Author Topic: Possible GW Instek GDS-1000B hack  (Read 16336 times)

0 Members and 1 Guest are viewing this topic.

Offline wgoeo

  • Contributor
  • Posts: 10
  • Country: 00
Possible GW Instek GDS-1000B hack
« on: July 10, 2017, 08:02:10 am »
From the old brochure here, options such as serial bus decode, waveform search, and segmented memory are mentioned. But in the newest brochure in the GW Instek site, the options part is removed. I wonder why they stopped advertising that feature.

I looked at the 1.12 firmware I got here. It seems like the options and bandwidth upgrades (up to 300 MHz) can be unlocked using a file in a USB drive. I was wondering if someone is willing to share the newer firmware update (in case the unlock feature is removed) and possibly test the unlock files.

To those who want to do their own analysis, I included a Python script that extracts the files inside a .upg file. Run python extract.py [upg file]; the extracted files will be in the extract directory. You will then see the following:

boot.bin (u-boot)
kernel.img (Linux kernel)
rootfs.img (UBI image)
fpga-core.gz
gds1000b.elf

You can use UBI reader to extract the files from the UBI image.

Code: [Select]
from __future__ import print_function
import sys
import os
import os.path
import struct

OUTDIR = 'extract'

try:
os.mkdir(OUTDIR)
except:
pass

f = open(sys.argv[1], 'rb')
assert f.read(4) == b'\xA5UPG'
f.seek(32)

while True:
assert f.read(4)[:2] == b'GW'
file_size, section_size = struct.unpack('<LL', f.read(8))
file_name = f.read(20).strip(b'\x00')[1:].decode('ascii')
print(file_name, file_size)
open(os.path.join(OUTDIR, file_name), 'wb').write(f.read(file_size))
if section_size != 0xffffffff:
f.seek(section_size - file_size, os.SEEK_CUR)
else:
break
 
The following users thanked this post: saturation, Mortymore, ortos

Offline nctnico

  • Super Contributor
  • ***
  • Posts: 17684
  • Country: nl
    • NCT Developments
Re: Possible GW Instek GDS-1000B hack
« Reply #1 on: July 10, 2017, 08:19:13 am »
Interesting!
What would be more usefull is to figure out how to write your own add-on applications for these scopes.
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 

Offline saturation

  • Super Contributor
  • ***
  • Posts: 4788
  • Country: us
  • Doveryai, no proveryai
    • NIST
Re: Possible GW Instek GDS-1000B hack
« Reply #2 on: July 10, 2017, 07:00:16 pm »
NICE!!! Looking forward to seeing your results.
Best Wishes,

 Saturation
 

Offline wgoeo

  • Contributor
  • Posts: 10
  • Country: 00
Re: Possible GW Instek GDS-1000B hack
« Reply #3 on: July 14, 2017, 11:25:44 am »
Looking for volunteers who would like to test the license generator on their GDS-1000B oscilloscope

I haven't tried this on a real scope since I don't have one. The instructions below are what I would do if I had access. Also your unit may be damaged. Proceed at your own risk and only if you are familiar with messing around a Linux shell.

First make a backup of /home/dso. Do this by connecting to the scope via ssh. Username is root, password is rd2423 (thank you wer). Insert a USB drive, then check that the drive is mounted by listing the files:

ls /mnt/usb

Backup the /home/dso directory to your USB drive:

cd /home
tar cf /mnt/usb/homedso.tar dso
sync


Eject the USB drive then check the homedso.tar.gz file.

Download the attached file named lis.txt, rename it to lis.html, then open it in a browser. Enter the serial number of your unit, click "Generate", then you will be presented with several links. Download them to your USB drive, then insert the drive back to the scope.

Open a .lis file in File Utilities. I'm not sure what happens next, but I think there should be some message. I suggest trying Serial Decode first, then see if that feature will appear. For the bandwidth upgrades, do some rise time/bandwidth tests before and after the upgrade.

I think it is sufficient to restore the /home/dso/OptionConf file if you want to remove the installed licenses.
« Last Edit: July 14, 2017, 02:31:52 pm by wgoeo »
 
The following users thanked this post: saturation, Mortymore, planner29

Offline nctnico

  • Super Contributor
  • ***
  • Posts: 17684
  • Country: nl
    • NCT Developments
Re: Possible GW Instek GDS-1000B hack
« Reply #4 on: July 14, 2017, 04:27:33 pm »
Maybe we should turn this into a more generic GW Instek Zync scope hacking thread. The root password also works on my GDS2204E!
I've been browsing around a bit and found some interesting things like FRA (bode plot) which is likely applicable for the MSO2000 series. There are also quite a few Lua scripts floating around.
« Last Edit: July 14, 2017, 04:50:01 pm by nctnico »
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 
The following users thanked this post: saturation, Mortymore

Offline nctnico

  • Super Contributor
  • ***
  • Posts: 17684
  • Country: nl
    • NCT Developments
Re: Possible GW Instek GDS-1000B hack
« Reply #5 on: November 24, 2017, 11:54:46 pm »
Small update: it seems GW Instek has shut the SSH server down in the most recent firmware updates. I guess they are reading EEVblog!
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 

Offline Fungus

  • Super Contributor
  • ***
  • Posts: 9985
  • Country: 00
Re: Possible GW Instek GDS-1000B hack
« Reply #6 on: November 25, 2017, 09:13:41 am »
Small update: it seems GW Instek has shut the SSH server down in the most recent firmware updates. I guess they are reading EEVblog!

Imagine how many they'd sell if it were hackable...   :palm:
 

Offline nctnico

  • Super Contributor
  • ***
  • Posts: 17684
  • Country: nl
    • NCT Developments
Re: Possible GW Instek GDS-1000B hack
« Reply #7 on: November 25, 2017, 11:27:37 am »
Small update: it seems GW Instek has shut the SSH server down in the most recent firmware updates. I guess they are reading EEVblog!
Imagine how many they'd sell if it were hackable...   :palm:
Well you don't need to have SSH access to get software onto the scope. The way the firmware packages are put together is quite straightforward and it looks like it is quite possible to write plugins using Lua which add extra functions originally not present in the firmware. I don't know how that works exactly -yet-. Besides that I think it might even be possible to create a firmware update package which enables the SSH login again.
« Last Edit: November 25, 2017, 12:13:52 pm by nctnico »
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 

Offline wgoeo

  • Contributor
  • Posts: 10
  • Country: 00
Re: Possible GW Instek GDS-1000B hack
« Reply #8 on: December 23, 2017, 03:07:30 pm »
Besides that I think it might even be possible to create a firmware update package which enables the SSH login again.
I think it's possible. I was also working on running arbitrary commands using the upgrade mechanism and maybe the ssh daemon can be started using that.

Also the changelog for 1.19 has
Quote
3.Updated the License encoding rule
Not sure what exactly changed but I guess they don't want us hacking their scopes.

By the way, did anyone try the license generator on 1.18 or below?
 
The following users thanked this post: planner29

Offline samsonx

  • Newbie
  • Posts: 1
  • Country: us
Re: Possible GW Instek GDS-1000B hack
« Reply #9 on: March 20, 2018, 07:37:48 pm »
@wgoeo: I have been playing around with the linux image on my GDS-1054B and was curious if you had a py script to repackage a directory to a upg file - perhaps we can run arbitrary commands via that mechanism? 

I have successfully cross-compiled some code as a test

, though not very useful :) .

Thanks,
Sam
 
The following users thanked this post: saturation, SWR, DaJMasta, planner29

Offline nctnico

  • Super Contributor
  • ***
  • Posts: 17684
  • Country: nl
    • NCT Developments
Re: Possible GW Instek GDS-1000B hack
« Reply #10 on: March 20, 2018, 08:06:08 pm »
, though not very useful :) .
Still more than cool!  :-+  :-+
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 
The following users thanked this post: saturation, samsonx

Offline SWR

  • Regular Contributor
  • *
  • Posts: 123
  • Country: dk
  • Without engineering science is just philosophy.
Re: Possible GW Instek GDS-1000B hack
« Reply #11 on: April 07, 2018, 08:48:22 pm »
Very cool indeed! :-+ :-+
You should never go down on equipment!
 

Offline killingtime

  • Contributor
  • Posts: 7
  • Country: gb
Re: Possible GW Instek GDS-1000B hack
« Reply #12 on: April 08, 2018, 09:14:28 pm »
Hello  wgoeo,

Thank you for posting this. Very helpful. I can confrim the html file generator works (bus and search) with firmware version 1.18.

Some general questions for 1000B series owners that have 'upgraded' if I may...

1) Has anyone managed to find the power analysis option? I can't find it on the Apps or Options menu even though the .lis file successfully loaded.
2) Does anyone know how to enable the 'option' button (below the 'menu off' button next to the 'scale' knob)? I still receive 'not supported for this model' when activating this button. I would have thought the power analysis software would be behind by this.
3) Has anyone successfuly used the segmented memory option. Can't find that either.

I've not loaded the BW options yet. I don't have an RF signal generator that goes high enough and I'd like to do a before and after comparison on the roll-off.

Thanks.
 

Offline Distelzombie

  • Frequent Contributor
  • **
  • Posts: 283
  • Country: de
Re: Possible GW Instek GDS-1000B hack
« Reply #13 on: April 09, 2018, 08:05:39 am »
Which HTML file generator? Can't find a link to anything here.
So... Is it hackable? Is it better than a Rigol DS1054Z @100MHz now?

Offline SWR

  • Regular Contributor
  • *
  • Posts: 123
  • Country: dk
  • Without engineering science is just philosophy.
Re: Possible GW Instek GDS-1000B hack
« Reply #14 on: April 09, 2018, 08:17:37 am »
Which HTML file generator? Can't find a link to anything here.
It's in reply #3.
You should never go down on equipment!
 

Offline killingtime

  • Contributor
  • Posts: 7
  • Country: gb
Re: Possible GW Instek GDS-1000B hack
« Reply #15 on: April 09, 2018, 09:37:00 am »
Which HTML file generator? Can't find a link to anything here.
It's in reply #3.

Yes it is hackable.

In reply 3 (post number4) there is an attachment called lis.txt. Download this, and rename it to lis.html, then run the html file in a web browser. It will prompt for the serial number of your scope (can be found on the back sticker or the System Info screen). All the hackable options will turn to links. Click on the links and you'll be prompted to download individual .lis files. Copy all the .lis files to a USB2 pen drive (USB3 didn't work for me) and insert the pen drive into the scope. Using the File Utilities menu on the scope, navigate to the .lis file of choice (using the 'Variable' knob and then press the 'Select' button below the Variable knob. You'll be asked if you want to load the file. Press Select again and reboot the scope. The option (if it's available on the scope) should now be enabled.

I have a feeling that the power analysis software isn't part of the scope base software image, so although the lic file loads there's nothing to execute.

If you want to increase the bandwidth of the scope then you only need to load the one .lis file for the BW you're after. Three options are available; 100, 200 and 300 MHz. I don't know if these work. Someone with an RF generator needs to try it out and see how flat the response is. I'd also be curious to know if the BW options break the maths functions like FFT beyond the original BW spec of the scope.

Start with the serial decode option and the waveform search option. Both of these worked for me.
 

Offline seronday

  • Regular Contributor
  • *
  • Posts: 51
  • Country: au
Re: Possible GW Instek GDS-1000B hack
« Reply #16 on: April 14, 2018, 02:58:57 am »
The Licence Generator also works for the GDS-2000E series DSO.

I have used it to produce a license file to upgrade the bandwidth of a GDS-2074E (70Mhz) to 200Mhz.

The detailed information is in the thread on GDS-2000E :-
https://www.eevblog.com/forum/testgear/gw-instek-gds2204e-(200mhz-4-channel-dso)-review/msg1478352/#msg1478352
 
The following users thanked this post: Mortymore

Offline Distelzombie

  • Frequent Contributor
  • **
  • Posts: 283
  • Country: de
Re: Possible GW Instek GDS-1000B hack
« Reply #17 on: April 14, 2018, 06:45:54 am »
Very cool. How does a hacked GDS-1054B @ 100Mhz compare to the hacked Rigol 1054 or the unhacked Siglent SDS1104X-E? Price seems similar.
Great, I can get the GDS-1054B with deferred payment - meaning it's a good option against the Rigol. Couldn't find that for the Siglent.
Edit: Damn... the Instek comes with only 70Mhz probes. Why does it always comes back to the Rigol?

Is the hack "real"? Like, real increase in bandwidth etc. What else is software upgradeable?
« Last Edit: April 14, 2018, 06:59:46 am by Distelzombie »
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 3069
  • Country: fi
  • Starting with DLL21
Re: Possible GW Instek GDS-1000B hack
« Reply #18 on: April 14, 2018, 04:55:38 pm »
Very cool. How does a hacked GDS-1054B @ 100Mhz compare to the hacked Rigol 1054 or the unhacked Siglent SDS1104X-E? Price seems similar.
Great, I can get the GDS-1054B with deferred payment - meaning it's a good option against the Rigol. Couldn't find that for the Siglent.
Edit: Damn... the Instek comes with only 70Mhz probes. Why does it always comes back to the Rigol?

Is the hack "real"? Like, real increase in bandwidth etc. What else is software upgradeable?

If you compare chinese GoodWill GDS-1000B 4 channel models to chinese Siglent SDS1104X-E it is good to note some differencies.

Siglent have max 500MSa/s for all 4 channels simultaneously on and this GoodWill have max 250MSa/s.

With 2 channels on Siglent have both channels 1GSa/s and GW have 500Msa/s.
This is because Siglent have 2 ADC. Each one is shared with 2 channels and GW have one ADC what is shared to all 4 channels. (both use same Hittite ADC)

And some more examples

-Siglent max wfm/s speed is least double.

!-Siglent have continuously always backround running full speed waveform history buffer, up to 80000 last waveforms (stop and look what just previously happend).

!-Siglent have also fast segmented memory (aka sequence) acquisition, up to over 400000 segment/s and up to 80000 segments with relative time stamps.
 
-Siglent fastest display time base is 1ns/div and GW 5ns/div.

-Siglent have full BW full resolution 500uV/div

!-Siglent have 500pts resolution SFRA up to 120MHz (not option, this is default but need external generator).

!-Siglent have Serial decoding (not option, this is default)

!-Siglent is also ready for MSO Option (16ch LA with 4 analog channels)
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Offline nctnico

  • Super Contributor
  • ***
  • Posts: 17684
  • Country: nl
    • NCT Developments
Re: Possible GW Instek GDS-1000B hack
« Reply #19 on: April 14, 2018, 06:22:18 pm »
However the GW Instek doesn't have bugs and it has features like free-form math, signal filtering, data logging, etc which are very useful when developing circuits and/or hunting for rare events. For 100MHz 250Ms/s is more than enough and high waveforms/s is not really important unless you get into triple digits. Even very high end oscilloscopes don't have high waveforms/s. The same goes for the history buffer. You can always turn on segmented recording and get exactly the same. The GW Instek can also do statistic analysis on the recorded segments.
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 3069
  • Country: fi
  • Starting with DLL21
Re: Possible GW Instek GDS-1000B hack
« Reply #20 on: April 14, 2018, 08:49:39 pm »
However the GW Instek doesn't have bugs and it has features like free-form math, signal filtering, data logging, etc which are very useful when developing circuits and/or hunting for rare events. For 100MHz 250Ms/s is more than enough and high waveforms/s is not really important unless you get into triple digits. Even very high end oscilloscopes don't have high waveforms/s. The same goes for the history buffer. You can always turn on segmented recording and get exactly the same. The GW Instek can also do statistic analysis on the recorded segments.

GDS1000B ?  Perhaps you are talking some other GoodWill models.

250Msa/s is enough for continuous pure sinewave. Yes, barely. For what you need scope there if you know you have pure 100MHz sinewave. Veery useful to look... ?

History buffer and segmented memory (sequence acq) are same? Really? Looks like you do not even know what they are. Or is it so that 1000B do not have at all fast seg acq.
"However the GW Instek doesn't have bugs"  |O Bug free scopes where FW updates frequently with long list of repaired bugs. Why  need repair if they are bug free.
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Offline Distelzombie

  • Frequent Contributor
  • **
  • Posts: 283
  • Country: de
Re: Possible GW Instek GDS-1000B hack
« Reply #21 on: April 15, 2018, 12:03:11 am »
Some websites say the GW Instek has 1GSa/s PER channel. So I assumed it will actually have 1GSa/s/channel - like, what that obviously implies, 1GSa/s when using all channel at once. (1GSa/s1GSa/s1GSa/s1GSa/s just to write it a few times more)

rfLoop, you compared the Siglent to the unhacked version? Doesn't it get more memory and stuff, like the Rigol? I really wish I could get the Siglent somewhere, but that is impossible without hire-purchase/installment payment - what is even the correct term? (german)

Online tautech

  • Super Contributor
  • ***
  • Posts: 16024
  • Country: nz
  • Taupaki Technologies Ltd. NZ Siglent Distributor
    • Taupaki Technologies Ltd.
Re: Possible GW Instek GDS-1000B hack
« Reply #22 on: April 15, 2018, 12:40:59 am »
Some websites say the GW Instek has 1GSa/s PER channel. So I assumed it will actually have 1GSa/s/channel - like, what that obviously implies, 1GSa/s when using all channel at once. (1GSa/s1GSa/s1GSa/s1GSa/s just to write it a few times more)

rfLoop, you compared the Siglent to the unhacked version? Doesn't it get more memory and stuff, like the Rigol?
Be aware instruments in this class normally only have 1 or 2 ADC's.
So sampling rate is always listed a max in whatever usage configuration allows it. This is commonly just for 1ch in a DSO with a single ADC but those units with 2 will allow use at max sample rate with 2 channels in use, normally 1+3 or 2+4 or an equivalent configuration.
To allow sampling @ 1Gsa/s for all 4 channels you'd need dual 2Gsa/s ADC's or a much more expensive single ADC.

A good rule of thumb for many modern DSO's is the first digit in the model name signifies the GHz sample rate of the ADC/'s used.

Quote
I really wish I could get the Siglent somewhere, but that is impossible without hire-purchase/installment payment - what is even the correct term? (german)
LayBuy is the term used here where you make progressive payments until equipment is paid for in full and then it is dispatched or collected.
Maybe one of the European dealers can accommodate your needs.
https://www.siglenteu.com/how-to-buy/
Avid Rabid Hobbyist
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 3069
  • Country: fi
  • Starting with DLL21
Re: Possible GW Instek GDS-1000B hack
« Reply #23 on: April 15, 2018, 07:19:28 am »
Some websites say the GW Instek has 1GSa/s PER channel. So I assumed it will actually have 1GSa/s/channel - like, what that obviously implies, 1GSa/s when using all channel at once. (1GSa/s1GSa/s1GSa/s1GSa/s just to write it a few times more)

This is nice example how carefully it need read when you read manufacturer web sites. They try hardly that reader produce wrong imagine in his mind (one leader for this kind of things are Keyshit when you read advertisements and application notes).  Read data sheet, read itroduction, read GDS-1000B user manual. How long it take you get right answer for sampling speed and  that it have exactly 1GSa max for all single channel... yes this pops up to your eyes immediately.  ....but wait a bit... they did not tell that simultaneously. Yes, 1GSa/s for every channel and they did not lie. Take Ch 1 alone...max 1GSa/s and then take Ch2 alone...again max 1GSa/s and so on. All channels have max 1GSa/s. 

GoodWill GDS1000B  4 channel models:
Fact is - and this is true fact. It have single ADC chip. It is Hittite HMCAD1511.  (You can see it also if you look Dave's tear down video, he tell it clearly and ans also show it clearly when he look inside.)

1 channel alone in use: Max 1GSa/s
2 channels in use: Max 500MSa/s for both channels simultaneously.
3 channels in use: Max 250MSa/s for all channels simultaneously.
4 channels in use: Max 250MSa/s for all channels simultaneously.

Siglent SDS1000X-E 4 channel models:

Fact is - and this is true fact. It have two ADC chip. They are Hittite HMCAD1511. 

1 channel  in use: Max 1GSa/s
2 channels in use: Max 1GSa/s for both channels simultaneously.
3 channels in use: Max 500MSa/s for all channels simultaneously.
4 channels in use: Max 500MSa/s for all channels simultaneously.

What need hack in Siglent and then get something more like Riglol 1kZ
Siglent have all out from factory box and lot of more. It beats this Rigol wonder box just hands down in every single corner and after then give also lot of more powerful tool with performance what Rigol Zbox can only dream.
They are like night and day if compare performance as real tool. Just forget this Rigol 1kZ. Only feature there is that it is bit more cheap.
What features you can hack in Rigol DS1000Z series?  All because it is designed for hack as marketing trick.
What features you can hack in GoodWill GDS1000B?  This I do not know.
What features you can hack in Siglent SDS1000X-E series? This I do not know.

(Saelig)
DS1054Z Price: Reg. $399 Sale! $349  -  50MHz out from box, Hackable to 100MHz, single 1GSa ADC
GDS1054B Price: $429.00  - 50MHz out from box (hackable ?  ), single 1GSa ADC
SDS1104X-E Price: $499.00 - 100MHz ready out from box, (hackable ?  ) double  1GSa/s ADC

Yes there is price difference and with true reasons. It is amazing that  price differences are not more.
If Siglent is 2 times Rigol price I think it is still cheap if look features and performance.

ETA: But still, if budget is limited without exeptions to Rigol price and absolutely nothing more and no possible to wait and save bit more, Rigol is not bad choice.  For many kind of hobby and educational use if we set hard top limit to Rigol price,  it is still perhaps best possible what can get if we talk 4 channel stand alone digital oscilloscopes.
« Last Edit: April 15, 2018, 10:07:31 am by rf-loop »
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Offline Distelzombie

  • Frequent Contributor
  • **
  • Posts: 283
  • Country: de
Re: Possible GW Instek GDS-1000B hack
« Reply #24 on: April 15, 2018, 09:29:47 am »
Quote
Yes, 1GSa/s for every channel and they did not lie. Take Ch 1 alone...max 1GSa/s and then take Ch2 alone...again max 1GSa/s and so on. All channels have max 1GSa/s. 
Very great...
Quote
Fact is - and this is true fact. It have two ADC chip.
knew that
Quote
Rigol DS1000Z series?  All because it is designed for hack as marketing trick.
I think the same. Just can't be a mistake.
Quote
Siglent have all out from factory box and lot of more. It beats this Rigol wonder box just hands down in every single corner and after then give also lot of more powerful tool with performance what Rigol Zbox can only dream.
They are like night and day if compare performance as real tool. Just forget this Rigol 1kZ. Only feature there is that it is bit more cheap.
I really really really wish I could buy that. I kind of knew parts of that already. Also it is cheaper as the Instek where I live. But more expensive than where you live. Including taxes or what VAT is...
instek 545.60 €
siglent 510.51 €
rigol 404.00 €
« Last Edit: April 15, 2018, 09:32:35 am by Distelzombie »
 

Online tautech

  • Super Contributor
  • ***
  • Posts: 16024
  • Country: nz
  • Taupaki Technologies Ltd. NZ Siglent Distributor
    • Taupaki Technologies Ltd.
Re: Possible GW Instek GDS-1000B hack
« Reply #25 on: April 15, 2018, 10:59:39 am »
I really really really wish I could buy that. I kind of knew parts of that already. Also it is cheaper as the Instek where I live. But more expensive than where you live. Including taxes or what VAT is...
instek 545.60 €
siglent 510.51 €
rigol 404.00 €
Your sig:
Day 11063 without a scope:
I am starting to feel the effects. I might just go insane.

You already know SDS1104X-E is more than 25% better value but further it's a DSO that can offer more still as your needs grow .....MSO and AWG if/when you need them.

Will you settle for a lesser product and always wonder....what if ?
Avid Rabid Hobbyist
 

Offline nctnico

  • Super Contributor
  • ***
  • Posts: 17684
  • Country: nl
    • NCT Developments
Re: Possible GW Instek GDS-1000B hack
« Reply #26 on: April 15, 2018, 12:11:44 pm »
Define lesser. It comes down to the features you need right now and each scope Distelzombie is looking at has it's pros and cons. There is more to a scope than waveforms/s and bandwidth.
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 

Offline Distelzombie

  • Frequent Contributor
  • **
  • Posts: 283
  • Country: de
Re: Possible GW Instek GDS-1000B hack
« Reply #27 on: April 16, 2018, 04:59:54 am »
Your sig:
Day 11063 without a scope:
I am starting to feel the effects. I might just go insane.
It is, indeed.  ???
(Yes, I do change it daily. If that is what you are testing here. Otherwise I have no clue at all why you're mention my signature. I tried PHP but that doesn't work.  :( And no, it is not exactly my birthday.)


You already know SDS1104X-E is more than 25% better value but further it's a DSO that can offer more still as your needs grow .....MSO and AWG if/when you need them.

Will you settle for a lesser product and always wonder....what if ?
Yeah, if I can't find it with LayBuy, I have to save money for at least six month, but maybe more like ten.


BTW, I think this thread started to steer in the wrong direction. I just wanted to know what this hack can do and what that means for the GDS-1054B.
Let's hijack this thread instead: https://www.eevblog.com/forum/beginners/is-the-rigol-ds1054z-still-the-best-entry-level-digital-scope-for-the-price/msg1475625/#msg1475625

Offline cyberfish

  • Regular Contributor
  • *
  • Posts: 234
  • Country: gb
Re: Possible GW Instek GDS-1000B hack
« Reply #28 on: July 03, 2018, 02:48:55 pm »
Does anyone have a copy of 1.18 firmware they are willing to share by any chance? :D
 

Offline cyberfish

  • Regular Contributor
  • *
  • Posts: 234
  • Country: gb
Re: Possible GW Instek GDS-1000B hack
« Reply #29 on: July 04, 2018, 12:55:32 am »
The latest pre-1.18 firmware I've been able to find was v1.12, from Tradeport, and it works fine on my GDS-1104B! http://www.tradeport.on.ca/news/72/new-firmware-release-of-digital-storage-oscilloscope-gds1000b-gds1000au

I have only tried serial decode, waveform search, and 300 MHz, they all seem to work. I cannot verify 300 MHz though, but there are now 100 MHz and 200 MHz BW limit options, and they do change the signal.

No idea how this compares to serial decode on other scopes, but with this hack, the GDS-1000B is very good value, especially taking into account the circuit design quality of a certain competitor...
 
The following users thanked this post: Fungus

Offline ripper_pc

  • Newbie
  • Posts: 4
  • Country: us
Re: Possible GW Instek GDS-1000B hack
« Reply #30 on: July 18, 2018, 02:01:20 pm »
Hi!

I just bought a new scope that has 1.21 firmware on it.
The html file does not seem to be working on it.

I get the following message: 'License failed to install, Please check the license version!'

Do i have to downgrade it to 1.12 version using the links in earlier posts for this to work ?

Note: I did use a USB 3.0 pen drive, I'm not sure if that could have caused this ?
 

Offline cyberfish

  • Regular Contributor
  • *
  • Posts: 234
  • Country: gb
Re: Possible GW Instek GDS-1000B hack
« Reply #31 on: July 18, 2018, 02:18:50 pm »
Hi!

I just bought a new scope that has 1.21 firmware on it.
The html file does not seem to be working on it.

I get the following message: 'License failed to install, Please check the license version!'

Do i have to downgrade it to 1.12 version using the links in earlier posts for this to work ?

Note: I did use a USB 3.0 pen drive, I'm not sure if that could have caused this ?

You need to downgrade to 1.18. A very kind forum member sent a copy to me (not sure if they want to be identified). Feel free to PM me with your email addr if you want a copy.
 
The following users thanked this post: ripper_pc

Offline akimmet

  • Contributor
  • Posts: 19
  • Country: us
Re: Possible GW Instek GDS-1000B hack
« Reply #32 on: July 18, 2018, 02:47:26 pm »
I’m glad to hear one of those firmware versions I sent end up being useful.
When it comes to drivers and firmware, I tend to hoard. You never know when a old version will come in handy. Especially when the current trend as of late is to delete first ask questions later.
 

Offline cyberfish

  • Regular Contributor
  • *
  • Posts: 234
  • Country: gb
Re: Possible GW Instek GDS-1000B hack
« Reply #33 on: July 18, 2018, 02:48:32 pm »
I’m glad to hear one of those firmware versions I sent end up being useful.
When it comes to drivers and firmware, I tend to hoard. You never know when a old version will come in handy. Especially when the current trend as of late is to delete first ask questions later.

It was very helpful, thanks! I actually spent a whole afternoon searching online, and could only find 1.12!
 

Offline tonywood

  • Newbie
  • Posts: 4
Re: Possible GW Instek GDS-1000B hack
« Reply #34 on: August 02, 2018, 05:00:24 pm »
Could someone send me the 1.18 firmware also? I would like to try it out. I have the GW Instek GDS-1054B


Thanks in advance  :-+
 

Offline tonywood

  • Newbie
  • Posts: 4
Re: Possible GW Instek GDS-1000B hack
« Reply #35 on: August 09, 2018, 10:39:45 pm »
I got my unit today GDS-1054b, it came with firmware 1.19 so I downgraded to 1.18 and installed the *.lis files and verified they were working. I then upgraded to firmware 1.22 and all the options were still installed and work. Thanks to all for the help on this. Looks like you keep the added features with a firmware update.
 

Offline tonywood

  • Newbie
  • Posts: 4
Re: Possible GW Instek GDS-1000B hack
« Reply #36 on: August 09, 2018, 10:56:21 pm »
Firmware fixes


Version 1.08

1.Fixed the system crash randomly which caused by the ¡§Advance Math¡¨ function
2. Fixed the displaying issue of XY mode under certain circumstances
3. Fixed the time base error when the ¡§AUTOSET¡¨key pressed under ¡§Window Zoom¡¨ mode
4. Fixed the AD malfunction under certain circumstances

Version 1.09
1.Added German & French icons and help menu
2.Adjusted the maximum value of the waveform brightness


Version 1.11
1.Added Korean icons and help menu
2.Added Russian icons
3.Fixed the residue waveform issue
4.Fixed the system freeze bug after the QR code menu activated
5.Added the DVR calibration under distributor mode

Version 1.12
1.Added Russian help menu
2.Fixed the initial value for the ¡§Advance Math default¡¨ expression
3.The output polarity of the Go/No-Go has been adjusted which same as the GDS-2000A series

Version 1.13
1.Fixed the Trigger Filter bug.

Version 1.14
1.Changed the display method for waveform interpolation.
2.Fixed the pictbridge's connectivity issues.
3.The Trigger out function is activated now. (Press UTILITY -> Probe Comp. -> Frequency)

Version 1.15
1.Add Multilanguage: Spanish

Version 1.16
1.Fixed the trigger level offset issue, if the vertical position was shifted out off the screen range.
2.Fixed the ¡§Advance math¡¨ algorithm which caused the system crash.

Version 1.17.001
1.Added USBDelay command in order to solve the USB data leaks for WIN10.
2.Fixed the ext trigger of roll mode which may cause the system crash.
3.Fixed the zoom state malfunction for horizontal position command.
4.Changed the value range of trigger hold off command: the minimum value changed to 4ns from 10ns.

Version 1.18
1.Removed the extra unwanted carriage returns symbol for *LRN? command.
2.Fixed the starting condition of autotrigger for Datalog function (APP funciton)
3.Extended the "Duration" until the 999 hours for Datalog function (APP funciton)

Version 1.19
1.Fixed the Japanese translations error for digital filter menu tree. (APP function)
2.Updated the simplified Chinese menu tree
3.Updated the License encoding rule


Version 1.20
1.The Go/NoGo Invert function is activated now. (Press UTILITY -> System -> more)
2.The firmware upgrade procedure is now ONLY support the ¡§Safe mode¡¨ firmware upgrading from this firmware version.

Version 1.21
1.Fixed the issue that the license file can¡¦t installed properly.
2.Fixed the REF waveform operating issue of interpolation mode for math function.
3.Revised the storage results of average waveform for interpolation mode

Version 1.22
1.Added saved Ref icon.
2.Fixed the system locks up when the multilingual menu was setting in non-English and the ¡§HARDCOPY¡¨ button pressed.
3.Fixed the Go/NoGo Execute SCPI Command settings issue.
4.Fixed the Spanish translations.
5.Fixed the cursor operation which may unable to reactivated within the ¡§zoom¡¨ status.
6.Adjusted the range adjustment behavior within the ¡§Go/NoGo¡¨ status.
7.Fixed the display of ¡§Ratio¡¨ counter which cannot clear completely under non-English Multi-language circumstances.
8.Fixed the specific average number order which cannot be saved as settings file.
 

Offline rhb

  • Super Contributor
  • ***
  • Posts: 2651
  • Country: us
Re: Possible GW Instek GDS-1000B hack
« Reply #37 on: August 23, 2018, 12:54:55 pm »
I bought a Rigol DS1102E some years ago for $400.  It is quite satisfactory for many things.  Even if you spend $20K there will still be limitations.

The DS1054Z is a good 4 channel 50 MHz DSO at a very good price.  In 3- 4 channel mode the 125 MHz Nyquist limit doesn't really support going much higher, though in 1-2 channel mode with 500 MSa/S it can do a decent job at 100 MHz if hacked.

I had the good luck to pick up a GDS-2072E from Amazon for $244 delivered.  They were selling off old stock which they do periodically.  I jumped on it as a test bed for developing  FOSS FW for Zynq based DSOs.  I'd already bought the MSO-2204EA.  But there is no way I was going to risk bricking an $1800 scope.  Yesterday I tried the GDS-2000B BW hack and it worked and now gives me 200 MHz just like the 2204EA.

If your budget is tight, get the Rigol DS1054Z. It will serve you well and you'll have no trouble selling it if you buy a better scope.  It's popular and well established.  At a 25% discount someone like you will buy it in a heartbeat.  You don't often see used Rigol DS1054Zs offered for sale.  I suspect most people selling one sell it to a friend who is looking for a scope.

When I was in grad school in geophysics at Austin all I had was a 5 MHz recurrent sweep Heathkit IO-18.  It didn't even have BNC inputs.  I bought it at a yard sale for $75 and even that was a stretch for my budget.  I learned a great deal using that scope.
 
The following users thanked this post: Mortymore

Offline pa3hfu

  • Contributor
  • Posts: 23
  • Country: nl
Re: Possible GW Instek GDS-1000B hack
« Reply #38 on: October 10, 2018, 11:30:43 am »
Does somebody have Firmware V 1.8 for the Instek 1000 series for me?
In advance many thanks!
 

Offline cyberfish

  • Regular Contributor
  • *
  • Posts: 234
  • Country: gb
Re: Possible GW Instek GDS-1000B hack
« Reply #39 on: October 10, 2018, 11:33:58 am »
Does somebody have Firmware V 1.8 for the Instek 1000 series for me?
In advance many thanks!

Sent!
 

Offline Mortymore

  • Regular Contributor
  • *
  • Posts: 139
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #40 on: October 13, 2018, 11:38:00 am »
Hi

I have a 2074E updated to 1.36 firmware version.
Putty doesn't work with 1.36.
Is there a chance to downgrade to a firmware version suitable to hack? Which one?
I've searched the web for previous firmware for GDS-2000E and found nothing so far.  |O
Can someone be kind to help me out here. I'd be much appreciated.

My scope is not actually a GW-Instek one, but is the same thing, just rebranded as ISO-Tech IDS-2074E.
« Last Edit: October 13, 2018, 11:41:20 am by Mortymore »
 

Offline Mortymore

  • Regular Contributor
  • *
  • Posts: 139
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #41 on: October 13, 2018, 04:08:39 pm »
Thanks to a forum member that provided the necessary firmware to downgrade, and to all others involved in the solution, my scope just went from 70 to 200  :-+
Hope I don't get a speed ticket  :popcorn:

The firmware was afterwards upgraded again to v1.36 and now, some calibration and testing is due.
 

Offline frogblender

  • Contributor
  • Posts: 36
Re: Possible GW Instek GDS-1000B hack
« Reply #42 on: November 20, 2018, 11:21:00 pm »
Can anyone confirm that a GDS-1054B works at 300MHz?

According to gwInstek's own website, this series of scope only comes in 50/70/100MHz versions.
 

Offline rhb

  • Super Contributor
  • ***
  • Posts: 2651
  • Country: us
Re: Possible GW Instek GDS-1000B hack
« Reply #43 on: November 21, 2018, 12:59:04 am »
Can anyone confirm that a GDS-1054B works at 300MHz?

According to gwInstek's own website, this series of scope only comes in 50/70/100MHz versions.

What's the sample rate?  Divide by 2 and you have the Nyquist frequency.  That is the maximum frequency possible.  So far as I know, no OEM changes anti-alias filters if you double the sample rate by changing channel count.  The manual and datasheet for the 1000B specify a maximum sample rate, but unlike other models do not specify if there are limitations such as the very common one of requiring you to use channels that use different ADCs in 2 channel mode.

My LeCroy DDA-125/LC684 claims a 1.5 GHz BW.  But sampling 4 channels it has a 1 GHz Nyquist.  So everything above 500 MHz is aliased unless you use 2 channel mode sampling a 4 GSa/S.  But in any case, while it meets the rise time = 0.35/BW it is at the price of 20% overshoot.  I assume that disk drive analysis measuring rise time was more important than an accurate waveform.

My GDS-2072E is hacked for 300 MHz, but the step response is identical to 200 MHz.  I've overlaid the waveforms. To do 300 MHz with the ADCs you would have to switch between two anti-alias filters.  One for 250 MHz Nyquist and one for 500 MHz Nyquist.  This is why GW does not offer a 300 MHz version of the 2000E.

A far more important issue is the amount of EMI the 2000E line emits.  The front panel is shielded and the AFE sections are shielded.  But that's all.  I'm planning to fabricate shielding for the SMPS and the main board.

If you are concerned with BW you need to buy one of Leo Bodnar's excellent 40 pS rise time 10 MHz square wave generators.  These come with a printout of the step response on a 10+ GHz sampling DSO.  Measure the rise time with a single channel and then with each of the other 3 channels.  If it really has 300 MHz BW you will see a different rise time at 1 GSa/S than at 500 MSa/S.  Most likely if you save reference traces for all the permutations of channels, they will all look the same and will have a rise time of 1.75 nS.


As part of my FOSS DSO FW project I am going to do a very detailed review of issues with the 2000E.

Sadly I have come to the conclusion that all the T&M OEMs lie every time their product doesn't quite meet the marketing specs.  For example,  Keysight calculates rise time for the MSOX3104T as 0.35/BW *except* if BW = 1 GHz, then they use 0.45/BW.  HP didn't do such things as far as I can tell.  I've bought a bunch of 20 year old HP gear in the last 18 months.  It's a delight to use and it really does meet expectations.  Keysight still does make really nice gear, but I've learned to be very skeptical of the product brochures and go over  the specifications with a fine tooth comb now.

Modern DSO design commonly  uses dual channel ADCS which will sample one channel at twice the frequency of two channels.  Typical pattern is if you use 1 & 3 both will sample at 1 GSa/S, but if you use 1 & 2 you will sample at 500 MSa/S.
 

Offline TheReverend

  • Newbie
  • Posts: 4
  • Country: de
Re: Possible GW Instek GDS-1000B hack
« Reply #44 on: November 29, 2018, 12:42:28 pm »
Could someone send me the 1.18 Firmware for science purposes so i can contribute too?

Thx in advance
 

Offline toastedcrumpets

  • Regular Contributor
  • *
  • Posts: 83
  • Country: gb
Re: Possible GW Instek GDS-1000B hack
« Reply #45 on: November 29, 2018, 04:22:49 pm »
So, I'm the guy with a GDS-2074A (actually rebranded as a Isotech (RS) IDS-2074A). Sorry for the delay in replying, currently on paternity after the birth of my second child!

Plugging in the device to my linux box using USB I get most of what you're after:

[2604763.960679] usb 3-4: new full-speed USB device number 16 using xhci_hcd
[2604764.113082] usb 3-4: not running at top speed; connect to a high speed hub
[2604764.128062] usb 3-4: New USB device found, idVendor=2184, idProduct=0014, bcdDevice= 2.26
[2604764.128066] usb 3-4: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[2604764.128070] usb 3-4: Product: IDS-2074A
[2604764.128072] usb 3-4: Manufacturer: RS
[2604764.128075] usb 3-4: SerialNumber: 524D093G1
[2604764.135403] cdc_acm 3-4:2.0: ttyACM0: USB ACM device

Hopefully the data you need is in there?

Connecting via RS232 serial, and running the SCPI *IDN? command I get
RS,IDS-2074A,524D093G1,V1.30

Probably RS components, device, serial, and firmware version which is currently 1.30

On reboot, I don't see anything in the RS232 output. Is there some special baud for the message you need? I've tried 19200, 57600, and 115200.

Otherwise, do I have to find a debug header inside the device?

 

Offline toastedcrumpets

  • Regular Contributor
  • *
  • Posts: 83
  • Country: gb
Re: Possible GW Instek GDS-1000B hack
« Reply #46 on: November 29, 2018, 08:41:22 pm »
BTW, with v1.30 can you still generate/insert licenses from the KG that is in this thread?
They don't work, and they also don't work for the first version of the 2000A firmware I have which is v1.18. note this is different firmware to the 2000E series.

I'll dig around inside when I'm back in work on the 12th. I just got a 30ps pulse generator so I should be able to do before and after comparisons on the bandwidth too if I get this working...
 

Offline tv84

  • Frequent Contributor
  • **
  • Posts: 867
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #47 on: December 02, 2018, 02:36:11 pm »
Here is the new license generator for the current FWs of GDS1000B and GDS2000E, based on the wgoeo post (msg #3).

Code: [Select]
        private static void InstekKG(string serial)
        {
            // This works for GDS1000B and GDS2000E
            string[] opt = { "PWR", "BUS", "SRH", "SGM", "BW100", "BW200", "BW300", "SA" };   // Prefixes: "DS1KB-"  or "DS2E-"

            // uint[] ClearCode = { 0x11111111, 0xABABABAB, 0x22222222, 0xCDCDCDCD };  // OLD -- GDS1000B (up to v1.18) and GDS2000E (up to v1.28)
            uint[] ClearCode = { 0x74B0DC51, 0x46E87CCD, 0x25E45D32, 0x515F007C };  // NEW or       
            uint[] ClearCode = { 0x3D1B58BA, 0x74B0DC51, 0x19495CFF, 0x257130A3 };  // NEW  v1.23 ???

            serial = serial.Trim();
            int serial_int = Int32.Parse(serial.Substring(serial.Length - 4, 4));

            int pid_sum = 0;
            for (int i = 0; i < serial.Length - 4; i++)
                pid_sum += serial[i];

            for (int i = 0; i < opt.Length; i++)
            {
                int[] a = new int[2];
                a[0] = (pid_sum << 24) | ((i << 8) & 0xF00);
                a[1] = (1 << 24) | ((serial_int << 8) & 0xFFFF00) | ((pid_sum >> 8) & 0xFF);

                for (int j = 0, k = -0x61C88647; j < 32; j++, k -= 0x61C88647)
                {
                    a[0] += (int)((16 * a[1] + ClearCode[0]) ^ (a[1] + k) ^ ((a[1] >> 5) + ClearCode[1]));
                    a[1] += (int)((16 * a[0] + ClearCode[2]) ^ (a[0] + k) ^ ((a[0] >> 5) + ClearCode[3]));
                }
                Console.WriteLine("DS1KB-{0}.lic / DS2E-{0}.lic - [{1:x8}{2:x8}]", opt[i], a[1], a[0]);
            }
        }

Those who prefer the javascript version can replace just the ClearCode constants in the script (I leave that as homework). The SA option was also added (only for the 2000E).

Edit1: Tested successfully by some members in DS2E and MSO equipments. This will not work on 2000A because the S/N has a different format.

Edit2: It seems there are more than one new combination of ClearCode(s) so test both.
« Last Edit: May 07, 2019, 08:13:43 pm by tv84 »
 
The following users thanked this post: Mortymore, Chuck60

Offline nctnico

  • Super Contributor
  • ***
  • Posts: 17684
  • Country: nl
    • NCT Developments
Re: Possible GW Instek GDS-1000B hack
« Reply #48 on: December 02, 2018, 03:30:11 pm »
I can confirm that the license generator with the new values creates valid licenses for more recent firmware. My GDS-2204E accepts and recognises the SA and power analysis options but I can't select these features.
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 

Offline rhb

  • Super Contributor
  • ***
  • Posts: 2651
  • Country: us
Re: Possible GW Instek GDS-1000B hack
« Reply #49 on: December 03, 2018, 12:48:22 pm »
To access the SA you need to press the button in the lower right corner of the screen area below the small round button. It will then appear as an option on the 3rd button from the left below the screen.  If you do not have an instrument with an AWG, do *not* press the AWG button when in SA mode.  Use the channel select button to exit SA mode.  Pressing the AWG button will crash the DSO and require a power cycle.

As an example of how useful this is here are a couple of screen dumps.

I have a stock Instek 200 MHz probe with the grabber and the ground lead removed.  So it is a 7 mm E field detector.  The cable is stretched out straight and the scope set to 1 mV/div.  I can not detect *any* of the noise on my HP 8560A.

The noise from 40 to 150 KHz is coming from a pair of 4 ft LED T-8 tubes.  There is a Chinese EMI filter in the line which eliminated  a lot of noise.  But my 8560A TG doesn't go below 300 KHz, so I could not test the low frequency effectiveness of the EMI filter.
 
The following users thanked this post: Mortymore

Offline rhb

  • Super Contributor
  • ***
  • Posts: 2651
  • Country: us
Re: Possible GW Instek GDS-1000B hack
« Reply #50 on: December 03, 2018, 02:05:14 pm »
Just to give some idea of how extremely useful the SA function is here are some more screen dumps.

The H field probe is a 3-4 mm loop of copper wire wound on mandrels to be a push on fit to the probe tip and then insulated with several layers of heatshrink tubing.

The E field probe is a probe tip insulator with a bit of heatshrink over the probe tip.

So nothing fancy or expensive.  But safe to poke around without having to worry about causing a short.

I placed the probe about 1 cm from  the SMPS transformer of my GDS-2072E.  For the H field I rotated the probe to find the max and min orientations.  The E field was taken in the same location.

It's very easy to detect signals on ribbon cables, etc, though some shielding of the transformer fields would be needed to not have that dominate the spectrum.
 

Offline toastedcrumpets

  • Regular Contributor
  • *
  • Posts: 83
  • Country: gb
Re: Possible GW Instek GDS-1000B hack
« Reply #51 on: December 18, 2018, 03:56:31 pm »
This will not work on 2000A because the S/N has a different format.
Nooooo! I've just got back to work after four weeks of paternity and found this disappointing news. Is there anything I can do to help fix this? I've cracked the case on the GDS-2074A scope I have and I'm probing for the JTAG/serial interface as we speak....
 

Offline Mortymore

  • Regular Contributor
  • *
  • Posts: 139
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #52 on: January 28, 2019, 06:44:25 pm »
Hope they are OK with this... if not let me know, please.

Summed the parts provided by wgoeo (reply #3) and tv84 (reply #47), and made a "soup" for my 2074E, since I was interested in the Spectrum Analyzer (SA) option.
The "soup" was named lis2.txt, and should be renamed to lis2.html

The SA option was installed with the latest firmware gds2000e_v1.38 (2019-01-26) on the scope.

As rhb explained "To access the SA you need to press the button in the lower right corner of the screen area below the small round button.", the OPTION button. Now I have a use for him.

Hope everything is alright, but it worked for me, as can be seen from the print screens attached.

Thanks for your work

PS: Sorry rhb I had to press AWG button. My scope didn't crash... until I go further, playing with Generators menus that the scope doesn't have.
« Last Edit: January 28, 2019, 07:10:04 pm by Mortymore »
 
The following users thanked this post: seronday

Offline pa3hfu

  • Contributor
  • Posts: 23
  • Country: nl
Re: Possible GW Instek GDS-1000B hack
« Reply #53 on: January 30, 2019, 10:04:50 am »
I updated my 2104E to V1.38, but pressing the 'Option' button the scope says: Not supported for this model!
 

Offline Mortymore

  • Regular Contributor
  • *
  • Posts: 139
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #54 on: January 30, 2019, 10:55:47 am »
I updated my 2104E to V1.38, but pressing the 'Option' button the scope says: Not supported for this model!

The OPTION button accessing the SA option, has no direct relation with the firmware version. You have to install the SA license.
 

Offline AC360

  • Newbie
  • Posts: 3
  • Country: us
Re: Possible GW Instek GDS-1000B hack
« Reply #55 on: January 30, 2019, 04:15:09 pm »
Hope they are OK with this... if not let me know, please.

Summed the parts provided by wgoeo (reply #3) and tv84 (reply #47), and made a "soup" for my 2074E, since I was interested in the Spectrum Analyzer (SA) option.
The "soup" was named lis2.txt, and should be renamed to lis2.html

The SA option was installed with the latest firmware gds2000e_v1.38 (2019-01-26) on the scope.

As rhb explained "To access the SA you need to press the button in the lower right corner of the screen area below the small round button.", the OPTION button. Now I have a use for him.

Hope everything is alright, but it worked for me, as can be seen from the print screens attached.

Thanks for your work

PS: Sorry rhb I had to press AWG button. My scope didn't crash... until I go further, playing with Generators menus that the scope doesn't have.

Does it work for GDS-1000B?
 

Offline AC360

  • Newbie
  • Posts: 3
  • Country: us
Re: Possible GW Instek GDS-1000B hack
« Reply #56 on: January 30, 2019, 04:28:04 pm »
Here is the new license generator for the current FWs of GDS1000B and GDS2000E, based on the wgoeo post (msg #3).

Code: [Select]
        private static void InstekKG(string serial)
        {
            // This works for GDS1000B and GDS2000E
            string[] opt = { "PWR", "BUS", "SRH", "SGM", "BW100", "BW200", "BW300", "SA" };   // Prefixes: "DS1KB-"  or "DS2E-"

            // uint[] ClearCode = { 0x11111111, 0xABABABAB, 0x22222222, 0xCDCDCDCD };  // OLD -- GDS1000B (up to v1.18) and GDS2000E (up to v1.28)
            uint[] ClearCode = { 0x74B0DC51, 0x46E87CCD, 0x25E45D32, 0x515F007C };  // NEW

            serial = serial.Trim();
            int serial_int = Int32.Parse(serial.Substring(serial.Length - 4, 4));

            int pid_sum = 0;
            for (int i = 0; i < serial.Length - 4; i++)
                pid_sum += serial[i];

            for (int i = 0; i < opt.Length; i++)
            {
                int[] a = new int[2];
                a[0] = (pid_sum << 24) | ((i << 8) & 0xF00);
                a[1] = (1 << 24) | ((serial_int << 8) & 0xFFFF00) | ((pid_sum >> 8) & 0xFF);

                for (int j = 0, k = -0x61C88647; j < 32; j++, k -= 0x61C88647)
                {
                    a[0] += (int)((16 * a[1] + ClearCode[0]) ^ (a[1] + k) ^ ((a[1] >> 5) + ClearCode[1]));
                    a[1] += (int)((16 * a[0] + ClearCode[2]) ^ (a[0] + k) ^ ((a[0] >> 5) + ClearCode[3]));
                }
                Console.WriteLine("DS1KB-{0}.lic / DS2E-{0}.lic - [{1:x8}{2:x8}]", opt[i], a[1], a[0]);
            }
        }

Those who prefer the javascript version can replace just the ClearCode constants in the script (I leave that as homework). The SA option was also added (only for the 2000E).

Edit1: Tested successfully by some members in DS2E and MSO equipments. This will not work on 2000A because the S/N has a different format.

Does it can upgrade the GDS-1000B to BW200 or BW300 MHz?
 

Offline Mortymore

  • Regular Contributor
  • *
  • Posts: 139
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #57 on: January 30, 2019, 04:51:34 pm »
@AC360

I don't think you can go further than 100MHz on GDS-1000B, since they are available with 50/70/100MHz bandwidth options.

Unless better opinion... I believe the code that tv84 provided, is able to work on the GDS-1000B, but only for the options that can be accepted by the scope. In that manner, the SA, 200MHz, 300MHz licenses among others, will probably not be accepted.

Be aware that the lis2.txt file I attached is "modded" for 2000E series. That was my homework as tv84 "ordered".  :-DD Do yours! 
 

Offline tv84

  • Frequent Contributor
  • **
  • Posts: 867
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #58 on: January 30, 2019, 05:11:32 pm »
You passed the test, Morty. :)

The code works with the GDS-1000B version as stated in the code.

From what I remember, the licenses are generated based on the "option" index. So it's irrelevant the true name of the options.

In the GDS-1000B the BW options are  50/70/100MHz.

These are unlocking licenses, not HW upgrades!
 

Offline AC360

  • Newbie
  • Posts: 3
  • Country: us
Re: Possible GW Instek GDS-1000B hack
« Reply #59 on: January 30, 2019, 06:52:46 pm »
You passed the test, Morty. :)

The code works with the GDS-1000B version as stated in the code.

From what I remember, the licenses are generated based on the "option" index. So it's irrelevant the true name of the options.

In the GDS-1000B the BW options are  50/70/100MHz.

These are unlocking licenses, not HW upgrades!

So the "SA" option only work with GDS2000E series?
 

Offline nctnico

  • Super Contributor
  • ***
  • Posts: 17684
  • Country: nl
    • NCT Developments
Re: Possible GW Instek GDS-1000B hack
« Reply #60 on: January 30, 2019, 06:57:57 pm »
Just try it. I don't think there is much difference in the firmware between the 1000B and 2000E series.
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 

Offline Gazmon

  • Regular Contributor
  • *
  • Posts: 68
  • Country: gb
Re: Possible GW Instek GDS-1000B hack
« Reply #61 on: March 11, 2019, 01:01:16 am »
Are these hacks in reply 4 still working please

 

Offline nctnico

  • Super Contributor
  • ***
  • Posts: 17684
  • Country: nl
    • NCT Developments
Re: Possible GW Instek GDS-1000B hack
« Reply #62 on: March 11, 2019, 09:40:36 am »
You need to combine reply3 and reply47. This should create a working key generator you can run in your webbrowser.
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 

Offline Gazmon

  • Regular Contributor
  • *
  • Posts: 68
  • Country: gb
Re: Possible GW Instek GDS-1000B hack
« Reply #63 on: March 11, 2019, 10:22:55 am »
I downloaded the file in reply 3 and followed the instructions, have renamed to an html file , when I opened in a browser it was just code text


How do I combine the code please? cant seem to get any key generator?

Wondered if anyone could maybe help me out in what im  doing wrong?

thanks for any info
« Last Edit: March 11, 2019, 05:27:32 pm by Gazmon »
 

Offline Gazmon

  • Regular Contributor
  • *
  • Posts: 68
  • Country: gb
Re: Possible GW Instek GDS-1000B hack
« Reply #64 on: March 11, 2019, 05:28:22 pm »
Bump..... anyone with a few tips

have a GDS 1000B

appreciate the help
 

Offline nctnico

  • Super Contributor
  • ***
  • Posts: 17684
  • Country: nl
    • NCT Developments
Re: Possible GW Instek GDS-1000B hack
« Reply #65 on: March 11, 2019, 06:01:27 pm »
Try a different browser or check whether you have visible extensions and your file is not actually called html.txt .
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 
The following users thanked this post: Gazmon

Offline Gazmon

  • Regular Contributor
  • *
  • Posts: 68
  • Country: gb
Re: Possible GW Instek GDS-1000B hack
« Reply #66 on: March 11, 2019, 06:05:19 pm »
ok , but do I just need to combine the code in reply 4 and 47

in an html file?

 

Offline Gazmon

  • Regular Contributor
  • *
  • Posts: 68
  • Country: gb
Re: Possible GW Instek GDS-1000B hack
« Reply #67 on: March 11, 2019, 06:16:12 pm »
Try a different browser or check whether you have visible extensions and your file is not actually called html.txt .

yep that worked, downgraded to 1.12 first... serial decode, waveform search, 200mhz (scope says its upgraded to this in system info), and segmented memory all installed

Bus button and search features have come to life

Upgraded back to 1.23 , all systems still good so far, needs checking to see whats there

cheers
« Last Edit: March 11, 2019, 08:32:36 pm by Gazmon »
 

Offline nctnico

  • Super Contributor
  • ***
  • Posts: 17684
  • Country: nl
    • NCT Developments
Re: Possible GW Instek GDS-1000B hack
« Reply #68 on: March 11, 2019, 09:30:59 pm »
Also thanks for acknowledging that this hack also makes serial decode available on the GDS-1000B. Did you also install the SA license? Pressing the 'option' button should bring up a menu with the spectrum analyser button.
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 

Offline Gazmon

  • Regular Contributor
  • *
  • Posts: 68
  • Country: gb
Re: Possible GW Instek GDS-1000B hack
« Reply #69 on: March 11, 2019, 09:35:16 pm »
SA button, not sure I can get this on 1000b

correct me if I am wrong

the only option i didnt install was the `power analysis` is that worth having?
« Last Edit: March 11, 2019, 09:40:07 pm by Gazmon »
 

Offline Mortymore

  • Regular Contributor
  • *
  • Posts: 139
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #70 on: March 11, 2019, 10:03:24 pm »

... 200mhz (scope says its upgraded to this in system info)...

What scope exactly do you have?
Can you add a photo please? (or a screen capture of the System info, with the serial number blurred)

It's just that if you have a 1000B, I wasn't expecting it to reach 200MHz. I'm intrigued now  :-//

About the SA option (Spectrum Analyser) that nctnico is talking about, if it's available, you can access it with the "OPTION" button on the lower right corner near LCD screen (below "Menu off" button).
 

Offline Gazmon

  • Regular Contributor
  • *
  • Posts: 68
  • Country: gb
Re: Possible GW Instek GDS-1000B hack
« Reply #71 on: March 11, 2019, 10:20:05 pm »
photo attached, I have the 1102b 2 channel version

Serial decoding works but is not available for the parallel and SPI options it seems which is a bit disappointing

any idea what power analysis is, I didn't install this tbh


And the option button still does not do anything on my scope after the upgrades I did

Still pretty good scope after the hack
« Last Edit: March 11, 2019, 10:24:38 pm by Gazmon »
 
The following users thanked this post: Mortymore

Offline nctnico

  • Super Contributor
  • ***
  • Posts: 17684
  • Country: nl
    • NCT Developments
Re: Possible GW Instek GDS-1000B hack
« Reply #72 on: March 11, 2019, 10:33:19 pm »
Parallel is for digital channels only and SPI is only available on 4 channel models because you need 4 signals (clock, sel, MISO and MOSI) for SPI.
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 
The following users thanked this post: Gazmon

Offline Gazmon

  • Regular Contributor
  • *
  • Posts: 68
  • Country: gb
Re: Possible GW Instek GDS-1000B hack
« Reply #73 on: March 11, 2019, 10:45:28 pm »
Ok thats sorts that out, really just need to do a bandwidth check on the so called 200mhz that my scope claims to have now

being fairly new to all this what the easiest way to do this ?

any help appreciated
 

Offline Mortymore

  • Regular Contributor
  • *
  • Posts: 139
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #74 on: March 12, 2019, 12:18:06 am »

any idea what power analysis is, I didn't install this tbh


All I can tell is that power analysis is available for GDS-3000 Series, and it didn't work for me on the 2000E.
If that's just a matter of software or some hardware may be needed, I don't know. A current clamp for scope could be bought separately to deal with current, but I never look for intel on what could be holding the 1000B and 2000E so they can't have the power analysis option working.
 

Offline Gazmon

  • Regular Contributor
  • *
  • Posts: 68
  • Country: gb
Re: Possible GW Instek GDS-1000B hack
« Reply #75 on: March 12, 2019, 12:35:18 am »
What about the 200mhz bandwidth

 

Offline Mortymore

  • Regular Contributor
  • *
  • Posts: 139
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #76 on: March 12, 2019, 09:37:10 am »
If the scope says now it's 200MHz you can start to be confident that it is.

But you could check that if, for instance, you have access to a know source that achieves the 200MHz, or to a fast pulse generator, with a rise time of at least 1.75ns

RiseTime (nS) = 0.35 / Bandwidth (GHz) so for a BW of 0.2GHz (or 200MHz), the RT = 0.35/0.2 = 1.75 nS

Just for reference see the specs of the 2000E series, and observe the relationship between BW and RT

There's a TDR pulse generator video that is very popular, from a forum member w2aew, but I think it may be not fast enough to test the 200MHz


But don't forget what oscilloscope probes (or test leads) you are using, because they must be suited for those 200MHz. Try to find intel on your probes, since there's cases were they say they'r good up to 100MHz but they are fine even above 200MHz. The probes must not be the limiting factor.


 

Offline Gazmon

  • Regular Contributor
  • *
  • Posts: 68
  • Country: gb
Re: Possible GW Instek GDS-1000B hack
« Reply #77 on: March 12, 2019, 10:52:07 am »
Ok cheers , I only have a feeltech 3200 24 mhz Sig gen , so  don't think I can test it fully
And my  probes are 100mhz  I might need to upgrade them  to be sure?
« Last Edit: March 12, 2019, 04:13:43 pm by Gazmon »
 

Offline Gazmon

  • Regular Contributor
  • *
  • Posts: 68
  • Country: gb
Re: Possible GW Instek GDS-1000B hack
« Reply #78 on: March 12, 2019, 04:12:41 pm »
Just a note on the 200mhz upgrade

It could be just the software telling me this, and the hardware may not support anything above 100mhz?  as I cannot fully test it at present I cant confirm its really gone 200mhz, but be nice if it was confirmed

In Bandwidth options I now have `20mhz 100mhz+Full`


Where before it was only 20mhz and full
« Last Edit: March 12, 2019, 04:16:07 pm by Gazmon »
 
The following users thanked this post: Mortymore

Offline slodat

  • Contributor
  • Posts: 27
  • Country: us
Re: Possible GW Instek GDS-1000B hack
« Reply #79 on: March 24, 2019, 02:32:13 am »
Does anyone have 1.12 they would be willing to share with me? I have a GDS-1054B.

Thanks in advance!
 

Offline Mortymore

  • Regular Contributor
  • *
  • Posts: 139
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #80 on: March 24, 2019, 10:04:06 am »
Does anyone have 1.12 they would be willing to share with me? I have a GDS-1054B.

Thanks in advance!

Hi slodat

I believe you still can get it following the provided link on the 1st post of this thread.
 

Offline nctnico

  • Super Contributor
  • ***
  • Posts: 17684
  • Country: nl
    • NCT Developments
Re: Possible GW Instek GDS-1000B hack
« Reply #81 on: March 24, 2019, 10:33:47 am »
Does anyone have 1.12 they would be willing to share with me? I have a GDS-1054B.

Thanks in advance!
A few pages back there is a new key generator so you don;t have to downgrade.
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 

Offline slodat

  • Contributor
  • Posts: 27
  • Country: us
Re: Possible GW Instek GDS-1000B hack
« Reply #82 on: March 24, 2019, 02:43:44 pm »
I’ve read the thread about thirty times. I can’t get the first lis.html to produce a license file on any browser I have. It just says failed to download.

And, I don’t know where the post 47 code snippet would be used. I’m not following. Anyone up for helping a guy out?
 

Offline Mortymore

  • Regular Contributor
  • *
  • Posts: 139
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #83 on: March 24, 2019, 03:18:57 pm »
You probably are not actually changing the extension file from TXT to HTML. If using Windows you need to enable to show file extensions on folder options.

Don't downgrade the firmware and try to generate licences with the attached file DS1KB.txt, after rename it's extension from txt to html.

Hope I get it right. This should work for firmware above v1.18 of the 1000B, but you must expect that some of the licences won't probably work, like Power Analysis or BW300. You are free to try them all, though. If they don't work, no harm done.

You will need to know the serial number of your oscilloscope to generate licences.
Copy the files with the individual licences to a USB pen drive and install them on scope.
 

Offline slodat

  • Contributor
  • Posts: 27
  • Country: us
Re: Possible GW Instek GDS-1000B hack
« Reply #84 on: March 24, 2019, 05:26:23 pm »
Thank you for the file. Looks like it's my web browser was causing me problems. I've generated the *.lis files and the scope says the license isn't the right version. hmm.. My GDS-1054B is v1.23. I get the same error on all of the .lis files. I double checked my serial number.

« Last Edit: March 24, 2019, 05:39:08 pm by slodat »
 

Offline Mortymore

  • Regular Contributor
  • *
  • Posts: 139
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #85 on: March 24, 2019, 06:11:05 pm »
According to this piece of code provided by tv48 on Reply #47...

            uint[] ClearCode = { 0x11111111, 0xABABABAB, 0x22222222, 0xCDCDCDCD };  // OLD -- GDS1000B (up to v1.18) and GDS2000E (up to v1.28)
            uint[] ClearCode = { 0x74B0DC51, 0x46E87CCD, 0x25E45D32, 0x515F007C };  // NEW

... for new firmware one should use the data from the 2nd string. For older (GDS1000B up to v1.18), the 1st string data.

In the file I previously provided, the data from 2nd string was used (for newer versions of firmware).

I think you might have missed something (or I went wrong somewhere in the file for 1000B), but if you want, you can try downgrade the firmware (to 1.12) and having modified the file replacing the data from one string with the other, generate new licences for old firmware. (see file attached)

All I can say is that the file I modified for the 2000E worked for me.
 

Offline nctnico

  • Super Contributor
  • ***
  • Posts: 17684
  • Country: nl
    • NCT Developments
Re: Possible GW Instek GDS-1000B hack
« Reply #86 on: March 24, 2019, 06:24:36 pm »
It is also possible the serial number was entered incorrectly (letter O instead of number 0 or vice versa).
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 

Offline frogblender

  • Contributor
  • Posts: 36
Re: Possible GW Instek GDS-1000B hack
« Reply #87 on: March 25, 2019, 03:27:04 am »
ANYONE with a GDS-1054B:   after applying the hack, what is the actual BW?
 

Offline slodat

  • Contributor
  • Posts: 27
  • Country: us
Re: Possible GW Instek GDS-1000B hack
« Reply #88 on: March 25, 2019, 04:22:33 am »
It won’t unlock any of the features.

I’m having a problem with the filter app. It installed fine. When I go to use it sometimes the settings on the vertical menu are grayed out. Then, out of now where after using the scope they will be there, then another time I look they are greyed out..
 

Offline nctnico

  • Super Contributor
  • ***
  • Posts: 17684
  • Country: nl
    • NCT Developments
Re: Possible GW Instek GDS-1000B hack
« Reply #89 on: March 25, 2019, 10:12:26 am »
It won’t unlock any of the features.

I’m having a problem with the filter app. It installed fine. When I go to use it sometimes the settings on the vertical menu are grayed out. Then, out of now where after using the scope they will be there, then another time I look they are greyed out..
The filtering works for 1Mpts and shorter memory lengths.
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 

Offline slodat

  • Contributor
  • Posts: 27
  • Country: us
Possible GW Instek GDS-1000B hack
« Reply #90 on: March 25, 2019, 02:25:59 pm »
It won’t unlock any of the features.

I’m having a problem with the filter app. It installed fine. When I go to use it sometimes the settings on the vertical menu are grayed out. Then, out of now where after using the scope they will be there, then another time I look they are greyed out..
The filtering works for 1Mpts and shorter memory lengths.

I had it set at 1Mpts and three channels active. Controls were greyed out.  Hmm
 

Offline Mortymore

  • Regular Contributor
  • *
  • Posts: 139
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #91 on: March 25, 2019, 07:07:18 pm »
I think I see what you're saying...

The "problem" is with the digitalfilter APP. In the screen capture attached I had a 4.1Mhz square signal with a record length of 10M pts and the filter setup is enabled.
Once enabled, it will continue enable above the 4.1 MHz if I don't hit the "autoset" button, but above that frequency (got it by trial and error), if I press the "autoset" the filter menu will be disabled. The actual filter settings seemed that have no effect. On the screen showed is set 60MHz, but I had it in the KHz range with the same result.

The parameters here may be different for you. I didn't bother to change amplitude or shape of the wave, but i tried different frequencies and record length, but in this the fast test I done seemed to me that the limitation was in frequency. If set 4.2MHz the menu was off. There may be a limit related with frequency vs record length but I have not done thorough tests. Just tried to get an idea of what might be going on.
 

Offline Vytautas

  • Contributor
  • Posts: 38
Re: Possible GW Instek GDS-1000B hack
« Reply #92 on: March 26, 2019, 11:38:07 am »
Hi, guys,
Thank you all for contributing. I just updated my GDS-2072E to 300MHz plus Spectrum Analizer, using the lis2 file (don't remember, on which page it was). Brilliant! Now it almost became MDO-2302 (official version does not exist, only 2202), except for the AWG hardware, naturally.
I have a question. The scope shows input impedance of 1M in a way that suggests as if there was an option to choose also the 50Ohms. But the button under that option does not do anything. Has anybody investigated whether that is also a matter of software lincense, like kicking in of some relay or is it a hardware limitation. I had not dissasembled my unit (yet), so have not had a chance to sneek in.
 
The following users thanked this post: Mortymore

Offline nctnico

  • Super Contributor
  • ***
  • Posts: 17684
  • Country: nl
    • NCT Developments
Re: Possible GW Instek GDS-1000B hack
« Reply #93 on: March 26, 2019, 12:32:07 pm »
AFAIK the hardware doesn't support 50 Ohm. GW Instek seems to be using a very generic firmware base for their oscilloscopes so some disabled buttons may show up in some places.
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 

Offline ebastler

  • Super Contributor
  • ***
  • Posts: 2995
  • Country: de
Re: Possible GW Instek GDS-1000B hack
« Reply #94 on: March 26, 2019, 12:38:21 pm »
ANYONE with a GDS-1054B:   after applying the hack, what is the actual BW?
Msg #58

No, not really.  ???
 

Offline nctnico

  • Super Contributor
  • ***
  • Posts: 17684
  • Country: nl
    • NCT Developments
Re: Possible GW Instek GDS-1000B hack
« Reply #95 on: March 26, 2019, 12:53:34 pm »
My GDS2204E goes over 300MHz with the 300MHz uphack. I'd expect the GDS1054B to also achieve the extra bandwidth.
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 
The following users thanked this post: ebastler

Offline Mortymore

  • Regular Contributor
  • *
  • Posts: 139
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #96 on: March 26, 2019, 06:56:16 pm »
After Vytautas stated that he updated his GDS-2072E to 300MHz, I start thinking about why was my IDS-2074E stuck to 200MHz.

I start playing with the most recent licences, because I updated my scope some time ago, before the latest code released by tv84. Messing around with them, the scope kept stating that the licenses were already installed, until... i tried the 100MHz. Result: my scope downgraded form 200 to 100. Nice!  :palm:
Trying to reinstall 200 or 300 licences didn't work. Scope "said" that they were already installed, but didn't get me there. It was stuck in 100MHz.   |O
OK! Time to play with the scope once again, to fix my mistake.  :box:

Solution:

I think it is sufficient to restore the /home/dso/OptionConf file if you want to remove the installed licenses.

1) Downgraded the firmware to 1.21b6 and establishing an SSL connection to the scope deleted the file OptionConf. EDIT: Be very careful not to delete all files or the folder
2) After that, just a quick check to system info, and the bandwidth info was gone (as expected).
3) Upgraded the firmware to the latest 1.38.
4) Installed licences (2nd version - tv84), among them the 300MHz BW and it was accepted this time.  :-+

I realise now that I certainly did the mistake of install the 200MHz the first time I upgraded my scope and that disabled the possibility to reach the 300MHz back then.
So... avoid playing with lower bandwidth licences if you don't want to restart the hack process again. 

But in the end, if it wasn't for my mistake, my scope would still be stuck in the 200MHz. Another lesson learned. I think   ::)

PS: Now I realize... the TEK P2220 and P2200 probes I was using with the scope, became "short". Any advise for some 300MHz probes?
« Last Edit: March 26, 2019, 08:52:18 pm by Mortymore »
 

Offline Mortymore

  • Regular Contributor
  • *
  • Posts: 139
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #97 on: April 28, 2019, 09:59:48 am »
Not to good input 2 replies in a row but this one has nothing to do with the previous.

Thing now is... casually found that Voltcraft has a series DSO-1000D that is for sure a rebranded  GW-Instek GDS-1000B

In the Conrad website found 2 versions:
VOLTCRAFT DSO-1074D Digital 70 MHz 4-channel 250 MSa/s 10 Mpts 8 Bit Digital storage (DSO), Spectrum analyzer
VOLTCRAFT DSO-1104D Digital 100 MHz 4-channel 250 MSa/s 10 Mpts 8 Bit Digital storage (DSO), Spectrum analyzer

The "title" is curious.
1st advertised as being "4-channel 250 MSa/s", an honest way to put things, since it will be what you get with 4 channels active, but the usual way is more like "4ch and 1GSa/s", being 1GSa/s attained with only 1 channel active.
2nd the Spectrum Analyzer. Was this option available on any of the GW-Instek 1000B variants? Or only by hack added?

Decided to share this information since it could be of interest to someone that has one of this Voltcraft scopes, and through Google may end up here in Eevblog forum.

PS: As far as I know, we have as rebranded GW-Instek 1000B or 2000E the following: Iso-Tech, RS Pro and Voltcraft
« Last Edit: April 28, 2019, 05:13:50 pm by Mortymore »
 

Offline Herbertl

  • Contributor
  • Posts: 14
  • Country: at
Re: Possible GW Instek GDS-1000B hack
« Reply #98 on: April 28, 2019, 03:24:19 pm »
It seems like the options and bandwidth upgrades (up to 300 MHz) can be unlocked using a file in a USB drive. I was wondering if someone is willing to share the newer firmware update (in case the unlock feature is removed) and possibly test the unlock files.

Interesting.

Is GwInstek recommendable? The specs sound good, the price too.
 

Offline Mortymore

  • Regular Contributor
  • *
  • Posts: 139
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #99 on: April 28, 2019, 05:27:39 pm »
...
Is GwInstek recommendable? The specs sound good, the price too.

Recommendable as a scope in the $500 range, yes. If it's the best for you, depends on what you are looking for and your preferences.
There are a few threads in the forum about GW-Instek vs Rigol vs Siglent, mostly, since they are probably the brands in this price range that are most searched.
Take a look at them, but don't get scared by some passionate opinions you may find in the way.  :rant: It's all Eevblog family affairs.  :popcorn:
 

Offline tonywood

  • Newbie
  • Posts: 4
Re: Possible GW Instek GDS-1000B hack
« Reply #100 on: April 29, 2019, 09:36:26 pm »
Can someone send me an unhacked OptionConf file? I need to undo the hack for testing. Thank you
Or if anyone knows a way to undo the bandwidth option?

Thanks again
 

Offline Mortymore

  • Regular Contributor
  • *
  • Posts: 139
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #101 on: April 29, 2019, 09:49:24 pm »
...
Or if anyone knows a way to undo the bandwidth option?
...

See 4 posts back (Reply #96)

Basically, install a firmware that enables you to establishing an SSL connection to the scope and then delete the file OptionConf
Be very careful not to delete all files or the folder
« Last Edit: April 29, 2019, 09:53:01 pm by Mortymore »
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1122
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: Possible GW Instek GDS-1000B hack
« Reply #102 on: April 29, 2019, 09:57:14 pm »
I received my GDS1054B today with firmware 1.23.  License generated by the latest script gives invalid license error.  Trying to downgrade to 1.12 but scope says I need to use SAFE MODE, but there is no documentation about it.  Does anyone know how to downgrade from 1.23 or what SAFE MODE means?

 

Offline tv84

  • Frequent Contributor
  • **
  • Posts: 867
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #103 on: April 29, 2019, 10:02:32 pm »
I received my GDS1054B today with firmware 1.23.  License generated by the latest script gives invalid license error.  Trying to downgrade to 1.12 but scope says I need to use SAFE MODE, but there is no documentation about it.  Does anyone know how to downgrade from 1.23 or what SAFE MODE means?

RTFM

https://www.eevblog.com/forum/testgear/possible-gw-instek-gds-1000b-hack/msg2007089/#msg2007089
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1122
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: Possible GW Instek GDS-1000B hack
« Reply #104 on: April 29, 2019, 11:09:33 pm »
The new code does not work for firmware 1.23.  I managed to downgrade to FW 1.12 by using SAFE MODE:

(SAFE MODE Documentation): http://www.gwinstek.com.cn/upload/file/20181119051939962.pdf

0) Clear content of USB Drive
1) Copy firmware to root directory of USB Drive
2) Insert USB Drive to scope (when it is turned off)
3) Turn on scope and immediately start rotating the VARIABLE knob until SAFE MODE shows up.  It will recognize the firmware file and ask user to start installing it.  If there are multiple .upg files, it will show the first one, then ask if user wants to install current one or find next firmware
4) The manual says the scope will reboot automatically, but on mine, it just stopped after showing that NAND flash was completed.
5) Reboot scope and it should boot with the firmware version you copied to the USB Drive

This process is supposed to works also for bricked scopes.

After I downgraded to 1.12, I was able to use the code to enable all the options. 

Now the scope is bricked again when I tried to upgrade to latest firmware 1.23

Will try to unbrick it using the SAFE MODE with 1.12 and try again.

EDIT: Using SAFE MODE I was able to reinstall FW 1.12.  Previously activated licenses are still valid.
EDIT2: upgrading to 1.23 does not work using the Utility option.  It works from SAFE Mode.
EDIT3: SAFE MODE allows you to select different firmware files to use for recovery.
« Last Edit: April 29, 2019, 11:52:57 pm by TK »
 

Offline Fungus

  • Super Contributor
  • ***
  • Posts: 9985
  • Country: 00
Re: Possible GW Instek GDS-1000B hack
« Reply #105 on: April 30, 2019, 07:57:44 am »
My GDS2204E goes over 300MHz with the 300MHz uphack. I'd expect the GDS1054B to also achieve the extra bandwidth.

Is that a good thing when you have such limited sample rate?

With 4 channels on the bandwidth will be higher than the sample rate.
 

Offline Mortymore

  • Regular Contributor
  • *
  • Posts: 139
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #106 on: April 30, 2019, 08:32:39 am »
... I need to use SAFE MODE, but there is no documentation about it.  Does anyone know how to downgrade from 1.23 or what SAFE MODE means?

...
(SAFE MODE Documentation): http://www.gwinstek.com.cn/upload/file/20181119051939962.pdf
...

You don't need to "go to China" to find manuals, firmware, software... just go to Download area @:

https://www.gwinstek.com/en-global/products/detail/GDS-1000B

The documentation for upgrading firmware is there, has everything else

 
The following users thanked this post: TK

Offline tv84

  • Frequent Contributor
  • **
  • Posts: 867
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #107 on: April 30, 2019, 10:16:45 am »
The new code does not work for firmware 1.23.

If anyone confirms this I could try to give it another look.
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1122
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: Possible GW Instek GDS-1000B hack
« Reply #108 on: April 30, 2019, 10:43:21 am »
The new code does not work for firmware 1.23.

If anyone confirms this I could try to give it another look.
It was reported one month or so ago, but I don't know what was the outcome

https://www.eevblog.com/forum/testgear/possible-gw-instek-gds-1000b-hack/msg2293365/#msg2293365
 

Offline tv84

  • Frequent Contributor
  • **
  • Posts: 867
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #109 on: April 30, 2019, 10:59:05 am »
It was reported one month or so ago, but I don't know what was the outcome

"don't know what was the outcome" <- that was the reason why I didn't pay attention
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1122
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: Possible GW Instek GDS-1000B hack
« Reply #110 on: April 30, 2019, 01:42:41 pm »
I tested the BW after applying the 300MHz hack.

Test setup:

Signal Generator (Marconi 2024) --> SMA cable --> SMA_BNC --> 50ohm passthrough --> Scope input Channel 1 (1X attenuation)

Measured Frequency and Vpp

10MHz 1.2Vpp
100MHz 900mVpp (-3dB)
200MHz 280mVpp
250MHz 110mVpp
300MHz 48mVpp
350MHz 20mVpp (5mV vertical division setting)

Cannot measure reliable frequency at 400MHz and up.  I think officially it is a 100MHz front end.
« Last Edit: April 30, 2019, 01:56:21 pm by TK »
 

Offline Mortymore

  • Regular Contributor
  • *
  • Posts: 139
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #111 on: April 30, 2019, 03:41:45 pm »
@TK

What are the bandwidth limit options with the 300MHz BW hack?

For the 200MHz, options are 20,100,Full.
Note that GW-Instek has the 1000B with 50/70/100MHz bandwidth selections.
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1122
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: Possible GW Instek GDS-1000B hack
« Reply #112 on: April 30, 2019, 06:41:12 pm »
@TK

What are the bandwidth limit options with the 300MHz BW hack?

For the 200MHz, options are 20,100,Full.
Note that GW-Instek has the 1000B with 50/70/100MHz bandwidth selections.
For 300MHz, BW limitation options are 20, 100, 200, Full.
 
The following users thanked this post: Mortymore

Offline TK

  • Super Contributor
  • ***
  • Posts: 1122
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: Possible GW Instek GDS-1000B hack
« Reply #113 on: May 01, 2019, 12:01:15 am »
I am not liking the refresh rate of the GDS1054B.  I am feeding an AM modulated signal and on both the Keysight 1000X and Rigol DS1054Z I can see a nice AM modulated waveform but on the GDS1054B I see single traces or at most 3-4 traces, but not the nice area filled trace like the other scopes.

The scope UI is very responsive like the Keysight, but I suspect the refresh rate is not near 50,000 wfm/s
 

Offline nctnico

  • Super Contributor
  • ***
  • Posts: 17684
  • Country: nl
    • NCT Developments
Re: Possible GW Instek GDS-1000B hack
« Reply #114 on: May 01, 2019, 08:20:31 am »
The update rate depends on the memory depth setting. But don't expect a very graded signal. The GW Instek goes from like 50% to 100% in order not to hide any rare signal occurence.
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 3069
  • Country: fi
  • Starting with DLL21
Re: Possible GW Instek GDS-1000B hack
« Reply #115 on: May 01, 2019, 08:56:28 am »
I am not liking the refresh rate of the GDS1054B.  I am feeding an AM modulated signal and on both the Keysight 1000X and Rigol DS1054Z I can see a nice AM modulated waveform but on the GDS1054B I see single traces or at most 3-4 traces, but not the nice area filled trace like the other scopes.

The scope UI is very responsive like the Keysight, but I suspect the refresh rate is not near 50,000 wfm/s

Do you mean using time base setting for look AM modulated RF carrier waveform or for look signal LF modulating envelope. Bit different cases.
Then, what ever scope,  these up to wfm/s speeds are mostly valid only with some special settings and signals (including also Keysight).  Very easy true is 50, or 500 or 5000 instead of 50kwfm/s or what ever.

Other question is that how important is beautiful image vs image what still give enough  information about signal under test.

Also in many scopes need some "know your equipment" before can find most optimal settings. (as can see example in tens or hundreds of junktube  nonsense "reviews" when the author's self-criticism and knowledge is not enough to assess whether it is published for the whole world or not. The world is drowning in a shit and in "tube" a small good "golden" part need find from huge amount of waste.)



« Last Edit: May 01, 2019, 09:15:01 am by rf-loop »
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1122
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: Possible GW Instek GDS-1000B hack
« Reply #116 on: May 02, 2019, 09:45:24 pm »
After the hack my GDS1054B is freezing when I try to execute Self Cal.  I connect the BNC cable from the CAL output on the back to CH1, press VERTICAL and it hangs.  Is anyone else experiencing a similar behavior?  My unit came with 1.23, downgraded to 1.12, hacked, then upgraded to 1.23

Signal Path Compensation runs perfectly.
 

Offline Mortymore

  • Regular Contributor
  • *
  • Posts: 139
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #117 on: May 02, 2019, 10:40:02 pm »
The calibration process will take some 5 minutes per channel, or so, and probably during calibration the scope may not respond to buttons pressed (just guessing here).
Have you waited longer than 5 or 6 minutes for him to finish calibrating one of the channels?
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1122
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: Possible GW Instek GDS-1000B hack
« Reply #118 on: May 03, 2019, 12:01:54 am »
Yes, I waited for 20-30 minutes or more

EDIT: Downgraded to 1.12.  Still not working.  It might be the 300MHz uphack.  Is there any way to remove the licenses?
« Last Edit: May 03, 2019, 01:10:44 pm by TK »
 

Offline nctnico

  • Super Contributor
  • ***
  • Posts: 17684
  • Country: nl
    • NCT Developments
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 
The following users thanked this post: TK

Offline TK

  • Super Contributor
  • ***
  • Posts: 1122
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: Possible GW Instek GDS-1000B hack
« Reply #120 on: May 03, 2019, 03:46:34 pm »
False Alarm... it was a bad BNC cable   |O |O |O.  Self Calibration works OK on firmware 1.23 (and 1.12 as well).
 

Offline nctnico

  • Super Contributor
  • ***
  • Posts: 17684
  • Country: nl
    • NCT Developments
Re: Possible GW Instek GDS-1000B hack
« Reply #121 on: May 03, 2019, 03:48:12 pm »
Cut the cable in half and throw it away. BNC cables are plentyful and cheap on Ebay.
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 

Offline Mortymore

  • Regular Contributor
  • *
  • Posts: 139
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #122 on: May 03, 2019, 05:25:32 pm »
If I recall correctly, I think Bob Pease once said that he marked bad components with a hammer.
If left lying around unmarked, they tend to be inserted again on a circuit.
 
The following users thanked this post: rf-loop

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 3069
  • Country: fi
  • Starting with DLL21
Re: Possible GW Instek GDS-1000B hack
« Reply #123 on: May 03, 2019, 05:29:12 pm »
Cut the cable in half and throw it away. BNC cables are plentyful and cheap on Ebay.

Oh you want more bad crap BNC cables.  :-DD
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Offline nctnico

  • Super Contributor
  • ***
  • Posts: 17684
  • Country: nl
    • NCT Developments
Re: Possible GW Instek GDS-1000B hack
« Reply #124 on: May 03, 2019, 06:02:47 pm »
Cut the cable in half and throw it away. BNC cables are plentyful and cheap on Ebay.
Oh you want more bad crap BNC cables.  :-DD
Well the cables I get from Ebay are way better then what I bought locally (unless you go for the utterly cheap ones on Ebay). Cables are consumables anyway.
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 

Offline Herbertl

  • Contributor
  • Posts: 14
  • Country: at
Re: Possible GW Instek GDS-1000B hack
« Reply #125 on: May 05, 2019, 09:28:52 pm »
Is there a chance to configure the GwInstek? Like you can do with other scope?
Would like to configure it individually.
The offers in the store have features I do not need and are missing features I do want.
 

Offline ttyridal

  • Contributor
  • Posts: 16
  • Country: no
Re: Possible GW Instek GDS-1000B hack
« Reply #126 on: May 06, 2019, 04:22:34 pm »
It was reported one month or so ago, but I don't know what was the outcome

"don't know what was the outcome" <- that was the reason why I didn't pay attention

I can confirm that firmware 1.23 does not like the latest codes.   

Downgrading to 1.12, apply desired licenses and upgrading works fine.
 

Offline nctnico

  • Super Contributor
  • ***
  • Posts: 17684
  • Country: nl
    • NCT Developments
Re: Possible GW Instek GDS-1000B hack
« Reply #127 on: May 06, 2019, 05:09:09 pm »
Hmmm... that proves that GW Instek is monitoring EEVblog  ;D
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 

Offline tv84

  • Frequent Contributor
  • **
  • Posts: 867
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #128 on: May 07, 2019, 06:52:16 pm »
Hmmm... that proves that GW Instek is monitoring EEVblog  ;D

The new codes were released after 1.23 release date...

Edit: But it seems I overlooked another code combination...
« Last Edit: May 07, 2019, 08:15:49 pm by tv84 »
 

Offline nctnico

  • Super Contributor
  • ***
  • Posts: 17684
  • Country: nl
    • NCT Developments
Re: Possible GW Instek GDS-1000B hack
« Reply #129 on: May 07, 2019, 07:02:44 pm »
Hmmm... that proves that GW Instek is monitoring EEVblog  ;D
The new codes were released after 1.23 release date...
Well then it seems people are doing things wrong. I was assuming 1.23 was a new firmware version but appearantly it is not.
There are small lies, big lies and then there is what is on the screen of your oscilloscope.
 

Offline ttyridal

  • Contributor
  • Posts: 16
  • Country: no
Re: Possible GW Instek GDS-1000B hack
« Reply #130 on: May 07, 2019, 07:32:18 pm »
It's possible I overlooked something of course.

I just replaced the four numbers in lis.txt (reply #3) with the ones given in reply #47

Reasonably sure I had the serial number correct both times (no homoglyphs in it)
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1122
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: Possible GW Instek GDS-1000B hack
« Reply #131 on: May 07, 2019, 08:04:38 pm »
It did not work on my GDS-1054B with firmware 1.23 

I had to downgrade it to 1.12, apply the hack and upgrade to 1.23

And upgrade does not work when executed from the utility menu, it only works when using SAFE MODE.

But fortunately using SAFE MODE you can downgrade and upgrade from any version to any other version.

I also tested SSH on 1.12 to remove the options file and it works OK.
 

Offline tv84

  • Frequent Contributor
  • **
  • Posts: 867
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #132 on: May 07, 2019, 08:11:00 pm »
Sorry guys, maybe I overlooked something and there is another combination...   ::)

uint[] ClearCode = { 0x3D1B58BA, 0x74B0DC51, 0x19495CFF, 0x257130A3 };

Can anyone test this with a v1.23 ?

Edit1:

Thanks wgoeo for the test. It seems i mixed the order...  :palm:  Endianess stuff...

So the correct order is:

uint[] ClearCode = { 0x19495CFF, 0x257130A3, 0x3D1B58BA, 0x74B0DC51 };
« Last Edit: July 21, 2019, 11:11:50 am by tv84 »
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1122
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: Possible GW Instek GDS-1000B hack
« Reply #133 on: May 07, 2019, 09:31:15 pm »
Sorry guys, maybe I overlooked something and there is another combination...   ::)

uint[] ClearCode = { 0x3D1B58BA, 0x74B0DC51, 0x19495CFF, 0x257130A3 };

Can anyone test this with a v1.23 ?
It doesn't work.  I downgraded to 1.12, connected using ssh, removed OptionsConf file to remove previous licenses, upgraded to 1.23 using SAFE MODE, tried applying new license code but it gives the same error.
 
The following users thanked this post: tv84

Offline frogblender

  • Contributor
  • Posts: 36
Re: Possible GW Instek GDS-1000B hack
« Reply #134 on: May 23, 2019, 05:41:00 pm »
Quote from: TK
TK....  what's the latest with your GDS-1054B?   Is the hack working, and if so, what is your BW?
 

Offline TK

  • Super Contributor
  • ***
  • Posts: 1122
  • Country: us
  • I am a Systems Analyst who plays with Electronics
Re: Possible GW Instek GDS-1000B hack
« Reply #135 on: May 23, 2019, 07:38:33 pm »
Quote from: TK
TK....  what's the latest with your GDS-1054B?   Is the hack working, and if so, what is your BW?
The last time I checked, I was able to measure frequency up to 300-350MHz, highly attenuated.  I don't have it anymore to continue the tests.
 

Offline wgoeo

  • Contributor
  • Posts: 10
  • Country: 00
Re: Possible GW Instek GDS-1000B hack
« Reply #136 on: July 20, 2019, 10:56:41 pm »
I think the correct order is

{0x19495cff, 0x257130a3, 0x3d1b58ba, 0x74b0dc51}

I checked with 1.24 (but not with a real scope), maybe it also works with 1.23.
 
The following users thanked this post: tv84

Offline wgoeo

  • Contributor
  • Posts: 10
  • Country: 00
Re: Possible GW Instek GDS-1000B hack
« Reply #137 on: July 21, 2019, 02:03:33 am »
It seems you can get SSH back. Rename the attached file to debug.dbg, copy to a USB drive then do the same procedure. The password may have changed but you can probably add a command in the script to change it.

Edit: It's a startup script so you should reboot.
« Last Edit: July 21, 2019, 02:17:58 am by wgoeo »
 

Offline tv84

  • Frequent Contributor
  • **
  • Posts: 867
  • Country: pt
Re: Possible GW Instek GDS-1000B hack
« Reply #138 on: July 21, 2019, 11:13:06 am »
Thankx! I corrected the initial post.
 

Offline frogblender

  • Contributor
  • Posts: 36
Re: Possible GW Instek GDS-1000B hack
« Reply #139 on: August 21, 2019, 03:04:33 pm »
I got my unit today GDS-1054b, it came with firmware 1.19 so I downgraded to 1.18 and installed the *.lis files and verified they were working. I then upgraded to firmware 1.22 and all the options were still installed and work. Thanks to all for the help on this. Looks like you keep the added features with a firmware update.

@tonywood ... after modding your GDS-1054B...  is it still a 50Mhz scope?
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf