Products > Test Equipment
Sniffing the Rigol's internal I2C bus
MrKrabs:
Hey cybernet,
I was reverse engineering your reverse engineering :), trying to port your DS4000 firmware hack which is version 00.02.00.00.04 to the latest version 00.02.01.00.03.
I was able to find the 2 magic bytes to modify (0x4899 into 0x2060) in the new firmware and then recalculated the CRC for section 00.
Then I updated the firmware on my DS4014 with my patched firmware. The update worked fine (I know because I had a 00.01.xx firmware), BUT it didn't enable the BW options neither gave me 1ns TB option.
I then went back to your 00.02.00.00.04 firmware and confirmed it enabled the BW options & 1ns TB, so I know it works on my DS4K.
Do you have any idea what the deal is with the latest DS4K firmware? I found the 0x4899 byte at 0x128a3c. It at least matched the nearby bytes almost perfectly when comparing with your firmware.
There's a big chance, of course, I was just changing the wrong bytes :)
Here's a diff of the hexdumps:
--- Code: ---$ diff DS4000Update.00.02.01.00.03.orig.GEL.hex DS4000Update.00.02.01.00.03.modified.GEL.hex
4c4
< 00000030 32 62 77 f0 00 00 00 00 00 00 04 20 01 00 00 00 |2bw........ ....|
---
> 00000030 5d 10 2a 87 00 00 00 00 00 00 04 20 01 00 00 00 |].*........ ....|
75940c75940
< 00128a30 00 e8 00 00 09 e1 2d 0d 49 e1 e7 00 48 99 01 e8 |......-.I...H...|
---
> 00128a30 00 e8 00 00 09 e1 2d 0d 49 e1 e7 00 20 60 01 e8 |......-.I... `..|
--- End code ---
Cheers!
AndersAnd:
--- Quote from: Marc M. on January 16, 2014, 08:39:16 am --- Note: This utility only works with firmware version 00.01.01.00.02. If you need a copy of this firmware version, see Marmad's post (Reply #2) in this thread: https://www.eevblog.com/forum/testgear/first-impressions-and-review-of-the-rigol-ds2072-ds2000-series-dso/
--- End quote ---
Nice work.
The same FW 00.01.01.00.02 can also be downloaded here: http://rigol.avotronics.co.uk/ds2000-series/
--- Quote from: andyturk on January 12, 2014, 04:09:05 am ---
--- Quote from: marmad on January 11, 2014, 04:53:57 pm ---Nice summary. andyturk (the OP) should copy and paste a link to this post in the first post of the thread.
--- End quote ---
Good idea. Done.
--- End quote ---
@andyturk (the OP) maybe you should also add a link to Marc M's SNMODFIX utility in the OP too, to make it easier to find.
Altemir:
MrKrabs
BW options on DS4000? :wtf: Can you upload screenshots of this options and photo of your DSO? You has got 500MHz on 100MHz DS4014??? :o
marmad:
--- Quote from: Altemir on January 16, 2014, 01:22:36 pm ---MrKrabs
BW options on DS4000? :wtf: Can you upload screenshots of this options and photo of your DSO? You has got 500MHz on 100MHz DS4014??? :o
--- End quote ---
It's not actually an "option" - but yes, changing the model number internally on a DS4000 (and all - at least for the initial HW versions - of the other Rigol products in the DS/DG families) changes the bandwidth and/or enabled options. cybernet made a modified FW GEL file for the DS4000 (using FW v.02.00.00.04) which, when loaded, changes the model number - and thus the bandwidth.
Altemir:
--- Quote from: marmad on January 16, 2014, 01:33:16 pm ---It's not actually an "option" - but yes, changing the model number internally on a DS4000 (and all - at least for the initial HW releases - of the other Rigol products in the DS/DG families) changes the bandwidth and/or enabled options. cybernet made a modified FW GEL file for the DS4000 (using FW v.02.00.00.04) which, when loaded, changes the model number - and thus the bandwidth.
--- End quote ---
If I had a custom firmware for the MSO4024, I would be able to measure the frequency response of up to 2GHz.
Navigation
[0] Message Index
[#] Next page
[*] Previous page
Go to full version