Author Topic: Siglent .ads firmware file format  (Read 53639 times)

0 Members and 1 Guest are viewing this topic.

Online tv84

  • Frequent Contributor
  • **
  • Posts: 602
  • Country: pt
Re: Siglent .ads firmware file format
« Reply #300 on: March 02, 2019, 06:34:45 am »
Yes, the first one is not 0x1400. And remember you have the incrementing pattern also.
 

Offline janekivi

  • Frequent Contributor
  • **
  • Posts: 358
  • Country: ee
Re: Siglent .ads firmware file format
« Reply #301 on: March 03, 2019, 10:17:36 am »
Thanks for that!
So far I found more of them after the one I show there with red...
 

Offline janekivi

  • Frequent Contributor
  • **
  • Posts: 358
  • Country: ee
Re: Siglent .ads firmware file format
« Reply #302 on: March 03, 2019, 08:53:49 pm »
Previous format was toooo simple and this equipment has bit more powerful
cpu to read complicated update files. So they totally shred the file at this time.
So far I found five ascending FF patterns. One starts from beginning but doesn't
affect those first two shorter parts. XOR FF is switched on at 0x1400 parts.
First was the every second 0x1400 is fully XOR-ed with FF (first pair was shorter)
and other from the pairs has rising XOR FF pattern from beginning.
Then I jumped bit forward and found XOR FF pattern which is starting at some
point and starts his steps from 100 bytes and counting up by 1. I don't know other
parameters jet. And one XOR FF is stepping forward by 4 bytes, like 262-266-270-...
I see there at least one crypted part.
So, there are (too)many XOR FF patterns and crypted regions.

I was talking about this zip file what you get after opening ads with usual way-
decrypt, reverse, XOR FF. All this process is done after that with output ZIP file.
So there is not possible simply extract something. Just scrolling down with Notepad
after some of pattern elimination I found this intact PNG image.
 

Offline janekivi

  • Frequent Contributor
  • **
  • Posts: 358
  • Country: ee
Re: Siglent .ads firmware file format
« Reply #303 on: March 03, 2019, 11:02:03 pm »
Afterwards we know...
Packed data part of that png file is unpacking with 7zip without errors.
I need to use .ZIP to upload it here.
We need to get data straight and app out.
 

Online tinhead

  • Super Contributor
  • ***
  • Posts: 1859
  • Country: 00
    • If you like my hacks, send me a donation
Re: Siglent .ads firmware file format
« Reply #304 on: March 04, 2019, 01:54:03 am »
did someone of you guys got already app and bitstream from SDS2000X-E? I wish i could get it as well ...
I don't want to be human! I want to see gamma rays, I want to hear X-rays, and I want to smell dark matter ...
I want to reach out with something other than these prehensile paws and feel the solar wind of a supernova flowing over me.
 

Online tv84

  • Frequent Contributor
  • **
  • Posts: 602
  • Country: pt
Re: Siglent .ads firmware file format
« Reply #305 on: March 04, 2019, 02:21:02 am »
did someone of you guys got already app and bitstream from SDS2000X-E? I wish i could get it as well ...

Nope. When you get it, tell us.
 

Offline janekivi

  • Frequent Contributor
  • **
  • Posts: 358
  • Country: ee
Re: Siglent .ads firmware file format
« Reply #306 on: March 04, 2019, 03:38:46 am »
Name of the app: sds2000hsr
That file we don't extract in the near future...
 

Online tv84

  • Frequent Contributor
  • **
  • Posts: 602
  • Country: pt
Re: Siglent .ads firmware file format
« Reply #307 on: March 05, 2019, 07:06:07 am »
After all, it was no rocket science...

Name of the app: sds2000hsr

Attached is the list of the ZIP contents  (.GEL)
 

Offline janekivi

  • Frequent Contributor
  • **
  • Posts: 358
  • Country: ee
Re: Siglent .ads firmware file format
« Reply #308 on: March 05, 2019, 08:53:50 am »
Ok, that was quick.
They have shuffled those XOR-ed and pattern parts there.
I was starting from wrong address and then missed right
addresses creating more wrong of them by myself.
 

Online tv84

  • Frequent Contributor
  • **
  • Posts: 602
  • Country: pt
Re: Siglent .ads firmware file format
« Reply #309 on: March 05, 2019, 11:53:47 pm »
Regarding the checksum, all bets are on!

Code: [Select]
File Header Size: 00000070
00000000 - File Checksum: 001C9FBC [00000004-0264BFAE] (with only the File Header decrypted)  CKSM NOT OK
00000004 - File Size: 0264BF3F (without 0x70 bytes of the File Header)
0000000C - Product_ID: 14000
00000026 - Vendor/Brand: 0.8.0R1B5
0000003A - USB Host Controller: SIGLENT
00000048 - Version: 0.8.0R1B5
****************************************************
 

Offline janekivi

  • Frequent Contributor
  • **
  • Posts: 358
  • Country: ee
Re: Siglent .ads firmware file format
« Reply #310 on: March 06, 2019, 07:24:55 am »
Header checksum is calculated differently.
Previous one depends from data length. Short data has bigger checksum
and larger data has smaller. Like 277 byte text file has FF FF B9 BA and
40 Mb file CE C2 02 7B, 50 Mb 77 1D AD 8B...
So, to get 00 1C 9F BC ?
 

Offline n3mmr

  • Contributor
  • Posts: 33
  • Country: se
Re: Siglent .ads firmware file format
« Reply #311 on: March 07, 2019, 03:45:01 am »
Replacing the shadow file wasn't very hard to do so let's test this method

SDS1004X-E_OSV1_EN_eevblog.zip

That file was on some free server, and is gone.

Is the same file available elsewhere???

Or is there a substitute that might be better to use??
 

Online ebastler

  • Super Contributor
  • ***
  • Posts: 2657
  • Country: de
Re: Siglent .ads firmware file format
« Reply #312 on: April 14, 2019, 02:58:09 am »
How to open a telnet session in a Siglent when the root password is unknown?

Use the following scripts, according to each equipment.
They provide a root session via port 10101.

Sorry to come back to this old post. (And thank you for posting, tv84!) I am obviously to stupid for this...

I copied the SDG2000X.ADS from the above post to a USB stick, inserted into my SDG2042X, activated the LAN interface and DHCP.  But:

  • Port 10101, as indicated by tv84, does not work. Port is not open, "connection refused".
  • I can get a telnet prompt via the standard port 23, and it comes up with "SIGLENT SDG project". I believe that's different from the standard prompt, so the ADS script seems to have been activated? But I can't log in; the root/eevblog credentials do not work.
Where did I get this wrong?
Thanks for your help!


EDIT:

Duh, figured it out... The .ADS file is not loaded automatically upon insertion of the USB stick, or upon booting the SDG with an inserted stick. One has to explicitly trigger a "firmware update" via the system menu. The SDG will state that the update failed, but subsequently it does have port 10101 enabled. No credentials required for a telnet session on that port.

I fooled myself be believing that the "SGD project" headline had appeared only after I inserted the USB stick, but apparently that's bog standard...  I'll keep my post here anyway, in case someone else falls into the same trap and starts Googling for help...
« Last Edit: April 14, 2019, 03:13:08 am by ebastler »
 

Online tv84

  • Frequent Contributor
  • **
  • Posts: 602
  • Country: pt
Re: Siglent .ads firmware file format
« Reply #313 on: April 14, 2019, 04:46:28 am »
Duh, figured it out... The .ADS file is not loaded automatically upon insertion of the USB stick, or upon booting the SDG with an inserted stick. One has to explicitly trigger a "firmware update" via the system menu. The SDG will state that the update failed, but subsequently it does have port 10101 enabled. No credentials required for a telnet session on that port.

 :) How did you figure it out?  (That is the most educational part that you can leave here... )

 

Online ebastler

  • Super Contributor
  • ***
  • Posts: 2657
  • Country: de
Re: Siglent .ads firmware file format
« Reply #314 on: April 14, 2019, 04:54:48 am »
:) How did you figure it out?  (That is the most educational part that you can leave here... )

I started to doubt my recollection that the "Siglent SDG project" headline had only shown up after I had inserted the USB stick. (I had tried a "plain" Telnet session before, but had not taken screenshots or notes.) So I doubted whether I could really be sure that your modification was actually activated.

And then, shame on me, I actually read the manual (on how to perform a firmware upgrade)...  ;)
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2989
  • Country: fi
  • Starting with DLL21
Re: Siglent .ads firmware file format
« Reply #315 on: April 16, 2019, 02:55:42 pm »
Replacing the shadow file wasn't very hard to do so let's test this method

SDS1004X-E_OSV1_EN_eevblog.zip

That file was on some free server, and is gone.

Is the same file available elsewhere???

Or is there a substitute that might be better to use??

Perhaps here.
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Offline ShaneEEV

  • Contributor
  • Posts: 12
  • Country: us
Re: Siglent .ads firmware file format
« Reply #316 on: April 27, 2019, 10:51:55 am »
I have been attempting to gain login access to my new SDG2041X ARB waveform generator for a couple of days.

I have succeeded with:

1) Downgrading firmware to 23R3
2) Installing the telnet code
3) The telnet banner says "
===============================================
|SIGLENT SDG project                   
==============================================="

I have not succeeded in loging-in to the SDG, however.

I have tried every combination of root and the login password I can think of, including the one shown above the "root / #######" entry, above.

I have read the admonishments to cut 'n paste the login and <password> and have tried that, as well, to no avail.  :scared:  :phew:  :-//

I'm usually not this clueless (Just a few days ago, I updated my new SDS1004X-S to full glory, so I can follow well-stated directions.
I realize you don't want to make this too easy, but I evidently haven't stumbled on the "secret sauce" on my own.

Any help is greatly appreciated (perhaps someone could PM me with the obvious?

Thank you, in advance!

Shane
 

Offline ShaneEEV

  • Contributor
  • Posts: 12
  • Country: us
Re: Siglent .ads firmware file format
« Reply #317 on: April 27, 2019, 12:17:53 pm »
O.K. - Got it figured out

1) Insert USB Stick into front panel USB socket
2) Put SDG into System / Info / Upgrade
3) Select telnet file for SDG2042X and UPDATE
4) LEAVE POWER ON SDG
5) On remote computer console, type: telnet <SDG IP address> <SPACE> 10101 <RETURN>
6) On remote computer console, type: mount -o remount,rw ubi2_0 <SPACE> /usr/bin/siglent/firmdata0
7) On remote computer console, type: cp /usr/bin/siglent/firmdata0/NSP_system_info.xml /usr/bin/siglent/firmdata0/NSP_system_info.xml.orig
8) On remote computer console, type: vi /usr/bin/siglent/firmdata0/NSP_system_info.xml
9) On remote computer console, move down to the line that starts with <license> and press 'i' for INSERT and right arrow over to just after </license> and press the delete button until the line only has </system_information>
10) On remoter computer console, press the ESC key, then type::wq <RETURN>
11) On remote computer console, type: sync
12) on SDG: remove USB stick
13) on SDG: turn power OFF

When you power back on, the status menu indicates the model number is now SDG2122X. You should see your serial number there, as well.

Thank you to JDubU and CustomEngineerer for your kind corrections!

« Last Edit: April 28, 2019, 01:04:12 am by ShaneEEV »
 

Online JDubU

  • Regular Contributor
  • *
  • Posts: 210
Re: Siglent .ads firmware file format
« Reply #318 on: April 27, 2019, 12:45:42 pm »
 
The following users thanked this post: CustomEngineerer

Offline CustomEngineerer

  • Frequent Contributor
  • **
  • Posts: 457
  • Country: us
Re: Siglent .ads firmware file format
« Reply #319 on: April 27, 2019, 12:49:33 pm »
9) On remote computer console, press the down arrow until the cursor in the vi window is on the line that starts with <license><bandwidth...  and press dd (that means press 'd' twice) You will see the line has disappeared.
(the serial number has been replaced with "1234567890", however.
Perhaps someone else knows how to replace the serial number?

If you want to keep your serial number, don't delete the whole line like it says in step 9. Just delete the <license>...</license> tags (and everything between). The </system_information> closing tag at the end of the line needs to be left as the only thing on that line when you are done.
 

Offline CustomEngineerer

  • Frequent Contributor
  • **
  • Posts: 457
  • Country: us
Re: Siglent .ads firmware file format
« Reply #320 on: April 27, 2019, 12:50:40 pm »
Thanks JDubU. Was looking for that post but couldn't find it.
 

Offline ShaneEEV

  • Contributor
  • Posts: 12
  • Country: us
Re: Siglent .ads firmware file format
« Reply #321 on: April 27, 2019, 01:53:00 pm »
Thanks to JDubU and CustomEngineerer!

I'll get into my SDG and make that change.

Cheers!
Shane

O.K. - I took the SN info out of the .orig file and inserted it over the 0123456789 in the <chip> <\chip> area and all is well. firmware back to 23R8 and all is right with the world!

Thanks again, JDubU and CustomEngineerer!
« Last Edit: April 28, 2019, 12:53:26 am by ShaneEEV »
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2989
  • Country: fi
  • Starting with DLL21
Re: Siglent .ads firmware file format
« Reply #322 on: April 27, 2019, 06:33:30 pm »
O.K. - Got it figured out

1) Insert USB Stick into front panel USB socket
2) Put SDG into System / Info / Upgrade
3) Select telnet file for SDG2042X and UPDATE
4) LEAVE POWER ON SDG
5) On remote computer console, type: telnet <SDG IP address> <SPACE> 10101 <RETURN>
6) On remote computer console, type: mount -o remount,rw ubi2_0 <SPACE> /usr/bin/siglent/firmdata0
7) On remote computer console, type: cp /usr/bin/siglent/firmdata0/NSP_system_info.xml /usr/bin/siglent/firmdata0/NSP_system_info.xml.orig
8.) On remote computer console, type: vi /usr/bin/siglent/firmdata0/NSP_system_info.xml
ERR: 9) On remote computer console, press the down arrow until the cursor in the vi window is on the line that starts with <license><bandwidth...  and press dd (that means press 'd' twice) You will see the line has disappeared.
10) On remote computer console, type: :wq <RETURN>
11) On remote computer console, type: sync
12) on SDG: remove USB stick
13) on SDG: turn power OFF

When you power back on, the status menu indicates the model number is now SDG2122X. (the serial number has been replaced with "1234567890", however.

Perhaps someone else knows how to replace the serial number?

Of course it do this, look what you have deleted using vi, walking like elephant in porcelain store.

As explained by @CustomEngineerer
Please repair this erroneous red marked step 9 for avoid some noobs confusion when they follow things without further thinking and/or with total lack of knowledge or experience.


With SDG2000X basic principles are roughly same as with SDG1000X. (some differences in details.) This is for SDG1000X only.  (.zip file what include all needed info for SDG1000X and not only for BW alone)

« Last Edit: April 27, 2019, 09:34:18 pm by rf-loop »
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf