Author Topic: Rigol MSO2000 series hacking  (Read 160624 times)

0 Members and 1 Guest are viewing this topic.

Offline milek22

  • Contributor
  • Posts: 27
  • Country: pl
Re: Rigol MSO2000 series hacking
« Reply #150 on: August 28, 2014, 06:00:47 pm »
I think I'm doing well and see photo below
"You can not connect because the computer firmly refuses to" connect "
Probably in linux I must try
« Last Edit: August 28, 2014, 06:07:52 pm by milek22 »
 

Offline Macman

  • Regular Contributor
  • *
  • Posts: 77
  • Country: gb
Re: Rigol MSO2000 series hacking
« Reply #151 on: August 28, 2014, 06:05:08 pm »
That screen shot you've posted there is of the GDB proxy command window and looks as I would have expected it to except that you have Control C'd out of it so it is no longer running(edit: I see you have changed the screen dump now). I would suggest you reboot your PC/laptop and start again.

edit
The main reason it did not work is because you had terminated the GDB proxy by control C. Once it is running leave do not type anything else in that command window.

I've just the name of GDB for the program name you need:

After the proxy is running correctly in the first command window, in the second command window type:

bfin-elf-gdb

Then type the following 2 lines:

target remote :2000
dump binary memory ds2k_00_sdram.bin   0x00EBA000  0x01B60000

« Last Edit: August 28, 2014, 06:19:15 pm by Macman »
 

Offline milek22

  • Contributor
  • Posts: 27
  • Country: pl
Re: Rigol MSO2000 series hacking
« Reply #152 on: August 28, 2014, 07:01:24 pm »
Colleague again you racje.Jeste? GREAT.
I threw SDRAM.bin
The catalog >> Rigup opened the command line
Rigup >> found my MEMORY SDRAM.bin
>> It displays help messages
> What should I enter?
 

Offline Macman

  • Regular Contributor
  • *
  • Posts: 77
  • Country: gb
Re: Rigol MSO2000 series hacking
« Reply #153 on: August 28, 2014, 07:06:40 pm »
you should enter: rigup ds2072a ds2k_00_sdram.bin

edit:
You need to put your dump file in the rigup directory.
Open a command window in the rigup directory and then type:

rigup ds2072a ds2k_00_sdram.bin

« Last Edit: August 28, 2014, 07:13:22 pm by Macman »
 

Offline milek22

  • Contributor
  • Posts: 27
  • Country: pl
Re: Rigol MSO2000 series hacking
« Reply #154 on: August 28, 2014, 07:34:55 pm »
SUCCESS Colleague
I have the keys to the various options
Which do you suggest I use?
 

Offline Macman

  • Regular Contributor
  • *
  • Posts: 77
  • Country: gb
Re: Rigol MSO2000 series hacking
« Reply #155 on: August 28, 2014, 07:43:09 pm »
I used the NSEQ key for all options and 200MHz but you could use the NS8H key for 300MHz if you think it would be of benifit to you.
Unless you need 300MHz bandwith you are probably better off going with the 200MHz option.
 

Offline milek22

  • Contributor
  • Posts: 27
  • Country: pl
Re: Rigol MSO2000 series hacking
« Reply #156 on: August 28, 2014, 07:50:47 pm »
OK buddy. The keys have to enter in scope? Is the command line?
When I turn off the scope? Can I make a JTAG cable off of SCOPE?
I'm buddy helped, not know how you have to repay
 

Offline Macman

  • Regular Contributor
  • *
  • Posts: 77
  • Country: gb
Re: Rigol MSO2000 series hacking
« Reply #157 on: August 28, 2014, 08:01:58 pm »
You should now power down the scope, remove the JTAG cables, put the shielding back on the scope.
turn on the scope.
Press the Utility key.
Press the Down Arrow key.
Select Options.
Select Setup.
Select Editor ON.

Now you can enter the key.

Assuming the key is accepted, turn Off the scope and reassemble and enjoy your upgraded scope.
 

Offline milek22

  • Contributor
  • Posts: 27
  • Country: pl
Re: Rigol MSO2000 series hacking
« Reply #158 on: August 28, 2014, 08:19:15 pm »
I did exactly as you wrote. I already have a rich version. Thanks to you.
Thanks again and I cordially greet.
 :-+
 

Offline Macman

  • Regular Contributor
  • *
  • Posts: 77
  • Country: gb
Re: Rigol MSO2000 series hacking
« Reply #159 on: August 28, 2014, 08:27:54 pm »
At least we know the some of the Alera blaster clones work with windows as well as Linux.

Just out of interest, do you remember how long it tool to dump the file? I guessed it should have been 20 minutes. I got you to do a partial dump because that is all that should have been needed. When I did it I did a full dump that took about 3 hours.
 

Offline milek22

  • Contributor
  • Posts: 27
  • Country: pl
Re: Rigol MSO2000 series hacking
« Reply #160 on: August 28, 2014, 09:00:26 pm »


It took 15-20 min. Olimex ordered and here you are, Altera did. How to cool off a bit of a write post step by step how it was done. Of course, thanks to you.
 

Offline PepeK

  • Regular Contributor
  • *
  • Posts: 62
  • Country: sk
Re: Rigol MSO2000 series hacking
« Reply #161 on: August 28, 2014, 09:20:48 pm »

It took 15-20 min. Olimex ordered and here you are, Altera did. How to cool off a bit of a write post step by step how it was done. Of course, thanks to you.

Congratulations ! Which Altera blaster have you used ? It would be nice if you post here its photo + a photo of the PCB inside + a name of the eBay seller.
This will save another people's money, as the price difference between Olimex and Chinese clones is quite large.
 

Offline Macman

  • Regular Contributor
  • *
  • Posts: 77
  • Country: gb
Re: Rigol MSO2000 series hacking
« Reply #162 on: August 28, 2014, 09:36:15 pm »
@Pepek
Milek has already posted a picture of the internals on page 6 of this thread.
The link to the Altera blaster I used which looks the same as Milek's is http://www.ebay.com/itm/Mini-USB-Blaster-ALTERA-Cable-for-FPGA-CPLD-NIOS-JTAG-Altera-Programmer-/181379827152?ssPageName=ADME:L:OC:GB:3160
 

Offline Gandalf_Sr

  • Super Contributor
  • ***
  • Posts: 1729
  • Country: us
Re: Rigol MSO2000 series hacking
« Reply #163 on: August 30, 2014, 01:58:37 am »
OK guys.....

Eventually, I got to run the JTAG dump with the Olimex ARM-USB-OCD, here are a couple of pointers....

1.  When you run the Zadig utility, the drop down appears to be empty, you have to go into the menus and choose Options>List All Devices and the list will fill with the available items.
2.  After the dumps, I could not find my files, they were not in the .exe directory of bfin.  I went wandering through all the system directories and eventually found them in a SysWOW64 directory.

Now I ran rigup scan <filename> against them and I have the following...

RC5KEY1:        XXXXXXXXXXXXXXXXXXXXXXXXXXXXX
RC5KEY2:        XXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXTEAKEY:       XXXXXXXXXXXXXXXXXXXXXXXXXXXXX
PUBKEY:         xxxxxxxxxxxxxxxxxx
PRIVKEY:        XXXXXXXXXXXXX
SERIAL:         DS2FXXXXXXXXX

I think I'm there, how do I know which one is which?
If at first you don't succeed, get a bigger hammer
 

Offline Slappy_gTopic starter

  • Regular Contributor
  • *
  • Posts: 53
  • Country: us
Re: Rigol MSO2000 series hacking
« Reply #164 on: August 30, 2014, 02:05:19 am »
OK guys.....

Eventually, I got to run the JTAG dump with the Olimex ARM-USB-OCD, here are a couple of pointers....

1.  When you run the Zadig utility, the drop down appears to be empty, you have to go into the menus and choose Options>List All Devices and the list will fill with the available items.
2.  After the dumps, I could not find my files, they were not in the .exe directory of bfin.  I went wandering through all the system directories and eventually found them in a SysWOW64 directory.

Now I ran rigup scan <filename> against them and I have the following...

RC5KEY1:        XXXXXXXXXXXXXXXXXXXXXXXXXXXXX
RC5KEY2:        XXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXTEAKEY:       XXXXXXXXXXXXXXXXXXXXXXXXXXXXX
PUBKEY:         xxxxxxxxxxxxxxxxxx
PRIVKEY:        XXXXXXXXXXXXX
SERIAL:         DS2FXXXXXXXXX

I think I'm there, how do I know which one is which?

I thought I had specified to use the all devices option in my instructions. Hmm...

Also, you now need to run RIGUP DS2072A FILENAME.BIN

That will give you the keys for each option type. Note that I strongly recommend avoiding the 300 MHz option. Go for 200 + all options.

Sent from my SM-N900T using Tapatalk
Unlocked the Rigol MSO2072A to a MSO2302A via JTAG.  Read about how here: https://www.eevblog.com/forum/testgear/rigol-mso2000-series-hacking/msg498454/#msg498454
 

Offline Gandalf_Sr

  • Super Contributor
  • ***
  • Posts: 1729
  • Country: us
Re: Rigol MSO2000 series hacking
« Reply #165 on: August 30, 2014, 09:51:34 am »
 :-+ SUCCESS! :-DD

The key worked perfectly, the scope is back together, it reports all options +200 MHz.

One bit that was worrying me was that you enter DS2072A even though the scope is an MS2072A but you have to enter DS2072A

Thank you so much for everybody that helped, especially Slappy_g, MarcelM, Teneyes, and 0xPIT

What are the concerns you have over applying the 300 MHz option? If I wanted to try it, do I just enter that key or do I have to uninstall the one I just entered?
If at first you don't succeed, get a bigger hammer
 

Offline mscreations

  • Contributor
  • Posts: 21
  • Country: us
Re: Rigol MSO2000 series hacking
« Reply #166 on: August 30, 2014, 05:41:01 pm »
What are the concerns you have over applying the 300 MHz option? If I wanted to try it, do I just enter that key or do I have to uninstall the one I just entered?

Congratulations on the success!

As for skipping  the 300 MHz option, the mega thread had some posters that said they had issues with the 300MHz option (such as freezing and what not). That was the primary reason I skipped it.

The other reason is that some people have said that the scope still doesn't quite have enough "hardware" to keep up with that kind of signal.
 

Offline Slappy_gTopic starter

  • Regular Contributor
  • *
  • Posts: 53
  • Country: us
Re: Rigol MSO2000 series hacking
« Reply #167 on: August 30, 2014, 07:30:51 pm »
:-+ SUCCESS! :-DD

The key worked perfectly, the scope is back together, it reports all options +200 MHz.

One bit that was worrying me was that you enter DS2072A even though the scope is an MS2072A but you have to enter DS2072A

Thank you so much for everybody that helped, especially Slappy_g, MarcelM, Teneyes, and 0xPIT

What are the concerns you have over applying the 300 MHz option? If I wanted to try it, do I just enter that key or do I have to uninstall the one I just entered?

Glad you're up and running!

As to the 300 MHz, I follow the conservative 10x sampling rule. 2 GHz sampling rate means I don't want to go above 200 MHz for good signal reproduction.

Sent from my SM-N900T using Tapatalk

Unlocked the Rigol MSO2072A to a MSO2302A via JTAG.  Read about how here: https://www.eevblog.com/forum/testgear/rigol-mso2000-series-hacking/msg498454/#msg498454
 

Offline Bukurat

  • Regular Contributor
  • *
  • Posts: 65
  • Country: au
Re: Rigol MSO2000 series hacking
« Reply #168 on: September 01, 2014, 01:05:03 am »
:-+ SUCCESS! :-DD

The key worked perfectly, the scope is back together, it reports all options +200 MHz.

One bit that was worrying me was that you enter DS2072A even though the scope is an MS2072A but you have to enter DS2072A

Thank you so much for everybody that helped, especially Slappy_g, MarcelM, Teneyes, and 0xPIT

What are the concerns you have over applying the 300 MHz option? If I wanted to try it, do I just enter that key or do I have to uninstall the one I just entered?

Glad you're up and running!

As to the 300 MHz, I follow the conservative 10x sampling rule. 2 GHz sampling rate means I don't want to go above 200 MHz for good signal reproduction.

Sent from my SM-N900T using Tapatalk

Just thinking aloud, early in one of the many threads so this instrument it was suggested that the bandwidth restriction was due to a filter early in the signal path.  If the bandwidth is quoted at 3db points would it not be better to open up the bandwidth to max 300Mhz to get a better response at 200Mhz?

I don't have anything that gives me a reproducible accurate signal at 200Mhz. Perhaps someone with the the necessary equipment to hand could check.
 

Offline Slappy_gTopic starter

  • Regular Contributor
  • *
  • Posts: 53
  • Country: us
Re: Rigol MSO2000 series hacking
« Reply #169 on: September 01, 2014, 01:48:17 pm »
Just thinking aloud, early in one of the many threads so this instrument it was suggested that the bandwidth restriction was due to a filter early in the signal path.  If the bandwidth is quoted at 3db points would it not be better to open up the bandwidth to max 300Mhz to get a better response at 200Mhz?

I don't have anything that gives me a reproducible accurate signal at 200Mhz. Perhaps someone with the the necessary equipment to hand could check.

Yeah, it's worth investigating. My fear was of aliasing and other artifacts, due to the sampling rate being fixed.

There was part of me screaming "UNLOCK ALL OF THE THINGS!!!111one" but I held it in check. I don't really need that kind of bandwidth.
Unlocked the Rigol MSO2072A to a MSO2302A via JTAG.  Read about how here: https://www.eevblog.com/forum/testgear/rigol-mso2000-series-hacking/msg498454/#msg498454
 

Offline Gixy

  • Regular Contributor
  • *
  • Posts: 232
  • Country: fr
Re: Rigol MSO2000 series hacking
« Reply #170 on: September 01, 2014, 04:54:35 pm »
Let's assume a signal of 300MHz. At 2Gs/s, that gives a ratio of 6.67 samples per period and a theorical amplitude error of 1.1%. For 200MHz, the error is 0.5% (10 samples per period). Higher frequencies leading to artefacts are supposed to be filtered in the first stages. Nevertheless, application cases for this bandwith are not very common...
 

Offline Gandalf_Sr

  • Super Contributor
  • ***
  • Posts: 1729
  • Country: us
Re: Rigol MSO2000 series hacking
« Reply #171 on: September 02, 2014, 12:44:53 am »
I entered the 300 MHz option key today and it now shows the 200 and 300 MHz options separately at the bottom of the options list.  Not sure what I gain by having both?  The minimum horizontal timescale is now 1 nS and everything seems to work fine.

FYI, the probes that come with the MSO2072A are 10:1 but the option 'upgrade' reset the channels to X1.
« Last Edit: September 02, 2014, 01:54:08 pm by Gandalf_Sr »
If at first you don't succeed, get a bigger hammer
 

Offline AntiCat

  • Contributor
  • Posts: 12
Re: Rigol MSO2000 series hacking
« Reply #172 on: September 02, 2014, 09:24:26 pm »
I'm from Switzerland so it is an additional 130$ for shipping and 200$ for import taxes. This is approximately the same as the local distributor. At this price range I prefer to have a point of contact nearby. However your suggestion is very tempting..
I gave up on the Swiss distributor and ordered mine from drieg (forum user). I received a super friendly forthcoming service. His online shop mixes up the VAT so if you live in Europe and are considering to order drop him an email for a price quote without TAX.

I would like to hank Slappy_g and PepeK for the great guide. It made my life very easy  :-+

It looks like Rigol released a new Firmware last week. Did any one try it?

 

Offline Slappy_gTopic starter

  • Regular Contributor
  • *
  • Posts: 53
  • Country: us
Re: Rigol MSO2000 series hacking
« Reply #173 on: September 03, 2014, 01:08:43 am »
@AntiCat

Thanks and glad to hear it helped!

As to firmware, say what?! There's a new one out? Hmm....

Sent from my SM-N900T using Tapatalk

Unlocked the Rigol MSO2072A to a MSO2302A via JTAG.  Read about how here: https://www.eevblog.com/forum/testgear/rigol-mso2000-series-hacking/msg498454/#msg498454
 

Offline AntiCat

  • Contributor
  • Posts: 12
Re: Rigol MSO2000 series hacking
« Reply #174 on: September 03, 2014, 05:29:32 am »
@AntiCat
As to firmware, say what?! There's a new one out? Hmm....

I could be wrong.
http://beyondmeasure.rigoltech.com/acton/form/1579/0012:d-0001/1/index.htm?id=0012
Shows DS/MSO2000/A/-S: 00.03.01

Latest I saw on this Board was DS/MSO2000/A/-S: 00.03.00 SP1
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf