
0x00000000-0x00030000 : "bootloader"
0x00050000-0x00250000 : "kernel"
0x00250000-0x03ffc000 : "root"
s3c2410-ohci s3c2410-ohci: S3C24XX OHCI
s3c2410-ohci s3c2410-ohci: new USB bus registered, assigned bus number 1
s3c2410-ohci s3c2410-ohci: irq 42, io mem 0x49000000


and empty storage attached

usb 1-1: new full speed USB device using s3c2410-ohci and address 2
scsi0 : SCSI emulation for USB Mass Storage devices
get udisk first!!
hantek1_1   hantek26_1  hantek29_1  hantek3_3   hantek4_16
hantek1_2   hantek28_1  hantek2_1   hantek3_4   hantek4_17
hantek1_3   hantek28_2  hantek30_1  hantek3_5   hantek4_26
hantek1_4   hantek28_3  hantek32_1  hantek3_6

  Vendor: APACER    Model: AH323             Rev: RMAP
  Type:   Direct-Access                      ANSI SCSI revision: 00
SCSI device sda: 7820800 512-byte hdwr sectors (4004 MB)
sda: Write Protect is off
sda: assuming drive cache: write through
SCSI device sda: 7820800 512-byte hdwr sectors (4004 MB)
sda: Write Protect is off
sda: assuming drive cache: write through
 /dev/scsi/host0/bus0/target0/lun0: p4
Attached scsi removable disk sda at scsi0, channel 0, id 0, lun 0


Please press Enter to activate this console.
[root@Tekway-dso /]# df -h
Filesystem                Size      Used Available Use% Mounted on
/dev/root                61.7M     48.0M     13.6M  78% /
none                     30.4M         0     30.4M   0% /tmp
none                     30.4M         0     30.4M   0% /var
/dev/scsi/host0/bus0/target0/lun0/part4      3.7G      0      3.7G   0% /mnt


Whats the hantek1_1... file and where its? USB Storage is empty.


 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ot1 on December 15, 2011, 05:07:36 am
I have a Hantek 5102 with hw1005, sw 110229.  I have made no modifications to it.

I just started using it and have a few questions.

1. The SINGLE SEQ button is translucent just like the RUN button, is it suppose to light up as well?

2. Setting the Verticle resolution knobs (either channel)  without probes connected, I see 200 mv of ripple at 50v,  rotating the knobs to 50mv, I would expect the noise peaks to increase in size, like on my analog scope, however the ripple drops to 1.8 mv, this seems strange to me, is this normal for this type of scope?

3. I was going into various menus and the screen froze, it would not respond to any other button presses, stuck on displaying channel 1 setup.  I powered down and back up attempting to duplicate the problem, pushing various buttons, but not rapidly.  Pressing Channel 2 caused it to freeze again, I rebooted again to unfreeze it.  So now I determined that pushing Channel 1 then Channel 2 and back to Channel 1 then Channel 2 with about 5 seconds in between presses would freeze the screen. The 4th time I rebooted, I pressed Default Setup before it froze, since then I have not been able to duplicate the freeze problem.  Unfortunately, I didnt think of recording any of the settings prior to pressing Default Setup.   :-\ Has anyone else experienced this problem?



 
 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 15, 2011, 11:14:12 pm
I have a Hantek 5102 with hw1005, sw 110229.  I have made no modifications to it.

I just started using it and have a few questions.

1. The SINGLE SEQ button is translucent just like the RUN button, is it suppose to light up as well?

no idea why Hantek decided to made this button translucent, on Tekway is not.
So the answer, as far i know today, it suppose NOT to light up.

This might change, not all shift register (driving LEDs) are in use, same for keyboard. I'm currently soldering
external keyboard to evaluate all open functions ... if any there i will let you/all know.
The reason why i'm doing this is because i recognized that for example the handheld software is
uding doferent keyboard combinations for some buttons, so maybe they exists also on bench model
and can be used for whatsoever (e.g. enable/disable VGA-out on which i'm working these days)


2. Setting the Verticle resolution knobs (either channel)  without probes connected, I see 200 mv of ripple at 50v,  rotating the knobs to 50mv, I would expect the noise peaks to increase in size, like on my analog scope, however the ripple drops to 1.8 mv, this seems strange to me, is this normal for this type of scope?

yes, this is DSO, the level of noise you see is not analog frontend noise but a mix of analog and digital noise.
The digital part is always 1-2 LSB so you see 1-2 "lines" of noise. On 2mV/DIV the analog noise is of couse higher then the digital.

3. I was going into various menus and the screen froze, it would not respond to any other button presses, stuck on displaying channel 1 setup.  I powered down and back up attempting to duplicate the problem, pushing various buttons, but not rapidly.  Pressing Channel 2 caused it to freeze again, I rebooted again to unfreeze it.  So now I determined that pushing Channel 1 then Channel 2 and back to Channel 1 then Channel 2 with about 5 seconds in between presses would freeze the screen. The 4th time I rebooted, I pressed Default Setup before it froze, since then I have not been able to duplicate the freeze problem.  Unfortunately, I didnt think of recording any of the settings prior to pressing Default Setup.   :-\ Has anyone else experienced this problem?

this might happen. The reason for that is that all the default settings are updated from one to another firmware revision.
In principle when installing new firmware all settigns shoudl get deleted, however i saw from time to time that
this not happed on my scopes. The defualt button exists luckily, it helps almost always when the scope
manage to write bullshit into the settings.
Imagine you poveroff while DSO is writing these values - the golden rule - wait 10 seconds until last change in menu/setup
before you power off - this is because the DSO is writing cycling (10 sec after) after each change the settings into NAND.
Why they decided to use NAND no idea, EEPROM would be more secure from read/write max life cycle.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RB1 on December 17, 2011, 03:01:14 am
Hello everyone this is my first post on the forum. Thank you tinhead and everyone else in this thread for all the great information.

I bought a Hantek DSO5102B from HK a few days ago;
model; DSO5102B
sw version; 2.06.03 (111122.0)
hw version; 10070x555583e8
serial; T1G/012 xxxxxx

I'm not sure if I have a newer formware (111122) than anyone else has?

I have not tried to change the firmware.

There still seems to be a couple of bugs when changing horizontal timebase in some modes.

My noise figures seem typical, compared to other people's screenshots.

My unit has a fan built in, it is very queit and not a lot of airflow, which is probably a good setup.

Minor display bug;
press; Acquire->Equ-time
then MemDepth is greyed out like it is disabled, but still allows memdepth selection.

Function bug;
press; Utility->page3->Filter
the filter does NOTHING at all! No change in waveform or amplitude for any filter type setting or any filter Hz setting. This is disappointing, it almost looks like they disabled the filter completely but left the filter menu working!

The filter can be turned on, and then some other options stop working, like it is not possible with filter on to set Memdepth in Acquire!

It is disappointing that the filter does not work, it would have been very nice to be able to add some low-pass filtering to reduce HF noise on the waveform.

TTScope problem;
I use Win98, and have not been able to successfully set up the drivers for TTScope.exe. I put the drivers in c;\windows\system32 but no good. Also windows cannot auto detect the drivers it keeps looking for a driver file but not able to find it, even when I tell the exact location of the file.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 17, 2011, 02:06:53 pm
I'm not sure if I have a newer formware (111122) than anyone else has?

yes, i have 111124.0  and 111202.0. If you don't mind make a backup of the 111122.0 and send me PM
with download link (I'm collecting versions to track changes)

I think i will post 111202.0 today or tommorow.

There still seems to be a couple of bugs when changing horizontal timebase in some modes.

this might be due the firmware version, Hantek/Tekway are working on firmware issues, "unfortunately"
they released few debug firmware versions into production - the 111124.0 is such example.
The 111202.0 not - it is production version where you can clearly see the speed difference.

Minor display bug;
press; Acquire->Equ-time
then MemDepth is greyed out like it is disabled, but still allows memdepth selection.

this is not a bug, these scopes have in Equ time mode only 4k samples, see user manual


Function bug;
press; Utility->page3->Filter
the filter does NOTHING at all! No change in waveform or amplitude for any filter type setting or any filter Hz setting. This is disappointing, it almost looks like they disabled the filter completely but left the filter menu working!

The filter can be turned on, and then some other options stop working, like it is not possible with filter on to set Memdepth in Acquire!

It is disappointing that the filter does not work, it would have been very nice to be able to add some low-pass filtering to reduce HF noise on the waveform.

if you would follow this thread you will see what i wrote about digital filter - the implementation was bad
and HanTekway agreed to re-write it. On the 111202.0 the filter is also disabled as they working on the code,
there is no reason to have it enabled when the code is anyway not working properly.

TTScope problem;
I use Win98, and have not been able to successfully set up the drivers for TTScope.exe. I put the drivers in c;\windows\system32 but no good. Also windows cannot auto detect the drivers it keeps looking for a driver file but not able to find it, even when I tell the exact location of the file.

ehm yeah, Windows 98 ... do you think it is smart to use nearly 14yrs old OS and ask for drivers? For sure i know that in
some environment there is a need to run older Windows version (to have a chance to use other older equipment ),
i worked for years like that with XP now with Vista 32bit (where even my last supported on Win98 hardware is working).

You can try the oldest version of TTScope (only the drivers!), you can find it here http://www.tekwayins.com/pic/TTScope2.0.0.4CH.exe (http://www.tekwayins.com/pic/TTScope2.0.0.4CH.exe)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: clonecrp on December 17, 2011, 06:13:24 pm
Keep up the great work !

Do you have an English version of TTScope for download too.. ?
Please advise...

Seasons Greetings & Thanks! :)
Doug
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 17, 2011, 09:14:48 pm
Doug,

you can use Tekway or Hantek version of TTScope, however currently on Tekway website you will
find only older versions.

Botn English and Chinese versions are actually bi-lingual - so you can install directly as English
or switch later to English.

However, don't expect too much from that software. For remote control - it works slow but it works,
protocol analysis works too, XY more or less (still thinking what this mode can be useful for),
some other features are just piece of crap.

Not because they useless, no, only because someone forgot to change the display resolution.
When you look on www.tekwayins.com (http://www.tekwayins.com) you will find some older Tekway models, with 320x240 display and 4:3 ratio.
The TTScope was designed for these scopes - and was working good.
As Tekway released the new scopes with 7" display they actually planed tp change the software
but after the deal with Hantek this never happened. So part of the software is working with the new hardware
but part not (due wrong ratio, memory deepness).

Actually the USB/LAN protocol is simple, when i find some time i will wrote new software (or driver to allow work with LabView).
Hantek promised to release SDK until begin of December - but they still not ready due high work load (they releasing right
now tons of new models - https://www.eevblog.com/forum/index.php?topic=5778.0 (https://www.eevblog.com/forum/index.php?topic=5778.0) )
This is of course not an excuse but only the truth. The status has been also changed to "Jan 2012"
and if this not happens i will fly to China and buy Hantek ^^



Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: clonecrp on December 17, 2011, 10:03:40 pm
I'm from the US and didn't make the HK Fare this year ... maybe 2012 Asian Sources (my friend wants to go again) ... much money from here in North West Pennsylvania...

I only had a brief look @ the new models in your link ... Hope my Hantek (near 6 Months old) will not get away. The fan and PS Mods were much fun.

Notes ... shure would like a copy of the network PCB ... & oh ! I may have a spare TI 3.3 vdc power supply device here somewhere..


 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 17, 2011, 11:18:08 pm
Hope my Hantek (near 6 Months old) will not get away.

don't worry, they will definitely continue to produce 2 channel models.

It might happen that at some day the B models will get replaced complettly by BM/BMV ( because of the 2Mpoint memeory)
and they will start with BMX (with more sample memory), but these BM/BMV models are in principle still nothing
else than the B models - but just with some gadgets and more sample memory.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 18, 2011, 02:32:50 am
here we go, the latest firmware version - 2.06.3 (111202.0) for Tekway DST1xxxB and Hantek DSO5xxxB models :

http://hotfile.com/dl/137787683/6dc4d32/firmware_111202.0.zip.html (http://hotfile.com/dl/137787683/6dc4d32/firmware_111202.0.zip.html)
(MD5 1b863a38da71b26c3071822985076952 )

Inside you will find 3 folders, each of them contains different update, chose the one you wish to use :

universal_org -
   this is the original firmware with no modifications

universal_125_short -
   this is patched version to fix the FFT Full span bug. It allows following
   sample rates in short memory mode (4ksamples) :

   800ns/DIV - 250MSs instead of 200MSs
   400ns/DIV - 500MSs instead of 400MSs
   200ns/DIV - 1GSs instead of 800MSs
   80ns/DIV - 1GSs instead of 800MSs
   40ns/DIV - 1GSs instead of 800MSs
   20ns/DIV - 1GSs instead of 800MSs

   All other modes are unchanged.


universal_125_long_and_short
   this is patched version which additionally to the changes above allows
   higher sampling rate in long memory mode (40ksamples, 512ksamples, 1Msamples)
   The maximum resulting sampling rate (depends on timebase and memory depth) is :

   500MSs in single channel mode instead of 400MSs
   250MSs in dual channel mode instead of 200MSs - each channel

Note : i give absolutely no warranty that these changes will work on your DSO,
all these changes are unofficial but tested on Tekway hw0 and Hantek hw1007 models i have.

If you don't like these changes or have issues on your DSO please me a PM.
You can of course always install the "universal_org" over the patched versions.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RB1 on December 18, 2011, 03:16:43 am
Thank you very much Tinhead for responding to my post. :)

...yes, i have 111124.0  and 111202.0. If you don't mind make a backup of the 111122.0 and send me PM
with download link (I'm collecting versions to track changes)...

Sorry I don't know how to do that. Is there an easy way to do it without opening the case or needing to solder to the PCB and get a USB/uart?

Minor display bug;
press; Acquire->Equ-time
then MemDepth is greyed out like it is disabled, but still allows memdepth selection.

this is not a bug, these scopes have in Equ time mode only 4k samples, see user manual

Actually the MemDepth can be changed ok in Equ time mode. It seems to have the normal selection 4k 40k 512k 1M. They can be selected ok when in Equ mode, and appear to work. But they are "greyed-out" in appearance so they appear to be disabled (but still work).

Thanks Tinhead for the information on the filter.

Also thank you for the link to the older TTscope.exe, I will try the drivers for that. My workshop PC runs Win98 and needs the older support for parallel ports etc that only Win98 can provide. I also have some high speed Dos software which needs Win98. :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: littlebilly on December 18, 2011, 02:00:12 pm
 :)Hello everybody this is my first post on this forum.
Due to the recommendations here I bought a Hantek DSO5102B from Elec3i a few days ago;
I got it today.
model; DSO5102B
sw version; 2.06.03 (110531.1)
hw version; 10070x555583e8
serial; T1G/005 xxxxxx
Firstly I made a fw backup with the fw3dump tool   file dst1kb_9.99.9_cli(200101.0).up
Secondly I did the 200MHZ Hack via usb Stick with dst1kb_9.99.9_cli_111111.0.up
This was done within ~5 minutes
Now my Systemparameters shows!!!
model; DSO5202B      ? Hack well done
sw version; 2.06.03 (110531.1)
hw version; 10070x555583e8
serial; T1G/005 xxxxxx
Now my question? Which software upgrade would you recommend?
Thanks a lot for your help.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 18, 2011, 03:19:31 pm
Thank you very much Tinhead for responding to my post. :)

...yes, i have 111124.0  and 111202.0. If you don't mind make a backup of the 111122.0 and send me PM
with download link (I'm collecting versions to track changes)...

Sorry I don't know how to do that. Is there an easy way to do it without opening the case or needing to solder to the PCB and get a USB/uart?

i have send you PM with description how to make backup

My workshop PC runs Win98 and needs the older support for parallel ports etc that only Win98 can provide. I also have some high speed Dos software which needs Win98. :)

yeah, parallel port ... i'm using since years HP nw8440 in my office which supports parallel port over dockng station :)


Now my question? Which software upgrade would you recommend?
Thanks a lot for your help.

you can try each of them i posted here above because you can always run another firmware update
just over the installed firmware.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Kampfwurst on December 19, 2011, 08:20:37 pm
Hello

One Question.
I use TTScope but is there a other Software available ?? The TTScope is not user-friendly ;_)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: flatv on December 27, 2011, 10:52:33 pm
Hi all,
This is my first post here. I skimmed this tread with 68 (!) pages and I can find it very interesting.
My intention is to buy a Hantek DSO5062B (60Mhz), and modify it to 200 Mhz. It is not very clear for me if this thing is possible. I've seeing the mod for Hantek at 100 Mhz, but not for this one. It can be done, can I use the same way?
Owon 25Mhz can be modded? Can somebody share his experience?
Thanks
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: possejdawg on December 28, 2011, 12:14:53 am
Hi all,
This is my first post here. I skimmed this tread with 68 (!) pages and I can find it very interesting.
Me too!

My intention is to buy a Hantek DSO5062B (60Mhz), I've seeing the mod for Hantek at 100 Mhz, but not for this one. It can be done, can I use the same way?
Based one of the posts in the middle, Hardware in the 60mhz = 100mhz = 200mhz (almost). All can be updated through TTL level UART connection in the same manner. (Instructions in first post). The input stage has a few resistor and compensation differences for the various units, so the 60mhz model only gets up to around 185mhz bandwidth.
However, changing these hardware components will effect the calibration of the unit. And you will then need to recalibrate the unit (Link in the 1st post)

Owon 25Mhz can be modded? Can somebody share his experience?

Probably should be in a different thread (not to be a dick, but...your at page 68, no one else that is interested and looking would ever find it)... This one is pretty full of Hantekway questions anyways.


Note: 'latest' firmware links on the first post could be updated, whenever is convenient.

I just ordered the 100Mhz version recently over the comparative (and slightly cheaper) Rigol DS1102E based on it running linux and being able to update / improve the hardware to do more than advertised. However, I don't think I'll molest open it right away to get to the UART until it's a ways into the warranty (or the SDK is released and labview connectivity is closer to reality), whichever comes first...

Thanks to all the positive contributors in these forums for sharing your knowledge and experience in regard to this equipment!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 28, 2011, 01:09:40 am

Note: 'latest' firmware links on the first post could be updated, whenever is convenient.

yeah, good point. Did it now.


I just ordered the 100Mhz version recently over the comparative (and slightly cheaper) Rigol DS1102E based on it running linux and being able to update / improve the hardware to do more than advertised. However, I don't think I'll molest open it right away to get to the UART until it's a ways into the warranty (or the SDK is released and labview connectivity is closer to reality), whichever comes first...

well, there are actually 3 ways to hack the DSO:
- over UART or JTAG dump(hack and restore) - where both req. to open the unit. Warranty, ehm, i think
  as EE is allowed to replace broken fuse ?!

- over USB as firmware update - i principle you can use on of the USB hack which i posted before, add in the root file
  named "special" and  the model will be not checked (like e.g. the latest firmware which is model independant because
  it is using the "special" file).  All such hack file (well firmware update file) have to do is to mv /dst1102b /dst1202b
  in your case. The logo will remain the same, but 200MHz features will get enabled after reboot.

- over USB as hidden PC<-> DSO communication functionality : hack itself is currently not tested, but it should work.
 The firmware as you know is allowing to communicate with PC, the protocol is simple (just look the fw disassembly)

 # each stabdard message begins with 0x53 (ASCII 'S') - you can find all about in "DoNormalProtocol" and subprocedures
 # each debug (hidden protocol) message begins with 0x43 (ACSII 'C') - you can find all about in "DoDebugProtocol" and subprocedures
 # messages are frmated as following (example run/stop key)


PC -> Osc:  53 0400 13 1301 7e

   0x53:  standard message identifier
   0x0400:  length of the message 0004 (Little-Endian) - that's total length - 3
   0x13:   type of the message (here keyboard use)
   0x1301: keycode 0x113 (Run/Stop key) (Little-Endian)
   0x7e:   Checksum

Checksum is very simple, just add all bytes together (starting from 0x53 and ending before checksum byte),
the LSB byte is the checksum

The hack itself could be probably done over debug kind of message, like (here for converting 100MHz model to 200MHz)
43 18 00 11 6D 76 20 2F 64 73 74 31 31 30 32 62 20 2F 64 73 74 31 32 30 32 62 D0

which is

0x43 start debug protocol
0x1800 length
0x11 start "PcUartRemoteCtrl" procedure (which is pasting the line below and executing on shell)
0x 6D 76 20 2F 64 73 74 31 31 30 32 62 20 2F 64 73 74 31 32 30 32 62 - that's just mv /dst1102b /dst1202b
0xD0 - checksum

As said above, this hack is not yet tested. The communication with DSO itself works
(as tested by someone else - look here http://www.mikrocontroller.net/topic/205820?page=3#2358106 (http://www.mikrocontroller.net/topic/205820?page=3#2358106) )
the 0x43 debug things are just "last" findings (well, i didn't found time in last 3 months to check them ...)

This protocol seems to be still valid even for latest Hantek/Tekway models, so i think it is worth to check
it in detail. Sure, SDK will be available in Januar (that's the latest bad news ...) but i doubt that HanTekway
will say us anything about the debug protocol.

EDIT: i just coded few lines in VB and can confirm that this hack works, the console showed to me

rec shell code=mv /dst1102b /dst1202b...ok
<PcUartSendBuf> len = 0..
send shell msg ok..filesize=0..sum=0


and indeed the file /dst1102b has been renamed to /dst1202b (and of course after reboot DSO is acting as 200MHz model).

The code i tested is for LAN-enabled DSO, but the USB and LAN protocol are exact the same, so someone here can maybe
code it to work over USB? (guys, pls don't let me do the work alone ...)

Code: [Select]
Dim HackBytes As [Byte]() = {&H43, &H18, &H0, &H11, &H6D, &H76, &H20, &H2F, &H64, &H73, &H74, &H31,
&H31, &H30, &H32, &H62, &H20, &H2F, &H64, &H73, &H74, &H31, &H32, &H30, &H32, &H62, &HD0}

DSOIP = IPAddress.Parse("1.2.3.4")
DSOPORT = "9966"
udpClient.Connect(DSOIP , DSOPORT )
udpClient.Send(HackBytes , HackBytes.Length)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: patz on December 30, 2011, 02:23:21 pm
Hi,

I've developed a small application that enables 200 MHz mode using the debug protocol command over USB. It seems to work fine. With the application, you can turn the scope into the 200 MHz version over USB without opening the case or soldering. Currently it works on linux only (as it uses libusb), but if someone is interested, I could create a windows version and upload it here.

Patrick
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: clonecrp on December 30, 2011, 03:25:01 pm
D I N O M I T E   !

When will you have a Windows XP/etc version available.

Shure would like a copy !

Please advise...

Thanks & Happy New Year !

Doug
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: patz on December 30, 2011, 04:43:42 pm
It should be ready by tomorrow evening if the windows USB api is working as expected.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 31, 2011, 12:09:23 am
It should be ready by tomorrow evening if the windows USB api is working as expected.

nice .. but take your time. I recognized today that some of the firmware i have (actually full backups of other ppl DSOs)
have different endpoints that, so EPIN might be $81, $82 or $83 and EPOUT $1, $2 or $3 - and that's in few combinations.

So it would make sense to not use numbers but to scan first descriptors for endpoints numbers/address.

Maybe is a good idea to echo the model number/name into logotype and logotype.dis additionally to the
hack via mv dstxxx. That would make it perfect, a list with "target models", mv /whatevermodel /targetmodel
and echo manufacturer and/or manufacturer_model into ogotype/logotype.dis :)

Btw, libusb on Windows, it works fine with filter driver only but of course you need to call once
Code: [Select]
usb_set_configuration(handle,1)
usb_claim_interface(handle,0)
before you do usb_bulk_write.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: patz on December 31, 2011, 10:55:01 am
Hi,

I'm planning to communicate through the official Hantekway Windows driver, so endpoints etc should not be a problem!

libusb on Windows works, but I do not want my application to need a seperate driver to be installed.

I'd like to do the logotype tweaks too, but I read somewhere that not every firmware contains every boot logo. Also, I don't have a list of all model identifiers etc., so for now the app will just do the mv command and reboot the scope. Maybe I'll post the source code so that guys with more Hantekway experience can extend it.

With the USB protocol known, it would be a nice idea to develop an own TTscope replacement using Qt or another cross platform GUI framework. It would be awesome to use the scope with Mac and Linux machines.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: patz on December 31, 2011, 01:39:24 pm
Hi,

it works! Communication is done through the official USB driver.

I attached the first version as EXE file. Use at your own risk!

(https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=18664)

Some feedback if it is working would be nice. Tested with Hantek DSO5102B.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 31, 2011, 02:47:39 pm
i have tested it with 4 different root fs / firmware versions (DSO5xxxB, DST1xxxB scopes) and it works so
far good (of course as long the scope is dst1102b).


The reboot is working too, however ppl need to know that during reboot (when the USB cable still connected) the
SoC will recognize itself as unknown device (actualy not unknown, but the boot loader is enumerating USB too)
So this means USB cable need to be reconnected after reboot.


It does work partialy on DSO1xxxB/S handhelds too, they have dirrenet root fs/kernel (2.6.30.4)
and the firmware is for some reason not handling properly something ( i guess the successful msg).
This means the second command will be not executed anymore. Sure these Hantek handhelds
are not part of this thread but as they based on what will be on the bench BM/BMV scopes (they will get new root fs/kernel/drivers)
it might be interessting to trace what's different. Any thought to share the source?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: patz on December 31, 2011, 03:38:00 pm
The (messy, ugly) source code is attached. (VC2010)

The scope response messages are not evaluated in the current version.

I have added a notice to re-connect the scope afterwards and updated the binary in my above post.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: a-nebel on December 31, 2011, 04:12:39 pm
hello patz,
i did the upgrade and it works fine.
there was no problem during the procedure and ttscope recognizes my hantek dso 5102 as a 5202.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 31, 2011, 08:46:17 pm
The (messy, ugly) source code is attached. (VC2010)

thanks ... that was a good idea to work with the org. driver directly,
for some reason i don't like LibUSB on Windows.

I extended your code to do some additionaal things, however something was (even with sleep) still not
working as expected, especialy when more than one command or more than one read backs are send
so i started to debuger and loked a bit more detailed what TTScope is doing.

There are 4 Vendor IOCTL's implemented into the driver

0x222019 is ResetPipe (called once at the begin of TTScope communication),
0x222012 is BULK READ with 64k buffer
0x22201D is AbortPipe(called once at the end of TTScope communication)
0x22200D is BULK_WRITE

ResetPipe is called once at connect, AbortPipe at disconnect.

TTScope is running two threads, one is doing read the antoher one write.
For each read the CreateFile/Read/CloseHandle sequence is executed, for
each write CreateFile/Write/CloseHandle. The write starts before read is closing handle
and vice versa, the first read is called before write was executed (weird but it make sense to have always some data in queue)

When you run TTScope in idle mode you can clreay see that the after each write the data coming back is
looking like this (small before big buffer):

(https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=18625)

when you run your code (or whatever single thread code) the data looks different (big before small buffer):

(https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=18627)

For the current hack this not really matter, it is good enough to do Sleep or full sequence
(CreateFile/Write/Close->CreateFile/Read/Close) twice, however for custom PC software it seems
to be necessary to work with two threads in similar way as TTScope is doing.
Without the multithreading the reading of multiple buffers (like screenshot or waveform capture)
is stopping too early (actually freezing because there is no data in buffer) as the scope is stopping
to send data after the big buffer has been send.

EDIT: attached latest TTScope decompilation, not perfect but good enough to see how some things are working
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 02, 2012, 11:51:12 am
btw, on Hantek website there is new TTScope version - it does support LAN (even if B models have no LAN "yet"
and BM/BMV not yet released). I didn't saw any other major changes, still not that good software
(especialy the fact that the software is reading back ever second DSO configuration but not doing anything with that)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: patz on January 02, 2012, 09:14:51 pm
Hi,

thanks for your research.
Maybe you can post your updated source code.
Or, if the hack is working for everyone, link your/my binary in the first post so people do not have to open their scope's cases.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Kampfwurst on January 04, 2012, 03:19:27 pm
Hello

I have a DSO5102B HW 10070 SW 111124.0. Can I also use the USB Updater?

Greets Christoph
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: patz on January 04, 2012, 03:25:18 pm
Which USB adapter?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 04, 2012, 04:44:04 pm
Maybe you can post your updated source code.
Or, if the hack is working for everyone, link your/my binary in the first post so people do not have to open their scope's cases.

i'm not working on hack but on custom PC software (or actually debuging the communication protocol first).

The code i tested was nothing special, just closehandle and reopen before next comand (so reboot) was called.
However, it works as already said above with simple Sleep before reboot will get calleds, so easy to change.

This is not 100% clean impelementation, but it does not matter for simple hack (just bw without logo).
For more advanced hack (so with logo etc.) it matters, but i would say for now it's enough for most ppl.


Hello

I have a DSO5102B HW 10070 SW 111124.0. Can I also use the USB Updater?

Greets Christoph

yes you can
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: patz on January 04, 2012, 05:19:23 pm
For a custom PC software, I would stick with libusb as it seems to provide 100% stable communication with the scope. And it is cross platform! In my opinion, platform dependency is a major problem of the TTScope application.

I think for a PC software it is acceptable to install the libusb driver. I just wanted to use the official driver because a simple 40 kb one-button "Hack the scope" app should not require a driver to be installed.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 04, 2012, 06:01:45 pm
For a custom PC software, I would stick with libusb ...

oh well, that's maybe 10 lines of code to switch between generic or libusb as driver, the rest of the code (the actual DSO protocol)
remains the same. I'm getting already crazy with USB sniffing, only the DSO status is 213byte long, and
i decoded/documented until now only 42bytes ...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: patz on January 04, 2012, 06:07:07 pm
Okay. Can't this be derived from the TTScope decompilation?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 04, 2012, 06:37:40 pm
Okay. Can't this be derived from the TTScope decompilation?

well, when the software would work as supose to work then i would not spend time on
protocol debuging ... but the software is definitely not working properly.
The reason ( i remember i posted it already) is very simple, TTScope was designed for the first
Tekway DSO model - DST1xxx (not B ). These scopes are unsing 320x240 display with 10x8 DIVs
and 2500kpoint memory (no long memory available)

The current scopes are 20 virtual (19 visible) x 10 (9visible) DIVs, with 4k to 2Mpoint memory
and 640x480/800x480 reslution ...

TTScope (when you look deep inside you will cry) is not completly customized for the currenty models,
just run e.g. XY Sheet - you will see 8x4 DIVs - how the hell Hantek got that value? No idea, but when you click on run
icon you will see the waveform as on DSO but the timebase/grid is not matching.

So before i start to analyze such TTScope code like that :

Code: [Select]
signed __int64 __cdecl CalcVoltBase(signed int a1, int a2)
{
  signed int v2; // ecx@1
  signed __int64 result; // qax@2
  float v4; // [sp+Ch] [bp+4h]@3

  v2 = a1;
  if ( a1 == 1 )
  {
    result = 2 * a2;
  }
  else
  {
    v4 = 2.5;
    if ( v2 % 3 != 2 )
      v4 = 2.0;
    result = (signed __int64)((double)CalcVoltBase(v2 - 1, a2) * v4);
  }
  return result;
}

double __cdecl CalcVoltBaseEx(signed int a1, int a2, int a3, int a4)
{
  signed int v4; // ecx@1
  double result; // st7@3
  int v6; // edi@7
  int v7; // eax@8
  float v8; // [sp+8h] [bp+4h]@5
  float v9; // [sp+10h] [bp+Ch]@8

  v4 = a1;
  if ( a1 == 1 )
  {
    if ( a4 == 1000 )
    {
      *(_DWORD *)a2 = 1;
      CString::Format(a3, "%s", dword_10012174);
      result = 2.0;
    }
    else
    {
      *(_DWORD *)a2 = 2;
      CString::Format(a3, "%s", dword_10012178);
      result = (double)(2 * a4);
    }
  }
  else
  {
    v8 = 2.5;
    if ( v4 % 3 != 2 )
      v8 = 2.0;
    v6 = a3;
    result = CalcVoltBaseEx(v4 - 1, a2, a3, a4) * v8;
    if ( result >= 1000.0 )
    {
      v7 = *(_DWORD *)a2 - 1;
      *(_DWORD *)a2 = v7;
      v9 = result * 0.001;
      CString::Format(v6, "%s", dword_10012170[v7]);
      result = v9;
    }
  }
  return result;
}

and hope the code is working with current models (which is in most case not really, additionaly many current model
features are missing in TTScope ...) is maybe smarter to use USB sniffer,
push some buttons and analyze the USB data to get something like that:

byte 001 - 53 msg header
byte 002 - D2  00 msg length
byte 003 -    ^
byte 004 - 81 msg type (see "types", here 81 = "DSO echo data" as answer to "01" = "get DSO echo data")


byte 005 - 01 ch1 channel on/off - "00" off/hidden, "01" on/visible
byte 006 - 02 ch1 volt/div position - 00 = lovest position, 0A highest position, e.g. when x 1 00=2mV/DIV and  0A = 5V/DIV
byte 007 - 00 ch1 coupling - 00 = DC, 01 = AC, 02 = GND
byte 008 - 00 ch1 bw limit - "00" off, "01" 20MHz bw on
byte 009 - 00 ch1 volt/div fine/coarse - "00" = "coarse", "01" = "fine"
byte 010 - 01 ch1 probe multiplier - "00" = x1, "01" = x10, "02" = x100, "03" = x1000
byte 011 - 00 ch1 invert on/off - "00" = invert off, "01" = invert on
byte 012 - 00 ch1 volt fine position - max 32 steps with autozero (when next coarse level reached)
      if changing between x2 voltage levels (weird heh, when changing from 1V/DIV to 2V/DIV
      the ratio is x2, when changing from 2V/DIV to 5/DIV ratio is 2.5) and max 75 steps with
      autozero (when next coarse level reached) if changing between x2.5 voltage levels.
      When increasing value from "00" = current coarse level, then "01","02" and so on
      up to "31"=49step or "4A"=74step (see above why!) and reseting to "00" when
      next coarse level reached.

byte 013 - 00 00 ch1 volt position (Little-Endian) - Max position = (+-)25.0DIV, each DIV = 25 steps.
       When increasing (pos "+") value is increasing from 00 00 to max F4 01 (500)
       When decreasing )pos "-") value is decreasing from FF FF to max 0C FE (65036 which mean 65536-65036=500)
byte 014 -    ^


The TTScope decompilation might be useful for some things, that's for sure, but as long i can
track back the USB dumps results to "taken action" no need to send time on guessing the decompilation.

A better source as TTScope is of course the ARM disassembly itself, but still there is some additional effort necessary
to track back things... but even in ARM code (the firmware itself !!) there are some traps :

- byte 179 - FFT algo - "00" = "hanning", "01" = flatop", "02" = "rectangle", "00" = "barlett", "01" = "blackman" ???
So why 00 and 01 are used twice in ARM code? The answer is simple, originaly these DSOs has been developed
with only 3 FFTs algos, later 2 algos has been added but the developer forgot to add 2 additional values into
"DSO echo/status" code ...


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: joph on January 05, 2012, 03:22:37 pm
@patz:

Is it possible to add an option to your software which allows me to change back to the 1062b and not only one way to 1202b?

best regards
Johannes
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: patz on January 05, 2012, 03:37:10 pm
@patz:

Is it possible to add an option to your software which allows me to change back to the 1062b and not only one way to 1202b?

best regards
Johannes

Hi,

should be possible, I'll have a look at it ASAP.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: joph on January 05, 2012, 09:54:08 pm
Thank You!

best regards
Johannes
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sobomax on January 13, 2012, 08:32:21 am
Oh, tinhead, the thing you did with USB protocol is just amazing. Now you just need to figure our the way to pass information (stdout and stderr) back to host so you have useable shell OOB and all us hantek owner would applaude you!

I am hacking mine now, trying to get usb stick up and running. Got one 10mbps lying around for 6 years or so. Would be nice to put it to some meaningful use now, especially considering that new TTscope is expected to support IP.

Keep doing man. :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sobomax on January 14, 2012, 12:52:19 am
OMG, with little bit of tinkering got USB ethernet driver loading and sensing my stick. I should be pretty close to get the shell on this thing over IP. :)

Module                  Size  Used by
rtl8150 10816 0 - Live 0xbf02a000
dso_buzzer 2368 2 - Live 0xbf028000
dso_uart 1920 0 - Live 0xbf026000
dso_spi 5864 2 - Live 0xbf023000
dso_i2c 13908 2 - Live 0xbf01e000
dso_fpga 4176 2 - Live 0xbf01b000

<6>drivers/usb/net/rtl8150.c: rtl8150 based usb-ethernet driver v0.6.2 (2004/08/27)
<6>usbcore: registered new driver rtl8150
<6>drivers/usb/net/rtl8150.c: eth%d: rtl8150 is detected

eth0      Link encap:Ethernet  HWaddr 00:10:60:02:97:57
          inet addr:192.168.1.229  Bcast:192.168.1.255  Mask:255.255.255.0
          UP BROADCAST MULTICAST  MTU:1540  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

We are practically there.

Pings well. :))))

[sobomax@pioneer ~/projects/Hantek]$ ping 192.168.1.229
PING 192.168.1.229 (192.168.1.229): 56 data bytes
64 bytes from 192.168.1.229: icmp_seq=0 ttl=64 time=3.263 ms
64 bytes from 192.168.1.229: icmp_seq=1 ttl=64 time=1.838 ms
^C
--- 192.168.1.229 ping statistics ---
2 packets transmitted, 2 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 1.838/2.550/3.263/0.713 ms
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sobomax on January 14, 2012, 05:16:22 am
 8)

Here we go, baby:

[sobomax@pioneer ~/projects/Hantek]$ telnet 192.168.1.229
Trying 192.168.1.229...
Connected to 192.168.1.229.
Escape character is '^]'.

Tekway-dso login: root
[root@Tekway-dso /]#

My experimental setup, as you can see the scope runs 4-port generic hub just fine.

(http://sobomax.sippysoft.com/hantek_usb_ethernet.jpg)

I'll be posting instructions and some .ko's in the next few days. Now just need to figure out how to make this setup sustain reboot.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: patz on January 14, 2012, 09:23:39 am
Great work!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 14, 2012, 11:58:10 am
I'll be posting instructions and some .ko's in the next few days.
yeah, you asked a day or two ago about kernel version of these DSOs, it is 2.6.13, these new models (which will support LAN)
will have 2.6.30.4. You can already see these hardcoded values in current firmware.


Now just need to figure out how to make this setup sustain reboot.

as this is usb stick the best would be probably to write own shel script which will setup network address and the int up,
and this script can be then started by rcS (always) or usb.agent (only after stick inserted)



Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sobomax on January 14, 2012, 09:55:07 pm
OK, so everybody who wants to get network in their scope for like $5 or so read up. :)

Below is the link to a package that would load all USB network drivers I could find in 2.6.13 kernel. This consists of:

catc.ko
kaweth.ko
pegasus.ko
rtl8150.ko
usbnet.ko
zd1201.ko

I have only tested with RTL8150 and it works well, except taking out the stick while the network is running hangs the scope. I suspect the kernel got some issue with that, but not having access to the console it's difficult to tell. Not a big deal to me, as I plan on having this stick permanently attached to my unit.

CAUTION! As usually play at your own risk and think 10 times before making any permanent changes to the startup sequence. It is way too easy to brick the scope and if you do so make sure you can handle this situation and put no blame on me. And don't expect me to help you to fix it either. Sorry. Check posts of tinhead and others in this topic about low-level flashing procedures, you may need to use those to get your unit back to working condition.

The package itself is pretty safe to use. It WON'T do any permanent changes to the startup scripts, so if something goes wrong just power it off and then back on again and it should come back.

What it does is loading all above mentioned drives and starts a small script that monitors when the eth0 interface appears in the system and configures it up with the IP of 192.168.1.229 and netmask 255.255.255.0. You just unzip the file onto empty USB stick, attach the stick to the scope, make sure it has been picked up (you should see "floppy" icon going active when it happens) and follow normal firmware upgrade sequence. If everything goes fine you should see the message about upgrade being successfully completed prompting you to restart the scope. DO NOT RESTART THE SCOPE JUST YET. Remove the USB stick and plug the USB network adapter instead. If you are lucky and your network adapter is in the supported list you should be able to ping the unit in the 1-2 seconds and telnet to it. Username is root and the password is empty.

Now, assuming that everything goes nice and well, and you are in the scope shell do the following to make this setup permanent (see my note above). I really suggest you do some stability testing before you do so to make sure your scope won't stuck in the infinity reboot loop or hang solidly right after boot.

[root@Tekway-dso /]# mv /tmp/nethack.sh /
[root@Tekway-dso /]# vi /etc/init.d/rcS

Add the following line (bold&red) somewhere close to the end of the script, but before the /dso.exe line. Mine looks like the following:

Quote
/bin/hostname -F /etc/sysconfig/HOSTNAME
/nethack.sh start ; sleep 1

/dso.exe

IP address and netmask can be changed by editing nethack.sh. You can also add line to add defauly gateway if you feel like it.

I am planning to registering Github repo later today and tomorrow and dropping my 2.6.13 tree with some instructions there. It was not easy to find that particular kernel, the mini2440 guys have moved along to newer kernels long time ago and do not distribute this old crap. It also needed few merges from later 2.6.x to get it compiling with the newest gcc 4.6. I am sure other people will be able to compile other great stuff, like for example USB UART drivers etc.

I have only tested it with DSO5102B (modded to feel like DSO5202B), with latest 2.06.3 (111226.1), but it should work with any reasonably latest firmwares. It could also work with the tekway units or would need minimal changes to get it working there.

Happy hacking and please report any successes/failures here! :)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sobomax on January 14, 2012, 09:58:06 pm
P.S. Another interesting approach is to get the usbnet driver working with the device USB connector (one on the back). Then one just needs USB cable to communicate to the scope by IP.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 16, 2012, 11:03:40 am
there is new firmware available on Hantek website 2.06.3(111226.1) , however it seems to have a new small bug,
the language setting (in case you use something but not english) didn't work properly (after reboot always english)

HanTekway fixed that issue in meantime, here is the newest version 2.06.3(120112.1)

http://hotfile.com/dl/142100356/1d87527/2.06.3_120112.1.zip.html (http://hotfile.com/dl/142100356/1d87527/2.06.3_120112.1.zip.html)
(MD5 371c00942b43b88df49eb23ca4ede99d)

Interessting are the two new features in this version:

- coarse/fine for horizontal position, "fine" is what you have now, coarse is doing bigger steps (1DIV),
  together with dual window and markes a very useful feature

- avg (4/8/16) mode for long memory - however due the maximum of available memory only for 40kpoints
  (due the DPO-like tech this scope must store all waveforms, not just do avg. like e.g. Rigol).
  This was a requested by users feature and it seems to work as expected.

The attached firmware is working with all Tekway DST1xxxB and Hantek DSO5xxxBxx models.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: shebu18 on January 20, 2012, 11:15:38 am
@tinhead: Hello, what were the problems you encountered using the hantek DSO5***? I am between the rigol 1052e and the hantek 5062b. Right now the only problem is the seller of the hantek, it does not look very confident. I worried about the warranty if anything should happen to the scope.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 20, 2012, 12:13:07 pm
@tinhead: Hello, what were the problems you encountered using the hantek DSO5***?

oh well, 99,9% of all these problems are today history or resolved (like a bit hot PSU)
therefore no need to talk about them anymore.


Right now the only problem is the seller of the hantek, it does not look very confident. I worried about the warranty if anything should happen to the scope.

You can buy Tekway DST1062B or Hantek DSO5062B - they equal.

There are a lot of trustful sellers: silcon.cz, pinsonne-elektronik.de, elec3i.com or here in forum aghp https://www.eevblog.com/forum/index.php?action=profile;u=10637 (https://www.eevblog.com/forum/index.php?action=profile;u=10637)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on January 20, 2012, 08:34:36 pm
Hi,tinhead !

What the option in new firmware "Bode asistant" (open|close, default- close, not changeable ) and "Video" (gray, not active) ?  :o
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 21, 2012, 12:48:00 am
Hi,tinhead !

What the option in new firmware "Bode asistant" (open|close, default- close, not changeable ) and "Video" (gray, not active) ?  :o

Hi Walt,

Bode assistant see here http://en.wikipedia.org/wiki/Bode_plot (http://en.wikipedia.org/wiki/Bode_plot)

You need to know that the plot works (actually not plot but measured values) only when both channels are enabled and:
no avarage sampling, no equivalent sampling, no FFT mode, no XY mode enabled (not sure if i missed something)

So in principle when you apply two signals and trigger with autosetup you will be able to select "open" in bode assistant,
then you will have to click the mulitfunction knob V0


The video is grayed out, the reason is a bit deeper:
- you need linux kernel 2.6.30.4 installed and not 2.6.13, this is what you will find on BM/BMV models (and BV handheld models)
- you need the "V" license, a BM model will be able to play videos but will have no license so this wil stay grayed out

Kernel check can be hacked, but then video will be still not played due missing things in 2.6.13 kernel and missing files
in root fs. License is not a big deal, i reversed already all licensing models from Tekway and Hantek, means
i can already change B models to BM or BMV, or even enable things which are still not implemented nor even public known
(like touch, DDS, DMM, LA which you will find in 4 channel models). Many of these licensing options are of course
only working if the hardware us able to do it, however some (like video player) are only kernel/root fs dependant.

I do have already BMV model root fs and kernel, but an early version (therefore i don't want to share),
hope soon the official production version of  BM/BMV models will be available and hope someone will make/share
root fs/kernel backup with us. Then i will definitely prepare an complex but easy to do firmware update
to replace root fs/kernel on the older models to be updated for next 2 yrs.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: clonecrp on January 22, 2012, 03:16:45 pm
sobomax :

I think I have looked everywhere but I can't seem to find your network adapter supported list. :(

Also, any code updates ?

Some advice please.

Please advise..
Thanks!
Douglas
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: djeans on January 23, 2012, 09:24:50 pm
Hi all,

maybe it's not the right place to post, but I do not where else:
my Tekway dst1062b hangs (latest firmware). After restarting it still hangs and the screen come up, but the device is not reacting on any key or so, the UI is there, both channels activated, RUN/STOP is green but not reacting at all. and idea how to resovle this (before connection to UART again...)

Thanks
D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 23, 2012, 09:33:44 pm
Hi all,

maybe it's not the right place to post, but I do not where else:
my Tekway dst1062b hangs (latest firmware). After restarting it still hangs and the screen come up, but the device is not reacting on any key or so, the UI is there, both channels activated, RUN/STOP is green but not reacting at all. and idea how to resovle this (before connection to UART again...)

Thanks
D

so even default button is not reacting right? Well try this app

http://www.mikrocontroller.net/attachment/130963/DSOReset.zip (http://www.mikrocontroller.net/attachment/130963/DSOReset.zip)

download, conect boot DSO, connect via USB cable to PC (if necessary install the pc sw) and run this app - it will reset
(actualy delete the current) configuration. The scope should reboot during this, if not after say 5 seconds reboot
it manually (if you wait 10sec. the broken config will get again written to NAND so scope will still not run after reboot - in
such case try again ...)

If this didn't work (for whatsoever reason) you can only try via UART, probably you will have to delete run* and set* files
in /param/sav directory and reboot.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: djeans on January 23, 2012, 09:47:07 pm
HI Tinhead,

Thanks !

I tried it in the meanwhile via UART. restarted ./dso.exe all the time and pressed "default" button until it accepts it. once accepted, I tried to change in some other menu options. once it worked without problems, I restarted the device and it worked. Next time when this happens I will try to reset DSOreset.zip.

You was right, there was something wrong with the params as it seems. However, I still like it :) also it can't play youScope fluently...

Thank you very much for your help.

D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: djeans on January 23, 2012, 11:05:59 pm
 :o me again.  Sorry to missuse the thread. But might interest others due to a bug (?) too.

it happenend again: during analyzing an audio signal (headphone) and setting mem depth and SEC/DIV. anyone else with the same problem?

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 23, 2012, 11:20:51 pm
Sorry to missuse the thread.

this thread is not only about hack, it is general thread about these DSOs

anyone else with the same problem?

so far no issues on my scope.

Maybe one thing, when ou reboot your scope, everything works again ? Then it looks like the dso.exe is just killing itself
for some reason (with some luck you will even see some error log on the uart/shell)

This can be everythig, starting from firmware bug up to hardware issue.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: djeans on January 23, 2012, 11:52:30 pm
Quote
Maybe one thing, when ou reboot your scope, everything works again ?
no, it does not work unless I remove the params. then it boots correctly. the DSOreboot tool does not work for me, tried a few times... 

but all other stuff seems to work well like video signal messureing. that's really odd...

since I own the DSO few days I am thinking about to ship back. but then I need to revert all the changes (-> 200mhz).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 24, 2012, 07:44:44 am
Quote
Maybe one thing, when ou reboot your scope, everything works again ?
no, it does not work unless I remove the params. then it boots correctly. the DSOreboot tool does not work for me, tried a few times... 

but all other stuff seems to work well like video signal messureing. that's really odd...

since I own the DSO few days I am thinking about to ship back. but then I need to revert all the changes (-> 200mhz).

before you send back try following:
- kill dso.exe
- recheck if you did everything properly during hack - all names/strings properly
- remove the /param/sav/run* and /param/sav/udisk/run*
- run dso.exe
- run once again firmware update
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bytraper on January 27, 2012, 01:54:18 am
I've been following the thread, I've got a really early DSO1102B handheld scope with firmware 2.01.1

None of the hacked firmware I can find will work with it! It all saysx for 2.5-2.6 etc.
I got it from China when they were first released. Can anybody run me through how to hack my device to 200mhz or point me to a link?

Even Hantek doesn't have firmware on their page so I can't update the device.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 27, 2012, 03:11:13 am
I've been following the thread, I've got a really early DSO1102B handheld scope with firmware 2.01.1

None of the hacked firmware I can find will work with it! It all saysx for 2.5-2.6 etc.
I got it from China when they were first released. Can anybody run me through how to hack my device to 200mhz or point me to a link?

Even Hantek doesn't have firmware on their page so I can't update the device.

i should probably start separate thread about the new Hantek handhelds (DSO1xxxB/BV/S)
EDIT: i updated now the first post in this thread, so ppl who have such handhelds will find immediately
some informatios before they spend like you a day or two to recognize that handheld and bench are
in principle similar but different enought to make the hacks more complex (from model point of view)

Anyway, they based on the bench models sp let's short introduce them :

Available models :
DSO1062B / BV / S
DSO1102B / BV / S
DSO1202B / BV / S

B - are standard models, BV have SD card and video player, S are with isolated channels.
What i got until now (and of course hacked, disassembled, documented, even draw part of schematics ...) are
the B and BV models.

The hardware is very similar to bench models, however they have of course some additions like DMM (FS9922-DMM4 chip),
power management (MSP430F2011), different i/o header, additional unpopulated header for BT2UART modules
(CSR Bluetooth Chip Solution , ebay for Bluetooth UART - they can be used as third uart over BT, i do have
these modules but didn't found time to test it ...)

They do have already LAN - but it seems to be option and not everbody is selling them with LAN,
in case you bought without LAN it is easy to populate the missing parts - all you need
is DM9000EP chip + magnetics and RJ45 jack - and small change in EEPROM licensing (see below).
You don't need 25MHz quarz for DM9000EP as on handheld LAN chip is clocked by FPGA
(on bench hw1007 seems to be not that case)


Display (AT056TN53 V. 1) have 640x480 resolution, 15 x 8.5DIV, menu popus on the bottom, this is te only resolution
(not like on bench model where 20 or 16div possible).

FPGA is the same as in bench DSO, but the FPGA design is different and already much better - these handhelds
have less jitter than the bench models, i like them already.

All current available models have max 1Mpoint memory, however the firmware support already TODAY 2Mpoint,
all you need is new SRAM chip (IS61LP51236A-200TQLI works in my handheld just perfect) and of course a small hack
which is changing EEPROM content (all licensing informations are stored there, even on newest bench models
even if not yet fully used to identify - but don't worry - easy to change/hack).

Of course 2Mpoint will only work when the CPLD (which is address counter for SRAM) supports this too
- luckily this is already implemented :) So in principle when you buy/replace SRAM and hack the licensing
(i can tell you via PM how to do this) you will get an BMV handheld - which even didn't exist today
officialy (but it does in the Hantek catalog from HK Fair, so they will come later 2012 on market)
The SRAM is not cheap and you need to be careful during unsoldering the old SRAM (don't use hot air,
FPGA is ot far enough, you might blow away some FPGA balls ... i used ChipQuick successfuly to remove old SRAM)

The linux is 2.6.30.4 kernel based, like on the (still not yet officially) released BM/BMV bench models.
The dso.exe, so the actuall application is NOT YET universal, i can see common things in bench and handheld model firmwares,
but up to now (and this will stay like that probably forever or at least long time) handheld firmware and bench firmware
are DIFFERENT !!!

So don't even try to run bench firmwares on handheld (or vice versa) - the resolution is different, the keyboard mapping
is different and of course kernel / root fs is different today (handheld 2.6.30.4, bench 2.6.13)

Luckily you can't destroy by downloading/updating with official firmware because the gpg password has been changed,
it is not anymore 0571tekway, not on handheld it is 111111

There is firmware available (2.01.1_20111213) on the website, http://www.hantek.com/Product/DSO1000B/Firmware.rar (http://www.hantek.com/Product/DSO1000B/Firmware.rar)
however befor you update tell me what version is on your handheld ? (sw version field in about).

The backup tool posted in this thread will not work on handheld because of different password,
you might create your own or wait until i or someone else did it
(i can do it when you promise to make a backup of your handheld and share this backup with me)

For now, as you probably wish to use the 200MHz bw i can tell you that the hack itsel remains the same,
you have to open the unit, connect over uart (see attached picture for pinout) and do the hack manually

rename dst1102b file ( mv /dst1102b /dst1202b

edit logotype file (with vi /logotype ) and change dst1102b to dst1202b
edit logotype.dis file (with vi /logotype.dis ) and change Hantek_DSO1102B to Hantek_DSO1202B
edit tmpdst file (with vi /tmpdst ) and change /dst1102b to /dst1202b


The logo itself, hehe, it is now not anymore a bitmap file loaded via device driver (and based on model name in logotype.dis),
now it is hard compiled in the /disp file, so even when you hack the device to 200MHz during boot the logo
will be still telling DSO1102B (which seems to be a protection again chinese shops who still selling hacked 60MHz bench models
as 200MHz models - of course with new front sticker). It is not a real protection, but yeah, for sure it sucks to see different
model name but if you don't like it you can edit the /disp file with hexeditor and repalce the DST1102B picture by DST1202B.
Well, or wait - maybe some day someone will buy such handheld and sahre with us the /dsip executable, but
that's only logo - it have NO influence on any bw/settings, so who cares.

What else, yeah, the official export models have proper fuses (KTK-1, KTK-10) and better input protection
for DMM, models available via chinese sellers have cheap fuses only. If you don't care about CATIII you can
work with the cheap fuses too (in case you got such model).

What else .. hmm, a yeah, these BV model have the audio codec populated (UDA1341TS), small mono amplifier (TPA4861)
and ugly  headspeaker - if you don't need audio in video player you don't need them to be soldered.
However to enable the video function you need to hack video licensing (again in EEPROM). The SD card
is somehow part of the BV models too, all you need is micro SD holder, SD card and again licesning enabled in EEPROM.
SD will ge mounted into /mnt/sd, usb flash drive into /mnt/udisk (not just in /mnt like on bench models, which is again
a small tap whey you try to use e.g. backup tool from this thread)

Anything else , hmm, right - the UART port can be connected to unused LAN jack pins over optocouplers -they need
of course to be populated. Haven't tested how good this works, but from the PCB routing seems to be everything ok.


So i hope that was a nice short introduction about what already possible/known about these handhelds :)
I'm sure this time Hantek will start hunting me, but hey, it's not my fault that these scopes/handhelds are so
user/hack friendly (and well, very good gears too).


Edit: attached picture of licensing features enabled on my DSO - 2Mpoint, LAN, SD, Video - you can find
this menu point in utility, 5/5 page, more... button, sys features button.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bbf on January 27, 2012, 09:48:57 am
Hello,

I have a problem with my Tekway DST1062B - the scope hangs with white screen after running for about 30 seconds to 30 minutes. I have tried upgrading the factory firmware to version 2.06.3 (111202.0) - no change. I have not tried to hack the scope yet.

Hardware version shown is 10050x555583e8, serial number T 1G/005 003613.

Do you have any advice? Thank you!

Ivo
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: aghp on January 27, 2012, 10:44:28 am
Hello,

I have a problem with my Tekway DST1062B - the scope hangs with white screen after running for about 30 seconds to 30 minutes. I have tried upgrading the factory firmware to version 2.06.3 (111202.0) - no change. I have not tried to hack the scope yet.

Hardware version shown is 10050x555583e8, serial number T 1G/005 003613.

Do you have any advice? Thank you!

Ivo

HW fail can not repair with upgrading FW!

Nearly sure it is main board fail. I have seen this situation "more than one time".
Take contact seller or if seller do not care then to Hantek service for repair or spare part main board. (It must be free or nearly free to you if warranty is still valid)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 29, 2012, 01:57:32 am
Backup tool for Hantek Handhelds : DSO1062B/BV/S, DSO1102B/BV/S, DSO1202B/BV/S

- download the attached file and unzip the dso1kb_backup_tool.up (MD5 41873654111d34ef71c6f7ecc10a9951)
- copy the dso1kb_backup_tool.up to flash drive, ensure nothing else on that drive
- insert flash drive into Handheld usb port
- run firmware update (Utility, Page 1/5, Uptdate and F4 to confirm)

Handheld will reboot automatically after "firmware update" is ready (in this case backup of firmware).
Now you can remove flash drive and save the content in a secure location.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on January 31, 2012, 11:25:04 pm
   
Quote
Hello,

    I have a problem with my Tekway DST1062B - the scope hangs with white screen after running for about 30 seconds to 30 minutes. I have tried upgrading the factory firmware to version 2.06.3 (111202.0) - no change. I have not tried to hack the scope yet.

    Hardware version shown is 10050x555583e8, serial number T 1G/005 003613.

    Do you have any advice? Thank you!

    Ivo


This white screen can come from 3.3V regulator that should perform a voltage between 3.2~3.4. If this voltage is lower than 3.2V,then it may produce this white screen.
Elec3i has met this kind of behaviour already and has changed the power unit in some DSO to avoid this, It is why we test our devices one by one with at least 72 hours burn-in period... ;)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bbf on February 06, 2012, 05:28:54 pm
Hello pgup62,
thank you very much! It seems that some tuning of the 3.3 V regulator circuit helped. (I hope :) )
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on February 07, 2012, 11:44:19 am
Yes, sure it will  8)
For now in Elec3i, we are promoting hand-held DSO1102B/DSO1062B and bench scopes DSO5102B (hw: 10070 0x555583e9) at 489.00 EUR net price !!! for some time. :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 07, 2012, 04:48:10 pm
For now in Elec3i, we are promoting hand-held DSO1102B/DSO1062B

Pascal,

as already asked here :

https://www.eevblog.com/forum/product-reviews-photos-and-discussion/hantek-dso1202b-or-owon-sds7102/msg87209/#msg87209 (https://www.eevblog.com/forum/product-reviews-photos-and-discussion/hantek-dso1202b-or-owon-sds7102/msg87209/#msg87209)

- are these Handhelds with or without LAN?
- are these Handhelds true CATIII certified (KTK-1, KTK10 fuses + protection or simple 250V fuses?)


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: stef_teta on February 08, 2012, 08:40:32 pm
Hi,

I recently bought a DST1102B for my hackerspace and few ppl have used recently. After their use (sampling/recording/etc) the oscilloscope is freezing, randomly. Really randomly. On my own opinion, I think there is some broken samples still remaining on the file system, cause when I do a "df" on the debug console, I got :
Filesystem      1K-blocks      Used      Available       Use        Mount
/dev/root        63152          63152          0             100%        /
[...]

I would like to know :
- Where are recorded the samples before recording them on an usb key ?
- Is it normal to have the root filesystem used at 100% ?
- Have you ever met this problem before ?

Thanks a lot, waiting for your answer :)

... Later, I will put the hack on the track. Later :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 09, 2012, 01:06:41 am
I recently bought a DST1102B for my hackerspace and few ppl have used recently. After their use (sampling/recording/etc) the oscilloscope is freezing, randomly. Really randomly.

heh, you should probably kill some ppl for that

On my own opinion, I think there is some broken samples still remaining on the file system, cause when I do a "df" on the debug console, I got :
Filesystem      1K-blocks      Used      Available       Use        Mount
/dev/root        63152          63152          0             100%        /

I would like to know :
- Where are recorded the samples before recording them on an usb key ?
- Is it normal to have the root filesystem used at 100% ?
- Have you ever met this problem before ?

- tmp fs
- no, it should be never like that, typical used space is about 40-50%
- no never ever

You should check root fs for strane files, look in /param/ (and subdirs), /mnt (and subdirs if any) and / itself,
if you don't know if specific files are necessary or not just ask here, i will answer then.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: niebieski20 on February 13, 2012, 08:47:35 am
Hi
I just receive my DSO5102B
First I change it into DSO5202B and everything works great. Thanks for great job with reverese engineering.
Now I have a HW 10070 of PCB and there is a space on it for RJ45 for LAN and I wonder if it is possible to just add this connector and enable this option in firmware???
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: paul on February 14, 2012, 03:28:19 pm
Hi,

Unfortunately I had the same problem as djeans, my scope locked up at the weekend. Totally unresponsive, powers up ok but just freezes after the hantek logo with the normal scope display, both traces on, run button lit up etc.
I tried the reset tool over USB but that did not work.
I am in the process of making a lead up for the uart, but which files do I delete and can they be backed up first ?
From a earlier post 
remove the /param/sav/run* and /param/sav/run*

arent these two the same ? Or am I missing something.

Paul.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 14, 2012, 03:49:51 pm
Unfortunately I had the same problem as djeans, my scope locked up at the weekend.

it seems to be issue with the latest models (what is your version in system info->hw? 555583e8 or 83e9 ?)


I tried the reset tool over USB but that did not work.

yeah, it works as long scope is responding to anything.
If (due broken setting file - the one in /param/sav ...) the dso.exe is unable to startup properly the USB reset tools is not working.

From a earlier post 
remove the /param/sav/run* and /param/sav/run*
arent these two the same ? Or am I missing something.

that was typo, it should be
- remove the /param/sav/run* and /param/sav/udisk/run*
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on February 14, 2012, 06:12:03 pm
   
Quote
it seems to be issue with the latest models (what is your version in system info->hw? 555583e8 or 83e9 ?)
No, this behaviour can also be found on oldest versions (0x10050 555583e8) !
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 14, 2012, 06:23:23 pm
   
Quote
it seems to be issue with the latest models (what is your version in system info->hw? 555583e8 or 83e9 ?)
No, this behaviour can also be found on oldest versions (0x10050 555583e8) !

sure, even the hw0 will sometimes write worng values into setting file, especialy when you power off
DSO while it was wrinting this file.

But now it seems to be just too much, i know already 6 ppl having exact same issue and  all 6 have latest hw version
with 83e9 design - within few days twice to number of issues from last 2 yrs ...

What additional unfortunate is the fact that the "default setup" button is not doing anything, before a
DSO with broken setup was always booting and it was enough to push once default setup button .. now ppl
have to disasemble scopes and delete manualy the file ...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pgup62 on February 14, 2012, 06:40:44 pm
Well a bit tricky: hw or sw or both ?
last 25 devices (0x10070 555583e9) show normal behaviour after booting-up and 72 hours continuous operation. we have 2 old versions (10050 555583e8) that have this after boot-up freeze behaviour, one just after HMI appears (menus and waveforms), another within 20seconds-1hour after boot.
It seems that this can be a hw attitude (power voltage fall for instance from FPGA  or CPU sides).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: paul on February 15, 2012, 01:37:39 pm
I have had the scope for a few months, and it has locked up a few times but always reset itself when I switched it off and on again. It was quite bad with the original firmware 110531.1 but after I upgraded to 110909 it was very stable.
However I upgraded it to 111226 two weeks ago and it started locking up again ! this time I had just changed the memory depth and did not notice that had locked up until after 30 seconds or more, and it does not matter how many times its switched off and on it remains totally locked up.

The hardware version is 83e8

BTW I didnt notice that the header is a 2mm pitch until I tried to plug in my 0.1” lead, and am I right in assuming that the uart is 3.3V ?

Thanks for all of your help
Paul.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 15, 2012, 02:09:52 pm
However I upgraded it to 111226 two weeks ago and it started locking up again !

you can update to 2.06.3(120112.1)
you will find it here :

http://hotfile.com/dl/142100356/1d87527/2.06.3_120112.1.zip.html (http://hotfile.com/dl/142100356/1d87527/2.06.3_120112.1.zip.html)
(MD5 371c00942b43b88df49eb23ca4ede99d)

BTW I didnt notice that the header is a 2mm pitch until I tried to plug in my 0.1” lead, and am I right in assuming that the uart is 3.3V ?

right, it is 2mm pitch and 3.3V level UART
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: paul on February 15, 2012, 07:18:49 pm
Thank you tinhead, I now have a working scope again. (DSO5102B  hw 83e8)
Without your help I would be sending it back to china and hoping for a warranty repair, which would probably cost a lot in delivery and take a few weeks for it to be returned.

I only deleted the /param/sav/run file (I only found one) and it booted up OK, if it didnt I was going to try the other files in /param/sav/udisk.

I still think this is a bug in the current firmware 111226, (its still the latest available on the Hantek website) as I didnt have any problems until I upgraded.

Can it be downgrade to a older firmware ? I am a bit reluctant to upgrade again :(  (although I have downloaded the link)

Thank you again
Paul.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 15, 2012, 08:13:41 pm
don't worry, the latest version here is working better as the latest version on Hantek website.

I remember i developed downgrade firmware ... here is it
https://www.eevblog.com/forum/index.php?topic=1571.msg63001#msg63001 (https://www.eevblog.com/forum/index.php?topic=1571.msg63001#msg63001)

It should work with 83e8 hw1007 (i would not recommend to install it on hw1007 83e9)
So you can try it, if you not happy you can still install the latest fw again.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Kampfwurst on February 15, 2012, 11:13:30 pm
it would be helpful if all the firmware Updates are for example on the first page.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 15, 2012, 11:18:35 pm
it would be helpful if all the firmware Updates are for example on the first page.

THEY ARE ON FIRST PAGE!

i'm trying always to maintain this thread, deleting old fw/tools, updating all the links on the first page ...
so all ppl have to do is check there ...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sobomax on February 18, 2012, 01:05:56 am
Hi
I just receive my DSO5102B
First I change it into DSO5202B and everything works great. Thanks for great job with reverese engineering.
Now I have a HW 10070 of PCB and there is a space on it for RJ45 for LAN and I wonder if it is possible to just add this connector and enable this option in firmware???

There is an instruction on page 70 on how to connect LAN using $5 USB dongle.

-Maxim
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sobomax on February 18, 2012, 01:11:04 am
sobomax :

I think I have looked everywhere but I can't seem to find your network adapter supported list. :(

Also, any code updates ?

Hey Douglas, not much happening here really. I don't have any hardware list, but you can just take release notes for the 2.6.13 kernel and see what is supported there. This should give you a pretty good idea. Or you can just take your laptor with the i386 version of 2.6.13 running in the virtual machine to the shop and try to plug few and see which one works.

The kernel itself is now online here: https://github.com/sobomax/hantek_dso_kernel

Right now it's just stock qq2440 code, but in the next hour or so I will be checking in some small fixes required to build it with the recent 4.x gcc. The original code still assumes 3.4.

-Maxim
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: McCurrent on February 18, 2012, 03:54:37 pm
@patz:

Is it possible to add an option to your software which allows me to change back to the 1062b and not only one way to 1202b?

best regards
Johannes

Hi,

should be possible, I'll have a look at it ASAP.

Sorry, Patz,

I was impatient   :-[ .

I extended your sources to switch between all bandwidthes at will.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: McCurrent on February 18, 2012, 05:18:12 pm
Hi tinhead, amazing thread!

Thx for sharing your work with us  ;D.

Hi,

it works! Communication is done through the official USB driver.

I attached the first version as EXE file. Use at your own risk!

(https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=18664)

Some feedback if it is working would be nice. Tested with Hantek DSO5102B.

I just took patz' sources to turn my Tekway DST1062 into a DST1202.

But in fact I'm not quite sure whether I was really successfull, thus I have a couple of questions.

cheers
McCurrent
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 18, 2012, 05:59:21 pm
I just took patz' sources to turn my Tekway DST1062 into a DST1202.

nice job!

  • After I changed the bandwidth, TTScope identifies the scope with the new bandwidth, and I may switch to 2ns timebase, but the scopes system information still reads dst1062b.
    Is this the suspected behaviour?
as mentioned at the beginning of this thread for manual hack you need to change not only the
/dstxxxx file (which is responsible for the bw filter and model based then for enabled features)
but also the logotype/logotype.dis files  (and to sys.inf /tmpdst, however they will be recreated at boot time properly
in case they wrong). The logotype/logotype.dis files are not only responsible for "boot logo" but also for device
name (the displayed in system info). So in principle you can have higher bw (because you renamed /dstxxx file)
and old logo and old dso name (because you not changed logotype+.dis)


  • Unfortunately I don't have a adequate source to check the actual bandwidth, thus I just "listened" to some USB communication to get an idea of it (poor thing, I know).
    The rise-time improvement was from 5,7ns to 4ns (3.7 at best, 61MHz -> 95Mhz)
    Now I'm considering my probes.

    Pinsonne offers three different accessories probes. One for each bandwidth, but they all seem to be identical.
    Of courxe I have only the 60MHz version.
    http://www.pinsonne-elektronik.de/pi10/pd111.html (http://www.pinsonne-elektronik.de/pi10/pd111.html)
    http://www.pinsonne-elektronik.de/pi10/pd108.html (http://www.pinsonne-elektronik.de/pi10/pd108.html)
    http://www.pinsonne-elektronik.de/pi10/pd107.html (http://www.pinsonne-elektronik.de/pi10/pd107.html)

    Do you have any experience, which bandwidth you could reach with the original probes?

they made by Texas whatsoever probe company (china of course). They not that bad, i'm using 250MHz probes from them daily
and happy with the freq response.
The org. 60MHz probe is good up to 85-90MHz from what i remember, these probes on third link (200MHz) are good replacement.
Sure, they looks all the same, but there is definitely difference in bw.

Actually many ppl doing hacking these DSOs without thinking about probes, in principle sometimes (based on shop/price)
it is cheaper to buy 100MHz model with 100MHz probes (and they good up to 130-150MHz or so) instead of 60MHz
with 60 MHz probes - you will still need something about 100-200Mhz for daily work and maybe a good set of 500Mhz
passive or active probes.

  • How did you test your improvements?
    Did you take the original probes or something different?

simple by using every day :) And no, i'm unsing as said above 250MHz Texas passive probes for default tasks
and 500MHz active probes for RF tasks.

When i change something in the firmware the i use of course a set of equipment to check the changes,
something like rise time with fast pulse generator.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ot1 on February 21, 2012, 05:58:32 pm
@Tinhead,  how did you manage to reverse engineer the schematics? Looks like a very difficult task, did you have to depopulate the board first?  Or did you use a buzzbox method?  What tools are used?  Is it possible to leave the board populated and achieve good results?
Thank you
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 21, 2012, 10:29:16 pm
@Tinhead,  how did you manage to reverse engineer the schematics? Looks like a very difficult task,
well it is dificult, but everything is just question of time and/or knowledge.

did you have to depopulate the board first? 

Typically it this depends on tool you have, the actual PCB and the reason why you doing reversing.

In case of the DSO i unpopulated few things to validate my boundary scan results or
to reduce the chance of an error (with cont. checker/buzzbox you can get wrong values sometimes),
later as i was ready with raw schematics i unpopulated most passive parts to make the schematics really complette.

Or did you use a buzzbox method? 
sure, when possible or no other way available

What tools are used? 
Continuity checker - it must be always a good one (low voltage!!!). Everything below 0.7V is ok,
i'm using one with 0.4V capable of driving 0.5mA max.

Boundary scan software (evt. hardware too) - there are few good tools,
however i'm using Universal Scan from Ricreations ( http://www.universalscan.com/ (http://www.universalscan.com/)) .
It is not that expensive (850$ only, if you compare to other products you will see it is cheap!).
I remember the trial version was working without any restrictions, so you might use this as well for 30days?
The hardware you need to use Universal Scan -Y For all kind of (mostly ARM, it works e.g. with memories too)
chips Amontec JtagKey or Key2 (original, clone will not work with Universal Scan!), for FPGAs/CPLDs the specific
one form Xilinx or Altera (well or Digilent).


JTAG/Debugger tools - i have a complette set : Ulink V2 and Pro (which i got with MDK), H-JTAG Pro USB (i love it, much better
than the crap J-Link from Segger and their crap j-flash software), Amontec JTAGKey and Key2, Renesas FoUSB/R8a, Cypress
IceCube/MiniProg1/3, MSP430FET, STM ST-Link1/2 (actually from STM dev boards but STM is having anyways cheap tools),
Xilinx/Actel/ALTERA JTAG cables (clones only), Atmel JTAGs (ICE MKII clone, ICE3 ordered), OpenJTAG (from 100ask.net),
puhh did i miss one? probably.  You don't need of course so many tool, however it is very handy to have a way to
program/debug or scan a chip. For the DSO i've used for boundary scan only Altera JTAG cable and Amontec JTAGKey2.
For NAND and testing of some S3C2440 SoC features H-Jtag Pro USB. For sure you might ask now for what reason
i need ISP/Debugging tolls, well it might be sometimes easier to code something to simulate a situation to get some results
from a chip attached to known chip (you can't just connect 32 port generators, 64 port LA without getting crazy, a few line
in code are easier and tracable!).

Stereo Microscope - sure you can work without but it is easier to have it.

DMM, DSO, Signal Generator and even sometimes Spectrum Analyzer.

Datasheets, bsdl files (in case you use boundary scan, believe me once you understood what they
doing and how they working you will never ever wish to work without)

When you decide to unpopulate parts then of course proper tools like good IR Reworkstation
(it can be cheap china thing, but you probably will have to modify a bit), set of small universal stencils,
reballing tolls, ChipQuick SMD1 (a lot of that!!) , tons of IPA (Isopropyl alcohol), Kimtech kimwipes (they are just the best)
well the typical things.

Is it possible to leave the board populated and achieve good results?

sure, with proper tools no doubt. Even with enough time (mostly for studing datasheets!!!) and only continuity checker
you might achieve very good results. However sometimes you will have at least to unsolder one or more pins
(to disable in hard way a chip). For all kind of passive components you will have for sure unpopulate them to get
exact values (analog part definitely, digital not necessary - datasheet/app note are mostly what exact enough).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Sobiguy on February 22, 2012, 08:18:40 am
Hi,
I've been following this thread for some time. You guys are the best!

So, I finally have a question of my own. Hope this is the right place for it.

Would it be possible to put a custom boot screen in place of the default?

You know when you turn it on it has "the Screen" that shows brand and model.

(http://i75.photobucket.com/albums/i295/nathansobieck/bootscreen.jpg)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: omega on February 22, 2012, 04:16:42 pm
I encountered (probably) the same problem as djeans and paul described on the last pages.

DSO5102B, no hacks, 2.06.3(111226.1).

I updated the firmware today for the first time ever on this unit. It locked up a few minutes after the update while in splitscreen and changing the memory depth. After reboot it showed the splitscreen and even after each reboot the updated date and time. but no reaction to any key pressed and no signal shown.
I tryed to press "default setup" while booting (hitting the key as often as possible) and after 5 or 6 reboots without effect it now responds again.
Maybe i'll try the fw posted by tinhead (ps thanks for all the work)

<edit>
updated to 120112.1. problem presists. trying to change mem depth from 4k to 40k results in locked unit...

<edit 2>
maybe it was just luck the first time where pressing "default setup" helps or i did something other i don't remember. Now it doesn't help. So I'm waiting for the usb <> serial ttl connector to arrive ;)


original fw, bugs but never encountered this "permanent freezing". after reboot all was ok again.
model      dso5102b
softversion   2.06.2(101028.0)
hard version   0x555583e8

after (first) update today
model      dso5102b
softversion   2.06.3(111226.1)
hard version   0x555583e8

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 22, 2012, 05:24:55 pm
So, I finally have a question of my own. Hope this is the right place for it.
Would it be possible to put a custom boot screen in place of the default?
You know when you turn it on it has "the Screen" that shows brand and model.

sure, just build your own logos and replace the coresponding files in /logo directory on DSO
On Hantek their like:

hantek_DSO5062B_down.ico
hantek_DSO5062B_mid.ico
hantek_DSO5062B_up.ico
hantek_DSO5062C_down.ico
hantek_DSO5062C_mid.ico
hantek_DSO5062C_up.ico
hantek_DSO5102B_down.ico
hantek_DSO5102B_mid.ico
hantek_DSO5102B_up.ico
hantek_DSO5102M_down.ico
hantek_DSO5102M_mid.ico
hantek_DSO5102M_up.ico
hantek_DSO5202B_down.ico
hantek_DSO5202B_mid.ico
hantek_DSO5202B_up.ico
hantek_DSO5202M_down.ico
hantek_DSO5202M_mid.ico
hantek_DSO5202M_up.ico

where *_xxx is for the logo location during boot (yes, there are 3 pictures, Hantek logo, name in the middle and these
colored bar on bottom - down)

On Tekway the are named bit different:

dst1062b.ico
dst1102b.ico
dst1202b.ico
dst3022b.ico
dst3042b.ico
dst4042b.ico
dst4062b.ico
dst4102b.ico
tekway.ico
website.ico

Format of tese files (they not icon files, only named like that) is something raw 16 or 8 bit RGB,
i did played a time ago with that, don't remember exactly the values now.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Sobiguy on February 22, 2012, 09:08:29 pm
Thanks tinhead!  I had no idea those were separate images. Just figured it was a single image...


Quote
sure, just build your own logos and replace the corresponding files in /logo directory on DSO

And those are accessed via Uart only. Right?




Quote
Format of these files (they not icon files, only named like that) is something raw 16 or 8 bit RGB,
i did played a time ago with that, don't remember exactly the values now.


Ok so, I know you say you don't remember exactly. And i appreciate everything thus far.
Just one more question to possibly help me to this end.

There not Icon files but there labeled .ico. "Ok no problem"
So then I'm guessing I could make them in say, "photoshop"  and try saving them as .bmp's with varying bit depths then changing the suffix from .bmp to .ico until I find the proper bit depth that works?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 22, 2012, 09:13:46 pm
well, create bmp and convert it with tool like Img2Lcd.exe to bin. There are many tools like that,
good starting point is to search for "FriendlyARM S3C2440 boot logo tools"


http://code.google.com/p/ab-embedded/downloads/detail?name=Image2Lcd%2BV3.2.rar&can=2&q= (http://code.google.com/p/ab-embedded/downloads/detail?name=Image2Lcd%2BV3.2.rar&can=2&q=)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Sobiguy on February 22, 2012, 09:30:00 pm
Perfect, I'll give that a shot Thank you
Title: Tekway Rigol or Tek
Post by: Cristi on February 23, 2012, 10:46:14 am
I'm reading this thread since beginning and i eventually decided to join the forum. I'm about to purchase a new oscilloscope which i will use mainly for power electronics debug, power supplies, inverters, AC drives. I would like to ask your opinion regarding the choice. Among the candidates are the DSO5102B, Rigol new series, DS4024 or Tek DSO/MSO4024. I know that the last two might be overkill, also their price is at least 5 times higher, but i might use the scope in the future to debug digital designs as well as analog and power designs.
Is there any way that either TEKTRONIX DPO/MSO2024 or Rigol DS4024 100MHz versions could be "upgraded" to 200MHz similar as the current Tekeway ? I search on internet without any relevant result.
Thank you.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Sobiguy on February 24, 2012, 10:57:31 pm
Hello again,
Thank you for all your help thus far.
Ok I'd say I have a pretty good/basic grasp on the linux commands required to navi/edit in PuTTY via usb-TTL adapter (Been late night Cramming Like the days of Ole')

So I'm still playing with the custom logo's, right.

Reading everything I can find but I'm having problems in one area particularly.
I feel down right "DUMB" for having to ask such a noob question and it is probably stupid easy and I'm just over looking it but,

How do I transfer the logo files from the oscilloscope to my Pc or the other way around, my newly created logos from the pc to the oscilloscope.
 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 24, 2012, 11:05:35 pm
Hello again,
Thank you for all your help thus far.
Ok I'd say I have a pretty good/basic grasp on the linux commands required to navi/edit in PuTTY via usb-TTL adapter (Been late night Cramming Like the days of Ole')

So I'm still playing with the custom logo's, right.

Reading everything I can find but I'm having problems in one area particularly.
I feel down right "DUMB" for having to ask such a noob question and it is probably stupid easy and I'm just over looking it but,

How do I transfer the logo files from the oscilloscope to my Pc or the other way around, my newly created logos from the pc to the oscilloscope.


hehe ... simple thing. In principle when you connect with putty to the linux shell of the DSO you can access to the
file system. The logo files are in /logos directory, a USB flash drive (yes , exact this way to go!!!) will be automounted when you instert it to /mnt directory. So then in prnciple insert usb flash drie and do cp /logo/* /mnt and you have them, and of course vice
versa after you changed them on your PC. To ensure they not get damaged do once "sync" and umount /mnt before you remove
the usb flash drive ...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Sobiguy on February 24, 2012, 11:26:25 pm
ahh yes!

I had not thought of that. thanks again!!!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 25, 2012, 12:35:41 am
LOL

why that? well .. nice story ... a guy in Germany was about to save some money, so he decided to
buy from Conrad.de a VOLTCRAFT DSO-3062C instead Hantek or Tekway from another seller.
As he is a beginner he said "200EUR is a difference, so i decided to buy the cheaper and slower model"

Note - this Voltcraft is actually nothing else that Hantek (or Tekway) clone, 60MHz scope with 500MSs.
When you look on Hantek website you will find such scopes - Hantek DSO5062C, or from Tekway as DST4062B.
I even posted on the begin of this thread "don't buy these DSOs, they different!!"

However, 200EUR is lot of money, so he take the risk and bought it ...
He made some pictures and guess what?! It is 1GSs DSO and not 500MSs!!!

This means Hantek/Tekway (well Voltcraft somehow too, they probably even don't know what they selling)
are simple too lazy, they not only selling exact equal PCBs/DSOs marked as  with different bandwidth but
even as "with different sample rate" (be careful, Tekway is having DST3000B - they really slower!!
i have pictures showing totaly different PCB).


So for 299EUR this guy got a beautiful 1GSs HanTekway (with stupid Voltcraft logo, but yeah, this can be changed)
with frontpanel tagged as 500MSs 60MHz (who cares about the frontpanel sticker ...)

And of course this scope is 100% hackable, so he got for totaly 299EUR a DSO with 200MHz bandwidth and 1GSs sample rate ...
isnt' that cool? I think it is!

So when you need a Hantek/Tekway DSO buy such Voltcraft asap, no idea how long Conrad will have them in stock

http://www.conrad.de/ce/de/product/122464 (http://www.conrad.de/ce/de/product/122464)

Btw, the tool from McCurrent wrk also for Voltcraft models :P

https://www.eevblog.com/forum/general-chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg91877/#msg91877 (https://www.eevblog.com/forum/general-chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg91877/#msg91877)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Parsley on February 25, 2012, 10:32:00 am
What a great morning over here in Germany!!! :D ;D
Guess what, I was looking for such a scope since a few weeks and of course I quickly ordered one! So first of all thank you for this info!

Ironicly Conrad is known to be quite expensive.

One thing I realized on the Conrad page:
As they say it is a 500MS/s scope, wouldn't that mean this stupid equivalent sample rate would be halved, too? But it still says 25GS/s.

Just one question:
"Is" it the 1GS/s version, or do I need to hack it to be 1GS/s? How do I proof or measure this? Were do I have to hook up my LA for timing measurment? ;)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 25, 2012, 10:57:17 am
One thing I realized on the Conrad page:
As they say it is a 500MS/s scope, wouldn't that mean this stupid equivalent sample rate would be halved, too? But it still says 25GS/s.
it is physicaly 1GSs device, it does have the same PCB, same amount of ADCs, actually everything is the same as for
example on DSO5062B.

Just one question:
"Is" it the 1GS/s version, or do I need to hack it to be 1GS/s? How do I proof or measure this? Were do I have to hook up my LA for timing measurment? ;)

as said above, no need to hack to 1GSs, it is 1GSs scope out of the box!

When you go to Utility, page2/3 and click on Sys Status
you will see some actual DSO parameters. One of them is the actual sample rate. On these scopes if set
to 4k sample memory, one channel enabled and with timebase 8ns/DIV, 4ns/DIV and 2ns/DIV you will see
there 1GSs. Conrad probably even don't know what they selling.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: LEECH666 on February 25, 2012, 11:47:02 am
Thanks for the info Tinhead!

I just ordered this scope from Conrad. I think the only other german store that sells this scope is Pinsonne Elektronik (http://goo.gl/1EViS (http://goo.gl/1EViS)), and the scope is around 200 Euros more expensive there. Hope I get the right version though.

Any way to identify it's the right model/hardware?

Gruß,
Florian
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 26, 2012, 02:10:35 am
Any way to identify it's the right model/hardware?

if it works you got the right device :)

But honestly, don't worry, ppl from austria and holland confirmed to me that
Conrad is having "proper" hardware everywhere. Sure, it might happens that due presure from other
distributors* HanTekway will change these 500MSs to what they should be - 500MSs, but this will
not happen that fast (and even if, in EU you can always send back to Conrad).


*- why other distris are pissed off? well maybe a bit because i made it public, but honestly when not i someone
else would do it anyway. The point is, Hantek/Tekway decided to save production costs by producing
of single PCB for multiple models. In principle not big deal, even when ppl hacking "B" models to 200MHz bandwidth,
(i always said "be fair, buy 100MHz model, these few bucks are important for manufactrer and  you getting
probes for free - because when you hack you still need some probes") everybody could be happy.
Even the ebay "gray market" competitors are not that tragic - ppl who smart knows that "if" something get broken it's better
to have someone near you. And don't forget - not everybody is hacking!

But with these Voltcraft models (or well, Hantek "C/N" models) the situation is totaly different.
They costs 299EUR, that 400USD. Now imagine when you buy DST1062B from Tekway directly (not a single but 20+pcs)
you have to pay per unit 380USD (Hantek DSO5062B about 340USD - so lets take avg. 360USD/pcs - and yeah, that's my price,
it might varry a bit depending on who is buying and how much, but i think this is a good example price).

Now you have to pay of course shippment, no matter if 1 or 50 it still costs per kg. Even with good condition
you have to add at least 50-80USD per unit  (makes at least 410USD total). Now in EU you have to pay VAT,
avarage is 20% i think?, that's 492USD total. And now compare to these Voltcraft DSOs, they IDENTICAL and
92USD cheaper!!  So how the hell can distributor import and sell original 1GSs models now? No way!
Now when you buy from Conrad 10+pcs you will get them for 275EUR (or 369USD) each! - with warranty and local VAT.
123USD cheaper than imported from manufacturer (and the distributor did not made single $ win!!!) That's crazy.
And note, i'm not talking about hack!!! Out of the box the unit Conrad is selling is having exact the same
specs like Hantek DSO5062B or Tekway DST1062B - 60MHz bandwidth and 1GSs (instead of like printed out 500MSs) -
and that's the real issue!!!


So if you wish one, buy fast. I don't think that this will be ignored by both manufacturers, maybe Conrad price will rise
up, maybe price for original 1GSs models will get reduced, maybe both manufacturers will produce real 500MSs models,
we will see.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Sobiguy on February 26, 2012, 03:27:45 am
Quote
well, create bmp and convert it with tool like Img2Lcd.exe to bin. There are many tools like that,
good starting point is to search for "FriendlyARM S3C2440 boot logo tools
"

Ok  I have try using img2lcd to convert .bmp to .bin then changing the suffix to .ico but to no avail. none of them seem to work.  it has so many different options and all the help files are in Chinese (I can't read Chinese) Do you know what setting to use.

Some of the options are
   256 Color-------------RGB332 Palette, Grey Palette
 4096 Color-------------12bits(continue Bits), 16bits (WORD)
16-bit Color-------------(R:5bits,G:6bites,B:5bits), (R:5bits,G:5bites,B:5bits)
18-bit Color-------------6Bits in Low Byte, 6Bits in High Byte
24-bit Color-------------
32-bit Color-------------

Output Options
Output file type: .bin  .c  .bmp  and more

scan modes: several different kinds

BitsPixel: monochrome, 4 color,  16color,  256 Color,  4096,   16-bit TrueColor,  24-bit TrueColor,  32-bit TrueColor

Max width ans height.

check boxes Include head data, Scan Right to Left, Scan Bottom to Top, MSB First.

Any thoughts....


I have also Tried searching "FriendlyARM S3C2440 boot logo tools" But there are none that have anything to do with these .ico files.
All i could find were things about recompiling the kernel.

I'm totally suck. IS there anyway at all to open the the default logo files to get an idea of file heights and widths etc....

Thank you IF you have any ides that would be awesome!

Sobiguy



 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Bored@Work on February 26, 2012, 10:12:41 am
A quick look into a .ico file tells me it is rather primitive. It starts with two 32 bit numbers, giving width and heigh (or hight and width) of the image in pixels. Then follows what looks like 1 byte per pixel data, indexing into a colour pallet. The colour pallet, however, is not part of the file. It is likely hardcoded in the software that reads the file.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on February 26, 2012, 10:28:10 am
Nice detail in Conrad:

1062C    60MHz in text  but in picture  front panel read 100MHz  (and this 500MSa/s and oh yes also it is exactly true. It is 500MSa/s maximum! If it is used with 2 channel so, there is not anything exactly wrong, also becouse 60MHz model real -3dB point is around or just over 100MHz.(without any mod )  ;)    :


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Sobiguy on February 26, 2012, 10:55:30 am
A quick look into a .ico file tells me it is rather primitive. It starts with two 32 bit numbers, giving width and heigh (or hight and width) of the image in pixels. Then follows what looks like 1 byte per pixel data, indexing into a colour pallet. The colour pallet, however, is not part of the file. It is likely hardcoded in the software that reads the file.

How are you looking at it! if I open it in notepad or somthing like that all I get is "Goble-de-gook"<---technical term<

Can you pick one and possibly give an example. So if it's pretty primitive what do i have to do to edit/make one?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 26, 2012, 12:43:23 pm
Nice detail in Conrad:

1062C    60MHz in text  but in picture  front panel read 100MHz  (and this 500MSa/s and oh yes also it is exactly true. It is 500MSa/s maximum! If it is used with 2 channel so, there is not anything exactly wrong, also becouse 60MHz model real -3dB point is around or just over 100MHz.(without any mod )  ;)    :

but you know that this is bullshit - typical what you will see on enclosure is the max max max value :)

I got firmware back from such Conrad DSO - 100% 1GSs Hantek model, even better - it was originaly DSO5202B ...

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on February 26, 2012, 12:58:08 pm
Nice detail in Conrad:

1062C    60MHz in text  but in picture  front panel read 100MHz  (and this 500MSa/s and oh yes also it is exactly true. It is 500MSa/s maximum! If it is used with 2 channel so, there is not anything exactly wrong, also becouse 60MHz model real -3dB point is around or just over 100MHz.(without any mod )  ;)    :

but you know that this is bullshit - typical what you will see on enclosure is the max max max value :)

I got firmware back from such Conrad DSO - 100% 1GSs Hantek model, even better - it was originaly DSO5202B ...

Yes I know... of course. ;)

You mean that also HW is with 5202B components related to BW.

If this all, meybe Conrad have busy days for ship all purchased  3062C's
I do not know what is shipping price for other countries.
(maybe they close this offer soon.....  )
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: LEECH666 on February 26, 2012, 01:06:54 pm
It is marked as a anniversary offer (the title says: Jübiläumsangebot), so it might only be sold at that price for a limited timeframe. However I know that Conrad uses some rather aggressive marketing drivel in their newsletter emails declaring each and every product to be super duper uber mega ultra cheap deals. Kinda annoying. Might just be the usual drivel.

Cheers from Germany,
Florian
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 26, 2012, 01:10:26 pm
You mean that also HW is with 5202B components related to BW.

If this all, meybe Conrad have busy days for ship all purchased  3062C's
I do not know what is shipping price for other countries.
(maybe they close this offer soon.....  )

the one i got backup was real 200MHz model before Conrad (well Hantek for Conrad) re-labeled it

Regards shipping, check this :

http://www.voelkner.de/products/270281/Voltcraft-Dso-3062c-Digital-Oszilloskop.html (http://www.voelkner.de/products/270281/Voltcraft-Dso-3062c-Digital-Oszilloskop.html)

within Germany free of charge, within EU 9,95EUR
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on February 26, 2012, 01:10:53 pm
Strange:

http://www.conrad.com/VOLTCRAFT-DSO-3062C-60MHZ-500MS%2FS.htm?websale7=conrad-int&pi=122464&ci=SHOP_AREA_17625_1113030 (http://www.conrad.com/VOLTCRAFT-DSO-3062C-60MHZ-500MS%2FS.htm?websale7=conrad-int&pi=122464&ci=SHOP_AREA_17625_1113030)

Not in stock, available from 24.02.2012 ???

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Bored@Work on February 26, 2012, 02:16:23 pm
How are you looking at it!
Converted to a hex-dump, then just scrolling through it.

Quote
if I open it in notepad
Excuse me while I vomit.

Quote
Can you pick one and possibly give an example.
The first two 32 bit numbers are obvious, because there are many zeros in the first eight bytes. Multiplying the values from the first two 32 bit numbers happens to give the file size minus eight.

You can call that finding a "breakthrough", because from that information one can conclude

(a) The first two 32 numbers provide width and height (or height and width) of the image. One can assume the larger number is the width, assuming most .ico files contain images in landscape orientation.

(b) The data is eight bytes per pixel.

(c) Since it is a color image, it either needs a color pallet or uses an 8 bit RGB encoding, like 4:4:2 (the later can also be used as index into a trivial color pallet).

(d) The file size indicates there is no color pallet in the file. Therefore the mapping of the 8 bit values to colors needs to be hard coded somewhere else in the DSO software or even display hardware.

The last point (d) is the reason I didn't looking further. It is rather boring to reverse-engineer the 256 (8 bit) color pallet, and I couldn't bother looking further.

Quote
So if it's pretty primitive what do i have to do to edit/make one?

First of all, get decent tools. Notepad isn't.

Unless someone manages to identify the file format and knows tools for it:

Get documentation of a typical, common, simple image file format, like .gif. Reverse-engineer the color pallet or just start with guessing one. Write software to generate e.g. a gif file, consisting of adding the color pallet to the file, and converting the data from the .ico file. It is just tedious work, and I don't see the point doing it.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 26, 2012, 06:26:37 pm
right, the color pallet is hardcoded in the dso-lcd.ko, whe you look inside you will find these 1024byte (attached as colors_plat.zip)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 26, 2012, 07:41:50 pm
i do have a request, those of you who bought Hantek/Tekway/Voltcraft during last let say 2 months,
so having hw1007 555583e9 (not 83e8) - if you have Altera JTAG cable plase do create
read back from the MAX II CPLD in your DSO.  

Why? Well,  I have checked few backups of hw1007 555583e9 restored to my hw1007 5555 83e8 board
(and even restored to hw0 board) and i don't have any issue with latest firmware (crashing sometimes without reason,
freezing and damaging settings) . Two other ppl checked this for me, same result - but many of you with 555583e9 version
have issues (and these can be replicated by it seems only on your hadrware).
From what i know there are no changes to mainboard itself, so the last thing which might be different is the CPLD.
Afaik, it is not protected so when you have Altera JTAG you will be able to read back the complette content.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Sobiguy on February 26, 2012, 11:27:36 pm
Don't know if this is any help to anyone but. I bought my hantek DSO5062B about three weeks ago from
http://www.circuitspecialists.com/digital-storage-oscilloscopes (http://www.circuitspecialists.com/digital-storage-oscilloscopes)

And there still shipping with hw1007 83e8.

as that's what mine is. just thought I would share.

Thank you BoredAtWork and tinhead for all the help and info regarding the .ico's.

I realize my noobness  In these area's are showing. I dealt with a lot of 8bit mcu's and I'm trying to learn the Arm Arena. These hacks Improvements would not be possible or atleast understandable with out the experience and dedication that guys have put in to it.

These graphical customizations my be trivial but for me at least it helps to further understand the inner workings of these devices in such a way as to not brick it. Plus it adds the ability to add your own personal flare.

I mean Sure upgrading is spectacular but why go through all the work and not leave your customized mark be-hide.

But I digress, I know that notepad++  is not the right software for the job. So what are you guys using?       
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 28, 2012, 02:52:59 am
few people have mentioned that the especialy last 2 firmwares 2.06.3 (111226.1) and 2.06.3(120112.1)
when crashing they damaging the setup file (/param/sav/run1kb*). When this happens the DSO
is not responding to any key/knob, all you can do is to delete manual the affected file (/param/sav/run1kb*)

However, this sucks somehow. I wish Hantek could create a simple application loaded just before dso.exe
and checking if default button is pressed - if so such app could purge all settings and allow DSO to startup properly.
Maybe some day they will do it, for now i created a firmware update file which will patch your DSO.

The patch is very simple, while booting modified rcS will check in /mnt directory for a file named reset.me
What is /mnt? Well this is the root directory of USB flash drive. So if such file exist the rcS will purge
all settings bevore dso.exe will get loaded .. and voila! DSO will never ever again hangs on startup because
of damaged settings/setup file.

All you have to do now is to install once the fix - unzip attached setfix.zip into empty usb flash drive, insert it into
DSO, run firmware update. The next time when your DSO crashed just insert this usb flash drive (or any other
which contain empty file named reset.me), boot up the DSO and enjoy defualt setup :)

If for any reason you will need to restore the original rcS, unzip the unfix.zip, run again firmware update
and the original rcS will be restored (the setfix.zip is creating a copy of rcS in /etc/init.d/ )



you don't need tihs anymore, since firmware 2.06.3 - 120423.0 there is powerfull watchdog implemented which cares about
this problem.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: nordiste on February 28, 2012, 08:08:15 am
hi,
what can i do if i have this problem ? whithout installing this patch before ?
i have last firmware.

thanks.
marc
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 28, 2012, 09:47:38 am
hi,
what can i do if i have this problem ? whithout installing this patch before ?
i have last firmware.

thanks.
marc

unfortunately you will have to connect via UART to the DSO (3.3V TTL UART converter is what you need)
and delete manualy the affected file, just execute on the shell rm -f /param/sav/run1kb*
or send the unit back to the shop where you bought it originaly.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Kampfwurst on February 28, 2012, 10:04:40 am
can I use this TTL UART Converter from Ebay??
eBay auction: #350499583299
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Parsley on February 28, 2012, 10:47:43 am
One of the best hidden secrets of every forum is the search button!

Search for "CP2102", which your ebay article says, and the first found entry will tell you: yes you can! ;-)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: nordiste on February 28, 2012, 01:38:30 pm
many thanks for your help.
i solve problem with my bus pirate interface and now DSO works.
tinhead, your software works fine.
many thanks.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: LEECH666 on February 28, 2012, 06:39:28 pm
Okay my scope arrived today.

Sorry I am very new to this.

Can I use the fw3dump tool (https://www.eevblog.com/forum/index.php?topic=1571.msg35683#msg35683) with this DSO version too?

Cheers,
Florian
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 28, 2012, 07:36:17 pm
short answer - yes
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: LEECH666 on February 29, 2012, 04:15:40 pm
Okay, looks like it worked.

I know this is probably redundant information, but here is what I did to get a firmware dump:

1 - downloaded fw_backupV3a.zip (https://www.eevblog.com/forum/general-chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=11522) that can be found in this post (https://www.eevblog.com/forum/general-chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg35683/#msg35683) from tinhead.
2 - extracted the file special_secret_dst1kb_9.99.9_cli(200101.1).up from the folder \universal\ to my USB stick.
3 - turend on my scope and went to the utility  menu by pushing the utility button
4 - pressed the F2 key to start a firmware update
5 - hooked my USB stick to the front USB port of my Voltcraft DSO-3062C scope.
6 - continued the firmware dump process by pressing F5 key
7 - renamed special_secret_dst1kb_9.99.9_cli(200101.1).up to dst1kb_9.99.9_cli(200101.1).up as mentioned on the bottom of this post (https://www.eevblog.com/forum/general-chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg35683/#msg35683) by tinhead. (Because the update process gave me errorcode 0xFE)
8 - repeated step 3 to 6
9 - copied the newly created .\dump\ folder which contains the files boot.bin, kernel.bin and root.bin some place safe (on my Windows desktop, lol)

Maybe this will be of help for someone else.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on February 29, 2012, 05:45:57 pm
few people have mentioned that the especialy last 2 firmwares 2.06.3 (111226.1) and 2.06.3(120112.1)
when crashing they damaging the setup file (/param/sav/run1kb*).

And me  :-[

tinhead, I find solve problem with "no place for firware update"
I downgrade to
https://www.eevblog.com/forum/general-chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg63001/#msg63001 (https://www.eevblog.com/forum/general-chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg63001/#msg63001)
and upgrade firmware beck to last official via console
 ALL saved picture folder, like Hantek_xx, appeared in /mnt/ folder    :o
After manually remove its, upgrade from usb storage is ok.

But remove its from GUI is impossible, or I dont now how. After press "save to usb", picture saved to usb and create copy of file in /mnt/ directory  ::) 

You may create script for clear /mnt/ directory, when DSO start ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 01, 2012, 03:15:11 am
walt,

I quickly compiled (based on the already here posted USB hack tool )
a DSOExec tool. It will in principle execute every command you type in edit box on the DSO.

so let say to cleanup /mnt just type rm -r /mnt/* and you ready.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on March 01, 2012, 10:57:11 am
walt,

I quickly compiled (based on the already here posted USB hack tool )
a DSOExec tool. It will in principle execute every command you type in edit box on the DSO.

so let say to cleanup /mnt just type rm -r /mnt/* and you ready.

thats cool  :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: stef_teta on March 01, 2012, 06:45:56 pm
Hi,

I'm back on my debug work on the DST1102B !
My first post was here (https://www.eevblog.com/forum/general-chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg89568/#msg89568).

So I followed your advice, and in /mnt/ I found :

Code: [Select]
[root@Tekway-dso /]# ls -lh /mnt/
total 13507
drwxr-xr-x    1 root     root         512 Dec 28 22:04 tekway0_1
drwxr-xr-x    1 root     root         512 Dec 28 22:07 tekway0_2
drwxr-xr-x    1 root     root         512 Dec 28 22:09 tekway0_3
drwxr-xr-x    1 root     root         512 Dec 28 22:27 tekway10_11
drwxr-xr-x    1 root     root         512 Dec 28 22:28 tekway10_12
drwxr-xr-x    1 root     root         512 Jan  4 21:27 tekway13_1
drwxr-xr-x    1 root     root         512 Dec 28 21:41 tekway7_1
drwxr-xr-x    1 root     root         512 Dec 28 21:41 tekway7_2
drwxr-xr-x    1 root     root         512 Dec 28 21:42 tekway7_3
drwxr-xr-x    1 root     root         512 Dec 28 21:42 tekway7_4
drwxr-xr-x    1 root     root         512 Dec 28 21:43 tekway7_5
drwxr-xr-x    1 root     root         512 Dec 28 21:43 tekway7_6
drwxr-xr-x    1 root     root         512 Dec 28 21:45 tekway7_7
drwxr-xr-x    1 root     root         512 Dec 28 21:53 tekway8_1
drwxr-xr-x    1 root     root         512 Dec 28 21:54 tekway8_2
drwxr-xr-x    1 root     root         512 Dec 28 21:56 tekway8_3
drwxr-xr-x    1 root     root         512 Dec 28 21:57 tekway8_4
drwxr-xr-x    1 root     root         512 Dec 28 21:59 tekway8_5
drwxr-xr-x    1 root     root         512 Dec 28 21:59 tekway8_6
drwxr-xr-x    1 root     root         512 Dec 28 22:00 tekway8_7
drwxr-xr-x    1 root     root         512 Dec 28 22:00 tekway8_8
-rw-r--r--    1 root     root        5.0M Dec 28 22:11 tekwayRecord00.rec
-rw-r--r--    1 root     root        4.2K Dec 28 22:03 tekwaySetUp01.set
-rw-r--r--    1 root     root        4.2K Jan  4 21:28 tekwaySetUp130.set
-rw-r--r--    1 root     root        4.0K Jan  4 21:58 tekwaySetUp150.set
-rw-r--r--    1 root     root        4.2K Dec 28 21:59 tekwaySetUp80.set
-rw-r--r--    1 root     root        4.2K Dec 28 21:59 tekwaySetUp81.set
-rw-r--r--    1 root     root        4.2K Dec 28 21:59 tekwaySetUp82.set
-rw-r--r--    1 root     root        4.2K Dec 28 21:59 tekwaySetUp83.set
-rw-r--r--    1 root     root        4.2K Dec 28 22:02 tekwaySetUp90.set
-rw-r--r--    1 root     root       36.6K Dec 28 22:08 tekwayWaveData00.csv
-rw-r--r--    1 root     root       36.6K Dec 28 22:08 tekwayWaveData01.csv
-rw-r--r--    1 root     root       36.6K Dec 28 22:08 tekwayWaveData02.csv
-rw-r--r--    1 root     root       36.6K Dec 28 22:08 tekwayWaveData03.csv
-rw-r--r--    1 root     root       36.6K Dec 28 22:08 tekwayWaveData04.csv
-rw-r--r--    1 root     root       36.1K Dec 28 22:08 tekwayWaveData05.csv
-rw-r--r--    1 root     root       36.1K Dec 28 22:08 tekwayWaveData06.csv
-rw-r--r--    1 root     root       36.1K Dec 28 22:08 tekwayWaveData07.csv
-rw-r--r--    1 root     root       36.0K Dec 28 22:43 tekwayWaveData101.csv
-rw-r--r--    1 root     root        3.4M Jan  4 21:28 tekwayWaveData130.csv
-rw-r--r--    1 root     root       35.2K Jan  4 21:33 tekwayWaveData131.csv
-rw-r--r--    1 root     root        4.3M Jan  4 21:50 tekwayWaveData135.csv
-rw-r--r--    1 root     root        6.0K Jan  4 21:56 tekwayWaveData141.csv
[root@Tekway-dso /]#

As it seems to be a little weird for me, I would like to know what's the "normal" output of ls -lh /mnt/
Cause it seems to me that there is to many files, which can be the cause of my problem.

Thanks for your answers :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 01, 2012, 06:50:11 pm
So I followed your advice, and in /mnt/ I found :

ups, a lot of snapshots and csv exports

As it seems to be a little weird for me, I would like to know what's the "normal" output of ls -lh /mnt/

normaly (means when there is NO USB flash/harddrive mounted/inserted into front USB port)
you should not see anything there, /mnt should be empty.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: stef_teta on March 01, 2012, 06:52:18 pm
Ok, I will delete all and see if it changes something.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Bored@Work on March 01, 2012, 07:05:20 pm
You know you are likely deleting your USB memory stick when deleting the contents of /mnt ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: nordiste on March 01, 2012, 10:36:12 pm
hi,
tinhead, you make a very good stuff and very usefull program with the reset program.
i have idea for update for this program
why not make reset with pressed key at startup instead of putting USB key with good file ?
thanks,
marc
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 02, 2012, 01:28:48 am
why not make reset with pressed key at startup instead of putting USB key with good file ?

this is what i would like to see developed by the manufacturer, i've contacted my contact person
and he forwarded this request already to HanTekway.

Now you might ask why, well very simple. Look on the schematics, none of the keys are connected to
SoC directly (which would be great and piece of cake from coding point of view), they connected to FPGA.
Still not big deal, but we don't know much about. It will costs time to reverse and analyze the FPGA init code,
the keyscan code. Sure , in principle when we not sure with the init (or not sure if the FPGA will still work
properly when wwe init wrong) the of course we can reload the FPGA design before dso.exe will be loaded.

But honestly, the manufacturer is having all this information and for them to compile a small executable
watching the "default button" key is piece of cake!, they need only to copy/paste view lines and recompile it.
They complied and loaded bugy firmware (once again) so in my opinion they have to fix this.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on March 02, 2012, 03:42:08 pm
So I followed your advice, and in /mnt/ I found

I have the same problem.
It seems some-what firmware bug unmounting removable media

Now you might ask why, well very simple. Look on the schematics, none of the keys are connected to
SoC directly (which would be great and piece of cake from coding point of view), they connected to FPGA.

Boot with the default, 3-5 seconds to ask whether you want to boot with default config. if the "by default" button is not pressed , read settings from the flash
something like that.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 02, 2012, 09:05:18 pm
for those who not noticed yet, Hantek have published today new firmware 2.06.3_120224.0
It should fix the bad scroll mode crash, and yes it does. Now DSO is not crashing anymore,
or well at least i was not able to let crash my DSOs.

What not fixed - all new functions are not linked to help file, each time you push help button
in one of these function dso is crashing (so don't use help, lol)

What also not fixed - in equ mode when changing timebase from 4ns/div to 2ns/dov with menu
disable DSO crashing. Fix - don't use supid equ mode on 1GSs real time sampling scope? yeah, but still this is bug.

What new, go figure? Well, there is new point - save waveofrm. You could save
100 waveforms now as bin data (recorder, ref bin data, screenshot and csv of course still there and still working)
and of course reload them later. you can save to SD or USB (when yous DSO is BM/BMV model) or internal
NAND (which might be dangerous .. think about no space in NAND). But don't worry, this function will anyway
not work for you becase your DSO need a director named /param/sav/wav_sav ro allow saving in NAND.
Sure, when you create it manualy it will works for you. And no, don't use USB as location to save - it might work
but it is crashing the most time due the wrong kernel (yet, it is kernel dependant and need again BM/BMV models
which have newer kernel version)

New bugs? Of course ... In single window, sample memory sset to >=40k, both channels (ch1, ch2) enabled
and timebase from 400ns/div up to 2ns/div the position change (fine and coarse) control is not working.
Only scale is moving, but not the waveform. Luckily nothing crashing but still a bug.

Something else? Yep, it is sampling now like Rigol, with long memory (>=40kpoint) enabled it is sampling
now per channel maximal 500MSs and not 400MSs anymore. Sees to be stable.


These firmware are here:

http://www.hantek.com/english/down_list.asp?unid=30 (http://www.hantek.com/english/down_list.asp?unid=30)

use only the "B" versions, even if i speak about "BM/BMV model features" it does NOT means
you can use the BM/BMV model firmware!!!

Hantek/Tekway are trying to maintain the code as simple as possible, which means many features
are visible in all models, but only some available ! And of course the executable from BM7BMV models
is compiled againts kernel 2.6.30.4 and not 2.6.13 as on yoyur DSO today.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: paul on March 02, 2012, 10:44:09 pm
I have found a problem if the trigger point is off of the screen, I found this when I was trying to check that my PIC programming was actually generating the two 100ms pulses I wanted it to at the  right time, which it didnt appear to be doing until I changed the way I captured the waveform, by using 1M memory depth and single sequence. Very strange.   

What I have found is :-
If the trigger point is adjusted / moved off of the visible screen area then the displayed timings are all screwed up.
You can show this easily by connecting a probe to the probe check terminals, set the timebase for 80uS per div and adjust the horizontal position so that the trigger point is 500uS (to the left), you will see the 1kHz square wave change from high to low in the middle of the display, just what you would expect from a 1kz square wave (a period of 1mS).
Now adjust the time base to 40uS per division and the crossover point is no longer in the centre of the screen, indicating that it is not at 500uS any more. If you adjust horizontal position so that it is at the centre again the trigger point is now 454.0uS, change the time base back to 80uS per division and the square wave is now offset to the right of the centre of the screen :(

Return the horizontal position to 500uS and press the `Single Seq` button, now change the sec/div to 40uS. The display will stay locked to the real 500uS point, you can even zoom in to 4us per division with no problems (or more with a higher memory depth), until you press the Single Seq or Run/Stop button and everything is screwed up again.

I have not seen this problem mentioned on the forum, is it only my scope doing this ?
It looks like a simple software bug, I upgraded to 120112.1 a couple of weeks ago (as recommended by Tinhead after my scope locked up, thanks again BTW)  and this has made no difference to the error.

Paul.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 03, 2012, 12:58:26 am
I have not seen this problem mentioned on the forum, is it only my scope doing this ?

Paul,

i'm using these scopes since 2 years ... tested already tons of firmwares .. and never saw this bug !, Fantastic finding ...

The problem exists in every timebase from 40s/div to 800ns/div. Why? Well because the buffer is at the end.
Then from 400ns/div everything seem to be ok, but only as long you not exiting the buffer length again.

Still, this is bug, the scale should not move or not change in wrong way.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: paul on March 03, 2012, 09:17:13 pm
Hi tinhead,
Thanks for confirming its a software bug, I was a bit worried it was only my scope.

As I am used to using older Tek scopes with 1K  memory I have gotten used to moving the trigger point and recapturing the waveform at the point I am interested in, which was exactly how I was using the Hantek.

If you use the full memory there is no need to do this, most of the time :)
However the Hantek is a lot more responsive and faster with 4K memory selected, and after having a total lock up of the scope in 1M memory I am reluctant to use it again, or update the firmware until it has been out there for a while.

Paul.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 06, 2012, 01:51:25 am
HW1007 UART over RJ45


as you maybe already recognized there are some optocouplers and other not populated parts around RJ45 jack.
As few ppl asked what they for i decided to publish some details .
I actualy was about to publish this when some day the full hw1007 schematics is ready .. anyway.

You can (as is out of the box) only use this when you not plan to use LAN in the future.
If you wish to use LAN later, i propose to wire rxd/txd directly to pins 4 and 5 (ithout any optos).

Pins 7 and 8 are today not used by the firmware (but maybe i oversaw something in code),
however they can be easily used e.g. as trigger out. They connected to GPIO pin,
so you can actually toggle that pin,anayway, sometimes is nice to have spare gpio pin.

I haven't defined any components values of these not populated parts, go figure yourself

Btw, J801 is the UART header (which you normaly using when you connect over UART)


EDIT: is there any reason why rating of this thread is that low?


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: NCG on March 07, 2012, 10:19:41 pm
Did anyone got the Voltcraft labeled version outside Germany? I managed to make order when there was stock left but now the order seems to be in somekind of limbo. Safe to assume I missed the train and the order is waiting for next batch of unknown sample rate?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Lo_tse on March 10, 2012, 01:57:18 am
Just curious, has anyone tried hacking the 5102BM model? Supposedly, it is the same scope as DS5102B but with larger memory depth (2M one channel, 1M for 2 channes). Would the same hack work for this model?  Thanks!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 10, 2012, 02:29:25 am
Just curious, has anyone tried hacking the 5102BM model? Supposedly, it is the same scope as DS5102B but with larger memory depth (2M one channel, 1M for 2 channes). Would the same hack work for this model?  Thanks!

yes it works on BM/BMV models too.

Do you plan to buy BM/BMV?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Lo_tse on March 13, 2012, 10:19:33 pm
Thanks! tinhead.  Yeah, I am interested in the BM model (for the larger memory) but they are a little hard to find.  The price quote that I got from a Chinese web-store (where else) was quite reasonable and the price  was only about 10% higher than the regular B version. 

I was also considering the Atten1102CML but there are hardly any user informations/feedbacks on the Internet (don't know why).  As for the Hantek, you have put out so much info here and I feel a bit more comfortable knowing that I probably can get some help from this forum if something goes wrong.

Regards,
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 13, 2012, 11:47:30 pm
Thanks! tinhead.  Yeah, I am interested in the BM model (for the larger memory) but they are a little hard to find. 

the reason why they hard to find is typical for new chinese products. Why?
Well, in principle all these chinese stores are checking market for the manufacturer long time
before the production even started, sometimes even at development stage!
This helps out to find "the best price" and potential launch volume.
Typical it takes 1 to 6 months before something marked as "in stock" in these shops is really available.

Knowing this most non-chinese dealers are just waiting until the manufacturer is double confirming the availibility,
which is sometime mistakes because not every manufacturer will beg a dealer (or inform once again)

Anyway, in case of these BM/BMV models it was about 5 months until they got really available (since 2 weeks i think).
Hantek confirmed this too, so feel free to buy it from your fav. store.

The price quote that I got from a Chinese web-store (where else) was quite reasonable and the price  was only about
10% higher than the regular B version. 

well, you can save another 20USD when you buy BM or BMV model, make a backup of the firmware and send it to me.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Lo_tse on March 14, 2012, 12:33:38 am
One of the rationale that I can think of is that many of those Chinese brands are unknown to the outside world.  More importantly, after sales services, which is extremely important in the Western world, are essentially non-existent since there are no dealers or distributors in the region to support the retailer.  As such, the dealers in the West are always skeptical (cannot blame them) about these products and they are generally no that interested.  Let alone new models that are coming on-line for a particular manufacturer.

Everytime when I want to buy electronic goods from China, I will ask myself the question - what if the thing broke after a few months?  Shipping the item back to China for service is impractical due to high shipping cost (usually buyer has to pay for that).  Thus, whenever I bought something, I pretty much assumed that I will have to find my own solution if the item broke.  Most of the Chinese sellers on the Internet realised that so they usually mark the price fairly low (they do not have much overhead anyway) - to compensate for the lack of after sale service.  If the items are legitimate and passed the QA/QC tests, they are usually OK.  But then there are so many of those unscrupulous sellers that sell factory seconds or fake copies.  These people really kill the reputation of the brand even before it was known. 

I do not know when I will buy the scope, probably in a few months time.   I'll let you know when I got it. 

Regards,
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 18, 2012, 06:35:34 pm
there a good news for those of you who wished to have 1:2:5 instaed of 2:4:8 timebase ratio,
Hantek is (since last two fw versions) working on that. The timebase 1:2:5 is already partialy
implemented, not everything works smooth now so they have not yet enable it.

I hope they implement a firmware feature like "change ratio" to change timebase dynamically,
after 2 yrs of working with these DSO i would miss the 2:4:8
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Payti on March 18, 2012, 07:36:44 pm
@tinhead this is checked from sw 111026.1 that I sent You?

Regards,
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 18, 2012, 07:51:54 pm
@tinhead this is checked from sw 111026.1 that I sent You?

Regards,

no, from 2.06.3_120112.1 and 2.06.3_120224.0
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: quarros on March 19, 2012, 09:20:47 pm
Hello everyone! Can some of you help me to figure out why this scope displays in cursor mode twice as much as the actual reading? Probably just some silly mistake on my part, but I can't seem to figure it out. Thank You
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bilko on March 19, 2012, 09:40:51 pm
Your vertical scale is 2V so the reading is correct
Are you looking at the 2.48V ? that is the trigger voltage
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: quarros on March 19, 2012, 10:22:39 pm
Your vertical scale is 2V so the reading is correct
Are you looking at the 2.48V ? that is the trigger voltage

Well the signal I'm feeding to channel two is 2.462V according to my multimeter. And the displayed reading is 5.04V. Realy I'm missing something basic.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bilko on March 19, 2012, 10:34:00 pm
Read up or google, RMS, peak to peak and average
Your meter is probably reading average
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: quarros on March 19, 2012, 10:38:36 pm
Read up or google, RMS, peak to peak and average
Your meter is probably reading average

As i said basic problem.... my mind is probably taking a tour around the moon because it ain't here.
Anyways thanks.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: alm on March 20, 2012, 07:06:33 pm
Read up or google, RMS, peak to peak and average
The meter is probably indicating RMS. Whether this is an actual RMS value or an approximation by multiplying the average absolute value by sqrt(2) depends on the quality of the meter.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: quarros on March 21, 2012, 05:31:33 pm
Read up or google, RMS, peak to peak and average
The meter is probably indicating RMS. Whether this is an actual RMS value or an approximation by multiplying the average absolute value by sqrt(2) depends on the quality of the meter.

Thank You for the clarification. It was clear form the moment he mentioned RMS, but somehow until that my mind froze up. Well that's what you get if you forget the basics when measuring PWM.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 23, 2012, 01:34:28 pm
IMPORTANT:

as you know Hantek/Tekway said long time ago "we will provide SDK". Well they didn't, even worse - they
removed almost all "3rd dev kit, LabView support" links.

However with some private effort, massive presure (yes, Hantek provided some information!) and hard work
of some users we have enough information to remote control these DSOs, get data, manipulate files and so
on (few things still not ready, if you wish to spend some time on them just do it - every information might be useful)

The major part or "our SDK" is ready, see here:

http://www.mikrocontroller.net/articles/Hantek_Protokoll (http://www.mikrocontroller.net/articles/Hantek_Protokoll)

i'm working right now on #0x01_DSO_Einstellungen_lesen (means read DSO settings) and
#0x11_DSO_Einstellungen_schreiben (means write DSO settings). This is a 208 to 238 bytes block of data,
describing the fronpanel settings, state of DSO and so on.
During consolidation of collected information i recognized however an issue which might have large influence
on how good/bad the PC software is working for you.

In principle each firmware version might be unique, mean the length of these DSO setting blocks might differ,
also the order in which each of these settings is stored/read might differ. Looks complex? No it's not, Tekway
was smart enough as they designed these DSOs to provide a protocol.inf file which describes the order or
settings and size of settings.

However, at the time Hantek shareholder bought some Tekway shares someone "forgot to write down" what's
about the protocol.inf.

What happen then, well, everybody who bought DSO with firmwares 2.05.x to 2.06.2 and later updated to current
2.06.3 firmware will have complettly different protocol.inf file installed, this is because Hantek/Tekway never ever
again released firmware updates with proper protocol.inf.

As some of you guys did made backup of your firmware i got an small overview what you have, some of these dumps
didn't even have protocol.inf, some wrong version.

Anyway, i will create an firmware update which will only copy the current protocol.inf, it will not break your DSO is you
have already the proper version but it will help ppl who bought older model this.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: condor on March 23, 2012, 01:58:36 pm
Tinhead, Thanks for the hard work. I wish you success!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Payti on March 23, 2012, 07:50:02 pm
@tinhead many thanks for Yours great job! Please don't stop ...

Regards,
Tom
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 27, 2012, 04:36:54 pm
well, the User Written SDK is ready and published :
(actually only the SD part of SDK .. the "K" is something you or Hantek have to do).

http://www.mikrocontroller.net/articles/Hantek_Protokoll (http://www.mikrocontroller.net/articles/Hantek_Protokoll)

There is already a nice tool developed on base of the informations from the SD(K), check this:

http://www.dreisiebner.at/dso-usb-tool/ (http://www.dreisiebner.at/dso-usb-tool/)


I'm not using Matlab nor LabView, so don't ask me for compiled drivers - use your power and develop one.
It is not that complex, all you need to access these DSOs is docummented.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Payti on March 27, 2012, 08:49:57 pm
Thanks for info. Work with comunication via USB with DSO is very major development for DSO.

Regards,
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mightyzen on March 30, 2012, 12:14:29 pm
I got the voltcraft dso3062c yesterday from Conrad in the Netherlands. The unit was now only 269 euros. How low can you go?

@tinhead respect for your great work on these hantekway devices!

I would like to change the startup logo after hacking the device to 200mhz. However the voltcraft /logo directory only contains the 3062c files. Where can I find logo's for the hantek/tekway devices?  I looked at the firmware updates but these seem only to contain files that are new or have changed.

Thanks.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 30, 2012, 12:52:00 pm
this is crazy, isn't? 269EUR is just "nothing"

Yea, all latest fw versions are without logo files, anyway, you can gett all of them e.g. here

http://www.mikrocontroller.net/attachment/136103/all_logos.zip (http://www.mikrocontroller.net/attachment/136103/all_logos.zip)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mightyzen on March 30, 2012, 01:50:10 pm
http://www.mikrocontroller.net/attachment/136103/all_logos.zip (http://www.mikrocontroller.net/attachment/136103/all_logos.zip)

Thanks, I must have missed that when I scanned the thread at mikrocontroller.net.

I found a file called test in the root of the voltcraft that intrigued me.

Code: [Select]
/fpga.exe w 40 2E8E
/fpga.exe w 41 0050
/fpga.exe w 41 0600

/fpga.exe w 41 0614       #VGA 1

/fpga.exe w 16 6af0

/fpga.exe w 17 30

/fpga.exe w 18 6af0
/fpga.exe w 19 30

/fpga.exe w 1a b010
/fpga.exe w 1b 30

/fpga.exe w 1c b010
/fpga.exe w 1d 30

/fpga.exe w 1e 6c10

/fpga.exe w 1f 30

/fpga.exe w 20 0000
/fpga.exe w 21 30

/fpga.exe w 22 D000
/fpga.exe w 23 30

/fpga.exe w 24 6c10
/fpga.exe w 25 30

/fpga.exe w 00 9900
/fpga.exe w 01 0000
/fpga.exe w 0d 1000

/fpga.exe w 13 1000

/fpga.exe w 2d 0
/fpga.exe w 2d 2
/fpga.exe w 42 1
/fpga.exe w 42 0
/fpga.exe w 2d 0

Does it mean something to you?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on March 30, 2012, 01:51:52 pm
Quote
I got the voltcraft dso3062c yesterday from Conrad in the Netherlands. The unit was now only 269 euros. How low can you go?

Do you mean exclusive VAT - or from a shop?  Because when I look online at Conrad, the price is still € 299:
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mightyzen on March 30, 2012, 02:01:49 pm
Quote
I got the voltcraft dso3062c yesterday from Conrad in the Netherlands. The unit was now only 269 euros. How low can you go?

Do you mean exclusive VAT - or from a shop?  Because when I look online at Conrad, the price is still € 299:

Including VAT and shipping. Every once in a while conrad sends out coupon codes for a 10% discount. At least they do in the Netherlands.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 30, 2012, 02:39:35 pm

I found a file called test in the root of the voltcraft that intrigued me.

Code: [Select]
/fpga.exe w 40 2E8E
/fpga.exe w 41 0050
/fpga.exe w 41 0600

/fpga.exe w 41 0614       #VGA 1

/fpga.exe w 16 6af0

/fpga.exe w 17 30

/fpga.exe w 18 6af0
/fpga.exe w 19 30

/fpga.exe w 1a b010
/fpga.exe w 1b 30

/fpga.exe w 1c b010
/fpga.exe w 1d 30

/fpga.exe w 1e 6c10

/fpga.exe w 1f 30

/fpga.exe w 20 0000
/fpga.exe w 21 30

/fpga.exe w 22 D000
/fpga.exe w 23 30

/fpga.exe w 24 6c10
/fpga.exe w 25 30

/fpga.exe w 00 9900
/fpga.exe w 01 0000
/fpga.exe w 0d 1000

/fpga.exe w 13 1000

/fpga.exe w 2d 0
/fpga.exe w 2d 2
/fpga.exe w 42 1
/fpga.exe w 42 0
/fpga.exe w 2d 0

Does it mean something to you?

yes it does. From what i know the fpga.exe is a executable which is accessing the FPGA registers,
it will be also used by /dso/app/testacq (which seems to be test app for DST3xxx and DST4xxx series only).

the output of fpga.exe is like
----------------------------- fpga.exe use guid --------------------------
-- fpga.exe w  addr dat : write single data to addr                     --
-- fpga.exe r  addr     : read single addr, single data                 --
-- fpga.exe R  addr len : read single addr, mutil data, d_disp, 10/line --
-------------------------------    end   ---------------------------------

however, this is one of these tools which are on my "check what they doind some day" ...
It seems that Hantek removed it from latest hardware models (hw1007x555583e9) anyway.
The reason why they did can be more the fact that they trying to hide something
and less that they "care about ppl haveing these nee models with new fpga design"

When i ran it on 83e8 and 83e9 models it is did exact the same, so what.

If wish to play with this a bit, check attached (which is missing on Voltcraft as well),
e.g. the line /fpga.exe w 41 0614 is controling VGA offset from ch1.
When yu check the schematic you will see what (mainly S&H)can be manipulated by changing of some FPGA registers values.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on March 30, 2012, 03:18:44 pm
Quote
Including VAT and shipping. Every once in a while conrad sends out coupon codes for a 10% discount. At least they do in the Netherlands.

Ahh.... I see.  I rarely ever buy anything from Conrad - they are normally much more expensive for electronics - so I don't expect to get any coupon codes from them.  So it might be more advantageous to get it from digitalo.de or voelkner.de. instead, since it's only € 3 more for the shipping - and then it's possible to avoid paying the VAT up front (instead of having to deduct it later) - thus paying about  € 260.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mightyzen on March 30, 2012, 03:30:14 pm
Ahh.... I see.  I rarely ever buy anything from Conrad - they are normally much more expensive for electronics

Same here. If I need it quicky, I use farnell for their free shipping and next day delivery. Bargains come from china. But once in a while conrad suprises me, like now.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on March 30, 2012, 03:39:02 pm
Quote
Same here. If I need it quicky, I use farnell for their free shipping and next day delivery. Bargains come from china. But once in a while conrad suprises me, like now.

True... and I just searched for the actiecode you mentioned and found it still available online!  :D  Wow, that means a price of € 226 (excl. BTW) if paid with iDEAL - that's a pretty amazing price.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mightyzen on March 30, 2012, 03:39:25 pm
I wrote a simple python script to convert the ico files from the /logo directory to png. Enjoy.

Thanks to @tinhead for extracting the palette.

Next step will be the other way around.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mightyzen on March 30, 2012, 04:24:52 pm
Here is the script to create an ico file from an image (eg png). Enjoy.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 30, 2012, 04:30:45 pm
nice scripts, thanks!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: NCG on March 31, 2012, 09:58:38 am
On 1M bench model two IS42S16160C-7TL(I) (http://www.issi.com/pdf/42-45S83200D-16160D.pdf (http://www.issi.com/pdf/42-45S83200D-16160D.pdf))
memory's are used. I assume two of IS42S16320b-7TLI (http://www.issi.com/pdf/42S16320B-86400B.pdf (http://www.issi.com/pdf/42S16320B-86400B.pdf)) are suitable replacement for 2M upgrade?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 31, 2012, 10:19:40 am
On 1M bench model two IS42S16160C-7TL(I) (http://www.issi.com/pdf/42-45S83200D-16160D.pdf (http://www.issi.com/pdf/42-45S83200D-16160D.pdf))
memory's are used. I assume two of IS42S16320b-7TLI (http://www.issi.com/pdf/42S16320B-86400B.pdf (http://www.issi.com/pdf/42S16320B-86400B.pdf)) are suitable replacement for 2M upgrade?

no, this is SDRAM (for ARM) not the sample RAM.

What you need is IS61LPS51236A-200TQLI (for example digikey 706-1100-ND)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mightyzen on April 01, 2012, 11:24:18 am
Before and after  :D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on April 01, 2012, 11:53:43 am
@mightyzen - Your report of the 10% off action at Conrad (NL/BE) has gotten me excited to pull the trigger on a Voltcraft (HanTekway) scope.  I assume the scope came with 60MHz probes - did you buy another set?

The best buy I can currently find on a higher-bandwidth set is:  http://www.reichelt.de/Tastkoepfe-und-Zubehoer/TESTEC-MF-312-2/index.html?;ACTION=3;LA=5;GROUP=D169;GROUPID=4043;ARTICLE=48467;START=0;SORT=user;OFFSET=16;SID=13T1D-mH8AAAIAAG3fMaI898a7da000ecbd08212a4af587f46bf2 (http://www.reichelt.de/Tastkoepfe-und-Zubehoer/TESTEC-MF-312-2/index.html?;ACTION=3;LA=5;GROUP=D169;GROUPID=4043;ARTICLE=48467;START=0;SORT=user;OFFSET=16;SID=13T1D-mH8AAAIAAG3fMaI898a7da000ecbd08212a4af587f46bf2)

Does anyone know of a better deal?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Uwe Hermann on April 01, 2012, 01:41:57 pm
@mightyzen - Your report of the 10% off action at Conrad (NL/BE) has gotten me excited to pull the trigger on a Voltcraft (HanTekway) scope.  I assume the scope came with 60MHz probes - did you buy another set?

The best buy I can currently find on a higher-bandwidth set is:  http://www.reichelt.de/Tastkoepfe-und-Zubehoer/TESTEC-MF-312-2/index.html?;ACTION=3;LA=5;GROUP=D169;GROUPID=4043;ARTICLE=48467;START=0;SORT=user;OFFSET=16;SID=13T1D-mH8AAAIAAG3fMaI898a7da000ecbd08212a4af587f46bf2 (http://www.reichelt.de/Tastkoepfe-und-Zubehoer/TESTEC-MF-312-2/index.html?;ACTION=3;LA=5;GROUP=D169;GROUPID=4043;ARTICLE=48467;START=0;SORT=user;OFFSET=16;SID=13T1D-mH8AAAIAAG3fMaI898a7da000ecbd08212a4af587f46bf2)

Does anyone know of a better deal?

Search eBay for "PP-200", they're about 12-15 Euros plus shipping/customs from China.

Uwe.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mightyzen on April 01, 2012, 01:55:04 pm
Search eBay for "PP-200", they're about 12-15 Euros plus shipping/customs from China.

Or search for UT-P05, you can get two for that price.

I'm using tektronix 200mhz 10x probes.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Spawn on April 01, 2012, 02:11:01 pm
If you guys didn't see this topic below, it's worth checking. The Electrician tested some cheap 100MHz probes till 200/300MHz, costs are less than 8 dollar inc. shipment.

https://www.eevblog.com/forum/product-reviews-photos-and-discussion/cheapest-100mhz-oscilloscope-probes-hands-on-review/ (https://www.eevblog.com/forum/product-reviews-photos-and-discussion/cheapest-100mhz-oscilloscope-probes-hands-on-review/)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on April 01, 2012, 02:19:58 pm
Thanks for the great tips everyone!  ;)

@Spawn - one question about your cheap probes - how soft is the 1x/10x switch?  When I had the Rigol DS1052E, I found that I was constantly accidentally changing the probe switch without realizing it (until later).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Spawn on April 01, 2012, 02:40:01 pm
Marmad, I never got them in 1x or 10x by accident but I don’t use my oscilloscopes as much as you do I think. 
I just checked the switch again and you need little force to change its position like any other switch at that size, and you get nice feedback when you change the position, you just feel it.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: saturation on April 01, 2012, 03:20:22 pm
Place a rubber band on the shaft, it will keep it from moving unless you do so purposefully.  If you have orthodontic rubber bands, they are the right size [like you know someone who has braces], you can also add them to any probe to help improve its grip while being electrically inert.  If colored you can also use extras to color code your cables, unlike the color bands many probes ship with that easily fall off; I use colored zip ties to color mark cables as latex bands eventually degrade.

(http://www.stingaeroproducts.com/images/bands.jpg)


Thanks for the great tips everyone!  ;)

@Spawn - one question about your cheap probes - how soft is the 1x/10x switch?  When I had the Rigol DS1052E, I found that I was constantly accidentally changing the probe switch without realizing it (until later).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Spawn on April 01, 2012, 03:22:34 pm
FFS… why the hell did I read last bit of this topic now :D

Mightyzen, you got me thinking too, I didn’t know the Voltcraft rebadged these and Conrad extended 10% till 3 april yesterday (I am subscribed to their daily news) 
I am not in need in a DSO but the price is so low for 200Mhz scope and I can’t resist to get one, I got 2 more days to think about it, meanwhile I need to read this whole thread now thanks for that  ::)  :P
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on April 01, 2012, 03:40:27 pm
Quote
Place a rubber band on the shaft, it will keep it from moving unless you do so purposefully.  If you have orthodontic rubber bands, they are the right size [like you know someone who has braces], you can also add them to any probe to help improve its grip while being electrically inert.  If colored you can also use extras to color code your cables, unlike the color bands many probes ship with that easily fall off; I use colored zip ties to color mark cables as latex bands eventually degrade.

@saturation - Thanks, that's a good tip in general. But honestly, between the Rigol, Owon, and Hantek scopes that I've tested, only the Rigol's probes suffered from this problem - but perhaps I just happened to get a pair that had slightly off-spec 1x/10x switches in them.

Quote
Mightyzen, you got me thinking too, I didn’t know the Voltcraft rebadged these and Conrad extended 10% till 3 april yesterday (I am subscribed to their daily news) 
I am not in need in a DSO but the price is so low for 200Mhz scope and I can’t resist to get one...

@spawn - Yes, it's about €50 cheaper than the lowest EU price for the Rigol DS1052E... and if you have a VAT number, then it's €226 - which is REALLY hard to resist!  :o

Edit:  The only hiccup is that there are none in stock until 20 April (supposedly). But that is the same for Voelkner and Digitalo as well.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Uwe Hermann on April 01, 2012, 04:07:01 pm
For those using Linux, I did a quick Python script (using PyUSB >= 1.0) which lets you upgrade the scope from 60MHz to 200MHz (or other variants if you edit the script, see comments).

IMPORTANT: USE AT YOUR OWN RISK! YOU HAVE BEEN WARNED!

Anyway, here goes. Maybe it's helpful for some people:

http://randomprojects.org/wiki/Voltcraft_DSO-3062C#USB_.28Linux.29 (http://randomprojects.org/wiki/Voltcraft_DSO-3062C#USB_.28Linux.29)

Uwe.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Spawn on April 01, 2012, 04:08:50 pm
Tinhead did really good job on this topic as he did on the firmware hacks, he posted nice link on start post for the Voltcraft DSO so it saved me a lot time. Really big kudos to Tinhead.

Marmad, I don’t have kvk registration anymore and don’t have BTW number, but still this price is great, like you mentioned it is out of stock till 20 april, which worries me I am not sure which version FW we get if we buy one, I don’t think Voltcraft will make a custom FW just for this scope but you never know.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on April 01, 2012, 04:27:40 pm
@Spawn - 14 days cooling off period in the Netherlands - if FW is not what you want OR they've changed the scope somehow to prevent upgrades, you can return it - only losing €6.75 for postage.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 01, 2012, 04:37:18 pm
Really big kudos to Tinhead

you welcome

out of stock till 20 april

don't worry about the date, anther container is already on the way from China to EU.

which worries me I am not sure which version FW we get if we buy one,
I don’t think Voltcraft will make a custom FW just for this scope but you never know.

the original one-time paid firmware was already "Voltcraft" customized (the update on Conrad website not anymore,
its 100% generic Hantek fw), however these scopes are designed to be easy customizable - not only model
name (resulting in bw) but also in manufacturer names.

The only thing Hantek could do is to design a real 60MHz bw und 500MSs DSO (with less ADCs),
They already produced (and Conrad sold) 1000pcs Voltcraft DSOs, this is still not that number
where you will think about PCB re-design. Additionaly the last real 500MSs firmware is year old (2.06.2),
the difference is really big! This means they need not only new (well, the old original DSO5000C series PCB eventually?)
PCB to be produced but also new firmware.

I know that Hantek is working right now very hard on other things than the firmware bugfixes,
they told me "on new models" which i believe them, but even is this was not truth and they already
working on real 500MSs DSO you can still send it back, so not a big deal at all.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Spawn on April 01, 2012, 04:46:36 pm
@Marmad, I still buy a lot from Conrad, if you return it with a good reason you don’t have to pay sometimes they even pick it up for free, I am not sure if they still do that but in the past they picked up couple things from me.
More details here (https://conrad.helptu.nl/(S(bx3wnt45h2w1uzjir3fi0l45))/p_sn_li.aspx?ClickType=2&NodeID=576)

@Tinhead, thanks for making me feel better :)
 I am really considering get one, like I said I don’t really need a DSO, I got a Tek 2221A 100MHz with its huge 4kb memory :P  But this is so cheap and being able to capture a lot more and having screen shots would be really great.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mightyzen on April 01, 2012, 09:20:06 pm
It's a very nice piece of equipment, and I really like it. The hacking and linux is a nice plus too. And the price for these devices is excellent. Even without a coupon. For someone without a scope this is definitely the unit to get (imo).

However if you already own a nice tek scope, or an owon or even a rigol, you must ask yourself whether this scope will bring you much extras. Upgrading to 200 MHz is nice, but you will need matching probes. The supplied probes won't cut it. High quality probes from tek or agilent will cost you seriously, cheap probes from china may suprise you or disappoint you horribly. And then: do you need it?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mightyzen on April 01, 2012, 09:33:14 pm
For those using Linux, I did a quick Python script (using PyUSB >= 1.0) which lets you upgrade the scope from 60MHz to 200MHz (or other variants if you edit the script, see comments).

Nice. You always recognize a good python script: it is small.  8)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Spawn on April 01, 2012, 09:58:57 pm
Migtyhzen, I got 2 scopes one 20 MHz dual channel and a 100 MHz dual channel with 4kb memory, but I can’t resist the price on this one right now, I think I just need a new toy and a nice digital scope with all modern capabilities. Well I got one more day to think about it and it looks like I am going to order one.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mightyzen on April 01, 2012, 10:25:28 pm
Migtyhzen, I got 2 scopes one 20 MHz dual channel and a 100 MHz dual channel with 4kb memory, but I can’t resist the price on this one right now, I think I just need a new toy and a nice digital scope with all modern capabilities. Well I got one more day to think about it and it looks like I am going to order one.

Just follow your heart. I think you will get one  ;) and you won't be disappointed. The question will be: what about your other scopes?

Forget about the 20MHz. But the 100 MHz dual channel with 4kb memory, if it is a tek as I understood it may be nicer than what you will be ordering from conrad. Care to share some details?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Spawn on April 01, 2012, 10:37:39 pm
.... Care to share some details?

Sure :) It’s a Tek 2221A I got it couple weeks ago See here (https://www.eevblog.com/forum/general-chat/new-(old)-additions-to-my-bench/msg96383/#msg96383) To be honest I still grab my 20 MHz one for simple things, and I am attached to my gear always so the 20 MHz will stay on my bench next to others, besides my son is studying electronics so he can use it too.

I might need some help when I get the Voltcraft from you since you figured it out all :D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Uwe Hermann on April 02, 2012, 12:41:22 am
I started documenting my JTAG setup for the S3C2440 (basically I abused an old IDE cable and soldered directly to the PCB), and I also wrote a small OpenOCD config (which has been included upstream already).

http://randomprojects.org/wiki/Voltcraft_DSO-3062C#JTAG_.28for_Samsung_S3C2440.29 (http://randomprojects.org/wiki/Voltcraft_DSO-3062C#JTAG_.28for_Samsung_S3C2440.29)

JTAG seems to work fine, I'm currently dumping the NAND flash chip contents via JTAG (takes quite a while though).

I've also started playing with Barebox (will also test U-Boot later) and buildroot (for rootfs and cross-toolchain). Building a Linux kernel and flashing my own rootfs will be the next step.

My UART setup is also documented here:

http://randomprojects.org/wiki/Voltcraft_DSO-3062C#UART_2 (http://randomprojects.org/wiki/Voltcraft_DSO-3062C#UART_2)

For this, I used a standard FTDI FT232R-3V3 cable and some custom-soldered mini-addons to allow for the cable being removed later (if I need it for another project).


Also, if anyone is interested in more PCB photos, UART bootlogs, lsmod/cpuinfo/mtdinfo/etc., waveform comparison before/after the 200MHz hack, and such stuff: I've put some more photos and info on the randomprojects.org wiki, and more detailed photos of individual PCB parts / chips will follow.


Uwe.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marek on April 03, 2012, 09:15:55 am
Hello @ everybody,
just signed in, after digging page by page throught this thread... Tinhead! Kudos! I bought a handheld DSO1062B (now "almost DSO1202B") mostly because of your work on these scopes.

Now, there's a bug in the handheld I have found, that I haven't seen mentioned yet. Before I explore and document it fully, I'd like to know if it hasn't been already noticed and documented...

To reproduce it:
- Activate CH1 only. Apply some HF signal so that you see the effect (I put a 33MHz clock on CH1)
- In double windows mode zoom into the signal (horizontal resolution M:200ns and W:4ns or so).
- Confirm you can see the signal clearly.
- switch CH2 on. As expected the samplerate halves and the signal resolution drops (this is not part of the bug! this is expected!)
First part of the bug:
-> although the time scale still shows 4ns/div the signal is stretched 2x. You have to switch forth and back on the timebase to get it back right.
Second part of the bug:
Press CH2 again to switch it off. Watch the top window. On the left and right margin you'll see some trash displayed.

There's also a second bug in Pass/Fail function:
- Set up everything and let "stop after fail" on.
- It will stop at fail, but trigger once again and so overwrite the one-off signal you are looking for :/

Marek

EDIT

here: http://www.biasedlogic.com/index.php/hantek-dso1062b-dso1102b-dso1202b-vs-5gss-lecroy-waverunner/ (http://www.biasedlogic.com/index.php/hantek-dso1062b-dso1102b-dso1202b-vs-5gss-lecroy-waverunner/) I have put a few observations about triggering on tricky signals from LeCroy's "demo generator". There's also a comparison of 33MHz "square" wave image from the Hantek and from a 600MHz 5GS/s LeCroy Xi-series (Xi 660 I think).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 07, 2012, 06:36:58 pm
Tinhead! Kudos!

prosze bardzo :)

Now, there's a bug in the handheld I have fo

indeed, i can confirm the first bug (actually only the first part, i ddin't saw any trash on my display)
on 111212 firmware version. Btw, what is loaded on your handheld?

Not sure about second bug, sometimes  it looks like what you said but sometimes it seems to be
just a bit delayed post-processing.

here: http://www.biasedlogic.com/index.php/hantek-dso1062b-dso1102b-dso1202b-vs-5gss-lecroy-waverunner/ (http://www.biasedlogic.com/index.php/hantek-dso1062b-dso1102b-dso1202b-vs-5gss-lecroy-waverunner/) I have put a few observations about triggering on tricky signals from LeCroy's "demo generator". There's also a comparison of 33MHz "square" wave image from the Hantek and from a 600MHz 5GS/s LeCroy Xi-series (Xi 660 I think).

nice test!

I did compared both handheld and bench versions, from what i can saw handheld
is having bit less jitter (pcb routing and new fpga design) and bit higher bw.
With active probes (and the /tst file hack to set bw filter higher) i got 250MHz -3db bw,
more than sufficient for 1GSs DSO.

"PP008 price", yeah, this is "the dark side of cheap scopes", a good set of probes costs
more than such DSO itself.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on April 07, 2012, 06:54:52 pm
Quote
here: http://www.biasedlogic.com/index.php/hantek-dso1062b-dso1102b-dso1202b-vs-5gss-lecroy-waverunner/ (http://www.biasedlogic.com/index.php/hantek-dso1062b-dso1102b-dso1202b-vs-5gss-lecroy-waverunner/) I have put a few observations about triggering on tricky signals from LeCroy's "demo generator". There's also a comparison of 33MHz "square" wave image from the Hantek and from a 600MHz 5GS/s LeCroy Xi-series (Xi 660 I think).

Yes, Marek - very nice 'tutorial' on finding common problems in modern digital signals. You might consider posting it in a new thread for new DSO owners to reference - I think it's very handy. Nicely done!

Mark
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 07, 2012, 07:02:49 pm
before i forget, the really nice tool from:

http://www.dreisiebner.at/dso-usb-tool/ (http://www.dreisiebner.at/dso-usb-tool/)

is not 100% working on handhelds.  This is because on handhelds (and probably bench BM/BMV models)
a newer linux version with completly different driver is installed.

In principle they compatible to each other, unfortunately the newer driver is sometimes "too fast"
which breaks the communication.

The autor of this tool can not fix it without access to affected hadrware, i have to check with him,
maybe he can try to fix it when i send him such hardware (my knownledge of RealStudio is very basic only).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 07, 2012, 07:13:40 pm
i think i will rename this thread ... these new handhelds are in principle like the BM/BMV bench model -
same linux, same features (of course except DMM and ignore display size), same special hacks (LAN, SD, etc.)

I'm honestly a bit too lazy to maintain two thread ..
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marek on April 15, 2012, 06:32:47 pm
prosze bardzo :)

What's your mother tongue?

indeed, i can confirm the first bug (actually only the first part, i ddin't saw any trash on my display)
on 111212 firmware version. Btw, what is loaded on your handheld?

111212.0, same as you mentioned

Not sure about second bug, sometimes  it looks like what you said but sometimes it seems to be
just a bit delayed post-processing.

I'm positive about the next acquisition running, as I did try to hunt down a one-off pulse and it was NEVER to be seen although the scope would trigger on it. I fed the signal parallel to the Hantek and a LeCroy and could see the one-off on LeCroy at the same moment the Hantek would beep...

I did compared both handheld and bench versions, from what i can saw handheld
is having bit less jitter (pcb routing and new fpga design) and bit higher bw.
With active probes (and the /tst file hack to set bw filter higher) i got 250MHz -3db bw,
more than sufficient for 1GSs DSO.

Yup, the scope is quite well balanced about the design: there's no single bottleneck, if you really want to improve it you have to get all parts updated.

"PP008 price", yeah, this is "the dark side of cheap scopes", a good set of probes costs
more than such DSO itself.

And by what margin... brrr!

By the way:

I have populated the DM9000EP along with a LF8505 magnetics (picked one from an old network card) and in the bootlog I see the driver picking it up. So far so good. I'm still missing a suitable jack, but I have ordered one that might fit, it just didn't arrive yet.

The scope menu shows network not supported, I believe this is configuration issue, do you have any details on this?
Is there any useful functionality available over the network interface BESIDES a console (which was reason enough for me to try the thing with a DM9000EP)?

Greets!
Marek
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: liebref on April 16, 2012, 09:50:02 pm
Hello ,

I am new here  and have an Voltcraft DSO upgraded to 200MHZ . All worked fine  so far .
Now by looking at the Hantek home-page , I found  an new Firmware 120224.0
Has anybody already experience with this version -repectivly what known bugs are fixed ?

Thanks for  feedback in advance

Liebref
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 16, 2012, 09:58:26 pm
prosze bardzo :)

What's your mother tongue?


No idea, she never told the truth ... but let me tell you something, we both (you and i) could use
at least 3 (same) langauges to ask for beer

I have populated the DM9000EP along with a LF8505 magnetics (picked one from an old network card) and in the bootlog I see the driver picking it up. So far so good. I'm still missing a suitable jack, but I have ordered one that might fit, it just didn't arrive yet.

The scope menu shows network not supported, I believe this is configuration issue, do you have any details on this?
send me PM and i will explain you how to make it working.

Is there any useful functionality available over the network interface BESIDES a console (which was reason enough for me to try the thing with a DM9000EP)?
there is indeed full support in the firmware, you can use LAN to communicate like you do over USB - the full protocol is implemented,
even the original PC software support LAN connectivity.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 16, 2012, 10:13:45 pm
Hello ,

I am new here  and have an Voltcraft DSO upgraded to 200MHZ . All worked fine  so far .
Now by looking at the Hantek home-page , I found  an new Firmware 120224.0
Has anybody already experience with this version -repectivly what known bugs are fixed ?

Thanks for  feedback in advance

Liebref

i would not use the 120224.0, sure it does fix the "roll mode" bug, but it does have few new bugs.
Even Conrad removed this fw from their website. Soon there will be new version available, so just be patient.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: liebref on April 18, 2012, 08:52:59 pm

Hello ,

Few hours ago , I checked  the online store from Conrad ; SURPRISE !  It does show  the Voltcraft  DSO 3062C  "Sold out "
As the original delivery dates  were already changed in the past from  20 April  to  20 May , I guess somebody has stopped this offer .
Guess they have figured out the real value of the offer  :(
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on April 18, 2012, 09:58:26 pm
Quote
Few hours ago , I checked  the online store from Conrad ; SURPRISE !  It does show  the Voltcraft  DSO 3062C  "Sold out "
As the original delivery dates  were already changed in the past from  20 April  to  20 May , I guess somebody has stopped this offer .

Well, it was listed on the German Conrad site as an anniversary offer - which would indicate limited-time.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: prpplague on April 19, 2012, 07:17:16 pm

Hello ,

Few hours ago , I checked  the online store from Conrad ; SURPRISE !  It does show  the Voltcraft  DSO 3062C  "Sold out "
As the original delivery dates  were already changed in the past from  20 April  to  20 May , I guess somebody has stopped this offer .
Guess they have figured out the real value of the offer  :(

There are some other reasons why the Voltcraft DSO-3062C is no longer available, hopefully there will be an update on the status in the near future....
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on April 19, 2012, 07:27:17 pm
Quote
There are some other reasons why the Voltcraft DSO-3062C is no longer available

Huh?  Would you please care to explain?  This forum is a place of open exchange and dispersal of information.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: prpplague on April 19, 2012, 07:28:23 pm
I started documenting my JTAG setup for the S3C2440 (basically I abused an old IDE cable and soldered directly to the PCB), and I also wrote a small OpenOCD config (which has been included upstream already).

http://randomprojects.org/wiki/Voltcraft_DSO-3062C#JTAG_.28for_Samsung_S3C2440.29 (http://randomprojects.org/wiki/Voltcraft_DSO-3062C#JTAG_.28for_Samsung_S3C2440.29)

JTAG seems to work fine, I'm currently dumping the NAND flash chip contents via JTAG (takes quite a while though).

I've also started playing with Barebox (will also test U-Boot later) and buildroot (for rootfs and cross-toolchain). Building a Linux kernel and flashing my own rootfs will be the next step.

My UART setup is also documented here:

http://randomprojects.org/wiki/Voltcraft_DSO-3062C#UART_2 (http://randomprojects.org/wiki/Voltcraft_DSO-3062C#UART_2)

For this, I used a standard FTDI FT232R-3V3 cable and some custom-soldered mini-addons to allow for the cable being removed later (if I need it for another project).

Also, if anyone is interested in more PCB photos, UART bootlogs, lsmod/cpuinfo/mtdinfo/etc., waveform comparison before/after the 200MHz hack, and such stuff: I've put some more photos and info on the randomprojects.org wiki, and more detailed photos of individual PCB parts / chips will follow.

Uwe.

in conjunction with Uwe, i too have started some documentation on hacking around with the Hantek devices. we are calling it the Das_Oszi project for now:

http://elinux.org/Das_Oszi (http://elinux.org/Das_Oszi)

all the core resources are listed there as well howtos such as adding an external uart to the case using a 3.5mm audio jack:

http://elinux.org/Das_Oszi_3.5MM_Uart (http://elinux.org/Das_Oszi_3.5MM_Uart)

additionally i have git repo's for barebox and mainline kernel which are now able to boot on the device.

Dave
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: prpplague on April 19, 2012, 07:32:07 pm
Quote
There are some other reasons why the Voltcraft DSO-3062C is no longer available

Huh?  Would you please care to explain?  This forum is a place of open exchange and dispersal of information.

i am not able to explain in detail at the moment other than to say Conrad as well as several other Hantek product distributors in the US have been made aware of GPL violations in the hantek products.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on April 19, 2012, 07:39:59 pm
Quote
i am not able to explain in detail at the moment other than to say Conrad as well as several other Hantek product distributors in the US have been made aware of GPL violations in the hantek products.

Hmmm... I don't really see how this could be related to specifically selling out the Voltcraft (rebadged Hantek) DSO-3062C - since the Conrad online site is still listing for sale ALL of the other Voltcraft oscilloscopes which are rebadged Hanteks.

Edit: I don't know how many Voltcraft scopes are rebadged Hanteks - but at quick glance, I recognize at the very least the 4 USB scopes as Hanteks.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: prpplague on April 19, 2012, 07:52:38 pm
Quote
i am not able to explain in detail at the moment other than to say Conrad as well as several other Hantek product distributors in the US have been made aware of GPL violations in the hantek products.

Hmmm... I don't really see how this could be related to specifically selling out the Voltcraft (rebadged Hantek) DSO-3062C - since the Conrad online site is still listing for sale ALL of the other Voltcraft oscilloscopes which are rebadged Hanteks.

Edit: I don't know how many Voltcraft scopes are rebadged Hanteks - but at quick glance, I recognize at the very least the 4 USB scopes as Hanteks.

the conrad.de has removed all references, i suspect that the english site just hasn't caught up......
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: prpplague on April 19, 2012, 07:54:40 pm
i am not able to explain in detail at the moment other than to say Conrad as well as several other Hantek product distributors in the US have been made aware of GPL violations in the hantek products.

right, Hantek was refusing any GPL related discussion since 2years, on the other side they made a (let's call) mistake.
Their using WEEE number which is asociated with Conrad (WEEE DE28001718), not only on these "Voltcraft"
DSOs, even on Hantek handhelds (confirmed, have screenshots of that) or even recent Tekway bench DSOs
(not yet confirmed).

This means Conrad will be not able to explain it as "one time action, OEM products with no deep business relationship therefore
no chance to fulfil GPL",  they know what Hantek is doing, and they selling re-branded Hantek devices (e.g. USB DSOs) since
years.

correct...

what i meant was i am not party to the GPL enforcement actions going on in .de so i can't comment on those, but i am party to the actions going on in the US/Canada, and can only say that a number of retailers have been notified...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on April 19, 2012, 08:00:41 pm
Quote
the conrad.de has removed all references, i suspect that the english site just hasn't caught up......

I'm looking at conrad.nl

Edit: Actually, I just looked at conrad.de - and they ARE still selling the Voltcraft rebadged Hantek USB scopes.

Edit2: Not only that, but they still list the following (but as sold out):

Jubiläumsangebot: VOLTCRAFT DSO-3062C 2-Kanal Oszilloskop, Digitales Speicheroszilloskop, Bandbreite 60 MHz , inkl. Tast »
Best.-Nr.: 122464 - 62
60 MHz Bandbreite
500 MS/s Realtime-Samplingrate, 25 GS/s equivalent
Tastköpfe inklusive
€ 299,00
Mengenrabatt
inkl. gesetzl. MwSt., zzgl. Versand »
ausverkauft
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: prpplague on April 19, 2012, 08:04:26 pm
Quote
the conrad.de has removed all references, i suspect that the english site just hasn't caught up......

I'm looking at conrad.nl

Edit: Actually, I just looked at conrad.de - and they ARE still selling the Voltcraft rebadged Hantek USB scopes.


ahh right i don't think the current action covers .nl
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: prpplague on April 19, 2012, 08:14:04 pm
Quote
the conrad.de has removed all references, i suspect that the english site just hasn't caught up......

I'm looking at conrad.nl

Edit: Actually, I just looked at conrad.de - and they ARE still selling the Voltcraft rebadged Hantek USB scopes.

Edit2: Not only that, but they still list the following (but as sold out):

Jubiläumsangebot: VOLTCRAFT DSO-3062C 2-Kanal Oszilloskop, Digitales Speicheroszilloskop, Bandbreite 60 MHz , inkl. Tast »
Best.-Nr.: 122464 - 62
60 MHz Bandbreite
500 MS/s Realtime-Samplingrate, 25 GS/s equivalent
Tastköpfe inklusive
€ 299,00
Mengenrabatt
inkl. gesetzl. MwSt., zzgl. Versand »
ausverkauft

interesting, that wasn't the case yesterday.....
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 19, 2012, 08:21:03 pm
Quote
the conrad.de has removed all references, i suspect that the english site just hasn't caught up......

I'm looking at conrad.nl

Edit: Actually, I just looked at conrad.de - and they ARE still selling the Voltcraft rebadged Hantek USB scopes.

Edit2: Not only that, but they still list the following (but as sold out):

well, when you search for VOLTCRAFT DSO-3062C you will find "item deleted", however you might see
still this model on some subcategories. This is because their website is caching internaly items even
if they already removed from database -> when you click on such link you will get "item not found or removed".

Example

http://produkt.conrad.de/45973183/voltcraft-dso-3062c-digital-oszilloskop.htm (http://produkt.conrad.de/45973183/voltcraft-dso-3062c-digital-oszilloskop.htm)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: prpplague on April 19, 2012, 08:55:21 pm
yea that appears to be the case.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on April 19, 2012, 09:00:24 pm
Quote
well, when you search for VOLTCRAFT DSO-3062C you will find "item deleted", however you might see
still this model on some subcategories. This is because their website is caching internaly items even
if they already removed from database -> when you click on such link you will get "item not found or removed".

If you search VOLTCRAFT OSCILLOSCOPE, you see it in the list - but yes, the item page itself is deleted. Same as on the Dutch site.

Quote
Btw, these USB DSOs are not issue at all, they not using Linux. Only bench (and Hantek handhelds B series) are
covered by this GPL violation action.

The whole issue seems stupid to me; but then again, I'm not a big believer in licenses, copyrights, patents, and other ancient forms of copy protection. They seem to mainly protect and benefit those with deep pockets.

I am curious as to how it's going to affect outstanding orders. I've had one of the Voltcraft scopes on order at Conrad for about 3 weeks now - I think I'll contact them tomorrow to find out what's going on.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: prpplague on April 19, 2012, 09:36:31 pm
Quote
well, when you search for VOLTCRAFT DSO-3062C you will find "item deleted", however you might see
still this model on some subcategories. This is because their website is caching internaly items even
if they already removed from database -> when you click on such link you will get "item not found or removed".

If you search VOLTCRAFT OSCILLOSCOPE, you see it in the list - but yes, the item page itself is deleted. Same as on the Dutch site.

Quote
Btw, these USB DSOs are not issue at all, they not using Linux. Only bench (and Hantek handhelds B series) are
covered by this GPL violation action.

The whole issue seems stupid to me; but then again, I'm not a big believer in licenses, copyrights, patents, and other ancient forms of copy protection. They seem to mainly protect and benefit those with deep pockets.

I am curious as to how it's going to affect outstanding orders. I've had one of the Voltcraft scopes on order at Conrad for about 3 weeks now - I think I'll contact them tomorrow to find out what's going on.

i am not a big fan of many types of copyrights and patents, however, i do expect that my contributions to open source projects such as the linux kernel be honored for the license i have provided the work under. if they can't play by the rules then they don't deserve to play......

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 19, 2012, 09:50:45 pm
I am curious as to how it's going to affect outstanding orders.

in principle it should not,  but you never know how fast ppl are working.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on April 19, 2012, 09:59:32 pm
Quote
i am not a big fan of many types of copyrights and patents, however, i do expect that my contributions to open source projects such as the linux kernel be honored for the license i have provided the work under. if they can't play by the rules then they don't deserve to play......

Well, the problem is picking and choosing... it seems you have to have the whole mess - or none of it.  As a visual artist and software programmer for over 30 years, I've created tons of copyright-able material - but I've pretty much lost faith in the system.  The world market is a much different place today than when these protection systems were invented and developed - it's dominated by huge corporations that use these systems to create and maintain monopolies.  It was corporations that had the ridiculous Copyright Term Extension Act passed in the US to further protect their 'products' - and at the same time, if you're an entrepreneur and you've created something that they really want - they will just steal it - whether it's patented / copyrighted or not.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: prpplague on April 19, 2012, 10:02:01 pm
Quote
i am not a big fan of many types of copyrights and patents, however, i do expect that my contributions to open source projects such as the linux kernel be honored for the license i have provided the work under. if they can't play by the rules then they don't deserve to play......

Well, the problem is picking and choosing... it seems you have to have the whole mess - or none of it.  As a visual artist and software programmer for over 30 years, I've created tons of copyright-able material - but I've pretty much lost faith in the system.  The world market is a much different place today than when these protection systems were invented and developed - it's dominated by huge corporations that use these systems to create and maintain monopolies.  It was corporations that had the ridiculous Copyright Term Extension Act passed in the US to further protect their 'products' - and at the same time, if you're an entrepreneur and you've created something that they really want - they will just steal it - whether it's patented / copyrighted or not.

well i am 9 and 0 on wins against people violating the GPL with the linux kernel, and the folks at gpl-violations.org have much higher numbers than i do......
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on April 19, 2012, 10:12:43 pm
Quote
Quote from: Spawn on April 02, 2012, 02:08:50 AM
out of stock till 20 april

don't worry about the date, anther container is already on the way from China to EU.

tinhead - you mentioned in the above-quoted message of 2 April that another container of Hanteks was on it's way to EU - did that actually arrive since you posted?

Quote
well i am 9 and 0 on wins against people violating the GPL with the linux kernel, and the folks at gpl-violations.org have much higher numbers than i do......

Well I'm curious what those 9 wins amount to.  Money? Recognition? Removal of the violation?  How much of your own time was invested? Sorry, but this doesn't prove very much.

Of course, there are examples of individuals/smaller companies taking on bigger companies or corporations that violate patents and copyrights - and winning a sizable settlement, etc. - but they are undoubtedly the EXCEPTION - not the rule. In most cases, the infringed party will end up spending as much or more money than is ever awarded. Gosh, just go look up the story of Tesla and Marconi to see the history of patent/copyright infringement by bigger entities in a nutshell.

Patents and copyrights are in place to protect large companies products. If they happen, from time to time, to accidentally protect an individual or small company, well, that's ok too.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: prpplague on April 19, 2012, 10:16:29 pm
Quote
Quote from: Spawn on April 02, 2012, 02:08:50 AM
out of stock till 20 april

don't worry about the date, anther container is already on the way from China to EU.

tinhead - you mentioned in the above-quoted message of 2 April that another container of Hanteks was on it's way to EU - did that actually arrive since you posted?

Quote
well i am 9 and 0 on wins against people violating the GPL with the linux kernel, and the folks at gpl-violations.org have much higher numbers than i do......

Well I'm curious what those 9 wins amount to.  Money? Recognition? Removal of the violation?  How much of your own time was invested? Sorry, but this doesn't prove very much.

Of course, there are examples of individuals/smaller companies taking on bigger companies or corporations that violate patents and copyrights - and winning a sizable settlement, etc. - but they are undoubtedly the EXCEPTION - not the rule. In most cases, the infringed party will end up spending as much or more money than is ever awarded. Gosh, just go look up the story of Tesla and Marconi to see the history of patent/copyright infringement by bigger entities in a nutshell.


settlements were compliance with money to cover legal expenses. most notable companies are:

Leapfrog
Mattel
Fisher-Price
Oregon-Scientific
VTech
ALCO Electronics(aka RCA Electronics)

you have to stand up for your rights or else people/companies will take advantage of them....

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on April 19, 2012, 10:19:20 pm
Quote
you have to stand up for your rights or else people/companies will take advantage of them....

As I said, I don't believe in those 'rights' - but more power to you.  I would just prefer to put what little time I have into creating new stuff - not protecting old stuff I did.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Spawn on April 19, 2012, 10:52:00 pm
I cancelled my Voltcraft order at Conrad last week, first I was not sure if I really needed one like I said before and second I was looking for another car and found the exact model I want so money is well spend, I guess I am not that much in to Electronics like you guys, :D  I like cars too (not that I got a fancy car but still) 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on April 20, 2012, 12:18:12 am
Hello guys, Is there a way to draw a line on the 0 volts position of each channel? I've searched the menus but haven't found any, but as I don't use it very much I'm still not very familiarized with each configuration. Cheers !
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 20, 2012, 12:28:48 am
Quote
Quote from: Spawn on April 02, 2012, 02:08:50 AM
out of stock till 20 april

don't worry about the date, anther container is already on the way from China to EU.

tinhead - you mentioned in the above-quoted message of 2 April that another container of Hanteks was on it's way to EU - did that actually arrive since you posted?

afaik yes and they already got sold-out after few days.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mightyzen on April 23, 2012, 04:36:41 pm
i would not use the 120224.0, sure it does fix the "roll mode" bug, but it does have few new bugs.
Even Conrad removed this fw from their website. Soon there will be new version available, so just be patient.

The lastest batch from conrad was shipped with 120224.0, and indeed it contains some annoying bugs. Is there a way to downgrade?

I know that hantek updates only contain deltas from previous releases, but getting dso.exe and fpga files from a previous update might work. Unfortunately I could not find an archive with past hantek updates.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: prpplague on April 23, 2012, 10:41:07 pm
Thanks to the hard work of the folks at gpl-violations.org and a coordinated effort against Hantek's distributors, all open source license code for the Hantek/Tekway DSO has been released:

http://ftp.gpl-devices.org/pub/vendors/Voltcraft/VOLTCRAFT_dso3000series.zip (http://ftp.gpl-devices.org/pub/vendors/Voltcraft/VOLTCRAFT_dso3000series.zip)


we will be dissecting and making it available from a github repo within the next few days.

thanks gpl-violtations.org!!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on April 23, 2012, 11:04:44 pm
Thanks to the hard work of the folks at gpl-violations.org and a coordinated effort against Hantek's distributors, all open source license code for the Hantek/Tekway DSO has been released:

http://ftp.gpl-devices.org/pub/vendors/Voltcraft/VOLTCRAFT_dso3000series.zip (http://ftp.gpl-devices.org/pub/vendors/Voltcraft/VOLTCRAFT_dso3000series.zip)


we will be dissecting and making it available from a github repo within the next few days.

thanks gpl-violtations.org!!

Can't wait to see a heavy modded firmware with great new features as a result of this !! Thanks for the news !!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bilko on April 23, 2012, 11:05:34 pm

we will be dissecting and making it available from a github repo within the next few days.

thanks gpl-violtations.org!!
Thanks, just downloaded it. Either I have a bad download or some of the tar.gz files are corrupt !!


Edit:
The files are OK, some of the archives are labelled as tar.gz, infact they are just tar files. Delete the .gz suffix and all is ok
This release of source code is surely going to increase sales of the product, well done. Everybody gains.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 24, 2012, 12:34:19 am
This are kernel and driver sources as well some tools (e.g. the fpga tool missing on Voltcraft DSOs).
For sure it is really nice to have these sources (regardless of GPL whatsoever thing), however don't forget
that the DSO code itself (FPGA , CPLD and ARM code) is not and will not be published as they
are Hantek / Tekway Intellectual Property.

Therefore the amount of "new DIY features" is reduced to only few things (like e.g. custom LAN)

You should also not forget that the firmware (ARM code) itself is checking the kernel version,
it need to be 2.6.13 or 2.6.30.4 - if not some features/the firmware will not work.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: prpplague on April 24, 2012, 12:51:01 am
This are kernel and driver sources as well some tools (e.g. the fpga tool missing on Voltcraft DSOs).
For sure it is really nice to have these sources (regardless of GPL whatsoever thing), however don't forget
that the DSO code itself (FPGA , CPLD and ARM code) is not and will not be published as they
are Hantek / Tekway Intellectual Property.

Therefore the amount of "new DIY features" is reduced to only few things (like e.g. custom LAN)

You should also not forget that the firmware (ARM code) itself is checking the kernel version,
it need to be 2.6.13 or 2.6.30.4 - if not some features/the firmware will not work.


true on all points, however it is one step closer to a more functional system....
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: prpplague on April 24, 2012, 12:56:35 am
This are kernel and driver sources as well some tools (e.g. the fpga tool missing on Voltcraft DSOs).
For sure it is really nice to have these sources (regardless of GPL whatsoever thing), however don't forget
that the DSO code itself (FPGA , CPLD and ARM code) is not and will not be published as they
are Hantek / Tekway Intellectual Property.

Therefore the amount of "new DIY features" is reduced to only few things (like e.g. custom LAN)

You should also not forget that the firmware (ARM code) itself is checking the kernel version,
it need to be 2.6.13 or 2.6.30.4 - if not some features/the firmware will not work.

already looking at the released sources shows the hantek folks have no clue and there major performance issues with their build. not only is there kernel a mess, but their root file system is a disaster.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 24, 2012, 01:02:04 am
major performance issues

explain that point
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: prpplague on April 24, 2012, 01:09:31 am
major performance issues

explain that point

i've counted seven spinlock issues that have already been fixed in newer kernels, as well as two atomic operations that are suspect. the root file system also has two processes that are zombies on startup and multiple issues with the init scripts. the usb host and usb slave devices drivers have _major_ improvements in new kernels that deal with errata about double buffering. the dma driver is missing work arounds for about a number of errata.

the whole kernel and root file system is a disaster. hantek should fire everyone involved in the development linux development of this device. in fact i plan to make to make it a case study on what _not_ to do for a commercial product.......
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 24, 2012, 01:48:35 am
i've counted seven spinlock issues that have already been fixed in newer kernels, as well as two atomic operations that are suspect. the root file system also has two processes that are zombies on startup and multiple issues with the init scripts. the usb host and usb slave devices drivers have _major_ improvements in new kernels that deal with errata about double buffering. the dma driver is missing work arounds for about a number of errata.

hmm, so nothing really (maybe except dma driver) important for an DSO.
Usb is anyway 1.1 - even with quad buffering and kernel 25.765 will be still exact that slow
(or even slower due blowed up kernel), zombies or init script are not an performance issues - nobody really
care if DSO need a half second longer to boot (as it have anyway to warm up).

I really doubt that newer overblown kernel on a box with reduced resources with what so ever file
system used only to boot will make an DSO faster ^^

the whole kernel and root file system is a disaster. hantek should fire everyone involved in the development linux development of this device. in fact i plan to make to make it a case study on what _not_ to do for a commercial product.......

maybe, but on the other side this firmware has been developed in 2008, released begin 2009 for testing and
end 2009 for production. At that time 2.6.13 was not that old (actually prefered version on many systems).
I do have here almost all firmware versions from the last years, and when i look inside it was already a chalange
to maintain and support all these versions.

The good things about new models (BM/BMV) - Hantek took the chance for a cut, they now based
on 2.6.30.4 and newer drivers (and usb slave is making me crazy on PC side ... double buffered=doubled issue)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: prpplague on April 24, 2012, 02:13:48 am
i've counted seven spinlock issues that have already been fixed in newer kernels, as well as two atomic operations that are suspect. the root file system also has two processes that are zombies on startup and multiple issues with the init scripts. the usb host and usb slave devices drivers have _major_ improvements in new kernels that deal with errata about double buffering. the dma driver is missing work arounds for about a number of errata.

hmm, so nothing really (maybe except dma driver) important for an DSO.
Usb is anyway 1.1 - even with quad buffering and kernel 25.765 will be still exact that slow
(or even slower due blowed up kernel), zombies or init script are not an performance issues - nobody really
care if DSO need a half second longer to boot (as it have anyway to warm up).

I really doubt that newer overblown kernel on a box with reduced resources with what so ever file
system used only to boot will make an DSO faster ^^

the whole kernel and root file system is a disaster. hantek should fire everyone involved in the development linux development of this device. in fact i plan to make to make it a case study on what _not_ to do for a commercial product.......

maybe, but on the other side this firmware has been developed in 2008, released begin 2009 for testing and
end 2009 for production. At that time 2.6.13 was not that old (actually prefered version on many systems).
I do have here almost all firmware versions from the last years, and when i look inside it was already a chalange
to maintain and support all these versions.

The good things about new models (BM/BMV) - Hantek took the chance for a cut, they now based
on 2.6.30.4 and newer drivers (and usb slave is making me crazy on PC side ... double buffered=doubled issue)

thats just the start. if your position is that "it works why complain?", then i don't accept that.  i've have made a wide range of commercial products using linux. have i created crappy stuff that made it to market? yes. have i learned from my mistakes? yes. the first principle in moving forward is the simple statement and acceptance of "there is a problem".

even if you want to argue that is "works", do we really want people to use the das_oszi as an example for future development? i sure as hell don't.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on April 24, 2012, 09:28:59 am
Thanks to the hard work of the folks at gpl-violations.org and a coordinated effort against Hantek's distributors, all open source license code for the Hantek/Tekway DSO has been released:

http://ftp.gpl-devices.org/pub/vendors/Voltcraft/VOLTCRAFT_dso3000series.zip (http://ftp.gpl-devices.org/pub/vendors/Voltcraft/VOLTCRAFT_dso3000series.zip)


we will be dissecting and making it available from a github repo within the next few days.

thanks gpl-violtations.org!!

gpl-violations.org   wau...  maybe manufacturers are shaking with fear... no..  in real world they just laugh.

Such declaration and the papers can  use just as toilet paper in China.

There is no force of law in any real case, and certainly not in China. China have the Chinese laws and regulations of China and China's laws are in force - and only them. The only way is not to buy them outside of China. And, it is unlikely anyone would want to practice.

 I want to see that these GNU dream ideologists go and try with some western company, example with Agilent etc..
 Who equipment manufacturer they really open firmware.
What manufacturer can do better. They can make more difficult to look anything inside equipment. End - user need nothing other but these things what are for end user implemented in equipment. Nothing other need be open for end user - nothing. Even case can close so that end user can not go inside. Without breaking and damaging. If there is FW update need, it can do so that nothing is available for end user. After this, what for there need be open source codes or anything other open than user manual. 
 
I hope Chinese manufacturers learn this and protect they products in future better. Becouse there is starting fourth world. There are soon so that company in China design and then manufacturing is outside China in some undeveloped countries where prices and work is really cheap.

It is totally different case if we make product what is open example son that "everyone" can do aplications for this product.
Oscilloscope, signal generator, power supply, spectrum analyzer etc. They are stand alone test equipmenst what have they functions and specifications and closed box. How you can show there is something inside what just you or other have right to get source codes. This you can try in Chines law room.

If there is free linux just use it and hide all source codes as well as Possible or what feel for Relevant protect product.

In reality, there is no legal way to force the manufacturer to comply with any of the paper which has no legal force, over the manufacturer.

Suitable for a try. The manufacturer can just smile and push these ideologists papers to the trash. I do not know any cases where someone could have been in China through judicial or other means to force a manufacturer to publish product source code.

Totally different case is if manufacturer look that it may be useful to publishe sources and then they want do it.
No one need give any source codes from ready made end user product where is user interface and  not need touch embedded FW. 

Anyone but the manufacturer does not need to get the software. The interface is a device intended for the use of buttons and controls as well as a screen for the device or the device coming out of the data which is intended for the end user.

These are NOT as called "open project" even if manufacturer have been littlebit lazy, loosy and... let some gates and windows open. 

Uniguely In this special Hantek case it have been useful tah there have been possible to touch FW and maybe in this case it is better if source have been open. 
But even without open sources (source codes) there have be posibility to do something thanks for tinhead, who have done and do  lot of work to make and develop this product better than Hantek alone can do with they EE's who have  maybe lack of experience for do good job and finished product.

So, use this gpl poems in this case as toilet paper.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gall on April 24, 2012, 11:57:15 am
Uh. Finally.

That's much better than completely reverse engineering everything.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bjoernx on April 24, 2012, 07:55:05 pm
@rf-loop: WTF!?  :o
IMHO you seem to have little to no idea, what you're talking about... it's just ridiculous, not worth to go in any detail.  ::)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: alm on April 24, 2012, 10:50:36 pm
There is no force of law in any real case, and certainly not in China. China have the Chinese laws and regulations of China and China's laws are in force - and only them. The only way is not to buy them outside of China. And, it is unlikely anyone would want to practice.
Agreed. Unless that Chinese company wants to have international sales, which Owon apparently does, since they struck a deal with Conrad. At that point the distributors will require them to comply with local laws, which apparently happened in this case. Few western companies will be willing to take the risk of being found responsible, so they'll request compliance or drop the product. Not exactly a good deal for said Chinese company, is it?

I want to see that these GNU dream ideologists go and try with some western company, example with Agilent etc..
Plenty of cases against western companies, did you care to take even ten seconds to do research before starting off on a rant?

In reality, there is no legal way to force the manufacturer to comply with any of the paper which has no legal force, over the manufacturer.
This comment is based on the large number of lawsuits being dismissed, and the fact that Conrad/Owon ignored this request and refused to release any source code? It's extremely rare for these cases to even make it to the courtroom, presumably because defendant's council does not consider the piece of paper worthless.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jap on April 25, 2012, 10:21:14 am
Hi,

I intend to buy a Hantek DSO, but the new versions have problems:

"many of you with 555583e9 version have issues (and these can be replicated by it seems only on your hadrware)."

Do you have more info
- if this is still an issue with new DSO-s, and
- if it is hardware or firmware related?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on April 25, 2012, 10:25:19 am
Conrad/Owon ignored this request and refused to release any source code? It's extremely rare for these cases to even make it to the courtroom, presumably because defendant's council does not consider the piece of paper worthless.

Why Owon need release any source code. How Owon is related to this case?
Hantek, no need release any source codes. 

_________
Edit:
Start Of Add:
It need tightly understand what is difference between derived work and  (x-made) propietary software.
Of course hantek may give this embedded linux source code. This can easy find and download many places.
dso.exe afaik  is NOT derived work and it is out from GPL.
There are also other important things inside oscilloscope what are out from GPL. Just these most important things if example think modifications. Hnatek do not need give any source codes about these and even not binaries.

Some manufactures may use unique key and hide nearly all.. even kernel and also this is legal. And agen, there is no any legal force for get sources or even binaries. If GPL "black side" peoples (there is good side and black side related to this and I think one Linus Thorvalds belongs to this good side) are happy if they get embedded linux kernel source code - oh well --- laughing. Be happy.
If I make equipment where is embedded linux and then there is my propietary software for this equipment... I need not give source codes or binaries or anything. I can give link to you where you find linux kernel sources and thats all. Just becouse my propietary software is my own and it is not any way under GPL  If you do not believe me ask Linus. He have tell it extremely clear.
End Of Add
------------------


Threaten, blackmail and pressure special in sensitive markets can lead to the disclosure of a minor but real legitimate reason for not selling because Hantek oscilloscope and it is a product. Hantek is provided at least at a level no access to the operating system and the user should not have any access to the internal Hantek adopted to modify the software or parts of any kind.
 Besides, if they wants, they can close the whole system and even to conceal the system and change it so that there is no access to it or it is very difficult, and in addition to binary may choose to conveniently change the way that it is no longer a fact of which one could prove it to be that of the GPL hence the concept .

 I definitely side with manufacturers. I encourage that do not publish the source code or any parts of programs in any situation where they have embedded software and a user does not have as product feature to access to neither the need or opportunity to install their own or third-party software or plug-ins.

Also one other recommendation. Do not use embedded linux. Or if use, modify it very hard so that it is not anymore "linux".
Do commercial mature products.

Who, by the way, is responsible about product warranty if some other than manufacturer itself have done any change without manufacturer accepted just this change.


nm eot
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on April 25, 2012, 03:49:25 pm
I finally received a message back from Conrad that they can't give me an expected delivery date for the Voltcraft DSO-3062C  :( which basically equates to 'never' in retail-speak.  And in the meantime, they 'hold on' to my money?  I let them know that it's fine - as long as they pay me interest on my money in the meantime  :D which of course means a refund and no Hantek. Oh well, on the bright side, Agilent is offering free Wavegen and DMM options on their scopes until the end of August.

As an aside: this is just one of the reasons Europe is still in the dark ages (compared to the States) when it comes to online buying. When you order something from a real shop here, the most they usually take is a small down-payment; the fact that Internet sites can take ALL of your money for an item - and then not deliver for long periods of time - is simply ridiculous and unacceptable.

Edit: BTW, for those who don't know, most established US online sites don't charge you anything UNTIL they ship your product - which is the way it should be.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pullin-gs on April 25, 2012, 07:03:14 pm
@rf-loop: WTF!?  :o
IMHO you seem to have little to no idea, what you're talking about... it's just ridiculous, not worth to go in any detail.  ::)
Actually he does.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: alm on April 25, 2012, 09:27:07 pm
Conrad/Owon ignored this request and refused to release any source code? It's extremely rare for these cases to even make it to the courtroom, presumably because defendant's council does not consider the piece of paper worthless.

Why Owon need release any source code. How Owon is related to this case?
Hantek, no need release any source codes. 
Indeed, I confused Hantek and Owon. I saw your name and assumed it was about Owon.

I guess it's an interesting ethics question. Is something like copyright infringement wrong as long as you don't get caught? Does this also apply to Hantek/Owon/Atten/Rigol IP? There are significant differences in ethics between different cultures. Things sometimes gets interesting when said cultures meet, for example trade with each other. I'm sure plenty of western companies that tried to outsource work to Chinese companies have figured this out.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bjoernx on April 25, 2012, 09:56:59 pm
@rf-loop: WTF!?  :o
IMHO you seem to have little to no idea, what you're talking about... it's just ridiculous, not worth to go in any detail.  ::)
Actually he does.

Well... not in this case.

There is one point here, that almost everybody is completely missing, and that is, that hacking a product adds value to it. Any device around, that has been successfully hacked, proves to drive demand for that product, makes it gain longer life-time/usability and higher second-hand reselling price-points. Look at the DBox2 in germany or the WRT45GL. These two hacks showed even another aspect of this - the Dbox2 especially - that is: Hacking leads to innovation! Streaming A/V via ethernet, which has bevome ubiqitous now for a few years, was driven and first put to a working design by customized linux firmwares on the DBox2 - and that was possible with these boxes +10 years ago!

Now, if Hantek were smart, they'd gone open-source with their scopes from day one. Actually they were bound to do so by the GPL, at least to some minimal extent. They did not. Ignoring the license, it is THEM who broke the law and crapped on other people's intellectual property. And now again them hackers are blamed, who are allegedly doing illegal stuff by simply hacking stuff- that they are legally allowed to do in this case!? WTF!! rf-loop's argument simply turns around this obvious question: who did wrong and who is to blame here.

But at least, if Hantek were smart, they would open this product from now on, create a small community to work with, with the best achievable quality of design meeting their customer's needs in mind, nothing else - no ideology here whatsoever! This would not mean, that they'd have to open all of their sources. They could keep their own binary blobs (doing fancy dsp stuff, possibly using other IP-blocks for example) closed, and this is widely accepted by the large majority of users.
But because product management will probably be lead by MBA style thinking, this will not happen and they will miss a great opportunity to make them a name in the industry and the market by making their devices unique. An opportunity to lower their r&d costs, making  bigger chunks of money by driving demand and a respectable name for themselves, that is. And who wouldn't want that actually... but I'm afraid it is their MBA ideology (there you have it!) that hinders them from even realizing opportunities like this, one that is open to them to take on right now in this somewhat difficult situation they brought themselves into.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 25, 2012, 10:11:54 pm
Alm,

in general default answer to ethics question and China is -> in Chinese culture, it's generally okay to steal ideas
and copy others. But this is not the exactly truth, chinese manufacturers trying to produce similar things as other does,
trying to learn, there is nothing worng with that. Sometimes (oh well, depends on what product this might be 99% of the products)
they just don't know exactly what to do and wat such specific product need to fulfil/provide/guarantee.

A good example:
One of my customers in China - they actually producing rigips walls - have started (with some help from ppl whom
i know in EU) to copy "good known German" manufacturer.
In principle nothing wrong with that, so far i know no copyright issues or whatsoever problems - except quality.
The probelm was -> the customer was not aware that there are many kinds of Aluminium! Not a joke.
They know it now and fixed production, but it was somehow funny to hear somethign like that.

So this i exactly the problem - they think they can do something but they can't. From a culture point
of view something like "fail" didn't exists .. so next turn of self made problems start here.
This kind of thinking is producing a lot of bad copys, bad products. Sure, everybody started someday,
everybody spend money for nothing (well, learn process). But the chinese market is groving that
fast that milions of tons of crap is produced every day (and bilions of good product as well).
So what ppl see are exactly these milions tons of crap (and well, there will be always someone trying to sell
such things to reduce the lose), and therefore everything what "made in china" is bad (where still 50-70% of
things we use daily are "made in china" and have superior quality).


Now with Hantek is complettly story: the DSO market is a bilion of Dolar market, there are many competitors.
Without ASICs you just don't have so many options how a good product can be made, just look on
almost all (except Owon and HanTekway) other manufacturers - everything is like a clone of itself - the same DSP,
the same ADC (sometimes different), "same" FPGA, display controlelr and so on ... even firmwares like
from same mother.

So you can imagine why Rigol stopped to focus on low-range market, Owon is using CryptoMem to secure
their design and why HanTekway (actually only management) was worry about potential clones due the fact
of "anything open source" (they actually still pissed of because i draw and published the schematics)

Now, after some presure has been made, they spend some time and understood the GPL thing - they know now
that there is nothing wrong with that and no risk for their products. You might ask where i know that?
Well, they even published GPL sources of a product which is not yet on the market! (but it will be in few weeks) -
there was no need to do this, a 1-3 months after product has been launched would be still perfect from GPL point of view.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bilko on April 25, 2012, 10:15:57 pm
But because product management will probably be lead by MBA style thinking, this will not happen and they will miss a great opportunity to make them a name in the industry and the market by making their devices unique. An opportunity to lower their r&d costs, making  bigger chunks of money by driving demand and a respectable name for themselves, that is. And who wouldn't want that actually... but I'm afraid it is their MBA ideology (there you have it!) that hinders them from even realizing opportunities like this, one that is open to them to take on right now in this somewhat difficult situation they brought themselves into.
Well said, I would like to add that Hantekway el al should concentrate their efforts on hardware design and manufacture, which they seem to be reasonably good at. They can easily keep that proprietary and let the hackers loose on their product to fix and enhance the firmware which is where their skills are seriously lacking
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 25, 2012, 10:38:11 pm
Now, if Hantek were smart,

they are, this is why they refused a proposal of complette open source DSO.

From a marketing point of view disaster in China - it is already (well not for Chinese company to sue another Chinese company
but for other) a disater to sue someone because of copyright problems - but with open hardware/source there is nothing you
can do anymore - you lost.  Day later someone from the street will sell a "bad clone" for 5USD cheaper - and gues what
a typical western buyer will do ? exactly - buy the cheaper product ...

Now, if Hantek were smart,  they'd gone open-source with their scopes from day one.

but there is something they can do! 
they (actually Tekway does) do have older product, 1GSs DSO with only 2.5k memory
and 5.6" display (searc for Tekway DST1102). It runs Linux as well, and a Samsung SoC ...
http://www.microsofttranslator.com/bv.aspx?from=zh-CHS&to=en&a=http%3A%2F%2Fwww.tekwayins.com%2Fproduct.asp%3FArticleID%3D7 (http://www.microsofttranslator.com/bv.aspx?from=zh-CHS&to=en&a=http%3A%2F%2Fwww.tekwayins.com%2Fproduct.asp%3FArticleID%3D7)


This is in my opinion something they can release as open source kit - for small money.
Such product - if copied, cloned - would be not dangerous for "main products line".
Such product could be used by the community to improve the "main product firmware",
it could be used for educational things, it would tie endusers/hackers to HanTekway products.
For 150USD i would buy such kit immediatelly - and i'm sure when in volume produced there
would be still room for HanTekway to made some money.

If something like would works, then there could be a room to think about releasing
the main product line as open source - if not there would be no lose

There are so many ppl buying these cheap crap pseudo-handheld DSO-quad crap things ...
a proper 1GSs scope with only 2.5k sample memory is light years better - and for same amount ofmoney not to beat!

Maybe we should start a voting - to see how many ppl would buy such small kit ?
Who knows, maybe HanTekway wish to make ppl happy and tie them ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on April 25, 2012, 11:34:29 pm
Maybe we should start a voting - to see how many ppl would buy such small kit ?
Who knows, maybe HanTekway wish to make ppl happy and tie them ?


Me in, where do I sign?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gall on April 26, 2012, 09:04:24 am
Me too.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tnt on April 26, 2012, 12:05:45 pm
A couple of points:

 - AFAIK The request was never made to the manufacturer itself, but to the re-seller. Since the licence is a 'distribution' license, you can just ask the guy who provided the hw to you and he will in turn need to ask his provider and so on. And since the distributors are in the EU, they will want to comply and will make pressure to the manufacturer to get the source (i.e. "provide us the source so we can comply with GPL or we stop distributing your product" in short).

 - I actually made a couple of GPL request myself. One at Agilent for the 3000-X and another to vodafone. And in both cases I got the sources I asked for. Took time each time ( > 1 month ) but it worked out fine.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mark on April 27, 2012, 10:48:57 am
What is the best firmware for the DSO-1202B handheld? 
I have firmware version 2.01.1 (111212.0)

How do I get measurements for channel 2 to display? 

Also I found a bug, when viewing a low freqwave, such as the 1khz prob compensation output, trigger on the rising edge and scroll the waveform to view the falling edge in the middle of the screen (I want to do this to measure jitter in the pulse width).  Start with something like 400us/div.  Trigger marker shows approx 500us from rising edge trigger to falling edge in middle of screen. 
Now change the timebase to 20us/div and note how you have to scroll the waveform again to get the falling edge in the middle of the screen again, and now the time between the trigger and the falling edge is displayed as 350us. 
At 8us/div, the time from rising edge trigger to falling edge is displayed as 290us.
At 4us/div, the time from rising edge trigger to falling edge is displayed as 270us.
At 2us/div, the time from rising edge trigger to falling edge is displayed as 260us.
At 800ns/div, the time from rising edge trigger to falling edge is displayed as 255us.  etc etc.  Should be 500us obviously. 

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on April 27, 2012, 10:51:09 am
Hello, Im running HW 0x555583e8 SW 120224.0 and have been using my scope a lot recently, being no master I found an annoying bug, When having just captured a single seq and pressed any menu button, the graph gets compressed in order to get space for the menu bar, this seems Ok, but if you want to measure time with the cursor, you end up measing an horizontally (time) compressed  graph, aka, you measure more time than the actual real time.

I couldn't made myself clear heres a video: DSCN1976 (https://www.youtube.com/watch?v=cFxCAkYEtsE#ws)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 27, 2012, 10:54:32 am
What is the best firmware for the DSO-1202B handheld? 
I have firmware version 2.01.1 (111212.0)

How do I get measurements for channel 2 to display?

Mark

There is newer firmware since day or two available on Hantek website, it does not change that much (if any)
but it is GPL compliant^^

Regards the measurments, sure click Meas button, chose with blue cursor keys the item you wish to change, click F5
to modify and select with F1 the source of measurments.

There are 4 measruments visible in same time, however you can scroll with these blue cursor keys between 4 pages - so you can setup on page 1 and two channel1 and pages 3 and 4 channel 2 - then in principle just scrol up and down between
pages.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 27, 2012, 11:02:09 am
Hello, Im running HW 0x555583e8 SW 120224.0 and have been using my scope a lot recently, being no master I found an annoying bug,
tthere is major bug inside this firmware, or actually last (already 3) firmwares. The reason is that Hantek/Tekway
is working on the timebase procedure - the whole part has been re-written and does have bugs.
They has been notified about and actually they knew it. The good news it - they working on several bugs now,
so soon new firmware with fiex timebase will be available (and probably already the version 1:2:5 instead of 2:4:8 timebase ratio)

When having just captured a single seq and pressed any menu button, the graph gets compressed in order to get space for the menu bar, this seems Ok, but if you want to measure time with the cursor, you end up measing an horizontally (time) compressed  graph, aka, you measure more time than the actual real time.

cursor is screen position nd not data position related, when you change screen size the data is not valid anymore.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mark on April 27, 2012, 11:07:44 am

Mark

shit, i have to answer your PM ... :)

There is newer firmware since day or two available on Hantek website, it does not change that much (if any)
but it is GPL compliant^^

Regards the measurments, sure click Meas button, chose with blue cursor keys the item you wish to change, click F5
to modify and select with F1 the source of measurments.

There are 4 measruments visible in same time, however you can scroll with these blue cursor keys between 4 pages - so you can setup on page 1 and two channel1 and pages 3 and 4 channel 2 - then in principle just scrol up and down between
pages.
Thanks for the reply tinhead. 
The problem is, I have done what you said, but it does not change to ch2 when I press F1 (yes, ch2 is on). 
Even when channel 1 is off and channel 2 is th eonly one displayed, it won't display amy ch2 measurements or allow ch2 to be selected by pressing F1. 
I will upgrade the firmware and see if this is fixed. 

(PS, I didn't send you a PM, so it must have been someone else). 
Thanks again, 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on April 27, 2012, 11:13:19 am
tthere is major bug inside this firmware, or actually last (already 3) firmwares. The reason is that Hantek/Tekway
is working on the timebase procedure - the whole part has been re-written and does have bugs.
They has been notified about and actually they knew it. The good news it - they working on several bugs now,
so soon new firmware with fiex timebase will be available (and probably already the version 1:2:5 instead of 2:4:8 timebase ratio)

Thanks tinhead ! I would love if I could have vertical position for each channel in coarse mode, do you know if it's a future planned feature?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Crenwick on April 27, 2012, 11:21:04 am
Hi,

I just downloaded the FW from Hantek and this is the filename dst1kb_2.06.3_15202b_fact(120423.0).up

Is this a new one ?

Regards,
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mark on April 27, 2012, 11:29:38 am

Mark

shit, i have to answer your PM ... :)

There is newer firmware since day or two available on Hantek website, it does not change that much (if any)
but it is GPL compliant^^

Regards the measurments, sure click Meas button, chose with blue cursor keys the item you wish to change, click F5
to modify and select with F1 the source of measurments.

There are 4 measruments visible in same time, however you can scroll with these blue cursor keys between 4 pages - so you can setup on page 1 and two channel1 and pages 3 and 4 channel 2 - then in principle just scrol up and down between
pages.
Thanks for the reply tinhead. 
The problem is, I have done what you said, but it does not change to ch2 when I press F1 (yes, ch2 is on). 
Even when channel 1 is off and channel 2 is th eonly one displayed, it won't display amy ch2 measurements or allow ch2 to be selected by pressing F1. 
I will upgrade the firmware and see if this is fixed. 

(PS, I didn't send you a PM, so it must have been someone else). 
Thanks again,
Installed 120423.0 and it has fixed the above issue, thanks.  I now have measurements on channel 2.  :D

I updated my previous post with this bug which still remains with 120423.0 firmware for DSO1202B handheld. 
To prevent it from being lost on the previous page I'll copy it here again in the hope someone can verify the same on their scope, it would be interesting to know if this "bug" also exists on the desktop models. 

When viewing a low freqwave, such as the 1khz probe compensation output, trigger on the rising edge and scroll the waveform to view the falling edge in the middle of the screen (I want to do this to measure jitter in the pulse width).  Start with something like 400us/div.  Trigger marker shows approx 500us from rising edge trigger to falling edge in middle of screen.
Now change the timebase to 20us/div and note how you have to scroll the waveform again to get the falling edge in the middle of the screen again, and now the time between the trigger and the falling edge is displayed as 350us.
At 8us/div, the time from rising edge trigger to falling edge is displayed as 290us.
At 4us/div, the time from rising edge trigger to falling edge is displayed as 270us.
At 2us/div, the time from rising edge trigger to falling edge is displayed as 260us.
At 800ns/div, the time from rising edge trigger to falling edge is displayed as 255us.  etc etc.  Should be 500us obviously. 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: paul on April 27, 2012, 05:06:03 pm
@Mark

My DSO5102 desktop scope behaves the same. I think this is a long standing bug, I posted about it here :- 

https://www.eevblog.com/forum/general-chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg94907/#msg94907 (https://www.eevblog.com/forum/general-chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg94907/#msg94907)

But I think you described it better than I did.

Paul.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mark on April 27, 2012, 05:38:28 pm
@Mark

My DSO5102 desktop scope behaves the same. I think this is a long standing bug, I posted about it here :- 

https://www.eevblog.com/forum/general-chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg94907/#msg94907 (https://www.eevblog.com/forum/general-chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg94907/#msg94907)

But I think you described it better than I did.

Paul.

Thanks Paul.  I did read the full thread before buying, but must have missed your post. 
As you note the bug is better with 1M point memory enabled, but it makes the scope very slow to use, I don't know if they have a slower processor on the handhelds to save battery life, but I have to hold some buttons for about 1 sec when using 1M or the keypress doesn't register. 
I also bought an OWON 8102 at the same time and it doesn't have this bug even with only 10k memory enabled. 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mark on April 30, 2012, 12:41:37 pm
Quote from: Mark
Installed 120423.0 and it has fixed the above issue, thanks.  I now have measurements on channel 2.  :D
The DSO1202B crashed at the weekend while I was playing around with it, and when it rebooted I had lost measurements on channel 2 again!  Firmware still showed the upgraded number. 
Flashed firmware again and it's showing channel 2 measurements again.  Maybe there is a way of resetting the scope which will fix this if it happens again instead of reflash. 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 30, 2012, 12:59:32 pm
Quote from: Mark
Installed 120423.0 and it has fixed the above issue, thanks.  I now have measurements on channel 2.  :D
The DSO1202B crashed at the weekend while I was playing around with it, and when it rebooted I had lost measurements on channel 2 again!  Firmware still showed the upgraded number. 
Flashed firmware again and it's showing channel 2 measurements again.  Maybe there is a way of resetting the scope which will fix this if it happens again instead of reflash.

Use the attached usb tool (special version of www.dreisiebner.at/dso-usb-tool (http://www.dreisiebner.at/dso-usb-tool) ), to delete delete the file /param/sav/run*  (which is the setting profile)
In principle even the "default" button (save button and then F4 or F5?) should do the same,
if not try to delete the file above. You can also delete the sys.inf and then reboot:


rm /param/sav/r*
rm /sys.inf


EDIT: The attached usb tool is actually special version for handhelds, not
everything works but shell/settings/screenshot are already ok.
You will need to remove the "zip" in file names and use winrar to unpack it.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: quarros on April 30, 2012, 02:27:34 pm
Hi guys.

This month my Hantek DSO5102B decided enough is enough, and froze up (knobs not working) so i had to open it up, hack it with my Seeeduino via UART, but when I did I found something unexpected. On the right side (top view) of the scope main PCB I saw a MicroSD card slot facing the buzzer. This got me curious whether it is something usable or not because i saw the pads on other images but in my case it was populated. Should I desolder the buzzer and try it out?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 30, 2012, 02:40:43 pm
right, the SD slot is something what BM/BVM model are using.

In principle it can be used on B models, however not from firmware itself (shell for sure).
When you wish to use it from firmware level you will need to have different kernel - 2.6.30.4 (which is the case on BM/BMV models),
this is becuase the firmware is checking the kernel version while displaying/hidding menus or allowing/disallowing access to functions.

For sure you need additionally to have same "license set" in your EEPROM, but thi is mariginal change only.
Now as the kernel sources are available you can in piinciple compile your own 2.6.30.4 kernel (and when you so far then you can ask me how
to enable licenses in eeprom).

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: quarros on April 30, 2012, 06:06:49 pm
(and when you so far they you can ask me how to enable licenses in eeprom).

Sorry can you rephrase that? Im not sure what you mean.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 30, 2012, 06:18:35 pm
(and when you so far they you can ask me how to enable licenses in eeprom).

Sorry can you rephrase that? Im not sure what you mean.

and when you so far then you can ask me how to enable licenses in eeprom
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: quarros on April 30, 2012, 06:34:11 pm
(and when you so far they you can ask me how to enable licenses in eeprom).

Sorry can you rephrase that? Im not sure what you mean.

and when you so far then you can ask me how to enable licenses in eeprom

Ok I think I got you. Thanks

I was just curious about the possibility. However isn't it possible with the current kernel to create a mounting point in the filesystem that points to the SD card as an extension of the root filesystem? Because if it is, than we could use that to record waveforms on the scope I believe. But maybe it is just wishful thinking on my part.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 30, 2012, 07:02:53 pm
(and when you so far they you can ask me how to enable licenses in eeprom).

Sorry can you rephrase that? Im not sure what you mean.

and when you so far then you can ask me how to enable licenses in eeprom

Ok I think I got you. Thanks

I was just curious about the possibility. However isn't it possible with the current kernel to create a mounting point in the filesystem that points to the SD card as an extension of the root filesystem? Because if it is, than we could use that to record waveforms on the scope I believe. But maybe it is just wishful thinking on my part.

in the latest firmware, utility -> page3/3 -> Option -> Wave you can already save a lot of waveforms.
When set to "Flash" the internand NAND will be used ( /param/sav/wave_sav/ directory ). This is already cool
, and you can already save 999 waveform like that ... but when you e.g. set memory depth to 1Mpoint such saved
waveform takes already 1.5MByte in NAND memory .. so be careful :)

SD and USB options in this menu can be only selecred WHEN you have kernel 2.6.30.4 AND the SD license installed,
which is in principle only one entry in EEPROM.

Btw, in case you build your own 2.6.30.4, the mount point for SD card need to be /mnt/sd
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mark on April 30, 2012, 08:57:31 pm
Use the attached usb tool (special version of www.dreisiebner.at/dso-usb-tool (http://www.dreisiebner.at/dso-usb-tool) ), to delete delete the file /param/sav/run*  (which is the setting profile)
In principle even the "default" button (save button and then F4 or F5?) should do the same,
if not try to delete the file above. You can also delete the sys.inf and then reboot:


rm /param/sav/r*
rm /sys.inf


EDIT: The attached usb tool is actually special version for handhelds, not
everything works but shell/settings/screenshot are already ok.
You will need to remove the "zip" in file names and use winrar to unpack it.

Thanks tinhead, good suggestion about the setting profle.  Thanks also for the usb tool, I will have a play with it later. 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: prpplague on May 01, 2012, 02:42:26 am
Hi guys.

This month my Hantek DSO5102B decided enough is enough, and froze up (knobs not working) so i had to open it up, hack it with my Seeeduino via UART, but when I did I found something unexpected. On the right side (top view) of the scope main PCB I saw a MicroSD card slot facing the buzzer. This got me curious whether it is something usable or not because i saw the pads on other images but in my case it was populated. Should I desolder the buzzer and try it out?

if you plan on hacking around with your Hantek on regular bases, you might want to look at the procedure a number of people have used to add an easy to access uart connection to their das_oszi:

http://elinux.org/Das_Oszi_3.5MM_Uart (http://elinux.org/Das_Oszi_3.5MM_Uart)

Dave
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: cww on May 01, 2012, 12:27:28 pm
Hi  All

Looked through the 80 some pages on this topic and I haven't been able to deduce what part of the saga applies here and now. I am teetering between the Hantek and the Owon. I like the Hantek because of it's features and because it runs Linux. The Owon doesn't have the split zoom and update speed but it offers battery operation which would be handy for some things that I do. Kinda like a cordless drill.
How about a snapshot of the current situation?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 01, 2012, 01:17:42 pm
I am teetering between the Hantek and the Owon. I like the Hantek because of it's features and because it runs Linux. The Owon doesn't have the split zoom and update speed but it offers battery operation which would be handy for some things that I do. Kinda like a cordless drill.
How about a snapshot of the current situation?

well, then buy Hantek Handheld, like DSO1062B, 1102B, 1202B (or as BV verion) - you will get battery, split zoom and Linux.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: cww on May 01, 2012, 02:07:44 pm
Not too big on the handheld scopes, just not my thing.  But what I am looking for is: If I order the DSO5102B  Hantek today from Circuit Specialists, which I almost did last night, what can I expect.

Does the 200 Mhz hack still work.
Bugs?
Updates since the reviews?
I did look through the backlog but it's hard to follow what would apply to what's available today.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: quarros on May 01, 2012, 04:23:05 pm

if you plan on hacking around with your Hantek on regular bases, you might want to look at the procedure a number of people have used to add an easy to access uart connection to their das_oszi:

http://elinux.org/Das_Oszi_3.5MM_Uart (http://elinux.org/Das_Oszi_3.5MM_Uart)

Dave

Thank you for the suggestion.
I have thought about something similar, but that is an ideal solution.
Thanks
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 01, 2012, 10:30:41 pm
removed
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: NCG on May 02, 2012, 08:45:34 am
Nice!

Considering the amount of time all this has taken - is there Tinhead Beer Fund somewhere to receive small tokens of appreciations :)?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 02, 2012, 12:49:10 pm
Nice!

Considering the amount of time all this has taken - is there Tinhead Beer Fund somewhere to receive small tokens of appreciations :)?

well, when you like my work scroll up and give me 5 stars!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Parsley on May 03, 2012, 05:58:33 am
Nice!

Considering the amount of time all this has taken - is there Tinhead Beer Fund somewhere to receive small tokens of appreciations :)?

well, when you like my work scroll up and give me 5 stars!

DONE! Great job, thank you! :-)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: NCG on May 04, 2012, 12:36:09 pm
 The kernel check (for 2.6.30.4) seems to be only cosmetic in nature for the 2Mpoint depth (appears to work with checks removed, with 120224.0). Also it seems unnecessary at first glance, that capture depth 1M/2M check is executed with changing timebase...

 Can the debugmode be entered, something interesting there?

A 1Mpoint DSO will not mutate to 2Mpoint model only if you change license informations
in EEPROM - a physical chip will be necessary .. and few other things like e.g. kernel 2.6.30.4 (yeah, the firmware will
check this and if you don't on 2.6.30.4 the 2Mpoint will be not enabled even if you have license).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 04, 2012, 12:55:26 pm
The kernel check (for 2.6.30.4) seems to be only cosmetic in nature for the 2Mpoint depth (appears to work with checks removed, with 120224.0). Also it seems unnecessary at first glance, that capture depth 1M/2M check is executed with changing timebase...

Can the debugmode be entered, something interesting there?

Sure, it can be removed. You need to check in few places as the firmware is checking also while accessing
device drivers (still in dso.exe), just look for "26304" string in disassembly.
Btw, did i mentioned already that exports are removed from current firmware? It make sense to leave copy of
2.06.3_120224.0 somewhere to have a chance to compare code from older (with exports) and current (w/o exports) versions.
Not that this is really necessary, but it makes quick checks easier.

regards debug mode, haven't tried anymore since a long time as it was nothing special there.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on May 04, 2012, 02:20:27 pm
Sure, it can be removed. You need to check in few places as the firmware is checking also while accessing
device drivers (still in dso.exe), just look for "26304" string in disassembly.
Btw, did i mentioned already that exports are removed from current firmware? It make sense to leave copy of
2.06.3_120224.0 somewhere to have a chance to compare code from older (with exports) and current (w/o exports) versions.
Not that this is really necessary, but it makes quick checks easier.

regards debug mode, haven't tried anymore since a long time as it was nothing special there.

So this means that original "B" model users could save up to 2Mpoint?
What do you call exports? I've just saved a CSV to USB stick using 120430 firmware, so I guess exports are another thing.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 04, 2012, 03:08:03 pm
So this means that original "B" model users could save up to 2Mpoint?

depends on few things, in priciple this are things what a "B" need to have to run as "BMV":
- kernel must be 2.6.30.4 (or fw each time patched to skip that part or dummy "uname" need to be created
  to alway answer with 2.6.30.4 when aksing via uname -r.)

- matching device drivers (meanign for kernel 2.6.30.4) or the fw need again to be patched eacht itme you
  do an update to load old drivers instead new drivers (when runnign 2.6.13 kernel and lying about kernel version)

- eventually proper FPGA design

- eventually proper CPLD design programmed into CPLD

- depends on PCB version maybe two selfmade traces or existing ones.

and of course the bigger physical SRAM chip.

Looks complex? No, it's not. Kernel and device drivers are since the published GPL code not an issue anymore
(so no need to wait for physical dump from someones BMV model). FPGA and CPLD designs are still what we
eventually looking for. I do have working FPGA and CPLD designs to support 2Mpoint, but they from
handhelds - in principle they runs on bench models too, but two SRAM traces need to be selfmade (even of hw1007 where
even 4Mpoint is already routed between CPLD, FPGA and SRAM). I do have all i need to run a test,
but no time for that (as i would need to solder all components from that board which i'm using to double check the
hw1007 schematics ...) so you see just too many tasks i'm working on.

Maybe someone can try to solder bigger SRAM  - IS61LPS51236A-200TQLI(digikey 706-1100-ND ),
to patch fw (or install 2.6.30.4 kernel or patch uname) and to report back if the hw1007 boards and
their CPLD design are already good enought for 2Mpoint. I remember Tekway told me this once (actually even 4Mpoint),
but i never tested this on bench since i was wating for final "BMV" model where 2Mpoint works for sure.


What do you call exports? I've just saved a CSV to USB stick using 120430 firmware, so I guess exports are another thing.

the firmware internal procedure names, when you do disassembly they usefull to recognize (immediately by name)
what the firmware is doing in a specific procedure. So they not for every day use important but for advanced hacking.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on May 04, 2012, 03:40:55 pm
Oh thanks for explaining, unfortunately my Tekway scope is my top notch test equipment and would be left hopelss if I manage to break it by changing the SRAM. I see that the recommended SRAM is 18 Mbit, what resolution is the ADC? (10, 12? I guess there's room for a little more points, or is some extra bits of metadata are needed? ) Why not replacing with a bigger SRAM, maybe in the future it's possible to save 4 Mpoint !!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: NCG on May 04, 2012, 07:27:42 pm
 I did change the chip on bench model. There is some weirdness with different timebases going on, based on dropping waveform update rate and points available going from 1M to 2M it does have 2M. There are obvious glitches (missing some part of capture on 1kHz squarewave etc) on some timebases. I have to yet determine, if it is caused by just inadequate 2M check removal, is it intentional to disable 2M for some timebases (because of some bugs) or there is something more serious like addressing for sram. Address pin 80 seems to be disconnected...


Looks complex? No, it's not. Kernel and device drivers are since the published GPL code not an issue anymore
(so no need to wait for physical dump from someones BMV model). FPGA and CPLD designs are still what we
eventually looking for. I do have working FPGA and CPLD designs to support 2Mpoint, but they from
handhelds - in principle they runs on bench models too, but two SRAM traces need to be selfmade (even of hw1007 where
even 4Mpoint is already routed between CPLD, FPGA and SRAM). I do have all i need to run a test,
but no time for that (as i would need to solder all components from that board which i'm using to double check the
hw1007 schematics ...) so you see just too many tasks i'm working on.

Maybe someone can try to solder bigger SRAM  - IS61LPS51236A-200TQLI(digikey 706-1100-ND ),
to patch fw (or install 2.6.30.4 kernel or patch uname) and to report back if the hw1007 boards and
their CPLD design are already good enought for 2Mpoint.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 04, 2012, 08:59:15 pm
pin 80 is unused, this is actually (parity) data pin. These SRAMs are 36bit wide, DSO is using only 32bit therefore 4 data pins are not connected.

To see the difference between Hantek Handheld (where i do have working 2M CPLD/FPGA combination available), the hw0 model
from which i posted schematics here some time ago (in that model there are no traces between the addres pins and CPLD to support
2 or 4M - they need to be done manually) and the hw1007 bench model (on which SRAM is already routed to CPLD to support even 4M,
but of course firmware can't do this now - note the difference to handheld on SRA18 pin) i did prepared 3 snapshots of the
schematics from each of these models. That's the important things only - CPLD and SRAM sheets, so you can compare and see
how things has been made.


EDIT: and no, please don't ask me for the rest of the schmatics .. when i'm done i will post it ...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 10, 2012, 12:32:34 pm
Following GPL inks are for models with s/n below 15000


it seems the Hanteks webmaster was a bit stoned :)

On product pages there are downlaod links to /down/ or /gpl/ subdirs (talking now about GPL code) but they broken.
Anyway, when you look for GPL sources you will find them here:

For Hantek DSO5xxxB, and Voltcraft DSO3062C models:
http://www.hantek.com/download/desktop.zip (http://www.hantek.com/download/desktop.zip)

For Tekway DST1xxxB, DST4xxxB, DST3xxxB models (Tekway posted this link on their website, the directory
contains GPL code and new firmware versions for Tekway DSOs):
http://www.eedownload.com:2108/ (http://www.eedownload.com:2108/)

Both desktop.zip files from above are equal, so you don't need to download both, however there is another one
newer version available (it contains root_fs and some missing libs)
http://www.eedownload.com:8888/desktop.zip (http://www.eedownload.com:8888/desktop.zip)


For Hantek Handheld DSO1xxxB/BV models:
http://www.hantek.com/download/handscope.zip (http://www.hantek.com/download/handscope.zip)
or
http://www.eedownload.com:8888/handscope.zip (http://www.eedownload.com:8888/handscope.zip)


For Hantek DSO5xxxBM/BMV models:
http://www.hantek.com/download/desktop_video.zip (http://www.hantek.com/download/desktop_video.zip)
or
http://www.eedownload.com:8888/desktop_video.zip (http://www.eedownload.com:8888/desktop_video.zip)


For Tekway MST1xxx models:
http://www.hantek.com/download/desktop_logic.zip (http://www.hantek.com/download/desktop_logic.zip)
or
http://www.eedownload.com:8888/desktop_logic.zip (http://www.eedownload.com:8888/desktop_logic.zip)


All these files got updates few days ago, they contains now additionaly root_fs.
It seems however that something goes wrong, desktop.zip contains kernel 2.6.13 but root_fs for 2.6.30.4,
and desktop_logic.zip kernel 2.6.30 but root_fs 2.6.13 ... maybe a good ide to download them all (1.5G only) ...
oh and of course don't forget to download :

http://ftp.gpl-devices.org/pub/vendors/Voltcraft/VOLTCRAFT_dso3000series.zip (http://ftp.gpl-devices.org/pub/vendors/Voltcraft/VOLTCRAFT_dso3000series.zip)

as it contains tool sources already removed from newer files (but still in use on current models)

There is additionaly only the root_fs for Voltcraft models (or wll, all 2.6.13 kernel based model)
and copy of the qq2440 DVD here:
http://www.eedownload.com:7635/ (http://www.eedownload.com:7635/)


Having all these root_fs, kernel and driver versions you can build by yourself a "like a BM/BMV model".
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: gilsoriano on May 16, 2012, 08:20:04 am
Hi guys,

first of all, thanks a lot to tinhead for such an impressive tear down of Hantek's DSO oscilloscope. I was able to serially connect to telnet and everything went fine.

Now, I was thinking in adding extra features and it would be nice if we can organize ourselves to boost it up. For me, the two more important things to add to the oscilloscope are:
* Logic analyzer capability: let's start with I2C, SPI...
* Telnet over ethernet: I would prefer connecting via LAN instead of serial connection.

I don't know if we have already a logic analyzer project, but it would be really nice having one. I see that we can do it in two ways:
* Parsing the serial data to the computer (I doubt about the performance of this). Needs an application to be running in the computer.
* Code a built-in LA in the oscilloscope (don't know where to start with this).

Then, telnet over ethernet. I've heard that there's something built-in for the ethernet capability, but no idea at all. The second obvious option is to get a serial-over ethernet adapter and put it into the DSO. This second one will be more expensive and slow.

Sorry if it seems too dumb what I'm writing. Hope we gather some forces!

Cheers,
Carlos
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Bored@Work on May 16, 2012, 11:11:43 am
Now, I was thinking in adding extra features and it would be nice if we can organize ourselves to boost it up.

dso.exe is the application that hogs the display, the keys and all the hardware. To add more features you either have to inject code into dso.exe or replace dso.exe with something else.

Injecting code into dso.exe requires some trickery. With Hantek removing the exporting of a lot of symbols in the latest firmware this has become more tricky. Replacing dso.exe with something else would require to rewrite all oscilloscope functions from scratch. The alternative to start with the disassembled dso.exe and adding own functions, would violate Hantek's copyright.

Looking at the amount of boring work to do one of the above, compared to what can be gained, I doubt it makes much sense to do it.

* Logic analyzer capability: let's start with I2C, SPI...

The junk PC software shows an alternative way. Read the captured date from the DSO to a PC and decode it with some PC application. While Hantek's PC software is junk it should be easier to write an own PC software doing the decoding than hacking the DSO software.

I would prefer connecting via LAN instead of serial connection.

IIRC there are at least two ways described in this thread. Adding the missing Ethernet hardware to the DSO PCB, or adding the missing drivers for an USB-Ethernet adapter and using a USB-Ethernet adapter.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 17, 2012, 11:29:39 pm
Firmware Backup Tool for Hantek  DSO5xxx BM / BMV models ONLY

- download the attached file and unzip the dst1kb_bm_bmv_backup_tool.up (MD5 c1e5a47f7fa4d0f28b53dbb84d2598c4)
- copy the dst1kb_bm_bmv_backup_tool.up to usb flash drive, ensure nothing else on that drive
- insert usb flash drive into front usb port of your DSO
- run firmware update (Utility, Page 1/2, F2 and F6 to confirm)
- watch usb flash drive LED blinking for few minutes ...

After the backup tool is read (it will take few minutes) your DSO should reboot automatically, if not you will have to do it manually
Now you can remove flash drive and save the content in a secure location.

You will find on the use flash drive directoy "dump" and 4 files (yes, 4 not 3 like on benchtop "B" models)

boot.bin
kernel.bin
root.bin
root2.bin

The first 3 files are already known, the roo2.bin is actually boot logo. I do not have (yet) restore procdure
for this backup, i will for sure develop one as soon i get such backup. So when you have BM/BMV model and
wish help me and others, use that tool, pack these 4 files with winace/winrar/zip/gz/your fav tool, upload in
a secret place and PM me the link

Title: DSO5102B software 'upgrade' - retrograde.
Post by: colinbeeforth on June 09, 2012, 08:19:52 am
G'day,

Well, I was visiting the Hantek website recently and saw the latest software release for my DSO5102B:  'dst1kb_2.06.3_15102b_fact(120423.0).up'

I installed it.  Now the scope is utterly useless and unstrustworthy.

Simple input triangle wveform 1kHz.  Displayed ok.  Then shift the timebase up or down a few steps, and the waveform disappears.  Other function don't work properly - it's nearly useless and I can't trust that it's showing me what is actually there.

I tried running the previous upgrade,  'dst1kb_2.06.3_15102b_fact(120224.0).up'

However, it does not fix it.  I suspect because the upgrade process is only incremental, reverting to an earlier upgrade can't fix it.

Anyone got suggestions how I have revert to the earlier software, or how to do a full install and upgrade to a less horrible version that the current one?

Frankly, I'm fed up with Hantek.  I've had this scope one year now.  I've made 'new product' excuses for Hantek a number of times, hoping they would improve their software and support.  After one year, their new software upgrade wrecks the scope.  They seem to have learned nothing.  Their software engineering is shameful.  They could do far worse than open their software to a community, but since that seems to be impossible for their cultural outlook, I can only hope I can return the scope to something like normal operation - then I can sell the useless object!  the galling thing, is the hardware has potential, it only needs some decent software.  Talk about frustrating from an end user viewpoint...

If I spend 3 times as much as the Hantek, I can get an Agilent scope.  It will be far more than 3 times as useful since it will at least work most of the time.  Even if I just keep my old LeCroy 9310M running, the usefulness in return for cost equation is hugely better.  The DSO5102B might be low cost, but it is so poor in reliability and usefullness that I don't want it any more.  I've got work to do, I can't waste any more time on a tool that I can't trust to show me a true waveform.

So, can anyone help me restore an earlier software setup, so I can get it working again so I can sell it?  I've had enough of Hantek and their terrible software and dismal support.  The hardware seems ok, and could work if they had any software engineering capability.  Have they no pride in their product?

Colin
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 09, 2012, 01:49:30 pm

However, it does not fix it.  I suspect because the upgrade process is only incremental, reverting to an earlier upgrade can't fix it.

right, you need to special crafted firmware to be able to downgrade.
However, when you have older version you can decrypt the *.up file, and copy manually the dso.exe and /Ourlanguages content over to your DSO. You can you the usb tool (check first page of this thread)

Did you remember what firmware version was installed before? I do have almost all fw versions here, so i can
decrypt/extract the dso.exe or compile update file for you.


Anyone got suggestions how I have revert to the earlier software, or how to do a full install and upgrade to a less horrible version that the current one?

Frankly, I'm fed up with Hantek.  I've had this scope one year now.  I've made 'new product' excuses for Hantek a number of times, hoping they would improve their software and support.  After one year, their new software upgrade wrecks the scope.  They seem to have learned nothing. 

they stopped to publish any updates for now, i will tell you later today why and what's about.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: LEECH666 on June 10, 2012, 06:03:35 pm
My Voltcraft DSO-3062 just died too. Locks up after start. Can't acess anything. Scope doesn't react at all. What a huge pile of crap.

Is there an easy way to fix this?

Florian

//EDIT:

Stuck in this mode (see attached picture). No idea why. Just died on it's own.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 10, 2012, 09:09:38 pm
Is there an easy way to fix this?

well, did you installed my fix or at least the latest firmware? For me it looks like the profile bug, you will have to delete (connect over UART to DSO) the file /param/sav/run*
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 11, 2012, 01:09:45 am
There are some news about the firmware development and bug fix status, but let me start with somethign else.

During last weeks i was trying to sign co-operation contract with Hantek. The idea was to help them out, to fix firmware
issues (FPGA and ARM). There was an additional benefit for them -> due the NDA i would have to stop publishing and
supporting any hacks.

Unfortunately Hantek tried to cheat on me (actually twice), so i was finally pissed off and "overreacted" a bit , since them
there is no communication at all between us. My company (and I) have enough open projects for next 2yrs, so not a big deal
at all.  For Hantek no idea, in principle there are many skilled engineers in China, all they need to do is to ask someone for help.

Sure, they told me (and that was the last statement) "because of the long issue list our engineer will re-develop the complette
firmware, we will do QC on that and then made it availabe to our customers. This will take two months"
, but knowing that
since more than a year they still not managed to remove few bugs i honestly don't know what to think about.
Yes i know, they added many new features and yes i know all these bugs are not really something you can't fix
- but their QC, gosh, it is just ridiculous!
I tried to protect them more than once, but honestly guys if i could turn back the time
i would warn Tekway. At time of my first posting i was more then satisfied with my Tekway DSO, but looking back on what
Hantek did to this DSO platform i'm really disappointed.

However, let's hope the best - soon we will see the results.
EDIT: i've just got nice email from Hantek, the firmware will be revised not re-developed.
This of course change the whole situation and make sense, two months to re-develop
would be a typical chinese killer, but two months to revise the firmware is perfectly acceptable


I assume Hantek will not publish any firmware updates until they ready (but who knows ...), so i decided to publish actuall bug
list to share with you all the status quo. There is also workaround list inside. All these bugs are as well on B and BM/BMV bench
top models.

When you read the pdf file, you will find some information about firmware 2.06.3_(120507.6). This is just modified version
of firmware 2.06.3_(120507.0) which you can find (unmodified) in the roof_fs dump (yaffs_2.6.13.bin) attached in this file

http://www.eedownload.com:7635/bootloader.zip (http://www.eedownload.com:7635/bootloader.zip)

All i did was to patch out 3 bugs (this part works already with no issues), however i will try to patch 3 other
bugs (20, 22 and 24) before i post it here. In case i fail, i will of course post the latest working version.
Just give me a day or two.

EDIT: Attachement removed, check first post in this thread
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: digsys on June 11, 2012, 01:46:20 am
Quote
All i did was to patch out 3 bugs (this part works already with no issues), however i will try to patch 3 other
bugs (20, 22 and 24) before i post it here. In case i fail, i will of course post the latest working version.
Just give me a day or two

Bummer, that was one of the make / models I am trying to decide on, but I have to have reasonable reliability.
I, and I'm sure others, appreciate the the work you've done on this, and your patience with the manufacturers.
I've worked with chinese firms on many occasions, and it's often so frustrating, I just give up.
Rarely had ANY trouble with the Taiwanese when they were starting up, they had a totally different attitude.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: LEECH666 on June 11, 2012, 09:59:05 am
hi,
what can i do if i have this problem ? whithout installing this patch before ?
i have last firmware.

thanks.
marc

unfortunately you will have to connect via UART to the DSO (3.3V TTL UART converter is what you need)
and delete manualy the affected file, just execute on the shell rm -f /param/sav/run1kb*
or send the unit back to the shop where you bought it originaly.

I assume this is what I have to do. I've got an iTeaduino v1.1 (http://www.komputer.de/wordpress/wp-content/uploads/2012/02/iteaduino_sch.pdf) (Ardunio clone) which has a FT232RL chip on it, I asume I could talk to this chip over Putty / Hyperterminal. Will have to test it out later ...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 11, 2012, 01:31:46 pm
Another reason why I would not believe in the rewritten software. The current codebase has a few years of QC, done by the customers. The fresh one, hacked together in two month, will not have any OC worth to mention.

luckily they not such "crazy" as i thought, see my edited posting above.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Bored@Work on June 12, 2012, 06:13:18 am
EDIT: i've just got nice email from Hantek, the firmware will be revised not re-developed.This of course change the whole situation and make sense,

You think so? When was the last time Hantek told the truth? For whatever reason they need two more month. The least likely reason is they really want to fix the problems. Maybe they just wanted to get you off their back for two month.

Quote
two months to re-develop
would be a typical chinese killer, but two months to revise the firmware is perfectly acceptable

With their programmers and QC? They had a lot of month to fix things in the past, but didn't manage. If they don't change the way they develop these two more month won't help much.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: LEECH666 on June 12, 2012, 01:04:29 pm
hi,
what can i do if i have this problem ? whithout installing this patch before ?
i have last firmware.

thanks.
marc

unfortunately you will have to connect via UART to the DSO (3.3V TTL UART converter is what you need)
and delete manualy the affected file, just execute on the shell rm -f /param/sav/run1kb*
or send the unit back to the shop where you bought it originaly.

I assume this is what I have to do. I've got an iTeaduino v1.1 (http://www.komputer.de/wordpress/wp-content/uploads/2012/02/iteaduino_sch.pdf) (Ardunio clone) which has a FT232RL chip on it, I asume I could talk to this chip over Putty / Hyperterminal. Will have to test it out later ...

Okay that worked out quite nicely.

I also took notes on what I did, in case anyone else needs a step by step unbricking guide.

Florian
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jack163 on June 14, 2012, 08:31:40 pm
Hi,

I am really impressed about the work of tinhead and others about Hantek "upgrades".
Recently I purchased a handheld DSO1102B.
After checking the PCB I have some questions:

It seems that the RJ45 socket connects not only to LAN but also to some kind of RS232 interface.
Do you have information how to populate/activate the RS232 option?
---> Edit/Add:
 Hoppla, just saw some information about RJ45 UART in #1029.
Did you try this option in the meantime?
---

For SD card option: Is it sufficient just to populate the card holder or are some additional resistors etc. necessary?

Then I saw near to the UART connector an empty connector named "WLAN" Do you have information about this option?

Thanks in advance

jack163
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 15, 2012, 02:00:45 am
Hi,

I am really impressed about the work of tinhead and others about Hantek "upgrades".
Recently I purchased a handheld DSO1102B.
After checking the PCB I have some questions:

It seems that the RJ45 socket connects not only to LAN but also to some kind of RS232 interface.
Do you have information how to populate/activate the RS232 option?

---> Edit/Add:
 Hoppla, just saw some information about RJ45 UART in #1029.
Did you try this option in the meantime?
---

no, only tested on bench top models (and draw small schematics)

https://www.eevblog.com/forum/general-chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg95759/#msg95759 (https://www.eevblog.com/forum/general-chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg95759/#msg95759)

Note that on Handheld the RJ45/uart multiport pinout is bit different (actually better than on bench top)

For SD card option: Is it sufficient just to populate the card holder or are some additional resistors etc. necessary?
you only card holder (and the SD card licensing in EEPROM, search this thread for details)


Then I saw near to the UART connector an empty connector named "WLAN" Do you have information about this option?

no, not yet, probably it is sharing USB pins ? you will have to check that, i'm bit overloaded with other things now.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Polossatik on June 29, 2012, 05:23:25 pm
I'm checking for a scope for friend and see that the Voltcraft 500MSs 60MHz DSO3062C  is back in stock. http://www.conrad.de/ce/de/product/122464 (http://www.conrad.de/ce/de/product/122464)
anyone who knows if this is still the 1GSs 100MHz version?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 29, 2012, 05:42:42 pm
anyone who knows if this is still the 1GSs 100MHz version?

as there are only GPL sources for ONE model available i assume this is still the same 1GSs hardware.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: flodins on June 30, 2012, 01:44:20 am
using previously attached in this thread sources and schematics my colleague and I succeeded

(http://i.imgur.com/Mjf7ul.jpg) (http://i.imgur.com/Mjf7u.jpg)
(http://i.imgur.com/fSKSol.jpg) (http://i.imgur.com/fSKSo.jpg)
(http://i.imgur.com/YrZCbl.jpg) (http://i.imgur.com/YrZCb.jpg)

next step is to make xorg and desktop environment(lxde) and then make open source DSO soft, and maybe watch some Dave's video... (:

... sharing Altium files would be nice

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: flodins on July 01, 2012, 07:07:10 pm
Gentoo Linux kernel: 3.5.0
Xorg
LXDE - Desktop environment
XChat -  IRC client
terminal windows behind
(http://i.imgur.com/MuAMnl.jpg) (http://imgur.com/MuAMn)

Now we got almost everything, working on fpga configuration...

open source DSO soft will be directly for fbdev(lcd) not for xorg due to memory usage, this is quite far future but everything is going good



Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mightyzen on July 02, 2012, 03:47:48 pm
Wow. This is excellent news. Great work. Many questions arise!

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Bored@Work on July 02, 2012, 03:58:48 pm
Congratulations! And I am greatly amused.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: flodins on July 02, 2012, 04:03:43 pm
1 boot on an existing bootloader via an uart-xmodem
2 yes, everything will be on a github and I will write a wiki and a how to
3 both (: we just keep trying, probably we make an open source fpga core, (and cpld)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gall on July 02, 2012, 04:31:09 pm
Fine!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: prpplague on July 02, 2012, 06:34:45 pm
Nice work!

please register over at elinux.org and add your information there for the das_oszi pages we have already started:

http://www.elinux.org/Das_Oszi (http://www.elinux.org/Das_Oszi)

we do already have barebox working as the bootloader:

https://github.com/prpplague/das_oszi_barebox (https://github.com/prpplague/das_oszi_barebox)

much better choice than using ViVi.....

Dave

Gentoo Linux kernel: 3.5.0
Xorg
LXDE - Desktop environment
XChat -  IRC client
terminal windows behind
(http://i.imgur.com/MuAMnl.jpg) (http://imgur.com/MuAMn)

Now we got almost everything, working on fpga configuration...

open source DSO soft will be directly for fbdev(lcd) not for xorg due to memory usage, this is quite far future but everything is going good
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: flodins on July 03, 2012, 04:04:18 pm
more fun (:


(http://wstaw.org/m/2012/07/03/IMG_2624_JPG_300x300_q85.jpg) (http://wstaw.org/m/2012/07/03/IMG_2624.JPG)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: SeanB on July 03, 2012, 04:17:45 pm
Now get MythTv running on it as a client, and have a scope that can do video over an IP connection.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on July 04, 2012, 06:11:42 pm
more fun (:

Nice camera lens. Reminding  my  youth,camera Zenit-ET, photo enlarger, red light, SVEMA film...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: clonecrp on July 04, 2012, 08:51:04 pm
SeanB:

How did you accomplish thi ???  Do you have directions written?
Please advise..
Thanks!
Doug
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pythonstar on July 04, 2012, 10:06:23 pm
Hello,

I have a problem with my Tekway DST1062B - the scope hangs with white screen after running for about 30 seconds to 30 minutes. I have tried upgrading the factory firmware to version 2.06.3 (111202.0) - no change. I have not tried to hack the scope yet.

Hardware version shown is 10050x555583e8, serial number T 1G/005 003613.

Do you have any advice? Thank you!

Ivo

Late reply, but maybe it helps someone else.

I had the same problem with my scope. I noticed that the leds on the front panel was flickering. With Tinheads schematics it was easy to trace the problem down to the 3.3V bus on the PSU. Resoldered all the output stages, and then the scope was fine after that. No flickering leds and no white screen anymore.

  -- R
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: SeanB on July 05, 2012, 05:02:49 am
SeanB:

How did you accomplish thi ???  Do you have directions written?
Please advise..
Thanks!
Doug

Sorry, I like the idea of MythTV, but as i barely watch TV I just use TVtime. If you can compile VLC onto it then it will be a respectable upgrade in media capacity.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 08, 2012, 10:30:12 pm
for those of you wondering about Tekway/Hantek (best) rise time :

I've posted already before some pictures from avalanch pulse generator (like EEVblog #306 - Jim Williams Pulse Generator,),
however this time some pictures with AN94 version (http://www.linear.com/docs/4183 (http://www.linear.com/docs/4183)) tuned to produce ~300ps rise time
pulses with ~20ns length (see EEVblog #311 - Jim Williams Pulser Followup)


The resulting pictures from 200MHz Tekway - as expected rise time ~1.7ns.

Note - i've used external attenuator (and matched DSO scale) to get real results, when the internal DSO attenuator is enabled (2V/DIV and higher)
the measured rise time will be better by additional 300ps (so 1.3ns instead of 1.7ns).

So don't get fooled, this is coming from the overshooting internal attenuator (to improve large signal bw).
It is not recommended to change the internal attenuator calibration, with signals below 250MHz it does work perfect, so don't play with that.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on July 10, 2012, 04:01:11 pm

Please press Enter to activate this console.
[root@Tekway-dso /]# umount: none busy - remounted read-only
umount: none busy - remounted read-only
The system is going down NOW !!
Sending SIGTERM to all processes.
Sending SIGKILL to all processes.
Requesting system reboot.
Restarting system.
.
arch_reset: attempting watchdog reset

***ARM CPU 400MHz BUS 100MHz (DST1000B bootloader)****(091102)


Easy lest way to unlock now is gone. When user entered DSO in console mode, watchdog resetting the system. 20 second is not enough to work in Vi-editor  >:(.

Firmware 2.06.3(120423.0)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 10, 2012, 05:42:38 pm
nothing is gone, just kill watchdog after you loged-on to console by typing:

killall dsod

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on July 11, 2012, 01:42:14 pm
nothing is gone, just kill watchdog after you loged-on to console by typing:

killall dsod

TNX !
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jack163 on July 12, 2012, 02:18:38 pm
Regarding DSO1102 Handheld:

Is there a limitation for SD card capacity? Is SDHC working?

Thanks in advance

jack163
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 12, 2012, 02:55:11 pm
no idea, i would say "ask Hantek". But generally i would say they talking already about "SD" and "2GB",
so i assume SDHC will not work.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 12, 2012, 03:36:49 pm
i did said here

https://www.eevblog.com/forum/general-chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg119688/#msg119688 (https://www.eevblog.com/forum/general-chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg119688/#msg119688)

that i will post soon "patched 2.06.3_120507.6 firmware", however in the meantime i got better one.

I got 2.06.3_120625.0, which is the latest build for Tekway/Hantek/Voltcraft benchtop DSOs (not for BM/BMV models!)

Many bugs from the bug list (check link above) has been already fixed (bug nr 1,2,3,9,10,11,12,17),
i can clearly see that they working on the others (e.g. bug 4). This is really good progress!


There is a small error - while switching dual window on, the timebase value (Main windows value display) will be not updated until
you change something (in principle any control). This afaik have no influence on the firmware or functionality itself - it is
only small "refresh" error. I assume it does have something to do with the bugfix process, so i haven't added it into bug list as
"new bug".

Due size limitation in forum you have to download these 3 zip files, unzip and then unrar the resulting fw120625.rar file.
You will get then the "dst1kb_2.06.3_15202b_fact(120625.0).up" which is the firmware update file.



Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on July 13, 2012, 04:26:08 am
Thank you very much tinhead, nice to see there's still some interest from the manufacturers to get the bugs resolved ;) Firmware update succesful !
As for your list of bugs, I like having a USB Flash Drive always insterted to take screenshots but if it is insterted, on power up it doesn't detects it, you have to remove and insert again once booted.

Also, I noticed something I dont think it was before, while navigating between pages of the utility menu, the navigation is now 1, 2, 3, 2, 1, 2, 3, 2, ... instead of 1, 2, 3, 1, 2, 3... Is this new of I just didn't noticed before?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 13, 2012, 08:30:31 pm
Also, I noticed something I dont think it was before, while navigating between pages of the utility menu, the navigation is now 1, 2, 3, 2, 1, 2, 3, 2, ... instead of 1, 2, 3, 1, 2, 3... Is this new of I just didn't noticed before?

when you click utility button it is 1,2,3,1,2,3 - and yeah when you click F6 it's 1,2,3,2,1
I honestly don't remember, but on another DSO with firmware from Nov 2011 is exact the same, so probably it
was the whole time like that.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jack163 on July 15, 2012, 08:01:14 pm
I did some HW upgrades according to tinhead's infos on my handheld DSO1102B:

Service interface:
I used an ELV USB-TTL interface module.
The module is fixed with two screws M2.5 and two thin square nuts which are inserted in the ventilation openings in the back cover.
The plug can be reached after removing the battery cover.

Ethernet:
DM9000, H1102NL, RJ45 jack with link/traffic LED. The DM9000 is really hard to solder, "next time" I should use a hot air station.

SD-Card:
Just the card holder. By the way, I tried a 16GB SDHC and it was working fine.

jack163
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 15, 2012, 09:03:23 pm
I did some HW upgrades according to tinhead's infos on my handheld DSO1102B:

Service interface:
I used an ELV USB-TTL interface module.
The module is fixed with two screws M2.5 and two thin square nuts which are inserted in the ventilation openings in the back cover.
The plug can be reached after removing the battery cover.

yeah, this is nice one hack.

SD-Card:
Just the card holder. By the way, I tried a 16GB SDHC and it was working fine.

good to know, i never tested anything above 2GB
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mki on July 16, 2012, 07:35:55 am
I just received my DSO3062C from Conrad. I needed a dirt cheap DSO for home use and 311eur with delivery was the best deal i could find.  Fw is 2.06.3 and hw 10070 and still reports 1GS/s. Packaging was poor and i had doubts if the scope actually survived the trip. Well it survived all right, but was without doubt already a customer returned item, judging by the package material inside.

[Removed typical monday stupidity]

Note to self: Be sure the screen protection film is if fact entirely removed.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jellytot on July 17, 2012, 11:26:02 am
After successfully flashing with the latest firmware, Thanks Tinhead. I'm getting an error while doing a calibration, it gets to 33 and fails with "self calibration failed,error:0x502" I've tried several times with the same error, any ideas as to what's gone wrong? Thanks, jellytot
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: komar007 on July 18, 2012, 07:28:49 pm
I just received my DSO3062C from Conrad.

Hi,
can you tell me in which Conrad you bought the scope? German Conrad now claims it's sold out:/
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mki on July 18, 2012, 09:04:08 pm
Hi,
can you tell me in which Conrad you bought the scope? German Conrad now claims it's sold out:/

Conrad.com, but it seems that indeed it is sold out. Also http://www.voelkner.de (http://www.voelkner.de) doesn't list it anymore.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ChrisMe on July 20, 2012, 09:39:34 pm
After successfully flashing with the latest firmware, Thanks Tinhead. I'm getting an error while doing a calibration, it gets to 33 and fails with "self calibration failed,error:0x502" I've tried several times with the same error, any ideas as to what's gone wrong? Thanks, jellytot

Hey there, just a short FYI, tried to reproduce your error on my Hantek DSO5102B and failed, eg everything is as it should be as of now. chris
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jellytot on July 21, 2012, 12:37:17 am
Hi Chrisme, thanks for your post. Can you just try running the calibration a second time and see if it still works..? Thanks!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: komar007 on July 21, 2012, 09:08:26 am
Conrad.com, but it seems that indeed it is sold out. Also http://www.voelkner.de (http://www.voelkner.de) doesn't list it anymore.

Thanks for info. They're back, but it seems only until they run out of supply.
Can you confirm yours is still 1Gs/s with a 500Ms/s sticker?

This fairytale has to end someday:)

EDIT: and it did
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ChrisMe on July 23, 2012, 04:58:12 pm
Hi Chrisme, thanks for your post. Can you just try running the calibration a second time and see if it still works..? Thanks!

just did the second calibration run like you ask, still no problems.
My hw-rev. is 0x555583e8 and sw-ver. is 2.06.3(120625.0)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 23, 2012, 07:08:53 pm
After successfully flashing with the latest firmware, Thanks Tinhead. I'm getting an error while doing a calibration, it gets to 33 and fails with "self calibration failed,error:0x502" I've tried several times with the same error, any ideas as to what's gone wrong? Thanks, jellytot

this is probably because your hardware is hw1005, let me quick check if that's the case.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jellytot on July 23, 2012, 08:35:46 pm
Thanks ChrisMe for taking the time to try again, it looks like Tinhead has already spotted the issue! it is hardware ver 1005 ! is there something that I overlooked? is the update for a different version?
Thanks again for your response.
Regards Jellytot.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kamaloo on July 25, 2012, 08:12:25 pm
After reading this topic I have bigger doubt than I had before. I'm about to buy cheap DSO. Which one will you recommend me: Tekway DST1102B, Owon SDS7102 (I have read whole topic about it also) or Rigol DS1052E? Every one of them have some disadvantages.

Tekway:
-No VGA
-Optional LAN
-No pass/fail test (or maybe I'm blind)
-Long list of issues

Owon:
are there any?
-No Equivalent Time Sampling available (Is it true?)

Rigol:
-100MHz only with hacked fw
-small screen
-no VGA
-no LAN

I'm developing devices with microcontrollers/FPGAs so I will measure different signals (bus signals rise/fall, clocks etc.).

I can buy Owon with bag for almost same cost as Tekway (+20€ for Tekway).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: digsys on July 26, 2012, 01:23:55 am
After reading this topic I have bigger doubt than I had before. I'm about to buy cheap DSO. Which one will you recommend me: Tekway DST1102B, Owon SDS7102 (I have read whole topic about it also) or Rigol DS1052E? Every one of them have some disadvantages.
At this cheaper end of the market, all you can do is weight up WHAT you can't live without and WHAT you can make do.
Even the dearer name brands have limitations, OR slug you serious $$s for add-ons. I went with the Owon MAINLY for the
screen size, VGA, reasonable specs AND built in Battery. I need it for on the road work. For bench work, I'll stick with my
"old" CRT LeCroys thank you :-)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kamaloo on July 26, 2012, 09:15:01 am
What about wfrm/s? Owon is much slower than Tekway. Which one is better when we want to observe glitches? I'm not planning to work outside. I would like to ask about persistance mode in Tekway. Is it analog like? Can someone post a photo of waveform with persist on? On pictures Tekway chassis looks like very poor quality plastic, is it really so bad?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: LEECH666 on July 26, 2012, 09:16:41 am
[...] Every one of them have some disadvantages.

[...]

Rigol:
-100MHz only with hacked fw
[...]


How is that a disadvantage? I'd rather say it's a blessing for those who are pretty short on money and need 100Mhz BW. If you don't want to modify your scope you're free to put some more coin into the official 100 Mhz version of the Rigol scope.

Oh and I think the Hantek/Tekway has a Pass/Fail mode, but it might not be available on older FW versions.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kamaloo on July 26, 2012, 12:55:36 pm
I think that I'm going to buy Owon. It's a pity that there is no persistence option but well... I can deal with it... Oh there is a persistence option so I'm buying it right now  ;D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: digsys on July 26, 2012, 02:26:03 pm
I think that I'm going to buy Owon. It's a pity that there is no persistence option but well... I can deal with it... Oh there is a persistence option so I'm buying it right now  ;D 
Also have averaging (VERY handy) and record length settings. Get the battery if you can afford it ($60), VERY handy !!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kamaloo on July 26, 2012, 05:19:01 pm
I just bought Owon with battery and bag, they are sending tomorrow and delivery probably on Monday :-\ We will see...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 31, 2012, 10:44:32 am
At 1Meg memory length the owon is WAYYY faster than a hantek

and this actually does not matter, you talk about 30 vs 4 waveframes per second. Both values are such
low that you can't use these scopes (in this particular memory depth setting) to catch any kind of glitches.

The point is, HanTekway DSO is capable of much more - with 40k memory about 20 times faster than Owon and
with 4k memory about 85 times faster than Owon!.

These 2500wfms/s are already in a region (just look at Tektronix or Hameg datasheet) where you can use such DSO
to serious (glitch capturing) work.

With Owon - having always max 30 wfms/s you can forget it.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gall on July 31, 2012, 11:05:19 am
and this actually does not matter, you talk about 30 vs 4 waveframes per second. Both values are such
low that you can't use these scopes (in this particular memory depth setting) to catch any kind of glitches.
This all is about human perception. I personally feel more comfortable if the waveform on the display reacts smoothly to my commands. I hope it will be possible to emulate analog scope look and feel in the Hantek custom firmware.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 31, 2012, 04:51:53 pm
and this actually does not matter, you talk about 30 vs 4 waveframes per second. Both values are such
low that you can't use these scopes (in this particular memory depth setting) to catch any kind of glitches.
This all is about human perception. I personally feel more comfortable if the waveform on the display reacts smoothly to my commands. I hope it will be possible to emulate analog scope look and feel in the Hantek custom firmware.

i remember there was version working bit faster, something about 16 frames/s while in 1M mode. That was already
acceptable (from UI point of view), the lag was under 100ms.

In principle the idea of having keyboard control in FPGA was ok, there is no lag internaly.
The problem is on ARM side, afaik the process will be not interrupted on keyboard change. From a data integritiy point of view
a good idea, the last thing you wish is inconsistent data because of broken thread after interrupt.
For sure this can be done better, the only open question is how fast such firmware will be. I've played with current firmware,
e.g. patched the key event procedure to call an init after key status change - the resulting lag was samller, however due
missing event filter the fw was doing init after every change, so not the best idea.

On the other side they working on the firmware, the progress (of bug fixing and improvements) was already very good
(see fw 2.06.3_120625.0), let's hope they still on track. I think i will ask for updates on that.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: johncomp on August 03, 2012, 03:51:21 am
On the other side they working on the firmware, the progress (of bug fixing and improvements) was already very good
(see fw 2.06.3_120625.0), let's hope they still on track. I think i will ask for updates on that.
This firmware is appropriate for hantek dso1202b (hw: 83e8)?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Kc on August 03, 2012, 10:16:36 am
Hi all,
I want to write here my experience in hacking the Tekway DST 1062b.
I bought the DSO in July 2012 in Germany.
The number on the sticker on the PCB is 120xxx.
Hardware-Version: 100700x555583e9
Software-Version: 2.06.3(120507.0)
There are no pins soldered at UART-connector J801! Only holes. You have to solder 3 wires on the board to connect the DSO fail-safe with a PC.
When I use PuTTY to communicate with the DSO, there is a big problem. After connecting with the serial option, I press Ctrl-C and Enter. Now the console is in the root-directory open, but only for about 5 seconds! Then the DSO reboots automatically!!! You have to be very fast to enter and fulfill commands.

After fulfilling mv /dst1062b /dst1202b and rebooting the "dst1062b" is replaced automatically in all mentioned files, except in the file logotype.dis! (The DSO shows in the Utility-screen "System Information" still: model dst1062b.
And believe me, it is ambitious within 5 seconds entering the console, open the vi editor, change the "tekway_dst1062b" to "tekway_dst1202b", and save it! ;)
Is there a possibility to prevent the DSO from restarting after 5 seconds when entering the console?
Thank you very much
C.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Payti on August 03, 2012, 09:11:46 pm
After logging to console just kill watchdog first:

killall dsod

Regards,
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Polossatik on August 09, 2012, 11:21:11 am
just fyi: it seams there are again some Voltcraft 500MSs 60MHz DSO3062C  back in stock. http://www.conrad.de/ce/de/product/122464 (http://www.conrad.de/ce/de/product/122464)
maybe returns?

just ordered one, i'll update when i get it. I hope it's still a Hantek DSO5202B
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Polossatik on August 11, 2012, 03:42:30 pm
well, got the  Voltcraft 500MSs 60MHz DSO3062C , still 1GSa/s

played around a bit, i like it 's interface a lot more than the rigol menu system, but it has some rather silly inconsistency's and is not always very responsive

Hardware-Version: 100700x555583e9, came with 2.06.3(120507.0) , updated to 120625

used the little usb based windows tool to go to 200MHz, worked fine, no change in name and so but who cares.


just one annoying thing, it seams now and then the interface defaults back to german ( if you for example do the "probe check" routine) from english
anyone any idea if there is somewhere a "default language" in a conf file?

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: komar007 on August 12, 2012, 07:50:22 pm
I've just bought one too, we'll see next week.
It seems it is the best option for an entry-level scope I've seen so far.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Kampfwurst on August 16, 2012, 09:24:49 pm
there is a new FW on the Hantek site

http://www.hantek.com/english/down_list.asp?Unid=30 (http://www.hantek.com/english/down_list.asp?Unid=30)

V2.06.3_0808
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Jane on August 20, 2012, 06:19:32 pm
I am new to this forum and I am going to buy an oscilloscope. I need about 200Mhz one.
Which brand can you recommend? ( having in mind moderate budget).
I was thinking about Hantek DSO 5202B.
Or do you know a better choice at a similar price and function?
Thanks
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Michael Weston on August 21, 2012, 10:38:58 am
I am new to this forum and I am going to buy an oscilloscope. I need about 200Mhz one.
Which brand can you recommend? ( having in mind moderate budget).
I was thinking about Hantek DSO 5202B.
Or do you know a better choice at a similar price and function?
Thanks
I'm curious.  If I may ask, what do you want to do with a 200 MHz oscilloscope?  Do you want an analog or digital oscilloscope?  What does "moderate budget" mean to you exactly?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Jane on August 21, 2012, 10:58:09 am
Need it for the satellite repairs and other things.
By moderate budget I mean that I want to spend on oscilloscope about USD 500.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ot1 on August 22, 2012, 10:52:12 pm
Need it for the satellite repairs and other things.
By moderate budget I mean that I want to spend on oscilloscope about USD 500.


1. Field work or benchtop work?
2. Field work then you need a battery
3. concerning a 200mhz scope, $500 would be low budget, not moderate.

4. if you get a Han/Tekway 60mhz and upgrade the firmware to 200mhz, you need better probes then what come with the 60mhz (according to others here)
5. buying the DSO 100mhz and upgrading the firmware, you get probes that can do 200mhz (hopefully) and is the most economical solution, then you have to decide on field (portable with battery) or benchtop (no battery but larger screen)
6. 300mhz probe set cost USD 65.
7. But maybe you don't want to screw around with the firmware upgrade, a Hantek 200mhz is not alot more than a 100mhz.

8. I noticed that mortoncontrols. com doesn't have the benchtop models in stock now only the portable.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 23, 2012, 06:36:04 am
for field work you can use Hantek DSO1062B handheld - as the hardware is almost the same as on benchtop
model (except display and psu/battery of course) you can hack it to 200MHz as well.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Jane on August 23, 2012, 07:50:17 am
Thanks guys for help.
Which model can be hacked to 200Mhz?

DSO5062B   
or
DSO5062BM
or
DSO5062BMV

?
Or all?   
   


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 23, 2012, 08:42:57 am
all of them
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mdm on August 27, 2012, 05:55:41 pm
Hi to all! Thanks Tinhead for your work!

Recently I bought Tekway 1062 model at Pioneer Huang, after a few minutes of work DSO started to hang with the white screen. I found here some people had the same problem with it, and the reason was mentioned has been in 3.3v power supply, which drops down to 3.2v if I remember it right. So this can be fixed very quickly with some metal work, there are 3 regulators on PSU board, or something looks like regulators, I don't know, I don't care. So 2 of these regulators (the ones which are closer to the narrow edges of the PSU board) have not enough radiators, they are very hot, you should enhance these radiators by aluminum profile or change these to a bigger radiators. I used Pi-shaped profile inbetween of original radiator and regulator, I cut about 6cm of profile for each reg, it's better to cut as bigger as the case of DSO can allow, now regulators warm to 40-50 degrees without cooler. This will need because next step will be lowering airflow of the cooler by putting 150ohm resistor in series, the cooler consume too much current that causes this white screen problem. I'm a very poor experienced in electronics, so I can't describe everything, but this trick works for me. If you want to check this trick quickly you can pull off cooler plug and let DSO to work some time without it, there should be no white screens anymore, but the radiators will be hotter than usual, so enhancing of radiators must be did for continuous work. 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: timcki on August 28, 2012, 05:24:16 am
Reading a thread COMPLETELY is good etiquette  before asking a question that has probably been asked somewhere in that thread already....
You will probably get a better response if you put forth a little effort yourself.....

That being said, if you buy the 60Mhz version you are looking at  you will probably get 60Mhz probes which will not be that useful at 200Mhz


Do you really need 200Mhz?
What Kind of work will you be doing with the scope?
Google is your friend.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ADZ on August 30, 2012, 04:21:40 pm
tinhead
Hi. I have hantek DSO1052b with hw 1007. I have read you posts, but did not understand if will buy DM9000EP, can it  work with hw 1007. At first look i didn't see place on PCB where i could solder it. May be I must develop additional board with DM9000EP. How can I enable Ethernet on hw 1007?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Monkeh on August 30, 2012, 04:42:46 pm
Reading a thread COMPLETELY is good etiquette  before asking a question that has probably been asked somewhere in that thread already....
You will probably get a better response if you put forth a little effort yourself.....

Reading 90 pages of thread is.. a little much.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: timcki on August 31, 2012, 03:30:58 am
Reading a thread COMPLETELY is good etiquette  before asking a question that has probably been asked somewhere in that thread already....
You will probably get a better response if you put forth a little effort yourself.....

Reading 90 pages of thread is.. a little much.
I read all the pages.....
I didn't want somebody telling me to read the thread
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Jane on August 31, 2012, 06:20:15 pm
I know the preferable way, how to make 200MHz oscilloscope,  is using UART. But there is also a possibility to use JTAG.
Does anyone know the pin assignments for the  CPU  Samsung S3C2440 . The SoC used in the oscilloscope?
Thanks
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Jane on September 01, 2012, 08:51:02 am
Can anyone tell me please how to dismantle the DSO5062? Are there only 2 bottom srews or any others I must removed first?Thanks
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 01, 2012, 12:06:22 pm
Can anyone tell me please how to dismantle the DSO5062? Are there only 2 bottom srews or any others I must removed first?Thanks

http://randomprojects.org/wiki/Voltcraft_DSO-3062C#How_to_open_the_device (http://randomprojects.org/wiki/Voltcraft_DSO-3062C#How_to_open_the_device)

But there is also a possibility to use JTAG.
Does anyone know the pin assignments for the  CPU  Samsung S3C2440 . The SoC used in the oscilloscope?

standard arm jtag pinout


...  CPU  Samsung S3C2440 . The SoC used in the oscilloscope?

S3C2440 is the SoC
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 01, 2012, 12:12:32 pm
tinhead
Hi. I have hantek DSO1052b with hw 1007. I have read you posts, but did not understand if will buy DM9000EP, can it  work with hw 1007. At first look i didn't see place on PCB where i could solder it. May be I must develop additional board with DM9000EP. How can I enable Ethernet on hw 1007?

you CAN NOT have Hantek DSO1052B with hw1007, this is because of many reasons:
- Hantek benchtop DSOs are marked as DSO5xxxB/BM/BMV/M/N, Tekway is having DST1xxxB
- "1052B" is not valid for both manufacturers

So let's assume you speak about Hantek DSO5062B or Tekway DST1062B:
In principle, you could design own small PCB, solder DM9000EP on it and got Ethernet working (from hardware point of view).
From a software point of view only Handheld firmware is working 100% over Ethernet.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 01, 2012, 12:17:59 pm
Recently I bought Tekway 1062 model at Pioneer Huang, after a few minutes of work DSO started to hang with the white screen.
...
 If you want to check this trick quickly you can pull off cooler plug and let DSO to work some time without it, there should be no white screens anymore, but the radiators will be hotter than usual, so enhancing of radiators must be did for continuous work.

in principle the DSO was designed to work without any cooler (fan), but depends on your room temperature and actual component tolerance it might happens that something is beyond the "limit".
The white screen is typical issue when the 5V cable is not contacting properly, so somethimes it's enough to unplug/replug all connectors to get it working (which was maybe the case for you, who knows).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 01, 2012, 12:20:01 pm
Reading a thread COMPLETELY is good etiquette  before asking a question that has probably been asked somewhere in that thread already....
You will probably get a better response if you put forth a little effort yourself.....

Reading 90 pages of thread is.. a little much.

well, there is Search button .. so everybody with IQ over 100 should be able to use it (?)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Jane on September 01, 2012, 02:40:40 pm
@tinhead:thanks for the reply.
So it seems I upgraded my scope. But when I try to self calibration, it fails with the error 0x2
and I can do nothing but restart scope
Does any one know the reason?
Thanks
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 01, 2012, 03:00:48 pm
@tinhead:thanks for the reply.
So it seems I upgraded my scope. But when I try to self calibration, it fails with the error 0x2
and I can do nothing but restart scope
Does any one know the reason?
Thanks

i don't remember error 0x2, however when you properly hacked it should work without any error.
What did you changed/edited and how?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Jane on September 03, 2012, 01:44:40 pm
Thanks for the reply. That error( 0x2) I received also before upgrade.It does not have probably anything in common with the upgrade. But do you happen to know how I can repair that error and make the self calibration?
Thanks
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 03, 2012, 09:29:37 pm
Thanks for the reply. That error( 0x2) I received also before upgrade.It does not have probably anything in common with the upgrade. But do you happen to know how I can repair that error and make the self calibration?
Thanks

open ticket at hantek.org, they will tell you what 0x2 means (i don't know 0x2 or just don't remember it... too many things). 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Jane on September 04, 2012, 12:08:29 pm
I already asked at http://www.hantek.org/asken/ (http://www.hantek.org/asken/) and also sent emails to Hantek, but their hotline is not probably very fast service. :-(
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Jane on September 05, 2012, 06:33:47 am
By ugrading sw, the problem is solved
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 05, 2012, 07:06:54 am
By ugrading sw, the problem is solved

so you upgraded to latest fw from the website (2.06.3_120808.0) and the 0x2 error is solved?
Good to know. Still, let's hope Hantek tell us the original reason.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Jane on September 05, 2012, 09:55:43 am
@tinhead: I was  sent dst1kb_2.06.3_15062b_fact(120808.2).up file. If anyone needs it  I can upload somewhere. After updating, self calibration is OK.

Title: Re: Measure menu
Post by: Jane on September 05, 2012, 09:58:42 am
Can anyone explain why I receive different values when measuring frequency?
Please see the picture.
Why is the difference of the frequency on the bottom line( which is correct) and the frequency on the measuring menu( which is incorrect) ?
Thanks
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: aghp on September 05, 2012, 11:39:54 am
You are looking some kind of low freq alias.

Change Horizontal setting to around 20ns/div or somethink like this.
Still trigger counter (bottom of display) may give different (more accurate) freq than mesuring from displayed cycle.
Trigger counter is real counter.

Title: Re: Measure menu
Post by: tinhead on September 05, 2012, 11:58:58 am
Can anyone explain why I receive different values when measuring frequency?
Why is the difference of the frequency on the bottom line( which is correct) and the frequency on the measuring menu( which is incorrect) ?

Jane,

these DSOs have hardware frequency counter integrated - the bottom status line is showing the frequency from that counter.
The measure menu is however calculating the frequency from the waveform data, so far everything ok.
In some special case you might see difference between both values.

In your special case the measure menu frequency is such low because of undersampling - tis is here a clear aliasing effect.

Check
http://en.wikipedia.org/wiki/Undersampling (http://en.wikipedia.org/wiki/Undersampling)
http://en.wikipedia.org/wiki/Aliasing (http://en.wikipedia.org/wiki/Aliasing)

Without hardware frequency counter you would be lost, here you can easy recognize that something wrong
with sampling rate because of the (almost) always perfect hardware frequncy counter results.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Jane on September 05, 2012, 12:42:45 pm
Thank you for help.
When I changed Horizontal setting it works very good. But I have another problem/question.

I compared that hacked DSO5262 with the unhacked DSO5262.
And trigger counter( on bottom status)  shows about 199 Mhz measuring frequency with both DSO5262.
Is that normal?
How can I test then the hacking was successful?
Thanks


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 05, 2012, 01:45:51 pm
I compared that hacked DSO5262 with the unhacked DSO5262.
And trigger counter( on bottom status)  shows about 199 Mhz measuring frequency with both DSO5262.
Is that normal?

Jane,

the hack have no influence on counter, it works anyway up to 400+MHz.

How can I test then the hacking was successful?

if you can set horizontal to 2ns/DIV then the hack was successful.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Jane on September 05, 2012, 03:27:03 pm
@tinhead:Thanks for the reply.
Please check th e  blue arrow in  the enclosed picture if I understand well.
Thanks
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mightyzen on September 12, 2012, 08:10:52 pm
@tinhead: I was  sent dst1kb_2.06.3_15062b_fact(120808.2).up file. If anyone needs it  I can upload somewhere. After updating, self calibration is OK.

Could you upload the .2 firmware? The hantek site still provides the .0 firmware. Thanks.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Jane on September 13, 2012, 08:02:46 am
The file is too big.It does not allowed to upload here.send me a location where I should upload
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 13, 2012, 08:34:17 am
The file is too big.

use winrar or winzip and split files or upload to a file hoster like e.g. hotfile.com
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Jane on September 13, 2012, 02:14:54 pm
Uploaded
https://hotfile.com/dl/171886296/83de0a9/dst1kb_2.06.3_15062b_fact(120808.2).up.html (https://hotfile.com/dl/171886296/83de0a9/dst1k
b_2.06.3_15062b_fact(120808.2).up.html)

(one line)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 13, 2012, 03:07:20 pm
Uploaded
https://hotfile.com/dl/171886296/83de0a9/dst1kb_2.06.3_15062b_fact(120808.2).up.html (https://hotfile.com/dl/171886296/83de0a9/dst1k
b_2.06.3_15062b_fact(120808.2).up.html)

(one line)

or in case it does not work with complette link just the shortened version http://hotfile.com/dl/171886296/83de0a9/ (http://hotfile.com/dl/171886296/83de0a9/)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mightyzen on September 13, 2012, 04:11:11 pm
Thanks!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 15, 2012, 06:27:41 pm
i've posted here small review of Tekway newest MSO

https://www.eevblog.com/forum/product-reviews-photos-and-discussion/mixed-signal-oscilloscope-from-tekway/ (https://www.eevblog.com/forum/product-reviews-photos-and-discussion/mixed-signal-oscilloscope-from-tekway/)

this is in principle nothing else than DSO like from this thread (must be hw1007 version) with extra addon PCB
and special firmware to allow MSO/LA!

The very cool thing is, everybody having Tekway DSO1062B, 1102B, 1202B, or Hantek DSO5062B, DSO5102B, DSO5202B
or Voltcraft DSO-3062C can pimp such DSO to MSO ... all you need it such extra PCB and firmware, and the good part
is, i spoke with Tekway and they will provide me all we need!

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rapsac on September 15, 2012, 10:58:35 pm
I just noticed that conrad.nl has the VOLTCRAFT DSO-3062C (art. no. 122464) back in stock for 299€. I just ordered one and registered on this forum as it is THE place for the hanteks ;)
conrad.de has it in stock also.


edit: sold out already.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Crenwick on September 16, 2012, 08:48:55 am
@ Tinhead

I'm also interested in the MSO/LA but I checked my DSO and it's a HW1007 board but the PCB header socket (2mm) to connect the LA board is not installed.

Can I solder one myself ? Did I have to add something else to my DSO ?

Thanks,

Bernard
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 16, 2012, 10:32:59 am
I'm also interested in the MSO/LA but I checked my DSO and it's a HW1007 board but the PCB header socket (2mm) to connect the LA board is not installed.
Can I solder one myself ? Did I have to add something else to my DSO ?

I will deliver all the necessary small parts. This means also that you will get :
- 1.27mm pin header
- 2 screews
- distance holder
- 5cm flat cable with 20pin IDC plug (to connect DB25 socket to LA/MSO PCB)
- DB25 socket
- DB25 header

You will not get any test cables, but they are really cheap on ebay 251150864536

All you will have to do is to:
- backup firmware (over USB flash drive with backup tool)
- remove sticker (front panel near USB) to expose the hole for DB25 socket. Every hw1007 have such hole.
- solder cable to DB25 socket (the IDT20 cable which will be pluged into LA PCB)
- mount this DB25 socket to front panel. I think there are already holes in the shielding, when you remove the sticker
  you will see immediately if there is any drill work necessary.
- solder the 1.27mm pitch header to DSO PCB
- mount the LA PCB to DSO PCB
- connect the IDT20 cable (from DB25) to LA
- reconnect all other DSO cables, so you can boot DSO.

Boot DSO and install new firmware. You will need for this UART<->PC connection and deatiled description how to
do this. I will get special crafted firmware (actually complette dump), this must be complettly restored to DSO
overwriting the old version. The biggest advantage : you will have newer Linux version, which is anyway necessary to
get network working. In Germany i'm offering "instalaltion service", so everybody who don't wish to play with
UART/USB to install firmware or solder cables/header can get this step done by me (for a small fee).

So as long you have :
- screwdriver
- solder station
- UART<->USB adapter cable
- max 2GB USB flash drive
it's not so much to do.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: MEGABLINK on September 16, 2012, 10:53:35 am
Hello tinhad,
Firstly, i wanna thank you for all the research in these scopes (firmware cracks/fixes, hardware schematics, troubleshooting, etc).
I study the hw schematics, because i am working on a DSO project on my own, and i use the schematics from HanTekway as documentation reference.
May i ask if you can upload the Altium Designer project (schematics)?

Best regards,
MEGABLINK
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Crenwick on September 16, 2012, 11:15:23 am
Thanks for the information,

I will send you a PM  ;)

Bernard



I'm also interested in the MSO/LA but I checked my DSO and it's a HW1007 board but the PCB header socket (2mm) to connect the LA board is not installed.
Can I solder one myself ? Did I have to add something else to my DSO ?

I will deliver all the necessary small parts. This means also that you will get :
- 1.27mm pin header
- 2 screews
- distance holder
- 5cm flat cable with 20pin IDC plug (to connect DB25 socket to LA/MSO PCB)
- DB25 socket
- DB25 header

You will not get any test cables, but they are really cheap on ebay 251150864536

All you will have to do is to:
- backup firmware (over USB flash drive with backup tool)
- remove sticker (front panel near USB) to expose the hole for DB25 socket. Every hw1007 have such hole.
- solder cable to DB25 socket (the IDT20 cable which will be pluged into LA PCB)
- mount this DB25 socket to front panel. I think there are already holes in the shielding, when you remove the sticker
  you will see immediately if there is any drill work necessary.
- solder the 1.27mm pitch header to DSO PCB
- mount the LA PCB to DSO PCB
- connect the IDT20 cable (from DB25) to LA
- reconnect all other DSO cables, so you can boot DSO.

Boot DSO and install new firmware. You will need for this UART<->PC connection and deatiled description how to
do this. I will get special crafted firmware (actually complette dump), this must be complettly restored to DSO
overwriting the old version. The biggest advantage : you will have newer Linux version, which is anyway necessary to
get network working. In Germany i'm offering "instalaltion service", so everybody who don't wish to play with
UART/USB to install firmware or solder cables/header can get this step done by me (for a small fee).

So as long you have :
- screwdriver
- solder station
- UART<->USB adapter cable
- max 2GB USB flash drive
it's not so much to do.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: amigo on September 16, 2012, 12:58:02 pm
Crap, my hw version is below hw1007 as I have a less dense expansion connection. :(

Is there a way to get this working on the older hw versions, and if not, why not?

Thanks.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: yoq on September 16, 2012, 08:44:05 pm
Hello eevblog forum,

I finally bought a hantek dso5102b myself, primarily because of the great research done by tinhead and others. Big thanks to all contributers!
A few people mentioned WiFi dongles, and I really liked that idea, so I got a 10€ one from amazon. It has a realtek chipset, and they provide linux sources for the driver. They claim it only works from kernel 2.6.18+ but it compiles just fine for the hantek kernel. It took a while, but i managed to compile all the little programs for a wifi connection. Now my scope logs into my wifi automatically and gets its IP via DHCP.

The attached zip contains these files:
iwconfig, iwlist, iwXXXXWireless tools (http://www.hpl.hp.com/personal/Jean_Tourrilhes/Linux/Tools.html (http://www.hpl.hp.com/personal/Jean_Tourrilhes/Linux/Tools.html))
wpa_supplicantHandles wireless network encryption WPA/WPA2
ifplugdChecks for the adapter and runs a script when plugged in/out
8192cu.koDriver for realtek 8192 / 8188 chipset + different versions (syslog off, powersaving off)
+scripts and the network config file (/etc/wpa.conf)
+modified /etc/init.d/rcS, to load driver, telnet, inetd, and ifplugd

If you have a different dongle than the EDIMAX EW-7811UN you might need to compile your own kernel module, but as long as it has a realtek chipset, there should be no problems.


@tinhead
Is there any chance of getting network support for the DSO-app on the bench models?
I tried to activate it by writing the [net]1 to the EEPROM, but I couldn't connect with ttscope or dreisiebners' dso-tool.
Taking a screenshot wirelessly seems like a very neat feature to me, so already tried to grab it directly from the framebuffer, but /dev/fb0 seems to be unused.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: condor on September 16, 2012, 10:52:34 pm
How will the MSO/LA modification affect the future  firmware upgrade path for the DSO5000?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Crenwick on September 17, 2012, 05:34:37 am
How will the MSO/LA modification affect the future  firmware upgrade path for the DSO5000?

I suppose you will have to follow the MSO path  8)

Title: Problem with changing logo
Post by: Jane on September 18, 2012, 12:14:50 pm
Did anyone try to hack DSO5102BM?
I bought DSO5102BM few days ago only and wanted to hack it.
 But I noticed it uses a different software.
E.g. I need not use
 killall dsod command
to enter console and also  booting is different.
I were not able to change logo and not sure if the hack was really successful.
It shows DSO5202B( as I wanted) but not sure if it also works as DSO5202B.

Besides when it starts booting it shows


*** Warning - bad CRC or NAND, using default environment
##### EmbedSky BIOS for SKY2440/TQ2440 #####
Press Space key to Download Mode !
Booting Linux ...
Copy linux kernel from 0x00200000 to 0x30008000, size = 0x00200000 ... Copy Kernel to SDRAM done,NOW, Booting Linux......
Uncompressing Linux... done, booting the kernel.
Linux version 2.6.30.4 (root@rain-fc4) (gcc version 4.3.3 (Sourcery G++ Lite 2009q1-176) ) #9 Mon Dec 12 11:50:21 CST 2011
CPU: ARM920T [41129200] revision 0 (ARMv4T), cr=c0007177
CPU: VIVT data cache, VIVT instruction cache
Machine: TQ2440
...
....
...
...


Thanks for help.
Title: Re: Problem with changing logo
Post by: tinhead on September 18, 2012, 12:29:35 pm
Did anyone try to hack DSO5102BM?
I bought DSO5102BM few days ago only and wanted to hack it.
 But I noticed it uses a different software.
E.g. I need not use
 killall dsod command
to enter console and also  booting is different.
I were not able to change logo and not sure if the hack was really successful.
It shows DSO5202B( as I wanted) but not sure if it also works as DSO5202B.

Besides when it starts booting it shows


*** Warning - bad CRC or NAND, using default environment
##### EmbedSky BIOS for SKY2440/TQ2440 #####
Press Space key to Download Mode !
Booting Linux ...
Copy linux kernel from 0x00200000 to 0x30008000, size = 0x00200000 ... Copy Kernel to SDRAM done,NOW, Booting Linux......
Uncompressing Linux... done, booting the kernel.
Linux version 2.6.30.4 (root@rain-fc4) (gcc version 4.3.3 (Sourcery G++ Lite 2009q1-176) ) #9 Mon Dec 12 11:50:21 CST 2011
CPU: ARM920T [41129200] revision 0 (ARMv4T), cr=c0007177
CPU: VIVT data cache, VIVT instruction cache
Machine: TQ2440
...
....
...
...


Thanks for help.

BM/BMV models are newer, there are few differences:
- logo is not just a bitmap loaded during boot process but it is located in the "disp" executable (/disp or /dso/app/disp)
- current BM/BMV firmware is based on older B-model sources (from Nov/Dec 2011?), so some changes are not
  implemented yet. One of these changes is watchdog (dsod executable), if not there you don't need to kill it.
- bootloader is different(better), it does support now USB upload
- kernel is 2.6.30.4 and not 2.6.13
- root fs is newer, contains newer drivers, media player, etc.

All you need to know is, when 2ns/div timebase is there then the hack was successful.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Jane on September 18, 2012, 01:04:19 pm
thanks for the reply.
Does it mean BM/BMV models has also different hardware or only software?
I noticed there is P1 connector for buzzer but nothing more different

And is there a way  how  I can  change the logo also?
Thanks again for help
Title: Re: Problem with changing logo
Post by: baljemmett on September 18, 2012, 02:50:14 pm
- root fs is newer, contains newer drivers, media player, etc.

Wat?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: project on September 18, 2012, 03:11:28 pm
For those whose ever got error code 0xfe when update by usb, just change the file name to dst1kb.up, u'll survive.

I was trying to update 120430, to 120623 and 120808, dso refuse to recognize file on usb in long form, keep gave me 0xfe error. after I read https://www.eevblog.com/forum/index.php?topic=1571.msg70890#msg70890 (https://www.eevblog.com/forum/index.php?topic=1571.msg70890#msg70890) . Thought might be file name too long or something wrong with my computer, just change the file name to shortest one that dso needs to know, that is dst1kb.up, problem solved. just FYI. 
Title: Re: Problem with changing logo
Post by: tinhead on September 18, 2012, 04:29:14 pm
- root fs is newer, contains newer drivers, media player, etc.

Wat?

yep, BMV models supports "Video help", which is nothing else than Video player (with some video help files).
The video player is actually mplayer from http://www.mplayerhq.hu (http://www.mplayerhq.hu)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Chinese descent on September 18, 2012, 04:38:11 pm
Hi tinhead!
I purchased oscilloscope TEKWAY DST1062B.
Model: dst1062b
Software Version: 2.06.3 (111,122.0)
Hardware version: 10070 × 555583e8
Product No.: T1G/012005503
After the upgrade, start oscilloscope LOGO displayed as DST1202B. However, in view system information or DST1062B. This question should be how to deal with? Please help answer, thank you!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 18, 2012, 05:54:47 pm
Does it mean BM/BMV models has also different hardware or only software?
I noticed there is P1 connector for buzzer but nothing more different

no, the hardware is the same (except bigger SRAM chip)

And is there a way  how  I can  change the logo also?

sure, you can edit the "disp" file and replace the logo picture by what so ever you like
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: yoq on September 18, 2012, 05:59:54 pm
hi tinhead,

you seem to be online right now, so what do you think about network on the bench models?
please see my post on page 92

Thank you

EDIT: From what I can read, network access works on the BM(V) models, would it be possible to run this firmware on the 5XX2B hardware?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 18, 2012, 06:59:21 pm
A few people mentioned WiFi dongles, and I really liked that idea, so I got a 10€ one from amazon.
It has a realtek chipset, and they provide linux sources for the driver.
...
If you have a different dongle than the EDIMAX EW-7811UN

good work, thanks for that.


@tinhead
Is there any chance of getting network support for the DSO-app on the bench models?
I tried to activate it by writing the [net]1 to the EEPROM, but I couldn't connect with ttscope or dreisiebners' dso-tool.
Taking a screenshot wirelessly seems like a very neat feature to me, so already tried to grab it directly from the framebuffer, but /dev/fb0 seems to be unused.

unfortunately only the handheld version of dso.exe can use network directly. In principle with BM/BMV benchtops
root fs it's possible to run the handheld dso.exe (tested). However such combination does NOT work with benchtop
frontpanel layout, so not a real option :P

I've asked multpile times both Hantek and Tekway why they still not released network-enabled
firmware for B/BM/BMV/MSO benchtop models, the answer was always "soon".

I've compared the speed over network and usb (with handheld), and network was much faster and stable,
so no idea why they still not released it officialy.

Anyway, there is another way: the network communication works over UDP, port 9966 by default.
Because its still the same data, all you need is to redirect the USB data to network.
Im principle a UDP server and patched usb-char i think? (from usbdevice driver) could work as well.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Jane on September 18, 2012, 07:58:35 pm
@tinhead:You say I can change logo by editing disp file.
Do you mean

/logotype.dis
file ?

I changed
/logotype.dis
It consists only
hantek_DSO5202B

But still no good

Thanks for reply
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: yoq on September 20, 2012, 09:41:39 pm
In principle a UDP server and patched usb-char i think? (from usbdevice driver) could work as well.

Thanks for the good idea, i got it working! Hantek released the source code for the usb-char module, so it was relatively easy to redirect all communication to a udp server. For this, I wrote a new kernel module using the nice ksocket library/module.
I will clean up the code a bit and post the sources tomorrow.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 20, 2012, 09:46:48 pm
@tinhead:You say I can change logo by editing disp file.
Do you mean

/logotype.dis
file ?

I changed
/logotype.dis
It consists only
hantek_DSO5202B

But still no good

Thanks for reply

no, the disp file. Just check the file system, there is /disp or /dso/app/disp file, and inside this file a
raw image is included (in principle like the logo files before but this time compiled into executable file)
You can replace/edit this file to create own disp file - for our model the logotype.dis is not changing anything.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 20, 2012, 09:52:52 pm
In principle a UDP server and patched usb-char i think? (from usbdevice driver) could work as well.

Thanks for the good idea, i got it working! Hantek released the source code for the usb-char module, so it was relatively easy to redirect all communication to a udp server. For this, I wrote a new kernel module using the nice ksocket library/module.
I will clean up the code a bit and post the sources tomorrow.

a big thumbs up! 

that was fast solved.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: yoq on September 21, 2012, 09:36:30 pm
Okay, so here are the sources for the usb-char module with integrated udp-server.
The redirection via UDP only becomes active when the there is no USB cable from the back connector to a PC. Unfortunately the detection whether the cable has been removed is not very reliable, so it often takes a restart to use UDP again after disconnecting USB.
The zip contains the compiled modules (ksocket, udp_server, usb-char, load in that order), and the sources.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 21, 2012, 10:00:14 pm
Okay, so here are the sources for the usb-char module with integrated udp-server.

nice.

out of curiosity, which version of GPL code did you used,

http://www.eedownload.com:7635/dso_bench.zip (http://www.eedownload.com:7635/dso_bench.zip)
or
http://www.hantek.com/download/desktop.zip (http://www.hantek.com/download/desktop.zip)
?

Side note:
The desktop.zip contains (especialy the first version which has been already removed from web)
some more drivers, the last one contains however no real source for usb client.
I've attached (in case somene need it) drivers from first version of desktop.zip,
the usb client was in linux-2.6.13_800x480_option1_lz_120410.tar.gz\win\2.4.18usbd\


The dso_bench.zip contains the "the real" sources of usb client driver.
For some reason both Tekway/Hantek was not able to find the proper (original) sources,
finally they found something (what will produce similar binary driver as the one in DSO root fs)
and included in the dso_bench.zip

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: yoq on September 22, 2012, 12:01:24 pm
I used the driver sources from the voltcraft package (http://ftp.gpl-devices.org/pub/vendors/Voltcraft (http://ftp.gpl-devices.org/pub/vendors/Voltcraft)), they are identical with the drivers_2.6.13_lz_120410.tar.gz from your zip file. I also had to use the our_s3c2440_regs.h from the option1 package as the kernel sources only included a symbolic link to a file on their disk. Everything was compiled with the arm-linux- toolchain, version 3.4.1 from the voltcraft package.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Polossatik on September 22, 2012, 12:58:55 pm

All you will have to do is to:
- backup firmware (over USB flash drive with backup tool)
- remove sticker (front panel near USB) to expose the hole for DB25 socket. Every hw1007 have such hole.
- solder cable to DB25 socket (the IDT20 cable which will be pluged into LA PCB)
- mount this DB25 socket to front panel. I think there are already holes in the shielding, when you remove the sticker
  you will see immediately if there is any drill work necessary.
- solder the 1.27mm pitch header to DSO PCB
- mount the LA PCB to DSO PCB
- connect the IDT20 cable (from DB25) to LA
- reconnect all other DSO cables, so you can boot DSO.

Boot DSO and install new firmware. You will need for this UART<->PC connection and deatiled description how to
do this. I will get special crafted firmware (actually complette dump), this must be complettly restored to DSO
overwriting the old version. The biggest advantage : you will have newer Linux version, which is anyway necessary to
get network working. In Germany i'm offering "instalaltion service", so everybody who don't wish to play with
UART/USB to install firmware or solder cables/header can get this step done by me (for a small fee).

So as long you have :
- screwdriver
- solder station
- UART<->USB adapter cable
- max 2GB USB flash drive
it's not so much to do.


just saw this, so had a look at the Voltcraft DSO-3062C  hw1007 version
there is a hole in the plastic of the case for the DB25 socket in the front panel, but there is a metal shield behind it, is the clearing between those enough to install the DB25 socket ?

edit: ha, having second look at http://www.tekwayins.com/pic/201202080007.jpg (http://www.tekwayins.com/pic/201202080007.jpg) it measn you need to cut you're own hole in the metal to mount the db25... hum..

and what's up with those unpopulated phone/mic things next to the rear USB port? where are they used for in other models? :)
I also don't see any models with a second front usb port, anyway, info about that must be buried most likely somewhere here in the thread :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Jane on September 22, 2012, 02:28:30 pm
Quote
Quote from: Jane on September 18, 2012, 07:58:35 PM
@tinhead:You say I can change logo by editing disp file.
Do you mean

/logotype.dis
file ?

I changed
/logotype.dis
It consists only
hantek_DSO5202B

But still no good

Thanks for reply

no, the disp file. Just check the file system, there is /disp or /dso/app/disp file, and inside this file a
raw image is included (in principle like the logo files before but this time compiled into executable file)
You can replace/edit this file to create own disp file - for our model the logotype.dis is not changing anything.
Tinhead, but how can I change the  logo of DSO5102BM, if the   /dso/app/disp file is already compiled?How can I edit a  compiled file?
Thanks for your reply
Title: Standing Ovation and Thanks to Tinhead
Post by: Fet on September 23, 2012, 03:28:20 pm

Standing Ovation and Thanks to Tinhead

Hello all,

I am new to EEV Blog and found Tinhead's post concerning the Hantek ~ Tekway mods while Googling for a Hantek seller ~ distributor.

As an Electronic Tech, ( and for the time being, still gainfully employed , LoL ! ) , I would like to encourage my other unknown colleagues and individuals  that have benefited from Tinhead's research and much shared assistance and Donate to him through Pay Pal.

While others have also freely shared on this forum and others, as an ET I fully realize the time and effort Tinhead has dedicated and been able to share info because of his connections , ( or at times his Dis-Connections ? ),  with the DSO  manufacture~s.

If one was interested in donating how to do it?
I bought a MSO board from him so I have the info, other than that you might try to PM , ( Private Message ), him.

For those that may wonder, other than using his DSO Mod info,,,No, I do not work for or am I associated with anything Tinhead does.
I am just Thankful he has shared the info.

Respectfully, Fet
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 25, 2012, 12:57:16 pm

just saw this, so had a look at the Voltcraft DSO-3062C  hw1007 version
there is a hole in the plastic of the case for the DB25 socket in the front panel, but there is a metal shield behind it, is the clearing between those enough to install the DB25 socket ?

edit: ha, having second look at http://www.tekwayins.com/pic/201202080007.jpg (http://www.tekwayins.com/pic/201202080007.jpg) it measn you need to cut you're own hole in the metal to mount the db25... hum..

right, but the metal frame is behind front panel, so you don't need to worry about "the quality" of the cut.
So for Hantek/Voltraft owners not a big deal, for Tekway owners a bit more work as they have no hole
in the Frontpanel. Still not tragic, but yeah, additional step.


and what's up with those unpopulated phone/mic things next to the rear USB port? where are they used for in other models? :)
I also don't see any models with a second front usb port, anyway, info about that must be buried most likely somewhere here in the thread :)
a few ppl here (e.g. Jane two postings above) bought these BM/BMV models, so they can answer you if there is
the mic/phone populated. The second USB port, well, it is not only question of changed USB driver but also additional menu
in the firmware to allow port switching (client/host), and i seems HanTekway have not ime for such extras :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Polossatik on September 25, 2012, 02:00:19 pm
cheers Tinhead, you've got a PM :)

by the way:

views of top threads: https://www.eevblog.com/forum/index.php?action=stats (https://www.eevblog.com/forum/index.php?action=stats)

changing the rigol DS1052E to DS1102E using USB , the dummy guide  ->    199352
Hantek - Tekway - DSO hack - get 200MHz bw for free                           ->    194373

you're closing in :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tlu on September 30, 2012, 06:10:31 pm
After reading the thread, I feel the hantek ds05062b would be a nice dso over owon sds7102 and rigol ds1102e. Anyone feels owon will change their firmware as they have excellent hardware but crappy UI.

Thanks,
Tim
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 01, 2012, 08:58:08 am
what a pain, Extech is now selling "B/BV series" Hantek Handhelds (that's these based on the same architecture as
the benchtops int his thread) - where Extech MS6060 is Hantek DST1062BV, and so on.

So far nothing new with Extech, but look at the price:

http://www.extech.com/instruments/product.asp?catid=16&prodid=694 (http://www.extech.com/instruments/product.asp?catid=16&prodid=694)
http://www.extech.com/instruments/product.asp?catid=16&prodid=695 (http://www.extech.com/instruments/product.asp?catid=16&prodid=695)
http://www.extech.com/instruments/product.asp?catid=16&prodid=696 (http://www.extech.com/instruments/product.asp?catid=16&prodid=696)

I would say, before you buy one from Extech, buy 2+pcs from Hantek, hehe.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Bored@Work on October 01, 2012, 11:54:27 am
I would say, before you buy from Extech but 2+pcs from Hante, hehe.

But, but, but, Extech is soooo ISO9000 certified. That is for sure worth the higher price ... *ducks and runs*
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tlu on October 01, 2012, 05:56:42 pm
Hi Tinhead,

I saw there is also the Hantek DSO5062B, BM, and BMV model. Reading up on them the BM has an extra 1M memory and the BMV has the extra memory and video help as well. Do you know if both of the latter models are hackable to 200mhz with your method? I wouldn't mind the extra memory but do you know what the video does for BMV model?

Thanks,
Tim
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 01, 2012, 06:18:56 pm
Do you know if both of the latter models are hackable to 200mhz with your method?

if you would read the thread or use search you would find out that there is still everythign hackable,
no matter what model.

I wouldn't mind the extra memory but do you know what the video does for BMV model?

playing videos, put the usb flash drive with some p0rn and play on DSO during lunch break.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tlu on October 01, 2012, 07:00:24 pm
Thanks Tinhead for the answer. I think I could live without the porn and pick up the BM with an extra 1M of recording time.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 01, 2012, 09:03:13 pm
But, but, but, Extech is soooo ISO9000 certified. That is for sure worth the higher price ... *ducks and runs*


hehe yeah, luckily we know that ISO9001 certificated does not means anything about quality of products.
I could tell you really bad sotry about so called certificates of what so ever from Chinese manufacturers,
as well Hantek, but i think most poeple don't need to read once agains such things - we all know that
most of these cheap products are for example not properly calibrated (like DMM in these Hantek Handhelds).
So maybe is Extech so expensive because they need to pay "US proven philips screw driver an one work hour"
to calibrate DMMs and to print cal papers - who knows.
What's definitely different is the enclosure color, but ehm still lot of $$$ in price difference.
Even the batter pack costs 129.99$, for that price is must be packaged by a virgin girl.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Fet on October 02, 2012, 01:15:17 am

Quote
luckily we know that ISO9001 certificated does not means anything about quality of products.

2nd that,, 

More like;;;;;;;;;;;;;;;;;;;;;;;;

LOTs of Paper Trail!  Translated, "he went that way!" <----  /\  ---->
                                                                                               l
                                                                                               l

Or ,
Sorta  Sounds like a Woodstock, http://en.wikipedia.org/wiki/File:Woodstock_redmond_stage.JPG  (http://en.wikipedia.org/wiki/File:Woodstock_redmond_stage.JPG), went to Washington DC moment , http://en.wikipedia.org/wiki/File:WhiteHouseSouthFacade.JPG (http://en.wikipedia.org/wiki/File:WhiteHouseSouthFacade.JPG) .


I wanted a Hantek DSO1062B and then I learned that in fact “Flir” was given or entered into an Exclusive agreement with Hantek to sell Hanteks under the “Extech” name, here in The States.

So, Hum?? Lets see, at about Triple the original price,

Kinda lends one to wonder if “Flir” was awarded some US Government fulfillment ~ Supply Contract and Flir changed the name to protect the , Hum, ???   Aha? , Hum?, Oh!

Oh, so cynical , hUm!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: albertr on October 07, 2012, 02:45:46 am
Gentoo Linux kernel: 3.5.0
Xorg
LXDE - Desktop environment
XChat -  IRC client
terminal windows behind
(http://i.imgur.com/MuAMnl.jpg) (http://imgur.com/MuAMn)

Now we got almost everything, working on fpga configuration...

open source DSO soft will be directly for fbdev(lcd) not for xorg due to memory usage, this is quite far future but everything is going good

flodins,

I'm very interested in your work. Any progress update since July?

-albertr
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tlu on October 07, 2012, 11:52:00 am
Wow, is that really gentoo linux running on the hantek scope?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on October 11, 2012, 09:21:13 am
Hello Tinhead, sorry if you've said it but I couldn't find it in the last 5 pages. Does the older HW version 0x555583E8 could be hackable to a MSO ?
Thanks !
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tlu on October 18, 2012, 03:26:07 pm
Hello Tinhead, sorry if you've said it but I couldn't find it in the last 5 pages. Does the older HW version 0x555583E8 could be hackable to a MSO ?
Thanks !

I'm also interested in that hack as well.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jakezilla on October 18, 2012, 05:13:19 pm
Hello Tinhead, sorry if you've said it but I couldn't find it in the last 5 pages. Does the older HW version 0x555583E8 could be hackable to a MSO ?
Thanks !

I'm also interested in that hack as well.

I am also interested in buying a MSO (Hantek MSO5062D from aliexpress.com to be exact) and doing this hack to it, but I am also having an issue trying to find the info in this thread. A Search in Thread button would be nice...

https://www.eevblog.com/forum/general-chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg146070/#msg146070 (https://www.eevblog.com/forum/general-chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg146070/#msg146070) - In this post tinhead talks about adding the MSO board to a hacked DSO, so a hacked MSO can be created, but can you start with an MSO?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on October 18, 2012, 10:57:47 pm
I found a bug I am unable to reproduce but I was stuck in 40ms per division and when trying to switch to 20ms per division or less, the 2 channels stopped working, even after rebooting several times, trying to disable and re-enable channels didn't worked, I entered Horizontal Menu and moved some things and knobs and suddenly I got my signals again. I'll be tring to find out how to reproduce this bug and post steps here if someone is interested.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tlu on October 19, 2012, 12:15:34 am
Maybe it just needed a little time to adjust to the new time base settings. Did it totally locked up on you? Which firmware are you on? Did you tried to go to the lowest time base setting when you got stuck?

Which firmware are you on? I would like to see if I could reproduce what you are seeing on my Hantek to see if this is a bug or just an isolated issue with certain scope. If it is a bug we should reported to have it fix in the next release of the firmware.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on October 19, 2012, 12:30:47 am
I'm using the newest 120808.2 firmware, I waited long enough (~30seconds) before starting to push buttons. Not totally locked, it I went back to 40ms per div. The 2 channels reappeared.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tlu on October 19, 2012, 01:03:24 am
Well, since you can't reproduce this error it will be hard to tell if this is a real bug in the firmware or not. Personally, I have not ran into that situation while doing measurements and changing time base scale.
Title: Hantek vs.Tekway
Post by: Jane on October 25, 2012, 07:06:29 pm
Can anyone  let me know what the differences are between Hantek  and Tekway oscilloscopes?
Which is better Hantek  or Tekway?
(I heard Hantek has a better software but sometimes hangs.)
And is it true that hardware is the same?
ANd which one has a better( more proffesional) support?
Thanks
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Freeze on November 09, 2012, 10:50:00 am
First of all thank you very much for this great work and guide.

I bought a PCE DSO5062B and followed the steps to change it to DSO5202B.
This worked very well. The bandwith increased, but I've got the problem that the device restarts every 10 seconds even if I'm not connected to the UART anymore (also the UART-USB-converter is unplugged).

I've disabled the watchdog in the init.d and now the reboots are gone.

The question is, why is the watchdog resetting the device?


Here the contents of the relevant files:

Code: [Select]
[DST type]dst1202b
[soft version]2.06.3(120808.0)
[fpga version]0x555583eb
[start time]15
[update time]1
- /sys.inf 1/5 20%

Code: [Select]
/dst1202b
- /tmpdst 1/1 100%

Code: [Select]
dst1202b
- /logotype 0/0 100%

Code: [Select]
pce_DSO5202B
- /logotype.dis 1/1 100%


Thank you very much in advance.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 09, 2012, 12:26:59 pm

The question is, why is the watchdog resetting the device?


this is exactly what a watchdog have to do: if the main process, in the case of this DSO the dso.exe exectable,
terminates the watchdog have to re-initialize the device, which is on a these DSO reboot (to ensure that memory has been cleaned-up and all necessary sub-processes restarted properly).

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 09, 2012, 01:58:09 pm
Hello Tinhead, sorry if you've said it but I couldn't find it in the last 5 pages. Does the older HW version 0x555583E8 could be hackable to a MSO ?
Thanks !

I'm also interested in that hack as well.

no, the hw 0x can not be hacked to MSO. The reason is very simple, the i/o header on hw0 is not having all necessary SoC pins connected.
Sure, you could use additional PCB with small µC and Flash memory to configure the FPGA on the MSO PCB (you can't use the rbf file to program config device, a µC is here necessary),
and sure you could maybe connect missing pins (maybe) with soem wires but that's not a good solution at all - even not for test - therefor my answer is "no way"
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Freeze on November 09, 2012, 03:17:47 pm

The question is, why is the watchdog resetting the device?


this is exactly what a watchdog have to do: if the main process, in the case of this DSO the dso.exe exectable,
terminates the watchdog have to re-initialize the device, which is on a these DSO reboot (to ensure that memory has been cleaned-up and all necessary sub-processes restarted properly).

Then the question is, why is dso.exe terminated? Respectively, how can I be sure that this is really the cause for the watchdog reset?
The device is working fine after disabling the watchdog, so I don't understand why the watchdog is resetting it.


You're right. The device really hangs up.
Hm, what could be the cause for this?

Running it as DSO5102B seems to work. But why is DSO5202B not working?

I've got resets with DSO5102B also. Thats really disappointing :(
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: noWhereMan on November 09, 2012, 11:28:12 pm
Hi,

is http://www.pce-instruments.com/deutsch/messtechnik-im-online-handel/messgeraete-fuer-alle-parameter/oszilloskop-pce-holding-gmbh-speicheroszilloskop-pce-dso5062b-det_257116.htm?_list=kat&_listpos=4 (http://www.pce-instruments.com/deutsch/messtechnik-im-online-handel/messgeraete-fuer-alle-parameter/oszilloskop-pce-holding-gmbh-speicheroszilloskop-pce-dso5062b-det_257116.htm?_list=kat&_listpos=4) same as Hantek DSO5102B?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Freeze on November 10, 2012, 12:04:49 am
Hi,

is http://www.pce-instruments.com/deutsch/messtechnik-im-online-handel/messgeraete-fuer-alle-parameter/oszilloskop-pce-holding-gmbh-speicheroszilloskop-pce-dso5062b-det_257116.htm?_list=kat&_listpos=4 (http://www.pce-instruments.com/deutsch/messtechnik-im-online-handel/messgeraete-fuer-alle-parameter/oszilloskop-pce-holding-gmbh-speicheroszilloskop-pce-dso5062b-det_257116.htm?_list=kat&_listpos=4) same as Hantek DSO5102B?

I bought exactly the same. It's a Hantek DSO5062B / Tekway DST1062B with 60 MHz bandwith as mentioned in the description of the device.
I tried to change it to DSO5102B/DSO5202B, but sometimes it's restarting. Don't know why.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: beard on November 10, 2012, 12:15:26 am
Hello Everybody!
I have been reading this thread for a while and finally purchased my DSO1062b and decided to hack it.
It has firmware version 2.01.1 (120909.0) and hardware version 0x555583e8
The funny (or maybe not so funny) thing is that when I connect to it through the UART interface using minicom, I get a constant stream of messages:
power_ioctl:IOCTL_SCAN_POWER_BI_TOUT:1                                         
power_ioctl:IOCTL_SCAN_POWER_BI_TOUT:0   
which come with ~1 second interval
I have not been able to figure out what those messages are supposed to mean, when I kill dso process, the messages stop, and the oscilloscope reboots in a few seconds (as expected).
I have been able to apply the hack successfully and all the functions seem to work fine, but those messages bother me - does anyone have any idea what these "power_ioctl" messages may mean?
Thank you in advance!

P.S. If anyone needs the original firmware from my scope - I have backed it up and can share.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 10, 2012, 01:55:34 am
I have been reading this thread for a while and finally purchased my DSO1062b and decided to hack it.
It has firmware version 2.01.1 (120909.0) and hardware version 0x555583e8
...
P.S. If anyone needs the original firmware from my scope - I have backed it up and can share.

oh yes, i don't hae 120909.0 yet, so if you don't mind make a backup and send me PM with download location.


The funny (or maybe not so funny) thing is that when I connect to it through the UART interface using minicom, I get a constant stream of messages:
power_ioctl:IOCTL_SCAN_POWER_BI_TOUT:1                                         
power_ioctl:IOCTL_SCAN_POWER_BI_TOUT:0   
which come with ~1 second interval
..
I have been able to apply the hack successfully and all the functions seem to work fine, but those messages bother me - does anyone have any idea what these "power_ioctl" messages may mean?

yes, they coming from the driver "dso-power.ko", which is power management driver. You can find it in the
handheld GPL kernel sources (DSO_handscope\linux-2.6.30.4_640x480_lz_120410.tar.gz) in drivers/char/EmbedSky_power_man.* files
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 10, 2012, 02:00:26 am
The question is, why is the watchdog resetting the device?

1- you got DOA device
2- you screwed something up (typo?), which is causing somewhere an error in the dso.exe
3- something is different in the pce-instruments firmware version (whcih i doubt, but who knows, maybe Hantek screwed something up)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: beard on November 10, 2012, 03:22:13 am
Hello Tinhead,

I sent you a PM with the download link.
Thank you very much for your comment, I will try to figure out what those messages mean, but are they normal, have you seen those before?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Freeze on November 10, 2012, 01:03:14 pm
The question is, why is the watchdog resetting the device?

1- you got DOA device
2- you screwed something up (typo?), which is causing somewhere an error in the dso.exe
3- something is different in the pce-instruments firmware version (whcih i doubt, but who knows, maybe Hantek screwed something up)

I've flashed the original firmware that I've backed up with the fw3dump tool and did the hack one more time.
Unfortunately the behaviour is the same. So I don't think it's caused by doing something wrong in the software changes from dst1062b to dst1202b.

Is it possible that this is a hardware problem? I mean that the components of this particular device can't handle this high bandwidths?

The silly thing is that I needed to solder cables in the appropriate pinheader holes of the UART, thus the warranty should be gone...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on November 10, 2012, 04:05:15 pm
Hi beard, would you mind sending me the link too? Or posting it here ! I want to see if they've fixed a bug that's pretty annoying to me :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: fehrudi on November 10, 2012, 05:23:51 pm

I've flashed the original firmware that I've backed up with the fw3dump tool and did the hack one more time.
Unfortunately the behaviour is the same. So I don't think it's caused by doing something wrong in the software changes from dst1062b to dst1202b.

Is it possible that this is a hardware problem? I mean that the components of this particular device can't handle this high bandwidths?

The silly thing is that I needed to solder cables in the appropriate pinheader holes of the UART, thus the warranty should be gone...

I have a PCE DSO5062B, I've hacked it a while ago and it's running fine for about 15 minutes.

But I'm very disappointed by the number of bugs in the firmware (120808).  :(
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: noWhereMan on November 10, 2012, 08:04:29 pm


I have a PCE DSO5062B, I've hacked it a while ago and it's running fine for about 15 minutes.

But I'm very disappointed by the number of bugs in the firmware (120808).  :(

that does not  very inviting.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 10, 2012, 08:07:09 pm
I've flashed the original firmware that I've backed up with the fw3dump tool and did the hack one more time.
Unfortunately the behaviour is the same. So I don't think it's caused by doing something wrong in the software changes from dst1062b to dst1202b.

hmm, after you flashed the org. dump you should first run tests to see if the device is working, simply to eliminate the DOA possibility. If everything fine then you can run hacks. If after hack the device didn't work as expected something is wrong with your hack, there is nothing special on the PCE DSOs and other users already reported no issues.

Is it possible that this is a hardware problem?

if then only DOA.

I mean that the components of this particular device can't handle this high bandwidths?

ehm, no ... what you said is nonsense :) Thsi could be only truth if you would feed RF signal and observe distortions
or other bw limitation issues, or crash after minutes of feeding with RF, but your DSO is crashing with "no signal".

The silly thing is that I needed to solder cables in the appropriate pinheader holes of the UART, thus the warranty should be gone...

i don't think so, i got at least two DSOs with pin headers already soldered. I don't think that PCE is having pictures of every DSOs inside.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 10, 2012, 08:10:18 pm
that does not  very inviting.

then just don't buy it.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Penguin36 on November 12, 2012, 04:20:05 pm
I got the 60MHz DSO from PCE-Instruments and wonder if I can just flash the firmware from Hantek, or Tekway? Which one is newer, or more bug free?

For the next days I test the device without hack, just to make sure it works fine.

Other question is, how to easily generate a test signal with 50, 100 or 200MHz to test the dso? Because my generator only offers 2MHz max. Any tips for cheap solutions?

Thank you very much and keep the good work going.




Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 20, 2012, 12:47:16 am
I got the 60MHz DSO from PCE-Instruments and wonder if I can just flash the firmware from Hantek, or Tekway? Which one is newer, or more bug free?

currently the HanTekway "team" is working on the firmware, they got a long list with bugs from each every model,
and they got a list of "common" things which are not equal on the B/BM/BMV/Handheld/MSO models.
They additionaly busy with bug fixing all the issues which Extech found. Haha, that's funny story - Hantek
actually selling their Handhelds (these which are based on the DSO 2.0 platform, which is this thread about)
to Extech, and they selling their their "new products", yeah, typical Extech

http://www.extech.com/instruments/product.asp?catid=16&prodid=694 (http://www.extech.com/instruments/product.asp?catid=16&prodid=694)

But unfortunately someone not tested properly and i heard lot of ppl whi already bought from Extech are pissed off,
so HanTekway team have to fix these issues as well.

I hope they will "wake up" and work faster, i'm pissed off about what they doing, it was such a great DSO
platfrom, but they screwing up more and more. They should increase price by few $ and pay some skilled QC ppl,
really they should change something or soon nobody anymore will buy these DSO/MSOs.

Let's sumirize - no matter what firmware, the latest B benchtop version (which is what you need for PCE-Instruments DSO)
is stable - but it does have few small bugs.

For the next days I test the device without hack, just to make sure it works fine.

which is always good idea.

Other question is, how to easily generate a test signal with 50, 100 or 200MHz to test the dso? Because my generator only offers 2MHz max. Any tips for cheap solutions?

e.g. Crystal Oscillator and two FFs would be easy to build, but metter could be DIY generator with µC and (DS)PLL chips
like SiLabs http://www.silabs.com/products/clocksoscillators/Pages/default.aspx (http://www.silabs.com/products/clocksoscillators/Pages/default.aspx)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 20, 2012, 12:56:54 am
Hi beard, would you mind sending me the link too? Or posting it here ! I want to see if they've fixed a bug that's pretty annoying to me :)

attached "cleaned-up" dump. It contains only files which can be repalced on Handheld.

Download, rename to tar.gz (yeah, forum filter) and unpack to Handheld file which you wish to be updated.
MD5 81539ffc1baac47aaa4788a92315d3d8
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 20, 2012, 01:15:01 am
I will try to figure out what those messages mean, but are they normal, have you seen those before?

yes, they are normal, they are just a "tick" from the driver. And yes, i saw them on handheld as well,
so nothing to worry about (but if you dont like the message -> customized script or driver or control app - don't remember where the message was - without the stupid message can be easy created).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 26, 2012, 04:35:54 pm
there is a new firmware for Benchtop DSO

http://www.hantek.com.cn/english/down_list.asp?Unid=30 (http://www.hantek.com.cn/english/down_list.asp?Unid=30)
(e.g. http://www.hantek.com.cn/Product/DSO5000Series/DSO5062B_Firmware.zip (http://www.hantek.com.cn/Product/DSO5000Series/DSO5062B_Firmware.zip) )
This fw will work with :
- all Tekway DST1xxxB models (not to use with MST1xxxB!)
- all Hantek DSO5xxxB models (not to use with BM/BM or MSO!)
- all Voltcraft DSO3062C
- all PCE DSO5xxxB models (not to use with BM/BM or MSO)


I haven't checked deeper what changed, i'm busy with other things right now,
however it was so far working.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: MasterFX on November 26, 2012, 09:54:41 pm
Hi guys,
I'm new here and since the a couple of weeks I'm just reading your great stuff in this forum.

First of all thanks to all - but espacially tinhead - for the great work and sharing all the stuff.

After I read all the stuff here I'm thinking about to buy me the Tekway/Hantek Scope (not necessarily to hack it, more because the good value for the money).

I searched a lot of sources where to buy this DSO. So I found some Hantek on AliExpress for about $400 which is in Germany including taxes about 370€.

After I found the Voltcraft DSO3062C hint in this thread I realized it is not available anymore.
BUT I found the the Conrad shop a new one "Voltcraft DSO-1062D". It looks exactly like the Hantek. Could it be the same like the first called DSO3062C ?! Its 329€: http://www.conrad.de/ce/de/product/122485/VOLTCRAFT-DSO-1062D-2-Kanal-Oszilloskop-Digitales-Speicheroszilloskop-Bandbreite-60-MHz/1113030&ref=list (http://www.conrad.de/ce/de/product/122485/VOLTCRAFT-DSO-1062D-2-Kanal-Oszilloskop-Digitales-Speicheroszilloskop-Bandbreite-60-MHz/1113030&ref=list)

One mismatch I found is that the DSO-1062D's LCD is specified with 800x400 (the Hantek/Tekway has 800x480, but maybe it is just a mistake because if you zoom the picture you see the resolition is quoted with 800x480 on the bottom label. In the description is also 800x480)

Regards
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 26, 2012, 11:19:53 pm
yeah, finaly Conrad recognized that it does not make sense to sell 1GS/s models as 500MS/s, so they quickly
ordered new stickers and here we go - 1GS/s DSO-1062D. The bw, memory depth and sampling rate is matching
the Hantek DSO5062B, so everything fine. The TFT resolution is for sure typo, so dont worry about.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on November 27, 2012, 06:18:29 pm
I haven't checked deeper what changed

1. mode Average, Mem Depth 4K, Average > 16.
2. switch  Mem Depth to 40K
Device not automatical switch to Average = 16, whitch this supported in 40K mode.
But and no hang (fw 120808), or White Screen Of Death (fw 120808.2)  ;D


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kresimir on November 27, 2012, 09:08:03 pm
"...so they quickly ordered new stickers and here we go...", yeah... new stickers but again not correct  :-DD On sticker is 100 MHz and 500MS/s :) But in   Highlights & Details is: 60 MHz Bandbreite
                                                                  1 GS/s Realtime-Samplingrate, 25 GS/s equivalent.
MasterFX... in product page of DSO3062C (http://www.conrad.at/ce/de/product/122464 (http://www.conrad.at/ce/de/product/122464)), resolution is 800 x 400 pixels too.
Can anyone confirm that this is the same device as 3062C (Hantek DSO5062B) ???

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 27, 2012, 09:16:00 pm
"...so they quickly ordered new stickers and here we go...", yeah... new stickers but again not correct  :-DD On sticker is 100 MHz and 500MS/s :) But in   Highlights & Details is: 60 MHz Bandbreite
                                                                  1 GS/s Realtime-Samplingrate, 25 GS/s equivalent.
MasterFX... in product page of DSO3062C (http://www.conrad.at/ce/de/product/122464 (http://www.conrad.at/ce/de/product/122464)), resolution is 800 x 400 pixels too.
Can anyone confirm that this is the same device as 3062C (Hantek DSO5062B) ???

what is your point? It is described as 1GS/s DSO, with 1Mpoint memory, so it is what it should be.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kresimir on November 27, 2012, 09:33:38 pm
Quote
what is your point? It is described as 1GS/s DSO, with 1Mpoint memory, so it is what it should be.
On sticker is 100 MHz... instead of 60 MHz.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: MasterFX on November 27, 2012, 09:55:22 pm
Quote
what is your point? It is described as 1GS/s DSO, with 1Mpoint memory, so it is what it should be.
On sticker is 100 MHz... instead of 60 MHz.
I would say they edit the old picture with Photoshop without having the real picture of the scope... so the small mistakes did also survive in the new picture. I'll buy the 1062C next week or so. I will post some "real" images. I'm pretty sure thats an Hantek inside. If not I'll give it back to Conrad.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 28, 2012, 11:44:26 pm
I've tested (together with 2 other ppl) the latest firmware (2.06.3_121027.0) and updated the inofficial BUG LIST.
You can find it directly (as attachement) in the first posting of this thread.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: AndreIIR on November 29, 2012, 11:02:40 pm
Hi i am new here , i bough a

DSO1060
   
2 ch 60 MHz
   
250 MS/s

Is there much hardware  diference between this and DSO1062b bv bvb

?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 29, 2012, 11:08:45 pm
i bough a DSO1060
...
Is there much hardware  diference between this and DSO1062b bv bvb?

almost (i think battery might be the same, enclosure and test leads for sure) everything is different,
starting from Operating System and ending on hardware platform, ADCs, FPGA, SoC, Display ...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: YX-360TR on November 30, 2012, 01:45:00 pm
DSO5102b, bought on 2nd November. Received at the post office on November 24. Firmware version - coincides with the version on the official website Hantek

1. ?ow to change the color of the waveform from blue to red.
2. Why after power Oscilloscope 2-3 minutes may restart: resets all settings and loaded the default settings.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: grzywacz on December 05, 2012, 11:54:47 pm
Hi,

My first post here - I want to buy an oscilloscope in the next week or so and that conrad.de thing got me very curious. Any confirmation that the VOLTCRAFT DSO-3062C and D models are actually the same thing as Tekway DST1062B hardware- and software-wise? Even the D one would be a decent deal for a beginner like me.

Thanks!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kresimir on December 06, 2012, 01:32:16 pm
Hi,

My first post here - I want to buy an oscilloscope in the next week or so and that conrad.de thing got me very curious. Any confirmation that the VOLTCRAFT DSO-3062C and D models are actually the same thing as Tekway DST1062B hardware- and software-wise? Even the D one would be a decent deal for a beginner like me.

Thanks!

Could you send me the link for VOLTCRAFT DSO-3062C on conrad.de???
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Freeze on December 07, 2012, 10:19:10 am
Hi,

My first post here - I want to buy an oscilloscope in the next week or so and that conrad.de thing got me very curious. Any confirmation that the VOLTCRAFT DSO-3062C and D models are actually the same thing as Tekway DST1062B hardware- and software-wise? Even the D one would be a decent deal for a beginner like me.

Thanks!

Could you send me the link for VOLTCRAFT DSO-3062C on conrad.de???
Unfortunately it's already sold out: http://www.conrad.de/ce/de/product/122464/VOLTCRAFT-DSO-3062C-DIGITAL-OSZILLOSKOP (http://www.conrad.de/ce/de/product/122464/VOLTCRAFT-DSO-3062C-DIGITAL-OSZILLOSKOP)

The alternative would be: http://www.conrad.de/ce/de/product/122485/VOLTCRAFT-DSO-1062D-2-Kanal-Oszilloskop-Digitales-Speicheroszilloskop-Bandbreite-60-MHz (http://www.conrad.de/ce/de/product/122485/VOLTCRAFT-DSO-1062D-2-Kanal-Oszilloskop-Digitales-Speicheroszilloskop-Bandbreite-60-MHz)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kresimir on December 07, 2012, 04:36:26 pm
Yes I know. Therefore, I was not clear why the interest for VOLTCRAFT DSO-3062C. MasterFX will buy 1062C so I'm waiting hes review.
Does anyone else have experience with 1062C, and witch firmware they use?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: MasterFX on December 07, 2012, 05:32:13 pm
Yes I know. Therefore, I was not clear why the interest for VOLTCRAFT DSO-3062C. MasterFX will buy 1062C so I'm waiting hes review.
Does anyone else have experience with 1062C, and witch firmware they use?
Not a review but a Systeminfo Screen. Looks it is almost the same but it has e8 instead of the e9 at the end. Seems like it has something to do with the FPGA.

It looks better than on the picture on the conrad page. It has a black backcover!

Conrad also provides a CD with the sourcecode on it
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: brainwash on December 07, 2012, 10:16:12 pm
Just got my Hantek clone from Germany, after almost one month of waiting, 300E+VAT. I was not watching Conrad and missed the offer. Or perhaps they bought one from Conrad and rebranded it, who knows.

Plugged it in at work, connected the 1kHz test signal -> white screen. Ok, fair enough, some other guy was twisting the buttons without knowing what he's doing, so maybe he found a bug. Restarted the scope, played for 20s, again white screen. One restart and 15s later another white screen. The scope was still responding so I assumed (after googling) that the LCD connector was off from transportation.

Came home, started the scope with no signal and it ran fine for ~15min. I connected the test signal and it crashed almost immediately.
After opening I saw that the connectors looked fine and solid, regulators were not extremely warm. Being out of ideas I just removed and plugged back the two power connectors coming to the main board, it seemed to work fine afterwards. I will test it for some time before doing the hack to confirm it is actually running fine.

System info:
model: DSO5062B
SW: 2.06.3 (121023.0)
HW: 10070x555583eb
lcd.front.ts: 0.0.0

Initial usablity impressions: power button feels really cheap and with reversed feedback, the horizontal and vertical positions knobs cannot be rotated with one finger, but the V00 and trigger ones almost can. Somewhat the opposite of what it should be. Vertical LCD viewing angles are pretty poor. On the good side the boot time is pretty short, controls are most of the time responsive, menu layout is decent, lots of options.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 08, 2012, 02:26:18 am
Being out of ideas I just removed and plugged back the two power connectors coming to the main board,
it seemed to work fine afterwards.

that should be good enough. The connector rating is for sure high enough (on paper) but only if it's plugged properly.

the horizontal and vertical positions knobs cannot be rotated with one finger

one finger, urgs, are you iphone generation kid or what?

Vertical LCD viewing angles are pretty poor.

Ehm, this device is designed to be used with 6 o'clock and not 12 o'clock view angle.
When the DSO is stright/in front of your eyes or above them the display is simply perfect. For me, having a lot of other gears
here in front of my eyes (and in another one level above them) this is a perfect viewing angle.
My desk is for DUTs and not gears, and this is not only because of desk space. Having more that 2-3 gears you will
always chose such setup, you can't simply have them all on desk, multilevel above desk is increasing efficiency and
usability.

Unfortunatelly more and more gears are designed to be used below the eyeview line (so with 12 o'clock).
This might be "cool" and useful for marketing departement (to shot some nice pictures, with happy engineers
sitting in front of 10 sq. m desk, having one small PCB to test and 100k DSO in front of them - a typical
combination of unrealistic things).

Sure, in the real world you might have DSO on your desk, but then you will still don't want to look from top on it,
but stright to display (which is why there are plastic foldout feets under each lab gear to align the angle).

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: brainwash on December 08, 2012, 11:08:17 am
Hi tinhead, thank you for this thread, it was the reason why I bought this scope.

I agree with everything that you wrote, so to clarify:
- one finger turning is better if you want to move the waveform fast around since these knobs do not have any acceleration on them.
- vertical viewing angle is for better portability, I already have a bench scope and sometimes I just wish to measure something in another room or in the car

Oh, I wrote the price wrong, it was actually 285+19%
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on December 08, 2012, 11:26:05 am
Sure, in the real world you might have DSO on your desk, but then you will still don't want to look from top on it,
but stright to display (which is why there are plastic foldout feets under each lab gear to align the angle).

This is a good point which prospective scope buyers should take into consideration when deciding which scope to buy. The designers of each model have a different idea of the optimum placement for the DSO and choose an LCD accordingly. For example, if you want to place your scope on a shelf above the workbench while using, the Rigol DS2000 series would be a bad idea - it has a crap viewing angle from below - it's definitely designed for bench top use. On the other hand, the HanTekCraft works very well on a shelf.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: MasterFX on December 08, 2012, 01:35:32 pm
Here is the fw dump of my Voltcraft DSO-1062D: http://www21.zippyshare.com/v/61232718/file.html (http://www21.zippyshare.com/v/61232718/file.html)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: MasterFX on December 09, 2012, 01:12:15 pm
I just wondered if it is possible to hack the DSO to 200 MHz by using DSO-USB-Tool (http://www.dreisiebner.at/dso-usb-tool/ (http://www.dreisiebner.at/dso-usb-tool/))
Because with this tool you're able to read and write the system files /sys.inf,/tmpdst, /logotype (see attached image) and execute system commands via shell.

And what about the 83e8 and 83e9 FPGA?? What are the differences?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 11, 2012, 11:39:04 pm
I just wondered if it is possible to hack the DSO to 200 MHz by using DSO-USB-Tool (http://www.dreisiebner.at/dso-usb-tool/ (http://www.dreisiebner.at/dso-usb-tool/))
Because with this tool you're able to read and write the system files /sys.inf,/tmpdst, /logotype (see attached image) and execute system commands via shell.

of course it is

And what about the 83e8 and 83e9 FPGA?? What are the differences?

In principle 83E8 design is slower, especially in dual channel and memory depth >= 40k there are big diferences.

I've made detailed table (for timebase 200ns/DIV to 2ns/DIV, other timebase settings affected as well)

EDIT: I've added some comments and changed from 800ns to 200ns/DIV which makes more sense as 800ns/DIV and
400ns/DIV are more complex. But i think this table is good enough to understand the diffs.
I've added MSO findings as well, MSO is using even never 83E9 FPGA design version, however the MSO firmware
itself is slowing sampling down (always - which is bug because it should only wen LA enabled) to synch the LA data
to DSO data. This shows me that the LA is sampling with max 250MS/s when 40k or 512k samples are enabled,
which is good enough for that amount of sample memory.

EDIT: I've added overview of FFT differences, they are important as well.


EDIT: some of the things i said here are wrong, the firmware - at the time of testing - was cheating about the enabled memory
depth, therefor i got higher values than they really are (none of the FPGA designs allows 400MS/s or 500MS/s when both
channels and long memory enabled). Still, it make sense to change to 83E9 design if someone have 83E8, however it does
not make sense to downgrade to 83E9 if someone have already 83EA/83EB/83EC/83ED (or later) version installed.

I living the attached picture for historical reason, but as said, none of the designs can sample with 400MS/s or 500MS/s
while dual channels and long memory enabled. The maximal sample rate in long memory mode with dual channel
enabled is - and this depends on model, 200MS/s or 250MS/s.






(https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=34524;image)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 12, 2012, 09:40:56 am
What these 83E8, 83E9 means ?

In principle they are expansion stage numbers, e.g. on the slower/cheaper
models (Tekway DST4000, DST3000) they marked as 83ED, 83EE, 83EF, 83F4 and 83F5.
The firmare (dso.exe) is reading back these number during startup from FPGA register
and changing DSO features to what they should be for specific stage number.
These are, afaik, sample rate, memory depth, filters, equ sampling, avg sampling.

For the DSOs in this thread (Handheld and Benchtop) there are two expansion stage
numbers, 83E8 and 83E9.

Even if most ppl recognized the 83E9 since i think Nov 2011, they were available from the beginning.
The first "fast" 83E9 version was already in Dec. 2009 available, however with sme bad as trigger issues,
so Tekway downgraded DSOs to 83E8. Later Hantek tried to pimp up the mainboard and the FPGA design,
the result was a disaster model hw 1005 and very unstable FPGA/firmware.

Finally the issue was solved and with hw1007 in Nov 2011 the "fast" FPGA design version was rolled
out to production DSOs. The hw 1007 83E9 FPGA design is however very hard on limit, to fix a littlebit
the skew is no room anymore, an FPGA overclocking is not possible as well (max cloc in 105MHz).
With older, but slower, FPGA design 83E8 the FPGA was working with no issues with 125MHz input clock,
giving max sample rate of 1,25GS/s

----------------------------------------------------------------

If you wish to test/play arround with available FPGA design, see attached file.
I've only included the official production versions, there are few test versions as well
but i don't think they really important.

WARNING - if you own hw1005 DSO remember that your DSO is already unstable and will probably
not like any FPGA deisgn changes.


For the benchtop B/BM/BMV models in folder DST1000B there are:

dn_hw0_83E9_date_091201.rbf (very first "fast" FPGA design for DST1000B)
dn_hw0_83E8_date_100224.rbf (the first "step back" version)
dn_hw1005_83E8_date110225.rbf (a complette Hantek hw1005 disaster)
dn_hw1005_83E9_date110423.rbf (... bit updated disaster)
dn_hw1005_83E9_date110427.rbf (... and finaly the only stable version for hw1005)
dn_hw1007_83E8_date110522.rbf (back to the root)
dn_hw1007_83E9_date111122.rbf (first stable "fast" version 83E9)

For low cost models Tekway DST3000, DST4000 series and the Hantek DSO5000C (which i think didn't exists anymore)
you will find a subfolder "DST3000_4000_models" in the attached file. Remember, these designs are NOT compatible
with DSOs from this thread, meaning Tekway DS1000B and Hantek DSO5xxxB/BM/BMV. I'm attaching these
files only for test purpose/testing.

I've included as well design from Handheld Hantek DSO1xxxB/BM/BMV

dn_handheld_hw1001_83E8.rbf

This is, from the point of skew between ADCs (bug 6 in the bug list, see attahement in the first post of this thread)
the best design ever - however it is 83E8 version only and it requieres on Benchtop to execute factory calibration
(not self cal !!!) to work properly with trigger. This is due different skews and trigger circuit.
Vice versa you can use benchtop designs on handhelds as well, however you need to execute factory caibration as well.

EDIT: I've added as separte attachement the FPGA design from MSO models.

dn_MSO_83E9_date111123.rbf

It seems to be never than the latest DSO 83E9 version, it is for sure compatible with B/BM/BMV benchtop models.
To use with handheld it require additionaly factory calibration. As far i think the only difference to
dn_hw1007_83E9_date111122.rbf design is clock out/enable from FPGA (K9, F6) to I/O header, which of course
have no function as long there is no LA board added. I haven't tested it deeper, no time for that now.

How to install? Simply copy to flash drive from there to root fs of the DSO as dn.rbf, e.g.
cp /mnt/dn_hw1007_83E9_date111122.rbf /dn.rbf

delete then /param/sav/run* and reboot the DSO.

After that run self calibration (at least, see notes above if factory cal necessary as well), this will synch the
firmware t the FPGA design.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on December 12, 2012, 10:03:22 am
Very interesting tinhead, any way to know which 83E8 version I got? Maybe I have the best design ever 83E8 and will just ruin it upgrading it to the latest 83E9
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 12, 2012, 10:14:02 am
Very interesting tinhead, any way to know which 83E8 version I got? Maybe I have the best design ever 83E8 and will just ruin it upgrading it to the latest 83E9

copy from DSO to flash drive and binary compare on PC with attached versions :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on December 12, 2012, 10:16:50 am
copy from DSO to flash drive and binary compare on PC with attached versions :)

hehe I suspected something like that knowing that linux sees it as a file. Thanks !
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 12, 2012, 10:40:58 am
copy from DSO to flash drive and binary compare on PC with attached versions :)

hehe I suspected something like that knowing that linux sees it as a file. Thanks !

in principle you could check file timestamp, but there is a "small" problem.
Every time the root fs was updated the timestamp was changed, so even if files are binary the same
the timestamp may vary.

The best is to compare them binary on PC (or DSO - however the last time i've tried diff or cmp the DSO linux crashed)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: MasterFX on December 12, 2012, 04:26:00 pm
The Voltcraft DSO-1062D has the "DN_HW1007_83E8_DATE110522.RBF" in it.
Interestingly dn_hw0_83E8_date_100224.rbf and DN_HW1007_83E8_DATE110522.RBF are binary the same.

The dn_hw1007_83E9_date111122.rbf is less than half the filesize, seems they throw much garbage away.

What about the factory calibration on the benchtop DSOs?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on December 12, 2012, 09:08:23 pm
What these 83E8, 83E9 means ?
Hi,  tinhead
hw version: 0x555583e8

to experiment or not to experiment ?
that is the question
(c) almost Shakespeare
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 12, 2012, 11:01:06 pm
The dn_hw1007_83E9_date111122.rbf is less than half the filesize, seems they throw much garbage away.

hehe no, it is simply compressed.

What about the factory calibration on the benchtop DSOs?

very first posting in this thread, look for "factory calibration" links.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 17, 2012, 04:21:11 pm
a person from Germany asked me if there is a chance to request from HanTekway to remove the automatic
20MHz lowpass filter. Well, maybe they will do it some day, but for now i have DIY solution.

You don't know what i'm talking about? Probably you do. Each time while changing volt/DIV from 5mV/DIV
to 2mV/DIV the firmware is automatically enabling the 20MHz lowpass. While this is only pissing me off
a bit there is another example which really sucks. When you set to 2mV/DIV and disable the 20MHz lowpass
you can't then change anything in Acquire menu (e.g. sampling type from normal to avg, or even
not the memory depth) without having the 20MHz lowpass activated again.

I've attached patched dso.exe (firmware 2.06.3_121027.0), to install it just copy it over uart to DSO and reboot.

If you don't have uart connected or linked use the tool from Peter

http://www.dreisiebner.at/dso-usb-tool/ (http://www.dreisiebner.at/dso-usb-tool/)

to copy it from e.g. usb flash drive to DSO, e.g.

cp /mnt/dso_update.exe /

After the reboot the startup script will move the dso_update.exe to dso.exe and your DSO will
startup with patched version (it will display  2.06.3_121027.1 )


For those of you who wish to learn what i did in the firmware (note: this is fw for 2.06.3_121027.0).

 - to disable 20MHz lowpass while changing Volt/DIV from 5mV to 2mV/DIV


 In the firmware there is function "DoCoastCountVoltBase" (hex address 0x3BE88), which
 contains two jumps to another one function - this is what i changed from "BL BwLimitWhenVbChange"
 to "NOP". The first address to patch is 0x3C008, the 1C FD FF EB need to be repalced by 00 00 A0 E1.
 The second address is 0x3C098, here the F8 FC FF EB must be repalced by 00 00 A0 E1.


 - to disable 20MHz while operating in Acquire menu


 In the firmware there is function "InitLcdUnwaveareaShow" (hex address 0x2E34C), which
 contains two jumps to 2 other functions. The first change is from "BL SetBwLimitVal" to "NOP",
 the second is "BL BwLimitWhenVbChange" to "NOP". The first address to patch is 0x2E52C,
 the A8 12 00 EB need to be repalced by 00 00 A0 E1. The second address is 0x2E534, here
 the D1 33 00 EB must be repalced by 00 00 A0 E1.


As said above, these changes are for current fw 2.06.3_121027.0, for other versions you will
have to disassemble both (this and target fw), compare the affected functions to find out the
new address and the patch it away.

EDIT: Btw, there is another one situation where the fw is auto enabling the 20MHz lowpass,
when you se both channels to 2mV/DIV and change to XY from YT. In my opinion this is ok,
i don't see a reason to have lowpass disabled here - but if you don' t like it, well patch it away.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: brainwash on December 17, 2012, 04:48:02 pm
Excellent! I was wondering why no one was complaining about this.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: leverler6 on December 23, 2012, 10:20:09 am
im new to scope hacks (or rather linux hack???)

but reading this thread up to 40++ i have to post this, you sir Mr TinHead is amazing! i salute you ...

i currently do not have a DSO, and came about to hunt for 1.

i am very impressed with the agilent DSO. their screen refresh rate is touted at 50k ...

of course, i cant spend that kind of money ...

so i was wondering, after seeing this --> Hantek DSO5000B Series Review (https://www.youtube.com/watch?v=u7UgKJ8M7LY#) ... it does seem like this little DSO have a raw but amazing refresh rate. does any 1 know approx what is it? 1k refresh? 2 k?

also i found a ebay seller that sells 5102 for USD436 ... im not sure if i should order from them. after seeing many feedback that forumers have bought theirs for USD5xx, i wonder could anything be wrong with this? http://www.ebay.com/itm/New-7-LCD-USB-DSO5102B-Hantek-Digital-100MHz-2-Channel-Oscilloscope-1GSa-s-/251189174571?pt=LH_DefaultDomain_0&hash=item3a7c0aa12b (http://www.ebay.com/itm/New-7-LCD-USB-DSO5102B-Hantek-Digital-100MHz-2-Channel-Oscilloscope-1GSa-s-/251189174571?pt=LH_DefaultDomain_0&hash=item3a7c0aa12b)

i am of course tempted to carry out the hack mod :p
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 23, 2012, 06:27:23 pm
... it does seem like this little DSO have a raw but amazing refresh rate. does any 1 know approx what is it? 1k refresh? 2 k?

Tekway said 2500 wfms/s

http://www.tekway.net/views2.asp?newsid=205&sess=2 (http://www.tekway.net/views2.asp?newsid=205&sess=2)

which they confirmed after i asked "why user manual i having 2000 instead of 2500".

I actually made some measurments 1.5y ago, showing what the DSO is caable to do:

https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg60316/?topicseen#msg60316 (https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg60316/?topicseen#msg60316)

When i compare (with latest firmware loaded), pure visually, to Tektronix TDS700 series (yes, i bought again one. I
was very disapoited, Hantek/Tekway promised to release 4ch DSO in first Q 2012, but they didn't and i needed in
summer a 4ch DSO) there is only a small difference*

00018 (https://www.youtube.com/watch?v=i57m7je5mH0#ws)

so i think there is really something between 2000 and 2500 wfms/s

* - Tektronix trigger out is connected to freq counter, Tek is set to not capture too much (to have a chance to compare
 with Tekway/Hantek) - on the video ~6000 wfms/s. Test signal is coming from Yokogawa Signal Gen, it is set to
 produce ~ 50000 jitter frames.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on December 23, 2012, 07:09:13 pm
it does seem like this little DSO have a raw but amazing refresh rate. does any 1 know approx what is it? 1k refresh? 2 k?
Keep in mind that any DSO manufacturer that specifies a wfrm/s rate (and many don't) uses the fastest possible rate - and there is only one single timebase setting + sample depth (with a single channel) that will achieve that rate. You can see in this table I made (https://www.eevblog.com/forum/reviews/first-impressions-and-review-of-the-rigol-ds2072-ds2000-series-dso/msg160064/#msg160064) of the Rigol DS2072s waveform capture rates at all scale and memory depths that it peaks at the 20ns setting - but other DSOs have different 'sweet spots'. If you know what it is for your DSO, then you can specifically use that setting when glitch-hunting,
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bobblehat on December 26, 2012, 04:13:42 pm
Just got a Voltcraft DSO-1062D. It appears to be another rebadged Tekway DST-1062B with 10070x555583eb hardware and 2.06.3(121012.0) software.

I've managed to hack it to a Tekway DST-1202B via USB using the DSO-BW-CHANGER tool available from here:

https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg91877/#msg91877 (https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg91877/#msg91877)

I now have a 2ns timebase position and a risetime of ~1.8ns for a fast pulse.
The amplitude of a 130MHz sine wave signal from a lashed up Colpitts oscillator has increased by 60%, so bandwidth has also been improved, although at this stage I cannot confirm full 200MHz capability.


It's available from Conrad and Voelkner in europe for 329 euros:

http://www.conrad.de/ce/de/product/122485/VOLTCRAFT-DSO-1062D-2-Kanal-Oszilloskop-Digitales-Speicheroszilloskop-Bandbreite-60-MHz (http://www.conrad.de/ce/de/product/122485/VOLTCRAFT-DSO-1062D-2-Kanal-Oszilloskop-Digitales-Speicheroszilloskop-Bandbreite-60-MHz)

http://www.voelkner.de/products/376954/VOLTCRAFT-DSO-1062D-2-Kanal-Oszilloskop-Digitales-Speicheroszil.html (http://www.voelkner.de/products/376954/VOLTCRAFT-DSO-1062D-2-Kanal-Oszilloskop-Digitales-Speicheroszil.html)


or in the UK for £290:

http://www.conrad-uk.com/ce/en/product/122485/Voltcraft-DSO-1062D-2-Channel-Oscilloscope-Digital-Storage-Oscilloscope (http://www.conrad-uk.com/ce/en/product/122485/Voltcraft-DSO-1062D-2-Channel-Oscilloscope-Digital-Storage-Oscilloscope)


PS:Thanks to tinhead in particular and everybody else who has contributed to this forum.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 26, 2012, 11:16:56 pm
The amplitude of a 130MHz sine wave signal from a lashed up Colpitts oscillator has increased by 60%, so bandwidth has also been improved, although at this stage I cannot confirm full 200MHz capability.

oh well, so far i know nothing changed on hardware side so it should be still 200MHz.
Of course we need to watch out what we measure, with good signal source properly terminated
i have only 0.5dB amplitde nonlinearity, the total bw ends up ~ 245MHz (In the real world it's "only" ~218MHz)

See attached pic1

(https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=35531)

- the "S" cursor is on 0dBm in relation to CH1 position, the "E" cursor is on -3dB level.
The signal starts with 10MHz and increase by 20MHz per DIV (middle of the screen also 150MHz).

And yeah, of course we have to be careful how we measure - the setup above is typical Scope bw measurment,
but we have digital era, so it contins two common "errors" :
- the most modern oscilloscopes are using digital filters, they don't need to be properly implemented in 8s/DIV
- we undersample, this don't need to be accurate (and we can't enable avg here, at least long mem is helping a bit)

A better ay to measure the bandwidth is to check with FFT. Unfortunately my spread spectrum generator
is not calibrated properly, so i've used 50 snapshots - from a same signal generator as above picture - merged
together to show the frequency response.

(https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=35533)

there is small peak in the frequency response, it is exactly on 125MHz which comes from the ADC clock,
on the video below you can see it better:

Movie (https://www.youtube.com/watch?v=RFTyjQE6P5Q#ws)

As within FFT (and 200ns/DIV) the DSO is sampling with 1GS/s the accuracy should be acceptable,
or well at least the best we can get withou avg/hi-res mode.

This time "E" cursor is 0dBm level and "S" cursor on -3dB.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bobblehat on December 27, 2012, 08:53:29 am
Hi tinhead,

I should be able to get my hands on a proper RF signal generator soon and then I can check the gain flatness up to and above 200MHz.

I'm guessing from the schematics that you have posted in this thread that to get proper HF performance from this 60MHz model, I would need to change some values in the front end.

Is that correct?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 27, 2012, 10:22:49 am
I'm guessing from the schematics that you have posted in this thread that to get proper HF performance from this 60MHz model, I would need to change some values in the front end.

Is that correct?

this depends on the components in your DSO (i saw already 60MHz models with 200MHz frontend-values)
and of course on what exact you wish - if in worst case ~180MHZ bw are ok then you don't need to do anything,
but if you wish to get any available Hz bw then for sure you need to solder neew parts.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bobblehat on December 27, 2012, 01:14:30 pm
No I don't need the bandwidth, I was just curious and wanted to check that this scope is hackable in the same way that the Voltcraft DSO-3062C was.

Perhaps when I get brave, I will whip the case off and have a look inside.

Thanks again for your help.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: f15h on December 27, 2012, 01:33:08 pm
I am experiecing irregularieties when capturing data with 2.5 and 5 MSPS Samplerate and exporting them to CSV

HW: 1007x555583e8
SW: 2.06.3(121027.0)

I use the following settings to get 2.5MSPS
2 Ch.
Timebase: 8ms
500kpts Memory

Probe CH1 is connected to the 1khz Signal-Out

When using the internal measurement functions 1khz Frequency is correctly detected - but when exporting the data to CSV a "zerocross"-measurement shows 3206 Samples per Periode, which translates to 3.206 MSPS

The same problem occures with 1Ch, 8ms, 1MPTS Memory and 5MSPS - there I measure approx. 6.375 MSPS

The problem doesnt show up for example with shor memory 4kpts, 2CH, 25KSPS - there I measure exactly 25 Samples for each Periode.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mightyzen on December 27, 2012, 01:57:55 pm
Just got a Voltcraft DSO-1062D. It appears to be another rebadged Tekway DST-1062B with 10070x555583eb hardware and 2.06.3(121012.0) software.

Does the 555583eb indicate a new FPGA release for the DSO-1062D, namely 83EB? If so, does anyone know how it compares to the 83E8 and 83E9 FPGA configs?

And: would it be possible to use the 83EB on the Voltcraft 3062C and/or the regular Hanteks?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 27, 2012, 02:27:01 pm
Just got a Voltcraft DSO-1062D. It appears to be another rebadged Tekway DST-1062B with 10070x555583eb hardware and 2.06.3(121012.0) software.

Does the 555583eb indicate a new FPGA release for the DSO-1062D, namely 83EB? If so, does anyone know how it compares to the 83E8 and 83E9 FPGA configs?

And: would it be possible to use the 83EB on the Voltcraft 3062C and/or the regular Hanteks?

yes, there is 83EA and 83EB out there. Afaik they should both improve jitter (bug nr. 6 in the bug list),
what exactly behind i don't know.
However they reducing (as far i know for 83EB) the sampe rate in
long mem mode - see attached.

EDIT: Official answer is -> there are different DACs in sample/hold, therefore FPGA has been changed.
Well, i do have here DSO with different DAC and it's using E9 design, so maybe even another one change?

Maybe someone having 83EA and/or 83EB could shot some pictures of mainboard?


EDIT: some of the things i said here are wrong, the firmware - at the time of testing - was cheating about the enabled memory
depth, therefor i got higher values than they really are (none of the FPGA designs allows 400MS/s or 500MS/s when both
channels and long memory enabled). Still, it make sense to change to 83E9 design if someone have 83E8, however it does
not make sense to downgrade to 83E9 if someone have already 83EA/83EB/83EC/83ED (or later) version installed.

I living the attached picture for historical reason, but as said, none of the designs can sample with 400MS/s or 500MS/s
while dual channels and long memory enabled. The maximal sample rate in long memory mode with dual channel
enabled is - and this depends on model, 200MS/s or 250MS/s.



(https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=35566)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mightyzen on December 28, 2012, 09:17:21 am
So, reading from your chart, I conclude the 83E9 is the best choice at the moment and there is no need to update the 3062C to the 83EB firmware.

Anyhow, is there a download link for the 83EB firmware if one would like to experiment? It is not in the fpga archive is it?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Crenwick on December 28, 2012, 09:50:22 am
Hello Tinhead,

Do you have some news for the MSO extention ?  Did you received the firmware ?

What's the status ?

Bernard
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 28, 2012, 10:27:14 am
So, reading from your chart, I conclude the 83E9 is the best choice at the moment and there is no need to update the 3062C to the 83EB firmware.

Anyhow, is there a download link for the 83EB firmware if one would like to experiment? It is not in the fpga archive is it?

see my edits above. I've asked some ppl having EB to update to E9, they didn't got any problems. I do have E9 with
diferent DAC (as in original E9 hardware) and both EB and E9 are working for me (however i have to recalibrate
with EB - and yes it's slower sampling).

I'm happy that i got official answer, but somehow it does not make sense - ok, maybe DSOs with EA and EB designs have again different DACs than my E9 (with already different DA as in previous E9 hardware versions).

Maybe someone having 83EA and/or 83EB could shot some pictures of mainboard?


previous E9 hardware (DAC) - the DAC is LTC2601 <- ignore that one "tricky ic" above DAC, this is repair PCB.
(https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=35611)


current E9 hardware (DAC) - the DAC is on bottom side, it is DAC8551
(https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=35613)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 28, 2012, 10:27:58 am
Hello Tinhead,

Do you have some news for the MSO extention ?  Did you received the firmware ?

What's the status ?

Bernard

yes, please don't kill me, sending update mail in a second ...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mightyzen on December 28, 2012, 12:49:44 pm
I'm happy that i got official answer, but somehow it does not make sense - ok, maybe DSOs with EA and EB designs have again different DACs than my E9 (with already different DA as in previous E9 hardware versions).

My 3062C has its DAC on the bottom of the board. I did not make that many photos of the bottom, as it did not seem that interesting at the time. This is the best I have of the DAC. Can you make something of it?

PS: page 100 and counting
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: nadona on December 29, 2012, 01:07:32 am
First of all, thank you tinhead for all your awesome works. Now I own 200MHz for the price of 60MHz. ;D
I have a question. How do I know my scope is successfully upgraded to 200MHz other than boot up logo of DSO5202B?

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 29, 2012, 02:15:52 am
My 3062C has its DAC on the bottom of the board. I did not make that many photos of the bottom, as it did not seem that interesting at the time. This is the best I have of the DAC. Can you make something of it?


yes, this is DAC8551 (D81 marking code). With a good angle, and good eyes (haha) you can see it through the small
enclosure holes.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bobblehat on December 29, 2012, 05:42:24 am
Looking through the holes in the enclosure, I can see that the bottom side DAC footprint on my Voltcraft DSO-1062D is unpopulated. So probably no help really!

Interesting that MasterFX's DSO-1062D was loaded with e8 configuration!?

https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg169434/?PHPSESSID=2ffe970f578c08a6a2d86b9cf393ea75#msg169434 (https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg169434/?PHPSESSID=2ffe970f578c08a6a2d86b9cf393ea75#msg169434)


HW:10070x555583eb
SW:2.06.3(121012.0)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 31, 2012, 11:29:00 pm
yeah, the "DAC difference" statement didn't make much sense, but on the other side
as long FPGA desigs are interchangeable and hacks are working who really cares about "the rest".
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: leverler6 on January 01, 2013, 03:46:39 pm
o my, the 5102 on ebay @ USD436, is this worth a grab?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Spawn on January 01, 2013, 04:45:37 pm
If you look further there is also one for USD389  :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mightyzen on January 03, 2013, 09:35:53 am
One issue that I did not find in the bug list, is the resolution of the trigger frequency display. I have a signal of 21.58Hz, it displays 21.0000Hz in the bottom. If it is not possible to measure it better than with 1Hz resolution, display at least 21Hz instead of 21.0000Hz.  :-BROKE
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: leverler6 on January 04, 2013, 12:11:07 am
hmmm didnt see any of that, what should i search under?


If you look further there is also one for USD389  :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 04, 2013, 12:31:44 am
hmmm didnt see any of that, what should i search under?


If you look further there is also one for USD389  :)

ebay item 140872766162
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 04, 2013, 12:40:38 am
One issue that I did not find in the bug list, is the resolution of the trigger frequency display. I have a signal of 21.58Hz, it displays 21.0000Hz in the bottom. If it is not possible to measure it better than with 1Hz resolution, display at least 21Hz instead of 21.0000Hz.  :-BROKE

well, it's hard to say if this is really bug. The counter have 1Hz resolution, and i double checked the firmware so yes
there is way to set timeout for counter but i don't found anything resolution related. All i can see is 32bit long
data read directly from FPGA, and if i read it manually the smallest value is 1Hz.

Of course it's crazy, for high-unknon frequencies the counter is very good indicator to prevent user from
aliasing mistakes, but for lower freqiencies it's simply not good enough.
Sure, we can here use the measure, which does have 10mHz resolution, but yeah it would be nice to have the
counter as well with 10mHz resolution.

On the other side, there is up to 30ppm jitter so the couner would be not work very "stable". Sure, they could create a nice
reciprocal counter, and then change the menu/dispplay , and add maybe better oscillator (e.g. Crystek CCHD-575-25-100),
but then honestly the DSO would costs lot of more money. So i don't know how much space is there in FPGA, i can ask
to implement bette rcounter, but i can't promise anything.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: leverler6 on January 04, 2013, 01:32:40 pm
aargh ... this vendor does not ship to my country ... :(

hmmm didnt see any of that, what should i search under?


If you look further there is also one for USD389  :)

ebay item 140872766162
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mightyzen on January 04, 2013, 01:44:13 pm
So i don't know how much space is there in FPGA, i can ask to implement better counter, but i can't promise anything.

Better counter would be nice. But what irritates me is the .0000 giving the false sense of accuracy. So if they would just implement:

Code: [Select]
if( freq < 1000 )
  printf("%dHz", freq);
else if( freq < 1000000 )
  printf("%d.%03dkHz", freq / 1000, freq % 1000);
else
  printf("%d.%03dMHz", freq / 1000000, (freq / 1000) % 1000);

You have patched dso.exe before ...  :D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ElektroQuark on January 09, 2013, 10:15:01 am
Just bought a Voltcraft DSO-1062D. Lets see when it arrives... :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: TRIO_Smartcal on January 11, 2013, 02:01:38 am
We've dropped our prices for the Tekway/Hantek.   Anybody wanting to get a 60MHz to try upgrading to 200MHz, then try here.....

http://triosmartcal.com.au/2668-tekway-dst1102b-digital-oscilloscope-with-wide-screen-hd-display.html (http://triosmartcal.com.au/2668-tekway-dst1102b-digital-oscilloscope-with-wide-screen-hd-display.html)


.......or if you don't wish to blow your warranty then here's the 100 MHz and 200 MHz versions


100 MHz     http://triosmartcal.com.au/1961-tekway-dst1102b-digital-oscilloscope-with-wide-screen-hd-display.html (http://triosmartcal.com.au/1961-tekway-dst1102b-digital-oscilloscope-with-wide-screen-hd-display.html)

200 MHz     http://triosmartcal.com.au/2669-tekway-dst1102b-digital-oscilloscope-with-wide-screen-hd-display.html (http://triosmartcal.com.au/2669-tekway-dst1102b-digital-oscilloscope-with-wide-screen-hd-display.html)




Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 12, 2013, 12:05:56 am
1500 replies and (nearly huhu, made it) 250000 views ... Dave, where is my DMM ?  :-//
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Polossatik on January 12, 2013, 01:38:28 am
A Rigol?  8)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 12, 2013, 02:15:09 am
A Rigol?  8)

... never look a gift horse in the mouth
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: EEVblog on January 12, 2013, 03:44:57 am
1500 replies and (nearly) 250000 views ... Dave, where is my DMM ?  :-//

Perhaps there should be a prize for threads that crack numbers like that.
Email me your snail mail address!

Dave.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on January 12, 2013, 03:56:36 am
1500 replies and (nearly) 250000 views ... Dave, where is my DMM ?  :-//

Damn you tinhead! I can never catch up!!  :scared:
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: LEECH666 on January 12, 2013, 09:27:28 am
So this thread is now essentially the "Gangnam Style" of the eevblog forum. :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 12, 2013, 12:55:52 pm
Perhaps there should be a prize for threads that crack numbers like that.

Email me your snail mail address!

Dave.

i will!

Damn you tinhead! I can never catch up!!  :scared:

never say never, but when you wish to compete add the 2200 replies on mikrocontroller.net forum as well :P
Sure, third of all the replies are coming from me, but still, i was really surprised how many poeple discussed these DSOs.

Any i only scratched the surface of all the hacks flowing through my (tin)head  :phew:


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: BravoV on January 12, 2013, 12:57:37 pm
This special thread should be stickied don't you think ? C'mon mods ...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Polossatik on January 12, 2013, 12:59:01 pm
1500 replies and (nearly) 250000 views ... Dave, where is my DMM ?  :-//

Damn you tinhead! I can never catch up!!  :scared:

while views and posts are nice, maybe an idea it have some kind of "best of" posts competition every 6 months or so?
Dave chooses 3 or 4 posts based on popularity/his mood/technical merit/stats (https://www.eevblog.com/forum/index.php?action=stats) and then opens little thread where members can vote for the "best of" for a week or 2?

..
Sure, third of all the replies are coming from me, but still, i was really surprised how many poeple discussed these DSOs.

really? :) you had no idea? (https://www.eevblog.com/forum/blog/changing-the-rigol-ds1052e-to-ds1102e-using-usb-the-dummy-guide/) (and all other threads about this?)  8)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 12, 2013, 02:45:54 pm
..
Sure, third of all the replies are coming from me, but still, i was really surprised how many poeple discussed these DSOs.

really? :) you had no idea? (https://www.eevblog.com/forum/blog/changing-the-rigol-ds1052e-to-ds1102e-using-usb-the-dummy-guide/) (and all other threads about this?)  8)

as i started this thread, the Rigol thread was only 200 replies or so (Oct 2010), so i thought it will be another one "ohh cool"-thread for few months, but 2yrs are gone and still ongoing discussion (in both threads).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Polossatik on January 12, 2013, 05:18:41 pm
DSO attracts DSO i guess :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 15, 2013, 10:36:05 pm
There is new firmware available for Hantek DSO5xxxB/Tekway DST1000B/Voltcraft DSO3062/1062/PCE DSOs,

http://www.hantek.com.cn/english/down_list.asp?unid=30 (http://www.hantek.com.cn/english/down_list.asp?unid=30)

i've already played with this version and updated the bug list:

https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=37192 (https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=37192)

You might wonder, but yes, the bug list is now longer. I've collected some informations from other user and tested it here
as well to validate if they found real bug or an gremlin :) , example CSV bug

https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg175108/#msg175108 (https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg175108/#msg175108)

is a real one (and i even found in the dso.exe what's wring and how to fix it).

EDIT: i forgot to mention, there are few new measurments:

FOVShoot
RPREShoot
BWidth
FRF
FFR
LRR
LRF
LFR
LFF


but don't ask me what they doing, i haven't found any info in the (updated) help file, maybe i'm simply blind.
I assume this are First (waveform?) Rising Falling etc? Check it and let me knwo what you think  :scared:
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Bored@Work on January 15, 2013, 11:11:07 pm
EDIT: i forgot to mention, there are few new measurments:

FOVShoot
RPREShoot
BWidth
FRF
FFR
LRR
LRF
LFR
LFF


but don't ask me what they doing, i haven't found any info in the (updated) help file, maybe i'm simply blind.
I assume this are First (waveform?) Rising Falling etc? Check it and let me knwo what you think  :scared:
FOVShoot: Fall overshoot voltage

RPREShoot: Rise preshoot voltage

BWidth: ?

FRF: Time between ch1 first rising edge and ch2 first falling edge

FFR: Time between ch1 first falling edge and ch2 first rising edge

LRR: Time between ch1 first rising edge and ch2 last rising edge

LRF: Time between ch1 first rising edge and ch2 last falling edge

LFR: Time between ch1 first falling edge and ch2 last rising edge

LFF:  Time between ch1 first falling edge and ch2 last falling edge
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 15, 2013, 11:49:38 pm
FOVShoot: Fall overshoot voltage

RPREShoot: Rise preshoot voltage

oh yeah, make sense. Then there is a need to rename the already existing "Overshoot" into "ROVShoot"
and "Preshoot" to "FPREShoot".

(https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=36967)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bilko on January 16, 2013, 01:00:06 am
There is new firmware available for Hantek DSO5xxxB/Tekway DST1000B/Voltcraft DSO3062/1062/PCE DSOs,

http://www.hantek.com.cn/english/down_list.asp?unid=30 (http://www.hantek.com.cn/english/down_list.asp?unid=30)

Does this firmware run on the original Tekway 1202B Hardware ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 16, 2013, 08:06:26 am
There is new firmware available for Hantek DSO5xxxB/Tekway DST1000B/Voltcraft DSO3062/1062/PCE DSOs,

http://www.hantek.com.cn/english/down_list.asp?unid=30 (http://www.hantek.com.cn/english/down_list.asp?unid=30)

Does this firmware run on the original Tekway 1202B Hardware ?

yes it does, there might be sometimes common difference :
 - logo files (and even with wrong one, the DSO will still work)
 - help files (Hantek have portuguese langs - Tekway not, Tekwy GPL download link - Hantek not)
 - sometimes other verndor specific file (and then i will tell "do not use on ...")

In the current firmware the only difference is the help file, nothing else. But when you don't trust, attached original
Tekway update files (for 1202B) - see attached ( i had to split it due forum restrictions)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bilko on January 16, 2013, 10:49:40 am
Thanks ever so much for the 1202B files. I extracted the zip and found .exe file. I run Linux. I expected to see a .up file. Will the exe extract on Windows ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 18, 2013, 01:56:08 am
Thanks ever so much for the 1202B files. I extracted the zip and found .exe file. I run Linux. I expected to see a .up file. Will the exe extract on Windows ?

ehm yes, it will. The exe is however SFX archive, you can unrar is as well without executing it.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: nadona on January 19, 2013, 01:50:53 pm
I have an updated DSO5062B
My system crashed while I was on the FFT screen and moving the cursor. I rebooted it a few times but it always goes back to display the crashed screen after booting up. No button or knob responds.  :-BROKE
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 19, 2013, 11:10:59 pm
I have an updated DSO5062B
My system crashed while I was on the FFT screen and moving the cursor. I rebooted it a few times but it always goes back to display the crashed screen after booting up. No button or knob responds.  :-BROKE

hmm, hard to believe. There is watchdog running, when the dso.exe is not responding the watchdog will reboot your DSO. When there is no respond to buttons/knobs, the dso.exe is definitely not running. So why is watchdog not rebooting your DSO?

However, i've setup my DSO to exact the same you have, played for 30mins within FFT and nothing, it works no matter what i do.

So i would say you have something else broken. Probably one of the plug not contacting or what so ever. If you don't want to check by yourself, ask the deal where you bought it.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: nadona on January 20, 2013, 02:03:25 am
Thank you for your time and effort in trying to assist me with this problem.
The dealer I bought it from is in a different state and it would take too much hassle to try to send it back and wait for a working one to come back. I'd like to resolve my problem here at home.

I'm guessing maybe the configuration from the last operating mode is saved somewhere on a file so when it reboots, it redirects to that code. What I am curious about is what the exact bootup sequence is up to the initialization file so I can reset it to the factory default configuration. What is the name of the initialization file, the factory default configuration file, and the directory?

In addition, the scope displayed the factory default screen for a few months whilst rebooting. Sometime recently however, it has been going back to the last used configuration.

Thanks again!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 20, 2013, 02:27:04 am
I'm guessing maybe the configuration from the last operating mode is saved somewhere on a file so when it reboots, it redirects to that code. What I am curious about is what the exact bootup sequence is up to the initialization file so I can reset it to the factory default configuration. What is the name of the initialization file, the factory default configuration file, and the directory?

well yes, there is config file. But actually this is what Hantek implemented on my request, a watchdog deleting
config file if something wrong, if dso.exe killed, if crashed etc.  Additionally the watchdog have to reboot the DSO.
So far the watchdog always worked for me, i've used bad config file etc to force to crash, but as i said, it was always doing the job.

So it can be that:
- something physicaly is broken (e.g. memory)
- something physicaly is not connecitg (like the 2 power rail plugs on left and right side of the mainboard)
- NAND is having bad sectors and the driver didn'T recognized it properly and not moved data somewhere (i had this
  already once, i bought cheap NAND chips and most of them was fucked up. My DSO was not able to handle few of them.
  Now i have a half tray with new chips, they working always)
- filesystem is having error generally, should be never this case but who knows.

Now what you an do is to open the enclosure and first try to un/replug the two power rail plugs on the left and right side of PCB.
If this will not fix your DSO then you will have to use different way, to connect the internal UART port via UART<->USB adapter to your PC, set PC Terminal app to 115200, 8n1, boot DSO and atch the messages. If you can see them while rebooting DSO, then at least hardware is maybe ok. Then try to get into the shell by using space, then ctrl+c and enter.
If you can oepn the shell, then go to folder /param/sav/ and delete the file run1kb**** or simply

rm /param/sav/r*

After that you can try to reboot DSO, it should then boot with default config. If not, well then you will have to send it back to the dealer.


In addition, the scope displayed the factory default screen for a few months whilst rebooting. Sometime recently however, it has been going back to the last used configuration.

oh well, this is already an indication for something wrong there.

Did you ever made backup of your DSO? If not (and if 'we' manage to let is boot properly) then i would like to
get backup of your DSO, simply to double check if there is something in the file system killing your device.

How to backup -> https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg35683/#msg35683 (https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg35683/#msg35683)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: nadona on January 20, 2013, 05:21:48 am
Thank you very much tinhead.
After file "run1kb_100302" was deleted, it's working.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on January 20, 2013, 09:31:26 pm
OK guys,

Let this be a warning to all of you upgraders. Be very carefull when fitting the MSO add-on card to the mainboard.

My glasses are not strong enough, it was off by one row when I did a first test after loading the new software.

A flash, some smoke and the S3C2440 SOC is looking very dead now with its newly formed bubble.  :palm:

Maurits
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 20, 2013, 09:48:51 pm
OK guys,

Let this be a warning to all of you upgraders. Be very carefull when fitting the MSO add-on card to the mainboard.

My glasses are not strong enough, it was off by one row when I did a first test after loading the new software.

A flash, some smoke and the S3C2440 SOC is looking very dead now with its newly formed bubble.  :palm:

Maurits

oh fuck, this is of course bad thing.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 20, 2013, 11:16:53 pm
Thank you very much tinhead.
After file "run1kb_100302" was deleted, it's working.

good, still wondering why it's like that. Btw, did you saw my message?

Did you ever made backup of your DSO? If not (and if 'we' manage to let is boot properly) then i would like to
get backup of your DSO
, simply to double check if there is something in the file system killing your device.

How to backup -> https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg35683/#msg35683 (https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg35683/#msg35683)


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: snowl on January 22, 2013, 01:53:22 pm
Hi,
are those Hantek firmware updates cumulative or do I have to apply them in sequence? And if they are sequential, where do I get older ones?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: campodea on January 22, 2013, 06:01:19 pm
I'm pretty sure they are cumulative...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on January 23, 2013, 12:54:23 am
A tip for those of you that do the LA board addition to prevent this disaster:
OK guys,

Let this be a warning to all of you upgraders. Be very carefull when fitting the MSO add-on card to the mainboard.

My glasses are not strong enough, it was off by one row when I did a first test after loading the new software.

A flash, some smoke and the S3C2440 SOC is looking very dead now with its newly formed bubble.  :palm:

Maurits

When you didn't yet solder the strip of contacts in the mainboard consider this:

The strip I received with the LA-board was 34 pairs of pins instead of the needed 30 pairs. I cut of 4 pairs. However, you can make a kind of fitting slot or shroud by cutting of just two pairs. Now push or pull the pairs of pins at both ends upwards, flush with the bottom of the strip and then bend the tops inwards, like a square hook. This way you cannot push the LA board on the pins in the wrong, one row off, position. I think there is room on the main board for the extra pin pair at either end.

Good luck, Maurits
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 24, 2013, 06:15:07 pm
Backup tool for the new MSO models :

 - Tekway MST1062B, MST1102B, MST1202B
 - Hantek MSO5062D, MSO5102D, MSO5202D
 - Voltcraft MSO5062B, MSO5102B

simply download, unpack and read how to use ... it contains also some informations and tools to allow restore of the backup
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ElektroQuark on January 29, 2013, 08:31:32 pm
DSO1062D received.
 
2.06.3 (121023.0)
10070x555583eb
DAC LTC2601
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 29, 2013, 09:25:33 pm
Thanks!

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ElektroQuark on January 30, 2013, 07:36:57 am
I must read a ton of pages now to properly update to 200MHz.
Thank you, Tinhead.
If you need a pic, ask, it's open right now in the bench at home waiting for me.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: LEECH666 on January 30, 2013, 01:27:03 pm
I found the DSO-BW-Changer Tool that you can find here fairly easy to change the bandwidth to 200 Mhz.

https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg91877/#msg91877 (https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg91877/#msg91877)

Basically all you need is a USB (A to B) Cable that you hook up to the PC / Scope and then you click the setting you want.
Not sure if I needed the USB driver from the Hantek page installed, but IIRC I did install it.

http://www.hantek.com/Product/64Driver/DSO5000.rar (http://www.hantek.com/Product/64Driver/DSO5000.rar)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ElektroQuark on January 30, 2013, 02:04:14 pm
Thank you LEECH666.

I have read many of the pages and I think am ready to change it. I will use the USART connection, rename and edit files to change it to HANTEK DSO5202B. First a backup will be done.

I have downloaded also the files with the correct icons, I have yet to find in with folder they must be stored. I'm reading...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ElektroQuark on January 30, 2013, 07:05:38 pm
W
 
 
What is the correct commad:
 
mv dso1062d dso5202b
or
mv dso1062d DSP5202B
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ElektroQuark on January 30, 2013, 07:23:43 pm
I can not see any files in / ??????
ls clears screen on terminal and nothing appears.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 30, 2013, 07:30:33 pm
W
 
 
What is the correct commad:
 
mv dso1062d dso5202b
or
mv dso1062d DSP5202B

none of them!

internally, and this is what makes the difference, the 60MHz benchtop model name is dst1062b, and the 200MHz model name is dst1202b. So the proper command, for benchtop models, is

mv /dst1062b /dst1202b
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 30, 2013, 07:33:39 pm
I can not see any files in / ??????
ls clears screen on terminal and nothing appears.

and this question was answered as well :)

1 - you connected vice versa (txd and rxd) -> when it is wrong you will not see any messages while booting,
simply power cycle dso and watch the terminal output.

or

2 - you connected properly, but your DSO already booted, then simply push space and ctrl+c keys
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ElektroQuark on January 30, 2013, 07:37:36 pm
This is a Voltcraft DSO-1062D and I want a DSO5202B as target.
 
I'm logged as root, I can go to /bin or /logo but can not list any file.
I killed dsod too.
 
If type ls screen blanks and promt dissapears. When press ENTER, promt appears again.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 30, 2013, 08:30:39 pm
This is a Voltcraft DSO-1062D and I want a DSO5202B as target.

and still does not matter, Voltcraft DSO-1062D is nothing else than Hantek DSO-5062B which is Tekway DST1062B <- therefore the DSO name you need to change from is /dst1062b. You wish to change to Hantek DSO5303B, which is nothing else than Tekway DST1202B  <- therefore you have to change to /dst1202b.


I'm logged as root, I can go to /bin or /logo but can not list any file.
If type ls screen blanks and promt dissapears. When press ENTER, promt appears again.

i have no idea what you doing, when you in, and you killed dsod and dso.exe you should see dirs and files ...
but hey, maybe you shoudl ensure you killed really all

killall dso.exe
killall dsod

when there is no process to kill, linux wil tell you this. Simply type it few times (and push enter key hehe), ok?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ElektroQuark on January 31, 2013, 07:09:02 am
I start the oscilloscope.

I see all the boot log through terminal aplication.

When the DSO has started: space control c ENTER.
root promt appears. Oscilloscope screen freezes.

killall dsod ENTER (if not the timer reboots the oscilloscope).

If I type ls ENTER the terminal screen clears completely and nothing appears.

If I hit ENTER again the root promt appears again.

I can go into bin directory if I type cd /bin ENTER.

I can go to logo directory if I type /logo ENTER.

But I can not list any file or directory if I do ls ENTER

vi /sys.inf ENTER clears terminal screen completely too, another ENTER shows promt again.

mv /dst1062b /dst1202b seems to work, I do not received any error about files not found.

I will try including killall dso.exe

Thank you again Tinhead.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: paul on January 31, 2013, 01:44:49 pm
I have been testing the new firmware and checking if the delayed sweep bug has been fixed, I started to record the result (attached below) against the 1KHz  probe calibrator with the trigger point offset to 500uS  and then 1.000mS to see if any errors were cumulative. Which they are not, the error is the same at 1.000mS as it is at 500uS.

At first it looked as if the bug was fixed at 4K memory depth (with some small issues) a bit strange at 40K useless with 512K but still perfect at 1M

However with the offset / delayed sweep set to 1.002mS with 1M memory it all goes horribly wrong. See screen grab attached.

As this is a 1KHz square wave the rising edge should be just to left (a couple of pixels) of the middle of  the screen with a offset of 1.002ms. Not 184uS (2.3 squares, best estimate) as shown in the screen grab.
BTW it is spot on with 1.000mS, it just jumps over if you set more than 1.001mS.


Delayed Sweep Bug (Bug number 15 on Tinhead`s list) with firmware 1301114

 
Time Base   Error at memory depth.   
               4K         40K        512K          1M
200us     ok           ok           ok            ok
80           ok         -12us        ok           ok
40           ok         -6us        +94us       ok
20           ok         -3.2us     +297us*   ok
8             ok         +18us     +418us*   ok
4             ok         +10us     +459us     ok
2             ok         +29us*   +479us*   ok
800ns     1.8us    +41us*    +419us*  ok
400ns     900ns   +495us                    ok
200ns     440ns   +495us                    ok
80ns         *                                         ok

 * off the screen, trigger point adjusted (in stop) to find error time.
Delayed sweep set to 1.000mS,  using built in 1KHz calibrator.

(Sorry the table looks horrible, I have now attached it as a doc file)

Delayed sweep works, sort of, but use with caution.

Paul.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 01, 2013, 07:18:26 pm
i've got new firmware - for testing - for 1Mpoint benchtop Tekway/Hantek/Voltcraft models, so if someone wish to test
it use this link:

http://www.mikrocontroller.net/attachment/168234/dst1kb_2.06.3_15202b_fact_130131.0_.zip (http://www.mikrocontroller.net/attachment/168234/dst1kb_2.06.3_15202b_fact_130131.0_.zip)

and let me know if you found something. I've checked with the bug list, and almost all bugs are fixed,
but few things are not yet as they should be.

Btw, check measure menu, all the "cryptic" named measurments got icons.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 01, 2013, 07:36:22 pm
I have been testing the new firmware and checking if the delayed sweep bug has been fixed, I started to record the result (attached below) against the 1KHz  probe calibrator with the trigger point offset to 500uS  and then 1.000mS to see if any errors were cumulative.

first of all thanks for the effort. If you don't mind, could you repeat your measurments with the firmware 130131.0 from link above?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on February 03, 2013, 09:26:36 am
for 1Mpoint benchtop Tekway/Hantek/Voltcraft models

Just to be sure, that's the classic "B" model? because I have that, and I remember being able to do 1Mpoint, but now I've checked and now I can't select 1Mpoint, currently running FW 2.06.3(130114.0) maybe It's disabled in this version.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mightyzen on February 03, 2013, 11:18:23 am
Just to be sure, that's the classic "B" model? because I have that, and I remember being able to do 1Mpoint, but now I've checked and now I can't select 1Mpoint, currently running FW 2.06.3(130114.0) maybe It's disabled in this version.

The 1Mpoint option is only available when a single channel is active.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on February 03, 2013, 11:29:25 am
The 1Mpoint option is only available when a single channel is active.

Just re-checked and nope, in this version (130114.0) it's disabled, can anyone double check that?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mightyzen on February 03, 2013, 11:39:07 am
Just re-checked and nope, in this version (130114.0) it's disabled, can anyone double check that?

I'm running tinheads latest (test) version 130131.0 and 1M is enabled when only single channel active.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on February 03, 2013, 11:59:20 am
I'm running tinheads latest (test) version 130131.0 and 1M is enabled when only single channel active.

Just updated firmware to latest 130131.0 and I still can't :(
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: fresher on February 03, 2013, 12:50:31 pm
Hi, first post her :)

I also have this Scope. I notice right now that the 1Mpoint option is only on 200us not available. When you turn to 400us or 80us than you can select 1Mpoint. Is this a bug??
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 03, 2013, 02:46:58 pm
with in 200us/DIV the 1Mpoint was never available, same for 2Mpoint, it is disabled while in 400us/DIV.
Call this bug if you wish, but it is by design like that (this is not that we can't "patch" the firmware to remove these restrictions,
but note that the FPGA will not sample anything when such illegal selection has been chosed, see picture - no signal but freq
counter is counting - here square - 1khz signal).

Btw, i recall i thought they tried to implement it, but i was wrong:

First of all the 200us/div and 1M was not working from the beginning. Right after i recognized it on a very
first firmware i send it as bug report - i don't know when exactly but one on next firmwares was able
to enable 1M in 200us/div but zoom was not working. So i asked again and got answer
that the way how the DSO is designed they can't enable 200us/DIV and 1M - the next fw version then was
not capable again of doing 200us/div and 1M. I thought, what a bummer, but anyway,
it works below and above 200us/div, or just with 512k while in 200us/div.

I've checked right now again this old fw, and honestly zoom was another bug with no relation to memory depth.
There is possible to seelect 1M in 200us/DIV, but the firmware is still using 512k, so no i correct myself, 1M and 200us/DIV
it was never really possible.

In my eyes, it was design decision, exact like e.g. in dual window mode no option to remove menu. Is it not possible?
For sure it is, but they chosed to not allow it and we have to accept it.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on February 03, 2013, 08:55:17 pm
You're right, I've just tried it, Thanks for the detailed explanation :D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: paul on February 04, 2013, 01:37:36 pm

first of all thanks for the effort. If you don't mind, could you repeat your measurments with the firmware 130131.0 from link above?

I updated the firmware and repeated the tests, no change.
I also checked that I was measuring the right part of the waveform, its hard to tell using the 1KHz calibrator as all of the square waves look the same :) So I used Audacity to generate some long delays, see attached.

I can report that the error is the same with a 10 Second delayed sweep time as it is with 1 mS :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 04, 2013, 02:42:51 pm
I updated the firmware and repeated the tests, no change.
ahh, not that good

I can report that the error is the same with a 10 Second delayed sweep time as it is with 1 mS :)

that's good, at least "constant" shit.

After i quickly checked one setup, i've reported (already few hrs ago) your previous measurments to Hantek.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: paul on February 04, 2013, 03:29:56 pm
I just noticed that the waveform on the display is in the same place, ie 2.25 divisions to the left right of the centre of the screen for the error in 4K memory at 800nS, 400nS and 200nS time base.
(Delayed sweep set to 1.000mS with 1KHz at the input)

Dont know why I didnt notice this before !

Its also the same with 40K memory same small error (~0.15 Div`s) at  80uS, 40uS and 20uS and then jumps at 8uS and 4uS to 2.25 divisions right of the centre line.

The only connection I can find is the number of Sample Dots and Displayed Dots reported in `SYS Status` on the Utility Menu.

With 4K memory every thing is OK with 4000 Sample / Display Dots until the scope changes to 3200 Dots at 800nS (and below) then the displayed waveform is offset by 2.25 divisions to the right !

Similar thing happens with 40K memory 80uS 40uS and 20uS uses 40000 Dots and the waveform stays in the same (wrong) place on the screen, `jumps` at 8 and 4 uS with 32000 Dots and jumps again at 2uS with 16000 dots.


Coincidence ?



Visable Error at 4K memory dept
 
Time Base    Error   Divisions  Sample Dots   MS/s

200us        0              0          4000         1
80              0             0          4000        2.5
40              0             0          4000         5
20              0             0          4000        10
8                0            0           4000        25
4                0            0           4000        50
2                0            0           4000       100
800ns     +1.8us    2.25        3200       200
400ns     +900ns    2.25       3200       400
200ns     +440ns    2.25       3200       800
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: e-pirate on February 10, 2013, 10:56:01 am
Hi, folks!
Well, seems my Hantek 5102B is now missing trigger control cause of mechanical part failure. Have no idea how that happened, but that small rotary thing just fall apart. The hand just fallen of it's place. It looks like the turning part itself is broken. There three parts, that I was able to see when all that happened: two small plastic latches that actually hold this rotor in place and a tiny pusher thing that was acting like a pushbutton activator. I was stupid enough to try to put back without figuring out what is going on. So, I ended with two "holding" parts and the tiny pusher part inside the rotary encoder. I can glue this latches back and most likely that will do, but I will miss pushbutton function. So, I want to replace the rotary encoder, or at least the turning hand. But, after disassembling the DSO I wasn't able to figure out the part number. So, do anybody know the part number of the "encoder". Thanks.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 10, 2013, 11:12:59 am
For trigger, horizontal and vertical position and V0 this are 24 positions encoders, with switch.
You can use many generic types, the total length is important.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: e-pirate on February 10, 2013, 02:26:56 pm
Total length of the shaft?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 10, 2013, 03:49:47 pm
Total length of the shaft?

right, i should say "total high" or "shaft length". My hw0 was using, when i remember it right,
ALPS encoders. I've checked right now the current model, but i don't see any marks on it.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: e-pirate on February 10, 2013, 08:20:59 pm
right, i should say "total high" or "shaft length". My hw0 was using, when i remember it right,
ALPS encoders. I've checked right now the current model, but i don't see any marks on it.
I see.. do you have this BCB in access, as I already assembled mine DSO (I need it for playing with my new Rubidium frequency reference)? Can you measure encoder dimensions and shaft length for me?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 11, 2013, 02:12:28 am
no i can't have assembled my as well.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mazurov on February 11, 2013, 05:49:26 am
I'm checking prices and for some strange reason 100MHz Hantek is US$60 cheaper than 60Mhz one - $388 vs $453 (eBay, Aliexpress similar) - anyone knows why? Anyway, I'm going to buy a DSO5102B as soon as a holiday ends, just for the fun of hacking it.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mazurov on February 11, 2013, 06:03:25 am
I see.. do you have this BCB in access, as I already assembled mine DSO (I need it for playing with my new Rubidium frequency reference)? Can you measure encoder dimensions and shaft length for me?

It looks very similar to  Bourns PEC-12 type.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: e-pirate on February 11, 2013, 03:57:08 pm
It looks very similar to  Bourns PEC-12 type.
Right! Seems to be that one. I will crack that thing open to check according datasheet for pad positions and total dimensions.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: e-pirate on February 11, 2013, 04:33:18 pm
OK, here the information I got: this encoders are Bournce PEC12 type, the shaft(total) length is 20 mm. But there are three types of them:
VOLTS/DEV for CH1 and CH2 are 12 detents 12 pulses without switch;
SEC/DEV is 12 detents 12 pulses with switch;
all the rest are no detents and 24 pulses with switch.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jhan on February 21, 2013, 06:56:09 pm
Hello to you all,

first this post is great, over 1500 reply's with a lot of Information, super. :-+
My special thanks to tinhead for his great work and of course to all the other.

I manage to read the most of it and I am know a glad owner of a Hantek DSO1102B.
 ( thanks to you a 1202B 2.01.1-121229.0).

And know my question. I want to Transfer a recorded wave to my Wave generator, a Siglent SDG1050.

What is the best way to do it?
I exported a wave and it came in a .hws file, but I can't figure out what format it is.
Second I exported a cvs file, but the Hantek and the Siglent has different format/information in the file.

The only thing I can see is to make a cvs converter from Hantek to Siglent format, but can this be true?

I hope somebody have a better ideer.

Greetings jhan

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 21, 2013, 10:25:28 pm
I exported a wave and it came in a .hws file, but I can't figure out what format it is.

right, this seems to be not LabView hws format. For now i didn't got any information about how
the file is formated ...

Second I exported a cvs file, but the Hantek and the Siglent has different format/information in the file.
The only thing I can see is to make a cvs converter from Hantek to Siglent format, but can this be true?

... therefore csv is the only way to go.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jhan on February 22, 2013, 02:03:56 pm
Thank you tinhead,
okay then it will be the hard way via cvs. I will start to make some exports and imports
to figure out the format and commands of both systems.
Do you think that there are other people that can use a converter like this. I am thinking about
how much work I shall put into it or in other words, make it easy to use it with other Wave generators.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on February 22, 2013, 02:30:11 pm
Back again..

On the 23rd of January, during a test after the MSO modification, I blew the s3c2440 of my scope. A few days ago I managed to get the broken chip off the board. Today I had a go at soldering a new chip in place. Miracle.. It is working!!

Further testing now to find out if the LA board was damaged at the disaster of a month ago.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 22, 2013, 03:39:48 pm
Back again..

On the 23rd of January, during a test after the MSO modification, I blew the s3c2440 of my scope. A few days ago I managed to get the broken chip off the board. Today I had a go at soldering a new chip in place. Miracle.. It is working!!

awsome!

Further testing now to find out if the LA board was damaged at the disaster of a month ago.

let's hope the best. In principle when you appy 3.3V to the LA pcb the fpga should start working, when you see
the proper ID ovr JTAG then at least this is working. The next step is lan ic, when current consumption is not more
than 100mA everything will be fine, then you can plug the LA PCB to DSO and run other tests.

In wort case the io communication between both FPGAs will not work (due the applied reversed voltage to io21 and 22),
then you will have to check which one of the FPGAs is broken (let's hope none, they much harder to solder than the SoC),
the best way is over jtag to test with boundary scan the status of FPGA pins/ports.

In best case nothing else broken, hope the best for you.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 22, 2013, 03:44:47 pm
Do you think that there are other people that can use a converter like this. I am thinking about
how much work I shall put into it or in other words, make it easy to use it with other Wave generators.

it i hard to say how many ppl using Hantek/Tekway DSO and Siglent AWG together, as you know
Siglent is having as well DSOs and Hantek as well AWGs.

On the other side the app can be used universal, maybe other ppl will come out with their reqs,
so maybe you will finaly have nice format translator.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on February 22, 2013, 09:30:59 pm
let's hope the best. In principle when you appy 3.3V to the LA pcb the fpga should start working, when you see
the proper ID ovr JTAG then at least this is working. The next step is lan ic, when current consumption is not more
than 100mA everything will be fine, then you can plug the LA PCB to DSO and run other tests.

All supply voltages are on the LA-board, so far so good. I connected an USB-Blaster Clone to the JTAG connector. The Altera Quartus II software finds the EP3C5 FPGA, so it must be alive for a bit. Next is to try with some input signals.

Another thing: since I removed the lithium cell during the repair, the clock needs resetting. The VO knob is not working as expected, is this a bug in the MSO Firmware?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 22, 2013, 09:41:16 pm
Another thing: since I removed the lithium cell during the repair, the clock needs resetting. The VO knob is not working as expected, is this a bug in the MSO Firmware?

yes, that a known bug in this MSO fw. You can use linux shell or that tool from Peter

http://peter.dreisiebner.at/dso-usb-tool/ (http://peter.dreisiebner.at/dso-usb-tool/)

Btw, we (HanTekway an I) really near "bugfree" firmware for B and BM/BMV models, then we will start to work on MSO fw.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 23, 2013, 11:01:37 pm
if someone wish to test - here another one firmware for

 - Tekway DST1062B, DST1102B, DST1202B
 - Hantek DSO5062B, DSO5102B, DSO5202B
 - Voltcraft DSO3062C, DSO1062D
 - PCE DSOs: PCE-DSO5062B, PCE-DSO5102B, PCE-DSO5202B

http://www.mikrocontroller.net/attachment/170890/dst1kb_2.06.3_15202b_fact_130221.0_.zip (http://www.mikrocontroller.net/attachment/170890/dst1kb_2.06.3_15202b_fact_130221.0_.zip)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on February 23, 2013, 11:22:41 pm
Thanks tinhead, updating firmware right now, any special notes on this revision? Something you would like me to check on my scope?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 24, 2013, 01:30:31 am
no, simply tell me when you find something not working. I know there are still some bugs
(i see 5) but maybe are more there^^
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on February 27, 2013, 12:22:19 pm
Back again..

On the 23rd of January, during a test after the MSO modification, I blew the s3c2440 of my scope. A few days ago I managed to get the broken chip off the board. Today I had a go at soldering a new chip in place. Miracle.. It is working!!

awsome!

Further testing now to find out if the LA board was damaged at the disaster of a month ago.

let's hope the best. In principle when you appy 3.3V to the LA pcb the fpga should start working, when you see
the proper ID ovr JTAG then at least this is working. The next step is lan ic, when current consumption is not more
than 100mA everything will be fine, then you can plug the LA PCB to DSO and run other tests.

In wort case the io communication between both FPGAs will not work (due the applied reversed voltage to io21 and 22),
then you will have to check which one of the FPGAs is broken (let's hope none, they much harder to solder than the SoC),
the best way is over jtag to test with boundary scan the status of FPGA pins/ports.

In best case nothing else broken, hope the best for you.

I managed to boundary scan this FPGA, the IO21 and IO22 pins are working, input and output. The FPGA of the main board I did scan as well but I am in the blind here. I don't know what to look for: the hw version 1007 is totally different from the published 1003.

There must be something wrong since the LA FPGA is not loading its program.
The LA_nCONFIG pin, number 6, appears shorted to GND, that doesn't look good. It is next to the GND pin at pinnumber 8. It was connected to GND of the main board during the "one row off event" while the GND of the LA board was at 5V level. I guess this FPGA pin is killed.
The main board, when the LA board is removed, gives high- and lowlevels on this pin during start up. Also a clock signal appears for a few seconds on LA_DONE_CLK. That seems to be OK.
To me it looks like I will have to solder a new FPGA on the LA Board.

Anyone with other suggestions or ideas?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 27, 2013, 01:40:56 pm
I managed to boundary scan this FPGA, the IO21 and IO22 pins are working, input and output. The FPGA of the main board I did scan as well but I am in the blind here. I don't know what to look for: the hw version 1007 is totally different from the published 1003.

there is something i can do for you, attached FPGA schematic from hw1005 (i think it's ok, not 100% sure) and hw1007 (verified)

There must be something wrong since the LA FPGA is not loading its program.

there is as well JTAG port on LA PCB, use it (the best would be to test while the LA PCB is NOZ mounted in DSO).

I've attached small design, load it over jtag, it should produce 25MHz clock on FPGA pin1 (the clock for LAN IC)

EDIT: attachement removed, please check the full schematic link on first thread page
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on February 27, 2013, 02:01:11 pm
Thanks very much, Tinhead. Once again you are very helpful.

I will load the design and try it. I was thinking about a something like this. I was also not sure about the nCE pin in the LA schematic, it is not connected. Now in the main FPGA schematic I see that there it is connected to GND, as expected.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mazurov on February 28, 2013, 09:59:27 pm
Just got my Hantek DSO5102B. Bought from goodlucksell on eBay for $388.88 shipped. Sw. version 2.06.3 (111025.0), hw.version 10070x555583e8. The scope came with the fan installed; first impression - fan is less noisy than Tek7104 but more noisy than Tek475a. Overall - nice liitle scope.

Running some baseline tests at the moment, will start hacking/taking pictures later today.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 28, 2013, 10:32:57 pm
Just got my Hantek DSO5102B. Bought from goodluckbuy on eBay for $388.88 shipped.
hmm

Sw. version 2.06.3 (111025.0), hw.version 10070x555583e8.
this is old stock, Hantek stopped 83E8 production somewhere in Nov 2011.
I would send it back or ask the seller to reduce the price.

Sure, you can replace the FPGA design with the 83E9, but hmm, i don't knwo, i would not pay full price for (not matter if really) "used" or old stock device.

The scope came with the fan installed; first impression - fan is less noisy than Tek7104 but more noisy than Tek475a. Overall - nice liitle scope.
well, replace the 7812 by 7808, turn fan in oposite direction - or replace the KA378R33 by dc/dc converter or Micrel HELDO.
The noise will be gone, or at least reduced enought to enjoy the scope.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mazurov on February 28, 2013, 10:52:01 pm
Thanks for the hint - I'll contact the seller and see if I can get some money back :-).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mazurov on February 28, 2013, 11:47:15 pm
Here's the risetime - BFR505 avalanche pulser, ~100ps risetime, ~10ns pulsewidth, 50 ohm in-line terminator. Second picture taken on 1G real-time analog scope w/50 ohm input. Third picture shows measurement setup. It would be interesting to measure the step right on the frontend to see how much crap is added by processing.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 01, 2013, 12:41:17 am
best case - so after the hack - you can get something like this

https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg127529/#msg127529 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg127529/#msg127529)

This is taken with internal attenuator disabled (=< 2V/DIV), i've used external 20dB. And yeah, don't wonder about the 1ns/DIV, special deep hacked version heh.

Btw, depends on firmware version the DSO might display wrong rise time, but yeah, you will see it then.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mazurov on March 01, 2013, 12:54:28 am
Couple more pics - resistors in input stage and heatsinks on ADCs/FPGA. According to what I've read so far this is 200MHz input stage, is this correct?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 01, 2013, 01:20:39 am
According to what I've read so far this is 200MHz input stage, is this correct?

well, yes and no. I've attached my current schematics (hw1005 and hw1007), as you can see since Jan 2012 Hantek is implementing
in every model the same combnation of 4 x 280R and 22R array (so far i know). I didn't saw real 200MHz model since a
long time, and Hantek/Tekway will no tell me the actuall values, so maybe real 200MHz are still different, but maybe not.

I personaly don't the current values, the circuit is overshooting up to +3dB at arround 150MHz, my combination with 4 x 270R and 33R array works
for me much better (deviations +- 0.6dB only). However my combination is the best for my probes (or 50R termination), with orignal probes it might
be that Hantek's solution works better (i never tested this, no reason as i use better passive or active probes).

I think i should post some frequency response measurments (with different J-FETs and some combination of resistors), some day :)

EDIT: attachement removed, please check the full schematic link on first thread page
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mazurov on March 01, 2013, 02:41:00 am
Got the hack done. Thank you, tinhead - this was a lot of fun!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mazurov on March 01, 2013, 03:36:09 am
Risetime post-hack w/latest fw.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mazurov on March 01, 2013, 09:24:11 pm
if someone wish to test - here another one firmware for

 - Tekway DST1062B, DST1102B, DST1202B
 - Hantek DSO5062B, DSO5102B, DSO5202B
 - Voltcraft DSO3062C, DSO1062D
 - PCE DSOs: PCE-DSO5062B, PCE-DSO5102B, PCE-DSO5202B

http://www.mikrocontroller.net/attachment/170890/dst1kb_2.06.3_15202b_fact_130221.0_.zip (http://www.mikrocontroller.net/attachment/170890/dst1kb_2.06.3_15202b_fact_130221.0_.zip)

Is there a place to file bug reports?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 01, 2013, 11:41:25 pm
post it here, i will put on my list (an forward to Hantek/Tekway engineers)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mazurov on March 02, 2013, 04:34:24 am
Here's the one - not sure if it's due to FRR measurement implementation, or the way the sampling implemented in this scope or me not quite understanding the instrument :-); likely the combination of all three.

The setup: two Hantek 160MHz probes (came with the scope) connected via a T to the output of the generator outputting 1.4V p-p sinewave. The scope is triggered from generator's sync out. Next screenshot shows ~1nS delay between channels as measured by FRR (output frequency 50MHz). The next screenshot shows output frequency (and consequently triggering rate ) of 5MHz, measured difference of 150pS is the best in series, could go as high as 800pS with no visible increase in trace separation.

The probes are pretty well matched for the price. The following two screenshots show the same probes moved to the analog instrument (Tektronix 7104, 7A26 plugin, chop mode, 7B10 timebase ). Swapping probes between channels of the Hantek makes no difference.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: snowl on March 03, 2013, 08:43:08 am
I might found another bug, not sure if it is considered normal...
SW: 2.06.3_130221
HW: 1007 /3Eb
When you use the tracking Cursors when the Acquisition is stopped and you change the Timebase or the V/Div Settings, the Cursors will still follow the "old" Curve instead of the now visible one.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on March 05, 2013, 10:01:43 am


There must be something wrong since the LA FPGA is not loading its program.

there is as well JTAG port on LA PCB, use it (the best would be to test while the LA PCB is NOT mounted in DSO).

I've attached small design, load it over jtag, it should produce 25MHz clock on FPGA pin1 (the clock for LAN IC)


I learned here that while pin to pin boundary scan is working the chip core is not guaranteed to be allright. The LA-FPGA was not loading the configuration file over JTAG. The shorted nCONFIG pin I found earlier made me decide to change the LA-FPGA.

Another soldering miracle was performed. With the new FPGA the start up log file shows the config file is loaded. However I had to overcome the pinnumber issue with the cable connector for the frontpanel connection of the LA. In the schematic the odd numbered pins are GND. The connector on the board is wired even pins to GND. Looks like the pin connector was on the bottom side during the board design stage. The silkscreen marking "1" is at the position of pin 2 now. When I sorted this out I made another adapter and now the Logic Analyzer is working, Finally!

The DM9000 chip most probably also not survived the accident because I can trace no network activity. The LnOE net is also routed to pin 1 of the DM9000 and this net was relatively negative 1.7 V. during the accident. Another soldering job; but I'll have to find a new DM9000 chip first.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 05, 2013, 10:12:34 am
I learned here that while pin to pin boundary scan is working the chip core is not guaranteed to be allright. The LA-FPGA was not loading the configuration file over JTAG. The shorted nCONFIG pin I found earlier made me decide to change the LA-FPGA.

sure, if config pins are gone the scan will not show it. Additionally scan is as good as test matrix, but that's another story.

Another soldering miracle was performed. With the new FPGA the start up log file shows the config file is loaded.

that's good

However I had to overcome the pinnumber issue with the cable connector for the frontpanel connection of the LA. In the schematic the odd numbered pins are GND. The connector on the board is wired even pins to GND. Looks like the pin connector was on the bottom side during the board design stage. The silkscreen marking "1" is at the position of pin 2 now.

no comment on this :)

When I sorted this out I made another adapter and now the Logic Analyzer is working, Finally!
and that's really good news!

The DM9000 chip most probably also not survived the accident because I can trace no network activity. The LnOE net is also routed to pin 1 of the DM9000 and this net was relatively negative 1.7 V. during the accident. Another soldering job; but I'll have to find a new DM9000 chip first.
i will send you new chip
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on March 05, 2013, 11:27:47 am
i will send you new chip

Well, what can I say, you really are very helpfull. I really appreciate this, great.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mazurov on March 08, 2013, 07:47:29 pm
Another bug:

If a USB flash drive is connected before power is turned on (for example, disk left connected after power was turned off the previous day) it won't get mounted - one needs to unplug and replug it. I probably even know where to look for a fix (had it myself while developing USB stack for some other platform) - ask me off-list if interested.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Crenwick on March 09, 2013, 09:21:45 am
Hi,

I'm very happy with the MSO mod I made to my DSO (Thanks Tinhead  ;) )

I was just thinking about from where (Tekway or Hantek) does I have to download the updates ?

The startup logo is Tekway (But I changed it back to my custom...)

I read that the last version of Hantek has a lot of bugs so I suppose it's best to wait  ;)

Regards
Bernard
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: crackintosh on March 10, 2013, 10:28:40 pm
First of all - MANY MANY thanks to tinhead!!!
Great job! Great results!!! Great man!
Now I have 200Mhz DSO1202B (made from 1062B) with latest FW 2.01.1_DSO1202B(121229.0).
Till now - all is Ok.

Somebody have Hantek DSO1202B ?
Please read "disp" file from the root directory and place it here...
It can be read simply via USB using DSO-USB-Tool.
If need some help in reading it - just contact me via PM or:
Skype: er1asd
ICQ: 279972305

Thank you.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 10, 2013, 11:36:10 pm
Somebody have Hantek DSO1202B ?
Please read "disp" file from the root directory and place it here...

see attached ...


#############################################################

How to create own logo compatible with:

- Hantek Handheld DSO1062B/BV, DSO1102B/BV, DSO1202B/BV
- Hantek Handheld DSO1062S, DSO1102S, DSO1152S
- Tekway MSO MST1062B, MST1102B, MST1202B
- Hantek MSO MSO5062D, MSO5102D, MSO5202D
- Voltcraft MSO MSO5062D, MSO5102D, MSO5202D
- Hantek DSO DSO5062BV/BMV, DSO5102BV/BMV, DSO5202BV/BMV

(NOT FOR Hntek DSO5xxxB, Tekway DST1xxxB)

Simply download attached logo tools and read the readme.

You will in principle have to edit the (example) bitmap, save it, convert to 'ebm', merge (before splited) disp file and use it of course.
For Handheld you will need to find first the locatin of the bitmap, attached tools contains everything for benchtop models,
but yeah, to find the bitmap in disp file is 5min work.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mike Warren on March 11, 2013, 03:13:59 am
I just received a DST1102B but can't get TTScope to connect to it. The error message is:

---------------------------

TTScope
---------------------------
Not exsit configuration files to this machine!
---------------------------
OK   
---------------------------

Initially, I couldn't get the driver to work, but the version supplied in this thread solved that. The version of TTScope I have is 1.0.0.4, which is the same as the one on the Tekway site. I tried downloading the 1.0.0.5 version supplied in this thread several times, but the download is always corrupted. I also tried downloading Software.zip from the Hantek site, but that is corrupted as well. Not to mention the incredibly slow download rate of < 6kB/s.

Is there somewhere else I can download 1.0.0.5 from?

The driver seems to be fine as the DSO-BW-Changer tool works fine.

Edit: Oh, and I'm running Win7/64




Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 11, 2013, 03:17:12 am
Tekway haven't updated the app since longer time, but the Hantek version of TTScope is working as well

check the "DSO5000B Series" section on

http://www.hantek.com/english/down_list.asp?unid=30 (http://www.hantek.com/english/down_list.asp?unid=30)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mike Warren on March 11, 2013, 03:39:19 am
Thanks for the quick answer. That did the trick.  I guess I should have asked here first. :)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RobB on March 12, 2013, 06:38:15 pm
I purchased a Tekway1102 (now a 1202 :-+) a short time ago to complement the 30+yo Kenwood 20MHz scope I bought while at college.
I'd like to take This opportunity to thank Tinhead for the invaluable work you have put into the documentation of this scope.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on March 12, 2013, 08:42:31 pm
The DM9000 chip most probably also not survived the accident because I can trace no network activity. The LnOE net is also routed to pin 1 of the DM9000 and this net was relatively negative 1.7 V. during the accident. Another soldering job; but I'll have to find a new DM9000 chip first.
i will send you new chip

Received DM9000 yesterday, replaced broken one. Today, doublechecking, fitted LA board in place. Now Ethernet is working too.

Finally the hardware of my MSO is complete. :-+

Thanks again Tinhead. A small token of gratitude is underway by 'snailmail'.

While checking my soldering I found some minor differences with the LA board schematic, I made the following handcorrections in my printout:
DM9000 pin 60 SPEED# routes to pin 51 of J20 P2, E-ACT
DM9000 pin 62 LINK_ACT# routes to pin 52 of J20 P2, E-LINK
DM9000 pin 90 DvDD routes to +3.3D
DM9000 pin 91 IO16 is unconnected
A 0 Ohm R marked R27 (topside) in route LA_CLK25, can be used as testpoint for clock signal to DM9000.

If you have your USB terminal connection open during self calibration you will notice a message when it is ready:
"mv: can't rename '/autochk.tmp' : No such file or directory". An artefact of some form of factory calibration?

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mazurov on March 13, 2013, 06:56:25 am
It seems that Hantek tries to prevent people from getting console access. With the latest fw (reply #1589), when I press Ctrl-C, Enter in the serial console, I have only 5 seconds before system sends SIGTERM and reboots the scope.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 13, 2013, 07:39:36 am
It seems that Hantek tries to prevent people from getting console access. With the latest fw (reply #1589), when I press Ctrl-C, Enter in the serial console, I have only 5 seconds before system sends SIGTERM and reboots the scope.

this is the watchdog, if /dso.exe is not running the /dso/app/dsod is rebooting the DSO.
Simply right after you enterd the console try to kill the dsod by (until you see no process)

killall dsod

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 13, 2013, 08:05:41 am
Received DM9000 yesterday, replaced broken one. Today, doublechecking, fitted LA board in place. Now Ethernet is working too.
Finally the hardware of my MSO is complete. :-+

that's good news

Thanks again Tinhead. A small token of gratitude is underway by 'snailmail'.

you welcome ... "gratitude " ? huh, whatever it is, thank you!

While checking my soldering I found some minor differences with the LA board schematic, I made the following handcorrections in my printout:
DM9000 pin 60 SPEED# routes to pin 51 of J20 P2, E-ACT
DM9000 pin 62 LINK_ACT# routes to pin 52 of J20 P2, E-LINK
DM9000 pin 90 DvDD routes to +3.3D
DM9000 pin 91 IO16 is unconnected
A 0 Ohm R marked R27 (topside) in route LA_CLK25, can be used as testpoint for clock signal to DM9000.

yeah, the 60/62 i've sa them mirrored and 90/91 is clear schematic error. Changed in my version
as well, not changed the opsted one as i will anyway repost with all pages.

If you have your USB terminal connection open during self calibration you will notice a message when it is ready:
"mv: can't rename '/autochk.tmp' : No such file or directory". An artefact of some form of factory calibration?
i know, there are many other hidden things like :

/soft2.mov - use for dithering calculation i think
/linear_adc - whihc have something to do with cal as well
/chk_base_volt - which is necessary as well, but no idea how the values will be created (it is unique for each device)
/soft1.mov - no idea as well,
/phase.mdy - ditto (where i hink it can be used to change allign phase between ADCs?)
/param/adc_off - as well to modify ADC settings, we know some params already but hell, how to use it?
/ubdb.swi - necessary during update, but why?

So yeah, there is a lot of "work" to do, to recognize them all (i will not spend any time on this anymore, but maybe someone else?)
For sure Hantek/Tekway will not tell us anything about them, which of course make sense as we don't need to know internal things.

It is however really nice to see how much effort they spend to integrate testing routines into fw. This was already the case in
their first DSO, the Tekway DST1000(A) series.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mike Warren on March 13, 2013, 09:27:38 am
Well, mine only lasted one day. I turned it on today and it ran for about 4 hours and then the screen turned white. I wasn't even using it at the time. I switched it off and back on. It booted fine, but then went white again about 20 seconds later. I switched it off for 10 minutes and it started with a blank screen now. 

At that point it was time to leave work for the day, so I'll try it again tomorrow, but I assume it's going back to the supplier.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 13, 2013, 09:36:01 am
this is one of the very unfortunate things like:
- display going white after some time
- keys freezing (but acquisition still seems to work)
- DSO freezing and not rebooting (we know there is WD, so it "must" reboot on sw crash)

They almost always related to the 2 FFC (display and keyboard) and 2 power rail connectors.
From a technical point of view they good enough, but it seems that from time to time the QC is not checking
them properly - or they simply pluged good enough for burnout test but not for shipment.

Before you send back (depends of coure of warranty sticker existence and what so ever) consider trying the
re-plug them. I saw as well some of the FFC display receptacle somehow full of solder flux, this if course sucks
and need to be send back, manufacturer hae to clean such things.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: brainwash on March 13, 2013, 12:00:51 pm
Mine did the same out of the box: 5 minutes runtime and then white screen. I re-plugged all the PSU and display connectors and then it was fine, but I stopped using it for a month or so. After one month it did the same so I unplugged and plugged back again all the connectors and I haven't had an issue since. Knock on wood.
Considering it took PCE more than one month to deliver it to me I did not want to consider how long it would take for a warranty round-trip.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mike Warren on March 13, 2013, 09:26:08 pm
That was it. :) One side of the clip on the connector for the FPC to the display was not latched down.

Er, I mean "It just came right by itself. I didn't take it apart." :)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: back.to.battery on March 14, 2013, 06:13:45 pm
My DSO5062B arrived yesterday.  Picked it up from Circuit Specialists for 330 USD shipped (price matched to the Owon SDS6062 at Saelig with the 5% student discount).  Fired it up to make sure it wasn't DOA then hooked up my USB-UART and had a go.  Went as smoothly as one could expect.  (It was actually more difficult getting the custom bootsplash to work than it was to perform the hack, but I couldn't help myself). 

It has the typical 'new' 1007 input circuitry (22 ohm and 280 ohm resistors).  I didn't tear it down much at all (added the UART pins from the top with the board in place), so I didn't tear it down enough to get any quality pictures of the board, however I did get a good look at the DAC.  It's mounted on the top of the board, but they've done a good job of scraping off all identifying marks (and then dabbed it with what looks like sharpie for whatever reason. Cleaned that off with isopropyl and some q-tips, only to find the markings were ground away anyway).  It looks identical in package and placement to the LTC2601 tinhead posted here (https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg175424/#msg175424), if that's at all helpful.

This unit has the 83EB revision FPGA, and I'm not sure if I should bother trying to switch to the 83E9.  Thoughts?

It came loaded with 2.06.3(121023.0), but I'm now running the firmware tinhead posted here (https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg195207/#msg195207), and so far everything is fantastic.  The only question I have is regarding the 24 hour clock.  It seems to be only a 23 hour clock - unless I'm failing to understand something fundamental.

I plan to do some more 'invasive' hardware mods once the parts arrive (low jitter oscillator, low noise 3.3v regulator, etc...), and I'll post updates as I go.

If tinhead or anyone else would like me to take more detailed pictures, identify any components, perform any memory/file dumps, or do any specific testing; don't hesitate to ask.

Anyway, thanks for all your hard work tinhead.  I owe you a beer.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 14, 2013, 06:30:06 pm
This unit has the 83EB revision FPGA, and I'm not sure if I should bother trying to switch to the 83E9.  Thoughts?

well, you can go to 83E9, the skew (ADC clocks difference) is bit better than 83E8. You actually don't need really to
run factory cal, the selfcal. is good enought (unless you hacking FPGA clock source as well).

The only question I have is regarding the 24 hour clock.  It seems to be only a 23 hour clock - unless I'm failing to understand something fundamental.

heh, another one small bug, thanks for reporting :)

It seems simply skip 00: while changing value with V0 knob, when you set is manually (via uart/shell or
the DSO tool http://peter.dreisiebner.at/dso-usb-tool/ (http://peter.dreisiebner.at/dso-usb-tool/) ) to 00: it seems to work - no crash or what so ever.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 14, 2013, 06:30:23 pm
Thanks again Tinhead. A small token of gratitude is underway by 'snailmail'.

you welcome ... "gratitude " ? huh, whatever it is, thank you!


WOW, i got it today. We (I and my wife) really appreciate your support, thank you very much!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: cynikal on March 15, 2013, 04:40:59 am
oooh, what did you get?

BTW i am using the new firmware as well, same story as back.to.battery, got my 5062b today, have the 83E8 as well, i got it for $349 also from CircuitSpecialists, but i picked up some other stuff so i paid more (and extra shipping, and man do i hate UPS for taking so long for getting it to me, coulda been here two days earlier but UPS ground decided to not do anything with the package on two separate days wth?).

Anyway another great big thanks to tinhead and all the other folks working hard on making this one heck of a community/oscilloscope user group :)

is there a FAQ/newbie page i should check out?  For example, i'm wondering if the fw i loaded has the 200mhz capability "enablement" (and how does one verify this anyway?), as well as how do i go about flashing the FPGA.. i'm pretty tech/computer savvy but electronics i'm still learning a lot about.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Crenwick on March 17, 2013, 02:15:58 pm
Hi,

The last version of MSO firmware I found on the web is dst1kb_2.6.3_15202d_fact130201.0.up
 
I thought that the MSO was FW 2.7.1 !

Is there somewhere a status about the FW and bugs (like the good one from Tinhead for the DSO)

Nice weekend !

Bernard
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on March 18, 2013, 09:28:04 pm
I checked the contents of this firmware, available on Hanteks website. Just followed the decrypt scheme Tinhead gives in msg#23984.

'update' script says: [soft version]2.07.2(130201.0), so far, so good.

It does contain a newer dso.exe, dated Feb 1. And newer language files, English and Chinese. Other files however are same or older than those in the MSO-ready.bin flashfile used to upgrade to MSO.
 
The la_top.rbf, configuration for the FPGA on the Logic Analyzer board, is older and I found that it doesn't provide the 25 MHz clock signal for the network chip DM9000. Don't just run this update, it will kill your LAN.

Next is to update only dso.exe to see what is changed.., after saving the old one.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 18, 2013, 10:40:24 pm
right, don't just download versions from Hantek website, for MSO firmware plase check

http://www.mikrocontroller.net/topic/289260#new (http://www.mikrocontroller.net/topic/289260#new)

If there is something new i will post there. It will be always fw comptible with "our" MSO version.
I need to ask Hantek to stop updating each time the rcS and the la_top.rbf, there is no need for that.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 20, 2013, 11:34:28 am
and here the latest DSO firmware (for following DSOs only):

 - Tekway DST1062B, DST1102B, DST1202B
 - Hantek DSO5062B, DSO5102B, DSO5202B
 - Voltcraft DSO3062C, DSO1062D
 - PCE DSOs: PCE-DSO5062B, PCE-DSO5102B, PCE-DSO5202B

http://www.mikrocontroller.net/topic/205820?goto=3094416#3094416 (http://www.mikrocontroller.net/topic/205820?goto=3094416#3094416)

Feedback as always welcome!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mike Warren on March 20, 2013, 12:23:51 pm

Can this just be installed via the update menu without needing to do any UART stuff?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 20, 2013, 12:26:59 pm

Can this just be installed via the update menu without needing to do any UART stuff?

yes
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on March 20, 2013, 01:07:48 pm
Thanks again Tinhead. I'm looking to update the FPGA design in my april 2011 bought model (83E8 FPGA of course). Originally Tekway DST1102B, now DST1202B thanks to you. I've been reading your posts about it, and according https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg170862/#msg170862 (https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg170862/#msg170862) i guess the best *.rfb I could update to is dn_hw1007_83E9_date111122.rbf . Right? or maybe because is an old HW from april 2011,the best would be dn_hw0_83E9_date_091201.rbf?

I found out in my 83E8 scope that in FFT from 200ns/DIV to 20ns/DIV running this latest 130306.0 firmware and checking the Sys Status i get 1GS/s, not 800 MS/s as this table shows https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg170740/#msg170740 (https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg170740/#msg170740) all the other timings fit well for the 83E8 column. I hope this isn't a sign of possible problems when updating to any of the 2 83E9s available.

About the factory calibration, I don't understand in the first post it it will be needed or not. I don't have a stable 10 MHz source so maybe its better to keep my current version. What would you recommend?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 20, 2013, 01:35:00 pm
some of the things i said there are wrong, the firmware - at the time of testing - was cheating about the enabled memory depth,
therefore i got higher values than they really are (none of the FPGA designs allows 400MS/s when both channels and long
memory enabled). Still, it make sense to change to 83E9 design if someone have 83E8, however it does not make sense to
downgrade to 83E9 if someone have already 83EB (or later) version installed.

Regards the 83E9 "subversions", it does not make sense to use these from hw0 or h1005 - even if you have hw0 you
can still use hw1007 83E9 design (but NOT 83EB, 83ED etc). The latest (working on your hardware), in your case the
dn_hw1007_83E9_date111122.rbf, will be the best option.

Regards the factory calibration, in case you don't have stable source then don't do anything on that.
Simply run the self calibration and your fine.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on March 20, 2013, 04:12:03 pm
Still, it make sense to change to 83E9 design if someone have 83E8,
1 UNRAR files
2 Copy from folder <save_from_DSO> file dst1kb_2.06.3_15102b_fact(130114.0).up to FLASH storage
3 Plug flash disk in DSO, run firmware upgrade
4 After finish procedure, unplug flash storage and reboot DSO.
5 Copy backup file dn_current.rbf from storage to some else secure storage  ;D

6 Copy from folder <load_in_DSO> file dst1kb_2.06.3_15102b_fact(130114.0).up to FLASH storage
7 Copy target *.rbf file to FLASH storage and rename to dn.rbf
8 Do 3 & 4 paragraph this instruction.
9 PROFIT

This archive file contain just 2 cmd files.
for load file
[DST type]dst1000b
[soft version]2.99.9(999999.9)
[type]123
[cmd] cp /mnt/dn.rbf /dn.rbf
 [cmd] sync
[cmd] sync
[cmd] sync
[end]

for save- another direct of copy
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: casinada on March 20, 2013, 05:33:19 pm
Sorry if this is a little bit off topic but I wanted ThinHead's opinion regarding the Portable Oscilloscopes with isolated inputs from Hantek.
On their web site they have models DSO1062S, DSO1122S, and DSO1202S. On ebay or ALiExpress they have the DSO1062S, DSO1122S, and DSO1152S.
They were mentioned on a post in Dec 2011 but never reviewed. The new Tek or Fluke portable scopes are totally out of my price range :(
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 20, 2013, 07:08:50 pm
yeah i remember, i spoke about the isolated version but never had a chance to get one to do a review.
However, i had the non isolated version, and it was ok (except the crazy things on first firmwares).

The only thing i don't liked was the enclosure, i would not try to throw it from a second floor :)
Fluke will survive it, Hantek for sure not.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: casinada on March 20, 2013, 10:07:53 pm
Thank you tinhead. What is the best portable scope with isolated inputs for less than $1000 ? if there is any.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on March 20, 2013, 10:43:35 pm
1 UNRAR files
2 Copy from folder <save_from_DSO> file dst1kb_2.06.3_15102b_fact(130114.0).up to FLASH storage
3 Plug flash disk in DSO, run firmware upgrade
..
..

Thank you very much for easying the procedure, however, for the second part I had to rename the file to dst1kb_2.06.3_15102b_fact(999999.9).up as it was telling me that no update files were found. Interestingly, the first one worked wth the original filename and working with 130306.0 fw

Regards the factory calibration, in case you don't have stable source then don't do anything on that.
Simply run the self calibration and your fine.

Hi again tinhead, about the calibration, as I remember in some post, it is better to do it in Equ-Time setting right? Along with about 1 hour warm up, or it was valid only for the factory calibration?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 20, 2013, 10:47:00 pm
Hi again tinhead, about the calibration, as I remember in some post, it is better to do it in Equ-Time setting right? Along with about 1 hour warm up, or it was valid only for the factory calibration?

it was better, but since some time EQU-time mode is not working at all, so no matter what you select you always in real time mode.
For the warm up, 15-30 mins are good enough.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on March 20, 2013, 11:52:19 pm
it was better, but since some time EQU-time mode is not working at all, so no matter what you select you always in real time mode.
For the warm up, 15-30 mins are good enough.

Done. Everytime I update my scope I feel a bit like it's brand new haha, thanks for letting us know about each new update!

Cheers!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on March 21, 2013, 09:48:44 am
I had to rename the file to dst1kb_2.06.3_15102b_fact(999999.9).up as it was telling me that no update files were found.

rename *.rbf file to dn.rbf
For example, dn_hw1007_83E9_date111122.rbf to dn.rbf
rbf-file is FPGA configuration file, is not the DSO full firmware- is just the part of its.
DSO update onli from file like  dst1kb_xxxxx_15102b_fact(xxxxxx).up

You must put 2 file to FLASH storage for upgrade *.rbf file
- command file - dst1kb_2.06.3_15102b_fact(130114.0).up (from folder  <load_in_DSO> )
- FPGA file - dn.rbf
not only dn.rbf
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on March 21, 2013, 01:17:23 pm
rename *.rbf file to dn.rbf
For example, dn_hw1007_83E9_date111122.rbf to dn.rbf
..
..

Yes I did it that way, in the flash card were both files, that's why it seemed strange to me. As soon as I renamed the *.up it worked.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mike Warren on March 22, 2013, 04:29:08 am
Are there any known problems with the pass/fail testing using the latest firmware?

My scope crashes after the test is running anywhere between a few seconds and a few minutes.

Oh, and is it normal that when a crash happens all settings revert back to the defaults?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: snowl on March 22, 2013, 06:14:42 am
Oh, and is it normal that when a crash happens all settings revert back to the defaults?

Yes, I think that's normal. In the past there were problems with corrupt settings after a crash. In these cases the scope wouldn't start at all (immediate crash after startup). To prevent that, the watchdog Process (dsod) will delete the settings before restarting the scope when the dso.exe stops responding.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 22, 2013, 07:24:12 am
Are there any known problems with the pass/fail testing using the latest firmware?
My scope crashes after the test is running anywhere between a few seconds and a few minutes.

not on my test DSO, i will try another one and let you know.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: snowl on March 22, 2013, 01:01:15 pm
I just installed the latest firmware onto my Voltcraft DSO-1062D.
I had also one crash in pass/fail (after a few seconds) but after a second reboot it worked (I just checked for a few minutes with cound >1050).

My problem with the tracking cursors is gone (In stopped Aquisition, the cursors where off curve after changing V/Div or Sec/Div), they now adjust to the changed curve when the cursor is moved after a change..

@tinhead: Do you have a current firmware_buglist for us?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mike Warren on March 22, 2013, 02:06:29 pm
I bought my scope home tonight and tested the pass/fail again. Firstly, it ran for 3 hours and didn't fail. I started it again and it failed after about an hour. Next time it failed after about 45 minutes, and then 5 minutes.

Earlier today, when I started getting these crashes, the scope had been running about 5 hours. I could get it to fail within a few seconds, sometimes, and a maximum time of 5 minutes. I'm wondering if temperature is a contributing factor.

I've only have this scope for about a week and it's averaging 2 crashes per day, and I'm only doing simple stuff with it. The crashes seem to be completely random, except it seems to be always while I'm adjusting something.

These crashes are generally just an annoyance, but a crash on pass/fail testing make the function completely useless.

Tekway Pass/Fail Crash (https://www.youtube.com/watch?v=6aiHYKu_KbQ#)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: brainwash on March 22, 2013, 05:25:42 pm
I just noticed an annoying bug/feature: whenever I adjust the timescale I have to do it slowly, one click at a time, otherwise the knob rotation gets ignored. I'm trying to figure out exactly how to reproduce this because it know seems to be working fine.
I remember I had 30Mhz sine wave on ch1, autoset, trigger with noise reject, 100-200 mV/div, 2-20ns/div, split screen with measure, 4k mem depth, realtime sampling. It took 1 to 4 seconds to update the timebase and it only worked if I did it one click at a time.
I don't know, maybe it's possible to go "under" the scale with the knob and then it takes a few clicks to come back to the minimum timebase position? I was frantically searching for the waveform with the rotary button and noticed that the timebase does not change at all.
Anyway, not a very helpful description, I'll try to come up with a reproducible scenario.
SW 2.06.3 (130131.0) HW 10070x555583eb
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 22, 2013, 05:51:54 pm
SW 2.06.3 (130131.0) HW 10070x555583eb

it would be nice if you would update to the latest fw version (which is 130306.0), honestly i and HanTekway
as well is ignoring ANY bugs in older firmare versions (as most of them already fixed).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: condor on March 22, 2013, 10:05:04 pm
Hey guys ... success! Upgraded my DSO 5xxx from 83E8 to 83E9 111122,rbf. Thanks for the scripts, worked as exactly as described; DSO @ firmware 130306.0
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mike Warren on March 22, 2013, 10:32:53 pm
Does anyone have 2.06.3 (120927.1) they can supply me? I'd like to do some comparisons. (I assume I'll be able to load an earlier version if I rename it to look like it's a later one)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 22, 2013, 11:15:11 pm
Does anyone have 2.06.3 (120927.1) they can supply me? I'd like to do some comparisons. (I assume I'll be able to load an earlier version if I rename it to look like it's a later one)

i don't have that version

Are there any known problems with the pass/fail testing using the latest firmware?
My scope crashes after the test is running anywhere between a few seconds and a few minutes.

not on my test DSO, i will try another one and let you know.

the last 4+ hours, two DSOs - a Tekway DST1202B and Voltcraft DSO-162B, both with 130306.0 firmware loaded,
both with 1kHz test signal applied - exact same setup as your and no crash (actually funny to see the event
counter starting after some poi nt again from 0 - without any problem).

So no idea, i can play with knobs, do whatever i wish to do and no such problems (i've noticed one time a strange
slow knob reaction which was gone after reboot).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mike Warren on March 22, 2013, 11:24:19 pm
What's the nearest version to to that you have that you considered reasonably stable?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mike Warren on March 22, 2013, 11:29:28 pm
the last 4+ hours, two DSOs - a Tekway DST1202B and Voltcraft DSO-162B, both with 130306.0 firmware loaded,
both with 1kHz test signal applied - exact same setup as your and no crash (actually funny to see the event
counter starting after some poi nt again from 0 - without any problem).

Strange. I've also had a PM form someone else who was able to duplicate my test, so that's at least 3. I thought I was going mad last night when I couldn't get it to play up for so long after it failing so regularly during the day.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 22, 2013, 11:51:05 pm
the last 4+ hours, two DSOs - a Tekway DST1202B and Voltcraft DSO-162B, both with 130306.0 firmware loaded,
both with 1kHz test signal applied - exact same setup as your and no crash (actually funny to see the event
counter starting after some poi nt again from 0 - without any problem).

Strange. I've also had a PM form someone else who was able to duplicate my test, so that's at least 3. I thought I was going mad last night when I couldn't get it to play up for so long after it failing so regularly during the day.

and still, we have to find a setup or something common which can be then replicated.
So let's start with me, both DSOs loaded with 130306.0, the Tekway is hw0 so this is not 100% exact the same hardware
to compare, but the Voltcraft is hw1007, brand new, with 83EB FPGA design. Now your DSO, what is the first number of
the serial? (asking because Tekway is not producing DSOs with this particular enclosure since some time), the FPGA
design i assume you loaded 83E9, right?

EDIT: hehe,  murphy's law just got me, 16 thousand something and boom, reboot :P
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on March 23, 2013, 12:08:06 am
Strange. I've also had a PM form someone else who was able to duplicate my test, so that's at least 3. I thought I was going mad last night when I couldn't get it to play up for so long after it failing so regularly during the day.

That was me :) I was ashamed I didn't know for what does PASS/FAIL was for haha, but now it doesn't matter because now I do. Thanks again Mike for the explanation.

Great feature, too bad it doesn't work in this version. Looking forward to use it as much as possible.

BTW. My scope (HW0) also resets settings when it reboots :(
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mike Warren on March 23, 2013, 06:39:57 am
Now your DSO, what is the first number of the serial? (asking because Tekway is not producing DSOs with this particular enclosure since some time), the FPGA
design i assume you loaded 83E9, right?

I guess it's not too important any more, but:
Hardware: 10070x555583e9
Serial: T 1G/012 005xxx
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on March 23, 2013, 01:49:45 pm
it would be nice if you would update to the latest fw version (which is 130306.0)
with pleasure, but the Hantek site has only dst1kb_2.06.3_15102b_fact(130114.0) version  :(
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on March 23, 2013, 01:57:48 pm
it would be nice if you would update to the latest fw version (which is 130306.0)
with pleasure, but the Hantek site has only dst1kb_2.06.3_15102b_fact(130114.0) version  :(


3 days ago, tinhead shared that version:

and here the latest DSO firmware (for following DSOs only):

 - Tekway DST1062B, DST1102B, DST1202B
 - Hantek DSO5062B, DSO5102B, DSO5202B
 - Voltcraft DSO3062C, DSO1062D
 - PCE DSOs: PCE-DSO5062B, PCE-DSO5102B, PCE-DSO5202B

http://www.mikrocontroller.net/topic/205820?goto=3094416#3094416 (http://www.mikrocontroller.net/topic/205820?goto=3094416#3094416)

Feedback as always welcome!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on March 23, 2013, 05:09:16 pm
3 days ago, tinhead shared that version:

sorry, was inattentive
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on March 23, 2013, 07:53:32 pm
Some ppl got during the firmware update an unexpected errof

 "Error 0xfb "failed to decompress file"

On the shell you can see then "tar: Write Error: No space left on device"

As the firmware is getting bigger and bigger (the org was something about 1MB, now more than 4MB + more libs, etc)
it make sense to delete some unused files.

However, first of all please check content of the /mnt directory, sometimes - when the DSO didn't recgnize properly
that flash drive has been removed - it writes to NAND instead to flash drive. So whatever you find there, delete it.

The there are some other files which can be removed:

/sbin/madplay
/sbin/led
/sbin/led-player
/sbin/boa
/usr/bin/spcacat
/usr/bin/servfox
/usr/bin/adc_test
/usr/bin/buttons


It should be now already enough space, finally you can remove (or move temp. to flash drive)
these two DSO custom files:

/dso/app/testacq
/dso/app/getdata

Now you should have 50-66% on NAND used, the firmware update must work now.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mike Warren on March 26, 2013, 01:08:35 am
Another pass/fail crash/reboot with 2.06.3(130306.0)

1/ Create a mask.
2. Try to save the mask.

The moment the P/F Mask Storage menu is shown, the program crashes.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mike Warren on March 26, 2013, 01:15:37 am
Is the filter supposed to do anything? The manual doesn't mention it, so I assume it is a digital filter on the display. I set it to LPF and 5kHz, but there is no change to the displayed waveform of a 10kHz square wave I'm feeding into it.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RobB on March 31, 2013, 04:40:18 pm
I was poking around looking for nothing in particular and came across http://www.goodluckbuy.com/hantek-lan-pcb-module-board-ht312-for-oscilliscopoe-.html (http://www.goodluckbuy.com/hantek-lan-pcb-module-board-ht312-for-oscilliscopoe-.html)
Does anyone know anything about this module? and is it compatible with the CROs under discussion in this thread

Cheers
Rob
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Bored@Work on March 31, 2013, 04:52:48 pm
I was poking around looking for nothing in particular and came across http://www.goodluckbuy.com/hantek-lan-pcb-module-board-ht312-for-oscilliscopoe-.html (http://www.goodluckbuy.com/hantek-lan-pcb-module-board-ht312-for-oscilliscopoe-.html)
Does anyone know anything about this module? and is it compatible with the CROs under discussion in this thread

Cheers
Robik

No, it is for this one http://www.hantek.com/english/produce_list.asp?unid=146 (http://www.hantek.com/english/produce_list.asp?unid=146)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Johndowacc on April 02, 2013, 02:47:31 pm
Hi guys,

I need to buy an oscilloscope and the models I am considering are Hantek DSO5102B and Hantek DSO5202B. I am sorry if my question is stupid but I didn't understand if these two are identical( I mean the hardware) ? I am sure that somewhere in these 100+ pages is mentioned but I really don't have the time to read them right now ( I have to study for my exams) and I need to get an oscilloscope quickly so please could someone tell me if it is worth giving 100 pounds more to get the 200mhz scope or the 100mhz version would be the same after hacking ? I know that is very annoying when someone asks something which is already written somewhere but I am really short of time and I have to buy a scope as soon as possible.

Thank you!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on April 02, 2013, 03:03:19 pm
Hi guys,

I need to buy an oscilloscope and the models I am considering are Hantek DSO5102B and Hantek DSO5202B. I am sorry if my question is stupid but I didn't understand if these two are identical( I mean the hardware) ? I am sure that somewhere in these 100+ pages is mentioned but I really don't have the time to read them right now ( I have to study for my exams) and I need to get an oscilloscope quickly so please could someone tell me if it is worth giving 100 pounds more to get the 200mhz scope or the 100mhz version would be the same after hacking ? I know that is very annoying when someone asks something which is already written somewhere but I am really short of time and I have to buy a scope as soon as possible.

Thank you!

Yes - identical hardware - the same bandwidth after hacking. And the DSO5062B can also be hacked to a higher bandwidth.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Johndowacc on April 02, 2013, 03:12:54 pm
Thank you very much for your quick reply! I guess I will save 100 pounds :) By the way is there any advantage of buying the 200mhz version apart of keeping your warranty (which anyway I guess is useless since I am buying the scope from China) ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on April 02, 2013, 03:21:22 pm
Thank you very much for your quick reply! I guess I will save 100 pounds :) By the way is there any advantage of buying the 200mhz version apart of keeping your warranty (which anyway I guess is useless since I am buying the scope from China) ?
I don't think so - but I'm no expert about it. Tinhead (the OP) or one of the other current owners would be better suited to answer that question. And as far as voiding the warranty - try not to. There are videos (like this one from fellow member Mike of mikeselectricstuff) that suggest how to deal with warranty stickers:

Dealing with a warranty seal (https://www.youtube.com/watch?v=KGcNS5g9ygg#ws)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFasic on April 03, 2013, 12:48:45 am
I was poking around looking for nothing in particular and came across http://www.goodluckbuy.com/hantek-lan-pcb-module-board-ht312-for-oscilliscopoe-.html (http://www.goodluckbuy.com/hantek-lan-pcb-module-board-ht312-for-oscilliscopoe-.html)
Does anyone know anything about this module? and is it compatible with the CROs under discussion in this thread

Cheers
Rob

Just try this one : http://www.ebay.com/itm/HANTEK-LAN-PCB-HT312-For-Hantek-Oscilloscope-Scopemeter-/121088280120?ssPageName=STRK:MESE:IT (http://www.ebay.com/itm/HANTEK-LAN-PCB-HT312-For-Hantek-Oscilloscope-Scopemeter-/121088280120?ssPageName=STRK:MESE:IT)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mike Warren on April 03, 2013, 12:57:46 am
Thank you very much for your quick reply! I guess I will save 100 pounds :) By the way is there any advantage of buying the 200mhz version apart of keeping your warranty (which anyway I guess is useless since I am buying the scope from China) ?

The 60MHz and 100MHz models come with 150MHz probes. I expect the 200MHz models will come with 200MHz probes.

Apart from that, changing the bandwidth is as easy as plugging in the USB cable and running the DSO-BW-Changer program posted in this thread:
https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg91877/#msg91877 (https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg91877/#msg91877)

There is no need to disassemble the DSO, and it can be simply changed back at any time.

But you may want to add a 50mm fan as the power supply runs quite hot. I just soldered a resistor in series with a 12V 50mm fan to slow it down a bit and plugged in into the header on the PSU PCB.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 03, 2013, 05:27:42 am
I was poking around looking for nothing in particular and came across http://www.goodluckbuy.com/hantek-lan-pcb-module-board-ht312-for-oscilliscopoe-.html (http://www.goodluckbuy.com/hantek-lan-pcb-module-board-ht312-for-oscilliscopoe-.html)
Does anyone know anything about this module? and is it compatible with the CROs under discussion in this thread

Cheers
Rob

Just try this one : http://www.ebay.com/itm/HANTEK-LAN-PCB-HT312-For-Hantek-Oscilloscope-Scopemeter-/121088280120?ssPageName=STRK:MESE:IT (http://www.ebay.com/itm/HANTEK-LAN-PCB-HT312-For-Hantek-Oscilloscope-Scopemeter-/121088280120?ssPageName=STRK:MESE:IT)

the ebay seller speaks about "HANTEK LAN PCB (HT312) For Hantek Oscilloscope Scopemeter" and then he listing
following models - DSO1060, DSO1200, DSO8060 and DSO1202B but beieve me, it is not compatible with the DSO1202B!

DSO1060, DSO1200, DSO8060 handhelds belongs to completely different family (mainboard, firmware, OS) ans the
DSO1062B/BV/S, DSO1102B/BV/S and DSO1202B/BV/S models

All these ebay sellers are simply to STUPID, there is "B" letter in model names, and even numbers are not the same.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 03, 2013, 05:35:35 am
Thank you very much for your quick reply! I guess I will save 100 pounds :)

pounds? UK? When you from EU, consider buying Voltcraft DSO-1062D, this is exact the same hardware but it does costs
even less than Hantek DSO5062B on chinese ebay shops (329EUR+10EUR EU ship. vs. 354EUR ebay). Don't forget the customs
as well!, all these ebay items, you might need to pay tax as well.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 03, 2013, 07:04:52 am
Thank you very much for your quick reply! I guess I will save 100 pounds :) By the way is there any advantage of buying the 200mhz version apart of keeping your warranty (which anyway I guess is useless since I am buying the scope from China) ?

The 60MHz and 100MHz models come with 150MHz probes. I expect the 200MHz models will come with 200MHz probes.

Apart from that ...

all current 60 and 100MHz models are using not that great (for hacking over 100MHz bw) combination of resistors in input stage.
When hacked to 200MHz, there is up to +5dB overshoot at 150MHz (depends on probe type and termination kind)

I've made tons of measurments on current models (and where to modify):

http://www.mikrocontroller.net/attachment/173049/mod_input_circuit.pdf (http://www.mikrocontroller.net/attachment/173049/mod_input_circuit.pdf)

of my old Tekway DST1202B
http://www.mikrocontroller.net/topic/249628?page=8#3092292 (http://www.mikrocontroller.net/topic/249628?page=8#3092292)

of how bad the frequency response is on current60/100MHz DSO hacked to 200MHz
http://www.mikrocontroller.net/topic/249628?page=8#3098757 (http://www.mikrocontroller.net/topic/249628?page=8#3098757)

and how it can be improved to near perfect (don't forget, this is flat-response DSO, this overshoot need to be there)
http://www.mikrocontroller.net/topic/249628?page=8#3093970 (http://www.mikrocontroller.net/topic/249628?page=8#3093970)

Short said, by replacing the 4x22R resistor arrays in inputt stage the frequency response is already better (or on what it was on original 200MHZ DSO).

This can be however even more improved :
RX1_1 = RX1_2 = RX1_3 = RX1_4 = change all to 270R 0.1% (digikey 4 x P270DBCT-ND)
RX2_1 = RX2_2 = RX2_3 = RX2_4 = change all to 270R 0.1% (digikey 4 x P270DBCT-ND)
RA01_1 = RA01_2 = change all to 4 x 33R 1% (digikey 2 x CRA6E833.0ACT-ND)
RA02_1 = RA02_2 = change all to 4 x 33R 1% (digikey 2 x CRA6E833.0ACT-ND)
R01_25, R02_25 = change to 49R9 0.1% (digikey 2 x P49.9DBCT-ND)
R01_27, R02_27 = change to 120R 0.1% (digikey 2 x A103149CT-ND)
R01_29, R02_29 = change to 1R (what so ever 1206 resistors)

As the original probes are anyway not so good (oh well, they good up to 100MHz, for sure) it might change them to different models as well,
in my measurments you can see the original probe results (PP-150), some better chinese probes from Texas (TX250 -simply ebay "texas probes")
and more expensive 500MHz passive probes from Testec (HF-512).

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RFasic on April 03, 2013, 10:13:32 am
Thank a lot, Tinhead, to feed so well "THE" topic of this blog.

I read almost all the posts from the beginning ( the most carefully I could), but I might have missed some important things ...
Ie: did you try, one day, to implement a trigger output signal through an un used differential pair of pins of the Cyclone III (if you got access to the VHDL code of course ...).

Regards

"Hantek oscilloscopes for the dummies" addict.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 03, 2013, 10:33:59 am
Ie: did you try, one day, to implement a trigger output signal through an un used differential pair of pins of the Cyclone III (if you got access to the VHDL code of course ...).

i've patched once the firmware to toggle i/o pin on trigger events, i've used as well the firmware internal wfms counter
(not anymore implemented) to toggle i/o pin.

Unfortunately i never got the VHDL code, but even if, there would be still necessary to use some "free" and routed somewhere
pins. One option could be Test point 703 (but there is already unused 25MHz clock out) and Test opint 702, however they not
possible to use as diff pair. All other FPGA connected Test points are in use already.

There was (and maybe still is, never checked) another option - in hw1005 FPGA pins L1, L2, K1 and K2 has been used as trigger in/out (actually i saw only once this section partialy populated, but never implemented anything into fw, which of course didn't means anything about the status of implementation in FPGA).

These two diff pair are on hw1007 not connected to anything, you need to resolder FPGA to make them accesible, and even then
to warranty that the current FPGA design is sending anything there (oh well, L1 and K1 are accessible even with soldered FPGA,
so it could make sense to measure what's on these pins).



Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Johndowacc on April 03, 2013, 11:03:50 am
--
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: brainwash on April 03, 2013, 11:50:13 am
Like tinhead said, don't forget to add customs (15-30%?) and VAT (20%). Warranty will be hard to follow since sending the item to China takes 3-4 weeks, one or two weeks in diagnosis plus another 3-4 weeks back. I would say it's not worth it, you actually pay more in the long run.
If you are lucky you might be exempted from the customs and VAT, but it's a gamble.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on April 03, 2013, 11:51:10 am
I just checked conrad-uk and this voltcraft (DSO-1062D) is 293 pounds exl. delivery.. The Chinese version - Hantek 100mhz - is 220-230 pounds including free shipping from China.  The price of the 60mhz version on ebay is 290 pounds  ;D

Although with Conrad, you could return the DSO if you didn't like it (within 7/14 days? I don't know what it is in the UK) - plus perhaps have a more reliable avenue if service was required (although I don't know how Conrad deals with service on them).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on April 03, 2013, 12:08:30 pm
Like tinhead said, don't forget to add customs (15-30%?) and VAT (20%).
But according to the European Taxation and Customs Union, there is 0% duty on an electronic oscilloscope shipped from China (as shown here (http://ec.europa.eu/taxation_customs/dds2/taric/measures.jsp?Lang=en&SimDate=20130403&Area=CN&Taric=9030209190&LangDescr=en)). The problem is sometimes getting the customs people to be aware of this. If you go this route, it's best to have the shipper put the TARIC code (9030 20 91 90) into the documentation. But you do have to pay VAT of course.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: brainwash on April 03, 2013, 01:31:56 pm
I did not know that. Is that also applicable to normal multimeters?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on April 03, 2013, 02:17:23 pm
I did not know that. Is that also applicable to normal multimeters?

Yes, I used it to make sure I got a function generator being sent from China duty free. At the TARIC website posted above, you can find the duty for any type of item being sent from any country of origin.

But there is one caveat. In the TARIC documentation is written:

"The TARIC DDS site allows searching for a product code based on its description. This function does not guarantee that a code retrieved in this way will be accepted by the Customs offices if used in a declaration."

Basically, it says that your local Customs office may screw you over. I think the best thing to do, if thinking of importing an expensive measuring device with 0% duty tariff (and you're not worried about paying VAT), is to FIRST contact your Customs office with the TARIC code and get them to either agree/disagree with the published tariff in writing; in other words:

"In order to obtain written classification information, it is advised to ask for a "Binding Tariff Information" (BTI) in the country of importation. Since it is the national customs authorities that are responsible for issuing binding tariff information, please send your request to the competent customs authorities of the Member State concerned. The names and addresses of these authorities can be found in the Official Journal of the EC C 126 of 23.05.2008, page 11."
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Johndowacc on April 03, 2013, 02:34:39 pm
Interesting...So far I have always paid only the price stated on ebay (no duty, vat etc).... I have never bought anything more expensive than 30-40 pounds but still....I didn't have to pay VAT etc...as a matter of fact I pay the VAT when I buy the product from ebay so why should I pay VAT again ?! It doesn't make sense...Actually the duty charges are what the governments use to charge you for buying stuff from outside the EU, but since there is no duty charges for oscilloscopes then everything is fine! The only problem is regarding the warranty but since I am buying the scope from Chine I don't really expect to have any warranty haha...so the difference of 70 pounds would be only because I would expect to have some warranty from Conrad which is again something that I would not rely on... Considering also my intention to hack the scope to 200mhz and probably add a fan something tells me that the warranty would be 100% worthless :).
(off-topic imagine how much money Conrad makes from selling Chinese stuff so overpriced... and they probably buy these products even for less)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on April 03, 2013, 03:00:02 pm
Interesting...So far I have always paid only the price stated on ebay (no duty, vat etc).... I have never bought anything more expensive than 30-40 pounds but still....I didn't have to pay VAT etc...as a matter of fact I pay the VAT when I buy the product from ebay so why should I pay VAT again ?!

You only pay VAT on eBay if you're buying the product from another EU country - and then of course, there is no duty.

I don't know what the rules in the UK are, but in NL it's the following:

Up to € 22 value       = No duty, no VAT.
From € 22 to € 150   = No duty, yes VAT.
€ 150 or more          = Yes duty, yes VAT.

But of course, they can't check every package - and if the real value isn't listed (and they don't check) - you can easily get things without paying anything.
Title: Re: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marek on April 03, 2013, 03:05:01 pm
as a matter of fact I pay the VAT when I buy the product from ebay so why should I pay VAT again ?!

It baffles me, why would you believe that a Chinese vendor would arrange to pay European VAT for you? For them it's export, and even if it weren't, Chinese version of VAT would or could be levied, your homeland IRS would have its say nonetheless.
MAREK

Title: Re: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marek on April 03, 2013, 03:10:26 pm
I don't know what the rules in the UK are, but in NL it's the following:

Up to € 22 value       = No duty, no VAT.
From € 22 to € 150   = No duty, yes VAT.
€ 150 or more          = Yes duty, yes VAT.

Similar in Germany, but the rule is: if the import tax charge is less than 5€, no need to pay it. So the limit depends on what goods you're importing.
For VAT it's the same 22€…

Marek

Sent from my Nexus 4 using Tapatalk 2

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on April 03, 2013, 03:12:25 pm
Hantek 100mhz - is 220-230 pounds including free shipping from China.  The price of the 60mhz version on ebay is 290 pounds  ;D

Do you mean DSO5102P?

(Example there is one who picture DSO5202B  but then you read he sell DSO5102P where is total 24k capture memory)

http://www.hantek.com/english/news_list.asp?unid=44 (http://www.hantek.com/english/news_list.asp?unid=44)

Do you think Conrad 1062D model is this P serie. Not AFAIK.

:)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on April 03, 2013, 03:32:33 pm
Do you mean DSO5102P?

(Example there is one who picture DSO5202B  but then you read he sell DSO5102P where is total 24k capture memory)

Nice catch, rf-loop. Are you sure you've got the right model, John?

BTW, I know this has gone seriously off-topic, but since this is already the longest thread in the history of mankind  ;), I hope tinhead won't mind:

I was looking through the TARIC codes and rates for various test equipment from various countries (such as the duty amount for shipping a DSO from the US to the EU) and it appears that, generally, there is NO duty on any type of T&M equipment shipped from any country (except perhaps very specialized gear - as in aviation). I'm not sure why that is - but it's good to know. You just have to be sure that shipped equipment isn't misidentified by the local customs office as some kind of consumer electronics (which are usually 13-25% duty).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 03, 2013, 03:43:54 pm
right, there are these "down to price" models with "P" in name (or as they call them, "High Cost-Effective" DSO).

There is nothing wrong with them, sure the 1M SRAM is not anymore there, so you have to work with 24k only, but everything
else is the same.

Btw, the 24k value is what the FPGA can handle with best speed vs. memory ratio. Up to now (with fw 2.6 and 2.7) with 4k there
was still enough "room" and 40k it was already bit slowish. I have here test firmware (3.x) with 24k instead of 40k and so
far it's ok (yes, there are as well other steps).

But back to "P" models, when you need 1M, then this DSO-line is not what you need. But when you don't need these
1M memory then this is probably the cheapest and best DSO you can get for money.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on April 03, 2013, 04:00:50 pm
Yes, tinhead just this - nothing wrong if it meets needs, this is not point in my post.
But when compare prices it is good to compare  jackfruit to jackfruit.


All do not need long memory. Some do not need never.

There is lot of manufacturers and models where is sample buffer starting from 4k etc. 

Many times I use example my one Tektronix I set it for 500 point or 1k and not 50k.

If I look what is going on just on the screen area and not at all interest about what is out of screen... . It is good to realize that with 1Gsa/s and with 2ns/div there is just 20 real sample point visible on the screen if screen area is 10div horizontally. So, sometimes I hope I can adjust memory to 20 sample but capture this "waveform" as fast as possible.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 03, 2013, 04:47:50 pm
this is not point in my post.

i know :)

Many times I use example my one Tektronix I set it for 500 point or 1k and not 50k.
If I look what is going on just on the screen area and not at all interest about what is out of screen... . It is good to realize that with 1Gsa/s and with 2ns/div there is just 20 real sample point visible on the screen if screen area is 10div horizontally. So, sometimes I hope I can adjust memory to 20 sample but capture this "waveform" as fast as possible.

same here, i always trying to use the fastest (but still long enough to capture what i wish to capture) setting on DSO
and longest/fastest combination on logic or protocol analyzers (this is where length matters).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Johndowacc on April 03, 2013, 07:04:44 pm
Hantek 100mhz - is 220-230 pounds including free shipping from China.  The price of the 60mhz version on ebay is 290 pounds  ;D

Do you mean DSO5102P?

(Example there is one who picture DSO5202B  but then you read he sell DSO5102P where is total 24k capture memory)

http://www.hantek.com/english/news_list.asp?unid=44 (http://www.hantek.com/english/news_list.asp?unid=44)

Do you think Conrad 1062D model is this P serie. Not AFAIK.

:)

omg...I would never notice this ahahha. Thanks !! But still the 100mhz scope with 1M is 250 pounds whereas the Conrad's version is 290 for 60mhz... Obviously they are the same but at least if I decide not to hack the scope to higher bandwidth 100mhz would be pretty much sufficient for me...
About the VAT and duty charges I might be wrong...I just don't see the point of paying VAT to a country which has nothing to do with the production of the product...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: staze on April 03, 2013, 07:35:11 pm
Sorry if this is mentioned in this HUGE thread (yes, a bit of TL;DR), but can the DSO5062 be hacked into the 200mhz model, or just the DSO5102? Or are they ALL the same hardware?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Parsley on April 04, 2013, 09:07:16 am
...can the DSO5062 be hacked into the 200mhz model, or just the DSO5102? Or are they ALL the same hardware?

Yes, all hackable to 200.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 08, 2013, 08:01:39 am
here we go ... i did it again:

A complette schematic of hw1005 and hw1007 DSOs(with S/N < 15000)

valid for following DSOs (S/N < 15000):
 Tekway DST1xxxB
 Tekway MST1xxxB
 Hantek DSO5xxxB/BM/BMV
 Hantek MSO5xxxD
 Voltcraft DSO-3062C
 Voltcraft DSO-1062D
 Voltcraft MSO-5xxxD

attached only the PDF file, if someone need it as Altium version please let me know.

What not included - picture of PCB with part placements, i don't have time for that anymore.
If someone wish to do it, you welcome.

I've added as well as much as possible of hw1005, three nets are not connected due the fact that i don't have hw1005.
Everything else on hw1005 is reversed from pictures, so don't blame me if i missed something.

Full size PDF: http://www.mikrocontroller.net/articles/Datei:Hantek_Tekway_DSO_MSO_hw1007.pdf (http://www.mikrocontroller.net/articles/Datei:Hantek_Tekway_DSO_MSO_hw1007.pdf)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on April 08, 2013, 01:48:02 pm
here we go ... i did it again:

A complette schematic of hw1005 and hw1007 DSOs(with S/N < 15000)


Awesome, and thank you.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: robmg on April 12, 2013, 10:32:52 am
Hello, do you guys think the hack works also for the DSO5000 P models? I've a DSO5102P so i would like to ....
Thanks 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on April 12, 2013, 11:06:20 am
About a year ago Tinhead mentioned the utility 'fpga.exe' in this forum thread. This file was present in early firmware versions, later it was removed.
About two weeks ago this file was again mentioned in mikrocontroller forum thread "TEKWAY DST1xx2B Oszilloskop". Here Tinhead hints to the possibility to create a kind of menu by reading the frontpanel buttons before the main program is started. Well, this is indeed possible as shown here.

I copied the utility 'fpga.exe' into the '/dso/app' directory, together with script 'demo'. The script reads the key-buffer in the fpga memory until it finds one of the 'watched-for' keys, then exits.
The script can also be added to the bootscript 'rcS', I prepared a demo 'rcS' for this. Copy it to '/etc/init.d' after saving your original one of course. Now the script will wait while the scope is displaying the bootlogo until you push either F1 or F2, then it exits after starting 'dso.exe'. Here you could insert a different command for another, renamed, 'dso.exe' version that is present somewhere in the filesystem.

I was planning to use this to make it possible to start an 'upgraded' DSO/MSO in either the DSO or in the MSO mode.

HOWEVER....

The 'upgraded' DSO/MSO is running a later Linux version and fpga.exe is not running here. It is depending on some older library files not present. To solve it properly fpga.exe should be recompiled with the proper libraries. I tried a few tricks found on several forums, like symlinking an older library, but no succes.

So far for my attempt to create a DSO - MSO menu.

For those who want to experiment I added 'fpga.zip', my script 'demo' and the special 'rcS' are in 'F1F2demo.zip'.

The use of fpga.exe has been published before:
'fpga.exe w 0xnn 0xdd' writes data, 'fpga.exe r 0xnn' reads one byte, 'fpga.exe R 0xnn length' reads multiple 32 bit records.

I found fpga register 0x0d has a key-buffer status bit, bit 5, that is set when the key-buffer contains data to read.
Register 0x0e reads the key-buffer: bits 4, 5 and 6 represent the contents of counter UF1B for multiplexer UF3 of the front panel schematic; bits 1, 2 and 3 for UF1A and UF2; bit 0 is zero when the found key is pushed and is set when the key becomes released. My demo uses F1 key, databyte 0x26 when pushed and F2, databyte 0x36.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: brainwash on April 12, 2013, 11:12:39 am
What real-life utility would fpga.exe have? Calibration constants?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 12, 2013, 11:33:26 am
Hello, do you guys think the hack works also for the DSO5000 P models? I've a DSO5102P so i would like to ....
Thanks

cool, download this tool

http://peter.dreisiebner.at/dso-usb-tool/ (http://peter.dreisiebner.at/dso-usb-tool/)

connect your DSO to PC,run this tool, insert usb flash drive into the front USB and copy the dso.exe from your P model to the flash drive (simply go to shell tab and try cp /dso.exe /mnt/udisk/dso.exe or cp /dso.exe /mnt/dso.exe. I think /mnt/udisk/ should work).

Then zip the dso.exe and upload here or somewhere .. when i have it i can tell you more about hack of these P models
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 12, 2013, 08:09:38 pm
I was planning to use this to make it possible to start an 'upgraded' DSO/MSO in either the DSO or in the MSO mode.

HOWEVER....

The 'upgraded' DSO/MSO is running a later Linux version and fpga.exe is not running here. It is depending on some older library files not present. To solve it properly fpga.exe should be recompiled with the proper libraries. I tried a few tricks found on several forums, like symlinking an older library, but no succes.

So far for my attempt to create a DSO - MSO menu.

so you picked up my idea, cool.

I've tested the script, so far it does works great on 2.6.14. To make this idea "complete" i recompiled
the fpga.exe for Linux 2.6.30.4 (it must be simply linked against ld-linux.so.3, not ld-linux.so.2)

Btw, where you found the proper register? Or did you simply tried them all?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on April 13, 2013, 12:47:37 pm
so you picked up my idea, cool.

You mentioned this idea earlier, but your comment on fpga.exe in the 'Tekway DST1xx2B' thread two weeks ago on the mikrocontroller forum made me decide to look into it.

Quote
I've tested the script, so far it does works great on 2.6.14. To make this idea "complete" i recompiled
the fpga.exe for Linux 2.6.30.4 (it must be simply linked against ld-linux.so.3, not ld-linux.so.2)

Thanks again, great: "simply recompile". I did find that problem with: 'readelf -l fpga.exe | grep "program interpreter" ' but I had no idea how to proceed further. Lots of learning to do.

Quote
Btw, where you found the proper register? Or did you simply tried them all?

Well,.. You published a disassembly some time ago of dso.exe. Here I searched for 'key' and 'fpga'. Found 'READ_FPGA_kb_buf' function calling 'read_fpga_device' two times, once after loading R0 with 0x0d and once with 0x0e. The rest was just trial.

I will work further on the idea, to see if it is not complicating things too much in view of later updates of the firmware. Anyway when the "definite' firmware for the MSO is available the switching is no longer needed, I hope.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 13, 2013, 02:34:22 pm
Quote
I've tested the script, so far it does works great on 2.6.14. To make this idea "complete" i recompiled
the fpga.exe for Linux 2.6.30.4 (it must be simply linked against ld-linux.so.3, not ld-linux.so.2)

Thanks again, great: "simply recompile". I did find that problem with: 'readelf -l fpga.exe | grep "program interpreter" ' but I had no idea how to proceed further. Lots of learning to do.

in the gpl code (e.g. for MSO) there is in "third_part" directory the 4.3.3 gcc toolchain, with all the libs whcih need to
be set in ldconfig flag. I made it very simple, created new directory in third_part, copied fpga code there, re-used make file
from "bmptogif", added section in make file in dir above nad in top dir - that's all. Now, when i compile kernel and drivers
and what so ever tools the fpga code will be compiled as well (with proper gcc, libs, etc. - no need to spend any unnecessary
second on that).

EDIT:
attached my sources and make files. All you need is to download the MSO GPL sources, install them into /opt/build/mso_env,
untar attached file to / and build it (make from /opt/build/mso_env or /opt/build/mso_env/third_part)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Jasmine on April 19, 2013, 05:27:19 am
check here,may help  http://www.pintech.com.cn/en/prolist.asp?str=Oscilloscope (http://www.pintech.com.cn/en/prolist.asp?str=Oscilloscope) Probe&style=145&idtop=0
or
http://www.dkflex.com/products.asp?str=DK (http://www.dkflex.com/products.asp?str=DK) series&style=141&idtop=0
 :scared:
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: crackintosh on April 21, 2013, 07:58:23 am
Hi all...

Today I received the QFP100 SRAM  = IS61LPS51236A-200TQLI.
What HW mods need to do to use a 2M capability in DSO1202B(exDSO1062B) ?
Somebody tested SRAM replacement? Any results?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 21, 2013, 09:09:10 am
Hi all...

Today I received the QFP100 SRAM  = IS61LPS51236A-200TQLI.
What HW mods need to do to use a 2M capability in DSO1202B(exDSO1062B) ?
Somebody tested SRAM replacement? Any results?

in principle you need to replace the SRAM, sometimes connect the ZZ pin (pin 64) to GND (some SRAM types have pull-down
integrated, some not - with floating pin you might get strange errors) and then change in EEPROM licensing to enable 2M.

edit: The licensing is described on first thread page.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: NCG on April 22, 2013, 03:37:45 am
I did not get 2Mb IS61LPS51236A-200TQLI to actually work in bench HW1007 correctly. I do see 2MB option enabled in scope menus but actual capture repeats itself when 2MB is allowed, so I assume addressing problem with highest used address pin. Have to check if CPLD pin 47 (used in handheld for SRA18 signal) gives anything out during 2MB capture. Also the SDRAM ZZ pin is not grounded, have to test the effect of that too.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 22, 2013, 05:55:36 am
I did not get 2Mb IS61LPS51236A-200TQLI to actually work in bench HW1007 correctly. I do see 2MB option enabled in scope menus but actual capture repeats itself when 2MB is allowed, so I assume addressing problem with highest used address pin. Have to check if CPLD pin 47 (used in handheld for SRA18 signal) gives anything out during 2MB capture. Also the SDRAM ZZ pin is not grounded, have to test the effect of that too.

hw1007 is benchtop, so when running firmware for B models you will not get 2M working. This is because there is a check for
linux version in the firmare, BM/BMV models have 2.6.30.4 instead of 2.6.13 on B models.

On Handheld there is no 2.6.13, there was from the beginning 2.6.30.4 and 2M works.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 22, 2013, 06:25:58 am
I did not get 2Mb IS61LPS51236A-200TQLI to actually work in bench HW1007 correctly. I do see 2MB option enabled in scope menus but actual capture repeats itself when 2MB is allowed, so I assume addressing problem with highest used address pin. Have to check if CPLD pin 47 (used in handheld for SRA18 signal) gives anything out during 2MB capture. Also the SDRAM ZZ pin is not grounded, have to test the effect of that too.

hw1007 is benchtop, so when running firmware for B models you will not get 2M working. This is because there is a check for
linux version in the firmare, BM/BMV models have 2.6.30.4 instead of 2.6.13 on B models.

On Handheld there is no 2.6.13, there was from the beginning 2.6.30.4 and 2M works.

btw NCG, you can switch to higher linux version by doing following stept:
1-  run http://embdev.net/articles/Tekway_MSO#Firmware_upgrade (http://embdev.net/articles/Tekway_MSO#Firmware_upgrade) to get Linux and MSO firmware
(with all these steps -> backup of your factory files, installation of MSO fw, resotre of your factory files)
2- install special BMV model firmware on your temp MSO model, http://www.mikrocontroller.net/topic/289260#3094394 (http://www.mikrocontroller.net/topic/289260#3094394)
You need to run the *dodso* file, http://www.mikrocontroller.net/attachment/173447/dst1kb_2.06.3_dodso.up (http://www.mikrocontroller.net/attachment/173447/dst1kb_2.06.3_dodso.up)
3- use the regular BM/BMV firmware once. You might consider changing logo as well, as described in this thread here somewhere.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: cosmos on April 22, 2013, 11:47:49 am
I am testing my new MSO5102D (updated to latest Hantec SW but not hacked) and notice that the logic analyser results seems to lag the analogue channels by one trig.
ie. I get the data sampled on the previous trigger for the analyser part and fresh result for the two analogue channels.
Is this a know issue? I do not seem to find anything about it elsewhere.

from system status screen:
model: MSO5102D
SW: 2.07.1 (130321.0)
HW: 10070x555583e9

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: NCG on April 22, 2013, 04:42:09 pm
I am already at step 2 (tested dso.exe check removal for kernel version too) - just curious what does regular BM/BMW update does (the relevant files are)?

Quote
btw NCG, you can switch to higher linux version by doing following stept:
1-  run http://embdev.net/articles/Tekway_MSO#Firmware_upgrade (http://embdev.net/articles/Tekway_MSO#Firmware_upgrade) to get Linux and MSO firmware
(with all these steps -> backup of your factory files, installation of MSO fw, resotre of your factory files)
2- install special BMV model firmware on your temp MSO model, http://www.mikrocontroller.net/topic/289260#3094394 (http://www.mikrocontroller.net/topic/289260#3094394)
You need to run the *dodso* file, http://www.mikrocontroller.net/attachment/173447/dst1kb_2.06.3_dodso.up (http://www.mikrocontroller.net/attachment/173447/dst1kb_2.06.3_dodso.up)
3- use the regular BM/BMV firmware once. You might consider changing logo as well, as described in this thread here somewhere.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: NCG on April 22, 2013, 04:45:04 pm
I noticed it too with first DSO upgrade firmware, have not tested if it is also there with latest MSO firmware.

I am testing my new MSO5102D (updated to latest Hantec SW but not hacked) and notice that the logic analyser results seems to lag the analogue channels by one trig.
ie. I get the data sampled on the previous trigger for the analyser part and fresh result for the two analogue channels.
Is this a know issue? I do not seem to find anything about it elsewhere.

from system status screen:
model: MSO5102D
SW: 2.07.1 (130321.0)
HW: 10070x555583e9
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 22, 2013, 05:04:05 pm
I am already at step 2 (tested dso.exe check removal for kernel version too) - just curious what does regular BM/BMW update does (the relevant files are)?

Quote
btw NCG, you can switch to higher linux version by doing following stept:
1-  run http://embdev.net/articles/Tekway_MSO#Firmware_upgrade (http://embdev.net/articles/Tekway_MSO#Firmware_upgrade) to get Linux and MSO firmware
(with all these steps -> backup of your factory files, installation of MSO fw, resotre of your factory files)
2- install special BMV model firmware on your temp MSO model, http://www.mikrocontroller.net/topic/289260#3094394 (http://www.mikrocontroller.net/topic/289260#3094394)
You need to run the *dodso* file, http://www.mikrocontroller.net/attachment/173447/dst1kb_2.06.3_dodso.up (http://www.mikrocontroller.net/attachment/173447/dst1kb_2.06.3_dodso.up)
3- use the regular BM/BMV firmware once. You might consider changing logo as well, as described in this thread here somewhere.

yeah, here we go ... on your DSO(MSO) it is bad idea to use regular BM/BMV updates, they will of course replace the rcS,
for a regular B model user this does not matter, but for you it does as you have MSO.

For you make sense to use this solution

http://www.mikrocontroller.net/topic/289260#3126759 (http://www.mikrocontroller.net/topic/289260#3126759)

and then to copy (as you haev anyway network on your MSO) the unpacked firmware files instead of install them.
For sure this "sucks", on one side you have 2M on board, on the other side you have MSO.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on April 23, 2013, 01:06:09 pm
I am testing my new MSO5102D (updated to latest Hantec SW but not hacked) and notice that the logic analyser results seems to lag the analogue channels by one trig.
ie. I get the data sampled on the previous trigger for the analyser part and fresh result for the two analogue channels.
Is this a know issue? I do not seem to find anything about it elsewhere.

Can you please give some more details and maybe illustrate with an example? I would like to try reproducing this issue.

The only 'place' I have seen a thing like this is during S condition, repeatedly pressing 'single seq'. You probably will need several pushes anyway before the analog signals in the display refreshes ( bug #40 ) and then you'll see the digital traces lag behind the analog for one refresh event( #41 in my personal buglist ).

A proper buglist for the MSO(MST) models has not been published yet, allthough Tinhead might be working on one, as far as I know.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mike Warren on April 24, 2013, 03:02:07 am
Just an update on the Pass/Fail crash.

I received an update from Tekway that appears from the file name to be the same version (130306) we have all been using, but I have not had a crash in the last 3 days. And I was running Pass/Fail tests for about 9 hours yesterday.

Pass/Fail was unusable for me before this.

The only thing that suggests it is not the same version is that the file size s quite different.

dst1kb_2.06.3_15202b_fact_130306.0_.up - 2888019 bytes

dst1kb_2.06.3_01102b_fe(130306.0).up - 2,800,232 bytes

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: cosmos on April 24, 2013, 10:04:43 am
I have seen this lag issue both with normal and with singel trig.

Just now looking at a digital signal that changes a lot over time so it makes a good example.
I have one of the analyser signals also attached to CH2 and trigger on CH2, adjusting the trigger level high (trigger on overshoot) so it just barely catches events reduces the rate of trigs so I can see what it captures.
I have about 1 trig every 2 second, the common signal does not match, if I take note of the analogue signal I will see it on the analyser track on the next trig.
What seems to produce the correct result (analyser and analogue in sync) every time I tested it is to do RUN/STOP then halt it with Single.

I too noticed the slightly random lack of response from the "single SEQ".

Other thing to consider for a bug list:
With high trig rate I have random flashes on all analyser tracks with masses of random content, screen can be packed full of transitions on all analyser channels (connected channels and unconnected alike).   
Looking over time it seems as if the random flashes can be related to content of the analogue channels, I sometimes see gaps corresponding to the high or low state of the analogue channels but it is not consistent even if I have a fixed pattern on the analogue channels.

memory depth in the analyser seems to be fixed at 4k.
Sampling a signal with ~10ns long pulses for 40us (display says 4.00us per division) of sampled data I start to miss pulses, with 80us captured i can miss all, or none, at 20us I do not see any misses.
Changing memory depth in Acquisition menu makes no difference.


I am testing my new MSO5102D (updated to latest Hantec SW but not hacked) and notice that the logic analyser results seems to lag the analogue channels by one trig.
ie. I get the data sampled on the previous trigger for the analyser part and fresh result for the two analogue channels.
Is this a know issue? I do not seem to find anything about it elsewhere.

Can you please give some more details and maybe illustrate with an example? I would like to try reproducing this issue.

The only 'place' I have seen a thing like this is during S condition, repeatedly pressing 'single seq'. You probably will need several pushes anyway before the analog signals in the display refreshes ( bug #40 ) and then you'll see the digital traces lag behind the analog for one refresh event( #41 in my personal buglist ).

A proper buglist for the MSO(MST) models has not been published yet, allthough Tinhead might be working on one, as far as I know.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on April 24, 2013, 02:41:24 pm
Thanks for the info on your measuring details.

The other bug about the noise on the LA traces has been seen before. It really becomes unstable at high horizontal speeds.

About memory depth: This could be an issue because up to 512KB per channel is specified.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on April 24, 2013, 02:44:56 pm
Just an update on the Pass/Fail crash.

I received an update from Tekway that appears from the file name to be the same version (130306) we have all been using, but I have not had a crash in the last 3 days. And I was running Pass/Fail tests for about 9 hours yesterday.

Pass/Fail was unusable for me before this.

The only thing that suggests it is not the same version is that the file size s quite different.

dst1kb_2.06.3_15202b_fact_130306.0_.up - 2888019 bytes

dst1kb_2.06.3_01102b_fe(130306.0).up - 2,800,232 bytes

Can you please attach this new update? I, and maybe others, would certainly like to have a look at it.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mike Warren on April 24, 2013, 09:56:21 pm
Can you please attach this new update? I, and maybe others, would certainly like to have a look at it.

Sure. Just keep in mind that I know nothing about this update or if it will have negative effects on other models. My model is a Tekway DST1102B.

The forum won't let me post the file for some reason, so I've put it here:

http://mike-warren.net/play/dst1kb_2.06.3_01102b_fe(130306.0).zip (http://mike-warren.net/play/dst1kb_2.06.3_01102b_fe(130306.0).zip)

I've used the Pass/Fail a bit more and still it hasn't crashed for me.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 24, 2013, 10:18:28 pm
only help.db is different, Tekway's firmware have as well two extra languages "Spanish.lan" and "Portugal.lan"
but it lacks "Chinese.lan" and "Tridchn.lan".

This might be already reason why something work or didn't work properly.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mike Warren on April 24, 2013, 10:28:33 pm
only help.db is different, Tekway's firmware have as well two extra languages "Spanish.lan" and "Portugal.lan"
but it lacks "Chinese.lan" and "Tridchn.lan".

This might be already reason why something work or didn't work properly.

That's really weird then. Surely different language files would not effect stability of the Pass/Fail. If it does, then there is some very poor programming being done.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 24, 2013, 10:55:26 pm
in principle only the set as active lan file is in use, all others are only loaded once during startup.
If there is somewhere memory overflow due wrong character in one of the lan files, then it can be that the
executable is crashing. Due all these foreign languages you never know.

On the other side, as i tested this fw version, i loaded only English.lan (which i do by default, everything else deleted)
but i had same pass/fail error, so hard to say what the problem was. Maybe indeed the help.db, which is definitely
loaded the whole time. I will test this tomorrow.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: NCG on April 26, 2013, 07:14:21 am
To clarify - the 2M capture works as selectable menu option:

* with hacked kernel check,
* suitable kernel,
* with files from BM/BMV.

Actual 2M capture does not work fully - the sample buffer size seems still to be 1M or there is some other glitch - a bit from capture is missing or the capture is folding back after 1M and is repeated - have to test with sweep signal to see how much and what is repeated or missing.

As I understand it, the CPLD design is exactly same for both handheld and benchtop. Handhelds have differing CPLD pin connected to SDRAM address pin SRA18 - are both CPLD pins (62 [benchtop] and 47[handheld]) then outputting simultaneously SRA18 signal on two CPLD pins?


Quote
btw NCG, you can switch to higher linux version by doing following stept:
1-  run http://embdev.net/articles/Tekway_MSO#Firmware_upgrade (http://embdev.net/articles/Tekway_MSO#Firmware_upgrade) to get Linux and MSO firmware
(with all these steps -> backup of your factory files, installation of MSO fw, resotre of your factory files)
2- install special BMV model firmware on your temp MSO model, http://www.mikrocontroller.net/topic/289260#3094394 (http://www.mikrocontroller.net/topic/289260#3094394)
You need to run the *dodso* file, http://www.mikrocontroller.net/attachment/173447/dst1kb_2.06.3_dodso.up (http://www.mikrocontroller.net/attachment/173447/dst1kb_2.06.3_dodso.up)
3- use the regular BM/BMV firmware once. You might consider changing logo as well, as described in this thread here somewhere.

yeah, here we go ... on your DSO(MSO) it is bad idea to use regular BM/BMV updates, they will of course replace the rcS,
for a regular B model user this does not matter, but for you it does as you have MSO.

For you make sense to use this solution

http://www.mikrocontroller.net/topic/289260#3126759 (http://www.mikrocontroller.net/topic/289260#3126759)

and then to copy (as you haev anyway network on your MSO) the unpacked firmware files instead of install them.
For sure this "sucks", on one side you have 2M on board, on the other side you have MSO.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on April 26, 2013, 09:26:45 am
Learned a lot lately, reading about toolchains and cross compiling. I am thinking about an utility to write characters to the frame buffer as part of a menu system before dso.exe is started. Specially the 'EDIT:' section in your post gave me the idea that it must be possible for me to set up the 'environment' and cross compile some stuff.

in the gpl code (e.g. for MSO) there is in "third_part" directory the 4.3.3 gcc toolchain, with all the libs whcih need to
be set in ldconfig flag. I made it very simple, created new directory in third_part, copied fpga code there, re-used make file
from "bmptogif", added section in make file in dir above nad in top dir - that's all. Now, when i compile kernel and drivers
and what so ever tools the fpga code will be compiled as well (with proper gcc, libs, etc. - no need to spend any unnecessary
second on that).

EDIT:
attached my sources and make files. All you need is to download the MSO GPL sources, install them into /opt/build/mso_env,
untar attached file to / and build it (make from /opt/build/mso_env or /opt/build/mso_env/third_part)

I have a 'MSO_env.tar.bz2' file, from a cd that comes with the Voltcraft MSO5062B. When I 'tar xvjf ~/MSO_env.tar.bz2' from a new /opt/build directory it looks like a complete environment: actually it untars to a 'dso_handheld_env'. A (sudo) 'make' from here ends in errors. As expected, since my host system is different from the one the 'environment' is copied from.

I guess this is what Tinhead means with: "install them into /opt/build/mso_env". But a 'configure' script is not available here, where do I start?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 26, 2013, 09:41:53 am
it does make sense to compare if the version you got from CD is the same as on website.

I'm using this one

http://www.eedownload.com:8888/mso.zip (http://www.eedownload.com:8888/mso.zip)

but there is also older version available

http://www.eedownload.com:7635/MSO_env.tar.zip (http://www.eedownload.com:7635/MSO_env.tar.zip)

You don't need to configure anything, simply make clean and make.
I had to, for some reason, to make first bootloader and then make all, probably because i missed first time to clean first.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on April 26, 2013, 10:19:33 am
I just started these new downloads, they will take some time since it's going slowwwwwwly. In the mean time I will compare the cd file with earlier downloads, from the suggested ones at the top of this thread or so.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: NCG on April 26, 2013, 07:06:47 pm
Had time to check it over- 2M seems to still adress 1M only. The signal is just sinus with continiously falling amplitude. First trigger with 2M mode also does not respond - waveform appears after second trigering. Also the save to USB function does not function at 2M.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on April 27, 2013, 10:22:21 pm
it does make sense to compare if the version you got from CD is the same as on website.

I'm using this one

http://www.eedownload.com:8888/mso.zip (http://www.eedownload.com:8888/mso.zip)

but there is also older version available

http://www.eedownload.com:7635/MSO_env.tar.zip (http://www.eedownload.com:7635/MSO_env.tar.zip)

You don't need to configure anything, simply make clean and make.
I had to, for some reason, to make first bootloader and then make all, probably because i missed first time to clean first.

About the newly downloaded (10 hours download time) GPL sources for the MSO : mso_env.tar.bz2:

Although this archive has a later date than the one from the cd it results in the same 'environment': directories and files have the same dates. And, as expected, 'make clean' and 'make' did not work correctly.
The 'bootloader first' trick did away with a faulty path variable, visible in the screen output, but still the process ended in errors. Here an 'old' path was set to '/home/GPL-Source/handheld_scope/project_handheld_dso/dso_handheld_env/bootloader/' while '/opt/build/mso_env/bootloader/' was intended.
Most prominent error: "/arm-linux-gcc : Command not found", while this file is indeed present. Looking for the dependencies I found /lib/ld-linux.so.2 file missing. Google learned me this is needed but missing on 64 bit systems, like mine. Can be solved by installing 'ia32-libs'. This provides the ability to run 32 bit programs and installed the missing file, amongst others.

Now my system is happily churning away on its 'make' task. It ends with an error: where it wants to do 'chmod 777 release/rootfs/dso/app/*', No such file or directory. But that is to be expected, I think, because that is where some non GPL utilities are supposed to go into. Now there's nothing there.

Another lesson learned.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 28, 2013, 09:46:20 am
Another lesson learned.

i spend half a day to fix all these things, that's why i have made vmware with "running debian env".

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: spaceman on April 29, 2013, 09:19:39 am
Hi

I am about to purchase a Hantek DSO1102B Oscilloscope,
and I would like to ask a small question..

Is it true that the Hantek Handhelds do not have a Wave Generator?


This is the model that I am about to purchase:
http://www.diyertool.com/measuring-equipment/oscilloscopes/handheld-digital-oscilloscope-hantek-dso1102b.html (http://www.diyertool.com/measuring-equipment/oscilloscopes/handheld-digital-oscilloscope-hantek-dso1102b.html)


Will I not have a Wave Generator in it? :/

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 29, 2013, 11:09:38 am
Hi

I am about to purchase a Hantek DSO1102B Oscilloscope,
and I would like to ask a small question..

Is it true that the Hantek Handhelds do not have a Wave Generator?

yes, only DSO8060 have wave generator
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: spaceman on April 29, 2013, 12:14:15 pm
yes, only DSO8060 have wave generator

hmm..

the DSO8060 is relatively an old model, If I understand correctly.
It's 60MHz, 250MSa/s.

Compared to the DSO1102B, which is 100MHz, 1GSa/s.


Since this will be my only scope,
Will it be a wise decision to buy it?  to buy a scope that does not include a Wave Generator?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: spaceman on April 29, 2013, 03:45:02 pm
Small Update:


In this image, in the top part of the DSO1060 we can see 2 terminals:
(http://toolboom.com/content_image/content/5087/Hantek_DSO1060_Handheld_Oscilloscope_3.jpg)

http://toolboom.com/en/Articles/Review-of-Hantek-DSO1060-Handheld-Oscilloscope-Oscilloscope-plus-Multimeter.html (http://toolboom.com/en/Articles/Review-of-Hantek-DSO1060-Handheld-Oscilloscope-Oscilloscope-plus-Multimeter.html)


That review says that the DSO1060 has a "connector output of square-wave generators".

Does the DSO1102B have those?
Can the Frequency an Voltage of that square wave be set?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 29, 2013, 04:30:07 pm
That review says that the DSO1060 has a "connector output of square-wave generators".

Does the DSO1102B have those?
Can the Frequency an Voltage of that square wave be set?

:)

this is 1kHz, 5Vpp square wave output for probe compensation, this is not a waveform generator nor awg generator.
You will find such probe compensation test signal on 99% DSOs, some with 1kHZ/1MHz, or 5MHz, some with 500mVpp, etc.

From Hantek product palette (as of today) only the DSO8060 have waveform generator (in this case AWG) functionality,
this is actually an "integrated DDS-3x25". The disadvantage of DSO8060 is of course the 250MS/s sample rate.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: spaceman on April 29, 2013, 04:59:38 pm
OK 1KHz won't be good :)..


From Hantek product palette (as of today) only the DSO8060 have waveform generator (in this case AWG) functionality,
this is actually an "integrated DDS-3x25". The disadvantage of DSO8060 is of course the 250MS/s sample rate.


I must say, very weird decision by Hantek.
It's a functionality that is easy to embed,
and more over, if they already wrot the UI for it, in the 8060, why not continue using it in all subsequent models..


OK,
since I really like the Hantek Handhelds,
my decision now should be:

1102B   (with 100MHz and 1GSa/s)
or
8060   (with 60MHz and 250MSa/s)


May I ask for your opinion?

I must admit that I am mostly playing with Microcontrollers, like Arduino and such..
I am not an expert..
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jellytot on May 07, 2013, 11:41:34 am
Well my Hantek DSO5102B  hw version 1005 is now unusable, over the past few months it was having difficulty passing its self calibration stopping at different parts of the calibration sequence.
I decided to remove the board to clean it as there was some flux deposit still visible.
Well after assembling it , it appeared to be working fine and passed calibration repeatedly, so I left it
overnight only to find that it started failing again the next day. and now it doesn't get pass test
25/36 failing with the error 0x702 and then rebooting, when i try to use the scope its measurements are all over the place any ideas as to what is happening? has it happened to anyone else, or have i just been unlucky, is it curable? anyone got a spare board for sale? Regards jellytot
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: NCG on May 08, 2013, 07:31:03 pm
Wild shot but for me the power connectors that go from PSU to main board were bit too loose - you can tell if the crashes sometimes end with white screen, also self cal did not finish. I had to separate the pins from the holder and press them individually to be bit more tight but simple reinserting of the plugs might also help.

failing with the error 0x702 and then rebooting, when i try to use the scope its measurements are all over the place any ideas as to what is happening? has it happened to anyone else, or have i just been unlucky, is it curable? anyone got a spare board for sale? Regards jellytot
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jellytot on May 09, 2013, 05:16:52 am
Thanks NCG. I tried what you suggested but I'm still getting the same error  :(
I think its just a lemon i.e. HW 1005, as I was always getting intermittant  calibration errors before this permanent fault.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jellytot on May 09, 2013, 07:12:42 am
Working!   ;D turns out to be a faulty relay. Now all I've got to do is restore my backup   :-\ anyone know if a dds generator is sufficiently accurate to use for calibrating, don't have anything decent at hand.  :(
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 09, 2013, 08:51:28 pm
Working!   ;D turns out to be a faulty relay. Now all I've got to do is restore my backup   :-\ anyone know if a dds generator is sufficiently accurate to use for calibrating, don't have anything decent at hand.  :(

cool, can you tell us which relay was broken ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: FrankBuss on May 09, 2013, 09:18:54 pm
- I actually made a couple of GPL request myself. One at Agilent for the 3000-X and another to vodafone. And in both cases I got the sources I asked for. Took time each time ( > 1 month ) but it worked out fine.
Which sources did you get? The Agilent DSO-X 3012A uses WindowsCE and a big custom written program and some custom libraries (I've disassembled it a bit, thanks the the firmware update image is not crypted). And once you have shell access, which you get e.g. if you connect the internal UART and then use u-boot to boot the image (with telnetd patched) over network, you can do interesting things on it. The main program has some nice command line parameters 8)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jellytot on May 10, 2013, 09:10:53 am
Hi Tinhead. Its the calibration relay ch1. As you probably know I have been having intermittent calibration errors going way back, but it started to get worse so I pulled out the mainboard and noticed a lot of flux residue so I did a bad bad thing. I put it in an ultrasonic safe wash bath, Not recommended   :-- according to the relay maker Nec. funny thing the unit worked ok for a few calibrations and I thought I'd fixed it. the next day it failed again repeatedly with the same error 0x702. I applied 5v to the relays and found that both in ch1 circuit were sticking.
I didnt have any spare relays so swopped the ch1 calibration relay with the trigger relay and it appears to be working. I suspect that there maybe faulty or damaged relays and have ordered some to swop them out. So not
100% certain until I replace them.
Tinhead I was thinking of restoring a backup as I deleted the factory calibration files but because I have changed  relays is it pointless restoring a backup ? I don't have good precise signal source to calibrate with. also my restore file is 69206016 while yours is 69206026 should it still work?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 10, 2013, 11:33:54 am
Tinhead I was thinking of restoring a backup as I deleted the factory calibration files but because I have changed  relays is it pointless restoring a backup ?  I don't have good precise signal source to calibrate with.

even if there could be small influence from new relays (they series resistance does not have any influence, the contact
capacity might be bit different and for sure parasitic capacitance from the solder), you don't have precise signal source,
so to restore backup is the best option.

also my restore file is 69206016 while yours is 69206026 should it still work?

where i wrote 69206026 ? It must be of course 69206016, thats exactly 66M (64M data and 2M oob bloks).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jellytot on May 11, 2013, 10:23:25 am

also my restore file is 69206016 while yours is 69206026 should it still work?

where i wrote 69206026 ?

From a screenshot on the restore instructions it mentions the file size transfered this is why I was worried  :)



(https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=17592)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jellytot on May 11, 2013, 10:44:15 am
 just a tip for anyone that's doing the restore, Don't forget to use the usb port at the rear and not the front as I was doing for over an hour  |O  trying different drivers for dnw until I realised  :-DD 
But happy to say it worked great in the end. Thanks again Tinhead for your great work on these scopes.   :-+
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on May 11, 2013, 10:51:42 am
just a tip for anyone that's doing the restore, Don't forget to use the usb port at the rear and not the front as I was doing for over an hour  |O  trying different drivers for dnw until I realised  :-DD 
But happy to say it worked great in the end. Thanks again Tinhead for your great work on these scopes.   :-+

How were you managing to hook together a USB Type A port (front of scope) to another USB Type A port (computer)?  ???
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 11, 2013, 10:59:08 am
just a tip for anyone that's doing the restore, Don't forget to use the usb port at the rear and not the front as I was doing for over an hour  |O  trying different drivers for dnw until I realised  :-DD 

yeah, dnw is sometimes tricky.

Btw, I've just tested once again, the size of full dump is and must be 69206016, however supervivi is displaying 69206026.
No idea why it's like that, but it is ^^

(https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=47082;image)


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jellytot on May 13, 2013, 04:07:22 am
How were you managing to hook together a USB Type A port (front of scope) to another USB Type A port (computer)?  ???
[/quote]
Hi marmad. Yes, that was my point,  I didn't think, know or research about the computer to computer communication using A to A type cables  :-[  I have used them in the past for e.g. external hdd and assumed it would work in this case  :( Fortunately no damage occured and I learned something new and so offered my experience as a tip to others possibly doing the same   ;D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Purevector on May 15, 2013, 04:12:08 pm
I'm pretty embarrassed to admit this, but I flashed my DSO5202B with firmware from an MSO5202D!!!

The scope power up, shows the logo and then a partial screen before it locks up and reboots due to the watchdog.

So, I have access to the shell through the UART and I have been able to stop the watchdog reset and I have copied a few DSO.exe files from this tread to the scope, but still no go.  I get a segmentation fault every time.

Can anyone help me please?  I did not make a backup before I flashed it.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 15, 2013, 05:52:47 pm
I did not make a backup before I flashed it.

 :wtf: ? ? ?

how you can not make backup??!!!

seriously, this is bad ass "bug", the MSO firmware can be flashed on DSO, partially of course, which breakes the DSO ...


So, I have access to the shell through the UART and I have been able to stop the watchdog reset and I have copied a few DSO.exe files from this tread to the scope, but still no go.  I get a segmentation fault every time.

download the latest DSO firmware, e.g.

http://www.hantek.com.cn/Product/DSO5000Series/DSO5202B_Firmware.zip (http://www.hantek.com.cn/Product/DSO5000Series/DSO5202B_Firmware.zip)

unzip it, decrypt the *.up file (gpg -d , pass is 0571tekway), guzip it, untar it and untar it again ... copy
then the content to usb falsh drive, insert flash drive to DSO, boot to shell, kill the dsod process
and copy following files from usb flash drive to DSO:

protocol.inf to /protocol.inf
dso.exe to /dso.exe
English.lan to /OurLanguages/English.lan
help.db to /help.db
dsod to /dso/app/dsod
rcS to /etc/init.d/rcS

you need to chmod 777 all these files as well.

Ttah's all, now after reboot the DSO should work as before.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Purevector on May 15, 2013, 06:14:59 pm
Hi tinhead,

Thanks for the help... done this but there is still a problem.  The unit boots and the display shows up, but none of the buttons work and there is no waveform on the screen.  There are a couple errors in the startup log.  Here they are:

kobject_register failed for usb_storage (-17)
insmod: can't insert '/dso/driver/dso-usbstorage.ko': File exists
S3C2410 USB Controller Core Initialized
USB Function Character Driver Interface - 0.5, (C) 2001, Extenex Corp.
usbctl: Opened for usb-char
usbctl: Started for usb-char
usbcore: registered new driver usblp
drivers/dso_drivers/usblp.c: v0.13: USB Printer Device Class driver
bwscon:0x2211d110
fpga bank 11811
dso-fpga: install ok
kobject_register failed for s3c2440-i2c (-17)
dso-i2c: can't register device
insmod: can't insert '/dso/driver/dso-i2c.ko': Device or resource busy
x gpio e: 0xaa0001a6, gpio g :0xfd62f19a , gdata:0x798c
dso-spi: install ok
dso-uart: install ok
dso-buzzer: install ok
0x60c
gpio_major_n = 6, io_minor_n = 12, output 1
fpga download file_name :/dn.rbf
dso-spi: open fpga file failed.
no update file to foud
now run app .....

Please press Enter to activate this console.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 15, 2013, 06:35:34 pm
looks like missing or wrong /dn.rbf file (the FPGA design)

go to

https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg170862/#msg170862 (https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg170862/#msg170862)

download the dn.rbf.zip file, unzip it, copy from folder dst1000B_models one of the latest dn.rbf file to DSO as /dn.rbf

When you have hw1007 model, the dn_hw1007_83E9_date111122.rbf should work for you. I remember i posted as well
the 83EB FPGA design, but yeah, both will work. When you have older model, you need to choose older design.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Purevector on May 15, 2013, 06:44:08 pm
tinhead you are my new best friend !!!!!   ;D

Everything works again - YAY  :-+ :-+ :-+
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 15, 2013, 07:14:02 pm
you welcome .. and make a backup (not that restore is faster than this what you did right now, but yeah, it is better to have one)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: paul on May 18, 2013, 10:35:55 pm
I finally got round to up dating the firmware to 130306 in my scope.

I am happy to say that the Delayed Sweep bug / weirdness is finally fixed, in all memory depths.

My last post on this bug,  https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg189044/#msg189044 (https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg189044/#msg189044)
And its detailed as bug 15 on Tinheads list, but it was not properly fixed until now in 130306.

I have been `working around` this bug for some time and I am glad to see it fixed.

Paul.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ayechon on May 19, 2013, 10:16:25 am
Hello,

I just bought a DSO1062B and I did changed to DSO1202B with "DSO-BW-Change" thanks to this excellent forum. I have firmware version 2.01.1 (120909.0) and would like to download the 2.01.1 release (130129.0). What firmware I should download of the site Hantek? DSO1062B or DSO1202B.

Thank you in advance ..
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 19, 2013, 10:42:15 am
What firmware I should download of the site Hantek? DSO1062B or DSO1202B.

the one for your current model name, not for the original name.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ayechon on May 19, 2013, 11:32:32 am
Thank you for your quick response.

  The update of the DSO with the file "dso1kb_2.01.1_DSO1202B up (130129.0)." return the message:

"Firmware update failed, error: 0xfe
No upgrade files on USB device detected!

ditto for "dso1kb_backup_tool.up" file

Thank you for your help.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 19, 2013, 11:51:14 am
take another flash drive, ensure only the *.up file is on the drive, let the DSO enumerate USB (you should see flash drive detected message) <- that's the typical things to watch during firmware update.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ayechon on May 19, 2013, 12:13:11 pm
After formatting the USB drive in FAT32 functioning OK.

 Tinhead thank you for your help.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ayechon on May 19, 2013, 01:44:46 pm
Hi,
How to read / write the "DISP" file using DSO-USB-Tool. I proceed as follows:
I select the Read / write File (F4) tab and in the Filename field I entered "/ DISP" then I clik on the "Read from DSO" button. This method does not work.

Thank you.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 19, 2013, 04:03:57 pm
Hi,
How to read / write the "DISP" file using DSO-USB-Tool. I proceed as follows:
I select the Read / write File (F4) tab and in the Filename field I entered "/ DISP" then I clik on the "Read from DSO" button. This method does not work.

Thank you.

did you installed the DSO drivers, and if which of them , the original or libusb?
On my computer libusb seems to works better (especially file/read write seems to be affected)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: oguz286 on May 19, 2013, 10:32:38 pm
I'm looking for a oscilloscope which is going to be my first and the Tekway DSO1062B looks like a really nice device.
If I were to order a new one today, would I still be able to perform the UART hack? Or did Tekway block it off in a new hard/firmware revision?

If it still is possible I'll be ordering a new one from pinsonne elektronik asap :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: electrollers on May 23, 2013, 01:04:18 pm
Hi

As the DSO-USB-Tool has a shell option to send comands to busybox. Is it possible to follow the procedure with that tool, without opening the case and soldering the UART?
For me is not a problem soldering, but this seems easyer.

Thanks

I'm looking for a oscilloscope which is going to be my first and the Tekway DSO1062B looks like a really nice device.
If I were to order a new one today, would I still be able to perform the UART hack? Or did Tekway block it off in a new hard/firmware revision?

If it still is possible I'll be ordering a new one from pinsonne elektronik asap :)
The answer seems to be yes, as nobody has said the contrary in the last posts.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 23, 2013, 01:16:57 pm
Hi

As the DSO-USB-Tool has a shell option to send comands to busybox. Is it possible to follow the procedure with that tool, without opening the case and soldering the UART?


sure, move/copy will work, edit (vi) of course not because this is not a real remote shell. So when you need to edit
e.g. the logotype.dis they you can copy to flash drive/edit on PC, or read/write from DSO to PC over read/write function in that
tool or echo new line into file (in case that work).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Yaksaredabomb on May 24, 2013, 04:06:39 pm
I'm looking for where I can get a Hantek DSO5102B in the USA.  I posted about it here:
LFS / WTB (USA) Hantek DSO5102B oscilloscope new or like new (https://www.eevblog.com/forum/buysellwanted/lfs-wtb-(usa)-hantek-dso5102b-oscilloscope-new-or-like-new/msg236386/#msg236386)

Not trying to intrude but thought I might get a few more responses if I post here, too, since there are so many in this thread that know a lot about this series of scopes.  Thanks for humoring me.

Edit:  Modified link to show topic title.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jebcom on May 25, 2013, 04:35:25 am
check circuit specialists
http://www.circuitspecialists.com/digital-storage-oscilloscopes (http://www.circuitspecialists.com/digital-storage-oscilloscopes)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Yaksaredabomb on May 26, 2013, 06:21:31 am
check circuit specialists
http://www.circuitspecialists.com/digital-storage-oscilloscopes (http://www.circuitspecialists.com/digital-storage-oscilloscopes)
Thanks jebcom!  Nice to have at least one option besides ebay, and their 30-day return option is nice to know about.
 
For anyone else, I'm still open to other sources or anyone's used model - please comment on my post in the Buy/Sell/Wanted forum if you have any help.
 
Now I'll stay out of this thread!  Thanks again for letting me intrude.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 28, 2013, 08:47:38 am
as few people asked for it, attached BSDL files for:

- Tekway DST1000(A) - SoC S3C2410
- Tekway/Hantek/Voltcraft/Extech B/BM/BMV/S series DSO/MSO/Handhelds, S/N < 15000 - SoC S3C2440
- Tekway/Hantek/Voltcraft/Extech B/BM/BMV/S/P series DSO/MSO/Handhelds, S/N > 15000 - SoC S3C2416

The S3C2416_bsdl file is as well good for Owon SDS users.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: oguz286 on May 28, 2013, 04:44:19 pm
Well I just changed my Voltcraft DSO-1062D to a DSO-1202D, and I think it went ok. I can select 4ns/div, so I guess it's ok now :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 28, 2013, 05:03:30 pm
Well I just changed my Voltcraft DSO-1062D to a DSO-1202D, and I think it went ok. I can select 4ns/div, so I guess it's ok now :)

you should have 2ns/DIV
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: oguz286 on May 28, 2013, 06:32:19 pm
Hmm, I followed this video: How to hack Hantek DSO5062B (https://www.youtube.com/watch?v=-9vMPzkMGls#ws)

I renamed the dst1062b file to dst1202b, adjusted sys.inf accordingly, and also adjusted tmpdst, logotype and logotype.dis.

Just in case it matters, here is the system information:
Model: DSO1202D
SW version: 2.06.3 (130306.0)
HW version: 10070x555583eb

EDIT: I do get an error that a logo file cannot be found for the 1202 version, but it boots up just fine.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 28, 2013, 06:59:00 pm
I renamed the dst1062b file to dst1202b, adjusted sys.inf accordingly, and also adjusted tmpdst, logotype and logotype.dis.

actually it is only necessary to rename the /dst1062b to /dst1202b
and (if you need boot logo) edit the /logotype.dis file

Everything else will be automatically changed after two reboots after you remaned the /dstxxxx file

Just in case it matters, here is the system information:
Model: DSO1202D
SW version: 2.06.3 (130306.0)
HW version: 10070x555583eb

is your serial number higher than 15000? (the last numbers)

Btw, there is no such model DSO1202D, so copy paste error or you really typed wrong name?
For the logotype.dis file, it is better to use something generic, like "hantek_DSO5202B", which
will give you then DSO5202B as model.

EDIT: I do get an error that a logo file cannot be found for the 1202 version, but it boots up just fine.
sure, but here somewhere in thread (haha) are all the logos you need (i think),
for the functionality it does not have any influence.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: oguz286 on May 28, 2013, 07:18:55 pm
I renamed the dst1062b file to dst1202b, adjusted sys.inf accordingly, and also adjusted tmpdst, logotype and logotype.dis.

actually it is only necessary to rename the /dst1062b to /dst1202b
and (if you need boot logo) edit the /logotype.dis file

Everything else will be automatically changed after two reboots after you remaned the /dstxxxx file


Hmm, ok, that's good to know.

Just in case it matters, here is the system information:
Model: DSO1202D
SW version: 2.06.3 (130306.0)
HW version: 10070x555583eb

is your serial number higher than 15000? (the last numbers)

My serial number is lower than 15000.

Btw, there is no such model DSO1202D, so copy paste error or you really typed wrong name?
For the logotype.dis file, it is better to use something generic, like "hantek_DSO5202B", which
will give you then DSO5202B as model.

Well, my model number is DSO-1062D, so I just changed that to DSO-1202D :P I'll change the logotype.dis file to hantek_DSO5202B, so I have a nice startup screen :)

EDIT: I do get an error that a logo file cannot be found for the 1202 version, but it boots up just fine.
sure, but here somewhere in thread (haha) are all the logos you need (i think),
for the functionality it does not have any influence.

188 pages...  :-DD I'll see if I can find them :)

EDIT: Removed serial number
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 28, 2013, 07:28:20 pm
you should maybe not post the serial here :)

Ok, havin the latest firmware (whcih is the case for you) you should have 2ns/DIV available if the
hack was successful, so there is something you did wrong.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Yaksaredabomb on May 28, 2013, 07:30:57 pm
EDIT: I do get an error that a logo file cannot be found for the 1202 version, but it boots up just fine.
sure, but here somewhere in thread (haha) are all the logos you need (i think), for the functionality it does not have any influence.
188 pages...  :-DD I'll see if I can find them :)
I might have seen the post you'd be looking for just earlier today or yesterday.  Wasn't able to find it quickly, but maybe this one will help:
 
https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg92830/#msg92830 (https://www.eevblog.com/forum/chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg92830/#msg92830)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 28, 2013, 07:53:22 pm
or here (i've added as well link on first thread page)

http://www.mikrocontroller.net/attachment/136103/all_logos.zip (http://www.mikrocontroller.net/attachment/136103/all_logos.zip)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Armageddon on May 28, 2013, 08:24:17 pm
as few people asked for it, attached BSDL files for:

- Tekway DST1000(A) - SoC S3C2410
- Tekway/Hantek/Voltcraft/Extech B/BM/BMV/S series DSO/MSO/Handhelds, S/N < 15000 - SoC S3C2440
- Tekway/Hantek/Voltcraft/Extech B/BM/BMV/S/P series DSO/MSO/Handhelds, S/N > 15000 - SoC S3C2416

The S3C2416_bsdl file is as well good for Owon SDS users.

Hi tinhead!
For Owon SDS?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 28, 2013, 08:55:40 pm
as few people asked for it, attached BSDL files for:

- Tekway DST1000(A) - SoC S3C2410
- Tekway/Hantek/Voltcraft/Extech B/BM/BMV/S series DSO/MSO/Handhelds, S/N < 15000 - SoC S3C2440
- Tekway/Hantek/Voltcraft/Extech B/BM/BMV/S/P series DSO/MSO/Handhelds, S/N > 15000 - SoC S3C2416

The S3C2416_bsdl file is as well good for Owon SDS users.

yes, Owon SDS series is using as well the same Samsung S3C2416 SoC as Hantek in their latest hardware revision
(all "P" models, all others with S/N > 15000)

Hi tinhead!
For Owon SDS?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Armageddon on May 28, 2013, 09:09:00 pm
Sorry, but:
 What is the purpose? What I can modify with this BSDL file?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 28, 2013, 09:26:45 pm
Sorry, but:
 What is the purpose? What I can modify with this BSDL file?

not modify, but e.g. use to reverse connections from. You need that BSDL file for boundary scan:

http://en.wikipedia.org/wiki/Boundary_scan (http://en.wikipedia.org/wiki/Boundary_scan)

with tools like
http://ricreations.com/JTAG-Software-Downloads.htm (http://ricreations.com/JTAG-Software-Downloads.htm)
http://www.topjtag.com/probe/ (http://www.topjtag.com/probe/)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sorin on May 31, 2013, 08:46:44 am
Hi!
Do you have any updated information about DSO5072P
You say: "there is complettly different SoC/new PCB"
Can this model be updated (hacked) with RAM memory?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 31, 2013, 09:41:40 am
Do you have any updated information about DSO5072P
You say: "there is complettly different SoC/new PCB"
Can this model be updated (hacked) with RAM memory?

bandwidth can be hacked for sure, what else no idea. All i have are some pictures from top PCB side,
but unfortunately no pictures from bottom side (i know 2ppl haveing P models, but for some reason they
not shot (yet? ever?) pictures from bottom side).

Here what i know so far:

If someone have one of these "P" models, please do a teardwon and shot some more pictures,
especially the bottom side of the PCB is complettly unknown yet


updated, check

https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg264085/#msg264085 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg264085/#msg264085)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: oguz286 on June 02, 2013, 10:12:31 am
Thank you for the help guys! Now I have a 200MHz schizophrenic oscillosope (Hantek logo :-DD).

Forgive my ignorance, but I just wondered... I can now select 2ns/div and 2ns is 500MHz. Does it have something to do with the sampling rate?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 02, 2013, 07:41:05 pm
I can now select 2ns/div and 2ns is 500MHz. Does it have something to do with the sampling rate?

absolute nothing together
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 02, 2013, 07:45:57 pm
Hi,

Lo

i have a cheap Fluke 124 Scopemeter.

Fluke 124 costs 1700USD, cheap is something else.

Would a Rigol 1052 perform better than this old Fluke Scopemeter?

rtfm

I don't need all the multimeter option of the fluke?

is that a question? we don't know what you might need or not, that's up to you.

and recommendation?

open a new thread ...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Loafdude on June 06, 2013, 12:59:16 am
Thanks Tin for all the work and information you have put forward here.
Very much appreciated.

Just modded a Hantek DSO5062BM

Tin,
Are you still needing copies of BM models backups? If so let me know. I can supply

The first post is a bit confusing with so much information strikethrough'ed
I appreciate its better to not delete the information though, maybe we can move it
The BM model backup firmware script is very difficult to find for new users (as you link to the B version in the instructions)

For everyones information here is the chk_base_volt from my unit

Code: [Select]
[8mv]167
[20mv]359
[400mv]403
[2000mv]1999

Here is the bootlog

Code: [Select]
*** Warning - bad CRC or NAND, using default environment



##### EmbedSky BIOS for SKY2440/TQ2440 #####
Press Space key to Download Mode !
Booting Linux ...
Copy linux kernel from 0x00200000 to 0x30008000, size = 0x00200000 ... Copy Kernel to SDRAM done,NOW, Booting Linux......
Uncompressing Linux... done, booting the kernel.
Linux version 2.6.30.4 (root@rain-fc4) (gcc version 4.3.3 (Sourcery G++ Lite 2009q1-176) ) #9 Mon Dec 12 11:50:21 CST 2011
CPU: ARM920T [41129200] revision 0 (ARMv4T), cr=c0007177
CPU: VIVT data cache, VIVT instruction cache
Machine: TQ2440
ATAG_INITRD is deprecated; please update your bootloader.
Memory policy: ECC disabled, Data cache writeback
CPU S3C2440A (id 0x32440001)
S3C24XX Clocks, (c) 2004 Simtec Electronics
S3C244X: core 400.000 MHz, memory 100.000 MHz, peripheral 50.000 MHz
CLOCK: Slow mode (1.500 MHz), fast, MPLL on, UPLL on
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
Kernel command line: noinitrd root=/dev/mtdblock2 init=/linuxrc console=ttySAC0
NR_IRQS:85
irq: clearing subpending status 00000002
PID hash table entries: 256 (order: 8, 1024 bytes)
Console: colour dummy device 80x30
console [ttySAC0] enabled
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 64MB = 64MB total
Memory: 61316KB available (3116K code, 333K data, 100K init, 0K highmem)
SLUB: Genslabs=11, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
Calibrating delay loop... 199.47 BogoMIPS (lpj=498688)
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
net_namespace: 296 bytes
NET: Registered protocol family 16
S3C2440: Initialising architecture
S3C2440: IRQ Support
S3C24XX DMA Driver, (c) 2003-2004,2006 Simtec Electronics
DMA channel 0 at c4808000, irq 33
DMA channel 1 at c4808040, irq 34
DMA channel 2 at c4808080, irq 35
DMA channel 3 at c48080c0, irq 36
S3C244X: Clock Support, DVS off
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
cfg80211: Calling CRDA to update world regulatory domain
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
NET: Registered protocol family 1
yaffs Sep 21 2011 16:15:16 Installing.
msgmni has been set to 119
alg: No test for stdrng (krng)
io scheduler noop registered (default)
s3c2440-uart.0: tq2440_serial0 at MMIO 0x50000000 (irq = 70) is a S3C2440
s3c2440-uart.1: tq2440_serial1 at MMIO 0x50004000 (irq = 73) is a S3C2440
s3c2440-uart.2: tq2440_serial2 at MMIO 0x50008000 (irq = 76) is a S3C2440
loop: module loaded
Driver 'sd' needs updating - please use bus_type methods
Driver 'sr' needs updating - please use bus_type methods
S3C24XX NAND Driver, (c) 2004 Simtec Electronics
s3c2440-nand s3c2440-nand: Tacls=2, 20ns Twrph0=3 30ns, Twrph1=2 20ns
NAND device: Manufacturer ID: 0xec, Chip ID: 0x76 (Samsung NAND 64MiB 3,3V 8-bit)
Scanning device for bad blocks
Creating 4 MTD partitions on "NAND 64MiB 3,3V 8-bit":
0x000000000000-0x000000040000 : "EmbedSky_Board_uboot"
0x000000200000-0x000000400000 : "EmbedSky_Board_kernel"
0x000000400000-0x000003ff8000 : "EmbedSky_Board_yaffs2"
0x000000100000-0x000000200000 : "EmbedSky_Board_logo"
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
s3c2410-ohci s3c2410-ohci: S3C24XX OHCI
s3c2410-ohci s3c2410-ohci: new USB bus registered, assigned bus number 1
s3c2410-ohci s3c2410-ohci: irq 42, io mem 0x49000000
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 2 ports detected
mice: PS/2 mouse device common for all mice
S3C24XX RTC, (c) 2004,2006 Simtec Electronics
s3c2410-rtc s3c2410-rtc: rtc disabled, re-enabling
s3c2410-rtc s3c2410-rtc: rtc core: registered s3c as rtc0
Linux video capture interface: v2.00
S3C2410 Watchdog Timer, (c) 2004 Simtec Electronics
s3c2410-wdt s3c2410-wdt: starting watchdog timer
s3c2410-wdt s3c2410-wdt: watchdog active, reset abled, irq enabled
mapped channel 0 to 0
s3c2440-sdi s3c2440-sdi: powered down.
s3c2440-sdi s3c2440-sdi: initialisation done.
Advanced Linux Sound Architecture Driver Version 1.0.18a.
No device for DAI UDA134X
No device for DAI s3c24xx-i2s
S3C24XX_UDA134X SoC Audio driver
UDA134X SoC Audio Codec
asoc: UDA134X <-> s3c24xx-i2s mapping ok
s3c2440-sdi s3c2440-sdi: powered down.
ALSA device list:
  #0: S3C24XX_UDA134X (UDA134X)
TCP cubic registered
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
lib80211: common routines for IEEE802.11 drivers
s3c2410-rtc s3c2410-rtc: setting system clock to 2013-06-05 11:33:53 UTC (1370432033)
yaffs: dev is 32505858 name is "mtdblock2"
yaffs: passed flags ""
yaffs: Attempting MTD mount on 31.2, "mtdblock2"
yaffs_read_super: isCheckpointed 0
VFS: Mounted root (yaffs filesystem) on device 31:2.
Freeing init memory: 100K
__init s3c24xxfb_probe
setting vert: up=29, low=13, sync=3
setting horz: lft=40, rt=40, sync=48
s3c2410fb_activate_var
S3C2410_LCDCON1_CLKVAL(default_display->setclkval)=1
Console: switching to mono frame buffer device 100x30
fb0: s3c2410fb frame buffer device
var.xres=800
var.yres=480
var.bits_per_pixel=8
var.xres_virtual=800
var.yres_virtual=480
fix.id=s3c2410fb
fix.smem_start=866123776
fix.smem_len=768000
fix.type=0
fix.type_aux=0
fix.xpanstep=0
fix.ypanstep=0
fsetting vert: up=29, low=13, sync=3
setting horz: lft=40, rt=40, sync=48
s3c2410fb_activate_var
S3C2410_LCDCON1_CLKVAL(default_display->setclkval)=1
ix.ywrapstep=0
fix.line_length=800
argv[1]=16
var.xres=800    var.yres=480    var.bits_per_pixel=16
show logo,video_buf_size = 768000
bwscon:0x2201d110
fpga bank 221422
dso-fpga: install ok
dso-spi initialized
Init spi success!
New Log Write OK Length:21
open spi error
dm9000 Ethernet Driver, V1.31
dm9000 dm9000.0: read wrong id 0x002a0028
dm9000 dm9000.0: read wrong id 0xffffffff
dm9000 dm9000.0: read wrong id 0xffffffff
dm9000 dm9000.0: read wrong id 0xffffffff
dm9000 dm9000.0: read wrong id 0x2b2a2928
dm9000 dm9000.0: read wrong id 0xff2a2928
dm9000 dm9000.0: read wrong id 0x2b2a2928
dm9000 dm9000.0: read wrong id 0xffffffff
dm9000 dm9000.0: wrong id: 0xffffffff
dm9000 dm9000.0: not found (-19).
Try to bring eth0 interface up ...
Hantek GPIO(buzzer/speaker),(c)20110309
gpioG11 initialized
speaker on
Beep
ifconfig: SIOCGIFFLAGS: No such device
dso-buzzer initialized
ifconfig: SIOCSIFHWADDR: No such device
ifconfig eth0 hw ether 10:23:45:67:89:ab
ifconfig: SIOCSIFADDR: No such device
ifconfig eth0 192.168.1.55 netmask 255.255.255.0 up
/sbin/net_set: line 5: route: not found
add default gw 192.168.1.2
Done
i2c /dev entries driver
s3c2440-i2c s3c2440-i2c: slave address 0x10
pdata->frequency=6000
s3c2440-i2c s3c2440-i2c: bus frequency set to 9 KHz
s3c2440-i2c s3c2440-i2c: i2c-0: S3C I2C adapter
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
s3c2410_udc: debugfs dir creation failed -19
s3c2440-usbgadget s3c2440-usbgadget: S3C2440: increasing FIFO to 128 bytes
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$4s3c2410_udc_disable()
g_serial gadget: Gadget Serial v2.4
g_serial gadget: g_serial ready
s3c2440_clkcon=00FF7FF0
fpga download file_name :/dn.rbf
status: 0x1
fpga_down_load file name : /dn.rbf.
data DOWN finish.
dso-spi:FPGA_DOWNLOAD ok.
release
no update file to foud
now run app .....
var.xres=800
var.yres=480
var.bits_per_pixel=16
var.xres_virtual=800
var.yres_virtual=480
fix.id=s3c2410fb
fix.smem_stasetting vert: up=29, low=13, sync=3
setting horz: lft=40, rt=40, sync=48
s3c2410fb_activate_var
S3C2410_LCDCON1_CLKVAL(default_display->setclkval)=1
rt=866123776
fix.smem_len=768000
fix.type=0
fix.type_aux=0
fix.xpanstep=0
fix.ypanstep=0
fix.ywrapstep=0
fix.line_length=1600
argv[1]=8
var.xres=800    var.yres=480    var.bits_per_pixel=8

Please press Enter to activate this console. s3c2440_clkcon=00FF7FF0
cannot open lcd
: No such file or directory
cannot open lcd
: No such file or directory

[root@Hantek /]#

There was no watchdog on my unit
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 07, 2013, 08:42:35 am
Thanks Tin for all the work and information you have put forward here.
Very much appreciated.
Just modded a Hantek DSO5062BM

you welcome

Tin,
Are you still needing copies of BM models backups? If so let me know. I can supply

no, i got few days ago latest dump from another user, but thanks for asking.

The first post is a bit confusing with so much information strikethrough'ed
I appreciate its better to not delete the information though, maybe we can move it
The BM model backup firmware script is very difficult to find for new users (as you link to the B version in the instructions)

yeah, i will edit it, or probably better write from scratch.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sparkybg on June 07, 2013, 11:59:49 pm
Hi,

I have just updated my Hantek DSO1062B handheld with the newest firmware from hantek's site 2.01.1 (130129.0) and discovered several bugs (when beep is on and you move cursor, it beeps even if you push and hold the direction buttons, trigger level is erratic - it sets lower trigger level than indicated), and I want to go back to the older firmware.

Does anyone have a firmware older than 2.01.1 (130129.0)? My older was 2.01.1 (12xxxxx.x), and it was OK, more or less, but I don't have it anymore and I cannot revert back to it.

Thanks.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 08, 2013, 12:07:16 am
2.01.1_DSO1202B(121229.0)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 08, 2013, 12:08:14 am
2.01.1_DSO1202B(121109.0).zip
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 08, 2013, 12:15:52 am
and finally 2.01.1_DSO1202B(120701.0)


To downgrade you will have to
 -downlad these file,
 -unzip the *.up file
 -decrypt the *.up file by "gpg -d --passphrase 111111"
 -guzip the content
 - untar the content
 - unatar again the content
 - copy manally the dso.exe to your handheld root dir (/dso.exe)
 - replace the language files (e.g. /OurLanguages/English.lan) with these from the downgrade firmware

To copy files you can simply use that tool directly

http://peter.dreisiebner.at/dso-usb-tool/ (http://peter.dreisiebner.at/dso-usb-tool/)

or indicrect together with flash drive (e.g. copy iles to flash, use that tool shell tab to cpy from flash drive,
which is then /mnt/udisk/ to DSO )
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sparkybg on June 08, 2013, 06:58:38 pm
WOW! Very helpful. Thanks! :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sparkybg on June 08, 2013, 09:10:37 pm
I have changed the BW to 200Mhz and upgraded to 1202 latest firmware (130xxxx). Everything is fine now. Thanks again.

And one more question - when I turn on the unit and it is still cool, the fan starts blowing for some time, and then stops despite that the unit heats up. The BNC connectors becomes hot enough that it is hard to keep my finger on them for more than 3-4 seconds, and the fan is still off.

Is this a normal behaviour?

Fan test works (the fan blows when "open" and does not blow when "close).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mikett on June 08, 2013, 09:12:22 pm
Hi All,

I have a 2 year old Hantek DSO5102B moded for 200MHz.
This machine used to work fine but has been unused for about 6 months until yesterday when I switched it on
and the screen froze on 200ms/1volt and the only front panel leds on are AUTO SET, RUN/STOP and
CH1 MENU.
No keys are responsive and the terminal Linux boot up is attached.
Any one experienced this before and could it be the hardware or possibly NAND flash corruption.
Thanks.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 09, 2013, 01:26:57 am
I have changed the BW to 200Mhz and upgraded to 1202 latest firmware (130xxxx). Everything is fine now. Thanks again.

And one more question - when I turn on the unit and it is still cool, the fan starts blowing for some time, and then stops despite that the unit heats up. The BNC connectors becomes hot enough that it is hard to keep my finger on them for more than 3-4 seconds, and the fan is still off.

Is this a normal behaviour?

Fan test works (the fan blows when "open" and does not blow when "close).

no, i don't think so. Do default setup first, then let the fan better in "open" position, wait a minute (to ensure setup saved)
and power cycle DSO. I think it will work then properly (i hope).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 09, 2013, 01:30:35 am
Any one experienced this before and could it be the hardware or possibly NAND flash corruption.

it seems that the /dso.exe is crashing. Maybe is a good idea to copy manually /dso.exe and at least
/OurLanguages/English.lan from a latest firmware to the DSO, then reboot and run regular firmware update.

To copy manually you can use flash drive (and remote shell over uart or that DSO tool http://peter.dreisiebner.at/dso-usb-tool/ (http://peter.dreisiebner.at/dso-usb-tool/))
You will need of course to decrypt/unpak the firmware:
 - decrypt the *.up file by "gpg -d --passphrase 0571tekway"
 - guzip the content
 - untar the content
 - unatar again the content

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mikett on June 09, 2013, 11:07:00 am
Thank's tinhead.
I have no idea how to:

decrypt the *.up file by "gpg -d --passphrase 0571tekway"
 - guzip the content
 - untar the content
 - unatar again the content

Where do I get the "gpg.exe" and "guzip.exe" from. Can it done on a Windows platform
Better still does anyone have all the components already extracted from the latest released software.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 09, 2013, 11:20:25 am
Where do I get the "gpg.exe" and "guzip.exe" from. Can it done on a Windows platform

wow, that must be hard to get .. is it?

Honestly, it is really that hard to google for "gpg windows" or "gunzip windows" ?
e.g. http://gpg4win.org/ (http://gpg4win.org/)

and untar/unzip/gunzip can be doe for example with TotalCommander (it will autodetect content and unpack,
so yuo can click, and click and click once again to gunzip/untar/untar )


Better still does anyone have all the components already extracted from the latest released software.

you need to do something on your own, even if i give you these file, i can't copy them for you, nor install device driver
nor the software to be able to connect to DSO.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 09, 2013, 11:20:43 am
i've uploaded newest firmware for following 1M models

 - Tekway DST1062B, DST1102B, DST1202B
 - Hantek DSO5062B, DSO5102B, DSO5202B
 - Voltcraft DSO3062C, DSO1062D
 - PCE DSOs: PCE-DSO5062B, PCE-DSO5102B, PCE-DSO5202B

here : http://www.mikrocontroller.net/attachment/181556/dst1kb_2.06.3_15202b_fact_130425.0_.up (http://www.mikrocontroller.net/attachment/181556/dst1kb_2.06.3_15202b_fact_130425.0_.up)

and for following 2M models

 - Hantek DSO5062BM, DSO5102BM, DSO5202BM
 - Hantek DSO5062BMV, DSO5102BMV, DSO5202BMV

here : http://www.mikrocontroller.net/attachment/181558/dst1kb_2.06.3_5202bmv_f_130425.0_.up (http://www.mikrocontroller.net/attachment/181558/dst1kb_2.06.3_5202bmv_f_130425.0_.up)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sparkybg on June 09, 2013, 12:24:51 pm
Everything can be done with 7zip or winrar.

I've used cryptophane for decryption. It is very easy to use software:
https://code.google.com/p/cryptophane/downloads/list

Tinhead, the fan still does not work properly. Maybe I will have to make small fan controller to make it work as it should work or just turn on the fan on constantly.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 09, 2013, 03:41:29 pm
there is a driver running, which controls - based on temp sensor - the fan. I propose you check if the driver is running properly it might be bug as well, who knows, i don't have any handheld anymore).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sparkybg on June 09, 2013, 03:52:32 pm
I will check it. If there is a driver/sensor, it is on the front side of the pcb. I will have to dismantle the unit completely to check out.

Thanks.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mikett on June 09, 2013, 09:05:30 pm
Thank you tinhead and others. The process wasn't  too bad afterall.

I fixed the Hantek by replacing the dso.exe, language and two files in the /lib/ directory.
I then updated the firmware as usual with a flash disk.

I used this gpg command:
gpg2 -d --passphrase 0571tekway dst1kb_2.06.3_15202b_fact_130425.0_.up >> bbb
Then (winrar bbb) to  get the (tekwayup_client) directory.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: brainwash on June 15, 2013, 01:14:46 am
This does not quite fit into the firmware thread but I have regular problems with the supply connector: every three months or so I have to open the scope and refit the connectors. I've bent the odd and even pins a little in the opposite ways and tightened the female plugs a bit but I'm not sure how well this will hold up. Is there any other way to avoid the regular 'white screen' problem?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mike Warren on June 15, 2013, 01:19:22 am
This does not quite fit into the firmware thread but I have regular problems with the supply connector: every three months or so I have to open the scope and refit the connectors. I've bent the odd and even pins a little in the opposite ways and tightened the female plugs a bit but I'm not sure how well this will hold up. Is there any other way to avoid the regular 'white screen' problem?

With mine, the white screen was caused by the flex cable (FPC) not being seated properly. Are you sure that's not the case with yours? You may just be bumping it each time you reseat the power supply connector.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: brainwash on June 15, 2013, 02:19:08 am
Not consciously, but probably when taking the shield off it is moved a bit. But I think when I tried powering it on with the shield off it also presented the white screen, some time ago, so I'm putting my money on one of the connectors.
I'm already thinking of putting some hot glue or other similar fixing stuff there but I don't bang my scope on the bench so see no reason for that. The funny thing is that it usually stops working after a long period of non-usage, not when using it.
Edit: with this problem, all of the time it starts up fine but then the screen stops working after 1-10 minutes. Cycling power solves the issue for another minute or so.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mike Warren on June 15, 2013, 03:18:30 am
I would still be inclined to disconnect and reconnect the FPC to the screen. It's quite common for faults to behave exactly as you describe. The connection is only just being made and broken by movement caused by small temperature changes, and can cause the fault to be intermittent.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 15, 2013, 04:24:07 pm
"white screen" is coming from the 5V rail, which is used for TFT backlight (when there is not enought current display goes white).
So it can be the FPC (on both sides of course) but as well the power supply connector (JST XH 5S plug/socket) ... these used in DSO
are one hung low brand, that could be the reason.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 15, 2013, 09:08:44 pm
XY "Easter Egg" (undocummented XY color mode):

set mode to XY, Persistency to Auto, go to Utility -> Page3/3 -> Option and push F5 to change XY color
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Hydrawerk on June 16, 2013, 05:19:56 pm
I am still looking forward to Dave's review of this Tekway scope... https://pbs.twimg.com/media/BMI6-1sCMAEse4e.jpg
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 16, 2013, 07:52:32 pm
so far i know he did it, but probably not edited/uploaded yet or simply decided to publish it "later" as 3 DSOs within
3 weeks might be too much at once for some users.

I don't know if he covered all the "hidden" things, like e.g. Recorder or Marker (marmad spoke about in his review)
or triggered XY mode or lot of the other things you might not see directly or might not recognize as "special" without
deep look on it. Example the Recorder; it is at first look simply recorder, but you have to check deeper to see what
you can do with it and what others can't :

https://www.eevblog.com/forum/testgear/is-rigol-ds1052e-still-the-best-option-in-its-class/msg246917/#msg246917 (https://www.eevblog.com/forum/testgear/is-rigol-ds1052e-still-the-best-option-in-its-class/msg246917/#msg246917)

I'm sure he will have a rant about the 1M/2M memory slowing the front panel/UI response to "worm speed"
(no, not worm hole speed, not light speed ^^).

But that's will be ok for "first impression" video, it would be not fair to do deep review and try to find "possitive"
things on Tekway/Hantek when he not did that for Owon or especially Instek (which is in higher price/quality class).

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Hydrawerk on June 16, 2013, 08:52:24 pm
Marmad's Tekway scope was full of bugs in 2011, but it changed, I hope...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Hydrawerk on June 17, 2013, 05:33:24 pm
This thread is too long to search...
Was there ever any serious issue with this scope like the well-known Owon noise problem?
Not a single wrong unit, but many of them? AFAIK not, but?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 17, 2013, 11:38:54 pm
AFAIK not, but?

but what? Are you looking for somethign special? Something that is bad or not that good?


Was there ever any serious issue with this scope like the well-known Owon noise problem?
Not a single wrong unit, but many of them?

oh yes, there was between Feb 2011 and Jun 2011 hardware revision hw1005.
That was first revision made by Hantek, and it was not working as expected.
There was a difference between production and test unit, the FPGA design was
just a bit over the limit, so while sampling with 1GS/s there was a lot of distortion
making these DSO useless at 1GS/s.

I can't tell you how many units was affected exact, but it was something like 90%

The remaining 10% got special FPGA deisgn, making them bit more noisy but stable.
As a long term solution Hantek re-designed the PCB and fixed these issues with
hw1007 (which is since then still the latest hw revision for 1M/2M DSOs and MSOs)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Hydrawerk on June 18, 2013, 12:29:55 am
Thanks. So it was solved two years ago, it's OK.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jyo on June 20, 2013, 02:29:37 pm
oh yes, there was between Feb 2011 and Jun 2011 hardware revision hw1005.
That was first revision made by Hantek, and it was not working as expected.
There was a difference between production and test unit, the FPGA design was
just a bit over the limit, so while sampling with 1GS/s there was a lot of distortion
making these DSO useless at 1GS/s.

I can't tell you how many units was affected exact, but it was something like 90%

The remaining 10% got special FPGA deisgn, making them bit more noisy but stable.
I (unfortunately) got a hw1005 on april 2011 (I was happy to have a new - better - hardware at that time  :palm:)
Is there a way to know if I'm 10% happy or 90%...?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rf-loop on June 20, 2013, 04:15:30 pm
It was "interesting" time.

One sample from many kind of document images. (and there is lot of, and many different tests, not only just this)

And note: This is from APRIL 2011

This is history. This must not connect with today Hantek equipments.



But today it can show becouse all this terrible hassle have been over long time ago. Just "fun" history.

This happend when designer did not have enough experience and knowledge about what he was doing.



(I have always made "pre-ageing" and tests for every single scope I have sell.
What ever model or brand it is. Also other new equipments. All go to burn in tests before accepted for sell. failed units stop to my barrier and did not go to end users. This is one reason why I do not so much admire these re-shipper sellers who only receive parcels, get orders and send parcels to end users. But cheapest price win - of course, or is it so...

In this time average was around 50% failed after arrive from factory.


Here one fun sample image.
Signal is around 16MHz quite clean sinewave from medium grade generator HP8657B.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 20, 2013, 11:27:51 pm
I (unfortunately) got a hw1005 on april 2011 (I was happy to have a new - better - hardware at that time  :palm:)
Is there a way to know if I'm 10% happy or 90%...?

yeah, you was not the only person who was "happy" to got newest hardware.

10/90% check is simple, when your DSO is working and you don't have such massive distorted/modulated signal like on the pictures which rf-loop posted just above my respone then your DSO is in 10% group.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Strada916 on June 24, 2013, 01:07:09 pm
Looking at buy this one

http://www.ebay.com.au/itm/Hantek-DSO5102P-Digital-Oscilloscope-100MHz-1Gs-2CH-7-TFT-Compared-TEK-TDS2012-/121080518250?pt=BI_Oscilloscopes&hash=item1c30f6166a (http://www.ebay.com.au/itm/Hantek-DSO5102P-Digital-Oscilloscope-100MHz-1Gs-2CH-7-TFT-Compared-TEK-TDS2012-/121080518250?pt=BI_Oscilloscopes&hash=item1c30f6166a)

I have read through most of the 121 pages here and I am confused whether this scope can be hacked to 200MHz or not. As the 60MHz model is about $100 more expensive.

Sorry if it has been asked already.

Nick

 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: camhguh on June 24, 2013, 01:17:12 pm
Most recent price on Ebay.co.uk  :)

£141 ($215)

http://www.ebay.co.uk/itm/Hantek-DSO5072P-Digital-Oscilloscope-70MHz-1Gs-2CH-7-TFT-WVGA-800x480/121089632989?_trksid=p5197.m1992&_trkparms=aid%3D111000%26algo%3DREC.CURRENT%26ao%3D1%26asc%3D14%26meid%3D8603200750016102662%26pid%3D100015%26prg%3D1006%26rk%3D1%26sd%3D121089632989%26 (http://www.ebay.co.uk/itm/Hantek-DSO5072P-Digital-Oscilloscope-70MHz-1Gs-2CH-7-TFT-WVGA-800x480/121089632989?_trksid=p5197.m1992&_trkparms=aid%3D111000%26algo%3DREC.CURRENT%26ao%3D1%26asc%3D14%26meid%3D8603200750016102662%26pid%3D100015%26prg%3D1006%26rk%3D1%26sd%3D121089632989%26)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 24, 2013, 01:17:36 pm
I have read through most of the 121 pages here and I am confused whether this scope can be hacked
to 200MHz or not. As the 60MHz model is about $100 more expensive.

Nick,

what a waste of time, you have to read only my very first posting on the very first page of this thread.
Just search on that first page for "P" model

But i can make it even easier for you, let summirize what i wrote there:
 
 - P model schematic - not done as i don't have P model to play with it
 - pictures/other information about P model - no, i need help from P model owners
 - backup tool - no, i need as well help from P model owners
 - hack - afaik yes (60->100 tested, no evidence in firmware that 200 would not work)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sorin on June 24, 2013, 01:20:26 pm
Looking at buy this one

http://www.ebay.com.au/itm/Hantek-DSO5102P-Digital-Oscilloscope-100MHz-1Gs-2CH-7-TFT-Compared-TEK-TDS2012-/121080518250?pt=BI_Oscilloscopes&hash=item1c30f6166a (http://www.ebay.com.au/itm/Hantek-DSO5102P-Digital-Oscilloscope-100MHz-1Gs-2CH-7-TFT-Compared-TEK-TDS2012-/121080518250?pt=BI_Oscilloscopes&hash=item1c30f6166a)

I have read through most of the 121 pages here and I am confused whether this scope can be hacked to 200MHz or not. As the 60MHz model is about $100 more expensive.

Sorry if it has been asked already.

Nick

https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg239898/#msg239898 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg239898/#msg239898)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Strada916 on June 24, 2013, 02:44:48 pm
thanks will keep reading. And researching
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on June 25, 2013, 02:22:14 am
Just watched dave's review and as an owner of this scope I'd like to know if anyone has any clue about why is the analog frontend makes the captured signal "jump all over the place", could it be his hardware revision? How can I test without that fancy evaluation board he got?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RobB on June 25, 2013, 10:33:14 am
Just watched dave's review and as an owner of this scope I'd like to know if anyone has any clue about why is the analog frontend makes the captured signal "jump all over the place", could it be his hardware revision? How can I test without that fancy evaluation board he got?


check out Alan's channel. He has a very simple squarewave generator with fast rise time. It should be able to stress the scope enough.
BTW I tested the holdoff-crash thing Dave showed on my scope. no sign of a crash. Indeed the scope has never crashed on me.

Cheap and simple TDR using an oscilloscope and 74AC14 Schmitt Trigger Inverter (https://www.youtube.com/watch?v=9cP6w2odGUc#ws)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Winston on June 25, 2013, 02:53:19 pm
My tiny little brain has an overtemp migraine from reading this thread, so I'll be asking some questions that are probably already answered within this thread:

1. What is the out of box defective rate for Hantek DSO5102 scopes in 2013?  rf-loop's image of the response to the same 16MHz sine wave of four different copies of the same Hantek model  looks pretty scary.  It also makes me seriously wonder if the horrible pulse response Dave got in his review of the Tekway DST1102B may have been due to a defective scope front end and maybe just in one channel (assuming that the Tekway and Hantek use the same main board).

2. What is the difference, if any, between a Hantek DSO5102B and a DSO5102P?  No US suppliers I see on eBay carry the P model, those are only available directly from China, but I'd prefer buying from a supplier in the US in case there are issues with the scope right out of the box.

3. Does the Hantek DSO5102 use the same on-screen menu structure and font as the Tekway DST1102 shown in Dave's review?  The same hardware?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: andersm on June 25, 2013, 04:01:52 pm
2. What is the difference, if any, between a Hantek DSO5102B and a DSO5102P?
B has 1M memory (http://www.hantek.com/english/produce_list.asp?unid=78), P has only 24K (http://www.hantek.com/english/produce_list.asp?unid=160). Other than that, the specs look identical.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 25, 2013, 04:13:03 pm
2. What is the difference, if any, between a Hantek DSO5102B and a DSO5102P?
B has 1M memory (http://www.hantek.com/english/produce_list.asp?unid=78), P has only 24K (http://www.hantek.com/english/produce_list.asp?unid=160). Other than that, the specs look identical.

and "P" model have brand new mainboard (which contains different SoC and DDR memory), newer Linux (3.x).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Winston on June 25, 2013, 06:29:04 pm
and "P" model have brand new mainboard (which contains different SoC and DDR memory), newer Linux (3.x).
Thanks for that info.  Found the web page for the "P" version and it looks like it's just an attempt to lower the cost of the scope which makes sense with the lower memory count.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Winston on June 25, 2013, 06:33:59 pm
2. What is the difference, if any, between a Hantek DSO5102B and a DSO5102P?
B has 1M memory (http://www.hantek.com/english/produce_list.asp?unid=78), P has only 24K (http://www.hantek.com/english/produce_list.asp?unid=160). Other than that, the specs look identical.
Thanks, couldn't find any specs on the Hantek site, they just listed their "DSO5000C Series" with no real info on it in English.

Whoops, just found some info on a Hantek site, might have been on a satellite site of some kind before.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 25, 2013, 06:42:28 pm
and "P" model have brand new mainboard (which contains different SoC and DDR memory), newer Linux (3.x).
Thanks for that info. 

Other than the smaller amount of memory, is that new mainboard better than the old mainboard or did they simply redesign it to lower production costs? 

they redesigned the PCB because the main SoC is EOL. Now they using Samsung S3C2416 instead of S3C2440.

Was the Hantek DSO5102B with the older mainboard just the Tekway DST1102B hardware and firmware sold under a different brand name?

afaik Hantek nd Tekway belongs to same shareholders, they did a merger to optimize production costs. On the other side they selling still under own names (even if firmware is actually owned by Tekway and mainbaord produced by Hantek) and Tekway costs more (on the other side i know they running burn-out tests). What else behind, no idea, this is all they told me.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Winston on June 25, 2013, 06:48:42 pm
and "P" model have brand new mainboard (which contains different SoC and DDR memory), newer Linux (3.x).
Thanks for that info. 

Other than the smaller amount of memory, is that new mainboard better than the old mainboard or did they simply redesign it to lower production costs? 

they redesigned the PCB because the main SoC is EOL. Now they using Samsung S3C2416 instead of S3C2440.

Was the Hantek DSO5102B with the older mainboard just the Tekway DST1102B hardware and firmware sold under a different brand name?

afaik Hantek nd Tekway belongs to same shareholders, they did a merger to optimize production costs. On the other side they selling still under own names (even if firmware is actually owned by Tekway and mainbaord produced by Hantek) and Tekway costs more (on the other side i know they running burn-out tests). What else behind, no idea, this is all they told me.

OK, thank you for that very helpful info.  It really clarifies things.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Erwin Ried on June 29, 2013, 06:53:48 am
Hello!

Is this model compatible with the hack?
Hantek DSO5072P Digital Oscilloscope 70MHz 1Gs 2CH 7" TFT WVGA(800x480)
http://www.ebay.com/itm/121089632989 (http://www.ebay.com/itm/121089632989)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 29, 2013, 08:38:11 am
Hello!

Is this model compatible with the hack?
Hantek DSO5072P Digital Oscilloscope 70MHz 1Gs 2CH 7" TFT WVGA(800x480)
http://www.ebay.com/itm/121089632989 (http://www.ebay.com/itm/121089632989)

everything you need ti know is posted here

https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg21170/#msg21170 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg21170/#msg21170)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Erwin Ried on June 29, 2013, 04:01:13 pm
Hello!

Is this model compatible with the hack?
Hantek DSO5072P Digital Oscilloscope 70MHz 1Gs 2CH 7" TFT WVGA(800x480)
http://www.ebay.com/itm/121089632989 (http://www.ebay.com/itm/121089632989)

everything you need ti know is posted here

https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg21170/#msg21170 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg21170/#msg21170)

Yes I know, sorry if it looks I was being lazy but in this kind of things the devil is always on the details (much like with phones, consoles... you usually have to screw/brick it once to learn :D). Is there a way to know if that current item is supported? I assume it wont have the backup utility (and I am certainly trying to help in that matter) 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 29, 2013, 04:33:26 pm
as i write on the first page - hackable - yes, backup tool - no, not yet (but you can copy all important files manually to flash drive)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: geostep on June 30, 2013, 02:30:31 pm
Just watched dave's review and as an owner of this scope I'd like to know if anyone has any clue about why is the analog frontend makes the captured signal "jump all over the place", could it be his hardware revision? How can I test without that fancy evaluation board he got?

I have the Hantek DSO 5102B@200 MHz (equivalent to the Tekway in Dave's review).  I'd really like to know more as well. Any thoughts on this guys?  Tinhead?
That ringing Dave discovered really is horrible.  How can I trust the scope is displaying an accurate waveform without having to compare it to another scope?   :-BROKE

- George
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 30, 2013, 02:47:51 pm
I'd really like to know more as well. Any thoughts on this guys?  Tinhead?
That ringing Dave discovered really is horrible.  How can I trust the scope is displaying an accurate waveform without having to compare it to another scope? 

comment to Dave's video

https://www.eevblog.com/forum/blog/eevblog-487-tekway-dst1102b-oscilloscope-review/msg251936/#msg251936 (https://www.eevblog.com/forum/blog/eevblog-487-tekway-dst1102b-oscilloscope-review/msg251936/#msg251936)

ringing

https://www.eevblog.com/forum/blog/eevblog-487-tekway-dst1102b-oscilloscope-review/msg252717/#msg252717 (https://www.eevblog.com/forum/blog/eevblog-487-tekway-dst1102b-oscilloscope-review/msg252717/#msg252717)

https://www.eevblog.com/forum/blog/eevblog-487-tekway-dst1102b-oscilloscope-review/msg252723/#msg252723 (https://www.eevblog.com/forum/blog/eevblog-487-tekway-dst1102b-oscilloscope-review/msg252723/#msg252723)

read what i wrote and when you didn't got something feel free to ask here

What Dave saw on the DSO he testes didn't matetr at all, even the person who provided him that test unit confirmed that there was repalcement board in used unit, that could be everything.

there is as well comment from Dave
Rigol has excellent signal and trigger integrity.

which is actually reall bullshit, i haven't responded to that as i give a shit about such statements. From an EE i would expect to check the facts and not respond like he did. One can compare Owon to Rigol/Tekway, or Agilent to Rigol/Tekway, but not Rigol to Tekway as both have:

- same frontend
- same trigger circuit
- same mux/opamps/ref
- same FPGA
- same ADCs

so from a signal flow there is no winner, both are exact good/bad, the signal from BNC to FPGA is looking on both devices same.
If there was soemthing worng with the DSO Dave tested (and that could be as i wrote one of the bad populated models, or broken or even not factory calibrated - as Charles said "repalcement board").

But it seems nobody is reading what i wrote (i shall use less words, simply no, fuck, no would be probably enouhgt instead of proper technical explanation for potential error or issue in test procedure/gear).

Anway, read what i wrote and come back when you still have questions.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sorin on June 30, 2013, 04:19:41 pm
But it seems nobody is reading what i wrote...
this don't is true
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: geostep on June 30, 2013, 04:24:05 pm
tinhead -

Thanks for the links.  I simply didn't know about the review post.  I didn't search for it. My bad.  :(
My questions were not meant to get you irritated!  ???

- George
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 30, 2013, 04:38:51 pm
no problem at all George, i'm today bit too emotional (driven). I was today on peddlers market, and i saw really great Star Wars models, an old one from 80' or so .. any my wife said "no, we don't have money for that crap now". I have no idea what she means with crap, but my last wife got replaced as she was talking too much bullshit ^^
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: brainwash on June 30, 2013, 04:57:32 pm
Not sure if it's a bug or a 'feature' but software measurements while in Peak mode are wrong. I'm using the probe cal output and I get frequencies like 1.25Mhz, 500kHz, 250kHz and if I'm lucky I might get the expected 1Khz. The P2P measurement is correct so I don't think it's really catching glitches. It works as expected in Normal and Average modes.

Is there any way to let the scope save only .gif files and ignore .bmp files? Not sure, but probably the few seconds spent saving are actually spent writing the bmp file.

Is there any way to simulate segmented memory? I might be able to do some stuff with the recorder function if I know exactly the timing between RS232 messages, but is there a way to do this trigger-based instead of time-based?

You've said something about time-grading with 4/16 levels, is there any way to control this? Is it dependent on the wave intensity or contrast? Is it dependent on persistency duration? For me this is really not transparent how it works, I have more luck catching glitches with persistence set to off (50 fps, 4k buffer).

How fast is the rise time of the probe cal output? I seem to get a consistent 2us, but not sure how much of that is the actual probe (not much) and I don't have fancy equipment to measure it.

Another issue/feature: boot count and upgrade count get reset to zero after upgrade. I went from 130131.0 to 130425.0
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 30, 2013, 09:57:32 pm
Not sure if it's a bug or a 'feature' but software measurements while in Peak mode are wrong.

haven't tested but i would say the selected memory depth is too small

Is there any way to let the scope save only .gif files and ignore .bmp files? Not sure, but probably the few seconds spent saving are actually spent writing the bmp file.

DSO firmware is saving first bmp to tmp location, copying from there the bmp to /mnt/flash drive (which takes "hours", lol, i don't like it, never liked bmp), then it's doing bmptoppm and ppmtogif and copying the gif to /mnt/flash drive. I wish they would implement something like bmptopng (sure, we could compile bmptopng and rename it, but ehh, the manufacturer could do it as well) and remove ths bmp savng complettly (or leave it as an option, png - bmp - both).

The bmp can be only "patched away", there are (the first is on MSO, 2M, "P" and Handheld models, the second on the others)

cp %s /mnt/udisk/%s/%s.bmp

and

cp %s /mnt/%s/%s.bmp

Open the dso.exe in hex editor and change "cp" to "ls", it saves a lot of time and it works as expected^^

Is there any way to simulate segmented memory? I might be able to do some stuff with the recorder function if I know exactly the timing between RS232 messages, but is there a way to do this trigger-based instead of time-based?

unfortunately only time-based mode is available, i wrote it down as "request". I don't mind the time-base mode, but triggered would be nice as well (the best would be to control the holdoff between triggered and saved waveframe).

On the other side, when you think about transmintion to PC you should not forget that the firmware is running multiple threads and that this linux is not rtos. For streaming it could be good idea to read directly the FPGA fifo, however this need some investigation.

You've said something about time-grading with 4/16 levels, is there any way to control this? Is it dependent on the wave intensity or contrast? Is it dependent on persistency duration? For me this is really not transparent how it works, I have more luck catching glitches with persistence set to off (50 fps, 4k buffer).

the intensity is controling both, wave and persistency color, as far i can see there are 4 levels of persistency and in each level the waveform can have 4 levels of intensity. You can achieve good results with e.g. intensity set to 4, refresh to 50, buffer to 4k and persistency to 0.2s.

How fast is the rise time of the probe cal output? I seem to get a consistent 2us, but not sure how much of that is the actual probe (not much) and I don't have fancy equipment to measure it.

the CPLD itself goes down to ps range, the driver however includes low pass. You can simulate that circuit to get exact values, see attached schematics (i need to update the pdf, few values were wrong)

Another issue/feature: boot count and upgrade count get reset to zero after upgrade. I went from 130131.0 to 130425.0
this is not bug, it is like that since first fw version. I have no idea why, i guess to remove any evidence of cross model/version updates. Both information are in /sys.inf and that file ie being replaced during update.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: brainwash on July 01, 2013, 12:27:37 am
Not sure if it's a bug or a 'feature' but software measurements while in Peak mode are wrong.

haven't tested but i would say the selected memory depth is too small


How fast is the rise time of the probe cal output? I seem to get a consistent 2us, but not sure how much of that is the actual probe (not much) and I don't have fancy equipment to measure it.

the CPLD itself goes down to ps range, the driver however includes low pass. You can simulate that circuit to get exact values, see attached schematics (i need to update the pdf, few values were wrong)


I have tried with 4k/40k/512k and various timebase settings. Something is aliasing when used in peak mode, could also indicate to other problems.

Would it be safe to increase the CAL bandwidth? I would assume it involves removing C03_57 and C03_58.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on July 10, 2013, 03:04:46 pm
1500 replies and (nearly) 250000 views ... Dave, where is my DMM ?  :-//

Damn you tinhead! I can never catch up!!  :scared:

Well - I spoke too soon.  ;D   6 months later and we've cracked 100 pages (https://www.eevblog.com/forum/testgear/first-impressions-and-review-of-the-rigol-ds2072-ds2000-series-dso/msg260019/#msg260019) - just 14 shy of 1500 replies.  Although I know we'll never catch you in views, see you at the top (of replies) soon.  ;)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 11, 2013, 10:54:17 am
1500 replies and (nearly) 250000 views ... Dave, where is my DMM ?  :-//

Damn you tinhead! I can never catch up!!  :scared:

Well - I spoke too soon.  ;D   6 months later and we've cracked 100 pages (https://www.eevblog.com/forum/testgear/first-impressions-and-review-of-the-rigol-ds2072-ds2000-series-dso/msg260019/#msg260019) - just 14 shy of 1500 replies.  Although I know we'll never catch you in views, see you at the top (of replies) soon.  ;)


and here is my answer

https://www.eevblog.com/forum/testgear/first-impressions-and-review-of-the-rigol-ds2072-ds2000-series-dso/msg260445/#msg260445 (https://www.eevblog.com/forum/testgear/first-impressions-and-review-of-the-rigol-ds2072-ds2000-series-dso/msg260445/#msg260445)

Btw, i got DMM from Dave, i will make a separate thread about that (well, because i hacked it already ...)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: marmad on July 11, 2013, 11:22:49 am
and here is my answer

https://www.eevblog.com/forum/testgear/first-impressions-and-review-of-the-rigol-ds2072-ds2000-series-dso/msg260445/#msg260445 (https://www.eevblog.com/forum/testgear/first-impressions-and-review-of-the-rigol-ds2072-ds2000-series-dso/msg260445/#msg260445)

Btw, i got DMM from Dave, i will make a separate thread about that (well, because i hacked it already ...)

And here is mine. (https://www.eevblog.com/forum/testgear/first-impressions-and-review-of-the-rigol-ds2072-ds2000-series-dso/msg260452/#msg260452)  :D

And, yes, I'm hoping I might get a small prize too.  ;)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mepper on July 12, 2013, 06:36:38 am
Hi,

My first post here, so I'd like to start by thanking tinhead for some pretty heroic effort in maintaining information about these scopes - it's incredibly useful.

I have one question though.  I recently asked a seller offering the MSO5102D for the hardware version number, as I'm under the impression these are basically the same as the DSO5102B but with the extra LA board, and so hardware/FPGA versions should be comparable.  He replied with "1010X55558340", which doesn't look quite like any I've seen mentioned.  Was my assumption wrong, or could this be some really old (or really new) version?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 12, 2013, 09:21:24 am
My first post here, so I'd like to start by thanking tinhead for some pretty heroic effort in maintaining information about these scopes - it's incredibly useful.

you welcome

I have one question though.  I recently asked a seller offering the MSO5102D for the hardware version number, as I'm under the impression these are basically the same as the DSO5102B but with the extra LA board, and so hardware/FPGA versions should be comparable.  He replied with "1010X55558340", which doesn't look quite like any I've seen mentioned.  Was my assumption wrong, or could this be some really old (or really new) version?

you right, the MSO i know are based on DSO plus extra LA PCB, so the hardware version is still the same 10070x555583E9, where 83E9 is the FPGA design version. However, as already mentioned the Samsug SoC used in hw0, hw1005 and hw1007 is EOL, so Hantek/Tekway announced hardware change. There are already these "P" models with new PCB/hardware revision and completly new FPGA design, it was only matter of time the other would change. These 1010X55558340 you reported, that make sense for me, hardware revision 1010 and FPGA revision 8340. That means Hantek/Tekway released already MSO with latest hardware (i wish i could see inside such DSO/MSO).

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jebcom on July 12, 2013, 12:59:47 pm
Quote
I recently asked a seller offering the MSO5102D for the hardware version number
It would also be interesting to know what software version (and software date) they're currently shipping on these. My MSO5202D is hard version ...83e9, soft 2.07.1(date=130321.0) This software version was withdrawn, and now a much older version is available. Also whether the logic analyzer actually works properly, save to usb works, and system date can be set.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mepper on July 12, 2013, 03:23:42 pm
These 1010X55558340 you reported, that make sense for me, hardware revision 1010 and FPGA revision 8340. That means Hantek/Tekway released already MSO with latest hardware (i wish i could see inside such DSO/MSO).

OK, so this may be the S3C2416 hardware then.  I wasn't sure since the FPGA version is lower, but then I think I saw a post of yours mentioning much older Tekway scopes using higher FPGA numbers anyway.  I'm tempted to take a punt and see what it's like. 

It would also be interesting to know what software version (and software date) they're currently shipping on these. My MSO5202D is hard version ...83e9, soft 2.07.1(date=130321.0) This software version was withdrawn, and now a much older version is available. Also whether the logic analyzer actually works properly, save to usb works, and system date can be set.

I'll see what I can find out about software versions, but the sellers I've asked mainly appear to be box-shifters so I doubt I'll get any detail on how well it works.  If it's using the new SoC then it's pretty likely we'll see different versions anyway.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 12, 2013, 04:58:21 pm
right, the ARM firmware is not compatible (but for sure it can be compiled to run on "old" SoC), i assume the FPGA design/firmware will not run as well on "old" models (but in principle it could, well, we will see).

I'm tempted to take a punt and see what it's like. 

when its from local seller for sure not a risk, but even if not, it can't be worse than the "old" version.

It would also be interesting to know what software version (and software date) they're currently shipping on these. My MSO5202D is hard version ...83e9, soft 2.07.1(date=130321.0) This software version was withdrawn, and now a much older version is available. Also whether the logic analyzer actually works properly, save to usb works, and system date can be set.

there is firmware made for Voltcraft MSO

http://www.conrad.de/ce/de/product/122482/VOLTCRAFT-MSO-5102B-216-Kanal-Oszilloskop-Digitales-Speicheroszilloskop-Bandbreite-100-MHz-integrierter-16-K-Logik-A (http://www.conrad.de/ce/de/product/122482/VOLTCRAFT-MSO-5102B-216-Kanal-Oszilloskop-Digitales-Speicheroszilloskop-Bandbreite-100-MHz-integrierter-16-K-Logik-A)

direct link

http://www.produktinfo.conrad.com/datenblaetter/100000-124999/122482-up-01-en-Firmware_Update_MSO_5102B.zip (http://www.produktinfo.conrad.com/datenblaetter/100000-124999/122482-up-01-en-Firmware_Update_MSO_5102B.zip)


it can save snapshoots and csv, and it can set time (but still without 0:00, lol) but i didn't liked the rest of the firmware.

On my hardware (check the attached picture, isn't that a nice hardware?) the trigger point is complettly wrong, but it can be my hardware (soon i will get "real" MSO, but the "old" model), when you wish you can test the Voltcraft firmware on your MSO. So far i saw it should work.

EDIT: no, that firmware is really crap, i'm getting segmentation fault all the time when i try to set more momory, or PC comuniction, etc.

The latest "working" is 2.07.1(130321.0), i did modified it to swap L and H in LA trigger (which is swapped and actually a bad bug, you can think "ohh, LA is somehow triggering too late",  but in real it is only swapped stupid string in firmware).

I know that Hantek removed that firmware from their website, however i have them all, so attached the original 2.07.1(130321.0) and modified dso.exe, English.lan and protocol.inf files. The mods i made are as said above to fix the L/H bug, fix a bit Chinglish (not that i really speak english, lol, but my version is better. On DSOs they using my translation, on MSO not yet), and to fix the broken protocol.inf (new functions has been added, but numbers not incremented).

You can install the original firmware (that version have no problems with time change nor csv/screenshot save) , reboot the MSO and then copy the 3 files from the attached dso.zip to your MSO.

All you have to do is to unzip the content of dso.zip to empty flash drive, insert it to MSO, download and run that tool

http://peter.dreisiebner.at/dso-usb-tool/ (http://peter.dreisiebner.at/dso-usb-tool/)
 
go to shell tab and copy these files from flash drive to MSO, e.g.:


cp /mnt/udisk/dso.exe /dso_update.exe
sync
cp /mnt/udisk/OurLanguages/English.lan /OurLanguages/English.lan
cp /mnt/udisk/protocol.inf /protocol.inf
sync


and then reboot. After the reboot you will then see as version 2.07.1(130321.1), which indicates my modified version.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 12, 2013, 08:11:50 pm
.. and here the dso.zip, attachment limitation again :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 18, 2013, 09:34:51 am
Fan replacement

the specs from a latest models FAN is

PS: 12V
Noise: 26dBA
Air flow:9.42CFM
Static pressure:2.27mmH2O
Size: 50x50x10 mm

a good replacement fan is Noiseblocker XS-1, the specs are (at 12V):

PS: 8-12V
Noise: 16dBA
Air flow:11.5CFM
Static pressure:1.18mmH2O

of course it make sense to replace the 7812 by 7808, the new fan req. only 8V to start, the air flow will remain the same where the noise will be reduced by at least 10dBA.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 19, 2013, 01:55:04 pm
good news for Hantek DSO5072P/5102P/5202P owners, i got pictures and all the other things from eevblog user "richardbb".

I've made already schematics of the new frontend (LMH6552 has been repalced with THS4504, on paper it look good how the opamp has been configured, so no response issues i think).

On the pictures i got it is clearly visible that all P models can be modified to support LAN, all you need is the DM9000AEP (48LQFP), 25MHz quarz and of course magnetics (hiw to check which one). The Audio DAC and mono opamp for speaker can be populated as well. The SD card can be used as well, it seems that the bootloader have support for boot from SD as well.

More things, like backup tool etc, (and pictures) later.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sorin on July 19, 2013, 02:52:38 pm
Hello
Thank you again for your work!
Do you know if the "P" model can be "hacked" to add extra RAM?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 19, 2013, 04:29:09 pm
Hello
Thank you again for your work!
Do you know if the "P" model can be "hacked" to add extra RAM?

no it can't, there is no CPLD (which was used before as address counter) and no unpopulated SRAM/DDR what so ever RAM.
However one good news is, it seems that the current firmware supports 40k instead of 24k max. (that means user can choose 4k, 20k and 40k), at least something.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 19, 2013, 09:14:54 pm
Backup tool for DSO5000P models

How to use it (backup):

Unzip the attached file, go to Backup_P_models and copy the dso5kp_backuptool.up to empty usb flash drive.
Insert it into your DSO and run "firmware update" from DSOs "Utility Menu".
This will create a folder on your USB Flash drive containing all MTD partition dumps.

OOB will be not dumped, if need it you can edit this tool and remove the -o options from the command line inside.

How to use it (restore):

First create restore file

 copy /B boot.bin + logo.bin + kernel.bin + root.bin fw_backup.bin

then burn with JTAG the fw_backup.bin file (no OOB blocks inside!) to NAND

There is as well posibility to restore firmware from the uboot. However i can't use it as the UBI partition is larger
as the DSO RAM, so uboot is crashing. No idea if this works on real DSO, i don't have any "P" model, but on dev board
it was not working like that (i use always JTAG, so not a big deal for me, but maybe for you).

Power on your DSO, enter uboot bootloader (by pushing any key while boting),
connect DSO to PC over USB, choose in bootloader
 
 [5] Download UBIFS image (root.ubi) to Nand Flash

run on PC side the dnw.exe, (at first time you will be askd for driver, choose the secusb2.inf)
then choose in dnw menu USB Port -> Transfer -> Transfer and select the previously created backup file root.bin

Be patinet now! it takes few minutes to restore the root.bin

You can use similar way to restore kernel (kernel.bin, menu [3]) and the uboot itself (boot.bin, menu [1]).
The logo.bin is anyway only empty space, so no need to resotre it.

After you done with restore choose [r] to reboot uboot.


EDIT1: no, restore via u-boot didnT work due file length :\
EDIT2: i have updated the tools to create backup with following params:

nanddump -o -b -l 0x100000 -f /mnt/udisk/dump/boot.bin /dev/mtd0
nanddump -o -b -l 0x200000 -f /mnt/udisk/dump/logo.bin /dev/mtd1
nanddump -o -b -l 0x400000 -f /mnt/udisk/dump/kernel.bin /dev/mtd2
nanddump -o -b -l 0x7900000 -f /mnt/udisk/dump/root.bin /dev/mtd3

This seems to work better (at least on my test board), need confirmation from other users.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: echen1024 on July 21, 2013, 11:54:26 pm
Would it be possible to change the operating system distro on the Hantek scopes? Maybe install Ubuntu on it? Or would that just break the thing due to proprietary signaling methods.  :-BROKE
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 22, 2013, 08:17:14 am
Would it be possible to change the operating system distro on the Hantek scopes? Maybe install Ubuntu on it?

All neccessary GPL sources has been published, so the answer is "yes/f course", but one question remains, what for?


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 24, 2013, 02:44:33 pm
there are new GPL sources for all DSO5000P models:

http://www.hantek.com/download/Desktop_5000P.zip (http://www.hantek.com/download/Desktop_5000P.zip)

if someone need to all DSO5000P logos (to compile own bootscreen for DSO5000P DSO),
or ATTEN logo (as reported here https://www.eevblog.com/forum/testgear/new-atten-dso-discovered/ (https://www.eevblog.com/forum/testgear/new-atten-dso-discovered/) )

then download (as long it still works) the old DSO5000P GPL sources as well:


http://www.hantek.com/Product/5000P/DSO5000P.zip (http://www.hantek.com/Product/5000P/DSO5000P.zip)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: gmtii on July 24, 2013, 05:46:18 pm
Hi,

I get error 0xFE...  I can save waveforms so usb drive seems ok.

I put the dso5kp_backuptool.up in root directory.

Thanks.

Backup tool for DSO5000P models

How to use it (backup):

Unzip the attached file, go to Backup_P_models and copy the dso5kp_backuptool.up to empty usb flash drive.
Insert it into your DSO and run "firmware update" from DSOs "Utility Menu".
This will create a folder on your USB Flash drive containing all MTD partition dumps.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 24, 2013, 07:09:29 pm
I get error 0xFE...  I can save waveforms so usb drive seems ok.

i have no issues, see picture.

others reported previously 0xFE on not properly formated flash drive (need fat32) or when file name was not starting with what it should be, in case of DSO5000P series that's dso5kp*****.up

However, i know one very early DSO5000P firmware (3.00.0_130222.0) which is using different password and different naming convention for update file (and actually is not possible to get that firmware installed, unless manually copied).

What is your current fw version / DSO model?

EDIT: it seem that 3.00.2_130412.1 is affected as well by the firmware update nameing/password bug.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: gmtii on July 25, 2013, 08:46:16 pm

Hi

This is my fw version.

Thanks

Enviado desde mi Nexus 4 usando Tapatalk 2

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 25, 2013, 09:32:47 pm
check PM
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 26, 2013, 12:11:00 am
if someone else have as well one of the very early DSO5000P models, you might have firmware with stupid update file naming/passwird bug. Here a list of know firmware versions:

3.00.0_130222.0 - this version looks during update for dst1kb*.up file encrypted with dso5000c password
3.00.2_130412.1 - this version looks during update for dso5kc*.up  file encrypted with dso5000c password
3.01.0_130417.0 - first (afaik) good version, looks for dso5kp*.up file encrypted with dso5000p password
3.40.0_130717.0 - latest (version 3.40 after 3.01?), good as well, looks for dso5kp*.up file encrypted with dso5000p password

If someone have one of the affected gears - ask your dealer or Hantek for a fix (they will need your fw version). If you don't want to wait for official fix, you can try following:

- Download the latest firmware, decrypt using that password from above to flash drive
or download this here https://hotfile.com/dl/236019844/b925a8a/latest.zip.html (https://hotfile.com/dl/236019844/b925a8a/latest.zip.html)

- use the tool from Peter http://peter.dreisiebner.at/dso-usb-tool/ (http://peter.dreisiebner.at/dso-usb-tool/) to get virtual shell

- copy then from flash drive the proper English.lan and dso.exe (but copy it as /dso_update.exe) to your DSO, e.g. :


cp /mnt/udisk/dso.exe /dso_update.exe
chmod 777 /dso_update.exe
sync
cp /mnt/udisk/English.lan /OurLanguages/English.lan
sync


- power cycle the DSO.

It will boot now with the working firmware, you can then use my backup tool for DSO5000P models and finally update again to latest firmware (to get full update and not only the basic files which necessary to be able to run updates/backups).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 03, 2013, 11:08:34 am
here we go :)

For all who have one of the early DSO5072P / DSO5102P models with 24ksample memory and :
- getting error 0xFE while updating to latest DSO5000P firmware (as described above).
- getting "FPGA does not match App" error
- wishing to upgrade from 24k to 40k memory depth

Here are two upgrade files:

http://www.mikrocontroller.net/attachment/186695/dst1kb_v3.40_update40k.zip (http://www.mikrocontroller.net/attachment/186695/dst1kb_v3.40_update40k.zip)
http://www.mikrocontroller.net/attachment/186696/dso5kc_v3.40_update40k.zip (http://www.mikrocontroller.net/attachment/186696/dso5kc_v3.40_update40k.zip)

Try first dst1kb_v3.40_update40k.up, if the update is not working try the dso5kc_v3.40_update40k.up.

Note: ensure that only one *.up file is on the flash drive while running upgrade.

After successful upgrade your DSO will be fully compatible with latest DSO5000P models, so you will have the same memory depth and you will be able to use the DSO5000P frmware from Hantek website. Note: both files are coming directly from Hantek, i've tested them as well and so far no problems.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: deskwizard on August 04, 2013, 03:08:20 pm
Good morning,

I recently got one of those DSOs (5072P) and noticed the software download is down on the english side of the Hantek website. FYI the file is still present on the chinese side, and the software is also in english.

If you don't feel like bothering...
http://www.mediafire.com/download/tnod453rdrl9orl/DSO5000P%E8%BD%AF%E4%BB%B6.rar (http://www.mediafire.com/download/tnod453rdrl9orl/DSO5000P%E8%BD%AF%E4%BB%B6.rar)

I am having issues with the firmware update on my unit, I will investigate, as I tried the files in the previous post to no avail.

Thanks,
DW
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 07, 2013, 10:19:07 am
I recently got one of those DSOs (5072P) and noticed the software download is down on the english side of the Hantek website.


yeah, as broken, it does works again

http://www.hantek.com/Product/5000P/DSO5000P_Software.zip (http://www.hantek.com/Product/5000P/DSO5000P_Software.zip)


all the other errors on the new webiste has been fixed as well, so GPL/firmware/etc. all are available (it available) to download.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 20, 2013, 09:32:58 pm
this is crap, someone just bought latest MSO5202D model from Hantek and installed latest firmware from Hantek website. However, the firmware on the website is for MSO based on the S3C2440 SoC, be he have already the latest fresh unit with S3C2416 Soc ... and of course the MSO is now bricked !!!

So be carefull, when your S/N is higher than 15000, do not update any firmware updates, not B/BM/BMV models and not on MSOs.
For P models you can of course use firmware for P models, no problem, on the website they have already own section.
But everythign else, meaning every other available firmware, is only for hardware based on S3C2440 - when you install it on your brand new hardware (with S/N > 15000) you will brick your DSO/MSO as well !
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firehopper on August 25, 2013, 12:25:12 am
I just joined the group :) I have a hantek dso5072p on the way from china, $269.50 + $10 for TNT express shipping.

we shall see what version and stuff this is.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firehopper on August 27, 2013, 12:23:44 am
btw tinhead, what do you know about the 5072p, what does the p mean?

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: echen1024 on August 27, 2013, 02:17:10 am
btw tinhead, what do you know about the 5072p, what does the p mean?

It's the model without long memory I believe. Only 40k.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firehopper on August 27, 2013, 11:50:34 am
btw tinhead, what do you know about the 5072p, what does the p mean?

It's the model without long memory I believe. Only 40k.
oh well.. I'm hoping its still hackable :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: gmtii on August 27, 2013, 12:00:35 pm
yes, it is. Updated mine to 40k by new fw and 200 mhz bw just renaming a file (see first post) ... thanks to tinhead for his great work ;D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firehopper on August 27, 2013, 02:14:14 pm
yes, it is. Updated mine to 40k by new fw and 200 mhz bw just renaming a file (see first post) ... thanks to tinhead for his great work ;D


so is $280 including dhl express shipping a good price for this? and has anyone ever gotten the LA addon for a 5072 scope? any photos of the insides of a 5072p?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: int21h on August 27, 2013, 06:39:22 pm
this is crap, someone just bought latest MSO5202D model from Hantek and installed latest firmware from Hantek website. ... and of course the MSO is now bricked !!!
I just did this to an MSO5102D.  It's on it's way back to China.  Not happy  >:(
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 27, 2013, 08:16:43 pm
this is crap, someone just bought latest MSO5202D model from Hantek and installed latest firmware from Hantek website. ... and of course the MSO is now bricked !!!
I just did this to an MSO5102D.  It's on it's way back to China.  Not happy  >:(

... and i got solution from Hantek. In principle all you needed is set of files which were repalced as you installed the wrong firmware.

For you maybe (well, let's hope this was the first and last time you picked up "wrong" firmware) not anymore important, but in case someone else need to restore latest MSO model (note - with S/N > 15000 and fw 3.x installed) then

- download this archive:

http://www.mikrocontroller.net/attachment/189050/system.zip (http://www.mikrocontroller.net/attachment/189050/system.zip)

- unzip it to usb flash drive
- connect MSO UART port to PC (over 3.3V UART <-> USB adapter), here the pinout

(https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=58856;image)

- boot MSO, run on PC your fav. terminal app (115200, 8n1)
- enter the MSO shell, kill the watchdog by executing "killall dsod" (the best, do it multiple times, we don't need it now!)
- insert usb flash drive into MSOs front USB port
- copy/run following on MSO

Code: [Select]
cp /mnt/udisk/dso/app/dsod /dso/app/dsod
cp /mnt/udisk/dso/drivers/tq2416_backlight.ko /dso/drivers/tq2416_backlight.ko
cp /mnt/udisk/etc/init.d/rcS /etc/init.d/rcS
cp /mnt/udisk/OurLanguages/English.lan /OurLanguages/English.lan
cp /mnt/udisk/dso_bin /dso_bin

chmod 777 /dso/app/dsod
chmod 777 /dso_bin
chmod 777 /etc/init.d/rcS

sync
sync

rm /dso.exe

- test the firmware!, go back to / (cd / ), and execute /dso_bin

If everything works, you can power off MSO and disconnect the UART from PC.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 27, 2013, 09:36:12 pm
so is $280 including dhl express shipping a good price for this?
it is probably the best you can get Sure, 40k are not 1M, but honestly most things can be done with 2.5k^^

and has anyone ever gotten the LA addon for a 5072 scope?

that will not work, there is small i/o header, but the LA can't be attached (or at least not the current LA version)

any photos of the insides of a 5072p?

see attached.

The trigger section seems to be the same, frontend has been updated (LMH6552 repalced by THS4504),
SoC as already known S3C2416, lan ic/magnetics can be now populated on main pcb (already tested by the
guy who shot these pictures), SD card can be used as well.

UART port in exact the same location as on MSO (see posting above, btw, you can see there as well the extra LA PCB
with its i/o connector on right side - and exact this connector didn't exist on "P" models).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: int21h on August 28, 2013, 03:50:14 pm
... and i got solution from Hantek. In principle all you needed is set of files which were repalced as you installed the wrong firmware.
Thanks for the info.  I really wish that Hantek would've provided this to me when I emailed their support staff.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firehopper on August 28, 2013, 10:29:13 pm
my hantek arrived today, far sooner than I expected for $10 express shipping :) I'm very happy :)

Heres the info on my scope..

Model: DSO5072P (havent done the mod yet just powered it on)
SW version: 3.02.0(130509.0)
hw version: 10000xffff8103
serial number T 1G/0350xxxxx

any thing you want me to do tinhead?
 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 28, 2013, 11:02:35 pm
my hantek arrived today, far sooner than I expected for $10 express shipping :) I'm very happy :)

so make a backup, just in case.

any thing you want me to do tinhead?

my post above, on the frontend.jpg, there are two transistors together - first is marked 6K, second 3EM. Tell me if your DSO is still having this combination.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firehopper on August 28, 2013, 11:04:29 pm
my hantek arrived today, far sooner than I expected for $10 express shipping :) I'm very happy :)

so make a backup, just in case.

any thing you want me to do tinhead?

my post above, on the frontend.jpg, there are two transistors together - first is marked 6K, second 3EM. Tell me if your DSO is still having this combination.

yup. making a backup now.. waiting for it to finish, how long does it usually take to finish? I know its still working as the flashdrive led is blinking.

I'll open it up after its done making a backup
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firehopper on August 29, 2013, 12:20:30 am
wow. this thing is still backing up.. been going for at least a hour now..
is this normal or is there something wrong? I dont want to turn it off unless you say its okay.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 29, 2013, 12:53:05 am
is this normal or is there something wrong? I dont want to turn it off unless you say its okay.

no, for some reason this didn't work properly on your DSO. There is problem with nanddump, even with proper params it does read on some DSO forever, looks for me as cloned bad partition. When i do the backup on virgin NAND, it works.

All you can do now is to backup your device specific files, use that tool http://peter.dreisiebner.at/dso-usb-tool/ (http://peter.dreisiebner.at/dso-usb-tool/)
go to virtual shell, insert flash drive and copy files from / to /mnt/udisk/
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firehopper on August 29, 2013, 12:59:45 am
is this normal or is there something wrong? I dont want to turn it off unless you say its okay.

no, for some reason this didn't work properly on your DSO. There is problem with nanddump, even with proper params it does read on some DSO forever, looks for me as cloned bad partition. When i do the backup on virgin NAND, it works.

All you can do now is to backup your device specific files, use that tool http://peter.dreisiebner.at/dso-usb-tool/ (http://peter.dreisiebner.at/dso-usb-tool/)
go to virtual shell, insert flash drive and copy files from / to /mnt/udisk/

it was making files, this was on a 4 gig flash card. I'll try it again on a fat16 formatted 4 gig//

on another note. the input circut is the same.. same 2 transistors

my question on the serial number of mine. is it a newer model or older model? 035000xxx
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 29, 2013, 01:11:46 am
my question on the serial number of mine. is it a newer model or older model? 035000xxx

all P models are new.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firehopper on August 29, 2013, 03:13:24 am
yeah I'll copy stuff when I get the serial port working.. I have a usb > serial thing from sparkfun. so I'm good there.. just have to put the port on the board.

Not sure if I need to update the software on the scope first.. and the drive is formatted as fat32

but I'm getting the dreaded fe error on the3.40 firmwares you posted. not sure whats going on there..
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 29, 2013, 10:21:40 am
but I'm getting the dreaded fe error on the3.40 firmwares you posted. not sure whats going on there..

don't worry, the DSO you ("P" model) have is complettly new design. There is no other firmware version than 3.x for your DSO.

Other models (like "B" and "MSO", "BM/BMV" not yet confirmed but probably the same problem) have multiple hardware
revisions:

- hw0, hw1005, hw1007 with Samsung S3C2440 SoC - with firmware 2.x
- hw??? with Samsung S3C2416 SoC - with firmware 3.x

For both, ppl with 2.x or/and 3.x firmware installed, when then install different firmware the DSO/MSO will get bricked.
So they have to watch out what they installing. For you as already said, didn't matter, your DSO is new, based on
S3C2416 and there only existing firmware is already 3.x. You can't install 2.x because there was never 2.x for your DSO,
 you can't install firmware from other models because they using different naming cnvention for update files and different
firmware encryption pwd.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firehopper on August 29, 2013, 12:16:38 pm
but I'm getting the dreaded fe error on the3.40 firmwares you posted. not sure whats going on there..

don't worry, the DSO you ("P" model) have is complettly new design. There is no other firmware version than 3.x for your DSO.

Other models (like "B" and "MSO", "BM/BMV" not yet confirmed but probably the same problem) have multiple hardware
revisions:

- hw0, hw1005, hw1007 with Samsung S3C2440 SoC - with firmware 2.x
- hw??? with Samsung S3C2416 SoC - with firmware 3.x

For both, ppl with 2.x or/and 3.x firmware installed, when then install different firmware the DSO/MSO will get bricked.
So they have to watch out what they installing. For you as already said, didn't matter, your DSO is new, based on
S3C2416 and there only existing firmware is already 3.x. You can't install 2.x because there was never 2.x for your DSO,
 you can't install firmware from other models because they using different naming cnvention for update files and different
firmware encryption pwd.

alright, anything else you want me to do? take high rez photos or anything? (I have a 18 mpix dslr, no macro lens. but still can take some nice close ups)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firehopper on August 29, 2013, 03:00:54 pm
I also noticed that I dont have any "void" sticker on mine :) no clue why.. but eh :) thanks for such an awesome post tinhead :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 29, 2013, 03:16:16 pm
alright, anything else you want me to do?

no, i have all i need from these models.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firehopper on August 29, 2013, 04:05:09 pm
wheres the bug list, the first page doesnt seem to have a link anymore for the buglist.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 29, 2013, 05:38:06 pm
i know, i have removed it for now. I need to update the list first, when i have some time :\
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firehopper on August 29, 2013, 06:26:51 pm
anyway, I tried to run all the commands that your tool runs from the serial console.. and it seems to get stuck on this line.

nanddump -o -b -l 0x7900000 -f /mnt/udisk/dump/root.bin /dev/mtd3

the drive light keeps flashing but the scope stops responding while it runs.. no idea if it would ever complete.. I did kill the dsod before I ran it though.. so what kind of command do I need to run to backup the scope then? or just some files?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tyranus on August 29, 2013, 08:21:59 pm
Hello,
I wonder if it is possible to reset the "bout count" and "upgrade count" counters?!

THX
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 29, 2013, 08:36:55 pm
anyway, I tried to run all the commands that your tool runs from the serial console.. and it seems to get stuck on this line.
nanddump -o -b -l 0x7900000 -f /mnt/udisk/dump/root.bin /dev/mtd3

yeah, exact, no idea why this is not working on other DSOs. For some reason nanddump is dumping forever.

so what kind of command do I need to run to backup the scope then? or just some files?

all you can need are all files from :
/
/dso
/lib/firmware
/OurLanguages
/etc
/icon
/param

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 29, 2013, 08:40:11 pm
Hello,
I wonder if it is possible to reset the "bout count" and "upgrade count" counters?!

THX

sure, there is file

/sys.inf

on your DSO. It contains counter informations

[start time]xxx
[update time]yyy

where of course xxx and yyy are what so ever is the value of updates/startups on your DSO. Simply edit that file and change them
to whatever you wish.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tyranus on August 29, 2013, 08:54:22 pm
Thank you very much for the answer and for your great work and sharing spirit.
Now i must solder the pins in order to connect the uart adaptor... :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 29, 2013, 09:36:11 pm
Now i must solder the pins in order to connect the uart adaptor... :)

oh well, you can use this tool :

http://peter.dreisiebner.at/dso-usb-tool/ (http://peter.dreisiebner.at/dso-usb-tool/)

connect then your DSO to PC, run this tool (the good part is, Peter wrote versions for Linux, OSX as well - however you need then libusb instead of org. driver), select the device driver type (org. or libusb under windows), then go to 3rd tab (read/write), type /sys.inf and click n read. Then you can save that file, edit and load back. Simply do load, select file and do write - that's all. You can as well, in case read/write didn't work, use first tab, which is virtual shell. Then simply insert usb flash drive and run on the virtual shell

 cp /sys.inf /mnt/udisk/

Then you can edit that file on pc and copy back. This virtual shell is doing only command forwarding, so you can NOT run vi directly or so.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firehopper on August 30, 2013, 07:15:28 pm
mine is now a 200 mhz model.
it still displays the 5072p logo on booting..
I edited the logotype (I think that displays the proper model # in the system info) and logotype.dis and the boot logo still reports 5072p

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 30, 2013, 07:38:16 pm
it still displays the 5072p logo on booting..
I edited the logotype (I think that displays the proper model # in the system info) and logotype.dis and the boot logo still reports 5072p

hehe, the logotype/logotype.dis are not anymore in use for bootlogo on your model.

The bootlogo has been compiled into the display driver, so you have to compile own driver (the GPL code is available, so not a big deal) with your own logo.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firehopper on August 30, 2013, 09:02:07 pm
dont know if I dare try that.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 30, 2013, 09:16:44 pm
oh well, it is not really complex. You have to compile kernel and the frame buffer driver - where the boot logo is located.
You need of course the GPL source for these DSOs, check here (there are two version, to get all you need, you need to download both)

https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg266507/#msg266507 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg266507/#msg266507)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tyranus on August 30, 2013, 10:47:32 pm
Well,
1. After I changed the BW from 60Mhz to 200Mhz i noticed a strange behaviour of my scope: if I measure the test signal the amplitude Pk-Pk is ~50V. If I revert to 60Mhz the problem disappear. Changing again from 60MHz to 200MHz the measurements are OK. I used the BW changer program.
2. Now I changed typelogo and typelogo.dis following the tutorial above and the problem described above appear again...
See attached picture.
Can be this a bug?
My DSO5062B: sw ver: 2.06.3(130814.0) hw ver: 5555583ed
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 30, 2013, 11:00:39 pm
even when you set the probe mutiplier to x10 on DSO? (and of course the probe to x10 as well)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tyranus on August 30, 2013, 11:14:33 pm
Oh... my bad... i Didnt checked till now. you are right, as usual :)
Just one question... I didnt press the "Default setuo" button so, why my DSO didnt remeber the last settings (with probes on x1)?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 30, 2013, 11:22:10 pm
no idea, it should save the information (after 10sec or so of inactivity). Of course when the profile (/param/sav/run1kbxxxxx) got wiped, e.g. by the watchdog, then there will nothing be saved. That seems to be the case on your pictures, one is having blue UI, the other back UI - so for some reason the watchdog (or you) deleted/wiped the current UI setup. That means, next time the dso.exe start, default profile will be loaded.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sorin on August 31, 2013, 04:03:50 am
Hi!
Do you know what is the max sample rate/second than can be transfered to pc through lan on DSO5000P Series (for real time data login).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firehopper on August 31, 2013, 04:04:35 am
oh well, it is not really complex. You have to compile kernel and the frame buffer driver - where the boot logo is located.
You need of course the GPL source for these DSOs, check here (there are two version, to get all you need, you need to download both)

https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg266507/#msg266507 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg266507/#msg266507)

I havent had any luck downloading either file.. they are very slow and tend to time out.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firehopper on August 31, 2013, 04:59:41 am
time to install getright and try and see if that can download it.. we shall see
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firehopper on August 31, 2013, 12:16:24 pm
time to install getright and try and see if that can download it.. we shall see

okay one is done, took nearly 10 hours to download with getright, the other file is still downloading. they have such a bad connection apparently.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 31, 2013, 10:15:08 pm
okay one is done, took nearly 10 hours to download with getright, the other file is still downloading. they have such a bad connection apparently.

yeah, their server is not having the best connection, but good enought to use download manager, so who cares.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sorin on August 31, 2013, 10:52:35 pm
And about my questions?
"Do you know what is the max sample rate/second than can be transfered to pc through lan on DSO5000P Series (for real time data login)?"
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 31, 2013, 11:13:43 pm
Do you know what is the max sample rate/second than can be transfered to pc through lan on DSO5000P Series (for real time data login).

the maximal sample rate remains the same, no matter how fast or slow the link is. I think you wish to know how much of that sample rate, or better said on what rate the data can be read by PC over ethernet. With other, or better said all models based on S3c2440, the link over USB was slow (one of the reasons why i build ethernet card for my old hw0 DSO).

In the theory you cold read the data directly from FPGA device driver, so the max link is USB link speed, or ethernet speed, reduced of course by some latency of the device drivers. When the firmare is not running this could be not that bad. However when you use the firmware itself and try them to read the data over the official way, well then you have to remember that the DSO itself need lot of the resources to get the data processed.

I can't tell you how fast DSO5000P can be over USB, which is btw USB 2.0 as the S3C2416 can 2.0, all models based on S3C2440 can only USB 1.1 and that was a big diff! However over ethernet, and this is someone else tested, you can get (when the firmware is busy with DSO itself) 16Mbits something:

iperf: [  3]  0.0-60.1 sec   120 MBytes  16.7 Mbits/sec

With the models based on S3C2440, i got only 5-6 Mbits, so DSO5000P is already 3 times faster over ethernet.

Both measures over ethernet has been made when the firmware was bus doing DSO thigns, here as said above is a way to improve it to max. what the FPGA can get (which can be max. 80MBit assuming 4k buffer * 25000wfms/s - without latency of device drivers of course).
Title: Better late than never - DSO hacking quick guide
Post by: Marphy on September 01, 2013, 05:12:59 pm
Hi folks,
My DSO3062C had a firmware crash a few days ago, so I started diving into all this tons of information available here and on some other websites. It takes some time to read into the topic but the modifications are done quite easily and quickly.

That's why I decided to write a quick guide summarizing the most important information and providing step-by-step instructions. Maybe I am a bit late with this, but I hope it can still help some people saving some time.

Feel free to have a look:
http://marcowuen.wordpress.com/2013/09/01/dso-hacking-quick-guide-voltcraft-dso3062c-hantek-dso5062b-tekway-dst1062b/ (http://marcowuen.wordpress.com/2013/09/01/dso-hacking-quick-guide-voltcraft-dso3062c-hantek-dso5062b-tekway-dst1062b/)

Feedback is welcome.


Last but not least a big thanks to tinhead for all the great work he has done over the past months and years! I doubt that all this would be possible without him.
Title: Re: Better late than never - DSO hacking quick guide
Post by: tinhead on September 02, 2013, 08:40:41 am

Feedback is welcome.


so far ok, maybe except this :
"After a bandwidth upgrade it is recommended to also upgrade the hardware input stage of your DSO as described below".

I do not recommend to change anything in the hardware without real need. There are multiple variation of the hardware, currently even two complette different frontends. So for sure, for these with bad response it make sense to apply modifications. But not based on what the enduser think or measure, but based on components values! I know lot of professionals not capable of doing simple measurment^^.

Something like :
"After a bandwidth upgrade it make sense to check, as described below, if upgrade of the hardware input stage of your DSO is necessary"
would be better.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: uh9lab on September 02, 2013, 08:52:13 am
Sorry, does anyone have a copy of new DSO5202P firmware? I'm trying to upgrade my 5072p, have no problems with 5102 version, but link to 5202P from the http://www.hantek.com.cn/en/PagesFW_Vzxgj.html (http://www.hantek.com.cn/en/PagesFW_Vzxgj.html) doesn't work...

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 02, 2013, 10:17:59 am
Sorry, does anyone have a copy of new DSO5202P firmware? I'm trying to upgrade my 5072p, have no problems with 5102 version, but link to 5202P from the http://www.hantek.com.cn/en/PagesFW_Vzxgj.html (http://www.hantek.com.cn/en/PagesFW_Vzxgj.html) doesn't work...

ask Hantek! I told them already 4 weeks ago that this link didn't work, but still not fixed.
Title: Re: Better late than never - DSO hacking quick guide
Post by: Marphy on September 02, 2013, 03:55:24 pm
so far ok, maybe except this :
"After a bandwidth upgrade it is recommended to also upgrade the hardware input stage of your DSO as described below".
Thanks, the section is revised now.

I do not recommend to change anything in the hardware without real need. There are multiple variation of the hardware, currently even two complette different frontends. So for sure, for these with bad response it make sense to apply modifications. But not based on what the enduser think or measure, but based on components values! I know lot of professionals not capable of doing simple measurment^^.
If I get you right you think it is wrong to recommend a hardware mod for everyone just measuring an overshooting square wave (as you think there is too much risk of measuring bullshit)? Makes sense somehow.

But how to distinguish between a good and a poor input stage then? You say based on component values, but as you say there seem to be a lot (or at least several) different component values out there... Which are worth upgrading and which are not?
Title: Re: Better late than never - DSO hacking quick guide
Post by: tinhead on September 02, 2013, 11:41:11 pm
how to distinguish between a good and a poor input stage then? You say based on component values, but as you say there seem to be a lot (or at least several) different component values out there... Which are worth upgrading and which are not?

for "P" models, as far i know no need to change anything. Haven't tested that, so can't confirm anything.

For all other models - as long they using LMH6552 check these few resistor, compare them with what i draw/wrote on schematic.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 03, 2013, 12:06:48 am
e.g. here, the latest DSO5000B and MSO5000D mainboards, hw1.01. (other hw versions are known and already published by me and others).

blue marked are things need to be checked - here clearly 33R on input, 12R in compensation snoober, 280R arround LMH6552 (they can stay 280R, optimal is however 270R), 4x22R array (and all the things in another channel as well), and of course the trigger 100R trigger resistor. All these things need to be changed if one wish to get real 200MHz model performance. Pink marked are additional changes, to get even better results. There are other minor mods possible, e.g. reduction of 1kHz test signal rise time, from 1.8us to 750ns, by removing of these two green marked caps.

Btw. check red marked "design in china", i'm not native speaker but i would say that should be "designed in china".
Or maybe it was done for a design event, http://www.design-china.org/ (http://www.design-china.org/)

Another nice detail, no single word about "Hantek" on mainboard.
Title: Re: Better late than never - DSO hacking quick guide
Post by: tinhead on September 03, 2013, 05:01:07 pm
Feedback is welcome.

i found something else:

>> Original response with severe over-/undershoot- This is one of the main points of criticism from
>> Dave in his review of the Tekway DST1102B (see from 32:50 onwards).

Dave his review was made with broken unit, i would not necessarily use that as reference to check if
DSO have good or bad response. There is a huge difference between what i measured on working
DSO (but with bad response due sw hack only):

(http://www.mikrocontroller.net/attachment/173786/10MHz_Voltcraft_HF512.png)

and what Dave measured on his test unit:

(https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=59556;image)

So the pictures you linked, they providing good reference.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rigrunner on September 06, 2013, 12:03:11 am
My first post, and unfortunately it's asking for help.

My Voltcraft DSO-1062D was running 2.06.3(130114.0) on 10070 555583eb.

I was seeing some odd readings this evening, so before posting with the odd readings I thought i'd flash with later firmware just to make sure it wasn't a firmware issue.

I've flashed with the contents of dst1kb_2.6.3_15102d_fact130321.1.zip and was prompted to restart the DSO.

DSO boots and shows a boot image and then shows the usual scope screen. After that it's dead. No buttons work, no traces and i can't connect to the DSO with the USB tool to copy the contents of the flash drive as per the remainder of the instructions in post #1842.

Under windows the DSO is shown as USB\VID_0000&PID_00005&FEC3355&0&1.
Windows suggests that the driver from Hantek's website isn't for this device.

How do i fix this?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 06, 2013, 12:14:14 am
How do i fix this?

check that link/link

https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg285295/#msg285295 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg285295/#msg285295)

"Fixing DSO firmware crash / hangup"

You might as well remove, if any, files from /mnt directory, i saw already some DSOs where that directory was full of screenshots, then need to be removed by

 rm /mnt/*.*

Under windows the DSO is shown as USB\VID_0000&PID_00005&FEC3355&0&1.
Windows suggests that the driver from Hantek's website isn't for this device.

that looks like nothing properly loaded on DSO side, so proceed as described above, wipe content of /mnt and delete /param/sav/ru* first.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rigrunner on September 06, 2013, 03:06:40 am
The instructions in the link didn't resolve anything.

On the console i'm seeing this after copying dso_update.exe and rebooting:

dso-spi: install ok
dso-uart: install ok
dso-buzzer: install ok
0x60c
gpio_major_n = 6, io_minor_n = 12, output 1
fpga download file_name :/dn.rbf
dso-spi: open fpga file failed.
have dso_update.exe
do backup and update the sysytem
now run app .....
/etc/init.d/rcS: line 60: /dso.exe: not found

dso_update.exe is being copied to dso.exe correctly, but something is preventing execution.
chmod 777 /dso.exe
/dso.exe

returns:

-/bin/sh: /dso.exe: not found

busybox /dso.exe

returns:

dso.exe: applet not found


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rigrunner on September 06, 2013, 04:51:49 am
Update:

I've extracted the dso.exe from the current .up file on Hantek's site and that loads and displays the main screen ok.
Still no button functions or scope traces.

If i replace the dso.exe with the one in your dso.zip file Tinhead i get the load errors again.

The md5 for the dso.exe i have that fails to run is b1f714ff53c0ffe56147b8e042a036b1
Size: 4142140
Date: Jul 12 22:05
Filename: dso.exe



Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 06, 2013, 05:35:57 am
-> fpga download file_name :/dn.rbf
-> dso-spi: open fpga file failed.

the /dn.rbf seems to be missing as well, that looks generally bad when already two files are broken.

> dso_update.exe is being copied to dso.exe correctly, but something is preventing execution.
> chmod 777 /dso.exe
> /dso.exe
> returns:
> -/bin/sh: /dso.exe: not found

that looks like wrong dso.exe or missing one or more libs, probably libc

I can for sure attach more files, but that looks here as broken NAND/file system.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Jantle on September 06, 2013, 08:48:40 am
hello,

thanks to that great information found in this thread I decided to order one of those oscilloscopes to sort out my old analog one. I think, tinhead, you definitely deserve some kind of commission from hantek/tekway, I am pretty sure their sales were heavily increased by this thread.  :)

So, few weeks ago I ordered DSO5072p and I am pretty happy with this device except for reproduceable crashes on specific settings.
With both channels displayed, "Acquire" settings set to "Type: Real Time;  Mode: Average;   Averages: 128;   Mem Depth: 20k" the scope always crashes after a few seconds (with fast time scale).
With slow timescale (like 40.0ms) I can count the changes of the "a"/"T"-icon which always stops after about 120 acquisitions.

These crashes don't happen with any other setting (single channel / 40k mem depth  or  64 averages). Is this a general bug, can anyone reproduce this behaviour? or is this some hardware/software issue with my device?

My device information:
model:    DSO5072P
sw ver:   3.40.0 (130717.0)
hw ver:   10000xffff8103
serial:     T 1G/035 0001xx

I upgraded software to 3.40.0 myself with official download from hantek site, the crashes also happened with previous version (3.02.?)

Another question: The latest software shows a menu entry which I didn't notice with old version: "Utility / page 3 / Option ... / Video" . This entry is always disabled, what is it supposed to do ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 06, 2013, 11:41:02 am
--- reproduceable crashes on specific settings---
With both channels displayed, "Acquire" settings set to "Type: Real Time;  Mode: Average;   Averages: 128;   Mem Depth: 20k" the scope always crashes after a few seconds (with fast time scale).
With slow timescale (like 40.0ms) I can count the changes of the "a"/"T"-icon which always stops after about 120 acquisitions.

These crashes don't happen with any other setting (single channel / 40k mem depth  or  64 averages). Is this a general bug, can anyone reproduce this behaviour? or is this some hardware/software issue with my device?

i'm not able to reproduce this (can run DSO for minutes) however i don't have FPGA attached so no data acquired (on the other side no data is data as wel, but maybe the pure fact that my SoC can't get anything from FPGA is not stopping the firmware from working).

So it would be more usefull if someone else could test it as well and let us know the results (together with the HW/FPGA design version, your is hw ver:   10000xffff8103)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 06, 2013, 11:47:39 am
Another question: The latest software shows a menu entry which I didn't notice with old version: "Utility / page 3 / Option ... / Video" .
this is the video player option known from DSO5xxxBMV

This entry is always disabled, what is it supposed to do ?
nothing, i don't think all the necessary libs/apps (mplayer) are available on P models, on the dump i'm working with they not there.
Sure, you could enable that menu, but for what when the player is not working.

I know however that current B/BM/BMV models got same SoC and new mainbiard as well, so once we have these files compiled for that SoC it could be possible to copy them over and then to enable the menu.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rigrunner on September 06, 2013, 01:34:20 pm

the /dn.rbf seems to be missing as well, that looks generally bad when already two files are broken.

that looks like wrong dso.exe or missing one or more libs, probably libc

I can for sure attach more files, but that looks here as broken NAND/file system.

The dso.exe is from post 1843.

How do i flash the firmware via uart? I'd like to revert to an older version to test.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rigrunner on September 06, 2013, 02:11:50 pm
I've installed 2.06.3(130814.0)  and I have the DSO back up and running.

There's obviously something weird going on with the files i have here. Tinhead can you post the correct links to the files i need to update my DSO to your latest software and firmware please? Just to be sure i'm using the correct files?

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: richardbb on September 06, 2013, 02:21:11 pm
So it would be more usefull if someone else could test it as well and let us know the results (together with the HW/FPGA design version, your is hw ver:   10000xffff8103)

I can confirm this bug. dso.exe crashes with:

dso.exe: opt/average_opt.c:469: Avg_AvgArrayAddAndAvg: Assertion `((void *)0) != pt_average' failed.

ver 8101
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Jantle on September 06, 2013, 02:59:33 pm
i'm not able to reproduce this (can run DSO for minutes) however i don't have FPGA attached so no data acquired (on the other side no data is data as wel, but maybe the pure fact that my SoC can't get anything from FPGA is not stopping the firmware from working).
Thanks for checking this, however I am a little confused... what do you mean by "don't have FPGA attached" ?  Did you unsolder it from mainboard?  ???
I am not very familiar with this kind of electronics, but as far as I understand the SoC is running the main system (Linux) and does all the UI-stuff and FPGA is responsible for all the fast things like acquiring data and doing all the math like averaging? So it might be a issue within FPGA?


Another question: The latest software shows a menu entry which I didn't notice with old version: "Utility / page 3 / Option ... / Video" .
this is the video player option known from DSO5xxxBMV
[...]
Sure, you could enable that menu, but for what when the player is not working.

Well,... I don't think I'd ever watch Videos on my Oscilloscope  ;D   .. so, no I don't want to enable it.
I thought I might have been some functionality to record video of the DSO-screen for educational purposes or something like that.


So it would be more usefull if someone else could test it as well and let us know the results (together with the HW/FPGA design version, your is hw ver:   10000xffff8103)

I can confirm this bug. dso.exe crashes with:

dso.exe: opt/average_opt.c:469: Avg_AvgArrayAddAndAvg: Assertion `((void *)0) != pt_average' failed.

ver 8101

Thanks for confirmation, so I am glad it's no hardware issue with my mainboard and might likely be fixed somewhen. With knowing this bug it can be easily be avoided and honestly I don't really need these settings very often.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 06, 2013, 09:36:26 pm
Thanks for checking this, however I am a little confused... what do you mean by "don't have FPGA attached" ?  Did you unsolder it from mainboard?  ???

insted of complette DSO (in this case DSO5xxxP) i do have only ARM Development board (in this case Embest S3C2416 board),
loaded with dump from original DSO/MSO (in principle ARM dev board, runnig the same Linux as on DSO, with exact the same kernel, dev drivers, and almost the same hardware - except FPGA, ADCs with frontend and frontpanel).

This allows me to run the firmware and watch the connected LCD. The frinpanel of these DSO/MSO models is connected always to FPGA, as i dont have FPGA i'm using my PC to send commands to simulate frontpanel.

So in principle i can test everything, but not the data coming from FPGA/ADC. If i need to do this, i'm flashing the dump to real DSO/MSO. However, i don't have any based on the latest hardware, so all i was able to do is to run the P model firmware, set remotelly avg. mode and depth and watch the LCD. But exactly as i expected, due the missing link to FPGA the firmware was working with no issue.

So it might be a issue within FPGA?

i would say "no", but as this new design everything is possible.

I thought I might have been some functionality to record video of the DSO-screen for educational purposes or something like that.

yeah, that would be nice to be able to record video. Unfortunately it can only play videos, whcih is still good for education purpose, but maybe not something needed by everyone.

I am glad it's no hardware issue with my mainboard and might likely be fixed somewhen. With knowing this bug it can be easily be avoided and honestly I don't really need these settings very often.

nevertheless, i will write it down and send to Hantek/Tekwayx together with other bug reports.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 06, 2013, 09:40:04 pm
I've installed 2.06.3(130814.0)  and I have the DSO back up and running.

There's obviously something weird going on with the files i have here. Tinhead can you post the correct links to the files i need to update my DSO to your latest software and firmware please? Just to be sure i'm using the correct files?

the 2.06.3(130814.0) is the latest for your DSO (and so far i haven't done any patching to it). So when it runs, then everything fine.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 06, 2013, 09:46:23 pm
How do i flash the firmware via uart? I'd like to revert to an older version to test.

in the backup tool for your DSO (see first page) there is as well description how to restore the full backup.
To restore older firmware version it is much simpler. All you have to know is that these DSOs are using Linux,
with bunch of drivers of course. The drivers will be updated very rarely (nevertheless you can very often find the same drivers over and over again in firmware files, this is because the manufactuer have as well to provide firmware updates for users who never ran updates before and using these DSO since long time). The DSO itself is application called /dso.exe (on newer model /dso_bin). This executabe is using language resource files, they located in /OurLanguages directory. So when you wish to use older firmware, then simply replace the dso.exe (or dso_bin) and the la nguage files in /OurLanguages directory.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rigrunner on September 06, 2013, 11:31:48 pm
the 2.06.3(130814.0) is the latest for your DSO (and so far i haven't done any patching to it). So when it runs, then everything fine.

Everything is back together and it appears to be working fine  :phew:  :-+

Whilst testing it i noticed that the scope probes that came with it which are allegedly good for 60Mhz are pretty poor after 40Mhz, and the Wittig W202 that i replaced them with are only good up to around 150Mhz mark.

The DSO itself seems to read reasonably accurately up to 200Mhz and then tails off after that.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 07, 2013, 05:32:52 pm
The DSO itself seems to read reasonably accurately up to 200Mhz and then tails off after that.

you should check as well if your DSO is using the less good combination of resistors in frontend.



Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rigrunner on September 07, 2013, 09:44:40 pm
you should check as well if your DSO is using the less good combination of resistors in frontend.

If they are the unwanted combination is it really worth the hassle of changing them? And by that i mean am i going to see much more than 200mhz usable?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 08, 2013, 04:57:29 pm
... is it really worth the hassle of changing them? And by that i mean am i going to see much more than 200mhz usable?

not the bandwidth but the frequency/pulse response will be improved.

Having such signal (where is know what my source is providing, i know how to measure and know how the signal looks on expensive TEK DSO):

(http://www.mikrocontroller.net/attachment/173418/10MHz_HanTekway_HF512_50R.png)

i don't want to see such result:

(http://www.mikrocontroller.net/attachment/173786/10MHz_Voltcraft_HF512.png)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rigrunner on September 09, 2013, 11:01:22 pm
I don't have anything that will put out a square wave at any reasonable frequency.  |O

I'll test it when i can borrow a decent function generator.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 09, 2013, 11:25:51 pm
I don't have anything that will put out a square wave at any reasonable frequency.  |O

I'll test it when i can borrow a decent function generator.

and this is one of the reasons why to trust me :) I and some other guys in another forum did simulations, measurments and finally we found combination giving the best results. For you (and other affected ppl) it is now simple, when your DSO does have the described combination of resistors - simply replace them, run self-calibration and you fine.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: metehyig on September 10, 2013, 06:08:35 pm
Hi

in my opinion all this hacking to increase bandwith is only an optical  effect on the display and splash logo.

will the oscilloscopes really be able to measure a 200MHZ signal ? i doubt !


to be sure one  has to connect a signal generator say a sinus wave 180-200MHz on a pre hacked osci , then repeat the same after hacking.
which i never saw here on this forum and elsewhere.
cheers
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 10, 2013, 07:18:16 pm
in my opinion

i don't give a shit about your opinion ... when you too dumb to read specs, compare results, check all the measurments made by me and lot of other ppl posted here and on the mikrocontroller.net forum (there are two looong threads about these DSOs, longer as this one here) then really, nobody cares about what you think.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: echen1024 on September 11, 2013, 01:39:52 am
in my opinion

i don't give a shit about your opinion ... when you too dumb to read specs, compare results, check all the measurments made by me and lot of other ppl posted here and on the mikrocontroller.net forum (there are two looong threads about these DSOs, longer as this one here) then really, nobody cares about hat you think.
:-DD. Seriously though. Trust the many people who have fast function generators and have tried this before.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Tasman on September 11, 2013, 06:29:27 am
to be sure one  has to connect a signal generator say a sinus wave 180-200MHz on a pre hacked osci , then repeat the same after hacking.
which i never saw here on this forum and elsewhere.

Perhaps he's just trying to get up your sinus.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 11, 2013, 08:50:16 am
Perhaps he's just trying

he posted as well (as new user) on mikrocontroller.net, in mutiple threads. So he must be
- fanboy of what so ever
- desperate Hameg employee (haha, no, that's joke guys)
- dumb troll

To ignore one - two ppl who think they "improved or hacked something" is generally said ok, the internet is full of such stories. But to ignore thousands of people (and all their experience) is another story.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: metehyig on September 11, 2013, 04:24:44 pm
Perhaps he's just trying

he posted as well (as new user) on mikrocontroller.net, in mutiple threads. So he must be
- fanboy of what so ever
- desperate Hameg employee (haha, no, that's joke guys)
- dumb troll

To ignore one - two ppl who think they "improved or hacked something" is generally said ok, the internet is full of such stories. But to ignore thousands of people (and all their experience) is another story.

To aknowledge one thousand - two thousands electronic hobbyist who never work/use with 200MHZ BW and who think they "improved or hacked something" is generally said ok, the internet is full of such stories. But to ignore some doubtfull people (and all their questions) is another story.

Cheers !
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 11, 2013, 05:19:09 pm
...

yeah, you right, we all are idiots using bongo generators with muschi termination, we all measured only bullshit.

Dave ?!,  shit, you should really invite this guy to "High IQ members club", he seems to know what he is taking about :P

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Tasman on September 12, 2013, 02:36:59 am
But to ignore some doubtfull people (and all their questions) is another story.

Cheers !

Best course is to ignore ignorant people who are deliberately trying to anger you with their unsupported opinions.  To respond only makes them feel wanted - like the unloved child provoking a parent to punish them.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DrCFields on September 12, 2013, 03:45:15 am
I do not know if this has to do with the BW hack or Win XP. After hacking I tried to connect the USB on the back of the DSO5102BM to my computer and it finds the hardware but asks for SEC S3C2410DX Test B/D (which is not on the install CD) I searched online and all I found other than the usual driver/trojan providers was something about needing a bios upgrade, but that was for a different piece of test equipment.
Can you advise?
Thanks.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 12, 2013, 05:54:05 am
SEC S3C2410DX Test B/D (which is not on the install CD)

while booting - before linux has been loaded, the DSO is sending different VID/PID (which belongs to the bootloader).
Simply do not connect DSO before it has complettly booted to DSO firmware.

When you wish that driver installed - wchich is not necessary to use any DSO function (so for what so ever reason),
then use this one

http://www.friendlyarm.net/dl.php?file=usb-downloaddriver.zip (http://www.friendlyarm.net/dl.php?file=usb-downloaddriver.zip)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sorin on September 12, 2013, 08:47:11 am
Best course is to ignore ignorant people who are deliberately trying to anger you with their unsupported opinions.  To respond only makes them feel wanted - like the unloved child provoking a parent to punish them.

 :-+
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: dr_p on September 12, 2013, 10:28:25 am
I recently saw a discussion about handheld Hantek scopes being up-gradable as well, so I searched this thread but found nothing about my model.


Can a Hantek DSO8060 be upgraded from 60MHz bandwidth? It looks like Hantek upped the sampling rate at some point for this model, so I think it has 250MS/s. That's still 4 times lower than the 1060, maybe it has to do with the extra function generator that's taking some FPGA real-estate?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 12, 2013, 10:44:04 am
I recently saw a discussion about handheld Hantek scopes being up-gradable as well, so I searched this thread but found nothing about my model.

on the very first page of this thread there is list of all models which can be hacked.

Can a Hantek DSO8060 be upgraded from 60MHz bandwidth?

short answer - no.

It looks like Hantek upped the sampling rate at some point for this model, so I think it has 250MS/s. That's still 4 times lower than the 1060, maybe it has to do with the extra function generator that's taking some FPGA real-estate?[/font][/size]

DSO1060/DSO1200/DSO8060 they all have very similar hardware, the only difference are the extras (the AWG is an extr FPGA, you can completty remove it and DSO will still work, same for DMM - complettly separate part of circuit) and sampling rate, which probably isn't even hardware dependant, probably the ADC is even the same and with a different firmware you could get more. However, nobody ever tested this, on the other side upgrading firmware from 8060 to 1200 would remove the AWG capability (the AWG itself is an Hantek DDS 3x25).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: dr_p on September 12, 2013, 11:06:04 am
Thank you for the detailed and complete answer, it's all clear now.



I guess 60MHz will do for my use.  :-/O
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 12, 2013, 11:41:41 am
I guess 60MHz will do for my use.  :-/O

i give you a hint :)

When you only wish to increase the analog bandwidth, without changing the sample rate, then you could try to replace the mux ic  HEF4052BT (the one between the metal can and the two ADC on which small heatsinks are mounted) by something with bit more bandwidth, e.g. CD74HC5052 from TI oder 74HC4052 from NXP (or maybe even better once, you will have to compare them together and to HEF4052B/BT which is the worst one).

The DSO1200 is using MAX what so ever mux ic's, but better xx4052 mux should bring some MHz as well.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 12, 2013, 11:44:07 am
btw, but when you doing it, then make measurments before and after to compare results :)
That will be not only for you, but when it works, for others as well.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Tasman on September 14, 2013, 09:51:06 am
I've got a little problem with my Hantek scope.  I bought the DSO5102B back in early 2010, before this thread started. Judging by the condition of packaging when it arrived it had been around for a while before I got it so its now probably getting on for four years old.  During that period it has spent a lot of time unused and recently when I started using it again I noticed that it was losing trigger settings and getting strange offsets and calibration changes when powered off.  It would work ok. after self-calibration then lose it all again next shut down.

  Anyway this gave me the excuse to buy another scope ;) and I shelved the Hantek until I got some spare time.  When I pulled it apart I found that the backup battery was low and decided to change it.  Intended to do this with power on but got called away and forgot to boot up when I came back before changing battery.

Scope now powers up with the standard noises (relay clicking etc) and the usual buttons light up but the screen is dead.  Functions like autoset appear to work, or at least make the right noises and vertical gain relay clicks at about the right point etc. 

Before I make any more stupid mistakes can anyone give some advice on what to do next?  Since I have another scope there's no urgency but I don't like to throw away gear if its useable. 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 14, 2013, 11:10:47 am
I've got a little problem with my Hantek scope.  I bought the DSO5102B back in early 2010, before this thread started. Judging by the condition of packaging when it arrived it had been around for a while before I got it so its now probably getting on for four years old. 

so probably the hw0, which wasn't affected by any known hardware bugs, that's already good.

recently when I started using it again I noticed that it was losing trigger settings and getting strange offsets and calibration changes when powered off.  It would work ok. after self-calibration then lose it all again next shut down.
the selfcalibration is creating files and saving its own results into memory. So that can be file system error, the data can't be saved were the already loaded into memor is giving you working DSO until next reboot.

The first thing i would do is to conect via UART to PC and then see if there are any files in /mnt directory, what is the free space (in principle to check it there is any junk on the file system). It would make sense as well to update firmware, where of course the question is what firmware is currently installed. Direct update should still works, in worst case you will have to copy some files before you run update. The latest firmware is still working on my 2009 mainbaord, so it should as well work on yours (when you have hw0, with hw1005 i don't know, maybe not maybe yes).

Anyway this gave me the excuse to buy another scope ;)
it is always good to have an excuse :)

When I pulled it apart I found that the backup battery was low and decided to change it.  Intended to do this with power on but got called away and forgot to boot up when I came back before changing battery.
afaik the battery is only used to save the date/time, and afaik the firmware don't care about what set there.

Scope now powers up with the standard noises (relay clicking etc) and the usual buttons light up but the screen is dead.  Functions like autoset appear to work, or at least make the right noises and vertical gain relay clicks at about the right point etc. 

looks like bad contact on the large FPC, so the display is not getting the +5V for backlight. It can be as well the power supply cable on right side. This plug supply +5V for USB and display and +3.3V for the whole digital part of the DSO. So when this is plug issue, you should not measure any voltage on the USB port on the frontpanel. If there is 5V then it is the FPC bad contacting.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 14, 2013, 11:13:27 am
Before I make any more stupid mistakes can anyone give some advice on what to do next? 

btw, check the very first page in this thread, there a links with schematics of these DSOs, so that can be helpful as well.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Tasman on September 14, 2013, 12:02:16 pm
Many Thanks Tinhead - you are amazing. Some further information: the hardware is hw0 and I hacked the scope using your original patch on a usb stick.  The faults occurred with all firmwares and 130425.0 is currently installed.

I'll have a look at the schematics and the items you suggest, here's hoping it's not just a box of spare parts.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 14, 2013, 12:09:02 pm
Many Thanks Tinhead - you are amazing.

you welcome

Some further information: the hardware is hw0 and I hacked the scope using your original patch on a usb stick.  The faults occurred with all firmwares and 130425.0 is currently installed.

ok, so it will be not the firmware itself, probably only NAND out of space (or bad sectors).

I'll have a look at the schematics and the items you suggest, here's hoping it's not just a box of spare parts.

it is really hard to destroy them, sure, not everybody will manage to re-solder BGAs, but everything else is docummented and can be replaced/repaired.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Tasman on September 15, 2013, 09:06:30 am
Update on the display backlight issue

looks like bad contact on the large FPC, so the display is not getting the +5V for backlight. It can be as well the power supply cable on right side. This plug supply +5V for USB and display and +3.3V for the whole digital part of the DSO. So when this is plug issue, you should not measure any voltage on the USB port on the frontpanel. If there is 5V then it is the FPC bad contacting.

Measured voltage at USB as suggested - 1.8V but at high impedance.  Also checked continuity between +5V pin on plug and USB and found open circuit.

Removed the main board and began tracing the power distribution from schematic then noticed that the p channel mosfet that is shown in the schematic switching power to the backlight was not there. There was no damage to the pcb pads and no remains of tabs - just perfect impressions in the solder of where the tabs had been, with a frosty oxidised appearance like a dry joint.  I remembered that the backup battery had been very tight and I had applied a fair bit of force using a plastic spatula when it suddenly let go and shot out of the socket.  The spatula must have then hit the transistor and knocked it off the board.  Significant point, I think, is that if the soldering had been good either the transistor would have been undamaged or the tabs would have remained in place if the transistor body was broken. 

All well and good this explains the lack of backlight, but why no power to the USB?  With a bit of further tracing I found that the USB power is also taken from the drain of this transistor!  There appears to be an error in the schematic - it shows the USB as directly supplied from +5V (see pdf).

These discoveries might shed some light on the other problems.  I didn't mention earlier that I also had difficulties with the using the USB port.  When a stick was plugged in the DSO would often initially recognise it then immediately announce that it had been disconnected.   When a stick with firmware had finally after several attempts been recognised the firmware update process often required several more attempts before it decided to start.  Perhaps this was due to high resistance at the mosfet terminals dropping voltage to the USB?

Anyway I can't find a suitable mosfet right now so will have to leave it for a couple of days.  Thanks for the help so far.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 15, 2013, 11:14:41 am
right, this is an error in schematic on hw0. An really unusual design to bundle VLCD and VUSB together, controlled by single mosfet (probably a cost savings idea). In hw1005 and hw1007 this seems to be fixed, the +5 from PSU is directly routed to USB, buzzer and other circuis that need +5V. The VLCD is of course then still controled via mosfet.

So yeah, good finding.

Regards your DSO, solder a wire and you fine. Who cares about when the display goes on :P
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Tasman on September 15, 2013, 11:34:40 am
Regards your DSO, solder a wire and you fine. Who cares about when the display goes on :P

Thanks, I was going to do that but thought perhaps there was some reason why they put the switching circuit there in the first place.  Is there?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 15, 2013, 11:39:33 am
thought perhaps there was some reason why they put the switching circuit there in the first place.  Is there?

sure, normally you would not power up backlight before the display logic is on, that looks sometimes ugly.
For USB it didn't matter here, for sure it could be controlled via i/o pin, but for sure not tgether with display backlight.

So no, if there was a reason to control the 5V, then only in regards of backlight control.

Btw: i'm using wire on my hw0 since loong time, some day i shot that mosfet to nirvana and was to lazy to solder anythign else than a wire.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 16, 2013, 07:54:32 am
Sorry, does anyone have a copy of new DSO5202P firmware? I'm trying to upgrade my 5072p, have no problems with 5102 version, but link to 5202P from the http://www.hantek.com.cn/en/PagesFW_Vzxgj.html (http://www.hantek.com.cn/en/PagesFW_Vzxgj.html) doesn't work...

ask Hantek! I told them already 4 weeks ago that this link didn't work, but still not fixed.

uh9lab,

did you got anything from them?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: uh9lab on September 16, 2013, 10:40:05 am
Unfortunately, no. Same for Russian dealer, no answer. Maybe that's because I wrote 5072 serial during registration.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Tasman on September 16, 2013, 10:52:02 am
Update on problems:

Have reversed the unscheduled alterations caused by my clumsiness and the scope now has a visible display.  Carried out a more methodical investigation of the original faults with the following results:

There are two faults, which occur only on Channel 2.  Channel 1 has no issues.

Fault 1:  On bootup from cold CH2 will not trigger until 5 to 10 minutes later - time seems to be temperature related.  No further triggering problems until shutdown for more than 20min, when CH2 again fails to trigger for a while.

Fault 2: With CH2, single channel, 4K memory depth the trace is ok at 400ns/div but has a large offset at 200ns/div  (see attachments).  The offset varies over time but so far is not observed to exceed signal amplitude above or below zero.  Problem occurs at all signal amplitudes. No problems with CH1 alone or two channel operation under same conditions.  No problems at all with other memory depths.

Problem appears hardware related but analogue or digital? And why does memory depth affect offset?
Any suggestions?


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 16, 2013, 11:22:57 am
Update on problems:

Any suggestions?

it would be nice if you could first update to latest firmware, there are sometimes hugh differences between versions

http://www.hantek.com/Product/DSO5000Series/DSO5202B_Firmware.zip (http://www.hantek.com/Product/DSO5000Series/DSO5202B_Firmware.zip)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 16, 2013, 11:24:50 am
Unfortunately, no. Same for Russian dealer, no answer. Maybe that's because I wrote 5072 serial during registration.

ehm, i thought you bought real 5202P and not 5072? I saw some on ebay, but honestly no idea if they really exists or simply stupid dealers. Sure, Hantek is listing that model, but who knows.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Tasman on September 16, 2013, 11:44:34 am
Update on problems:

Any suggestions?

it would be nice if you could first update to latest firmware, there are sometimes hugh differences between versions


Sorry forgot to mention that same problem occured with 130306.0, 130425, and now with 130814.0...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 16, 2013, 04:22:05 pm
not getting anything like you got, not on cold nor warm hw0 nor hw1007. To ensure this have nothing to do
with calibration of your DSO, please provide me following files:

/tdc_edge125M
/tdc_overtime125M
/tdc_pulse125M
/chk_base_volt
/mult_adc.log
/tdc.log
/param/sav/chk1kb_091023


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: uh9lab on September 17, 2013, 03:56:04 am
ehm, i thought you bought real 5202P and not 5072? I saw some on ebay, but honestly no idea if they really exists or simply stupid dealers. Sure, Hantek is listing that model, but who knows.

I think it really exists, it can be pre-ordered from local dealer: http://www.hantek.ru/products/dso5202P.html (http://www.hantek.ru/products/dso5202P.html)
But this dealer warns that questions are forwarded to China and it can take a long time to get any solution...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Tasman on September 17, 2013, 04:11:25 am
Problem Solved! :)

Took a closer look at the PCB and found discolouration of some pins on both top adc's.  Looked like flux residue and cleaned up easily with alcohol and q-tip.  Now have no problems with offsets on CH2 and triggering is much better than ever, rock solid on both channels with no warm-up required.  Previously there had been an occasional trigger jitter on CH1 and a lot more on CH2 at all times.  Will have a look at bottom adc's later.

Perhaps this issue or something similar is cause of trigger problems Dave found in his review?


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 17, 2013, 07:44:56 am
Problem Solved! :)

Took a closer look at the PCB and found discolouration of some pins on both top adc's.  Looked like flux residue and cleaned up easily with alcohol and q-tip

fantastic! Between 400ns and 200ns in single channel the DSO is switching from 4 to 8 ADCs together, so yeah, here it make sense that when some from them have offset the result have offset as well. Wondering only why in 80ns and higher the offset was not there, but as long it works, who cares. Problem and solution noted, knowing how much flux residue was on earlier models i bet others have/will get similar issues.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 17, 2013, 07:52:41 am
I think it really exists, it can be pre-ordered from local dealer: http://www.hantek.ru/products/dso5202P.html (http://www.hantek.ru/products/dso5202P.html)
But this dealer warns that questions are forwarded to China and it can take a long time to get any solution...

so it looks more like "produced on request". That item on ebay, 141031651719, seems to be photoshop made. But this one, 271262770701, looks like genuine DSO5202P.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Tasman on September 17, 2013, 07:53:00 am
Problem Solved! :)

Spoke too soon - when I reassembled after cleaning bottom adc's the problem was back again in all its glory. |O

Now I find that it comes and goes as I apply pressure to the PCB around the area of the input circuitry so it looks like a dry joint or cracked trace - somewhere.....
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 17, 2013, 08:00:32 am
Spoke too soon - when I reassembled after cleaning bottom adc's the problem was back again in all its glory. |O

Now I find that it comes and goes as I apply pressure to the PCB around the area of the input circuitry so it looks like a dry joint or cracked trace - somewhere.....

i would check relays, offset opamps, voltages on AD8370, these 2 resistor arrays in each input channel (when they broken, and DSO cold, you would have no trigger), the trigger mux LMH6574MA.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 17, 2013, 08:27:31 am
... cracked trace - somewhere.....

in moments like this i always thinking "why the hell i haven't made any PCB picture, with all inner layers".

Anyway, it will be probably dry joint or physicaly broken cap/resistor, i had only once cracked trace on a handheld, where the PCB was "abused" by Hantek engineer before and probably technican/worker who decided to mount the PCB wrongly and "fix it with screews". Any other "non working/DOA" DSO i saw was broken due dry joints or broken parts.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: int21h on September 17, 2013, 02:45:01 pm
this is crap, someone just bought latest MSO5202D model from Hantek and installed latest firmware from Hantek website. ... and of course the MSO is now bricked !!!
I just did this to an MSO5102D.  It's on it's way back to China.  Not happy  >:(
Got my replacement unit.  Just a quick question: the Single Seq button is translucent, like the Run/Stop and auto buttons, but it doesn't light up.  Is it supposed to?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 17, 2013, 03:26:02 pm
Got my replacement unit. 

happy you

Just a quick question: the Single Seq button is translucent, like the Run/Stop and auto buttons, but it doesn't light up.  Is it supposed to?

no, there is no LED for that button.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 17, 2013, 03:28:02 pm
this is crap, someone just bought latest MSO5202D model from Hantek and installed latest firmware from Hantek website. ... and of course the MSO is now bricked !!!
I just did this to an MSO5102D.  It's on it's way back to China.  Not happy  >:(
Got my replacement unit.

btw, they now not only posted two firmware versions, btu as well changed version check.
So my backups tools might not work now anymore, i will have to update them as well then.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: echen1024 on September 17, 2013, 09:46:20 pm
Got my replacement unit. 

happy you

Just a quick question: the Single Seq button is translucent, like the Run/Stop and auto buttons, but it doesn't light up.  Is it supposed to?
I'm thinking of a jury rigged hack to make it light up...

no, there is no LED for that button.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 17, 2013, 09:58:00 pm
I'm thinking of a jury rigged hack to make it light up...

for sure it is cool to have "spare" translucent button, it can be used for what so ever ...

i never had the chance, you might wonder what i'm talking abut .. see here:

(http://www.mikrocontroller.net/attachment/128937/1.jpg)

on my Tekway this button was not translucent^^

When talking about LED hacks, the Auto-set button is always on - but not when auto-set is running :P
I would say more logical would be to have that button all the time off, except auto-set has been started.
Title: new firmware for Hantek/Tekway/Voltcraft MSOs
Post by: tinhead on September 18, 2013, 08:38:51 pm
I've made "new" firmware for all who have MSO with hardware revision hw1007, firmware 2.x.x.

I've patched everything i don't like on these MSOs:

- English.lan changed to what this file is on DSOs, all the LA/MSO specific items are now esier to understand^^
Example, there is duration trigger, Hantek used condition "<", ">" and "=" in English, but in chinese "End of data", "Begin of data" and "data length", so i've changed them as well so. As well other strings changed.

- the automatic 20MHz LPF in 2mV is now removed

- added sample rate indicator (instead of date/time), in single window you have to hide menu, in dual window always visible

- FFT full span bug fixed, this is alreay fixed on DSOs, on MSO Hantek missed to fix it, so i did it. Now the sample rate is twice the full FFT span in 800ns/DIV to 20ns/DIV, originaly it was only 1.6 times higher which was violating nyquist theorem.

- in FFT disabled the sample rate indicator, it does have bug anyway, my indicator works better. Additionally changed, for better understanding, the /DIV to the FFT frequency indicator in the status line

- default setup changed, now when set to default the DSO is using "screen refresh rate=50" instead of "=auto". This works better and it does speed up not only the display but as well cursors/buttons response.

- default setup changed, now when set to default the DSO is using "Wave intensity=9" instead of "=12"

- default setup changed, now when set to default the DSO is using "holdoff=100ns" instead of "=500ns",
this is now like on DSOs, they using 100ns as well.

- moved the "Help" from "Help button" to "Utility->Page2/3"-> Sys Status". I never like that Sys Status,
sure useful to get some informations like sample rate, but that can be displayed in a different way.

- the whole LA/MSO functionality removed from F7 menu, now it is exact like on DSO, F7 is switching
only between single and dual window.

- the whole LA/MSO is now under the "Help" button, so when you need LA, push that button,
when you don't need it anymore, push it again.

-H/L indicator bug fixed, in all LA triggers the L/H letters are switched, so when you set "trigger on HLLH" the MSO
is triggering on "LHHL". This is now fixed.

Attached list of all my changes (changes.asm), so everybody who wish can easily follow up what i changed/added.
As well atached map files, for original 2.7.01_(130826.0) and for my version, 2.7.01_(130826.1)

I don't think that Hantek will ever implement my F7/help button change, that would be probably hard to explain
to all users out there, so probably we will have to patch further versions as well (that's why i made a list of changes).


Install note: simply install, my update will remove any language files and add only English.lan, so don't be surprised. Only dso.exe will be installed (and top_la.rbf with clk out for Ethernet on MSO). The rcS will be not modifed/repalced during update

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 18, 2013, 08:44:37 pm
For all who have new MSO hardware, with firmware 3.x.x

when you wish to have all these changes implemented on your firmware, then do it :)

I can't do it, because i can't test, but with attached map file, the two 2.x.x map files and the list of changes (see previous page of this thread) you can easily change your 3.x.x firmware as well. The map file is for the firmware 3.2.35_(130826.0), you can find it here:
http://www.hantek.com/Product/MSO5000D/MSO5202D_Firmware(3.2.35).zip (http://www.hantek.com/Product/MSO5000D/MSO5202D_Firmware(3.2.35).zip)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 18, 2013, 08:47:43 pm
forgot something, while playing with the MSO duration trigger i found out that there is an ugly bug,
for sure on 2.x.x and i bet on 3.x.x as well. Here my text which i've send to Hantek:

"Begin of data" and "End of Data"
when timebase from 40ms to 4us the duration scale is fixed to 2us/DIV.
No matter what i set, one display DIV is equal 2us.

when timebase from 2us to 200ns - everything ok

when timebase from 80ns to 2ns the duration scale is again wrong, on
80ns/DIV duration fixed to 160ns per DIV, when timebase 40ns/DIV then
duration fixed to 80ns per DIV, etc.

"Data length"

ok only when timebase set from 2us/DIV to 200ns/DIV.
From 80ns/DIV to 2ns/DIV partially ok, the data delay length will be
properly triggered (except jitter, but that's ok), however the position
have an offset (always about half of the data length).

When timebase from 4us to 40ms the duration must be always set smaller
and smaller to allow triggering. For example at 4us/DIV i have to set
for duration the half of the real value. For 8us/DIV again half of the
4us/DIv value or 1/4th of the real pulse length. For 20us/DIV i need the
set the pulse width / 2.5  2  2 to get the delayed data triggered. I
have NOT tested bigger values than 2ms/DIV, this is because the
resultion of LA is not allowing such small values (less than 10ns), but
it seems that the whole range 40ms/DIV to 4us/DIV is affected by the
"divide / 2 or 2.5" error.
Title: question to all Hantek/Tekway/Voltcraft user
Post by: tinhead on September 18, 2013, 08:55:14 pm
For all DSO users :)

What do you think, that Sample Rate indicator as shown here in my patched MSO firmware:

(https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=60839;image)

and here

(https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=60841;image)

Shall i request this to be implemented officialy on DSOs?
Maybe even with an option to choose "time/date" or "sample rate"
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: timmo on September 18, 2013, 09:15:48 pm
Hi,

Just got a Hantek DSO5072P.

I've changed the bandwidth and got the quieter fan to fit (thanks!) and am just wondering if there is any benefit to fitting the micro SD card or RJ45 port and transformer (looks like a HTX1260NL?).

Watching the OS boot it seems to attempt to boot from SD before NAND so could this be an easy way for trying newly compiled bits?
The LAN port driver seems to be installed in the OS, could this make life a little easier for transferring files onto the scope or even act as an SSH connection?


BTW I like the idea of the sample rate indicator, not always useful but it's a good bit of extra information that is presented in an unobtrusive way!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 18, 2013, 09:39:37 pm
just wondering if there is any benefit to fitting the micro SD card or RJ45 port and transformer

depends, for sure on B models the SD card can be used to save waveforms, etc.
Ethernet is always nice to thing, when something wring and dso.exe/dso_bin is not starting anymore
you can then easily connect via telnet or ssh and fix things.

(looks like a HTX1260NL?).

no idea, you will have to check pinout, i think it is H1102NL

Watching the OS boot it seems to attempt to boot from SD before NAND so could this be an
easy way for trying newly compiled bits?

the S3C2416 SoC does support SD card boot, so yes, it can be useful for some things

The LAN port driver seems to be installed in the OS, could this make life a little easier
for transferring files onto the scope or even act as an SSH connection?

yes it is, however another user reported that it need to be reloaded during boot to work properly
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 18, 2013, 10:52:51 pm

(looks like a HTX1260NL?).

no idea, you will have to check pinout, i think it is H1102NL


timmo,

just checked my PMs, yes, it is H1102NL.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: uh9lab on September 19, 2013, 03:23:46 am
Just got a Hantek DSO5072P... I've changed the bandwidth

You installed firmware from 5202P, right? Could You please give me a link for it?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 19, 2013, 07:01:23 am
Just got a Hantek DSO5072P... I've changed the bandwidth

You installed firmware from 5202P, right? Could You please give me a link for it?

there is no need to install 5202P firmware to get 5072P changed to 5202P (unless you need bootlogo)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: uh9lab on September 19, 2013, 03:57:24 pm
there is no need to install 5202P firmware to get 5072P changed to 5202P (unless you need bootlogo)

Oh, thanks for allusion, I started reading this thread again from the beginning and at last got 2ns. :-)

BTW, after flashing 5102P firmware bootlogo still shows 5072, but doesn't matter.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 19, 2013, 04:10:24 pm
there is no need to install 5202P firmware to get 5072P changed to 5202P (unless you need bootlogo)

Oh, thanks for allusion, I started reading this thread again from the beginning and at last got 2ns. :-)

BTW, after flashing 5102P firmware bootlogo still shows 5072, but doesn't matter.

right, the firmware does not contain the frame buffer driver in which the bootlogo has been implemented, you have to build your own frame buffer driver (or wait until owner or legit 5202P will provide one).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: uh9lab on September 19, 2013, 04:39:16 pm
Ich danke Ihnen tausendmal!

 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 19, 2013, 05:03:57 pm
Ich danke Ihnen tausendmal!

hehe, you welcome. I will see, maybe i will compile all these frame buffer drivers, so everybody who need will then simply copy one.
Title: new customized firmware for Hantek/Tekway/Voltcraft DSOs
Post by: tinhead on September 19, 2013, 08:00:10 pm
as few ppl asked for patched (as above for MSO) firmware whcih displays the Sample rate, i've made one, for following DSOs:

 - Tekway DST1062B, DST1102B, DST1202B
 - Hantek DSO5062B, DSO5102B, DSO5202B
 - Voltcraft DSO3062C, DSO1062D
 - PCE DSOs: PCE-DSO5062B, PCE-DSO5102B, PCE-DSO5202B

How to install : as any firmware update. Ensure that your DSOs is listed above and does have firmware 2.06.3 installed.

Changes:

- added sample rate indicator (instead of date/time), in single window you have to hide menu, in dual window always visible

- in FFT disabled the sample rate indicator, it does have bug anyway, my indicator works better. Additionally changed, for better understanding, FFT frequency indicator in the status line to display /DIV

- default setup changed, now when set to default the DSO is using "screen refresh rate=50" instead of "=auto". This works better and it does speed up not only the display but as well cursors/buttons response.

- default setup changed, now when set to default the DSO is using "Wave intensity=9" instead of "=12"

How the firmware looks like:

(http://www.mikrocontroller.net/attachment/191671/dso_fw1.png)

(http://www.mikrocontroller.net/attachment/191672/dso_fw2.png)


Where to get :

http://www.mikrocontroller.net/attachment/191673/dst1kb_2.06.3__130814.1_.up (http://www.mikrocontroller.net/attachment/191673/dst1kb_2.06.3__130814.1_.up)

Other infos:

The firmware is based on the Hantek fw 2.06.3_(130814.0), so when you wish to know what changed compare them.
Title: time to say "Thank you Dave!"
Post by: tinhead on September 19, 2013, 09:27:42 pm
As i'm very close to 2000 replies and 400000 views time to say Thank You Dave for support!

One might wonder what i mean, well, some time ago i've posted that call:

1500 replies and (nearly huhu, made it) 250000 views ... Dave, where is my DMM ?   :-//

Perhaps there should be a prize for threads that crack numbers like that.
Email me your snail mail address!

Dave.

and Dave was nice to send me that BK 2709B from his review (EEVblog #99 - $100 Multimeter Shootout),
as an "motivation" to post more, which i did of course  :-+

Owners of that DMM would now probably said "gosh, he knew it, that thing is beeping all the time", and that's right, but i hacked this as well with some single gates, so no beep anymore (except within  continuity test). I should post that hack, will do some day, eventually^^

Anyway, once again thank Dave for support, and yeah, i will keep posting, maybe some day (when i reach another magic number) you will send me an DSO (one that not need customized firmwares and does have nice pulse response hehe)
Title: new customized firmware for Hantek DSO5xxxP models
Post by: tinhead on September 21, 2013, 01:40:20 am
to make it complette, i've made customized firmware for "P" models having all the things as these posted above patched MSO/"B" DSO firmwares.

That firmare is compatible with following models:

 - Hantek DSO5072P, DSO5102P, DSO5202P


How to install : as any firmware update.

Changes:

- added sample rate indicator (instead of date/time), in single window you have to hide menu, in dual window always visible

- in FFT disabled the sample rate indicator, it does have bug anyway, my indicator works better. Additionally changed, for better understanding, FFT frequency indicator in the status line to display /DIV

- default setup changed, now when set to default the DSO is using "screen refresh rate=50" instead of "=auto". This works better and it does speed up not only the display but as well cursors/buttons response.

- default setup changed, now when set to default the DSO is using "Wave intensity=9" instead of "=12"

- disabled "Sys Status" menu (that button could be now used for somethign custom, any idea what could be useful?)

How the firmware looks like (exact as the others):

(http://www.mikrocontroller.net/attachment/191671/dso_fw1.png)

(http://www.mikrocontroller.net/attachment/191672/dso_fw2.png)


Where to get :

http://www.mikrocontroller.net/attachment/191824/dso5kp_v3.40_dso5xx2p.up (http://www.mikrocontroller.net/attachment/191824/dso5kp_v3.40_dso5xx2p.up)

Other infos:

The firmware is based on the Hantek fw 3.40.0(130717.0), which is on Hantek website tagged as e.g.
dso5kp_v3.40_dso5102p20130722.0.up, so when you wish to know what changed compare them both.

And yeah, test it and let me know if you like it (or not)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 21, 2013, 11:27:14 am
I can see download counter increasing but no comments at all, not here, not PM nor emails :\

So is everybody pissed off of happy or i don't know? I really need feedback, without no idea if i have to spend time on firmware or what so ever things related to these DSO/MSOs
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: uh9lab on September 21, 2013, 02:30:49 pm
Well, I just tried it. Everything works fine, for me, it's pleasant to see sample rate and to have 50Hz by default. Thank You!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 21, 2013, 03:21:46 pm
Well, I just tried it. Everything works fine, for me

that's good, i haven't really tested it before i've posted :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: cosmos on September 21, 2013, 04:33:44 pm
Thanks tinhead for your relentless work,  sorry for delayed response to your update.

I applied your MSO update the day it was released and it looks good the little I have seen.
I like the change to F7 and HELP, I also like the changes showing samplerate.
I wanted to check it out more in detail and then give you a more precise feedback but have not found time for that yet.
Did you update anything to the logic analyser part except for the HELP button?
I only tried the DSO part so far, except I noticed while trying the HELP button that I still have spurious flashes of random data on all LA channels.

LA is the most broken part as far as I am concerned.
   not all samples captured in LA memory can be zoomed to
   LA memory seems to be only 4k deep (should be 512k?)
   triggering in mixed mode leaves the LA data trailing the DSO data by one event (seems like it is only a misplaced refresh operation since if you force a display refresh by operating controls it shows the newest samples)

The support from Hantek has been horrible and unresponsive to the point that I have given up any hope they will fix the LA in the foreseeable future.
Also beware of their support web site, they log your IP (that is OK i guess) and publish it in full for all posters (NOT OK). Pointed it out 5 months ago and they would look at blanking out parts of it to shield their customers... not a thing happens   >:(

As a result I have moved on to a DS4014.  First priority on my home lab todo list at the moment is checking out the BW settings on the I2C bus of the DS4014 (looking for confirmation that BW limits are set as in DS2000).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firehopper on September 21, 2013, 05:31:37 pm
its not for my dso5072p/dso5202p or I would have tried :)
 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 21, 2013, 05:34:39 pm
its not for my dso5072p/dso5202p or I would have tried :)

i don't know how is your DSO5xxxP but i think it will work, check what i wrote:

That firmare is compatible with following models:

 - Hantek DSO5072P, DSO5102P, DSO5202P
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firehopper on September 21, 2013, 06:02:47 pm
Lol how did I miss that the update went smoothly. currently running self calibration. we shall see how it works/


its not for my dso5072p/dso5202p or I would have tried :)

i don't know how is your DSO5xxxP but i think it will work, check what i wrote:

That firmare is compatible with following models:

 - Hantek DSO5072P, DSO5102P, DSO5202P
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firehopper on September 21, 2013, 06:24:10 pm
so far seems to be good. nice fast responses and seems to be fine. anything you want me to test?


Lol how did I miss that the update went smoothly. currently running self calibration. we shall see how it works/


its not for my dso5072p/dso5202p or I would have tried :)

i don't know how is your DSO5xxxP but i think it will work, check what i wrote:

That firmare is compatible with following models:

 - Hantek DSO5072P, DSO5102P, DSO5202P
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: richardbb on September 21, 2013, 06:29:59 pm
works good on my DSO5072p as well, sample rate info is useful

how about running a custom script on clicking the "sys status" button, the user could edit it to do what they want. probably not very useful to most people though
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 21, 2013, 06:58:47 pm
how about running a custom script on clicking the "sys status" button, the user could edit it to do what they want.

that can be done very easy, there is place for 47 instructions in the affected firmware function (DoKeyOption5InMenuUtility1)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 21, 2013, 07:08:56 pm
Did you update anything to the logic analyser part except for the HELP button?
I only tried the DSO part so far, except I noticed while trying the HELP button that I still have spurious flashes of random data on all LA channels.

nothing what could have influence, i'm calling the LA in exact same way they doing. These random data, that seems to apears on my device especially when set to 200ns/DIV. As well of course when tri

LA is the most broken part as far as I am concerned.
   not all samples captured in LA memory can be zoomed to
   LA memory seems to be only 4k deep (should be 512k?)
   triggering in mixed mode leaves the LA data trailing the DSO data by one event (seems like it is only a misplaced refresh operation since if you force a display refresh by operating controls it shows the newest samples)

yeah, waiting since a year to get firmware which supports the full memory, shame on them. 49k was already working in one version, but unstable. Bad design? I don't know, i don't see issue why the data can be transfered from one FPGA to ARM but not from the other FPGA. So it must be something else. The other things are bugs which i'm trying to find/track/forward, i can't test everything so every feedback can help a lot

The support from Hantek has been horrible and unresponsive to the point that I have given up any hope they will fix the LA in the foreseeable future. Also beware of their support web site, they log your IP (that is OK i guess) and publish it in full for all posters (NOT OK). Pointed it out 5 months ago and they would look at blanking out parts of it to shield their customers... not a thing happens   >:(

shall i really comment that :P

with the IP shown all the time was however nice to see that they posted problems with one user, and solved with another, yeah, how smart. Probably they tried to shwo that they doing something.

As a result I have moved on to a DS4014.  First priority on my home lab todo list at the moment is checking out the BW settings on the I2C bus of the DS4014 (looking for confirmation that BW limits are set as in DS2000).

oh well, this is what i told them so many times. They simply not fast enought with bug fixing, no idea why. Maybe it is hard to get good engineers, on thier chinese HR page you can see they have lot of open positions. Now they released new products and probably hoping to get some positive feedback about new hardware .. but i doubt that i will  be able (in case i receive one day the new 4ch hardware, i think/hope it is now on the way ...) to do so, how can be my feedback positive when the hardware, which exists since long time (talking about LA now, DSO itself is almost fixed if i don't think about digital filters or equ sampling), is still having such issues like the missing >4k memory depth in LA. This have to be there! People bought their MSOs with that feature, but it is not there, and that's really crap. One might wonder what have new 4ch model with "old" 2ch models, short answer - many things, as they continuesly improving. So when existing things not fixed, they taking them into new things as well and the discussion starts from begining. Best example - the FFT full span bug in curent MSO firmware. It is fixed in DSOs since long time, but it must be hard to write down what done on one side and to implement it as well on the other side :\

I think sometimes the engineer even don't know that x or y didn't work properly ...  :rant: the information flow is sometimes not given, no chance to achieve something without lot of presure. Sure, these products are not really expensive, but that can't be an excuse for bad work, never ever. On the other side this is the learning process, look at ATTEN - for years crap company (and i shall said look on Siglent because all that ATTEN DSOs was made by Siglent team). And Rigol wasn't better years ago as well. Rigol is now much better, Siglent at least good enough for LeCroy, whatever this means.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bigmessowires on September 24, 2013, 03:34:50 am
I've been lurking in this thread for a couple of days now - thanks for all the great information! I don't actually own a Hantek scope, but I'm considering getting one soon. Actually I was first looking at the Hantek MSO with the logic analyzer functions, before I read about the issues with it here. So I will probably stick with one of the DSO models.

I wrote a story on entry-level oscilloscopes, technology and some comparison of a few popular models (including the Hantek) for my blog, and included a shout-out to the thread here for more Hantek details. Check it out if you're inclined: http://www.bigmessowires.com/2013/09/23/entry-level-oscilloscopes/ (http://www.bigmessowires.com/2013/09/23/entry-level-oscilloscopes/)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 24, 2013, 07:13:15 am
I wrote a story on entry-level oscilloscopes, technology and some comparison of a few popular models (including the Hantek) for my blog, and included a shout-out to the thread here for more Hantek details. Check it out if you're inclined: http://www.bigmessowires.com/2013/09/23/entry-level-oscilloscopes/ (http://www.bigmessowires.com/2013/09/23/entry-level-oscilloscopes/)

so far ok, maybe bit short about the (necessary) sample rate:
- for single shot more sample point is always better, just think how many are necessary to see
  the exact shape of e.g. 7th harmonic
- for repetitive signals the "4x bandwidth vs. sampling rule" apply only to DSOs
  with gaussian frequency response, but not with flat response; see Agilent 5988-8008EN

In case of these DSOs from this thread, they does have flat response, which is unique for that price class.
This is good from point of measurment accuracy from zero to near bandwidth limit, but it might be easy
misunderstood (ringing) when measuring signals with rise time significant faster than the DSO can measure
accurately (just watch Dave's measuring very fast edge signal in his Tekway review, regardless of the fact that
he have used broken DSO, the extra ringing was misunderstood).

When talking about necessary sample rate it make sense as well to check if DSO is doing interleaving (and if so, then
how and when), sometimes it is better to sample slower (without interleaving) , see Agilent 5989-5732EN
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 24, 2013, 07:48:55 am
I've been lurking in this thread for a couple of days now - thanks for all the great information! I don't actually own a Hantek scope, but I'm considering getting one soon. Actually I was first looking at the Hantek MSO with the logic analyzer functions, before I read about the issues with it here. So I will probably stick with one of the DSO models.

this is question of trust - do you trust manufacturer to be able to fix problems in acceptable time x? If so, buy MSO, if not buy DSO. The MSO itself is nothing else than DSO + additional PCB, so it can be still perfectly used as DSO until bugs fixed.

The annoiyng thing with these MSO is not the fact that only 4k is currently enabled (this is still 4k per channel sampled up to 500MSa/s) or that there is skew between DSO and LA trigger point on higher sample rate (one have to be anyway careful with that, a signal with very fast edge might produce some errors as well):

(https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=61360;image)

I don't like more things like these artifacts on LA, sometimes middle of measurment, sometimes when changi ng timebase, sometimes even when you stop acq, zoom in, move waveform and then boom - they appears on screen. That can ruin your work and be very frustrating:

(https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=61368;image)

Where other things like errors on 800ns/DIV are probably easy to fix, and easy to ignore if one know that they there:

(https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=61362;image)
(https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=61364;image)
(https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=61366;image)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: dr_p on September 24, 2013, 09:07:44 am
I'm back with an irritating problem on my handheld Hantek DSO-8060: I want to make screenshots (BMP, JPG or whatever) via USB, with the push of a button (in the PC app). If I want to document my work, it's annoying to keep plugging in a USB stick, going through the menus and options, wait, unplug USB stick, transfer to PC, save. And do it all over again for every screenshot, because if I screen capture 5-10 images one after another, and then transfer to PC, I don't remember what is what.

I installed the USB driver from Hantek's site, the DSO says PC connected, I have DSO-8060 in device manager.

The Hantek software(v1.04) is crap. I tried it's snapshot button, but it captures the data from the application, not the real screen capture that has many useful additional data (cursors, measurements, trigger status etc plus I like it more :D ). Even more heart stopping, the application screenshot includes the partially transparent "Save as..." window is on top of it. (as it was fading away in Win7) |O |O Genius, guys!!


I tried the USB tool from here: http://www.dreisiebner.at/dso-usb-tool/ (http://www.dreisiebner.at/dso-usb-tool/) but either my DSO-8060 is not supported or I don't understand how to make a screenshot. I tried ticking "handheld" boxes, connect, save, capture... it doesn't work.

I also tried the modified dso-usb-tool that tinhead posted in this thread, specifying it was a semi-working version for handhelds. Same results. I also tried a different USB driver, I don't remember where I got it - same result, nothing works.


Am I doing something wrong?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 24, 2013, 09:39:48 am
I'm back with an irritating problem on my DSO-8060: I want to make screenshots (BMP, JPG or whatever) via USB, with the push of a button (in the PC app). If I want to document my work, it's annoying to keep plugging in a USB stick, going through the menus and options, wait, unplug USB stick, transfer to PC, save. And do it all over again for every screenshot, because if I screen capture 5-10 images one after another, and then transfer to PC, I don't remember what is what.

sorry, but my knowledge about DSO1060, DSO1200 ans DSO8060 is minimal, i know how they looks like inside/outside, i know that they complettly different product line and not comparable the DSO/MSO/Handhelds posted in this thread, but that's all.

The Hantek software(v1.04) is crap.

welcome in club, the PC software for DSO/MSO/Hndhelds mentioned in this thread is crap as well. It is doing something sometimes, but i'm sure the engineer who developed it never worked with DSO nor ever tested the software functionality.

I tried the USB tool from here: http://www.dreisiebner.at/dso-usb-tool/ (http://www.dreisiebner.at/dso-usb-tool/)
...
I also tried the modified dso-usb-tool that tinhead posted in this thread
...
Am I doing something wrong?

no, they will not work, they only compatible to DSO/MSO/Handhelds based on this one specific platform, your Handheld is complettly different product line, it is using different hardware, software, firmware and protocol. So no need to try them.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bigmessowires on September 24, 2013, 03:44:35 pm
- for repetitive signals the "4x bandwidth vs. sampling rule" apply only to DSOs
  with gaussian frequency response, but not with flat response; see Agilent 5988-8008EN

In case of these DSOs from this thread, they does have flat response, which is unique for that price class.
This is good from point of measurment accuracy from zero to near bandwidth limit

I'll check out those Agilent tech notes, thanks! Regarding the frequency response, do you mean that with a flat response, you can capture the correct shape of the signal at speeds all the way up to the bandwidth limit? But that there will be extra ringing for signals above the bandwidth limit, as compared to a scope with a gaussian responose? I guess I should go read the tech note first before asking.  :)

this is question of trust - do you trust manufacturer to be able to fix problems in acceptable time x? If so, buy MSO, if not buy DSO. The MSO itself is nothing else than DSO + additional PCB, so it can be still perfectly used as DSO until bugs fixed.

I don't like more things like these artifacts on LA, sometimes middle of measurment, sometimes when changi ng timebase, sometimes even when you stop acq, zoom in, move waveform and then boom - they appears on screen. That can ruin your work and be very frustrating:

Wow, those artifacts look bad. In my case, I think I decided that even if the MSO features worked correctly, I'd rather have a real logic analyzer with complex triggering, a state listing, channel grouping and naming, etc. I have an old HP1631d now, which has pretty good logic analyzer functions, and I'd hate to lose some of the features it has. So I'm probably going to upgrade to a separate DSO and logic analyzer, instead of a single combo instrument.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: dr_p on September 24, 2013, 04:24:20 pm
thank you tinhead :-+
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bigmessowires on September 24, 2013, 08:58:30 pm
I read the Agilent tech note Agilent 5988-8008EN about float vs gaussian scope response. Very interesting! But after reading it, I'm not sure if it makes me more likely to get the Hantek, or less. The tech note describes how a flat response scope will be more accurate at measuring signal rise times, and maybe have less timing wobble. But the flat response scope will have more overshoot and ringing than a gaussian response scope. For extremely fast signals the difference is pretty significant (technote figure 2), but even for signals below the scope bandwidth (technote figure 3) there is a difference. Personally I can't think if I've ever needed to measure rise time, so additional accuracy there doesn't seem very valuable, but checking for overshoot and ringing is more common.

By the way, figure 2 in that technote is almost exactly what Dave did in his video review, so it explains why he got the result he did. Cool!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 24, 2013, 09:36:40 pm
I think I decided that even if the MSO features worked correctly, I'd rather have a real logic analyzer with complex triggering, a state listing, channel grouping and naming, etc. I have an old HP1631d now, which has pretty good logic analyzer functions, and I'd hate to lose some of the features it has. So I'm probably going to upgrade to a separate DSO and logic analyzer, instead of a single combo instrument.

HP1631d is real logic analyzer, that integrated Hantek LA is definitely for those who don't have room for additional gear or wish to have something fast but maybe not that complex (16ch x 4 state levels is the most complex for it can be setup) logic analyzer. What i would like to see is serial protocol triggering and decoder, for LA and/or analog channels. However, for known reason - just look what happened to Rigol, Tekway/Hantek wasn't really very responsive to such "licensed addon" proposal.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bigmessowires on September 25, 2013, 12:08:14 am
I'm thinking about getting one of the newer Hantek -P models without the long memory, and I'm hoping to confirm a few things:

- Is there any known difference between the DSO5072P and DSO5102P, or will they be exactly the same once they are bandwidth hacked? Maybe the front-end is different, or the probes that are sold with them?

- It seems like some -P models advertise 24K sample memory, but others say 40K. Will they all be 40K after the firmware hacking, or is it an actual hardware difference?

- Do the new -P models require replacing any resistors in the front end after hacking? Or is that only for the -B and -BM models?



I'd also like to do some before and after measurements for the bandwidth hack. I don't have a function generator or other lab equipment, though. Is it worthwhile connecting a scope probe to a 10 MHz or 32 MHz "can oscillator" and measuring that signal? Something like this: http://www.jameco.com/webapp/wcs/stores/servlet/Product_10001_10001_102779_-1 (http://www.jameco.com/webapp/wcs/stores/servlet/Product_10001_10001_102779_-1) Or is there any other simple way of building a useful test source, that would have a demonstrably different measured signal before and after the hack?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: neggles on September 25, 2013, 03:59:41 pm
I'm thinking about getting one of the newer Hantek -P models without the long memory, and I'm hoping to confirm a few things:
Having read most of this thread recently I can probably help a bit here.

- Is there any known difference between the DSO5072P and DSO5102P, or will they be exactly the same once they are bandwidth hacked? Maybe the front-end is different, or the probes that are sold with them?
No hardware differences, but the 70/100MHz ones come with 150?MHz probes. the 200 comes with 200MHz probes. Spend $50 on some Texas 250MHz probes and all is well though (or $20 on some cheap chinese 200MHz ones) - I wouldn't trust the frequency rating of the stock probes anyway.

- It seems like some -P models advertise 24K sample memory, but others say 40K. Will they all be 40K after the firmware hacking, or is it an actual hardware difference?
Early firmware versions only offered 24Ksamples, later firmwares give you 40Ksamples. The update to give 24K models 40K samples can be found here: https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg271366/?topicseen#msg271366 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg271366/?topicseen#msg271366)

- Do the new -P models require replacing any resistors in the front end after hacking? Or is that only for the -B and -BM models?
Not as far as tinhead seems to know, I recall it being mentioned in an earlier post - and the first page thread specifically mentions that it's for SN under 15000, which excludes the P models.
More info RE: resistors (but with no mention of P models): https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg212054/?topicseen#msg212054 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg212054/?topicseen#msg212054)

I hope I've been of help :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bigmessowires on September 25, 2013, 04:18:50 pm
Thanks Neggles! According to eBay listings, it looks like the 70 MHz DSO5072P actually comes with only 80 Mhz probes (the PP-90), although the official Hantek website doesn't specify either way. The PP-150 probes are also 100 MHz rated by Hantek, not 150, despite their name: http://www.hantek.com/en/ProductDetail_15_73.html (http://www.hantek.com/en/ProductDetail_15_73.html)

Not a big deal if you're planning on replacing the probes anyway, or already have some.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: neggles on September 25, 2013, 04:23:33 pm
Thanks Neggles! According to eBay listings, it looks like the 70 MHz DSO5072P actually comes with only 80 Mhz probes (the PP-90), although the official Hantek website doesn't specify either way. The PP-150 probes are also 100 MHz rated by Hantek, not 150, despite their name: http://www.hantek.com/en/ProductDetail_15_73.html (http://www.hantek.com/en/ProductDetail_15_73.html)

Not a big deal if you're planning on replacing the probes anyway, or already have some.


You're welcome :) Huh, I didn't manage to find a listing showing the probe bandwidth, but, like you said, given the cheapness of reasonably-good probes it's not a huge issue.

I've actually got a DSO5072P on its way from an AliExpress seller (here, if you're interested: http://bit.ly/1fDdk5c (http://bit.ly/1fDdk5c) ) and I've ordered a couple of Uni-T 200MHz-rated probes to go along with it from a local seller down here in 'straya. It should be here within a couple of days, if i'm lucky, so I'll gladly check out anything you'd like me to once I get it :)

oh, a thing I found out that you might like to know: if you're viewing a thread in the forum, and you search for something with the search box while on that thread page, it'll search just the thread. Trés useful.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 25, 2013, 08:02:15 pm
right, Hantek designed then to hve 24k but then decided to allow the use of 40k. For all who bought before that they provided me a upgrade firmware, which was linked above.

Regards resistors, these P models they does have changed frontend. The first part is still the same, and probably it can be still bit optimized, but the part which was responsible for bad frequency response after a hack of 60/100MHz models didn't exist anymore. It has been replaced (THS4504 instead of LMH6552), which seems to run smooth. But i wrote about that already, and when you look on the first page of this thread, you will find a section:

what inside Tekway/Hantek

and in that section all the schematics i've made are posted, as well the schematic of the P model frontend (i don't have P model, but based on pictures i've made schematics of what i can see there).

https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg264085/#msg264085 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg264085/#msg264085)

So long answer short : no, afaik you don't need any changes on P models.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firehopper on September 25, 2013, 11:06:09 pm
Thanks Neggles! According to eBay listings, it looks like the 70 MHz DSO5072P actually comes with only 80 Mhz probes (the PP-90), although the official Hantek website doesn't specify either way. The PP-150 probes are also 100 MHz rated by Hantek, not 150, despite their name: http://www.hantek.com/en/ProductDetail_15_73.html (http://www.hantek.com/en/ProductDetail_15_73.html)

Not a big deal if you're planning on replacing the probes anyway, or already have some.


You're welcome :) Huh, I didn't manage to find a listing showing the probe bandwidth, but, like you said, given the cheapness of reasonably-good probes it's not a huge issue.

I've actually got a DSO5072P on its way from an AliExpress seller (here, if you're interested: http://bit.ly/1fDdk5c (http://bit.ly/1fDdk5c) ) and I've ordered a couple of Uni-T 200MHz-rated probes to go along with it from a local seller down here in 'straya. It should be here within a couple of days, if i'm lucky, so I'll gladly check out anything you'd like me to once I get it :)

oh, a thing I found out that you might like to know: if you're viewing a thread in the forum, and you search for something with the search box while on that thread page, it'll search just the thread. Trés useful.
'
I got one of those 5072p's off ebay, $280 including the fastest shipping from china I've ever seen.. 2.5 days from when it was shipped till it got to me.. I was like WOW

but anyway, mine came with those 80 mhz probes as you said.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 25, 2013, 11:52:22 pm
you now, these P90 probes, when you read careful the specs page you will see they all the same (except bit bigger compensation range on 60MHz probes).
And actually whn you check, the PP150 probe (so specified as 100MHz) is working up to DSO full bandwidth, so it is more than 200MHz probe.

However, they do NOT have RF compensation, so the waveform looks like:

(http://www.mikrocontroller.net/attachment/173419/10MHz_HanTekway_PP150_50R.png)

where on proper RF compensated 500MHz probes (Testec HF512) it looks like:

(http://www.mikrocontroller.net/attachment/173418/10MHz_HanTekway_HF512_50R.png)

or on this one, as well RF compensated 250MHz probe (Texas TX250/II) it look like:

(http://www.mikrocontroller.net/attachment/173421/10MHz_HanTekway_TX250II_50R.png)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bigmessowires on September 27, 2013, 10:44:58 pm
I'd appreciate any opinions on how useful the deep memory is in real life. I think I've narrowed my choices to:

DSO5072P $270 direct from China
DSO5062B $320 direct from China, or $350 from USA supplier

Is it worth an extra $50-$80 to get 1M memory with the -B model instead of 40K with the -P model? From what I've read, using the 1M memory makes the scope UI perform very slowly, and limits the timescale to slower speeds, so maybe it's not very useful anyway?

Most of my work is microcontroller and digital stuff, looking for signal integrity and general troubleshooting at speeds under 16 MHz.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firehopper on September 28, 2013, 02:13:45 am
also the B version may still have the spot for the logic analyzer inside. The P does not.. I might have tried to find a B version if I would have known that and had the extra money.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: neggles on September 28, 2013, 07:31:24 am
Quick Q: does anyone happen to know the output voltage and current specifications of the 5000P series' internal PSU, & is there any spare space inside the case? (5000B info would be appreciated too as it's probably the same/similar)

I'll find out for myself on Monday, but I just thought I'd ask anyway (considering possibilities for building a small battery pack into it, or making an external battery pack for portable operation)

Thanks!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 28, 2013, 08:42:44 am
Quick Q: does anyone happen to know the output voltage and current specifications of the 5000P series' internal PSU, & is there any spare space inside the case? (5000B info would be appreciated too as it's probably the same/similar)

for P models not, but for B/BMV/MSO models, see the first page, there are links to schematics. I would say best reference is hw1007 schematic (is the newest i've made).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: neggles on September 28, 2013, 01:01:05 pm
for P models not, but for B/BMV/MSO models, see the first page, there are links to schematics. I would say best reference is hw1007 schematic (is the newest i've made).

Hmm, looks like I need +5@1A, +3.3@1.5-2A, +15@100-200ma, and +/-9 at ~500ma. Plus fan power. Shouldn't be too hard, I'll have a look inside my P when I get it. Hopefully it has less voltage lines :P but it doesn't seem likely. I recall seeing an internal photo of a P with a +12 line that didn't seem to be for the fan, so who knows.

Thanks :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bigmessowires on September 28, 2013, 03:35:51 pm
also the B version may still have the spot for the logic analyzer inside. The P does not.. I might have tried to find a B version if I would have known that and had the extra money.

What's the advantage of having the spot for the LA inside? Is it possible to buy the LA board separately, or build your own maybe?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 28, 2013, 04:01:15 pm
Is it possible to buy the LA board separately?

i've ordered in the past whole batch of them from Tekway, no idea if they would sold single one (which probably would not make any sense from shippment costs point of view)

or build your own maybe?

well, that's indeed possible. I've posted the schematic, so you can easily check what necessary.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: neggles on September 30, 2013, 04:57:59 am
I just got my DSO5072P in the mail so if there's anything you'd like me to check out, BMOW, feel free to ask.

I am very impressed with the build quality and functionality, though I don't currently have a way to test bandwidth above a few MHz.

tinhead, is there a way to tell if the bandwidth change has been registered without a signal that would otherwise have been outside the scope's limits?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on September 30, 2013, 09:16:00 pm
Hello Tinhead,

Today I found your modified firmware for the hw1007, firmware 2.x.x. MSO. A bit late, sorry; busy busy.

I like the way the LA is selected by the 'Help' button in stead of the 'F7' button. And the sample rate in view is a nice feature. Thanks for all that work.

Also you send a bug report to Hantek about duration trigger. This makes me wonder if there exists an 'official' bug list for the hw1007 MSO, later than the one you distributed about a year ago with the DSO to MSO revision package. There are still so many other bugs in the LA firmware. Did you notice the 'Black Hole' of about 2.5 us near the center of the LA traces when at 800ns /div?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 30, 2013, 09:26:01 pm
Thanks for all that work.

it is pure fun :)

Also you send a bug report to Hantek about duration trigger. This makes me wonder if there exists an 'official' bug list

the next time i will publish my bug list, i will let them first fix few things.
They have now free week, so i assume in 2 weeks or so.

Did you notice the 'Black Hole' of about 2.5 us near the center of the LA traces when at 800ns /div?

hmm, no, i don't see it. Try to make a screenshot of that, not that your display is broken :\
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: gmtii on September 30, 2013, 09:34:31 pm
another custom fw intallation on a DSO5072P... working great!

thanks!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bigmessowires on October 01, 2013, 01:44:52 am
I just got my DSO5072P in the mail so if there's anything you'd like me to check out, BMOW, feel free to ask.

Lucky you! I don't think there's anything specific I need tested, but general impressions would be good. I just can't seem to decide between the DS5072P or the DS5062B (or something fancier like the Rigol DS1074z). The -72P has the advantage of being cheaper and not needing any kind of front end resistor tweaking, but the -62B has the advantage of long memory. I'm thinking that for debugging microcontroller stuff I might really benefit from the long memory, but not sure if it's really worth it.

I should probably just shut up and buy something already. :-)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firehopper on October 01, 2013, 02:51:27 am
I just got my DSO5072P in the mail so if there's anything you'd like me to check out, BMOW, feel free to ask.

Lucky you! I don't think there's anything specific I need tested, but general impressions would be good. I just can't seem to decide between the DS5072P or the DS5062B (or something fancier like the Rigol DS1074z). The -72P has the advantage of being cheaper and not needing any kind of front end resistor tweaking, but the -62B has the advantage of long memory. I'm thinking that for debugging microcontroller stuff I might really benefit from the long memory, but not sure if it's really worth it.

I should probably just shut up and buy something already. :-)

well not only that, but the B possibly has the LA spot as well, so you could turn it into a MSO as well
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: neggles on October 01, 2013, 05:03:22 am
Lucky you! I don't think there's anything specific I need tested, but general impressions would be good. I just can't seem to decide between the DS5072P or the DS5062B (or something fancier like the Rigol DS1074z). The -72P has the advantage of being cheaper and not needing any kind of front end resistor tweaking, but the -62B has the advantage of long memory. I'm thinking that for debugging microcontroller stuff I might really benefit from the long memory, but not sure if it's really worth it.

It actually showed up with the system language set to chinese, which I probably should have expected all things considered, and was easily remedied with a quick poking around in the menus. This thing supports a LOT of languages!

My general impressions are that it's really nice, though I haven't really had much cause to use it beyond some messing with a 30 year old 1Hz-3MHz function generator.

I honestly don't know if the long memory is worth the money - for what i'm planning to use it for I don't think it's particularly likely, as i'm not really interested in using it as a long-duration logic analyser & even 8KS provides significant zoom fidelity on relatively high frequency signals, never mind the 40KS max of the P or the multiple megasamples of the B models.

Quote
I should probably just shut up and buy something already. :-)

Probably :P I just bit the bullet and I am very happy with the results, especially for the price.

well not only that, but the B possibly has the LA spot as well, so you could turn it into a MSO as well

Ah, but he has a logic analyser already! http://www.bigmessowires.com/2008/01/17/logic-analyzeroscilloscope/ (http://www.bigmessowires.com/2008/01/17/logic-analyzeroscilloscope/) (what's the memory length on that thing anyway?)

That's possibly the only feature i'd miss, but since I'm not realistically going to build my own LA board, I decided it wasn't worth the money.

Once i'm at the point where I need more than this scope can offer I figure i'll pick up a Rigol DS2000-series scope. Even when that happens i'll probably keep the Hantek around because i'd be more comfortable throwing it in the back of my car to go places, for example.

EDIT: oh, and here's a screenshot of the probe compensation output :P
(http://i.imgur.com/69xEMuZ.gif)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on October 01, 2013, 09:55:59 am

Did you notice the 'Black Hole' of about 2.5 us near the center of the LA traces when at 800ns /div?

hmm, no, i don't see it. Try to make a screenshot of that, not that your display is broken :\

I made some screenshots to show the 'hole':

Pic_45_1.gif at 2us/div shows a set of equally spaced pulses on traces D0-D7, D0 is also present on analog CH1.

Pic_45_2.gif at 800ns/div shows the same, but now a 'hole' appears near the center of the LA traces of about 2.5us, pulses on D7 and D0 are missing.

Pic_45_3.gif after a little Horizontal Shifting the pulse on D0 becomes visible 'out of the hole'. The 'hole' is at about 0.2 div right of center.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on October 01, 2013, 10:10:05 am
Another funny one:

Pic_45_4.gif shows the same signal, now at 400ns/div. This looks really nice.

Pic_45_5.gif again the same, but now analog trace CH2 is deselected. This shifts the LA traces out of position. When Horizontal Shifting the traces the LA traces shift about twice the amount compared to the CH1 trace.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bigmessowires on October 01, 2013, 02:25:47 pm
Pic_45_1.gif at 2us/div shows a set of equally spaced pulses on traces D0-D7, D0 is also present on analog CH1.

Pic_45_2.gif at 800ns/div shows the same, but now a 'hole' appears near the center of the LA traces of about 2.5us, pulses on D7 and D0 are missing.

Pic_45_3.gif after a little Horizontal Shifting the pulse on D0 becomes visible 'out of the hole'. The 'hole' is at about 0.2 div right of center.

 :wtf: I wasn't even considering the MSO, but that's the kind of data-altering firmware bug that should make anyone think twice about buying Hantek. It's definitely got me worried. I can live with occasional lockups or other little firmware glitches, but not something like this.

It's not only that the pulse on D0 disappears, but the timing of all the following pulses is completely wrong!  :o
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: neggles on October 01, 2013, 02:48:49 pm
Pic_45_1.gif at 2us/div shows a set of equally spaced pulses on traces D0-D7, D0 is also present on analog CH1.

Pic_45_2.gif at 800ns/div shows the same, but now a 'hole' appears near the center of the LA traces of about 2.5us, pulses on D7 and D0 are missing.

Pic_45_3.gif after a little Horizontal Shifting the pulse on D0 becomes visible 'out of the hole'. The 'hole' is at about 0.2 div right of center.

 :wtf: I wasn't even considering the MSO, but that's the kind of data-altering firmware bug that should make anyone think twice about buying Hantek. It's definitely got me worried. I can live with occasional lockups or other little firmware glitches, but not something like this.

It's not only that the pulse on D0 disappears, but the timing of all the following pulses is completely wrong!  :o

Oh wow. That's just... wow.

On the other hand, the logic analyzer is definitely an afterthought (and we DO only have one example of this occurring) so I don't think we're likely to have such issues with the in-much-wider-use DSO section, but still...

On an unrelated note I used my Hantek to debug some bits of my oneTesla ( http://onetesla.com/ (http://onetesla.com/) ) musical DRSSTC earlier today and it worked swimmingly.

You can record a surprising length of logic pulses in 40K mode, too. I meant to save a screenshot but the file didn't show up on my flash drive, I guess the thing doesn't like exFAT.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: cosmos on October 01, 2013, 03:10:04 pm
Since you have a cyclic pattern it may hide that the analog trace you see is not in sync with the digital traces at all.  :palm:
There is a refresh missing after it displays the results and you can expect the digital traces to be those captured at the previous trigger.
(manually forcing a refresh makes it redraw with the correct and latest digital traces)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bigmessowires on October 02, 2013, 04:32:54 am
On the other hand, the logic analyzer is definitely an afterthought (and we DO only have one example of this occurring) so I don't think we're likely to have such issues with the in-much-wider-use DSO section, but still...

Yeah, you're probably right. But I'm still worried.  :-\

On an unrelated note I used my Hantek to debug some bits of my oneTesla ( http://onetesla.com/ (http://onetesla.com/) ) musical DRSSTC earlier today and it worked swimmingly.

Musical Tesla coil? I like it!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bigmessowires on October 04, 2013, 06:23:04 pm
After lots of agonizing, I finally purchased a Rigol DS1074z. So no Hantek for me.  :(  $555 was more than I'd planned to spend, but the 4 channels, huge sample memory, RS232/I2C/SPI decoding, and other features were too hard to resist. I think that weird firmware bug in the Hantek MSO is what finally drove my decision, though I'm sure the Rigol will have its share of firmware bugs too.  ;D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Allf on October 15, 2013, 05:00:07 am
Hi,

I got a Hantek DSO5202BM.
hw 1.01
firmware 3.30.0(130.709.0)
I want to make a backup, just in case. Please help me: what tool are available, and how to juse it...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 15, 2013, 05:56:11 am
for the new B/BM/BMV models wit SN > 15000 there is no backup tool yet available.
However, the "nanddump" is now integrated, so you can do it manually, something like this could work:


Of course you need first to insert falsh drive into usb port and run these command from the shell
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Allf on October 15, 2013, 09:45:37 am

With the tool from Peter http://peter.dreisiebner.at/dso-usb-tool/ (http://peter.dreisiebner.at/dso-usb-tool/) to get virtual shell ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 15, 2013, 12:39:10 pm

With the tool from Peter http://peter.dreisiebner.at/dso-usb-tool/ (http://peter.dreisiebner.at/dso-usb-tool/) to get virtual shell ?

right, you can use that tool or connect physically (via UART<->USB converter) to the shell.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Attorney on October 15, 2013, 01:15:40 pm
What is the current firmware release for the DSO5102B?  Mine is 2.06.3(130814.0).   Hardware version is: 10070x555583e8.

Has Hantek now leaped to firmware version 3.0 or is that just for new models?

Paul
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 15, 2013, 01:20:57 pm
What is the current firmware release for the DSO5102B?  Mine is 2.06.3(130814.0).   Hardware version is: 10070x555583e8.

Has Hantek now leaped to firmware version 3.0 or is that just for new models?

Paul

you are on the latest FW for your model. Regards the 3.0 FW, afaik for now it is only for new models.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Attorney on October 15, 2013, 02:49:55 pm
What is the current firmware release for the DSO5102B?  Mine is 2.06.3(130814.0).   Hardware version is: 10070x555583e8.

Has Hantek now leaped to firmware version 3.0 or is that just for new models?

Paul

you are on the latest FW for your model. Regards the 3.0 FW, afaik for now it is only for new models.

Thanks for the quick feedback.   Even if a version 3.0 firmware is released for older DSO5102s like mine, my fear is that it would include some form of protection against the BW upgrade many have been using, and equally as bad...no way to flash firmware back to Level 2.0.

Paul
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 15, 2013, 04:56:30 pm
Even if a version 3.0 firmware is released for older DSO5102s like mine, my fear is that it would include some form of protection against the BW upgrade many have been using, and equally as bad...no way to flash firmware back to Level 2.0.

there is no way to protect againt BW change only by software, so don't worry. Additionally this is ARM/Linux platform, you can always downgrade to what to ever you wish.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: icpart on October 16, 2013, 12:37:12 pm
Hi guys. I need from help!
Today I received my Voltcraft DSO-1062D which I bought from ebay.de. When I tried to power on the oscilloscope doesn't starts up at all. After several attempts of power off/on is still dead, only for little time the backlight of some push buttons lights up for very short time and after that they went out.
Is it possible that problem to be in the power switch or power supply, maybe some input fuse?

I'm afraid if I opened the oscilloscope and if it become a more serious fault and If I cant to repair it I will not be able to return it back to the seller because there is Guarantee sticker in the bottom of case.
PS
After more several times the oscilloscope finally power on. But when I power off after that its sometimes run sometimes doesn't. After switching I can hear some type of switching relays inside of oscilloscope,  It is possible some of they do not work properly.
And finally one stupid question. It is possible to be that firmware bug?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: uh9lab on October 18, 2013, 03:46:55 am
With mine DSO, power switch should be pressed firmly, otherwise screen will just blink once and doesn't power on. May be it's common bug with this model, not sure.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Allf on October 18, 2013, 04:25:39 am
tinhead,

I tried descriebed way but no sucess. 

for the new B/BM/BMV models wit SN > 15000 there is no backup tool yet available.
However, the "nanddump" is now integrated, so you can do it manually, something like this could work:

    nanddump -o -b -f /mnt/udisk/dump/boot.bin /dev/mtd0
    nanddump -o -b -f /mnt/udisk/dump/logo.bin /dev/mtd1
    nanddump -o -b -f /mnt/udisk/dump/kernel.bin /dev/mtd2
    nanddump -o -b -f /mnt/udisk/dump/root.bin /dev/mtd3

Of course you need first to insert falsh drive into usb port and run these command from the shell


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 18, 2013, 05:41:17 am
first of all "Es ist eine shell Ausgabe vorhanden" menas nothing else than there is no return from the executed command. However not all commands does have return value, and some have return value which is not compatible with the Tool. So in principl you working blind here. The best is, for things like nanddump, to execute one line, wait a minute, execute "sync", wait until USB Led goes off and continue wiht second line. The last one (with root dump) wih take few minutes anyway (depends on USB flash drive speed). Most poeple with "P" models got issues here, even after hours nanddump was still running :P Even with specified partition size no luck (and here should nanddump stop normally^^). I thought first "ohh, it can lock partition", but actually nanddump does not need that to do, it should be able to copy partiton from what it has been sarted (it does works on my DSO with no issues).

Of course you can use as well tar/gz and/or copy files from root fs to usb flash, that will backup at least your settings and all the apps. The root fs can be itself rebuild, so not a big deal (more or less) when you don't have binary backup of that partition.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: icpart on October 18, 2013, 07:44:41 am
With mine DSO, power switch should be pressed firmly, otherwise screen will just blink once and doesn't power on. May be it's common bug with this model, not sure.
Thanks for help. Maybe you are right and most of power switch of these Hantek oscilloscopes are with poor quality. Anyway I decide to return the oscilloscope to seller and maybe I will spend more money for new Rigol 1074Z. This Voltcraft was bargain in the price but I think Rigol is better investment.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 18, 2013, 08:31:45 am
With mine DSO, power switch should be pressed firmly, otherwise screen will just blink once and doesn't power on. May be it's common bug with this model, not sure.

lol, it is not push button but a proper power switch, so of course you have to press it firmly and deep ^^
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 18, 2013, 09:47:32 am
When I tried to power on the oscilloscope doesn't starts up at all.

and exactly here you should stop thinking and send it back ...

because there is Guarantee sticker in the bottom of case.

and that's the second reason to send back. I really don't know why everybody is trying to fix things where the warranty has been paid. If you like to play, buy from china directly, then you have in principle no warranty (as shippment costs are too high).

With an DOA item bought from germany, i would not care, the seller have to pay all costs.

After switching I can hear some type of switching relays inside of oscilloscope,  It is possible some of they do not work properly.
And finally one stupid question. It is possible to be that firmware bug?

why everybody think "firmware bug" when simply connector or what so ever is not contacting after shippment?
This is not mobile phone, here are switches and relais :P So yes, you will hear something switching
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vmpn on October 18, 2013, 11:17:21 am
Got my new DSO5062BM but now I am having some doubts I hope people can voice their opinions on. I am a very beginning hobbyist so I expect 1 channel and 60MHZ will last me for  good while.

Both the front panel and system info say that model is: DSO5062B (Notice lack of M). Sounds like I was sent the wrong model.

HW version is: 10070x555583e8 - Which if I understand is an old HW revision based on this thread. What is not quite clear to me is if there were actually improvements/fixes with later HW revisions, or it does not matter in practice.

SW version: 2.06.3 (130306.0)

In general, but should I be expecting a unit with SN > 15000 at this point in time.  Does new SoC fix any performance issues, or it is just EOL replacement part? My biggest concern is maintaining the device beyond its 3 year mfg warranty.

For the life of me I could have sworn there was a post saying how one can tell date of manufacturing from the serial #, but I cannot find it using neither google nor this forum's search.  Can someone give me a hint with the right term to search for. I don't mind doing the work just that no matter what I search for I cannot seem to find it. Maybe I read that info somewhere else after all


Thank you
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 18, 2013, 12:11:26 pm
Both the front panel and system info say that model is: DSO5062B (Notice lack of M). Sounds like I was sent the wrong model.

HW version is: 10070x555583e8 - Which if I understand is an old HW revision based on this thread. What is not quite clear to me is if there were actually improvements/fixes with later HW revisions, or it does not matter in practice.

SW version: 2.06.3 (130306.0)

In general, but should I be expecting a unit with SN > 15000 at this point in time.  Does new SoC fix any performance issues, or it is just EOL replacement part?

send it back, there are more than one reason why:

- hw version 1007 is EOL
- the 83e8 can NOT be BM or BMV model (the early BMV in beg. 2012 was already 83E9)
- the boot logo confirms the points above, BM/BMV is using different Linux and complettly different way of logo displaying than B model does, so there is no way that someone changed BM/BMV model to display B model logo (unless someone edited the executable which display the logo, but if then you can send it back anyway - new is new and not hacked etc.)
- when you get replacement unit ensure you have new hw (and sn > 15000), if not send it back. There is no reason to buy old stock (unless one wish to buy it, e.g. to save some money or what so ever).

Regards the EOL, yes, the S3C2440 SoC is EOL, this is why Hantek/Tekway changed the hardware. You can't get these ICs anymore from official chain. For sure they could have some spare boards, but i would not bet on that.

The new SoC is using faster memory, so this does have some performance improvement as well.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vmpn on October 18, 2013, 12:39:45 pm
Thank you for such prompt reply tinhead, and all your other work on these scopes.   Feels as close to open/repairable he/sw that one can get these days for hobby use
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: icpart on October 18, 2013, 08:49:34 pm
After switching I can hear some type of switching relays inside of oscilloscope,  It is possible some of they do not work properly.
And finally one stupid question. It is possible to be that firmware bug?

why everybody think "firmware bug" when simply connector or what so ever is not contacting after shippment?
This is not mobile phone, here are switches and relais :P So yes, you will hear something switching
[/quote]
Yes that was silly question but I tried to believe in the impossible   ;D
So the problem is in the power switch or power supply but most likely it is power switch because I successfully able to start oscilloscope two or 3 times, but after that is still died.
Thanks tinhead for yours suggestions.
Anyway the scop was sold as used but when I received its seemed like new with original screen protector on screen. I will return the scope and maybe after few months spending money I will buy another oscilloscope with better quality.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: n8ddd on October 24, 2013, 10:07:15 pm
hi all you doing a great job here specially the master tinhead :D. my voltcraft dso1062d arrived yesterday from conrad.i think is a new rev soft and hard(the old 1062d has another configuration) if someone is interested i attach a screenshot here. I want to  thank all the contributors
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: n8ddd on October 24, 2013, 10:12:19 pm
just applied the bw hack and is working fine 2ns. can't make it to work with the backup tool(for p models), 0xfe should i follow this guide?
https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg267267/#msg267267 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg267267/#msg267267)
the dso has 1M of memory,thank you
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: n8ddd on October 25, 2013, 04:43:18 pm
well well,just followed that guide.Now my dso after the boot logo just stay in a blue screen for 22 sec then reboot and again the boot logo and blue screen...some help,please :-\
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: n8ddd on October 26, 2013, 04:26:53 pm
revived my dso,partiallly with
- connect over UART
- insert USB Stick with dso.exe  and wait until the stick will get mounted
- kill the DSO application by typing "killall dso.exe"
- copy over the dso.exe ( cp /mnt/dso.exe / )
- change file permission ( chmod 777 /dso.exe )
- test it by typing /dso.exe
in acquire mode can't change real-time or equ-time and memory depth too
in measure mode when pressing F0 nothing change(we must show all the measurements)
i don't know how to proceed further |O
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 26, 2013, 05:36:24 pm
maybe you should write down what you did exactly to break the DSO, then i can think about what need to be restored to bringt it back.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: n8ddd on October 26, 2013, 06:11:04 pm
thanks Tinhead,first i've made this-thinking can make a backup after...-dso.exe from latest dso p update
cp /mnt/udisk/dso.exe /dso_update.exe
chmod 777 /dso_update.exe
sync
cp /mnt/udisk/English.lan /OurLanguages/English.lan
sync


- power cycle the DSO.
When power up the dso just have a blue screen and after 22 sec reboot itself.Then tried connected with uart and doing:
- connect over UART
- insert USB Stick with the  dso.exe  and wait until the stick will get mounted
- kill the DSO application by typing "killall dso.exe"
- copy over the dso.exe ( cp /mnt/dso.exe / )
- change file permission ( chmod 777 /dso.exe )
- test it by typing /dso.exe
at this point the dso is starting  then i realised that not operating well eg: f7 when pressed nothing showed on screen,in acquire mode can't changereal time or equ time with f1,and mem depth as well with f5, in measure mode it's showing the menu but pressing f0 nothing change
with 1khz probe connected and autoset  the sys status is showing 1.00MS/s
first of all i did change the bw from 60 to 200mhz with the usb tool
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: n8ddd on October 26, 2013, 06:14:04 pm
and in ch1 menu can't change 20mhz bw with f2
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: n8ddd on October 26, 2013, 06:17:29 pm
i saw the dso is looking for dso5kb* when trying to update or to use the backup tool .i've renamed the files but remain the password problem
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: n8ddd on October 27, 2013, 12:19:55 pm
solved :) renamed the file dso5202b in root directory in dst1202b and copied the dso.exe (my original one that i backed it up early)in root dir too. is working fine now.for the backup tool i don't know how to proceed,yet...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: n8ddd on October 27, 2013, 02:40:19 pm
so, the firmware 3.30.0(130709.0)  looks during update for dso5kb*.up file encrypted with dso5000b password ;)
i have problem running the backuptool
serial console message

dso5kb_backuptool.up
gpg: CAST5 encrypted data
gpg: encrypted with 1 passphrase
gpg: WARNING: message was not integrity protected
gpg: CAST5 encrypted data
gpg: encrypted with 1 passphrase
gpg: WARNING: message was not integrity protected
dso5kb_backuptool.up.tar
dso5kb_backuptool.up/
dso5kb_backuptool.up/tekwayup_client/
dso5kb_backuptool.up/tekwayup_client/nanddump
dso5kb_backuptool.up/tekwayup_client/special
dso5kb_backuptool.up/tekwayup_client/update
dso5kb_backuptool.up/upend

and...nothing change,on the dso screen

firmware update failed error 0xfb
failed to decompress upgrade file!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 27, 2013, 03:22:07 pm
n8ddd,

honestly, why are you trying to use tool "designed" for different DSO on your? Why not simply copying files manually to usb flash drive?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: n8ddd on October 27, 2013, 03:49:55 pm
ok,is any firmware update for my dso?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 27, 2013, 10:05:59 pm
ok,is any firmware update for my dso?

probably the 3.30 which you had on org. DSO (or did you made copy of the dso.exe and language files before you started playing around? If so, zip these files and upload somwhere, i would like to get copy of them and /lib/firmware/* as well). I don't know any 3.xx fw for "B" models (or the Voltcraft DSO1062D), so you ws first with such hw/fw.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: n8ddd on October 27, 2013, 11:27:59 pm
http://www.mediafire.com/?k53l47gi6im3ic1 (http://www.mediafire.com/?k53l47gi6im3ic1)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: n8ddd on October 27, 2013, 11:44:03 pm
i'm playing with your firmware mod for the p models,a bit.if u want me to test something.......wow,last year didn't knew nothing about the scopes,but i'd like to learn more :phew: decrypted then encrypted with dso5000b passwd and renamed in dso5kb*.up changed the model name too
here is an screenshot

and after rebooted dso(don't know how many times)there is an error
what should i do next? :phew:
btw,witch files i should restore to go back to 3.30?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: n8ddd on October 28, 2013, 11:04:29 am
from 800ns to80ms is acting like this,in 20k and 40 k mem,i dont't have anymore option for 512,1M
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 28, 2013, 11:08:21 am
well, what do you expect? Honestly, it will be not better when you playing the whole time with firmware for different models, THEY are different !!! So wwhat the reason to play?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: n8ddd on October 28, 2013, 11:14:46 am
ok,may i turn back now on 3.30?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 28, 2013, 11:21:52 am
sure, when you copy back the 3.30 binaries and revert all the changes (in sys.inf, calibration files, EEPROM, i2c.log) made by the "P" model firmware. Don't forget, it is not only the update script, the dso.exe as well might chaneg things on your DSO.

Sys.inf is easy part, calibration files, well let'S forget them for a moment. The EEPROM content might be different already, show me your /i2c.log file.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: n8ddd on October 28, 2013, 11:39:31 am
this is. Ihave boot.bin kernel.bin and logo.bin -made it previously with nandump.didn't have root.bin
chk pm please.  btw in /have 2 files OurLanguages_bk and dso.exe_bk1
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 28, 2013, 01:37:02 pm
ok, i will answer via PM
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Blitzbirnep on October 28, 2013, 04:17:48 pm
Cause this topic is a few years old, it would be helpful if someone could summ up all the important information.
What is the actuall FW of Voltcraft/Hantek/Tekway?
Is there a new Hack Version? If Yes, where can i download this?
Do I have to downgrade for example a Voltcraft DSO 1062D for Hacking?
Is this method of Hacking actuall? How To unlock 200Mhz Bandwith from your 60Mhz Hantek Tekway Voltcraft DSO (5062C, 3062c, 1062d) (https://www.youtube.com/watch?v=x1phUe93ZeQ#ws)

At this point I'd liked to say that this is a really great Work!! And tanks for the active developers for this way of improving our DSO's!!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: n8ddd on October 29, 2013, 12:23:12 am
thank you Tinhead,you're a great Man :clap:
you should make a guide
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: MichaelK on October 29, 2013, 08:58:40 pm
Hi,

I'm new here reading through this tread since hours... completely confused meanwhile :scared:

My problem is I bought a Voltcraft 1062D DSO with hw 1010x5555830f and still don't know if it is possible to hack this thing or not?

Can anyone verify that this will work and if so what do I need (as far as I understand meanwhile the typical FPGAs for the e8/e9 hardwares won't work).

Thanks a lot for your answers :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 29, 2013, 10:04:32 pm
I'm new here reading through this tread since hours... completely confused meanwhile :scared:

hmm, it should be enought to read the very first posting ...

Can anyone verify that this will work and if so what do I need (as far as I understand meanwhile the typical FPGAs for the e8/e9 hardwares won't work).

hmm, where i wrote that "typical FPGA won't work" ???

My problem is I bought a Voltcraft 1062D DSO with hw 1010x5555830f and still don't know if it is possible to hack this thing or not?

as mentioned above, check the first page of this thread, very first posting, you will find out that:
- backup with a backtup tool is not (yet) possible (which is not a big deal, you can save files manually)
- bandwidth hack is possible
- logo hack is not (yet) possible (but who cares about boot logo), unless you compile new frame buffer driver with new logo
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sunsina on October 30, 2013, 08:46:17 pm
Today I unboxed my HanTek MSO5102D mixed oscilloscope, every thing looks and works fine except I hear an annoying high pitch whistle noise as soon as the screen shows probe reading.

This noise never stops and I think is due to capacitance discharging and charging or something similar.

Has any one realised similar high pitch audio noise?
I am really interested to replace the part that makes the noise, since I can not tolerate it  :scared: - So I would be happy if any one tell me what is the noisy component on my scope board and how can I replace it (with better or similar component).

Thanks
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 30, 2013, 09:18:54 pm
Today I unboxed my HanTek MSO5102D mixed oscilloscope, every thing looks and works fine except I hear an annoying high pitch whistle noise as soon as the screen shows probe reading.

This noise never stops and I think is due to capacitance discharging and charging or something similar.

is it something like this?

(link to video from user)
http://tinyurl.com/ocpm575 (http://tinyurl.com/ocpm575)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sunsina on October 30, 2013, 09:35:28 pm
@tihead
Sorry  I can not open the Video link, is it possible to upload it on other website.
Thanks
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sunsina on October 30, 2013, 09:58:26 pm
@tinhead
I played a little with scope display contrast,
I understood that if slide the contrast to min or max it will stop making noise.
Anyway my scope hanged after my first try, it seems I have to upgrade the firmware
My system status says:
model:MSO5102D
sw version:3.2.35 (130506.0)
hw version:1010x55558340

I am wondering if this scope is hack ready, if so what you recommend?
Thanks a lot
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 31, 2013, 06:38:15 am
@tihead
Sorry  I can not open the Video link, is it possible to upload it on other website.
Thanks

http://www.eedownload.com:2108/ (http://www.eedownload.com:2108/)

there is the video
Title: MSO board
Post by: ADZ on October 31, 2013, 07:30:44 am
If anybody want to sell mso pcb i will listen you deals or somebody knows where to buy it. If you interesting write me to PM
Title: Re: MSO board
Post by: tinhead on October 31, 2013, 07:43:10 am
If anybody want to sell mso pcb i will listen you deals or somebody knows where to buy it. If you interesting write me to PM

send this guy PM

http://www.mikrocontroller.net/topic/311924 (http://www.mikrocontroller.net/topic/311924)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: MichaelK on October 31, 2013, 10:20:44 am
as mentioned above, check the first page of this thread, very first posting, you will find out that:
- backup with a backtup tool is not (yet) possible (which is not a big deal, you can save files manually)
- bandwidth hack is possible
- logo hack is not (yet) possible (but who cares about boot logo), unless you compile new frame buffer driver with new logo

Thanks for this tip, i didn't start read on the first page because this would have been taken days to read the thread up to the end ;)

I read the very first postings as you suggested and found "For all others (not listed above) ... please PM me." what I've done but didn't get an answer but this isn't a problem I simply try it here again:
I have a DSO1062D from Voltcraft with hw 1010x5555830f, serial is > 15000 and sw 3.30.0. I learned that 1062D doesn't mean 1062D... so at least the hw confuses me a little bit because most solutions that I found seems to be for 1005 and 1007.

Backup manually means I need a console on the device... you meant "which is not a big deal"... what would be the easiest way for this? Where the uart has to be connected to is only described for hw1005 and hw1007 but not for hw1010 or is there an even easier way for doing this?

By the way any idea where I can get a logic analyzer board to make a DSO5xx out of the scope, will this work and what will it cost?

Thanks,
Michael
Title: Re: MSO board
Post by: ADZ on October 31, 2013, 12:21:24 pm
tinhead
Big thanks for advice.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: n8ddd on October 31, 2013, 12:39:46 pm
as mentioned above, check the first page of this thread, very first posting, you will find out that:
- backup with a backtup tool is not (yet) possible (which is not a big deal, you can save files manually)
- bandwidth hack is possible
- logo hack is not (yet) possible (but who cares about boot logo), unless you compile new frame buffer driver with new logo

Thanks for this tip, i didn't start read on the first page because this would have been taken days to read the thread up to the end ;)

I read the very first postings as you suggested and found "For all others (not listed above) ... please PM me." what I've done but didn't get an answer but this isn't a problem I simply try it here again:
I have a DSO1062D from Voltcraft with hw 1010x5555830f, serial is > 15000 and sw 3.30.0. I learned that 1062D doesn't mean 1062D... so at least the hw confuses me a little bit because most solutions that I found seems to be for 1005 and 1007.

Backup manually means I need a console on the device... you meant "which is not a big deal"... what would be the easiest way for this? Where the uart has to be connected to is only described for hw1005 and hw1007 but not for hw1010 or is there an even easier way for doing this?

By the way any idea where I can get a logic analyzer board to make a DSO5xx out of the scope, will this work and what will it cost?

Thanks,
Michael

used that photo to connect the uart adapter
https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg282850/#msg282850 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg282850/#msg282850)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 04, 2013, 08:16:02 pm
I have to smile a little bit, 3 yrs ago Hantek posted on their website "incl. second design", which is nothing else than a SDK, with sample app, libs/headers, etc. Of course they never ever released anything, later they even deleted that "second design" from delivery list. Not that i really need it, we know the communication protocol already (Yes, with Hantek help) but hey, finally seems that (probably Extech pushed them) they released something - look at this link:

hxxp://www.hantek.com/Product/DSO1000B/DSO1000B_SDK.zip

This is SDK (beta1 - and this is why i have to smile, 3 years to get first beta version) for Hantek handhelds, but it does works as well with DSO/MSO hw0 to hw1007. With hw101 (so the very last hardware) i haven't tested, but probably it will work as well.

The sample app and documenation are very basic (yet), but yeah, it is beta.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vmpn on November 09, 2013, 02:27:09 am
Unit:

DSO5062BM with
Quote
SN > 15000
soft version: 3.30.0(130709.0)
fpga version:0x5555830f



Executive Summary:

When trying to make a backup I ran into issue where nanddump was running indefinitely when dumping the rootfs. The issue seems to be due to faulty logic in nanddump when dealing with bad blocks and the fact that "-b" parameter to skip those is not honored.

P.S. I noticed that data layout seems to match that of the DSO5000P mentioned in https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg264194/#msg264194 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg264194/#msg264194) which I used as cross check against my manual backup methods.

Details:


The NAND chip is Samsung K9F1G08U0D, data layout is:

Quote
Creating 4 MTD partitions on "NAND":
0x000000000000-0x000000100000 : "Bootloader"
0x000000100000-0x000000300000 : "LOGO"
0x000000300000-0x000000700000 : "Kernel"
0x000000700000-0x000008000000 : "ROOTFS"

The busybox version
Quote
BusyBox v1.20.2 (2013-03-15 09:24:06 CST) multi-call binary.
The logic for nanddump is implemented in the miscutils/nandwrite.c file. I used corresponding git tag (https://github.com/vmpn/busybox/tree/1_20_2 (https://github.com/vmpn/busybox/tree/1_20_2)) as baseline when analyzing the code. The following commits in the busybox repo fixes some of the issues:

https://github.com/vmpn/busybox/commit/da0200a1e50b3b4335757086a7426495eaacb31b (https://github.com/vmpn/busybox/commit/da0200a1e50b3b4335757086a7426495eaacb31b) - Fixed the logic related to bad block dumps
https://github.com/vmpn/busybox/commit/98f6b2d399e5fc02989390a04bd6c955b309cf7d (https://github.com/vmpn/busybox/commit/98f6b2d399e5fc02989390a04bd6c955b309cf7d) - Until this is applied "-b      Omit bad block from the dump" does not take effect in all code branches
https://github.com/vmpn/busybox/commit/3aeb870b2284713a5f206bc40910b86da7d26966 (https://github.com/vmpn/busybox/commit/3aeb870b2284713a5f206bc40910b86da7d26966) - !!! Flips the meaning of "-o" flag.  So if you use this version omit "-o" where you specified it before

Plus few more commits that are not relevant to this issue.  Once I built busybox master (https://github.com/vmpn/busybox/commit/80f8cdf04ad0e8b37c20aed883b6cbfd6636dbc3 (https://github.com/vmpn/busybox/commit/80f8cdf04ad0e8b37c20aed883b6cbfd6636dbc3)) copy of compiled binaries are at: https://drive.google.com/folderview?id=0B7ub0wf4MMSIVWl5TVZPSm50d0U&usp=sharing (https://drive.google.com/folderview?id=0B7ub0wf4MMSIVWl5TVZPSm50d0U&usp=sharing) I was able to create dumps when using "-b" flag. But dumps without "-b" were still running forever.  So I found a bug report https://bugs.busybox.net/show_bug.cgi?id=4856 (https://bugs.busybox.net/show_bug.cgi?id=4856) that was relevant. Once patches from the report were applied (https://github.com/vmpn/busybox/commit/b778dc96269f391260649bd74a2bad0e49c534aa (https://github.com/vmpn/busybox/commit/b778dc96269f391260649bd74a2bad0e49c534aa)) and using the resulting busybox binary (https://drive.google.com/folderview?id=0B7ub0wf4MMSIQ05lMDNEdXdNS2s&usp=sharing (https://drive.google.com/folderview?id=0B7ub0wf4MMSIQ05lMDNEdXdNS2s&usp=sharing)) the dump works even without "-b" option

While I did not fully confirm this as fully working, I think there is 80%+ chance that this is right and I much rather share this info with others where it could be useful
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 09, 2013, 08:46:54 am
that looks very promising, it would be good if affected poeple here could download the bin and test the new busybox (or simply nanddump command. It hin the best is test both with and without -b option, without bad sectors is easier to restore via jtag).

Any volunteers ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: n8ddd on November 09, 2013, 09:57:03 am
just tried,copied busybox over /bin/busybox then tried this  nanddump -o -b -l 0x8000000 -f /mnt/udisk/dump/root.bin /dev/mtd3
  and it worked,i think,  :clap: the root.bin have 124mb
tried 3th time to be sure...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: lemon on November 09, 2013, 12:51:02 pm
Please, can someone to feedback us about this test?

Set a waveform to screen (triangle, sinusoidal).
Move the waveform to up or down so to cut the edge of the screen.
Now invert the waveform.
What is appearing? Is it normal or the bottom of waveform is also cutting?

Here is a short video about this. https://www.dropbox.com/s/gzstblo60y50d7z/2013-11-07%2000.02.43.mp4 (https://www.dropbox.com/s/gzstblo60y50d7z/2013-11-07%2000.02.43.mp4)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: primsam on November 09, 2013, 02:12:36 pm
@lemon

i think this is the wrong section  for your problem, in the video is a owon brand device that has nothing to do with hantek/teckway/voltraft and so on ...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: n8ddd on November 09, 2013, 02:54:24 pm
updating...here's attached log console.the mtd size of "rootfs"is 121Mb,then why the nunddump is dumping 124Mb? :-[
without -b option is dumping forever
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 09, 2013, 04:10:19 pm
updating...here's attached log console.the mtd size of "rootfs"is 121Mb,then why the nunddump is dumping 124Mb? :-[

this is because you dumped the data with OOB blocks (which is necessary for restore over JTAG or the method i've published)
Eaach every (and that depends n flash size and structure) about of byte there is OOB block data, so the 121Mb together with OOB block will larger, in your case 124Mb.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vmpn on November 09, 2013, 04:33:39 pm
I also see some errors about linuxrc not starting. I need to double check config for my busybox build. Meanwhile please do not replace the one on the DSO.  You can put it in another folder and run it as:

Quote
{Path}/busybox nanddump ....
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 09, 2013, 04:57:19 pm
Please, can someone to feedback us about this test?

Set a waveform to screen (triangle, sinusoidal).
Move the waveform to up or down so to cut the edge of the screen.
Now invert the waveform.
What is appearing? Is it normal or the bottom of waveform is also cutting?

there are not such issues on Tekway/Hantek, nor these others nown from Owon (with inverted and moved to top signal).
This must be firmware bug in Owon firmware, you should tell that Owon (or rf-loop, he is collecting bugs as well).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: n8ddd on November 09, 2013, 07:06:05 pm
i've noticed that with busybox from vmpn the dump files are like this

boot.bin-1.03mb
logo.bin-2.06mb
kernel.bin-4.12mb
root.bin-124mb

and the dumped files with original busybox

boot.bin-1mb
logo.bin-2mb
kernel.bin-4mb
root.bin-dumping forever
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vmpn on November 09, 2013, 07:12:47 pm
i've noticed that with busybox from vmpn the dump files are like this

boot.bin-1.03mb
logo.bin-2.06mb
kernel.bin-4.12mb
root.bin-124mb

and the dumped files with original busybox

boot.bin-1mb
logo.bin-2mb
kernel.bin-4mb
root.bin-dumping forever

Are you using -o command line parameter? In the newest busy box this flag flipped meaning. In the old version -o means exclude oob blocks. In the new version (that I built) -o means include the oob blocks.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: JeffD on November 09, 2013, 07:20:46 pm
I was wondering what the current hardware revision is for a Hantek DSO5102BM model?  Is it 10070x555583e9?  Couldn't find the info on the Hantek site and still waiting for a their response to my email.

Still reading through this thread.  Huge amount of great info here.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: n8ddd on November 09, 2013, 07:52:16 pm
yes,i'm using -o
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vmpn on November 09, 2013, 09:23:40 pm
yes,i'm using -o

Please create dumps without using "-o" and they should come out same size as original ones
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 09, 2013, 09:45:09 pm
Still reading through this thread.  Huge amount of great info here.

JeffD,

the best is to skip the first 130-140 pages :) Really. Lots of the informations are already lightyears outdated. On the first page, there are shortcuts to important topics, as well the last pages contains siome newer infomations as well.

I was wondering what the current hardware revision is for a Hantek DSO5102BM model?  Is it 10070x555583e9?  Couldn't find the info on the Hantek site and still waiting for a their response to my email.

there are no any models left with old SoC, so current BM/BMV will be for sure not hw1007 but hw101 which is alreay S3C2416 SoC based. Between B and BM/BMV models, it is only bigger SRAM and different design in CPLD (address counter with higher range. BM\BMV design does works however with B\MSO models with no issue - i'm using MSO with 2M SRAM, so can during boot chose between MSO and BMV DSO), and between B and MSO models it is only the additional PCB mounted to i/o port on the B model mainbaord (and some few passive parts necessary to enable int , etc on the extra PCB).

Only P models does use different PCB design, so they can't be upgrated to higher memory nor MSO functionality (however it seems they does have kind of i/o header, which could allow other extensions, but up to now nothign really prooved).

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: JeffD on November 10, 2013, 12:34:13 am
Thanks for the info tinhead.  That is what I figured once I got up to page 120 trying to figure out what was current hardware revision for different models.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: at2 on November 10, 2013, 05:15:25 am
Is it possible to use  the DSO-BW-Changer for the DSO 5102P to change the bandwith to 200 MHz?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 10, 2013, 09:16:14 am
Is it possible to use  the DSO-BW-Changer for the DSO 5102P to change the bandwith to 200 MHz?

yes it should be
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: lemon on November 10, 2013, 12:16:58 pm
@lemon

i think this is the wrong section  for your problem, in the video is a owon brand device that has nothing to do with hantek/teckway/voltraft and so on ...

Please, can someone to feedback us about this test?

Set a waveform to screen (triangle, sinusoidal).
Move the waveform to up or down so to cut the edge of the screen.
Now invert the waveform.
What is appearing? Is it normal or the bottom of waveform is also cutting?

there are not such issues on Tekway/Hantek, nor these others nown from Owon (with inverted and moved to top signal).
This must be firmware bug in Owon firmware, you should tell that Owon (or rf-loop, he is collecting bugs as well).

That is exactly answering, that I wanted.
The purpose of my question was to examine the phenomenon in another DSO oscilloscope so as to exclude the possibility to be issue of DSO scopes.

Tinhead, thanks for the respond.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: at2 on November 11, 2013, 08:31:58 am
Thank you tinhead for your fast reply. I`m going to try out and let you know.

AT2
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: at2 on November 14, 2013, 08:00:53 am
 :clap: It works great. Thank you for your Support.

AT2
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: miljume on November 14, 2013, 06:18:30 pm
Hi all,

I ordered a DSO1062B just to upgrade it to 200Mhz but I get stuck at the first step when trying to do a backup

I get "firmware update failed, error: 0xfe no upgrade files detected on USB device!"  :-\

I have the following setup

[model] DSO1062B
[sw version] 2.01.1 (130129.0)
[hw version] 10020x555583e8
[serial number] DS00503381

Can someone please help me getting through?

Regards,
Mikael
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kafachan on November 16, 2013, 05:28:36 am
Hi all,
     Thank you  .  ^-^

Regards,
Kafa.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: at2 on November 16, 2013, 09:20:33 am
Hello Kafachan,

i can only tell with my DSO, as i did the change and it works fine .
See on YouTube. There did Cooking Engineer the change with his voltcraft from 60 to 200 MHz.
How To unlock 200Mhz Bandwith from your 60Mhz Hantek Tekway Voltcraft DSO (5062C, 3062c, 1062d) (https://www.youtube.com/watch?v=x1phUe93ZeQ#ws)

AT2
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: miljume on November 27, 2013, 06:53:57 pm
Hi all,

I am still stuck with unlocking 200Mhz for my DSO1062B, is there a way to unlock a unit with the data below?


[model] DSO1062B
[sw version] 2.01.1 (130129.0)
[hw version] 10020x555583e8
[serial number] DS00503381

Thankful or all help I can get

Regards,
Mikael
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 27, 2013, 10:02:21 pm
where you stuck? still in backup? well, then skip backup. Or stuck in the hack tool? then do it manually. Everything one need to know is on the first page of this thread.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mobiletester on November 29, 2013, 07:13:01 pm
I have a Hantek DSO5072P. SW 3.40.0 (130717.0)
Works the BW-Changer also on this model?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: artag on November 29, 2013, 11:34:00 pm
This thread is way too long ! Is anybody running a forum with the topics a bit more searchable ?!

I'm looking at buying one of the hantek scopes but having trouble working out the tradeoffs. I don't think there's any saving in buying the DSO1062, and I'm not convinced 1GS/s is enough for 200Mhz mode, so I'll probably stick with 100MHz bandwidth. I've got faster analog scopes anyway.

But there's the choice of B, BM, P and MSO5120D.   :-\

B is a bit cheaper
BM has 2M memory (but does that make it really slow update ?)
MSO is useful but only 1M memory.
P is really cheap but only 40K memory (or maybe 24k?)

Of course, I'd really like the best of everything ! It seems the MSO option isn't that great and can be added fairly easily. So maybe the 2M is the best choice ?

Are there any options now with ethernet already fitted ? There seem to be some add-in boards, or I can put a wifi adapter in the USB.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mobiletester on December 01, 2013, 07:57:02 am
You are right, the threat is too long.
My 5072P has 40k Memory and FFT.
I tried out the BW Changer. The timebase can set to 2ns but the input signal will be filtered. I measured the -3 dB point with a signal generator at 80 MHz.
So I must check if a SW downgrade to 3.3 is possible. And the how to do and the necesary files.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 01, 2013, 11:32:39 am
You are right, the threat is too long.

well, all necessary informations - to hack - are on the first page, as well all links to useful things. If this is not enough,
while in thread, search for 5072.

I tried out the BW Changer. The timebase can set to 2ns but the input signal will be filtered. I measured the -3 dB point with a signal generator at 80 MHz.
So I must check if a SW downgrade to 3.3 is possible. And the how to do and the necesary files.

others reported no problems with 5072p. If you don't mind make a good picture of the PCB and especially the input stage (open the metal cover).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mobiletester on December 01, 2013, 05:03:59 pm
Thanks for your reply.
Here are the pics. Another question: Is the memory soft or hardware limited?
The HW Version: 1000xffff8103
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: echen1024 on December 02, 2013, 02:43:21 am
Has anyone tried writing serial decode + triggering packages for this scope?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mobiletester on December 02, 2013, 08:32:47 pm
Can you explain this for me?
I think Hantek splits the modelcheck in the filtermodul for the frontend and the part of the timebase.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 02, 2013, 09:58:56 pm
Can you explain this for me?

The input stage does have 4 sections - the JFET/NPN input, the VGA, the bw filter, the driver (in case of "P" models THS4505, on others LHM6552). The first section is same on all models (except some diff. in attenuator and series resistor, but that does not have any influence here), and not only Tekway/Hantek models but as well Siglent/Atten and Rigol (even the DS2000) are almost same here. Sure, the workpoint is set different here and there, but in generally they all good enough for lot more than 200MHz BW. The VGA does not have any filtering (except its own output impendace), th BW filter is only used for 20MHz (nothing else, there is no other function implemented - not like on Rigol), the driver is for sure fast enought. Sure, on "P" models the THS4505 is good up to 260MHz (G=1, and this is hat "P" model is doing). I don't see anything diferent on your model, other "P" model owner have no BW issues.

part of the timebase.

you have to understand the firmare first, all timebases are loaded - then, based on model type - some blocked.As well the FIR filter will get set to specific frequency, e.g. 100MHz model is using fileter=10, which is 100MHz. That said, at 150MHz the attenuation will be -16dB (and at 100MHz -3dB). The firmare is selecting the filter value based on model name, so when you do hack, not only the timebase will get unlocked (and on some models FFT and some memory), but as well the filter will get set. When you however set wrong name (or something goes wrong), and the model name is not /dst1202b then the firmware might do everything but not what it should. Sure, there is as well possibility that the firmware you using is blocking higher model names. But hey, you can downgrde firmware, or you can set the filter manually (which will override the value set by firmware). All you have to do is to creat file on the SO, in / dir, named tst. Then edit that file, type inside

  [filter] 25

and save it. After next reboot the DSO will using 250MHz as filter value, which is exactly what 200MHz DSO is doing. That's all.
So as you can see there is always a way to hack. Btw, you should cleanup your frontends, there is lot of solder residue on the varicaps (between VGA and THS4505).

So first cleanup varicaps, then check if you did the hack properly. In the meantime would be good to know if other "P" models owner installed latest firmware (afaik yes, and afaik no problems) and if still everything working as before. Any ?

Then you can try the /tst file trick and check again .. btw, are you using the org. probes or how you measured the BW?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mobiletester on December 03, 2013, 08:51:57 pm
I have used my Spectrum Analyzer with Tracking Generator. The span is set to 0 herz and the frequency was changed. The cabel to the scope is terminated with a 50 Ohm feedthrough resistor on the scope side.
I know there is a missmatch, but when I connect the "scope side" (with the termination), to the RF input the frequency response at single frequencies is less than 1 dB up to 250 MHz. This is only a check.
Now I tried it with an "real" signal generator. The same result.
I cannot belive the limited BW comes from dirty PCB. Both channels shows the exact same damping and the filter curve is "to linear".
Thank`s for the explanation. I'm not so fit in software. I must check where I can get the SW to get access into the scope. I have read a lot of information in your thread, so I must check them again.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 04, 2013, 12:04:08 am
I have used my Spectrum Analyzer with Tracking Generator. Now I tried it with an "real" signal generator. The same result.

so we can assume the source signal is ok.

I cannot belive the limited BW comes from dirty PCB.
Both channels shows the exact same damping and the filter curve is "to linear".

both are dirty at varicap, which is connected to two 150p caps. when forward biased, the resulting 75p and AD8370 output source implendace are bulding the 20MHz BW filter. As said before, other models are using only 20MHz and no filter, but from technical point of view it is possible to reverse bias the varicap from 2.5p to 35p. To get 80MHz filter total 40p would be necessary, with already 75p in series that means 90p from varicap - for sure not possible with the originaly used BBY65-02V. So if they doing LPF here, then varicap is not BBY65-02V and/or these two series caps are probabyl not 150p as well.

The dirt on PCB can for sure have influence, but the combination to get together 40p is not that likely (and as you said, linearity).

I would still cleanp and check again (and test if the 20MHz bw is working as expected)

Both channels shows the exact same damping and the filter curve is "to linear".

but let assume the other ppl who tested "P" models made mistakes, and let assume it is firmware:

the FIR filter value will be set based on model, in "Filter_Init" is caling "CalMaxCornerFreq". Here the "GetDSTBandWidth" which be called first, which tests the value of "m_bandWidthID" which set before by readin the model number. Then there is jump to "TST_GetCornerFreqID" - which tests first if /tst file exists - if not the "CalMaxCornerFreq" will set the right filter parameters (based on model), but if there is /tst file then the vaue from that file will be translated and taken.

So i've copared the "P" model and "B" model firmware (3.40 vs. 2.7 on "B" where we know that hack works) and in the filter code described above os no difference (except the fact that "P" model is using 160MHz value for 100MHz "P" model and not 140MHz as "B" model is doing, so bit more BW available here). I see as well the main, init and all the threads calling filter - so no diff here. Honestly, if there is any difference then i can't see it (which didn't means anything, but wondering why hack is working for other "P" models users, but sure, it is possible they haven't tested deeper when timebase changed).

Around the THS4504 there is nothing wrong (except the resistors they used are not out of spec) in the circuit, 499R and 22R series are exactly as it should be (G=1 and 499 for feedback are exact as specified by TI, 22R series is withinn the 10-25p for high capacitive load, which we have here due 8 ADC x 2p each + 2-3p from relais).

Honestly, all i can say is - cleanup the varicap, measure the voltages when 20MHz LPF on/off, you can as well (for test purpose) remove one of the caps near varicap (if you do changes, always on both channels) and test then the BW, try the /tst file trick.

And let us know if any changes there. I don't have "P" model, so all i can do is to read the schematic/datasheets and check the decompiled firmware.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mobiletester on December 07, 2013, 10:47:51 am
Thanks for your support!
I cleaned the PCB with Flux Off, no changes.
So I try out the software solution. For this I must study which tools I need, and do the modifications.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 07, 2013, 10:57:18 am
Thanks for your support!
I cleaned the PCB with Flux Off, no changes.
So I try out the software solution. For this I must study which tools I need, and do the modifications.

you can use the USB Tool from Peter :

http://peter.dreisiebner.at/dso-usb-tool/ (http://peter.dreisiebner.at/dso-usb-tool/)

you can use it to upload the previously created "tst" file into /

You can as well disasemble the enclosure and connect physical uart<->ub converter, then run terminal app on you PC and work from there with editor like "vi" to create the "tst" file.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tayfun on December 14, 2013, 05:40:18 pm
Hi;
I recently got my brand new MSO5202D V3.2.35. I download latest firmware from www.hantek.com (http://www.hantek.com) website and put in to usb stick. Then I upgrade the scope. Menu appears please restart the scope. When I restart the oscilloscope Hantek logo comes then blue screen comes and restarts forewer. I thing that it was wrong version (SW: V2).
Now I have dst1kb_3.2.35_15202d_fact130826.0.up file but i hope it is not too late. Please help me.....
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rigrunner on December 15, 2013, 08:58:36 pm
I've been looking at some sine waves recently and i've noticed something odd.
The RMS calculations seem to be wrong. 880mV peak to peak should give 311mV RMS but my hacked voltcraft doesn't seem to agree.
It's a 1007 board and it is running dst1kb_2.06.3__130814.1 firmware.

I've also noticed that at 10MHz the levels are measured slightly lower than under 10Mhz. Is this the front end problem that you mentioned a while ago Tinhead?

Please take a look at the peak to peak and RMS figures in the screen shots and tell me what you think?

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: joaoc on December 15, 2013, 09:20:14 pm
This thread is way too long ! Is anybody running a forum with the topics a bit more searchable ?!

I'm looking at buying one of the hantek scopes but having trouble working out the tradeoffs. I don't think there's any saving in buying the DSO1062, and I'm not convinced 1GS/s is enough for 200Mhz mode, so I'll probably stick with 100MHz bandwidth. I've got faster analog scopes anyway.

But there's the choice of B, BM, P and MSO5120D.   :-\

B is a bit cheaper
BM has 2M memory (but does that make it really slow update ?)
MSO is useful but only 1M memory.
P is really cheap but only 40K memory (or maybe 24k?)

Of course, I'd really like the best of everything ! It seems the MSO option isn't that great and can be added fairly easily. So maybe the 2M is the best choice ?

Are there any options now with ethernet already fitted ? There seem to be some add-in boards, or I can put a wifi adapter in the USB.

I would also like to know what is the best to buy.

From this site the BM is cheaper that the B model... http://www.rigoloszilloskop.de/search/?DirID=&q=dso5062 (http://www.rigoloszilloskop.de/search/?DirID=&q=dso5062) I'm trying to stay close to the 300€ mark...

Thanks for the help!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 15, 2013, 11:38:42 pm
EDITED: i should not take that many drugs ...

The RMS calculations seem to be wrong. 880mV peak to peak should give 311mV RMS but my hacked voltcraft doesn't seem to agree.
...
I've also noticed that at 10MHz the levels are measured slightly lower than under 10Mhz.

which RMS, cyclic or periodic? When you look exactly, the periodic is always the same, where cyclic depends on the position of the first waveform cycle and amount of cycles (resolution).

So let's RTFM now :)  "Cyc RMS - Calculate the actual RMS measurement of the first complete cycle of the waveform"
(RMS over the first cycle in the waveform), so it does not have anything to do with frequency, but on the first visible and measured cycle.

Let's check now the measurment inaccuracy: with 200mV/DIV and 10.24DIV vertical resolution (this is hat the DSO is doing) 1LSB is equal 8mV. The periodic RMS you measured is 304mV, and this is 1LSB from the pk-pk back calculated value (as you said it is 311mV, the next steps on display can be however 312mV and 304mV, your DSO is displaying 304mV). Sorry, but that by far within specs. You should as well always try to use full vertical resolution, on your pictures you measuring only with half of the full range. Even the worst cyclic RMS value is here still within specs.

Is this the front end problem that you mentioned a while ago Tinhead?

short answer = no.

These problems i spoke about, they apply only to signals between 130 and 200MHz with highest inaccuracy at 165MHz or so, they apply afaik only to (still only some?) 60 and 100MHZ DSOs hacked to 200MHz.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 15, 2013, 11:48:33 pm
I would also like to know what is the best to buy.
it depends what you need. Due the fact that some distirbutors stil might have hw1007 models, i would be careful buying. It does make more sense to buy the latest hardware and not the hw1007. So watch the SN.

From this site the BM is cheaper that the B model... http://www.rigoloszilloskop.de/search/?DirID=&q=dso5062 (http://www.rigoloszilloskop.de/search/?DirID=&q=dso5062) I'm trying to stay close to the 300€ mark...

yeah, look on that crap webite, "Wir sprechen Deutsch", yeah my dog as well.

When you in Germany, buy from Conrad/Voelkner or Pinsonne.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rigrunner on December 15, 2013, 11:58:52 pm
Thank you for that detailed explanation Tinhead  :-+


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: joaoc on December 16, 2013, 06:43:22 pm
I would also like to know what is the best to buy.
it depends what you need. Due the fact that some distirbutors stil might have hw1007 models, i would be careful buying. It does make more sense to buy the latest hardware and not the hw1007. So watch the SN.

That makes sense! I will hask for the hw model or SN when buying.
From this site the BM is cheaper that the B model... http://www.rigoloszilloskop.de/search/?DirID=&q=dso5062 (http://www.rigoloszilloskop.de/search/?DirID=&q=dso5062) I'm trying to stay close to the 300€ mark...

yeah, look on that crap webite, "Wir sprechen Deutsch", yeah my dog as well.
Lol. I'm from Portugal with zero knowledge of German, i've used google translator and the translations seams normal (for google...). I'm avoiding the store now...

When you in Germany, buy from Conrad/Voelkner or Pinsonne.
Thanks for the tips! I'm trying to buy inside the EU to avoid the border/custom taxes...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 17, 2013, 12:30:17 am
Hi;
I recently got my brand new MSO5202D V3.2.35. I download latest firmware from www.hantek.com (http://www.hantek.com) website and put in to usb stick. Then I upgrade the scope. Menu appears please restart the scope. When I restart the oscilloscope Hantek logo comes then blue screen comes and restarts forewer. I thing that it was wrong version (SW: V2).
Now I have dst1kb_3.2.35_15202d_fact130826.0.up file but i hope it is not too late. Please help me.....

you need an uart<->usb converter, if you have one then we can continue - without no chance to restore.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: wolfgam on December 21, 2013, 03:50:53 pm
Hi,

i just purchased Voltcraft DSO-1062D (equivalent Hantek DSO5062B) with HW revision hw1010, SN: > 15000 (SN: 015996).
Does anyone know:
- difference between hw1007 and hw1010
- does the 200Mhz hack still work?

regards
Wolfgang
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: STS463 on December 23, 2013, 04:25:16 pm
Hi,

maybe somebody can help me regarding an Error Code.

I have purchased a 200MHz TEKWAY MST1202B (7"TFT 1Mpoints 2CH+16x Logic) - SW VERSION: 3.2.35 (130926.0), HW VERSION: 1010x 55558340.

The "Self Calibration" function does fail at "self calibration step (13/34)" with message "Self calibration failed, error x502".

Can somebody tell me the meaning of "error x502" (what function of the MSO does not work)?

Thank you very much for your help.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: csaba66 on December 27, 2013, 01:34:57 pm
Hi,

I'm new here and have a Hantek DSO1102BV (hw version: 0x555583e8, SN: DSO0501xxx, PCB marking: DSO1000H v.1.00.1).

I haven't changed anything yet, except for a fw upgrade from 2.01.1 (120701) to 2.01.1 (130129).

After having read through the forum, I have several questions:

- I'm a bit puzzled by the Wave and Save Wave submenus under SAVE/RECALL: setting Media to USB or Flash, Save and Recall work as expected, but Recall fails when Media is set to SD even though Save succeeds according to the message. The SD card status is "built in"; is the "EEPROM licensing hack" still needed if I want to use the SD card for saving waveforms?

- The Save Wave button always saves to USB, regardless of the Media settings; is this a bug or normal?

- The UART header is marked differently on two pictures (RX and TX are swapped,
https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=50483 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=50483) vs.
https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=19887 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=19887) ). Ok, one is the pinout of the DSO itself, and the other of the module to be connected, but which is which?

- Beside the UART header, there is a four hole connector marked @WLAN. What module can be used there?

Thanks for all the useful info already here, and any answers to come, cheers :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sabresfan03 on December 30, 2013, 01:24:14 am
Hi all,

I got my 1st scope, a DSO5062BM, 15000 version, because I liked what I read here and because of the great work of Tinhead.  Anyway, its menus are all in Chinese and I cant read it.  Does anyone know how to switch the language?  Thanks.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 30, 2013, 02:09:32 am
Hi all,

I got my 1st scope, a DSO5062BM, 15000 version, because I liked what I read here and because of the great work of Tinhead.  Anyway, its menus are all in Chinese and I cant read it.  Does anyone know how to switch the language?  Thanks.

press Utility -> F6 -> F2 (to select language)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 30, 2013, 02:11:22 am
The "Self Calibration" function does fail at "self calibration step (13/34)" with message "Self calibration failed, error x502".
Can somebody tell me the meaning of "error x502" (what function of the MSO does not work)?

unfortunately not :\
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 30, 2013, 02:19:02 am
- I'm a bit puzzled by the Wave and Save Wave submenus under SAVE/RECALL: setting Media to USB or Flash, Save and Recall work as expected, but Recall fails when Media is set to SD even though Save succeeds according to the message. The SD card status is "built in"; is the "EEPROM licensing hack" still needed if I want to use the SD card for saving waveforms?
i don't have handheld anymore, so can't check that ...

- The Save Wave button always saves to USB, regardless of the Media settings; is this a bug or normal?
is there a way to select SD as destination? if not, then it is not a bug, if yes - well, then it is bug.

- The UART header is marked differently on two pictures (RX and TX are swapped,
one of them :)

- Beside the UART header, there is a four hole connector marked @WLAN. What module can be used there?
yeah, i remember that header. On the bottom side you can see missing IC near that header, which is in principle USB mux like on BM/BMV model (check the hw1007 benchtop scheematic). I assume the intention was to enable second USB Host (and a usb wlan card connected to that header), but there is not option in firmware yet to use that from the menu (sure, you can add a script doing this or oatch firmware to enable it instead of beeper ...)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: STS463 on December 30, 2013, 04:17:03 pm
The "Self Calibration" function does fail at "self calibration step (13/34)" with message "Self calibration failed, error x502".

Hi tinhead,

thank you very much for your kind reply.
The supplier of the scope has promised me to contakt TEKWAY regarding background information for "error x502". I will post the answer (if any) in this forum.

My best regards and a Happy New Year 2014
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: csaba66 on December 30, 2013, 06:41:20 pm
- The Save Wave button always saves to USB, regardless of the Media settings; is this a bug or normal?
is there a way to select SD as destination? if not, then it is not a bug, if yes - well, then it is bug.

I experimented a bit more with the save/recall menu; unfortunately some parts don't work at all, while others need some thinking to overcome illogical features. I managed to cause long freezes with some button sequences, and once it even rebooted.

Here are my findings:

Wave (F1) has a submenu, where you can select
- channel to be saved (CH1 or CH2)
- media (Flash, USB, SD)
- location (0-100 for Flash, 0-1000 for the other two)
  save/reload to/from Flash works
  save to SD says operation done, but recall fails
  USB works, but there are file names, so location has no meaning, although it can be set

Save Wave (F5) has no submenu, and saves a .gif and a .bmp on the USB right away (eg. pic_27_2.gif and pic_27_2.bmp in a directory called pic_27_2). Each new save creates a new directory; don't ask me where the names come from :)

The settings from F1 (Wave) do not affect this function as I originally expected, and this may even be logical if no network connectivity is default, so one would not want the picture files in any place other than the USB stick. Networking and saving to SD would be much nicer of course :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on January 06, 2014, 02:27:00 am
I am interested in MSO5074F oscilloscopes. Does it with the USB interface?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 06, 2014, 01:17:03 pm
I am interested in MSO5074F oscilloscopes. Does it with the USB interface?

of course it does, but when you have any question you might ask this dealer (he is the only who seems to have MSO5074F in stock now):

http://www.amazon.com/4CH-70MHz-MSO5074F-Oscilloscope-Channels/dp/B00HEHLNF8/ (http://www.amazon.com/4CH-70MHz-MSO5074F-Oscilloscope-Channels/dp/B00HEHLNF8/)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on January 07, 2014, 12:31:19 am
Great! Thanks for the link on amazon Tinhead.  ^-^
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: izzy84075 on January 11, 2014, 01:45:50 am
So I picked up a DSO5072P over the last summer, put it through it's paces for a few days, and then did the 200MHz upgrade... Now the probe test output is reading as a 0.188V@1kHz square wave, and the self-calibration fails at step 2 with the error code 0xa00... Anything I can do to fix this, or is it hosed?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 12, 2014, 11:04:04 am
So I picked up a DSO5072P over the last summer, put it through it's paces for a few days, and then did the 200MHz upgrade... Now the probe test output is reading as a 0.188V@1kHz square wave, and the self-calibration fails at step 2 with the error code 0xa00... Anything I can do to fix this, or is it hosed?

check the cables, probably the left one (supply for analong circuits) is not contacting properly.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: laurentiu_chiforescu on January 12, 2014, 08:04:30 pm
I have now a 200mhz osciloscope!
Tinman, thanks a million times! Thanks to you I now have a 200MHz oscilloscope with minimum time 2ns!
With great trepidation I started DSO BW-Changer ...
I did everything, took a few seconds ...
I reboot the oscilloscope ...
And it worked!
My wife was watching I had told him that I'm just about to do... a wonderful thing, or a new oscilloscope, turned in a piece of shit (which I gave RON 1500)!
It worked, I am very pleased, thank you again!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 12, 2014, 10:48:33 pm
you welcome :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: triwing on January 14, 2014, 08:20:26 am
Hello!

I did revice my Hantek DSO5102P yesterday, it's a 100mhz oscilloscope
It's running fw: 3.40

Is there any 200mhz hack for it?

I did read first post in this thread and did make backup of mtd blocks.
Now im connect to uart pins directly beside usb port on the backside.
i got console now,  and could see file dst 1102b i did raname it to dst1202b
is that all? =/




best regards
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 14, 2014, 09:52:55 am
Hello!

I did revice my Hantek DSO5102P yesterday, it's a 100mhz oscilloscope
It's running fw: 3.40

Is there any 200mhz hack for it?
yes

I did read first post in this thread and did make backup of mtd blocks.
Now im connect to uart pins directly beside usb port on the backside.
i got console now,  and could see file dst 1102b i did raname it to dst1202b
is that all? =/

yes, that's all.

The backup tools posted here are not working on all new models,  so affected ppl have to make
backup manually or skip that step.

The hack itself, can be done via uart, virtual terminal or with the app posted here in thread.

Whatever model one have, the BW hack is always the same. The other things are only optional,
like logo, backup or hardware modifications.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: triwing on January 14, 2014, 10:29:42 am
Hi again, did try to make own disp file with image2lcd with info from readme file included, but after reboot it's still same as original
Did place disp file in /dso/app/

b.r
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 14, 2014, 10:44:51 am
Hi again, did try to make own disp file with image2lcd with info from readme file included, but after reboot it's still same as original
Did place disp file in /dso/app/

the boot logo is in hw0,hw1005 and hw1007 models (as described on first page) a simple raw picture.

In BM/BMV models and handhelds it is in the "disp" file, here you need the image2lcd.

On latest models the logo has been compiled into fram buffer driver, so you need gpl sources (for your model
there are two versions, dowload both to get all necessary files ....) and need to recompile that frame buffer (s3c-fb.c)
with your own logo (e.g. DSO5202P logo in DSO5000P\src\linux-3.2.35\drivers\video\hantek_logo\5202P.h)

http://www.hantek.com/download/Desktop_5000P.zip (http://www.hantek.com/download/Desktop_5000P.zip)
http://www.hantek.com/Product/5000P/DSO5000P.zip (http://www.hantek.com/Product/5000P/DSO5000P.zip)

For other latest models the GPL sources has been not updated, so one have to take the "P" model soueces (as they as well for
S3C2416 SoC and Linux 3.2.35) and compile frame buffer. In one of these "P" models GPL source are logos are included^^.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on January 15, 2014, 05:46:55 am
Hi,

I'm new here and have a Hantek DSO1102BV (hw version: 0x555583e8, SN: DSO0501xxx, PCB marking: DSO1000H v.1.00.1).

I haven't changed anything yet, except for a fw upgrade from 2.01.1 (120701) to 2.01.1 (130129).

After having read through the forum, I have several questions:

- I'm a bit puzzled by the Wave and Save Wave submenus under SAVE/RECALL: setting Media to USB or Flash, Save and Recall work as expected, but Recall fails when Media is set to SD even though Save succeeds according to the message. The SD card status is "built in"; is the "EEPROM licensing hack" still needed if I want to use the SD card for saving waveforms?

- The Save Wave button always saves to USB, regardless of the Media settings; is this a bug or normal?

- The UART header is marked differently on two pictures (RX and TX are swapped,
https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=50483 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=50483) vs.
https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=19887 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=19887) ). Ok, one is the pinout of the DSO itself, and the other of the module to be connected, but which is which?

- Beside the UART header, there is a four hole connector marked @WLAN. What module can be used there?

Thanks for all the useful info already here, and any answers to come, cheers :)

Hello! I found Hantek has a update firmware can Recall when Media is set to SD.
The link is www.hantek.com/Product/DSO1000B/DSO1102BV_Firmware.zip (http://www.hantek.com/Product/DSO1000B/DSO1102BV_Firmware.zip)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 15, 2014, 07:38:48 am
Hello! I found Hantek has a update firmware can Recall when Media is set to SD.

thanks for the information!.

Btw, it looks like that firmware update is upgrading Linux kernel, device drivers and rcS as well.
So for those who only updating fw manually - don't miss these things, or you handheld will not boot up anymore!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on January 16, 2014, 01:29:44 am
Thanks for reminding me, tinhead.  :phew:
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: limpid on January 22, 2014, 08:46:11 am
anyone know, 5072P can be cracked?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 22, 2014, 01:03:09 pm
anyone know, 5072P can be cracked?

no, there is no crack and no need for a crack .. nor keygen .. but you can hack the bandwidth, that for sure ^^
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: limpid on January 22, 2014, 02:11:05 pm
thanks.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: limpid on January 23, 2014, 01:56:30 pm
hello, anyone have a 2Gsa/s sample rate, 60Mhz DSO7000 series?this series looks just launch.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 23, 2014, 02:24:09 pm
hello, anyone have a 2Gsa/s sample rate, 60Mhz DSO7000 series?this series looks just launch.

for sure not, it has been launched but not yet available. All you can buy is DSO5074F(G)  and the DSO4000 models.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kallsop on January 24, 2014, 07:52:16 pm
Glad I found this thread :)

Looking to buy a new Hantek DSO5062B, definitely need the extra memory over the DSO5072P. Presumably this new DSO will have a serial >15000. So, it will be bandwidth hackable but won't be able to make a backup? I don't care too much about the backup, just want to know what I am getting in to. I have a USB-rs232 adapter if needed.

Hmmm: just discovered that the Rigol DS1052E is the same street price, both are $330, hackable to 100MHz. Decisions, decisions.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: limpid on January 25, 2014, 08:13:41 am
Hi Thinhead, do you have any hack video for DSO5062B?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 25, 2014, 11:14:08 am
video ? no, i don't speak any human language and video without voice is useless. But for what you need video? The hack is so simple ...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: gafbich on January 25, 2014, 09:17:57 pm
help, replace the file on your DST1102B dso.exe (I do not remember how) now boot up logo on UART is not available (nor any greeting Putty). What should I do!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 26, 2014, 03:01:30 am
help, replace the file on your DST1102B dso.exe (I do not remember how) now boot up logo on UART is not available (nor any greeting Putty)
normally even if you delete every file, the DSO will still load bootloader and later kernel, so you should see messages from both of them. I guess you attached UART adapter, booted DSO then (but DSO stopped in bootloader) and then you deleted something in bootloader (probably purged it). Now what you can do is to restore the bootloader - and before i tell you how i need to know what hw/fw revision was installed (or at least what is your SN, < or > than 15000) and maybe how old is your DSO.

What should I do!

- send it back to distributor (warranty case)
- where you from? maybe it is cheaper/easier when you send it to me (i can for sure restore it)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: gafbich on January 26, 2014, 07:04:00 am
I would like to send him anywhere and not solve the problem by hand, using your valuable suggestions. It's new, it is about 1 week. I have a week to NAND programmer available. But exactly how to solve this problem by using a JTAG or UART. Not that he wrote smushaytes model ADS1102CAL +. Although the menu interface completely ATTEN.
In my arsenal is J-Link ARM, ARM-USB-OCD, USB-UART.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 26, 2014, 11:58:23 am
I would like to send him anywhere and not solve the problem by hand, using your valuable suggestions.

i don't see anything broken, the DSO is booting. So all you missing is boot logo and no serial port?

It's new, it is about 1 week. I have a week to NAND programmer available.
...model ADS1102CAL +.
Although the menu interface completely ATTEN.

hehe, that looks cool. I said some time ago that they will probably produce as well for ATTEN,

https://www.eevblog.com/forum/testgear/new-atten-dso-discovered/msg264137/#msg264137 (https://www.eevblog.com/forum/testgear/new-atten-dso-discovered/msg264137/#msg264137)

and it seems you have one of these new ATTENs (with Tekway/Hantek inside).

If you don't mind, make some other pictures  (outside and inside).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: gafbich on January 26, 2014, 12:40:11 pm
Well, I do what you need pictures, and you help me make a repair program today.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 26, 2014, 01:24:08 pm
Well, I do what you need pictures, and you help me make a repair program today.

sure, but you have to tell me exactly what yoyu did, what worked before and what didn't work now.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: gafbich on January 26, 2014, 02:27:30 pm
means so worked initially everything, then on the second day at work with scanned picture crumbled. I decided to flash it, no firmware is not approached, I found that on an embedded operating system in the device linux. In the search for the desired firmware, I replaced the file dso.exe found in this thread, after replacing the oscilloscope to load the logo and all the buttons are lit by UART access is no more, using JTAG not figured out how to flash it!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kallsop on January 26, 2014, 10:02:10 pm
Ordered a Hantek DSO5062B, can't wait to get it and a big thanks to tinhead all the others who are working on these scopes.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on January 27, 2014, 05:12:20 pm
tinhead
www.hantek.com/Product/DSO5000Series/DSO5102B_Firmware.zip (http://www.hantek.com/Product/DSO5000Series/DSO5102B_Firmware.zip)
Newly firmware 5000B series, contain dso5kb_func_dso5102b20140111.up (3 325 038 byte) 01.14.2014

 "error 0xf7 illegal update file detected"
 gpg.exe with "0571tekway" - decryption failed:bad key :o
What could it mean?

upd.
password: dso5000b  :palm:

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: n8ddd on January 27, 2014, 06:33:38 pm
tinhead
www.hantek.com/Product/DSO5000Series/DSO5102B_Firmware.zip (http://www.hantek.com/Product/DSO5000Series/DSO5102B_Firmware.zip)
Newly firmware 5000B series, contain dso5kb_func_dso5102b20140111.up (3 325 038 byte) 01.14.2014

 "error 0xf7 illegal update file detected"
 gpg.exe with "0571tekway" - decryption failed:bad key :o
What could it mean?

upd.
password: dso5000b  :palm:


maybe is for the latest hardware
the dso5000bm and p series is updated too
maybe tinhead can tell us what is all about...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Reuel T on January 28, 2014, 04:50:52 am
Hello
I wish to thank tinhead and everyone else on this thread for excellent information & service.
I bought a Tekway DSK1102B from
http://www.triotest.com.au/shop/en/home/1961-tekway-dst1102b-digital-oscilloscope-with-wide-screen-hd-display.html (http://www.triotest.com.au/shop/en/home/1961-tekway-dst1102b-digital-oscilloscope-with-wide-screen-hd-display.html) for only AUD$467.05 delivered (incl GST) and after the hack has a 200MHz scope. It used to cost 3 time the price just 2 years ago here in AU.

On the "ringing frequency" issue at 10M pointed out by Dave, I found that there is zero overshoot/undershoot problem if I just use a 100:1 (250Mhz) passive probe that cost me $59.

Thanks again

Reuel



Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 28, 2014, 12:56:41 pm
tinhead
www.hantek.com/Product/DSO5000Series/DSO5102B_Firmware.zip (http://www.hantek.com/Product/DSO5000Series/DSO5102B_Firmware.zip)
Newly firmware 5000B series, contain dso5kb_func_dso5102b20140111.up (3 325 038 byte) 01.14.2014

 "error 0xf7 illegal update file detected"
 gpg.exe with "0571tekway" - decryption failed:bad key :o
What could it mean?

upd.
password: dso5000b  :palm:


maybe is for the latest hardware
the dso5000bm and p series is updated too
maybe tinhead can tell us what is all about...

exact, this is firmware for the latest hardware hw1001 with firmware 3.x loaded on it. It is compiled for Linux 3.x
and SoC S3C2416. Sure, with "some" tricks i can made it working on an old hw1007 BMV model (as it have 2.6.30.4 Linux).
But generaly one should not use 3.x firmware on hw0, hw1005, hw1007 DSOs ans hw1001 handhelds (so all with S3C2440 SoC).

One might ask "what now with old hardware", well nothing, the firmware can be with no issues compiled for older hardware as well (as done for MSOs), no idea why Hantek/Tekway haven't released any 2.x version as well. Some day they will for sure stop to support older models, but currently they have to, the S3C2416 SoC loaded models are < 1 yr old, so there are still models with S3C2440 SoC and within warranty (and support).

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 28, 2014, 01:07:50 pm
means so worked initially everything, then on the second day at work with scanned picture crumbled. I decided to flash it, no firmware is not approached, I found that on an embedded operating system in the device linux. In the search for the desired firmware, I replaced the file dso.exe found in this thread, after replacing the oscilloscope to load the logo and all the buttons are lit by UART access is no more, using JTAG not figured out how to flash it!

so let summarize:
- you bought new ATTEN
- that DSO is using firmware 1.9 (which is unknown version for me)
- that DSO is using hardware 1100x19F48106 (which is unknown version for me)

and then :
- you ignored the fact that nobody knows that hardware and firmware version
- you installed dso.exe found in this thread (sorry, but why you did it? i nor others posted anything
  what would match your hardware adn firmware from that ATTEN)
- you tried to replace logo (where? in /logo, in disp or in frame buffer driver? Because this all depends
  on hardware and firmware and linux version - which are all unknown for me on you DSO)
- you wish now to flash something? what do you want to flash?

Sorry, but i can't help you with that. If i would have an dump from such model (which i don't have),
then i would for sure spend time and try to exract necessary files/bins to help you to restore your DSO.

It might be (and this is big ???) that your ATTEN is nothing else that HanTekway B or P model, but it can
be as well complettly new mainboard with unknown compoentns arragement/routing. this is why i said
"make some pictures", as this is the only way to identify the mainboard. Having this, maybe (and really maybe)
it will be possible to get proper files from other matching models. But as said above, currenltly i don't know that
hardware nor the firmware version.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DLT on January 28, 2014, 06:38:39 pm
Hi All,
         big thanks to Tinhead and all other contributors!

I have just purchased an MSO5062D; serial number 156xx, with motherboard 1.01, 2014/1/4. HW1010, SW 3.2.35.   (  :) )

Some questions:
1) what is backup method for these > 15000 units? (Not listed for MSO and ser no  > 15000)
2) can I upgrade bandwidth as usual (rename dst file in root, or use DSO_BW_Changer, etc?)
3) I guess this doesn't change the LA part (always 500mS/s?)
4) How to enable LAN? There is a transformer position on both the LA sub-board and the main board - which to use? Any software changes?

There is now a 4 pin header next to the LAN jack for UART access (documented on your page 125). Also a 10 pin now on other side of LAN jack - I havent seen a picture of that in the blog so far...

UART converter - I use an (very!) old mobile phone Serial cable, one with a "box" halfway down containing an RS232 chip - cut off the phone end and connect to the scope (look up chip used in the box to discover connections...).

I'll see if I can take some decent pictures - anything else you want to know about this newer version?

Thanks for listening!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DLT on January 28, 2014, 06:59:30 pm
... oops, that was meant to be motherboard 1,01, 2013/1/4 (not 2014!)      ;D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 28, 2014, 07:21:40 pm
Some questions:
1) what is backup method for these > 15000 units? (Not listed for MSO and ser no  > 15000)

right, this is because nanddump seems to not working properly (at least didn't worked properly on lot of "P" models).
Your MSO have nanddump installed (actually compiled into busybox), so you can try to made backups manually or via (any ARM)JTAG adapter (dump whole NAND together with OOB blocks).

2) can I upgrade bandwidth as usual (rename dst file in root, or use DSO_BW_Changer, etc?)

yes, nothing changed here (except logo which is now compiled into frame buffer driver, but who cares about boot logo)

3) I guess this doesn't change the LA part (always 500mS/s?)

exact, there is no way to update LA - not the sample rate nor the memory depth nor other things.

4) How to enable LAN? There is a transformer position on both the LA sub-board and the main board - which to use? Any software changes?

DM9000AEP chip, H1102NL magnetics and RJHSE-5381 RJ45 jack - that's all. the device driver is there. The firmware itself would enable things like ssh/telnet/ftp - but no option (as of today) to (cleanly) access to the firmware itself for remote control or snapshots.

However ... the latest "B" model firmware does have "LAN options" now, so they not far from releasing LAN support

There is now a 4 pin header next to the LAN jack for UART access (documented on your page 125). Also a 10 pin now on other side of LAN jack - I havent seen a picture of that in the blog so far...

yes, this is JTAG port for the CPLD

UART converter - I use an (very!) old mobile phone Serial cable, one with a "box" halfway down containing an RS232 chip - cut off the phone end and connect to the scope (look up chip used in the box to discover connections...).

let me guess, something like DLR3-P? I have such adapter as well, it does works and i don't need any crap USB drivers (lucky me, i have HP mws/notebook with RS232 and LPT ports ... even replacement display, mainboard, memory and cpu)

I'll see if I can take some decent pictures - anything else you want to know about this newer version?

thanks, but i got good pictures already (except your LA PCB version is different than v1.00.3). Oh well, you got these new LA cables as well, what inside the small plastic box? I guess only converter from 1.25 flat cable to 2.54 header?

What i'm looking for are:
- dump of the CPLD (the CPLD can be read-back with Altera USB Blaster)
- full NAND dump from latest B, BMV and MSO models
- full NAND dump, pictures, what so ever from latest Handhelds (in case they have S3C2416 SoC as well now)
- paypal donations (link to donation page in my profile/website link) to continue my work (e.g. on schematic for curent models)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DLT on January 28, 2014, 08:39:46 pm
...thanks tinhead - lots to do there - I'll try to keep you updated...

I have an Altera Blaster, so may be able to get FPGA image? Is it main board, LA or both you want? Also will attempt some NAND dumps - command via terminal, output to USB I guess...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 28, 2014, 09:15:42 pm
...thanks tinhead - lots to do there - I'll try to keep you updated...

I have an Altera Blaster, so may be able to get FPGA image? Is it main board, LA or both you want? Also will attempt some NAND dumps - command via terminal, output to USB I guess...

no, not from FPGA but from CPLD (the MAX II EPM240 CPLD, connected to that 10pin header near RJ45).

Both FPGAs (DSO and LA boards) are not what i'm looking for, their designs are known as they will be loaded during each boot from /lib/firmware directiry. But CPLD, that was pre-programmed in factory and in case someone destroy it it would be good to have a copy (i do have for all hw0 to hw1007 models, but not for the latest models).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rudy1589 on February 01, 2014, 05:54:57 pm
It seems that the Hantek website has been down. I just got a DSO5102B. Where can I get the latest firmware update?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 01, 2014, 08:01:38 pm
It seems that the Hantek website has been down. I just got a DSO5102B. Where can I get the latest firmware update?

right, they do have holidays until i think Feb 10th or something, so no IT admin there to reboot IIS  :-BROKE

what version do you have currently installed?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: gafbich on February 01, 2014, 09:38:32 pm
Dear tinhead, could you throw me a NAND dump from DSO5102B. I'll try to pour through the programmer. May start! ARM S3C2416 Processor
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rudy1589 on February 01, 2014, 10:37:35 pm
Quote
right, they do have holidays until i think Feb 10th or something, so no IT admin there to reboot IIS  :-BROKE

what version do you have currently installed?
     
It is 2.06.3  (130329.0)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 01, 2014, 11:37:21 pm
Quote
right, they do have holidays until i think Feb 10th or something, so no IT admin there to reboot IIS  :-BROKE

what version do you have currently installed?
     
It is 2.06.3  (130329.0)

the latest for DSO5102B with 2.06.3 is here (my patched version)

https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg294175/#msg294175 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg294175/#msg294175)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rudy1589 on February 01, 2014, 11:59:18 pm
the latest for DSO5102B with 2.06.3 is here (my patched version)

https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg294175/#msg294175 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg294175/#msg294175)

When I ran that update I got: Firmware update Failed 0xF7
Illegal update files detected.

Is there a way to correct this easily?   
Thanks for your help!!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 02, 2014, 12:12:41 am
hard to say, normall it should work. The 0x7F can be due many things. I'm anyway wondering where you got DSO5102B with 2.06.3 fw. This must be hw1007, is it? That will be old stock, so who knows what on the DSO blocking the update.

Are you really sure you have 2.06.3 ?

EDIT: in case oyu really have 2.06.3, here download link. There are two fw version, one from April 2013 and one from September. Try first the one from April, then if this was working the one from September. Both are original files, for DSO5102B, so they must work.

http://www.filedropper.com/hantekfw (http://www.filedropper.com/hantekfw)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: dlrpgmsvc on February 02, 2014, 12:17:45 am
Hi tinhead !

Do you, or someone else in this forum, can dissipate my doubts ? Many thanks !

[1] I will have soon a DSO5102p :-+ , and I will want to enable 450Mhz BW by using the "lst" file method you discovered (I will first enable 200MHz with the hack).
Can I do this via rear or front USB method ? I can see (from the sources of the 200MHz automated hack via (front or rear?) usb port made for Windows) that I can issue the necessary commands to do this job, but I need to know what are the Linux commands necessary to create the "lst" file into the right directory and how to write inside it the necessary data. I don't know Linux  :-\ so, if someone can tell me the exact command sequence, I can modify the 200MHz hack sources in order to have an all-in-one utility program that can push the bw to 200mhz and also set the filter to 450mhz.

[2] The 200MHz hack can be done with the (front or rear?) USB, without the need to open the DSO and connecting to the UART, right ?

[3] I can see that the DSO5102p doesn't need to be hardware modified in the front-end after the 200MHz hack, and only the "B" version need this, right ?  ;)

[4] In your first header post, you say :

     ............................
     For all other following benchtop and handheld models with S/N < 15000
     - Hantek Handheld DSO1062B/BV, DSO1102B/BV, DSO1202B/BV
     - Hantek Handheld DSO1062S, DSO1102S, DSO1152S
     - Tekway MSO MST1062B, MST1102B, MST1202B
     - Hantek MSO MSO5062D, MSO5102D, MSO5202D
     - Voltcraft MSO MSO5062D, MSO5102D, MSO5202D
     - Hantek DSO DSO5062BV/BMV, DSO5102BV/BMV, DSO5202BV/BMV
     - Extech MS6060, MS6100, MS6200
     - Hantek DSO5072P, DSO5102P, DSO5202P

     you have to edit a specific execuatable (as the logo is compiled into it), all necessary tools are here:
     https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-     get-200mhz-bw-for-free/msg200040/#msg200040 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg200040/#msg200040)

     For all other following benchtop and handheld models with S/N > 15000
     - Hantek DSO5072P, DSO5102P, DSO5202P
     - Hantek MSO5074F, MSO5074FG
     - Tekway/Hantek MSO7000B series
     - Tekway/Hantek DSO/Handheld/MSO with S/N > 15000 and hw1.0 or hw1.10 (so all with S3C2416 SoC)

     All i can tell for now is that the boot logo seems to be compiled into display driver
     ............................

     So, there is an incongruence... what is the true between the two statements about DSO5102P ? This DSO is listed in both the mutually exclusive groups (along with other models too).

Also, I saw on first header post that for the "p" series, the works are "in progress". So, if you will need something from my model, tell me !  :-BROKE

Many thanks !
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 02, 2014, 12:19:40 am
Dear tinhead, could you throw me a NAND dump from DSO5102B. I'll try to pour through the programmer. May start! ARM S3C2416 Processor

well, when i got one i will share with you .. as you can see here:

https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg377178/#msg377178 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg377178/#msg377178)

i'm looking for full dump of the new models as well ...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rudy1589 on February 02, 2014, 12:30:24 am
Quote
EDIT: in case oyu really have 2.06.3, here download link. There are two fw version, one from April 2013 and one from September. Try first the one from April, then if this was working the one from September. Both are original files, for DSO5102B, so they must work.
 

Thank you VERY much!
 It now shows 2.06.3(130814.0) The September one worked!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 02, 2014, 01:18:00 am
Quote
EDIT: in case oyu really have 2.06.3, here download link. There are two fw version, one from April 2013 and one from September. Try first the one from April, then if this was working the one from September. Both are original files, for DSO5102B, so they must work.
 

Thank you VERY much!
 It now shows 2.06.3(130814.0) The September one worked!

ok, then try to update to the patched version (the one above which gives you 0x7F error). But rename the update file to
dst1kb_2.06.3_15102b_fact(130814.1).up first ^^
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rudy1589 on February 02, 2014, 02:31:24 am
Quote
ok, then try to update to the patched version (the one above which gives you 0x7F error). But rename the update file to
dst1kb_2.06.3_15102b_fact(130814.1).up first ^^
 

Wow! You're good! Thanks for your help! https://www.eevblog.com/forum/Smileys/default/icon_smile_thumbsup.gif (https://www.eevblog.com/forum/Smileys/default/icon_smile_thumbsup.gif)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: gafbich on February 02, 2014, 07:22:19 pm
Please put dump NAND DSO5202b. ?an help dump!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kallsop on February 04, 2014, 12:15:57 am
Got my Hantek DSO5062B today. Firmware 2.06.3 (130306.0). Hardware version 10070x555583eb. Was able to make a firmware backup to USB memory stick, then install PC Zadig USB driver, then run DSO-USB-Tool and move the dst1062b directory to dst1202b. Reboot twice. Now have a 200MHz scope. I don't have a high frequency square wave to check the analog input bandwidth, maybe later. Thanks again. If there is any information you want from this 'scope, let me know.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 04, 2014, 12:46:10 am
If there is any information you want from this 'scope, let me know.

no, have all i need from hw1007

Thanks again

you welcome :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kallsop on February 05, 2014, 04:17:39 am
I also did the 2 file edits to make the boot logo DSO5202B.

On the Hantek web site, there are firmware files e.g. dso5kb_func_dso5062b20140111, which I expect are newer than what is in my DSO considering they are dated January 11th 2014.

Tried to update using the DSO5062B files and no go, got a 0xfe error. Also tried the DSO5202B update file, same 0xfe error. I did read about a 0xfe error for older hardware, that doesn't seem to be the explanation here. Anyone loaded the newer firmware on a DSO5062B  patched to DSO5202B?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 05, 2014, 06:17:32 am
On the Hantek web site, there are firmware files e.g. dso5kb_func_dso5062b20140111, which I expect are newer than what is in my DSO considering they are dated January 11th 2014.

and that firmware on the website is ONLY for models with newer hardware, this is why you getting update error. For your DSO, the latest is the one published here in thread.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: dlrpgmsvc on February 05, 2014, 02:55:16 pm
I saw on first header post that for the "p" series, the works are "in progress". So, if you will need something from this model, tell me !  :-BROKE
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kallsop on February 05, 2014, 05:14:54 pm
and that firmware on the website is ONLY for models with newer hardware, this is why you getting update error. For your DSO, the latest is the one published here in thread.

OK, it would be nice if Hantek web site would say that too!

Upgraded to dst1kb_2.06.3__130814.1_.up, looks good.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rudy1589 on February 08, 2014, 06:19:51 pm
 
 and that firmware on the website is ONLY for models with newer hardware, this is why you getting update error. For your DSO, the latest is the one published here in thread.

Does this imply that Hantek isn't going to supply firmware update for older hardware?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rudy1589 on February 08, 2014, 06:23:51 pm
Quote
  and that firmware on the website is ONLY for models with newer hardware, this is why you getting update error. For your DSO, the latest is the one published here in thread.

Does this imply that Hantek isn't going to supply firmware update for older hardware?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: dlrpgmsvc on February 09, 2014, 12:04:52 am
I know that probes are not all good for all scopes due to different input circuitries. What 500MHz 10x active probe are you using on Hantek DSO ? For DSO5102P what is best ? I found on Ebay some active probes but they all have a multi-pin connector (to the scope side) in addition to the usual bajonet one, like this one: http://www.ebay.it/itm/Tektronix-P6245-1-5-GHz-15-Volt-1-3-m-Length-Active-Probe-/221284277814?pt=LH_DefaultDomain_0&hash=item3385921e36 (http://www.ebay.it/itm/Tektronix-P6245-1-5-GHz-15-Volt-1-3-m-Length-Active-Probe-/221284277814?pt=LH_DefaultDomain_0&hash=item3385921e36) so I think this is not good for DSO5102P, right ? Excuse my noob questions...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kallsop on February 11, 2014, 12:02:50 pm
FYI: not too impressed with the software quality. In the space of one day, I have had the DSO5062B freeze and then do a BSOD and reboot, the TTScope app running Virtual Panel never runs for 24 hours without a crash, and when I turned off power to the DSO while it was connected to PC by USB, it caused the PC to BSOD. The PC did its memory dump and then it sits there, have to manually reset the PC. Sometimes I use VNC to connect to this PC from a remote location. I have no way to reboot the BSOD'd PC remotely, so this is really bad news. Not that it should matter, but the PC is running Windows 7 64 bit with all updates and everything else on the PC is rock solid, it's on 24/7 and never crashes. If I can see a pattern I'll submit bug reports, but so far the Hantek crashes in firmware/USB/TTScope look random.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on February 12, 2014, 06:36:28 am
I would like to know how to obtain the VGA Option for MSO5202D?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: limpid on February 15, 2014, 07:30:34 am
VGA has a board, do you have this board for MSO5202D?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on February 15, 2014, 08:25:48 am
VGA has a board, do you have this board for MSO5202D?

No, I haven't. Where I could get it?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: gafbich on February 17, 2014, 02:27:59 pm
Please put dump NAND DSO5202b
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on February 18, 2014, 06:57:31 am
VGA has a board, do you have this board for MSO5202D?

Where to buy the VGA board for MSO5202D, the internet providers don't offer it.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: khach on February 18, 2014, 12:42:26 pm
Anyone tried to recompile or migrate from open source Welec W2000A http://sourceforge.net/apps/trac/welecw2000a/browser (http://sourceforge.net/apps/trac/welecw2000a/browser) to Tekway? Welec repo contain two different scope application and FPGA design with embedded CPU soft core. Is this good starting point for open-source DSO project?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kallsop on February 18, 2014, 03:10:11 pm
Anyone tried to recompile or migrate from open source Welec W2000A

From what I have read, the Welec scope firmware was terrible in design and execution, it went open source after the company went bankrupt, and the community tried to fix the many bugs. It probably has no value.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Macbeth on February 19, 2014, 06:49:03 pm
Tinhead, I understand you only have HW dumps up to V1007.

I have a Hantek MSO5102D that is HW 1010x55558340 - does that mean V1010?

SW is version 3.2.35 (131029.0)

Serial is T 1G/012 016xxx

Let me know what to do if you need anything from this scope. I certainly would like to unlock 200MHz, but all in good time!

I would also like to get my Siglent SDG1025 upgraded to SDG1050 (it's just 25MHz sine to 50MHz sine) - but that's a seperate hack.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bjorn on February 22, 2014, 01:08:48 pm
Hi all,

Are The LA pcb addon boards still available? I'm still searching in the thread but I can't find the info.

grtz
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rudy1589 on February 23, 2014, 05:57:55 pm
What ever happened to TinHead?
  I used to enjoy all the information that he would post here.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Macbeth on February 23, 2014, 09:50:16 pm
What ever happened to TinHead?
  I used to enjoy all the information that he would post here.

"Last Active: February 16, 2014, 11:56:30 AM"

Give the guy a break - maybe he's on holiday or something. But the guy is a genius and I can't wait to see more stuff from him!  :-+
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on March 13, 2014, 06:21:35 am
and that firmware on the website is ONLY for models with newer hardware, this is why you getting update error. For your DSO, the latest is the one published here in thread.

MSO5000D has two version hardware, the old verison is V 2.x.xx, new version is V 3.x.xx.
Their firmwares are not compatible with each other.
So when update please check what's the verion on the oscilloscope's system info, if it's V 2.x.xx please download Firmware_V2.7.1; if V 3.x.xx, please download Firmware_V3.2.35.
Or the unit will be damaged duo to update the wrong firmware.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vinayst on March 13, 2014, 10:12:31 am
This is Vinay Stanley from Srilanka.

After going through all the pages in this forum iam ordering a Hantek DSO1062BV.This will be my sole and 1st scope. So was keen to know from experts in this forum

Can this model DSO1062BV be hacked to 200Mhz.Is there anything else like memory that can be hacked in this model.

Thanks to all and Tinhead especially for bringing out the best out of Hantek Oscilloscope.I think Hantek guys need to applaud him for his effort.Iam iam ordering one from Hantek its just because this forum has enlightened me on the hacks.
 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vinayst on March 21, 2014, 05:58:49 am
Hello Tinhead/Experts

Can the experts on this forum clarify weather Hantek model DSO1062BV can be hacked to 200Mhz.Is there anything else like memory that can be hacked in this model.

I have this model on hand but wanted all you experts advice on how to go about it.I do not want a new scope bricked, as this is my sole scope.

Please help by reverting back

Vinay
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: n8ddd on March 21, 2014, 09:56:28 am
Hello Tinhead/Experts

Can the experts on this forum clarify weather Hantek model DSO1062BV can be hacked to 200Mhz.Is there anything else like memory that can be hacked in this model.

I have this model on hand but wanted all you experts advice on how to go about it.I do not want a new scope bricked, as this is my sole scope.

Please help by reverting back

Vinay



https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg86367/#msg86367 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg86367/#msg86367)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: PL00 on March 23, 2014, 04:26:55 pm
Hi friends.
In my new DSO5072P for 200MHz bandwidth had to remove 2 capacitors 47pF (see photo). Hope this helps someone.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Macbeth on March 23, 2014, 05:45:46 pm
Tinhead, where art thou?  :-//

Has Hantek paid off the Triads to 'shut you up'?  :wtf:
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on March 24, 2014, 03:14:50 am
Hi Tinhead, did you open a new post somewhere else?  ???
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vinayst on March 27, 2014, 03:13:53 am
Experts.

As mentioned earlier I have the Hantek 1062BV with SW Version : 2.01.1(131115.0) HW Version : 10020x55558312.

I have the following queries :

Will the dso1kb_backup_tool.up work with this version of HW and SW
Will the upgrade hack steps given on page69 of this forum work successfully

Kindly revert and help me on this upgrade.Thanks a ton


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: wolfienuke on March 28, 2014, 05:58:55 pm
I have ordered an MSO5074FG oscilloscope (with integrated logic analyzer and function generator) and wish to see if I can hack it. There is limited info on it in this forum about this model. I was wondering if anyone has a MSO5074 and can tell me if the procedures listed for another model will work for it...

How I should go about backing up and verifying the backup for this model? I am assuming the hardware may be similar to the DSO5072P (just a guess), and just want to know if the backup procedure for that model will work for the MSO5074. I will post information and images of the guts when I receive the MSO and break it apart.

First of all, it is rated at 70MHz BW. I would like to increase that if possible. I understand the process and will attempt to do this via USB interface using the documented protocol for shell commands. I don't believe this will be an issue. Will I need to modify the hardware on the board to support the higher bandwidth?

I do have access to UART interface, JTAG-USB, a standalone logic analyzer, soldering/rework station and most other basic electronics tools.

I also will be updating the code for the Mac OS X DSO-USB-Tool that is referenced in the first post to support the 4-channel Oscilloscopes, and possibly the function generator commands if I can find them (as well as translating the program to English from German). I am really excited about this, since the Mac tools for DSO's are very limited.

TIA,
wolfienuke
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: richardbb on March 28, 2014, 06:25:59 pm
Hi friends.
In my new DSO5072P for 200MHz bandwidth had to remove 2 capacitors 47pF (see photo). Hope this helps someone.

thanks, I did this am now measuring a rise time of 2.75nS instead of 6.25nS on a fast oscillator (all I have to test with right now). measured the caps as well and they are the same 47pF as you.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: n8ddd on March 29, 2014, 10:39:25 am
Welcome back Tinhead  :D
I hope u r ok
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 02, 2014, 01:18:53 pm
What ever happened to TinHead?
  I used to enjoy all the information that he would post here.

oh well, i'm still there, was simply busy doing other important things.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 02, 2014, 01:21:33 pm
Anyone tried to recompile or migrate from open source Welec W2000A

From what I have read, the Welec scope firmware was terrible in design and execution, it went open source after the company went bankrupt, and the community tried to fix the many bugs. It probably has no value.

the major difference between Welec and Tekway designs is:
- Welec - all in FPGA
vs.
- Tekway DPO in FPGA, UI in ARM, with mapped (via CPLD) memory

That makes port almost impossible, sure one can move parts of the Welec design to custom ARM firmware,
but honestly easier and much faster would be to take Tekway's FPGA design and design own ARM UI.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 02, 2014, 01:28:02 pm
Hi friends.
In my new DSO5072P for 200MHz bandwidth had to remove 2 capacitors 47pF (see photo). Hope this helps someone.

(https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=86225;image)

woow, that's very good finding and for sure necessary to get full bw (from hardware point of view).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 02, 2014, 01:42:19 pm
btw, something completty offtopic - did anyone recognized that Hantek have now new AWGs? e.g. HDG2002B, this is the cheapest model, but for me it looks like the DAC is running anyway same speed on all models, so maybe time to hack it ?:P

I don't have spare money to give a try, so hope someone will soon buy one and play a bit with them   >:D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Bored@Work on April 02, 2014, 02:08:16 pm
btw, something completty offtopic - did anyone recognized that Hantek have now new AWGs?

Yes, already briefly discussed on the forum. No one has one. Maybe they aren't on the market, just announced.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 02, 2014, 03:20:25 pm
no, they are for sure, they already on ebay
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: commongrounder on April 02, 2014, 08:58:43 pm
Just a note that Hantek issued a firmware update for at least the DSO1000S series handheld scopes (what I have.  Maybe for other series, too). Version 2.01.1(140212.0)
The main screen has been redone and several bugs taken care of.  Seems more stable now, too (or maybe I'm just imagining it).  I'll know better after I've used it for a while.
Always great to see Hantek improving the user experience! :D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 02, 2014, 10:19:09 pm
Just a note that Hantek issued a firmware update for at least the DSO1000S series handheld scopes (what I have.  Maybe for other series, too). Version 2.01.1(140212.0)

right, and on the DSO1000B/BV they even updated kernel (which was not necessary for S models as they already on newer version).

I got as well MSO firmware, 2.x so for older models (but only because i have such hw, for Hantek it is only one click to recompile it for current models). They fixed 14 bugs (and created only 1 new ^^), that good result.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: echen1024 on April 02, 2014, 11:20:04 pm
Does the Tekway do DPO/intensity gradning?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 02, 2014, 11:35:31 pm
Does the Tekway do DPO/intensity gradning?

DPO - yes, Intensity Grading "not really". I've described here how it looks like (how they implemented it):

https://www.eevblog.com/forum/blog/eevblog-487-tekway-dst1102b-oscilloscope-review/msg251936/#msg251936 (https://www.eevblog.com/forum/blog/eevblog-487-tekway-dst1102b-oscilloscope-review/msg251936/#msg251936)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: uh9lab on April 03, 2014, 11:08:46 am
Just found new firmware for DSO5072P,
http://www.hantek.com/down.aspx?url=http%3a%2f%2fwww.hantek.com%2fProduct%2f5000P%2fDSO5072P_Firmware.zip (http://www.hantek.com/down.aspx?url=http%3a%2f%2fwww.hantek.com%2fProduct%2f5000P%2fDSO5072P_Firmware.zip)
File inside is dso5kp_func_dso5072p20140111.up - so, it's new.
Unfortunately, Hantek doesn't explain what's new there...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Level42 on April 04, 2014, 05:27:59 pm
Hi, I am very new here. I just got a Voltcraft DSO-01062D from Conrad for €299 (it was actually on offer, back to €329 now !).

Before I try any hacking I post my current System info. Not sure if it is anything special or recent or not.
I tried backing up the firmware to USB stick first but it doesn't work, says there are no new firmware files on the stick.

Please don't shoot me if any of this has been discussed somewhere earlier in these 150 pages...

Can I hack this Voltcraft ? I found some hints saying there were problems with it (new hardware ?).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Hydrawerk on April 04, 2014, 06:55:48 pm
Despite being rather old 2009's design, this scope is now manufactured by MCP Shanghai.
http://www.mcpsh.com/DQ1000D%20Series.html (http://www.mcpsh.com/DQ1000D%20Series.html)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 05, 2014, 12:06:13 am
Despite being rather old 2009's design

so what, as long it works and "someone is buying it" who cares?

Big named manufacturers are doing nothing else, even other chinese manufacturers (just see that crap Rigol DS1000D or DS1000E - still there). So why should small company spend money for innovation? But hey, they did it in 2009, it tooks years before others changed their displays (and i'm not talking only about size only, but as well backlight or display manufacturer).

this scope is now manufactured by MCP Shanghai.

MCP is not manufacturing anything, on the other side everybody who have some budget to spend can get rebadged Tekway.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 05, 2014, 12:19:42 am
I tried backing up the firmware to USB stick first but it doesn't work, says there are no new firmware files on the stick.

Please don't shoot me if any of this has been discussed somewhere earlier in these 150 pages...

Can I hack this Voltcraft ? I found some hints saying there were problems with it (new hardware ?).

well, i will shoot you (actually i should shoot or fuck everybody who start reading book from page 150 and not the VERY FIRST !!!).

Really, just check the first page:

bold "- before you hack made a backup", aha, you have version with SN > 15000, so what there? "S/N > 15000 ... PM me", where i can already tell you, i will not answer any PMs anymore. Why? well, use search, and you will find that backup can be done with (already integrated in models with SN > 15000)  nanddump tool and was ALWAYS possible with e.g. tar.

now let's continue, first page, bold "- the bandwidth hack" - then, read this shit " As far i fucking know, all DSO/MSO/Handhelds since 2009 can be hacked". So no idea what you mean with "I found some hints saying there were problems with it", i don't know any. I can even tell you that even not yet released models can be hacked.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 05, 2014, 01:49:30 am
I have ordered an MSO5074FG oscilloscope (with integrated logic analyzer and function generator)

you know what, check that:

- Hantek website says 1GS/s
- their current pictures or info material 1GS/s
- their first inforamtion about these models (that was 2yrs ago), look here
https://www.eevblog.com/forum/reviews/new-hantek-gears-released/ (https://www.eevblog.com/forum/reviews/new-hantek-gears-released/)
is talking about 1GS/s ofr 5074F and 2GS/s for other models (but they never released them as DSO/MSO5xxx series but 7xxx, one can see them on Hantek chinese website).

- but there is picture of the actual unit, with 2GS/s ?!??! or is ot only me complettly blind?

(http://i.ebayimg.com/00/s/MTAxMVgxNjAw/z/mlsAAOxyjxlTMEFO/$_57.JPG)


thats crazy, one can clearly see here 2GSa/s,
(https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=87948;image)


where here another actual unit shows clearly 1GSa/s :\

http://www.hantek.org/asken/iaskdetail.aspx?id=2014030822583972 (http://www.hantek.org/asken/iaskdetail.aspx?id=2014030822583972)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: khach on April 05, 2014, 01:42:28 pm
the major difference between Welec and Tekway designs is:
- Welec - all in FPGA
vs.
- Tekway DPO in FPGA, UI in ARM, with mapped (via CPLD) memory

Welec implement softcore CPU with UI writted in pure C. So, it possible to move Welec UI to ARM with new HAL layer. At the first step  original Tekway FPGA image  used. At linux src drivers s3c2440-spi.c contain FPGA load routines.
Also s3c2440-fpga_noirq_1000b.c  contain full info about interaction from FPGA to linux. But comments in Chinese and algo is not clear for me.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 05, 2014, 04:26:03 pm
At the first step  original Tekway FPGA image  used. At linux src drivers s3c2440-spi.c contain FPGA load routines.
Also s3c2440-fpga_noirq_1000b.c  contain full info about interaction from FPGA to linux. But comments in Chinese and algo is not clear for me.

the first GPL they published (you can get it here ftp://ftp.gpl-devices.org/pub/vendors/Voltcraft/ )
there is archive desktop\linux-2.6.13_800x480_option2_lz_120410.tar.gz

In that archive you will find not only drivers sources but as well test app (for fpga.exe and setio) , with some interessting registers.
On the early Tekways, there were as well two executables : getdata and testacq. There was as well script calling that fpga.exe
On latest models there are test apps as well.

Anyway, i've copied all that files together, as well some infos i found in other places, see attachement. You can as well disassemble of the debug firmwares, but i think fpga.exe, getdata and testacq are already good enought to get the data from fpga.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Level42 on April 09, 2014, 05:53:46 pm
I tried backing up the firmware to USB stick first but it doesn't work, says there are no new firmware files on the stick.

Please don't shoot me if any of this has been discussed somewhere earlier in these 150 pages...

Can I hack this Voltcraft ? I found some hints saying there were problems with it (new hardware ?).

well, i will shoot you (actually i should shoot or fuck everybody who start reading book from page 150 and not the VERY FIRST !!!).

Really, just check the first page:

bold "- before you hack made a backup", aha, you have version with SN > 15000, so what there? "S/N > 15000 ... PM me", where i can already tell you, i will not answer any PMs anymore. Why? well, use search, and you will find that backup can be done with (already integrated in models with SN > 15000)  nanddump tool and was ALWAYS possible with e.g. tar.

now let's continue, first page, bold "- the bandwidth hack" - then, read this shit " As far i fucking know, all DSO/MSO/Handhelds since 2009 can be hacked". So no idea what you mean with "I found some hints saying there were problems with it", i don't know any. I can even tell you that even not yet released models can be hacked.

Well, it's always nice to get a warm welcome to a forum, so thanks a lot !  :clap: :clap: :clap:

FYI, I _DID_ read post nr.1 but it is of absolutely ZERO use Mr.Know-it-all....

First of all, my model, the Voltcraft DSO-1062D isn't even listed on anything with the serialnr.>15000. It is only mentioned with <15000.
So, that was not exactly very clear.

Yes my serial number is above 17000 and I wasn't going to PM you because I didn't want to bother you. It would be handier to just put the CORRECT and FULL info there on how to do it step by step.

"Nanddump tool" and "tar" doesn't ring a bell with newbies....sorry, I have no clue what you mean.

If you looked at my picture, I posted a firmware version that has not been mentioned in those 150 pages so hey, maybe, I thought someone would be interested or has tried it already with this version....
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 09, 2014, 06:23:22 pm
So, that was not exactly very clear.

really? i doubt that, see For all others (not listed above)

"Nanddump tool" and "tar" doesn't ring a bell with newbies....sorry, I have no clue what you mean.

google broken or what?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: n8ddd on April 10, 2014, 11:19:36 am
if someone want to backup the firmware for voltcraft dso1062d new hardware,should start reading from this post

https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg326382/#msg326382 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg326382/#msg326382)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on April 11, 2014, 02:01:54 am
I have ordered an MSO5074FG oscilloscope (with integrated logic analyzer and function generator)

thats crazy, one can clearly see here 2GSa/s,
(https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=87948;image)


where here another actual unit shows clearly 1GSa/s :\

http://www.hantek.org/asken/iaskdetail.aspx?id=2014030822583972 (http://www.hantek.org/asken/iaskdetail.aspx?id=2014030822583972)

I checked all MSO5074F data on Hantek website, it is 1GSa/s. I think the 2GSa/s is an printing error.
http://www.hantek.com/en/ProductDetail_127.html (http://www.hantek.com/en/ProductDetail_127.html)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on April 12, 2014, 06:14:46 am

Yes, already briefly discussed on the forum. No one has one. Maybe they aren't on the market, just announced.

It's on offer now.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 12, 2014, 08:59:59 am
I checked all MSO5074F data on Hantek website, it is 1GSa/s. I think the 2GSa/s is an printing error.

the seller said "he maid that picture from an unit at Hantek site", so probably early or dev unit, whatsoever.
The real unit does have 1GS/s printed, and it 1GS/s. Another user here in forum got one and will write soon an review,
ith some interessting pictures :)




Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: simonmc on April 13, 2014, 06:45:26 pm
Hi there,

First post. I have read this whole thread several times and i have decided to purchase one of these 'scopes at the end of the month. However i am undecided which model to get. I will get one of the lower bandwidth models and hack it to 200MHz, but which one?

The P model is the cheapest but has the least memory. The BMV and MSO seem to be around the same price on aliexpress. I am undecided between these. From what i have read the MSO's LA seems to have problems. Is this any closer to being fixed? I like the idea of having a LA built into the scope, but i do have cheap ebay USB logic analyser. The BMV has bigger memory and a video help (although im not sure about how useful this is). With a price difference of about £6 between the BM, BMV and the MSO in that order, i'm a little confused as to which one to get.  :-// :-//

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 13, 2014, 08:26:26 pm
However i am undecided which model to get. I will get one of the lower bandwidth models and hack it to 200MHz, but which one?
up to now all can be hacked, however some need hardware modifications.

The P model is the cheapest but has the least memory.
right, there are even cheaper i think, DSO4102B which is 500MS/s but int he new enclosure. Now the question is,
is this only "like P model" PCB with slowed down ADC or diifferent ADC or what so ever ... so bit risk (but new enclosure, hmm)

When 40k memory is enought for you, then take it. However, note that later you will be unable to add memory.
For sure the 1M/2M slowing UI on B/BMV models, but sometimes it does not matter it UI is fast or slow, sometimes the bigger memory is what one need (when i need fast responding UI i can always switch to 4k or 40k on other models)

The BMV and
well yeah, 2M are alays better than 1M

MSO seem to be around the same price on aliexpress. I am undecided between these.
which one, MSO5074F(G) or MSO5062D? The MSO5xxxD they do have LA on separate PCB,
there are still lot of bugs. I would not recommend it to buy it if you wish use LA already yet.
The MSO574F(or FG) seems to be better, at least from what i saw is LA complettly changed.
I think they did it for reason (not only because they added DDS), however yu will need to wait
for an review.

From what i have read the MSO's LA seems to have problems. Is this any closer to being fixed?
as said above

I like the idea of having a LA built into the scope, but i do have cheap ebay USB logic analyser.
the question is what analyzer you have, when one of these salease/uesbee then of course is
that one included in HanTekway MSO much better. Not only because of sampling speed, but as
well trigger system (triggers, in 10mV steps trigger levels - something what saleae can't).
But when you got an proper usb LA, with trigger out and variable trigger levels, well then you
don't need any another one.

The BMV has bigger memory and a video help (although im not sure about how useful this is).
memory as said above, it is always good to have "more". Video, hmm, for sure one can use
that (not officialy enabled) enternet and watch some porn streamings, but hmm, today
everybody have faster smartphone than the Samsung SoC in BMV models. For teaching/help system, sure,
but not for anything else.

With a price difference of about £6 between the BM, BMV and the MSO in that order, i'm a little confused as to which one to get.  :-// :-//

.. and it will be not easier, they released - or will soon - some other models (e.g. dso4102b), crazy Hantek people. 


Btw, it is good idea to check other manifacturers, Sgilent SDS2xxx series or Rigol DS1xxxZ/DS2000 are definitely much better than Hantek models.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: wolfienuke on April 13, 2014, 09:38:57 pm
I just wanted to pop in to ask everyone a quick question...

Is anyone interested in a new open source Hantek DSO/MSO made for Mac OS X?

I know there is a tool out there, but is in German and is written in Real Basic. I have been programming for Mac for about 15 years and am quite disappointed in the lack of software support for these devices. I have probed the USB bus with my MSO5074FG and have found that almost all functionality can be done via USB (including logic and function generator) quite easily.

Obviously to support more devices than the one model I own, I would need some community help eventually to ensure compatibility with various models.

If there is a large enough interest, I would love to start a new topic and discuss how REAL engineers would like to design DSO/MSO software.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on April 14, 2014, 05:46:58 am
The P model is the cheapest but has the least memory.

P model is very high cost performance.
I have one, and it works great!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: simonmc on April 14, 2014, 06:15:17 pm
Thanks guys,
       You have given me alot to think about. Yes logic analyser i have is only a 8 bit clone, but i does seem to work.
 I will have a look at the other scopes you mentioned but i am limited on budget. The rigol ds1xxxz does visually look a nice scope. i do use one of the older rigols at work when the teks aren't available. Also seems to be a big thread on those. I better get reading.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: campodea on April 15, 2014, 06:50:03 am
Is anyone interested in a new open source Hantek DSO/MSO made for Mac OS X?

Although the existing DSO USB tool fulfills my basic needs I sure would love to see a nicer
OS X version!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: wolfienuke on April 15, 2014, 01:29:14 pm
Is anyone interested in a new open source Hantek DSO/MSO made for Mac OS X?

Although the existing DSO USB tool fulfills my basic needs I sure would love to see a nicer
OS X version!

Well, I was thinking of adding some new functionality like:

1. Automatic Oscilloscope detection and connection via built-in Apple USB framework. (Already complete)
2. Direct creation of Matlab files from raw data or other Matlab integration.
3. Cursor control and measurements using mouse.
4. Either Logic Decoding or output to existing logic decoding software.
5. Direct control of integrated Function Generator.
6. Saving continuous waveforms to video files.
7. Better window layout for common functions.
8. Triggering control and automatic waveform data download on trigger.
9. Any other good ideas from the community...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: dom0 on April 17, 2014, 03:35:51 pm
I've got a Hantek DSO5102B here, firmware is the old 2.06.3 120112.1 and so it was bound to brick itself. I think it's the setup file bug (where you have to delete /param/sav/run1kb* and so on), because it boots and displays the main screen but then hangs.

I tried connecting via USB and I get it listed on lsusb. I then proceeded with this tool: http://peter.dreisiebner.at/dso-usb-tool/ (http://peter.dreisiebner.at/dso-usb-tool/)
However, it just crashes after connecting.

Now, I got a few USB/UART converters, some are 3.3 V. However, I'm unable to locate the UART connector inside, this image shows it to the right of the shielded box: http://embdev.net/articles/File:Tekway_MSO_uart_hw1007.jpg (http://embdev.net/articles/File:Tekway_MSO_uart_hw1007.jpg)
However, on my board here there isn't a pin row there. J901 is about 3-4 cm more to the right than on the picture and about there where the UART pin row is on the picture is nothing and a mounting hole on my board. Where J901 starts in the picture is a J700 with 2×5 pins and 2.5 mm pitch on my board.
I looked for any revision label or something on the board, but found nothing. In the far top left corner there is just some "made in china all rights reserved bla bla" stuff.
I also noticed that on the image the PCB is a tin-plated one but mine has gold plating/ENIG?

Any idea where I can find the UART on this model?

/e: Issue probably resolved. I found a 6 pin J801 between the two FPC connectors J900 and J702.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: astraios on April 17, 2014, 06:22:07 pm
I recently bought a used Hantek DSO5102B from ebay.
I'm not sure what hardware version this model is.
On System Information it says hw version 0x555583e8. I have attached a screenshot
I attempted to update the firmware (it had a 2.06.2) and it seems it didn't like the firmware on the Hantek site.
I was getting 0xfe and 0xf7 errors. The only firmware that worked was tinhead's (thanks man) dst1kb_2.06.3__130814.1_.up when I renamed it to dst1kb_2.06.3_15102b_fact(130814.1).up.

Any idea on what hardware version I got? It's probably an old one, I opened up the scope and wanted to see the version number on the pcb but I couldn't find any (or I missed it).
The pcb of the power supply had a 1.02 version number.

By the way, I saw a picture of the pcb somewhere and it had heatsinks on the ADCs and on the Altera Cyclone 3 FPGA chip.
In my case, there are heatsinks on the ADCs, but not on the FPGA chip.
Should I put a heatsink there, or it doesn't get hot enough?
Also, no fan is installed.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 18, 2014, 04:20:21 pm
I recently bought a used Hantek DSO5102B from ebay.
I'm not sure what hardware version this model is.
On System Information it says hw version 0x555583e8.

ehm, they cheated on you, this is an really old hw you got.

I was getting 0xfe and 0xf7 errors. The only firmware that worked was tinhead's (thanks man) dst1kb_2.06.3__130814.1_.up when I renamed it to dst1kb_2.06.3_15102b_fact(130814.1).up.

right, there is no firmware support for that hardware anymore. For sure firmwares 2.6.x will run on it (be happy you didn't got hw1005 which is actually younger as yours but with hardware bugs), but on the other side you bought it 8 months after Hantek/Tekway stopped production of any S3C2440 based DSOs (and your is using that SoC).

I don't know, but i would probably send it back and request an new one (or some money back, it is NOS item and not NEW item)

Any idea on what hardware version I got? It's probably an old one, I opened up the scope and wanted to see the version number on the pcb but I couldn't find any (or I missed it).
The pcb of the power supply had a 1.02 version number.

you have hw0 !!!, from a SN i would say produced in Oct 2010 or so. This is the very first version, wondering who sold you that  :rant:

By the way, I saw a picture of the pcb somewhere and it had heatsinks on the ADCs and on the Altera Cyclone 3 FPGA chip.
In my case, there are heatsinks on the ADCs, but not on the FPGA chip.
Should I put a heatsink there, or it doesn't get hot enough?
Also, no fan is installed.

right, there was first version with no fans at all, then they added some for asias market, then they added heatsink on ADC, then on FPGA as well, then added fan, then repalced it by cheaper model.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 18, 2014, 04:24:01 pm
I've got a Hantek DSO5102B here, firmware is the old 2.06.3 120112.1 and ...

/e: Issue probably resolved. I found a 6 pin J801 between the two FPC connectors J900 and J702.

ehm it looks like you got old model as well, the UART J801 was only on HW0 between J900 and J702 ...

check my post just above this one, there is another one user who got same 3yrs old hardware :\
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: astraios on April 18, 2014, 05:32:45 pm
you have hw0 !!!, from a SN i would say produced in Oct 2010 or so. This is the very first version, wondering who sold you that  :rant:
I see, I was suspecting a hw0 version too. It was a used unit, I wasn't expecting the latest version, but I wasn't expecting the oldest version either.
I got it for about half the price compared to how much a new unit costs (at least for my area), so I thought to give it a try.

Do you believe the version I got (hw0) is vastly inferior (regarding signal accuracy / performance etc.) to the latest version (hw1007) Hantek DSO5102B?

right, there is no firmware support for that hardware anymore. For sure firmwares 2.6.x will run on it (be happy you didn't got hw1005 which is actually younger as yours but with hardware bugs), but on the other side you bought it 8 months after Hantek/Tekway stopped production of any S3C2440 based DSOs (and your is using that SoC).
If I ever need a different firmware version, (I doubt it, your firmware 130814.1 works great, but I wanted to ask anyway) should I assume that Tekway firmwares (for the DST1102B) should work on my Hantek DSO5102B? Tekway's firmware filename is "dst1kb_2.06.3_01102b_fe(120423.0).up".
However this looks to me like an older firmware version (so probably not worth it). I assume the number "120423" is a date code and means April 23rd 2012, is that correct?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: davidefa on April 19, 2014, 08:53:44 am
I received a few days ago my new scope: a hantek dso1122s.
Yesterday decided to try the bandwidth hack, with my surprise, I found that hantek had 'already hacked my scope' ( the scope already had the file /dst1202b in it and the 2ns timebase is already available ).
Sadly the only thing I can do is change the 'name' of the scope ( i think I should have to change logotype anf logotype.dis )... but I'm too lazy for that.
In conclusion I'm not happy for what hantek did to my scope... ;-)

P.S. thanks for the great informations included in this thread
P.P.S. my unit was advertised as having 2M memory, but it has only 1M
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Neverther on April 24, 2014, 06:20:07 pm
I also got HW 0x555583e8, but I bought it in the beginning of 2011 as somewhat used from active forum user also seen on this thread.
Still running sw 2.06.3 110806.0 as I havent seen any real reason to upgrade.
SN: T 1G/008 003163.

Picky about USB keys as connecting some crash it.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: selevo on April 25, 2014, 08:34:14 am
hi all
What news about   hack logo  in  DSO5000P S/N >15000 ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 25, 2014, 09:57:49 pm
I received a few days ago my new scope: a hantek dso1122s.

sorry, but where are pictures of the PCB?  :-// i think lot of people are curious how they made the channel isolation.

Yesterday decided to try the bandwidth hack, with my surprise, I found that hantek had 'already hacked my scope' ( the scope already had the file /dst1202b in it and the 2ns timebase is already available ).
Sadly the only thing I can do is change the 'name' of the scope ( i think I should have to change logotype anf logotype.dis )... but I'm too lazy for that.
In conclusion I'm not happy for what hantek did to my scope... ;-)

in the meantime Hantek changed already 3 times how the logo is being displayed and where they located, so for sure nothing with logotype.dis anymore. Yours seems to be the second last version, with logo compiled into frame buffer driver (so one need to recompile the GPL sources with new logo and replace the driver).

P.P.S. my unit was advertised as having 2M memory, but it has only 1M
that sucks, it should be 2M. It might be an licensing thing (not a problem to "fix" it, heh), but picture of the PCB would tell us more (if there is 2M memory then maybe they forgot to enable it)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 25, 2014, 10:07:21 pm
It was a used unit, I wasn't expecting the latest version,

yeah, i missed that "used" in your first post, sry.

I got it for about half the price compared to how much a new unit costs (at least for my area), so I thought to give it a try.

and that's ok

Do you believe the version I got (hw0) is vastly inferior (regarding signal accuracy / performance etc.) to the latest version (hw1007) Hantek DSO5102B?

the hw0 was actually the best hw, the cost reduction was applied later. However i/o port on hw0 was not giving so many possibilities (like LA or DDS or even 100Mbit ethernet - only 10Mbit was available). So as long you using it as is, it's everything ok. Sure, you can add 10Mbit ethernet, but that's all then.

However this looks to me like an older firmware version (so probably not worth it). I assume the number "120423" is a date code and means April 23rd 2012, is that correct?
yes

If I ever need a different firmware version, (I doubt it, your firmware 130814.1 works great, but I wanted to ask anyway) should I assume that Tekway firmwares (for the DST1102B) should work on my Hantek DSO5102B? Tekway's firmware filename is "dst1kb_2.06.3_01102b_fe(120423.0).up".
you can use any "B" model 2.06.3 firmware, you can NOT use any B model 3.x or any other version/revision (MSO, BM, BMV, P, etc).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: astraios on April 26, 2014, 05:08:57 am
Thanks for the information tinhead.
If I ever want to hack the oscilloscope to 200MHz, other than the file changes (renaming dst1102b to dst1202b, editing sys.inf, tmpdst, logotype, logotype.dis) do I need to also change anything in the hardware (resistors, capacitors etc.)?
If I'm not mistaken, hw1005 needed some resistors replaced to improve accuracy, I think it was mentioned in this thread. Does hw0 needs it too?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: simonmc on April 26, 2014, 07:24:22 am
I have just ordered my scope yesterday. The seller has told me its hw rev 1010 and should be here in a couple of weeks. In the end i went for a standard dso5102b rather than the bm or bmv model. That way i could get the wife some bits for the garden and keep in her good books.. :D

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: davidefa on April 26, 2014, 03:36:01 pm
Here a few, not so good, photos of one side of the hantek dso1122s board:

http://www.davidefabbri.net/files/foto/SANY0114.JPG (http://www.davidefabbri.net/files/foto/SANY0114.JPG)
http://www.davidefabbri.net/files/foto/SANY0115.JPG (http://www.davidefabbri.net/files/foto/SANY0115.JPG)
http://www.davidefabbri.net/files/foto/SANY0116.JPG (http://www.davidefabbri.net/files/foto/SANY0116.JPG)
http://www.davidefabbri.net/files/foto/SANY0117.JPG (http://www.davidefabbri.net/files/foto/SANY0117.JPG)
http://www.davidefabbri.net/files/foto/SANY0118.JPG (http://www.davidefabbri.net/files/foto/SANY0118.JPG)
http://www.davidefabbri.net/files/foto/SANY0119.JPG (http://www.davidefabbri.net/files/foto/SANY0119.JPG)

P.S. by the way I'm looking for the sd socket, have you got a suitable part number ( or farnel/mouser code )
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 26, 2014, 03:50:07 pm
Here a few, not so good, photos of one side of the hantek dso1122s board:

the other side please as well :)

P.S. by the way I'm looking for the sd socket, have you got a suitable part number ( or farnel/mouser code )

digikey 101-00303-68 was good for non-s models, i think it does fit on yours as well
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 26, 2014, 05:53:51 pm
Here a few, not so good, photos of one side of the hantek dso1122s board:

now when compared to dso1102b (hw1.01 with old SoC) one can see that they moved some parts to bottom side of PCB, i like that, it was before somehow overloaded. They improved a bit the distance and isolatin between DMM and DSO. One is however still bit strange, that one screew between two DMM terminals, they destroying the distance with that screw :\

Wondering why you got DSO with these small fuses, i had such fuses only on model for chinese market, on one for EU market Hantek used proper big fuses, see my pictures (do not wonder about the solder residues, i shot pictures middle of PCB repair/mod).
No idea if this is still the case, but gosch, on a wonderfull isolated DSO such fuses for DMM is bad ass thing, shame on them if that the "new EU version".
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: fremen67 on April 27, 2014, 01:07:04 pm
btw, something completty offtopic - did anyone recognized that Hantek have now new AWGs? e.g. HDG2002B, this is the cheapest model, but for me it looks like the DAC is running anyway same speed on all models, so maybe time to hack it ?:P

I don't have spare money to give a try, so hope someone will soon buy one and play a bit with them   >:D

I received mine last week. If someone is intereded I could post some photos of the board.
The software hack for unlocking frequencies is very simple. You just have to change the model name in the system.inf  (now in /etc) and reboot...
So I just replaced HDG2002B with HDG2102B to get 100Mhz instead of 5Mhz.
At the moment I don't know if there is also some hardware mod to do (a 100Mhz sine of 2V amp is shown with 300mV amp on my MSO5062D with PP-200 Hantek probe, but I didn't mod the frontend yet)
Still have some some work in progress on my MSO ;-)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 27, 2014, 01:42:54 pm
btw, something completty offtopic - did anyone recognized that Hantek have now new AWGs? e.g. HDG2002B, this is the cheapest model, but for me it looks like the DAC is running anyway same speed on all models, so maybe time to hack it ?:P

I don't have spare money to give a try, so hope someone will soon buy one and play a bit with them   >:D

I received mine last week. If someone is intereded I could post some photos of the board.
The software hack for unlocking frequencies is very simple. You just have to change the model name in the system.inf  (now in /etc) and reboot...
So I just replaced HDG2002B with HDG2102B to get 100Mhz instead of 5Mhz.
At the moment I don't know if there is also some hardware mod to do (a 100Mhz sine of 2V amp is shown with 300mV amp on my MSO5062D with PP-200 Hantek probe, but I didn't mod the frontend yet)
Still have some some work in progress on my MSO ;-)

holy shit! please make a new topic on that, this is really awesome!size]
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Macbeth on April 27, 2014, 09:24:32 pm
Damn, I only recently got a Siglent SDG1025 which if only hackable would only go from 25 to 50MHz on sine wave only. That new Hantek looks great! 100MHz from a 5MHz arb gen?  :-+

I wonder if Hantek make their stuff deliberately modifiable to entice the hacker community? After all, no corporate would even dream of hacking their equipment. Good marketing if you ask me!

Anyway, something I have noticed recently, my MSO5102D seems to be losing a half hour here and there on its RTC. I find this really weird. Like it's now 21:44 on the 'scope while it's actually 22:20 now. Date is ok.

Hang on a sec, I think I may have worked it out just this second  :-+. Does the Hantek use a typical lithium battery backup for the RTC, or is it using a standby circuit? I've often had to unplug the mains to use for some other piece of equipment. I hope that is all it is! But the power button appears to be a proper DPDT mains shut-off from the feel and click of it  :-BROKE

ETA: Just checked Tinheads excellent schematics and indeed it does use a CR2032 backup battery keeping a typical 32.768kHz crystal running, so I don't know why it keeps losing time, hmm...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: simonmc on April 27, 2014, 10:04:03 pm
That looks really nice. And from what i can see just under £200. That really does need a new topic as i was just looking for a generator. I need to know more about this. Sounds sad but it would even match the scope i just ordered.. >:D Edit, not really correct, i looked at too many scopes, but this does look good if its all hackable.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: fremen67 on April 27, 2014, 10:13:24 pm

holy shit! please make a new topic on that, this is really awesome!size]

Well I will try to make something. I just need to find some time. :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: fremen67 on April 27, 2014, 10:18:13 pm
Sounds sad but it would even match the scope i just ordered.. >:D

I know what you are talking about...I bought it to match my MSO5062D   ;)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: simonmc on April 27, 2014, 10:44:27 pm
Sounds sad but it would even match the scope i just ordered.. >:D

I know what you are talking about...I bought it to match my MSO5062D   ;)
I would love to see a pic of them together on the bench. That new case looks good. Hantek seem to have the best looking GUI's of 'low cost' test equipment by far.... and they are hackable. Love it.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: henno10000 on April 28, 2014, 03:48:19 pm
Hi, I'm a newbie to the forum. I trained as an electronic engineer many years ago, and returning after a long career in IT management, to pursue this as a hobby. Hence, I'm not completely up to date on the latest technologies. So, please forgive my ignorance and any apparent stupidity on my part :)

I'm interested in the MSO5074FG ... mainly for budget reasons. ($700 max )

I have read page 1, and now page 151 ( hence the edit ).

So, I can change a file name in root and get the 200MHz bandwidth ( after doing a backup which IS available in the software on SN 15000 upwards ) ???

Not worried about the logo screen, so that doesn't apply.

I downloaded the manual prior to finalizing a purchase decision and there is no obvious mention of a trigger output that I could use to trigger my USB logic analyzer. Does anyone have info on that please ????

Also, this scope is now $464 plus $80 shipping to USA... approx $80 cheaper than amazon, or USA dealers.

I know that this may be off topic, but I'm looking for a hackable MSO/DSO with Logic Analyzer that has good memory depth and that can trigger on SPI, I2C etc, and either, have a trigger output to trigger my USB logic analyzer ( which does have protocol analysis), or, output signals to a PC so that software protocol decoding can be done there. I know the RIGOL DSO will trigger on I2C and SPI, but won't decode. Given the level of activity and knowledge on the Hantek scopes I assumed that someone must have the same desires as me.

If i need to start a new thread then I apologize.

Thanks
Henno
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: wolfienuke on April 29, 2014, 05:35:02 am
I'm interested in the MSO5074FG ... mainly for budget reasons. ($700 max )

I have read page 1, and now page 151 ( hence the edit ).

So, I can change a file name in root and get the 200MHz bandwidth ( after doing a backup which IS available in the software on SN 15000 upwards ) ???
Unfortunately, I have the MSO5074FG and the bandwidth hack is not as simple. Yes, the software hack works as is for other Hantek DSO's but there are hardware limitations...

Near ADCs (that two ICs on top and two on bottom, each of them with small heatsink) on top and bottom there are on each side two ICs, on one of the pictures i think i can read NXP and HEF4053. If that's the case, one have to replace them by e.g TI CD74HC4053 to get more bandwidth, these NXP ICs they only good to 70MHz.

From your pictures i can tell you alrady that the acually used the new "B" model platform, added two extra channels, added necessary logic for triggering, repalced the two channel-mux relais with 4pcs of i think HEF4053 (which is for 70MHz bw ok), added an small DDS PCB and that's all. Where the LA is connected, no idea (as said above, can't see from the pictures).

So for sure it will not do 2GS/s but 1x1GS/s, 2x500MS/s and 3/4 x 250MS/s, so like Rigol DS1000Z. Why they not used the same ADC as Rigol is using, no idea, from price point of view should be same. The good think is, it looks like they changed the way the FPGA is clocking, they added two mif files for the PLL, they can be externally loaded, so it looks for me that they trid to improve the ADC clocking, which is good think. Anyway, we wil see (well, you) how that baby performs.
Most likely, the bandwidth hack for this model may require a faster multiplexer with matching pin configuration and possibly removal of input capacitors on the frontend (I haven't looked at that yet).

If you are looking for a MSO/DSO that is easily hackable, you should probably look at another model.

After this semester ends, I will have a lot of info to report on the MSO-5074FG...

I downloaded the manual prior to finalizing a purchase decision and there is no obvious mention of a trigger output that I could use to trigger my USB logic analyzer. Does anyone have info on that please ????
The scope does not have the ability to output a trigger signal AFAIK.

I know that this may be off topic, but I'm looking for a hackable MSO/DSO with Logic Analyzer that has good memory depth and that can trigger on SPI, I2C etc, and either, have a trigger output to trigger my USB logic analyzer ( which does have protocol analysis), or, output signals to a PC so that software protocol decoding can be done there. I know the RIGOL DSO will trigger on I2C and SPI, but won't decode. Given the level of activity and knowledge on the Hantek scopes I assumed that someone must have the same desires as me.
The MSO5074FG does not have logic decoding functionality or protocol based triggering. The logic analyzer is very basic, but I am looking into outputing recorded data to a PC based decoding tool. The ability to do logic decoding is possible in the future , but right now, the logic analyzer is bare-bones.

I believe the recorded logic data can be saved to csv, or dumped raw via usb protocol. I have not messed with the analyzer that much yet, and like you I have plans on finding a easy way to decode recorded logic protocol data from the MSO.

Also, this scope is now $464 plus $80 shipping to USA... approx $80 cheaper than amazon, or USA dealers.
Got mine 15% off, $505.95 USD shipped.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: henno10000 on April 29, 2014, 03:18:50 pm
@Wolfienuke - Thank you for your detailed reply. It is much appreciated.

I have a Zeroplus 16032 which has been "upgraded" to the 16128 model, has approx 40 or so protocol decodes now, and so you may well be asking why would I want an MSO ?? Well, I like a challenge, and getting the scope to output data for software decode sounded like a good idea, which can also be verified against the existing LA. Also, an AWG for almost free is a budget consideration, as is 200MHZ bandwidth.

All this is moot now with the answers you raised. So, I think i will try to find a RIGOL 2072 or 2072A and just have an MSO with good memory and feature set. I found an Ebay auction for a TEK 7903 via the For Sale section here, so I may well be lucky and end up with 2 scopes ( assuming I win ).

Thank you to all those who offer advice and time in this section.
Henno



Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: simonmc on May 01, 2014, 06:13:30 pm
Well I'm very happy. My dso5102b arrived today. That's 4 day after my notification of it being shipped from China to my door. Not done much with it yet bar turning it on and playing but first impressions are good. I'm going to get use to the scope and its capability's before doing anything else.  Attached is my first screen shot. :) :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: simonmc on May 03, 2014, 05:42:30 pm
The latest firmware on the Hantek site contains dso5kb_func_dso5102b20140111.up. Can you more knowledgeable people tell me if this is the same as what i have, or is it an update from what I have installed?? (see picture in my last post). From the numbers it looks like an update but will it be suitable for my revision 1010 machine??. I Think I read somewhere further back, that someone bricked there scope with a update that was unsuitable. Last thing i want to do is screw up my scope!! :-// :-//
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: astraios on May 03, 2014, 06:51:38 pm
The latest firmware on the Hantek site contains dso5kb_func_dso5102b20140111.up. Can you more knowledgeable people tell me if this is the same as what i have, or is it an update from what I have installed?? (see picture in my last post). From the numbers it looks like an update but will it be suitable for my revision 1010 machine??. I Think I read somewhere further back, that someone bricked there scope with a update that was unsuitable. Last thing i want to do is screw up my scope!! :-// :-//
Based on the screenshot you uploaded in your previous message, your firmware version is 3.30.0(130928.0)
If I'm not mistaken, the 130928 number is a date and means September 28th 2013.
The number 20140111 of the filename dso5kb_func_dso5102b20140111.up is a date and means January 11th 2014.
Therefore I suppose the firmware on Hantek's site must be a newer version.
It should be compatible with your scope, but I can't be 100% sure, I can't test it. My scope is an older hardware version (hw0) and it uses a different firmware.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: fremen67 on May 04, 2014, 01:23:09 am
btw, something completty offtopic - did anyone recognized that Hantek have now new AWGs? e.g. HDG2002B, this is the cheapest model, but for me it looks like the DAC is running anyway same speed on all models, so maybe time to hack it ?:P

I don't have spare money to give a try, so hope someone will soon buy one and play a bit with them   >:D

I received mine last week. If someone is intereded I could post some photos of the board.
The software hack for unlocking frequencies is very simple. You just have to change the model name in the system.inf  (now in /etc) and reboot...
So I just replaced HDG2002B with HDG2102B to get 100Mhz instead of 5Mhz.
At the moment I don't know if there is also some hardware mod to do (a 100Mhz sine of 2V amp is shown with 300mV amp on my MSO5062D with PP-200 Hantek probe, but I didn't mod the frontend yet)
Still have some some work in progress on my MSO ;-)

holy shit! please make a new topic on that, this is really awesome!size]

Diner is served!
https://www.eevblog.com/forum/testgear/hantek-hdg2002b-awg-5mhz-or-100mhz-let's-see!/ (https://www.eevblog.com/forum/testgear/hantek-hdg2002b-awg-5mhz-or-100mhz-let's-see!/)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: bassbang on May 04, 2014, 01:53:40 am
Hi all, newbie:
Wolfienuke post #2292.
I just bought a Hantek MSO5074F model (no function generator) and am keen to back it up before I mess with it. I am not exactly sure which utility is best suited, TinHead mentions that they are a 4-channel version of the B variants.

If you (or TinHead) can stand detailing which backup file should be used on a USB stick for this model I would be grateful.
I am happy to open the box and take pictures etc, been up to my guts in electronics (including high voltage) for many years.

The menu in the device reports the following:
MSO5074F:
Soft Version 3.2.35 (140219.0)
Hard Version 10020x54028205
Serial No T1G/654 000 173.

Initial impressions:
I had a Hantek DSO5072P previously which I found completely acceptable. At work I use Tektronix MSO 4 channel scopes ($4000 plus).

Hantek Plus:
* One knob per function, really easy to see waveforms without screwing around. The Tektronix MSO scopes are less old-fashioned intuitive, multiple menu levels to get knobs to work.
* Screen resolution - very nice.
* USB Save - easy. On the DSO5072P this was a dedicated button (good) , on the MSO5074F it's not (bad). It requires a menu item, then it copies the screen image including the menu item when you dump to USB.
Hantek Minus:
* Still has a lot of lock-ups and inconsistencies in the menu system.
* Triggering is a bit random, sometimes it's very hard to get it to trigger. If you hit the Auto Set button it gets it into shape.
* Horizontal offset only goes up to 2.3mS, regardless of your timebase, so on long timebases it's effectively zero. This must surely be fixed in future firmware.
* Included PC software - unbelievably bad, looks like Tektronix Wavestar (which was also hideous) but seems unable to reload any waveform files you may have saved. I've tried DSO-USB Tool and it works fine, with the exception of only showing 2 channels instead of 4.
* PC app also stores waveforms in .wfm format which does not load in Tektronix software so far as I can tell, so I am interested if anyone has a conversion utility (couldn't find one in a quick search).

Wolfienuke: you mentioned some more detail shortly, I am keen to see it. Could offer collaboration (with your guidance) if it's any help.

TinHead, I see a quote about some chip details but I can't find that post:
"Near ADCs (that two ICs on top and two on bottom, each of them with small heatsink) on top and bottom " etc.

Would you guys mind pointing me to the post ( or other forum) where this dialog took place?

Finally, TinHead, many thanks for your effort on all of this, I am sure you have saved a lot of people a ton of grief.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: benjamin545 on May 04, 2014, 05:48:52 am
i am interested in getting a MSO5074FG eventually because of the relatively low price for a 4 channel oscilloscope + logic analyzer + function generator all in one non pc based solution. u understand its not the best scope out there, but i want to know if there is any sort of outstanding flaw with this hardware. is the reading reliable? is it common for it to not meet its specs? i can handle the occasional crashes or whatever, i just want to make sure i know when it looks like its working can i rely in the information its showing me.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Kevin Liu on May 07, 2014, 03:49:39 am
Hi ~
Does anyone can help me, I need rescue my Hantek DSO5062B.
I did something stupid and crash my full flash include bootloader.
How can I rebuild flash? I don't have any bootloader or flash image.
Does anyone can dump one to me.
I have an OpenJTAG.
Thanks a lot.

PS. The attachment photo is the last boot.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on May 08, 2014, 06:20:47 pm
Kevin Liu
 :-+  :D
bootloader -
https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg75015/#msg75015 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg75015/#msg75015)
i.e.
www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=4153 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=4153)
supervivi.bin


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on May 09, 2014, 04:00:12 am
The latest firmware on the Hantek site contains dso5kb_func_dso5102b20140111.up. Can you more knowledgeable people tell me if this is the same as what i have, or is it an update from what I have installed?? (see picture in my last post). From the numbers it looks like an update but will it be suitable for my revision 1010 machine??. I Think I read somewhere further back, that someone bricked there scope with a update that was unsuitable. Last thing i want to do is screw up my scope!! :-// :-//

Yes, if the version is 3.30.*, it's no problem to upgrade the firmware with dso5kb*.up
if the version is 2.06.3, it should upgrade with firmware with dst1kb*.up.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Redcat on May 09, 2014, 05:34:44 pm
Hi Tinhead,
at first thank you very very much for all your effort and time you invest in this project.
Have the voltcraft 1062D 1010hw and renaming the bandwidth file with Peters DSO Tool was no problem  :-+. Easy to understand and on the first page  :).

But I have 2 questions and it would be nice if you could answer it.
At page 133 the is a picture of the firmware you made with sample rate indicator. But i couldn't find a version for the 1062D hw1010 (fw 3.30.0 140111.0 ).
I didn't take the "P" version (of course) since it'S not a "P"  ;). Did you make a version for my model? If not, it'S ok too  ;).

Second question is about the digital filter for the corner frequency. I tried to make a "tst" file and upload it with the DSO Tool, but the scope hangs and the file is not uploaded.
(But can simple restart the scope.)
Is there a way to create the file and the "[filter] ... " content with the DSO Tool shell (commands)?
I don't need to see 400 MHz  ;), but 250-300 would be nice (the amplitude dosn't matter).
I would prefer doing this mod with the DSO Tool and not hacking into the UART chip.

Quick Edit: Just got the file to the scope  :). Found your post in the mikrocontroller.net tread with the cp command to copy from USB Stick.
But there is  -after reboot of course- no message which says that the tst file is used? This would be the question left.

Thank you very much and nice greetings, Thomas  :D :D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: n8ddd on May 10, 2014, 10:20:01 am
Hi Tinhead,
at first thank you very very much for all your effort and time you invest in this project.
Have the voltcraft 1062D 1010hw and renaming the bandwidth file with Peters DSO Tool was no problem  :-+. Easy to understand and on the first page  :).

But I have 2 questions and it would be nice if you could answer it.
At page 133 the is a picture of the firmware you made with sample rate indicator. But i couldn't find a version for the 1062D hw1010 (fw 3.30.0 140111.0 ).
I didn't take the "P" version (of course) since it'S not a "P"  ;). Did you make a version for my model? If not, it'S ok too  ;).

Second question is about the digital filter for the corner frequency. I tried to make a "tst" file and upload it with the DSO Tool, but the scope hangs and the file is not uploaded.
(But can simple restart the scope.)
Is there a way to create the file and the "[filter] ... " content with the DSO Tool shell (commands)?
I don't need to see 400 MHz  ;), but 250-300 would be nice (the amplitude dosn't matter).
I would prefer doing this mod with the DSO Tool and not hacking into the UART chip.

Quick Edit: Just got the file to the scope  :). Found your post in the mikrocontroller.net tread with the cp command to copy from USB Stick.
But there is  -after reboot of course- no message which says that the tst file is used? This would be the question left.

Thank you very much and nice greetings, Thomas  :D :D


try using the FFT function,without the tst file the signals are highly attenuated over 200MHZ(mine 260mhz)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Redcat on May 10, 2014, 01:54:57 pm
Thank you n8ddd  :-+.

I'm just in the process of exploring the new functions of the digital scope which my 475 didn't have  ;).
The scope is better than I thought. Of course it's really not the fastest, but for me it's working (and if I really need more power than there are still all the analog ones, which I will never give away - at least the Teks  ;) ). It's small, light and I can easy make screenshots and take it to where I want. And of course all the measurement stuff - great.
I bought it, because it seems to be the better of the cheap scopes, was recommended here and has for me a very good price/performance ratio.

Nice greetings, Tom
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Kevin Liu on May 14, 2014, 06:37:33 am
walt Thanks for your info.
I still have a problem that is I also need a works firmware.
I crash it before backup. :((
Otherwise how can I extract it from factory firmware?


Kevin Liu
 :-+  :D
bootloader -
https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg75015/#msg75015 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg75015/#msg75015)
i.e.
www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=4153 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=4153)
supervivi.bin
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on May 14, 2014, 01:12:54 pm
I still have a problem that is I also need a works firmware.
I don't have the fullflash for programmator, but if you successfully recovered bootloader, I will upload full factory backup firmware  today evening.

HW0, old Tekway firmware whith Chinese lang interface.
Sorry, but from factory I make backup exactly that.
       
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on May 14, 2014, 04:53:15 pm
Kevin Liu
http://rghost.ru/55157657 (http://rghost.ru/55157657)


Password for archive: 0571tekway
Archive made 7zip open archiver
http://sourceforge.net/projects/sevenzip/files/7-Zip/9.22/ (http://sourceforge.net/projects/sevenzip/files/7-Zip/9.22/)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Kevin Liu on May 15, 2014, 06:40:19 am

walt thanks a lot.

I already download the file and I try write vivi.bin or supervivi.bin into DSO via oflash and OpenJTAG tools.
But I never see message out from serial port. Does it means I fail of write bootloader back?
Are there something did I miss?

Kevin Liu
http://rghost.ru/55157657 (http://rghost.ru/55157657)


Password for archive: 0571tekway
Archive made 7zip open archiver
http://sourceforge.net/projects/sevenzip/files/7-Zip/9.22/ (http://sourceforge.net/projects/sevenzip/files/7-Zip/9.22/)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Kevin Liu on May 15, 2014, 08:53:57 am
Actually, My DSO only response at one supervivi-128M that download from FriendARM but it still can not restore fw_backup.bin back.
I try several version supervivi just this one is USB:OK but still can not work.
Does any one know why?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on May 15, 2014, 01:34:19 pm
Actually, My DSO only response at one supervivi-128M that download from FriendARM but it still can not restore fw_backup.bin back.
I try several version supervivi just this one is USB:OK but still can not work.
Does any one know why?
What yours DSO output to terminal?

It must be like that

(https://www.eevblog.com/forum/index.php?action=dlattach;topic=1571.0;attach=17584)

Without this step, do something is no sense.

upd.
https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg35683/#msg35683 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg35683/#msg35683)
See in attached archive bootloader& flashmap
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on May 21, 2014, 07:31:27 am
MSO5074F:
Soft Version 3.2.35 (140219.0)
Hard Version 10020x54028205
Serial No T1G/654 000 173.

* Horizontal offset only goes up to 2.3mS, regardless of your timebase, so on long timebases it's effectively zero.

Can this offset be solved by self calibration?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 21, 2014, 08:29:44 am
MSO5074F:
Soft Version 3.2.35 (140219.0)
Hard Version 10020x54028205

* Horizontal offset only goes up to 2.3mS, regardless of your timebase, so on long timebases it's effectively zero.

Can this offset be solved by self calibration?

if you mean horizontal offset between digital and analog signals, then the answer is no. The same problem is on the 2ch models, they fixed it already a bit, but still not good enought. Sure, when zooming in at some point there will be offset due the resolution while sampling, but what i saw on my 2ch model (and i think as they haven't fixed on 2ch that the same error is on 4ch) have nothing to do with resolution but with pure skew between two data sources (and THAT can be calculated per each timebase position and moved, and honestly for DSO they moving and delaying data as well, so no idea what is the problem here).

Send them every day an email, with bug report and question if and if not when they will be ready :) that might help, really.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pezibaer on May 21, 2014, 03:44:25 pm
Please help... may be its already in this very long thread.. but i don't see it. .. I just updated my Hantek Handheld DSO1062b firmeware with a the latest Firmeware from Hantek Website.. big mistake.. .. i don't recognised that this firmware was older than the one i already had on my device..????  Now USB WAVE saving doesn't save waves like bevore.. and it seams relay Buggy..?? I see there are other firmware ..like 2.06... but that ist for Tekaway 1062b.. .. which is no Handheld???.. or ist that a kind of universal firmware??.. Ist there any other newer firmaware i can use for Hantek DSO 1062b?

regards
Pezi

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 21, 2014, 06:05:36 pm
no, you have to use only firmware for Hantek Handhelds, nothing else. I don't know what it was before on your handheld, you should ask support (they can tell you more when they have your SN)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on May 22, 2014, 12:58:57 am

Send them every day an email, with bug report and question if and if not when they will be ready :) that might help, really.

Thanks for your suggestion, Tinhead.
I'll try.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on May 23, 2014, 07:10:52 am

The menu in the device reports the following:
MSO5074F:
Soft Version 3.2.35 (140219.0)
Hard Version 10020x54028205
Serial No T1G/654 000 173.

* Included PC software - unbelievably bad, looks like Tektronix Wavestar (which was also hideous) but seems unable to reload any waveform files you may have saved. I've tried DSO-USB Tool and it works fine, with the exception of only showing 2 channels instead of 4.

The latest version software on http://www.hantek.com.cn/en/ProductDetail_3_127.html (http://www.hantek.com.cn/en/ProductDetail_3_127.html)
hasn't waveform files storage problem.
You may download it to test.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 27, 2014, 11:41:14 am
Hantek seems to be more and more weird ... the MSO5074F(G) is gone from product page, there is MSO5054F(G) instead. There are no 2M point in the specs anymore but 1M (ok, at leat this has been fixed). The bandwidth is now specified as 40MHz (where one could think xx5x means 50MHz, hmm) instead of 70MHz. On chinese website there are still 5074F(G) listed, and of couse one can still buy them (but no sign of MSO5054F(G)). On OneDrive there is as well only MSO5054F(G) stuff, no sign of MSO5074F(G). This is all already weird, but check that : in the user manual, from MSO5054FG, there is picture showing MSO5054FG but with "70MHz / 1GSs" sticker on it. And now? What bw/numbering is real and what PS-made?


Another thing - they specified 4k <-> 1M as Logoc Anayzer Depth. So exact the same as on MSO5000D. However, due firmware bug there is always only 4k available on MSO5000D. Since 1.5yrs ... My question is - how is that working on MSO50x4F(G) ?
 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: benjamin545 on May 28, 2014, 01:33:16 am
what about this one

http://www.aliexpress.com/item/H100-Hantek-MSO7084BLG-4-Channel-Oscilloscope-8-Channel-Logic-Analyzer-25MHz-Arb-Waveform-Generator-2Gsa-s/1857305228.html (http://www.aliexpress.com/item/H100-Hantek-MSO7084BLG-4-Channel-Oscilloscope-8-Channel-Logic-Analyzer-25MHz-Arb-Waveform-Generator-2Gsa-s/1857305228.html)

the MSO7084BLG

what is that? how is it that much different than the MSO5074FG other than the small mhz difference and the older style LA headers
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 28, 2014, 10:45:26 am
what about this one

http://www.aliexpress.com/item/H100-Hantek-MSO7084BLG-4-Channel-Oscilloscope-8-Channel-Logic-Analyzer-25MHz-Arb-Waveform-Generator-2Gsa-s/1857305228.html (http://www.aliexpress.com/item/H100-Hantek-MSO7084BLG-4-Channel-Oscilloscope-8-Channel-Logic-Analyzer-25MHz-Arb-Waveform-Generator-2Gsa-s/1857305228.html)

the MSO7084BLG

what is that? how is it that much different than the MSO5074FG other than the small mhz difference and the older style LA headers


this is completely different series, with 2GS/s instead of 1GS/s for DSO, an LA with 1GS/s instead of 500MS/s and frontend with up to 300MHz (when hacked or original bought in it's max. option). Disadvantage is only the 32k memory depth vs. 1M on MSO5074F.

So now the question, how and is the 1M working when LA enabled on MSO5074F? If not, like on MSO5000D series, then i don't need that "feature on paper only". When working as DSO and all 4channels, these slowly updating 250kpoint (vs. fast updating 4k) per channel on MSO5074F are less important than the 500MS/s on MSO7084BLG (vs. 250MS/s per channel on MSO5074FG).

Huge memory is for sure always nice thing, but honestly, without proper search/mask/protol triger/etc is half as good as small memory with decent firmware. And then of course the question: what do i need to do my work? And what i more important for me?

Many things that lot of ppl are posting in their reviews are simply esoteric jokes; like "oh, that enclosure is beautiful slim" - my answer to that "and can you push buttons without using glue for that too-high but slim enclosure?", next example "oh, on that DSO the knobs can be wiggle a bit more than on the other one" - my answer "wtf? and how is this affecting your work? right, not at all" :rant: :rant: :rant:

So back to your question :) Well, be the first and take it. Honestly, if you don't need huge memory (e.g. like on Rigol or Siglent) then this one is good starting point - and i bet it can be hacked to 300MHz bw anyway. Having 2GS/s nd 4ch is already good thing, extra 8 digital channels with 1GS/s on top are additional advantage (unless someone have an LA with variable treshold and trigger in/out, so none of these 5USD saleae clones or even those for 100-200USD).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on May 29, 2014, 09:15:06 pm
I've added on first page link to my Hantek's OneDrive. One can find there their latest firmwares, etc.

I've added as well link to my OneDrive. There are only few things right now, i have to sort them first (honestly, since 2009 i did collected over 20GB of dumps, tools, informations ...) and then upload as much as useful.  I will for sure not upload user made dumps (as they contains S/N) and any other user related informations, but i will create some "master restore images", for all that hardware/sw versions i can.

I would be happy of course if you guys could support that OneDrive a bit more, there are lot of things to open:

- it would be great if someone could spend (as i did) some time and create schematics of S3C2416 based MSO/DSOs

- or at least parts of them (teamwork?)

- some more dumps would be great, currently looking for DSO4000 series, DSO1000S handhelds, MSO5074F, MSO7xxx,
  DSO1000BV handhelds with SN > 15000, Extech Handheld dumps

- some more pictures, currently looking for DSO4000 series, MSO5074F, Extech Handhelds, bottom side of DSO1000S PCB
  (top side has been made already by davidefa, see here https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg433286/#msg433286 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg433286/#msg433286) )

- some CPLD dumps are still missing, currently i do have everything to repair/restore hw0, hw1005, hw1007, hw1001 (handhelds
  with S3C2440 SoC) models. But no CPLD dumps from all S3C2416 based models. Just check what empty on my OneDrive

- and finally you can support me directly, there is PP "donate button" when you click on my "home website" icon in my profile.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mafdet on June 02, 2014, 01:00:09 pm
Hello, I just bought a Voltcraft DSO-1062D and I seem to be having some issues with it.
I adjusted the probe compensation according to the manual.

When I connect a probe to the scope's reference  5V@1KHz it looks alright, unless I set the probe to 1X and set the V/Div to 200mV/Div or lower.
It looks alright at 500mV/Div but gets a weird offset and curve of about 100mV if I go further down (I can hear a relay click between 500mV/Div and 200mV/Div) Is that to be expected? I can reproduce the exact same issue on both channels - I had the scope running for 30 minutes and tried the self-calibration too.
See the images:
500mV/Div:
http://i.imgur.com/20JkiiH.png (http://i.imgur.com/20JkiiH.png)

200mV/Div (weird offset with curve?):
http://i.imgur.com/NEjV8mI.png (http://i.imgur.com/NEjV8mI.png)

Info about the scope:
model: DSO1062D
sw version: 3.30.0 (140111.0)
hw version 1010x55558344

Thanks a lot in advance. :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 02, 2014, 09:03:26 pm
Hello, I just bought a Voltcraft DSO-1062D and I seem to be having some issues with it.
I adjusted the probe compensation according to the manual.
When I connect a probe to the scope's reference  5V@1KHz it looks alright,

first of all, the probe calibration is only for x10 range, not for x1.

unless I set the probe to 1X and set the V/Div to 200mV/Div or lower.

there is nothing wrong with DSO but with your understanding of what DSO can measure. There is volt/DIV setting, DSO have 10DIV max (8.4 DIV visible). In 500mV/DIV that means you have full scale 5Vpp, and when that signal is set in the middle like on you pictures (which is typical for DC coupled signal here), then you already over the scale. With 200mV/DIV you already 500% of the scale, and i even think that you simply switched x10 to x10, without changing then scale on DSO, so you in principle measuring 5Vpp signal with setting 20mV/DIV (x5 Div from screen middle to max scale that 100mV but you applied 5V .. so the signal have to bee complettly crap).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mafdet on June 02, 2014, 09:54:49 pm
there is nothing wrong with DSO but with your understanding of what DSO can measure. There is volt/DIV setting, DSO have 10DIV max (8.4 DIV visible). In 500mV/DIV that means you have full scale 5Vpp, and when that signal is set in the middle like on you pictures (which is typical for DC coupled signal here), then you already over the scale. With 200mV/DIV you already 500% of the scale, and i even think that you simply switched x10 to x10, without changing then scale on DSO, so you in principle measuring 5Vpp signal with setting 20mV/DIV (x5 Div from screen middle to max scale that 100mV but you applied 5V .. so the signal have to bee complettly crap).
In both the pictures the probe as well as the DSO are set to X1 - so it is really 200mV/DIV (therefore 100mV offset).
So does that mean that when the signal is 5V (DC coupled), I can't use anything below 500mV/DIV because the top of the signal is too large, so the bottom gets 'distorted/incorrectly measured'?
That 100mV jump just really got me worried.

Thanks a lot for the quick reply and the clarification.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: condor on June 02, 2014, 11:59:33 pm
I need some help! 
I inadvertently flashed the wrong BIOS to my DSO5062. I loaded the MSO BIOS by error (dst1kb_2.7.1_15202d_fact130826.0.up). Now my unit boots, displays a normal screen, but the screen menu buttons do not work, the device eventually freezes and then reboots. I am honestly confused by all the information I found here about doing a restore, so I am asking (politely) for help in restoring the unit - using the best method - so I do not make things worse. The correct BIOS from Hantek looks to be "dso5kb_func_dso5202b20140111.up" but I also have "dst1kb_2.06.3_15202b_fact(130814.0).up"

Thanks
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 03, 2014, 07:17:01 am
I inadvertently flashed the wrong BIOS to my DSO5062. I loaded the MSO BIOS by error (dst1kb_2.7.1_15202d_fact130826.0.up).
...
I am honestly confused by all the information I found here about doing a restore, so I am asking (politely) for help in restoring the unit - using the best method - so I do not make things worse.

now honestly, how can one flash MSO firmware to an DSO, and then MSO firmware that need DIFFERENT password than the DSO firmware is using? Post your SN first, then we will see what can be done
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: condor on June 03, 2014, 01:29:05 pm
Sorry i was not clear. Using a memory stick I flashed (dst1kb_2.7.1_15202d_fact130826.0.up) over the existing (dst1kb_2.06.3_15202b_fact(130814.0). At this point I am surprised the DSO accepted it because I thought there was protection. There were no messages. I have done nothing to the scope since since then. The on-screen keys do not show labels and do not seem to function. The unit boots and is alive, I was able to communicate via the USB Tool and get the 256 Byte memory dump.

SN: T 1G/012 005242
Main board SN: T1205242

Thanks
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 03, 2014, 05:46:00 pm
Sorry i was not clear.

oh yes, you was.

I tell you something, your DSO is hw1007, with max. firmware 2.x, and not 3.x as you said. So that here is wrong

>> The correct BIOS from Hantek looks to be "dso5kb_func_dso5202b20140111.up"

and this corrent:

>> but I also have "dst1kb_2.06.3_15202b_fact(130814.0).up"

The DSO 3.x fw is using "dso5000b" as password, the DSO 2.x fw "0571tekway".

Anyway, MSO - and that means 2.x and 3.x fw - is using "0571tekway" as well. But on Hantek (and as wel Voltcraft website) there are information WHAT fw can be uised on WHAT hardware (talking about MSO). And of course there is absolutely no reason to use MSO firmware on DSO (one can do this only when knowing what to do first, but even then, without mso hardware there is no benefot of using the MSO firmware on DSO. Actually the DSO firmware is better, sure no MSO functionaliuty but DSO is stable).

nothing to the scope since since then.

sure, this is because MSO is using differnet libs, drivers, root fs and kernel. So once installed the dso.exe (from MSO formware) will crash, and even worse, the atchdog (dsod process) might reboot your DSO over and over again (until you kill it).

I need some help! 

oh well, you do. So let's take a look on what the fw update did to your DSO. The "update" script looks like:

[cmd] mv /tmp/tekwayup_client/lcd.ko /dso/driver/

- so you need lcd.ko from an DSO

[cmd] rm /protocol.inf
[cmd] mv /tmp/tekwayup_client/protocol.inf /protocol.inf


- and protocol.inf

[cmd] mv /tmp/tekwayup_client/rcS /etc/init.d/rcS
[cmd] chmod 777 /etc/init.d/rcS


- and rcS

[cmd] mv /tmp/tekwayup_client/dso.exe   /dso.exe

- the dso.exe as well

[cmd] mv /tmp/tekwayup_client/dsod   /dso/app/dsod

- the watchdog executable

[cmd] rm /help.db
[cmd] mv /tmp/tekwayup_client/help.db /


- help files from DSO

[cmd] rm /OurLanguages/*
[cmd] mv /tmp/tekwayup_client/*.lan /OurLanguages/


- language files

[cmd] mv /tmp/tekwayup_client/icon/* /icon/

- and maybe even icons, but normally not.

Now let's take a look what of these files is included in e.g. DSO fw dst1kb_2.06.3_15202b_fact(130814.0):

rcS
dso.exe
dsod
protocol.inf
help.db


and finally folder "OurLangauges" are all withinn that update file. The lcd.ko is missing, but when you look inside rcS you will find out that the lcd.ko is not in use on DSO, but only MSO. So you can ignore it. That said all you have to do is do decrypt/untar/untar/unzip the dst1kb_2.06.3_15202b_fact(130814.0).up file, copy all these files to usb flash drive, insert it into your DSO, connect via UART (yes, you need physical connection here, and of course converter etc. UART<->USB) and then first kill the "dsod" and copy/overwirte all the MSO files with DSO version again. And then finally you have to change permission in root directory to +x, something like "chmod 777 *" is for sure ok. T

That's all .. almost. Now you have to replace the /param/sav/r* file and reboot DSO. Now your DSO should work again.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: condor on June 03, 2014, 07:01:32 pm
Thank you Tinhead. I will follow your advise and report back. Your instructions seem clear but then again I am an idiot. Yes, I understand the 2.xx issue now..
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 03, 2014, 07:10:01 pm
oh well, shit happens. It is good that these DSO/MSO are linux-loaded and more or less easy to fix.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: condor on June 04, 2014, 01:13:13 am
Tinhead:
Good news I was able to accomplish the steps you suggested using dst1kb_2.7.1_15202d_fact130826.0
Bad news: Stuck at Logo Screen dso does not start but Linux shell is live and well. Boot message: /etc/init.d/rcS: line:60 /dso.exe not found. But dso.exe is sitting there in / (?)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 04, 2014, 06:01:08 am
when you copied that proper version from the update to / then do as well

chmod 777 *

when in / dir. You can then check with

cd /
/dso.exe

if the fw is running.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: condor on June 04, 2014, 07:57:03 pm
So Tinhead, impatient me messed up further.
First, as far as I know I had executed" chmod 777 *" in root before sending the prior message.

Before receiving your last message however, my bright idea was to replace /etc/init.d/rcS with a fresh copy of rcS from my extracted archive. Bad idea. Now I have a loop that repeats "can't open /dev/ttyS0: No such file or directory" forever. I am unable to break the operation with any terminal program I have tried. I have attached the boot log.

This is a big mess and I am sad.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 04, 2014, 08:57:53 pm
This is a big mess and I am sad.

right, it looks like you have now rc from MSO again, error like e.g.:

  /etc/init.d/rcS: line 41: /sendspi-la: not found

are confirmation of that (as sendspi-la is only on MSO). Wondering only why you copied version from MSO (ahh i see, you haven't read my post and thought "if already mso files copied why not copy rcS as well").

Can you still open console? i doubt no :\ If yes, try to copy /etc/init.d/rcS~ to /etc/init.d/rcS

Not sure if there is a way to tell supervivi to not load rcS, or if linux 2.6.13 can do this (in principle there should be the old file still there ( /etc/init.d/rcS~ ), which maybe can be loaded with different bootloader params). Maybe you will have to use different bootloader to do this. But if not, then you can only re-flash the whole NAND (and you have made backups before hack .. right?).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: condor on June 04, 2014, 10:03:35 pm
What I see in the terminal session is, like the log shows:
"can't open /dev/ttyS0: No such file or directory" repeated over and over. I do not know how to stop the process loop or halt the boot before this happens (ignores ^c and kill). But the terminal session is happy as can be, but the DSO seems to not respond to my sent messages or even eventually timing out, as I would hope.
As for backups - maybe, but I have a bad feeling.

Time for deep thoughts.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on June 07, 2014, 06:40:01 am
Hantek seems to be more and more weird ... the MSO5074F(G) is gone from product page, there is MSO5054F(G) instead. There are no 2M point in the specs anymore but 1M (ok, at leat this has been fixed). The bandwidth is now specified as 40MHz (where one could think xx5x means 50MHz, hmm) instead of 70MHz. On chinese website there are still 5074F(G) listed, and of couse one can still buy them (but no sign of MSO5054F(G)). On OneDrive there is as well only MSO5054F(G) stuff, no sign of MSO5074F(G). This is all already weird, but check that : in the user manual, from MSO5054FG, there is picture showing MSO5054FG but with "70MHz / 1GSs" sticker on it. And now? What bw/numbering is real and what PS-made?


Does it mean Hantek implements sales policy that sell different models for different markets? i.e. for oversea, MSO5054F(G); for China, MSO5074F(G).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on June 09, 2014, 01:17:30 am
Another thing - they specified 4k <-> 1M as Logoc Anayzer Depth. So exact the same as on MSO5000D. However, due firmware bug there is always only 4k available on MSO5000D. Since 1.5yrs ... My question is - how is that working on MSO50x4F(G) ?

When only open logic Analyer, its max. depth can achieve 1M.
See the attached picture.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: benjamin545 on June 09, 2014, 03:33:17 am
the hantek MSO5074FG is down to about $500 USD on aliexpress. its really tempting since this is a ton of features for the price it seems. i do see the MSO5084BLG on there too and i know ive asked before what the differences are, but its like $400-$500 more, and im not too sure how if you would feel much difference between the two. would its double sample rate make much difference when using it? i recognize that the 5074 line probably has a 200mhz hackable bandwidth like other similar products by hantek have, and the 5084 lie shows a possible 300mhz, but does that justify the extra almost double price? the logic analyzer portion doubles the speed between the two, i could see how thats worth it i guess. don't really know if i would ever find that a barrier.

im not really all that experienced with oscilloscopes, when im looking at these, im not looking at them as if i have some specific need for certain specs, im looking at the price and finding it affordable, and when comparing all the features on the box for these models against other models out there, it seems you can get very basic scopes for about $300 but all you get is 2 analog channels, so obviously for the extra $200 you seem to get your money's worth with the 4 analog channels, 8 logic channels, and function generator. and similar offerings at the $500 mark from other manufacturers seem to not give anywhere near the features these hantek models have, they mostly are just basic 2 channel scopes, just a little bit better build quality than the hantek 2 channel models. so if trying to get the most for your money while still staying within a small budget like what a home hobbyist would have, it really looks like the MSO5074FG is a no brainer choice in the matter. i guess ultimately what my question is, am i missing out on any worthwhile feature that the MSO5084BLG has if i just get the MSO5074FG? does having 500M/s logic channels shut the door on anything that the 1g/s logic channels would give you? is there something that 300mgz will give you that 200mhz wont? the function gen between the two is the same, and the 5074 actually has 1M sample depth in its favor vs the 32k of the 5084BLG, if that really makes much difference.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on June 10, 2014, 05:06:25 am
Where to buy MSO5084BLG?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: benjamin545 on June 10, 2014, 11:09:12 am
http://www.aliexpress.com/item/H099-Hantek-MSO7084BLG-4-Channel-Oscilloscope-8-Channel-Logic-Analyzer-25MHz-Arb-Waveform-Generator-2Gsa-s/1857299072.html (http://www.aliexpress.com/item/H099-Hantek-MSO7084BLG-4-Channel-Oscilloscope-8-Channel-Logic-Analyzer-25MHz-Arb-Waveform-Generator-2Gsa-s/1857299072.html)

aliexpress
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on June 11, 2014, 08:08:21 am
Ahh, it's DSO7084BLG.
Thank you for the link!

After checking the specification, it seems the main difference is MSO5074FG sampling rate 1GSa/s, memory depth 1M, and DSO7084BLG sampling rate 2GSa/s, memory depth 32k.
If it doesn't matter for you, I think MSO5074FG seemed the better deal.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: AE9K on June 11, 2014, 08:27:12 pm
Firmware upgrade difficulties with a Hantek DSO5202B

I have a DSO5202B (hw ver 0x555583e8, fw ver 2.06.3(110225.0)) and am at wits end trying to upgrade firmware.  I get 0xf7, 0xfb and 0xfe errors depending on what firmware file I'm using and what I rename the file to.

I worked with Hantek support in China last year and got nowhere.  After we tried a bunch of non-firmware .up files that logged diagnostic data to the USB drive, they couldn't get any version to work and told me to return the scope to the factory.

Using info on this lengthy thread I was able to gpg decrypt, un-tar, un-gzip, etc. to get to the files that comprise the dst1kb_2.06.3__130814.1_.up firmware update.  The size is 7.7 MB.  When doing a 'df' on the scope, I have 7.7 MB free on the root filesystem.  Last year it was 9.5 MB so maybe free space wasn't the issue then but it's certainly suspect now. 

My thought was to move the /help.db file which is 1.3 MB to USB (/mnt) or /tmp, attempt the upgrade and put the help.db file back (if it fits).  I'm using the shell within DSO-USB-Tool via libusb0 as I don't have a JTAG or similar connection.  That shell won't allow me to do a "mv  help.db  /mnt" possibly because the file's in use but that shell is pretty limited so who knows why.

Thanks,

Dan
AE9K 
 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: astraios on June 12, 2014, 01:16:50 am
@AE9K

You have an old hardware version scope (hw0).
The firmware on Hantek site is only for newer hardware versions, it's not compatible with your scope.
Your scope supports 2.6x firmware versions.

In my case I have a hw0 DSO5102B (100MHz bandwidth).
I downloaded the firmware from https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg294175/#msg294175 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg294175/#msg294175)
Then I renamed it from dst1kb_2.06.3__130814.1_.up to dst1kb_2.06.3_15102b_fact(130814.1).up and I performed the upgrade.
You probably need to rename it to:  dst1kb_2.06.3_15202b_fact(130814.1).up

However keep in mind that I have DSO5102B and you have DSO5202B.
This firmware most likely works for your scope too, but I can't be 100% sure.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: benjamin545 on June 12, 2014, 01:42:35 am
oh, yes, sorry, i forgot messed up the model number.

thats what im thinking too, that the 5074FG is overall a better deal atm. when i posted that link, i actually found the 7084BLG for ~$750 so that makes it a better comparison to the 5074FG. but still, i just dont know if the extra sample rate would translate to a better experience with the scope. as a matter of fact, if they just use the same main CPU as they usually do, would the extra bandwidth and sample rate bog it down more?

 i do like the logic plug system it uses, the 5074FG just has a pin socket array with kinda short logic leads. the 7084BLG uses the same as the old model MSO's and has a 25 pin header with a cable out to a box with the leads coming out of that, seems a lot nicer when you keep the scope a couple feet away from the test points. but, is it worth loosing the memory depth? was that memory depth useful to begin with? is it worth the extra $250? if you wait a couple months will it be down to $550 or $600? will the 5074FG be down in price? im not looking to buy right now, im looking at what i might want to get in a few months time when i feel like ive learned enough to deserve a real scope. i just want to see what it is i would be looking for at that time.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: AE9K on June 12, 2014, 03:28:02 am
astraios,

Thanks ... been there, done that.  Did it again just to be sure....0xfb error. 

I've done this process with this and the earlier versions of firmware Hantek support provided:
dst1kb_2.06.3_15202b_fact(130814.1).up
dst1kb_2.06.3_15202b_fact(130413.0).up
dst1kb_2.06.3_15202b_fact(130306.0).up

Given a 0xfb is a failure to decompress, I'm back to thinking I need to free up space on the root filesystem since this version of firmware expands to 7.7 MB and I have exactly that free.

df -h
Filesystem                Size      Used Available Use% Mounted on
/dev/root                61.7M     54.0M      7.7M  88% /
none                      30.4M         0        30.4M   0% /tmp
none                      30.4M         0        30.4M   0% /var

Is root filesystem space a likely cause of my 0xfb errors? 

Or, given I have version hw0 hardware should I just cut my losses and trade up for something newer/better and stop wasting time on this one? 

Thanks,

Dan
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: astraios on June 12, 2014, 06:22:03 am
Is root filesystem space a likely cause of my 0xfb errors?
Did you read/try this?: https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg206840/#msg206840 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg206840/#msg206840)

Or, given I have version hw0 hardware should I just cut my losses and trade up for something newer/better and stop wasting time on this one?
Actually according tinhead:
Quote
the hw0 was actually the best hw, the cost reduction was applied later. However i/o port on hw0 was not giving so many possibilities (like LA or DDS or even 100Mbit ethernet - only 10Mbit was available). So as long you using it as is, it's everything ok. Sure, you can add 10Mbit ethernet, but that's all then.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: walt on June 12, 2014, 09:32:57 am
Did it again just to be sure....0xfb error. 

Will do something :)

https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg94364/#msg94364 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg94364/#msg94364)

With newest firmware, copies of screenshots still stay in /mnt directory on DSO flash after extract usb storage.
But   /mnt directory  is empty, if you looked via console. Why? Dont know.
If manually copy files from older firmware (link above), reboot DSO with older firmware, and open /mnt directory via console, you see all earlier saved screenshots.
Delete all of it, and  upgrade the firmware again.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pezibaer on June 12, 2014, 11:49:55 am
another Curios Problem on my hantek Handheld 1062b

i already bought 300mhz 100x Probe

So messuring AC 230V Inverter

Scale 50V PKPK 588V
Scale >=51V PKPK 750V

using 10X probe @ max Range 50V.. messuring is fine .. buw using 100x 51V- max Scale 500V messuring is completly  wrong

So .. this would really be a little bit stupid for using 100X Probe with scale 100-200V

See Pictures.. any ideas?





Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Elektrongeek on June 12, 2014, 07:57:28 pm
Hi i have recently bought my first scope and it is an Hantek DSO5072P :) i want to know what kind of hack can i do on it   ,

in the system info menu i have

Sw version 3.40.0(140208.0)
Hw version 1000xffff8103
Serial  T1G/03501139
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: AE9K on June 13, 2014, 03:32:35 am
astraios and walt,

Big thanks...cleaning out the (unmounted) /mnt directory got me 32 MB of free space on the root filesystem and the firmware update worked.  I didn't even have to bother with the unnecessary files in /sbin and /usr/bin.  THANK YOU!

Odd result - my serial number went from 0030xx to 0330xx.

Upside - FFT response is much flatter and now I have FFT tracking mode cursors. Nice!


Dan
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: astraios on June 13, 2014, 11:15:54 am
glad to know it worked.
I wonder why the serial number changed, odd.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on June 14, 2014, 02:05:51 am
May be some deleted data affects the serial no.  :-//
Title: Re: Hantek MSO5074FG problem!
Post by: KL27x on June 14, 2014, 08:04:39 am
Hi. I am a new member. I just wanted to post my experience with the new Hantek MSO5074FG. I had read a lot of the info in this post before buying it. I guess I was feeling lucky, since I bought it anyway. At the time I ordered it, it was the cheapest 4 channel scope I could find. Now I see there's a 4 channel Rigol for even cheaper!

The scope worked fine for about an hour or two. In that time, I was able to do just a little bit of testing.

Using the function generator on the scope, I did a very bried and informal speed test against my 25MHz OWON PDS5022S. When set to maximum sampling rate and using only one channel, a square wave looked comparable to the PDS at around 8-10Mhz. Not much better, really. But I didn't tune the probes, and I don't have any experience with high speed signals, so I didn't really care at this point.

The real selling point for me was the MSO5074FG has four channels and a functino generator. The form factor is actually a little smaller than my OWON. Although the screen is smaller on the Hantek, it has much better brightness, contrast, and an excellent viewing angle. So for the 600 and change I paid, I was pretty happy so far.

The control layout was pretty good, IMO. I had no problem navigating the menus or setting things up. The measurement menu is better than the OWON. The Hantek will display up to 8 measurements right on the side of the screen. The "function click/knob" on the scope makes setting up these measurements easy. Also, there are maybe 4 measurements that show up in a little banner at the bottom of the screen, sometimes. I had not figured out how/when/why and/or if those were configurable before the scope died.

I got to play with the dual display for a little while. And I tried out the cursor function briefly, but I didn't quite get the hang of it in the short time I had.

Contrary to info I have read, which said the trigger was available on only channels 1 and 2 and EXT, the scope could trigger on all four channels. Also, the scope came with 4 sets of PP-90 probes. I was only expecting two probes. It also came with a BNC patch cable, which was nice.

Now here's the bad. Once I installed the software and plugged the scope into my PC, the scope froze. None of the controls on the scope do anything. When you turn on the scope, all channels are off, channel 1 menu is up, and that is it.

I can still use some of the functions from the USB interface. Using the PC, I can turn on all four channels. I can even turn on the LA (which I never even tried, yet). I can also control the waveform generator in most respects. Curiously, although the frequency can be changed by PC, and even though the resulting frequency change shows up on the scope's display, the actual frequency of the waveform does not change from 1Khz when using the PC interface. But the amplitude and other pertinent things can be changed (rise/fall times, duty cycle, what not).

Also, in the PC trigger menu, you can set only channel 1 or 2 or EXT as trigger. But as I said earlier, I was able to trigger off of channel 3 and 4 when the scope controls worked!

FYI, I never found a way to use the "arbitrary" part of the waveform generator. The only thing the manual has to say about the subject is that you can "use the mouse to change the waveform." This is actually the reason I plugged the scope into the usb to begin with. But even in the PC software, I see no way to make arbitrary functions.
 
This is a really cute little piece of hardware. If there was a master reset button on it, I would probably be ok with an occasional crash and a missing arbitrary function generator. What I saw, I liked a lot. Well, at least compared to my PDS5022.

I hope other people will have a better experience. But I have only read of two other first hand experiences with this machine (might have been the same guy), and they both indicated the same problem.

Edit: I also noticed that the AWG shares ground with the scope. All of the functions are AC coupled. So if you create a square wave and plug it into scope input, the result is AC coupled, even if you set the scope input to DC.

*Update:
Hantek customer service sent me a rescue tool. It effectively reset the scope. So it's back up and running. I have found a multitude of ways to make the scope crash, but a total lock up is fairly rare, at least. I have only managed to do it once, or twice more, but at least there's a way to recover it, if you are next to a computer.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on June 19, 2014, 06:48:04 am
i do like the logic plug system it uses, the 5074FG just has a pin socket array with kinda short logic leads. the 7084BLG uses the same as the old model MSO.... im looking at what i might want to get in a few months time when i feel like ive learned enough to deserve a real scope. i just want to see what it is i would be looking for at that time.

Yes, take easy and get a good resolution.
Title: Re: Hantek MSO5074FG problem!
Post by: tinhead on June 19, 2014, 11:16:09 pm
I just wanted to post my experience with the new Hantek MSO5074FG.

a big thank for that, any information is useful

Contrary to info I have read, which said the trigger was available on only channels 1 and 2 and EXT, the scope could trigger on all four channels.

good

Now here's the bad. Once I installed the software and plugged the scope into my PC, the scope froze.

i have such problem only on an dev board with firmware dump running, each time i ran the PC software the firmware is crashing. However, after reboot it does work again, as expected due the watchdog.

Also, in the PC trigger menu, you can set only channel 1 or 2 or EXT as trigger. But as I said earlier, I was able to trigger off of channel 3 and 4 when the scope controls worked!

yeah, that software i simplified said "crap".

FYI, I never found a way to use the "arbitrary" part of the waveform generator. The only thing the manual has to say about the subject is that you can "use the mouse to change the waveform."

or do they mean usb mouse plugged to DSO? no idea, Hantek is sometimes too lazy in their "manuals"

*Update:
Hantek customer service sent me a rescue tool. It effectively reset the scope. So it's back up and running. I have found a multitude of ways to make the scope crash, but a total lock up is fairly rare, at least. I have only managed to do it once, or twice more, but at least there's a way to recover it, if you are next to a computer.

tell us more about that rescue tool. There is watchdog running, and normally when firmware is doing bullshit on the saved profile, the watchdig will purge it and the firmware should work after next reboot.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on June 20, 2014, 07:43:35 am
Hello, I have a new version software, hardware and rescue tool may help solve your MSO5074FG problem.

www.hantek.com/Hantek/down/MSO5074FG.zip (http://www.hantek.com/Hantek/down/MSO5074FG.zip)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pcmihnea on June 20, 2014, 10:09:23 pm
     Hi, before I start I would like to express how amazed I am on the progress that was done so far (I managed in about 3 day to browse through this thread, even though first hundreds of replies contained deprecated or not applicable info). I am currently an (unemployed) engineering student, so my budget is limited. Due to my location in a far, far away country in eastern Europe (it start with "Ro" and ends with "mania"), my only choice for a accessible (at least 500Ms/s, and with a value under $500) oscilloscope was the Hantek DSO5102P (that is, with 40kp memory depth). The reason with I settled to such compromise is that in my country the only trustworthy local seller was the well-know (in Europe) TME distributor. It was the only source for a decent oscilloscope, that also included warranty, and having a local branch in my country meant internal direct shipping, so no waiting, and also no extra taxes (as in international packages). Anyways, I had it for a couple of days to play, and I consider myself happy with my purchase; of course I can't zoom in too much in dual window mode, or accomplish many other tricks that depend on larger memory depth, but I'll survive. It only hanged two or three times, at intensive tasks (dual window, with cursors and measurement). The price that I paid (together with a 15% discount) was quite high (~$450), but as I said, it was the cheapest product available in my country (I don't consider myself courageous enough to buy expensive products from other countries, due too long and expensive shipping costs, and also the high chance of paying extra taxes at my custom-office).

     That's it for the intro, now I have a few questions if anybody could answer, if possible. As a, well beginner that I am, I upgraded my firmware without any backup or even writing down my shipped version. The one that I am using now is the latest on www.hantek.com (http://www.hantek.com), "dso5kp_func_dso5102p20140111"; it is working so far without any serious issues (except, of course, the random[?] hang-ups, but at least the watchdog works and resets the unit, but all the other features are fully working - FFT, measure, cursors, pass/fail, record, export, etc.). In the System Info menu it appears as a "DSO5102P", hardware version "10000xffff8103" (so it well may be a DS5000C motherboard version 1.0 2013/1/4, as in a photo posted earlier in this thread; it is plausible due to a pass sticker with the date 130422), serial number T1G/036 00xxxx, and LCD.TS is plain 0.0.0. The system status menu confirms that the sampling rate can go to 1Gs/s (at low time base, of course). Now to the questions them-self:
     1. I haven't made any modification, neither software nor hardware (I haven't even disassembled the unit, even if it doesn't have a warranty sticker); the only time I inserted a USB stick in it was for the (official) update and to test the print-screen feature. I also used the back USB for the DigitalScope software only (old and slow, may I say), so not even the DSO-USB-Tool. Still, oddly I am able to select a timebase of 2nS (as seen in attached screenshot; it's not the minimum 4nS as it should for a 100MHz version, even though I updated with the 5102P update file), and was successful in viewing a very clean (compareable to that displayed on a professional Lecroy Wavejet 314A 100MHz 1Gs/s oscilloscope) 135MHz 10Vp-p AC sine-wave generated by a 35 year old generator (it was the fastest signal generator I could use at the moment; I also had a Tabor WW5061 generator, but at 50Ms/s it wasn't able to output more that 25MHz). My first conclusion is that the original distributor re-branded the device from a 200MHz to a 100MHz (changed the stickers on the unit and shipping box, and modified the respective internal files, including the boot logo and system info, but forgot the time base?). I don't have any other generators, so I can't test the maximum bandwidth, but I'm pleased with this surprise. What other reason could it be?
     2. Now some firmware "bugs": I'm using multiple settings for multiple types of signals to be analysed, so the settings save/recall feature is very useful (in order to spare the sensitive rotary encoders). The only issue is that the date and time is also saved and restored, so that every time I restore a SetUp, the RTC is reset back to the time settings at the moment that I saved the respective setup, which is annoying in that I have to re-set it every time. Is it possible to modify some files or the firmware update file itself so that it doesn't save the date and time too?
     3. Also, I saw a few tens/ hundreds of replies ago that Mr. "TinHead" managed to modify the firmware so that the sampling rate is displayed instead of time (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg294794/#msg294794 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg294794/#msg294794)). Is it possible to patch the latest firmware too (20140111)? That would be useful for my second question too, because the date and time will not appear on my screenshot, so I wouldn't have to re-set them every time.
     4. Regarding firmware, is there any more development for the "P" series, or any newer (than 20140111) one available? Please don't consider it as a request, it's more like a "more to come" view, than a "final, mature" software, with no more improvements and/or bug-fixes and/or unlocks to come.
     5. More than two years ago a user named "flodins" posted a few photos depicting a desktop environment displayed on a Hantek DSO5062B unit (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg124677/#msg124677 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg124677/#msg124677)), but besides those few posts no other updates were posted (and his home website's domain, http://flodins.info/, (http://flodins.info/,) is for sale). It seemed like a very interesting project, but I can't find any more info on the internet. Does anybody know the current status, or a way to replicate his result?

     Sorry for my long first post, I had quite a few ideas to express that accumulated in the last days since I got my first oscilloscope (besides a $40 USBee AX Pro clone, of which I don't I'm not proud, but is usable as a logic analyser and portable one-channel oscilloscope). Thanks to anybody who wishes to help me!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on June 21, 2014, 05:31:53 am
another Curios Problem on my hantek Handheld 1062b

i already bought 300mhz 100x Probe

So messuring AC 230V Inverter

Scale 50V PKPK 588V
Scale >=51V PKPK 750V

using 10X probe @ max Range 50V.. messuring is fine .. buw using 100x 51V- max Scale 500V messuring is completly  wrong

So .. this would really be a little bit stupid for using 100X Probe with scale 100-200V

See Pictures.. any ideas?

When the measure scale 100-200V, it's better to use 10X probe to test.
If use 100X, it's better to check the probe accuracy.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 21, 2014, 06:50:53 pm
Hello, I have a new version software, hardware and rescue tool may help solve your MSO5074FG problem.

www.hantek.com/Hantek/down/MSO5074FG.zip (http://www.hantek.com/Hantek/down/MSO5074FG.zip)

that link is not working, but this does:

http://www.hantek.com/down/MSO5074FG.zip (http://www.hantek.com/down/MSO5074FG.zip)

I'm wondering a bit, only Hantek employees are using links with Hantek to point to their web server, are you one of them? >:D

Anyway, what the rescue tool is doing is to delete broken profile, which is /param/sav/run1kb* file. In prnciple te watchdog have to do this, so something seems to be wrong with watchdog on MSO5074/54FG (or with the fw, which is why they published updates as well).

That link contains firmware update as well, for these who wish to chec what inside fw update, you need to use "mso5074fg" as password to decrypt (with gpg) the up file first, before untar/untar/gunzip it.

That link contains as well the AWG PC softare, which seems to work. It is actully separate tool, the other PC software is included in the link as well (but it is the same already known version).

I have some interesssting findings about the rescue tool, i will post it later a bit about.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 21, 2014, 09:44:53 pm
The reason with I settled to such compromise is that in my country the only trustworthy local seller was the well-know (in Europe) TME distributor.

trustworthy is better than cheap. The germanelectronics.ro, which is Conrad/Voelkner could be an option as well,
but they does not have P models (but the DSO-1062D which where same as Hantek DSO5062B).

"DSO5102P", hardware version "10000xffff8103" (so it well may be a DS5000C

8103, yes, that can be C model, but already upgraded to P (with 40k memory). So that's ok.

   1. I haven't made any modification ... 2ns ...

easy to check, download that tool from Peter

http://peter.dreisiebner.at/dso-usb-tool/ (http://peter.dreisiebner.at/dso-usb-tool/)

connect DSO to PC/MAC, run that software, go to shell tab and paste/execute "ls".
When you see /dst1202b in the listing, then it was already hacked, when not, then it does have
something to do with firmware (kind of "bug").

     2.
... so that every time I restore a SetUp, the RTC is reset back to the time settings at the moment that I saved the respective setup, which is annoying in that I have to re-set it every time. Is it possible to modify some files or the firmware update file itself so that it doesn't save the date and time too?

this is of course crap. What you can try is to rename the /bin/date , it looks like the firmware is using it to set date/time

     3. Also, I saw a few tens/ hundreds of replies ago that Mr. "TinHead" managed to modify the firmware so that the sampling rate is displayed instead of time (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg294794/#msg294794 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg294794/#msg294794)). Is it possible to patch the latest firmware too (20140111)? That would be useful for my second question too, because the date and time will not appear on my screenshot, so I wouldn't have to re-set them every time.

well, all you need is the original 3.40.0_130717.0_P firmware, the patched 3.40.0_130717.0_P and the 3.40.0_140111.0_P.
Then Ida Pro, hex editor, arm assembler book and some time - then you can made your own patch. It is really not that hard.

     4. Regarding firmware, is there any more development for the "P" series, or any newer (than 20140111) one available? Please don't consider it as a request, it's more like a "more to come" view, than a "final, mature" software, with no more improvements and/or bug-fixes and/or unlocks to come.

no, this is the latest version

     5. More than two years ago a user named "flodins" posted a few photos depicting a desktop environment displayed on a Hantek DSO5062B unit (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg124677/#msg124677 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg124677/#msg124677)), but besides those few posts no other updates were posted (and his home website's domain, http://flodins.info/, (http://flodins.info/,) is for sale). It seemed like a very interesting project, but I can't find any more info on the internet. Does anybody know the current status, or a way to replicate his result?

no idea, but ask him directly maybe
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pcmihnea on June 22, 2014, 11:38:27 am
Thank you for your quick reply, TinHead!
Quote
trustworthy is better than cheap. The germanelectronics.ro, which is Conrad/Voelkner could be an option as well, but they does not have P models (but the DSO-1062D which where same as Hantek DSO5062D).
Yes, that's a good alternative, but as I read throughout this thread, there is a risk for the "D" series to be an older hardware version, whereas the "P" is newer and improved(?).
Quote
easy to check, download that tool from Peter http://peter.dreisiebner.at/dso-usb-tool/ (http://peter.dreisiebner.at/dso-usb-tool/) connect DSO to PC/MAC, run that software, go to shell tab and paste/execute "ls". When you see /dst1202b in the listing, then it was already hacked, when not, then it does have something to do with firmware (kind of "bug").
Ok, I followed your suggestion, but before that I tried using your "Tools_P_models" backup tool, but after an hour or so it yielded a 1024KB "boot.bin", 4096KB "kernel.bin", 2048KB "logo.bin" and over 3GB of "root.bin" (it would have been even bigger where I not have cancelled the upgrade - by pressing the "cancel" button, and not by unplugging the USB stick or powering off). After that I re-checked your first post and saw that the tool applies to SN >15000, whilst mine is noticeably smaller. Is there another way to backup (should I use the nanddump commands via DSO USB Tool)? Regardless of any backup, I checked with "ls", and there is no /dst1202b, only the following:
Code: [Select]
OurLanguages
bin
chk_base_volt
cur_acq.type
dev
disk_sta.info
dso
dso.exe
dsod
dst1102b
etc
fpgabank.conf
help.db
i2c.log
icon
keyprotocol.inf
language.img
lib
linuxrc
logo
logotype
logotype.dis
mnt
msg
mult_adc.log
param
proc
protocol.inf
root
sbin
sys
sys.inf
tdc.log
tdc_edge125M
tdc_overtime125M
tdc_pulse125M
tmp
usr
var
So it's a software bug or some other form of hack (modification)? As I said, I was able to see multiple cycles of my 135MHz sine-wave (I just forgot to make a screenshot, I can make another one tomorrow, if necessary). Also, is there any way to read (not write, that operation is possible, as I saw in some posts) the value of the digital knee filter stored on the EEPROM? I'm curios if that was altered as well.
Quote
this is of course crap. What you can try is to rename the /bin/date , it looks like the firmware is using it to set date/time
And what effect will the rename operation have?
Quote
well, all you need is the original 3.40.0_130717.0_P firmware, the patched 3.40.0_130717.0_P and the 3.40.0_140111.0_P. Then Ida Pro, hex editor, arm assembler book and some time - then you can made your own patch. It is really not that hard.
Ummm.... can you please share some hints or instruction regarding the patching? It's a bit over my head, as I have very few experiences with such a task. Just some some first time short how-to?

I have one more question: there is an option in the utility menu, as it looks, to save waveforms, i.e. to print them. I'm not sure how this is accomplished, I tried connecting three different printers (Laser, Inkjet and multi-functional), but I'm greeted by the same error "printer not detected, operation failed". So I assume it was designed to print via a printer connected to the front USB? It was just out of curiosity, it's real-life usefulness is kinda limited, but interesting (if one doesn't have a PC at hand).

Thanks again for your help!

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on June 23, 2014, 03:52:00 am

that link is not working, but this does:

http://www.hantek.com/down/MSO5074FG.zip (http://www.hantek.com/down/MSO5074FG.zip)

I'm wondering a bit, only Hantek employees are using links with Hantek to point to their web server, are you one of them? >:D


http://www.hantek.com/down/MSO5074FG.zip (http://www.hantek.com/down/MSO5074FG.zip)
This link is working now. Maybe their website is not stable, I guess. :-//
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 23, 2014, 10:41:04 pm
Yes, that's a good alternative, but as I read throughout this thread, there is a risk for the "D" series to be an older hardware version, whereas the "P" is newer and improved(?).

C model was with 20k i think, then P with 40k and that Conrad "D" is actually Hantek "B" (not "D", thta was typo) with 1M memory.

Ok, I followed your suggestion, but before that I tried using your "Tools_P_models" backup tool, but after an hour or so it yielded a 1024KB "boot.bin", 4096KB "kernel.bin", 2048KB "logo.bin" and over 3GB of "root.bin" (it would have been even bigger where I not have cancelled the upgrade - by pressing the "cancel" button, and not by unplugging the USB stick or powering off).

no, so that shit is not working, this is due errors in partiton table or the nanddump tool. Some models are unfortunately affected.

So it's a software bug or some other form of hack (modification)? As I said, I was able to see multiple cycles of my 135MHz sine-wave

well, to see is not the problem, especially that you have 100MHz model (or changed to 100MHz).

the value of the digital knee filter stored on the EEPROM? I'm curios if that was altered as well.

EEPROM is holding other informations, but not the filter settings, they always model related (or manually set)

Ummm.... can you please share some hints or instruction regarding the patching? It's a bit over my head, as I have very few experiences with such a task. Just some some first time short how-to?

use google :) really. You will for sure find some tutorials (x86 for sure, some arm as well).

I have one more question: there is an option in the utility menu, as it looks, to save waveforms, i.e. to print them. I'm not sure how this is accomplished, I tried connecting three different printers (Laser, Inkjet and multi-functional), but I'm greeted by the same error "printer not detected, operation failed". So I assume it was designed to print via a printer connected to the front USB? It was just out of curiosity, it's real-life usefulness is kinda limited, but interesting (if one doesn't have a PC at hand).

right, when printer detected and set then it should work - however there is only ppd file for laserjet, that probably will not work with other printers. I was however able to print on diff. printer, but i had to use my own ppd files for that.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on June 24, 2014, 03:28:17 am
     2. Now some firmware "bugs": I'm using multiple settings for multiple types of signals to be analysed, so the settings save/recall feature is very useful (in order to spare the sensitive rotary encoders). The only issue is that the date and time is also saved and restored, so that every time I restore a SetUp, the RTC is reset back to the time settings at the moment that I saved the respective setup, which is annoying in that I have to re-set it every time. Is it possible to modify some files or the firmware update file itself so that it doesn't save the date and time too?

Hello! My firmware dso5kp_func_dso5102p20140208 hasn't such RTC problem, you may update it to test.
www.hantek.com/Product/5000P/DSO5102P_Firmware.zip (http://www.hantek.com/Product/5000P/DSO5102P_Firmware.zip)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: astraios on June 24, 2014, 03:56:28 am
Rosasharn, since you are providing direct links from Hantek's site, I assume you are a Hantek employee, therefore I would like to ask you: Is there any newer firmware for the hw0 version of DSO5102B?
I'm currently using Tinhead's modified dst1kb_2.06.3_15102b_fact(130814.1).up firmware.
I'm just curious, Is there any newer version than that?
By the way, sometimes it crashes when saving to usb stick.

The download section on Hantek's site does not have 2.6.x firmware available for download. I think that's unfair to the people who have old hardware versions of this scope.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 24, 2014, 12:24:59 pm
As said above i took a look on the "Rescue Tool", when started it look like this:

(https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=98822;image)

"connect and send", which is so far ok, but when one check the about dialog there is "Time and Language set". That look like the "tool" is or was doing more than only connect and send soemthing. And actually there is more, but all in chinese language and disabled. So i did translated it into english and re-aranged/enabled again all hidden things. Now the tool likes like this:

(https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=98824;image)

No one can set 3 types of things:
- HDVersion (more about this below)
- Language licensing (no idea if this is really used by the firmware, i'm always using default/english/EN)
- time (which didn't work as Hantek removed the code to send time and added code to send profile reset)

One can use that tool now to set these things, but as said abive, langaue is fine when set to what it is. Sure, there might exists OEM models like Voltcraft DSO-3062C where the langauge is set (in EEPROM) to German, but generaly one don't need that functionality. Time/Date settings as said above are not functional, but i leaved them visible. The profile purge, which is "the rescue", is nothing special, the tool is sending shell cmd (one can use the tool fro Peter Dreisiebner for that even better) to purge the file /param/sav/run1kb*. What remains is the BIG BONUS , the HDVersion settings function, used to store options and hardware licensing into the EEPROM.

I did posted some time ago about the options/hardware licensing stored in the EEPROM (starting from hw1005, on hw0 there was only SN/general info and language set, nothing else)

There are two blocks of information in the EEPROM:
• general information
• licensing information

The general informations are:
• [--LOGx--] - log number, the EEPROM can have multiple entrys (LOG0, LOG1 and so on)
• [serial number] - just your S/N
• [operation time] - the date/time of the DSO final test/factory calibration
• [operator] - the operator/technician name

The licensing informations are:
• [pcb] - PCB version, see below and version.txt for numbers to be entered
• [lcd] - LCD orientation, 0=default, 1=180° rotated
• [front] - your guess is as good as mine, 0 or 1 (but see below more)
• [usb] - i guess this is front usb port activation, 0=default(no second USB), 1=second USB enabled
• [touch] - touch panel function - not yet implemented, default=0
• [net] - LAN license - 0=no lan, 1=LAN enabled
• [iso] - isolation, 0=default (no isolation), 1=isolation enabled (like on DSO1000S handhelds)
• [buf] - memory depth license, 0=4k, 1=20k, 2=1M, 3=2Mpoint enabled
• [sd] - SD function license, 0=no SD, 1=SD enabled
• [vei] - Video function license, 0=no video, 1=video enabled
• [dds] - 0=default. I guess a 1 should enable the AWD/DDS (when integrated)
• [key] - Keyboard layout, 0=default (Hantek)

- The [pcb] is 1005 for hw1005, 1007 for hw1007, etc. For detailed list see attached version.txt
- The [lcd] as said above is used for screen orientation.
- The [front] is unknown to me, i thought some time ago that 1 is for Handheld and 0 for Benchtop,
   but i do have some Handheld dumps with [front]=0 and as well MSO5000D dumps with [front]=1.
- The [usb] i think it might be for enabling the 2nd USB port on front, can't test that.
- The [touch] is touch version, no use right now.
- The [net] is 0 on models with no LN and 1 on models with LAN.
- The [iso] thing was unknown for me, finally i know that it means "isolation". Afaik only DSO1000S
   handhelds should make use of that key.
- The [buf] key is as said abov for max. enabled memory. Of course it need to be physically available as well,
   simply enabling 2M on 40k model will not change anything. Currently on 2Mpoint benchtop models there is
   different CPLD design used, so one need not only to solder bigger memory, but as well to program different
   design into CPLD (it is on my OneDrive). On Handhelds it seems that there is by default the 2Mpoint
   CPLD design programmed, so it is enought to solder bigger SRAM and to change that option in EEPROM.
- The [vei] is enbling video support, one need as well at least kernel 2.6.30 installed.
- The [sd] us enabling the SD card support, on need as well at least kernel 2.6.30 installed.
- The [dds] i thought it will be used by models with DDS, but i did checked MSO50x4FG and there is no
   use of that key, it is still set to 0. Wondering why (dod Hantek forgot that option, or do they use it only
   on DSO7xxx and Handhleds with DDS?, no idea yet).
- The [key] might be set to 0 (hich is default), 1 and 2. The 1 and 2 are used by some Redsea Handhelds,
   with different layout, so it is good idea to leave it by 0 (default).


How these information are stored to EEPROM (see attached picture):
• byte 0002h, 0003h are used for langauge licensing
• general info stored from 1C00h to 1CFFh
• hdversion setting stored from 1D00h

(https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=98827;image)

How the S/N can be written:

well, one need to create an empty file and store it on DSO as /i2c.format. Additionally file containing the S/N
need to be created and stored on DSO as /i2c.org . The content of this file looks like:

[--LOG0--]
[serial number]DSO050012345
[operation time]2014-05-01 12:00:01
[operator]smart-hacker


NOTE: each line in this file need to be terminated with 0Ah and not 0Dh 0Ah.

When these file exists while DSO is booting, the firmware will erase the EEPROM and program the content with informations from the i2c.org file. When there are as well /HDVersion.set and /language.set available in the root of DSO, then they will be programmed as well into the EEPROM. I think there is little need to change S/N, but who knows. If someone wish to change the language or HDVersion licensing informations, then it is sufficient to have onle the /HDVersion.set and/or /language.set copied to DSO root, there is no need to format the EEPROM (so no need for i2c.format file) nor program the S/N (no need for i2c.org file).

And here is this debunked "rescue tool" very useful, one don't need to care about HDVersion.set file format, 0Dh at end of line nor what so ever - simply connect DSO to PC, run that tool, chose HDVersion options and click on write button. That's all. After next reboot the information will get written into the EEPROM (you will see short message window).

The debunked tool can be found on my OneDrive http://1drv.ms/1hf4SgO (http://1drv.ms/1hf4SgO)

NOTE: you should make backup of your EEPROM content first, to do this simply copy /i2c.log file to secure location. In that file all your options and as well S/N are stored (it is in principle copy of the EEPROM content and it will be re-created each time you change something! so make an backup).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on June 25, 2014, 02:01:20 am
I'm currently using Tinhead's modified dst1kb_2.06.3_15102b_fact(130814.1).up firmware.
I'm just curious, Is there any newer version than that?
I got this link from Hantek Tina.
If you have any questions, you may try to email Hantek, although sometimes it's not so fast. :-X

Here's the latest version I got from Hantek.
http://www.hantek.com/Product/DSO5000Series/DSO5102B_Firmware.zip (http://www.hantek.com/Product/DSO5000Series/DSO5102B_Firmware.zip)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: astraios on June 25, 2014, 02:14:58 am
Here's the latest version I got from Hantek.
http://www.hantek.com/Product/DSO5000Series/DSO5102B_Firmware.zip (http://www.hantek.com/Product/DSO5000Series/DSO5102B_Firmware.zip)
Unfortunately this firmware is not compatible with hw0 hardware version of this scope, but thanks anyway.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 25, 2014, 09:19:24 pm
Here's the latest version I got from Hantek.
http://www.hantek.com/Product/DSO5000Series/DSO5102B_Firmware.zip (http://www.hantek.com/Product/DSO5000Series/DSO5102B_Firmware.zip)
Unfortunately this firmware is not compatible with hw0 hardware version of this scope, but thanks anyway.

right, there is no other version compatible with hw0->hw1007 and kernel 2.6.13.
However, soon Hantek will made one (maybe the last one, depends on bug list status) for these models.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on June 26, 2014, 02:31:04 am
I have one more question: there is an option in the utility menu, as it looks, to save waveforms, i.e. to print them. I'm not sure how this is accomplished, I tried connecting three different printers (Laser, Inkjet and multi-functional), but I'm greeted by the same error "printer not detected, operation failed". So I assume it was designed to print via a printer connected to the front USB? It was just out of curiosity, it's real-life usefulness is kinda limited, but interesting (if one doesn't have a PC at hand).

Yes, Hantek DSO5000 series support printer, but only HP laseijet1010/1020/1022.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on June 27, 2014, 05:43:49 am
Could DSO5072P add a VGA output as optional?
 How is this option enabled, as I would like connect the DSO to a flat panel monitor for display.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 27, 2014, 06:53:35 am
Could DSO5072P add a VGA output as optional?
 How is this option enabled, as I would like connect the DSO to a flat panel monitor for display.

i did it once on my Tekway,with 800x600 reslution the picture looks ok

(http://www.mikrocontroller.net/attachment/127632/1.jpg)

One need only an LCD2VGA Adapter, there are some types available, only one type worked for me:

(http://www.mikrocontroller.net/attachment/129047/lcd2vga_v2.jpg)

On taobao it is e.g. this one:

http://item.taobao.com/item.htm?spm=a230r.1.14.52.nC3e7X&id=12655984912&ns=1#detail (http://item.taobao.com/item.htm?spm=a230r.1.14.52.nC3e7X&id=12655984912&ns=1#detail)

Then of course need to be somehow connected to allow both, internal display and external vga.
There are lot of buffer ICs, i tested some 74LVHC and CPLD, both worked

http://www.mikrocontroller.net/attachment/129048/DSO_VGA.pdf (http://www.mikrocontroller.net/attachment/129048/DSO_VGA.pdf)

Of course it is only copy of what on DSO and not separate screen, but i think that's good enought.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 27, 2014, 09:47:40 am
btw, there are new firmwares for P models and B/BM/BMV models (which is good as well for Voltcraft models), but all of course only for DSOs with S/N > 15000. Just check Hantek's OneDrive.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: astraios on June 27, 2014, 10:37:03 am
right, there is no other version compatible with hw0->hw1007 and kernel 2.6.13.
However, soon Hantek will made one (maybe the last one, depends on bug list status) for these models.
I wonder if Hantek is going to put it on the download section, when it's available, but I guess they probably won't.
Oh well,  dst1kb_2.06.3_15102b_fact(130814.1).up is not bad actually, I only managed to crash it 2 or 3 times.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pcmihnea on June 28, 2014, 10:07:04 am
Hi, sorry for the late response, I was a bit busy the last few days. Thanks to TinHead and  rosasharn for answering my questions.

TinHead:
Quote
no, so that shit is not working, this is due errors in partiton table or the nanddump tool. Some models are unfortunately affected.
So I should try the direct nanddump method (by inputting the commands via the DSO Tool), or there is simply no usable method of backing up for my model and s/n?


TinHead:
Quote
use google :) really. You will for sure find some tutorials (x86 for sure, some arm as well).
Ok, will try, but after I have a working backup (just to be 100% sure I can recover from my "experiments") and enough knowledge.


rosasharn:
Quote
Hello! My firmware dso5kp_func_dso5102p20140208 hasn't such RTC problem, you may update it to test.
www.hantek.com/Product/5000P/DSO5102P_Firmware.zip (http://www.hantek.com/Product/5000P/DSO5102P_Firmware.zip)
Thank you for the link!


rosasharn:
Quote
Yes, Hantek DSO5000 series support printer, but only HP laseijet1010/1020/1022.
I see, I only tried with HP Deskjet and Lexmark laser. In the future I'll do as TinHead did, and implement my own printer(s)' drivers as well.

Thanks again for all the help!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: colinbeeforth on June 28, 2014, 01:41:23 pm

Hi Dan,

I'll admit that I've been spoiled rotten for DSOs, I've owned a LeCroy 9310M for many years now.  I bought it second hand, it was expensive even then, but it's paid for itself so many times it owes me nothing.  It is getting a bit long in the tooth and parts are harder to get now.  So I thought I check out what was on the lower cost market a couple of years ago.

I went through the low cost DSO market, sending an email of questions to each manufacturer.  Hantek looked ok, I arranged to see one in use before buying and on the surface it looked ok.  It was a little different in the way it handled memory and sample rate, but different is ok.  The manufacturer was very poor at answering questions, they actually accused me of being a  competitor trying to get their "proprietary secrets".  I had just asked them the same stuff you can read in any LeCroy user manual, nothing exotic, but I should have been alarmed by their attitude, but I liked the colour screen -  it was a bad mistake.  I bought a Hantek DS5102B.  I've done the usual software upgrades, but nothing really works.  I can't trust what it says on the screen, it locks up and needs rebooting a dozen times a day.  That's not an exaggeration.  When you try to get it to do anything much, it crashes.  Remember, I'm used to a 20 year old LeCroy scope that hasn't crashed on me ever.  Truly, not once, ever.

The Hantek is junk, I'd love to get it out of my sight, it reminds of how I stupidly let a shiny display beguile me into wasting money.  However, in conscience, I can't sell it, it's rubbish and I'd only be giving some other less experience person a headache.

So, I liked the neat colour display, I liked the small size.  The Rigol DS2072A had just come onto the market.  I researched, thought it was a fair chance and bought one.  I'd be happy to on-sell this one though, because it works reasonably well, but I don't really want to keep it.  It just doesn't appeal very much.  It does some good things, but it's hasn't got the raw horsepower that a LeCroy has, even one 20 years older...

I've used the Rigol for a while, but also asked Rigol about how their scope worked.  They were polite, but coy about display compression algorithms and whether their scope had one.  For example, you've got a 100k single shot acquisition.  How does the Rigol scope write this onto a display with only 800 horizontal pixels?  Rigol won't tell me.  If you look up the LeCroy user manual , it explains how the display compression algorithm works, they break the contiguous acquisition into 400 bins, pick out min and max values, then write each one onto the display giving 800 pixels, but showing any amplitude deviations, even as small as one pixel wide.  If you see it on a non-zoomed display, you know there is a problem to be investigated, and use the zoom mode to check out the precise nature of the spike that was shown.  Why is that so difficult?  Well, it's a lot of data processing, and to do it fast enough to retain a reasonable update rate, it has to be done in hardware, and that's how LeCroy do it.  I can trust that.  I've checked that even a single pixel out of place shows up exactly as they promise, and it does.

Summary: The Rigol is ok, the small bench footprint is useful, but I still don't really trust it for anything except preliminary investigation.  The Hantek is a complete waste of bench space, money, time and effort.  The hardware looks like it should be ok.  The software is amateurish, and their support is laughable - or it would be funny if I hadn't actually paid for it.  Another spec that really matters for DSOs is equivalent bits.  At high speed, most DSOs lose bits of acquisition due to errors, jitter and noise.  So a fast acquisition is probably only 6.8 equivalent bits, and LeCroy's handbook will tell you exactly what you get at full speed.  None of the other manufacturers will admit what their equivalent bits at speed are.  That's what I mean about trusting a scope's results.

In the end, I bought a new old LeCroy, despite having a huge case, being very heavy and having a loud fan, and expensive, but it has a colour display and is totally trustworthy.  If it passes it's boot up calibration routines, you know it's in spec and good.  You can access the AtoD calibration results from the maintenance screens with LeCroy.  You know, if you connect the 1kHz calibration output to a 50 ohm coax cable, then to a BNC T on one input and hang a half metre piece of coax cable on the spare end of the T.  Set the input to 50 ohms, and look at the pulse reflection on the cable, and you can measure how many centimetres of cable you have attached to the input.  Light travels about 20cm in a nanosecond (in a cable) and it's easy to measure 50cm of unterminated cable with the LeCroy.  Try that with the Hantek...

Cheers, Colin
Melbourne

Quote:

Or, given I have version hw0 hardware should I just cut my losses and trade up for something newer/better and stop wasting time on this one? 

Thanks,

Dan
[/quote]
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 28, 2014, 06:17:39 pm
Colin,

The Hantek ... hardware looks like it should be ok.  The software is amateurish, and their support is laughable

i can sign that as well, on the other side, we got what we paid for. Sure, firmware on AWGs is better developed
than on latest MSO/DSOs, where they more stable than the older DSO models (hw0, hw1005, hw1007).  The original
PC Software, especially the MSO/DSO version is ugly/useless, good that we have SDK and custom software.

Support, well, as i said, you get what you paid for. How compares <500USD Hantek to >5000USD 9310M (when new)?

You know, if you connect the 1kHz calibration output to a 50 ohm coax cable, then to a BNC T on one input and hang a half metre piece of coax cable on the spare end of the T.  Set the input to 50 ohms, and look at the pulse reflection on the cable, and you can measure how many centimetres of cable you have attached to the input.  Light travels about 20cm in a nanosecond (in a cable) and it's easy to measure 50cm of unterminated cable with the LeCroy. 

Try that with the Hantek...


here we go, openend Emerson 415-0037-036 cable (~91.5cm) at one T side , 1MHz test signal with
fast rise time on other T side. The measured 9.2ns is exact what it have to be for an 91.5cm cable.

(https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=99788)


connect the 1kHz calibration output to a 50 ohm coax cable ... Try that with the Hantek...

Colin, that will not work, not on Hantek nor Tektronix nor Agilent, Rigol etc,
you can't plug BNC into these flat-2pins connectors :)

But let's stay serious  >:D

connect the 1kHz calibration output to a 50 ohm coax cable ... Try that with the Hantek...

Hantek's 1kHz CAL output have something about 2us rise time, even my modified version
(schematic: C03_57 and_58 removed) one can get 900ns (measured with 500MHz probe)

(https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=99786)

So how the hell you wish to use that signal to measure 5ns cable reflection?
The 1kHz CAL output is to calibrate probes, not to use as signal source for ns-range measurments,
use proper signal  source and you will be able to do such measurments on Hantek (see above).

proprietary secrets

Today you will not get any answers from any manufacturer, except marketing shit.
Hantek/Tekway was not bad at all, sure i got sometimes shit as well, but overall i'm
happy with them when talking about "secrets".
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Lesheg on June 29, 2014, 03:22:16 pm
Hi. I have Hantek DSO5102B hw version 1010 and serial 19XXX. Tried to backup via nanddump in DSO-USB-Tool, but this command doesn't work. There is another way to make a backup?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 29, 2014, 03:43:53 pm
Hi. I have Hantek DSO5102B hw version 1010 and serial 19XXX. Tried to backup via nanddump in DSO-USB-Tool, but this command doesn't work. There is another way to make a backup?

what exactly is not working? Can you dump mtd1 ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Lesheg on June 29, 2014, 04:40:14 pm
what exactly is not working? Can you dump mtd1 ?
There is no attempt to access USB flash drive (LED is not blinking), and does not appear any files on it.
Can I do something wrong?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 29, 2014, 05:58:30 pm
There is no attempt to access USB flash drive (LED is not blinking), and does not appear any files on it.
Can I do something wrong?

then copy somthing to /mnt/udisk/ , e.g.

cp /bin/busybox /mnt/udisk/

and then

sync

to check if the flash drive got recognized
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Lesheg on June 29, 2014, 06:51:43 pm
then copy somthing to /mnt/udisk/ , e.g.

cp /bin/busybox /mnt/udisk/

and then

sync

to check if the flash drive got recognized
Yes, this is works, appears busybox on flash drive.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 30, 2014, 12:38:09 pm
then copy somthing to /mnt/udisk/ , e.g.

cp /bin/busybox /mnt/udisk/

and then

sync

to check if the flash drive got recognized
Yes, this is works, appears busybox on flash drive.

ok, so give me that file. The "nanddump" itself is an link to busybox, which is multical binary. So maybe that version you have does NOT include nanddump command anymore.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Lesheg on June 30, 2014, 03:25:42 pm
ok, so give me that file. The "nanddump" itself is an link to busybox, which is multical binary. So maybe that version you have does NOT include nanddump command anymore.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 30, 2014, 03:40:35 pm
ok, that busybox does include nanddump, so must be something else.
Go to the shell tab and check (with ls) if there is nanddump in /usr/sbin/ or /usr/bin/
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Lesheg on June 30, 2014, 04:37:06 pm
ok, that busybox does include nanddump, so must be something else.
Go to the shell tab and check (with ls) if there is nanddump in /usr/sbin/ or /usr/bin/
found nanddump in a directory /usr/sbin/
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on June 30, 2014, 07:36:00 pm
then try again

/usr/sbin/nanddump -o -b -f /mnt/udisk/dump.bin /dev/mtd1
sync


that must work. You can of course connect via physical UART and check if nanddump is giving any error.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Lesheg on July 01, 2014, 02:03:54 pm
then try again

/usr/sbin/nanddump -o -b -f /mnt/udisk/dump.bin /dev/mtd1
sync


that must work. You can of course connect via physical UART and check if nanddump is giving any error.
Thanks, it works. The problem, it turns out, was that I set the path to a flash drive "/mnt/udisk/dump/", but the "dump" folder on the flash drive does not exist. I thought it should automatically create. :-DD I should have simply specify "/mnt/udisk/", as you suggested.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 01, 2014, 02:56:12 pm
you welcome :)

Btw, could you zip your backup (of mtd0,1,2,3) and upload somewhere? Your S/N seems to be one of the latests,
so i could make more recent restore image (my current is with S/N just above 15000).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Lesheg on July 01, 2014, 04:47:19 pm
you welcome :)

Btw, could you zip your backup (of mtd0,1,2,3) and upload somewhere? Your S/N seems to be one of the latests,
so i could make more recent restore image (my current is with S/N just above 15000).
Here it is https://www.dropbox.com/s/z8tbe1jhhnn72ps/dump.zip (https://www.dropbox.com/s/z8tbe1jhhnn72ps/dump.zip)
I have another question. In my oscilloscope 2ns horizontal sweep available without any hack (file dst1102b in root directory). Does this mean that I do not make sense to do a software hack?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 01, 2014, 06:15:33 pm
Here it is ...

thx, got it.

I have another question. In my oscilloscope 2ns horizontal sweep available without any hack (file dst1102b in root directory). Does this mean that I do not make sense to do a software hack?

oh well, i just flashed your dump, and indeed, it looks like your firmware is always allowing 2ns/DIV, no matter what model name i use. That however didn't change anything on the bandwidth hack, it is still necessary to rename the /dst1102b or /dst1062b to /dst1202b and reboot twice.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 01, 2014, 08:42:02 pm
it seems that all current (with firmware 3.x from 2014) Hantek/Tekway "B", "BM", "BMV" and "P" models does have 2ns/DIV always enabled. That means, the presence of 2ns/DIV can NOT be used anymore as indication for a successful hack.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pcmihnea on July 02, 2014, 08:48:55 am
it seems that all current (with firmware 3.x from 2014) Hantek/Tekway "B", "BM", "BMV" and "P" models does have 2ns/DIV always enabled. That means, the presence of 2ns/DIV can NOT be used anymore as indication for a successful hack.
So that explains my unit too. But is there a functional method of backup for my model (DSO5102P, s/n <15000)? Thanks!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rgo496 on July 02, 2014, 04:12:58 pm
Since 2 months i own a HANTEK DSO5102P. I also tried the DSO hack to go up to 200MHz, but i see no difference compared without it. I also had the 2ns timebase before.
A 125MHz clock signal will be detected as 125.000 but i will not trigger at all.

Then i tried HANTEKs new Firmware dso5202p20140208 and dso5102p20140208.
Unfortunately i didnt make a backup,because previous tries always resulted in an endless loop until the USB-stick got full.

So what do you guess. This new firmware is worse than my previous one (see attachment).
So i requested Hantek to send me a copy of my previous firmware.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pcmihnea on July 02, 2014, 07:38:27 pm
Since 2 months i own a HANTEK DSO5102P. I also tried the DSO hack to go up to 200MHz, but i see no difference compared without it. I also had the 2ns timebase before.
A 125MHz clock signal will be detected as 125.000 but i will not trigger at all.

Then i tried HANTEKs new Firmware dso5202p20140208 and dso5102p20140208.
Unfortunately i didnt make a backup,because previous tries always resulted in an endless loop until the USB-stick got full.

So what do you guess. This new firmware is worse than my previous one (see attachment).
So i requested Hantek to send me a copy of my previous firmware.
Hi, I also own the same model for some time and didn't have any of the issue you mentioned. Those limitations can be reproduced on my unit through some specific settings:
1.Menu cannot be hidden when in dual-window mode, and when you close the "Measurement" menu, all the measurements are shown on the bottom half of the screen in a yellow-background box,
4. If you activated a digital filter, Recorder or pass/fail function (in "Utility" menu page 3/3), the only memory depth possible is 4Kp/s. Also, if using the "Math" operation, the maximum is 20Kp/s.
I wasn't able to replicate 2) and 3) (although Alternate triggering is available only on 4Kp/s, but there is an error displayed when trying to set this option), even if I tried all the settings that may interfere. So it's possible that the culprit is other than user settings.
I know it may sound obvious, but are the issues still there even after a "Default Setup"? My intention is not to offend you, I'm just offering my opinions (since I'm a proud owner of the same DSO, and used both the old 2013 firmware and the latest - 140111 and 140208). If not of any help, please disregard. Thanks!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 03, 2014, 12:30:36 pm
i don't have such problems as well, so i assume his DSO is broken
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rgo496 on July 03, 2014, 03:06:12 pm
i found my mistake: i had renamed dst1102b accidentially to dst2202b . renaming it back to dst1202bst  and everything is working again as before.
thanks guys.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 03, 2014, 04:17:21 pm
right, with dst2202b as model name the firmware is running out of any specs/range.

Allowed are only following names:

dst1202b
dst1100
dst4060
dst1150
dst4042
dst1102b
dst4062b
dst1152
dst3022b
dst3042b
dst4062
dst4102b
dst1062b


where these without "B" at the end of name are only for (backward compatibility?) models from 2009,
like these Tekway DST1202 with 3.5" display and 2.5k memory (i liked them, one can close eyes and use
menus blind as if they were Tektronix TDS1xxx series):

http://www.tekwayins.com/product.asp?ArticleID=7 (http://www.tekwayins.com/product.asp?ArticleID=7)

these names with "B" are in 2 sub categories, these with 3xxxb and 4xxxb are for (not anymore produced) models:

http://www.tekwayins.com/product.asp?ArticleID=10 (http://www.tekwayins.com/product.asp?ArticleID=10)

Btw, i thought the DSO5xxxP is more or less successor of these 3xxxb and 4xxxb models. But there are new DSO4000B models:

http://www.hantek.com/ProductDetail_3_147.html (http://www.hantek.com/ProductDetail_3_147.html)

And finally these with 1xxxB, they used by every other model, so "P", "B/BM/BMV", handhelds, even the new MSO5074FG.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on July 04, 2014, 05:14:20 am
i did it once on my Tekway,with 800x600 reslution the picture looks ok

Thanks, tinhead.
It's really helpful.  :-+
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on July 07, 2014, 07:27:52 am
Who knows HDG2000B series has 10MHz external reference input(BNC) or not.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 07, 2014, 08:10:23 am
Who knows HDG2000B series has 10MHz external reference input(BNC) or not.

yes it does, but there is not clear if it have jitter problem with that input.

here is the HDG thread

https://www.eevblog.com/forum/testgear/hantek-hdg2002b-awg-5mhz-or-100mhz-let's-see!/ (https://www.eevblog.com/forum/testgear/hantek-hdg2002b-awg-5mhz-or-100mhz-let's-see!/)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on July 08, 2014, 05:48:25 am
Thank you, tinhead!
I'll ask the poster "if it have jitter problem with that input" on the HDG thread.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: artag on July 08, 2014, 08:26:56 am
with no issue - i'm using MSO with 2M SRAM, so can during boot chose between MSO and BMV DSO), and between B and MSO models it is only the additional PCB mounted to i/o port on the B model mainbaord (and some few passive parts necessary to enable int , etc on the extra PCB).

How did you get to a an MSO with 2M ? Is it a BM with added LA board, or an MSO with memory added ?

(I'm trying to make up my mind between these two so would love to be able to have both in one, even if you g=have to reboot to swap)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on July 09, 2014, 07:36:21 am
As far as I know, it's 1M SRAM on MSO hardware.
How to change it to 2M?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 13, 2014, 12:33:07 am
How ... ?

How ... ?

ok, let me tell you what i did to my hw1007 MSO. The only differences between BMV\BM and MSO are the DSO/MSO executable, the physical memory, the EEPROM stored license and CPLD design. The CPLD design was easy, sure one need to program it with USB blaster but once programmed it can work with both BMV\BM and MSO firmwares. I noticed some issues with hw1007 MSO firmware and BMV\BM CPLD design, but they seems to be due bug in firmware and not general compatibility problem (well, i was able to patch it away in firmware). The EEPROM licensing, i did expalined it on previous page, it is the easiest thing. The physical memory is based on synch SRAM. That SRAM is connected to FPGA but as well to CPLD - this is why one need BMV\BM design loaded into CPLD. In principle not only 2M but as well 4M are possible, from hardware point of view, to be used in these DSO/MSOs:

1M - IS61LPS25636A(-200TQLI or -250TQLI)
2M - IS61LPS51236A(-200TQLI or -250TQLI)
4M - CY7C1440AV33(-250AXC/AXI/AXCT)

Of course the CPLD design (which actually can be reversed and changed to support it) and the firmware have to support it as well (this could be patched as well, but let stay serious - one need for that stable firmware, which is not yet given). Anyway.

So if one load the CPLD design, re-program EPROM with 2M licensing added and replace the IS61LPS25636A with IS61LPS51236A then only the oscilloscope executable will remains as diff between models.

The executable dso.exe need as well matching language file (in my case English.lan) and calibration files (i don't wanted to spend time calibrating DSO/MSO each time i switch between systems, so created for each model own calibration). I thought nice boot menu could be a good idea, so i took tool released some time ago by Tekway (fpga.exe, for hw0 models), recompiled it to hw1007 platform (there are sources available, just check this thread) and implemented into rcS. So my DSO/MSO is displaying nice menu on each boot:

(http://www.mikrocontroller.net/attachment/176081/menu.jpg)

(http://www.mikrocontroller.net/attachment/176082/menu2.jpg)

all i have to do is then to push F1 or F2 or "Probe check" buttons to proceed with action. That's all.
(detailed, in german -> http://www.mikrocontroller.net/topic/289260#3126759 (http://www.mikrocontroller.net/topic/289260#3126759)).
(some info in english -> https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg217002/#msg217002 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg217002/#msg217002) )

The rcS is copying DSO or MSO cal data, english.lan and dso.exe to proper directory, it's load fpga design (again, it need to be loaded once to read back buttons and then once for normal use) and then starting the one or other firmware - ready.

Now one might ask "is that possible on current, hw101 hardware". Well, i cant answer that, yet. In principle i didn't saw any difference in CPLD routing (from pictures, so there might be somethign not visible). One need of course proper CPLD design, from hw101 BMV model. But honestly, hw101 firmware loaded on hw1007 (don't do this!) can access all that memory, so CPLD design looks to be fine. EDIT (but it has been updated, so one need to get CPLD dump from latest BMV/BM model in order to get the 2M working on MSO). That fpga.exe can be probably recompiled for 3.x linux. So i think that can be done as well. Sure, one will have to recompile the menu ui as well (not sure, maybe my will work on newer linux as well). But there is one bad thing in such hack, one can NOT use any firmware updates anymore - every update need to be first decrypted and unpacked, analyzed what necessary to be used from and copied manually to DSO/MSO in order to leave the hack working. This is not lot of work, but i'm sure this is not for everybody. I don't mind, i do have ftp running on my MSO, can access all the time over lan nd shell, don't need to disassemble anything, know all the tricks as well. But that's for me.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: artag on July 13, 2014, 12:49:12 pm
Perfect, thanks for the great writeup.

Why aren't all scopes hackable / customisable, like PCs ? I love top quality testgear but the growing practice of HP and Tek etc. providing postprocessors and other facilities as expensive software licences is a throwback to 1960's IBM. Looking forward to the first Android scope ..

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on July 16, 2014, 01:16:11 am
Wow, it's really cool. Many thanks for this writeup. :-+
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on July 19, 2014, 05:28:30 am
If can find curve tracer on Tekway scope?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 20, 2014, 07:21:36 pm
If can find curve tracer on Tekway scope?

there is XY mode and any DSO with XY mode can be used (with small external circuit) as curve tracer.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on July 22, 2014, 12:43:09 am
Wow, what kind of 'small external circuit' should be with?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 22, 2014, 09:33:26 am
Wow, what kind of 'small external circuit' should be with?

google "curve tracer circuit oscilloscope" there are lot of them. Some very simple (and working very good), some complex (and not giving any big difference, wondering why ppl always trying to "make better" simple things ...), enought to play with for years:

(https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=102977;image)



Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: clanto on July 22, 2014, 03:45:54 pm
Hello All,

I didn'n read all the topic but you can answer my question quicker. (I hope it :P)
If I buy a Hantek DSO5102P and hack it into 200Mhz, shall I flash the DSO5202P's official firmware to DSO5102P or I have to use the DSO5102P type?
There is any different between the firmwares?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Dave_S on July 22, 2014, 03:54:34 pm
I apologize in advance for posting what probably is a dumb question, but I really like my new scope and would hate to brick it by doing something that I am not sure of.  I have a new Hantek DSO5102P that I just received last week.  I got the latest firmware from the Hantek site (dso5kp_func_dso5102p20140208.up), and completed the update without a hitch.  My problem is that the MATH MENU does not have the FFT option that is mentioned in the scope's data sheet and manual, before or after the update.  I would like to install Tinhead's improved firmware for the DSO5102P that was introduced on page 133 post 1994 of this thread, but while the post says the firmware is for the "P" series it does not mention any possible hardware versions?  I have read about differences occuring with serial numbers above 15000, but my serial number of (T 1G/036 001705) seems to be from a completely different series? My question is does anyone have experience  with Tinhead's improved firmware on a "P" series device with hardware version (1000xffff8103)?  Many thanks in advance for any advice or helpful information, so that this old retired dude can proceed with as much knowledge as possible.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 22, 2014, 05:04:22 pm
I didn'n read all the topic but you can answer my question quicker. (I hope it :P)
depends, some ppl know how to search, some know how to ask (dedicated) question, others spend weeks to read 160 pages to find nothing.

If I buy a Hantek DSO5102P and hack it into 200Mhz, shall I flash the DSO5202P's official firmware to DSO5102P or I have to use the DSO5102P type?
after hack always firmware for the new model, so in your case DSO5202P

There is any different between the firmwares?
currently no differences, but that might change.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: clanto on July 22, 2014, 06:01:22 pm
Thanks!  ;D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 22, 2014, 09:09:26 pm
I apologize in advance for posting what probably is a dumb question, but I really like my new scope and would hate to brick it by doing something that I am not sure of. 

i will check that tomorrow and let you know how to switch over to firmware with FFT.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on July 23, 2014, 01:39:58 am
google "curve tracer circuit oscilloscope" there are lot of them. Some very simple (and working very good), some complex (and not giving any big difference, wondering why ppl always trying to "make better" simple things ...), enought to play with for years:

Thanks, tinhead.
It's very useful.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 23, 2014, 05:22:26 pm
I got the latest firmware from the Hantek site (dso5kp_func_dso5102p20140208.up), and completed the update without a hitch.  My problem is that the MATH MENU does not have the FFT option that is mentioned in the scope's data sheet and manual, before or after the update. 

from the system information, tell me the hw version.

I would like to install Tinhead's improved firmware for the DSO5102P that was introduced on page 133 post 1994 of this thread, but while the post says the firmware is for the "P" series it does not mention any possible hardware versions? 

it is for any "P" model, no matter what hw version.

As you have already newer fw version you can NOT simply use firmware update to downgrade. You will have to copy
it manually to your DSO. Go to my onedrive, to firmware -> hw1.00.0 folder and download DSO-P-custom_3.40.0_130717.1.zip

Inside that file you will find dso_patched.exe and English.lan (i do no use any other languages, so when you need others you
will have to decrypt/extract them from e.g. dso5kp_v3.40_dso5102p20130722.0.up ), copy them both to flash drive.

Then you need that tool from Peter Dreisiebner, http://peter.dreisiebner.at/dso-usb-tool/ (http://peter.dreisiebner.at/dso-usb-tool/)

Connect the DSO to PC, install drivers, run that tool from Peter. Go then to Log tab and select which driver you have installed,
"Use USB" for Hantek drivers or "Use LibUSB0" for LibUSB drivers.

Go then to shell tab and click on "Send", when you got anything else that error the connection is working and you can continue.
Now insert the flash drive into DSO, wait few seconds until it got recognized. Now run following (paste to "command" and click
each time on "send", wait each time until led stop blinking, if any):

cp /mnt/udisk/dso_patched.exe /dso_update.exe
sync
chmod 777 /dso_update.exe

rm /OurLanguages/*.lan
cp /mnt/udisk/English.lan /OurLanguages
sync


Now power cycle your DSO, it should startup with that patched fw version (check then in system information).

I have read about differences occuring with serial numbers above 15000, but my serial number of (T 1G/036 001705) seems to be from a completely different series?

actually this is my mistake, "P" models are always with new SoC (S3C2416), they can have any S/N.

The "S/N > 15000" indication is actually only to help people to recognize what SoC they have in their DSOs:
 < 15000 is S3C2440 (old SoC and now EOL)
 > 15000 is S3C2416 (new SoC).

My question is does anyone have experience  with Tinhead's improved firmware on a "P" series device with hardware version (1000xffff8103)?

so i assume you have 8103? In principle exact that version should have FFT and 40k memory maximum.
There are other ppl having same model, e.g. page 160, and no problems with FFT, as long of course memory
depth not set to higher than 20k and trigger not in Alter mode.

What when you do default setup, then go to math and scroll trough MATH options with arrows ?
(use F1 and/or F2 buttons to scroll, one can see only CH1+CH2, CH1-CH2, CH2-CH1, CH1xCH2, CH1/CH2,
the CH2/CH1 and FFT are not directly visible ...)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Dave_S on July 23, 2014, 06:22:53 pm
so i assume you have 8103? In principle exact that version should have FFT and 40k memory maximum.
There are other ppl having same model, e.g. page 160, and no problems with FFT, as long of course memory
depth not set to higher than 20k and trigger not in Alter mode.

What when you do default setup, then go to math and scroll trough MATH options with arrows ?
(use F1 and/or F2 buttons to scroll, one can see only CH1+CH2, CH1-CH2, CH2-CH1, CH1xCH2, CH1/CH2,
the CH2/CH1 and FFT are not directly visible ...)

Yes I have hardware version 1000xffff8103.
 :palm:
I did not notice the scroll arrows to the right of the math menu.  |O   Of course I have FFT available and my trace memory goes up to 40K, and my sweep speed down to 2ns per division.  Everything just as it should be. :-+
I also just discovered today that I have spent several days debugging a typo that caused an SPI bus problem on a small system that I am building.  At 70+ years the old brain just is not what it used to be.

Thank you very much for your help and I will add a beer to your Paypal donation account, right now :-+

I will save a copy of your above post and see about possibly still trying your improved firmware, but first, now that FFT works, I am going to start researching inexpensive USB logic analyzers here on EEVblog.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 24, 2014, 10:36:47 am
I did not notice the scroll arrows to the right of the math menu.  Of course I have FFT available and my trace memory goes up to 40K, and my sweep speed down to 2ns per division.  Everything just as it should be.
...
At 70+ years the old brain just is not what it used to be.

:)

Thank you very much for your help and I will add a beer to your Paypal donation account, right now :-+

got it, thanks for support!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: philipp on July 26, 2014, 02:21:58 pm
Hi!

I recently bought a Hantek DSO1062B. System information says sw version 2.01.1(140519.0), serial number DS0050xxxx, "upgrade log 0".

I upgraded the scope to the latest file on the hantek site (not onedrive) and it updated successfully, but after a reboot the screen was black. I connected to the UART and manually copied the correct dso.exe and afterwards, it worked again. After that, I tried the latest update from the hantek onedrive. This is my current situation.

Charging problems: It seems the battery does not charge anymore. Or more accurately: the software seems to think so. Symptoms: The battery symbol is always red, except when I plug in the power - then it switches to the "charging" animations for a few seconds (and then back to a red battery symbol). Also, when I remove the power, the device starts beeping like it had a low battery. This beeping stops when I plug the power back in. The scope still works when unplugged, it is only very annoying.
This was not the case before the update. Is there a way to fix this?

Fan: Before the update, the fan ran very rarely (maybe after 30mins on time). Now, it is always on. Is there a way to revert this?

Delay: When I measure the same signal on CH1 and CH2, there is a delay of 32ns (CH2 after CH1). Is this normal?

LAN: I would like to upgrade my handheld to LAN. I tried to understand as much as possible from this thread and mikrocontroller.net, but I am not sure. Is it enough to just solder in the DM9000 + magnetics + ethernet port + 25MHz crystal?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Antiath on July 27, 2014, 01:45:26 am
Before trying the BW hack, I tried to backup my DSO5102B ( bought some 3 weeks ago)  using  dso usb tool  and nanddump.  I entered those commands :

nanddump -o -b -f /mnt/udisk/dump/boot.bin /dev/mtd0
nanddump -o -b -f /mnt/udisk/dump/logo.bin /dev/mtd1
nanddump -o -b -f /mnt/udisk/dump/kernel.bin /dev/mtd2
nanddump -o -b -f /mnt/udisk/dump/root.bin /dev/mtd3

The first 3 worked somehow but nanddump remained blocked at root.bin. It was continuously writing in the USB device so I unplugged it without waiting the end ( after something like 45 min)  and root.bin was over 1.9 Go. This seems to be a known bug but I don't know if it is related to some models  or completely random.  Anyway, here are  the system info :

model : Hantek DSO5102B
sw version : 3.30.0 (140610.0)
hw version : 1010x5555830f
serial number : T 1G/012 016***

The DSO was updated once with the latest firmware from Hantek before attempting the backup.
I didn't find any solution to the issue in this ( quite long) thread so if there is  another way to make a full backup, I'm opened to suggestions.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Lesheg on July 28, 2014, 02:12:32 pm
Antiath
What was the date of the native firmware?
You updated the firmware from here? https://onedrive.live.com/?cid=6C60A056648D9011&id=6C60A056648D9011!305
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: fremen67 on July 28, 2014, 07:19:32 pm
Before trying the BW hack, I tried to backup my DSO5102B ( bought some 3 weeks ago)  using  dso usb tool  and nanddump.  I entered those commands :

nanddump -o -b -f /mnt/udisk/dump/boot.bin /dev/mtd0
nanddump -o -b -f /mnt/udisk/dump/logo.bin /dev/mtd1
nanddump -o -b -f /mnt/udisk/dump/kernel.bin /dev/mtd2
nanddump -o -b -f /mnt/udisk/dump/root.bin /dev/mtd3

The first 3 worked somehow but nanddump remained blocked at root.bin. It was continuously writing in the USB device so I unplugged it without waiting the end ( after something like 45 min)  and root.bin was over 1.9 Go. This seems to be a known bug but I don't know if it is related to some models  or completely random.  Anyway, here are  the system info :

model : Hantek DSO5102B
sw version : 3.30.0 (140610.0)
hw version : 1010x5555830f
serial number : T 1G/012 016***

The DSO was updated once with the latest firmware from Hantek before attempting the backup.
I didn't find any solution to the issue in this ( quite long) thread so if there is  another way to make a full backup, I'm opened to suggestions.
Have a look there :https://www.eevblog.com/forum/testgear/hantek-hdg2002b-awg-5mhz-or-100mhz-let's-see!/msg476550/#msg476550 (https://www.eevblog.com/forum/testgear/hantek-hdg2002b-awg-5mhz-or-100mhz-let's-see!/msg476550/#msg476550)
you should be able to run the three commands needed via the DSO-USB-Tool.
It just uses another version of nanddump that should work. The 4 files will be zipped in the dump.tar.gz file and you should be able to extract them on a PC with 7zip for example or on a  linux machine with the tar command.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 29, 2014, 09:23:12 pm
I upgraded the scope to the latest file on the hantek site (not onedrive) and it updated successfully, but after a reboot the screen was black.

isn't that shit?! I think it is, but they somehow stupid sometimes.

I connected to the UART and manually copied the correct dso.exe and afterwards, it worked again. After that, I tried the latest update from the hantek onedrive. This is my current situation.

happy you

Charging problems: It seems the battery does not charge anymore. Or more accurately: the software seems to think so. Symptoms: The battery symbol is always red, except when I plug in the power - then it switches to the "charging" animations for a few seconds (and then back to a red battery symbol). Also, when I remove the power, the device starts beeping like it had a low battery. This beeping stops when I plug the power back in. The scope still works when unplugged, it is only very annoying.
This was not the case before the update. Is there a way to fix this?

no idea, i don't have handheld so can't help on that (i do have dev board on which i'm doing things on fw, but power
control is using afaik separate IC and device driver - and that is what my dev board don't have, so can't check).

Fan: Before the update, the fan ran very rarely (maybe after 30mins on time). Now, it is always on. Is there a way to revert this?

as i remember there was menu to setup the fan

Delay: When I measure the same signal on CH1 and CH2, there is a delay of 32ns (CH2 after CH1). Is this normal?

that way too much! you have to run selfcalibration after the fw update.

LAN: I would like to upgrade my handheld to LAN. I tried to understand as much as possible from this thread and mikrocontroller.net, but I am not sure. Is it enough to just solder in the DM9000 + magnetics + ethernet port + 25MHz crystal?

right, you need these few parts, the EEPROM licensing tool (see first page of this thread) to enable "lan license" and i think that's all. On benchtop models one need to change rcS, on handhelds the rcS is already LAN-enabled.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: clanto on July 30, 2014, 09:51:16 am
Hello All,

I joined the club.
The Hantek DSO5072P has been arrived.
I could set the time base to 2ns/div without any hacking, but I made the hack.
At the first seem nothing changed but I checked the sys.inf file and the [DST type]dst1202b so I think it's fine.

(http://kep.psharing.com/805208.jpg)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on July 30, 2014, 10:08:40 am
I could set the time base to 2ns/div without any hacking, but I made the hack.
right, i posted here that all latest (from 2014) firmares does enable 2ns by default.
The bandwidth stays however unchanged, which means that the hack is still necessary to get the bandwidth updated.

At the first seem nothing changed but I checked the sys.inf file and the [DST type]dst1202b so I think it's fine.
that's ok, all what one can see after hack is if the filename has been really changed from /dst1062b or /dst1102b to /dst1202b.
Well, and of course faster risetime/beter frequency response when measured.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: clanto on July 30, 2014, 11:02:16 am
At the first seem nothing changed but I checked the sys.inf file and the [DST type]dst1202b so I think it's fine.
that's ok, all what one can see after hack is if the filename has been really changed from /dst1062b or /dst1102b to /dst1202b.
Well, and of course faster risetime/beter frequency response when measured.

Thanks, I see! Yes the filename is changed to /dst1202b.


I tried to switch dual-window mode after capturing a signal but the signal disappeared...if I use the dual-window mode from the beginning it's working. Is it a bug or I make something wrong? The Tektronix scope what I use in my workplace know this (Wave inspector function) but OK I know not the same price category...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on August 01, 2014, 08:08:09 am
Hello clanto!
What kind of signal you captured?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 01, 2014, 08:47:00 am
I tried to switch dual-window mode after capturing a signal but the signal disappeared...if I use the dual-window mode from the beginning it's working. Is it a bug or I make something wrong?

first of all, i do NOT have "P" model hardware, so sometimes things i test might NOT be valid on real hardware.

I tested "P" model firmwares and since begining (22 Feb 2013) there is exact the same bug, in every firmware:

Everytime when acq stopped and screen switched  between single and dual window (and vice versa) the already
captured waveform disappears from screen.


Can someone validate this on actual "P" model? If so, you guys should send Hantek an email,
you have "P" model so you can check if new fw will work better.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pcmihnea on August 01, 2014, 10:13:37 am
Can someone validate this on actual "P" model? If so, you guys should send Hantek an email,
you have "P" model so you can check if new fw will work better.

     I can confirm that this bug is present on my DSO5102P with sw. version 3.40.0 (140111.0).
     I also have an RTC issue, where the clock (and date) hangs after a power-off, and is the same when I power it on (it doesn't reset to 2009, it is exactly the same time and date as just before I powered down), and continues to "tic" (i.e. it keeps going second-to-second) after the unit is turned on. I don't believe to be a problem with the backup battery, as it would have reset to 2009. Can anyone confirm my bug?
     TinHead: I've tried your DSO Tool (the one that generates HDVersion.set file), and before  my original i2c.log stated that [buf]2. When I used your tool, I've set it to 40Kpps, but after reboots, I've checked the new i2c.log, it stated [buf]1. So I've set in your software the next buffer value of 1M, and only then my new i2c.log is [buf]2. Both of the times the only permitted values in the Acquire menu were 4k, 20k and 40k. So is it a programming error on my EEPROM, or what? I've used your tool to enable the Video option, but although it shows the file manager menu and recognizes the video files on my USB stick, it hangs when I try to play them (.avi and mpeg4, low bitrate and a few seconds long), so it obvious that my unit lacks the required libraries and/or codecs.
     Finally, is there a substitute (i.e. drop-in replacement) for the DM9000AEP chip? I can't seem to find it anywhere near (in online store from my country). The other components (RJ45 socket, magnetics, and 25MHz osscilator are not that critical) Thanks!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: clanto on August 01, 2014, 11:18:41 am
If so, you guys should send Hantek an email, you have "P" model so you can check if new fw will work better.
I have the latest fw. from the Hantek website so I sent a mail to the support team I hope they will correct it...
And I found one more bug, in the dual-window mode the tracking cursor not working (the voltage don't change).

     Finally, is there a substitute (i.e. drop-in replacement) for the DM9000AEP chip? I can't seem to find it anywhere near (in online store from my country). The other components (RJ45 socket, magnetics, and 25MHz osscilator are not that critical) Thanks!
I can't find it too but if I read well the "B" model is compatible with the "A" (not necessary other driver) so I think you can use the newer one but I can't guarantee.. and the "B" is available from the farnell:
http://uk.farnell.com/davicom/dm9000bep/ic-enet-cntrl-10-100m-phy-48lqfp/dp/2115481 (http://uk.farnell.com/davicom/dm9000bep/ic-enet-cntrl-10-100m-phy-48lqfp/dp/2115481)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 01, 2014, 02:16:37 pm
for DM9000AEP use ebay, e.g. item 171272339299 or 301232128882.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: clanto on August 01, 2014, 02:28:00 pm
for DM9000AEP use ebay, e.g. item 171272339299 or 301232128882.

Yes you're right and it's cheaper.
Is it worth to make the LAN access? Does it give extra function?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 03, 2014, 08:02:31 am
Is it worth to make the LAN access? Does it give extra function?

oh well, for me it was. On "B" models with latest firmware it seems to be working complettly, meaning one can use
the PC firmware (and that tools from Peter Dreisiebner as well) to control DSOs, get data, etc.

Same for handhelds, since beginning. On all others, meaning even "B" models with 2.x firmware, or latest "P" models
in your case one can only use remote access to the Linux itself. This is for my needs sufficient.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Antiath on August 11, 2014, 09:35:10 pm
Before trying the BW hack, I tried to backup my DSO5102B ( bought some 3 weeks ago)  using  dso usb tool  and nanddump.  I entered those commands :

nanddump -o -b -f /mnt/udisk/dump/boot.bin /dev/mtd0
nanddump -o -b -f /mnt/udisk/dump/logo.bin /dev/mtd1
nanddump -o -b -f /mnt/udisk/dump/kernel.bin /dev/mtd2
nanddump -o -b -f /mnt/udisk/dump/root.bin /dev/mtd3

The first 3 worked somehow but nanddump remained blocked at root.bin. It was continuously writing in the USB device so I unplugged it without waiting the end ( after something like 45 min)  and root.bin was over 1.9 Go. This seems to be a known bug but I don't know if it is related to some models  or completely random.  Anyway, here are  the system info :

model : Hantek DSO5102B
sw version : 3.30.0 (140610.0)
hw version : 1010x5555830f
serial number : T 1G/012 016***

The DSO was updated once with the latest firmware from Hantek before attempting the backup.
I didn't find any solution to the issue in this ( quite long) thread so if there is  another way to make a full backup, I'm opened to suggestions.
Have a look there :https://www.eevblog.com/forum/testgear/hantek-hdg2002b-awg-5mhz-or-100mhz-let's-see!/msg476550/#msg476550 (https://www.eevblog.com/forum/testgear/hantek-hdg2002b-awg-5mhz-or-100mhz-let's-see!/msg476550/#msg476550)
you should be able to run the three commands needed via the DSO-USB-Tool.
It just uses another version of nanddump that should work. The 4 files will be zipped in the dump.tar.gz file and you should be able to extract them on a PC with 7zip for example or on a  linux machine with the tar command.

Ha thank you ! I could finally dump this damn root.bin
And I followed with the BW hack so tinhead, thank you too for this topic  :-+
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: gl on August 12, 2014, 08:12:26 pm
Hi Tinhead & everyone.  Just bought my first scope, a 5072p.  Of course the hack and all the cool tools was a a big part in my decision (that plus limited funds but needing something better than the Quad etc), so thanks for all your time and effort Tinhead.  :-+  Would've loved a Rigol 2000 series with gradient display and deep memory, but you can't have everything (yet ;)).

Hardware: 1000xffff8103
Firmware: 3.40.0 (140208.0) - as shipped

I though I'd start with a backup, but for me it also hangs forever on root.bin.  I'm using the new .up file with the explicit size dumps, but it doesn't seem to help.

I used a 2GB flash drive, it filled root.bin to capacity (30-40mins I guess), then claimed the upgrade went OK.  root.bin should be around 120MB right, not 1.81 GB :).  Anything you want me to try Tinhead?

(will try the method with Peter's tool next ...)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: gl on August 12, 2014, 09:09:57 pm
... nope I can't get it to work with Peter's tool either.  I know nothing about Linux so maybe I'm missing something:

Using USB-Tool's Shell, I can't make 'cd' work, it just ignores it without message (I guess that's normal as it's not a full shell, but a one-off cmd trigger?)

So I tried launching the script with '/mnt/udisk/nandbackup'.  This prints the steps, but they all complete instantly.  The resulting dump.tar.gz file is stored in the scope root (not the USB drive, obviously) and is only 227bytes long.  All it contains are logs that complain that they couldn't find ./nanddump.

So it's all path issue.  How can I do this via USB-Tool's shell?
___________________________________________________________________________________

EDIT: OK, this works - combine both commands into a single line: cd /mnt/udisk ; ./nandbackup

There will be no feedback, the tool will just hang until the backup is complete.

These are the full steps:

- grab fremen67's backup script here (https://www.eevblog.com/forum/testgear/hantek-hdg2002b-awg-5mhz-or-100mhz-let%27s-see!/msg476550/#msg476550).
- follow that post's instructions for extraction, or as I did (on Windows) just use Winrar/7zip etc. to extract the two files to the root of a USB flash drive, then insert into scope.
- If not already, install the DSO drivers (you may need to disable driver signing first, Google.  for some reason the installation completely locks up my PC for minutes, but does complete)
- Get & run Peter's USB Tool (http://peter.dreisiebner.at/dso-usb-tool/), go to the Log tab and tick 'Use USB', then type this in the Shell tab:

cd /mnt/udisk ; ./nandbackup

The tool will lockup until the process is complete (~15mins?) and dump.tar.gz should be on the USB drive (on my Hantek 5072P it was 15.5MB, 131MB extracted)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: gl on August 12, 2014, 09:34:47 pm
One strange thing - looking at the dump logs, all except root.bin show no "bad blocks".  But root.bin lists 2.  Anything to worry about?

Code: [Select]
(root.log)
ECC failed: 0
ECC corrected: 0
Number of bad blocks: 2
Number of bbt blocks: 0
Block size 131072, page size 2048, OOB size 64
Dumping data starting at 0x00000000 and ending at 0x07900000...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 13, 2014, 07:03:08 am
bad blocks on NAND are common, so no need to care about them.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: gl on August 13, 2014, 01:23:33 pm
OK thanks.

Is there a way to update the .up backup file to work on the 5000p's?  How are they created?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 17, 2014, 03:59:24 pm
OK thanks.

Is there a way to update the .up backup file to work on the 5000p's?  How are they created?


i did updated the tool, try this one and tell me if the backup works for you

https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=105820 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=105820)

Note: it should create dump dir and 4 other files on flash drive, i'm not big fan of tar/gzip from/to flash drive.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: gl on August 17, 2014, 04:20:12 pm
Works great, only took a few mins too:  :-+

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 17, 2014, 05:57:34 pm
ok perfect.

Btw, there are new firmware for benchtop "P", "B", "BM" (work for BMV as well) models (only for the new models models with already installed fw 3.xx !) and for handhelds "B" and "S" models on Hantek website available.

No idea (yet) what in which fw has been fixed or added, but i can see already (testing now "B/BM/BMV" models) that digital filter and equ sampling are back! (finally after 2yrs of "hope"). It looks like FFT don't like when equ sampling enabled (DSO rebooting), but that's easy to fix then. It seems to be bit tricky to enable it (the logic not yet smooth working when have to be enabled when one push enable and when it should display - no equ mode available).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: gl on August 17, 2014, 06:21:21 pm
Do you mean 3.40.0(140208.0)?  If so that was already installed on my just-purchased 5072P.  I do have the Equ-Time sampling option.  FFT doesn't crash for me with it enabled (hacked 5072P scope with 5202P firmware).

re. 'digital filter', do you mean the optional 20Mhz bandwidth limit?  If so I have that too.

After hacking the scope to 200Mhz, I flashed the 5202P firmware - even though it was the same version, it seemed to flash OK.  But the bootup screen still shows the old model - is there a way to change that?

Since flashing 5202P, I have an extra yellow bar below the waveform when using Autoset (with Pk-Pk, Mean, Freq and Period readouts).  I don't remember seeing that on the 5072P firmware.

I also sometimes get a massive yellow box with tons of readouts that take up most of the screen.  I haven't figured out yet what triggers that, or how to toggle it ...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: clanto on August 17, 2014, 06:44:31 pm

After hacking the scope to 200Mhz, I flashed the 5202P firmware - even though it was the same version, it seemed to flash OK.  But the bootup screen still shows the old model - is there a way to change that?

I have the same type of DSO and it's possible to change the bootup logo just need to recompile the whole display driver....not so easy than the other models so I left it.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 17, 2014, 06:55:35 pm
Do you mean 3.40.0(140208.0)? 

no, 3.40.0(140806.0)

If so that was already installed on my just-purchased 5072P.  I do have the Equ-Time sampling option.  FFT doesn't crash for me with it enabled (hacked 5072P scope with 5202P firmware).

re. 'digital filter', do you mean the optional 20Mhz bandwidth limit?

no, when you go to utility, page 3/3, filter. But i can see already that there is no apply on that "P" model firmware, so it is not working (even if one can "set" everything). The equ sampling seems to be not working as well (yes, you can see it, but sample rate is still max 1GS/s and not e.g. 20GS/s). So no idea what really new/fixed for "P" models.

I have an extra yellow bar below the waveform when using Autoset (with Pk-Pk, Mean, Freq and Period readouts). 

this is when you run autoset, that was always there.

I also sometimes get a massive yellow box with tons of readouts that take up most of the screen.  I haven't figured out yet what triggers that, or how to toggle it ...

right, this is new feature. To enable go to measure menu first and push the F0 (in principle to hide menu bar on which all measures are displayd .. so the firmware is then displaying the massive box then).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: gl on August 17, 2014, 08:36:19 pm
Ah, I was looking at Hantek's SkyDrive which hasn't been updated yet.  I just tried the new 5202P.

First, System Info still lists the 5072p model - is that normal?  Is there any point in flashing the higher model after the BW hack?

It also reset my upgrade count (was 1, now 0 again) - strange?

I have the filter options (already had them in 140208) but I don't have a > 5khz signal to test on right now (lowest freq option).  As you said, there's no 'Apply' option.

Not sure on equiv (nothing to test, 1kHz doesn't seem to change).  Maybe it works internally but just doesn't list the equiv. sample rate?

re. the yellow readouts, the way they appear/disappear is really unintuitive.  For example, you'd expect F0 on Measure to remove the readouts, not add even more.  You have to enter another menu first, then exit that to get your full screen back (same with the Autoset yellow bar).


BTW Tinhead, is there a way to customize the wave colours?  Or UI colours (ie. changing the existing colour choices)?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: gl on August 17, 2014, 08:51:43 pm
First, System Info still lists the 5072p model - is that normal?

I originally used DSO BW Changer to hack the BW.  I just examined the files you're supposed to modify, and found that display.dis was still using the old model no.  After changing to Sys Info now shows it, but the boot screen still lists the old model.  Is there a way to modify that?  I read in the thread that the logo is compiled into the display driver on this model, is that right?  (if so, probably not worth messing with).  Custom boot screen would be fun (but not essential).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on August 18, 2014, 06:06:17 am
Is it possible to control the DSO5072 with a PC with a WIFI (or other communication option) wireless and remotely so that I can restart the single shot trigger and transfer the data to the PC?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ebrummer on August 18, 2014, 09:54:30 pm
Quote
On all others, meaning even "B" models with 2.x firmware, or latest "P" models
in your case one can only use remote access to the Linux itself. This is for my needs sufficient. -tinhead

Being new to the game (I just purchased a Hantek DSO5072P) what does remote access via Linux allow?  Obviously, I can modify files on the device such as renaming in order to hack the bandwidth or potentially run Tinhead's firmware version.

Can I pull in measurement data to the computer in some way via usb or lan (lan requiring hardware hack?)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: gl on August 18, 2014, 11:16:55 pm
On Windows at least the Hantek installer CD installs 'DigitalScope'.  That can control the scope via USB & LAN and extract wave data.

There's also Peter's DSO USB Tool (http://peter.dreisiebner.at/dso-usb-tool/) that can extra data & issue Linux commands via USB & LAN.

There might be others, only just got the scope myself.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: aerra on August 23, 2014, 08:12:29 pm
Quote from: tinhead
Knowing now that the latest "S" models (hw1.00.4) are S3C2416 SoC and Cyclone IV based no wonder that there was issues with latest firmware updates on older "S" models (hw 1.00.1 and hw 1.00.2).
And would it be any real benefits from this except lower energy consumption?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: aerra on August 23, 2014, 08:18:41 pm
i think lot of people are curious how they made the channel isolation.
Judging by the photos is it good made? The black boxes with erased part numbers seem to be transformers.
(http://s55.radikal.ru/i147/1408/ba/f369d21cf3e1.jpg)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 23, 2014, 08:28:10 pm
well, Cyclone IV is not really faster than Cyclone III (when talking about that DSO design, as it does not use any advanced features of Cyclone IV), on I/O even bit slower when interfacing 3.3V LVCMOS ADCs (so i assume they out of specs now or at 3.0V which is ok for FPGA and ADCs). It does have even less intergrated memory than Cyclone III on previous models. Power saving is just side effects, more important is that it does not run that hot with the DSO deisgn. The Cyclone III was really on limit here.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 23, 2014, 08:40:58 pm
Judging by the photos is it good made? The black boxes with erased part numbers seem to be transformers.

this are DC/DC converters, Morosun WRA0505CS-2W.

For data transfer between channels and ADC there is transformer on the other side, Sumlink ST-L6801 (the other black boxes).
And tha's to your pictures i know now the 3 SOP8 ICs near that transformers, they are TI ISO7220B (dual channel isolators).
They used to isolate the control data from DSO logic to input channels. Unknown are then only the U38 and U36. I can see
on your pictures on the U38 part of the marking, something like 8347? but that not AD8347 for sure. But an driver what so ever.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: aerra on August 24, 2014, 06:09:42 am
tinhead, do you know how the built-in DMM is calibrating in handhelds? Is there any file with calibration data, or there is no software ability to influence on dmm readings?
Have anybody tried last fw (30/07/14) for S devices? Is there any sense to upgrade?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 24, 2014, 09:17:57 am
tinhead, do you know how the built-in DMM is calibrating in handhelds? Is there any file with calibration data, or there is no software ability to influence on dmm readings?

the DMM IC they using is FS9922-DMM4, afaik there is no software calibration for the DMM in the DSO firmware.
It dioes simply reads the value from the DMM IC and display it directly (after parsing them of course).

The DMM can be only calibrated (hardware wise) via 4 smd (ugly) pots:
- R45 -> AC rectification value, pin 1 (top, near pin 1)
- R34 -> REF voltage, pin 4 (top, between pin1 and two diodes)
- R27 -> capacitance measurment input RCAP1 pin19 (bottom, left from R17 and relay)
- R17 -> capacitance measurment input RCAP2 pin 20 (bottom, between relay and R27)

Hantek is using Fluke 5500A for calibration, i would say that good enought. Let's hope they spend enought time per unit.

I don't see any conformal coating on your pictures, so should be no problem to calibrate DMM (if necessary).
There is however one thing, when calibrating ensure that Handheld battery is full loaded and calibration is done
when running on battery (with external power supply disconnected). There was some drift in mV range on older models
due crap external power supplies (well, OEM parts). No idea if that changed, so better to calibrate directly on battery.

These handhelds have no True-RMS circuit (well, one can use DSO for that), so AC calibrations is anyway not that important.
The REF can be however improved, Hantek is using FS9922-DMM4 internal source, like in app note 40k2 between REFO and REFI,
and then 10k pot + 40k2 resistor in series from REFI to AGND. The internal REFO is 1.2V bandgap source, with 100ppm/°C.
One can use here external reference, e.g. REF1112 (or ICL8069A like in app note, however initial accuracy of REF1112 is much better)
and trim it with some better pots (not that crap smd thing in series). But finally one will not get much better results, but more stable yes.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: The Doc on August 27, 2014, 02:46:25 am
I'd just like to thank tinhead for his hard work and dedication to hacking this 'scope... Cheers!

My DSO5072P arrived today and I finally plucked up the courage to hack it. I tried it first with the DSO-USB tool but it locked up and the 'scope froze. I thought I'd killed it, but it rebooted and I decided not to risk it that way again.
I didn't have a USB-Serial adapter but I did find a Serial over Bluetooth adapter, so I wired it in and connected using Putty, then changed the file name and the name of the scope in logotype.dis, and I'm up and running.
I'll probably leave the Bluetooth module in for now. It might come in handy one day, and it saves taking it apart again.

Now I just need to figure out (I need someone else to figure out) how to change the boot logo...   ;D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 27, 2014, 11:13:48 am
Doc,

as you have access over uart to your "P" model, can you made backup of your root_fs, upload it somewhere and PM me a link?
For now would be good to get only backup (copy) of some dirs, e.g. /dso, /lib, /etc, /sbin, /usr and /

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Hjalmas on August 27, 2014, 10:06:32 pm
Hello people!
As stupid as can be i think i accidently removed the dso.exe while playing around in the shell for the very first time (i am indeed a total noob)
when i try to start my Hantek DSO5102B it just freezes on the boot screen :S

[DST type]dst1102b
[soft version]3.30.0(140315.0)
[fpga version]0x55778344

Maybe someone out tthere has got the correct dso.exe? and maybe willing to share?
please help!!
//Albin

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 28, 2014, 02:50:02 pm
i accidently removed the dso.exe while playing around in the shell for the very first time (i am indeed a total noob)
when i try to start my Hantek DSO5102B it just freezes on the boot screen :S

not a big problem, simply copy new one and change permission to +x

Maybe someone out tthere has got the correct dso.exe? and maybe willing to share?

go to my OneDrive, to "DSO hacks -> firmware -> hw1.01 -> Voltcraft-DSO". You have Hantek DSO5000B,
but as there is no 140315.0 fw for Hantek (but for Voltcraft, which is the same fw) take the one for Voltcraft, e.g.

dso5kb_func_dso1202d_3.30.0_20140315.up

download gpg (for your OS) and decrypt that dso5kb_func_dso1202d_3.30.0_20140315.up file,
as password for gpg use dso5000b. Then take winrar or what so ever and gunzip the file, then untar
the resulting file and untar it again. Now you will see directory with files. Copy the dso.exe to flash drive,
take it to DSO, insert and copy from flash to DSO root, e.g.

cp /mnt/udisk/dso.exe /
sync

then give executin rights

chmod +x /dso.exe

and test is by executing /dso.exe

When it runs you can take latest firmware and update your DSO
 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Hjalmas on August 28, 2014, 09:59:26 pm
oh yes! it works :)

Thank you so much tinhead, YOUR AWSOME! O0
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: j.sjolund on September 01, 2014, 04:18:02 pm
Hi!

I decided to join the club, got myself a Hantek DSO5102P, and then decided to hack it to 200MHz.

At first I tried using the DSO-USB tool, but found it to be a bit unstable on my Linux machine, with connection issues and freezes. Not to mention a lot of it was in German which made it cumbersome to use (since I do not speak it). Instead I took the back cover off and hooked up my Bus Pirate probes to the serial port holes (no soldering required). Using the BP:s "transparent UART bridge" macro with 115200 bps, I got a terminal and changed /dst1102b to /dst1202b. The scope seems to work fine.

I assume I will also have to remove the capacitors that PL00 talked about in his post (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg411573/#msg411573)?

Anyway, since I could not find a picture of the location and pinout of the serial port on this exact scope I decided to make one. Perhaps it might help someone. Probably most people here can figure it out by themselves though...

(http://i.imgur.com/XfhNmP6l.jpg) (http://imgur.com/XfhNmP6)

Also, thank you tinhead for all your work! Did "The Doc" send you those backup files? If not, I can do it if needed.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 01, 2014, 05:49:01 pm
Using the BP:s "transparent UART bridge" macro with 115200 bps, I got a terminal and changed /dst1102b to /dst1202b.
right, that work as well. The best hack ever was i think an atmega something sending only rm /param/save/r* to reset DSO with broken UI setup. But it worked, so what :)

I assume I will also have to remove the capacitors that PL00 talked about
yes, on top and bottom side.

Also, thank you tinhead for all your work! Did "The Doc" send you those backup files? If not, I can do it if needed.

no, he probably missed my post. So yes, if you can made that backup for me.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: j.sjolund on September 02, 2014, 02:10:42 pm
no, he probably missed my post. So yes, if you can made that backup for me.
Alright, I sent a link in a PM.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: noss on September 02, 2014, 04:35:12 pm
Hello!I broke my Hantek DSO5102P :-BROKE
replaced file Russian.lan from  DSO5062BM  |O |O |O
now display (http://sd.uploads.ru/y5RaP.jpg)
 the firmware the flush not accept.
Help me please.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 02, 2014, 04:42:22 pm
no, he probably missed my post. So yes, if you can made that backup for me.
Alright, I sent a link in a PM.


got them, thanks for support!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 02, 2014, 04:58:08 pm
Hello!I broke my Hantek DSO5102P replaced file Russian.lan from  DSO5062BM  |O |O |O

so you love to play, do you?


what on your display is the latest version of "watchdog" on these DSOs, very powerful one. No more need for fight what so ever, simply insert flash drive with proper update files (system.up, hantek.up, emerg.do, etc). Unfortunately there is no documentation about and i have not (yet) reversed what/when happens.

In principle one have to download proper firmware (so for your model), decrypt it with proper password (in your case dso5000p) and encrypt it again with dsoduse (when trying system.up or hantek.up as recovery file name on flash) or 949307 (when using emerg.do as recovery file name on flash drive). And then of course rename that new encrypted firmwre file to one of these names above, copy to flash drive and then watch your DSO restroing itself.

I quickly checked once, that worked, but no warranty what so ever that it will work, that pass names or the way is proper.
But you like playing, so you can test this for us now.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: noss on September 02, 2014, 05:05:27 pm
Good!Say what I need to do I'll do.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 02, 2014, 08:35:11 pm
Good!Say what I need to do I'll do.

ehm, i just said what to do

what on your display is the latest version of "watchdog" on these DSOs, very powerful one. No more need for fight what so ever, simply insert flash drive with proper update files (system.up, hantek.up, emerg.do, etc). Unfortunately there is no documentation about and i have not (yet) reversed what/when happens.

In principle one have to download proper firmware (so for your model), decrypt it with proper password (in your case dso5000p) and encrypt it again with dsoduse (when trying system.up or hantek.up as recovery file name on flash) or 949307 (when using emerg.do as recovery file name on flash drive). And then of course rename that new encrypted firmwre file to one of these names above, copy to flash drive and then watch your DSO restroing itself.

you can of course as well connect via uart and delete /OurLanguages/russian.lan and /param/sav/r*
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: derf123 on September 03, 2014, 11:26:45 am
Hello all, new to forum. I  have a Hantek DSO5072P and have done the 200mhz hack, and removed the two 47pf caps that PL00 identified. However, I am unable to find those caps on the bottom side of the board that tinhead said should also be removed. Can anyone identify where these capacitors are located?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kallsop on September 03, 2014, 11:49:11 am

DSO5062B patched to DSO5202B, hw1007.

Downloaded the newest firmware from Hantek, dso5kb_func_dso5202b20140805.up dated 8/8/14. Put the .up file on the root of a 2GB USB stick formatted FAT32. The DSO upgrade doesn't progress at all, fails with code 0xff.

Is the Hantek firmware on their web site compatible with hardware 1007? If not, what is the latest and where do I get it? Why else would the upgrade fail?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 03, 2014, 02:22:48 pm

DSO5062B patched to DSO5202B, hw1007.

Downloaded the newest firmware from Hantek, dso5kb_func_dso5202b20140805.up dated 8/8/14. Put the .up file on the root of a 2GB USB stick formatted FAT32. The DSO upgrade doesn't progress at all, fails with code 0xff.

Is the Hantek firmware on their web site compatible with hardware 1007? If not, what is the latest and where do I get it? Why else would the upgrade fail?

no it's not, the last available firmware for hw1007 and DSO5000B is the one i patched, DSO-B-custom_2.06.3_130814.1.zip on my OneDrive (in fw, hw1007, custom).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 03, 2014, 02:59:23 pm
Hello all, new to forum. I  have a Hantek DSO5072P and have done the 200mhz hack, and removed the two 47pf caps that PL00 identified. However, I am unable to find those caps on the bottom side of the board that tinhead said should also be removed. Can anyone identify where these capacitors are located?

ohh shit, sorry  |O

On bottom there are of course no caps. This is because these ADCs (inputs) on bottom
are parallelly connected to ADCs (inputs) on top, so caps on top side are all they did.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: derf123 on September 03, 2014, 06:02:36 pm
Thanks tinhead. That is what it looked like to me. Thought maybe I was going nuts - again. :scared:
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kallsop on September 04, 2014, 02:31:05 am
no it's not, the last available firmware for hw1007 and DSO5000B is the one i patched, DSO-B-custom_2.06.3_130814.1.zip on my OneDrive (in fw, hw1007, custom).

Thanks. That is the version I  already had in the DSO, so no need to upgrade.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: The Doc on September 05, 2014, 12:33:29 pm
no, he probably missed my post. So yes, if you can made that backup for me.
Alright, I sent a link in a PM.
got them, thanks for support!

Sorry, I missed this. Thanks for sorting it j.sjolund.

I haven't had time to test mine yet but could someone confirm it is necessary to remove the 2 caps on a 5072P, as mentioned in a previous post?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vvmm on September 06, 2014, 02:16:22 pm
Hi!
I have never used a DSO, only Analog scopes. As I need to do a lot of digital work stuff lately I decided to purchase a DSO mainly for analyzing Serial data transmission (Serial, USB, I2C, SPI, VGA, Video), various noise, spikes and other signals (cursor measurements, FFT analysis etc.).
I have chosen Hantek DSO5072P taking the price into account, but compared to the 5062B variant I see that there is a storage memory difference of 40K vs 1M. If I purchase the one with 40K of memory will I regret it? Do you think I will need more? I understand that both of them are easily hackable to enable 200Mhz BW. (Can you add more memory?)
Also, does this model know to decode serial data automatically?
I saw in the pictures that there is a possibility to add an Ethernet jack. Did anyone tried adding it? What is it useful for?
Thanks!
Title: Logo extraction tool for DSO5000
Post by: zelea2 on September 09, 2014, 08:36:39 pm
Hi, I've written a little C program to extract and patch the logo in a DSO scope. The logo is stored in the kernel (directly into the framebuffer code) in mtd2. If you save the mtd2 with nanddump you can then extract, modify and patch back the start logo. mtd2 has no filesystem it is just the compressed kernel with a stub to decompress it in memory. The logo is stored as 16bit RGB565 values and one can binary patch the kernel without the need to recompile everything.

'dso-logo mtd2' will create logo.ppm which you can edit with the graphic program of your choice. My little program uses the fact that the first and last lines of the display are white to detect the position of the logo inside the binary. When I recompress the kernel I use 7z instead of gzip because it has a much better compression ratio and you can draw a lot of things on your logo. If you want to load JPEGs on your logo most likely the compressed size will overflow and the patch will fail. The kernel.gz is right at the end of mtd2 followed only by a short structure so there is plenty of space there but if it overflows I'll have to patch a few more addresses in the stub and I didn't want to change too many things.

'dso-logo -w mtd2' will encapsulate the modified logo.ppm and then you can use nandwrite (from your serial console) to overwrite the kernel partition.

I've updated my program for better frame detection because I've purchased since also a HDG2000B function generator and I've been able to change its boot screen too.

Can someone let me know what is the exact procedure to restore my scope in case something goes wrong?
I won't touch mtd0 and mtd1 so the bootloader will be intact. I also have plenty of JTAG tools, memory programmer etc. What's the restore procedure if I accidently botch the kernel (of course I have a full backup)?

 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Bumblebee on September 10, 2014, 07:57:33 pm
Hi together..
at first please apologize my english... ;)

I'm a new owner of a DSO5072p and i've hacked it like mentioned on first page.
The DSO is working wonderfull with 200Mhz Bandwith.
I've also removed the two capacitors (47pF) on the topside.

It is now all ok.

System Information like below:

Software 3.40.0 (140208)
hw 1000xffff8103

But now i find an new firmware on hantek site, and i asked myself if it is necessary to update the firmware?
And what is my benefit to do this?

Will i have new functions or new features? Better measurement?

I can't find any informations about the changings.
An must i install the Firmware for the DSO5202p after hacking it?

Regards Manuel
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 10, 2014, 09:33:01 pm
I can't find any informations about the changings.

there are no official informations, maybe other "P" model users found something.

An must i install the Firmware for the DSO5202p after hacking it?

better yes
Title: Re: Logo extraction tool for DSO5000
Post by: zelea2 on September 11, 2014, 01:42:46 am
Can someone let me know what is the exact procedure to restore my scope in case something goes wrong?
I won't touch mtd0 and mtd1 so the bootloader will be intact. I also have plenty of JTAG tools, memory programmer etc. What's the restore procedure if I accidently botch the kernel (of course I have a full backup)?

Until I figure out how to do a JTAG dump and restore is it possible to boot an alternative kernel from the bootloader?
At 'vivi' prompt is it possible to load my patched kernel in a zone of FFs on mtd3 (ignoring the UBI filesystem) or somewhere in RAM via xmodem and then use the 'boot' command to load this kernel instead to test it.

Where can I find the pinout of the JTAG connector for this scope (a very recent model DO5000B)? I've searched this thread and I haven't been able to find this info.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mike105105 on September 11, 2014, 03:57:24 am
Hey guys.  I ordered myself a new 5102b and was just wondering if there are any hardware mods that I need to do.  I'm excited for this thing to be delivered, I've wanted a new scope for a long time because my old tek 422 just doesn't cut it for me these days.


Thanks,
Mike
Title: Re: Logo extraction tool for DSO5000
Post by: zelea2 on September 12, 2014, 12:10:59 pm
The logo is stored as 16bit RGB565 values and one can binary patch the kernel without the need to recompile everything.

I've discovered that my bootloader allows kernel testing over USB. You can see the new menu in this serial capture.
Code: [Select]
##### EmbedSky BIOS for SKY2416/TQ2416 #####
This Board: SDRAM is 64MB; LCD display size is: 800 X 480
Press Space key to Download Mode.!
SD:File System init failed!

##### Boot for SKY2416/TQ2416 Main Menu #####
#####     EmbedSky USB download mode     #####

[1] Download u-boot or STEPLDR.nb1 or other bootloader to Nand Flash
[2] Download Eboot (eboot.nb0) to Nand Flash
[3] Download Linux Kernel (zImage.bin) to Nand Flash
[4] Download LOGO Picture (logo.bin) to Nand  Flash
[5] Download UBIFS image (root.ubi) to Nand Flash
[6] Download YAFFS image (root.bin) to Nand Flash
[7] Download Program to SDRAM and Run it
[8] Boot the system
[9] Format the Nand Flash
[0] Set the boot parameters
[a] Download User Program
[n] Enter TFTP download mode menu
[r] Reboot u-boot
[t] Test Linux Image (zImage)
Enter your selection: 0

##### Parameter Menu #####
[1] Set NFS boot parameter
[2] Set Yaffs boot parameter for Standard Linux
[3] Set UBIfs boot parameter for Standard Linux
[4] Set parameter
[5] View the parameters
[d] Delete parameter
[s] Save the parameters to Nand Flash
[q] Return main Menu
Enter your selection: 5
Name(enter to view all paramters):
bootargs=noinitrd ubi.mtd=3 root=ubi0:rootfs rootfstype=ubifs init=/linuxrc console=ttySAC0 mem=64M
bootcmd=nand read.jffs2 c0008000 kernel;bootm c0008000
bootdelay=1
baudrate=115200
ethaddr=10:23:45:67:89:ab
ipaddr=192.168.1.6
serverip=192.168.1.8
gatewayip=192.168.1.2
netmask=255.255.255.0
stdin=serial
stdout=serial
stderr=serial
ethact=dm9000
mtdids=nand0=nandflash0
mtdparts=mtdparts=nandflash0:512k@0(bios),512k(params),2048K(logo),4m(kernel),-(root)
partition=nand0,0
mtddevnum=0
mtddevname=bios

##### Boot for SKY2416/TQ2416 Main Menu #####
#####     EmbedSky USB download mode     #####

[1] Download u-boot or STEPLDR.nb1 or other bootloader to Nand Flash
[2] Download Eboot (eboot.nb0) to Nand Flash
[3] Download Linux Kernel (zImage.bin) to Nand Flash
[4] Download LOGO Picture (logo.bin) to Nand  Flash
[5] Download UBIFS image (root.ubi) to Nand Flash
[6] Download YAFFS image (root.bin) to Nand Flash
[7] Download Program to SDRAM and Run it
[8] Boot the system
[9] Format the Nand Flash
[0] Set the boot parameters
[a] Download User Program
[n] Enter TFTP download mode menu
[r] Reboot u-boot
[t] Test Linux Image (zImage)
Enter your selection: t
Now, Please connect to USB cable and USB interface!
Once the kernel is tested you may also flash it via the same method.
There is a dnw utility for linux too:
Code: [Select]
git clone https://github.com/changbindu/dnw-linux.gitEnter bootloader by pressing space in console and then use dnw and a USB cable to transfer the new kernel.

So my little C program works and this is my new logo screen of my scope.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on September 15, 2014, 03:52:20 am
Great, zelea2.
I can use this method to develop my own logo! :clap:
Title: Re: Logo extraction tool for DSO5000
Post by: zelea2 on September 16, 2014, 01:44:31 am
Where can I find the pinout of the JTAG connector for this scope (a very recent model DO5000B)? I've searched this thread and I haven't been able to find this info.

I don't understand why nobody bothers to reply me. Common guys, you've been playing with this scope for years, I've only had mine for 2 weeks.

Meanwhile I've made some annotated pictures with the JTAG pinouts. I've soldered headers in place for all the connectors. Beware the ARM JTAG and Serial use 2mm spaced headers. Soldering the ground pins of these was challenging because of the massive ground-planes I had to crank up my soldering iron temperature. These headers will allow me to plug in connectors instead of soldering wires directly but I'm still waiting for a 10pin 2mm cable to propely play with JTAG.

Luckily this Samsung SoC is directly supported by openocd so you'll need to start the program as
Code: [Select]
openocd -f target/samsung_s3c2440.cfg
telnet localhost 4444

If you need a cheap JTAG adapter you can buy a Segger clone for some 15$ and either reflash its serial numer (I use 015600xx on mine) or patch the Segger driver to bypass the check for clones.
Title: Re: Logo extraction tool for DSO5000
Post by: Dave_S on September 16, 2014, 02:21:19 am
Beware the ARM JTAG and Serial use 2mm spaced headers.

FWIW, apparently not all serial port connection points come unpopulated.  On my Hantek DSO5102P the male headers were already soldered in place and all a I had to do was plug an RC modeling servo cable onto the header to make a convenient place method to connect to the serial port without opening the case.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RavenSpy on September 17, 2014, 12:03:56 pm
Hello everybody! This is my first post!! but i m not a newbie in EEVBlog. :-BROKE
I bought a Hantek DSO5072P, and i do the BW hack and i desoldered the two capacitors for full hack.
But now i want to install LAN and SD card if it can support.
Then i read ( or die traying) all the pages of this post, and thats my conclusion.
For LAN i need:
- DM9000AEP (48LQFP)
- 25Mhz quarz crystal
- H1102NL
- RJ45 compatible jack
But what about SD card, i dont see anything in this post ( or im blind).
Some one can confirm my conclusions?
Thx in advice
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 20, 2014, 03:20:19 pm
I decided to purchase a DSO mainly for analyzing Serial data transmission (Serial, USB, I2C, SPI, VGA, Video), various noise, spikes and other signals (cursor measurements, FFT analysis etc.).
...
Also, does this model know to decode serial data automatically?
...
I have chosen Hantek DSO5072P

no, none of Hantek DSOs is capable of any protocol decoding (not yet, and no iea when). So wen you need it,
you choosed wrong manufacturer

I saw in the pictures that there is a possibility to add an Ethernet jack. Did anyone tried adding it? What is it useful for?
currently, on "P" models, only for data transmitions
Title: Re: Logo extraction tool for DSO5000
Post by: tinhead on September 20, 2014, 03:22:33 pm
I've discovered that my bootloader allows kernel testing over USB. I've attached the serial capture and you can see the new menu. Once the kernel is tested you may also flash it via the same method.
There is a dnw utility for linux too:
Code: [Select]
git clone https://github.com/changbindu/dnw-linux.gitEnter bootloader by pressing space in console and then use dnw and a USB cable to transfer the new kernel.

right, this is linux version of dnw.exe tool for windows, capable of doing exact the same things.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 20, 2014, 03:26:07 pm
I don't understand why nobody bothers to reply me. Common guys, you've been playing with this scope for years,
I've only had mine for 2 weeks.

well, probably because most ppl is using different models and simply don't know anything about JTAG on these DSOs.

Regards the JTAG pinout, i thought i said that already, this is FreindlyArm S3C24xx pinout. On older models
it was regular ARM pinout, now they changed it to save some space.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 24, 2014, 10:03:43 am
there seems to be new firmware for DSO5000B, DSO5000BM, DSO5000BMV and DSO1000B models on the website.

EDIT: DSO5000B, DSO5000BM, DSO5000BMV for hw101 (fw 3.xx), DSO1000B for hw1001 (fw 2.01)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ElektroQuark on September 24, 2014, 10:14:24 am
Are they valid for all hardware versions?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mike105105 on October 02, 2014, 05:12:19 pm
There seems to be a bug in the new firmware.  Using the pass/fail the unit freezes when it catches a fail and needs to be rebooted.


Mike
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: NoNaMeXP on October 04, 2014, 09:24:56 am
I just bought a DSO 2 weeks ago   :-+

brand new From local distribution with 3 Year Warranty :-+

Model DSO5062BMT      (T For  Thai language Menu  :P )
SW Ver. 3.30.0(140902.0)
HW Ver. 1010x5555830F
S/N  016XXXXT

Question is    Is normal or not for  5062BM  can set SEC/DIV down to  2ns , i meen  out of a box no hack no modify

See Att   For 2ns in Working
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 04, 2014, 12:07:01 pm
yes, it seems so that firmware produced in 2014 have 2ns/DIV enabled by default.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vvmm on October 05, 2014, 06:33:41 am
What do you recommend for me to buy between hantek dso5072p and dso5062b? I understand that B model has more sample memory, but P model has newer hardware and software. Is the software on P model better?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 05, 2014, 08:02:31 am
What do you recommend for me to buy between hantek dso5072p and dso5062b? I understand that B model has more sample memory, but P model has newer hardware and software. Is the software on P model better?

no, this is not anymore the case, currently P and B models does have exact the same SoC and FPGA. Due "more sample memory" the B models does have of course additionally external memory and CPLD necessary to access/control the memory.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vvmm on October 05, 2014, 09:32:24 am
Thank you for reply. Do they both run the same Linux kernel? (3.2) On the website it is stated that the B model runs 2.6.

I just looked at the power supply in the pictures. What voltages does it provide? I wonde if I could make the scope portable with some internal Li-Ion batteries.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 05, 2014, 11:24:18 am
Thank you for reply. Do they both run the same Linux kernel? (3.2) On the website it is stated that the B model runs 2.6.

the website has been not updated :\

I just looked at the power supply in the pictures. What voltages does it provide? I wonde if I could make the scope portable with some internal Li-Ion batteries.

afaik the power supply is the same as in hw1007, so please check my schematic of hw1007 on my 1drv
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jeff_jordan on October 05, 2014, 05:10:32 pm
First: a big thank you @ tinhead for sharhing his knowledge about the DSO's here at this thread !
It' follows the old ham*) spirit thats going to disappear more and more...
 :-+

Until now, I tried to read as much postings as I can from this giant thread, because my old Tektronix 453 simply is worn out and I just ordered an DSO5072P as replacement; and of course, I'm looking forward to modify it using the described bandwidth modifications.

As far as I've encountered, I've to remove the two 47pF capacitors that limits the bandwidth (as described by pl00) and "simply" apply the hack by renaming the folder /dst1062b to /dst1202b... or just use the tool provided by McCurrent.

I've also read that uh9Lab flashed the 5102P firmware to his DSO5072P. So my question is: when I try to flash the actual DSO5102P or DSO5202P (download now fixed @ hantek's website), do I still have to do the bw-hack (renaming the folder ?) or does the scope simply thinks that it's an real DSO5202P with full bandwidth ?
And: will the DSO5202P firmware provide more features than the model 5072P one ? At least I expect another boot logo, but will there be more ?

thanks 4 reading !
jeff_jordan

*) here I don't mean the "ham" that you can eat !
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 05, 2014, 05:22:16 pm
do I still have to do the bw-hack (renaming the folder ?)
no

or does the scope simply thinks that it's an real DSO5202P with full bandwidth ?
yes

And: will the DSO5202P firmware provide more features than the model 5072P one ?

afaik no (because Hantek enabled 2ns/DI for all models)

At least I expect another boot logo, but will there be more ?
no, bootlogo is different thing:

https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg510337/#msg510337 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg510337/#msg510337)
https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg511719/#msg511719 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg511719/#msg511719)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jeff_jordan on October 05, 2014, 10:14:44 pm
Quote
no, bootlogo is different thing:

sorry, I tried to understand how this works, but I'm stuck, because I'm not familiar with all those "JTAG" and u-boot -stuff.

As far as I think I understood:

1. one can make a backup with your dso5kp_backuptool.up on a fat32 formatted usb-stick.

2. then you'll get a kernel.bin (from nanddump -o -b -l 0x400000 -f /mnt/udisk/dump/kernel.bin /dev/mtd2) inside the /dump directory which contains the complete nand content for that partition.

3. then, with zela2's little program, the logo.ppm could be extracted and after editing with an available graphic program it'll be reassembled back into the kernel.bin using it with the -w command (dso-logo -w mtd2). While I assume, that the size of the mtd2-partition file (kernel.bin ?) will be identic to it's genuine size.

4. so now I'm faced with the problem to get back the mtd2 partition (e.g. the kernel.bin) into the nand.

... now I'm stuck because that JTAG thing comes into play.
I assume JTAG is a method and/or a tool & interface for in circuit programming provided with the development-kit for the ARM processor architecture ?

Isn't it possible to restore this partition directly from the usb-stick (with nand erase and nand write, similar to the nanddump procedure ?) ? There's always the JTAG method mentioned.

sorry for these dull questions, but I'm neither familiar with the ARM processor stuff nor with linux...

----- update -----

Another additional question: when the two 47pF capacitors near the AD-circuits are removed to get the full bandwidth, will this be visible by an increased noise during measuring, or loss of accuracy ?

jeff



Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RavenSpy on October 10, 2014, 10:37:52 am
Hello, i install all the things for LAN comunication, but scope don't work. Someone have any idea?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 10, 2014, 11:05:08 am
Hello, i install all the things for LAN comunication, but scope don't work. Someone have any idea?

even two :)

add two 22pf caps t the crystal (i assume you soldered 25MHz crystal?) and remove that 0R resistor.

(https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=112581;image)

With this resistor one don't need crystal, in the theory, when FPGA is producing clock (which must not be the case in the current hardware / firmware). Easier, and always working, is when one use crystal, but then that resistor need to be removed and of course two caps need to be added to crystal as well.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RavenSpy on October 10, 2014, 11:09:48 am
Hello, i install all the things for LAN comunication, but scope don't work. Someone have any idea?

even two :)

add two 22pf caps t the crystal (i assume you soldered 25MHz crystal?) and remove that 0R resistor.

(https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=112581;image)

With this resistor one don't need crystal, in the theory, when FPGA is producing clock (which must not be the case in the current hardware / firmware). Easier, and always working, is when one use crystal, but then that resistor need to be removed and of course two caps need to be added to crystal as well.
.
Ok, thx for fast reponse, i will try now!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RavenSpy on October 10, 2014, 11:30:15 am
mmm not, still doesn't work =( and microSD the same XD
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 10, 2014, 11:31:50 am
mmm not, still doesn't work =( and microSD the same XD

you might as well check this

https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg467313/#msg467313 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg467313/#msg467313)

before you change anything, make a back of the /i2c.log file. Inside that file you will find options you your models, you will have to creat a new EEPROM licensing (write HDVersion.set button) , use all values from your current i2c.log but change the "lan version" from 0 to 1. For SD then "SD support" from 0 to 1.

Check the log files while booting, not that the linux is not starting any driver :) then you will wait forever for netwrok
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RavenSpy on October 10, 2014, 11:33:26 am
you might as well check this

https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg467313/#msg467313 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg467313/#msg467313)

before you change anything, make a back of the /i2c.log file. Inside that file you will find options you your models, you will have to creat a new EEPROM licensing (write HDVersion.set button) , use all values from your current i2c.log but change the "lan version" from 0 to 1.

LOL, i think that's the problem XDD thx Tinhead, you are the master of universe !
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RavenSpy on October 10, 2014, 12:08:45 pm
Do it, SD works, but LAN no
would have to be illuminated leds of ethernet?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 10, 2014, 12:11:23 pm
yes, when you plug a cable.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RavenSpy on October 10, 2014, 12:13:34 pm
yes, when you plug a cable.
They dont do, then i think its something else like CHIP
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RavenSpy on October 10, 2014, 01:38:31 pm
Nothing to do, i chek again the components and all has good soldering. I think its a defective chip or i burned them
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: richardbb on October 10, 2014, 04:14:58 pm
Nothing to do, i chek again the components and all has good soldering. I think its a defective chip or i burned them

on my 5072p I need to unload/reload the LAN driver for it to work:

Code: [Select]
dm9000 Ethernet Driver, V1.31
dm9000 dm9000: read wrong id 0xffffffff
dm9000 dm9000: wrong id: 0xffffffff
dm9000 dm9000: not found (-19).

root@hantek:~# rmmod dm9000
root@hantek:~# modprobe dm9000

dm9000 Ethernet Driver, V1.31
dm9000 dm9000: eth%d: Invalid ethernet MAC address. Please set using ifconfig
eth0: dm9000a at c49e4300,c49e6308 IRQ 48 MAC: c6:fe:7c:c9:e1:c4 (random)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RavenSpy on October 10, 2014, 05:19:45 pm
Nothing to do, i chek again the components and all has good soldering. I think its a defective chip or i burned them

on my 5072p I need to unload/reload the LAN driver for it to work:

Code: [Select]
dm9000 Ethernet Driver, V1.31
dm9000 dm9000: read wrong id 0xffffffff
dm9000 dm9000: wrong id: 0xffffffff
dm9000 dm9000: not found (-19).

root@hantek:~# rmmod dm9000
root@hantek:~# modprobe dm9000

dm9000 Ethernet Driver, V1.31
dm9000 dm9000: eth%d: Invalid ethernet MAC address. Please set using ifconfig
eth0: dm9000a at c49e4300,c49e6308 IRQ 48 MAC: c6:fe:7c:c9:e1:c4 (random)

Thx i will try it
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: btesser on October 12, 2014, 11:04:29 am
I recently got a dso5072P which I ordered off ebay.  Attempted to do the hack and I soldered 4 posts to the uart port (the one right next to the usb port).  The posts were a tiny bit large so I had to force them in a bit (they are about arduino sized pins).  When I tried to power the dso back on, however, I got absolutely nothing showing up on the display or uart.  I disconnected everything, desoldered the pins, pulled the posts out.pulled out a multimeter.  When I checked ground/power on the uart pins, my multimeter showed a very lower resistance I believe 64ohms(my reading of the multimeter may be wrong.  With multimeter set to resistance 200 it showed 64 on the sy creen).  I made sure I really cleaned the board of solder well where I had added the pins using a solder sucker and solder wick.  No matter what I do I'm getting the same reading on my multimeter.  Is it possible I bricked one of the inner layers of the board by forcing the pin in?  I tried putting the positive multimeter probe on the uart positive and the negative probe on grounds in different areas of the board and got the same reading.  Uart ground to other grounds reads 0.

Does anyone have any ideas?  Right now I'm bugging out a bit because if I bricked my dso I just threw about $300 down the drain  :-( :-\  Please help
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RavenSpy on October 12, 2014, 10:35:47 pm
Hello i tried your metod, richardbb, but driver isn't installed.
I atach my boot log.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: richardbb on October 13, 2014, 02:27:57 pm
The driver doesn't seem to be getting loaded at all. Try running insmod /dso/drivers/dm9000.ko and see if anything shows up in the log
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RavenSpy on October 13, 2014, 07:15:10 pm
The driver doesn't seem to be getting loaded at all. Try running insmod /dso/drivers/dm9000.ko and see if anything shows up in the log
Hello, do it, this is the output:
Code: [Select]
[root@Hantek ~]# 
[root@Hantek ~]# insmod /dso/drivers/dm9000.ko
dm9000 Ethernet Driver, V1.31
dm9000 dm9000: eth%d: Invalid ethernet MAC address. Please set using ifconfig
eth0: dm9000a at c4976300,c4978308 IRQ 48 MAC: ba:97:89:4e:f1:22 (random)
[root@Hantek ~]# ifconfig -a
eth0      Link encap:Ethernet  HWaddr BA:97:89:4E:F1:22 
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
          Interrupt:48 Base address:0x6300

lo        Link encap:Local Loopback 
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)


But leds still doesn't turn on... =(
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: richardbb on October 14, 2014, 03:56:17 pm
Looks good!

You need to bring up the interface (using ifconfig + IP/subnet etc.) before you see any activity LEDs. I think you have to do all this manually, as far as I know the standard Hantek software doesn't support any kind of network stuff so it's only useful for custom work
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: oneeye on October 15, 2014, 09:57:01 am
Hi guys
          I purchased a Hanek DSO5072P back in early September with the initial idea of using tinhead's excellent hack to 'upgrade' it to 200Hz, but as 'Lady Luck' was never a regular visitor, I usually get 'Sod's Law' (If anything can go wrong, it will go wrong), I decided NOT to attempt the hack. 
   It has worked fine up until yesterday (14 October), when developed a strange problem: The voltages are all reading far too high (see attached screen shot of 'Probe test').
   I have been searching the tread (nothing relevant) and reading (nothing found).
   I have done no 'Hacks' or software or firmware upgrades and the scope was working fine until Yesterday.
   The only thing I have done, is to download a 'backup' using Tinheads excellent software via the front USB, hence the 'upgrade count' of one on 'System Info' screen shot.
    The 'backup' was done when first got the scope and it has worked OK until now. As I don't know if it's a software or hardware problem, I haven't attempted to 'reinstall' the 'backup', for fear of making things worse.
   I've tried 'self calibration' and 'Default Setup', but the problem persists unchanged.
   This is getting weirder, now CH1 Freq. is acting up: It's jittering between 1KHz and 2KHz, even though the waveform from the Probe check test point is stable. Only on CH1, CH2 is stable at 1KHz, but still reads 53.6V Pk-Pk. Etc.
   Moving through the Secs/Div also gives some very odd frequency readings on CH1, CH2 is OK.
   If I turn up Volts/Div on either channel, the second step reduces Pk-Pk to 26.6V, on the third step, a relay clicks and I get 9.76V. One more step gives another relay click and Pk-Pk drops to 4.64V, a further step drops to 2.1V. Of course the waveform top disappears off the screen with the first step turn.
   Turning the Volts/Div down from normal square wave display, just drops to a 'flat line' then nothing changes with further steps downwards (no relay clicks).
   I don't want to return under warranty, as I purchased from a supplier in China, plus the Spanish Mafia (Government) hit me with 'import duty' of almost €50 (Euro's), and they would probably do it again. As a pensioner living on a basic English State Pension, expenses like those above I cant afford, plus the postage from Spain to China is also 'exorbitant'.
   So, any help would be much appreciated.

   oneeye
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: oneeye on October 15, 2014, 12:25:21 pm
OK Guys, I think I've solved it.
I was reading through page 158 when a came across a reply from Rosaharn to Pezibaer about 'Probe problems', and I thought 'I haven't tried the other probe'.
I'm one happy bunny, all is now back to normal (See attached screen shot).
So it was just a 'bad' probe.
Well it may help someone with a similar problem, so I will leave the post in place.

Thanks guys and especially tinhead for a fantastic thread, if it were up to me I'd nominate him for the 'Nobel Prize'.

  oneeye
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: RavenSpy on October 15, 2014, 01:35:20 pm
Looks good!

You need to bring up the interface (using ifconfig + IP/subnet etc.) before you see any activity LEDs. I think you have to do all this manually, as far as I know the standard Hantek software doesn't support any kind of network stuff so it's only useful for custom work
First richard thx fpe your help.
But still nothing, i do all with ifconfig, ip, subnet, mask, gateway but nothing... :(
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: j.sjolund on October 15, 2014, 07:08:43 pm
OK Guys, I think I've solved it.
I was reading through page 158 when a came across a reply from Rosaharn to Pezibaer about 'Probe problems', and I thought 'I haven't tried the other probe'.
I'm one happy bunny, all is now back to normal (See attached screen shot).
So it was just a 'bad' probe.
Well it may help someone with a similar problem, so I will leave the post in place.

Thanks guys and especially tinhead for a fantastic thread, if it were up to me I'd nominate him for the 'Nobel Prize'.

  oneeye
Judging by the screenshots, it looks like you switched the probe attenuation to X1, from the default X10. Try moving the switch on the handle of the "bad" probe to X10 and it should work normally.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: oneeye on October 16, 2014, 08:53:02 am
   
Quote
    OK Guys, I think I've solved it.
    I was reading through page 158 when a came across a reply from Rosaharn to Pezibaer about 'Probe problems', and I thought 'I haven't tried the other probe'.
    I'm one happy bunny, all is now back to normal (See attached screen shot).
    So it was just a 'bad' probe.
    Well it may help someone with a similar problem, so I will leave the post in place.

    Thanks guys and especially tinhead for a fantastic thread, if it were up to me I'd nominate him for the 'Nobel Prize'.

      oneeye

Judging by the screenshots, it looks like you switched the probe attenuation to X1, from the default X10. Try moving the switch on the handle of the "bad" probe to X10 and it should work normally.


Hey J.Sjolund
                      You were right. I feel such a 'pillock' for not checking, but on the 'bad' probe, it's not much of a switch, it just slides freely about, so I guess I shouldn't feel too bad.
Thanks anyway for the heads up and the quick response.

   oneeye
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: brainwash on October 29, 2014, 09:15:02 pm
HW1007 with DSO-B-custom_2.06.3_130814 firmware here.

I've looked really really carefully and indeed there seems to be a DPO-like display with about 2 or 3 intensities. There should be 4, but anyway :) I've noticed that persistence must be set to off (even though 0.2s seems usable as well) AND the intensity of the beam to ~8 out of 15 AND the display refresh rate set to auto.
Is there any way to improve this 'DPO' mode and keep the 50Hz update rate? I mean, if it's doing 2000 wfm/s then 40 wfms should be enough for 4 intensity gradings. The reason I'm asking is that the scope is more responsive in 50Hz mode while in auto it randomly 'freezes' for variable durations (50-400ms) which is kind of annoying.


The utility menu has some filters - high, low, bandpass, stop. Where are these used? I cannot see any effect.


Does anyone have a workflow for capturing sporadic serial data? I'm looking for a replacement for segmented memory here. Theoretically there's this wave menu that with the right trigger should provide this, but is anyone using the scope for studying longer streams of data?


Is anyone using the scope through a computer and in what way? I would like to know if there is some solution to do long-term logging or extracting digital data from a waveform. I'm curios to see if there are other use-cases as well, like sweeping at the same time with a power supply.
Last time I tried to the Windows application (~2 years ago) it was lagging a lot, like it was using serial over USB1.1


My scope is pretty close to my power supply and at one point it had <5cm from it. I've noticed that the scope got slower but the air did not seem hot, just the usual warmth. Is there anything like a thermal protection where it slows down?
Restarting the scope did not cure the issue, so it's probably not a software bug.


Last question as this is getting too long: has anyone used the scope with Raspberry PI/BeagleBone/Banana Pi/... ? If yes, for what and with what software?

Thanks
Title: Re: Help please!DSO5102P
Post by: tinhead on October 31, 2014, 04:19:27 pm
Help please, ostsillograf , my son wanted to install Russian language using DSO-USB-Tool, tab Read / Write File (F4) in the window 'Filename' bottom put 'Russian.lan' and hit Write. Now all the time breaks USB connection with the program 'DigitalScope', 'default setup' does not reset the color. Can someone give bekup? Help please!

color can not be reset to default.

Is the oscilloscope working or not working anymore?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 01, 2014, 04:44:44 pm
sorry, but i can't communicate like that, to be able to repair something we first have to be able to talk to each other somehow. Post error message in your native language, maybe here is someone who can help you.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: TESSET on November 02, 2014, 05:38:33 pm
sorry, but i can't communicate like that, to be able to repair something we first have to be able to talk to each other somehow. Post error message in your native language, maybe here is someone who can help you.
Great forum  :-+, if you read the first page, you learn a lot. tinhead, thank you!
Title: Re: Logo extraction tool for DSO5000
Post by: Whistle on November 03, 2014, 01:23:26 pm
The logo is stored as 16bit RGB565 values and one can binary patch the kernel without the need to recompile everything.

I've discovered that my bootloader allows kernel testing over USB. You can see the new menu in this serial capture.
Code: [Select]
##### EmbedSky BIOS for SKY2416/TQ2416 #####
This Board: SDRAM is 64MB; LCD display size is: 800 X 480
Press Space key to Download Mode.!
SD:File System init failed!

##### Boot for SKY2416/TQ2416 Main Menu #####
#####     EmbedSky USB download mode     #####

[1] Download u-boot or STEPLDR.nb1 or other bootloader to Nand Flash
[2] Download Eboot (eboot.nb0) to Nand Flash
[3] Download Linux Kernel (zImage.bin) to Nand Flash
[4] Download LOGO Picture (logo.bin) to Nand  Flash
[5] Download UBIFS image (root.ubi) to Nand Flash
[6] Download YAFFS image (root.bin) to Nand Flash
[7] Download Program to SDRAM and Run it
[8] Boot the system
[9] Format the Nand Flash
[0] Set the boot parameters
[a] Download User Program
[n] Enter TFTP download mode menu
[r] Reboot u-boot
[t] Test Linux Image (zImage)
Enter your selection: 0

##### Parameter Menu #####
[1] Set NFS boot parameter
[2] Set Yaffs boot parameter for Standard Linux
[3] Set UBIfs boot parameter for Standard Linux
[4] Set parameter
[5] View the parameters
[d] Delete parameter
[s] Save the parameters to Nand Flash
[q] Return main Menu
Enter your selection: 5
Name(enter to view all paramters):
bootargs=noinitrd ubi.mtd=3 root=ubi0:rootfs rootfstype=ubifs init=/linuxrc console=ttySAC0 mem=64M
bootcmd=nand read.jffs2 c0008000 kernel;bootm c0008000
bootdelay=1
baudrate=115200
ethaddr=10:23:45:67:89:ab
ipaddr=192.168.1.6
serverip=192.168.1.8
gatewayip=192.168.1.2
netmask=255.255.255.0
stdin=serial
stdout=serial
stderr=serial
ethact=dm9000
mtdids=nand0=nandflash0
mtdparts=mtdparts=nandflash0:512k@0(bios),512k(params),2048K(logo),4m(kernel),-(root)
partition=nand0,0
mtddevnum=0
mtddevname=bios

##### Boot for SKY2416/TQ2416 Main Menu #####
#####     EmbedSky USB download mode     #####

[1] Download u-boot or STEPLDR.nb1 or other bootloader to Nand Flash
[2] Download Eboot (eboot.nb0) to Nand Flash
[3] Download Linux Kernel (zImage.bin) to Nand Flash
[4] Download LOGO Picture (logo.bin) to Nand  Flash
[5] Download UBIFS image (root.ubi) to Nand Flash
[6] Download YAFFS image (root.bin) to Nand Flash
[7] Download Program to SDRAM and Run it
[8] Boot the system
[9] Format the Nand Flash
[0] Set the boot parameters
[a] Download User Program
[n] Enter TFTP download mode menu
[r] Reboot u-boot
[t] Test Linux Image (zImage)
Enter your selection: t
Now, Please connect to USB cable and USB interface!
Once the kernel is tested you may also flash it via the same method.
There is a dnw utility for linux too:
Code: [Select]
git clone https://github.com/changbindu/dnw-linux.gitEnter bootloader by pressing space in console and then use dnw and a USB cable to transfer the new kernel.

So my little C program works and this is my new logo screen of my scope.
Thanks for sharing. I tested your program and successfully change the logo in my Voltcraft DSO-1602D (sn > 15000)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 07, 2014, 07:32:25 pm
Hantek just released GPL sources for Kernel/drivers and some test tools for Hantek HDG AWG,
but they contain as well sources for Handhelds and benchtop Hantek DSOs, so go and grab it
if you wish to hack something ! This are the best Hantek GPL sources ever, and yes, they only
for gears based on Samsung S3C2416 SoC.

http://www.hantek.com/download/HDG.zip (http://www.hantek.com/download/HDG.zip)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Macbeth on November 08, 2014, 01:05:40 am
Hantek just released GPL sources for Kernel/drivers and some test tools for Hantek HDG AWG,
but they contain as well sources for Handhelds and benchtop Hantek DSOs, so go and grab it
if you wish to hack something ! This are the best Hantek GPL sources ever, and yes, they only
for gears based on Samsung S3C2416 SoC.

http://www.hantek.com/download/HDG.zip (http://www.hantek.com/download/HDG.zip)
Oh wow! I'm downloading now - I want to make my MSO5102D actually do something useful with its logic analyzer. Having the source I'm sure I could implement protocol decoding, even if it's only over the USB link to the PC. Also making it USB SCPI compliant won't hurt either.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: robots on November 09, 2014, 07:32:47 pm

Oh wow! I'm downloading now - I want to make my MSO5102D actually do something useful with its logic analyzer. Having the source I'm sure I could implement protocol decoding, even if it's only over the USB link to the PC. Also making it USB SCPI compliant won't hurt either.

It would probably make sense to implement the "data transfer protocol" into sigrok http://sigrok.org/. (http://sigrok.org/.) There are lot of protocol decoding routines already written.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: cosmos on November 09, 2014, 08:11:52 pm
for those interested:
Hantek file for 5102D apparently dated november 8th 2014.

File lives at this link for 7 days.
http://wikisend.com/download/177122/dst1kb_func_hantek_mso5102d_20141108.0.up (http://wikisend.com/download/177122/dst1kb_func_hantek_mso5102d_20141108.0.up)

Note: I have not tested this file and have no idea if it works (I have long ago given up on Hantek being serious about anything)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 09, 2014, 10:04:20 pm
where you got that file? Nice to see that they still have 2.07.1 version (which is for the MSOs with S3C2440 SoC only)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: claudeR on November 10, 2014, 03:27:55 pm
Hi everybody, this is my first post I have been reading this very long thread and found it very interesting, I got myself a Hantek MSO5202D and I am generally very happy with it. I am not sure if this is the right place to ask this question, if not could someone direct me to the right place.  I would like to write a program to access the oscilloscope under Windows but can seems to find a way to access the driver. I have littler experience with accessing drivers (only did it on a parallel port) but when it comes to USB I have no clues. I read the Das Oszi web pages with the protocol which seems simple enough but I tried using the windows CreateFile to open the device \\?\usb#vid_049f&pid_505a#5&b877f8b&0&2#{a5dcbf10-6530-11d2-901f-00c04fb951ed} which is the Hantek oscillocope and it returns a valid file HANDLE however any WriteFile or ReadFile return an invalid operation (error code 1 from GetLastError()) Any clues on how to do this?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 10, 2014, 03:41:43 pm
Hi everybody, this is my first post I have been reading this very long thread and found it very interesting, I got myself a Hantek MSO5202D and I am generally very happy with it. I am not sure if this is the right place to ask this question, if not could someone direct me to the right place.  I would like to write a program to access the oscilloscope under Windows but can seems to find a way to access the driver. I have littler experience with accessing drivers (only did it on a parallel port) but when it comes to USB I have no clues. I read the Das Oszi web pages with the protocol which seems simple enough but I tried using the windows CreateFile to open the device \\?\usb#vid_049f&pid_505a#5&b877f8b&0&2#{a5dcbf10-6530-11d2-901f-00c04fb951ed} which is the Hantek oscillocope and it returns a valid file HANDLE however any WriteFile or ReadFile return an invalid operation (error code 1 from GetLastError()) Any clues on how to do this?

there is the Bandwidth Changer tool, the archive does include windows sources, so you can learn from that how to access the driver

https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg91877/ (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg91877/)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: claudeR on November 11, 2014, 01:50:13 am
Thanks, guys this is exactly what I was looking for. Modified my test software and now I can read the scope status (the current status of all settings). I noticed something unusual, it seems that when a knob is turned (the Ch1 Volts/div ) the status does not seems to change right away, I have to request several times before the value changes. I will have to confirm that the data request is sent and that the reply is received using a USB protocol sniffer to confirm, but if its true it might explain why the software supplied is so slow!!!

Again thank you very much.

ClaudeR
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 11, 2014, 06:38:59 am

Again thank you very much.


you welcome, and bte here is the protocol described (in case you missed that link)

http://www.mikrocontroller.net/articles/Hantek_Protokoll (http://www.mikrocontroller.net/articles/Hantek_Protokoll)

for MSOs there are few new values, they not yet added into that article
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: claudeR on November 12, 2014, 07:56:11 pm
Thanks, I already new about the link an so far I have been able to extract the protocol.inf file from the scope which has entries for the LA at the end. However it seems that although you can control the scope with the protocol described in the link there does not seems to be a way to read the measured values. For example if I want to read the signal amplitude using the VPP measurement of the scope, it seems like the measured value is not available anywhere...

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 12, 2014, 09:39:45 pm
the measured value is only available if channel is active and acquisition running (not in stop mode). Another thing is, the measured value is no gated, nor based on full buffer vaules bit only on what on screen. One can made it much better, when you read the whole sampled data, you can then run measurments on your own and choose how the measurment have to be taken (frame - so what on display, gated - so between two cursors, full buffer based). And of course once the data has been read you don't have to care about DSO status (stopped, running)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: claudeR on November 13, 2014, 11:43:42 am
I understand this but there does not seems to be a place as indicated in the protocol file where the readings would be stored to look at and performing my own measurements is much more work than reading the value from the scope if it is possible.  The communication protocol described in the link does not seem to contain a command to read measured values either. There is only MEASURE-ITEMx-SRC (the channel where the measurement is taken), and MEASURE-ITEMx (the type of measurement to be made) if the value is really available could you indicate where would I find it before I start coding all kind of complex waveform buffer analysis. Here is a copy of the protocol.inf file as read from my scope if it can help. Thank you.

[TOTAL]  218   
[START]   
[VERT-CH1-DISP]            1   
[VERT-CH1-VB]              1   
[VERT-CH1-COUP]            1   
[VERT-CH1-20MHZ]           1   
[VERT-CH1-FINE]            1   
[VERT-CH1-PROBE]           1   
[VERT-CH1-RPHASE]          1   
[VERT-CH1-CNT-FINE]        1   
[VERT-CH1-POS]             2   
[VERT-CH2-DISP]            1   
[VERT-CH2-VB]              1   
[VERT-CH2-COUP]            1   
[VERT-CH2-20MHZ]           1   
[VERT-CH2-FINE]            1   
[VERT-CH2-PROBE]           1   
[VERT-CH2-RPHASE]          1   
[VERT-CH2-CNT-FINE]        1   
[VERT-CH2-POS]             2   
[TRIG-STATE]               1   
[TRIG-TYPE]                1   
[TRIG-SRC]                 1   
[TRIG-MODE]                1   
[TRIG-COUP]                1   
[TRIG-VPOS]                2   
[TRIG-FREQUENCY]           8   
[TRIG-HOLDTIME-MIN]        8   
[TRIG-HOLDTIME-MAX]        8   
[TRIG-HOLDTIME]            8   
[TRIG-EDGE-SLOPE]          1   
[TRIG-VIDEO-NEG]           1   
[TRIG-VIDEO-PAL]           1   
[TRIG-VIDEO-SYN]           1   
[TRIG-VIDEO-LINE]          2   
[TRIG-PULSE-NEG]           1   
[TRIG-PULSE-WHEN]          1   
[TRIG-PULSE-TIME]          8   
[TRIG-SLOPE-SET]           1   
[TRIG-SLOPE-WIN]           1   
[TRIG-SLOPE-WHEN]          1   
[TRIG-SLOPE-V1]            2   
[TRIG-SLOPE-V2]            2   
[TRIG-SLOPE-TIME]          8   
[TRIG-SWAP-CH1-TYPE]       1   
[TRIG-SWAP-CH1-MODE]       1   
[TRIG-SWAP-CH1-COUP]       1   
[TRIG-SWAP-CH1-EDGE-SLOPE] 1   
[TRIG-SWAP-CH1-VIDEO-NEG]  1   
[TRIG-SWAP-CH1-VIDEO-PAL]  1   
[TRIG-SWAP-CH1-VIDEO-SYN]  1   
[TRIG-SWAP-CH1-VIDEO-LINE] 2   
[TRIG-SWAP-CH1-PULSE-NEG]  1   
[TRIG-SWAP-CH1-PULSE-WHEN] 1   
[TRIG-SWAP-CH1-PULSE-TIME] 1   
[TRIG-SWAP-CH1-SLOPE-SET]  1   
[TRIG-SWAP-CH1-SLOPE-WIN]  1   
[TRIG-SWAP-CH1-SLOPE-WHEN] 1   
[TRIG-SWAP-CH1-SLOPE-V1]   2   
[TRIG-SWAP-CH1-SLOPE-V2]   2   
[TRIG-SWAP-CH1-SLOPE-TIME] 8   
[TRIG-SWAP-CH2-TYPE]       1   
[TRIG-SWAP-CH2-MODE]       1   
[TRIG-SWAP-CH2-COUP]       1   
[TRIG-SWAP-CH2-EDGE-SLOPE] 1   
[TRIG-SWAP-CH2-VIDEO-NEG]  1   
[TRIG-SWAP-CH2-VIDEO-PAL]  1   
[TRIG-SWAP-CH2-VIDEO-SYN]  1   
[TRIG-SWAP-CH2-VIDEO-LINE] 2   
[TRIG-SWAP-CH2-PULSE-NEG]  1   
[TRIG-SWAP-CH2-PULSE-WHEN] 1   
[TRIG-SWAP-CH2-PULSE-TIME] 8   
[TRIG-SWAP-CH2-SLOPE-SET]  1   
[TRIG-SWAP-CH2-SLOPE-WIN]  1   
[TRIG-SWAP-CH2-SLOPE-WHEN] 1   
[TRIG-SWAP-CH2-SLOPE-V1]   2   
[TRIG-SWAP-CH2-SLOPE-V2]   2   
[TRIG-SWAP-CH2-SLOPE-TIME] 8   
[TRIG-OVERTIME-NEG]        1   
[TRIG-OVERTIME-TIME]       8   
[HORIZ-TB]                 1   
[HORIZ-WIN-TB]             1   
[HORIZ-WIN-STATE]          1   
[HORIZ-TRIGTIME]           8   
[MATH-DISP]                1   
[MATH-MODE]                1   
[MATH-FFT-SRC]             1   
[MATH-FFT-WIN]             1   
[MATH-FFT-FACTOR]          1   
[MATH-FFT-DB]              1   
[DISPLAY-MODE]             1   
[DISPLAY-PERSIST]          1   
[DISPLAY-FORMAT]           1   
[DISPLAY-CONTRAST]         1   
[DISPLAY-MAXCONTRAST]      1   
[DISPLAY-GRID-KIND]        1   
[DISPLAY-GRID-BRIGHT]      1   
[DISPLAY-MAXGRID-BRIGHT]   1   
[ACQURIE-MODE]             1   
[ACQURIE-AVG-CNT]          1   
[ACQURIE-TYPE]             1   
[ACQURIE-STORE-DEPTH]      1   
[MEASURE-ITEM1-SRC]        1   
[MEASURE-ITEM1]            1   
[MEASURE-ITEM2-SRC]        1   
[MEASURE-ITEM2]            1   
[MEASURE-ITEM3-SRC]        1   
[MEASURE-ITEM3]            1   
[MEASURE-ITEM4-SRC]        1   
[MEASURE-ITEM4]            1   
[MEASURE-ITEM5-SRC]        1   
[MEASURE-ITEM5]            1   
[MEASURE-ITEM6-SRC]        1   
[MEASURE-ITEM6]            1   
[MEASURE-ITEM7-SRC]        1   
[MEASURE-ITEM7]            1   
[MEASURE-ITEM8-SRC]        1   
[MEASURE-ITEM8]            1   
[CONTROL-TYPE]             1   
[CONTROL-MENUID]           1   
[CONTROL-DISP-MENU]        1   
[LA-SWI]                   1   
[LA-CHANNEL-STATE]         2   
[LA-CURRENT-CHANNEL]       1   
[LA-D7-D0-THRESHOLD-TYPE]   1
[LA-D15-D8-THRESHOLD-TYPE]   1
[LA-D7-D0-USER-THRESHOLD-VOLT]   2
[LA-D15-D8-USER-THRESHOLD-VOLT]   2
[END]   
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 13, 2014, 04:01:33 pm
no, there is nothing as such, or better said all you can get is via the measure-item (but only if they selected and enabled and data available). Measurments on DSO are anyway slowing down the capture rate, so it is actually better to capture waveform, push it to PC and run what so ever necessary analysis on PC (while waiting for next data frame from DSO).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firepower on November 13, 2014, 04:52:40 pm
I am thinking of buying the Hantek DSO5000 off ebay.au due to this great forum post. The only other oscilloscope that seem popular is the siglent, how do siglents SDS1000 compare? Is a record depth of greater than 40K have much advantage?

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: TheBay on November 13, 2014, 05:34:20 pm
This is cheap for anyone in the UK, possibly EU?
£234 Delivered!!!

http://www.rapidonline.com/Test-Measurement/Voltcraft-DSO-1062D-Digital-Storage-Oscilloscope-60Mhz-51-5195/?source=googleps&utm_source=googleps&IncVat=1&gclid=Cj0KEQiAypGjBRCPme6jmqu3gZsBEiQA8NAiIKEPsXuYz_jq_NNbmlAVQVAzrSp39PaNllGlfwAQoJUaArY18P8HAQ (http://www.rapidonline.com/Test-Measurement/Voltcraft-DSO-1062D-Digital-Storage-Oscilloscope-60Mhz-51-5195/?source=googleps&utm_source=googleps&IncVat=1&gclid=Cj0KEQiAypGjBRCPme6jmqu3gZsBEiQA8NAiIKEPsXuYz_jq_NNbmlAVQVAzrSp39PaNllGlfwAQoJUaArY18P8HAQ)

No getting stung by taxes etc from China and easy to ship back if it has any faults.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: alex_pescaru on November 19, 2014, 04:44:56 pm
Hi,

Newbie here...
I've just got my hands on an 100MHz Hantek oscilloscope, branded MCP Lab Electronics.
Besides the oscilloscope, it has an 16 channel signal analyzer.
http://www.mcpsh.com/DQ1000D%20Series.html (http://www.mcpsh.com/DQ1000D%20Series.html)

Model: DQ1102D
SW: 3.2.35 (140312.0)
HW: 1010x55778340
SN: T 1G/012 019xxx

Is it possible to apply the same hacks?
Because, for this particular scope, I didn't find any correct software.
Also, can I help the community with something regarding this scope?

Thank you!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on November 20, 2014, 01:17:19 am
According to the technical specifications stipulated on http://www.mcpsh.com/DQ1000D%20Series.html, (http://www.mcpsh.com/DQ1000D%20Series.html,) DQ1102D is similar to DSO5102D.
You may try to use its SW.  ^-^
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: LEDAero on November 24, 2014, 06:52:04 am
Being in the market for an affordable scope, this thread is of some interest.

Given that the 60MHz Hantek scopes are able to be hacked to 200MHz, is there any reason to buy anything else?

With the alphabet soup of model names, from what I could gather, it looks like, for an entry level user, the DSO5072P is the way to go.

Unless you can offer another recommendation?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firepower on November 24, 2014, 12:30:21 pm
The Rigol DS1054Z is worth considering if you can afford to spend a bit more. It is also hackable to 100MHz and can enable all  internal software options.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: LEDAero on November 26, 2014, 07:08:19 am
It's more than 250% of the $200 being asked for the Hantek. Then there's shipping on top of that.

I think I will save my pennies and go budget. From what I have read (as a complete n00b) the Rigol isn't 250% better than the Hantek.

I am really at the bottom end of the electronic hobbyists spectrum. I have only just come to grips with the rudiments of what a FET can do, and haven't yet used one... Up to now, I thought it was a relation of Bobba's...

I am still pretty much at the resistors, LEDs and capacitors stage, but with a shedload of programming experience and 40 years of plugging protocol things together and making them talk. So, an adventure will be had.

Thanks for the recommendation, though. If I had more ready cash, the Rigol looks very nice.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firepower on November 26, 2014, 07:55:22 am
I agree the Hantek is best budget DSO. Hantek has great large labels,lots if complaints about rigol small fonts. It definetly be good for you to learn more with it nothing like seeing what circuit is doing. If You get Hantek money you save can go to other test equipment or power supplies. That be move value to you.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vvmm on November 28, 2014, 10:23:23 am
Can the MSO5062D be hacked to add 2M memory?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 29, 2014, 08:28:28 am
Can the MSO5062D be hacked to add 2M memory?

to add memory is not real problem, but you will have to switch between DSO and MSO firmwares in order to use 2Mpoint.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: i4004 on November 29, 2014, 09:00:46 am
take a look at this image (yes, it's a bit larger, wait untill it loads)
can you recreate same thing on the scopes you're discussing here? it's essentially am waveform.

http://www.daysalive.com/share/Rigol_screens.JPG (http://www.daysalive.com/share/Rigol_screens.JPG)

any of these scopes has intensity grading?
(btw. i'm not trying to pimp rigol here, it's just that z's vertical resolution is crap..perhaps even decent scope without intenstity grading can beat it
https://www.eevblog.com/forum/testgear/rigol-ds1000z-series-font-size/msg559722/#msg559722 (https://www.eevblog.com/forum/testgear/rigol-ds1000z-series-font-size/msg559722/#msg559722) )
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 29, 2014, 07:30:15 pm
...

aha, then show me pictures of markers on DS1000Z, or pictures on which waveform disapear from screen when moved off or out of range, or wait Rigol with color intensity grading. Even easier, show me DS1000x from 2009 to b3gin of 2014 with 7" screen. Or maybe pictures from DS1000Z with 250-300MHz BW? And to your question, yes, one can perfectly make such pictures on Tekway/Hantek, and yes, one can perfectly be unable to show "same" waveform on Rigol, all depends on modulation, timebase, memory depth, frequency and DSO settings. It seems your knowledge about DSOs is googled togehther from here and there, so please, stop spaming with Rigol, i'm sure poeple who wish to buy one know what they buying.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: i4004 on November 30, 2014, 07:42:03 am
i was kinda asking can you make better screenshots, because i would possibly be interested in buying such a scope if you can, and did you provide them?
i mean you can see freq. and amplitude on those shots so where's the problem?

or did you just attack me for the very thing i said i did not came to thread to do, ie i said i dislike how rigol does the things.
no pimpimng rigol, no spamming, just a question.

this
Quote
It seems your knowledge about DSOs is googled togehther from here and there
is based on what exactly, what was wrong with any of my statements?
please do correct it, but i would rather see the am waveform screenshot because i'm interested in these scopes, ok?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: LEECH666 on November 30, 2014, 05:19:25 pm
I'm sorry that I have to ask this question here, but with the massive size of this thread I find it incredibly hard to find the information I am looking for.

I got the following type of scope (see attached picture), and I am looking for the most recent firmware.

Can anyone point me in the right direction? Where do I find the most recent FW for this model?

Cheers,
LEECH666

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: carloscuev on November 30, 2014, 06:26:45 pm
Hi, I'm going to be using my scope a lot this week and would like to update to the latest and greatest firmware, could anyone tell me if there have been an update to my scope? Please check attached picture.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on December 03, 2014, 08:21:03 am
Hello!
Tekway DST1202B should be Hantek DSO5202B.
And your version is 2.06.3, you need to upgrade firmware with dst1kb*.up.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: gmacher on December 03, 2014, 10:48:26 pm
Hi I've got some problem recently I wanted to load the latest firmware for my Hantek DSO5062b and I do not know what went wrong. The oscilloscope does not work as should. IS MISSING inscriptions in menus and, when you try pressing any button device hangs. I do not have a NAND dump so restoring it will not work. Any ideas ?? Or could someone sent to me the contents of the memory of your oscilloscope?

This is a log of the UART:

Code: [Select]
***S3C2440 CPU 400MHz BUS 100MHz  64M SDRAM (DST1000B bootloader)****(091201)
Tekway Bootloader (modify from mizi vivi)0.1.4 (root@rain-fc4) (gcc version 2.95
.3 20010315 (release)) #0.1.4 三 5??? 9 11:25:23 CST 2012
UPLLCON  : 0x56022
MMU table base address = 0x33DFC000
NAND device: Manufacture ID: 0xec, Chip ID: 0x76 (Samsung K9D1208V0M)
Found default  parameters
GPfcon :0x5555
Press Return to start the LINUX now, any other key for Bootloader
from : 0x50000, size :0x200000, media_type:0x3
done
zImage magic = 0x016f2818
Setup linux parameters at 0x30000100
linux command line is: "noinitrd root=/dev/mtdblock2 init=/linuxrc console=ttySA
C0"
MACH_TYPE = 782
NOW, Booting Linux......
Uncompressing Linux.............................................................
........................................ done, booting the kernel.
Linux version 2.6.13 (root@rain-fc4) (gcc version 3.4.1) #2 Sat May 5 13:40:08 C
ST 2012
CPU: ARM920Tid(wb) [41129200] revision 0 (ARMv4T)
Machine: QQ2440
ATAG_INITRD is deprecated; please update your bootloader.
Memory policy: ECC disabled, Data cache writeback
CPU S3C2440A (id 0x32440001)
BUG: mapping for 0x19000000 at 0xd0000000 overlaps vmalloc space
S3C2440: core 405.000 MHz, memory 101.250 MHz, peripheral 50.625 MHz
S3C2410 Clocks, (c) 2004 Simtec Electronics
CPU0: D VIVT write-back cache
CPU0: I cache: 16384 bytes, associativity 64, 32 byte lines, 8 sets
CPU0: D cache: 16384 bytes, associativity 64, 32 byte lines, 8 sets
Built 1 zonelists
Kernel command line: noinitrd root=/dev/mtdblock2 init=/linuxrc console=ttySAC0
irq: clearing pending ext status 0000e000
irq: clearing subpending status 00000002
PID hash table entries: 512 (order: 9, 8192 bytes)
timer tcon=00000000, tcnt a4ca, tcfg 00000200,00000000, usec 00001e57
Console: colour dummy device 80x30
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Memory: 64MB = 64MB total
Memory: 61184KB available (2467K code, 995K data, 100K init)
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
NET: Registered protocol family 16
USB Power Control, (c) 2004 Simtec Electronics
S3C2440: Initialising architecture
S3C2440: IRQ Support
S3C2440: Clock Support, UPLL 48.000 MHz
SCSI subsystem initialized
usbcore: registered new driver hub
S3C2410 DMA Driver, (c) 2003-2004 Simtec Electronics
DMA channel 0 at c4800000, irq 33
DMA channel 1 at c4800040, irq 34
DMA channel 2 at c4800080, irq 35
DMA channel 3 at c48000c0, irq 36
NetWinder Floating Point Emulator V0.97 (double precision)
devfs: 2004-01-31 Richard Gooch (rgooch@atnf.csiro.au)
devfs: boot_options: 0x1
yaffs Apr 24 2012 11:31:15 Installing.
Initializing Cryptographic API
Console: switching to colour frame buffer device 100x30
S3C24X0 fb0: s3c2410fb frame buffer device initialize done
GPIO L3 bus interface for S3C2440, installed
S3C2410 RTC, (c) 2004 Simtec Electronics
s3c2410-rtc s3c2410-rtc: rtc disabled, re-enabling
s3c2410_serial0 at MMIO 0x50000000 (irq = 70) is a S3C2440
s3c2410_serial1 at MMIO 0x50004000 (irq = 73) is a S3C2440
s3c2410_serial2 at MMIO 0x50008000 (irq = 76) is a S3C2440
io scheduler noop registered
io scheduler anticipatory registered
io scheduler deadline registered
io scheduler cfq registered
RAMDISK driver initialized: 16 RAM disks of 4096K size 1024 blocksize
loop: loaded (max 8 devices)
nbd: registered device at major 43
Linux video capture interface: v1.00
ovcamchip: v2.27 for Linux 2.6 : OV camera chip I2C driver
Uniform Multi-Platform E-IDE driver Revision: 7.00alpha2
ide: Assuming 50MHz system bus speed for PIO modes; override with idebus=xx
S3C24XX NAND Driver, (c) 2004 Simtec Electronics
s3c2410-nand: mapped registers at c4880000
30 ns is too big for current clock rate 101250
s3c2410-nand: timing: Tacls 0ns, Twrph0 4294ns, Twrph1 0ns
NAND device: Manufacturer ID: 0xec, Chip ID: 0x76 (Samsung NAND 64MiB 3,3V 8-bit
)
NAND_ECC_NONE selected by board driver. This is not recommended !!
Scanning device for bad blocks
Creating 3 MTD partitions on "NAND 64MiB 3,3V 8-bit":
0x00000000-0x00030000 : "bootloader"
0x00050000-0x00250000 : "kernel"
0x00250000-0x03ffc000 : "root"
s3c2410-ohci s3c2410-ohci: S3C24XX OHCI
s3c2410-ohci s3c2410-ohci: new USB bus registered, assigned bus number 1
s3c2410-ohci s3c2410-ohci: irq 42, io mem 0x49000000
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 2 ports detected
usbcore: registered new driver usbhid
drivers/usb/input/hid-core.c: v2.01:USB HID core driver
usbcore: registered new driver ov511
drivers/usb/media/ov511.c: v1.64 for Linux 2.5 : ov511 USB Camera Driver
usbcore: registered new driver gspca
drivers/usb/media/gspca/gspca_core.c: gspca driver 00.60.00 registered
mice: PS/2 mouse device common for all mice
ts: Compaq touchscreen protocol output
s3c2410 TouchScreen successfully loaded
i2c /dev entries driver
SBC2440 SOUND driver register
SBC2440 SOUND driver probe!
SBC2440 UDA1341 audio driver initialized
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
TCP bic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
yaffs: dev is 32505858 name is "mtdblock2"
yaffs: Attempting MTD mount on 31.2, "mtdblock2"
VFS: Mounted root (yaffs filesystem).
Mounted devfs on /dev
Freeing init memory: 100K
rm: can't remove '/usr/udisk-flag': No such file or directory
CPU 400MHZ BUS 100MHZ
dso-iobank: install ok
<k>hantek_DSO5062B
dso-lcd installed lcd module ok
0x404
gpio_major_n = 4, io_minor_n = 4, output 0
Initializing USB Mass Storage driver...
usbcore: registered new driver usb-storage
USB Mass Storage support registered.
S3C2410 USB Controller Core Initialized
USB Function Character Driver Interface - 0.5, (C) 2001, Extenex Corp.
usbctl: Opened for usb-char
usbctl: Started for usb-char
usbcore: registered new driver usblp
drivers/dso_drivers/usblp.c: v0.13: USB Printer Device Class driver
bwscon:0x22111110
fpga bank 11811
dso-fpga: install ok
S3C2410_GPECON : 0Xa00001aa , S3C2410_GPEUP: 0X0
rIICCON :0Xaf
dso-i2c: xx install ok
x gpio e: 0xaa0001a6, gpio g :0xfd62f19a , gdata:0x7f8f
dso-spi: install ok
dso-uart: install ok
dso-buzzer: install ok
0x60c
gpio_major_n = 6, io_minor_n = 12, output 1
fpga download file_name :/dn.rbf
data DOWN finish.
dso-spi:FPGA_DOWNLOAD ok.
hub 1-0:1.0: over-current change on port 1
hub 1-0:1.0: over-current change on port 2
no update file to foud
now run app .....

Please press Enter to activate this console.
[root@Tekway-dso /]# ls
OurLanguages      fpgabank.conf     logotype.dis      sys.inf
bin               help.db           lost+found        tdc.log
chk_base_volt     home              mnt               tdc_edge125M
cur_acq.type      i2c.log           msg               tdc_overtime125M
dev               icon              mult_adc.log      tdc_pulse125M
disk_sta.info     keyprotocol.inf   opt               tmp
dn.rbf            language.img      param             tmpdst
dso               lib               proc              ubdb.swi
dso.exe           linuxrc           root              usr
dst1202b          logo              sbin              var
etc               logotype          sys
[root@Tekway-dso /]# run
-/bin/sh: run: not found
The system is going down NOW!
Sent SIGTERM to all processes
Sent SIGKILL to all processes
Restarting system.
.
arch_reset: attempting watchdog reset

***S3C2440 CPU 400MHz BUS 100MHz  64M SDRAM (DST1000B bootloader)****(091201)
Tekway Bootloader (modify from mizi vivi)0.1.4 (root@rain-fc4) (gcc version 2.95
.3 20010315 (release)) #0.1.4 三 5??? 9 11:25:23 CST 2012
UPLLCON  : 0x56022
MMU table base address = 0x33DFC000
NAND device: Manufacture ID: 0xec, Chip ID: 0x76 (Samsung K9D1208V0M)
Found default  parameters
Dummy_isr error, interrupt number: 2
GPfcon :0x5555
Press Return to start the LINUX now, any other key for Bootloader
from : 0x50000, size :0x200000, media_type:0x3
done
zImage magic = 0x016f2818
Setup linux parameters at 0x30000100
linux command line is: "noinitrd root=/dev/mtdblock2 init=/linuxrc console=ttySA
C0"
MACH_TYPE = 782
NOW, Booting Linux......
Uncompressing Linux.............................................................
........................................ done, booting the kernel.
Linux version 2.6.13 (root@rain-fc4) (gcc version 3.4.1) #2 Sat May 5 13:40:08 C
ST 2012
CPU: ARM920Tid(wb) [41129200] revision 0 (ARMv4T)
Machine: QQ2440
ATAG_INITRD is deprecated; please update your bootloader.
Memory policy: ECC disabled, Data cache writeback
CPU S3C2440A (id 0x32440001)
BUG: mapping for 0x19000000 at 0xd0000000 overlaps vmalloc space
S3C2440: core 405.000 MHz, memory 101.250 MHz, peripheral 50.625 MHz
S3C2410 Clocks, (c) 2004 Simtec Electronics
CPU0: D VIVT write-back cache
CPU0: I cache: 16384 bytes, associativity 64, 32 byte lines, 8 sets
CPU0: D cache: 16384 bytes, associativity 64, 32 byte lines, 8 sets
Built 1 zonelists
Kernel command line: noinitrd root=/dev/mtdblock2 init=/linuxrc console=ttySAC0
irq: clearing pending ext status 0000c000
irq: clearing subpending status 00000002
PID hash table entries: 512 (order: 9, 8192 bytes)
timer tcon=00000000, tcnt a4ca, tcfg 00000200,00000000, usec 00001e57
Console: colour dummy device 80x30
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Memory: 64MB = 64MB total
Memory: 61184KB available (2467K code, 995K data, 100K init)
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
NET: Registered protocol family 16
USB Power Control, (c) 2004 Simtec Electronics
S3C2440: Initialising architecture
S3C2440: IRQ Support
S3C2440: Clock Support, UPLL 48.000 MHz
SCSI subsystem initialized
usbcore: registered new driver hub
S3C2410 DMA Driver, (c) 2003-2004 Simtec Electronics
DMA channel 0 at c4800000, irq 33
DMA channel 1 at c4800040, irq 34
DMA channel 2 at c4800080, irq 35
DMA channel 3 at c48000c0, irq 36
NetWinder Floating Point Emulator V0.97 (double precision)
devfs: 2004-01-31 Richard Gooch (rgooch@atnf.csiro.au)
devfs: boot_options: 0x1
yaffs Apr 24 2012 11:31:15 Installing.
Initializing Cryptographic API
Console: switching to colour frame buffer device 100x30
S3C24X0 fb0: s3c2410fb frame buffer device initialize done
GPIO L3 bus interface for S3C2440, installed
S3C2410 RTC, (c) 2004 Simtec Electronics
s3c2410-rtc s3c2410-rtc: rtc disabled, re-enabling
s3c2410_serial0 at MMIO 0x50000000 (irq = 70) is a S3C2440
s3c2410_serial1 at MMIO 0x50004000 (irq = 73) is a S3C2440
s3c2410_serial2 at MMIO 0x50008000 (irq = 76) is a S3C2440
io scheduler noop registered
io scheduler anticipatory registered
io scheduler deadline registered
io scheduler cfq registered
RAMDISK driver initialized: 16 RAM disks of 4096K size 1024 blocksize
loop: loaded (max 8 devices)
nbd: registered device at major 43
Linux video capture interface: v1.00
ovcamchip: v2.27 for Linux 2.6 : OV camera chip I2C driver
Uniform Multi-Platform E-IDE driver Revision: 7.00alpha2
ide: Assuming 50MHz system bus speed for PIO modes; override with idebus=xx
S3C24XX NAND Driver, (c) 2004 Simtec Electronics
s3c2410-nand: mapped registers at c4880000
30 ns is too big for current clock rate 101250
s3c2410-nand: timing: Tacls 0ns, Twrph0 4294ns, Twrph1 0ns
NAND device: Manufacturer ID: 0xec, Chip ID: 0x76 (Samsung NAND 64MiB 3,3V 8-bit
)
NAND_ECC_NONE selected by board driver. This is not recommended !!
Scanning device for bad blocks
Creating 3 MTD partitions on "NAND 64MiB 3,3V 8-bit":
0x00000000-0x00030000 : "bootloader"
0x00050000-0x00250000 : "kernel"
0x00250000-0x03ffc000 : "root"
s3c2410-ohci s3c2410-ohci: S3C24XX OHCI
s3c2410-ohci s3c2410-ohci: new USB bus registered, assigned bus number 1
s3c2410-ohci s3c2410-ohci: irq 42, io mem 0x49000000
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 2 ports detected
usbcore: registered new driver usbhid
drivers/usb/input/hid-core.c: v2.01:USB HID core driver
usbcore: registered new driver ov511
drivers/usb/media/ov511.c: v1.64 for Linux 2.5 : ov511 USB Camera Driver
usbcore: registered new driver gspca
drivers/usb/media/gspca/gspca_core.c: gspca driver 00.60.00 registered
mice: PS/2 mouse device common for all mice
ts: Compaq touchscreen protocol output
s3c2410 TouchScreen successfully loaded
i2c /dev entries driver
SBC2440 SOUND driver register
SBC2440 SOUND driver probe!
SBC2440 UDA1341 audio driver initialized
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
TCP bic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
yaffs: dev is 32505858 name is "mtdblock2"
yaffs: Attempting MTD mount on 31.2, "mtdblock2"
VFS: Mounted root (yaffs filesystem).
Mounted devfs on /dev
Freeing init memory: 100K
rm: can't remove '/usr/udisk-flag': No such file or directory
CPU 400MHZ BUS 100MHZ
dso-iobank: install ok
<k>hantek_DSO5062B
dso-lcd installed lcd module ok
0x404
gpio_major_n = 4, io_minor_n = 4, output 0
Initializing USB Mass Storage driver...
usbcore: registered new driver usb-storage
USB Mass Storage support registered.
S3C2410 USB Controller Core Initialized
USB Function Character Driver Interface - 0.5, (C) 2001, Extenex Corp.
usbctl: Opened for usb-char
usbctl: Started for usb-char
usbcore: registered new driver usblp
drivers/dso_drivers/usblp.c: v0.13: USB Printer Device Class driver
bwscon:0x22111110
fpga bank 11811
dso-fpga: install ok
S3C2410_GPECON : 0Xa00001aa , S3C2410_GPEUP: 0X0
rIICCON :0Xaf
dso-i2c: xx install ok
x gpio e: 0xaa0001a6, gpio g :0xfd62f19a , gdata:0x7faf
dso-spi: install ok
dso-uart: install ok
dso-buzzer: install ok
0x60c
gpio_major_n = 6, io_minor_n = 12, output 1
fpga download file_name :/dn.rbf
data DOWN finish.
dso-spi:FPGA_DOWNLOAD ok.
hub 1-0:1.0: over-current change on port 1
hub 1-0:1.0: over-current change on port 2
no update file to foud
now run app .....      <<<<<<<<<<<<<<<<<<<<<<<<<<here it's stops bootingup
Killed

The system is going down NOW!e this console.
Sent SIGTERM to all processes
Sent SIGKILL to all processes
Requesting system reboot
Restarting system.
.
arch_reset: attempting watchdog reset



Ok I fix it :D
 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: LEDAero on December 06, 2014, 05:46:44 am
It's more than 250% of the $200 being asked for the Hantek. Then there's shipping on top of that.

Where can you get the DSO5072P for that price?

http://www.aliexpress.com/item/Hantek-DSO5072P-Mixed-Signal-Oscilloscope-70MHz-1GSa-s-Real-Time-Sample-Rate/2030485138.html (http://www.aliexpress.com/item/Hantek-DSO5072P-Mixed-Signal-Oscilloscope-70MHz-1GSa-s-Real-Time-Sample-Rate/2030485138.html)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firepower on December 06, 2014, 06:05:26 am
Cheap price but expensive shipping. lot of things from china have free shipping but it slow.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: LEDAero on December 06, 2014, 06:10:57 am
I guess it depends where you live, how much the shipping is.

I don't think we live in the same place.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on December 08, 2014, 08:44:00 am
What kind of courier the seller used? DHL? Or post service?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on December 09, 2014, 07:00:27 am
Wow
Thanks for the specific prices.  :-+
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on December 11, 2014, 02:56:17 am
I'm sorry that I have to ask this question here, but with the massive size of this thread I find it incredibly hard to find the information I am looking for.

I got the following type of scope (see attached picture), and I am looking for the most recent firmware.

Can anyone point me in the right direction? Where do I find the most recent FW for this model?

Cheers,
LEECH666

Hello! Could you give me some clues of your DSO3062C like bandwidth, memory, sampling rate etc. to do diagnose?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: LEDAero on December 11, 2014, 07:07:31 am
It's more than 250% of the $200 being asked for the Hantek. Then there's shipping on top of that.

Where can you get the DSO5072P for that price?

http://www.aliexpress.com/item/Hantek-DSO5072P-Mixed-Signal-Oscilloscope-70MHz-1GSa-s-Real-Time-Sample-Rate/2030485138.html (http://www.aliexpress.com/item/Hantek-DSO5072P-Mixed-Signal-Oscilloscope-70MHz-1GSa-s-Real-Time-Sample-Rate/2030485138.html)

OK, the Hantek is showing as $264 delivered from that vendor.
The Rigol DS1054Z with shipping to Brunei would cost $464 from Tequipment.
So that's only 175% of the Hantek price  :)

Damn all my bad luck! Only 175%??? I guess I am going to save a whole lot less than I thought ;)

But... that Aliexpress vendor will give me a better shipping price - $35 vs $65, so thats $235 vs $464. And we are back in the game!  :box:

Except... I am not really saving anything. I wouldn't buy the Rigol - it's way out of my price range. Maybe when I'm a big boy.  8)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on December 13, 2014, 07:50:09 am
This is cheap for anyone in the UK, possibly EU?
£234 Delivered!!!

http://www.rapidonline.com/Test-Measurement/Voltcraft-DSO-1062D-Digital-Storage-Oscilloscope-60Mhz-51-5195/?source=googleps&utm_source=googleps&IncVat=1&gclid=Cj0KEQiAypGjBRCPme6jmqu3gZsBEiQA8NAiIKEPsXuYz_jq_NNbmlAVQVAzrSp39PaNllGlfwAQoJUaArY18P8HAQ (http://www.rapidonline.com/Test-Measurement/Voltcraft-DSO-1062D-Digital-Storage-Oscilloscope-60Mhz-51-5195/?source=googleps&utm_source=googleps&IncVat=1&gclid=Cj0KEQiAypGjBRCPme6jmqu3gZsBEiQA8NAiIKEPsXuYz_jq_NNbmlAVQVAzrSp39PaNllGlfwAQoJUaArY18P8HAQ)

No getting stung by taxes etc from China and easy to ship back if it has any faults.

How about the service they offered? like tech questions consult?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 13, 2014, 09:17:53 am
Rapidonline is part of Conrad Group, so in principle exact the same service and prices as from www.conrad-electronic.co.uk (http://www.conrad-electronic.co.uk).
Conrad is always having the same kind of support, meaning no support^^.
There are however 3 good things about Hantek DSOs labeled as Voltcraft :
1- they available locally in EU (well, that's for EU customers only), so in case of warraty easy and cheap to replace
2- Conrad got good prices from Hantek, so DSO-1062D from Voltcraft cost less than Hantek DSO5062B from China
    directly (and DSO1062D=DSO5062B),
3- one can buy 4yrs warranty for few $$$ only (totally then equal to china-import + tax price!).

The P series and other models are however not available at Conrad, so no compare to other sources.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firepower on December 14, 2014, 01:52:07 am
Is there a official hantek or rebranded dealer for Australia?
seems on available from china/HK via ebay.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 14, 2014, 11:06:48 am
Is there a official hantek or rebranded dealer for Australia?
seems on available from china/HK via ebay.

http://triotest.com.au/ (http://triotest.com.au/) was once Tekway distributor, actually just before Hantek bought that DSO design,
and even after up to end of 2013 i think. No idea if they still having Tekway DSOs (or Hantek DSOs).
However, Australia is not "far" from China, so it could be cheaper to buy directly (or via chinese distributor).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on December 15, 2014, 03:38:34 am
Hello! tinhead,
Million thanks for your buying guides.  :-+
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: gmacher on December 15, 2014, 12:56:49 pm
Hi where I can find LA_Board for teakway/hantek osciloskope ?? 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: donP on December 18, 2014, 07:02:37 pm
 8)

Just changed my new handheld IP51 rated DSO8000E series model http://www.hantek.com/en/ProductDetail_1_159.html DSO8072E (http://www.hantek.com/en/ProductDetail_1_159.html DSO8072E)  to 200MHz using Peter's  DSO-USB-tool http://peter.dreisiebner.at/dso-usb-tool/ (http://peter.dreisiebner.at/dso-usb-tool/) via the shell. Hantek made a small change to the location of the files they are now stored in /dso/apps/ the command is:

mv /dso/apps/dst1072b /dso/apps/dst1202b


then reboot the scope using the power switch and keep your fingers crossed good luck. >:D


Thank you to Tinhead and all the other contributors.  :-+

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Velbas on December 19, 2014, 02:19:10 am
Hello Guys,

I have DSO5202B (60MHz or 100MHz originaly) which I bought 2 years ago already hacked. My problem is that DSO stucks and restarts sometimes. I wanna to upgrade fw but I always get message about illegal update. I tried many versions from Tinheads OneDrive but no sucess. This I can see thru UART when I try to update.

Attached scsi removable disk sda at scsi0, channel 0, id 0, lun 0
dst1kb_2.06.3_(130814.1).up
cp: write error: No space left on device
gpg: CAST5 encrypted data
pw:0571tekway
gpg: encrypted with 1 passphrase
gpg: block_filter 0xd7460: read error (size=13807,a->size=13807)
gpg: decryption failed: bad key
gpg: block_filter: pending bytes!
Killed



Can you please help me somehow?
Thanks a lot.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on December 19, 2014, 07:00:45 am
check first that the file you donloaded and copied to flash drive is not corrupt, check free space on DSO (df -h), there might be some
files in /mnt, /mnt/udisk and /mnt/sd/ directories (but with no flash drive inserted of course), delete them all. Then try to run the fw update again. When you really have hw1007, the update file dst1kb_2.06.3_(130814.1).up have to work.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Velbas on December 19, 2014, 11:51:34 am
Thanks for Your fast reply. As I assumed your advice was useful so I have now 130814.1 version installed. There were many dirs like hantek5_10 etc with some pictures inside in mnt folder. 100prc of space was used. Many thanks once again. This 130814.1 update is definitely last one? Can I find some "changelog" somewhere to see what changed since my original version 120808?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on January 04, 2015, 05:36:07 am
8)

Just changed my new handheld IP51 rated DSO8000E series model http://www.hantek.com/en/ProductDetail_1_159.html DSO8072E (http://www.hantek.com/en/ProductDetail_1_159.html DSO8072E)  to 200MHz using Peter's  DSO-USB-tool http://peter.dreisiebner.at/dso-usb-tool/ (http://peter.dreisiebner.at/dso-usb-tool/) via the shell. Hantek made a small change to the location of the files they are now stored in /dso/apps/ the command is:

mv /dso/apps/dst1072b /dso/apps/dst1202b


then reboot the scope using the power switch and keep your fingers crossed good luck. >:D


Thank you to Tinhead and all the other contributors.  :-+

Sounds great!  :-+
Could you share DSO8000E UE (user experience)?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sparkybg on January 04, 2015, 01:03:45 pm
Maybe I will move from Hantek DSO1062B to DSO8000E. Any user experience with the new unit will be very valuable for me. From what I see, 1000E/8000E series are also hackable, and this is great.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 04, 2015, 06:35:59 pm
i got DSO8000E and will write an review and some hack infos withing few next days
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sparkybg on January 04, 2015, 06:46:20 pm
The most important thing for me is does it worth the upgrade?
I have a hacked 1062B and considering upgrade to 1072E or 8072E. From the pictures it seems a bit more solid.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 04, 2015, 07:35:58 pm
i had yrs ago DSO1062B, so i know the difference. Short answer = yes, it is worth (functionality) and yes, much more solid.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on January 05, 2015, 12:37:57 am
i got DSO8000E and will write an review and some hack infos withing few next days
Great! tinhead
Would you post it here or in another thread?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: donP on January 05, 2015, 07:49:46 pm
Hi Guys

Sorry for the delay in responding. I have not had much time to play around with the new scope. I will just add a few points while we wait for tinhead's review, thanks tinhead.

 First the bandwidth hack works very well upto 200MHz, tested it with a high end signal genarator. The scope is really rugged, it has large clear fonts that hantek is well known for, the firmware could be improved on the FFT function.

The signal generator has an arbitrary waveform mode but no built in arbitrary waveforms like ECG which is found on most good arbitray signal generators, however this is a small thing since one can easily build their own waveforms on the PC and download onto the scope.

I will add more information once I get time to do more tests. At the moment I am happy with the scope.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: claudeR on January 05, 2015, 08:09:32 pm
Hello All,
I have been attempting to write a SCPI front end to the Hantek MSO5202D scope with mixed results. It frequently hangs when I write commands to the scope just after the data is sent to the scope using the command 0x11 (Write DSO settings) the command is accepted but the reply never comes and finally the scope resets. I tried varying the time between commands and response from 200msec to 800 msec with no luck. It sometimes runs longer (I have a loop that contains a bunch of commands the sequence is autosetup, turn off chan1, set probe to 1x, set vertical scale to 2V, set trigger to edge and to chan2, set timebase to 80ns, invert chan2 polarity, offset trace by 2V. Sometimes it fails on the first loop of these commands sometimes it run for 3 loops but never runs for more the 4 loops without hanging. Any ideas what could be the cause.  The fact that is sometimes runs for a few loops makes me believe that the data data sent is correct  (also the settings on the scope matches what I have sent) but something is still wrong because the scope always ends up hanging and crashing.
I think I have the latest software ( version 3.2.35 (130312.0) and hardware version 1010x55778340). I am beginning to think that the firmware was never intended to run from remote using USB and is very very buggy....

 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: fremen67 on January 06, 2015, 12:20:45 am
I think I have the latest software ( version 3.2.35 (130312.0) and hardware version 1010x55778340).
Hi Claude,
You will find a newer firmware for your hardware (I have the same) on tinhead's Onedrive:
http://1drv.ms/1hf4SgO (http://1drv.ms/1hf4SgO)
(firmware\hw1.01\MSO-Models\dst1kb_3.2.25_15202d_fact20140813.0.up)
Bonne chance!  ;)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on January 06, 2015, 01:04:37 am
The scope is really rugged, it has large clear fonts that hantek is well known for, the firmware could be improved on the FFT function.
Hi donP! Any idea how to improve the FFT function?

The signal generator has an arbitrary waveform mode but no built in arbitrary waveforms like ECG which is found on most good arbitray signal generators, however this is a small thing since one can easily build their own waveforms on the PC and download onto the scope.
Hope there will be improved waveforms soon.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: claudeR on January 06, 2015, 01:47:30 am
Where do these firmware come from I checked Hantek site and the download page for firware never works..
I should backup my firmware first, anybody knows which backup tools works with MSO5202D  HW 1010x55778340?
Title: Re: Another one china DSO hack - 200MHz
Post by: LEDAero on January 06, 2015, 06:10:25 am
Well, that certainly reminds me of the conspiracy theory that Microsoft was loose on copy protection in the early years to ensure that they get the market share in first.

Having worked there in 'the early years', copy protection was amply implemented by the 18 3.5" HD floppies needed to copy OS/2 :) But, copying wasn't so much of an issue until DR-DOS became a player, up until then, every PC had a variant of an MS OS, so they didn't worry so much about it.

No-one of note had copy protection in those days - you could borrow your mate's version of HP-UX or SCO or DOS and spend 3 hours laboriously copying his floppies. But... floppies were expensive, as were 20MB MFM hard drives. Nobody had the money to archive a bunch of OS's and even fewer had the money to own their own PC to run it on. I think my first desktop cost about $18,000... and I was paid about $52/week - nearly double what my friends were getting working in non-computing fields.

Funnily enough, the company with all the copy protection back then was Apple... whereas now, very few of their products are keyed (just a few of the management apps that are licenced per seat).

EDIT: Just saw how old that post was I quoted... move along, nothing to see here :) (sorry for the derail).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: LEDAero on January 06, 2015, 06:20:14 am
2- Conrad got good prices from Hantek, so DSO-1062D from Voltcraft cost less than Hantek DSO5062B from China
    directly (and DSO1062D=DSO5062B),

I'm not sure how 355 euro became cheaper than US$300... even including DHL shipping to my place the Hantek is cheaper than free-shipping from Conrad. It would be great if I could get one without 20% VAT, though... that would put them on a par.

And is the B much better than the DSO5072P? As a complete noob, all these different spec's are just making my head spin. I think I would really like an MSO, but it is nearly twice the price.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: claudeR on January 06, 2015, 02:15:03 pm
I don't know if it is a typo but the file you suggest as update for my MSO5202D is dst1kb3.2.25_????????? which is version 3.2.25 the one I have in my scope is 3.2.35 is it really the correct file or file name?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: fremen67 on January 06, 2015, 03:24:56 pm
I don't know if it is a typo but the file you suggest as update for my MSO5202D is dst1kb3.2.25_????????? which is version 3.2.25 the one I have in my scope is 3.2.35 is it really the correct file or file name?
I think it's a typo in the file name. I updated my MSO 5202D (same hardware version as yours) with this file without any problem.
Not sure there are any Hantek MSO/DSO devices running linux 3.2.25. It's either 2.7.1 or 3.2.35
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: claudeR on January 06, 2015, 04:25:17 pm
I suppose you can check the software version reported by the scope to confirm the version is really 3.2.35 and not 3.2.25.
 Did you back up the software before ugrade if so want method did you use. I am kind of afraid that this version might cause problem worse than the version I have so I want to be able to go back to it. So I use the DSO-USB-Tool and connected a FAT32 USB flash drive to the scope after creating a Hantek directory on it using my windows computer. Then I sent the command cp -r *.* /mnt/udisk/Hantek, using the DSO-USB-TOOL to copy recursively all directory and files from the root of the scope. I think that should backup everything right?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 06, 2015, 08:58:44 pm
ups, that was a type, fixed it now (dst1kb_3.2.35_15202d_fact20140813.0.up). All the firmware i have are coming from Tekway and/or Hantek, sometimes as well "special" versions from/for Voltcraft. I think there are 2 or 3 (of course except custom versions) coming from other users (like the latest MSO fw 2.7.x).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on January 07, 2015, 03:23:35 am
Where do these firmware come from I checked Hantek site and the download page for firware never works..
I should backup my firmware first, anybody knows which backup tools works with MSO5202D  HW 1010x55778340?
I think, you may try to email Hantek support mail box directly to ask for the old version firmware you need. :-/O
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: claudeR on January 07, 2015, 07:13:21 pm
I finally did a tar to archive root dir to flash disk (/mnt/udisk) now I upgraded the software and I am all set. Noticed nice improvements like the Filters in Utility menu now working, Trigger levels in AC coupling now working properly to name a few...

Now back to my SCPI front end I am still facing randoms crashes when setting the chan vertical pos and the Time base settings using so I am now switching to Press Key to see what happens and so far so good. (not sure about chan vpos yet since it would need a lot of key presses so I took it out of my code for now. Have gotten the software to run for 20 loops that way...
 

Thanks guys for your help.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: dorin.iordache on January 09, 2015, 02:25:26 am
Hi guys! I am looking to buy the Hantek DSO5102P as my first oscilloscope. I did some research and it appears that this is the best oscilloscope i can afford. I was just wondering if there is anyone who bought this in the UK from a trusted website or store. I would go crazy if i were to spend about £200 and get scammed. So can you please tell me where should i go and buy one here in the UK? (sorry if this was discussed somewhere on the thread :-//
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Lauris on January 12, 2015, 01:40:27 pm
Hello,

Any news on MSO5074F(G)? I'm on edge of ordering one and looking for final info of do or don't...

Also one I'm planning to order is MSO5074F (http://www.ebay.com/itm/141501349915?_trksid=p2060778.m1438.l2649&ssPageName=STRK%3AMEBIDX%3AIT) since can't find any FG in similar price here in EU, and ordering from china will need to deal with customs which will add unnecessary costs (21+% extra can make difference). So any info on differences between F and FG? Maybe it is possible to add few elements, drill hole, update FW and add some entries to eeprom to make FG from F in case of need ...?

Also any movements on MSO5074F(G) tests? almost year ago some said it will be soon, tho I still have problem winding any.

Also any info of hacking this scope?

Any info is very welcome.
Laurynas.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pcmihnea on January 16, 2015, 10:48:49 pm
     I also have an RTC issue, where the clock (and date) hangs after a power-off, and is the same when I power it on (it doesn't reset to 2009, it is exactly the same time and date as just before I powered down), and continues to "tic" (i.e. it keeps going second-to-second) after the unit is turned on. I don't believe to be a problem with the backup battery, as it would have reset to 2009. Can anyone confirm my bug?
Hi, this is a (late) follow-up on my RTC problem. I've finally gathered the nerves to troubleshoot it. After some analysis, and datasheet reading, I was convinced that the only culprit is the 32.768KHz quartz crystal resonator. My hypothesis was also backed-up by running "hwclock" via UART console. It's return value (date, time) was the same as the last manual setting (via the DSO's Utility menu), even if the unit was powered-cycled, meaning that the RTC's external source clock wasn't working (or the SoC was defective, but I didn't even dare to consider that :) ). After a quartz replace, it's finally working! Hope it helps others with similar issue.

EDIT: The day after my initial mod (the quartz replacement), my unit's hardware RTC still stalled. So, I've checked the SoC datasheet (http://www.wvshare.com/datasheet/SAMSUNG_PDF/S3C2416.PDF (http://www.wvshare.com/datasheet/SAMSUNG_PDF/S3C2416.PDF)) yet again, and noticed on page 13-6 (page 310) the crystal connection schematic: the 5MOhm resistor in series with the crystal is emphasized in another color, and also circled in red, giving the impression that this addition is seemingly an manufacturer after-thought. I've checked my board, it didn't include such resistor, also confirmed by the low impedance across the board's crystal pads. Thus, I've soldered an 5M1 0603 SMD resistor, and now it seems to work perfectly (at least for the past hour or so). It may be possible that I'm in possession of a early revision board, and that's why no other user reported the same issue. Hope it helps!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Stingray64er on January 18, 2015, 08:42:18 am
Hi Guys & tinhead  :D
I am wanting to buy a handheld oscilloscope to use at work and to use at home on my own stuff. After looking around at different handheld scopes, I think that the Hantek DSO1202B (1Mpoint sample memory, 1GSs, 200MHz bw) is good choice. The specs seem right, it's a handhed and I really like the look/style of the these.

I noticed I can purchase (on ebay) the DSO1062B handheld for several hundred dollars cheaper than the DSO1202B.

How difficult is it to hack/upgrade the DSO1062B to a DSO1202B? If I can do it this, I will be able save several hundred dollars and still get the 200MHz bw.

Thanks for any help  :)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: robots on January 27, 2015, 04:50:37 pm
Hi all,

I have been trying to implement quick program in python to test the hantek scope protocol over usb. Problem is that as they changed the USB driver in scope kernel, the whole protocol is a bit changed.

For example: they allow transfers larger than 64 (as the bulk packets allow 512bytes), and no multiple packets are sent, instead the scope sends more data until "length" of packet is satisfied.

I have also noticed that you can transfer multiple "channels" of data at the same time. You can get ch1, ch2, both, math only, math and ch1/2, LA. The LA option is valid only for MSO series.

This also means and explains why my scope didn't work well with dso-usb-tool.

Also for some reason there needs so be sleep between command submissions so scope has enough time to think about the answer ;) Probably why TTscope has 2threads for reading and writing.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Stingray64er on January 28, 2015, 02:29:31 pm
I just purchased the Hantek DSO1062B handheld, just got to wait for it to arrive now  :)

If I understand correctly, the 200Mhz BW is enabled by changing the folder named  /dst1062b to /dst1202b
Is that pretty much it?

I also noticed there is a DSO-BW-Changer tool from McCurrent
https://www.eevblog.com/forum/general-chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg91877/#msg91877 (https://www.eevblog.com/forum/general-chat/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg91877/#msg91877)

Thanks for any help guys, I can't wait for this DSO to arrive  :D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ZdH on February 07, 2015, 01:34:04 pm
As said above i took a look on the "Rescue Tool", when started it look like this:

(https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=98822;image)

"connect and send", which is so far ok, but when one check the about dialog there is "Time and Language set". That look like the "tool" is or was doing more than only connect and send soemthing. And actually there is more, but all in chinese language and disabled. So i did translated it into english and re-aranged/enabled again all hidden things. Now the tool likes like this:

(https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=98824;image)

Hi,

could you tell me, please, if you've already tested this tool on the last devices? I bought Voltcraf DSO1062D from Conrad, sw v3.30.0 (140924.0) and hw v1010x55778344.

It was very easy to changed bw to 200MHz (by changer, but it is possible to change it in the os by rewriting some files, as it is noted above in this forum). I'd like to have an Ethernet interface, so I soldered Ethernet connector with two LEDs and trafo PULSE H1102NL. And wanted to use your software to change my license to net version. But I can't connect to scope. I trying it by rear USB connector, it's correct, please? Or should I use serial interface with UART on the connector J801? (No one LEDs on the Ethernet connector lights up and on the switch I haven't any connection - UTP cable is "dead".) My OS is Windows 8.1 64b.  :(

Could you help me, please?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: fremen67 on February 08, 2015, 09:26:06 am
Hi,

could you tell me, please, if you've already tested this tool on the last devices? I bought Voltcraf DSO1062D from Conrad, sw v3.30.0 (140924.0) and hw v1010x55778344.

It was very easy to changed bw to 200MHz (by changer, but it is possible to change it in the os by rewriting some files, as it is noted above in this forum). I'd like to have an Ethernet interface, so I soldered Ethernet connector with two LEDs and trafo PULSE H1102NL. And wanted to use your software to change my license to net version. But I can't connect to scope. I trying it by rear USB connector, it's correct, please? Or should I use serial interface with UART on the connector J801? (No one LEDs on the Ethernet connector lights up and on the switch I haven't any connection - UTP cable is "dead".) My OS is Windows 8.1 64b.  :(

Could you help me, please?
UART connection is only for console mode connection. The Rescue Tool will connect through the rear usb connector but you will need dirvers installed on your system for that. Did you install them and were you able to connect to your scope with TTsource TTscope?
Did you also add the 2 x22pF caps plus the 25Mhz Crystal? Eventually you could also have to remove a 0R resistor near the DM9000AEP...
If you could post a photo of the DM9000AEP area and a photo of the H1102NL than we might have more détails to help you...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ZdH on February 08, 2015, 09:51:54 pm
Hi, could you tell me, please, if you've already tested this tool on the last devices? I bought Voltcraf DSO1062D from Conrad, sw v3.30.0 (140924.0) and hw v1010x55778344.
UART connection is only for console mode connection. The Rescue Tool will connect through the rear usb connector but you will need dirvers installed on your system for that. Did you install them and were you able to connect to your scope with TTsource?
Did you also add the 2 x22pF caps plus the 25Mhz Crystal? Eventually you could also have to remove a 0R resistor near the DM9000AEP...
If you could post a photo of the DM9000AEP area and a photo of the H1102NL than we might have more détails to help you...
Hi, thank you for your kind offer of help.  :clap:
The answer of your the first question: I think, driver is installed correctly. When I can watching the cope screen on my windows pc by using DSO-USB-Tool, I have to use libUSB (not only USB) -> in the Windows in "libusb-win32 devices" I have "DSO Measurement Device". But it's parfect. (But I don't know what do you mean "TTsource", what is it - it is software source?)
But for another questions I have only negative answers - I've didn't add nothing else yet ... :(
I'll prepare some photos (and post) and will study what else I have to do ...
For the time being I thank you very much.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: fremen67 on February 09, 2015, 12:23:41 am
But I don't know what do you mean "TTsource", what is it - it is software source?
Sorry I made a typo , that is TTscope, the software that is on the miniCD you get with your scope. It allows control of the scope from your PC.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ZdH on February 09, 2015, 10:14:05 pm
But I don't know what do you mean "TTsource", what is it - it is software source?
Sorry I made a typo , that is TTscope, the software that is on the miniCD you get with your scope. It allows control of the scope from your PC.
THX. You've helped me -> my software (from Conrad) has the name "Digital Scope" (=TTscope), it's in the version 2.0.0.7. And it was broken. When I repaired driver, I got "DSO USB Tool" broken, but "Digital Scope" is functional. And together with the "DSO Tool". Now I can connect to the scope and maybe to write some informations into it. But I'm afraid, first I'll do some backups ...
When I do this, I'll write here the result and post some photos about you told me (maybe in 2-3 days, I'm very busy now). Thank you once again.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sparkybg on February 15, 2015, 09:44:39 am
tinhead, do you know where calibration data is stored? If it is a file, I need to chek if it is readonly - the self calibration on my DSO1072E does not work - it exits on stage 11 and nothing changes. There is offset on the channels and the vertical voltage is not correct. (something like 360mV on 400mV square wave input).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: EPLan on February 16, 2015, 02:47:30 pm
Complete newbie ... considering a Hantek DSO5072P - the summary page mentions software upgrades but not removing capacitors(page last edited Nov 8 2014), is it still necessary to remove the capacitors pl00 mentioned here (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg411573/#msg411573)?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Decker on February 24, 2015, 09:02:48 pm
tinhead, do you know where calibration data is stored? If it is a file, I need to chek if it is readonly - the self calibration on my DSO1072E does not work - it exits on stage 11 and nothing changes. There is offset on the channels and the vertical voltage is not correct. (something like 360mV on 400mV square wave input).

Sparky,
On my DSO5102BM, the calibration data is stored in /param/sav/chk1kb_xxxxxx (chk1kb_091023 on mine)

Preferences (profile/settings) are in /param/sav/set1kb_xxxxxx.x (set1kb_100302.0 on mine)

And current/running (dynamic) profile is in /param/sav/run1kb_xxxxxx (run1kb_100302 on mine)

Note: The run1kb_ file is basically a copy (at boot) of the set1kb_ file.

-Decker


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Decker on February 25, 2015, 01:36:12 am
Complete newbie ... considering a Hantek DSO5072P - the summary page mentions software upgrades but not removing capacitors(page last edited Nov 8 2014), is it still necessary to remove the capacitors pl00 mentioned here (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg411573/#msg411573)?

EPlan,
You would need to remove those capacitors only if you hacked/increased the BW to 100MHz (or 200MHz).
My 100MHz (stock DSO5102BM) scope arrived with the locations marked on the board but the capacitors were not installed.  I was able to increase the BW from 100MHz to 200MHz, however there was still some work to be done in the input circuits with regard to resistor values.

Getting the 70MHz version would suggest that the capacitors are likely to be present and must be removed to achieve higher BW capability.

You could just get a 100MHz scope and leave it as-is to avoid any need for rework.

Also, I got the BM version with the extra [M]eg of memory.  That is a big waste because the extra memory is virtually useless since the capture is so slow and more than about 512K memory is rarely used.

Recommend base unit as DSO5102B, or the "P" equiv. DSO5102P if you like.
Doubtful the caps will be present in the recommended models.

-Decker
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Decker on February 25, 2015, 01:44:56 am
For those interested...

My -brief- evaluation of the Hantek product(s) current hardware is available here:
Hantek DSO (http://www.decker.myredhat.org/hantek/index.html)

There are a few informative pics, as well.

If the info is helpful, Great!
If not, Bummer!

-Decker
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rwgast_lowlevellogicdesin on February 25, 2015, 06:10:53 pm
Im thinking about 70mhz version and upgrading it to 200mhz, I dont mind the rework as long as it can be done with an iron. Would you say paying for the b model is a waste of money? Is the scope to slow when using the deeper memory past the P models?

Secondly and this is my biggest fear, does the scopes front end have any issues or have the been fixed? How about the constant lock ups? After watching Daves video it somewhat scared me away. Although I know there has been plenty of firmware releases since then.

Lastly is there a way to hack some type of pass fail trigger even if its through USB? I would like to write scripts to integrate with my saeleae logic analyzer?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Decker on February 26, 2015, 03:17:51 am
Im thinking about 70mhz version and upgrading it to 200mhz, I dont mind the rework as long as it can be done with an iron. Would you say paying for the b model is a waste of money? Is the scope to slow when using the deeper memory past the P models?

The B is okay.  Gets wasteful when you add the M.
Everything is slower than expected, but it's a "bargain" scope.

Quote
Secondly and this is my biggest fear, does the scopes front end have any issues or have the been fixed? How about the constant lock ups? After watching Daves video it somewhat scared me away. Although I know there has been plenty of firmware releases since then.

Seems pretty stable, but mine is the most recent release of the 5102.  Locks up only when "user" is careless and goes beyond the scan memory limit, which changes depending on the function.
Software doesn't prevent it, but might in the next upgrade if they do their job.

Quote
Lastly is there a way to hack some type of pass fail trigger even if its through USB? I would like to write scripts to integrate with my saeleae logic analyzer?

I'm sure you could read from the unit via a script and make something work.
Personally, I'd just solder in a header and add the internal LA board if I needed that.

At this time, I use independent ZeroPlus LAs and nothing integrated.  I find it much more reliable to use a scope as a scope, and LAs as LAs without anything interconnected other than trigger inputs and probes.
 
-Decker

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ZdH on February 27, 2015, 02:38:00 pm
Hi, could you tell me, please, if you've already tested this tool on the last devices? I bought Voltcraf DSO1062D from Conrad, sw v3.30.0 (140924.0) and hw v1010x55778344. I'd like to have an Ethernet interface, so I soldered Ethernet connector with two LEDs and trafo PULSE H1102NL. And wanted to use your software to change my license to net version. But I can't connect to scope. I trying it by rear USB connector, it's correct, please? Or should I use serial interface with UART on the connector J801? (No one LEDs on the Ethernet connector lights up and on the switch I haven't any connection - UTP cable is "dead".) My OS is Windows 8.1 64b.  :( Could you help me, please?
Did you also add the 2 x22pF caps plus the 25Mhz Crystal? Eventually you could also have to remove a 0R resistor near the DM9000AEP...
If you could post a photo of the DM9000AEP area and a photo of the H1102NL than we might have more détails to help you...
Sorry, it has took me so long ... Here is my photos. (http://host.csb.cz/osciloskop/)
One of them with H1102NL: (http://host.csb.cz/osciloskop/DSC_3862.JPG)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Decker on February 27, 2015, 05:23:28 pm
ZdH,

Try this... [see attachment jpg]

Make sure you put Y2 (25MHz Xtal) on the TOP side. :-)
-Decker
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ZdH on February 27, 2015, 06:36:02 pm
ZdH,
Try this... [see attachment jpg]
Make sure you put Y2 (25MHz Xtal) on the TOP side. :-)
-Decker
Thank you, I've thought I haven't any components ... But -> DM9000 has 100 pins - is't possible to put on the PCB? I'll study it againg. Thank you one more.
ZdH
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Decker on February 27, 2015, 07:42:59 pm
Thank you, I've thought I haven't any components ... But -> DM9000 has 100 pins - is't possible to put on the PCB? I'll study it againg. Thank you one more.
ZdH
You need the DM9000AEP in QFP48 package, here's an eBay example:
DM9000AEP QFP48 (http://www.ebay.com/itm/271028661727)

-Decker

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: chsn on March 04, 2015, 05:53:05 pm
MSO5202D is it possible to install the Russian language?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Decker on March 04, 2015, 10:26:18 pm
MSO5202D is it possible to install the Russian language?

Click the "Search" button (next to Print button) and enter "Russian" to search the thread.
I immediately got 15 hits and here's an example -> Search Result #14 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg33591/?topicseen#msg33591)
You'll have to "hack" the language into the DSO unless it's released in a FW update, but this a starting point for you.

Note to thread: Folks should at least make an "attempt" to search before asking and making everyone else do the work for them. :-)
-Decker

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vferencz on March 05, 2015, 09:25:50 am
ZdH,

Try this... [see attachment jpg]

Make sure you put Y2 (25MHz Xtal) on the TOP side. :-)
-Decker
I' want to install DM9000AEP, H1102NL and optos in RJ45 line. In theard #1105 is Tinhead's sch. and picture.  Intresting me the types & values of missing components, (if it's possible).
(I' have same scope as ZdH, and juse their picture.)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: chsn on March 05, 2015, 11:01:14 am
English I do not know, do not give instructions to email the installation language. I do not understand the firmware extension is up, and how and where to put the language? Or a link to the installation instructions. I can not find myself because of poor knowledge of the language. Thank U.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: colosseum01 on March 08, 2015, 10:12:02 pm
Hi guys i wanna to ask any1 , is there some has got experince with HANTEK MSO7084BLG ? Is it hackable to better rate?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mg.glodek@gmail.com on March 12, 2015, 07:19:43 am
Hi,

I have received a Volcraft DSO-1062D scope that crashes at the very begining after start, shoving only Volcraft logo. After connecting via UART to my laptop with Putty software I have noticed that linux faild to start with "Kernel panic - not syncing: Attempted to kill init!" error.
Full log below.

Can I ask anyone that has simmilar scope (Hantek DSO5062D or Takwey) to make a backup file for me that I could flash mine?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Decker on March 14, 2015, 01:44:55 pm
I' want to install DM9000AEP, H1102NL and optos in RJ45 line. In theard #1105 is Tinhead's sch. and picture.  Intresting me the types & values of missing components, (if it's possible).
(I' have same scope as ZdH, and juse their picture.)

vferencz,
The opto-isolator components are for UART-over-RJ.
You should not be installing LAN transformer with additional opto devices.
Just install the LAN components and be done. :-)
Use the UART over J801 with TTL 3.3v -> COM interface.

LAN components for latest HW version:
RJ LAN Jack (j2)
DM9000AEP (u17)
25MHz Xtal (y2)
LAN Xformer (jc1)
2x 22pF caps (remove 0 ohm resistor - if present)
And manual config of network module via UART console...

All of the necessary info is available in the recent posts to this thread.

-Decker
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vferencz on March 14, 2015, 04:15:05 pm
I' want to install DM9000AEP, H1102NL and optos in RJ45 line. In theard #1105 is Tinhead's sch. and picture.  Intresting me the types & values of missing components, (if it's possible).
(I' have same scope as ZdH, and juse their picture.)

vferencz,
The opto-isolator components are for UART-over-RJ.
You should not be installing LAN transformer with additional opto devices.
Just install the LAN components and be done. :-)
Use the UART over J801 with TTL 3.3v -> COM interface.

LAN components for latest HW version:
RJ LAN Jack (j2)
DM9000AEP (u17)
25MHz Xtal (y2)
LAN Xformer (jc1)
2x 22pF caps (remove 0 ohm resistor - if present)
And manual config of network module via UART console...

All of the necessary info is available in the recent posts to this thread.

-Decker

Decker,
THX for answer.
vferencz
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mushroom on March 15, 2015, 11:00:09 pm
Hello !

This is my 1st post on EEV blog, and english is not my 1st langage. I hope you'll be indulgent !

I just got a brand new Hantek DSO5102P yesterday, after my old CRT oscope died on me last week. This is my first DSO.

System information :

Model : DSO5102P
SW version : 3.40.0(140925.0)
HW version : 1000xffff8108
Serial : T 1G/036 xxxxxx
 
I have one question : is it possible to make it wireless with a bluetooth module, for use with DigitalScope, and for data logging ? (HC-05 for example).

I have no idea of the required baudrate. I also imagine that the UART is not suitable (???). I've read almost all this huge thread, but did'nt find the needed information. It seems to me that the UART port is intended for remote access to the embeded system, nothing else (???)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Decker on March 16, 2015, 02:16:24 am
Hello !

This is my 1st post on EEV blog, and english is not my 1st langage. I hope you'll be indulgent !

I just got a brand new Hantek DSO5102P yesterday, after my old CRT oscope died on me last week. This is my first DSO.

System information :

Model : DSO5102P
SW version : 3.40.0(140925.0)
HW version : 1000xffff8108
Serial : T 1G/036 xxxxxx
 
I have one question : is it possible to make it wireless with a bluetooth module, for use with DigitalScope, and for data logging ? (HC-05 for example).

I have no idea of the required baudrate. I also imagine that the UART is not suitable (???). I've read almost all this huge thread, but did'nt find the needed information. It seems to me that the UART port is intended for remote access to the embeded system, nothing else (???)

One "quick" search yielded this:

Reply #2459 on: August 27, 2014, 12:46:25 PM

I'd just like to thank tinhead for his hard work and dedication to hacking this 'scope... Cheers!

My DSO5072P arrived today and I finally plucked up the courage to hack it. I tried it first with the DSO-USB tool but it locked up and the 'scope froze. I thought I'd killed it, but it rebooted and I decided not to risk it that way again.
I didn't have a USB-Serial adapter but I did find a Serial over Bluetooth adapter, so I wired it in and connected using Putty, then changed the file name and the name of the scope in logotype.dis, and I'm up and running.
I'll probably leave the Bluetooth module in for now. It might come in handy one day, and it saves taking it apart again.

Now I just need to figure out (I need someone else to figure out) how to change the boot logo...   ;D

I suggest you begin by talking to "The Doc" and see what that yields.  Perhaps try a PM to Doc and see...

-Decker
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on March 16, 2015, 08:44:29 am
Hi,

I have received a Volcraft DSO-1062D scope that crashes at the very begining after start, shoving only Volcraft logo. After connecting via UART to my laptop with Putty software I have noticed that linux faild to start with "Kernel panic - not syncing: Attempted to kill init!" error.
Full log below.

Can I ask anyone that has simmilar scope (Hantek DSO5062D or Takwey) to make a backup file for me that I could flash mine?

I guess the flash chip broken.  :palm:
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mg.glodek@gmail.com on March 16, 2015, 08:47:08 am
Problem is connected with one particular partition. Hope It can be repaired.


Wys?ane z iPhone za pomoc? Tapatalk
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: fremen67 on March 16, 2015, 12:37:09 pm
I guess the flash chip broken.  :palm:
This may rather come from a corrupted partition. If this is the case, this could be fixed by flashing again this partition... but we need a flash dump from a working device for that...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on March 17, 2015, 08:38:12 am
Where I can this flash dump?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mg.glodek@gmail.com on March 17, 2015, 03:16:36 pm
I just receive my DSO dump from Dominic. Thank You very much once again. It is working perfectly right now after first kernel flash.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on March 18, 2015, 07:59:49 am
Congratulation!  ^-^
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vinayst on March 19, 2015, 04:32:55 am
 :-[

Hi All, I have Hantek 1062BV with SW Version : 2.01.1(131115.0) HW Version : 10020x55558312

I had used the 200 hack earlier ( did not do the logo hack as it did not work),today i had updated to the latest firmware from Hantek site the 200 firmware dso1kb_2.01.1_DSO1202BV(140730.0).up instead of the 60 mhz one.


Now the Oscilloscope blanks up after showing the Hantek Boot screen and the Firmware Number.It just blanks up,i tried removing the battery etc but of no help.Have also send across a mail to Dave ( Tim ) as iam struck and it wont progress ahead

Vinay
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Decker on March 20, 2015, 05:00:54 pm
:-[

Hi All, I have Hantek 1062BV with SW Version : 2.01.1(131115.0) HW Version : 10020x55558312

I had used the 200 hack earlier ( did not do the logo hack as it did not work),today i had updated to the latest firmware from Hantek site the 200 firmware dso1kb_2.01.1_DSO1202BV(140730.0).up instead of the 60 mhz one.


Now the Oscilloscope blanks up after showing the Hantek Boot screen and the Firmware Number.It just blanks up,i tried removing the battery etc but of no help.Have also send across a mail to Dave ( Tim ) as iam struck and it wont progress ahead

Vinay

Chances are, you did not fully (or properly) complete the "hack" tasks on that unit.  Don't know for sure, but seems likely you did the work only over USB.  The only way you can figure out what is happening in that scope is to connect a terminal to the UART (j801) port and access the root of the system during boot.  USB will not suffice, it must be done with a COM terminal.
The connection details for the 3.3v UART -> COM Port interface/connection are mentioned all over this thread, so look into that first and you can get some answers about what's happening in the scope.

-Decker
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: JRoque on March 20, 2015, 05:41:15 pm
Hi all,

After 4 years of service - but <10 hours total runtime - my Tekway DST1102B expressed its disapproval for being ignored by popping a capacitor. Sorry, I don't have the cap number in the board but it's the -5V rail cap next to the regulator. The blown cap was completely dried out and opened (thankfully). Replacing it with a known good one brought the scope back to service with no other apparent damage.

See pic:
(https://lh5.googleusercontent.com/-pPTfxNtaVII/VQxZMhTeSaI/AAAAAAAABBE/ghOU2lOzTLI/s800/BlownCap.jpg)


Regards,
JR
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Decker on March 21, 2015, 12:52:03 am
Hi all,

After 4 years of service - but <10 hours total runtime - my Tekway DST1102B expressed its disapproval for being ignored by popping a capacitor. Sorry, I don't have the cap number in the board but it's the -5V rail cap next to the regulator. The blown cap was completely dried out and opened (thankfully). Replacing it with a known good one brought the scope back to service with no other apparent damage.

Regards,
JR

Yep, that electrolytic is certainly a plump can.  Since it was on the output of the 7805, its rating was probably 1000uF @ 6.3v so I hope you replaced it with a rating of 16v to keep it from getting stressed. :-)

-Decker
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: LEDAero on April 01, 2015, 08:07:30 am
Hello !

This is my 1st post on EEV blog, and english is not my 1st langage. I hope you'll be indulgent !

I just got a brand new Hantek DSO5102P yesterday, after my old CRT oscope died on me last week. This is my first DSO.

System information :

Model : DSO5102P
SW version : 3.40.0(140925.0)
HW version : 1000xffff8108
Serial : T 1G/036 xxxxxx
 
I have one question : is it possible to make it wireless with a bluetooth module, for use with DigitalScope, and for data logging ? (HC-05 for example).

I have no idea of the required baudrate. I also imagine that the UART is not suitable (???). I've read almost all this huge thread, but did'nt find the needed information. It seems to me that the UART port is intended for remote access to the embeded system, nothing else (???)

THis website gives you all the info you need: http://www.circuitsathome.com/measurements/hantek-dso5000-series-oscilloscope-modifications-part-1-doubling-the-bandwidth-of-dso5102b (http://www.circuitsathome.com/measurements/hantek-dso5000-series-oscilloscope-modifications-part-1-doubling-the-bandwidth-of-dso5102b)

Pin layout, speed, etc.

Are you OK with changing the HC-05 settings, or do you need some help with that?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Decker on April 01, 2015, 07:45:40 pm
Hello !

This is my 1st post on EEV blog, and english is not my 1st langage. I hope you'll be indulgent !

I just got a brand new Hantek DSO5102P yesterday, after my old CRT oscope died on me last week. This is my first DSO.

System information :

Model : DSO5102P
SW version : 3.40.0(140925.0)
HW version : 1000xffff8108
Serial : T 1G/036 xxxxxx
 
I have one question : is it possible to make it wireless with a bluetooth module, for use with DigitalScope, and for data logging ? (HC-05 for example).

I have no idea of the required baudrate. I also imagine that the UART is not suitable (???). I've read almost all this huge thread, but did'nt find the needed information. It seems to me that the UART port is intended for remote access to the embeded system, nothing else (???)

THis website gives you all the info you need: http://www.circuitsathome.com/measurements/hantek-dso5000-series-oscilloscope-modifications-part-1-doubling-the-bandwidth-of-dso5102b (http://www.circuitsathome.com/measurements/hantek-dso5000-series-oscilloscope-modifications-part-1-doubling-the-bandwidth-of-dso5102b)

Pin layout, speed, etc.

Are you OK with changing the HC-05 settings, or do you need some help with that?

LEDAero:  That link is more focused on the older HW/SW, and a majority of it points back to {this} thread which is very current.

mushroom: The UART is a tty console to the entire (internal) Linux system.  Even the boot codes can be changed from there.
This thread has all the information you need, just search it and you'll find info about wireless add-on hacks, USB, UART baud, locations, Ethernet components, etc...
Use the thread "search" (next to "print") button to expand your investigation.

-Decker

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on April 02, 2015, 07:14:47 am
Hi guys i wanna to ask any1 , is there some has got experince with HANTEK MSO7084BLG ? Is it hackable to better rate?
hello!
Where to buy MSO7084BLG?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tkalfaoglu on April 16, 2015, 11:41:06 am
Can I ask a very noobish question: How do you connect the PC with the scope?  I have a hantek dso5102p, my first scope, and naturally would like to up its sampling rate to 200, but I'm not sure how to connect the two together.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: dditaly on April 16, 2015, 04:11:05 pm
Hi there to everybody!
very useful topic and nice guys,

I am a "rookie" starting with a cheap ATTEN ADS1062C (equivalent to SIGLENT SDS1062C) (60MHz, 500Msa/s) just to learn using a scope, but I am interested in hacking it to 100MHz and increase the memory depth (4K) with hardware mod.

Could you please help me to understand it it is feasable or compatible with the topic issues?

thanks in advance
best regards
 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on April 20, 2015, 01:44:46 am
Can I ask a very noobish question: How do you connect the PC with the scope?  I have a hantek dso5102p, my first scope, and naturally would like to up its sampling rate to 200, but I'm not sure how to connect the two together.

Brief steps
Install software and driver on PC -> Open software on PC -> Connect DSO to PC by a USB cable (there's a USB connector on the back of DSO) -> when connect successfully, light green on the tool bar-> clike play button on the window of display.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vinayst on April 23, 2015, 07:28:35 am
Hi,

I have a Hantek 1062BV which was send for repair.It seems the engineer there has misplaced the battery, and is not able to source the same.Can somebody provide the tech details a to the following, so that i can get it custom made.

Voltage : ? ( I assume it might be 5V, but not sure, did not note details while the battery was there:-(.
Amp : ? mAH
Type : I assume Lipo, but further details like No. of cells would be great
Is it available off the shelf if there is any particular part number, and its shared across by other brand devices.

Very unfortunate as without it the whole portability is lost.
This is the only active forum on Hantek, therefore posting for help here.

Vinay
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mark on April 23, 2015, 02:55:23 pm
Here you go Vinay, this is my DSO1202B battery:

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: dom0 on May 03, 2015, 08:43:08 pm
I recently exported some deep captures (1 M depth) and noticed that all(!) CSV files are broken (truncated, mid-line, randomly).

Seems to be an issue with either the firmware (it's the latest tinman-patched one I know of), or the pen drive (high quality USB 3.0 one, never had any issues with it at all). Interestingly the file length are multiples of 512, these two length occurred:
5179392 bytes = 10116 * 512 bytes
5178880 bytes = 10115 * 512 bytes

The header, most interestingly, says this:
#timebase=80000000(ps)
,#voltbase=50000(uV)
#size=800096


800k pts (if that is what the size field indicates) isn't 1 M in my book...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Darkzh on May 13, 2015, 02:50:22 am
Hi, I got lost in this extremly long thread. Did anyone have the chance to tear down all the 3 models: DSO-5062B,5102B,5202B?  What are the hardware differences between these 3 models? Someone said there is a little difference at the frontend? Is it true? What is the real bandwidth when DSO-5062B is hacked into "200MHz"? Or DSO-5102B hacked into "200MHz"? The amplitude should not be lower than the -3dB value....  :-// :-// :-//
Title: Hantek DSO5202BM problem
Post by: szg on May 13, 2015, 08:56:49 pm
Hello,

I have an DSO5202MB SN: T 1G/012 006816

After an firmware upgrade It did not work. (did not start)
Via serial port I repaired the NAND FLASH, it was full with pictures.
Now the oscilloskop working properly, but only on the half srceen.

Does anyone have idea what I can do?

Thanks everyone!

I am sorry for my bad english.




 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: firepower on May 14, 2015, 07:12:37 am
Try reloading the firmware again.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: szg on May 14, 2015, 08:53:17 am
I think it is not firmware problem.
The screen is bad during boot the Linux.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rosasharn on May 18, 2015, 06:20:16 am
Hi, I got lost in this extremly long thread. Did anyone have the chance to tear down all the 3 models: DSO-5062B,5102B,5202B?  What are the hardware differences between these 3 models? Someone said there is a little difference at the frontend? Is it true? What is the real bandwidth when DSO-5062B is hacked into "200MHz"? Or DSO-5102B hacked into "200MHz"? The amplitude should not be lower than the -3dB value....  :-// :-// :-//

I think only their bandwidths are different among these 3 models.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: taldarin on May 18, 2015, 07:04:35 pm
Hi Guys,

Can someone share altium files for latest hardware schematics?
Title: Re: Hantek DSO5202BM problem
Post by: rosasharn on May 23, 2015, 08:01:07 am
After an firmware upgrade It did not work. (did not start)
Via serial port I repaired the NAND FLASH, it was full with pictures.
Now the oscilloskop working properly, but only on the half srceen.

I think, may be you can disconnect the cable between the display and the mother board, and reconnect it again. O0
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: joeskaife on May 26, 2015, 12:37:40 pm
Many thanks Tinhead for your efforts - I'm a happy owner of a 5072 hacked to 200MHz with very little effort - a fabulous budget DSO.

I did have a bad experience this morning with the recommended Noiseblocker replacement fan though.

Oh it was silent alright - but didn't move at all.

I popped the rotor to see if I could redo the expected poor solder joint but found the windings a complete mess! Several loose loops poked up from one coil (there was the break), but the other windings were also poor with one so slack that the coil overlapped the top of the stator and had simply been folded over it to fit the rotor. What a careless mess!

I dropped the rotor into the cheap (but properly wound) fan that came with the DSO and have an acceptable solution but...

Can't recommend this Noiseblocker/Blacksilent I'm afraid.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: nikolas_d on May 28, 2015, 03:42:52 pm
Hello everyone.

I have a  Hantek MSO5102D. After a 6 month of usage it stops to boot , but was accessible via rs232 terminal. I was upload firmware according to instruction . After reboot it stops working at all. Terminal unaccessible for now. Badest that i did not get jtag firmware dump before uploading new firmware. Is there any chance to get Jtag dump from someone of you guys  ?
also i attach a few photo because i not sure about hardware revision.

(http://i.piccy.info/i9/40a45711aea3c99348605e84915c70f1/1432827032/87706/912682/20150528082118_800.jpg) (http://piccy.info/view3/8267524/93d4e527086f01de481ddb28119f58a6/1200/)(http://i.piccy.info/a3/2015-05-28-15-41/i9-8267524/800x450-r/i.gif) (http://i.piccy.info/a3c/2015-05-28-15-41/i9-8267524/800x450-r)

(http://i.piccy.info/i9/f910d4a58d4851f5ff293859fccd6c41/1432827701/89135/912682/20150528082134_800.jpg) (http://piccy.info/view3/8267595/e39064c74b05b457dcffd08311e83c72/1200/)(http://i.piccy.info/a3/2015-05-28-15-42/i9-8267595/800x450-r/i.gif) (http://i.piccy.info/a3c/2015-05-28-15-42/i9-8267595/800x450-r)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Macbeth on May 29, 2015, 01:33:57 pm
Badest that i did not get jtag firmware dump before uploading new firmware. Is there any chance to get Jtag dump from someone of you guys  ?
Hi Nikolas, I have the same 'scope and haven't got around to tearing it apart and messing with it just yet, so the firmware is factory.

I have a cheapo ebay Altera USB Blaster which I have never used before, am downloading Quartus II Web edition now. Is there any other software I need?

So, what do you want me to dump and how? I believe there is a CPLD and a couple FPGA's in there?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: janekx on May 29, 2015, 04:02:03 pm
Hi, new here but with new Hantek DSO 5062M, yes on the panel is only M!!!!
I try to find the serial terminal but is replaced to MSO location right aside the USB

Here is the full board picture

Any new hack posibilities then only 200MHz ? MSO ?

Thanks
Jan

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Starcruiser on May 29, 2015, 04:11:50 pm
The UART connection is missing its pins, you will need to solder the wires or some pins to gain connection, the holes next to the rear USB port is the place, J801 I think it is labeled. Yes this unit is hackable, follow the directions on page one and follow the links.

You can also add LAN to this but need extra parts, this is also in the thread, use the search function.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: janekx on May 29, 2015, 04:21:10 pm
Thanks allready done by connector  ;)

I thinked something more then 200MHz hack if the board is MSO look like ...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: janekx on May 29, 2015, 05:10:16 pm
Interesting that before hack I can set the 2ns timebase  :-//
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Macbeth on May 29, 2015, 05:54:25 pm
Janekx, you will need the LA board if you want the MSO feature. Some pics:
(http://i.imgur.com/x0o3BQy.jpg?1)
My 4 pin UART header came factory installed. Perhaps they need it to configure the LA board?
Some pics of the LA board:
(http://i.imgur.com/SIZck9R.jpg?1)
 
(http://i.imgur.com/X456DMV.jpg?1)

I have to say, the LA in this scope is pretty shitty. There is no protocol decoding. Oh well, all is not lost - that can be done on the PC via USB perhaps? Hantek must have some software for that?... erm... nope! OK then, any third party / open source? nope... Oh well, I can write my own - Hantek must have a protocol available to access the LA over USB? ...nope... There has been some reverse engineering done on the DSO version and it's on the TODO list for Sigrok last time I checked, but even with that, the LA bit is not included.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: janekx on May 29, 2015, 06:37:45 pm
I see,  thanks,  and why i can set 200MHz timebase before hack? 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Starcruiser on May 29, 2015, 07:48:19 pm
The new software allows this 2ns option, still need the hack to activate options to 200Mhz (or 100Mhz) if you want it.

That unit has no header for the LA board either, not sure if you are missing any other passives or chips. Just an observation.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Macbeth on May 30, 2015, 01:16:07 am
@nikolas_d

From your photos it looks like you tried JTAG programming the CPLD (J701 pins soldered)?
My board looks the same as yours, MB Ver1.01. As this is the first time I've ever used the USB Blaster I've included a screen print. I "Examined" and then saved the .pof file.  I also "Verified" the file against the chip and it appears ok. File is attached below.

(http://i.imgur.com/uGC6JvY.png)

I recall tinhead was looking for a copy of this too. :-+
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: nikolas_d on May 31, 2015, 04:33:05 am
Macbeth, thanks , but according to a file size , seems you read only a altera chip content.

is there any chance to read/write full binary with USB baster , or i need use different full featured jtag programmer?

Guys, please, is it possible to create success manual for dump|restore using jtag, and also please tell which jtag programmer you  used for thisu
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: nikolas_d on June 02, 2015, 08:23:34 pm
Hello guys , finally i knew exactly that i need.
seems like i need restore a content of samsung arm processor.

i found second jtag on a board . Actually the question is : where can i get sansung 2440 dump to upload to OSC via second jtag ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Macbeth on June 03, 2015, 08:46:44 am
nikolas,

yes you want J901 to upload the firmware on. The J701 you soldered the pins to is for the Altera CPLD.

tinhead has a OneDrive with plenty of flash images, including the MSO version. As he always says, read the first post on this thread.

I took a copy of my scope over serial using nanddump before I did the bandwidth mod. I'll post it later when I have access to my other PC if you have trouble with tinheads dump.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: nikolas_d on June 10, 2015, 03:12:16 am
Macbeth, did you already download image from your 5202d ?
i`m ready to upload image but can`t find it.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jagielonka on July 27, 2015, 05:49:44 pm
Hello

 My ads1102cal atten is bootloop, how do I unlocked?  :  :-//

Thanks in advance.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ogara on August 03, 2015, 05:27:49 pm
Hi, my first post here.  I am searching for my first scope with a budget around $250 and have narrowed it down to Hantek's range of DSO.

Originally I was looking at DSO5072p but another model pop up for the same price - a model DSO4072c  from the DSO4000c series of DSO4202C, DSO4102C & DSO4072C -- http://www.hantek.com/en/ProductDetail_3_4163.html. (http://www.hantek.com/en/ProductDetail_3_4163.html.)

Specs seems similar to DSO5072p  except it had a additional feature listed as "25MHz Arbitrary waveform generator, 12 bits resolution, 200MHz DDS"

How old is this DSO4072c model?  Is it hackable?  I search everywhere but can't find any reviews or mention of this DSO4000c series - not even here - the only thread discussing Hantek.

Would like to hear if anyone has comments on it.  Is DSO 4072c a better model to get at the same price?


(http://i.imgur.com/7wsS3N8.png)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: quantalume on August 13, 2015, 06:08:32 pm
How old is this DSO4072c model?  Is it hackable?  I search everywhere but can't find any reviews or mention of this DSO4000c series - not even here - the only thread discussing Hantek.

Would like to hear if anyone has comments on it.  Is DSO 4072c a better model to get at the same price?


I think it's a fairly new model.  The price wars are well underway, however: http://www.aliexpress.com/item/NEW-Hantek-DSO4202C-2-Channel-Digital-Oscilloscope-1-Channel-Arbitrary-Function-Waveform-Generator/32372848210.html. (http://www.aliexpress.com/item/NEW-Hantek-DSO4202C-2-Channel-Digital-Oscilloscope-1-Channel-Arbitrary-Function-Waveform-Generator/32372848210.html.) Specs seem to be the same as the DSO5000P series, so my guess is that the hardware is substantially the same.  My only reservation would be that the controls are more cramped than they are on the 5000P series.  Also, I personally wouldn't get much use out of that sort of generator. The distortion is too high for audio use, it doesn't go high enough in frequency for serious RF use, there are no modulation functions, and an Arduino or something else with digital protocol support would be more suitable for generating sophisticated digital waveforms. Having said that, why don't you buy one and tear it down for community benefit?  ;)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: artag on August 28, 2015, 10:30:55 am
Just got a secondhand MSO5102D on ebay for a good price. Mainly with the intention of hacking it to within an inch of its life but also because it's a reasonable portable with a much bigger screen than the handhelds. I see there's a huge space inside that could take a battery.

It seems to be a bit later version than the ones documented here, though the hardware at least doesn't seem much changed.  What should I photograph / copy etc. to add to Tinhead's catalogue ?

The system information says

model MSO5102D
sw version 3.2.35(141129.1)
hw version 1010x55778344
serial T 1G /012 022xxx   (why do people obscure their serial numbers ? what will happen if I put it correctly ?)
boot count 13 (I think 3 of those were mine ..)
upgrade count 0
lcdfront.ts 0.1.0

I was looking at these a year or so ago and noticed that someone had got the linux OS to run a console on the MSO screen (instead of the scope application). I can't find that now - anybody know where the link was ?

I'm interested in :

removing the smell of tobacco smoke (it's not grubby but it sure stinks)
tweaking the OS with the intention of running custom code such as protocol analysers
adding the lan port
adding the sd card
adding the 2nd USB host port
adding a battery pack
getting some nicer knobs for it

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: dapsaille on September 01, 2015, 08:00:38 pm
Hello,

 i'm waiting for the delivery of a Voltcraft DSO-1062D and i wonder if i can add the vga connector to this model ?

I've seen video option in the firmware licensing tool, is it related to vga output ?

 i'm discovering the magical world of scopes (and electronic in general) so please forgive me if i hurt you eyes/brain with stupid questions  :blah:

Thanks for sharing and for your indulgence  ;)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: krepa on September 06, 2015, 06:28:39 pm
Hi folks,
I'm new at eevblog. I did search this thread but I did not find much info about hantek DSO5062M (no "B", only "M")

I got this scope on my desk because dial knobs and keys are mixed and some don't work at all. For example Autoset acts as Help.
Serial console is working. Firs message during boot is: OM*** Warning - bad CRC, using default environment. Full boot log is here. http://pastebin.com/TcnhYpXE (http://pastebin.com/TcnhYpXE)
HW version on the board is 1.02, the pcb looks like the one few pages back.

During boot there is a logo DSO5062BM

On several places there is a sign that original owner tried to hack it and expand BW to 200MHz.
Here is sys.inf
Code: [Select]
[root@Hantek ~]# cat sys.inf
[DST type]dst1202b
[soft version]3.30.0(150116.0)
[fpga version]0x55778344
[start time]33
[update time]0

I assume that he used wrong FW (BM intead of M) and therefore keys and knobs are messed up.

I checked hantek's site but there is no mention about "M" model - so no FW to download...
Is it possible that someone can share working FW for DSO5062M?

For the beginning even the 60MHz version is fine.

Thank you,
Pavel
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Macbeth on September 06, 2015, 08:17:18 pm
I'm interested in :

tweaking the OS with the intention of running custom code such as protocol analysers
Yes, me too! I currently use it piggy backed with a cheap ass Salae so I can do stuff on the PC. I can't see why the Hantek, despite having a USB interface, doesn't have standard fucking drivers like USBTMC with SCPI to use with NI-VISA, etc.

From what I have found there is no PC software that can read the LA data, so you are stuck with the shitty implementation directly on the Hantek.

Quote
adding the lan port
This has been done, but there is nothing of substance to use it for, at least with the existing crappy firmware.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Fixup on September 28, 2015, 11:15:43 pm
Hi,
Thx for good information about the hack. I have a DSO5072p that is hacked. I checked Hantek's webpage and saw that there is a new firmware available dso5kp_func_dso5202p20150906.up. However i get "Firmware update failed, error 0xf7 illegal update files detected!"
Has anyone tested this new firmware on a unhacked/orginal DSO5202p?
Is there any difference in the firmware or have they just added some way to check if the device is hacked?
Is there any way to program the latest firmware to the oscilloscope?

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jcrubin on September 28, 2015, 11:44:05 pm
My 5072P arrived today!!!!! Very excited...  Looks like a firmware update was made available on September 6th so ill be doing an update before anything
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: GlowingGhoul on September 28, 2015, 11:45:26 pm
removing the smell of tobacco smoke (it's not grubby but it sure stinks)

About the only thing you can do about that wretched odor is take up the foul habit so you don't notice it. :-//
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jcrubin on September 29, 2015, 12:21:12 am
Firmware upgraded with no issues.

went from 3.40.0(150521.0)    to 3.40.0(150906.0)

Interesting note - boot count remained at 0 as well as the upgrade count

I have no idea what changes this firmware brings and havent found a changelog

 Also I see how to get to dual window mode.... but can figure out, without pressing default setup, how to get back to single window mode

ANSWER: Apparently F7 will toggle between single/dual window mode.... though not documented
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Fixup on September 29, 2015, 05:01:42 pm
I gave the update a new try and now I got it updated.  :D
First it was giving the 0xf7 error if I tried to run the update directly from the USB stick.

For to succeed with the update I needed to first run the "dso5kp_backuptool.up" backup. The backup somehow hang at 9/10. I waited for about 10min and pressed cancel.
After that I was able to update the DSO5072p with "dso5kp_func_dso5202p20150906.up" firmware.

The new Firmware looks the same. Hopefully some bugs are fixed.
BTW. In my opinion this is a good/ok digital oscilloscope for a low price. 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vastargazer on September 29, 2015, 05:02:22 pm
Hello all:

New to the site and new to O-scopes.  I am an electronics hobbyist who works mostly with microcontrollers circuits generally 12V or less.  I am interested in expanding into o-scopes from both a use and learning perspective.  After reading a lot on the Internet and particularly this site, I decided on a Hanko DSO5102P for my first scope.  My questions for the thread are 1) Confirmation that these scopes are still hackable (the hack looks pretty easy but the thread goes back to 2010, so just checkin') and 2) some validation that the make/model I selected is a reasonable unit for a hobbyist and o-scope newb.  Thoughts?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Macbeth on September 29, 2015, 05:51:45 pm
I decided on a Hanko DSO5102P for my first scope.
Great choice for a first scope. Never heard of it, can't find it on google either. What made you decide on this enigma?  :palm:

If I was buying again I would skip the Hanteks and go for the Rigol 1054Z, easily hackable.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vastargazer on September 29, 2015, 06:28:17 pm
Actually.  I meant Hantek DSO5102P.   :-\  Sometimes I am such a dork.

Hanko is the brand of soldering iron I use.  I have been making that damn typo all day.

Sorry for the confusion
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Macbeth on September 29, 2015, 07:44:22 pm
LOL. But like I said, go for the Rigol. Check out Daves vid here http://www.eevblog.com/2015/01/15/eevblog-703-rigol-ds1054z-oscilloscope-review-summary/ (http://www.eevblog.com/2015/01/15/eevblog-703-rigol-ds1054z-oscilloscope-review-summary/)

I've got a Hantek MSO5102D and would rather have a DS1054Z any day.

Of course it comes down to cost I guess, but the Rigol is a bargain.

ETA: Easier to hack too!

https://www.youtube.com/watch?v=nXehxmJxrI8&ab_channel=AvE (https://www.youtube.com/watch?v=nXehxmJxrI8&ab_channel=AvE)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vastargazer on September 30, 2015, 12:25:07 am
Thanks Macbeth. 

Understood about the Rigol.  And you're spot on.....cost.  I don't think finance (wife) will approve the additional $120  :-- for the Rigol over the Hantek.  I can totally see your point.  The features on the Rigol are nicer. 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Macbeth on September 30, 2015, 12:49:25 am
Tell me about it. Not only do you get 4 channels, but they are better than my so called MSO's so called logic analyzer right away. I may have 16 LA channels, but NO protocol decoding. Ok, fair enough, that can be done on the PC.... BIG FAT NO! - it's a joke.

The Rigol doesn't even pretend to be a logic analyzer/MSO but is more capable with its 4 channels and has protocol decoding for RS232/UART, I2C, SPI.

You say you are into microcontrollers. Believe me you want these features and they are a bargain at $120 premium to the Hantek.

Stuff SWMBO. If that is all that matters vs real lack of funds then you need to grow a pair. $120 is probably just one of her shoes  :-DD

Tell her you are getting a $900 scope (once hacked) for $399
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jcrubin on October 02, 2015, 01:14:48 am
Ive started a thread for my new Hantek 5072P and what ive done with it thus far

https://www.eevblog.com/forum/testgear/hantek-dso5072p-thread-not-the-bandwidth-hack-thread/ (https://www.eevblog.com/forum/testgear/hantek-dso5072p-thread-not-the-bandwidth-hack-thread/)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vastargazer on October 02, 2015, 10:31:00 pm
I went for the Rigol.

Macbeth:  got link to the 100Mhz hack.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: CustomEngineerer on October 06, 2015, 02:04:17 am
I went for the Rigol.

Macbeth:  got link to the 100Mhz hack.

I originally purchased the Hantek MSO5102D and had nothing but problems with it. It would lock up solid on me 2-3 times per hour. I tried to make it work but finally got so frustrated I returned it on the last day it was returnable. Went ahead and ordered the Rigol and have been happy ever since. I know the Rigol has issues of its own but so far I have not run into any.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: schlot on October 06, 2015, 09:21:25 pm
Hello,

I bought a new Hantek DSO1122S and I would like to add LAN support. The board looks like that one from post #2282:


Here a few, not so good, photos of one side of the hantek dso1122s board:

http://www.davidefabbri.net/files/foto/SANY0114.JPG (http://www.davidefabbri.net/files/foto/SANY0114.JPG)
http://www.davidefabbri.net/files/foto/SANY0115.JPG (http://www.davidefabbri.net/files/foto/SANY0115.JPG)
http://www.davidefabbri.net/files/foto/SANY0116.JPG (http://www.davidefabbri.net/files/foto/SANY0116.JPG)
http://www.davidefabbri.net/files/foto/SANY0117.JPG (http://www.davidefabbri.net/files/foto/SANY0117.JPG)
http://www.davidefabbri.net/files/foto/SANY0118.JPG (http://www.davidefabbri.net/files/foto/SANY0118.JPG)
http://www.davidefabbri.net/files/foto/SANY0119.JPG (http://www.davidefabbri.net/files/foto/SANY0119.JPG)

P.S. by the way I'm looking for the sd socket, have you got a suitable part number ( or farnel/mouser code )

I am running SW 2.01.1 (150108.0)
HW version is 10040x57029100
(I guess that means HW1.00.4)

I have a DM9000AEP, an HL1102NL and a RJHSE-5381 Jack (RJ45).

Is it enough to solder these in place? Do I need anything else? What about that 25M crystal that is missing on board? Is it required or can the DM9k run from the FPGA clock? I have read soemething about a 0R SMD that should be removed, but I do not understand why. Are all the other parts (resistors, caps) already on board or do I need to add something? If the crystal is required, is it possible that the caps are already on board?

Thanks in advance for any assistance.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: dafields on October 07, 2015, 06:14:47 am
Hello,

I bought a new Hantek DSO1122S and I would like to add LAN support. The board looks like that one from post #2282:


Here a few, not so good, photos of one side of the hantek dso1122s board:

http://www.davidefabbri.net/files/foto/SANY0114.JPG (http://www.davidefabbri.net/files/foto/SANY0114.JPG)
http://www.davidefabbri.net/files/foto/SANY0115.JPG (http://www.davidefabbri.net/files/foto/SANY0115.JPG)
http://www.davidefabbri.net/files/foto/SANY0116.JPG (http://www.davidefabbri.net/files/foto/SANY0116.JPG)
http://www.davidefabbri.net/files/foto/SANY0117.JPG (http://www.davidefabbri.net/files/foto/SANY0117.JPG)
http://www.davidefabbri.net/files/foto/SANY0118.JPG (http://www.davidefabbri.net/files/foto/SANY0118.JPG)
http://www.davidefabbri.net/files/foto/SANY0119.JPG (http://www.davidefabbri.net/files/foto/SANY0119.JPG)

P.S. by the way I'm looking for the sd socket, have you got a suitable part number ( or farnel/mouser code )

I am running SW 2.01.1 (150108.0)
HW version is 10040x57029100
(I guess that means HW1.00.4)

I have a DM9000AEP, an HL1102NL and a RJHSE-5381 Jack (RJ45).

Is it enough to solder these in place? Do I need anything else? What about that 25M crystal that is missing on board? Is it required or can the DM9k run from the FPGA clock? I have read soemething about a 0R SMD that should be removed, but I do not understand why. Are all the other parts (resistors, caps) already on board or do I need to add something? If the crystal is required, is it possible that the caps are already on board?

Thanks in advance for any assistance.

Yes you will need a 25MHz crystal. The load caps are already on the board, C467, C468. Given how close C467 looks to the crystal you may want to check the size of the crystal part to make sure they do not touch. I did a similar mod to my sig gen and the only parts needed where the RJ45 socket, magnetics, chip, crystal and in my case the load caps. Don't know about any 0R resistor. Hope this helps.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: schlot on October 07, 2015, 09:44:57 am


Yes you will need a 25MHz crystal. The load caps are already on the board, C467, C468. Given how close C467 looks to the crystal you may want to check the size of the crystal part to make sure they do not touch. I did a similar mod to my sig gen and the only parts needed where the RJ45 socket, magnetics, chip, crystal and in my case the load caps. Don't know about any 0R resistor. Hope this helps.

Thanks a lot. I will go get a crystal and try.


Gesendet von iPhone mit Tapatalk
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: janekx on October 07, 2015, 03:34:48 pm
Hi I get from warranty new DSO5062BM (5062M was bad) and found that there is possible to set 2ns/div so it comes hacked from Hantek?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: schlot on October 07, 2015, 06:06:34 pm
I just purchased a new DSO1122s and wodered why I found the "hack" file already renamed to "...1202" and the 2 ns div enabled. First I thought my dealer shipped "pre-hacked" devices, but apparently you can buy them now ;-)
Title: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: schlot on October 10, 2015, 05:48:55 pm
Yes you will need a 25MHz crystal. The load caps are already on the board, C467, C468. Given how close C467 looks to the crystal you may want to check the size of the crystal part to make sure they do not touch. I did a similar mod to my sig gen and the only parts needed where the RJ45 socket, magnetics, chip, crystal and in my case the load caps. Don't know about any 0R resistor. Hope this helps.

okay, so I soldered a DM9000AEP, magnetics, an RJ45 Jack, a 25 MHz crystal and a micro SD card connector to the board.

For those who have a problem getting the Amphenol 101-00303-68 connector (in Germany you have to pay about 18 EUR for shipping of a 1 EUR part at Digi-Key): The corresponding part number from MOLEX is: 500901-0801. You can get this part at Pollin, for example.

Then I used the HDVersion.set file to change my E2PROM config and enable things. Now the DSO shows SD support, Video support, NET support and I have some more options in the UTILITY menu (like PC SET or VIDEO). So far, so good.

Still, I have a problem getting ethernet working: The DM9000 chip I used has a different ID. I got the error message on console:

dm9000 dm9000.0:read wrong id 0x2b2a2928
dm9000 dm9000.0:read wrong id 0x2b2a2928
dm9000 dm9000.0:read wrong id 0x2b2a2928
dm9000 dm9000.0:read wrong id 0x2b2a2928
dm9000 dm9000.0:read wrong id 0x2b2a2928
dm9000 dm9000.0:read wrong id 0x2b2a2928
dm9000 dm9000.0:read wrong id 0x2b2a2928
dm9000 dm9000.0:read wrong id 0x2b2a2928
dm9000 dm9000.0:wrong id: 0x2b2a2928
dm9000 dm9000.0:not found <-19>.

Therefore, I hex-edited the /dso/drivers/dm9000.ko (I don't know if I can just use a mainline kernel to compile and what toolchain I have to use) and changed the supported chip ID "0x90000A46" to "0x2B2A2928" (if someone wants to try this: note the endianness! In the file you have to search for 0x460A0090 and change to 0x28292A2B). Now ifconfig shows up an eth0 interface with an IP address and the MAC 10:11:12:13:14:15.

Unfortunately, I do not get any physical connection when plugging in an ethernet jack. So, my PC shows no physical connection. Any help?

edit:
Just read the datasheet and found that 0x28 to 0x2b are the register addresses of the chip ID. Apparently, this is what the variable is initialized to and the I/O call to the chip fails.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vinayst on October 12, 2015, 05:02:17 pm
We have a 14 months old DSO1062BV that wont start, when we connect it to battery or Power adapter. All it does is make a "TRRRRK" chatter under the cans.
This Unit was earlier repaired under warrenty for the same issue and checked after repair to be running OK, now it has not been used in last 4 months and has developed the same issue.

Any idea where to start since the dealer is absolutely useless and will not honor his own repair warrenty and is pretty useless.
Thanks for any pointer towards repairing the same

Posting iton this forum as this issue happend when i updated the firmware and it didnt reboot.It later developed the same "TRRK" chatter issue in the cans  after i  did the 200 hack and tried rebooting it.

Thanks for any pointer to resolving this issue, the oscilloscope has hardly been used earlier before the repair and now just a few moths after repair it is again dead, without being used even once.Is this dso so unreliable or did the dealer who fixed it did a shoddy job.

Vinay
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: schlot on October 12, 2015, 06:04:01 pm

We have a 14 months old DSO1062BV that wont start, when we connect it to battery or Power adapter. All it does is make a "TRRRRK" chatter under the cans.
This Unit was earlier repaired under warrenty for the same issue and checked after repair to be running OK, now it has not been used in last 4 months and has developed the same issue.

Any idea where to start since the dealer is absolutely useless and will not honor his own repair warrenty and is pretty useless.
Thanks for any pointer towards repairing the same

Posting iton this forum as this issue happend when i updated the firmware and it didnt reboot.It later developed the same "TRRK" chatter issue in the cans  after i  did the 200 hack and tried rebooting it.

Thanks for any pointer to resolving this issue, the oscilloscope has hardly been used earlier before the repair and now just a few moths after repair it is again dead, without being used even once.Is this dso so unreliable or did the dealer who fixed it did a shoddy job.

Vinay

I can imagine some things to try.

- in the DSO on the main PCB, I can see some test points with voltages noted next to them. You could check these to see if the voltage regulators are OK.

- connect a serial console to the internal UART and see if you get any output from there. Maybe you can figure out where it gets stuck during start-up.


Thomas

P.S.: you said you have a 1062BV. What kind of help videos are there on the card? Just interedted because I have a 1122S and made a ... let's say 1202SV out of it ;-)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vinayst on October 12, 2015, 06:34:01 pm
there was just one animated cartoon video as a sample and nothing else when it worked.

Sure i will check on your tips.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: schlot on October 12, 2015, 09:23:01 pm

there was just one animated cartoon video as a sample and nothing else when it worked.

Sure i will check on your tips.

Just a cartoon movie? I thought there would be tutorial videos. Anyway, thanks for the information.

Good luck!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Fixup on October 21, 2015, 10:51:21 pm
Hi again  :D

Today I stumbled on a problem with my Hantek DSO5072p that has the DSO5202p firmware and has the two capacitors removed at the AD converters.
When measuring on a differential DDR memory clock signal i noticed that the channels are not in phase even if i measure from the same pin.
It looks like one channel is filtering the signal little more and at the same a small phase shift can be seen.
The picture below is measured from clk_p and clk_n so they should be inverted without the phase shift. (Unfortunately the picture when measured from same point was not saved)


I opened up the DSO5072p to see the input stage.
The RX1_1, RX1_2, RX1_3, RX1_4 seem to be 499ohm on my device (marking 68A). I have read in the forum that the 200MHz model should have 280ohm 0,1% so I will give that a try for to correct the phase shift.
The following picture shows the input stage on my DSO5072p (Bought 2014)
(http://)
The differential amplifier seems to have the numbers scratched of. It is probably still a LMH6552 as on the other boards.
Maybe the phase shift could be corrected from the trimmer capacitor on the input. Has anyone got any idea about the trimmer?

I will keep you updated how the resistor change at the differential amplifier affects the signals.
 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Spirit532 on October 22, 2015, 12:45:07 pm
I just received a Hantek DSO5072P, and I was quite surprised to see that it came "hacked" from the factory.
It can go down to 2ns/div, the firmware says it's a DSO5072P, sw is 3.40.0(150521.0), hw is 1000xffff8108, serial number is >3000.
And I am absolutely certain it came right from the factory, since it was still sealed by the original branded scotch tape, plus the seller told me that they never touched it.
To say the least I'm pleasantly surprised, but I'm also quite confused as to why this happened.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: schlot on October 22, 2015, 12:49:51 pm

I just received a Hantek DSO5072P, and I was quite surprised to see that it came "hacked" from the factory.
I can go down to 2ns/div, the firmware says it's a DSO5072P, sw is 3.40.0(150521.0), hw is 1000xffff8108, serial number is >3000.
And I am absolutely certain it came right from the factory, since it was still sealed by the original branded scotch tape, plus the seller told me that they never touched it.
To say the least I'm pleasantly surprised, but I'm also quite confused as to why this happened.

As I said, the same applies to my DSO1122S.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Fixup on November 03, 2015, 08:19:42 am
Hi again,

In a erlier post I had some problems with skew between the channels when I measure the same signal on both channels. This is a very annoying problem since I would need to measure a 133MHz differential memory clock signal and USB signals that is also a differential signal. This problem has been discusses on page 27 on this topic. It seems like the the skew is varying also depending on scope settings. Has anyone got any information about this or is there any fix available for this?
In my opinion they could delay one signal in software so that the signals would show up right on the display.

When studying this problem I also modified the input stage little. I changed some resistors and changed the j-fet to mmbfj309LT1.
Title: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: schlot on November 03, 2015, 09:51:37 am
Has anyone encountered strange DMM readings on Hantek Handhelds?

I have a DSO1122s which is apparently hacked from factory (I have 2 ns div without hacking anything).

Now I try to use the DMM function to measure resistance. The readings were very odd, something like 48 Ohms on a short. I tried to measure resistors and got readings which are way to high or too low.

Continuity mode beeps all the time, but correctly shows "E Ohm" on open circuit and "0 Ohm" on shortcut.

Now the strange thing: When I switch to Amps measurement and afterwards to resistance or continuity, everything is OK. When I switch to voltage and then to resistance or continuity, readings are bad. Switching between V and A gives a "click" noise from the device (maybe a relay switch). Is it possible that the software erroneously reads a floating pin if modes are used in this order? Measurements are clearly correlated to the connected pins, you can see a reaction when shorting the pins during resistance measurement. But the readings are slow and severely off.

Any idea?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: commongrounder on November 03, 2015, 02:35:18 pm
I have the same DSO1122S scope you have.  I have probably used the meter function on this scope only two or three times, as it isn't well protected (or nearly as accurate) compared to my Fluke meters.  I did give it a go this morning and all of the functions performed normally.  I do hear quite a lot of relay switching when changing meter functions, so I would suspect faulty relay contacts as the first thing.  Have you repeatedly changed functions to exercise the relays to see if that changes anything?  The next steps are probably going to be investigating cold/broken solder connections.  Also, what firmware version are you using?  Whatever you do, do NOT use the firmware posted on the Hantek web site.  It will brick your scope.  As far as I know they have not fixed this yet (someone feel free to update me on that).
Good luck! :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: schlot on November 03, 2015, 03:04:07 pm
I have the same DSO1122S scope you have.  I have probably used the meter function on this scope only two or three times, as it isn't well protected (or nearly as accurate) compared to my Fluke meters.  I did give it a go this morning and all of the functions performed normally.  I do hear quite a lot of relay switching when changing meter functions, so I would suspect faulty relay contacts as the first thing.  Have you repeatedly changed functions to exercise the relays to see if that changes anything?  The next steps are probably going to be investigating cold/broken solder connections.  Also, what firmware version are you using?  Whatever you do, do NOT use the firmware posted on the Hantek web site.  It will brick your scope.  As far as I know they have not fixed this yet (someone feel free to update me on that).
Good luck! :)

Oh. I didn't know that firmware thing, so thanks for the hint about the corrupted Hantek link.

edit:
I just checked: The DMM once again did not work after startup: Continuity beeps all the time without cables connected and resistance shows random values. I restarted the DSO and again switched to DMM mode. Then everything seems ok. Voltage readings sometimes are a bit strange as it seems to "charge" as soon as nothing is connected. Open circuit, the voltage meter reaches about 400 mV which I think is a bit too much for background noise.

I hear relay switching noise whenever I change from a DMM mode with a voltage source to a mode with high impedance.

No clicking between V <> A.
No clicking between Diode <> Continuity <> Resistance <> Capacitance.
Clicking between V <> Diode, V <> Continuity, V <> Resistance, V <> Capacitance, A <> Diode, A <> Continuity, A <> Resistance, A <> Capacitance.

The SW version is 2.01.1 (150108.0).
HW Version is 1004 0x57029100
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: commongrounder on November 03, 2015, 10:42:11 pm
I checked my unit and the relay clicking follows the same pattern as you have determined.  My open circuit DC voltage fluctuates between about 15mV and 300mV, depending on what mode I am switching from.  Going between Resistance and Volts DC it settles the closest to zero.  :-\
You seem to have the most recent firmware on your unit.  It is later than what I have on my unit - 2.01.1 (140508.0). 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: schlot on November 04, 2015, 09:04:16 am
Thanks. It seems to be a common behavior of the DMM unit. At least the DSO part works as I expect it.

Is the number in brackets of the SW version the build date (YY-DD-MM)?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: commongrounder on November 04, 2015, 02:17:57 pm
Thanks. It seems to be a common behavior of the DMM unit. At least the DSO part works as I expect it.

Is the number in brackets of the SW version the build date (YY-DD-MM)?

Yes.  That is my understanding.

edit:

I forgot to mention there is a Hantek forum where you could raise your scope's meter mode problem:
http://www.hantek.org/asken/ (http://www.hantek.org/asken/)
It can be a little hit or miss, as there can sometimes be a language barrier, but it wouldn't hurt to try.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: schlot on November 04, 2015, 03:43:40 pm
Thanks for that hint. Somewhere I have already seen that board. There is somebody who complained about a defective resistance measurement function and hantek answered they will repair the unit.

My thought was like "C'mon, at eevblog there are people who analyze and modify the input stage and know about each and every part in the DSO. They know the device better than the manufacturer does" :-)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: commongrounder on November 04, 2015, 04:47:36 pm
The real expert on Hantek stuff (and the other brands made by them) is the OP of this thread tinhead.  But he hasn't posted since January of this year, so I am not sure what his status is.  He has done a lot of hardware analysis, as you can probably tell by browsing this thread.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Fixup on November 05, 2015, 12:25:14 am
Hi,

I made a modification to the analog filter on the input stage on my Hantek DSO5072p.
Now the varactors D01_2 and D02_2 get 10V when the filter is off. This should give a capacitance less than 2.7pF. The cutoff frequency will thereby also be higher when the capacitance is lower.

This could be useful when measuring higher frequencies.
I also increased the amplifiers filter frequency to 350MHz (Made a file /tst in root containing [filter] 35)
Frequenciy settings over 350MHz was having distorted shapes and therefore I chose to leave it at 350MHz.

Please comment what you think about the modification?
(http://)
Title: Re: Hantek - Tekway - DSO hack - i'm back
Post by: tupac on November 08, 2015, 05:25:07 pm
after nearly a year of absence i'm back. I have still to check/reset my emails and other data to be able to login here again as "tinhead", so for now just with temp account. I bet there are lot of PMs in "tinhead"s inbox, to make a clean cut i will simply purge them all, if you have still something important please re-send PM (in a week or so, i need to "reboot" myself first).

tinhead
Title: Re: Hantek - Tekway - DSO hack - i'm back
Post by: RavenSpy on November 08, 2015, 08:52:46 pm
after nearly a year of absence i'm back. I have still to check/reset my emails and other data to be able to login here again as "tinhead", so for now just with temp account. I bet there are lot of PMs in "tinhead"s inbox, to make a clean cut i will simply purge them all, if you have still something important please re-send PM (in a week or so, i need to "reboot" myself first).

tinhead

Welcome back! ;)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Fixup on November 08, 2015, 10:59:11 pm
Hi,

I documented the changes that I've made to my DSO5072p. Hopefully they will be to interest for someone. I am trying to modify the input stage so that it would be more stable to a higher cutout frequency than the original one has. t would also be nice to get the noise in the oscilloscope lower.

Yes, It would probably be cheaper and easier to buy a better oscilloscope. But this is little like a challenge and it is good also for learning purpose.  :popcorn:

Please give some comment about the changes or point out if you see some other tweaks that you would recommend or not.

Thx Tinhead for the information found on the forum!!!


 
 
Title: Re: Hantek - Tekway - DSO hack - i'm back
Post by: Macbeth on November 09, 2015, 02:17:51 am
after nearly a year of absence i'm back. I have still to check/reset my emails and other data to be able to login here again as "tinhead", so for now just with temp account. I bet there are lot of PMs in "tinhead"s inbox, to make a clean cut i will simply purge them all, if you have still something important please re-send PM (in a week or so, i need to "reboot" myself first).

tinhead
Yeah! Welcome back tinhead!

After 12 months doing bird you certainly need to stretch your wings before returning to the fold  ;)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: TheManual on November 09, 2015, 09:53:38 am
Sorry,
Can anyone advice the  .wk file structure (it is the output file of
tektronix software "wavestar for oscilloscopes").
Is it possible to get the  arrays of points from this file?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: luizhdinizf on November 12, 2015, 05:17:51 pm
anyone knows a way to comunicate this instrument with c, python or another interface with a ubuntu 14.04 computer over usb?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: hobbes_dmS on November 14, 2015, 09:02:08 am
Hi,

I've got an Hantek MSO5062D
Software Version 3.2.35 (141129.1)
Hardware Version 1020x55778344
Serial Number T 1G/012 023xxx (so higher than 15000)

In this version the PINs for the serial interface are completely missing, but I just plugged some in.

I can connect with my USBtoSerial adapter and see the starting of Linux. But after booting the console cannot be reached by pressing "Space and Ctrl-C" (and enter)
I've googled and read a lot of pages of this topic but I did not find any solution to this problem (nor anybody else who has this issue).

Any hints? what did I miss?
If it's any help, I use linux with putty to connect.

Oh, and no matter which backup.up file I put on the USB Stick to get a backup, the update-menu will always tell me that the software Version I'm trying to install is too old and that there's a newer one already installed...

Any help is appreciated.
Thanks!
Wolf
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Fixup on November 15, 2015, 08:48:48 pm
Hi.

I see that you have 4 wires connected. 3 wires should be enough.
-Don't connect that+3.3V to the USBtoserial adapter.
-Check that RXD line is connected to the right pin.
-Try to use your adapter alone and see that the characters are echoed. This can be done by connecting txd and rxd lines together on the usbtoserial adapter. The character should ehco when you type a letter.
-Check that flow control and parity is set to None.
-Check in device manager that the comport has 115200 speedsetting. This is normaly 9600.

For the backup I used files from "Tools_P_models.zip" to my P type osciloscope. Check that the backup is for your D model. I don't know if there is some difference.
In the "Backup_P_models" folder there is a text file describing the commands. Possibly you could run the backup commands from commandpromt if you get it to work.

Hope that these advises help :) 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: hobbes_dmS on November 16, 2015, 12:41:29 pm
Hi.

I see that you have 4 wires connected. 3 wires should be enough.
-Don't connect that+3.3V to the USBtoserial adapter.
it's not connected (sorry I forgot to write that)

Quote
-Check that RXD line is connected to the right pin.
yes, rdx to tdx and vice versa. otherwise the terminal window stays empty

Quote
-Try to use your adapter alone and see that the characters are echoed. This can be done by connecting txd and rxd lines together on the usbtoserial adapter. The character should ehco when you type a letter.
hmm... then I just see the character I type (once, as in a 'normal' terminal

Quote
-Check that flow control and parity is set to None.
was not, changed it, no difference

Quote
-Check in device manager that the comport has 115200 speedsetting. This is normaly 9600.
set in putty - do I need to set it somewhere else?

Quote
For the backup I used files from "Tools_P_models.zip" to my P type osciloscope. Check that the backup is for your D model. I don't know if there is some difference.
In the "Backup_P_models" folder there is a text file describing the commands. Possibly you could run the backup commands from commandpromt if you get it to work.
Thanks, I'll try that.

And the next step is probably to try on a Windows machine...

edit: btw, when i type Ctrl-C, the terminal writes ^C - is that normal? or does it escape anything it should not
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Fixup on November 17, 2015, 01:10:14 am
Hi.

I made a script for the oscilloscope so that the tst file (filter variable) is copied from the USB stick to the root.
This is good if you wan't to use different filter settings, then you just need to modify the tst file on the USB memory.
The file will be copied if it is different or missing from the oscilloscopes memory.
The file is copied when USB memory is mounted. In that way the tst file will stay on the oscilloscope even if you power it off.
The tst file is removed from the memory if the tst file is removed from the USB stick.

Please try it on your own risk :) And also let us know if you see some issues with it or if it can be improved.
 :popcorn:

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: timofonic on November 17, 2015, 09:48:06 pm
This is amazing.

I'm sure that with enough funding and reviewing, some people involved in this forum thread can be able to be part in a project to make a really nice "FOSSHW" oscilloscope.

It's a shame the best reasonable and not so expensive oscilloscope is the Rigol 1054Z, yet they fail to fix certain bugs even if tons of hardcore geeks pointed at them. They are getting so much interesting feedback and free debugging, hey aren't able or don't want to contribute back in form of fixing them.

These cheap ass companies don't deserve this free labour.

Fortunately, their messes inspired many people to become better skilled at making an oscilloscope then the companies themselves. But a project like this isn't easy at all and would require a massive teamwork plus funding, something not so common in electronics.

I understand developing even a basic oscilloscope isn't easy, but I wonder why a somewhat resourced company isn't able to deliver an okay product.

What's the magic smoke behind an oscilloscope? Isn't it a very glorified voltmeter after all? I understand it need very precise readings and filterings that even an high end DMM lack, but I'm unsure about the hardware cost and difficulty to design one by using modern hardware (you can get a nice ARM SBC that is quite powerful for a tiny fraction of a cheap Rigol, for example). Is the cost related to hardware design and software development? being a niche market, money eating corporations with too much fame?

Sent from my ZTE Blade A450 using Tapatalk

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: frenzel.92@wp.pl on December 01, 2015, 09:17:19 pm
Hello!
I have a problem with an oscilloscope :-\ The oscilloscope starts and resets. The damage occurred after inserting a flash drive with the NTFS file system, the instruction write about the FAT32 stick.
Lack of communication by the UART, tensions at checkpoints are ok.
Please advice repairs.

https://www.youtube.com/watch?v=8sDKEiqSWLY (https://www.youtube.com/watch?v=8sDKEiqSWLY)

/Mariusz
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ramil on December 06, 2015, 07:46:57 am
Hello, very necessary backup DSO 5072p. I want to restore. I would be very grateful for help. Sorry for my English..
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: artag on December 28, 2015, 06:34:27 pm
Hi,

I've got an Hantek MSO5062D
Software Version 3.2.35 (141129.1)
Hardware Version 1020x55778344
Serial Number T 1G/012 023xxx (so higher than 15000)

In this version the PINs for the serial interface are completely missing, but I just plugged some in.

I can connect with my USBtoSerial adapter and see the starting of Linux. But after booting the console cannot be reached by pressing "Space and Ctrl-C" (and enter)
I've googled and read a lot of pages of this topic but I did not find any solution to this problem (nor anybody else who has this issue).

Any hints? what did I miss?



I've recently found some more time to play with my MSO5102D and have the same problem. I have the same firmware and other version numbers as you and a similar serial number. I first got this, used (but not much), a few months ago. I did the backups (can't remember how - possibly using DSO-USB-Tool) and later I fitted the DM9000 and other parts for ethernet. I fitted the ethernet parts to the main board, not the LA daughterboard.

However, I can't enable the LAN option in i2c.log - I can't log in on the uart and I'm having trouble with USB. The uart connection is definitely OK hardware-wise : like hobbes-dMs I get the ^C echoed, it just doesn't kill dso.exe or prompt me to press enter. I can also enter the bootloader menus and navigate them perfectly using the uart.

I'm wondering if this version of the firmware disables the console login, or turns off ^C handling. Or perhaps it's detecting the ethernet connection and providing a console there instead, even though it's not fully 'up'.

Can anyone with 3.2.35(141129.1) confirm that the uart login works ?



Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: artag on December 28, 2015, 10:42:06 pm
More info :

It appears that there's no uart login because /etc/init.d/rcS gets stuck. It's executing dsod in the foreground and doesn't return. If dsod is killed, the script runs to completion, starting telnetd and allowing inittab to run getty.

There's still a problem : the tty flags are wrong and it needs a line feed to terminate a line. But, ^Jroot^Jstty sane^J fixes things. Note that you actually have to login - the initial console dies.

I've tried backgrounding the dsod in rcS but it then seems to run twice (and it's already got two instances running so that's three. )


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Macbeth on December 28, 2015, 11:38:56 pm
What would the ethernet connection get you? I mean this thing doesn't even support SCPI over USB-TMC, never mind LXI?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: artag on December 29, 2015, 10:43:13 am
Ethernet gives more convenient hacking access.

I think it does actually support the same features as USB but I'm more interested in telnet, ftp etc. in order to mess around with the software.

I've also got some applications where I'd occasionally like remote access. That's much easier to arrange with ethernet than USB.


 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Sascha712 on February 03, 2016, 11:59:31 pm
Hello,

I think i bricked my Hantek DSO5072P during Firmware upgrade... screen stays black, even the backlight does not turn on.
So I bought a LPT JTAG Flasher , which is Wiggler compatible (I reverse ingenered it and it seems to be the same schematics, as the normal Wiggler).

I installed Windowss xp 32bit and installed H JTAG, configured the LPT Port, but dont get any answer from the DSO.

Is the P3 (20 Pin header) the right connector for JTAG? Because the upper row (which is near to the LCD Screen) is all connected to ground.
I did not connect the Frontpanal and LCD now. Does it have to be connected during NAND Flash? Only the Mainboard and power supply are connected.

Before all that, i made a backup (with the "firmware update" file) from the first post.
I got 4 Files:
boot.bin 1024kb
kernel.bin 2048kb
logo.bin 512kb
root.bin 512kb
Is it normal Filesize? seems very small?
I added all files together and got fw_backup.bin 3.733kb (including blank.bin and mizi_tag.bin).
Am I right, that i have to flash superviv.bin to the NAND and than connect via UART and after that flash fw_backup via dnw.exe?
Or is this only for the older DSO?

Sorry for so many questions and my bad english.
I hope that you can help me :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Abtzero on February 28, 2016, 11:35:53 am
Ich purchased a Hantek DSO5072P.
Out of the box, I can choose 2ns in the timeline. What does this mean?
Is is already hacked?

Regards
Abtzero
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: aijii on February 28, 2016, 12:01:50 pm
Hi there,

I'm trying to run the backup script on a DSO5102P and it fails, saying it can't find the firmware update file.

The disk icon turns blue when i put in a freshly formatted, fat32 2.0GB usb stick with only the "dso5kp_backuptool.up" file on it.

Just wondering if i'm doing something obviously wrong...

Cheers,

Adrian
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Fixup on March 02, 2016, 08:11:45 pm
Hello,

I have had problems in normal use with some USB memory sticks. Then when I have saved some screenshots to the USB and moved the USB stick to a PC there was nothing saved. Now I am using a memorystick just for the USB that seems to work. I would recommend that you try another USB memory.

In some earlier posts I also struggled with a update. Then I had wrote the following in the forum:

For to succeed with the update I needed to first run the "dso5kp_backuptool.up" backup. The backup somehow hang at 9/10. I waited for about 10min and pressed cancel.
After that I was able to update the DSO5072p with "dso5kp_func_dso5202p20150906.up" firmware.

The update firmware needs to be selected from the menu both when you want to do a backup and also when you really want to update the firmware. I think it was not possible to update a firmware if you have not first run the backup.

Hope that this helps. Let us know :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: patrik96 on March 03, 2016, 12:06:47 pm
Please so kind to help me the following: I read this tread but not find how can it possible to chenge the Hantek 4072C frequency to 100 or 200MHz, any help welcome!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Stevie1966 on March 11, 2016, 02:03:50 am
       
 I have buy a Hantek6074BC. This is a 70MHz BW .

Can we hack it to 250MHz BW like Hantek6254BC? :popcorn:
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: femtohertz15 on March 12, 2016, 02:14:58 pm
Hi all,

I just got a Hantek 5202P, and noticed something odd.  Above 20ns/div in equivalent time, the waveform reconstruction becomes very erratic, like it is piecing together the wrong slices of waveform.  The triggering was fine at 20ns and faster in real-time just in equivelent time the sampling seems to fail.  And,  at slower than 20ns/div equivalent time works okay (although it isn't really all that useful at the low sleep rates).  Is this need a f/w update to latest or does it sound like a hardware bug?   A self-cal didn't help.  F/W version 3.40.00
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: femtohertz15 on March 12, 2016, 03:31:05 pm
... If I had to guess I'd say the other modes all worked because its really just doing all the timing off the 1ghz interleaved sample rate and the faster ET sampling fails because something is broken in the hardware trigger.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: femtohertz15 on March 12, 2016, 06:37:55 pm
External trigger works fine real time too.  So  maybe the trigger comparator is fine.  But ET sampling at faster than 20ns/div breaks on external trigger just the same.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: femtohertz15 on March 13, 2016, 12:58:29 am
Well, some progress.  I tried updating the firmware to the latest on Hantek's site, which caused it to cyclically reboot  :palm: until I picked "Restore previous system".
Okay, I let it do that, and noticed it was dated 1/26/2016, vs 9/15/2015 that I downloaded.  Hmm.   I've noticed that the EQ time does have sections that look somewhat like the realtime version when < 20ns/dev.   Still a bit odd, not like any other DSO I've used in EQ, whether the acquisition system was happy or not.  Anyway the big discovery was that if I pick dual-window mode (sort of a deranged version of delayed sweep), I can go up to 2ns/div in the magnified window in EQ time as long as the main window is not to slow a sweep rate (and of course it won't let me go any faster than 20ns in EQ either!).  The samples are dense in that 2ns/div, although it didn't quite look like 50 samples in 2ns ("25 Gs/s in EQ time ???).

So the final result is stupidly like my old CRO's, you can't get the fastest sweep without pulling the magnifiy knob.  As If I had nostolgia for needing a horizontal amp gain boost to acheive the last few sweep ranges.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: siblynx on March 13, 2016, 02:41:52 am
Hi all,

I just got a Hantek 5202P, and noticed something odd.  Above 20ns/div in equivalent time, the waveform reconstruction becomes very erratic, like it is piecing together the wrong slices of waveform.  The triggering was fine at 20ns and faster in real-time just in equivelent time the sampling seems to fail.  And,  at slower than 20ns/div equivalent time works okay (although it isn't really all that useful at the low sleep rates).  Is this need a f/w update to latest or does it sound like a hardware bug?   A self-cal didn't help.  F/W version 3.40.00

I tested mine DSO5102P and it behaves like you described. In addition to that, it self-rebooted after a while in this mode and erased any saved settings to defaults. Glad I'd stored them to USB.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ondrej on March 24, 2016, 01:35:28 am
More info :

It appears that there's no uart login because /etc/init.d/rcS gets stuck. It's executing dsod in the foreground and doesn't return. If dsod is killed, the script runs to completion, starting telnetd and allowing inittab to run getty.

There's still a problem : the tty flags are wrong and it needs a line feed to terminate a line. But, ^Jroot^Jstty sane^J fixes things. Note that you actually have to login - the initial console dies.

I've tried backgrounding the dsod in rcS but it then seems to run twice (and it's already got two instances running so that's three. )

I'm in the same boat. Brand new MSO5062D. How did you manage to kill dsod? CTRL-C doesn't seem to be doing anything.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mikga32 on April 01, 2016, 06:57:03 am
maybe try this:
http://embdev.net/articles/Tekway_MSO (http://embdev.net/articles/Tekway_MSO)

I got same problem with a MSO5102D installed wrong firmware no backups.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: artag on April 20, 2016, 07:46:55 am
More info :

It appears that there's no uart login because /etc/init.d/rcS gets stuck. It's executing dsod in the foreground and doesn't return. If dsod is killed, the script runs to completion, starting telnetd and allowing inittab to run getty.

There's still a problem : the tty flags are wrong and it needs a line feed to terminate a line. But, ^Jroot^Jstty sane^J fixes things. Note that you actually have to login - the initial console dies.

I've tried backgrounding the dsod in rcS but it then seems to run twice (and it's already got two instances running so that's three. )

I'm in the same boat. Brand new MSO5062D. How did you manage to kill dsod? CTRL-C doesn't seem to be doing anything.

The usb commands still work - there are details somewhere in this thread of a utility that allows USB control of the scope, and can submit shell commands. Kill dsod and the serial login will start, though you may need to 'stty sane' before it's usable.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: femtohertz15 on May 03, 2016, 08:31:02 am
Has anyone noticed these scallops at the fastest sweep rates (2ns and 4ns?)    (they look like 1GHz ripple in the right half of the screen - on the high part of the pulse)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mahdiafpr on May 26, 2016, 08:59:01 am
hi,
i need some information about input stage (analysis with detail). such as Offset control page. is there any body, that know?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: 2x2l on June 05, 2016, 07:30:48 pm
Are the DSO5xxx's still hackable? Ebay has them going for 200 USD shipped (looks like vendors are trying to push out old stock to prep for a new model?). I had no intention of buying one but 2 chans at 200 mhz for 200 USD, eh, impulse purchase territory right there.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pascal_sweden on June 05, 2016, 07:37:54 pm
Which vendor are you refering to?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: 2x2l on June 05, 2016, 07:42:14 pm
http://www.ebay.com/itm/Hantek-DSO5102P-Digital-Oscilloscope-2CH-100MHz-1Gs-7-TFT-8-bit-4nS-div-40S-di-/122004558348? (http://www.ebay.com/itm/Hantek-DSO5102P-Digital-Oscilloscope-2CH-100MHz-1Gs-7-TFT-8-bit-4nS-div-40S-di-/122004558348?)

These Hantek's.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: CustomEngineerer on June 05, 2016, 09:49:42 pm
Are the DSO5xxx's still hackable? Ebay has them going for 200 USD shipped (looks like vendors are trying to push out old stock to prep for a new model?). I had no intention of buying one but 2 chans at 200 mhz for 200 USD, eh, impulse purchase territory right there.

I'm not seeing where you get that idea from. I see the one you linked with a starting bid of $199.99 ($34.99 shipping), but the buy it now prices is still $259.99, which is right around what I'm seeing all the others being offered for. But to answer your question, yes, they are still hackable, but honestly, even if they were going for $100 its still a waste of money. I made the mistake of buying one over a year ago and had nothing but trouble with it. Constant complete lockups that required a reboot. Ended up sending it back and getting something else.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pascal_sweden on June 05, 2016, 10:01:52 pm
What is the difference between the P, the B and the BM model?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: CustomEngineerer on June 06, 2016, 05:12:32 am
http://www.hantek.com/en/ProductDetail_3_26.html (http://www.hantek.com/en/ProductDetail_3_26.html)

Scroll down and select Comparison, select the models you are interested in then click Compare.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pascal_sweden on June 06, 2016, 12:52:42 pm
The BMV model seems to be the most advanced model. 2 MPoints of sample memory and Video Help.

Does anybody here on the forum have example videos of the Video Help feature?
Seems like a nice feature! :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: 2x2l on June 06, 2016, 07:21:37 pm
Are the DSO5xxx's still hackable? Ebay has them going for 200 USD shipped (looks like vendors are trying to push out old stock to prep for a new model?). I had no intention of buying one but 2 chans at 200 mhz for 200 USD, eh, impulse purchase territory right there.

I'm not seeing where you get that idea from. I see the one you linked with a starting bid of $199.99 ($34.99 shipping), but the buy it now prices is still $259.99, which is right around what I'm seeing all the others being offered for. But to answer your question, yes, they are still hackable, but honestly, even if they were going for $100 its still a waste of money. I made the mistake of buying one over a year ago and had nothing but trouble with it. Constant complete lockups that required a reboot. Ended up sending it back and getting something else.
Yeah, sorry, 260, my mistake. What's you get isntead? Can anyone report if the new firmware is any better? The acquisition hardware + screen size all seem appealing, the reboots seem like firmware issues, that perhaps was resolved over the course of the year between now and when you bought it..
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: CustomEngineerer on June 06, 2016, 07:54:36 pm
Just from what I've seen in this and other Hantek threads, the issues have not been resolved and Hantek doesn't really seem to have any interest in trying to fix them. Even if they wanted to fix some of the issues, I have zero confidence that they can. They seem totally incompetent when it comes to firmware.

I ended up getting a Rigol DS2072A. I know there are a lot of threads around here discussing issues with the Rigols, but Rigol's issues are nothing compared to Hantek's. And Rigol does seem to be actually fixing most issues. My Rigol scope hasn't once completely locked up requiring a reboot, the Hantek would do it multiple times per day, sometimes per hour.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: CustomEngineerer on June 06, 2016, 08:00:36 pm
The BMV model seems to be the most advanced model. 2 MPoints of sample memory and Video Help.

Does anybody here on the forum have example videos of the Video Help feature?
Seems like a nice feature! :)

I haven't actually seen it, but I'm sure its probably as useless as the help button on most cheap scopes. The help system on the DSO5000P models would take you to very generic Chinglish descriptions of the function that didn't really do anything to help explain what the function was.

Edit: Typos
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinbender59 on June 07, 2016, 03:38:23 am
Ok ---- I'm completely lost here,  so i'll show my ignorance, and ask?  can the HANTEK DSO 1060 be hacked or not?? just askin, works great but more is better.  lol
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinbender59 on June 07, 2016, 04:00:35 am
ya know I was looking at the specs. and I am not to sure I want to upgrade the 1060 is more of a electronics tech scope and the 200mhz version is more of an electrician scope ?? jmo  I do believe this is off a little, I do not have mine with me but I can measure 220vac and dcv looks a little low as well??

   
    DSO1200       1060
           DC Voltage
60.00mV            10uV 
600.0mV            100uV 
6.000V               1mV 
60.00V               10mV 
600.0V               100mV 
800V                  1V 
             AC Voltage
60.00mV            10uV 
600.0mV            100uV 
6.000V               1mV 
60.00V               10mV 
600.0V               100mV 
          DC Current
60.00mA            10uA 
600.0mA            100uA 
6.000A               1mA 
10.00A               10mA 
          AC Current
60.00mA            10uA 
600.0mA            100uA 
6.000A               1mA 
10.00A               10mA 
          Resistance
600?                 0.1? 
6.000K?            1? 
60.00K?           10? 
600.0K?           1K? 
6.000M?          10K? 
60.00M?          100K? 
         Capacitance 
40.00nF            10pF 
400.0nF            100pF 
4.000uF            1nF 
40.00uF            10nF 
400.0uF            100nF 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: CustomEngineerer on June 08, 2016, 02:05:26 am
@2x2l, I would like to revise my earlier statement,

"Even if the DSO5000P were going for $100 they would still be a waste of money"

I'm pretty sure I've said that multiple times, but whether someone else wasted their money on something, regardless of how much, can really only be decided by that person. If $200 was all you had to spend, or even if it was all you were willing to spend on a scope, and the scope was useful to you then its not a waste of money. I just keep remembering how frustrated I was trying to use the one I had and so keep saying stupid things like the above. For its price its probably decent enough. When I got mine, I actually got the MSO5102P MSO5102D, and paid closer to $550 or $600 for it. After a couple of weeks of fighting it I saw the Rigol DS2072As were only around $250 which made it seem worse.

I still would recommend saving the extra $140 and getting something like the Rigol DS1000Z, or Siglent SDS1102CML for $100 more, but if the Hantek is at the limit for what you are willing to spend, then it may be good enough for what you want to do with it, and it may serve you well for years. I would just strongly recommend to read as much about them as you can so you know what to watch out for, regardless of which way you end up going.

Edit: Also, just realized I had the MSO5000D, not P series. So really can't speak of how well the DSO5000P does or doesn't work. Just know that Hantek in general, is pretty bad at firmware, though so are Rigol and Siglent.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kaczy9999 on June 13, 2016, 08:43:28 pm
Is there any information about Hantek 6074BE? Is it so new or so crappy device that no one have it? 1Gs/s and 4ch for 170$, with hack to 6254BE (250Mhz BW) sounds great, but I don't understand why there is no user reviews at all. I'd searched everywere and found only one chinese video.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on June 18, 2016, 11:28:26 am
I have just bought a new DSO5062B:

Tried to hack it to 200MHz using the DSO-USB-Tool from https://marcowuen.wordpress.com/2013/09/01/dso-hacking-quick-guide-voltcraft-dso3062c-hantek-dso5062b-tekway-dst1062b/. Renaming /dst1062b to /dst1202b worked well, restarted several times, checked if, yes, the file stayed the same.

The sysinfo screen says
[model]           DSO5062B              (was expecting to see DSO1202B here...)
[sw version]    3.30.0 (150116.0)
[hw version]    1020x55778344
[serial number] T 1G/012 023575

A quick test with a fast (~2ns) digital signal and a 500MHz probe gives me ~3ns slew rate and the well known overshoots, I have attached a screenshot.

I will also attach pictures from the PCB in next post. It reads "DSO500B Serial MB Ver1.02 2015/3/8". Seems they have not touched the analog stages but introduced new SoC (S3C2416XH-40) and other.

So my suspicion is
a) that new firmware has countermeasures to the hack
b) I cannot use an older firmware to downgrade

I am now hoping that I have missed something.  :-//
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on June 18, 2016, 11:36:35 am
PCB pictures 1
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on June 18, 2016, 11:37:38 am
PCB pictures 2
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Fixup on June 18, 2016, 08:51:14 pm
Hi,

Its a long time since i hacked my DSO5052. But I remember that I changed several files. I connected an USB to RS232 adapter to the board.
I think I followed these instructions.
https://www.circuitsathome.com/measurements/hantek-dso5000-series-oscilloscope-modifications-part-1-doubling-the-bandwidth-of-dso5102b (https://www.circuitsathome.com/measurements/hantek-dso5000-series-oscilloscope-modifications-part-1-doubling-the-bandwidth-of-dso5102b)


 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on June 19, 2016, 01:45:56 pm
@Fixup: thanks for that link, tried that. The files "sys.inf" and "logotype" surprisingly did already read "dst1202b". Probably because I did that "mv /dst1062b /dst1202b" already yesterday. Probably the DSO application did that during the reboots.

Now the scope reads "DSO5202B" in its system information.

By the way, the change can also be done via USB-DSO-Tool instead of soldering a UART:
   plug USB stick in scope
   "cp /logotype.dis /mnt/udisk"
   plug that USB stick into normal computer and change text to "hantek_DSO5202B"
   put that stick back in scope
   "cp /mnt/udisk/logotype.dis /"
        "chown 1000:1000 /logotype.dis"

However, analog behavior is still the same, that last change probably only has a cosmetic effect.

Anyhow, I think today I got a clue to it. I can sometimes see the signal shape "jump" between two different bandwidths. I made a sceenshot (screenshot hantek20_1.png) with infinite persistence that shows what I mean. Interestingly, the scope only seems to do that at 2ns and 4ns timebases. At 8ns or more, it always shows the full bandwidth. (Yes, I am absolutely sure that it is not my test signal  that is causing that strange effect... :))

When I manage to capture the waveform at the "better" bandwidth, I can confirm ~ 1.8ns transition time as expected for 200MHz BW. I conclude from this that the hack was successfull in general, but the designers do some strange things with the data. It seems to depend on the exact signal shape. The above signal was taken with my 500MHz passive probe. When I take the same signal with a better bandwidth (5mm coax cable, screenshot hantek21_1.png), the scope always seems to "choose" the higher bandwidth. As if the software seems to analyse the waveform and judges from the slopes if it should apply some smoothing to it or not, in order to make the result look better....

Has anyone observed a similar behavior with his Hantek?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Fixup on June 19, 2016, 11:33:48 pm
I also removed the diodes that can be seen on page 90.
For what I understand the bandwidth of the scope is limited by:
- Digitally Controlled VGA. The software bandwidth limit is probably adjusting the filter settings like Dave shows in this R&S. https://www.youtube.com/watch?v=3THvWEKGOwE (https://www.youtube.com/watch?v=3THvWEKGOwE)
- The variable capacitance diode BBY65-02V (D01_2) could also be used for bandwidth limit. However is seems like this varactor is only used for the 20MHz filter option which is useful for some measurements.
- Possibly the firmware could also have some filtering in some way.

I was also thinking about updating my Hantek to the latest firmware....
Title: Re: Hantek - Tekway - DSO hack - trigger
Post by: Jane on June 20, 2016, 07:52:28 am
Hi,
can I use the hacked Hantek DSO with trigger like this?
I have signals A and signal B. I need to know what voltage signal B has when signal A starts.
Is it possible to use A signal as a trigger to achieve my goal( i.e. to find out the voltage of B )?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on June 20, 2016, 12:35:59 pm
@Fixup: thanks for the hint, I will check if they drive the varactor incorrectly. If yes, that would be an easy fix, I can live without BW limit.

The Hantek uses the AD8370 PGA, that one does not have filtering options. The capacitors at the ADCs (is that what you meant with page 90?) were fortunately not populated in my model.

@Jane: you can do that with any scope, but that depends on what you exactly mean with "signal A starts".
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Jane on June 20, 2016, 02:29:23 pm
@tatus1969: Thanks for the reply. So I should probably have written : When signal A changes.

So I have signals A and signal B. I  need to know what voltage signal B has when signal A changes from 0V  to 3V
Is it possible to use A signal as a trigger to achieve my goal( i.e. to find out the voltage of B )?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on June 20, 2016, 02:34:29 pm
@Jane: guessing from your question, are you familiar with using a scope in general? If not, then this is the wrong thread. Because what you are asking is actually what scopes are made for. The make the changes of voltages visible over time. If you have a scope with two input channels, then it simultaneously shows you the changes of two voltages over time. Every scope can trigger on one of these voltages crossing a certain threshold. Or did I get your question wrong?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on June 21, 2016, 06:22:53 pm
@Jane: just reading my last post, that sounds a bit odd. Didnt want to be rude...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Fixup on June 22, 2016, 09:09:44 pm
@tatus1969 you're right, I meant capacitors on page 90. and there doesn't seem to be any filter in the AD8370 PGA.
On Page 109 some of the modifications that I made to my scope can bee seen "Hantek_input stage mod.pdf".
I modified the op amp driving the varactor so that it is now a comparator and thereby the filter frequency is as high as possible and also the 20MHz bandwidth limit is working normally. I sent you a PM.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on June 23, 2016, 07:37:17 am
thanks again Fixup. This leads me to the point to realize that there is apparently a lot of information in this "book" of a thread that I havent found yet, and that I will have to read it from the beginning to the end :o

Especially the "Made a file /tst in root containing [filter] 35" could be very useful, will test that on weekend.

I did some measurements on the signal path with good stuff that we have at work (1GHz LeCroy with active probes), and realized two things:
- I need 50 ohm termination inside the scope to be able to correctly feed in fast signals. The two attached pictures show my test signal just before the BNC socket, and at TP101, left of the FJET coupling capacitor.
- quite some distortion happens between LMH6552 output and ADC input, because that long connection needs to be treated as a transmission line, and they should have terminated it at the ADC. I will play with RA101_2 / 2 = 0 Ohms and see which line impedance I get and if termination helps. Luckily there are these unpopulated capacitor lands in front of the ADCs.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Fixup on June 23, 2016, 10:48:59 pm
I am using a BNC t connector + a 50 ohm terminating resistor at the input of the oscilloscope if 50 ohm termination is needed. The differential amplifiers (LMH6552, or THS4504) output signals have series termination RA01_1/2. The output signals are split to three directions that need to have exactly the same length in order for the signals to arrive at the same time. When using only one channel on the oscilloscope it is using all four (2 ch)AD-converters for the signal. Every AD-converters timing is then shifted by 1/8 and therefore 1G samples can be achieved with slower AD-converters.
The series termination is preferred since it is not adding any extra load to the differential amplifiers output signal. The series termination resistor and transmission-line capacitance will make an RC low pass-filter. Therefore I believe that the 200MHz model is using 33ohm and the 60MHz oscilloscope is using 47ohm termination resistors. I think that 22ohm is usually the lowest value that is used for series termination. The series termination resistor value should actually be of the same value as the transmissionlines impedance and it will then "cancel" damp all reflections. A too high or low value will not consume all the power and the remaining power is then transmitted back and forth (ringing).

I updated my scope today. It seems like 10mV is now the lowest voltage scale (before 20mV). I didn't have time to test it so much. Next week I will test and see what the rise time is with some fast transients. By touching the probe I could however get a 400ps risetime reading on the screen as the lowest value but that value is probably not reliable.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on June 24, 2016, 07:04:37 pm
@Fixup: BNC t connector + term did also not eliminate that residual ringing. My measurements above show that the signal is clean at the BNC socket, but is ringing at the JFET gate, so I am sure that the distortion is caused by the signal path going long ways and through a relay. I will keep you updated.

To the LMH6552 line driver: my idea is to eliminate the series termination and let the opamp directly drive the line. This way I also completely eliminate that RC lowpass that you mention, which will give me more bandwidth. The crux with series termination in general is that you either have it low-ohmic enough for good bandwidth but not matched with the wave impedance (and I doubt that 33/22 ohms is well matched), OR you have good match but too little bandwidth. This is the reason why I want to terminate at the end of the transmission lines. I hope the LMH6552 can drive the required load without overheating, will keep you updated.

400ps sounds really promising :-)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on June 27, 2016, 09:49:36 am
yesterday I made some tests regarding that issue with "toggling" bandwidth (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg965398/#msg965398 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg965398/#msg965398)):
- removed varactor: not better
- updated to latest firmware (got this directly from Hantek): not better
- tried /tst file with "[filter] 35": not better
- tried /tst file with "[filter] 1000": not better (is that appropriate anyway?)

This must be happening in digital domain, stuck here... As if the scope cannot decide if it wants to be a 60MHz or a 200MHz device. I will try and address this to Hantek, but there is chance that they say that I have bought the 60MHz variant, so where's the problem...

I made some progress to my input stage work (flat pulse response, more bandwidth):
- 50 ohm termination (connected to left side of C01_5 according to "das_oszi_schematic.pdf"): works like a charm and completely eliminates all overshoot at JFET input, but I realized that I lose 1:10 attenuation and self calibration of course, so this is not a practical and permanent solution.
- I found that the LMH6552 wildly oscillates when I short RA01_1/2. A look in the datasheet tells me that it is not capable of driving the high capacitive load of our transmission line. On page 20, the datasheet suggests 21 ohms external series resistance at its output for CL=39pF. Hantek has put RA01_1/2=4x22 ohms at the output in my case. Coincidence? So I put that resistor(s) back in.
- the LM6552 datasheet also suggests to choose not too low resistor values for the feedback network (page 10, fig. 9) when I want gain flatness. So I will probably keep that 440ohms that Hantek put in, maybe lower to 390.
- the LMH6552 still seems to have a hard time driving that transmission line, so I put 1.5pF on top of RX1_3 and RX1_4 (that resistors have 440 ohms in my case). This reduces amplifier bandwidth to ~ 250MHz, and completely eliminates overshoot. Reducing this to 1.0pF raises BW to 360MHz but adds a little overshoot, could be a good compromise.
- after that 1.5pF fix, the reflection due to {missing termination at receiver / unmatched termination at transmitter} is still there, and it shows up as a dip of ~2ns, just after the signal slope has ended. So I added three termination resistors: one across R03_29/R03_32 (not on top of them but such that it terminates the end of that t-line), and one each across the inputs of RL04_1 and RL04_2 (to the bottom of the PCB, soldered directly to the corresponding vias... quite nasty). The traces going from the relays to the ADCs cannot be terminated because of that 500MSPS/1GSPS switching/paralleling. I am not right there yet, but a resistor value of 70 ohms each already shows good improvement. I will need to find the optimum by experimenting more. Later, I will need to raise LMH6552 gain a bit such that it compensates the attenuation that I have introduced here (resistive divider RA01_1/2  <--> termination).

I am still waiting for parts for my 500ps pulse generator, and for my 750MHz active Tek probe, so this task will sleep until then. Keep you updated  :)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on July 02, 2016, 12:28:14 am
Reached my goal: Gaussian response, as much bandwidth as possible.

The setup is
- 500ps square wave generator (self made, using a high speed clock output pin from a spare LPC4330 Xpresso board, verified to be free from overshoot with LeCroy 1GHz scope + active probe)
- a used TEK P6205 JFET probe (750MHz) that I power directly from Hantek scope (needs +-5V)
- extensive modifications to the input stage, I will summarize that in a separate post once I have cleaned up the mess that I have created :-/O

The waveform was taken in equivalent time acquisition mode, combined with dot display mode. This combination is the only one that prevents the firmware from adding some nasty digital post filtering.

Yes, this is a (hacked) Hantek DSO5062B with 250MHz analog bandwidth  8)

Thanks to Fixup for the fruitful discussion  ;)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Badwater on July 03, 2016, 04:06:51 pm
Hi,

I bought the 4072c model, it is very similar to the 5000 series, but the detail to connect the RS232 console differs.
Anybody already figured out where to connect?

DSO-Tools are basically working, but neither backup (Backup_B_models) nor and the BW changer.

Root directory holds the known files:
Code: [Select]
drwxr-xr-x    2 root     root           880 Jul  2 20:32 OurLanguages
drwxr-xr-x    2 root     root         24016 Jun  8  2015 bin
-rwxrwxrwx    1 root     root            43 Jan  1  2009 chk_base_volt
-rw-r--r--    1 root     root             4 Jan  1  2000 cur_acq.type
drwxr-xr-x    4 root     root             0 Jul  4 00:11 dev
-rw-r--r--    1 root     root           125 Jul  2 19:50 disk_sta.info
drwxr-xr-x    5 root     root           488 Mar  7 09:00 dso
-rwxr-xr-x    1 root     root       4529432 Jul  2 20:32 dso_bin
-rwxr-xr-x    1 root     root             0 Mar  7 09:00 dst1072b
-rwxr-xr-x    1 root     root             0 Jun  8  2015 dst1102b
drwxr-xr-x    5 root     root           808 Jul  2 20:30 etc
-rwxr-xr-x    1 root     root        924672 Jun  8  2015 help.db
-rw-r--r--    1 root     root          8192 Jun 12  2015 i2c.log
drwxr-xr-x    2 root     root         11096 Jun  8  2015 icon
-rwxr-xr-x    1 root     root          1131 Jun  8  2015 keyprotocol.inf
-rw-r--r--    1 root     root             0 Jun 12  2015 language.img
drwxr-xr-x    6 root     root         15120 Jul  2 20:32 lib
lrwxrwxrwx    1 root     root            11 Jun  8  2015 linuxrc -> bin/busybox
-rw-r--r--    1 root     root             8 Jul  4 00:11 logotype
-rwxr-xr-x    1 root     root            15 Mar  7 09:00 logotype.dis
-rw-r--r--    1 root     root        524288 Jul  4 00:11 misc.bin
drwxr-xr-x    5 root     root           352 Jun  8  2015 mnt
-rw-r--r--    1 root     root             0 Jul  4 00:27 msg
-rw-r--r--    1 root     root        317477 Jul  2 20:55 mult_adc.log
drwxr-xr-x    3 root     root           224 Jan  1  2000 param
dr-xr-xr-x   52 root     root             0 Jan  1  1970 proc
-rwxr-xr-x    1 root     root          4448 Jun  8  2015 protocol.inf
drwxr-xr-x    2 root     root           160 Jun  8  2015 root
drwxr-xr-x    2 root     root          5264 Jul  2 20:32 sbin
drwxr-xr-x   11 root     root             0 Jul  4 00:11 sys
-rw-r--r--    1 root     root           105 Jul  4 00:11 sys.inf
-rw-r--r--    1 root     root          2400 Jan  1  2009 tdc.log
-rw-r--r--    1 root     root          1113 Jan  1  2009 tdc_edge125M
-rw-r--r--    1 root     root          1126 Jan  1  2009 tdc_overtime125M
-rw-r--r--    1 root     root          1114 Jan  1  2009 tdc_pulse125M
drwxr-xr-x    2 root     root             0 Jul  4 00:11 tmp
drwxr-xr-x    8 root     root           552 Jun  8  2015 usr
drwxr-xr-x    2 root     root             0 Jul  4 00:11 var

Edit: OK,  found the RS232 header thing; it is near the USB plug as depicted elsewhere in this thread.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Fixup on July 03, 2016, 09:25:42 pm
 :-+ tatus1969

That signal looks really good and without any overshoot.
It's been a pleasure to share some thoughts about the input stage in order to optimize it and in the same time learn something new.

Looking forward to hear more about which setup you ended up to use.

P.S
Have you tested that the AC signal and DC offset is stable over different temperatures (cold oscilloscope / warmed up)?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on July 05, 2016, 12:15:33 pm
@Fixup: thanks for that, same for me  :D

Modding description is almost complete, maybe this evening 8) After my last post I realized that in fact I didn't completely reach my goal, after seeing the input stage literally oscillate when connecting the stock passive probe |O In fact I probably had created a delay line oscillator or sort of :o But that should be fixed now.

I will check for gain and offset drift. I also plan to measure the frequency response, I'm curious how that will look like.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on July 08, 2016, 10:32:29 pm
I think I finally got it right. Bandwidth is even just above 250MHz now. I have collected everything in a document, please let me know what you think about it. Also critical comments are welcome (well, except asking why I did it :-)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Macbeth on July 08, 2016, 11:31:17 pm
Sorry tinhead, but...  :(

THE KING IS DEAD, LONG LIVE THE KING!...

Welcome, tatus1969!  :-+
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: aandrew on July 10, 2016, 12:37:02 am
Wow, thank you tatus1969!

I've got an MSO5074FG which is the 4 channel version of the DSO5000 series with function generator and logic analyzer. I really appreciate your analysis and critique of the component selection on the analog front end.

One thing I've noticed with my particular unit is that the mainboard was definitely not washed; the board is a little sticky to the touch and I was wondering whether it's worth the risk to take some flux remover and give it a good scrub, followed with some isoprop to get the surface of the board squeaky clean. The digital stuff won't care so much but the input circuitry seems like it might appreciate this kind of treatment. Do you have any comment on that?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on July 10, 2016, 11:19:23 am
@Macbeth: thanks  :D But as some famous theoretical physicist would have said, everything is relative. I guess tinhead and I have to share that cake  ;) My attempt to compensate that excessive input inductance works well for 50 ohm feeds, but it also adds another 22pF of input capacitance. This makes compensation harder for passive probes, and also reduces their bandwidth (lucky me here, I only got 60MHz probes with my Hantek anyway). And I didn't succeed yet getting the scope's attenuator compensation right, there is always at least one of the four options (direct signal vs attenuator, 1:1 vs 1:10 probe setting) that isn't working out. Not sure if there is a solution at all with standard probes...

If someone has a better idea how to handle that inductance (I think I can believe my minVNA reading of 48nH here, because simulation and reality went very close), I will give away one of two slices of my cake 8)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on July 10, 2016, 11:30:21 am

One thing I've noticed with my particular unit is that the mainboard was definitely not washed; the board is a little sticky to the touch and I was wondering whether it's worth the risk to take some flux remover and give it a good scrub, followed with some isoprop to get the surface of the board squeaky clean. The digital stuff won't care so much but the input circuitry seems like it might appreciate this kind of treatment. Do you have any comment on that?

I use to clean boards like this
- flux remover, take some time and use a lot of it at the end  in order to dilute the dissolved flux enough for the next step
- bath the entire board in distilled water
- rinse after taking out of bath
- dry with compressed air

This way there will not be any flux residue left. (Compare: just clean with flux remover and let it dry - looks awful.)

This is good for boards that contain only reflow solderable parts. They have already survived more aggressive situations like vapor phase soldering... The only part that I would be worried about for my Hantek mainboard would be the RTC backup battery. Perhaps better remove it before cleaning.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Fixup on July 10, 2016, 11:57:11 pm
 :-+ tatus1969

Great document about your modifications. I've read it several times :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on July 15, 2016, 11:39:12 pm
this time I really (?) have it. Working with 50 ohms feed as well as passive probes, with input attenuator bypassed and used. I am hoping for some more "resonance" (as opposed to my scope), as the length of this thread suggests that there should be quite a few owners of that Hantek/Tekway  8)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on July 20, 2016, 11:03:13 pm
yesterday the last puzzle piece arrived: Tek P6106 passive probes. Got them for EUR35 from ebay. These are 250MHz 10:1 probes with both LF and HF compensation capabilities. In total there are five (!) trimmers. One of them allows you adjusting capacitive/resistive crossover (the LF compensation that you normally do using the scope's built-in test signal) as usual. The other four allow fine-trimming of overshoot and ringing of fast transients. The probes are for 20pF/1Meg scope inputs, which is perfect for my modded Hantek input stage.

Here are some pictures  8)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: llg on July 22, 2016, 07:04:17 pm
hey tatus,
the post-filtering thing, is it specific to "B" units ?
The reason I'm asking this is I have a 200Mhz "P" unit and it's not showing the behaviour you mention in your document.
Perhaps it's harder to notice/reproduce ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on July 22, 2016, 07:08:57 pm
can you post a screen shot of a signal with very fast rise time (less than 1.5ns)? That problem only shows up when going to the limits.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: llg on July 22, 2016, 07:27:46 pm
I see now.. so it's probably the same behaviour.

no, unfortunately I do not have anything close to 1.5ns and not entirely sure I have parts to build a test generator either.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on July 22, 2016, 08:58:24 pm
it you have something like 74AVC logic or a microcontroller with maybe >150MHz speed you can probably see it.

The post filtering is not a bad thing in general, because it allows complete reconstruction of a sine wave up to the nyquist frequency. It is just totally annoying when you want to examine fast transitions, therefore normally this is a feature that you can switch off in a scope. There are nice articles here https://www.eevblog.com/forum/testgear/sin(x)x-interpolation-and-digital-filters-in-oscilloscopes/ (https://www.eevblog.com/forum/testgear/sin(x)x-interpolation-and-digital-filters-in-oscilloscopes/) and here http://cdn.teledynelecroy.com/files/whitepapers/wp_interpolation_102203.pdf (http://cdn.teledynelecroy.com/files/whitepapers/wp_interpolation_102203.pdf)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on July 22, 2016, 09:18:17 pm
finished my active probe mod with two TEK P6205 (you can get them for $40 from ebay). The two receive their power directly from the scope. Here are some photos :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Macbeth on July 22, 2016, 09:50:41 pm
tatus1969, It gives me a laugh to see how pimped out your Hantek is but surely you could have powered the probes with a custom home made TekProbe™ BNC Interface. A software mod for the automatic x10 ID would be the icing on the cake.  :-DD  ;)

Those P6205 are 750MHz... what are you really able to achieve?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on July 22, 2016, 10:37:27 pm
and it has been by far cheaper than that one below O0 Thought about making a Tekprobe adapter board, but then I would have had no reason to open the probe's casing, right?  :-/O

That combination roughly does 300MHz, check out my PDF summary a few posts above, there are some charts on the last page. Dont have the right equipment to properly do the frequency sweep, maybe that will be the second next project?  8)

p.s. thats 300MHz for around $400 (not counting some fresh gray hairs)  ;D

p.p.s. did you notice these nice inline terminators? Copied from this great idea https://www.eevblog.com/forum/projects/home-made-feed-through-terminator-for-bnc/ (https://www.eevblog.com/forum/projects/home-made-feed-through-terminator-for-bnc/)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: frohro on August 10, 2016, 10:35:06 pm

I'm looking at buying a Hantek 5102P but would like confirmation before I do.

Thanks,

Rob

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pascal_sweden on August 10, 2016, 10:43:37 pm
What is the noise floor of the Hantek oscilloscope? It is in the same range as Rigol or Siglent?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: CustomEngineerer on August 11, 2016, 12:50:47 am
Is it in the same range as the Siglent or Rigol  what? They both make  more than 1 model. Also, instead firing off questions for every little thing, is there some reason you can't look up most of this information yourself?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Badwater on August 11, 2016, 10:45:07 am
I can confirm that the LAN hack is working on the DSO4072; got all stuff from China for less than 5 bucks.
I set the IP for my network in the rcS: ifconfig eth0 192.168.xxx.xxx
The driver is complaining while bootup w.r.t. the MAC but things are working.
Fixed MAC may also be set in rcS: ifconfig eth0 hw ether xx:xx:...
I can telnet the DSO but did not find out what else?!
TTscope is not connecting via LAN.

As mentioned elsewhere in this thread, the DSO-USB-TOOL has some issues with the IP connection.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pascal_sweden on August 11, 2016, 09:18:04 pm
Is it in the same range as the Siglent or Rigol  what? They both make  more than 1 model. Also, instead firing off questions for every little thing, is there some reason you can't look up most of this information yourself?

Of course I can look at the specs, but specs don't say a lot.
There is overall noise floor of the oscilloscope, and then there is also noise on the offset level.
Moreover some people might have both Hantek and Rigol or Siglent, and can contribute with their comparison and experience on both scopes.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Macbeth on August 17, 2016, 11:28:24 pm
Is it in the same range as the Siglent or Rigol  what? They both make  more than 1 model. Also, instead firing off questions for every little thing, is there some reason you can't look up most of this information yourself?

Of course I can look at the specs, but specs don't say a lot.
There is overall noise floor of the oscilloscope, and then there is also noise on the offset level.
Moreover some people might have both Hantek and Rigol or Siglent, and can contribute with their comparison and experience on both scopes.
You still aren't being exact enough for CustomEngineerer who clearly can't offer anything either way.

Of course in this thread we use common sense and know that you are referring to the many Hanteks that are all based on the same DSO board, compared with the popular low cost equivalents, Rigol DS or Siglent SDS equivalents in the low price range. All scopes that are crippled by software. Though hardware shows much room for improvement by all accounts of pioneers and modders over here.  :-+

Unfortunately I don't have an answer to your question, but others might. I certainly don't trust China specification sheets (and joke "cal certs" where the red stamp is overprinted  :-DD) at face value. But Mr CE is an arse on this one.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 18, 2016, 07:53:44 pm
Sorry tinhead, but...  :(

THE KING IS DEAD, LONG LIVE THE KING!...

Welcome, tatus1969!  :-+

hrhr, no big deal

Reached my goal: Gaussian response, as much bandwidth as possible.

my goal was to get as much as possible "affordable" DSO with flat (and not gaussian) response, to replace my broken TDS754D, which i managed to get with my hardware hacks. Happy to see, that you reached your goal.

Btw, it seems they have some new engineers, they changed a lot of things in latest fw versions, equ sampling is implemented (that was funny to see), 9 digits frequency counter (at least on my old hw version MSO), some bugs (where is was begging for) has been finally fixed. Bit late, yeah, but at least my new DSO8202E have all the new things as well (except the 9 digit frequency counter) implemented.

How is that on other (latest hw) models?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Macbeth on August 18, 2016, 09:02:01 pm
Sorry tinhead, but...  :(

THE KING IS DEAD, LONG LIVE THE KING!...

Welcome, tatus1969!  :-+

hrhr, no big deal

Reached my goal: Gaussian response, as much bandwidth as possible.

my goal was to get as much as possible "affordable" DSO with flat (and not gaussian) response, to replace my broken TDS754D, which i managed to get with my hardware hacks. Happy to see, that you reached your goal.

Btw, it seems they have some new engineers, they changed a lot of things in latest fw versions, equ sampling is implemented (that was funny to see), 9 digits frequency counter (at least on my old hw version MSO), some bugs (where is was begging for) has been finally fixed. Bit late, yeah, but at least my new DSO8202E have all the new things as well (except the 9 digit frequency counter) implemented.

How is that on other (latest hw) models?

Great to see you back tinhead  :-+

I can't say my MSO5102D firmware has been updated by Hantek for a long time, it's still listed as "MSO5102D Firmware_V3.2.35(For Hardware V3.x.xx)". Let's face it the MSO part of it is nearly unusable :(
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: aandrew on August 19, 2016, 01:05:43 am
I've got an MSO5074FG, which is similar enough to the other DSOs that I can recognize the input sections and have a pretty good idea what to change to upgrade the bandwidth.

My question is more on the software side; has anyone been able to drive any of the hardware and bring up basic scope functionality? I've noticed some UI issues and particularly some triggering issues with the software and I wouldn't mind trying to see what I could do to help.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on August 19, 2016, 07:09:06 am
with flat (and not gaussian) response
That is pobably a bit philosophical subject. Maximally flat response reproduces the slope best but adds significant overshoot. Gaussian response is slower but has no overshoot. Depends on what properties of your signal you are interested in. By the way, I think that your solution should actually be close to Gaussian, and the overshoot is probably mostly software related (sinc filter). Would be interesting for me if you could post a screenshot with equ sampling time.

Btw, it seems they have some new engineers, they changed a lot of things in latest fw versions, equ sampling is implemented (that was funny to see), 9 digits frequency counter (at least on my old hw version MSO), some bugs (where is was begging for) has been finally fixed. Bit late, yeah, but at least my new DSO8202E have all the new things as well (except the 9 digit frequency counter) implemented.

How is that on other (latest hw) models?
It is still crashing now and then, but not annoyingly often. And it seems to be related to specific (exotic?) settings.
I got a new firmware package from Hantek support, and can share it if you are interested. It is not on their website. And important to mention: they seem to have changed their crypto keys.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 19, 2016, 09:10:14 am
By the way, I think that your solution should actually be close to Gaussian, and the overshoot is probably mostly software related (sinc filter). Would be interesting for me if you could post a screenshot with equ sampling time.

sure, will make some in 2-3 weeks, have first move to my new house

I got a new firmware package from Hantek support, and can share it if you are interested. It is not on their website. And important to mention: they seem to have changed their crypto keys.

are you sure that you got firmware for proper model?

EDIT: and yes, post that fw pls, as i do collect all versions on my 1drv
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: zsoltyfm on August 20, 2016, 01:13:09 pm
Firmware upgrade problem.
This is a non-hacked Hantek dso5202b.
The source of the update: http://www.hantek.com/down.aspx?url=http%3a%2f%2fwww.hantek.com%2fProduct%2fDSO5000%2fDSO5202B_Firmware2.zip (http://www.hantek.com/down.aspx?url=http%3a%2f%2fwww.hantek.com%2fProduct%2fDSO5000%2fDSO5202B_Firmware2.zip)
What should I do?

https://youtu.be/BgPsEDDNBOQ (https://youtu.be/BgPsEDDNBOQ)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on August 31, 2016, 05:30:06 pm
are you sure that you got firmware for proper model?
They have firmware update packages for the 5000B on their website. But after I applied that I had a smaller revision number than before. The scope was still working though. The package that I sent you is from Hantek support.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: deathwarror on September 03, 2016, 01:01:39 am
I just bought a MSO7000BLG series used Oscilloscope for $400. 
They Changed the format of the front side bus trying to make it smaller.  The scope uses the Samsung S3C2416XH-40.  The Internal File Structure Appears to be the same, and the bandwidth hack apparently still works on this version. LAN is availible to be added.  Can't seem to Identify the memory chip.  It may be the 1GB NAND (K9F1G08U0E) that I'm assuming for the software.

Most of the internal boards except the main are marked with DSO5000E.


I'm planning on doing the Lan hack, 2GB memory hack, and seeing if I can add a Bluetooth UART to the debug connection.

With the 300MHz (aka dst1302b) hack turned on I measured the following data points from channel 1.
With 1V set @ 1KHz
800mv @ 80MHz
740-760mv @ 150MHz - 400MHz
1.1V @ 480Mhz
@ 490MHz Hardware Side Failed to read Properly
@ 500MHz Software Side Jumps by 12MHz and has long since been inaccurate (around 300MHz).
@545.9MHz it finally started reading 700-680mv jumping from accuracy and knee.

Take all measurements with a grain of salt since the 250KHz - 40GHz generator has been damaged before by other students.  I do have pictures of the higher end frequencies to prove it. Unfortunately, they are too big.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: TheSteve on September 03, 2016, 01:54:17 am
Does the scope have 50 ohm input impedance as an option? It is rather odd to see the amplitude go up @ 480 MHz unless you're seeing a bunch of reflections.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on September 03, 2016, 08:39:14 am
I just bought a MSO7000BLG series used Oscilloscope for $400. 
They Changed the format of the front side bus trying to make it smaller.  The scope uses the Samsung S3C2416XH-40.  The Internal File Structure Appears to be the same, and the bandwidth hack apparently still works on this version. LAN is availible to be added.  Can't seem to Identify the memory chip.  It may be the 1GB NAND (K9F1G08U0E) that I'm assuming for the software.

Most of the internal boards except the main are marked with DSO5000E.


I'm planning on doing the Lan hack, 2GB memory hack, and seeing if I can add a Bluetooth UART to the debug connection.

With the 300MHz (aka dst1302b) hack turned on I measured the following data points from channel 1.
With 1V set @ 1KHz
800mv @ 80MHz
740-760mv @ 150MHz - 400MHz
1.1V @ 480Mhz
@ 490MHz Hardware Side Failed to read Properly
@ 500MHz Software Side Jumps by 12MHz and has long since been inaccurate (around 300MHz).
@545.9MHz it finally started reading 700-680mv jumping from accuracy and knee.

Take all measurements with a grain of salt since the 250KHz - 40GHz generator has been damaged before by other students.  I do have pictures of the higher end frequencies to prove it. Unfortunately, they are too big.
Would be interesting if you could post pictures from the input stages. How have you terminated the transmission line at oscilloscope side, was that inline termination or does the scope have it integrated? It it was the first, then the frequency response does not surprise me. The DSO5000B's input stage had quite long traces adding inductance, and they had not compensated them. This caused excessive ringing, also when feeding 50R terminated signals.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: deathwarror on September 04, 2016, 12:34:56 am
I did direct line from waveform generator to scope, non terminated.  Would expect reflections.

The BNCs are most likely non terminated. Have identified the DM9000EP location and the on board DDR2 SRAM is 64mb from the serial.

Images are here: https://1drv.ms/f/s!AnmmyurkkYaJilHJ6x7BgxpD3wSC

Looked at i2c.log for hardware version number and it showed "102"
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 04, 2016, 07:42:57 am
ohhh MSO7000BLG, interesting to see that they not populated some sampling memory on both FPGAs, but there is no higher model but only with 32k (yet? who knows, they already have 3GHz SA - which was a shock for me as i never thought they will develop one, and now just found another one new gear from Hantek, http://hantek.com/ProductDetail_8230.html (http://hantek.com/ProductDetail_8230.html)).

Wondering as well what for are these UC22/23 near trigger section. It looks like additional drivers, probably you can see all 4 channels on these resistors R192/193 and R258/259.

For LAN hack it looks like on other models, LAN or rs232 with optocouplers and DM9xxx + crystal on mainboard.

Questions:

Can you make and share with us firmware dump?

What is the sampling rate when running 2 and 4 channels?

When you apply same signal to channels 1/2 and e.g. 1/3 how high is the skew between channels? (and is there function/menu in the firmware to change it?)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on September 04, 2016, 10:46:48 am
I did direct line from waveform generator to scope, non terminated.  Would expect reflections.

The BNCs are most likely non terminated. Have identified the DM9000EP location and the on board DDR2 SRAM is 64mb from the serial.

Images are here: https://1drv.ms/f/s!AnmmyurkkYaJilHJ6x7BgxpD3wSC

Looked at i2c.log for hardware version number and it showed "102"
From the pictures, the analog stage pretty much looks identical to the DSO5000 series. They probably have tweaked here and there, but they also made the trace from BNC to the range relay muuuch longer. I would be surprised if that amplifier is anywhere flat.

The relay at the BNC is to feed in the auto calibration signal, the one in the box is the range switch. I am confident that there is no 50 ohms option built in.

Without inserting an inline terminator, your initial measurement has not much use.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: MarkM on September 05, 2016, 12:58:30 am
Thanks for the hack!  I had it done in just a few minutes and also updated it the most recent stock firmware then with tinhead's modified firmware.  Unfortunately, this scope had issues before that. Most of the time it would read a flat DC signal(or square wave) up to 800mV too high depending on the time base and vertical settings.

It will self calibrate, but doesn't seem to help.  There's actually a new issue now. Seems to be reading the peaks a bit better(5.00v-5.20v), but look at the minimum, maximum and mean.  Any idea on this? 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on September 05, 2016, 05:37:24 am
Thanks for the hack!  I had it done in just a few minutes and also updated it the most recent stock firmware then with tinhead's modified firmware.  Unfortunately, this scope had issues before that. Most of the time it would read a flat DC signal(or square wave) up to 800mV too high depending on the time base and vertical settings.

It will self calibrate, but doesn't seem to help.  There's actually a new issue now. Seems to be reading the peaks a bit better(5.00v-5.20v), but look at the minimum, maximum and mean.  Any idea on this?
Had you disconnected your probes during calibration?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: MarkM on September 05, 2016, 02:52:07 pm
Yes, probes are disconnected during calibration.

EDIT: I was wrong. It's not making it through the calibration, although it used to.  I can hear a relay click at step 24/36 then it resets without an error message.  Will let it warm up for much longer and try again.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: snik on September 05, 2016, 04:30:07 pm
I can hear a relay click at step 24/36 then it resets without an error message.
If problem continues, please check the 595 in the Frontends. Had a similar problem after both 595 gone bad, solder new ones in and one was not soldered right at one or two  pin and than the calibrations resets at point 24/36 too. Maybe it can help
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: MarkM on September 05, 2016, 05:08:50 pm
I can hear a relay click at step 24/36 then it resets without an error message.
If problem continues, please check the 595 in the Frontends. Had a similar problem after both 595 gone bad, solder new ones in and one was not soldered right at one or two  pin and than the calibrations resets at point 24/36 too. Maybe it can help

Thanks!  It's worth a shot.  Just to make sure, you're referring to the 74HC595Ns, correct?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: snik on September 05, 2016, 07:54:57 pm
Quote
Just to make sure, you're referring to the 74HC595Ns, correct?
:-+
In my scope both (74HC)595 TSSOP16  in the Frontends for Ch1 and 2 was completly faulty. Maybe one of yours also... Got a bunch of them as bargain on eBay, so the replace was very cheap.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: MarkM on September 07, 2016, 12:05:08 am
Quote
Just to make sure, you're referring to the 74HC595Ns, correct?
:-+
In my scope both (74HC)595 TSSOP16  in the Frontends for Ch1 and 2 was completly faulty. Maybe one of yours also... Got a bunch of them as bargain on eBay, so the replace was very cheap.

Thanks, I appreciate it!  I just ordered some.  I'll report back soon. 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: juppkk on September 07, 2016, 04:44:25 pm
Hello,

I own a Hantek DSO5102P still 100 MHz S/W Version 3.40.0

My question is, how to change the background color.
I mean the black color behind the Signal, not the Menu-Background.

And secondary, please in detail, how my I trigger such a signal (Picture)
(Signal is from PT2272 a remote control decoder)
Small impulswidth is 34 µS, the signal package is 25 mS
I´ve tried a lot but no success.

Thank´s for help
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: MarkM on September 09, 2016, 09:11:13 pm
Quote
Just to make sure, you're referring to the 74HC595Ns, correct?
:-+
In my scope both (74HC)595 TSSOP16  in the Frontends for Ch1 and 2 was completly faulty. Maybe one of yours also... Got a bunch of them as bargain on eBay, so the replace was very cheap.

Thanks, I appreciate it!  I just ordered some.  I'll report back soon.




Replaced both and same issue.  Triple checked the soldering.  Ordering the Rigol 1054z, as I need a working scope within the next two weeks.  I appreciate the help, though.  I'll mess with it later.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: snik on September 10, 2016, 05:18:50 am
Sorry to hear that it was not the fault...
Please tell us what caused the Error when you find it
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on September 10, 2016, 06:06:08 am
Quote
Just to make sure, you're referring to the 74HC595Ns, correct?
:-+
In my scope both (74HC)595 TSSOP16  in the Frontends for Ch1 and 2 was completly faulty. Maybe one of yours also... Got a bunch of them as bargain on eBay, so the replace was very cheap.

Thanks, I appreciate it!  I just ordered some.  I'll report back soon.




Replaced both and same issue.  Triple checked the soldering.  Ordering the Rigol 1054z, as I need a working scope within the next two weeks.  I appreciate the help, though.  I'll mess with it later.
You could try and follow the signal path from the BNC to the ADCs, with no signal. Also check the reference voltage of the differential path. I would also check soldering, maybe push on some chips to find cold joints. Check for thevreverse engineered schematic that is around.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: MarkM on September 10, 2016, 10:21:20 pm
All very good ideas. :)  Unfortunately, I don't have the time at the moment. Wish we knew exactly what each step was testing.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Front_Line on September 11, 2016, 08:46:14 pm
Prompt pinout JTAG connector J901 (10 pin connector) on the board  hw version 1.01 from DSO5072P. 1 and 2  - 3.3V, 3 - nTRST, 4 - nRESET, 8 and 10 - GND. The rest are not known.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: deathwarror on September 28, 2016, 04:54:20 am
MSO7000BLG Information Update.
Sorry about the delay. I'm in the middle of moving with college and work so fairly busy.
Here is the dump and every file I could find using the USB.  I have not gotten to the jtag yet.
https://1drv.ms/f/s!AnmmyurkkYaJimC43n6GJFRtcWD_
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on September 28, 2016, 09:00:11 pm
thanks for trying, but only boot.bin seems to be ok, everything else is broken or empty :\
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: nls on October 01, 2016, 02:40:11 am
Hello!
First I wish to thank you for your enormous, complex and useful work hacking this nice chinese scope series. People like you play an crucial rule in technologycal advance.
Second, I apologise for my poor English. (my Deutch instead is not poor; it is null  :-\
Third, I beg pardon for not searching your very big thread fully where certainly I can found a lot of what I need. I confess, it's very hard to me not get confused by the bulk of information there, although i have learned a lot following it the last days.

And at last I ask for your help and advice:

I recently bought a rebadged Hantek/Tekway (so I think) 100MHz 1GS/s 1M sample points distributed by Icel-Manaus, a maker/seller from a free-zone in my country (Brazil). It is visually identical to the Hantek DSO5102 model. It came with two PP-150 probes. On it's rear, close to the USB connector, the place for a RJ type Ethernet connector is still unpopulated and not broke open.


From its utility menu system information option I got these data:

[modêlo]       DSO02102      // model
[Versão SW]      2.06.3   (120507.0)   // SW version
[Versão HW]      10070x555583e9      // HW version
[Número de série]   T 1G/012 008100      // serial #
[inicializações]   13         // boots
[atualizações]      0         // upgrades
[lcd front ts]      0.0.0         //

The serial number showed is the same as printed in a badge on the case back.

I have not made any upgrade or bandwidht hack yet.
I made a back-up dump (my-dump.zip) by using your tool (dst1kb_b_backup_tool.up md5sum=58bfe4b0609f795411ba2558fdd06c08 with the 0571tekway password) and can send it to you, if you please.


It boots on portuguese language and shows a custom ICEL-Manaus splash screen before start working, apart some bugs.

I can open it and take some photos of the boards. To hook to the UART port is not a problem to me also. I'm a Linux (Suse) user and have some programming skills.

My main goal is to upgrade it to a stable and bug free (or almost bug free) version of firmware. To extend its bandwidth can be a bonus if not compromise its reliability and precision/accuracy as a 100MHz scope.

So I wish to know what's the best upgrade file to use and how can I get it. I got the file dso5kb_func_dso5102b20160111.up from the Hantek site. Have you tried it?
 I bought the instrument second-hand but almost without use. The maker/seller (Icel-Manaus) does not support upgrades (kind of a black-box seller  :P  ).

Thank you in advance
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Walt_ua on October 14, 2016, 08:56:10 am
Hi,tinhead,
Welcome back!

For your firmware collection "old SoC" Hantek.
http://www.hantek.ru/products/dso5202B/dst1kb_2.06.3_15202b_fact(140211.0).up (http://www.hantek.ru/products/dso5202B/dst1kb_2.06.3_15202b_fact(140211.0).up)

Dont know, whats release note or bugfix, but feb 14 year. Its last and newest firmware for hw0-hw7 DSO.

Hw0 with this firmware work fine.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ruiseixas on October 16, 2016, 06:42:11 pm
Hi,

In my opinion there are things on this scope (DSO5102P) to be changed that worth more than the Bandwidth!

For instance, the supper annoying factory resets each time the scope crashes. Every owner of these Hantek scopes knows how easy it is to crash them, the problem is that you lose all your hardly done configurations to the point of make them pointless. It may not sound a big deal but if you think how laborious it is to have the Measure menu with Channel 1 and Channel 2 exactly as you want to have all vanish, not to mention how difficult it is to maintain the things as you wish in this Measure menu just because you disable a channel...

If Hantek could change this channel dedicated Measure menu to a global one like in the equivalent GW Instek Scopes (very user friendly scopes by the way), so that each F1 to F5 button could have the CH1 and CH2 of each Type of measurement paired together like in the Instek, it also allow the selection trough the F1-F5 buttons without the clumsy multipurpose knob (that rotates in the wrong way), it would add so much in terms of usability that makes me ask why Hantek doesn't think about this issues! Just look at the brilliant and very well done Instek Measure Menu in the picture bellow... So, so, simple!  :clap:

Is it possible to do the same in the Hantek DSO5000?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: christensen on October 20, 2016, 09:02:54 am
Hi,

I just bought an Hantek DSO5102P and I want to unlock the bandwidth to 200Mhz.
My question is after I unlock the oscilloscope how can I do the fw update?what update I could use DSO5202P or DSO5102P.
The second question is after unlock I can use official updates or only modified?

Thanks
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 20, 2016, 09:37:08 am
 - fw from DSO5202P
 - official updates 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: christensen on October 20, 2016, 06:57:56 pm
Thanks,

I've rename the file dst1102b to dst1202b and reboot two times. i've made update to DSO5202P "dso5kp_func_dso5202p20160427" but on the system information cannot see anything.
The 2ns/DIV timbase is available.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ruiseixas on October 20, 2016, 07:40:03 pm
Hi,

I just bought an Hantek DSO5102P and I want to unlock the bandwidth to 200Mhz.
My question is after I unlock the oscilloscope how can I do the fw update?what update I could use DSO5202P or DSO5102P.
The second question is after unlock I can use official updates or only modified?

Thanks

Do you realize that you need different probes to take advantage of the 200MHz? The probes that come with the DSO5102P are the PP-150, limited to 100MHz, so you need to buy the PP-200 ones so that the input signal isn't attenuated!  ::)

I still think that the number of Bugs on this oscilloscope deserves more attention than the Bandwidth... None of these Bugs haven't unbelievably been solved yet...  :palm:

Top 5 Hantek Bugs - Hantek Oscilloscope (https://youtu.be/1j0txBI_Zm0)


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: christensen on October 20, 2016, 09:08:32 pm
I've alredy unlock it, but i want to update to the last fw version. i have 200Mhz probes Tektronix P6200 and another one 250Mhz from an old oscilloscope.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: aandrew on October 20, 2016, 10:27:16 pm
oh man the bugs and oddities on the MSO5074FG... that could be an entire thread of its own!

Too bad they can't open up the UI software and document how to talk to the FPGA and hardware. Let us take a crack at the UI...

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ruiseixas on October 21, 2016, 08:48:25 am
oh man the bugs and oddities on the MSO5074FG... that could be an entire thread of its own!

Too bad they can't open up the UI software and document how to talk to the FPGA and hardware. Let us take a crack at the UI...

Is the problem of the compliance check lists like:



Too bad Hantek hasn't its own forum like other Chinese brands (Ex. Yealink) just to help them identifying and solving this bugs... Hantek should care more about their community of buyers not only because of them but also because it would add value to their scopes having bugs solved in time!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: nafanja on October 23, 2016, 01:53:11 pm
Prompt pinout JTAG connector J901 (10 pin connector) on the board  hw version 1.01 from DSO5072P. 1 and 2  - 3.3V, 3 - nTRST, 4 - nRESET, 8 and 10 - GND. The rest are not known.

Hi, if any one need, JTAG pinout for a 9-Pin J901. on my Board DSO5000B

1 - 2 - 3.3v
3 - nTRST
4 - may be nRESET but it connects without it.
5- TDI
6 - TDO
7- TMS
8 - GND
9- TCK
10 - GND
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 23, 2016, 05:53:13 pm
they actually hired someone who can at least read my buglist, and even fix some of them .. but it takes still forever ;(
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: nafanja on October 24, 2016, 01:48:36 pm
Hello, all.
need one solution for bricked MSO5102B...
After flashing over UART supervivi, device has not more booted...
have with jtag, with h-Jtag connected, but what was a next steps?
I not have a Full backup, because the Device not booted, last time can only over UART received. But now work the UART not more too...
Have over JTAG two Ram Dupms readed, one 16MB and other 258MB...
Can any one help  me please!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: snoopy on October 25, 2016, 06:00:04 am
I have a Hantek 5202B and I notice a huge amount of time domain jitter at the really high sweep rates when I measure a low jitter 50 MHz source. On the Tektronix TDS784 it is rock stable ;)

Is this a firmware update issue because I can't seem to update the firmware from the Hantek website anymore.

cheers
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: aandrew on October 25, 2016, 03:55:10 pm
they actually hired someone who can at least read my buglist, and even fix some of them .. but it takes still forever ;(

Wow nice, is this a contact you're willing to share?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: christensen on October 25, 2016, 09:19:12 pm
This is mine with different HW, I want to add LAN (22pf capacitor, 25Mhz crystal oscillator, DM9000), UART and J-tag Pins.
The micro SD card slot have the same role like the front USB?

Which of the pin group are for UART and J-tag?

I've check different hardware configuration and on all the J801 is for UART
J2 ->  RJ LAN Jack
U17 -> DM9000AEP (it can be found below the main board)
Y2 -> 25MHz Xtal
JC1 -> H1102nl Sop-16

Thanks
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: nafanja on October 26, 2016, 11:52:06 am
This is mine with different HW, I want to add LAN (22pf capacitor, 25Mhz crystal oscillator, DM9000), UART and J-tag Pins.
The micro SD card slot have the same role like the front USB?

Which of the pin group are for UART and J-tag?

I've check different hardware configuration and on all the J801 is for UART
J2 ->  RJ LAN Jack
U17 -> DM9000AEP (it can be found below the main board)
Y2 -> 25MHz Xtal
JC1 -> H1102nl Sop-16

Thanks

I think, the SD Card Slot is for booting from SD Card

J801 - UART
J901 - JTAG for ARM
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: iromero on October 29, 2016, 12:38:00 pm
Hi, I bought a hantek DSO5062BMV a while back and it looks like there haven't been firmware updates since 2014, I attached my system info window.

I tried installing the latest firmware from the hantek website but i get this error: "No upgrade files detected on USB device". From what I could skim in this thread, the BMV is just a BM with a sd card with video tutorials, the BM model had updates this year. Is there a way to install that firmware on my scope? Did anything really improve since 2012? I am getting increasingly frustrated on how crappy this scope's firmware is :(
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ruiseixas on October 29, 2016, 04:23:01 pm
Hi, I bought a hantek DSO5062BMV a while back and it looks like there haven't been firmware updates since 2014, I attached my system info window.

I tried installing the latest firmware from the hantek website but i get this error: "No upgrade files detected on USB device". From what I could skim in this thread, the BMV is just a BM with a sd card with video tutorials, the BM model had updates this year. Is there a way to install that firmware on my scope? Did anything really improve since 2012? I am getting increasingly frustrated on how crappy this scope's firmware is :(

As I can see from the firmware file in the Hantek page, the last firmware is from 2014-08-23! When you choose Hantek you should restrain your selection on the more basic and popular models. Firmware support isn't the best thing in Hantek, they simple don't care, mainly with the less popular models like yours.

By the way, in your model, BMV looks like V stands for Video Help... Really?! Do you think it makes sense a video help on the scope to the point of paying twice the original P model? Again, Hantek is all about the basics, anything more is just to rip some extra money from you. That's why I think that a scope like GW Instek GDS-1072AU is definitely a better option, I would chose that instead if I knew what I know today.

GW Instek GDS-1072AU 70MHz Dual Channel TFT Oscilloscope (Maplin N53NA) (https://youtu.be/xyoHgwmylnM)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: iromero on October 29, 2016, 09:53:35 pm
Hi, I bought a hantek DSO5062BMV a while back and it looks like there haven't been firmware updates since 2014, I attached my system info window.

I tried installing the latest firmware from the hantek website but i get this error: "No upgrade files detected on USB device". From what I could skim in this thread, the BMV is just a BM with a sd card with video tutorials, the BM model had updates this year. Is there a way to install that firmware on my scope? Did anything really improve since 2012? I am getting increasingly frustrated on how crappy this scope's firmware is :(

As I can see from the firmware file in the Hantek page, the last firmware is from 2014-08-23! When you choose Hantek you should restrain your selection on the more basic and popular models. Firmware support isn't the best thing in Hantek, they simple don't care, mainly with the less popular models like yours.

By the way, in your model, BMV looks like V stands for Video Help... Really?! Do you think it makes sense a video help on the scope to the point of paying twice the original P model? Again, Hantek is all about the basics, anything more is just to rip some extra money from you. That's why I think that a scope like GW Instek GDS-1072AU is definitely a better option, I would chose that instead if I knew what I know today.

GW Instek GDS-1072AU 70MHz Dual Channel TFT Oscilloscope (Maplin N53NA) (https://youtu.be/xyoHgwmylnM)

I bought that scope back in 2013, in Argentina. Due to import restriction and taxes my choices were pretty much only what my distributor had. the BMV model was on sale and it was really the best bang for the buck at the time. Do i feel buyer's remorse? a bit, would have i been able to do otherwise? probably no. Either way that will not change the fact that i have it now and i try to make the best of it.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on October 29, 2016, 10:45:47 pm
Hi, I bought a hantek DSO5062BMV a while back and it looks like there haven't been firmware updates since 2014, I attached my system info window.

I tried installing the latest firmware from the hantek website but i get this error: "No upgrade files detected on USB device". From what I could skim in this thread, the BMV is just a BM with a sd card with video tutorials, the BM model had updates this year. Is there a way to install that firmware on my scope? Did anything really improve since 2012? I am getting increasingly frustrated on how crappy this scope's firmware is :(

send email to Amy Cai caiyijun@hantek.com

in principle they can always compile latest firmware for your hardware version
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: iromero on October 30, 2016, 05:24:03 am
Hi, I bought a hantek DSO5062BMV a while back and it looks like there haven't been firmware updates since 2014, I attached my system info window.

I tried installing the latest firmware from the hantek website but i get this error: "No upgrade files detected on USB device". From what I could skim in this thread, the BMV is just a BM with a sd card with video tutorials, the BM model had updates this year. Is there a way to install that firmware on my scope? Did anything really improve since 2012? I am getting increasingly frustrated on how crappy this scope's firmware is :(

send email to Amy Cai caiyijun@hantek.com

in principle they can always compile latest firmware for your hardware version


Thanks a lot! I just sent them an email. If i get updated files I'll upload them here if anyone has a similar model to mine.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: iromero on October 31, 2016, 07:42:55 am
Got the update from Hantek, they said my kernel is no longer supported for updates (so they just gave me the 2014 one), to the question of how I could update my kernel they said "Buy a new one", lol.

Firmware file i got from Hantek (https://drive.google.com/file/d/0B4B_JmDvI-0eRlFjU2tNYXFjTDQ/view?usp=sharing)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: robots on November 01, 2016, 10:36:34 am
tinhead: is it possible to get latest debug firmware from them ? for mso5102d?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 01, 2016, 11:31:38 am
Got the update from Hantek, they said my kernel is no longer supported for updates (so they just gave me the 2014 one), to the question of how I could update my kernel they said "Buy a new one", lol.

Firmware file i got from Hantek (https://drive.google.com/file/d/0B4B_JmDvI-0eRlFjU2tNYXFjTDQ/view?usp=sharing)

ha ha ha ha-ntek


i have kernel 2.6.30.4 running, with month old firmware 3.30.0 running on my old Tekway (with exact same hw version than yours).
Yes, i do all updates over the network, manually, but it is possible.


(https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/?action=dlattach;attach=266690;image)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: iromero on November 03, 2016, 03:15:52 pm
ha ha ha ha-ntek


i have kernel 2.6.30.4 running, with month old firmware 3.30.0 running on my old Tekway (with exact same hw version than yours).
Yes, i do all updates over the network, manually, but it is possible.


Was there any major improvement that would make it worth the trouble? I can't seem to find release notes for these firmwares.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: aandrew on November 04, 2016, 02:39:58 pm
Interesting. I'm running 3.2.35 (160630.0) on my MSO5074FG (hw 10020).

A detailed changelog would always be helpful. Doesn't happen often enough :-(
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on November 04, 2016, 09:50:32 pm
for older hardware, there is still hidden direkt link

http://www.hantek.com/Product/DSO5000/DSO5202B_Firmware.zip (http://www.hantek.com/Product/DSO5000/DSO5202B_Firmware.zip)

where for new hardware, and that link is on Hantek's webpage, is

http://www.hantek.com/Product/DSO5000/DSO5202B_Firmware2.zip (http://www.hantek.com/Product/DSO5000/DSO5202B_Firmware2.zip)

I use the first one, due to the fact that i have old hardware.

Hantek removed the old firmware link, because firmware password is the same, and people with new hardware have very often installed wrong version - which eventually destroyed their DSOs.

Of course one need on older hardware some libs installed, i do have actually dueal boot:  MSO (with very special firmware from Hantek) and DSO (from the first link). For dueal boot i made simple script which checks unused button (probe check) to confirm boot, and F1 / F2 to select between MSO and DSO. Due to the fact that MSO and DSO are using complettly different FPGA designs, i have to boot twice - boot -> select platfrom -> boot again -> confirm, but that not a big deal knowing what necessary (when i reload FPGA design when FPGA is already running, I/O is not working properly).

So yeah, my Tekway (it actually Tekway DSO, with extra MSO PCB and LAN and and and) DSO is bit special, and i have to decrypt/copy files manually when updating, but it works.

For other models, like BMV with old hardware, one can use the firmware from first link, but again maually! SD and 2M point are working on my DSO as well, i did modified mainboard as well (bigger memory).

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ElektroQuark on November 05, 2016, 04:55:30 pm
Hi tinhead,

What's latest firmware for this machine?

DSO5202B
sw 2.06.3 (130814.0)
hw 10070x555583eb

Thank you very much!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Bondguy on November 05, 2016, 07:29:33 pm
Tinhead,
Can you please also
for this version please recommend an upgrade solution?

DSO5102BM
sw 2.06.3 (120423.0)
hw 10070x555583e9
I read that that kind of scope had probably also bad CPLD design installed.
Can you please also  let me know  how to upgrade that CPLD? I already have
Mini Altera FPGA CPLD USB Blaster programmer

Thanks a lot
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: christensen on November 29, 2016, 07:41:58 am
Hi Guys,

My components arrived for LAN modification. Before i start to solder it i want to ask for what is the battery on the main board?
I just want to remove it before modification, does will lose some calibration information?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: blackriver on November 29, 2016, 01:16:03 pm
Hi Guys ;)
I'v bought bricked Voltcraft DSO-1062D, I look for full zImage (It will be grateful).

Voltcraft DSO1062D
sw ???
hw 1.01

There are linux 3.2.35 and damaged rootfs partition.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: anfang on November 29, 2016, 04:50:55 pm
for older hardware, there is still hidden direkt link

http://www.hantek.com/Product/DSO5000/DSO5202B_Firmware.zip (http://www.hantek.com/Product/DSO5000/DSO5202B_Firmware.zip)

where for new hardware, and that link is on Hantek's webpage, is

http://www.hantek.com/Product/DSO5000/DSO5202B_Firmware2.zip (http://www.hantek.com/Product/DSO5000/DSO5202B_Firmware2.zip)

Hi tinhead,
are the links correct? Ist the first "for old hw" valid for e.g. Voltcraft DSO-3062C?
the content of both is file starting dso5kb_ ... only different datecode.

There is some fw dst1kb_2.06.3_15202b_fact(140211.0).up on russian site, do you have some info about it?

best regards
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Front_Line on December 05, 2016, 07:13:37 am
Hello.
dso5102p hacked 200MHz.

Here is a picture After starting on dso5102p without probe:

(http://i.imgur.com/xOzYSdO.jpg)

When measuring other oscilloscope on line +12A at point TP907 is such a picture:
(http://i.imgur.com/ojVeKdI.jpg)

Measurements at some points:
TP302
(http://i.imgur.com/4bJtXKT.png)
TP403
(http://i.imgur.com/PppBt4N.png)

Once connected to the probe dso5102p to channel 2, and measured them tp907 point everything was fine.

The pdf file put down signals at the control points measured by other oscilloscope after launch without probes and signals when the measuring point is tp907 dso5102p themselves.
All other control points on the voltage (901,904,905) such as blade 907 no.

Tell me what could be the problem?
...............................................

I found the cause. It was defective 12V regulator 78m12, replaced the 7812A solve the problem.!!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vferencz on December 08, 2016, 05:53:02 pm
Hi Guys,
Please help me to backup data of my DSO.
model: DSO5202BM
sw version: 3.30.0 (130709.0)
hw version 1010x5555830f
serial number T1G/012 01xxxxx

I want to back up the DSO before adding the parts for LAN. No success.  |O
I tried:
-   DSO-USB-Tool, http://peter.dreisiebner.at/dso-usb-tool/ (http://peter.dreisiebner.at/dso-usb-tool/)  with inserted  flash drive in USB port and running these command from the shell:
nanddump -o -b -f /mnt/udisk/dump/boot.bin /dev/mtd0
nanddump -o -b -f /mnt/udisk/dump/logo.bin /dev/mtd1
nanddump -o -b -f /mnt/udisk/dump/kernel.bin /dev/mtd2
nanddump -o -b -f /mnt/udisk/dump/root.bin /dev/mtd3
-   physically connected (via UART<->USB converter) and PuTTY (log attached).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mikga32 on December 08, 2016, 11:15:38 pm
What's bricked MSO5102D worth? in Canada
It boots to a blue screen then dark, cycles ..
Serial: T1209464
made in 2011 hw 1007
I clicked on wrong firmware MSO5202D instead of MSO5102D
And installed wrong firmware..
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jimiz on December 20, 2016, 08:50:37 pm
 ;)HI
I have VOLTCRAFT DSO-1062D   60Mhz

the info about are:

SW : 2.06.3 (121023.0)
HW : 10070x555583eb
ser  : T1*/01200****   (so down 15000)
bout count : 51
upgrade count : 0
lcd.fornt.TS : 0

usb/pc see DSO without problem.
I'v use the DSO-BW-Changer , and update to 200 Mhz
now i can set to 2.00 nv  (before was 4)

I see on DSO-USB-Tool , with shell command ls  , found a DSO 1202b.


I like ask please IF Is better I update a firmware better (what exactly) ?
and if the "hardware" work fine to 200 Mhz or need something update.

THANKS!!  :-+
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mikga32 on December 26, 2016, 09:30:33 am
All I know is if it's working don't upgrade firmware, I did and unit is totally bricked but Hantek did try to help send me
a terminal program and all my MSO5102D does is send machine code no text, so I send them the crap it output and
some scope volts timing screens. That was a few weeks ago..
Some how either a virus or bad usb drive made it unworkable.
Normally the firmware would (should) check if the unit is correct for upgrade.. ( got MSO5202D) clicked wrong link!
That didn't happen. That's how I ended up here ~1 year ago.

The unit has very low hours on it! have the 3.3v, ground, Tx, Rx, (4 wires) cabled out the back.
Hooked up to a PicAxe 027 (FTDI chip inside) USB cable, it's ~3.6 volts. with 3 wires only.
Problem is I don't know about the UART or TTL stuff very well at all. Other than TTL is Transistor To Transistor Logic?
The Chip inside the unit is complex!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jcrubin on December 26, 2016, 02:04:29 pm
I finally got around to upgrading my 5000P series and documented it by making a Movie, everything went just fine.



https://www.youtube.com/watch?v=Mtt-g5putLY (https://www.youtube.com/watch?v=Mtt-g5putLY)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: minescumarius on January 03, 2017, 06:32:02 am
Hello,
I have an Hantek DSO5102P oscilloscope with stock firmware dso5kp_func_dso5102p20140208 on it, that has not been used for the last 6 months.
Yesterday I tried to turn it on and remains frozen on screen logo. I connected a serial interface to internal port and I got the following result (text file).
How can I solve this problem? I did dump restore before installing the firmware. If I try to rewrite root.bin with DNW freezes, as shown in picture.
I can access the boot menu but I can not get into console. Please help.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: app-note on January 09, 2017, 08:50:45 pm
Hi,
I have 2x scopes of the of revision hw1005, hacked to 200MHz bandwidth and updated to firmware 130814.
Both worked fine, until a year ago, when the first one started to hang at step 8/36 of self calibration - error code 0x400.
Now the second Hantek fails self calibration too, only at step 2/36 with error code 0xa00

Any idea, how to fix it ? Is it caused by a HW defect and what components are most likely concerned ? 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on January 11, 2017, 10:28:15 am
Hi,
I have 2x scopes of the of revision hw1005, hacked to 200MHz bandwidth and updated to firmware 130814.
Both worked fine, until a year ago, when the first one started to hang at step 8/36 of self calibration - error code 0x400.
Now the second Hantek fails self calibration too, only at step 2/36 with error code 0xa00

Any idea, how to fix it ? Is it caused by a HW defect and what components are most likely concerned ?
I also had issues with failing calibration when I developed my improved 250MHz analog hack (www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg979548/#msg979548 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg979548/#msg979548)). It seems that the they check if offset and gain of the input stage are within reasonable ranges. I would look there first.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on January 11, 2017, 10:39:26 am
it seems that I never had posted an update of my analog hack here that I made. Here it is, for anyone interested ;)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Front_Line on January 14, 2017, 12:14:20 pm
Is it possible to view a log of calibration?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: minescumarius on January 20, 2017, 08:20:00 am
Hello,
I have an Hantek DSO5102P oscilloscope with stock firmware dso5kp_func_dso5102p20140208 on it, that has not been used for the last 6 months.
Yesterday I tried to turn it on and remains frozen on screen logo. I connected a serial interface to internal port and I got the following result (text file).
How can I solve this problem? I did dump restore before installing the firmware. If I try to rewrite root.bin with DNW freezes, as shown in picture.
I can access the boot menu but I can not get into console. Please help.

Problem solved via JTAG port. The programming interface is simple. Cost insignificant. Programming requires 270 minutes with this interface.
Very slow speed, only 10K per second with this LPT interface. But you can correct firmware problems. My problem consisted in bad NandFlash.
I changed NandFlash. I programmed NandFlash with fw_beackup.bin


1. Install H-Jtag software ( download from http://www.hjtag.com/en/index.asp (http://www.hjtag.com/en/index.asp) )
2. Set the parallel port (JTAG Interface pins)
3. Open the file "config processor HJTAG.hfc" in H-Flasher with Load
4. Write fw_beackup.bin in NandFlash
5. Restart the power

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: dec123ua on February 05, 2017, 09:10:16 am
Hello,
I have an Hantek DSO5102P oscilloscope with stock firmware dso5kp_func_dso5102p20140208 on it, that has not been used for the last 6 months.
Yesterday I tried to turn it on and remains frozen on screen logo. I connected a serial interface to internal port and I got the following result (text file).
How can I solve this problem? I did dump restore before installing the firmware. If I try to rewrite root.bin with DNW freezes, as shown in picture.
I can access the boot menu but I can not get into console. Please help.

Problem solved via JTAG port. The programming interface is simple. Cost insignificant. Programming requires 270 minutes with this interface.
Very slow speed, only 10K per second with this LPT interface. But you can correct firmware problems. My problem consisted in bad NandFlash.
I changed NandFlash. I programmed NandFlash with fw_beackup.bin


1. Install H-Jtag software ( download from http://www.hjtag.com/en/index.asp (http://www.hjtag.com/en/index.asp) )
2. Set the parallel port (JTAG Interface pins)
3. Open the file "config processor HJTAG.hfc" in H-Flasher with Load
4. Write fw_beackup.bin in NandFlash
5. Restart the power
Please add fw_backup.bin file
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: minescumarius on February 07, 2017, 06:34:52 am
https://drive.google.com/open?id=0B16a7S00uP6ed19FaGNBS3ZKN28


Build interface and follows procedures. Be patient programming lasts 270 minutes.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ferrisio on February 09, 2017, 07:27:53 pm
Hi, I have a DSO5102P hw version 1010, sw version 3.40.0.  I renamed dst1102b to dst1202b and have rebooted several times but the model number hasn't changed.  Have I missed something, or does this recent firmware (19/6/16) disable the hack?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Tyra on February 16, 2017, 01:24:26 pm
Hi, I have a DSO5102P hw version 1010, sw version 3.40.0.  I renamed dst1102b to dst1202b and have rebooted several times but the model number hasn't changed.  Have I missed something, or does this recent firmware (19/6/16) disable the hack?
edit logotype file (with vi /logotype ) and change dst1102b to dst1202b
edit logotype.dis file (with vi /logotype.dis ) and change Hantek_DSO1102B to Hantek_DSO1202P

After
turn off - turn on - wait 2-5 sec - turn off - turn on - choose "Reboot system".

Should work.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sarexpert on March 13, 2017, 02:24:10 pm
I recently got one.  It is different from the guts of the 4000 series, but probably is hackable since a lot of stuff is similar.
Haven't had time to do anything other than crack the case and take pictures, which were promptly lost when my phone died. :-X
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: LDTVN on March 19, 2017, 04:47:25 pm
Hallo.
Tinhead I need help with the repair of my Hantek DSO5102B.
Hw 1007
After 2 years of work, he began periodically hang and reloaded. Flash firmware from the official site via USB, succeeded. When I flash via JTAG then H-Flash reports a failure of 42%. This clearly indicates a fault NAND Flash. Tell me please, can I install Flash of larger size (512MB) or it will lead to malfunction of the program? Now there is K9F1208UOC (64MB).
However, there is suspicion of a problem with the FPGA EP3C5F256C8N, do you have fpga design for hw1007_83ED. Or is there any possibility read design from my FPGA? JTAG in my  FPGA work properly.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jefti on April 10, 2017, 01:57:06 pm
Hello Tinhead, I just wanted to give a shoutout and major thanks for your hard work. I recently purchased a Hantek 5102B and it was so easy to upgrade it to 200MHz with the edit tool. Great work and great thanks!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: polo4041 on April 23, 2017, 02:33:17 pm
Hello, I am new on your forum and send all of you  my "hello", my English is not so good as yours so please be patient with my questions.
I received a week ago an Hantek scope DSO5072P with the following information:
Version logs: 3.40.0 (170209.0)
Hardware version: 1010xffff8108
S/N: T1G/035 65xx
As there was a new version of firmware dso5072p20170318. up I decide to make first a backup, like to explained by tinhead without success, by using tool_P_models.zip.
I have tried to rename the file with the same name as the firmware update and I only get the error oXfe message.

When using the original name of the backup file I have the message there are no file for firmware update, after renaming the update file, it  seam to work, but after few seconds message "the file has not the right format" is displayed.
Finally,i do the firmware update witch works and only the version log display seam to be changed with a display:  3.40.0(170318.0)
As my knowledge, in Linux  is basic can any body body from the forum help me to progress and explain me how to do backup via USB to word converter or perhaps I miss Something in the software backup procedure. Perhaps it is posible to do that via Windows.
I will appreciate your help and sorry again for my English
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: balding_parrot on April 24, 2017, 05:45:50 pm
Hi,
I have just ordered one of these Hantek DSO5072P 70Mhz scopes and I have two questions that I didn't find in this long ass thread. Sorry if I missed the answers to the questions I am about to ask.

1. Does this still work exactly the same for the newest scopes under this model name ?

2. If it does still work, will I be able to upgrade to the latest DSO1202B firmware and if so will it undo the mod ?

Thanks
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: polo4041 on April 25, 2017, 12:39:18 pm
As you have made with succes you hack to 200 Mhz, and as i also get problem with doing a back up i put below my first thread expalining the priblem i have.
perhaps you can give me a little help to resobe the backup problem :

***************
  Hello, I am new on your forum and send all of you  my "hello", my English is not so good as yours so please be patient with my questions.
I received a week ago an Hantek scope DSO5072P with the following information:
Version logs: 3.40.0 (170209.0)
Hardware version: 1010xffff8108
S/N: T1G/035 65xx
As there was a new version of firmware dso5072p20170318. up I decide to make first a backup, like to explained by tinhead without success, by using tool_P_models.zip.
I have tried to rename the file with the same name as the firmware update and I only get the error oXfe message.

When using the original name of the backup file I have the message there are no file for firmware update, after renaming the update file, it  seam to work, but after few seconds message "the file has not the right format" is displayed.
Finally,i do the firmware update witch works and only the version log display seam to be changed with a display:  3.40.0(170318.0)
As my knowledge, in Linux  is basic can any body body from the forum help me to progress and explain me how to do backup via USB to word converter or perhaps I miss Something in the software backup procedure. Perhaps it is posible to do that via Windows.
I will appreciate your help and sorry again for my English
******************
Many thanks in advance.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: polo4041 on April 25, 2017, 03:35:51 pm

Hi, find the problem, it was due to the USB flash drive it work perfectly for the official FW update, but not for backup, I change the USB STICK ,copy the dso5kp_backuptool. up to it an then the backup was fine, but the size of the files is very little in comparison with the same show on the thread, I will appreciate your comment about that.
Now I will try to get to 200MHZ hack, but the link:
use the tool from Peter http://peter.dreisiebner.at/dso-usb-tool/ (http://peter.dreisiebner.at/dso-usb-tool/) to get virtual shell is no longer available.
Can someone advise me where I can find that piece of software or send it to me.

My best thanks to tin head and all the contributors for that piece of information;
Many thanks in advance

 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: polo4041 on April 26, 2017, 04:14:23 pm
Hi, again as explained before, my knowledge in Linux is very basic, and as I have no frequency meter and for the moment not USB to uart converter, I have chosen the solution to hack the scope by using " DSO-BW-Changer" solution witch seem to be working, but I have no proof that the right files illness have been modified, and as in this new model P series the SEC/DIV 2 ns is still implemented, how can I verify that the mod has been done correctly.
Again, many thanks to all of you for your contribution to help the poor beginner.
Regards to all
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Ringmodulator on May 05, 2017, 11:49:44 am
Tinheads 200MHz Input Hardware Modification

I am in the process of performing the hardware modifications suggested by Tinhead.

The schematic for the HW 1007 execution shows a resistor maked Rxx 2.2k which should be added.

I dont find any mention of this resistor in the descriptions for this modification.

Can anyone supply some info on this?

Regards
Chris
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on May 05, 2017, 05:16:12 pm
Tinheads 200MHz Input Hardware Modification
Did you see this? https://www.eevblog.com/forum/testgear/hantek-ds5000-series-300mhz-input-stage-mod/msg1201675/#msg1201675 (https://www.eevblog.com/forum/testgear/hantek-ds5000-series-300mhz-input-stage-mod/msg1201675/#msg1201675)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Ringmodulator on May 05, 2017, 07:36:45 pm
Yes, I saw this and did go through your PDF. Great contribition!

I have all the parts for the Tinhead mod already since 4 years and got my courage together to perform this mod.

Your mod is more complex and my rational was to leave out the benefit of the increased bandwidt above 200Mhz in respect to the 1G samplingfrequency.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on May 05, 2017, 09:23:34 pm
Yes, I saw this and did go through your PDF. Great contribition!

I have all the parts for the Tinhead mod already since 4 years and got my courage together to perform this mod.

Your mod is more complex and my rational was to leave out the benefit of the increased bandwidt above 200Mhz in respect to the 1G samplingfrequency.
thanks! And yes, truly right... But my mod does not only increase the bandwidth, but also removes ringing artifacts. That was my primary goal, the bandwidth came along with it.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: aandrew on May 07, 2017, 06:38:03 pm
I was looking at this mod for my MSO5074FG; the input circuit looks very similar but the analog switch is only rated 70MHz. I was sure I'd found a pin compatible part (I think it was the same part, just a different vendor) but now can't for the life of me find the part again!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Ringmodulator on May 14, 2017, 11:20:26 am
Hi,

having the dso on my desk, the resulting viewing angle leads to a far from optimal picture on the screen.
It is more suitable to place ithe dso up on a shelve.

With the tool fom Tinhead, it is possible to rotate the content of the display 180°
See
https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg467313/#msg467313 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg467313/#msg467313)

I have tried this on my HW1007 unit and this works as intended.

It is then possible to rotate LCD also 180° inside the case and this would give a far better display, when you have the scope on the desk., also when you put it up on eye level.

Just turn the scope upside down and check for yourself.

The two internal ribbon cables are probably long enough, to be twisted to match the connector.

Has anyone tried this yet?

(I have still not managed to rotate the bootlogo)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Ringmodulator on May 14, 2017, 11:36:06 am
Hi,

I have been annoyed by the behaviour of the V0 rotary encoder.
After choosing an item in the measure menu, the position often jumps one position while pressing the knob to confirm.

I have exchanged this encoder for a 24 step dented one and this solved it completely.

I have used a Bourns Mechanical Encoder - PEC12-4220F-S0024
(2pcs 5 bucks delivered via ebay)

This fits as an exact replacement.

Tip: It may be hard to remove the knobs for disassebly. Dont use too much force.
I warmed them with a hairdryer and it went much easier.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: aandrew on May 14, 2017, 02:59:48 pm
Wow thanks, Ringmodulator! It's a mod I never knew I wanted. :-)

This little scope is actually quite nice (I have the 5074FG), it's a shame the UI is closed source.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: iAleks on May 22, 2017, 10:41:15 pm
Hi guys.
I have... was an oscilloscope, it broke the firmware, I did a rollback, it did not help. Does anyone have a dump flash memory? Or can someone read it? Dump is stored on the 39VF3201. I used the programmer tl866 for reading.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Ringmodulator on May 26, 2017, 08:06:26 am
Hi
whch is the current firmwarerevision for hardware 10070?

I am using 2.06.3(140211.0)
There are other ones like dso5kb_func_dso5202b20140610.up

Even if I unpack it, I canot find a clue about the hardwarerevision, of if this is for a 2,06.3 system.

Does anyone know more?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: frenzel.92@wp.pl on June 15, 2017, 10:04:37 am
Hello everyone, I have a Hantek DSO1062B problem.
symptoms:
No more than 5V on the screen.
Below 5V I see only the upper part of the signal waveform or it is stretched to the whole screen.
No zero lines on the screen with detachable probes.
Self calibration, stops with 32 step error 0x502.
For both cannons the same symptoms.

Hot to do AD9288. After soldering resistors for LMH6552 (RA01, RA02) AD9288 does not heat up. And there is a zero signal line on the screen.

Voltage on systems tested.
DAC OUT (DAC8551) -> VPP 0.800V is ok?

With disconnected probes:
OFFSET1 -> -1.2V
OFFSET2 -> 2.5V
OFFSET3 -> 1,6V
Is it ok?

Tp501 -> 4,096V is ok.

For OP2-C TLV274C -> 2,5V.

Please advice, and voltage values at control points and offset.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: fscsi81 on June 18, 2017, 08:28:23 pm
Hello All!

Please help...

I have Hantek DSO 1062B  (Handheld Oscilloscope):

sw ver: 2.01.1(120909.0)
hw.ver: 0x555583e8
sn: DSO00503110
upgrade log: 0

Please help how to convert Hantek DSO1062b from 60MHz to 200Mhz
Please write step by step.

Sorry for my bad English...


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ksjkm on June 24, 2017, 05:51:42 am
Hi, I recently aquired a Hantek DSO5102P and have been attempting to change the baandwidth to 200MHz.  I can connect via a serial adaptor and get data from the DSO (see attachment). It seems to have an extra ine at the bottom and I can't send any list commands etc.  Can anyone shed any light on what might be happening?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: frenzel.92@wp.pl on June 26, 2017, 05:18:07 pm
I add a video with symptoms of malfunction, and logs, to the fault described above.

Please advice the repair

https://www.youtube.com/watch?v=5JRmlAXg5VM (https://www.youtube.com/watch?v=5JRmlAXg5VM)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: homeboy on June 30, 2017, 04:05:59 am
I bought new oscilloscope model 5102P, I followed instruction to upgrade to 200MHz Bandwidth, however, I couldn't change boot up logo. Then I tried to upgrade LAN ... so far I can send ping command from my PC to DSO, but I still can't telnet to DSO. Wish all of Prof. give me instruction.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Stevie1966 on June 30, 2017, 05:36:44 am
This 4 channel oscilloscope cost is USD 300? how about it? :horse:


http://www.ebay.com/itm/Hantek-DSO4084B-Bench-Type-Oscilloscope-4CH-80MHz-bandwidth-1GS-s-sample-rate-/292150310908?hash=item440583f7fc:g:U4AAAOSwrfVZQPoS (http://www.ebay.com/itm/Hantek-DSO4084B-Bench-Type-Oscilloscope-4CH-80MHz-bandwidth-1GS-s-sample-rate-/292150310908?hash=item440583f7fc:g:U4AAAOSwrfVZQPoS)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: egonotto on June 30, 2017, 08:13:50 am
Hallo,


"
Record Length   Maximum 64K samples per single-channel;
Maximum 32K  samples per dual-channel (4K, 32K optional)
"
That is very little memory.

Best regards
egonotto
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Finderbinder on July 25, 2017, 02:51:32 pm
Hello,
I have a similar but not mentioned handheld model Protek 1006 (60MHz). Wondering if any bandwidth hack procedure in this forum would be compatible with my model?

There are some info off PCB:
Handle-DSO-1060
Version: 2.07

DSO1060
Rev.2.07
2009/12

From device menu:
Serial No.: DSO00029**
Firmware Version: 1.73
Hardware Version: 7.6.45.0.0

Or should I replace original firmware with other brand's firmware prior to hack?
Title: Re: Hantek - DSO 4000 , 5000 time-base???
Post by: Borko on August 09, 2017, 05:40:24 pm

Hello,
I just bought a Hantek DSO 4072c and saw a video in youtuene that the time-base is 2 x 8 instead ofa  standard 1x5. I couldn t do any manual measure of the voltage do to "a square vertically doesn t correspond to 1 v... I m a musician and use it only for low analog signals from the ouutput of my modular synths. Can anybody explain me how in the case of the series Hantek 4000 and 5000 the manual calculation  of the voltage (vertical position) works out, please? Thank you
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mrtin_16 on August 19, 2017, 12:51:00 am
Does anybody else can`t use the onedrive of tinhead? I got a error on the link. With the MSO5054FG one can dual boot to use it as two channel generator or the only hack is the 200mhz bw?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: derf123 on September 02, 2017, 07:16:20 pm
Hello all, I have read (well scanned) all 117 pages and was all ready to do the 200mhz hack to my new DSO5072P like I had previously done to my old 5072P some years ago. Then I turned the sec/div knob, and it went down to 2ns. So, is it already at 200mhz but without the hardware mods? Anyone know what the latest HW mods should be? And, do I still need to the name change thing? sw ver: 3.40.0, hw version: 1010; S/N T1G/135xxxxxx  Best regards...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: lanternman on September 05, 2017, 10:17:08 am
Hello,

last week I bought my first DSO. It is a Hantek DSO5102P. As I read the first page of this thread the DSO should reach 2.00 ns after hacking to DSO5202. But my DSO5102 reached the 2.00 ns *before* hacking.
Now I have renamed dst5102b to dst5202b. The DSO rebooted four times. After that in menu "System Information" it shows "DSO5102P furthermore.

Maybe it is the same question which derf123 asked. Could any expert say wether this behaviour is normal? What is the best way to check the bandwidth?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: pedroX on September 05, 2017, 12:51:40 pm
I recently bought 4072C and I can set 2ns without any hacking. Maybe Hantek stopped limiting the timebase, because everyone who want can "hack" it.

The 4000 series issue is low buffer - max 40k. I read the posts on page 95 and i don't understand enough which file i have to patch. License information are stored in EEPROM (of course, there is no disk), but where? The buffer size is license issue only or there is not enough memory? Has someone known it?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on September 06, 2017, 10:19:45 am
Hello all, I have read (well scanned) all 117 pages and was all ready to do the 200mhz hack to my new DSO5072P like I had previously done to my old 5072P some years ago. Then I turned the sec/div knob, and it went down to 2ns. So, is it already at 200mhz but without the hardware mods? Anyone know what the latest HW mods should be? And, do I still need to the name change thing? sw ver: 3.40.0, hw version: 1010; S/N T1G/135xxxxxx  Best regards...
Did you catch this link while scanning? https://www.eevblog.com/forum/testgear/hantek-ds5000-series-300mhz-input-stage-mod/ (https://www.eevblog.com/forum/testgear/hantek-ds5000-series-300mhz-input-stage-mod/)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: LDTVN on September 18, 2017, 08:07:29 pm
I managed to repair the oscilloscope. Replaced NAND and RAM, then flash via jtag. Everything works fine.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Taviman on September 29, 2017, 06:14:40 am
I just purchased the DSO4072C with 2 channels and function generator. I am quite pleased with it, nice large screen and all. It goes down to 2ns out of the box, boots fast and responds reasonably well.
Function gen is a nice addition for a 270 Eur scope, especially that I didn't have one. I can generate FM, AM, and square output is reasonably square up to 5MHz. Rise time is arr. 11ns, very nice and clean. 250Msa/s is not bad at all.

Here are some screenshots
(https://lh3.googleusercontent.com/AdbZKz40dkQ6yEw2_VDgqdTd5triCdKO0JfBmkjL8X3EaSAguUJ_Kr0TYBSbFC05_dLBSHpCIJ5SRhqMj7naC9_A6Ckbwuvo8-5fErXL_kTAaLO0ZPyEyjnixIqeo8XjvMwN7KZzy7nHZ55giC6r7VwwHwvc7blPFBohqOok1KGXQmi4nXeiUoAcZsGC3GKyD9F1CuXugly9TpO-EYr8M5RmZEY6SMGoCyQnW_s2OZTU3hwuxocN0OPDw9J7pO9ArjnJPXmRQ9brh6us--4EB2OM44BUEGZen68f6tQeUbR5zVJQnqzte0cpKWDxxmlWKYmgParnB7QdFKLEy3biX1R7WpNxZ77WoRqlMbimbAIK9ksN_43f4dgKWKyjvRsnzkG7DBUuf7jgbNTR4cPguR1bc-PcWArVteAZxRdksmUn6P3MkvlJ7MgX_LmOCsKFsY2VgmXCOfkuxlenqtp0iiwpsTZvo2kDf0lB8CnnWhnHTTEFbh44dX4101GaCSuG0Sbfx1szGbJ2FaNzaAT5CWez98Uhtb_z7w0tWs2OPqnoCt2USmKvbRxd8QtuUzI4GDriwPK_R6Dg3_dn20xNp3QQ8g--Eb90o13VgVsuas75vmlImNzMhMb-JlmPvu4XFeSWWyYfVNzvHo7EKe17KHBqF3Poz-HZnI0r=w800-h480-no)

(https://lh3.googleusercontent.com/WHsnP4oqB2z4LdPkjXPXHLEEiHAuMXqEcy1oc9n7N3_E9vu1Xb19FSDAGdW-FNndk5UnNcKL9OHEmWuCLBKeiHSdz6GGlBu3v3kOZ1u9mkWUL1b53MPcfI2XfMcNvFOO66FTlLFp6BoeS33ejP6NPq6zn1lE-xlHSVmb-7L2tE9WQbHl-3MPk02lN_GWRsAUpsOTSyoL3DSweWvAIPhiq-sYRg9i61Y0aPEKoR92y5_EmbpMm91RQBrC-ZkSDrSZbn48qezkJtLwg2hXhwXuuj6e3d3XB5lM9Y_ZVmMTx09dktOvJUwjW469p-sU30l5I8ZZNMulfsvhhSpU97ry9NTo-J9qijbZEIWwZyRN3eulK3X0uYx9uxhS6JxbP6xxhZp2yWIW92MsV_PWI7Q8LbneU3OEZV4QfN_2AqoIdQUVm2CAA6BF9PNzPouc6Eo9H3qtkKuyKefDSZs7fLcRbavecDELEYPVthVvBWz7AGdcZMQc7xMKrQ6J1iAKu5c0GAwaIcIropdztR--WiR74kVfgkyux7eFmb_9w8Yl80YLcyukOGnlfGZW9wrTf0fJhUelnXJT1V6TidTsg8jFW1S4wZDnSnqXOtf2u3dXOBI=w800-h480-no)


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Taviman on September 29, 2017, 12:18:42 pm
I managed to repair the oscilloscope. Replaced NAND and RAM, then flash via jtag. Everything works fine.

Any chance we can modify the useable RAM by hardware modification? I realize this probably means the firmware has to be recompiled, just wondering...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: n4axe on October 17, 2017, 03:37:48 am
I recently purchased a hantek dso5072p 70mhz scope. Picked up the required items to gain access to uart and a usb drive. Followed the directions exactly and no matter what I do or how many times I do it, or reboot it after doing it, or chmod ing the files so the scope can not change them it appears as a dso5072p in the menu every single time. I decided to update to latest firmware from hantek and rinse and repeat to same results. If it matters I've been able to turn the knob to 2ns even the day I pulled it out of the box.

Another thing I caught in the console and I'm not sure if it is relevant is:

[root@Hantek ~]# reboot
[root@Hantek ~]# umount: tmpfs busy - remounted read-only
umount: tmpfs busy - remounted read-only
umount: can't remount ubi0:rootfs read-only
umount: can't remount rootfs read-only
The system is going down NOW!
watchdog: S3C2410 Watchdog: watchdog did not stop!
Sent SIGTERM to all processes
Sent SIGKILL to all processes
Requesting system reboot
?OM*** Warning - bad CRC, using default environment


##### EmbedSky BIOS for SKY2416/TQ2416 #####
This Board: SDRAM is 64MB; Press Space key to Download Mode.!

NAND read: device 0 offset 0x380000, size 0x800
 2048 bytes read: OK
**************************normal start*******************************

NAND erase: device 0 offset 0x380000, size 0x80000
Erasing at 0x3e0000 -- 100% complete.
OK

NAND write: device 0 offset 0x380000, size 0x800
Writing data at 0x380800 -- 100% complete.
 2048 bytes written: OK

NAND read: device 0 offset 0x380000, size 0x800
 2048 bytes read: OK
Saving Environment to NAND...
Erasing Nand...
Warning: Erase size 0x00004000 smaller than one erase block 0x00020000
         Erasing 0x00020000 instead
Erasing at 0x80000 -- 100% complete.
Writing to Nand... done

NAND read: device 0 offset 0x400000, size 0x400000
 4194304 bytes read: OK
Boot with zImage

Starting kernel ...


**********************
Another thing worth mentioning. I've never had a bootscreen with my model number. I get a square qr code with hantek typed out, and then the second screen  hantek your testing solution then im in the scope running

sw version 3.40.0 (170714.0)
serial ended in 8069
lcd.front.ts 3.3.0

If anyone could help me out that would be great.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jcrubin on October 18, 2017, 11:50:15 am
Ive put together a video showing subsequent upgrades of the 5000p series scope (5072p) following the 200mhz upgrade after several requests.  I guess there was some confusion as some folks reached for the firmware of their respective model number from the website.  Here is the Step by Step video covering this in the correct fashion.  The firmware used is the current one as of the date of this posting.

https://www.youtube.com/watch?v=lalZhEBQVxM (https://www.youtube.com/watch?v=lalZhEBQVxM)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: foxter-x on November 05, 2017, 04:49:51 pm
Hi. I have a oscilloscope Hantek DSO-5102B. It died NAND-flash. Please share the dump to the oscilloscope. S/n > 15000.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Finderbinder on December 16, 2017, 06:41:11 pm
Any suggestions regarding my case?



Hello,
I have a similar but not mentioned handheld model Protek 1006 (60MHz). Wondering if any bandwidth hack procedure in this forum would be compatible with my model?

There are some info off PCB:
Handle-DSO-1060
Version: 2.07

DSO1060
Rev.2.07
2009/12

From device menu:
Serial No.: DSO00029**
Firmware Version: 1.73
Hardware Version: 7.6.45.0.0

Or should I replace original firmware with other brand's firmware prior to hack?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: LDTVN on December 19, 2017, 11:05:04 am
Any chance we can modify the useable RAM by hardware modification? I realize this probably means the firmware has to be recompiled, just wondering...
NAND flash can be replaced by a larger one without recompiling.
And to the account of the RAM, I can not say anything.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: GilDev on December 26, 2017, 12:02:11 pm
Hello!

I'd really like to get an Hantek oscilloscope of the DSO4xx4C series (4 channel with function generator). They start at 312?€ on AliExpress for the 80 MHz model (https://fr.aliexpress.com/item/Hantek-DSO4084C-DSO4104C-DSO4204C-DSO4254C-Digital-Oscilloscope-Portable-80-250-MHz-4-Channels-1GSa-s-Record/32826583256.html (https://fr.aliexpress.com/item/Hantek-DSO4084C-DSO4104C-DSO4204C-DSO4254C-Digital-Oscilloscope-Portable-80-250-MHz-4-Channels-1GSa-s-Record/32826583256.html)) and they seem to be quite nice.

Does someone please knows if the DSO4084C (80 MHz) and DSO4104C (100 MHz) model can be upgraded to 200 MHz using the hack described here? By renaming a file?

Thanks a lot!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Fireflaker on December 28, 2017, 04:32:40 pm
Questions:
1: Does DSO4072C have all functionalities DSO5072P have, plus a function generator?
2: Can DSO4072C be hacked to get 200Mhz bandwidth?
3: Are there any reverse engineering data for DSO4072C/DSO4102C/DSO4202C?

I am planning to buy a digital scope under $280 and DSO4072C & DSO5072P seem to be good choices. Which one should I get or are there any recommendations plz? Is there a better alternative with more memory?

Any help is highly appreciated.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Fireflaker on January 04, 2018, 05:02:15 am
I read a post on the blog claiming that the DSO4202C (200Mhz&function gen) firmware can be updated directly into the DSO4102C (100Mhz&function gen) model. However, no bandwidth difference was observed. Does it mean it is unhackable or would it be hacked if I try to rename the file using serial port? How likely is it going to be so hard to hack and I should just get a Rigol DS1054Z?

Happy new year!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: JohnBee on January 17, 2018, 01:07:09 am

Quote
I recently purchased a hantek dso5072p 70mhz scope. Picked up the required items to gain access to uart and a usb drive. Followed the directions exactly and no matter what I do or how many times I do it, or reboot it after doing it, or chmod ing the files so the scope can not change them it appears as a dso5072p in the menu every single time. I decided to update to latest firmware from hantek and rinse and repeat to same results. If it matters I've been able to turn the knob to 2ns even the day I pulled it out of the box.
**********************
Another thing worth mentioning. I've never had a bootscreen with my model number. I get a square qr code with hantek typed out, and then the second screen  hantek your testing solution then im in the scope running

sw version 3.40.0 (170714.0)
serial ended in 8069
lcd.front.ts 3.3.0

If anyone could help me out that would be great.

I have the same unit - a very recent purchase
This may be premature, but, I wouldn't overlook the possibility that Hantek is not longer supporting these hacks

PS. mine is also showing 2ns out of the box, same SW version and bootup screen


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: hasjon on January 17, 2018, 10:05:34 am
Hi All

I have successfully made serial connection with my Hantek DSO5102P,  via USB to serial and the direct USB connection.  Attempted to reflash.  However after the reflash, the oscilloscope hangs after the reboot.  Upon power up, the Hantek logo displays and after that nothing happens.

Please see the attached screens shots from 'EmbedSkyDownLoadTool_V1.0'' and the terminal Running Information after transferring the file 'wh5   root_dso5102p3.ubi'.

I believe I may have the wrong .ubi file.  I may have a partition error and thus would also require a working backup from another DSO5102P.  Please can someone provide a backup and help to convert to the correct .ubi file so that I can attempt a successful firmware reflash.

Thank you
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: JohnBee on January 18, 2018, 07:36:41 pm
>
Quote

Quote from: hasjon on Yesterday at 08:05:34 AM (https://www.eevblog.com/forum/index.php?topic=1571.msg1402592#msg1402592)
Hi All

I have successfully made serial connection with my Hantek DSO5102P,  via USB to serial and the direct USB connection.  Attempted to reflash.  However after the reflash, the oscilloscope hangs after the reboot.  Upon power up, the Hantek logo displays and after that nothing happens.

Please see the attached screens shots from 'EmbedSkyDownLoadTool_V1.0'' and the terminal Running Information after transferring the file 'wh5   root_dso5102p3.ubi'.

I believe I may have the wrong .ubi file.  I may have a partition error and thus would also require a working backup from another DSO5102P.  Please can someone provide a backup and help to convert to the correct .ubi file so that I can attempt a successful firmware reflash.

Thank you

No more opening and soldering connections to hack would be an incredible feat imo!


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Terry01 on January 18, 2018, 08:26:43 pm
If your machine is showing the 2ns out the box the 200MHz upgrade is already done. I got my 5102p from Amazon around a month ago and it was already done from the factory. I have seen quite a few others the same.

Enjoy!  :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: JohnBee on January 19, 2018, 08:36:45 am
>
Quote
Quote from: Terry01 on Yesterday at 06:26:43 PM (https://www.eevblog.com/forum/index.php?topic=1571.msg1403885#msg1403885)
If your machine is showing the 2ns out the box the 200MHz upgrade is already done. I got my 5102p from Amazon around a month ago and it was already done from the factory. I have seen quite a few others the same.

Enjoy!  :)
Very interesting.
I don't know if this matters or not, but after checking the FW, it would appear that it is using the 5072P according to the Hantek website.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Terry01 on January 19, 2018, 11:03:38 am
Check here 

https://youtu.be/JzfYSBwshyo

I don't know enough to know how it is worked out but the guys here do. It seems that Hantek have been doing the upgrade straight from the factory for a while. There are quite a few videos showing how to do it manually too so I think it's quite easy.   :-+
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 25, 2018, 06:05:04 pm
Questions:
1: Does DSO4072C have all functionalities DSO5072P have, plus a function generator?
2: Can DSO4072C be hacked to get 200Mhz bandwidth?
3: Are there any reverse engineering data for DSO4072C/DSO4102C/DSO4202C?

the DSO4xxxC series is completely different, sure there is a chance that it can be hacked as well, but i do now own one nor ever tested it.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Jiggerypook on March 08, 2018, 04:52:43 am
Hello everyone, I am new here. This is my first post.


First, I have to say that this is my favorite electronics forum. I'm amazed at the amount of information available here. And the knowledge driving it. I've just spent three nights reading every post in 118 pages about the Hantek - Tekway DSO hack. Some stuff I understand but my days were on the 6502 chip,1984, so not so much. Maybe 1%. lol! But you guys rock!!

Anyhow, to the point. I know that someone has hacked the Hantek 6022 BE  20Mhz PC DSO and written a new GUI for it. My question is, has anyone attempted to do the same for the 6052 BE 50Mhz PC DSO? I haven't been able to find any information on it, just the 6022. The GUI and hack are not compatible with the 6052 (unfortunately), because the factory GUI is horrible.
1. Is it possible to access the FW with a JATG like the ones in this post?
2. If I  post photos of it's internal workings would that be enough to determine whether it is even possible to overclock?
3. And would anyone else on this forum have such a scope and a desire to modify the GUI to make it more user friendly?

It's way over my head (BASIC don't cut it) and I don't have a JTAG but will get one if there is a need.  (Too old to learn C++) It was hard enough to try linux' Red hat, then Ubuntu. Bahh. Stuck with Windblows. Would need assistance with Linux command line if it was required, and I could re install Ubuntu. (I could do the work with guidance) if there was a taker.

P.S.   I hope that it's ok that I posted this here. The thread didn't look dead, but maybe the topic is?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ruba777 on March 17, 2018, 02:12:32 pm
Hi everyone! Sorry for bad english, in advance!
Like a many people at last pages of this topic, i bought DSO5102p with precense 2ns/div and HW 1010. When i attempt to reduce frequency range to 200 MHz nothing happend out!
Here my act sequence:

Connect UART 115200 8n1 and open terminal
mv dst1102b dst1202b
vi logotype, in it dst1102b change to dst1202b, wq - if after that reboot files dont changes but oscilloscope name remains the same

vi logotype.dis, in it hantek_DSO5102P change to hantek_DSO5202P, wq
reboot

All modified files after reboot coming back to  its initial condition. In system information nothing changes, of course.

At youtube video dude killed /dso/app/dsod processes, i try - nothing change.

When i flash firmware 20140208 occurs bootloop, after recovery firmware is 2017... so the 2014... fw not support hw1010 i think...

My question: is somewhere 200Mhz hack for hv1010 and  Is there any reason for it?


Any ideas?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: alpuy on April 18, 2018, 11:35:14 am
Thank you very much for your quick reply! I guess I will save 100 pounds :) By the way is there any advantage of buying the 200mhz version apart of keeping your warranty (which anyway I guess is useless since I am buying the scope from China) ?

The 60MHz and 100MHz models come with 150MHz probes. I expect the 200MHz models will come with 200MHz probes.

Apart from that ...

all current 60 and 100MHz models are using not that great (for hacking over 100MHz bw) combination of resistors in input stage.
When hacked to 200MHz, there is up to +5dB overshoot at 150MHz (depends on probe type and termination kind)

I've made tons of measurments on current models (and where to modify):

http://www.mikrocontroller.net/attachment/173049/mod_input_circuit.pdf (http://www.mikrocontroller.net/attachment/173049/mod_input_circuit.pdf)

of my old Tekway DST1202B
http://www.mikrocontroller.net/topic/249628?page=8#3092292 (http://www.mikrocontroller.net/topic/249628?page=8#3092292)

of how bad the frequency response is on current60/100MHz DSO hacked to 200MHz
http://www.mikrocontroller.net/topic/249628?page=8#3098757 (http://www.mikrocontroller.net/topic/249628?page=8#3098757)

and how it can be improved to near perfect (don't forget, this is flat-response DSO, this overshoot need to be there)
http://www.mikrocontroller.net/topic/249628?page=8#3093970 (http://www.mikrocontroller.net/topic/249628?page=8#3093970)

Short said, by replacing the 4x22R resistor arrays in inputt stage the frequency response is already better (or on what it was on original 200MHZ DSO).

This can be however even more improved :
RX1_1 = RX1_2 = RX1_3 = RX1_4 = change all to 270R 0.1% (digikey 4 x P270DBCT-ND)
RX2_1 = RX2_2 = RX2_3 = RX2_4 = change all to 270R 0.1% (digikey 4 x P270DBCT-ND)
RA01_1 = RA01_2 = change all to 4 x 33R 1% (digikey 2 x CRA6E833.0ACT-ND)
RA02_1 = RA02_2 = change all to 4 x 33R 1% (digikey 2 x CRA6E833.0ACT-ND)
R01_25, R02_25 = change to 49R9 0.1% (digikey 2 x P49.9DBCT-ND)
R01_27, R02_27 = change to 120R 0.1% (digikey 2 x A103149CT-ND)
R01_29, R02_29 = change to 1R (what so ever 1206 resistors)

As the original probes are anyway not so good (oh well, they good up to 100MHz, for sure) it might change them to different models as well,
in my measurments you can see the original probe results (PP-150), some better chinese probes from Texas (TX250 -simply ebay "texas probes")
and more expensive 500MHz passive probes from Testec (HF-512).

Is the frontend modification needed for the DSO5072P model with HW 1010? I saw in the main page that models with SN < 15000 need the modification but i dont know where to get the SN. Does this apply to this model of Hantek?

Thanks
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kris_gor on April 24, 2018, 08:58:55 am
Hello.

I have updated the DSO1062D oscilloscope software (http://voltcraftdownload.info/UpdateFiles/file/180312231346419648501.zip (http://voltcraftdownload.info/UpdateFiles/file/180312231346419648501.zip)), but it has failed. How do I fix my oscilloscope? I have access to the Linux console.


If I try to run the dso.exe file, I receive a message saying that there is no libgstream-1.0.so library.

1. Where can I find a flash image?
2. Which script corresponds to which upgrade?
3. I can try to upgrade it manually again. The flash drive is mounted correctly.

Krzysztof
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kwalter on April 25, 2018, 04:10:08 pm
Hello,
need help!

My DSO-1062D gave up its ghost, as I could find out
the NAND device K9F1G08U0D-SCB0 was defective.

I could exchange this, but now I face the problem that I have
somehow the firmware must get into the NAND pure.

Have an OLIMEX ARM-USB-OCD-H JTAG Flasher and OpenOCD as
JTAG software.

Can anyone give me a guide to flashing the K9F1G08U0D-SCB0 and the
to to give necessary firmware?

Must flash about JTAG, since I have no Bootloader in the new K9F1G08U0D-SCB0
and thus transferred the firmware via the serial Interface is not working!

Kind regards
kwalter
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: schufti on April 25, 2018, 08:48:12 pm
Hi tinhead,
good to see you back again ... a while ago you posted
for older hardware, there is still hidden direkt link

http://www.hantek.com/Product/DSO5000/DSO5202B_Firmware.zip (http://www.hantek.com/Product/DSO5000/DSO5202B_Firmware.zip)

where for new hardware, and that link is on Hantek's webpage, is

http://www.hantek.com/Product/DSO5000/DSO5202B_Firmware2.zip (http://www.hantek.com/Product/DSO5000/DSO5202B_Firmware2.zip)

some question:
are the links correct? Ist the first "for old hw" valid for e.g. Voltcraft DSO-3062C?
because content of both is file starting dso5kb_ ... only different datecode (shouldnt it be dso1kb_ for old hw?).

Also in https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg1047681/#msg1047681 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg1047681/#msg1047681)
someone mentioned http://www.hantek.ru/products/dso5202B/dst1kb_2.06.3_15202b_fact(140211.0).up (http://www.hantek.ru/products/dso5202B/dst1kb_2.06.3_15202b_fact(140211.0).up) firmware, do you have some info about it? From datecode it looks like the most recent lurking around.

apreciating any answer,
schufti

Title: Re: Hantek - Tekway - DSO hack (bricked Voltcraft DSO-1062D)
Post by: HenningS on April 29, 2018, 08:28:42 am
Hello DSO experts,

sorry to "misuse" this running thread for my own request... @MOD: In case it doesnt fit here, please feel free to move it to a better location...
 
Some days ago I bought a used "bricked" Voltcraft DSO-1062D, with the intention to get it up and running again... Hardware looks pretty good, the S/N is "T1G 012 0172xx".

Error description:
The Linux system boots and displays the bootlogo on the TFT, but the DSO firmware doesn't start. The front panel is w/o key feedback, so the standard firmware upgrade method via *.UP file on the USB stick doesn't work.

I can connect PuTTY to the serial console and operate Linux. The serial console tells this version info:
  Linux version 3.2.35 (root@cjh-ubuntu) (gcc version 4.3.3
   (Sourcery G++ Lite 2009q1-176) ) #31 PREEMPT Tue Jul 16 16:02:21 CST 2013
  CPU: ARM926EJ-S [41069265] revision 5 (ARMv5TEJ), cr=00053177
  Machine: SMDK2416

I also can enter the bootloader (hitting SPC during startup), telling me:
  #####    Boot for SKY2416/TQ2416 Main Menu      #####
  #####     EmbedSky USB download mode     #####

The system boot stops with these error messages:
  /dso/app/dsod: /lib/libc.so.6: version `GLIBC_2.1.3' not found (required by /lib/libiconv.so.2)
  /dso/app/dsod: /lib/libc.so.6: version `GLIBC_2.1' not found (required by /lib/libiconv.so.2)
  /dso/app/dsod: /lib/libc.so.6: version `GLIBC_2.0' not found (required by /lib/libiconv.so.2)

What I tried already to restore the DSO:
Deleting /param/save/run1kb*
--> No change

The front USB mounts storage devices as /mnt/udisk. So I manually unPGP-unZIP-unTAR-unTARed the latest HANTEK "dso1kb_*.up" firmware and tried to restore the system step-by-step via console (according to the "update" script included in the decompressed .UP file).
--> No change

Assuming that "repair" actions by the previous owner mixed up the library files, I copied several versions of the library files included in *.UP files into the /lib folder of the DSO.
--> No change


So I assume, the content of standard "firmware upgrade" files is not sufficient to restore my DSO, possibly even the installed linux is not consistent anymore to operate DSO.EXE.

Could any expert help me please to find suitable files to restore my DSO?
  a) linux image and
  b) "complete DSO firmware" file

As I understand, with the included bootloader these could be flashed directly into the NAND flash then...
For further info, I attach the console bootlog and some system info as separate text files.

Thanks in advance for any hint!

Kind regards,
  Henning
 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: llg on April 29, 2018, 10:11:24 am
Hi kwalter

Have an OLIMEX ARM-USB-OCD-H JTAG Flasher and OpenOCD as
JTAG software.

Can anyone give me a guide to flashing the K9F1G08U0D-SCB0 and the
to to give necessary firmware?

I can provide some info about writing with openocd.

Now I assume you already know how to connect your jtag interface to your dso and have at least
some familiarity with openocd.
If not, see post #2877 for a pinout, there are other earlier posts in the thread as well.
Below is the openocd config I used:

Code: [Select]
set CHIPNAME s3c2416
set CPUTAPID 0x07926f0f

source [find target/samsung_s3c2416.cfg]

adapter_khz 1000

adapter_nsrst_delay 100
jtag_ntrst_delay 100
reset_config trst_and_srst

scan_chain

nand device $_CHIPNAME.nand s3c2412 $_TARGETNAME

I have a dso5202p I think that's hw1.0 it has s3c2416 CPU, I do not know exactly what CPU
is on DSO-1062D, but I think you can locate that info in this thread as well.
So be advised you will have to slightly update your openocd config, rest of the steps are similar.
I used a jlink interface to connect to jtag you have to substitute olimex settings (see interface/arm-jtag-ew.cfg in openocd homedir)

The steps to restore using openocd:

I call open ocd like this:

Code: [Select]
openocd -f interface/jlink.cfg -f smdk.cfg -c init -c halt
I force init/halt from command line as I wasn't sure cpu was properly halted by settings in the config file.

telnet openocd console and try to probe nand flash model:

Code: [Select]
nand probe 0
if everything went fine it should detect your model and size.

NAND 128MiB 3.3V 8-bit (Samsung)

Here's an output from my openocd console:

Quote
Open On-Chip Debugger 0.10.0
Licensed under GNU GPL v2
For bug reports, read
        http://openocd.org/doc/doxygen/bugs.html (http://openocd.org/doc/doxygen/bugs.html)
Info : auto-selecting first available session transport "jtag". To override use 'transport select <transport>'.
adapter speed: 1000 kHz
adapter_nsrst_delay: 100
jtag_ntrst_delay: 100
trst_and_srst separate srst_gates_jtag trst_push_pull srst_open_drain connect_deassert_srst
   TapName             Enabled  IdCode     Expected   IrLen IrCap IrMask
-- ------------------- -------- ---------- ---------- ----- ----- ------
 0 s3c2416.cpu            Y     0x00000000 0x07926f0f     4 0x01  0x0f
Info : No device selected, using first device.
Info : J-Link ARM V8 compiled May 27 2009 17:31:22
Info : Hardware version: 8.00
Info : VTarget = 2.154 V
Info : clock speed 1000 kHz
Info : JTAG tap: s3c2416.cpu tap/device found: 0x07926f0f (mfg: 0x787 (<unknown>), part: 0x7926, ver: 0x0)
Info : Embedded ICE version 6
Info : s3c2416.cpu: hardware has 2 breakpoint/watchpoint units
target halted in ARM state due to debug-request, current mode: Supervisor
cpsr: 0x800000d3 pc: 0xc3e06ba4
MMU: enabled, D-Cache: disabled, I-Cache: enabled
Info : accepting 'telnet' connection on tcp/4444
NAND flash device 'NAND 128MiB 3.3V 8-bit (Samsung)' found

You will need a uboot partition image made previously with nanddump. I initially couldn't find my own image,
so I used an bin uboot image from an archive tinhead posted here sometime ago containing hantek sources files which
among other things contained some compiled code as well and luckily it worked.

The zip file is: DSO5000P.zip and the file is DSO5000P/src/uboot-2009.11/u-boot.bin
In case you need this file I can provide it but I have no idea if it will work for your DSO version.


Now to burn image:

Code: [Select]
nand erase 0
this is important as I couldn't get anything working until I erased nand flash before writing operation.
You could try to erase only the first few blocks but you have to compute the exact values and depends on your nand chip geometry.

next enable raw access in order to skip OOB writting.

Code: [Select]
nand raw_access 0 enable
finally, write the actual file:

Code: [Select]
nand write 0 uboot.bin 0
depending on your interface speed this can take some time but it should be done in a reasonable amount of time (half an hour or so).

If everything went fine you can now connect your serial and have uboot menu output.
I believe you know the drill from this further.

One piece of advice I can give you - keep in mind you cannot transfer the root image via usb bulk transfer (dnw) if image size exceeds the size of DSO's RAM.
My dso has 64M my root image was about 70M or so.
You could try to shrink root image to the size of the available memory, but it could be pretty difficult (it's an ubifs)
what I've done instead: as I had sdcard socket installed and busybox, ubitools, nandtools cross built on the sd card,
I forced a custom built kernel to boot and load busybox directly from sdcard.
Then I copied root image to sdcard and wrote it via ubiformat, you could try to use nandtools (flasherase/nandwrite) but I got it misaligned each time and ubi rootfs badly corrupted.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kwalter on April 29, 2018, 12:19:44 pm
Hi llg,
Thanks for your answer, that has helped me a bit, the bootloader I have to run again.

Card Initialization failed.

##### EmbedSky BIOS for SKY2416/TQ2416 #####
This Board: SDRAM is 64MB; LCD display size is: 640 X 480
Press Space key to Download Mode.!
SD:File System init failed!
Start Linux ...

NAND read: device 0 offset 0x300000, size 0x400000
 4194304 bytes read: OK
Wrong Image Format for bootm command
ERROR: can't get kernel image!

#####    Boot for SKY2416/TQ2416 Main Menu      #####
#####     EmbedSky USB download mode     #####

1 Download u-boot or STEPLDR.nb1 or other bootloader to Nand Flash
2 Download Eboot (eboot.nb0) to Nand Flash
3 Download Linux Kernel (zImage.bin) to Nand Flash
4 Download LOGO Picture (logo.bin) to Nand  Flash
5 Download UBIFS image (root.ubi) to Nand Flash
6 Download YAFFS image (root.bin) to Nand Flash
7 Download Program to SDRAM and Run it
8 Boot the system
9 Format the Nand Flash
0 Set the boot parameters
a Download User Program
c Choice lcd type.
n Enter TFTP download mode menu
r Reboot u-boot
t Test Linux Image (zImage)
Enter your selection:

Which image should take to restore the device?

I have no SD Card socket on the Board, this is not equipped!
Could you please help me?


Kind regards
kwalter
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: llg on April 29, 2018, 12:40:58 pm
hey,

you need to restore kernel image (option 2) and root image (option 5) at least.

You need to connect to your DSO usb cable on the  back of the device and you'll need dnw download tool
(https://github.com/changbindu/dnw-linux)
I believe there is an earlier post in this thread somewhere that somewhat describes this procedure.
You'll need to compile a kernel module, load it, and run dnw tool to upload your images.
Keep in mind the RAM limitations I told you about a post ago.
Cheers!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kwalter on April 29, 2018, 02:06:01 pm
Hello llg,

Thanks again for the help.

Then I'll look for the description, the DNW tool I have!

Kind regards
kwalter
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: krisfromhell on June 21, 2018, 07:53:05 am
hi ;)

ist it possible to get the dump file for the "voltcraft dso 1062d". i need to restore it. it stays at the boot logo  |O
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Harvey17 on July 06, 2018, 07:28:36 pm
Just had a peek inside my DSO5102P and was pleasently surprised to see the SD Card holder already in place  :)

Unfortunately, I don't seem to be able to lift the cover up to try it  |O It slides back and forwards, but don't want to lift up, unless Hantak expect us to slide the card in? Do they make flexible micro-sd??




Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Harvey17 on July 06, 2018, 08:13:25 pm
A few questions:

I've just updated to the lastest firmware  - 3.40.0(180120.0) and notice a few issues/bugs/things:

1] There is still a small phase difference between the channels, but it seems improved from the video posted above, annoying all the same.

2] Using single seq. mode with timebase > 40ms works, but any attempt to scroll through the resulting capture makes the waveform vanish. Should this work like this?

3] The PSU is somewhat squeeky, not in a 'its gonna blow' way, just annoying. Has anyone attempted to quieten these?

4] Is it normal on a DSO for the scope to 'hold' the captured image when disconnecting a probe? e.g. when displaying probe check and disconnecting the probe, half the time the waveform stays on screen for a second or so. To me this seems odd.





Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Ringmodulator on July 09, 2018, 06:38:22 pm
Hi,

I am looking for a copy of the bootlogo files for a Voltcraft DSO-1202d.

They can be copied with the USB tool from this thread, so opening the scope and connecting to the uart is not neccesary.

Any help is appreciated.

Kind regards
Chris
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: fscsi81 on July 10, 2018, 10:03:28 pm
Pleas upload, link to DSO-USB-TOOL..
Thx..
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: SRRGEY42 on July 24, 2018, 05:06:04 pm
Hello! Can you please tell me why you need a slot for micro SD CARD? Thank you!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Ringmodulator on August 20, 2018, 07:09:03 pm
Pleas upload, link to DSO-USB-TOOL..
Thx..

Check the very first post in this thread from Tinhead.

On the bottom, the second link to his OneDrive is still working.

Under "Software", you will find the USB-Tool.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: freetz on September 09, 2018, 08:51:35 am
Hi everyone,

first of all a huge thank you to tinhead and all the others providing such valuable insights into this matter, I really learned a lot so far already!
I have also managed to solder a HC-05 Bluetooth Serial adapter to my MSO5102D scope and connecting to it works and I get to see the bootup messages. However, it stops at one point and stays there with no possibility to enter the shell, neither by hitting ENTER nor CTRL+C. These are the final lines:

Code: [Select]
dm9000 Ethernet Driver, V1.31
dm9000 dm9000: read wrong id 0x2b2a2928
dm9000 dm9000: read wrong id 0x2b2a2928
dm9000 dm9000: read wrong id 0x2b2a2928
dm9000 dm9000: read wrong id 0x2b2a2928
dm9000 dm9000: read wrong id 0x2b2a2928
dm9000 dm9000: read wrong id 0x2b2a2928                                         
dm9000 dm9000: read wrong id 0x2b2a2928                                         
dm9000 dm9000: read wrong id 0x2b2a2928                                         
dm9000 dm9000: wrong id: 0x2b2a2928                                             
dm9000 dm9000: not found (-19).                                                 
bkl tq2416-backlight initialized done...                                       
close beep now                                                                 
dso-buzzer s3c2416-beep initialized done...                                     
hub 1-0:1.0: Cannot enable port 2.  Maybe the USB cable is bad?                 
ifconfig: SIOCSIFADDR: No such device                                           
mkdir: can't create directory '/param': File exists                             
mkdir: can't create directory '/param/sav': File exists                         
open_serial_device:open serial success                                         
Langu_Init() <opt/language.c,220>:      read img languID=87                     
Langu_Init() <opt/language.c,226>:      set locale1=1                           
Langu_Init() <opt/language.c,235>:      set domain1=1                           
Langu_Init:Dso_GetLanguageID = 0                                               
hub 1-0:1.0: Cannot enable port 2.  Maybe the USB cable is bad?                 
hub 1-0:1.0: Cannot enable port 2.  Maybe the USB cable is bad?                 
hub 1-0:1.0: Cannot enable port 2.  Maybe the USB cable is bad?                 
hub 1-0:1.0: unable to enumerate USB device on port 2

Can anybody help me here?

Thanks a lot!

F.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: hardycious on September 11, 2018, 06:11:45 pm
Good job! Thanks.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: SRRGEY42 on October 03, 2018, 08:00:17 am
Hello! So no one answered why there is a slot on the motherboard of the oscilloscope Hantek dso 5102p? Thank you!
Title: already has 200MHz out of box?
Post by: pishta on October 28, 2018, 03:42:47 pm
Just purchased a DSO5102P, was looking to calibrate some old car audio CD changers. My device only had 7 bootcounts on it when I purchased it $100 used! Still has sheet on LCD....Well, the thing already goes down to 2ns (200MHz?) the test Hz indicator bounces around with no probes inserted and I saw it go as high as 102.3MHz with this system info:

Model     DSO5102P
sw ver   3.40.0(170630.0)
hw ver   1010xffff8108
serial     T 1G/138 008439
boot cnt 9
upgrade 0
LCD f ts 3.3.0





Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: aandrew on October 28, 2018, 10:32:25 pm
Does anyone have the HDL for the FPGA used in this scope or at least which FPGA pins are used for which function? That would go a long way in being able to replace the UI software on the scope and perhaps fix some of its issues (such as terrible triggering and lack of sync between the scope and LA parts)

I know there's a FriendlyARM board that can be used for SW development but the actual "scope side" stuff would be great to get at as well.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Crazy_Pete on October 28, 2018, 10:41:32 pm
Heheh that is not really a "conspiracy" theory because conspiracy means something illegal.    There is nothing illegal (at least in the USA) about not enforcing your rights.    (Otherwise they would legally be called "Obligations" :-) )

Thanks,

Crazy Pete
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: liuqi on October 29, 2018, 02:35:44 am
Please tell me where I can find detail information of this equipment, I didn't find it on website.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: gold oxide on December 27, 2018, 08:38:03 pm
Hi everyone,

I just revived a friend's Hantek DSO5072P that had stopped booting after only 3 hrs (!) of normal use. Turned out it had a corruped NAND flash. Bootloader was fine but it didn't even extract the Linux kernel any more.

Here are some things I had to research that might help others:

1. The 5000P series unlike earlier 5000 series can AFAIK not be flashed via USB. There is no supervivi bootloader available that runs on its newer SoC and the factory uboot bootloader can only flash what fits into the system's 64MB of RAM (the firmware image is 128MB). So your best bet is using JTAG.

2. If you don't have a complete firmware image from a 5000P series scope (not a 5000B or whatever other 5000 series) you are f***ed. Hantek only provides firmware updates, not complete firmwares. Luckily someone provided his fw_backup.bin on this thread.

3. A post by minescumarius was extremely helpful. It includes a config file for the H-JTAG software and pinout of the header. Cheers Mate!
https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg1117378/#msg1117378 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg1117378/#msg1117378)

4. If you dont' feel like making your own interface, you can get one for 5 bucks shipped on aliexpress. The schematic minescumarius provided is exactly what is known as an 'ARM JTAG Wiggler (clone)'. Be warned: This needs a hardware parallel port - not some USB->LPT converter, not even a Thinkpad T60 ultrabay COM/LPT adapter worked.
Also I could not get H-JTAG working with that parallel port under Windows 7 x64, had to run it on a 32 bit version of Win 7, driver issue most likely.

I had some initial trouble getting H-JTAG to even detect my MCU - Only after I connected the two reset lines to the board I got it to work.
Also my flash process would stop with various errors until I realized that the 1 meter ribbon cable that came included with the 5$ Wiggler was a bit on the long side for signal integrity. Clipped a ferrite bead on there and all troubles were gone. You might want to use a shorter calbe or try the same.

5. Flash process took me around 200min at 11kB/s, so be patient.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rudy1589 on January 21, 2019, 10:58:22 pm
I did the hack to convert my DSO5102B to a DSO5202B some years ago which went well. The last firmware update was back in 2013. I recently tried to update the firmware but it I get Error: 0xfe  No upgrade files detected on USB device. 
   What do I do to be able to update the firmware on the scope?
      Thanks for any help!!
 
Model: DSO5202B
SW Vers: 2.06.3(130814.1)
HW Vers: 10070x555583ED
SN: T 1G/012007832
 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mcfudge on January 22, 2019, 12:21:19 am
Hi christensen,
I realize yours is quite an old post but did you complete the LAN modification successfully?  I'd like to do the same but haven't found the instructions yet.  In fact, I'd like to do all the mods for my Hantek DSO1202B v2.01.1 (add SD, video, net), just to learn how to do them and gain some experience.  Thanks for any help.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on January 22, 2019, 08:33:10 am
I did the hack to convert my DSO5102B to a DSO5202B some years ago which went well. The last firmware update was back in 2013. I recently tried to update the firmware but it I get Error: 0xfe  No upgrade files detected on USB device. 
   What do I do to be able to update the firmware on the scope?
      Thanks for any help!!
 
Model: DSO5202B
SW Vers: 2.06.3(130814.1)
HW Vers: 10070x555583ED
SN: T 1G/012007832

download from my 1drv, from firmware, version, model folder the proper/latest file.

There is even a way to run firmware from Feb 2018 on hw1007 platform (like i do on my old hw1007),
but it's bit tricky (one have to copy over ssh some libs first, updates can be done only over lan/uart by copying latest only executable file).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rudy1589 on January 22, 2019, 11:34:15 pm
Thank you!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mcfudge on January 23, 2019, 03:54:16 pm
@liuqui
Just open your favourite search engine and look for Hantek2D42
It came up on banggearwatch, banggood, and Amazon. Banggood has the pic u posted.
not related to this thread, but since its been viewed a few hundred times...
Hantek 3in1
Digital Oscilloscope Waveform Generator Multimeter
Portable USB 2 Channels 40mhz 70mhz LCD Display Test Meter Tools Ultra-low Power Design With Large-capacity lithium Battery One-key AUTO
$159.99
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: llg on January 25, 2019, 11:55:15 pm
Hey lads,

There's a new firmware release on the hantek site dated yesterday or the day before 3.40.0(190125.0), that makes it one year and five days since the latest update 3.40.0(180120.0)
The changed files are show_pic and dso.exe.

A plain dumb strings diff suggests at least some bugfixes .. so it might worth testing this against your favourite bugs.

Happy upgrade.
Cheers,
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: WanaGo on January 26, 2019, 12:41:57 am
For the DSO1152S I was sent new firmware yesterday by Hantek, however it does not appear to be on the website. Last on the website was 170801 and this is 180821.
Would love to know what changed if someone can assist with that.
My model is quite old, 2012 PCB 1.00.1 so I am hesitant to upgrade in case it kills it.
Here it is for a limited time: https://1drv.ms/u/s!Ak2DUCelcmmIg_oPxDmU62g0q9g_0A

Thanks
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Ringmodulator on January 27, 2019, 12:33:54 pm
Hey lads,

There's a new firmware release on the hantek site dated yesterday or the day before 3.40.0(190125.0), that makes it one year and five days since the latest update 3.40.0(180120.0)
The changed files are show_pic and dso.exe.

A plain dumb strings diff suggests at least some bugfixes .. so it might worth testing this against your favourite bugs.

Happy upgrade.
Cheers,


Hi,

for which models ist the update?

I did check the Hantek page for the DSO5000B updates, but did not find the version you have mentioned.
So it is probably for a different model(?).

Regards
Chris
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: llg on January 27, 2019, 02:11:45 pm
You are right, sorry for the noise.
It's only for P models, DSO5000P.
I've checked 5072P and 5202P and assumed they updated all models,
but it's only for P.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: WanaGo on January 27, 2019, 08:11:59 pm
A plain dumb strings diff suggests at least some bugfixes .. so it might worth testing this against your favourite bugs.

Hey llg, can you just explain how you did the compare exactly?
How do you extract anything out of these up files? Im sure I use to know, but its been too long.
Would love to find out what changed on my update above.
Thanks
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: GilbouFR on February 11, 2019, 09:46:45 pm
>
Quote
Quote from: Terry01 on Yesterday at 06:26:43 PM (https://www.eevblog.com/forum/index.php?topic=1571.msg1403885#msg1403885)
If your machine is showing the 2ns out the box the 200MHz upgrade is already done. I got my 5102p from Amazon around a month ago and it was already done from the factory. I have seen quite a few others the same.

Enjoy!  :)
Very interesting.
I don't know if this matters or not, but after checking the FW, it would appear that it is using the 5072P according to the Hantek website.


Just bought my 5102P and learning to use it. What do you mean about the 2 ns thing ?
That only models with 200 MHz have that 2 ns resolution ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: GilbouFR on February 11, 2019, 10:35:22 pm
Just bought mine and got it since last saturday.
It's a 5102P 100 MHz
Upgraded firmware to 3.40.0 dated 25-JANUARY-2019
hardware revision 1010xffff8108
Goes down to 2 ns
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Terry01 on February 12, 2019, 08:55:31 am
Just bought mine and got it since last saturday.
It's a 5102P 100 MHz
Upgraded firmware to 3.40.0 dated 25-JANUARY-2019
hardware revision 1010xffff8108
Goes down to 2 ns

If it goes down to 2nS then the 200MHz upgrade is already done right from the factory.

It is explained better here....  https://www.youtube.com/watch?v=JzfYSBwshyo (https://www.youtube.com/watch?v=JzfYSBwshyo)

 :-+
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: GilbouFR on February 14, 2019, 09:53:35 pm
Yup. Mine goes down to 2 ns   >:D
I ordered two 200 MHz probes to replace the PP-150 model I received with the DSO

A very good surprise to get a 200 MHz when I bought a 100 Mhz  ;D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: WanaGo on February 14, 2019, 09:56:41 pm
I thought it was mentioned some time ago that the 2ns feature is no longer an indication that the hack worked, or that its 200Mhz.
It comes as default now, but doesnt mean you have 200Mhz enabled.
May be wrong, but I am sure I read that on here from Tinhead
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: gf on February 14, 2019, 10:14:50 pm
Please tell me where I can find detail information of this equipment, I didn't find it on website.

See here: https://www.eevblog.com/forum/testgear/hantek-2c422c722d422d72/msg1992251/ (https://www.eevblog.com/forum/testgear/hantek-2c422c722d422d72/msg1992251/)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Terry01 on February 14, 2019, 10:47:14 pm
Can someone please explain if this is the case or not? Is it 200MHz enabled or not? I have no idea how to work this out so I am repeating things I saw others said or wrote or whatever when this 1st came up.

Again, I do not know how to work this out so am not arguing either way. Just looking for someone to nail it either yay or nay!

I remember when this first came up someone said it was rubbish and not so 200MHz. Someone else did the calculations and posted them to show everyone how it was worked out and then everyone agreed the 2ns thing did mean it was 200MHz enabled.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 16, 2019, 10:13:43 am
I thought it was mentioned some time ago that the 2ns feature is no longer an indication that the hack worked, or that its 200Mhz.
It comes as default now, but doesnt mean you have 200Mhz enabled.
May be wrong, but I am sure I read that on here from Tinhead

that's right, depending on firmware/hardware/models it can be still e.g. 100MHz BW with 2ns/DIV enabled. I do not track which models/fw/hw are affected, so easiest way is just give a try and measure 200MHz signal connected to input (directly, because with slower models one get slower probes anyway) right before and after hack. It can be simply XO, what so ever, or even diy pulse generator
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: GilbouFR on February 18, 2019, 04:20:48 pm
I don't have the hardware to generate a signal high enough in frequency to test.
I'm learning for now so my use of the DSO is very basic and simple and besides a crappy chinese DSO generator I don't have a proper and proper generator or anything at 200 MHz.
I guess a basic 50 MHz would have been enough for me anyway  ;D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: indman on February 18, 2019, 07:12:32 pm
Here real characteristics of modern releases of DSO5102P:
Amplitude-frequency characteristic of one (any) channel at the switched-off other channel
1mV/div: 25Mhz (-3dB); 50Mhz (-6dB); 100Mhz (-12dB). Scope of noise 0.4 divisions.
2mV-2V/div:<40Mhz(0dB);70Mhz(+3dB);100Mhz(0dB);120Mhz(-3dB);140MHz(-6dB). Scope of noise 0.1-0.2 divisions.
When giving one signal on 2 channels (through cables of identical length) oscillograms are shifted rather each other on 2ns.
The shift is visible on horizontal sweep of an oscillograph <40ns/div.For this reason mathematical operations have normal (+-10%) to frequency 10Mhz.
The mode (X-Y) normally works only to 20kHz.With the included afterglow to 3Mhz.
As a result - in the 2nd the channel mode the DSO5102P normally works (+-10%) to 10Mhz, in 1nd the channel mode witch measurements (+-10%) to 40Mhz.
As the indicator - to 140Mhz.
CH1 and CH2:Rin=1MOhm;Cin=20pF; Ext.trigger:Rin=1MOhm;Cin=16.5pF
Probes (x1):R=332Ohm;C=96pF;works frequency to 7MHz(-3dB)
Probes (x10):Rin=10MOhm;Cin=16.5pF to frequency 120MHz(-3dB)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: gf on February 18, 2019, 07:48:03 pm
When giving one signal on 2 channels (through cables of identical length) oscillograms are shifted rather each other on 2ns.

Seems to be a similar behavior as I noticed on my handheld Hantek 2D72 (but there it is even 50ns, when the time base is >= 10us/div);
https://www.eediscuss.com/forum.php?mod=viewthread&tid=14706 (https://www.eediscuss.com/forum.php?mod=viewthread&tid=14706)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: GilbouFR on February 20, 2019, 09:07:48 pm
How can a noobie like me build a 200 MHz generator to test it ?
I have no idea how to
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on February 20, 2019, 09:40:07 pm
How can a noobie like me build a 200 MHz generator to test it ?
I have no idea how to

e.g. http://www.eevblog.com/2012/07/06/eevblog-306-jim-williams-pulse-generator/ (http://www.eevblog.com/2012/07/06/eevblog-306-jim-williams-pulse-generator/)

avalanche pulse generator is what you need, for sure you can use "any" signal generator (uC, CPLD, XO, VCXO, etc.) but it must have rise time with less than 1ns. When using XOs don't forget that their rise time is specified 20/80 and of course with "no load", so when you use e.g. Silabs Sixxx oscillators, they drop the rise time from 350ps to e.g. 1ns at 15pF load (which is the case for the DSO input capacity).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Zzippo on February 24, 2019, 06:07:57 pm
I don't know if it's the case to use this thread but this seems to be the most famous one about these scopes, the fact is that I think to have found a bad firmware bug and spotted how to replicate it

the bug is the entire scope that freezes after startup, i can tell it's doing that because the Led near the V0 knob is on while powerup (sometimes ALL the Leds are on but it's ok apparently), when it comes to actual wave screen it seems going but there's an "adjust V0 to set brightness" message on the bottom and the moment i touch ANYTHING it freezes immediately for a pair of seconds and reboots with all the memorized setups at default, this happens like once per 10\20 times i turn it on and i always have the fear it bricks totally, i remember it rebooted also once, while messing too fast with a lot of settings, apart this startup problem

recently I press "default setup" before turning it off and apparently it never did that again... honestly the only setting I usually had on was the silly buzzer for button presses (apart regular settings like 20MHz bw filter, 5V per unit vertical, and maybe a faster timebase), probably it fails some settings checksum

my unit is a DSO5102P with fw dso5kp_func_dso5102p20170714... the previous 3.40.0 161227.0 had the same exact issue (sorry the format of the infos i give) i waited some time before posting this considering it may do this trick again but apparently it did not

some apparently say that it may be a bad CMOS memory but at this point i also think it can be a battery-to-line power transition issue... i don't know  :-//

any idea? solutions? similar cases?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: brainwash on March 05, 2019, 11:25:23 pm
For me it's mostly crashing when in split-screen/zoom mode, I haven't been able to identify the exact settings.
I also had issues with the loose screen connector but that usually just results in a white screen, rarely a reboot.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Zzippo on March 10, 2019, 09:28:12 pm
For me it's mostly crashing when in split-screen/zoom mode, I haven't been able to identify the exact settings.
I also had issues with the loose screen connector but that usually just results in a white screen, rarely a reboot.
good to know about the screen cable... if it becomes white my face will do the same  :phew:
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: martinisonline on April 01, 2019, 01:12:08 am
I don't know if it's the case to use this thread but this seems to be the most famous one about these scopes, the fact is that I think to have found a bad firmware bug and spotted how to replicate it

the bug is the entire scope that freezes after startup, i can tell it's doing that because the Led near the V0 knob is on while powerup (sometimes ALL the Leds are on but it's ok apparently), when it comes to actual wave screen it seems going but there's an "adjust V0 to set brightness" message on the bottom and the moment i touch ANYTHING it freezes immediately for a pair of seconds and reboots with all the memorized setups at default, this happens like once per 10\20 times i turn it on and i always have the fear it bricks totally, i remember it rebooted also once, while messing too fast with a lot of settings, apart this startup problem

recently I press "default setup" before turning it off and apparently it never did that again... honestly the only setting I usually had on was the silly buzzer for button presses (apart regular settings like 20MHz bw filter, 5V per unit vertical, and maybe a faster timebase), probably it fails some settings checksum

my unit is a DSO5102P with fw dso5kp_func_dso5102p20170714... the previous 3.40.0 161227.0 had the same exact issue (sorry the format of the infos i give) i waited some time before posting this considering it may do this trick again but apparently it did not

some apparently say that it may be a bad CMOS memory but at this point i also think it can be a battery-to-line power transition issue... i don't know  :-//

any idea? solutions? similar cases?

It happened with me once with the firmware version 180120.0.
Updated to the last firmware (dso5kp_func_dso5102p20190125.up) a couple of days ago. Now only the time will tell if the problem returns.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Zzippo on April 18, 2019, 10:17:31 pm
I don't know if it's the case to use this thread but this seems to be the most famous one about these scopes, the fact is that I think to have found a bad firmware bug and spotted how to replicate it

the bug is the entire scope that freezes after startup, i can tell it's doing that because the Led near the V0 knob is on while powerup (sometimes ALL the Leds are on but it's ok apparently), when it comes to actual wave screen it seems going but there's an "adjust V0 to set brightness" message on the bottom and the moment i touch ANYTHING it freezes immediately for a pair of seconds and reboots with all the memorized setups at default, this happens like once per 10\20 times i turn it on and i always have the fear it bricks totally, i remember it rebooted also once, while messing too fast with a lot of settings, apart this startup problem

recently I press "default setup" before turning it off and apparently it never did that again... honestly the only setting I usually had on was the silly buzzer for button presses (apart regular settings like 20MHz bw filter, 5V per unit vertical, and maybe a faster timebase), probably it fails some settings checksum

my unit is a DSO5102P with fw dso5kp_func_dso5102p20170714... the previous 3.40.0 161227.0 had the same exact issue (sorry the format of the infos i give) i waited some time before posting this considering it may do this trick again but apparently it did not

some apparently say that it may be a bad CMOS memory but at this point i also think it can be a battery-to-line power transition issue... i don't know  :-//

any idea? solutions? similar cases?

It happened with me once with the firmware version 180120.0.
Updated to the last firmware (dso5kp_func_dso5102p20190125.up) a couple of days ago. Now only the time will tell if the problem returns.

did you have the beeper enabled?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Zzippo on April 18, 2019, 10:21:22 pm
anyways... it's not doing that anymore apparently, i press "default setup" every time i turn it off (also a good thing for me)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Checksum47 on April 19, 2019, 02:38:20 am
I am looking at getting a USB UART TTY chip and Im a little confused when I go on Eb@y.  There seem to be 4 pin versions, 5 pin, and even 6 pin versions.  And then there seems to be micro-usb and regular usb.  I even saw one seller offering an extra 90 degree header if I chose an upgraded shipping method.  Do I need a 90 degree header?  Would it make the install nicer?  Can someone just provide me a link so I dont buy the wrong usb chip?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: easa on April 19, 2019, 05:31:19 am
https://www.aliexpress.com/item/30pcs-USB-to-TTL-USB-TTL-STC-microcontroller-programmer-PL2303-in-nine-upgrades-plate-with-a/1726023406.html?spm=2114.13010708.0.0.4bce4c4dAJ131r (https://www.aliexpress.com/item/30pcs-USB-to-TTL-USB-TTL-STC-microcontroller-programmer-PL2303-in-nine-upgrades-plate-with-a/1726023406.html?spm=2114.13010708.0.0.4bce4c4dAJ131r)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on April 19, 2019, 09:17:25 am
anyways... it's not doing that anymore apparently, i press "default setup" every time i turn it off (also a good thing for me)

there is general "thing" with these DSO series, when you change settings (any, so default as well), they write it into memory and save 2-5 seconds later. When you turn off while DSO is saving, you might get fancy issues. 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Zzippo on April 20, 2019, 01:02:47 am
there is general "thing" with these DSO series, when you change settings (any, so default as well), they write it into memory and save 2-5 seconds later. When you turn off while DSO is saving, you might get fancy issues.

i see....... thanks!

honestly i thought about this as well, beeing used with windows etc we know that there's "behind the curtains" movements at random moments, so i don't force the scope to go fast behind me usually, i've always waited a bit before turning it off after messing with it (of course it shouldn't be like this, it's a bit disappointing, it's not windows, but we are used to "hard to use stuff" ^-^), 5 seconds is a bit "random far" tbh

i'll wait at least 10 secs before turning it off, i've also seen that the power switch simply disconnect mains (and it should be like this in my opinion) so a "bad shutoff" is not impossible, as a PC
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sergiycoolest on April 22, 2019, 10:04:45 pm
Hello, to All Members! I am Sergiy from Ukraine. Would you be so kind to help me? My Hantek DSO 4102C after the 1st year of working "unexpectedly died".  Once, after starting, LCD became black. All buttons are working and LEDs are working too.  I checked power supply. All are good: +14,5V; +12V; -8V; +6,4V; +5V; +3,3V. I found control points on the main board (DSO4000C V1.02 2015-03) & checked them.  They are: +14,4V; +12V; -7V; +5V; -5V; +3,3V; +2,5V; +1,8V; +1,3V; +1,25V.  Only +2,5V was absent at all. One SMD SOT23 part was damaged (burned). It marked as (SANE) & seems like precision voltage reference .  I did not find the electrical circuit of Hantek DSO 4102C.  I have the picture of a board. Can someone help me?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sergiycoolest on April 22, 2019, 10:06:38 pm
Hello, to All Members! I am Sergiy from Ukraine. Would you be so kind to help me? My Hantek DSO 4102C after the 1st year of working "unexpectedly died".  Once, after starting, LCD became black. All buttons are working and LEDs are working too.  I checked power supply. All are good: +14,5V; +12V; -8V; +6,4V; +5V; +3,3V. I found control points on the main board (DSO4000C V1.02 2015-03) & checked them.  They are: +14,4V; +12V; -7V; +5V; -5V; +3,3V; +2,5V; +1,8V; +1,3V; +1,25V.  Only +2,5V was absent at all. One SMD SOT23 part was damaged (burned). It marked as (SANE) & seems like precision voltage reference .  I did not find the electrical circuit of Hantek DSO 4102C.  I have the picture of a board. Can someone help me?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Microcheap on April 22, 2019, 11:05:09 pm
Hi sergiycoolest, welcome to the forum.
I've checked a 4102C board and U21 is indeed a Vref. It's marked R30E (REF3040) http://www.ti.com/lit/ds/symlink/ref3040.pdf (http://www.ti.com/lit/ds/symlink/ref3040.pdf)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Konsul on May 01, 2019, 10:48:27 pm
I have Voltcraft DSO-1062D and I tried to upgrade firmware... unsuccessfully :(.
I downloaded firmware file from this page:
http://voltcraftdownload.info/Default.aspx?modelno=DSO-1062D (http://voltcraftdownload.info/Default.aspx?modelno=DSO-1062D)
Then I unziped it and put dso5kb_func_dso5062b20180226.up on USB stick. After that I used upgrade firmware option from scope menu and after upgrade and reboot my oscilloscope is stuck on white boot screen with "VOLTCRAFT DSO-1062D DIGITAL OSCILLOSCOPE" text on it. What can I do now?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Konsul on May 02, 2019, 06:22:56 pm
Today I opened my oscilloscope to access UART, but cannot see it where I expected it to be :(. There is an integrated circuit instead of UART. Is it possible that there is no UART on my PCB?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Konsul on May 02, 2019, 08:34:03 pm
I have found UART (it is next to the USB port on the back) and thanks to this descrption:
https://www.eevblog.com/forum/repair/voltcraft-dso-1102d/msg2036896/#msg2036896 (https://www.eevblog.com/forum/repair/voltcraft-dso-1102d/msg2036896/#msg2036896)
i have managed to fix mine oscilloscope.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Checksum47 on May 05, 2019, 06:14:34 pm
I am trying to make a backup of my Hantek 5072P and I have downloaded the dso5kp_backuptool.up and put it on a regular USB thumb drive and everytime it gives me....
0xff saying something about how it cant proceed and how it cant read the usb.  I have even resorted to formatting the USB drive to Fat32,ExFAT.  Nothing seem to work...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: wolframore on June 10, 2019, 06:17:06 pm
Late to party but picked up a Hantek 5202P cause it was the last one and it was only $269 delivered.

The only issue I have with this is the low memory... is it possible to change the flash memory chip on these so it's more like the "B" models? 

I'm also going to do a portable battery mod to run off 5V cause these are so light, I can take them in the field... they are so low priced I don't mind them being out there.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: MeterMacher on June 28, 2019, 04:48:18 pm
Can anyone provide root.ubi (nanddump image) for Voltcraft DSO-1062D aka Hantek DSO5xx2B S/N > 15000 (hw 1.01) for me?
Although nanddump backup worked, it is useless, since this image is corrupt (i.e. decompression errors, fails to start dso.exe for this reason and then reboots immediately).
Was able to flash back same root.ubi by using dwn under linux, however, still the same error after this procedure as one can imagine.
As well as I understood, wrong calibration files (contained in the image of another scope) can be exchanged with the current ones after new ubifs image is replaced? (These have been backed up already).
Many Thanks!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: cliffyk on July 14, 2019, 07:53:21 am
OK, as a new Hantek DSO1062B owner I read through 90%+ of these posts (I admit, not all 120 pages), however all these hacks seem to do is alter the 'scope's firmware to allow selection of a 2.0 ns/div timebase (my 60 MHz unit goes to 4.0 ns, and is 3dB down at 95 MHz). This does not of course modify the instruments's front-end to pass 200 MHz signals, so unless Hantek produced all these devices with 200 MHz bandwidth analog inputs (which I seriously doubt) it is naught but eye-wash.

Has anyone actually verified that a "hacked" 60 MHz or 100 MHz 'scope has magically "become a 200 MHz device" by just upgrading the firmware (other than simply the availability of a 2.0 ns/div timebase setting)?
     
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatus1969 on July 14, 2019, 01:21:36 pm
Hantek may changed their strategy since then (although I doubt that), but when I did this mod a few years ago, the situation was that they had used the very same 200MHz circuit design for all of their models, and done the bandwidth limitation purely in software. The input stage hack that is described in this thread therefore was optional, and more directed towards better linearity and even more bandwidth.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Input220v on July 16, 2019, 03:05:39 pm
Hi
From the day of purchase it has been complicated to adjust settings neccessary to work with Hantek MSO5102D model. Buttons don’t work correct, pushing “Display” cursor appears, pushing “Utility”- “Default” appears, pushing “Auto set” - oscilloscope gets stuck. Is it possible to upgrade for another program software? The current version I have is: 3.325 (161017.0) ( hw version 1020x55778354).

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: chsn on August 03, 2019, 07:35:53 am
Received from Hantek for:
MSO5202D
sw 3.2.35 (131029.0)
hw 1010x55558340
sn t1g/012016xxx

new firmware
https://yadi.sk/d/Tm1Esxa9iyWm4w (https://yadi.sk/d/Tm1Esxa9iyWm4w)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Microcheap on August 03, 2019, 04:32:51 pm
I got a DSO4102C with a similar problem, pressing a button, the selected function won't work, the oscilloscope is too slow to respond or a completely different function is activated. After rebooting the device, it works normally for some time and then it start to showing the problem again.

I tried to restore the system and updated the FW but it did not work, Hantek's support said it might be a defective keyboard that need to be replaced.

If you have the option, return it to the seller and get a new one.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 03, 2019, 04:35:21 pm
Received from Hantek for:
MSO5202D
sw 3.2.35 (131029.0)
hw 1010x55558340
sn t1g/012016xxx

new firmware
https://yadi.sk/d/Tm1Esxa9iyWm4w (https://yadi.sk/d/Tm1Esxa9iyWm4w)

unpacked and renamed mso_bin to mso.exe does even runs on my hw1007 version (because i have all kind of libs manually copied to it).

It would be nice to know some kind of changelog from Hantek … @chsn, could you ask them?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: aandrew on August 04, 2019, 03:13:50 pm
@tinhead I think it was you who mentioned you had a pinout file for the FPGA and maybe a memory map of which buttons/controls were where... If this is true and you could share it perhaps we could take a crack at a first third-party UI for this thing. It's not bad hardware but the software is awful.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 04, 2019, 08:10:49 pm
@tinhead I think it was you who mentioned you had a pinout file for the FPGA and maybe a memory map of which buttons/controls were where... If this is true and you could share it perhaps we could take a crack at a first third-party UI for this thing. It's not bad hardware but the software is awful.

i made complete schematics of DSTxxxxA, DSTXXXXB hw0, hw1007 DSO's (one can use hw1007 as well for hw1005 and partialy for other models). I should have somewhere as well some Memory map etc. description, i have to check in my archive files, have not touched Tekway/Hantek reversing since years anymore. More important is, for which model/series would you like to know more?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: wwoofbum on August 15, 2019, 11:51:24 pm
Recent purchase of Hantek DSO5072P with the specific intention of implementing the 200MHz hack.  Having the same problem as Checksum47 on attempt to back up firmware: "Firmware update failed, error 0xfe, No upgrade files detected on USB device"

Model DSO5072P
sw version 3.40.0(180120.0)
hw version 1010xffff8108

UPDATE!

Okay, so maybe I'm not so bright...but... 

Thought it might be my USB stick, so I tried another.  Same error.  So, I tried downloading the latest firmware from Hantek for the 5072P...got a new version 3.40.0(190125.0) and loaded it onto the USB stick.  Oscilloscope updated fine.  Deleted firmware update file and copied the update tool to the USB stick (as per tinhead's post).  This time it completed the update without error, my USB stick has the dump folder, and my timebase now goes down to 2.00ns.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Zhenek on August 27, 2019, 07:42:17 am
I've got a Hantek DSO4102C, all is OK, but I can't figure out how to make screenshots. It seems that DSO5102 series have a button named "Save to USB", but 4102C doesn't. Is there a way to capture screen to USB sticks?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: cliffyk on August 27, 2019, 01:20:52 pm
I've got a Hantek DSO4102C, all is OK, but I can't figure out how to make screenshots. It seems that DSO5102 series have a button named "Save to USB", but 4102C doesn't. Is there a way to capture screen to USB sticks?

According to the manual it is a sub-function of the Utility menu (when all else fails, read the manual):

(http://www.paladinmicro.com/images/Electronics/Hantek4102SAveWave-00.jpg)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Zhenek on August 27, 2019, 03:17:54 pm
This one I've seen, but it don't help at all. This menu likes like in attached photo. I don't have any idea where to press. As I said, this scope doesn't have a dedicated "Save to USB" physical button.
Also I don't understand how can user "click on the icon" since the instrument don't have touch screen.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Microcheap on August 27, 2019, 04:41:29 pm
Is there a way to capture screen to USB sticks?
Not the most intuitive but it is possible: Press "Utility" button then, on page 1/3 of the menu use F3 do select the option "Save Waveform". Now use F1 to choose between "position" and "Screenshot" options. That will set the function of the position knob of CH1. With "Screenshot" selected, just press the knob to capture the screen to the USB stick.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: cliffyk on August 27, 2019, 05:46:24 pm
Microcheap is spot on... I had missed that you had a revision "C" 'scope. Even with the manual in front of you it is still less than clear how to save a waveform:

 (http://www.paladinmicro.com/images/Electronics/Hantek4102SAveWave-010.jpg)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Zhenek on August 28, 2019, 07:16:00 am
cliffyk, thanks!  Sorry for dumb questions.
In my defense:
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: cliffyk on August 28, 2019, 10:44:43 am
Hantek has the 4000C manual on their site (http://www.hantek.com/down.aspx?url=http%3a%2f%2fwww.hantek.com%2fProduct%2fDSO4000C%2fDSO4000C_Manual.pdf) (this is a download link)...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: aandrew on August 31, 2019, 03:55:54 am
i made complete schematics of DSTxxxxA, DSTXXXXB hw0, hw1007 DSO's (one can use hw1007 as well for hw1005 and partialy for other models). I should have somewhere as well some Memory map etc. description, i have to check in my archive files, have not touched Tekway/Hantek reversing since years anymore. More important is, for which model/series would you like to know more?

My board is a "T55 00313" (sticker on the back is "T 1G/655 000313"). Status screen says the hardware version is "10020x540282051002". It's an MSO5074FG.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 31, 2019, 02:02:06 pm
MSO5074FG is not that different, sure it have 4 channels, some fancy mux for them, then an extra pcb with Signal Generator (typical Hantek design, changed only a bit to add LA channels). 
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: aandrew on August 31, 2019, 02:44:26 pm
Yep, it's very, very similar to the 2-channel versions. It's a pity that some very basic things such as channel deskew and logic analyzer sync with analog weren't implemented, it really hinders what this otherwise quite capable little scope can do.

Were you able to dredge up your old notes (memory map, fpga notes, etc.)?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 31, 2019, 02:58:00 pm
no, unfrotunately can't read my backups from old Laptop :(

I remember that the most discovered part was based on debug executables (they still on my 1drv) and old Hantek/Tekway SDKs (they let by mistake i think some utils and Sources of them).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: aandrew on August 31, 2019, 03:24:09 pm
I think I've grabbed your 1drv before, thank you for that.

Looking through it again, I see some @dcompiled_101_apps directory within an fpga.zip and some other goodies... gonna poke around here again.

Thank you again for all of your hard work.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tinhead on August 31, 2019, 04:17:21 pm
btw, if you have a chance, please dump the content of the 25L4006 from the DDS/LA addon board.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: coromonadalix on October 02, 2019, 05:40:08 am
Hi  is there a repo  or a file hosting for the dso-usb-tool  file,  cant find it ?  The first OP thread has invalide links.

Thks
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: coromonadalix on October 02, 2019, 12:24:52 pm
thks @PeDre
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Appocalypse_br on October 02, 2019, 05:54:20 pm
Hi is there any chance i can do this in the PC USB 6104bc series, mine seems to be dead, if anyone have some info how to write\hack into these models will be great.

Or if you have the same one and send me the firmware eeprom etc will be nice!

Thanks!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: BobGeorge976 on October 03, 2019, 07:12:29 pm
Hello! Today I've got my Hantek DSO5072p and I have crossed over this topic and to me is still unclear is it possible to upgrade this device ... or not? Thanks in forward!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: BobGeorge976 on October 03, 2019, 07:41:51 pm
 My Hantek 5072p already goes to 2ns but my sw is older. Any sugestions what should I do?  :-//
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Slash200 on October 07, 2019, 06:07:29 pm


download from my 1drv, from firmware, version, model folder the proper/latest file.

There is even a way to run firmware from Feb 2018 on hw1007 platform (like i do on my old hw1007),
but it's bit tricky (one have to copy over ssh some libs first, updates can be done only over lan/uart by copying latest only executable file).

Is it possible to you provide a manual how to do the update to the Feb 2018 Firmware?
I have firmware 2.06.3(130425.0) installed at the moment.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: TateRB on October 10, 2019, 11:52:39 pm
This is my first post here after reading this thread for a while and doing some searching.  In the 100+ pages of this topic, I'm sure I missed what I'm looking for. I already have a 200Mhz scope, but need some help with the firmware and backups.

I followed recommendation from someone on here to email support@hantek.com. They sent me a link to a file (See info below) but no info in it. It leaves me wondering what it is and what is changed from the version that is in the scope now.

After reading here, I really want to do a backup before trying anything with it! I don't really want to brick it or put in some firmware that may improve it (or not) without a way to get back to starting point.

My info displayed on the screen
I got a Hantek MSO5202D back in Feb. 2019
SW Ver:     3.2.35(151208.0)
HW VER:      1020x55778344
Ser No:      T1G/112027xxx
LCD,Front.ts:   3.1.0

The boards in mine are:
PS PCB:            V1.00.2
Main PCB:      Serial MB V1.02 2015/3/8
daughter PCB:   DST-LA-Module_V1.00.3

From reading here I believe that mine is based no the S3C2416 SoC because 27xxx is >15000  :)

File Received from Hantek's support: dst1kb_func_mso5000d_190514.up

Instructions from Hantek:
Please unzip the file and copy the .up file to the root directory of your USB stick. The format of the USB stick is must be FAT32, and the storage space is less than 32G.
Insert the USB stick into the scope and press Utility->Firmware Update to do.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: lcfvrn on October 14, 2019, 07:36:16 am
guys, does anyone know where is UART in DSO8072E device? (board looks exactly as https://www.eevblog.com/forum/testgear/hantek-dso8000e-and-1000e-series-ip51-hacking-200mhz-free-35065/?action=dlattach;attach=105338;image (https://www.eevblog.com/forum/testgear/hantek-dso8000e-and-1000e-series-ip51-hacking-200mhz-free-35065/?action=dlattach;attach=105338;image) )
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Tugo on November 05, 2019, 09:01:28 am
I bought DSO5072p and I wanted to do the hack.
The problem is that I cannot do a backup on this newer version. I always get a small size BIN files (around 512k-2M). Root should be over 100MB and I don't get that.
I tried backing up with Tools_P_Model and also with a command line over USB (with a help of DSO-USB-Tool). Nothing worked.

Now I have some questions:
Is there anyone who did a backup of newer DSO5072p?
Is it ok if I would use an old backup version into mine? If yes, is there anybody that has this backup so that I can download it?

Please help.
Thank you.

Best regards,
Tomaž
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: edibg on November 19, 2019, 03:04:05 pm
Hi there

I have MSO5202D, SW 3.2.35 ( 140312.0 ), HW version 1010X55778340, serial number T1G/012 020XXX  - I want to know is there a option to enable averaging in MATH FFT ? 
I need to use noise source as generator and FTT to check few filters but an option for averaging the results will be helpful.

Also asked hantek support for the last firmware, but for now I do not have any replay. On page previous  (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg2589873/#msg2589873)page chsn posted a firmware for HW Version 1010x55558340 - can I use this file to update my firmware, at least it fixes the terrible cursors in FFT ?

EDIT : Hantek replayed after all, and the software is the same as the one provided from chsn.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kmarty on November 21, 2019, 02:25:36 pm
Hi,
I recently bought DSO5072P and successfully read whole thread.
Maybe I write something well known, but I didn't find it on this thread. Anyway it is probably better to write twice than never.

Original (older) DSO5000P has 4 NAND partitions:
Code: [Select]
...
Creating 4 MTD partitions on "NAND":
0x000000000000-0x000000100000 : "Bootloader"
0x000000100000-0x000000300000 : "LOGO"
0x000000300000-0x000000700000 : "Kernel"
0x000000700000-0x000008000000 : "ROOTFS"
UBI: attaching mtd3 to ubi0
...

but new(er) models have 8 MTD partitions:
Code: [Select]
...
Creating 8 MTD partitions on "NAND":
0x000000000000-0x000000100000 : "uboot"
0x000000100000-0x000000180000 : "params"
0x000000180000-0x000000380000 : "logo"
0x000000380000-0x000000400000 : "misc"
0x000000400000-0x000000800000 : "kernel"
0x000000800000-0x000004e00000 : "rootfs"
0x000004e00000-0x000005200000 : "kernel_bk"
0x000005200000-0x000008000000 : "recover"
UBI: attaching mtd5 to ubi0
...

Maybe I am wrong, but anyone who used Tools_P_models.zip as is, without any mods, then just made backup od first four partitions and moreover some of them with wrong size. But since kernel is on mtd4 and "root" partition on mtd5, my guess is that nobody has valid backup (on 8 parttitioned NAND).
Approximate sizes of nandumped files:
uboot - 1MB
params - 512kB
logo - 2MB
misc - 512kB
kernel - 4MB
rootfs - 70MB
kernel_bk - 4MB
recover - 46MB


No idea since this change was made.

My DSO5102P is:
sw version: 3.40.0(190125.0)
hw version: 1010xffff8108
lcd_front_ts: 3.3.0


EDIT:
I tried to make "improved" backup tool for P models.
Basicaly it passes through all mtd partitions found in /proc/mtd and dumps them to USB flash.

It has some flaw because in /proc/mtd is also shown mtd8 which is probably unpacked mtd5 (just guessing) and it fails to dump with:
Code: [Select]
/dev/mtd8: Device or resource busyNevertheles mtd0-mtd7 are dumped (in my case, in 4 partitions it should be mtd0-mtd3) as:
Code: [Select]
mtd0-uboot.bin
mtd1-params.bin
mtd2-logo.bin
mtd3-misc.bin
mtd4-kernel.bin
mtd5-rootfs.bin
mtd6-kernel_bk.bin
mtd7-recover.bin

EDIT2: deleted attachment because there is still some doubts
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Tugo on November 24, 2019, 06:47:41 pm
I have the same problem as you.
Also I wrote a couple of post before you but didn't get any feedback.
I don't know if nobody has any problems and don't reply or don't have this new version.
A couple of week ago I got those 8 bin files but I don't know how I would make a JTAG repair if I would need to.
Do you think just those 8 bin files are enough to successfully upload it over JTAG and repair DSO if needed?
Is there anybody else that did that and how did you do it?
THANK YOU!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kmarty on November 25, 2019, 12:03:53 pm
Oh, I didn't go so far. I didn't recover DSO, yet.

I just wasn't satisfied with backup result (which clearly wasn't proper backup - too small files and no visible sign of kernel image content nor rootfs "UBI" header). That's why I looked how to make better backup.

Of course I can't prove that my backup is "working backup", I just checked "rootfs" and "recovery" whether they really are UBI images (thery are), kernel images seems to be valid zImages and that's all at this moment.


Anyway, I don't get some things:
...
OOB will be not dumped, if need it you can edit this tool and remove the -o options from the command line inside.

How to use it (restore):
...
then burn with JTAG the fw_backup.bin file (no OOB blocks inside!) to NAND
...
...
the (dumped) data with OOB blocks (which is necessary for restore over JTAG or the method i've published)
...
it is several times here (yes/no/yes/no/yes/no/...)
So what is true? Shall (usable) backup have OOB blocks or not? And shall have it "bad PEBs" too or not?


I'm not familiar with JTAG flashing, but when fw_backup.bin comes by concatenating of several files, it would IMHO works only when files has exact length as NAND partitions (so it has include bad blocks, because without them the next file/partition would start sooner, at the end of previous partition).
If it is true, the dump with option "-b" (i.e. "--omitbad") is not suitable for JTAG (what for, then?). At this moment, with option "-b", it would work only with dump from NAND with no bad PEBs.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kmarty on November 26, 2019, 03:26:38 pm
Previous post (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg2795022/#msg2795022)


OK, I made slightly improved dso5kp_backuptool2.up.

It uses own(tinheads) nanddump* and dump method can be modified using TXT files.
When no '*.txt' file is on USB drive, a README.txt and MTDs-available.txt is created.

MTDs-available.txt shows, well, available MTDs shown in /proc/mtd (except the last one, I still have feeling the last mtd is not "real" mtd).
README.txt has follwing content:
Code: [Select]
- Create file 'oob.txt' when you want dumps with OOB or 'omitoob.txt' when don't. Required.

- Create file 'dumpbad.txt' when you want dump including bad PEBs or 'omitbad.txt' when don't. Required.

- Optionally create file 'mtd.txt' with list of MTD partitions which should be dumped (each on separate line).
  Available MTDs are listed in 'MTDs-available.txt' ("dev:" column).
Option files can be empty (it is its names what matters).
When 'mtd.txt' file is missing, all MTDs are dumped.

After dump a debug.log file is created (contains output of nanddump process).

These options are simply because I'm still not sure which dump is for which purpose (except that "omitoob+omitbad" is good for test on PC) so anyone can choose what kind of dump wants.

Please, let me know if you'll want some other changes.


*) Because /usr/sbin/nanddump makes no difference between "--oob" and "--omitoob".
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tv84 on November 26, 2019, 04:52:27 pm
If any of you guys could share, with me, the mtd0-uboot.bin I would be interested in having a look at the bootloader. (1st time I looked at this thread...)

The answers to some of your questions are in that file.

TIA
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kmarty on November 26, 2019, 05:56:33 pm
Here it is
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tv84 on November 26, 2019, 09:07:35 pm
(my quick 2 cents...  this may be well known but it doesn't hurt...)

This uboot MTD has 2 partitions (?):

- uboot executable  (load address: 0xC3E00000  size: 0x5A800)
- environment variables script

The uboot executable is easily loadable in IDA and you can see that it has many interesting commands: one of them is "menu".

Examples of uboot "menu" commands:
Code: [Select]
int __fastcall sub_C3E1015C(int a1)
{
  int v1; // r4@1
  const char *v2; // r0@2
  const char *v3; // r0@9

  v1 = a1;
  printf("\r\n#####\t Boot for SKY2416/TQ2416 Main Menu\t#####\r\n");
  if ( v1 == 1 )
  {
    printf("#####     EmbedSky USB download mode     #####\r\n\n");
    v2 = "[1] Download u-boot or STEPLDR.nb1 or other bootloader to Nand Flash\r\n";
LABEL_7:
    printf(v2);
    goto LABEL_8;
  }
  if ( v1 == 2 )
    printf("#####     EmbedSky TFTP download mode     #####\r\n\n");
  if ( (unsigned int)(v1 - 2) <= 1 )
  {
    v2 = "[1] Download u-boot.bin to Nand Flash\r\n";
    goto LABEL_7;
  }
LABEL_8:
  printf("[2] Download LOGO (logo.bin) to Nand Flash\r\n");
  printf("[3] Erase the MISC partion\r\n");
  printf("[4] Download Kernel (kernel.bin) to Nand Flash\r\n");
  printf("[5] Download UBIFS image (rootfs.ubi) to Nand Flash\r\n");
  printf("[6] Download Kernel_bk (kernel_bk.bin) to Nand Flash\r\n");
  printf("[7] Download UBIFS image (recover.ubi) to Nand Flash\r\n");
  printf("[8] normal start!\r\n");
  printf("[9] recover start!\r\n");
  printf("[0] Set the boot parameters\r\n");
  printf("[f] Format the Nand Flash\r\n");
  printf("[a] Download User Program\r\n");
  printf("[c] Choice lcd type.\r\n");
  if ( v1 == 1 )
  {
    v3 = "[n] Enter TFTP download mode menu\r\n";
LABEL_12:
    printf(v3);
    goto LABEL_13;
  }
  if ( v1 == 2 )
  {
    printf("[n] Set TFTP parameters(PC IP,SKY2416/TQ2416 IP,Mask IP...)\r\n");
    v3 = "[p] Test network (TQ2416 Ping PC's IP)\r\n";
    goto LABEL_12;
  }
LABEL_13:
  printf("[r] Reboot u-boot\r\n");
  if ( v1 != 1 && (unsigned int)(v1 - 2) <= 1 )
    printf("[s] Download STEPLDR.nb1 to Nand Flash\r\n");
  printf("[t] Test Linux Image (zImage)\r\n");
  if ( (unsigned int)(v1 - 2) <= 1 )
    printf("[q] Return main Menu \r\n");
  return printf("Enter your selection: ");
}

Code: [Select]
int parameter_menu()
{
  printf("\r\n##### Parameter Menu #####\r\n");
  printf("[1] Set NFS boot parameter \r\n");
  printf("[2] Set Yaffs boot parameter for Standard Linux \r\n");
  printf("[3] Set UBIfs boot parameter for Standard Linux \r\n");
  printf("[4] Set parameter \r\n");
  printf("[5] View the parameters \r\n");
  printf("[d] Delete parameter \r\n");
  printf("[s] Save the parameters to Nand Flash \r\n");
  printf("[q] Return main Menu \r\n");
  return printf("Enter your selection: ");
}

Code: [Select]
int LCD_menu()
{
  printf("\r\n##### LCD select Menu #####\r\n");
  printf("[1] T43\" screen.\r\n");
  printf("[2] A70TN92\" screen.\r\n");
  printf("[3] A104\" screen.\r\n");
  printf("[4] VGA1024768\" screen.\r\n");
  printf("[5] W35\" screen.\r\n");
  printf("[6] VGA640480\" screen.\r\n");
  printf("[r] Reboot u-boot\r\n");
  printf("[q] Return Parameter Menu \r\n");
  return printf("Enter your selection: ");
}

I think that, with this great support from the bootloader, any attempt to flash/recover this machine should be done from inside the uboot prompt interactively.



Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kmarty on November 28, 2019, 01:08:03 pm
BTW. Today I found some info about unlocking "new" versions of DSO5000P: Hantek DSO5102P review + 200 MHz bandwidth unlock (http://tefatronix.g6.cz/display.php?page=hantek&lang=en)

The part "However, this doesn't seem to work on newer models - the files revert to original state after reboot" is somewhat familiar to me.


Not tested (yet).

EDIT: OK, I did it. DSO behaved exactly as it is described in "review & BW unlock" and works. Didn't checked the real bandwidth (yet).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gcs190 on November 30, 2019, 07:17:36 pm
I just bought (and received) a DSO8072E, manufactured in 2018.

- Firmware 3.2.35 (171121.0)
- Hardware 1080x900383eb04
- Serial number DSO180xxxx

To increase the bandwidth I used the DSO-Tools shell. Although the configuration shows that the SD is not enabled, it is perfectly functional, yet I have enabled it by editing i2c.log copied with DSO-Tools to a pendrive, editing it on the PC and copying it back to the device.

However, I would like to make a copy of the nand and the instructions of other models to copy the first 4 partitions I think are not valid here, I show the result of "cat / proc / mtd":

dev             sise       erasesize   name
mtd0:   00100000 00020000 "uboot"
mtd1:   00080000 00020000 "param"
mtd2:   00200000 00020000 "logo"
mtd3:   00080000 00020000 "misc"
mtd4:   00080000 00020000 "kernel"
mtd5:   03200000 00020000 "rootfs"
mtd6:   01400000 00020000 "config"
mtd7:   00400000 00020000 "kernel_bk"
mtd8:   02e00000 00020000 "recover"
mtd9:   02f78000 0001f000  "rootfs"
mtd10: 012a6000 0001f000 "config"

What would be the partitions to use in nanddump?

Best Regards
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: kmarty on November 30, 2019, 11:25:46 pm
I am no expert about that, but my guess is mtd0 to mtd8.
Double check with NAND partitions output in dmesg (shortly after boot).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gcs190 on December 01, 2019, 07:24:27 pm
I am no expert about that, but my guess is mtd0 to mtd8.
Double check with NAND partitions output in dmesg (shortly after boot).

Thanks for your contribution. I will post if there is any progress ...
By the way, the card I use is an 8Gb SDHC and it works perfectly.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gcs190 on December 02, 2019, 07:36:06 pm
Finally I have been able to backup the first 9 partitions, the last 2 give the same error that @kmarty mentioned earlier, I used a nanddump located in /mnt/sd that has allowed me to do it with -o or without it.

The backup size with -o is 128 MB exact.

All from the DSO-USB-Tools, executing the following commands:

/mnt/sd/nanddump -b -o -f /mnt/sd/uboot.bin /dev/mtd0
/mnt/sd/nanddump -b -o -f /mnt/sd/params.bin /dev/mtd1
/mnt/sd/nanddump -b -o -f /mnt/sd/logo.bin /dev/mtd2
/mnt/sd/nanddump -b -o -f /mnt/sd/misc.bin /dev/mtd3
/mnt/sd/nanddump -b -o -f /mnt/sd/kernel.bin /dev/mtd4
/mnt/sd/nanddump -b -o -f /mnt/sd/rootfs.bin /dev/mtd5
/mnt/sd/nanddump -b -o -f /mnt/sd/config.bin /dev/mtd6
/mnt/sd/nanddump -b -o -f /mnt/sd/kernel_bk.bin /dev/mtd7
/mnt/sd/nanddump -b -o -f /mnt/sd/recover.bin /dev/mtd8

I have taken the nanddump from this thread: https://www.eevblog.com/forum/testgear/hantek-hdg2002b-awg-5mhz-or-100mhz-let_s-see (https://www.eevblog.com/forum/testgear/hantek-hdg2002b-awg-5mhz-or-100mhz-let_s-see)!/ (I think it is from @tinhead).
I attached:

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: astra2k on December 13, 2019, 05:28:48 pm
Good day.

dso5102p after unsuccessful upgrade stops  starting, by rx tx and USB no connection .
May be some one have dump file for  is34ml01g084-tli for programmator use.
If it is could help.

Thank you.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: astra2k on December 14, 2019, 05:14:37 pm
Hello again.
After I write from other same model dump to nand-flash and connect to plate is successful. Log attached.
[attach=1]
There is original back up :
Quote
fw_backup.bat
copy /b rootfs.00.bin+rootfs.01.bin+rootfs.02.bin+rootfs.03.bin+rootfs.04.bin+rootfs.05.bin+rootfs.06.bin+rootfs.07.bin+rootfs.08.bin+rootfs.09.bin+rootfs.10.bin+rootfs.11.bin+rootfs.12.bin+rootfs.13.bin+rootfs.14.bin+rootfs.15.bin+rootfs.16.bin+rootfs.17.bin rootfs.bin
copy /b recover.00.bin+recover.01.bin+recover.02.bin+recover.03.bin+recover.04.bin+recover.05.bin+recover.06.bin+recover.07.bin+recover.08.bin+recover.09.bin+recover.10.bin+recover.11.bin recover.bin
copy /b uboot.bin+params.bin+logo.bin+misc.bin+kernel.bin+rootfs.bin+kernel_bk.bin+recover.bin fwbackup.bin
del rootfs.*.bin
del recover.*.bin
fwbackup.bin
How bring this backup back ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: steddyman on December 25, 2019, 06:17:24 pm
Late to party but picked up a Hantek 5202P cause it was the last one and it was only $269 delivered.

The only issue I have with this is the low memory... is it possible to change the flash memory chip on these so it's more like the "B" models? 

I'm also going to do a portable battery mod to run off 5V cause these are so light, I can take them in the field... they are so low priced I don't mind them being out there.
Hi everyone.  First post but i've been following EEVblog on Youtube and reading this forum for a long time.

I have the same question as the one quoted.  I have just bought a 5102P for an exciting retro project (I'll reveal more soon), and note that there are videos on Youtube from people who have followed this upgrade process, and note that their 5102P reports as a 5202B on the About menu afterwards.

Does that mean the difference in memory between the P and the B versions (P has a lot less) is a license setting?  Or do the upgraded P's now reporting as B's have less memory than a real B?

Thanks
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: steddyman on January 10, 2020, 08:35:47 pm
Anyone?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Tugo on January 13, 2020, 05:58:11 pm
Where did you find that?
Can you post a link to youtube?

Regarding P and B series: hardware is different, P has less memory and that is why it has just 40k memory point compared to 1M point in B series.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: steddyman on January 20, 2020, 11:09:53 pm
Do we know that for sure?  Many scope manufacturers repackage the same model in different variants with only software unlocking certain features?

If we do, is the board the same but the memory just not installed?  Could it be added?  As anyone compared the boards of the two series side by side?

Thanks for the response.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: R4T on February 23, 2020, 08:17:40 am
I have found UART (it is next to the USB port on the back) and thanks to this descrption:
https://www.eevblog.com/forum/repair/voltcraft-dso-1102d/msg2036896/#msg2036896 (https://www.eevblog.com/forum/repair/voltcraft-dso-1102d/msg2036896/#msg2036896)
i have managed to fix mine oscilloscope.

Hi Konsul,

I have a DSO-1062D S/N T121**** that arrived as a brick (long story - not my scope!) and has never got beyond the start-up logo - Linux isn't starting:

Freeing init memory: 128K
g_serial gadget: high-speed config #1: Generic Serial config
Kernel panic - not syncing: Attempted to kill init!

I have serial comms, obvs; hitting 'spacebar' works OK and I think DNW will work, though haven't tested that it will actually transmit stuff yet. Are you able to send me a link to a kernel image?

Much appreciated if you can help. I am little irritated with panicky kernels!

Thanks, R4T
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: R4T on February 29, 2020, 09:44:23 am
Summarising where I have got to so far, with a bricked DSO-1062D 'scope:

It falls over at the start-up screen, and to the best my knowledge has never got further than this since new.

I established serial communications after some failures and this shows that it is stopping with a Linux 'kernel panic' as shown in my previous post.

For those in the same situation as me (not much of a clue, but willing to have a go!) I have found:

uart port on Voltcraft DSO-1062D HW 1.01 is at the back of the board, right next to the USB port and is labelled J801.  Mine has a header in it, some will just have holes, no doubt.

The pinout on J801 is (left to right, in the attached picture) 1 nc, 2 GND, 3 RXD, 4 TXD, 5 nc. Remember to connect RXD - TXD and TXD to RXD if this is news to you.  You need a usb to ttl device to communicate, the one that works for me is a DSD Tech SH-U09A with a Silicon Labs CP2102 chip - Windows 10 drivers readily available (bought on Amazon, search 'cp2102 usb to ttl').

Port settings are 115200, 8, n, 1 and you will need a terminal emulator program, such as PUTTY https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html (https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html)

Once you have serial comms, powering up the scope gives a boot log, which gives a clue about what is going on.  I am completely ignorant of Linux, so the full implications of this are somewhat lost on me, but it is very clear that the kernel is coming to a halt and that I now have to find a way forward that allows me to do stuff with the DSO and correct faults - a simple software update requires running Linux...

What clearly does work is that if I hit the space bar on my desktop as I am switching the DSO on, it will give me the Download Mode:

##### EmbedSky BIOS for SKY2416/TQ2416 #####
This Board: SDRAM is 64MB; LCD display size is: 800 X 480
Press Space key to Download Mod 0!
SD:File System init failed!

#####    Boot for SKY2416/TQ2416 Main Menu      #####
#####     EmbedSky USB download mode     #####

[1] Download u-boot or STEPLDR.nb1 or other bootloader to Nand Flash
[2] Download Eboot (eboot.nb0) to Nand Flash
[3] Download Linux Kernel (zImage.bin) to Nand Flash
[4] Download LOGO Picture (logo.bin) to Nand  Flash
[5] Download UBIFS image (root.ubi) to Nand Flash
[6] Download YAFFS image (root.bin) to Nand Flash
[7] Download Program to SDRAM and Run it
[8] Boot the system
[9] Format the Nand Flash
[a] Download User Program
[n] Enter TFTP download mode menu
[r] Reboot u-boot
[t] Test Linux Image (zImage)
Enter your selection:

So, the next plan is to try using these options to see if I can get the DSO going. My first thought was to try loading and testing a zImage using option [t] - but the only zImage I have at the moment is the one on the machine that falls over.

I have not downloaded anything to the scope yet, but I have a version of DNW on my Win10 machine to allow me to do this via usb, with luck.

Now thinking I may have to install ubuntu in a VM and compile a kernel for the DSO - but hoping someone can send me a zImage copy that is known to work on the Voltcraft instrument!!!

I hope this pulls together a few ideas for others who are struggling as much as I am!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: deisenberg on March 03, 2020, 03:51:07 pm
Those of you that have done the LAN mod do you happen to have the part number for the ethernet port? Besides the PHY are there any other parts needed?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: villamany on March 05, 2020, 12:17:11 am
Hi guys, after several tries seems finally i got my DSO5102P "hacked to 200MHz". I bought it brand new at February 2020.

The serial pinout is here: https://i.imgur.com/XfhNmP6l.jpg (https://i.imgur.com/XfhNmP6l.jpg)]https://i.imgur.com/XfhNmP6l.jpg[/url]]https://i.imgur.com/XfhNmP6l.jpg

The how to do is here: http://tefatronix.g6.cz/display.php?page=hantek&lang=en (http://tefatronix.g6.cz/display.php?page=hantek&lang=en)

Some tips:
-I didnt see the "dso1102b" file on my scope but i see a "dst1102b" file that i renamed to "dst1202b".
-My "sys.ini" file doesnt contain any data so i didnt change nothing here.
-Note i got several calibration errors until i removed all data of the i2c.log file leaving only the chars posted in the link plus a 0x0A after each line (a lot of 0x00 garbage bytes i removed at beginning, middle and end of the file)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: deisenberg on March 06, 2020, 05:30:24 pm
Well I bricked mine good (MSO derivative).  No UART output now. Is this fixable via JTAG? I backed up via a USB key.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: acdrvc on April 10, 2020, 05:55:54 pm
Hi, first post here. sorry about the long post.
I can tell you that the eeprom hacking method posted by villamany is not for the faint hearted, there is a real risk of bricking your oscilloscope, so if you follow the website instructions (http://tefatronix.g6.cz/display.php?page=hantek&lang=en (http://tefatronix.g6.cz/display.php?page=hantek&lang=en)) do it carefully. I have spent hours fixing a recovery loop, and after sucessfully modding the eeprom it still wasn't the right way, so it couldn't perform self calibration without success, it gave error 0x802.
Here is how i managed to do it.

Get acess to the console via rs232 adapter connected to the pcb, the pads near the usb connector
use Putty, or similar and get the i2c.log file copied to the usb stick. insert usb stick on your computer.

I use windows so i edited the file with HxD hex editor.

On top of the HxD editor you will see a window that reads "Windows(ANSI)", select in the dropdown list "DOS/IBM-ASCII(OEM)" so you can see the unix line terminators "◙" on each line.
Delete all 0x00 entries until the "[" character in "[--LOG0--], there is usually a bunch of 0x00 in the middle of the file, erase them too, and also at the end of the file, after "[bw]200◙".

So your file should look like this on HxD (the serial number is censored ;D):
[attachimg=1]

save it as i2c.org and connect stick to the dso.

Continue with the site instructions and reboot the dso when you're finished.
Now comes the important part. if the first message after rebooting the dso is not "formatting e2prom" but "backing e2prom", or self calibration fails then your file is not edited right(see image above), take special precaution with extra spaces or missing characters, it must be exactly like the image above, no more, no less.

If it is stuck in a recovery loop, connect via terminal(rs232 to usb adaptor) and choose on the dso the recovery option and wait, when "backing i2prom" or "formatting i2prom" appear on the dso screen hit killalll dsod, two times to be sure...

and copy i2c.org on the usb stick to both i2c.org and i2c.log:

cp /mnt/udisk i2c.org i2c.org
cp /mnt/udisk i2c.org i2c.log
touch i2c.format
sync
reboot

See if the dso reboots and "format e2prom" appears normally and after that it reboots normally, if so perform the self calibration, it should pass with success, if not, take your time evaluate your modded i2c.log file with patience, like the site said, a single misplaced character can brick or make your dso fail self calibration.
Simply don't rush it, take time and do it carefully.





Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: martinisonline on April 22, 2020, 01:59:15 pm
There is a recent version for the Hantek P5000 series on the site from 24-10-2019.
dso5kp_func_dso5102p20191024

Did someone already test it? No log description as usual :)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ADZ on April 26, 2020, 08:05:35 pm
Hello. Anybody can upload voltcraft_dso3000series.zip that was located at http://ftp.gpl-devices.org/pub/vendors/Voltcraft/VOLTCRAFT_dso3000series.zip (http://ftp.gpl-devices.org/pub/vendors/Voltcraft/VOLTCRAFT_dso3000series.zip)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Level42 on May 02, 2020, 10:47:10 am
Hey guys,

Thanks to this thread I hacked my Voltcraft DSO-1062D many moons ago but I was wondering if there was a newer firmware version now (because there are some rather "rough edges" in the older firmware ) and if I can upgrade without loosing the 200Mhz hack.

Current SW version is 3.30.0 (140111.0)

My questions:
- should I stick with the Voltcraft firmware versions as I can find on the Voltcraft site: http://voltcraftdownload.info/Default.aspx?modelno=DSO-1062D (http://voltcraftdownload.info/Default.aspx?modelno=DSO-1062D)  or should I go with a later Hantek version ?
- are there any new cool hacks ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Ulle on May 29, 2020, 08:25:39 am
Hi. Today I get my new DSO5102P, so it's a current model. I would like to expand this to 200 MHz. Do I understand correctly that I ONLY have to change the i2c.org EEPROM file (0x00 and [bw] 200)? Or is that an additional step before the old standard procedure? Thank you!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Level42 on May 29, 2020, 08:33:03 am
About my last posting: I discovered that the Voltcraft firmwares are the same as the Hantek ones and I simply used the version for the 200Mhz model, all went without problems, but I have no idea what has changed....I guess some bugs were fixed like menus etc. It’s annoying that there are no logs that show what changes have been made....o well...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: robert.rozee on June 21, 2020, 05:59:27 pm
i'm posting to this thread as it seems to be the place where all Hantek DSO5xxxP discussion goes on - hopefully no one minds what is a bit of an off-topic request!

i've got a Hantek DSO5072P (actually a 5102) with very blown switchmode power supply here, that belongs to a friend of mine. while repairing the power supply isn't impossible, i've been discussing with him the idea of converting the scope to battery operation instead of attempting any repair; cheap switchmodes are cantankerous devices at best, and it strikes me that battery operation may well be more useful.

for photos of the same PSU as i'm working with, with an identical failure mode, see this thread:
https://www.eevblog.com/forum/repair/hantek-dso5072p-power-issue/ (https://www.eevblog.com/forum/repair/hantek-dso5072p-power-issue/)


so... if anyone reading this has a DSO5000P series scope that they have opened up, i'd be very keen to find out what the approximate current draw on the various supply rails is, these being: +14v, -8v (analog), +5v, +3v3 (digital).

the PSU is labelled as:
"DSO5000 SERIES POWER
Data: 3013/05
Ver 1.0",
indicating perhaps a hw version 1010?


my thinking is that in theory it should be possible to simply cobble together something based upon buck/boost modules from ebay: a 7.2v NiMh battery pack (6-cells) bucked down to 5v with a LM2596 module, and then a linear regulator down to 3v3. a small +/-12v module swinging about 3v3 could then give +15.3v/-8.7v for the analog stuff, provided the current requirement is suitably low.


many thanks for any info about the current draw from DSO5072P series owners.

cheers,
rob   :-)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Lesheg on June 23, 2020, 08:40:11 pm
Hello. After an unsuccessful firmware update of my DSO 5102B hw1010, I restored it through JTAG. In H-Flasher I chose the type: main-only, since my backup does not contain oob data. I tried after this a nandump without -o key, and oob data blocks contain only FF. But the scope now is working. Can something happen to my device in the future after such recovery without oob data?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: nakunda on July 02, 2020, 03:31:47 pm
anyone knows the hw version or pcb version to use with the DSO tool for DSO8202E?
accidentally written 1007
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: nakunda on July 03, 2020, 01:38:34 pm
found.

DSO8202E,sw version 3.2.35(171121.0),hw version 1080*900383eb04
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: david.ercoli on July 07, 2020, 09:42:22 pm
Hello group:

I recently bought a Hantek oscilloscope model Dso4104b.

My question is, do you know if there is a hack for these model?

Thank you, best regards!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Microcheap on July 07, 2020, 11:18:24 pm
Hello group:

I recently bought a Hantek oscilloscope model Dso4104b.

My question is, do you know if there is a hack for these model?

Thank you, best regards!

Yes, check this thread: https://www.eevblog.com/forum/testgear/upgrading-the-hantek-dso4072c-osciloscope-bandwidth-from-70mhz-to-200mhz/ (https://www.eevblog.com/forum/testgear/upgrading-the-hantek-dso4072c-osciloscope-bandwidth-from-70mhz-to-200mhz/)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Evgeni62 on July 20, 2020, 09:10:23 am
Hello to all! Did anyone manage to run it on DSO5102B LAN - so that it would work? Thank.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Evgeni62 on July 22, 2020, 12:05:15 pm
Those of you that have done the LAN mod do you happen to have the part number for the ethernet port? Besides the PHY are there any other parts needed?

Amphenol RJHSE-5381
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mhi on July 29, 2020, 11:07:14 pm
I am considering purchase of some new low-end scope to space on my desk. Either some Hantek or Micsig tBook ("tablet" scope). One of things I would like to try to do is to modify the "main scope app" (firmware) to do some additional jobs. I have not digged into this yet, just looked at some firmware dumps. For Micsig scopes I have "oscillo_pad" Linux executable with full debug symbols (which is linked against Qt btw), making it quite easy to analyze. I am looking for dso.exe with enabled debug symbols, has anyone got such file ?

Also is there any info about Hantek/Micsig FPGAs available, at least how are they connected in the system?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mzs66 on August 07, 2020, 10:43:02 am
Hi All,

could anybody share or send me the Hantek Rescue tool?

Thanks in advance
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: veskon on September 02, 2020, 01:18:52 pm
Hello! I need your help.
My DSO5062B was broken when it was connected to bad power soket. DSO turned on and off 1-2minutes. And now DSO is stoped in the middle of the start initialization.
I found this guide for firmware fixing https://marcowuen.wordpress.com/2013/09/01/dso-hacking-quick-guide-voltcraft-dso3062c-hantek-dso5062b-tekway-dst1062b/ and I got the next report:

//////////////
***ARM CPU 400MHz BUS 100MHz (DST1000B bootloader)****(091102)
Tekway Bootloader (modify from mizi vivi)v0.10.0 (root@rain-fc4) (gcc version 2.95.3 20010315 (release)) #0.1.4 Tue Dec 1 10:51:38 CST 2009
UPLLCON  : 0x56022
MMU table base address = 0x33DFC000
NAND device: Manufacture ID: 0xec, Chip ID: 0x76 (Samsung K9D1208V0M)
Found default  parameters
GPfcon :0x5555
Press Return to start the LINUX now, any other key for Bootloader
from : 0x50000, size :0x200000, media_type:0x3
done
zImage magic = 0x016f2818
Setup linux parameters at 0x30000100
linux command line is: "noinitrd root=/dev/mtdblock2 init=/linuxrc console=ttySAC0"
MACH_TYPE = 782
NOW, Booting Linux......
Uncompressing Linux... done, booting the kernel.
Linux version 2.6.13 (root@rain-fc4) (gcc version 3.4.1) #3 Wed Jun 29 10:13:03 CST 2011
CPU: ARM920Tid(wb) [41129200] revision 0 (ARMv4T)
Machine: QQ2440
ATAG_INITRD is deprecated; please update your bootloader.
Memory policy: ECC disabled, Data cache writeback
CPU S3C2440A (id 0x32440001)
BUG: mapping for 0x19000000 at 0xd0000000 overlaps vmalloc space
S3C2440: core 405.000 MHz, memory 101.250 MHz, peripheral 50.625 MHz
S3C2410 Clocks, (c) 2004 Simtec Electronics
CPU0: D VIVT write-back cache
CPU0: I cache: 16384 bytes, associativity 64, 32 byte lines, 8 sets
CPU0: D cache: 16384 bytes, associativity 64, 32 byte lines, 8 sets
Built 1 zonelists
Kernel command line: noinitrd root=/dev/mtdblock2 init=/linuxrc console=ttySAC0
irq: clearing pending ext status 0000c000
irq: clearing subpending status 00000002
PID hash table entries: 512 (order: 9, 8192 bytes)
timer tcon=00000000, tcnt a4ca, tcfg 00000200,00000000, usec 00001e57
Console: colour dummy device 80x30
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Memory: 64MB = 64MB total
Memory: 61184KB available (2499K code, 1009K data, 100K init)
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
NET: Registered protocol family 16
USB Power Control, (c) 2004 Simtec Electronics
S3C2440: Initialising architecture
S3C2440: IRQ Support
S3C2440: Clock Support, UPLL 48.000 MHz
SCSI subsystem initialized
usbcore: registered new driver hub
S3C2410 DMA Driver, (c) 2003-2004 Simtec Electronics
DMA channel 0 at c4800000, irq 33
DMA channel 1 at c4800040, irq 34
DMA channel 2 at c4800080, irq 35
DMA channel 3 at c48000c0, irq 36
NetWinder Floating Point Emulator V0.97 (double precision)
devfs: 2004-01-31 Richard Gooch (rgooch@atnf.csiro.au)
devfs: boot_options: 0x1
yaffs Jun 29 2011 10:09:19 Installing.
Initializing Cryptographic API
Console: switching to colour frame buffer device 100x30
S3C24X0 fb0: s3c2410fb frame buffer device initialize done
GPIO L3 bus interface for S3C2440, installed
S3C2410 RTC, (c) 2004 Simtec Electronics
s3c2410-rtc s3c2410-rtc: rtc disabled, re-enabling
s3c2410_serial0 at MMIO 0x50000000 (irq = 70) is a S3C2440
s3c2410_serial1 at MMIO 0x50004000 (irq = 73) is a S3C2440
s3c2410_serial2 at MMIO 0x50008000 (irq = 76) is a S3C2440
io scheduler noop registered
io scheduler anticipatory registered
io scheduler deadline registered
io scheduler cfq registered
RAMDISK driver initialized: 16 RAM disks of 4096K size 1024 blocksize
loop: loaded (max 8 devices)
nbd: registered device at major 43
Cirrus Logic CS8900A driver for Linux (Modified for SMDK2410)
eth0: incorrect signature 0x0000
Linux video capture interface: v1.00
ovcamchip: v2.27 for Linux 2.6 : OV camera chip I2C driver
Uniform Multi-Platform E-IDE driver Revision: 7.00alpha2
ide: Assuming 50MHz system bus speed for PIO modes; override with idebus=xx
S3C24XX NAND Driver, (c) 2004 Simtec Electronics
s3c2410-nand: mapped registers at c4880000
30 ns is too big for current clock rate 101250
s3c2410-nand: timing: Tacls 0ns, Twrph0 4294ns, Twrph1 0ns
NAND device: Manufacturer ID: 0xec, Chip ID: 0x76 (Samsung NAND 64MiB 3,3V 8-bit)
NAND_ECC_NONE selected by board driver. This is not recommended !!
Scanning device for bad blocks
Creating 3 MTD partitions on "NAND 64MiB 3,3V 8-bit":
0x00000000-0x00030000 : "bootloader"
0x00050000-0x00250000 : "kernel"
0x00250000-0x03ffc000 : "root"
s3c2410-ohci s3c2410-ohci: S3C24XX OHCI
s3c2410-ohci s3c2410-ohci: new USB bus registered, assigned bus number 1
s3c2410-ohci s3c2410-ohci: irq 42, io mem 0x49000000
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 2 ports detected
Initializing USB Mass Storage driver...
usbcore: registered new driver usb-storage
USB Mass Storage support registered.
usbcore: registered new driver usbhid
drivers/usb/input/hid-core.c: v2.01:USB HID core driver
usbcore: registered new driver ov511
drivers/usb/media/ov511.c: v1.64 for Linux 2.5 : ov511 USB Camera Driver
usbcore: registered new driver gspca
drivers/usb/media/gspca/gspca_core.c: gspca driver 00.60.00 registered
mice: PS/2 mouse device common for all mice
ts: Compaq touchscreen protocol output
s3c2410 TouchScreen successfully loaded
i2c /dev entries driver
S3C2410_GPECON : 0Xa00002aa , S3C2410_GPEUP: 0X0
rIICCON :0Xaf
open driver log file error!!
dso-i2c: xx install ok
SBC2440 SOUND driver register
SBC2440 SOUND driver probe!
SBC2440 UDA1341 audio driver initialized
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 4096 (order: 3, 32768 bytes)
TCP bind hash table entries: 4096 (order: 2, 16384 bytes)
TCP: Hash tables configured (established 4096 bind 4096)
TCP reno registered
TCP bic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
yaffs: dev is 32505858 name is "mtdblock2"
yaffs: Attempting MTD mount on 31.2, "mtdblock2"
VFS: Mounted root (yaffs filesystem).
Mounted devfs on /dev
Freeing init memory: 100K
rm: can't remove '/usr/udisk-flag': No such file or directory
CPU 400MHZ BUS 100MHZ
dso-iobank: install ok
<k>hantek_DSO5062B
dso-lcd installed lcd module ok
Segmentation fault
kobject_register failed for usb_storage (-17)
insmod: can't insert '/dso/driver/dso-usbstorage.ko': File exists
usb_device: module license 'unspecified' taints kernel.
S3C2410 USB Controller Core Initialized
USB Function Character Driver Interface - 0.5, (C) 2001, Extenex Corp.
usbctl: Opened for usb-char
usbctl: Started for usb-char
usbcore: registered new driver usblp
drivers/dso_drivers/usblp.c: v0.13: USB Printer Device Class driver
bwscon:0x2211d110
fpga bank 11811
dso-fpga: install ok
kobject_register failed for s3c2440-i2c (-17)
dso-i2c: can't register device
insmod: can't insert '/dso/driver/dso-i2c.ko': Device or resource busy
x gpio e: 0xaa0002a6, gpio g :0xfd62f19a , gdata:0x6f8f
dso-spi: install ok
dso-uart: install ok
dso-buzzer: install ok
Segmentation fault
Segmentation fault
no update file to foud
now run app .....
Segmentation fault

Please press Enter to activate this console.
//////////////

DSO still doesn't work and I have no idea how fix it. Please help!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Microcheap on September 04, 2020, 12:45:52 am
DSO still doesn't work and I have no idea how fix it. Please help!

When these oscilloscopes are turned off during boot the file system can get corrupted and it will hang during initialization. Have you already tried to restore the system?
See this msg in Hantek's forum for reference: https://www.eediscuss.com/forum.php?mod=redirect&goto=findpost&ptid=15009&pid=19633&fromuid=26055 (https://www.eediscuss.com/forum.php?mod=redirect&goto=findpost&ptid=15009&pid=19633&fromuid=26055)

If the restoration process fail, simply send an e-mail to Hantek's support that they will send you the files to recover the partition.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Yhoni on October 13, 2020, 03:49:57 am
Hello, I have been able to modify the speed of my Hantek DSO5102P to 200Mhz.

Everything works correctly.  :-+

Thanks to the information and work that you share.

Thank you very much. :)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Perepandel on October 22, 2020, 09:57:30 am
Hi! I registered exclusively to ask if anyone knows about the "new" supposed Hantek models (DSO2X1X), which I've seen around in AliExpress and appear to be a huge improvement over the DSO5XX2 models, mainly in terms of memory (8M) and including an integrated function generator (only D models), as well as serial decoding.

I've purchased myself one of those, but unfortunately only the 100 MHz was available (DSO2D10) and I didn't want to miss what looked like a good deal. I wish it could be hacked also, as my goal was the 150 MHz model (DSO2D15).

Anything regarding both general info about these models and/or with their hacking process will be much appreciated  ^-^
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: xthanhn on November 11, 2020, 05:00:31 am
Hi,

I have just updated my Hantek DSO1062B handheld with the newest firmware from hantek's site 2.01.1 (130129.0) and discovered several bugs (when beep is on and you move cursor, it beeps even if you push and hold the direction buttons, trigger level is erratic - it sets lower trigger level than indicated), and I want to go back to the older firmware.

Does anyone have a firmware older than 2.01.1 (130129.0)? My older was 2.01.1 (12xxxxx.x), and it was OK, more or less, but I don't have it anymore and I cannot revert back to it.

Thanks.

Hi sparkybg ,
My DSO1062B has brick, I dont know how to recover device by firmware backup (boot.bin, kernel.bin, root.bin, root2.bin) because it is different than other DSO. Do you have fw_backup.bin file? Could you please share it to me?

Thank a lot.
Michael
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Freeze on November 17, 2020, 05:00:22 pm
Hey guys, nice to see, that this thread is still active!

After several years, now I'm experiencing some problems with my Hantek DSO-5062B...
The buttons on the front are not working any more.

During boot, shortly an error message box appears:
"Hardware Init Error Code 0x01"

I didn't make any changes onto the software. This problem occured suddenly.

My first try was to open the device and reinsert all cables. Didn't help.
Second try was to reflash my firmware backup using UART/USB, but that didn't help either.

Now I would like to update the firmware, but I'm stuck.
The normal firmware update process works using the onscreen utility, but - as already stated - my buttons are not working.
Any idea how I can flash this firmware (http://www.hantek.com/Product/DSO5000/DSO5062B_Firmware.zip) using UART/USB?
This file seems to be only a part of the whole firmware, since the original firmware has 66MB.
So I'm not sure which files I need to combine to have a complete firmware which I can flash using supervivi.


/e: Update...
I was able to decrypt the firmware using password "dst5000b".
Afterwards I unzipped and copied all files to USB flash drive.
Inserted the drive and manually updated the device by processing all steps listed in do_update.sh manually.
"dso.exe" and "dsod" cannot be started now, though both files are 777 and +x.
Seems the firmware is not compatible O,o

I noticed: Old dso.exe has 4MB and new one has only 1.5MB... strange.
But.. I don't think this is a software problem. This is just my last resort xD
Maybe I try to remove the whole keyboard unit to see if there are obvious problems.

Hm.. just noticing. Maybe it's no problem with the keyboard but a general problem with dso.exe or the scope itself. Because I can't see any waveforms (even with the test signal). The screen seems to be frozen.
No idea what may be the root cause...

I fear I will switch to Rigol DS1054Z...
https://geizhals.de/rigol-ds1054z-digital-oszilloskop-a1218892.html (https://geizhals.de/rigol-ds1054z-digital-oszilloskop-a1218892.html)

/e: I've created a thread on eediscuss.com:
https://www.eediscuss.com/forum.php?mod=viewthread&tid=15326&extra=page%3D1 (https://www.eediscuss.com/forum.php?mod=viewthread&tid=15326&extra=page%3D1)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: xthanhn on November 19, 2020, 12:21:25 pm
Hey guys, nice to see, that this thread is still active!

After several years, now I'm experiencing some problems with my Hantek DSO-5062B...
The buttons on the front are not working any more.

During boot, shortly an error message box appears:
"Hardware Init Error Code 0x01"

I didn't make any changes onto the software. This problem occured suddenly.

My first try was to open the device and reinsert all cables. Didn't help.
Second try was to reflash my firmware backup using UART/USB, but that didn't help either.

Now I would like to update the firmware, but I'm stuck.
The normal firmware update process works using the onscreen utility, but - as already stated - my buttons are not working.
Any idea how I can flash this firmware (http://www.hantek.com/Product/DSO5000/DSO5062B_Firmware.zip) using UART/USB?
This file seems to be only a part of the whole firmware, since the original firmware has 66MB.
So I'm not sure which files I need to combine to have a complete firmware which I can flash using supervivi.


/e: Update...
I was able to decrypt the firmware using password "dst5000b".
Afterwards I unzipped and copied all files to USB flash drive.
Inserted the drive and manually updated the device by processing all steps listed in do_update.sh manually.
"dso.exe" and "dsod" cannot be started now, though both files are 777 and +x.
Seems the firmware is not compatible O,o

I noticed: Old dso.exe has 4MB and new one has only 1.5MB... strange.
But.. I don't think this is a software problem. This is just my last resort xD
Maybe I try to remove the whole keyboard unit to see if there are obvious problems.

Hm.. just noticing. Maybe it's no problem with the keyboard but a general problem with dso.exe or the scope itself. Because I can't see any waveforms (even with the test signal). The screen seems to be frozen.
No idea what may be the root cause...

I fear I will switch to Rigol DS1054Z...
https://geizhals.de/rigol-ds1054z-digital-oszilloskop-a1218892.html (https://geizhals.de/rigol-ds1054z-digital-oszilloskop-a1218892.html)

/e: I've created a thread on eediscuss.com:
https://www.eediscuss.com/forum.php?mod=viewthread&tid=15326&extra=page%3D1 (https://www.eediscuss.com/forum.php?mod=viewthread&tid=15326&extra=page%3D1)
Nice try, just contact caiyijun@hantek.com he/she will give you factory file to reflash.
Rigol DS1054z is good, I have had one, can make it from 50mhz to 100mhz with some easy command.
good luck!

My DSO1062B after brick  >:D >:D >:D
[attachimg=1]
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Freeze on November 19, 2020, 04:33:16 pm
Nice try, just contact caiyijun@hantek.com he/she will give you factory file to reflash.
Rigol DS1054z is good, I have had one, can make it from 50mhz to 100mhz with some easy command.
good luck!

My DSO1062B after brick  >:D >:D >:D
(Attachment Link)
Thanks for the answer!
But do you really think this might be solved by reflashing the firmware? I don't think so..
I already flashed the backup I made 8 years ago. This was the original firmware.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sim_v on December 01, 2020, 07:09:33 am
Hi,

I've got a KKmoon DSO5102P and update with the latest firmware from Hantek (firmware 20201009...).
After some exploration of this new device, I notice that Main Time Base is always identical to Window Time Base (in single or dual view mode).
Is it a bug ?

Note : 100Mhz limit capacitors are present on my unit.

-Simon-
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Perepandel on December 04, 2020, 11:11:24 am
Hello, I have been able to modify the speed of my Hantek DSO5102P to 200Mhz.

Everything works correctly.  :-+

Thanks to the information and work that you share.

Thank you very much. :)

No one replying to this...

I just want to say that I got a firmware update for the Hantek 150 Mhz model DSO2D15. In case anyone wants to try to flash an inferior device of the same series (DSO2X1X), let me know...  ;D
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Piton on December 05, 2020, 08:24:59 pm
Hi Perepandel. I'm also waiting for DSO2С10, bought at a discount, and would like to know what has changed in the new firmware, languages have been added, or is it still only English and Chinese? It is hardly possible to flash my oscilloscope with your firmware with a generator without additional modification. Where did you get the firmware? I asked the seller, but so far there is no specific answer.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Perepandel on December 15, 2020, 03:06:02 pm
Hi Perepandel. I'm also waiting for DSO2С10, bought at a discount, and would like to know what has changed in the new firmware, languages have been added, or is it still only English and Chinese? It is hardly possible to flash my oscilloscope with your firmware with a generator without additional modification. Where did you get the firmware? I asked the seller, but so far there is no specific answer.

Hi Piton,

Haven't tested it yet, but after asking them about the improvements that's what they told me:

Quote
Modified the square wave output waveform problem of the signal source and the display problem of the measurement font.

Regarding the firmware update not working on your machine, I wouldn't hold my breath on it. Are you aware which thread are you in? This is devoted to people updating their Hanteks with more advanced machines' firmwares, enabling these features on them...

I wouldn't be surprised if the hardware was absolutely the same, including the function generator feature. But of course, that's just pure especulation until someone tries it...  ::)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Piton on December 15, 2020, 06:50:08 pm
Thank you, Perepandel. I will soon receive, probably, a very long delivery, almost 2 months already. The seller promised to help with the new firmware.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gcs190 on December 20, 2020, 09:10:31 am
I just saw on the hantek page that on December 9 the firmware available for the DSO-8000E was updated, I leave a link here:

http://www.hantek.com/DownLoad?key=zxgj&sid=1&pid=159&word= (http://www.hantek.com/DownLoad?key=zxgj&sid=1&pid=159&word=)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gcs190 on December 20, 2020, 07:37:16 pm
Updated, in the absence of a thorough test:

The modification to have the bandwidth of 200Mhz still works.

The version has changed from 3.2.35 (171121.0) to 3.2.35 (191226.0)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gcs190 on December 20, 2020, 08:15:18 pm
At the firmware level, I have only found the Chinese and Japanese language files and the dso_bin modified
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: rlohmann on January 22, 2021, 04:19:50 pm
Hi,

I got a faulty DSO5072P ("T 1G/035 001389" labeled on the back) with "no display".
I attached a FTDI adapter and found the following output:

Code: [Select]
*** Warning - bad CRC or NAND, using default environment


##### EmbedSky BIOS for SKY2416/TQ2416 #####
This Board: SDRAM is 64MB; LCD display size is: 800 X 480
Press Space key to Download Mode.!
SD:File System init failed!
Start Linux ...

NAND read: device 0 offset 0x300000, size 0x400000
 4194304 bytes read: OK
Boot with zImage

Starting kernel ...

Uncompressing Linux... done, booting the kernel.
(... nothing more at this point)

I guess the NAND is corrupt. (Dont't now what happened to the unit before)

Of course, I have no backup files.

Maybe someone could help me with some dump files to recover the NAND.
Btw, is there a way I could read out/capture the remaining NAND content and perhaps extract the unit-related pieces?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: atoll on March 02, 2021, 11:48:54 am
Hi! I need help. Updated oscilloscope DSO5102B with firmware dso5kb_func_dso5102b20190830.up - only the splash screen is loaded. Before that, dso5kb_func_dso5202b20180226.up was updated normally
Previous system information:
sw 3.33.0 (140902.0)
hw 1010 / 5555830F
Give a link for recovery via the console. If there is, you can throw a dump to the mail.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: fubgumfaw on March 03, 2021, 01:45:44 am
Hi! I need help. Updated oscilloscope DSO5102B with firmware dso5kb_func_dso5102b20190830.up - only the splash screen is loaded. Before that, dso5kb_func_dso5202b20180226.up was updated normally
Previous system information:
sw 3.33.0 (140902.0)
hw 1010 / 5555830F
Give a link for recovery via the console. If there is, you can throw a dump to the mail.

I have not read through this entire thread yet, but I think everything you need to know to recover your scope is here...just keep reading...
I have a DSO1062B coming. No idea it's firmware state, but I'm sure I'll want to hack it.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Blindelinx on March 03, 2021, 08:47:26 pm
Hi everyone,

after reading for about 8 hours and still not finding the answer I thought I try and ask you guys for help...

I work as a physics teacher in the netherlands and we have a digital scope (Voltcraft DSO-1102D). After attempting to update the firmware through the website of Voltcraft the scope freezes in the startup logo. I read a lot of you had the same issue and I understand that there is a way to update the firmware through serial but I have no Idea how to do this...

I read in the thread the way to serial read (*hope I say it right) the scope and I'm at the point that I am getting info through the serial after startup. The problem is; I don't hava any experience with linux programming... So I can enter the scope through PuTTy but have absolutely no idea what to do next.

I really hope anyone can help me... Thanks a million for your time already!

Have a great day! Hugo van Loenen



This is the read-out I get in PuTTy:
-----------------------------------------------------------------------------------------------------
*** Warning - bad CRC or NAND, using default environment

##### EmbedSky BIOS for SKY2416/TQ2416 #####
This Board: SDRAM is 64MB; LCD display size is: 800 X 480
Press Space key to Download Mode.!
SD:File System init failed!
Start Linux ...

NAND read: device 0 offset 0x300000, size 0x400000
 4194304 bytes read: OK
Boot with zImage

Starting kernel ...

Uncompressing Linux... done, booting the kernel.
Linux version 3.2.35 (root@zgt) (gcc version 4.3.3 (Sourcery G++ Lite 2009q1-176) ) #109 PREEMPT Wed Mar 5 03:45:30 CST 2014
CPU: ARM926EJ-S [41069265] revision 5 (ARMv5TEJ), cr=00053177
CPU: VIVT data cache, VIVT instruction cache
Machine: SMDK2416
Memory policy: ECC disabled, Data cache writeback
CPU S3C2416/S3C2450 (id 0x32450003)
S3C24XX Clocks, Copyright 2004 Simtec Electronics
CPU: MPLL on 800.000 MHz, cpu 400.000 MHz, mem 133.333 MHz, pclk 66.666 MHz
CPU: EPLL on 96.000 MHz, usb-bus 48.000 MHz
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
Kernel command line: noinitrd ubi.mtd=3 root=ubi0:rootfs rootfstype=ubifs init=/linuxrc console=ttySAC0 mem=64M
PID hash table entries: 256 (order: -2, 1024 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 64MB = 64MB total
Memory: 58996k/58996k available, 6540k reserved, 0K highmem
Virtual kernel memory layout:
    vector  : 0xffff0000 - 0xffff1000   (   4 kB)
    fixmap  : 0xfff00000 - 0xfffe0000   ( 896 kB)
    vmalloc : 0xc4800000 - 0xf6000000   ( 792 MB)
    lowmem  : 0xc0000000 - 0xc4000000   (  64 MB)
    modules : 0xbf000000 - 0xc0000000   (  16 MB)
      .text : 0xc0008000 - 0xc03ef000   (3996 kB)
      .init : 0xc03ef000 - 0xc040f000   ( 128 kB)
      .data : 0xc0410000 - 0xc05a8fa0   (1636 kB)
       .bss : 0xc05a8fc4 - 0xc05c6cfc   ( 120 kB)
SLUB: Genslabs=13, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
NR_IRQS:107
irq: clearing subpending status 00000002
Calibrating delay loop... 198.45 BogoMIPS (lpj=496128)
pid_max: default: 4096 minimum: 301
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
NET: Registered protocol family 16
S3C2416: Initializing architecture
S3C2416: IRQ Support
S3C24XX DMA Driver, Copyright 2003-2006 Simtec Electronics
DMA channel 0 at c4804000, irq 88
DMA channel 1 at c4804100, irq 89
DMA channel 2 at c4804200, irq 90
DMA channel 3 at c4804300, irq 91
DMA channel 4 at c4804400, irq 92
DMA channel 5 at c4804500, irq 93
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
s3c-i2c s3c2410-i2c: slave address 0x10
s3c-i2c s3c2410-i2c: bus frequency set to 9 KHz
s3c-i2c s3c2410-i2c: i2c-0: S3C I2C adapter
Advanced Linux Sound Architecture Driver Version 1.0.24.
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
NET: Registered protocol family 1
RPC: Registered named UNIX socket transport module.
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
RPC: Registered tcp NFSv4.1 backchannel transport module.
s3c-adc s3c24xx-adc: attached adc driver
msgmni has been set to 115
io scheduler noop registered (default)
io scheduler cfq registered
s3c-fb s3c-fb: window 0: fb
s3c-fb s3c-fb: LCD type is TN83 800*480, default_bpp=16, pixclock=5
s3c2440-uart.0: ttySAC0 at MMIO 0x50000000 (irq = 70) is a S3C2440
console [ttySAC0] enabled
s3c2440-uart.1: ttySAC1 at MMIO 0x50004000 (irq = 73) is a S3C2440
s3c2440-uart.2: ttySAC2 at MMIO 0x50008000 (irq = 76) is a S3C2440
s3c2440-uart.3: ttySAC3 at MMIO 0x5000c000 (irq = 94) is a S3C2440
loop: module loaded
S3C24XX NAND Driver, (c) 2004 Simtec Electronics
info->cpu_type=3, tacls_max=8
s3c24xx-nand s3c2416-nand: Tacls=3, 22ns Twrph0=7 52ns, Twrph1=3 22ns
s3c24xx-nand s3c2416-nand: System booted from NAND
s3c24xx-nand s3c2416-nand: NAND ECC disabled
NAND device: Manufacturer ID: 0xec, Chip ID: 0xf1 (Samsung NAND 128MiB 3,3V 8-bit)
NAND_ECC_NONE selected by board driver. This is not recommended!
Scanning device for bad blocks
Creating 4 MTD partitions on "NAND":
0x000000000000-0x000000100000 : "Bootloader"
0x000000100000-0x000000300000 : "LOGO"
0x000000300000-0x000000700000 : "Kernel"
0x000000700000-0x000008000000 : "ROOTFS"
UBI: attaching mtd3 to ubi0
UBI: physical eraseblock size:   131072 bytes (128 KiB)
UBI: logical eraseblock size:    126976 bytes
UBI: smallest flash I/O unit:    2048
UBI: VID header offset:          2048 (aligned 2048)
UBI: data offset:                4096
UBI: max. sequence number:       1190
UBI: attached mtd3 to ubi0
UBI: MTD device name:            "ROOTFS"
UBI: MTD device size:            121 MiB
UBI: number of good PEBs:        968
UBI: number of bad PEBs:         0
UBI: number of corrupted PEBs:   0
UBI: max. allowed volumes:       128
UBI: wear-leveling threshold:    4096
UBI: number of internal volumes: 1
UBI: number of user volumes:     1
UBI: available PEBs:             0
UBI: total number of reserved PEBs: 968
UBI: number of PEBs reserved for bad PEB handling: 9
UBI: max/mean erase counter: 3/2
UBI: image sequence number:  0
UBI: background thread "ubi_bgt0d" started, PID 308
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
s3c2410-ohci s3c2410-ohci: S3C24XX OHCI
s3c2410-ohci s3c2410-ohci: new USB bus registered, assigned bus number 1
s3c2410-ohci s3c2410-ohci: irq 42, io mem 0x49000000
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
usbcore: registered new interface driver usblp
usbcore: registered new interface driver uas
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
g_serial gadget: Gadget Serial v2.4
g_serial gadget: g_serial ready
s3c-hsudc s3c-hsudc: bound driver g_serial
samsung-ts s3c2416-ts: driver attached, registering input device
input: S3C24XX TouchScreen as /devices/virtual/input/input0
S3C24XX RTC, (c) 2004,2006 Simtec Electronics
s3c-rtc s3c2410-rtc: rtc disabled, re-enabling
s3c-rtc s3c2410-rtc: rtc core: registered s3c as rtc0
i2c /dev entries driver
S3C2410 Watchdog Timer, (c) 2004 Simtec Electronics
s3c2410-wdt s3c2410-wdt: watchdog inactive, reset disabled, irq disabled
sdhci: Secure Digital Host Controller Interface driver
sdhci: Copyright(c) Pierre Ossman
s3c-sdhci s3c-sdhci.1: clock source 0: hsmmc (133333333 Hz)
s3c-sdhci s3c-sdhci.1: clock source 1: hsmmc (133333333 Hz)
s3c-sdhci s3c-sdhci.1: clock source 2: hsmmc-if (24000000 Hz)
mmc0: SDHCI controller on samsung-hsmmc [s3c-sdhci.1] using ADMA
S3C24XX_UDA134X SoC Audio driver
UDA134X SoC Audio Codec
asoc: uda134x-hifi <-> s3c24xx-iis mapping ok
ALSA device list:
  #0: S3C24XX_UDA134X
TCP cubic registered
NET: Registered protocol family 17
Registering the dns_resolver key type
s3c-rtc s3c2410-rtc: setting system clock to 2000-01-01 01:59:40 UTC (946691980)
UBIFS: recovery needed
UBIFS: recovery completed
UBIFS: mounted UBI device 0, volume 0, name "rootfs"
UBIFS: file system size:   119865344 bytes (117056 KiB, 114 MiB, 944 LEBs)
UBIFS: journal size:       9023488 bytes (8812 KiB, 8 MiB, 72 LEBs)
UBIFS: media format:       w4/r0 (latest is w4/r0)
UBIFS: default compressor: lzo
UBIFS: reserved for root:  0 bytes (0 KiB)
VFS: Mounted root (ubifs filesystem) on device 0:10.
Freeing init memory: 128K
dso-iobank: install ok
adc init
TQ2416 ADC driver
0x505
gpio_major_n = 5, io_minor_n = 5, output 0
0x603
gpio_major_n = 6, io_minor_n = 3, output 0
0x70a
gpio_major_n = 7, io_minor_n = 10, output 0
0x408
gpio_major_n = 4, io_minor_n = 8, output 1
dso5000b fpga configure init
fpga0:status: 0x0
FPGA0 CONFIGURE DATA DOWN finish.
FPGA0 CONFIGURE Ok.
0x8090
0x1
fpga bank 11811dso-fpga: install ok
bkl tq2416-backlight initialized done...
close beep now
dso-buzzer s3c2416-beep initialized done...
--------------------------------------------------------------------------------
start
--------------------------------------------------------------------------------

Please press Enter to activate this console. /dso.exe: error while loading shared libraries: libgstreamer-1.0.so.0: cannot open shared object file: No such file or directory

[root@Hantek ~]#
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Microcheap on March 04, 2021, 04:05:47 am
When these oscilloscopes are turned off during boot the file system can get corrupted and it will hang during initialization. Have you already tried to restore the system?
See this msg in Hantek's forum for reference: https://www.eediscuss.com/forum.php?mod=redirect&goto=findpost&ptid=15009&pid=19633&fromuid=26055 (https://www.eediscuss.com/forum.php?mod=redirect&goto=findpost&ptid=15009&pid=19633&fromuid=26055)

If the restoration process fail, simply send an e-mail to Hantek's support that they will send you the files to recover the partition.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatel on March 04, 2021, 11:15:50 am
Hi blindelinx

Last line says libgstreamer library is not found. I think it should be included into the upgrade image So I think your update is somewhat corrupted. On a PC, it will be a matter of installing the package that has that library inside. But that  just doesn't make sense when you are upgrading an embedded system as the case is.  The upgrade image is supposed to have all that's needed for the system to work flawlessly.

As far as I can see in the bootlog you send, linux kernel is booting ok. It is just when triyng to open the dso.exe file -the one that makes your system work as a DSO- that the gstreamer library (a multimedia one) is missed. Since the embedded upgrades usually pop in at the beginning of the boot process,  you have quite a good chance of installing a new update the usual way. No need to fiddle with the linux shell.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Blindelinx on March 04, 2021, 01:28:54 pm
Hi Tatel,

thanks for your reply! I also noticed the corruption in the libg library. The problem is that I update the device with a firmware from Voltcraft (which I later read was a problem for multiple people (same result, bricked firmware)). I updated through the normal updating procedure (on the screen of the scope) but because of the freezing on the logo screen I can't re-apply a new firmware that way...

What I'm trying to say is that I have absolutely no idea how to start an update from a USB-stick on the machine through the serial connection (PuTTy)
Im missing the right commands to start the machine to copy/extract/update a firmware through a USB stick without using the standard procedure (on screen of scope)...

I tried looking for the right commands to start the upgrade/downgrade for my machine though Serial connection, but I couldnt find that... The USB is recognized by the machine thou, cause when I enter the stick while on serial monitoring I get a message that the stick is being placed and recognized...

-------------------------------------------------------------------
usb 1-1: new full-speed USB device number 2 using s3c2410-ohci
scsi0 : usb-storage 1-1:1.0
scsi 0:0:0:0: Direct-Access     TOSHIBA  TransMemory      1.00 PQ: 0 ANSI: 4
sd 0:0:0:0: [sda] 30274560 512-byte logical blocks: (15.5 GB/14.4 GiB)
sd 0:0:0:0: [sda] Write Protect is off
sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, doesn't support DPO or FUA
 sda: sda1
sd 0:0:0:0: [sda] Attached SCSI removable disk
-------------------------------------------------------------------

just have no idea how to start the install....

thanks so much for your time! Have a great day! greetings Hugo
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatel on March 04, 2021, 02:52:56 pm
Quote
Im missing the right commands to start the machine to copy/extract/update a firmware through a USB stick without using the standard procedure (on screen of scope)...

I understand.

Please note my post accounting. While I have about two decades of experience in linux, I don't own any oscilloscope yet. I'm looking for my first one; that's the reason I registered into this forum.

So even if you bricked the scope, please keep calm; I could be interested in that brick >:D

Unfortunately I know nothing about the quirks of your specific system so I don't know which name has the executable you need. Your best bet is to  look for the information you need on the forum, or ask the seller.

For basic knowledge about linux command line interface, see:
https://www.linux.com/training-tutorials/how-use-linux-command-line-basics-cli/ (https://www.linux.com/training-tutorials/how-use-linux-command-line-basics-cli/)

And these are the commands usually available on busybox's shell:
https://boxmatrix.info/wiki/BusyBox-Commands (https://boxmatrix.info/wiki/BusyBox-Commands)

Hope this helps

PS: many busybox-based router can be unbricked by restarting while pressing some button; then the system looks for the upgrade file automagically at boot
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Martin.M on March 04, 2021, 05:55:09 pm
hello friends.
can anyone explain me how to connect the 1202B to the PC software by USB?
I make anything wrong. The scope is new, no mods, payed 200mc.
greetings
Martin

[attachimg=1]
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatel on March 05, 2021, 04:48:39 am
@blindelinx

You could try this:

https://www.eevblog.com/forum/repair/voltcraft-dso-1102d/msg2036896/#msg2036896 (https://www.eevblog.com/forum/repair/voltcraft-dso-1102d/msg2036896/#msg2036896)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Mark5 on March 06, 2021, 02:05:25 pm
Done !
100% software solution.

Unfortunately, my 2C10 doesn't have the required hardware for the AWG.

The way it works, it can also repair 2X1X where the serial/model has been wiped after a full restore.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Blindelinx on March 14, 2021, 01:59:16 pm
Hi Tatel,

I finally did it! I got the original Firmware from Hantek. This doesnt contain any code changes (older version) which demands unfindable libraries.

The problem, why it didnt work before is that, since the posted solution you referred to, the firmware has been changed with a newer library which tells the update code to look for a newer set of libraries. These probably chanced in the newer version of the Linux Kernell.

Thanks so much again for helping me! Greetings! Hugo
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatel on March 14, 2021, 06:57:36 pm
Quote
I finally did it! I got the original Firmware from Hantek. This doesnt contain any code changes (older version) which demands unfindable libraries.

Glad you fixed it :-+
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: payty on March 14, 2021, 07:06:24 pm
Hello,


This is my first post on this forum. I have bought a refurbished DSO5202p on ebay and the seller just sent me a message that the device actually does not start, it only displays the attached image.


Pressing F1 and F2 does not fix anything.

The thing is that the seller offered to refund 50% of the price in case I decide to accept the oscilloscope and fix it myself.

Is there anything I can do with this error?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Blindelinx on March 14, 2021, 07:14:01 pm
What are you paying for it?

It might be fixable but there is no guarantee. If you are a bit handy you can enter the internal works and reset the kernel but i woundnt recommend it if you are new to electronics

Greetings Hugo
Ps DM me if you need some tips
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: payty on March 14, 2021, 07:26:30 pm
It would be 173 GBP (including shipping and customs fee)

Just for the oscilloscope, price is 118 GBP (with the 50% refund)


I have some electronics knowledge but I am no expert.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Blindelinx on March 14, 2021, 07:56:21 pm
Personally I think that’s quite much. How much would you pay for a new one? Where I live it would be about €400,-. The transport is what’s making it a high price.

If you decide to buy it. I’d like to help you fix it. Keep me posted if you buy it. DM me for a step by step guide . Btw; ever worked with serial communication through RX & TX?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Microcheap on March 14, 2021, 11:58:37 pm
Just send an email to Hantek, they will reply to you with a file to restore the partition (using the F3 option).

I saw the same problem many times with the DSO4000 and DSO4004 series.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: payty on March 17, 2021, 02:32:34 am
I've sent them two emails but no answer so far.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Microcheap on March 17, 2021, 03:06:19 am
To which email are you sending the message?

You can also try their official support forum. There's already a thread about the same issue: https://www.eediscuss.com/forum.php?mod=viewthread&tid=15164&extra= (https://www.eediscuss.com/forum.php?mod=viewthread&tid=15164&extra=)

but sometimes I find it is easier to open a new one, I think the moderators do not check the older threads and new requests go unanswered.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: payty on March 17, 2021, 05:26:16 am
service@hantek.com

But I will also try the forum.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Microcheap on March 17, 2021, 06:17:55 am
You can try this: wangshuang@hantek.com or this: caiyijun@hantek.com
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: payty on March 19, 2021, 11:20:36 am
So far no answers on hantek forum and any of the emails. Probably they do not have a solution because there is another thread there about the DSO5102 and the answers there are pretty quick.

I am waiting for the oscilloscope to arrive from the UK and see what I can do next.

Just hope I do not end up with a bricked device.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: frank_d on March 20, 2021, 09:40:43 am
Hello, I'm new on this forum and went through this long thread (days of reading) since I've a problem with my DSO-1062D from Voltcraft. As many others on this forum, I did a firmware update (downloaded the files on http://voltcraftdownload.info/Default.aspx?modelno=DSO-1062D (http://voltcraftdownload.info/Default.aspx?modelno=DSO-1062D)), after that my scope was stuck. Unlikely I haven't done the backup before the firmware update :palm:.
After so much reading and following some suggested recovery procedure on this thread, that's the situation: on teraterm (ttl to usb adapter connected and working well) I have this message:

System Volume Information        tekwayup_client
dso5kb_func_dso5062b20180226.up
ls: /mnt/udisk/system*.up: No such file or directory

and the display says "Please insert the USB device with update files which can be obtained from the supplier"
Please, can anyone help me?

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: robots on March 21, 2021, 05:24:33 pm
Did anyone experience self cal error x503 after front-end parts "replacement" according to "tatus1969" ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: herczegzsolt on March 25, 2021, 01:08:29 am
Anybody has old firmwares for Hantek DSO5202B (or any DSO5000B series)?

I've updated to the latest firmware from hantek.com and it bricked my scope. Seems like the latest update package has some files missing which were introduced in an in-between version. (My error is /dso.exe: error while loading shared libraries: libgstreamer-1.0.so.0: cannot open shared object file: No such file or directory)

Unfortunately Hantek does not keep old versions on their website. If anybody has an older update which happens to have the libgstreamer files I may be able to unbrick my scope with them.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: frank_d on April 17, 2021, 06:27:00 pm
Hello, I'm new on this forum and went through this long thread (days of reading) since I've a problem with my DSO-1062D from Voltcraft. As many others on this forum, I did a firmware update (downloaded the files on http://voltcraftdownload.info/Default.aspx?modelno=DSO-1062D (http://voltcraftdownload.info/Default.aspx?modelno=DSO-1062D)), after that my scope was stuck. Unlikely I haven't done the backup before the firmware update :palm:.
After so much reading and following some suggested recovery procedure on this thread, that's the situation: on teraterm (ttl to usb adapter connected and working well) I have this message:

System Volume Information        tekwayup_client
dso5kb_func_dso5062b20180226.up
ls: /mnt/udisk/system*.up: No such file or directory

and the display says "Please insert the USB device with update files which can be obtained from the supplier"
Please, can anyone help me?

Hello, I'm continously cehcking for a replay since a month  :'( .
Is there anyone who can kindly help me ? My oscilloscope is completely stuck and need it in my own lab.
It might be very appreciated if anyone could share the original firmware files for the DSO-1062D or give me some advice.
Thanks
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatel on April 20, 2021, 11:02:57 am
EDIT: replied twice, please see my answer below



Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatel on April 20, 2021, 12:01:12 pm
Hello, I'm new on this forum and went through this long thread (days of reading) since I've a problem with my DSO-1062D from Voltcraft. As many others on this forum, I did a firmware update (downloaded the files on http://voltcraftdownload.info/Default.aspx?modelno=DSO-1062D (http://voltcraftdownload.info/Default.aspx?modelno=DSO-1062D)), after that my scope was stuck. Unlikely I haven't done the backup before the firmware update :palm:.
After so much reading and following some suggested recovery procedure on this thread, that's the situation: on teraterm (ttl to usb adapter connected and working well) I have this message:

System Volume Information        tekwayup_client
dso5kb_func_dso5062b20180226.up
ls: /mnt/udisk/system*.up: No such file or directory

and the display says "Please insert the USB device with update files which can be obtained from the supplier"
Please, can anyone help me?

Hello, I'm continously cehcking for a replay since a month  :'( .
Is there anyone who can kindly help me ? My oscilloscope is completely stuck and need it in my own lab.
It might be very appreciated if anyone could share the original firmware files for the DSO-1062D or give me some advice.
Thanks


This quite probably means you are too lazy to do a search and smart enough to try to get others working for you.

All I will say is: solution for your problem is just *one* page away... or one forum search away.

EDIT 1: My bad, at the top of this very same page you can see how Blindelinx was able to get good firmware from Hantek for his Volcraft 'scope. Hantek, Volcraft, Tekway... all is the same hardware, sold under different brand and model names.

Your 'scope is saying you that it can't find the USB with the firmware update and asking you "please insert a USB with the firmware update". It doesn't look as if you cared about what your scope is saying. Try to put a USB stick with good firmware in your 'scope. Are you sure you did read the entire thread? I find it very difficult to believe... No wonder nobody replied to you.

Anybody has old firmwares for Hantek DSO5202B (or any DSO5000B series)?

I've updated to the latest firmware from hantek.com and it bricked my scope. Seems like the latest update package has some files missing which were introduced in an in-between version. (My error is /dso.exe: error while loading shared libraries: libgstreamer-1.0.so.0: cannot open shared object file: No such file or directory)

Unfortunately Hantek does not keep old versions on their website. If anybody has an older update which happens to have the libgstreamer files I may be able to unbrick my scope with them.

Just the same problem that Blindelinx got. Did you read the entire thread, too? At the very least Blindelinx was able to get what you seem unable to find just some days after. Again, no wonder nobody replied to you...

EDIT 2: rogue quotes
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: aandrew on April 20, 2021, 01:27:49 pm
Still hoping to resurrect this long-running thread - does anyone have a memory map of what I/O is connected to which scope function, the FPGA logic analyzer board connector pinout, etc.? It'd be lovely to replace the closed-source GUI software with something better, particularly since these MSO507x series scopes are no longer in production or supported.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Fenstergucker on April 21, 2021, 05:37:33 am
the FPGA logic analyzer board connector pinout, etc.?

In the german mikrocontroller.net forum you can find schematics, also for the LA board:
https://www.mikrocontroller.net/articles/Tekway_MSO#Downloads (https://www.mikrocontroller.net/articles/Tekway_MSO#Downloads)

In the first post in this thread, you will also find a 1drive link from tinhead with more files.

Peter
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: frank_d on April 25, 2021, 06:11:38 pm
Hello Tatel, I'm sorry I gave the impression to be lazy. The truth is that I'm not good at english writing and just tried to write as little as possible and went straight to what I supposed could be the solution to my situation. Here is all the story: after intalling the Voltcraft update, the scope was stuck and after a restart it was just showing a black screen and emitting a continous sound from the inner buzzer. Going through this thread (belive me, I read all of it) I aquired tons of useful information and was able to find the uart port on the pcb (thanks to pictures and schematics), connect the scope to my PC and I discovered that many scopes has the same hardware with different names. I got the Blindelinx experience and after serching the Hantek equivalent model I got the firmware from Hantek web site. After installing the new firmware (via uart) I went to the situation I wrote in my post. Any oder attempt failed. At this point, I tried to ask for the original Voltcrat files beliving it could be the only way to resuscitate the scope.
Anyway, I'm going to send the scope to the local Voltcraft dialer for a software repair tomorrow.
Bye
Francesco
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tatel on April 26, 2021, 06:07:41 am
Quote
ls: /mnt/udisk/system*.up: No such file or directory

The system can't find any file called system(anything).up in the /mnt/udisk directory.

/mnt/udisk seems to be the directory where your system expects to find firmware upgrade files. When you put your USB stick on the scope, the contents of the USB stick should appear in that directory.

It doesn't find any file callled "system(probably a number or reference).up", which would be the firmware update. * is a wildcard that means "anything".

So probably your USB stick doesn't have any FW update file. It could be that the system doesn't take your USB but I think you would get a mount error should that be the case. Having the complete output from teraterm/putty would help. Maybe your USB stick is too big (>4 GB) or is not FAT32 formatted. But I think probably that firmware upgrade file just is not there.

Using teraterm/putty you could give this command

ls /mnt/udisk

This should return a list with the files/directories under /mnt/udisk. Maybe your system*.up file is under a directory or still compressed or...
I don't know what. It should be on the first level of your USB stick

I think you probably don't have any linux experience and screwed some command or some procedure step. Please follow the instructions found in this post:

https://www.eevblog.com/forum/repair/voltcraft-dso-1102d/msg2036896/#msg2036896 (https://www.eevblog.com/forum/repair/voltcraft-dso-1102d/msg2036896/#msg2036896)

These are the instructions that Blindelinx followed. He also claimed not having any linux experience. Please note that these instructions, as Blindelinx said, seem to be using a not-so-good firmware update file. You have to use the original firmware from Hantek instead as he did. Probably having that original firmware update systemXXXXXX.up in the first level of a good USB stick is all that is needed.

Please note that if you screw some command and give instead a command that will delete, say, anything, linux will not ask "Are you sure?" before executing that screwed up command. So be careful, and, if not sure you can do it, please go to the dealer.

If your system is able to return a "file not found" error it means that Linux is running so you'll have a functional oscilloscope as soon as a good firmware update is loaded into it.

Good luck



Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sim_v on April 26, 2021, 01:34:29 pm
Deep review of DSO5202p by a french guy (Cyrob)
https://www.youtube.com/watch?v=D7gmFYDYZLQ (https://www.youtube.com/watch?v=D7gmFYDYZLQ)
I hope the youtube translator make a good job.Measures start at 14 minutes 14 seconds
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Jelmer9888 on May 11, 2021, 03:07:20 pm
I tried to restore my DSO5102P to default values, but it seems my backups were wrong to begin with.
There is some serious outdated information in this topic, that's a bummer.

I also have 4 backup NAND partitions, I should have had 8 partitions. Sizes are boot 1024, kernel 2048, logo 512 and root 512 KB.

So I did a restore of all partitions (because my serial nr was suddenly gone) in the process.

the scope seems to be working fine, but my question is, can I have demolished something hidden what I don't see right now?
In the end my scope is now showing all the correct data again, serial no. and it shows it is a DSO5202P and it is calibrating.

But I don't trust my own restore action with a way to small root partition I did somewhere in the proces.

Btw, it is showing a "*** Warning - bad CRC, using default environment" booting up, don't know if that was there before.



Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: atoll on June 02, 2021, 07:27:51 am
Hi!  I need Nand flash for DSO-5102B for JTAG. Boot only recovery.
sw 3.30.0 (140902.0)
hw 1010x 5555830F
s/w T1G/012 01xxx

mail to atoll(@)tut.by
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Ruslnsv on June 08, 2021, 11:49:40 am
Dear freands, could you zip the backup (mtd0,1,2,3 or dump for jtag) for DSO5102B and upload somewhere or e-mail? When updating to a new firmware dso5kb_funcdso5102b20190830.up, the boot logo hangs. Rear USB does not work, I want to flash DUMP via JTAG. My DSO5102B sw 3.33.0(140902.0)hw version 1010/5555830F. Thanks.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: soesante on August 13, 2021, 03:37:12 pm
Hi friends,
I screw up my DSO5072P with my screw driver and destroy one of the smd caps.
Can someone help me to identify the value of this SMD caps shown in the pic below..

Thanks.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on November 02, 2021, 02:07:18 pm
Hello,
a friend got a defective Voltcraft MSO 5062B with a series number less than 15000 that some gorilla tried to update anyways with the firmware from Voltcraft, where they have warnings allover to NOT do this to scopes with S/N less than 15000 or else it you'll get a brick stuck in a bootloop. And guess what, the gorilla did it anyway, then soldered with his Opa's Lötkolben some wires and screwed stuff even more in the console :(, now the Linux boots OK, the partitions are seen correctly but there is a mess in the filesystem, the rootfs has all the crap dumped there and of course the famous rename for 200MHz. Then he dumped it on  >:Dbay and it ended in my arms.

Naturally nothing works, some scripts and and kernel modules are missing and the watchdog reboots the device every 30sec (the watchdog feeder binary is also gone  |O  ). I've managed to calm the watchdog with a script in background to feed it every 28 seconds but then there is not much to be done in the Linux console there, a USB stick inserted in the front socket is not recognized as a mass storage device but only as an USB device.

There is also the U-Boot menu available, but I have no clue how it works and also I was not able to find a suitable firmware for such low serial number scopes.

My little request/bitte is if someone has a compatible firmware for this old model and how can be that firmware installed, either from the u-Boot menu or from Linux console.

 Many thanks,
 DC1MC
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tv84 on November 02, 2021, 02:34:54 pm
My little request/bitte is if someone has a compatible firmware for this old model and how can be that firmware installed, either from the u-Boot menu or from Linux console.

Your best bet is for someone to do a dump from UBoot and handed it over to you to do a flash.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on November 02, 2021, 04:40:30 pm
My little request/bitte is if someone has a compatible firmware for this old model and how can be that firmware installed, either from the u-Boot menu or from Linux console.

Your best bet is for someone to do a dump from UBoot and handed it over to you to do a flash.

That will be very nice indeed, btw if I connect the back USB connector to my Ubuntu laptop the device says:
Quote
USB host is connected. Waiting a download.
[/tt]

and the laptop says:
dmesg:
usb 3-3.1: new full-speed USB device number 49 using xhci_hcd
 usb 3-3.1: New USB device found, idVendor=5345, idProduct=1234, bcdDevice= 1.00
usb 3-3.1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
usb 3-3.1: Product: SEC S3C2410X Test B/D
usb 3-3.1: Manufacturer: System MCU
l


lsusb:
Bus 003 Device 049: ID 5345:1234 Owon PDS6062T Oscilloscope


What program is used to write data to the scope, because is not recognized as any standard device (storage, serial port and such) ?

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on November 02, 2021, 05:41:43 pm
Oh well, the U-Boot menu when one selects "[6] Download YAFFS image to Nand Flash" that most likely tries to load the rootfs and interrupt it with Ctrl-C then it jumps immediately to format the NAND  :scared: :scared: :scared:, and now I have a more bricked brick  :palm:, the U-Boot and kernel are still there, but I appreciate if someone has a full FW dump and want to share, in the updated are mostly the scope programs (it was anyway missing a lot of scripts and stuff plus some utilities, but at least it got some shell that is gone now  |O).

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tv84 on November 02, 2021, 05:49:53 pm
What are the commands available at the UBoot level? Please share the list or screen log.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on November 02, 2021, 05:57:41 pm
If one press space at start-up it gets the following menu:

Code: [Select]
#####    Boot for Nand Flash Main Menu  #####
[1] Download u-boot or STEPLDR.nb1 or other bootloader to Nand Flash
[2] Download Eboot to Nand Flash
[3] Download Linux Kernel to Nand Flash
[5] Download CRAMFS image to Nand Flash
[6] Download YAFFS image to Nand Flash
[7] Download Program (uCOS-II or TQ2440_Test) to SDRAM and Run it
[8] Boot the system
[9] Format the Nand Flash
[0] Set the boot parameters
[a] Download User Program (eg: uCOS-II or TQ2440_Test)
[b] Download LOGO Picture (.bin) to Nand  Flash
[l] Set LCD Parameters
[r] Reboot u-boot
[t] Test Linux Image (zImage)
[q] quit from menu
Enter your selection:

WARNING: At least menu [6] is DESTRUCTIVE, interrupting with Ctrl-C makes the script format the NAND partition anyways and load the RAM buffer into it !!!

q abandons the menu and goes into classical prehistoric 1.1.6 U-Boot menu:

Code: [Select]
EmbedSky> help
?       - alias for 'help'
autoscr - run script from memory
base    - print or set address offset
bdinfo  - print Board Info structure
boot    - boot default, i.e., run 'bootcmd'
boot_noos - boot User Program
boot_zImage - boot Linux 's zImage
bootd   - boot default, i.e., run 'bootcmd'
bootelf - Boot from an ELF image in memory
bootm   - boot application image from memory
bootp   - boot image via network using BootP/TFTP protocol
bootvx  - Boot vxWorks from an ELF image
chpart  - change active partition
cmp     - memory compare
coninfo - print console devices and information
cp      - memory copy
crc32   - checksum calculation
date    - get/set/reset date & time
dcache  - enable or disable data cache
eboot  - Run Wince Ethernet Bootloader(eboot)
echo    - echo args to console
erase   - erase FLASH memory
flinfo  - print FLASH memory information
fsinfo  - print information about filesystems
fsload  - load binary file from a filesystem image
go      - start application at address 'addr'
help    - print online help
icache  - enable or disable instruction cache
iminfo  - print header information for application image
itest   - return true/false on integer compare
loadb   - load binary file over serial line (kermit mode)
loads   - load S-Record file over serial line
loadx   - load binary file over serial line (xmodem mode)
loady   - load binary file over serial line (ymodem mode)
loop    - infinite loop on address range
ls      - list files in a directory (default /)
md      - memory display
menu - display a menu, to select the items to do something
mm      - memory modify (auto-incrementing)
mtdparts- define flash/nand partitions
mtest   - simple RAM test
mw      - memory write (fill)
nand    - NAND sub-system
nboot   - boot from NAND device
nm      - memory modify (constant address)
ping    - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
protect - enable or disable FLASH write protection
rarpboot- boot image via network using RARP/TFTP protocol
reset   - Perform RESET of the CPU
run     - run commands in an environment variable
saveenv - save environment variables to persistent storage
setenv  - set environment variables
sleep   - delay execution for some time
test_zImage - test Linux 's zImage
tftpboot- boot image via network using TFTP protocol
usbslave - get file from host(PC)
version - print monitor version
wince [ram] - Run Wince from flash or ram
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on November 02, 2021, 06:14:44 pm
I downloaded the Hantek Open source software, maybe they disclosed the stupid menu and the implementation of the download protocol over USB, so I can wipe quickly an utility to load over that U-Boot menu, if someone has mercy and share a NAND dump. This will be my humble contribution to the thread.

Also I see that the case has a blind for a RJ45 Ethernet socket and the PCB has a place for it, but nothing is mounted, the LA board obscures some parts, but maybe the PHY is mounted and only the socket is missing, does anybody know that model of socket is that ?

EDIT: NO U-BOOT in the archive, if someone has another place to download this stuff as well it will be appreciated.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on November 02, 2021, 06:51:03 pm
Boot log for this one time when it booted before menu option [6]  screwed the rootfs (observe the gorilla caused disaster when atempted to start the scope program):

Code: [Select]
##### EmbedSky BIOS for SKY2440/TQ2440 #####
Press Space key to Download Mode !
Booting Linux ...
Copy linux kernel from 0x00200000 to 0x30008000, size = 0x00200000 ... Copy Kernel to SDRAM done,NOW, Booting Linux......
Uncompressing Linux... done, booting the kernel.
Linux version 2.6.30.4 (root@localhost.localdomain) (gcc version 4.3.3 (Sourcery G++ Lite 2009q1-176) ) #17 Sun Oct 9 14:24:29 CST 2011
CPU: ARM920T [41129200] revision 0 (ARMv4T), cr=c0007177
CPU: VIVT data cache, VIVT instruction cache
Machine: TQ2440
ATAG_INITRD is deprecated; please update your bootloader.
Memory policy: ECC disabled, Data cache writeback
CPU S3C2440A (id 0x32440001)
S3C24XX Clocks, (c) 2004 Simtec Electronics
S3C244X: core 400.000 MHz, memory 100.000 MHz, peripheral 50.000 MHz
CLOCK: Slow mode (1.500 MHz), fast, MPLL on, UPLL on
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
Kernel command line: noinitrd root=/dev/mtdblock2 init=/linuxrc console=ttySAC0
NR_IRQS:85
irq: clearing pending ext status 00000200
irq: clearing subpending status 00000002
PID hash table entries: 256 (order: 8, 1024 bytes)
Console: colour dummy device 80x30
console [ttySAC0] enabled
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 64MB = 64MB total
Memory: 61316KB available (3116K code, 333K data, 100K init, 0K highmem)
SLUB: Genslabs=11, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
Calibrating delay loop... 199.47 BogoMIPS (lpj=498688)
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
net_namespace: 296 bytes
NET: Registered protocol family 16
S3C2440: Initialising architecture
S3C2440: IRQ Support
S3C24XX DMA Driver, (c) 2003-2004,2006 Simtec Electronics
DMA channel 0 at c4808000, irq 33
DMA channel 1 at c4808040, irq 34
DMA channel 2 at c4808080, irq 35
DMA channel 3 at c48080c0, irq 36
S3C244X: Clock Support, DVS off
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
cfg80211: Calling CRDA to update world regulatory domain
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
NET: Registered protocol family 1
yaffs Sep 30 2011 10:36:32 Installing.
msgmni has been set to 119
alg: No test for stdrng (krng)
io scheduler noop registered (default)
s3c2440-uart.0: tq2440_serial0 at MMIO 0x50000000 (irq = 70) is a S3C2440
s3c2440-uart.1: tq2440_serial1 at MMIO 0x50004000 (irq = 73) is a S3C2440
s3c2440-uart.2: tq2440_serial2 at MMIO 0x50008000 (irq = 76) is a S3C2440
loop: module loaded
Driver 'sd' needs updating - please use bus_type methods
Driver 'sr' needs updating - please use bus_type methods
S3C24XX NAND Driver, (c) 2004 Simtec Electronics
s3c2440-nand s3c2440-nand: Tacls=2, 20ns Twrph0=3 30ns, Twrph1=2 20ns
NAND device: Manufacturer ID: 0xec, Chip ID: 0x76 (Samsung NAND 64MiB 3,3V 8-bit)
Scanning device for bad blocks
Creating 3 MTD partitions on "NAND 64MiB 3,3V 8-bit":
0x000000000000-0x000000040000 : "EmbedSky_Board_uboot"
0x000000200000-0x000000400000 : "EmbedSky_Board_kernel"
0x000000400000-0x000003ff8000 : "EmbedSky_Board_yaffs2"
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
s3c2410-ohci s3c2410-ohci: S3C24XX OHCI
s3c2410-ohci s3c2410-ohci: new USB bus registered, assigned bus number 1
s3c2410-ohci s3c2410-ohci: irq 42, io mem 0x49000000
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 2 ports detected
mice: PS/2 mouse device common for all mice
S3C24XX RTC, (c) 2004,2006 Simtec Electronics
s3c2410-rtc s3c2410-rtc: rtc disabled, re-enabling
s3c2410-rtc s3c2410-rtc: rtc core: registered s3c as rtc0
Linux video capture interface: v2.00
S3C2410 Watchdog Timer, (c) 2004 Simtec Electronics
s3c2410-wdt s3c2410-wdt: starting watchdog timer
s3c2410-wdt s3c2410-wdt: watchdog active, reset abled, irq enabled
mapped channel 0 to 0
s3c2440-sdi s3c2440-sdi: powered down.
s3c2440-sdi s3c2440-sdi: initialisation done.
Advanced Linux Sound Architecture Driver Version 1.0.18a.
No device for DAI UDA134X
No device for DAI s3c24xx-i2s
S3C24XX_UDA134X SoC Audio driver
UDA134X SoC Audio Codec
asoc: UDA134X <-> s3c24xx-i2s mapping ok
s3c2440-sdi s3c2440-sdi: powered down.
ALSA device list:
  #0: S3C24XX_UDA134X (UDA134X)
TCP cubic registered
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
lib80211: common routines for IEEE802.11 drivers
s3c2410-rtc s3c2410-rtc: hctosys: invalid date/time
yaffs: dev is 32505858 name is "mtdblock2"
yaffs: passed flags ""
yaffs: Attempting MTD mount on 31.2, "mtdblock2"
yaffs_read_super: isCheckpointed 0
VFS: Mounted root (yaffs filesystem) on device 31:2.
Freeing init memory: 100K
/etc/init.d/rcS: line 8: /usr/local/bin/wdg: not found
/etc/init.d/rcS: line 9: /dso/app/show_pic: not found
hwclock: settimeofday: Invalid argument
insmod: can't insert '/dso/drivers/s3c2416-io_bank.ko': No such file or directory
insmod: can't insert '/dso/drivers/s3c2416_adc.ko': No such file or directory
/etc/init.d/rcS: line 20: /dso/app/io_bank: not found
/etc/init.d/rcS: line 21: /dso/app/io_bank: not found
/etc/init.d/rcS: line 22: /dso/app/io_bank: not found
/etc/init.d/rcS: line 23: /dso/app/io_bank: not found
insmod: can't insert '/dso/drivers/fpga_cfg.ko': No such file or directory
insmod: can't insert '/dso/drivers/fpga_ctl.ko': No such file or directory
insmod: can't insert '/dso/drivers/fpga_ctl_la.ko': No such file or directory
insmod: can't insert '/dso/drivers/dm9000.ko': No such file or directory
insmod: can't insert '/dso/drivers/tq2416_backlight.ko': No such file or directory
insmod: can't insert '/dso/drivers/tq2416_beep.ko': No such file or directory
ifconfig: SIOCSIFADDR: No such device
/etc/init.d/rcS: line 35: /dso/app/dsod: not found
/etc/init.d/rcS: line 36: /etc/init.d/nfs.sh: not found
--------------------------------------------------------------------------------
start
--------------------------------------------------------------------------------
/etc/init.d/rcS: line 43: /dso/run.sh: not found

Please press Enter to activate this console.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tv84 on November 02, 2021, 07:02:43 pm
You can investigate how to recreate something from the FW package but a NAND dump from another device would be the easiest way (or not).

Anybody can do a dump for you using the "classical prehistoric 1.1.6 U-Boot menu". Will take some hours but is perfectly doable.

So you still have 3 partitions:

0x00000000-0x00040000 : "EmbedSky_Board_uboot"  OK
0x00200000-0x00400000 : "EmbedSky_Board_kernel"  OK
0x00400000-0x03ff8000 : "EmbedSky_Board_yaffs2"
ruined

Where is the FW package?

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on November 02, 2021, 07:22:12 pm
You can put OK on the kernel partition as well, it boots completely but segfaults when no init is found, I don't have any usable firmware image unfortunately, this is what I'm searching for.
The update images that I could found are just some archives with the scope related apps, no OS that I cold find  :'(.

EDIT: If after so much pain this shite MUST have some device specific and irreplaceable calibration file stored in the rootfs instead of EEPROM and without them it won't work I will go Office Space on it !!!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on November 02, 2021, 07:56:05 pm
It seems that there are more partitions that it meets the eye or so so says the U-Boot:

Code: [Select]
EmbedSky> mtdparts

device nand0 <nandflash0>, # parts = 7
 #: name                        size            offset          mask_flags
 0: bios                0x00040000      0x00000000      0
 1: params              0x00020000      0x00040000      0
 2: toc                 0x00020000      0x00060000      0
 3: eboot               0x00080000      0x00080000      0
 4: logo                0x00100000      0x00100000      0
 5: kernel              0x00200000      0x00200000      0
 6: root                0x03c00000      0x00400000      0

active partition: nand0,0 - (bios) 0x00040000 @ 0x00000000

defaults:
mtdids  : nand0=nandflash0
mtdparts: mtdparts=nandflash0:256k@0(bios),128k(params),128k(toc),512k(eboot),1024k(logo),2m(kernel),-(root)

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tv84 on November 03, 2021, 12:09:22 am
It seems that there are more partitions that it meets the eye or so so says the U-Boot:

Nice. It's all compatible with what I had displayed and fills the gaps that we had.

I would suggest you dump all the NAND up to 0x00400000.  (4 MBytes)

Use "nand dump" or "nand read" and log all the displayed values in the terminal.

That way you have a reference base to verify if all is correct with those parts. Then the only thing missing will be the root FS.

BTW, a long shot would also be: if you are replacing the full root partition, maybe you can use one from a S/N greater than 15000. I mean the limitation for 15000 is for FW updates using only part of the files. Maybe you can get away with a full partition replacement.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on November 03, 2021, 06:00:15 am
It seems that there are more partitions that it meets the eye or so so says the U-Boot:

Nice. It's all compatible with what I had displayed and fills the gaps that we had.

I would suggest you dump all the NAND up to 0x00400000.  (4 MBytes)

Use "nand dump" or "nand read" and log all the displayed values in the terminal.

That way you have a reference base to verify if all is correct with those parts. Then the only thing missing will be the root FS.

BTW, a long shot would also be: if you are replacing the full root partition, maybe you can use one from a S/N greater than 15000. I mean the limitation for 15000 is for FW updates using only part of the files. Maybe you can get away with a full partition replacement.

Right now I'm willing to try with anything that comes up, if ever...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on November 03, 2021, 08:00:45 am
Hi @PeDre, mine is a Voltcraft MSO-5062, but at that moment in time I'm willing to try everything once before packing it up and recommended to my friend to throw it in the garbage not before plundering some still usable bits.
Have you used the Linux infrastructure for doing the update, or that strange windozian DWE program that only runs on 32bit windows because of drivers for that miserable usbslave protocol they are using for usb file transfer,  that I seem to not find any source for it  |O ?

Many thanks,
DC1MC
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on November 03, 2021, 08:20:25 am
I do, I will use it as last resort since there are like 5 yrs I don't have a 32bit windows, an installation kit or any compatible HW, I'll go in the attic, I think I stored there an abandoned core2duo laptop if I can make it run. I was hoping that someone of the tens of people taking part in this thread and proudly announced that they backed up their flash will share a backup for my model, but I guess not many takers. In any case, thank you for the help.

DC1MC
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on November 03, 2021, 11:51:54 am
Hello DC1MC,

Ii looks like I found a dump, made with Tinheads special dump software, of an original, not converted, Voltcraft MSO 5062 in my old confuserbox. Is that what you're looking for? It contains three files: boot.bin, kernel.bin and root.bin. Too big to attach it here, about 16MB zipped. Can I upload it somewhere?

regards, Maurits
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on November 03, 2021, 01:44:50 pm
Hello DC1MC,

Ii looks like I found a dump, made with Tinheads special dump software, of an original, not converted, Voltcraft MSO 5062 in my old confuserbox. Is that what you're looking for? It contains three files: boot.bin, kernel.bin and root.bin. Too big to attach it here, about 16MB zipped. Can I upload it somewhere?

regards, Maurits

God bless your kind soul  ;D, put them on https://wetransfer.com/ (I'll PM my email address or, the best somewhere on a GitHub).

Thanks a lot,
DC1MC
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on November 03, 2021, 03:49:11 pm
Hello DC1MC,

Ii looks like I found a dump, made with Tinheads special dump software, of an original, not converted, Voltcraft MSO 5062 in my old confuserbox. Is that what you're looking for? It contains three files: boot.bin, kernel.bin and root.bin. Too big to attach it here, about 16MB zipped. Can I upload it somewhere?

regards, Maurits

Files received OK, one more time thanks, and I'll check on how to update via u-boot.

Cheers,
DC1MC
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on November 03, 2021, 09:04:22 pm
Hello again DC1MC,

I really hope you can use these files. I am quit certain that they come from an original Voltcraft MSO-5062B. After all the trouble I had with my modified / converted DSO / MSO this thing was ordered from Conrad. That was a bit of a disappointment. The thing had the same problems as my modified one; so Conrad took it back and refunded me. But I did make a backup of it, you know, for just in case..!.

The MSO firmware has a strange bug, the digital and analog traces on the screen are not always from the same trigger event, that was my main issue to send it back.
Also it doesn't do any protocol decoding so.. my remaining modified Voltcraft ended in a box in storage when a better MSO came on my bench (HAMEG HMO3054).

About restoring the firmware from the dump files:

I found in my old computer a pdf that describes "how to" proceed with a restore. It looks you are aware of this info as well since you mentioned the special dnw.exe program that is needed earlier in this thread. But just for fun I will attach it here.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on November 04, 2021, 07:36:14 am
Hello again DC1MC,

I really hope you can use these files. I am quit certain that they come from an original Voltcraft MSO-5062B. After all the trouble I had with my modified / converted DSO / MSO this thing was ordered from Conrad. That was a bit of a disappointment. The thing had the same problems as my modified one; so Conrad took it back and refunded me. But I did make a backup of it, you know, for just in case..!.

The MSO firmware has a strange bug, the digital and analog traces on the screen are not always from the same trigger event, that was my main issue to send it back.
Also it doesn't do any protocol decoding so.. my remaining modified Voltcraft ended in a box in storage when a better MSO came on my bench (HAMEG HMO3054).

About restoring the firmware from the dump files:

I found in my old computer a pdf that describes "how to" proceed with a restore. It looks you are aware of this info as well since you mentioned the special dnw.exe program that is needed earlier in this thread. But just for fun I will attach it here.

This is nice PDF from the site, it's good to have it here as well, because the sites are volatile and the post there was from 2013 or something. Thanks God that I don't have to deal daily with this POS, from what I've seen and read so far, is distilled highly concentrated Chinese crapo, as opposed to the more diluted crapo of Rigol and friends, for some strange masochistic reason it's very loved in Germany, it even has a name "Das Oszi" and is for a friend (hopefully will stay friends afterwards)  :-DD.

In any case, thanks once more,
DC1MC
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on November 04, 2021, 03:12:18 pm
Just a quick and sad (or maybe happy  >:D ) update, after restore the scope is totally dead, no u-Boot, no USB reaction, no serial output  :palm:. So most likely will need a JTAG connector and a working image to be restored, but most probably the insides will host some other project that can use the case and screen.
Or if someone needs some specific parts or the whole cadaver, please PM me (it's not free unfortunately. but also not expensive).

 DC1MMC
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tv84 on November 04, 2021, 04:44:50 pm
 :palm:  If there is no uboot output, you can forget all the rest.

How did you do that?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on November 04, 2021, 05:43:21 pm
:palm:  If there is no uboot output, you can forget all the rest.

How did you do that?

Relatively simple :'(, the u-boot there seem to not have been the original or at least the one that the documents were referring, now I can either forget all the rest and either see if one of my J-Link clones see the NAND or it will house there a RPi or something else, because the other options seem to be parallel port LPT JTAG programmers that no one will ever make or have a machine with LPT. I barely found some Windows32 bit cadaver.
And if indeed these calibration files must be there for the device to actually operate, than anyways it would have been useless I think, (maybe it recreates them automatically or I could get them from somewhere) but until I manage to see the NAND somehow, it will collect dust like the rest of them.

Cheers,
DC1MC
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tv84 on November 04, 2021, 08:59:45 pm
Relatively simple :'(, the u-boot there seem to not have been the original or at least the one that the documents were referring, now I can either forget all the rest and either see if one of my J-Link clones see the NAND

I disagree. What you showed about the uboot seemed solid and valid. But I don't have experience with Hantek stuff.

Nonetheless, in hindsight, you should have done the restore using the (primitive) uboot NAND commands and forget all those fancy tools that the PDF talked about. With that you can be totally sure of what you are doing and where you're messing around.

Also, if you had taken the dump as I advised, a comparison between your uboot and kernel could have been done before crushing them all over, with the NAND dump that was provided to you.

Well, live and learn.

Now, you just have to find the way to mount the NAND in your JLink (that is a matter of config files regarding the specific NAND datasheet). With that done, I think it becomes easy to restore the NAND. I have no experience in adjusting config files for NAND support in JLink.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on November 04, 2021, 09:54:30 pm
@DC1MMC:

In case you do want to try to restore:

Found my old notes on restoring after I bricked the thing with a faulty update. Memory came back: I did restore it once with a Chinese software called H-JTAG. I found the manual on my old computer HDD. Also I found the LPT port Jtag adapter cable in the old project parts box. Now this software is still downloadable on H-JTAG's website. And it runs on Windows 7, it says. It supports the S3C2440 chip. Also the manual is available. The manual has a schematic for the LPT adapter. Only one HC244 and an npn transistor. My old Win7 box has an LPT connector, so, I could try to dump this MSO I have in storage.

Furthermore, I found complete NAND dump from two Voltcraft DSO on the old HDD. Maybe you can bring some live back with that?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on November 05, 2021, 12:15:10 am
@morris6 Unfortunately I throw away the last computer with an LPT port long ago :(, but I'm very interested in the memory dumps if you could dump them somewhere  ;D, maybe I'll not cannibalize yet the parts and give it another try.

 I did a bit of analyzing of what went wrong on my side, it seems that there are TWO very different, but valid NAND dumps, one that contains the checksum control OOB data and one that doesn't, and they're fully incompatible  :'(, this why I've always hated raw NAND  :rant:.

If I'll ever put a new U-Boot on this think it will have to also boot from tftp and NFS. BTW, is it worth to get an solder the network socket (the Voltcraft box has a covered cutout and the PCB has the footprint of the RJ45 socket), but I don't know what animal is, with or without magnetics, if I'll disassemble it fully to solder the JTAG connector I could as well solder the network connector.

DC1MC
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on November 05, 2021, 09:38:17 pm
OK, @DC1MC: Once more from my old notes: The Linux kernel for the MSO-5062B is 2.6.30.4. The complete NAND dumps I mentioned yesterday are from DSO version, Voltcraft DSO-3062 or something and Linux on that was 2.6.13, so not proper for your patient. However, the dumps I send you earlier are from MSO-5062B as mentioned.

About adding the network connection: You would need the special firmware for that. Also some hardware, the DM9000 chip and magnetics that go on the daughter board and the socket on the main board. Also the FPGA firmware for the daughter board is different. It needs to provide a 25 MHZ clock for the DM9000. That was all part of the conversion project. IMHO the thing is not worthy for all this trouble.

Some more notes about NAND Flash: the 64Mb NAND has 4096 blocks of 32 pages of 528 bytes (512 data and 16 OOB bytes). Exactly where, in which blocks the backups have to be flashed I can't find in my notes. I have info for the DSO but that is different because the sizes of the dumped files don't match. I would have to get the MSO out of storage to check what the boot log gives. Would that help you further?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on November 06, 2021, 01:12:44 pm
@morris6 I did a bit of research and it seems that OpenOCD and J-Link supports the CPU and could flash the NAND, the only complication is that the PCB has a 10pin connector one signal is missing and it doesn't support variable clock rate. It seems that it exists a config file for NAND writing even so.
So when I'm opening it again I'll solder the JTAG connector and give it a try.

 Cheers,
 DC1MC
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on November 06, 2021, 03:11:27 pm
Better check that again.. there are several empty footprints. The H1007 hardware has a 20 pin, 2x 10 pin, 2mm pitch connector for the processor's JTAG. Attached a picture here.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on November 06, 2021, 07:21:01 pm
Better check that again.. there are several empty footprints. The H1007 hardware has a 20 pin, 2x 10 pin, 2mm pitch connector for the processor's JTAG. Attached a picture here.

Well then I was just reading in the OpenOCD manual, the thing is packaged back, excellent, then if it's a full JTAG then everything should go easier ;).
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on November 06, 2021, 09:53:36 pm
From the schematic: the 2x10 pin headers are programming ports for the FPGA and the CPLD.

Attached here a detail of the schematic containing the JTAG header and the reset circuit.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on November 06, 2021, 10:31:16 pm
From the schematic: the 2x10 pin headers are programming ports for the FPGA and the CPLD.

Attached here a detail of the schematic containing the JTAG header and the reset circuit.

So this header has the CPU in the chain ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on November 07, 2021, 07:50:43 am
Well, from what I see in my notes the NAND isn't talked to directly by the JTAG. I used the H-TAG program with LPT-port JTAG as mentioned earlier. After connecting to the processor a short program was uploaded in RAM and that made it possible to read and write the Flash memory. Also a script file needed to be filled with some parameters about addresses and clock setup. For now I didn't find any more info on my old W7 disk, the script was probably with the program on an even older XP system.

I suggest that you get your connection to the CPU working first and thereafter see what is needed in your setup to connect to the flash memory.
Easiest is to flash the NAND with an assembled file that contains boot, empty area, kernel and root files with OOB info. That will contain in hex 0x0420.0000 bytes, 131072 pages, 4096 blocks.

For reference, the complete schematics attached here. They were published earlier in this thread and on Mikrocontroller.net. And be aware, this is all the great work of Tinhead who reverse engineered the whole thing.



Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on November 07, 2021, 11:02:47 am
Well, from what I see in my notes the NAND isn't talked to directly by the JTAG. I used the H-TAG program with LPT-port JTAG as mentioned earlier. After connecting to the processor a short program was uploaded in RAM and that made it possible to read and write the Flash memory. Also a script file needed to be filled with some parameters about addresses and clock setup. For now I didn't find any more info on my old W7 disk, the script was probably with the program on an even older XP system.

I suggest that you get your connection to the CPU working first and thereafter see what is needed in your setup to connect to the flash memory.
Easiest is to flash the NAND with an assembled file that contains boot, empty area, kernel and root files with OOB info. That will contain in hex 0x0420.0000 bytes, 131072 pages, 4096 blocks.

For reference, the complete schematics attached here. They were published earlier in this thread and on Mikrocontroller.net. And be aware, this is all the great work of Tinhead who reverse engineered the whole thing.

That was indeed a tremendous effort, @Tinhead if you lurk here anymore, have another thanks. This is why I hesitate to dismantle the device, so much effort was put into reversing and documenting it.

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Dragon1559 on November 11, 2021, 04:32:05 pm
Hello. There is a dso5102p Hunter. When measuring, it hovered. After the reboot, the inscription appears on the screen (Error: the Fpga version does not match the application!!!). It does not respond to pressing the buttons. When exiting to recovery, the buttons don't work either. Please tell me what can be done ? I'm sorry if I don't understand using a translator .
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on November 14, 2021, 08:00:29 pm
So, I've decided to see if the Voltcraft is gonna be a a source for parts/modules or it can be restored, I've seen the pretty strange JTAG restoration procedure with some windozo-chinesian parallel port adapter and strange program and I was wondering if I can't use Linux, OpenOCD and my cheap J-Link V8 clone.
It seems that it is possible, and I'll post here some notes for the Linux users, maybe someone we'll find them useful to restore/hack his device. this micro-tutorial assumes that the user is a bit familiar with compiling programs from source under Linux and running a couple of simple command line commands.
If anyone needs details I'll be happy to oblige, but I don't want to make this too complicated:

- From the hardwaffe point of view, the biggest hurdle is to extract the mainboard without damaging the ribbon cables for the screen and front panel and solder some wires on the JTAG connector, or, if you have OCD, find a 2mm pitch 2x10pin dual row connector, then build a cable with an adapter for the 20pin 2.54mm of the JTAG adapter, I don't have OCD, so I just cut some cheap Dupont male cables in half and soldered the wires directly, in the picture one can see how they were stick in the 20pin connector of the cable that comes with the J-Link clone, just in case it may be useful for somebody with the same adapter here are the colors and the signals:
Code: [Select]
GND- Black
nTRST - Brown
VTRef - Republicans
TDI - Trump
TMS - Yellow
TCK - Greta
TDO - Democrats
nRST - Purple rain

- First softwaffe things first, get the latest OpenOCD sources (clone the master repository), compile and install it, a simplified list of commands will be:
Code: [Select]
git clone https://git.code.sf.net/p/openocd/code openocd-code
cd openocd-code
sudo apt install libftdi-dev libftdi1-dev libhidapi-dev
#(these were the development libraries that I was missing, if you have others not installed, configure will stop and indicate what is missing)
./boostrap
./configure --enable-jlink --enable-usb-blaster --enable-stlink --enable-doxygen-pdf --enable-usbprog  --enable-openjtag  --enable-cmsis-dap --enable-cmsis-dap-v2 --enable-usb-blaster-2  --enable-ulink    --enable-ftdi
# (these are all the JTAG adapters that I already have or plan to get in the future).
# At the end of the configure script, if you used the same parameters, you should get:
OpenOCD configuration summary
--------------------------------------------------
MPSSE mode of FTDI based devices        yes
ST-Link Programmer                      yes
TI ICDI JTAG Programmer                 yes (auto)
Keil ULINK JTAG Programmer              yes
Altera USB-Blaster II Compatible        yes
Bitbang mode of FT232R based devices    yes (auto)
Versaloon-Link JTAG Programmer          yes (auto)
TI XDS110 Debug Probe                   yes (auto)
CMSIS-DAP v2 Compliant Debugger         yes
OSBDM (JTAG only) Programmer            yes (auto)
eStick/opendous JTAG Programmer         yes (auto)
Olimex ARM-JTAG-EW Programmer           yes (auto)
Raisonance RLink JTAG Programmer        yes (auto)
USBProg JTAG Programmer                 yes
Andes JTAG Programmer                   yes (auto)
CMSIS-DAP Compliant Debugger            yes
Nu-Link Programmer                      yes (auto)
Cypress KitProg Programmer              yes (auto)
Altera USB-Blaster Compatible           yes
ASIX Presto Adapter                     yes (auto)
OpenJTAG Adapter                        yes
Linux GPIO bitbang through libgpiod     no
SEGGER J-Link Programmer                yes
Bus Pirate                              yes (auto)
Use Capstone disassembly framework      no
#(The last command will install the new openocd in the /usr/local/bin)
make && sudo make install

Once the fresh openocd is installed, one needs a configuration file for the board, fortunately there is already one available, that is attached to this message, it has the right SoC and the right flash so you don't have to do anything  ;D.
The next configuration file that is needed it the one for the JTAG adapter, I'm using a cheap (12EUR) J-Link clone (observe picture). IMMV, then you have to use the suitable configuration file for your adapter.

Finally launch the OpenOCD server:

Code: [Select]
openocd -f interface/jlink.cfg -f target/voltcraft_dso-3062c.cfg
Open On-Chip Debugger 0.11.0+dev-00463-ga498a3dea (2021-11-14-12:31)
Licensed under GNU GPL v2
For bug reports, read
http://openocd.org/doc/doxygen/bugs.html
Info : auto-selecting first available session transport "jtag". To override use 'transport select <transport>'.
Info : J-Link V9 compiled May  7 2021 16:26:12
Info : Hardware version: 9.70
Info : VTarget = 3.279 V
Info : Reduced speed from 16000 kHz to 15000 kHz (maximum)
Info : Reduced speed from 16000 kHz to 15000 kHz (maximum)
Info : clock speed 16000 kHz
Info : JTAG tap: s3c2440.cpu tap/device found: 0x0032409d (mfg: 0x04e (Samsung), part: 0x0324, ver: 0x0)
Info : Embedded ICE version 2
Info : s3c2440.cpu: hardware has 2 breakpoint/watchpoint units
Info : starting gdb server for s3c2440.cpu on 3333
Info : Listening on port 3333 for gdb connections
[b]Info : JTAG tap: s3c2440.cpu tap/device found: 0x0032409d (mfg: 0x04e (Samsung), part: 0x0324, ver: 0x0)[/b]
Warn : NOTE! DCC downloads have not been enabled, defaulting to slow memory writes. Type 'help dcc'.
Warn : NOTE! Severe performance degradation without fast memory access enabled. Type 'help fast'.
target halted in ARM state due to debug-request, current mode: Undefined instruction
cpsr: 0x800000db pc: 0x33d801c4
MMU: disabled, D-Cache: disabled, I-Cache: enabled
[b]#0: NAND 64MiB 3.3V 8-bit (Samsung) pagesize: 512, buswidth: 8,
blocksize: 16384, blocks: 4096
[/b]
Info : Listening on port 6666 for tcl connections
Info : Listening on port 4444 for telnet connections
Info : accepting 'telnet' connection on tcp/4444
(it will stay here waiting to be killed, but I keep it in the foreground to see what is printed and do the telnet in another terminal window)

As you can see the SoC and the flash are recognized immediately, so install your telnet program and connect by doing:

telnet localhost 4444


You should get back something like:
Code: [Select]
telnet localhost 4444
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
Open On-Chip Debugger

One can try some commands to probe the NAND again::
Code: [Select]
> nand probe 0
NAND flash device 'NAND 64MiB 3.3V 8-bit (Samsung)' found

In an attempt to change the the programming speed from glacial to extremely slow   :scared:  I've used their advice and enable the fast memory access:

Code: [Select]
s3c2440.cpu arm7_9 fast_memory_access enable
I don't think that it increased the speed too much, but just for completion.


###### !!!!!!!!!  WARNING, FROM HERE ON IS THE POINT OF NO RETURN, YOUR SCOPE WILL BE BRICKED AND MAY OR NOT COME BACK  !!!!!!!!!! #############
###### !!!!!!!!!  DO YOU HAVE YOUR FULL FIRMWARE BACKUP WITH OOB, IF NOT STOP NOW  !!!!!!!!!! #############



So let's irreversible ERASE THE NAND:
Code: [Select]
> nand erase 0
s3c2440_read_block_data: reading data: 0x5569077b5730, 0x7fff3c3a61e2, 6
s3c2440_read_block_data: reading data: 0x5569077b5730, 0x7fff3c3a61e2, 6
... a MILLION of these lines will scroll, and scroll, and scroll, for ca. 5 min   :palm:
... and then, suddeny:
erased blocks 0 to 4095 on NAND flash device #0 'NAND 64MiB 3.3V 8-bit'

Then is time to program your full firmware backup with OOB data:
Code: [Select]
> nand write 0 fw_backup.bin 0 oob_raw

And here we stop for the moment, because after two hours, the operation didn't completed yet  |O, when/if will complete I'll update the post, but I have high hopes that will be done, as opposed with the erase operation the write is completely mute :( and doesn't produce any message on the console, but the good thing is that there are also no error messages  ^-^.

EDIT: IT WORKS !!!

At the GLORIOUS speed of 1.509 KiB/s  :-DD !!!

But at least it runs now happily (it does fail the self-calibration with the files included in the donated firmware, but this thread provides EVERYTHING !!!, including how to redo the factory calibration  :D )

So yeah, I've now seen what produced the original issue, the previous owner seem to have installed the update available on the Voltcraft site, that bricks the <15000 series device and this is a 11xxx, and the update even has a BIG WARNING file, but I guess is hopeless for some, egal what warning one includes.

In any case, the logo made with the logo editor from this thread can be both put in the Linux partition and the  resulted .ebm file can be put in the logo flash partition as well, because this was screwed-up as well.

The only sad part is the sad condition of the well known programmers with OpenOCD, it's ridiculous to have complex programmable state machines and just use them for bit banging, via a gorrilion layers of abstraction, no wonder that the parallel port adapter works much better :(, but I guess it is how it is.

Now I can finally assist newbies like I was with everything  ^-^.

Cheers,
DC1MC

Cheers,
DC1MC


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on November 16, 2021, 03:14:22 pm
Hello. There is a dso5102p Hunter. When measuring, it hovered. After the reboot, the inscription appears on the screen (Error: the Fpga version does not match the application!!!). It does not respond to pressing the buttons. When exiting to recovery, the buttons don't work either. Please tell me what can be done ? I'm sorry if I don't understand using a translator .

Hi, don't worry, if it died because of the NAND corruption, it can be saved. In the worst case, you'll need to replace the NAND chip, is annoying, but not very bad, because is TSOP not BGA. You need to connect to the serial port and tell us what is saying on the console, if you have a firmware backup maybe is still possible to update using linux, and you won't need to get a JTAG adapter, but fortunately they are not expensive.
Of course if the FPGA has died, then is gone, but I never heard of such a defect.

DC1MC
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on November 16, 2021, 07:45:32 pm

And here we stop for the moment, because after two hours, the operation didn't completed yet  |O, when/if will complete I'll update the post, but I have high hopes that will be done, as opposed with the erase operation the write is completely mute :( and doesn't produce any message on the console, but the good thing is that there are also no error messages  ^-^.

EDIT: IT WORKS !!!


It took some time, I must say I waited with fingers crossed during this cliffhanger...!

Well, at least the backup I made in April 2013 served a purpose after all.

Have fun,
Morris6

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on November 16, 2021, 07:59:04 pm

And here we stop for the moment, because after two hours, the operation didn't completed yet  |O, when/if will complete I'll update the post, but I have high hopes that will be done, as opposed with the erase operation the write is completely mute :( and doesn't produce any message on the console, but the good thing is that there are also no error messages  ^-^.

EDIT: IT WORKS !!!


It took some time, I must say I waited with fingers crossed during this cliffhanger...!

Well, at least the backup I made in April 2013 served a purpose after all.

Have fun,
Morris6

Thank you again my good man, besides the factory calibration that anyway had to be re-done after 200MHz update and there is already a nice detailed procedure, all seem to work, I'll give it to my friend and let him deal with it, I've had a look at the board and wondered why I can't see the place for magnetics and Ethernet PHY, well is because is a serial port only !!!, of course, the optical isolators and their resistors are not mounted as well, but for the moment I don't care, if my friend will want to solder them I'll help. But this did show me that OpenOCD is in a sad state as it was in 2016 and I didn't had any 32-bit windows machine, now I have, even if it didn't prove too useful (still no LPT).

I was wondering, did you attempt to upgrade the FW to the latest from @tinhead google drive, it seems that there is a 2.07 from 2014 ?, I will attempt to install it when the cold will let me live again.
Also, stupid question, how one does access the logic analyzer menu, the cable octopus must be already inserted to work or how is done, in which chinesian menu is buried, Acquire ?

Cheers,
DC1MC
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on November 16, 2021, 09:42:36 pm
The picture in your message #3162, Jlink.jpg, shows the daughter board. Near the connector to the motherboard is a footprint JC1. That's for the magnetics. The dm9000 ethernet chip is on the bottom side of the daughter board if I remember correctly. the RJ45 plug is on the main board, J2 just visible in your picture near the ribbon cable connector for your Jtag setup.

The logic analyzer menu is reached with the F7 button. A push rotates between zoom, LA, and normal.

FWIW, the latest usable firmware for this thing is version is 2.7.01 date 140815.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on November 16, 2021, 09:52:31 pm
Heh, thanks again man, I never thought to look at the daughter board I thought is the LA add-on for the MSO only, the RJ45 connector footprint was easy to spot, but looking around I've only seen the optical isolators under. Do know by chance the  order code for the compatible magnetics ? I may be arsed to remove the mainboard again to solder the stuff or I'll try to see if it sees a cheap USB-Ethernet adapter on the front USB, hey if the antique kernel sees an USB hub with a memory stick AND an USB Network adapter I think is the best setup possible.

Bloody F7 huh, fully unlabeled  |O

EDIT: Also, searching for a fast OpenOCD compatible JTAG adapter turned out a post from me in 2018 when I was complaining that the USB Blaster from Altera under OpenOCD just yields 7KiB on the "obscure" iMX28 SoC, the things definitely didn't improved in the meantime, au cotraire.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on November 17, 2021, 11:16:42 am
@DC1MC: Maybe have a look at the schematic. The last page has the option LAN info. Transformer is a H1102NL, looks not too difficult to score one. But once again, the network functionality is restricted as far as I remember. The Linux driver and adaptation was done by Tinhead cs. I'm not sure the adaptation is in the mainstream firmware. It has never been a factory supported option, as far as I know. So no integration in the software further, no webpage or SCPI. Only Telnet on a fixed IP??

The user manual for the thing is still available it seems, from Hantek: http://www.hantek.com/Product/MSO5000D/MSO5000D_Manual.pdf (http://www.hantek.com/Product/MSO5000D/MSO5000D_Manual.pdf)

Have fun with all the bugs this thing has, in my view it was never a completed product.
Morris6
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on November 17, 2021, 07:35:59 pm
@DC1MC: Maybe have a look at the schematic. The last page has the option LAN info. Transformer is a H1102NL, looks not too difficult to score one. But once again, the network functionality is restricted as far as I remember. The Linux driver and adaptation was done by Tinhead cs. I'm not sure the adaptation is in the mainstream firmware. It has never been a factory supported option, as far as I know. So no integration in the software further, no webpage or SCPI. Only Telnet on a fixed IP??

The user manual for the thing is still available it seems, from Hantek: http://www.hantek.com/Product/MSO5000D/MSO5000D_Manual.pdf (http://www.hantek.com/Product/MSO5000D/MSO5000D_Manual.pdf)

Have fun with all the bugs this thing has, in my view it was never a completed product.
Morris6

Is not for me is for a friend that is a scientist and is happy that he'll be able to relatively easy run some special apps on it. I had enough on my hands with a Rigol MSO.
How after renaming and editing the files, it appears in the System Status as "MSO5202B" but the time base goes only to 4ns/div and not to 2ns/div, even with just one channel enabled  :palm: , do I need to modify the EEPROM as well, or I'm doing something wrong.
This should be the last thing to do before I'll close it and send it to its destiny ;).

 Cheers,
 DC1MC
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: morris6 on November 17, 2021, 09:32:08 pm
Well, the hack is supposed to work, also for the MSO5062B. It is indeed working for the thing I have here. So maybe start again at page 1 of this thread?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Dragon1559 on November 18, 2021, 04:50:38 pm

You need to connect to the serial port and tell us what is saying on the console, if you have a firmware backup maybe is still possible to update using linux, and you won't need to get a JTAG adapter, but fortunately they are not expensive.

DC1MC
[/quote]
Sorry confused how to answer. Is that what you wanted ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on November 18, 2021, 05:07:28 pm
Well, the hack is supposed to work, also for the MSO5062B. It is indeed working for the thing I have here. So maybe start again at page 1 of this thread?

After updating the fw with the latest from @tinhead Google drive, everything woks OK, the device was re-calibrated, re-assembled and delivered to its owner, waiting for the feed-back, thanks for all the help, both you, @tinhead and al the other people that made it possible  :clap:.

 Cheers,
 DC1MC

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Spectrum on December 22, 2021, 09:31:24 am
Hi, I have an Hantek DSO 8072E V1 0.1 an Handheld Scope with DMM, Bandwith 70 Mhz. There is also the 8102E / 8152E / 8202E, version 100/150/200 MHz. Now you can only buy the 200 MHz version, so I wondered if it is possible to have an upgrade from 70 to 200 MHz. Do you think it is possible ?

Thanks for help and answers.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gcs190 on December 30, 2021, 11:16:20 pm
Yes, without any problem, I did so, check my messages in this thread, it is very easy.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Spectrum on December 31, 2021, 09:22:42 am
Yes, without any problem, I did so, check my messages in this thread, it is very easy.
Thank you for the answer, in which page you wrote this ? I do not see my model (Hantek DSO 8072E) in neither messages
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tonyalbus on January 21, 2022, 04:58:31 pm
In 2022 the hack on the DSO5072P is still working and you can just upgrade the firmware after from the official website, the firmware update is for the whole 5000P Series so no problem which to pick.
One thing i doubt still, is the backup.. i have read now all this tread and the main links go to a backup tool with 4 files, while some now mention a backup with 8 partitions.
Can someone link to the 8 partition backup that is verified working for the DSO5072P ?

Here is a video of my process step by step with test on bandwith and risetime, before and after.

Yes it still can be done in 2022 without opening.. Thanks to a lot of people here. Thanks All


https://www.youtube.com/watch?v=WdBnRapWFv4 (https://www.youtube.com/watch?v=WdBnRapWFv4)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: jasom on January 26, 2022, 09:42:54 pm
is that hack working also for DSO5102B?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: soesante on March 22, 2022, 12:55:25 am
Tried to find the full nand backup for dso5072p everywhere in the forum but no luck.. would be much appreciate if anyone willing to share their full backup of dso5072p.. my dso5072p firmware is corrupted.. and stuck in the boot logo screen. And  would try to fix the firmware with all the guideline available in this forum..
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: chinoy on April 08, 2022, 01:23:16 pm
Yes from what I have read it should.
Only confusion I have is that in some videos people are updating the firmware post hack to the 5102B firmware. Saw it on a few videos.
And if we convert it to 200 Mhz. Why are we updating with the older 100 Mhz firmware.
Also it would be nice if one of the wizards like tinman. Could figure out a way to do SPI on this scope.

Ps: I am still stuck on step 1 create back. The complete confusion about 4 file dump and 8 file dump.

This is taken from the latest backup tool.
Note - the backup is creating dump of all/specified mtd partitions with following params:
- When 'oob.txt' file exists a dump with OOB will be created. File 'omitoob.txt' is opposite option.
- When 'dumpbad.txt' file exists a dump with bad PEBs will be created. File 'omitbad.txt' is opposite option.
- When 'mtd.txt' file exists a 'grep -f mtd.txt' will be used as filter for /proc/mtd output. When it is missing, all MTD partition found in /proc/mtd will be dumped.

(The above has me totally confused. Maybe I just need to catch up on some sleep).

is that hack working also for DSO5102B?

I started to read this post from page 1. Only reached page 50.
I got my scope on flipkart for 170$ USD.
It was delivered. And it works. It came with 200 Mhz Probes. Says 80/100/150/200
Here is a picture showing serial number, firmware etc.
My only objective right now is to backup my firmware.
I have a USB to UART because its used on a few of my products.
The seller vanished. Cant contact. Was finally able to register my product on the hantek site. 
We have a few guys selling these sopes here all claim to be official dealers which is funny.

https://drive.google.com/file/d/15Pm-G6RVFpDAAb4ZEi4SiN4tTDGaiS8v/view?usp=sharing (https://drive.google.com/file/d/15Pm-G6RVFpDAAb4ZEi4SiN4tTDGaiS8v/view?usp=sharing)

Grab this file fast if you cant boot its only up for another 4 days.
This is for 5102P sold in 2022. i.e. serial number is very close to mine. And it has been provided on the hantek support forum. The file will vanish in 4 days. Before providing this link he asked for his serial number. Not sure what the implications are of that. In case you cant boot this file will restore your scope it has 4 files inside it. kernel.bin/rootfs.ubi/recover_burn_dso_nocfg_200917.up (I fear this might be in Chinese). I will ask for the same using my serial number. Mine is english.
https://www.filemail.com/d/zodmkhvophkuyrm (https://www.filemail.com/d/zodmkhvophkuyrm)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: chinoy on April 11, 2022, 03:31:49 pm
Tried to find the full nand backup for dso5072p everywhere in the forum but no luck.. would be much appreciate if anyone willing to share their full backup of dso5072p.. my dso5072p firmware is corrupted.. and stuck in the boot logo screen. And  would try to fix the firmware with all the guideline available in this forum..

I am pretty sure I saw some backups for the dso5072p on tinheads microsoft cloud drive. I heard he has also shared some files on his google drive. You can also find schematics for most of these scopes on his cloud.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ricsne2010 on April 12, 2022, 06:45:39 am
The way in which the backup .txt HELP description should read is as follows: (since english was not his first language, this is what I was able to determine and I have tested and it works)
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Note - the backup will create a dump of all "or" specified "mtd" (aka Mounted) partitions, using the following .TXT files and or params:

- If you create an empty .TXT file with the file name 'oob.txt' on the root of the flash drive, a dump of the OOB file(s) will be created. If you create a empty TXT file named 'omitoob.txt', then an OOB file will NOT be created. (if you break down the .txt file name, the first 4 letters of the second file name is "OMIT" aka "ignore")

-  If you create an empty .TXT file with the file name 'dumpbad.txt'  on the root of the flash drive, a dump of the file(s) PEBs will be created. If you create a empty TXT file named 'omitbad.txt' the the PEB file(s) will NOT be created.

- If you create an empty .TXT file with the file name 'mtd.txt', a 'grep -f mtd.txt' will be used as filter for /proc/mtd output. (meaning the system will look with this txt file to see what partitions you want to copy to the USB drive). If you DON'T create a file called 'mtd.txt', then ALL MTD partition found in the /proc/mtd directory will be dumped. (meaning, DON'T create this .txt file, so that you will copy all the MOUNTED drives into your USB)
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Keep in mind, each of these files that you create (oob.txt, and dumpbad.txt) must be in the root of the USB drive where your backup script file is located. When you execute the "Firmware Update" feature on any DSO5000 device, the backup script will look for these files and take the predefined action. I did this on my device (a DSO5102P) just last night and I got all the necessary files I needed to conduct a restore should I need to do one via UART/USB.....

Hope this helps in claifying what the file "options" are when doing the backup of the scope's files.

Cheers
Rich
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: chinoy on April 12, 2022, 07:35:32 am
dam i love this community.
Thanks so much Rich. That clears up all my doubts.
It would be a big help if you also mentioned what options you used to get your back up. Along with what options will give us the safest and most comprehensive back up.
My original plan was to take backups using all the options and hope that if things went south one of the backups would save me.
But reading your post it would seem you only used the options oob.txt, and dumpbad.txt
Keep us posted on your progress.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ricsne2010 on April 12, 2022, 04:19:36 pm
Look at the bottom of this threaded post... you will see a link to a file called "Tools_P_models.zip" - the instructions for use are the same as other models.... see a previous post in this thread (on page 128) where I clear up the information regarding the use of the .txt files needed to appear on the blank USB drive (along with the backup script file)

https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg264194/#msg264194 (https://www.eevblog.com/forum/testgear/hantek-tekway-dso-hack-get-200mhz-bw-for-free/msg264194/#msg264194)

Cheers
Rich
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: ricsne2010 on April 12, 2022, 04:21:28 pm
Yes, this hack is still functional for all models of the Hantek DSO's....  on the first page of this thread you will find the necessary information about the various hacks as well as some other features that your scope may be able to do....

Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: chinoy on April 13, 2022, 03:54:23 pm
Thanks.

Here is the info related to Scope Name / Serial / HW Version
https://drive.google.com/file/d/15Pm-G6RVFpDAAb4ZEi4SiN4tTDGaiS8v/view?usp=sharing (https://drive.google.com/file/d/15Pm-G6RVFpDAAb4ZEi4SiN4tTDGaiS8v/view?usp=sharing)

Here is a Zip file of my 4 file backup.
This is for a fresh out of the Box 5102P purchased in 2022. English. 

https://drive.google.com/file/d/1HbhIHkBzDSekn16malZbwauEgkLgOmG9/view?usp=sharing (https://drive.google.com/file/d/1HbhIHkBzDSekn16malZbwauEgkLgOmG9/view?usp=sharing)

Here is the backup of my 7 file Backup using the new script. With files with oob.txt and dumpbad.txt
I have a feeling this did not backup the last partition as others have reported in earlier posts.
If one of the experts could have a look. I too feel the file sizes maybe too small.

https://drive.google.com/file/d/1VYzGK4KdRO1FzGTx_WZTktcgsCdotpS6/view?usp=sharing (https://drive.google.com/file/d/1VYzGK4KdRO1FzGTx_WZTktcgsCdotpS6/view?usp=sharing)


If you can not boot saying unit was not shut down right and get a black screen with 3 options. Use this to restore your Scope. (Previous link up top may have been for chinese. This version was given to me by hantek for my serial number and english interface. Copy these files to USB and press F3 option.

https://drive.google.com/file/d/1WJPtlqj6fAkvDJjJCMwuILxINMryFLEr/view?usp=sharing (https://drive.google.com/file/d/1WJPtlqj6fAkvDJjJCMwuILxINMryFLEr/view?usp=sharing)


I cant find the file DSO-BW-Changer.exe
If somebody can message me a link. If its cant be posted on open forum.
The video above uses it. To change the Speed. I have searched the forum for this file. Still searching.


You can grab the file here. Along with the files you will need to create a backup. Thanks to tonyalbus and his video.

https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbmJvVkJsUmE3N0pzQjc1MTNwWkNnTWdGeGhJZ3xBQ3Jtc0ttN24yTjN4dy1FMXc1YTJLVTg2d3Y2cTNUTnJJYlVTVWR2Wk0wajM1b29tQzMzTnk1MUdJQ3hZRGx1Nkota1lONjVPX0RLVHlVdVYzckhRLVlMVm5QV3lSa01iZXhmN3pKU3JPeU4tQ0lNUl9zOUU5cw&q=https%3A%2F%2Fwww.tonyplaza.nl%2Fdownload%2FYT259%2FDSO5072Ppack.zip (https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbmJvVkJsUmE3N0pzQjc1MTNwWkNnTWdGeGhJZ3xBQ3Jtc0ttN24yTjN4dy1FMXc1YTJLVTg2d3Y2cTNUTnJJYlVTVWR2Wk0wajM1b29tQzMzTnk1MUdJQ3hZRGx1Nkota1lONjVPX0RLVHlVdVYzckhRLVlMVm5QV3lSa01iZXhmN3pKU3JPeU4tQ0lNUl9zOUU5cw&q=https%3A%2F%2Fwww.tonyplaza.nl%2Fdownload%2FYT259%2FDSO5072Ppack.zip)

Link to Tinmans MS Cloud one drive a treasure trove of info. I heard he has a google drive also. (Link for his Debunked Tool)
http://1drv.ms/1hf4SgO (http://1drv.ms/1hf4SgO)

Another thing we need to thank tonyalbus  for is the fact. That he was the first guy to clear up the fact that just because you had a 2ms time scale did not mean you had an upgraded scope. Pages of posts were this was discussed. He was the first guy to prove that theory wrong.

One last mystery I still need to solve is how did he manage to find that file that does the firmware change via windows. DSO-BW Changer.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Bruno02 on June 19, 2022, 01:32:09 pm
Hello from France,
I am trying to backup the content of my DSO5072P (firmware v3.40.0) with the tool dso5kp_backuptool2.up. I tried with a USB key formatted in FAT then in exFat then in FAT32. Each time the backup fails with an error code 0xfe.
Can someone please advise me?
Thank you!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Bruno02 on June 24, 2022, 02:41:34 pm
Nobody?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Tugo on June 25, 2022, 04:35:22 pm
I have the same HW and SW as you (DSO5072P with firmware v3.40.0).
From my backup folder I believe I used 2 different backup tools (old and new - well they were new at the time - November 2019).
Old version got me 4 files (boot, kernel, logo and root) which were just 1MB, 2MB and twice 512kB.
I managed to get 8 partitions I just forgot how I did that.
They are about 127MB all (largest just below 70MB).

I suggest you to check everything chinoy put in the post.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Bruno02 on June 26, 2022, 11:21:48 am
Hi,
Thank you Tugo.
I finally found the problem this morning, it was the USB key that was the problem. With 2 other keys, it works without problem :)
If other people are wondering, the key must be formatted in FAT32.
And now the 200MHz hack :)

I add that it is absolutely necessary that the key has a formatted capacity of at least 4GB, otherwise it does not work. That was my problem.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Tugo on June 27, 2022, 07:54:58 pm
And what was procedure for your oscilloscope and what did you do to hack it to 200MHz?
I didn't hack it because I didn't know if it can be done with newer HW.
I believe we have the same HW and SW version.

And how did you test it to know that you really have 200MHz now?
Did you do just software hack or also HW?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Bruno02 on June 28, 2022, 05:00:50 am
Hi Tugo,

For the backup of the 8 elements, you need a key that contains in the root :
- dso5kp_backuptool2.up
- dumpbad.txt (empty file)
- oob.txt (empty file)
The saved files will be in the "dump" directory.
The operation takes a few minutes.

For the hack, I used the software "DSO-BW-Changer.exe" via the USB link (with the rear connector). Note that the oscilloscope does not restart itself as indicated, it must be rebooted.

I tested the hack with a VHF generator (which does not go higher than 160MHz), it works.

I just compared 2 backups (before and after the hack) with WinMerge, there are many differences between the 2 files "mtd5-rootfs.bin". The others are identical.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Tugo on June 29, 2022, 04:45:40 pm
Did you do any HW mod like removing 2 SMD capacitors?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Bruno02 on June 30, 2022, 04:48:14 am
No hardware modification, I didn't even open the case.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: McJanDK77 on July 27, 2022, 10:13:53 pm
Is it possible to use this DSO BW Changer software for my DSO4104C ?
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: markhen on August 02, 2022, 02:10:30 am
I followed the instructions above and successfully converted my DSO5072P to 200MHz - thanks to all!!

I also have a Hantek MSO5074FG - has any one successfully upgraded this model? I see some references in the thread, and I've tried the tools that are possibly common, but no joy (at all). I'd love to upgrade this 4 chan scope!!

Cheers

Mark
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: StuBudd on August 25, 2022, 12:41:57 am
A late night play:
New DSO5072P
SW 3.40.0 (210308.0)
HW 1010xffff8108
Power Board DSO5000 Series Power Data 2020/08 Ver 2.1
Has a "card reader" hardware between CR2032 and beeper.
Mainboard 2015/5/26 Ver 1.01 DSO5000C Serial MB

Windows 8.1
USB driver had to be installed booting into "Disable Driver Signature Enforcement"
Could not connect to device (no idea ~ SW version!?!)

Upgraded SW to 3.40.0 (210225.0) dso5kp_func_dso5072p20210225.up ~ No backup created prior to upgrade

This upgrade is from Hantek ~ no idea why an earlier SW version.

Can now connect to device. Scope software run in compatibility mode Windows 8.

DSO-BW-Changer.exe worked after installing C++ Redistribution for missing DLL. Think 2010 version. 2015 may not work.

DSO-BW-Changer.exe seems to work although I have no idea how to test. Software shows DSO200MB.

Device functions.  :-//

But then I am new to oscilloscopes :)

Got some 200MHz probes coming  :-+

Thanks and now off to sleep.


Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tehnics on September 23, 2022, 04:58:47 pm
Hello,
I am new here and I have a problem with my Hantek 5072P. Was working fine but not used for about half year. Last week wanted to use it and logo appear and freeze.
Well, I do not have a back-up done, I never though will be a problem with it.
So I started to search on internet about issue and most of the google research leads to this topic.

I used  DNW.Exe and via serial I was able to see all message on start-up boot.

Boot log file is below

Code: [Select]
*** Warning - bad CRC or NAND, using default environment

##### EmbedSky BIOS for SKY2416/TQ2416 #####

This Board: SDRAM is 64MB; LCD display size is: 800 X 480

Press Space key to Download Mode.!

SD:File System init failed!

Start Linux ...


NAND read: device 0 offset 0x300000, size 0x400000

 4194304 bytes read: OK

Boot with zImage


Starting kernel ...


Uncompressing Linux... done, booting the kernel.
Linux version 3.2.35 (root@zgt) (gcc version 4.3.3 (Sourcery G++ Lite 2009q1-176) ) #10 PREEMPT Thu Feb 9 10:40:49 CST 2017
CPU: ARM926EJ-S [41069265] revision 5 (ARMv5TEJ), cr=00053177
CPU: VIVT data cache, VIVT instruction cache
Machine: SMDK2416
Memory policy: ECC disabled, Data cache writeback
CPU S3C2416/S3C2450 (id 0x32450003)
S3C24XX Clocks, Copyright 2004 Simtec Electronics
CPU: MPLL on 800.000 MHz, cpu 400.000 MHz, mem 133.333 MHz, pclk 66.666 MHz
CPU: EPLL on 96.000 MHz, usb-bus 48.000 MHz
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
Kernel command line: noinitrd ubi.mtd=3 root=ubi0:rootfs rootfstype=ubifs init=/linuxrc console=ttySAC0 mem=64M
PID hash table entries: 256 (order: -2, 1024 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 64MB = 64MB total
Memory: 58996k/58996k available, 6540k reserved, 0K highmem
Virtual kernel memory layout:
    vector  : 0xffff0000 - 0xffff1000   (   4 kB)
    fixmap  : 0xfff00000 - 0xfffe0000   ( 896 kB)
    vmalloc : 0xc4800000 - 0xf6000000   ( 792 MB)
    lowmem  : 0xc0000000 - 0xc4000000   (  64 MB)
    modules : 0xbf000000 - 0xc0000000   (  16 MB)
      .text : 0xc0008000 - 0xc03f0000   (4000 kB)
      .init : 0xc03f0000 - 0xc0410000   ( 128 kB)
      .data : 0xc0410000 - 0xc05a9140   (1637 kB)
       .bss : 0xc05a9164 - 0xc05c6e9c   ( 120 kB)
SLUB: Genslabs=13, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
NR_IRQS:107
irq: clearing subpending status 00000002
Calibrating delay loop... 198.45 BogoMIPS (lpj=496128)
pid_max: default: 4096 minimum: 301
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
NET: Registered protocol family 16
S3C2416: Initializing architecture
S3C2416: IRQ Support
S3C24XX DMA Driver, Copyright 2003-2006 Simtec Electronics
DMA channel 0 at c4804000, irq 88
DMA channel 1 at c4804100, irq 89
DMA channel 2 at c4804200, irq 90
DMA channel 3 at c4804300, irq 91
DMA channel 4 at c4804400, irq 92
DMA channel 5 at c4804500, irq 93
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
s3c-i2c s3c2410-i2c: slave address 0x10
s3c-i2c s3c2410-i2c: bus frequency set to 9 KHz
s3c-i2c s3c2410-i2c: i2c-0: S3C I2C adapter
Advanced Linux Sound Architecture Driver Version 1.0.24.
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
NET: Registered protocol family 1
RPC: Registered named UNIX socket transport module.
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
RPC: Registered tcp NFSv4.1 backchannel transport module.
s3c-adc s3c24xx-adc: attached adc driver
msgmni has been set to 115
io scheduler noop registered (default)
io scheduler cfq registered
s3c-fb s3c-fb: window 0: fb
s3c-fb s3c-fb: LCD type is TN83 800*480, default_bpp=16, pixclock=5
s3c-fb s3c-fb: window 1: fb
s3c-fb s3c-fb: LCD type is TN83 800*480, default_bpp=16, pixclock=5
s3c2440-uart.0: ttySAC0 at MMIO 0x50000000 (irq = 70) is a S3C2440
console [ttySAC0] enabled
s3c2440-uart.1: ttySAC1 at MMIO 0x50004000 (irq = 73) is a S3C2440
s3c2440-uart.2: ttySAC2 at MMIO 0x50008000 (irq = 76) is a S3C2440
s3c2440-uart.3: ttySAC3 at MMIO 0x5000c000 (irq = 94) is a S3C2440
loop: module loaded
S3C24XX NAND Driver, (c) 2004 Simtec Electronics
info->cpu_type=3, tacls_max=8
s3c24xx-nand s3c2416-nand: Tacls=3, 22ns Twrph0=7 52ns, Twrph1=3 22ns
s3c24xx-nand s3c2416-nand: System booted from NAND
s3c24xx-nand s3c2416-nand: NAND ECC disabled
NAND device: Manufacturer ID: 0xec, Chip ID: 0xf1 (Samsung NAND 128MiB 3,3V 8-bit)
NAND_ECC_NONE selected by board driver. This is not recommended!
Scanning device for bad blocks
Bad eraseblock 103 at 0x000000ce0000
Bad eraseblock 242 at 0x000001e40000
Creating 8 MTD partitions on "NAND":
0x000000000000-0x000000100000 : "uboot"
0x000000100000-0x000000180000 : "params"
0x000000180000-0x000000380000 : "logo"
0x000000380000-0x000000400000 : "misc"
0x000000400000-0x000000800000 : "kernel"
0x000000800000-0x000004e00000 : "rootfs"
0x000004e00000-0x000005200000 : "kernel_bk"
0x000005200000-0x000008000000 : "recover"
UBI: attaching mtd3 to ubi0
UBI: physical eraseblock size:   131072 bytes (128 KiB)
UBI: logical eraseblock size:    126976 bytes
UBI: smallest flash I/O unit:    2048
UBI: VID header offset:          2048 (aligned 2048)
UBI: data offset:                4096
UBI: max. sequence number:       0
UBI error: ubi_read_volume_table: the layout volume was not found
UBI error: ubi_init: cannot attach mtd3
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
s3c2410-ohci s3c2410-ohci: S3C24XX OHCI
s3c2410-ohci s3c2410-ohci: new USB bus registered, assigned bus number 1
s3c2410-ohci s3c2410-ohci: irq 42, io mem 0x49000000
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
usbcore: registered new interface driver usblp
usbcore: registered new interface driver uas
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
g_serial gadget: Gadget Serial v2.4
g_serial gadget: g_serial ready
s3c-hsudc s3c-hsudc: bound driver g_serial
samsung-ts s3c2416-ts: driver attached, registering input device
input: S3C24XX TouchScreen as /devices/virtual/input/input0
S3C24XX RTC, (c) 2004,2006 Simtec Electronics
s3c-rtc s3c2410-rtc: rtc disabled, re-enabling
s3c-rtc s3c2410-rtc: rtc core: registered s3c as rtc0
i2c /dev entries driver
S3C2410 Watchdog Timer, (c) 2004 Simtec Electronics
s3c2410-wdt s3c2410-wdt: watchdog inactive, reset disabled, irq disabled
sdhci: Secure Digital Host Controller Interface driver
sdhci: Copyright(c) Pierre Ossman
s3c-sdhci s3c-sdhci.1: clock source 0: hsmmc (133333333 Hz)
s3c-sdhci s3c-sdhci.1: clock source 1: hsmmc (133333333 Hz)
s3c-sdhci s3c-sdhci.1: clock source 2: hsmmc-if (24000000 Hz)
mmc0: SDHCI controller on samsung-hsmmc [s3c-sdhci.1] using ADMA
S3C24XX_UDA134X SoC Audio driver
UDA134X SoC Audio Codec
asoc: uda134x-hifi <-> s3c24xx-iis mapping ok
ALSA device list:
  #0: S3C24XX_UDA134X
TCP cubic registered
NET: Registered protocol family 17
Registering the dns_resolver key type
s3c-rtc s3c2410-rtc: setting system clock to 2000-01-01 00:00:01 UTC (946684801)
VFS: Cannot open root device "ubi0:rootfs" or unknown-block(0,0)
Please append a correct "root=" boot option; here are the available partitions:
1f00            1024 mtdblock0  (driver?)
1f01             512 mtdblock1  (driver?)
1f02            2048 mtdblock2  (driver?)
1f03             512 mtdblock3  (driver?)
1f04            4096 mtdblock4  (driver?)
1f05           71680 mtdblock5  (driver?)
1f06            4096 mtdblock6  (driver?)
1f07           47104 mtdblock7  (driver?)
Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)



I press space key right away pressing power button and I enter in download mode (see attached image). All drivers installed and was no problem to access oscilloscope via USB.
BUT from here I am lost :D.
I look to some video and I understand I should update "rootfs.ubi" *F5 option in menu*, it was done successfully but noting changed, still same problem with freeze logo

Looking more, also I found this topic https://www.eevblog.com/forum/testgear/hantek-dso5102b-need-kernel-zimage-not-booting/ (https://www.eevblog.com/forum/testgear/hantek-dso5102b-need-kernel-zimage-not-booting/)
where might be a problem with Linux kernel and need "zImage.bin" to be uploaded. Does anyone has this file ? What could be problem ?

I have to say that I am not newbie in electronic, but I am totally lost in Linux things, so please be patient with me to make my osciloscope alive.





Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: tehnics on September 24, 2022, 05:46:38 pm
I look more in the log file and what jumped in my eye is the last part:

VFS: Cannot open root device "ubi0:rootfs" or unknown-block(0,0)
Please append a correct "root=" boot option; here are the available partitions:

1f00            1024 mtdblock0  (driver?)
1f01             512 mtdblock1  (driver?)
1f02            2048 mtdblock2  (driver?)
1f03             512 mtdblock3  (driver?)
1f04            4096 mtdblock4  (driver?)
1f05           71680 mtdblock5  (driver?)
1f06            4096 mtdblock6  (driver?)
1f07           47104 mtdblock7  (driver?)
Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)

after this I run again in download mode and press

This is I get as result
Code: [Select]
Enter your selection: 5

Name(enter to view all paramters):

bootargs=noinitrd ubi.mtd=3 root=ubi0:rootfs rootfstype=ubifs init=/linuxrc console=ttySAC0 mem=64M

bootcmd=nand read.jffs2 c0008000 kernel;bootm c0008000

bootdelay=1

baudrate=115200

ethaddr=10:23:45:67:89:ab

ipaddr=192.168.1.6

serverip=192.168.1.8

gatewayip=192.168.1.2

netmask=255.255.255.0

stdin=serial

stdout=serial

stderr=serial

ethact=dm9000

mtdids=nand0=nandflash0

mtdparts=mtdparts=nandflash0:512k@0(bios),512k(params),2048K(logo),4m(kernel),-(root)

partition=nand0,0

mtddevnum=0

mtddevname=bios


Environment size: 504/16380 bytes
as far as I can see,  root=ubi0:rootfs , that is correct or wrong ?

That makes me feel that when linux try to load do not find boot root location/partition. I understand correct ?
How to correct this ? Any idea ?

I had most as same problem as this quy (same error issue) in this topic: https://www.eevblog.com/forum/testgear/hantek-mso5074fg-firmware-upgrade-problem/msg598724/#msg598724 (https://www.eevblog.com/forum/testgear/hantek-mso5074fg-firmware-upgrade-problem/msg598724/#msg598724)
So my solution is to somehow someone to send me a DSO5102P or 5072P back-up file...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Tugo on September 24, 2022, 08:11:10 pm
Hi!
I will not be able to help you with anything beside an advise: how about contacting Hantek directly to tell them what happened when you turned it on after half year of no usage. Later you can tell them more but I wouldn't do that in my first message to them.
And please let us know how it went. Maybe somebody else will also need the same help.
Good luck  :-+

Edit: Or you can go to their forum -> https://www.eediscuss.com/forum.php (https://www.eediscuss.com/forum.php)
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: An-162 on February 27, 2023, 04:06:02 pm
For the backup of the 8 elements, you need a key that contains in the root :
- dso5kp_backuptool2.up
- dumpbad.txt (empty file)
- oob.txt (empty file)
The saved files will be in the "dump" directory.
The operation takes a few minutes.
Thanks a lot!
Without these two text files, I was able to backup only 4 small files, as already mentioned above.
And now 132 MB are saved!
------------------------------------------
Спасибо огромное!
Без этих двух текстовых файлов у меня получалось сделать бекап лишь 4-х небольших файлов, как выше уже писали.
А теперь сохранилось 132 Мб!
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gologan on February 28, 2023, 04:48:50 am
Hello friends !
I have a Hantek oscilloscope DSO5202B , I downloaded the latest firmware from the official Hantek website and I failed to update.
Please help me with the latest software version for my hardware.
Thank you.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on February 28, 2023, 07:37:59 am
OK, let's go quickly over the procedure:

1) you downloaded and extracted the firmware a file, like:
dso5kb_func_dso5202b20190830.up

2) you have found the most miserable, obsolete USB stick, 2GB ideally, (4GB works, for me nothing over 8GB ever worked) and formatted FAT32 and nothing else, no NTFS, no exFAT and such, keep in mind the current version of windoze do not offer FAT32 anymore, they need to be specially convinced, check for yours how do format FAT32.

3) you have copied the extracted firmware file. and NOTHING else on the POS stick freshly formatted.

4) you've repeated the fw update procedure and either works or look back on 1-3 to see what have you done wrong  ^-^.


 Cheers,
 DC1MC
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gologan on February 28, 2023, 08:45:19 am
Thank you for answer.
I did exactly as you said.
After your post, I tried with other USB sticks, the result is the same.
Firmware failed.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: An-162 on February 28, 2023, 04:47:21 pm
And now 132 MB are saved!
Here are the files. Take whoever needs it.
https://drive.google.com/drive/folders/13WVNZfH3aSLwlMV2sJot-DUVy6DNGvMl?usp=share_link
Oscilloscope model in the photo.
Before creating a backup, it is updated with the latest firmware at the moment.
Bandwidth expansion is yet to come.
Now I'm working on a very high slew rate edge generator based on a tunnel diode and a transistor...
-------------------------------------------------------------------
Вот эти файлы. Берите, кому нужно.
https://drive.google.com/drive/folders/13WVNZfH3aSLwlMV2sJot-DUVy6DNGvMl?usp=share_link
Модель осциллографа на фото.
Перед созданием бекапа он обновлен самой последней на данный момент прошивкой.
Расширение полосы пропускания еще предстоит.
Сейчас работаю над генератором фронта с очень большой скоростью нарастания, на основе туннельного диода и транзистора...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on February 28, 2023, 09:13:40 pm
Thank you for answer.
I did exactly as you said.
After your post, I tried with other USB sticks, the result is the same.
Firmware failed.

Well, here I only have one advice and then I'm out of ideas, try to shorten the file name to something like ds5000.up.
If this doesn't work as well, then it could be that the scope installed firmware is the same and it rejects it. Because the latest is from 2013, that is 10 years ago !!!

 Cheers,
 DC1MC
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gologan on March 01, 2023, 03:45:41 am
Thank you both for your replies.  @ DC1MC I'm going to try this afternoon to rename the file to be updated, but I think it won't help because when it starts running, the update bar appears with the green line and in a very short time it gives the error.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: DC1MC on March 01, 2023, 04:38:22 am
Thank you both for your replies.  @ DC1MC I'm going to try this afternoon to rename the file to be updated, but I think it won't help because when it starts running, the update bar appears with the green line and in a very short time it gives the error.

It could then be that it checks and the version is already installed.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: An-162 on March 01, 2023, 04:25:30 pm
Gologan, If I were you, I would contact Hantek support.  :-//
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: Gologan on March 02, 2023, 03:23:30 am
Thank you , god ideea.
I will rwite them.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: vladi552 on May 01, 2023, 09:39:53 pm
Sorry for me, if this is look like a 'FAQ' question. I have difficult problem with my DSO5202BM (PCB v1.01 2013/1/4) device. It is not booted up and H-JTAG (and also OpenOCD) cannot read NAND ID (0x00 returned). Unfortunately, J801 UART connector also does not work. The K9F1G08U0E NAND is dead and I want to replace it with new one. I have T56 programmer (NAND supported) and can do this job, but full dump needed (~132Mb) for DSO5202BM. Can anybody help me, please...
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: sinco on May 11, 2023, 09:47:10 pm
Hello, I would like to create a complete backup of 8 files for the DSO 5072P. On a flash drive I have dumpbad.txt , dso5kp_backuptool2.up and obb.txt. But probably failed, tried 2* different flash drive. Where is my problem. thank you
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mike168 on July 29, 2023, 12:01:26 pm
Hi
I bought a 5202B about 9 years ago.  Recently I downloaded dso5kb_func_dso5202b20190830.up from Hantek to upgrade the firmware.  Immediately after the upgrade, the scope can't start.  See attached.  Unfortunately I didn't backup the original firmware nor take a screen shot of the version.  Can you help?

My serial number is T 1G/012 018406
Thanks.
Title: Re: Hantek - Tekway - DSO hack - get 200MHz bw for free
Post by: mike168 on August 02, 2023, 08:49:58 am
So I still haven't received a working solution from Hantek, despite a perfectly operating 5202B frozen after updating the firmware from the official site.  Although my DSO is not a hacked one, I have followed some of the instructions from this thread to try to solve the problem.  The current status is as seen from below.  Any help would be appreciated.

▒▒*** Warning - bad CRC or NAND, using default environment


##### EmbedSky BIOS for SKY2416/TQ2416 #####
This Board: SDRAM is 64MB; LCD display size is: 800 X 480
Press Space key to Download Mode.!
SD:File System init failed!
Start Linux ...

NAND read: device 0 offset 0x300000, size 0x400000
Skipping bad block 0x00000000
 4194304 bytes read: OK
Boot with zImage

Starting kernel ...

Uncompressing Linux... done, booting the kernel.
Linux version 3.2.35 (root@zgt) (gcc version 4.3.3 (Sourcery G++ Lite 2009q1-176) ) #4 PREEMPT Thu Dec 26 00:49:29 CST 2013
CPU: ARM926EJ-S [41069265] revision 5 (ARMv5TEJ), cr=00053177
CPU: VIVT data cache, VIVT instruction cache
Machine: SMDK2416
Memory policy: ECC disabled, Data cache writeback
CPU S3C2416/S3C2450 (id 0x32450003)
S3C24XX Clocks, Copyright 2004 Simtec Electronics
CPU: MPLL on 800.000 MHz, cpu 400.000 MHz, mem 133.333 MHz, pclk 66.666 MHz
CPU: EPLL on 96.000 MHz, usb-bus 48.000 MHz
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
Kernel command line: noinitrd ubi.mtd=3 root=ubi0:rootfs rootfstype=ubifs init=/linuxrc console=ttySAC0 mem=64M
PID hash table entries: 256 (order: -2, 1024 bytes)
Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
Memory: 64MB = 64MB total
Memory: 59024k/59024k available, 6512k reserved, 0K highmem
Virtual kernel memory layout:
    vector  : 0xffff0000 - 0xffff1000   (   4 kB)
    fixmap  : 0xfff00000 - 0xfffe0000   ( 896 kB)
    vmalloc : 0xc4800000 - 0xf6000000   ( 792 MB)
    lowmem  : 0xc0000000 - 0xc4000000   (  64 MB)
    modules : 0xbf000000 - 0xc0000000   (  16 MB)
      .text : 0xc0008000 - 0xc03e9000   (3972 kB)
      .init : 0xc03e9000 - 0xc0409000   ( 128 kB)
      .data : 0xc040a000 - 0xc05a2840   (1635 kB)
       .bss : 0xc05a2864 - 0xc05bfb3c   ( 117 kB)
SLUB: Genslabs=13, HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
NR_IRQS:99
irq: clearing subpending status 00000002
Calibrating delay loop... 198.45 BogoMIPS (lpj=496128)
pid_max: default: 4096 minimum: 301
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
NET: Registered protocol family 16
S3C2416: Initializing architecture
S3C2416: IRQ Support
S3C24XX DMA Driver, Copyright 2003-2006 Simtec Electronics
DMA channel 0 at c4804000, irq 88
DMA channel 1 at c4804100, irq 89
DMA channel 2 at c4804200, irq 90
DMA channel 3 at c4804300, irq 91
DMA channel 4 at c4804400, irq 92
DMA channel 5 at c4804500, irq 93
bio: create slab <bio-0> at 0
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
s3c-i2c s3c2410-i2c: slave address 0x10
s3c-i2c s3c2410-i2c: bus frequency set to 9 KHz
s3c-i2c s3c2410-i2c: i2c-0: S3C I2C adapter
Advanced Linux Sound Architecture Driver Version 1.0.24.
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 2048 (order: 2, 16384 bytes)
TCP bind hash table entries: 2048 (order: 1, 8192 bytes)
TCP: Hash tables configured (established 2048 bind 2048)
TCP reno registered
NET: Registered protocol family 1
RPC: Registered named UNIX socket transport module.
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
RPC: Registered tcp NFSv4.1 backchannel transport module.
s3c-adc s3c24xx-adc: attached adc driver
msgmni has been set to 115
io scheduler noop registered (default)
io scheduler cfq registered
s3c-fb s3c-fb: window 0: fb
s3c-fb s3c-fb: LCD type is TN83 800*480, default_bpp=16, pixclock=5
s3c2440-uart.0: ttySAC0 at MMIO 0x50000000 (irq = 70) is a S3C2440
console [ttySAC0] enabled
s3c2440-uart.1: ttySAC1 at MMIO 0x50004000 (irq = 73) is a S3C2440
s3c2440-uart.2: ttySAC2 at MMIO 0x50008000 (irq = 76) is a S3C2440
s3c2440-uart.3: ttySAC3 at MMIO 0x5000c000 (irq = 94) is a S3C2440
loop: module loaded
S3C24XX NAND Driver, (c) 2004 Simtec Electronics
info->cpu_type=3, tacls_max=8
s3c24xx-nand s3c2416-nand: Tacls=3, 22ns Twrph0=7 52ns, Twrph1=3 22ns
s3c24xx-nand s3c2416-nand: System booted from NAND
s3c24xx-nand s3c2416-nand: NAND ECC disabled
NAND device: Manufacturer ID: 0xec, Chip ID: 0xf1 (Samsung NAND 128MiB 3,3V 8-bit)
NAND_ECC_NONE selected by board driver. This is not recommended!
Scanning device for bad blocks
Bad eraseblock 31 at 0x0000003e0000
Bad eraseblock 776 at 0x000006100000
Bad eraseblock 915 at 0x000007260000
Creating 4 MTD partitions on "NAND":
0x000000000000-0x000000100000 : "Bootloader"
0x000000100000-0x000000300000 : "LOGO"
0x000000300000-0x000000700000 : "Kernel"
0x000000700000-0x000008000000 : "ROOTFS"
UBI: attaching mtd3 to ubi0
UBI: physical eraseblock size:   131072 bytes (128 KiB)
UBI: logical eraseblock size:    126976 bytes
UBI: smallest flash I/O unit:    2048
UBI: VID header offset:          2048 (aligned 2048)
UBI: data offset:                4096
UBI: max. sequence number:       2062
UBI: attached mtd3 to ubi0
UBI: MTD device name:            "ROOTFS"
UBI: MTD device size:            121 MiB
UBI: number of good PEBs:        966
UBI: number of bad PEBs:         2
UBI: number of corrupted PEBs:   0
UBI: max. allowed volumes:       128
UBI: wear-leveling threshold:    4096
UBI: number of internal volumes: 1
UBI: number of user volumes:     1
UBI: available PEBs:             0
UBI: total number of reserved PEBs: 966
UBI: number of PEBs reserved for bad PEB handling: 9
UBI: max/mean erase counter: 4/2
UBI: image sequence number:  0
UBI: background thread "ubi_bgt0d" started, PID 307
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
s3c2410-ohci s3c2410-ohci: S3C24XX OHCI
s3c2410-ohci s3c2410-ohci: new USB bus registered, assigned bus number 1
s3c2410-ohci s3c2410-ohci: irq 42, io mem 0x49000000
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
usbcore: registered new interface driver usblp
usbcore: registered new interface driver uas
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
g_serial gadget: Gadget Serial v2.4
g_serial gadget: g_serial ready
s3c-hsudc s3c-hsudc: bound driver g_serial
samsung-ts s3c2416-ts: driver attached, registering input device
input: S3C24XX TouchScreen as /devices/virtual/input/input0
S3C24XX RTC, (c) 2004,2006 Simtec Electronics
s3c-rtc s3c2410-rtc: rtc disabled, re-enabling
s3c-rtc s3c2410-rtc: rtc core: registered s3c as rtc0
s3c-rtc s3c2410-rtc: warning: invalid RTC value so initializing it
i2c /dev entries driver
S3C2410 Watchdog Timer, (c) 2004 Simtec Electronics
s3c2410-wdt s3c2410-wdt: watchdog inactive, reset disabled, irq disabled
sdhci: Secure Digital Host Controller Interface driver
sdhci: Copyright(c) Pierre Ossman
s3c-sdhci s3c-sdhci.1: clock source 0: hsmmc (133333333 Hz)
s3c-sdhci s3c-sdhci.1: clock source 1: hsmmc (133333333 Hz)
s3c-sdhci s3c-sdhci.1: clock source 2: hsmmc-if (24000000 Hz)
mmc0: SDHCI controller on samsung-hsmmc [s3c-sdhci.1] using ADMA
S3C24XX_UDA134X SoC Audio driver
UDA134X SoC Audio Codec
asoc: uda134x-hifi <-> s3c24xx-iis mapping ok
ALSA device list:
  #0: S3C24XX_UDA134X
TCP cubic registered
NET: Registered protocol family 17
Registering the dns_resolver key type
s3c-rtc s3c2410-rtc: setting system clock to 2000-01-01 00:00:00 UTC (946684800)
UBIFS: recovery needed
usb 1-1: new full-speed USB device number 2 using s3c2410-ohci
UBIFS: recovery completed
UBIFS: mounted UBI device 0, volume 0, name "rootfs"
UBIFS: file system size:   119611392 bytes (116808 KiB, 114 MiB, 942 LEBs)
UBIFS: journal size:       9023488 bytes (8812 KiB, 8 MiB, 72 LEBs)
UBIFS: media format:       w4/r0 (latest is w4/r0)
UBIFS: default compressor: lzo
UBIFS: reserved for root:  0 bytes (0 KiB)
VFS: Mounted root (ubifs filesystem) on device 0:10.
Freeing init memory: 128K
scsi0 : usb-storage 1-1:1.0
dso-iobank: install ok
adc init
TQ2416 ADC driver
0x505
gpio_major_n = 5, io_minor_n = 5, output 0
0x603
gpio_major_n = 6, io_minor_n = 3, output 0
0x70a
gpio_major_n = 7, io_minor_n = 10, output 0
0x408
gpio_major_n = 4, io_minor_n = 8, output 1
dso5000b fpga configure init
fpga0:status: 0x0
scsi 0:0:0:0: Direct-Access     Lexar    USB Flash Drive  1100 PQ: 0 ANSI: 0 CCS
sd 0:0:0:0: [sda] 7831552 512-byte logical blocks: (4.00 GB/3.73 GiB)
sd 0:0:0:0: [sda] Write Protect is off
sd 0:0:0:0: [sda] No Caching mode page present
sd 0:0:0:0: [sda] Assuming drive cache: write through
sd 0:0:0:0: [sda] No Caching mode page present
sd 0:0:0:0: [sda] Assuming drive cache: write through
 sda: sda1 sda2
sd 0:0:0:0: [sda] No Caching mode page present
sd 0:0:0:0: [sda] Assuming drive cache: write through
sd 0:0:0:0: [sda] Attached SCSI removable disk
FPGA0 CONFIGURE DATA DOWN finish.
FPGA0 CONFIGURE Ok.
0x8090
0x1
fpga bank 11811dso-fpga: install ok
bkl tq2416-backlight initialized done...
close beep now
dso-buzzer s3c2416-beep initialized done...
--------------------------------------------------------------------------------
start
--------------------------------------------------------------------------------

Please press Enter to activate this console. dso5kb_func_dso5202b20160106.up
ls: /mnt/udisk/system*.up: No such file or directory
dso5kb_func_dso5202b20160106.up
ls: /mnt/udisk/system*.up: No such file or directory
dso5kb_func_dso5202b20160106.up
ls: /mnt/udisk/system*.up: No such file or directory
dso5kb_func_dso5202b20160106.up
ls: /mnt/udisk/system*.up: No such file or directory
^Ckdso5kb_func_dso5202b20160106.up
ils: /mnt/udisk/system*.up: No such file or directory
lldso5kb_func_dso5202b20160106.up
ls: /mnt/udisk/system*.up: No such file or directory
 4dso5kb_func_dso5202b20160106.up
5ls: /mnt/udisk/system*.up: No such file or directory
5
[root@Hantek ~]# dso5kb_func_dso5202b20160106.up
ls: /mnt/udisk/system*.up: No such file or directory
dso5kb_func_dso5202b20160106.up
ls: /mnt/udisk/system*.up: No such file or directory

[root@Hantek ~]# kdso5kb_func_dso5202b20160106.up
ils: /mnt/udisk/system*.up: No such file or directory
ll dso5kb_func_dso5202b20160106.up
ls: /mnt/udisk/system*.up: No such file or directory
455
[root@Hantek ~]# ls -l /mnt/udisk
total 3344
-rwxrwxrwx    1 root     root       3423999 Apr 26  2016 dso5kb_func_dso5202b20160106.up
[root@Hantek ~]#