Products > Test Equipment

Sniffing the Rigol's internal I2C bus

<< < (511/899) > >>

MrKrabs:
Hey cybernet,

I was reverse engineering your reverse engineering :), trying to port your DS4000 firmware hack which is version 00.02.00.00.04 to the latest version 00.02.01.00.03.

I was able to find the 2 magic bytes to modify (0x4899 into 0x2060) in the new firmware and then recalculated the CRC for section 00.

Then I updated the firmware on my DS4014 with my patched firmware. The update worked fine (I know because I had a 00.01.xx firmware), BUT it didn't enable the BW options neither gave me 1ns TB option.

I then went back to your 00.02.00.00.04 firmware and confirmed it enabled the BW options & 1ns TB, so I know it works on my DS4K.

Do you have any idea what the deal is with the latest DS4K firmware? I found the 0x4899 byte at 0x128a3c. It at least matched the nearby bytes almost perfectly when comparing with your firmware.

There's a big chance, of course, I was just changing the wrong bytes :)

Here's a diff of the hexdumps:


--- Code: ---$ diff DS4000Update.00.02.01.00.03.orig.GEL.hex DS4000Update.00.02.01.00.03.modified.GEL.hex
4c4
< 00000030  32 62 77 f0 00 00 00 00  00 00 04 20 01 00 00 00  |2bw........ ....|
---
> 00000030  5d 10 2a 87 00 00 00 00  00 00 04 20 01 00 00 00  |].*........ ....|
75940c75940
< 00128a30  00 e8 00 00 09 e1 2d 0d  49 e1 e7 00 48 99 01 e8  |......-.I...H...|
---
> 00128a30  00 e8 00 00 09 e1 2d 0d  49 e1 e7 00 20 60 01 e8  |......-.I... `..|

--- End code ---

Cheers!

AndersAnd:

--- Quote from: Marc M. on January 16, 2014, 08:39:16 am --- Note: This utility only works with firmware version 00.01.01.00.02.  If you need a copy of this firmware version, see Marmad's post (Reply #2) in this thread: https://www.eevblog.com/forum/testgear/first-impressions-and-review-of-the-rigol-ds2072-ds2000-series-dso/
--- End quote ---
Nice work.

The same FW 00.01.01.00.02 can also be downloaded here: http://rigol.avotronics.co.uk/ds2000-series/



--- Quote from: andyturk on January 12, 2014, 04:09:05 am ---
--- Quote from: marmad on January 11, 2014, 04:53:57 pm ---Nice summary. andyturk (the OP) should copy and paste a link to this post in the first post of the thread.

--- End quote ---
Good idea. Done.
--- End quote ---
@andyturk (the OP) maybe you should also add a link to Marc M's SNMODFIX utility in the OP too, to make it easier to find.

Altemir:
MrKrabs
BW options on DS4000?  :wtf: Can you upload screenshots of this options and photo of your DSO? You has got 500MHz on 100MHz DS4014???  :o

marmad:

--- Quote from: Altemir on January 16, 2014, 01:22:36 pm ---MrKrabs
BW options on DS4000?  :wtf: Can you upload screenshots of this options and photo of your DSO? You has got 500MHz on 100MHz DS4014???  :o

--- End quote ---

It's not actually an "option" - but yes, changing the model number internally on a DS4000 (and all - at least for the initial HW versions - of the other Rigol products in the DS/DG families) changes the bandwidth and/or enabled options. cybernet made a modified FW GEL file for the DS4000 (using FW v.02.00.00.04) which, when loaded, changes the model number - and thus the bandwidth.

Altemir:

--- Quote from: marmad on January 16, 2014, 01:33:16 pm ---It's not actually an "option" - but yes, changing the model number internally on a DS4000 (and all - at least for the initial HW releases - of the other Rigol products in the DS/DG families) changes the bandwidth and/or enabled options. cybernet made a modified FW GEL file for the DS4000 (using FW v.02.00.00.04) which, when loaded, changes the model number - and thus the bandwidth.

--- End quote ---
If I had a custom firmware for the MSO4024, I would be able to measure the frequency response of up to 2GHz.

Navigation

[0] Message Index

[#] Next page

[*] Previous page

There was an error while thanking
Thanking...
Go to full version
Powered by SMFPacks Advanced Attachments Uploader Mod