Products > Test Equipment

Sniffing the Rigol's internal I2C bus

<< < (784/899) > >>

pascal_sweden:
Okey I think that I get it. You can use the tool to issue SCPI commands to the scope in general.
This works for all Rigol scopes, including the DS1000Z and MSO1000Z series. However the SCPI command in particular which you need to hack the scope is the memory read SCPI command, and this command in particular is not implemented in the DS1000Z and MSO1000Z SCPI command set.

Still the tool is useful for the DS1000Z and MSO1000Z series, for other actions, like making a screen capture of the displayed waveform, etc.

d6diesel:
It seems Dave92F1 has provided a superb method while we all stand on the shoulders of giants (Peter, rigup).

Dave's method:

YET ANOTHER HACK SUMMARY

I had all options + 300 MHz on my DS2072A, then I upgraded to the latest firmware, and lost all the hacks. It took me some time to figure out how to get them back.

This is my summary (should work for a new out-of-the-box DS2072A as well):

1 - Download & unzip the latest "Rigol Bildschirmkopie LAN/USB" from http://peter.dreisiebner.at/rigol-bildschirmkopie-lan/

2 - Connect scope to LAN.

3 - Run the RigolBildschirmkopie.exe, click Device>Select>Search>Select.

4 - Do Device>SCPI-Command, then  Send & receive ":SYST:UTIL:READ? 1,33554432".
 
     Wait a long time (~5 to 10 min) for it to complete.
     
     Click Save, save it as "memoryDump.scpi" (save this file for future use!!)

5 - Download and unzip Rigup 0.4 (or later) from http://gotroot.ca/rigol/.

6 - Open a command window where you unzipped Rigup 0.4, copy memoryDump.scpi into the same folder.

7 - In the command window do: "rigup ds2072a memoryDump.scpi"

      This will produce an output something like:

rigup ds2072a - Version 0.4

Serial number: DSxxxxx

NSEH:  JPJQLFK-G3QNRLU-WFFFZMD-xxxxxxx    All options, no bandwidth upgrade
NSER:  8NXBL2U-JE2LZL7-9NEN5XK-xxxxxxx   All options, bandwidth 100 MHz
NSEQ:  R939MMG-NR63H25-9H993PX-xxxxxxx    All options, bandwidth 200 MHz
NS8H:  G2YRFYX-D589HNR-4K8YW3H-xxxxxxx    All options, bandwidth 300 MHz

8 - rigup scan MyKeys memoryDump.scpi

This will write your keys to the file "MyKeys".

9 - rigup license MyKeys NS8N

This produces an output something like:

5P89ZX7-LYMCTCS-P4PQ792-xxxxxxx   (NS8N = 0x1C0C3)

10 - Run RigolBildschirmkopie.exe again, click Device>Select>Search>Select (again).

11 - Click Device>SCPI-Command, then send & receive:
       :SYSTem:OPTion:INSTall <key to the right of NSEQ in step 7>

       The key (from step 7) MUST have the dashes removed.

       For example:
       :SYSTem:OPTion:INSTall R939MMGNR63H259H993PXxxxxxxx
       
At this point you should have all options + 200 MHz.

12 - Click Device>SCPI-Command, then send & receive:

       :SYSTem:OPTion:INSTall <key from step 9>

       Again, the key must have all dashes removed.

       For example:
       :SYSTem:OPTion:INSTall 5P89ZX7LYMCTCSP4PQ792xxxxxxx

That's it; you should have 300 MHz + all options now.

Maybe you can skip step 11 - I haven't tried it that way.

If you mess up, no problem. Just send ":SYSTem:OPTion:UNINSTall" and start over.


Only minor tweaks I can add are :
   Step 2 : Connect to lan  so the scope can obtain an IP address and be recognized on your ethernet.

   Step 4 : Do Device>SCPI-Command, then  Send & receive
                 ":SYST:UTIL:READ? 1,33554432".   Remove the first colon  so that it now  reads
                  Do Device>SCPI-Command, then  Send & receive
                  "SYST:UTIL:READ? 1,33554432".  Make sure there is a space after the question
                      mark.
   Step 6 : After the command window is  open use  DOS commands "CD" to  change the directory until you are in the correct one.

   Step 11 : Do this step  just  as he  notes.  He  suggests an  option to leave it out, but others did not get a complete install unless they did step 11 and then step 12.


Minor tweaks really from this newbie.  Can't say enough about the knowledge brought together at the eevblog.  As Dave Jones would say : AWESOME !!
     

Ivan:
Hello.
1) I have a problem with MSO1104Z.
2) I updated the program to 4.3 from the site.
3) I downloaded memory with 0x40000000 to 0x43ffffff
4) I downloaded rigup-0.4.1-mso1000z.zip archive from the site http://gotroot .ca/rigol/
and make all near Ubunta.
5) rigup scan gave out RC5KEY1 etc. SERIAL - coincided with my number.
6) rigup license gave out with 0x1C001 and 0x1C010 and 0x1C0FF keys and any doesn't approach.

It isn't sure, but during copying of jtag the oscilloscope blocked input of the password for 12 hours.

There can be in it a reason of failure and it is necessary to copy memory anew?

Memory 3 hours by means of ULINK were copied.

Please help to generate keys. The packed dump of memory is only 5 Mb.

BloodyCactus:

--- Quote from: miguelvp on May 29, 2015, 03:51:13 pm ---
--- Quote from: PeDre on May 29, 2015, 03:14:24 pm ---
--- Quote from: pascal_sweden on May 29, 2015, 01:27:43 pm ---Would be nice to really get this confirmed? I really hope SCPI works on both DS1000Z and MSO1000Z series.

--- End quote ---

Here are the SCPI commands of the firmware 00.04.02.SP4 (DS1074Z-S). I have not found any commands for reading the memory.

Peter

--- End quote ---

Strange no one looks for the programming manual:

http://www.batronix.com/pdf/Rigol/ProgrammingGuide/MSO1000Z_DS1000Z_ProgrammingGuide_EN.pdf

You are looking for WAVeform:DATA? (lowercase optional WAV:DATA? will work as well)
but you need to set things up first

--- End quote ---

thats because were not talking about SCPI commands to get waveform data, but the commands to read the system memory and basically do a raw dump of its internals.

Ivan:

--- Quote from: BloodyCactus on June 01, 2015, 07:39:32 pm ---
thats because were not talking about SCPI commands to get waveform data, but the commands to read the system memory and basically do a raw dump of its internals.

--- End quote ---

100% - not work. MS1104z isn't present the response on: SYST:UTIL:READ?



But I found out that it is possible to prolong a trial till 62 o'clock for all options rigup license 0x9C001 ... 0x9C004  as 0x1C001 doesn't work for me.

Navigation

[0] Message Index

[#] Next page

[*] Previous page

There was an error while thanking
Thanking...
Go to full version
Powered by SMFPacks Advanced Attachments Uploader Mod