Author Topic: Sniffing the Rigol's internal I2C bus  (Read 1923714 times)

0 Members and 1 Guest are viewing this topic.

Offline alank2

  • Super Contributor
  • ***
  • Posts: 2196
Re: Sniffing the Rigol's internal I2C bus
« Reply #1625 on: November 30, 2013, 02:57:33 pm »
So for people who've installed the custom ds4000 firmware, does your system info show a different model after unloading/reloading a key?
 

Offline AndersAnd

  • Frequent Contributor
  • **
  • Posts: 572
  • Country: dk
Re: Sniffing the Rigol's internal I2C bus
« Reply #1626 on: November 30, 2013, 04:29:07 pm »
connected Gen to DS2072(updatet) through a 50 Ohm Termination (which is also linear up to 1 GHZ)
my 3 dB Frequency was 344 Mhz
up from 344 Bandwith goes down dramaticaly and over 380 Mhz Scope does show frozen Signal and Frequency
What hardware version is your scope?
It would be nice if everyone doing BW tests wrote both hardware and firmware version, to see if there's any differences between for example HW ver. 1.xx and 2.xx.
And for example if they use a modded 350 MHZ or 500 MHz firmware.
 

Offline oe6kyg

  • Newbie
  • Posts: 5
Re: Sniffing the Rigol's internal I2C bus
« Reply #1627 on: November 30, 2013, 06:02:33 pm »
system info shows  DS2202
Software 00.01.01
Hardware 2.00

did Update to 200mhz
 

Offline AndersAnd

  • Frequent Contributor
  • **
  • Posts: 572
  • Country: dk
Re: Sniffing the Rigol's internal I2C bus
« Reply #1628 on: November 30, 2013, 06:06:06 pm »
system info shows  DS2202
Software 00.01.01
Hardware 2.00

did Update to 200mhz
So you didn't use any of cybernet's custom firmwares but only did a keygen upgrade to 200 MHz and you measured BW was still 344 Mhz?
 

Offline cosmos

  • Regular Contributor
  • *
  • Posts: 110
  • Country: 00
Re: Sniffing the Rigol's internal I2C bus
« Reply #1629 on: November 30, 2013, 06:09:51 pm »
So for people who've installed the custom ds4000 firmware, does your system info show a different model after unloading/reloading a key?

I did not have to do anything to the installed (riglol generated) keys and they all stayed.
The model number was still DS4014.
 

Offline alank2

  • Super Contributor
  • ***
  • Posts: 2196
Re: Sniffing the Rigol's internal I2C bus
« Reply #1630 on: November 30, 2013, 07:25:43 pm »
I did not have to do anything to the installed (riglol generated) keys and they all stayed.
The model number was still DS4014.

This may have already been asked - do you see the bandwidth options under each channel now?  (20M, 100M, 200M).

If you unload/reload your key you might possibly get the DS4054 label.  (no guarantees, it might be taking a risk to try).
 

Offline Gallymimus

  • Regular Contributor
  • *
  • Posts: 178
  • Country: us
Re: Sniffing the Rigol's internal I2C bus
« Reply #1631 on: November 30, 2013, 07:32:26 pm »

This may have already been asked - do you see the bandwidth options under each channel now?  (20M, 100M, 200M).

If you unload/reload your key you might possibly get the DS4054 label.  (no guarantees, it might be taking a risk to try).

Yes, asked and answered a few pages ago.

yes BW options are now: OFF, 20M, 100M, 200M

selecting 100M I get about the same rise and fall as I had before (~2ns).
selecting 200M I get around 1.5ns
selecting OFF I get mostly 1.28ns rise and 1.16ns fall (for the others it also like that with slightly lower number for fall time)
If I measure with cursors I get the same results (knowing that the IO is driven from 2.5V rails I can set the 10% and 90% referred to that)
« Last Edit: November 30, 2013, 07:40:25 pm by Gallymimus »
 

Offline Co6aka

  • Supporter
  • ****
  • Posts: 303
  • Country: us
Re: Sniffing the Rigol's internal I2C bus
« Reply #1632 on: November 30, 2013, 07:35:44 pm »
If you unload/reload your key you might possibly get the DS4054 label.

I already did. It (still) doesn't. Not likely possible it seems.
Co6aka says, "BARK! and you have no idea how humans will respond."
 

Offline Co6aka

  • Supporter
  • ****
  • Posts: 303
  • Country: us
Re: Sniffing the Rigol's internal I2C bus
« Reply #1633 on: November 30, 2013, 07:55:01 pm »
The input of the DSA815 is MUCH more accurate than the output...

FWIW...

I have one of these: http://www.home.agilent.com/en/pd-1000004297%3Aepsg%3Apro-pn-E4438C/esg-vector-signal-generator
And one of these: http://www.aeroflex.com/ats/products/product/Communications_Test/Radio_Test_Sets_-_PMR_Test/2948B_Comm_Monitor~4.html
And one of these: http://www.minicircuits.com/pdfs/PWR-4GHS.pdf

But I'm currently in heavy-construction mode :( otherwise I'd already have posted the verdict. I should be able to run and document some definitive tests by the end of the week. Unless someone beats me to the :box: punch.

Forgot to add: I also have a DSA1030A-TG3, which while an OK piece of kit, wasn't all that accurate out-of-the-box. (At least according to my other big guns, which are all calibrated.)
« Last Edit: November 30, 2013, 08:03:17 pm by Co6aka »
Co6aka says, "BARK! and you have no idea how humans will respond."
 

Offline Co6aka

  • Supporter
  • ****
  • Posts: 303
  • Country: us
Re: Sniffing the Rigol's internal I2C bus
« Reply #1634 on: December 01, 2013, 03:03:26 am »
Alright... Curiosity got the better of me, and since most fortunately I don't have to deal with the incessant nagging of a female, I set up some gear on the kitchen table:

Sig-gen: E4438C
RF power meter: PWR-4GHS
Cable: Some kind of funky 6GHz-rated flexible stuff with Huber-Suhner silver/gold connectors.
Unfortunately I don't have a BNC-female to N-female adaptor, so I had to improvise. (Apparent adapter loss, about 0.1dBm at 50 to about 0.2dBm at 1G, is "calibrated out" of my figures.) Everything "warmed up" for about 90 minutes; ambient temp was pretty stable at 22.5 degrees C.

Using a pure unmodulated sine wave carrier, I "calibrated" the E4438C and cable at 50, 100, 200, 300, 400, 500, 600, 700, 800, 900, and 1000MHz, for almost exactly 0dBm. (The smallest steps the E4438C can do is 0.02dBm, so...) Accuracy stats for the power meter are on MiniCircuits site. (FWIW, according to the power meter, the E4438C is "off" +0.08dBm at 50MHz, which gradually changes to +0.22dBm at 1000MHz.)

Set up the DS4014 for 50-Ohm inputs and no BW limit. Here are the measured RMS voltages...

50MHz: 223mV
100MHz: 221mV
200MHz: 219mV
300MHz: 214mV
400MHz: 212mV
500MHz: 207mV
600MHz: 179mV
700MHz: 149mV
800MHz: 121mV
900MHz: 91mV
1000MHz: 58mV

So now yous guyz could do da math, I'm...  :=\  (Fuhgeddaboudit!)

(-3dB point about 650MHz)

PS- All four channels were within a mV of each other.
« Last Edit: December 01, 2013, 03:08:05 am by Co6aka »
Co6aka says, "BARK! and you have no idea how humans will respond."
 

Offline Gallymimus

  • Regular Contributor
  • *
  • Posts: 178
  • Country: us
Re: Sniffing the Rigol's internal I2C bus
« Reply #1635 on: December 01, 2013, 03:30:04 am »
-3db at about 157mV or ~650MHz.  Seems kinda high.

Plot of Co6aka's data for reference attached.  Thanks for taking those measurements man! 

:-+         

edit: fixed incorrect frequency axis label  |O
« Last Edit: December 01, 2013, 05:36:32 am by Gallymimus »
 

Offline Rigol-Friend

  • Contributor
  • Posts: 35
  • Country: de
Re: Sniffing the Rigol's internal I2C bus
« Reply #1636 on: December 01, 2013, 04:58:32 am »
Gallymimus:

There is a small mistake in your plot: Frequency...
My english is VERY poor, sorry. I learned in school, about more than 55 years ago.

But I'am a happy owner of Rigol DSA815-TG with all options + DS2302 (was DS2072) + DG4202 (was DG4062)
Mega thanks to the developers of the key-generator ! Especially to CYBERNET with his brilliant brain !
 

Offline Gallymimus

  • Regular Contributor
  • *
  • Posts: 178
  • Country: us
Re: Sniffing the Rigol's internal I2C bus
« Reply #1637 on: December 01, 2013, 05:29:10 am »
Gallymimus:

There is a small mistake in your plot: Frequency...

Crud, I'll fix that, thanks

edit: Fixed
« Last Edit: December 01, 2013, 05:35:26 am by Gallymimus »
 

Offline Abdu

  • Newbie
  • Posts: 5
Re: Sniffing the Rigol's internal I2C bus
« Reply #1638 on: December 01, 2013, 08:07:05 am »
DS4014 frequency response based on Co6aka measurements.
 

Offline oe6kyg

  • Newbie
  • Posts: 5
Re: Sniffing the Rigol's internal I2C bus
« Reply #1639 on: December 01, 2013, 08:33:38 am »
So you didn't use any of cybernet's custom firmwares but only did a keygen upgrade to 200 MHz and you measured BW was still 344 Mhz?

that is what i measured
 

Offline Power Designer

  • Newbie
  • Posts: 3
Re: Sniffing the Rigol's internal I2C bus
« Reply #1640 on: December 01, 2013, 08:43:00 am »
Hello,

I got a brand new unmodified DS2202_A_. So I would like to help to enhance the situation...  :-DD

I don't have mature experience in hacking this sort of stuff. How can I help you guys? Are there any pointers how to create a memory dump from this beast? Where to send the dump?  :-//

Please don't hesitate do contact me with your requests...  :-+

I too now have a DS2202_A Rigol Oscilloscope. I purchased this online, was meant to be a DS2202, but I was upgraded to this unit as delivery was taking too long. I suspect this one simply supersedes the DS2202, as it is exactly the same, but includes a 50 Ohm impedance option, and CAN bus decoding! This really tips the scale for me on an already very fine piece of test gear. Being a hobbyist, I could not afford the typically more expensive 'scopes that we use at work (Tektronix) and I am very pleased with this purchase. A very well made scope, along with all the bells and whistles. But enough about that, I have tried to some of the solutions here (IE install NI runtime and DS tools etc) to try and get the options installed but they don't work (doesn't surprise me, the guys here appear to have done such a good job at getting past such measures, some changes by Rigol were inevitable).

Being such a new scope, nobody has probably had the time/opportunity to take a look under the firmware hood of this scope. Has anybody had any success with the option keys on this scope yet? I might have missed something on the forum. If not, can I help in some way? I know you were asking for a .GEL file for the firmware, but I was unsuccessful in locating firmware upgrades on Rigol's scopes. Perhaps I have to work through the dealer. Anyway, assistance is appreciated, I would love to have all the features (especially trigger features) enabled, as they can be extremely useful at times, but my budget is already blown and there is no way I can go parting with hundreds of dollars for these options.
 

Offline AndersAnd

  • Frequent Contributor
  • **
  • Posts: 572
  • Country: dk
Re: Sniffing the Rigol's internal I2C bus
« Reply #1641 on: December 01, 2013, 09:44:57 am »
Being such a new scope, nobody has probably had the time/opportunity to take a look under the firmware hood of this scope. Has anybody had any success with the option keys on this scope yet?
No, as mentioned earlier the private key seems to have been changed for DS2000A, so none of the DS2000 keys works for DS2000A.

If not, can I help in some way?
As mentioned earlier, do a JTAG memory dump.

I know you were asking for a .GEL file for the firmware, but I was unsuccessful in locating firmware upgrades on Rigol's scopes. Perhaps I have to work through the dealer.
As mentioned earlier, there doesn't seem to be any firmware updates available for DS2000A yet, but of course it doesn't hurt to ask again, maybe a new one has come out now.
 

Offline StepDIR

  • Newbie
  • Posts: 4
Re: Sniffing the Rigol's internal I2C bus
« Reply #1642 on: December 01, 2013, 05:31:58 pm »
Can someone give me step by step instructions for upgrading the firmware on a DS2072?

I am expecting the CH1 light on while upgrading and then all lights on when complete.  My DS2072 goes immediately to all lights on with no upgrade.
 

Offline marmad

  • Super Contributor
  • ***
  • Posts: 2979
  • Country: aq
    • DaysAlive
Re: Sniffing the Rigol's internal I2C bus
« Reply #1643 on: December 01, 2013, 05:48:25 pm »
Can someone give me step by step instructions for upgrading the firmware on a DS2072?

I am expecting the CH1 light on while upgrading and then all lights on when complete.  My DS2072 goes immediately to all lights on with no upgrade.
Bottom of this post.
 

Offline StepDIR

  • Newbie
  • Posts: 4
Re: Sniffing the Rigol's internal I2C bus
« Reply #1644 on: December 01, 2013, 05:54:27 pm »
Thanks Marmad but that is what I have been doing and it doesn't load.  I'll keep researching maybe someone else is having this problem.
 

Offline marmad

  • Super Contributor
  • ***
  • Posts: 2979
  • Country: aq
    • DaysAlive
Re: Sniffing the Rigol's internal I2C bus
« Reply #1645 on: December 01, 2013, 06:00:08 pm »
Thanks Marmad but that is what I have been doing and it doesn't load.  I'll keep researching maybe someone else is having this problem.

Reformat the USB stick you're using and/or try a different USB stick.
 

Offline Gallymimus

  • Regular Contributor
  • *
  • Posts: 178
  • Country: us
Re: Sniffing the Rigol's internal I2C bus
« Reply #1646 on: December 01, 2013, 06:00:43 pm »
Thanks Marmad but that is what I have been doing and it doesn't load.  I'll keep researching maybe someone else is having this problem.

Did you try a different flash drive?  Some people have had issues with large drives or certain brands.  You might just try a few different blank drives.
 

Offline SeanB

  • Super Contributor
  • ***
  • Posts: 16366
  • Country: za
Re: Sniffing the Rigol's internal I2C bus
« Reply #1647 on: December 01, 2013, 06:06:18 pm »
Definitely use a drive under 4G, preferably an older one of under 1G. I keep some older ones around because older firmware will not support large drives reliably or at all.
 

Offline staze

  • Frequent Contributor
  • **
  • Posts: 820
  • Country: us
  • I _might_ have a problem...
    • Everybody Staze...
Re: Sniffing the Rigol's internal I2C bus
« Reply #1648 on: December 01, 2013, 06:08:24 pm »
Some USB sticks don't work sometimes. I would try another.

Also, as for the checksum question, it would be good to have only to confirm the download and thumbdrive copy are intact. It at least cuts out a sanity question.
“Give a man an answer, he’ll keep his job for a day. Teach a man to Google, and he’ll be employed for a lifetime”
 

Offline StepDIR

  • Newbie
  • Posts: 4
Re: Sniffing the Rigol's internal I2C bus
« Reply #1649 on: December 01, 2013, 06:29:37 pm »
I've tried two different USB sticks.  One is under 1G.
Tried FAT16 and FAT32.

Is the name of the GEL file important or just the fact that it is a GEL file enough?
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf