Products > Test Equipment
Sniffing the Rigol's internal I2C bus
<< < (511/899) > >>
MrKrabs:
Hey cybernet,

I was reverse engineering your reverse engineering :), trying to port your DS4000 firmware hack which is version 00.02.00.00.04 to the latest version 00.02.01.00.03.

I was able to find the 2 magic bytes to modify (0x4899 into 0x2060) in the new firmware and then recalculated the CRC for section 00.

Then I updated the firmware on my DS4014 with my patched firmware. The update worked fine (I know because I had a 00.01.xx firmware), BUT it didn't enable the BW options neither gave me 1ns TB option.

I then went back to your 00.02.00.00.04 firmware and confirmed it enabled the BW options & 1ns TB, so I know it works on my DS4K.

Do you have any idea what the deal is with the latest DS4K firmware? I found the 0x4899 byte at 0x128a3c. It at least matched the nearby bytes almost perfectly when comparing with your firmware.

There's a big chance, of course, I was just changing the wrong bytes :)

Here's a diff of the hexdumps:


--- Code: ---$ diff DS4000Update.00.02.01.00.03.orig.GEL.hex DS4000Update.00.02.01.00.03.modified.GEL.hex
4c4
< 00000030  32 62 77 f0 00 00 00 00  00 00 04 20 01 00 00 00  |2bw........ ....|
---
> 00000030  5d 10 2a 87 00 00 00 00  00 00 04 20 01 00 00 00  |].*........ ....|
75940c75940
< 00128a30  00 e8 00 00 09 e1 2d 0d  49 e1 e7 00 48 99 01 e8  |......-.I...H...|
---
> 00128a30  00 e8 00 00 09 e1 2d 0d  49 e1 e7 00 20 60 01 e8  |......-.I... `..|

--- End code ---

Cheers!
AndersAnd:

--- Quote from: Marc M. on January 16, 2014, 08:39:16 am --- Note: This utility only works with firmware version 00.01.01.00.02.  If you need a copy of this firmware version, see Marmad's post (Reply #2) in this thread: https://www.eevblog.com/forum/testgear/first-impressions-and-review-of-the-rigol-ds2072-ds2000-series-dso/
--- End quote ---
Nice work.

The same FW 00.01.01.00.02 can also be downloaded here: http://rigol.avotronics.co.uk/ds2000-series/



--- Quote from: andyturk on January 12, 2014, 04:09:05 am ---
--- Quote from: marmad on January 11, 2014, 04:53:57 pm ---Nice summary. andyturk (the OP) should copy and paste a link to this post in the first post of the thread.

--- End quote ---
Good idea. Done.
--- End quote ---
@andyturk (the OP) maybe you should also add a link to Marc M's SNMODFIX utility in the OP too, to make it easier to find.
Altemir:
MrKrabs
BW options on DS4000?  :wtf: Can you upload screenshots of this options and photo of your DSO? You has got 500MHz on 100MHz DS4014???  :o
marmad:

--- Quote from: Altemir on January 16, 2014, 01:22:36 pm ---MrKrabs
BW options on DS4000?  :wtf: Can you upload screenshots of this options and photo of your DSO? You has got 500MHz on 100MHz DS4014???  :o

--- End quote ---

It's not actually an "option" - but yes, changing the model number internally on a DS4000 (and all - at least for the initial HW versions - of the other Rigol products in the DS/DG families) changes the bandwidth and/or enabled options. cybernet made a modified FW GEL file for the DS4000 (using FW v.02.00.00.04) which, when loaded, changes the model number - and thus the bandwidth.
Altemir:

--- Quote from: marmad on January 16, 2014, 01:33:16 pm ---It's not actually an "option" - but yes, changing the model number internally on a DS4000 (and all - at least for the initial HW releases - of the other Rigol products in the DS/DG families) changes the bandwidth and/or enabled options. cybernet made a modified FW GEL file for the DS4000 (using FW v.02.00.00.04) which, when loaded, changes the model number - and thus the bandwidth.

--- End quote ---
If I had a custom firmware for the MSO4024, I would be able to measure the frequency response of up to 2GHz.
Navigation
Message Index
Next page
Previous page
There was an error while thanking
Thanking...

Go to full version
Powered by SMFPacks Advanced Attachments Uploader Mod