| Products > Test Equipment |
| Possible GW Instek GDS-1000B hack |
| << < (10/52) > >> |
| toastedcrumpets:
So, I'm the guy with a GDS-2074A (actually rebranded as a Isotech (RS) IDS-2074A). Sorry for the delay in replying, currently on paternity after the birth of my second child! Plugging in the device to my linux box using USB I get most of what you're after: [2604763.960679] usb 3-4: new full-speed USB device number 16 using xhci_hcd [2604764.113082] usb 3-4: not running at top speed; connect to a high speed hub [2604764.128062] usb 3-4: New USB device found, idVendor=2184, idProduct=0014, bcdDevice= 2.26 [2604764.128066] usb 3-4: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [2604764.128070] usb 3-4: Product: IDS-2074A [2604764.128072] usb 3-4: Manufacturer: RS [2604764.128075] usb 3-4: SerialNumber: 524D093G1 [2604764.135403] cdc_acm 3-4:2.0: ttyACM0: USB ACM device Hopefully the data you need is in there? Connecting via RS232 serial, and running the SCPI *IDN? command I get RS,IDS-2074A,524D093G1,V1.30 Probably RS components, device, serial, and firmware version which is currently 1.30 On reboot, I don't see anything in the RS232 output. Is there some special baud for the message you need? I've tried 19200, 57600, and 115200. Otherwise, do I have to find a debug header inside the device? |
| toastedcrumpets:
--- Quote from: tv84 on November 29, 2018, 04:44:57 pm ---BTW, with v1.30 can you still generate/insert licenses from the KG that is in this thread? --- End quote --- They don't work, and they also don't work for the first version of the 2000A firmware I have which is v1.18. note this is different firmware to the 2000E series. I'll dig around inside when I'm back in work on the 12th. I just got a 30ps pulse generator so I should be able to do before and after comparisons on the bandwidth too if I get this working... |
| tv84:
Here is the new license generator for the current FWs of GDS1000B and GDS2000E, based on the wgoeo post (msg #3). --- Code: --- private static void InstekKG(string serial) { // This works for GDS1000B and GDS2000E string[] opt = { "PWR", "BUS", "SRH", "SGM", "BW100", "BW200", "BW300", "SA" }; // Prefixes: "DS1KB-" or "DS2E-" // uint[] ClearCode = { 0x11111111, 0xABABABAB, 0x22222222, 0xCDCDCDCD }; // OLD -- GDS1000B (up to v1.18) and GDS2000E (up to v1.28) uint[] ClearCode = { 0x74B0DC51, 0x46E87CCD, 0x25E45D32, 0x515F007C }; // NEW or uint[] ClearCode = { 0x19495CFF, 0x257130A3, 0x3D1B58BA, 0x74B0DC51 }; // v1.23, v1.24, .... serial = serial.Trim(); int serial_int = Int32.Parse(serial.Substring(serial.Length - 4, 4)); int pid_sum = 0; for (int i = 0; i < serial.Length - 4; i++) pid_sum += serial[i]; for (int i = 0; i < opt.Length; i++) { int[] a = new int[2]; a[0] = (pid_sum << 24) | ((i << 8) & 0xF00); a[1] = (1 << 24) | ((serial_int << 8) & 0xFFFF00) | ((pid_sum >> 8) & 0xFF); for (int j = 0, k = -0x61C88647; j < 32; j++, k -= 0x61C88647) { a[0] += (int)((16 * a[1] + ClearCode[0]) ^ (a[1] + k) ^ ((a[1] >> 5) + ClearCode[1])); a[1] += (int)((16 * a[0] + ClearCode[2]) ^ (a[0] + k) ^ ((a[0] >> 5) + ClearCode[3])); } Console.WriteLine("DS1KB-{0}.lic / DS2E-{0}.lic - [{1:x8}{2:x8}]", opt[i], a[1], a[0]); } } --- End code --- Those who prefer the javascript version can replace just the ClearCode constants in the script (I leave that as homework). The SA option was also added (only for the 2000E). Edit1: Tested successfully by some members in DS2E and MSO equipments. This will not work on 2000A because the S/N has a different format. Edit2: It seems there are more than one new combination of ClearCode(s) so test both. |
| nctnico:
I can confirm that the license generator with the new values creates valid licenses for more recent firmware. My GDS-2204E accepts and recognises the SA and power analysis options but I can't select these features. |
| rhb:
To access the SA you need to press the button in the lower right corner of the screen area below the small round button. It will then appear as an option on the 3rd button from the left below the screen. If you do not have an instrument with an AWG, do *not* press the AWG button when in SA mode. Use the channel select button to exit SA mode. Pressing the AWG button will crash the DSO and require a power cycle. As an example of how useful this is here are a couple of screen dumps. I have a stock Instek 200 MHz probe with the grabber and the ground lead removed. So it is a 7 mm E field detector. The cable is stretched out straight and the scope set to 1 mV/div. I can not detect *any* of the noise on my HP 8560A. The noise from 40 to 150 KHz is coming from a pair of 4 ft LED T-8 tubes. There is a Chinese EMI filter in the line which eliminated a lot of noise. But my 8560A TG doesn't go below 300 KHz, so I could not test the low frequency effectiveness of the EMI filter. |
| Navigation |
| Message Index |
| Next page |
| Previous page |