Products > Test Equipment
Sniffing the Rigol's internal I2C bus
Teneyes:
--- Quote from: Teneyes on November 27, 2013, 06:16:14 am ---@Cybernet Great Work, 2 cases of Radler for you! :-+ :-+
Could the CAN decoding feature be in the GEL also??
--- End quote ---
Yes He CAN!!!
Fricking Amazing Cybernet Great Work,
3 more cases of Radler for you! :-+ :-+
Of coarse, Rigol will be offering Cybernet a contract to Encrypt the next Firmware
Marchello:
Now i have DS2302! (in his youth he was a DS2072)
Thanks Cybernet!
cybernet:
--- Quote from: Teneyes on December 10, 2013, 09:26:20 am ---
--- Quote from: Teneyes on November 27, 2013, 06:16:14 am ---@Cybernet Great Work, 2 cases of Radler for you! :-+ :-+
Could the CAN decoding feature be in the GEL also??
--- End quote ---
Yes He CAN!!!
Fricking Amazing Cybernet Great Work,
3 more cases of Radler for you! :-+ :-+
Of coarse, Rigol will be offering Cybernet a contract to Encrypt the next Firmware
--- End quote ---
that goes to zombie28 because he noticed the obsfuscation of keys - the rest was just stupid function name mapping from one version to another and following the trails to the option codes.
i already saw the difference between ds2000a and ds2000 - same keys are used, but the inital epoint_set functionn uses (x,x,0,g) instead of (x,y,0,g) as arguments - doesnt make a difference in the rikey.c,
so im not sure whats going on (my math skills again ... :palm:) - jtag dump from a ds2000a would be useful.
A Hellene:
Kudos, people!
This is what team-work can do!
These are the benefits of the 'us' mentality versus the 'I' mentality!
Kudos to every individual who has been involved in this project!
Also, shame to every one of them for temping me to throw some more cash in to that market (which is killing our market)! :P
Let me throw my two cents in, by treating the thread with some food for thought:
There is an Actel ProASIC3 FPGA on board, hardwired to a twenty-slot ten-resistors network. This resistor network probably constitutes some kind of a revision number word, with each resistor pulling up or down a certain data line if the data word is ten-bits long, or leaving that line tri-stated also if the data word is twenty-bits long. This data word is --most probably-- read by the aforementioned FPGA and reported to the main processor.
This might not be easily spotted in the firmware disassembly listings because that data word is not read by the processor's I/O ports directly, but by the FPGA I/Os and reported via some (DMA, most likely) channel data burst, since the specific FPGA in question seems to be some kind of external memory manger accessing the Spansion FLASH boot and data storage memory chip.
Though I have not yet seen what's inside the DS2000 firmware (nor do I own a DS2000 unit in order to investigate it any further) I would consider the possibility of the FW actively reading that hardware jumpers revision word existing on the PCB in order to decide whether it should enable certain functions (like the 50 Ohm one, for example) or not.
If this is true, it could make it possible for the end user to be reverting their hardware on demand between the various revisions (i.e. non-A/A/AS or whatever) by just modifying the PCB revision number word jumpers (by adding in or by removing the jumper-resisrors that correspond to the data word bits).
-George
cosmos:
--- Quote from: A Hellene on December 10, 2013, 11:36:09 am ---
There is an Actel ProASIC3 FPGA on board, hard wired to a twenty-slot ten-resistors network. This resistor network probably constitutes some kind of a revision number word, with each resistor pulling up or down a certain data line if the data word is ten-bits long, or leaving that line tri-stated also if the data word is twenty-bits long. This data word is --most probably-- read by the aforementioned FPGA and reported to the main processor.
--- End quote ---
In the ds4k these straps are marked, and they correspond to the reported extended revision number.
Changing the straps had no immediate effect on the BW in a ds4k.
It appears that the proASIC is the same or nearly the same s in the ds2k.
Navigation
[0] Message Index
[#] Next page
[*] Previous page
Go to full version