Products > Test Equipment
Sniffing the Rigol's internal I2C bus
pascal_sweden:
Okey I think that I get it. You can use the tool to issue SCPI commands to the scope in general.
This works for all Rigol scopes, including the DS1000Z and MSO1000Z series. However the SCPI command in particular which you need to hack the scope is the memory read SCPI command, and this command in particular is not implemented in the DS1000Z and MSO1000Z SCPI command set.
Still the tool is useful for the DS1000Z and MSO1000Z series, for other actions, like making a screen capture of the displayed waveform, etc.
d6diesel:
It seems Dave92F1 has provided a superb method while we all stand on the shoulders of giants (Peter, rigup).
Dave's method:
YET ANOTHER HACK SUMMARY
I had all options + 300 MHz on my DS2072A, then I upgraded to the latest firmware, and lost all the hacks. It took me some time to figure out how to get them back.
This is my summary (should work for a new out-of-the-box DS2072A as well):
1 - Download & unzip the latest "Rigol Bildschirmkopie LAN/USB" from http://peter.dreisiebner.at/rigol-bildschirmkopie-lan/
2 - Connect scope to LAN.
3 - Run the RigolBildschirmkopie.exe, click Device>Select>Search>Select.
4 - Do Device>SCPI-Command, then Send & receive ":SYST:UTIL:READ? 1,33554432".
Wait a long time (~5 to 10 min) for it to complete.
Click Save, save it as "memoryDump.scpi" (save this file for future use!!)
5 - Download and unzip Rigup 0.4 (or later) from http://gotroot.ca/rigol/.
6 - Open a command window where you unzipped Rigup 0.4, copy memoryDump.scpi into the same folder.
7 - In the command window do: "rigup ds2072a memoryDump.scpi"
This will produce an output something like:
rigup ds2072a - Version 0.4
Serial number: DSxxxxx
NSEH: JPJQLFK-G3QNRLU-WFFFZMD-xxxxxxx All options, no bandwidth upgrade
NSER: 8NXBL2U-JE2LZL7-9NEN5XK-xxxxxxx All options, bandwidth 100 MHz
NSEQ: R939MMG-NR63H25-9H993PX-xxxxxxx All options, bandwidth 200 MHz
NS8H: G2YRFYX-D589HNR-4K8YW3H-xxxxxxx All options, bandwidth 300 MHz
8 - rigup scan MyKeys memoryDump.scpi
This will write your keys to the file "MyKeys".
9 - rigup license MyKeys NS8N
This produces an output something like:
5P89ZX7-LYMCTCS-P4PQ792-xxxxxxx (NS8N = 0x1C0C3)
10 - Run RigolBildschirmkopie.exe again, click Device>Select>Search>Select (again).
11 - Click Device>SCPI-Command, then send & receive:
:SYSTem:OPTion:INSTall <key to the right of NSEQ in step 7>
The key (from step 7) MUST have the dashes removed.
For example:
:SYSTem:OPTion:INSTall R939MMGNR63H259H993PXxxxxxxx
At this point you should have all options + 200 MHz.
12 - Click Device>SCPI-Command, then send & receive:
:SYSTem:OPTion:INSTall <key from step 9>
Again, the key must have all dashes removed.
For example:
:SYSTem:OPTion:INSTall 5P89ZX7LYMCTCSP4PQ792xxxxxxx
That's it; you should have 300 MHz + all options now.
Maybe you can skip step 11 - I haven't tried it that way.
If you mess up, no problem. Just send ":SYSTem:OPTion:UNINSTall" and start over.
Only minor tweaks I can add are :
Step 2 : Connect to lan so the scope can obtain an IP address and be recognized on your ethernet.
Step 4 : Do Device>SCPI-Command, then Send & receive
":SYST:UTIL:READ? 1,33554432". Remove the first colon so that it now reads
Do Device>SCPI-Command, then Send & receive
"SYST:UTIL:READ? 1,33554432". Make sure there is a space after the question
mark.
Step 6 : After the command window is open use DOS commands "CD" to change the directory until you are in the correct one.
Step 11 : Do this step just as he notes. He suggests an option to leave it out, but others did not get a complete install unless they did step 11 and then step 12.
Minor tweaks really from this newbie. Can't say enough about the knowledge brought together at the eevblog. As Dave Jones would say : AWESOME !!
Ivan:
Hello.
1) I have a problem with MSO1104Z.
2) I updated the program to 4.3 from the site.
3) I downloaded memory with 0x40000000 to 0x43ffffff
4) I downloaded rigup-0.4.1-mso1000z.zip archive from the site http://gotroot .ca/rigol/
and make all near Ubunta.
5) rigup scan gave out RC5KEY1 etc. SERIAL - coincided with my number.
6) rigup license gave out with 0x1C001 and 0x1C010 and 0x1C0FF keys and any doesn't approach.
It isn't sure, but during copying of jtag the oscilloscope blocked input of the password for 12 hours.
There can be in it a reason of failure and it is necessary to copy memory anew?
Memory 3 hours by means of ULINK were copied.
Please help to generate keys. The packed dump of memory is only 5 Mb.
BloodyCactus:
--- Quote from: miguelvp on May 29, 2015, 03:51:13 pm ---
--- Quote from: PeDre on May 29, 2015, 03:14:24 pm ---
--- Quote from: pascal_sweden on May 29, 2015, 01:27:43 pm ---Would be nice to really get this confirmed? I really hope SCPI works on both DS1000Z and MSO1000Z series.
--- End quote ---
Here are the SCPI commands of the firmware 00.04.02.SP4 (DS1074Z-S). I have not found any commands for reading the memory.
Peter
--- End quote ---
Strange no one looks for the programming manual:
http://www.batronix.com/pdf/Rigol/ProgrammingGuide/MSO1000Z_DS1000Z_ProgrammingGuide_EN.pdf
You are looking for WAVeform:DATA? (lowercase optional WAV:DATA? will work as well)
but you need to set things up first
--- End quote ---
thats because were not talking about SCPI commands to get waveform data, but the commands to read the system memory and basically do a raw dump of its internals.
Ivan:
--- Quote from: BloodyCactus on June 01, 2015, 07:39:32 pm ---
thats because were not talking about SCPI commands to get waveform data, but the commands to read the system memory and basically do a raw dump of its internals.
--- End quote ---
100% - not work. MS1104z isn't present the response on: SYST:UTIL:READ?
But I found out that it is possible to prolong a trial till 62 o'clock for all options rigup license 0x9C001 ... 0x9C004 as 0x1C001 doesn't work for me.
Navigation
[0] Message Index
[#] Next page
[*] Previous page
Go to full version